File history - rpms/selinux-policy

fix bad rules in samba, bug 1623

Chris PeBenito • 18 years ago

eeb8ea

stabilize make conf output from erich, bug 1242

Chris PeBenito • 18 years ago

86e869

second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400

Chris PeBenito • 18 years ago

abc73a

first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400

Chris PeBenito • 18 years ago

cdc86e

add openvpn from petre rodan

Chris PeBenito • 18 years ago

2ba3de

add resmgr, bug 1543

Chris PeBenito • 18 years ago

b057be

add semanage transition for unconfined

Chris PeBenito • 18 years ago

e38cb7

add jabber, bug 1529

Chris PeBenito • 18 years ago

61cf53

add perdition, bug 1537

Chris PeBenito • 18 years ago

0cc79f

add speedtouch, bug 1548

Chris PeBenito • 18 years ago

5501be

add transproxy, bug 1549

Chris PeBenito • 18 years ago

fa8951

add uptime, bug 1551

Chris PeBenito • 18 years ago

dfd2c1

add uptime, bug 1551

Chris PeBenito • 18 years ago

4e656a

second part of dans patch Tue, 11 Apr 2006 09:25:24 -0400

Chris PeBenito • 18 years ago

c655ec

first part of dans patch Tue, 11 Apr 2006 09:25:24 -0400

Chris PeBenito • 18 years ago

8cfa5a

missed changelog entry, bug 1520

Chris PeBenito • 18 years ago

03631a

fix up command line module settings

Chris PeBenito • 18 years ago

201445

add courier, bug 1520

Chris PeBenito • 18 years ago

6f8cda

fix assertions

Chris PeBenito • 18 years ago

f82f22

move over to attributes for unconfined interfaces.

Chris PeBenito • 18 years ago

b518fc

add xprint, bug 1553

Chris PeBenito • 18 years ago

5516db

add uwimap, bug 1552

Chris PeBenito • 18 years ago

3eec24

try 4 on rhel4 fixes

Chris PeBenito • 18 years ago

a7c960

try 3 on rhel4 fixes

Chris PeBenito • 18 years ago

5d92a2

try 2 on rhel4 fixes

Chris PeBenito • 18 years ago

a3e785

fixes for rhel4 genhomedircon.

Chris PeBenito • 18 years ago

185ab2

move xconsole to xserver mod

Chris PeBenito • 18 years ago

413982

make .te and .fc files optional by touching them if they are missing.

Chris PeBenito • 18 years ago

0578bf

remove devfs_control_t

Chris PeBenito • 18 years ago

fc70c9

add nagios, bug 1531

Chris PeBenito • 18 years ago

f1e604

add nessus, bug 1532

Chris PeBenito • 18 years ago

a478b5

really fix

Chris PeBenito • 18 years ago

70de70

really fix init out of base module problem

Chris PeBenito • 18 years ago

27c34b

add pxe, bug 1540

Chris PeBenito • 18 years ago

3411c3

add snort, bug 1546

Chris PeBenito • 18 years ago

e55160

add postgrey

Chris PeBenito • 18 years ago

7f9ebb

add qmail

Chris PeBenito • 18 years ago

65e131

fix some textrel libs on fc

Chris PeBenito • 18 years ago

baec64

fix typo pointed out by james

Chris PeBenito • 18 years ago

4a1180

TODO cleanup

Chris PeBenito • 18 years ago

3b9147

add dante, bug 1521

Chris PeBenito • 18 years ago

189631

add back newrole functionality in rhel4

Chris PeBenito • 18 years ago

58a382

add distro rhel4

Chris PeBenito • 18 years ago

2f1a8f

fix typo seen by jathey

Chris PeBenito • 18 years ago

b19257

patch from dan Wed, 29 Mar 2006 15:32:51 -0500

Chris PeBenito • 18 years ago

724925

bump rev

Chris PeBenito • 18 years ago

fa2c74

move su_exec_t decl back to su module.

Chris PeBenito • 18 years ago

f3ac5e

remove stray bit from old su-newrole

Chris PeBenito • 18 years ago

be0b1b

make fs use its own interfaces.

Chris PeBenito • 18 years ago

da14da

semodule needs to manage the file contexts

Chris PeBenito • 18 years ago

55b190

Constrain transitions in MCS so unconfined_t cannot have arbitrary category sets.

Chris PeBenito • 18 years ago

9779f0

change reiserfs from xattr to genfscon

Chris PeBenito • 18 years ago

d2a903

clean up formatting

Chris PeBenito • 18 years ago

8e788e

cleanups

Chris PeBenito • 18 years ago

41b25f

add extra dep to init_t interfaces since init_t is in base module right now.

Chris PeBenito • 18 years ago

bcdcc5

bump rev

Chris PeBenito • 18 years ago

1ce7f6

use device_node attribute instead of individual calls per type

Chris PeBenito • 18 years ago

28567a

clean up to make files use its own interfaces.

Chris PeBenito • 18 years ago

a65611

cleanup

Chris PeBenito • 18 years ago

3a1fb3

add user fonts to xserver.

Chris PeBenito • 18 years ago

178647

remove unneeded gen_require in can_exec

Chris PeBenito • 18 years ago

a5d546

make interfaces expand now that they aren't ifdef'd away

Chris PeBenito • 18 years ago

ab23bb

add cipe, bug 1519.

Chris PeBenito • 18 years ago

096ae6

Additional interfaces in corecommands, miscfiles, and userdomain from Joy Latten.

Chris PeBenito • 18 years ago

d42c7e

fixes from thomas bleher Fri, 24 Mar 2006 13:25:54 +0100

Chris PeBenito • 18 years ago

8b2d5c

deprecate module name as first parameter of optional_policy()

Chris PeBenito • 18 years ago

bb7170

enable optionals in base/monolithic

Chris PeBenito • 18 years ago

0db866

add hidd

Chris PeBenito • 18 years ago

7fd9a6

fix vpn module declaration.

Chris PeBenito • 18 years ago

ac6cff

patch from dan Fri, 17 Mar 2006 15:22:53 -0500

Chris PeBenito • 18 years ago

a3cf80

comment fix

Chris PeBenito • 18 years ago

dcd174

add in full permission sets now that it will be used for require blocks.

Chris PeBenito • 18 years ago

701316

add calamaris, bug 1518

Chris PeBenito • 18 years ago

99c902

add audioentropy, bug 1515

Chris PeBenito • 18 years ago

7f74a4

work around locale weirdness in FC that affects sort.

Chris PeBenito • 18 years ago

f62f4c

add games, bug 1386

Chris PeBenito • 18 years ago

fbc0a2

move typealias statements up too

Chris PeBenito • 18 years ago

b67faf

fix most missing entries from bug 1567

Chris PeBenito • 18 years ago

3dbceb

sort to get all attribute declarations above type declarations.

Chris PeBenito • 18 years ago

35d085

gentoo fixes

Chris PeBenito • 18 years ago

ce6c13

Change build order to preserve m4 line number information so policy compile errors are useful again.

Chris PeBenito • 18 years ago

3abd5e

fix misname of template

Chris PeBenito • 18 years ago

c28caf

add listen and accept to tcp_sock

Chris PeBenito • 18 years ago

aa5f87

additional mls interfaces from chad hanson.

Chris PeBenito • 18 years ago

405efe

fix explicit dep of policy.conf

Chris PeBenito • 18 years ago

efc94a

add ethereal, bug 1383

Chris PeBenito • 18 years ago

0834f9

remove unneeded rule

Chris PeBenito • 18 years ago

7400d1

add ssp patch and move some domain_(base_)?_type() rules to the TE file.

Chris PeBenito • 18 years ago

3cfd48

add comment so this bit can be fixed.

Chris PeBenito • 18 years ago

3b3933

fix temporary rules in portmap, bug 1467

Chris PeBenito • 18 years ago

e78c77

fix missing dep

Chris PeBenito • 18 years ago

49b41c

add evolution, bug 1384

Chris PeBenito • 18 years ago

edf241

add mozilla bug 1396

Chris PeBenito • 18 years ago

9105f9

updated mls comments from chad hanson

Chris PeBenito • 18 years ago

63e0a1

add mplayer

Chris PeBenito • 18 years ago

77b81c

add rhgb

Chris PeBenito • 18 years ago

c8d5b3

fix typo

Chris PeBenito • 18 years ago

3bb0a3

add thunderbird

Chris PeBenito • 18 years ago

185272

add apt and dpkg from erich schubert

Chris PeBenito • 18 years ago

0c54fc

add amavis and clamav from Erich Schubert

Chris PeBenito • 18 years ago

8a0a99

add tor module from Erich Schubert

Chris PeBenito • 18 years ago

ce3145

add a few missing bits

Chris PeBenito • 18 years ago

a4bbe3

update for release

Chris PeBenito • 18 years ago

0fc3e1

scripts are loaded by the interpreter rather than ran directly

Chris PeBenito • 18 years ago

1e1d12

bump version numbers for release

Chris PeBenito • 18 years ago

2b3c99

add missing rules

Chris PeBenito • 18 years ago

32e6fc

add unconfigured modules to OFF_MODS, and change APPS_ON to APPS_BASE

Chris PeBenito • 18 years ago

87e73c

fix typo

Chris PeBenito • 18 years ago

72ed29

move bootloader to admin

Chris PeBenito • 18 years ago

e5a602

make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames.

Chris PeBenito • 18 years ago

1c1ac6

make sure booleans get in to booleans.conf

Chris PeBenito • 18 years ago

13a494

patch from dan Thu, 23 Feb 2006 14:26:05 -0500

Chris PeBenito • 18 years ago

0f27d9

add interfaces to eventually clean up the storage_create_fixed_disk(_tmpfs)?() mess

Chris PeBenito • 18 years ago

675a0e

patch from dan Mon, 20 Feb 2006 17:19:34 -0500

Chris PeBenito • 18 years ago

02bcb8

try to be smarter about NAME

Chris PeBenito • 18 years ago

794a56

add default headerdir in case users try to make -C instead of using the makefile.example.

Chris PeBenito • 18 years ago

6a7380

another round of renaming

Chris PeBenito • 18 years ago

103fe2

add gentoo integrated run init

Chris PeBenito • 18 years ago

2283dc

fix tmp dir usage

Chris PeBenito • 18 years ago

4ca6d0

another round of renaming

Chris PeBenito • 18 years ago

15722e

fix most templated interface calls outside of templates

Chris PeBenito • 18 years ago

0eba5d

patch from dan Sun, 19 Feb 2006 08:16:18 -0500

Chris PeBenito • 18 years ago

46c69c

clean up most of user subdir mess

Chris PeBenito • 18 years ago

4a02d3

fix up cron_crw_tcp_socket()

Chris PeBenito • 18 years ago

e1ee92

second colon not needed for mls-disabled policies.

Chris PeBenito • 18 years ago

b9e6c4

Remove allow_execmem from targeted policy domain_base_type().

Chris PeBenito • 18 years ago

3eea55

fix bad interface calls

Chris PeBenito • 18 years ago

a39525

fix build.conf inclusion for local policies, add xml build target, nicen eching.

Chris PeBenito • 18 years ago

1a7175

nicen echoing

Chris PeBenito • 18 years ago

58b2a3

fix default user line

Chris PeBenito • 18 years ago

8d1111

add missing verbose to fc_sort and add target for generated files

Chris PeBenito • 18 years ago

fffba0

add uml, plus two renames in corenet

Chris PeBenito • 18 years ago

5b6ddb

add missing vpath and .pp build dir for modules in local layers

Chris PeBenito • 18 years ago

ad8af2

fix dependency for install-headers

Chris PeBenito • 18 years ago

3d5980

patch from dan Tue, 14 Feb 2006 09:01:16 -0500

Chris PeBenito • 18 years ago

8cf671

fix regression; remove unneeded ROOT and make BUILDDIR have a / if its set.

Chris PeBenito • 18 years ago

5b45ff

remove unneeded dep

Chris PeBenito • 18 years ago

988a44

reverse

Chris PeBenito • 18 years ago

b389cd

remove unneeded dep

Chris PeBenito • 18 years ago

fcfe68

add seusers support

Chris PeBenito • 18 years ago

ace368

make default action build all packages, like the comment says

Chris PeBenito • 18 years ago

ddb9aa

add users_extra support

Chris PeBenito • 18 years ago

90b331

remove unneeded LOCAL_LAYERS variable

Chris PeBenito • 18 years ago

e2680f

make html target create tmp dir

Chris PeBenito • 18 years ago

81a18f

fix headers install path problem, segenxml.py variable problem, change set_tunables into a standalone awk script.

Chris PeBenito • 18 years ago

d6cf05

add missing endlines

Chris PeBenito • 18 years ago

3a68d0

merge external modules makefile changes

Chris PeBenito • 18 years ago

c9f20d

implement x_client_domain replacement

Chris PeBenito • 18 years ago

24a637

update for serge's fix

Chris PeBenito • 18 years ago

0062f9

clean up patch from Serge Fri, 10 Feb 2006 18:01:06 -0600

Chris PeBenito • 18 years ago

807a77

patch from dan Thu, 09 Feb 2006 13:39:41 -0500

Chris PeBenito • 18 years ago

b0d224

do not remove intermediate files

Chris PeBenito • 18 years ago

e60b98

a few fixes

Chris PeBenito • 18 years ago

0e686f

xml building changes, add desc tag to booleans, add summary tag to bools

Chris PeBenito • 18 years ago

885b83

patch from Serge Hallyn Thu, 09 Feb 2006 13:42:36 -0600, plus fix the rules in the TODO.

Chris PeBenito • 18 years ago

977840

fix process object class assertion for hierarchy

Chris PeBenito • 18 years ago

e0dfbd

add rpm install instructions

Chris PeBenito • 18 years ago

4ef756

work on xdm

Chris PeBenito • 18 years ago

5a975c

patch from dan Wed, 01 Feb 2006 08:33:30 -0500

Chris PeBenito • 18 years ago

955019

fix sendto

Chris PeBenito • 18 years ago

37f15c

a couple init renames

Chris PeBenito • 18 years ago

f75479

fix kernel_relabel_unlabeled()

Chris PeBenito • 18 years ago

c66a3a

remove redundant userdom_manage_generic_user_home_dir interface

Chris PeBenito • 18 years ago

cd07ea

remove lvm_vg_t

Chris PeBenito • 18 years ago

017bab

clean up userdom_create_user_home()

Chris PeBenito • 18 years ago

9417cb

fix userdom_create_sysadm_home

Chris PeBenito • 18 years ago

ee9500

another slew of renaming

Chris PeBenito • 18 years ago

1815ba

fix optional in fc, move contexts to their proper modules

Chris PeBenito • 18 years ago

46112f

fix compile problem

Chris PeBenito • 18 years ago

3284fb

fix a few fcs

Chris PeBenito • 18 years ago

8ff553

merge tvtime to trunk

Chris PeBenito • 18 years ago

b77d01

forgot to add if renaming to changelog

Chris PeBenito • 18 years ago

ffd5c3

remove unneeded gen_require_set() macro

Chris PeBenito • 18 years ago

e52af2

move example makefile to doc

Chris PeBenito • 18 years ago

5bd1a7

genhomedircon stuff only for strict

Chris PeBenito • 18 years ago

6018e9

genhomedircon stuff only for strict

Chris PeBenito • 18 years ago

6bc40e

install-docs target, consolidate relabeling

Chris PeBenito • 18 years ago

120988

add example module.

Chris PeBenito • 18 years ago

6bb0da

fix for lineno and filename attributes

Chris PeBenito • 18 years ago

bff1ce

fix xml

Chris PeBenito • 18 years ago

fe2102

add mrtg, bug 1394

Chris PeBenito • 18 years ago

679626

renaming from 20060131 interface review, round 4

Chris PeBenito • 18 years ago

4d851f

renaming from 20060131 interface review, round 3

Chris PeBenito • 18 years ago

9e04f5

renaming from 20060131 interface review, round 2

Chris PeBenito • 18 years ago

445522

renaming from 20060131 interface review

Chris PeBenito • 18 years ago

207c47

fix documentation

Chris PeBenito • 18 years ago

157610

merge xdm into xserver

Chris PeBenito • 18 years ago

0f5d13

remove kernel module reversed interfaces.

Chris PeBenito • 18 years ago

18cc01

remove all class remaining lines with kernel object classes.

Chris PeBenito • 18 years ago

6ada25

patch from dan Fri, 27 Jan 2006 01:37:19 -0500

Chris PeBenito • 18 years ago

51a89c

from today's interface review meeting:

Chris PeBenito • 18 years ago

270d42

add line number and file name to xml, from selide people

Chris PeBenito • 18 years ago

585076

add headers and outside tree building support

Chris PeBenito • 18 years ago

9b3756

add text for rolemap

Chris PeBenito • 18 years ago

6259d8

improve comments

Chris PeBenito • 18 years ago

8c4989

add rolemap/per-userdomain infrastructure

Chris PeBenito • 18 years ago

4ace0f

remove newrole privs from su and sudo

Chris PeBenito • 18 years ago

5e4cbc

override doesnt do anything for +=, use ?= assignment to simplify NAME assignment.

Chris PeBenito • 18 years ago

3f026a

nicer way of doing fallback

Chris PeBenito • 18 years ago

a4fae7

Add ctags Make target from Thomas Bleher.

Chris PeBenito • 18 years ago

37227d

patch from dan

Chris PeBenito • 18 years ago

a52492

fix xml

Chris PeBenito • 18 years ago

59d721

add fix for secadm_r. I dont like this, but it can be straightened out later.

Chris PeBenito • 18 years ago

ba35e4

reverse last change

Chris PeBenito • 18 years ago

18d59e

cleanup

Chris PeBenito • 18 years ago

6b5c92

fix EOL extra space

Chris PeBenito • 18 years ago

c43ecf

Collapse commands with grep piped to sed into one sed command.

Chris PeBenito • 18 years ago

7dca64

remove unneeded dependency for generated_definitions.conf

Chris PeBenito • 18 years ago

6b1c8e

fix sshd

Chris PeBenito • 18 years ago

f6abfd

add missing if

Chris PeBenito • 18 years ago

d14c0e

fix user pty type_change

Chris PeBenito • 18 years ago

1e786e

more xdm work

Chris PeBenito • 18 years ago

07620c

last bits of xserver

Chris PeBenito • 18 years ago

3b3113

add xauth and iceauth to xserver

Chris PeBenito • 18 years ago

acd87c

work on xdm

Chris PeBenito • 18 years ago

dace0b

identity changes from dan

Chris PeBenito • 18 years ago

924c0f

patch from Dan, sent Thu, 19 Jan 2006 14:16:26 -0500

Chris PeBenito • 18 years ago

a225f9

fixes from serge

Chris PeBenito • 18 years ago

85c20a

forgot to bump version

Chris PeBenito • 18 years ago

55f1ef

add xserver

Chris PeBenito • 18 years ago

488ec7

login fixes and pieces of xserver

Chris PeBenito • 18 years ago

2ce6b0

formatting fixes

Chris PeBenito • 18 years ago

c1904d

add execstack and execheap to unconfined domain exclusion

Chris PeBenito • 18 years ago

edb77e

hopefuly final fix for run_init

Chris PeBenito • 18 years ago

a49e2b

move certwatch to admin, its not a daemon

Chris PeBenito • 18 years ago

92268c

give info message for make html

Chris PeBenito • 18 years ago

2de03f

add lpr policy to lpd

Chris PeBenito • 18 years ago

8dca6b

add certwatch

Chris PeBenito • 18 years ago

2bcdbd

fixes from dan

Chris PeBenito • 18 years ago

0a7728

Change initrc_var_run_t interface noun from script_pid to utmp for clarity.

Chris PeBenito • 18 years ago

68228b

there is no initrc_var_run_t:dir

Chris PeBenito • 18 years ago

b94cc1

add userhelper

Chris PeBenito • 18 years ago

7c2f5a

really fix the build problems

Chris PeBenito • 18 years ago

6d1409

fix compile errors

Chris PeBenito • 18 years ago

625cae

move stray bin_t entry

Chris PeBenito • 18 years ago

6b86ef

add portage from gentoo

Chris PeBenito • 18 years ago

e1c414

fix run_init constraint problem

Chris PeBenito • 18 years ago

fe9b05

add usernetctl.

Chris PeBenito • 18 years ago

8cc494

update for release.

Chris PeBenito • 18 years ago

22cb0b

bump versions for release.

Chris PeBenito • 18 years ago

d3d270

patch from dan 1/16/06

Chris PeBenito • 18 years ago

93727e

fix encapsulation problem

Chris PeBenito • 18 years ago

cc5df2

fix module building problems.

Chris PeBenito • 18 years ago

76b519

fix typos and formatting

Chris PeBenito • 18 years ago

f40b36

add corenet patch from spencer

Chris PeBenito • 18 years ago

b7b1d2

add daemontools, djbdns, publicfile, and ucspitcp from Petre Rodan.

Chris PeBenito • 18 years ago

44d5d9

add slocate from dan

Chris PeBenito • 18 years ago

6a57b6

rename create verb to filetrans for type transitioning ifs

Chris PeBenito • 18 years ago

9d5949

fix comments, clean out object classes

Chris PeBenito • 18 years ago

836929

interface-ize screen fixes

Chris PeBenito • 18 years ago

22d2e2

fix comments

Chris PeBenito • 18 years ago

460e05

fixes to make screen work

Chris PeBenito • 18 years ago

038bd3

add cdrecord

Chris PeBenito • 18 years ago

4ec694

add java

Chris PeBenito • 18 years ago

3ffe29

fix alignment

Chris PeBenito • 18 years ago

c5af97

fix expansion of interfaces from disabled modules.

Chris PeBenito • 18 years ago

e0a900

rsync --daemon is long running, and can be run from an init script.

Chris PeBenito • 18 years ago

de9408

add alsa

Chris PeBenito • 18 years ago

de8af9

add prelink.

Chris PeBenito • 18 years ago

2c2435

disable builtin targets except for .c (for fcsort)

Chris PeBenito • 18 years ago

b8c798

add lockdev

Chris PeBenito • 18 years ago

1ae2c3

add roundup.

Chris PeBenito • 18 years ago

7e0fa5

fix

Chris PeBenito • 18 years ago

7c1011

add usbmodules

Chris PeBenito • 18 years ago

44f490

fix role

Chris PeBenito • 18 years ago

e831e4

add screen

Chris PeBenito • 18 years ago

c8ba68

patch from dan.

Chris PeBenito • 18 years ago

a77e65

woops

Chris PeBenito • 18 years ago

5a35c0

add polyinstantiation.

Chris PeBenito • 18 years ago

b07eae

minor cleanups

Chris PeBenito • 18 years ago

d163a4

add logwatch

Chris PeBenito • 18 years ago

020cbe

remove unneeded rule

Chris PeBenito • 18 years ago

5e98ea

forgot to update changelog for ipsec permission addition.

Chris PeBenito • 18 years ago

afd38b

part of dan's mega patch

Chris PeBenito • 18 years ago

bf080a

add irc

Chris PeBenito • 18 years ago

8cffa7

add setcontext to association class

Chris PeBenito • 18 years ago

765bd9

fix formatting

Chris PeBenito • 18 years ago

a317cd

add slrnpull

Chris PeBenito • 18 years ago

1d427a

add readahead

Chris PeBenito • 18 years ago

6f11d6

add openct

Chris PeBenito • 18 years ago

0e8ec4

fix spacing problem

Chris PeBenito • 18 years ago

56c1de

add ddcprobe

Chris PeBenito • 18 years ago

871079

add smartmon

Chris PeBenito • 18 years ago

871b68

fix typo in require block

Chris PeBenito • 18 years ago

fc4054

give dan credit for adding vbetool module

Chris PeBenito • 18 years ago

39a17e

another patch from dan

Chris PeBenito • 18 years ago

cd6676

policy-20051208.patch

Chris PeBenito • 18 years ago

9cca1c

fixes

Chris PeBenito • 18 years ago

be1e6e

stuff from dan

Chris PeBenito • 18 years ago

bb4372

fix errors reported on fedora-se ml

Chris PeBenito • 18 years ago

4ac451

fix comment

Chris PeBenito • 18 years ago

0c4bf1

fix ptracing of all domains

Chris PeBenito • 18 years ago

60caa3

fix interface

Chris PeBenito • 18 years ago

3b4da4

rename texrel_shlib_t to textrel_shlib_t

Chris PeBenito • 18 years ago

a324ef

pax mistakenly marked as userspace

Chris PeBenito • 18 years ago

f2e1f2

add swat to samba, and fix an automount mistake

Chris PeBenito • 18 years ago

cbe327

bump vers

Chris PeBenito • 18 years ago

d457d0

add automount

Chris PeBenito • 18 years ago

7576fa

fix module versions

Chris PeBenito • 18 years ago

5ea24b

policy-20051208.patch from dan, plus a few adjustments

Chris PeBenito • 18 years ago

049e11

credit dan for patches

Chris PeBenito • 18 years ago

b64a0e

make common template

Chris PeBenito • 18 years ago

8ba1bd

add fetchmail

Chris PeBenito • 18 years ago

a089b6

fix compile errors

Chris PeBenito • 18 years ago

9667c1

add sysstat

Chris PeBenito • 18 years ago

0f73fd

fix typo

Chris PeBenito • 18 years ago

c0626a

update for release

Chris PeBenito • 18 years ago

cd1b0b

fix

Chris PeBenito • 18 years ago

2d54b8

remove testing configuration for release

Chris PeBenito • 18 years ago

cb1d1e

add unlabeled association rules

Chris PeBenito • 18 years ago

bd7037

fix module compile issues

Chris PeBenito • 18 years ago

439aaa

policy-20051114.patch from dan

Chris PeBenito • 18 years ago

3c8f6b

fix

Chris PeBenito • 18 years ago

ffd048

updates

Chris PeBenito • 18 years ago

35bb02

merge systemuser back in to users

Chris PeBenito • 18 years ago

bdb2fa

clean up

Chris PeBenito • 18 years ago

fc0e8c

fix dupe interfaces

Chris PeBenito • 18 years ago

1470ff

add check for duplicate interface/template definitions

Chris PeBenito • 18 years ago

0176d1

add back rules that were mistakenly removed

Chris PeBenito • 18 years ago

f525b4

many loadable module build fixes

Chris PeBenito • 18 years ago

6f81e1

loadable module build fixes

Chris PeBenito • 18 years ago

757207

move files, corecommands, and domain to kernel layer

Chris PeBenito • 18 years ago

058f3e

move build options out of Makefile into build.conf

Chris PeBenito • 18 years ago

8e0ef1

add i18n

Chris PeBenito • 18 years ago

4093c2

add final bits of spamassassin

Chris PeBenito • 18 years ago

6820a3

patch from dan

Chris PeBenito • 18 years ago

78510c

fix several modular build problems

Chris PeBenito • 18 years ago

9fd4b8

work on users

Chris PeBenito • 18 years ago

ac9aa2

fix kerberos_use, which turned out to be a problem in dns_reslove

Chris PeBenito • 18 years ago

574e63

bump rev

Chris PeBenito • 18 years ago

70fb22

clean up most of the mta hacks

Chris PeBenito • 18 years ago

1504ff

big cleanup of mta

Chris PeBenito • 18 years ago

08cd98

add irqbalance

Chris PeBenito • 18 years ago

5d5ea8

add timidity

Chris PeBenito • 18 years ago

f11f0c

add rdisc

Chris PeBenito • 18 years ago

19ff64

add yppasswdd to nis

Chris PeBenito • 18 years ago

131e57

cleanup from sediff

Chris PeBenito • 18 years ago

09741b

add xfs

Chris PeBenito • 18 years ago

3f4188

clean up rpc hack

Chris PeBenito • 18 years ago

f00434

clean up networkmanager hacks

Chris PeBenito • 18 years ago

d828b5

fix so empty modules.conf check works

Chris PeBenito • 18 years ago

cf0ff5

patch from dan to remove rhgb and gph:fd use

Chris PeBenito • 18 years ago

2629c6

Change optional_policy() to refer to the module name rather than modulename.te.

Chris PeBenito • 18 years ago

132880

patch from dan

Chris PeBenito • 18 years ago

af2345

merge makefile changes from branch

Chris PeBenito • 18 years ago

c767b1

tweaks from dan

Chris PeBenito • 18 years ago

9cc2cc

fixes from dan

Chris PeBenito • 18 years ago

95f82b

fix

Chris PeBenito • 18 years ago

c5c306

add last bits from dan

Chris PeBenito • 18 years ago

1d697c

updates from dan

Chris PeBenito • 18 years ago

37ff8f

fix superfluous network rules pointed out by dan walsh, and clean

Chris PeBenito • 18 years ago

1354ca

fix transitions in and out of unconfined. fix bugs uncovered by rawhide testing

Chris PeBenito • 18 years ago

704327

missed mls cat update

Chris PeBenito • 18 years ago

8b4eab

stray procmail execs

Chris PeBenito • 19 years ago

1dad08

add procmail

Chris PeBenito • 19 years ago

3e6c81

clean up some hacks

Chris PeBenito • 19 years ago

c6d4c8

add patch from dan

Chris PeBenito • 19 years ago

7b062e

role hack for genhomedircon

Chris PeBenito • 19 years ago

3ed2b6

temp genhomedircon hack

Chris PeBenito • 19 years ago

de0d26

change dmesg and loadkeys behavior to aliasing, and enable modules

Chris PeBenito • 19 years ago

9e9138

remove extra rule

Chris PeBenito • 19 years ago

0d5d74

more broken symptoms

Chris PeBenito • 19 years ago

15c235

hack

Chris PeBenito • 19 years ago

af8664

fix type transition conflicts

Chris PeBenito • 19 years ago

3be48f

fix ordering problem

Chris PeBenito • 19 years ago

17da25

fix rpm

Chris PeBenito • 19 years ago

7fefc1

reverse last change

Chris PeBenito • 19 years ago

175b1c

fix ordering

Chris PeBenito • 19 years ago

5ae908

add debugging symbols

Chris PeBenito • 19 years ago

4fe05f

missing fc's

Chris PeBenito • 19 years ago

33ff9b

update rh broken symptoms

Chris PeBenito • 19 years ago

3ad26d

add initrc_tmp_t mountpoint

Chris PeBenito • 19 years ago

a6e32d

fix missing role statements

Chris PeBenito • 19 years ago

daff1d

small fixes

Chris PeBenito • 19 years ago

55290a

changed rules fixes

Chris PeBenito • 19 years ago

2e0a88

work around role dominance breakage in module compiler

Chris PeBenito • 19 years ago

3797ef

missing matches

Chris PeBenito • 19 years ago

65b936

reorder to work around module compiler bug

Chris PeBenito • 19 years ago

672a15

turn off stuff not in original targeted

Chris PeBenito • 19 years ago

70fe5a

use role dominance in targeted for compatability with strict

Chris PeBenito • 19 years ago

37c852

fix changed rules

Chris PeBenito • 19 years ago

1904b0

missing matches

Chris PeBenito • 19 years ago

c6825e

fc fixes

Chris PeBenito • 19 years ago

c2e35b

add missing bin_t aliases

Chris PeBenito • 19 years ago

c646a9

add missing /var/yp match

Chris PeBenito • 19 years ago

51f374

correct shlib_t alias

Chris PeBenito • 19 years ago

33faf5

add avahi

Chris PeBenito • 19 years ago

59a00d

install booelans file on monolithic

Chris PeBenito • 19 years ago

2ed0d1

dont install booleans file anymore

Chris PeBenito • 19 years ago

ce1e89

fix to use real type rather than alias

Chris PeBenito • 19 years ago

e3d21d

fixes for sorting

Chris PeBenito • 19 years ago

2ab07e

add avahi

Chris PeBenito • 19 years ago

4b9516

more fix

Chris PeBenito • 19 years ago

d3f715

tty fixes

Chris PeBenito • 19 years ago

3e639a

pile of sediff fixes

Chris PeBenito • 19 years ago

725926

fix sendmail transition

Chris PeBenito • 19 years ago

76febd

merge in some of dan's old policy changes

Chris PeBenito • 19 years ago

8967bf

for now don't delete generated files. bring this back

Chris PeBenito • 19 years ago

cd508d

Changed a { create rw_dir_perms } to a create_dir_perms since starting radius was getting a setattr denial and setattr was shown to be missing in sediff

Don Miner • 19 years ago

bc6dfa

Added signal_perms to nscd_t.

Don Miner • 19 years ago

45aa10

missing dir

Chris PeBenito • 19 years ago

307e11

user tty fixes

Chris PeBenito • 19 years ago

7afca0

add stuff from distros.fc

Chris PeBenito • 19 years ago

9c6feb

Added rules so that tracepath, traceroute and ping work.

Don Miner • 19 years ago

8f882f

fixes just so sediff is easier to handle

Chris PeBenito • 19 years ago

73ef29

hack

Chris PeBenito • 19 years ago

b48801

clean up last var_run_domain expansion errors

Chris PeBenito • 19 years ago

b9ea0f

read certs

Chris PeBenito • 19 years ago

ee08bc

clean up socket

Chris PeBenito • 19 years ago

35adb6

fix filesystem associations

Chris PeBenito • 19 years ago

31a1c2

tty and caps fixes

Chris PeBenito • 19 years ago

7ac225

more dbus cleanup

Chris PeBenito • 19 years ago

0b12fa

dbus obj class cleanup

Chris PeBenito • 19 years ago

dab808

more of the same

Chris PeBenito • 19 years ago

ce0ff1

initrc couldn't create/use its own pty!

Chris PeBenito • 19 years ago

b422aa

more fixes

Chris PeBenito • 19 years ago

30910b

Added a rule to allow dmidecode to use locallogin_t fd to make it so it works.

Don Miner • 19 years ago

305106

add missing httpd_helper_t tty part

Chris PeBenito • 19 years ago

aba9c7

misc sediff fixes

Chris PeBenito • 19 years ago

9ca7e7

* fixes uncovered by sediff

Chris PeBenito • 19 years ago

0500e0

add missing tunable

Chris PeBenito • 19 years ago

bea7b4

fix perm set

Chris PeBenito • 19 years ago

6ff85b

fixes uncovered by sediff

Chris PeBenito • 19 years ago

628417

nicer te_trans conflict fix

Chris PeBenito • 19 years ago

f3936d

fix te_trans conflict

Chris PeBenito • 19 years ago

cac3ec

fix up sendmail for targeted

Chris PeBenito • 19 years ago

dc8f17

fix

Chris PeBenito • 19 years ago

f1b0a8

take care of missing types

Chris PeBenito • 19 years ago

2d13f7

ssh updates for targeted

Chris PeBenito • 19 years ago

375c24

clean up unused booleans

Chris PeBenito • 19 years ago

cbdb4a

updated modules.conf from dan

Chris PeBenito • 19 years ago

bce06f

typo

Chris PeBenito • 19 years ago

f0f18e

add missing range transition

Chris PeBenito • 19 years ago

495a70

initrc fixes

Chris PeBenito • 19 years ago

005a9a

fix quoting

Chris PeBenito • 19 years ago

7e1c14

fixes from testing

Chris PeBenito • 19 years ago

dd3544

put all users back into the base module

Chris PeBenito • 19 years ago

2f33cd

fix some /opt regexes

Chris PeBenito • 19 years ago

f1baed

dont remove home dir templates from base.fc

Chris PeBenito • 19 years ago

05c6f0

more transition work

Chris PeBenito • 19 years ago

08c22f

add some missing transitions from unconfined

Chris PeBenito • 19 years ago

b281bf

sediff fixes

Chris PeBenito • 19 years ago

a525f2

fixes from sediff

Chris PeBenito • 19 years ago

fc6198

rpc fixes from testing

Chris PeBenito • 19 years ago

ce0383

fixes from testing

Chris PeBenito • 19 years ago

5abea9

more fixing

Chris PeBenito • 19 years ago

4614e8

Added search and getattr permissions to etc_mail_t dir for system_mail_t so that the sendmail process would be able to start through init

Don Miner • 19 years ago

f13da8

another pile o fixes

Chris PeBenito • 19 years ago

d1b9d9

pile o fixes

Chris PeBenito • 19 years ago

33acca

fix rpm transition

Chris PeBenito • 19 years ago

f5e4f7

fixes from arpwatch testing

Chris PeBenito • 19 years ago

e8d0a6

a few more strays

Chris PeBenito • 19 years ago

7a6d42

try to fix associations

Chris PeBenito • 19 years ago

c3cf66

privfd

Chris PeBenito • 19 years ago

b7e182

easy fixes

Chris PeBenito • 19 years ago

ccfd7b

missing privloggers

Chris PeBenito • 19 years ago

2526a4

typo

Chris PeBenito • 19 years ago

ee64ef

initrc also uses nscd

Chris PeBenito • 19 years ago

d49d52

add missing nscd clients

Chris PeBenito • 19 years ago

e11d2e

use our own interface to make maintenance easier

Chris PeBenito • 19 years ago

2aec14

add default_t read back

Chris PeBenito • 19 years ago

7eec65

privhome implementation

Chris PeBenito • 19 years ago

784a3b

testing fixes

Chris PeBenito • 19 years ago

7b90f2

add dontaudit

Chris PeBenito • 19 years ago

51f5c6

system_chkpwd can winbind

Chris PeBenito • 19 years ago

467602

syslog logs to itself?

Chris PeBenito • 19 years ago

b0bdeb

use the right interface

Chris PeBenito • 19 years ago

2c216c

some home dir fixes

Chris PeBenito • 19 years ago

9aca49

appconfig side of su fix

Chris PeBenito • 19 years ago

240a3a

fix up su

Chris PeBenito • 19 years ago

83e451

make implicit work

Chris PeBenito • 19 years ago

a662d2

new semodule_package cmdline args

Chris PeBenito • 19 years ago

2964dc

fixes

Chris PeBenito • 19 years ago

60789e

module build fixes

Chris PeBenito • 19 years ago

28e730

homedir fixes

Chris PeBenito • 19 years ago

9dd500

more postfix work

Chris PeBenito • 19 years ago

88dd38

Moved the dbus stuff inbetween networkmanager and bind to the bind policy

Don Miner • 19 years ago

2192d4

hide broken symptoms

Chris PeBenito • 19 years ago

3df88d

hide broken symtoms

Chris PeBenito • 19 years ago

ee7f66

fix acct

Chris PeBenito • 19 years ago

52e1ed

fix again

Chris PeBenito • 19 years ago

40a1f3

Fixed an allow that should have been a dontaudit

Don Miner • 19 years ago

d2c573

add nscd

Chris PeBenito • 19 years ago

977b1d

fix most disable_trans errors

Chris PeBenito • 19 years ago

69dcd6

Added a rule to allow apache to read httpd_sys_content_t so that it can show html error messages

Don Miner • 19 years ago

f470a1

Reduced the number of differences in amanda between the targeted and the refpolicy

Don Miner • 19 years ago

c11417

woops

Chris PeBenito • 19 years ago

87ab63

fix most of samba

Chris PeBenito • 19 years ago

671673

Removed differences between refpolicy and targeted acct_t

Don Miner • 19 years ago

bdfa8e

Removed differences between refpolicy and targeted NetworkManager_t

Don Miner • 19 years ago

9c4fcf

add proc_net lnk

Chris PeBenito • 19 years ago

7ebd6a

hopefully fix su

Chris PeBenito • 19 years ago

b4e1eb

fixes

Chris PeBenito • 19 years ago

30705b

more fix

Chris PeBenito • 19 years ago

9bbc75

Fixed a problem which was allowing processes to become unconfined from initrc

Don Miner • 19 years ago

0354e3

Added rules to the bind policy for the named server so that it would start

Don Miner • 19 years ago

dd57ca

Added signal permissions to postgres so it can start

Don Miner • 19 years ago

57d8e6

corenet fixes

Chris PeBenito • 19 years ago

162dfc

add configuration for testing

Chris PeBenito • 19 years ago

a3754f

update ranges

Chris PeBenito • 19 years ago

37fe0e

fix

Chris PeBenito • 19 years ago

e64b33

fixes from chad

Chris PeBenito • 19 years ago

9d343a

add

Chris PeBenito • 19 years ago

88e5d7

remove bin policy and kern module assertions for now

Chris PeBenito • 19 years ago

15fefa

fix mls r_t

Chris PeBenito • 19 years ago

1480d3

more sediff

Chris PeBenito • 19 years ago

34e722

Added rules to the smbd_t and the nmbd_t domains so that they would start properly

Don Miner • 19 years ago

fa16f2

sediff fixes

Chris PeBenito • 19 years ago

1dd86c

add initrc_su_t

Chris PeBenito • 19 years ago

bb6763

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Don Miner • 19 years ago

3d37bc

more missing types

Chris PeBenito • 19 years ago

710791

more fixes

Chris PeBenito • 19 years ago

19b555

add rpc

Chris PeBenito • 19 years ago

43989f

fixes from sediff

Chris PeBenito • 19 years ago

2db2c7

Added a file context for httpd.pid so that it is correctly labeled

Don Miner • 19 years ago

f8964c

nwmgr fixes

Chris PeBenito • 19 years ago

f85544

add cups

Chris PeBenito • 19 years ago

ef5ca0

add postfix

Chris PeBenito • 19 years ago

04926d

add spamassassin

Chris PeBenito • 19 years ago

f932d8

add radius

Chris PeBenito • 19 years ago

385dcd

add radius and amanda, which I forgot to ci

Chris PeBenito • 19 years ago

44fc06

add pegasus

Chris PeBenito • 19 years ago

230838

add dbskk

Chris PeBenito • 19 years ago

a63621

add lpd

Chris PeBenito • 19 years ago

ad3b9d

simplify since alias take care of it

Chris PeBenito • 19 years ago

ae1d9a

add amanda

Chris PeBenito • 19 years ago

10b1f3

add networkmanager

Chris PeBenito • 19 years ago

239db5

woops, radius wasn't actually completed

Chris PeBenito • 19 years ago

ebed41

expand gen_context() in file contexts

Chris PeBenito • 19 years ago

ae9017

more sediff fixes

Chris PeBenito • 19 years ago

1f8a8b

more fixes

Chris PeBenito • 19 years ago

e6a2ea

sediff fixes

Chris PeBenito • 19 years ago

da4fc9

add xdm

Chris PeBenito • 19 years ago

23a444

add canna

Chris PeBenito • 19 years ago

350948

fix

Chris PeBenito • 19 years ago

fe7b94

add cyrus

Chris PeBenito • 19 years ago

ea557a

add all target to build base and modules

Chris PeBenito • 19 years ago

06a536

add dovecot

Chris PeBenito • 19 years ago

29ce00

fix corenetwork generation and add distcc

Chris PeBenito • 19 years ago

cf6141

obj class typo for certs

Chris PeBenito • 19 years ago

4e69c1

make DISTRO=redhat imply DIRECT_INITRC=y

Chris PeBenito • 19 years ago

2b01ae

release

Chris PeBenito • 19 years ago

a4e8b7

add missing entry

Chris PeBenito • 19 years ago

61feb2

targeted policy fixes

Chris PeBenito • 19 years ago

de7649

targeted and distro fixes for loadable modules

Chris PeBenito • 19 years ago

af4752

fix last loadable module problems

Chris PeBenito • 19 years ago

0efe52

fix requires

Chris PeBenito • 19 years ago

90c3dd

piles of fixes for loadable modules

Chris PeBenito • 19 years ago

12ae75

misc fixes

Chris PeBenito • 19 years ago

c38127

error out if trying to build a module thats off or base

Chris PeBenito • 19 years ago

843132

add more docs

Chris PeBenito • 19 years ago

97749e

fix error uncovered by sechecker

Chris PeBenito • 19 years ago

c3a05c

wrap up almost all of apache

Chris PeBenito • 19 years ago

e749cd

add ppp

Chris PeBenito • 19 years ago

e08118

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

fe9d17

more merging from 1.27.1-15

Chris PeBenito • 19 years ago

d8636f

partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15

Chris PeBenito • 19 years ago

77f6e2

add some docs, do some reordering

Chris PeBenito • 19 years ago

b1421d

add sechecker targets

Chris PeBenito • 19 years ago

8df65f

start adding perm sets with refpol names

Chris PeBenito • 19 years ago

c4bf97

add missing interface

Chris PeBenito • 19 years ago

4c7199

add in last bits of webalizer

Chris PeBenito • 19 years ago

be4690

more apache work

Chris PeBenito • 19 years ago

c2b18f

add mailman

Chris PeBenito • 19 years ago

799a0b

update INSTALL and start work on README

Chris PeBenito • 19 years ago

fedd3c

add webalizer and sasl

Chris PeBenito • 19 years ago

f33561

add apm and arpwatch. fix implementation error on fs_getattr_all_files,

Chris PeBenito • 19 years ago

4483ee

add finger and bluetooth

Chris PeBenito • 19 years ago

d4dca5

partial mailman merge

Chris PeBenito • 19 years ago

9d3e33

fix files_exec_usr_src_files

Chris PeBenito • 19 years ago

99505c

* Updated to sedoctool to read bool files and tunable

Chris PeBenito • 19 years ago

4f9f30

rename context_template() to gen_context()

Chris PeBenito • 19 years ago

e02c61

more apache work

Chris PeBenito • 19 years ago

6e99a6

add ftp

Chris PeBenito • 19 years ago

fc6524

fix comment

Chris PeBenito • 19 years ago

5bc9f3

add interfaces used in old anonymous_domain()

Chris PeBenito • 19 years ago

f4d7fd

add most of apache

Chris PeBenito • 19 years ago

a996bd

more pieces of ftp

Chris PeBenito • 19 years ago

a5ec7c

start adding secure_file_type implementation

Chris PeBenito • 19 years ago

a2868f

add winbind

Chris PeBenito • 19 years ago

79cde3

add in a couple missing rules

Chris PeBenito • 19 years ago

694248

add in a few parts of ftp

Chris PeBenito • 19 years ago

246a60

add dmidecode

Chris PeBenito • 19 years ago

20e306

add disable_trans support

Chris PeBenito • 19 years ago

b03f96

a few conditional cleanups

Chris PeBenito • 19 years ago

1f91e1

add mls privileges

Chris PeBenito • 19 years ago

f0574f

comment fix

Chris PeBenito • 19 years ago

6d788d

add anaconda

Chris PeBenito • 19 years ago

9edc28

rework nis_use_ypbind since optionals dont work in conditionals

Chris PeBenito • 19 years ago

b9ae3a

add radvd, plus a few cleanups from sediff

Chris PeBenito • 19 years ago

fa6757

add kudzu

Chris PeBenito • 19 years ago

842859

remove classes from gen_requires, and disable net_raw for now

Chris PeBenito • 19 years ago

005841

fixes from sediff

Chris PeBenito • 19 years ago

681c9a

update for release

Chris PeBenito • 19 years ago

485586

add uucp

Chris PeBenito • 19 years ago

f7ba4a

testing fixes

Chris PeBenito • 19 years ago

b53f93

make system.users look nicer

Chris PeBenito • 19 years ago

fb2817

fix regex

Chris PeBenito • 19 years ago

90e497

fix system.users now that the gen_user macro is in support

Chris PeBenito • 19 years ago

1fb83a

fix for targeted

Chris PeBenito • 19 years ago

08c5c9

fix for removed example targeted config

Chris PeBenito • 19 years ago

996ae3

loadable module compile fixes

Chris PeBenito • 19 years ago

25c674

fix error with file common being output, not file class (unique perms were missing)

Chris PeBenito • 19 years ago

6e0542

targeted and redhat cleanups

Chris PeBenito • 19 years ago

142e9f

change monolithic_policy to self_contained_policy for clarity

Chris PeBenito • 19 years ago

0e15cd

todo cleanup

Chris PeBenito • 19 years ago

3774e4

add cvs

Chris PeBenito • 19 years ago

93070c

add cpucontrol

Chris PeBenito • 19 years ago

921055

add rlogin and telnet

Chris PeBenito • 19 years ago

4fd520

add appconfig for mls and mcs

Chris PeBenito • 19 years ago

c0e4fe

add stunnel

Chris PeBenito • 19 years ago

200f45

final updates from nsa cvs

Chris PeBenito • 19 years ago

a1fcff

a few module compile fixes

Chris PeBenito • 19 years ago

41c480

more upstream merging

Chris PeBenito • 19 years ago

cf6a7d

more upstream merging

Chris PeBenito • 19 years ago

cff75c

add tftp

Chris PeBenito • 19 years ago

40adb5

add snmp

Chris PeBenito • 19 years ago

ccc597

more merging from nsa cvs

Chris PeBenito • 19 years ago

a08248

more updates

Chris PeBenito • 19 years ago

98a8ea

more merging from nsa cvs

Chris PeBenito • 19 years ago

605ba2

cleanup

Chris PeBenito • 19 years ago

5a2649

add samba

Chris PeBenito • 19 years ago

84c922

require fix

Chris PeBenito • 19 years ago

4479b3

fixes for module compiling

Chris PeBenito • 19 years ago

71fe0f

more merging of NSA CVS policy

Chris PeBenito • 19 years ago

0907bd

begin merging in upstream NSA CVS changes

Chris PeBenito • 19 years ago

2705f9

add base mod changelog entry

Chris PeBenito • 19 years ago

082dcd

fixes to make base module compilable

Chris PeBenito • 19 years ago

712566

add first part of changes to make base module compilable

Chris PeBenito • 19 years ago

2e863f

fix sshd to use initrc transition while typeattribute in conditionals is still broken

Chris PeBenito • 19 years ago

0fdf3e

add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work

Chris PeBenito • 19 years ago

9ff300

add portmap

Chris PeBenito • 19 years ago

eb3cb6

add ktalk

Chris PeBenito • 19 years ago

d17b4d

add missing rules of other domains using inn

Chris PeBenito • 19 years ago

9b0640

new release

Chris PeBenito • 19 years ago

541b7d

misc fixes

Chris PeBenito • 19 years ago

763a5e

add inn

Chris PeBenito • 19 years ago

8d9352

misc fixes

Chris PeBenito • 19 years ago

603f90

add ntp

Chris PeBenito • 19 years ago

b11a75

typo

Chris PeBenito • 19 years ago

ce1b44

add dictd

Chris PeBenito • 19 years ago

ac0483

add hal

Chris PeBenito • 19 years ago

fdae8e

move dhcpd to dhcp

Chris PeBenito • 19 years ago

f344c0

add squid

Chris PeBenito • 19 years ago

0f707d

add dhcpd

Chris PeBenito • 19 years ago

7c8fc3

fix bugs uncovered from sediff

Chris PeBenito • 19 years ago

9d3bdc

move rhgb_domain into TODO so modules can compile as binary modules

Chris PeBenito • 19 years ago

c0d156

finish remaining dbus bits

Chris PeBenito • 19 years ago

631ee4

add dbus

Chris PeBenito • 19 years ago

0c3d17

fix typos

Chris PeBenito • 19 years ago

6af06c

cosmetics

Chris PeBenito • 19 years ago

768283

add comsat. clean up kerberos and nscd interfaces

Chris PeBenito • 19 years ago

6e6156

fix up most of mta attribute insanity

Chris PeBenito • 19 years ago

246839

send user role to per userdomain templates. update templated interfaces

Chris PeBenito • 19 years ago

451c1e

make corecommands required

Chris PeBenito • 19 years ago

e5d452

doctool display for no interfaces or templates

Chris PeBenito • 19 years ago

a19e34

update for release

Chris PeBenito • 19 years ago

37aa3f

update config, switch most to module

Chris PeBenito • 19 years ago

9439a2

start adding in templated interfaces

Chris PeBenito • 19 years ago

2a9456

remove bad changelog date

Chris PeBenito • 19 years ago

d4df0a

add rpm spec skeleton

Chris PeBenito • 19 years ago

c6299b

fix quoting

Chris PeBenito • 19 years ago

6d1227

reformat for use in rpm

Chris PeBenito • 19 years ago

e28aa6

fix tunables

Chris PeBenito • 19 years ago

3110de

do bools until loadable modules support tunables

Chris PeBenito • 19 years ago

82024f

add bind

Chris PeBenito • 19 years ago

d83fda

add privoxy

Chris PeBenito • 19 years ago

902be0

add rsync

Chris PeBenito • 19 years ago

35ecf8

add howl

Chris PeBenito • 19 years ago

f9b11e

move require to right position, for modular policy

Chris PeBenito • 19 years ago

4b8c54

more comments

Chris PeBenito • 19 years ago

a6df70

remove comment about monolithic only supported

Chris PeBenito • 19 years ago

8b75b0

complete infrastructure support for building modules

Chris PeBenito • 19 years ago

c04f2a

mark userpace object classes

Chris PeBenito • 19 years ago

db93d7

moved to selinux module

Chris PeBenito • 19 years ago

f6e28a

for base module, only enable modules actually in it

Chris PeBenito • 19 years ago

28f032

initial support for compiling loadable modules

Chris PeBenito • 19 years ago

fb0a3a

add gpm

Chris PeBenito • 19 years ago

f862c3

add ldap

Chris PeBenito • 19 years ago

2961e7

cleanup

Chris PeBenito • 19 years ago

23ca91

add rshd

Chris PeBenito • 19 years ago

545b0c

add firstboot

Chris PeBenito • 19 years ago

886907

add firstboot

Chris PeBenito • 19 years ago

57a96c

more debian cleanup

Chris PeBenito • 19 years ago

2d803e

make default for optional modules to module instead of base

Chris PeBenito • 19 years ago

a57379

fix broken xml of previous commit

Chris PeBenito • 19 years ago

4806a0

try to knock out more of the distro_debian bootloader stuff

Chris PeBenito • 19 years ago

5f38a6

add loadkeys

Chris PeBenito • 19 years ago

21468a

more comments

Chris PeBenito • 19 years ago

884309

all dev nodes assoc to tmpfs, since most everyone is moving to udev

Chris PeBenito • 19 years ago

f0b1ef

quiet file context validation

Chris PeBenito • 19 years ago

c5a6dc

fix some udev naming

Chris PeBenito • 19 years ago

35b494

fix system spool file problem

Chris PeBenito • 19 years ago

aae06c

remove secdesc since desc is sufficient

Chris PeBenito • 19 years ago

d06f3c

finalize desc -> summary xml change

Chris PeBenito • 19 years ago

f7ebea

add tcpd

Chris PeBenito • 19 years ago

4aa0dc

fix no interface module handling in segenxml

Chris PeBenito • 19 years ago

e694b5

add quota

Chris PeBenito • 19 years ago

052c95

tabbing fix

Chris PeBenito • 19 years ago

5a3895

add sudo

Chris PeBenito • 19 years ago

e78430

add template xml

Chris PeBenito • 19 years ago

b9d7d7

add su

Chris PeBenito • 19 years ago

948914

fix gen_user comment for more clarity

Chris PeBenito • 19 years ago

946545

add updfstab

Chris PeBenito • 19 years ago

dce68d

fix xml tags

Chris PeBenito • 19 years ago

f5e321

a few more ssh touchups

Chris PeBenito • 19 years ago

7057c1

add tmpreaper

Chris PeBenito • 19 years ago

ed78ea

add acct

Chris PeBenito • 19 years ago

9a66d4

misc cleanup

Chris PeBenito • 19 years ago

3fd833

add mysql

Chris PeBenito • 19 years ago

42be7c

search sbin dirs to find the pgms

Chris PeBenito • 19 years ago

046a21

* Rename ipsec connect interface for consistency.

Chris PeBenito • 19 years ago

81343a

new release

Chris PeBenito • 19 years ago

52a902

new release

Chris PeBenito • 19 years ago

6db8e5

add missing

Chris PeBenito • 19 years ago

60abb5

fix comparison bug

Chris PeBenito • 19 years ago

cd8fa4

move file context validation to install

Chris PeBenito • 19 years ago

96a150

fix stray line that got out of TODO

Chris PeBenito • 19 years ago

bbdbdb

work on user transition

Chris PeBenito • 19 years ago

e5590e

update

Chris PeBenito • 19 years ago

c13146

Fix handling of ordered and unordered HTML lists.

Chris PeBenito • 19 years ago

78d30c

add connect interface on ports to handle name_connect tcp perm

Chris PeBenito • 19 years ago

022f61

make network_interface able to support multiple interfaces having the same type

Chris PeBenito • 19 years ago

50527c

update from privmail

Chris PeBenito • 19 years ago

953541

add an example module config for a targeted policy

Chris PeBenito • 19 years ago

80526c

/var/lib is now a mountpoint

Chris PeBenito • 19 years ago

ea7d57

unconfined can pass all constraints

Chris PeBenito • 19 years ago

53857c

name_connect only on tcp_sockets

Chris PeBenito • 19 years ago

ef424c

unconfined can name_connect to all ports

Chris PeBenito • 19 years ago

9496fd

reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface

Chris PeBenito • 19 years ago

d25063

bah typo

Chris PeBenito • 19 years ago

f82c6a

user home dirs were missing file type in targ policy

Chris PeBenito • 19 years ago

0b28a2

add missing dir and file perms for selinuxfs in unconfined

Chris PeBenito • 19 years ago

1e3f61

fix typos and import some rules from NSA cvs to make targeted policy work

Chris PeBenito • 19 years ago

689f6d

should actually try compiling first :x

Chris PeBenito • 19 years ago

474f43

missed a line

Chris PeBenito • 19 years ago

bd7e7a

add in some rules from NSA CVS to make targeted policy work

Chris PeBenito • 19 years ago

a28f6d

corenet was missing from unconfined

Chris PeBenito • 19 years ago

8c3f43

more targeted policy fixes

Chris PeBenito • 19 years ago

892266

add new netlink socket class

Chris PeBenito • 19 years ago

21f477

more fixes for targeted

Chris PeBenito • 19 years ago

ec848d

more cleanup

Chris PeBenito • 19 years ago

2ec4c9

fixes for targeted policy

Chris PeBenito • 19 years ago

8b0bbd

fix assertions for framework

Chris PeBenito • 19 years ago

391ede

more cleanup in system

Chris PeBenito • 19 years ago

a5f339

fix to use context_template()

Chris PeBenito • 19 years ago

9f103c

add missing context template

Chris PeBenito • 19 years ago

3b6174

add raid (mdadm)

Chris PeBenito • 19 years ago

50aca6

more pcmcia cleanup

Chris PeBenito • 19 years ago

d9fd8e

add macro to expand object class sets for use in require blocks

Chris PeBenito • 19 years ago

157c69

* break up files_getattr_all_files into correct interfaces

Chris PeBenito • 19 years ago

50f650

reorder in alpha order of type, for sanity purposes

Chris PeBenito • 19 years ago

f136a9

add pcmcia

Chris PeBenito • 19 years ago

316553

add pcmcia

Chris PeBenito • 19 years ago

e0d57f

fix up the xml

Chris PeBenito • 19 years ago

c429cb

add ipsec

Chris PeBenito • 19 years ago

11633b

add nscd

Chris PeBenito • 19 years ago

493d6c

* fix chroot exec interface

Chris PeBenito • 19 years ago

df00b2

add distro tunables. expand on a few comments

Chris PeBenito • 19 years ago

25a0c6

more cleanup of current TODOs

Chris PeBenito • 19 years ago

b24f35

fix comments for templates to have same number of # as interfaces

Chris PeBenito • 19 years ago

20a227

fix xml

Chris PeBenito • 19 years ago

4051d1

fix more TODOs. fix selinux.te to selinuxutil.te in optionals

Chris PeBenito • 19 years ago

ae9e27

improve display of tunables and booleans

Chris PeBenito • 19 years ago

34bbe5

add tun and bool descriptions

Chris PeBenito • 19 years ago

4d7511

initial global booleans and tunables support. also fix index

Chris PeBenito • 19 years ago

249d46

another round of TODO cleanup

Chris PeBenito • 19 years ago

a42ca7

silly formatting fix

Chris PeBenito • 19 years ago

4d0d41

support for global booleans

Chris PeBenito • 19 years ago

c11958

* Added support for layer summaries.

Chris PeBenito • 19 years ago

acb668

tag for 20050707 release

Chris PeBenito • 19 years ago

58c777

add changelog

Chris PeBenito • 19 years ago

dfa83e

implement direct_sysadm_daemon

Chris PeBenito • 19 years ago

e5f806

missing rules uncovered by sediff

Chris PeBenito • 19 years ago

1aa526

support for targeted policy

Chris PeBenito • 19 years ago

c98340

put back to strict. will have separate strict and targeted appconfig

Chris PeBenito • 19 years ago

83ce67

validate file contexts

Chris PeBenito • 19 years ago

14b25b

ksu moves to su

Chris PeBenito • 19 years ago

ed1a92

add missing ssh file contexts

Chris PeBenito • 19 years ago

bb3254

quiet the awk if modules.conf doesnt exist

Chris PeBenito • 19 years ago

a3fdce

- Removed OUTPUT_VERSION as default.

Karl MacMillan • 19 years ago

ebb884

update appconfig for unconfined login

Chris PeBenito • 19 years ago

e17cb8

add unconfined

Chris PeBenito • 19 years ago

9726b3

fix quoting problem

Chris PeBenito • 19 years ago

e8f005

fix for new new modules.conf behavior

Chris PeBenito • 19 years ago

e8b3e3

update for required tag

Chris PeBenito • 19 years ago

f0cc1a

add required tags

Chris PeBenito • 19 years ago

274547

add tag for required modules

Chris PeBenito • 19 years ago

d78fde

convert can_kerberos()

Chris PeBenito • 19 years ago

a7a979

ul has to be in a p

Chris PeBenito • 19 years ago

65c861

initial commit

Chris PeBenito • 19 years ago

5e1ed4

more work on current modules

Chris PeBenito • 19 years ago

fd89e1

clean up more todos

Chris PeBenito • 19 years ago

ebdc3b

dont show interface/template hotlinks if the module doesnt have one of them.

Chris PeBenito • 19 years ago

e8d8fa

make layer summary required

Chris PeBenito • 19 years ago

d233bf

change messages for missing docs

Chris PeBenito • 19 years ago

00172f

make interfaces or templates section not shown if empty

Chris PeBenito • 19 years ago

06c968

another round of renaming, for consistency

Chris PeBenito • 19 years ago

8fd367

link fix

Chris PeBenito • 19 years ago

743b65

add logrotate, more low-hanging fruit

Chris PeBenito • 19 years ago

96ce00

add templates

Chris PeBenito • 19 years ago

effd58

change desc to summary

Chris PeBenito • 19 years ago

ceebe3

add comments and error handling

Chris PeBenito • 19 years ago

896bad

preserve tunable values if tunables.conf exists

Chris PeBenito • 19 years ago

2d56fd

add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type

Chris PeBenito • 19 years ago

cbca03

more low hanging fruit cleanup

Chris PeBenito • 19 years ago

783b38

better handling of whitespace

Chris PeBenito • 19 years ago

cedae2

change modules.conf behavior to be in line with behavior which will be used in the future for base module

Chris PeBenito • 19 years ago

19db6b

change modules.conf handling

Chris PeBenito • 19 years ago

a4c639

add fstools, and more cleanup

Chris PeBenito • 19 years ago

58c3da

changes to make inetd work

Chris PeBenito • 19 years ago

80436b

initial commit

Chris PeBenito • 19 years ago

24bf11

autofs_t and ypbind cleanup

Chris PeBenito • 19 years ago

ab940a

xml updates and nis stuff

Chris PeBenito • 19 years ago

e88003

better dummy xml entries

Chris PeBenito • 19 years ago

f8838e

initial commit

Chris PeBenito • 19 years ago

73fbc7

add/update comments

Chris PeBenito • 19 years ago

62a7b0

add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd

Chris PeBenito • 19 years ago

e81f02

update for new documentation method

Chris PeBenito • 19 years ago

414e41

more updates

Chris PeBenito • 19 years ago

aad5b9

a couple output fixes

Chris PeBenito • 19 years ago

c3a075

update to new commenting style

Chris PeBenito • 19 years ago

9916c6

move ssh tunables into global_tunables

Chris PeBenito • 19 years ago

452399

initial commit of segenxml. add support in Makefile

Chris PeBenito • 19 years ago

95db42

fix

Chris PeBenito • 19 years ago

19ea99

fix for shortened tags

Chris PeBenito • 19 years ago

7c2b84

shorten some xml tags

Chris PeBenito • 19 years ago

261e0e

convert a couple network macros

Chris PeBenito • 19 years ago

d3b892

more setcurrent stuff

Chris PeBenito • 19 years ago

007ca5

fixes pointed out by steve, plus fixes revealed by the added assertions

Chris PeBenito • 19 years ago

2a3478

more work on ssh, plus import ssh-agent

Chris PeBenito • 19 years ago

9ccd96

move all interfaces over to the interface macro. add traceback debugging info

Chris PeBenito • 19 years ago

199895

remove remaining _depend macros to prep for switchover to interface declaration macro

Chris PeBenito • 19 years ago

cbc9d6

initial commit of ssh.

Chris PeBenito • 19 years ago

0404a3

work on newrole policy

Chris PeBenito • 19 years ago

21871a

change doctool to bring in line with the xml tag change (layers encapsulate

Chris PeBenito • 19 years ago

7fb9c1

initial commit

Chris PeBenito • 19 years ago

e04b8e

XML: encapsulate modules in layers, rather then layer being an attribute of

Chris PeBenito • 19 years ago

57869a

more work to clean up and complete current modules

Chris PeBenito • 19 years ago

7a2f20

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

2ba9a7

interface review, and remove net_raw from raw node sends. only give

Chris PeBenito • 19 years ago

bc1fba

add rw_term_perms

Chris PeBenito • 19 years ago

c9b7f1

services interfaces review

Chris PeBenito • 19 years ago

5e6f9e

review of admin interfaces

Chris PeBenito • 19 years ago

7f2e39

review of system interfaces

Chris PeBenito • 19 years ago

139520

eliminate _depend macros

Chris PeBenito • 19 years ago

a7c3a1

misc cleanup

Chris PeBenito • 19 years ago

0e7216

reorder gpg tunable for alpha sorting

Chris PeBenito • 19 years ago

562cc2

add a couple more nfs and cifs interfaces, to cover most of the

Chris PeBenito • 19 years ago

d35c62

eliminate _depend macros

Chris PeBenito • 19 years ago

77c124

have can_exec add a require block

Chris PeBenito • 19 years ago

8c2f3a

fix

Chris PeBenito • 19 years ago

4ce9bd

initialize description to None so missing descriptions dont show wrong data

Chris PeBenito • 19 years ago

815ff3

add comments for clean and bare

Chris PeBenito • 19 years ago

102a59

for use until we have a full README

Chris PeBenito • 19 years ago

337e4a

add install-src target

Chris PeBenito • 19 years ago

c592e5

initial commit

Chris PeBenito • 19 years ago

f08f5a

add CFLAGS, and drop -C from install since it doesn't exist in all distros,

Chris PeBenito • 19 years ago

c7b41e

put user line in col 1, since genhomedircon breaks otherwise

Chris PeBenito • 19 years ago

8eaa72

initial commit

Chris PeBenito • 19 years ago

828e03

finish renaming system/selinux to system/selinuxutil

Chris PeBenito • 19 years ago

5e0da6

move security_t to selinux module

Chris PeBenito • 19 years ago

ff7bc1

move selinux to selinuxutil

Chris PeBenito • 19 years ago

be4a80

move constraints interfaces to domain module. move sysfs and usbfs to

Chris PeBenito • 19 years ago

8bd678

when a generated file is already generated, it shows up in the generated_*

Chris PeBenito • 19 years ago

8ae194

fix typo

Chris PeBenito • 19 years ago

810f2b

fix up appconfig, and generate $(installdir)/booleans

Chris PeBenito • 19 years ago

1beba1

stray renames in distro_redhat

Chris PeBenito • 19 years ago

b57dd1

fix makefile to only rebuild modules.conf and tunables.conf explicitly

Chris PeBenito • 19 years ago

d2d6c8

initial commit

Chris PeBenito • 19 years ago

e75f78

convert relevant conditionals into tunable_policy

Chris PeBenito • 19 years ago

3eed10

start making genhomedircon work

Chris PeBenito • 19 years ago

92e928

rename requires_block_template to gen_require

Chris PeBenito • 19 years ago

c24ac9

rename requires_block_tempalte to gen_require

Chris PeBenito • 19 years ago

fa7bea

tunables work

Chris PeBenito • 19 years ago

34c8fa

a few missed renames, and start fixing up tunables

Chris PeBenito • 19 years ago

31908b

fix

Chris PeBenito • 19 years ago

94670f

make summary and description optional in interfaces until we can clean it up

Chris PeBenito • 19 years ago

eec673

rename setattr removable_device_t

Chris PeBenito • 19 years ago

5a45e7

Updates to documentation.

Karl MacMillan • 19 years ago

870049

add "this is a generated file!" comment to top of corenetwork.{te,if}

Chris PeBenito • 19 years ago

61bbe5

ul end tag fix, and css tweak

Chris PeBenito • 19 years ago

3c6d78

update from method

Chris PeBenito • 19 years ago

fae6ff

fix xml

Chris PeBenito • 19 years ago

d9507b

renaming insanity

Chris PeBenito • 19 years ago

c9428d

overwrite the generated .te file instead of append

Chris PeBenito • 19 years ago

b2bf0b

Devices rename.

Karl MacMillan • 19 years ago

f0c985

move policy.xml to doc, so it doesnt get deleted on a make clean

Chris PeBenito • 19 years ago

12b559

make module description optional and interface summary optional until

Chris PeBenito • 19 years ago

bec110

html tag updates

Chris PeBenito • 19 years ago

e214f6

Added missing interface.

Karl MacMillan • 19 years ago

bef4f0

more updates from method

Chris PeBenito • 19 years ago

d46f02

renaming insanity

Chris PeBenito • 19 years ago

0fd9dc

fix can_exec

Chris PeBenito • 19 years ago

240408

policy.xml is now in tmp/

Chris PeBenito • 19 years ago

e1db6e

make macro work

Chris PeBenito • 19 years ago

cab7c0

add can_exec

Chris PeBenito • 19 years ago

e3fd77

fix

Chris PeBenito • 19 years ago

1b8d67

Templates for menu ordering change.

Karl MacMillan • 19 years ago

c75e65

reorder

Chris PeBenito • 19 years ago

a154cd

Fixed doc tool to order menus.

Karl MacMillan • 19 years ago

d6b0f3

speed improvement

Chris PeBenito • 19 years ago

5d9417

kernel.if renaming

Chris PeBenito • 19 years ago

588ffa

more renaming and xml

Chris PeBenito • 19 years ago

eda201

rename

Chris PeBenito • 19 years ago

eca5b2

fix bracket display for optional parameters

Chris PeBenito • 19 years ago

997bd9

add back html page generation

Chris PeBenito • 19 years ago

20030e

fixes and remove debug code

Chris PeBenito • 19 years ago

1601fb

more indentation for modules in the menu

Chris PeBenito • 19 years ago

fe3bd5

initial commit

Chris PeBenito • 19 years ago

eb437d

updates

Chris PeBenito • 19 years ago

5a3299

aliases

Chris PeBenito • 19 years ago

cc41a9

fix layer in module tag

Chris PeBenito • 19 years ago

7591e8

rename

Chris PeBenito • 19 years ago

c6ebef

for now, drop infoflow tags

Chris PeBenito • 19 years ago

d90b27

make policy.xml depend on all if's being generated

Chris PeBenito • 19 years ago

16e1cf

aliases

Chris PeBenito • 19 years ago

dc67f7

aliases

Chris PeBenito • 19 years ago

0a10b1

renaming and xml

Chris PeBenito • 19 years ago

fe040c

aliases

Chris PeBenito • 19 years ago

dd8229

aliases

Chris PeBenito • 19 years ago

80048c

genhomedircon entries

Chris PeBenito • 19 years ago

5d3156

initial commit

Chris PeBenito • 19 years ago

5552ed

better handling of generated files

Chris PeBenito • 19 years ago

e12e57

make corenetwork generation explicit, rather then on-the-fly

Chris PeBenito • 19 years ago

f2e4ab

aliasing

Chris PeBenito • 19 years ago

7edd02

support_modules is finally gone, and modules.disable->modules.conf

Chris PeBenito • 19 years ago

0350b1

initial commit

Chris PeBenito • 19 years ago

b29d23

add aliases

Chris PeBenito • 19 years ago

c2c00b

Moved and changed user_mls to gen_user.

Karl MacMillan • 19 years ago

72bdc6

Renamed support macros for consistency.

Karl MacMillan • 19 years ago

eb5e23

make infoflow optional

Chris PeBenito • 19 years ago

eac7c3

overhaul

Chris PeBenito • 19 years ago

dc5daf

renaming

Chris PeBenito • 19 years ago

9f72a2

interface renaming

Chris PeBenito • 19 years ago

0c5a28

interface renaming

Chris PeBenito • 19 years ago

1694de

comment fix

Chris PeBenito • 19 years ago

066d46

more fixes

Chris PeBenito • 19 years ago

84eb35

add can_exec

Chris PeBenito • 19 years ago

a71972

start renaming filesystem interfaces

Chris PeBenito • 19 years ago

763c44

add interface macro

Chris PeBenito • 19 years ago

a9ec54

fix missing _socket in class

Chris PeBenito • 19 years ago

b46609

add xml

Chris PeBenito • 19 years ago

3865d6

more tunable work

Chris PeBenito • 19 years ago

ddea18

initial commit

Chris PeBenito • 19 years ago

758618

First cut at fixing fc_sort.

Karl MacMillan • 19 years ago

6847e8

remove java

Chris PeBenito • 19 years ago

2224ed

add updated dtd

Chris PeBenito • 19 years ago

9c25fd

start switching over to new tunable infrastructure

Chris PeBenito • 19 years ago

254bbc

initial tunable tool fixes

Chris PeBenito • 19 years ago

3a80ec

32 is space. ascii <= 32 is all whitespace

Chris PeBenito • 19 years ago

8fb301

initial commit

Chris PeBenito • 19 years ago

89ec23

start adding module disable and tunable infrastructure

Chris PeBenito • 19 years ago

0fbe15

initial commit

Chris PeBenito • 19 years ago

02b584

initial commit

Chris PeBenito • 19 years ago

43bc39

fix broken macros

Chris PeBenito • 19 years ago

2d6893

add domain(_auto)_trans

Chris PeBenito • 19 years ago

a1d2e8

move audit to logging

Chris PeBenito • 19 years ago

eb7f9a

move to logging

Chris PeBenito • 19 years ago

ef5e55

fix appconfig dir

Chris PeBenito • 19 years ago

096933

rework policy build options

Chris PeBenito • 19 years ago

b67488

change over to some perm set macros. add indentation

Chris PeBenito • 19 years ago

0c73cd

initial commit of xml->html conversion

Chris PeBenito • 19 years ago

36e54b

add some indentation

Chris PeBenito • 19 years ago

419699

change network verb in corenetwork to sendrecv

Chris PeBenito • 19 years ago

d11566

move fs_use and isids to respective modules

Chris PeBenito • 19 years ago

cabfa5

start breaking up support_macros into macros dir

Chris PeBenito • 19 years ago

ca83af

add some comments. make install target install appconfig files

Chris PeBenito • 19 years ago

44cda5

add missing system_crond_t transition pieces

Chris PeBenito • 19 years ago

f5d4ef

remove extra whitespace

Chris PeBenito • 19 years ago

98af6c

move global.if to support_macros at top level

Chris PeBenito • 19 years ago

de9649

add missing pieces of crond_t -> $1_crond_t transition

Chris PeBenito • 19 years ago

6d9915

use variable for dtd. move policy type to variant section

Chris PeBenito • 19 years ago

044735

do dtd verification on xml. fix current xml to be valid

Chris PeBenito • 19 years ago

004db9

fix policy.xml to not have templates for generated interfaces

Chris PeBenito • 19 years ago

3c62aa

move user_u and root to users

Chris PeBenito • 19 years ago

2fc84f

remove copyright until licensing issues are resolved

Chris PeBenito • 19 years ago

aa4060

better handling of appconfig dir

Chris PeBenito • 19 years ago

2926f9

fix module name in xml

Chris PeBenito • 19 years ago

f267df

move flask dir to top level, and update them from nsa cvs. move files in

Chris PeBenito • 19 years ago

134191

initial commit

Chris PeBenito • 19 years ago

7555aa

fix xml

Chris PeBenito • 19 years ago

e32d52

last fixes for cab

Chris PeBenito • 19 years ago

129318

more cab work

Chris PeBenito • 19 years ago

d115b2

add some file_t interfaces, and console write

Chris PeBenito • 19 years ago

3b857e

initial commit

Chris PeBenito • 19 years ago

b8fca4

initial commit

Chris PeBenito • 19 years ago

b4c3f5

permission set macro changes, plus more cab related work

Chris PeBenito • 19 years ago

4bf4ed

fix tmpfs assoc call

Chris PeBenito • 19 years ago

08eb9d

many fixes from cab work

Chris PeBenito • 19 years ago

f5c42b

cleanup inspired by sediff

Chris PeBenito • 19 years ago

32e53a

rpmbuild_t is not a system domain. also mark it as most likely dead.

Chris PeBenito • 19 years ago

16e9b0

restructure users, and add signalling

Chris PeBenito • 19 years ago

c6fd1f

tmpfs associate for redhat

Chris PeBenito • 19 years ago

07da0a

fix ordering and put in var_lib_t

Chris PeBenito • 19 years ago

dd3163

fixes from cab

Chris PeBenito • 19 years ago

d490eb

initial commit

Chris PeBenito • 19 years ago

c22038

many fixes from cab testing

Chris PeBenito • 19 years ago

efd8ed

add in appconfig files

Chris PeBenito • 19 years ago

c9a26b

initial commit

Chris PeBenito • 19 years ago

10abae

cleanup

Chris PeBenito • 19 years ago

cbeef6

cleanup

Chris PeBenito • 19 years ago

3b3bf8

initial commit

Chris PeBenito • 19 years ago

6f3dab

initial commit

Chris PeBenito • 19 years ago

7d7a36

fix the object class in process transition interfaces

Chris PeBenito • 19 years ago

e7fcdc

more fixes

Chris PeBenito • 19 years ago

547283

cleanup for corenetwork interface generation

Chris PeBenito • 19 years ago

c907b3

a few touchups

Chris PeBenito • 19 years ago

88c72f

another cleanup pass

Chris PeBenito • 19 years ago

dc771f

instead of using macros to drop out non-macro calls during corenetwork

Chris PeBenito • 19 years ago

6276f1

initial commit

Chris PeBenito • 19 years ago

992aba

stuff from rpm

Chris PeBenito • 19 years ago

6b48fd

add dontaudit shadow_t getattr

Chris PeBenito • 19 years ago

57440f

fix tmpfs associate infoflow

Chris PeBenito • 19 years ago

957e26

move in stuff from rpm

Chris PeBenito • 19 years ago

392551

add ldconfig and rpm transitions

Chris PeBenito • 19 years ago

15a961

add missing xml

Chris PeBenito • 19 years ago

162a57

add tmpfsfile support

Chris PeBenito • 19 years ago

46410f

add signull all domains

Chris PeBenito • 19 years ago

1c9f9a

make transition on shell work

Chris PeBenito • 19 years ago

3000a3

add transitions

Chris PeBenito • 19 years ago

c43097

add ldconfig

Chris PeBenito • 19 years ago

48e0db

add mls sensitivity to genfscon, initial sids and fs_use

Chris PeBenito • 19 years ago

e32c0d

add mls port support

Chris PeBenito • 19 years ago

0d0d2b

add xml comments to generated sections, and add mls support to interfaces

Chris PeBenito • 19 years ago

085faa

add xml comments to interfaces, convert over userdomain stuff

Chris PeBenito • 19 years ago

daa0e0

add context template to support mls

Chris PeBenito • 19 years ago

bee546

add userdomain:fd use

Chris PeBenito • 19 years ago

26c87e

add a xml comment

Chris PeBenito • 19 years ago

490639

add xml

Chris PeBenito • 19 years ago

2e77b2

fix xml

Chris PeBenito • 19 years ago

494e98

add xml doc generation

Chris PeBenito • 19 years ago

6d314f

move run_init to selinux, as it is part of policycoreutils

Chris PeBenito • 19 years ago

8623d5

rename some selinuxfs interfaces for more clarity

Chris PeBenito • 19 years ago

178607

add source policy interfaces

Chris PeBenito • 19 years ago

ef3734

add renice all domains

Chris PeBenito • 19 years ago

5817e3

add get all filesystems quotas

Chris PeBenito • 19 years ago

759ba0

add admin template

Chris PeBenito • 19 years ago

76bff3

add device_node:{ chr_file blk_file } getattr;

Chris PeBenito • 19 years ago

c3dff2

start adding admin template

Chris PeBenito • 19 years ago

4d8ddf

change read_shared_libraries to use_shared_libraries, since the execute

Chris PeBenito • 19 years ago

dd14d0

initial commit

Chris PeBenito • 19 years ago

650e75

start adding user domains. fix ttynode and ptynode handling, as they're

Chris PeBenito • 19 years ago

b16c6b

add more parts to send_mail and drop transition since its more then a transition

Chris PeBenito • 19 years ago

c6a3a2

move make_{daemon,init,system}_domain to init to fix type_transition'ing

Chris PeBenito • 19 years ago

ff3138

add lvm.fc, and move relevant entries to devices.fc and storage.fc

Chris PeBenito • 19 years ago

24a7ae

pile of updates

Chris PeBenito • 19 years ago

7bba9d

initial commit

Chris PeBenito • 19 years ago

1bde83

additions for cron and mta

Chris PeBenito • 19 years ago

075c4f

reorg and a fix

Chris PeBenito • 19 years ago

fd9dee

add crontab

Chris PeBenito • 19 years ago

d18e3d

add iface creating private logs

Chris PeBenito • 19 years ago

fb1aee

add make temporary_file and daemon_runtime_file

Chris PeBenito • 19 years ago

d25dd9

add files_make_temporary_file and remove type attribute from

Chris PeBenito • 19 years ago

38e24a

fix logging_make_log_file use

Chris PeBenito • 19 years ago

0b1af2

initial commit

Chris PeBenito • 19 years ago

23caa6

updates needed for cron

Chris PeBenito • 19 years ago

24280a

add read and search for etc_t:dir

Chris PeBenito • 19 years ago

3ec805

make a reasonable lib_t interface

Chris PeBenito • 19 years ago

118186

reorder for more consistency

Chris PeBenito • 19 years ago

183227

oops

Chris PeBenito • 19 years ago

dec168

reorder for more consistency

Chris PeBenito • 19 years ago

6b6740

initial commit

Chris PeBenito • 19 years ago

b3416a

leftover from netutils

Chris PeBenito • 19 years ago

eeb255

initial commit

Chris PeBenito • 19 years ago

f8ec0a

leftover from modutils

Chris PeBenito • 19 years ago

63a310

reorder to fit file context style rules

Chris PeBenito • 19 years ago

279b55

initial commit

Chris PeBenito • 19 years ago

0f3be6

use ptys

Chris PeBenito • 19 years ago

6f50b5

fix hotplug optional

Chris PeBenito • 19 years ago

2812bf

add v4l_device_t

Chris PeBenito • 19 years ago

35b2fb

add printer_device_t

Chris PeBenito • 19 years ago

46be1f

more authlogin handling

Chris PeBenito • 19 years ago

13e94c

move system_chkpwd to .te rather then using template, so that the

Chris PeBenito • 19 years ago

5c1621

priv* attribute fixes for sulogin

Chris PeBenito • 19 years ago

cb2873

unexpand can_kerberos

Chris PeBenito • 19 years ago

c18e82

allow all domains to use /dev/{zero,null,tty}

Chris PeBenito • 19 years ago

a9a20d

reorder restorecon and setfiles relabel rules for consistency

Chris PeBenito • 19 years ago

e843cc

clean up authentication attributes

Chris PeBenito • 19 years ago

a1f94a

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

96b000

start adding infrastructure for the constraint exceptions

Chris PeBenito • 19 years ago

18f25a

cleanup

Chris PeBenito • 19 years ago

c5b5a7

add sulogin

Chris PeBenito • 19 years ago

5d7e8b

initial commit

Chris PeBenito • 19 years ago

15e3d8

add lvm_vg interfaces and do a little cleanup

Chris PeBenito • 19 years ago

8e0280

initial commit

Chris PeBenito • 19 years ago

b2b38c

add read fonts

Chris PeBenito • 19 years ago

ec81ec

interfaces needed for clock

Chris PeBenito • 19 years ago

44a43b

initial commit

Chris PeBenito • 19 years ago

2274f9

add legacy read locale

Chris PeBenito • 19 years ago

0fef98

fix per_userdomain_templates macro generation

Chris PeBenito • 19 years ago

0634b6

cleanup

Chris PeBenito • 19 years ago

ebf760

convert over to system_domain, plus a couple init cleanups

Chris PeBenito • 19 years ago

bbd6a6

initial commit

Chris PeBenito • 19 years ago

4fc915

add in system_domain

Chris PeBenito • 19 years ago

d0eddb

move type delcarations after attribute delcarations to fix a typeattribute

Chris PeBenito • 19 years ago

f66a1a

fix depends

Chris PeBenito • 19 years ago

23af43

add missing copyright and policy_module lines

Chris PeBenito • 19 years ago

df431c

rules picked up from sediff

Chris PeBenito • 19 years ago

f1470e

add usermanage

Chris PeBenito • 19 years ago

849380

more conversion

Chris PeBenito • 19 years ago

1e5c2a

clean up interfaces for new binary module optional structure

Chris PeBenito • 19 years ago

bd202f

stuff from sysnetwork

Chris PeBenito • 19 years ago

f1578d

a few more copied over

Chris PeBenito • 19 years ago

0bc32e

start moving in dhcpc and ifconfig

Chris PeBenito • 19 years ago

0d7ad3

add in pam console

Chris PeBenito • 19 years ago

75a10b

more conversion due to new interfaces

Chris PeBenito • 19 years ago

b2e062

fill pam and utempter authlogin policy and fix up interfaces

Chris PeBenito • 19 years ago

3ce6cb

reorg run_init a little, and add a convert to a few new interfaces

Chris PeBenito • 19 years ago

07d6e3

add newrole:fd use

Chris PeBenito • 19 years ago

ab64c3

updates

Chris PeBenito • 19 years ago

3a9aef

initial commit

Chris PeBenito • 19 years ago

6b9383

switch over to tunable_policy and optional_policy

Chris PeBenito • 19 years ago

25baab

fix stupid _depend define errors (s/ifdef/define/g)

Chris PeBenito • 19 years ago

f360f8

add ignore read system state

Chris PeBenito • 19 years ago

67484f

add tty_device_t and devpts_t chr_file interfaces

Chris PeBenito • 19 years ago

de2cee

add authlogin_read_pam_runtime_data and cleanup interfaces

Chris PeBenito • 19 years ago

dfaf6c

add ignore read rootfs file

Chris PeBenito • 19 years ago

9f2f9e

add in use and ignore use init control channel interfaces

Chris PeBenito • 19 years ago

d0b6ab

handful of changes

Chris PeBenito • 19 years ago

ba7740

move in rule from hotplug

Chris PeBenito • 19 years ago

c3c58c

add in missing policy_module line

Chris PeBenito • 19 years ago

1b9099

domains not needed for execute interface

Chris PeBenito • 19 years ago

fc83db

add in transition and execute interfaces, and newrole sigchld interface

Chris PeBenito • 19 years ago

85bd7f

add append to /dev/null write

Chris PeBenito • 19 years ago

5eafc3

fix privfd

Chris PeBenito • 19 years ago

e9a6fc

doh

Chris PeBenito • 19 years ago

4472f3

add in missing devices

Chris PeBenito • 19 years ago

700988

add a few missing ports, and ppp_device_t

Chris PeBenito • 19 years ago

05a5cd

initial commit

Chris PeBenito • 19 years ago

a7ed44

make mountpoints work, plus misc

Chris PeBenito • 19 years ago

a2d824

initial local login commit

Chris PeBenito • 19 years ago

07efe9

add bulk of selinux module policy, and add required interfaces

Chris PeBenito • 19 years ago

ee5772

minor fixes

Chris PeBenito • 19 years ago

f9cfa1

missed that sysctl_dev is a dir too

Chris PeBenito • 19 years ago

b58606

convert over optional policy to optional_policy macro

Chris PeBenito • 19 years ago

300981

add console setattr if

Chris PeBenito • 19 years ago

55a46d

remove entrypoint assertion

Chris PeBenito • 19 years ago

4fbd2e

reorganize the policy

Chris PeBenito • 19 years ago

4600e0

initial commit

Chris PeBenito • 19 years ago

dfb86a

initial commit

Chris PeBenito • 19 years ago

b5ab18

start merging in rules from daemon domain

Chris PeBenito • 19 years ago

55f456

add init_t:fd use interface and initrc pty rw interface

Chris PeBenito • 19 years ago

889c9a

daemon domain allows noatsecure siginh rlimitinh, not dontaudit

Chris PeBenito • 19 years ago

bcd359

add console dontaudit

Chris PeBenito • 19 years ago

811985

initial commit

Chris PeBenito • 19 years ago

3016a9

add search all dirs

Chris PeBenito • 19 years ago

f9438f

move system_chkpwd to fix ordering issue with checkpolicy

Chris PeBenito • 19 years ago

e064a6

add legacy lib use

Chris PeBenito • 19 years ago

8beec8

add module statement macro and entrypoint executable attribute to replicate

Chris PeBenito • 19 years ago

960373

fix tmp_domain

Chris PeBenito • 19 years ago

94edcc

move modules_object_t back to bootloader

Chris PeBenito • 19 years ago

5f75f5

add sysnetwork

Chris PeBenito • 19 years ago

91a7ab

add missing transition dontaudits

Chris PeBenito • 19 years ago

b30304

initial commit

Chris PeBenito • 19 years ago

549180

attack with sediff, make fs:getattr interfaces consistent, create init and

Chris PeBenito • 19 years ago

219bcf

restructure kernel module to be consistent with other module ordering. put

Chris PeBenito • 19 years ago

a266e3

reorg

Chris PeBenito • 19 years ago

343a23

fix te trans error

Chris PeBenito • 19 years ago

22e113

make getattr and setattr interfaces and make naming consistent

Chris PeBenito • 19 years ago

8a0da1

clean up some filesystem assoc

Chris PeBenito • 19 years ago

33bc0d

complete corenetwork

Chris PeBenito • 19 years ago

0e730c

insmod can be run directly from kernel; fix update_modules errors

Chris PeBenito • 19 years ago

1f7b37

exec and transition interfaces, plus include mod object symlinks in reading modules

Chris PeBenito • 19 years ago

9eb5e8

uncomment test file

Chris PeBenito • 19 years ago

32b502

add devlog_t symlink to loggers

Chris PeBenito • 19 years ago

5a9522

logging and modutils updates

Chris PeBenito • 19 years ago

bf9e1e

rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()

Chris PeBenito • 19 years ago

033c80

more insmod work, bring in depmod and update_modules

Chris PeBenito • 19 years ago

7c5d78

more comments

Chris PeBenito • 19 years ago

bd7646

remove unneeded genfs_contexts

Chris PeBenito • 19 years ago

099c8b

add copyright statement

Chris PeBenito • 19 years ago

e181fe

initial commit

Chris PeBenito • 19 years ago

015435

initial commit

Chris PeBenito • 19 years ago

879b00

initial commit

Chris PeBenito • 19 years ago

67e2ff

add cap sys_rawio to raw memory access interfaces

Chris PeBenito • 19 years ago

f0872d

add per-userdomain template, and shadow_t interfaces

Chris PeBenito • 19 years ago

c4890e

add all types for this module

Chris PeBenito • 19 years ago

3ba13b

add all types for this module, and add klogd policy

Chris PeBenito • 19 years ago

4ddc1a

add interface to send syslog messages

Chris PeBenito • 19 years ago

8c7717

use interface to send syslog messages

Chris PeBenito • 19 years ago

5050e5

initial commit

Chris PeBenito • 19 years ago

b470e3

reorganize and add rootfs dontaudits

Chris PeBenito • 19 years ago

f05782

add rootfs dontaudits for use in init.te

Chris PeBenito • 19 years ago

7aebdb

add dontaudit fs getattr

Chris PeBenito • 19 years ago

053f6a

bring over more targets from strict policy, and add more checking

Chris PeBenito • 19 years ago

88d14a

kernel can load modules

Chris PeBenito • 19 years ago

549655

hold off on improving

Chris PeBenito • 19 years ago

7f89c7

remove relabeling privilege for now

Chris PeBenito • 19 years ago

1ea98d

move assert.te here

Chris PeBenito • 19 years ago

57d236

add interface to associate to filesystems w/o xattr. allow regular files to

Chris PeBenito • 19 years ago

5d7812

add boot_runtime_t

Chris PeBenito • 19 years ago

70dcf7

initial commit

Chris PeBenito • 19 years ago

b4cd15

rpms / selinux-policy

History refpolicy

rpms / selinux-policy

Source Code

History refpolicy