rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
613 Commits 9 Branches 105 Tags 34 MiB
0c3d170578
Commit Graph

545 Commits

Author SHA1 Message Date
Chris PeBenito
743b65115c link fix 2005-06-29 13:05:16 +00:00
Chris PeBenito
96ce00afcc add logrotate, more low-hanging fruit 2005-06-28 20:54:49 +00:00
Chris PeBenito
effd58c647 add templates 2005-06-28 20:41:50 +00:00
Chris PeBenito
ceebe3b4b0 change desc to summary 2005-06-28 19:51:46 +00:00
Chris PeBenito
896badc4d2 add comments and error handling 2005-06-28 19:50:38 +00:00
Chris PeBenito
2d56fdc240 preserve tunable values if tunables.conf exists 2005-06-28 18:01:47 +00:00
Chris PeBenito
cbca03f513 add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type 2005-06-28 17:48:59 +00:00
Chris PeBenito
783b38347e more low hanging fruit cleanup 2005-06-28 17:32:57 +00:00
Chris PeBenito
cedae2e49e better handling of whitespace 2005-06-28 17:31:50 +00:00
Chris PeBenito
19db6ba5a9 change modules.conf behavior to be in line with behavior which will be used in the future for base module 2005-06-28 17:31:18 +00:00
Chris PeBenito
a4c639ddd5 change modules.conf handling 2005-06-28 15:19:40 +00:00
Chris PeBenito
58c3da55f3 add fstools, and more cleanup 2005-06-27 20:59:28 +00:00
Chris PeBenito
80436b9b8f changes to make inetd work 2005-06-27 18:37:33 +00:00
Chris PeBenito
24bf11c62a initial commit 2005-06-27 18:36:56 +00:00
Chris PeBenito
ab940a4cc1 autofs_t and ypbind cleanup 2005-06-27 16:30:55 +00:00
Chris PeBenito
e88003ffe3 xml updates and nis stuff 2005-06-24 20:37:09 +00:00
Chris PeBenito
f8838e6ac1 better dummy xml entries 2005-06-24 20:36:49 +00:00
Chris PeBenito
73fbc771d1 initial commit 2005-06-24 19:49:46 +00:00
Chris PeBenito
62a7b02c5b add/update comments 2005-06-24 13:36:57 +00:00
Chris PeBenito
e81f0220b6 add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd 2005-06-24 13:36:22 +00:00
Chris PeBenito
414e415198 update for new documentation method 2005-06-23 21:30:57 +00:00
Chris PeBenito
aad5b98eba more updates 2005-06-23 20:35:48 +00:00
Chris PeBenito
c3a0754c23 a couple output fixes 2005-06-23 20:27:25 +00:00
Chris PeBenito
9916c694b4 update to new commenting style 2005-06-23 20:27:06 +00:00
Chris PeBenito
45239964e5 move ssh tunables into global_tunables 2005-06-23 19:57:15 +00:00
Chris PeBenito
95db422832 initial commit of segenxml. add support in Makefile 2005-06-23 19:55:23 +00:00
Chris PeBenito
19ea99d495 fix 2005-06-23 16:06:39 +00:00
Chris PeBenito
7c2b84e7a1 fix for shortened tags 2005-06-23 16:06:25 +00:00
Chris PeBenito
261e0e66ee shorten some xml tags 2005-06-23 16:00:05 +00:00
Chris PeBenito
d3b892e4fd convert a couple network macros 2005-06-23 15:44:18 +00:00
Chris PeBenito
007ca5600c more setcurrent stuff 2005-06-23 15:37:39 +00:00
Chris PeBenito
2a3478cf15 fixes pointed out by steve, plus fixes revealed by the added assertions 2005-06-23 14:19:56 +00:00
Chris PeBenito
9ccd96dfc6 more work on ssh, plus import ssh-agent 2005-06-22 21:14:48 +00:00
Chris PeBenito
199895e201 move all interfaces over to the interface macro. add traceback debugging info 2005-06-22 19:21:31 +00:00
Chris PeBenito
cbc9d6951a remove remaining _depend macros to prep for switchover to interface declaration macro 2005-06-22 16:07:14 +00:00
Chris PeBenito
0404a3903a initial commit of ssh. 2005-06-21 21:07:46 +00:00
Chris PeBenito
21871a5cf6 work on newrole policy 2005-06-21 17:01:45 +00:00
Chris PeBenito
7fb9c1c72b change doctool to bring in line with the xml tag change (layers encapsulate 
modules)
 2005-06-20 20:31:58 +00:00
Chris PeBenito
e04b8e7832 initial commit 2005-06-20 18:43:14 +00:00
Chris PeBenito
57869a681e XML: encapsulate modules in layers, rather then layer being an attribute of 
module tag
 2005-06-20 18:40:44 +00:00
Chris PeBenito
7a2f20a315 more work to clean up and complete current modules 2005-06-20 17:41:29 +00:00
Chris PeBenito
2ba9a794db interface review, and remove net_raw from raw node sends. only give 
capability for raw send on an interface
 2005-06-17 19:17:57 +00:00
Chris PeBenito
bc1fbab472 interface review, and remove net_raw from raw node sends. only give 
capability for raw send on an interface
 2005-06-17 18:59:34 +00:00
Chris PeBenito
c9b7f1a28e add rw_term_perms 2005-06-17 18:56:23 +00:00
Chris PeBenito
5e6f9e5aac services interfaces review 2005-06-17 18:41:07 +00:00
Chris PeBenito
7f2e39b8e6 review of admin interfaces 2005-06-17 18:27:08 +00:00
Chris PeBenito
139520a233 review of system interfaces 2005-06-17 17:59:26 +00:00
Chris PeBenito
a7c3a1b920 eliminate _depend macros 2005-06-16 21:06:29 +00:00
Chris PeBenito
0e721690dc misc cleanup 2005-06-16 20:54:18 +00:00
Chris PeBenito
562cc2bd6c reorder gpg tunable for alpha sorting 2005-06-16 20:34:57 +00:00
Chris PeBenito
d35c621eb0 add a couple more nfs and cifs interfaces, to cover most of the 
use_(nfs|cifs)_home_dirs tunable
 2005-06-16 20:33:51 +00:00
Chris PeBenito
77c124c8cd eliminate _depend macros 2005-06-16 20:30:59 +00:00
Chris PeBenito
8c2f3ac695 have can_exec add a require block 2005-06-16 20:30:07 +00:00
Chris PeBenito
4ce9bdf0aa fix 2005-06-15 21:08:58 +00:00
Chris PeBenito
815ff39128 initialize description to None so missing descriptions dont show wrong data 2005-06-15 20:53:19 +00:00
Chris PeBenito
102a59ba77 add comments for clean and bare 2005-06-15 15:45:54 +00:00
Chris PeBenito
337e4afa22 for use until we have a full README 2005-06-15 15:34:44 +00:00
Chris PeBenito
c592e52e38 add install-src target 2005-06-15 14:14:20 +00:00
Chris PeBenito
f08f5a030e initial commit 2005-06-15 14:10:38 +00:00
Chris PeBenito
c7b41e9536 add CFLAGS, and drop -C from install since it doesn't exist in all distros, 
and its function is useless
 2005-06-15 14:08:18 +00:00
Chris PeBenito
8eaa723d28 put user line in col 1, since genhomedircon breaks otherwise 2005-06-15 14:07:20 +00:00
Chris PeBenito
828e03f635 initial commit 2005-06-15 13:53:48 +00:00
Chris PeBenito
5e0da6a03e finish renaming system/selinux to system/selinuxutil 2005-06-14 20:48:34 +00:00
Chris PeBenito
ff7bc148e4 move security_t to selinux module 2005-06-14 20:40:09 +00:00
Chris PeBenito
be4a8011d4 move selinux to selinuxutil 2005-06-14 20:12:46 +00:00
Chris PeBenito
8bd6789954 move constraints interfaces to domain module. move sysfs and usbfs to 
devices module
 2005-06-14 19:56:46 +00:00
Chris PeBenito
8ae194f629 when a generated file is already generated, it shows up in the generated_* 
variable, and also the make wildcard, so use sort, since it removes
duplicates.
 2005-06-14 18:39:55 +00:00
Chris PeBenito
810f2b7155 fix typo 2005-06-14 18:15:01 +00:00
Chris PeBenito
1beba1c654 fix up appconfig, and generate $(installdir)/booleans 2005-06-14 18:13:55 +00:00
Chris PeBenito
b57dd19400 stray renames in distro_redhat 2005-06-14 17:36:21 +00:00
Chris PeBenito
d2d6c8ce17 fix makefile to only rebuild modules.conf and tunables.conf explicitly 2005-06-14 15:54:55 +00:00
Chris PeBenito
e75f78666c initial commit 2005-06-14 14:43:15 +00:00
Chris PeBenito
3eed10909e convert relevant conditionals into tunable_policy 2005-06-14 14:43:04 +00:00
Chris PeBenito
92e928e1bd start making genhomedircon work 2005-06-13 21:16:05 +00:00
Chris PeBenito
c24ac9c51c rename requires_block_template to gen_require 2005-06-13 20:51:09 +00:00
Chris PeBenito
fa7bea8feb rename requires_block_tempalte to gen_require 2005-06-13 20:47:04 +00:00
Chris PeBenito
34c8fabeeb tunables work 2005-06-13 20:44:23 +00:00
Chris PeBenito
31908be07f a few missed renames, and start fixing up tunables 2005-06-13 20:27:32 +00:00
Chris PeBenito
94670f292b fix 2005-06-13 20:10:01 +00:00
Chris PeBenito
eec67390d7 make summary and description optional in interfaces until we can clean it up 2005-06-13 20:03:08 +00:00
Chris PeBenito
5a45e70177 rename setattr removable_device_t 2005-06-13 20:00:36 +00:00
Karl MacMillan
8700497fb1 Updates to documentation. 2005-06-13 19:22:00 +00:00
Chris PeBenito
61bbe5312e add "this is a generated file!" comment to top of corenetwork.{te,if} 2005-06-13 18:40:08 +00:00
Chris PeBenito
3c6d78b920 ul end tag fix, and css tweak 2005-06-13 18:07:35 +00:00
Chris PeBenito
fae6ff9aab update from method 2005-06-13 17:41:38 +00:00
Chris PeBenito
d9507b1874 fix xml 2005-06-13 17:40:51 +00:00
Chris PeBenito
c9428d33dc renaming insanity 2005-06-13 17:35:46 +00:00
Chris PeBenito
b2bf0b5c98 overwrite the generated .te file instead of append 2005-06-13 17:32:40 +00:00
Karl MacMillan
f0c985ca80 Devices rename. 2005-06-13 16:22:32 +00:00
Chris PeBenito
12b559a402 move policy.xml to doc, so it doesnt get deleted on a make clean 2005-06-13 12:55:56 +00:00
Chris PeBenito
bec110090f make module description optional and interface summary optional until 
everything is updated
 2005-06-10 21:12:55 +00:00
Chris PeBenito
e214f62733 html tag updates 2005-06-10 20:39:41 +00:00
Karl MacMillan
bef4f00aa9 Added missing interface. 2005-06-10 14:33:06 +00:00
Chris PeBenito
d46f023278 more updates from method 2005-06-10 01:35:43 +00:00
Chris PeBenito
0fd9dc55cf renaming insanity 2005-06-10 01:01:13 +00:00
Chris PeBenito
24040829d0 fix can_exec 2005-06-10 01:00:48 +00:00
Chris PeBenito
e1db6e9d0d policy.xml is now in tmp/ 2005-06-09 23:06:49 +00:00
Chris PeBenito
cab7c00ff4 make macro work 2005-06-09 23:06:23 +00:00
Chris PeBenito
e3fd778b8f add can_exec 2005-06-09 23:06:07 +00:00
Chris PeBenito
1b8d67d157 fix 2005-06-09 22:46:38 +00:00
Karl MacMillan
c75e65afad Templates for menu ordering change. 2005-06-09 21:19:37 +00:00
Chris PeBenito
a154cd45f3 reorder 2005-06-09 21:07:58 +00:00
Karl MacMillan
d6b0f3712f Fixed doc tool to order menus. 2005-06-09 21:05:33 +00:00
Chris PeBenito
5d9417870c speed improvement 2005-06-09 20:53:45 +00:00
Chris PeBenito
588ffaeb7f kernel.if renaming 2005-06-09 20:50:17 +00:00
Chris PeBenito
eda201efe8 more renaming and xml 2005-06-09 19:52:50 +00:00
Chris PeBenito
eca5b2dd79 rename 2005-06-09 19:22:27 +00:00
Chris PeBenito
997bd99521 fix bracket display for optional parameters 2005-06-09 19:21:32 +00:00
Chris PeBenito
20030ef5d6 add back html page generation 2005-06-09 19:02:52 +00:00
Chris PeBenito
1601fb3738 fixes and remove debug code 2005-06-09 19:02:32 +00:00
Chris PeBenito
fe3bd5a557 more indentation for modules in the menu 2005-06-09 18:56:50 +00:00
Chris PeBenito
eb437dd092 initial commit 2005-06-09 18:17:25 +00:00
Chris PeBenito
5a3299bd30 updates 2005-06-09 18:16:51 +00:00
Chris PeBenito
cc41a97c99 aliases 2005-06-09 18:08:26 +00:00
Chris PeBenito
7591e83cba fix layer in module tag 2005-06-09 17:56:38 +00:00
Chris PeBenito
c6ebefd2f2 rename 2005-06-09 17:51:40 +00:00
Chris PeBenito
d90b274e40 for now, drop infoflow tags 2005-06-09 17:23:53 +00:00
Chris PeBenito
16e1cf48cd make policy.xml depend on all if's being generated 2005-06-09 17:23:23 +00:00
Chris PeBenito
dc67f782e4 aliases 2005-06-09 17:21:52 +00:00
Chris PeBenito
0a10b1fa12 aliases 2005-06-09 15:32:23 +00:00
Chris PeBenito
fe040c9777 renaming and xml 2005-06-09 15:20:31 +00:00
Chris PeBenito
dd822947d2 aliases 2005-06-09 14:50:48 +00:00
Chris PeBenito
80048ca5d2 aliases 2005-06-09 14:26:05 +00:00
Chris PeBenito
5d31560b4d genhomedircon entries 2005-06-08 22:32:43 +00:00
Chris PeBenito
5552ed88f3 initial commit 2005-06-08 22:32:33 +00:00
Chris PeBenito
e12e573815 better handling of generated files 2005-06-08 22:14:26 +00:00
Chris PeBenito
f2e4ab3a99 make corenetwork generation explicit, rather then on-the-fly 2005-06-08 21:46:39 +00:00
Chris PeBenito
7edd02d4f1 aliasing 2005-06-08 21:07:03 +00:00
Chris PeBenito
0350b1dc7f support_modules is finally gone, and modules.disable->modules.conf 2005-06-08 21:03:00 +00:00
Chris PeBenito
b29d23f315 initial commit 2005-06-08 20:49:16 +00:00
Chris PeBenito
c2c00bee05 add aliases 2005-06-08 20:28:45 +00:00
Karl MacMillan
72bdc60860 Moved and changed user_mls to gen_user. 2005-06-08 20:23:43 +00:00
Karl MacMillan
eb5e237573 Renamed support macros for consistency. 2005-06-08 20:23:12 +00:00
Chris PeBenito
eac7c31055 make infoflow optional 2005-06-08 20:08:24 +00:00
Chris PeBenito
dc5daf8b99 overhaul 2005-06-08 19:57:26 +00:00
Chris PeBenito
9f72a2655f renaming 2005-06-08 18:40:30 +00:00
Chris PeBenito
0c5a288e98 interface renaming 2005-06-08 18:00:04 +00:00
Chris PeBenito
1694dee685 interface renaming 2005-06-08 16:18:08 +00:00
Chris PeBenito
066d463147 comment fix 2005-06-08 16:16:41 +00:00
Chris PeBenito
84eb353cd9 more fixes 2005-06-08 13:44:23 +00:00
Chris PeBenito
a7197232e8 add can_exec 2005-06-08 13:41:05 +00:00
Chris PeBenito
763c441e3b start renaming filesystem interfaces 2005-06-08 13:12:00 +00:00
Chris PeBenito
a9ec5414d1 add interface macro 2005-06-08 13:11:47 +00:00
Chris PeBenito
b46609f09f fix missing _socket in class 2005-06-08 13:08:01 +00:00
Chris PeBenito
3865d6b95e add xml 2005-06-07 22:36:07 +00:00
Chris PeBenito
ddea18b0ad more tunable work 2005-06-07 22:26:39 +00:00
Chris PeBenito
758618b1f3 initial commit 2005-06-07 22:26:11 +00:00
Karl MacMillan
6847e8295c First cut at fixing fc_sort. 2005-06-07 21:20:14 +00:00
Chris PeBenito
2224ed3aa5 remove java 2005-06-07 18:50:35 +00:00
Chris PeBenito
9c25fdd816 add updated dtd 2005-06-07 18:49:44 +00:00
Chris PeBenito
254bbc7bb3 start switching over to new tunable infrastructure 2005-06-07 18:45:47 +00:00
Chris PeBenito
3a80ec29c6 initial tunable tool fixes 2005-06-07 18:35:18 +00:00
Chris PeBenito
8fb301e9ab 32 is space. ascii <= 32 is all whitespace 2005-06-07 18:26:28 +00:00
Chris PeBenito
89ec2321b7 initial commit 2005-06-07 18:23:00 +00:00
Chris PeBenito
0fbe15dc8a start adding module disable and tunable infrastructure 2005-06-07 15:11:47 +00:00
Chris PeBenito
02b584a174 initial commit 2005-06-07 15:10:43 +00:00
Chris PeBenito
43bc3906c5 initial commit 2005-06-07 14:46:31 +00:00
Chris PeBenito
2d68932a8d fix broken macros 2005-06-07 14:46:20 +00:00
Chris PeBenito
a1d2e8ab29 add domain(_auto)_trans 2005-06-07 14:43:14 +00:00
Chris PeBenito
eb7f9a34cb move audit to logging 2005-06-07 14:27:19 +00:00
Chris PeBenito
ef5e55c9fa move to logging 2005-06-07 14:16:14 +00:00
Chris PeBenito
09693356ac fix appconfig dir 2005-06-06 18:16:41 +00:00
Chris PeBenito
b67488e36a rework policy build options 2005-06-06 18:13:38 +00:00
Chris PeBenito
0c73cd2526 change over to some perm set macros. add indentation 2005-06-03 12:25:14 +00:00
Chris PeBenito
36e54b81f7 initial commit of xml->html conversion 2005-06-02 20:39:32 +00:00
Chris PeBenito
4196997813 add some indentation 2005-06-02 20:26:48 +00:00
Chris PeBenito
d115660e3b change network verb in corenetwork to sendrecv 2005-06-02 18:55:47 +00:00
Chris PeBenito
cabfa520aa move fs_use and isids to respective modules 2005-06-02 15:39:10 +00:00
Chris PeBenito
ca83afe7e6 start breaking up support_macros into macros dir 2005-06-02 14:31:31 +00:00
Chris PeBenito
44cda51b4f add some comments. make install target install appconfig files 2005-06-01 20:17:47 +00:00
Chris PeBenito
f5d4efd756 add missing system_crond_t transition pieces 2005-06-01 20:16:36 +00:00
Chris PeBenito
98af6c7763 remove extra whitespace 2005-06-01 19:18:54 +00:00
Chris PeBenito
de96491bda move global.if to support_macros at top level 2005-06-01 19:17:13 +00:00
Chris PeBenito
6d9915d615 add missing pieces of crond_t -> $1_crond_t transition 2005-06-01 19:01:28 +00:00
Chris PeBenito
0447352aec use variable for dtd. move policy type to variant section 2005-06-01 19:01:00 +00:00
Chris PeBenito
004db90d3f do dtd verification on xml. fix current xml to be valid 2005-06-01 18:34:34 +00:00
Chris PeBenito
3c62aa31a9 fix policy.xml to not have templates for generated interfaces 2005-06-01 17:45:06 +00:00
Chris PeBenito
2fc84fd172 move user_u and root to users 2005-06-01 17:40:22 +00:00
Chris PeBenito
aa40608fbe remove copyright until licensing issues are resolved 2005-06-01 17:34:13 +00:00
Chris PeBenito
2926f9c788 better handling of appconfig dir 2005-06-01 17:27:56 +00:00
Chris PeBenito
f267dfbb8b fix module name in xml 2005-06-01 17:27:39 +00:00
Chris PeBenito
134191be67 move flask dir to top level, and update them from nsa cvs. move files in 
misc to top level.  make mls support work.
 2005-06-01 15:40:37 +00:00
Chris PeBenito
7555aab027 initial commit 2005-06-01 14:37:51 +00:00
Chris PeBenito
e32d52ba47 fix xml 2005-06-01 14:17:43 +00:00
Chris PeBenito
1293184998 last fixes for cab 2005-06-01 13:51:54 +00:00
Chris PeBenito
d115b24712 more cab work 2005-05-31 23:02:11 +00:00
Chris PeBenito
3b857eae09 add some file_t interfaces, and console write 2005-05-31 21:25:45 +00:00
Chris PeBenito
b8fca44d3f initial commit 2005-05-31 20:39:15 +00:00
Chris PeBenito
b4c3f54eca initial commit 2005-05-31 19:53:54 +00:00
Chris PeBenito
4bf4ed9e68 permission set macro changes, plus more cab related work 2005-05-31 19:52:57 +00:00
Chris PeBenito
08eb9d1a33 fix tmpfs assoc call 2005-05-31 13:45:37 +00:00
Chris PeBenito
f5c42bd80b many fixes from cab work 2005-05-30 21:17:20 +00:00
Chris PeBenito
32e53ac1b8 cleanup inspired by sediff 2005-05-27 21:56:01 +00:00
Chris PeBenito
16e9b0cb6b rpmbuild_t is not a system domain. also mark it as most likely dead. 2005-05-27 21:29:54 +00:00
Chris PeBenito
c6fd1f85ba restructure users, and add signalling 2005-05-27 20:44:05 +00:00
Chris PeBenito
07da0af7bd tmpfs associate for redhat 2005-05-27 20:43:37 +00:00
Chris PeBenito
dd31631500 fix ordering and put in var_lib_t 2005-05-27 20:29:17 +00:00
Chris PeBenito
d490eb6b5c fixes from cab 2005-05-26 20:38:45 +00:00
Chris PeBenito
c220381539 initial commit 2005-05-26 15:50:53 +00:00
Chris PeBenito
efd8ede34d many fixes from cab testing 2005-05-25 20:58:21 +00:00