52 Commits

Author	SHA1	Message	Date
Dominick Grift	18f2a72d7f	Whitespace, newline and tab fixes. ... Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes.	2010-09-23 14:59:23 +02:00
Dominick Grift	0f7c400223	Use permission sets where possible. ... Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible.	2010-09-23 14:59:23 +02:00
Dominick Grift	1b39decc10	The process and capability IPC goes on top of local policy. ... The process and capability IPC goes on top of local policy.	2010-09-23 14:59:22 +02:00
Dominick Grift	8725d6334d	This permission is already allowed by included mmap_file_perms.	2010-09-23 14:55:33 +02:00
Dominick Grift	11ad1dae65	Source is postdrop and not local. Moving to postdrop local policy section.	2010-09-23 14:55:33 +02:00
Dominick Grift	a7b40a9c25	Internal interaction goes before external interface calls.	2010-09-23 14:55:33 +02:00
Dominick Grift	f6e8660dcb	These are not declarations move them to local policy section.	2010-09-23 14:55:33 +02:00
Dan Walsh	3eaa993945	UPdate for f14 policy	2010-08-26 09:41:21 -04:00
Chris PeBenito	48f99a81c0	Whitespace change: drop unnecessary blank line at the start of .te files.	2010-06-10 08:16:35 -04:00
Chris PeBenito	29af4c13e7	Bump module versions for release.	2010-05-24 15:32:01 -04:00
Chris PeBenito	d9e4cbd2ce	Postfix patch from Dan Walsh.	2010-05-21 08:56:49 -04:00
Chris PeBenito	c3c753f786	Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.	2010-02-11 14:20:10 -05:00
Chris PeBenito	9570b28801	module version number bump for release 2.20090730 that was mistakenly omitted.	2009-08-05 10:59:21 -04:00
Chris PeBenito	09516cb4be	remove read_default_t tunable	2009-07-23 08:58:35 -04:00
Chris PeBenito	3f67f722bb	trunk: whitespace fixes	2009-06-26 14:40:13 +00:00
Chris PeBenito	c1262146e0	trunk: Remove node definitions and change node usage to generic nodes.	2009-01-09 19:48:02 +00:00
Chris PeBenito	668b3093ff	trunk: change network interface access from all to generic network interfaces.	2009-01-06 20:24:10 +00:00
Chris PeBenito	17ec8c1f84	trunk: bump module versions for release.	2008-12-10 19:38:10 +00:00
Chris PeBenito	9ff89c44e7	trunk: 2 patches from dan.	2008-12-04 15:01:12 +00:00
Chris PeBenito	b9e5238a24	trunk: add milter module from Paul Howarth.	2008-11-24 15:06:58 +00:00
Chris PeBenito	296273a719	trunk: merge UBAC.	2008-11-05 16:10:46 +00:00
Chris PeBenito	2cca6b79b4	trunk: remove redundant shared lib calls.	2008-10-17 17:31:04 +00:00
Chris PeBenito	0b36a2146e	trunk: Enable open permission checks policy capability.	2008-10-16 16:09:20 +00:00
Chris PeBenito	aa7c463e5d	trunk: a pile of misc fixes.	2008-10-13 13:36:50 +00:00
Chris PeBenito	0bfccda4e8	trunk: massive whitespace cleanup from dominick grift.	2008-07-23 21:38:39 +00:00
Chris PeBenito	cfcf5004e5	trunk: bump versions for release.	2008-07-02 14:07:57 +00:00
Chris PeBenito	8c6292b7a4	trunk: Patch to handle postfix data_directory from Vaclav Ovsik.	2008-06-24 13:21:35 +00:00
Chris PeBenito	f7925f25f7	trunk: bump module versions for release.	2007-12-14 14:23:18 +00:00
Chris PeBenito	c0cf6e0a6e	trunk: clean up nsswitch usage, from dan.	2007-12-04 15:05:55 +00:00
Chris PeBenito	4605adcba7	trunk: add postfixpolicyd from Jan-Frode Myklebust.	2007-11-07 20:17:44 +00:00
Chris PeBenito	ef659a476e	Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.	2007-10-09 17:29:48 +00:00
Chris PeBenito	12e9ea1ae3	trunk: module version bumps for previous commit.	2007-10-02 17:15:07 +00:00
Chris PeBenito	350b6ab767	trunk: merge strict and targeted policies. merge shlib_t into lib_t.	2007-10-02 16:04:50 +00:00
Chris PeBenito	3480f3f239	trunk: bump version numbers for release.	2007-09-28 13:58:24 +00:00
Chris PeBenito	134a799c75	trunk: 3 patches from dan.	2007-09-11 19:24:32 +00:00
Chris PeBenito	d46cfe45cd	trunk: add application module	2007-07-19 18:57:48 +00:00
Chris PeBenito	116c1da330	trunk: update module version numbers for release.	2007-06-29 14:48:13 +00:00
Chris PeBenito	1900668638	trunk: Unified labeled networking policy from Paul Moore. ... The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules. trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore. This patch changes the policy to use the netmsg initial SID as the "base" SID/context for NetLabel packets which only have MLS security attributes. Currently we use the unlabeled initial SID which makes it very difficult to distinquish between actual unlabeled packets and those packets which have MLS security attributes.	2007-06-27 15:23:21 +00:00
Chris PeBenito	0251df3e39	bump module versions for release	2007-04-17 13:28:09 +00:00
Chris PeBenito	8021cb4f63	Merge sbin_t and ls_exec_t into bin_t.	2007-03-23 23:24:59 +00:00
Chris PeBenito	a5f5eba459	Add dontaudits for init fds and console to init_daemon_domain().	2007-03-20 18:47:18 +00:00
Chris PeBenito	f2c69c47b3	lmtp and smtp are the same file require same context of setfiles complains ... postfix_pickup_t wants to read postfix_spool_maildrop_t dir	2007-03-01 20:41:19 +00:00
Chris PeBenito	42c5c5f612	bump versions for release.	2006-12-12 21:22:47 +00:00
Chris PeBenito	c0868a7a3b	merge policy patterns to trunk	2006-12-12 20:08:08 +00:00
Chris PeBenito	d6d16b9796	patch from dan Wed, 29 Nov 2006 17:06:40 -0500	2006-12-04 20:10:56 +00:00
Chris PeBenito	a52b4d4f23	bump versions to release numbers	2006-10-18 19:25:27 +00:00
Chris PeBenito	693d4aedb5	patch from dan Fri, 22 Sep 2006 16:30:34 -0400	2006-09-25 18:53:06 +00:00
Chris PeBenito	8708d9bef2	patch from dan Wed, 20 Sep 2006 12:12:49 -0400	2006-09-22 17:14:35 +00:00
Chris PeBenito	a5e2133bc8	patch from dan Wed, 23 Aug 2006 14:03:49 -0400	2006-08-29 02:41:00 +00:00
Chris PeBenito	33c7e6b4e8	remove dead selopt rules	2006-08-15 20:00:58 +00:00