Commits - rpms/selinux-policy - CentOS Git server

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

4b1644

XML summary fixes.

Dominick Grift • 14 years ago

3c484f

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

86f9f9

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

6bb4d4

This is a role capability.

Dominick Grift • 14 years ago

25e284

Tunable and optional policy goes below.

Dominick Grift • 14 years ago

f6bcb2

Use entry_file as entry_point to domain transition.

Dominick Grift • 14 years ago

b11ba4

Move system type alias statements to system declarations.

Dominick Grift • 14 years ago

28fdb8

Add file context specification for HOME_DIR/\.gitaliases. May not be required but cannot hurt either.

Dominick Grift • 14 years ago

b5d551

Use can_exec.

Dominick Grift • 14 years ago

618ce8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

1e9280

This is not a role capability.

Dominick Grift • 14 years ago

89bb44

Allow users to ptrace and send any signal to their bluetooth helper agent.

Dominick Grift • 14 years ago

dd0d45

Class is supposed to be fifo_file according to summary.

Dominick Grift • 14 years ago

2d6615

Use domtrans_pattern.

Dominick Grift • 14 years ago

eb0e0b

Use stream connect pattern.

Dominick Grift • 14 years ago

029369

Clean up (network) connect DB.

Dominick Grift • 14 years ago

9b2600

Boolean declarations go above.

Dominick Grift • 14 years ago

7fa5a6

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

c5eae5

This is a leftover from refpolicy implementation of this functionality.

Dominick Grift • 14 years ago

1b1f7d

No need for httpd_builtin_scripting to be set for httpd_t to be allowed to read files.

Dominick Grift • 14 years ago

bbdbce

Change this functionality to our implementation of this functionality.

Dominick Grift • 14 years ago

c53b75

Remove accedentlay added ~ files

Dan Walsh • 14 years ago

8c47ad

Add vnstat policy

Dan Walsh • 14 years ago

0a394b

Fixes for cluster policy

Miroslav Grepl • 14 years ago

be5142

Merge upstream

Dan Walsh • 14 years ago

14ffaf

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

a55bb5

This is a role capability.

Dominick Grift • 14 years ago

9c9e4c

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

0dacd0

Requires system_r role.

Dominick Grift • 14 years ago

23ac31

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2f94f4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

2de234

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

819518

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

dcf874

Use permission sets where possible.

Dominick Grift • 14 years ago

59c034

Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Dominick Grift • 14 years ago

ba6db0

XML summary ffixes.

Dominick Grift • 14 years ago

b35d25

Search parent directory to be able to interact with target content.

Dominick Grift • 14 years ago

f92662

Allow users to ptrace and send any kind of signal to spamassassin agents.

Dominick Grift • 14 years ago

4ff4dd

This type is not required here.

Dominick Grift • 14 years ago

c5cadd

This is not a role capability.

Dominick Grift • 14 years ago

b0e9aa

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

a3d20a

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 14 years ago

9a2fd7

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 14 years ago

50e857

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 14 years ago

f416df

Redundant: domtrans_pattern includes these.

Dominick Grift • 14 years ago

a87e8f

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 14 years ago

d0b756

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 14 years ago

5ebd1a

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2d102f

Tunable, optional, if(n)def block go below.

Dominick Grift • 14 years ago

60d27b

Use stream_connect_pattern.

Dominick Grift • 14 years ago

2e2a24

rpms / selinux-policy

Commits 3028

rpms / selinux-policy

Source Code

Commits 3028