File history - rpms/selinux-policy

trunk: more open perm fixes.

Chris PeBenito • 16 years ago

82d277

trunk: Move shared library calls from individual modules to the domain module.

Chris PeBenito • 16 years ago

6e68e6

trunk: remove redundant shared lib calls.

Chris PeBenito • 16 years ago

2cca6b

trunk: additional whitespace fixes.

Chris PeBenito • 16 years ago

2a9837

trunk: whitespace fix; collapse multiple blank lines into one.

Chris PeBenito • 16 years ago

88cf0a

trunk: Enable open permission checks policy capability.

Chris PeBenito • 16 years ago

0b36a2

trunk: Remove hierarchy from portage module as it is not a good example of hieararchy.

Chris PeBenito • 16 years ago

aea3f2

trunk: bump version numbers for release.

Chris PeBenito • 16 years ago

5d4f4b

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

74993c

trunk: a pile of misc fixes.

Chris PeBenito • 16 years ago

aa7c46

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

06099d

trunk: missing bits from dan's previous round of patches.

Chris PeBenito • 16 years ago

04d286

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

967fd1

trunk: 21 patches from dan.

Chris PeBenito • 16 years ago

e87221

trunk: fix typo

Chris PeBenito • 16 years ago

ed8ae5

trunk: 7 patches from dan, 1 from eamon.

Chris PeBenito • 16 years ago

12c61f

trunk: add oident from dominick grift.

Chris PeBenito • 16 years ago

73edbc

trunk: fix dupe fc.

Chris PeBenito • 16 years ago

6d8af2

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

4bdf19

trunk: readahead fix from dan.

Chris PeBenito • 16 years ago

bf9f34

trunk: cvs update from dan.

Chris PeBenito • 16 years ago

3daef6

trunk: remove stale pax class comments as that class was removed.

Chris PeBenito • 16 years ago

4a4755

trunk: init script for setrans.

Chris PeBenito • 16 years ago

88c02e

trunk: rpcbind update from dan.

Chris PeBenito • 16 years ago

658f4d

trunk: last bit of wpa_supplicant update from martin orr.

Chris PeBenito • 16 years ago

fd49fe

trunk: remove incomplete sshd_extern.

Chris PeBenito • 16 years ago

c9824e

trunk: add interface to transition to initrc_t on labeled init scripts.

Chris PeBenito • 16 years ago

64c5b9

trunk: logging update from dan.

Chris PeBenito • 16 years ago

cfafe4

trunk: bind update from dan.

Chris PeBenito • 16 years ago

f5394c

trunk: rename labeled init scripts with initrc convention.

Chris PeBenito • 16 years ago

48f645

trunk: squid update from dan.

Chris PeBenito • 16 years ago

a46b60

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

21ea2b

trunk: kudzu and mta patches from dan.

Chris PeBenito • 16 years ago

36095d

trunk: promote networkmanager debian fc entries out of build options.

Chris PeBenito • 16 years ago

bc85e8

trunk: ntp and setrans update from dan.

Chris PeBenito • 16 years ago

878691

trunk: Debian update for NetworkManager/wpa_supplicant from Martin Orr.

Chris PeBenito • 16 years ago

52ceaa

trunk: networkmanager/ppp patch from dan.

Chris PeBenito • 16 years ago

ae3386

trunk: fix bad apcupsd interface name.

Chris PeBenito • 16 years ago

859135

trunk: fix fail2ban init script regex.

Chris PeBenito • 16 years ago

543418

trunk: update mls constraints for x_application_data.

Chris PeBenito • 16 years ago

6a824f

trunk: fail2ban update from dan.

Chris PeBenito • 16 years ago

cdac98

trunk: fix bad require.

Chris PeBenito • 16 years ago

96851b

trunk: add cyphesis from dan.

Chris PeBenito • 16 years ago

a71e13

trunk: Logrotate and Bind updates from Vaclav Ovsik.

Chris PeBenito • 16 years ago

e40fa6

trunk: first part of init script labeling support.

Chris PeBenito • 16 years ago

6cc3f3

trunk: hplip uses dbus.

Chris PeBenito • 16 years ago

9bcfb6

trunk: inetd update from dan.

Chris PeBenito • 16 years ago

24af9b

trunk: fix unconfined mail sending out by postfix and qmail.

Chris PeBenito • 16 years ago

e4171e

trunk: fedora update cherry picked by david hardeman.

Chris PeBenito • 16 years ago

c11057

trunk: add w3c from dan.

Chris PeBenito • 16 years ago

32f8ff

trunk: firstboot update from dan.

Chris PeBenito • 16 years ago

93f445

trunk: 2 patches from dan.

Chris PeBenito • 16 years ago

770c01

trunk: 6 patches from the fedora policy, cherry picked by david hardeman.

Chris PeBenito • 16 years ago

3e5987

trunk: two small patches from dan.

Chris PeBenito • 16 years ago

6e3289

trunk: fix from fedora policy, cherry picked from David Hardeman.

Chris PeBenito • 16 years ago

9acf48

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Chris PeBenito • 16 years ago

9c4500

trunk: add an empty m4 string so the index macro is not invoked, to prevent a warning.

Chris PeBenito • 16 years ago

cc1eee

trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.

Chris PeBenito • 16 years ago

e0ed76

trunk: missed fixes on previous commit.

Chris PeBenito • 16 years ago

7aabe3

trunk: 11 more cherry picks from fedora policy, by david hardeman.

Chris PeBenito • 16 years ago

8a948c

trunk: Samba/winbind update from Mike Edenfield.

Chris PeBenito • 16 years ago

b81bfc

trunk: Policy size optimization with a non-security file attribute from James Carter.

Chris PeBenito • 16 years ago

3338f2

trunk: another patch from the fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

d13f87

trunk: 3 more cherry picked Fedora fixes from David Hrdeman.

Chris PeBenito • 16 years ago

556556

trunk: Database labeled networking update from KaiGai Kohei.

Chris PeBenito • 16 years ago

dc1920

trunk: 7 patches from Fedora policy, cherry picked by david hrdeman.

Chris PeBenito • 16 years ago

6224fc

trunk: massive whitespace cleanup from dominick grift.

Chris PeBenito • 16 years ago

0bfccd

trunk: pam_mount fix for local login from Stefan Schulze Frielinghaus

Chris PeBenito • 16 years ago

2b592a

trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.

Chris PeBenito • 16 years ago

4459a7

trunk: bump versions for release.

Chris PeBenito • 16 years ago

cfcf50

trunk: drop workaround rules.

Chris PeBenito • 16 years ago

6aa991

trunk: Fix httpd_enable_homedirs to actually provide the access it is supposed to provide.

Chris PeBenito • 16 years ago

e311e2

trunk: apache script connections to postgres, from kaigai.

Chris PeBenito • 16 years ago

5fe7de

trunk: more xml doc fixes.

Chris PeBenito • 16 years ago

f7eaee

trunk: Add unused interface/template parameter metadata in XML.

Chris PeBenito • 16 years ago

c5cfd2

trunk: Patch to handle postfix data_directory from Vaclav Ovsik.

Chris PeBenito • 16 years ago

8c6292

trunk: fix up stored procedure naming patch from kaigai.

Chris PeBenito • 16 years ago

7f4005

trunk: add missing requires.

Chris PeBenito • 16 years ago

b1a903

trunk: pull in most of dans vmware patch.

Chris PeBenito • 16 years ago

a713ad

trunk: two small updates from dan.

Chris PeBenito • 16 years ago

c54eb8

trunk: podsleuth and hal updates from dan.

Chris PeBenito • 16 years ago

131634

trunk: add qemu and virt from dan.

Chris PeBenito • 16 years ago

eb4216

trunk: add /usr/lib32 symlink labeling for debian.

Chris PeBenito • 16 years ago

fe5618

trunk: additional patch from kaigai to fix up some type transitions for unpriv clients.

Chris PeBenito • 16 years ago

8e7d43

trunk: add sepostgresql policy from kaigai kohei.

Chris PeBenito • 16 years ago

e8cb08

trunk: trivial kernel patch from dan.

Chris PeBenito • 16 years ago

67b620

trunk: Patch for X.org dbus support from Martin Orr.

Chris PeBenito • 16 years ago

ef55a1

trunk: misc gentoo fc fixes.

Chris PeBenito • 16 years ago

4b28c2

trunk: add prelude from dan.

Chris PeBenito • 16 years ago

cdbd09

trunk: misc fixes.

Chris PeBenito • 16 years ago

147af4

trunk: fixes for gentoo targeted systems.

Chris PeBenito • 16 years ago

d87efe

trunk: fs update from dan.

Chris PeBenito • 16 years ago

b4921b

trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.

Chris PeBenito • 16 years ago

308baa

trunk: add additional portage log locations.

Chris PeBenito • 16 years ago

0ecd82

trunk: tweak kerneloops.

Chris PeBenito • 16 years ago

8926b2

trunk: add kerneloops from dan.

Chris PeBenito • 16 years ago

782c10

trunk: add kismet from dan.

Chris PeBenito • 16 years ago

ff79b8

trunk: start adding open perm to obvious places.

Chris PeBenito • 16 years ago

cbe82b

trunk: fix bad cifs interface.

Chris PeBenito • 16 years ago

7d8fbd

trunk: fix typo

Chris PeBenito • 16 years ago

e6fdb5

trunk: temp workaround for toolchain breakage.

Chris PeBenito • 16 years ago

8db508

trunk: Module loading now requires setsched on kernel threads.

Chris PeBenito • 16 years ago

4416c4

trunk: another pile of misc fixes.

Chris PeBenito • 16 years ago

b34db7

trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.

Chris PeBenito • 16 years ago

8f3a0a

trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.

Chris PeBenito • 16 years ago

a42ce9

trunk: X application data class from Eamon Walsh and Ted Toth.

Chris PeBenito • 16 years ago

d923d5

trunk: Move user roles into individual modules.

Chris PeBenito • 16 years ago

e9c6cd

trunk: add missing mplayer_etc_t require in role template.

Chris PeBenito • 16 years ago

a0647a

trunk: make hald_log_t a log file.

Chris PeBenito • 16 years ago

7e11b7

trunk: hal xml doc fix pointed out by Rob Myers.

Chris PeBenito • 16 years ago

f12302

trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.

Chris PeBenito • 16 years ago

2083db

trunk: Add file for enabling policy capabilities.

Chris PeBenito • 16 years ago

c07f9c

trunk: Patch to fix leaky interface/template call depth calculator from Vaclav Ovsik.

Chris PeBenito • 16 years ago

75da4b

trunk: 7 patches from dan.

Chris PeBenito • 16 years ago

8152a7

trunk: bump module version numbers for release.

Chris PeBenito • 16 years ago

0a14f3

trunk: add core xselinux support.

Chris PeBenito • 16 years ago

2c12b4

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

e82895

trunk: fix winbind socket connection interface for default location of the sock_file.

Chris PeBenito • 16 years ago

9377a3

trunk: add type transition to fix mysql socket creation.

Chris PeBenito • 16 years ago

9e8c3a

trunk: small fixes for gentoo system.

Chris PeBenito • 16 years ago

2ed4f5

trunk: add wireshark.

Chris PeBenito • 16 years ago

6e2123

trunk: a pair of tweaks from gentoo systems.

Chris PeBenito • 16 years ago

91d6c9

trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.

Chris PeBenito • 16 years ago

47333d

trunk: Definitions for open permisson on file and similar objects from Eric Paris.

Chris PeBenito • 16 years ago

210607

trunk: Apt updates for ptys and logs, from Martin Orr.

Chris PeBenito • 16 years ago

e065ac

trunk: rpc update from Vaclav Ovsik.

Chris PeBenito • 16 years ago

01e8ff

trunk: dontaudit init fds in loadkeys.

Chris PeBenito • 16 years ago

737fcf

trunk: Exim updates on Debian from Devin Carrawy.

Chris PeBenito • 16 years ago

d57a09

trunk: dovecot fix from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

834401

trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

90c3c5

trunk: Pam and samba updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 16 years ago

9fa023

trunk: Backup update on Debian from Vaclav Ovsik.

Chris PeBenito • 16 years ago

45b56b

trunk: Cracklib update on Deban from Vaclav Ovsik.

Chris PeBenito • 16 years ago

51223b

trunk: 8 patches from dan.

Chris PeBenito • 16 years ago

ee6608

trunk: 4 patches from dan.

Chris PeBenito • 16 years ago

f50856

trunk: label /proc/kallsyms with system_map_t.

Chris PeBenito • 16 years ago

037fc0

trunk: fix pppd admin interface.

Chris PeBenito • 16 years ago

4f0178

trunk: fix userdom_role_change_template() xml.

Chris PeBenito • 16 years ago

6e7a1f

trunk: labeled networking permission update from paul moore.

Chris PeBenito • 16 years ago

f03433

trunk: add capability2 class, from Stephen Smalley.

Chris PeBenito • 16 years ago

8b9ffe

trunk: 12 patches from dan.

Chris PeBenito • 16 years ago

7a5e2d

trunk: add basic ubuntu support

Chris PeBenito • 16 years ago

12cf80

trunk: 3 patches from dan.

Chris PeBenito • 16 years ago

ce8a52

trunk: add 3rd party corenet interfaces for (secmark) packets.

Chris PeBenito • 16 years ago

320ea9

trunk: add setfcap capabiltiy, from Serge Hallyn.

Chris PeBenito • 16 years ago

d4623f

trunk: fix missing lo netif alias for standard and mcs configs.

Chris PeBenito • 16 years ago

c8d4c3

trunk: add mls constraints to dbus.

Chris PeBenito • 16 years ago

936f28

trunk: add run_init domtrans to chk passwd.

Chris PeBenito • 16 years ago

9323a5

trunk: uncomment set loginuid for functional login programs under strict.

Chris PeBenito • 16 years ago

7cbfeb

trunk: Labeled networking peer object class updates.

Chris PeBenito • 16 years ago

f3da31

trunk: bump module versions for release.

Chris PeBenito • 16 years ago

f7925f

trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.

Chris PeBenito • 16 years ago

1abafe

trunk: several fc updates from dan.

Chris PeBenito • 16 years ago

02d968

trunk: add openoffice locations in gentoo.

Chris PeBenito • 16 years ago

9f6e2d

trunk: Improve several tunables descriptions from Dan Walsh.

Chris PeBenito • 16 years ago

dd9e1d

trunk: another round of nsswitch from dan.

Chris PeBenito • 16 years ago

09e216

trunk: add setrlimit to debian cron.

Chris PeBenito • 16 years ago

74d920

trunk: fix xconsole rw interface.

Chris PeBenito • 17 years ago

5f63dd

trunk: clean up nsswitch usage, from dan.

Chris PeBenito • 17 years ago

c0cf6e

trunk: add /dev symlink relabel since its not short circuited.

Chris PeBenito • 17 years ago

08dcce

trunk: version bump for newrole fixes.

Chris PeBenito • 17 years ago

f98cfb

trunk: test fix 2 for newrole.

Chris PeBenito • 17 years ago

c2b87f

trunk: test fix for newrole.

Chris PeBenito • 17 years ago

6138d3

trunk: handle early boot on debian, for /dev labeling.

Chris PeBenito • 17 years ago

1483be

trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.

Chris PeBenito • 17 years ago

2f5c2f

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

0aa18d

trunk: More complete labeled networking infrastructure from KaiGai Kohei.

Chris PeBenito • 17 years ago

0b6aca

trunk: add missing tcp_socket rules for xfs.

Chris PeBenito • 17 years ago

8d1f9d

trunk: fix dup specification for /var/spool/cups/*

Chris PeBenito • 17 years ago

6ab634

trunk: add unconfined_run_to().

Chris PeBenito • 17 years ago

ccf661

trunk: switch newrole and run_init over to use nsswitch.

Chris PeBenito • 17 years ago

013783

trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().

Chris PeBenito • 17 years ago

53da70

trunk: reorganize selinuxutil.

Chris PeBenito • 17 years ago

389ad7

trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.

Chris PeBenito • 17 years ago

eeef8d

trunk: 9 patches from dan.

Chris PeBenito • 17 years ago

226c06

trunk: 8 patches from dan.

Chris PeBenito • 17 years ago

6c9118

trunk: remove duplicate specifiction for /usr/lib/devices on debian.

Chris PeBenito • 17 years ago

2999ce

trunk: add in polmatch for default spd.

Chris PeBenito • 17 years ago

982035

trunk: add labeled networking support to unconfined.

Chris PeBenito • 17 years ago

bdccba

trunk: rearrange the bottom of domain.if and fix domain_ipsec_labels().

Chris PeBenito • 17 years ago

a56055

trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.

Chris PeBenito • 17 years ago

847937

trunk: add gentoo hal fc entry.

Chris PeBenito • 17 years ago

3b498a

trunk: add postfixpolicyd from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

4605ad

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

eaed90

trunk: fix init_ranged_system_domain range_transition object class, from james carter.

Chris PeBenito • 17 years ago

3ece11

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

7d4161

trunk: 11 patches from dan.

Chris PeBenito • 17 years ago

495df4

trunk: remove unused types from dbus.

Chris PeBenito • 17 years ago

bd973e

trunk: filesystem patch from dan.

Chris PeBenito • 17 years ago

8e2fb6

trunk: add exim from dan.

Chris PeBenito • 17 years ago

6bf8bf

trunk: add /var/lib search for system bus template.

Chris PeBenito • 17 years ago

3c99e5

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

2f2716

trunk: add infrastructure for managing user web content.

Chris PeBenito • 17 years ago

a334d2

trunk: fix do not userspace commons in kernel version of av_permissions.h.

Chris PeBenito • 17 years ago

e83ede

trunk: fix flask.py Flask class userspace dictionary usage.

Chris PeBenito • 17 years ago

32c05c

trunk: do not emit lines in the kernel version of av_inherit.h for commons that are only inherited by userspace object classes.

Chris PeBenito • 17 years ago

651df3

trunk: do not emit S_(0, 0, 0) in kernel headers for userspace classes that inherit commons.

Chris PeBenito • 17 years ago

3a9096

trunk: fix unconditional call to nscd from usermanage run interfaces.

Chris PeBenito • 17 years ago

366270

trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.

Chris PeBenito • 17 years ago

a27d1c

trunk: reorganize amanda and bind

Chris PeBenito • 17 years ago

f48782

trunk: 2 patches from dan.

Chris PeBenito • 17 years ago

bc01b3

trunk: 10 patches from dan.

Chris PeBenito • 17 years ago

cdf98f

Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.

Chris PeBenito • 17 years ago

ef659a

trunk: remove stale user_net_control reference in usernetctl.if.

Chris PeBenito • 17 years ago

81d4c8

trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.

Chris PeBenito • 17 years ago

6c53a1

trunk: module version bumps for previous commit.

Chris PeBenito • 17 years ago

12e9ea

trunk: merge strict and targeted policies. merge shlib_t into lib_t.

Chris PeBenito • 17 years ago

350b6a

trunk: bump version numbers for release.

Chris PeBenito • 17 years ago

3480f3

trunk: one-liner from Shintaro Fujiwara

Chris PeBenito • 17 years ago

aef93a

trunk: xml doc one-liner from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

4ddc7b

trunk: one-liner from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

ff4085

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Chris PeBenito • 17 years ago

6f49b4

trunk: add awstats from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

0cf6df

trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().

Chris PeBenito • 17 years ago

8242f5

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

14add3

trunk: 3 patches from dan.

Chris PeBenito • 17 years ago

134a79

trunk: 6 patches from dan.

Chris PeBenito • 17 years ago

8a9d6f

trunk: two tiny patches from Stefan Schulze Frielinghaus

Chris PeBenito • 17 years ago

abc893

trunk: six patches from dan.

Chris PeBenito • 17 years ago

72f82c

trunk: udev update and brctl module from dan.

Chris PeBenito • 17 years ago

8241b5

trunk: 4 patches from dan.

Chris PeBenito • 17 years ago

016e5c

trunk: 5 patches from dan.

Chris PeBenito • 17 years ago

0a0b80

trunk: make coda nfs_t, ticket #39.

Chris PeBenito • 17 years ago

ce2c80

trunk: fix certwatch_run() interface, which had a typo in the name.

Chris PeBenito • 17 years ago

492276

trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.

Chris PeBenito • 17 years ago

6dd721

trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

a2f444

trunk: add missing commas in can_exec in daemontools that worked by luck.

Chris PeBenito • 17 years ago

752ddf

Update MLS constraints from LSPP evaluated policy.

Chris PeBenito • 17 years ago

d62c08

trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.

Chris PeBenito • 17 years ago

2af7b4

trunk: updates from dan on 9 modules

Chris PeBenito • 17 years ago

8d2c34

trunk: Files and radvd updates from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

80d5e0

trunk: fix gdm xsession scripts on redhat machines.

Chris PeBenito • 17 years ago

1779be

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.

Chris PeBenito • 17 years ago

f8233a

trunk: several MLS enhancements.

Chris PeBenito • 17 years ago

2d0c9c

trunk: Database userspace object manager classes from KaiGai Kohei.

Chris PeBenito • 17 years ago

9760cb

trunk: filesystem patch from dan

Chris PeBenito • 17 years ago

3d6e96

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

939a42

trunk: several support macro fixes.

Chris PeBenito • 17 years ago

c040ea

trunk: add 3rd party interface for apache cgi.

Chris PeBenito • 17 years ago

371d11

trunk: fix pipe permission set in domtrans_pattern().

Chris PeBenito • 17 years ago

63acaf

trunk: add getserv and shmemserv nscd permissions.

Chris PeBenito • 17 years ago

924f3c

trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

Chris PeBenito • 17 years ago

708aab

trunk: add application module

Chris PeBenito • 17 years ago

d46cfe

trunk: fix missed netlabel deprecation

Chris PeBenito • 17 years ago

692952

trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.

Chris PeBenito • 17 years ago

f80a0e

trunk: update module version numbers for release.

Chris PeBenito • 17 years ago

116c1d

Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.

Chris PeBenito • 17 years ago

113b4f

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Chris PeBenito • 17 years ago

e5e55a

trunk: minor amanda update from dan

Chris PeBenito • 17 years ago

f5842c

trunk: add rpcbind from dan

Chris PeBenito • 17 years ago

7b61fe

trunk: Unified labeled networking policy from Paul Moore.

Chris PeBenito • 17 years ago

190066

trunk: pyzor and clamav updates from dan

Chris PeBenito • 17 years ago

2c3ac4

trunk: fix typo in vmware.fc

Chris PeBenito • 17 years ago

22bff6

trunk: nagios update from dan

Chris PeBenito • 17 years ago

02f2c3

trunk: procmail tweak from dan.

Chris PeBenito • 17 years ago

a90a25

trunk: xen updates from dan

Chris PeBenito • 17 years ago

7f0897

trunk: trivial gentoo tweaks

Chris PeBenito • 17 years ago

92d1ad

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

5bf9de

trunk: radius one-liner from dan

Chris PeBenito • 17 years ago

99b5a5

trunk: big samba update from dan

Chris PeBenito • 17 years ago

40df56

trunk: drop snmpd_etc_t.

Chris PeBenito • 17 years ago

788d88

trunk: confine sendmail and logrotate on targeted

Chris PeBenito • 17 years ago

6c8aba

trunk: Tunable connection to postgresql for users from KaiGai Kohei.

Chris PeBenito • 17 years ago

cb10a2

Memprotect support patch from Stephen Smalley.

Chris PeBenito • 17 years ago

41337a

trunk: 2 patches from dan

Chris PeBenito • 17 years ago

d13941

trunk: add amtu from dan

Chris PeBenito • 17 years ago

a74d1a

trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().

Chris PeBenito • 17 years ago

d5b81a

trunk: version bumps for previous commit.

Chris PeBenito • 17 years ago

262def

trunk: 7 simple patches from dan.

Chris PeBenito • 17 years ago

f7101c

trunk: 3 patches from dan

Chris PeBenito • 17 years ago

6649ae

trunk: 5 patches from dan

Chris PeBenito • 17 years ago

d534d3

six simple patches from dan

Chris PeBenito • 17 years ago

f6a590

add fc entry for make_reiser4

Chris PeBenito • 17 years ago

778296

trunk: fix line in evolution to be strict-only; was being covered up by genhomedircon.

Chris PeBenito • 17 years ago

17b9cb

trunk: snmp tweak from dan

Chris PeBenito • 17 years ago

a39a93

trunk: remaining pieces for apcupsd module

Chris PeBenito • 17 years ago

c412be

trunk: long overdue cleanup from when range_transitions were only in the base module

Chris PeBenito • 17 years ago

38d0cf

merge restorecon into setfiles

Chris PeBenito • 17 years ago

762d2c

Patch to begin separating out hald helper programs from Dan Walsh.

Chris PeBenito • 17 years ago

12217c

add apcupsd from dan

Chris PeBenito • 17 years ago

78f17e

Fixes for squid, dovecot, and snmp from Dan Walsh.

Chris PeBenito • 17 years ago

b129e2

Miscellaneous consolekit fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4967aa

textrel lib update from dan

Chris PeBenito • 17 years ago

0ef5d6

add missing rename_dir_perms

Chris PeBenito • 17 years ago

7f819d

Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.

Chris PeBenito • 17 years ago

ed4b73

Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.

Chris PeBenito • 17 years ago

517618

- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes

Chris PeBenito • 17 years ago

882186

add rwho from Nalin Dahyabhai

Chris PeBenito • 17 years ago

6a2975

Patch to allow amavis to read spamassassin libraries from Dan Walsh.

Chris PeBenito • 17 years ago

747ab1

trivial aide fix from dan

Chris PeBenito • 17 years ago

ae32fb

Patch to allow slocate to getattr other filesystems and directories on those filesystems from Dan Walsh.

Chris PeBenito • 17 years ago

f9029f

trivial fix for netutils from dan

Chris PeBenito • 17 years ago

27c570

trivial fix from dan for bluetooth

Chris PeBenito • 17 years ago

7487a6

missed piece of clip patch

Chris PeBenito • 17 years ago

b4beb0

Fixes for RHEL4 from the CLIP project.

Chris PeBenito • 17 years ago

d28e52

Replace the old lrrd fc entries with correct munin ones.

Chris PeBenito • 17 years ago

cd16fe

Move program admin template usage out of userdom_admin_user_template() to sysadm policy in userdomain.te to fix usage of the template for third parties.

Chris PeBenito • 17 years ago

b4dfdc

Fix clockspeed_run_cli() declaration, it was incorrectly defined as a template instead of an interface.

Chris PeBenito • 17 years ago

7a4bd4

bump module versions for release

Chris PeBenito • 17 years ago

0251df

last piece of previous consolekit patch

Chris PeBenito • 17 years ago

4029f1

add zabbix from dan

Chris PeBenito • 17 years ago

97e815

5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes

Chris PeBenito • 17 years ago

697489

more consolekit updates from dan

Chris PeBenito • 17 years ago

99064c

last piece of dan's previous patch

Chris PeBenito • 17 years ago

82e284

confine ldconfig in targeted, from dan

Chris PeBenito • 17 years ago

19b2de

from dan:

Chris PeBenito • 17 years ago

ebc1e8

six patches from dan

Chris PeBenito • 17 years ago

9af48e

gentoo /lib can be a symlink on x86-64 systems

Chris PeBenito • 17 years ago

98faba

fix http_script_domains, it was incorrectly applied to the content type rather than the script domain. bug #24.

Chris PeBenito • 17 years ago

39d8dc

emit "null" instead of NULL for userspace headers

Chris PeBenito • 17 years ago

f88ef6

bools in modules fix to require the boolean in optionals that are part of the base module, and move bool declarations in the base module/monolithic

Chris PeBenito • 17 years ago

f6ddd6

Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.

Chris PeBenito • 17 years ago

a26923

six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed

Chris PeBenito • 17 years ago

9e8f65

- Move booleans and tunables to modules when it is only used in a single

Chris PeBenito • 17 years ago

56e1b3

Merge sbin_t and ls_exec_t into bin_t.

Chris PeBenito • 17 years ago

8021cb

remove disable_trans booleans

Chris PeBenito • 17 years ago

ab514d

Output different header sets for kernel and userland from flask headers.

Chris PeBenito • 17 years ago

e9b004

deprecated pax class

Chris PeBenito • 17 years ago

1852cd

network fix from dan

Chris PeBenito • 17 years ago

5f5b7a

one-liner from dan

Chris PeBenito • 17 years ago

cc9130

patch from dan to have ricci modstorage transition to lvm

Chris PeBenito • 17 years ago

19fd93

add fail2ban from dan

Chris PeBenito • 17 years ago

cd3ee9

kudzu will telinit to make init re-read the inittab after configuring serial consoles

Chris PeBenito • 17 years ago

efcf9d

Add dontaudits for init fds and console to init_daemon_domain().

Chris PeBenito • 17 years ago

a5f5eb

create user gpg keys dir patch from dan

Chris PeBenito • 17 years ago

4832f0

add kvmfs support, from dan

Chris PeBenito • 17 years ago

937849

trivial patch for radius from dan

Chris PeBenito • 17 years ago

720014

trivial patch from dan for sysstat access to sysfs

Chris PeBenito • 17 years ago

86b28c

other part of consolekit addition

Chris PeBenito • 17 years ago

e66689

from Dan:

Chris PeBenito • 17 years ago

c224d9

patch from Dan for sudo:

Chris PeBenito • 17 years ago

6c20f7

It was just pointed out to me that the raw IP socket class is missing from the

Chris PeBenito • 17 years ago

b50f2e

fix for rh bug 203290

Chris PeBenito • 17 years ago

0cca51

last bit of dans patch

Chris PeBenito • 17 years ago

b5a6c8

Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.

Chris PeBenito • 17 years ago

cdc91b

procmail uses /tmp files

Chris PeBenito • 17 years ago

59bedc

trivial change from dan

Chris PeBenito • 17 years ago

7aefc6

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

Chris PeBenito • 17 years ago

7aca2a

Patch for gssd fixes from Dan Walsh

Chris PeBenito • 17 years ago

c23eb5

patches for lvm and ricci fixes from Dan Walsh.

Chris PeBenito • 17 years ago

c5561c

lmtp and smtp are the same file require same context of setfiles complains

Chris PeBenito • 17 years ago

f2c69c

patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh.

Chris PeBenito • 17 years ago

ecc98e

Patch for kerberized telnet fixes from Dan Walsh.

Chris PeBenito • 17 years ago

4900fd

Patch for kerberized ftp and other ftp fixes from Dan Walsh.

Chris PeBenito • 17 years ago

09c56f

Patch for an additional wine executable from Dan Walsh.

Chris PeBenito • 17 years ago

2aea36

Patch for additional games file contexts from Dan Walsh.

Chris PeBenito • 17 years ago

bf39cd

Add support for libselinux 2.0.5 init_selinuxmnt() changes.

Chris PeBenito • 17 years ago

86d754

add init_exec() to init_telinit().

Chris PeBenito • 17 years ago

ca448b

Patch for misc fixes to bluetooth from Dan Walsh.

Chris PeBenito • 17 years ago

f0eaed

On Tue, 2007-02-20 at 12:02 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5b0647

Patch to start deprecating usercanread attribute from Ryan Bradetich.

Chris PeBenito • 17 years ago

bbb7cc

add dccp_socket object class

Chris PeBenito • 17 years ago

a715dc

On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

3a3901

On Tue, 2007-02-20 at 12:28 -0500, Daniel J Walsh wrote:

Chris PeBenito • 17 years ago

5c45ea

Patch to remove redundant mls_trusted_object() call from Dan Walsh.

Chris PeBenito • 17 years ago

66cf19

Patch for misc fixes to nis ypxfr policy from Dan Walsh.

Chris PeBenito • 17 years ago

468521

Patch to allow apmd to telinit from Dan Walsh.

Chris PeBenito • 17 years ago

aeb54c

While using samba and SELinux with Debian GNU/Linux (etch) the

Chris PeBenito • 17 years ago

d11407

Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.

Chris PeBenito • 17 years ago

bcac3a

make ttys and ptys device nodes

Chris PeBenito • 17 years ago

f1be09

patch from dan, Thu, 2007-01-25 at 08:12 -0500

Chris PeBenito • 17 years ago

6b19be

Fix explicit use of httpd_t in openca_domtrans(), bug #22.

Chris PeBenito • 17 years ago

10e120

Clean up file context regexes in apache and java, from Eamon Walsh:

Chris PeBenito • 17 years ago

ff943a

bump versions for release.

Chris PeBenito • 17 years ago

42c5c5

merge policy patterns to trunk

Chris PeBenito • 17 years ago

c0868a

patch from dan Wed, 29 Nov 2006 17:06:40 -0500

Chris PeBenito • 18 years ago

d6d16b

patch from dan for some missing gen_require()s

Chris PeBenito • 18 years ago

563e58

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

bff907

fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

Chris PeBenito • 18 years ago

c31f67

add aide, ccs, and ricci

Chris PeBenito • 18 years ago

fa45da

This modifies the mls constraint for polmatch in the association class.

Chris PeBenito • 18 years ago

d31d3c

On Tue, 2006-11-07 at 16:51 -0500, James Antill wrote:

Chris PeBenito • 18 years ago

c6a60b

fixes from gentoo strict testing:

Chris PeBenito • 18 years ago

ed38ca

add missing gentoo file contexts for initrc and lvm

Chris PeBenito • 18 years ago

0f9a2b

Christopher J. PeBenito wrote:

Chris PeBenito • 18 years ago

f497b8

patch from dan Tue, 24 Oct 2006 11:00:28 -0400

Chris PeBenito • 18 years ago

d9845a

fix up corecommands perm sets, add seutil_manage_config_dirs()

Chris PeBenito • 18 years ago

582438

add seutil_rw_config()

Chris PeBenito • 18 years ago

d5ae68

enhanced setransd support from darrel goeddel

Chris PeBenito • 18 years ago

a8671a

bump versions to release numbers

Chris PeBenito • 18 years ago

a52b4d

fix duplicate /usr/bin/mplayer fc match for targeted

Chris PeBenito • 18 years ago

b04ecc

make inetd optional

Chris PeBenito • 18 years ago

d4a48c

merge netlabel stuff from labeled-networking branch

Chris PeBenito • 18 years ago

130f8a

fix ticket #16

Chris PeBenito • 18 years ago

aeaae5

gentoo integrated run_init rules in wrong build option.

Chris PeBenito • 18 years ago

e45324

fix term_tty() associations

Chris PeBenito • 18 years ago

0e5c54

more realplayer entries

Chris PeBenito • 18 years ago

009b37

gentoo testing fixes.

Chris PeBenito • 18 years ago

14b168

make optional the inetd dependency in samba

Chris PeBenito • 18 years ago

85f0c3

change transition from run_init to initrc to spec.

Chris PeBenito • 18 years ago

93ddc6

fix some stuff that does not affect policy

Chris PeBenito • 18 years ago

f76d07

apply contested part of russell's last patch

Chris PeBenito • 18 years ago

830c12

more non .so lib files for acrobat

Chris PeBenito • 18 years ago

546c81

patch from russell, Thu, 5 Oct 2006 22:44:49 +1000

Chris PeBenito • 18 years ago

3c3c04

- Move range transitions to modules.

Chris PeBenito • 18 years ago

e070dd

This patch adds a GConf policy to refpolicy.

Chris PeBenito • 18 years ago

002190

fix ticket #15.

Chris PeBenito • 18 years ago

f8cfdd

fix corenetwork so the ifdef enable_mls survives to regular processing.

Chris PeBenito • 18 years ago

49317e

fix build error

Chris PeBenito • 18 years ago

6c6399

patch from dan Mon, 25 Sep 2006 15:46:40 -0400

Chris PeBenito • 18 years ago

e2b84e

patch from dan Fri, 22 Sep 2006 16:30:34 -0400

Chris PeBenito • 18 years ago

693d4a

patch from dan Wed, 20 Sep 2006 12:12:49 -0400

Chris PeBenito • 18 years ago

8708d9

* add a macro for generating category declarations

Chris PeBenito • 18 years ago

a9e03b

gentoo testing fixes

Chris PeBenito • 18 years ago

bf469d

add mls fd constraints

Chris PeBenito • 18 years ago

cf7af1

common users list inotifyfs

Chris PeBenito • 18 years ago

2b571d

forgot to bump policy vers

Chris PeBenito • 18 years ago

9dfbd8

patches from erich Wed, 13 Sep 2006 16:18:18 +0200

Chris PeBenito • 18 years ago

73ca55

fix miscfiles_read_localization()

Chris PeBenito • 18 years ago

2cac32

misc fixes

Chris PeBenito • 18 years ago

0d96ff

clean up usercanread

Chris PeBenito • 18 years ago

376fbc

add last bit of role infrastructure

Chris PeBenito • 18 years ago

b1bf2f

cleanups

Chris PeBenito • 18 years ago

95b822

add main part of role-o-matic

Chris PeBenito • 18 years ago

bbcd3c

patch from dan Tue, 05 Sep 2006 17:06:06 -0400

Chris PeBenito • 18 years ago

75beb9

fix up usb.ids per distro

Chris PeBenito • 18 years ago

91dabf

patch from erich Sat, 02 Sep 2006 03:37:44 +0200

Chris PeBenito • 18 years ago

13d7ce

patch from dan Fri, 01 Sep 2006 15:45:24 -0400

Chris PeBenito • 18 years ago

5dbda5

This patch adds a polmatch avperm to arbitrate flow/state's access to

Chris PeBenito • 18 years ago

9b45c6

patch from dan Thu, 31 Aug 2006 15:16:30 -0400

Chris PeBenito • 18 years ago

eac818

patch from dan Wed, 23 Aug 2006 14:03:49 -0400

Chris PeBenito • 18 years ago

a5e213

more testing fixes

Chris PeBenito • 18 years ago

ce6bf7

This patch enables to use xattr on jffs2 filesystem.

Chris PeBenito • 18 years ago

e539a4

fix gentoo /opt contexts

Chris PeBenito • 18 years ago

de2228

more strict testing fixes

Chris PeBenito • 18 years ago

98de87

more testing fixes

Chris PeBenito • 18 years ago

d15dd5

fix ordering bug

Chris PeBenito • 18 years ago

5b4ff3

add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.

Chris PeBenito • 18 years ago

3ef029

fix typo in sxid

Chris PeBenito • 18 years ago

2ed690

testing fixes

Chris PeBenito • 18 years ago

e9b9e4

fix for netfilter_contexts

Chris PeBenito • 18 years ago

4bc6e3

cleanup in authlogin

Chris PeBenito • 18 years ago

ba1a54

fix cron_system_entry() rules

Chris PeBenito • 18 years ago

357390

remove dead selopt rules

Chris PeBenito • 18 years ago

33c7e6

clean up constraints

Chris PeBenito • 18 years ago

bd56da

ps/ptrace dontaudit cleanup

Chris PeBenito • 18 years ago

497da0

patch from Stefan for mrtg daemon operation.

Chris PeBenito • 18 years ago

4846dc

display warning if using loadkeys_domtrans() in targeted

Chris PeBenito • 18 years ago

80f928

fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.

Chris PeBenito • 18 years ago

85476e

add authlogin interface to abstract common login program perms

Chris PeBenito • 18 years ago

4b3b46

patch from dan Wed, 26 Jul 2006 14:42:46 -0400

Chris PeBenito • 18 years ago

465510

more ssh agent fixes

Chris PeBenito • 18 years ago

81aa67

clean up most of the remaining ssh TODO

Chris PeBenito • 18 years ago

528811

add gdm Xsession fc

Chris PeBenito • 18 years ago

79f5f5

remove deprecated mount_send_nfs_client_request() from stunnel

Chris PeBenito • 18 years ago

d61714

add helpers for printing warning and error messages

Chris PeBenito • 18 years ago

ea3c1f

some cleanup in the kernel layer

Chris PeBenito • 18 years ago

8b9ebd

patch to fix escaping of . in file contexts from james athey

Chris PeBenito • 18 years ago

19ebf0

add access to keys for unconfined

Chris PeBenito • 18 years ago

d82267

fix up audit message perms now that audit_write denials are being audited by the kernel.

Chris PeBenito • 18 years ago

da9bbc

remove setbool auditallow, except for distro_rhel4.

Chris PeBenito • 18 years ago

133000

remove extra level of directory

Chris PeBenito • 18 years ago

17de1b

rpms / selinux-policy

History policy

rpms / selinux-policy

Source Code

History policy