File history - rpms/selinux-policy

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

support for targeted policy

Chris PeBenito • 19 years ago

c98340

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

add unconfined

Chris PeBenito • 19 years ago

9726b3

add required tags

Chris PeBenito • 19 years ago

274547

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

make layer summary required

Chris PeBenito • 19 years ago

d233bf

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

add/update comments

Chris PeBenito • 19 years ago

62a7b0

update for new documentation method

Chris PeBenito • 19 years ago

414e41

fix

Chris PeBenito • 19 years ago

19ea99

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

review of system interfaces

Chris PeBenito • 19 years ago

139520

misc cleanup

Chris PeBenito • 19 years ago

0e7216

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

fix typo

Chris PeBenito • 19 years ago

810f2b

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

renaming insanity

Chris PeBenito • 19 years ago

c9428d

Devices rename.

Karl MacMillan • 19 years ago

f0c985

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

reorder

Chris PeBenito • 19 years ago

a154cd

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

aliases

Chris PeBenito • 19 years ago

cc41a9

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

aliasing

Chris PeBenito • 19 years ago

7edd02

initial commit

Chris PeBenito • 19 years ago

b29d23

comment fix

Chris PeBenito • 19 years ago

066d46

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

add xml

Chris PeBenito • 19 years ago

3865d6

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

cleanup

Chris PeBenito • 19 years ago

cbeef6

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add admin template

Chris PeBenito • 19 years ago

76bff3

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

initial commit

Chris PeBenito • 19 years ago

a7ed44

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

initial commit

Chris PeBenito • 19 years ago

b4cd15

rpms / selinux-policy

History refpolicy/policy/modules/system

rpms / selinux-policy

Source Code

History refpolicy/policy/modules/system