File history - rpms/selinux-policy

dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

20f707

Allow nsplugin to sendto itself dgrams

Dan Walsh • 14 years ago

f6e966

Allow mozilla_plugin to manage all gnome config files

Dan Walsh • 14 years ago

79bff2

Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

4e6b3f

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

fd595e

Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home

Dan Walsh • 14 years ago

521289

Allow haze to connect to yahoo chat and messenger port tcp:5050.

Dominick Grift • 14 years ago

e66aa7

Allow guest to run ps command on its processes by allowing it to read /proc

Dan Walsh • 14 years ago

24ea65

Allow firewallgui to sys_rawio which seems to be required to setup masqerading

Dan Walsh • 14 years ago

fb5248

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

f7307c

Allow rpc.quota to do quotamod

Dan Walsh • 14 years ago

7cfb93

Move c2s to run in jabber_router_t domain

Miroslav Grepl • 14 years ago

df488e

Merge branch 'base'

Dominick Grift • 14 years ago

ff9b16

miscfiles_manage_cert_files is deprecated: Use miscfiles_manage_generic_cert_files.

Dominick Grift • 14 years ago

71f455

Use permission sets where possible.

Dominick Grift • 14 years ago

7d1f56

XML summary fixes.

Dominick Grift • 14 years ago

783213

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

a25335

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

478149

Source is x_domain and not xserver_t. Moving to x_domain local policy.

Dominick Grift • 14 years ago

e2d9aa

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

568349

Redundant: Included userdom_user_home_content already has this.

Dominick Grift • 14 years ago

daed45

Remove stray semi-colon.

Dominick Grift • 14 years ago

6aa632

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

aaf8a6

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

8b858f

Redundant: Included inetd_service_domain has this.

Dominick Grift • 14 years ago

ce6df0

Support network connect mysql DB.

Dominick Grift • 14 years ago

fae947

There is already an optional policy block for daemontools. Join the two.

Dominick Grift • 14 years ago

5492a1

Consistent ordering of declarations.

Dominick Grift • 14 years ago

9444a1

Use domtrans_pattern where possible.

Dominick Grift • 14 years ago

3c4ffa

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

1e2abe

This is no declaration. Moving to local policy.

Dominick Grift • 14 years ago

39178a

These were duplicate TE rules.

Dominick Grift • 14 years ago

09873e

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

1507cc

These interface calls are more suitable here. Might want to implement boolean spamd_network_connect_db.

Dominick Grift • 14 years ago

86225e

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

54590a

More typos

Dan Walsh • 14 years ago

e027e9

fix typo

Dan Walsh • 14 years ago

fad629

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

55bffb

Allow consolehelper to read fonts and config files in user homedir

Dan Walsh • 14 years ago

7c94a3

This is git system content.

Dominick Grift • 14 years ago

730ec5

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

78ea2a

Merge branch 'base'

Dominick Grift • 14 years ago

a5ea14

Make hal a dbus_system_domain

Dan Walsh • 14 years ago

f4dc19

Use permission sets where possible.

Dominick Grift • 14 years ago

ac5201

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

cefe9f

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

18f2a7

Use permission sets where possible.

Dominick Grift • 14 years ago

0f7c40

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

c2b2d2

The process and capability IPC goes on top of local policy.

Dominick Grift • 14 years ago

1b39de

This permission is already allowed by included mmap_file_perms.

Dominick Grift • 14 years ago

8725d6

Source is postdrop and not local. Moving to postdrop local policy section.

Dominick Grift • 14 years ago

11ad1d

Internal interaction goes before external interface calls.

Dominick Grift • 14 years ago

a7b40a

These are not declarations move them to local policy section.

Dominick Grift • 14 years ago

f6e866

Redundant: All domains are allowed this access by default.

Dominick Grift • 14 years ago

9bd884

Location /usr/libsexec/sesh does not exist. sesh is in /usr/libexec/sesh.

Dominick Grift • 14 years ago

6d1855

Looks like /usr/bin/git-shell and /usr/libexec/git-core/git-shell are hard-linked. This causes conflicting filespecs (shell_exec_t for /usr/bin/git-shell and bin_t for /usr/libexec/git-core/git-shell)

Dominick Grift • 14 years ago

46d410

Reduntant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

a8fbd9

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

5d8259

Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc

Dan Walsh • 14 years ago

6ed3f1

XML summary fixes.

Dominick Grift • 14 years ago

148e08

Use filetrans_pattern.

Dominick Grift • 14 years ago

3a3e7d

Use stream connect pattern.

Dominick Grift • 14 years ago

44f8aa

Redundant brace nothing to expand here.

Dominick Grift • 14 years ago

8bde5e

Make git daemon executable file an application executable file.

Dominick Grift • 14 years ago

96d3c0

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

08c4bb

These interface calls are more suitable here. Also should rename boolean to ftpd_network_connect_db and possibly split mysql and postgresql.

Dominick Grift • 14 years ago

38039a

Move calls to external interfaces below policy that governs internal interaction.

Dominick Grift • 14 years ago

02687a

The capability IPC goes on top of the local policy.

Dominick Grift • 14 years ago

d54202

This is a duplicate declaration.

Dominick Grift • 14 years ago

b952f9

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

ef521e

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

68ac47

This is not required here.

Dominick Grift • 14 years ago

0bdd85

Youre not allowed to directly use external types.

Dominick Grift • 14 years ago

82c971

Redundant: All deamons are already allowed this access by default.

Dominick Grift • 14 years ago

59c544

Redundant: Included init_daemon_domain already has this.

Dominick Grift • 14 years ago

edcc8a

Use permission sets where possible.

Dominick Grift • 14 years ago

1dfc76

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

9a0f79

Redundant: Is already permitted by included rw_chr_file_perms.

Dominick Grift • 14 years ago

9c7f2a

Use permission sets where possible.

Dominick Grift • 14 years ago

72ba80

Allow boinc projects to execute java

Miroslav Grepl • 14 years ago

b0a5fc

Merge branch 'base'

Dominick Grift • 14 years ago

fc0d3d

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

f26267

XML summary fixes.

Dominick Grift • 14 years ago

612346

Use brace extension where possible.

Dominick Grift • 14 years ago

0eef2c

Use permission sets where possible.

Dominick Grift • 14 years ago

69d143

Type zarafa_server_t is not a file type.

Dominick Grift • 14 years ago

5ce19e

This is a role capability.

Dominick Grift • 14 years ago

e13067

Redundant: Included files_search_var_lib already permits access to list generic var directories.

Dominick Grift • 14 years ago

7bc4e8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

ddbd71

Missing required type.

Dominick Grift • 14 years ago

5a98a5

Use stream connect pattern.

Dominick Grift • 14 years ago

d69618

Allow users to ptrace and send any signal to their pyzor agent.

Dominick Grift • 14 years ago

b85c14

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

6cd6ed

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2a7245

Move this to were the other is and where it should be.

Dominick Grift • 14 years ago

3507be

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2528a2

Tunable, optional and if(n)def blocks go below.

Dominick Grift • 14 years ago

b46b3a

This is not a role capability.

Dominick Grift • 14 years ago

30bbb6

Fixed badly chosen type of interface for some interfaces

Miroslav Grepl • 14 years ago

d15b40

Redundant: This is already allowed by included admin_pattern for mpd_var_lib_t.

Dominick Grift • 14 years ago

6ec59c

Redundant: This is already permitted by included manage_dirs_pattern.

Dominick Grift • 14 years ago

a05376

Added for use in admin interfaces with admin_patterns for lock types..

Dominick Grift • 14 years ago

cbd954

These are duplicates and redundants.

Dominick Grift • 14 years ago

7a3762

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

8e3f53

Use list instead of search in admin interfaces.

Dominick Grift • 14 years ago

61f406

This is a role capability.

Dominick Grift • 14 years ago

55c2e0

XML summary fixes.

Dominick Grift • 14 years ago

8ab34f

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

624f2f

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

8f0b74

This is not a role capability.

Dominick Grift • 14 years ago

f6bed4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

23952d

This permission is included with mmap_file_perms.

Dominick Grift • 14 years ago

6c9940

Allow piranha domains to create their pid directory with their pid file type.

Dominick Grift • 14 years ago

3cc747

Implement oident admin.

Dominick Grift • 14 years ago

c4786d

Wrong type required.

Dominick Grift • 14 years ago

f9c2fa

Use permission sets where possible.

Dominick Grift • 14 years ago

f66acf

Redundant; unused interface plus ypbind_t is not a pid file type.

Dominick Grift • 14 years ago

db775a

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

ce8724

Onlt distro redhat currently implements admin_home_t.

Dominick Grift • 14 years ago

dc47bf

This type is not required here.

Dominick Grift • 14 years ago

4e8c69

Missing required type.

Dominick Grift • 14 years ago

d01706

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

1976dd

Allow users to ptrace and send any signal to their lpd agent.

Dominick Grift • 14 years ago

e8ea77

Reduntant: getattr_sock_files_pattern already permit this.

Dominick Grift • 14 years ago

c0ad94

Reduntant: stream_connect_pattern already permits this.

Dominick Grift • 14 years ago

1c45e2

Reduntant: unused, use hal_read_state instead if possible.

Dominick Grift • 14 years ago

74d74b

Use stream connect pattern.

Dominick Grift • 14 years ago

bece7c

I made a mistake in 618ce85f8644651501724947b134855e9e827a74, but as it turns out this interface is not required at all.

Dominick Grift • 14 years ago

ab33cc

Use permission sets where possible.

Dominick Grift • 14 years ago

9fa4de

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

4b1644

XML summary fixes.

Dominick Grift • 14 years ago

3c484f

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

86f9f9

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

6bb4d4

This is a role capability.

Dominick Grift • 14 years ago

25e284

Tunable and optional policy goes below.

Dominick Grift • 14 years ago

f6bcb2

Use entry_file as entry_point to domain transition.

Dominick Grift • 14 years ago

b11ba4

Move system type alias statements to system declarations.

Dominick Grift • 14 years ago

28fdb8

Add file context specification for HOME_DIR/\.gitaliases. May not be required but cannot hurt either.

Dominick Grift • 14 years ago

b5d551

Use can_exec.

Dominick Grift • 14 years ago

618ce8

Search parent directory to be able to interact with targets content.

Dominick Grift • 14 years ago

1e9280

This is not a role capability.

Dominick Grift • 14 years ago

89bb44

Allow users to ptrace and send any signal to their bluetooth helper agent.

Dominick Grift • 14 years ago

dd0d45

Class is supposed to be fifo_file according to summary.

Dominick Grift • 14 years ago

2d6615

Use domtrans_pattern.

Dominick Grift • 14 years ago

eb0e0b

Use stream connect pattern.

Dominick Grift • 14 years ago

029369

Clean up (network) connect DB.

Dominick Grift • 14 years ago

9b2600

Boolean declarations go above.

Dominick Grift • 14 years ago

7fa5a6

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

c5eae5

This is a leftover from refpolicy implementation of this functionality.

Dominick Grift • 14 years ago

1b1f7d

No need for httpd_builtin_scripting to be set for httpd_t to be allowed to read files.

Dominick Grift • 14 years ago

bbdbce

Change this functionality to our implementation of this functionality.

Dominick Grift • 14 years ago

c53b75

Remove accedentlay added ~ files

Dan Walsh • 14 years ago

8c47ad

Add vnstat policy

Dan Walsh • 14 years ago

0a394b

Fixes for cluster policy

Miroslav Grepl • 14 years ago

be5142

Merge upstream

Dan Walsh • 14 years ago

14ffaf

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

a55bb5

This is a role capability.

Dominick Grift • 14 years ago

9c9e4c

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

0dacd0

Requires system_r role.

Dominick Grift • 14 years ago

23ac31

Replace type and attributes statements by comma delimiters where possible.

Dominick Grift • 14 years ago

2f94f4

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

2de234

The ps_process_pattern includes permission to get attributes of target domain.

Dominick Grift • 14 years ago

819518

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

dcf874

Use permission sets where possible.

Dominick Grift • 14 years ago

59c034

Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Dominick Grift • 14 years ago

ba6db0

XML summary ffixes.

Dominick Grift • 14 years ago

b35d25

Search parent directory to be able to interact with target content.

Dominick Grift • 14 years ago

f92662

Allow users to ptrace and send any kind of signal to spamassassin agents.

Dominick Grift • 14 years ago

4ff4dd

This type is not required here.

Dominick Grift • 14 years ago

c5cadd

This is not a role capability.

Dominick Grift • 14 years ago

b0e9aa

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

a3d20a

Redundant: This is included with userdom_read_user_home_content_files.

Dominick Grift • 14 years ago

9a2fd7

Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.

Dominick Grift • 14 years ago

50e857

Redundant: This is included with userdom_search_user_home_content.

Dominick Grift • 14 years ago

f416df

Redundant: domtrans_pattern includes these.

Dominick Grift • 14 years ago

a87e8f

Do not audit interface should not provide permission to read parent directories.

Dominick Grift • 14 years ago

d0b756

Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.

Dominick Grift • 14 years ago

5ebd1a

Whitespace, newline and tab fixes.

Dominick Grift • 14 years ago

2d102f

Tunable, optional, if(n)def block go below.

Dominick Grift • 14 years ago

60d27b

Use stream_connect_pattern.

Dominick Grift • 14 years ago

2e2a24

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

4d71bc

Use relabel permission sets where possible.

Dominick Grift • 14 years ago

83029f

Add missing admin_patterns to rpcbind_admin.

Dominick Grift • 14 years ago

4ec4a4

Use stream connect pattern.

Dominick Grift • 14 years ago

ac13ad

Use ps_process_pattern to read state.

Dominick Grift • 14 years ago

ad4245

Reduntant: Is already included with userdom_search_user_home_dirs.

Dominick Grift • 14 years ago

87cd6e

Access to get attributes of target pppd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

4eaffd

Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

39e118

Allow pads_admin to search parent directories to be able to interact with pads content.

Dominick Grift • 14 years ago

1215df

XML summary fix.

Dominick Grift • 14 years ago

d18313

Access to get attributes of target accountsd_t domain is included with ps_process_pattern.

Dominick Grift • 14 years ago

dcbbee

Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.

Dominick Grift • 14 years ago

b6d0a7

Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.

Dominick Grift • 14 years ago

eb12bc

Use the stream_connect_pattern.

Dominick Grift • 14 years ago

f386b9

Allow mpd_admin to manage mpd tmpfs content.

Dominick Grift • 14 years ago

c5e7db

Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.

Dominick Grift • 14 years ago

0ba923

Redundant: mpd_search_lib already includes files_search_var_lib.

Dominick Grift • 14 years ago

0ab415

Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.

Dominick Grift • 14 years ago

7d3493

Allow icecast_admin to ptrace and signal the icecast_t domain.

Dominick Grift • 14 years ago

aa5baa

This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.

Dominick Grift • 14 years ago

4b81a5

Permission to search proc_t directories is required to be able to read abrt state.

Dominick Grift • 14 years ago

7d36c9

Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.

Dominick Grift • 14 years ago

b36824

Replace some type statements by comma delimiters.

Dominick Grift • 14 years ago

cf152b

Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.

Dominick Grift • 14 years ago

47cf98

Type system_cronjob_var_run_t is not required here.

Dominick Grift • 14 years ago

5ecaac

Types crontab_exec_t, cron_spool_t and user_cron_spool_t are required here.

Dominick Grift • 14 years ago

beb9c3

Permission to search generic pid directories is included with files_pid_filetrans.

Dominick Grift • 14 years ago

d8d33a

Use ps_process_pattern to read state. Permission to seach proc_t directories is required to read automount state.

Dominick Grift • 14 years ago

0540e2

Type xenstored_var_run_t is required here.

Dominick Grift • 14 years ago

cb76ff

Type print_spool_t is not required here.

Dominick Grift • 14 years ago

8c0a06

Add the ability to send audit messages to confined admin policies

Dan Walsh • 14 years ago

9461b6

Allow iscsid to manage tgtd semaphores

Miroslav Grepl • 14 years ago

3b0a9c

Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710

Chris PeBenito • 14 years ago

fee486

radvd patch from Dan Walsh

Jeremy Solt • 14 years ago

792d44

snort patch from Dan Walsh

Jeremy Solt • 14 years ago

dc7cc4

stunnel patch from Dan Walsh

Jeremy Solt • 14 years ago

c20842

zabbix patch from Dan Walsh

Jeremy Solt • 14 years ago

622c63

zebra patch from Dan Walsh

Jeremy Solt • 14 years ago

bf4079

awstats patch from Dan Walsh

Jeremy Solt • 14 years ago

4f9519

certmaster patch from Dan Walsh

Jeremy Solt • 14 years ago

e9bf16

pcscd patch from Dan Walsh

Jeremy Solt • 14 years ago

dc1db5

postgresql patch from Dan Walsh

Jeremy Solt • 14 years ago

17759c

postgrey patch from Dan Walsh

Jeremy Solt • 14 years ago

cf8723

prelude patch from Dan Walsh

Jeremy Solt • 14 years ago

a59e50

certwatch patch from Dan Walsh

Jeremy Solt • 14 years ago

f3c5e7

firstboot patch from Dan Walsh

Jeremy Solt • 14 years ago

5afc3d

smoltclient patch from Dan Walsh

Jeremy Solt • 14 years ago

689d95

amavis patch from Dan Walsh

Jeremy Solt • 14 years ago

b8097d

arpwatch patch from Dan Walsh

Jeremy Solt • 14 years ago

5b082e

canna patch from Dan Walsh

Jeremy Solt • 14 years ago

b0d8d5

certmonger patch from Dan Walsh

Jeremy Solt • 14 years ago

c6c63f

courier patch from Dan Walsh

Jeremy Solt • 14 years ago

483be0

dcc patch from Dan Walsh

Jeremy Solt • 14 years ago

67effb

style change to djbdns.te

Jeremy Solt • 14 years ago

a83171

fetchmail patch from Dan Walsh

Jeremy Solt • 14 years ago

c4fbfa

icecast patch from Dan Walsh

Jeremy Solt • 14 years ago

01c441

nslcd patch from Dan Walsh

Jeremy Solt • 14 years ago

2a2b6a

nut patch from Dan Walsh

Jeremy Solt • 14 years ago

527192

openct patch from Dan Walsh

Jeremy Solt • 14 years ago

c17ad3

Unconditional staff and user oidentd home config access from Dominick Grift.

Chris PeBenito • 14 years ago

25d796

Access for confined users to oidentd user home content is unconditional.

Dominick Grift • 14 years ago

941e3d

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

6dfe56

add labeling for /root/.debug

Dan Walsh • 14 years ago

43a033

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

d7f202

Fixes for vmware-host policy

Miroslav Grepl • 14 years ago

323c9f

Allow a couple of sandbox issues.

Dan Walsh • 14 years ago

c2dae9

Add labels for /lib/readahead.

Dan Walsh • 14 years ago

4251ae

Fix gnome_setattr_config_home

Dan Walsh • 14 years ago

5ef740

Fix some names in passenger policy

Dan Walsh • 14 years ago

3034a8

Move passenger policy to services

Miroslav Grepl • 14 years ago

94820e

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy

Dan Walsh • 14 years ago

536f28

Fix boolean descriptions

Dan Walsh • 14 years ago

1a40cb

Allow dovecot-deliver to create tmp files

Miroslav Grepl • 14 years ago

3a3212

- Add passenger policy

Miroslav Grepl • 14 years ago

d7de04

Fix cert calls in telepath, boinc, kerberos

Dan Walsh • 14 years ago

366396

Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy; branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cab9bc

rename mdadm_map_t to mdadm_var_run_t

Dan Walsh • 14 years ago

d7544f

More fixes for mozilla_plugin_t

Dan Walsh • 14 years ago

0b8f4c

Module version bumps for cert patch.

Chris PeBenito • 14 years ago

da12b5

Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.

Chris PeBenito • 14 years ago

e9d6df

Implement miscfiles_cert_type().

Dominick Grift • 14 years ago

834062

Allow hugetlbfs_t to be on device_t file system

Dan Walsh • 14 years ago

1a8278

Module version bump for 8296eb2.

Chris PeBenito • 14 years ago

8fbea5

raid tools now store pid file and sock_file in /dev/md for early boot.

Dan Walsh • 14 years ago

e81afd

fixes for openvpn suggested by dgrift

Dan Walsh • 14 years ago

8e47c0

Allow mozilla_plugin to create nsplugin_home_t directories

Dan Walsh • 14 years ago

da0733

Remove unallocated tty access in amanda since it was originally there for the old targeted policy, and now all roles have a user tty type.

Chris PeBenito • 14 years ago

9c2c77

Clean up Anaconda policy.

Dominick Grift • 14 years ago

36c6e4

Clean up Amtu module.

Dominick Grift • 14 years ago

e02146

Clean up Amanda module.

Dominick Grift • 14 years ago

8296eb

add policy for ajaxterm

Dan Walsh • 14 years ago

5f5963

add policy for ajaxterm

Dan Walsh • 14 years ago

4c3817

allow sudo to create sudo_db_t dirs

Dan Walsh • 14 years ago

d46a2b

Allow crond to manage user_spool_cron_t link files

Dan Walsh • 14 years ago

ee4b1e

Allow sudo domains to manage /var/db/sudo

Dan Walsh • 14 years ago

b36c20

Allow virt_domains to exec qumu_exec_t, add boolean to allow svirt_t to connect to x

Dan Walsh • 14 years ago

a75a59

Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t

Dan Walsh • 14 years ago

dfe675

Cleanup warnings

Dan Walsh • 14 years ago

5dd0c2

add sametime port definition

Dan Walsh • 14 years ago

4432db

Fix apache interface

Dan Walsh • 14 years ago

689bfe

fix bad patch in xserver

Dan Walsh • 14 years ago

f79af2

Fix gnome interface definitions

Dan Walsh • 14 years ago

aa760a

add sametime port definition

Dan Walsh • 14 years ago

e51122

fix typo in xserver_stream_connect

Dan Walsh • 14 years ago

0745e4

cleanup alsa patch to match upstream

Dan Walsh • 14 years ago

36d83c

Eliminate extras alsa_read_home interface

Dan Walsh • 14 years ago

4192c8

Any app that executes service command will not do a getattr of all mounted file systems

Dan Walsh • 14 years ago

818734

Allow apps that use pam to connect to init_t

Dan Walsh • 14 years ago

c16ffd

Fix pootle

Dan Walsh • 14 years ago

db8799

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

f5b49a

Merge with upsteam

Dan Walsh • 14 years ago

f00ba2

Merge branches 'master', 'master' and 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cdda8f

Allow gpg_pinentry_t to use fifo files of apps that transition to gpg_agent

Dan Walsh • 14 years ago

ef98a3

Module version bumps for b7ceb34 5675107 e411968 eca7eb3.

Chris PeBenito • 14 years ago

28d96f

Rearrange alsa interfaces.

Chris PeBenito • 14 years ago

eca7eb

Implement alsa_home_t for asoundrc. Clean up Alsa module.

Dominick Grift • 14 years ago

e41196

Libcgroup moved the cgroup directory to /sys/fs/cgroup.

Dominick Grift • 14 years ago

567510

Do not try to relabel the contents of the /dev/shm directory.

Dominick Grift • 14 years ago

b7ceb3

Fix mmap_zero patch

Dan Walsh • 14 years ago

b631f2

Allow certmaster to read usr_t files. All python apps are going to need this.

Dan Walsh • 14 years ago

a66812

cleanup mmap_low merge with upstream

Dan Walsh • 14 years ago

3a2e88

Merge branch 'master' of http://oss.tresys.com/git/refpolicy

Dan Walsh • 14 years ago

cbadf7

define /sys/fs/cgroup as a <<none>> file system

Dan Walsh • 14 years ago

02fb4a

Module version bump and changelog entry for conditional mmap_zero patch.

Chris PeBenito • 14 years ago

785ee7

Fix mmap_zero assertion violation in xserver.

Chris PeBenito • 14 years ago

a1b420

Allow all X apps to use direct dri if user_direct_dri boolean is turned on

Dan Walsh • 14 years ago

09686d

firstboot is leaking a netlink_route socket into iptables. We need to dontaudit

Dan Walsh • 14 years ago

035275

1/1] Make the ability to mmap zero conditional where this is fapplicable.

Dominick Grift • 14 years ago

623e4f

Fix sandbox tcp_socket calls to create_stream_socket_perms

Dan Walsh • 14 years ago

c6fa93

Allow qmail to use uucpd

Dan Walsh • 14 years ago

4fccad

Add Miroslav Grepl patch for jabberd, adding new type for jabberd router.

Dan Walsh • 14 years ago

5fb4db

Allow prelink to read dbus config/Broken

Dan Walsh • 14 years ago

3fdb12

Apply Dominick Grift typo fixes

Dan Walsh • 14 years ago

5537e5

Allow hald to transition to netutils

Dan Walsh • 14 years ago

079779

merge latest upstream

Dan Walsh • 14 years ago

898c0d

Dontaudit signals from sandbox domains to domains that transition to them

Dan Walsh • 14 years ago

ddcd5d

Dontaudit socket leaks when running semanage code

Dan Walsh • 14 years ago

8c8a10

Fix spelling mistake

Dan Walsh • 14 years ago

73f7d4

More fixes

Dan Walsh • 14 years ago

c71f02

Policy fixes

Dan Walsh • 14 years ago

2d4a79

More fixes

Dan Walsh • 14 years ago

ac498f

Latest fixes

Dan Walsh • 14 years ago

08e567

Update f14

Dan Walsh • 14 years ago

9561b0

Fixes for f14

Dan Walsh • 14 years ago

4765a5

ditto

Dan Walsh • 14 years ago

46c24a

whoya

Dan Walsh • 14 years ago

aae38f

Update f14

Dan Walsh • 14 years ago

2968e0

Fix policy

Dan Walsh • 14 years ago

18549c

reset

Dan Walsh • 14 years ago

507000

Modified amanda

Dan Walsh • 14 years ago

8f4ec1

Reset base

Dan Walsh • 14 years ago

09154b

Modify amanda

Dan Walsh • 14 years ago

e15d0e

F14

Dan Walsh • 14 years ago

0aa4ec

F14

Dan Walsh • 14 years ago

f9c557

F14

Dan Walsh • 14 years ago

e5e9b7

Update f14

Dan Walsh • 14 years ago

a947da

Latest f14

Dan Walsh • 14 years ago

83eff0

UPdate for f14 policy

Dan Walsh • 14 years ago

3eaa99

Module version bumps and changelog for devtmpfs patchset.

Chris PeBenito • 14 years ago

76a9fe

Trivial tweaks to devtmpfs patches.

Chris PeBenito • 14 years ago

0d2480

Early devtmpfs access

Jeremy Solt • 14 years ago

2fc79f

Move devtmpfs to devices from filesystem

Jeremy Solt • 14 years ago

d6e1ef

Dbadm updates from KaiGai Kohei.

Chris PeBenito • 14 years ago

c62f1b

Part of gnome patch from Dan Walsh.

Chris PeBenito • 14 years ago

ab8f91

Additional kdumpgui cleanup.

Chris PeBenito • 14 years ago

a9539a

Policy for system-config-kdump gui from Dan Walsh

Jeremy Solt • 14 years ago

46fc0d

system-config-samba dbus service policy from Dan Walsh

Jeremy Solt • 14 years ago

68e615

roles patch from Dan Walsh to move unwanted interface calls into a ifndef

Jeremy Solt • 14 years ago

c87e15

Remove unnecessary require on cgroup_admin().

Chris PeBenito • 14 years ago

00ca40

Whitespace fixes on cgroup.

Chris PeBenito • 14 years ago

d687db

Confine /sbin/cgclear.

Dominick Grift • 14 years ago

61d7ee

System layer xml fixes.

Dominick Grift • 14 years ago

a0546c

Services layer xml files.

Dominick Grift • 14 years ago

288845

Fix corecmd_dontaudit_exec_all_executables doc.

Chris PeBenito • 14 years ago

97b990

Kernel layer xml fixes.

Dominick Grift • 14 years ago

705f70

Fix usermanage_kill_passwd() parameter doc.

Chris PeBenito • 14 years ago

19ff03

Admin layer xml fixes.

Dominick Grift • 14 years ago

77e4b5

apps: domain { allowed to transition, allowed access, to not audit }.

Dominick Grift • 14 years ago

03b866

Accountsd cleanup.

Chris PeBenito • 14 years ago

8da889

Move accountsd to services.

Chris PeBenito • 14 years ago

d0eebe

accountsd policy from Dan Walsh

Jeremy Solt • 14 years ago

c4834a

Docs standardizing on the role portion of run interfaces. Additional docs cleanup.

Chris PeBenito • 14 years ago

a7ee7f

MojoMojo from Lain Arnell.

Chris PeBenito • 14 years ago

9d4395

Interface documentation standardization patch from Dan Walsh.

Chris PeBenito • 14 years ago

a72e42

Virtio disk file context update from Mika Pfluger.

Chris PeBenito • 14 years ago

27eeb6

Take virtio disks into account.

Mika Pflüger • 14 years ago

b3f720

Module version bump for 5563d4c.

Chris PeBenito • 14 years ago

64ef2d

Removing seutil_domtrans_setsebool from anaconda patch - it doesn't exist

Jeremy Solt • 14 years ago

5563d4

anaconda patch from Dan Walsh

Jeremy Solt • 14 years ago

b0a6f1

Increase bindreservport range to 512-1024 in corenetwork, from Dan Walsh.

Chris PeBenito • 14 years ago

21fdee

Fix JIT usage for freshclam.

Chris PeBenito • 14 years ago

29f3bf

Remove some redundant attributes from user_home_t.

Dominick Grift • 14 years ago

48c3c3

Module version bump for fa1847f.

Chris PeBenito • 14 years ago

4b76ea

Add files_poly_member() to userdom_user_home_content() Remove redundant files_poly_member() calls.

Dominick Grift • 14 years ago

fa1847

Add missing ubac constraints on pulseaudio.

Chris PeBenito • 14 years ago

f7ffe6

Remove old rbacsep role statements.

Chris PeBenito • 14 years ago

c14aeb

VMWare patch from Dan Walsh.

Chris PeBenito • 14 years ago

072857

Whitespace fix in userhelper.

Chris PeBenito • 14 years ago

f1618f

RPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

b70dfc

Whitespace fixes in RPM.

Chris PeBenito • 14 years ago

2d839c

Add shutdown from Dan Walsh.

Chris PeBenito • 14 years ago

7e265a

Add livecd from Dan Walsh.

Chris PeBenito • 14 years ago

b841df

Remove ethereal module since the application was renamed to wireshark due to trademark issues.

Chris PeBenito • 14 years ago

08690c

Make spamassassin optional for milter, from Russell Coker.

Chris PeBenito • 14 years ago

3c4e9f

Remove duplicate/redundant rules, from Russell Coker.

Chris PeBenito • 14 years ago

bca0cd

Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role().

Chris PeBenito • 14 years ago

1db183

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

a3b0dc

Usermanage patch from Dan Walsh.

Chris PeBenito • 14 years ago

3bcfe5

Guest patch from Dan Walsh.

Chris PeBenito • 14 years ago

cad422

Module version bump for a7521af.

Chris PeBenito • 14 years ago

ab62f3

firstboot patch from Dan Walsh

Jeremy Solt • 14 years ago

a7521a

fix cgroup_admin

Dominick Grift • 14 years ago

7e5463

Module version bump for 5f04c91.

Chris PeBenito • 14 years ago

caf166

gitosis patch from Dan Walsh

Jeremy Solt • 14 years ago

5f04c9

Module version bump for b5d89d0.

Chris PeBenito • 14 years ago

ab4f82

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

b5d89d

Minor tweaks and module version bump for a00fc1c.

Chris PeBenito • 14 years ago

113d2e

hddtemp fixes.

Dominick Grift • 14 years ago

a00fc1

WM patch from Dan Walsh.

Chris PeBenito • 14 years ago

0cec64

Rearrage interfaces in filesystem.

Chris PeBenito • 14 years ago

3c79f9

Slocate patch from Dan Walsh.

Chris PeBenito • 14 years ago

eab2cc

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

2c207d

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fd3a8

Podsleuth patch from Dan Walsh.

Chris PeBenito • 14 years ago

1ff703

Mplayer patch from Dominick Grift through Dan Walsh.

Chris PeBenito • 14 years ago

8a2409

Mozilla patch from Dan Walsh.

Chris PeBenito • 14 years ago

3c1e8f

Cpufreqselector patch from Dan Walsh.

Chris PeBenito • 14 years ago

ae1b7d

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

a99f69

Vbetool patch from Dan Walsh.

Chris PeBenito • 14 years ago

e08ac5

Sudo patch from Dan Walsh.

Chris PeBenito • 14 years ago

3835c3

Su patch from Dan Walsh.

Chris PeBenito • 14 years ago

f7e341

Shorewall patch from Dan Walsh.

Chris PeBenito • 14 years ago

b9be5c

Quota patch from Dan Walsh.

Chris PeBenito • 14 years ago

5116fa

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

a9ef84

Netutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

9a4d29

Kismet patch from Dan Walsh.

Chris PeBenito • 14 years ago

10c010

Mcelog patch from Dan Walsh.

Chris PeBenito • 14 years ago

e89f04

Consoletype patch from Dan Walsh.

Chris PeBenito • 14 years ago

0e30bc

Alsa patch from Dan Walsh

Chris PeBenito • 14 years ago

88a574

Acct patch from Dan Walsh.

Chris PeBenito • 14 years ago

4db779

Whitespace change: drop unnecessary blank line at the start of .te files.

Chris PeBenito • 14 years ago

48f99a

AFS patch from Dan Walsh.

Chris PeBenito • 14 years ago

5c942c

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

b52122

Files patch from Dan Walsh.

Chris PeBenito • 14 years ago

48e0aa

Terminal patch from Dan Walsh.

Chris PeBenito • 14 years ago

135b1b

Module version bump for cgroup patchset.

Chris PeBenito • 14 years ago

c54e7d

Clean up cgroup. Rename cgconfigparser to cgconfig.

Chris PeBenito • 14 years ago

53f9ab

Remove cgroup_t usage in cgroup_admin() since it is not owned by the module.

Chris PeBenito • 14 years ago

0041a7

Rearrange cgroup interfaces in filesystem.

Chris PeBenito • 14 years ago

860c05

Whitespace fixes in cgroup and init.

Chris PeBenito • 14 years ago

04dcd7

How users interact with cgroup.

Dominick Grift • 14 years ago

e2b9ad

How libgroup init scripts interact with libcgroup.

Dominick Grift • 14 years ago

73f098

add libcg policy.

Dominick Grift • 14 years ago

ddf821

cgroup in filesystem.

Dominick Grift • 14 years ago

c0c635

Kernel patch from Dan Walsh.

Chris PeBenito • 14 years ago

60f04f

Devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb7cad

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

46c0e5

Storage patch from Dan Walsh.

Chris PeBenito • 14 years ago

8f0de5

Fix duplicate lines in kudzu.

Chris PeBenito • 14 years ago

2a2962

Bump module versions for release.

Chris PeBenito • 14 years ago

29af4c

Fix deprecated interface usage in rhel4 block in su.if.

Chris PeBenito • 14 years ago

91cbcc

Module version bump for 904f3d8.

Chris PeBenito • 14 years ago

3d95ca

Module version bump for 1184392 and more.

Chris PeBenito • 14 years ago

7934ac

Module version bump for 7942f7f.

Chris PeBenito • 14 years ago

ca2837

Module version bump for 383bd32.

Chris PeBenito • 14 years ago

bdf5e1

Module version bump for 9e28f74.

Chris PeBenito • 14 years ago

213d35

Module version bump for f61ef24.

Chris PeBenito • 14 years ago

63583f

Module version bump for d5170e5.

Chris PeBenito • 14 years ago

c789f8

Module version bump for cb1df6a.

Chris PeBenito • 14 years ago

d53a97

readahead patch from Dan Walsh

Jeremy Solt • 14 years ago

d8642c

Fix deprecated interface usage that crept into lvm.if.

Chris PeBenito • 14 years ago

fe74f7

Move line in logrotate; module version bump.

Chris PeBenito • 14 years ago

ff1cae

Remove redundant optional and libs_* calls in clogd.

Chris PeBenito • 14 years ago

a107f8

Module version bump for 51ad76f.

Chris PeBenito • 14 years ago

dcb722

whitespace fix for clogd

Jeremy Solt • 14 years ago

6430c7

clogd policy from Dan Walsh

Jeremy Solt • 14 years ago

6055ab

whitespace fixes for cluster suite patch

Jeremy Solt • 14 years ago

7a8e6a

Removed unnecessary comments

Jeremy Solt • 14 years ago

21d23c

Redhat Cluster Suite Policy from Dan Walsh

Jeremy Solt • 14 years ago

538cf9

logrotate patch from Dan Walsh

Jeremy Solt • 14 years ago

b8c987

vpn patch from Dan Walsh

Jeremy Solt • 14 years ago

fdc0d0

dnsmasq patch from Dan Walsh

Jeremy Solt • 14 years ago

37194a

Replace apache_delete_cache with apache_delete_cache_files in tmpreaper.te

Jeremy Solt • 14 years ago

2483d7

tmpreaper patch from Dan Walsh

Jeremy Solt • 14 years ago

8daddc

Remove call to nagios_rw_inherited_tmp_files

Jeremy Solt • 14 years ago

7605d2

netutils patch from Dan Walsh

Jeremy Solt • 14 years ago

44dc1b

Remove nagios_rw_inherited_tmp_files interface

Jeremy Solt • 14 years ago

4ac0cd

Nagios patch from Dan Walsh

Jeremy Solt • 14 years ago

99bbe3

Create type and allow squid to manage its own tmpfs files

Jeremy Solt • 14 years ago

599e8f

squid patch from Dan Walsh

Jeremy Solt • 14 years ago

d86c09

remove rules for nx_server_home_ssh_t since they are already provided by the ssh template

Jeremy Solt • 14 years ago

fb543d

nx patch from Dan Walsh

Jeremy Solt • 14 years ago

316cdb

Postfix patch from Dan Walsh.

Chris PeBenito • 14 years ago

d9e4cb

Prelink patch from Dan Walsh.

Chris PeBenito • 14 years ago

9fe1b5

Sendmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

9ea85e

Procmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

b276e3

MTA patch from Dan Walsh.

Chris PeBenito • 14 years ago

e19b8d

SSH patch from Dan Walsh.

Chris PeBenito • 14 years ago

088b65

Cups patch from Dan Walsh.

Chris PeBenito • 14 years ago

4e698b

Remove excessive permission in udev_manage_rules_files() and move the interface up in the .if file. Module version bump for d56b33a.

Chris PeBenito • 14 years ago

e2c945

Create new interface and type for managing /etc/udev/rules.d

Chris Richards • 14 years ago

d56b33

Abrt patch from Dan Walsh.

Chris PeBenito • 14 years ago

1b2f08

Plymouthd policy from Dan Walsh.

Chris PeBenito • 14 years ago

e9e43f

Hal patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0c2ca

Loadkeys patch from Dan Walsh.

Chris PeBenito • 14 years ago

2e4e39

Java patch from Dan Walsh.

Chris PeBenito • 14 years ago

84940a

CVS patch from Dan Walsh.

Chris PeBenito • 14 years ago

299db7

SETroubleshoot patch from Dan Walsh.

Chris PeBenito • 14 years ago

bcc6e6

Asterisk patch from Dan Walsh.

Chris PeBenito • 14 years ago

ada61e

Munin patch from Dan Walsh.

Chris PeBenito • 14 years ago

24e0b9

RPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

160704

Minor fixes on a2524cf. Module version bump.

Chris PeBenito • 14 years ago

27afb9

Whitespace fixes on cobbler.

Chris PeBenito • 14 years ago

aeb7a4

cobbler patch from Dan Walsh

Jeremy Solt • 14 years ago

a2524c

Cyrus patch from Dan Walsh.

Chris PeBenito • 14 years ago

fb3fc9

Clamav patch from Dan Walsh.

Chris PeBenito • 14 years ago

4804cd

Dovecot patch from Dan Walsh.

Chris PeBenito • 14 years ago

d8eb3c

Networkmanager patch from Dan Walsh.

Chris PeBenito • 14 years ago

baea7b

Add kernel access to devtmpfs. Also add workround while devtmpfs is tmpfs_t instead of device_t.

Chris PeBenito • 14 years ago

03a6e0

Consolekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

a3108c

Arpwatch patch from Dan Walsh.

Chris PeBenito • 14 years ago

b0076a

Dbus patch from Dan Walsh.

Chris PeBenito • 14 years ago

98ac98

Devicekit patch from Dan Walsh.

Chris PeBenito • 14 years ago

61738f

GPG patch from Dan Walsh.

Chris PeBenito • 14 years ago

857d37

Add networking rules for spamd to connect to mysql/postgresql over the network, from Chris St. Pierre.

Chris PeBenito • 14 years ago

87a946

Add missing secmark rules in ntop, from Dominick Grift.

Chris PeBenito • 14 years ago

45696a

FTP patch from Dan Walsh.

Chris PeBenito • 14 years ago

a53c6c

Module version bump for 34838aa.

Chris PeBenito • 14 years ago

d7ebbd

Samba patch from Dan Walsh

Jeremy Solt • 14 years ago

34838a

bootmisc init script, 2nd try

Chris Richards • 14 years ago

9b3e79

Lircd patch from Dan Walsh.

Chris PeBenito • 14 years ago

05a2e3

Add DenyHosts from Dan Walsh.

Chris PeBenito • 14 years ago

e07fbc

Djbdns patch from Dan Walsh.

Chris PeBenito • 14 years ago

44b380

Module version bump and extra comments for 194d61f.

Chris PeBenito • 14 years ago

4a8bd0

modutils patch for update-modules

Chris Richards • 14 years ago

194d61

Module version bump for 8c38fba.

Chris PeBenito • 14 years ago

78352d

allow syslog-ng to setrlimit

Chris Richards • 14 years ago

8c38fb

Module version bump for 4b121a5.

Chris PeBenito • 14 years ago

5c3274

Additional whitespace fix in nis.

Chris PeBenito • 14 years ago

468799

Style changes

Jeremy Solt • 14 years ago

f49fc1

nis patch from Dan Walsh

Jeremy Solt • 14 years ago

4b121a

Additional whitespace fixes in certmonger.

Chris PeBenito • 14 years ago

da5940

Fix some whitespace and style issues.

Jeremy Solt • 14 years ago

0e5494

certmonger policy from Dan Walsh

Jeremy Solt • 14 years ago

33793e

Module version bump for 4f7b413.

Chris PeBenito • 14 years ago

86ff00

Remove excess white space from ntop.te

Jeremy Solt • 14 years ago

e6e2a7

Ntop policy from Dan Walsh

Jeremy Solt • 14 years ago

4f7b41

Module version bump for 46e16a2.

Chris PeBenito • 14 years ago

987597

Move optional policy to correct location for style

Jeremy Solt • 14 years ago

d86d4f

kerberos patch from Dan Walsh

Jeremy Solt • 14 years ago

01bfe1

Use port range notation in corenetwork where it makes sense.

Chris PeBenito • 14 years ago

46e16a

Clean up output of generated corenetwork.te.

Chris PeBenito • 14 years ago

3829ee

Fix network_port() in corenetwork to correctly handle port ranges.

Chris PeBenito • 14 years ago

85e71c

[BUGFIX] lack of type transition on dbadm domain (Re: dbadm.pp is not available in selinux-policy package)

KaiGai Kohei • 14 years ago

ec8d32

Module version bump for 5d3214f and 795b733.

Chris PeBenito • 14 years ago

23ad80

pcscd patch from Dan Walsh: manage pub files and fifo files

Jeremy Solt • 14 years ago

795b73

gpsd path from Dan Walsh

Jeremy Solt • 14 years ago

5d3214

Add devtmpfs labeling.

Chris PeBenito • 14 years ago

e399e3

Move kernel_request_load_module(gssd_t) to the proper place.

Dominick Grift • 14 years ago

91b12a

Fix requires for apache tmp interfaces.

Dominick Grift • 14 years ago

6d9925

Portreserve patch from Dan Walsh.

Chris PeBenito • 14 years ago

b57785

PPP patch from Dan Walsh.

Chris PeBenito • 14 years ago

38db49

Rpc patch from Dan Walsh.

Chris PeBenito • 14 years ago

372acd

Whitespace fixes on Apache.

Chris PeBenito • 14 years ago

20fa70

Module version bump for 170a46d, f8b3b7f, and a49a82c.

Chris PeBenito • 14 years ago

da0608

Tweak for 170a46d.

Chris PeBenito • 14 years ago

b7d3db

snort patch from Dan Walsh

Jeremy Solt • 14 years ago

a49a82

Nut policy from Dan Walsh

Jeremy Solt • 14 years ago

f8b3b7

memcached patch from Dan Walsh

Jeremy Solt • 14 years ago

170a46

Second part of Apache patch from Dan Walsh.

Chris PeBenito • 14 years ago

60def6

First part of apache patch from Dan Walsh: file context changes, including renaming script ro/ra/rw files.

Chris PeBenito • 14 years ago

83caba

Tor patch from Dan Walsh.

Chris PeBenito • 14 years ago

25d81d

Sssd patch from Dan Walsh.

Chris PeBenito • 14 years ago

2b93b8

Add usbmuxd from Dan Walsh.

Chris PeBenito • 14 years ago

ee2d2d

Vhostmd from Dan Walsh.

Chris PeBenito • 14 years ago

6d4dbd

Module version bumps for c586c1b, dcbb332, 4c05dff, 84ce9c3, 2b012ba, and 1868383.

Chris PeBenito • 14 years ago

bf54d5

Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c.

Chris PeBenito • 14 years ago

ad0071

Smokeping policy from Dan Walsh

Jeremy Solt • 14 years ago

f3c346

pulseaudio patch from Dan Walsh

Jeremy Solt • 14 years ago

186838

ksmtuned policy from Dan Walsh

Jeremy Solt • 14 years ago

d279dd

Prelude patch from Dan Walsh

Jeremy Solt • 14 years ago

2b012b

Bluetooth patch (sys_admin and debugfs) from Dan Walsh

Jeremy Solt • 14 years ago

84ce9c

avahi patch from Dan Walsh

Jeremy Solt • 14 years ago

4c05df

chronyd patch from Dan Walsh

Jeremy Solt • 14 years ago

dcbb33

Give dcc setgid from Dan Walsh

Jeremy Solt • 14 years ago

c586c1

Module version bump for c37d843.

Chris PeBenito • 14 years ago

7656af

Minor bind XML tweaks.

Chris PeBenito • 14 years ago

be8311

bind patch from Dan Walsh

Jeremy Solt • 14 years ago

c37d84

Radvd patch from Dan Walsh.

Chris PeBenito • 14 years ago

390b8a

Rdisc patch from Dan Walsh.

Chris PeBenito • 14 years ago

1b2215

Module version bump for 1d348bd.

Chris PeBenito • 14 years ago

6c4030

Afs needs sys_admin, sends signals, and resolves hostnames from Dan Walsh

Jeremy Solt • 14 years ago

1d348b

Module version bump for 75c8a69.

Chris PeBenito • 14 years ago

df2961

gitosis read/manage lib interfaces from Dan Walsh

Jeremy Solt • 14 years ago

75c8a6

Sasl patch from Dan Walsh.

Chris PeBenito • 14 years ago

cf7eb0

Snmp patch from Dan Walsh.

Chris PeBenito • 14 years ago

449d20

Sysstat patch from Dan Walsh.

Chris PeBenito • 14 years ago

08d7c7

Telnet patch from Dan Walsh.

Chris PeBenito • 14 years ago

98ac3f

Tuned patch from Dan Walsh.

Chris PeBenito • 14 years ago

461b53

Virt patch from Dan Walsh.

Chris PeBenito • 14 years ago

763020

Rename rtkit_schedule() to rtkit_scheduled().

Chris PeBenito • 14 years ago

064d1b

Module version bump for ac19f1a.

Chris PeBenito • 14 years ago

e13a9e

Module version bump for 9681df1.

Chris PeBenito • 14 years ago

c7a4cf

Module version bump for d3b5907.

Chris PeBenito • 14 years ago

32103f

Minor tweaks on icecast.

Chris PeBenito • 14 years ago

340af1

icecast policy from Dan Walsh

Jeremy Solt • 14 years ago

584dfa

rtkit patch from Dan Walsh:

Jeremy Solt • 14 years ago

ac19f1

postgresql patch from Dan Walsh:

Jeremy Solt • 14 years ago

9681df

openvpn needs ipc_lock capability, connects to http ports,

Jeremy Solt • 14 years ago

d3b590

Tftp patch from Dan Walsh.

Chris PeBenito • 14 years ago

47293b

Uucp patch from Dan Walsh.

Chris PeBenito • 14 years ago

788ba7

Zebra patch from Dan Walsh.

Chris PeBenito • 14 years ago

bed0a4

Libraries patch from Dan Walsh.

Chris PeBenito • 14 years ago

bc31d1

Xen patch from Dan Walsh.

Chris PeBenito • 14 years ago

0d86ea

Getty patch from Dan Walsh.

Chris PeBenito • 14 years ago

b60df9

Sysnetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

1fa92b

Init patch from Dan Walsh.

Chris PeBenito • 14 years ago

ddd786

Authlogin patch from Dan Walsh.

Chris PeBenito • 14 years ago

153ed8

Iptables patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fbcd7

Udev patch from Dan Walsh.

Chris PeBenito • 14 years ago

a124c0

Logging patch from Dan Walsh.

Chris PeBenito • 14 years ago

7a8807

Ipsec patch from Dan Walsh.

Chris PeBenito • 14 years ago

90e65f

Modutils patch from Dan Walsh.

Chris PeBenito • 14 years ago

d13c67

Kernel patch from Dan Walsh.

Chris PeBenito • 14 years ago

041738

Domain patch from Dan Walsh.

Chris PeBenito • 14 years ago

1f6d97

Module version bump for 6a03548.

Chris PeBenito • 14 years ago

7b50b7

amavis uses uptime which reads utmp, and reads certs - from Dan Walsh

Jeremy Solt • 14 years ago

6a0354

Style fixes and module version bumps for 38fc1bd.

Chris PeBenito • 14 years ago

827060

Likewise policy.

Dominick Grift • 14 years ago

38fc1b

Module version bump for 414a570.

Chris PeBenito • 14 years ago

2a62db

fetchmail executes programs in bin (uname), from Dan Walsh

Jeremy Solt • 14 years ago

414a57

Add additional documentation to kernel_request_load_module().

Chris PeBenito • 14 years ago

e8871c

Module version bump for 935151a.

Chris PeBenito • 14 years ago

5911f3

Module version bump for d12f18e.

Chris PeBenito • 14 years ago

c6491a

Module version bump for d7ec247.

Chris PeBenito • 14 years ago

9a5989

Module version bump for 591af7b.

Chris PeBenito • 14 years ago

9570fc

Module version bump for ae07c9e.

Chris PeBenito • 14 years ago

ce693c

Whitespace fixes in mailman.

Chris PeBenito • 14 years ago

1656bf

Change kernel_load_module to kernel_request_load_module for howl from Dan Walsh

Jeremy Solt • 14 years ago

935151

Change kernel_load_module to kernel_request_load_module from Dan Walsh

Jeremy Solt • 14 years ago

d12f18

File context update for certmaster from Dan Walsh

Jeremy Solt • 14 years ago

d7ec24

file context updates from Dan Walsh

Jeremy Solt • 14 years ago

591af7

Screen needs to setattr on user_ttydevice_t from Dan Walsh

Jeremy Solt • 14 years ago

ae07c9

Whitespace fix for mcelog.

Chris PeBenito • 14 years ago

fad6e7

Module version bump for f7d413a.

Chris PeBenito • 14 years ago

fce868

Rearrange interfaces in fail2ban.

Chris PeBenito • 14 years ago

bf140f

Module version bump for 74b51e6.

Chris PeBenito • 14 years ago

580279

Whitespace fixes for smoltclient.

Chris PeBenito • 14 years ago

6bc64c

Module version bump for 3137148.

Chris PeBenito • 14 years ago

ba1c45

mcelog policy from Dan Walsh

Jeremy Solt • 14 years ago

148415

fail2ban_stream_connect and fail2ban_rw_stream_sockets from Dan Walsh

Jeremy Solt • 14 years ago

f7d413

Firstboot sends dbus messages from Dan Walsh

Jeremy Solt • 14 years ago

74b51e

Policy for smolt sendProfile client from Dan Walsh

Jeremy Solt • 14 years ago

257a27

Run interface for ptchown from Dan Walsh

Jeremy Solt • 14 years ago

313714

Module version bump for 1d3d00b.

Chris PeBenito • 14 years ago

37e249

Module version bump for e172614.

Chris PeBenito • 14 years ago

ce0570

Filesystem patch from Dan Walsh.

Chris PeBenito • 14 years ago

7af0e9

Rearrange lines in alsa an mysql.

Chris PeBenito • 14 years ago

9e506e

Whitespace cleanup on mysql.if.

Chris PeBenito • 14 years ago

e17261

Manage alsa writable config files interface from Dan Walsh

Jeremy Solt • 14 years ago

1d3d00

mysql policy from Dan Walsh

Jeremy Solt • 14 years ago

12a6a5

Raid patch from Dan Walsh.

Chris PeBenito • 14 years ago

2f0e3a

Iscsi and tgtd patches from Dan Walsh.

Chris PeBenito • 14 years ago

30496b

Fstools patch from Dan Walsh.

Chris PeBenito • 14 years ago

939eaf

Miscfiles patch from Dan Walsh.

Chris PeBenito • 14 years ago

d0a6df

Module version bump for ddae1cc.

Chris PeBenito • 14 years ago

547d62

Creates sock files in /tmp, reads network state. - From Dan Walsh

Jeremy Solt • 14 years ago

ddae1c

Fix another corenetwork typo.

Chris PeBenito • 14 years ago

bd063d

Module version bump for 42fa15b.

Chris PeBenito • 14 years ago

6f9c3c

Module version bump for 3fcdc39.

Chris PeBenito • 14 years ago

b19338

Module version bump for cf3da95.

Chris PeBenito • 14 years ago

5dac50

Minor style fixes.

Chris PeBenito • 14 years ago

e2e1b6

Logwatch looks for content in homedirs, reads samba shares - from Dan Walsh

Jeremy Solt • 14 years ago

42fa15

shorewall log file from Dan Walsh

Jeremy Solt • 14 years ago

3fcdc3

Allow cdrecord_t to execute bin_t from Dan Walsh

Jeremy Solt • 14 years ago

cf3da9

Add back missing s0 on network_port().

Chris PeBenito • 14 years ago

4af2b3

Guest patch from Dan Walsh.

Chris PeBenito • 14 years ago

09b92d

Corenetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

9c709c

Corecommands patch from Dan Walsh.

Chris PeBenito • 14 years ago

4b23c6

Devices patch from Dan Walsh.

Chris PeBenito • 14 years ago

053517

Storage patch from Dan Walsh.

Chris PeBenito • 14 years ago

febc7f

Fix cobbler_admin interface to require cobblerd_initrc_exec_t.

Dominick Grift • 14 years ago

183f79

Corenetwork patch from Dan Walsh.

Chris PeBenito • 14 years ago

eeb761

Module version bump for be47d75.

Chris PeBenito • 14 years ago

1112a5

Module version bump for e1e78df.

Chris PeBenito • 14 years ago

ec0205

Module version bump for 52b215f.

Chris PeBenito • 14 years ago

b7070a

Module version bump for cf5e81d.

Chris PeBenito • 14 years ago

cb6385

Module version bump for 96b7e9f.

Chris PeBenito • 14 years ago

c4faa1

Module version bump for a005018.

Chris PeBenito • 14 years ago

812f30

Add additional comments for e1e78df.

Chris PeBenito • 14 years ago

4931c5

hotplug transition to brctl from Dan Walsh

Jeremy Solt • 14 years ago

4d2680

Seems reasonable that exim may need to manage these files when /etc/alternatives/mta points to exim

Jeremy Solt • 14 years ago

9a1f0d

Domain transition for apmd to vbetool from Dan Walsh

Jeremy Solt • 14 years ago

15ae77

gen_require typo fix in dbadm.if from Dan Walsh

Jeremy Solt • 14 years ago

6a9ef9

Changed amavis_initrc_domtrans domain summary to match style.

Jeremy Solt • 14 years ago

a73905

Changed arpwatch_initrc_domtrans domain summary to match style.

Jeremy Solt • 14 years ago

6665c3

Various arpwatch fixes.

Dominick Grift • 14 years ago

d78337

Modified apcupsd_initrc_domtrans interface summary to match style.

Jeremy Solt • 14 years ago

6eed0a

Create apcupsd initrc domtrans. Call apcupsd initrc domtrans in apcupsd_admin. Remove obsolete require. Allow domains Various apcupsd fixes.

Dominick Grift • 14 years ago

eda641

Fixed typo in gen_require for amavis_initrc_domtrans (Appears to be a copy/paste mistake).

Jeremy Solt • 14 years ago

3b8148

Various amavis fixes.

Dominick Grift • 14 years ago

88340b

Improve documentation of udev_read_db().

Chris PeBenito • 14 years ago

402bbb

Improve documentation of seutil_sigchld_newrole().

Chris PeBenito • 14 years ago

b675ce

Add examples to documentation of common corenetwork interfaces.

Chris PeBenito • 14 years ago

4a4436

Module version bump for bf530f5.

Chris PeBenito • 14 years ago

a6bafb

Various permission set fixes.

Dominick Grift • 14 years ago

bf530f

Improve the documentation of application_domain().

Chris PeBenito • 14 years ago

b58db3

Improve the documentation of auth_use_nsswitch().

Chris PeBenito • 14 years ago

d24a7d

Improve the documentation of nis_use_ypbind().

Chris PeBenito • 14 years ago

0bbb16

Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files.

Dominick Grift • 14 years ago

4cb24a

Improve documentation for userdomain interfaces:

Chris PeBenito • 14 years ago

c46376

Improve the documentation of domain interfaces:

Chris PeBenito • 14 years ago

88daf1

Improve the documentation of ubac_constrained().

Chris PeBenito • 14 years ago

888d9e

Improve the documentation of devices interfaces:

Chris PeBenito • 14 years ago

4e1264

Improve filesystem interfaces:

Chris PeBenito • 14 years ago

12f73d

Module version bump for 03dd57f.

Chris PeBenito • 14 years ago

42f1b1

Fix auth_domtrans_chk_passwd to use read_file_perms to surpress open AVC denials.

Dominick Grift • 14 years ago

03dd57

Improve the documentation of files interfaces:

Chris PeBenito • 14 years ago

7cf285

Additional docs for logging_log_filetrans().

Chris PeBenito • 14 years ago

5fb5bf

Improve the documentation of corenetwork interfaces

Chris PeBenito • 14 years ago

42eb0f

Improve the documentation of unconfined_domain().

Chris PeBenito • 14 years ago

14e543

Improve the documentation of logging_log_file() and logging_log_filetrans().

Chris PeBenito • 14 years ago

45185c

Improve documentation of corecmd_exec_bin() and corecmd_exec_shell().

Chris PeBenito • 14 years ago

3a744d

Improve the documentation of:

Chris PeBenito • 14 years ago

13f000

Improve sysnet_read_config() documentation.

Chris PeBenito • 14 years ago

d68871

Switch sysnet_use_portmap(), sysnet_use_ldap(), and sysnet_dns_name_resolve() to use sysnet_read_config() rather thane explicit type usage.

Chris PeBenito • 14 years ago

81a0fb

Improve documentation on kernel_read_system_state(), kernel_read_network_state(), and kernel_read_proc_symlinks().

Chris PeBenito • 14 years ago

7a0c0b

Add additional documentation to files_type().

Chris PeBenito • 14 years ago

fd8134

Rearrange files interfaces.

Chris PeBenito • 14 years ago

6dadd3

Improve documentation on logging_send_syslog_msg().

Chris PeBenito • 14 years ago

6e4877

Improve documentation on files_read_etc_files().

Chris PeBenito • 14 years ago

fca4a9

Improve documentation on miscfiles_read_localization().

Chris PeBenito • 14 years ago

611bc9

Module version bump for cd17345.

Chris PeBenito • 14 years ago

d12492

Various abrt fixes.

Dominick Grift • 14 years ago

cd1734

Module version bump for 534e57b.

Chris PeBenito • 14 years ago

204026

Various afs fixes.

Dominick Grift • 14 years ago

534e57

mysqlmanagerd_var_run_t is not a domain type.

Dominick Grift • 14 years ago

630663

Minor tweaks and module version bump for 68cda59.

Chris PeBenito • 14 years ago

102146

Add MySQL Manager to MySQL policy module

Chris Richards • 14 years ago

68cda5

Automount patch from Dan Walsh.

Chris PeBenito • 14 years ago

104918

Shorewall patch from Dan Walsh.

Chris PeBenito • 14 years ago

fa03ec

Vbetool patch from Dan Walsh.

Chris PeBenito • 14 years ago

6ae29c

Java patch from Dan Walsh.

Chris PeBenito • 14 years ago

4fd088

Mono patch from Dan Walsh.

Chris PeBenito • 14 years ago

1e0f48

Rename qemu_unconfined_t to unconfined_qemu_t.

Chris PeBenito • 14 years ago

a77795

Rearrage qemu.if.

Chris PeBenito • 14 years ago

8a1c9c

Qemu patch from Dan Walsh.

Chris PeBenito • 14 years ago

72295e

Add sectoolm by Miroslav Grepl.

Chris PeBenito • 14 years ago

29b580

Wine patch from Dan Walsh.

Chris PeBenito • 14 years ago

4796d0

Useradd home dir creation fix from Gentoo.

Chris PeBenito • 14 years ago

6a9da2

Syslog fixes from Gentoo.

Chris PeBenito • 14 years ago

2f84a7

Clean up leaked portage file descriptors.

Chris PeBenito • 14 years ago

8b8501

Ssh key creation fix from Gentoo.

Chris PeBenito • 14 years ago

d08a3d

Utmp fix from Gentoo.

Chris PeBenito • 14 years ago

2c0513

Setfiles fix from Gentoo.

Chris PeBenito • 14 years ago

72c8a3

Mount usbfs fix from Gentoo.

Chris PeBenito • 14 years ago

679a63

Move netlink route sockets from nsswitch to DNS name resolve.

Chris PeBenito • 14 years ago

aadcb9

Misc portage fixes.

Chris PeBenito • 14 years ago

15d80e

Portage fixes for installing SELinux-aware programs.

Chris PeBenito • 14 years ago

05bd2f

Xguest patch from Dan Walsh.

Chris PeBenito • 14 years ago

c06a44

Pulseaudio patch from Dan Walsh.

Chris PeBenito • 14 years ago

6f30d7

Chronyd from Miroslav Grepl.

Chris PeBenito • 14 years ago

a51379

Ccs patch from Dan Walsh.

Chris PeBenito • 14 years ago

3fb2b7

Clear xserver TODO.

Chris PeBenito • 14 years ago

0ab2c1

Non-drawing X client support for consolekit.

Chris PeBenito • 14 years ago

6246e7

Remove redundant conditional user_ping terminal rules.

Chris PeBenito • 14 years ago

1322a1

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.

Chris PeBenito • 14 years ago

c3c753

Sudo patch from Dan Walsh.

Chris PeBenito • 14 years ago

ed03a5

Consoletype patch from Dan Walsh.

Chris PeBenito • 14 years ago

ca5dc2

Hal patch from Dan Walsh.

Chris PeBenito • 14 years ago

21673b

Virt/svirt patch from Dan Walsh.

Chris PeBenito • 14 years ago

3079cb

Ktalk patch from Dan Walsh.

Chris PeBenito • 14 years ago

aa9e3b

Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy

Chris PeBenito • 14 years ago

16412e

Misc fixes for 1031ee6.

Chris PeBenito • 14 years ago

27eab8

Module version number bump for 1031ee6.

Chris PeBenito • 14 years ago

7d2f96

Implement cobblerd policy.

Dominick Grift • 14 years ago

1031ee

Userdomain patch from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

2d7436

Add nut from Stefan Schulze Frielinghaus and Miroslav Grepl.

Chris PeBenito • 14 years ago

e526fc

Add pyicqt from Stefan Schulze Frielinghaus.

Chris PeBenito • 14 years ago

4ebfec

Add dbadm, from KaiGai Kohei.

Chris PeBenito • 14 years ago

22a287

Fix home_ssh_t usage.

Chris PeBenito • 14 years ago

edc2f7

PPP patch from Dan Walsh.

Chris PeBenito • 14 years ago

82b5d2

SSH patch from Dan Walsh.

Chris PeBenito • 14 years ago

cde150

Uucp patch from Dan Walsh.

Chris PeBenito • 14 years ago

fee5bb

Sendmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

c155e0

Mailman patch from Dan Walsh.

Chris PeBenito • 14 years ago

3624ef

Lircd patch from Dan Walsh.

Chris PeBenito • 14 years ago

8a8b24

Courier patch from Dan Walsh.

Chris PeBenito • 14 years ago

07ba15

Inetd patch from Dan Walsh.

Chris PeBenito • 14 years ago

d2acef

Avahi patch from Dan Walsh.

Chris PeBenito • 14 years ago

c292cb

Fprintd patch from Dan Walsh.

Chris PeBenito • 14 years ago

00808a

Fetchmail patch from Dan Walsh.

Chris PeBenito • 14 years ago

ef6ea5

Exim patch from Dan Walsh.

Chris PeBenito • 14 years ago

84a45c

Dovecot patch from Dan Walsh.

Chris PeBenito • 14 years ago

4dd84b

Ddclient patch from Dan Walsh.

Chris PeBenito • 14 years ago

14c786

DCC patch from Dan Walsh.

Chris PeBenito • 14 years ago

dcabb1

Cyrus patch from Dan Walsh.

Chris PeBenito • 14 years ago

30958f

Clamav patch from Dan Walsh.

Chris PeBenito • 14 years ago

192fb8

Bluetooth patch from Dan Walsh.

Chris PeBenito • 14 years ago

c5155a

Move rules from mta mailserver delivery from interface to .te to use the attribute.

Chris PeBenito • 14 years ago

96831f

MTA patch from Dan Walsh.

Chris PeBenito • 14 years ago

9c4067

Tftp patch from Dan Walsh.

Chris PeBenito • 14 years ago

2650ca

Sssd patch from Dan Walsh.

Chris PeBenito • 14 years ago

f3890b

Snmp patch from Dan Walsh.

Chris PeBenito • 14 years ago

207c4d

ntp patch from Dan Walsh.

Chris PeBenito • 14 years ago

82cdff

gpsd patch from Dan Walsh.

Chris PeBenito • 14 years ago

f37b7b

Tuned patch from Dan Walsh.

Chris PeBenito • 14 years ago

b11dcd

Rpcbind patch from Dan Walsh.

Chris PeBenito • 14 years ago

ff785b

Radvd patch from Dan Walsh.

Chris PeBenito • 14 years ago

733f49

Privoxy patch from Dan Walsh.

Chris PeBenito • 14 years ago

b36ae9

Prelude patch from Dan Walsh.

Chris PeBenito • 14 years ago

1232a5

PCSCD patch from Dan Walsh.

Chris PeBenito • 14 years ago

6df09c

Nslcd patch from Dan Walsh.

Chris PeBenito • 14 years ago

2d59a8

Mysql patch from Dan Walsh.

Chris PeBenito • 14 years ago

80f058

Modemmanager patch from Dan Walsh.

Chris PeBenito • 14 years ago

d3c612

Milter patch from Dan Walsh.

Chris PeBenito • 14 years ago

0000b7

Memcached patch from Dan Walsh.

Chris PeBenito • 14 years ago

a32226

Kerneloops patch from Dan Walsh.

Chris PeBenito • 14 years ago

6aa333

Kerberos patch from Dan Walsh.

Chris PeBenito • 14 years ago

e1b8b5

Irqbalance patch from Dan Walsh.

Chris PeBenito • 14 years ago

7d05af

GPM patch from Dan Walsh.

Chris PeBenito • 14 years ago

d7b98c

Fail2ban patch from Dan Walsh.

Chris PeBenito • 14 years ago

ce8a71

Certmaster patch from Dan Walsh.

Chris PeBenito • 14 years ago

bd21cb

Bitlbee patch from Dan Walsh.

Chris PeBenito • 14 years ago

a7d606

Amavis patch from Dan Walsh.

Chris PeBenito • 14 years ago

5894c3

asterisk patch from Dan Walsh.

Chris PeBenito • 14 years ago

32f27a

apm patch from Dan Walsh.

Chris PeBenito • 14 years ago

7e8139

afs patch from Dan Walsh.

Chris PeBenito • 14 years ago

41c139

smartmon patch from Dan Walsh.

Chris PeBenito • 14 years ago

b84d6e

Changelog and version bump for X object manager changes.

Chris PeBenito • 15 years ago

7fc72a

Merge branch 'master' into xselinux

Chris PeBenito • 15 years ago

e331a0

Seunshare patch from Dan Walsh.

Chris PeBenito • 15 years ago

46b037

Screen patch from Dan Walsh.

Chris PeBenito • 15 years ago

d7776f

Podsleuth patch from Dan Walsh.

Chris PeBenito • 15 years ago

6394ea

Mozilla patch from Dan Walsh.

Chris PeBenito • 15 years ago

b77daa

GPG patch from Dan Walsh.

Chris PeBenito • 15 years ago

36ded4

Calamaris patch from Dan Walsh.

Chris PeBenito • 15 years ago

962d6f

Iptables and modutils patches from Dan Walsh.

Chris PeBenito • 15 years ago

7491a9

Kismet and tzdata patches from Dan Walsh.

Chris PeBenito • 15 years ago

d913e7

RAID patch from Dan Walsh.

Chris PeBenito • 15 years ago

0cad9a

Fstools and Xen patches from Dan Walsh.

Chris PeBenito • 15 years ago

77c71b

Kdump reads the kernel core.

Chris PeBenito • 15 years ago

e21162

UDEV patch from Dan Walsh.

Chris PeBenito • 15 years ago

837163

IPSEC patch from Dan Walsh.

Chris PeBenito • 15 years ago

832c1b

Application patch from Dan Walsh.

Chris PeBenito • 15 years ago

5ed061

Whitespace cleanup.

Chris PeBenito • 15 years ago

dccbb8

ISCSI patch from Dan Walsh.

Chris PeBenito • 15 years ago

0f982d

Setrans patch from Dan Walsh.

Chris PeBenito • 15 years ago

0a119a

LVM patch from Dan Walsh.

Chris PeBenito • 15 years ago

bd34ef

Miscfiles patch from Dan Walsh.

Chris PeBenito • 15 years ago

9dfdd4

Files patch from Dan Walsh.

Chris PeBenito • 15 years ago

910b1d

Corecommands patch from Dan Walsh.

Chris PeBenito • 15 years ago

290aa8

Filesystem patch from Dan Walsh.

Chris PeBenito • 15 years ago

f4b9dc

Add terminal patch from Dan Walsh.

Chris PeBenito • 15 years ago

d6c3ed

Add devices patch from Dan Walsh.

Chris PeBenito • 15 years ago

b51e8e

Add kernel patch from Dan Walsh

Chris PeBenito • 15 years ago

e276b8

Add storage patch, from Dan Walsh.

Chris PeBenito • 15 years ago

53c73d

bump module versions for release.

Chris PeBenito • 15 years ago

ed3a1f

additional cleanup for e877913.

Chris PeBenito • 15 years ago

e6d8fd

adding puppet configuration management system

Craig Grube • 15 years ago

e87791

one further rearrangement of tgtd.

Chris PeBenito • 15 years ago

f27282

clean up 0bca409 and add changelog entry.

Chris PeBenito • 15 years ago

222d5b

RESET tgtd daemon.

Matthew Ife • 15 years ago

0bca40

restore removed aliases.

Chris PeBenito • 15 years ago

9448ca

Drop the xserver_unprotected interface.

Eamon Walsh • 15 years ago

5025a4

X Object Manager policy revisions to xserver.if.

Eamon Walsh • 15 years ago

5242ec

X Object Manager policy revisions to xserver.te.

Eamon Walsh • 15 years ago

f267f8

add tuned from miroslav grepl.

Chris PeBenito • 15 years ago

b04669

reorganize a92ee50

Chris PeBenito • 15 years ago

a1a45d

Implement screen-locking feature.

Dominick Grift • 15 years ago

a92ee5

revise MCS constraints to use only MCS-specific attributes.

Chris PeBenito • 15 years ago

808341

add seunshare from dan.

Chris PeBenito • 15 years ago

4be8dd

add dkim from stefan schulze frielinghaus.

Chris PeBenito • 15 years ago

5a6b1f

add gnomeclock from dan.

Chris PeBenito • 15 years ago

21b1d1

add rtkit from dan.

Chris PeBenito • 15 years ago

ed7015

clean up xscreensaver.

Chris PeBenito • 15 years ago

1d3b9e

SELinux xscreensaver policy support

corentin.labbe • 15 years ago

31f9c1

add modemmanager from dan.

Chris PeBenito • 15 years ago

c141d8

add abrt from dan.

Chris PeBenito • 15 years ago

e3a90e

rearrange readahead rules.

Chris PeBenito • 15 years ago

6af53d

readahead patch from dan.

Chris PeBenito • 15 years ago

c1e5b1

nscd patch from dan.

Chris PeBenito • 15 years ago

937b2c

cron patch from dan.

Chris PeBenito • 15 years ago

c61b35

prelink patch from dan.

Chris PeBenito • 15 years ago

163ddf

nslcd policy from dan.

Chris PeBenito • 15 years ago

81bca1

term_write_all_terms() patch from Stefan Schulze Frielinghaus

Chris PeBenito • 15 years ago

f67bc9

add gitosis from miroslav grepl.

Chris PeBenito • 15 years ago

dbed95

cpufreqselector patch from dan.

Chris PeBenito • 15 years ago

634a13

add an additional vmware host program.

Chris PeBenito • 15 years ago

f61371

screen patch from dan.

Chris PeBenito • 15 years ago

6fdef0

remove stale screen_dir_t references

Chris PeBenito • 15 years ago

72b834

gpg patch from dan.

Chris PeBenito • 15 years ago

ca7fa5

openvpn patch from dan: Openvpn connects to cache ports and stores files in nfs and cifs directories.

Chris PeBenito • 15 years ago

f2f296

Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.

Chris PeBenito • 15 years ago

93be4b

add shorewall from dan.

Chris PeBenito • 15 years ago

625be1

add kdump from dan.

Chris PeBenito • 15 years ago

71965a

cdrecord patch from dan.

Chris PeBenito • 15 years ago

a4b638

awstats patch from dan.

Chris PeBenito • 15 years ago

1a7919

certwatch patch from dan.

Chris PeBenito • 15 years ago

b2324f

mrtg patch from dan.

Chris PeBenito • 15 years ago

b515ab

add hddtemp from dan.

Chris PeBenito • 15 years ago

aa8300

add ptchown policy from dan.

Chris PeBenito • 15 years ago

aac56b

pulseaudio patch from dan.

Chris PeBenito • 15 years ago

a3dd14

module version number bump for nscd patch.

Chris PeBenito • 15 years ago

677457

nscd cache location changed from /var/db/nscd to /var/cache/nscd

Manoj Srivastava • 15 years ago

2a79de

kismet patch from dan.

Chris PeBenito • 15 years ago

a9e967

module version number bump for tun patches

Chris PeBenito • 15 years ago

aaff2f

rename admin_tun_type to admindomain.

Chris PeBenito • 15 years ago

0be901

reorganize tun patch changes.

Chris PeBenito • 15 years ago

bd7570

refpol: Policy for the new TUN driver access controls

Paul Moore • 15 years ago

9dc3cd

patch from Eamon Walsh to remove useage of deprecated xserver interfaces.

Chris PeBenito • 15 years ago

427989

deprecate userdom_xwindows_client_template

Chris PeBenito • 15 years ago

93c49b

Remove excessive permissions in logging_send_syslog_msg(). Ticket #14.

Chris PeBenito • 15 years ago

fef5dc

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Chris PeBenito • 15 years ago

e27827

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 15 years ago

dbb7dd

split dev_manage_dri_dev() into a manage and a filetrans interface.

Chris PeBenito • 15 years ago

693474

reorganize dbus.fc.

Chris PeBenito • 15 years ago

048427

module version bumps and changelog update for the previous 3 commits.

Chris PeBenito • 15 years ago

62c80e

Gentoo dbus in libexec

LABBE Corentin • 15 years ago

0d700b

portage need capability sys_nice

LABBE Corentin • 15 years ago

755c52

Missing comma in policykit

LABBE Corentin • 15 years ago

58cc99

Debian policykit fixes from Martin Orr.

Chris PeBenito • 15 years ago

909922

Fix unconfined_r use of unconfined_java_t.

Chris PeBenito • 15 years ago

b26482

Add missing rules to make unconfined_cronjob_t a valid cron job domain.

Chris PeBenito • 15 years ago

2a7773

remove redundant xen_append_log() call in hostname.

Chris PeBenito • 15 years ago

97e421

fix refpolicy ticket #48.

Chris PeBenito • 15 years ago

e51390

Handle unix_chkpwd usage by useradd and groupadd; fixes ticket #49.

Chris PeBenito • 15 years ago

02e594

Add missing compatibility aliases for xdm_xserver*_t types.

Chris PeBenito • 15 years ago

e33591

module version number bump for release 2.20090730 that was mistakenly omitted.

Chris PeBenito • 15 years ago

9570b2

fix ordering in sysnetwork.

Chris PeBenito • 15 years ago

d69616

fix ordering in raid.

Chris PeBenito • 15 years ago

48bf63

fix ordering in pcmcia.

Chris PeBenito • 15 years ago

4b218b

fix ordering in mount.

Chris PeBenito • 15 years ago

f0e959

fix ordering in modutils.

Chris PeBenito • 15 years ago

54327d

fix ordering of interface calls in lvm.

Chris PeBenito • 15 years ago

568efb

fix ordering of interface calls in locallogin.

Chris PeBenito • 15 years ago

8cd130

fix ordering of interface calls in iptables.

Chris PeBenito • 15 years ago

e6985f

fix ordering of interface calls in init.

Chris PeBenito • 15 years ago

464ffa

fix ordering of interface calls in hostname.

Chris PeBenito • 15 years ago

14d282

fix ordering of interface calls in getty.

Chris PeBenito • 15 years ago

5b5300

fix ordering of interface calls in fstools.

Chris PeBenito • 15 years ago

79ca72

fix ordering of interface calls in clock.

Chris PeBenito • 15 years ago

08638a

fix ordering of interface calls in authlogin.

Chris PeBenito • 15 years ago

2acba7

fix ordering of interface calls in sudo.

Chris PeBenito • 15 years ago

9c4722

add bin_t labeling for gentoo dhcpcd-run-hooks location

Chris PeBenito • 15 years ago

78a9c2

openrc unfortunately mounts a tmpfs at /lib/rc

Chris PeBenito • 15 years ago

4c92f0

gentoo init script system uses tmpfs for state data

Chris PeBenito • 15 years ago

cfdbf3

gentoo init script system sends audit messages.

Chris PeBenito • 15 years ago

efa0ac

alsa file location update for debian, from Manoj.

Chris PeBenito • 15 years ago

316227

whitespace fixes in apt.

Chris PeBenito • 15 years ago

2a4740

clean up 6a192f70d42013fcbd4eefe1f35cab3de313cedb

Chris PeBenito • 15 years ago

b5aaa7

Update apt/aptitude policy to add support for lock/log files

Manoj Srivastava • 15 years ago

6a192f

pull most of fedora changes to rpc.

Chris PeBenito • 15 years ago

50458c

pull most of fedora changes to samba.

Chris PeBenito • 15 years ago

0c8917

/dev/fuse should be s0 not mls_high

Chris PeBenito • 15 years ago

105e85

pull in part of fedora mta changes

Chris PeBenito • 15 years ago

363e8f

add fprintd module from dan.

Chris PeBenito • 15 years ago

20c3cc

add devicekit module from dan.

Chris PeBenito • 15 years ago

677c4c

consolekit patch from dan.

Chris PeBenito • 15 years ago

4e7c0a

automount patch from dan.

Chris PeBenito • 15 years ago

333222

cups patch from dan.

Chris PeBenito • 15 years ago

8f3bdd

pull in apache_admin() from fedora

Chris PeBenito • 15 years ago

4be3e1

vmware patch from dan.

Chris PeBenito • 15 years ago

915500

fix dbus type transition conflict.

Chris PeBenito • 15 years ago

423a4a

sudo patch from dan.

Chris PeBenito • 15 years ago

41ea88

readahead patch from dan.

Chris PeBenito • 15 years ago

83f0b5

add missing userdom interfaces

Chris PeBenito • 15 years ago

408319

Merge branch 'master' of ssh://oss.tresys.com/home/git/refpolicy

Chris PeBenito • 15 years ago

c7ae9a

snort patch from dan.

Chris PeBenito • 15 years ago

ebf3ec

wm policy from dan

Chris PeBenito • 15 years ago

5f6c30

oddjob patch from dan.

Chris PeBenito • 15 years ago

708a74

kerneloops patch from dan

Chris PeBenito • 15 years ago

fa5018

hal patch from dan.

Chris PeBenito • 15 years ago

9de7c1

avahi patch from dan

Chris PeBenito • 15 years ago

fe1205

dbus patch from dan

Chris PeBenito • 15 years ago

e04438

tmpreaper patch from dan.

Chris PeBenito • 15 years ago

5be35f

mozilla patch from dan.

Chris PeBenito • 15 years ago

06625d

add cpufreqselector from dan

Chris PeBenito • 15 years ago

f4962a

remove read_default_t tunable

Chris PeBenito • 15 years ago

09516c

podsleuth patch from dan.

Chris PeBenito • 15 years ago

5bb5ec

afs client patch from dan.

Chris PeBenito • 15 years ago

13306f

bluetooth patch from dan.

Chris PeBenito • 15 years ago

b93a7d

clamav patch from dan.

Chris PeBenito • 15 years ago

ad0aea

mailman patch from dan.

Chris PeBenito • 15 years ago

92f08c

ricci patch from dan.

Chris PeBenito • 15 years ago

184744

fix policykit interface

Chris PeBenito • 15 years ago

d88224

gpg patch from dan

Chris PeBenito • 15 years ago

e4f73a

module version bump for 9b1907b217cb4c4d508b5130fcb6267e38182642

Chris PeBenito • 15 years ago

5271dd

add pulseaudio from dan.

Chris PeBenito • 15 years ago

9b1907

ppp patch from dan

Chris PeBenito • 15 years ago

7395f8

kerberos patch from dan

Chris PeBenito • 15 years ago

4aa075

dnsmasq patch from dan.

Chris PeBenito • 15 years ago

8f17f7

dhcp patch from dan

Chris PeBenito • 15 years ago

93d300

policykit.if whitespace fix

Chris PeBenito • 15 years ago

af5374

4 patches from dan.

Chris PeBenito • 15 years ago

adea58

add kismet and pulseaudio ports. fix sorting of ports.

Chris PeBenito • 15 years ago

edb7b9

add policykit from dan.

Chris PeBenito • 15 years ago

9e90ce

fix bad varnishd interface names

Chris PeBenito • 15 years ago

b67201

module version bump for f2583aa83b4f5c0081ac4caebffcc0a29401cf96

Chris PeBenito • 15 years ago

7694ab

Remove duplicate distro_redhat context

Manoj Srivastava • 15 years ago

f2583a

5 patches from dan

Chris PeBenito • 15 years ago

ce6fee

three debian patches from manoj

Chris PeBenito • 15 years ago

10b03f

trunk: fix typo in guest role decl.

Chris PeBenito • 15 years ago

84d88d

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

bb8816

trunk: add missing varnish port.

Chris PeBenito • 15 years ago

45b975

trunk: pads from dan.

Chris PeBenito • 15 years ago

50824a

trunk: prelude patch from dan.

Chris PeBenito • 15 years ago

46e2fa

trunk: varnishd from dan.

Chris PeBenito • 15 years ago

267d9c

trunk: whitespace fixes

Chris PeBenito • 15 years ago

3f67f7

trunk: 7 patches from dan.

Chris PeBenito • 15 years ago

20272c

trunk: nis patch from dan.

Chris PeBenito • 15 years ago

c98980

trunk: add sssd from dan.

Chris PeBenito • 15 years ago

c017ee

trunk: remove unnecessary semicolons after interface/template calls.

Chris PeBenito • 15 years ago

26410d

trunk: Greylist milter from Paul Howarth.

Chris PeBenito • 15 years ago

c9c0d8

trunk: Allow unix_update to change the security attributes associate with files so

Chris PeBenito • 15 years ago

c7dc1c

trunk: Misc fixes for unix_update from Brandon Whalen.

Chris PeBenito • 15 years ago

df28a0

trunk: 10 patches from dan.

Chris PeBenito • 15 years ago

455155

trunk: 1 patch from dan.

Chris PeBenito • 15 years ago

30425a

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

a65fd9

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

731008

trunk: MLS constraints for the x_selection class, from Eamon Walsh.

Chris PeBenito • 15 years ago

16fd1f

trunk: add gpsd from miroslav grepl

Chris PeBenito • 15 years ago

cca4a2

trunk: 9 patches from dan.

Chris PeBenito • 15 years ago

63f0a7

trunk: add libjackserver.so textrel fc.

Chris PeBenito • 15 years ago

22894e

trunk:

Chris PeBenito • 15 years ago

996779

trunk:

Chris PeBenito • 15 years ago

e0ea7b

trunk:

Chris PeBenito • 15 years ago

a01a4a

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

80348b

trunk: whitespace fix for squid.fc.

Chris PeBenito • 15 years ago

a47eb5

se-postgresql update from kaigai

Chris PeBenito • 15 years ago

350ed8

trunk: lircd from miroslav grepl

Chris PeBenito • 15 years ago

da3ed0

trunk: whitespace fixes.

Chris PeBenito • 15 years ago

c0f5fa

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

339235

trunk: Milter state directory patch from Paul Howarth.

Chris PeBenito • 15 years ago

0cf1d5

trunk: 5 modules from dan.

Chris PeBenito • 15 years ago

a5ef55

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

153fe2

trunk: module version bump for previous commit.

Chris PeBenito • 15 years ago

09125a

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

d6605b

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

42d567

trunk: 14 patches from dan.

Chris PeBenito • 15 years ago

8f800d

trunk: 3 patches from dan.

Chris PeBenito • 15 years ago

244b45

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

3c9b2e

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

79a5a8

trunk: 4 patches from dan.

Chris PeBenito • 15 years ago

c90440

trunk: add mysql db lnk_file transition.

Chris PeBenito • 15 years ago

e21bd2

trunk: 5 patches from dan.

Chris PeBenito • 15 years ago

da0423

trunk: fix typo in devices file contexts.

Chris PeBenito • 15 years ago

11c944

trunk: storage patch from dan.

Chris PeBenito • 15 years ago

2c664e

trunk: devices patch from dan.

Chris PeBenito • 15 years ago

7b7620

trunk: corecommands patch from dan.

Chris PeBenito • 15 years ago

be5aae

trunk: filesystem patch from dan.

Chris PeBenito • 15 years ago

c45fda

trunk: add MLS constrains for ingress/egress permissions from Paul Moore.

Chris PeBenito • 15 years ago

e1a70f

trunk: Drop write permission from fs_read_rpc_sockets().

Chris PeBenito • 15 years ago

156204

trunk: remove unused udev_runtime_t type.

Chris PeBenito • 15 years ago

81fa19

trunk: Patch for RadSec port from Glen Turner.

Chris PeBenito • 15 years ago

f3fcad

trunk: 6 patches from dan.

Chris PeBenito • 15 years ago

f79314

trunk: add context contains to setrans.

Chris PeBenito • 15 years ago

c1e501

trunk: Enable network_peer_controls policy capability from Paul Moore.

Chris PeBenito • 15 years ago

7722c2

trunk: btrfs from Paul Moore.

Chris PeBenito • 15 years ago

805f34

trunk: Add db_procedure install permission from KaiGai Kohei.

Chris PeBenito • 15 years ago

466e22

trunk: Add support for network interfaces with access controlled by a Boolean from the CLIP project.

Chris PeBenito • 15 years ago

019dfa

trunk: add sysadm_entry_spec_domtrans_to() interface from clip.

Chris PeBenito • 15 years ago

64daa8

trunk: su fixes from clip.

Chris PeBenito • 15 years ago

9e7a33

trunk: add support for labeled booleans.

Chris PeBenito • 15 years ago

f0435b

trunk: Remove node definitions and change node usage to generic nodes.

Chris PeBenito • 15 years ago

c12621

trunk: change network interface access from all to generic network interfaces.

Chris PeBenito • 15 years ago

668b30

trunk: fix certwatch version number.

Chris PeBenito • 15 years ago

59d599

trunk: bump module versions for release.

Chris PeBenito • 15 years ago

17ec8c

trunk: Fix consistency of audioentropy and iscsi module naming.

Chris PeBenito • 15 years ago

319697

trunk: 2 patches from dan.

Chris PeBenito • 15 years ago

9ff89c

trunk: whitespace fixes in xml blocks.

Chris PeBenito • 16 years ago

ff8f0a

trunk: whitespace fix changing multiple spaces into tabs.

Chris PeBenito • 16 years ago

6073ea

trunk: fix missing xml parameter.

Chris PeBenito • 16 years ago

a057e0

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

fb4826

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

14c0ed

trunk: Debian file context fix for xen from Russell Coker.

Chris PeBenito • 16 years ago

b3eb12

trunk: add milter module from Paul Howarth.

Chris PeBenito • 16 years ago

b9e523

trunk: a fix on the previous commit.

Chris PeBenito • 16 years ago

b3b607

trunk: 5 patches from dan.

Chris PeBenito • 16 years ago

fcee22

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

01e9e7

trunk 2 patches from dan.

Chris PeBenito • 16 years ago

659c86

trunk: Xserver MLS fix from Eamon Walsh.

Chris PeBenito • 16 years ago

7f4919

trunk: fix logging admin interfaces.

Chris PeBenito • 16 years ago

7a4c28

trunk: 2 fixes from martin orr.

Chris PeBenito • 16 years ago

73c77e

trunk: add omapi port for dhcpcd.

Chris PeBenito • 16 years ago

99282e

trunk: 10 patches from dan.

Chris PeBenito • 16 years ago

5843d0

trunk: patch from Mike Edenfield to add udevadm fc entry.

Chris PeBenito • 16 years ago

27337d

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

657c22

trunk: tweaks from russell and martin orr.

Chris PeBenito • 16 years ago

ba7969

trunk: add missing ubac module.

Chris PeBenito • 16 years ago

000394

trunk: merge UBAC.

Chris PeBenito • 16 years ago

296273

trunk: additional open fixes.

Chris PeBenito • 16 years ago

932c35

trunk: more open perm fixes.

Chris PeBenito • 16 years ago

82d277

trunk: Move shared library calls from individual modules to the domain module.

Chris PeBenito • 16 years ago

6e68e6

trunk: remove redundant shared lib calls.

Chris PeBenito • 16 years ago

2cca6b

trunk: additional whitespace fixes.

Chris PeBenito • 16 years ago

2a9837

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 16 years ago

88cf0a

trunk: Enable open permission checks policy capability.

Chris PeBenito • 16 years ago

0b36a2

trunk: Remove hierarchy from portage module as it is not a good example of hieararchy.

Chris PeBenito • 16 years ago

aea3f2

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

5d4f4b

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

74993c

trunk: a pile of misc fixes.

Chris PeBenito • 16 years ago

aa7c46

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

06099d

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 16 years ago

04d286

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

967fd1

trunk: 21 patches from dan.

Chris PeBenito • 16 years ago

e87221

trunk: fix typo

Chris PeBenito • 16 years ago

ed8ae5

trunk: 7 patches from dan, 1 from eamon.

Chris PeBenito • 16 years ago

12c61f

trunk: add oident from dominick grift.

Chris PeBenito • 16 years ago

73edbc

trunk: fix dupe fc.

Chris PeBenito • 16 years ago

6d8af2

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

4bdf19

trunk: readahead fix from dan.

Chris PeBenito • 16 years ago

bf9f34

trunk: cvs update from dan.

Chris PeBenito • 16 years ago

3daef6

trunk: init script for setrans.

Chris PeBenito • 16 years ago

88c02e

trunk: rpcbind update from dan.

Chris PeBenito • 16 years ago

658f4d

trunk: last bit of wpa_supplicant update from martin orr.

Chris PeBenito • 16 years ago

fd49fe

trunk: remove incomplete sshd_extern.

Chris PeBenito • 16 years ago

c9824e

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 16 years ago

64c5b9

trunk: logging update from dan.

Chris PeBenito • 16 years ago

cfafe4

trunk: bind update from dan.

Chris PeBenito • 16 years ago

f5394c

trunk: rename labeled init scripts with initrc convention.

Chris PeBenito • 16 years ago

48f645

trunk: squid update from dan.

Chris PeBenito • 16 years ago

a46b60

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

21ea2b

trunk: kudzu and mta patches from dan.

Chris PeBenito • 16 years ago

36095d

trunk: promote networkmanager debian fc entries out of build options.

Chris PeBenito • 16 years ago

bc85e8

trunk: ntp and setrans update from dan.

Chris PeBenito • 16 years ago

878691

trunk: Debian update for NetworkManager/wpa_supplicant from Martin Orr.

Chris PeBenito • 16 years ago

52ceaa

trunk: networkmanager/ppp patch from dan.

Chris PeBenito • 16 years ago

ae3386

trunk: fix bad apcupsd interface name.

Chris PeBenito • 16 years ago

859135

trunk: fix fail2ban init script regex.

Chris PeBenito • 16 years ago

543418

trunk: fail2ban update from dan.

Chris PeBenito • 16 years ago

cdac98

trunk: fix bad require.

Chris PeBenito • 16 years ago

96851b

trunk: add cyphesis from dan.

Chris PeBenito • 16 years ago

a71e13

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 16 years ago

e40fa6

trunk: first part of init script labeling support.

Chris PeBenito • 16 years ago

6cc3f3

trunk: hplip uses dbus.

Chris PeBenito • 16 years ago

9bcfb6

trunk: inetd update from dan.

Chris PeBenito • 16 years ago

24af9b

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 16 years ago

e4171e

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 16 years ago

c11057

trunk: add w3c from dan.

Chris PeBenito • 16 years ago

32f8ff

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

93f445

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

770c01

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 16 years ago

3e5987

trunk: two small patches from dan.

Chris PeBenito • 16 years ago

6e3289

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 16 years ago

9acf48

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 16 years ago

9c4500

trunk: add an empty m4 string so the index macro is not invoked, to prevent a warning.

Chris PeBenito • 16 years ago

cc1eee

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 16 years ago

e0ed76

trunk: missed fixes on previous commit.

Chris PeBenito • 16 years ago

7aabe3

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 16 years ago

8a948c

trunk: Samba/winbind update from Mike Edenfield.

Chris PeBenito • 16 years ago

b81bfc

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 16 years ago

3338f2

trunk: another patch from the fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

d13f87

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 16 years ago

556556

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 16 years ago

dc1920

trunk: 7 patches from Fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

6224fc

trunk: massive whitespace cleanup from dominick grift.

Chris PeBenito • 16 years ago

0bfccd

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

2b592a

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 16 years ago

4459a7

trunk: bump versions for release.

Chris PeBenito • 16 years ago

cfcf50

trunk: Fix httpd_enable_homedirs to actually provide the access it is supposed to provide.

Chris PeBenito • 16 years ago

e311e2

trunk: apache script connections to postgres, from kaigai.

Chris PeBenito • 16 years ago

5fe7de

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaee

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2

trunk: Patch to handle postfix data_directory from Vaclav Ovsik.

Chris PeBenito • 16 years ago

8c6292

trunk: fix up stored procedure naming patch from kaigai.

Chris PeBenito • 16 years ago

7f4005

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a903

trunk: pull in most of dans vmware patch.

Chris PeBenito • 16 years ago

a713ad

trunk: two small updates from dan.

Chris PeBenito • 16 years ago

c54eb8

trunk: podsleuth and hal updates from dan.

Chris PeBenito • 16 years ago

131634

trunk: add qemu and virt from dan.

Chris PeBenito • 16 years ago

eb4216

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618

trunk: additional patch from kaigai to fix up some type transitions for unpriv clients.

Chris PeBenito • 16 years ago

8e7d43

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08

trunk: trivial kernel patch from dan.

Chris PeBenito • 16 years ago

67b620

trunk: Patch for X.org dbus support from Martin Orr.

Chris PeBenito • 16 years ago

ef55a1

trunk: misc gentoo fc fixes.

Chris PeBenito • 16 years ago

4b28c2

trunk: add prelude from dan.

Chris PeBenito • 16 years ago

cdbd09

trunk: misc fixes.

Chris PeBenito • 16 years ago

147af4

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efe

trunk: fs update from dan.

Chris PeBenito • 16 years ago

b4921b

trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.

Chris PeBenito • 16 years ago

308baa

trunk: add additional portage log locations.

Chris PeBenito • 16 years ago

0ecd82

trunk: tweak kerneloops.

Chris PeBenito • 16 years ago

8926b2

trunk: add kerneloops from dan.

Chris PeBenito • 16 years ago

782c10

trunk: add kismet from dan.

Chris PeBenito • 16 years ago

ff79b8

trunk: start adding open perm to obvious places.

Chris PeBenito • 16 years ago

cbe82b

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbd

trunk: fix typo

Chris PeBenito • 16 years ago

e6fdb5

trunk: Module loading now requires setsched on kernel threads.

Chris PeBenito • 16 years ago

4416c4

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a

trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.

Chris PeBenito • 16 years ago

a42ce9

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cd

trunk: add missing mplayer_etc_t require in role template.

Chris PeBenito • 16 years ago

a0647a

trunk: make hald_log_t a log file.

Chris PeBenito • 16 years ago

7e11b7

trunk: hal xml doc fix pointed out by Rob Myers.

Chris PeBenito • 16 years ago

f12302

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

8152a7

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b4

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e82895

trunk: fix winbind socket connection interface for default location of the sock_file.

Chris PeBenito • 16 years ago

9377a3

trunk: add type transition to fix mysql socket creation.

Chris PeBenito • 16 years ago

9e8c3a

trunk: small fixes for gentoo system.

Chris PeBenito • 16 years ago

2ed4f5

trunk: add wireshark.

Chris PeBenito • 16 years ago

6e2123

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 16 years ago

91d6c9

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 16 years ago

47333d

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 16 years ago

e065ac

trunk: rpc update from Vaclav Ovsik.

Chris PeBenito • 16 years ago

01e8ff

trunk: dontaudit init fds in loadkeys.

Chris PeBenito • 16 years ago

737fcf

trunk: Exim updates on Debian from Devin Carrawy.

Chris PeBenito • 16 years ago

d57a09

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

834401

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

90c3c5

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

9fa023

trunk: Backup update on Debian from Vaclav Ovsik.

Chris PeBenito • 16 years ago

45b56b

trunk: Cracklib update on Deban from Vaclav Ovsik.

Chris PeBenito • 16 years ago

51223b

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

ee6608

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

f50856

trunk: label /proc/kallsyms with system_map_t.

Chris PeBenito • 16 years ago

037fc0

trunk: fix pppd admin interface.

Chris PeBenito • 16 years ago

4f0178

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 16 years ago

6e7a1f

trunk: 12 patches from dan.

Chris PeBenito • 16 years ago

7a5e2d

trunk: add basic ubuntu support

Chris PeBenito • 16 years ago

12cf80

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

ce8a52

trunk: add 3rd party corenet interfaces for (secmark) packets.

Chris PeBenito • 16 years ago

320ea9

trunk: fix missing lo netif alias for standard and mcs configs.

Chris PeBenito • 16 years ago

c8d4c3

trunk: add mls constraints to dbus.

Chris PeBenito • 16 years ago

936f28

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 16 years ago

9323a5

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 16 years ago

7cbfeb

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

f7925f

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

1abafe

trunk: several fc updates from dan.

Chris PeBenito • 16 years ago

02d968

trunk: add openoffice locations in gentoo.

Chris PeBenito • 16 years ago

9f6e2d

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 16 years ago

dd9e1d

trunk: another round of nsswitch from dan.

Chris PeBenito • 16 years ago

09e216

trunk: add setrlimit to debian cron.

Chris PeBenito • 16 years ago

74d920

trunk: fix xconsole rw interface.

Chris PeBenito • 17 years ago

5f63dd

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 17 years ago

c0cf6e

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 17 years ago

08dcce

trunk: version bump for newrole fixes.

Chris PeBenito • 17 years ago

f98cfb

trunk: test fix 2 for newrole.

Chris PeBenito • 17 years ago

c2b87f

trunk: test fix for newrole.

Chris PeBenito • 17 years ago

6138d3

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 17 years ago

1483be

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 17 years ago

2f5c2f

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

0aa18d

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 17 years ago

0b6aca

trunk: add missing tcp_socket rules for xfs.

Chris PeBenito • 17 years ago

8d1f9d

trunk: fix dup specification for /var/spool/cups/*

Chris PeBenito • 17 years ago

6ab634

trunk: add unconfined_run_to().

Chris PeBenito • 17 years ago

ccf661

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 17 years ago

013783

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 17 years ago

53da70

trunk: reorganize selinuxutil.

Chris PeBenito • 17 years ago

389ad7

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 17 years ago

eeef8d

trunk: 9 patches from dan.

Chris PeBenito • 17 years ago

226c06

trunk: 8 patches from dan.

Chris PeBenito • 17 years ago

6c9118

trunk: remove duplicate specifiction for /usr/lib/devices on debian.

Chris PeBenito • 17 years ago

2999ce

trunk: add in polmatch for default spd.

Chris PeBenito • 17 years ago

982035

trunk: add labeled networking support to unconfined.

Chris PeBenito • 17 years ago

bdccba

trunk: rearrange the bottom of domain.if and fix domain_ipsec_labels().

Chris PeBenito • 17 years ago

a56055

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 17 years ago

847937

trunk: add gentoo hal fc entry.

Chris PeBenito • 17 years ago

3b498a

trunk: add postfixpolicyd from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

4605ad

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

eaed90

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 17 years ago

3ece11

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

7d4161

trunk: 11 patches from dan.

Chris PeBenito • 17 years ago

495df4

trunk: remove unused types from dbus.

Chris PeBenito • 17 years ago

bd973e

trunk: filesystem patch from dan.

Chris PeBenito • 17 years ago

8e2fb6

trunk: add exim from dan.

Chris PeBenito • 17 years ago

6bf8bf

trunk: add /var/lib search for system bus template.

Chris PeBenito • 17 years ago

3c99e5

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

2f2716

trunk: add infrastructure for managing user web content.

Chris PeBenito • 17 years ago

a334d2

trunk: fix unconditional call to nscd from usermanage run interfaces.

Chris PeBenito • 17 years ago

366270

trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.

Chris PeBenito • 17 years ago

a27d1c

trunk: reorganize amanda and bind

Chris PeBenito • 17 years ago

f48782

trunk: 2 patches from dan.

Chris PeBenito • 17 years ago

bc01b3

trunk: 10 patches from dan.

Chris PeBenito • 17 years ago

cdf98f

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 17 years ago

ef659a

trunk: remove stale user_net_control reference in usernetctl.if.

Chris PeBenito • 17 years ago

81d4c8

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

6c53a1

trunk: module version bumps for previous commit.

Chris PeBenito • 17 years ago

12e9ea

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 17 years ago

350b6a

trunk: bump version numbers for release.

Chris PeBenito • 17 years ago

3480f3

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 17 years ago

aef93a

trunk: xml doc one-liner from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

4ddc7b

trunk: one-liner from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

ff4085

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

6f49b4

trunk: add awstats from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

0cf6df

trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().

Chris PeBenito • 17 years ago

8242f5

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

14add3

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

134a79

trunk: 6 patches from dan.

Chris PeBenito • 17 years ago

8a9d6f

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 17 years ago

abc893

trunk: six patches from dan.

Chris PeBenito • 17 years ago

72f82c

trunk: udev update and brctl module from dan.

Chris PeBenito • 17 years ago

8241b5

trunk: 4 patches from dan.

Chris PeBenito • 17 years ago

016e5c

trunk: 5 patches from dan.

Chris PeBenito • 17 years ago

0a0b80

trunk: make coda nfs_t, ticket #39.

Chris PeBenito • 17 years ago

ce2c80

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 17 years ago

492276

trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.

Chris PeBenito • 17 years ago

6dd721

trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

a2f444

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 17 years ago

752ddf

Update MLS constraints from LSPP evaluated policy.

Chris PeBenito • 17 years ago

d62c08

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 17 years ago

2af7b4

trunk: updates from dan on 9 modules

Chris PeBenito • 17 years ago

8d2c34

trunk: Files and radvd updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

80d5e0

trunk: fix gdm xsession scripts on redhat machines.

Chris PeBenito • 17 years ago

1779be

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 17 years ago

f8233a

trunk: several MLS enhancements.

Chris PeBenito • 17 years ago

2d0c9c

trunk: Database userspace object manager classes from KaiGai Kohei.

Chris PeBenito • 17 years ago

9760cb

trunk: filesystem patch from dan

Chris PeBenito • 17 years ago

3d6e96

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

939a42

trunk: add 3rd party interface for apache cgi.

Chris PeBenito • 17 years ago

371d11

trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

Chris PeBenito • 17 years ago

708aab

trunk: add application module

Chris PeBenito • 17 years ago

d46cfe

trunk: fix missed netlabel deprecation

Chris PeBenito • 17 years ago

692952

trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

f80a0e

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1d

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4f

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Chris PeBenito • 17 years ago

e5e55a

trunk: minor amanda update from dan

Chris PeBenito • 17 years ago

f5842c

trunk: add rpcbind from dan

Chris PeBenito • 17 years ago

7b61fe

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

190066

trunk: pyzor and clamav updates from dan

Chris PeBenito • 17 years ago

2c3ac4

trunk: fix typo in vmware.fc

Chris PeBenito • 17 years ago

22bff6

trunk: nagios update from dan

Chris PeBenito • 17 years ago

02f2c3

trunk: procmail tweak from dan.

Chris PeBenito • 17 years ago

a90a25

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f0897

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ad

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

5bf9de

trunk: radius one-liner from dan

Chris PeBenito • 17 years ago

99b5a5

trunk: big samba update from dan

Chris PeBenito • 17 years ago

40df56

trunk: drop snmpd_etc_t.

Chris PeBenito • 17 years ago

788d88

trunk: confine sendmail and logrotate on targeted

Chris PeBenito • 17 years ago

6c8aba

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2

Memprotect support patch from Stephen Smalley.

Chris PeBenito • 17 years ago

41337a

trunk: 2 patches from dan

Chris PeBenito • 17 years ago

d13941

trunk: add amtu from dan

Chris PeBenito • 17 years ago

a74d1a

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

262def

trunk: 7 simple patches from dan.

Chris PeBenito • 17 years ago

f7101c

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649ae

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d3

six simple patches from dan

Chris PeBenito • 17 years ago

f6a590

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

778296

trunk: fix line in evolution to be strict-only; was being covered up by genhomedircon.

Chris PeBenito • 17 years ago

17b9cb

trunk: snmp tweak from dan

Chris PeBenito • 17 years ago

a39a93

trunk: remaining pieces for apcupsd module

Chris PeBenito • 17 years ago

c412be

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2c

Patch to begin separating out hald helper programs from Dan Walsh.

Chris PeBenito • 17 years ago

12217c

add apcupsd from dan

Chris PeBenito • 17 years ago

78f17e

Fixes for squid, dovecot, and snmp from Dan Walsh.

Chris PeBenito • 17 years ago

b129e2

Miscellaneous consolekit fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4967aa

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d6

Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.

Chris PeBenito • 17 years ago

ed4b73

Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.

Chris PeBenito • 17 years ago

517618

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186

add rwho from Nalin Dahyabhai

Chris PeBenito • 17 years ago

6a2975

Patch to allow amavis to read spamassassin libraries from Dan Walsh.

Chris PeBenito • 17 years ago

747ab1

trivial aide fix from dan

Chris PeBenito • 17 years ago

ae32fb

Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.

Chris PeBenito • 17 years ago

f9029f

trivial fix for netutils from dan

Chris PeBenito • 17 years ago

27c570

trivial fix from dan for bluetooth

Chris PeBenito • 17 years ago

7487a6

missed piece of clip patch

Chris PeBenito • 17 years ago

b4beb0

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e52

Replace the old lrrd fc entries with correct munin ones.

Chris PeBenito • 17 years ago

cd16fe

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc

Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.

Chris PeBenito • 17 years ago

7a4bd4

bump module versions for release

Chris PeBenito • 17 years ago

0251df

last piece of previous consolekit patch

Chris PeBenito • 17 years ago

4029f1

add zabbix from dan

Chris PeBenito • 17 years ago

97e815

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

697489

more consolekit updates from dan

Chris PeBenito • 17 years ago

99064c

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2de

from dan:

Chris PeBenito • 17 years ago

ebc1e8

six patches from dan

Chris PeBenito • 17 years ago

9af48e

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba

fix http_script_domains, it was incorrectly applied to the content type rather than the script domain. bug #24.

Chris PeBenito • 17 years ago

39d8dc

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a

one-liner from dan

Chris PeBenito • 17 years ago

cc9130

patch from dan to have ricci modstorage transition to lvm

Chris PeBenito • 17 years ago

19fd93

add fail2ban from dan

Chris PeBenito • 17 years ago

cd3ee9

kudzu will telinit to make init re-read the inittab after configuring serial consoles

Chris PeBenito • 17 years ago

efcf9d

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eb

create user gpg keys dir patch from dan

Chris PeBenito • 17 years ago

4832f0

add kvmfs support, from dan

Chris PeBenito • 17 years ago

937849

trivial patch for radius from dan

Chris PeBenito • 17 years ago

720014

trivial patch from dan for sysstat access to sysfs

Chris PeBenito • 17 years ago

86b28c

other part of consolekit addition

Chris PeBenito • 17 years ago

e66689

from Dan:

Chris PeBenito • 17 years ago

c224d9

patch from Dan for sudo:

Chris PeBenito • 17 years ago

6c20f7

fix for rh bug 203290

Chris PeBenito • 17 years ago

0cca51

last bit of dans patch

Chris PeBenito • 17 years ago

b5a6c8

Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.

Chris PeBenito • 17 years ago

cdc91b

procmail uses /tmp files

Chris PeBenito • 17 years ago

59bedc

trivial change from dan

Chris PeBenito • 17 years ago

7aefc6

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

Chris PeBenito • 17 years ago

7aca2a

Patch for gssd fixes from Dan Walsh

Chris PeBenito • 17 years ago

c23eb5

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c

lmtp and smtp are the same file require same context of setfiles complains

Chris PeBenito • 17 years ago

f2c69c

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e

Patch for kerberized telnet fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4900fd

Patch for kerberized ftp and other ftp fixes from Dan Walsh.

Chris PeBenito • 17 years ago

09c56f

Patch for an additional wine executable from Dan Walsh.

Chris PeBenito • 17 years ago

2aea36

Patch for additional games file contexts from Dan Walsh.

Chris PeBenito • 17 years ago

bf39cd

Add support for libselinux 2.0.5 init_selinuxmnt() changes.

Chris PeBenito • 17 years ago

86d754

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448b

Patch for misc fixes to bluetooth from Dan Walsh.

Chris PeBenito • 17 years ago

f0eaed

On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5b0647

Patch to start deprecating usercanread attribute from Ryan Bradetich.

Chris PeBenito • 17 years ago

bbb7cc

On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

3a3901

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45ea

Patch to remove redundant mls_trusted_object() call from Dan Walsh.

Chris PeBenito • 17 years ago

66cf19

Patch for misc fixes to nis ypxfr policy from Dan Walsh.

Chris PeBenito • 17 years ago

468521

Patch to allow apmd to telinit from Dan Walsh.

Chris PeBenito • 17 years ago

aeb54c

While using samba and SELinux with Debian GNU/Linux (etch) the

Chris PeBenito • 17 years ago

d11407

Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.

Chris PeBenito • 17 years ago

bcac3a

make ttys and ptys device nodes

Chris PeBenito • 17 years ago

f1be09

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 17 years ago

10e120

Clean up file context regexes in apache and java, from Eamon Walsh:

Chris PeBenito • 17 years ago

ff943a

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 18 years ago

d6d16b

patch from dan for some missing gen_require()s

Chris PeBenito • 18 years ago

563e58

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

bff907

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

c31f67

add aide, ccs, and ricci

Chris PeBenito • 18 years ago

fa45da

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 18 years ago

c6a60b

fixes from gentoo strict testing:

Chris PeBenito • 18 years ago

ed38ca

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 18 years ago

0f9a2b

Christopher J. PeBenito wrote:

Chris PeBenito • 18 years ago

f497b8

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 18 years ago

d9845a

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 18 years ago

582438

add seutil_rw_config()

Chris PeBenito • 18 years ago

d5ae68

enhanced setransd support from darrel goeddel

Chris PeBenito • 18 years ago

a8671a

bump versions to release numbers

Chris PeBenito • 18 years ago

a52b4d

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 18 years ago

b04ecc

make inetd optional

Chris PeBenito • 18 years ago

d4a48c

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 18 years ago

130f8a

fix ticket #16

Chris PeBenito • 18 years ago

aeaae5

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 18 years ago

e45324

fix term_tty() associations

Chris PeBenito • 18 years ago

0e5c54

more realplayer entries

Chris PeBenito • 18 years ago

009b37

gentoo testing fixes.

Chris PeBenito • 18 years ago

14b168

make optional the inetd dependency in samba

Chris PeBenito • 18 years ago

85f0c3

change transition from run_init to initrc to spec.

Chris PeBenito • 18 years ago

93ddc6

fix some stuff that does not affect policy

Chris PeBenito • 18 years ago

f76d07

apply contested part of russell's last patch

Chris PeBenito • 18 years ago

830c12

more non .so lib files for acrobat

Chris PeBenito • 18 years ago

546c81

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 18 years ago

3c3c04

- Move range transitions to modules.

Chris PeBenito • 18 years ago

e070dd

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 18 years ago

002190

fix ticket #15.

Chris PeBenito • 18 years ago

f8cfdd

fix corenetwork so the ifdef enable_mls survives to regular processing.

Chris PeBenito • 18 years ago

49317e

fix build error

Chris PeBenito • 18 years ago

6c6399

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 18 years ago

e2b84e

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 18 years ago

693d4a

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 18 years ago

8708d9

* add a macro for generating category declarations

Chris PeBenito • 18 years ago

a9e03b

gentoo testing fixes

Chris PeBenito • 18 years ago

bf469d

add mls fd constraints

Chris PeBenito • 18 years ago

cf7af1

common users list inotifyfs

Chris PeBenito • 18 years ago

2b571d

forgot to bump policy vers

Chris PeBenito • 18 years ago

9dfbd8

patches from erich Wed, 13 Sep 2006 16:18:18 +0200

Chris PeBenito • 18 years ago

73ca55

fix miscfiles_read_localization()

Chris PeBenito • 18 years ago

2cac32

misc fixes

Chris PeBenito • 18 years ago

0d96ff

clean up usercanread

Chris PeBenito • 18 years ago

376fbc

add last bit of role infrastructure

Chris PeBenito • 18 years ago

b1bf2f

cleanups

Chris PeBenito • 18 years ago

95b822

add main part of role-o-matic

Chris PeBenito • 18 years ago

bbcd3c

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 18 years ago

75beb9

fix up usb.ids per distro

Chris PeBenito • 18 years ago

91dabf

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 18 years ago

13d7ce

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 18 years ago

5dbda5

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 18 years ago

eac818

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 18 years ago

a5e213

more testing fixes

Chris PeBenito • 18 years ago

ce6bf7

This patch enables to use xattr on jffs2 filesystem.

Chris PeBenito • 18 years ago

e539a4

fix gentoo /opt contexts

Chris PeBenito • 18 years ago

de2228

more strict testing fixes

Chris PeBenito • 18 years ago

98de87

more testing fixes

Chris PeBenito • 18 years ago

d15dd5

fix ordering bug

Chris PeBenito • 18 years ago

5b4ff3

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 18 years ago

3ef029

fix typo in sxid

Chris PeBenito • 18 years ago

2ed690

testing fixes

Chris PeBenito • 18 years ago

e9b9e4

fix for netfilter_contexts

Chris PeBenito • 18 years ago

4bc6e3

cleanup in authlogin

Chris PeBenito • 18 years ago

ba1a54

fix cron_system_entry() rules

Chris PeBenito • 18 years ago

357390

remove dead selopt rules

Chris PeBenito • 18 years ago

33c7e6

ps/ptrace dontaudit cleanup

Chris PeBenito • 18 years ago

497da0

patch from Stefan for mrtg daemon operation.

Chris PeBenito • 18 years ago

4846dc

display warning if using loadkeys_domtrans() in targeted

Chris PeBenito • 18 years ago

80f928

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 18 years ago

85476e

add authlogin interface to abstract common login program perms

Chris PeBenito • 18 years ago

4b3b46

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 18 years ago

465510

more ssh agent fixes

Chris PeBenito • 18 years ago

81aa67

clean up most of the remaining ssh TODO

Chris PeBenito • 18 years ago

528811

add gdm Xsession fc

Chris PeBenito • 18 years ago

79f5f5

remove deprecated mount_send_nfs_client_request() from stunnel

Chris PeBenito • 18 years ago

d61714

add helpers for printing warning and error messages

Chris PeBenito • 18 years ago

ea3c1f

some cleanup in the kernel layer

Chris PeBenito • 18 years ago

8b9ebd

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 18 years ago

19ebf0

add access to keys for unconfined

Chris PeBenito • 18 years ago

d82267

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 18 years ago

da9bbc

remove setbool auditallow, except for distro_rhel4.

Chris PeBenito • 18 years ago

133000

remove extra level of directory

Chris PeBenito • 18 years ago

17de1b

rpms / selinux-policy

History policy/modules

rpms / selinux-policy

Source Code

History policy/modules