File history - rpms/selinux-policy

add missing tunable

Chris PeBenito • 19 years ago

bea7b4

fix perm set

Chris PeBenito • 19 years ago

6ff85b

fixes uncovered by sediff

Chris PeBenito • 19 years ago

628417

nicer te_trans conflict fix

Chris PeBenito • 19 years ago

f3936d

fix te_trans conflict

Chris PeBenito • 19 years ago

cac3ec

fix up sendmail for targeted

Chris PeBenito • 19 years ago

dc8f17

fix

Chris PeBenito • 19 years ago

f1b0a8

take care of missing types

Chris PeBenito • 19 years ago

2d13f7

ssh updates for targeted

Chris PeBenito • 19 years ago

375c24

clean up unused booleans

Chris PeBenito • 19 years ago

cbdb4a

updated modules.conf from dan

Chris PeBenito • 19 years ago

bce06f

typo

Chris PeBenito • 19 years ago

f0f18e

add missing range transition

Chris PeBenito • 19 years ago

495a70

initrc fixes

Chris PeBenito • 19 years ago

005a9a

fix quoting

Chris PeBenito • 19 years ago

7e1c14

fixes from testing

Chris PeBenito • 19 years ago

dd3544

put all users back into the base module

Chris PeBenito • 19 years ago

2f33cd

fix some /opt regexes

Chris PeBenito • 19 years ago

f1baed

dont remove home dir templates from base.fc

Chris PeBenito • 19 years ago

05c6f0

more transition work

Chris PeBenito • 19 years ago

08c22f

add some missing transitions from unconfined

Chris PeBenito • 19 years ago

b281bf

sediff fixes

Chris PeBenito • 19 years ago

a525f2

fixes from sediff

Chris PeBenito • 19 years ago

fc6198

rpc fixes from testing

Chris PeBenito • 19 years ago

ce0383

fixes from testing

Chris PeBenito • 19 years ago

5abea9

more fixing

Chris PeBenito • 19 years ago

4614e8

Added search and getattr permissions to etc_mail_t dir for system_mail_t so that the sendmail process would be able to start through init

Don Miner • 19 years ago

f13da8

another pile o fixes

Chris PeBenito • 19 years ago

d1b9d9

pile o fixes

Chris PeBenito • 19 years ago

33acca

fix rpm transition

Chris PeBenito • 19 years ago

f5e4f7

fixes from arpwatch testing

Chris PeBenito • 19 years ago

e8d0a6

a few more strays

Chris PeBenito • 19 years ago

7a6d42

try to fix associations

Chris PeBenito • 19 years ago

c3cf66

privfd

Chris PeBenito • 19 years ago

b7e182

easy fixes

Chris PeBenito • 19 years ago

ccfd7b

missing privloggers

Chris PeBenito • 19 years ago

2526a4

typo

Chris PeBenito • 19 years ago

ee64ef

initrc also uses nscd

Chris PeBenito • 19 years ago

d49d52

add missing nscd clients

Chris PeBenito • 19 years ago

e11d2e

use our own interface to make maintenance easier

Chris PeBenito • 19 years ago

2aec14

add default_t read back

Chris PeBenito • 19 years ago

7eec65

privhome implementation

Chris PeBenito • 19 years ago

784a3b

testing fixes

Chris PeBenito • 19 years ago

7b90f2

add dontaudit

Chris PeBenito • 19 years ago

51f5c6

system_chkpwd can winbind

Chris PeBenito • 19 years ago

467602

syslog logs to itself?

Chris PeBenito • 19 years ago

b0bdeb

use the right interface

Chris PeBenito • 19 years ago

2c216c

some home dir fixes

Chris PeBenito • 19 years ago

9aca49

appconfig side of su fix

Chris PeBenito • 19 years ago

240a3a

fix up su

Chris PeBenito • 19 years ago

83e451

make implicit work

Chris PeBenito • 19 years ago

a662d2

new semodule_package cmdline args

Chris PeBenito • 19 years ago

2964dc

fixes

Chris PeBenito • 19 years ago

60789e

module build fixes

Chris PeBenito • 19 years ago

28e730

homedir fixes

Chris PeBenito • 19 years ago

9dd500

more postfix work

Chris PeBenito • 19 years ago

88dd38

Moved the dbus stuff inbetween networkmanager and bind to the bind policy

Don Miner • 19 years ago

2192d4

hide broken symptoms

Chris PeBenito • 19 years ago

3df88d

hide broken symtoms

Chris PeBenito • 19 years ago

ee7f66

fix acct

Chris PeBenito • 19 years ago

52e1ed

fix again

Chris PeBenito • 19 years ago

40a1f3

Fixed an allow that should have been a dontaudit

Don Miner • 19 years ago

d2c573

add nscd

Chris PeBenito • 19 years ago

977b1d

fix most disable_trans errors

Chris PeBenito • 19 years ago

69dcd6

Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages

Don Miner • 19 years ago

f470a1

Reduced the number of differences in amanda between the targeted and the refpolicy

Don Miner • 19 years ago

c11417

woops

Chris PeBenito • 19 years ago

87ab63

fix most of samba

Chris PeBenito • 19 years ago

671673

Removed differences between refpolicy and targeted acct_t

Don Miner • 19 years ago

bdfa8e

Removed differences between refpolicy and targeted NetworkManager_t

Don Miner • 19 years ago

9c4fcf

add proc_net lnk

Chris PeBenito • 19 years ago

7ebd6a

hopefully fix su

Chris PeBenito • 19 years ago

b4e1eb

fixes

Chris PeBenito • 19 years ago

30705b

more fix

Chris PeBenito • 19 years ago

9bbc75

Fixed a problem which was allowing processes to become unconfined from initrc

Don Miner • 19 years ago

0354e3

Added rules to the bind policy for the named server so that it would start

Don Miner • 19 years ago

dd57ca

Added signal permissions to postgres so it can start

Don Miner • 19 years ago

57d8e6

corenet fixes

Chris PeBenito • 19 years ago

162dfc

add configuration for testing

Chris PeBenito • 19 years ago

a3754f

update ranges

Chris PeBenito • 19 years ago

37fe0e

fix

Chris PeBenito • 19 years ago

e64b33

fixes from chad

Chris PeBenito • 19 years ago

9d343a

add

Chris PeBenito • 19 years ago

88e5d7

remove bin policy and kern module assertions for now

Chris PeBenito • 19 years ago

15fefa

fix mls r_t

Chris PeBenito • 19 years ago

1480d3

more sediff

Chris PeBenito • 19 years ago

34e722

Added rules to the smbd_t and the nmbd_t domains so that they would start properly

Don Miner • 19 years ago

fa16f2

sediff fixes

Chris PeBenito • 19 years ago

1dd86c

add initrc_su_t

Chris PeBenito • 19 years ago

bb6763

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Don Miner • 19 years ago

3d37bc

more missing types

Chris PeBenito • 19 years ago

710791

more fixes

Chris PeBenito • 19 years ago

19b555

add rpc

Chris PeBenito • 19 years ago

43989f

fixes from sediff

Chris PeBenito • 19 years ago

2db2c7

Added a file context for httpd.pid so that it is correctly labeled

Don Miner • 19 years ago

f8964c

nwmgr fixes

Chris PeBenito • 19 years ago

f85544

add cups

Chris PeBenito • 19 years ago

ef5ca0

add postfix

Chris PeBenito • 19 years ago

04926d

add spamassassin

Chris PeBenito • 19 years ago

f932d8

add radius

Chris PeBenito • 19 years ago

385dcd

add radius and amanda, which I forgot to ci

Chris PeBenito • 19 years ago

44fc06

add pegasus

Chris PeBenito • 19 years ago

230838

add dbskk

Chris PeBenito • 19 years ago

a63621

add lpd

Chris PeBenito • 19 years ago

ad3b9d

simplify since alias take care of it

Chris PeBenito • 19 years ago

ae1d9a

add amanda

Chris PeBenito • 19 years ago

10b1f3

add networkmanager

Chris PeBenito • 19 years ago

239db5

woops, radius wasn't actually completed

Chris PeBenito • 19 years ago

ebed41

expand gen_context() in file contexts

Chris PeBenito • 19 years ago

ae9017

more sediff fixes

Chris PeBenito • 19 years ago

1f8a8b

more fixes

Chris PeBenito • 19 years ago

e6a2ea

sediff fixes

Chris PeBenito • 19 years ago

da4fc9

add xdm

Chris PeBenito • 19 years ago

23a444

add canna

Chris PeBenito • 19 years ago

350948

fix

Chris PeBenito • 19 years ago

fe7b94

add cyrus

Chris PeBenito • 19 years ago

ea557a

add all target to build base and modules

Chris PeBenito • 19 years ago

06a536

add dovecot

Chris PeBenito • 19 years ago

29ce00

fix corenetwork generation and add distcc

Chris PeBenito • 19 years ago

cf6141

obj class typo for certs

Chris PeBenito • 19 years ago

4e69c1

make DISTRO=redhat imply DIRECT_INITRC=y

Chris PeBenito • 19 years ago

2b01ae

release

Chris PeBenito • 19 years ago

a4e8b7

add missing entry

Chris PeBenito • 19 years ago

61feb2

targeted policy fixes

Chris PeBenito • 19 years ago

de7649

targeted and distro fixes for loadable modules

Chris PeBenito • 19 years ago

af4752

fix last loadable module problems

Chris PeBenito • 19 years ago

0efe52

fix requires

Chris PeBenito • 19 years ago

90c3dd

piles of fixes for loadable modules

Chris PeBenito • 19 years ago

12ae75

misc fixes

Chris PeBenito • 19 years ago

c38127

error out if trying to build a module thats off or base

Chris PeBenito • 19 years ago

843132

add more docs

Chris PeBenito • 19 years ago

97749e

fix error uncovered by sechecker

Chris PeBenito • 19 years ago

c3a05c

wrap up almost all of apache

Chris PeBenito • 19 years ago

e749cd

add ppp

Chris PeBenito • 19 years ago

e08118

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

fe9d17

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

d8636f

partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15

Chris PeBenito • 19 years ago

77f6e2

add some docs, do some reordering

Chris PeBenito • 19 years ago

b1421d

add sechecker targets

Chris PeBenito • 19 years ago

8df65f

start adding perm sets with refpol names

Chris PeBenito • 19 years ago

c4bf97

add missing interface

Chris PeBenito • 19 years ago

4c7199

add in last bits of webalizer

Chris PeBenito • 19 years ago

be4690

more apache work

Chris PeBenito • 19 years ago

c2b18f

add mailman

Chris PeBenito • 19 years ago

799a0b

update INSTALL and start work on README

Chris PeBenito • 19 years ago

fedd3c

add webalizer and sasl

Chris PeBenito • 19 years ago

f33561

add apm and arpwatch. fix implementation error on fs_getattr_all_files,

Chris PeBenito • 19 years ago

4483ee

add finger and bluetooth

Chris PeBenito • 19 years ago

d4dca5

partial mailman merge

Chris PeBenito • 19 years ago

9d3e33

fix files_exec_usr_src_files

Chris PeBenito • 19 years ago

99505c

* Updated to sedoctool to read bool files and tunable

Chris PeBenito • 19 years ago

4f9f30

rename context_template() to gen_context()

Chris PeBenito • 19 years ago

e02c61

more apache work

Chris PeBenito • 19 years ago

6e99a6

add ftp

Chris PeBenito • 19 years ago

fc6524

fix comment

Chris PeBenito • 19 years ago

5bc9f3

add interfaces used in old anonymous_domain()

Chris PeBenito • 19 years ago

f4d7fd

add most of apache

Chris PeBenito • 19 years ago

a996bd

more pieces of ftp

Chris PeBenito • 19 years ago

a5ec7c

start adding secure_file_type implementation

Chris PeBenito • 19 years ago

a2868f

add winbind

Chris PeBenito • 19 years ago

79cde3

add in a couple missing rules

Chris PeBenito • 19 years ago

694248

add in a few parts of ftp

Chris PeBenito • 19 years ago

246a60

add dmidecode

Chris PeBenito • 19 years ago

20e306

add disable_trans support

Chris PeBenito • 19 years ago

b03f96

a few conditional cleanups

Chris PeBenito • 19 years ago

1f91e1

add mls privileges

Chris PeBenito • 19 years ago

f0574f

comment fix

Chris PeBenito • 19 years ago

6d788d

add anaconda

Chris PeBenito • 19 years ago

9edc28

rework nis_use_ypbind since optionals dont work in conditionals

Chris PeBenito • 19 years ago

b9ae3a

add radvd, plus a few cleanups from sediff

Chris PeBenito • 19 years ago

fa6757

add kudzu

Chris PeBenito • 19 years ago

842859

remove classes from gen_requires, and disable net_raw for now

Chris PeBenito • 19 years ago

005841

fixes from sediff

Chris PeBenito • 19 years ago

681c9a

update for release

Chris PeBenito • 19 years ago

485586

add uucp

Chris PeBenito • 19 years ago

f7ba4a

testing fixes

Chris PeBenito • 19 years ago

b53f93

make system.users look nicer

Chris PeBenito • 19 years ago

fb2817

fix regex

Chris PeBenito • 19 years ago

90e497

fix system.users now that the gen_user macro is in support

Chris PeBenito • 19 years ago

1fb83a

fix for targeted

Chris PeBenito • 19 years ago

08c5c9

fix for removed example targeted config

Chris PeBenito • 19 years ago

996ae3

loadable module compile fixes

Chris PeBenito • 19 years ago

25c674

fix error with file common being output, not file class (unique perms were missing)

Chris PeBenito • 19 years ago

6e0542

targeted and redhat cleanups

Chris PeBenito • 19 years ago

142e9f

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 19 years ago

0e15cd

todo cleanup

Chris PeBenito • 19 years ago

3774e4

add cvs

Chris PeBenito • 19 years ago

93070c

add cpucontrol

Chris PeBenito • 19 years ago

921055

add rlogin and telnet

Chris PeBenito • 19 years ago

4fd520

add appconfig for mls and mcs

Chris PeBenito • 19 years ago

c0e4fe

add stunnel

Chris PeBenito • 19 years ago

200f45

final updates from nsa cvs

Chris PeBenito • 19 years ago

a1fcff

a few module compile fixes

Chris PeBenito • 19 years ago

41c480

more upstream merging

Chris PeBenito • 19 years ago

cf6a7d

more upstream merging

Chris PeBenito • 19 years ago

cff75c

add tftp

Chris PeBenito • 19 years ago

40adb5

add snmp

Chris PeBenito • 19 years ago

ccc597

more merging from nsa cvs

Chris PeBenito • 19 years ago

a08248

more updates

Chris PeBenito • 19 years ago

98a8ea

more merging from nsa cvs

Chris PeBenito • 19 years ago

605ba2

cleanup

Chris PeBenito • 19 years ago

5a2649

add samba

Chris PeBenito • 19 years ago

84c922

require fix

Chris PeBenito • 19 years ago

4479b3

fixes for module compiling

Chris PeBenito • 19 years ago

71fe0f

more merging of NSA CVS policy

Chris PeBenito • 19 years ago

0907bd

begin merging in upstream NSA CVS changes

Chris PeBenito • 19 years ago

2705f9

add base mod changelog entry

Chris PeBenito • 19 years ago

082dcd

fixes to make base module compilable

Chris PeBenito • 19 years ago

712566

add first part of changes to make base module compilable

Chris PeBenito • 19 years ago

2e863f

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 19 years ago

0fdf3e

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 19 years ago

9ff300

add portmap

Chris PeBenito • 19 years ago

eb3cb6

add ktalk

Chris PeBenito • 19 years ago

d17b4d

add missing rules of other domains using inn

Chris PeBenito • 19 years ago

9b0640

new release

Chris PeBenito • 19 years ago

541b7d

misc fixes

Chris PeBenito • 19 years ago

763a5e

add inn

Chris PeBenito • 19 years ago

8d9352

misc fixes

Chris PeBenito • 19 years ago

603f90

add ntp

Chris PeBenito • 19 years ago

b11a75

typo

Chris PeBenito • 19 years ago

ce1b44

add dictd

Chris PeBenito • 19 years ago

ac0483

add hal

Chris PeBenito • 19 years ago

fdae8e

move dhcpd to dhcp

Chris PeBenito • 19 years ago

f344c0

add squid

Chris PeBenito • 19 years ago

0f707d

add dhcpd

Chris PeBenito • 19 years ago

7c8fc3

fix bugs uncovered from sediff

Chris PeBenito • 19 years ago

9d3bdc

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 19 years ago

c0d156

finish remaining dbus bits

Chris PeBenito • 19 years ago

631ee4

add dbus

Chris PeBenito • 19 years ago

0c3d17

fix typos

Chris PeBenito • 19 years ago

6af06c

cosmetics

Chris PeBenito • 19 years ago

768283

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 19 years ago

6e6156

fix up most of mta attribute insanity

Chris PeBenito • 19 years ago

246839

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 19 years ago

451c1e

make corecommands required

Chris PeBenito • 19 years ago

e5d452

doctool display for no interfaces or templates

Chris PeBenito • 19 years ago

a19e34

update for release

Chris PeBenito • 19 years ago

37aa3f

update config, switch most to module

Chris PeBenito • 19 years ago

9439a2

start adding in templated interfaces

Chris PeBenito • 19 years ago

2a9456

remove bad changelog date

Chris PeBenito • 19 years ago

d4df0a

add rpm spec skeleton

Chris PeBenito • 19 years ago

c6299b

fix quoting

Chris PeBenito • 19 years ago

6d1227

reformat for use in rpm

Chris PeBenito • 19 years ago

e28aa6

fix tunables

Chris PeBenito • 19 years ago

3110de

do bools until loadable modules support tunables

Chris PeBenito • 19 years ago

82024f

add bind

Chris PeBenito • 19 years ago

d83fda

add privoxy

Chris PeBenito • 19 years ago

902be0

add rsync

Chris PeBenito • 19 years ago

35ecf8

add howl

Chris PeBenito • 19 years ago

f9b11e

move require to right position, for modular policy

Chris PeBenito • 19 years ago

4b8c54

more comments

Chris PeBenito • 19 years ago

a6df70

remove comment about monolithic only supported

Chris PeBenito • 19 years ago

8b75b0

complete infrastructure support for building modules

Chris PeBenito • 19 years ago

c04f2a

mark userpace object classes

Chris PeBenito • 19 years ago

db93d7

moved to selinux module

Chris PeBenito • 19 years ago

f6e28a

for base module, only enable modules actually in it

Chris PeBenito • 19 years ago

28f032

initial support for compiling loadable modules

Chris PeBenito • 19 years ago

fb0a3a

add gpm

Chris PeBenito • 19 years ago

f862c3

add ldap

Chris PeBenito • 19 years ago

2961e7

cleanup

Chris PeBenito • 19 years ago

23ca91

add rshd

Chris PeBenito • 19 years ago

545b0c

add firstboot

Chris PeBenito • 19 years ago

886907

add firstboot

Chris PeBenito • 19 years ago

57a96c

more debian cleanup

Chris PeBenito • 19 years ago

2d803e

make default for optional modules to module instead of base

Chris PeBenito • 19 years ago

a57379

fix broken xml of previous commit

Chris PeBenito • 19 years ago

4806a0

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 19 years ago

5f38a6

add loadkeys

Chris PeBenito • 19 years ago

21468a

more comments

Chris PeBenito • 19 years ago

884309

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 19 years ago

f0b1ef

quiet file context validation

Chris PeBenito • 19 years ago

c5a6dc

fix some udev naming

Chris PeBenito • 19 years ago

35b494

fix system spool file problem

Chris PeBenito • 19 years ago

aae06c

remove secdesc since desc is sufficient

Chris PeBenito • 19 years ago

d06f3c

finalize desc -> summary xml change

Chris PeBenito • 19 years ago

f7ebea

add tcpd

Chris PeBenito • 19 years ago

4aa0dc

fix no interface module handling in segenxml

Chris PeBenito • 19 years ago

e694b5

add quota

Chris PeBenito • 19 years ago

052c95

tabbing fix

Chris PeBenito • 19 years ago

5a3895

add sudo

Chris PeBenito • 19 years ago

e78430

add template xml

Chris PeBenito • 19 years ago

b9d7d7

add su

Chris PeBenito • 19 years ago

948914

fix gen_user comment for more clarity

Chris PeBenito • 19 years ago

946545

add updfstab

Chris PeBenito • 19 years ago

dce68d

fix xml tags

Chris PeBenito • 19 years ago

f5e321

a few more ssh touchups

Chris PeBenito • 19 years ago

7057c1

add tmpreaper

Chris PeBenito • 19 years ago

ed78ea

add acct

Chris PeBenito • 19 years ago

9a66d4

misc cleanup

Chris PeBenito • 19 years ago

3fd833

add mysql

Chris PeBenito • 19 years ago

42be7c

search sbin dirs to find the pgms

Chris PeBenito • 19 years ago

046a21

* Rename ipsec connect interface for consistency.

Chris PeBenito • 19 years ago

81343a

new release

Chris PeBenito • 19 years ago

52a902

new release

Chris PeBenito • 19 years ago

6db8e5

add missing

Chris PeBenito • 19 years ago

60abb5

fix comparison bug

Chris PeBenito • 19 years ago

cd8fa4

move file context validation to install

Chris PeBenito • 19 years ago

96a150

fix stray line that got out of TODO

Chris PeBenito • 19 years ago

bbdbdb

work on user transition

Chris PeBenito • 19 years ago

e5590e

update

Chris PeBenito • 19 years ago

c13146

Fix handling of ordered and unordered HTML lists.

Chris PeBenito • 19 years ago

78d30c

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 19 years ago

022f61

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 19 years ago

50527c

update from privmail

Chris PeBenito • 19 years ago

953541

add an example module config for a targeted policy

Chris PeBenito • 19 years ago

80526c

/var/lib is now a mountpoint

Chris PeBenito • 19 years ago

ea7d57

unconfined can pass all constraints

Chris PeBenito • 19 years ago

53857c

name_connect only on tcp_sockets

Chris PeBenito • 19 years ago

ef424c

unconfined can name_connect to all ports

Chris PeBenito • 19 years ago

9496fd

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 19 years ago

d25063

bah typo

Chris PeBenito • 19 years ago

f82c6a

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 19 years ago

1e3f61

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

add new netlink socket class

Chris PeBenito • 19 years ago

21f477

more fixes for targeted

Chris PeBenito • 19 years ago

ec848d

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 19 years ago

f136a9

add pcmcia

Chris PeBenito • 19 years ago

316553

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

add distro tunables. expand on a few comments

Chris PeBenito • 19 years ago

25a0c6

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix comments for templates to have same number of # as interfaces

Chris PeBenito • 19 years ago

20a227

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

improve display of tunables and booleans

Chris PeBenito • 19 years ago

34bbe5

add tun and bool descriptions

Chris PeBenito • 19 years ago

4d7511

initial global booleans and tunables support. also fix index

Chris PeBenito • 19 years ago

249d46

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

silly formatting fix

Chris PeBenito • 19 years ago

4d0d41

support for global booleans

Chris PeBenito • 19 years ago

c11958

* Added support for layer summaries.

Chris PeBenito • 19 years ago

acb668

tag for 20050707 release

Chris PeBenito • 19 years ago

58c777

add changelog

Chris PeBenito • 19 years ago

dfa83e

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa526

support for targeted policy

Chris PeBenito • 19 years ago

c98340

put back to strict. will have separate strict and targeted appconfig

Chris PeBenito • 19 years ago

83ce67

validate file contexts

Chris PeBenito • 19 years ago

14b25b

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

quiet the awk if modules.conf doesnt exist

Chris PeBenito • 19 years ago

a3fdce

- Removed OUTPUT_VERSION as default.

Karl MacMillan • 19 years ago

ebb884

update appconfig for unconfined login

Chris PeBenito • 19 years ago

e17cb8

add unconfined

Chris PeBenito • 19 years ago

9726b3

fix quoting problem

Chris PeBenito • 19 years ago

e8f005

fix for new new modules.conf behavior

Chris PeBenito • 19 years ago

e8b3e3

update for required tag

Chris PeBenito • 19 years ago

f0cc1a

add required tags

Chris PeBenito • 19 years ago

274547

add tag for required modules

Chris PeBenito • 19 years ago

d78fde

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

ul has to be in a p

Chris PeBenito • 19 years ago

65c861

initial commit

Chris PeBenito • 19 years ago

5e1ed4

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

dont show interface/template hotlinks if the module doesnt have one of them.

Chris PeBenito • 19 years ago

e8d8fa

make layer summary required

Chris PeBenito • 19 years ago

d233bf

change messages for missing docs

Chris PeBenito • 19 years ago

00172f

make interfaces or templates section not shown if empty

Chris PeBenito • 19 years ago

06c968

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

link fix

Chris PeBenito • 19 years ago

743b65

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

add templates

Chris PeBenito • 19 years ago

effd58

change desc to summary

Chris PeBenito • 19 years ago

ceebe3

add comments and error handling

Chris PeBenito • 19 years ago

896bad

preserve tunable values if tunables.conf exists

Chris PeBenito • 19 years ago

2d56fd

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

better handling of whitespace

Chris PeBenito • 19 years ago

cedae2

change modules.conf behavior to be in line with behavior which will be used in the future for base module

Chris PeBenito • 19 years ago

19db6b

change modules.conf handling

Chris PeBenito • 19 years ago

a4c639

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

initial commit

Chris PeBenito • 19 years ago

24bf11

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

better dummy xml entries

Chris PeBenito • 19 years ago

f8838e

initial commit

Chris PeBenito • 19 years ago

73fbc7

add/update comments

Chris PeBenito • 19 years ago

62a7b0

add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd

Chris PeBenito • 19 years ago

e81f02

update for new documentation method

Chris PeBenito • 19 years ago

414e41

more updates

Chris PeBenito • 19 years ago

aad5b9

a couple output fixes

Chris PeBenito • 19 years ago

c3a075

update to new commenting style

Chris PeBenito • 19 years ago

9916c6

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

452399

initial commit of segenxml. add support in Makefile

Chris PeBenito • 19 years ago

95db42

fix

Chris PeBenito • 19 years ago

19ea99

fix for shortened tags

Chris PeBenito • 19 years ago

7c2b84

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

change doctool to bring in line with the xml tag change (layers encapsulate

Chris PeBenito • 19 years ago

7fb9c1

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a7

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fba

add rw_term_perms

Chris PeBenito • 19 years ago

c9b7f1

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39

review of system interfaces

Chris PeBenito • 19 years ago

139520

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1

misc cleanup

Chris PeBenito • 19 years ago

0e7216

reorder gpg tunable for alpha sorting

Chris PeBenito • 19 years ago

562cc2

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

have can_exec add a require block

Chris PeBenito • 19 years ago

8c2f3a

fix

Chris PeBenito • 19 years ago

4ce9bd

initialize description to None so missing descriptions dont show wrong data

Chris PeBenito • 19 years ago

815ff3

add comments for clean and bare

Chris PeBenito • 19 years ago

102a59

for use until we have a full README

Chris PeBenito • 19 years ago

337e4a

add install-src target

Chris PeBenito • 19 years ago

c592e5

initial commit

Chris PeBenito • 19 years ago

f08f5a

add CFLAGS, and drop -C from install since it doesn't exist in all distros,

Chris PeBenito • 19 years ago

c7b41e

put user line in col 1, since genhomedircon breaks otherwise

Chris PeBenito • 19 years ago

8eaa72

initial commit

Chris PeBenito • 19 years ago

828e03

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc1

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

when a generated file is already generated, it shows up in the generated_*

Chris PeBenito • 19 years ago

8ae194

fix typo

Chris PeBenito • 19 years ago

810f2b

fix up appconfig, and generate $(installdir)/booleans

Chris PeBenito • 19 years ago

1beba1

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

fix makefile to only rebuild modules.conf and tunables.conf explicitly

Chris PeBenito • 19 years ago

d2d6c8

initial commit

Chris PeBenito • 19 years ago

e75f78

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

fix

Chris PeBenito • 19 years ago

94670f

make summary and description optional in interfaces until we can clean it up

Chris PeBenito • 19 years ago

eec673

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

add "this is a generated file!" comment to top of corenetwork.{te,if}

Chris PeBenito • 19 years ago

61bbe5

ul end tag fix, and css tweak

Chris PeBenito • 19 years ago

3c6d78

update from method

Chris PeBenito • 19 years ago

fae6ff

fix xml

Chris PeBenito • 19 years ago

d9507b

renaming insanity

Chris PeBenito • 19 years ago

c9428d

overwrite the generated .te file instead of append

Chris PeBenito • 19 years ago

b2bf0b

Devices rename.

Karl MacMillan • 19 years ago

f0c985

move policy.xml to doc, so it doesnt get deleted on a make clean

Chris PeBenito • 19 years ago

12b559

make module description optional and interface summary optional until

Chris PeBenito • 19 years ago

bec110

html tag updates

Chris PeBenito • 19 years ago

e214f6

Added missing interface.

Karl MacMillan • 19 years ago

bef4f0

more updates from method

Chris PeBenito • 19 years ago

d46f02

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

fix can_exec

Chris PeBenito • 19 years ago

240408

policy.xml is now in tmp/

Chris PeBenito • 19 years ago

e1db6e

make macro work

Chris PeBenito • 19 years ago

cab7c0

add can_exec

Chris PeBenito • 19 years ago

e3fd77

fix

Chris PeBenito • 19 years ago

1b8d67

Templates for menu ordering change.

Karl MacMillan • 19 years ago

c75e65

reorder

Chris PeBenito • 19 years ago

a154cd

Fixed doc tool to order menus.

Karl MacMillan • 19 years ago

d6b0f3

speed improvement

Chris PeBenito • 19 years ago

5d9417

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

more renaming and xml

Chris PeBenito • 19 years ago

eda201

rename

Chris PeBenito • 19 years ago

eca5b2

fix bracket display for optional parameters

Chris PeBenito • 19 years ago

997bd9

add back html page generation

Chris PeBenito • 19 years ago

20030e

fixes and remove debug code

Chris PeBenito • 19 years ago

1601fb

more indentation for modules in the menu

Chris PeBenito • 19 years ago

fe3bd5

initial commit

Chris PeBenito • 19 years ago

eb437d

updates

Chris PeBenito • 19 years ago

5a3299

aliases

Chris PeBenito • 19 years ago

cc41a9

fix layer in module tag

Chris PeBenito • 19 years ago

7591e8

rename

Chris PeBenito • 19 years ago

c6ebef

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

make policy.xml depend on all if's being generated

Chris PeBenito • 19 years ago

16e1cf

aliases

Chris PeBenito • 19 years ago

dc67f7

aliases

Chris PeBenito • 19 years ago

0a10b1

renaming and xml

Chris PeBenito • 19 years ago

fe040c

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

better handling of generated files

Chris PeBenito • 19 years ago

e12e57

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab

aliasing

Chris PeBenito • 19 years ago

7edd02

support_modules is finally gone, and modules.disable->modules.conf

Chris PeBenito • 19 years ago

0350b1

initial commit

Chris PeBenito • 19 years ago

b29d23

add aliases

Chris PeBenito • 19 years ago

c2c00b

Moved and changed user_mls to gen_user.

Karl MacMillan • 19 years ago

72bdc6

Renamed support macros for consistency.

Karl MacMillan • 19 years ago

eb5e23

make infoflow optional

Chris PeBenito • 19 years ago

eac7c3

overhaul

Chris PeBenito • 19 years ago

dc5daf

renaming

Chris PeBenito • 19 years ago

9f72a2

interface renaming

Chris PeBenito • 19 years ago

0c5a28

interface renaming

Chris PeBenito • 19 years ago

1694de

comment fix

Chris PeBenito • 19 years ago

066d46

more fixes

Chris PeBenito • 19 years ago

84eb35

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

add interface macro

Chris PeBenito • 19 years ago

a9ec54

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609

add xml

Chris PeBenito • 19 years ago

3865d6

more tunable work

Chris PeBenito • 19 years ago

ddea18

initial commit

Chris PeBenito • 19 years ago

758618

First cut at fixing fc_sort.

Karl MacMillan • 19 years ago

6847e8

remove java

Chris PeBenito • 19 years ago

2224ed

add updated dtd

Chris PeBenito • 19 years ago

9c25fd

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

initial tunable tool fixes

Chris PeBenito • 19 years ago

3a80ec

32 is space. ascii <= 32 is all whitespace

Chris PeBenito • 19 years ago

8fb301

initial commit

Chris PeBenito • 19 years ago

89ec23

start adding module disable and tunable infrastructure

Chris PeBenito • 19 years ago

0fbe15

initial commit

Chris PeBenito • 19 years ago

02b584

initial commit

Chris PeBenito • 19 years ago

43bc39

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

fix appconfig dir

Chris PeBenito • 19 years ago

096933

rework policy build options

Chris PeBenito • 19 years ago

b67488

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

initial commit of xml->html conversion

Chris PeBenito • 19 years ago

36e54b

add some indentation

Chris PeBenito • 19 years ago

419699

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

start breaking up support_macros into macros dir

Chris PeBenito • 19 years ago

ca83af

add some comments. make install target install appconfig files

Chris PeBenito • 19 years ago

44cda5

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4ef

remove extra whitespace

Chris PeBenito • 19 years ago

98af6c

move global.if to support_macros at top level

Chris PeBenito • 19 years ago

de9649

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915

use variable for dtd. move policy type to variant section

Chris PeBenito • 19 years ago

044735

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db9

fix policy.xml to not have templates for generated interfaces

Chris PeBenito • 19 years ago

3c62aa

move user_u and root to users

Chris PeBenito • 19 years ago

2fc84f

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

better handling of appconfig dir

Chris PeBenito • 19 years ago

2926f9

fix module name in xml

Chris PeBenito • 19 years ago

f267df

move flask dir to top level, and update them from nsa cvs. move files in

Chris PeBenito • 19 years ago

134191

initial commit

Chris PeBenito • 19 years ago

7555aa

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

initial commit

Chris PeBenito • 19 years ago

b8fca4

initial commit

Chris PeBenito • 19 years ago

b4c3f5

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0a

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

initial commit

Chris PeBenito • 19 years ago

c22038

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

add in appconfig files

Chris PeBenito • 19 years ago

c9a26b

initial commit

Chris PeBenito • 19 years ago

10abae

cleanup

Chris PeBenito • 19 years ago

cbeef6

cleanup

Chris PeBenito • 19 years ago

3b3bf8

initial commit

Chris PeBenito • 19 years ago

6f3dab

initial commit

Chris PeBenito • 19 years ago

7d7a36

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

more fixes

Chris PeBenito • 19 years ago

547283

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3

a few touchups

Chris PeBenito • 19 years ago

88c72f

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f1

initial commit

Chris PeBenito • 19 years ago

992aba

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e26

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add transitions

Chris PeBenito • 19 years ago

c43097

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add mls port support

Chris PeBenito • 19 years ago

0d0d2b

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

fix xml

Chris PeBenito • 19 years ago

494e98

add xml doc generation

Chris PeBenito • 19 years ago

6d314f

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0

add admin template

Chris PeBenito • 19 years ago

76bff3

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a2

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

reorg and a fix

Chris PeBenito • 19 years ago

fd9dee

add crontab

Chris PeBenito • 19 years ago

d18e3d

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af2

initial commit

Chris PeBenito • 19 years ago

23caa6

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

oops

Chris PeBenito • 19 years ago

dec168

reorder for more consistency

Chris PeBenito • 19 years ago

6b6740

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

leftover from modutils

Chris PeBenito • 19 years ago

63a310

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

initial commit

Chris PeBenito • 19 years ago

0f3be6

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb

add printer_device_t

Chris PeBenito • 19 years ago

46be1f

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e0280

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

fix per_userdomain_templates macro generation

Chris PeBenito • 19 years ago

0634b6

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

initial commit

Chris PeBenito • 19 years ago

4fc915

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

fix depends

Chris PeBenito • 19 years ago

23af43

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f8

add ignore read system state

Chris PeBenito • 19 years ago

67484f

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc3

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

doh

Chris PeBenito • 19 years ago

4472f3

add in missing devices

Chris PeBenito • 19 years ago

700988

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cd

initial commit

Chris PeBenito • 19 years ago

a7ed44

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b58606

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

add console setattr if

Chris PeBenito • 19 years ago

55a46d

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

add console dontaudit

Chris PeBenito • 19 years ago

811985

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

remove unneeded genfs_contexts

Chris PeBenito • 19 years ago

099c8b

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a

bring over more targets from strict policy, and add more checking

Chris PeBenito • 19 years ago

88d14a

kernel can load modules

Chris PeBenito • 19 years ago

549655

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d

move assert.te here

Chris PeBenito • 19 years ago

57d236

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf7

initial commit

Chris PeBenito • 19 years ago

b4cd15

rpms / selinux-policy

History refpolicy

rpms / selinux-policy

Source Code

History refpolicy