File history - rpms/selinux-policy

* Thu Jan 26 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80

Miroslav • 12 years ago

a9d343

- Turn on deny_ptrace boolean for the Rawhide run, so we can t

Miroslav Grepl • 12 years ago

0c0b39

+- Add labeling for udisks2

Miroslav • 12 years ago

75a7b9

- Treat Bip with bitlbee policy

Miroslav Grepl • 12 years ago

8cd443

- Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there

Miroslav Grepl • 12 years ago

de9114

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

291b1f

Remove Requires for bunzip2 and mktemp

Dan Walsh • 12 years ago

b80397

- Merge systemd patch

Miroslav Grepl • 12 years ago

153cc8

Fixes to make rawhide boot in enforcing mode with latest systemd changes

Dan Walsh • 12 years ago

cd25a7

Add labeling for /var/run/systemd/journal/syslog

Dan Walsh • 12 years ago

86d3f6

+- Add labeling for /var/run/systemd/journal/syslog

Miroslav • 12 years ago

68079f

- Fixed destined form libvirt-sandbox

Miroslav • 12 years ago

69a8d0

Rename audioentropy to entropy to match upstream

Dan Walsh • 12 years ago

7cf580

- New fix for seunshare, requires seunshare_domains to be able to mounton /

Miroslav • 12 years ago

b3ef57

Test if selinuxenabled correctly

Dan Walsh • 12 years ago

5a73fd

default trans rules for Rawhide policy

Dan Walsh • 12 years ago

d5b8b9

- default trans rules for Rawhide policy

Miroslav Grepl • 12 years ago

67539d

Update to handle labeling on /sys using systemd-tmpfiles, also support default_range transition rules

Dan Walsh • 12 years ago

bce4ec

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

a92258

- Add httpd_can_connect_ldap() interface

Miroslav • 12 years ago

cd2519

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

49b373

Committing my changes

Dan Walsh • 12 years ago

ad10ef

+- Add label for /var/lib/iscan/interpreter

Miroslav • 12 years ago

7c693b

- Allow abrt to request the kernel to load a module

Miroslav • 12 years ago

d17f75

+- Allow mozilla_plugin_t to manage mozilla_home_t

Miroslav • 12 years ago

202bb4

- Fixes for xguest package

Miroslav • 12 years ago

1094d0

+- Fixes related to /bin, /sbin

Miroslav • 12 years ago

e91d87

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 12 years ago

5305bd

Eliminate nsplugin from F17

Dan Walsh • 12 years ago

102fd0

+- Use fs_use_xattr for squashf

Miroslav • 12 years ago

4fe804

- Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it

Miroslav • 13 years ago

e5768e

Let firewallgui read the selinux config

Dan Walsh • 13 years ago

e9119e

- Disable nsplugin module

Miroslav • 13 years ago

0ca57d

+- Allow mcelog_t to create dir and file in /var/run and label it

Miroslav • 13 years ago

234df6

Merge

Dan Walsh • 13 years ago

3c81e3

- Add ssh_dontaudit_search_home_dir

Miroslav • 13 years ago

19d3c6

- Pulseaudio changes

Miroslav • 13 years ago

68f145

Checkin patches to git repository

dwalsh • 13 years ago

4501de

Remove allow_execmem boolean and replace with deny_execmem boolean

Dan Walsh • 13 years ago

4147fe

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

901609

Turn back on allow_execmem boolean

Dan Walsh • 13 years ago

e58227

Add more MCS fixes to make sandbox working

Dan Walsh • 13 years ago

13382d

MCS fixes

Dan Walsh • 13 years ago

653590

MCS fixes

Dan Walsh • 13 years ago

01e90f

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0b72d1

MCS fixes

Dan Walsh • 13 years ago

8872d3

+- MCS fixes

Miroslav • 13 years ago

76b2f5

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

d5bede

Make nvidia* to be labeled correctly

dwalsh • 13 years ago

a7f002

Check in fixed for Chrome nacl support

Dan Walsh • 13 years ago

bc6fbd

Begin removing qemu_t domain, we really no longer need this domain.

Dan Walsh • 13 years ago

26536c

Remove qemu.pp again without causing a crash

Dan Walsh • 13 years ago

a1db2c

Remove qemu.pp, everything should use svirt_t or stay in its current domain

Dan Walsh • 13 years ago

b4b026

Allow policykit to talk to the systemd via dbus

Dan Walsh • 13 years ago

084f95

Change bootstrap name to nacl

Dan Walsh • 13 years ago

fa26d8

Allow named to connect to dirsrv by default

Dan Walsh • 13 years ago

44066b

Allow firewallgui to read /etc/selinux/config

Dan Walsh • 13 years ago

3dcdda

- Fixes for cloudform policies which need to connect to random ports

Miroslav • 13 years ago

b6ae80

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

1a2b4d

Turn on mock_t and thumb_t for unconfined domains

Dan Walsh • 13 years ago

f875d2

Policy update should not modify local contexts

Dan Walsh • 13 years ago

e1f17e

Remove ada policy

Dan Walsh • 13 years ago

052e17

Remove ada policy

Dan Walsh • 13 years ago

b01657

Remove tzdata policy

Dan Walsh • 13 years ago

61fa8d

Remove tzdata policy

Dan Walsh • 13 years ago

8214f7

Remove tzdata policy

Miroslav • 13 years ago

1944b1

Remove tzdata domain, only necessary to make sure stuff is labeled correctly.

Dan Walsh • 13 years ago

087aae

Add policies for nova openstack

Dan Walsh • 13 years ago

a56e13

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

4dba2e

Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain

Dan Walsh • 13 years ago

1414f9

Add passwd_file_t for /etc/ptmptmp

Dan Walsh • 13 years ago

9bf3aa

Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)

Dan Walsh • 13 years ago

e29441

Move dontaudit sys_ptrace line from permissive.te to domain.te

Dan Walsh • 13 years ago

245397

Don't check md5 size or mtime on certain config files

Dan Walsh • 13 years ago

042e3a

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

2f4dfe

Remove allow_ptrace and replace it with deny_ptrace, which will remove all

Dan Walsh • 13 years ago

6554bb

Shrink size of policy through use of attributes for userdomain and apache

Dan Walsh • 13 years ago

2a89df

Fix spec file

Miroslav • 13 years ago

100055

- Allow virsh to read xenstored pid file

Miroslav • 13 years ago

54943f

Allow nmbd to manage sock file in /var/run/nmbd

Dan Walsh • 13 years ago

859ba0

Fix missing patch from F16

Dan Walsh • 13 years ago

14d7aa

Allow logrotate setuid and setgid since logrotate is supposed to do it

Dan Walsh • 13 years ago

f1bc73

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

e15ae4

Fixes caused by the labeling of /etc/passwd

Dan Walsh • 13 years ago

a004ca

+- Add support for Clustered Samba commands

Miroslav • 13 years ago

024724

Add label for /etc/passwd

Dan Walsh • 13 years ago

4d2486

Add grub.patch

Miroslav • 13 years ago

1b20a5

Make unconfined domains permissive for rawhide

Dan Walsh • 13 years ago

24b80b

- Make mta_role() active

Miroslav • 13 years ago

02a8a4

Fix spec file

Miroslav Grepl • 13 years ago

1aafd0

Fix spec file

Miroslav Grepl • 13 years ago

031161

+- Change screen to use screen_domain attribute and allow screen_domains to read all process domain state

Miroslav • 13 years ago

f9c350

Add definition for ephemeral ports

Dan Walsh • 13 years ago

747b71

- Needs to require a new version of checkpolicy

Miroslav • 13 years ago

dec011

- Allow sanlock to manage virt lib files

Miroslav • 13 years ago

40af2a

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

a59df1

Make seusers config noreplace

Dan Walsh • 13 years ago

9c4a93

- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files

Miroslav • 13 years ago

b3edab

+- Allow collectd to read hardware state information

Miroslav • 13 years ago

e8563b

Fix typo in spec file

Miroslav • 13 years ago

b1448b

- removing unconfined_notrans_t no longer necessary

Miroslav • 13 years ago

116a11

- Add exim_exec_t label for /usr/sbin/exim_tidydb

Miroslav • 13 years ago

5b0c57

- pki needs another port

Miroslav • 13 years ago

392fd7

Add glance policy

Dan Walsh • 13 years ago

e6877a

- Allow Postfix to deliver to Dovecot LMTP socket

Miroslav • 13 years ago

1c136f

- Allow insmod_t to use fds leaked from devicekit

Miroslav • 13 years ago

2f3d11

Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten

Dan Walsh • 13 years ago

22a1cf

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ba2e58

Make users_extra and seusers.final into config no replace so semanage users and semanage login files do not get overwritten

Dan Walsh • 13 years ago

39eb9e

- Add policy for sa-update being run out of cron jobs

Miroslav • 13 years ago

24041f

Do not do preinstall if there is not previous install

Dan Walsh • 13 years ago

5d837b

- Turn on allow_domain_fd_use boolean on F16

Miroslav • 13 years ago

8d13f5

livecd fixes

Dan Walsh • 13 years ago

10f0de

Cleanup spec file to remove rpmnew files

Dan Walsh • 13 years ago

8a78e8

- fetchmail can use kerberos

Miroslav • 13 years ago

913fab

storage should be in base

Dan Walsh • 13 years ago

41a181

Add cfengine policy

Dan Walsh • 13 years ago

8becfd

- Add abrt_domain attribute

Miroslav • 13 years ago

2aa62d

- More fixes of rules which cause an explosion in rules by Dan Walsh

Miroslav • 13 years ago

58f550

- Allow rcsmcertd to perform DNS name resolution

Miroslav • 13 years ago

0c240d

- Allow systemd_logind to send dbus messages with users

Miroslav • 13 years ago

f5593e

- Fix oracledb_port definition

Miroslav • 13 years ago

6e9c22

systemd fixes

Miroslav • 13 years ago

273e93

- Add initial policy for abrt_dump_oops_t

Miroslav • 13 years ago

2ed528

- Initial systemd_logind policy

Miroslav Grepl • 13 years ago

805cc3

- Allow setsched for virsh

Miroslav Grepl • 13 years ago

2b7c05

Fix spec file

Miroslav Grepl • 13 years ago

50f07b

- A lot of users are running yum -y update while in /root which is causing ldc

Miroslav Grepl • 13 years ago

330eac

Fully path the semodule command

Dan Walsh • 13 years ago

fb5b77

- Change usbmuxd_t to dontaudit attempts to read chr_file

Miroslav Grepl • 13 years ago

975370

Update to upstream

Miroslav Grepl • 13 years ago

ade486

- More fixes

Miroslav Grepl • 13 years ago

2885bf

Next attempt at getting selinux-policy-* to work without rebuilding policy.

Dan Walsh • 13 years ago

7e1b61

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

cf012e

Change required policycoreutils and libsemanage

Dan Walsh • 13 years ago

8782a9

- Add dspam policy

Miroslav Grepl • 13 years ago

4fb7b4

Eliminate olpc stuff and other no longer needed files. Update to new system to build policy.* file within payload.

Dan Walsh • 13 years ago

857c81

apply merge

Dan Walsh • 13 years ago

d0597c

Old passanger module needs to be removed in spec file

Miroslav Grepl • 13 years ago

183e54

- Fixes for zabbix

Miroslav Grepl • 13 years ago

d8b121

Update from git

Dan Walsh • 13 years ago

5253d4

- Add mailscanner policy from dgrift

Miroslav Grepl • 13 years ago

94cdba

Allow policy.VERSION and modules to ship with package

Dan Walsh • 13 years ago

053565

Fix spec file

Miroslav Grepl • 13 years ago

0e70f6

- Fixes for sanlock policy

Miroslav Grepl • 13 years ago

a56fb9

- Add rhev policy module to modules-targeted.conf

Miroslav Grepl • 13 years ago

a8e065

- Lot of fixes

Miroslav Grepl • 13 years ago

ace252

New policy patch requires updated checkpolicy package

Dan Walsh • 13 years ago

d97c92

- Allow logrotate to execute systemctl

Miroslav Grepl • 13 years ago

cb71de

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

7fbbd6

- Dontaudit sys_module for ifconfig

Miroslav Grepl • 13 years ago

27bf70

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

ff120d

- Fix label for /usr/share/munin/plugins/munin_* plugins

Miroslav Grepl • 13 years ago

cfc00b

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e81c79

- Forard port changes from F15 for telepathy

Miroslav Grepl • 13 years ago

6347ee

- Allow init_t getcap and setcap

Miroslav Grepl • 13 years ago

b02295

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

99b2fe

Default telepath to allow it to connect to network ports

Dan Walsh • 13 years ago

402e7b

- Add support for ABRT retrace server

Miroslav Grepl • 13 years ago

a8c63d

Accidently checked in my test spec file

Dan Walsh • 13 years ago

ff64d9

Readd my patch

Dan Walsh • 13 years ago

bd16f8

Move to version 26 of policy

Dan Walsh • 13 years ago

9bd168

- Fixes for zarafa policy

Miroslav Grepl • 13 years ago

a35763

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

637b33

- xdm_t needs getsession for switch user

Miroslav Grepl • 13 years ago

6ac264

Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

e935d2

Testing

Dan Walsh • 13 years ago

826311

- Add Dan's patch to remove 64 bit variants

Miroslav Grepl • 13 years ago

1b7c8f

Remove lib64 mapping and use subs. change subs name to file_context.subs_dist

Dan Walsh • 13 years ago

86354f

- Fix typo

Miroslav Grepl • 13 years ago

213048

- Add /var/run/lock /var/lock definition to file_contexts.subs

Miroslav Grepl • 13 years ago

397c1e

Update to latest versions and change policy version

Dan Walsh • 13 years ago

568f78

comment out the sepolgen line

Miroslav Grepl • 13 years ago

81c96b

comment out the sepolgen line

Miroslav Grepl • 13 years ago

aaa0ee

comment out the sepolgen line

Miroslav Grepl • 13 years ago

681292

- Fix label for /var/run/udev to udev_var_run_t

Miroslav Grepl • 13 years ago

fb7e97

- Add file_contexts.subs to handle /run and /run/lock

Miroslav Grepl • 13 years ago

a7705c

- Allow $1_sudo_t and $1_su_t open access to user terminals

Miroslav Grepl • 13 years ago

36d3f3

- Remove some unconfined domains

Miroslav Grepl • 13 years ago

47d5c1

Fix multiple specification for boot.log

Miroslav Grepl • 13 years ago

7c23cf

- devicekit leaks file descriptors to setfiles_t

Miroslav Grepl • 13 years ago

f5eb99

- Initial policy for matahari

Miroslav Grepl • 13 years ago

af4c0d

+- mozilla_plugin_tmp_t needs to be treated as user tmp files

Miroslav Grepl • 13 years ago

f7f5ca

- Add policykit fixes from Tim Waugh

Miroslav Grepl • 13 years ago

8d5463

Fix minimum policy

Miroslav Grepl • 13 years ago

9b89d8

Update to upstream

Miroslav Grepl • 13 years ago

672602

- gpg_t needs to talk to gnome-keyring

Miroslav Grepl • 13 years ago

781f34

- Allow usbhid-ups to read hardware state information

Miroslav Grepl • 13 years ago

c34a0c

- Update to upstream

Miroslav Grepl • 13 years ago

728828

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Dennis Gilmore • 13 years ago

60e174

- Update to ref policy

Dan Walsh • 13 years ago

d3861c

- Update to ref policy

Dan Walsh • 13 years ago

812781

- New labeling for postfmulti #675654

Miroslav Grepl • 13 years ago

f12703

- syslog_t needs syslog capability

Miroslav Grepl • 13 years ago

19cd66

- Add tcsd policy

Dan Walsh • 13 years ago

731e69

Merge branches 'master', 'master', 'master' and 'master' of ssh://pkgs.fedoraproject.org/selinux-policy

Dan Walsh • 13 years ago

0e793c

- ricci_modclusterd_t needs to bind to rpc ports 500-1023

Miroslav Grepl • 13 years ago

ebce35

stop relabeling /var/lib

Dan Walsh • 13 years ago

6b3837

- Fix xserver_dontaudit_read_xdm_pid

Miroslav Grepl • 13 years ago

73e5de

- Allow nagios plugin to read /proc/meminfo

Miroslav Grepl • 13 years ago

3c7073

- nslcd needs setsched and to read /usr/tmp

Miroslav Grepl • 13 years ago

0ababf

- NetworkManager wants to read consolekit_var_run_t

Miroslav Grepl • 13 years ago

408ea9

Fix release

Miroslav Grepl • 13 years ago

ac028b

- Add sepgsql_contexts file

Miroslav Grepl • 13 years ago

a34c78

- Update to upstream

Miroslav Grepl • 13 years ago

86b1f1

- Add oracle ports and allow apache to connect to them if the connect_db boole

Miroslav Grepl • 13 years ago

f16c69

- gnomeclock executes a shell

Miroslav Grepl • 13 years ago

116d73

- Add firewalld policy

Miroslav Grepl • 13 years ago

b18633

- Add initial policy for system-setup-keyboard which is now daemon

Miroslav Grepl • 13 years ago

b559c4

- Gnome apps list config_home_t

Dan Walsh • 13 years ago

b96903

- New labels for ghc http content

Dan Walsh • 13 years ago

ef836a

- Update to upstream

Miroslav Grepl • 13 years ago

d98054

Update to upstream

Miroslav Grepl • 13 years ago

d6c5f3

- Update selinux policy to handle new /usr/share/sandbox/start script

Dan Walsh • 13 years ago

f3f61e

- Update to upstream

Miroslav Grepl • 13 years ago

0ba6b2

- Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs

Miroslav Grepl • 13 years ago

1adb28

- Allow domains that transition to ping or traceroute, kill them

Dan Walsh • 13 years ago

25660b

- Turn on systemd policy

Miroslav Grepl • 13 years ago

3c0b9e

- Fixes for clamscan and boinc policy

Miroslav Grepl • 13 years ago

b04a85

- Push fixes to allow disabling of unlabeled_t packet access

Miroslav Grepl • 13 years ago

c2ad36

- Fixes for lvm to work with systemd

Miroslav Grepl • 13 years ago

7b62a8

- Fix the label for wicd log

Miroslav Grepl • 13 years ago

151160

- Fix gnome_manage_data interface

Miroslav Grepl • 13 years ago

a4f1f5

- Fix cron to run ranged when started by init

Miroslav Grepl • 13 years ago

094604

- Fix up handling of dnsmasq_t creating /var/run/libvirt/network

Dan Walsh • 14 years ago

5bcd7a

- fixes to allow /var/run and /var/lock as tmpfs

Miroslav Grepl • 14 years ago

954ef8

- Remove duplicate declaration

Miroslav Grepl • 14 years ago

b63541

- Update to upstream

Miroslav Grepl • 14 years ago

05f913

- Allow ddclient to fix file mode bits of ddclient conf file

Miroslav Grepl • 14 years ago

3daa6c

- Put back in lircd_etc_t so policy will install

Dan Walsh • 14 years ago

d6719f

- Turn on allow_postfix_local_write_mail_spool

Miroslav Grepl • 14 years ago

4eb45e

- Update to upstream

Miroslav Grepl • 14 years ago

582d2c

- Allow nagios plugins to read usr files

Miroslav Grepl • 14 years ago

cbb8d5

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

763342

- Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t

Dan Walsh • 14 years ago

519b05

- kdump leaks kdump_etc_t to ifconfig, add dontaudit

Dan Walsh • 14 years ago

50daca

- Turn on mediawiki policy

Miroslav Grepl • 14 years ago

9238df

- Fix init to be able to relabel wtmp, tmp files

Dan Walsh • 14 years ago

7297a3

- Allow groupd transition to fenced domain when executes fence_node

Miroslav Grepl • 14 years ago

5d168a

- Fix up corecommands.fc to match upstream

Dan Walsh • 14 years ago

ded1ef

- Add conflicts for dirsrv package

Dan Walsh • 14 years ago

fc9bf2

- Update to upstream

Dan Walsh • 14 years ago

3e0b78

- Update to upstream

Dan Walsh • 14 years ago

6e50b7

- Update to upstream

Dan Walsh • 14 years ago

06262c

- Fix sandbox to work on nfs homedirs

Dan Walsh • 14 years ago

c52856

-

Dan Walsh • 14 years ago

989659

- Allow NetworkManager to read openvpn_etc_t

Dan Walsh • 14 years ago

9754f4

- Dontaudit sandbox sending sigkill to all user domains

Dan Walsh • 14 years ago

7a2086

- Fixes for systemd to manage /var/run

Dan Walsh • 14 years ago

2bb618

- Allow chome to create netlink_route_socket

Dan Walsh • 14 years ago

bac270

- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.

Dan Walsh • 14 years ago

4da765

- Allow cobblerd to list cobler appache content

Dan Walsh • 14 years ago

c849c8

- Fixup for the latest version of upowed

Dan Walsh • 14 years ago

d33e64

- Update to upstream

Dan Walsh • 14 years ago

618ed7

- Update to upstream

Dan Walsh • 14 years ago

5a152b

-Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access

Dan Walsh • 14 years ago

f0a56e

Rebuild with latest code

Dan Walsh • 14 years ago

dd20c2

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f9346

- Allow smbd to use sys_admin

Dan Walsh • 14 years ago

6f256d

- Fix fusefs handling

Dan Walsh • 14 years ago

0daa8b

- Start adding support for use_fusefs_home_dirs

Dan Walsh • 14 years ago

b1cbbd

- Turn off default transition to mozilla_plugin and telepathy domains from unconfined user

Dan Walsh • 14 years ago

fbd9ca

- Dontaudit attempts by xdm_t to write to bin_t for kdm

Dan Walsh • 14 years ago

5ae8fb

- Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.

Dan Walsh • 14 years ago

7c487e

- Pull in cleanups from dgrift

Dan Walsh • 14 years ago

e25799

- Cleanup policy via dgrift

Dan Walsh • 14 years ago

42c814

- Fix up Xguest policy

Dan Walsh • 14 years ago

1d153e

- Add vnstat policy

Dan Walsh • 14 years ago

ea3b7b

- Update to upstream

Dan Walsh • 14 years ago

a24e6a

- Allow all domains that can use cgroups to search tmpfs_t directory

Dan Walsh • 14 years ago

ba8c31

- Update to upstream

Dan Walsh • 14 years ago

a0e8ef

- Add policy for ajaxterm

Dan Walsh • 14 years ago

30a7d1

- Handle /var/db/sudo

Dan Walsh • 14 years ago

6e2d7f

Allow iptables to read shorewall tmp files

Dan Walsh • 14 years ago

64d84c

- Merge upstream fix of mmap_zero

Dan Walsh • 14 years ago

482c9f

- Merge with upstream

Dan Walsh • 14 years ago

a7a236

- More access needed for devicekit

Dan Walsh • 14 years ago

6578cf

- Merge with upstream

Dan Walsh • 14 years ago

ba7726

- Allow seunshare to fowner

Dan Walsh • 14 years ago

370d04

- Allow cron to look at user_cron_spool links

Dan Walsh • 14 years ago

cc138e

- Update policy for mozilla_plugin_t

Dan Walsh • 14 years ago

632656

- Allow clamscan to read proc_t

Dan Walsh • 14 years ago

eee39f

- Allow clamscan_t execmem if clamd_use_jit set

Dan Walsh • 14 years ago

19988c

- label dead.letter as mail_home_t

Dan Walsh • 14 years ago

3798ee

* Tue Aug 10 2010 Dan Walsh <dwalsh@redhat.com> 3.8.8-12

Dan Walsh • 14 years ago

922cd6

- Merge in fixes from dgrift repository

Daniel J Walsh • 14 years ago

d4bb13

- Update boinc policy

Daniel J Walsh • 14 years ago

7f5d8f

- New paths for upstart

Daniel J Walsh • 14 years ago

a1ef70

- New permissions for syslog

Daniel J Walsh • 14 years ago

8d55a4

- Allow systemd to setsockcon on sockets to immitate other services

Daniel J Walsh • 14 years ago

f3fc10

- Remove debugfs label

Daniel J Walsh • 14 years ago

9f811e

- Update to latest policy

Daniel J Walsh • 14 years ago

d66bec

- Fix eclipse labeling from IBMSupportAssasstant packageing

Daniel J Walsh • 14 years ago

1df2fc

- Make boot with systemd in enforcing mode

Daniel J Walsh • 14 years ago

3f1005

- Update to upstream

Daniel J Walsh • 14 years ago

0f2ae0

- Add boolean to turn off port forwarding in sshd.

Daniel J Walsh • 14 years ago

9c1bcc

- Add support for ebtables

Miroslav Grepl • 14 years ago

be922a

-Update to upstream

Daniel J Walsh • 14 years ago

6c4221

-Update to upstream

Daniel J Walsh • 14 years ago

fa98e0

-Update to upstream

Daniel J Walsh • 14 years ago

5f371a

- Add Zarafa policy

Daniel J Walsh • 14 years ago

7c727a

- Cleanup of aiccu policy

Daniel J Walsh • 14 years ago

f2403c

- Lots of random fixes

Daniel J Walsh • 14 years ago

f651bb

- Update to upstream

Daniel J Walsh • 14 years ago

b39ccc

- Update to upstream

Daniel J Walsh • 14 years ago

632048

- Add xdm_var_run_t to xserver_stream_connect_xdm

Daniel J Walsh • 14 years ago

bca242

- Fix sshd creation of krb cc files for users to be user_tmp_t

Daniel J Walsh • 14 years ago

e51284

- Fixes for accountsdialog

Daniel J Walsh • 14 years ago

4abfc0

- Fix label on /var/lib/dokwiki

Daniel J Walsh • 14 years ago

65c6e4

- Update to upstream

Daniel J Walsh • 14 years ago

bc4089

- Update to upstream

Daniel J Walsh • 14 years ago

a72c31

- Merge with upstream

Daniel J Walsh • 14 years ago

add957

- Allow sandbox to work with MLS

Daniel J Walsh • 14 years ago

3c551b

- Make Chrome work with staff user

Daniel J Walsh • 14 years ago

43c7f5

- Add icecast policy

Daniel J Walsh • 14 years ago

487de6

- Add mcelog policy

Daniel J Walsh • 14 years ago

30c219

- Lots of fixes found in F12

Daniel J Walsh • 14 years ago

a62c64

- Fix rpm_dontaudit_leaks

Daniel J Walsh • 14 years ago

b2f6b0

- Add getsched to hald_t

Daniel J Walsh • 14 years ago

4d67b4

- Allow abrt_helper to getattr on all filesystems

Daniel J Walsh • 14 years ago

b0f365

- Add gstreamer_home_t for ~/.gstreamer

Daniel J Walsh • 14 years ago

b65afa

- Update to upstream

Daniel J Walsh • 14 years ago

faec5c

Update spec file to suck in the correct version of selinux-policy packages

Daniel J Walsh • 14 years ago

3b5466

- Turn on puppet policy

Daniel J Walsh • 14 years ago

89ad5e

- Move users file to selection by spec file.

Daniel J Walsh • 14 years ago

fc05ac

- Update to upstream

Daniel J Walsh • 14 years ago

352daf

- Remove most of the permissive domains from F12.

Daniel J Walsh • 14 years ago

6049e2

- Add cobbler policy from dgrift

Daniel J Walsh • 14 years ago

485ded

- add usbmon device

Daniel J Walsh • 14 years ago

1e86f3

- Lots of fixes found in F12, fixes from Tom London

Daniel J Walsh • 14 years ago

4478a9

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

08b890

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

daebd5

- Cleanups from dgrift

Daniel J Walsh • 14 years ago

e2f53d

- Add back xserver_manage_home_fonts

Daniel J Walsh • 14 years ago

550cc5

- Dontaudit sandbox trying to read nscd and sssd

Daniel J Walsh • 14 years ago

7d4058

- Update to upstream

Daniel J Walsh • 14 years ago

b46754

- Rename udisks-daemon back to devicekit_disk_t policy

Daniel J Walsh • 14 years ago

6ca563

- Fixes for abrt calls

Daniel J Walsh • 14 years ago

e54cc7

- Add tgtd policy

Daniel J Walsh • 14 years ago

9c90ba

- Add tgtd policy

Daniel J Walsh • 14 years ago

755e2d

- Update to upstream release

Daniel J Walsh • 14 years ago

9eef35

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

f2a1dc

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ee88b0

- Add asterisk policy back in

Daniel J Walsh • 15 years ago

ce8c76

- Update to upstream release 2.20091117

Daniel J Walsh • 15 years ago

55acbf

- Update to upstream

Daniel J Walsh • 15 years ago

5e44eb

- Allow vpnc request the kernel to load modules

Daniel J Walsh • 15 years ago

32594a

- Add plymouth policy

Daniel J Walsh • 15 years ago

aaf52f

- Allow cupsd_config to read user tmp

Daniel J Walsh • 15 years ago

d976a8

- Update rhcs policy

Daniel J Walsh • 15 years ago

8b10e3

- Allow users to exec restorecond

Daniel J Walsh • 15 years ago

85582d

- Allow sendmail to request kernel modules load

Daniel J Walsh • 15 years ago

f5a104

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

4c2f29

- Fix all kernel_request_load_module domains

Daniel J Walsh • 15 years ago

405a74

- Remove allow_exec* booleans for confined users. Only available for

Daniel J Walsh • 15 years ago

41f8e3

- More fixes for sandbox_web_t

Daniel J Walsh • 15 years ago

8323d5

- Allow sshd to create .ssh directory and content

Daniel J Walsh • 15 years ago

ab4629

- Fix request_module line to module_request

Daniel J Walsh • 15 years ago

d53d15

- Fix sandbox policy to allow it to run under firefox.

Daniel J Walsh • 15 years ago

1fb0a9

- Fixes for sandbox

Daniel J Walsh • 15 years ago

9de703

- Update to upstream

Daniel J Walsh • 15 years ago

69290f

- Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service

Daniel J Walsh • 15 years ago

23e708

- Fix devicekit_disk_t to getattr on all domains sockets and fifo_files

Daniel J Walsh • 15 years ago

6b7b0c

- Add wordpress/wp-content/uploads label

Daniel J Walsh • 15 years ago

e20e35

- Update to upstream

Daniel J Walsh • 15 years ago

ddc858

- More fixes

Daniel J Walsh • 15 years ago

ab8f80

- More fixes

Daniel J Walsh • 15 years ago

b8498d

- Lots of fixes for initrc and other unconfined domains

Daniel J Walsh • 15 years ago

123ae9

- Allow xserver to use netlink_kobject_uevent_socket

Daniel J Walsh • 15 years ago

72bc25

- Dontaudit setroubleshootfix looking at /root directory

Daniel J Walsh • 15 years ago

1a2981

- Update to upsteam

Daniel J Walsh • 15 years ago

65c3f9

- Allow gssd to send signals to users

Daniel J Walsh • 15 years ago

cb5670

- Update to upstream

Daniel J Walsh • 15 years ago

faf9cb

- Remove polkit_auth on upgrades

Daniel J Walsh • 15 years ago

38d427

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

42f9ef

- Add back in unconfined.pp and unconfineduser.pp

Daniel J Walsh • 15 years ago

07c04f

- Fixes for cdrecord, mdadm, and others

Daniel J Walsh • 15 years ago

89e354

- Add capability setting to dhcpc and gpm

Daniel J Walsh • 15 years ago

080ce6

- Allow cronjobs to read exim_spool_t

Daniel J Walsh • 15 years ago

8e64d7

- Add ABRT policy

Daniel J Walsh • 15 years ago

c5f5b5

- Fix system-config-services policy

Daniel J Walsh • 15 years ago

e3dd49

- Allow libvirt to change user componant of virt_domain

Daniel J Walsh • 15 years ago

fc8ff2

- Allow cupsd_config_t to be started by dbus

Daniel J Walsh • 15 years ago

40243d

- Add policycoreutils-python to pre install

Daniel J Walsh • 15 years ago

9c2702

- Make all unconfined_domains permissive so we can see what AVC's happen

Daniel J Walsh • 15 years ago

b2c5e7

- Add pt_chown policy

Daniel J Walsh • 15 years ago

7fe210

- Add kdump policy for Miroslav Grepl

Daniel J Walsh • 15 years ago

867473

- Turn on execstack on a temporary basis (#512845)

Bill Nottingham • 15 years ago

ac7bbf

- Allow nsplugin to connecto the session bus

Daniel J Walsh • 15 years ago

4de382

- Allow devicekit_disk to list inotify

Daniel J Walsh • 15 years ago

e21330

- Allow svirt images to create sock_file in svirt_var_run_t

Daniel J Walsh • 15 years ago

4816e9

- Allow exim to getattr on mountpoints

Daniel J Walsh • 15 years ago

467326

- Allow svirt_t to stream_connect to virtd_t

Daniel J Walsh • 15 years ago

947b43

- Allod hald_dccm_t to create sock_files in /tmp

Daniel J Walsh • 15 years ago

af4fa8

- More fixes from upstream

Daniel J Walsh • 15 years ago

abd153

- Fix polkit label

Daniel J Walsh • 15 years ago

c6e222

- Update to upstream

Daniel J Walsh • 15 years ago

375056

- Allow certmaster to override dac permissions

Daniel J Walsh • 15 years ago

916052

- Update to upstream

Daniel J Walsh • 15 years ago

df7055

- Fix context for VirtualBox

Daniel J Walsh • 15 years ago

8da024

- Update to upstream

Daniel J Walsh • 15 years ago

2360ff

- Fixes for xguest

Daniel J Walsh • 15 years ago

a88b48

- fix multiple directory ownership of mandirs

Daniel J Walsh • 15 years ago

819f41

fix duplicate directory ownership with filesystem, policycoreutils

Tom Callaway • 15 years ago

a85aef

- Update to upstream

Daniel J Walsh • 15 years ago

d9676a

- Add rules for rtkit-daemon

Daniel J Walsh • 15 years ago

bcc53d

- Update to upstream

Daniel J Walsh • 15 years ago

7b16d5

- Add rtkit policy

Daniel J Walsh • 15 years ago

221642

- Allow rpcd_t to stream connect to rpcbind

Daniel J Walsh • 15 years ago

d399fb

- Allow kpropd to create tmp files

Daniel J Walsh • 15 years ago

9850f4

- Fix last duplicate /var/log/rpmpkgs

Daniel J Walsh • 15 years ago

93dc66

- Update to upstream

Daniel J Walsh • 15 years ago

a9f095

- Update to upstream

Daniel J Walsh • 15 years ago

886631

- Update to upstream

Daniel J Walsh • 15 years ago

607109

- Fix mcs rules to include chr_file and blk_file

Daniel J Walsh • 15 years ago

9386d6

- Add label for udev-acl

Daniel J Walsh • 15 years ago

e3bf67

- Additional rules for consolekit/udev, privoxy and various other fixes

Daniel J Walsh • 15 years ago

f8df9e

- New version for upstream

Daniel J Walsh • 15 years ago

49883e

- New version for upstream

Daniel J Walsh • 15 years ago

d3ae97

- Allow NetworkManager to read inotifyfs

Daniel J Walsh • 15 years ago

6b8380

- Allow setroubleshoot to run mlocate

Daniel J Walsh • 15 years ago

aa7b9c

- Update to upstream

Daniel J Walsh • 15 years ago

819771

- New log file for vmware

Daniel J Walsh • 15 years ago

9ee63d

- Upgrade to upstream

Daniel J Walsh • 15 years ago

ef7416

- Allow fprintd to access sys_ptrace

Daniel J Walsh • 15 years ago

eead2a

- Add varnishd policy

Daniel J Walsh • 15 years ago

7b6c10

- Fixes for kpropd

Daniel J Walsh • 15 years ago

f72bd4

- Allow brctl to r/w tun_tap_device_t

Daniel J Walsh • 15 years ago

fcb441

- Add /usr/share/selinux/packages

Daniel J Walsh • 15 years ago

62cfaf

- Allow rpcd_t to send signals to kernel threads

Daniel J Walsh • 15 years ago

0f6b92

- Fix upgrade for F10 to F11

Daniel J Walsh • 15 years ago

992419

- Add policy for /var/lib/fprint

Daniel J Walsh • 15 years ago

a2098a

-Remove duplicate line

Daniel J Walsh • 15 years ago

8a0604

- Allow svirt to manage pci and other sysfs device data

Daniel J Walsh • 15 years ago

959ab9

- Fix package selection handling

Daniel J Walsh • 15 years ago

0e31a0

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

c32d79

- Fix /sbin/ip6tables-save context

Daniel J Walsh • 15 years ago

5dd89f

- Add shorewall policy

Daniel J Walsh • 15 years ago

37ebfc

- Additional rules for fprintd and sssd

Daniel J Walsh • 15 years ago

21b13f

- Allow nsplugin to unix_read unix_write sem for unconfined_java

Daniel J Walsh • 15 years ago

40d8f6

- Fix uml files to be owned by users

Daniel J Walsh • 15 years ago

b3ac4a

- Fix Upgrade path to install unconfineduser.pp when unocnfined package is

Daniel J Walsh • 15 years ago

e080bb

- Allow confined users to manace virt_content_t, since this is home dir

Daniel J Walsh • 15 years ago

b11dbb

- Fix labeling on /var/lib/misc/prelink*

Daniel J Walsh • 15 years ago

b0991a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

89c9c9

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

eaaf2a

- Allow initrc_t to delete dev_null

Daniel J Walsh • 15 years ago

dac838

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

db0daf

- Update to latest milter code from Paul Howarth

Daniel J Walsh • 15 years ago

cd0a39

- Additional perms for readahead

Daniel J Walsh • 15 years ago

5ce1c4

- Allow pulseaudio to acquire_svc on session bus

Daniel J Walsh • 15 years ago

4d5adb

- Allow sshd to read var_lib symlinks for freenx

Daniel J Walsh • 15 years ago

3c498a

- Allow nsplugin unix_read and write on users shm and sem

Daniel J Walsh • 15 years ago

a32a15

- Fixes for podsleuth

Daniel J Walsh • 15 years ago

d982e7

*** empty log message ***

Daniel J Walsh • 15 years ago

dc00fc

- Allow cupsd_t to create link files in print_spool_t

Daniel J Walsh • 15 years ago

6203f4

- Allow audioentroy to read etc files

Daniel J Walsh • 15 years ago

4a0aac

- Add fail2ban_var_lib_t

Daniel J Walsh • 15 years ago

685032

- Separate out the ucnonfined user from the unconfined.pp package

Daniel J Walsh • 15 years ago

d4af17

- Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t.

Daniel J Walsh • 15 years ago

90e419

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

25a476

- Dontaudit binds to ports < 1024 for named

Daniel J Walsh • 15 years ago

510c2a

- Allow podsleuth to use tmpfs files

Daniel J Walsh • 15 years ago

04b682

- Add customizable_types for svirt

Daniel J Walsh • 15 years ago

80beee

- Allow setroubelshoot exec* privs to prevent crash from bad libraries

Daniel J Walsh • 15 years ago

f49c57

- Dontaudit listing of /root directory for cron system jobs

Daniel J Walsh • 15 years ago

90ea5b

- Fix missing ld.so.cache label

Daniel J Walsh • 15 years ago

3434a9

- Add label for ~/.forward and /root/.forward

Daniel J Walsh • 15 years ago

c0158a

- Fixes for svirt

Daniel J Walsh • 15 years ago

6130d5

- Fixes to allow svirt read iso files in homedir

Daniel J Walsh • 15 years ago

9ca87f

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

ec9800

- Add xenner and wine fixes from mgrepl

Daniel J Walsh • 15 years ago

5dce3c

- Allow mdadm to read/write mls override

Daniel J Walsh • 15 years ago

bfc78b

- Change to svirt to only access svirt_image_t

Daniel J Walsh • 15 years ago

095146

- Fix libvirt policy

Daniel J Walsh • 15 years ago

d4b8dc

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

b12011

- Fixes for iscsid and sssd

Daniel J Walsh • 15 years ago

c240b6

- Add pulseaudio, sssd policy

Daniel J Walsh • 15 years ago

e72f55

- Add pulseaudio context

Daniel J Walsh • 15 years ago

0c34c6

- Upgrade to latest patches

Daniel J Walsh • 15 years ago

a67a1c

- Fixes for libvirt

Daniel J Walsh • 15 years ago

0a03cc

- Update to Latest upstream

Daniel J Walsh • 15 years ago

8c3a31

- Further confinement of qemu images via svirt

Daniel J Walsh • 15 years ago

496752

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Jesse Keating • 15 years ago

150ff5

- Allow NetworkManager to manage /etc/NetworkManager/system-connections

Daniel J Walsh • 15 years ago

52cbcb

- add virtual_image_context and virtual_domain_context files

Daniel J Walsh • 15 years ago

de6774

- Allow rpcd_t to send signal to mount_t

Daniel J Walsh • 15 years ago

8f6e43

- Fix sysnet/net_conf_t

Daniel J Walsh • 15 years ago

8c2b68

- Fix squidGuard labeling

Daniel J Walsh • 15 years ago

817947

- Re-add corenet_in_generic_if(unlabeled_t)

Daniel J Walsh • 15 years ago

2eec43

Daniel J Walsh • 15 years ago

e46e00

UPdate policycorutils version

Daniel J Walsh • 15 years ago

d43c25

- Add git web policy

Daniel J Walsh • 15 years ago

1d1c05

- Add setrans contains from upstream

Daniel J Walsh • 15 years ago

bd0db4

- Allow xdm to create user_tmp_t sockets for switch user to work

Daniel J Walsh • 15 years ago

4ed140

- Fix staff_t domain

Daniel J Walsh • 15 years ago

bc861e

- Grab remainder of network_peer_controls patch

Daniel J Walsh • 15 years ago

73fe81

- More fixes for devicekit

Daniel J Walsh • 15 years ago

659e96

- Upgrade to latest upstream

Daniel J Walsh • 15 years ago

c957c3

- Add boolean to disallow unconfined_t login

Daniel J Walsh • 15 years ago

574cab

- Add back transition from xguest to mozilla

Daniel J Walsh • 15 years ago

0554a1

- Add virt_content_ro_t and labeling for isos directory

Daniel J Walsh • 15 years ago

ab3e55

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

2fbeb7

- Fixes for wicd daemon

Daniel J Walsh • 15 years ago

f89910

- More mls/rpm fixes

Daniel J Walsh • 15 years ago

48adbe

- Add policy to make dbus/nm-applet work

Daniel J Walsh • 15 years ago

14c9b9

- Remove polgen-ifgen from post and add trigger to policycoreutils-python

Daniel J Walsh • 15 years ago

40dd24

- Add wm policy

Daniel J Walsh • 15 years ago

6f8856

- Add wm policy

Daniel J Walsh • 15 years ago

6cf32a

- Add wm policy

Daniel J Walsh • 15 years ago

1b94a1

- Fixed for DeviceKit

Daniel J Walsh • 15 years ago

2a4bda

- Add devicekit policy

Daniel J Walsh • 15 years ago

acc137

- Update to upstream

Daniel J Walsh • 15 years ago

1d72fb

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

7b146d

- Define openoffice as an x_domain

Daniel J Walsh • 15 years ago

eacea1

- Fixes for reading xserver_tmp_t

Daniel J Walsh • 15 years ago

339bf3

- Allow cups_pdf_t write to nfs_t

Daniel J Walsh • 15 years ago

87fb15

- Remove audio_entropy policy

Daniel J Walsh • 15 years ago

2ed2ff

- Update to upstream

Daniel J Walsh • 15 years ago

292c49

- Allow hal_acl_t to getattr/setattr fixed_disk

Daniel J Walsh • 15 years ago

5df262

- Change userdom_read_all_users_state to include reading symbolic links in

Daniel J Walsh • 15 years ago

323639

- Fix dbus reading /proc information

Daniel J Walsh • 15 years ago

cf8fd9

- Add missing alias for home directory content

Daniel J Walsh • 15 years ago

bae2e9

- Fixes for IBM java location

Daniel J Walsh • 15 years ago

33c7ea

- Allow unconfined_r unconfined_java_t

Daniel J Walsh • 15 years ago

dcd0c9

- Add cron_role back to user domains

Daniel J Walsh • 15 years ago

fd2b62

- Fix sudo setting of user keys

Daniel J Walsh • 15 years ago

9a43d2

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

163db1

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

2ae161

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

c136db

- Allow iptables to talk to terminals

Daniel J Walsh • 15 years ago

01ce3d

- Cleanup policy

Daniel J Walsh • 15 years ago

bcb192

- Cleanup policy

Daniel J Walsh • 15 years ago

739db2

Rebuild for Python 2.6

Ignacio Vazquez-Abrams • 16 years ago

23d684

- Fix labeling on /var/spool/rsyslog

Daniel J Walsh • 16 years ago

02d888

- Allow postgresl to bind to udp nodes

Daniel J Walsh • 16 years ago

0d6e62

- Allow lvm to dbus chat with hal

Daniel J Walsh • 16 years ago

2a650e

- Fix cyphesis file context

Daniel J Walsh • 16 years ago

074b12

- Allow hal/pm-utils to look at /var/run/video.rom

Daniel J Walsh • 16 years ago

6a09cf

- Additional fixes for cyphesis

Daniel J Walsh • 16 years ago

411a42

- Allow dhcpc to restart ypbind

Daniel J Walsh • 16 years ago

333ebd

- Fix confined users

Daniel J Walsh • 16 years ago

1bc89b

- Fix confined users

Daniel J Walsh • 16 years ago

236205

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

812930

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

d8e5d0

- Allow openoffice execstack/execmem privs

Daniel J Walsh • 16 years ago

a3e038

- Allow mozilla to run with unconfined_execmem_t

Daniel J Walsh • 16 years ago

4fa9db

- Dontaudit domains trying to write to .xsession-errors

Daniel J Walsh • 16 years ago

798a73

- Allow nsplugin to look at autofs_t directory

Daniel J Walsh • 16 years ago

328123

- Allow kerneloops to create tmp files

Daniel J Walsh • 16 years ago

de61cc

- More alias for fastcgi

Daniel J Walsh • 16 years ago

ae68d9

- Remove mod_fcgid-selinux package

Daniel J Walsh • 16 years ago

236d3c

- Fix dovecot access

Daniel J Walsh • 16 years ago

b9e15d

- Policy cleanup

Daniel J Walsh • 16 years ago

49f48f

- Remove Multiple spec

Daniel J Walsh • 16 years ago

b4cab5

- Remove Multiple spec

Daniel J Walsh • 16 years ago

611568

- Fix labeling of libGL

Daniel J Walsh • 16 years ago

4b4392

- Update to upstream

Daniel J Walsh • 16 years ago

412570

- Update to upstream

Daniel J Walsh • 16 years ago

b6cc6a

- Update to upstream policy

Daniel J Walsh • 16 years ago

675bba

- Fixes for confined xwindows and xdm_t

Daniel J Walsh • 16 years ago

1062bd

- Allow confined users and xdm to exec wm

Daniel J Walsh • 16 years ago

86369e

- Allow NetworkManager to transition to avahi and iptables

Daniel J Walsh • 16 years ago

f1a827

- Allow domains to search other domains keys, coverup kernel bug

Daniel J Walsh • 16 years ago

b42a1e

- Fix labeling for oracle

Daniel J Walsh • 16 years ago

094ef3

- Allow nsplugin to comminicate with xdm_tmp_t sock_file

Daniel J Walsh • 16 years ago

2ede4e

- Change all user tmpfs_t files to be labeled user_tmpfs_t

Daniel J Walsh • 16 years ago

998737

- Upgrade to upstream

Daniel J Walsh • 16 years ago

b709ff

- Allow confined users to login with dbus

Daniel J Walsh • 16 years ago

ed32c6

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

a80e7a

- Fix transition to nsplugin

Daniel J Walsh • 16 years ago

d86efe

- Add file context for /dev/mspblk.*

Daniel J Walsh • 16 years ago

f0375d

- Fix transition to nsplugin '

Daniel J Walsh • 16 years ago

f77dd2

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

11ef24

- Fix labeling on new pm*log

Daniel J Walsh • 16 years ago

530772

- Merge upstream changes

Daniel J Walsh • 16 years ago

16c3ff

- Remove gamin policy

Daniel J Walsh • 16 years ago

aca77a

- Add tinyxs-max file system support

Daniel J Walsh • 16 years ago

d0d307

- Update to upstream

Daniel J Walsh • 16 years ago

0a219f

- Allow audit dispatcher to kill his children

Daniel J Walsh • 16 years ago

3ad355

- Update to upstream

Daniel J Walsh • 16 years ago

cd8bee

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

7638e7

- Allow ifconfig_t to read dhcpc_state_t

Daniel J Walsh • 16 years ago

eb7e6d

- Update to upstream

Daniel J Walsh • 16 years ago

57ae10

- Update to upstream

Daniel J Walsh • 16 years ago

1a0f64

- Update to upstream

Daniel J Walsh • 16 years ago

b5d09d

- Allow system-config-selinux to work with policykit

Daniel J Walsh • 16 years ago

0f1bd6

- Fix novel labeling

Daniel J Walsh • 16 years ago

174291

- Fix novel labeling

Daniel J Walsh • 16 years ago

170fa2

- Consolodate pyzor,spamassassin, razor into one security domain

Daniel J Walsh • 16 years ago

07bd5c

- Fixes for logrotate, alsa

Daniel J Walsh • 16 years ago

8f2532

- Eliminate vbetool duplicate entry

Daniel J Walsh • 16 years ago

f12d5b

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

0b0533

- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t

Daniel J Walsh • 16 years ago

feefee

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

078ad0

- Update to latest refpolicy

Daniel J Walsh • 16 years ago

6ed853

- Add inotify support to nscd

Daniel J Walsh • 16 years ago

df6220

Add nscd inotify fix

Daniel J Walsh • 16 years ago

6db69f

- Allow unconfined_t to setfcap

Daniel J Walsh • 16 years ago

43f9fc

- Allow amanda to read tape

Daniel J Walsh • 16 years ago

273a44

- Allow ypbind apps to net_bind_service

Daniel J Walsh • 16 years ago

258b00

- Allow all system domains and application domains to append to any log

Daniel J Walsh • 16 years ago

75edec

- Allow gdm to read rpm database

Daniel J Walsh • 16 years ago

cd60b6

- Allow vpnc to run ifconfig

Daniel J Walsh • 16 years ago

c18681

- Allow confined users to use postgres

Daniel J Walsh • 16 years ago

f86ed5

- Apply unconfined_execmem_exec_t to haskell programs

Daniel J Walsh • 16 years ago

547aa2

- Fix prelude file context

Daniel J Walsh • 16 years ago

6959e0

- allow hplip to talk dbus

Daniel J Walsh • 16 years ago

fe0d46

- Prevent applications from reading x_device

Daniel J Walsh • 16 years ago

f4ff8b

- Add /var/lib/selinux context

Daniel J Walsh • 16 years ago

5608a9

- Update to upstream

Daniel J Walsh • 16 years ago

af0f73

- Update to upstream

Daniel J Walsh • 16 years ago

c5c253

- Add livecd policy

Daniel J Walsh • 16 years ago

f513c7

- Add livecd policy

Daniel J Walsh • 16 years ago

15f71c

- Dontaudit search of admin_home for init_system_domain

Daniel J Walsh • 16 years ago

91ec07

- Begin XAce integration

Daniel J Walsh • 16 years ago

80e0b8

- Merge Upstream

Daniel J Walsh • 16 years ago

081b6a

- Merge Upstream

Daniel J Walsh • 16 years ago

2e33f7

Update for rawhide

Daniel J Walsh • 16 years ago

4b7f03

- Allow amanada to create data files

Daniel J Walsh • 16 years ago

993c27

- Remove dmesg boolean

Daniel J Walsh • 16 years ago

6c25b4

- Change unconfined_t to transition to unconfined_mono_t when running mono

Daniel J Walsh • 16 years ago

86881d

- Remove old booleans from targeted-booleans.conf file

Daniel J Walsh • 16 years ago

2d8ff5

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

b4e933

- Don't run crontab from unconfined_t

Daniel J Walsh • 16 years ago

ef5e60

- Change etc files to config files to allow users to read them

Daniel J Walsh • 16 years ago

4b1d56

- dontaudit mrtg reading /proc

Daniel J Walsh • 16 years ago

a6a82a

Daniel J Walsh • 16 years ago

5896ba

Daniel J Walsh • 16 years ago

bb36d7

- Allow dhcpd to read kernel network state

Daniel J Walsh • 16 years ago

06686c

- Label /var/run/gdm correctly

Daniel J Walsh • 16 years ago

41625a

- Allow transition from initrc_t to getty_t

Daniel J Walsh • 16 years ago

254e3c

- Allow passwd to communicate with user sockets to change gnome-keyring

Daniel J Walsh • 16 years ago

5a576e

- Fix initial install

Daniel J Walsh • 16 years ago

7f851a

-

Daniel J Walsh • 16 years ago

c3c4a5

- Allow radvd to use fifo_file

Daniel J Walsh • 16 years ago

27943d

- Allow nsplugin to read /etc/mozpluggerrc, user_fonts

Daniel J Walsh • 16 years ago

c66f2b

- Allow initrc_t to dbus chat with consolekit.

Daniel J Walsh • 16 years ago

294ea7

- Additional access for nsplugin

Daniel J Walsh • 16 years ago

e54cb2

- Allow mount to mkdir on tmpfs

Daniel J Walsh • 16 years ago

f70afc

- Fix file context for MATLAB

Daniel J Walsh • 16 years ago

bf3d39

- Allow stunnel to transition to inetd children domains

Daniel J Walsh • 16 years ago

5ea3f1

Daniel J Walsh • 16 years ago

94b7be

- Fixes for qemu/virtd

Daniel J Walsh • 16 years ago

ba9e5e

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

97081d

- Fix bug in mozilla policy to allow xguest transition

Daniel J Walsh • 16 years ago

a6e128

- Allow nsplugin to run acroread

Daniel J Walsh • 16 years ago

d593d2

- Add cups_pdf policy

Daniel J Walsh • 16 years ago

987b10

- prewika needs to contact mysql

Daniel J Walsh • 16 years ago

7f811b

- Change init_t to an unconfined_domain

Daniel J Walsh • 16 years ago

ceda8f

- Allow init to transition to initrc_t on shell exec.

Daniel J Walsh • 16 years ago

0879f4

fixes for init, rhgb. also, fix the build

Bill Nottingham • 16 years ago

110bce

- Additional changes for MLS policy

Daniel J Walsh • 16 years ago

2041ac

- Fix initrc_context generation for MLS

Daniel J Walsh • 16 years ago

1bf67d

- Fixes for libvirt

Daniel J Walsh • 16 years ago

dc57e6

- Allow bitlebee to read locale_t

Daniel J Walsh • 16 years ago

594790

- More xselinux rules

Daniel J Walsh • 16 years ago

d8c160

- Change httpd_$1_script_r*_t to httpd_$1_content_r*_t

Daniel J Walsh • 16 years ago

9a0f35

-

Daniel J Walsh • 16 years ago

338714

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

b7229a

- Prepare policy for beta release

Daniel J Walsh • 16 years ago

40ce26

- Allow nsplugin_config execstack/execmem

Daniel J Walsh • 16 years ago

533c75

- Add cyphesis policy

Daniel J Walsh • 16 years ago

c092cc

Daniel J Walsh • 16 years ago

063999

-

Daniel J Walsh • 16 years ago

27b2b0

- Update to upstream fixes

Daniel J Walsh • 16 years ago

f75033

- Add xace support

Daniel J Walsh • 16 years ago

5ca2ff

- Add fusectl file system

Daniel J Walsh • 16 years ago

8bd036

- Fixes from yum-cron

Daniel J Walsh • 16 years ago

541ba8

Daniel J Walsh • 16 years ago

e5aceb

- Fix userdom_list_user_files

Daniel J Walsh • 16 years ago

306393

- Merge with upstream

Daniel J Walsh • 16 years ago

eb3e9f

- Allow udev to send audit messages

Daniel J Walsh • 16 years ago

7e1e7b

- Add additional login users interfaces

Daniel J Walsh • 16 years ago

9870c6

- More fixes for polkit

Daniel J Walsh • 16 years ago

49295b

- More fixes for polkit

Daniel J Walsh • 16 years ago

ebe074

- Update to upstream

Daniel J Walsh • 16 years ago

57ac1c

- Fixes for staff_t

Daniel J Walsh • 16 years ago

4637b6

- Add policy for kerneloops

Daniel J Walsh • 16 years ago

b53db5

- Fixes for libvirt

Daniel J Walsh • 16 years ago

881d64

- Fixes for nsplugin

Daniel J Walsh • 16 years ago

60c693

- Additional ports for vnc and allow qemu and libvirt to search all

Daniel J Walsh • 16 years ago

11ac4b

- Update to upstream

Daniel J Walsh • 16 years ago

b19d47

- Allow fail2ban to create a socket in /var/run

Daniel J Walsh • 16 years ago

e1060e

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

59d6fb

- Allow allow_httpd_mod_auth_pam to work

Daniel J Walsh • 16 years ago

7c124f

- Add audisp policy and prelude

Daniel J Walsh • 16 years ago

f18a88

- Allow all user roles to executae samba net command

Daniel J Walsh • 16 years ago

0f7011

- Allow usertypes to read/write noxattr file systems

Daniel J Walsh • 16 years ago

7c2be3

- Fix nsplugin to allow flashplugin to work in enforcing mode

Daniel J Walsh • 16 years ago

7c7d59

- Allow pam_selinux_permit to kill all processes

Daniel J Walsh • 16 years ago

093987

- Allow ptrace or user processes by users of same type

Daniel J Walsh • 16 years ago

cc5bb8

- Allow nsplugin sys_nice, getsched, setsched

Daniel J Walsh • 16 years ago

ef19b7

- Allow login programs to talk dbus to oddjob

Daniel J Walsh • 16 years ago

b3c8a0

- Add procmail_log support

Daniel J Walsh • 16 years ago

98f84c

- Allow setroubleshoot to read policy config and send audit messages

Daniel J Walsh • 16 years ago

e26fef

- Allow users to execute all files in homedir, if boolean set

Daniel J Walsh • 16 years ago

8a40d6

- Fixes for xguest to run java plugin

Daniel J Walsh • 16 years ago

27c7d8

- dontaudit pam_t and dbusd writing to user_home_t

Daniel J Walsh • 16 years ago

4be3ba

- Update gpg to allow reading of inotify

Daniel J Walsh • 16 years ago

5baf53

- Change user and staff roles to work correctly with varied perms

Daniel J Walsh • 16 years ago

a502c5

- Fix munin log,

Daniel J Walsh • 16 years ago

c64ec2

- Fix role transition from unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

88ae3f

- Fix role transition fro unconfined_r to system_r when running rpm

Daniel J Walsh • 16 years ago

5d1334

- Let all uncofined domains communicate with dbus unconfined

Daniel J Walsh • 16 years ago

0ec33d

- Run rpm in system_r

Daniel J Walsh • 16 years ago

673eaa

- Zero out customizable types

Daniel J Walsh • 16 years ago

5615fe

- Fix definiton of admin_home_t

Daniel J Walsh • 16 years ago

9a2cf8

- Fix munin file context

Daniel J Walsh • 16 years ago

2f257c

- Allow cron to run unconfined apps

Daniel J Walsh • 16 years ago

91c2fa

- Modify default login to unconfined_u

Daniel J Walsh • 16 years ago

99d367

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

4d59c2

- Dontaudit dbus user client search of /root

Daniel J Walsh • 16 years ago

592868

- Update to upstream

Daniel J Walsh • 16 years ago

76e340

- Fixes for polkit

Daniel J Walsh • 16 years ago

4c6f2d

- Add polkit policy

Daniel J Walsh • 16 years ago

7dfe3e

- Update to upstream

Daniel J Walsh • 16 years ago

a1341a

- Update to upstream

Daniel J Walsh • 16 years ago

02654b

- Update to upstreamddddddddddddd

Daniel J Walsh • 16 years ago

d195fc

- Allow rpm_script to transition to unconfined_execmem_t

Daniel J Walsh • 16 years ago

320f3e

Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2.1-1

Daniel J Walsh • 16 years ago

3b47cb

- Remove user based home directory separation

Daniel J Walsh • 17 years ago

9186dc

- Remove user specific crond_t

Daniel J Walsh • 17 years ago

3a54e4

- Merge with upstream

Daniel J Walsh • 17 years ago

0fffba

- Update to upstream

Daniel J Walsh • 17 years ago

ddf4ec

- Update to upstream

Daniel J Walsh • 17 years ago

7330e8

- Update to upstream

Daniel J Walsh • 17 years ago

364044

- Update to upstream

Daniel J Walsh • 17 years ago

fa0d1c

- Allow XServer to read /proc/self/cmdline

Daniel J Walsh • 17 years ago

d0649e

- Fixes for hald_mac

Daniel J Walsh • 17 years ago

30dfdc

- Fix dnsmasq

Daniel J Walsh • 17 years ago

3375c3

- Allow rshd to connect to ports > 1023

Daniel J Walsh • 17 years ago

6455c9

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

953fd1

- Fix vpn to bind to port 4500

Daniel J Walsh • 17 years ago

ccf8a7

- Allow rpm to chat with networkmanager

Daniel J Walsh • 17 years ago

b4ed6d

- Pass the UNK_PERMS param to makefile

Daniel J Walsh • 17 years ago

9185bf

- Make alsa work

Daniel J Walsh • 17 years ago

c27b2b

- Fixes for consolekit and startx sessions

Daniel J Walsh • 17 years ago

28021c

- Dontaudit consoletype talking to unconfined_t

Daniel J Walsh • 17 years ago

7a91e8

- Remove homedir_template

Daniel J Walsh • 17 years ago

8fd9df

- Remove homedir_template

Daniel J Walsh • 17 years ago

922f64

- Check asound.state

Daniel J Walsh • 17 years ago

24ccb8

- Fix exim policy

Daniel J Walsh • 17 years ago

492612

- Allow tmpreadper to read man_t

Daniel J Walsh • 17 years ago

1ffa68

- Allow xdm to talk to input device (fingerprint reader)

Daniel J Walsh • 17 years ago

7c1c17

- Allow login programs to set ioctl on /proc

Daniel J Walsh • 17 years ago

d770c5

- Allow nsswitch apps to read samba_var_t

Daniel J Walsh • 17 years ago

fb11ad

- Fix maxima

Daniel J Walsh • 17 years ago

f5018f

- Eliminate rpm_t:fifo_file avcs

Daniel J Walsh • 17 years ago

d83ea8

- Fix service start stop terminal avc's

Daniel J Walsh • 17 years ago

6c319e

- Allow also to search var_lib

Daniel J Walsh • 17 years ago

ec4fb1

- Allow cupsd_config_t to read/write usb_device_t

Daniel J Walsh • 17 years ago

347ff1

- Fix java and mono to run in xguest account

Daniel J Walsh • 17 years ago

07e28d

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

a9d4b8

- Fix to add xguest account when inititial install

Daniel J Walsh • 17 years ago

c67a12

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

d90a3d

- Allow xserver to search devpts_t

Daniel J Walsh • 17 years ago

21c534

- Remove hplip_etc_t change back to etc_t.

Daniel J Walsh • 17 years ago

7ff410

- Allow cron to search nfs and samba homedirs

Daniel J Walsh • 17 years ago

1a3fe3

- Allow NetworkManager to dbus chat with yum-updated

Daniel J Walsh • 17 years ago

babb36

- Allow xfs to bind to port 7100

Daniel J Walsh • 17 years ago

bf7f97

- Allow newalias/sendmail dac_override

Daniel J Walsh • 17 years ago

25d586

- Turn off direct transition

Daniel J Walsh • 17 years ago

4eaf5c

- Allow wine to run in system role

Daniel J Walsh • 17 years ago

c7e443

- Fix java labeling

Daniel J Walsh • 17 years ago

37d6a1

- Define user_home_type as home_type

Daniel J Walsh • 17 years ago

07b868

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

601f0f

- Allow sendmail to create etc_aliases_t

Daniel J Walsh • 17 years ago

bea548

- Allow login programs to read symlinks on homedirs

Daniel J Walsh • 17 years ago

bc85a6

- Update an readd modules

Daniel J Walsh • 17 years ago

e8b599

- Cleanup spec file

Daniel J Walsh • 17 years ago

7f9951

- Cleanup spec file

Daniel J Walsh • 17 years ago

d9f447

- Cleanup spec file

Daniel J Walsh • 17 years ago

b865b8

- Cleanup spec file

Daniel J Walsh • 17 years ago

53f819

- Cleanup spec file

Daniel J Walsh • 17 years ago

3012ab

- Cleanup spec file

Daniel J Walsh • 17 years ago

d83af2

- Allow xserver to be started by unconfined process and talk to tty

Daniel J Walsh • 17 years ago

3b13a8

- Upgrade to upstream to grab postgressql changes

Daniel J Walsh • 17 years ago

95bbe5

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

77a220

- Add setransd for mls policy

Daniel J Walsh • 17 years ago

c77aca

- Add ldconfig_cache_t

Daniel J Walsh • 17 years ago

4f23c4

- Allow sshd to write to proc_t for afs login

Daniel J Walsh • 17 years ago

b4ae7d

- Allow xserver access to urand

Daniel J Walsh • 17 years ago

f01207

- allow dovecot to search mountpoints

Daniel J Walsh • 17 years ago

7f6883

- Fix Makefile for building policy modules

Daniel J Walsh • 17 years ago

0354c2

- Fix dhcpc startup of service

Daniel J Walsh • 17 years ago

60a9ef

- Fix dbus chat to not happen for xguest and guest users

Daniel J Walsh • 17 years ago

bf3320

- Fix nagios cgi

Daniel J Walsh • 17 years ago

d44a39

- Fixes for ldconfig

Daniel J Walsh • 17 years ago

1a12c2

- Update from upstream

Daniel J Walsh • 17 years ago

d8c8b2

- Update from upstream

Daniel J Walsh • 17 years ago

f97782

- Update from upstream

Daniel J Walsh • 17 years ago

25a754

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

4ce75b

- Fix new usb devices and dmfm

Daniel J Walsh • 17 years ago

8239a9

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

6d2e7d

- Eliminate mount_ntfs_t policy, merge into mount_t

Daniel J Walsh • 17 years ago

47a35f

- Allow xserver to write to ramfs mounted by rhgb

Daniel J Walsh • 17 years ago

07351e

- Add context for dbus machine id

Daniel J Walsh • 17 years ago

9c0386

- Update with latest changes from upstream

Daniel J Walsh • 17 years ago

2fac1d

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

24acab

- Fix prelink to handle execmod

Daniel J Walsh • 17 years ago

0f8f54

- Add ntpd_key_t to handle secret data

Daniel J Walsh • 17 years ago

e0ae20

- Add anon_inodefs

Daniel J Walsh • 17 years ago

2ced40

- Allow cups to use generic usb

Daniel J Walsh • 17 years ago

779d23

- Add proper contexts for rsyslogd

Daniel J Walsh • 17 years ago

908512

- Allow execution of gconf

Daniel J Walsh • 17 years ago

297dd1

- Fix moilscanner update problem

Daniel J Walsh • 17 years ago

1d0319

- Begin adding policy to separate setsebool from semanage

Daniel J Walsh • 17 years ago

7e3506

- Fix xserver.if definition to not break sepolgen.if

Daniel J Walsh • 17 years ago

16d953

- Add new devices

Daniel J Walsh • 17 years ago

2796de

- Add brctl policy

Daniel J Walsh • 17 years ago

154d82

- Fix root login to include system_r

Daniel J Walsh • 17 years ago

501a17

- Allow prelink to read kernel sysctls

Daniel J Walsh • 17 years ago

35e7f7

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

af6777

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b267b6

- Default to user_u:system_r:unconfined_t

Daniel J Walsh • 17 years ago

b529ed

- fix squid

Daniel J Walsh • 17 years ago

2fdb5f

- Fix syslog declaration

Daniel J Walsh • 17 years ago

b786a2

- Allow avahi to access inotify

Daniel J Walsh • 17 years ago

7f4421

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

269acb

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

a4ec9b

- Remove ifdef strict policy from upstream

Daniel J Walsh • 17 years ago

56187c

- Fix for amands

Daniel J Walsh • 17 years ago

bdb830

Daniel J Walsh • 17 years ago

346d2d

- allow alsactl to read kernel state

Daniel J Walsh • 17 years ago

9ffb88

- More fixes for alsactl

Daniel J Walsh • 17 years ago

fc3577

- More fixes for alsactl

Daniel J Walsh • 17 years ago

88c846

- Fixes for suspend resume.

Daniel J Walsh • 17 years ago

cf806e

- Allow unconfined_t to transition to NetworkManager_t

Daniel J Walsh • 17 years ago

7c3dcb

- Update to latest from upstream

Daniel J Walsh • 17 years ago

810e69

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8cd496

- Update to latest from upstream

Daniel J Walsh • 17 years ago

057603

- Update to latest from upstream

Daniel J Walsh • 17 years ago

daa6ab

- Update to latest from upstream

Daniel J Walsh • 17 years ago

a615d5

- Update to latest from upstream

Daniel J Walsh • 17 years ago

8fea83

-

Daniel J Walsh • 17 years ago

6821c3

- Fixes for unix_update

Daniel J Walsh • 17 years ago

77d25e

- Upstream bumped the version

Daniel J Walsh • 17 years ago

8396b2

- Allow consolekit to syslog

Daniel J Walsh • 17 years ago

61947f

- Allow iptbales to read etc_runtime_t

Daniel J Walsh • 17 years ago

2db3c1

- MLS Fixes

Daniel J Walsh • 17 years ago

466176

- MLS Fixes

Daniel J Walsh • 17 years ago

53b222

- Fix path of /etc/lvm/cache directory

Daniel J Walsh • 17 years ago

883a02

- Fixes for alsactl and pppd_t

Daniel J Walsh • 17 years ago

ab59be

- Fixes for consolekit

Daniel J Walsh • 17 years ago

32b18f

- Allow insmod_t to mount kvmfs_t filesystems

Daniel J Walsh • 17 years ago

7671ce

- Rwho policy

Daniel J Walsh • 17 years ago

9fc00b

- fixes for fusefs

Daniel J Walsh • 17 years ago

e6f3cf

- Fix samba_net to allow it to view samba_var_t

Daniel J Walsh • 17 years ago

8c912a

- Update to upstream

Daniel J Walsh • 17 years ago

a3b1a2

- Fix Sonypic backlight

Daniel J Walsh • 17 years ago

5d5cae

- Fixes for pyzor, cyrus, consoletype on everything installs

Daniel J Walsh • 17 years ago

7f1bd8

- Fix hald_acl_t to be able to getattr/setattr on usb devices

Daniel J Walsh • 17 years ago

0b3279

- Allow bluetooth to read inotifyfs

Daniel J Walsh • 17 years ago

21029b

- Fixes for samba domain controller.

Daniel J Walsh • 17 years ago

e6b9e2

- Fix interface call

Daniel J Walsh • 17 years ago

f9f9dd

- Allow syslog-ng to read /var

Daniel J Walsh • 17 years ago

89d3de

- Update to upstream

Daniel J Walsh • 17 years ago

2528fa

- Update to upstream

Daniel J Walsh • 17 years ago

8e5289

- Update to upstream

Daniel J Walsh • 17 years ago

ce7f30

- Allow samba to run groupadd

Daniel J Walsh • 17 years ago

f040ac

- Update to upstream

Daniel J Walsh • 17 years ago

f63473

- Fix labeling on udev.tbl dirs

Daniel J Walsh • 17 years ago

281f5f

- Fixes for logwatch

Daniel J Walsh • 17 years ago

552645

- Add fusermount and mount_ntfs policy

Daniel J Walsh • 17 years ago

593fb1

- Update to upstream

Daniel J Walsh • 17 years ago

9d59ec

Daniel J Walsh • 17 years ago

d3aaba

- Fixes for samba_var_t

Daniel J Walsh • 17 years ago

741e81

- Remove disable_trans booleans

Daniel J Walsh • 17 years ago

db4f0e

- Remove enable_audit booleans

Daniel J Walsh • 17 years ago

2823e2

- Fix prelink to be able to manage usr dirs.

Daniel J Walsh • 17 years ago

2f82ee

- Allow insmod to launch init scripts

Daniel J Walsh • 17 years ago

9468a6

- Remove setsebool policy

Daniel J Walsh • 17 years ago

271752

- Fix handling of unlabled_t packets

Daniel J Walsh • 17 years ago

bdb7f9

- More of my patches from upstream

Daniel J Walsh • 17 years ago

2a9b64

- Update to latest from upstream

Daniel J Walsh • 17 years ago

1fed4c

- Update to latest from upstream

Daniel J Walsh • 17 years ago

9a8202

- Update to remove security_t:filesystem getattr problems

Daniel J Walsh • 17 years ago

5ad70c

- Policy for consolekit

Daniel J Walsh • 17 years ago

13893e

Daniel J Walsh • 17 years ago

af8af9

- Revert Nemiver change

Daniel J Walsh • 17 years ago

cc1be2

- Add sepolgen support

Daniel J Walsh • 17 years ago

b08611

- Add sepolgen support

Daniel J Walsh • 17 years ago

b7da3b

- Add sepolgen support

Daniel J Walsh • 17 years ago

2fa5bb

THu Feb 15 2007 Dan Walsh <dwalsh@redhat.com> 2.5.3-3

Daniel J Walsh • 17 years ago

e10e57

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

07dcdf

- Fix file context for nemiver

Daniel J Walsh • 17 years ago

1a2473

-

Daniel J Walsh • 17 years ago

df0bef

-

Daniel J Walsh • 17 years ago

9aff35

- Allow mozilla, evolution and thunderbird to read dev_random. Resolves:

Daniel J Walsh • 17 years ago

39b6ce

- Fix ssh_agent to be marked as an executable

Daniel J Walsh • 17 years ago

33501c

- Fix spamassisin so crond can update spam files

Daniel J Walsh • 17 years ago

de0b36

- Remove some targeted diffs in file context file

Daniel J Walsh • 17 years ago

3902fd

- Fix squid cachemgr labeling

Daniel J Walsh • 17 years ago

edd045

- Add ability to generate webadm_t policy

Daniel J Walsh • 17 years ago

e45f5d

- Continue fixing, additional user domains

Daniel J Walsh • 17 years ago

cc7c06

- Begin adding user confinement to targeted policy

Daniel J Walsh • 17 years ago

f86e42

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

454781

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ee095f

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

b6ed67

- Fixes for prelink, ktalkd, netlabel

Daniel J Walsh • 17 years ago

ae5ace

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

9e0fa4

- Allow prelink when run from rpm to create tmp files Resolves: #221865

Daniel J Walsh • 17 years ago

a384d7

- Allow spamassassin to read var_lib_t dir Resolves: #219234

Daniel J Walsh • 17 years ago

8a03d5

- fix mplayer to work under strict policy

Daniel J Walsh • 17 years ago

9bcfd1

- Add gconf policy and make it work with strict

Daniel J Walsh • 17 years ago

8bacd8

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

5db544

- Many fixes for strict policy and by extension mls.

Daniel J Walsh • 17 years ago

135ea9

- Fix to allow ftp to bind to ports > 1024 Resolves: #219349

Daniel J Walsh • 17 years ago

9051d6

Daniel J Walsh • 17 years ago

5ded3c

Daniel J Walsh • 17 years ago

4fd323

- Allow semanage to exec it self. Label genhomedircon as semanage_exec_t

Daniel J Walsh • 17 years ago

f9e32a

- allow automount to setgid Resolves: #219999

Daniel J Walsh • 17 years ago

be9aef

- Allow cron to polyinstatiate

Daniel J Walsh • 17 years ago

5e01b4

Daniel J Walsh • 17 years ago

272aa0

Resolves: #218978

Daniel J Walsh • 17 years ago

3a5184

Resolves: #218978

Daniel J Walsh • 17 years ago

422dcf

- Allow initrc to create files in /var directories Resolves: #219227

Daniel J Walsh • 17 years ago

e3b143

- More fixes for MLS

Daniel J Walsh • 17 years ago

6157a7

- More Fixes polyinstatiation Resolves: #216184

Daniel J Walsh • 17 years ago

dd5d7e

- Fix handling of keyrings

Daniel J Walsh • 17 years ago

a169fb

- Fix polyinstatiation

Daniel J Walsh • 17 years ago

852ba6

- More fixes for quota Resolves: #212957

Daniel J Walsh • 18 years ago

414ddd

- ncsd needs to use avahi sockets Resolves: #217640 Resolves: #218014

Daniel J Walsh • 18 years ago

9f388c

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

b6ffd7

- Allow login programs to polyinstatiate homedirs Resolves: #216184

Daniel J Walsh • 18 years ago

aba668

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

036c1c

- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571

Daniel J Walsh • 18 years ago

cc1462

- Fix context for helix players file_context #216942

Daniel J Walsh • 18 years ago

e4d46c

- Fix load_policy to be able to mls_write_down so it can talk to the

Daniel J Walsh • 18 years ago

02560d

- Fixes for hwclock, clamav, ftp

Daniel J Walsh • 18 years ago

421864

- Move to upstream version which accepted my patches

Daniel J Walsh • 18 years ago

9e4aea

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

b28d0a

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

a3f2f5

- Fixes for nvidia driver

Daniel J Walsh • 18 years ago

150bdf

- Allow semanage to signal mcstrans

Daniel J Walsh • 18 years ago

b0ecaa

- Update to upstream

Daniel J Walsh • 18 years ago

73ea8c

- Allow modstorage to edit /etc/fstab file

Daniel J Walsh • 18 years ago

d925bd

- Fix for qemu, /dev/

Daniel J Walsh • 18 years ago

ec1743

- Fix path to realplayer.bin

Daniel J Walsh • 18 years ago

32b91c

- Allow xen to connect to xen port

Daniel J Walsh • 18 years ago

06b64f

- Allow cups to search samba_etc_t directory

Daniel J Walsh • 18 years ago

1a986f

- Allow xen to search automount

Daniel J Walsh • 18 years ago

2098c9

- Fix spec of jre files

Daniel J Walsh • 18 years ago

6ba486

- Fix unconfined access to shadow file

Daniel J Walsh • 18 years ago

080659

- Allow xend to create files in xen_image_t directories

Daniel J Walsh • 18 years ago

4d1149

- Fixes for /var/lib/hal

Daniel J Walsh • 18 years ago

0fcc49

- Remove ability for sysadm_t to look at audit.log

Daniel J Walsh • 18 years ago

f08bf9

- Fix rpc_port_types

Daniel J Walsh • 18 years ago

f3ecbb

- Merge with upstream

Daniel J Walsh • 18 years ago

d7e0f9

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

0dae3b

- Add perms for swat

Daniel J Walsh • 18 years ago

d095a0

- Allow daemons to dump core files to /

Daniel J Walsh • 18 years ago

6b9761

- Fixes for ricci

Daniel J Walsh • 18 years ago

8fb79d

- Allow mount.nfs to work

Daniel J Walsh • 18 years ago

6672fc

- Allow ricci-modstorage to look at lvm_etc_t

Daniel J Walsh • 18 years ago

85659e

- Fixes for ricci using saslauthd

Daniel J Walsh • 18 years ago

08efef

- Allow mountpoint on home_dir_t and home_t

Daniel J Walsh • 18 years ago

dc804f

- Update xen to read nfs files

Daniel J Walsh • 18 years ago

8ff9d6

Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4

Daniel J Walsh • 18 years ago

3d011f

- Allow hal to use power_device_t

Daniel J Walsh • 18 years ago

11d7ea

- Allow procemail to look at autofs_t

Daniel J Walsh • 18 years ago

d6926f

- Refupdate from upstream

Daniel J Walsh • 18 years ago

e2eecb

- Add lots of fixes for mls cups

Daniel J Walsh • 18 years ago

302afb

- Lots of fixes for ricci

Daniel J Walsh • 18 years ago

6fa5ec

- Fix number of cats

Daniel J Walsh • 18 years ago

2d1b4a

- Update to upstream

Daniel J Walsh • 18 years ago

da0829

- More iSCSI changes for #209854

jantill • 18 years ago

a3698a

- Test ISCSI fixes for #209854

jantill • 18 years ago

cd0a0d

- allow semodule to rmdir selinux_config_t dir

Daniel J Walsh • 18 years ago

ed9a4c

- Fix boot_runtime_t problem on ppc. Should not be creating these files.

Daniel J Walsh • 18 years ago

70e2db

- Fix context mounts on reboot

Daniel J Walsh • 18 years ago

16c971

- Update for tallylog

Daniel J Walsh • 18 years ago

7316db

- Allow xend to rewrite dhcp conf files

Daniel J Walsh • 18 years ago

bfcffe

- Make xentapctrl work

Daniel J Walsh • 18 years ago

160281

- Don't transition unconfined_t to bootloader_t

Daniel J Walsh • 18 years ago

46f098

- Patch for labeled networking

Daniel J Walsh • 18 years ago

f21d67

- Fix crond handling for mls

Daniel J Walsh • 18 years ago

42dd74

- Update to upstream

Daniel J Walsh • 18 years ago

8fff69

- Remove bluetooth-helper transition

Daniel J Walsh • 18 years ago

52ba98

- Fix prelink

Daniel J Walsh • 18 years ago

5096e7

- Fix rhgb

Daniel J Walsh • 18 years ago

3c4577

- Fix setrans handling on MLS and useradd

Daniel J Walsh • 18 years ago

172c6c

- Support for fuse

Daniel J Walsh • 18 years ago

afbab5

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

bfd584

- Fix dovecot, amanda

Daniel J Walsh • 18 years ago

201e1d

- Allow java execheap for itanium

Daniel J Walsh • 18 years ago

d25a3e

- Update with upstream

Daniel J Walsh • 18 years ago

a76cf8

- mls fixes

Daniel J Walsh • 18 years ago

857ce1

- Update from upstream

Daniel J Walsh • 18 years ago

85bd85

- More fixes for mls

Daniel J Walsh • 18 years ago

8d52bd

- Fix cron jobs to run under the correct context

Daniel J Walsh • 18 years ago

5ec822

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

cc9afd

- Fixes to make pppd work

Daniel J Walsh • 18 years ago

b4815d

- Multiple policy fixes

Daniel J Walsh • 18 years ago

c56aa1

- Fix transition on mcstransd

Daniel J Walsh • 18 years ago

b8c785

- Add /dev/em8300 defs

Daniel J Walsh • 18 years ago

38b22c

- Upgrade to upstream

Daniel J Walsh • 18 years ago

3f1bb6

- Upgrade to upstream

Daniel J Walsh • 18 years ago

f511de

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

60792f

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

588fb9

- Fix ppp connections from network manager

Daniel J Walsh • 18 years ago

5f2a4e

- Add tty access to all domains boolean

Daniel J Walsh • 18 years ago

861af1

- Fixed typealias of firstboot_rw_t

Daniel J Walsh • 18 years ago

9fbb71

- Fix location of xel log files

Daniel J Walsh • 18 years ago

8b6c37

- Fixes for autofs, lp

Daniel J Walsh • 18 years ago

1ef9d4

- Update from upstream

Daniel J Walsh • 18 years ago

937c1c

- Fixup for test6

Daniel J Walsh • 18 years ago

57075e

- Fixup for test6

Daniel J Walsh • 18 years ago

66ca8d

- Fixup for test6

Daniel J Walsh • 18 years ago

4bf7cf

- Update to upstream

Daniel J Walsh • 18 years ago

efb089

- Update to upstream

Daniel J Walsh • 18 years ago

928af4

- Fix suspend to disk problems

Daniel J Walsh • 18 years ago

04dd12

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

a1c3b4

- Lots of fixes for restarting daemons at the console.

Daniel J Walsh • 18 years ago

3723ca

- Fix audit line

Daniel J Walsh • 18 years ago

e4710b

- Fix audit line

Daniel J Walsh • 18 years ago

7f5a12

- Fix requires line

Daniel J Walsh • 18 years ago

358add

- Upgrade to upstream

Daniel J Walsh • 18 years ago

06027c

- Fix install problems

Daniel J Walsh • 18 years ago

161655

- Allow setroubleshoot to getattr on all dirs to gather RPM data

Daniel J Walsh • 18 years ago

9e8814

- Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32

Daniel J Walsh • 18 years ago

4c3485

- Fix xen tty devices

Daniel J Walsh • 18 years ago

b2d3eb

- Fixes for setroubleshoot

Daniel J Walsh • 18 years ago

8cd82c

- Update to upstream

Daniel J Walsh • 18 years ago

a5dcfa

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

3559b5

- Fixes for stunnel and postgresql

Daniel J Walsh • 18 years ago

6f77ee

- Update from upstream

Daniel J Walsh • 18 years ago

79b5c4

- Update from upstream

Daniel J Walsh • 18 years ago

256cfc

- Change allow_execstack to default to on, for RHEL5 Beta. This is required

Daniel J Walsh • 18 years ago

543bc3

- Misc fixes

Daniel J Walsh • 18 years ago

5974f4

Th Aug 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3.6-3

Daniel J Walsh • 18 years ago

c22aca

- More fixes for strict policy

Daniel J Walsh • 18 years ago

d0ed11

- Quiet down anaconda audit messages

Daniel J Walsh • 18 years ago

8da541

- Fix setroubleshootd

Daniel J Walsh • 18 years ago

932c79

- Update to the latest from upstream

Daniel J Walsh • 18 years ago

262020

- More fixes for xen

Daniel J Walsh • 18 years ago

750558

- Fix anaconda transitions

Daniel J Walsh • 18 years ago

1c92c7

- yet more xen rules

Daniel J Walsh • 18 years ago

5dc8b1

- more xen rules

Daniel J Walsh • 18 years ago

031e1a

- Fixes for Samba

Daniel J Walsh • 18 years ago

1b1dad

- Fixes for xen

Daniel J Walsh • 18 years ago

be45a2

- Allow setroubleshootd to send mail

Daniel J Walsh • 18 years ago

9782db

- Add nagios policy

Daniel J Walsh • 18 years ago

1f2093

- fixes for setroubleshoot

Daniel J Walsh • 18 years ago

90c408

- Added Paul Howorth patch to only load policy packages shipped with this

Daniel J Walsh • 18 years ago

9554c9

- Allow pidof from initrc to ptrace higher level domains

Daniel J Walsh • 18 years ago

9d77b6

- Add policy for /var/run/ldapi

Daniel J Walsh • 18 years ago

8555e0

- Fix setroubleshoot policy

Daniel J Walsh • 18 years ago

b14e13

- Fixes for mls use of ssh

Daniel J Walsh • 18 years ago

7b4c78

- Fixes to make setroubleshoot work

Daniel J Walsh • 18 years ago

efa5f5

- Cups needs to be able to read domain state off of printer client

Daniel J Walsh • 18 years ago

1c15e3

- add boolean to allow zebra to write config files

Daniel J Walsh • 18 years ago

c7b739

- setroubleshootd fixes

Daniel J Walsh • 18 years ago

31c47b

- Allow prelink to read bin_t symlink

Daniel J Walsh • 18 years ago

2bf148

- Remove spamassassin_can_network boolean

Daniel J Walsh • 18 years ago

c62a78

- Update to upstream

Daniel J Walsh • 18 years ago

210755

- Add setroubleshoot policy

Daniel J Walsh • 18 years ago

8a7ef5

- Turn off auditallow on setting booleans

Daniel J Walsh • 18 years ago

317bd2

- Multiple fixes

Daniel J Walsh • 18 years ago

d81909

- Update to upstream

Daniel J Walsh • 18 years ago

8bee3a

- Update to upstream

Daniel J Walsh • 18 years ago

4a291a

- Update to upstream

Daniel J Walsh • 18 years ago

9e7fd1

- Update to upstream

Daniel J Walsh • 18 years ago

1065b1

- Fix requires

Daniel J Walsh • 18 years ago

446e9b

- Update to upstream

Daniel J Walsh • 18 years ago

2b87b0

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

63e20b

- Break out selinux-devel package

Daniel J Walsh • 18 years ago

77dc77

- Add ibmasmfs

Daniel J Walsh • 18 years ago

af203b

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

cc073e

- Fix policygentool gen_requires

Daniel J Walsh • 18 years ago

4ef386

- Update from Upstream

Daniel J Walsh • 18 years ago

358335

- Fix spec of realplay

Daniel J Walsh • 18 years ago

0fe5c7

- Update to upstream

Daniel J Walsh • 18 years ago

2616c6

- Allow useradd to create_home_dir in MLS environment

Daniel J Walsh • 18 years ago

b637d9

- Update from upstream

Daniel J Walsh • 18 years ago

3004d5

- Update from upstream

Daniel J Walsh • 18 years ago

c54f60

- Update from upstream

Daniel J Walsh • 18 years ago

cfc04d

- Add oprofilefs

Daniel J Walsh • 18 years ago

a4c709

- Fix for hplip and Picasa

Daniel J Walsh • 18 years ago

a55870

- Update to upstream

Daniel J Walsh • 18 years ago

43fe71

- fixes for java, openldap and webalizer

Daniel J Walsh • 18 years ago

7580a1

- Xen fixes

Daniel J Walsh • 18 years ago

d065ee

- Xen fixes

Daniel J Walsh • 18 years ago

e30da9

- Upgrade to upstream

Daniel J Walsh • 18 years ago

e5e509

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

75d0fe

- allow hal to read boot_t files

Daniel J Walsh • 18 years ago

4aae36

- Update from upstream

Daniel J Walsh • 18 years ago

f4d170

- Fixes for amavis

Daniel J Walsh • 18 years ago

82d40f

- Update from upstream

Daniel J Walsh • 18 years ago

52288b

- Allow auditctl to search all directories

Daniel J Walsh • 18 years ago

a97d1f

- Add acquire service for mono.

Daniel J Walsh • 18 years ago

f08aca

- Turn off allow_execmem boolean

Daniel J Walsh • 18 years ago

89e397

- Clean up spec file

Daniel J Walsh • 18 years ago

ca8bc2

- Allow execution of cvs command

Daniel J Walsh • 18 years ago

539ba8

- Update to upstream

Daniel J Walsh • 18 years ago

a52275

- Update to upstream

Daniel J Walsh • 18 years ago

529f12

- Fix libjvm spec

Daniel J Walsh • 18 years ago

49dfee

- Update to upstream

Daniel J Walsh • 18 years ago

ea725c

- Add xm policy

jantill • 18 years ago

684125

- Update to upstream

Daniel J Walsh • 18 years ago

bbaa1f

- Allow mono to chat with unconfined

Daniel J Walsh • 18 years ago

e847c8

- Allow procmail to sendmail

Daniel J Walsh • 18 years ago

d2fe1b

- Update to latest from upstream

Daniel J Walsh • 18 years ago

5ff36d

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c74f14

- Add unconfined_mount_t

Daniel J Walsh • 18 years ago

3c584c

- Update to latest from upstream

Daniel J Walsh • 18 years ago

ca0597

- Update to latest from upstream

Daniel J Walsh • 18 years ago

c4826d

- Change libraries.fc to stop shlib_t form overriding texrel_shlib_t

Daniel J Walsh • 18 years ago

c7b01a

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

5cbfde

- Allow secadm_t ability to relabel all files

Daniel J Walsh • 18 years ago

c53f3b

Change file contexts and several minor policy changes.

rcoker • 18 years ago

a442ed

- More textrel_shlib_t file path fixes

Daniel J Walsh • 18 years ago

67bc5e

- Get auditctl working in MLS policy

Daniel J Walsh • 18 years ago

4fd214

- Add mono dbus support

Daniel J Walsh • 18 years ago

2ad4f1

- Update to upstream

Daniel J Walsh • 18 years ago

da5d60

- Allow automount and dbus to read cert files

Daniel J Walsh • 18 years ago

d2bd4f

- Fix ftp policy

Daniel J Walsh • 18 years ago

58ec7a

- Update to upstream

Daniel J Walsh • 18 years ago

5c1cd7

- Update to upstream

Daniel J Walsh • 18 years ago

bbe0ad

- Update to upstream

Daniel J Walsh • 18 years ago

5a0143

- Fix policyhelp

Daniel J Walsh • 18 years ago

bd3f0e

- Fix pam_console handling of usb_device

Daniel J Walsh • 18 years ago

faffd3

- Update to upstream

Daniel J Walsh • 18 years ago

414d6d

- Update to upstream

Daniel J Walsh • 18 years ago

ad73e8

- Update to upstream

Daniel J Walsh • 18 years ago

727bb2

- Get transition rules to create policy.20 at SystemHigh

Daniel J Walsh • 18 years ago

9f8b05

- Allow secadmin to shutdown system

Daniel J Walsh • 18 years ago

5b4676

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

6d4275

- MLS Fixes dmidecode needs mls_file_read_up

Daniel J Walsh • 18 years ago

0a74a2

- remove mkdir /usr/share/selinux/, it's not required and even wrong

Karsten Hopp • 18 years ago

4e431c

- Get rid of mount/fsdisk scan of /dev messages

Daniel J Walsh • 18 years ago

4c9f08

- Fake make to rebuild enableaudit.pp

Daniel J Walsh • 18 years ago

54b0b5

- Get xen networking running.

Daniel J Walsh • 18 years ago

6d2388

- Fixes for Xen

Daniel J Walsh • 18 years ago

23a177

- more xen policy fixups

Jeremy Katz • 18 years ago

b33ec3

- more xen fixage (#184393)

Jeremy Katz • 18 years ago

1b0755

- Fix blkid specification

Daniel J Walsh • 18 years ago

060041

- Blkid changes

Daniel J Walsh • 18 years ago

9c64bb

- Allow lvm tools to create drevice dir

Daniel J Walsh • 18 years ago

4c9f65

- Add Xen support

Daniel J Walsh • 18 years ago

020477

- Fixes for cups

Daniel J Walsh • 18 years ago

72a136

- Fixes for cups

Daniel J Walsh • 18 years ago

0296af

- Load Policy needs translock

Daniel J Walsh • 18 years ago

76d7c5

- Fix cups html interface

Daniel J Walsh • 18 years ago

ef0cb1

- Add hal changes suggested by Jeremy

Daniel J Walsh • 18 years ago

21277d

- add policyhelp to point at policy html pages

Daniel J Walsh • 18 years ago

d2c260

- Additional fixes for nvidia and cups

Daniel J Walsh • 18 years ago

8254bb

- Update to upstream

Daniel J Walsh • 18 years ago

575aa9

*** empty log message ***

Daniel J Walsh • 18 years ago

fbec4b

*** empty log message ***

Daniel J Walsh • 18 years ago

290aa6

*** empty log message ***

Daniel J Walsh • 18 years ago

dd2612

*** empty log message ***

Daniel J Walsh • 18 years ago

e135c7

*** empty log message ***

Daniel J Walsh • 18 years ago

771686

*** empty log message ***

Daniel J Walsh • 18 years ago

c12699

*** empty log message ***

Daniel J Walsh • 18 years ago

7dca0e

*** empty log message ***

Daniel J Walsh • 18 years ago

5d5343

*** empty log message ***

Daniel J Walsh • 18 years ago

d19b68

*** empty log message ***

Daniel J Walsh • 18 years ago

701455

*** empty log message ***

Daniel J Walsh • 18 years ago

585f82

*** empty log message ***

Daniel J Walsh • 18 years ago

d4d1f2

*** empty log message ***

Daniel J Walsh • 18 years ago

4dab27

*** empty log message ***

Daniel J Walsh • 18 years ago

a57054

*** empty log message ***

Daniel J Walsh • 18 years ago

d5ae27

*** empty log message ***

Daniel J Walsh • 18 years ago

28c425

*** empty log message ***

Daniel J Walsh • 18 years ago

46bd65

*** empty log message ***

Daniel J Walsh • 18 years ago

31d4d2

*** empty log message ***

Daniel J Walsh • 18 years ago

f0e87b

*** empty log message ***

Daniel J Walsh • 18 years ago

3debd0

*** empty log message ***

Daniel J Walsh • 18 years ago

6e9bcb

*** empty log message ***

Daniel J Walsh • 18 years ago

f3a390

*** empty log message ***

Daniel J Walsh • 18 years ago

025d1e

*** empty log message ***

Daniel J Walsh • 18 years ago

2f15a2

*** empty log message ***

Daniel J Walsh • 18 years ago

c417f6

*** empty log message ***

Daniel J Walsh • 18 years ago

cb99f7

*** empty log message ***

Daniel J Walsh • 18 years ago

847884

*** empty log message ***

Daniel J Walsh • 18 years ago

32b871

*** empty log message ***

Daniel J Walsh • 18 years ago

faa80b

*** empty log message ***

Daniel J Walsh • 18 years ago

5a8299

*** empty log message ***

Daniel J Walsh • 18 years ago

b28beb

*** empty log message ***

Daniel J Walsh • 18 years ago

a3a62a

*** empty log message ***

Daniel J Walsh • 18 years ago

de82d8

*** empty log message ***

Daniel J Walsh • 18 years ago

38c806

- Update to upstream

Daniel J Walsh • 18 years ago

681c9d

- Update to upstream

Daniel J Walsh • 18 years ago

737432

- Update to upstream

Daniel J Walsh • 18 years ago

332537

- Update to upstream

Daniel J Walsh • 18 years ago

70d9b4

- Update to upstream

Daniel J Walsh • 18 years ago

78265f

- Add inotifyfs handling

Daniel J Walsh • 18 years ago

b6e6b5

- Update to upstream

Daniel J Walsh • 18 years ago

e76bab

- Many changes for MLS

Daniel J Walsh • 18 years ago

a3b5c3

- Update to upstream

Daniel J Walsh • 18 years ago

129ba1

- Update to upstream

Daniel J Walsh • 18 years ago

30a020

- Update to upstream

Daniel J Walsh • 18 years ago

05207b

- Update to upstream

Daniel J Walsh • 18 years ago

a1c584

- Update to upstream

Daniel J Walsh • 18 years ago

2e7147

- Update to upstream

Daniel J Walsh • 18 years ago

cdab5c

- Update to upstream

Daniel J Walsh • 18 years ago

7ba8b0

- fix pup transitions (#177262)

Jeremy Katz • 18 years ago

b9b2d8

- Update to upstream

Daniel J Walsh • 18 years ago

640128

- More Fixes for hal and readahead

Daniel J Walsh • 18 years ago

ef1477

- Fixes for hal and readahead

Daniel J Walsh • 18 years ago

e485f5

- Update to upstream

Daniel J Walsh • 18 years ago

26e33d

- Handle new location of hal scripts

Daniel J Walsh • 18 years ago

451d9b

- Allow su to read /etc/mtab

Daniel J Walsh • 18 years ago

008885

- Update to upstream

Daniel J Walsh • 18 years ago

026fac

- Update to upstream

Daniel J Walsh • 18 years ago

286432

- Update to upstream

Daniel J Walsh • 18 years ago

a736f9

- Fix "libsemanage.parse_module_headers: Data did not represent a module."

Daniel J Walsh • 18 years ago

120d3b

- Allow load_policy to read /etc/mtab

Daniel J Walsh • 18 years ago

ce66f5

- Fix dovecot to allow dovecot_auth to look at /tmp

Daniel J Walsh • 18 years ago

1f3122

- Allow restorecon to read unlabeled_t directories in order to fix

Daniel J Walsh • 18 years ago

d7b05b

- Add Logwatch policy

Daniel J Walsh • 18 years ago

3607aa

- Add Logwatch policy

Daniel J Walsh • 18 years ago

a08ba8

- Fix /dev/ub[a-z] file context

Daniel J Walsh • 18 years ago

798572

- Fix library specification

Daniel J Walsh • 18 years ago

9f7b03

- Fix hostname in targeted policy

Daniel J Walsh • 18 years ago

596229

- Fix passwd command on mls

Daniel J Walsh • 18 years ago

5a47e6

- Lots of fixes to make mls policy work

Daniel J Walsh • 18 years ago

71ee99

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

6e9ee7

- Add dri libs to textrel_shlib_t

Daniel J Walsh • 18 years ago

9d20b2

- Add man pages

Daniel J Walsh • 18 years ago

1335ee

- Add enableaudit.pp

Daniel J Walsh • 18 years ago

315b4a

- Fix mls policy

Daniel J Walsh • 18 years ago

105bbf

- Update mls file from old version

Daniel J Walsh • 18 years ago

ecb726

- Update mls file from old version

Daniel J Walsh • 18 years ago

a587fa

- Update mls file from old version

Daniel J Walsh • 18 years ago

0c9f87

- Add sids back in

Daniel J Walsh • 18 years ago

dce316

- Fixes to allow automount to use portmap

Daniel J Walsh • 18 years ago

9ce97a

- Add java unconfined/execmem policy

Daniel J Walsh • 18 years ago

1c8602

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1ef62f

- Add file context for /var/cvs

Daniel J Walsh • 18 years ago

1f0075

- Update from upstream

Daniel J Walsh • 18 years ago

504da9

- Fixes for hal

Daniel J Walsh • 18 years ago

e24a8b

- Fixes for hal

Daniel J Walsh • 18 years ago

1ff14a

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

d8566e

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

7171df

- Turn back on execmem since we need it for java, firefox, ooffice

Daniel J Walsh • 18 years ago

cfcb30

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

afa8a2

- Allow gpm to stream socket to itself

Daniel J Walsh • 18 years ago

57c18f

- fix requirements to be on the actual packages so that policy can get

Jeremy Katz • 18 years ago

eb190f

- Allow unconfined_t to execmod texrel_shlib_t

Daniel J Walsh • 18 years ago

9e85a8

- Update to upstream

Daniel J Walsh • 18 years ago

d4da53

- Add two new httpd booleans, turned off by default

Daniel J Walsh • 18 years ago

e1ccb6

- Add ghost for policy.20

Daniel J Walsh • 18 years ago

7c94e8

- Update to upstream

Daniel J Walsh • 18 years ago

6f5a3b

- Change setrans-mls to use new libsetrans

Daniel J Walsh • 18 years ago

c6c498

- Change Requires to PreReg for requiring of policycoreutils on install

Daniel J Walsh • 18 years ago

12e089

Add xdm policy

Daniel J Walsh • 18 years ago

97bd2a

Update from upstream

Daniel J Walsh • 18 years ago

46a906

Update from upstream

Daniel J Walsh • 18 years ago

913e47

Update from upstream

Daniel J Walsh • 18 years ago

a1e07b

Update from upstream

Daniel J Walsh • 18 years ago

475186

Update from upstream

Daniel J Walsh • 18 years ago

caeef1

- fix trigger (dwalsh looking over my shoulder)

Nalin Dahyabhai • 18 years ago

2b2203

- No longer installing policy.20 file, anaconda handles the building of the

Daniel J Walsh • 19 years ago

28930b

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

bd7e86

- Fixes for dovecot and saslauthd

Daniel J Walsh • 19 years ago

4199dc

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

a03362

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

c1b022

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

25e721

- Cleanup pegasus and named

Daniel J Walsh • 19 years ago

21dea1

-Update to latest from upstream

Daniel J Walsh • 19 years ago

598be1

-Update to latest from upstream

Daniel J Walsh • 19 years ago

e38dc4

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

b33f08

- Add rules for pegasus and avahi

Daniel J Walsh • 19 years ago

765f81

- Start building MLS Policy

Daniel J Walsh • 19 years ago

d77f56

- Start building MLS Policy

Daniel J Walsh • 19 years ago

a32f66

- Update to upstream

Daniel J Walsh • 19 years ago

e56873

- Update to upstream

Daniel J Walsh • 19 years ago

3e930b

- Update to upstream

Daniel J Walsh • 19 years ago

1a0a25

- Turn on bash

Daniel J Walsh • 19 years ago

205d3f

- Initial version

Daniel J Walsh • 19 years ago

f0b87c

now how about this? do you like it? is it finally good enough for you?

Nalin Dahyabhai • 19 years ago

af6090

try this

Nalin Dahyabhai • 19 years ago

46e726

try anything

Nalin Dahyabhai • 19 years ago

f852dd

- Initial version

Daniel J Walsh • 19 years ago

be926a

- Initial version

Daniel J Walsh • 19 years ago

edb750

- Initial version

Daniel J Walsh • 19 years ago

cc9c9e

auto-import selinux-policy-2.0.0-0.6 on branch devel from

Daniel J Walsh • 19 years ago

1580c8

rpms / selinux-policy

History selinux-policy.spec

rpms / selinux-policy

Source Code

History selinux-policy.spec