rpms / selinux-policy

Clone
Source Code
GIT

Commits 3140

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.
Dominick Grift • 14 years ago  
71f455
Use permission sets where possible.
Dominick Grift • 14 years ago  
7d1f56
XML summary fixes.
Dominick Grift • 14 years ago  
783213
Redundant brace nothing to expand here.
Dominick Grift • 14 years ago  
a25335
Tunable, optional and if(n)def blocks go below.
Dominick Grift • 14 years ago  
478149
Source is x_domain and not xserver_t. Moving to x_domain local policy.
Dominick Grift • 14 years ago  
e2d9aa
The process and capability IPC goes on top of local policy.
Dominick Grift • 14 years ago  
568349
Redundant: Included userdom_user_home_content already has this.
Dominick Grift • 14 years ago  
daed45
Remove stray semi-colon.
Dominick Grift • 14 years ago  
6aa632
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
aaf8a6
Reduntant: Included init_daemon_domain already has this.
Dominick Grift • 14 years ago  
8b858f
Redundant: Included inetd_service_domain has this.
Dominick Grift • 14 years ago  
ce6df0
Support network connect mysql DB.
Dominick Grift • 14 years ago  
fae947
There is already an optional policy block for daemontools. Join the two.
Dominick Grift • 14 years ago  
5492a1
Consistent ordering of declarations.
Dominick Grift • 14 years ago  
9444a1
Use domtrans_pattern where possible.
Dominick Grift • 14 years ago  
3c4ffa
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
1e2abe
This is no declaration. Moving to local policy.
Dominick Grift • 14 years ago  
39178a
These were duplicate TE rules.
Dominick Grift • 14 years ago  
09873e
Internal interaction goes before external interface calls.
Dominick Grift • 14 years ago  
1507cc
These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.
Dominick Grift • 14 years ago  
86225e
Replace type and attributes statements by comma delimiters where possible.
Dominick Grift • 14 years ago  
54590a
This is git system content.
Dominick Grift • 14 years ago  
730ec5
Search parent directory to be able to interact with targets content.
Dominick Grift • 14 years ago  
78ea2a
Merge branch 'base'
Dominick Grift • 14 years ago  
a5ea14
Make hal a dbus_system_domain
Dan Walsh • 14 years ago  
f4dc19
Use permission sets where possible.
Dominick Grift • 14 years ago  
ac5201
Replace type and attributes statements by comma delimiters where possible.
Dominick Grift • 14 years ago  
cefe9f
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
18f2a7
Use permission sets where possible.
Dominick Grift • 14 years ago  
0f7c40
Reduntant: Included init_daemon_domain already has this.
Dominick Grift • 14 years ago  
c2b2d2
The process and capability IPC goes on top of local policy.
Dominick Grift • 14 years ago  
1b39de
This permission is already allowed by included mmap_file_perms.
Dominick Grift • 14 years ago  
8725d6
Source is postdrop and not local. Moving to postdrop local policy section.
Dominick Grift • 14 years ago  
11ad1d
Internal interaction goes before external interface calls.
Dominick Grift • 14 years ago  
a7b40a
These are not declarations move them to local policy section.
Dominick Grift • 14 years ago  
f6e866
Redundant: All domains are allowed this access by default.
Dominick Grift • 14 years ago  
9bd884
Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.
Dominick Grift • 14 years ago  
6d1855
Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)
Dominick Grift • 14 years ago  
46d410
Reduntant: Included init_daemon_domain already has this.
Dominick Grift • 14 years ago  
a8fbd9
Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy
Dan Walsh • 14 years ago  
5d8259
Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
Dan Walsh • 14 years ago  
6ed3f1
XML summary fixes.
Dominick Grift • 14 years ago  
148e08
Use filetrans_pattern.
Dominick Grift • 14 years ago  
3a3e7d
Use stream connect pattern.
Dominick Grift • 14 years ago  
44f8aa
Redundant brace nothing to expand here.
Dominick Grift • 14 years ago  
8bde5e
Make git daemon executable file an application executable file.
Dominick Grift • 14 years ago  
96d3c0
Search parent directory to be able to interact with targets content.
Dominick Grift • 14 years ago  
08c4bb
These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.
Dominick Grift • 14 years ago  
38039a
Move calls to external interfaces below policy that governs internal interaction.
Dominick Grift • 14 years ago  
02687a
The capability IPC goes on top of the local policy.
Dominick Grift • 14 years ago  
d54202

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation