File history - rpms/selinux-policy

add rshd

Chris PeBenito • 19 years ago

545b0c

add firstboot

Chris PeBenito • 19 years ago

886907

add firstboot

Chris PeBenito • 19 years ago

57a96c

more debian cleanup

Chris PeBenito • 19 years ago

2d803e

make default for optional modules to module instead of base

Chris PeBenito • 19 years ago

a57379

fix broken xml of previous commit

Chris PeBenito • 19 years ago

4806a0

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 19 years ago

5f38a6

add loadkeys

Chris PeBenito • 19 years ago

21468a

more comments

Chris PeBenito • 19 years ago

884309

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 19 years ago

f0b1ef

quiet file context validation

Chris PeBenito • 19 years ago

c5a6dc

fix some udev naming

Chris PeBenito • 19 years ago

35b494

fix system spool file problem

Chris PeBenito • 19 years ago

aae06c

remove secdesc since desc is sufficient

Chris PeBenito • 19 years ago

d06f3c

finalize desc -> summary xml change

Chris PeBenito • 19 years ago

f7ebea

add tcpd

Chris PeBenito • 19 years ago

4aa0dc

fix no interface module handling in segenxml

Chris PeBenito • 19 years ago

e694b5

add quota

Chris PeBenito • 19 years ago

052c95

tabbing fix

Chris PeBenito • 19 years ago

5a3895

add sudo

Chris PeBenito • 19 years ago

e78430

add template xml

Chris PeBenito • 19 years ago

b9d7d7

add su

Chris PeBenito • 19 years ago

948914

fix gen_user comment for more clarity

Chris PeBenito • 19 years ago

946545

add updfstab

Chris PeBenito • 19 years ago

dce68d

fix xml tags

Chris PeBenito • 19 years ago

f5e321

a few more ssh touchups

Chris PeBenito • 19 years ago

7057c1

add tmpreaper

Chris PeBenito • 19 years ago

ed78ea

add acct

Chris PeBenito • 19 years ago

9a66d4

misc cleanup

Chris PeBenito • 19 years ago

3fd833

add mysql

Chris PeBenito • 19 years ago

42be7c

search sbin dirs to find the pgms

Chris PeBenito • 19 years ago

046a21

* Rename ipsec connect interface for consistency.

Chris PeBenito • 19 years ago

81343a

new release

Chris PeBenito • 19 years ago

52a902

new release

Chris PeBenito • 19 years ago

6db8e5

add missing

Chris PeBenito • 19 years ago

60abb5

fix comparison bug

Chris PeBenito • 19 years ago

cd8fa4

move file context validation to install

Chris PeBenito • 19 years ago

96a150

fix stray line that got out of TODO

Chris PeBenito • 19 years ago

bbdbdb

work on user transition

Chris PeBenito • 19 years ago

e5590e

update

Chris PeBenito • 19 years ago

c13146

Fix handling of ordered and unordered HTML lists.

Chris PeBenito • 19 years ago

78d30c

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 19 years ago

022f61

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 19 years ago

50527c

update from privmail

Chris PeBenito • 19 years ago

953541

add an example module config for a targeted policy

Chris PeBenito • 19 years ago

80526c

/var/lib is now a mountpoint

Chris PeBenito • 19 years ago

ea7d57

unconfined can pass all constraints

Chris PeBenito • 19 years ago

53857c

name_connect only on tcp_sockets

Chris PeBenito • 19 years ago

ef424c

unconfined can name_connect to all ports

Chris PeBenito • 19 years ago

9496fd

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 19 years ago

d25063

bah typo

Chris PeBenito • 19 years ago

f82c6a

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 19 years ago

1e3f61

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

add new netlink socket class

Chris PeBenito • 19 years ago

21f477

more fixes for targeted

Chris PeBenito • 19 years ago

ec848d

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 19 years ago

f136a9

add pcmcia

Chris PeBenito • 19 years ago

316553

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

add distro tunables. expand on a few comments

Chris PeBenito • 19 years ago

25a0c6

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix comments for templates to have same number of # as interfaces

Chris PeBenito • 19 years ago

20a227

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

improve display of tunables and booleans

Chris PeBenito • 19 years ago

34bbe5

add tun and bool descriptions

Chris PeBenito • 19 years ago

4d7511

initial global booleans and tunables support. also fix index

Chris PeBenito • 19 years ago

249d46

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

silly formatting fix

Chris PeBenito • 19 years ago

4d0d41

support for global booleans

Chris PeBenito • 19 years ago

c11958

* Added support for layer summaries.

Chris PeBenito • 19 years ago

acb668

tag for 20050707 release

Chris PeBenito • 19 years ago

58c777

add changelog

Chris PeBenito • 19 years ago

dfa83e

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa526

support for targeted policy

Chris PeBenito • 19 years ago

c98340

put back to strict. will have separate strict and targeted appconfig

Chris PeBenito • 19 years ago

83ce67

validate file contexts

Chris PeBenito • 19 years ago

14b25b

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

quiet the awk if modules.conf doesnt exist

Chris PeBenito • 19 years ago

a3fdce

- Removed OUTPUT_VERSION as default.

Karl MacMillan • 19 years ago

ebb884

update appconfig for unconfined login

Chris PeBenito • 19 years ago

e17cb8

add unconfined

Chris PeBenito • 19 years ago

9726b3

fix quoting problem

Chris PeBenito • 19 years ago

e8f005

fix for new new modules.conf behavior

Chris PeBenito • 19 years ago

e8b3e3

update for required tag

Chris PeBenito • 19 years ago

f0cc1a

add required tags

Chris PeBenito • 19 years ago

274547

add tag for required modules

Chris PeBenito • 19 years ago

d78fde

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

ul has to be in a p

Chris PeBenito • 19 years ago

65c861

initial commit

Chris PeBenito • 19 years ago

5e1ed4

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

dont show interface/template hotlinks if the module doesnt have one of them.

Chris PeBenito • 19 years ago

e8d8fa

make layer summary required

Chris PeBenito • 19 years ago

d233bf

change messages for missing docs

Chris PeBenito • 19 years ago

00172f

make interfaces or templates section not shown if empty

Chris PeBenito • 19 years ago

06c968

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

link fix

Chris PeBenito • 19 years ago

743b65

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

add templates

Chris PeBenito • 19 years ago

effd58

change desc to summary

Chris PeBenito • 19 years ago

ceebe3

add comments and error handling

Chris PeBenito • 19 years ago

896bad

preserve tunable values if tunables.conf exists

Chris PeBenito • 19 years ago

2d56fd

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

better handling of whitespace

Chris PeBenito • 19 years ago

cedae2

change modules.conf behavior to be in line with behavior which will be used in the future for base module

Chris PeBenito • 19 years ago

19db6b

change modules.conf handling

Chris PeBenito • 19 years ago

a4c639

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

initial commit

Chris PeBenito • 19 years ago

24bf11

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

better dummy xml entries

Chris PeBenito • 19 years ago

f8838e

initial commit

Chris PeBenito • 19 years ago

73fbc7

add/update comments

Chris PeBenito • 19 years ago

62a7b0

add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd

Chris PeBenito • 19 years ago

e81f02

update for new documentation method

Chris PeBenito • 19 years ago

414e41

more updates

Chris PeBenito • 19 years ago

aad5b9

a couple output fixes

Chris PeBenito • 19 years ago

c3a075

update to new commenting style

Chris PeBenito • 19 years ago

9916c6

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

452399

initial commit of segenxml. add support in Makefile

Chris PeBenito • 19 years ago

95db42

fix

Chris PeBenito • 19 years ago

19ea99

fix for shortened tags

Chris PeBenito • 19 years ago

7c2b84

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

change doctool to bring in line with the xml tag change (layers encapsulate

Chris PeBenito • 19 years ago

7fb9c1

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a7

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fba

add rw_term_perms

Chris PeBenito • 19 years ago

c9b7f1

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39

review of system interfaces

Chris PeBenito • 19 years ago

139520

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1

misc cleanup

Chris PeBenito • 19 years ago

0e7216

reorder gpg tunable for alpha sorting

Chris PeBenito • 19 years ago

562cc2

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

have can_exec add a require block

Chris PeBenito • 19 years ago

8c2f3a

fix

Chris PeBenito • 19 years ago

4ce9bd

initialize description to None so missing descriptions dont show wrong data

Chris PeBenito • 19 years ago

815ff3

add comments for clean and bare

Chris PeBenito • 19 years ago

102a59

for use until we have a full README

Chris PeBenito • 19 years ago

337e4a

add install-src target

Chris PeBenito • 19 years ago

c592e5

initial commit

Chris PeBenito • 19 years ago

f08f5a

add CFLAGS, and drop -C from install since it doesn't exist in all distros,

Chris PeBenito • 19 years ago

c7b41e

put user line in col 1, since genhomedircon breaks otherwise

Chris PeBenito • 19 years ago

8eaa72

initial commit

Chris PeBenito • 19 years ago

828e03

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc1

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

when a generated file is already generated, it shows up in the generated_*

Chris PeBenito • 19 years ago

8ae194

fix typo

Chris PeBenito • 19 years ago

810f2b

fix up appconfig, and generate $(installdir)/booleans

Chris PeBenito • 19 years ago

1beba1

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

fix makefile to only rebuild modules.conf and tunables.conf explicitly

Chris PeBenito • 19 years ago

d2d6c8

initial commit

Chris PeBenito • 19 years ago

e75f78

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

fix

Chris PeBenito • 19 years ago

94670f

make summary and description optional in interfaces until we can clean it up

Chris PeBenito • 19 years ago

eec673

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

add "this is a generated file!" comment to top of corenetwork.{te,if}

Chris PeBenito • 19 years ago

61bbe5

ul end tag fix, and css tweak

Chris PeBenito • 19 years ago

3c6d78

update from method

Chris PeBenito • 19 years ago

fae6ff

fix xml

Chris PeBenito • 19 years ago

d9507b

renaming insanity

Chris PeBenito • 19 years ago

c9428d

overwrite the generated .te file instead of append

Chris PeBenito • 19 years ago

b2bf0b

Devices rename.

Karl MacMillan • 19 years ago

f0c985

move policy.xml to doc, so it doesnt get deleted on a make clean

Chris PeBenito • 19 years ago

12b559

make module description optional and interface summary optional until

Chris PeBenito • 19 years ago

bec110

html tag updates

Chris PeBenito • 19 years ago

e214f6

Added missing interface.

Karl MacMillan • 19 years ago

bef4f0

more updates from method

Chris PeBenito • 19 years ago

d46f02

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

fix can_exec

Chris PeBenito • 19 years ago

240408

policy.xml is now in tmp/

Chris PeBenito • 19 years ago

e1db6e

make macro work

Chris PeBenito • 19 years ago

cab7c0

add can_exec

Chris PeBenito • 19 years ago

e3fd77

fix

Chris PeBenito • 19 years ago

1b8d67

Templates for menu ordering change.

Karl MacMillan • 19 years ago

c75e65

reorder

Chris PeBenito • 19 years ago

a154cd

Fixed doc tool to order menus.

Karl MacMillan • 19 years ago

d6b0f3

speed improvement

Chris PeBenito • 19 years ago

5d9417

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

more renaming and xml

Chris PeBenito • 19 years ago

eda201

rename

Chris PeBenito • 19 years ago

eca5b2

fix bracket display for optional parameters

Chris PeBenito • 19 years ago

997bd9

add back html page generation

Chris PeBenito • 19 years ago

20030e

fixes and remove debug code

Chris PeBenito • 19 years ago

1601fb

more indentation for modules in the menu

Chris PeBenito • 19 years ago

fe3bd5

initial commit

Chris PeBenito • 19 years ago

eb437d

updates

Chris PeBenito • 19 years ago

5a3299

aliases

Chris PeBenito • 19 years ago

cc41a9

fix layer in module tag

Chris PeBenito • 19 years ago

7591e8

rename

Chris PeBenito • 19 years ago

c6ebef

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

make policy.xml depend on all if's being generated

Chris PeBenito • 19 years ago

16e1cf

aliases

Chris PeBenito • 19 years ago

dc67f7

aliases

Chris PeBenito • 19 years ago

0a10b1

renaming and xml

Chris PeBenito • 19 years ago

fe040c

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

better handling of generated files

Chris PeBenito • 19 years ago

e12e57

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab

aliasing

Chris PeBenito • 19 years ago

7edd02

support_modules is finally gone, and modules.disable->modules.conf

Chris PeBenito • 19 years ago

0350b1

initial commit

Chris PeBenito • 19 years ago

b29d23

add aliases

Chris PeBenito • 19 years ago

c2c00b

Moved and changed user_mls to gen_user.

Karl MacMillan • 19 years ago

72bdc6

Renamed support macros for consistency.

Karl MacMillan • 19 years ago

eb5e23

make infoflow optional

Chris PeBenito • 19 years ago

eac7c3

overhaul

Chris PeBenito • 19 years ago

dc5daf

renaming

Chris PeBenito • 19 years ago

9f72a2

interface renaming

Chris PeBenito • 19 years ago

0c5a28

interface renaming

Chris PeBenito • 19 years ago

1694de

comment fix

Chris PeBenito • 19 years ago

066d46

more fixes

Chris PeBenito • 19 years ago

84eb35

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

add interface macro

Chris PeBenito • 19 years ago

a9ec54

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609

add xml

Chris PeBenito • 19 years ago

3865d6

more tunable work

Chris PeBenito • 19 years ago

ddea18

initial commit

Chris PeBenito • 19 years ago

758618

First cut at fixing fc_sort.

Karl MacMillan • 19 years ago

6847e8

remove java

Chris PeBenito • 19 years ago

2224ed

add updated dtd

Chris PeBenito • 19 years ago

9c25fd

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

initial tunable tool fixes

Chris PeBenito • 19 years ago

3a80ec

32 is space. ascii <= 32 is all whitespace

Chris PeBenito • 19 years ago

8fb301

initial commit

Chris PeBenito • 19 years ago

89ec23

start adding module disable and tunable infrastructure

Chris PeBenito • 19 years ago

0fbe15

initial commit

Chris PeBenito • 19 years ago

02b584

initial commit

Chris PeBenito • 19 years ago

43bc39

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

fix appconfig dir

Chris PeBenito • 19 years ago

096933

rework policy build options

Chris PeBenito • 19 years ago

b67488

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

initial commit of xml->html conversion

Chris PeBenito • 19 years ago

36e54b

add some indentation

Chris PeBenito • 19 years ago

419699

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

start breaking up support_macros into macros dir

Chris PeBenito • 19 years ago

ca83af

add some comments. make install target install appconfig files

Chris PeBenito • 19 years ago

44cda5

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4ef

remove extra whitespace

Chris PeBenito • 19 years ago

98af6c

move global.if to support_macros at top level

Chris PeBenito • 19 years ago

de9649

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915

use variable for dtd. move policy type to variant section

Chris PeBenito • 19 years ago

044735

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db9

fix policy.xml to not have templates for generated interfaces

Chris PeBenito • 19 years ago

3c62aa

move user_u and root to users

Chris PeBenito • 19 years ago

2fc84f

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

better handling of appconfig dir

Chris PeBenito • 19 years ago

2926f9

fix module name in xml

Chris PeBenito • 19 years ago

f267df

move flask dir to top level, and update them from nsa cvs. move files in

Chris PeBenito • 19 years ago

134191

initial commit

Chris PeBenito • 19 years ago

7555aa

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

initial commit

Chris PeBenito • 19 years ago

b8fca4

initial commit

Chris PeBenito • 19 years ago

b4c3f5

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0a

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

initial commit

Chris PeBenito • 19 years ago

c22038

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

add in appconfig files

Chris PeBenito • 19 years ago

c9a26b

initial commit

Chris PeBenito • 19 years ago

10abae

cleanup

Chris PeBenito • 19 years ago

cbeef6

cleanup

Chris PeBenito • 19 years ago

3b3bf8

initial commit

Chris PeBenito • 19 years ago

6f3dab

initial commit

Chris PeBenito • 19 years ago

7d7a36

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

more fixes

Chris PeBenito • 19 years ago

547283

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3

a few touchups

Chris PeBenito • 19 years ago

88c72f

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f1

initial commit

Chris PeBenito • 19 years ago

992aba

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e26

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add transitions

Chris PeBenito • 19 years ago

c43097

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add mls port support

Chris PeBenito • 19 years ago

0d0d2b

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

fix xml

Chris PeBenito • 19 years ago

494e98

add xml doc generation

Chris PeBenito • 19 years ago

6d314f

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0

add admin template

Chris PeBenito • 19 years ago

76bff3

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a2

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

reorg and a fix

Chris PeBenito • 19 years ago

fd9dee

add crontab

Chris PeBenito • 19 years ago

d18e3d

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af2

initial commit

Chris PeBenito • 19 years ago

23caa6

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

oops

Chris PeBenito • 19 years ago

dec168

reorder for more consistency

Chris PeBenito • 19 years ago

6b6740

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

leftover from modutils

Chris PeBenito • 19 years ago

63a310

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

initial commit

Chris PeBenito • 19 years ago

0f3be6

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb

add printer_device_t

Chris PeBenito • 19 years ago

46be1f

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e0280

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

fix per_userdomain_templates macro generation

Chris PeBenito • 19 years ago

0634b6

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

initial commit

Chris PeBenito • 19 years ago

4fc915

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

fix depends

Chris PeBenito • 19 years ago

23af43

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f8

add ignore read system state

Chris PeBenito • 19 years ago

67484f

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc3

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

doh

Chris PeBenito • 19 years ago

4472f3

add in missing devices

Chris PeBenito • 19 years ago

700988

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cd

initial commit

Chris PeBenito • 19 years ago

a7ed44

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b58606

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

add console setattr if

Chris PeBenito • 19 years ago

55a46d

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

add console dontaudit

Chris PeBenito • 19 years ago

811985

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

remove unneeded genfs_contexts

Chris PeBenito • 19 years ago

099c8b

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a

bring over more targets from strict policy, and add more checking

Chris PeBenito • 19 years ago

88d14a

kernel can load modules

Chris PeBenito • 19 years ago

549655

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d

move assert.te here

Chris PeBenito • 19 years ago

57d236

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf7

initial commit

Chris PeBenito • 19 years ago

b4cd15

rpms / selinux-policy

History refpolicy

rpms / selinux-policy

Source Code

History refpolicy