selinux-policy/permissivedomains.te

policy_module(permissivedomains,21)

optional_policy(`
    gen_require(`
                type osad_t;
    ')
    permissive osad_t;
')

optional_policy(`
    gen_require(`
                type docker_t;
    ')
    permissive docker_t;
')

optional_policy(`
    gen_require(`
        type systemd_networkd_t;
    ')
    permissive systemd_networkd_t;
')

optional_policy(`
    gen_require(`
                type gear_t;
    ')
    permissive gear_t;
')

optional_policy(`
    gen_require(`
                type cockpit_t;
    ')
    permissive cockpit_t;
')
Turn off F20 permissive domains, add docker 2013-11-21 14:20:24 +00:00			`policy_module(permissivedomains,21)`
Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy Conflicts: selinux-policy.spec 2013-01-15 16:54:07 +00:00
			optional_policy(`
			gen_require(`
Added osad to permissive domains 2014-02-03 13:09:01 +00:00			`type osad_t;`
Added new policies to permissivedomains.te 2013-11-21 11:07:26 +00:00			`')`
Added osad to permissive domains 2014-02-03 13:09:01 +00:00			`permissive osad_t;`
Added new policies to permissivedomains.te 2013-11-21 11:07:26 +00:00			`')`
RUn docker instance as permissive, changing to fast 2014-02-27 20:50:00 +00:00
			optional_policy(`
			gen_require(`
			`type docker_t;`
			`')`
			`permissive docker_t;`
			`')`
- Allow init_t to stream connect to ipsec - Add /usr/lib/systemd/systemd-networkd policy - Add sysnet_manage_config_dirs() - Add support for /var/run/systemd/network and labeled it as net_conf_t - Allow unpriv SELinux users to dbus chat with firewalld - Add lvm_write_metadata() - Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type - Add support for /dev/vmcp and /dev/sclp - Add docker_connect_any boolean - Fix zabbix policy - Allow zabbix to send system log msgs - Allow pegasus_openlmi_storage_t to write lvm metadata - Updated pcp_bind_all_unreserved_ports - Allow numad to write scan_sleep_millisecs - Turn on entropyd_use_audio boolean by default - Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf. - Allow lscpu running as rhsmcertd_t to read /proc/sysinfo 2014-03-12 10:14:14 +00:00
			optional_policy(`
			gen_require(`
			`type systemd_networkd_t;`
			`')`
			`permissive systemd_networkd_t;`
			`')`
Add policy for geard in docker world 2014-03-27 18:42:34 +00:00
			optional_policy(`
			gen_require(`
			`type gear_t;`
			`')`
			`permissive gear_t;`
			`')`
Add cockpit policy 2014-04-22 12:41:06 +00:00
			optional_policy(`
			gen_require(`
			`type cockpit_t;`
			`')`
			`permissive cockpit_t;`
			`')`