File history - rpms/selinux-policy

Add /var/lib/sepolgen/interface_info to %files section in selinux-policy-devel

Lukas Vrabec • 7 years ago

76e1d2

* Tue Sep 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283

Lukas Vrabec • 7 years ago

c3f53c

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-282

Lukas Vrabec • 7 years ago

4dfc5f

* Mon Sep 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-281

Lukas Vrabec • 7 years ago

65f16b

* Thu Sep 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-280

Lukas Vrabec • 7 years ago

b9bc43

* Tue Sep 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-279

Lukas Vrabec • 7 years ago

fcebe0

* Thu Aug 31 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-278

Lukas Vrabec • 7 years ago

313e17

* Mon Aug 28 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-277

Lukas Vrabec • 7 years ago

0c6eef

* Sat Aug 26 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-276

Lukas Vrabec • 7 years ago

2b14b6

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-275

Lukas Vrabec • 7 years ago

c1ce08

* Wed Aug 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-274

Lukas Vrabec • 7 years ago

b7314c

* Tue Aug 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-273

Lukas Vrabec • 7 years ago

681ffa

* Tue Aug 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-272

Lukas Vrabec • 7 years ago

284401

Remove temporary fix labeling cockpit binary

Lukas Vrabec • 7 years ago

c6aaae

* Mon Aug 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-271

Lukas Vrabec • 7 years ago

be2df8

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-270

Lukas Vrabec • 7 years ago

7a49a1

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

9a31f2

* Thu Aug 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-269

Lukas Vrabec • 7 years ago

ff3605

Fix bogus date for 3.13.1-267 changelog entry

Petr Lautrbach • 7 years ago

cf21eb

* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-268

Petr Lautrbach • 7 years ago

b65295

* Fri Aug 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-267

Lukas Vrabec • 7 years ago

631f95

Revert "Temporary fix while creating manpages using sepolicy is broken."

Petr Lautrbach • 7 years ago

0eccbd

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

Fedora Release Engineering • 7 years ago

f0d7fe

* Fri Jul 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-265

Lukas Vrabec • 7 years ago

4696e7

* Mon Jul 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264

Lukas Vrabec • 7 years ago

3622c0

* Tue Jul 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-263

Lukas Vrabec • 7 years ago

ab9bb0

* Mon Jul 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-262

Lukas Vrabec • 7 years ago

6fc635

* Fri Jun 23 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261

Lukas Vrabec • 7 years ago

959229

Fix commands how to create downstream patches

Lukas Vrabec • 7 years ago

c8dc45

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-260

Lukas Vrabec • 7 years ago

8c093f

* Mon Jun 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258

Lukas Vrabec • 7 years ago

fa95f2

* Thu Jun 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257

Lukas Vrabec • 7 years ago

7ac1cb

* Mon Jun 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256

Lukas Vrabec • 7 years ago

941d5a

* Thu May 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255

Lukas Vrabec • 7 years ago

6c0472

* Mon May 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254

Lukas Vrabec • 7 years ago

c1e28f

* Fri May 12 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253

Lukas Vrabec • 7 years ago

dfee3b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/selinux-policy

Lukas Vrabec • 7 years ago

fe274d

Do not ship .linked files

Petr Lautrbach • 7 years ago

3332d5

Add safeguard around "semodule -n -d sandbox"

Michael Scherer • 7 years ago

c8b7cd

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251

Lukas Vrabec • 7 years ago

e08cff

* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250

Lukas Vrabec • 7 years ago

c08847

* Mon Apr 03 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249

Lukas Vrabec • 7 years ago

0d1055

Put tomcat_t back in unconfined domains for now. BZ(1436434)

Adam Williamson • 7 years ago

f99334

* Tue Mar 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247

Lukas Vrabec • 7 years ago

b8c3e1

* Sat Mar 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246

Lukas Vrabec • 7 years ago

b3dccb

* Fri Mar 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-245

Lukas Vrabec • 7 years ago

96feeb

fix up other docs source

Peter Robinson • 7 years ago

469c7c

use correct source for man pages (hint: 'fedpkg local' is a quick way to test)

Peter Robinson • 7 years ago

88d4af

* Tue Mar 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-244 - Update fwupd policy - /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t - Update ganesha policy - Allow chronyd to read adjtime - Merge pull request #194 from hogarthj/certbot_policy - get the correct cert_t context on certbot certificates bz#1289778 - Label /dev/ss0 as gpfs_device_t

Lukas Vrabec • 7 years ago

0cdcb4

Fix broken build

Lukas Vrabec • 7 years ago

fe778a

* Thu Mar 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-243

Lukas Vrabec • 7 years ago

b77d5e

Temporary fix while creating manpages using sepolicy is broken.

Lukas Vrabec • 7 years ago

fbdb6e

* Mon Feb 27 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-242

Lukas Vrabec • 7 years ago

73a41e

* Tue Feb 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-241

Lukas Vrabec • 7 years ago

acb049

* Wed Feb 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-240

Lukas Vrabec • 7 years ago

9930e8

* Mon Feb 13 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239

Lukas Vrabec • 7 years ago

7c40ae

* Thu Feb 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238

Lukas Vrabec • 7 years ago

67dffb

* Wed Feb 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-237

Lukas Vrabec • 7 years ago

fd7fb3

* Thu Feb 02 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-236

Lukas Vrabec • 7 years ago

bab478

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-235

Lukas Vrabec • 7 years ago

5ed993

* Tue Jan 17 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-234

Lukas Vrabec • 7 years ago

a4801c

* Sun Jan 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-233

Lukas Vrabec • 7 years ago

cb674a

* Fri Jan 06 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232

Lukas Vrabec • 7 years ago

3f98d5

* Wed Dec 14 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-231

Lukas Vrabec • 7 years ago

aabe3f

* Thu Dec 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230

Lukas Vrabec • 7 years ago

6319c4

* Wed Dec 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229

Lukas Vrabec • 7 years ago

68b689

* Mon Dec 05 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 7 years ago

721622

Exit postInstall state in mls package

Lukas Vrabec • 8 years ago

6a9935

* Tue Nov 29 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227

Lukas Vrabec • 8 years ago

bc4637

* Wed Nov 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226

Lukas Vrabec • 8 years ago

99509b

* Wed Nov 09 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225

Lukas Vrabec • 8 years ago

eae2c6

* Tue Nov 08 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224

Lukas Vrabec • 8 years ago

89fc5f

* Mon Nov 07 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223

Lukas Vrabec • 8 years ago

25e792

* Wed Nov 02 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-222

Lukas Vrabec • 8 years ago

2bb5c8

Bump release to -221.

Miroslav Grepl • 8 years ago

cb8525

* Mon Oct 17 2016 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-221

Miroslav Grepl • 8 years ago

ec8ddd

* Sun Oct 16 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220

Lukas Vrabec • 8 years ago

dad1b6

* Mon Oct 10 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219

Lukas Vrabec • 8 years ago

861088

Rename docker-selinux to container-selinux package

Lukas Vrabec • 8 years ago

ab3db2

Revert addition of systemd service for factory reset, since it is

Colin Walters • 8 years ago

3b618f

* Thu Sep 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-216

Lukas Vrabec • 8 years ago

25813e

* Fri Sep 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-215

Lukas Vrabec • 8 years ago

4efe5a

Provide rpm macros for packages installing SELinux modules

Petr Lautrbach • 8 years ago

c49229

* Thu Sep 15 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-214

Lukas Vrabec • 8 years ago

fec828

Do a factory reset when there's no policy.kern file in a store

Petr Lautrbach • 8 years ago

be68cc

Do not hardcode targeted in installCmds()

Petr Lautrbach • 8 years ago

e3bf3e

Update conflicts with docker-selinux

Lukas Vrabec • 8 years ago

96a0f6

* Fri Sep 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-213

Lukas Vrabec • 8 years ago

f6de2d

* Wed Aug 31 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-212

Lukas Vrabec • 8 years ago

69374e

* Thu Aug 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211

Lukas Vrabec • 8 years ago

0c7ae4

* Tue Aug 23 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-210

Lukas Vrabec • 8 years ago

ba0eef

* Tue Aug 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-209

Lukas Vrabec • 8 years ago

6140a0

* Fri Aug 12 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-208

Lukas Vrabec • 8 years ago

347800

* Thu Aug 04 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-207

Lukas Vrabec • 8 years ago

0ab5f5

* Tue Aug 02 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-206

Lukas Vrabec • 8 years ago

4d7576

* Fri Jul 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-205

Lukas Vrabec • 8 years ago

247a84

* Tue Jul 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-204

Lukas Vrabec • 8 years ago

95987e

* Mon Jul 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-203

Lukas Vrabec • 8 years ago

5b18dd

Fix new version of policy

Lukas Vrabec • 8 years ago

b8e5c7

* Wed Jul 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-202

Lukas Vrabec • 8 years ago

449da6

* Mon Jul 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-201

Lukas Vrabec • 8 years ago

1ad890

Add snapperd_contexts to rpm filelist

Lukas Vrabec • 8 years ago

c3183a

* Tue Jul 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-200

Lukas Vrabec • 8 years ago

6c34b3

* Tue Jun 28 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-199

Lukas Vrabec • 8 years ago

962020

* Wed Jun 22 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-198

Lukas Vrabec • 8 years ago

8037d6

Fix typo in changelog

Lukas Vrabec • 8 years ago

a24ea5

* Thu Jun 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-197

Lukas Vrabec • 8 years ago

4a34c4

* Mon Jun 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-196

Lukas Vrabec • 8 years ago

be9b0d

* Thu Jun 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-195

Lukas Vrabec • 8 years ago

04ed47

* Tue Jun 07 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-194

Lukas Vrabec • 8 years ago

c2ab48

* Mon May 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-193

Lukas Vrabec • 8 years ago

2506c0

* Wed May 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-192

Lukas Vrabec • 8 years ago

3289d1

* Tue May 24 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191

Lukas Vrabec • 8 years ago

4c0cee

* Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190

Lukas Vrabec • 8 years ago

5e78b0

* Tue May 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189

Lukas Vrabec • 8 years ago

a2f43d

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

d395cb

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

504f8f

Revert "Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 8 years ago

fc75a6

Revert "Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.""

Lukas Vrabec • 8 years ago

627ba3

Revert "Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

b62b4e

Revert "Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed."

Lukas Vrabec • 8 years ago

ada230

* Mon May 09 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-188

Lukas Vrabec • 8 years ago

70515f

* Thu May 05 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-187

Lukas Vrabec • 8 years ago

7ff0b8

* Fri Apr 29 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-186

Lukas Vrabec • 8 years ago

7a1df1

* Wed Apr 27 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-185

Lukas Vrabec • 8 years ago

02b9e4

* Tue Apr 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-184

Lukas Vrabec • 8 years ago

343326

* Mon Apr 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-183

Lukas Vrabec • 8 years ago

64f816

* Fri Apr 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-182

Lukas Vrabec • 8 years ago

4c6178

* Fri Apr 01 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-181

Lukas Vrabec • 8 years ago

c13001

* Wed Mar 30 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-180

Lukas Vrabec • 8 years ago

fac3fc

Fix spec file by adding also 'Requires' where it is need not just only 'Requires(pre)'. rhbz#1319119

Lukas Vrabec • 8 years ago

610d03

There's no need to repeat files for all subsets again and again when

Lukas Vrabec • 8 years ago

2f9313

* Wed Mar 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-179

Lukas Vrabec • 8 years ago

3f0021

* Thu Mar 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-178

Lukas Vrabec • 8 years ago

cdb2ae

* Tue Mar 08 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-177

Lukas Vrabec • 8 years ago

d14d37

* Thu Mar 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-176

Lukas Vrabec • 8 years ago

9fc76d

Build file_contexts.bin file_context.local.bin file_context.homedir.bin during build phase. This fix issue in Fedora live images when selinux-policy-targeted is not installed but just unpackaged, since there's no .bin files, file_contexts is parsed in selabel_open(). Resolves: rhbz#1314372

Lukas Vrabec • 8 years ago

dd88f3

This change was originally introduced to fix contexts of files in

Lukas Vrabec • 8 years ago

a99d75

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-175

Lukas Vrabec • 8 years ago

ca2575

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-174

Lukas Vrabec • 8 years ago

e98b09

* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-173

Lukas Vrabec • 8 years ago

7ac3a5

* Thu Feb 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-172

Lukas Vrabec • 8 years ago

352a55

Lukas Vrabec • 8 years ago

5d7b1f

* Thu Feb 11 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-171

Lukas Vrabec • 8 years ago

d6823d

* Wed Feb 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-170

Lukas Vrabec • 8 years ago

ead49a

* Wed Feb 03 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-169

Lukas Vrabec • 8 years ago

edb36e

* Wed Jan 20 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-168

Lukas Vrabec • 8 years ago

4c488a

* Mon Jan 18 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-167

Lukas Vrabec • 8 years ago

6d3ee1

* Wed Jan 13 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-166

Lukas Vrabec • 8 years ago

5d165e

* Wed Jan 06 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-165

Lukas Vrabec • 8 years ago

936bb7

* Tue Dec 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-164

Lukas Vrabec • 8 years ago

f1750f

Add missing noreplace flag to file: %{_sysconfdir}/selinux/%1/contexts/files/file_contexts.local

Lukas Vrabec • 8 years ago

ad3add

* Wed Dec 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-163

Lukas Vrabec • 8 years ago

5c898c

- Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)

Miroslav Grepl • 8 years ago

2b449e

* Mon Nov 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-161

Lukas Vrabec • 9 years ago

71a663

* Tue Nov 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160

Lukas Vrabec • 9 years ago

78826f

/usr/sbim/semanage has been moved to policycoreutils-python-utils package which needs to be require in Post section for selinux-policy-minumum package.

Miroslav Grepl • 9 years ago

2fc3e7

- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)

Miroslav Grepl • 9 years ago

0e8453

We need to cop *.local policy files to keep local customizations also after upgrades between old and new module store location. BZ(#1279621).

Miroslav Grepl • 9 years ago

982e48

- Merge pull request #48 from lkundrak/contrib-openfortivpn

Miroslav Grepl • 9 years ago

db55b6

- The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.

Miroslav Grepl • 9 years ago

02b374

We want conflicts with docker-selinux not docker package.

Lukas Vrabec • 9 years ago

0a89ba

* Tue Oct 27 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-156

Lukas Vrabec • 9 years ago

66791f

Add conflict with docker lower or eq as docker-1.9.0-9

Lukas Vrabec • 9 years ago

0f46e0

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-155

Lukas Vrabec • 9 years ago

5d2c76

docker policy files support

Lukas Vrabec • 9 years ago

fadb0d

* Tue Oct 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-154

Lukas Vrabec • 9 years ago

0bdc24

* Tue Oct 13 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-153

Lukas Vrabec • 9 years ago

2bd687

* Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152

Lukas Vrabec • 9 years ago

a6a253

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-151

Lukas Vrabec • 9 years ago

0927e3

* Fri Oct 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150

Lukas Vrabec • 9 years ago

615148

* Tue Sep 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-149

Lukas Vrabec • 9 years ago

b03747

* Tue Sep 22 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-148

Lukas Vrabec • 9 years ago

ec0c1b

Added support for permissive domains

Lukas Vrabec • 9 years ago

7c8404

* Mon Sep 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-147

Lukas Vrabec • 9 years ago

281867

Add files homedir_template and users_extra to selinux-policy-* packages.

Lukas Vrabec • 9 years ago

73a6a9

* Tue Sep 01 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-146

Lukas Vrabec • 9 years ago

f1ab24

* Sun Aug 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-145

Lukas Vrabec • 9 years ago

0d7034

* Mon Aug 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-144

Lukas Vrabec • 9 years ago

96de56

- Add ipmievd policy creaed by vmojzis@redhat.com

Miroslav Grepl • 9 years ago

f5f681

We should be able to do builds with neverallow check with new 2.4 userspace and fix the latest policy fixes.

Miroslav Grepl • 9 years ago

4d0973

* Tue Aug 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-142

Lukas Vrabec • 9 years ago

1ba0a9

* Mon Aug 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-141

Lukas Vrabec • 9 years ago

28b73b

- firewalld needs to relabel own config files. BZ(#1250537)

Miroslav Grepl • 9 years ago

d8af5a

* Tue Aug 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-139

Lukas Vrabec • 9 years ago

f35d90

Remove old trigger selinux-policy-targeted-3.12.1-75 for relabeling home.

Lukas Vrabec • 9 years ago

c63201

Fix for Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 9 years ago

ceff8b

Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed.

Lukas Vrabec • 9 years ago

ae80a5

Move man pages from selinux-policy-devel to selinux-policy-doc

Lukas Vrabec • 9 years ago

d6fa25

* Mon Jul 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-138

Lukas Vrabec • 9 years ago

e5e6b1

Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.

Miroslav Grepl • 9 years ago

57b06e

Prepare selinux-policy package for SELinux store migration

Petr Lautrbach • 9 years ago

a345bb

* Wed Jul 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-137

Lukas Vrabec • 9 years ago

04f749

* Tue Jul 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-136

Lukas Vrabec • 9 years ago

ee724a

* Thu Jul 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-135

Lukas Vrabec • 9 years ago

f53ebe

* Thu Jul 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-134

Lukas Vrabec • 9 years ago

d04212

* Tue Jun 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-133

Lukas Vrabec • 9 years ago

1428c0

* Mon Jun 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-132

Lukas Vrabec • 9 years ago

20e7f0

* Tue Jun 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-131

Lukas Vrabec • 9 years ago

7100c5

- Allow glusterd to interact with gluster tools running in a user domain

Miroslav Grepl • 9 years ago

66628c

- We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 9 years ago

8f4622

We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489)

Miroslav Grepl • 9 years ago

19cd06

See Changelog for all changes.

Miroslav Grepl • 9 years ago

5bcffd

Update selinux-policy.spec to show how to create policy patches from https://github.com/fedora-selinux/selinux-policy

Miroslav Grepl • 9 years ago

26e9de

Minor spec file fixes:

Petr Lautrbach • 9 years ago

9cef10

* Tue May 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-127

Lukas Vrabec • 9 years ago

6a726d

* Mon Apr 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-126

Lukas Vrabec • 9 years ago

229bf3

Fix bad date

Lukas Vrabec • 9 years ago

c4df3c

* Mon Apr 20 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-125

Lukas Vrabec • 9 years ago

0bfe8f

* Wed Apr 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-124

Lukas Vrabec • 9 years ago

28cc16

* Wed Apr 14 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-123

Lukas Vrabec • 9 years ago

578b67

* Tue Apr 07 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-122

Lukas Vrabec • 9 years ago

b9a1c7

* Mon Mar 30 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-121

Lukas Vrabec • 9 years ago

5852f3

* Mon Mar 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-120

Lukas Vrabec • 9 years ago

734dd8

* Wed Mar 18 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-119

Lukas Vrabec • 9 years ago

f9d977

* Mon Mar 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-118

Lukas Vrabec • 9 years ago

e2a064

* Fri Mar 09 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-117

Lukas Vrabec • 9 years ago

ed576d

* Fri Mar 06 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-116

Lukas Vrabec • 9 years ago

b61b8d

* Thu Mar 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-115

Lukas Vrabec • 9 years ago

f6c116

* Mon Feb 25 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-114

Lukas Vrabec • 9 years ago

2ee001

Fix source filepath for moving html files.

Lukas Vrabec • 9 years ago

6acb58

* Mon Feb 23 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-113

Lukas Vrabec • 9 years ago

946068

* Mon Feb 16 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-112

Lukas Vrabec • 9 years ago

83d645

* Tue Feb 10 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-111

Lukas Vrabec • 9 years ago

e79332

* Thu Feb 05 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-110

Lukas Vrabec • 9 years ago

ae5733

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-109

Lukas Vrabec • 9 years ago

1fd39e

* Wed Feb 04 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-108

Lukas Vrabec • 9 years ago

203031

* Thu Feb 02 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-107

Lukas Vrabec • 9 years ago

1808b7

* Thu Jan 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-106

Lukas Vrabec • 9 years ago

a84953

* Thu Jan 15 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-104

Lukas Vrabec • 9 years ago

72c96b

Make build working

Miroslav Grepl • 9 years ago

525ad6

Add /etc/selinux/targeted/contexts/openssh_contexts

Dan Walsh • 9 years ago

f1ed4e

* Mon Dec 15 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-101

Lukas Vrabec • 9 years ago

6eb726

* Thu Dec 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-100

Lukas Vrabec • 9 years ago

e4ea46

* Fri Dec 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-99

Lukas Vrabec • 10 years ago

1c8cf3

* Fri Nov 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-98

Lukas Vrabec • 10 years ago

cf94d6

Fix date bug

Lukas Vrabec • 10 years ago

b52709

* Fri Nov 27 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-97

Lukas Vrabec • 10 years ago

e4d7a4

* Thu Nov 20 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-96

Lukas Vrabec • 10 years ago

48f969

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-95

Lukas Vrabec • 10 years ago

feb8db

* Wed Nov 19 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-94

Lukas Vrabec • 10 years ago

c88e65

* Fri Nov 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-93

Lukas Vrabec • 10 years ago

24d43e

* Mon Nov 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-92

Lukas Vrabec • 10 years ago

b6161d

* Fri Nov 07 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-91

Lukas Vrabec • 10 years ago

062b36

Fixed mistakes in build.

Lukas Vrabec • 10 years ago

ba65f5

* Mon Nov 03 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-90

Lukas Vrabec • 10 years ago

a38ffb

Fix wrong url link to upstream.

Lukas Vrabec • 10 years ago

4dfcf7

* Wed Oct 29 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-89

Lukas Vrabec • 10 years ago

af3cfa

* Tue Oct 21 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-88

Lukas Vrabec • 10 years ago

317f5a

- Allow systemd-networkd to be running as dhcp client.

Miroslav Grepl • 10 years ago

650be6

* Tue Oct 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-86

Lukas Vrabec • 10 years ago

8db354

* Mon Oct 06 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-85

Lukas Vrabec • 10 years ago

cf8979

* Tue Sep 30 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-84

Lukas Vrabec • 10 years ago

245c83

* Mon Sep 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-83

Lukas Vrabec • 10 years ago

343033

- Allow du running in logwatch_t read hwdata.

Miroslav Grepl • 10 years ago

0399c8

* Thu Sep 11 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-81

Lukas Vrabec • 10 years ago

6021c0

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-80

Lukas Vrabec • 10 years ago

ae5a64

* Wed Sep 10 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-79

Lukas Vrabec • 10 years ago

6c07cc

Fix release number

Lukas Vrabec • 10 years ago

6823c7

* Tue Sep 02 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-78

Lukas Vrabec • 10 years ago

9532ec

* Thu Aug 28 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-77

Lukas Vrabec • 10 years ago

c46359

* Tue Aug 26 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-76

Lukas Vrabec • 10 years ago

45b429

* Fri Aug 22 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-75

Lukas Vrabec • 10 years ago

f9cc8e

Rebuild for rpm bug 1131960

Kevin Fenzi • 10 years ago

5f1085

* Mon Aug 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-73

Lukas Vrabec • 10 years ago

9229b6

* Tue Aug 12 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-72

Lukas Vrabec • 10 years ago

3399c5

* Mon Aug 4 2014 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-71

Miroslav Grepl • 10 years ago

0bd1c4

- Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.

Miroslav Grepl • 10 years ago

c950f2

fix license handling

Tom Callaway • 10 years ago

4abfbc

- Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow user

Miroslav Grepl • 10 years ago

540429

* Thu Jul 24 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-67

Lukas Vrabec • 10 years ago

0a90ee

- Revert labeling back to /var/run/systemd/initctl/fifo

Miroslav Grepl • 10 years ago

668337

* Fri Jul 18 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-65

Lukas Vrabec • 10 years ago

ee1386

* Mon Jul 14 2014 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-64

Lukas Vrabec • 10 years ago

3e33a0

- If I can create a socket I need to be able to set the attributes

Miroslav Grepl • 10 years ago

682896

- Allow swift to use tcp/6200 swift port

Miroslav Grepl • 10 years ago

24862f

Fix spec file issues

Miroslav Grepl • 10 years ago

e00cf0

permissivedomains.pp should not be in MLS

Miroslav Grepl • 10 years ago

9c9e4d

* Fri Jun 20 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-61

Miroslav Grepl • 10 years ago

211fb9

* Thu Jun 19 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-60

Miroslav Grepl • 10 years ago

c04c31

Merge user_tmp patches to base patches

Miroslav Grepl • 10 years ago

c629d2

* Tue Jun 17 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.+- Allow system_bus_types to use stream_sockets inherited

Miroslav Grepl • 10 years ago

1c0c71

- Add mozilla_plugin_use_bluejeans boolean

Miroslav Grepl • 10 years ago

a62949

- Allow staff_t to communicate and run docker

Miroslav Grepl • 10 years ago

686a38

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

Dennis Gilmore • 10 years ago

07a8be

- Add decl for cockip port

Miroslav Grepl • 10 years ago

0ddb74

- geard seems to do a lot of relabeling

Miroslav Grepl • 10 years ago

cccaf8

Bump version

Miroslav Grepl • 10 years ago

776898

* Tue May 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-

Miroslav Grepl • 10 years ago

dfbb9a

- Added iotop policy. Thanks William Brown

Miroslav Grepl • 10 years ago

dbf4ab

- More rules for gears and openshift

Miroslav Grepl • 10 years ago

6fbf46

* Wed May 7 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-51

Miroslav Grepl • 10 years ago

4c682c

- selinux_unconfined_type should not be able to set booleans if the securemode is set

Miroslav Grepl • 10 years ago

9d0057

- Fix labeling for /root/\.yubico

Miroslav Grepl • 10 years ago

4e5d63

- Fix virt_use_samba boolean

Miroslav Grepl • 10 years ago

3f5abd

- mongod should not be a part of cloudforms.pp

Miroslav Grepl • 10 years ago

bf38d6

- Allow init_t to setattr/relabelfrom dhcp state files

Miroslav Grepl • 10 years ago

7ca2b3

* Tue Apr 8 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-45

Miroslav Grepl • 10 years ago

1aabaf

- Change hsperfdata_root to have as user_tmp_t

Miroslav Grepl • 10 years ago

3f1341

- Add labels for /var/named/chroot_sdb/dev devices

Miroslav Grepl • 10 years ago

c14474

* Tue Apr 1 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-42

Miroslav Grepl • 10 years ago

33665e

- Turn on gear_port_t

Miroslav Grepl • 10 years ago

f8f75f

- update storage_filetrans_all_named_dev for sg* devices

Miroslav Grepl • 10 years ago

1f53e6

- Manage_service_perms should include enable and disable, need backport to RHEL7

Miroslav Grepl • 10 years ago

8ad914

Remove smstools.pp to make upgrade working

Miroslav Grepl • 10 years ago

443a36

Create base.lst which contains list of base policy modules

Miroslav Grepl • 10 years ago

38dae9

- Label sddm as xdm_exec_t to make KDE working again

Miroslav Grepl • 10 years ago

8e18cc

- Allow collectd to talk to libvirt

Miroslav Grepl • 10 years ago

633767

- Add additional fixes for systemd_networkd_t

Miroslav Grepl • 10 years ago

3f9fe1

- sshd to read network sysctls

Miroslav Grepl • 10 years ago

0575d6

bump release

Miroslav Grepl • 10 years ago

648f90

* Wed Mar 12 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-34

Miroslav Grepl • 10 years ago

695bbc

- Allow init_t to stream connect to ipsec

Miroslav Grepl • 10 years ago

ab84f4

- Allow numad to write scan_sleep_millisecs

Miroslav Grepl • 10 years ago

24a25f

- Modify xdm_write_home to allow create files/links in /root with xdm_home_t

Miroslav Grepl • 10 years ago

2d6801

- Allow block_suspend cap2 for systemd-logind and rw dri device

Miroslav Grepl • 10 years ago

08fe2e

* Fri Feb 28 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-29

Miroslav Grepl • 10 years ago

18bb7e

Remove vbetool we no longer ship this

Dan Walsh • 10 years ago

96f7ac

- Allow bumblebeed to send signal to insmod

Miroslav Grepl • 10 years ago

439063

- Make unconfined_service_t valid in enforcing

Miroslav Grepl • 10 years ago

3e0039

- Add labeling for /usr/sbin/amavi

Miroslav Grepl • 10 years ago

74ec50

* Tue Feb 18 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-25

Miroslav Grepl • 10 years ago

60668f

Add nsplugin.pp and qemu.pp as two additional policies that we no longer ship

Dan Walsh • 10 years ago

0474cb

Fix selinux config file

Miroslav Grepl • 10 years ago

3dc79f

Make sure selinux-policy owns the rpmconfigdir and macros.d so it does not build a require for rpm

Dan Walsh • 10 years ago

fdaea4

- Dontaudit rendom domains listing /proc and hittping system_map_t

Miroslav Grepl • 10 years ago

7a7277

- Addopt corenet rules for unbound-anchor to rpm_script_t

Miroslav Grepl • 10 years ago

05a36c

- Fix /dev/vfio/vfio labeling

Miroslav Grepl • 10 years ago

638386

- Add kernel_mounton_messages() interface

Miroslav Grepl • 10 years ago

fc059d

- Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring

Miroslav Grepl • 10 years ago

a85303

- Add net_admin also for systemd_passwd_agent_t

Miroslav Grepl • 10 years ago

2b1129

Fix the day of the week

Dan Walsh • 10 years ago

98a685

- Add haproxy_connect_any boolean

Miroslav Grepl • 10 years ago

f8d854

- init calling needs to be optional in domain.te

Miroslav Grepl • 10 years ago

254b15

Remove conflict for pki-selinux

Miroslav Grepl • 10 years ago

f4d3ef

- New access needed to allow docker + lxc +SELinux to work together

Miroslav Grepl • 10 years ago

d7f0c3

- Add cron unconfined role support for uncofined SELinux user

Miroslav Grepl • 10 years ago

3a0ebd

index.html and style.css should be in /usr/share/selinux/devel/htm

Miroslav Grepl • 10 years ago

5dcd63

See spec file

Miroslav Grepl • 10 years ago

368fb8

* Mon Jan 13 2014 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-13

Miroslav Grepl • 10 years ago

5bd1f1

- Add gluster fixes

Miroslav Grepl • 10 years ago

9b8508

- Allow mozilla plugin to chat with policykit, needed for spice

Miroslav Grepl • 10 years ago

9d88e1

policy-rawhide-contrib-apache-content.patch is no longer needed. Merged to policy-rawhide-contrib.patch.

Miroslav Grepl • 10 years ago

804870

Fix usage of semanage import line

Dan Walsh • 10 years ago

70c60d

Add selinux/minimum/contexts/users/sysadm_u also for minimum policy

Miroslav Grepl • 10 years ago

c9394c

Fix spec file

Miroslav Grepl • 10 years ago

74b303

- Allow freeipmi_ipmidetectd_t to use freeipmi port

Miroslav Grepl • 10 years ago

239710

- DRM master and input event devices are used by the TakeDevice API

Miroslav Grepl • 10 years ago

4b8334

- Add back fixes for gnome_role_template()

Miroslav Grepl • 10 years ago

676f0e

- Add lsmd_plugin_t for lsm plugins

Miroslav Grepl • 11 years ago

d61adf

- Add filename transition also for servicelog.db-journal

Miroslav Grepl • 11 years ago

c9b9ed

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-5

Miroslav Grepl • 11 years ago

3abf05

* Mon Nov 18 2013 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-4

Miroslav Grepl • 11 years ago

d20212

- Add policy-rawhide-contrib-apache-content.patch to re-write apache_content_template() by dwalsh

Miroslav Grepl • 11 years ago

4fc70e

Fix config.tgz to include lxc_contexts and systemd_contexts

Dan Walsh • 11 years ago

164fa3

* Wed Nov 13 2013 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-1

Miroslav Grepl • 11 years ago

269ef0

Upload new upstream sources

Miroslav Grepl • 11 years ago

0f9b0d

- Fix passenger_stream_connect interface

Miroslav Grepl • 11 years ago

73ec2c

* Fri Nov 8 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-99

Miroslav Grepl • 11 years ago

90f926

- Add files_relabel_base_file_types() interface

Miroslav Grepl • 11 years ago

c872e5

- Add label only for redhat.repo instead of /etc/yum.repos.d. But probably we will need to switch for the directory.

Miroslav Grepl • 11 years ago

c5e7e5

Fix spec file

Miroslav Grepl • 11 years ago

6bf18a

* Fri Oct 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-96

Miroslav Grepl • 11 years ago

18a1ac

Do remove regardless. Update config.tgz with new labels for virt.

Dan Walsh • 11 years ago

d11521

scratch build

Miroslav Grepl • 11 years ago

cd5d97

Fix spec file to use systemd_context instead of sytemd_context

Miroslav Grepl • 11 years ago

d4e55c

- Allow sysadm_t to read login information

Miroslav Grepl • 11 years ago

bf4990

Add fix to place sytemd_contexts

Miroslav Grepl • 11 years ago

4f67cf

* Thu Oct 24 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-93

Miroslav Grepl • 11 years ago

bb6a1f

- Allow sshd_t to read openshift content, needs backport to RHEL6.5

Miroslav Grepl • 11 years ago

2d3bd4

Add rtas policy

Miroslav Grepl • 11 years ago

71bb64

- Allow mailserver_domains to manage and transition to mailman data

Miroslav Grepl • 11 years ago

37ab07

- Fix gnome_read_generic_data_home_files()

Miroslav Grepl • 11 years ago

99c451

Need to create the policy.kern symbolic link in the shipping policy.

Dan Walsh • 11 years ago

973ebb

- Add auth_exec_chkpwd interface

Miroslav Grepl • 11 years ago

ce98df

- init reload from systemd_localed_t

Miroslav Grepl • 11 years ago

17233e

Fix spec file

Miroslav Grepl • 11 years ago

7a5c55

- Fix nscd_shm_use()

Miroslav Grepl • 11 years ago

06b8c0

* Wed Oct 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-85

Miroslav Grepl • 11 years ago

05e00d

- Fix labeling for /usr/libexec/kde4/kcmdatetimehelper

Miroslav Grepl • 11 years ago

dc3673

- Do not build sanbox pkg on MLS

Miroslav Grepl • 11 years ago

26f445

Only build the sandbox.pp file for targeted

Dan Walsh • 11 years ago

b03c86

- wine_tmp is no longer needed

Miroslav Grepl • 11 years ago

d7f852

- Dontaudit attempts by sosreport to read shadow_t

Miroslav Grepl • 11 years ago

3d49b2

- Allow ldconfig to write to kdumpctl fifo files

Miroslav Grepl • 11 years ago

fcf015

Allow block_suspend cap for samba-net

Dan Walsh • 11 years ago

3fc099

Allow block_suspend cap for samba-net

Dan Walsh • 11 years ago

030f13

Fix the spec file to use correct version

Miroslav Grepl • 11 years ago

4b4782

- Allow block_suspend cap for samba-net

Miroslav Grepl • 11 years ago

2411e6

Fix nameing of rpm macro

Dan Walsh • 11 years ago

26bb0a

Cleanup related to init_domain()+inetd_domain fixes

Dan Walsh • 11 years ago

1b0e09

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 11 years ago

b8f3f1

selinux_set_enforce_mode needs to be used with type

Dan Walsh • 11 years ago

b6a163

- selinux_set_enforce_mode needs to be used with type

Miroslav Grepl • 11 years ago

3b361c

unversioned doc dir change

Dan Walsh • 11 years ago

0ea841

- Add more aliases in pegasus.te

Miroslav Grepl • 11 years ago

5ed544

- Allow xdm_t to act as a dbus client to itsel

Miroslav Grepl • 11 years ago

6655c4

- Add support for cmpiLMI_Service-cimprovagt

Miroslav Grepl • 11 years ago

993bf3

- Make auditd working if audit is configured to perform SINGLE action on disk error

Miroslav Grepl • 11 years ago

0ab4f2

- Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t

Miroslav Grepl • 11 years ago

7a0f02

* Thu Jul 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-63

Miroslav Grepl • 11 years ago

21e8b6

* Tue Jul 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-62

Miroslav Grepl • 11 years ago

60ad55

- Add prosody policy written by Michael Scherer

Miroslav Grepl • 11 years ago

d1027c

- Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow s

Miroslav Grepl • 11 years ago

2d4ef1

Fix name of sandbox.pp.disabled

Dan Walsh • 11 years ago

c23c3b

- Make DSPAM to act as a LDA working

Miroslav Grepl • 11 years ago

b27c1f

We need to recompile policy if pcre is updated

Dan Walsh • 11 years ago

7c810a

- Allow lvm_t to create default targets for filesystem handling

Miroslav Grepl • 11 years ago

634d39

- Don't audit access checks by sandbox xserver on xdb var_lib

Miroslav Grepl • 11 years ago

82acdf

Make vdagent able to request loading kernel module

Dan Walsh • 11 years ago

859a10

Require sepolgen-ifgen to run in post install

Dan Walsh • 11 years ago

9f52d7

- Add labeling for /dev/tgt

Miroslav Grepl • 11 years ago

708bb6

- accountservice watches when accounts come and go in wtmp

Miroslav Grepl • 11 years ago

166a28

- Fix openshift_search_lib

Miroslav Grepl • 11 years ago

574431

Run sepolgen-ifgen in post install or selinux-policy-devel

Dan Walsh • 11 years ago

9b75ca

Update to the latest f19

Miroslav Grepl • 11 years ago

520d6f

- Dontaudit to getattr on dirs for dovecot-deliver

Miroslav Grepl • 11 years ago

d4d344

- Add additional fixes for #948073 bug

Miroslav Grepl • 11 years ago

471c1e

Make sure users and unconfined domains create .hushlogin with the correct label

Dan Walsh • 11 years ago

ff5e7c

Move {_usr}/share/selinux/devel/policy to -devel package so we can remove requirement to install -doc in livecd

Dan Walsh • 11 years ago

bdd37e

Update to latest F19

Miroslav Grepl • 11 years ago

16d305

- Remove userdom_home_manager for xdm_t and move all rules to xserver.te directly

Miroslav Grepl • 11 years ago

2d9b83

- Allow tcpd to execute leafnode

Miroslav Grepl • 11 years ago

728c6f

* Tue Apr 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-38

Miroslav Grepl • 11 years ago

a97fbb

- Allow lvm to create its own unit files

Miroslav Grepl • 11 years ago

ac58d9

- Fix lockdev_manage_files()

Miroslav Grepl • 11 years ago

d61e0b

- Allow realmd to run ipa, really needs to be an unconfined_domain

Miroslav Grepl • 11 years ago

aae650

- Fix description of deny_ptrace boolean

Miroslav Grepl • 11 years ago

d42d16

* Mon Apr 15 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-30

Miroslav Grepl • 11 years ago

1d348d

- Add mising nslcd_dontaudit_write_sock_file() interface

Miroslav Grepl • 11 years ago

fa447f

- Allow httpd_t to connect to osapi_compute port using httpd_use_openstac

Miroslav Grepl • 11 years ago

d8b4fa

Fix file_contexts.subs to label /run/lock correctly

Dan Walsh • 11 years ago

a48e54

* Fri Apr 5 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-26

Miroslav Grepl • 11 years ago

f4f51d

- Allow realmd to create tmp files

Miroslav Grepl • 11 years ago

d9444b

- Add labeling for /usr/share/pki

Miroslav Grepl • 11 years ago

30fc9e

Allow localectl to read /etc/X11/xorg.conf.d directory

Dan Walsh • 11 years ago

6c034c

Merge branches 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

07ce8f

Fix triggerpostun command

Dan Walsh • 11 years ago

aef8ac

- Adopt swift changes from lhh@redhat.com

Miroslav Grepl • 11 years ago

00d1b8

- Allow postgresql to manage rgmanager pid files

Miroslav Grepl • 11 years ago

06b84e

* Mon Mar 4 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-18

Miroslav Grepl • 11 years ago

e30ef5

Fix spec file

Miroslav Grepl • 11 years ago

ed588c

* Fri Feb 1 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-17

Miroslav Grepl • 11 years ago

e4a8be

Remove rgmanager,pacemaker,aisexec,pacemaker policies which have been merge to rhcs.pp as cluster_t

Miroslav Grepl • 11 years ago

59421a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

1be9b1

Cover up errors if .config dir does not exist, no need to run restorecon twice

Dan Walsh • 11 years ago

0aef6e

- Allow nmbd_t to create samba_var_t directories

Miroslav Grepl • 11 years ago

94b74a

Man pages are now generated in the build process

Dan Walsh • 11 years ago

79ec80

Man pages are now generated in the build process

Dan Walsh • 11 years ago

6a97c7

New POLICYCOREUTILSVER is required

Miroslav Grepl • 11 years ago

cc78bc

* Thu Feb 21 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-15

Miroslav Grepl • 11 years ago

2aca9b

Switch to building man pages and html pages on the fly

Dan Walsh • 11 years ago

a7c9a9

- Allow gluster to get attrs on all fs

Miroslav Grepl • 11 years ago

26cbc5

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 11 years ago

f0628b

Always run restorecon at install time to make sure key files are labeled correctly

Dan Walsh • 11 years ago

5eea0f

Remove shutdown policy. Shutdown is now a symlink to systemctl.

Dan Walsh • 11 years ago

3460d4

- virsh now does a setexeccon call

Miroslav Grepl • 11 years ago

2599f2

Bump required versions for tool chain.

Dan Walsh • 11 years ago

793556

- Rename files_rw_inherited_tmp_files to files_rw_inherited_tmp_file

Miroslav Grepl • 11 years ago

7980df

- Allow gpg to read fips_enabled

Miroslav Grepl • 11 years ago

ad0943

Fix spec file

Miroslav Grepl • 11 years ago

953ff1

- Add xserver_xdm_ioctl_log() interface

Miroslav Grepl • 11 years ago

da973f

* Wed Jan 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-9

Miroslav Grepl • 11 years ago

f12506

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

45852f

Do a better job of cleaning up old policy files, trigger relabel of /home on upgrade to F19

Dan Walsh • 11 years ago

b59d07

- Change ssh_use_pts to use macro and only inherited sshd_devpts_t

Miroslav Grepl • 11 years ago

aab193

* Fri Jan 25 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-7

Miroslav Grepl • 11 years ago

1802be

clamav and amavis has been merge to antivirus policy

Miroslav Grepl • 11 years ago

4c3676

* Wed Jan 23 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-6

Miroslav Grepl • 11 years ago

b59190

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 11 years ago

a09a7d

Add selinux-policy-filesystem for /etc/selinux directory so it can be shared with libsemanage

Dan Walsh • 11 years ago

6d40a6

- Fix systemd_manage_unit_symlinks() interface

Miroslav Grepl • 11 years ago

207a4d

Rename gnomeclock to systemd_timedated

Dan Walsh • 11 years ago

5f2806

* Mon Jan 14 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-4

Miroslav Grepl • 11 years ago

7f090d

* Fri Jan 11 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-3

Miroslav Grepl • 11 years ago

a7dce2

Add back consolekit but we keep just consolekit.te and .fc was commented

Miroslav Grepl • 11 years ago

0c265c

- Remove all mcs overrides and replace with t1 != mcs_constrained_ty

Miroslav Grepl • 11 years ago

f851ae

use policy.29

Miroslav Grepl • 11 years ago

fa970c

Require POLICYCOREUTILSVER 2.1.13-53

Miroslav Grepl • 11 years ago

8f47af

* Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1

Miroslav Grepl • 11 years ago

23a944

Upload new upstream sources

Miroslav Grepl • 11 years ago

e5e418

Bump POLICYVER

Miroslav Grepl • 11 years ago

9cdcf5

Revert "Upstream uses ctdb instead of ctdbd policy"

Miroslav Grepl • 11 years ago

fdeb41

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

c57639

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

1a1e00

Revert "Upstream change:"

Miroslav Grepl • 11 years ago

6e9f07

Upstream change:

Miroslav Grepl • 11 years ago

0368b4

Upstream change:

Miroslav Grepl • 11 years ago

731688

Upstream change:

Miroslav Grepl • 11 years ago

098e5a

Upstream uses ctdb instead of ctdbd policy

Miroslav Grepl • 11 years ago

187110

Bump the policy version to 28 to match selinux userspace

Dan Walsh • 11 years ago

01be26

* Wed Jan 2 2013 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-69

Miroslav Grepl • 11 years ago

17da01

renamed: policy-rawhide.patch -> policy-rawhide-base.patch

Miroslav Grepl • 11 years ago

eb0fd2

Backport policy from F18

Miroslav Grepl • 11 years ago

524914

Make rawhide == f18

Miroslav Grepl • 11 years ago

a27009

Make sure content created in the homedir by uncnfined domains get created with the corect label. specifically /.readahead

rhatdan • 12 years ago

5991fc

+* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-3

Miroslav Grepl • 12 years ago

e88478

* Tue Aug 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2

Miroslav Grepl • 12 years ago

711b0e

* Fri Aug 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11

Miroslav Grepl • 12 years ago

e2915a

* Thu Aug 2 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-0

Miroslav Grepl • 12 years ago

46a9c6

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-15

Miroslav Grepl • 12 years ago

3c848e

* Mon Jul 30 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-

Miroslav Grepl • 12 years ago

42c409

- Add systemd_logind_inhibit_var_run_t attribute

Miroslav Grepl • 12 years ago

b4a78a

Add interface to dontaudit getattr access on sysctls

Dan Walsh • 12 years ago

267612

* Mon Jul 23 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12

Miroslav Grepl • 12 years ago

9ba137

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

Dennis Gilmore • 12 years ago

c07f64

+- Add realmd and stapserver policies

Miroslav Grepl • 12 years ago

3da13d

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 12 years ago

18fc0f

Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Dan Walsh • 12 years ago

9d1d99

- Until we figure out how to fix systemd issues, allow all apps that send syslog messag

Miroslav Grepl • 12 years ago

98ec5a

* Tue Jul 3 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8

Miroslav Grepl • 12 years ago

0f07ba

- add ptrace_child access to process

Miroslav Grepl • 12 years ago

1de5de

* Mon Jun 25 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6

Miroslav Grepl • 12 years ago

52ac61

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a3e9dc

Remove pyzor and razor modules

Dan Walsh • 12 years ago

7f9b7d

- apcupsd needs to read /etc/passwd

Miroslav Grepl • 12 years ago

c74d19

- Add support for ecryptfs

Miroslav Grepl • 12 years ago

bfc280

* Tue Jun 12 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3

Miroslav Grepl • 12 years ago

c8f96d

* Sat Jun 9 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-2

Miroslav Grepl • 12 years ago

4415df

Add booleans.subs_dist to selinux-policy package

Dan Walsh • 12 years ago

c39563

Trigger a restorecon -R -v /home on the next update

Dan Walsh • 12 years ago

62163c

update selinux-policy.spec file

Miroslav Grepl • 12 years ago

7efcb8

Add temporary roleattribute patches

Miroslav Grepl • 12 years ago

1ee0a3

* Thu Jun 7 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1

Miroslav Grepl • 12 years ago

3dd200

Upload new sources

Miroslav Grepl • 12 years ago

e392ec

Sync master with F17

Miroslav Grepl • 12 years ago

4a27ed

+* Mon Feb 13 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-

Miroslav • 12 years ago

de6933

Add dnssec policy and go back to unconfined domains versus permissive domains

Dan Walsh • 12 years ago

4066cf

Revert "Dropping support for snort since it was dropped from Fedora. Users should use nagios"

Dan Walsh • 12 years ago

7bf102

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

5c28b0

Dropping support for snort since it was dropped from Fedora. Users should use nagios

Dan Walsh • 12 years ago

76d9bf

Fedora no longer ships kerneloops, dropping policy

Dan Walsh • 12 years ago

d3a57c

- Add policy for grindengine MPI jobs

Miroslav Grepl • 12 years ago

81894d

Revert "Simplify the build-docs target"

Miroslav Grepl • 12 years ago

80d21d

- Add new sysadm_secadm.pp module

Miroslav Grepl • 12 years ago

4689b0

Simplify the build-docs target

Dan Walsh • 12 years ago

01be48

Allow builder to skip build_docs

Dan Walsh • 12 years ago

dc4ca7

- Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory

Miroslav • 12 years ago

30ab25

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 12 years ago

3515d8

Fix file_context.subs_dist for now to work with pre usrmove

Dan Walsh • 12 years ago

938249

- More /usr move fixes

Miroslav Grepl • 12 years ago

fb431d

POLY is no longer used

Dan Walsh • 12 years ago

191c43

Make sure /etc/passwd and /etc/group properly labeled

Dan Walsh • 12 years ago

f53135

* Thu Jan 26 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80

Miroslav • 12 years ago

a9d343

- Turn on deny_ptrace boolean for the Rawhide run, so we can t

Miroslav Grepl • 12 years ago

0c0b39

+- Add labeling for udisks2

Miroslav • 12 years ago

75a7b9

- Treat Bip with bitlbee policy

Miroslav Grepl • 12 years ago

8cd443

- Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there

Miroslav Grepl • 12 years ago

de9114

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

291b1f

Remove Requires for bunzip2 and mktemp

Dan Walsh • 12 years ago

b80397

- Merge systemd patch

Miroslav Grepl • 12 years ago

153cc8

Fixes to make rawhide boot in enforcing mode with latest systemd changes

Dan Walsh • 12 years ago

cd25a7

Add labeling for /var/run/systemd/journal/syslog

Dan Walsh • 12 years ago

86d3f6

+- Add labeling for /var/run/systemd/journal/syslog

Miroslav • 12 years ago

68079f

- Fixed destined form libvirt-sandbox

Miroslav • 12 years ago

69a8d0

Rename audioentropy to entropy to match upstream

Dan Walsh • 12 years ago

7cf580

- New fix for seunshare, requires seunshare_domains to be able to mounton /

Miroslav • 12 years ago

b3ef57

Test if selinuxenabled correctly

Dan Walsh • 12 years ago

5a73fd

default trans rules for Rawhide policy

Dan Walsh • 12 years ago

d5b8b9

- default trans rules for Rawhide policy

Miroslav Grepl • 12 years ago

67539d

Update to handle labeling on /sys using systemd-tmpfiles, also support default_range transition rules

Dan Walsh • 12 years ago

bce4ec

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a92258

- Add httpd_can_connect_ldap() interface

Miroslav • 12 years ago

cd2519

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

49b373

Committing my changes

Dan Walsh • 12 years ago

ad10ef

+- Add label for /var/lib/iscan/interpreter

Miroslav • 12 years ago

7c693b

- Allow abrt to request the kernel to load a module

Miroslav • 12 years ago

d17f75

+- Allow mozilla_plugin_t to manage mozilla_home_t

Miroslav • 12 years ago

202bb4

- Fixes for xguest package

Miroslav • 12 years ago

1094d0

+- Fixes related to /bin, /sbin

Miroslav • 12 years ago

e91d87

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

5305bd

Eliminate nsplugin from F17

Dan Walsh • 13 years ago

102fd0

+- Use fs_use_xattr for squashf

Miroslav • 13 years ago

4fe804

- Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it

Miroslav • 13 years ago

e5768e

Let firewallgui read the selinux config

Dan Walsh • 13 years ago

e9119e

- Disable nsplugin module

Miroslav • 13 years ago

0ca57d

+- Allow mcelog_t to create dir and file in /var/run and label it

Miroslav • 13 years ago

234df6

Merge

Dan Walsh • 13 years ago

3c81e3

- Add ssh_dontaudit_search_home_dir

Miroslav • 13 years ago

19d3c6

- Pulseaudio changes

Miroslav • 13 years ago

68f145

Checkin patches to git repository

dwalsh • 13 years ago

4501de

Remove allow_execmem boolean and replace with deny_execmem boolean

Dan Walsh • 13 years ago

4147fe

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

901609

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

e58227

Add more MCS fixes to make sandbox working

Dan Walsh • 13 years ago

13382d

MCS fixes

Dan Walsh • 13 years ago

653590

MCS fixes

Dan Walsh • 13 years ago

01e90f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0b72d1

MCS fixes

Dan Walsh • 13 years ago

8872d3

+- MCS fixes

Miroslav • 13 years ago

76b2f5

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

d5bede

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

a7f002

Check in fixed for Chrome nacl support

Dan Walsh • 13 years ago

bc6fbd

Begin removing qemu_t domain, we really no longer need this domain.

Dan Walsh • 13 years ago

26536c

Remove qemu.pp again without causing a crash

Dan Walsh • 13 years ago

a1db2c

Remove qemu.pp, everything should use svirt_t or stay in its current domain

Dan Walsh • 13 years ago

b4b026

Allow policykit to talk to the systemd via dbus

Dan Walsh • 13 years ago

084f95

Change bootstrap name to nacl

Dan Walsh • 13 years ago

fa26d8

Allow named to connect to dirsrv by default

Dan Walsh • 13 years ago

44066b

Allow firewallgui to read /etc/selinux/config

Dan Walsh • 13 years ago

3dcdda

- Fixes for cloudform policies which need to connect to random ports

Miroslav • 13 years ago

b6ae80

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

1a2b4d

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

f875d2

Policy update should not modify local contexts

Dan Walsh • 13 years ago

e1f17e

Remove ada policy

Dan Walsh • 13 years ago

052e17

Remove ada policy

Dan Walsh • 13 years ago

b01657

Remove tzdata policy

Dan Walsh • 13 years ago

61fa8d

Remove tzdata policy

Dan Walsh • 13 years ago

8214f7

Remove tzdata policy

Miroslav • 13 years ago

1944b1

Remove tzdata domain, only necessary to make sure stuff is labeled correctly.

Dan Walsh • 13 years ago

087aae

Add policies for nova openstack

Dan Walsh • 13 years ago

a56e13

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

4dba2e

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

1414f9

Add passwd_file_t for /etc/ptmptmp

Dan Walsh • 13 years ago

9bf3aa

Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)

Dan Walsh • 13 years ago

e29441

Move dontaudit sys_ptrace line from permissive.te to domain.te

Dan Walsh • 13 years ago

245397

Don't check md5 size or mtime on certain config files

Dan Walsh • 13 years ago

042e3a

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

2f4dfe

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

6554bb

Shrink size of policy through use of attributes for userdomain and apache

Dan Walsh • 13 years ago

2a89df

Fix spec file

Miroslav • 13 years ago

100055

- Allow virsh to read xenstored pid file

Miroslav • 13 years ago

54943f

Allow nmbd to manage sock file in /var/run/nmbd

Dan Walsh • 13 years ago

859ba0

Fix missing patch from F16

Dan Walsh • 13 years ago

14d7aa

Allow logrotate setuid and setgid since logrotate is supposed to do it

Dan Walsh • 13 years ago

f1bc73

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

e15ae4

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

a004ca

+- Add support for Clustered Samba commands

Miroslav • 13 years ago

024724

Add label for /etc/passwd

Dan Walsh • 13 years ago

4d2486

Add grub.patch

Miroslav • 13 years ago

1b20a5

Make unconfined domains permissive for rawhide

Dan Walsh • 13 years ago

24b80b

- Make mta_role() active

Miroslav • 13 years ago

02a8a4

Fix spec file

Miroslav Grepl • 13 years ago

1aafd0

Fix spec file

Miroslav Grepl • 13 years ago

031161

+- Change screen to use screen_domain attribute and allow screen_domains to read all process domain state

Miroslav • 13 years ago

f9c350

Add definition for ephemeral ports

Dan Walsh • 13 years ago

747b71

- Needs to require a new version of checkpolicy

Miroslav • 13 years ago

dec011

- Allow sanlock to manage virt lib files

Miroslav • 13 years ago

40af2a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

a59df1

Make seusers config noreplace

Dan Walsh • 13 years ago

9c4a93

- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files

Miroslav • 13 years ago

b3edab

+- Allow collectd to read hardware state information

Miroslav • 13 years ago

e8563b

Fix typo in spec file

Miroslav • 13 years ago

b1448b

- removing unconfined_notrans_t no longer necessary

Miroslav • 13 years ago

116a11

- Add exim_exec_t label for /usr/sbin/exim_tidydb

Miroslav • 13 years ago

5b0c57

- pki needs another port

Miroslav • 13 years ago

392fd7

Add glance policy

Dan Walsh • 13 years ago

e6877a

- Allow Postfix to deliver to Dovecot LMTP socket

Miroslav • 13 years ago

1c136f

- Allow insmod_t to use fds leaked from devicekit

Miroslav • 13 years ago

2f3d11

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 13 years ago

22a1cf

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ba2e58

Make users_extra and seusers.final into config no replace so semanage users and semanage login files do not get overwritten

Dan Walsh • 13 years ago

39eb9e

- Add policy for sa-update being run out of cron jobs

Miroslav • 13 years ago

24041f

Do not do preinstall if there is not previous install

Dan Walsh • 13 years ago

5d837b

- Turn on allow_domain_fd_use boolean on F16

Miroslav • 13 years ago

8d13f5

livecd fixes

Dan Walsh • 13 years ago

10f0de

Cleanup spec file to remove rpmnew files

Dan Walsh • 13 years ago

8a78e8

- fetchmail can use kerberos

Miroslav • 13 years ago

913fab

storage should be in base

Dan Walsh • 13 years ago

41a181

Add cfengine policy

Dan Walsh • 13 years ago

8becfd

- Add abrt_domain attribute

Miroslav • 13 years ago

2aa62d

- More fixes of rules which cause an explosion in rules by Dan Walsh

Miroslav • 13 years ago

58f550

- Allow rcsmcertd to perform DNS name resolution

Miroslav • 13 years ago

0c240d

- Allow systemd_logind to send dbus messages with users

Miroslav • 13 years ago

f5593e

- Fix oracledb_port definition

Miroslav • 13 years ago

6e9c22

systemd fixes

Miroslav • 13 years ago

273e93

- Add initial policy for abrt_dump_oops_t

Miroslav • 13 years ago

2ed528

- Initial systemd_logind policy

Miroslav Grepl • 13 years ago

805cc3

- Allow setsched for virsh

Miroslav Grepl • 13 years ago

2b7c05

Fix spec file

Miroslav Grepl • 13 years ago

50f07b

- A lot of users are running yum -y update while in /root which is causing ldc

Miroslav Grepl • 13 years ago

330eac

Fully path the semodule command

Dan Walsh • 13 years ago

fb5b77

- Change usbmuxd_t to dontaudit attempts to read chr_file

Miroslav Grepl • 13 years ago

975370

Update to upstream

Miroslav Grepl • 13 years ago

ade486

- More fixes

Miroslav Grepl • 13 years ago

2885bf

Next attempt at getting selinux-policy-* to work without rebuilding policy.

Dan Walsh • 13 years ago

7e1b61

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

cf012e

Change required policycoreutils and libsemanage

Dan Walsh • 13 years ago

8782a9

- Add dspam policy

Miroslav Grepl • 13 years ago

4fb7b4

Eliminate olpc stuff and other no longer needed files. Update to new system to build policy.* file within payload.

Dan Walsh • 13 years ago

857c81

apply merge

Dan Walsh • 13 years ago

d0597c

Old passanger module needs to be removed in spec file

Miroslav Grepl • 13 years ago

183e54

- Fixes for zabbix

Miroslav Grepl • 13 years ago

d8b121

Update from git

Dan Walsh • 13 years ago

5253d4

- Add mailscanner policy from dgrift

Miroslav Grepl • 13 years ago

94cdba

Allow policy.VERSION and modules to ship with package

Dan Walsh • 13 years ago

053565

Fix spec file

Miroslav Grepl • 13 years ago

0e70f6

- Fixes for sanlock policy

Miroslav Grepl • 13 years ago

a56fb9

- Add rhev policy module to modules-targeted.conf

Miroslav Grepl • 13 years ago

a8e065

- Lot of fixes

Miroslav Grepl • 13 years ago

ace252

New policy patch requires updated checkpolicy package

Dan Walsh • 13 years ago

d97c92

- Allow logrotate to execute systemctl

Miroslav Grepl • 13 years ago

cb71de

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

7fbbd6

- Dontaudit sys_module for ifconfig

Miroslav Grepl • 13 years ago

27bf70

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ff120d

- Fix label for /usr/share/munin/plugins/munin_* plugins

Miroslav Grepl • 13 years ago

cfc00b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e81c79

- Forard port changes from F15 for telepathy

Miroslav Grepl • 13 years ago

6347ee

- Allow init_t getcap and setcap

Miroslav Grepl • 13 years ago

b02295

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

99b2fe

Default telepath to allow it to connect to network ports

Dan Walsh • 13 years ago

402e7b

- Add support for ABRT retrace server

Miroslav Grepl • 13 years ago

a8c63d

Accidently checked in my test spec file

Dan Walsh • 13 years ago

ff64d9

Readd my patch

Dan Walsh • 13 years ago

bd16f8

Move to version 26 of policy

Dan Walsh • 13 years ago

9bd168

- Fixes for zarafa policy

Miroslav Grepl • 13 years ago

a35763

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

637b33

- xdm_t needs getsession for switch user

Miroslav Grepl • 13 years ago

6ac264

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e935d2

Testing

Dan Walsh • 13 years ago

826311

- Add Dan's patch to remove 64 bit variants

Miroslav Grepl • 13 years ago

1b7c8f

Remove lib64 mapping and use subs. change subs name to file_context.subs_dist

Dan Walsh • 13 years ago

86354f

- Fix typo

Miroslav Grepl • 13 years ago

213048

- Add /var/run/lock /var/lock definition to file_contexts.subs

Miroslav Grepl • 13 years ago

397c1e

Update to latest versions and change policy version

Dan Walsh • 13 years ago

568f78

comment out the sepolgen line

Miroslav Grepl • 13 years ago

81c96b

comment out the sepolgen line

Miroslav Grepl • 13 years ago

aaa0ee

comment out the sepolgen line

Miroslav Grepl • 13 years ago

681292

- Fix label for /var/run/udev to udev_var_run_t

Miroslav Grepl • 13 years ago

fb7e97

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

a7705c

- Allow $1_sudo_t and $1_su_t open access to user terminals

Miroslav Grepl • 13 years ago

36d3f3

- Remove some unconfined domains

Miroslav Grepl • 13 years ago

47d5c1

Fix multiple specification for boot.log

Miroslav Grepl • 13 years ago

7c23cf

- devicekit leaks file descriptors to setfiles_t

Miroslav Grepl • 13 years ago

f5eb99

- Initial policy for matahari

Miroslav Grepl • 13 years ago

af4c0d

+- mozilla_plugin_tmp_t needs to be treated as user tmp files

Miroslav Grepl • 13 years ago

f7f5ca

- Add policykit fixes from Tim Waugh

Miroslav Grepl • 13 years ago

8d5463

Fix minimum policy

Miroslav Grepl • 13 years ago

9b89d8

Update to upstream

Miroslav Grepl • 13 years ago

672602

- gpg_t needs to talk to gnome-keyring

Miroslav Grepl • 13 years ago

781f34

- Allow usbhid-ups to read hardware state information

Miroslav Grepl • 13 years ago

c34a0c

- Update to upstream

Miroslav Grepl • 13 years ago

728828

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Dennis Gilmore • 13 years ago

60e174

- Update to ref policy

Dan Walsh • 13 years ago

d3861c

- Update to ref policy

Dan Walsh • 13 years ago

812781

- New labeling for postfmulti #675654

Miroslav Grepl • 13 years ago

f12703

- syslog_t needs syslog capability

Miroslav Grepl • 13 years ago

19cd66

- Add tcsd policy

Dan Walsh • 13 years ago

731e69

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0e793c

- ricci_modclusterd_t needs to bind to rpc ports 500-1023

Miroslav Grepl • 13 years ago

ebce35

stop relabeling /var/lib

Dan Walsh • 13 years ago

6b3837

- Fix xserver_dontaudit_read_xdm_pid

Miroslav Grepl • 13 years ago

73e5de

- Allow nagios plugin to read /proc/meminfo

Miroslav Grepl • 13 years ago

3c7073

- nslcd needs setsched and to read /usr/tmp

Miroslav Grepl • 13 years ago

0ababf

- NetworkManager wants to read consolekit_var_run_t

Miroslav Grepl • 13 years ago

408ea9

Fix release

Miroslav Grepl • 13 years ago

ac028b

- Add sepgsql_contexts file

Miroslav Grepl • 13 years ago

a34c78

- Update to upstream

Miroslav Grepl • 13 years ago

86b1f1

- Add oracle ports and allow apache to connect to them if the connect_db boole

Miroslav Grepl • 13 years ago

f16c69

- gnomeclock executes a shell

Miroslav Grepl • 13 years ago

116d73

- Add firewalld policy

Miroslav Grepl • 13 years ago

b18633

- Add initial policy for system-setup-keyboard which is now daemon

Miroslav Grepl • 13 years ago

b559c4

- Gnome apps list config_home_t

Dan Walsh • 13 years ago

b96903

- New labels for ghc http content

Dan Walsh • 13 years ago

ef836a

- Update to upstream

Miroslav Grepl • 13 years ago

d98054

Update to upstream

Miroslav Grepl • 13 years ago

d6c5f3

- Update selinux policy to handle new /usr/share/sandbox/start script

Dan Walsh • 13 years ago

f3f61e

- Update to upstream

Miroslav Grepl • 13 years ago

0ba6b2

- Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs

Miroslav Grepl • 13 years ago

1adb28

- Allow domains that transition to ping or traceroute, kill them

Dan Walsh • 13 years ago

25660b

- Turn on systemd policy

Miroslav Grepl • 13 years ago

3c0b9e

- Fixes for clamscan and boinc policy

Miroslav Grepl • 13 years ago

b04a85

- Push fixes to allow disabling of unlabeled_t packet access

Miroslav Grepl • 13 years ago

c2ad36

- Fixes for lvm to work with systemd

Miroslav Grepl • 13 years ago

7b62a8

- Fix the label for wicd log

Miroslav Grepl • 13 years ago

151160

- Fix gnome_manage_data interface

Miroslav Grepl • 14 years ago

a4f1f5

- Fix cron to run ranged when started by init

Miroslav Grepl • 14 years ago

094604

- Fix up handling of dnsmasq_t creating /var/run/libvirt/network

Dan Walsh • 14 years ago

5bcd7a

- fixes to allow /var/run and /var/lock as tmpfs

Miroslav Grepl • 14 years ago

954ef8

- Remove duplicate declaration

Miroslav Grepl • 14 years ago

b63541

- Update to upstream

Miroslav Grepl • 14 years ago

05f913

- Allow ddclient to fix file mode bits of ddclient conf file

Miroslav Grepl • 14 years ago

3daa6c

- Put back in lircd_etc_t so policy will install

Dan Walsh • 14 years ago

d6719f

- Turn on allow_postfix_local_write_mail_spool

Miroslav Grepl • 14 years ago

4eb45e

- Update to upstream

Miroslav Grepl • 14 years ago

582d2c

- Allow nagios plugins to read usr files

Miroslav Grepl • 14 years ago

cbb8d5

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

763342

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

519b05

- kdump leaks kdump_etc_t to ifconfig, add dontaudit

Dan Walsh • 14 years ago

50daca

- Turn on mediawiki policy

Miroslav Grepl • 14 years ago

9238df

- Fix init to be able to relabel wtmp, tmp files

Dan Walsh • 14 years ago

7297a3

- Allow groupd transition to fenced domain when executes fence_node

Miroslav Grepl • 14 years ago

5d168a

- Fix up corecommands.fc to match upstream

Dan Walsh • 14 years ago

ded1ef

- Add conflicts for dirsrv package

Dan Walsh • 14 years ago

fc9bf2

- Update to upstream

Dan Walsh • 14 years ago

3e0b78

- Update to upstream

Dan Walsh • 14 years ago

6e50b7

- Update to upstream

Dan Walsh • 14 years ago

06262c

- Fix sandbox to work on nfs homedirs

Dan Walsh • 14 years ago

c52856

-

Dan Walsh • 14 years ago

989659

- Allow NetworkManager to read openvpn_etc_t

Dan Walsh • 14 years ago

9754f4

- Dontaudit sandbox sending sigkill to all user domains

Dan Walsh • 14 years ago

7a2086

- Fixes for systemd to manage /var/run

Dan Walsh • 14 years ago

2bb618

- Allow chome to create netlink_route_socket

Dan Walsh • 14 years ago

bac270

- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.

Dan Walsh • 14 years ago

4da765

- Allow cobblerd to list cobler appache content

Dan Walsh • 14 years ago

c849c8

- Fixup for the latest version of upowed

Dan Walsh • 14 years ago

d33e64

- Update to upstream

Dan Walsh • 14 years ago

618ed7

- Update to upstream

Dan Walsh • 14 years ago

5a152b

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Dan Walsh • 14 years ago

f0a56e

Rebuild with latest code

Dan Walsh • 14 years ago

dd20c2

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f9346

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f256d

- Fix fusefs handling

Dan Walsh • 14 years ago

0daa8b

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

b1cbbd

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

fbd9ca

- Dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

5ae8fb

- Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

7c487e

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

e25799

- Cleanup policy via dgrift

Dan Walsh • 14 years ago

42c814

- Fix up Xguest policy

Dan Walsh • 14 years ago

1d153e

- Add vnstat policy

Dan Walsh • 14 years ago

ea3b7b

- Update to upstream

Dan Walsh • 14 years ago

a24e6a

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

ba8c31

- Update to upstream

Dan Walsh • 14 years ago

a0e8ef

- Add policy for ajaxterm

Dan Walsh • 14 years ago

30a7d1

- Handle /var/db/sudo

Dan Walsh • 14 years ago

6e2d7f

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

64d84c

- Merge upstream fix of mmap_zero

Dan Walsh • 14 years ago

482c9f

- Merge with upstream

Dan Walsh • 14 years ago

a7a236

- More access needed for devicekit

Dan Walsh • 14 years ago

6578cf

- Merge with upstream

Dan Walsh • 14 years ago

ba7726

- Allow seunshare to fowner

Dan Walsh • 14 years ago

370d04

- Allow cron to look at user_cron_spool links

Dan Walsh • 14 years ago

cc138e

- Update policy for mozilla_plugin_t

Dan Walsh • 14 years ago

632656

- Allow clamscan to read proc_t

Dan Walsh • 14 years ago

eee39f

- Allow clamscan_t execmem if clamd_use_jit set

Dan Walsh • 14 years ago

19988c

- label dead.letter as mail_home_t

Dan Walsh • 14 years ago

3798ee

* Tue Aug 10 2010 Dan Walsh <dwalsh@redhat.com> 3.8.8-12

Dan Walsh • 14 years ago

922cd6

- Merge in fixes from dgrift repository

Daniel J Walsh • 14 years ago

d4bb13

- Update boinc policy

Daniel J Walsh • 14 years ago

7f5d8f

- New paths for upstart

Daniel J Walsh • 14 years ago

a1ef70

- New permissions for syslog

Daniel J Walsh • 14 years ago

8d55a4

- Allow systemd to setsockcon on sockets to immitate other services

Daniel J Walsh • 14 years ago

f3fc10

- Remove debugfs label

Daniel J Walsh • 14 years ago

9f811e

- Update to latest policy

Daniel J Walsh • 14 years ago

d66bec

- Fix eclipse labeling from IBMSupportAssasstant packageing

Daniel J Walsh • 14 years ago

1df2fc

- Make boot with systemd in enforcing mode

Daniel J Walsh • 14 years ago

3f1005

- Update to upstream

Daniel J Walsh • 14 years ago

0f2ae0

- Add boolean to turn off port forwarding in sshd.

Daniel J Walsh • 14 years ago

9c1bcc

- Add support for ebtables

Miroslav Grepl • 14 years ago

be922a

-Update to upstream

Daniel J Walsh • 14 years ago

6c4221

-Update to upstream

Daniel J Walsh • 14 years ago

fa98e0

-Update to upstream

Daniel J Walsh • 14 years ago

5f371a

- Add Zarafa policy

Daniel J Walsh • 14 years ago

7c727a

- Cleanup of aiccu policy

Daniel J Walsh • 14 years ago

f2403c

- Lots of random fixes

Daniel J Walsh • 14 years ago

f651bb

- Update to upstream

Daniel J Walsh • 14 years ago

b39ccc

- Update to upstream

Daniel J Walsh • 14 years ago

632048

- Add xdm_var_run_t to xserver_stream_connect_xdm

Daniel J Walsh • 14 years ago

bca242

- Fix sshd creation of krb cc files for users to be user_tmp_t

Daniel J Walsh • 14 years ago

e51284

- Fixes for accountsdialog

Daniel J Walsh • 14 years ago

4abfc0

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 14 years ago

65c6e4

- Update to upstream

Daniel J Walsh • 14 years ago

bc4089

- Update to upstream

Daniel J Walsh • 14 years ago

a72c31

- Merge with upstream

Daniel J Walsh • 14 years ago

add957

- Allow sandbox to work with MLS

Daniel J Walsh • 14 years ago

3c551b

- Make Chrome work with staff user

Daniel J Walsh • 14 years ago

43c7f5

- Add icecast policy

Daniel J Walsh • 14 years ago

487de6

- Add mcelog policy

Daniel J Walsh • 14 years ago

30c219

- Lots of fixes found in F12

Daniel J Walsh • 14 years ago

a62c64

- Fix rpm_dontaudit_leaks

Daniel J Walsh • 14 years ago

b2f6b0

- Add getsched to hald_t

Daniel J Walsh • 14 years ago

4d67b4

- Allow abrt_helper to getattr on all filesystems

Daniel J Walsh • 14 years ago

b0f365

- Add gstreamer_home_t for ~/.gstreamer

Daniel J Walsh • 14 years ago

b65afa

- Update to upstream

Daniel J Walsh • 14 years ago

faec5c

Update spec file to suck in the correct version of selinux-policy packages

Daniel J Walsh • 14 years ago

3b5466

- Turn on puppet policy

Daniel J Walsh • 14 years ago

89ad5e

- Move users file to selection by spec file.

Daniel J Walsh • 14 years ago

fc05ac

- Update to upstream

Daniel J Walsh • 14 years ago

352daf

- Remove most of the permissive domains from F12.

Daniel J Walsh • 14 years ago

6049e2

- Add cobbler policy from dgrift

Daniel J Walsh • 14 years ago

485ded

- add usbmon device

Daniel J Walsh • 14 years ago

1e86f3

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 14 years ago

4478a9

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

08b890

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

daebd5

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

e2f53d

- Add back xserver_manage_home_fonts

Daniel J Walsh • 14 years ago

550cc5

- Dontaudit sandbox trying to read nscd and sssd

Daniel J Walsh • 14 years ago

7d4058

- Update to upstream

Daniel J Walsh • 14 years ago

b46754

- Rename udisks-daemon back to devicekit_disk_t policy

Daniel J Walsh • 14 years ago

6ca563

- Fixes for abrt calls

Daniel J Walsh • 14 years ago

e54cc7

- Add tgtd policy

Daniel J Walsh • 14 years ago

9c90ba

- Add tgtd policy

Daniel J Walsh • 14 years ago

755e2d

- Update to upstream release

Daniel J Walsh • 14 years ago

9eef35

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

f2a1dc

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ee88b0

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ce8c76

- Update to upstream release 2.20091117

Daniel J Walsh • 15 years ago

55acbf

- Update to upstream

Daniel J Walsh • 15 years ago

5e44eb

- Allow vpnc request the kernel to load modules

Daniel J Walsh • 15 years ago

32594a

- Add plymouth policy

Daniel J Walsh • 15 years ago

aaf52f

- Allow cupsd_config to read user tmp

Daniel J Walsh • 15 years ago

d976a8

- Update rhcs policy

Daniel J Walsh • 15 years ago

8b10e3

- Allow users to exec restorecond

Daniel J Walsh • 15 years ago

85582d

- Allow sendmail to request kernel modules load

Daniel J Walsh • 15 years ago

f5a104

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

4c2f29

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

405a74

- Remove allow_exec* booleans for confined users. Only available for

Daniel J Walsh • 15 years ago

41f8e3

- More fixes for sandbox_web_t

Daniel J Walsh • 15 years ago

8323d5

- Allow sshd to create .ssh directory and content

Daniel J Walsh • 15 years ago

ab4629

- Fix request_module line to module_request

Daniel J Walsh • 15 years ago

d53d15

- Fix sandbox policy to allow it to run under firefox.

Daniel J Walsh • 15 years ago

1fb0a9

- Fixes for sandbox

Daniel J Walsh • 15 years ago

9de703

- Update to upstream

Daniel J Walsh • 15 years ago

69290f

- Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service

Daniel J Walsh • 15 years ago

23e708

- Fix devicekit_disk_t to getattr on all domains sockets and fifo_files

Daniel J Walsh • 15 years ago

6b7b0c

- Add wordpress/wp-content/uploads label

Daniel J Walsh • 15 years ago

e20e35

- Update to upstream

Daniel J Walsh • 15 years ago

ddc858

- More fixes

Daniel J Walsh • 15 years ago

ab8f80

- More fixes

Daniel J Walsh • 15 years ago

b8498d

- Lots of fixes for initrc and other unconfined domains

Daniel J Walsh • 15 years ago

123ae9

- Allow xserver to use netlink_kobject_uevent_socket

Daniel J Walsh • 15 years ago

72bc25

- Dontaudit setroubleshootfix looking at /root directory

Daniel J Walsh • 15 years ago

1a2981

- Update to upsteam

Daniel J Walsh • 15 years ago

65c3f9

- Allow gssd to send signals to users

Daniel J Walsh • 15 years ago

cb5670

- Update to upstream

Daniel J Walsh • 15 years ago

faf9cb

- Remove polkit_auth on upgrades

Daniel J Walsh • 15 years ago

38d427

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

42f9ef

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

07c04f

- Fixes for cdrecord, mdadm, and others

Daniel J Walsh • 15 years ago

89e354

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 15 years ago

080ce6

- Allow cronjobs to read exim_spool_t

Daniel J Walsh • 15 years ago

8e64d7

- Add ABRT policy

Daniel J Walsh • 15 years ago

c5f5b5

- Fix system-config-services policy

Daniel J Walsh • 15 years ago

e3dd49

- Allow libvirt to change user componant of virt_domain

Daniel J Walsh • 15 years ago

fc8ff2

- Allow cupsd_config_t to be started by dbus

Daniel J Walsh • 15 years ago

40243d

- Add policycoreutils-python to pre install

Daniel J Walsh • 15 years ago

9c2702

- Make all unconfined_domains permissive so we can see what AVC's happen

Daniel J Walsh • 15 years ago

b2c5e7

- Add pt_chown policy

Daniel J Walsh • 15 years ago

7fe210

- Add kdump policy for Miroslav Grepl

Daniel J Walsh • 15 years ago

867473

- Turn on execstack on a temporary basis (#512845)

Bill Nottingham • 15 years ago

ac7bbf

- Allow nsplugin to connecto the session bus

Daniel J Walsh • 15 years ago

4de382

- Allow devicekit_disk to list inotify

Daniel J Walsh • 15 years ago

e21330

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 15 years ago

4816e9

- Allow exim to getattr on mountpoints

Daniel J Walsh • 15 years ago

467326

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 15 years ago

947b43

- Allod hald_dccm_t to create sock_files in /tmp

Daniel J Walsh • 15 years ago

af4fa8

- More fixes from upstream

Daniel J Walsh • 15 years ago

abd153

- Fix polkit label

Daniel J Walsh • 15 years ago

c6e222

- Update to upstream

Daniel J Walsh • 15 years ago

375056

- Allow certmaster to override dac permissions

Daniel J Walsh • 15 years ago

916052

- Update to upstream

Daniel J Walsh • 15 years ago

df7055

- Fix context for VirtualBox

Daniel J Walsh • 15 years ago

8da024

- Update to upstream

Daniel J Walsh • 15 years ago

2360ff

- Fixes for xguest

Daniel J Walsh • 15 years ago

a88b48

- fix multiple directory ownership of mandirs

Daniel J Walsh • 15 years ago

819f41

fix duplicate directory ownership with filesystem, policycoreutils

Tom Callaway • 15 years ago

a85aef

- Update to upstream

Daniel J Walsh • 15 years ago

d9676a

- Add rules for rtkit-daemon

Daniel J Walsh • 15 years ago

bcc53d

- Update to upstream

Daniel J Walsh • 15 years ago

7b16d5

- Add rtkit policy

Daniel J Walsh • 15 years ago

221642

- Allow rpcd_t to stream connect to rpcbind

Daniel J Walsh • 15 years ago

d399fb

- Allow kpropd to create tmp files

Daniel J Walsh • 15 years ago

9850f4

- Fix last duplicate /var/log/rpmpkgs

Daniel J Walsh • 15 years ago

93dc66

- Update to upstream

Daniel J Walsh • 15 years ago

a9f095

- Update to upstream

Daniel J Walsh • 15 years ago

886631

- Update to upstream

Daniel J Walsh • 15 years ago

607109

- Fix mcs rules to include chr_file and blk_file

Daniel J Walsh • 15 years ago

9386d6

- Add label for udev-acl

Daniel J Walsh • 15 years ago

e3bf67

- Additional rules for consolekit/udev, privoxy and various other fixes

Daniel J Walsh • 15 years ago

f8df9e

- New version for upstream

Daniel J Walsh • 15 years ago

49883e

- New version for upstream

Daniel J Walsh • 15 years ago

d3ae97

- Allow NetworkManager to read inotifyfs

Daniel J Walsh • 15 years ago

6b8380

- Allow setroubleshoot to run mlocate

Daniel J Walsh • 15 years ago

aa7b9c

- Update to upstream

Daniel J Walsh • 15 years ago

819771

- New log file for vmware

Daniel J Walsh • 15 years ago

9ee63d

- Upgrade to upstream

Daniel J Walsh • 15 years ago

ef7416

- Allow fprintd to access sys_ptrace

Daniel J Walsh • 15 years ago

eead2a

- Add varnishd policy

Daniel J Walsh • 15 years ago

7b6c10

- Fixes for kpropd

Daniel J Walsh • 15 years ago

f72bd4

- Allow brctl to r/w tun_tap_device_t

Daniel J Walsh • 15 years ago

fcb441

- Add /usr/share/selinux/packages

Daniel J Walsh • 15 years ago

62cfaf

- Allow rpcd_t to send signals to kernel threads

Daniel J Walsh • 15 years ago

0f6b92

- Fix upgrade for F10 to F11

Daniel J Walsh • 15 years ago

992419

- Add policy for /var/lib/fprint

Daniel J Walsh • 15 years ago

a2098a

-Remove duplicate line

Daniel J Walsh • 15 years ago

8a0604

- Allow svirt to manage pci and other sysfs device data

Daniel J Walsh • 15 years ago

959ab9

- Fix package selection handling

Daniel J Walsh • 15 years ago

0e31a0

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

c32d79

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

5dd89f

- Add shorewall policy

Daniel J Walsh • 15 years ago

37ebfc

- Additional rules for fprintd and sssd

Daniel J Walsh • 15 years ago

21b13f

- Allow nsplugin to unix_read unix_write sem for unconfined_java

Daniel J Walsh • 15 years ago

40d8f6

- Fix uml files to be owned by users

Daniel J Walsh • 15 years ago

b3ac4a

- Fix Upgrade path to install unconfineduser.pp when unocnfined package is

Daniel J Walsh • 15 years ago

e080bb

- Allow confined users to manace virt_content_t, since this is home dir

Daniel J Walsh • 15 years ago

b11dbb

- Fix labeling on /var/lib/misc/prelink*

Daniel J Walsh • 15 years ago

b0991a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

89c9c9

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

eaaf2a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

dac838

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

db0daf

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

cd0a39

- Additional perms for readahead

Daniel J Walsh • 15 years ago

5ce1c4

- Allow pulseaudio to acquire_svc on session bus

Daniel J Walsh • 15 years ago

4d5adb

- Allow sshd to read var_lib symlinks for freenx

Daniel J Walsh • 15 years ago

3c498a

- Allow nsplugin unix_read and write on users shm and sem

Daniel J Walsh • 15 years ago

a32a15

- Fixes for podsleuth

Daniel J Walsh • 15 years ago

d982e7

*** empty log message ***

Daniel J Walsh • 15 years ago

dc00fc

- Allow cupsd_t to create link files in print_spool_t

Daniel J Walsh • 15 years ago

6203f4

- Allow audioentroy to read etc files

Daniel J Walsh • 15 years ago

4a0aac

- Add fail2ban_var_lib_t

Daniel J Walsh • 15 years ago

685032

- Separate out the ucnonfined user from the unconfined.pp package

Daniel J Walsh • 15 years ago

d4af17

- Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t.

Daniel J Walsh • 15 years ago

90e419

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

25a476

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

510c2a

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

04b682

- Add customizable_types for svirt

Daniel J Walsh • 15 years ago

80beee

- Allow setroubelshoot exec* privs to prevent crash from bad libraries

Daniel J Walsh • 15 years ago

f49c57

- Dontaudit listing of /root directory for cron system jobs

Daniel J Walsh • 15 years ago

90ea5b

- Fix missing ld.so.cache label

Daniel J Walsh • 15 years ago

3434a9

- Add label for ~/.forward and /root/.forward

Daniel J Walsh • 15 years ago

c0158a

- Fixes for svirt

Daniel J Walsh • 15 years ago

6130d5

- Fixes to allow svirt read iso files in homedir

Daniel J Walsh • 15 years ago

9ca87f

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

ec9800

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

5dce3c

- Allow mdadm to read/write mls override

Daniel J Walsh • 15 years ago

bfc78b

- Change to svirt to only access svirt_image_t

Daniel J Walsh • 15 years ago

095146

- Fix libvirt policy

Daniel J Walsh • 15 years ago

d4b8dc

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

b12011

- Fixes for iscsid and sssd

Daniel J Walsh • 15 years ago

c240b6

- Add pulseaudio, sssd policy

Daniel J Walsh • 15 years ago

e72f55

- Add pulseaudio context

Daniel J Walsh • 15 years ago

0c34c6

- Upgrade to latest patches

Daniel J Walsh • 15 years ago

a67a1c

- Fixes for libvirt

Daniel J Walsh • 15 years ago

0a03cc

- Update to Latest upstream

Daniel J Walsh • 15 years ago

8c3a31

- Further confinement of qemu images via svirt

Daniel J Walsh • 15 years ago

496752

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Jesse Keating • 15 years ago

150ff5

- Allow NetworkManager to manage /etc/NetworkManager/system-connections

Daniel J Walsh • 15 years ago

52cbcb

- add virtual_image_context and virtual_domain_context files

Daniel J Walsh • 15 years ago

de6774

- Allow rpcd_t to send signal to mount_t

Daniel J Walsh • 15 years ago

8f6e43

- Fix sysnet/net_conf_t

Daniel J Walsh • 15 years ago

8c2b68

- Fix squidGuard labeling

Daniel J Walsh • 15 years ago

817947

- Re-add corenet_in_generic_if(unlabeled_t)

Daniel J Walsh • 15 years ago

2eec43

Daniel J Walsh • 15 years ago

e46e00

UPdate policycorutils version

Daniel J Walsh • 15 years ago

d43c25

- Add git web policy

Daniel J Walsh • 15 years ago

1d1c05

- Add setrans contains from upstream

Daniel J Walsh • 15 years ago

bd0db4

- Allow xdm to create user_tmp_t sockets for switch user to work

Daniel J Walsh • 15 years ago

4ed140

- Fix staff_t domain

Daniel J Walsh • 15 years ago

bc861e

- Grab remainder of network_peer_controls patch

Daniel J Walsh • 15 years ago

73fe81

- More fixes for devicekit

Daniel J Walsh • 15 years ago

659e96

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

c957c3

- Add boolean to disallow unconfined_t login

Daniel J Walsh • 15 years ago

574cab

- Add back transition from xguest to mozilla

Daniel J Walsh • 15 years ago

0554a1

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 15 years ago

ab3e55

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

2fbeb7

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

f89910

- More mls/rpm fixes

Daniel J Walsh • 15 years ago

48adbe

- Add policy to make dbus/nm-applet work

Daniel J Walsh • 15 years ago

14c9b9

- Remove polgen-ifgen from post and add trigger to policycoreutils-python

Daniel J Walsh • 15 years ago

40dd24

- Add wm policy

Daniel J Walsh • 15 years ago

6f8856

- Add wm policy

Daniel J Walsh • 15 years ago

6cf32a

- Add wm policy

Daniel J Walsh • 15 years ago

1b94a1

- Fixed for DeviceKit

Daniel J Walsh • 15 years ago

2a4bda

- Add devicekit policy

Daniel J Walsh • 15 years ago

acc137

- Update to upstream

Daniel J Walsh • 15 years ago

1d72fb

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

7b146d

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

eacea1

- Fixes for reading xserver_tmp_t

Daniel J Walsh • 15 years ago

339bf3

- Allow cups_pdf_t write to nfs_t

Daniel J Walsh • 15 years ago

87fb15

- Remove audio_entropy policy

Daniel J Walsh • 15 years ago

2ed2ff

- Update to upstream

Daniel J Walsh • 15 years ago

292c49

- Allow hal_acl_t to getattr/setattr fixed_disk

Daniel J Walsh • 15 years ago

5df262

- Change userdom_read_all_users_state to include reading symbolic links in

Daniel J Walsh • 15 years ago

323639

- Fix dbus reading /proc information

Daniel J Walsh • 15 years ago

cf8fd9

- Add missing alias for home directory content

Daniel J Walsh • 15 years ago

bae2e9

- Fixes for IBM java location

Daniel J Walsh • 15 years ago

33c7ea

- Allow unconfined_r unconfined_java_t

Daniel J Walsh • 15 years ago

dcd0c9

- Add cron_role back to user domains

Daniel J Walsh • 15 years ago

fd2b62

- Fix sudo setting of user keys

Daniel J Walsh • 15 years ago

9a43d2

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

163db1

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

2ae161

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

c136db

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

01ce3d

- Cleanup policy

Daniel J Walsh • 16 years ago

bcb192

- Cleanup policy

Daniel J Walsh • 16 years ago

739db2

Rebuild for Python 2.6

Ignacio Vazquez-Abrams • 16 years ago

23d684

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

02d888

- Allow postgresl to bind to udp nodes

Daniel J Walsh • 16 years ago

0d6e62

- Allow lvm to dbus chat with hal

Daniel J Walsh • 16 years ago

2a650e

- Fix cyphesis file context

Daniel J Walsh • 16 years ago

074b12

- Allow hal/pm-utils to look at /var/run/video.rom

Daniel J Walsh • 16 years ago

6a09cf

- Additional fixes for cyphesis

Daniel J Walsh • 16 years ago

411a42

- Allow dhcpc to restart ypbind

Daniel J Walsh • 16 years ago

333ebd

- Fix confined users

Daniel J Walsh • 16 years ago

1bc89b

- Fix confined users

Daniel J Walsh • 16 years ago

236205

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

812930

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

d8e5d0

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

a3e038

- Allow mozilla to run with unconfined_execmem_t

Daniel J Walsh • 16 years ago

4fa9db

- Dontaudit domains trying to write to .xsession-errors

Daniel J Walsh • 16 years ago

798a73

- Allow nsplugin to look at autofs_t directory

Daniel J Walsh • 16 years ago

328123

- Allow kerneloops to create tmp files

Daniel J Walsh • 16 years ago

de61cc

- More alias for fastcgi

Daniel J Walsh • 16 years ago

ae68d9

- Remove mod_fcgid-selinux package

Daniel J Walsh • 16 years ago

236d3c

- Fix dovecot access

Daniel J Walsh • 16 years ago

b9e15d

- Policy cleanup

Daniel J Walsh • 16 years ago

49f48f

- Remove Multiple spec

Daniel J Walsh • 16 years ago

b4cab5

- Remove Multiple spec

Daniel J Walsh • 16 years ago

611568

- Fix labeling of libGL

Daniel J Walsh • 16 years ago

4b4392

- Update to upstream

Daniel J Walsh • 16 years ago

412570

- Update to upstream

Daniel J Walsh • 16 years ago

b6cc6a

- Update to upstream policy

Daniel J Walsh • 16 years ago

675bba

- Fixes for confined xwindows and xdm_t

Daniel J Walsh • 16 years ago

1062bd

- Allow confined users and xdm to exec wm

Daniel J Walsh • 16 years ago

86369e

- Allow NetworkManager to transition to avahi and iptables

Daniel J Walsh • 16 years ago

f1a827

- Allow domains to search other domains keys, coverup kernel bug

Daniel J Walsh • 16 years ago

b42a1e

- Fix labeling for oracle

Daniel J Walsh • 16 years ago

094ef3

- Allow nsplugin to comminicate with xdm_tmp_t sock_file

Daniel J Walsh • 16 years ago

2ede4e

- Change all user tmpfs_t files to be labeled user_tmpfs_t

Daniel J Walsh • 16 years ago

998737

- Upgrade to upstream

Daniel J Walsh • 16 years ago

b709ff

- Allow confined users to login with dbus

Daniel J Walsh • 16 years ago

ed32c6

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

a80e7a

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

d86efe

- Add file context for /dev/mspblk.*

Daniel J Walsh • 16 years ago

f0375d

- Fix transition to nsplugin '

Daniel J Walsh • 16 years ago

f77dd2

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

11ef24

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

530772

- Merge upstream changes

Daniel J Walsh • 16 years ago

16c3ff

- Remove gamin policy

Daniel J Walsh • 16 years ago

aca77a

- Add tinyxs-max file system support

Daniel J Walsh • 16 years ago

d0d307

- Update to upstream

Daniel J Walsh • 16 years ago

0a219f

- Allow audit dispatcher to kill his children

Daniel J Walsh • 16 years ago

3ad355

- Update to upstream

Daniel J Walsh • 16 years ago

cd8bee

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

7638e7

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

eb7e6d

- Update to upstream

Daniel J Walsh • 16 years ago

57ae10

- Update to upstream

Daniel J Walsh • 16 years ago

1a0f64

- Update to upstream

Daniel J Walsh • 16 years ago

b5d09d

- Allow system-config-selinux to work with policykit

Daniel J Walsh • 16 years ago

0f1bd6

- Fix novel labeling

Daniel J Walsh • 16 years ago

174291

- Fix novel labeling

Daniel J Walsh • 16 years ago

170fa2

- Consolodate pyzor,spamassassin, razor into one security domain

Daniel J Walsh • 16 years ago

07bd5c

- Fixes for logrotate, alsa

Daniel J Walsh • 16 years ago

8f2532

- Eliminate vbetool duplicate entry

Daniel J Walsh • 16 years ago

f12d5b

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

0b0533

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

feefee

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

078ad0

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

6ed853

- Add inotify support to nscd

Daniel J Walsh • 16 years ago

df6220

Add nscd inotify fix

Daniel J Walsh • 16 years ago

6db69f

- Allow unconfined_t to setfcap

Daniel J Walsh • 16 years ago

43f9fc

- Allow amanda to read tape

Daniel J Walsh • 16 years ago

273a44

- Allow ypbind apps to net_bind_service

Daniel J Walsh • 16 years ago

258b00

- Allow all system domains and application domains to append to any log

Daniel J Walsh • 16 years ago

75edec

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

cd60b6

- Allow vpnc to run ifconfig

Daniel J Walsh • 16 years ago

c18681

- Allow confined users to use postgres

Daniel J Walsh • 16 years ago

f86ed5

- Apply unconfined_execmem_exec_t to haskell programs

Daniel J Walsh • 16 years ago

547aa2

- Fix prelude file context

Daniel J Walsh • 16 years ago

6959e0

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

fe0d46

- Prevent applications from reading x_device

Daniel J Walsh • 16 years ago

f4ff8b

- Add /var/lib/selinux context

Daniel J Walsh • 16 years ago

5608a9

- Update to upstream

Daniel J Walsh • 16 years ago

af0f73

- Update to upstream

Daniel J Walsh • 16 years ago

c5c253

- Add livecd policy

Daniel J Walsh • 16 years ago

f513c7

- Add livecd policy

Daniel J Walsh • 16 years ago

15f71c

- Dontaudit search of admin_home for init_system_domain

Daniel J Walsh • 16 years ago

91ec07

- Begin XAce integration

Daniel J Walsh • 16 years ago

80e0b8

- Merge Upstream

Daniel J Walsh • 16 years ago

081b6a

- Merge Upstream

Daniel J Walsh • 16 years ago

2e33f7

Update for rawhide

Daniel J Walsh • 16 years ago

4b7f03

- Allow amanada to create data files

Daniel J Walsh • 16 years ago

993c27

- Remove dmesg boolean

Daniel J Walsh • 16 years ago

6c25b4

- Change unconfined_t to transition to unconfined_mono_t when running mono

Daniel J Walsh • 16 years ago

86881d

- Remove old booleans from targeted-booleans.conf file

Daniel J Walsh • 16 years ago

2d8ff5

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

b4e933

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

ef5e60

- Change etc files to config files to allow users to read them

Daniel J Walsh • 16 years ago

4b1d56

- dontaudit mrtg reading /proc

Daniel J Walsh • 16 years ago

a6a82a

Daniel J Walsh • 16 years ago

5896ba

Daniel J Walsh • 16 years ago

bb36d7

- Allow dhcpd to read kernel network state

Daniel J Walsh • 16 years ago

06686c

- Label /var/run/gdm correctly

Daniel J Walsh • 16 years ago

41625a

- Allow transition from initrc_t to getty_t

Daniel J Walsh • 16 years ago

254e3c

- Allow passwd to communicate with user sockets to change gnome-keyring

Daniel J Walsh • 16 years ago

5a576e

- Fix initial install

Daniel J Walsh • 16 years ago

7f851a

-

Daniel J Walsh • 16 years ago

c3c4a5

- Allow radvd to use fifo_file

Daniel J Walsh • 16 years ago

27943d

- Allow nsplugin to read /etc/mozpluggerrc, user_fonts

Daniel J Walsh • 16 years ago

c66f2b

- Allow initrc_t to dbus chat with consolekit.

Daniel J Walsh • 16 years ago

294ea7

- Additional access for nsplugin

Daniel J Walsh • 16 years ago

e54cb2

- Allow mount to mkdir on tmpfs

Daniel J Walsh • 16 years ago

f70afc

- Fix file context for MATLAB

Daniel J Walsh • 16 years ago

bf3d39

- Allow stunnel to transition to inetd children domains

Daniel J Walsh • 16 years ago

5ea3f1

Daniel J Walsh • 16 years ago

94b7be

- Fixes for qemu/virtd

Daniel J Walsh • 16 years ago

ba9e5e

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

97081d

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

a6e128

- Allow nsplugin to run acroread

Daniel J Walsh • 16 years ago

d593d2

- Add cups_pdf policy

Daniel J Walsh • 16 years ago

987b10

- prewika needs to contact mysql

Daniel J Walsh • 16 years ago

7f811b

- Change init_t to an unconfined_domain

Daniel J Walsh • 16 years ago

ceda8f

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 16 years ago

0879f4

fixes for init, rhgb. also, fix the build

Bill Nottingham • 16 years ago

110bce

- Additional changes for MLS policy

Daniel J Walsh • 16 years ago

2041ac

- Fix initrc_context generation for MLS

Daniel J Walsh • 16 years ago

1bf67d

- Fixes for libvirt

Daniel J Walsh • 16 years ago

dc57e6

- Allow bitlebee to read locale_t

Daniel J Walsh • 16 years ago

594790

- More xselinux rules

Daniel J Walsh • 16 years ago

d8c160

- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t

Daniel J Walsh • 16 years ago

9a0f35

-

Daniel J Walsh • 16 years ago

338714

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

b7229a

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

40ce26

- Allow nsplugin_config execstack/execmem

Daniel J Walsh • 16 years ago

533c75

- Add cyphesis policy

Daniel J Walsh • 16 years ago

c092cc

Daniel J Walsh • 16 years ago

063999

-

Daniel J Walsh • 16 years ago

27b2b0

- Update to upstream fixes

Daniel J Walsh • 16 years ago

f75033

- Add xace support

Daniel J Walsh • 16 years ago

5ca2ff

- Add fusectl file system

Daniel J Walsh • 16 years ago

8bd036

- Fixes from yum-cron

Daniel J Walsh • 16 years ago

541ba8

Daniel J Walsh • 16 years ago

e5aceb

- Fix userdom_list_user_files

Daniel J Walsh • 16 years ago

306393

- Merge with upstream

Daniel J Walsh • 16 years ago

eb3e9f

- Allow udev to send audit messages

Daniel J Walsh • 16 years ago

7e1e7b

- Add additional login users interfaces

Daniel J Walsh • 16 years ago

9870c6

- More fixes for polkit

Daniel J Walsh • 16 years ago

49295b

- More fixes for polkit

Daniel J Walsh • 16 years ago

ebe074

- Update to upstream

Daniel J Walsh • 16 years ago

57ac1c

- Fixes for staff_t

Daniel J Walsh • 16 years ago

4637b6

- Add policy for kerneloops

Daniel J Walsh • 16 years ago

b53db5

- Fixes for libvirt

Daniel J Walsh • 16 years ago

881d64

- Fixes for nsplugin

Daniel J Walsh • 16 years ago

60c693

- Additional ports for vnc and allow qemu and libvirt to search all

Daniel J Walsh • 16 years ago

11ac4b

- Update to upstream

Daniel J Walsh • 16 years ago

b19d47

- Allow fail2ban to create a socket in /var/run

Daniel J Walsh • 16 years ago

e1060e

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

59d6fb

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

7c124f

- Add audisp policy and prelude

Daniel J Walsh • 16 years ago

f18a88

- Allow all user roles to executae samba net command

Daniel J Walsh • 16 years ago

0f7011

- Allow usertypes to read/write noxattr file systems

Daniel J Walsh • 16 years ago

7c2be3

- Fix nsplugin to allow flashplugin to work in enforcing mode

Daniel J Walsh • 16 years ago

7c7d59

- Allow pam_selinux_permit to kill all processes

Daniel J Walsh • 16 years ago

093987

- Allow ptrace or user processes by users of same type

Daniel J Walsh • 16 years ago

cc5bb8

- Allow nsplugin sys_nice, getsched, setsched

Daniel J Walsh • 16 years ago

ef19b7

- Allow login programs to talk dbus to oddjob

Daniel J Walsh • 16 years ago

b3c8a0

- Add procmail_log support

Daniel J Walsh • 16 years ago

98f84c

- Allow setroubleshoot to read policy config and send audit messages

Daniel J Walsh • 16 years ago

e26fef

- Allow users to execute all files in homedir, if boolean set

Daniel J Walsh • 16 years ago

8a40d6

- Fixes for xguest to run java plugin

Daniel J Walsh • 16 years ago

27c7d8

- dontaudit pam_t and dbusd writing to user_home_t

Daniel J Walsh • 16 years ago

4be3ba

- Update gpg to allow reading of inotify

Daniel J Walsh • 16 years ago

5baf53

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 16 years ago

a502c5

- Fix munin log,

Daniel J Walsh • 16 years ago

c64ec2

- Fix role transition from unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

88ae3f

- Fix role transition fro unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

5d1334

- Let all uncofined domains communicate with dbus unconfined

Daniel J Walsh • 16 years ago

0ec33d

- Run rpm in system_r

Daniel J Walsh • 16 years ago

673eaa

- Zero out customizable types

Daniel J Walsh • 16 years ago

5615fe

- Fix definiton of admin_home_t

Daniel J Walsh • 16 years ago

9a2cf8

- Fix munin file context

Daniel J Walsh • 16 years ago

2f257c

- Allow cron to run unconfined apps

Daniel J Walsh • 16 years ago

91c2fa

- Modify default login to unconfined_u

Daniel J Walsh • 16 years ago

99d367

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

4d59c2

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

592868

- Update to upstream

Daniel J Walsh • 16 years ago

76e340

- Fixes for polkit

Daniel J Walsh • 16 years ago

4c6f2d

- Add polkit policy

Daniel J Walsh • 16 years ago

7dfe3e

- Update to upstream

Daniel J Walsh • 16 years ago

a1341a

- Update to upstream

Daniel J Walsh • 17 years ago

02654b

- Update to upstreamddddddddddddd

Daniel J Walsh • 17 years ago

d195fc

- Allow rpm_script to transition to unconfined_execmem_t

Daniel J Walsh • 17 years ago

320f3e

Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2.1-1

Daniel J Walsh • 17 years ago

3b47cb

- Remove user based home directory separation

Daniel J Walsh • 17 years ago

9186dc

- Remove user specific crond_t

Daniel J Walsh • 17 years ago

3a54e4

- Merge with upstream

Daniel J Walsh • 17 years ago

0fffba

- Update to upstream

Daniel J Walsh • 17 years ago

ddf4ec

- Update to upstream

Daniel J Walsh • 17 years ago

7330e8

- Update to upstream

Daniel J Walsh • 17 years ago

364044

- Update to upstream

Daniel J Walsh • 17 years ago

fa0d1c

- Allow XServer to read /proc/self/cmdline

Daniel J Walsh • 17 years ago

d0649e

- Fixes for hald_mac

Daniel J Walsh • 17 years ago

30dfdc

- Fix dnsmasq

Daniel J Walsh • 17 years ago

3375c3

- Allow rshd to connect to ports > 1023

Daniel J Walsh • 17 years ago

6455c9

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

953fd1

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

ccf8a7

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

b4ed6d

- Pass the UNK_PERMS param to makefile

Daniel J Walsh • 17 years ago

9185bf

- Make alsa work

Daniel J Walsh • 17 years ago

c27b2b

- Fixes for consolekit and startx sessions

Daniel J Walsh • 17 years ago

28021c

- Dontaudit consoletype talking to unconfined_t

Daniel J Walsh • 17 years ago

7a91e8

- Remove homedir_template

Daniel J Walsh • 17 years ago

8fd9df

- Remove homedir_template

Daniel J Walsh • 17 years ago

922f64

- Check asound.state

Daniel J Walsh • 17 years ago

24ccb8

- Fix exim policy

Daniel J Walsh • 17 years ago

492612

- Allow tmpreadper to read man_t

Daniel J Walsh • 17 years ago

1ffa68

- Allow xdm to talk to input device (fingerprint reader)

Daniel J Walsh • 17 years ago

7c1c17

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 17 years ago

d770c5

- Allow nsswitch apps to read samba_var_t

Daniel J Walsh • 17 years ago

fb11ad

- Fix maxima

Daniel J Walsh • 17 years ago

f5018f

- Eliminate rpm_t:fifo_file avcs

Daniel J Walsh • 17 years ago

d83ea8

- Fix service start stop terminal avc's

Daniel J Walsh • 17 years ago

6c319e

- Allow also to search var_lib

Daniel J Walsh • 17 years ago

ec4fb1

- Allow cupsd_config_t to read/write usb_device_t

Daniel J Walsh • 17 years ago

347ff1

- Fix java and mono to run in xguest account

Daniel J Walsh • 17 years ago

07e28d

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

a9d4b8

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

c67a12

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

d90a3d

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

21c534

- Remove hplip_etc_t change back to etc_t.

Daniel J Walsh • 17 years ago

7ff410

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

1a3fe3

- Allow NetworkManager to dbus chat with yum-updated

Daniel J Walsh • 17 years ago

babb36

- Allow xfs to bind to port 7100

Daniel J Walsh • 17 years ago

bf7f97

- Allow newalias/sendmail dac_override

Daniel J Walsh • 17 years ago

25d586

- Turn off direct transition

Daniel J Walsh • 17 years ago

4eaf5c

- Allow wine to run in system role

Daniel J Walsh • 17 years ago

c7e443

- Fix java labeling

Daniel J Walsh • 17 years ago

37d6a1

- Define user_home_type as home_type

Daniel J Walsh • 17 years ago

07b868

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

601f0f

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

bea548

- Allow login programs to read symlinks on homedirs

Daniel J Walsh • 17 years ago

bc85a6

- Update an readd modules

Daniel J Walsh • 17 years ago

e8b599

- Cleanup spec file

Daniel J Walsh • 17 years ago

7f9951

- Cleanup spec file

Daniel J Walsh • 17 years ago

d9f447

- Cleanup spec file

Daniel J Walsh • 17 years ago

b865b8

- Cleanup spec file

Daniel J Walsh • 17 years ago

53f819

- Cleanup spec file

Daniel J Walsh • 17 years ago

3012ab

- Cleanup spec file

Daniel J Walsh • 17 years ago

d83af2

- Allow xserver to be started by unconfined process and talk to tty

Daniel J Walsh • 17 years ago

3b13a8

- Upgrade to upstream to grab postgressql changes

Daniel J Walsh • 17 years ago

95bbe5

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

77a220

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

c77aca

- Add ldconfig_cache_t

Daniel J Walsh • 17 years ago

4f23c4

- Allow sshd to write to proc_t for afs login

Daniel J Walsh • 17 years ago

b4ae7d

- Allow xserver access to urand

Daniel J Walsh • 17 years ago

f01207

- allow dovecot to search mountpoints

Daniel J Walsh • 17 years ago

7f6883

- Fix Makefile for building policy modules

Daniel J Walsh • 17 years ago

0354c2

- Fix dhcpc startup of service

Daniel J Walsh • 17 years ago

60a9ef

- Fix dbus chat to not happen for xguest and guest users

Daniel J Walsh • 17 years ago

bf3320

- Fix nagios cgi

Daniel J Walsh • 17 years ago

d44a39

- Fixes for ldconfig

Daniel J Walsh • 17 years ago

1a12c2

- Update from upstream

Daniel J Walsh • 17 years ago

d8c8b2

- Update from upstream

Daniel J Walsh • 17 years ago

f97782

- Update from upstream

Daniel J Walsh • 17 years ago

25a754

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

4ce75b

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

8239a9

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

6d2e7d

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

47a35f

- Allow xserver to write to ramfs mounted by rhgb

Daniel J Walsh • 17 years ago

07351e

- Add context for dbus machine id

Daniel J Walsh • 17 years ago

9c0386

- Update with latest changes from upstream

Daniel J Walsh • 17 years ago

2fac1d

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

24acab

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

0f8f54

- Add ntpd_key_t to handle secret data

Daniel J Walsh • 17 years ago

e0ae20

- Add anon_inodefs

Daniel J Walsh • 17 years ago

2ced40

- Allow cups to use generic usb

Daniel J Walsh • 17 years ago

779d23

- Add proper contexts for rsyslogd

Daniel J Walsh • 17 years ago

908512

- Allow execution of gconf

Daniel J Walsh • 17 years ago

297dd1

- Fix moilscanner update problem

Daniel J Walsh • 17 years ago

1d0319

- Begin adding policy to separate setsebool from semanage

Daniel J Walsh • 17 years ago

7e3506

- Fix xserver.if definition to not break sepolgen.if

Daniel J Walsh • 17 years ago

16d953

- Add new devices

Daniel J Walsh • 17 years ago

2796de

- Add brctl policy

Daniel J Walsh • 17 years ago

154d82

- Fix root login to include system_r

Daniel J Walsh • 17 years ago

501a17

- Allow prelink to read kernel sysctls

Daniel J Walsh • 17 years ago

35e7f7

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

af6777

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b267b6

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b529ed

- fix squid

Daniel J Walsh • 17 years ago

2fdb5f

- Fix syslog declaration

Daniel J Walsh • 17 years ago

b786a2

- Allow avahi to access inotify

Daniel J Walsh • 17 years ago

7f4421

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

269acb

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

a4ec9b

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

56187c

- Fix for amands

Daniel J Walsh • 17 years ago

bdb830

Daniel J Walsh • 17 years ago

346d2d

- allow alsactl to read kernel state

Daniel J Walsh • 17 years ago

9ffb88

- More fixes for alsactl

Daniel J Walsh • 17 years ago

fc3577

- More fixes for alsactl

Daniel J Walsh • 17 years ago

88c846

- Fixes for suspend resume.

Daniel J Walsh • 17 years ago

cf806e

- Allow unconfined_t to transition to NetworkManager_t

Daniel J Walsh • 17 years ago

7c3dcb

- Update to latest from upstream

Daniel J Walsh • 17 years ago

810e69

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8cd496

- Update to latest from upstream

Daniel J Walsh • 17 years ago

057603

- Update to latest from upstream

Daniel J Walsh • 17 years ago

daa6ab

- Update to latest from upstream

Daniel J Walsh • 17 years ago

a615d5

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8fea83

-

Daniel J Walsh • 17 years ago

6821c3

- Fixes for unix_update

Daniel J Walsh • 17 years ago

77d25e

- Upstream bumped the version

Daniel J Walsh • 17 years ago

8396b2

- Allow consolekit to syslog

Daniel J Walsh • 17 years ago

61947f

- Allow iptbales to read etc_runtime_t

Daniel J Walsh • 17 years ago

2db3c1

- MLS Fixes

Daniel J Walsh • 17 years ago

466176

- MLS Fixes

Daniel J Walsh • 17 years ago

53b222

- Fix path of /etc/lvm/cache directory

Daniel J Walsh • 17 years ago

883a02

- Fixes for alsactl and pppd_t

Daniel J Walsh • 17 years ago

ab59be

- Fixes for consolekit

Daniel J Walsh • 17 years ago

32b18f

- Allow insmod_t to mount kvmfs_t filesystems

Daniel J Walsh • 17 years ago

7671ce

- Rwho policy

Daniel J Walsh • 17 years ago

9fc00b

- fixes for fusefs

Daniel J Walsh • 17 years ago

e6f3cf

- Fix samba_net to allow it to view samba_var_t

Daniel J Walsh • 17 years ago

8c912a

- Update to upstream

Daniel J Walsh • 17 years ago

a3b1a2

- Fix Sonypic backlight

Daniel J Walsh • 17 years ago

5d5cae

- Fixes for pyzor, cyrus, consoletype on everything installs

Daniel J Walsh • 17 years ago

7f1bd8

- Fix hald_acl_t to be able to getattr/setattr on usb devices

Daniel J Walsh • 17 years ago

0b3279

- Allow bluetooth to read inotifyfs

Daniel J Walsh • 17 years ago

21029b

- Fixes for samba domain controller.

Daniel J Walsh • 17 years ago

e6b9e2

- Fix interface call

Daniel J Walsh • 17 years ago

f9f9dd

- Allow syslog-ng to read /var

Daniel J Walsh • 17 years ago

89d3de

- Update to upstream

Daniel J Walsh • 17 years ago

2528fa

- Update to upstream

Daniel J Walsh • 17 years ago

8e5289

- Update to upstream

Daniel J Walsh • 17 years ago

ce7f30

- Allow samba to run groupadd

Daniel J Walsh • 17 years ago

f040ac

- Update to upstream

Daniel J Walsh • 17 years ago

f63473

- Fix labeling on udev.tbl dirs

Daniel J Walsh • 17 years ago

281f5f

- Fixes for logwatch

Daniel J Walsh • 17 years ago

552645

- Add fusermount and mount_ntfs policy

Daniel J Walsh • 17 years ago

593fb1

- Update to upstream

Daniel J Walsh • 17 years ago

9d59ec

Daniel J Walsh • 17 years ago

d3aaba

- Fixes for samba_var_t

Daniel J Walsh • 17 years ago

741e81

- Remove disable_trans booleans

Daniel J Walsh • 17 years ago

db4f0e

- Remove enable_audit booleans

Daniel J Walsh • 17 years ago

2823e2

- Fix prelink to be able to manage usr dirs.

Daniel J Walsh • 17 years ago

2f82ee

- Allow insmod to launch init scripts

Daniel J Walsh • 17 years ago

9468a6

- Remove setsebool policy

Daniel J Walsh • 17 years ago

271752

- Fix handling of unlabled_t packets

Daniel J Walsh • 17 years ago

bdb7f9

- More of my patches from upstream

Daniel J Walsh • 17 years ago

2a9b64

- Update to latest from upstream

Daniel J Walsh • 17 years ago

1fed4c

- Update to latest from upstream

Daniel J Walsh • 17 years ago

9a8202

- Update to remove security_t:filesystem getattr problems

Daniel J Walsh • 17 years ago

5ad70c

- Policy for consolekit

Daniel J Walsh • 17 years ago

13893e

Daniel J Walsh • 17 years ago

af8af9

- Revert Nemiver change

Daniel J Walsh • 17 years ago

cc1be2

- Add sepolgen support

Daniel J Walsh • 17 years ago

b08611

- Add sepolgen support

Daniel J Walsh • 17 years ago

b7da3b

- Add sepolgen support

Daniel J Walsh • 17 years ago

2fa5bb

THu Feb 15 2007 Dan Walsh <dwalsh@redhat.com> 2.5.3-3

Daniel J Walsh • 17 years ago

e10e57

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

07dcdf

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

1a2473

-

Daniel J Walsh • 17 years ago

df0bef

-

Daniel J Walsh • 17 years ago

9aff35

- Allow mozilla, evolution and thunderbird to read dev_random. Resolves:

Daniel J Walsh • 17 years ago

39b6ce

- Fix ssh_agent to be marked as an executable

Daniel J Walsh • 17 years ago

33501c

- Fix spamassisin so crond can update spam files

Daniel J Walsh • 17 years ago

de0b36

- Remove some targeted diffs in file context file

Daniel J Walsh • 17 years ago

3902fd

- Fix squid cachemgr labeling

Daniel J Walsh • 17 years ago

edd045

- Add ability to generate webadm_t policy

Daniel J Walsh • 17 years ago

e45f5d

- Continue fixing, additional user domains

Daniel J Walsh • 17 years ago

cc7c06

- Begin adding user confinement to targeted policy

Daniel J Walsh • 17 years ago

f86e42

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

454781

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ee095f

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

b6ed67

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ae5ace

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

9e0fa4

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

a384d7

- Allow spamassassin to read var_lib_t dir Resolves: #219234

Daniel J Walsh • 17 years ago

8a03d5

- fix mplayer to work under strict policy

Daniel J Walsh • 17 years ago

9bcfd1

- Add gconf policy and make it work with strict

Daniel J Walsh • 17 years ago

8bacd8

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

5db544

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

135ea9

- Fix to allow ftp to bind to ports > 1024 Resolves: #219349

Daniel J Walsh • 17 years ago

9051d6

Daniel J Walsh • 17 years ago

5ded3c

Daniel J Walsh • 17 years ago

4fd323

- Allow semanage to exec it self. Label genhomedircon as semanage_exec_t

Daniel J Walsh • 17 years ago

f9e32a

- allow automount to setgid Resolves: #219999

Daniel J Walsh • 17 years ago

be9aef

- Allow cron to polyinstatiate

Daniel J Walsh • 17 years ago

5e01b4

Daniel J Walsh • 17 years ago

272aa0

Resolves: #218978

Daniel J Walsh • 17 years ago

3a5184

Resolves: #218978

Daniel J Walsh • 17 years ago

422dcf

- Allow initrc to create files in /var directories Resolves: #219227

Daniel J Walsh • 17 years ago

e3b143

- More fixes for MLS

Daniel J Walsh • 17 years ago

6157a7

- More Fixes polyinstatiation Resolves: #216184

Daniel J Walsh • 17 years ago

dd5d7e

- Fix handling of keyrings

Daniel J Walsh • 17 years ago

a169fb

- Fix polyinstatiation

Daniel J Walsh • 17 years ago

852ba6

- More fixes for quota Resolves: #212957

Daniel J Walsh • 18 years ago

414ddd

- ncsd needs to use avahi sockets Resolves: #217640 Resolves: #218014

Daniel J Walsh • 18 years ago

9f388c

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

b6ffd7

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

aba668

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

036c1c

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

cc1462

- Fix context for helix players file_context #216942

Daniel J Walsh • 18 years ago

e4d46c

- Fix load_policy to be able to mls_write_down so it can talk to the

Daniel J Walsh • 18 years ago

02560d

- Fixes for hwclock, clamav, ftp

Daniel J Walsh • 18 years ago

421864

- Move to upstream version which accepted my patches

Daniel J Walsh • 18 years ago

9e4aea

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

b28d0a

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

a3f2f5

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

150bdf

- Allow semanage to signal mcstrans

Daniel J Walsh • 18 years ago

b0ecaa

- Update to upstream

Daniel J Walsh • 18 years ago

73ea8c

- Allow modstorage to edit /etc/fstab file

Daniel J Walsh • 18 years ago

d925bd

- Fix for qemu, /dev/

Daniel J Walsh • 18 years ago

ec1743

- Fix path to realplayer.bin

Daniel J Walsh • 18 years ago

32b91c

- Allow xen to connect to xen port

Daniel J Walsh • 18 years ago

06b64f

- Allow cups to search samba_etc_t directory

Daniel J Walsh • 18 years ago

1a986f

- Allow xen to search automount

Daniel J Walsh • 18 years ago

2098c9

- Fix spec of jre files

Daniel J Walsh • 18 years ago

6ba486

- Fix unconfined access to shadow file

Daniel J Walsh • 18 years ago

080659

- Allow xend to create files in xen_image_t directories

Daniel J Walsh • 18 years ago

4d1149

- Fixes for /var/lib/hal

Daniel J Walsh • 18 years ago

0fcc49

- Remove ability for sysadm_t to look at audit.log

Daniel J Walsh • 18 years ago

f08bf9

- Fix rpc_port_types

Daniel J Walsh • 18 years ago

f3ecbb

- Merge with upstream

Daniel J Walsh • 18 years ago

d7e0f9

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

0dae3b

- Add perms for swat

Daniel J Walsh • 18 years ago

d095a0

- Allow daemons to dump core files to /

Daniel J Walsh • 18 years ago

6b9761

- Fixes for ricci

Daniel J Walsh • 18 years ago

8fb79d

- Allow mount.nfs to work

Daniel J Walsh • 18 years ago

6672fc

- Allow ricci-modstorage to look at lvm_etc_t

Daniel J Walsh • 18 years ago

85659e

- Fixes for ricci using saslauthd

Daniel J Walsh • 18 years ago

08efef

- Allow mountpoint on home_dir_t and home_t

Daniel J Walsh • 18 years ago

dc804f

- Update xen to read nfs files

Daniel J Walsh • 18 years ago

8ff9d6

Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4

Daniel J Walsh • 18 years ago

3d011f

- Allow hal to use power_device_t

Daniel J Walsh • 18 years ago

11d7ea

- Allow procemail to look at autofs_t

Daniel J Walsh • 18 years ago

d6926f

- Refupdate from upstream

Daniel J Walsh • 18 years ago

e2eecb

- Add lots of fixes for mls cups

Daniel J Walsh • 18 years ago

302afb

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

6fa5ec

- Fix number of cats

Daniel J Walsh • 18 years ago

2d1b4a

- Update to upstream

Daniel J Walsh • 18 years ago

da0829

- More iSCSI changes for #209854

jantill • 18 years ago

a3698a

- Test ISCSI fixes for #209854

jantill • 18 years ago

cd0a0d

- allow semodule to rmdir selinux_config_t dir

Daniel J Walsh • 18 years ago

ed9a4c

- Fix boot_runtime_t problem on ppc. Should not be creating these files.

Daniel J Walsh • 18 years ago

70e2db

- Fix context mounts on reboot

Daniel J Walsh • 18 years ago

16c971

- Update for tallylog

Daniel J Walsh • 18 years ago

7316db

- Allow xend to rewrite dhcp conf files

Daniel J Walsh • 18 years ago

bfcffe

- Make xentapctrl work

Daniel J Walsh • 18 years ago

160281

- Don't transition unconfined_t to bootloader_t

Daniel J Walsh • 18 years ago

46f098

- Patch for labeled networking

Daniel J Walsh • 18 years ago

f21d67

- Fix crond handling for mls

Daniel J Walsh • 18 years ago

42dd74

- Update to upstream

Daniel J Walsh • 18 years ago

8fff69

- Remove bluetooth-helper transition

Daniel J Walsh • 18 years ago

52ba98

- Fix prelink

Daniel J Walsh • 18 years ago

5096e7

- Fix rhgb

Daniel J Walsh • 18 years ago

3c4577

- Fix setrans handling on MLS and useradd

Daniel J Walsh • 18 years ago

172c6c

- Support for fuse

Daniel J Walsh • 18 years ago

afbab5

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

bfd584

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

201e1d

- Allow java execheap for itanium

Daniel J Walsh • 18 years ago

d25a3e

- Update with upstream

Daniel J Walsh • 18 years ago

a76cf8

- mls fixes

Daniel J Walsh • 18 years ago

857ce1

- Update from upstream

Daniel J Walsh • 18 years ago

85bd85

- More fixes for mls

Daniel J Walsh • 18 years ago

8d52bd

- Fix cron jobs to run under the correct context

Daniel J Walsh • 18 years ago

5ec822

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

cc9afd

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

b4815d

- Multiple policy fixes

Daniel J Walsh • 18 years ago

c56aa1

- Fix transition on mcstransd

Daniel J Walsh • 18 years ago

b8c785

- Add /dev/em8300 defs

Daniel J Walsh • 18 years ago

38b22c

- Upgrade to upstream

Daniel J Walsh • 18 years ago

3f1bb6

- Upgrade to upstream

Daniel J Walsh • 18 years ago

f511de

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

60792f

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

588fb9

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

5f2a4e

- Add tty access to all domains boolean

Daniel J Walsh • 18 years ago

861af1

- Fixed typealias of firstboot_rw_t

Daniel J Walsh • 18 years ago

9fbb71

- Fix location of xel log files

Daniel J Walsh • 18 years ago

8b6c37

- Fixes for autofs, lp

Daniel J Walsh • 18 years ago

1ef9d4

- Update from upstream

Daniel J Walsh • 18 years ago

937c1c

- Fixup for test6

Daniel J Walsh • 18 years ago

57075e

- Fixup for test6

Daniel J Walsh • 18 years ago

66ca8d

- Fixup for test6

Daniel J Walsh • 18 years ago

4bf7cf

- Update to upstream

Daniel J Walsh • 18 years ago

efb089

- Update to upstream

Daniel J Walsh • 18 years ago

928af4

- Fix suspend to disk problems

Daniel J Walsh • 18 years ago

04dd12

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

a1c3b4

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

3723ca

- Fix audit line

Daniel J Walsh • 18 years ago

e4710b

- Fix audit line

Daniel J Walsh • 18 years ago

7f5a12

- Fix requires line

Daniel J Walsh • 18 years ago

358add

- Upgrade to upstream

Daniel J Walsh • 18 years ago

06027c

- Fix install problems

Daniel J Walsh • 18 years ago

161655

- Allow setroubleshoot to getattr on all dirs to gather RPM data

Daniel J Walsh • 18 years ago

9e8814

- Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32

Daniel J Walsh • 18 years ago

4c3485

- Fix xen tty devices

Daniel J Walsh • 18 years ago

b2d3eb

- Fixes for setroubleshoot

Daniel J Walsh • 18 years ago

8cd82c

- Update to upstream

Daniel J Walsh • 18 years ago

a5dcfa

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

3559b5

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

6f77ee

- Update from upstream

Daniel J Walsh • 18 years ago

79b5c4

- Update from upstream

Daniel J Walsh • 18 years ago

256cfc

- Change allow_execstack to default to on, for RHEL5 Beta. This is required

Daniel J Walsh • 18 years ago

543bc3

- Misc fixes

Daniel J Walsh • 18 years ago

5974f4

Th Aug 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3.6-3

Daniel J Walsh • 18 years ago

c22aca

- More fixes for strict policy

Daniel J Walsh • 18 years ago

d0ed11

- Quiet down anaconda audit messages

Daniel J Walsh • 18 years ago

8da541

- Fix setroubleshootd

Daniel J Walsh • 18 years ago

932c79

- Update to the latest from upstream

Daniel J Walsh • 18 years ago

262020

- More fixes for xen

Daniel J Walsh • 18 years ago

750558

- Fix anaconda transitions

Daniel J Walsh • 18 years ago

1c92c7

- yet more xen rules

Daniel J Walsh • 18 years ago

5dc8b1

- more xen rules

Daniel J Walsh • 18 years ago

031e1a

- Fixes for Samba

Daniel J Walsh • 18 years ago

1b1dad

- Fixes for xen

Daniel J Walsh • 18 years ago

be45a2

- Allow setroubleshootd to send mail

Daniel J Walsh • 18 years ago

9782db

- Add nagios policy

Daniel J Walsh • 18 years ago

1f2093

- fixes for setroubleshoot

Daniel J Walsh • 18 years ago

90c408

- Added Paul Howorth patch to only load policy packages shipped with this

Daniel J Walsh • 18 years ago

9554c9

- Allow pidof from initrc to ptrace higher level domains

Daniel J Walsh • 18 years ago

9d77b6

- Add policy for /var/run/ldapi

Daniel J Walsh • 18 years ago

8555e0

- Fix setroubleshoot policy

Daniel J Walsh • 18 years ago

b14e13

- Fixes for mls use of ssh

Daniel J Walsh • 18 years ago

7b4c78

- Fixes to make setroubleshoot work

Daniel J Walsh • 18 years ago

efa5f5

- Cups needs to be able to read domain state off of printer client

Daniel J Walsh • 18 years ago

1c15e3

- add boolean to allow zebra to write config files

Daniel J Walsh • 18 years ago

c7b739

- setroubleshootd fixes

Daniel J Walsh • 18 years ago

31c47b

- Allow prelink to read bin_t symlink

Daniel J Walsh • 18 years ago

2bf148

- Remove spamassassin_can_network boolean

Daniel J Walsh • 18 years ago

c62a78

- Update to upstream

Daniel J Walsh • 18 years ago

210755

- Add setroubleshoot policy

Daniel J Walsh • 18 years ago

8a7ef5

- Turn off auditallow on setting booleans

Daniel J Walsh • 18 years ago

317bd2

- Multiple fixes

Daniel J Walsh • 18 years ago

d81909

- Update to upstream

Daniel J Walsh • 18 years ago

8bee3a

- Update to upstream

Daniel J Walsh • 18 years ago

4a291a

- Update to upstream

Daniel J Walsh • 18 years ago

9e7fd1

- Update to upstream

Daniel J Walsh • 18 years ago

1065b1

- Fix requires

Daniel J Walsh • 18 years ago

446e9b

- Update to upstream

Daniel J Walsh • 18 years ago

2b87b0

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

63e20b

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

77dc77

- Add ibmasmfs

Daniel J Walsh • 18 years ago

af203b

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

cc073e

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

4ef386

- Update from Upstream

Daniel J Walsh • 18 years ago

358335

- Fix spec of realplay

Daniel J Walsh • 18 years ago

0fe5c7

- Update to upstream

Daniel J Walsh • 18 years ago

2616c6

- Allow useradd to create_home_dir in MLS environment

Daniel J Walsh • 18 years ago

b637d9

- Update from upstream

Daniel J Walsh • 18 years ago

3004d5

- Update from upstream

Daniel J Walsh • 18 years ago

c54f60

- Update from upstream

Daniel J Walsh • 18 years ago

cfc04d

- Add oprofilefs

Daniel J Walsh • 18 years ago

a4c709

- Fix for hplip and Picasa

Daniel J Walsh • 18 years ago

a55870

- Update to upstream

Daniel J Walsh • 18 years ago

43fe71

- fixes for java, openldap and webalizer

Daniel J Walsh • 18 years ago

7580a1

- Xen fixes

Daniel J Walsh • 18 years ago

d065ee

- Xen fixes

Daniel J Walsh • 18 years ago

e30da9

- Upgrade to upstream

Daniel J Walsh • 18 years ago

e5e509

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

75d0fe

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

4aae36

- Update from upstream

Daniel J Walsh • 18 years ago

f4d170

- Fixes for amavis

Daniel J Walsh • 18 years ago

82d40f

- Update from upstream

Daniel J Walsh • 18 years ago

52288b

- Allow auditctl to search all directories

Daniel J Walsh • 18 years ago

a97d1f

- Add acquire service for mono.

Daniel J Walsh • 18 years ago

f08aca

- Turn off allow_execmem boolean

Daniel J Walsh • 18 years ago

89e397

- Clean up spec file

Daniel J Walsh • 18 years ago

ca8bc2

- Allow execution of cvs command

Daniel J Walsh • 18 years ago

539ba8

- Update to upstream

Daniel J Walsh • 18 years ago

a52275

- Update to upstream

Daniel J Walsh • 18 years ago

529f12

- Fix libjvm spec

Daniel J Walsh • 18 years ago

49dfee

- Update to upstream

Daniel J Walsh • 18 years ago

ea725c

- Add xm policy

jantill • 18 years ago

684125

- Update to upstream

Daniel J Walsh • 18 years ago

bbaa1f

- Allow mono to chat with unconfined

Daniel J Walsh • 18 years ago

e847c8

- Allow procmail to sendmail

Daniel J Walsh • 18 years ago

d2fe1b

- Update to latest from upstream

Daniel J Walsh • 18 years ago

5ff36d

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c74f14

- Add unconfined_mount_t

Daniel J Walsh • 18 years ago

3c584c

- Update to latest from upstream

Daniel J Walsh • 18 years ago

ca0597

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c4826d

- Change libraries.fc to stop shlib_t form overriding texrel_shlib_t

Daniel J Walsh • 18 years ago

c7b01a

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

5cbfde

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

c53f3b

Change file contexts and several minor policy changes.

rcoker • 18 years ago

a442ed

- More textrel_shlib_t file path fixes

Daniel J Walsh • 18 years ago

67bc5e

- Get auditctl working in MLS policy

Daniel J Walsh • 18 years ago

4fd214

- Add mono dbus support

Daniel J Walsh • 18 years ago

2ad4f1

- Update to upstream

Daniel J Walsh • 18 years ago

da5d60

- Allow automount and dbus to read cert files

Daniel J Walsh • 18 years ago

d2bd4f

- Fix ftp policy

Daniel J Walsh • 18 years ago

58ec7a

- Update to upstream

Daniel J Walsh • 18 years ago

5c1cd7

- Update to upstream

Daniel J Walsh • 18 years ago

bbe0ad

- Update to upstream

Daniel J Walsh • 18 years ago

5a0143

- Fix policyhelp

Daniel J Walsh • 18 years ago

bd3f0e

- Fix pam_console handling of usb_device

Daniel J Walsh • 18 years ago

faffd3

- Update to upstream

Daniel J Walsh • 18 years ago

414d6d

- Update to upstream

Daniel J Walsh • 18 years ago

ad73e8

- Update to upstream

Daniel J Walsh • 18 years ago

727bb2

- Get transition rules to create policy.20 at SystemHigh

Daniel J Walsh • 18 years ago

9f8b05

- Allow secadmin to shutdown system

Daniel J Walsh • 18 years ago

5b4676

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

6d4275

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

0a74a2

- remove mkdir /usr/share/selinux/, it's not required and even wrong

Karsten Hopp • 18 years ago

4e431c

- Get rid of mount/fsdisk scan of /dev messages

Daniel J Walsh • 18 years ago

4c9f08

- Fake make to rebuild enableaudit.pp

Daniel J Walsh • 18 years ago

54b0b5

- Get xen networking running.

Daniel J Walsh • 18 years ago

6d2388

- Fixes for Xen

Daniel J Walsh • 18 years ago

23a177

- more xen policy fixups

Jeremy Katz • 18 years ago

b33ec3

- more xen fixage (#184393)

Jeremy Katz • 18 years ago

1b0755

- Fix blkid specification

Daniel J Walsh • 18 years ago

060041

- Blkid changes

Daniel J Walsh • 18 years ago

9c64bb

- Allow lvm tools to create drevice dir

Daniel J Walsh • 18 years ago

4c9f65

- Add Xen support

Daniel J Walsh • 18 years ago

020477

- Fixes for cups

Daniel J Walsh • 18 years ago

72a136

- Fixes for cups

Daniel J Walsh • 18 years ago

0296af

- Load Policy needs translock

Daniel J Walsh • 18 years ago

76d7c5

- Fix cups html interface

Daniel J Walsh • 18 years ago

ef0cb1

- Add hal changes suggested by Jeremy

Daniel J Walsh • 18 years ago

21277d

- add policyhelp to point at policy html pages

Daniel J Walsh • 18 years ago

d2c260

- Additional fixes for nvidia and cups

Daniel J Walsh • 18 years ago

8254bb

- Update to upstream

Daniel J Walsh • 18 years ago

575aa9

*** empty log message ***

Daniel J Walsh • 18 years ago

fbec4b

*** empty log message ***

Daniel J Walsh • 18 years ago

290aa6

*** empty log message ***

Daniel J Walsh • 18 years ago

dd2612

*** empty log message ***

Daniel J Walsh • 18 years ago

e135c7

*** empty log message ***

Daniel J Walsh • 18 years ago

771686

*** empty log message ***

Daniel J Walsh • 18 years ago

c12699

*** empty log message ***

Daniel J Walsh • 18 years ago

7dca0e

*** empty log message ***

Daniel J Walsh • 18 years ago

5d5343

*** empty log message ***

Daniel J Walsh • 18 years ago

d19b68

*** empty log message ***

Daniel J Walsh • 18 years ago

701455

*** empty log message ***

Daniel J Walsh • 18 years ago

585f82

*** empty log message ***

Daniel J Walsh • 18 years ago

d4d1f2

*** empty log message ***

Daniel J Walsh • 18 years ago

4dab27

*** empty log message ***

Daniel J Walsh • 18 years ago

a57054

*** empty log message ***

Daniel J Walsh • 18 years ago

d5ae27

*** empty log message ***

Daniel J Walsh • 18 years ago

28c425

*** empty log message ***

Daniel J Walsh • 18 years ago

46bd65

*** empty log message ***

Daniel J Walsh • 18 years ago

31d4d2

*** empty log message ***

Daniel J Walsh • 18 years ago

f0e87b

*** empty log message ***

Daniel J Walsh • 18 years ago

3debd0

*** empty log message ***

Daniel J Walsh • 18 years ago

6e9bcb

*** empty log message ***

Daniel J Walsh • 18 years ago

f3a390

*** empty log message ***

Daniel J Walsh • 18 years ago

025d1e

*** empty log message ***

Daniel J Walsh • 18 years ago

2f15a2

*** empty log message ***

Daniel J Walsh • 18 years ago

c417f6

*** empty log message ***

Daniel J Walsh • 18 years ago

cb99f7

*** empty log message ***

Daniel J Walsh • 18 years ago

847884

*** empty log message ***

Daniel J Walsh • 18 years ago

32b871

*** empty log message ***

Daniel J Walsh • 18 years ago

faa80b

*** empty log message ***

Daniel J Walsh • 18 years ago

5a8299

*** empty log message ***

Daniel J Walsh • 18 years ago

b28beb

*** empty log message ***

Daniel J Walsh • 18 years ago

a3a62a

*** empty log message ***

Daniel J Walsh • 18 years ago

de82d8

*** empty log message ***

Daniel J Walsh • 18 years ago

38c806

- Update to upstream

Daniel J Walsh • 18 years ago

681c9d

- Update to upstream

Daniel J Walsh • 18 years ago

737432

- Update to upstream

Daniel J Walsh • 18 years ago

332537

- Update to upstream

Daniel J Walsh • 18 years ago

70d9b4

- Update to upstream

Daniel J Walsh • 18 years ago

78265f

- Add inotifyfs handling

Daniel J Walsh • 18 years ago

b6e6b5

- Update to upstream

Daniel J Walsh • 18 years ago

e76bab

- Many changes for MLS

Daniel J Walsh • 18 years ago

a3b5c3

- Update to upstream

Daniel J Walsh • 18 years ago

129ba1

- Update to upstream

Daniel J Walsh • 18 years ago

30a020

- Update to upstream

Daniel J Walsh • 18 years ago

05207b

- Update to upstream

Daniel J Walsh • 18 years ago

a1c584

- Update to upstream

Daniel J Walsh • 18 years ago

2e7147

- Update to upstream

Daniel J Walsh • 18 years ago

cdab5c

- Update to upstream

Daniel J Walsh • 18 years ago

7ba8b0

- fix pup transitions (#177262)

Jeremy Katz • 18 years ago

b9b2d8

- Update to upstream

Daniel J Walsh • 18 years ago

640128

- More Fixes for hal and readahead

Daniel J Walsh • 18 years ago

ef1477

- Fixes for hal and readahead

Daniel J Walsh • 18 years ago

e485f5

- Update to upstream

Daniel J Walsh • 18 years ago

26e33d

- Handle new location of hal scripts

Daniel J Walsh • 18 years ago

451d9b

- Allow su to read /etc/mtab

Daniel J Walsh • 18 years ago

008885

- Update to upstream

Daniel J Walsh • 18 years ago

026fac

- Update to upstream

Daniel J Walsh • 18 years ago

286432

- Update to upstream

Daniel J Walsh • 18 years ago

a736f9

- Fix "libsemanage.parse_module_headers: Data did not represent a module."

Daniel J Walsh • 18 years ago

120d3b

- Allow load_policy to read /etc/mtab

Daniel J Walsh • 18 years ago

ce66f5

- Fix dovecot to allow dovecot_auth to look at /tmp

Daniel J Walsh • 18 years ago

1f3122

- Allow restorecon to read unlabeled_t directories in order to fix

Daniel J Walsh • 18 years ago

d7b05b

- Add Logwatch policy

Daniel J Walsh • 18 years ago

3607aa

- Add Logwatch policy

Daniel J Walsh • 18 years ago

a08ba8

- Fix /dev/ub[a-z] file context

Daniel J Walsh • 18 years ago

798572

- Fix library specification

Daniel J Walsh • 18 years ago

9f7b03

- Fix hostname in targeted policy

Daniel J Walsh • 18 years ago

596229

- Fix passwd command on mls

Daniel J Walsh • 18 years ago

5a47e6

- Lots of fixes to make mls policy work

Daniel J Walsh • 18 years ago

71ee99

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

6e9ee7

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

9d20b2

- Add man pages

Daniel J Walsh • 18 years ago

1335ee

- Add enableaudit.pp

Daniel J Walsh • 18 years ago

315b4a

- Fix mls policy

Daniel J Walsh • 18 years ago

105bbf

- Update mls file from old version

Daniel J Walsh • 18 years ago

ecb726

- Update mls file from old version

Daniel J Walsh • 18 years ago

a587fa

- Update mls file from old version

Daniel J Walsh • 18 years ago

0c9f87

- Add sids back in

Daniel J Walsh • 18 years ago

dce316

- Fixes to allow automount to use portmap

Daniel J Walsh • 18 years ago

9ce97a

- Add java unconfined/execmem policy

Daniel J Walsh • 18 years ago

1c8602

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1ef62f

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1f0075

- Update from upstream

Daniel J Walsh • 18 years ago

504da9

- Fixes for hal

Daniel J Walsh • 18 years ago

e24a8b

- Fixes for hal

Daniel J Walsh • 18 years ago

1ff14a

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

d8566e

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

7171df

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

cfcb30

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

afa8a2

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

57c18f

- fix requirements to be on the actual packages so that policy can get

Jeremy Katz • 18 years ago

eb190f

- Allow unconfined_t to execmod texrel_shlib_t

Daniel J Walsh • 18 years ago

9e85a8

- Update to upstream

Daniel J Walsh • 18 years ago

d4da53

- Add two new httpd booleans, turned off by default

Daniel J Walsh • 18 years ago

e1ccb6

- Add ghost for policy.20

Daniel J Walsh • 18 years ago

7c94e8

- Update to upstream

Daniel J Walsh • 18 years ago

6f5a3b

- Change setrans-mls to use new libsetrans

Daniel J Walsh • 18 years ago

c6c498

- Change Requires to PreReg for requiring of policycoreutils on install

Daniel J Walsh • 18 years ago

12e089

Add xdm policy

Daniel J Walsh • 18 years ago

97bd2a

Update from upstream

Daniel J Walsh • 18 years ago

46a906

Update from upstream

Daniel J Walsh • 18 years ago

913e47

Update from upstream

Daniel J Walsh • 18 years ago

a1e07b

Update from upstream

Daniel J Walsh • 18 years ago

475186

Update from upstream

Daniel J Walsh • 19 years ago

caeef1

- fix trigger (dwalsh looking over my shoulder)

Nalin Dahyabhai • 19 years ago

2b2203

- No longer installing policy.20 file, anaconda handles the building of the

Daniel J Walsh • 19 years ago

28930b

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

bd7e86

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

4199dc

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

a03362

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

c1b022

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

25e721

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

21dea1

-Update to latest from upstream

Daniel J Walsh • 19 years ago

598be1

-Update to latest from upstream

Daniel J Walsh • 19 years ago

e38dc4

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

b33f08

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

765f81

- Start building MLS Policy

Daniel J Walsh • 19 years ago

d77f56

- Start building MLS Policy

Daniel J Walsh • 19 years ago

a32f66

- Update to upstream

Daniel J Walsh • 19 years ago

e56873

- Update to upstream

Daniel J Walsh • 19 years ago

3e930b

- Update to upstream

Daniel J Walsh • 19 years ago

1a0a25

- Turn on bash

Daniel J Walsh • 19 years ago

205d3f

- Initial version

Daniel J Walsh • 19 years ago

f0b87c

now how about this? do you like it? is it finally good enough for you?

Nalin Dahyabhai • 19 years ago

af6090

try this

Nalin Dahyabhai • 19 years ago

46e726

try anything

Nalin Dahyabhai • 19 years ago

f852dd

- Initial version

Daniel J Walsh • 19 years ago

be926a

- Initial version

Daniel J Walsh • 19 years ago

edb750

- Initial version

Daniel J Walsh • 19 years ago

cc9c9e

auto-import selinux-policy-2.0.0-0.6 on branch devel from

Daniel J Walsh • 19 years ago

1580c8

rpms / selinux-policy

History selinux-policy.spec

rpms / selinux-policy

Source Code

History selinux-policy.spec