Commits - rpms/selinux-policy - CentOS Git server

* Thu Jul 25 2024 Zdenek Pytela <zpytela@redhat.com> - 41.11-1

Zdenek Pytela • 8 months ago

814aa8

BuildRequires: groff

Petr Lautrbach • 8 months ago

e09911

* Mon Jul 22 2024 Zdenek Pytela <zpytela@redhat.com> - 41.10-1

Zdenek Pytela • 8 months ago

6a2602

Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

Fedora Release Engineering • 8 months ago

529e1f

* Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 41.9-1

Zdenek Pytela • 8 months ago

fd1451

Move %postInstall to %posttrans

Zdenek Pytela • 8 months ago

322c5d

Move %postInstall to %posttrans

Petr Lautrbach • 8 months ago

563cc5

Use `Requires(meta): (rpm-plugin-selinux if rpm-libs)`

Colin Walters • 8 months ago

b26304

Drop obsolete modules from config

Ondrej Mosnacek • 8 months ago

1f5817

Install dnf protected files only when policy is built

Petr Lautrbach • 8 months ago

249fe8

Also relabel files under /usr/sbin

Zbigniew Jędrzejewski-Szmek • 8 months ago

acac91

Manually bump Release

Zbigniew Jędrzejewski-Szmek • 8 months ago

87344f

Relabel files under /usr/bin to fix stale context after sbin merge

Zbigniew Jędrzejewski-Szmek • 8 months ago

187a2b

Merge -base and -contrib

Petr Lautrbach • 8 months ago

28bb9a

Drop the publicfile module

Zdenek Pytela • 8 months ago

1e6c28

* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1

Zdenek Pytela • 8 months ago

915415

* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1

Zdenek Pytela • 9 months ago

77fce7

* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1

Zdenek Pytela • 9 months ago

78f4e5

* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1

Zdenek Pytela • 9 months ago

ba644b

* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1

Zdenek Pytela • 9 months ago

26af38

Include "mode" in the %verify-not configuration for extra_varrun

Zdenek Pytela • 9 months ago

dc43ab

Set proper file equivalency for /bin, /sbin, and /usr/bin

Zdenek Pytela • 9 months ago

df27da

* Tue Jun 11 2024 Zdenek Pytela <zpytela@redhat.com> - 41.3-1

Zdenek Pytela • 9 months ago

dd75a9

Rearrange file context equivalency for systemd generators

Zdenek Pytela • 9 months ago

39ab36

Add sap to modules-targeted-contrib.conf

Zdenek Pytela • 9 months ago

a940ee

Use /usr/bin/bash in scripts as shebang

Zdenek Pytela • 9 months ago

538129

Install configuration files with 644 mode

Zdenek Pytela • 9 months ago

e7b4b0

Use RPM's build conditionals to control which policy types to build

Ondrej Mosnáček • 9 months ago

e0bfe2

* Fri Jun 07 2024 Zdenek Pytela <zpytela@redhat.com> - 41.2-1

Zdenek Pytela • 9 months ago

3dce5f

Trim changelog so that it starts at F40 time

Zdenek Pytela • 9 months ago

c887d9

Drop removeVarrunModule macro

Petr Lautrbach • 9 months ago

5e25a1

Move changelog to changelog and use %autochangelog

Petr Lautrbach • 9 months ago

cd2c1d

* Mon Jun 03 2024 Zdenek Pytela <zpytela@redhat.com> - 41.1-1

Zdenek Pytela • 9 months ago

b45fcc

Replace '%%' with '%' in the files section

Zdenek Pytela • 10 months ago

4eb6e9

* Thu May 30 2024 Zdenek Pytela <zpytela@redhat.com> - 40.21-1

Zdenek Pytela • 10 months ago

00c93c

Protect the targeted and mls subpackages

Zdenek Pytela • 10 months ago

0a65cc

Disable rpm verification for the extra_varrun module directory

Zdenek Pytela • 10 months ago

9fa10f

* Sun May 19 2024 Zdenek Pytela <zpytela@redhat.com> - 40.20-1

Zdenek Pytela • 10 months ago

19950b

* Fri May 17 2024 Zdenek Pytela <zpytela@redhat.com> - 40.19-1

Zdenek Pytela • 10 months ago

ee5c78

Correct some errors in the RPM macro changes from -2

Adam Williamson • 10 months ago

e66f4c

Update rpm configuration for the /var/run equivalency change

Zdenek Pytela • 10 months ago

1297d6

* Mon May 06 2024 Zdenek Pytela <zpytela@redhat.com> - 40.18-1

Zdenek Pytela • 10 months ago

4f281c

* Thu Apr 25 2024 Zdenek Pytela <zpytela@redhat.com> - 40.17-1

Zdenek Pytela • 11 months ago

68b5da

* Tue Apr 09 2024 Zdenek Pytela <zpytela@redhat.com> - 40.16-1

Zdenek Pytela • a year ago

14541e

split the tests into 2 groups

Milos Malik • a year ago

e413e2

Remove the tests directory so that TMT tests are run instead of STI

Zdenek Pytela • a year ago

1d3494

* Fri Mar 15 2024 Zdenek Pytela <zpytela@redhat.com> - 40.15-1

Zdenek Pytela • a year ago

1cbbaa

* Thu Mar 07 2024 Zdenek Pytela <zpytela@redhat.com> - 40.14-2

Zdenek Pytela • a year ago

f84cad

* Mon Feb 26 2024 Zdenek Pytela <zpytela@redhat.com> - 40.14-1

Zdenek Pytela • a year ago

7bc65a

* Mon Feb 12 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13-1

Zdenek Pytela • a year ago

0a14f8

* Tue Feb 06 2024 Zdenek Pytela <zpytela@redhat.com> - 40.12-1

Zdenek Pytela • a year ago

6dd5c7

* Mon Feb 05 2024 Zdenek Pytela <zpytela@redhat.com> - 40.11-1

Zdenek Pytela • a year ago

0ec128

* Wed Jan 24 2024 Zdenek Pytela <zpytela@redhat.com> - 40.10-1

Zdenek Pytela • a year ago

ac73b2

* Tue Jan 09 2024 Zdenek Pytela <zpytela@redhat.com> - 40.9-1

Zdenek Pytela • a year ago

443b71

Limit %selinux_requires to version, not release

Yaakov Selkowitz • a year ago

e46b92

* Thu Dec 21 2023 Zdenek Pytela <zpytela@redhat.com> - 40.8-1

Zdenek Pytela • a year ago

68923f

Add /bin = /usr/bin file context equivalency

Juraj Marcin • a year ago

701a31

* Wed Dec 13 2023 Zdenek Pytela <zpytela@redhat.com> - 40.7-1

Zdenek Pytela • a year ago

df4c66

* Tue Nov 28 2023 Zdenek Pytela <zpytela@redhat.com> - 40.6-1

Zdenek Pytela • a year ago

ce3921

Add afterburn to modules-targeted-contrib.conf

Juraj Marcin • a year ago

bced99

* Tue Nov 14 2023 Zdenek Pytela <zpytela@redhat.com> - 40.5-1

Zdenek Pytela • a year ago

648853

* Thu Oct 19 2023 Zdenek Pytela <zpytela@redhat.com> - 40.4-1

Zdenek Pytela • a year ago

2d11fc

Add coreos_installer to modules-targeted-contrib.conf

Zdenek Pytela • a year ago

8c0b46

* Tue Oct 17 2023 Zdenek Pytela <zpytela@redhat.com> - 40.3-1

Zdenek Pytela • a year ago

1cd26e

Add nvme_stas to modules-targeted-contrib.conf

Zdenek Pytela • a year ago

583057

Add plans/tests.fmf

Zdenek Pytela • a year ago

83b7e2

Add the virt_supplementary module to modules-targeted-contrib.conf

Zdenek Pytela • a year ago

6fbdf6

* Tue Oct 10 2023 Zdenek Pytela <zpytela@redhat.com> - 40.2-1

Zdenek Pytela • a year ago

2bde33

* Tue Oct 03 2023 Zdenek Pytela <zpytela@redhat.com> - 40.1-1

Zdenek Pytela • a year ago

995481

* Fri Sep 29 2023 Zdenek Pytela <zpytela@redhat.com> - 38.29-1

Zdenek Pytela • a year ago

11c92f

* Fri Sep 15 2023 Zdenek Pytela <zpytela@redhat.com> - 38.28-1

Zdenek Pytela • 2 years ago

4beb93

* Thu Aug 31 2023 Zdenek Pytela <zpytela@redhat.com> - 38.27-1

Zdenek Pytela • 2 years ago

16fcf3

* Thu Aug 24 2023 Zdenek Pytela <zpytela@redhat.com> - 38.26-1

Zdenek Pytela • 2 years ago

429619

* Fri Aug 11 2023 Zdenek Pytela <zpytela@redhat.com> - 38.25-1

Zdenek Pytela • 2 years ago

314088

* Fri Aug 04 2023 Zdenek Pytela <zpytela@redhat.com> - 38.24-1

Zdenek Pytela • 2 years ago

02754e

* Wed Aug 02 2023 Zdenek Pytela <zpytela@redhat.com> - 38.23-1

Zdenek Pytela • 2 years ago

c618bb

* Fri Jul 21 2023 Zdenek Pytela <zpytela@redhat.com> - 38.22-1

Zdenek Pytela • 2 years ago

1969a7

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Fedora Release Engineering • 2 years ago

4f8801

* Thu Jul 13 2023 Zdenek Pytela <zpytela@redhat.com> - 38.21-1

Zdenek Pytela • 2 years ago

3861cc

Trim changelog so that it starts at F37 time

Zdenek Pytela • 2 years ago

59a0d6

Define equivalency for /run/systemd/generator.early

Zdenek Pytela • 2 years ago

1ade1a

* Thu Jun 29 2023 Zdenek Pytela <zpytela@redhat.com> - 38.20-1

Zdenek Pytela • 2 years ago

321795

* Tue Jun 27 2023 Zdenek Pytela <zpytela@redhat.com> - 38.19-1

Zdenek Pytela • 2 years ago

0a1d56

Add the qatlib module

Zdenek Pytela • 2 years ago

33df87

Add the fdo module

Zdenek Pytela • 2 years ago

1726cd

Add the bootupd module

Zdenek Pytela • 2 years ago

fcf01b

* Sun Jun 25 2023 Zdenek Pytela <zpytela@redhat.com> - 38.18-1

Zdenek Pytela • 2 years ago

ca2263

Add the kafs module

Zdenek Pytela • 2 years ago

d71412

* Thu Jun 15 2023 Zdenek Pytela <zpytela@redhat.com> - 38.17-1

Zdenek Pytela • 2 years ago

38fd9a

Exclude container-selinux manpage from selinux-policy-doc

Zdenek Pytela • 2 years ago

995ad0

* Fri Jun 09 2023 Zdenek Pytela <zpytela@redhat.com> - 38.16-1

Zdenek Pytela • 2 years ago

37f102

* Tue May 30 2023 Zdenek Pytela <zpytela@redhat.com> - 38.15-1

Zdenek Pytela • 2 years ago

70fa3a

Add booth module

Zdenek Pytela • 2 years ago

c7eb7f

* Fri May 26 2023 Zdenek Pytela <zpytela@redhat.com> - 38.14-1

Zdenek Pytela • 2 years ago

f14863

* Mon May 22 2023 Zdenek Pytela <zpytela@redhat.com> - 38.13-1

Zdenek Pytela • 2 years ago

dfde7d

* Tue Apr 25 2023 Zdenek Pytela <zpytela@redhat.com> - 38.12-1

Zdenek Pytela • 2 years ago

9619eb

* Fri Apr 14 2023 Zdenek Pytela <zpytela@redhat.com> - 38.11-1

Zdenek Pytela • 2 years ago

10fd83

* Tue Apr 04 2023 Zdenek Pytela <zpytela@redhat.com> - 38.10-1

Zdenek Pytela • 2 years ago

1c3d52

* Fri Mar 24 2023 Zdenek Pytela <zpytela@redhat.com> - 38.9-1

Zdenek Pytela • 2 years ago

737e19

* Fri Mar 03 2023 Zdenek Pytela <zpytela@redhat.com> - 38.8-1

Zdenek Pytela • 2 years ago

4a6ce4

* Wed Feb 08 2023 Zdenek Pytela <zpytela@redhat.com> - 38.7-1

Zdenek Pytela • 2 years ago

0d20c3

* Mon Jan 30 2023 Zdenek Pytela <zpytela@redhat.com> - 38.6-1

Zdenek Pytela • 2 years ago

232d13

Pass -p 1 to %autosetup

Ondrej Mosnáček • 2 years ago

66b983

Use %autosetup instead of %setup

Ondrej Mosnáček • 2 years ago

a5f1fa

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Fedora Release Engineering • 2 years ago

c11eb8

* Fri Jan 13 2023 Zdenek Pytela <zpytela@redhat.com> - 38.5-1

Zdenek Pytela • 2 years ago

13e15d

* Mon Dec 19 2022 Zdenek Pytela <zpytela@redhat.com> - 38.4-1

Zdenek Pytela • 2 years ago

328d37

Do not run restorecon /etc/NetworkManager/dispatcher.d in targeted

Zdenek Pytela • 2 years ago

be364f

Trim changelog so that it starts at F35 time

Zdenek Pytela • 2 years ago

f8cec3

Add mptcpd and rshim modules

Zdenek Pytela • 2 years ago

6a5242

* Wed Dec 14 2022 Zdenek Pytela <zpytela@redhat.com> - 38.3-1

Zdenek Pytela • 2 years ago

5e55a1

* Tue Dec 06 2022 Zdenek Pytela <zpytela@redhat.com> - 38.2-1

Zdenek Pytela • 2 years ago

826337

Migrate License tag to SPDX

Petr Lautrbach • 2 years ago

4f5786

* Mon Nov 21 2022 Zdenek Pytela <zpytela@redhat.com> - 38.1-1

Zdenek Pytela • 2 years ago

17a6cf

* Mon Oct 31 2022 Zdenek Pytela <zpytela@redhat.com> - 37.14-1

Zdenek Pytela • 2 years ago

544896

* Mon Oct 03 2022 Zdenek Pytela <zpytela@redhat.com> - 37.13-1

Zdenek Pytela • 2 years ago

c9f58f

Remove "ipa = module" from modules-targeted-contrib.conf

Zdenek Pytela • 2 years ago

bee780

Remove "cockpit = module" from modules-targeted-contrib.conf

Zdenek Pytela • 2 years ago

faefd4

* Thu Sep 22 2022 Zdenek Pytela <zpytela@redhat.com> - 37.12-1

Zdenek Pytela • 2 years ago

dde90d

Do not run restorecon /etc/NetworkManager/dispatcher.d in mls and minimum

Zdenek Pytela • 2 years ago

0f27d9

* Wed Sep 14 2022 Zdenek Pytela <zpytela@redhat.com> - 37.11-1

Zdenek Pytela • 2 years ago

d02146

Make dependency on rpm-plugin-selinux unordered

Petr Lautrbach • 2 years ago

2a4b30

* Fri Sep 02 2022 Zdenek Pytela <zpytela@redhat.com> - 37.10-1

Zdenek Pytela • 2 years ago

9a58e6

* Thu Aug 11 2022 Zdenek Pytela <zpytela@redhat.com> - 37.9-1

Zdenek Pytela • 2 years ago

5ac843

* Mon Aug 01 2022 Zdenek Pytela <zpytela@redhat.com> - 37.8-1

Zdenek Pytela • 2 years ago

1ccfff

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Fedora Release Engineering • 2 years ago

666bf0

* Thu Jul 14 2022 Zdenek Pytela <zpytela@redhat.com> - 37.7-1

Zdenek Pytela • 2 years ago

7ffa63

* Wed Jun 29 2022 Zdenek Pytela <zpytela@redhat.com> - 37.6-1

Zdenek Pytela • 2 years ago

730af9

Require policycoreutils >= 3.4-1

Zdenek Pytela • 2 years ago

e0b2bb

Add a script for enclosing interfaces in ifndef statements

Vit Mojzis • 2 years ago

5eda2e

Disable rpm verification on interface_info

Vit Mojzis • 2 years ago

193d30

* Wed Jun 22 2022 Zdenek Pytela <zpytela@redhat.com> - 37.5-1

Zdenek Pytela • 2 years ago

53d2cb

Run restorecon for nm-dispatcher directory only if it exists

Zdenek Pytela • 2 years ago

7104f7

* Tue Jun 07 2022 Zdenek Pytela <zpytela@redhat.com> - 37.4-1

Zdenek Pytela • 2 years ago

75ed72

* Fri May 27 2022 Zdenek Pytela <zpytela@redhat.com> - 37.3-1

Zdenek Pytela • 2 years ago

f69f4a

* Fri May 06 2022 Zdenek Pytela <zpytela@redhat.com> - 37.2-1

Zdenek Pytela • 2 years ago

fccb37

Run restorecon with "-i" not to report errors

Zdenek Pytela • 2 years ago

59a2a4

* Mon May 02 2022 Zdenek Pytela <zpytela@redhat.com> - 37.1-1

Zdenek Pytela • 2 years ago

0e9b08

Users have to be generated is policy/users to make 3.4 userspace happy

Petr Lautrbach • 2 years ago

936c0d

* Tue Apr 26 2022 Zdenek Pytela <zpytela@redhat.com> - 36.8-1

Zdenek Pytela • 2 years ago

af1a50

* Thu Apr 21 2022 Zdenek Pytela <zpytela@redhat.com> - 36.7-3

Zdenek Pytela • 2 years ago

23fa4e

Relabel explicitly some dirs in %posttrans scriptlets

Zdenek Pytela • 2 years ago

489937

Add stalld module to modules-targeted-contrib.conf

Zdenek Pytela • 2 years ago

8e3435

* Mon Apr 04 2022 Zdenek Pytela <zpytela@redhat.com> - 36.6-1

Zdenek Pytela • 2 years ago

f3ea95

* Fri Mar 18 2022 Zdenek Pytela <zpytela@redhat.com> - 36.5-1

Zdenek Pytela • 3 years ago

46273b

Add insights_client module to modules-targeted-contrib.conf

Zdenek Pytela • 3 years ago

e42de7

* Wed Feb 23 2022 Zdenek Pytela <zpytela@redhat.com> - 36.4-1

Zdenek Pytela • 3 years ago

20d8d1

Update specfile to use new policycoreutils

Zdenek Pytela • 3 years ago

a3ac25

* Thu Feb 17 2022 Zdenek Pytela <zpytela@redhat.com> - 36.3-1

Zdenek Pytela • 3 years ago

b10879

* Fri Feb 11 2022 Zdenek Pytela <zpytela@redhat.com> - 36.2-1

Zdenek Pytela • 3 years ago

652ddc

* Thu Feb 03 2022 Zdenek Pytela <zpytela@redhat.com> - 36.1-1

Zdenek Pytela • 3 years ago

a2b5a0

* Tue Feb 01 2022 Zdenek Pytela <zpytela@redhat.com> - 35.13-1

Zdenek Pytela • 3 years ago

7774d2

* Wed Jan 26 2022 Zdenek Pytela <zpytela@redhat.com> - 35.12-1

Zdenek Pytela • 3 years ago

742db0

* Wed Jan 19 2022 Zdenek Pytela <zpytela@redhat.com> - 35.11-1

Zdenek Pytela • 3 years ago

500380

Force a rebuild of policy unconditionally

Zdenek Pytela • 3 years ago

cb08cc

* Mon Jan 17 2022 Zdenek Pytela <zpytela@redhat.com> - 35.10-1

Zdenek Pytela • 3 years ago

b8cfdb

Connect triggerin to pcre2 instead of pcre

Petr Lautrbach • 3 years ago

b15718

* Wed Jan 12 2022 Zdenek Pytela <zpytela@redhat.com> - 35.9-1

Zdenek Pytela • 3 years ago

b3c781

* Thu Dec 23 2021 Zdenek Pytela <zpytela@redhat.com> - 35.8-1

Zdenek Pytela • 3 years ago

d0828e

* Fri Dec 10 2021 Zdenek Pytela <zpytela@redhat.com> - 35.7-1

Zdenek Pytela • 3 years ago

4bbbba

* Fri Nov 19 2021 Zdenek Pytela <zpytela@redhat.com> - 35.6-1

Zdenek Pytela • 3 years ago

16445d

* Thu Nov 04 2021 Zdenek Pytela <zpytela@redhat.com> - 35.5-1

Zdenek Pytela • 3 years ago

bc5db6

* Mon Oct 18 2021 Zdenek Pytela <zpytela@redhat.com> - 35.2-1

Zdenek Pytela • 3 years ago

510d46

* Thu Oct 07 2021 Zdenek Pytela <zpytela@redhat.com> - 35.1-1

Zdenek Pytela • 3 years ago

a38b01

* Thu Sep 23 2021 Zdenek Pytela <zpytela@redhat.com> - 34.21-1

Zdenek Pytela • 3 years ago

792d74

* Thu Sep 16 2021 Zdenek Pytela <zpytela@redhat.com> - 34.20-1

Zdenek Pytela • 3 years ago

dead9d

* Thu Sep 09 2021 Zdenek Pytela <zpytela@redhat.com> - 34.19-1

Zdenek Pytela • 3 years ago

28ce29

* Tue Sep 07 2021 Zdenek Pytela <zpytela@redhat.com> - 34.18-1

Zdenek Pytela • 3 years ago

9bff62

* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-5

Zdenek Pytela • 3 years ago

936546

* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-4

Zdenek Pytela • 3 years ago

40faa1

* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-3

Zdenek Pytela • 3 years ago

6c25b6

* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-2

Zdenek Pytela • 3 years ago

600126

Revert "* Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-2"

Zdenek Pytela • 3 years ago

95a4ba

* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-79

Zdenek Pytela • 3 years ago

c53bdc

* Thu Aug 12 2021 Zdenek Pytela <zpytela@redhat.com> - 34.16-1

Zdenek Pytela • 3 years ago

757d64

* Fri Aug 06 2021 Zdenek Pytela <zpytela@redhat.com> - 34.15-1

Zdenek Pytela • 3 years ago

58dbb0

- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

Fedora Release Engineering • 3 years ago

418902

* Wed Jul 14 2021 Zdenek Pytela <zpytela@redhat.com> - 34.14-1

Zdenek Pytela • 3 years ago

fe7971

* Thu Jul 01 2021 Zdenek Pytela <zpytela@redhat.com> - 34.13-1

Zdenek Pytela • 3 years ago

4f56cd

* Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-2

Zdenek Pytela • 3 years ago

841754

Add a systemd service to check that SELinux is disabled properly

Ondrej Mosnacek • 3 years ago

fd6943

Add unowned dir to the macro

Michael Scherer • 3 years ago

a56317

* Mon Jun 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-1

Zdenek Pytela • 3 years ago

ed2eb3

* Wed Jun 09 2021 Zdenek Pytela <zpytela@redhat.com> - 34.11-1

Zdenek Pytela • 3 years ago

ef6e27

* Sun Jun 06 2021 Zdenek Pytela <zpytela@redhat.com> - 34.10-1

Zdenek Pytela • 3 years ago

a4fcad

* Thu May 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.9-1

Zdenek Pytela • 3 years ago

6b0b96

Remove temporary explicit /dev/nvme* relabeling

Zdenek Pytela • 3 years ago

cd4a08

* Thu May 20 2021 Zdenek Pytela <zpytela@redhat.com> - 34.8-1

Zdenek Pytela • 3 years ago

80410e

* Thu May 13 2021 Zdenek Pytela <zpytela@redhat.com> - 34.7-1

Zdenek Pytela • 3 years ago

30f8c0

* Fri May 07 2021 Zdenek Pytela <zpytela@redhat.com> - 34.6-1

Zdenek Pytela • 3 years ago

4fecc6

* Tue May 04 2021 Zdenek Pytela <zpytela@redhat.com> - 34.5-1

Zdenek Pytela • 3 years ago

b900d6

* Tue Apr 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.4-1

Zdenek Pytela • 3 years ago

2b76eb

* Fri Apr 09 2021 Zdenek Pytela <zpytela@redhat.com> - 34.3-1

Zdenek Pytela • 3 years ago

ab4d60

* Fri Mar 26 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-8

Zdenek Pytela • 3 years ago

6ff328

* Fri Mar 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-7

Zdenek Pytela • 4 years ago

7e06a7

* Thu Mar 11 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-6

Zdenek Pytela • 4 years ago

77437e

* Wed Mar 03 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-5

Zdenek Pytela • 4 years ago

dd41f1

Relabel /dev/nvme* explicitly

Zdenek Pytela • 4 years ago

c7794d

* Wed Feb 24 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-4

Zdenek Pytela • 4 years ago

2faa5c

* Tue Feb 16 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-3

Zdenek Pytela • 4 years ago

aa1f53

* Mon Feb 15 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-2

Zdenek Pytela • 4 years ago

15dc30

* Thu Feb 11 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-1

Zdenek Pytela • 4 years ago

d558c4

* Sun Feb 07 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-18

Zdenek Pytela • 4 years ago

c7e90b

* Fri Feb 05 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-17

Zdenek Pytela • 4 years ago

c2d5eb

Use the rawhide branch instead of master

Zdenek Pytela • 4 years ago

557675

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

Fedora Release Engineering • 4 years ago

b0dd6c

Rebuild with SELinux userspace 3.2-rc1 release

Petr Lautrbach • 4 years ago

f38b38

Add /var/mnt equivalency to /mnt

Zdenek Pytela • 4 years ago

4f8342

Update specfile to not verify md5/size/mtime for active store files

Zdenek Pytela • 4 years ago

ce671c

* Fri Jan 8 18:41:06 CET 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-14

Zdenek Pytela • 4 years ago

d76e0b

* Thu Dec 17 20:07:23 CET 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-13

Zdenek Pytela • 4 years ago

d5b79a

Remove useless mkdir command from minimum build

Ondrej Mosnacek • 4 years ago

533a2f

Remove useless rm command from minimum build

Ondrej Mosnacek • 4 years ago

ecfabb

Remove unnecessary steps from targeted policy build

Ondrej Mosnacek • 4 years ago

167b05

* Tue Dec 15 16:24:44 CET 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-12

Zdenek Pytela • 4 years ago

fa7212

Add make to BuildRequires

Petr Lautrbach • 4 years ago

0f3b08

* Wed Dec 9 15:39:03 CET 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-11

Zdenek Pytela • 4 years ago

8d0284

Fix typos and grammar in README

Ondrej Mosnacek • 4 years ago

58fb34

* Thu Nov 26 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-10

Zdenek Pytela • 4 years ago

e94a38

Adapt specfile, make-rhat-patches, and README to contrib merge

Ondrej Mosnacek • 4 years ago

548766

Reword and clean up the README

Ondrej Mosnacek • 4 years ago

aebc05

* Tue Nov 24 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-9

Zdenek Pytela • 4 years ago

595a64

* Fri Nov 13 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-8

Zdenek Pytela • 4 years ago

05fb51

selinux-policy-3.14.7-7

Petr Lautrbach • 4 years ago

e88945

Clean up .gitignore

Ondrej Mosnacek • 4 years ago

4adda0

* Thu Oct 22 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-6

Zdenek Pytela • 4 years ago

4da7d1

Drop the "BuildRequires: gcc" line selinux-policy.spec

Zdenek Pytela • 4 years ago

a23148

Replace "Provides: selinux-policy-base" with "Provides: selinux-policy-any"

Zdenek Pytela • 4 years ago

4e04fa

Remove trailing whitespaces

Vit Mojzis • 4 years ago

fe2076

Change the package summary and description

Zdenek Pytela • 4 years ago

e99b0b

README is written in markdown - change extension to .md

Ondrej Mosnacek • 4 years ago

b867d5

Ensure targeted policy is installed by default

Ondrej Mosnacek • 4 years ago

4d9a7e

make-rhat-patches: Use shallow clone

Ondrej Mosnacek • 4 years ago

e042be

make-rhat-patches: Use default tmp directory

Ondrej Mosnacek • 4 years ago

d9d563

* Tue Oct 06 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-5

Zdenek Pytela • 4 years ago

577250

* Fri Sep 25 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-4

Zdenek Pytela • 4 years ago

5a32f5

Update /etc/selinux/config for removal of runtime SELinux disable

Ondrej Mosnacek • 4 years ago

4cdd6f

* Mon Sep 21 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-3

Zdenek Pytela • 4 years ago

4b8bcb

* Fri Sep 18 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-2

Zdenek Pytela • 4 years ago

2cf6b0

* Tue Sep 08 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-1

Zdenek Pytela • 4 years ago

129e6f

* Mon Aug 24 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-25

Zdenek Pytela • 4 years ago

491bb8

test-reboot.yml: test.log is mandatory, improve results format

Petr Lautrbach • 4 years ago

74e5e4

Add a basic sanity reboot test collecting AVCs

Petr Lautrbach • 4 years ago

8c3ddf

* Thu Aug 13 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-24

Zdenek Pytela • 4 years ago

8bda53

* Mon Aug 03 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-23

Zdenek Pytela • 4 years ago

01e3f0

* Thu Jul 30 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-22

Zdenek Pytela • 4 years ago

8394f6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

Fedora Release Engineering • 4 years ago

d77690

* Mon Jul 13 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-20

Lukas Vrabec • 4 years ago

0b0aa7

* Fri Jul 10 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-19

Zdenek Pytela • 4 years ago

33a296

* Tue Jul 07 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-18

Zdenek Pytela • 4 years ago

d1c7bc

* Fri Jun 26 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-17

Zdenek Pytela • 4 years ago

c04fec

Bump and build for scriptlet fix

Adam Williamson • 4 years ago

154654

scriptlets: always existence-check /etc/selinux/config

Adam Williamson • 4 years ago

69200e

* Thu Jun 04 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-15

Zdenek Pytela • 4 years ago

5cdd51

* Tue May 19 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-14

Zdenek Pytela • 4 years ago

111196

* Wed Apr 29 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-13

Zdenek Pytela • 4 years ago

6a3fec

Disable ipa_custodia before policy update

Vit Mojzis • 4 years ago

53368f

* Tue Apr 16 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-12

Zdenek Pytela • 4 years ago

b7b2c0

* Tue Mar 31 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-11

Zdenek Pytela • 4 years ago

9006b4

* Wed Mar 25 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-10

Zdenek Pytela • 4 years ago

08e09f

* Wed Mar 18 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-9

Zdenek Pytela • 5 years ago

099d40

* Fri Mar 13 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-8

Zdenek Pytela • 5 years ago

e37004

Extend use of %common_params

Ondrej Mosnacek • 5 years ago

7579dc

Drop unused seusers file

Ondrej Mosnacek • 5 years ago

feca8d

* Mon Mar 09 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.6-7

Zdenek Pytela • 5 years ago

30da7f

* Fri Feb 28 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-6

Lukas Vrabec • 5 years ago

eacc15

* Sat Feb 22 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-5

Lukas Vrabec • 5 years ago

6f3f72

* Tue Feb 18 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-4

Lukas Vrabec • 5 years ago

e0ee9a

Update changelog to descending chronological order

Lukas Vrabec • 5 years ago

48b6fc

* Sun Feb 16 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-3

Lukas Vrabec • 5 years ago

fc739f

* Sat Feb 15 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-2

Lukas Vrabec • 5 years ago

8c624e

* Sun Feb 16 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.6-1

Lukas Vrabec • 5 years ago

0270e1

* Fri Feb 07 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.5-24

Zdenek Pytela • 5 years ago

916c90

spec: Use RPM path macros more consistently

Ondrej Mosnacek • 5 years ago

2a989a

* Fri Jan 31 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.5-23

Zdenek Pytela • 5 years ago

4ee1df

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

Fedora Release Engineering • 5 years ago

6f9270

* Fri Jan 24 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.5-21

Zdenek Pytela • 5 years ago

07e568

Fix %post script failures in selinux-policy-*

Vit Mojzis • 5 years ago

ee6e28

* Mon Jan 13 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-20

Lukas Vrabec • 5 years ago

0f62f5

Remove all the "factory reset" stuff

Ondrej Mosnacek • 5 years ago

e4f809

* Fri Dec 20 2019 Zdenek Pytela <zpytela@redhat.com> - 3.14.5-19

Zdenek Pytela • 5 years ago

a9b321

Consolidate make parameters

Ondrej Mosnacek • 5 years ago

f76a9d

Remove unused file

Ondrej Mosnacek • 5 years ago

9fd145

Add missing sources

Lukas Vrabec • 5 years ago

d4e9a2

- Allow systemd to read all proc

Lukas Vrabec • 5 years ago

6ed257

* Thu Nov 28 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-18

Lukas Vrabec • 5 years ago

188eac

* Wed Nov 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-17

Lukas Vrabec • 5 years ago

f32fe3

* Thu Nov 21 2019 Zdenek Pytela <zpytela@redhat.com> - 3.14.5-16

Zdenek Pytela • 5 years ago

6f1a9f

* Thu Nov 14 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-15

Lukas Vrabec • 5 years ago

769469

* Wed Nov 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-14

Lukas Vrabec • 5 years ago

67a56d

* Wed Nov 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-13

Lukas Vrabec • 5 years ago

d1df00

Update rpm.macros file fomr the upstream repo

Lukas Vrabec • 5 years ago

72c428

Remove explicit requires from tests.yml

Petr Šplíchal • 5 years ago

58a31e

Update selinux-policy macros from upstream repo

Lukas Vrabec • 5 years ago

5e3b0e

* Sun Nov 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-12

Lukas Vrabec • 5 years ago

4faaca

Update the macros based on changes from upstream repo

Lukas Vrabec • 5 years ago

0c284f

Add /var/usrlocal equivalency rule

Jonathan Lebon • 5 years ago

3597bd

* Fri Oct 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-11

Lukas Vrabec • 5 years ago

d7e754

Add equivalence to /var/named/chroot/ /var

Lukas Vrabec • 5 years ago

9fb60e

- Update timedatex policy to add macros, more detail below

Lukas Vrabec • 5 years ago

03b04a

Fix permissions set on macro-expander tool.

Lukas Vrabec • 5 years ago

4a9509

* Fri Oct 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-9

Lukas Vrabec • 5 years ago

840e53

* Wed Oct 09 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-8

Lukas Vrabec • 5 years ago

39164c

* Wed Oct 09 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-7

Lukas Vrabec • 5 years ago

b4683c

* Fri Oct 04 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-6

Lukas Vrabec • 5 years ago

e84c9b

Update fixed sources from github

Lukas Vrabec • 5 years ago

a21f77

* Fri Sep 20 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-5

Lukas Vrabec • 5 years ago

c3cb5b

* Fri Sep 20 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-4

Lukas Vrabec • 5 years ago

361693

Make ipa_custodia policy active

Lukas Vrabec • 5 years ago

ecab8b

Change default value of use_virtualbox boolean

Lukas Vrabec • 5 years ago

05f418

* Fri Sep 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-3

Lukas Vrabec • 5 years ago

f1d354

Make stratisd policy active

Lukas Vrabec • 5 years ago

72de5a

* Wed Sep 04 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-2

Lukas Vrabec • 5 years ago

d2110e

* Tue Aug 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-1

Lukas Vrabec • 5 years ago

796124

* Tue Aug 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-31

Lukas Vrabec • 5 years ago

7bacb4

* Tue Aug 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-30

Lukas Vrabec • 5 years ago

bee0c0

* Wed Aug 07 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-29

Lukas Vrabec • 5 years ago

6e1369

* Tue Aug 06 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-28

Lukas Vrabec • 5 years ago

e89a7e

* Mon Aug 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-27

Lukas Vrabec • 5 years ago

2442d1

* Tue Jul 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-26

Lukas Vrabec • 5 years ago

077528

Make rrdcached policy active

Lukas Vrabec • 5 years ago

b711f6

* Fri Jul 26 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-25

Lukas Vrabec • 5 years ago

c8c754

Make timedatex module active

Lukas Vrabec • 5 years ago

024447

* Wed Jul 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-24

Lukas Vrabec • 5 years ago

9fad02

* Wed Jul 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-23

Lukas Vrabec • 5 years ago

9a1d06

* Mon Jul 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-22

Lukas Vrabec • 5 years ago

f57a61

Make macro-expander script executable

Lukas Vrabec • 5 years ago

8e8fb9

Add new sources

Lukas Vrabec • 5 years ago

0c72b2

* Tue Jun 18 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-21

Lukas Vrabec • 5 years ago

4d8c62

* Thu May 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-20

Lukas Vrabec • 5 years ago

191f6b

* Mon May 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-19

Lukas Vrabec • 5 years ago

46a244

Use parallel build where possible

Ondrej Mosnacek • 5 years ago

c134af

* Fri May 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-18

Lukas Vrabec • 5 years ago

4ce765

* Fri May 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-17

Lukas Vrabec • 5 years ago

fb7eb8

Update broken sources

Lukas Vrabec • 5 years ago

1938d6

* Fri May 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-16

Lukas Vrabec • 5 years ago

2a04dc

* Thu May 02 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-15

Lukas Vrabec • 5 years ago

a0e74c

* Fri Apr 26 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-14

Lukas Vrabec • 5 years ago

2c1356

Add missing sources

Lukas Vrabec • 5 years ago

ca2231

* Thu Apr 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-13

Lukas Vrabec • 5 years ago

267548

* Fri Apr 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-12

Lukas Vrabec • 5 years ago

a64329

* Fri Apr 12 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-11

Lukas Vrabec • 5 years ago

05bc3e

Fix OSCI gating.

Lukas Vrabec • 5 years ago

659364

Add check for config file consistency

Lukas Vrabec • 5 years ago

2e12c9

Revert "Add check for config file consistency"

Lukas Vrabec • 5 years ago

f1ed71

* Tue Apr 09 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-10

Lukas Vrabec • 5 years ago

cba3e9

* Mon Apr 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-9

Lukas Vrabec • 5 years ago

2809c7

Merge #18 `Add check for config file consistency`

Lukas Vrabec • 5 years ago

3da5a6

Update missing sources

Lukas Vrabec • 5 years ago

29b329

* Fri Apr 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-8

Lukas Vrabec • 5 years ago

47a224

Make active lsm module in MLS policy

Lukas Vrabec • 5 years ago

ca6e01

Fix some conflicting filename transition rules in the policy sources

Lukas Vrabec • 5 years ago

fe3eb5

* Wed Apr 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-7

Lukas Vrabec • 5 years ago

c4065f

Add macro-expander to sources during creating rhat patches

Lukas Vrabec • 6 years ago

4052eb

Comment macro-expander and container-selinux sources in spec file

Lukas Vrabec • 6 years ago

8ad346

Put macro expander to distgit sources

Lukas Vrabec • 6 years ago

b9e53a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 6 years ago

ba9052

* Sat Mar 23 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-6

Lukas Vrabec • 6 years ago

bccf0f

Merge #17 `Remove previous/ version of module directory`

Lukas Vrabec • 6 years ago

03abf4

Add check for config file consistency

Vit Mojzis • 6 years ago

7fd602

* Tue Mar 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-5

Lukas Vrabec • 6 years ago

7dd08a

Update wrong dates in changelog

Lukas Vrabec • 6 years ago

10d7e3

Remove previous/ version of module directory

Petr Lautrbach • 6 years ago

b73fcb

* Wed Mar 12 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-4

Lukas Vrabec • 6 years ago

a8da13

* Wed Feb 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-3

Lukas Vrabec • 6 years ago

43393b

Revert "Add check for config file consistency"

Lukas Vrabec • 6 years ago

31fb93

* Tue Feb 26 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-2

Lukas Vrabec • 6 years ago

c2043a

* Mon Feb 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-1

Lukas Vrabec • 6 years ago

8be35b

Merge #15 `Add check for config file consistency`

Lukas Vrabec • 6 years ago

0bd9f6

Add check for config file consistency

Vit Mojzis • 6 years ago

46c51e

Add missing sources

Lukas Vrabec • 6 years ago

3f88fc

* Thu Feb 14 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-22

Lukas Vrabec • 6 years ago

c3cce9

Merge #14 `Drop /var/home -> /home equivalency rule`

Lukas Vrabec • 6 years ago

e5e4a2

* Tue Feb 12 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-21

Lukas Vrabec • 6 years ago

37bb67

Drop /var/home -> /home equivalency rule

Jonathan Lebon • 6 years ago

c9e40e

* Sat Feb 02 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-20

Lukas Vrabec • 6 years ago

6fe0e8

Add missing sources

Lukas Vrabec • 6 years ago

5664a3

* Tue Jan 29 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-19

Lukas Vrabec • 6 years ago

ee38f3

Remove obsolete Group tag

Igor Gnatenko • 6 years ago

176790

* Tue Jan 15 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-18

Lukas Vrabec • 6 years ago

1d650f

Remove all domains from permissive domains, it looks these policies are tested already

Lukas Vrabec • 6 years ago

0071dc

* Fri Jan 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-17

Lukas Vrabec • 6 years ago

f1dd2f

* Fri Jan 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-16

Lukas Vrabec • 6 years ago

78bc21

Rename macro-expander.sh to macro-expander in dist-git repository

Lukas Vrabec • 6 years ago

3232d2

* Sun Dec 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-15

Lukas Vrabec • 6 years ago

cecdfc

Add macro-expander script to selinux-policy-devel package

Lukas Vrabec • 6 years ago

7d7414

* Fri Dec 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-14

Lukas Vrabec • 6 years ago

22bdc9

Make kpatch policy active

Lukas Vrabec • 6 years ago

4086d4

* Wed Nov 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-13

Lukas Vrabec • 6 years ago

70c776

* Sun Nov 04 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-12

Lukas Vrabec • 6 years ago

e4f858

Add missing sources from github

Lukas Vrabec • 6 years ago

38e2f9

* Sun Nov 04 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-11

Lukas Vrabec • 6 years ago

9fcbb6

* Tue Oct 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-10

Lukas Vrabec • 6 years ago

b602e5

* Mon Oct 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-9

Lukas Vrabec • 6 years ago

9b1e4d

* Sat Oct 13 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-8

Lukas Vrabec • 6 years ago

4b05ad

* Sat Oct 13 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-7

Lukas Vrabec • 6 years ago

146094

Fix typo bug in version

Lukas Vrabec • 6 years ago

729e95

* Tue Oct 09 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-6

Lukas Vrabec • 6 years ago

c88957

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 6 years ago

43c3b7

* Thu Oct 04 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-5

Lukas Vrabec • 6 years ago

ef7c75

Merge #11 `Spec: fix typo in Url field (introduced in 51dc83b2d)`

Lukas Vrabec • 6 years ago

efe083

Enable CI tests using the Standard Test Interface

Petr Šplíchal • 6 years ago

7939ee

Update make-rhat-patches.sh script to allow everyone to download SELinux policy sources

Lukas Vrabec • 6 years ago

735de0

* Mon Sep 24 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-4

Lukas Vrabec • 6 years ago

7e2366

* Thu Sep 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-3

Lukas Vrabec • 6 years ago

5d5eb8

* Thu Sep 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-2

Lukas Vrabec • 6 years ago

833e31

* Tue Aug 28 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-1

Lukas Vrabec • 6 years ago

046756

Add README file with build process of selinux-policy rpm package

Lukas Vrabec • 6 years ago

cb2fee

Fix https query to download policy sources

Lukas Vrabec • 6 years ago

5e55c3

* Fri Aug 10 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-32

Lukas Vrabec • 6 years ago

354ea1

* Tue Aug 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-31

Lukas Vrabec • 6 years ago

bb7c75

Make boltd policy active

Lukas Vrabec • 6 years ago

75a1d6

Add opafm_t domain and boltd_t domain to permissive domains SELinux module

Lukas Vrabec • 6 years ago

a33e81

Enable opafm policy module

Lukas Vrabec • 6 years ago

47801d

* Sun Jul 29 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-30

Lukas Vrabec • 6 years ago

da3bd2

* Wed Jul 25 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-29

Lukas Vrabec • 6 years ago

539110

* Wed Jul 18 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-28

Lukas Vrabec • 6 years ago

35bcef

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

Fedora Release Engineering • 6 years ago

9034dd

Remove needless use of %defattr

Jason Tibbitts • 6 years ago

91c8ed

Spec: fix typo in Url field (introduced in 51dc83b2d)

Jan Pokorný • 6 years ago

e7ec0c

Make ibacm policy active

Lukas Vrabec • 6 years ago

113644

* Wed Jun 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-26

Lukas Vrabec • 6 years ago

985fc6

Remove config.tgz from distgit and put configuration to policy sources on github

Lukas Vrabec • 6 years ago

5d84ad

Improve make-rhat-patches.sh for local development

Petr Lautrbach • 6 years ago

b71984

* Thu Jun 14 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-25

Lukas Vrabec • 6 years ago

f4debe

* Tue Jun 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-24

Lukas Vrabec • 6 years ago

1d35f9

Adding missing equivalency rules to be able do proper configuration of polyinstation

Lukas Vrabec • 6 years ago

afcdb0

* Wed Jun 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-23

Lukas Vrabec • 6 years ago

4cca30

* Wed Jun 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-22

Lukas Vrabec • 6 years ago

318acc

* Sat May 26 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-21

Lukas Vrabec • 6 years ago

58acce

* Thu May 24 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-20

Lukas Vrabec • 6 years ago

936415

* Tue May 22 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-19

Lukas Vrabec • 6 years ago

ee05a9

* Mon May 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-18

Lukas Vrabec • 6 years ago

e881d7

* Mon May 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-17

Lukas Vrabec • 6 years ago

844794

Fix typo bug in xserver SELinux module

Lukas Vrabec • 6 years ago

4d2de6

* Mon Apr 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-16

Lukas Vrabec • 6 years ago

a4ad07

Redirect also stdout to /dev/null to avoid printing anything during updating selinux-policy process

Lukas Vrabec • 6 years ago

0bbda1

* Sat Apr 28 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-15

Lukas Vrabec • 6 years ago

560c1c

Fix typo in spec file

Lukas Vrabec • 6 years ago

42d22b

* Fri Apr 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-14

Lukas Vrabec • 6 years ago

19c9a7

Update selinux policy macros to reflect the latest changes in

Lukas Vrabec • 6 years ago

5c9722

Make tangd policy active

Lukas Vrabec • 6 years ago

11e95e

* Thu Apr 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-13

Lukas Vrabec • 6 years ago

39a94e

* Sat Apr 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-12

Lukas Vrabec • 6 years ago

177851

* Thu Mar 29 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-11

Lukas Vrabec • 6 years ago

9762a5

* Mon Mar 26 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-10

Lukas Vrabec • 6 years ago

0ac635

Fedora Atomic host using for temp files /sysroot/tmp patch, we should label same as /tmp adding file context equivalence BZ(1559531)

Lukas Vrabec • 6 years ago

dd1594

* Sun Mar 25 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-9

Lukas Vrabec • 6 years ago

0dae2c

In Fedora 28, ganesha SELinux module is removed, for proper upgrade this

Lukas Vrabec • 6 years ago

67396b

* Wed Mar 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-8

Lukas Vrabec • 7 years ago

597a71

Update also sources

Lukas Vrabec • 7 years ago

1199c8

* Tue Mar 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-7

Lukas Vrabec • 7 years ago

a191eb

* Thu Mar 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-6

Lukas Vrabec • 7 years ago

859711

* Mon Mar 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-5

Lukas Vrabec • 7 years ago

529a51

* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4

Lukas Vrabec • 7 years ago

870fdb

Add forgotten sources file

Lukas Vrabec • 7 years ago

47ee5f

* Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-3

Lukas Vrabec • 7 years ago

3c49a8

* Thu Feb 22 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-2

Lukas Vrabec • 7 years ago

5a5985

* Wed Feb 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-1

Lukas Vrabec • 7 years ago

5b3d03

* Tue Feb 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-9

Lukas Vrabec • 7 years ago

3256f1

Merge #8 `Don't own %{_rpmconfigdir}`

Lukas Vrabec • 7 years ago

d1295b

List gcc in BuildRequires

Petr Lautrbach • 7 years ago

d89076

Remove %clean section

Igor Gnatenko • 7 years ago

f8cf03

Remove BuildRoot definition

Igor Gnatenko • 7 years ago

72d837

Escape macros in %changelog

Igor Gnatenko • 7 years ago

28c23c

* Thu Feb 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-7

Lukas Vrabec • 7 years ago

b22b1d

* Tue Feb 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-6

Lukas Vrabec • 7 years ago

00dcc1

Updated rpm.macros

Lukas Vrabec • 7 years ago

4caea7

* Tue Jan 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-5

Lukas Vrabec • 7 years ago

4b0a66

* Tue Jan 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-4

Lukas Vrabec • 7 years ago

e9c438

* Fri Jan 19 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-3

Lukas Vrabec • 7 years ago

e7bae0

Added missing container-selinux.tgz sources

Lukas Vrabec • 7 years ago

de6ed4

* Mon Jan 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-2

Lukas Vrabec • 7 years ago

72b2cd

Update new sources to reflect changes related to python3 dependency

Lukas Vrabec • 7 years ago

22c976

Commit removes big SELinux policy patches against tresys refpolicy.

Lukas Vrabec • 7 years ago

51dc83

* Mon Jan 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-310

Lukas Vrabec • 7 years ago

b99236

* Fri Jan 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-309

Lukas Vrabec • 7 years ago

af863d

* Thu Jan 04 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-308

Lukas Vrabec • 7 years ago

46f9f9

sandbox SELinux module is part ofd distribution policy and should have 100 priority

Lukas Vrabec • 7 years ago

d319e7

* Tue Dec 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-307

Lukas Vrabec • 7 years ago

73d728

Don't own %{_rpmconfigdir}

Jonathan Lebon • 7 years ago

66de8d

* Wed Dec 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-306

Lukas Vrabec • 7 years ago

270b64

Remove ganesha module from active modules

Lukas Vrabec • 7 years ago

a0b507

make-rhat-patches.sh - Ignore submodules when generating diff

Petr Lautrbach • 7 years ago

e55ea9

* Fri Nov 24 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-305

Lukas Vrabec • 7 years ago

617ff7

Add new rpm macro %{selinux_requires}

Lukas Vrabec • 7 years ago

723bc0

* Tue Nov 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-304

Lukas Vrabec • 7 years ago

64b72d

* Thu Nov 16 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-303

Lukas Vrabec • 7 years ago

2d6f40

Drop all binary files from selinux-policy package which are depended on build arch.

Lukas Vrabec • 7 years ago

673096

* Mon Nov 06 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-302

Lukas Vrabec • 7 years ago

ebb4e5

* Fri Nov 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-301

Lukas Vrabec • 7 years ago

4c1c74

Merge #3 `Do not ship file_contexts.bin file`

Lukas Vrabec • 7 years ago

ba9b73

Do not own /etc/selinux/<policytype>/file_contexts.homedirs.bin

Petr Lautrbach • 7 years ago

decccc

* Thu Oct 26 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-300

Lukas Vrabec • 7 years ago

59afa6

* Tue Oct 24 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-299

Lukas Vrabec • 7 years ago

791125

Add rpm-plugin-selinux dependency into selinux-policy package.

Lukas Vrabec • 7 years ago

2fff8f

* Sun Oct 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-298

Lukas Vrabec • 7 years ago

1014cb

Drop *.lst files from file list

Petr Lautrbach • 7 years ago

b442d0

Ship file_contexts.homedirs in store

Petr Lautrbach • 7 years ago

9e91a2

* Fri Oct 20 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-297

Lukas Vrabec • 7 years ago

465d71

* Tue Oct 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-296

Lukas Vrabec • 7 years ago

107eb8

Make conntrackd policy active

Lukas Vrabec • 7 years ago

67f96c

Fix order of installing selinux-policy-sandbox, because of depedencied in sandbox module, selinux-policy-targeted needs to be installed before selinux-policy-sandbox

Lukas Vrabec • 7 years ago

c862e9

Merge #4 `Disable SELinux on a policy type subpackage uninstall`

Lukas Vrabec • 7 years ago

d7e304

* Tue Oct 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-295

Lukas Vrabec • 7 years ago

2b83a4

* Mon Oct 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-294

Lukas Vrabec • 7 years ago

f2424e

Disable SELinux on a policy type subpackage uninstall

Petr Lautrbach • 7 years ago

7f4032

Do not ship file_contexts.bin file

Petr Lautrbach • 7 years ago

dba350

* Sun Oct 08 2017 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-293

Petr Lautrbach • 7 years ago

918bdd

Drop policyhelp utility

Petr Lautrbach • 7 years ago

00cdac

* Tue Oct 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-292

Lukas Vrabec • 7 years ago

75b189

* Tue Oct 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-291

Lukas Vrabec • 7 years ago

65c1dc

Switch default value of SELinux boolean httpd_graceful_shutdown to off.

Lukas Vrabec • 7 years ago

c5099d

Merge #2 `Remove trailing whitespace in default /etc/selinux/config`

Lukas Vrabec • 7 years ago

aab02e

* Fri Sep 29 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-290

Lukas Vrabec • 7 years ago

e8dfe6

Remove trailing whitespace in default /etc/selinux/config

Colin Walters • 7 years ago

5fdac7

* Wed Sep 27 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-289

Lukas Vrabec • 7 years ago

233534

setfiles command produce unnecessary output during selinux-policy package update. This patch redirect stdout of setfiles to /dev/null.

Lukas Vrabec • 7 years ago

858714

* Fri Sep 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-288

Lukas Vrabec • 7 years ago

12fd90

Remove all permissive domains, all domains looks stable

Lukas Vrabec • 7 years ago

be5288

* Fri Sep 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-287

Lukas Vrabec • 7 years ago

fc41f8

* Mon Sep 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-286

Lukas Vrabec • 7 years ago

7c7387

* Thu Sep 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-285

Lukas Vrabec • 7 years ago

655184

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

717712

Fix broken build

Lukas Vrabec • 7 years ago

a73b2e

Fix broken build

Lukas Vrabec • 7 years ago

d781e6

* Thu Sep 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-284

Lukas Vrabec • 7 years ago

83eed3

Use %{_sbindir} macro instead of full path

Lukas Vrabec • 7 years ago

21c53d

Add /var/lib/sepolgen/interface_info to %files section in selinux-policy-devel

Lukas Vrabec • 7 years ago

76e1d2

* Tue Sep 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283

Lukas Vrabec • 7 years ago

c3f53c

Fix typobug in mandb interface file

Lukas Vrabec • 7 years ago

63dd04

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-282

Lukas Vrabec • 7 years ago

4dfc5f

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-281

Lukas Vrabec • 7 years ago

65f16b

* Thu Sep 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-280

Lukas Vrabec • 7 years ago

b9bc43

* Tue Sep 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-279

Lukas Vrabec • 7 years ago

fcebe0

* Thu Aug 31 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-278

Lukas Vrabec • 7 years ago

313e17

* Mon Aug 28 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-277

Lukas Vrabec • 7 years ago

0c6eef

* Sat Aug 26 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-276

Lukas Vrabec • 7 years ago

2b14b6

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-275

Lukas Vrabec • 7 years ago

c1ce08

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-274

Lukas Vrabec • 7 years ago

b7314c

* Tue Aug 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-273

Lukas Vrabec • 7 years ago

681ffa

Fix broken gnome module

Lukas Vrabec • 7 years ago

b2ee09

* Tue Aug 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-272

Lukas Vrabec • 7 years ago

284401

Remove temporary fix labeling cockpit binary

Lukas Vrabec • 7 years ago

c6aaae

Update .gitignore

Troy Dawson • 7 years ago

d76574

Update .gitignore

Troy Dawson • 7 years ago

596178

* Mon Aug 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-271

Lukas Vrabec • 7 years ago

be2df8

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-270

Lukas Vrabec • 7 years ago

7a49a1

Fix dbus SELinux module

Lukas Vrabec • 7 years ago

5f4424

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

7e4fe9

Fix syntax error after merge with upstream

Lukas Vrabec • 7 years ago

ca40d1

Fix syntax error after merge with upstream

Lukas Vrabec • 7 years ago

595345

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

9a31f2

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-269

Lukas Vrabec • 7 years ago

ff3605

Fix bogus date for 3.13.1-267 changelog entry

Petr Lautrbach • 7 years ago

cf21eb

* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-268

Petr Lautrbach • 7 years ago

b65295

* Fri Aug 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-267

Lukas Vrabec • 7 years ago

631f95

Revert "Temporary fix while creating manpages using sepolicy is broken."

Petr Lautrbach • 7 years ago

0eccbd

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

Fedora Release Engineering • 7 years ago

f0d7fe

* Fri Jul 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-265

Lukas Vrabec • 7 years ago

4696e7

* Mon Jul 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264

Lukas Vrabec • 7 years ago

3622c0

* Tue Jul 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-263

Lukas Vrabec • 7 years ago

ab9bb0

Backport new selinux-policy rpm macros from github repo:

Lukas Vrabec • 7 years ago

37cf7d

* Mon Jul 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-262

Lukas Vrabec • 7 years ago

6fc635

* Fri Jun 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261

Lukas Vrabec • 7 years ago

959229

Fix commands how to create downstream patches

Lukas Vrabec • 7 years ago

c8dc45

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-260

Lukas Vrabec • 7 years ago

8c093f

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258

Lukas Vrabec • 7 years ago

fa95f2

* Thu Jun 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257

Lukas Vrabec • 7 years ago

7ac1cb

* Mon Jun 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256

Lukas Vrabec • 7 years ago

941d5a

* Thu May 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255

Lukas Vrabec • 7 years ago

6c0472

* Mon May 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254

Lukas Vrabec • 7 years ago

c1e28f

Make active ejabberd SELinux module

Lukas Vrabec • 7 years ago

52a772

* Fri May 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253

Lukas Vrabec • 7 years ago

dfee3b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

fe274d

Do not ship .linked files

Petr Lautrbach • 7 years ago

3332d5

Add safeguard around "semodule -n -d sandbox"

Michael Scherer • 7 years ago

c8b7cd

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251

Lukas Vrabec • 7 years ago

e08cff

Fix init Module

Lukas Vrabec • 7 years ago

d50003

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250

Lukas Vrabec • 7 years ago

c08847

Fix typo bugs

Lukas Vrabec • 7 years ago

a25a75

* Mon Apr 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249

Lukas Vrabec • 7 years ago

0d1055

Put tomcat_t back in unconfined domains for now. BZ(1436434)

Adam Williamson • 7 years ago

f99334

* Tue Mar 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247

Lukas Vrabec • 8 years ago

b8c3e1

* Sat Mar 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246

Lukas Vrabec • 8 years ago

b3dccb

Update kerberos interfaces

Lukas Vrabec • 8 years ago

301836

* Fri Mar 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-245

Lukas Vrabec • 8 years ago

96feeb

Update rpm macros

Lukas Vrabec • 8 years ago

29c9d8

Add handling booleans via selinux-policy macros in custom policy spec files.

Lukas Vrabec • 8 years ago

6fa7bc

fix up other docs source

Peter Robinson • 8 years ago

469c7c

use correct source for man pages (hint: 'fedpkg local' is a quick way to test)

Peter Robinson • 8 years ago

88d4af

* Tue Mar 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-244 - Update fwupd policy - /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t - Update ganesha policy - Allow chronyd to read adjtime - Merge pull request #194 from hogarthj/certbot_policy - get the correct cert_t context on certbot certificates bz#1289778 - Label /dev/ss0 as gpfs_device_t

Lukas Vrabec • 8 years ago

0cdcb4

Fix broken build

Lukas Vrabec • 8 years ago

fe778a

Add label for /sbin symlink

Lukas Vrabec • 8 years ago

03b39f

Fixed broken patches

Lukas Vrabec • 8 years ago

e95ef3

* Thu Mar 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-243

Lukas Vrabec • 8 years ago

b77d5e

Temporary fix while creating manpages using sepolicy is broken.

Lukas Vrabec • 8 years ago

fbdb6e

* Mon Feb 27 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-242

Lukas Vrabec • 8 years ago

73a41e

* Tue Feb 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-241

Lukas Vrabec • 8 years ago

acb049

Fix make-rhat-patches script to reflect the latest changes in fedora github repos

Lukas Vrabec • 8 years ago

9d87d0

Make ganesha module active

Lukas Vrabec • 8 years ago

181568

* Wed Feb 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-240

Lukas Vrabec • 8 years ago

9930e8

Update make-rhat-patches.sh script to download patches from selinux-policy-contrib repo

Lukas Vrabec • 8 years ago

47948f

* Mon Feb 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239

Lukas Vrabec • 8 years ago

7c40ae

* Thu Feb 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238

Lukas Vrabec • 8 years ago

67dffb

Fix permissivedomains

Lukas Vrabec • 8 years ago

b4648c

Add fiex container interface file

Lukas Vrabec • 8 years ago

1c2508

Revert broken fixes

Lukas Vrabec • 8 years ago

c16c28

* Wed Feb 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-237

Lukas Vrabec • 8 years ago

fd7fb3

Make systemd_initctl_t as permissive for now.

Lukas Vrabec • 8 years ago

eb8104

Make systemd_bootchart_t as permissive for now.

Lukas Vrabec • 8 years ago

7db0c1

Fixed typo bugs breaking build.

Lukas Vrabec • 8 years ago

141e1f

* Thu Feb 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-236

Lukas Vrabec • 8 years ago

bab478

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-235

Lukas Vrabec • 8 years ago

5ed993

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-234

Lukas Vrabec • 8 years ago

a4801c

* Sun Jan 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-233

Lukas Vrabec • 8 years ago

cb674a

Fix broken interfaces

Lukas Vrabec • 8 years ago

5b738b

* Fri Jan 06 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232

Lukas Vrabec • 8 years ago

3f98d5

* Wed Dec 14 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-231

Lukas Vrabec • 8 years ago

aabe3f

Remove gear policy from selinux-policy package

Lukas Vrabec • 8 years ago

12b9bf

* Thu Dec 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230

Lukas Vrabec • 8 years ago

6319c4

* Wed Dec 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229

Lukas Vrabec • 8 years ago

68b689

Fix typo in corecommands.fc file

Lukas Vrabec • 8 years ago

cb2fd7

* Mon Dec 05 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 8 years ago

721622

Exit postInstall state in mls package

Lukas Vrabec • 8 years ago

6a9935

* Tue Nov 29 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227

Lukas Vrabec • 8 years ago

bc4637

* Wed Nov 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 8 years ago

99509b

Make tlp policy active

Lukas Vrabec • 8 years ago

42206f

* Wed Nov 09 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225

Lukas Vrabec • 8 years ago

eae2c6

* Tue Nov 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224

Lukas Vrabec • 8 years ago

89fc5f

* Mon Nov 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223

Lukas Vrabec • 8 years ago

25e792

Allow abrt_dump_oops_t to drop capabilities. bz(1391040)

Lukas Vrabec • 8 years ago

4011be

* Wed Nov 02 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-222

Lukas Vrabec • 8 years ago

2bb5c8

Bump release to -221.

Miroslav Grepl • 8 years ago

cb8525

* Mon Oct 17 2016 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-221

Miroslav Grepl • 8 years ago

ec8ddd

* Sun Oct 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220

Lukas Vrabec • 8 years ago

dad1b6

Update /etc/selinux/targeted/contexts/lxc_contexts file. https://github.com/fedora-selinux/selinux-policy/pull/166

Lukas Vrabec • 8 years ago

f90ca6

* Mon Oct 10 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219

Lukas Vrabec • 8 years ago

861088

Fix remove login for a user named system_u in seusers file. BZ(1378204)

Lukas Vrabec • 8 years ago

afa546

Rename docker-selinux to container-selinux package

Lukas Vrabec • 8 years ago

ab3db2

Revert addition of systemd service for factory reset, since it is

Colin Walters • 8 years ago

3b618f

* Thu Sep 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-216

Lukas Vrabec • 8 years ago

25813e

* Fri Sep 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-215

Lukas Vrabec • 8 years ago

4efe5a

Provide rpm macros for packages installing SELinux modules

Petr Lautrbach • 8 years ago

c49229

* Thu Sep 15 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-214

Lukas Vrabec • 8 years ago

fec828

Do a factory reset when there's no policy.kern file in a store

Petr Lautrbach • 8 years ago

be68cc

Do not hardcode targeted in installCmds()

Petr Lautrbach • 8 years ago

e3bf3e

Update conflicts with docker-selinux

Lukas Vrabec • 8 years ago

96a0f6

* Fri Sep 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-213

Lukas Vrabec • 8 years ago

f6de2d

* Wed Aug 31 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-212

Lukas Vrabec • 8 years ago

69374e

Revert "Make udisks2 SELinux module active"

Lukas Vrabec • 8 years ago

acb4d9

Make udisks2 domain permissive while F25 is not stable

Lukas Vrabec • 8 years ago

d8a5dd

* Thu Aug 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211

Lukas Vrabec • 8 years ago

0c7ae4

Make udisks2 SELinux module active

Lukas Vrabec • 8 years ago

0c6f87

Fix cloudform interfaces in sysnetwork SELinux module

Lukas Vrabec • 8 years ago

918dc3

* Tue Aug 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-210

Lukas Vrabec • 8 years ago

ba0eef

* Tue Aug 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-209

Lukas Vrabec • 8 years ago

6140a0

Fix typo in systemd policy

Lukas Vrabec • 8 years ago

0762fb

Change patch which fixing loading modules by systemd-modules-load

Lukas Vrabec • 8 years ago

11c851

* Fri Aug 12 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-208

Lukas Vrabec • 8 years ago

347800

* Thu Aug 04 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-207

Lukas Vrabec • 8 years ago

0ab5f5

* Tue Aug 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-206

Lukas Vrabec • 8 years ago

4d7576

* Fri Jul 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-205

Lukas Vrabec • 8 years ago

247a84

Fix typo bug in ssh policy

Lukas Vrabec • 8 years ago

4f692c

* Tue Jul 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-204

Lukas Vrabec • 8 years ago

95987e

* Mon Jul 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-203

Lukas Vrabec • 8 years ago

5b18dd

subs virt_sandbox_use_nfs by virt_use_nfs

Lukas Vrabec • 8 years ago

301584

Fix new version of policy

Lukas Vrabec • 8 years ago

b8e5c7

* Wed Jul 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-202

Lukas Vrabec • 8 years ago

449da6

* Mon Jul 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-201

Lukas Vrabec • 8 years ago

1ad890

Add snapperd_contexts to rpm filelist

Lukas Vrabec • 8 years ago

c3183a

Update config.tgz file by adding snapperd_contexts file to the policy

Lukas Vrabec • 8 years ago

de89ab

- Fix typo in brltty policy

Lukas Vrabec • 8 years ago

90a68d

* Tue Jul 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-200

Lukas Vrabec • 8 years ago

6c34b3

Make sbd SELinux module active

Lukas Vrabec • 8 years ago

7ea7c3

* Tue Jun 28 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-199

Lukas Vrabec • 8 years ago

962020

* Wed Jun 22 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-198

Lukas Vrabec • 8 years ago

8037d6

Fix typo in changelog

Lukas Vrabec • 8 years ago

a24ea5

* Thu Jun 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-197

Lukas Vrabec • 8 years ago

4a34c4

Update config.tgz archive, to fix /etc/selinux/mls/contexts/defaults_contexts

Lukas Vrabec • 8 years ago

df97d3

* Mon Jun 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-196

Lukas Vrabec • 8 years ago

be9b0d

* Thu Jun 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-195

Lukas Vrabec • 8 years ago

04ed47

Make hwloc module active

Lukas Vrabec • 8 years ago

8759fb

* Tue Jun 07 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-194

Lukas Vrabec • 8 years ago

c2ab48

* Mon May 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-193

Lukas Vrabec • 8 years ago

2506c0

* Wed May 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-192

Lukas Vrabec • 8 years ago

3289d1

Make opendnssec module active

Lukas Vrabec • 8 years ago

c85e72

* Tue May 24 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191

Lukas Vrabec • 8 years ago

4c0cee

* Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190

Lukas Vrabec • 8 years ago

5e78b0

* Tue May 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189

Lukas Vrabec • 8 years ago

a2f43d

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

d395cb

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

504f8f

Revert "Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 8 years ago

fc75a6

Revert "Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 8 years ago

627ba3

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

b62b4e

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

ada230

* Mon May 09 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-188

Lukas Vrabec • 8 years ago

70515f

Create new interface called systemd_login_filetrans_pid_files()

Lukas Vrabec • 8 years ago

b87a43

* Thu May 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-187

Lukas Vrabec • 8 years ago

7ff0b8

* Fri Apr 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-186

Lukas Vrabec • 8 years ago

7a1df1

* Wed Apr 27 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-185

Lukas Vrabec • 8 years ago

02b9e4

* Tue Apr 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-184

Lukas Vrabec • 8 years ago

343326

Remove ftp_home_dir boolean from distgit

Lukas Vrabec • 8 years ago

d8b5e9

* Mon Apr 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-183

Lukas Vrabec • 8 years ago

64f816

* Fri Apr 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-182

Lukas Vrabec • 8 years ago

4c6178

* Fri Apr 01 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-181

Lukas Vrabec • 8 years ago

c13001

* Wed Mar 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-180

Lukas Vrabec • 8 years ago

fac3fc

Fix spec file by adding also 'Requires' where it is need not just only 'Requires(pre)'. rhbz#1319119

Lukas Vrabec • 9 years ago

610d03

There's no need to repeat files for all subsets again and again when

Lukas Vrabec • 9 years ago

2f9313

* Wed Mar 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-179

Lukas Vrabec • 9 years ago

3f0021

* Thu Mar 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-178

Lukas Vrabec • 9 years ago

cdb2ae

Make systemd_resolved_t as permissive domain.

Lukas Vrabec • 9 years ago

06a12d

* Tue Mar 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-177

Lukas Vrabec • 9 years ago

d14d37

Fix make-rhel-patches script, docker-selinux policy files are in master branch so checkout to another branch is no more needed.

Lukas Vrabec • 9 years ago

d93225

Make systemd_gpt_generator_t as permissive domain.

Lukas Vrabec • 9 years ago

21c7ff

Make systemd_hwdb_t as permissive domain

Lukas Vrabec • 9 years ago

c9ff63

* Thu Mar 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-176

Lukas Vrabec • 9 years ago

9fc76d

Build file_contexts.bin file_context.local.bin file_context.homedir.bin during build phase. This fix issue in Fedora live images when selinux-policy-targeted is not installed but just unpackaged, since there's no .bin files, file_contexts is parsed in selabel_open(). Resolves: rhbz#1314372

Lukas Vrabec • 9 years ago

dd88f3

Fix make-rhat-patches.sh script to download right version of docker policy.

Lukas Vrabec • 9 years ago

b040fb

This change was originally introduced to fix contexts of files in

Lukas Vrabec • 9 years ago

a99d75

Make rkt policy permissive in F24+

Lukas Vrabec • 9 years ago

20c9cf

Revert "Make rkt policy permissive in F24+"

Lukas Vrabec • 9 years ago

cf1dbe

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-175

Lukas Vrabec • 9 years ago

ca2575

Make rkt policy permissive in F24+

Lukas Vrabec • 9 years ago

039bb2

Make rkt policy active.

Lukas Vrabec • 9 years ago

b07cbc

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-174

Lukas Vrabec • 9 years ago

e98b09

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-173

Lukas Vrabec • 9 years ago

7ac3a5

* Thu Feb 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-172

Lukas Vrabec • 9 years ago

352a55

Lukas Vrabec • 9 years ago

5d7b1f

Make lttng-tools SELinux module active

Lukas Vrabec • 9 years ago

93a03b

Make lttng_sessiond_t as permissive domain while is this policy just in rawhide

Lukas Vrabec • 9 years ago

b98454

* Thu Feb 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-171

Lukas Vrabec • 9 years ago

d6823d

* Wed Feb 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-170

Lukas Vrabec • 9 years ago

ead49a

* Wed Feb 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-169

Lukas Vrabec • 9 years ago

edb36e

* Wed Jan 20 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-168

Lukas Vrabec • 9 years ago

4c488a

* Mon Jan 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-167

Lukas Vrabec • 9 years ago

6d3ee1

Add fwupd domain to permissivedomains

Lukas Vrabec • 9 years ago

3852fc

Add fwupd module to modules-targeted-contrib.conf file.

Lukas Vrabec • 9 years ago

0cb927

Fix typo troubles.

Lukas Vrabec • 9 years ago

7fe548

* Wed Jan 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-166

Lukas Vrabec • 9 years ago

5d165e

* Wed Jan 06 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-165

Lukas Vrabec • 9 years ago

936bb7

* Tue Dec 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-164

Lukas Vrabec • 9 years ago

f1750f

Add missing noreplace flag to file: %{_sysconfdir}/selinux/%1/contexts/files/file_contexts.local

Lukas Vrabec • 9 years ago

ad3add

* Wed Dec 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-163

Lukas Vrabec • 9 years ago

5c898c

- Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)

Miroslav Grepl • 9 years ago

2b449e

* Mon Nov 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-161

Lukas Vrabec • 9 years ago

71a663

Set default value as true in boolean mozilla_plugin_can_network_connect.

Lukas Vrabec • 9 years ago

e5fd60

* Tue Nov 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160

Lukas Vrabec • 9 years ago

78826f

/usr/sbim/semanage has been moved to policycoreutils-python-utils package which needs to be require in Post section for selinux-policy-minumum package.

Miroslav Grepl • 9 years ago

2fc3e7

- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)

Miroslav Grepl • 9 years ago

0e8453

We need to cop *.local policy files to keep local customizations also after upgrades between old and new module store location. BZ(#1279621).

Miroslav Grepl • 9 years ago

982e48

- Merge pull request #48 from lkundrak/contrib-openfortivpn

Miroslav Grepl • 9 years ago

db55b6

Add support for openfortivpn

Miroslav Grepl • 9 years ago

5c3fd5

- The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.

Miroslav Grepl • 9 years ago

02b374

We want conflicts with docker-selinux not docker package.

Lukas Vrabec • 9 years ago

0a89ba

* Tue Oct 27 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-156

Lukas Vrabec • 9 years ago

66791f

Add conflict with docker lower or eq as docker-1.9.0-9

Lukas Vrabec • 9 years ago

0f46e0

Update make-rhat-patches.sh to avoid git-checkout for patches creation.

Miroslav Grepl • 9 years ago

856e20

Add smart script to create the latest selinux-policy patches from github and also download the latest docker policy from github

Lukas Vrabec • 9 years ago

03d22f

Add actual docker policy from docker-selinux repo.

Lukas Vrabec • 9 years ago

0bd6f9

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-155

Lukas Vrabec • 9 years ago

5d2c76

docker policy files support

Lukas Vrabec • 9 years ago

fadb0d

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-154

Lukas Vrabec • 9 years ago

0bdc24

Added also pkcs11proxyd domains to permissivedomains.

Lukas Vrabec • 9 years ago

8c4eb9

Set recently created domains as permissive for testing period. Enable new ipmievd domain. #1241453

Vit Mojzis • 9 years ago

263716

* Tue Oct 13 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-153

Lukas Vrabec • 9 years ago

2bd687

* Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152

Lukas Vrabec • 9 years ago

a6a253

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-151

Lukas Vrabec • 9 years ago

0927e3

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150

Lukas Vrabec • 9 years ago

615148

* Tue Sep 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-149

Lukas Vrabec • 9 years ago

b03747

Make pkcs11proxyd policy active

Lukas Vrabec • 9 years ago

23d806

* Tue Sep 22 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-148

Lukas Vrabec • 9 years ago

ec0c1b

Added support for permissive domains

Lukas Vrabec • 9 years ago

7c8404

Update config.tgz to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.

Miroslav Grepl • 9 years ago

7eb3be

* Mon Sep 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-147

Lukas Vrabec • 9 years ago

281867

Add files homedir_template and users_extra to selinux-policy-* packages.

Lukas Vrabec • 9 years ago

73a6a9

* Tue Sep 01 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-146

Lukas Vrabec • 9 years ago

f1ab24

* Sun Aug 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-145

Lukas Vrabec • 9 years ago

0d7034

* Mon Aug 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-144

Lukas Vrabec • 9 years ago

96de56

- Add ipmievd policy creaed by vmojzis@redhat.com

Miroslav Grepl • 9 years ago

f5f681

We should be able to do builds with neverallow check with new 2.4 userspace and fix the latest policy fixes.

Miroslav Grepl • 9 years ago

4d0973

Activate new blkmapd policy.

Vit Mojzis • 9 years ago

53aa42

* Tue Aug 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-142

Lukas Vrabec • 9 years ago

1ba0a9

Activate new hsqldb policy.

Vit Mojzis • 9 years ago

c4a368

* Mon Aug 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-141

Lukas Vrabec • 9 years ago

28b73b

- firewalld needs to relabel own config files. BZ(#1250537)

Miroslav Grepl • 9 years ago

d8af5a

Make targetd policy active.

Lukas Vrabec • 9 years ago

cfb63d

* Tue Aug 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-139

Lukas Vrabec • 9 years ago

f35d90

Remove old trigger selinux-policy-targeted-3.12.1-75 for relabeling home.

Lukas Vrabec • 9 years ago

c63201

Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 9 years ago

ceff8b

Activate kdbus.pp

Miroslav Grepl • 9 years ago

cd118e

Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 9 years ago

ae80a5

Make sslh policy active

Lukas Vrabec • 9 years ago

a82345

Revert "Add pdns to permissivedomains policy."

Lukas Vrabec • 9 years ago

fce7b9

Add pdns to permissivedomains policy.

Lukas Vrabec • 9 years ago

a64a0a

Make pdns policy active.

Lukas Vrabec • 9 years ago

6ca75a

Move man pages from selinux-policy-devel to selinux-policy-doc

Lukas Vrabec • 9 years ago

d6fa25

* Mon Jul 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-138

Lukas Vrabec • 9 years ago

e5e6b1

Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.

Miroslav Grepl • 9 years ago

57b06e

Prepare selinux-policy package for SELinux store migration

Petr Lautrbach • 9 years ago

a345bb

* Wed Jul 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-137

Lukas Vrabec • 9 years ago

04f749

* Tue Jul 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-136

Lukas Vrabec • 9 years ago

ee724a

* Thu Jul 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-135

Lukas Vrabec • 9 years ago

f53ebe

* Thu Jul 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-134

Lukas Vrabec • 9 years ago

d04212

* Tue Jun 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-133

Lukas Vrabec • 9 years ago

1428c0

Cleanup permissive domains.

Lukas Vrabec • 9 years ago

2461d9

* Mon Jun 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-132

Lukas Vrabec • 9 years ago

20e7f0

* Tue Jun 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-131

Lukas Vrabec • 9 years ago

7100c5

- Fix bogus line in logrotate.fc.

Miroslav Grepl • 9 years ago

4e49e3

Use userdom_rw_user_tmp_files() instead of userdom_rw_user_tmpfs_files() in gluster.te

Miroslav Grepl • 9 years ago

1bee2d

- Allow glusterd to interact with gluster tools running in a user domain

Miroslav Grepl • 9 years ago

66628c

- We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 9 years ago

8f4622

We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 9 years ago

19cd06

See Changelog for all changes.

Miroslav Grepl • 9 years ago

5bcffd

Update selinux-policy.spec to show how to create policy patches from https://github.com/fedora-selinux/selinux-policy

Miroslav Grepl • 9 years ago

26e9de

Remove unnecessary and unused files from git

Petr Lautrbach • 9 years ago

b1ef71

Minor spec file fixes:

Petr Lautrbach • 9 years ago

9cef10

commit 702978bda4b2106615a16d15ec58f80d7facd0ab

Miroslav Grepl • 9 years ago

0a3c59

* Tue May 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-127

Lukas Vrabec • 9 years ago

6a726d

* Mon Apr 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-126

Lukas Vrabec • 9 years ago

229bf3

Fix bad date

Lukas Vrabec • 9 years ago

c4df3c

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Lukas Vrabec • 9 years ago

52fc14

* Mon Apr 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-125

Lukas Vrabec • 9 years ago

0bfe8f

We need to setcheckreqprot to 0 for security purposes

Dan Walsh • 9 years ago

662016

* Wed Apr 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-124

Lukas Vrabec • 9 years ago

28cc16

* Wed Apr 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-123

Lukas Vrabec • 9 years ago

578b67

* Tue Apr 07 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-122

Lukas Vrabec • 9 years ago

b9a1c7

* Mon Mar 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-121

Lukas Vrabec • 9 years ago

5852f3

* Mon Mar 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-120

Lukas Vrabec • 10 years ago

734dd8

Fixed issues related to removing docker policy files

Lukas Vrabec • 10 years ago

60d4b2

* Wed Mar 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-119

Lukas Vrabec • 10 years ago

f9d977

* Mon Mar 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-118

Lukas Vrabec • 10 years ago

e2a064

* Fri Mar 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-117

Lukas Vrabec • 10 years ago

ed576d

* Fri Mar 06 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-116

Lukas Vrabec • 10 years ago

b61b8d

Turn on rolekit in F22

Miroslav Grepl • 10 years ago

b97a0c

* Thu Mar 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-115

Lukas Vrabec • 10 years ago

f6c116

* Mon Feb 25 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-114

Lukas Vrabec • 10 years ago

2ee001

Fix source filepath for moving html files.

Lukas Vrabec • 10 years ago

6acb58

* Mon Feb 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-113

Lukas Vrabec • 10 years ago

946068

* Mon Feb 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-112

Lukas Vrabec • 10 years ago

83d645

* Tue Feb 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-111

Lukas Vrabec • 10 years ago

e79332

* Thu Feb 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-110

Lukas Vrabec • 10 years ago

ae5733

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-109

Lukas Vrabec • 10 years ago

1fd39e

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-108

Lukas Vrabec • 10 years ago

203031

* Thu Feb 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-107

Lukas Vrabec • 10 years ago

1808b7

* Thu Jan 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-106

Lukas Vrabec • 10 years ago

a84953

* Thu Jan 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-104

Lukas Vrabec • 10 years ago

72c96b

Make build working

Miroslav Grepl • 10 years ago

525ad6

Add new policy for hostapd

Dan Walsh • 10 years ago

800a85

Add /etc/selinux/targeted/contexts/openssh_contexts

Dan Walsh • 10 years ago

f1ed4e

* Mon Dec 15 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-101

Lukas Vrabec • 10 years ago

6eb726

Added typo fix

Lukas Vrabec • 10 years ago

00145d

* Thu Dec 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-100

Lukas Vrabec • 10 years ago

e4ea46

* Fri Dec 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-99

Lukas Vrabec • 10 years ago

1c8cf3

Added seutil_dontaudit_access_check_semanage_module_store interface.

Lukas Vrabec • 10 years ago

1929f5

* Fri Nov 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-98

Lukas Vrabec • 10 years ago

cf94d6

Fix date bug

Lukas Vrabec • 10 years ago

b52709

* Fri Nov 27 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-97

Lukas Vrabec • 10 years ago

e4d7a4

* Thu Nov 20 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-96

Lukas Vrabec • 10 years ago

48f969

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-95

Lukas Vrabec • 10 years ago

feb8db

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-94

Lukas Vrabec • 10 years ago

c88e65

* Fri Nov 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-93

Lukas Vrabec • 10 years ago

24d43e

* Mon Nov 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-92

Lukas Vrabec • 10 years ago

b6161d

* Fri Nov 07 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-91

Lukas Vrabec • 10 years ago

062b36

Added support for linuxptp policy.

Lukas Vrabec • 10 years ago

bfb6ad

Fixed mistakes in build.

Lukas Vrabec • 10 years ago

ba65f5

* Mon Nov 03 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-90

Lukas Vrabec • 10 years ago

a38ffb

Fix wrong url link to upstream.

Lukas Vrabec • 10 years ago

4dfcf7

* Wed Oct 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-89

Lukas Vrabec • 10 years ago

af3cfa

* Tue Oct 21 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-88

Lukas Vrabec • 10 years ago

317f5a

Removed redundant patches

Lukas Vrabec • 10 years ago

df3931

Add cinder to modules-targeted-contrib

Lukas Vrabec • 10 years ago

d681f5

- Allow systemd-networkd to be running as dhcp client.

Miroslav Grepl • 10 years ago

650be6

* Tue Oct 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-86

Lukas Vrabec • 10 years ago

8db354

Added mon_statd_t and mon_procd_t to permissivedomains.

Lukas Vrabec • 10 years ago

2ca2a2

Add mon_statd to modules-targeted-contrib.conf

Lukas Vrabec • 10 years ago

50b67a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 10 years ago

3e4dce

We should not build vbetool anylonger

Dan Walsh • 10 years ago

d3cbfb

Fix typo bug.

Lukas Vrabec • 10 years ago

a76f31

* Mon Oct 06 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-85

Lukas Vrabec • 10 years ago

cf8979

Make cpuplug policy permissive

Lukas Vrabec • 10 years ago

d805f9

Activate cpuplug policy

Lukas Vrabec • 10 years ago

1e232a

Add brltty policy to permissive policies.

Lukas Vrabec • 10 years ago

dbbe68

Activated module brltty policy

Lukas Vrabec • 10 years ago

98ab4a

* Tue Sep 30 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-84

Lukas Vrabec • 10 years ago

245c83

* Mon Sep 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-83

Lukas Vrabec • 10 years ago

343033

Label genrator.late correctly

Dan Walsh • 10 years ago

0a7796

- Allow du running in logwatch_t read hwdata.

Miroslav Grepl • 10 years ago

0399c8

* Thu Sep 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-81

Lukas Vrabec • 10 years ago

6021c0

Fixed typo mistakes.

Lukas Vrabec • 10 years ago

2ac2d9

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-80

Lukas Vrabec • 10 years ago

ae5a64

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-79

Lukas Vrabec • 10 years ago

6c07cc

Fix release number

Lukas Vrabec • 10 years ago

6823c7

* Tue Sep 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-78

Lukas Vrabec • 10 years ago

9532ec

* Thu Aug 28 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-77

Lukas Vrabec • 10 years ago

c46359

* Tue Aug 26 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-76

Lukas Vrabec • 10 years ago

45b429

* Fri Aug 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-75

Lukas Vrabec • 10 years ago

f9cc8e

Rebuild for rpm bug 1131960

Kevin Fenzi • 10 years ago

5f1085

* Mon Aug 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-73

Lukas Vrabec • 10 years ago

9229b6

* Tue Aug 12 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-72

Lukas Vrabec • 10 years ago

3399c5

* Mon Aug 4 2014 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-71

Miroslav Grepl • 10 years ago

0bd1c4

- Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.

Miroslav Grepl • 10 years ago

c950f2

fix license handling

Tom Callaway • 10 years ago

4abfbc

- Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow user

Miroslav Grepl • 10 years ago

540429

* Thu Jul 24 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-67

Lukas Vrabec • 10 years ago

0a90ee

Add actual patch with naemon policy

Lukas Vrabec • 10 years ago

610d0f

Add support for naemon, Add naemon to permissive domains

Lukas Vrabec • 10 years ago

3ad626

- Revert labeling back to /var/run/systemd/initctl/fifo

Miroslav Grepl • 10 years ago

668337

* Fri Jul 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-65

Lukas Vrabec • 10 years ago

ee1386

* Mon Jul 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-64

Lukas Vrabec • 10 years ago

3e33a0

- If I can create a socket I need to be able to set the attributes

Miroslav Grepl • 10 years ago

682896

- Allow swift to use tcp/6200 swift port

Miroslav Grepl • 10 years ago

24862f

Fix spec file issues

Miroslav Grepl • 10 years ago

e00cf0

permissivedomains.pp should not be in MLS

Miroslav Grepl • 10 years ago

9c9e4d

* Fri Jun 20 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-61

Miroslav Grepl • 10 years ago

211fb9

* Thu Jun 19 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-60

Miroslav Grepl • 10 years ago

c04c31

Clean up modules-targeted-{contrib,base}.conf from dups.

Miroslav Grepl • 10 years ago

13bbbd

Merge user_tmp patches to base patches

Miroslav Grepl • 10 years ago

c629d2

* Tue Jun 17 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.+- Allow system_bus_types to use stream_sockets inherited

Miroslav Grepl • 10 years ago

1c0c71

Add kmscon policy to modules-targeted-contrib.conf and to

Lukas Vrabec • 10 years ago

1dda09

- Add mozilla_plugin_use_bluejeans boolean

Miroslav Grepl • 10 years ago

a62949

- Allow staff_t to communicate and run docker

Miroslav Grepl • 10 years ago

686a38

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

Dennis Gilmore • 10 years ago

07a8be

- Add decl for cockip port

Miroslav Grepl • 10 years ago

0ddb74

- geard seems to do a lot of relabeling

Miroslav Grepl • 10 years ago

cccaf8

Bump version

Miroslav Grepl • 10 years ago

776898

* Tue May 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-

Miroslav Grepl • 10 years ago

dfbb9a

- Added iotop policy. Thanks William Brown

Miroslav Grepl • 10 years ago

dbf4ab

Added iotop to permissive domains, and modules-targeted-contrib

Lukas Vrabec • 10 years ago

e929b7

- More rules for gears and openshift

Miroslav Grepl • 10 years ago

6fbf46

* Wed May 7 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-51

Miroslav Grepl • 10 years ago

4c682c

- selinux_unconfined_type should not be able to set booleans if the securemode is set

Miroslav Grepl • 10 years ago

9d0057

- Fix labeling for /root/\.yubico

Miroslav Grepl • 10 years ago

4e5d63

- Fix virt_use_samba boolean

Miroslav Grepl • 10 years ago

3f5abd

remove mongod labeling from cloudform.fc

Miroslav Grepl • 10 years ago

345f52

- mongod should not be a part of cloudforms.pp

Miroslav Grepl • 10 years ago

bf38d6

Add alternate labels for named chrot directory

Dan Walsh • 10 years ago

0ecd68

Add cockpit policy

Dan Walsh • 10 years ago

e32480

- Allow init_t to setattr/relabelfrom dhcp state files

Miroslav Grepl • 10 years ago

7ca2b3

svirt_sandbox_file_t should be in customizable_types

Dan Walsh • 10 years ago

d64199

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 10 years ago

1c6a56

Add labeling for puppet helper scripts

Miroslav Grepl • 10 years ago

e0b675

* Tue Apr 8 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-45

Miroslav Grepl • 10 years ago

1aabaf

Update user_tmp patches

Miroslav Grepl • 10 years ago

2e9a8d

- Change hsperfdata_root to have as user_tmp_t

Miroslav Grepl • 10 years ago

3f1341

- Add labels for /var/named/chroot_sdb/dev devices

Miroslav Grepl • 10 years ago

c14474

* Tue Apr 1 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-42

Miroslav Grepl • 10 years ago

33665e

Add port def for gear port

Miroslav Grepl • 10 years ago

2a72be

- Turn on gear_port_t

Miroslav Grepl • 10 years ago

f8f75f

Add policy for geard in docker world

Dan Walsh • 10 years ago

bdc850

Fix ipa.if

Miroslav Grepl • 10 years ago

83715e

- update storage_filetrans_all_named_dev for sg* devices

Miroslav Grepl • 10 years ago

1f53e6

- Manage_service_perms should include enable and disable, need backport to RHEL7

Miroslav Grepl • 11 years ago

8ad914

Added new boolean to booleans.subs_dist

Lukas Vrabec • 11 years ago

3f115f

Remove smstools.pp to make upgrade working

Miroslav Grepl • 11 years ago

443a36

Create base.lst which contains list of base policy modules

Miroslav Grepl • 11 years ago

38dae9

- Label sddm as xdm_exec_t to make KDE working again

Miroslav Grepl • 11 years ago

8e18cc

- Allow collectd to talk to libvirt

Miroslav Grepl • 11 years ago

633767

- Add additional fixes for systemd_networkd_t

Miroslav Grepl • 11 years ago

3f9fe1

- sshd to read network sysctls

Miroslav Grepl • 11 years ago

0575d6

bump release

Miroslav Grepl • 11 years ago

648f90

* Wed Mar 12 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-34

Miroslav Grepl • 11 years ago

695bbc

- Allow init_t to stream connect to ipsec

Miroslav Grepl • 11 years ago

ab84f4

- Allow numad to write scan_sleep_millisecs

Miroslav Grepl • 11 years ago

24a25f

- Modify xdm_write_home to allow create files/links in /root with xdm_home_t

Miroslav Grepl • 11 years ago

2d6801

- Allow block_suspend cap2 for systemd-logind and rw dri device

Miroslav Grepl • 11 years ago

08fe2e

* Fri Feb 28 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-29

Miroslav Grepl • 11 years ago

18bb7e

Rebuild permissivedomains.pp to reflect latest changes

Miroslav Grepl • 11 years ago

4aa43e

Remove vbetool we no longer ship this

Dan Walsh • 11 years ago

96f7ac

RUn docker instance as permissive, changing to fast

Dan Walsh • 11 years ago

7254e6

- Allow bumblebeed to send signal to insmod

Miroslav Grepl • 11 years ago

439063

Add /var/roothome /root subs

Miroslav Grepl • 11 years ago

2a6e2e

- Make unconfined_service_t valid in enforcing

Miroslav Grepl • 11 years ago

3e0039

- Add labeling for /usr/sbin/amavi

Miroslav Grepl • 11 years ago

74ec50

Fix lvm_read_metadata()

Miroslav Grepl • 11 years ago

450ad8

* Tue Feb 18 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-25

Miroslav Grepl • 11 years ago

60668f

Add nsplugin.pp and qemu.pp as two additional policies that we no longer ship

Dan Walsh • 11 years ago

0474cb

Remove /usr/local /usr equiv

Miroslav Grepl • 11 years ago

7741f6

Fix selinux config file

Miroslav Grepl • 11 years ago

3dc79f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Lukas Vrabec • 11 years ago

1f5d74

Add keepalived to modules-targeted-contrib

Lukas Vrabec • 11 years ago

f2fd78

Add subs for /var/home and /var/root

Dan Walsh • 11 years ago

9a76d6

Make sure selinux-policy owns the rpmconfigdir and macros.d so it does not build a require for rpm

Dan Walsh • 11 years ago

fdaea4

- Dontaudit rendom domains listing /proc and hittping system_map_t

Miroslav Grepl • 11 years ago

7a7277

- Addopt corenet rules for unbound-anchor to rpm_script_t

Miroslav Grepl • 11 years ago

05a36c

- Fix /dev/vfio/vfio labeling

Miroslav Grepl • 11 years ago

638386

- Add kernel_mounton_messages() interface

Miroslav Grepl • 11 years ago

fc059d

Added osad to permissive domains

Lukas Vrabec • 11 years ago

4cde84

Added osad to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

99989c

Turn on rhnsd policy

Miroslav Grepl • 11 years ago

451a10

Turn on bacula policy

Miroslav Grepl • 11 years ago

98755a

Fix typo in geoclue.te

Miroslav Grepl • 11 years ago

21f72f

- Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring

Miroslav Grepl • 11 years ago

a85303

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

a960d0

Fix writing of data to /sys/fs/selinux/checkreqprot

Dan Walsh • 11 years ago

b7aa0f

- Add net_admin also for systemd_passwd_agent_t

Miroslav Grepl • 11 years ago

2b1129

Fix the day of the week

Dan Walsh • 11 years ago

98a685

Add rkhunter policy

Miroslav Grepl • 11 years ago

4918de

Add boolean subs for logwatch_can_sendmail

Miroslav Grepl • 11 years ago

697404

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

aae7e9

Fix format of checkreqprot line in selinux-policy.conf, so it works.

Dan Walsh • 11 years ago

cafa00

- Add haproxy_connect_any boolean

Miroslav Grepl • 11 years ago

f8d854

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

c8df55

Turn on checkreqprot flag for tighter SELinux Security

Dan Walsh • 11 years ago

bd53c0

- init calling needs to be optional in domain.te

Miroslav Grepl • 11 years ago

254b15

Remove conflict for pki-selinux

Miroslav Grepl • 11 years ago

f4d3ef

- New access needed to allow docker + lxc +SELinux to work together

Miroslav Grepl • 11 years ago

d7f0c3

Add geoclue policy

Miroslav Grepl • 11 years ago

99d95c

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

339700

Fix /sys/kernel/uevent_helper to be a file rather then recursing a directory

Dan Walsh • 11 years ago

3708dd

- Add cron unconfined role support for uncofined SELinux user

Miroslav Grepl • 11 years ago

3a0ebd

index.html and style.css should be in /usr/share/selinux/devel/htm

Miroslav Grepl • 11 years ago

5dcd63

Rename badly used userhelper_t in kernel.if to usermodehelper

Miroslav Grepl • 11 years ago

93e99e

One more fix for unconfineduser.te

Miroslav Grepl • 11 years ago

fa5dd2

rpm_script_roles is attribute_role

Miroslav Grepl • 11 years ago

2b1fa0

Fix ipsec typo

Miroslav Grepl • 11 years ago

9e62d1

Add missing kernel_rw_security_state()

Miroslav Grepl • 11 years ago

06cfcd

Call kernel_rw_usermodehelper in devicekit.te

Miroslav Grepl • 11 years ago

8155b3

Fix kernel_read_usermodehelper

Miroslav Grepl • 11 years ago

265b03

Call proper interfaces - usermodehelper

Miroslav Grepl • 11 years ago

eeca65

ysctl_modprobe_t and sysctl_hotplug_t are now obsoleted by usermodhelper_t

Miroslav Grepl • 11 years ago

912db9

Fix definition for proc_security_t and usermodehelper_t

Miroslav Grepl • 11 years ago

438fa3

Remove dup interface

Miroslav Grepl • 11 years ago

71a28b

See spec file

Miroslav Grepl • 11 years ago

368fb8

Need to fix label on /sys/kernel/uevent_handler

Dan Walsh • 11 years ago

f264f9

* Mon Jan 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-13

Miroslav Grepl • 11 years ago

5bd1f1

Add latest changes from selinux-policy.git

Miroslav Grepl • 11 years ago

0a96c3

Don't transition roles when executing daemons from unconfined_t

Miroslav Grepl • 11 years ago

01969c

Revert Try to change ssh_exec to ssh_basic_client for glusterd_t

Miroslav Grepl • 11 years ago

af2dcd

- Add gluster fixes

Miroslav Grepl • 11 years ago

9b8508

Use userdom_filetrans_type instead of userdom_filetrans_domain in userdomain.te

Miroslav Grepl • 11 years ago

c0bc50

- Allow mozilla plugin to chat with policykit, needed for spice

Miroslav Grepl • 11 years ago

9d88e1

policy-rawhide-contrib-apache-content.patch is no longer needed. Merged to policy-rawhide-contrib.patch.

Miroslav Grepl • 11 years ago

804870

Fix usage of semanage import line

Dan Walsh • 11 years ago

70c60d

Added speech-dispatcher to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

162a2c

Turn on mirrormanager policy

Miroslav Grepl • 11 years ago

e0c1a1

Fix userdom_manage_home_texlive() interface

Miroslav Grepl • 11 years ago

a8441c

Fix mozilla.te

Miroslav Grepl • 11 years ago

b305c2

Additional fixes for docker.te

Miroslav Grepl • 11 years ago

fa3915

Fix docker policy

Miroslav Grepl • 11 years ago

1fe411

Add selinux/minimum/contexts/users/sysadm_u also for minimum policy

Miroslav Grepl • 11 years ago

c9394c

Fix spec file

Miroslav Grepl • 11 years ago

74b303

- Allow freeipmi_ipmidetectd_t to use freeipmi port

Miroslav Grepl • 11 years ago

239710

Added vmtools to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

0dc67d

- DRM master and input event devices are used by the TakeDevice API

Miroslav Grepl • 11 years ago

4b8334

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Lukas Vrabec • 11 years ago

5689bd

Added conman to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

d487bf

Add freeipmi policy

Miroslav Grepl • 11 years ago

6de8b2

Added ninfod and openwsman to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

65289b

- Add back fixes for gnome_role_template()

Miroslav Grepl • 11 years ago

676f0e

- Add lsmd_plugin_t for lsm plugins

Miroslav Grepl • 11 years ago

d61adf

Add glusterd_brick_t type

Miroslav Grepl • 11 years ago

04c55c

- Add filename transition also for servicelog.db-journal

Miroslav Grepl • 11 years ago

c9b9ed

Turn on docker policy

Miroslav Grepl • 11 years ago

678950

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Lukas Vrabec • 11 years ago

a2db29

Added rasdaemon module to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

3e4e5f

Turn off F20 permissive domains, add docker

Dan Walsh • 11 years ago

ae07fa

Added new policies to permissivedomains.te

Lukas Vrabec • 11 years ago

8fd86c

Added new policies to modules-targeted-contrib.conf

Lukas Vrabec • 11 years ago

ba211c

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-5

Miroslav Grepl • 11 years ago

3abf05

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-4

Miroslav Grepl • 11 years ago

d20212

- Add policy-rawhide-contrib-apache-content.patch to re-write apache_content_template() by dwalsh

Miroslav Grepl • 11 years ago

4fc70e

Fix config.tgz to include lxc_contexts and systemd_contexts

Dan Walsh • 11 years ago

164fa3

Add back correct lxc_contexts and systemd_contexts

Dan Walsh • 11 years ago

025a8d

* Wed Nov 13 2013 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-1

Miroslav Grepl • 11 years ago

269ef0

Upload new upstream sources

Miroslav Grepl • 11 years ago

0f9b0d

- Fix passenger_stream_connect interface

Miroslav Grepl • 11 years ago

73ec2c

Upload updated config.tgz

Miroslav Grepl • 11 years ago

e4104d

Rebuild permissivedomains.pp with correct selinux-policy-devel pkg

Miroslav Grepl • 11 years ago

73e97a

Rebuild permisivedomains.pp

Miroslav Grepl • 11 years ago

9637db

Update config.tgz to make cronjob running in userdomain on MLS system

Miroslav Grepl • 11 years ago

2918ba

* Fri Nov 8 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-99

Miroslav Grepl • 11 years ago

90f926

- Add files_relabel_base_file_types() interface

Miroslav Grepl • 11 years ago

c872e5

- Add label only for redhat.repo instead of /etc/yum.repos.d. But probably we will need to switch for the directory.

Miroslav Grepl • 11 years ago

c5e7e5

Add journalctl to modules-targeted-contrib

Miroslav Grepl • 11 years ago

47a93c

Fix spec file

Miroslav Grepl • 11 years ago

6bf18a

* Fri Oct 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-96

Miroslav Grepl • 11 years ago

18a1ac

Do remove regardless. Update config.tgz with new labels for virt.

Dan Walsh • 11 years ago

d11521

scratch build

Miroslav Grepl • 11 years ago

cd5d97

Add new labels for qemu and kvm processes to lxc_contexts file

Dan Walsh • 11 years ago

af7d96

Fix spec file to use systemd_context instead of sytemd_context

Miroslav Grepl • 11 years ago

d4e55c

- Allow sysadm_t to read login information

Miroslav Grepl • 11 years ago

bf4990

Add fix to place sytemd_contexts

Miroslav Grepl • 11 years ago

4f67cf

Add systemd_contexts to config.tgz

Miroslav Grepl • 11 years ago

d483b6

* Thu Oct 24 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-93

Miroslav Grepl • 11 years ago

bb6a1f

- Allow sshd_t to read openshift content, needs backport to RHEL6.5

Miroslav Grepl • 11 years ago

2d3bd4

Add rtas policy

Miroslav Grepl • 11 years ago

71bb64

"motion+rtas should be in modules-targeted-contrib.conf"

Miroslav Grepl • 11 years ago

207905

- Allow mailserver_domains to manage and transition to mailman data

Miroslav Grepl • 11 years ago

37ab07

- Fix gnome_read_generic_data_home_files()

Miroslav Grepl • 11 years ago

99c451

Need to create the policy.kern symbolic link in the shipping policy.

Dan Walsh • 11 years ago

973ebb

- Add auth_exec_chkpwd interface

Miroslav Grepl • 11 years ago

ce98df

Add motion module to modules-targeted-contrib config file.

Lukas Vrabec • 11 years ago

e1c33b

- init reload from systemd_localed_t

Miroslav Grepl • 11 years ago

17233e

fix added systemd_contexts to config.tgz

Dan Walsh • 11 years ago

824da7

add systemd_contexts to config.tgz

Dan Walsh • 11 years ago

5a1e3f

Fix spec file

Miroslav Grepl • 11 years ago

7a5c55

- Fix nscd_shm_use()

Miroslav Grepl • 11 years ago

06b8c0

Make hypervvssd_t as permissive domain

Miroslav Grepl • 11 years ago

a05567

* Wed Oct 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-85

Miroslav Grepl • 11 years ago

05e00d

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

5c90e9

Add svirt_kvm_net_t to lxc_contexts file

Dan Walsh • 11 years ago

5ffaf3

- Fix labeling for /usr/libexec/kde4/kcmdatetimehelper

Miroslav Grepl • 11 years ago

dc3673

Add svirt_kvm_net_t to lxc_contexts file

Dan Walsh • 11 years ago

381d00

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

4f637d

Add new labels for lxc domains

Dan Walsh • 11 years ago

d5f07a

- Do not build sanbox pkg on MLS

Miroslav Grepl • 11 years ago

26f445

Only build the sandbox.pp file for targeted

Dan Walsh • 11 years ago

b03c86

- wine_tmp is no longer needed

Miroslav Grepl • 11 years ago

d7f852

- Dontaudit attempts by sosreport to read shadow_t

Miroslav Grepl • 11 years ago

3d49b2

- Allow ldconfig to write to kdumpctl fifo files

Miroslav Grepl • 11 years ago

fcf015

Update lxc_contexts with newer labels for virt-sandbox

Dan Walsh • 11 years ago

0d477c

Allow block_suspend cap for samba-net

Dan Walsh • 11 years ago

3fc099

Allow block_suspend cap for samba-net

Dan Walsh • 11 years ago

030f13

Allow block_suspend cap for samba-net

Dan Walsh • 11 years ago

cffdc1

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

17171d

Add more definitions to lxc_contexts file for other types of sandboxes

Dan Walsh • 11 years ago

3f4833

Fix the spec file to use correct version

Miroslav Grepl • 11 years ago

4b4782

- Allow block_suspend cap for samba-net

Miroslav Grepl • 11 years ago

2411e6

Fix nameing of rpm macro

Dan Walsh • 11 years ago

26bb0a

Cleanup related to init_domain()+inetd_domain fixes

Dan Walsh • 11 years ago

8f2f92

Cleanup related to init_domain()+inetd_domain fixes

Dan Walsh • 11 years ago

1b0e09

- Also sock_file trans rule is needed in lsm

Miroslav Grepl • 11 years ago

22545a

Fix selinux-policy-sandbox pkg handling

Miroslav Grepl • 11 years ago

dea0c4

Remove sandbox.pp.disabled file on upgrade of 3.12.1-74

Miroslav Grepl • 11 years ago

2c196a

Merge branch 'f20' of ssh://pkgs.fedoraproject.org/selinux-policy into f20

Dan Walsh • 11 years ago

4d94e6

Remove sandbox.pp.disabled file on upgrade of 3.12.1-73

Dan Walsh • 11 years ago

e698b7

* Thu Aug 29 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-74

Miroslav Grepl • 11 years ago

3b489b

Move sandbox.pp to a package by itself

Dan Walsh • 11 years ago

32b3bf

- Allow rhsmcertd to read init state

Miroslav Grepl • 11 years ago

ed7611

- Add policy for lsmd

Miroslav Grepl • 11 years ago

18df0d

Add support for lsmd

Miroslav Grepl • 11 years ago

166758

Add support for hypervkvp

Miroslav Grepl • 11 years ago

3ae1f2

Add support for redis-server policy

Miroslav Grepl • 11 years ago

9b3f9c

- Allow boinc to connect to @/tmp/.X11-unix/X0

Miroslav Grepl • 11 years ago

b15376

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 11 years ago

b8f3f1

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 11 years ago

b6a163

Fix kdump_admi() interface

Miroslav Grepl • 11 years ago

0b215e

- selinux_set_enforce_mode needs to be used with type

Miroslav Grepl • 11 years ago

3b361c

Add oracleasm policy

Miroslav Grepl • 11 years ago

d618df

unversioned doc dir change

Dan Walsh • 11 years ago

0ea841

Activate watchdog policy

Miroslav Grepl • 11 years ago

9bbfec

- Add more aliases in pegasus.te

Miroslav Grepl • 11 years ago

5ed544

- Allow xdm_t to act as a dbus client to itsel

Miroslav Grepl • 11 years ago

6655c4

One more fix for virt_transition_userdomain

Miroslav Grepl • 11 years ago

c91169

Fix typo

Miroslav Grepl • 11 years ago

4c142c

- Add support for cmpiLMI_Service-cimprovagt

Miroslav Grepl • 11 years ago

993bf3

Fix system.if

Miroslav Grepl • 11 years ago

15eb6e

Fix domain.te

Miroslav Grepl • 11 years ago

f257f9

- Make auditd working if audit is configured to perform SINGLE action on disk error

Miroslav Grepl • 11 years ago

0ab4f2

- Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t

Miroslav Grepl • 11 years ago

7a0f02

* Thu Jul 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-63

Miroslav Grepl • 11 years ago

21e8b6

Activate openhpid policy

Miroslav Grepl • 11 years ago

faa291

* Tue Jul 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-62

Miroslav Grepl • 11 years ago

60ad55

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

d3c6b2

Add amavis_use_jit and clamd_use_jit boolean alias

Dan Walsh • 11 years ago

cd1f59

- Add prosody policy written by Michael Scherer

Miroslav Grepl • 11 years ago

d1027c

Activate nsd policy

Miroslav Grepl • 11 years ago

961ad8

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

b2d6e4

Add prosody policy

Dan Walsh • 11 years ago

4fa797

- Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow s

Miroslav Grepl • 11 years ago

2d4ef1

Fix name of sandbox.pp.disabled

Dan Walsh • 11 years ago

c23c3b

- Make DSPAM to act as a LDA working

Miroslav Grepl • 11 years ago

b27c1f

We need to recompile policy if pcre is updated

Dan Walsh • 11 years ago

7c810a

- Allow lvm_t to create default targets for filesystem handling

Miroslav Grepl • 11 years ago

634d39

- Don't audit access checks by sandbox xserver on xdb var_lib

Miroslav Grepl • 11 years ago

82acdf

Make vdagent able to request loading kernel module

Dan Walsh • 11 years ago

859a10

Require sepolgen-ifgen to run in post install

Dan Walsh • 11 years ago

9f52d7

- Add labeling for /dev/tgt

Miroslav Grepl • 11 years ago

708bb6

- accountservice watches when accounts come and go in wtmp

Miroslav Grepl • 11 years ago

166a28

- Fix openshift_search_lib

Miroslav Grepl • 11 years ago

574431

Add gssproxy policy

Dan Walsh • 11 years ago

88eb5b

Run sepolgen-ifgen in post install or selinux-policy-devel

Dan Walsh • 11 years ago

9b75ca

Update to the latest f19

Miroslav Grepl • 11 years ago

520d6f

- Dontaudit to getattr on dirs for dovecot-deliver

Miroslav Grepl • 11 years ago

d4d344

- Add additional fixes for #948073 bug

Miroslav Grepl • 11 years ago

471c1e

Make sure users and unconfined domains create .hushlogin with the correct label

Dan Walsh • 11 years ago

ff5e7c

Move {_usr}/share/selinux/devel/policy to -devel package so we can remove requirement to install -doc in livecd

Dan Walsh • 11 years ago

bdd37e

Update to latest F19

Miroslav Grepl • 11 years ago

16d305

- Remove userdom_home_manager for xdm_t and move all rules to xserver.te directly

Miroslav Grepl • 11 years ago

2d9b83

- Allow tcpd to execute leafnode

Miroslav Grepl • 11 years ago

728c6f

* Tue Apr 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-38

Miroslav Grepl • 11 years ago

a97fbb

- Allow lvm to create its own unit files

Miroslav Grepl • 11 years ago

ac58d9

- Fix lockdev_manage_files()

Miroslav Grepl • 11 years ago

d61e0b

- Allow realmd to run ipa, really needs to be an unconfined_domain

Miroslav Grepl • 11 years ago

aae650

- Fix description of deny_ptrace boolean

Miroslav Grepl • 11 years ago

d42d16

* Mon Apr 15 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-30

Miroslav Grepl • 11 years ago

1d348d

- Add mising nslcd_dontaudit_write_sock_file() interface

Miroslav Grepl • 11 years ago

fa447f

- Allow httpd_t to connect to osapi_compute port using httpd_use_openstac

Miroslav Grepl • 11 years ago

d8b4fa

Fix file_contexts.subs to label /run/lock correctly

Dan Walsh • 11 years ago

a48e54

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

c675c0

Fix the label of of /run/systemd/generator directory

Dan Walsh • 11 years ago

ce0893

* Fri Apr 5 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-26

Miroslav Grepl • 11 years ago

f4f51d

- Allow realmd to create tmp files

Miroslav Grepl • 11 years ago

d9444b

- Add labeling for /usr/share/pki

Miroslav Grepl • 11 years ago

30fc9e

Revert "Fix labels subs to use /var/run rather then /run, since /run will be ignored"

Dan Walsh • 12 years ago

43a40e

Revert "Fix labels subs to use /var/run rather then /run, since /run will be ignored"

Dan Walsh • 12 years ago

620bf3

Fix labels subs to use /var/run rather then /run, since /run will be ignored

Dan Walsh • 12 years ago

a05152

Fix labels subs to use /var/run rather then /run, since /run will be ignored

Dan Walsh • 12 years ago

40cef5

Allow localectl to read /etc/X11/xorg.conf.d directory

Dan Walsh • 12 years ago

6c034c

Merge branches 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

07ce8f

Fix triggerpostun command

Dan Walsh • 12 years ago

aef8ac

- Adopt swift changes from lhh@redhat.com

Miroslav Grepl • 12 years ago

00d1b8

- Allow postgresql to manage rgmanager pid files

Miroslav Grepl • 12 years ago

06b84e

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

0a3717

Allow sshd to communicate with libvirt to set containers labels

Dan Walsh • 12 years ago

8af4ec

* Mon Mar 4 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-18

Miroslav Grepl • 12 years ago

e30ef5

Fix spec file

Miroslav Grepl • 12 years ago

ed588c

* Fri Feb 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-17

Miroslav Grepl • 12 years ago

e4a8be

Remove rgmanager,pacemaker,aisexec,pacemaker policies which have been merge to rhcs.pp as cluster_t

Miroslav Grepl • 12 years ago

59421a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

1be9b1

Cover up errors if .config dir does not exist, no need to run restorecon twice

Dan Walsh • 12 years ago

0aef6e

- Allow nmbd_t to create samba_var_t directories

Miroslav Grepl • 12 years ago

94b74a

Man pages are now generated in the build process

Dan Walsh • 12 years ago

79ec80

Man pages are now generated in the build process

Dan Walsh • 12 years ago

6a97c7

Fix typo in the interface

Miroslav Grepl • 12 years ago

f2805a

New POLICYCOREUTILSVER is required

Miroslav Grepl • 12 years ago

cc78bc

Add latest fixes

Miroslav Grepl • 12 years ago

7ed95b

* Thu Feb 21 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-15

Miroslav Grepl • 12 years ago

2aca9b

Switch to building man pages and html pages on the fly

Dan Walsh • 12 years ago

a7c9a9

- Allow gluster to get attrs on all fs

Miroslav Grepl • 12 years ago

26cbc5

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 12 years ago

f0628b

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 12 years ago

5eea0f

Remove shutdown policy. Shutdown is now a symlink to systemctl.

Dan Walsh • 12 years ago

3460d4

Remove unused patches

Dan Walsh • 12 years ago

c1f199

- virsh now does a setexeccon call

Miroslav Grepl • 12 years ago

2599f2

Bump required versions for tool chain.

Dan Walsh • 12 years ago

793556

- Rename files_rw_inherited_tmp_files to files_rw_inherited_tmp_file

Miroslav Grepl • 12 years ago

7980df

- Allow gpg to read fips_enabled

Miroslav Grepl • 12 years ago

ad0943

Remove unconfined_u content from appconfig-mls

Dan Walsh • 12 years ago

d4e203

Fix spec file

Miroslav Grepl • 12 years ago

953ff1

- Add xserver_xdm_ioctl_log() interface

Miroslav Grepl • 12 years ago

da973f

add openstack swift domain

Dan Walsh • 12 years ago

13b721

add openshift_cron_t as a permissive domain

Dan Walsh • 12 years ago

330d3c

Add systemd_sysctl_t as a permissive domain

Dan Walsh • 12 years ago

329220

* Wed Jan 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-9

Miroslav Grepl • 12 years ago

f12506

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

45852f

Do a better job of cleaning up old policy files, trigger relabel of /home on upgrade to F19

Dan Walsh • 12 years ago

b59d07

- Change ssh_use_pts to use macro and only inherited sshd_devpts_t

Miroslav Grepl • 12 years ago

aab193

Fix dupl transition rules in mozilla.te

Miroslav Grepl • 12 years ago

a39c31

* Fri Jan 25 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-7

Miroslav Grepl • 12 years ago

1802be

clamav and amavis has been merge to antivirus policy

Miroslav Grepl • 12 years ago

4c3676

* Wed Jan 23 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-6

Miroslav Grepl • 12 years ago

b59190

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a09a7d

Add selinux-policy-filesystem for /etc/selinux directory so it can be shared with libsemanage

Dan Walsh • 12 years ago

6d40a6

- Fix systemd_manage_unit_symlinks() interface

Miroslav Grepl • 12 years ago

207a4d

Rename gnomeclock to systemd_timedated

Dan Walsh • 12 years ago

5f2806

Rename gnomeclock to systemd_timedated

Dan Walsh • 12 years ago

c14302

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

7846a1

Update from upstream

Dan Walsh • 12 years ago

060816

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

afbf13

* Mon Jan 14 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-4

Miroslav Grepl • 12 years ago

7f090d

More fixes for numad

Miroslav Grepl • 12 years ago

9e49f8

Fix virt_ptrace() interface

Miroslav Grepl • 12 years ago

a32777

fix consolekit

Miroslav Grepl • 12 years ago

a765f3

* Fri Jan 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-3

Miroslav Grepl • 12 years ago

a7dce2

Add back consolekit but we keep just consolekit.te and .fc was commented

Miroslav Grepl • 12 years ago

0c265c

- Remove all mcs overrides and replace with t1 != mcs_constrained_ty

Miroslav Grepl • 12 years ago

f851ae

use policy.29

Miroslav Grepl • 12 years ago

fa970c

Require POLICYCOREUTILSVER 2.1.13-53

Miroslav Grepl • 12 years ago

8f47af

* Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1

Miroslav Grepl • 12 years ago

23a944

Upload new upstream sources

Miroslav Grepl • 12 years ago

e5e418

Bump POLICYVER

Miroslav Grepl • 12 years ago

9cdcf5

Revert "Upstream uses ctdb instead of ctdbd policy"

Miroslav Grepl • 12 years ago

fdeb41

Revert "Upstream change:"

Miroslav Grepl • 12 years ago

c57639

Revert "Upstream change:"

Miroslav Grepl • 12 years ago

1a1e00

Revert "Upstream change:"

Miroslav Grepl • 12 years ago

6e9f07

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

3ba951

Bump the policy version to 28 to match selinux userspace

Dan Walsh • 12 years ago

4ee59f

Upstream change:

Miroslav Grepl • 12 years ago

0368b4

Upstream change:

Miroslav Grepl • 12 years ago

731688

Upstream change:

Miroslav Grepl • 12 years ago

098e5a

Upstream uses ctdb instead of ctdbd policy

Miroslav Grepl • 12 years ago

187110

Bump the policy version to 28 to match selinux userspace

Dan Walsh • 12 years ago

01be26

Fresh start on permissive domains for F19

Dan Walsh • 12 years ago

bd7833

* Wed Jan 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-69

Miroslav Grepl • 12 years ago

17da01

renamed: policy-rawhide.patch -> policy-rawhide-base.patch

Miroslav Grepl • 12 years ago

eb0fd2

Backport policy from F18

Miroslav Grepl • 12 years ago

524914

Add modules-*.conf files

Miroslav Grepl • 12 years ago

003088

Make rawhide == f18

Miroslav Grepl • 12 years ago

a27009

Make sure content created in the homedir by uncnfined domains get created with the corect label. specifically /.readahead

rhatdan • 12 years ago

5991fc

+* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-3

Miroslav Grepl • 12 years ago

e88478

* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2

Miroslav Grepl • 12 years ago

711b0e

* Fri Aug 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11

Miroslav Grepl • 12 years ago

e2915a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

530123

Shut off httpd_tty_comm by default since this is handled by systemd now

Dan Walsh • 12 years ago

42bb16

Fix typo in virt.te

Miroslav Grepl • 12 years ago

e1fa90

* Thu Aug 2 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-0

Miroslav Grepl • 12 years ago

46a9c6

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

f9f073

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-15

Miroslav Grepl • 12 years ago

3c848e

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

16f884

Fix duplicate declaration

Miroslav Grepl • 12 years ago

e08c87

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

6e4df5

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-

Miroslav Grepl • 12 years ago

42c409

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

fc246a

Add equivalency for /usr/local -> /usr

Dan Walsh • 12 years ago

4dd322

Fix systemd.fc

Miroslav Grepl • 12 years ago

20ce6a

- Add systemd_logind_inhibit_var_run_t attribute

Miroslav Grepl • 12 years ago

b4a78a

Fix genman to stop truncating boolean descriptions that do not end with a '.', allow users to specify a list of domains to produce, fix spelling mistake

Dan Walsh • 12 years ago

03f80a

Add interface to dontaudit getattr access on sysctls

Dan Walsh • 12 years ago

267612

* Mon Jul 23 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12

Miroslav Grepl • 12 years ago

9ba137

Fix nsswitch_booleans list in genman

Miroslav Grepl • 12 years ago

355c11

Fix genman.py to correct PORT part

Miroslav Grepl • 12 years ago

1c3892

Fix genman.py script to descrite nsswitch_domain booleans for domain types

Miroslav Grepl • 12 years ago

9c9358

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

Dennis Gilmore • 12 years ago

c07f64

+- Add realmd and stapserver policies

Miroslav Grepl • 12 years ago

3da13d

Add stapserver and realmd policy to modules-targeted.conf

Miroslav Grepl • 12 years ago

3bbc9b

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 12 years ago

18fc0f

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 12 years ago

9d1d99

- Until we figure out how to fix systemd issues, allow all apps that send syslog messag

Miroslav Grepl • 12 years ago

98ec5a

Add php-fpm to modules-targeted.conf

Miroslav Grepl • 12 years ago

770036

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

9fe965

Copy F17 customizable_types into F18

Dan Walsh • 12 years ago

8d8178

* Tue Jul 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8

Miroslav Grepl • 12 years ago

0f07ba

- add ptrace_child access to process

Miroslav Grepl • 12 years ago

1de5de

* Mon Jun 25 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6

Miroslav Grepl • 12 years ago

52ac61

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a3e9dc

Remove pyzor and razor modules

Dan Walsh • 12 years ago

7f9b7d

- apcupsd needs to read /etc/passwd

Miroslav Grepl • 12 years ago

c74d19

- Add support for ecryptfs

Miroslav Grepl • 12 years ago

bfc280

* Tue Jun 12 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3

Miroslav Grepl • 12 years ago

c8f96d

* Sat Jun 9 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-2

Miroslav Grepl • 12 years ago

4415df

Add booleans.subs_dist to selinux-policy package

Dan Walsh • 12 years ago

c39563

Remove permissive domains in F17 from F18

Dan Walsh • 12 years ago

2815c1

Trigger a restorecon -R -v /home on the next update

Dan Walsh • 12 years ago

62163c

Fix patch to eliminate sepolgen errors

Dan Walsh • 12 years ago

52f92d

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

5f75e3

Fix merge context issues

Miroslav Grepl • 12 years ago

2a80c7

fix sources

Miroslav Grepl • 12 years ago

d68342

update selinux-policy.spec file

Miroslav Grepl • 12 years ago

7efcb8

Add temporary roleattribute patches

Miroslav Grepl • 12 years ago

1ee0a3

Update config.tgz

Miroslav Grepl • 12 years ago

922fd7

* Thu Jun 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1

Miroslav Grepl • 12 years ago

3dd200

Upload new sources

Miroslav Grepl • 12 years ago

e392ec

Update modules-* files

Miroslav Grepl • 12 years ago

24c148

Add permissivedomains module

Miroslav Grepl • 12 years ago

4daeee

Sync master with F17

Miroslav Grepl • 12 years ago

4a27ed

Fix contexts file for lxc

Dan Walsh • 12 years ago

59ed31

Add lxc context definitions

Dan Walsh • 12 years ago

05c3d9

+* Mon Feb 13 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-

Miroslav • 13 years ago

de6933

Add dnssec policy and go back to unconfined domains versus permissive domains

Dan Walsh • 13 years ago

4066cf

Revert "Dropping support for snort since it was dropped from Fedora. Users should use nagios"

Dan Walsh • 13 years ago

7bf102

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

5c28b0

Dropping support for snort since it was dropped from Fedora. Users should use nagios

Dan Walsh • 13 years ago

76d9bf

Fedora no longer ships kerneloops, dropping policy

Dan Walsh • 13 years ago

d3a57c

- Add policy for grindengine MPI jobs

Miroslav Grepl • 13 years ago

81894d

Add label for /etc/WebCalendar

Miroslav Grepl • 13 years ago

618ef7

Revert "Simplify the build-docs target"

Miroslav Grepl • 13 years ago

80d21d

Fix typo

Miroslav Grepl • 13 years ago

3d8eaa

- Add new sysadm_secadm.pp module

Miroslav Grepl • 13 years ago

4689b0

Simplify the build-docs target

Dan Walsh • 13 years ago

01be48

Allow builder to skip build_docs

Dan Walsh • 13 years ago

dc4ca7

- Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory

Miroslav • 13 years ago

30ab25

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 13 years ago

3515d8

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 13 years ago

938249

- More /usr move fixes

Miroslav Grepl • 13 years ago

fb431d

Remove /lib64 subs since this is not a link, swithc /lib/systemd to /usr/lib since the usrmove

Dan Walsh • 13 years ago

cde75b

POLY is no longer used

Dan Walsh • 13 years ago

191c43

Fixes more typos

Miroslav Grepl • 13 years ago

26f953

Make sure /etc/passwd and /etc/group properly labeled

Dan Walsh • 13 years ago

f53135

Fix typo

Miroslav • 13 years ago

b9a644

* Thu Jan 26 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80

Miroslav • 13 years ago

a9d343

- Turn on deny_ptrace boolean for the Rawhide run, so we can t

Miroslav Grepl • 13 years ago

0c0b39

Turn on deny_ptrace boolean for the Rawhide run, so we can test this out

Dan Walsh • 13 years ago

a2e8b9

+- Add labeling for udisks2

Miroslav • 13 years ago

75a7b9

- Treat Bip with bitlbee policy

Miroslav Grepl • 13 years ago

8cd443

- Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there

Miroslav Grepl • 13 years ago

de9114

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

291b1f

Remove Requires for bunzip2 and mktemp

Dan Walsh • 13 years ago

b80397

- Merge systemd patch

Miroslav Grepl • 13 years ago

153cc8

Fixes to make rawhide boot in enforcing mode with latest systemd changes

Dan Walsh • 13 years ago

e96605

Fixes to make rawhide boot in enforcing mode with latest systemd changes

Dan Walsh • 13 years ago

cd25a7

Add labeling for /var/run/systemd/journal/syslog

Dan Walsh • 13 years ago

ba7c7a

Add labeling for /var/run/systemd/journal/syslog

Dan Walsh • 13 years ago

86d3f6

Fix typo

Miroslav • 13 years ago

9387d2

+- Add labeling for /var/run/systemd/journal/syslog

Miroslav • 13 years ago

68079f

Fix typo in xserver_filetrans_admin_home_content()

Miroslav • 13 years ago

ecab25

Fix typo in xserver_filetrans_home_content()

Miroslav • 13 years ago

0149a5

use entropyd instead of entropy

Miroslav • 13 years ago

1b62e3

- Fixed destined form libvirt-sandbox

Miroslav • 13 years ago

69a8d0

Rename audioentropy to entropy to match upstream

Dan Walsh • 13 years ago

7cf580

- New fix for seunshare, requires seunshare_domains to be able to mounton /

Miroslav • 13 years ago

b3ef57

Add Zoneminder policy

Dan Walsh • 13 years ago

904f70

Test if selinuxenabled correctly

Dan Walsh • 13 years ago

5a73fd

default trans rules for Rawhide policy

Dan Walsh • 13 years ago

d5b8b9

- default trans rules for Rawhide policy

Miroslav Grepl • 13 years ago

67539d

Update to handle labeling on /sys using systemd-tmpfiles, also support default_range transition rules

Dan Walsh • 13 years ago

bce4ec

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

a92258

- Add httpd_can_connect_ldap() interface

Miroslav • 13 years ago

cd2519

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

49b373

Committing my changes

Dan Walsh • 13 years ago

ad10ef

+- Add label for /var/lib/iscan/interpreter

Miroslav • 13 years ago

7c693b

- Allow abrt to request the kernel to load a module

Miroslav • 13 years ago

d17f75

+- Allow mozilla_plugin_t to manage mozilla_home_t

Miroslav • 13 years ago

202bb4

- Fixes for xguest package

Miroslav • 13 years ago

1094d0

+- Fixes related to /bin, /sbin

Miroslav • 13 years ago

e91d87

Remove nsplugin, merged into mozilla_plugin

Dan Walsh • 13 years ago

4ad274

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

5305bd

Eliminate nsplugin from F17

Dan Walsh • 13 years ago

102fd0

+- Use fs_use_xattr for squashf

Miroslav • 13 years ago

4fe804

- Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it

Miroslav • 13 years ago

e5768e

Let firewallgui read the selinux config

Dan Walsh • 13 years ago

e9119e

Disable nsplugin also in MLS

Miroslav • 13 years ago

51bad8

Fix typo in the puppetmaster policy

Miroslav • 13 years ago

63c9fd

- Disable nsplugin module

Miroslav • 13 years ago

0ca57d

nsplugin is no longer used

Miroslav • 13 years ago

218172

+- Allow mcelog_t to create dir and file in /var/run and label it

Miroslav • 13 years ago

234df6

Merge nsplugin with mozilla_plugin

Dan Walsh • 13 years ago

628fb6

Merge

Dan Walsh • 13 years ago

3c81e3

Add guest home spec

Dan Walsh • 13 years ago

74900d

- Add ssh_dontaudit_search_home_dir

Miroslav • 13 years ago

19d3c6

- Pulseaudio changes

Miroslav • 13 years ago

68f145

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

076e5f

Checkin patches to git repository

dwalsh • 13 years ago

4501de

Add blueman policy

Dan Walsh • 13 years ago

c68d7a

Add denyexecmem patch

Dan Walsh • 13 years ago

6b27a2

Remove allow_execmem boolean and replace with deny_execmem boolean

Dan Walsh • 13 years ago

4147fe

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

901609

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

e58227

Add more MCS fixes to make sandbox working

Dan Walsh • 13 years ago

13382d

MCS fixes

Dan Walsh • 13 years ago

653590

MCS fixes

Dan Walsh • 13 years ago

c30a9b

MCS fixes

Dan Walsh • 13 years ago

55e8d8

MCS fixes

Dan Walsh • 13 years ago

8f22f8

MCS fixes

Dan Walsh • 13 years ago

01e90f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0b72d1

MCS fixes

Dan Walsh • 13 years ago

8872d3

+- MCS fixes

Miroslav • 13 years ago

76b2f5

change qemu_t to svirt_t in mls config file virtual machines, remove config data

Dan Walsh • 13 years ago

5717c5

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

d5bede

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

a7f002

Check in fixed for Chrome nacl support

Dan Walsh • 13 years ago

bc6fbd

Begin removing qemu_t domain, we really no longer need this domain.

Dan Walsh • 13 years ago

38087d

Begin removing qemu_t domain, we really no longer need this domain.

Dan Walsh • 13 years ago

26536c

Remove qemu.pp again without causing a crash

Dan Walsh • 13 years ago

a1db2c

Remove qemu.pp, everything should use svirt_t or stay in its current domain

Dan Walsh • 13 years ago

b4b026

Allow policykit to talk to the systemd via dbus

Dan Walsh • 13 years ago

084f95

Change bootstrap name to nacl

Dan Walsh • 13 years ago

fa26d8

Allow named to connect to dirsrv by default

Dan Walsh • 13 years ago

44066b

Allow firewallgui to read /etc/selinux/config

Dan Walsh • 13 years ago

3dcdda

- Fixes for cloudform policies which need to connect to random ports

Miroslav • 13 years ago

b6ae80

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

fbfb5e

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

1a2b4d

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

f875d2

Policy update should not modify local contexts

Dan Walsh • 13 years ago

627276

Policy update should not modify local contexts

Dan Walsh • 13 years ago

37b75a

Policy update should not modify local contexts

Dan Walsh • 13 years ago

e1f17e

Remove ada policy

Dan Walsh • 13 years ago

052e17

Remove ada policy

Dan Walsh • 13 years ago

b01657

Remove tzdata policy

Dan Walsh • 13 years ago

61fa8d

Remove tzdata policy

Dan Walsh • 13 years ago

8214f7

Remove tzdata policy

Miroslav • 13 years ago

1944b1

Add cloudform to modules-targetd.conf

Miroslav • 13 years ago

5deba1

Remove tzdata domain, only necessary to make sure stuff is labeled correctly.

Dan Walsh • 13 years ago

087aae

Add policies for nova openstack

Dan Walsh • 13 years ago

a56e13

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

4dba2e

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

1414f9

Add passwd_file_t for /etc/ptmptmp

Dan Walsh • 13 years ago

9bf3aa

Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)

Dan Walsh • 13 years ago

e29441

Move dontaudit sys_ptrace line from permissive.te to domain.te

Dan Walsh • 13 years ago

245397

Don't check md5 size or mtime on certain config files

Dan Walsh • 13 years ago

042e3a

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

2f4dfe

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

80347b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

3af504

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

6554bb

- Fixes for bootloader policy

Miroslav • 13 years ago

62760c

Shrink size of policy through use of attributes for userdomain and apache

Dan Walsh • 13 years ago

2a89df

Fix spec file

Miroslav • 13 years ago

100055

- Allow virsh to read xenstored pid file

Miroslav • 13 years ago

54943f

Allow nmbd to manage sock file in /var/run/nmbd

Dan Walsh • 13 years ago

859ba0

Fix missing patch from F16

Dan Walsh • 13 years ago

14d7aa

Allow logrotate setuid and setgid since logrotate is supposed to do it

Dan Walsh • 13 years ago

3b9467

Allow logrotate setuid and setgid since logrotate is supposed to do it

Dan Walsh • 13 years ago

f1bc73

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

e15ae4

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

a004ca

+- Add support for Clustered Samba commands

Miroslav • 13 years ago

024724

Add label for /etc/passwd

Dan Walsh • 13 years ago

4d2486

Add grub.patch

Miroslav • 13 years ago

1b20a5

httpd_can_network_connect_ftp is bad name of interface

Miroslav • 13 years ago

b8a4bf

Use cobblerd type instread of ftpd

Miroslav • 13 years ago

69cf5b

One more

Miroslav • 13 years ago

99d7cc

Use proper interface

Miroslav • 13 years ago

37ce30

Fix

Miroslav • 13 years ago

0c1fa2

more fixes

Miroslav • 13 years ago

7c0196

More fixes for ephemeral.patch

Miroslav • 13 years ago

60e110

Fix ephemeral.patch

Miroslav • 13 years ago

988dae

Fixes for systemd unit files

Miroslav • 13 years ago

af391f

Update ephemeral patch and fix modules defs for the thumb images

Dan Walsh • 13 years ago

6a5563

Make unconfined domains permissive for rawhide

Dan Walsh • 13 years ago

24b80b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

4ce538

add thumbnailer protection

Dan Walsh • 13 years ago

e88b9a

- Make mta_role() active

Miroslav • 13 years ago

02a8a4

Fix spec file

Miroslav Grepl • 13 years ago

1aafd0

Fix spec file

Miroslav Grepl • 13 years ago

031161

+- Change screen to use screen_domain attribute and allow screen_domains to read all process domain state

Miroslav • 13 years ago

f9c350

Add definition for ephemeral ports

Dan Walsh • 13 years ago

747b71

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

70f6a3

Add user_tty_device_t to tell restorecon to not care about tty devices labeled for users

Dan Walsh • 13 years ago

a3a771

Remove duplicate declaration

Miroslav • 13 years ago

049fa4

- Needs to require a new version of checkpolicy

Miroslav • 13 years ago

dec011

- Allow sanlock to manage virt lib files

Miroslav • 13 years ago

40af2a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

a59df1

Make seusers config noreplace

Dan Walsh • 13 years ago

9c4a93

- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files

Miroslav • 13 years ago

b3edab

+- Allow collectd to read hardware state information

Miroslav • 13 years ago

e8563b

Fix typo in spec file

Miroslav • 13 years ago

b1448b

- removing unconfined_notrans_t no longer necessary

Miroslav • 13 years ago

116a11

- Add exim_exec_t label for /usr/sbin/exim_tidydb

Miroslav • 13 years ago

5b0c57

- pki needs another port

Miroslav • 13 years ago

392fd7

Add glance policy

Dan Walsh • 13 years ago

e6877a

Add glance module definition

Dan Walsh • 13 years ago

4fb416

Add glance module definition

Dan Walsh • 13 years ago

624394

- Allow Postfix to deliver to Dovecot LMTP socket

Miroslav • 13 years ago

1c136f

Add permissivedomains module

Dan Walsh • 13 years ago

7c5dd0

- Allow insmod_t to use fds leaked from devicekit

Miroslav • 13 years ago

2f3d11

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 13 years ago

06b46a

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 13 years ago

22a1cf

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ba2e58

Make users_extra and seusers.final into config no replace so semanage users and semanage login files do not get overwritten

Dan Walsh • 13 years ago

39eb9e

- Add policy for sa-update being run out of cron jobs

Miroslav • 13 years ago

24041f

Hard code to MLSENABLED

Dan Walsh • 13 years ago

111d5a

Do not do preinstall if there is not previous install

Dan Walsh • 13 years ago

5d837b

- Turn on allow_domain_fd_use boolean on F16

Miroslav • 13 years ago

8d13f5

livecd fixes

Dan Walsh • 13 years ago

10f0de

Cleanup spec file to remove rpmnew files

Dan Walsh • 13 years ago

8a78e8

storage module needs to be as base in mls

Miroslav • 13 years ago

08ef81

- fetchmail can use kerberos

Miroslav • 13 years ago

913fab

storage should be in base

Dan Walsh • 13 years ago

41a181

Add cfengine policy

Dan Walsh • 13 years ago

8becfd

- Add abrt_domain attribute

Miroslav • 13 years ago

2aa62d

Add uuidd module

Dan Walsh • 13 years ago

d0fad1

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

439e11

Remove howl, hotplug and kudzu modules, since they are no longer used

Dan Walsh • 13 years ago

c1eb3e

- More fixes of rules which cause an explosion in rules by Dan Walsh

Miroslav • 13 years ago

58f550

- Allow rcsmcertd to perform DNS name resolution

Miroslav • 13 years ago

0c240d

Add collectd module to targeted policy

Dan Walsh • 13 years ago

8193ba

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

300f0d

- Allow systemd_logind to send dbus messages with users

Miroslav • 13 years ago

f5593e

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

c209cb

- Fix oracledb_port definition

Miroslav • 13 years ago

6e9c22

systemd fixes

Miroslav • 13 years ago

273e93

- Add initial policy for abrt_dump_oops_t

Miroslav • 13 years ago

2ed528

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

dd16c3

- Initial systemd_logind policy

Miroslav Grepl • 13 years ago

805cc3

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ef582c

add ctdbd policy module

Dan Walsh • 13 years ago

854346

- Allow setsched for virsh

Miroslav Grepl • 13 years ago

2b7c05

Fix spec file

Miroslav Grepl • 13 years ago

50f07b

Remove duplicate declaration in ABRT

Miroslav Grepl • 13 years ago

9cf29c

Fix typo in modules-targeted.conf

Miroslav Grepl • 13 years ago

40468c

- A lot of users are running yum -y update while in /root which is causing ldc

Miroslav Grepl • 13 years ago

330eac

add l2tpd daemon policy

Dan Walsh • 13 years ago

5a8295

Removing /usr/lib/debug subs_dist entry. This did not work properly, we need to go back to labeling based on lib_t

Dan Walsh • 13 years ago

32e788

Fully path the semodule command

Dan Walsh • 13 years ago

fb5b77

- Change usbmuxd_t to dontaudit attempts to read chr_file

Miroslav Grepl • 13 years ago

975370

Add updated policy-F16.patch

Miroslav Grepl • 13 years ago

81fbb0

Upload the right source file

Miroslav Grepl • 13 years ago

3f8c09

Update to upstream

Miroslav Grepl • 13 years ago

ade486

- More fixes

Miroslav Grepl • 13 years ago

2885bf

Next attempt at getting selinux-policy-* to work without rebuilding policy.

Dan Walsh • 13 years ago

7e1b61

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

cf012e

Change required policycoreutils and libsemanage

Dan Walsh • 13 years ago

8782a9

- Add dspam policy

Miroslav Grepl • 13 years ago

4fb7b4

Eliminate olpc stuff and other no longer needed files. Update to new system to build policy.* file within payload.

Dan Walsh • 13 years ago

857c81

apply merge

Dan Walsh • 13 years ago

d0597c

Old passanger module needs to be removed in spec file

Miroslav Grepl • 13 years ago

183e54

- Fixes for zabbix

Miroslav Grepl • 13 years ago

d8b121

Update from git

Dan Walsh • 13 years ago

5253d4

- Add mailscanner policy from dgrift

Miroslav Grepl • 13 years ago

94cdba

Allow policy.VERSION and modules to ship with package

Dan Walsh • 13 years ago

053565

Label stuff under /usr/lib/debug as if it was labeled under /

Dan Walsh • 13 years ago

8f6432

Fix spec file

Miroslav Grepl • 13 years ago

0e70f6

- Fixes for sanlock policy

Miroslav Grepl • 13 years ago

a56fb9

- Add more fixes for ABRT retrace-server

Miroslav Grepl • 13 years ago

b817e1

- Add rhev policy module to modules-targeted.conf

Miroslav Grepl • 13 years ago

a8e065

- Lot of fixes

Miroslav Grepl • 13 years ago

ace252

add sanlock and wdmd policy

Dan Walsh • 13 years ago

7920a0

New policy patch requires updated checkpolicy package

Dan Walsh • 13 years ago

d97c92

- Allow logrotate to execute systemctl

Miroslav Grepl • 13 years ago

cb71de

Add callweaver module

Dan Walsh • 13 years ago

d34689

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

7fbbd6

- Dontaudit sys_module for ifconfig

Miroslav Grepl • 13 years ago

27bf70

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ff120d

- Fix label for /usr/share/munin/plugins/munin_* plugins

Miroslav Grepl • 13 years ago

cfc00b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e81c79

Fix typo

Miroslav Grepl • 13 years ago

cead05

- Forard port changes from F15 for telepathy

Miroslav Grepl • 13 years ago

6347ee

- Allow init_t getcap and setcap

Miroslav Grepl • 13 years ago

b02295

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

99b2fe

Default telepath to allow it to connect to network ports

Dan Walsh • 13 years ago

402e7b

- Add support for ABRT retrace server

Miroslav Grepl • 13 years ago

a8c63d

Accidently checked in my test spec file

Dan Walsh • 13 years ago

ff64d9

Remove MERGE comments from patch

Dan Walsh • 13 years ago

fa7479

Readd my patch

Dan Walsh • 13 years ago

bd16f8

Move to version 26 of policy

Dan Walsh • 13 years ago

9bd168

- Fixes for zarafa policy

Miroslav Grepl • 13 years ago

a35763

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

637b33

- xdm_t needs getsession for switch user

Miroslav Grepl • 13 years ago

6ac264

Policy files should not be in repository

Dan Walsh • 13 years ago

d652e8

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e935d2

Testing

Dan Walsh • 13 years ago

826311

- Add Dan's patch to remove 64 bit variants

Miroslav Grepl • 13 years ago

1b7c8f

Remove lib64 mapping and use subs. change subs name to file_context.subs_dist

Dan Walsh • 13 years ago

86354f

- Fix typo

Miroslav Grepl • 13 years ago

213048

Fix typo

Miroslav Grepl • 13 years ago

7300d2

- Add /var/run/lock /var/lock definition to file_contexts.subs

Miroslav Grepl • 13 years ago

397c1e

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Miroslav Grepl • 13 years ago

beba2f

Uncomment SEPOLGEN in Makefile

Miroslav Grepl • 13 years ago

509b0c

Update to latest versions and change policy version

Dan Walsh • 13 years ago

568f78

comment out the sepolgen line

Miroslav Grepl • 13 years ago

81c96b

comment out the sepolgen line

Miroslav Grepl • 13 years ago

aaa0ee

comment out the sepolgen line

Miroslav Grepl • 13 years ago

681292

- Fix label for /var/run/udev to udev_var_run_t

Miroslav Grepl • 13 years ago

fb7e97

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

462b89

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

2049a1

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

a7705c

- Allow $1_sudo_t and $1_su_t open access to user terminals

Miroslav Grepl • 14 years ago

36d3f3

Remove policy-f15.patch and turn off authlogin_nsswitch_use_ldap

Dan Walsh • 14 years ago

909fad

- Remove some unconfined domains

Miroslav Grepl • 14 years ago

47d5c1

Fix multiple specification for boot.log

Miroslav Grepl • 14 years ago

7c23cf

- devicekit leaks file descriptors to setfiles_t

Miroslav Grepl • 14 years ago

f5eb99

- Initial policy for matahari

Miroslav Grepl • 14 years ago

af4c0d

+- mozilla_plugin_tmp_t needs to be treated as user tmp files

Miroslav Grepl • 14 years ago

f7f5ca

- Add policykit fixes from Tim Waugh

Miroslav Grepl • 14 years ago

8d5463

Fix minimum policy

Miroslav Grepl • 14 years ago

9b89d8

Add colord policy

Miroslav Grepl • 14 years ago

a72013

Update to upstream

Miroslav Grepl • 14 years ago

672602

- gpg_t needs to talk to gnome-keyring

Miroslav Grepl • 14 years ago

781f34

- Allow usbhid-ups to read hardware state information

Miroslav Grepl • 14 years ago

c34a0c

- Update to upstream

Miroslav Grepl • 14 years ago

728828

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Dennis Gilmore • 14 years ago

60e174

- Update to ref policy

Dan Walsh • 14 years ago

d3861c

- Update to ref policy

Dan Walsh • 14 years ago

812781

Merge branches 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

9984f1

- New labeling for postfmulti #675654

Miroslav Grepl • 14 years ago

f12703

Merge branches 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

23a3fb

- syslog_t needs syslog capability

Miroslav Grepl • 14 years ago

19cd66

- Add tcsd policy

Dan Walsh • 14 years ago

731e69

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

0e793c

- ricci_modclusterd_t needs to bind to rpc ports 500-1023

Miroslav Grepl • 14 years ago

ebce35

stop relabeling /var/lib

Dan Walsh • 14 years ago

6b3837

- Fix xserver_dontaudit_read_xdm_pid

Miroslav Grepl • 14 years ago

73e5de

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

8996b8

- Allow nagios plugin to read /proc/meminfo

Miroslav Grepl • 14 years ago

3c7073

Merge branches 'master', 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

a785c6

- nslcd needs setsched and to read /usr/tmp

Miroslav Grepl • 14 years ago

0ababf

Merge branches 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

f2d561

- NetworkManager wants to read consolekit_var_run_t

Miroslav Grepl • 14 years ago

408ea9

Add keyring policy

Dan Walsh • 14 years ago

308055

Merge branches 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

0dc963

Fix release

Miroslav Grepl • 14 years ago

ac028b

- Add sepgsql_contexts file

Miroslav Grepl • 14 years ago

a34c78

Allow_gssd_read_tmp should be turned on

Dan Walsh • 14 years ago

fc15ca

Merge branches 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

cab64e

- Update config.tgz

Miroslav Grepl • 14 years ago

923aa2

Fix merge

Miroslav Grepl • 14 years ago

9267e7

- Update to upstream

Miroslav Grepl • 14 years ago

86b1f1

- Add oracle ports and allow apache to connect to them if the connect_db boole

Miroslav Grepl • 14 years ago

f16c69

- gnomeclock executes a shell

Miroslav Grepl • 14 years ago

116d73

- Add firewalld policy

Miroslav Grepl • 14 years ago

b18633

- Add initial policy for system-setup-keyboard which is now daemon

Miroslav Grepl • 14 years ago

b559c4

- Gnome apps list config_home_t

Dan Walsh • 14 years ago

b96903

- New labels for ghc http content

Dan Walsh • 14 years ago

ef836a

Make alsa a module rather then in base

Dan Walsh • 14 years ago

c68e37

Merge branches 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

7a540e

- Update to upstream

Miroslav Grepl • 14 years ago

d98054

Merge branches 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

537b8d

Update to upstream

Miroslav Grepl • 14 years ago

d6c5f3

- Update selinux policy to handle new /usr/share/sandbox/start script

Dan Walsh • 14 years ago

4a0e76

- Update selinux policy to handle new /usr/share/sandbox/start script

Dan Walsh • 14 years ago

f3f61e

Merge branches 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

b4f189

- Update to upstream

Miroslav Grepl • 14 years ago

0ba6b2

- Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs

Miroslav Grepl • 14 years ago

1adb28

Merge branches 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

d93f0b

- Allow domains that transition to ping or traceroute, kill them

Dan Walsh • 14 years ago

25660b

Merge branches 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

4a0ad9

- Turn on systemd policy

Miroslav Grepl • 14 years ago

3c0b9e

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

acc255

- Fixes for clamscan and boinc policy

Miroslav Grepl • 14 years ago

b04a85

- Push fixes to allow disabling of unlabeled_t packet access

Miroslav Grepl • 14 years ago

c2ad36

- Fixes for lvm to work with systemd

Miroslav Grepl • 14 years ago

7b62a8

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

d01d9d

- Fix the label for wicd log

Miroslav Grepl • 14 years ago

151160

- Fix gnome_manage_data interface

Miroslav Grepl • 14 years ago

a4f1f5

- Fix cron to run ranged when started by init

Miroslav Grepl • 14 years ago

094604

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

eca3bf

- Fix up handling of dnsmasq_t creating /var/run/libvirt/network

Dan Walsh • 14 years ago

5bcd7a

Merge branches 'master', 'master', 'master', 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

ed3fce

- fixes to allow /var/run and /var/lock as tmpfs

Miroslav Grepl • 14 years ago

954ef8

Merge branches 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

1586b9

- Remove duplicate declaration

Miroslav Grepl • 14 years ago

b63541

- Update to upstream

Miroslav Grepl • 14 years ago

05f913

Merge branches 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

5b0fcd

- Allow ddclient to fix file mode bits of ddclient conf file

Miroslav Grepl • 14 years ago

3daa6c

- Put back in lircd_etc_t so policy will install

Dan Walsh • 14 years ago

d6719f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

426cf8

- Turn on allow_postfix_local_write_mail_spool

Miroslav Grepl • 14 years ago

4eb45e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branches 'master', 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

b3b652

- Remove serefpolicy-3.9.8.tgz from sources

Miroslav Grepl • 14 years ago

41ebcc

Remove bad tar ball from src

Dan Walsh • 14 years ago

f4eab7

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branches 'master', 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

c55561

- Update to upstream

Miroslav Grepl • 14 years ago

582d2c

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branches 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 14 years ago

13670f

- Allow nagios plugins to read usr files

Miroslav Grepl • 14 years ago

cbb8d5

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

763342

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

519b05

- kdump leaks kdump_etc_t to ifconfig, add dontaudit

Dan Walsh • 14 years ago

50daca

- Turn on mediawiki policy

Miroslav Grepl • 14 years ago

9238df

- Fix init to be able to relabel wtmp, tmp files

Dan Walsh • 14 years ago

7297a3

- Allow groupd transition to fenced domain when executes fence_node

Miroslav Grepl • 14 years ago

5d168a

- Fix up corecommands.fc to match upstream

Dan Walsh • 14 years ago

ded1ef

- Add conflicts for dirsrv package

Dan Walsh • 14 years ago

fc9bf2

- Update to upstream

Dan Walsh • 14 years ago

3e0b78

- Update to upstream

Dan Walsh • 14 years ago

6e50b7

- Update to upstream

Dan Walsh • 14 years ago

06262c

- Fix sandbox to work on nfs homedirs

Dan Walsh • 14 years ago

c52856

-

Dan Walsh • 14 years ago

989659

- Allow NetworkManager to read openvpn_etc_t

Dan Walsh • 14 years ago

9754f4

- Dontaudit sandbox sending sigkill to all user domains

Dan Walsh • 14 years ago

7a2086

- Fixes for systemd to manage /var/run

Dan Walsh • 14 years ago

2bb618

- Allow chome to create netlink_route_socket

Dan Walsh • 14 years ago

bac270

- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.

Dan Walsh • 14 years ago

120845

- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.

Dan Walsh • 14 years ago

4da765

- Allow cobblerd to list cobler appache content

Dan Walsh • 14 years ago

c849c8

- Fixup for the latest version of upowed

Dan Walsh • 14 years ago

d33e64

- Update to upstream

Dan Walsh • 14 years ago

618ed7

- Update to upstream

Dan Walsh • 14 years ago

5a152b

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Dan Walsh • 14 years ago

f0a56e

Rebuild with latest code

Dan Walsh • 14 years ago

dd20c2

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f9346

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

d61823

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f256d

Remove duplicate filecontext for tcfmgr

Dan Walsh • 14 years ago

385392

Allow smbd_t sys_admin capability so samba can change quota on users.

Dan Walsh • 14 years ago

b3e761

- Fix fusefs handling

Dan Walsh • 14 years ago

0daa8b

Put back transition change

Dan Walsh • 14 years ago

7ed755

dontaudit sandbox sending signals to itself. This can happen when they are running at different mcs.

Dan Walsh • 14 years ago

3235a8

Fix mozilla_run_plugin interface

Dan Walsh • 14 years ago

039c65

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

596d86

Fix fusefs handling

Dan Walsh • 14 years ago

55e9f0

Fix version of mediawiki policy

Miroslav Grepl • 14 years ago

d4d13d

Alllow vpnc to be able to read /root/.cert

Miroslav Grepl • 14 years ago

136927

Add policy for mediawiki

Miroslav Grepl • 14 years ago

0def27

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

f73c8e

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

b1cbbd

Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

d1c6ba

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

991ee5

Allow unconfined_t to transition to alsa_t to make sure labels stay correct

Dan Walsh • 14 years ago

ddd1cc

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

fbd9ca

Allow sudo to send signals to any domains the user could have transitioned to.

Dan Walsh • 14 years ago

b45aaa

- Dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

5ae8fb

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

20f707

Allow nsplugin to sendto itself dgrams

Dan Walsh • 14 years ago

f6e966

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 14 years ago

79bff2

- Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

7c487e

Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

4e6b3f

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

fd595e

Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home

Dan Walsh • 14 years ago

521289

Allow haze to connect to yahoo chat and messenger port tcp:5050.

Dominick Grift • 14 years ago

e66aa7

Allow guest to run ps command on its processes by allowing it to read /proc

Dan Walsh • 14 years ago

24ea65

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

ab8faf

Allow firewallgui to sys_rawio which seems to be required to setup masqerading

Dan Walsh • 14 years ago

fb5248

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

e25799

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

f7307c

Allow rpc.quota to do quotamod

Dan Walsh • 14 years ago

7cfb93

Move c2s to run in jabber_router_t domain

Miroslav Grepl • 14 years ago

df488e

Merge branch 'base'

Dominick Grift • 14 years ago

ff9b16

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 14 years ago

71f455

Use permission sets where possible.

Dominick Grift • 14 years ago

7d1f56

XML summary fixes.

Dominick Grift • 14 years ago

783213

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

a25335

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

478149

Source is x_domain and not xserver_t. Moving to x_domain local policy.

Dominick Grift • 14 years ago

e2d9aa

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

568349

Redundant: Included userdom_user_home_content already has this.

Dominick Grift • 14 years ago

daed45

Remove stray semi-colon.

Dominick Grift • 14 years ago

6aa632

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

aaf8a6

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

8b858f

Redundant: Included inetd_service_domain has this.

Dominick Grift • 14 years ago

ce6df0

Support network connect mysql DB.

Dominick Grift • 14 years ago

fae947

There is already an optional policy block for daemontools. Join the two.

Dominick Grift • 14 years ago

5492a1

Consistent ordering of declarations.

Dominick Grift • 14 years ago

9444a1

Use domtrans_pattern where possible.

Dominick Grift • 14 years ago

3c4ffa

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

1e2abe

This is no declaration. Moving to local policy.

Dominick Grift • 14 years ago

39178a

These were duplicate TE rules.

Dominick Grift • 14 years ago

09873e

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

1507cc

These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.

Dominick Grift • 14 years ago

86225e

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

54590a

- Cleanup policy via dgrift

Dan Walsh • 14 years ago

42c814

More typos

Dan Walsh • 14 years ago

e027e9

fix typo

Dan Walsh • 14 years ago

fad629

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

55bffb

Allow consolehelper to read fonts and config files in user homedir

Dan Walsh • 14 years ago

7c94a3

This is git system content.

Dominick Grift • 14 years ago

730ec5

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

78ea2a

Merge branch 'base'

Dominick Grift • 14 years ago

a5ea14

Make hal a dbus_system_domain

Dan Walsh • 14 years ago

f4dc19

Use permission sets where possible.

Dominick Grift • 14 years ago

ac5201

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

cefe9f

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

18f2a7

Use permission sets where possible.

Dominick Grift • 14 years ago

0f7c40

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

c2b2d2

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

1b39de

This permission is already allowed by included mmap_file_perms.

Dominick Grift • 14 years ago

8725d6

Source is postdrop and not local. Moving to postdrop local policy section.

Dominick Grift • 14 years ago

11ad1d

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

a7b40a

These are not declarations move them to local policy section.

Dominick Grift • 14 years ago

f6e866

Redundant: All domains are allowed this access by default.

Dominick Grift • 14 years ago

9bd884

Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.

Dominick Grift • 14 years ago

6d1855

Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)

Dominick Grift • 14 years ago

46d410

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

a8fbd9

- Fix up Xguest policy

Dan Walsh • 14 years ago

1d153e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

5d8259

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 14 years ago

6ed3f1

XML summary fixes.

Dominick Grift • 14 years ago

148e08

Use filetrans_pattern.

Dominick Grift • 14 years ago

3a3e7d

Use stream connect pattern.

Dominick Grift • 14 years ago

44f8aa

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

8bde5e

Make git daemon executable file an application executable file.

Dominick Grift • 14 years ago

96d3c0

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

08c4bb

These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.

Dominick Grift • 14 years ago

38039a

Move calls to external interfaces below policy that governs internal interaction.

Dominick Grift • 14 years ago

02687a

The capability IPC goes on top of the local policy.

Dominick Grift • 14 years ago

d54202

This is a duplicate declaration.

Dominick Grift • 14 years ago

b952f9

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

ef521e

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

68ac47

This is not required here.

Dominick Grift • 14 years ago

0bdd85

Youre not allowed to directly use external types.

Dominick Grift • 14 years ago

82c971

Redundant: All deamons are already allowed this access by default.

Dominick Grift • 14 years ago

59c544

Redundant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

edcc8a

Use permission sets where possible.

Dominick Grift • 14 years ago

1dfc76

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

9a0f79

Redundant: Is already permitted by included rw_chr_file_perms.

Dominick Grift • 14 years ago

9c7f2a

Use permission sets where possible.

Dominick Grift • 14 years ago

72ba80

Allow boinc projects to execute java

Miroslav Grepl • 14 years ago

b0a5fc

Merge branch 'base'

Dominick Grift • 14 years ago

fc0d3d

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

f26267

XML summary fixes.

Dominick Grift • 14 years ago

612346

Use brace extension where possible.

Dominick Grift • 14 years ago

0eef2c

Use permission sets where possible.

Dominick Grift • 14 years ago

69d143

Type zarafa_server_t is not a file type.

Dominick Grift • 14 years ago

5ce19e

This is a role capability.

Dominick Grift • 14 years ago

e13067

Redundant: Included files_search_var_lib already permits access to list generic var directories.

Dominick Grift • 14 years ago

7bc4e8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

ddbd71

Missing required type.

Dominick Grift • 14 years ago

5a98a5

Use stream connect pattern.

Dominick Grift • 14 years ago

d69618

Allow users to ptrace and send any signal to their pyzor agent.

Dominick Grift • 14 years ago

b85c14

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

6cd6ed

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2a7245

Move this to were the other is and where it should be.

Dominick Grift • 14 years ago

3507be

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2528a2

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

b46b3a

This is not a role capability.

Dominick Grift • 14 years ago

30bbb6

Fixed badly chosen type of interface for some interfaces

Miroslav Grepl • 14 years ago

d15b40

Redundant: This is already allowed by included admin_pattern for mpd_var_lib_t.

Dominick Grift • 14 years ago

6ec59c

Redundant: This is already permitted by included manage_dirs_pattern.

Dominick Grift • 14 years ago

a05376

Added for use in admin interfaces with admin_patterns for lock types..

Dominick Grift • 14 years ago

cbd954

These are duplicates and redundants.

Dominick Grift • 14 years ago

7a3762

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

8e3f53

Use list instead of search in admin interfaces.

Dominick Grift • 14 years ago

61f406

This is a role capability.

Dominick Grift • 14 years ago

55c2e0

XML summary fixes.

Dominick Grift • 14 years ago

8ab34f

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

624f2f

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

8f0b74

This is not a role capability.

Dominick Grift • 14 years ago

f6bed4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

23952d

This permission is included with mmap_file_perms.

Dominick Grift • 14 years ago

6c9940

Allow piranha domains to create their pid directory with their pid file type.

Dominick Grift • 14 years ago

3cc747

Implement oident admin.

Dominick Grift • 14 years ago

c4786d

Wrong type required.

Dominick Grift • 14 years ago

f9c2fa

Use permission sets where possible.

Dominick Grift • 14 years ago

f66acf

Redundant; unused interface plus ypbind_t is not a pid file type.

Dominick Grift • 14 years ago

db775a

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

ce8724

Onlt distro redhat currently implements admin_home_t.

Dominick Grift • 14 years ago

dc47bf

This type is not required here.

Dominick Grift • 14 years ago

4e8c69

Missing required type.

Dominick Grift • 14 years ago

d01706

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

1976dd

Allow users to ptrace and send any signal to their lpd agent.

Dominick Grift • 14 years ago

e8ea77

Reduntant: getattr_sock_files_pattern already permit this.

Dominick Grift • 14 years ago

c0ad94

Reduntant: stream_connect_pattern already permits this.

Dominick Grift • 14 years ago

1c45e2

Reduntant: unused, use hal_read_state instead if possible.

Dominick Grift • 14 years ago

74d74b

Use stream connect pattern.

Dominick Grift • 14 years ago

bece7c

I made a mistake in 618ce85f8644651501724947b134855e9e827a74, but as it turns out this interface is not required at all.

Dominick Grift • 14 years ago

ab33cc

Use permission sets where possible.

Dominick Grift • 14 years ago

9fa4de

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

4b1644

XML summary fixes.

Dominick Grift • 14 years ago

3c484f

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

86f9f9

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

6bb4d4

This is a role capability.

Dominick Grift • 14 years ago

25e284

Tunable and optional policy goes below.

Dominick Grift • 14 years ago

f6bcb2

Use entry_file as entry_point to domain transition.

Dominick Grift • 14 years ago

b11ba4

Move system type alias statements to system declarations.

Dominick Grift • 14 years ago

28fdb8

Add file context specification for HOME_DIR/\.gitaliases. May not be required but cannot hurt either.

Dominick Grift • 14 years ago

b5d551

Use can_exec.

Dominick Grift • 14 years ago

618ce8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

1e9280

This is not a role capability.

Dominick Grift • 14 years ago

89bb44

Allow users to ptrace and send any signal to their bluetooth helper agent.

Dominick Grift • 14 years ago

dd0d45

Class is supposed to be fifo_file according to summary.

Dominick Grift • 14 years ago

2d6615

Use domtrans_pattern.

Dominick Grift • 14 years ago

eb0e0b

Use stream connect pattern.

Dominick Grift • 14 years ago

029369

Clean up (network) connect DB.

Dominick Grift • 14 years ago

9b2600

Boolean declarations go above.

Dominick Grift • 14 years ago

7fa5a6

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

c5eae5

This is a leftover from refpolicy implementation of this functionality.

Dominick Grift • 14 years ago

1b1f7d

No need for httpd_builtin_scripting to be set for httpd_t to be allowed to read files.

Dominick Grift • 14 years ago

bbdbce

Change this functionality to our implementation of this functionality.

Dominick Grift • 14 years ago

c53b75

- Add vnstat policy

Dan Walsh • 14 years ago

ea3b7b

Remove accedentlay added ~ files

Dan Walsh • 14 years ago

8c47ad

Add vnstat policy

Dan Walsh • 14 years ago

0a394b

- Update to upstream

Dan Walsh • 14 years ago

a24e6a

Fixes for cluster policy

Miroslav Grepl • 14 years ago

be5142

Merge upstream

Dan Walsh • 14 years ago

14ffaf

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

a55bb5

This is a role capability.

Dominick Grift • 14 years ago

9c9e4c

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

0dacd0

Requires system_r role.

Dominick Grift • 14 years ago

23ac31

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2f94f4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

2de234

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

819518

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

dcf874

Use permission sets where possible.

Dominick Grift • 14 years ago

59c034

Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Dominick Grift • 14 years ago

ba6db0

XML summary ffixes.

Dominick Grift • 14 years ago

b35d25

Search parent directory to be able to interact with target content.

Dominick Grift • 14 years ago

f92662

Allow users to ptrace and send any kind of signal to spamassassin agents.

Dominick Grift • 14 years ago

4ff4dd

This type is not required here.

Dominick Grift • 14 years ago

c5cadd

This is not a role capability.

Dominick Grift • 14 years ago

b0e9aa

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

a3d20a

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 14 years ago

9a2fd7

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 14 years ago

50e857

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 14 years ago

f416df

Redundant: domtrans_pattern includes these.

Dominick Grift • 14 years ago

a87e8f

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 14 years ago

d0b756

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 14 years ago

5ebd1a

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2d102f

Tunable, optional, if(n)def block go below.

Dominick Grift • 14 years ago

60d27b

Use stream_connect_pattern.

Dominick Grift • 14 years ago

2e2a24

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

4d71bc

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

83029f

Add missing admin_patterns to rpcbind_admin.

Dominick Grift • 14 years ago

4ec4a4

Use stream connect pattern.

Dominick Grift • 14 years ago

ac13ad

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

ad4245

Reduntant: Is already included with userdom_search_user_home_dirs.

Dominick Grift • 14 years ago

87cd6e

Access to get attributes of target pppd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

4eaffd

Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

39e118

Allow pads_admin to search parent directories to be able to interact with pads content.

Dominick Grift • 14 years ago

1215df

XML summary fix.

Dominick Grift • 14 years ago

d18313

Access to get attributes of target accountsd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

dcbbee

Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.

Dominick Grift • 14 years ago

b6d0a7

Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.

Dominick Grift • 14 years ago

eb12bc

Use the stream_connect_pattern.

Dominick Grift • 14 years ago

f386b9

Allow mpd_admin to manage mpd tmpfs content.

Dominick Grift • 14 years ago

c5e7db

Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.

Dominick Grift • 14 years ago

0ba923

Redundant: mpd_search_lib already includes files_search_var_lib.

Dominick Grift • 14 years ago

0ab415

Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.

Dominick Grift • 14 years ago

7d3493

Allow icecast_admin to ptrace and signal the icecast_t domain.

Dominick Grift • 14 years ago

aa5baa

This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.

Dominick Grift • 14 years ago

4b81a5

Permission to search proc_t directories is required to be able to read abrt state.

Dominick Grift • 14 years ago

7d36c9

Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.

Dominick Grift • 14 years ago

b36824

Replace some type statements by comma delimiters.

Dominick Grift • 14 years ago

cf152b

Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.

Dominick Grift • 14 years ago

47cf98

Type system_cronjob_var_run_t is not required here.

Dominick Grift • 14 years ago

5ecaac

Types crontab_exec_t, cron_spool_t and user_cron_spool_t are required here.

Dominick Grift • 14 years ago

beb9c3

Permission to search generic pid directories is included with files_pid_filetrans.

Dominick Grift • 14 years ago

d8d33a

Use ps_process_pattern to read state. Permission to seach proc_t directories is required to read automount state.

Dominick Grift • 14 years ago

0540e2

Type xenstored_var_run_t is required here.

Dominick Grift • 14 years ago

cb76ff

Type print_spool_t is not required here.

Dominick Grift • 14 years ago

8c0a06

Add the ability to send audit messages to confined admin policies

Dan Walsh • 14 years ago

9461b6

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 14 years ago

3b0a9c

Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710

Chris PeBenito • 14 years ago

fee486

radvd patch from Dan Walsh

Jeremy Solt • 14 years ago

792d44

snort patch from Dan Walsh

Jeremy Solt • 14 years ago

dc7cc4

stunnel patch from Dan Walsh

Jeremy Solt • 14 years ago

c20842

zabbix patch from Dan Walsh

Jeremy Solt • 14 years ago

622c63

zebra patch from Dan Walsh

Jeremy Solt • 14 years ago

bf4079

awstats patch from Dan Walsh

Jeremy Solt • 14 years ago

4f9519

certmaster patch from Dan Walsh

Jeremy Solt • 14 years ago

e9bf16

pcscd patch from Dan Walsh

Jeremy Solt • 14 years ago

dc1db5

postgresql patch from Dan Walsh

Jeremy Solt • 14 years ago

17759c

postgrey patch from Dan Walsh

Jeremy Solt • 14 years ago

cf8723

prelude patch from Dan Walsh

Jeremy Solt • 14 years ago

a59e50

certwatch patch from Dan Walsh

Jeremy Solt • 14 years ago

f3c5e7

firstboot patch from Dan Walsh

Jeremy Solt • 14 years ago

5afc3d

smoltclient patch from Dan Walsh

Jeremy Solt • 14 years ago

689d95

amavis patch from Dan Walsh

Jeremy Solt • 14 years ago

b8097d

arpwatch patch from Dan Walsh

Jeremy Solt • 14 years ago

5b082e

canna patch from Dan Walsh

Jeremy Solt • 14 years ago

b0d8d5

certmonger patch from Dan Walsh

Jeremy Solt • 14 years ago

c6c63f

courier patch from Dan Walsh

Jeremy Solt • 14 years ago

483be0

dcc patch from Dan Walsh

Jeremy Solt • 14 years ago

67effb

style change to djbdns.te

Jeremy Solt • 14 years ago

a83171

fetchmail patch from Dan Walsh

Jeremy Solt • 14 years ago

c4fbfa

icecast patch from Dan Walsh

Jeremy Solt • 14 years ago

01c441

nslcd patch from Dan Walsh

Jeremy Solt • 14 years ago

2a2b6a

nut patch from Dan Walsh

Jeremy Solt • 14 years ago

527192

openct patch from Dan Walsh

Jeremy Solt • 14 years ago

c17ad3

Unconditional staff and user oidentd home config access from Dominick Grift.

Chris PeBenito • 14 years ago

25d796

Access for confined users to oidentd user home content is unconditional.

Dominick Grift • 14 years ago

941e3d

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

6dfe56

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

ba8c31

add labeling for /root/.debug

Dan Walsh • 14 years ago

43a033

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

d7f202

Fixes for vmware-host policy

Miroslav Grepl • 14 years ago

323c9f

Allow a couple of sandbox issues.

Dan Walsh • 14 years ago

c2dae9

- Update to upstream

Dan Walsh • 14 years ago

a0e8ef

Add labels for /lib/readahead.

Dan Walsh • 14 years ago

4251ae

Fix gnome_setattr_config_home

Dan Walsh • 14 years ago

5ef740

Fix some names in passenger policy

Dan Walsh • 14 years ago

3034a8

Move passenger policy to services

Miroslav Grepl • 14 years ago

94820e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

536f28

Fix boolean descriptions

Dan Walsh • 14 years ago

1a40cb

Allow dovecot-deliver to create tmp files

Miroslav Grepl • 14 years ago

3a3212

- Add passenger policy

Miroslav Grepl • 14 years ago

d7de04

Fix cert calls in telepath, boinc, kerberos

Dan Walsh • 14 years ago

366396

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cab9bc

rename mdadm_map_t to mdadm_var_run_t

Dan Walsh • 14 years ago

d7544f

More fixes for mozilla_plugin_t

Dan Walsh • 14 years ago

0b8f4c

Module version bumps for cert patch.

Chris PeBenito • 14 years ago

da12b5

Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.

Chris PeBenito • 14 years ago

e9d6df

Implement miscfiles_cert_type().

Dominick Grift • 14 years ago

834062

Allow hugetlbfs_t to be on device_t file system

Dan Walsh • 14 years ago

1a8278

Module version bump for 8296eb2.

Chris PeBenito • 14 years ago

8fbea5

raid tools now store pid file and sock_file in /dev/md for early boot.

Dan Walsh • 14 years ago

e81afd

fixes for openvpn suggested by dgrift

Dan Walsh • 14 years ago

8e47c0

- Add policy for ajaxterm

Dan Walsh • 14 years ago

30a7d1

Allow mozilla_plugin to create nsplugin_home_t directories

Dan Walsh • 14 years ago

da0733

Remove unallocated tty access in amanda since it was originally there for the old targeted policy, and now all roles have a user tty type.

Chris PeBenito • 14 years ago

9c2c77

Clean up Anaconda policy.

Dominick Grift • 14 years ago

36c6e4

Clean up Amtu module.

Dominick Grift • 14 years ago

e02146

Clean up Amanda module.

Dominick Grift • 14 years ago

8296eb

add policy for ajaxterm

Dan Walsh • 14 years ago

5f5963

add policy for ajaxterm

Dan Walsh • 14 years ago

4c3817

- Handle /var/db/sudo

Dan Walsh • 14 years ago

6e2d7f

allow sudo to create sudo_db_t dirs

Dan Walsh • 14 years ago

d46a2b

Allow crond to manage user_spool_cron_t link files

Dan Walsh • 14 years ago

ee4b1e

Allow sudo domains to manage /var/db/sudo

Dan Walsh • 14 years ago

b36c20

Allow virt_domains to exec qumu_exec_t, add boolean to allow svirt_t to connect to x

Dan Walsh • 14 years ago

a75a59

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

64d84c

Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t

Dan Walsh • 14 years ago

dfe675

Cleanup warnings

Dan Walsh • 14 years ago

5dd0c2

add sametime port definition

Dan Walsh • 14 years ago

4432db

Fix apache interface

Dan Walsh • 14 years ago

689bfe

fix bad patch in xserver

Dan Walsh • 14 years ago

f79af2

Fix gnome interface definitions

Dan Walsh • 14 years ago

aa760a

add sametime port definition

Dan Walsh • 14 years ago

e51122

fix typo in xserver_stream_connect

Dan Walsh • 14 years ago

0745e4

cleanup alsa patch to match upstream

Dan Walsh • 14 years ago

36d83c

Eliminate extras alsa_read_home interface

Dan Walsh • 14 years ago

4192c8

Any app that executes service command will not do a getattr of all mounted file systems

Dan Walsh • 14 years ago

818734

Allow apps that use pam to connect to init_t

Dan Walsh • 14 years ago

c16ffd

Fix pootle

Dan Walsh • 14 years ago

db8799

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

f5b49a

Merge with upsteam

Dan Walsh • 14 years ago

f00ba2

Merge branches 'master', 'master' and 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cdda8f

Allow gpg_pinentry_t to use fifo files of apps that transition to gpg_agent

Dan Walsh • 14 years ago

ef98a3

Module version bumps for b7ceb34 5675107 e411968 eca7eb3.

Chris PeBenito • 14 years ago

28d96f

Rearrange alsa interfaces.

Chris PeBenito • 14 years ago

eca7eb

Implement alsa_home_t for asoundrc. Clean up Alsa module.

Dominick Grift • 14 years ago

e41196

Libcgroup moved the cgroup directory to /sys/fs/cgroup.

Dominick Grift • 14 years ago

567510

Do not try to relabel the contents of the /dev/shm directory.

Dominick Grift • 14 years ago

b7ceb3

Fix mmap_zero patch

Dan Walsh • 14 years ago

b631f2

- Merge upstream fix of mmap_zero

Dan Walsh • 14 years ago

c8bf6a

- Merge upstream fix of mmap_zero

Dan Walsh • 14 years ago

482c9f

Allow certmaster to read usr_t files. All python apps are going to need this.

Dan Walsh • 14 years ago

a66812

cleanup mmap_low merge with upstream

Dan Walsh • 14 years ago

3a2e88

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cbadf7

define /sys/fs/cgroup as a <<none>> file system

Dan Walsh • 14 years ago

02fb4a

Module version bump and changelog entry for conditional mmap_zero patch.

Chris PeBenito • 14 years ago

785ee7

Fix mmap_zero assertion violation in xserver.

Chris PeBenito • 14 years ago

a1b420

Allow all X apps to use direct dri if user_direct_dri boolean is turned on

Dan Walsh • 14 years ago

09686d

firstboot is leaking a netlink_route socket into iptables. We need to dontaudit

Dan Walsh • 14 years ago

035275

1/1] Make the ability to mmap zero conditional where this is fapplicable.

Dominick Grift • 14 years ago

623e4f

Fix sandbox tcp_socket calls to create_stream_socket_perms

Dan Walsh • 14 years ago

c6fa93

Allow qmail to use uucpd

Dan Walsh • 14 years ago

4fccad

Add Miroslav Grepl patch for jabberd, adding new type for jabberd router.

Dan Walsh • 14 years ago

5fb4db

Allow prelink to read dbus config/Broken

Dan Walsh • 14 years ago

3fdb12

- Merge with upstream

Dan Walsh • 14 years ago

a7a236

Apply Dominick Grift typo fixes

Dan Walsh • 14 years ago

5537e5

Allow hald to transition to netutils

Dan Walsh • 14 years ago

079779

merge latest upstream

Dan Walsh • 14 years ago

898c0d

Dontaudit signals from sandbox domains to domains that transition to them

Dan Walsh • 14 years ago

ddcd5d

- More access needed for devicekit

Dan Walsh • 14 years ago

6578cf

Dontaudit socket leaks when running semanage code

Dan Walsh • 14 years ago

8c8a10

Fix spelling mistake

Dan Walsh • 14 years ago

73f7d4

More fixes

Dan Walsh • 14 years ago

c71f02

Policy fixes

Dan Walsh • 14 years ago

2d4a79

More fixes

Dan Walsh • 14 years ago

ac498f

- Merge with upstream

Dan Walsh • 14 years ago

acb1ae

- Merge with upstream

Dan Walsh • 14 years ago

59475c

- Merge with upstream

Dan Walsh • 14 years ago

ba7726

Latest fixes

Dan Walsh • 14 years ago

08e567

Update f14

Dan Walsh • 14 years ago

9561b0

Fixes for f14

Dan Walsh • 14 years ago

4765a5

ditto

Dan Walsh • 14 years ago

46c24a

whoya

Dan Walsh • 14 years ago

aae38f

Update f14

Dan Walsh • 14 years ago

2968e0

Fix policy

Dan Walsh • 14 years ago

18549c

reset

Dan Walsh • 14 years ago

507000

Modified amanda

Dan Walsh • 14 years ago

8f4ec1

Reset base

Dan Walsh • 14 years ago

09154b

Modify amanda

Dan Walsh • 14 years ago

e15d0e

F14

Dan Walsh • 14 years ago

0aa4ec

F14

Dan Walsh • 14 years ago

f9c557

F14

Dan Walsh • 14 years ago

e5e9b7

Rebase constraints

Dan Walsh • 14 years ago

a61cba

Go with upstream

Dan Walsh • 14 years ago

9afb2b

Update f14

Dan Walsh • 14 years ago

a947da

Latest f14

Dan Walsh • 14 years ago

83eff0

UPdate for f14 policy

Dan Walsh • 14 years ago

3eaa99

Module version bumps and changelog for devtmpfs patchset.

Chris PeBenito • 14 years ago

76a9fe

Trivial tweaks to devtmpfs patches.

Chris PeBenito • 14 years ago

0d2480

Early devtmpfs access

Jeremy Solt • 14 years ago

2fc79f

Move devtmpfs to devices from filesystem

Jeremy Solt • 14 years ago

d6e1ef

- Allow seunshare to fowner

Dan Walsh • 14 years ago

370d04

- Allow cron to look at user_cron_spool links

Dan Walsh • 14 years ago

cc138e

- Update policy for mozilla_plugin_t

Dan Walsh • 14 years ago

3cacc0

- Update policy for mozilla_plugin_t

Dan Walsh • 14 years ago

632656

- Allow clamscan to read proc_t

Dan Walsh • 14 years ago

66ec62

- Allow clamscan to read proc_t

Dan Walsh • 14 years ago

eee39f

- Allow clamscan_t execmem if clamd_use_jit set

Dan Walsh • 14 years ago

19988c

Dbadm updates from KaiGai Kohei.

Chris PeBenito • 14 years ago

c62f1b

- label dead.letter as mail_home_t

Dan Walsh • 14 years ago

34e74a

- label dead.letter as mail_home_t

Dan Walsh • 14 years ago

3798ee

Part of gnome patch from Dan Walsh.

Chris PeBenito • 14 years ago

ab8f91

* Tue Aug 10 2010 Dan Walsh <dwalsh@redhat.com> 3.8.8-12

Dan Walsh • 14 years ago

b12ede

* Tue Aug 10 2010 Dan Walsh <dwalsh@redhat.com> 3.8.8-12

Dan Walsh • 14 years ago

922cd6

Additional kdumpgui cleanup.

Chris PeBenito • 14 years ago

a9539a

Policy for system-config-kdump gui from Dan Walsh

Jeremy Solt • 14 years ago

46fc0d

Changelog entry for sambagui.

Chris PeBenito • 14 years ago

5d6bf4

system-config-samba dbus service policy from Dan Walsh

Jeremy Solt • 14 years ago

68e615

roles patch from Dan Walsh to move unwanted interface calls into a ifndef

Jeremy Solt • 14 years ago

c87e15

Remove unnecessary require on cgroup_admin().

Chris PeBenito • 14 years ago

00ca40

Whitespace fixes on cgroup.

Chris PeBenito • 14 years ago

d687db

Confine /sbin/cgclear.

Dominick Grift • 14 years ago

61d7ee

System layer xml fixes.

Dominick Grift • 14 years ago

a0546c

Services layer xml files.

Dominick Grift • 14 years ago

288845

Fix corecmd_dontaudit_exec_all_executables doc.

Chris PeBenito • 14 years ago

97b990

Kernel layer xml fixes.

Dominick Grift • 14 years ago

705f70

Fix usermanage_kill_passwd() parameter doc.

Chris PeBenito • 14 years ago

19ff03

Admin layer xml fixes.

Dominick Grift • 14 years ago

77e4b5

apps: domain { allowed to transition, allowed access, to not audit }.

Dominick Grift • 14 years ago

03b866

Changelog entry for accountsd.

Chris PeBenito • 14 years ago

12ab39

Accountsd cleanup.

Chris PeBenito • 14 years ago

8da889

Move accountsd to services.

Chris PeBenito • 14 years ago

d0eebe

accountsd policy from Dan Walsh

Jeremy Solt • 14 years ago

c4834a

Docs standardizing on the role portion of run interfaces. Additional docs cleanup.

Chris PeBenito • 14 years ago

a7ee7f

MojoMojo from Lain Arnell.

Chris PeBenito • 14 years ago

9d4395

Interface documentation standardization patch from Dan Walsh.

Chris PeBenito • 14 years ago

a72e42

Virtio disk file context update from Mika Pfluger.

Chris PeBenito • 14 years ago

27eeb6

Take virtio disks into account.

Mika Pflüger • 14 years ago

b3f720

dist-git conversion

Fedora Release Engineering • 14 years ago

003a26

- Merge in fixes from dgrift repository

Daniel J Walsh • 14 years ago

d4bb13

- Update boinc policy

Daniel J Walsh • 14 years ago

2b65de

- Update boinc policy

Daniel J Walsh • 14 years ago

7f5d8f

- New paths for upstart

Daniel J Walsh • 14 years ago

a1ef70

- New permissions for syslog

Daniel J Walsh • 14 years ago

8d55a4

- Allow systemd to setsockcon on sockets to immitate other services

Daniel J Walsh • 14 years ago

f3fc10

Module version bump for 5563d4c.

Chris PeBenito • 14 years ago

64ef2d

Removing seutil_domtrans_setsebool from anaconda patch - it doesn't exist

Jeremy Solt • 14 years ago

5563d4

anaconda patch from Dan Walsh

Jeremy Solt • 14 years ago

b0a6f1

- Remove debugfs label

Daniel J Walsh • 14 years ago

9f811e

- Update to latest policy

Daniel J Walsh • 14 years ago

d66bec

- Fix eclipse labeling from IBMSupportAssasstant packageing

Daniel J Walsh • 14 years ago

1df2fc

Increase bindreservport range to 512-1024 in corenetwork, from Dan Walsh.

Chris PeBenito • 14 years ago

21fdee

- Make boot with systemd in enforcing mode

Daniel J Walsh • 14 years ago

3f1005

- Update to upstream

Daniel J Walsh • 14 years ago

0f2ae0

Fix JIT usage for freshclam.

Chris PeBenito • 14 years ago

29f3bf

- Add boolean to turn off port forwarding in sshd.

Daniel J Walsh • 14 years ago

9c1bcc

Remove some redundant attributes from user_home_t.

Dominick Grift • 14 years ago

48c3c3

Module version bump for fa1847f.

Chris PeBenito • 14 years ago

4b76ea

- Add support for ebtables

Miroslav Grepl • 14 years ago

be922a

Add files_poly_member() to userdom_user_home_content() Remove redundant files_poly_member() calls.

Dominick Grift • 14 years ago

fa1847

Add missing ubac constraints on pulseaudio.

Chris PeBenito • 14 years ago

f7ffe6

Remove old rbacsep role statements.

Chris PeBenito • 14 years ago

c14aeb

VMWare patch from Dan Walsh.

Chris PeBenito • 14 years ago

072857

Whitespace fix in userhelper.

Chris PeBenito • 14 years ago

f1618f

RPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

b70dfc

Whitespace fixes in RPM.

Chris PeBenito • 14 years ago

2d839c

Add shutdown from Dan Walsh.

Chris PeBenito • 14 years ago

7e265a

Add livecd from Dan Walsh.

Chris PeBenito • 14 years ago

b841df

Remove ethereal module since the application was renamed to wireshark due to trademark issues.

Chris PeBenito • 14 years ago

08690c

Make spamassassin optional for milter, from Russell Coker.

Chris PeBenito • 14 years ago

3c4e9f

Remove duplicate/redundant rules, from Russell Coker.

Chris PeBenito • 14 years ago

bca0cd

Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role().

Chris PeBenito • 14 years ago

1db183

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

a3b0dc

Usermanage patch from Dan Walsh.

Chris PeBenito • 14 years ago

3bcfe5

Guest patch from Dan Walsh.

Chris PeBenito • 14 years ago

cad422

Module version bump for a7521af.

Chris PeBenito • 14 years ago

ab62f3

firstboot patch from Dan Walsh

Jeremy Solt • 14 years ago

a7521a

fix cgroup_admin

Dominick Grift • 14 years ago

7e5463

Module version bump for 5f04c91.

Chris PeBenito • 14 years ago

caf166

gitosis patch from Dan Walsh

Jeremy Solt • 14 years ago

5f04c9

Module version bump for b5d89d0.

Chris PeBenito • 14 years ago

ab4f82

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

b5d89d

-Update to upstream

Daniel J Walsh • 14 years ago

74e6a6

-Update to upstream

Daniel J Walsh • 14 years ago

6c4221

Create_lnk_perms fix from Russell Coker.

Chris PeBenito • 14 years ago

155635

Increased default number of categories to 1024, from Russell Coker.

Chris PeBenito • 14 years ago

0001e2

Minor tweaks and module version bump for a00fc1c.

Chris PeBenito • 14 years ago

113d2e

hddtemp fixes.

Dominick Grift • 14 years ago

a00fc1

WM patch from Dan Walsh.

Chris PeBenito • 14 years ago

0cec64

Rearrage interfaces in filesystem.

Chris PeBenito • 14 years ago

3c79f9

Slocate patch from Dan Walsh.

Chris PeBenito • 14 years ago

eab2cc

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

2c207d

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fd3a8

Podsleuth patch from Dan Walsh.

Chris PeBenito • 14 years ago

1ff703

-Update to upstream

Daniel J Walsh • 14 years ago

fa98e0

Mplayer patch from Dominick Grift through Dan Walsh.

Chris PeBenito • 14 years ago

8a2409

Mozilla patch from Dan Walsh.

Chris PeBenito • 14 years ago

3c1e8f

Cpufreqselector patch from Dan Walsh.

Chris PeBenito • 14 years ago

ae1b7d

-Update to upstream

Daniel J Walsh • 14 years ago

5f371a

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

a99f69

Vbetool patch from Dan Walsh.

Chris PeBenito • 14 years ago

e08ac5

Sudo patch from Dan Walsh.

Chris PeBenito • 14 years ago

3835c3

Su patch from Dan Walsh.

Chris PeBenito • 14 years ago

f7e341

Shorewall patch from Dan Walsh.

Chris PeBenito • 14 years ago

b9be5c

Quota patch from Dan Walsh.

Chris PeBenito • 14 years ago

5116fa

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

a9ef84

Netutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

9a4d29

Kismet patch from Dan Walsh.

Chris PeBenito • 14 years ago

10c010

Mcelog patch from Dan Walsh.

Chris PeBenito • 14 years ago

e89f04

Consoletype patch from Dan Walsh.

Chris PeBenito • 14 years ago

0e30bc

Alsa patch from Dan Walsh

Chris PeBenito • 14 years ago

88a574

Acct patch from Dan Walsh.

Chris PeBenito • 14 years ago

4db779

- Add Zarafa policy

Daniel J Walsh • 14 years ago

7c727a

- Add Zarafa policy

Daniel J Walsh • 14 years ago

cbf582

- Cleanup of aiccu policy

Daniel J Walsh • 14 years ago

244b45

- Cleanup of aiccu policy

Daniel J Walsh • 14 years ago

f2403c

Whitespace change: drop unnecessary blank line at the start of .te files.

Chris PeBenito • 14 years ago

48f99a

AFS patch from Dan Walsh.

Chris PeBenito • 14 years ago

5c942c

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

b52122

- Lots of random fixes

Daniel J Walsh • 14 years ago

f651bb

Files patch from Dan Walsh.

Chris PeBenito • 14 years ago

48e0aa

Terminal patch from Dan Walsh.

Chris PeBenito • 14 years ago

135b1b

- Update to upstream

Daniel J Walsh • 14 years ago

b39ccc

Add missing changelog entry for cgroup.

Chris PeBenito • 14 years ago

98652c

Module version bump for cgroup patchset.

Chris PeBenito • 14 years ago

c54e7d

Clean up cgroup. Rename cgconfigparser to cgconfig.

Chris PeBenito • 14 years ago

53f9ab

Remove cgroup_t usage in cgroup_admin() since it is not owned by the module.

Chris PeBenito • 14 years ago

0041a7

Rearrange cgroup interfaces in filesystem.

Chris PeBenito • 14 years ago

860c05

Whitespace fixes in cgroup and init.

Chris PeBenito • 14 years ago

04dcd7

How users interact with cgroup.

Dominick Grift • 14 years ago

e2b9ad

How libgroup init scripts interact with libcgroup.

Dominick Grift • 14 years ago

73f098

add libcg policy.

Dominick Grift • 14 years ago

ddf821

cgroup in filesystem.

Dominick Grift • 14 years ago

c0c635

- Update to upstream

Daniel J Walsh • 14 years ago

632048

Kernel patch from Dan Walsh.

Chris PeBenito • 14 years ago

60f04f

Devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb7cad

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

46c0e5

Storage patch from Dan Walsh.

Chris PeBenito • 14 years ago

8f0de5

- Add xdm_var_run_t to xserver_stream_connect_xdm

Daniel J Walsh • 14 years ago

bca242

- Fix sshd creation of krb cc files for users to be user_tmp_t

Daniel J Walsh • 14 years ago

e51284

- Fixes for accountsdialog

Daniel J Walsh • 14 years ago

4abfc0

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 14 years ago

233372

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 14 years ago

b923c9

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 14 years ago

65c6e4

- Update to upstream

Daniel J Walsh • 14 years ago

be973d

- Update to upstream

Daniel J Walsh • 14 years ago

bc4089

Add missing cluster suite modules that were missing from the Changelog.

Chris PeBenito • 14 years ago

5c2b95

Fix duplicate lines in kudzu.

Chris PeBenito • 14 years ago

2a2962

Changelog and version update for release.

Chris PeBenito • 14 years ago

03e653

Bump module versions for release.

Chris PeBenito • 14 years ago

29af4c

Add missing changelog entries.

Chris PeBenito • 14 years ago

f9bdd1

Fix deprecated interface usage in rhel4 block in su.if.

Chris PeBenito • 14 years ago

91cbcc

Module version bump for 904f3d8.

Chris PeBenito • 14 years ago

3d95ca

Module version bump for 1184392 and more.

Chris PeBenito • 14 years ago

7934ac

Module version bump for 7942f7f.

Chris PeBenito • 14 years ago

ca2837

Module version bump for 383bd32.

Chris PeBenito • 14 years ago

bdf5e1

Module version bump for 9e28f74.

Chris PeBenito • 14 years ago

213d35

Module version bump for f61ef24.

Chris PeBenito • 14 years ago

63583f

Module version bump for d5170e5.

Chris PeBenito • 14 years ago

c789f8

Module version bump for cb1df6a.

Chris PeBenito • 14 years ago

d53a97

readahead patch from Dan Walsh

Jeremy Solt • 14 years ago

d8642c

Fix deprecated interface usage that crept into lvm.if.

Chris PeBenito • 14 years ago

fe74f7

Move line in logrotate; module version bump.

Chris PeBenito • 14 years ago

ff1cae

Remove redundant optional and libs_* calls in clogd.

Chris PeBenito • 14 years ago

a107f8

Module version bump for 51ad76f.

Chris PeBenito • 14 years ago

dcb722

whitespace fix for clogd

Jeremy Solt • 14 years ago

6430c7

clogd policy from Dan Walsh

Jeremy Solt • 14 years ago

6055ab

whitespace fixes for cluster suite patch

Jeremy Solt • 14 years ago

7a8e6a

Removed unnecessary comments

Jeremy Solt • 14 years ago

21d23c

Redhat Cluster Suite Policy from Dan Walsh

Jeremy Solt • 14 years ago

538cf9

logrotate patch from Dan Walsh

Jeremy Solt • 14 years ago

b8c987

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

fdc0d0

dnsmasq patch from Dan Walsh

Jeremy Solt • 14 years ago

37194a

Replace apache_delete_cache with apache_delete_cache_files in tmpreaper.te

Jeremy Solt • 14 years ago

2483d7

tmpreaper patch from Dan Walsh

Jeremy Solt • 14 years ago

8daddc

Remove call to nagios_rw_inherited_tmp_files

Jeremy Solt • 14 years ago

7605d2

netutils patch from Dan Walsh

Jeremy Solt • 14 years ago

44dc1b

Remove nagios_rw_inherited_tmp_files interface

Jeremy Solt • 14 years ago

4ac0cd

Nagios patch from Dan Walsh

Jeremy Solt • 14 years ago

99bbe3

Create type and allow squid to manage its own tmpfs files

Jeremy Solt • 14 years ago

599e8f

squid patch from Dan Walsh

Jeremy Solt • 14 years ago

d86c09

remove rules for nx_server_home_ssh_t since they are already provided by the ssh template

Jeremy Solt • 14 years ago

fb543d

nx patch from Dan Walsh

Jeremy Solt • 14 years ago

316cdb

Postfix patch from Dan Walsh.

Chris PeBenito • 14 years ago

d9e4cb

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

9fe1b5

Sendmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

9ea85e

Procmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

b276e3

MTA patch from Dan Walsh.

Chris PeBenito • 14 years ago

e19b8d

SSH patch from Dan Walsh.

Chris PeBenito • 14 years ago

088b65

Cups patch from Dan Walsh.

Chris PeBenito • 14 years ago

4e698b

Remove excessive permission in udev_manage_rules_files() and move the interface up in the .if file. Module version bump for d56b33a.

Chris PeBenito • 14 years ago

e2c945

Create new interface and type for managing /etc/udev/rules.d

Chris Richards • 14 years ago

d56b33

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

1b2f08

Plymouthd policy from Dan Walsh.

Chris PeBenito • 14 years ago

e9e43f

Hal patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0c2ca

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

2e4e39

Java patch from Dan Walsh.

Chris PeBenito • 14 years ago

84940a

CVS patch from Dan Walsh.

Chris PeBenito • 14 years ago

299db7

SETroubleshoot patch from Dan Walsh.

Chris PeBenito • 14 years ago

bcc6e6

Asterisk patch from Dan Walsh.

Chris PeBenito • 14 years ago

ada61e

Munin patch from Dan Walsh.

Chris PeBenito • 14 years ago

24e0b9

RPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

160704

Minor fixes on a2524cf. Module version bump.

Chris PeBenito • 14 years ago

27afb9

Whitespace fixes on cobbler.

Chris PeBenito • 14 years ago

aeb7a4

cobbler patch from Dan Walsh

Jeremy Solt • 14 years ago

a2524c

Cyrus patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb3fc9

Clamav patch from Dan Walsh.

Chris PeBenito • 14 years ago

4804cd

Dovecot patch from Dan Walsh.

Chris PeBenito • 14 years ago

d8eb3c

Networkmanager patch from Dan Walsh.

Chris PeBenito • 14 years ago

baea7b

Fix a typo in support/genhomedircon.

Justin P. Mattock • 14 years ago

d5932a

Add kernel access to devtmpfs. Also add workround while devtmpfs is tmpfs_t instead of device_t.

Chris PeBenito • 14 years ago

03a6e0

Consolekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

a3108c

Arpwatch patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0076a

Dbus patch from Dan Walsh.

Chris PeBenito • 14 years ago

98ac98

Devicekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

61738f

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

857d37

Add trusted object condition to unix socket connectto/sendto, to fix label translation.

Chris PeBenito • 14 years ago

3b7278

Add networking rules for spamd to connect to mysql/postgresql over the network, from Chris St. Pierre.

Chris PeBenito • 14 years ago

87a946

Add missing secmark rules in ntop, from Dominick Grift.

Chris PeBenito • 14 years ago

45696a

FTP patch from Dan Walsh.

Chris PeBenito • 14 years ago

a53c6c

Module version bump for 34838aa.

Chris PeBenito • 14 years ago

d7ebbd

Samba patch from Dan Walsh

Jeremy Solt • 14 years ago

34838a

bootmisc init script, 2nd try

Chris Richards • 14 years ago

9b3e79

Lircd patch from Dan Walsh.

Chris PeBenito • 14 years ago

05a2e3

Add DenyHosts from Dan Walsh.

Chris PeBenito • 14 years ago

e07fbc

Djbdns patch from Dan Walsh.

Chris PeBenito • 14 years ago

44b380

Module version bump and extra comments for 194d61f.

Chris PeBenito • 14 years ago

4a8bd0

modutils patch for update-modules

Chris Richards • 14 years ago

194d61

Module version bump for 8c38fba.

Chris PeBenito • 14 years ago

78352d

allow syslog-ng to setrlimit

Chris Richards • 14 years ago

8c38fb

Module version bump for 4b121a5.

Chris PeBenito • 14 years ago

5c3274

Additional whitespace fix in nis.

Chris PeBenito • 14 years ago

468799

Style changes

Jeremy Solt • 14 years ago

f49fc1

nis patch from Dan Walsh

Jeremy Solt • 14 years ago

4b121a

Additional whitespace fixes in certmonger.

Chris PeBenito • 14 years ago

da5940

Fix some whitespace and style issues.

Jeremy Solt • 14 years ago

0e5494

certmonger policy from Dan Walsh

Jeremy Solt • 14 years ago

33793e

Module version bump for 4f7b413.

Chris PeBenito • 14 years ago

86ff00

Remove excess white space from ntop.te

Jeremy Solt • 14 years ago

e6e2a7

Ntop policy from Dan Walsh

Jeremy Solt • 14 years ago

4f7b41

Module version bump for 46e16a2.

Chris PeBenito • 14 years ago

987597

Move optional policy to correct location for style

Jeremy Solt • 14 years ago

d86d4f

kerberos patch from Dan Walsh

Jeremy Solt • 14 years ago

01bfe1

Use port range notation in corenetwork where it makes sense.

Chris PeBenito • 14 years ago

46e16a

Clean up output of generated corenetwork.te.

Chris PeBenito • 14 years ago

3829ee

Fix network_port() in corenetwork to correctly handle port ranges.

Chris PeBenito • 14 years ago

85e71c

[BUGFIX] lack of type transition on dbadm domain (Re: dbadm.pp is not available in selinux-policy package)

KaiGai Kohei • 14 years ago

ec8d32

Module version bump for 5d3214f and 795b733.

Chris PeBenito • 14 years ago

23ad80

pcscd patch from Dan Walsh: manage pub files and fifo files

Jeremy Solt • 14 years ago

795b73

gpsd path from Dan Walsh

Jeremy Solt • 14 years ago

5d3214

Add devtmpfs labeling.

Chris PeBenito • 14 years ago

e399e3

Move kernel_request_load_module(gssd_t) to the proper place.

Dominick Grift • 14 years ago

91b12a

Fix requires for apache tmp interfaces.

Dominick Grift • 14 years ago

6d9925

Portreserve patch from Dan Walsh.

Chris PeBenito • 14 years ago

b57785

PPP patch from Dan Walsh.

Chris PeBenito • 14 years ago

38db49

Rpc patch from Dan Walsh.

Chris PeBenito • 14 years ago

372acd

Whitespace fixes on Apache.

Chris PeBenito • 14 years ago

20fa70

Module version bump for 170a46d, f8b3b7f, and a49a82c.

Chris PeBenito • 14 years ago

da0608

Tweak for 170a46d.

Chris PeBenito • 14 years ago

b7d3db

snort patch from Dan Walsh

Jeremy Solt • 14 years ago

a49a82

Nut policy from Dan Walsh

Jeremy Solt • 14 years ago

f8b3b7

memcached patch from Dan Walsh

Jeremy Solt • 14 years ago

170a46

Second part of Apache patch from Dan Walsh.

Chris PeBenito • 14 years ago

60def6

First part of apache patch from Dan Walsh: file context changes, including renaming script ro/ra/rw files.

Chris PeBenito • 14 years ago

83caba

Tor patch from Dan Walsh.

Chris PeBenito • 14 years ago

25d81d

Sssd patch from Dan Walsh.

Chris PeBenito • 14 years ago

2b93b8

Add usbmuxd from Dan Walsh.

Chris PeBenito • 14 years ago

ee2d2d

Vhostmd from Dan Walsh.

Chris PeBenito • 14 years ago

6d4dbd

Module version bumps for c586c1b, dcbb332, 4c05dff, 84ce9c3, 2b012ba, and 1868383.

Chris PeBenito • 14 years ago

bf54d5

Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c.

Chris PeBenito • 14 years ago

ad0071

Smokeping policy from Dan Walsh

Jeremy Solt • 14 years ago

f3c346

pulseaudio patch from Dan Walsh

Jeremy Solt • 14 years ago

186838

ksmtuned policy from Dan Walsh

Jeremy Solt • 14 years ago

d279dd

Prelude patch from Dan Walsh

Jeremy Solt • 14 years ago

2b012b

Bluetooth patch (sys_admin and debugfs) from Dan Walsh

Jeremy Solt • 14 years ago

84ce9c

avahi patch from Dan Walsh

Jeremy Solt • 14 years ago

4c05df

chronyd patch from Dan Walsh

Jeremy Solt • 14 years ago

dcbb33

Give dcc setgid from Dan Walsh

Jeremy Solt • 14 years ago

c586c1

Module version bump for c37d843.

Chris PeBenito • 15 years ago

7656af

Minor bind XML tweaks.

Chris PeBenito • 15 years ago

be8311

bind patch from Dan Walsh

Jeremy Solt • 15 years ago

c37d84

Radvd patch from Dan Walsh.

Chris PeBenito • 15 years ago

390b8a

Rdisc patch from Dan Walsh.

Chris PeBenito • 15 years ago

1b2215

Module version bump for 1d348bd.

Chris PeBenito • 15 years ago

6c4030

Afs needs sys_admin, sends signals, and resolves hostnames from Dan Walsh

Jeremy Solt • 15 years ago

1d348b

Module version bump for 75c8a69.

Chris PeBenito • 15 years ago

df2961

gitosis read/manage lib interfaces from Dan Walsh

Jeremy Solt • 15 years ago

75c8a6

Sasl patch from Dan Walsh.

Chris PeBenito • 15 years ago

cf7eb0

Snmp patch from Dan Walsh.

Chris PeBenito • 15 years ago

449d20

Sysstat patch from Dan Walsh.

Chris PeBenito • 15 years ago

08d7c7

Telnet patch from Dan Walsh.

Chris PeBenito • 15 years ago

98ac3f

Tuned patch from Dan Walsh.

Chris PeBenito • 15 years ago

461b53

Virt patch from Dan Walsh.

Chris PeBenito • 15 years ago

763020

Rename rtkit_schedule() to rtkit_scheduled().

Chris PeBenito • 15 years ago

064d1b

Module version bump for ac19f1a.

Chris PeBenito • 15 years ago

e13a9e

Module version bump for 9681df1.

Chris PeBenito • 15 years ago

c7a4cf

Module version bump for d3b5907.

Chris PeBenito • 15 years ago

32103f

Minor tweaks on icecast.

Chris PeBenito • 15 years ago

340af1

icecast policy from Dan Walsh

Jeremy Solt • 15 years ago

584dfa

rtkit patch from Dan Walsh:

Jeremy Solt • 15 years ago

ac19f1

postgresql patch from Dan Walsh:

Jeremy Solt • 15 years ago

9681df

openvpn needs ipc_lock capability, connects to http ports,

Jeremy Solt • 15 years ago

d3b590

Tftp patch from Dan Walsh.

Chris PeBenito • 15 years ago

47293b

Uucp patch from Dan Walsh.

Chris PeBenito • 15 years ago

788ba7

Zebra patch from Dan Walsh.

Chris PeBenito • 15 years ago

bed0a4

Libraries patch from Dan Walsh.

Chris PeBenito • 15 years ago

bc31d1

Xen patch from Dan Walsh.

Chris PeBenito • 15 years ago

0d86ea

Getty patch from Dan Walsh.

Chris PeBenito • 15 years ago

b60df9

Sysnetwork patch from Dan Walsh.

Chris PeBenito • 15 years ago

1fa92b

- Update to upstream

Daniel J Walsh • 15 years ago

a72c31

Init patch from Dan Walsh.

Chris PeBenito • 15 years ago

ddd786

Authlogin patch from Dan Walsh.

Chris PeBenito • 15 years ago

153ed8

Iptables patch from Dan Walsh.

Chris PeBenito • 15 years ago

4fbcd7

Udev patch from Dan Walsh.

Chris PeBenito • 15 years ago

a124c0

Logging patch from Dan Walsh.

Chris PeBenito • 15 years ago

7a8807

Ipsec patch from Dan Walsh.

Chris PeBenito • 15 years ago

90e65f

Modutils patch from Dan Walsh.

Chris PeBenito • 15 years ago

d13c67

Kernel patch from Dan Walsh.

Chris PeBenito • 15 years ago

041738

Domain patch from Dan Walsh.

Chris PeBenito • 15 years ago

1f6d97

Module version bump for 6a03548.

Chris PeBenito • 15 years ago

7b50b7

amavis uses uptime which reads utmp, and reads certs - from Dan Walsh

Jeremy Solt • 15 years ago

6a0354

Style fixes and module version bumps for 38fc1bd.

Chris PeBenito • 15 years ago

827060

Likewise policy.

Dominick Grift • 15 years ago

38fc1b

Module version bump for 414a570.

Chris PeBenito • 15 years ago

2a62db

fetchmail executes programs in bin (uname), from Dan Walsh

Jeremy Solt • 15 years ago

414a57

Add additional documentation to kernel_request_load_module().

Chris PeBenito • 15 years ago

e8871c

Module version bump for 935151a.

Chris PeBenito • 15 years ago

5911f3

Module version bump for d12f18e.

Chris PeBenito • 15 years ago

c6491a

Module version bump for d7ec247.

Chris PeBenito • 15 years ago

9a5989

Module version bump for 591af7b.

Chris PeBenito • 15 years ago

9570fc

Module version bump for ae07c9e.

Chris PeBenito • 15 years ago

ce693c

Whitespace fixes in mailman.

Chris PeBenito • 15 years ago

1656bf

Change kernel_load_module to kernel_request_load_module for howl from Dan Walsh

Jeremy Solt • 15 years ago

935151

Change kernel_load_module to kernel_request_load_module from Dan Walsh

Jeremy Solt • 15 years ago

d12f18

File context update for certmaster from Dan Walsh

Jeremy Solt • 15 years ago

d7ec24

file context updates from Dan Walsh

Jeremy Solt • 15 years ago

591af7

Screen needs to setattr on user_ttydevice_t from Dan Walsh

Jeremy Solt • 15 years ago

ae07c9

Whitespace fix for mcelog.

Chris PeBenito • 15 years ago

fad6e7

Module version bump for f7d413a.

Chris PeBenito • 15 years ago

fce868

Rearrange interfaces in fail2ban.

Chris PeBenito • 15 years ago

bf140f

Module version bump for 74b51e6.

Chris PeBenito • 15 years ago

580279

Whitespace fixes for smoltclient.

Chris PeBenito • 15 years ago

6bc64c

Module version bump for 3137148.

Chris PeBenito • 15 years ago

ba1c45

mcelog policy from Dan Walsh

Jeremy Solt • 15 years ago

148415

fail2ban_stream_connect and fail2ban_rw_stream_sockets from Dan Walsh

Jeremy Solt • 15 years ago

f7d413

Firstboot sends dbus messages from Dan Walsh

Jeremy Solt • 15 years ago

74b51e

Policy for smolt sendProfile client from Dan Walsh

Jeremy Solt • 15 years ago

257a27

Run interface for ptchown from Dan Walsh

Jeremy Solt • 15 years ago

313714

Module version bump for 1d3d00b.

Chris PeBenito • 15 years ago

37e249

Module version bump for e172614.

Chris PeBenito • 15 years ago

ce0570

Filesystem patch from Dan Walsh.

Chris PeBenito • 15 years ago

7af0e9

Rearrange lines in alsa an mysql.

Chris PeBenito • 15 years ago

9e506e

Whitespace cleanup on mysql.if.

Chris PeBenito • 15 years ago

e17261

Manage alsa writable config files interface from Dan Walsh

Jeremy Solt • 15 years ago

1d3d00

mysql policy from Dan Walsh

Jeremy Solt • 15 years ago

12a6a5

Raid patch from Dan Walsh.

Chris PeBenito • 15 years ago

2f0e3a

Iscsi and tgtd patches from Dan Walsh.

Chris PeBenito • 15 years ago

30496b

Fstools patch from Dan Walsh.

Chris PeBenito • 15 years ago

939eaf

Miscfiles patch from Dan Walsh.

Chris PeBenito • 15 years ago

d0a6df

Module version bump for ddae1cc.

Chris PeBenito • 15 years ago

547d62

Creates sock files in /tmp, reads network state. - From Dan Walsh

Jeremy Solt • 15 years ago

ddae1c

Fix another corenetwork typo.

Chris PeBenito • 15 years ago

bd063d

Module version bump for 42fa15b.

Chris PeBenito • 15 years ago

6f9c3c

Module version bump for 3fcdc39.

Chris PeBenito • 15 years ago

b19338

Module version bump for cf3da95.

Chris PeBenito • 15 years ago

5dac50

Minor style fixes.

Chris PeBenito • 15 years ago

e2e1b6

Logwatch looks for content in homedirs, reads samba shares - from Dan Walsh

Jeremy Solt • 15 years ago

42fa15

shorewall log file from Dan Walsh

Jeremy Solt • 15 years ago

3fcdc3

Allow cdrecord_t to execute bin_t from Dan Walsh

Jeremy Solt • 15 years ago

cf3da9

Add back missing s0 on network_port().

Chris PeBenito • 15 years ago

4af2b3

Guest patch from Dan Walsh.

Chris PeBenito • 15 years ago

09b92d

Corenetwork patch from Dan Walsh.

Chris PeBenito • 15 years ago

9c709c

Corecommands patch from Dan Walsh.

Chris PeBenito • 15 years ago

4b23c6

Devices patch from Dan Walsh.

Chris PeBenito • 15 years ago

053517

Storage patch from Dan Walsh.

Chris PeBenito • 15 years ago

febc7f

Fix cobbler_admin interface to require cobblerd_initrc_exec_t.

Dominick Grift • 15 years ago

183f79

Corenetwork patch from Dan Walsh.

Chris PeBenito • 15 years ago

eeb761

add write to manage_lnk_file_perms.

Chris PeBenito • 15 years ago

c9ab77

Module version bump for be47d75.

Chris PeBenito • 15 years ago

1112a5

Module version bump for e1e78df.

Chris PeBenito • 15 years ago

ec0205

Module version bump for 52b215f.

Chris PeBenito • 15 years ago

b7070a

Module version bump for cf5e81d.

Chris PeBenito • 15 years ago

cb6385

Module version bump for 96b7e9f.

Chris PeBenito • 15 years ago

c4faa1

Module version bump for a005018.

Chris PeBenito • 15 years ago

812f30

Add additional comments for e1e78df.

Chris PeBenito • 15 years ago

4931c5

hotplug transition to brctl from Dan Walsh

Jeremy Solt • 15 years ago

4d2680

Seems reasonable that exim may need to manage these files when /etc/alternatives/mta points to exim

Jeremy Solt • 15 years ago

9a1f0d

Domain transition for apmd to vbetool from Dan Walsh

Jeremy Solt • 15 years ago

15ae77

gen_require typo fix in dbadm.if from Dan Walsh

Jeremy Solt • 15 years ago

6a9ef9

Changed amavis_initrc_domtrans domain summary to match style.

Jeremy Solt • 15 years ago

a73905

Changed arpwatch_initrc_domtrans domain summary to match style.

Jeremy Solt • 15 years ago

6665c3

Various arpwatch fixes.

Dominick Grift • 15 years ago

d78337

Modified apcupsd_initrc_domtrans interface summary to match style.

Jeremy Solt • 15 years ago

6eed0a

Create apcupsd initrc domtrans. Call apcupsd initrc domtrans in apcupsd_admin. Remove obsolete require. Allow domains Various apcupsd fixes.

Dominick Grift • 15 years ago

eda641

Fixed typo in gen_require for amavis_initrc_domtrans (Appears to be a copy/paste mistake).

Jeremy Solt • 15 years ago

3b8148

Various amavis fixes.

Dominick Grift • 15 years ago

88340b

Improve documentation of udev_read_db().

Chris PeBenito • 15 years ago

402bbb

Improve documentation of seutil_sigchld_newrole().

Chris PeBenito • 15 years ago

b675ce

Add examples to documentation of common corenetwork interfaces.

Chris PeBenito • 15 years ago

4a4436

Module version bump for bf530f5.

Chris PeBenito • 15 years ago

a6bafb

Various permission set fixes.

Dominick Grift • 15 years ago

bf530f

Improve the documentation of application_domain().

Chris PeBenito • 15 years ago

b58db3

Improve the documentation of auth_use_nsswitch().

Chris PeBenito • 15 years ago

d24a7d

Improve the documentation of nis_use_ypbind().

Chris PeBenito • 15 years ago

0bbb16

Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files.

Dominick Grift • 15 years ago

4cb24a

Improve documentation for userdomain interfaces:

Chris PeBenito • 15 years ago

c46376

Improve the documentation of domain interfaces:

Chris PeBenito • 15 years ago

88daf1

Improve the documentation of ubac_constrained().

Chris PeBenito • 15 years ago

888d9e

Improve the documentation of devices interfaces:

Chris PeBenito • 15 years ago

4e1264

Improve filesystem interfaces:

Chris PeBenito • 15 years ago

12f73d

Module version bump for 03dd57f.

Chris PeBenito • 15 years ago

42f1b1

Fix auth_domtrans_chk_passwd to use read_file_perms to surpress open AVC denials.

Dominick Grift • 15 years ago

03dd57

Improve the documentation of files interfaces:

Chris PeBenito • 15 years ago

7cf285

Additional docs for logging_log_filetrans().

Chris PeBenito • 15 years ago

5fb5bf

Improve the documentation of corenetwork interfaces

Chris PeBenito • 15 years ago

42eb0f

Improve the documentation of unconfined_domain().

Chris PeBenito • 15 years ago

14e543

Improve the documentation of logging_log_file() and logging_log_filetrans().

Chris PeBenito • 15 years ago

45185c

Improve documentation of corecmd_exec_bin() and corecmd_exec_shell().

Chris PeBenito • 15 years ago

3a744d

Improve the documentation of:

Chris PeBenito • 15 years ago

13f000

Improve sysnet_read_config() documentation.

Chris PeBenito • 15 years ago

d68871

Switch sysnet_use_portmap(), sysnet_use_ldap(), and sysnet_dns_name_resolve() to use sysnet_read_config() rather thane explicit type usage.

Chris PeBenito • 15 years ago

81a0fb

Improve documentation on kernel_read_system_state(), kernel_read_network_state(), and kernel_read_proc_symlinks().

Chris PeBenito • 15 years ago

7a0c0b

Add additional documentation to files_type().

Chris PeBenito • 15 years ago

fd8134

Rearrange files interfaces.

Chris PeBenito • 15 years ago

6dadd3

Improve documentation on logging_send_syslog_msg().

Chris PeBenito • 15 years ago

6e4877

Improve documentation on files_read_etc_files().

Chris PeBenito • 15 years ago

fca4a9

Improve documentation on miscfiles_read_localization().

Chris PeBenito • 15 years ago

611bc9

Module version bump for cd17345.

Chris PeBenito • 15 years ago

d12492

Various abrt fixes.

Dominick Grift • 15 years ago

cd1734

Module version bump for 534e57b.

Chris PeBenito • 15 years ago

204026

Various afs fixes.

Dominick Grift • 15 years ago

534e57

mysqlmanagerd_var_run_t is not a domain type.

Dominick Grift • 15 years ago

630663

Minor tweaks and module version bump for 68cda59.

Chris PeBenito • 15 years ago

102146

Add MySQL Manager to MySQL policy module

Chris Richards • 15 years ago

68cda5

Automount patch from Dan Walsh.

Chris PeBenito • 15 years ago

104918

Shorewall patch from Dan Walsh.

Chris PeBenito • 15 years ago

fa03ec

Vbetool patch from Dan Walsh.

Chris PeBenito • 15 years ago

6ae29c

Java patch from Dan Walsh.

Chris PeBenito • 15 years ago

4fd088

Mono patch from Dan Walsh.

Chris PeBenito • 15 years ago

1e0f48

Rename qemu_unconfined_t to unconfined_qemu_t.

Chris PeBenito • 15 years ago

a77795

Rearrage qemu.if.

Chris PeBenito • 15 years ago

8a1c9c

Qemu patch from Dan Walsh.

Chris PeBenito • 15 years ago

72295e

Add sectoolm by Miroslav Grepl.

Chris PeBenito • 15 years ago

29b580

Wine patch from Dan Walsh.

Chris PeBenito • 15 years ago

4796d0

Useradd home dir creation fix from Gentoo.

Chris PeBenito • 15 years ago

6a9da2

Syslog fixes from Gentoo.

Chris PeBenito • 15 years ago

2f84a7

Clean up leaked portage file descriptors.

Chris PeBenito • 15 years ago

8b8501

Ssh key creation fix from Gentoo.

Chris PeBenito • 15 years ago

d08a3d

Utmp fix from Gentoo.

Chris PeBenito • 15 years ago

2c0513

Setfiles fix from Gentoo.

Chris PeBenito • 15 years ago

72c8a3

Mount usbfs fix from Gentoo.

Chris PeBenito • 15 years ago

679a63

Move netlink route sockets from nsswitch to DNS name resolve.

Chris PeBenito • 15 years ago

aadcb9

Misc portage fixes.

Chris PeBenito • 15 years ago

15d80e

Portage fixes for installing SELinux-aware programs.

Chris PeBenito • 15 years ago

05bd2f

Xguest patch from Dan Walsh.

Chris PeBenito • 15 years ago

c06a44

- Merge with upstream

Daniel J Walsh • 15 years ago

add957

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 15 years ago

6f30d7

Chronyd from Miroslav Grepl.

Chris PeBenito • 15 years ago

a51379

Ccs patch from Dan Walsh.

Chris PeBenito • 15 years ago

3fb2b7

Clear xserver TODO.

Chris PeBenito • 15 years ago

0ab2c1

Non-drawing X client support for consolekit.

Chris PeBenito • 15 years ago

6246e7

- Allow sandbox to work with MLS

Daniel J Walsh • 15 years ago

3c551b

Remove redundant conditional user_ping terminal rules.

Chris PeBenito • 15 years ago

1322a1

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.

Chris PeBenito • 15 years ago

c3c753

Sudo patch from Dan Walsh.

Chris PeBenito • 15 years ago

ed03a5

Consoletype patch from Dan Walsh.

Chris PeBenito • 15 years ago

ca5dc2

Hal patch from Dan Walsh.

Chris PeBenito • 15 years ago

21673b

- Make Chrome work with staff user

Daniel J Walsh • 15 years ago

43c7f5

- Make Chrome work with staff user

Daniel J Walsh • 15 years ago

2ffff7

Virt/svirt patch from Dan Walsh.

Chris PeBenito • 15 years ago

3079cb

Ktalk patch from Dan Walsh.

Chris PeBenito • 15 years ago

aa9e3b

- Add icecast policy

Daniel J Walsh • 15 years ago

487de6

- Add icecast policy

Daniel J Walsh • 15 years ago

2f000d

Add changelog entry for 1031ee6.

Chris PeBenito • 15 years ago

12dc61

Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy

Chris PeBenito • 15 years ago

16412e

Misc fixes for 1031ee6.

Chris PeBenito • 15 years ago

27eab8

Module version number bump for 1031ee6.

Chris PeBenito • 15 years ago

7d2f96

Implement cobblerd policy.

Dominick Grift • 15 years ago

1031ee

Userdomain patch from Stefan Schulze Frielinghaus.

Chris PeBenito • 15 years ago

2d7436

Add nut from Stefan Schulze Frielinghaus and Miroslav Grepl.

Chris PeBenito • 15 years ago

e526fc

Add pyicqt from Stefan Schulze Frielinghaus.

Chris PeBenito • 15 years ago

4ebfec

Add dbadm, from KaiGai Kohei.

Chris PeBenito • 15 years ago

22a287

- Add mcelog policy

Daniel J Walsh • 15 years ago

30c219

- Lots of fixes found in F12

Daniel J Walsh • 15 years ago

a62c64

- Fix rpm_dontaudit_leaks

Daniel J Walsh • 15 years ago

b2f6b0

- Fix rpm_dontaudit_leaks

Daniel J Walsh • 15 years ago

ef4ca2

- Add getsched to hald_t

Daniel J Walsh • 15 years ago

4aaa02

- Add getsched to hald_t

Daniel J Walsh • 15 years ago

4d67b4

- Allow abrt_helper to getattr on all filesystems

Daniel J Walsh • 15 years ago

b0f365

Fix home_ssh_t usage.

Chris PeBenito • 15 years ago

edc2f7

- Add gstreamer_home_t for ~/.gstreamer

Daniel J Walsh • 15 years ago

b65afa

- Update to upstream

Daniel J Walsh • 15 years ago

faec5c

- Update to upstream

Daniel J Walsh • 15 years ago

d89970

- Fix git

Daniel J Walsh • 15 years ago

fd5654

Update spec file to suck in the correct version of selinux-policy packages

Daniel J Walsh • 15 years ago

3b5466

PPP patch from Dan Walsh.

Chris PeBenito • 15 years ago

82b5d2

SSH patch from Dan Walsh.

Chris PeBenito • 15 years ago

cde150

- Turn on puppet policy

Daniel J Walsh • 15 years ago

89ad5e

- Move users file to selection by spec file.

Daniel J Walsh • 15 years ago

9d9b71

- Move users file to selection by spec file.

Daniel J Walsh • 15 years ago

fc05ac

- Update to upstream

Daniel J Walsh • 15 years ago

7723ea

- Update to upstream

Daniel J Walsh • 15 years ago

468fe0

Uucp patch from Dan Walsh.

Chris PeBenito • 15 years ago

fee5bb

Sendmail patch from Dan Walsh.

Chris PeBenito • 15 years ago

c155e0

Mailman patch from Dan Walsh.

Chris PeBenito • 15 years ago

3624ef

Lircd patch from Dan Walsh.

Chris PeBenito • 15 years ago

8a8b24

Courier patch from Dan Walsh.

Chris PeBenito • 15 years ago

07ba15

Inetd patch from Dan Walsh.

Chris PeBenito • 15 years ago

d2acef

Avahi patch from Dan Walsh.

Chris PeBenito • 15 years ago

c292cb

- Update to upstream

Daniel J Walsh • 15 years ago

352daf

Fprintd patch from Dan Walsh.

Chris PeBenito • 15 years ago

00808a

Fetchmail patch from Dan Walsh.

Chris PeBenito • 15 years ago

ef6ea5

Exim patch from Dan Walsh.

Chris PeBenito • 15 years ago

84a45c

Dovecot patch from Dan Walsh.

Chris PeBenito • 15 years ago

4dd84b

Ddclient patch from Dan Walsh.

Chris PeBenito • 15 years ago

14c786

DCC patch from Dan Walsh.

Chris PeBenito • 15 years ago

dcabb1

Cyrus patch from Dan Walsh.

Chris PeBenito • 15 years ago

30958f

Clamav patch from Dan Walsh.

Chris PeBenito • 15 years ago

192fb8

Bluetooth patch from Dan Walsh.

Chris PeBenito • 15 years ago

c5155a

Move rules from mta mailserver delivery from interface to .te to use the attribute.

Chris PeBenito • 15 years ago

96831f

MTA patch from Dan Walsh.

Chris PeBenito • 15 years ago

9c4067

Tftp patch from Dan Walsh.

Chris PeBenito • 15 years ago

2650ca

Sssd patch from Dan Walsh.

Chris PeBenito • 15 years ago

f3890b

Snmp patch from Dan Walsh.

Chris PeBenito • 15 years ago

207c4d

ntp patch from Dan Walsh.

Chris PeBenito • 15 years ago

82cdff

gpsd patch from Dan Walsh.

Chris PeBenito • 15 years ago

f37b7b

- Remove most of the permissive domains from F12.

Daniel J Walsh • 15 years ago

6049e2

- Add cobbler policy from dgrift

Daniel J Walsh • 15 years ago

485ded

- add usbmon device

Daniel J Walsh • 15 years ago

1e86f3

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 15 years ago

3bca7c

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 15 years ago

d1c6ab

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 15 years ago

4478a9

- Cleanups from dgrift

Daniel J Walsh • 15 years ago

08b890

- Cleanups from dgrift

Daniel J Walsh • 15 years ago

daebd5

- Cleanups from dgrift

Daniel J Walsh • 15 years ago

e2f53d

- Add back xserver_manage_home_fonts

Daniel J Walsh • 15 years ago

f2eafb

- Add back xserver_manage_home_fonts

Daniel J Walsh • 15 years ago

d88a5e

- Add back xserver_manage_home_fonts

Daniel J Walsh • 15 years ago

550cc5

- Add back xserver_manage_home_fonts

Daniel J Walsh • 15 years ago

5e630d

- Dontaudit sandbox trying to read nscd and sssd

Daniel J Walsh • 15 years ago

7d4058

- Update to upstream

Daniel J Walsh • 15 years ago

9efd99

- Update to upstream

Daniel J Walsh • 15 years ago

b46754

- Rename udisks-daemon back to devicekit_disk_t policy

Daniel J Walsh • 15 years ago

fc9ff4

Update packages

Daniel J Walsh • 15 years ago

b2ccd1

Tuned patch from Dan Walsh.

Chris PeBenito • 15 years ago

b11dcd

Rpcbind patch from Dan Walsh.

Chris PeBenito • 15 years ago

ff785b

Radvd patch from Dan Walsh.

Chris PeBenito • 15 years ago

733f49

Privoxy patch from Dan Walsh.

Chris PeBenito • 15 years ago

b36ae9

Prelude patch from Dan Walsh.

Chris PeBenito • 15 years ago

1232a5

PCSCD patch from Dan Walsh.

Chris PeBenito • 15 years ago

6df09c

Nslcd patch from Dan Walsh.

Chris PeBenito • 15 years ago

2d59a8

Mysql patch from Dan Walsh.

Chris PeBenito • 15 years ago

80f058

Modemmanager patch from Dan Walsh.

Chris PeBenito • 15 years ago

d3c612

Milter patch from Dan Walsh.

Chris PeBenito • 15 years ago

0000b7

Memcached patch from Dan Walsh.

Chris PeBenito • 15 years ago

a32226

Kerneloops patch from Dan Walsh.

Chris PeBenito • 15 years ago

6aa333

Kerberos patch from Dan Walsh.

Chris PeBenito • 15 years ago

e1b8b5

Irqbalance patch from Dan Walsh.

Chris PeBenito • 15 years ago

7d05af

GPM patch from Dan Walsh.

Chris PeBenito • 15 years ago

d7b98c

Fail2ban patch from Dan Walsh.

Chris PeBenito • 15 years ago

ce8a71

Certmaster patch from Dan Walsh.

Chris PeBenito • 15 years ago

bd21cb

Bitlbee patch from Dan Walsh.

Chris PeBenito • 15 years ago

a7d606

Amavis patch from Dan Walsh.

Chris PeBenito • 15 years ago

5894c3

asterisk patch from Dan Walsh.

Chris PeBenito • 15 years ago

32f27a

apm patch from Dan Walsh.

Chris PeBenito • 15 years ago

7e8139

afs patch from Dan Walsh.

Chris PeBenito • 15 years ago

41c139

smartmon patch from Dan Walsh.

Chris PeBenito • 15 years ago

b84d6e

Typo in policy/users

Justin P. Mattock • 15 years ago

3fe6f6

- Rename udisks-daemon back to devicekit_disk_t policy

Daniel J Walsh • 15 years ago

6ca563

- Fixes for abrt calls

Daniel J Walsh • 15 years ago

194b53

- Fixes for abrt calls

Daniel J Walsh • 15 years ago

e54cc7

- Add tgtd policy

Daniel J Walsh • 15 years ago

9c90ba

- Add tgtd policy

Daniel J Walsh • 15 years ago

4d6f15

- Add tgtd policy

Daniel J Walsh • 15 years ago

755e2d

- Update to upstream release

Daniel J Walsh • 15 years ago

b253d7

- Update to upstream release

Daniel J Walsh • 15 years ago

1cc057

- Update to upstream release

Daniel J Walsh • 15 years ago

9eef35

- Update to upstream release

Daniel J Walsh • 15 years ago

a0a558

Changelog and version bump for X object manager changes.

Chris PeBenito • 15 years ago

7fc72a

Merge branch 'master' into xselinux

Chris PeBenito • 15 years ago

e331a0

Seunshare patch from Dan Walsh.

Chris PeBenito • 15 years ago

46b037

Screen patch from Dan Walsh.

Chris PeBenito • 15 years ago

d7776f

Podsleuth patch from Dan Walsh.

Chris PeBenito • 15 years ago

6394ea

Mozilla patch from Dan Walsh.

Chris PeBenito • 15 years ago

b77daa

GPG patch from Dan Walsh.

Chris PeBenito • 15 years ago

36ded4

Calamaris patch from Dan Walsh.

Chris PeBenito • 15 years ago

962d6f

Iptables and modutils patches from Dan Walsh.

Chris PeBenito • 15 years ago

7491a9

Fix typo that causes a failure to update the common directory. (releng

Bill Nottingham • 15 years ago

6300a8

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

f2a1dc

Kismet and tzdata patches from Dan Walsh.

Chris PeBenito • 15 years ago

d913e7

RAID patch from Dan Walsh.

Chris PeBenito • 15 years ago

0cad9a

Permission set updates from Dan Walsh.

Chris PeBenito • 15 years ago

c8d563

Fstools and Xen patches from Dan Walsh.

Chris PeBenito • 15 years ago

77c71b

Kdump reads the kernel core.

Chris PeBenito • 15 years ago

e21162

UDEV patch from Dan Walsh.

Chris PeBenito • 15 years ago

837163

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

64f1ae

IPSEC patch from Dan Walsh.

Chris PeBenito • 15 years ago

832c1b

Application patch from Dan Walsh.

Chris PeBenito • 15 years ago

5ed061

Whitespace cleanup.

Chris PeBenito • 15 years ago

dccbb8

ISCSI patch from Dan Walsh.

Chris PeBenito • 15 years ago

0f982d

Setrans patch from Dan Walsh.

Chris PeBenito • 15 years ago

0a119a

LVM patch from Dan Walsh.

Chris PeBenito • 15 years ago

bd34ef

Miscfiles patch from Dan Walsh.

Chris PeBenito • 15 years ago

9dfdd4

Files patch from Dan Walsh.

Chris PeBenito • 15 years ago

910b1d

Corecommands patch from Dan Walsh.

Chris PeBenito • 15 years ago

290aa8

Filesystem patch from Dan Walsh.

Chris PeBenito • 15 years ago

f4b9dc

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ee88b0

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ce8c76

Add terminal patch from Dan Walsh.

Chris PeBenito • 15 years ago

d6c3ed

Add devices patch from Dan Walsh.

Chris PeBenito • 15 years ago

b51e8e

Add kernel patch from Dan Walsh

Chris PeBenito • 15 years ago

e276b8

Add storage patch, from Dan Walsh.

Chris PeBenito • 15 years ago

53c73d

Add module_request permission, from Dan Walsh.

Chris PeBenito • 15 years ago

deb527

- Update to upstream release 2.20091117

Daniel J Walsh • 15 years ago

55acbf

update VERSION and Changelog for release.

Chris PeBenito • 15 years ago

a404bc

bump module versions for release.

Chris PeBenito • 15 years ago

ed3a1f

- Update to upstream

Daniel J Walsh • 15 years ago

99d8f9

- Update to upstream

Daniel J Walsh • 15 years ago

5e44eb

additional cleanup for e877913.

Chris PeBenito • 15 years ago

e6d8fd

adding puppet configuration management system

Craig Grube • 15 years ago

e87791

one further rearrangement of tgtd.

Chris PeBenito • 15 years ago

f27282

clean up 0bca409 and add changelog entry.

Chris PeBenito • 15 years ago

222d5b

RESET tgtd daemon.

Matthew Ife • 15 years ago

0bca40

restore removed aliases.

Chris PeBenito • 15 years ago

9448ca

Drop the xserver_unprotected interface.

Eamon Walsh • 15 years ago

5025a4

X Object manager policy revisions to x_contexts.

Eamon Walsh • 15 years ago

b62426

X Object Manager policy revisions to xserver.if.

Eamon Walsh • 15 years ago

5242ec

X Object Manager policy revisions to xserver.te.

Eamon Walsh • 15 years ago

f267f8

add tuned from miroslav grepl.

Chris PeBenito • 15 years ago

b04669

Install the seusers file for monolithic policy.

Chris PeBenito • 15 years ago

cee508

reorganize a92ee50

Chris PeBenito • 15 years ago

a1a45d

Implement screen-locking feature.

Dominick Grift • 15 years ago

a92ee5

Fix a typo of SElinux to SELinux.

Justin P. Mattock • 15 years ago

5b6bd0

add changelog entry for e4928c5f7954ea062815c8a37c9d37e3e3fa40df

Chris PeBenito • 15 years ago

c59673

add open to search_dir_perms.

Chris PeBenito • 15 years ago

7ca3f5

Add separate x_pointer and x_keyboard classes inheriting from x_device.

Eamon Walsh • 15 years ago

e4928c

revise MCS constraints to use only MCS-specific attributes.

Chris PeBenito • 15 years ago

808341

- Allow vpnc request the kernel to load modules

Daniel J Walsh • 15 years ago

32594a

- Add plymouth policy

Daniel J Walsh • 15 years ago

aaf52f

- Allow cupsd_config to read user tmp

Daniel J Walsh • 15 years ago

d976a8

- Update rhcs policy

Daniel J Walsh • 15 years ago

7f2ac1

- Update rhcs policy

Daniel J Walsh • 15 years ago

5b9631

- Update rhcs policy

Daniel J Walsh • 15 years ago

9b29bf

- Update rhcs policy

Daniel J Walsh • 15 years ago

8b10e3

add seunshare from dan.

Chris PeBenito • 15 years ago

4be8dd

- Allow users to exec restorecond

Daniel J Walsh • 15 years ago

85582d

- Allow sendmail to request kernel modules load

Daniel J Walsh • 15 years ago

f5a104

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

4c2f29

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

405a74

- Remove allow_exec* booleans for confined users. Only available for

Daniel J Walsh • 15 years ago

41f8e3

- More fixes for sandbox_web_t

Daniel J Walsh • 15 years ago

8323d5

- More fixes for sandbox_web_t

Daniel J Walsh • 15 years ago

2bf7d8

- Allow sshd to create .ssh directory and content

Daniel J Walsh • 15 years ago

ab4629

- Fix request_module line to module_request

Daniel J Walsh • 15 years ago

da08b5

- Fix request_module line to module_request

Daniel J Walsh • 15 years ago

d53d15

- Fix sandbox policy to allow it to run under firefox.

Daniel J Walsh • 15 years ago

1fb0a9

- Fixes for sandbox

Daniel J Walsh • 15 years ago

9de703

add dkim from stefan schulze frielinghaus.

Chris PeBenito • 15 years ago

5a6b1f

- Update to upstream

Daniel J Walsh • 15 years ago

69290f

add gnomeclock from dan.

Chris PeBenito • 15 years ago

21b1d1

- Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service

Daniel J Walsh • 15 years ago

23e708

- Fix devicekit_disk_t to getattr on all domains sockets and fifo_files

Daniel J Walsh • 15 years ago

6b7b0c

add rtkit from dan.

Chris PeBenito • 15 years ago

ed7015

clean up xscreensaver.

Chris PeBenito • 15 years ago

1d3b9e

SELinux xscreensaver policy support

corentin.labbe • 15 years ago

31f9c1

add modemmanager from dan.

Chris PeBenito • 15 years ago

c141d8

add abrt from dan.

Chris PeBenito • 15 years ago

e3a90e

- Add wordpress/wp-content/uploads label

Daniel J Walsh • 15 years ago

e20e35

- Update to upstream

Daniel J Walsh • 15 years ago

ddc858

- Update to upstream

Daniel J Walsh • 15 years ago

1b1ad1

- More fixes

Daniel J Walsh • 15 years ago

ab8f80

rearrange readahead rules.

Chris PeBenito • 15 years ago

6af53d

readahead patch from dan.

Chris PeBenito • 15 years ago

c1e5b1

nscd patch from dan.

Chris PeBenito • 15 years ago

937b2c

cron patch from dan.

Chris PeBenito • 15 years ago

c61b35

prelink patch from dan.

Chris PeBenito • 15 years ago

163ddf

- More fixes

Daniel J Walsh • 15 years ago

b8498d

nslcd policy from dan.

Chris PeBenito • 15 years ago

81bca1

- Lots of fixes for initrc and other unconfined domains

Daniel J Walsh • 15 years ago

123ae9

term_write_all_terms() patch from Stefan Schulze Frielinghaus

Chris PeBenito • 15 years ago

f67bc9

- Allow xserver to use netlink_kobject_uevent_socket

Daniel J Walsh • 15 years ago

72bc25

- Allow xserver to use netlink_kobject_uevent_socket

Daniel J Walsh • 15 years ago

35651d

add gitosis from miroslav grepl.

Chris PeBenito • 15 years ago

dbed95

cpufreqselector patch from dan.

Chris PeBenito • 15 years ago

634a13

add an additional vmware host program.

Chris PeBenito • 15 years ago

f61371

screen patch from dan.

Chris PeBenito • 15 years ago

6fdef0

remove stale screen_dir_t references

Chris PeBenito • 15 years ago

72b834

gpg patch from dan.

Chris PeBenito • 15 years ago

ca7fa5

- Dontaudit setroubleshootfix looking at /root directory

Daniel J Walsh • 15 years ago

1a2981

openvpn patch from dan: Openvpn connects to cache ports and stores files in nfs and cifs directories.

Chris PeBenito • 15 years ago

f2f296

Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.

Chris PeBenito • 15 years ago

93be4b

add shorewall from dan.

Chris PeBenito • 15 years ago

625be1

add kdump from dan.

Chris PeBenito • 15 years ago

71965a

cdrecord patch from dan.

Chris PeBenito • 15 years ago

a4b638

awstats patch from dan.

Chris PeBenito • 15 years ago

1a7919

certwatch patch from dan.

Chris PeBenito • 15 years ago

b2324f

mrtg patch from dan.

Chris PeBenito • 15 years ago

b515ab

add hddtemp from dan.

Chris PeBenito • 15 years ago

aa8300

- Update to upsteam

Daniel J Walsh • 15 years ago

65c3f9

- Allow gssd to send signals to users

Daniel J Walsh • 15 years ago

d367ee

- Allow gssd to send signals to users

Daniel J Walsh • 15 years ago

7d592b

add ptchown policy from dan.

Chris PeBenito • 15 years ago

aac56b

pulseaudio patch from dan.

Chris PeBenito • 15 years ago

a3dd14

man page update from dan.

Chris PeBenito • 15 years ago

da4332

module version number bump for nscd patch.

Chris PeBenito • 15 years ago

677457

nscd cache location changed from /var/db/nscd to /var/cache/nscd

Manoj Srivastava • 15 years ago

2a79de

- Allow gssd to send signals to users

Daniel J Walsh • 15 years ago

cb5670

kismet patch from dan.

Chris PeBenito • 15 years ago

a9e967

module version number bump for tun patches

Chris PeBenito • 15 years ago

aaff2f

rename admin_tun_type to admindomain.

Chris PeBenito • 15 years ago

0be901

reorganize tun patch changes.

Chris PeBenito • 15 years ago

bd7570

refpol: Policy for the new TUN driver access controls

Paul Moore • 15 years ago

9dc3cd

refpol: Add the "tun_socket" object class flask definitions

Paul Moore • 15 years ago

333494

- Update to upstream

Daniel J Walsh • 15 years ago

faf9cb

- Remove polkit_auth on upgrades

Daniel J Walsh • 15 years ago

38d427

patch from Eamon Walsh to remove useage of deprecated xserver interfaces.

Chris PeBenito • 15 years ago

427989

deprecate userdom_xwindows_client_template

Chris PeBenito • 15 years ago

93c49b

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

42f9ef

Remove excessive permissions in logging_send_syslog_msg(). Ticket #14.

Chris PeBenito • 15 years ago

fef5dc

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

07c04f

- Fixes for cdrecord, mdadm, and others

Daniel J Walsh • 15 years ago

89e354

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Chris PeBenito • 15 years ago

e27827

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 15 years ago

dbb7dd

split dev_manage_dri_dev() into a manage and a filetrans interface.

Chris PeBenito • 15 years ago

693474

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 15 years ago

707855

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 15 years ago

d6f790

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 15 years ago

080ce6

- Allow cronjobs to read exim_spool_t

Daniel J Walsh • 15 years ago

8e64d7

- Add ABRT policy

Daniel J Walsh • 15 years ago

c5f5b5

- Fix system-config-services policy

Daniel J Walsh • 15 years ago

e3dd49

- Allow libvirt to change user componant of virt_domain

Daniel J Walsh • 15 years ago

fc8ff2

- Allow cupsd_config_t to be started by dbus

Daniel J Walsh • 15 years ago

40243d

- Allow cupsd_config_t to be started by dbus

Daniel J Walsh • 15 years ago

7a5e03

reorganize dbus.fc.

Chris PeBenito • 15 years ago

048427

module version bumps and changelog update for the previous 3 commits.

Chris PeBenito • 15 years ago

62c80e

Gentoo dbus in libexec

LABBE Corentin • 15 years ago

0d700b

portage need capability sys_nice

LABBE Corentin • 15 years ago

755c52

Missing comma in policykit

LABBE Corentin • 15 years ago

58cc99

Debian policykit fixes from Martin Orr.

Chris PeBenito • 15 years ago

909922

- Add policycoreutils-python to pre install

Daniel J Walsh • 15 years ago

9c2702

Fix unconfined_r use of unconfined_java_t.

Chris PeBenito • 15 years ago

b26482

Fix Makefile info message for installing policy headers

Chris PeBenito • 15 years ago

0bf2bc

Add missing x_device rules for XI2 functions, from Eamon Walsh.

Chris PeBenito • 15 years ago

4254ce

- Make all unconfined_domains permissive so we can see what AVC's happen

Daniel J Walsh • 15 years ago

b2c5e7

- Add pt_chown policy

Daniel J Walsh • 15 years ago

7fe210

- Add kdump policy for Miroslav Grepl

Daniel J Walsh • 15 years ago

cbedd0

Add missing rules to make unconfined_cronjob_t a valid cron job domain.

Chris PeBenito • 15 years ago

2a7773

remove redundant xen_append_log() call in hostname.

Chris PeBenito • 15 years ago

97e421

Add btrfs and ext4 to labeling targets.

Chris PeBenito • 15 years ago

0f5e26

- Add kdump policy for Miroslav Grepl

Daniel J Walsh • 15 years ago

867473

Fix infrastructure to expand macros in initrc_context when installing.

Chris PeBenito • 15 years ago

90286f

fix refpolicy ticket #48.

Chris PeBenito • 15 years ago

e51390

- Turn on execstack on a temporary basis (#512845)

Bill Nottingham • 15 years ago

ac7bbf

- Allow nsplugin to connecto the session bus

Daniel J Walsh • 15 years ago

4de382

- Allow devicekit_disk to list inotify

Daniel J Walsh • 15 years ago

e21330

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 15 years ago

4816e9

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 15 years ago

b270c7

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 15 years ago

f3b436

Handle unix_chkpwd usage by useradd and groupadd; fixes ticket #49.

Chris PeBenito • 15 years ago

02e594

Add missing compatibility aliases for xdm_xserver*_t types.

Chris PeBenito • 15 years ago

e33591

module version number bump for release 2.20090730 that was mistakenly omitted.

Chris PeBenito • 15 years ago

9570b2

fix ordering in sysnetwork.

Chris PeBenito • 15 years ago

d69616

fix ordering in raid.

Chris PeBenito • 15 years ago

48bf63

fix ordering in pcmcia.

Chris PeBenito • 15 years ago

4b218b

fix ordering in mount.

Chris PeBenito • 15 years ago

f0e959

fix ordering in modutils.

Chris PeBenito • 15 years ago

54327d

fix ordering of interface calls in lvm.

Chris PeBenito • 15 years ago

568efb

fix ordering of interface calls in locallogin.

Chris PeBenito • 15 years ago

8cd130

fix ordering of interface calls in iptables.

Chris PeBenito • 15 years ago

e6985f

fix ordering of interface calls in init.

Chris PeBenito • 15 years ago

464ffa

fix ordering of interface calls in hostname.

Chris PeBenito • 15 years ago

14d282

fix ordering of interface calls in getty.

Chris PeBenito • 15 years ago

5b5300

fix ordering of interface calls in fstools.

Chris PeBenito • 15 years ago

79ca72

fix ordering of interface calls in clock.

Chris PeBenito • 15 years ago

08638a

fix ordering of interface calls in authlogin.

Chris PeBenito • 15 years ago

2acba7

fix ordering of interface calls in sudo.

Chris PeBenito • 15 years ago

9c4722

- Allow exim to getattr on mountpoints

Daniel J Walsh • 15 years ago

467326

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 15 years ago

bebd8d

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 15 years ago

4c8c18

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 15 years ago

947b43

- Allod hald_dccm_t to create sock_files in /tmp

Daniel J Walsh • 15 years ago

af4fa8

- More fixes from upstream

Daniel J Walsh • 15 years ago

43fb72

- More fixes from upstream

Daniel J Walsh • 15 years ago

abd153

release 2.20090730

Chris PeBenito • 15 years ago

915dfa

changelog entry for the previous gentoo fixes

Chris PeBenito • 15 years ago

64c706

add bin_t labeling for gentoo dhcpcd-run-hooks location

Chris PeBenito • 15 years ago

78a9c2

openrc unfortunately mounts a tmpfs at /lib/rc

Chris PeBenito • 15 years ago

4c92f0

gentoo init script system uses tmpfs for state data

Chris PeBenito • 15 years ago

cfdbf3

- Fix polkit label

Daniel J Walsh • 15 years ago

c6e222

- Fix polkit label

Daniel J Walsh • 15 years ago

606cdc

gentoo init script system sends audit messages.

Chris PeBenito • 15 years ago

efa0ac

alsa file location update for debian, from Manoj.

Chris PeBenito • 15 years ago

316227

whitespace fixes in apt.

Chris PeBenito • 15 years ago

2a4740

clean up 6a192f70d42013fcbd4eefe1f35cab3de313cedb

Chris PeBenito • 15 years ago

b5aaa7

Update apt/aptitude policy to add support for lock/log files

Manoj Srivastava • 15 years ago

6a192f

pull most of fedora changes to rpc.

Chris PeBenito • 15 years ago

50458c

pull most of fedora changes to samba.

Chris PeBenito • 15 years ago

0c8917

/dev/fuse should be s0 not mls_high

Chris PeBenito • 15 years ago

105e85

pull in part of fedora mta changes

Chris PeBenito • 15 years ago

363e8f

add fprintd module from dan.

Chris PeBenito • 15 years ago

20c3cc

add devicekit module from dan.

Chris PeBenito • 15 years ago

677c4c

consolekit patch from dan.

Chris PeBenito • 15 years ago

4e7c0a

automount patch from dan.

Chris PeBenito • 15 years ago

333222

cups patch from dan.

Chris PeBenito • 15 years ago

8f3bdd

- Update to upstream

Daniel J Walsh • 15 years ago

375056

pull in apache_admin() from fedora

Chris PeBenito • 15 years ago

4be3e1

vmware patch from dan.

Chris PeBenito • 15 years ago

915500

fix dbus type transition conflict.

Chris PeBenito • 15 years ago

423a4a

sudo patch from dan.

Chris PeBenito • 15 years ago

41ea88

readahead patch from dan.

Chris PeBenito • 15 years ago

83f0b5

add missing userdom interfaces

Chris PeBenito • 15 years ago

408319

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 15 years ago

c7ae9a

- Allow certmaster to override dac permissions

Daniel J Walsh • 15 years ago

916052

snort patch from dan.

Chris PeBenito • 15 years ago

ebf3ec

wm policy from dan

Chris PeBenito • 15 years ago

5f6c30

oddjob patch from dan.

Chris PeBenito • 15 years ago

708a74

kerneloops patch from dan

Chris PeBenito • 15 years ago

fa5018

hal patch from dan.

Chris PeBenito • 15 years ago

9de7c1

avahi patch from dan

Chris PeBenito • 15 years ago

fe1205

dbus patch from dan

Chris PeBenito • 15 years ago

e04438

tmpreaper patch from dan.

Chris PeBenito • 15 years ago

5be35f

mozilla patch from dan.

Chris PeBenito • 15 years ago

06625d

add cpufreqselector from dan

Chris PeBenito • 15 years ago

f4962a

- Update to upstream

Daniel J Walsh • 15 years ago

ca1835

- Update to upstream

Daniel J Walsh • 15 years ago

5cb956

- Update to upstream

Daniel J Walsh • 15 years ago

df7055

remove read_default_t tunable

Chris PeBenito • 15 years ago

09516c

podsleuth patch from dan.

Chris PeBenito • 15 years ago

5bb5ec

afs client patch from dan.

Chris PeBenito • 15 years ago

13306f

bluetooth patch from dan.

Chris PeBenito • 15 years ago

b93a7d

clamav patch from dan.

Chris PeBenito • 15 years ago

ad0aea

mailman patch from dan.

Chris PeBenito • 15 years ago

92f08c

ricci patch from dan.

Chris PeBenito • 15 years ago

184744

fix policykit interface

Chris PeBenito • 15 years ago

d88224

gpg patch from dan

Chris PeBenito • 15 years ago

e4f73a

module version bump for 9b1907b217cb4c4d508b5130fcb6267e38182642

Chris PeBenito • 15 years ago

5271dd

add pulseaudio from dan.

Chris PeBenito • 15 years ago

9b1907

ppp patch from dan

Chris PeBenito • 15 years ago

7395f8

kerberos patch from dan

Chris PeBenito • 15 years ago

4aa075

dnsmasq patch from dan.

Chris PeBenito • 15 years ago

8f17f7

dhcp patch from dan

Chris PeBenito • 15 years ago

93d300

policykit.if whitespace fix

Chris PeBenito • 15 years ago

af5374

4 patches from dan.

Chris PeBenito • 15 years ago

adea58

add kismet and pulseaudio ports. fix sorting of ports.

Chris PeBenito • 15 years ago

edb7b9

changelog for previous commit

Chris PeBenito • 15 years ago

dc0ab0

add policykit from dan.

Chris PeBenito • 15 years ago

9e90ce

fix bad varnishd interface names

Chris PeBenito • 15 years ago

b67201

- Fix context for VirtualBox

Daniel J Walsh • 15 years ago

8da024

- Update to upstream

Daniel J Walsh • 15 years ago

8bc824

- Update to upstream

Daniel J Walsh • 15 years ago

722d1e

- Update to upstream

Daniel J Walsh • 15 years ago

2360ff

- Update to upstream

Daniel J Walsh • 15 years ago

599d4d

module version bump for f2583aa83b4f5c0081ac4caebffcc0a29401cf96

Chris PeBenito • 15 years ago

7694ab

Remove duplicate distro_redhat context

Manoj Srivastava • 15 years ago

f2583a

5 patches from dan

Chris PeBenito • 15 years ago

ce6fee

three debian patches from manoj

Chris PeBenito • 15 years ago

10b03f

- Fixes for xguest

Daniel J Walsh • 15 years ago

a88b48

trunk: fix typo in guest role decl.

Chris PeBenito • 15 years ago

84d88d

- fix multiple directory ownership of mandirs

Daniel J Walsh • 15 years ago

819f41

fix duplicate directory ownership with filesystem, policycoreutils

Tom Callaway • 15 years ago

a85aef

- Update to upstream

Daniel J Walsh • 15 years ago

d9676a

- Update to upstream

Daniel J Walsh • 15 years ago

a41c1d

trunk: update policycaps comments for sock_file open perm.

Chris PeBenito • 15 years ago

9ac973

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

bb8816

trunk: add missing varnish port.

Chris PeBenito • 15 years ago

45b975

trunk: pads from dan.

Chris PeBenito • 15 years ago

50824a

trunk: prelude patch from dan.

Chris PeBenito • 15 years ago

46e2fa

trunk: varnishd from dan.

Chris PeBenito • 15 years ago

267d9c

- Add rules for rtkit-daemon

Daniel J Walsh • 15 years ago

bcc53d

- Update to upstream

Daniel J Walsh • 15 years ago

7b16d5

trunk: whitespace fixes

Chris PeBenito • 15 years ago

3f67f7

trunk: 7 patches from dan.

Chris PeBenito • 15 years ago

20272c

- Add rtkit policy

Daniel J Walsh • 15 years ago

221642

trunk: nis patch from dan.

Chris PeBenito • 15 years ago

c98980

- Allow rpcd_t to stream connect to rpcbind

Daniel J Walsh • 15 years ago

d399fb

- Allow kpropd to create tmp files

Daniel J Walsh • 15 years ago

9850f4

- Fix last duplicate /var/log/rpmpkgs

Daniel J Walsh • 15 years ago

93dc66

- Update to upstream

Daniel J Walsh • 15 years ago

a9f095

trunk: add sssd from dan.

Chris PeBenito • 15 years ago

c017ee

- Update to upstream

Daniel J Walsh • 15 years ago

886631

- Update to upstream

Daniel J Walsh • 15 years ago

5e42ca

trunk: remove unnecessary semicolons after interface/template calls.

Chris PeBenito • 15 years ago

26410d

- Update to upstream

Daniel J Walsh • 15 years ago

607109

- Fix mcs rules to include chr_file and blk_file

Daniel J Walsh • 15 years ago

9386d6

- Add label for udev-acl

Daniel J Walsh • 15 years ago

e3bf67

trunk: Greylist milter from Paul Howarth.

Chris PeBenito • 15 years ago

c9c0d8

trunk: Allow unix_update to change the security attributes associate with files so

Chris PeBenito • 15 years ago

c7dc1c

trunk: Misc fixes for unix_update from Brandon Whalen.

Chris PeBenito • 15 years ago

df28a0

trunk: Add x_device permissions for XI2 functions, from Eamon Walsh.

Chris PeBenito • 15 years ago

95ea7d

- Additional rules for consolekit/udev, privoxy and various other fixes

Daniel J Walsh • 15 years ago

f8df9e

- New version for upstream

Daniel J Walsh • 15 years ago

d54def

- New version for upstream

Daniel J Walsh • 15 years ago

49883e

trunk: 10 patches from dan.

Chris PeBenito • 15 years ago

455155

- New version for upstream

Daniel J Walsh • 15 years ago

d3ae97

trunk: 1 patch from dan.

Chris PeBenito • 15 years ago

30425a

- Allow NetworkManager to read inotifyfs

Daniel J Walsh • 15 years ago

6b8380

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

a65fd9

- Allow setroubleshoot to run mlocate

Daniel J Walsh • 15 years ago

aa7b9c

- Update to upstream

Daniel J Walsh • 15 years ago

f3d288

- Update to upstream

Daniel J Walsh • 15 years ago

7c432e

- Update to upstream

Daniel J Walsh • 15 years ago

819771

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

731008

trunk: MLS constraints for the x_selection class, from Eamon Walsh.

Chris PeBenito • 15 years ago

16fd1f

trunk: add gpsd from miroslav grepl

Chris PeBenito • 15 years ago

cca4a2

trunk: missed UBAC change: update securetty_types for merged user tty type.

Chris PeBenito • 15 years ago

e127fb

trunk: 9 patches from dan.

Chris PeBenito • 15 years ago

63f0a7

trunk: add libjackserver.so textrel fc.

Chris PeBenito • 15 years ago

22894e

- New log file for vmware

Daniel J Walsh • 15 years ago

9ee63d

- Upgrade to upstream

Daniel J Walsh • 15 years ago

ef7416

trunk:

Chris PeBenito • 15 years ago

996779

trunk:

Chris PeBenito • 15 years ago

e0ea7b

trunk:

Chris PeBenito • 15 years ago

a01a4a

- Allow fprintd to access sys_ptrace

Daniel J Walsh • 15 years ago

eead2a

- Add varnishd policy

Daniel J Walsh • 15 years ago

9d1a7e

- Add varnishd policy

Daniel J Walsh • 15 years ago

7b6c10

- Add varnishd policy

Daniel J Walsh • 15 years ago

724d51

- Add varnishd policy

Daniel J Walsh • 15 years ago

d83b1b

- Fixes for kpropd

Daniel J Walsh • 15 years ago

f72bd4

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

80348b

- Allow brctl to r/w tun_tap_device_t

Daniel J Walsh • 15 years ago

fcb441

- Add /usr/share/selinux/packages

Daniel J Walsh • 15 years ago

62cfaf

- Allow rpcd_t to send signals to kernel threads

Daniel J Walsh • 15 years ago

0f6b92

trunk: whitespace fix for squid.fc.

Chris PeBenito • 15 years ago

a47eb5

- Fix upgrade for F10 to F11

Daniel J Walsh • 15 years ago

992419

- Add policy for /var/lib/fprint

Daniel J Walsh • 15 years ago

78c923

- Add policy for /var/lib/fprint

Daniel J Walsh • 15 years ago

a2098a

se-postgresql update from kaigai

Chris PeBenito • 15 years ago

350ed8

trunk: lircd from miroslav grepl

Chris PeBenito • 15 years ago

da3ed0

trunk: whitespace fixes.

Chris PeBenito • 15 years ago

c0f5fa

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

339235

-Remove duplicate line

Daniel J Walsh • 15 years ago

8a0604

- Allow svirt to manage pci and other sysfs device data

Daniel J Walsh • 15 years ago

959ab9

- Fix package selection handling

Daniel J Walsh • 15 years ago

0e31a0

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

c32d79

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

5dd89f

- Add shorewall policy

Daniel J Walsh • 15 years ago

37ebfc

- Additional rules for fprintd and sssd

Daniel J Walsh • 15 years ago

21b13f

- Allow nsplugin to unix_read unix_write sem for unconfined_java

Daniel J Walsh • 15 years ago

40d8f6

- Fix uml files to be owned by users

Daniel J Walsh • 15 years ago

b3ac4a

- Fix Upgrade path to install unconfineduser.pp when unocnfined package is

Daniel J Walsh • 15 years ago

e080bb

- Allow confined users to manace virt_content_t, since this is home dir

Daniel J Walsh • 15 years ago

b11dbb

- Fix labeling on /var/lib/misc/prelink*

Daniel J Walsh • 15 years ago

b0991a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

89c9c9

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

eaaf2a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

dac838

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

35ed99

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

db0daf

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

cd0a39

- Additional perms for readahead

Daniel J Walsh • 15 years ago

5ce1c4

- Additional perms for readahead

Daniel J Walsh • 15 years ago

5ba1bf

- Allow pulseaudio to acquire_svc on session bus

Daniel J Walsh • 15 years ago

4d5adb

- Allow sshd to read var_lib symlinks for freenx

Daniel J Walsh • 15 years ago

3c498a

trunk: Milter state directory patch from Paul Howarth.

Chris PeBenito • 15 years ago

0cf1d5

- Allow nsplugin unix_read and write on users shm and sem

Daniel J Walsh • 15 years ago

a32a15

trunk: 5 modules from dan.

Chris PeBenito • 15 years ago

a5ef55

- Fixes for podsleuth

Daniel J Walsh • 15 years ago

d982e7

*** empty log message ***

Daniel J Walsh • 15 years ago

dc00fc

- Allow cupsd_t to create link files in print_spool_t

Daniel J Walsh • 15 years ago

6203f4

- Allow audioentroy to read etc files

Daniel J Walsh • 15 years ago

4a0aac

- Add fail2ban_var_lib_t

Daniel J Walsh • 15 years ago

685032

- Separate out the ucnonfined user from the unconfined.pp package

Daniel J Walsh • 15 years ago

d4af17

- Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t.

Daniel J Walsh • 15 years ago

90e419

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

2e9176

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

25a476

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

153fe2

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

a50819

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

0e78af

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

510c2a

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

4cdbdd

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

04b682

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

d854f4

- Add customizable_types for svirt

Daniel J Walsh • 15 years ago

80beee

- Allow setroubelshoot exec* privs to prevent crash from bad libraries

Daniel J Walsh • 15 years ago

f49c57

trunk: module version bump for previous commit.

Chris PeBenito • 15 years ago

09125a

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

d6605b

- Dontaudit listing of /root directory for cron system jobs

Daniel J Walsh • 15 years ago

90ea5b

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

42d567

- Fix missing ld.so.cache label

Daniel J Walsh • 15 years ago

3434a9

- Add label for ~/.forward and /root/.forward

Daniel J Walsh • 15 years ago

c0158a

- Fixes for svirt

Daniel J Walsh • 15 years ago

9da6c9

- Fixes for svirt

Daniel J Walsh • 15 years ago

cb51c2

- Fixes for svirt

Daniel J Walsh • 15 years ago

6130d5

- Fixes to allow svirt read iso files in homedir

Daniel J Walsh • 16 years ago

9ca87f

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 16 years ago

ec9800

trunk: 14 patches from dan.

Chris PeBenito • 16 years ago

8f800d

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 16 years ago

5dce3c

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

244b45

trunk: 6 patches from dan.

Chris PeBenito • 16 years ago

3c9b2e

- Allow mdadm to read/write mls override

Daniel J Walsh • 16 years ago

bfc78b

- Change to svirt to only access svirt_image_t

Daniel J Walsh • 16 years ago

095146

- Fix libvirt policy

Daniel J Walsh • 16 years ago

d4b8dc

- Upgrade to latest upstream

Daniel J Walsh • 16 years ago

b12011

- Fixes for iscsid and sssd

Daniel J Walsh • 16 years ago

c240b6

- Fixes for iscsid and sssd

Daniel J Walsh • 16 years ago

255094

trunk: add open perm to sock_file.

Chris PeBenito • 16 years ago

d3cdc3

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

79a5a8

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

c90440

trunk: add mysql db lnk_file transition.

Chris PeBenito • 16 years ago

e21bd2

- Add pulseaudio, sssd policy

Daniel J Walsh • 16 years ago

4bf1c2

trunk: 5 patches from dan.

Chris PeBenito • 16 years ago

da0423

- Add pulseaudio, sssd policy

Daniel J Walsh • 16 years ago

e72f55

- Add pulseaudio context

Daniel J Walsh • 16 years ago

46b564

- Add pulseaudio context

Daniel J Walsh • 16 years ago

0c34c6

- Upgrade to latest patches

Daniel J Walsh • 16 years ago

4f5b22

- Upgrade to latest patches

Daniel J Walsh • 16 years ago

a67a1c

trunk: fix typo in devices file contexts.

Chris PeBenito • 16 years ago

11c944

trunk: storage patch from dan.

Chris PeBenito • 16 years ago

2c664e

trunk: devices patch from dan.

Chris PeBenito • 16 years ago

7b7620

trunk: corecommands patch from dan.

Chris PeBenito • 16 years ago

be5aae

trunk: add nlmsg_tty_audit permission.

Chris PeBenito • 16 years ago

b4ad69

trunk: man page fixes from dan.

Chris PeBenito • 16 years ago

60c395

- Fixes for libvirt

Daniel J Walsh • 16 years ago

0a03cc

trunk: filesystem patch from dan.

Chris PeBenito • 16 years ago

c45fda

- Update to Latest upstream

Daniel J Walsh • 16 years ago

dbfd06

- Update to Latest upstream

Daniel J Walsh • 16 years ago

dcbbdf

- Update to Latest upstream

Daniel J Walsh • 16 years ago

8c3a31

trunk: add MLS constrains for ingress/egress permissions from Paul Moore.

Chris PeBenito • 16 years ago

e1a70f

- Further confinement of qemu images via svirt

Daniel J Walsh • 16 years ago

496752

- Allow NetworkManager to manage /etc/NetworkManager/system-connections

Daniel J Walsh • 16 years ago

99fbfb

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Jesse Keating • 16 years ago

150ff5

trunk: Drop write permission from fs_read_rpc_sockets().

Chris PeBenito • 16 years ago

156204

trunk: remove unused udev_runtime_t type.

Chris PeBenito • 16 years ago

81fa19

trunk: Patch for RadSec port from Glen Turner.

Chris PeBenito • 16 years ago

f3fcad

- Allow NetworkManager to manage /etc/NetworkManager/system-connections

Daniel J Walsh • 16 years ago

52cbcb

- add virtual_image_context and virtual_domain_context files

Daniel J Walsh • 16 years ago

de6774

- Allow rpcd_t to send signal to mount_t

Daniel J Walsh • 16 years ago

8f6e43

- Fix sysnet/net_conf_t

Daniel J Walsh • 16 years ago

8c2b68

- Fix squidGuard labeling

Daniel J Walsh • 16 years ago

817947

- Re-add corenet_in_generic_if(unlabeled_t)

Daniel J Walsh • 16 years ago

2eec43

- Re-add corenet_in_generic_if(unlabeled_t)

Daniel J Walsh • 16 years ago

d9ad79

Daniel J Walsh • 16 years ago

e46e00

trunk: 6 patches from dan.

Chris PeBenito • 16 years ago

f79314

UPdate policycorutils version

Daniel J Walsh • 16 years ago

d43c25

- Add git web policy

Daniel J Walsh • 16 years ago

1d1c05

- Add setrans contains from upstream

Daniel J Walsh • 16 years ago

bd0db4

- Allow xdm to create user_tmp_t sockets for switch user to work

Daniel J Walsh • 16 years ago

4ed140

- Allow xdm to create user_tmp_t sockets for switch user to work

Daniel J Walsh • 16 years ago

598de2

trunk: add context contains to setrans.

Chris PeBenito • 16 years ago

c1e501

- Fix staff_t domain

Daniel J Walsh • 16 years ago

bc861e

- Grab remainder of network_peer_controls patch

Daniel J Walsh • 16 years ago

73fe81

- More fixes for devicekit

Daniel J Walsh • 16 years ago

659e96

- More fixes for devicekit

Daniel J Walsh • 16 years ago

88d196

- Upgrade to latest upstream

Daniel J Walsh • 16 years ago

c957c3

- Add boolean to disallow unconfined_t login

Daniel J Walsh • 16 years ago

bc2add

trunk: Enable network_peer_controls policy capability from Paul Moore.

Chris PeBenito • 16 years ago

7722c2

- Add boolean to disallow unconfined_t login

Daniel J Walsh • 16 years ago

574cab

- Add back transition from xguest to mozilla

Daniel J Walsh • 16 years ago

0554a1

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 16 years ago

ab3e55

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 16 years ago

a18335

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 16 years ago

252866

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 16 years ago

618e35

trunk: btrfs from Paul Moore.

Chris PeBenito • 16 years ago

805f34

- Fixes for wicd daemon

Daniel J Walsh • 16 years ago

2fbeb7

- Fixes for wicd daemon

Daniel J Walsh • 16 years ago

f89910

- More mls/rpm fixes

Daniel J Walsh • 16 years ago

48adbe

- Add policy to make dbus/nm-applet work

Daniel J Walsh • 16 years ago

6f3760

- Add policy to make dbus/nm-applet work

Daniel J Walsh • 16 years ago

14c9b9

trunk: Add db_procedure install permission from KaiGai Kohei.

Chris PeBenito • 16 years ago

466e22

- Remove polgen-ifgen from post and add trigger to policycoreutils-python

Daniel J Walsh • 16 years ago

40dd24

- Add wm policy

Daniel J Walsh • 16 years ago

6f8856

- Add wm policy

Daniel J Walsh • 16 years ago

6cf32a

- Add wm policy

Daniel J Walsh • 16 years ago

1b94a1

- Fixed for DeviceKit

Daniel J Walsh • 16 years ago

2a4bda

- Add devicekit policy

Daniel J Walsh • 16 years ago

3b03e7

- Add devicekit policy

Daniel J Walsh • 16 years ago

acc137

- Add devicekit policy

Daniel J Walsh • 16 years ago

9317a6

- Add devicekit policy

Daniel J Walsh • 16 years ago

70d5cc

- Add devicekit policy

Daniel J Walsh • 16 years ago

4e42f3

- Update to upstream

Daniel J Walsh • 16 years ago

055d17

- Update to upstream

Daniel J Walsh • 16 years ago

1d72fb

- Define openoffice as an x_domain

Daniel J Walsh • 16 years ago

7b146d

- Define openoffice as an x_domain

Daniel J Walsh • 16 years ago

eacea1

- Define openoffice as an x_domain

Daniel J Walsh • 16 years ago

0891b2

trunk: Add support for network interfaces with access controlled by a Boolean from the CLIP project.

Chris PeBenito • 16 years ago

019dfa

trunk: add sysadm_entry_spec_domtrans_to() interface from clip.

Chris PeBenito • 16 years ago

64daa8

trunk: su fixes from clip.

Chris PeBenito • 16 years ago

9e7a33

- Fixes for reading xserver_tmp_t

Daniel J Walsh • 16 years ago

339bf3

trunk: add support for labeled booleans.

Chris PeBenito • 16 years ago

f0435b

- Allow cups_pdf_t write to nfs_t

Daniel J Walsh • 16 years ago

87fb15

trunk: Remove node definitions and change node usage to generic nodes.

Chris PeBenito • 16 years ago

c12621

trunk: change network interface access from all to generic network interfaces.

Chris PeBenito • 16 years ago

668b30

trunk: fix certwatch version number.

Chris PeBenito • 16 years ago

59d599

- Remove audio_entropy policy

Daniel J Walsh • 16 years ago

2ed2ff

- Update to upstream

Daniel J Walsh • 16 years ago

292c49

- Update to upstream

Daniel J Walsh • 16 years ago

b3f084

trunk: Add kernel_service access vectors, from Stephen Smalley.

Chris PeBenito • 16 years ago

347a70

- Allow hal_acl_t to getattr/setattr fixed_disk

Daniel J Walsh • 16 years ago

5df262

- Change userdom_read_all_users_state to include reading symbolic links in

Daniel J Walsh • 16 years ago

323639

- Change userdom_read_all_users_state to include reading symbolic links in

Daniel J Walsh • 16 years ago

1cf706

- Fix dbus reading /proc information

Daniel J Walsh • 16 years ago

cf8fd9

- Add missing alias for home directory content

Daniel J Walsh • 16 years ago

bae2e9

- Fixes for IBM java location

Daniel J Walsh • 16 years ago

33c7ea

- Allow unconfined_r unconfined_java_t

Daniel J Walsh • 16 years ago

dcd0c9

trunk: check in version and changelog for release.

Chris PeBenito • 16 years ago

e66a0c

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

17ec8c

- Add cron_role back to user domains

Daniel J Walsh • 16 years ago

b88015

- Add cron_role back to user domains

Daniel J Walsh • 16 years ago

fd2b62

trunk: Fix consistency of audioentropy and iscsi module naming.

Chris PeBenito • 16 years ago

319697

- Fix sudo setting of user keys

Daniel J Walsh • 16 years ago

9a43d2

- Allow iptables to talk to terminals

Daniel J Walsh • 16 years ago

163db1

- Allow iptables to talk to terminals

Daniel J Walsh • 16 years ago

2ae161

- Allow iptables to talk to terminals

Daniel J Walsh • 16 years ago

c136db

- Allow iptables to talk to terminals

Daniel J Walsh • 16 years ago

01ce3d

- Allow iptables to talk to terminals

Daniel J Walsh • 16 years ago

6d74d8

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

9ff89c

- Cleanup policy

Daniel J Walsh • 16 years ago

bcb192

- Cleanup policy

Daniel J Walsh • 16 years ago

739db2

trunk: fix role change constraint.

Chris PeBenito • 16 years ago

f657cb

trunk: whitespace fixes in xml blocks.

Chris PeBenito • 16 years ago

ff8f0a

trunk: whitespace fix changing multiple spaces into tabs.

Chris PeBenito • 16 years ago

6073ea

trunk: fix missing xml parameter.

Chris PeBenito • 16 years ago

a057e0

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

fb4826

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

14c0ed

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

7b43f5

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

b3d78e

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

359d6d

Rebuild for Python 2.6

Ignacio Vazquez-Abrams • 16 years ago

23d684

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

fce9b7

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

02d888

trunk: Debian file context fix for xen from Russell Coker.

Chris PeBenito • 16 years ago

b3eb12

trunk: add milter module from Paul Howarth.

Chris PeBenito • 16 years ago

b9e523

trunk: a fix on the previous commit.

Chris PeBenito • 16 years ago

b3b607

trunk: 5 patches from dan.

Chris PeBenito • 16 years ago

fcee22

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

01e9e7

trunk 2 patches from dan.

Chris PeBenito • 16 years ago

659c86

trunk: Xserver MLS fix from Eamon Walsh.

Chris PeBenito • 16 years ago

7f4919

trunk: fix logging admin interfaces.

Chris PeBenito • 16 years ago

7a4c28

trunk: fix disable ubac condition for process perms.

Chris PeBenito • 16 years ago

23d5ab

trunk: 2 fixes from martin orr.

Chris PeBenito • 16 years ago

73c77e

trunk: add omapi port for dhcpcd.

Chris PeBenito • 16 years ago

99282e

trunk: 10 patches from dan.

Chris PeBenito • 16 years ago

5843d0

trunk: patch from Mike Edenfield to add udevadm fc entry.

Chris PeBenito • 16 years ago

27337d

trunk: fix monolithic building to correctly put USER lines in homedir_template.

Chris PeBenito • 16 years ago

662757

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

657c22

- Allow postgresl to bind to udp nodes

Daniel J Walsh • 16 years ago

0d6e62

trunk: tweaks from russell and martin orr.

Chris PeBenito • 16 years ago

ba7969

- Allow lvm to dbus chat with hal

Daniel J Walsh • 16 years ago

2a650e

- Allow lvm to dbus chat with hal

Daniel J Walsh • 16 years ago

b7a27b

- Fix cyphesis file context

Daniel J Walsh • 16 years ago

074b12

- Allow hal/pm-utils to look at /var/run/video.rom

Daniel J Walsh • 16 years ago

6a09cf

trunk: add missing ubac module.

Chris PeBenito • 16 years ago

000394

trunk: merge UBAC.

Chris PeBenito • 16 years ago

296273

- Additional fixes for cyphesis

Daniel J Walsh • 16 years ago

411a42

trunk: additional open fixes.

Chris PeBenito • 16 years ago

932c35

- Allow dhcpc to restart ypbind

Daniel J Walsh • 16 years ago

a023a0

- Allow dhcpc to restart ypbind

Daniel J Walsh • 16 years ago

333ebd

- Allow dhcpc to restart ypbind

Daniel J Walsh • 16 years ago

29e94c

- Fix confined users

Daniel J Walsh • 16 years ago

1bc89b

- Fix confined users

Daniel J Walsh • 16 years ago

e704a1

- Fix confined users

Daniel J Walsh • 16 years ago

236205

- Fix confined users

Daniel J Walsh • 16 years ago

0c5d01

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

812930

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

d8e5d0

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

a3e038

- Allow mozilla to run with unconfined_execmem_t

Daniel J Walsh • 16 years ago

4fa9db

- Dontaudit domains trying to write to .xsession-errors

Daniel J Walsh • 16 years ago

798a73

- Allow nsplugin to look at autofs_t directory

Daniel J Walsh • 16 years ago

328123

- Allow kerneloops to create tmp files

Daniel J Walsh • 16 years ago

de61cc

- Allow kerneloops to create tmp files

Daniel J Walsh • 16 years ago

f5bbca

- More alias for fastcgi

Daniel J Walsh • 16 years ago

5a7941

- More alias for fastcgi

Daniel J Walsh • 16 years ago

ae68d9

- Remove mod_fcgid-selinux package

Daniel J Walsh • 16 years ago

236d3c

- Fix dovecot access

Daniel J Walsh • 16 years ago

b9e15d

trunk: more open perm fixes.

Chris PeBenito • 16 years ago

82d277

- Policy cleanup

Daniel J Walsh • 16 years ago

49f48f

trunk: Move shared library calls from individual modules to the domain module.

Chris PeBenito • 16 years ago

6e68e6

trunk: remove redundant shared lib calls.

Chris PeBenito • 16 years ago

2cca6b

trunk: additional whitespace fixes.

Chris PeBenito • 16 years ago

2a9837

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 16 years ago

88cf0a

- Remove Multiple spec

Daniel J Walsh • 16 years ago

b4cab5

- Remove Multiple spec

Daniel J Walsh • 16 years ago

611568

trunk: Enable open permission checks policy capability.

Chris PeBenito • 16 years ago

0b36a2

- Fix labeling of libGL

Daniel J Walsh • 16 years ago

4b4392

trunk: Remove hierarchy from portage module as it is not a good example of hieararchy.

Chris PeBenito • 16 years ago

aea3f2

trunk: Remove enableaudit target from modular build as semodule -DB supplants it.

Chris PeBenito • 16 years ago

b19f86

- Update to upstream

Daniel J Walsh • 16 years ago

e8fc9e

- Update to upstream

Daniel J Walsh • 16 years ago

412570

trunk: version bits for the release.

Chris PeBenito • 16 years ago

40db86

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

5d4f4b

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

74993c

trunk: a pile of misc fixes.

Chris PeBenito • 16 years ago

aa7c46

- Update to upstream

Daniel J Walsh • 16 years ago

b6cc6a

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

06099d

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 16 years ago

04d286

- Update to upstream policy

Daniel J Walsh • 16 years ago

80edc3

- Update to upstream policy

Daniel J Walsh • 16 years ago

e0b9b8

- Update to upstream policy

Daniel J Walsh • 16 years ago

675bba

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

967fd1

trunk: 21 patches from dan.

Chris PeBenito • 16 years ago

e87221

- Fixes for confined xwindows and xdm_t

Daniel J Walsh • 16 years ago

1062bd

trunk: fix typo

Chris PeBenito • 16 years ago

ed8ae5

trunk: 7 patches from dan, 1 from eamon.

Chris PeBenito • 16 years ago

12c61f

trunk: add oident from dominick grift.

Chris PeBenito • 16 years ago

73edbc

- Allow confined users and xdm to exec wm

Daniel J Walsh • 16 years ago

86369e

- Allow NetworkManager to transition to avahi and iptables

Daniel J Walsh • 16 years ago

f1a827

- Allow NetworkManager to transition to avahi and iptables

Daniel J Walsh • 16 years ago

c773b4

- Allow domains to search other domains keys, coverup kernel bug

Daniel J Walsh • 16 years ago

b42a1e

trunk: fix dupe fc.

Chris PeBenito • 16 years ago

6d8af2

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

4bdf19

- Fix labeling for oracle

Daniel J Walsh • 16 years ago

094ef3

- Allow nsplugin to comminicate with xdm_tmp_t sock_file

Daniel J Walsh • 16 years ago

2ede4e

- Change all user tmpfs_t files to be labeled user_tmpfs_t

Daniel J Walsh • 16 years ago

998737

- Upgrade to upstream

Daniel J Walsh • 16 years ago

ff8053

- Upgrade to upstream

Daniel J Walsh • 16 years ago

d55c06

- Upgrade to upstream

Daniel J Walsh • 16 years ago

d611f1

- Upgrade to upstream

Daniel J Walsh • 16 years ago

b709ff

- Allow confined users to login with dbus

Daniel J Walsh • 16 years ago

ed32c6

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

a80e7a

trunk: readahead fix from dan.

Chris PeBenito • 16 years ago

bf9f34

trunk: cvs update from dan.

Chris PeBenito • 16 years ago

3daef6

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

d86efe

trunk: remove stale pax class comments as that class was removed.

Chris PeBenito • 16 years ago

4a4755

- Add file context for /dev/mspblk.*

Daniel J Walsh • 16 years ago

f0375d

- Fix transition to nsplugin '

Daniel J Walsh • 16 years ago

f77dd2

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

11ef24

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

8ff015

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

530772

trunk: init script for setrans.

Chris PeBenito • 16 years ago

88c02e

trunk: rpcbind update from dan.

Chris PeBenito • 16 years ago

658f4d

trunk: last bit of wpa_supplicant update from martin orr.

Chris PeBenito • 16 years ago

fd49fe

- Merge upstream changes

Daniel J Walsh • 16 years ago

8d197d

trunk: remove incomplete sshd_extern.

Chris PeBenito • 16 years ago

c9824e

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 16 years ago

64c5b9

trunk: logging update from dan.

Chris PeBenito • 16 years ago

cfafe4

- Merge upstream changes

Daniel J Walsh • 16 years ago

b844bb

- Merge upstream changes

Daniel J Walsh • 16 years ago

0abbc2

- Merge upstream changes

Daniel J Walsh • 16 years ago

13e7ea

- Merge upstream changes

Daniel J Walsh • 16 years ago

d3a969

- Merge upstream changes

Daniel J Walsh • 16 years ago

59571a

- Merge upstream changes

Daniel J Walsh • 16 years ago

ceb150

trunk: bind update from dan.

Chris PeBenito • 16 years ago

f5394c

trunk: rename labeled init scripts with initrc convention.

Chris PeBenito • 16 years ago

48f645

trunk: squid update from dan.

Chris PeBenito • 16 years ago

a46b60

- Merge upstream changes

Daniel J Walsh • 16 years ago

8a482d

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

21ea2b

- Merge upstream changes

Daniel J Walsh • 16 years ago

16c3ff

trunk: kudzu and mta patches from dan.

Chris PeBenito • 16 years ago

36095d

trunk: promote networkmanager debian fc entries out of build options.

Chris PeBenito • 16 years ago

bc85e8

trunk: ntp and setrans update from dan.

Chris PeBenito • 16 years ago

878691

trunk: Debian update for NetworkManager/wpa_supplicant from Martin Orr.

Chris PeBenito • 16 years ago

52ceaa

trunk: networkmanager/ppp patch from dan.

Chris PeBenito • 16 years ago

ae3386

trunk: fix bad apcupsd interface name.

Chris PeBenito • 16 years ago

859135

- Remove gamin policy

Daniel J Walsh • 16 years ago

aca77a

trunk: fix fail2ban init script regex.

Chris PeBenito • 16 years ago

543418

trunk: update mls constraints for x_application_data.

Chris PeBenito • 16 years ago

6a824f

trunk: fail2ban update from dan.

Chris PeBenito • 16 years ago

cdac98

- Add tinyxs-max file system support

Daniel J Walsh • 16 years ago

d0d307

- Update to upstream

Daniel J Walsh • 16 years ago

0a219f

trunk: fix bad require.

Chris PeBenito • 16 years ago

96851b

trunk: add cyphesis from dan.

Chris PeBenito • 16 years ago

a71e13

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 16 years ago

e40fa6

- Allow audit dispatcher to kill his children

Daniel J Walsh • 16 years ago

3ad355

- Allow audit dispatcher to kill his children

Daniel J Walsh • 16 years ago

c37b42

- Update to upstream

Daniel J Walsh • 16 years ago

d7927a

- Update to upstream

Daniel J Walsh • 16 years ago

cd8bee

trunk: first part of init script labeling support.

Chris PeBenito • 16 years ago

6cc3f3

- Update to upstream

Daniel J Walsh • 16 years ago

2d1752

trunk: hplip uses dbus.

Chris PeBenito • 16 years ago

9bcfb6

trunk: inetd update from dan.

Chris PeBenito • 16 years ago

24af9b

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 16 years ago

e4171e

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

7638e7

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

510ac8

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 16 years ago

c11057

trunk: add w3c from dan.

Chris PeBenito • 16 years ago

32f8ff

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

93f445

trunk: man page updates from dan.

Chris PeBenito • 16 years ago

b4f23e

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

770c01

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 16 years ago

3e5987

trunk: two small patches from dan.

Chris PeBenito • 16 years ago

6e3289

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

eb7e6d

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

af0cf6

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 16 years ago

9acf48

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 16 years ago

9c4500

trunk: add an empty m4 string so the index macro is not invoked, to prevent a warning.

Chris PeBenito • 16 years ago

cc1eee

- Update to upstream

Daniel J Walsh • 16 years ago

57ae10

- Update to upstream

Daniel J Walsh • 16 years ago

1a0f64

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 16 years ago

e0ed76

- Update to upstream

Daniel J Walsh • 16 years ago

d87d88

- Update to upstream

Daniel J Walsh • 16 years ago

b5d09d

trunk: missed fixes on previous commit.

Chris PeBenito • 16 years ago

7aabe3

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 16 years ago

8a948c

- Allow system-config-selinux to work with policykit

Daniel J Walsh • 16 years ago

0f1bd6

- Fix novel labeling

Daniel J Walsh • 16 years ago

174291

trunk: Samba/winbind update from Mike Edenfield.

Chris PeBenito • 16 years ago

b81bfc

- Fix novel labeling

Daniel J Walsh • 16 years ago

170fa2

- Consolodate pyzor,spamassassin, razor into one security domain

Daniel J Walsh • 16 years ago

c80a3d

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 16 years ago

3338f2

- Consolodate pyzor,spamassassin, razor into one security domain

Daniel J Walsh • 16 years ago

07bd5c

- Fixes for logrotate, alsa

Daniel J Walsh • 16 years ago

4450dd

trunk: another patch from the fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

d13f87

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 16 years ago

556556

- Fixes for logrotate, alsa

Daniel J Walsh • 16 years ago

8f2532

- Fixes for logrotate, alsa

Daniel J Walsh • 16 years ago

bb6af9

- Eliminate vbetool duplicate entry

Daniel J Walsh • 16 years ago

f12d5b

- Eliminate vbetool duplicate entry

Daniel J Walsh • 16 years ago

599e97

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 16 years ago

dc1920

trunk: 7 patches from Fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

6224fc

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

0b0533

trunk: massive whitespace cleanup from dominick grift.

Chris PeBenito • 16 years ago

0bfccd

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

2b592a

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

feefee

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

078ad0

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 16 years ago

4459a7

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

6ed853

- Add inotify support to nscd

Daniel J Walsh • 16 years ago

df6220

Add nscd inotify fix

Daniel J Walsh • 16 years ago

6db69f

- Allow unconfined_t to setfcap

Daniel J Walsh • 16 years ago

43f9fc

- Allow amanda to read tape

Daniel J Walsh • 16 years ago

273a44

- Allow ypbind apps to net_bind_service

Daniel J Walsh • 16 years ago

0ec686

- Allow ypbind apps to net_bind_service

Daniel J Walsh • 16 years ago

258b00

- Allow all system domains and application domains to append to any log

Daniel J Walsh • 16 years ago

75edec

trunk: VERSION and Changelog update for release.

Chris PeBenito • 16 years ago

e64c38

trunk: bump versions for release.

Chris PeBenito • 16 years ago

cfcf50

trunk: drop workaround rules.

Chris PeBenito • 16 years ago

6aa991

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

8b52a1

trunk: Fix httpd_enable_homedirs to actually provide the access it is supposed to provide.

Chris PeBenito • 16 years ago

e311e2

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

5d349c

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

cd60b6

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

c62a1b

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

ca5152

- Allow vpnc to run ifconfig

Daniel J Walsh • 16 years ago

50eeed

- Allow vpnc to run ifconfig

Daniel J Walsh • 16 years ago

c18681

trunk: apache script connections to postgres, from kaigai.

Chris PeBenito • 16 years ago

5fe7de

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaee

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2

trunk: Patch to handle postfix data_directory from Vaclav Ovsik.

Chris PeBenito • 16 years ago

8c6292

trunk: fix up stored procedure naming patch from kaigai.

Chris PeBenito • 16 years ago

7f4005

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a903

- Allow confined users to use postgres

Daniel J Walsh • 16 years ago

f86ed5

- Apply unconfined_execmem_exec_t to haskell programs

Daniel J Walsh • 16 years ago

547aa2

- Fix prelude file context

Daniel J Walsh • 16 years ago

6959e0

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

1746ec

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

fe0d46

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

1f5ca4

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

294e65

trunk: pull in most of dans vmware patch.

Chris PeBenito • 16 years ago

a713ad

trunk: two small updates from dan.

Chris PeBenito • 16 years ago

c54eb8

trunk: podsleuth and hal updates from dan.

Chris PeBenito • 16 years ago

131634

trunk: add qemu and virt from dan.

Chris PeBenito • 16 years ago

eb4216

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618

trunk: additional patch from kaigai to fix up some type transitions for unpriv clients.

Chris PeBenito • 16 years ago

8e7d43

- Prevent applications from reading x_device

Daniel J Walsh • 16 years ago

f4ff8b

- Add /var/lib/selinux context

Daniel J Walsh • 16 years ago

5608a9

- Update to upstream

Daniel J Walsh • 16 years ago

93df85

- Update to upstream

Daniel J Walsh • 16 years ago

af0f73

- Update to upstream

Daniel J Walsh • 16 years ago

c5c253

- Add livecd policy

Daniel J Walsh • 16 years ago

f513c7

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08

trunk: trivial kernel patch from dan.

Chris PeBenito • 16 years ago

67b620

trunk: Patch for X.org dbus support from Martin Orr.

Chris PeBenito • 16 years ago

ef55a1

trunk: misc gentoo fc fixes.

Chris PeBenito • 16 years ago

4b28c2

trunk: add prelude from dan.

Chris PeBenito • 16 years ago

cdbd09

- Add livecd policy

Daniel J Walsh • 16 years ago

15f71c

- Dontaudit search of admin_home for init_system_domain

Daniel J Walsh • 16 years ago

91ec07

- Begin XAce integration

Daniel J Walsh • 16 years ago

80e0b8

- Merge Upstream

Daniel J Walsh • 16 years ago

081b6a

- Merge Upstream

Daniel J Walsh • 16 years ago

2e33f7

- Merge Upstream

Daniel J Walsh • 16 years ago

b6883e

- Merge Upstream

Daniel J Walsh • 16 years ago

9ed55b

Fix missing requires

Daniel J Walsh • 16 years ago

accaa3

- Merge Upstream

Daniel J Walsh • 16 years ago

a4995d

- Merge Upstream

Daniel J Walsh • 16 years ago

8100ac

- Merge Upstream

Daniel J Walsh • 16 years ago

ba2c5a

trunk: misc fixes.

Chris PeBenito • 16 years ago

147af4

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efe

trunk: fs update from dan.

Chris PeBenito • 16 years ago

b4921b

trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.

Chris PeBenito • 16 years ago

308baa

trunk: add additional portage log locations.

Chris PeBenito • 16 years ago

0ecd82

trunk: tweak kerneloops.

Chris PeBenito • 16 years ago

8926b2

trunk: add kerneloops from dan.

Chris PeBenito • 16 years ago

782c10

trunk: add kismet from dan.

Chris PeBenito • 16 years ago

ff79b8

trunk: remove unneeded dependency on generated_definitions.conf.

Chris PeBenito • 16 years ago

9968e2

- Merge Upstream

Daniel J Walsh • 16 years ago

7fd458

trunk: start adding open perm to obvious places.

Chris PeBenito • 16 years ago

cbe82b

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbd

trunk: fix typo

Chris PeBenito • 16 years ago

e6fdb5

trunk: temp workaround for toolchain breakage.

Chris PeBenito • 16 years ago

8db508

trunk: Module loading now requires setsched on kernel threads.

Chris PeBenito • 16 years ago

4416c4

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7

updated policy

Daniel J Walsh • 16 years ago

7e6a2a

add init_upstart boolean

Daniel J Walsh • 16 years ago

fbea0d

remove old patch

Daniel J Walsh • 16 years ago

b42662

Update for rawhide

Daniel J Walsh • 16 years ago

4b7f03

Update for rawhide

Daniel J Walsh • 16 years ago

c43b44

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a

trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.

Chris PeBenito • 16 years ago

a42ce9

- Allow amanada to create data files

Daniel J Walsh • 16 years ago

cd9bba

- Allow amanada to create data files

Daniel J Walsh • 16 years ago

6a65e4

- Allow amanada to create data files

Daniel J Walsh • 16 years ago

993c27

- Remove dmesg boolean

Daniel J Walsh • 16 years ago

da67f1

- Remove dmesg boolean

Daniel J Walsh • 16 years ago

58d7ee

- Remove dmesg boolean

Daniel J Walsh • 16 years ago

6c25b4

trunk: X application data class from Eamon Walsh and Ted Toth.

Chris PeBenito • 16 years ago

d923d5

trunk: add secadm and auditadm bits to appconfig files now that they are available beyond the MLS policy.

Chris PeBenito • 16 years ago

a68c30

- Change unconfined_t to transition to unconfined_mono_t when running mono

Daniel J Walsh • 16 years ago

86881d

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cd

- Remove old booleans from targeted-booleans.conf file

Daniel J Walsh • 16 years ago

2d8ff5

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

b4e933

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

ef5e60

- Change etc files to config files to allow users to read them

Daniel J Walsh • 16 years ago

eb11e7

- Change etc files to config files to allow users to read them

Daniel J Walsh • 16 years ago

4b1d56

trunk: add missing mplayer_etc_t require in role template.

Chris PeBenito • 16 years ago

a0647a

trunk: make hald_log_t a log file.

Chris PeBenito • 16 years ago

7e11b7

trunk: hal xml doc fix pointed out by Rob Myers.

Chris PeBenito • 16 years ago

f12302

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db

trunk: Add file for enabling policy capabilities.

Chris PeBenito • 16 years ago

c07f9c

trunk: Patch to fix leaky interface/template call depth calculator from Vaclav Ovsik.

Chris PeBenito • 16 years ago

75da4b

- dontaudit mrtg reading /proc

Daniel J Walsh • 16 years ago

a6a82a

- dontaudit mrtg reading /proc

Daniel J Walsh • 16 years ago

b912a6

Daniel J Walsh • 16 years ago

5896ba

Daniel J Walsh • 16 years ago

bb36d7

- Allow dhcpd to read kernel network state

Daniel J Walsh • 16 years ago

06686c

- Label /var/run/gdm correctly

Daniel J Walsh • 16 years ago

41625a

- Allow transition from initrc_t to getty_t

Daniel J Walsh • 16 years ago

254e3c

- Allow passwd to communicate with user sockets to change gnome-keyring

Daniel J Walsh • 16 years ago

5a576e

- Fix initial install

Daniel J Walsh • 16 years ago

7f851a

-

Daniel J Walsh • 16 years ago

c3c4a5

- Allow radvd to use fifo_file

Daniel J Walsh • 16 years ago

08f4ab

- Allow radvd to use fifo_file

Daniel J Walsh • 16 years ago

27943d

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

8152a7

trunk: release

Chris PeBenito • 16 years ago

c565b4

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b4

- Allow nsplugin to read /etc/mozpluggerrc, user_fonts

Daniel J Walsh • 16 years ago

c66f2b

- Allow initrc_t to dbus chat with consolekit.

Daniel J Walsh • 16 years ago

7b9c57

- Allow initrc_t to dbus chat with consolekit.

Daniel J Walsh • 16 years ago

294ea7

- Additional access for nsplugin

Daniel J Walsh • 16 years ago

e54cb2

- Additional access for nsplugin

Daniel J Walsh • 16 years ago

478aee

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e82895

- Allow mount to mkdir on tmpfs

Daniel J Walsh • 17 years ago

f70afc

- Fix file context for MATLAB

Daniel J Walsh • 17 years ago

bf3d39

trunk: fix winbind socket connection interface for default location of the sock_file.

Chris PeBenito • 17 years ago

9377a3

trunk: add type transition to fix mysql socket creation.

Chris PeBenito • 17 years ago

9e8c3a

- Allow stunnel to transition to inetd children domains

Daniel J Walsh • 17 years ago

5ea3f1

trunk: small fixes for gentoo system.

Chris PeBenito • 17 years ago

2ed4f5

Daniel J Walsh • 17 years ago

94b7be

- Fixes for qemu/virtd

Daniel J Walsh • 17 years ago

ba9e5e

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 17 years ago

954e7c

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 17 years ago

97081d

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 17 years ago

a6e128

- Allow nsplugin to run acroread

Daniel J Walsh • 17 years ago

d593d2

trunk: add wireshark.

Chris PeBenito • 17 years ago

6e2123

- Allow nsplugin to run acroread

Daniel J Walsh • 17 years ago

ad50da

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 17 years ago

91d6c9

- Add cups_pdf policy

Daniel J Walsh • 17 years ago

987b10

- prewika needs to contact mysql

Daniel J Walsh • 17 years ago

7f811b

- Change init_t to an unconfined_domain

Daniel J Walsh • 17 years ago

ceda8f

- Change init_t to an unconfined_domain

Daniel J Walsh • 17 years ago

41617c

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 17 years ago

e9fce4

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 17 years ago

0879f4

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 17 years ago

59c641

fixes for init, rhgb. also, fix the build

Bill Nottingham • 17 years ago

110bce

- Additional changes for MLS policy

Daniel J Walsh • 17 years ago

2041ac

- Additional changes for MLS policy

Daniel J Walsh • 17 years ago

af0084

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 17 years ago

47333d

- Fix initrc_context generation for MLS

Daniel J Walsh • 17 years ago

1bf67d

- Fix initrc_context generation for MLS

Daniel J Walsh • 17 years ago

cab5dc

- Fix initrc_context generation for MLS

Daniel J Walsh • 17 years ago

33b0aa

trunk: Add iferror.m4 rather generate it out of the Makefiles.

Chris PeBenito • 17 years ago

e276d5

- Fixes for libvirt

Daniel J Walsh • 17 years ago

dc57e6

- Allow bitlebee to read locale_t

Daniel J Walsh • 17 years ago

594790

trunk: Definitions for open permisson on file and similar objects from Eric Paris.

Chris PeBenito • 17 years ago

210607

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 17 years ago

e065ac

trunk: rpc update from Vaclav Ovsik.

Chris PeBenito • 17 years ago

01e8ff

trunk: dontaudit init fds in loadkeys.

Chris PeBenito • 17 years ago

737fcf

trunk: Exim updates on Debian from Devin Carrawy.

Chris PeBenito • 17 years ago

d57a09

- More xselinux rules

Daniel J Walsh • 17 years ago

d8c160

- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t

Daniel J Walsh • 17 years ago

9a0f35

- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t

Daniel J Walsh • 17 years ago

a838d3

-

Daniel J Walsh • 17 years ago

338714

- Prepare policy for beta release

Daniel J Walsh • 17 years ago

b7229a

- Prepare policy for beta release

Daniel J Walsh • 17 years ago

40ce26

- Allow nsplugin_config execstack/execmem

Daniel J Walsh • 17 years ago

533c75

- Add cyphesis policy

Daniel J Walsh • 17 years ago

2f648d

- Add cyphesis policy

Daniel J Walsh • 17 years ago

93f365

- Add cyphesis policy

Daniel J Walsh • 17 years ago

c092cc

Daniel J Walsh • 17 years ago

063999

-

Daniel J Walsh • 17 years ago

27b2b0

- Update to upstream fixes

Daniel J Walsh • 17 years ago

f75033

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

834401

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

90c3c5

- Add xace support

Daniel J Walsh • 17 years ago

5ca2ff

- Add fusectl file system

Daniel J Walsh • 17 years ago

8bd036

- Fixes from yum-cron

Daniel J Walsh • 17 years ago

8d4af9

- Fixes from yum-cron

Daniel J Walsh • 17 years ago

b0260f

- Fixes from yum-cron

Daniel J Walsh • 17 years ago

ca0e22

- Fixes from yum-cron

Daniel J Walsh • 17 years ago

541ba8

Daniel J Walsh • 17 years ago

e5aceb

- Fix userdom_list_user_files

Daniel J Walsh • 17 years ago

306393

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

9fa023

trunk: Backup update on Debian from Vaclav Ovsik.

Chris PeBenito • 17 years ago

45b56b

trunk: Cracklib update on Deban from Vaclav Ovsik.

Chris PeBenito • 17 years ago

51223b

- Merge with upstream

Daniel J Walsh • 17 years ago

eb3e9f

trunk: 8 patches from dan.

Chris PeBenito • 17 years ago

ee6608

trunk: 4 patches from dan.

Chris PeBenito • 17 years ago

f50856

trunk: label /proc/kallsyms with system_map_t.

Chris PeBenito • 17 years ago

037fc0

- Allow udev to send audit messages

Daniel J Walsh • 17 years ago

7e1e7b

- Allow udev to send audit messages

Daniel J Walsh • 17 years ago

ebab4d

- Allow udev to send audit messages

Daniel J Walsh • 17 years ago

148925

trunk: fix pppd admin interface.

Chris PeBenito • 17 years ago

4f0178

- Add additional login users interfaces

Daniel J Walsh • 17 years ago

9870c6

- Add additional login users interfaces

Daniel J Walsh • 17 years ago

096b1f

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 17 years ago

6e7a1f

- More fixes for polkit

Daniel J Walsh • 17 years ago

49295b

- More fixes for polkit

Daniel J Walsh • 17 years ago

71921f

- More fixes for polkit

Daniel J Walsh • 17 years ago

e35954

trunk: labeled networking permission update from paul moore.

Chris PeBenito • 17 years ago

f03433

- More fixes for polkit

Daniel J Walsh • 17 years ago

ebe074

trunk: add capability2 class, from Stephen Smalley.

Chris PeBenito • 17 years ago

8b9ffe

trunk: 12 patches from dan.

Chris PeBenito • 17 years ago

7a5e2d

- Update to upstream

Daniel J Walsh • 17 years ago

57ac1c

- Fixes for staff_t

Daniel J Walsh • 17 years ago

4637b6

- Add policy for kerneloops

Daniel J Walsh • 17 years ago

b53db5

- Add policy for kerneloops

Daniel J Walsh • 17 years ago

7483cf

trunk: add basic ubuntu support

Chris PeBenito • 17 years ago

12cf80

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

ce8a52

- Fixes for libvirt

Daniel J Walsh • 17 years ago

881d64

- Fixes for nsplugin

Daniel J Walsh • 17 years ago

380f3c

- Fixes for nsplugin

Daniel J Walsh • 17 years ago

60c693

- Additional ports for vnc and allow qemu and libvirt to search all

Daniel J Walsh • 17 years ago

11ac4b

- Update to upstream

Daniel J Walsh • 17 years ago

b19d47

- Allow fail2ban to create a socket in /var/run

Daniel J Walsh • 17 years ago

e1060e

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 17 years ago

59d6fb

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 17 years ago

7c124f

- Add audisp policy and prelude

Daniel J Walsh • 17 years ago

f18a88

- Allow all user roles to executae samba net command

Daniel J Walsh • 17 years ago

0f7011

- Allow usertypes to read/write noxattr file systems

Daniel J Walsh • 17 years ago

7c2be3

- Fix nsplugin to allow flashplugin to work in enforcing mode

Daniel J Walsh • 17 years ago

7c7d59

- Allow pam_selinux_permit to kill all processes

Daniel J Walsh • 17 years ago

093987

- Allow ptrace or user processes by users of same type

Daniel J Walsh • 17 years ago

cc5bb8

- Allow nsplugin sys_nice, getsched, setsched

Daniel J Walsh • 17 years ago

ef19b7

- Allow login programs to talk dbus to oddjob

Daniel J Walsh • 17 years ago

b3c8a0

- Add procmail_log support

Daniel J Walsh • 17 years ago

98f84c

trunk: add 3rd party corenet interfaces for (secmark) packets.

Chris PeBenito • 17 years ago

320ea9

trunk: install securetty_types.

Chris PeBenito • 17 years ago

13e4e6

trunk: simplify appconfig file installation.

Chris PeBenito • 17 years ago

b23e1c

- Allow setroubleshoot to read policy config and send audit messages

Daniel J Walsh • 17 years ago

4a2a83

- Allow setroubleshoot to read policy config and send audit messages

Daniel J Walsh • 17 years ago

e26fef

- Allow users to execute all files in homedir, if boolean set

Daniel J Walsh • 17 years ago

8a40d6

- Fixes for xguest to run java plugin

Daniel J Walsh • 17 years ago

27c7d8

- Fixes for xguest to run java plugin

Daniel J Walsh • 17 years ago

754ef8

- dontaudit pam_t and dbusd writing to user_home_t

Daniel J Walsh • 17 years ago

4be3ba

trunk: add setfcap capabiltiy, from Serge Hallyn.

Chris PeBenito • 17 years ago

d4623f

trunk: fix missing lo netif alias for standard and mcs configs.

Chris PeBenito • 17 years ago

c8d4c3

- Update gpg to allow reading of inotify

Daniel J Walsh • 17 years ago

5baf53

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 17 years ago

3648b6

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 17 years ago

f2ab70

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 17 years ago

a502c5

trunk: add mls constraints to dbus.

Chris PeBenito • 17 years ago

936f28

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 17 years ago

9323a5

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 17 years ago

7cbfeb

trunk: Labeled networking peer object class updates.

Chris PeBenito • 17 years ago

f3da31

- Fix munin log,

Daniel J Walsh • 17 years ago

2568e2

- Fix munin log,

Daniel J Walsh • 17 years ago

c64ec2

- Fix munin log,

Daniel J Walsh • 17 years ago

e0c99a

- Fix role transition from unconfined_r to system_r when running rpm

Daniel J Walsh • 17 years ago

88ae3f

- Fix role transition from unconfined_r to system_r when running rpm

Daniel J Walsh • 17 years ago

ed3c8b

- Fix role transition fro unconfined_r to system_r when running rpm

Daniel J Walsh • 17 years ago

5d1334

- Let all uncofined domains communicate with dbus unconfined

Daniel J Walsh • 17 years ago

0ec33d

- Run rpm in system_r

Daniel J Walsh • 17 years ago

673eaa

- Zero out customizable types

Daniel J Walsh • 17 years ago

5615fe

- Fix definiton of admin_home_t

Daniel J Walsh • 17 years ago

258710

- Fix definiton of admin_home_t

Daniel J Walsh • 17 years ago

9a2cf8

- Fix munin file context

Daniel J Walsh • 17 years ago

2f257c

- Allow cron to run unconfined apps

Daniel J Walsh • 17 years ago

194f6c

- Allow cron to run unconfined apps

Daniel J Walsh • 17 years ago

91c2fa

- Modify default login to unconfined_u

Daniel J Walsh • 17 years ago

99d367

trunk: fix .SECONDARY in modular makefile to work around a bug in make 3.81.

Chris PeBenito • 17 years ago

1a61ce

trunk: fix variable whitespacing in build.conf.

Chris PeBenito • 17 years ago

6a37eb

trunk: package versioning for release.

Chris PeBenito • 17 years ago

cde477

trunk: update help texts.

Chris PeBenito • 17 years ago

766617

trunk: bump module versions for release.

Chris PeBenito • 17 years ago

f7925f

- Dontaudit dbus user client search of /root

Daniel J Walsh • 17 years ago

4d59c2

- Dontaudit dbus user client search of /root

Daniel J Walsh • 17 years ago

592868

- Update to upstream

Daniel J Walsh • 17 years ago

f14d51

- Update to upstream

Daniel J Walsh • 17 years ago

76e340

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 17 years ago

1abafe

trunk: several fc updates from dan.

Chris PeBenito • 17 years ago

02d968

- Fixes for polkit

Daniel J Walsh • 17 years ago

4c6f2d

- Add polkit policy

Daniel J Walsh • 17 years ago

7dfe3e

- Update to upstream

Daniel J Walsh • 17 years ago

9281e2

trunk: add openoffice locations in gentoo.

Chris PeBenito • 17 years ago

9f6e2d

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 17 years ago

dd9e1d

- Update to upstream

Daniel J Walsh • 17 years ago

a1341a

trunk: another round of nsswitch from dan.

Chris PeBenito • 17 years ago

09e216

trunk: add setrlimit to debian cron.

Chris PeBenito • 17 years ago

74d920

- Update to upstream

Daniel J Walsh • 17 years ago

02654b

- Update to upstreamddddddddddddd

Daniel J Walsh • 17 years ago

d195fc

trunk: fix xconsole rw interface.

Chris PeBenito • 17 years ago

5f63dd

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 17 years ago

c0cf6e

- Allow rpm_script to transition to unconfined_execmem_t

Daniel J Walsh • 17 years ago

320f3e

Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2.1-1

Daniel J Walsh • 17 years ago

ed06ab

Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2.1-1

Daniel J Walsh • 17 years ago

3b47cb

- Remove user based home directory separation

Daniel J Walsh • 17 years ago

9186dc

- Remove user based home directory separation

Daniel J Walsh • 17 years ago

6e70d6

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 17 years ago

08dcce

trunk: version bump for newrole fixes.

Chris PeBenito • 17 years ago

f98cfb

trunk: test fix 2 for newrole.

Chris PeBenito • 17 years ago

c2b87f

trunk: test fix for newrole.

Chris PeBenito • 17 years ago

6138d3

- Remove user specific crond_t

Daniel J Walsh • 17 years ago

3a54e4

- Merge with upstream

Daniel J Walsh • 17 years ago

965b62

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 17 years ago

1483be

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 17 years ago

2f5c2f

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

0aa18d

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 17 years ago

0b6aca

- Merge with upstream

Daniel J Walsh • 17 years ago

0fffba

trunk: add missing tcp_socket rules for xfs.

Chris PeBenito • 17 years ago

8d1f9d

- Update to upstream

Daniel J Walsh • 17 years ago

ddf4ec

trunk: do not install netfilter_contexts on monolithic.

Chris PeBenito • 17 years ago

285d00

trunk: fix dup specification for /var/spool/cups/*

Chris PeBenito • 17 years ago

6ab634

trunk: add unconfined_run_to().

Chris PeBenito • 17 years ago

ccf661

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 17 years ago

013783

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 17 years ago

53da70

trunk: reorganize selinuxutil.

Chris PeBenito • 17 years ago

389ad7

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 17 years ago

eeef8d

trunk: 9 patches from dan.

Chris PeBenito • 17 years ago

226c06

trunk: 8 patches from dan.

Chris PeBenito • 17 years ago

6c9118

trunk: remove duplicate specifiction for /usr/lib/devices on debian.

Chris PeBenito • 17 years ago

2999ce

trunk: add in polmatch for default spd.

Chris PeBenito • 17 years ago

982035

trunk: add labeled networking support to unconfined.

Chris PeBenito • 17 years ago

bdccba

trunk: rearrange the bottom of domain.if and fix domain_ipsec_labels().

Chris PeBenito • 17 years ago

a56055

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 17 years ago

847937

- Update to upstream

Daniel J Walsh • 17 years ago

06da26

trunk: add gentoo hal fc entry.

Chris PeBenito • 17 years ago

3b498a

- Update to upstream

Daniel J Walsh • 17 years ago

7330e8

trunk: add postfixpolicyd from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

4605ad

- Update to upstream

Daniel J Walsh • 17 years ago

364044

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

eaed90

trunk: 6 patches from dan.

Chris PeBenito • 17 years ago

8bdb48

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 17 years ago

3ece11

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

7d4161

trunk: Russian man page translations from Andrey Markelov.

Chris PeBenito • 17 years ago

164772

trunk: 11 patches from dan.

Chris PeBenito • 17 years ago

495df4

trunk: remove unused types from dbus.

Chris PeBenito • 17 years ago

bd973e

- Update to upstream

Daniel J Walsh • 17 years ago

15b070

- Update to upstream

Daniel J Walsh • 17 years ago

cd8aa3

trunk: filesystem patch from dan.

Chris PeBenito • 17 years ago

8e2fb6

trunk: add exim from dan.

Chris PeBenito • 17 years ago

6bf8bf

- Update to upstream

Daniel J Walsh • 17 years ago

d50690

- Update to upstream

Daniel J Walsh • 17 years ago

fa0d1c

trunk: add /var/lib search for system bus template.

Chris PeBenito • 17 years ago

3c99e5

- Allow XServer to read /proc/self/cmdline

Daniel J Walsh • 17 years ago

d0649e

- Fixes for hald_mac

Daniel J Walsh • 17 years ago

30dfdc

- Fix dnsmasq

Daniel J Walsh • 17 years ago

3375c3

- Allow rshd to connect to ports > 1023

Daniel J Walsh • 17 years ago

6455c9

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

953fd1

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

ccf8a7

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

bd10e1

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

2f2716

trunk: add infrastructure for managing user web content.

Chris PeBenito • 17 years ago

a334d2

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

05758f

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

78f2a3

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

c91281

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

195d64

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

b4ed6d

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

9abb1a

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

cca59c

trunk: fix do not userspace commons in kernel version of av_permissions.h.

Chris PeBenito • 17 years ago

e83ede

trunk: fix flask.py Flask class userspace dictionary usage.

Chris PeBenito • 17 years ago

32c05c

trunk: do not emit lines in the kernel version of av_inherit.h for commons that are only inherited by userspace object classes.

Chris PeBenito • 17 years ago

651df3

trunk: do not emit S_(0, 0, 0) in kernel headers for userspace classes that inherit commons.

Chris PeBenito • 17 years ago

3a9096

makefile update to properly grab makefile.common

Bill Nottingham • 17 years ago

84032d

trunk: fix unconditional call to nscd from usermanage run interfaces.

Chris PeBenito • 17 years ago

366270

trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.

Chris PeBenito • 17 years ago

a27d1c

- Pass the UNK_PERMS param to makefile

Daniel J Walsh • 17 years ago

9185bf

trunk: reorganize amanda and bind

Chris PeBenito • 17 years ago

f48782

trunk: 2 patches from dan.

Chris PeBenito • 17 years ago

bc01b3

- Make alsa work

Daniel J Walsh • 17 years ago

ce7700

- Make alsa work

Daniel J Walsh • 17 years ago

c27b2b

trunk: 10 patches from dan.

Chris PeBenito • 17 years ago

cdf98f

- Fixes for consolekit and startx sessions

Daniel J Walsh • 17 years ago

28021c

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 17 years ago

ef659a

- Dontaudit consoletype talking to unconfined_t

Daniel J Walsh • 17 years ago

915a9f

- Dontaudit consoletype talking to unconfined_t

Daniel J Walsh • 17 years ago

7a91e8

trunk: remove stale user_net_control reference in usernetctl.if.

Chris PeBenito • 17 years ago

81d4c8

- Remove homedir_template

Daniel J Walsh • 17 years ago

8fd9df

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

6c53a1

- Remove homedir_template

Daniel J Walsh • 17 years ago

922f64

- Check asound.state

Daniel J Walsh • 17 years ago

24ccb8

trunk: module version bumps for previous commit.

Chris PeBenito • 17 years ago

12e9ea

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 17 years ago

350b6a

- Fix exim policy

Daniel J Walsh • 17 years ago

492612

- Allow tmpreadper to read man_t

Daniel J Walsh • 17 years ago

1ffa68

trunk: update version and changelog for release.

Chris PeBenito • 17 years ago

cb811c

trunk: update sources rpm spec file.

Chris PeBenito • 17 years ago

94636e

trunk: bump version numbers for release.

Chris PeBenito • 17 years ago

3480f3

trunk: Add support for setting the unknown permissions handling.

Chris PeBenito • 17 years ago

8acfcb

- Allow xdm to talk to input device (fingerprint reader)

Daniel J Walsh • 17 years ago

7c1c17

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 17 years ago

aef93a

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 17 years ago

d770c5

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 17 years ago

c0aebe

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 17 years ago

ed4ac3

- Allow nsswitch apps to read samba_var_t

Daniel J Walsh • 17 years ago

fb11ad

- Fix maxima

Daniel J Walsh • 17 years ago

f5018f

- Eliminate rpm_t:fifo_file avcs

Daniel J Walsh • 17 years ago

d83ea8

trunk: xml doc one-liner from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

4ddc7b

- Fix service start stop terminal avc's

Daniel J Walsh • 17 years ago

d9ab02

- Fix service start stop terminal avc's

Daniel J Walsh • 17 years ago

6c319e

- Allow also to search var_lib

Daniel J Walsh • 17 years ago

ec4fb1

- Allow cupsd_config_t to read/write usb_device_t

Daniel J Walsh • 17 years ago

347ff1

trunk: Fix XML building for external reference builds and headers builds.

Chris PeBenito • 17 years ago

96fc0a

- Fix java and mono to run in xguest account

Daniel J Walsh • 17 years ago

07e28d

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

c003db

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

a9d4b8

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

c67a12

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

d90a3d

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

21c534

- Remove hplip_etc_t change back to etc_t.

Daniel J Walsh • 17 years ago

7ff410

trunk: one-liner from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

ff4085

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

bf7674

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

f6ec27

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

aeba2f

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

1a3fe3

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

6f49b4

trunk: add awstats from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

0cf6df

trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().

Chris PeBenito • 17 years ago

8242f5

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

14add3

- Allow NetworkManager to dbus chat with yum-updated

Daniel J Walsh • 17 years ago

babb36

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

134a79

- Allow xfs to bind to port 7100

Daniel J Walsh • 17 years ago

bf7f97

- Allow newalias/sendmail dac_override

Daniel J Walsh • 17 years ago

25d586

- Turn off direct transition

Daniel J Walsh • 17 years ago

4eaf5c

- Turn off direct transition

Daniel J Walsh • 17 years ago

23716e

- Allow wine to run in system role

Daniel J Walsh • 17 years ago

c7e443

trunk: 6 patches from dan.

Chris PeBenito • 17 years ago

8a9d6f

- Fix java labeling

Daniel J Walsh • 17 years ago

37d6a1

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 17 years ago

abc893

trunk: six patches from dan.

Chris PeBenito • 17 years ago

72f82c

- Define user_home_type as home_type

Daniel J Walsh • 17 years ago

07b868

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

601f0f

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

bea548

trunk: udev update and brctl module from dan.

Chris PeBenito • 17 years ago

8241b5

trunk: 4 patches from dan.

Chris PeBenito • 17 years ago

016e5c

trunk: 5 patches from dan.

Chris PeBenito • 17 years ago

0a0b80

trunk: make coda nfs_t, ticket #39.

Chris PeBenito • 17 years ago

ce2c80

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 17 years ago

492276

trunk: fix example.if xml problems

Chris PeBenito • 17 years ago

85bec1

- Allow login programs to read symlinks on homedirs

Daniel J Walsh • 17 years ago

bc85a6

- Update an readd modules

Daniel J Walsh • 17 years ago

e8b599

trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.

Chris PeBenito • 17 years ago

6dd721

trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

a2f444

- Cleanup spec file

Daniel J Walsh • 17 years ago

7f9951

- Cleanup spec file

Daniel J Walsh • 17 years ago

d9f447

- Cleanup spec file

Daniel J Walsh • 17 years ago

b865b8

- Cleanup spec file

Daniel J Walsh • 17 years ago

53f819

- Cleanup spec file

Daniel J Walsh • 17 years ago

3012ab

- Cleanup spec file

Daniel J Walsh • 17 years ago

d83af2

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 17 years ago

752ddf

- Allow xserver to be started by unconfined process and talk to tty

Daniel J Walsh • 17 years ago

3b13a8

Update MLS constraints from LSPP evaluated policy.

Chris PeBenito • 17 years ago

d62c08

- Upgrade to upstream to grab postgressql changes

Daniel J Walsh • 17 years ago

95bbe5

- Upgrade to upstream to grab postgressql changes

Daniel J Walsh • 17 years ago

e92bb8

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 17 years ago

2af7b4

trunk: updates from dan on 9 modules

Chris PeBenito • 17 years ago

8d2c34

trunk: add some info to the readme about building from headers

Chris PeBenito • 17 years ago

f65ca5

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

77a220

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

c77aca

trunk: Files and radvd updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

80d5e0

- Add ldconfig_cache_t

Daniel J Walsh • 17 years ago

4f23c4

- Allow sshd to write to proc_t for afs login

Daniel J Walsh • 17 years ago

b4ae7d

- Allow sshd to write to proc_t for afs login

Daniel J Walsh • 17 years ago

b9b19a

trunk: fix gdm xsession scripts on redhat machines.

Chris PeBenito • 17 years ago

1779be

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 17 years ago

f8233a

trunk: several MLS enhancements.

Chris PeBenito • 17 years ago

2d0c9c

- Allow xserver access to urand

Daniel J Walsh • 17 years ago

f01207

- allow dovecot to search mountpoints

Daniel J Walsh • 17 years ago

7f6883

- Fix Makefile for building policy modules

Daniel J Walsh • 17 years ago

0354c2

- Fix dhcpc startup of service

Daniel J Walsh • 17 years ago

60a9ef

- Fix dbus chat to not happen for xguest and guest users

Daniel J Walsh • 17 years ago

bf3320

- Fix nagios cgi

Daniel J Walsh • 17 years ago

d44a39

trunk: Database userspace object manager classes from KaiGai Kohei.

Chris PeBenito • 17 years ago

9760cb

trunk: filesystem patch from dan

Chris PeBenito • 17 years ago

3d6e96

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

939a42

- Fixes for ldconfig

Daniel J Walsh • 17 years ago

1a12c2

- Update from upstream

Daniel J Walsh • 17 years ago

d8c8b2

- Update from upstream

Daniel J Walsh • 17 years ago

f97782

- Update from upstream

Daniel J Walsh • 17 years ago

25a754

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

4ce75b

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

8239a9

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

6d2e7d

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

47a35f

trunk: several support macro fixes.

Chris PeBenito • 17 years ago

c040ea

- Allow xserver to write to ramfs mounted by rhgb

Daniel J Walsh • 17 years ago

07351e

- Add context for dbus machine id

Daniel J Walsh • 17 years ago

9c0386

trunk: add 3rd party interface for apache cgi.

Chris PeBenito • 17 years ago

371d11

trunk: fix pipe permission set in domtrans_pattern().

Chris PeBenito • 17 years ago

63acaf

- Update with latest changes from upstream

Daniel J Walsh • 17 years ago

2fac1d

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

24acab

trunk: add getserv and shmemserv nscd permissions.

Chris PeBenito • 17 years ago

924f3c

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

fc4c74

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

0f8f54

- Add ntpd_key_t to handle secret data

Daniel J Walsh • 17 years ago

e0ae20

- Add anon_inodefs

Daniel J Walsh • 17 years ago

2ced40

trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

Chris PeBenito • 17 years ago

708aab

- Allow cups to use generic usb

Daniel J Walsh • 17 years ago

779d23

- Add proper contexts for rsyslogd

Daniel J Walsh • 17 years ago

6178b3

- Add proper contexts for rsyslogd

Daniel J Walsh • 17 years ago

908512

trunk: add application module

Chris PeBenito • 17 years ago

d46cfe

trunk: fix missed netlabel deprecation

Chris PeBenito • 17 years ago

692952

- Allow execution of gconf

Daniel J Walsh • 17 years ago

297dd1

- Allow execution of gconf

Daniel J Walsh • 17 years ago

867556

- Fix moilscanner update problem

Daniel J Walsh • 17 years ago

dac6d6

- Fix moilscanner update problem

Daniel J Walsh • 17 years ago

1d0319

- Begin adding policy to separate setsebool from semanage

Daniel J Walsh • 17 years ago

7e3506

- Fix xserver.if definition to not break sepolgen.if

Daniel J Walsh • 17 years ago

16d953

- Add new devices

Daniel J Walsh • 17 years ago

2796de

- Add brctl policy

Daniel J Walsh • 17 years ago

154d82

- Fix root login to include system_r

Daniel J Walsh • 17 years ago

501a17

- Allow prelink to read kernel sysctls

Daniel J Walsh • 17 years ago

35e7f7

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

af6777

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b267b6

trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

f80a0e

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b529ed

- fix squid

Daniel J Walsh • 17 years ago

2fdb5f

- fix squid

Daniel J Walsh • 17 years ago

1b7780

trunk: updated version and changelog for release

Chris PeBenito • 17 years ago

970122

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1d

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4f

trunk: add templates to tags generation

Chris PeBenito • 17 years ago

423198

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Chris PeBenito • 17 years ago

e5e55a

- Fix syslog declaration

Daniel J Walsh • 17 years ago

b786a2

trunk: minor amanda update from dan

Chris PeBenito • 17 years ago

f5842c

- Allow avahi to access inotify

Daniel J Walsh • 17 years ago

7f4421

- Allow avahi to access inotify

Daniel J Walsh • 17 years ago

1afb42

trunk: add rpcbind from dan

Chris PeBenito • 17 years ago

7b61fe

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

190066

trunk: pyzor and clamav updates from dan

Chris PeBenito • 17 years ago

2c3ac4

trunk: fix typo in vmware.fc

Chris PeBenito • 17 years ago

22bff6

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

269acb

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

628851

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

ac2f96

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

a4ec9b

trunk: nagios update from dan

Chris PeBenito • 17 years ago

02f2c3

trunk: procmail tweak from dan.

Chris PeBenito • 17 years ago

a90a25

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f0897

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ad

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

5bf9de

trunk: radius one-liner from dan

Chris PeBenito • 17 years ago

99b5a5

trunk: big samba update from dan

Chris PeBenito • 17 years ago

40df56

trunk: drop snmpd_etc_t.

Chris PeBenito • 17 years ago

788d88

trunk: confine sendmail and logrotate on targeted

Chris PeBenito • 17 years ago

6c8aba

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2

Memprotect support patch from Stephen Smalley.

Chris PeBenito • 17 years ago

41337a

trunk: 2 patches from dan

Chris PeBenito • 17 years ago

d13941

trunk: add amtu from dan

Chris PeBenito • 17 years ago

a74d1a

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

262def

trunk: 7 simple patches from dan.

Chris PeBenito • 17 years ago

f7101c

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649ae

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d3

six simple patches from dan

Chris PeBenito • 17 years ago

f6a590

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

778296

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

56187c

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

cb8fda

- Fix for amands

Daniel J Walsh • 17 years ago

bdb830

trunk: fix line in evolution to be strict-only; was being covered up by genhomedircon.

Chris PeBenito • 17 years ago

17b9cb

Daniel J Walsh • 17 years ago

346d2d

- allow alsactl to read kernel state

Daniel J Walsh • 17 years ago

9ffb88

- More fixes for alsactl

Daniel J Walsh • 17 years ago

fc3577

- More fixes for alsactl

Daniel J Walsh • 17 years ago

88c846

- Fixes for suspend resume.

Daniel J Walsh • 17 years ago

cf806e

- Allow unconfined_t to transition to NetworkManager_t

Daniel J Walsh • 17 years ago

7c3dcb

trunk: snmp tweak from dan

Chris PeBenito • 17 years ago

a39a93

trunk: remaining pieces for apcupsd module

Chris PeBenito • 17 years ago

c412be

- Update to latest from upstream

Daniel J Walsh • 17 years ago

810e69

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8cd496

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2c

- Update to latest from upstream

Daniel J Walsh • 17 years ago

057603

Patch to begin separating out hald helper programs from Dan Walsh.

Chris PeBenito • 17 years ago

12217c

add apcupsd from dan

Chris PeBenito • 17 years ago

78f17e

Fixes for squid, dovecot, and snmp from Dan Walsh.

Chris PeBenito • 17 years ago

b129e2

- Update to latest from upstream

Daniel J Walsh • 17 years ago

daa6ab

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8a3cef

Miscellaneous consolekit fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4967aa

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d6

add missing rename_dir_perms

Chris PeBenito • 17 years ago

7f819d

Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.

Chris PeBenito • 17 years ago

ed4b73

Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.

Chris PeBenito • 17 years ago

517618

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186

- Update to latest from upstream

Daniel J Walsh • 17 years ago

a615d5

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8fea83

add rwho from Nalin Dahyabhai

Chris PeBenito • 17 years ago

6a2975

Patch to allow amavis to read spamassassin libraries from Dan Walsh.

Chris PeBenito • 17 years ago

747ab1

trivial aide fix from dan

Chris PeBenito • 17 years ago

ae32fb

Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.

Chris PeBenito • 17 years ago

f9029f

trivial fix for netutils from dan

Chris PeBenito • 17 years ago

27c570

trivial fix from dan for bluetooth

Chris PeBenito • 17 years ago

7487a6

missed piece of clip patch

Chris PeBenito • 17 years ago

b4beb0

-

Daniel J Walsh • 17 years ago

6821c3

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e52

- Fixes for unix_update

Daniel J Walsh • 17 years ago

77d25e

Replace the old lrrd fc entries with correct munin ones.

Chris PeBenito • 17 years ago

cd16fe

- Upstream bumped the version

Daniel J Walsh • 17 years ago

8396b2

- Allow consolekit to syslog

Daniel J Walsh • 17 years ago

61947f

- Allow iptbales to read etc_runtime_t

Daniel J Walsh • 17 years ago

2db3c1

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc

Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.

Chris PeBenito • 17 years ago

7a4bd4

- MLS Fixes

Daniel J Walsh • 17 years ago

466176

- MLS Fixes

Daniel J Walsh • 17 years ago

53b222

- Fix path of /etc/lvm/cache directory

Daniel J Walsh • 17 years ago

883a02

- Fixes for alsactl and pppd_t

Daniel J Walsh • 17 years ago

ab59be

- Fixes for consolekit

Daniel J Walsh • 17 years ago

32b18f

- Allow insmod_t to mount kvmfs_t filesystems

Daniel J Walsh • 17 years ago

7671ce

- Rwho policy

Daniel J Walsh • 17 years ago

9fc00b

final release entries for 20070417

Chris PeBenito • 17 years ago

273383

bump module versions for release

Chris PeBenito • 17 years ago

0251df

- fixes for fusefs

Daniel J Walsh • 17 years ago

e6f3cf

- Fix samba_net to allow it to view samba_var_t

Daniel J Walsh • 17 years ago

8c912a

- Update to upstream

Daniel J Walsh • 17 years ago

a3b1a2

- Update to upstream

Daniel J Walsh • 17 years ago

e441a1

last piece of previous consolekit patch

Chris PeBenito • 17 years ago

4029f1

add zabbix from dan

Chris PeBenito • 17 years ago

97e815

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

697489

more consolekit updates from dan

Chris PeBenito • 17 years ago

99064c

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2de

from dan:

Chris PeBenito • 17 years ago

ebc1e8

- Fix Sonypic backlight

Daniel J Walsh • 17 years ago

5d5cae

six patches from dan

Chris PeBenito • 17 years ago

9af48e

- Fixes for pyzor, cyrus, consoletype on everything installs

Daniel J Walsh • 17 years ago

7f1bd8

- Fix hald_acl_t to be able to getattr/setattr on usb devices

Daniel J Walsh • 17 years ago

0b3279

- Allow bluetooth to read inotifyfs

Daniel J Walsh • 17 years ago

21029b

- Fixes for samba domain controller.

Daniel J Walsh • 17 years ago

e6b9e2

- Fix interface call

Daniel J Walsh • 17 years ago

f9f9dd

- Allow syslog-ng to read /var

Daniel J Walsh • 17 years ago

89d3de

- Update to upstream

Daniel J Walsh • 17 years ago

2528fa

- Update to upstream

Daniel J Walsh • 17 years ago

8e5289

- Update to upstream

Daniel J Walsh • 17 years ago

ce7f30

man page updates from dan

Chris PeBenito • 17 years ago

f4e2b1

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba

fix http_script_domains, it was incorrectly applied to the content type rather than the script domain. bug #24.

Chris PeBenito • 17 years ago

39d8dc

emit "null" instead of NULL for userspace headers

Chris PeBenito • 17 years ago

f88ef6

bools in modules fix to require the boolean in optionals that are part of the base module, and move bool declarations in the base module/monolithic

Chris PeBenito • 17 years ago

f6ddd6

add refresh target to devel makefile which tries to reload all of the modules currently in the store.

Chris PeBenito • 17 years ago

dde00d

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 18 years ago

9e8f65

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 18 years ago

56e1b3

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 18 years ago

8021cb

remove disable_trans booleans

Chris PeBenito • 18 years ago

ab514d

Output different header sets for kernel and userland from flask headers.

Chris PeBenito • 18 years ago

e9b004

deprecated pax class

Chris PeBenito • 18 years ago

1852cd

- Allow samba to run groupadd

Daniel J Walsh • 18 years ago

145e8d

- Allow samba to run groupadd

Daniel J Walsh • 18 years ago

f040ac

- Update to upstream

Daniel J Walsh • 18 years ago

f63473

network fix from dan

Chris PeBenito • 18 years ago

5f5b7a

one-liner from dan

Chris PeBenito • 18 years ago

cc9130

- Fix labeling on udev.tbl dirs

Daniel J Walsh • 18 years ago

281f5f

patch from dan to have ricci modstorage transition to lvm

Chris PeBenito • 18 years ago

19fd93

stop adding netfilter contexts, as decided at the developers summit

Chris PeBenito • 18 years ago

d17bab

add fail2ban from dan

Chris PeBenito • 18 years ago

cd3ee9

- Fixes for logwatch

Daniel J Walsh • 18 years ago

552645

- Add fusermount and mount_ntfs policy

Daniel J Walsh • 18 years ago

593fb1

kudzu will telinit to make init re-read the inittab after configuring serial consoles

Chris PeBenito • 18 years ago

efcf9d

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 18 years ago

a5f5eb

- Update to upstream

Daniel J Walsh • 18 years ago

9d59ec

Daniel J Walsh • 18 years ago

d3aaba

- Fixes for samba_var_t

Daniel J Walsh • 18 years ago

741e81

create user gpg keys dir patch from dan

Chris PeBenito • 18 years ago

4832f0

add kvmfs support, from dan

Chris PeBenito • 18 years ago

937849

trivial patch for radius from dan

Chris PeBenito • 18 years ago

720014

trivial patch from dan for sysstat access to sysfs

Chris PeBenito • 18 years ago

86b28c

other part of consolekit addition

Chris PeBenito • 18 years ago

e66689

from Dan:

Chris PeBenito • 18 years ago

c224d9

patch from Dan for sudo:

Chris PeBenito • 18 years ago

6c20f7

- Remove disable_trans booleans

Daniel J Walsh • 18 years ago

db4f0e

- Remove enable_audit booleans

Daniel J Walsh • 18 years ago

2823e2

- Fix prelink to be able to manage usr dirs.

Daniel J Walsh • 18 years ago

2f82ee

- Allow insmod to launch init scripts

Daniel J Walsh • 18 years ago

9468a6

- Remove setsebool policy

Daniel J Walsh • 18 years ago

271752

- Fix handling of unlabled_t packets

Daniel J Walsh • 18 years ago

bdb7f9

- More of my patches from upstream

Daniel J Walsh • 18 years ago

26a701

- More of my patches from upstream

Daniel J Walsh • 18 years ago

2a9b64

It was just pointed out to me that the raw IP socket class is missing from the

Chris PeBenito • 18 years ago

b50f2e

fix for rh bug 203290

Chris PeBenito • 18 years ago

0cca51

last bit of dans patch

Chris PeBenito • 18 years ago

b5a6c8

Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.

Chris PeBenito • 18 years ago

cdc91b

procmail uses /tmp files

Chris PeBenito • 18 years ago

59bedc

trivial change from dan

Chris PeBenito • 18 years ago

7aefc6

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

Chris PeBenito • 18 years ago

7aca2a

Patch for gssd fixes from Dan Walsh

Chris PeBenito • 18 years ago

c23eb5

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 18 years ago

c5561c

- Update to latest from upstream

Daniel J Walsh • 18 years ago

1fed4c

lmtp and smtp are the same file require same context of setfiles complains

Chris PeBenito • 18 years ago

f2c69c

- Update to latest from upstream

Daniel J Walsh • 18 years ago

9a8202

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 18 years ago

ecc98e

- Update to remove security_t:filesystem getattr problems

Daniel J Walsh • 18 years ago

5ad70c

Patch for kerberized telnet fixes from Dan Walsh.

Chris PeBenito • 18 years ago

4900fd

Patch for kerberized ftp and other ftp fixes from Dan Walsh.

Chris PeBenito • 18 years ago

09c56f

Patch for an additional wine executable from Dan Walsh.

Chris PeBenito • 18 years ago

2aea36

Patch for additional games file contexts from Dan Walsh.

Chris PeBenito • 18 years ago

bf39cd

- Policy for consolekit

Daniel J Walsh • 18 years ago

13893e

Add support for libselinux 2.0.5 init_selinuxmnt() changes.

Chris PeBenito • 18 years ago

86d754

Daniel J Walsh • 18 years ago

b2ca43

fix man page patch from dan walsh

Chris PeBenito • 18 years ago

cd548f

add init_exec() to init_telinit().

Chris PeBenito • 18 years ago

ca448b

Patch for misc fixes to bluetooth from Dan Walsh.

Chris PeBenito • 18 years ago

f0eaed

On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:

Chris PeBenito • 18 years ago

5b0647

Patch to start deprecating usercanread attribute from Ryan Bradetich.

Chris PeBenito • 18 years ago

bbb7cc

Daniel J Walsh • 18 years ago

fd5c32

add dccp_socket object class

Chris PeBenito • 18 years ago

a715dc

Daniel J Walsh • 18 years ago

af8af9

On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:

Chris PeBenito • 18 years ago

3a3901

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 18 years ago

5c45ea

Patch to remove redundant mls_trusted_object() call from Dan Walsh.

Chris PeBenito • 18 years ago

66cf19

Patch for misc fixes to nis ypxfr policy from Dan Walsh.

Chris PeBenito • 18 years ago

468521

Patch to allow apmd to telinit from Dan Walsh.

Chris PeBenito • 18 years ago

aeb54c

While using samba and SELinux with Debian GNU/Linux (etch) the

Chris PeBenito • 18 years ago

d11407

Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.

Chris PeBenito • 18 years ago

bcac3a

- Revert Nemiver change

Daniel J Walsh • 18 years ago

cc1be2

- Add sepolgen support

Daniel J Walsh • 18 years ago

b08611

make ttys and ptys device nodes

Chris PeBenito • 18 years ago

f1be09

- Add sepolgen support

Daniel J Walsh • 18 years ago

b7da3b

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 18 years ago

6b19be

- Add sepolgen support

Daniel J Walsh • 18 years ago

2fa5bb

THu Feb 15 2007 Dan Walsh <dwalsh@redhat.com> 2.5.3-3

Daniel J Walsh • 18 years ago

e10e57

- Fix file context for nemiver

Daniel J Walsh • 18 years ago

07dcdf

- Fix file context for nemiver

Daniel J Walsh • 18 years ago

1a2473

-

Daniel J Walsh • 18 years ago

df0bef

-

Daniel J Walsh • 18 years ago

9aff35

- Allow mozilla, evolution and thunderbird to read dev_random. Resolves:

Daniel J Walsh • 18 years ago

80f561

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 18 years ago

4bd55e

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 18 years ago

10e120

- Allow mozilla, evolution and thunderbird to read dev_random. Resolves:

Daniel J Walsh • 18 years ago

39b6ce

- Fix ssh_agent to be marked as an executable

Daniel J Walsh • 18 years ago

33501c

- Fix spamassisin so crond can update spam files

Daniel J Walsh • 18 years ago

de0b36

- Remove some targeted diffs in file context file

Daniel J Walsh • 18 years ago

3902fd

- Fix squid cachemgr labeling

Daniel J Walsh • 18 years ago

edd045

- Add ability to generate webadm_t policy

Daniel J Walsh • 18 years ago

e45f5d

Clean up file context regexes in apache and java, from Eamon Walsh:

Chris PeBenito • 18 years ago

ff943a

- Continue fixing, additional user domains

Daniel J Walsh • 18 years ago

cc7c06

- Begin adding user confinement to targeted policy

Daniel J Walsh • 18 years ago

352de5

- Begin adding user confinement to targeted policy

Daniel J Walsh • 18 years ago

f86e42

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 18 years ago

454781

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 18 years ago

ee095f

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 18 years ago

b6ed67

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 18 years ago

ae5ace

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 18 years ago

9e0fa4

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 18 years ago

a384d7

- Allow spamassassin to read var_lib_t dir Resolves: #219234

Daniel J Walsh • 18 years ago

8a03d5

- fix mplayer to work under strict policy

Daniel J Walsh • 18 years ago

9bcfd1

- Add gconf policy and make it work with strict

Daniel J Walsh • 18 years ago

8bacd8

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 18 years ago

5db544

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 18 years ago

135ea9

- Fix to allow ftp to bind to ports > 1024 Resolves: #219349

Daniel J Walsh • 18 years ago

9051d6

Daniel J Walsh • 18 years ago

5ded3c

Daniel J Walsh • 18 years ago

4fd323

- Allow semanage to exec it self. Label genhomedircon as semanage_exec_t

Daniel J Walsh • 18 years ago

f9e32a

- allow automount to setgid Resolves: #219999

Daniel J Walsh • 18 years ago

be9aef

- Allow cron to polyinstatiate

Daniel J Walsh • 18 years ago

5e01b4

Daniel J Walsh • 18 years ago

272aa0

Resolves: #218978

Daniel J Walsh • 18 years ago

3a5184

Resolves: #218978

Daniel J Walsh • 18 years ago

422dcf

update version and changelog for release

Chris PeBenito • 18 years ago

b00150

- Allow initrc to create files in /var directories Resolves: #219227

Daniel J Walsh • 18 years ago

e3b143

bump versions for release.

Chris PeBenito • 18 years ago

42c5c5

merge policy patterns to trunk

Chris PeBenito • 18 years ago

c0868a

- More fixes for MLS

Daniel J Walsh • 18 years ago

6157a7

- More Fixes polyinstatiation Resolves: #216184

Daniel J Walsh • 18 years ago

dd5d7e

- Fix handling of keyrings

Daniel J Walsh • 18 years ago

a169fb

- Fix polyinstatiation

Daniel J Walsh • 18 years ago

852ba6

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 18 years ago

d6d16b

- More fixes for quota Resolves: #212957

Daniel J Walsh • 18 years ago

414ddd

- ncsd needs to use avahi sockets Resolves: #217640 Resolves: #218014

Daniel J Walsh • 18 years ago

9f388c

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

b6ffd7

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

aba668

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

036c1c

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

cc1462

patch from dan for some missing gen_require()s

Chris PeBenito • 18 years ago

563e58

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

bff907

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

c31f67

- Fix context for helix players file_context #216942

Daniel J Walsh • 18 years ago

e4d46c

- Fix load_policy to be able to mls_write_down so it can talk to the

Daniel J Walsh • 18 years ago

02560d

- Fixes for hwclock, clamav, ftp

Daniel J Walsh • 18 years ago

421864

- Move to upstream version which accepted my patches

Daniel J Walsh • 18 years ago

9e4aea

add aide, ccs, and ricci

Chris PeBenito • 18 years ago

fa45da

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

b28d0a

This modifies the mls constraint for polmatch in the association class.

Chris PeBenito • 18 years ago

d31d3c

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

a3f2f5

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

150bdf

- Allow semanage to signal mcstrans

Daniel J Walsh • 18 years ago

b0ecaa

- Update to upstream

Daniel J Walsh • 18 years ago

73ea8c

- Allow modstorage to edit /etc/fstab file

Daniel J Walsh • 18 years ago

d925bd

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 18 years ago

c6a60b

- Fix for qemu, /dev/

Daniel J Walsh • 18 years ago

ec1743

- Fix path to realplayer.bin

Daniel J Walsh • 18 years ago

32b91c

- Add a reload target to Modules.devel and change the load

Chris PeBenito • 18 years ago

59f853

fixes from gentoo strict testing:

Chris PeBenito • 18 years ago

ed38ca

- Allow xen to connect to xen port

Daniel J Walsh • 18 years ago

06b64f

- Allow cups to search samba_etc_t directory

Daniel J Walsh • 18 years ago

1a986f

- Allow xen to search automount

Daniel J Walsh • 18 years ago

2098c9

- Fix spec of jre files

Daniel J Walsh • 18 years ago

6ba486

- Fix unconfined access to shadow file

Daniel J Walsh • 18 years ago

080659

- Allow xend to create files in xen_image_t directories

Daniel J Walsh • 18 years ago

4d1149

- Fixes for /var/lib/hal

Daniel J Walsh • 18 years ago

0fcc49

- Remove ability for sysadm_t to look at audit.log

Daniel J Walsh • 18 years ago

f08bf9

- Fix rpc_port_types

Daniel J Walsh • 18 years ago

f3ecbb

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 18 years ago

0f9a2b

- Merge with upstream

Daniel J Walsh • 18 years ago

d7e0f9

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

0dae3b

Christopher J. PeBenito wrote:

Chris PeBenito • 18 years ago

f497b8

- Add perms for swat

Daniel J Walsh • 18 years ago

d095a0

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 18 years ago

d9845a

- Allow daemons to dump core files to /

Daniel J Walsh • 18 years ago

6b9761

- Fixes for ricci

Daniel J Walsh • 18 years ago

8fb79d

- Allow mount.nfs to work

Daniel J Walsh • 18 years ago

6672fc

- Allow ricci-modstorage to look at lvm_etc_t

Daniel J Walsh • 18 years ago

85659e

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 18 years ago

582438

add seutil_rw_config()

Chris PeBenito • 18 years ago

d5ae68

make load target more friendly and add reload target

Chris PeBenito • 18 years ago

76bac8

- Fixes for ricci using saslauthd

Daniel J Walsh • 18 years ago

08efef

- Allow mountpoint on home_dir_t and home_t

Daniel J Walsh • 18 years ago

dc804f

- Update xen to read nfs files

Daniel J Walsh • 18 years ago

8ff9d6

Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4

Daniel J Walsh • 18 years ago

3d011f

- Allow hal to use power_device_t

Daniel J Walsh • 18 years ago

11d7ea

- Allow procemail to look at autofs_t

Daniel J Walsh • 18 years ago

d6926f

enhanced setransd support from darrel goeddel

Chris PeBenito • 18 years ago

a8671a

- Refupdate from upstream

Daniel J Walsh • 18 years ago

e2eecb

- Add lots of fixes for mls cups

Daniel J Walsh • 18 years ago

302afb

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

6fa5ec

20061018 release

Chris PeBenito • 18 years ago

248ccc

bump versions to release numbers

Chris PeBenito • 18 years ago

a52b4d

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 18 years ago

b04ecc

make inetd optional

Chris PeBenito • 18 years ago

d4a48c

- Fix number of cats

Daniel J Walsh • 18 years ago

2d1b4a

- Update to upstream

Daniel J Walsh • 18 years ago

da0829

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 18 years ago

130f8a

fix ticket #16

Chris PeBenito • 18 years ago

aeaae5

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 18 years ago

e45324

fix term_tty() associations

Chris PeBenito • 18 years ago

0e5c54

more realplayer entries

Chris PeBenito • 18 years ago

009b37

gentoo testing fixes.

Chris PeBenito • 18 years ago

14b168

- More iSCSI changes for #209854

jantill • 18 years ago

a3698a

- Test ISCSI fixes for #209854

jantill • 18 years ago

cd0a0d

fix makefile to install root default contexts

Chris PeBenito • 18 years ago

8a2492

add load target to Makefile.devel

Chris PeBenito • 18 years ago

d50847

mkdir policy and file contexts dirs in make load of modular policy.

Chris PeBenito • 18 years ago

212832

make optional the inetd dependency in samba

Chris PeBenito • 18 years ago

85f0c3

change transition from run_init to initrc to spec.

Chris PeBenito • 18 years ago

93ddc6

- allow semodule to rmdir selinux_config_t dir

Daniel J Walsh • 18 years ago

ed9a4c

- Fix boot_runtime_t problem on ppc. Should not be creating these files.

Daniel J Walsh • 18 years ago

70e2db

fix some stuff that does not affect policy

Chris PeBenito • 18 years ago

f76d07

apply contested part of russell's last patch

Chris PeBenito • 18 years ago

830c12

more non .so lib files for acrobat

Chris PeBenito • 18 years ago

546c81

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 18 years ago

3c3c04

- Fix context mounts on reboot

Daniel J Walsh • 18 years ago

16c971

- Update for tallylog

Daniel J Walsh • 18 years ago

7316db

- Allow xend to rewrite dhcp conf files

Daniel J Walsh • 18 years ago

bfcffe

- Make xentapctrl work

Daniel J Walsh • 18 years ago

160281

- Move range transitions to modules.

Chris PeBenito • 18 years ago

e070dd

- Don't transition unconfined_t to bootloader_t

Daniel J Walsh • 18 years ago

46f098

- Patch for labeled networking

Daniel J Walsh • 18 years ago

f21d67

- Fix crond handling for mls

Daniel J Walsh • 18 years ago

42dd74

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 18 years ago

002190

- Update to upstream

Daniel J Walsh • 18 years ago

8fff69

- Remove bluetooth-helper transition

Daniel J Walsh • 18 years ago

52ba98

fix ticket #15.

Chris PeBenito • 18 years ago

f8cfdd

fix corenetwork so the ifdef enable_mls survives to regular processing.

Chris PeBenito • 18 years ago

49317e

fix build error

Chris PeBenito • 18 years ago

6c6399

- Fix prelink

Daniel J Walsh • 18 years ago

5096e7

- Fix rhgb

Daniel J Walsh • 18 years ago

3c4577

- Fix setrans handling on MLS and useradd

Daniel J Walsh • 18 years ago

172c6c

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 18 years ago

e2b84e

- Support for fuse

Daniel J Walsh • 18 years ago

afbab5

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

bfd584

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

201e1d

- Allow java execheap for itanium

Daniel J Walsh • 18 years ago

d25a3e

- Update with upstream

Daniel J Walsh • 18 years ago

a76cf8

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 18 years ago

693d4a

- mls fixes

Daniel J Walsh • 18 years ago

857ce1

- Update from upstream

Daniel J Walsh • 18 years ago

85bd85

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 18 years ago

8708d9

- More fixes for mls

Daniel J Walsh • 18 years ago

8d52bd

- Fix cron jobs to run under the correct context

Daniel J Walsh • 18 years ago

5ec822

* add a macro for generating category declarations

Chris PeBenito • 18 years ago

a9e03b

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

cc9afd

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

b4815d

gentoo testing fixes

Chris PeBenito • 18 years ago

bf469d

- Multiple policy fixes

Daniel J Walsh • 18 years ago

c56aa1

- Fix transition on mcstransd

Daniel J Walsh • 18 years ago

b8c785

- Add /dev/em8300 defs

Daniel J Walsh • 18 years ago

38b22c

add mls fd constraints

Chris PeBenito • 18 years ago

cf7af1

- Upgrade to upstream

Daniel J Walsh • 18 years ago

3f1bb6

- Upgrade to upstream

Daniel J Walsh • 18 years ago

f511de

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

60792f

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

588fb9

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

5f2a4e

common users list inotifyfs

Chris PeBenito • 18 years ago

2b571d

add -E to python commands

Chris PeBenito • 18 years ago

1a79cf

forgot to bump policy vers

Chris PeBenito • 18 years ago

9dfbd8

patches from erich Wed, 13 Sep 2006 16:18:18 +0200

Chris PeBenito • 18 years ago

73ca55

fix miscfiles_read_localization()

Chris PeBenito • 18 years ago

2cac32

misc fixes

Chris PeBenito • 18 years ago

0d96ff

- Add tty access to all domains boolean

Daniel J Walsh • 18 years ago

861af1

- Fixed typealias of firstboot_rw_t

Daniel J Walsh • 18 years ago

9fbb71

clean up usercanread

Chris PeBenito • 18 years ago

376fbc

add last bit of role infrastructure

Chris PeBenito • 18 years ago

b1bf2f

cleanups

Chris PeBenito • 18 years ago

95b822

- Fix location of xel log files

Daniel J Walsh • 18 years ago

8b6c37

- Fixes for autofs, lp

Daniel J Walsh • 18 years ago

1ef9d4

add main part of role-o-matic

Chris PeBenito • 18 years ago

bbcd3c

- Update from upstream

Daniel J Walsh • 18 years ago

937c1c

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 18 years ago

75beb9

- Fixup for test6

Daniel J Walsh • 18 years ago

57075e

- Fixup for test6

Daniel J Walsh • 18 years ago

66ca8d

- Fixup for test6

Daniel J Walsh • 18 years ago

4bf7cf

fix up usb.ids per distro

Chris PeBenito • 18 years ago

91dabf

add corenetwork.if dependency on corenetwork.te.in, since it is used to build the .if file

Chris PeBenito • 18 years ago

686f11

- Update to upstream

Daniel J Walsh • 18 years ago

efb089

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 18 years ago

13d7ce

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 18 years ago

5dbda5

- Update to upstream

Daniel J Walsh • 18 years ago

928af4

This patch adds a polmatch avperm to arbitrate flow/state's access to

Chris PeBenito • 18 years ago

9b45c6

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 18 years ago

eac818

- Fix suspend to disk problems

Daniel J Walsh • 18 years ago

04dd12

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

a1c3b4

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

3723ca

fix makefile style so internal variables are lowercase

Chris PeBenito • 18 years ago

c634db

- Fix audit line

Daniel J Walsh • 18 years ago

e4710b

- Fix audit line

Daniel J Walsh • 18 years ago

7f5a12

- Fix requires line

Daniel J Walsh • 18 years ago

358add

- Upgrade to upstream

Daniel J Walsh • 18 years ago

06027c

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 18 years ago

a5e213

- Fix install problems

Daniel J Walsh • 18 years ago

161655

more testing fixes

Chris PeBenito • 18 years ago

ce6bf7

- Allow setroubleshoot to getattr on all dirs to gather RPM data

Daniel J Walsh • 18 years ago

9e8814

- Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32

Daniel J Walsh • 18 years ago

4c3485

This patch enables to use xattr on jffs2 filesystem.

Chris PeBenito • 18 years ago

e539a4

fix gentoo /opt contexts

Chris PeBenito • 18 years ago

de2228

- Fix xen tty devices

Daniel J Walsh • 18 years ago

b2d3eb

- Fixes for setroubleshoot

Daniel J Walsh • 18 years ago

8cd82c

- Update to upstream

Daniel J Walsh • 18 years ago

a5dcfa

more strict testing fixes

Chris PeBenito • 18 years ago

98de87

more testing fixes

Chris PeBenito • 18 years ago

d15dd5

fix ordering bug

Chris PeBenito • 18 years ago

5b4ff3

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 18 years ago

3ef029

fix typo in sxid

Chris PeBenito • 18 years ago

2ed690

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

3559b5

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

6f77ee

testing fixes

Chris PeBenito • 18 years ago

e9b9e4

- Update from upstream

Daniel J Walsh • 18 years ago

79b5c4

fix for netfilter_contexts

Chris PeBenito • 18 years ago

4bc6e3

clear executable bits

Chris PeBenito • 18 years ago

e50a55

cleanup in authlogin

Chris PeBenito • 18 years ago

ba1a54

fix cron_system_entry() rules

Chris PeBenito • 18 years ago

357390

remove dead selopt rules

Chris PeBenito • 18 years ago

33c7e6

clean up constraints

Chris PeBenito • 18 years ago

bd56da

- Update from upstream

Daniel J Walsh • 18 years ago

256cfc

- Change allow_execstack to default to on, for RHEL5 Beta. This is required

Daniel J Walsh • 18 years ago

543bc3

- Misc fixes

Daniel J Walsh • 18 years ago

5974f4

Th Aug 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3.6-3

Daniel J Walsh • 18 years ago

c22aca

- More fixes for strict policy

Daniel J Walsh • 18 years ago

d0ed11

add variable for install, and do other helper pgm cleanup

Chris PeBenito • 18 years ago

cfd5c5

- Quiet down anaconda audit messages

Daniel J Walsh • 18 years ago

8da541

ps/ptrace dontaudit cleanup

Chris PeBenito • 18 years ago

497da0

- Fix setroubleshootd

Daniel J Walsh • 18 years ago

932c79

fix target deps for nc

Chris PeBenito • 18 years ago

eb8a26

missed changelog entry for nc

Chris PeBenito • 18 years ago

f5d1d0

add support for netfilter_contexts

Chris PeBenito • 18 years ago

5a7c06

patch from Stefan for mrtg daemon operation.

Chris PeBenito • 18 years ago

4846dc

- Update to the latest from upstream

Daniel J Walsh • 18 years ago

262020

display warning if using loadkeys_domtrans() in targeted

Chris PeBenito • 18 years ago

80f928

- More fixes for xen

Daniel J Walsh • 18 years ago

750558

- Fix anaconda transitions

Daniel J Walsh • 18 years ago

1c92c7

add missing entry for dan's last patch

Chris PeBenito • 18 years ago

9d3a3f

- yet more xen rules

Daniel J Walsh • 18 years ago

5dc8b1

- more xen rules

Daniel J Walsh • 18 years ago

031e1a

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 18 years ago

85476e

add authlogin interface to abstract common login program perms

Chris PeBenito • 18 years ago

4b3b46

- Fixes for Samba

Daniel J Walsh • 18 years ago

1b1dad

- Fixes for xen

Daniel J Walsh • 18 years ago

be45a2

- Allow setroubleshootd to send mail

Daniel J Walsh • 18 years ago

9782db

- Add nagios policy

Daniel J Walsh • 18 years ago

1f2093

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 18 years ago

465510

more ssh agent fixes

Chris PeBenito • 18 years ago

81aa67

clean up most of the remaining ssh TODO

Chris PeBenito • 18 years ago

528811

add gdm Xsession fc

Chris PeBenito • 18 years ago

79f5f5

- fixes for setroubleshoot

Daniel J Walsh • 18 years ago

90c408

- Added Paul Howorth patch to only load policy packages shipped with this

Daniel J Walsh • 18 years ago

9554c9

remove deprecated mount_send_nfs_client_request() from stunnel

Chris PeBenito • 18 years ago

d61714

- Allow pidof from initrc to ptrace higher level domains

Daniel J Walsh • 18 years ago

9d77b6

add helpers for printing warning and error messages

Chris PeBenito • 18 years ago

ea3c1f

some cleanup in the kernel layer

Chris PeBenito • 18 years ago

8b9ebd

- Add policy for /var/run/ldapi

Daniel J Walsh • 18 years ago

8555e0

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 18 years ago

19ebf0

- Fix setroubleshoot policy

Daniel J Walsh • 18 years ago

b14e13

- Fixes for mls use of ssh

Daniel J Walsh • 18 years ago

7b4c78

- Fixes to make setroubleshoot work

Daniel J Walsh • 18 years ago

efa5f5

- Cups needs to be able to read domain state off of printer client

Daniel J Walsh • 18 years ago

1c15e3

- add boolean to allow zebra to write config files

Daniel J Walsh • 18 years ago

c7b739

- setroubleshootd fixes

Daniel J Walsh • 18 years ago

31c47b

- Allow prelink to read bin_t symlink

Daniel J Walsh • 18 years ago

2bf148

- Remove spamassassin_can_network boolean

Daniel J Walsh • 18 years ago

c62a78

- Update to upstream

Daniel J Walsh • 18 years ago

210755

- Add setroubleshoot policy

Daniel J Walsh • 18 years ago

8a7ef5

add access to keys for unconfined

Chris PeBenito • 18 years ago

d82267

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 18 years ago

da9bbc

- Turn off auditallow on setting booleans

Daniel J Walsh • 18 years ago

317bd2

remove setbool auditallow, except for distro_rhel4.

Chris PeBenito • 18 years ago

133000

remove extra level of directory

Chris PeBenito • 18 years ago

2defa7

remove extra level of directory

Chris PeBenito • 18 years ago

17de1b

missing tcp connect for http cache

Chris PeBenito • 18 years ago

b6a9bc

- Multiple fixes

Daniel J Walsh • 18 years ago

d81909

add 3rd party interface for transition out of unconfined

Chris PeBenito • 18 years ago

85311b

- Update to upstream

Daniel J Walsh • 18 years ago

8bee3a

add audit_write and a little style cleanup.

Chris PeBenito • 18 years ago

3aab4a

move non-policy dirs out of trunk

Chris PeBenito • 18 years ago

385e62

change to use validate target for module linking

Chris PeBenito • 18 years ago

0950ee

more TODO cleanup

Chris PeBenito • 18 years ago

1f6524

add vgetty log fc

Chris PeBenito • 18 years ago

29943b

a few TODO fixes, and deprecate mount_send_nfs_client_request().

Chris PeBenito • 18 years ago

f35fed

make mta dep optional

Chris PeBenito • 18 years ago

2cc407

add support for toolchain testing

Chris PeBenito • 18 years ago

e2ae08

fix initrc_context for targeted

Chris PeBenito • 18 years ago

c11774

change eventpollfs labeling to task sid

Chris PeBenito • 18 years ago

81a016

temporarily add unlabeled packet perm to unlabeled association if

Chris PeBenito • 18 years ago

c467d9

change assignment of programs so they can be overridden on the cmdline

Chris PeBenito • 18 years ago

906f10

fix "no modules enabled" check

Chris PeBenito • 18 years ago

c72f53

- Update to upstream

Daniel J Walsh • 18 years ago

4a291a

- Update to upstream

Daniel J Walsh • 18 years ago

55d3b8

bump mod versions for key

Chris PeBenito • 18 years ago

4a7b2c

add key support

Chris PeBenito • 18 years ago

fe3a1e

- Update to upstream

Daniel J Walsh • 18 years ago

9e7fd1

list dans patches

Chris PeBenito • 18 years ago

2dd1d3

patch from Dan Tue, 20 Jun 2006 16:19:13 -0400

Chris PeBenito • 18 years ago

123a99

- Update to upstream

Daniel J Walsh • 18 years ago

8df543

- Update to upstream

Daniel J Walsh • 18 years ago

1065b1

- Fix requires

Daniel J Walsh • 18 years ago

446e9b

- Update to upstream

Daniel J Walsh • 18 years ago

2b87b0

need send_msg for merging dbus

Chris PeBenito • 18 years ago

1b11a1

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

63e20b

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

77dc77

remove raw network, make mta optional, and a little cleanup.

Chris PeBenito • 18 years ago

cc0c00

- Add ibmasmfs

Daniel J Walsh • 18 years ago

af203b

fix typo

Chris PeBenito • 18 years ago

e586ec

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

cc073e

remove redundant conditional

Chris PeBenito • 18 years ago

eaa823

fix typo

Chris PeBenito • 18 years ago

953953

fix typo

Chris PeBenito • 18 years ago

7d1e36

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

4ef386

clean up usercanread

Chris PeBenito • 18 years ago

b68a85

- Update from Upstream

Daniel J Walsh • 18 years ago

358335

fix typos

Chris PeBenito • 18 years ago

884e3b

- Fix spec of realplay

Daniel J Walsh • 18 years ago

0fe5c7

- Update to upstream

Daniel J Walsh • 18 years ago

2616c6

add ftpdctl from paul howarth

Chris PeBenito • 18 years ago

75fbbb

undo dans reversion

Chris PeBenito • 18 years ago

371097

patch from dan Mon, 12 Jun 2006 15:32:00 -0400

Chris PeBenito • 18 years ago

2dbd38

remove some extra endlines

Chris PeBenito • 18 years ago

c54686

Fix build system to not move type declarations out of optionals.

Chris PeBenito • 18 years ago

4f447b

fix dbus_user_bus_client_template

Chris PeBenito • 18 years ago

821f78

fix to use ifndef convenience macro

Chris PeBenito • 18 years ago

d576ae

add ifndef convenience macro

Chris PeBenito • 18 years ago

06b9bd

fix typo

Chris PeBenito • 18 years ago

8e86e4

use domtrans from initrc for insmod

Chris PeBenito • 18 years ago

290a4a

- Allow useradd to create_home_dir in MLS environment

Daniel J Walsh • 18 years ago

b637d9

fix up bad ifdefs and remove foo.te definition for modules.

Chris PeBenito • 18 years ago

eeab57

another script in the apr build dir

Chris PeBenito • 18 years ago

c22705

shell scripts in the apr build dir

Chris PeBenito • 18 years ago

5fe209

- Update from upstream

Daniel J Walsh • 18 years ago

3004d5

- Update from upstream

Daniel J Walsh • 18 years ago

c54f60

fix most bad rules in cups, bug 1771

Chris PeBenito • 18 years ago

9c1c08

- Update from upstream

Daniel J Walsh • 18 years ago

cfc04d

patch from dan Tue, 06 Jun 2006 22:50:46 -0400

Chris PeBenito • 18 years ago

522b59

- Add oprofilefs

Daniel J Walsh • 18 years ago

a4c709

fix execmod all files rule in wine

Chris PeBenito • 18 years ago

e51048

improve warning message, with file and line numbers

Chris PeBenito • 18 years ago

fc2dac

fix bad use of templates

Chris PeBenito • 18 years ago

6e7632

missing net_bind_service cap for bind_all_ports interfaces

Chris PeBenito • 18 years ago

97c57a

packets

Chris PeBenito • 18 years ago

3d03a4

packets for inetd

Chris PeBenito • 18 years ago

3152d1

fill out networking perms

Chris PeBenito • 18 years ago

42d053

packets for ftp

Chris PeBenito • 18 years ago

9a879b

packets for services

Chris PeBenito • 18 years ago

141cff

packets for admin modules

Chris PeBenito • 18 years ago

9d0c9b

add packets for apps

Chris PeBenito • 18 years ago

c0d8c4

break packet_t into server_packet_t client_packet_t, and cover add packets to system modules where they make sense.

Chris PeBenito • 18 years ago

35a4b3

add gcc-config to portage

Chris PeBenito • 18 years ago

5afdf0

- Fix for hplip and Picasa

Daniel J Walsh • 18 years ago

a55870

- Update to upstream

Daniel J Walsh • 18 years ago

43fe71

apache packets

Chris PeBenito • 18 years ago

968ace

updates for nfs, squid, and mta

Chris PeBenito • 18 years ago

b8373e

more packets

Chris PeBenito • 18 years ago

72fcec

packet updates for kernel, nscd, bind, ntp, spamassassin, and dhcpc

Chris PeBenito • 18 years ago

006e99

packets for users

Chris PeBenito • 18 years ago

bfad88

fix typos

Chris PeBenito • 18 years ago

332bb3

comment out .SECONDARY since its broken in make 3.81, and rawhide uses this make now

Chris PeBenito • 18 years ago

4b01e2

add client and server packet attributes

Chris PeBenito • 18 years ago

2f8eec

- fixes for java, openldap and webalizer

Daniel J Walsh • 18 years ago

7580a1

update ssh for packets

Chris PeBenito • 18 years ago

7b6436

reorganize the file

Chris PeBenito • 18 years ago

189694

packets from configuring cups from a web browser and printing a test page to a jetdirect

Chris PeBenito • 18 years ago

8745d9

typo

Chris PeBenito • 18 years ago

f6e83a

initial packet rules

Chris PeBenito • 18 years ago

378d5c

add generic packet interfaces, and fix up unconfined handling

Chris PeBenito • 18 years ago

c5657a

remove debugging statemnet

Chris PeBenito • 18 years ago

e4b30f

add makefile support for netfilter contexts

Chris PeBenito • 18 years ago

6962bb

fix copyright years

Chris PeBenito • 18 years ago

6b873c

fix handling of comments at the end of the line, and add copyright

Chris PeBenito • 18 years ago

d24259

fix chain declaration

Chris PeBenito • 18 years ago

df15d0

add command line arguments support, and mls/mcs support

Chris PeBenito • 18 years ago

d6d8b7

add compute_av for doing rootok check

Chris PeBenito • 18 years ago

29a051

use network_port()s to declare packets, since packets match up with these ports

Chris PeBenito • 18 years ago

c89024

initial commit of netfilter config generator tool, still needs work on mls/mcs side.

Chris PeBenito • 18 years ago

d6c62e

- Xen fixes

Daniel J Walsh • 18 years ago

d065ee

- Xen fixes

Daniel J Walsh • 18 years ago

e30da9

allow iptables to relabelto all packets

Chris PeBenito • 18 years ago

6293ba

initial support for packets

Chris PeBenito • 18 years ago

e37158

initial addition of packet policy, allow unconfined to send unlabeled packets.

Chris PeBenito • 18 years ago

a013b5

no user contexts for strict policy

Chris PeBenito • 18 years ago

e12604

- Upgrade to upstream

Daniel J Walsh • 18 years ago

e5e509

dontaudit just the kernel fd use, the others may indicate problems for other reasons.

Chris PeBenito • 18 years ago

263721

add back stray file descriptors dontaudit for rhel4

Chris PeBenito • 18 years ago

8fa494

add packet security class

Chris PeBenito • 18 years ago

c55b6f

cleanup init_t a little

Chris PeBenito • 18 years ago

228838

move selinux unconfined to attribute setup, clean up unconfined interface a bit

Chris PeBenito • 18 years ago

41a0f8

patch from russell Fri, 19 May 2006 20:28:29 +1000

Chris PeBenito • 18 years ago

9d4538

patch from dan Thu, 18 May 2006 11:56:22 -0400

Chris PeBenito • 18 years ago

87eb5c

fixes for gentoo

Chris PeBenito • 18 years ago

46fc46

fix example.te

Chris PeBenito • 18 years ago

5f4b56

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

75d0fe

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

4aae36

start cleaning up node binding and raw if/node access

Chris PeBenito • 18 years ago

b516e8

most of patch from dan Mon, 15 May 2006 11:58:01 -0400

Chris PeBenito • 18 years ago

165b42

- Update from upstream

Daniel J Walsh • 18 years ago

f4d170

move old strict, targeted, and mls policies to archive

Chris PeBenito • 18 years ago

6c5614

add info on build options

Chris PeBenito • 18 years ago

75c1c2

update admin template docs

Chris PeBenito • 18 years ago

b0bdcb

- Fixes for amavis

Daniel J Walsh • 18 years ago

82d40f

gentoo has passwd in /bin

Chris PeBenito • 18 years ago

28401d

- Update from upstream

Daniel J Walsh • 18 years ago

52288b

Add a copy of genhomedircon for monolithic policy building, so that a policycoreutils package update is not required for RHEL4 systems.

Chris PeBenito • 18 years ago

fc47b3

remove rules added to make sediff easier

Chris PeBenito • 18 years ago

21d173

- Allow auditctl to search all directories

Daniel J Walsh • 18 years ago

a97d1f

clean up some apache networking perms

Chris PeBenito • 18 years ago

e9a408

- Add acquire service for mono.

Daniel J Walsh • 18 years ago

f08aca

- Turn off allow_execmem boolean

Daniel J Walsh • 18 years ago

89e397

add apache_manage_all_content, bug 1602

Chris PeBenito • 18 years ago

013d74

- Clean up spec file

Daniel J Walsh • 18 years ago

ca8bc2

fix sendmail_exec_t encapsulation breakage

Chris PeBenito • 18 years ago

88bc7a

document remaining interfaces w/o XML. turn on warnings for missing XML.

Chris PeBenito • 18 years ago

ac9db9

make executable

Chris PeBenito • 18 years ago

727758

document postfix templates, remove postfix_public_domain_template()

Chris PeBenito • 18 years ago

e8ffdf

document postfix templates, remove postfix_public_domain_template()

Chris PeBenito • 18 years ago

e58da0

status update

Chris PeBenito • 18 years ago

eac0b8

- Allow execution of cvs command

Daniel J Walsh • 18 years ago

539ba8

fixes from testing

Chris PeBenito • 18 years ago

f827eb

remove unreproducible notatsecure problem, bug 1411

Chris PeBenito • 18 years ago

88d68f

pyzor does not have a per userdomain template

Chris PeBenito • 18 years ago

54d01c

ssh_keysign_exec_t should be a bin

Chris PeBenito • 18 years ago

4c44b8

add nx, bug 1535

Chris PeBenito • 18 years ago

6bd449

- Update to upstream

Daniel J Walsh • 18 years ago

a52275

add clockspeed from petre rodan

Chris PeBenito • 18 years ago

46bec4

fix broken macro calls

Chris PeBenito • 18 years ago

bf2f29

dontaudit chroot, glibc compile is ok without it

Chris PeBenito • 18 years ago

858a1f

add razor, bug 1542

Chris PeBenito • 18 years ago

20e929

add portslave, bug 1538

Chris PeBenito • 18 years ago

12cd9a

add afs, bug 1514

Chris PeBenito • 18 years ago

48b1d0

add appletalk socket for cups

Chris PeBenito • 18 years ago

c8229a

add appletalk socket for cups

Chris PeBenito • 18 years ago

f40b22

add dcc, bug 1522

Chris PeBenito • 18 years ago

6ba4d9

- Update to upstream

Daniel J Walsh • 18 years ago

529f12

HOME_DIR only on strict

Chris PeBenito • 18 years ago

988930

split type transition from auth_manage_shadow

Chris PeBenito • 18 years ago

8bf6f5

patch from dan Tue, 02 May 2006 10:08:17 -0400, includes pyzor, bug 1541

Chris PeBenito • 18 years ago

e99359

add target for validating module linking, bug 1276

Chris PeBenito • 18 years ago

ea5333

status update

Chris PeBenito • 18 years ago

bc5211

add oav, bug 1536

Chris PeBenito • 18 years ago

2e9cd9

split out filetrans part of files_manage_etc_runtime_files(), bug 1663

Chris PeBenito • 18 years ago

6714c2

add openca, bug 1660

Chris PeBenito • 18 years ago

5bd9fd

make dupe interface and templates a fatal error.

Chris PeBenito • 18 years ago

5706fa

- Fix libjvm spec

Daniel J Walsh • 18 years ago

49dfee

add sxid, bug 1661

Chris PeBenito • 18 years ago

b6cc2f

fix optional

Chris PeBenito • 18 years ago

e8bf4d

add monop, bug 1659.

Chris PeBenito • 18 years ago

3f1c08

fix up entrypoints

Chris PeBenito • 18 years ago

d40c0e

- Update to upstream

Daniel J Walsh • 18 years ago

9aac41

add missing entrypoint

Chris PeBenito • 18 years ago

278818

- Update to upstream

Daniel J Walsh • 18 years ago

ea725c

status update for today

Chris PeBenito • 18 years ago

9f8c87

remove broad ldap access

Chris PeBenito • 18 years ago

512e8c

add watchdog, bug 1662

Chris PeBenito • 18 years ago

d592b6

add ircd, bug 1658

Chris PeBenito • 18 years ago

050f36

add yam, bug 1554

Chris PeBenito • 18 years ago

f30e6e

add munin, bug 1530

Chris PeBenito • 18 years ago

b6d37e

another status update

Chris PeBenito • 18 years ago

e4166a

add nsd, bug 1534

Chris PeBenito • 18 years ago

6a21ce

add authbind, bug 1516

Chris PeBenito • 18 years ago

b6b574

add nrpe to nagios, bug 1533

Chris PeBenito • 18 years ago

06e277

more status updates

Chris PeBenito • 18 years ago

11a4a2

fixes for confined vmware sessions

Chris PeBenito • 18 years ago

03d797

add template doc

Chris PeBenito • 18 years ago

677de4

fixes for testing with unconfined vms

Chris PeBenito • 18 years ago

5b7b2b

add vmware, bug 1389

Chris PeBenito • 18 years ago

b35d3f

add vmware, bug 1389

Chris PeBenito • 18 years ago

a6a638

more of patch from dan Thu, 20 Apr 2006 14:06:03 -0400

Chris PeBenito • 18 years ago

0e1c46

add rssh, bug 1544

Chris PeBenito • 18 years ago

5540e7

add ddclient, bug 1523

Chris PeBenito • 18 years ago

70b8a7

more implemented modules

Chris PeBenito • 18 years ago

5b4d09

add imaze, bug 1528

Chris PeBenito • 18 years ago

4d73bb

- Add xm policy

jantill • 18 years ago

684125

add soundserver, bug 1547

Chris PeBenito • 18 years ago

9b244c

Fix summary doc output.

jantill • 18 years ago

eaccf7

add dnsmasq, bug 1524

Chris PeBenito • 18 years ago

9e725d

fix stray texrel_shlib_t references

Chris PeBenito • 18 years ago

53bf55

- Update to upstream

Daniel J Walsh • 18 years ago

bbaa1f

- Update to upstream

Daniel J Walsh • 18 years ago

bc0bd8

add gift, bug 1527

Chris PeBenito • 18 years ago

6cd6d7

add backup, bug 1517

Chris PeBenito • 18 years ago

57f233

add tripwire, bug 1550

Chris PeBenito • 18 years ago

853692

misc cleanup

Chris PeBenito • 18 years ago

037762

fixes

Chris PeBenito • 18 years ago

82f1df

first cut of hierarchical policy

Chris PeBenito • 18 years ago

02f9b2

- Allow mono to chat with unconfined

Daniel J Walsh • 18 years ago

e847c8

- Allow procmail to sendmail

Daniel J Walsh • 18 years ago

d2fe1b

- Update to latest from upstream

Daniel J Walsh • 18 years ago

e1490d

add concept of executables, and update policies which really want this intead of entrypoints

Chris PeBenito • 18 years ago

fb63d0

- Update to latest from upstream

Daniel J Walsh • 18 years ago

5ff36d

patch from dan Tue, 18 Apr 2006 23:16:15 -0400

Chris PeBenito • 18 years ago

85a0f9

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c74f14

add gatekeeper, bug 1526

Chris PeBenito • 18 years ago

5d03fc

more completed modules

Chris PeBenito • 18 years ago

5f6fb4

fix up openvpn port

Chris PeBenito • 18 years ago

478f0c

cleanup

Chris PeBenito • 18 years ago

f8cd6f

update test scripts

Chris PeBenito • 18 years ago

dd6f82

add asterisk and ntop.

Chris PeBenito • 18 years ago

e3e37e

fix bad rules in samba, bug 1623

Chris PeBenito • 18 years ago

eeb8ea

stabilize make conf output from erich, bug 1242

Chris PeBenito • 18 years ago

86e869

second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400

Chris PeBenito • 18 years ago

abc73a

first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400

Chris PeBenito • 18 years ago

cdc86e

- Add unconfined_mount_t

Daniel J Walsh • 18 years ago

3c584c

add openvpn from petre rodan

Chris PeBenito • 18 years ago

2ba3de

- Update to latest from upstream

Daniel J Walsh • 18 years ago

ca0597

status update

Chris PeBenito • 18 years ago

69d1af

add resmgr, bug 1543

Chris PeBenito • 18 years ago

b057be

add semanage transition for unconfined

Chris PeBenito • 18 years ago

e38cb7

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c4826d

fix capitalization

Chris PeBenito • 18 years ago

df1c28

fix formatting, fix xml in example.

Chris PeBenito • 18 years ago

2b10a6

fix up title

Chris PeBenito • 18 years ago

7f3d15

massive rewrite for out of tree building of modules.

Chris PeBenito • 18 years ago

26eac6

add jabber, bug 1529

Chris PeBenito • 18 years ago

61cf53

add perdition, bug 1537

Chris PeBenito • 18 years ago

0cc79f

add speedtouch, bug 1548

Chris PeBenito • 18 years ago

5501be

add transproxy, bug 1549

Chris PeBenito • 18 years ago

fa8951

add uptime, bug 1551

Chris PeBenito • 18 years ago

dfd2c1

add uptime, bug 1551

Chris PeBenito • 18 years ago

4e656a

second part of dans patch Tue, 11 Apr 2006 09:25:24 -0400

Chris PeBenito • 18 years ago

c655ec

first part of dans patch Tue, 11 Apr 2006 09:25:24 -0400

Chris PeBenito • 18 years ago

8cfa5a

- Change libraries.fc to stop shlib_t form overriding texrel_shlib_t

Daniel J Walsh • 18 years ago

c7b01a

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

5cbfde

missed changelog entry, bug 1520

Chris PeBenito • 18 years ago

03631a

fix up command line module settings

Chris PeBenito • 18 years ago

201445

add courier, bug 1520

Chris PeBenito • 18 years ago

6f8cda

fix assertions

Chris PeBenito • 18 years ago

f82f22

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

c53f3b

move over to attributes for unconfined interfaces.

Chris PeBenito • 18 years ago

b518fc

Change file contexts and several minor policy changes.

rcoker • 18 years ago

a442ed

add xprint, bug 1553

Chris PeBenito • 18 years ago

5516db

add uwimap, bug 1552

Chris PeBenito • 18 years ago

3eec24

try 4 on rhel4 fixes

Chris PeBenito • 18 years ago

a7c960

try 3 on rhel4 fixes

Chris PeBenito • 18 years ago

5d92a2

try 2 on rhel4 fixes

Chris PeBenito • 18 years ago

a3e785

fixes for rhel4 genhomedircon.

Chris PeBenito • 18 years ago

185ab2

change wording of status

Chris PeBenito • 18 years ago

6aa357

big status update

Chris PeBenito • 18 years ago

18fa7a

move xconsole to xserver mod

Chris PeBenito • 18 years ago

413982

make .te and .fc files optional by touching them if they are missing.

Chris PeBenito • 18 years ago

0578bf

- More textrel_shlib_t file path fixes

Daniel J Walsh • 18 years ago

67bc5e

remove devfs_control_t

Chris PeBenito • 18 years ago

fc70c9

add nagios, bug 1531

Chris PeBenito • 18 years ago

f1e604

add nessus, bug 1532

Chris PeBenito • 18 years ago

a478b5

really fix

Chris PeBenito • 18 years ago

70de70

really fix init out of base module problem

Chris PeBenito • 18 years ago

27c34b

add pxe, bug 1540

Chris PeBenito • 18 years ago

3411c3

add snort, bug 1546

Chris PeBenito • 18 years ago

e55160

add postgrey

Chris PeBenito • 18 years ago

7f9ebb

add qmail

Chris PeBenito • 18 years ago

65e131

fix some textrel libs on fc

Chris PeBenito • 18 years ago

baec64

fix typo pointed out by james

Chris PeBenito • 18 years ago

4a1180

- Get auditctl working in MLS policy

Daniel J Walsh • 18 years ago

4fd214

TODO cleanup

Chris PeBenito • 18 years ago

3b9147

- Add mono dbus support

Daniel J Walsh • 18 years ago

2ad4f1

update for past renames

Chris PeBenito • 18 years ago

061099

add dante, bug 1521

Chris PeBenito • 18 years ago

189631

- Update to upstream

Daniel J Walsh • 18 years ago

da5d60

add back newrole functionality in rhel4

Chris PeBenito • 18 years ago

58a382

add distro rhel4

Chris PeBenito • 18 years ago

2f1a8f

- Allow automount and dbus to read cert files

Daniel J Walsh • 18 years ago

d2bd4f

fix typo seen by jathey

Chris PeBenito • 18 years ago

b19257

- Fix ftp policy

Daniel J Walsh • 18 years ago

58ec7a

patch from dan Wed, 29 Mar 2006 15:32:51 -0500

Chris PeBenito • 18 years ago

724925

bump rev

Chris PeBenito • 18 years ago

fa2c74

move su_exec_t decl back to su module.

Chris PeBenito • 18 years ago

f3ac5e

remove stray bit from old su-newrole

Chris PeBenito • 18 years ago

be0b1b

- Update to upstream

Daniel J Walsh • 18 years ago

5c1cd7

make fs use its own interfaces.

Chris PeBenito • 18 years ago

da14da

semodule needs to manage the file contexts

Chris PeBenito • 18 years ago

55b190

Constrain transitions in MCS so unconfined_t cannot have arbitrary category sets.

Chris PeBenito • 18 years ago

9779f0

change reiserfs from xattr to genfscon

Chris PeBenito • 18 years ago

d2a903

clean up formatting

Chris PeBenito • 18 years ago

8e788e

cleanups

Chris PeBenito • 18 years ago

41b25f

add extra dep to init_t interfaces since init_t is in base module right now.

Chris PeBenito • 18 years ago

bcdcc5

bump rev

Chris PeBenito • 18 years ago

1ce7f6

use device_node attribute instead of individual calls per type

Chris PeBenito • 18 years ago

28567a

clean up to make files use its own interfaces.

Chris PeBenito • 18 years ago

a65611

cleanup

Chris PeBenito • 18 years ago

3a1fb3

add user fonts to xserver.

Chris PeBenito • 18 years ago

178647

remove unneeded gen_require in can_exec

Chris PeBenito • 18 years ago

a5d546

- Update to upstream

Daniel J Walsh • 18 years ago

bbe0ad

- Update to upstream

Daniel J Walsh • 18 years ago

5a0143

make interfaces expand now that they aren't ifdef'd away

Chris PeBenito • 19 years ago

ab23bb

add cipe, bug 1519.

Chris PeBenito • 19 years ago

096ae6

Additional interfaces in corecommands, miscfiles, and userdomain from Joy Latten.

Chris PeBenito • 19 years ago

d42c7e

fixes from thomas bleher Fri, 24 Mar 2006 13:25:54 +0100

Chris PeBenito • 19 years ago

8b2d5c

- Fix policyhelp

Daniel J Walsh • 19 years ago

bd3f0e

deprecate module name as first parameter of optional_policy()

Chris PeBenito • 19 years ago

bb7170

enable optionals in base/monolithic

Chris PeBenito • 19 years ago

0db866

add hidd

Chris PeBenito • 19 years ago

7fd9a6

fix vpn module declaration.

Chris PeBenito • 19 years ago

ac6cff

patch from dan Fri, 17 Mar 2006 15:22:53 -0500

Chris PeBenito • 19 years ago

a3cf80

comment fix

Chris PeBenito • 19 years ago

dcd174

- Fix pam_console handling of usb_device

Daniel J Walsh • 19 years ago

faffd3

add in full permission sets now that it will be used for require blocks.

Chris PeBenito • 19 years ago

701316

add calamaris, bug 1518

Chris PeBenito • 19 years ago

99c902

- Update to upstream

Daniel J Walsh • 19 years ago

414d6d

add audioentropy, bug 1515

Chris PeBenito • 19 years ago

7f74a4

work around locale weirdness in FC that affects sort.

Chris PeBenito • 19 years ago

f62f4c

add games, bug 1386

Chris PeBenito • 19 years ago

fbc0a2

move typealias statements up too

Chris PeBenito • 19 years ago

b67faf

- Update to upstream

Daniel J Walsh • 19 years ago

ad73e8

fix most missing entries from bug 1567

Chris PeBenito • 19 years ago

3dbceb

sort to get all attribute declarations above type declarations.

Chris PeBenito • 19 years ago

35d085

gentoo fixes

Chris PeBenito • 19 years ago

ce6c13

Change build order to preserve m4 line number information so policy compile errors are useful again.

Chris PeBenito • 19 years ago

3abd5e

- Update to upstream

Daniel J Walsh • 19 years ago

727bb2

fix misname of template

Chris PeBenito • 19 years ago

c28caf

add listen and accept to tcp_sock

Chris PeBenito • 19 years ago

aa5f87

- Get transition rules to create policy.20 at SystemHigh

Daniel J Walsh • 19 years ago

9f8b05

additional mls interfaces from chad hanson.

Chris PeBenito • 19 years ago

405efe

fix explicit dep of policy.conf

Chris PeBenito • 19 years ago

efc94a

- Allow secadmin to shutdown system

Daniel J Walsh • 19 years ago

5b4676

add ethereal, bug 1383

Chris PeBenito • 19 years ago

0834f9

remove unneeded rule

Chris PeBenito • 19 years ago

7400d1

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 19 years ago

6d4275

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 19 years ago

0a74a2

add ssp patch and move some domain_(base_)?_type() rules to the TE file.

Chris PeBenito • 19 years ago

3cfd48

add comment so this bit can be fixed.

Chris PeBenito • 19 years ago

3b3933

- remove mkdir /usr/share/selinux/, it's not required and even wrong

Karsten Hopp • 19 years ago

4e431c

fix temporary rules in portmap, bug 1467

Chris PeBenito • 19 years ago

e78c77

fix missing dep

Chris PeBenito • 19 years ago

49b41c

add evolution, bug 1384

Chris PeBenito • 19 years ago

edf241

add mozilla bug 1396

Chris PeBenito • 19 years ago

9105f9

updated mls comments from chad hanson

Chris PeBenito • 19 years ago

63e0a1

- Get rid of mount/fsdisk scan of /dev messages

Daniel J Walsh • 19 years ago

4c9f08

add mplayer

Chris PeBenito • 19 years ago

77b81c

add rhgb

Chris PeBenito • 19 years ago

c8d5b3

- Fake make to rebuild enableaudit.pp

Daniel J Walsh • 19 years ago

54b0b5

- Get xen networking running.

Daniel J Walsh • 19 years ago

6d2388

- Fixes for Xen

Daniel J Walsh • 19 years ago

23a177

thunderbird merged

Chris PeBenito • 19 years ago

338dbd

- more xen policy fixups

Jeremy Katz • 19 years ago

b33ec3

- more xen fixage (#184393)

Jeremy Katz • 19 years ago

1b0755

- Fix blkid specification

Daniel J Walsh • 19 years ago

060041

- Blkid changes

Daniel J Walsh • 19 years ago

9c64bb

fix typo

Chris PeBenito • 19 years ago

3bb0a3

add thunderbird

Chris PeBenito • 19 years ago

185272

add apt and dpkg from erich schubert

Chris PeBenito • 19 years ago

0c54fc

- Allow lvm tools to create drevice dir

Daniel J Walsh • 19 years ago

4c9f65

- Add Xen support

Daniel J Walsh • 19 years ago

020477

contrib by erich schubert

Chris PeBenito • 19 years ago

56df23

add amavis and clamav from Erich Schubert

Chris PeBenito • 19 years ago

8a0a99

add tor module from Erich Schubert

Chris PeBenito • 19 years ago

ce3145

add a few missing bits

Chris PeBenito • 19 years ago

a4bbe3

update for release

Chris PeBenito • 19 years ago

42e77a

update for release

Chris PeBenito • 19 years ago

3d6520

update api docs

Chris PeBenito • 19 years ago

af3dd8

update for release

Chris PeBenito • 19 years ago

0fc3e1

scripts are loaded by the interpreter rather than ran directly

Chris PeBenito • 19 years ago

1e1d12

bump version numbers for release

Chris PeBenito • 19 years ago

2b3c99

- Fixes for cups

Daniel J Walsh • 19 years ago

72a136

- Fixes for cups

Daniel J Walsh • 19 years ago

0296af

add missing rules

Chris PeBenito • 19 years ago

32e6fc

add unconfigured modules to OFF_MODS, and change APPS_ON to APPS_BASE

Chris PeBenito • 19 years ago

87e73c

fix typo

Chris PeBenito • 19 years ago

72ed29

- Load Policy needs translock

Daniel J Walsh • 19 years ago

76d7c5

- Fix cups html interface

Daniel J Walsh • 19 years ago

ef0cb1

- Add hal changes suggested by Jeremy

Daniel J Walsh • 19 years ago

21277d

- add policyhelp to point at policy html pages

Daniel J Walsh • 19 years ago

d2c260

move bootloader to admin

Chris PeBenito • 19 years ago

e5a602

make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames.

Chris PeBenito • 19 years ago

1c1ac6

make sure booleans get in to booleans.conf

Chris PeBenito • 19 years ago

13a494

- Additional fixes for nvidia and cups

Daniel J Walsh • 19 years ago

8254bb

- Update to upstream

Daniel J Walsh • 19 years ago

575aa9

patch from dan Thu, 23 Feb 2006 14:26:05 -0500

Chris PeBenito • 19 years ago

0f27d9

add interfaces to eventually clean up the storage_create_fixed_disk(_tmpfs)?() mess

Chris PeBenito • 19 years ago

675a0e

*** empty log message ***

Daniel J Walsh • 19 years ago

fbec4b

*** empty log message ***

Daniel J Walsh • 19 years ago

290aa6

*** empty log message ***

Daniel J Walsh • 19 years ago

dd2612

*** empty log message ***

Daniel J Walsh • 19 years ago

e135c7

*** empty log message ***

Daniel J Walsh • 19 years ago

771686

*** empty log message ***

Daniel J Walsh • 19 years ago

c12699

*** empty log message ***

Daniel J Walsh • 19 years ago

7dca0e

*** empty log message ***

Daniel J Walsh • 19 years ago

5d5343

*** empty log message ***

Daniel J Walsh • 19 years ago

d19b68

*** empty log message ***

Daniel J Walsh • 19 years ago

701455

*** empty log message ***

Daniel J Walsh • 19 years ago

585f82

patch from dan Mon, 20 Feb 2006 17:19:34 -0500

Chris PeBenito • 19 years ago

02bcb8

*** empty log message ***

Daniel J Walsh • 19 years ago

d4d1f2

*** empty log message ***

Daniel J Walsh • 19 years ago

4dab27

try to be smarter about NAME

Chris PeBenito • 19 years ago

794a56

add default headerdir in case users try to make -C instead of using the makefile.example.

Chris PeBenito • 19 years ago

6a7380

*** empty log message ***

Daniel J Walsh • 19 years ago

a57054

*** empty log message ***

Daniel J Walsh • 19 years ago

d5ae27

*** empty log message ***

Daniel J Walsh • 19 years ago

28c425

*** empty log message ***

Daniel J Walsh • 19 years ago

46bd65

another round of renaming

Chris PeBenito • 19 years ago

103fe2

add gentoo integrated run init

Chris PeBenito • 19 years ago

2283dc

fix tmp dir usage

Chris PeBenito • 19 years ago

4ca6d0

*** empty log message ***

Daniel J Walsh • 19 years ago

31d4d2

*** empty log message ***

Daniel J Walsh • 19 years ago

f0e87b

*** empty log message ***

Daniel J Walsh • 19 years ago

3debd0

another round of renaming

Chris PeBenito • 19 years ago

15722e

fix most templated interface calls outside of templates

Chris PeBenito • 19 years ago

0eba5d

patch from dan Sun, 19 Feb 2006 08:16:18 -0500

Chris PeBenito • 19 years ago

46c69c

clean up most of user subdir mess

Chris PeBenito • 19 years ago

4a02d3

fix up cron_crw_tcp_socket()

Chris PeBenito • 19 years ago

e1ee92

*** empty log message ***

Daniel J Walsh • 19 years ago

6e9bcb

second colon not needed for mls-disabled policies.

Chris PeBenito • 19 years ago

b9e6c4

Remove allow_execmem from targeted policy domain_base_type().

Chris PeBenito • 19 years ago

3eea55

fix bad interface calls

Chris PeBenito • 19 years ago

a39525

fix build.conf inclusion for local policies, add xml build target, nicen eching.

Chris PeBenito • 19 years ago

1a7175

nicen echoing

Chris PeBenito • 19 years ago

58b2a3

fix default user line

Chris PeBenito • 19 years ago

8d1111

add missing verbose to fc_sort and add target for generated files

Chris PeBenito • 19 years ago

fffba0

status update

Chris PeBenito • 19 years ago

7e86de

add uml, plus two renames in corenet

Chris PeBenito • 19 years ago

5b6ddb

add missing vpath and .pp build dir for modules in local layers

Chris PeBenito • 19 years ago

ad8af2

fix dependency for install-headers

Chris PeBenito • 19 years ago

3d5980

patch from dan Tue, 14 Feb 2006 09:01:16 -0500

Chris PeBenito • 19 years ago

8cf671

fix regression; remove unneeded ROOT and make BUILDDIR have a / if its set.

Chris PeBenito • 19 years ago

5b45ff

remove unneeded dep

Chris PeBenito • 19 years ago

988a44

reverse

Chris PeBenito • 19 years ago

b389cd

remove unneeded dep

Chris PeBenito • 19 years ago

fcfe68

add seusers support

Chris PeBenito • 19 years ago

ace368

make default action build all packages, like the comment says

Chris PeBenito • 19 years ago

ddb9aa

add users_extra support

Chris PeBenito • 19 years ago

90b331

remove unneeded LOCAL_LAYERS variable

Chris PeBenito • 19 years ago

e2680f

make html target create tmp dir

Chris PeBenito • 19 years ago

81a18f

fix headers install path problem, segenxml.py variable problem, change set_tunables into a standalone awk script.

Chris PeBenito • 19 years ago

d6cf05

add missing endlines

Chris PeBenito • 19 years ago

3a68d0

merge external modules makefile changes

Chris PeBenito • 19 years ago

c9f20d

implement x_client_domain replacement

Chris PeBenito • 19 years ago

24a637

add x_client_domain implementation

Chris PeBenito • 19 years ago

0a30b0

*** empty log message ***

Daniel J Walsh • 19 years ago

f3a390

*** empty log message ***

Daniel J Walsh • 19 years ago

025d1e

*** empty log message ***

Daniel J Walsh • 19 years ago

2f15a2

update for serge's fix

Chris PeBenito • 19 years ago

0062f9

clean up patch from Serge Fri, 10 Feb 2006 18:01:06 -0600

Chris PeBenito • 19 years ago

807a77

*** empty log message ***

Daniel J Walsh • 19 years ago

c417f6

patch from dan Thu, 09 Feb 2006 13:39:41 -0500

Chris PeBenito • 19 years ago

b0d224

do not remove intermediate files

Chris PeBenito • 19 years ago

e60b98

a few fixes

Chris PeBenito • 19 years ago

0e686f

*** empty log message ***

Daniel J Walsh • 19 years ago

cb99f7

*** empty log message ***

Daniel J Walsh • 19 years ago

847884

*** empty log message ***

Daniel J Walsh • 19 years ago

32b871

*** empty log message ***

Daniel J Walsh • 19 years ago

faa80b

xml building changes, add desc tag to booleans, add summary tag to bools

Chris PeBenito • 19 years ago

885b83

patch from Serge Hallyn Thu, 09 Feb 2006 13:42:36 -0600, plus fix the rules in the TODO.

Chris PeBenito • 19 years ago

977840

fix process object class assertion for hierarchy

Chris PeBenito • 19 years ago

e0dfbd

*** empty log message ***

Daniel J Walsh • 19 years ago

8f44ab

*** empty log message ***

Daniel J Walsh • 19 years ago

5a8299

add rpm install instructions

Chris PeBenito • 19 years ago

4ef756

work on xdm

Chris PeBenito • 19 years ago

5a975c

patch from dan Wed, 01 Feb 2006 08:33:30 -0500

Chris PeBenito • 19 years ago

955019

*** empty log message ***

Daniel J Walsh • 19 years ago

b28beb

fix sendto

Chris PeBenito • 19 years ago

37f15c

a couple init renames

Chris PeBenito • 19 years ago

f75479

*** empty log message ***

Daniel J Walsh • 19 years ago

a3a62a

fix kernel_relabel_unlabeled()

Chris PeBenito • 19 years ago

c66a3a

remove redundant userdom_manage_generic_user_home_dir interface

Chris PeBenito • 19 years ago

cd07ea

remove lvm_vg_t

Chris PeBenito • 19 years ago

017bab

clean up userdom_create_user_home()

Chris PeBenito • 19 years ago

9417cb

*** empty log message ***

Daniel J Walsh • 19 years ago

de82d8

fix userdom_create_sysadm_home

Chris PeBenito • 19 years ago

ee9500

another slew of renaming

Chris PeBenito • 19 years ago

1815ba

fix optional in fc, move contexts to their proper modules

Chris PeBenito • 19 years ago

46112f

fix compile problem

Chris PeBenito • 19 years ago

3284fb

status update

Chris PeBenito • 19 years ago

6a0b25

fix a few fcs

Chris PeBenito • 19 years ago

8ff553

merge tvtime to trunk

Chris PeBenito • 19 years ago

b77d01

forgot to add if renaming to changelog

Chris PeBenito • 19 years ago

ffd5c3

remove unneeded gen_require_set() macro

Chris PeBenito • 19 years ago

e52af2

move example makefile to doc

Chris PeBenito • 19 years ago

5bd1a7

genhomedircon stuff only for strict

Chris PeBenito • 19 years ago

6018e9

genhomedircon stuff only for strict

Chris PeBenito • 19 years ago

6bc40e

install-docs target, consolidate relabeling

Chris PeBenito • 19 years ago

120988

*** empty log message ***

Daniel J Walsh • 19 years ago

38c806

add example module.

Chris PeBenito • 19 years ago

6bb0da

fix for lineno and filename attributes

Chris PeBenito • 19 years ago

bff1ce

fix xml

Chris PeBenito • 19 years ago

fe2102

add mrtg, bug 1394

Chris PeBenito • 19 years ago

679626

renaming from 20060131 interface review, round 4

Chris PeBenito • 19 years ago

4d851f

renaming from 20060131 interface review, round 3

Chris PeBenito • 19 years ago

9e04f5

renaming from 20060131 interface review, round 2

Chris PeBenito • 19 years ago

445522

renaming from 20060131 interface review

Chris PeBenito • 19 years ago

207c47

fix documentation

Chris PeBenito • 19 years ago

157610

- Update to upstream

Daniel J Walsh • 19 years ago

681c9d

merge xdm into xserver

Chris PeBenito • 19 years ago

0f5d13

remove kernel module reversed interfaces.

Chris PeBenito • 19 years ago

18cc01

remove all class remaining lines with kernel object classes.

Chris PeBenito • 19 years ago

6ada25

missed status update

Chris PeBenito • 19 years ago

9d5606

update status

Chris PeBenito • 19 years ago

575e26

- Update to upstream

Daniel J Walsh • 19 years ago

737432

- Update to upstream

Daniel J Walsh • 19 years ago

332537

- Update to upstream

Daniel J Walsh • 19 years ago

70d9b4

fix

Chris PeBenito • 19 years ago

bd9092

patch from dan Fri, 27 Jan 2006 01:37:19 -0500

Chris PeBenito • 19 years ago

51a89c

from today's interface review meeting:

Chris PeBenito • 19 years ago

270d42

add line number and file name to xml, from selide people

Chris PeBenito • 19 years ago

585076

- Update to upstream

Daniel J Walsh • 19 years ago

78265f

add headers and outside tree building support

Chris PeBenito • 19 years ago

9b3756

add text for rolemap

Chris PeBenito • 19 years ago

6259d8

improve comments

Chris PeBenito • 19 years ago

8c4989

add rolemap/per-userdomain infrastructure

Chris PeBenito • 19 years ago

4ace0f

- Add inotifyfs handling

Daniel J Walsh • 19 years ago

b6e6b5

- Update to upstream

Daniel J Walsh • 19 years ago

e76bab

remove newrole privs from su and sudo

Chris PeBenito • 19 years ago

5e4cbc

override doesnt do anything for +=, use ?= assignment to simplify NAME assignment.

Chris PeBenito • 19 years ago

3f026a

nicer way of doing fallback

Chris PeBenito • 19 years ago

a4fae7

Add ctags Make target from Thomas Bleher.

Chris PeBenito • 19 years ago

37227d

- Many changes for MLS

Daniel J Walsh • 19 years ago

7dc3bd

patch from dan

Chris PeBenito • 19 years ago

a52492

fix xml

Chris PeBenito • 19 years ago

59d721

add fix for secadm_r. I dont like this, but it can be straightened out later.

Chris PeBenito • 19 years ago

ba35e4

reverse last change

Chris PeBenito • 19 years ago

18d59e

cleanup

Chris PeBenito • 19 years ago

6b5c92

- Many changes for MLS

Daniel J Walsh • 19 years ago

a3b5c3

- Update to upstream

Daniel J Walsh • 19 years ago

129ba1

fix EOL extra space

Chris PeBenito • 19 years ago

c43ecf

Collapse commands with grep piped to sed into one sed command.

Chris PeBenito • 19 years ago

7dca64

add home_domain()

Chris PeBenito • 19 years ago

908390

remove unneeded dependency for generated_definitions.conf

Chris PeBenito • 19 years ago

6b1c8e

fix sshd

Chris PeBenito • 19 years ago

f6abfd

add missing if

Chris PeBenito • 19 years ago

d14c0e

fix user pty type_change

Chris PeBenito • 19 years ago

1e786e

more xdm work

Chris PeBenito • 19 years ago

07620c

last bits of xserver

Chris PeBenito • 19 years ago

3b3113

add xauth and iceauth to xserver

Chris PeBenito • 19 years ago

acd87c

work on xdm

Chris PeBenito • 19 years ago

dace0b

identity changes from dan

Chris PeBenito • 19 years ago

924c0f

patch from Dan, sent Thu, 19 Jan 2006 14:16:26 -0500

Chris PeBenito • 19 years ago

a225f9

fixes from serge

Chris PeBenito • 19 years ago

85c20a

forgot to bump version

Chris PeBenito • 19 years ago

55f1ef

add xserver

Chris PeBenito • 19 years ago

488ec7

login fixes and pieces of xserver

Chris PeBenito • 19 years ago

2ce6b0

formatting fixes

Chris PeBenito • 19 years ago

c1904d

- Update to upstream

Daniel J Walsh • 19 years ago

30a020

- Update to upstream

Daniel J Walsh • 19 years ago

2a8b98

add execstack and execheap to unconfined domain exclusion

Chris PeBenito • 19 years ago

edb77e

hopefuly final fix for run_init

Chris PeBenito • 19 years ago

a49e2b

move certwatch to admin, its not a daemon

Chris PeBenito • 19 years ago

92268c

give info message for make html

Chris PeBenito • 19 years ago

2de03f

add lpr policy to lpd

Chris PeBenito • 19 years ago

8dca6b

add certwatch

Chris PeBenito • 19 years ago

2bcdbd

fixes from dan

Chris PeBenito • 19 years ago

0a7728

Change initrc_var_run_t interface noun from script_pid to utmp for clarity.

Chris PeBenito • 19 years ago

68228b

there is no initrc_var_run_t:dir

Chris PeBenito • 19 years ago

b94cc1

add userhelper

Chris PeBenito • 19 years ago

7c2f5a

really fix the build problems

Chris PeBenito • 19 years ago

6d1409

fix compile errors

Chris PeBenito • 19 years ago

625cae

move stray bin_t entry

Chris PeBenito • 19 years ago

6b86ef

add portage from gentoo

Chris PeBenito • 19 years ago

e1c414

fix run_init constraint problem

Chris PeBenito • 19 years ago

fe9b05

add usernetctl.

Chris PeBenito • 19 years ago

8cc494

- Update to upstream

Daniel J Walsh • 19 years ago

05207b

update for release

Chris PeBenito • 19 years ago

26deab

update for release.

Chris PeBenito • 19 years ago

22cb0b

bump versions for release.

Chris PeBenito • 19 years ago

d3d270

- Update to upstream

Daniel J Walsh • 19 years ago

a1c584

- Update to upstream

Daniel J Walsh • 19 years ago

2e7147

patch from dan 1/16/06

Chris PeBenito • 19 years ago

93727e

- Update to upstream

Daniel J Walsh • 19 years ago

cdab5c

fix encapsulation problem

Chris PeBenito • 19 years ago

cc5df2

fix module building problems.

Chris PeBenito • 19 years ago

76b519

fix typos and formatting

Chris PeBenito • 19 years ago

f40b36

add corenet patch from spencer

Chris PeBenito • 19 years ago

b7b1d2

add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.

Chris PeBenito • 19 years ago

44d5d9

add slocate from dan

Chris PeBenito • 19 years ago

6a57b6

- Update to upstream

Daniel J Walsh • 19 years ago

7ba8b0

update checkpolicy required version

Chris PeBenito • 19 years ago

ebc7df

rename create verb to filetrans for type transitioning ifs

Chris PeBenito • 19 years ago

ce96df

rename create verb to filetrans for type transitioning ifs

Chris PeBenito • 19 years ago

9d5949

fix comments, clean out object classes

Chris PeBenito • 19 years ago

836929

interface-ize screen fixes

Chris PeBenito • 19 years ago

22d2e2

fix comments

Chris PeBenito • 19 years ago

460e05

fixes to make screen work

Chris PeBenito • 19 years ago

038bd3

add cdrecord

Chris PeBenito • 19 years ago

4ec694

add java

Chris PeBenito • 19 years ago

3ffe29

fix alignment

Chris PeBenito • 19 years ago

c5af97

fix expansion of interfaces from disabled modules.

Chris PeBenito • 19 years ago

e0a900

rsync --daemon is long running, and can be run from an init script.

Chris PeBenito • 19 years ago

de9408

add alsa

Chris PeBenito • 19 years ago

de8af9

- fix pup transitions (#177262)

Jeremy Katz • 19 years ago

b9b2d8

Petre Rodan will take care of some djbware

Chris PeBenito • 19 years ago

50b089

add prelink.

Chris PeBenito • 19 years ago

2c2435

update

Chris PeBenito • 19 years ago

3c4d75

- Update to upstream

Daniel J Walsh • 19 years ago

640128

disable builtin targets except for .c (for fcsort)

Chris PeBenito • 19 years ago

b8c798

add lockdev

Chris PeBenito • 19 years ago

1ae2c3

add roundup.

Chris PeBenito • 19 years ago

7e0fa5

fix

Chris PeBenito • 19 years ago

7c1011

add usbmodules

Chris PeBenito • 19 years ago

44f490

fix role

Chris PeBenito • 19 years ago

e831e4

add screen

Chris PeBenito • 19 years ago

c8ba68

patch from dan.

Chris PeBenito • 19 years ago

a77e65

woops

Chris PeBenito • 19 years ago

5a35c0

add polyinstantiation.

Chris PeBenito • 19 years ago

b07eae

- More Fixes for hal and readahead

Daniel J Walsh • 19 years ago

ef1477

minor cleanups

Chris PeBenito • 19 years ago

d163a4

add logwatch

Chris PeBenito • 19 years ago

020cbe

- Fixes for hal and readahead

Daniel J Walsh • 19 years ago

e485f5

remove unneeded rule

Chris PeBenito • 19 years ago

5e98ea

- Update to upstream

Daniel J Walsh • 19 years ago

26e33d

update status

Chris PeBenito • 19 years ago

819ab6

forgot to update changelog for ipsec permission addition.

Chris PeBenito • 19 years ago

afd38b

part of dan's mega patch

Chris PeBenito • 19 years ago

bf080a

add irc

Chris PeBenito • 19 years ago

8cffa7

add setcontext to association class

Chris PeBenito • 19 years ago

765bd9

fix formatting

Chris PeBenito • 19 years ago

a317cd

- Handle new location of hal scripts

Daniel J Walsh • 19 years ago

a04c19

- Handle new location of hal scripts

Daniel J Walsh • 19 years ago

451d9b

- Allow su to read /etc/mtab

Daniel J Walsh • 19 years ago

008885

- Update to upstream

Daniel J Walsh • 19 years ago

aaa1fb

add slrnpull

Chris PeBenito • 19 years ago

1d427a

add readahead

Chris PeBenito • 19 years ago

6f11d6

- Update to upstream

Daniel J Walsh • 19 years ago

026fac

- Update to upstream

Daniel J Walsh • 19 years ago

286432

- Update to upstream

Daniel J Walsh • 19 years ago

a736f9

add openct

Chris PeBenito • 19 years ago

0e8ec4

fix spacing problem

Chris PeBenito • 19 years ago

56c1de

add ddcprobe

Chris PeBenito • 19 years ago

871079

add smartmon

Chris PeBenito • 19 years ago

871b68

fix typo in require block

Chris PeBenito • 19 years ago

fc4054

give dan credit for adding vbetool module

Chris PeBenito • 19 years ago

39a17e

- Fix "libsemanage.parse_module_headers: Data did not represent a module."

Daniel J Walsh • 19 years ago

120d3b

- Allow load_policy to read /etc/mtab

Daniel J Walsh • 19 years ago

ce66f5

- Fix dovecot to allow dovecot_auth to look at /tmp

Daniel J Walsh • 19 years ago

1f3122

- Allow restorecon to read unlabeled_t directories in order to fix

Daniel J Walsh • 19 years ago

d7b05b

- Add Logwatch policy

Daniel J Walsh • 19 years ago

3607aa

- Add Logwatch policy

Daniel J Walsh • 19 years ago

a08ba8

- Fix /dev/ub[a-z] file context

Daniel J Walsh • 19 years ago

798572

- Fix library specification

Daniel J Walsh • 19 years ago

9f7b03

- Fix hostname in targeted policy

Daniel J Walsh • 19 years ago

596229

- Fix passwd command on mls

Daniel J Walsh • 19 years ago

5a47e6

- Lots of fixes to make mls policy work

Daniel J Walsh • 19 years ago

71ee99

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 19 years ago

6e9ee7

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 19 years ago

9d20b2

- Add man pages

Daniel J Walsh • 19 years ago

1335ee

- Add enableaudit.pp

Daniel J Walsh • 19 years ago

315b4a

- Fix mls policy

Daniel J Walsh • 19 years ago

105bbf

- Update mls file from old version

Daniel J Walsh • 19 years ago

ecb726

- Update mls file from old version

Daniel J Walsh • 19 years ago

a587fa

- Update mls file from old version

Daniel J Walsh • 19 years ago

0c9f87

- Add sids back in

Daniel J Walsh • 19 years ago

dce316

- Fixes to allow automount to use portmap

Daniel J Walsh • 19 years ago

9ce97a

- Add java unconfined/execmem policy

Daniel J Walsh • 19 years ago

1c8602

- Add file context for /var/cvs

Daniel J Walsh • 19 years ago

1ef62f

- Add file context for /var/cvs

Daniel J Walsh • 19 years ago

1f0075

another patch from dan

Chris PeBenito • 19 years ago

cd6676

- Update from upstream

Daniel J Walsh • 19 years ago

504da9

policy-20051208.patch

Chris PeBenito • 19 years ago

9cca1c

fixes

Chris PeBenito • 19 years ago

be1e6e

- Fixes for hal

Daniel J Walsh • 19 years ago

e24a8b

- Fixes for hal

Daniel J Walsh • 19 years ago

1ff14a

stuff from dan

Chris PeBenito • 19 years ago

bb4372

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 19 years ago

d8566e

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 19 years ago

7171df

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 19 years ago

cfcb30

- Allow gpm to stream socket to itself

Daniel J Walsh • 19 years ago

afa8a2

- Allow gpm to stream socket to itself

Daniel J Walsh • 19 years ago

57c18f

- fix requirements to be on the actual packages so that policy can get

Jeremy Katz • 19 years ago

eb190f

fix errors reported on fedora-se ml

Chris PeBenito • 19 years ago

4ac451

fix comment

Chris PeBenito • 19 years ago

0c4bf1

fix ptracing of all domains

Chris PeBenito • 19 years ago

60caa3

fix interface

Chris PeBenito • 19 years ago

3b4da4

rename texrel_shlib_t to textrel_shlib_t

Chris PeBenito • 19 years ago

a324ef

pax mistakenly marked as userspace

Chris PeBenito • 19 years ago

f2e1f2

- Allow unconfined_t to execmod texrel_shlib_t

Daniel J Walsh • 19 years ago

9e85a8

- Update to upstream

Daniel J Walsh • 19 years ago

d4da53

add swat to samba, and fix an automount mistake

Chris PeBenito • 19 years ago

cbe327

- Add two new httpd booleans, turned off by default

Daniel J Walsh • 19 years ago

e1ccb6

bump vers

Chris PeBenito • 19 years ago

d457d0

add automount

Chris PeBenito • 19 years ago

7576fa

- Add ghost for policy.20

Daniel J Walsh • 19 years ago

7c94e8

fix module versions

Chris PeBenito • 19 years ago

5ea24b

policy-20051208.patch from dan, plus a few adjustments

Chris PeBenito • 19 years ago

049e11

- Update to upstream

Daniel J Walsh • 19 years ago

6f5a3b

- Change setrans-mls to use new libsetrans

Daniel J Walsh • 19 years ago

c6c498

credit dan for patches

Chris PeBenito • 19 years ago

b64a0e

make common template

Chris PeBenito • 19 years ago

8ba1bd

configuration files for automount.

Ryan Haggerty • 19 years ago

44656a

- Change Requires to PreReg for requiring of policycoreutils on install

Daniel J Walsh • 19 years ago

12e089

add fetchmail

Chris PeBenito • 19 years ago

a089b6

fix compile errors

Chris PeBenito • 19 years ago

9667c1

add sysstat

Chris PeBenito • 19 years ago

0f73fd

Add xdm policy

Daniel J Walsh • 19 years ago

97bd2a

update

Chris PeBenito • 19 years ago

686f13

fix typo

Chris PeBenito • 19 years ago

c0626a

update

Chris PeBenito • 19 years ago

8c1db6

update for release

Chris PeBenito • 19 years ago

e2e986

update for release

Chris PeBenito • 19 years ago

885e75

update for release

Chris PeBenito • 19 years ago

cd1b0b

fix

Chris PeBenito • 19 years ago

2d54b8

remove testing configuration for release

Chris PeBenito • 19 years ago

cb1d1e

add fc5t2 targeted modules.conf

Chris PeBenito • 19 years ago

3233e2

Update from upstream

Daniel J Walsh • 19 years ago

46a906

pre-release update

Chris PeBenito • 19 years ago

67b899

add non ipsec asssoc rule

Chris PeBenito • 19 years ago

b9d3b2

add unlabeled association rules

Chris PeBenito • 19 years ago

bd7037

Update from upstream

Daniel J Walsh • 19 years ago

913e47

fix module compile issues

Chris PeBenito • 19 years ago

439aaa

policy-20051114.patch from dan

Chris PeBenito • 19 years ago

3c8f6b

fix

Chris PeBenito • 19 years ago

ffd048

Update from upstream

Daniel J Walsh • 19 years ago

a1e07b

Update from upstream

Daniel J Walsh • 19 years ago

475186

updates

Chris PeBenito • 19 years ago

35bb02

merge systemuser back in to users

Chris PeBenito • 19 years ago

bdb2fa

clean up

Chris PeBenito • 19 years ago

fc0e8c

fix dupe interfaces

Chris PeBenito • 19 years ago

1470ff

add check for duplicate interface/template definitions

Chris PeBenito • 19 years ago

0176d1

add in daemon attrib

Chris PeBenito • 19 years ago

d337ec

add back rules that were mistakenly removed

Chris PeBenito • 19 years ago

f525b4

Update from upstream

Daniel J Walsh • 19 years ago

caeef1

- fix trigger (dwalsh looking over my shoulder)

Nalin Dahyabhai • 19 years ago

2b2203

many loadable module build fixes

Chris PeBenito • 19 years ago

6f81e1

loadable module build fixes

Chris PeBenito • 19 years ago

757207

move files, corecommands, and domain to kernel layer

Chris PeBenito • 19 years ago

058f3e

move build options out of Makefile into build.conf

Chris PeBenito • 19 years ago

8e0ef1

add i18n

Chris PeBenito • 19 years ago

4093c2

- No longer installing policy.20 file, anaconda handles the building of the

Daniel J Walsh • 19 years ago

28930b

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

bd7e86

add final bits of spamassassin

Chris PeBenito • 19 years ago

6820a3

patch from dan

Chris PeBenito • 19 years ago

78510c

fix several modular build problems

Chris PeBenito • 19 years ago

9fd4b8

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

4199dc

work on users

Chris PeBenito • 19 years ago

ac9aa2

fix kerberos_use, which turned out to be a problem in dns_reslove

Chris PeBenito • 19 years ago

574e63

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

a03362

bump rev

Chris PeBenito • 19 years ago

70fb22

clean up most of the mta hacks

Chris PeBenito • 19 years ago

1504ff

big cleanup of mta

Chris PeBenito • 19 years ago

08cd98

add irqbalance

Chris PeBenito • 19 years ago

5d5ea8

add timidity

Chris PeBenito • 19 years ago

f11f0c

add rdisc

Chris PeBenito • 19 years ago

19ff64

add yppasswdd to nis

Chris PeBenito • 19 years ago

131e57

remove rhgb_domain and update for optional_policy() behavior change

Chris PeBenito • 19 years ago

33d087

cleanup from sediff

Chris PeBenito • 19 years ago

09741b

add xfs

Chris PeBenito • 19 years ago

3f4188

clean up rpc hack

Chris PeBenito • 19 years ago

f00434

clean up networkmanager hacks

Chris PeBenito • 19 years ago

d828b5

fix so empty modules.conf check works

Chris PeBenito • 19 years ago

cf0ff5

patch from dan to remove rhgb and gph:fd use

Chris PeBenito • 19 years ago

2629c6

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

c1b022

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

25e721

Change optional_policy() to refer to the module name rather than modulename.te.

Chris PeBenito • 19 years ago

132880

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

21dea1

patch from dan

Chris PeBenito • 19 years ago

af2345

-Update to latest from upstream

Daniel J Walsh • 19 years ago

598be1

slew of updates and fixes

Chris PeBenito • 19 years ago

c45fa5

-Update to latest from upstream

Daniel J Walsh • 19 years ago

e38dc4

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

b33f08

merge makefile changes from branch

Chris PeBenito • 19 years ago

c767b1

add fc mls policy

Chris PeBenito • 19 years ago

31b7c0

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

765f81

- Start building MLS Policy

Daniel J Walsh • 19 years ago

d77f56

tweaks from dan

Chris PeBenito • 19 years ago

9cc2cc

fixes from dan

Chris PeBenito • 19 years ago

95f82b

- Start building MLS Policy

Daniel J Walsh • 19 years ago

a32f66

- Update to upstream

Daniel J Walsh • 19 years ago

e56873

- Update to upstream

Daniel J Walsh • 19 years ago

3e930b

- Update to upstream

Daniel J Walsh • 19 years ago

1a0a25

fix

Chris PeBenito • 19 years ago

c5c306

add last bits from dan

Chris PeBenito • 19 years ago

1d697c

updates from dan

Chris PeBenito • 19 years ago

37ff8f

fix superfluous network rules pointed out by dan walsh, and clean

Chris PeBenito • 19 years ago

1354ca

- Turn on bash

Daniel J Walsh • 19 years ago

205d3f

fix transitions in and out of unconfined. fix bugs uncovered by rawhide testing

Chris PeBenito • 19 years ago

704327

missed mls cat update

Chris PeBenito • 19 years ago

8b4eab

- Initial version

Daniel J Walsh • 19 years ago

f0b87c

update status

Chris PeBenito • 19 years ago

58252e

stray procmail execs

Chris PeBenito • 19 years ago

1dad08

add procmail

Chris PeBenito • 19 years ago

3e6c81

add in procmail

Chris PeBenito • 19 years ago

801b2a

clean up some hacks

Chris PeBenito • 19 years ago

c6d4c8

add patch from dan

Chris PeBenito • 19 years ago

7b062e

updated README

Ryan Haggerty • 19 years ago

a0f5ff

now how about this? do you like it? is it finally good enough for you?

Nalin Dahyabhai • 19 years ago

af6090

try this

Nalin Dahyabhai • 19 years ago

46e726

try anything

Nalin Dahyabhai • 19 years ago

f852dd

- Initial version

Daniel J Walsh • 19 years ago

be926a

- Initial version

Daniel J Walsh • 19 years ago

edb750

- Initial version

Daniel J Walsh • 19 years ago

cc9c9e

auto-import selinux-policy-2.0.0-0.6 on branch devel from

Daniel J Walsh • 19 years ago

1580c8

Setup of module selinux-policy

Daniel J Walsh • 19 years ago

ecb5ec

role hack for genhomedircon

Chris PeBenito • 19 years ago

3ed2b6

temp genhomedircon hack

Chris PeBenito • 19 years ago

de0d26

change dmesg and loadkeys behavior to aliasing, and enable modules

Chris PeBenito • 19 years ago

9e9138

more config files and updates.

Ryan Haggerty • 19 years ago

a8b62e

remove extra rule

Chris PeBenito • 19 years ago

0d5d74

more broken symptoms

Chris PeBenito • 19 years ago

15c235

hack

Chris PeBenito • 19 years ago

af8664

fix type transition conflicts

Chris PeBenito • 19 years ago

3be48f

fix ordering problem

Chris PeBenito • 19 years ago

17da25

fix rpm

Chris PeBenito • 19 years ago

7fefc1

reverse last change

Chris PeBenito • 19 years ago

175b1c

fix ordering

Chris PeBenito • 19 years ago

5ae908

fcsort integration moved to policy server repo

Chris PeBenito • 19 years ago

43373a

add debugging symbols

Chris PeBenito • 19 years ago

4fe05f

missing fc's

Chris PeBenito • 19 years ago

33ff9b

update rh broken symptoms

Chris PeBenito • 19 years ago

3ad26d

add initrc_tmp_t mountpoint

Chris PeBenito • 19 years ago

a6e32d

fix missing role statements

Chris PeBenito • 19 years ago

daff1d

small fixes

Chris PeBenito • 19 years ago

55290a

Configuration for mailman.

Ryan Haggerty • 19 years ago

e50d1d

changed rules fixes

Chris PeBenito • 19 years ago

2e0a88

work around role dominance breakage in module compiler

Chris PeBenito • 19 years ago

3797ef

missing matches

Chris PeBenito • 19 years ago

65b936

reorder to work around module compiler bug

Chris PeBenito • 19 years ago

672a15

turn off stuff not in original targeted

Chris PeBenito • 19 years ago

70fe5a

use role dominance in targeted for compatability with strict

Chris PeBenito • 19 years ago

37c852

fix changed rules

Chris PeBenito • 19 years ago

1904b0

missing matches

Chris PeBenito • 19 years ago

c6825e

fc fixes

Chris PeBenito • 19 years ago

c2e35b

add missing bin_t aliases

Chris PeBenito • 19 years ago

c646a9

Added configurations for testing tcpd.

Ryan Haggerty • 19 years ago

5211b0

add missing /var/yp match

Chris PeBenito • 19 years ago

51f374

correct shlib_t alias

Chris PeBenito • 19 years ago

33faf5

add avahi

Chris PeBenito • 19 years ago

59a00d

install booelans file on monolithic

Chris PeBenito • 19 years ago

2ed0d1

dont install booleans file anymore

Chris PeBenito • 19 years ago

ce1e89

fix to use real type rather than alias

Chris PeBenito • 19 years ago

e3d21d

fixes for sorting

Chris PeBenito • 19 years ago

2ab07e

add avahi

Chris PeBenito • 19 years ago

4b9516

add avahi

Chris PeBenito • 19 years ago

062e17

more fix

Chris PeBenito • 19 years ago

d3f715

tty fixes

Chris PeBenito • 19 years ago

3e639a

pile of sediff fixes

Chris PeBenito • 19 years ago

725926

commented out cipher config options.

Ryan Haggerty • 19 years ago

f68326

Fixing configuration files.

Ryan Haggerty • 19 years ago

42fc9a

fix sendmail transition

Chris PeBenito • 19 years ago

76febd

merge in some of dan's old policy changes

Chris PeBenito • 19 years ago

8967bf

for now don't delete generated files. bring this back

Chris PeBenito • 19 years ago

cd508d

Changed a { create rw_dir_perms } to a create_dir_perms since starting radius was getting a setattr denial and setattr was shown to be missing in sediff

Don Miner • 19 years ago

bc6dfa

Added signal_perms to nscd_t.

Don Miner • 19 years ago

45aa10

missing dir

Chris PeBenito • 19 years ago

307e11

user tty fixes

Chris PeBenito • 19 years ago

7afca0

add stuff from distros.fc

Chris PeBenito • 19 years ago

9c6feb

adding some config files for kerberos.

Ryan Haggerty • 19 years ago

e6f94f

Added rules so that tracepath, traceroute and ping work.

Don Miner • 19 years ago

8f882f

adding configuration for spamassassin.

Ryan Haggerty • 19 years ago

b909ac

fixes just so sediff is easier to handle

Chris PeBenito • 19 years ago

73ef29

hack

Chris PeBenito • 19 years ago

b48801

clean up last var_run_domain expansion errors

Chris PeBenito • 19 years ago

b9ea0f

tweak inconsistencies in old policy to make them consistent with refpol, to make sediff easier to handle

Chris PeBenito • 19 years ago

168f5b

read certs

Chris PeBenito • 19 years ago

ee08bc

clean up socket

Chris PeBenito • 19 years ago

35adb6

fix filesystem associations

Chris PeBenito • 19 years ago

31a1c2

tty and caps fixes

Chris PeBenito • 19 years ago

7ac225

more dbus cleanup

Chris PeBenito • 19 years ago

0b12fa

dbus obj class cleanup

Chris PeBenito • 19 years ago

dab808

more of the same

Chris PeBenito • 19 years ago

ce0ff1

initrc couldn't create/use its own pty!

Chris PeBenito • 19 years ago

b422aa

more fixes

Chris PeBenito • 19 years ago

30910b

Added a rule to allow dmidecode to use locallogin_t fd to make it so it works.

Don Miner • 19 years ago

305106

add missing httpd_helper_t tty part

Chris PeBenito • 19 years ago

aba9c7

misc sediff fixes

Chris PeBenito • 19 years ago

9ca7e7

* fixes uncovered by sediff

Chris PeBenito • 19 years ago

0500e0

add missing tunable

Chris PeBenito • 19 years ago

bea7b4

fix perm set

Chris PeBenito • 19 years ago

6ff85b

Added telnet configuration instructions.

Don Miner • 19 years ago

577760

fixes uncovered by sediff

Chris PeBenito • 19 years ago

628417

nicer te_trans conflict fix

Chris PeBenito • 19 years ago

f3936d

fix te_trans conflict

Chris PeBenito • 19 years ago

cac3ec

fix up sendmail for targeted

Chris PeBenito • 19 years ago

dc8f17

Adding configuration for stunnel test (using stunnel to tunnel rsync traffic)

Ryan Haggerty • 19 years ago

9cb7c2

fix

Chris PeBenito • 19 years ago

f1b0a8

take care of missing types

Chris PeBenito • 19 years ago

2d13f7

ssh updates for targeted

Chris PeBenito • 19 years ago

375c24

clean up unused booleans

Chris PeBenito • 19 years ago

cbdb4a

updated modules.conf from dan

Chris PeBenito • 19 years ago

bce06f

typo

Chris PeBenito • 19 years ago

f0f18e

add missing range transition

Chris PeBenito • 19 years ago

495a70

adding configuration for rsync.

Ryan Haggerty • 19 years ago

b7cb7a

initrc fixes

Chris PeBenito • 19 years ago

005a9a

fix quoting

Chris PeBenito • 19 years ago

7e1c14

fixes from testing

Chris PeBenito • 19 years ago

dd3544

dhcp configuration added.

Ryan Haggerty • 19 years ago

7e1e18

Configuration for bind added.

Ryan Haggerty • 19 years ago

cf14e4

change of file names.

Ryan Haggerty • 19 years ago

8fb15d

adding ldap configuration files and README.

Ryan Haggerty • 19 years ago

689417

put all users back into the base module

Chris PeBenito • 19 years ago

2f33cd

fix some /opt regexes

Chris PeBenito • 19 years ago

f1baed

dont remove home dir templates from base.fc

Chris PeBenito • 19 years ago

05c6f0

testing configurations

Chris PeBenito • 19 years ago

bc87f4

more transition work

Chris PeBenito • 19 years ago

08c22f

add some missing transitions from unconfined

Chris PeBenito • 19 years ago

b281bf

sediff fixes

Chris PeBenito • 19 years ago

a525f2

fixes from sediff

Chris PeBenito • 19 years ago

fc6198

rpc fixes from testing

Chris PeBenito • 19 years ago

ce0383

fixes from testing

Chris PeBenito • 19 years ago

5abea9

more fixing

Chris PeBenito • 19 years ago

4614e8

Added search and getattr permissions to etc_mail_t dir for system_mail_t so that the sendmail process would be able to start through init

Don Miner • 19 years ago

f13da8

another pile o fixes

Chris PeBenito • 19 years ago

d1b9d9

pile o fixes

Chris PeBenito • 19 years ago

33acca

fix rpm transition

Chris PeBenito • 19 years ago

f5e4f7

fixes from arpwatch testing

Chris PeBenito • 19 years ago

e8d0a6

a few more strays

Chris PeBenito • 19 years ago

7a6d42

try to fix associations

Chris PeBenito • 19 years ago

c3cf66

privfd

Chris PeBenito • 19 years ago

b7e182

easy fixes

Chris PeBenito • 19 years ago

ccfd7b

missing privloggers

Chris PeBenito • 19 years ago

2526a4

typo

Chris PeBenito • 19 years ago

ee64ef

initrc also uses nscd

Chris PeBenito • 19 years ago

d49d52

add missing nscd clients

Chris PeBenito • 19 years ago

e11d2e

use our own interface to make maintenance easier

Chris PeBenito • 19 years ago

2aec14

add default_t read back

Chris PeBenito • 19 years ago

7eec65

privhome implementation

Chris PeBenito • 19 years ago

784a3b

testing fixes

Chris PeBenito • 19 years ago

7b90f2

add dontaudit

Chris PeBenito • 19 years ago

51f5c6

system_chkpwd can winbind

Chris PeBenito • 19 years ago

467602

syslog logs to itself?

Chris PeBenito • 19 years ago

b0bdeb

use the right interface

Chris PeBenito • 19 years ago

2c216c

some home dir fixes

Chris PeBenito • 19 years ago

9aca49

appconfig side of su fix

Chris PeBenito • 19 years ago

240a3a

fix up su

Chris PeBenito • 19 years ago

83e451

make implicit work

Chris PeBenito • 19 years ago

a662d2

new semodule_package cmdline args

Chris PeBenito • 19 years ago

2964dc

fixes

Chris PeBenito • 19 years ago

60789e

module build fixes

Chris PeBenito • 19 years ago

28e730

homedir fixes

Chris PeBenito • 19 years ago

9dd500

more postfix work

Chris PeBenito • 19 years ago

88dd38

Moved the dbus stuff inbetween networkmanager and bind to the bind policy

Don Miner • 19 years ago

2192d4

hide broken symptoms

Chris PeBenito • 19 years ago

3df88d

hide broken symtoms

Chris PeBenito • 19 years ago

ee7f66

fix acct

Chris PeBenito • 19 years ago

52e1ed

fix again

Chris PeBenito • 19 years ago

40a1f3

Fixed an allow that should have been a dontaudit

Don Miner • 19 years ago

d2c573

add nscd

Chris PeBenito • 19 years ago

977b1d

fix most disable_trans errors

Chris PeBenito • 19 years ago

69dcd6

Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages

Don Miner • 19 years ago

f470a1

Reduced the number of differences in amanda between the targeted and the refpolicy

Don Miner • 19 years ago

c11417

woops

Chris PeBenito • 19 years ago

87ab63

fix most of samba

Chris PeBenito • 19 years ago

671673

Removed differences between refpolicy and targeted acct_t

Don Miner • 19 years ago

bdfa8e

Removed differences between refpolicy and targeted NetworkManager_t

Don Miner • 19 years ago

9c4fcf

add proc_net lnk

Chris PeBenito • 19 years ago

7ebd6a

hopefully fix su

Chris PeBenito • 19 years ago

b4e1eb

fixes

Chris PeBenito • 19 years ago

30705b

more fix

Chris PeBenito • 19 years ago

9bbc75

Fixed a problem which was allowing processes to become unconfined from initrc

Don Miner • 19 years ago

0354e3

Added rules to the bind policy for the named server so that it would start

Don Miner • 19 years ago

dd57ca

Added signal permissions to postgres so it can start

Don Miner • 19 years ago

57d8e6

corenet fixes

Chris PeBenito • 19 years ago

162dfc

add configuration for testing

Chris PeBenito • 19 years ago

a3754f

update ranges

Chris PeBenito • 19 years ago

37fe0e

fix

Chris PeBenito • 19 years ago

e64b33

fixes from chad

Chris PeBenito • 19 years ago

9d343a

add

Chris PeBenito • 19 years ago

88e5d7

remove bin policy and kern module assertions for now

Chris PeBenito • 19 years ago

15fefa

fix mls r_t

Chris PeBenito • 19 years ago

1480d3

more sediff

Chris PeBenito • 19 years ago

34e722

Added rules to the smbd_t and the nmbd_t domains so that they would start properly

Don Miner • 19 years ago

fa16f2

sediff fixes

Chris PeBenito • 19 years ago

1dd86c

add initrc_su_t

Chris PeBenito • 19 years ago

bb6763

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Don Miner • 19 years ago

3d37bc

more missing types

Chris PeBenito • 19 years ago

710791

more fixes

Chris PeBenito • 19 years ago

19b555

add rpc

Chris PeBenito • 19 years ago

43989f

fixes from sediff

Chris PeBenito • 19 years ago

2db2c7

Added a file context for httpd.pid so that it is correctly labeled

Don Miner • 19 years ago

f8964c

add dan's config

Chris PeBenito • 19 years ago

60de98

nwmgr fixes

Chris PeBenito • 19 years ago

f85544

add cups

Chris PeBenito • 19 years ago

ef5ca0

add postfix

Chris PeBenito • 19 years ago

04926d

add spamassassin

Chris PeBenito • 19 years ago

f932d8

add radius

Chris PeBenito • 19 years ago

385dcd

add radius and amanda, which I forgot to ci

Chris PeBenito • 19 years ago

44fc06

add pegasus

Chris PeBenito • 19 years ago

230838

add dbskk

Chris PeBenito • 19 years ago

a63621

add lpd

Chris PeBenito • 19 years ago

ad3b9d

simplify since alias take care of it

Chris PeBenito • 19 years ago

ae1d9a

add amanda

Chris PeBenito • 19 years ago

10b1f3

add networkmanager

Chris PeBenito • 19 years ago

239db5

woops, radius wasn't actually completed

Chris PeBenito • 19 years ago

ebed41

expand gen_context() in file contexts

Chris PeBenito • 19 years ago

ae9017

interlace monolithic and modular to catch errors in modular w/o going through all monolithic tests first

Chris PeBenito • 19 years ago

959fca

more sediff fixes

Chris PeBenito • 19 years ago

1f8a8b

more fixes

Chris PeBenito • 19 years ago

e6a2ea

sediff fixes

Chris PeBenito • 19 years ago

da4fc9

add 1.27.1-22 targeted policy

Chris PeBenito • 19 years ago

ab58ad

add xdm

Chris PeBenito • 19 years ago

23a444

add canna

Chris PeBenito • 19 years ago

350948

fix

Chris PeBenito • 19 years ago

fe7b94

add cyrus

Chris PeBenito • 19 years ago

ea557a

add all target to build base and modules

Chris PeBenito • 19 years ago

06a536

add dovecot

Chris PeBenito • 19 years ago

29ce00

fix corenetwork generation and add distcc

Chris PeBenito • 19 years ago

cf6141

obj class typo for certs

Chris PeBenito • 19 years ago

4e69c1

make DISTRO=redhat imply DIRECT_INITRC=y

Chris PeBenito • 19 years ago

2b01ae

complete build tools

Chris PeBenito • 19 years ago

fdef43

release

Chris PeBenito • 19 years ago

a4e8b7

update for 20051019 release

Chris PeBenito • 19 years ago

862a1e

add missing entry

Chris PeBenito • 19 years ago

61feb2

targeted policy fixes

Chris PeBenito • 19 years ago

de7649

targeted and distro fixes for loadable modules

Chris PeBenito • 19 years ago

af4752

fix last loadable module problems

Chris PeBenito • 19 years ago

0efe52

fix requires

Chris PeBenito • 19 years ago

90c3dd

piles of fixes for loadable modules

Chris PeBenito • 19 years ago

12ae75

merge 1.27.10 changes

Chris PeBenito • 19 years ago

5a3b36

misc fixes

Chris PeBenito • 19 years ago

c38127

error out if trying to build a module thats off or base

Chris PeBenito • 19 years ago

843132

add more docs

Chris PeBenito • 19 years ago

97749e

fix error uncovered by sechecker

Chris PeBenito • 19 years ago

c3a05c

wrap up almost all of apache

Chris PeBenito • 19 years ago

e749cd

update 20051014

Chris PeBenito • 19 years ago

4615d8

more merging

Chris PeBenito • 19 years ago

1f11ac

add ppp

Chris PeBenito • 19 years ago

e08118

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

fe9d17

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

65a252

merge 1.27.8 and 1.27.9

Chris PeBenito • 19 years ago

f9d771

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

d8636f

partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15

Chris PeBenito • 19 years ago

77f6e2

merging 1.27.1-15

Chris PeBenito • 19 years ago

c0c701

start moving around to prep for 1.27.1-15 update

Chris PeBenito • 19 years ago

f721a4

add some docs, do some reordering

Chris PeBenito • 19 years ago

b1421d

add sechecker targets

Chris PeBenito • 19 years ago

8df65f

start adding perm sets with refpol names

Chris PeBenito • 19 years ago

c4bf97

add missing interface

Chris PeBenito • 19 years ago

4c7199

add in last bits of webalizer

Chris PeBenito • 19 years ago

be4690

more apache work

Chris PeBenito • 19 years ago

c2b18f

mailman is done

Chris PeBenito • 19 years ago

891a84

add mailman

Chris PeBenito • 19 years ago

799a0b

add anonymous_domain

Chris PeBenito • 19 years ago

e9199f

update INSTALL and start work on README

Chris PeBenito • 19 years ago

fedd3c

add webalizer and sasl

Chris PeBenito • 19 years ago

f33561

add apm and arpwatch. fix implementation error on fs_getattr_all_files,

Chris PeBenito • 19 years ago

4483ee

add finger and bluetooth

Chris PeBenito • 19 years ago

d4dca5

partial mailman merge

Chris PeBenito • 19 years ago

9d3e33

fix files_exec_usr_src_files

Chris PeBenito • 19 years ago

99505c

* Updated to sedoctool to read bool files and tunable

Chris PeBenito • 19 years ago

4f9f30

temporarily add libselinux

Chris PeBenito • 19 years ago

473ea7

rename context_template() to gen_context()

Chris PeBenito • 19 years ago

e02c61

more apache work

Chris PeBenito • 19 years ago

6e99a6

add ftp

Chris PeBenito • 19 years ago

fc6524

fix comment

Chris PeBenito • 19 years ago

5bc9f3

add interfaces used in old anonymous_domain()

Chris PeBenito • 19 years ago

f4d7fd

misc fixes

Chris PeBenito • 19 years ago

114fc4

add most of apache

Chris PeBenito • 19 years ago

a996bd

more pieces of ftp

Chris PeBenito • 19 years ago

a5ec7c

20050928 update

Chris PeBenito • 19 years ago

ff8567

start adding secure_file_type implementation

Chris PeBenito • 19 years ago

a2868f

add winbind

Chris PeBenito • 19 years ago

79cde3

add in a couple missing rules

Chris PeBenito • 19 years ago

694248

status update

Chris PeBenito • 19 years ago

ca3c73

add in a few parts of ftp

Chris PeBenito • 19 years ago

246a60

add dmidecode

Chris PeBenito • 19 years ago

20e306

add in missing(!) rule for uses_shlib($1)

Chris PeBenito • 19 years ago

724a9f

add disable_trans support

Chris PeBenito • 19 years ago

b03f96

a few conditional cleanups

Chris PeBenito • 19 years ago

1f91e1

mls updates

Chris PeBenito • 19 years ago

8f6cbf

update reserved ports

Chris PeBenito • 19 years ago

e4aed1

add mls privileges

Chris PeBenito • 19 years ago

f0574f

comment fix

Chris PeBenito • 19 years ago

6d788d

add system_cron_entry and fix typo

Chris PeBenito • 19 years ago

a23ffe

add anaconda

Chris PeBenito • 19 years ago

9edc28

rework nis_use_ypbind since optionals dont work in conditionals

Chris PeBenito • 19 years ago

b9ae3a

add radvd, plus a few cleanups from sediff

Chris PeBenito • 19 years ago

fa6757

add kudzu

Chris PeBenito • 19 years ago

842859

remove classes from gen_requires, and disable net_raw for now

Chris PeBenito • 19 years ago

005841

fixes from sediff

Chris PeBenito • 19 years ago

681c9a

update with change to how classes are handled in gen_require

Chris PeBenito • 19 years ago

1d85c7

update on targeted config

Chris PeBenito • 19 years ago

556113

update for release

Chris PeBenito • 19 years ago

485586

move in uucp

Chris PeBenito • 19 years ago

685951

add missing line from var_run_domain

Chris PeBenito • 19 years ago

5ecee5

update for 20050922 release

Chris PeBenito • 19 years ago

44a4c2

add uucp

Chris PeBenito • 19 years ago

f7ba4a

testing fixes

Chris PeBenito • 19 years ago

b53f93

make system.users look nicer

Chris PeBenito • 19 years ago

fb2817

fix regex

Chris PeBenito • 19 years ago

90e497

fix system.users now that the gen_user macro is in support

Chris PeBenito • 19 years ago

1fb83a

fix for targeted

Chris PeBenito • 19 years ago

08c5c9

fix for removed example targeted config

Chris PeBenito • 19 years ago

996ae3

loadable module compile fixes

Chris PeBenito • 19 years ago

25c674

fix error with file common being output, not file class (unique perms were missing)

Chris PeBenito • 19 years ago

6e0542

attribute fixes

Chris PeBenito • 19 years ago

5fd4a1

targeted and redhat cleanups

Chris PeBenito • 19 years ago

142e9f

add priv_system_role

Chris PeBenito • 19 years ago

11ba8e

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 19 years ago

0e15cd

cvs and stunnel in

Chris PeBenito • 19 years ago

668be6

todo cleanup

Chris PeBenito • 19 years ago

3774e4

add cvs

Chris PeBenito • 19 years ago

93070c

add cpucontrol

Chris PeBenito • 19 years ago

921055

telnet and rlogin done

Chris PeBenito • 19 years ago

9dfe4e

add rlogin and telnet

Chris PeBenito • 19 years ago

4fd520

move stuff out of unused

Chris PeBenito • 19 years ago

343cd0

add appconfig for mls and mcs

Chris PeBenito • 19 years ago

c0e4fe

add stunnel

Chris PeBenito • 19 years ago

200f45

update status 20050919

Chris PeBenito • 19 years ago

355206

final updates from nsa cvs

Chris PeBenito • 19 years ago

a1fcff

a few module compile fixes

Chris PeBenito • 19 years ago

41c480

more upstream merging

Chris PeBenito • 19 years ago

cf6a7d

more upstream merging

Chris PeBenito • 19 years ago

cff75c

fix can_network_server expansion

Chris PeBenito • 19 years ago

a47ea6

add tftp

Chris PeBenito • 19 years ago

40adb5

add snmp

Chris PeBenito • 19 years ago

ccc597

more merging from nsa cvs

Chris PeBenito • 19 years ago

a08248

more updates

Chris PeBenito • 19 years ago

5493c2

more updates

Chris PeBenito • 19 years ago

98a8ea

more merging from nsa cvs

Chris PeBenito • 19 years ago

605ba2

cleanup

Chris PeBenito • 19 years ago

5a2649

add samba

Chris PeBenito • 19 years ago

84c922

require fix

Chris PeBenito • 19 years ago

4479b3

fixes for module compiling

Chris PeBenito • 19 years ago

71fe0f

add back missing rule from daemon_domain()

Chris PeBenito • 19 years ago

3c8c1b

make priority request nicer

Chris PeBenito • 19 years ago

25225b

last changes

Chris PeBenito • 19 years ago

7bdc0b

fix

Chris PeBenito • 19 years ago

a797f5

add unused directory to module status

Chris PeBenito • 19 years ago

e24981

more status for modules

Chris PeBenito • 19 years ago

f5bf2e

more merging of NSA CVS policy

Chris PeBenito • 19 years ago

0907bd

fix wrong interface in lock_domain()

Chris PeBenito • 19 years ago

83515f

begin merging in upstream NSA CVS changes

Chris PeBenito • 19 years ago

2705f9

fixes

Chris PeBenito • 19 years ago

777d80

add base mod changelog entry

Chris PeBenito • 19 years ago

082dcd

fixes to make base module compilable

Chris PeBenito • 19 years ago

712566

add first part of changes to make base module compilable

Chris PeBenito • 19 years ago

2e863f

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 19 years ago

0fdf3e

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 19 years ago

9ff300

add portmap

Chris PeBenito • 19 years ago

eb3cb6

add ktalk

Chris PeBenito • 19 years ago

d17b4d

add missing rules of other domains using inn

Chris PeBenito • 19 years ago

9b0640

fixes

Chris PeBenito • 19 years ago

d91350

update flask

Chris PeBenito • 19 years ago

964681

new release

Chris PeBenito • 19 years ago

541b7d

update for release

Chris PeBenito • 19 years ago

e376ad

misc fixes

Chris PeBenito • 19 years ago

763a5e

add inn

Chris PeBenito • 19 years ago

8d9352

fix

Chris PeBenito • 19 years ago

07b01c

misc fixes

Chris PeBenito • 19 years ago

603f90

add ntp

Chris PeBenito • 19 years ago

b11a75

typo

Chris PeBenito • 19 years ago

ce1b44

add dictd

Chris PeBenito • 19 years ago

ac0483

add hal

Chris PeBenito • 19 years ago

fdae8e

move dhcpd to dhcp

Chris PeBenito • 19 years ago

f344c0

add squid

Chris PeBenito • 19 years ago

0f707d

add dhcpd

Chris PeBenito • 19 years ago

7c8fc3

fix bugs uncovered from sediff

Chris PeBenito • 19 years ago

9d3bdc

fixes. move rhgb into TODO

Chris PeBenito • 19 years ago

aa8995

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 19 years ago

c0d156

finish remaining dbus bits

Chris PeBenito • 19 years ago

631ee4

add dbus

Chris PeBenito • 19 years ago

0c3d17

fix typos

Chris PeBenito • 19 years ago

6af06c

cosmetics

Chris PeBenito • 19 years ago

768283

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 19 years ago

6e6156

add mta stuff, fix inetd

Chris PeBenito • 19 years ago

1d1d21

fix up most of mta attribute insanity

Chris PeBenito • 19 years ago

246839

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 19 years ago

451c1e

make corecommands required

Chris PeBenito • 19 years ago

e5d452

doctool display for no interfaces or templates

Chris PeBenito • 19 years ago

a19e34

massive revision

Chris PeBenito • 19 years ago

f3791f

a few fixes

Chris PeBenito • 19 years ago

e7498c

remove status info on index, fix stale status on status page

Chris PeBenito • 19 years ago

698a4a

targeted status info

Chris PeBenito • 19 years ago

fd637c

more status update

Chris PeBenito • 19 years ago

b3e0af

missed a few

Chris PeBenito • 19 years ago

9074a2

update for release

Chris PeBenito • 19 years ago

c2ecf0

update for release

Chris PeBenito • 19 years ago

37aa3f

update config, switch most to module

Chris PeBenito • 19 years ago

9439a2

start adding in templated interfaces

Chris PeBenito • 19 years ago

2a9456

remove bad changelog date

Chris PeBenito • 19 years ago

d4df0a

add rpm spec skeleton

Chris PeBenito • 19 years ago

c6299b

fix quoting

Chris PeBenito • 19 years ago

6d1227

reformat for use in rpm

Chris PeBenito • 19 years ago

e28aa6

fix tunables

Chris PeBenito • 19 years ago

3110de

do bools until loadable modules support tunables

Chris PeBenito • 19 years ago

82024f

add bind

Chris PeBenito • 19 years ago

d83fda

add privoxy

Chris PeBenito • 19 years ago

902be0

add rsync

Chris PeBenito • 19 years ago

35ecf8

add howl

Chris PeBenito • 19 years ago

f9b11e

move require to right position, for modular policy

Chris PeBenito • 19 years ago

4b8c54

more comments

Chris PeBenito • 19 years ago

a6df70

remove comment about monolithic only supported

Chris PeBenito • 19 years ago

8b75b0

complete infrastructure support for building modules

Chris PeBenito • 19 years ago

c04f2a

mark userpace object classes

Chris PeBenito • 19 years ago

db93d7

moved to selinux module

Chris PeBenito • 19 years ago

f6e28a

for base module, only enable modules actually in it

Chris PeBenito • 19 years ago

28f032

change to point to tresys.com/selinux

Chris PeBenito • 19 years ago

55b104

change compile dir to /tmp since home dirs are ro to apache on sf

Chris PeBenito • 19 years ago

7abb9e

initial support for compiling loadable modules

Chris PeBenito • 19 years ago

fb0a3a

add gpm

Chris PeBenito • 19 years ago

f862c3

add ldap

Chris PeBenito • 19 years ago

2961e7

cleanup

Chris PeBenito • 19 years ago

23ca91

add rshd

Chris PeBenito • 19 years ago

545b0c

add regression tester

Chris PeBenito • 19 years ago

b51f2f

add firstboot

Chris PeBenito • 19 years ago

886907

add firstboot

Chris PeBenito • 19 years ago

57a96c

more debian cleanup

Chris PeBenito • 19 years ago

2d803e

make default for optional modules to module instead of base

Chris PeBenito • 19 years ago

a57379

fix broken xml of previous commit

Chris PeBenito • 19 years ago

4806a0

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 19 years ago

5f38a6

add loadkeys

Chris PeBenito • 19 years ago

21468a

more comments

Chris PeBenito • 19 years ago

884309

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 19 years ago

f0b1ef

quiet file context validation

Chris PeBenito • 19 years ago

c5a6dc

fix some udev naming

Chris PeBenito • 19 years ago

35b494

fix system spool file problem

Chris PeBenito • 19 years ago

aae06c

remove secdesc since desc is sufficient

Chris PeBenito • 19 years ago

d06f3c

finalize desc -> summary xml change

Chris PeBenito • 19 years ago

f7ebea

add tcpd

Chris PeBenito • 19 years ago

4aa0dc

fix no interface module handling in segenxml

Chris PeBenito • 19 years ago

e694b5

add quota

Chris PeBenito • 19 years ago

052c95

tabbing fix

Chris PeBenito • 19 years ago

5a3895

add sudo

Chris PeBenito • 19 years ago

e78430

add template xml

Chris PeBenito • 19 years ago

b9d7d7

add su

Chris PeBenito • 19 years ago

948914

fix gen_user comment for more clarity

Chris PeBenito • 19 years ago

946545

add updfstab

Chris PeBenito • 19 years ago

dce68d

fix xml tags

Chris PeBenito • 19 years ago

f5e321

a few more ssh touchups

Chris PeBenito • 19 years ago

7057c1

add tmpreaper

Chris PeBenito • 19 years ago

ed78ea

add acct

Chris PeBenito • 19 years ago

9a66d4

misc cleanup

Chris PeBenito • 19 years ago

3fd833

add back uses_shlib

Chris PeBenito • 19 years ago

7e40f1

add mysql

Chris PeBenito • 19 years ago

42be7c

search sbin dirs to find the pgms

Chris PeBenito • 19 years ago

046a21

* Rename ipsec connect interface for consistency.

Chris PeBenito • 19 years ago

81343a

clarify tmp_domain()

Chris PeBenito • 19 years ago

80a63c

update for release

Chris PeBenito • 19 years ago

8b1125

warn against using on production systems

Chris PeBenito • 19 years ago

369b50

update for release

Chris PeBenito • 19 years ago

d299d7

dont do a, since it preserves perms and users, which doesnt work on sf

Chris PeBenito • 19 years ago

959220

new release

Chris PeBenito • 19 years ago

52a902

new release

Chris PeBenito • 19 years ago

6db8e5

more updates for release

Chris PeBenito • 19 years ago

7c347c

add missing

Chris PeBenito • 19 years ago

60abb5

fix comparison bug

Chris PeBenito • 19 years ago

cd8fa4

move file context validation to install

Chris PeBenito • 19 years ago

96a150

fix stray line that got out of TODO

Chris PeBenito • 19 years ago

bbdbdb

work on user transition

Chris PeBenito • 19 years ago

e5590e

update

Chris PeBenito • 19 years ago

c13146

update version from last release

Chris PeBenito • 19 years ago

14c035

initial commit

Chris PeBenito • 19 years ago

01e30c

Fix handling of ordered and unordered HTML lists.

Chris PeBenito • 19 years ago

78d30c

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 19 years ago

022f61

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 19 years ago

50527c

update from privmail

Chris PeBenito • 19 years ago

953541

massive updates

Chris PeBenito • 19 years ago

7bb610

add an example module config for a targeted policy

Chris PeBenito • 19 years ago

80526c

/var/lib is now a mountpoint

Chris PeBenito • 19 years ago

ea7d57

unconfined can pass all constraints

Chris PeBenito • 19 years ago

53857c

name_connect only on tcp_sockets

Chris PeBenito • 19 years ago

ef424c

unconfined can name_connect to all ports

Chris PeBenito • 19 years ago

9496fd

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 19 years ago

d25063

bah typo

Chris PeBenito • 19 years ago

f82c6a

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 19 years ago

1e3f61

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

add new netlink socket class

Chris PeBenito • 19 years ago

21f477

more fixes for targeted

Chris PeBenito • 19 years ago

ec848d

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 19 years ago

f136a9

add pcmcia

Chris PeBenito • 19 years ago

316553

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

more updates

Chris PeBenito • 19 years ago

8125c9

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

add distro tunables. expand on a few comments

Chris PeBenito • 19 years ago

25a0c6

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix comments for templates to have same number of # as interfaces

Chris PeBenito • 19 years ago

20a227

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

improve display of tunables and booleans

Chris PeBenito • 19 years ago

34bbe5

add tun and bool descriptions

Chris PeBenito • 19 years ago

4d7511

initial global booleans and tunables support. also fix index

Chris PeBenito • 19 years ago

249d46

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

silly formatting fix

Chris PeBenito • 19 years ago

4d0d41

support for global booleans

Chris PeBenito • 19 years ago

c11958

* Added support for layer summaries.

Chris PeBenito • 19 years ago

acb668

tag for 20050707 release

Chris PeBenito • 19 years ago

58c777

update for 20050707 release

Chris PeBenito • 19 years ago

767266

add changelog

Chris PeBenito • 19 years ago

dfa83e

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa526

support for targeted policy

Chris PeBenito • 19 years ago

c98340

put back to strict. will have separate strict and targeted appconfig

Chris PeBenito • 19 years ago

83ce67

validate file contexts

Chris PeBenito • 19 years ago

14b25b

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

quiet the awk if modules.conf doesnt exist

Chris PeBenito • 19 years ago

a3fdce

- Removed OUTPUT_VERSION as default.

Karl MacMillan • 19 years ago

ebb884

update appconfig for unconfined login

Chris PeBenito • 19 years ago

e17cb8

add unconfined

Chris PeBenito • 19 years ago

9726b3

fix quoting problem

Chris PeBenito • 19 years ago

e8f005

fix for new new modules.conf behavior

Chris PeBenito • 19 years ago

e8b3e3

update for required tag

Chris PeBenito • 19 years ago

f0cc1a

Minor doc updates.

Karl MacMillan • 19 years ago

44772e

add required tags

Chris PeBenito • 19 years ago

274547

add tag for required modules

Chris PeBenito • 19 years ago

d78fde

update for 20050705 release

Chris PeBenito • 19 years ago

e3a8e3

update for 20050701 release

Chris PeBenito • 19 years ago

1fe082

update for xml changes

Chris PeBenito • 19 years ago

16e8e2

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

ul has to be in a p

Chris PeBenito • 19 years ago

65c861

initial commit

Chris PeBenito • 19 years ago

5e1ed4

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

dont show interface/template hotlinks if the module doesnt have one of them.

Chris PeBenito • 19 years ago

e8d8fa

make layer summary required

Chris PeBenito • 19 years ago

d233bf

change messages for missing docs

Chris PeBenito • 19 years ago

00172f

make interfaces or templates section not shown if empty

Chris PeBenito • 19 years ago

06c968

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

link fix

Chris PeBenito • 19 years ago

743b65

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

add templates

Chris PeBenito • 19 years ago

effd58

change desc to summary

Chris PeBenito • 19 years ago

ceebe3

add comments and error handling

Chris PeBenito • 19 years ago

896bad

preserve tunable values if tunables.conf exists

Chris PeBenito • 19 years ago

2d56fd

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

better handling of whitespace

Chris PeBenito • 19 years ago

cedae2

change modules.conf behavior to be in line with behavior which will be used in the future for base module

Chris PeBenito • 19 years ago

19db6b

change modules.conf handling

Chris PeBenito • 19 years ago

a4c639

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

initial commit

Chris PeBenito • 19 years ago

24bf11

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

better dummy xml entries

Chris PeBenito • 19 years ago

f8838e

initial commit

Chris PeBenito • 19 years ago

73fbc7

add/update comments

Chris PeBenito • 19 years ago

62a7b0

add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd

Chris PeBenito • 19 years ago

e81f02

update for new documentation method

Chris PeBenito • 19 years ago

414e41

more updates

Chris PeBenito • 19 years ago

aad5b9

a couple output fixes

Chris PeBenito • 19 years ago

c3a075

update to new commenting style

Chris PeBenito • 19 years ago

9916c6

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

452399

initial commit of segenxml. add support in Makefile

Chris PeBenito • 19 years ago

95db42

fix

Chris PeBenito • 19 years ago

19ea99

fix for shortened tags

Chris PeBenito • 19 years ago

7c2b84

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

kill cvsroot

Chris PeBenito • 19 years ago

245ee3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

change doctool to bring in line with the xml tag change (layers encapsulate

Chris PeBenito • 19 years ago

7fb9c1

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a7

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fba

add rw_term_perms

Chris PeBenito • 19 years ago

c9b7f1

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39

review of system interfaces

Chris PeBenito • 19 years ago

139520

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1

misc cleanup

Chris PeBenito • 19 years ago

0e7216

reorder gpg tunable for alpha sorting

Chris PeBenito • 19 years ago

562cc2

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

have can_exec add a require block

Chris PeBenito • 19 years ago

8c2f3a

fix bad links

Chris PeBenito • 19 years ago

bd113c

readability fixes

Chris PeBenito • 19 years ago

9a453f

spelling fixes

Chris PeBenito • 19 years ago

5fa782

fix for sf

Chris PeBenito • 19 years ago

9b57ae

Updates.

Karl MacMillan • 19 years ago

5ba9f0

fix interface description/summary

Chris PeBenito • 19 years ago

45d25f

fix

Chris PeBenito • 19 years ago

4ce9bd

initialize description to None so missing descriptions dont show wrong data

Chris PeBenito • 19 years ago

815ff3

add rpm list

Chris PeBenito • 19 years ago

fe51b3

add more example

Chris PeBenito • 19 years ago

347f40

initial commit

Chris PeBenito • 19 years ago

3d76be

Updates.

Karl MacMillan • 19 years ago

1c5008

reword

Chris PeBenito • 19 years ago

2d0e7a

move status into a table

Chris PeBenito • 19 years ago

faf0db

Initial revision

Karl MacMillan • 19 years ago

660bf7

add comments for clean and bare

Chris PeBenito • 19 years ago

102a59

for use until we have a full README

Chris PeBenito • 19 years ago

337e4a

more status info

Chris PeBenito • 19 years ago

2dda6a

add download page

Chris PeBenito • 19 years ago

48159f

add install-src target

Chris PeBenito • 19 years ago

c592e5

initial commit

Chris PeBenito • 19 years ago

f08f5a

add CFLAGS, and drop -C from install since it doesn't exist in all distros,

Chris PeBenito • 19 years ago

c7b41e

put user line in col 1, since genhomedircon breaks otherwise

Chris PeBenito • 19 years ago

8eaa72

initial commit

Chris PeBenito • 19 years ago

828e03

Updates.

Karl MacMillan • 19 years ago

a585f3

Various updates.

Karl MacMillan • 19 years ago

9f945b

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc1

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

when a generated file is already generated, it shows up in the generated_*

Chris PeBenito • 19 years ago

8ae194

fix typo

Chris PeBenito • 19 years ago

810f2b

fix up appconfig, and generate $(installdir)/booleans

Chris PeBenito • 19 years ago

1beba1

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

fix makefile to only rebuild modules.conf and tunables.conf explicitly

Chris PeBenito • 19 years ago

d2d6c8

initial commit

Chris PeBenito • 19 years ago

e75f78

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

Updates.

Karl MacMillan • 19 years ago

65a27e

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

fix

Chris PeBenito • 19 years ago

94670f

make summary and description optional in interfaces until we can clean it up

Chris PeBenito • 19 years ago

eec673

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

add "this is a generated file!" comment to top of corenetwork.{te,if}

Chris PeBenito • 19 years ago

61bbe5

ul end tag fix, and css tweak

Chris PeBenito • 19 years ago

3c6d78

update from method

Chris PeBenito • 19 years ago

fae6ff

fix xml

Chris PeBenito • 19 years ago

d9507b

renaming insanity

Chris PeBenito • 19 years ago

c9428d

overwrite the generated .te file instead of append

Chris PeBenito • 19 years ago

b2bf0b

Devices rename.

Karl MacMillan • 19 years ago

f0c985

move policy.xml to doc, so it doesnt get deleted on a make clean

Chris PeBenito • 19 years ago

12b559

make module description optional and interface summary optional until

Chris PeBenito • 19 years ago

bec110

html tag updates

Chris PeBenito • 19 years ago

e214f6

Added missing interface.

Karl MacMillan • 19 years ago

bef4f0

more updates from method

Chris PeBenito • 19 years ago

d46f02

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

fix can_exec

Chris PeBenito • 19 years ago

240408

policy.xml is now in tmp/

Chris PeBenito • 19 years ago

e1db6e

make macro work

Chris PeBenito • 19 years ago

cab7c0

add can_exec

Chris PeBenito • 19 years ago

e3fd77

fix

Chris PeBenito • 19 years ago

1b8d67

Templates for menu ordering change.

Karl MacMillan • 19 years ago

c75e65

reorder

Chris PeBenito • 19 years ago

a154cd

Fixed doc tool to order menus.

Karl MacMillan • 19 years ago

d6b0f3

speed improvement

Chris PeBenito • 19 years ago

5d9417

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

more renaming and xml

Chris PeBenito • 19 years ago

eda201

rename

Chris PeBenito • 19 years ago

eca5b2

fix bracket display for optional parameters

Chris PeBenito • 19 years ago

997bd9

add back html page generation

Chris PeBenito • 19 years ago

20030e

fixes and remove debug code

Chris PeBenito • 19 years ago

1601fb

more indentation for modules in the menu

Chris PeBenito • 19 years ago

fe3bd5

initial commit

Chris PeBenito • 19 years ago

eb437d

updates

Chris PeBenito • 19 years ago

5a3299

aliases

Chris PeBenito • 19 years ago

cc41a9

fix layer in module tag

Chris PeBenito • 19 years ago

7591e8

rename

Chris PeBenito • 19 years ago

c6ebef

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

make policy.xml depend on all if's being generated

Chris PeBenito • 19 years ago

16e1cf

aliases

Chris PeBenito • 19 years ago

dc67f7

aliases

Chris PeBenito • 19 years ago

0a10b1

renaming and xml

Chris PeBenito • 19 years ago

fe040c

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

better handling of generated files

Chris PeBenito • 19 years ago

e12e57

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab

aliasing

Chris PeBenito • 19 years ago

7edd02

support_modules is finally gone, and modules.disable->modules.conf

Chris PeBenito • 19 years ago

0350b1

initial commit

Chris PeBenito • 19 years ago

b29d23

add aliases

Chris PeBenito • 19 years ago

c2c00b

Moved and changed user_mls to gen_user.

Karl MacMillan • 19 years ago

72bdc6

Renamed support macros for consistency.

Karl MacMillan • 19 years ago

eb5e23

make infoflow optional

Chris PeBenito • 19 years ago

eac7c3

overhaul

Chris PeBenito • 19 years ago

dc5daf

renaming

Chris PeBenito • 19 years ago

9f72a2

interface renaming

Chris PeBenito • 19 years ago

0c5a28

interface renaming

Chris PeBenito • 19 years ago

1694de

comment fix

Chris PeBenito • 19 years ago

066d46

more fixes

Chris PeBenito • 19 years ago

84eb35

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

add interface macro

Chris PeBenito • 19 years ago

a9ec54

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609

add xml

Chris PeBenito • 19 years ago

3865d6

more tunable work

Chris PeBenito • 19 years ago

ddea18

initial commit

Chris PeBenito • 19 years ago

758618

First cut at fixing fc_sort.

Karl MacMillan • 19 years ago

6847e8

remove java

Chris PeBenito • 19 years ago

2224ed

add updated dtd

Chris PeBenito • 19 years ago

9c25fd

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

initial tunable tool fixes

Chris PeBenito • 19 years ago

3a80ec

32 is space. ascii <= 32 is all whitespace

Chris PeBenito • 19 years ago

8fb301

initial commit

Chris PeBenito • 19 years ago

89ec23

start adding module disable and tunable infrastructure

Chris PeBenito • 19 years ago

0fbe15

initial commit

Chris PeBenito • 19 years ago

02b584

initial commit

Chris PeBenito • 19 years ago

43bc39

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

fix appconfig dir

Chris PeBenito • 19 years ago

096933

rework policy build options

Chris PeBenito • 19 years ago

b67488

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

initial commit of xml->html conversion

Chris PeBenito • 19 years ago

36e54b

add some indentation

Chris PeBenito • 19 years ago

419699

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

start breaking up support_macros into macros dir

Chris PeBenito • 19 years ago

ca83af

add some comments. make install target install appconfig files

Chris PeBenito • 19 years ago

44cda5

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4ef

remove extra whitespace

Chris PeBenito • 19 years ago

98af6c

move global.if to support_macros at top level

Chris PeBenito • 19 years ago

de9649

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915

use variable for dtd. move policy type to variant section

Chris PeBenito • 19 years ago

044735

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db9

fix policy.xml to not have templates for generated interfaces

Chris PeBenito • 19 years ago

3c62aa

move user_u and root to users

Chris PeBenito • 19 years ago

2fc84f

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

better handling of appconfig dir

Chris PeBenito • 19 years ago

2926f9

fix module name in xml

Chris PeBenito • 19 years ago

f267df

move flask dir to top level, and update them from nsa cvs. move files in

Chris PeBenito • 19 years ago

134191

initial commit

Chris PeBenito • 19 years ago

7555aa

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

initial commit

Chris PeBenito • 19 years ago

b8fca4

initial commit

Chris PeBenito • 19 years ago

b4c3f5

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0a

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

initial commit

Chris PeBenito • 19 years ago

c22038

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

add in appconfig files

Chris PeBenito • 19 years ago

c9a26b

initial commit

Chris PeBenito • 19 years ago

10abae

cleanup

Chris PeBenito • 19 years ago

cbeef6

cleanup

Chris PeBenito • 19 years ago

3b3bf8

initial commit

Chris PeBenito • 19 years ago

6f3dab

initial commit

Chris PeBenito • 19 years ago

7d7a36

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

more fixes

Chris PeBenito • 19 years ago

547283

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3

a few touchups

Chris PeBenito • 19 years ago

88c72f

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f1

initial commit

Chris PeBenito • 19 years ago

992aba

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e26

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add transitions

Chris PeBenito • 19 years ago

c43097

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add mls port support

Chris PeBenito • 19 years ago

0d0d2b

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

fix xml

Chris PeBenito • 19 years ago

494e98

add xml doc generation

Chris PeBenito • 19 years ago

6d314f

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

remove bad file_type_auto_trans. rename selinuxfs interfaces

Chris PeBenito • 19 years ago

914c9f

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0

add admin template

Chris PeBenito • 19 years ago

76bff3

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

reformat

Chris PeBenito • 19 years ago

efa994

initial commit

Chris PeBenito • 19 years ago

696b41

add www module

Chris PeBenito • 19 years ago

7bbec3

change read_shared_libraries to use_shared_libraries, plus a pty fix

Chris PeBenito • 19 years ago

c09d32

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a2

drop transition from send_mail since its more then a transition

Chris PeBenito • 19 years ago

35519c

add privmail attribute and move make_{init,daemon,system}_domain to init

Chris PeBenito • 19 years ago

c28c4b

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

finish can_exec_any and fix a can_network_tcp_client

Chris PeBenito • 19 years ago

36f72d

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

reorg and a fix

Chris PeBenito • 19 years ago

fd9dee

finish lock_domain, fix file_type_auto_trans

Chris PeBenito • 19 years ago

70abf8

add crontab

Chris PeBenito • 19 years ago

d18e3d

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

several fixes

Chris PeBenito • 19 years ago

b2dc7f

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af2

initial commit

Chris PeBenito • 19 years ago

23caa6

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

oops

Chris PeBenito • 19 years ago

dec168

reorder for more consistency

Chris PeBenito • 19 years ago

6b6740

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

leftover from modutils

Chris PeBenito • 19 years ago

63a310

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

initial commit

Chris PeBenito • 19 years ago

0f3be6

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb

add printer_device_t

Chris PeBenito • 19 years ago

46be1f

more updates

Chris PeBenito • 19 years ago

465a5e

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e0280

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

fix per_userdomain_templates macro generation

Chris PeBenito • 19 years ago

0634b6

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

initial commit

Chris PeBenito • 19 years ago

4fc915

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

fix depends

Chris PeBenito • 19 years ago

23af43

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

updates

Chris PeBenito • 19 years ago

a01ab8

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

move locks

Chris PeBenito • 19 years ago

4541a9

more updates

Chris PeBenito • 19 years ago

428b57

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f8

add ignore read system state

Chris PeBenito • 19 years ago

67484f

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc3

many updates

Chris PeBenito • 19 years ago

f48a2a

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

doh

Chris PeBenito • 19 years ago

4472f3

add in missing devices

Chris PeBenito • 19 years ago

700988

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cd

initial commit

Chris PeBenito • 19 years ago

a7ed44

initial commit

Chris PeBenito • 19 years ago

0fbfa5

add original strict policy source

Chris PeBenito • 19 years ago

86f02e

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b58606

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

add console setattr if

Chris PeBenito • 19 years ago

55a46d

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

add console dontaudit

Chris PeBenito • 19 years ago

811985

initial commit

Chris PeBenito • 19 years ago

835b6a

add docs

Chris PeBenito • 19 years ago

9e19eb

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

remove unneeded genfs_contexts

Chris PeBenito • 19 years ago

099c8b

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a

bring over more targets from strict policy, and add more checking

Chris PeBenito • 19 years ago

88d14a

kernel can load modules

Chris PeBenito • 19 years ago

549655

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d

move assert.te here

Chris PeBenito • 19 years ago

57d236

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf7

initial commit

Chris PeBenito • 19 years ago

b4cd15

initial checkin

Chris PeBenito • 19 years ago

457f7e

initial checkin

Chris PeBenito • 19 years ago

14a7a6

rpms / selinux-policy

Commits 6188

rpms / selinux-policy

Source Code

Commits 6188