rpms / selinux-policy

Clone
Source Code
GIT

History refpolicy

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
  1.   e1ee92b29022ced701a0649f3ea723bacaf4d148
  2.   refpolicy
fix up cron_crw_tcp_socket()
Chris PeBenito • 18 years ago  
e1ee92
second colon not needed for mls-disabled policies.
Chris PeBenito • 18 years ago  
b9e6c4
Remove allow_execmem from targeted policy domain_base_type().
Chris PeBenito • 18 years ago  
3eea55
fix bad interface calls
Chris PeBenito • 18 years ago  
a39525
fix build.conf inclusion for local policies, add xml build target, nicen eching.
Chris PeBenito • 18 years ago  
1a7175
nicen echoing
Chris PeBenito • 18 years ago  
58b2a3
fix default user line
Chris PeBenito • 18 years ago  
8d1111
add missing verbose to fc_sort and add target for generated files
Chris PeBenito • 18 years ago  
fffba0
add uml, plus two renames in corenet
Chris PeBenito • 18 years ago  
5b6ddb
add missing vpath and .pp build dir for modules in local layers
Chris PeBenito • 18 years ago  
ad8af2
fix dependency for install-headers
Chris PeBenito • 18 years ago  
3d5980
patch from dan Tue, 14 Feb 2006 09:01:16 -0500
Chris PeBenito • 18 years ago  
8cf671
fix regression; remove unneeded ROOT and make BUILDDIR have a / if its set.
Chris PeBenito • 18 years ago  
5b45ff
remove unneeded dep
Chris PeBenito • 18 years ago  
988a44
reverse
Chris PeBenito • 18 years ago  
b389cd
remove unneeded dep
Chris PeBenito • 18 years ago  
fcfe68
add seusers support
Chris PeBenito • 18 years ago  
ace368
make default action build all packages, like the comment says
Chris PeBenito • 18 years ago  
ddb9aa
add users_extra support
Chris PeBenito • 18 years ago  
90b331
remove unneeded LOCAL_LAYERS variable
Chris PeBenito • 18 years ago  
e2680f
make html target create tmp dir
Chris PeBenito • 18 years ago  
81a18f
fix headers install path problem, segenxml.py variable problem, change set_tunables into a standalone awk script.
Chris PeBenito • 18 years ago  
d6cf05
add missing endlines
Chris PeBenito • 18 years ago  
3a68d0
merge external modules makefile changes
Chris PeBenito • 18 years ago  
c9f20d
implement x_client_domain replacement
Chris PeBenito • 18 years ago  
24a637
update for serge's fix
Chris PeBenito • 18 years ago  
0062f9
clean up patch from Serge Fri, 10 Feb 2006 18:01:06 -0600
Chris PeBenito • 18 years ago  
807a77
patch from dan Thu, 09 Feb 2006 13:39:41 -0500
Chris PeBenito • 18 years ago  
b0d224
do not remove intermediate files
Chris PeBenito • 18 years ago  
e60b98
a few fixes
Chris PeBenito • 18 years ago  
0e686f
xml building changes, add desc tag to booleans, add summary tag to bools
Chris PeBenito • 18 years ago  
885b83
patch from Serge Hallyn Thu, 09 Feb 2006 13:42:36 -0600, plus fix the rules in the TODO.
Chris PeBenito • 18 years ago  
977840
fix process object class assertion for hierarchy
Chris PeBenito • 18 years ago  
e0dfbd
add rpm install instructions
Chris PeBenito • 18 years ago  
4ef756
work on xdm
Chris PeBenito • 18 years ago  
5a975c
patch from dan Wed, 01 Feb 2006 08:33:30 -0500
Chris PeBenito • 18 years ago  
955019
fix sendto
Chris PeBenito • 18 years ago  
37f15c
a couple init renames
Chris PeBenito • 18 years ago  
f75479
fix kernel_relabel_unlabeled()
Chris PeBenito • 18 years ago  
c66a3a
remove redundant userdom_manage_generic_user_home_dir interface
Chris PeBenito • 18 years ago  
cd07ea
remove lvm_vg_t
Chris PeBenito • 18 years ago  
017bab
clean up userdom_create_user_home()
Chris PeBenito • 18 years ago  
9417cb
fix userdom_create_sysadm_home
Chris PeBenito • 18 years ago  
ee9500
another slew of renaming
Chris PeBenito • 18 years ago  
1815ba
fix optional in fc, move contexts to their proper modules
Chris PeBenito • 18 years ago  
46112f
fix compile problem
Chris PeBenito • 18 years ago  
3284fb
fix a few fcs
Chris PeBenito • 18 years ago  
8ff553
merge tvtime to trunk
Chris PeBenito • 18 years ago  
b77d01
forgot to add if renaming to changelog
Chris PeBenito • 18 years ago  
ffd5c3
remove unneeded gen_require_set() macro
Chris PeBenito • 18 years ago  
e52af2
move example makefile to doc
Chris PeBenito • 18 years ago  
5bd1a7
genhomedircon stuff only for strict
Chris PeBenito • 18 years ago  
6018e9
genhomedircon stuff only for strict
Chris PeBenito • 18 years ago  
6bc40e
install-docs target, consolidate relabeling
Chris PeBenito • 18 years ago  
120988
add example module.
Chris PeBenito • 18 years ago  
6bb0da
fix for lineno and filename attributes
Chris PeBenito • 18 years ago  
bff1ce
fix xml
Chris PeBenito • 18 years ago  
fe2102
add mrtg, bug 1394
Chris PeBenito • 18 years ago  
679626
renaming from 20060131 interface review, round 4
Chris PeBenito • 18 years ago  
4d851f
renaming from 20060131 interface review, round 3
Chris PeBenito • 18 years ago  
9e04f5
renaming from 20060131 interface review, round 2
Chris PeBenito • 18 years ago  
445522
renaming from 20060131 interface review
Chris PeBenito • 18 years ago  
207c47
fix documentation
Chris PeBenito • 18 years ago  
157610
merge xdm into xserver
Chris PeBenito • 18 years ago  
0f5d13
remove kernel module reversed interfaces.
Chris PeBenito • 18 years ago  
18cc01
remove all class remaining lines with kernel object classes.
Chris PeBenito • 18 years ago  
6ada25
patch from dan Fri, 27 Jan 2006 01:37:19 -0500
Chris PeBenito • 18 years ago  
51a89c
from today's interface review meeting:
Chris PeBenito • 18 years ago  
270d42
add line number and file name to xml, from selide people
Chris PeBenito • 18 years ago  
585076
add headers and outside tree building support
Chris PeBenito • 18 years ago  
9b3756
add text for rolemap
Chris PeBenito • 18 years ago  
6259d8
improve comments
Chris PeBenito • 18 years ago  
8c4989
add rolemap/per-userdomain infrastructure
Chris PeBenito • 18 years ago  
4ace0f
remove newrole privs from su and sudo
Chris PeBenito • 18 years ago  
5e4cbc
override doesnt do anything for +=, use ?= assignment to simplify NAME assignment.
Chris PeBenito • 18 years ago  
3f026a
nicer way of doing fallback
Chris PeBenito • 18 years ago  
a4fae7
Add ctags Make target from Thomas Bleher.
Chris PeBenito • 18 years ago  
37227d
patch from dan
Chris PeBenito • 18 years ago  
a52492
fix xml
Chris PeBenito • 18 years ago  
59d721
add fix for secadm_r. I dont like this, but it can be straightened out later.
Chris PeBenito • 18 years ago  
ba35e4
reverse last change
Chris PeBenito • 18 years ago  
18d59e
cleanup
Chris PeBenito • 18 years ago  
6b5c92
fix EOL extra space
Chris PeBenito • 18 years ago  
c43ecf
Collapse commands with grep piped to sed into one sed command.
Chris PeBenito • 18 years ago  
7dca64
remove unneeded dependency for generated_definitions.conf
Chris PeBenito • 18 years ago  
6b1c8e
fix sshd
Chris PeBenito • 18 years ago  
f6abfd
add missing if
Chris PeBenito • 18 years ago  
d14c0e
fix user pty type_change
Chris PeBenito • 18 years ago  
1e786e
more xdm work
Chris PeBenito • 18 years ago  
07620c
last bits of xserver
Chris PeBenito • 18 years ago  
3b3113
add xauth and iceauth to xserver
Chris PeBenito • 18 years ago  
acd87c
work on xdm
Chris PeBenito • 18 years ago  
dace0b
identity changes from dan
Chris PeBenito • 18 years ago  
924c0f
patch from Dan, sent Thu, 19 Jan 2006 14:16:26 -0500
Chris PeBenito • 18 years ago  
a225f9
fixes from serge
Chris PeBenito • 18 years ago  
85c20a
forgot to bump version
Chris PeBenito • 18 years ago  
55f1ef
add xserver
Chris PeBenito • 18 years ago  
488ec7
login fixes and pieces of xserver
Chris PeBenito • 18 years ago  
2ce6b0
formatting fixes
Chris PeBenito • 18 years ago  
c1904d
add execstack and execheap to unconfined domain exclusion
Chris PeBenito • 18 years ago  
edb77e
hopefuly final fix for run_init
Chris PeBenito • 18 years ago  
a49e2b
move certwatch to admin, its not a daemon
Chris PeBenito • 18 years ago  
92268c
give info message for make html
Chris PeBenito • 18 years ago  
2de03f
add lpr policy to lpd
Chris PeBenito • 18 years ago  
8dca6b
add certwatch
Chris PeBenito • 18 years ago  
2bcdbd
fixes from dan
Chris PeBenito • 18 years ago  
0a7728
Change initrc_var_run_t interface noun from script_pid to utmp for clarity.
Chris PeBenito • 18 years ago  
68228b
there is no initrc_var_run_t:dir
Chris PeBenito • 18 years ago  
b94cc1
add userhelper
Chris PeBenito • 18 years ago  
7c2f5a
really fix the build problems
Chris PeBenito • 18 years ago  
6d1409
fix compile errors
Chris PeBenito • 18 years ago  
625cae
move stray bin_t entry
Chris PeBenito • 18 years ago  
6b86ef
add portage from gentoo
Chris PeBenito • 18 years ago  
e1c414
fix run_init constraint problem
Chris PeBenito • 18 years ago  
fe9b05
add usernetctl.
Chris PeBenito • 18 years ago  
8cc494
update for release.
Chris PeBenito • 18 years ago  
22cb0b
bump versions for release.
Chris PeBenito • 18 years ago  
d3d270
patch from dan 1/16/06
Chris PeBenito • 18 years ago  
93727e
fix encapsulation problem
Chris PeBenito • 18 years ago  
cc5df2
fix module building problems.
Chris PeBenito • 18 years ago  
76b519
fix typos and formatting
Chris PeBenito • 18 years ago  
f40b36
add corenet patch from spencer
Chris PeBenito • 18 years ago  
b7b1d2
add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.
Chris PeBenito • 18 years ago  
44d5d9
add slocate from dan
Chris PeBenito • 18 years ago  
6a57b6
rename create verb to filetrans for type transitioning ifs
Chris PeBenito • 18 years ago  
9d5949
fix comments, clean out object classes
Chris PeBenito • 18 years ago  
836929
interface-ize screen fixes
Chris PeBenito • 18 years ago  
22d2e2
fix comments
Chris PeBenito • 18 years ago  
460e05
fixes to make screen work
Chris PeBenito • 18 years ago  
038bd3
add cdrecord
Chris PeBenito • 18 years ago  
4ec694
add java
Chris PeBenito • 18 years ago  
3ffe29
fix alignment
Chris PeBenito • 18 years ago  
c5af97
fix expansion of interfaces from disabled modules.
Chris PeBenito • 18 years ago  
e0a900
rsync --daemon is long running, and can be run from an init script.
Chris PeBenito • 18 years ago  
de9408
add alsa
Chris PeBenito • 18 years ago  
de8af9
add prelink.
Chris PeBenito • 18 years ago  
2c2435
disable builtin targets except for .c (for fcsort)
Chris PeBenito • 18 years ago  
b8c798
add lockdev
Chris PeBenito • 18 years ago  
1ae2c3
add roundup.
Chris PeBenito • 18 years ago  
7e0fa5
fix
Chris PeBenito • 18 years ago  
7c1011
add usbmodules
Chris PeBenito • 18 years ago  
44f490
fix role
Chris PeBenito • 18 years ago  
e831e4
add screen
Chris PeBenito • 18 years ago  
c8ba68
patch from dan.
Chris PeBenito • 18 years ago  
a77e65
woops
Chris PeBenito • 18 years ago  
5a35c0
add polyinstantiation.
Chris PeBenito • 18 years ago  
b07eae
minor cleanups
Chris PeBenito • 18 years ago  
d163a4
add logwatch
Chris PeBenito • 18 years ago  
020cbe
remove unneeded rule
Chris PeBenito • 18 years ago  
5e98ea
forgot to update changelog for ipsec permission addition.
Chris PeBenito • 18 years ago  
afd38b
part of dan's mega patch
Chris PeBenito • 18 years ago  
bf080a
add irc
Chris PeBenito • 18 years ago  
8cffa7
add setcontext to association class
Chris PeBenito • 18 years ago  
765bd9
fix formatting
Chris PeBenito • 18 years ago  
a317cd
add slrnpull
Chris PeBenito • 18 years ago  
1d427a
add readahead
Chris PeBenito • 18 years ago  
6f11d6
add openct
Chris PeBenito • 18 years ago  
0e8ec4
fix spacing problem
Chris PeBenito • 18 years ago  
56c1de
add ddcprobe
Chris PeBenito • 18 years ago  
871079
add smartmon
Chris PeBenito • 18 years ago  
871b68
fix typo in require block
Chris PeBenito • 18 years ago  
fc4054
give dan credit for adding vbetool module
Chris PeBenito • 18 years ago  
39a17e
another patch from dan
Chris PeBenito • 18 years ago  
cd6676
policy-20051208.patch
Chris PeBenito • 18 years ago  
9cca1c
fixes
Chris PeBenito • 18 years ago  
be1e6e
stuff from dan
Chris PeBenito • 18 years ago  
bb4372
fix errors reported on fedora-se ml
Chris PeBenito • 18 years ago  
4ac451
fix comment
Chris PeBenito • 18 years ago  
0c4bf1
fix ptracing of all domains
Chris PeBenito • 18 years ago  
60caa3
fix interface
Chris PeBenito • 18 years ago  
3b4da4
rename texrel_shlib_t to textrel_shlib_t
Chris PeBenito • 18 years ago  
a324ef
pax mistakenly marked as userspace
Chris PeBenito • 18 years ago  
f2e1f2
add swat to samba, and fix an automount mistake
Chris PeBenito • 18 years ago  
cbe327
bump vers
Chris PeBenito • 18 years ago  
d457d0
add automount
Chris PeBenito • 18 years ago  
7576fa
fix module versions
Chris PeBenito • 18 years ago  
5ea24b
policy-20051208.patch from dan, plus a few adjustments
Chris PeBenito • 18 years ago  
049e11
credit dan for patches
Chris PeBenito • 18 years ago  
b64a0e
make common template
Chris PeBenito • 18 years ago  
8ba1bd
add fetchmail
Chris PeBenito • 18 years ago  
a089b6
fix compile errors
Chris PeBenito • 18 years ago  
9667c1
add sysstat
Chris PeBenito • 18 years ago  
0f73fd
fix typo
Chris PeBenito • 18 years ago  
c0626a
update for release
Chris PeBenito • 18 years ago  
cd1b0b
fix
Chris PeBenito • 18 years ago  
2d54b8
remove testing configuration for release
Chris PeBenito • 18 years ago  
cb1d1e
add unlabeled association rules
Chris PeBenito • 18 years ago  
bd7037
fix module compile issues
Chris PeBenito • 18 years ago  
439aaa
policy-20051114.patch from dan
Chris PeBenito • 18 years ago  
3c8f6b
fix
Chris PeBenito • 18 years ago  
ffd048
updates
Chris PeBenito • 18 years ago  
35bb02
merge systemuser back in to users
Chris PeBenito • 18 years ago  
bdb2fa
clean up
Chris PeBenito • 18 years ago  
fc0e8c
fix dupe interfaces
Chris PeBenito • 19 years ago  
1470ff
add check for duplicate interface/template definitions
Chris PeBenito • 19 years ago  
0176d1
add back rules that were mistakenly removed
Chris PeBenito • 19 years ago  
f525b4
many loadable module build fixes
Chris PeBenito • 19 years ago  
6f81e1
loadable module build fixes
Chris PeBenito • 19 years ago  
757207
move files, corecommands, and domain to kernel layer
Chris PeBenito • 19 years ago  
058f3e
move build options out of Makefile into build.conf
Chris PeBenito • 19 years ago  
8e0ef1
add i18n
Chris PeBenito • 19 years ago  
4093c2
add final bits of spamassassin
Chris PeBenito • 19 years ago  
6820a3
patch from dan
Chris PeBenito • 19 years ago  
78510c
fix several modular build problems
Chris PeBenito • 19 years ago  
9fd4b8
work on users
Chris PeBenito • 19 years ago  
ac9aa2
fix kerberos_use, which turned out to be a problem in dns_reslove
Chris PeBenito • 19 years ago  
574e63
bump rev
Chris PeBenito • 19 years ago  
70fb22
clean up most of the mta hacks
Chris PeBenito • 19 years ago  
1504ff
big cleanup of mta
Chris PeBenito • 19 years ago  
08cd98
add irqbalance
Chris PeBenito • 19 years ago  
5d5ea8
add timidity
Chris PeBenito • 19 years ago  
f11f0c
add rdisc
Chris PeBenito • 19 years ago  
19ff64
add yppasswdd to nis
Chris PeBenito • 19 years ago  
131e57
cleanup from sediff
Chris PeBenito • 19 years ago  
09741b
add xfs
Chris PeBenito • 19 years ago  
3f4188
clean up rpc hack
Chris PeBenito • 19 years ago  
f00434
clean up networkmanager hacks
Chris PeBenito • 19 years ago  
d828b5
fix so empty modules.conf check works
Chris PeBenito • 19 years ago  
cf0ff5
patch from dan to remove rhgb and gph:fd use
Chris PeBenito • 19 years ago  
2629c6
Change optional_policy() to refer to the module name rather than modulename.te.
Chris PeBenito • 19 years ago  
132880
patch from dan
Chris PeBenito • 19 years ago  
af2345
merge makefile changes from branch
Chris PeBenito • 19 years ago  
c767b1
tweaks from dan
Chris PeBenito • 19 years ago  
9cc2cc
fixes from dan
Chris PeBenito • 19 years ago  
95f82b
fix
Chris PeBenito • 19 years ago  
c5c306
add last bits from dan
Chris PeBenito • 19 years ago  
1d697c
updates from dan
Chris PeBenito • 19 years ago  
37ff8f
fix superfluous network rules pointed out by dan walsh, and clean
Chris PeBenito • 19 years ago  
1354ca
fix transitions in and out of unconfined. fix bugs uncovered by rawhide testing
Chris PeBenito • 19 years ago  
704327
missed mls cat update
Chris PeBenito • 19 years ago  
8b4eab
stray procmail execs
Chris PeBenito • 19 years ago  
1dad08
add procmail
Chris PeBenito • 19 years ago  
3e6c81
clean up some hacks
Chris PeBenito • 19 years ago  
c6d4c8
add patch from dan
Chris PeBenito • 19 years ago  
7b062e
role hack for genhomedircon
Chris PeBenito • 19 years ago  
3ed2b6
temp genhomedircon hack
Chris PeBenito • 19 years ago  
de0d26
change dmesg and loadkeys behavior to aliasing, and enable modules
Chris PeBenito • 19 years ago  
9e9138
remove extra rule
Chris PeBenito • 19 years ago  
0d5d74
more broken symptoms
Chris PeBenito • 19 years ago  
15c235
hack
Chris PeBenito • 19 years ago  
af8664
fix type transition conflicts
Chris PeBenito • 19 years ago  
3be48f
fix ordering problem
Chris PeBenito • 19 years ago  
17da25
fix rpm
Chris PeBenito • 19 years ago  
7fefc1
reverse last change
Chris PeBenito • 19 years ago  
175b1c
fix ordering
Chris PeBenito • 19 years ago  
5ae908
add debugging symbols
Chris PeBenito • 19 years ago  
4fe05f
missing fc's
Chris PeBenito • 19 years ago  
33ff9b
update rh broken symptoms
Chris PeBenito • 19 years ago  
3ad26d
add initrc_tmp_t mountpoint
Chris PeBenito • 19 years ago  
a6e32d
fix missing role statements
Chris PeBenito • 19 years ago  
daff1d
small fixes
Chris PeBenito • 19 years ago  
55290a
changed rules fixes
Chris PeBenito • 19 years ago  
2e0a88
work around role dominance breakage in module compiler
Chris PeBenito • 19 years ago  
3797ef
missing matches
Chris PeBenito • 19 years ago  
65b936
reorder to work around module compiler bug
Chris PeBenito • 19 years ago  
672a15
turn off stuff not in original targeted
Chris PeBenito • 19 years ago  
70fe5a
use role dominance in targeted for compatability with strict
Chris PeBenito • 19 years ago  
37c852
fix changed rules
Chris PeBenito • 19 years ago  
1904b0
missing matches
Chris PeBenito • 19 years ago  
c6825e
fc fixes
Chris PeBenito • 19 years ago  
c2e35b
add missing bin_t aliases
Chris PeBenito • 19 years ago  
c646a9
add missing /var/yp match
Chris PeBenito • 19 years ago  
51f374
correct shlib_t alias
Chris PeBenito • 19 years ago  
33faf5
add avahi
Chris PeBenito • 19 years ago  
59a00d
install booelans file on monolithic
Chris PeBenito • 19 years ago  
2ed0d1
dont install booleans file anymore
Chris PeBenito • 19 years ago  
ce1e89
fix to use real type rather than alias
Chris PeBenito • 19 years ago  
e3d21d
fixes for sorting
Chris PeBenito • 19 years ago  
2ab07e
add avahi
Chris PeBenito • 19 years ago  
4b9516
more fix
Chris PeBenito • 19 years ago  
d3f715
tty fixes
Chris PeBenito • 19 years ago  
3e639a
pile of sediff fixes
Chris PeBenito • 19 years ago  
725926
fix sendmail transition
Chris PeBenito • 19 years ago  
76febd
merge in some of dan's old policy changes
Chris PeBenito • 19 years ago  
8967bf
for now don't delete generated files. bring this back
Chris PeBenito • 19 years ago  
cd508d
Changed a { create rw_dir_perms } to a create_dir_perms since starting radius was getting a setattr denial and setattr was shown to be missing in sediff
Don Miner • 19 years ago  
bc6dfa
Added signal_perms to nscd_t.
Don Miner • 19 years ago  
45aa10
missing dir
Chris PeBenito • 19 years ago  
307e11
user tty fixes
Chris PeBenito • 19 years ago  
7afca0
add stuff from distros.fc
Chris PeBenito • 19 years ago  
9c6feb
Added rules so that tracepath, traceroute and ping work.
Don Miner • 19 years ago  
8f882f
fixes just so sediff is easier to handle
Chris PeBenito • 19 years ago  
73ef29
hack
Chris PeBenito • 19 years ago  
b48801
clean up last var_run_domain expansion errors
Chris PeBenito • 19 years ago  
b9ea0f
read certs
Chris PeBenito • 19 years ago  
ee08bc
clean up socket
Chris PeBenito • 19 years ago  
35adb6
fix filesystem associations
Chris PeBenito • 19 years ago  
31a1c2
tty and caps fixes
Chris PeBenito • 19 years ago  
7ac225
more dbus cleanup
Chris PeBenito • 19 years ago  
0b12fa
dbus obj class cleanup
Chris PeBenito • 19 years ago  
dab808
more of the same
Chris PeBenito • 19 years ago  
ce0ff1
initrc couldn't create/use its own pty!
Chris PeBenito • 19 years ago  
b422aa
more fixes
Chris PeBenito • 19 years ago  
30910b
Added a rule to allow dmidecode to use locallogin_t fd to make it so it works.
Don Miner • 19 years ago  
305106
add missing httpd_helper_t tty part
Chris PeBenito • 19 years ago  
aba9c7
misc sediff fixes
Chris PeBenito • 19 years ago  
9ca7e7
* fixes uncovered by sediff
Chris PeBenito • 19 years ago  
0500e0
add missing tunable
Chris PeBenito • 19 years ago  
bea7b4
fix perm set
Chris PeBenito • 19 years ago  
6ff85b
fixes uncovered by sediff
Chris PeBenito • 19 years ago  
628417
nicer te_trans conflict fix
Chris PeBenito • 19 years ago  
f3936d
fix te_trans conflict
Chris PeBenito • 19 years ago  
cac3ec
fix up sendmail for targeted
Chris PeBenito • 19 years ago  
dc8f17
fix
Chris PeBenito • 19 years ago  
f1b0a8
take care of missing types
Chris PeBenito • 19 years ago  
2d13f7
ssh updates for targeted
Chris PeBenito • 19 years ago  
375c24
clean up unused booleans
Chris PeBenito • 19 years ago  
cbdb4a
updated modules.conf from dan
Chris PeBenito • 19 years ago  
bce06f
typo
Chris PeBenito • 19 years ago  
f0f18e
add missing range transition
Chris PeBenito • 19 years ago  
495a70
initrc fixes
Chris PeBenito • 19 years ago  
005a9a
fix quoting
Chris PeBenito • 19 years ago  
7e1c14
fixes from testing
Chris PeBenito • 19 years ago  
dd3544
put all users back into the base module
Chris PeBenito • 19 years ago  
2f33cd
fix some /opt regexes
Chris PeBenito • 19 years ago  
f1baed
dont remove home dir templates from base.fc
Chris PeBenito • 19 years ago  
05c6f0
more transition work
Chris PeBenito • 19 years ago  
08c22f
add some missing transitions from unconfined
Chris PeBenito • 19 years ago  
b281bf
sediff fixes
Chris PeBenito • 19 years ago  
a525f2
fixes from sediff
Chris PeBenito • 19 years ago  
fc6198
rpc fixes from testing
Chris PeBenito • 19 years ago  
ce0383
fixes from testing
Chris PeBenito • 19 years ago  
5abea9
more fixing
Chris PeBenito • 19 years ago  
4614e8
Added search and getattr permissions to etc_mail_t dir for system_mail_t so that the sendmail process would be able to start through init
Don Miner • 19 years ago  
f13da8
another pile o fixes
Chris PeBenito • 19 years ago  
d1b9d9
pile o fixes
Chris PeBenito • 19 years ago  
33acca
fix rpm transition
Chris PeBenito • 19 years ago  
f5e4f7
fixes from arpwatch testing
Chris PeBenito • 19 years ago  
e8d0a6
a few more strays
Chris PeBenito • 19 years ago  
7a6d42
try to fix associations
Chris PeBenito • 19 years ago  
c3cf66
privfd
Chris PeBenito • 19 years ago  
b7e182
easy fixes
Chris PeBenito • 19 years ago  
ccfd7b
missing privloggers
Chris PeBenito • 19 years ago  
2526a4
typo
Chris PeBenito • 19 years ago  
ee64ef
initrc also uses nscd
Chris PeBenito • 19 years ago  
d49d52
add missing nscd clients
Chris PeBenito • 19 years ago  
e11d2e
use our own interface to make maintenance easier
Chris PeBenito • 19 years ago  
2aec14
add default_t read back
Chris PeBenito • 19 years ago  
7eec65
privhome implementation
Chris PeBenito • 19 years ago  
784a3b
testing fixes
Chris PeBenito • 19 years ago  
7b90f2
add dontaudit
Chris PeBenito • 19 years ago  
51f5c6
system_chkpwd can winbind
Chris PeBenito • 19 years ago  
467602
syslog logs to itself?
Chris PeBenito • 19 years ago  
b0bdeb
use the right interface
Chris PeBenito • 19 years ago  
2c216c
some home dir fixes
Chris PeBenito • 19 years ago  
9aca49
appconfig side of su fix
Chris PeBenito • 19 years ago  
240a3a
fix up su
Chris PeBenito • 19 years ago  
83e451
make implicit work
Chris PeBenito • 19 years ago  
a662d2
new semodule_package cmdline args
Chris PeBenito • 19 years ago  
2964dc
fixes
Chris PeBenito • 19 years ago  
60789e
module build fixes
Chris PeBenito • 19 years ago  
28e730
homedir fixes
Chris PeBenito • 19 years ago  
9dd500
more postfix work
Chris PeBenito • 19 years ago  
88dd38
Moved the dbus stuff inbetween networkmanager and bind to the bind policy
Don Miner • 19 years ago  
2192d4
hide broken symptoms
Chris PeBenito • 19 years ago  
3df88d
hide broken symtoms
Chris PeBenito • 19 years ago  
ee7f66
fix acct
Chris PeBenito • 19 years ago  
52e1ed
fix again
Chris PeBenito • 19 years ago  
40a1f3
Fixed an allow that should have been a dontaudit
Don Miner • 19 years ago  
d2c573
add nscd
Chris PeBenito • 19 years ago  
977b1d
fix most disable_trans errors
Chris PeBenito • 19 years ago  
69dcd6
Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages
Don Miner • 19 years ago  
f470a1
Reduced the number of differences in amanda between the targeted and the refpolicy
Don Miner • 19 years ago  
c11417
woops
Chris PeBenito • 19 years ago  
87ab63
fix most of samba
Chris PeBenito • 19 years ago  
671673
Removed differences between refpolicy and targeted acct_t
Don Miner • 19 years ago  
bdfa8e
Removed differences between refpolicy and targeted NetworkManager_t
Don Miner • 19 years ago  
9c4fcf
add proc_net lnk
Chris PeBenito • 19 years ago  
7ebd6a
hopefully fix su
Chris PeBenito • 19 years ago  
b4e1eb
fixes
Chris PeBenito • 19 years ago  
30705b
more fix
Chris PeBenito • 19 years ago  
9bbc75
Fixed a problem which was allowing processes to become unconfined from initrc
Don Miner • 19 years ago  
0354e3
Added rules to the bind policy for the named server so that it would start
Don Miner • 19 years ago  
dd57ca
Added signal permissions to postgres so it can start
Don Miner • 19 years ago  
57d8e6
corenet fixes
Chris PeBenito • 19 years ago  
162dfc
add configuration for testing
Chris PeBenito • 19 years ago  
a3754f
update ranges
Chris PeBenito • 19 years ago  
37fe0e
fix
Chris PeBenito • 19 years ago  
e64b33
fixes from chad
Chris PeBenito • 19 years ago  
9d343a
add
Chris PeBenito • 19 years ago  
88e5d7
remove bin policy and kern module assertions for now
Chris PeBenito • 19 years ago  
15fefa
fix mls r_t
Chris PeBenito • 19 years ago  
1480d3
more sediff
Chris PeBenito • 19 years ago  
34e722
Added rules to the smbd_t and the nmbd_t domains so that they would start properly
Don Miner • 19 years ago  
fa16f2
sediff fixes
Chris PeBenito • 19 years ago  
1dd86c
add initrc_su_t
Chris PeBenito • 19 years ago  
bb6763
Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start
Don Miner • 19 years ago  
3d37bc
more missing types
Chris PeBenito • 19 years ago  
710791
more fixes
Chris PeBenito • 19 years ago  
19b555
add rpc
Chris PeBenito • 19 years ago  
43989f
fixes from sediff
Chris PeBenito • 19 years ago  
2db2c7
Added a file context for httpd.pid so that it is correctly labeled
Don Miner • 19 years ago  
f8964c
nwmgr fixes
Chris PeBenito • 19 years ago  
f85544
add cups
Chris PeBenito • 19 years ago  
ef5ca0
add postfix
Chris PeBenito • 19 years ago  
04926d
add spamassassin
Chris PeBenito • 19 years ago  
f932d8
add radius
Chris PeBenito • 19 years ago  
385dcd
add radius and amanda, which I forgot to ci
Chris PeBenito • 19 years ago  
44fc06
add pegasus
Chris PeBenito • 19 years ago  
230838
add dbskk
Chris PeBenito • 19 years ago  
a63621
add lpd
Chris PeBenito • 19 years ago  
ad3b9d
simplify since alias take care of it
Chris PeBenito • 19 years ago  
ae1d9a
add amanda
Chris PeBenito • 19 years ago  
10b1f3
add networkmanager
Chris PeBenito • 19 years ago  
239db5
woops, radius wasn't actually completed
Chris PeBenito • 19 years ago  
ebed41
expand gen_context() in file contexts
Chris PeBenito • 19 years ago  
ae9017
more sediff fixes
Chris PeBenito • 19 years ago  
1f8a8b
more fixes
Chris PeBenito • 19 years ago  
e6a2ea
sediff fixes
Chris PeBenito • 19 years ago  
da4fc9
add xdm
Chris PeBenito • 19 years ago  
23a444
add canna
Chris PeBenito • 19 years ago  
350948
fix
Chris PeBenito • 19 years ago  
fe7b94
add cyrus
Chris PeBenito • 19 years ago  
ea557a
add all target to build base and modules
Chris PeBenito • 19 years ago  
06a536
add dovecot
Chris PeBenito • 19 years ago  
29ce00
fix corenetwork generation and add distcc
Chris PeBenito • 19 years ago  
cf6141
obj class typo for certs
Chris PeBenito • 19 years ago  
4e69c1
make DISTRO=redhat imply DIRECT_INITRC=y
Chris PeBenito • 19 years ago  
2b01ae
release
Chris PeBenito • 19 years ago  
a4e8b7
add missing entry
Chris PeBenito • 19 years ago  
61feb2
targeted policy fixes
Chris PeBenito • 19 years ago  
de7649
targeted and distro fixes for loadable modules
Chris PeBenito • 19 years ago  
af4752
fix last loadable module problems
Chris PeBenito • 19 years ago  
0efe52
fix requires
Chris PeBenito • 19 years ago  
90c3dd
piles of fixes for loadable modules
Chris PeBenito • 19 years ago  
12ae75
misc fixes
Chris PeBenito • 19 years ago  
c38127
error out if trying to build a module thats off or base
Chris PeBenito • 19 years ago  
843132
add more docs
Chris PeBenito • 19 years ago  
97749e
fix error uncovered by sechecker
Chris PeBenito • 19 years ago  
c3a05c
wrap up almost all of apache
Chris PeBenito • 19 years ago  
e749cd
add ppp
Chris PeBenito • 19 years ago  
e08118
more merging from 1.27.1-15
Chris PeBenito • 19 years ago  
fe9d17
more merging from 1.27.1-15
Chris PeBenito • 19 years ago  
d8636f
partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15
Chris PeBenito • 19 years ago  
77f6e2
add some docs, do some reordering
Chris PeBenito • 19 years ago  
b1421d
add sechecker targets
Chris PeBenito • 19 years ago  
8df65f
start adding perm sets with refpol names
Chris PeBenito • 19 years ago  
c4bf97
add missing interface
Chris PeBenito • 19 years ago  
4c7199
add in last bits of webalizer
Chris PeBenito • 19 years ago  
be4690
more apache work
Chris PeBenito • 19 years ago  
c2b18f
add mailman
Chris PeBenito • 19 years ago  
799a0b
update INSTALL and start work on README
Chris PeBenito • 19 years ago  
fedd3c
add webalizer and sasl
Chris PeBenito • 19 years ago  
f33561
add apm and arpwatch. fix implementation error on fs_getattr_all_files,
Chris PeBenito • 19 years ago  
4483ee
add finger and bluetooth
Chris PeBenito • 19 years ago  
d4dca5
partial mailman merge
Chris PeBenito • 19 years ago  
9d3e33
fix files_exec_usr_src_files
Chris PeBenito • 19 years ago  
99505c
* Updated to sedoctool to read bool files and tunable
Chris PeBenito • 19 years ago  
4f9f30
rename context_template() to gen_context()
Chris PeBenito • 19 years ago  
e02c61
more apache work
Chris PeBenito • 19 years ago  
6e99a6
add ftp
Chris PeBenito • 19 years ago  
fc6524
fix comment
Chris PeBenito • 19 years ago  
5bc9f3
add interfaces used in old anonymous_domain()
Chris PeBenito • 19 years ago  
f4d7fd
add most of apache
Chris PeBenito • 19 years ago  
a996bd
more pieces of ftp
Chris PeBenito • 19 years ago  
a5ec7c
start adding secure_file_type implementation
Chris PeBenito • 19 years ago  
a2868f
add winbind
Chris PeBenito • 19 years ago  
79cde3
add in a couple missing rules
Chris PeBenito • 19 years ago  
694248
add in a few parts of ftp
Chris PeBenito • 19 years ago  
246a60
add dmidecode
Chris PeBenito • 19 years ago  
20e306
add disable_trans support
Chris PeBenito • 19 years ago  
b03f96
a few conditional cleanups
Chris PeBenito • 19 years ago  
1f91e1
add mls privileges
Chris PeBenito • 19 years ago  
f0574f
comment fix
Chris PeBenito • 19 years ago  
6d788d
add anaconda
Chris PeBenito • 19 years ago  
9edc28
rework nis_use_ypbind since optionals dont work in conditionals
Chris PeBenito • 19 years ago  
b9ae3a
add radvd, plus a few cleanups from sediff
Chris PeBenito • 19 years ago  
fa6757
add kudzu
Chris PeBenito • 19 years ago  
842859
remove classes from gen_requires, and disable net_raw for now
Chris PeBenito • 19 years ago  
005841
fixes from sediff
Chris PeBenito • 19 years ago  
681c9a
update for release
Chris PeBenito • 19 years ago  
485586
add uucp
Chris PeBenito • 19 years ago  
f7ba4a
testing fixes
Chris PeBenito • 19 years ago  
b53f93
make system.users look nicer
Chris PeBenito • 19 years ago  
fb2817
fix regex
Chris PeBenito • 19 years ago  
90e497
fix system.users now that the gen_user macro is in support
Chris PeBenito • 19 years ago  
1fb83a
fix for targeted
Chris PeBenito • 19 years ago  
08c5c9
fix for removed example targeted config
Chris PeBenito • 19 years ago  
996ae3
loadable module compile fixes
Chris PeBenito • 19 years ago  
25c674
fix error with file common being output, not file class (unique perms were missing)
Chris PeBenito • 19 years ago  
6e0542
targeted and redhat cleanups
Chris PeBenito • 19 years ago  
142e9f
change monolithic_policy to self_contained_policy for clarity
Chris PeBenito • 19 years ago  
0e15cd
todo cleanup
Chris PeBenito • 19 years ago  
3774e4
add cvs
Chris PeBenito • 19 years ago  
93070c
add cpucontrol
Chris PeBenito • 19 years ago  
921055
add rlogin and telnet
Chris PeBenito • 19 years ago  
4fd520
add appconfig for mls and mcs
Chris PeBenito • 19 years ago  
c0e4fe
add stunnel
Chris PeBenito • 19 years ago  
200f45
final updates from nsa cvs
Chris PeBenito • 19 years ago  
a1fcff
a few module compile fixes
Chris PeBenito • 19 years ago  
41c480
more upstream merging
Chris PeBenito • 19 years ago  
cf6a7d
more upstream merging
Chris PeBenito • 19 years ago  
cff75c
add tftp
Chris PeBenito • 19 years ago  
40adb5
add snmp
Chris PeBenito • 19 years ago  
ccc597
more merging from nsa cvs
Chris PeBenito • 19 years ago  
a08248
more updates
Chris PeBenito • 19 years ago  
98a8ea
more merging from nsa cvs
Chris PeBenito • 19 years ago  
605ba2
cleanup
Chris PeBenito • 19 years ago  
5a2649
add samba
Chris PeBenito • 19 years ago  
84c922
require fix
Chris PeBenito • 19 years ago  
4479b3
fixes for module compiling
Chris PeBenito • 19 years ago  
71fe0f
more merging of NSA CVS policy
Chris PeBenito • 19 years ago  
0907bd
begin merging in upstream NSA CVS changes
Chris PeBenito • 19 years ago  
2705f9
add base mod changelog entry
Chris PeBenito • 19 years ago  
082dcd
fixes to make base module compilable
Chris PeBenito • 19 years ago  
712566
add first part of changes to make base module compilable
Chris PeBenito • 19 years ago  
2e863f
fix sshd to use initrc transition while typeattribute in conditionals is still broken
Chris PeBenito • 19 years ago  
0fdf3e
add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work
Chris PeBenito • 19 years ago  
9ff300
add portmap
Chris PeBenito • 19 years ago  
eb3cb6
add ktalk
Chris PeBenito • 19 years ago  
d17b4d
add missing rules of other domains using inn
Chris PeBenito • 19 years ago  
9b0640
new release
Chris PeBenito • 19 years ago  
541b7d
misc fixes
Chris PeBenito • 19 years ago  
763a5e
add inn
Chris PeBenito • 19 years ago  
8d9352
misc fixes
Chris PeBenito • 19 years ago  
603f90
add ntp
Chris PeBenito • 19 years ago  
b11a75
typo
Chris PeBenito • 19 years ago  
ce1b44
add dictd
Chris PeBenito • 19 years ago  
ac0483
add hal
Chris PeBenito • 19 years ago  
fdae8e
move dhcpd to dhcp
Chris PeBenito • 19 years ago  
f344c0
add squid
Chris PeBenito • 19 years ago  
0f707d
add dhcpd
Chris PeBenito • 19 years ago  
7c8fc3
fix bugs uncovered from sediff
Chris PeBenito • 19 years ago  
9d3bdc
move rhgb_domain into TODO so modules can compile as binary modules
Chris PeBenito • 19 years ago  
c0d156
finish remaining dbus bits
Chris PeBenito • 19 years ago  
631ee4
add dbus
Chris PeBenito • 19 years ago  
0c3d17
fix typos
Chris PeBenito • 19 years ago  
6af06c
cosmetics
Chris PeBenito • 19 years ago  
768283
add comsat. clean up kerberos and nscd interfaces
Chris PeBenito • 19 years ago  
6e6156
fix up most of mta attribute insanity
Chris PeBenito • 19 years ago  
246839
send user role to per userdomain templates. update templated interfaces
Chris PeBenito • 19 years ago  
451c1e
make corecommands required
Chris PeBenito • 19 years ago  
e5d452
doctool display for no interfaces or templates
Chris PeBenito • 19 years ago  
a19e34
update for release
Chris PeBenito • 19 years ago  
37aa3f
update config, switch most to module
Chris PeBenito • 19 years ago  
9439a2
start adding in templated interfaces
Chris PeBenito • 19 years ago  
2a9456
remove bad changelog date
Chris PeBenito • 19 years ago  
d4df0a
add rpm spec skeleton
Chris PeBenito • 19 years ago  
c6299b
fix quoting
Chris PeBenito • 19 years ago  
6d1227
reformat for use in rpm
Chris PeBenito • 19 years ago  
e28aa6
fix tunables
Chris PeBenito • 19 years ago  
3110de
do bools until loadable modules support tunables
Chris PeBenito • 19 years ago  
82024f
add bind
Chris PeBenito • 19 years ago  
d83fda
add privoxy
Chris PeBenito • 19 years ago  
902be0
add rsync
Chris PeBenito • 19 years ago  
35ecf8
add howl
Chris PeBenito • 19 years ago  
f9b11e
move require to right position, for modular policy
Chris PeBenito • 19 years ago  
4b8c54
more comments
Chris PeBenito • 19 years ago  
a6df70
remove comment about monolithic only supported
Chris PeBenito • 19 years ago  
8b75b0
complete infrastructure support for building modules
Chris PeBenito • 19 years ago  
c04f2a
mark userpace object classes
Chris PeBenito • 19 years ago  
db93d7
moved to selinux module
Chris PeBenito • 19 years ago  
f6e28a
for base module, only enable modules actually in it
Chris PeBenito • 19 years ago  
28f032
initial support for compiling loadable modules
Chris PeBenito • 19 years ago  
fb0a3a
add gpm
Chris PeBenito • 19 years ago  
f862c3
add ldap
Chris PeBenito • 19 years ago  
2961e7
cleanup
Chris PeBenito • 19 years ago  
23ca91
add rshd
Chris PeBenito • 19 years ago  
545b0c
add firstboot
Chris PeBenito • 19 years ago  
886907
add firstboot
Chris PeBenito • 19 years ago  
57a96c
more debian cleanup
Chris PeBenito • 19 years ago  
2d803e
make default for optional modules to module instead of base
Chris PeBenito • 19 years ago  
a57379
fix broken xml of previous commit
Chris PeBenito • 19 years ago  
4806a0
try to knock out more of the distro_debian bootloader stuff
Chris PeBenito • 19 years ago  
5f38a6
add loadkeys
Chris PeBenito • 19 years ago  
21468a
more comments
Chris PeBenito • 19 years ago  
884309
all dev nodes assoc to tmpfs, since most everyone is moving to udev
Chris PeBenito • 19 years ago  
f0b1ef
quiet file context validation
Chris PeBenito • 19 years ago  
c5a6dc
fix some udev naming
Chris PeBenito • 19 years ago  
35b494
fix system spool file problem
Chris PeBenito • 19 years ago  
aae06c
remove secdesc since desc is sufficient
Chris PeBenito • 19 years ago  
d06f3c
finalize desc -> summary xml change
Chris PeBenito • 19 years ago  
f7ebea
add tcpd
Chris PeBenito • 19 years ago  
4aa0dc
fix no interface module handling in segenxml
Chris PeBenito • 19 years ago  
e694b5
add quota
Chris PeBenito • 19 years ago  
052c95
tabbing fix
Chris PeBenito • 19 years ago  
5a3895
add sudo
Chris PeBenito • 19 years ago  
e78430
add template xml
Chris PeBenito • 19 years ago  
b9d7d7
add su
Chris PeBenito • 19 years ago  
948914
fix gen_user comment for more clarity
Chris PeBenito • 19 years ago  
946545
add updfstab
Chris PeBenito • 19 years ago  
dce68d
fix xml tags
Chris PeBenito • 19 years ago  
f5e321
a few more ssh touchups
Chris PeBenito • 19 years ago  
7057c1
add tmpreaper
Chris PeBenito • 19 years ago  
ed78ea
add acct
Chris PeBenito • 19 years ago  
9a66d4
misc cleanup
Chris PeBenito • 19 years ago  
3fd833
add mysql
Chris PeBenito • 19 years ago  
42be7c
search sbin dirs to find the pgms
Chris PeBenito • 19 years ago  
046a21
* Rename ipsec connect interface for consistency.
Chris PeBenito • 19 years ago  
81343a
new release
Chris PeBenito • 19 years ago  
52a902
new release
Chris PeBenito • 19 years ago  
6db8e5
add missing
Chris PeBenito • 19 years ago  
60abb5
fix comparison bug
Chris PeBenito • 19 years ago  
cd8fa4
move file context validation to install
Chris PeBenito • 19 years ago  
96a150
fix stray line that got out of TODO
Chris PeBenito • 19 years ago  
bbdbdb
work on user transition
Chris PeBenito • 19 years ago  
e5590e
update
Chris PeBenito • 19 years ago  
c13146
Fix handling of ordered and unordered HTML lists.
Chris PeBenito • 19 years ago  
78d30c
add connect interface on ports to handle name_connect tcp perm
Chris PeBenito • 19 years ago  
022f61
make network_interface able to support multiple interfaces having the same type
Chris PeBenito • 19 years ago  
50527c
update from privmail
Chris PeBenito • 19 years ago  
953541
add an example module config for a targeted policy
Chris PeBenito • 19 years ago  
80526c
/var/lib is now a mountpoint
Chris PeBenito • 19 years ago  
ea7d57
unconfined can pass all constraints
Chris PeBenito • 19 years ago  
53857c
name_connect only on tcp_sockets
Chris PeBenito • 19 years ago  
ef424c
unconfined can name_connect to all ports
Chris PeBenito • 19 years ago  
9496fd
reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface
Chris PeBenito • 19 years ago  
d25063
bah typo
Chris PeBenito • 19 years ago  
f82c6a
user home dirs were missing file type in targ policy
Chris PeBenito • 19 years ago  
0b28a2
add missing dir and file perms for selinuxfs in unconfined
Chris PeBenito • 19 years ago  
1e3f61
fix typos and import some rules from NSA cvs to make targeted policy work
Chris PeBenito • 19 years ago  
689f6d
should actually try compiling first :x
Chris PeBenito • 19 years ago  
474f43
missed a line
Chris PeBenito • 19 years ago  
bd7e7a
add in some rules from NSA CVS to make targeted policy work
Chris PeBenito • 19 years ago  
a28f6d
corenet was missing from unconfined
Chris PeBenito • 19 years ago  
8c3f43
more targeted policy fixes
Chris PeBenito • 19 years ago  
892266
add new netlink socket class
Chris PeBenito • 19 years ago  
21f477
more fixes for targeted
Chris PeBenito • 19 years ago  
ec848d
more cleanup
Chris PeBenito • 19 years ago  
2ec4c9
fixes for targeted policy
Chris PeBenito • 19 years ago  
8b0bbd
fix assertions for framework
Chris PeBenito • 19 years ago  
391ede
more cleanup in system
Chris PeBenito • 19 years ago  
a5f339
fix to use context_template()
Chris PeBenito • 19 years ago  
9f103c
add missing context template
Chris PeBenito • 19 years ago  
3b6174
add raid (mdadm)
Chris PeBenito • 19 years ago  
50aca6
more pcmcia cleanup
Chris PeBenito • 19 years ago  
d9fd8e
add macro to expand object class sets for use in require blocks
Chris PeBenito • 19 years ago  
157c69
* break up files_getattr_all_files into correct interfaces
Chris PeBenito • 19 years ago  
50f650
reorder in alpha order of type, for sanity purposes
Chris PeBenito • 19 years ago  
f136a9
add pcmcia
Chris PeBenito • 19 years ago  
316553
add pcmcia
Chris PeBenito • 19 years ago  
e0d57f
fix up the xml
Chris PeBenito • 19 years ago  
c429cb
add ipsec
Chris PeBenito • 19 years ago  
11633b
add nscd
Chris PeBenito • 19 years ago  
493d6c
* fix chroot exec interface
Chris PeBenito • 19 years ago  
df00b2
add distro tunables. expand on a few comments
Chris PeBenito • 19 years ago  
25a0c6
more cleanup of current TODOs
Chris PeBenito • 19 years ago  
b24f35
fix comments for templates to have same number of # as interfaces
Chris PeBenito • 19 years ago  
20a227
fix xml
Chris PeBenito • 19 years ago  
4051d1
fix more TODOs. fix selinux.te to selinuxutil.te in optionals
Chris PeBenito • 19 years ago  
ae9e27
improve display of tunables and booleans
Chris PeBenito • 19 years ago  
34bbe5
add tun and bool descriptions
Chris PeBenito • 19 years ago  
4d7511
initial global booleans and tunables support. also fix index
Chris PeBenito • 19 years ago  
249d46
another round of TODO cleanup
Chris PeBenito • 19 years ago  
a42ca7
silly formatting fix
Chris PeBenito • 19 years ago  
4d0d41
support for global booleans
Chris PeBenito • 19 years ago  
c11958
* Added support for layer summaries.
Chris PeBenito • 19 years ago  
acb668
tag for 20050707 release
Chris PeBenito • 19 years ago  
58c777
add changelog
Chris PeBenito • 19 years ago  
dfa83e
implement direct_sysadm_daemon
Chris PeBenito • 19 years ago  
e5f806
missing rules uncovered by sediff
Chris PeBenito • 19 years ago  
1aa526
support for targeted policy
Chris PeBenito • 19 years ago  
c98340
put back to strict. will have separate strict and targeted appconfig
Chris PeBenito • 19 years ago  
83ce67
validate file contexts
Chris PeBenito • 19 years ago  
14b25b
ksu moves to su
Chris PeBenito • 19 years ago  
ed1a92
add missing ssh file contexts
Chris PeBenito • 19 years ago  
bb3254
quiet the awk if modules.conf doesnt exist
Chris PeBenito • 19 years ago  
a3fdce
- Removed OUTPUT_VERSION as default.
Karl MacMillan • 19 years ago  
ebb884
update appconfig for unconfined login
Chris PeBenito • 19 years ago  
e17cb8
add unconfined
Chris PeBenito • 19 years ago  
9726b3
fix quoting problem
Chris PeBenito • 19 years ago  
e8f005
fix for new new modules.conf behavior
Chris PeBenito • 19 years ago  
e8b3e3
update for required tag
Chris PeBenito • 19 years ago  
f0cc1a
add required tags
Chris PeBenito • 19 years ago  
274547
add tag for required modules
Chris PeBenito • 19 years ago  
d78fde
convert can_kerberos()
Chris PeBenito • 19 years ago  
a7a979
ul has to be in a p
Chris PeBenito • 19 years ago  
65c861
initial commit
Chris PeBenito • 19 years ago  
5e1ed4
more work on current modules
Chris PeBenito • 19 years ago  
fd89e1
clean up more todos
Chris PeBenito • 19 years ago  
ebdc3b
dont show interface/template hotlinks if the module doesnt have one of them.
Chris PeBenito • 19 years ago  
e8d8fa
make layer summary required
Chris PeBenito • 19 years ago  
d233bf
change messages for missing docs
Chris PeBenito • 19 years ago  
00172f
make interfaces or templates section not shown if empty
Chris PeBenito • 19 years ago  
06c968
another round of renaming, for consistency
Chris PeBenito • 19 years ago  
8fd367
link fix
Chris PeBenito • 19 years ago  
743b65
add logrotate, more low-hanging fruit
Chris PeBenito • 19 years ago  
96ce00
add templates
Chris PeBenito • 19 years ago  
effd58
change desc to summary
Chris PeBenito • 19 years ago  
ceebe3
add comments and error handling
Chris PeBenito • 19 years ago  
896bad
preserve tunable values if tunables.conf exists
Chris PeBenito • 19 years ago  
2d56fd
add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type
Chris PeBenito • 19 years ago  
cbca03
more low hanging fruit cleanup
Chris PeBenito • 19 years ago  
783b38
better handling of whitespace
Chris PeBenito • 19 years ago  
cedae2
change modules.conf behavior to be in line with behavior which will be used in the future for base module
Chris PeBenito • 19 years ago  
19db6b
change modules.conf handling
Chris PeBenito • 19 years ago  
a4c639
add fstools, and more cleanup
Chris PeBenito • 19 years ago  
58c3da
changes to make inetd work
Chris PeBenito • 19 years ago  
80436b
initial commit
Chris PeBenito • 19 years ago  
24bf11
autofs_t and ypbind cleanup
Chris PeBenito • 19 years ago  
ab940a
xml updates and nis stuff
Chris PeBenito • 19 years ago  
e88003
better dummy xml entries
Chris PeBenito • 19 years ago  
f8838e
initial commit
Chris PeBenito • 19 years ago  
73fbc7
add/update comments
Chris PeBenito • 19 years ago  
62a7b0
add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd
Chris PeBenito • 19 years ago  
e81f02
update for new documentation method
Chris PeBenito • 19 years ago  
414e41
more updates
Chris PeBenito • 19 years ago  
aad5b9
a couple output fixes
Chris PeBenito • 19 years ago  
c3a075
update to new commenting style
Chris PeBenito • 19 years ago  
9916c6
move ssh tunables into global_tunables
Chris PeBenito • 19 years ago  
452399
initial commit of segenxml. add support in Makefile
Chris PeBenito • 19 years ago  
95db42
fix
Chris PeBenito • 19 years ago  
19ea99
fix for shortened tags
Chris PeBenito • 19 years ago  
7c2b84
shorten some xml tags
Chris PeBenito • 19 years ago  
261e0e
convert a couple network macros
Chris PeBenito • 19 years ago  
d3b892
more setcurrent stuff
Chris PeBenito • 19 years ago  
007ca5
fixes pointed out by steve, plus fixes revealed by the added assertions
Chris PeBenito • 19 years ago  
2a3478
more work on ssh, plus import ssh-agent
Chris PeBenito • 19 years ago  
9ccd96
move all interfaces over to the interface macro. add traceback debugging info
Chris PeBenito • 19 years ago  
199895
remove remaining _depend macros to prep for switchover to interface declaration macro
Chris PeBenito • 19 years ago  
cbc9d6
initial commit of ssh.
Chris PeBenito • 19 years ago  
0404a3
work on newrole policy
Chris PeBenito • 19 years ago  
21871a
change doctool to bring in line with the xml tag change (layers encapsulate
Chris PeBenito • 19 years ago  
7fb9c1
initial commit
Chris PeBenito • 19 years ago  
e04b8e
XML: encapsulate modules in layers, rather then layer being an attribute of
Chris PeBenito • 19 years ago  
57869a
more work to clean up and complete current modules
Chris PeBenito • 19 years ago  
7a2f20
interface review, and remove net_raw from raw node sends. only give
Chris PeBenito • 19 years ago  
2ba9a7
interface review, and remove net_raw from raw node sends. only give
Chris PeBenito • 19 years ago  
bc1fba
add rw_term_perms
Chris PeBenito • 19 years ago  
c9b7f1
services interfaces review
Chris PeBenito • 19 years ago  
5e6f9e
review of admin interfaces
Chris PeBenito • 19 years ago  
7f2e39
review of system interfaces
Chris PeBenito • 19 years ago  
139520
eliminate _depend macros
Chris PeBenito • 19 years ago  
a7c3a1
misc cleanup
Chris PeBenito • 19 years ago  
0e7216
reorder gpg tunable for alpha sorting
Chris PeBenito • 19 years ago  
562cc2
add a couple more nfs and cifs interfaces, to cover most of the
Chris PeBenito • 19 years ago  
d35c62
eliminate _depend macros
Chris PeBenito • 19 years ago  
77c124
have can_exec add a require block
Chris PeBenito • 19 years ago  
8c2f3a
fix
Chris PeBenito • 19 years ago  
4ce9bd
initialize description to None so missing descriptions dont show wrong data
Chris PeBenito • 19 years ago  
815ff3
add comments for clean and bare
Chris PeBenito • 19 years ago  
102a59
for use until we have a full README
Chris PeBenito • 19 years ago  
337e4a
add install-src target
Chris PeBenito • 19 years ago  
c592e5
initial commit
Chris PeBenito • 19 years ago  
f08f5a
add CFLAGS, and drop -C from install since it doesn't exist in all distros,
Chris PeBenito • 19 years ago  
c7b41e
put user line in col 1, since genhomedircon breaks otherwise
Chris PeBenito • 19 years ago  
8eaa72
initial commit
Chris PeBenito • 19 years ago  
828e03
finish renaming system/selinux to system/selinuxutil
Chris PeBenito • 19 years ago  
5e0da6
move security_t to selinux module
Chris PeBenito • 19 years ago  
ff7bc1
move selinux to selinuxutil
Chris PeBenito • 19 years ago  
be4a80
move constraints interfaces to domain module. move sysfs and usbfs to
Chris PeBenito • 19 years ago  
8bd678
when a generated file is already generated, it shows up in the generated_*
Chris PeBenito • 19 years ago  
8ae194
fix typo
Chris PeBenito • 19 years ago  
810f2b
fix up appconfig, and generate $(installdir)/booleans
Chris PeBenito • 19 years ago  
1beba1
stray renames in distro_redhat
Chris PeBenito • 19 years ago  
b57dd1
fix makefile to only rebuild modules.conf and tunables.conf explicitly
Chris PeBenito • 19 years ago  
d2d6c8
initial commit
Chris PeBenito • 19 years ago  
e75f78
convert relevant conditionals into tunable_policy
Chris PeBenito • 19 years ago  
3eed10
start making genhomedircon work
Chris PeBenito • 19 years ago  
92e928
rename requires_block_template to gen_require
Chris PeBenito • 19 years ago  
c24ac9
rename requires_block_tempalte to gen_require
Chris PeBenito • 19 years ago  
fa7bea
tunables work
Chris PeBenito • 19 years ago  
34c8fa
a few missed renames, and start fixing up tunables
Chris PeBenito • 19 years ago  
31908b
fix
Chris PeBenito • 19 years ago  
94670f
make summary and description optional in interfaces until we can clean it up
Chris PeBenito • 19 years ago  
eec673
rename setattr removable_device_t
Chris PeBenito • 19 years ago  
5a45e7
Updates to documentation.
Karl MacMillan • 19 years ago  
870049
add "this is a generated file!" comment to top of corenetwork.{te,if}
Chris PeBenito • 19 years ago  
61bbe5
ul end tag fix, and css tweak
Chris PeBenito • 19 years ago  
3c6d78
update from method
Chris PeBenito • 19 years ago  
fae6ff
fix xml
Chris PeBenito • 19 years ago  
d9507b
renaming insanity
Chris PeBenito • 19 years ago  
c9428d
overwrite the generated .te file instead of append
Chris PeBenito • 19 years ago  
b2bf0b
Devices rename.
Karl MacMillan • 19 years ago  
f0c985
move policy.xml to doc, so it doesnt get deleted on a make clean
Chris PeBenito • 19 years ago  
12b559
make module description optional and interface summary optional until
Chris PeBenito • 19 years ago  
bec110
html tag updates
Chris PeBenito • 19 years ago  
e214f6
Added missing interface.
Karl MacMillan • 19 years ago  
bef4f0
more updates from method
Chris PeBenito • 19 years ago  
d46f02
renaming insanity
Chris PeBenito • 19 years ago  
0fd9dc
fix can_exec
Chris PeBenito • 19 years ago  
240408
policy.xml is now in tmp/
Chris PeBenito • 19 years ago  
e1db6e
make macro work
Chris PeBenito • 19 years ago  
cab7c0
add can_exec
Chris PeBenito • 19 years ago  
e3fd77
fix
Chris PeBenito • 19 years ago  
1b8d67
Templates for menu ordering change.
Karl MacMillan • 19 years ago  
c75e65
reorder
Chris PeBenito • 19 years ago  
a154cd
Fixed doc tool to order menus.
Karl MacMillan • 19 years ago  
d6b0f3
speed improvement
Chris PeBenito • 19 years ago  
5d9417
kernel.if renaming
Chris PeBenito • 19 years ago  
588ffa
more renaming and xml
Chris PeBenito • 19 years ago  
eda201
rename
Chris PeBenito • 19 years ago  
eca5b2
fix bracket display for optional parameters
Chris PeBenito • 19 years ago  
997bd9
add back html page generation
Chris PeBenito • 19 years ago  
20030e
fixes and remove debug code
Chris PeBenito • 19 years ago  
1601fb
more indentation for modules in the menu
Chris PeBenito • 19 years ago  
fe3bd5
initial commit
Chris PeBenito • 19 years ago  
eb437d
updates
Chris PeBenito • 19 years ago  
5a3299
aliases
Chris PeBenito • 19 years ago  
cc41a9
fix layer in module tag
Chris PeBenito • 19 years ago  
7591e8
rename
Chris PeBenito • 19 years ago  
c6ebef
for now, drop infoflow tags
Chris PeBenito • 19 years ago  
d90b27
make policy.xml depend on all if's being generated
Chris PeBenito • 19 years ago  
16e1cf
aliases
Chris PeBenito • 19 years ago  
dc67f7
aliases
Chris PeBenito • 19 years ago  
0a10b1
renaming and xml
Chris PeBenito • 19 years ago  
fe040c
aliases
Chris PeBenito • 19 years ago  
dd8229
aliases
Chris PeBenito • 19 years ago  
80048c
genhomedircon entries
Chris PeBenito • 19 years ago  
5d3156
initial commit
Chris PeBenito • 19 years ago  
5552ed
better handling of generated files
Chris PeBenito • 19 years ago  
e12e57
make corenetwork generation explicit, rather then on-the-fly
Chris PeBenito • 19 years ago  
f2e4ab
aliasing
Chris PeBenito • 19 years ago  
7edd02
support_modules is finally gone, and modules.disable->modules.conf
Chris PeBenito • 19 years ago  
0350b1
initial commit
Chris PeBenito • 19 years ago  
b29d23
add aliases
Chris PeBenito • 19 years ago  
c2c00b
Moved and changed user_mls to gen_user.
Karl MacMillan • 19 years ago  
72bdc6
Renamed support macros for consistency.
Karl MacMillan • 19 years ago  
eb5e23
make infoflow optional
Chris PeBenito • 19 years ago  
eac7c3
overhaul
Chris PeBenito • 19 years ago  
dc5daf
renaming
Chris PeBenito • 19 years ago  
9f72a2
interface renaming
Chris PeBenito • 19 years ago  
0c5a28
interface renaming
Chris PeBenito • 19 years ago  
1694de
comment fix
Chris PeBenito • 19 years ago  
066d46
more fixes
Chris PeBenito • 19 years ago  
84eb35
add can_exec
Chris PeBenito • 19 years ago  
a71972
start renaming filesystem interfaces
Chris PeBenito • 19 years ago  
763c44
add interface macro
Chris PeBenito • 19 years ago  
a9ec54
fix missing _socket in class
Chris PeBenito • 19 years ago  
b46609
add xml
Chris PeBenito • 19 years ago  
3865d6
more tunable work
Chris PeBenito • 19 years ago  
ddea18
initial commit
Chris PeBenito • 19 years ago  
758618
First cut at fixing fc_sort.
Karl MacMillan • 19 years ago  
6847e8
remove java
Chris PeBenito • 19 years ago  
2224ed
add updated dtd
Chris PeBenito • 19 years ago  
9c25fd
start switching over to new tunable infrastructure
Chris PeBenito • 19 years ago  
254bbc
initial tunable tool fixes
Chris PeBenito • 19 years ago  
3a80ec
32 is space. ascii <= 32 is all whitespace
Chris PeBenito • 19 years ago  
8fb301
initial commit
Chris PeBenito • 19 years ago  
89ec23
start adding module disable and tunable infrastructure
Chris PeBenito • 19 years ago  
0fbe15
initial commit
Chris PeBenito • 19 years ago  
02b584
initial commit
Chris PeBenito • 19 years ago  
43bc39
fix broken macros
Chris PeBenito • 19 years ago  
2d6893
add domain(_auto)_trans
Chris PeBenito • 19 years ago  
a1d2e8
move audit to logging
Chris PeBenito • 19 years ago  
eb7f9a
move to logging
Chris PeBenito • 19 years ago  
ef5e55
fix appconfig dir
Chris PeBenito • 19 years ago  
096933
rework policy build options
Chris PeBenito • 19 years ago  
b67488
change over to some perm set macros. add indentation
Chris PeBenito • 19 years ago  
0c73cd
initial commit of xml->html conversion
Chris PeBenito • 19 years ago  
36e54b
add some indentation
Chris PeBenito • 19 years ago  
419699
change network verb in corenetwork to sendrecv
Chris PeBenito • 19 years ago  
d11566
move fs_use and isids to respective modules
Chris PeBenito • 19 years ago  
cabfa5
start breaking up support_macros into macros dir
Chris PeBenito • 19 years ago  
ca83af
add some comments. make install target install appconfig files
Chris PeBenito • 19 years ago  
44cda5
add missing system_crond_t transition pieces
Chris PeBenito • 19 years ago  
f5d4ef
remove extra whitespace
Chris PeBenito • 19 years ago  
98af6c
move global.if to support_macros at top level
Chris PeBenito • 19 years ago  
de9649
add missing pieces of crond_t -> $1_crond_t transition
Chris PeBenito • 19 years ago  
6d9915
use variable for dtd. move policy type to variant section
Chris PeBenito • 19 years ago  
044735
do dtd verification on xml. fix current xml to be valid
Chris PeBenito • 19 years ago  
004db9
fix policy.xml to not have templates for generated interfaces
Chris PeBenito • 19 years ago  
3c62aa
move user_u and root to users
Chris PeBenito • 19 years ago  
2fc84f
remove copyright until licensing issues are resolved
Chris PeBenito • 19 years ago  
aa4060
better handling of appconfig dir
Chris PeBenito • 19 years ago  
2926f9
fix module name in xml
Chris PeBenito • 19 years ago  
f267df
move flask dir to top level, and update them from nsa cvs. move files in
Chris PeBenito • 19 years ago  
134191
initial commit
Chris PeBenito • 19 years ago  
7555aa
fix xml
Chris PeBenito • 19 years ago  
e32d52
last fixes for cab
Chris PeBenito • 19 years ago  
129318
more cab work
Chris PeBenito • 19 years ago  
d115b2
add some file_t interfaces, and console write
Chris PeBenito • 19 years ago  
3b857e
initial commit
Chris PeBenito • 19 years ago  
b8fca4
initial commit
Chris PeBenito • 19 years ago  
b4c3f5
permission set macro changes, plus more cab related work
Chris PeBenito • 19 years ago  
4bf4ed
fix tmpfs assoc call
Chris PeBenito • 19 years ago  
08eb9d
many fixes from cab work
Chris PeBenito • 19 years ago  
f5c42b
cleanup inspired by sediff
Chris PeBenito • 19 years ago  
32e53a
rpmbuild_t is not a system domain. also mark it as most likely dead.
Chris PeBenito • 19 years ago  
16e9b0
restructure users, and add signalling
Chris PeBenito • 19 years ago  
c6fd1f
tmpfs associate for redhat
Chris PeBenito • 19 years ago  
07da0a
fix ordering and put in var_lib_t
Chris PeBenito • 19 years ago  
dd3163
fixes from cab
Chris PeBenito • 19 years ago  
d490eb
initial commit
Chris PeBenito • 19 years ago  
c22038
many fixes from cab testing
Chris PeBenito • 19 years ago  
efd8ed
add in appconfig files
Chris PeBenito • 19 years ago  
c9a26b
initial commit
Chris PeBenito • 19 years ago  
10abae
cleanup
Chris PeBenito • 19 years ago  
cbeef6
cleanup
Chris PeBenito • 19 years ago  
3b3bf8
initial commit
Chris PeBenito • 19 years ago  
6f3dab
initial commit
Chris PeBenito • 19 years ago  
7d7a36
fix the object class in process transition interfaces
Chris PeBenito • 19 years ago  
e7fcdc
more fixes
Chris PeBenito • 19 years ago  
547283
cleanup for corenetwork interface generation
Chris PeBenito • 19 years ago  
c907b3
a few touchups
Chris PeBenito • 19 years ago  
88c72f
another cleanup pass
Chris PeBenito • 19 years ago  
dc771f
instead of using macros to drop out non-macro calls during corenetwork
Chris PeBenito • 19 years ago  
6276f1
initial commit
Chris PeBenito • 19 years ago  
992aba
stuff from rpm
Chris PeBenito • 19 years ago  
6b48fd
add dontaudit shadow_t getattr
Chris PeBenito • 19 years ago  
57440f
fix tmpfs associate infoflow
Chris PeBenito • 19 years ago  
957e26
move in stuff from rpm
Chris PeBenito • 19 years ago  
392551
add ldconfig and rpm transitions
Chris PeBenito • 19 years ago  
15a961
add missing xml
Chris PeBenito • 19 years ago  
162a57
add tmpfsfile support
Chris PeBenito • 19 years ago  
46410f
add signull all domains
Chris PeBenito • 19 years ago  
1c9f9a
make transition on shell work
Chris PeBenito • 19 years ago  
3000a3
add transitions
Chris PeBenito • 19 years ago  
c43097
add ldconfig
Chris PeBenito • 19 years ago  
48e0db
add mls sensitivity to genfscon, initial sids and fs_use
Chris PeBenito • 19 years ago  
e32c0d
add mls port support
Chris PeBenito • 19 years ago  
0d0d2b
add xml comments to generated sections, and add mls support to interfaces
Chris PeBenito • 19 years ago  
085faa
add xml comments to interfaces, convert over userdomain stuff
Chris PeBenito • 19 years ago  
daa0e0
add context template to support mls
Chris PeBenito • 19 years ago  
bee546
add userdomain:fd use
Chris PeBenito • 19 years ago  
26c87e
add a xml comment
Chris PeBenito • 19 years ago  
490639
add xml
Chris PeBenito • 19 years ago  
2e77b2
fix xml
Chris PeBenito • 19 years ago  
494e98
add xml doc generation
Chris PeBenito • 19 years ago  
6d314f
move run_init to selinux, as it is part of policycoreutils
Chris PeBenito • 19 years ago  
8623d5
rename some selinuxfs interfaces for more clarity
Chris PeBenito • 19 years ago  
178607
add source policy interfaces
Chris PeBenito • 19 years ago  
ef3734
add renice all domains
Chris PeBenito • 19 years ago  
5817e3
add get all filesystems quotas
Chris PeBenito • 19 years ago  
759ba0
add admin template
Chris PeBenito • 19 years ago  
76bff3
add device_node:{ chr_file blk_file } getattr;
Chris PeBenito • 19 years ago  
c3dff2
start adding admin template
Chris PeBenito • 19 years ago  
4d8ddf
change read_shared_libraries to use_shared_libraries, since the execute
Chris PeBenito • 19 years ago  
dd14d0
initial commit
Chris PeBenito • 19 years ago  
650e75
start adding user domains. fix ttynode and ptynode handling, as they're
Chris PeBenito • 19 years ago  
b16c6b
add more parts to send_mail and drop transition since its more then a transition
Chris PeBenito • 19 years ago  
c6a3a2
move make_{daemon,init,system}_domain to init to fix type_transition'ing
Chris PeBenito • 19 years ago  
ff3138
add lvm.fc, and move relevant entries to devices.fc and storage.fc
Chris PeBenito • 19 years ago  
24a7ae
pile of updates
Chris PeBenito • 19 years ago  
7bba9d
initial commit
Chris PeBenito • 19 years ago  
1bde83
additions for cron and mta
Chris PeBenito • 19 years ago  
075c4f
reorg and a fix
Chris PeBenito • 19 years ago  
fd9dee
add crontab
Chris PeBenito • 19 years ago  
d18e3d
add iface creating private logs
Chris PeBenito • 19 years ago  
fb1aee
add make temporary_file and daemon_runtime_file
Chris PeBenito • 19 years ago  
d25dd9
add files_make_temporary_file and remove type attribute from
Chris PeBenito • 19 years ago  
38e24a
fix logging_make_log_file use
Chris PeBenito • 19 years ago  
0b1af2
initial commit
Chris PeBenito • 19 years ago  
23caa6
updates needed for cron
Chris PeBenito • 19 years ago  
24280a
add read and search for etc_t:dir
Chris PeBenito • 19 years ago  
3ec805
make a reasonable lib_t interface
Chris PeBenito • 19 years ago  
118186
reorder for more consistency
Chris PeBenito • 19 years ago  
183227
oops
Chris PeBenito • 19 years ago  
dec168
reorder for more consistency
Chris PeBenito • 19 years ago  
6b6740
initial commit
Chris PeBenito • 19 years ago  
b3416a
leftover from netutils
Chris PeBenito • 19 years ago  
eeb255
initial commit
Chris PeBenito • 19 years ago  
f8ec0a
leftover from modutils
Chris PeBenito • 19 years ago  
63a310
reorder to fit file context style rules
Chris PeBenito • 19 years ago  
279b55
initial commit
Chris PeBenito • 19 years ago  
0f3be6
use ptys
Chris PeBenito • 19 years ago  
6f50b5
fix hotplug optional
Chris PeBenito • 19 years ago  
2812bf
add v4l_device_t
Chris PeBenito • 19 years ago  
35b2fb
add printer_device_t
Chris PeBenito • 19 years ago  
46be1f
more authlogin handling
Chris PeBenito • 19 years ago  
13e94c
move system_chkpwd to .te rather then using template, so that the
Chris PeBenito • 19 years ago  
5c1621
priv* attribute fixes for sulogin
Chris PeBenito • 19 years ago  
cb2873
unexpand can_kerberos
Chris PeBenito • 19 years ago  
c18e82
allow all domains to use /dev/{zero,null,tty}
Chris PeBenito • 19 years ago  
a9a20d
reorder restorecon and setfiles relabel rules for consistency
Chris PeBenito • 19 years ago  
e843cc
clean up authentication attributes
Chris PeBenito • 19 years ago  
a1f94a
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
96b000
start adding infrastructure for the constraint exceptions
Chris PeBenito • 19 years ago  
18f25a
cleanup
Chris PeBenito • 19 years ago  
c5b5a7
add sulogin
Chris PeBenito • 19 years ago  
5d7e8b
initial commit
Chris PeBenito • 19 years ago  
15e3d8
add lvm_vg interfaces and do a little cleanup
Chris PeBenito • 19 years ago  
8e0280
initial commit
Chris PeBenito • 19 years ago  
b2b38c
add read fonts
Chris PeBenito • 19 years ago  
ec81ec
interfaces needed for clock
Chris PeBenito • 19 years ago  
44a43b
initial commit
Chris PeBenito • 19 years ago  
2274f9
add legacy read locale
Chris PeBenito • 19 years ago  
0fef98
fix per_userdomain_templates macro generation
Chris PeBenito • 19 years ago  
0634b6
cleanup
Chris PeBenito • 19 years ago  
ebf760
convert over to system_domain, plus a couple init cleanups
Chris PeBenito • 19 years ago  
bbd6a6
initial commit
Chris PeBenito • 19 years ago  
4fc915
add in system_domain
Chris PeBenito • 19 years ago  
d0eddb
move type delcarations after attribute delcarations to fix a typeattribute
Chris PeBenito • 19 years ago  
f66a1a
fix depends
Chris PeBenito • 19 years ago  
23af43
add missing copyright and policy_module lines
Chris PeBenito • 19 years ago  
df431c
rules picked up from sediff
Chris PeBenito • 19 years ago  
f1470e
add usermanage
Chris PeBenito • 19 years ago  
849380
more conversion
Chris PeBenito • 19 years ago  
1e5c2a
clean up interfaces for new binary module optional structure
Chris PeBenito • 19 years ago  
bd202f
stuff from sysnetwork
Chris PeBenito • 19 years ago  
f1578d
a few more copied over
Chris PeBenito • 19 years ago  
0bc32e
start moving in dhcpc and ifconfig
Chris PeBenito • 19 years ago  
0d7ad3
add in pam console
Chris PeBenito • 19 years ago  
75a10b
more conversion due to new interfaces
Chris PeBenito • 19 years ago  
b2e062
fill pam and utempter authlogin policy and fix up interfaces
Chris PeBenito • 19 years ago  
3ce6cb
reorg run_init a little, and add a convert to a few new interfaces
Chris PeBenito • 19 years ago  
07d6e3
add newrole:fd use
Chris PeBenito • 19 years ago  
ab64c3
updates
Chris PeBenito • 19 years ago  
3a9aef
initial commit
Chris PeBenito • 19 years ago  
6b9383
switch over to tunable_policy and optional_policy
Chris PeBenito • 19 years ago  
25baab
fix stupid _depend define errors (s/ifdef/define/g)
Chris PeBenito • 19 years ago  
f360f8
add ignore read system state
Chris PeBenito • 19 years ago  
67484f
add tty_device_t and devpts_t chr_file interfaces
Chris PeBenito • 19 years ago  
de2cee
add authlogin_read_pam_runtime_data and cleanup interfaces
Chris PeBenito • 19 years ago  
dfaf6c
add ignore read rootfs file
Chris PeBenito • 19 years ago  
9f2f9e
add in use and ignore use init control channel interfaces
Chris PeBenito • 19 years ago  
d0b6ab
handful of changes
Chris PeBenito • 19 years ago  
ba7740
move in rule from hotplug
Chris PeBenito • 19 years ago  
c3c58c
add in missing policy_module line
Chris PeBenito • 19 years ago  
1b9099
domains not needed for execute interface
Chris PeBenito • 19 years ago  
fc83db
add in transition and execute interfaces, and newrole sigchld interface
Chris PeBenito • 19 years ago  
85bd7f
add append to /dev/null write
Chris PeBenito • 19 years ago  
5eafc3
fix privfd
Chris PeBenito • 19 years ago  
e9a6fc
doh
Chris PeBenito • 19 years ago  
4472f3
add in missing devices
Chris PeBenito • 19 years ago  
700988
add a few missing ports, and ppp_device_t
Chris PeBenito • 19 years ago  
05a5cd
initial commit
Chris PeBenito • 19 years ago  
a7ed44
make mountpoints work, plus misc
Chris PeBenito • 19 years ago  
a2d824
initial local login commit
Chris PeBenito • 19 years ago  
07efe9
add bulk of selinux module policy, and add required interfaces
Chris PeBenito • 19 years ago  
ee5772
minor fixes
Chris PeBenito • 19 years ago  
f9cfa1
missed that sysctl_dev is a dir too
Chris PeBenito • 19 years ago  
b58606
convert over optional policy to optional_policy macro
Chris PeBenito • 19 years ago  
300981
add console setattr if
Chris PeBenito • 19 years ago  
55a46d
remove entrypoint assertion
Chris PeBenito • 19 years ago  
4fbd2e
reorganize the policy
Chris PeBenito • 19 years ago  
4600e0
initial commit
Chris PeBenito • 19 years ago  
dfb86a
initial commit
Chris PeBenito • 19 years ago  
b5ab18
start merging in rules from daemon domain
Chris PeBenito • 19 years ago  
55f456
add init_t:fd use interface and initrc pty rw interface
Chris PeBenito • 19 years ago  
889c9a
daemon domain allows noatsecure siginh rlimitinh, not dontaudit
Chris PeBenito • 19 years ago  
bcd359
add console dontaudit
Chris PeBenito • 19 years ago  
811985
initial commit
Chris PeBenito • 19 years ago  
3016a9
add search all dirs
Chris PeBenito • 19 years ago  
f9438f
move system_chkpwd to fix ordering issue with checkpolicy
Chris PeBenito • 19 years ago  
e064a6
add legacy lib use
Chris PeBenito • 19 years ago  
8beec8
add module statement macro and entrypoint executable attribute to replicate
Chris PeBenito • 19 years ago  
960373
fix tmp_domain
Chris PeBenito • 19 years ago  
94edcc
move modules_object_t back to bootloader
Chris PeBenito • 19 years ago  
5f75f5
add sysnetwork
Chris PeBenito • 19 years ago  
91a7ab
add missing transition dontaudits
Chris PeBenito • 19 years ago  
b30304
initial commit
Chris PeBenito • 19 years ago  
549180
attack with sediff, make fs:getattr interfaces consistent, create init and
Chris PeBenito • 19 years ago  
219bcf
restructure kernel module to be consistent with other module ordering. put
Chris PeBenito • 19 years ago  
a266e3
reorg
Chris PeBenito • 19 years ago  
343a23
fix te trans error
Chris PeBenito • 19 years ago  
22e113
make getattr and setattr interfaces and make naming consistent
Chris PeBenito • 19 years ago  
8a0da1
clean up some filesystem assoc
Chris PeBenito • 19 years ago  
33bc0d
complete corenetwork
Chris PeBenito • 19 years ago  
0e730c
insmod can be run directly from kernel; fix update_modules errors
Chris PeBenito • 19 years ago  
1f7b37
exec and transition interfaces, plus include mod object symlinks in reading modules
Chris PeBenito • 19 years ago  
9eb5e8
uncomment test file
Chris PeBenito • 19 years ago  
32b502
add devlog_t symlink to loggers
Chris PeBenito • 19 years ago  
5a9522
logging and modutils updates
Chris PeBenito • 19 years ago  
bf9e1e
rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()
Chris PeBenito • 19 years ago  
033c80
more insmod work, bring in depmod and update_modules
Chris PeBenito • 19 years ago  
7c5d78
more comments
Chris PeBenito • 19 years ago  
bd7646
remove unneeded genfs_contexts
Chris PeBenito • 19 years ago  
099c8b
add copyright statement
Chris PeBenito • 19 years ago  
e181fe
initial commit
Chris PeBenito • 19 years ago  
015435
initial commit
Chris PeBenito • 19 years ago  
879b00
initial commit
Chris PeBenito • 19 years ago  
67e2ff
add cap sys_rawio to raw memory access interfaces
Chris PeBenito • 19 years ago  
f0872d
add per-userdomain template, and shadow_t interfaces
Chris PeBenito • 19 years ago  
c4890e
add all types for this module
Chris PeBenito • 19 years ago  
3ba13b
add all types for this module, and add klogd policy
Chris PeBenito • 19 years ago  
4ddc1a
add interface to send syslog messages
Chris PeBenito • 19 years ago  
8c7717
use interface to send syslog messages
Chris PeBenito • 19 years ago  
5050e5
initial commit
Chris PeBenito • 19 years ago  
b470e3
reorganize and add rootfs dontaudits
Chris PeBenito • 19 years ago  
f05782
add rootfs dontaudits for use in init.te
Chris PeBenito • 19 years ago  
7aebdb
add dontaudit fs getattr
Chris PeBenito • 19 years ago  
053f6a
bring over more targets from strict policy, and add more checking
Chris PeBenito • 19 years ago  
88d14a
kernel can load modules
Chris PeBenito • 19 years ago  
549655
hold off on improving
Chris PeBenito • 19 years ago  
7f89c7
remove relabeling privilege for now
Chris PeBenito • 19 years ago  
1ea98d
move assert.te here
Chris PeBenito • 19 years ago  
57d236
add interface to associate to filesystems w/o xattr. allow regular files to
Chris PeBenito • 19 years ago  
5d7812
add boot_runtime_t
Chris PeBenito • 19 years ago  
70dcf7
initial commit
Chris PeBenito • 19 years ago  
b4cd15

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation