Commits - rpms/selinux-policy - CentOS Git server

Redundant: Included inetd_service_domain has this.

Dominick Grift • 14 years ago

ce6df0

Support network connect mysql DB.

Dominick Grift • 14 years ago

fae947

There is already an optional policy block for daemontools. Join the two.

Dominick Grift • 14 years ago

5492a1

Consistent ordering of declarations.

Dominick Grift • 14 years ago

9444a1

Use domtrans_pattern where possible.

Dominick Grift • 14 years ago

3c4ffa

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

1e2abe

This is no declaration. Moving to local policy.

Dominick Grift • 14 years ago

39178a

These were duplicate TE rules.

Dominick Grift • 14 years ago

09873e

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

1507cc

These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.

Dominick Grift • 14 years ago

86225e

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

54590a

This is git system content.

Dominick Grift • 14 years ago

730ec5

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

78ea2a

Merge branch 'base'

Dominick Grift • 14 years ago

a5ea14

Make hal a dbus_system_domain

Dan Walsh • 14 years ago

f4dc19

Use permission sets where possible.

Dominick Grift • 14 years ago

ac5201

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

cefe9f

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

18f2a7

Use permission sets where possible.

Dominick Grift • 14 years ago

0f7c40

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

c2b2d2

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

1b39de

This permission is already allowed by included mmap_file_perms.

Dominick Grift • 14 years ago

8725d6

Source is postdrop and not local. Moving to postdrop local policy section.

Dominick Grift • 14 years ago

11ad1d

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

a7b40a

These are not declarations move them to local policy section.

Dominick Grift • 14 years ago

f6e866

Redundant: All domains are allowed this access by default.

Dominick Grift • 14 years ago

9bd884

Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.

Dominick Grift • 14 years ago

6d1855

Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)

Dominick Grift • 14 years ago

46d410

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

a8fbd9

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

5d8259

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 14 years ago

6ed3f1

XML summary fixes.

Dominick Grift • 14 years ago

148e08

Use filetrans_pattern.

Dominick Grift • 14 years ago

3a3e7d

Use stream connect pattern.

Dominick Grift • 14 years ago

44f8aa

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

8bde5e

Make git daemon executable file an application executable file.

Dominick Grift • 14 years ago

96d3c0

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

08c4bb

These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.

Dominick Grift • 14 years ago

38039a

Move calls to external interfaces below policy that governs internal interaction.

Dominick Grift • 14 years ago

02687a

The capability IPC goes on top of the local policy.

Dominick Grift • 14 years ago

d54202

This is a duplicate declaration.

Dominick Grift • 14 years ago

b952f9

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

ef521e

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

68ac47

This is not required here.

Dominick Grift • 14 years ago

0bdd85

Youre not allowed to directly use external types.

Dominick Grift • 14 years ago

82c971

Redundant: All deamons are already allowed this access by default.

Dominick Grift • 14 years ago

59c544

Redundant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

edcc8a

Use permission sets where possible.

Dominick Grift • 14 years ago

1dfc76

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

9a0f79

Redundant: Is already permitted by included rw_chr_file_perms.

Dominick Grift • 14 years ago

9c7f2a

Use permission sets where possible.

Dominick Grift • 14 years ago

72ba80

rpms / selinux-policy

Commits 3129

rpms / selinux-policy

Source Code

Commits 3129