Commits - rpms/selinux-policy - CentOS Git server

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Dan Walsh • 14 years ago

f0a56e

Rebuild with latest code

Dan Walsh • 14 years ago

dd20c2

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f9346

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

d61823

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f256d

Remove duplicate filecontext for tcfmgr

Dan Walsh • 14 years ago

385392

Allow smbd_t sys_admin capability so samba can change quota on users.

Dan Walsh • 14 years ago

b3e761

- Fix fusefs handling

Dan Walsh • 14 years ago

0daa8b

Put back transition change

Dan Walsh • 14 years ago

7ed755

dontaudit sandbox sending signals to itself. This can happen when they are running at different mcs.

Dan Walsh • 14 years ago

3235a8

Fix mozilla_run_plugin interface

Dan Walsh • 14 years ago

039c65

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

596d86

Fix fusefs handling

Dan Walsh • 14 years ago

55e9f0

Fix version of mediawiki policy

Miroslav Grepl • 14 years ago

d4d13d

Alllow vpnc to be able to read /root/.cert

Miroslav Grepl • 14 years ago

136927

Add policy for mediawiki

Miroslav Grepl • 14 years ago

0def27

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

f73c8e

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

b1cbbd

Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

d1c6ba

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

991ee5

Allow unconfined_t to transition to alsa_t to make sure labels stay correct

Dan Walsh • 14 years ago

ddd1cc

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

fbd9ca

Allow sudo to send signals to any domains the user could have transitioned to.

Dan Walsh • 14 years ago

b45aaa

- Dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

5ae8fb

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

20f707

Allow nsplugin to sendto itself dgrams

Dan Walsh • 14 years ago

f6e966

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 14 years ago

79bff2

- Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

7c487e

Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

4e6b3f

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

fd595e

Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home

Dan Walsh • 14 years ago

521289

Allow haze to connect to yahoo chat and messenger port tcp:5050.

Dominick Grift • 14 years ago

e66aa7

Allow guest to run ps command on its processes by allowing it to read /proc

Dan Walsh • 14 years ago

24ea65

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

ab8faf

Allow firewallgui to sys_rawio which seems to be required to setup masqerading

Dan Walsh • 14 years ago

fb5248

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

e25799

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

f7307c

Allow rpc.quota to do quotamod

Dan Walsh • 14 years ago

7cfb93

Move c2s to run in jabber_router_t domain

Miroslav Grepl • 14 years ago

df488e

Merge branch 'base'

Dominick Grift • 14 years ago

ff9b16

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 14 years ago

71f455

Use permission sets where possible.

Dominick Grift • 14 years ago

7d1f56

XML summary fixes.

Dominick Grift • 14 years ago

783213

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

a25335

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

478149

Source is x_domain and not xserver_t. Moving to x_domain local policy.

Dominick Grift • 14 years ago

e2d9aa

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

568349

Redundant: Included userdom_user_home_content already has this.

Dominick Grift • 14 years ago

daed45

Remove stray semi-colon.

Dominick Grift • 14 years ago

6aa632

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

aaf8a6

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

8b858f

rpms / selinux-policy

Commits 4511

rpms / selinux-policy

Source Code

Commits 4511