File history - rpms/selinux-policy

Fix fusefs handling

Dan Walsh • 14 years ago

55e9f0

Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

d1c6ba

Allow unconfined_t to transition to alsa_t to make sure labels stay correct

Dan Walsh • 14 years ago

ddd1cc

Allow sudo to send signals to any domains the user could have transitioned to.

Dan Walsh • 14 years ago

b45aaa

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

20f707

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 14 years ago

79bff2

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 14 years ago

71f455

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

5d8259

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 14 years ago

6ed3f1

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

6cd6ed

Use list instead of search in admin interfaces.

Dominick Grift • 14 years ago

61f406

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

4d71bc

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

83029f

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

ad4245

Type xenstored_var_run_t is required here.

Dominick Grift • 14 years ago

cb76ff

Add the ability to send audit messages to confined admin policies

Dan Walsh • 14 years ago

9461b6

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 14 years ago

3b0a9c

add labeling for /root/.debug

Dan Walsh • 14 years ago

43a033

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

d7f202

Allow a couple of sandbox issues.

Dan Walsh • 14 years ago

c2dae9

Fix some names in passenger policy

Dan Walsh • 14 years ago

3034a8

Fix cert calls in telepath, boinc, kerberos

Dan Walsh • 14 years ago

366396

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cab9bc

rename mdadm_map_t to mdadm_var_run_t

Dan Walsh • 14 years ago

d7544f

More fixes for mozilla_plugin_t

Dan Walsh • 14 years ago

0b8f4c

Module version bumps for cert patch.

Chris PeBenito • 14 years ago

da12b5

Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.

Chris PeBenito • 14 years ago

e9d6df

Implement miscfiles_cert_type().

Dominick Grift • 14 years ago

834062

raid tools now store pid file and sock_file in /dev/md for early boot.

Dan Walsh • 14 years ago

e81afd

Allow crond to manage user_spool_cron_t link files

Dan Walsh • 14 years ago

ee4b1e

Allow sudo domains to manage /var/db/sudo

Dan Walsh • 14 years ago

b36c20

Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t

Dan Walsh • 14 years ago

dfe675

Any app that executes service command will not do a getattr of all mounted file systems

Dan Walsh • 14 years ago

818734

Allow apps that use pam to connect to init_t

Dan Walsh • 14 years ago

c16ffd

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

f5b49a

Allow certmaster to read usr_t files. All python apps are going to need this.

Dan Walsh • 14 years ago

a66812

cleanup mmap_low merge with upstream

Dan Walsh • 14 years ago

3a2e88

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cbadf7

firstboot is leaking a netlink_route socket into iptables. We need to dontaudit

Dan Walsh • 14 years ago

035275

Fix sandbox tcp_socket calls to create_stream_socket_perms

Dan Walsh • 14 years ago

c6fa93

Allow qmail to use uucpd

Dan Walsh • 14 years ago

4fccad

Allow prelink to read dbus config/Broken

Dan Walsh • 14 years ago

3fdb12

merge latest upstream

Dan Walsh • 14 years ago

898c0d

Dontaudit socket leaks when running semanage code

Dan Walsh • 14 years ago

8c8a10

More fixes

Dan Walsh • 14 years ago

c71f02

Policy fixes

Dan Walsh • 14 years ago

2d4a79

More fixes

Dan Walsh • 14 years ago

ac498f

Latest fixes

Dan Walsh • 14 years ago

08e567

Fixes for f14

Dan Walsh • 14 years ago

4765a5

Update f14

Dan Walsh • 14 years ago

2968e0

Update f14

Dan Walsh • 14 years ago

a947da

UPdate for f14 policy

Dan Walsh • 14 years ago

3eaa99

Module version bumps and changelog for devtmpfs patchset.

Chris PeBenito • 14 years ago

76a9fe

Trivial tweaks to devtmpfs patches.

Chris PeBenito • 14 years ago

0d2480

Early devtmpfs access

Jeremy Solt • 14 years ago

2fc79f

Move devtmpfs to devices from filesystem

Jeremy Solt • 14 years ago

d6e1ef

Confine /sbin/cgclear.

Dominick Grift • 14 years ago

61d7ee

System layer xml fixes.

Dominick Grift • 14 years ago

a0546c

Docs standardizing on the role portion of run interfaces. Additional docs cleanup.

Chris PeBenito • 14 years ago

a7ee7f

Remove some redundant attributes from user_home_t.

Dominick Grift • 14 years ago

48c3c3

Module version bump for fa1847f.

Chris PeBenito • 14 years ago

4b76ea

Add files_poly_member() to userdom_user_home_content() Remove redundant files_poly_member() calls.

Dominick Grift • 14 years ago

fa1847

Remove old rbacsep role statements.

Chris PeBenito • 14 years ago

c14aeb

Remove duplicate/redundant rules, from Russell Coker.

Chris PeBenito • 14 years ago

bca0cd

Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role().

Chris PeBenito • 14 years ago

1db183

Whitespace change: drop unnecessary blank line at the start of .te files.

Chris PeBenito • 14 years ago

48f99a

Module version bump for cgroup patchset.

Chris PeBenito • 14 years ago

c54e7d

Whitespace fixes in cgroup and init.

Chris PeBenito • 14 years ago

04dcd7

How users interact with cgroup.

Dominick Grift • 14 years ago

e2b9ad

How libgroup init scripts interact with libcgroup.

Dominick Grift • 14 years ago

73f098

Bump module versions for release.

Chris PeBenito • 14 years ago

29af4c

Fix deprecated interface usage that crept into lvm.if.

Chris PeBenito • 14 years ago

fe74f7

Remove excessive permission in udev_manage_rules_files() and move the interface up in the .if file. Module version bump for d56b33a.

Chris PeBenito • 14 years ago

e2c945

Create new interface and type for managing /etc/udev/rules.d

Chris Richards • 14 years ago

d56b33

bootmisc init script, 2nd try

Chris Richards • 14 years ago

9b3e79

Module version bump and extra comments for 194d61f.

Chris PeBenito • 14 years ago

4a8bd0

modutils patch for update-modules

Chris Richards • 14 years ago

194d61

Module version bump for 8c38fba.

Chris PeBenito • 14 years ago

78352d

allow syslog-ng to setrlimit

Chris Richards • 14 years ago

8c38fb

Libraries patch from Dan Walsh.

Chris PeBenito • 14 years ago

bc31d1

Xen patch from Dan Walsh.

Chris PeBenito • 14 years ago

0d86ea

Getty patch from Dan Walsh.

Chris PeBenito • 14 years ago

b60df9

Sysnetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fa92b

Init patch from Dan Walsh.

Chris PeBenito • 14 years ago

ddd786

Authlogin patch from Dan Walsh.

Chris PeBenito • 14 years ago

153ed8

Iptables patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fbcd7

Udev patch from Dan Walsh.

Chris PeBenito • 14 years ago

a124c0

Logging patch from Dan Walsh.

Chris PeBenito • 14 years ago

7a8807

Ipsec patch from Dan Walsh.

Chris PeBenito • 14 years ago

90e65f

Modutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

d13c67

Style fixes and module version bumps for 38fc1bd.

Chris PeBenito • 14 years ago

827060

Likewise policy.

Dominick Grift • 14 years ago

38fc1b

Raid patch from Dan Walsh.

Chris PeBenito • 14 years ago

2f0e3a

Iscsi and tgtd patches from Dan Walsh.

Chris PeBenito • 14 years ago

30496b

Fstools patch from Dan Walsh.

Chris PeBenito • 14 years ago

939eaf

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

d0a6df

Module version bump for be47d75.

Chris PeBenito • 14 years ago

1112a5

hotplug transition to brctl from Dan Walsh

Jeremy Solt • 14 years ago

4d2680

Improve documentation of udev_read_db().

Chris PeBenito • 14 years ago

402bbb

Improve documentation of seutil_sigchld_newrole().

Chris PeBenito • 14 years ago

b675ce

Module version bump for bf530f5.

Chris PeBenito • 14 years ago

a6bafb

Various permission set fixes.

Dominick Grift • 14 years ago

bf530f

Improve the documentation of application_domain().

Chris PeBenito • 14 years ago

b58db3

Improve the documentation of auth_use_nsswitch().

Chris PeBenito • 14 years ago

d24a7d

Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files.

Dominick Grift • 14 years ago

4cb24a

Improve documentation for userdomain interfaces:

Chris PeBenito • 14 years ago

c46376

Module version bump for 03dd57f.

Chris PeBenito • 14 years ago

42f1b1

Fix auth_domtrans_chk_passwd to use read_file_perms to surpress open AVC denials.

Dominick Grift • 14 years ago

03dd57

Additional docs for logging_log_filetrans().

Chris PeBenito • 14 years ago

5fb5bf

Improve the documentation of unconfined_domain().

Chris PeBenito • 14 years ago

14e543

Improve the documentation of logging_log_file() and logging_log_filetrans().

Chris PeBenito • 14 years ago

45185c

Improve the documentation of:

Chris PeBenito • 14 years ago

13f000

Improve sysnet_read_config() documentation.

Chris PeBenito • 14 years ago

d68871

Switch sysnet_use_portmap(), sysnet_use_ldap(), and sysnet_dns_name_resolve() to use sysnet_read_config() rather thane explicit type usage.

Chris PeBenito • 14 years ago

81a0fb

Improve documentation on logging_send_syslog_msg().

Chris PeBenito • 14 years ago

6e4877

Improve documentation on miscfiles_read_localization().

Chris PeBenito • 14 years ago

611bc9

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

72295e

Syslog fixes from Gentoo.

Chris PeBenito • 14 years ago

2f84a7

Clean up leaked portage file descriptors.

Chris PeBenito • 14 years ago

8b8501

Utmp fix from Gentoo.

Chris PeBenito • 14 years ago

2c0513

Setfiles fix from Gentoo.

Chris PeBenito • 14 years ago

72c8a3

Mount usbfs fix from Gentoo.

Chris PeBenito • 14 years ago

679a63

Move netlink route sockets from nsswitch to DNS name resolve.

Chris PeBenito • 14 years ago

aadcb9

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.

Chris PeBenito • 14 years ago

c3c753

Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

16412e

Misc fixes for 1031ee6.

Chris PeBenito • 14 years ago

27eab8

Module version number bump for 1031ee6.

Chris PeBenito • 14 years ago

7d2f96

Implement cobblerd policy.

Dominick Grift • 14 years ago

1031ee

Userdomain patch from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

2d7436

Add dbadm, from KaiGai Kohei.

Chris PeBenito • 14 years ago

22a287

Iptables and modutils patches from Dan Walsh.

Chris PeBenito • 15 years ago

7491a9

RAID patch from Dan Walsh.

Chris PeBenito • 15 years ago

0cad9a

Fstools and Xen patches from Dan Walsh.

Chris PeBenito • 15 years ago

77c71b

Kdump reads the kernel core.

Chris PeBenito • 15 years ago

e21162

UDEV patch from Dan Walsh.

Chris PeBenito • 15 years ago

837163

IPSEC patch from Dan Walsh.

Chris PeBenito • 15 years ago

832c1b

Application patch from Dan Walsh.

Chris PeBenito • 15 years ago

5ed061

Whitespace cleanup.

Chris PeBenito • 15 years ago

dccbb8

ISCSI patch from Dan Walsh.

Chris PeBenito • 15 years ago

0f982d

Setrans patch from Dan Walsh.

Chris PeBenito • 15 years ago

0a119a

LVM patch from Dan Walsh.

Chris PeBenito • 15 years ago

bd34ef

Miscfiles patch from Dan Walsh.

Chris PeBenito • 15 years ago

9dfdd4

bump module versions for release.

Chris PeBenito • 15 years ago

ed3a1f

additional cleanup for e877913.

Chris PeBenito • 15 years ago

e6d8fd

adding puppet configuration management system

Craig Grube • 15 years ago

e87791

add shorewall from dan.

Chris PeBenito • 15 years ago

625be1

add kdump from dan.

Chris PeBenito • 15 years ago

71965a

kismet patch from dan.

Chris PeBenito • 15 years ago

a9e967

module version number bump for tun patches

Chris PeBenito • 15 years ago

aaff2f

rename admin_tun_type to admindomain.

Chris PeBenito • 15 years ago

0be901

reorganize tun patch changes.

Chris PeBenito • 15 years ago

bd7570

refpol: Policy for the new TUN driver access controls

Paul Moore • 15 years ago

9dc3cd

patch from Eamon Walsh to remove useage of deprecated xserver interfaces.

Chris PeBenito • 15 years ago

427989

deprecate userdom_xwindows_client_template

Chris PeBenito • 15 years ago

93c49b

Remove excessive permissions in logging_send_syslog_msg(). Ticket #14.

Chris PeBenito • 15 years ago

fef5dc

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Chris PeBenito • 15 years ago

e27827

Fix unconfined_r use of unconfined_java_t.

Chris PeBenito • 15 years ago

b26482

remove redundant xen_append_log() call in hostname.

Chris PeBenito • 15 years ago

97e421

fix refpolicy ticket #48.

Chris PeBenito • 15 years ago

e51390

module version number bump for release 2.20090730 that was mistakenly omitted.

Chris PeBenito • 15 years ago

9570b2

fix ordering in sysnetwork.

Chris PeBenito • 15 years ago

d69616

fix ordering in raid.

Chris PeBenito • 15 years ago

48bf63

fix ordering in pcmcia.

Chris PeBenito • 15 years ago

4b218b

fix ordering in mount.

Chris PeBenito • 15 years ago

f0e959

fix ordering in modutils.

Chris PeBenito • 15 years ago

54327d

fix ordering of interface calls in lvm.

Chris PeBenito • 15 years ago

568efb

fix ordering of interface calls in locallogin.

Chris PeBenito • 15 years ago

8cd130

fix ordering of interface calls in iptables.

Chris PeBenito • 15 years ago

e6985f

fix ordering of interface calls in init.

Chris PeBenito • 15 years ago

464ffa

fix ordering of interface calls in hostname.

Chris PeBenito • 15 years ago

14d282

fix ordering of interface calls in getty.

Chris PeBenito • 15 years ago

5b5300

fix ordering of interface calls in fstools.

Chris PeBenito • 15 years ago

79ca72

fix ordering of interface calls in clock.

Chris PeBenito • 15 years ago

08638a

fix ordering of interface calls in authlogin.

Chris PeBenito • 15 years ago

2acba7

openrc unfortunately mounts a tmpfs at /lib/rc

Chris PeBenito • 15 years ago

4c92f0

gentoo init script system uses tmpfs for state data

Chris PeBenito • 15 years ago

cfdbf3

gentoo init script system sends audit messages.

Chris PeBenito • 15 years ago

efa0ac

automount patch from dan.

Chris PeBenito • 15 years ago

333222

add missing userdom interfaces

Chris PeBenito • 15 years ago

408319

remove read_default_t tunable

Chris PeBenito • 15 years ago

09516c

trunk: whitespace fixes

Chris PeBenito • 15 years ago

3f67f7

trunk: remove unnecessary semicolons after interface/template calls.

Chris PeBenito • 15 years ago

26410d

trunk: Misc fixes for unix_update from Brandon Whalen.

Chris PeBenito • 15 years ago

df28a0

trunk: 1 patch from dan.

Chris PeBenito • 15 years ago

30425a

trunk: add libjackserver.so textrel fc.

Chris PeBenito • 15 years ago

22894e

trunk: whitespace fixes.

Chris PeBenito • 15 years ago

c0f5fa

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

339235

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

153fe2

trunk: module version bump for previous commit.

Chris PeBenito • 15 years ago

09125a

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

d6605b

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

244b45

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

3c9b2e

trunk: remove unused udev_runtime_t type.

Chris PeBenito • 15 years ago

81fa19

trunk: add context contains to setrans.

Chris PeBenito • 15 years ago

c1e501

trunk: add support for labeled booleans.

Chris PeBenito • 15 years ago

f0435b

trunk: Remove node definitions and change node usage to generic nodes.

Chris PeBenito • 15 years ago

c12621

trunk: change network interface access from all to generic network interfaces.

Chris PeBenito • 15 years ago

668b30

trunk: bump module versions for release.

Chris PeBenito • 15 years ago

17ec8c

trunk: Fix consistency of audioentropy and iscsi module naming.

Chris PeBenito • 15 years ago

319697

trunk: whitespace fixes in xml blocks.

Chris PeBenito • 16 years ago

ff8f0a

trunk: whitespace fix changing multiple spaces into tabs.

Chris PeBenito • 16 years ago

6073ea

trunk: Debian file context fix for xen from Russell Coker.

Chris PeBenito • 16 years ago

b3eb12

trunk: fix logging admin interfaces.

Chris PeBenito • 16 years ago

7a4c28

trunk: 2 fixes from martin orr.

Chris PeBenito • 16 years ago

73c77e

trunk: patch from Mike Edenfield to add udevadm fc entry.

Chris PeBenito • 16 years ago

27337d

trunk: merge UBAC.

Chris PeBenito • 16 years ago

296273

trunk: additional open fixes.

Chris PeBenito • 16 years ago

932c35

trunk: more open perm fixes.

Chris PeBenito • 16 years ago

82d277

trunk: remove redundant shared lib calls.

Chris PeBenito • 16 years ago

2cca6b

trunk: additional whitespace fixes.

Chris PeBenito • 16 years ago

2a9837

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 16 years ago

88cf0a

trunk: Enable open permission checks policy capability.

Chris PeBenito • 16 years ago

0b36a2

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

5d4f4b

trunk: a pile of misc fixes.

Chris PeBenito • 16 years ago

aa7c46

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

06099d

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 16 years ago

04d286

trunk: init script for setrans.

Chris PeBenito • 16 years ago

88c02e

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 16 years ago

64c5b9

trunk: logging update from dan.

Chris PeBenito • 16 years ago

cfafe4

trunk: kudzu and mta patches from dan.

Chris PeBenito • 16 years ago

36095d

trunk: ntp and setrans update from dan.

Chris PeBenito • 16 years ago

878691

trunk: fix bad require.

Chris PeBenito • 16 years ago

96851b

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 16 years ago

e40fa6

trunk: first part of init script labeling support.

Chris PeBenito • 16 years ago

6cc3f3

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 16 years ago

e4171e

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 16 years ago

c11057

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

770c01

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 16 years ago

3e5987

trunk: two small patches from dan.

Chris PeBenito • 16 years ago

6e3289

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 16 years ago

9acf48

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 16 years ago

9c4500

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 16 years ago

e0ed76

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 16 years ago

8a948c

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 16 years ago

3338f2

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 16 years ago

556556

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 16 years ago

dc1920

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

2b592a

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 16 years ago

4459a7

trunk: bump versions for release.

Chris PeBenito • 16 years ago

cfcf50

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaee

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a903

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efe

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbd

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cd

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b4

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e82895

trunk: small fixes for gentoo system.

Chris PeBenito • 16 years ago

2ed4f5

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 16 years ago

91d6c9

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 16 years ago

47333d

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 16 years ago

e065ac

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

834401

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

90c3c5

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

9fa023

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

ee6608

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 16 years ago

6e7a1f

trunk: add basic ubuntu support

Chris PeBenito • 16 years ago

12cf80

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 16 years ago

9323a5

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 16 years ago

7cbfeb

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

f7925f

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

1abafe

trunk: several fc updates from dan.

Chris PeBenito • 16 years ago

02d968

trunk: add openoffice locations in gentoo.

Chris PeBenito • 16 years ago

9f6e2d

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 16 years ago

dd9e1d

trunk: another round of nsswitch from dan.

Chris PeBenito • 16 years ago

09e216

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 17 years ago

c0cf6e

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 17 years ago

08dcce

trunk: version bump for newrole fixes.

Chris PeBenito • 17 years ago

f98cfb

trunk: test fix 2 for newrole.

Chris PeBenito • 17 years ago

c2b87f

trunk: test fix for newrole.

Chris PeBenito • 17 years ago

6138d3

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 17 years ago

1483be

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 17 years ago

2f5c2f

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

0aa18d

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 17 years ago

0b6aca

trunk: add unconfined_run_to().

Chris PeBenito • 17 years ago

ccf661

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 17 years ago

013783

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 17 years ago

53da70

trunk: reorganize selinuxutil.

Chris PeBenito • 17 years ago

389ad7

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 17 years ago

eeef8d

trunk: 9 patches from dan.

Chris PeBenito • 17 years ago

226c06

trunk: 8 patches from dan.

Chris PeBenito • 17 years ago

6c9118

trunk: add in polmatch for default spd.

Chris PeBenito • 17 years ago

982035

trunk: add labeled networking support to unconfined.

Chris PeBenito • 17 years ago

bdccba

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 17 years ago

847937

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

eaed90

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 17 years ago

3ece11

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

7d4161

trunk: remove unused types from dbus.

Chris PeBenito • 17 years ago

bd973e

trunk: 10 patches from dan.

Chris PeBenito • 17 years ago

cdf98f

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 17 years ago

ef659a

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

6c53a1

trunk: module version bumps for previous commit.

Chris PeBenito • 17 years ago

12e9ea

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 17 years ago

350b6a

trunk: bump version numbers for release.

Chris PeBenito • 17 years ago

3480f3

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 17 years ago

aef93a

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

6f49b4

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

14add3

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

134a79

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 17 years ago

abc893

trunk: six patches from dan.

Chris PeBenito • 17 years ago

72f82c

trunk: udev update and brctl module from dan.

Chris PeBenito • 17 years ago

8241b5

trunk: 5 patches from dan.

Chris PeBenito • 17 years ago

0a0b80

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 17 years ago

492276

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 17 years ago

752ddf

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 17 years ago

2af7b4

trunk: updates from dan on 9 modules

Chris PeBenito • 17 years ago

8d2c34

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 17 years ago

f8233a

trunk: several MLS enhancements.

Chris PeBenito • 17 years ago

2d0c9c

trunk: add application module

Chris PeBenito • 17 years ago

d46cfe

trunk: fix missed netlabel deprecation

Chris PeBenito • 17 years ago

692952

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1d

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4f

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

190066

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f0897

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ad

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649ae

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d3

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

778296

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2c

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d6

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e52

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc

bump module versions for release

Chris PeBenito • 17 years ago

0251df

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

697489

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2de

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a

one-liner from dan

Chris PeBenito • 17 years ago

cc9130

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eb

from Dan:

Chris PeBenito • 17 years ago

c224d9

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448b

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45ea

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 18 years ago

d6d16b

patch from dan for some missing gen_require()s

Chris PeBenito • 18 years ago

563e58

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 18 years ago

c6a60b

fixes from gentoo strict testing:

Chris PeBenito • 18 years ago

ed38ca

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 18 years ago

0f9a2b

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 18 years ago

d9845a

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 18 years ago

582438

add seutil_rw_config()

Chris PeBenito • 18 years ago

d5ae68

enhanced setransd support from darrel goeddel

Chris PeBenito • 18 years ago

a8671a

bump versions to release numbers

Chris PeBenito • 18 years ago

a52b4d

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 18 years ago

b04ecc

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 18 years ago

130f8a

fix ticket #16

Chris PeBenito • 18 years ago

aeaae5

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 18 years ago

e45324

more realplayer entries

Chris PeBenito • 18 years ago

009b37

gentoo testing fixes.

Chris PeBenito • 18 years ago

14b168

change transition from run_init to initrc to spec.

Chris PeBenito • 18 years ago

93ddc6

more non .so lib files for acrobat

Chris PeBenito • 18 years ago

546c81

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 18 years ago

3c3c04

- Move range transitions to modules.

Chris PeBenito • 18 years ago

e070dd

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 18 years ago

002190

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 18 years ago

e2b84e

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 18 years ago

693d4a

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 18 years ago

8708d9

* add a macro for generating category declarations

Chris PeBenito • 18 years ago

a9e03b

gentoo testing fixes

Chris PeBenito • 18 years ago

bf469d

common users list inotifyfs

Chris PeBenito • 18 years ago

2b571d

fix miscfiles_read_localization()

Chris PeBenito • 18 years ago

2cac32

misc fixes

Chris PeBenito • 18 years ago

0d96ff

add last bit of role infrastructure

Chris PeBenito • 18 years ago

b1bf2f

add main part of role-o-matic

Chris PeBenito • 18 years ago

bbcd3c

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 18 years ago

75beb9

fix up usb.ids per distro

Chris PeBenito • 18 years ago

91dabf

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 18 years ago

13d7ce

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 18 years ago

5dbda5

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 18 years ago

eac818

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 18 years ago

a5e213

more testing fixes

Chris PeBenito • 18 years ago

ce6bf7

fix gentoo /opt contexts

Chris PeBenito • 18 years ago

de2228

more strict testing fixes

Chris PeBenito • 18 years ago

98de87

more testing fixes

Chris PeBenito • 18 years ago

d15dd5

fix ordering bug

Chris PeBenito • 18 years ago

5b4ff3

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 18 years ago

3ef029

testing fixes

Chris PeBenito • 18 years ago

e9b9e4

fix for netfilter_contexts

Chris PeBenito • 18 years ago

4bc6e3

cleanup in authlogin

Chris PeBenito • 18 years ago

ba1a54

remove dead selopt rules

Chris PeBenito • 18 years ago

33c7e6

ps/ptrace dontaudit cleanup

Chris PeBenito • 18 years ago

497da0

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 18 years ago

85476e

add authlogin interface to abstract common login program perms

Chris PeBenito • 18 years ago

4b3b46

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 18 years ago

465510

add helpers for printing warning and error messages

Chris PeBenito • 18 years ago

ea3c1f

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 18 years ago

19ebf0

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 18 years ago

da9bbc

remove extra level of directory

Chris PeBenito • 18 years ago

17de1b

rpms / selinux-policy

History policy/modules/system

rpms / selinux-policy

Source Code

History policy/modules/system