From 67b8998fdeb87b32ec0b30b4d0ffa57d7005d7ff Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 6 Dec 2005 21:28:21 +0000 Subject: [PATCH] pre-release update --- www/html/Changelog.txt | 45 ++++++++++++- www/html/status.html | 150 +++++++---------------------------------- www/html/switch.html | 6 +- 3 files changed, 71 insertions(+), 130 deletions(-) diff --git a/www/html/Changelog.txt b/www/html/Changelog.txt index 9c1d91f8..207c23f1 100644 --- a/www/html/Changelog.txt +++ b/www/html/Changelog.txt @@ -1,3 +1,47 @@ +- Add unlabeled IPSEC association to domains with + networking permsiisions. +- Merge systemuser back in to users, as these files + do not need to be split. +- Add check for duplicate interface/template definitions. +- Move domain, files, and corecommands modules to kernel + layer to resolve some layering inconsistencies. +- Move policy build options out of Makefile into build.conf. +- Add yppasswd to nis module. +- Change optional_policy() to refer to the module name + rather than modulename.te. +- Fix labeling targets to use installed file_contexts rather + than partial file_contexts in the policy source directory. +- Fix build process to use make's internal vpath functions + to detect modules rather than using subshells and find. +- Add install target for modular policy. +- Add load target for modular policy. +- Add appconfig dependency to the load target. +- Miscellaneous fixes from Dan Walsh. +- Fix corenetwork gen_context()'s to expand during the policy + build phase instead of during the generation phase. +- Added policies: + amanda + avahi + canna + cyrus + dbskk + dovecot + distcc + i18n_input + irqbalance + lpd + networkmanager + pegasus + postfix + procmail + radius + rdisc + rpc + spamassassin + timidity + xdm + xfs + * Wed Oct 19 2005 Chris PeBenito - 20051019 - Many fixes to make loadable modules build. - Add targets for sechecker. @@ -27,7 +71,6 @@ mailman ppp radvd - radius sasl webalizer diff --git a/www/html/status.html b/www/html/status.html index b900c183..2c2cdbdd 100644 --- a/www/html/status.html +++ b/www/html/status.html @@ -11,6 +11,18 @@ now be built with a compiler that has the require-in-conditionals, delcare-then-require, and stack-overflow patches applied.

+

 

Status and Tasks

@@ -72,7 +84,8 @@ + have been added. Policy has been tested in the + targeted-mcs policy configuration. @@ -121,12 +134,6 @@ - - - - -
Minor improvements MLS infrastructure has been extended to support MCS categories in users and all contexts. MCS constraints - have been added. Policy is compilable, but untested.
Network InfrastructureHeaders for the policy, describing object classes, and their permissions. No planned changes.
GenhomedirconUnchangedTool to properly label users' home directories. - No planned changes

 

Roadmap

@@ -217,7 +224,7 @@ converted: automount + automount.te automount.fc - + Tresys backup @@ -247,7 +254,7 @@ converted: certwatch + certwatch.te certwatch.fc - + Tresys cipe @@ -317,7 +324,7 @@ converted: fetchmail + fetchmail.te fetchmail.fc - + Tresys fontconfig + @@ -369,11 +376,6 @@ converted: ircd.te ircd.fc - - irqbalance + - irqbalance.te irqbalance.fc - - jabber jabberd.te jabberd.fc @@ -539,11 +541,6 @@ converted: alsa.te alsa.fc sound.te sound.fc sound-server.te sound-server.fc - - spamassassin + - spamassassin.te spamc.te spamd.te spamassassin.fc spamc.fc spamd.fc spamassassin_macros.te - Tresys - speedtouch speedmgmt.te speedmgmt.fc @@ -557,7 +554,7 @@ converted: sysstat + sysstat.te sysstat.fc - + Tresys thunderbird + @@ -634,11 +631,6 @@ converted: xdm.te xdm.fc xdm_macros.te Tresys - - xfs + - xfs.te xfs.fc - - xprint xprint.te xprint.fc @@ -662,107 +654,11 @@ converted: - diff --git a/www/html/switch.html b/www/html/switch.html index 633d0c17..91f4d85c 100644 --- a/www/html/switch.html +++ b/www/html/switch.html @@ -1,8 +1,10 @@

Switching to Targeted Reference Policy

+ The targeted policy is now available on Fedora systems in the + development repositories (Rawhide), as selinux-policy-targeted 2.*. + If you are using Rawhide, simply update your policy using yum. This guide will walk you through switching to the targeted reference - policy on a Fedora system. Note: Reference Policy should not yet - be used on production systems. + policy on a Fedora system not using these repositories.

Download and unpack the policy