Commit Graph

666 Commits

Author SHA1 Message Date
Daniel J Walsh
11ac4bcde1 - Additional ports for vnc and allow qemu and libvirt to search all
directories
2008-02-02 15:42:44 +00:00
Daniel J Walsh
b19d470cd4 - Update to upstream
- Add libvirt policy
- add qemu policy
2008-02-02 06:30:04 +00:00
Daniel J Walsh
e1060e24d5 - Allow fail2ban to create a socket in /var/run 2008-02-01 13:49:05 +00:00
Daniel J Walsh
59d6fbb642 - Allow allow_httpd_mod_auth_pam to work 2008-01-31 20:59:05 +00:00
Daniel J Walsh
7c124f5e42 - Allow allow_httpd_mod_auth_pam to work 2008-01-31 19:32:51 +00:00
Daniel J Walsh
f18a882ba5 - Add audisp policy and prelude 2008-01-30 21:34:13 +00:00
Daniel J Walsh
0f70114e58 - Allow all user roles to executae samba net command 2008-01-30 13:56:22 +00:00
Daniel J Walsh
7c2be34d14 - Allow usertypes to read/write noxattr file systems 2008-01-28 16:48:49 +00:00
Daniel J Walsh
7c7d59935b - Fix nsplugin to allow flashplugin to work in enforcing mode 2008-01-24 18:12:25 +00:00
Daniel J Walsh
0939872058 - Allow pam_selinux_permit to kill all processes 2008-01-23 18:24:12 +00:00
Daniel J Walsh
cc5bb89ef0 - Allow ptrace or user processes by users of same type
- Add boolean for transition to nsplugin
2008-01-22 19:46:50 +00:00
Daniel J Walsh
ef19b75773 - Allow nsplugin sys_nice, getsched, setsched 2008-01-22 17:35:34 +00:00
Daniel J Walsh
b3c8a04083 - Allow login programs to talk dbus to oddjob 2008-01-21 21:42:26 +00:00
Daniel J Walsh
98f84cb0ed - Add procmail_log support
- Lots of fixes for munin
2008-01-21 15:57:25 +00:00
Daniel J Walsh
4a2a836d9e - Allow setroubleshoot to read policy config and send audit messages 2008-01-17 13:50:17 +00:00
Daniel J Walsh
e26fef9ac3 - Allow setroubleshoot to read policy config and send audit messages 2008-01-15 20:43:04 +00:00
Daniel J Walsh
8a40d69539 - Allow users to execute all files in homedir, if boolean set
- Allow mount to read samba config
2008-01-14 19:47:11 +00:00
Daniel J Walsh
27c7d85aab - Fixes for xguest to run java plugin 2008-01-13 14:01:50 +00:00
Daniel J Walsh
754ef886a2 - Fixes for xguest to run java plugin 2008-01-13 13:20:05 +00:00
Daniel J Walsh
4be3ba520d - dontaudit pam_t and dbusd writing to user_home_t 2008-01-11 19:45:47 +00:00
Daniel J Walsh
5baf53aabd - Update gpg to allow reading of inotify 2008-01-08 19:58:56 +00:00
Daniel J Walsh
3648b64bcb - Change user and staff roles to work correctly with varied perms 2008-01-04 14:23:08 +00:00
Daniel J Walsh
f2ab704886 - Change user and staff roles to work correctly with varied perms 2008-01-04 13:38:45 +00:00
Daniel J Walsh
a502c55197 - Change user and staff roles to work correctly with varied perms 2008-01-03 22:13:09 +00:00
Daniel J Walsh
2568e2c2f4 - Fix munin log,
- Eliminate duplicate mozilla file context
- fix wpa_supplicant spec
2007-12-31 22:34:58 +00:00
Daniel J Walsh
c64ec27caa - Fix munin log,
- Eliminate duplicate mozilla file context
- fix wpa_supplicant spec
2007-12-31 21:47:39 +00:00
Daniel J Walsh
e0c99a57ed - Fix munin log,
- Eliminate duplicate mozilla file context
- fix wpa_supplicant spec
2007-12-31 21:06:02 +00:00
Daniel J Walsh
88ae3f5e0c - Fix role transition from unconfined_r to system_r when running rpm
- Allow unconfined_domains to communicate with user dbus instances
2007-12-30 15:12:11 +00:00
Daniel J Walsh
ed3c8b6ddb - Fix role transition from unconfined_r to system_r when running rpm
- Allow unconfined_domains to communicate with user dbus instances
2007-12-30 14:55:38 +00:00
Daniel J Walsh
5d13344539 - Fix role transition fro unconfined_r to system_r when running rpm 2007-12-24 12:01:17 +00:00
Daniel J Walsh
0ec33db4ff - Let all uncofined domains communicate with dbus unconfined 2007-12-21 07:58:04 +00:00
Daniel J Walsh
673eaaeafb - Run rpm in system_r 2007-12-20 21:26:31 +00:00
Daniel J Walsh
5615fe1b3d - Zero out customizable types 2007-12-19 21:45:51 +00:00
Daniel J Walsh
2587107071 - Fix definiton of admin_home_t 2007-12-19 18:00:58 +00:00
Daniel J Walsh
9a2cf87457 - Fix definiton of admin_home_t 2007-12-19 10:42:06 +00:00
Daniel J Walsh
2f257cb996 - Fix munin file context 2007-12-19 09:27:15 +00:00
Daniel J Walsh
194f6c15a0 - Allow cron to run unconfined apps 2007-12-18 19:58:20 +00:00
Daniel J Walsh
91c2fa9d31 - Allow cron to run unconfined apps 2007-12-18 13:59:31 +00:00
Daniel J Walsh
99d3676891 - Modify default login to unconfined_u 2007-12-17 22:49:08 +00:00
Daniel J Walsh
4d59c29e33 - Dontaudit dbus user client search of /root 2007-12-14 12:40:39 +00:00
Daniel J Walsh
5928688f61 - Dontaudit dbus user client search of /root 2007-12-13 22:42:22 +00:00
Daniel J Walsh
f14d51e840 - Update to upstream 2007-12-13 21:40:00 +00:00
Daniel J Walsh
76e3401243 - Update to upstream 2007-12-13 18:44:18 +00:00
Daniel J Walsh
4c6f2dd6a3 - Fixes for polkit
- Allow xserver to ptrace
2007-12-12 14:53:07 +00:00
Daniel J Walsh
7dfe3eb3ef - Add polkit policy
- Symplify userdom context, remove automatic per_role changes
2007-12-11 06:08:33 +00:00
Daniel J Walsh
9281e2cc41 - Update to upstream
- Allow httpd_sys_script_t to search users homedirs
2007-12-11 06:03:18 +00:00
Daniel J Walsh
a1341a85df - Update to upstream
- Allow httpd_sys_script_t to search users homedirs
2007-12-06 21:37:36 +00:00
Daniel J Walsh
02654b8fb4 - Update to upstream
- Allow httpd_sys_script_t to search users homedirs
2007-12-05 03:19:13 +00:00
Daniel J Walsh
d195fc7e87 - Update to upstreamddddddddddddd
- Allow httpd_sys_script_t to search users homedirs
2007-12-05 03:11:46 +00:00
Daniel J Walsh
320f3e6459 - Allow rpm_script to transition to unconfined_execmem_t 2007-12-04 00:15:27 +00:00