File history - rpms/selinux-policy

trunk: udev update and brctl module from dan.

Chris PeBenito • 17 years ago

8241b5

trunk: 4 patches from dan.

Chris PeBenito • 17 years ago

016e5c

trunk: 5 patches from dan.

Chris PeBenito • 17 years ago

0a0b80

trunk: make coda nfs_t, ticket #39.

Chris PeBenito • 17 years ago

ce2c80

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 17 years ago

492276

trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.

Chris PeBenito • 17 years ago

6dd721

trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

a2f444

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 17 years ago

752ddf

Update MLS constraints from LSPP evaluated policy.

Chris PeBenito • 17 years ago

d62c08

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 17 years ago

2af7b4

trunk: updates from dan on 9 modules

Chris PeBenito • 17 years ago

8d2c34

trunk: Files and radvd updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

80d5e0

trunk: fix gdm xsession scripts on redhat machines.

Chris PeBenito • 17 years ago

1779be

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 17 years ago

f8233a

trunk: several MLS enhancements.

Chris PeBenito • 17 years ago

2d0c9c

trunk: Database userspace object manager classes from KaiGai Kohei.

Chris PeBenito • 17 years ago

9760cb

trunk: filesystem patch from dan

Chris PeBenito • 17 years ago

3d6e96

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

939a42

trunk: add 3rd party interface for apache cgi.

Chris PeBenito • 17 years ago

371d11

trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

Chris PeBenito • 17 years ago

708aab

trunk: add application module

Chris PeBenito • 17 years ago

d46cfe

trunk: fix missed netlabel deprecation

Chris PeBenito • 17 years ago

692952

trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

f80a0e

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1d

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4f

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Chris PeBenito • 17 years ago

e5e55a

trunk: minor amanda update from dan

Chris PeBenito • 17 years ago

f5842c

trunk: add rpcbind from dan

Chris PeBenito • 17 years ago

7b61fe

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

190066

trunk: pyzor and clamav updates from dan

Chris PeBenito • 17 years ago

2c3ac4

trunk: fix typo in vmware.fc

Chris PeBenito • 17 years ago

22bff6

trunk: nagios update from dan

Chris PeBenito • 17 years ago

02f2c3

trunk: procmail tweak from dan.

Chris PeBenito • 17 years ago

a90a25

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f0897

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ad

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

5bf9de

trunk: radius one-liner from dan

Chris PeBenito • 17 years ago

99b5a5

trunk: big samba update from dan

Chris PeBenito • 17 years ago

40df56

trunk: drop snmpd_etc_t.

Chris PeBenito • 17 years ago

788d88

trunk: confine sendmail and logrotate on targeted

Chris PeBenito • 17 years ago

6c8aba

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2

Memprotect support patch from Stephen Smalley.

Chris PeBenito • 17 years ago

41337a

trunk: 2 patches from dan

Chris PeBenito • 17 years ago

d13941

trunk: add amtu from dan

Chris PeBenito • 17 years ago

a74d1a

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

262def

trunk: 7 simple patches from dan.

Chris PeBenito • 17 years ago

f7101c

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649ae

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d3

six simple patches from dan

Chris PeBenito • 17 years ago

f6a590

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

778296

trunk: fix line in evolution to be strict-only; was being covered up by genhomedircon.

Chris PeBenito • 17 years ago

17b9cb

trunk: snmp tweak from dan

Chris PeBenito • 17 years ago

a39a93

trunk: remaining pieces for apcupsd module

Chris PeBenito • 17 years ago

c412be

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2c

Patch to begin separating out hald helper programs from Dan Walsh.

Chris PeBenito • 17 years ago

12217c

add apcupsd from dan

Chris PeBenito • 17 years ago

78f17e

Fixes for squid, dovecot, and snmp from Dan Walsh.

Chris PeBenito • 17 years ago

b129e2

Miscellaneous consolekit fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4967aa

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d6

Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.

Chris PeBenito • 17 years ago

ed4b73

Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.

Chris PeBenito • 17 years ago

517618

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186

add rwho from Nalin Dahyabhai

Chris PeBenito • 17 years ago

6a2975

Patch to allow amavis to read spamassassin libraries from Dan Walsh.

Chris PeBenito • 17 years ago

747ab1

trivial aide fix from dan

Chris PeBenito • 17 years ago

ae32fb

Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.

Chris PeBenito • 17 years ago

f9029f

trivial fix for netutils from dan

Chris PeBenito • 17 years ago

27c570

trivial fix from dan for bluetooth

Chris PeBenito • 17 years ago

7487a6

missed piece of clip patch

Chris PeBenito • 17 years ago

b4beb0

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e52

Replace the old lrrd fc entries with correct munin ones.

Chris PeBenito • 17 years ago

cd16fe

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc

Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.

Chris PeBenito • 17 years ago

7a4bd4

bump module versions for release

Chris PeBenito • 17 years ago

0251df

last piece of previous consolekit patch

Chris PeBenito • 17 years ago

4029f1

add zabbix from dan

Chris PeBenito • 17 years ago

97e815

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

697489

more consolekit updates from dan

Chris PeBenito • 17 years ago

99064c

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2de

from dan:

Chris PeBenito • 17 years ago

ebc1e8

six patches from dan

Chris PeBenito • 17 years ago

9af48e

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba

fix http_script_domains, it was incorrectly applied to the content type rather than the script domain. bug #24.

Chris PeBenito • 17 years ago

39d8dc

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a

one-liner from dan

Chris PeBenito • 17 years ago

cc9130

patch from dan to have ricci modstorage transition to lvm

Chris PeBenito • 17 years ago

19fd93

add fail2ban from dan

Chris PeBenito • 17 years ago

cd3ee9

kudzu will telinit to make init re-read the inittab after configuring serial consoles

Chris PeBenito • 17 years ago

efcf9d

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eb

create user gpg keys dir patch from dan

Chris PeBenito • 17 years ago

4832f0

add kvmfs support, from dan

Chris PeBenito • 17 years ago

937849

trivial patch for radius from dan

Chris PeBenito • 17 years ago

720014

trivial patch from dan for sysstat access to sysfs

Chris PeBenito • 17 years ago

86b28c

other part of consolekit addition

Chris PeBenito • 17 years ago

e66689

from Dan:

Chris PeBenito • 17 years ago

c224d9

patch from Dan for sudo:

Chris PeBenito • 17 years ago

6c20f7

fix for rh bug 203290

Chris PeBenito • 17 years ago

0cca51

last bit of dans patch

Chris PeBenito • 17 years ago

b5a6c8

Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.

Chris PeBenito • 17 years ago

cdc91b

procmail uses /tmp files

Chris PeBenito • 17 years ago

59bedc

trivial change from dan

Chris PeBenito • 17 years ago

7aefc6

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

Chris PeBenito • 17 years ago

7aca2a

Patch for gssd fixes from Dan Walsh

Chris PeBenito • 17 years ago

c23eb5

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c

lmtp and smtp are the same file require same context of setfiles complains

Chris PeBenito • 17 years ago

f2c69c

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e

Patch for kerberized telnet fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4900fd

Patch for kerberized ftp and other ftp fixes from Dan Walsh.

Chris PeBenito • 17 years ago

09c56f

Patch for an additional wine executable from Dan Walsh.

Chris PeBenito • 17 years ago

2aea36

Patch for additional games file contexts from Dan Walsh.

Chris PeBenito • 17 years ago

bf39cd

Add support for libselinux 2.0.5 init_selinuxmnt() changes.

Chris PeBenito • 17 years ago

86d754

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448b

Patch for misc fixes to bluetooth from Dan Walsh.

Chris PeBenito • 17 years ago

f0eaed

On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5b0647

Patch to start deprecating usercanread attribute from Ryan Bradetich.

Chris PeBenito • 17 years ago

bbb7cc

On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

3a3901

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45ea

Patch to remove redundant mls_trusted_object() call from Dan Walsh.

Chris PeBenito • 17 years ago

66cf19

Patch for misc fixes to nis ypxfr policy from Dan Walsh.

Chris PeBenito • 17 years ago

468521

Patch to allow apmd to telinit from Dan Walsh.

Chris PeBenito • 17 years ago

aeb54c

While using samba and SELinux with Debian GNU/Linux (etch) the

Chris PeBenito • 17 years ago

d11407

Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.

Chris PeBenito • 17 years ago

bcac3a

make ttys and ptys device nodes

Chris PeBenito • 17 years ago

f1be09

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 17 years ago

10e120

Clean up file context regexes in apache and java, from Eamon Walsh:

Chris PeBenito • 17 years ago

ff943a

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 17 years ago

d6d16b

patch from dan for some missing gen_require()s

Chris PeBenito • 17 years ago

563e58

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 17 years ago

bff907

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 17 years ago

c31f67

add aide, ccs, and ricci

Chris PeBenito • 18 years ago

fa45da

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 18 years ago

c6a60b

fixes from gentoo strict testing:

Chris PeBenito • 18 years ago

ed38ca

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 18 years ago

0f9a2b

Christopher J. PeBenito wrote:

Chris PeBenito • 18 years ago

f497b8

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 18 years ago

d9845a

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 18 years ago

582438

add seutil_rw_config()

Chris PeBenito • 18 years ago

d5ae68

enhanced setransd support from darrel goeddel

Chris PeBenito • 18 years ago

a8671a

bump versions to release numbers

Chris PeBenito • 18 years ago

a52b4d

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 18 years ago

b04ecc

make inetd optional

Chris PeBenito • 18 years ago

d4a48c

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 18 years ago

130f8a

fix ticket #16

Chris PeBenito • 18 years ago

aeaae5

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 18 years ago

e45324

fix term_tty() associations

Chris PeBenito • 18 years ago

0e5c54

more realplayer entries

Chris PeBenito • 18 years ago

009b37

gentoo testing fixes.

Chris PeBenito • 18 years ago

14b168

make optional the inetd dependency in samba

Chris PeBenito • 18 years ago

85f0c3

change transition from run_init to initrc to spec.

Chris PeBenito • 18 years ago

93ddc6

fix some stuff that does not affect policy

Chris PeBenito • 18 years ago

f76d07

apply contested part of russell's last patch

Chris PeBenito • 18 years ago

830c12

more non .so lib files for acrobat

Chris PeBenito • 18 years ago

546c81

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 18 years ago

3c3c04

- Move range transitions to modules.

Chris PeBenito • 18 years ago

e070dd

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 18 years ago

002190

fix ticket #15.

Chris PeBenito • 18 years ago

f8cfdd

fix corenetwork so the ifdef enable_mls survives to regular processing.

Chris PeBenito • 18 years ago

49317e

fix build error

Chris PeBenito • 18 years ago

6c6399

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 18 years ago

e2b84e

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 18 years ago

693d4a

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 18 years ago

8708d9

* add a macro for generating category declarations

Chris PeBenito • 18 years ago

a9e03b

gentoo testing fixes

Chris PeBenito • 18 years ago

bf469d

add mls fd constraints

Chris PeBenito • 18 years ago

cf7af1

common users list inotifyfs

Chris PeBenito • 18 years ago

2b571d

forgot to bump policy vers

Chris PeBenito • 18 years ago

9dfbd8

patches from erich Wed, 13 Sep 2006 16:18:18 +0200

Chris PeBenito • 18 years ago

73ca55

fix miscfiles_read_localization()

Chris PeBenito • 18 years ago

2cac32

misc fixes

Chris PeBenito • 18 years ago

0d96ff

clean up usercanread

Chris PeBenito • 18 years ago

376fbc

add last bit of role infrastructure

Chris PeBenito • 18 years ago

b1bf2f

cleanups

Chris PeBenito • 18 years ago

95b822

add main part of role-o-matic

Chris PeBenito • 18 years ago

bbcd3c

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 18 years ago

75beb9

fix up usb.ids per distro

Chris PeBenito • 18 years ago

91dabf

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 18 years ago

13d7ce

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 18 years ago

5dbda5

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 18 years ago

eac818

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 18 years ago

a5e213

more testing fixes

Chris PeBenito • 18 years ago

ce6bf7

This patch enables to use xattr on jffs2 filesystem.

Chris PeBenito • 18 years ago

e539a4

fix gentoo /opt contexts

Chris PeBenito • 18 years ago

de2228

more strict testing fixes

Chris PeBenito • 18 years ago

98de87

more testing fixes

Chris PeBenito • 18 years ago

d15dd5

fix ordering bug

Chris PeBenito • 18 years ago

5b4ff3

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 18 years ago

3ef029

fix typo in sxid

Chris PeBenito • 18 years ago

2ed690

testing fixes

Chris PeBenito • 18 years ago

e9b9e4

fix for netfilter_contexts

Chris PeBenito • 18 years ago

4bc6e3

cleanup in authlogin

Chris PeBenito • 18 years ago

ba1a54

fix cron_system_entry() rules

Chris PeBenito • 18 years ago

357390

remove dead selopt rules

Chris PeBenito • 18 years ago

33c7e6

ps/ptrace dontaudit cleanup

Chris PeBenito • 18 years ago

497da0

patch from Stefan for mrtg daemon operation.

Chris PeBenito • 18 years ago

4846dc

display warning if using loadkeys_domtrans() in targeted

Chris PeBenito • 18 years ago

80f928

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 18 years ago

85476e

add authlogin interface to abstract common login program perms

Chris PeBenito • 18 years ago

4b3b46

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 18 years ago

465510

more ssh agent fixes

Chris PeBenito • 18 years ago

81aa67

clean up most of the remaining ssh TODO

Chris PeBenito • 18 years ago

528811

add gdm Xsession fc

Chris PeBenito • 18 years ago

79f5f5

remove deprecated mount_send_nfs_client_request() from stunnel

Chris PeBenito • 18 years ago

d61714

add helpers for printing warning and error messages

Chris PeBenito • 18 years ago

ea3c1f

some cleanup in the kernel layer

Chris PeBenito • 18 years ago

8b9ebd

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 18 years ago

19ebf0

add access to keys for unconfined

Chris PeBenito • 18 years ago

d82267

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 18 years ago

da9bbc

remove setbool auditallow, except for distro_rhel4.

Chris PeBenito • 18 years ago

133000

remove extra level of directory

Chris PeBenito • 18 years ago

17de1b

rpms / selinux-policy

History policy/modules

rpms / selinux-policy

Source Code

History policy/modules