Commits - rpms/selinux-policy - CentOS Git server

This is not a role capability.

Dominick Grift • 14 years ago

b0e9aa

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

a3d20a

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 14 years ago

9a2fd7

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 14 years ago

50e857

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 14 years ago

f416df

Redundant: domtrans_pattern includes these.

Dominick Grift • 14 years ago

a87e8f

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 14 years ago

d0b756

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 14 years ago

5ebd1a

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2d102f

Tunable, optional, if(n)def block go below.

Dominick Grift • 14 years ago

60d27b

Use stream_connect_pattern.

Dominick Grift • 14 years ago

2e2a24

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

83029f

Add missing admin_patterns to rpcbind_admin.

Dominick Grift • 14 years ago

4ec4a4

Use stream connect pattern.

Dominick Grift • 14 years ago

ac13ad

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

ad4245

Reduntant: Is already included with userdom_search_user_home_dirs.

Dominick Grift • 14 years ago

87cd6e

Access to get attributes of target pppd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

4eaffd

Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

39e118

Allow pads_admin to search parent directories to be able to interact with pads content.

Dominick Grift • 14 years ago

1215df

XML summary fix.

Dominick Grift • 14 years ago

d18313

Access to get attributes of target accountsd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

dcbbee

Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.

Dominick Grift • 14 years ago

b6d0a7

Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.

Dominick Grift • 14 years ago

eb12bc

Use the stream_connect_pattern.

Dominick Grift • 14 years ago

f386b9

Allow mpd_admin to manage mpd tmpfs content.

Dominick Grift • 14 years ago

c5e7db

Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.

Dominick Grift • 14 years ago

0ba923

Redundant: mpd_search_lib already includes files_search_var_lib.

Dominick Grift • 14 years ago

0ab415

Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.

Dominick Grift • 14 years ago

7d3493

Allow icecast_admin to ptrace and signal the icecast_t domain.

Dominick Grift • 14 years ago

aa5baa

This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.

Dominick Grift • 14 years ago

4b81a5

Permission to search proc_t directories is required to be able to read abrt state.

Dominick Grift • 14 years ago

7d36c9

Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.

Dominick Grift • 14 years ago

b36824

Replace some type statements by comma delimiters.

Dominick Grift • 14 years ago

cf152b

Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.

Dominick Grift • 14 years ago

47cf98

Type system_cronjob_var_run_t is not required here.

Dominick Grift • 14 years ago

5ecaac

Types crontab_exec_t, cron_spool_t and user_cron_spool_t are required here.

Dominick Grift • 14 years ago

beb9c3

Permission to search generic pid directories is included with files_pid_filetrans.

Dominick Grift • 14 years ago

d8d33a

Use ps_process_pattern to read state. Permission to seach proc_t directories is required to read automount state.

Dominick Grift • 14 years ago

0540e2

Type xenstored_var_run_t is required here.

Dominick Grift • 14 years ago

cb76ff

Type print_spool_t is not required here.

Dominick Grift • 14 years ago

8c0a06

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 14 years ago

3b0a9c

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

6dfe56

add labeling for /root/.debug

Dan Walsh • 14 years ago

43a033

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

d7f202

Fixes for vmware-host policy

Miroslav Grepl • 14 years ago

323c9f

Allow a couple of sandbox issues.

Dan Walsh • 14 years ago

c2dae9

Add labels for /lib/readahead.

Dan Walsh • 14 years ago

4251ae

Fix gnome_setattr_config_home

Dan Walsh • 14 years ago

5ef740

Fix some names in passenger policy

Dan Walsh • 14 years ago

3034a8

Move passenger policy to services

Miroslav Grepl • 14 years ago

94820e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

536f28

rpms / selinux-policy

Commits 2957

rpms / selinux-policy

Source Code

Commits 2957