rpms / selinux-policy

Clone
Source Code
GIT

History Changelog

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
  1.   42d567c3f4f10eec3043c481beb9fc6cc4fb9330
  2.   Changelog
trunk: 6 patches from dan.
Chris PeBenito • 15 years ago  
42d567
trunk: 6 patches from dan.
Chris PeBenito • 15 years ago  
3c9b2e
trunk: add MLS constrains for ingress/egress permissions from Paul Moore.
Chris PeBenito • 15 years ago  
e1a70f
trunk: Drop write permission from fs_read_rpc_sockets().
Chris PeBenito • 15 years ago  
156204
trunk: remove unused udev_runtime_t type.
Chris PeBenito • 15 years ago  
81fa19
trunk: Patch for RadSec port from Glen Turner.
Chris PeBenito • 15 years ago  
f3fcad
trunk: Enable network_peer_controls policy capability from Paul Moore.
Chris PeBenito • 15 years ago  
7722c2
trunk: btrfs from Paul Moore.
Chris PeBenito • 15 years ago  
805f34
trunk: Add db_procedure install permission from KaiGai Kohei.
Chris PeBenito • 15 years ago  
466e22
trunk: Add support for network interfaces with access controlled by a Boolean from the CLIP project.
Chris PeBenito • 15 years ago  
019dfa
trunk: su fixes from clip.
Chris PeBenito • 15 years ago  
9e7a33
trunk: add support for labeled booleans.
Chris PeBenito • 15 years ago  
f0435b
trunk: Remove node definitions and change node usage to generic nodes.
Chris PeBenito • 15 years ago  
c12621
trunk: Add kernel_service access vectors, from Stephen Smalley.
Chris PeBenito • 15 years ago  
347a70
trunk: check in version and changelog for release.
Chris PeBenito • 15 years ago  
e66a0c
trunk: Fix consistency of audioentropy and iscsi module naming.
Chris PeBenito • 15 years ago  
319697
trunk: Debian file context fix for xen from Russell Coker.
Chris PeBenito • 16 years ago  
b3eb12
trunk: add milter module from Paul Howarth.
Chris PeBenito • 16 years ago  
b9e523
trunk: Xserver MLS fix from Eamon Walsh.
Chris PeBenito • 16 years ago  
7f4919
trunk: add omapi port for dhcpcd.
Chris PeBenito • 16 years ago  
99282e
trunk: merge UBAC.
Chris PeBenito • 16 years ago  
296273
trunk: Move shared library calls from individual modules to the domain module.
Chris PeBenito • 16 years ago  
6e68e6
trunk: Enable open permission checks policy capability.
Chris PeBenito • 16 years ago  
0b36a2
trunk: Remove hierarchy from portage module as it is not a good example of hieararchy.
Chris PeBenito • 16 years ago  
aea3f2
trunk: Remove enableaudit target from modular build as semodule -DB supplants it.
Chris PeBenito • 16 years ago  
b19f86
trunk: version bits for the release.
Chris PeBenito • 16 years ago  
40db86
trunk: 8 patches from dan.
Chris PeBenito • 16 years ago  
967fd1
trunk: add oident from dominick grift.
Chris PeBenito • 16 years ago  
73edbc
trunk: Debian update for NetworkManager/wpa_supplicant from Martin Orr.
Chris PeBenito • 16 years ago  
52ceaa
trunk: add cyphesis from dan.
Chris PeBenito • 16 years ago  
a71e13
trunk: Logrotate and Bind updates from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
e40fa6
trunk: first part of init script labeling support.
Chris PeBenito • 16 years ago  
6cc3f3
trunk: add w3c from dan.
Chris PeBenito • 16 years ago  
32f8ff
trunk: Glibc 2.7 fix from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
9c4500
trunk: 11 more cherry picks from fedora policy, by david hardeman.
Chris PeBenito • 16 years ago  
8a948c
trunk: Samba/winbind update from Mike Edenfield.
Chris PeBenito • 16 years ago  
b81bfc
trunk: Policy size optimization with a non-security file attribute from James Carter.
Chris PeBenito • 16 years ago  
3338f2
trunk: Database labeled networking update from KaiGai Kohei.
Chris PeBenito • 16 years ago  
dc1920
trunk: 7 patches from Fedora policy, cherry picked by david hrdeman.
Chris PeBenito • 16 years ago  
6224fc
trunk: massive whitespace cleanup from dominick grift.
Chris PeBenito • 16 years ago  
0bfccd
trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus
Chris PeBenito • 16 years ago  
2b592a
trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.
Chris PeBenito • 16 years ago  
4459a7
trunk: VERSION and Changelog update for release.
Chris PeBenito • 16 years ago  
e64c38
trunk: Fix httpd_enable_homedirs to actually provide the access it is supposed to provide.
Chris PeBenito • 16 years ago  
e311e2
trunk: Add unused interface/template parameter metadata in XML.
Chris PeBenito • 16 years ago  
c5cfd2
trunk: Patch to handle postfix data_directory from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
8c6292
trunk: podsleuth and hal updates from dan.
Chris PeBenito • 16 years ago  
131634
trunk: add qemu and virt from dan.
Chris PeBenito • 16 years ago  
eb4216
trunk: add sepostgresql policy from kaigai kohei.
Chris PeBenito • 16 years ago  
e8cb08
trunk: Patch for X.org dbus support from Martin Orr.
Chris PeBenito • 16 years ago  
ef55a1
trunk: add prelude from dan.
Chris PeBenito • 16 years ago  
cdbd09
trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.
Chris PeBenito • 16 years ago  
308baa
trunk: add kerneloops from dan.
Chris PeBenito • 16 years ago  
782c10
trunk: add kismet from dan.
Chris PeBenito • 16 years ago  
ff79b8
trunk: Module loading now requires setsched on kernel threads.
Chris PeBenito • 16 years ago  
4416c4
trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
a42ce9
trunk: X application data class from Eamon Walsh and Ted Toth.
Chris PeBenito • 16 years ago  
d923d5
trunk: Move user roles into individual modules.
Chris PeBenito • 16 years ago  
e9c6cd
trunk: make hald_log_t a log file.
Chris PeBenito • 16 years ago  
7e11b7
trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.
Chris PeBenito • 16 years ago  
2083db
trunk: Add file for enabling policy capabilities.
Chris PeBenito • 16 years ago  
c07f9c
trunk: Patch to fix leaky interface/template call depth calculator from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
75da4b
trunk: release
Chris PeBenito • 16 years ago  
c565b4
trunk: add core xselinux support.
Chris PeBenito • 16 years ago  
2c12b4
trunk: fix winbind socket connection interface for default location of the sock_file.
Chris PeBenito • 16 years ago  
9377a3
trunk: add wireshark.
Chris PeBenito • 16 years ago  
6e2123
trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.
Chris PeBenito • 16 years ago  
47333d
trunk: Add iferror.m4 rather generate it out of the Makefiles.
Chris PeBenito • 16 years ago  
e276d5
trunk: Definitions for open permisson on file and similar objects from Eric Paris.
Chris PeBenito • 16 years ago  
210607
trunk: Apt updates for ptys and logs, from Martin Orr.
Chris PeBenito • 16 years ago  
e065ac
trunk: rpc update from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
01e8ff
trunk: Exim updates on Debian from Devin Carrawy.
Chris PeBenito • 16 years ago  
d57a09
trunk: Pam and samba updates from Stefan Schulze Frielinghaus.
Chris PeBenito • 16 years ago  
9fa023
trunk: Backup update on Debian from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
45b56b
trunk: Cracklib update on Deban from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
51223b
trunk: label /proc/kallsyms with system_map_t.
Chris PeBenito • 16 years ago  
037fc0
trunk: add capability2 class, from Stephen Smalley.
Chris PeBenito • 16 years ago  
8b9ffe
trunk: Labeled networking peer object class updates.
Chris PeBenito • 16 years ago  
f3da31
trunk: package versioning for release.
Chris PeBenito • 16 years ago  
cde477
trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.
Chris PeBenito • 16 years ago  
1abafe
trunk: Improve several tunables descriptions from Dan Walsh.
Chris PeBenito • 16 years ago  
dd9e1d
trunk: clean up nsswitch usage, from dan.
Chris PeBenito • 17 years ago  
c0cf6e
trunk: More complete labeled networking infrastructure from KaiGai Kohei.
Chris PeBenito • 17 years ago  
0b6aca
trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.
Chris PeBenito • 17 years ago  
eeef8d
trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.
Chris PeBenito • 17 years ago  
847937
trunk: add postfixpolicyd from Jan-Frode Myklebust.
Chris PeBenito • 17 years ago  
4605ad
trunk: Russian man page translations from Andrey Markelov.
Chris PeBenito • 17 years ago  
164772
trunk: remove unused types from dbus.
Chris PeBenito • 17 years ago  
bd973e
trunk: add exim from dan.
Chris PeBenito • 17 years ago  
6bf8bf
trunk: add infrastructure for managing user web content.
Chris PeBenito • 17 years ago  
a334d2
Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.
Chris PeBenito • 17 years ago  
ef659a
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
Chris PeBenito • 17 years ago  
6c53a1
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
Chris PeBenito • 17 years ago  
350b6a
trunk: update version and changelog for release.
Chris PeBenito • 17 years ago  
cb811c
trunk: Add support for setting the unknown permissions handling.
Chris PeBenito • 17 years ago  
8acfcb
trunk: Fix XML building for external reference builds and headers builds.
Chris PeBenito • 17 years ago  
96fc0a
trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.
Chris PeBenito • 17 years ago  
6f49b4
trunk: add awstats from Stefan Schulze Frielinghaus.
Chris PeBenito • 17 years ago  
0cf6df
trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().
Chris PeBenito • 17 years ago  
8242f5
trunk: udev update and brctl module from dan.
Chris PeBenito • 17 years ago  
8241b5
Update MLS constraints from LSPP evaluated policy.
Chris PeBenito • 17 years ago  
d62c08
trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.
Chris PeBenito • 17 years ago  
2af7b4
trunk: Files and radvd updates from Stefan Schulze Frielinghaus.
Chris PeBenito • 17 years ago  
80d5e0
trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.
Chris PeBenito • 17 years ago  
f8233a
trunk: several MLS enhancements.
Chris PeBenito • 17 years ago  
2d0c9c
trunk: Database userspace object manager classes from KaiGai Kohei.
Chris PeBenito • 17 years ago  
9760cb
trunk: add 3rd party interface for apache cgi.
Chris PeBenito • 17 years ago  
371d11
trunk: add getserv and shmemserv nscd permissions.
Chris PeBenito • 17 years ago  
924f3c
trunk: add application module
Chris PeBenito • 17 years ago  
d46cfe
trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.
Chris PeBenito • 17 years ago  
f80a0e
trunk: updated version and changelog for release
Chris PeBenito • 17 years ago  
970122
Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.
Chris PeBenito • 17 years ago  
113b4f
trunk: add rpcbind from dan
Chris PeBenito • 17 years ago  
7b61fe
trunk: Unified labeled networking policy from Paul Moore.
Chris PeBenito • 17 years ago  
190066
trunk: xen updates from dan
Chris PeBenito • 17 years ago  
7f0897
trunk: 3 patches from dan
Chris PeBenito • 17 years ago  
5bf9de
trunk: big samba update from dan
Chris PeBenito • 17 years ago  
40df56
trunk: drop snmpd_etc_t.
Chris PeBenito • 17 years ago  
788d88
trunk: confine sendmail and logrotate on targeted
Chris PeBenito • 17 years ago  
6c8aba
trunk: Tunable connection to postgresql for users from KaiGai Kohei.
Chris PeBenito • 17 years ago  
cb10a2
Memprotect support patch from Stephen Smalley.
Chris PeBenito • 17 years ago  
41337a
trunk: add amtu from dan
Chris PeBenito • 17 years ago  
a74d1a
trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().
Chris PeBenito • 17 years ago  
d5b81a
trunk: 5 patches from dan
Chris PeBenito • 17 years ago  
d534d3
merge restorecon into setfiles
Chris PeBenito • 17 years ago  
762d2c
Patch to begin separating out hald helper programs from Dan Walsh.
Chris PeBenito • 17 years ago  
12217c
add apcupsd from dan
Chris PeBenito • 17 years ago  
78f17e
Fixes for squid, dovecot, and snmp from Dan Walsh.
Chris PeBenito • 17 years ago  
b129e2
Miscellaneous consolekit fixes from Dan Walsh.
Chris PeBenito • 17 years ago  
4967aa
Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.
Chris PeBenito • 17 years ago  
ed4b73
Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.
Chris PeBenito • 17 years ago  
517618
- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes
Chris PeBenito • 17 years ago  
882186
add rwho from Nalin Dahyabhai
Chris PeBenito • 17 years ago  
6a2975
Patch to allow amavis to read spamassassin libraries from Dan Walsh.
Chris PeBenito • 17 years ago  
747ab1
Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.
Chris PeBenito • 17 years ago  
f9029f
Fixes for RHEL4 from the CLIP project.
Chris PeBenito • 17 years ago  
d28e52
Replace the old lrrd fc entries with correct munin ones.
Chris PeBenito • 17 years ago  
cd16fe
Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.
Chris PeBenito • 17 years ago  
b4dfdc
Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.
Chris PeBenito • 17 years ago  
7a4bd4
final release entries for 20070417
Chris PeBenito • 17 years ago  
273383
add zabbix from dan
Chris PeBenito • 17 years ago  
97e815
5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes
Chris PeBenito • 17 years ago  
697489
confine ldconfig in targeted, from dan
Chris PeBenito • 17 years ago  
19b2de
man page updates from dan
Chris PeBenito • 17 years ago  
f4e2b1
Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.
Chris PeBenito • 17 years ago  
a26923
- Move booleans and tunables to modules when it is only used in a single
Chris PeBenito • 17 years ago  
56e1b3
Merge sbin_t and ls_exec_t into bin_t.
Chris PeBenito • 17 years ago  
8021cb
remove disable_trans booleans
Chris PeBenito • 17 years ago  
ab514d
Output different header sets for kernel and userland from flask headers.
Chris PeBenito • 17 years ago  
e9b004
deprecated pax class
Chris PeBenito • 17 years ago  
1852cd
stop adding netfilter contexts, as decided at the developers summit
Chris PeBenito • 17 years ago  
d17bab
add fail2ban from dan
Chris PeBenito • 17 years ago  
cd3ee9
Add dontaudits for init fds and console to init_daemon_domain().
Chris PeBenito • 17 years ago  
a5f5eb
create user gpg keys dir patch from dan
Chris PeBenito • 17 years ago  
4832f0
add kvmfs support, from dan
Chris PeBenito • 17 years ago  
937849
from Dan:
Chris PeBenito • 17 years ago  
c224d9
patch from Dan for sudo:
Chris PeBenito • 17 years ago  
6c20f7
It was just pointed out to me that the raw IP socket class is missing from the
Chris PeBenito • 17 years ago  
b50f2e
Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.
Chris PeBenito • 17 years ago  
cdc91b
procmail uses /tmp files
Chris PeBenito • 17 years ago  
59bedc
setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs
Chris PeBenito • 17 years ago  
7aca2a
Patch for gssd fixes from Dan Walsh
Chris PeBenito • 17 years ago  
c23eb5
patches for lvm and ricci fixes from Dan Walsh.
Chris PeBenito • 17 years ago  
c5561c
lmtp and smtp are the same file require same context of setfiles complains
Chris PeBenito • 17 years ago  
f2c69c
patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.
Chris PeBenito • 17 years ago  
ecc98e
Patch for kerberized telnet fixes from Dan Walsh.
Chris PeBenito • 17 years ago  
4900fd
Patch for kerberized ftp and other ftp fixes from Dan Walsh.
Chris PeBenito • 17 years ago  
09c56f
Patch for an additional wine executable from Dan Walsh.
Chris PeBenito • 17 years ago  
2aea36
Patch for additional games file contexts from Dan Walsh.
Chris PeBenito • 17 years ago  
bf39cd
Add support for libselinux 2.0.5 init_selinuxmnt() changes.
Chris PeBenito • 17 years ago  
86d754
Patch for misc fixes to bluetooth from Dan Walsh.
Chris PeBenito • 17 years ago  
f0eaed
On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:
Chris PeBenito • 17 years ago  
5b0647
Patch to start deprecating usercanread attribute from Ryan Bradetich.
Chris PeBenito • 17 years ago  
bbb7cc
add dccp_socket object class
Chris PeBenito • 17 years ago  
a715dc
On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:
Chris PeBenito • 17 years ago  
3a3901
On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:
Chris PeBenito • 17 years ago  
5c45ea
Patch to remove redundant mls_trusted_object() call from Dan Walsh.
Chris PeBenito • 17 years ago  
66cf19
Patch for misc fixes to nis ypxfr policy from Dan Walsh.
Chris PeBenito • 17 years ago  
468521
Patch to allow apmd to telinit from Dan Walsh.
Chris PeBenito • 17 years ago  
aeb54c
While using samba and SELinux with Debian GNU/Linux (etch) the
Chris PeBenito • 17 years ago  
d11407
Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.
Chris PeBenito • 17 years ago  
bcac3a
make ttys and ptys device nodes
Chris PeBenito • 17 years ago  
f1be09
patch from dan, Thu, 2007-01-25 at 08:12 -0500
Chris PeBenito • 17 years ago  
6b19be
Fix explicit use of httpd_t in openca_domtrans(), bug #22.
Chris PeBenito • 17 years ago  
4bd55e
Clean up file context regexes in apache and java, from Eamon Walsh:
Chris PeBenito • 17 years ago  
ff943a
update version and changelog for release
Chris PeBenito • 17 years ago  
b00150
merge policy patterns to trunk
Chris PeBenito • 17 years ago  
c0868a
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
Chris PeBenito • 18 years ago  
d6d16b
add aide, ccs, and ricci
Chris PeBenito • 18 years ago  
fa45da
This modifies the mls constraint for polmatch in the association class.
Chris PeBenito • 18 years ago  
d31d3c
On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:
Chris PeBenito • 18 years ago  
c6a60b
- Add a reload target to Modules.devel and change the load
Chris PeBenito • 18 years ago  
59f853
fixes from gentoo strict testing:
Chris PeBenito • 18 years ago  
ed38ca
Christopher J. PeBenito wrote:
Chris PeBenito • 18 years ago  
f497b8
patch from dan Tue, 24 Oct 2006 11:00:28 -0400
Chris PeBenito • 18 years ago  
d9845a
enhanced setransd support from darrel goeddel
Chris PeBenito • 18 years ago  
a8671a
20061018 release
Chris PeBenito • 18 years ago  
248ccc
merge netlabel stuff from labeled-networking branch
Chris PeBenito • 18 years ago  
130f8a
patch from russell, Thu, 5 Oct 2006 22:44:49 +1000
Chris PeBenito • 18 years ago  
3c3c04
- Move range transitions to modules.
Chris PeBenito • 18 years ago  
e070dd
This patch adds a GConf policy to refpolicy.
Chris PeBenito • 18 years ago  
002190
patch from dan Mon, 25 Sep 2006 15:46:40 -0400
Chris PeBenito • 18 years ago  
e2b84e
patch from dan Fri, 22 Sep 2006 16:30:34 -0400
Chris PeBenito • 18 years ago  
693d4a
patch from dan Wed, 20 Sep 2006 12:12:49 -0400
Chris PeBenito • 18 years ago  
8708d9
add main part of role-o-matic
Chris PeBenito • 18 years ago  
bbcd3c
patch from dan Tue, 05 Sep 2006 17:06:06 -0400
Chris PeBenito • 18 years ago  
75beb9
patch from erich Sat, 02 Sep 2006 03:37:44 +0200
Chris PeBenito • 18 years ago  
13d7ce
patch from dan Fri, 01 Sep 2006 15:45:24 -0400
Chris PeBenito • 18 years ago  
5dbda5
patch from dan Thu, 31 Aug 2006 15:16:30 -0400
Chris PeBenito • 18 years ago  
eac818
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
Chris PeBenito • 18 years ago  
a5e213
add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.
Chris PeBenito • 18 years ago  
3ef029
remove dead selopt rules
Chris PeBenito • 18 years ago  
33c7e6
missed changelog entry for nc
Chris PeBenito • 18 years ago  
f5d1d0
patch from Stefan for mrtg daemon operation.
Chris PeBenito • 18 years ago  
4846dc
add missing entry for dan's last patch
Chris PeBenito • 18 years ago  
9d3a3f
add authlogin interface to abstract common login program perms
Chris PeBenito • 18 years ago  
4b3b46
remove setbool auditallow, except for distro_rhel4.
Chris PeBenito • 18 years ago  
133000
remove extra level of directory
Chris PeBenito • 18 years ago  
17de1b

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation