File history - rpms/selinux-policy

add nscd

Chris PeBenito • 19 years ago

977b1d

fix most disable_trans errors

Chris PeBenito • 19 years ago

69dcd6

Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages

Don Miner • 19 years ago

f470a1

Reduced the number of differences in amanda between the targeted and the refpolicy

Don Miner • 19 years ago

c11417

fix most of samba

Chris PeBenito • 19 years ago

671673

Removed differences between refpolicy and targeted acct_t

Don Miner • 19 years ago

bdfa8e

Removed differences between refpolicy and targeted NetworkManager_t

Don Miner • 19 years ago

9c4fcf

add proc_net lnk

Chris PeBenito • 19 years ago

7ebd6a

hopefully fix su

Chris PeBenito • 19 years ago

b4e1eb

fixes

Chris PeBenito • 19 years ago

30705b

more fix

Chris PeBenito • 19 years ago

9bbc75

Fixed a problem which was allowing processes to become unconfined from initrc

Don Miner • 19 years ago

0354e3

Added rules to the bind policy for the named server so that it would start

Don Miner • 19 years ago

dd57ca

Added signal permissions to postgres so it can start

Don Miner • 19 years ago

57d8e6

corenet fixes

Chris PeBenito • 19 years ago

162dfc

fix

Chris PeBenito • 19 years ago

e64b33

remove bin policy and kern module assertions for now

Chris PeBenito • 19 years ago

15fefa

fix mls r_t

Chris PeBenito • 19 years ago

1480d3

more sediff

Chris PeBenito • 19 years ago

34e722

Added rules to the smbd_t and the nmbd_t domains so that they would start properly

Don Miner • 19 years ago

fa16f2

sediff fixes

Chris PeBenito • 19 years ago

1dd86c

add initrc_su_t

Chris PeBenito • 19 years ago

bb6763

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Don Miner • 19 years ago

3d37bc

more missing types

Chris PeBenito • 19 years ago

710791

more fixes

Chris PeBenito • 19 years ago

19b555

add rpc

Chris PeBenito • 19 years ago

43989f

fixes from sediff

Chris PeBenito • 19 years ago

2db2c7

Added a file context for httpd.pid so that it is correctly labeled

Don Miner • 19 years ago

f8964c

nwmgr fixes

Chris PeBenito • 19 years ago

f85544

add cups

Chris PeBenito • 19 years ago

ef5ca0

add postfix

Chris PeBenito • 19 years ago

04926d

add spamassassin

Chris PeBenito • 19 years ago

f932d8

add radius and amanda, which I forgot to ci

Chris PeBenito • 19 years ago

44fc06

add pegasus

Chris PeBenito • 19 years ago

230838

add dbskk

Chris PeBenito • 19 years ago

a63621

add lpd

Chris PeBenito • 19 years ago

ad3b9d

simplify since alias take care of it

Chris PeBenito • 19 years ago

ae1d9a

add amanda

Chris PeBenito • 19 years ago

10b1f3

add networkmanager

Chris PeBenito • 19 years ago

239db5

more sediff fixes

Chris PeBenito • 19 years ago

1f8a8b

more fixes

Chris PeBenito • 19 years ago

e6a2ea

sediff fixes

Chris PeBenito • 19 years ago

da4fc9

add xdm

Chris PeBenito • 19 years ago

23a444

add canna

Chris PeBenito • 19 years ago

350948

fix

Chris PeBenito • 19 years ago

fe7b94

add cyrus

Chris PeBenito • 19 years ago

ea557a

add dovecot

Chris PeBenito • 19 years ago

29ce00

fix corenetwork generation and add distcc

Chris PeBenito • 19 years ago

cf6141

obj class typo for certs

Chris PeBenito • 19 years ago

4e69c1

targeted policy fixes

Chris PeBenito • 19 years ago

de7649

targeted and distro fixes for loadable modules

Chris PeBenito • 19 years ago

af4752

fix last loadable module problems

Chris PeBenito • 19 years ago

0efe52

fix requires

Chris PeBenito • 19 years ago

90c3dd

piles of fixes for loadable modules

Chris PeBenito • 19 years ago

12ae75

misc fixes

Chris PeBenito • 19 years ago

c38127

fix error uncovered by sechecker

Chris PeBenito • 19 years ago

c3a05c

wrap up almost all of apache

Chris PeBenito • 19 years ago

e749cd

add ppp

Chris PeBenito • 19 years ago

e08118

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

fe9d17

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

d8636f

partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15

Chris PeBenito • 19 years ago

77f6e2

add some docs, do some reordering

Chris PeBenito • 19 years ago

b1421d

add missing interface

Chris PeBenito • 19 years ago

4c7199

add in last bits of webalizer

Chris PeBenito • 19 years ago

be4690

more apache work

Chris PeBenito • 19 years ago

c2b18f

add mailman

Chris PeBenito • 19 years ago

799a0b

add webalizer and sasl

Chris PeBenito • 19 years ago

f33561

add apm and arpwatch. fix implementation error on fs_getattr_all_files,

Chris PeBenito • 19 years ago

4483ee

add finger and bluetooth

Chris PeBenito • 19 years ago

d4dca5

partial mailman merge

Chris PeBenito • 19 years ago

9d3e33

fix files_exec_usr_src_files

Chris PeBenito • 19 years ago

99505c

rename context_template() to gen_context()

Chris PeBenito • 19 years ago

e02c61

more apache work

Chris PeBenito • 19 years ago

6e99a6

add ftp

Chris PeBenito • 19 years ago

fc6524

fix comment

Chris PeBenito • 19 years ago

5bc9f3

add interfaces used in old anonymous_domain()

Chris PeBenito • 19 years ago

f4d7fd

add most of apache

Chris PeBenito • 19 years ago

a996bd

more pieces of ftp

Chris PeBenito • 19 years ago

a5ec7c

start adding secure_file_type implementation

Chris PeBenito • 19 years ago

a2868f

add winbind

Chris PeBenito • 19 years ago

79cde3

add in a couple missing rules

Chris PeBenito • 19 years ago

694248

add in a few parts of ftp

Chris PeBenito • 19 years ago

246a60

add dmidecode

Chris PeBenito • 19 years ago

20e306

add disable_trans support

Chris PeBenito • 19 years ago

b03f96

a few conditional cleanups

Chris PeBenito • 19 years ago

1f91e1

add mls privileges

Chris PeBenito • 19 years ago

f0574f

comment fix

Chris PeBenito • 19 years ago

6d788d

add anaconda

Chris PeBenito • 19 years ago

9edc28

rework nis_use_ypbind since optionals dont work in conditionals

Chris PeBenito • 19 years ago

b9ae3a

add radvd, plus a few cleanups from sediff

Chris PeBenito • 19 years ago

fa6757

add kudzu

Chris PeBenito • 19 years ago

842859

remove classes from gen_requires, and disable net_raw for now

Chris PeBenito • 19 years ago

005841

fixes from sediff

Chris PeBenito • 19 years ago

681c9a

add uucp

Chris PeBenito • 19 years ago

f7ba4a

testing fixes

Chris PeBenito • 19 years ago

b53f93

fix for targeted

Chris PeBenito • 19 years ago

08c5c9

loadable module compile fixes

Chris PeBenito • 19 years ago

25c674

targeted and redhat cleanups

Chris PeBenito • 19 years ago

142e9f

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 19 years ago

0e15cd

todo cleanup

Chris PeBenito • 19 years ago

3774e4

add cvs

Chris PeBenito • 19 years ago

93070c

add cpucontrol

Chris PeBenito • 19 years ago

921055

add rlogin and telnet

Chris PeBenito • 19 years ago

4fd520

add stunnel

Chris PeBenito • 19 years ago

200f45

final updates from nsa cvs

Chris PeBenito • 19 years ago

a1fcff

a few module compile fixes

Chris PeBenito • 19 years ago

41c480

more upstream merging

Chris PeBenito • 19 years ago

cf6a7d

more upstream merging

Chris PeBenito • 19 years ago

cff75c

add tftp

Chris PeBenito • 19 years ago

40adb5

add snmp

Chris PeBenito • 19 years ago

ccc597

more merging from nsa cvs

Chris PeBenito • 19 years ago

a08248

more updates

Chris PeBenito • 19 years ago

98a8ea

more merging from nsa cvs

Chris PeBenito • 19 years ago

605ba2

cleanup

Chris PeBenito • 19 years ago

5a2649

add samba

Chris PeBenito • 19 years ago

84c922

require fix

Chris PeBenito • 19 years ago

4479b3

fixes for module compiling

Chris PeBenito • 19 years ago

71fe0f

more merging of NSA CVS policy

Chris PeBenito • 19 years ago

0907bd

begin merging in upstream NSA CVS changes

Chris PeBenito • 19 years ago

2705f9

fixes to make base module compilable

Chris PeBenito • 19 years ago

712566

add first part of changes to make base module compilable

Chris PeBenito • 19 years ago

2e863f

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 19 years ago

0fdf3e

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 19 years ago

9ff300

add portmap

Chris PeBenito • 19 years ago

eb3cb6

add ktalk

Chris PeBenito • 19 years ago

d17b4d

add missing rules of other domains using inn

Chris PeBenito • 19 years ago

9b0640

misc fixes

Chris PeBenito • 19 years ago

763a5e

add inn

Chris PeBenito • 19 years ago

8d9352

misc fixes

Chris PeBenito • 19 years ago

603f90

add ntp

Chris PeBenito • 19 years ago

b11a75

typo

Chris PeBenito • 19 years ago

ce1b44

add dictd

Chris PeBenito • 19 years ago

ac0483

add hal

Chris PeBenito • 19 years ago

fdae8e

move dhcpd to dhcp

Chris PeBenito • 19 years ago

f344c0

add squid

Chris PeBenito • 19 years ago

0f707d

add dhcpd

Chris PeBenito • 19 years ago

7c8fc3

fix bugs uncovered from sediff

Chris PeBenito • 19 years ago

9d3bdc

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 19 years ago

c0d156

finish remaining dbus bits

Chris PeBenito • 19 years ago

631ee4

add dbus

Chris PeBenito • 19 years ago

0c3d17

fix typos

Chris PeBenito • 19 years ago

6af06c

cosmetics

Chris PeBenito • 19 years ago

768283

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 19 years ago

6e6156

fix up most of mta attribute insanity

Chris PeBenito • 19 years ago

246839

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 19 years ago

451c1e

make corecommands required

Chris PeBenito • 19 years ago

e5d452

start adding in templated interfaces

Chris PeBenito • 19 years ago

2a9456

add bind

Chris PeBenito • 19 years ago

d83fda

add privoxy

Chris PeBenito • 19 years ago

902be0

add rsync

Chris PeBenito • 19 years ago

35ecf8

add howl

Chris PeBenito • 19 years ago

f9b11e

moved to selinux module

Chris PeBenito • 19 years ago

f6e28a

initial support for compiling loadable modules

Chris PeBenito • 19 years ago

fb0a3a

add gpm

Chris PeBenito • 19 years ago

f862c3

add ldap

Chris PeBenito • 19 years ago

2961e7

cleanup

Chris PeBenito • 19 years ago

23ca91

add rshd

Chris PeBenito • 19 years ago

545b0c

add firstboot

Chris PeBenito • 19 years ago

57a96c

more debian cleanup

Chris PeBenito • 19 years ago

2d803e

fix broken xml of previous commit

Chris PeBenito • 19 years ago

4806a0

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 19 years ago

5f38a6

add loadkeys

Chris PeBenito • 19 years ago

21468a

more comments

Chris PeBenito • 19 years ago

884309

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 19 years ago

f0b1ef

fix some udev naming

Chris PeBenito • 19 years ago

35b494

fix system spool file problem

Chris PeBenito • 19 years ago

aae06c

finalize desc -> summary xml change

Chris PeBenito • 19 years ago

f7ebea

add tcpd

Chris PeBenito • 19 years ago

4aa0dc

add quota

Chris PeBenito • 19 years ago

052c95

add sudo

Chris PeBenito • 19 years ago

e78430

add template xml

Chris PeBenito • 19 years ago

b9d7d7

add su

Chris PeBenito • 19 years ago

948914

add updfstab

Chris PeBenito • 19 years ago

dce68d

fix xml tags

Chris PeBenito • 19 years ago

f5e321

a few more ssh touchups

Chris PeBenito • 19 years ago

7057c1

add tmpreaper

Chris PeBenito • 19 years ago

ed78ea

add acct

Chris PeBenito • 19 years ago

9a66d4

misc cleanup

Chris PeBenito • 19 years ago

3fd833

add mysql

Chris PeBenito • 19 years ago

42be7c

search sbin dirs to find the pgms

Chris PeBenito • 19 years ago

046a21

* Rename ipsec connect interface for consistency.

Chris PeBenito • 19 years ago

81343a

fix stray line that got out of TODO

Chris PeBenito • 19 years ago

bbdbdb

work on user transition

Chris PeBenito • 19 years ago

e5590e

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 19 years ago

022f61

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 19 years ago

50527c

update from privmail

Chris PeBenito • 19 years ago

953541

/var/lib is now a mountpoint

Chris PeBenito • 19 years ago

ea7d57

unconfined can pass all constraints

Chris PeBenito • 19 years ago

53857c

name_connect only on tcp_sockets

Chris PeBenito • 19 years ago

ef424c

unconfined can name_connect to all ports

Chris PeBenito • 19 years ago

9496fd

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 19 years ago

d25063

bah typo

Chris PeBenito • 19 years ago

f82c6a

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 19 years ago

1e3f61

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

more fixes for targeted

Chris PeBenito • 19 years ago

ec848d

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 19 years ago

f136a9

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa526

support for targeted policy

Chris PeBenito • 19 years ago

c98340

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

add unconfined

Chris PeBenito • 19 years ago

9726b3

add required tags

Chris PeBenito • 19 years ago

274547

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

ul has to be in a p

Chris PeBenito • 19 years ago

65c861

initial commit

Chris PeBenito • 19 years ago

5e1ed4

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

make layer summary required

Chris PeBenito • 19 years ago

d233bf

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

change desc to summary

Chris PeBenito • 19 years ago

ceebe3

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

initial commit

Chris PeBenito • 19 years ago

24bf11

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

initial commit

Chris PeBenito • 19 years ago

73fbc7

add/update comments

Chris PeBenito • 19 years ago

62a7b0

update for new documentation method

Chris PeBenito • 19 years ago

414e41

more updates

Chris PeBenito • 19 years ago

aad5b9

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

452399

fix

Chris PeBenito • 19 years ago

19ea99

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a7

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fba

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39

review of system interfaces

Chris PeBenito • 19 years ago

139520

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1

misc cleanup

Chris PeBenito • 19 years ago

0e7216

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

initial commit

Chris PeBenito • 19 years ago

828e03

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc1

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

fix typo

Chris PeBenito • 19 years ago

810f2b

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

fix xml

Chris PeBenito • 19 years ago

d9507b

renaming insanity

Chris PeBenito • 19 years ago

c9428d

Devices rename.

Karl MacMillan • 19 years ago

f0c985

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

reorder

Chris PeBenito • 19 years ago

a154cd

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

more renaming and xml

Chris PeBenito • 19 years ago

eda201

rename

Chris PeBenito • 19 years ago

eca5b2

aliases

Chris PeBenito • 19 years ago

cc41a9

fix layer in module tag

Chris PeBenito • 19 years ago

7591e8

rename

Chris PeBenito • 19 years ago

c6ebef

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

aliases

Chris PeBenito • 19 years ago

dc67f7

aliases

Chris PeBenito • 19 years ago

0a10b1

renaming and xml

Chris PeBenito • 19 years ago

fe040c

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab

aliasing

Chris PeBenito • 19 years ago

7edd02

initial commit

Chris PeBenito • 19 years ago

b29d23

add aliases

Chris PeBenito • 19 years ago

c2c00b

renaming

Chris PeBenito • 19 years ago

9f72a2

interface renaming

Chris PeBenito • 19 years ago

0c5a28

interface renaming

Chris PeBenito • 19 years ago

1694de

comment fix

Chris PeBenito • 19 years ago

066d46

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609

add xml

Chris PeBenito • 19 years ago

3865d6

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

initial commit

Chris PeBenito • 19 years ago

02b584

initial commit

Chris PeBenito • 19 years ago

43bc39

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

add some indentation

Chris PeBenito • 19 years ago

419699

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4ef

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db9

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

fix module name in xml

Chris PeBenito • 19 years ago

f267df

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

initial commit

Chris PeBenito • 19 years ago

b8fca4

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0a

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

initial commit

Chris PeBenito • 19 years ago

c22038

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

initial commit

Chris PeBenito • 19 years ago

10abae

cleanup

Chris PeBenito • 19 years ago

cbeef6

cleanup

Chris PeBenito • 19 years ago

3b3bf8

initial commit

Chris PeBenito • 19 years ago

6f3dab

initial commit

Chris PeBenito • 19 years ago

7d7a36

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f1

initial commit

Chris PeBenito • 19 years ago

992aba

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e26

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add transitions

Chris PeBenito • 19 years ago

c43097

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add mls port support

Chris PeBenito • 19 years ago

0d0d2b

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

fix xml

Chris PeBenito • 19 years ago

494e98

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0

add admin template

Chris PeBenito • 19 years ago

76bff3

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a2

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

reorg and a fix

Chris PeBenito • 19 years ago

fd9dee

add crontab

Chris PeBenito • 19 years ago

d18e3d

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af2

initial commit

Chris PeBenito • 19 years ago

23caa6

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

oops

Chris PeBenito • 19 years ago

dec168

reorder for more consistency

Chris PeBenito • 19 years ago

6b6740

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

leftover from modutils

Chris PeBenito • 19 years ago

63a310

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

initial commit

Chris PeBenito • 19 years ago

0f3be6

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb

add printer_device_t

Chris PeBenito • 19 years ago

46be1f

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e0280

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

initial commit

Chris PeBenito • 19 years ago

4fc915

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

fix depends

Chris PeBenito • 19 years ago

23af43

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f8

add ignore read system state

Chris PeBenito • 19 years ago

67484f

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc3

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

doh

Chris PeBenito • 19 years ago

4472f3

add in missing devices

Chris PeBenito • 19 years ago

700988

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cd

initial commit

Chris PeBenito • 19 years ago

a7ed44

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b58606

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

add console setattr if

Chris PeBenito • 19 years ago

55a46d

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

add console dontaudit

Chris PeBenito • 19 years ago

811985

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a

kernel can load modules

Chris PeBenito • 19 years ago

549655

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d

move assert.te here

Chris PeBenito • 19 years ago

57d236

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf7

initial commit

Chris PeBenito • 19 years ago

b4cd15

rpms / selinux-policy

History refpolicy/policy/modules

rpms / selinux-policy

Source Code

History refpolicy/policy/modules