rpms / selinux-policy

Clone
Source Code
GIT

History refpolicy/policy/modules/system

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
  1.   768283ac46ef83059d936ce8018418a8aff11137
  2.   refpolicy
  3.   policy
  4.   modules
  5.   system
add comsat. clean up kerberos and nscd interfaces
Chris PeBenito • 19 years ago  
6e6156
fix up most of mta attribute insanity
Chris PeBenito • 19 years ago  
246839
send user role to per userdomain templates. update templated interfaces
Chris PeBenito • 19 years ago  
451c1e
make corecommands required
Chris PeBenito • 19 years ago  
e5d452
start adding in templated interfaces
Chris PeBenito • 19 years ago  
2a9456
add bind
Chris PeBenito • 19 years ago  
d83fda
initial support for compiling loadable modules
Chris PeBenito • 19 years ago  
fb0a3a
add gpm
Chris PeBenito • 19 years ago  
f862c3
add ldap
Chris PeBenito • 19 years ago  
2961e7
cleanup
Chris PeBenito • 19 years ago  
23ca91
add firstboot
Chris PeBenito • 19 years ago  
57a96c
fix broken xml of previous commit
Chris PeBenito • 19 years ago  
4806a0
try to knock out more of the distro_debian bootloader stuff
Chris PeBenito • 19 years ago  
5f38a6
add loadkeys
Chris PeBenito • 19 years ago  
21468a
finalize desc -> summary xml change
Chris PeBenito • 19 years ago  
f7ebea
add quota
Chris PeBenito • 19 years ago  
052c95
add sudo
Chris PeBenito • 19 years ago  
e78430
add updfstab
Chris PeBenito • 19 years ago  
dce68d
add tmpreaper
Chris PeBenito • 19 years ago  
ed78ea
add acct
Chris PeBenito • 19 years ago  
9a66d4
misc cleanup
Chris PeBenito • 19 years ago  
3fd833
add mysql
Chris PeBenito • 19 years ago  
42be7c
search sbin dirs to find the pgms
Chris PeBenito • 19 years ago  
046a21
* Rename ipsec connect interface for consistency.
Chris PeBenito • 19 years ago  
81343a
/var/lib is now a mountpoint
Chris PeBenito • 19 years ago  
ea7d57
unconfined can pass all constraints
Chris PeBenito • 19 years ago  
53857c
user home dirs were missing file type in targ policy
Chris PeBenito • 19 years ago  
0b28a2
fix typos and import some rules from NSA cvs to make targeted policy work
Chris PeBenito • 19 years ago  
689f6d
should actually try compiling first :x
Chris PeBenito • 19 years ago  
474f43
missed a line
Chris PeBenito • 19 years ago  
bd7e7a
add in some rules from NSA CVS to make targeted policy work
Chris PeBenito • 19 years ago  
a28f6d
corenet was missing from unconfined
Chris PeBenito • 19 years ago  
8c3f43
more targeted policy fixes
Chris PeBenito • 19 years ago  
892266
more cleanup
Chris PeBenito • 19 years ago  
2ec4c9
fixes for targeted policy
Chris PeBenito • 19 years ago  
8b0bbd
fix assertions for framework
Chris PeBenito • 19 years ago  
391ede
more cleanup in system
Chris PeBenito • 19 years ago  
a5f339
fix to use context_template()
Chris PeBenito • 19 years ago  
9f103c
add missing context template
Chris PeBenito • 19 years ago  
3b6174
add raid (mdadm)
Chris PeBenito • 19 years ago  
50aca6
more pcmcia cleanup
Chris PeBenito • 19 years ago  
d9fd8e
add macro to expand object class sets for use in require blocks
Chris PeBenito • 19 years ago  
157c69
* break up files_getattr_all_files into correct interfaces
Chris PeBenito • 19 years ago  
50f650
add pcmcia
Chris PeBenito • 19 years ago  
e0d57f
fix up the xml
Chris PeBenito • 19 years ago  
c429cb
add ipsec
Chris PeBenito • 19 years ago  
11633b
add nscd
Chris PeBenito • 19 years ago  
493d6c
* fix chroot exec interface
Chris PeBenito • 19 years ago  
df00b2
more cleanup of current TODOs
Chris PeBenito • 19 years ago  
b24f35
fix xml
Chris PeBenito • 19 years ago  
4051d1
fix more TODOs. fix selinux.te to selinuxutil.te in optionals
Chris PeBenito • 19 years ago  
ae9e27
another round of TODO cleanup
Chris PeBenito • 19 years ago  
a42ca7
implement direct_sysadm_daemon
Chris PeBenito • 19 years ago  
e5f806
support for targeted policy
Chris PeBenito • 19 years ago  
c98340
add missing ssh file contexts
Chris PeBenito • 19 years ago  
bb3254
add unconfined
Chris PeBenito • 19 years ago  
9726b3
add required tags
Chris PeBenito • 19 years ago  
274547
convert can_kerberos()
Chris PeBenito • 19 years ago  
a7a979
more work on current modules
Chris PeBenito • 19 years ago  
fd89e1
clean up more todos
Chris PeBenito • 19 years ago  
ebdc3b
make layer summary required
Chris PeBenito • 19 years ago  
d233bf
another round of renaming, for consistency
Chris PeBenito • 19 years ago  
8fd367
add logrotate, more low-hanging fruit
Chris PeBenito • 19 years ago  
96ce00
add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type
Chris PeBenito • 19 years ago  
cbca03
more low hanging fruit cleanup
Chris PeBenito • 19 years ago  
783b38
add fstools, and more cleanup
Chris PeBenito • 19 years ago  
58c3da
changes to make inetd work
Chris PeBenito • 19 years ago  
80436b
autofs_t and ypbind cleanup
Chris PeBenito • 19 years ago  
ab940a
xml updates and nis stuff
Chris PeBenito • 19 years ago  
e88003
add/update comments
Chris PeBenito • 19 years ago  
62a7b0
update for new documentation method
Chris PeBenito • 19 years ago  
414e41
fix
Chris PeBenito • 19 years ago  
19ea99
shorten some xml tags
Chris PeBenito • 19 years ago  
261e0e
more setcurrent stuff
Chris PeBenito • 19 years ago  
007ca5
fixes pointed out by steve, plus fixes revealed by the added assertions
Chris PeBenito • 19 years ago  
2a3478
more work on ssh, plus import ssh-agent
Chris PeBenito • 19 years ago  
9ccd96
move all interfaces over to the interface macro. add traceback debugging info
Chris PeBenito • 19 years ago  
199895
remove remaining _depend macros to prep for switchover to interface declaration macro
Chris PeBenito • 19 years ago  
cbc9d6
initial commit of ssh.
Chris PeBenito • 19 years ago  
0404a3
work on newrole policy
Chris PeBenito • 19 years ago  
21871a
initial commit
Chris PeBenito • 19 years ago  
e04b8e
XML: encapsulate modules in layers, rather then layer being an attribute of
Chris PeBenito • 19 years ago  
57869a
more work to clean up and complete current modules
Chris PeBenito • 19 years ago  
7a2f20
review of system interfaces
Chris PeBenito • 19 years ago  
139520
misc cleanup
Chris PeBenito • 19 years ago  
0e7216
add a couple more nfs and cifs interfaces, to cover most of the
Chris PeBenito • 19 years ago  
d35c62
eliminate _depend macros
Chris PeBenito • 19 years ago  
77c124
finish renaming system/selinux to system/selinuxutil
Chris PeBenito • 19 years ago  
5e0da6
move selinux to selinuxutil
Chris PeBenito • 19 years ago  
be4a80
move constraints interfaces to domain module. move sysfs and usbfs to
Chris PeBenito • 19 years ago  
8bd678
fix typo
Chris PeBenito • 19 years ago  
810f2b
stray renames in distro_redhat
Chris PeBenito • 19 years ago  
b57dd1
convert relevant conditionals into tunable_policy
Chris PeBenito • 19 years ago  
3eed10
rename requires_block_tempalte to gen_require
Chris PeBenito • 19 years ago  
fa7bea
tunables work
Chris PeBenito • 19 years ago  
34c8fa
a few missed renames, and start fixing up tunables
Chris PeBenito • 19 years ago  
31908b
rename setattr removable_device_t
Chris PeBenito • 19 years ago  
5a45e7
Updates to documentation.
Karl MacMillan • 19 years ago  
870049
renaming insanity
Chris PeBenito • 19 years ago  
c9428d
Devices rename.
Karl MacMillan • 19 years ago  
f0c985
renaming insanity
Chris PeBenito • 19 years ago  
0fd9dc
reorder
Chris PeBenito • 19 years ago  
a154cd
kernel.if renaming
Chris PeBenito • 19 years ago  
588ffa
aliases
Chris PeBenito • 19 years ago  
cc41a9
for now, drop infoflow tags
Chris PeBenito • 19 years ago  
d90b27
aliases
Chris PeBenito • 19 years ago  
dd8229
aliases
Chris PeBenito • 19 years ago  
80048c
genhomedircon entries
Chris PeBenito • 19 years ago  
5d3156
initial commit
Chris PeBenito • 19 years ago  
5552ed
aliasing
Chris PeBenito • 19 years ago  
7edd02
initial commit
Chris PeBenito • 19 years ago  
b29d23
comment fix
Chris PeBenito • 19 years ago  
066d46
add can_exec
Chris PeBenito • 19 years ago  
a71972
start renaming filesystem interfaces
Chris PeBenito • 19 years ago  
763c44
add xml
Chris PeBenito • 19 years ago  
3865d6
start switching over to new tunable infrastructure
Chris PeBenito • 19 years ago  
254bbc
fix broken macros
Chris PeBenito • 19 years ago  
2d6893
add domain(_auto)_trans
Chris PeBenito • 19 years ago  
a1d2e8
move audit to logging
Chris PeBenito • 19 years ago  
eb7f9a
move to logging
Chris PeBenito • 19 years ago  
ef5e55
change over to some perm set macros. add indentation
Chris PeBenito • 19 years ago  
0c73cd
change network verb in corenetwork to sendrecv
Chris PeBenito • 19 years ago  
d11566
move fs_use and isids to respective modules
Chris PeBenito • 19 years ago  
cabfa5
remove copyright until licensing issues are resolved
Chris PeBenito • 19 years ago  
aa4060
fix xml
Chris PeBenito • 19 years ago  
e32d52
last fixes for cab
Chris PeBenito • 19 years ago  
129318
more cab work
Chris PeBenito • 19 years ago  
d115b2
add some file_t interfaces, and console write
Chris PeBenito • 19 years ago  
3b857e
permission set macro changes, plus more cab related work
Chris PeBenito • 19 years ago  
4bf4ed
many fixes from cab work
Chris PeBenito • 19 years ago  
f5c42b
cleanup inspired by sediff
Chris PeBenito • 19 years ago  
32e53a
restructure users, and add signalling
Chris PeBenito • 19 years ago  
c6fd1f
fix ordering and put in var_lib_t
Chris PeBenito • 19 years ago  
dd3163
fixes from cab
Chris PeBenito • 19 years ago  
d490eb
many fixes from cab testing
Chris PeBenito • 19 years ago  
efd8ed
cleanup
Chris PeBenito • 19 years ago  
cbeef6
fix the object class in process transition interfaces
Chris PeBenito • 19 years ago  
e7fcdc
another cleanup pass
Chris PeBenito • 19 years ago  
dc771f
stuff from rpm
Chris PeBenito • 19 years ago  
6b48fd
add dontaudit shadow_t getattr
Chris PeBenito • 19 years ago  
57440f
move in stuff from rpm
Chris PeBenito • 19 years ago  
392551
add ldconfig and rpm transitions
Chris PeBenito • 19 years ago  
15a961
add missing xml
Chris PeBenito • 19 years ago  
162a57
add tmpfsfile support
Chris PeBenito • 19 years ago  
46410f
add signull all domains
Chris PeBenito • 19 years ago  
1c9f9a
make transition on shell work
Chris PeBenito • 19 years ago  
3000a3
add ldconfig
Chris PeBenito • 19 years ago  
48e0db
add mls sensitivity to genfscon, initial sids and fs_use
Chris PeBenito • 19 years ago  
e32c0d
add xml comments to interfaces, convert over userdomain stuff
Chris PeBenito • 19 years ago  
daa0e0
add context template to support mls
Chris PeBenito • 19 years ago  
bee546
add userdomain:fd use
Chris PeBenito • 19 years ago  
26c87e
add a xml comment
Chris PeBenito • 19 years ago  
490639
add xml
Chris PeBenito • 19 years ago  
2e77b2
move run_init to selinux, as it is part of policycoreutils
Chris PeBenito • 19 years ago  
8623d5
rename some selinuxfs interfaces for more clarity
Chris PeBenito • 19 years ago  
178607
add source policy interfaces
Chris PeBenito • 19 years ago  
ef3734
add renice all domains
Chris PeBenito • 19 years ago  
5817e3
add admin template
Chris PeBenito • 19 years ago  
76bff3
start adding admin template
Chris PeBenito • 19 years ago  
4d8ddf
change read_shared_libraries to use_shared_libraries, since the execute
Chris PeBenito • 19 years ago  
dd14d0
initial commit
Chris PeBenito • 19 years ago  
650e75
start adding user domains. fix ttynode and ptynode handling, as they're
Chris PeBenito • 19 years ago  
b16c6b
move make_{daemon,init,system}_domain to init to fix type_transition'ing
Chris PeBenito • 19 years ago  
ff3138
add lvm.fc, and move relevant entries to devices.fc and storage.fc
Chris PeBenito • 19 years ago  
24a7ae
pile of updates
Chris PeBenito • 19 years ago  
7bba9d
initial commit
Chris PeBenito • 19 years ago  
1bde83
additions for cron and mta
Chris PeBenito • 19 years ago  
075c4f
add iface creating private logs
Chris PeBenito • 19 years ago  
fb1aee
add make temporary_file and daemon_runtime_file
Chris PeBenito • 19 years ago  
d25dd9
add files_make_temporary_file and remove type attribute from
Chris PeBenito • 19 years ago  
38e24a
updates needed for cron
Chris PeBenito • 19 years ago  
24280a
add read and search for etc_t:dir
Chris PeBenito • 19 years ago  
3ec805
make a reasonable lib_t interface
Chris PeBenito • 19 years ago  
118186
reorder for more consistency
Chris PeBenito • 19 years ago  
183227
initial commit
Chris PeBenito • 19 years ago  
b3416a
leftover from netutils
Chris PeBenito • 19 years ago  
eeb255
initial commit
Chris PeBenito • 19 years ago  
f8ec0a
reorder to fit file context style rules
Chris PeBenito • 19 years ago  
279b55
use ptys
Chris PeBenito • 19 years ago  
6f50b5
fix hotplug optional
Chris PeBenito • 19 years ago  
2812bf
more authlogin handling
Chris PeBenito • 19 years ago  
13e94c
move system_chkpwd to .te rather then using template, so that the
Chris PeBenito • 19 years ago  
5c1621
priv* attribute fixes for sulogin
Chris PeBenito • 19 years ago  
cb2873
unexpand can_kerberos
Chris PeBenito • 19 years ago  
c18e82
allow all domains to use /dev/{zero,null,tty}
Chris PeBenito • 19 years ago  
a9a20d
reorder restorecon and setfiles relabel rules for consistency
Chris PeBenito • 19 years ago  
e843cc
clean up authentication attributes
Chris PeBenito • 19 years ago  
a1f94a
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
96b000
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
18f25a
cleanup
Chris PeBenito • 19 years ago  
c5b5a7
add sulogin
Chris PeBenito • 19 years ago  
5d7e8b
initial commit
Chris PeBenito • 19 years ago  
15e3d8
initial commit
Chris PeBenito • 19 years ago  
b2b38c
add read fonts
Chris PeBenito • 19 years ago  
ec81ec
initial commit
Chris PeBenito • 19 years ago  
2274f9
add legacy read locale
Chris PeBenito • 19 years ago  
0fef98
cleanup
Chris PeBenito • 19 years ago  
ebf760
convert over to system_domain, plus a couple init cleanups
Chris PeBenito • 19 years ago  
bbd6a6
add in system_domain
Chris PeBenito • 19 years ago  
d0eddb
move type delcarations after attribute delcarations to fix a typeattribute
Chris PeBenito • 19 years ago  
f66a1a
add missing copyright and policy_module lines
Chris PeBenito • 19 years ago  
df431c
rules picked up from sediff
Chris PeBenito • 19 years ago  
f1470e
add usermanage
Chris PeBenito • 19 years ago  
849380
more conversion
Chris PeBenito • 19 years ago  
1e5c2a
clean up interfaces for new binary module optional structure
Chris PeBenito • 19 years ago  
bd202f
stuff from sysnetwork
Chris PeBenito • 19 years ago  
f1578d
a few more copied over
Chris PeBenito • 19 years ago  
0bc32e
start moving in dhcpc and ifconfig
Chris PeBenito • 19 years ago  
0d7ad3
add in pam console
Chris PeBenito • 19 years ago  
75a10b
more conversion due to new interfaces
Chris PeBenito • 19 years ago  
b2e062
fill pam and utempter authlogin policy and fix up interfaces
Chris PeBenito • 19 years ago  
3ce6cb
reorg run_init a little, and add a convert to a few new interfaces
Chris PeBenito • 19 years ago  
07d6e3
add newrole:fd use
Chris PeBenito • 19 years ago  
ab64c3
updates
Chris PeBenito • 19 years ago  
3a9aef
initial commit
Chris PeBenito • 19 years ago  
6b9383
switch over to tunable_policy and optional_policy
Chris PeBenito • 19 years ago  
25baab
add authlogin_read_pam_runtime_data and cleanup interfaces
Chris PeBenito • 19 years ago  
dfaf6c
add ignore read rootfs file
Chris PeBenito • 19 years ago  
9f2f9e
add in use and ignore use init control channel interfaces
Chris PeBenito • 19 years ago  
d0b6ab
handful of changes
Chris PeBenito • 19 years ago  
ba7740
move in rule from hotplug
Chris PeBenito • 19 years ago  
c3c58c
add in missing policy_module line
Chris PeBenito • 19 years ago  
1b9099
domains not needed for execute interface
Chris PeBenito • 19 years ago  
fc83db
add in transition and execute interfaces, and newrole sigchld interface
Chris PeBenito • 19 years ago  
85bd7f
fix privfd
Chris PeBenito • 19 years ago  
e9a6fc
initial commit
Chris PeBenito • 19 years ago  
a7ed44
make mountpoints work, plus misc
Chris PeBenito • 19 years ago  
a2d824
initial local login commit
Chris PeBenito • 19 years ago  
07efe9
add bulk of selinux module policy, and add required interfaces
Chris PeBenito • 19 years ago  
ee5772
minor fixes
Chris PeBenito • 19 years ago  
f9cfa1
convert over optional policy to optional_policy macro
Chris PeBenito • 19 years ago  
300981
remove entrypoint assertion
Chris PeBenito • 19 years ago  
4fbd2e
reorganize the policy
Chris PeBenito • 19 years ago  
4600e0
initial commit
Chris PeBenito • 19 years ago  
dfb86a
initial commit
Chris PeBenito • 19 years ago  
b5ab18
start merging in rules from daemon domain
Chris PeBenito • 19 years ago  
55f456
add init_t:fd use interface and initrc pty rw interface
Chris PeBenito • 19 years ago  
889c9a
daemon domain allows noatsecure siginh rlimitinh, not dontaudit
Chris PeBenito • 19 years ago  
bcd359
initial commit
Chris PeBenito • 19 years ago  
3016a9
add search all dirs
Chris PeBenito • 19 years ago  
f9438f
move system_chkpwd to fix ordering issue with checkpolicy
Chris PeBenito • 19 years ago  
e064a6
add legacy lib use
Chris PeBenito • 19 years ago  
8beec8
add module statement macro and entrypoint executable attribute to replicate
Chris PeBenito • 19 years ago  
960373
fix tmp_domain
Chris PeBenito • 19 years ago  
94edcc
move modules_object_t back to bootloader
Chris PeBenito • 19 years ago  
5f75f5
add sysnetwork
Chris PeBenito • 19 years ago  
91a7ab
add missing transition dontaudits
Chris PeBenito • 19 years ago  
b30304
initial commit
Chris PeBenito • 19 years ago  
549180
attack with sediff, make fs:getattr interfaces consistent, create init and
Chris PeBenito • 19 years ago  
219bcf
restructure kernel module to be consistent with other module ordering. put
Chris PeBenito • 19 years ago  
a266e3
reorg
Chris PeBenito • 19 years ago  
343a23
fix te trans error
Chris PeBenito • 19 years ago  
22e113
make getattr and setattr interfaces and make naming consistent
Chris PeBenito • 19 years ago  
8a0da1
clean up some filesystem assoc
Chris PeBenito • 19 years ago  
33bc0d
complete corenetwork
Chris PeBenito • 19 years ago  
0e730c
insmod can be run directly from kernel; fix update_modules errors
Chris PeBenito • 19 years ago  
1f7b37
exec and transition interfaces, plus include mod object symlinks in reading modules
Chris PeBenito • 19 years ago  
9eb5e8
uncomment test file
Chris PeBenito • 19 years ago  
32b502
add devlog_t symlink to loggers
Chris PeBenito • 19 years ago  
5a9522
rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()
Chris PeBenito • 19 years ago  
033c80
more insmod work, bring in depmod and update_modules
Chris PeBenito • 19 years ago  
7c5d78
more comments
Chris PeBenito • 19 years ago  
bd7646
add copyright statement
Chris PeBenito • 19 years ago  
e181fe
initial commit
Chris PeBenito • 19 years ago  
015435
initial commit
Chris PeBenito • 19 years ago  
879b00
initial commit
Chris PeBenito • 19 years ago  
67e2ff
add per-userdomain template, and shadow_t interfaces
Chris PeBenito • 19 years ago  
c4890e
add all types for this module
Chris PeBenito • 19 years ago  
3ba13b
add all types for this module, and add klogd policy
Chris PeBenito • 19 years ago  
4ddc1a
add interface to send syslog messages
Chris PeBenito • 19 years ago  
8c7717
use interface to send syslog messages
Chris PeBenito • 19 years ago  
5050e5
initial commit
Chris PeBenito • 19 years ago  
b470e3
reorganize and add rootfs dontaudits
Chris PeBenito • 19 years ago  
f05782
add rootfs dontaudits for use in init.te
Chris PeBenito • 19 years ago  
7aebdb
hold off on improving
Chris PeBenito • 19 years ago  
7f89c7
add interface to associate to filesystems w/o xattr. allow regular files to
Chris PeBenito • 19 years ago  
5d7812
initial commit
Chris PeBenito • 19 years ago  
b4cd15

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation