Commit Graph

1102 Commits

Author SHA1 Message Date
Chris PeBenito
c890249a4c use network_port()s to declare packets, since packets match up with these ports 2006-05-24 21:28:49 +00:00
Chris PeBenito
6293baeacc allow iptables to relabelto all packets 2006-05-23 19:07:22 +00:00
Chris PeBenito
e37158e6b9 initial support for packets 2006-05-23 18:31:02 +00:00
Chris PeBenito
a013b55e3e initial addition of packet policy, allow unconfined to send unlabeled packets. 2006-05-22 20:47:05 +00:00
Chris PeBenito
e126047c73 no user contexts for strict policy 2006-05-22 18:24:19 +00:00
Chris PeBenito
263721b9a4 dontaudit just the kernel fd use, the others may indicate problems for other reasons. 2006-05-19 20:02:41 +00:00
Chris PeBenito
8fa4943032 add back stray file descriptors dontaudit for rhel4 2006-05-19 19:52:18 +00:00
Chris PeBenito
c55b6f28ee add packet security class 2006-05-19 17:45:46 +00:00
Chris PeBenito
2288381d08 cleanup init_t a little 2006-05-19 17:44:27 +00:00
Chris PeBenito
41a0f8bf3b move selinux unconfined to attribute setup, clean up unconfined interface a bit 2006-05-19 15:15:45 +00:00
Chris PeBenito
9d4538024a patch from russell Fri, 19 May 2006 20:28:29 +1000 2006-05-19 14:06:18 +00:00
Chris PeBenito
87eb5c84e7 patch from dan Thu, 18 May 2006 11:56:22 -0400 2006-05-19 14:02:24 +00:00
Chris PeBenito
46fc46cfdd fixes for gentoo 2006-05-19 13:14:37 +00:00
Chris PeBenito
b516e80f24 start cleaning up node binding and raw if/node access 2006-05-17 20:55:12 +00:00
Chris PeBenito
165b42d230 most of patch from dan Mon, 15 May 2006 11:58:01 -0400 2006-05-17 14:50:31 +00:00
Chris PeBenito
b0bdcba0e8 update admin template docs 2006-05-16 13:36:57 +00:00
Chris PeBenito
28401d2a1d gentoo has passwd in /bin 2006-05-15 20:43:10 +00:00
Chris PeBenito
21d173a460 remove rules added to make sediff easier 2006-05-12 19:37:56 +00:00
Chris PeBenito
e9a4084de1 clean up some apache networking perms 2006-05-12 18:43:31 +00:00
Chris PeBenito
013d746abc add apache_manage_all_content, bug 1602 2006-05-10 20:24:40 +00:00
Chris PeBenito
88bc7af316 fix sendmail_exec_t encapsulation breakage 2006-05-10 18:42:22 +00:00
Chris PeBenito
ac9db9b54e document remaining interfaces w/o XML. turn on warnings for missing XML. 2006-05-10 18:09:08 +00:00
Chris PeBenito
727758a042 make executable 2006-05-10 18:08:40 +00:00
Chris PeBenito
e8ffdfc78f document postfix templates, remove postfix_public_domain_template() 2006-05-10 18:08:06 +00:00
Chris PeBenito
e58da022e9 document postfix templates, remove postfix_public_domain_template() 2006-05-10 18:07:31 +00:00
Chris PeBenito
f827eb6320 fixes from testing 2006-05-09 20:13:25 +00:00
Chris PeBenito
88d68f60bc remove unreproducible notatsecure problem, bug 1411 2006-05-09 18:39:35 +00:00
Chris PeBenito
54d01c821f pyzor does not have a per userdomain template 2006-05-09 18:03:33 +00:00
Chris PeBenito
4c44b8d594 ssh_keysign_exec_t should be a bin 2006-05-09 15:24:11 +00:00
Chris PeBenito
6bd449484d add nx, bug 1535 2006-05-09 15:12:17 +00:00
Chris PeBenito
46bec43425 add clockspeed from petre rodan 2006-05-08 14:16:10 +00:00
Chris PeBenito
bf2f29a845 fix broken macro calls 2006-05-08 13:22:11 +00:00
Chris PeBenito
858a1faefb dontaudit chroot, glibc compile is ok without it 2006-05-08 13:21:36 +00:00
Chris PeBenito
20e929e0a1 add razor, bug 1542 2006-05-05 19:26:50 +00:00
Chris PeBenito
12cd9a06bf add portslave, bug 1538 2006-05-05 18:51:42 +00:00
Chris PeBenito
48b1d0b0a0 add afs, bug 1514 2006-05-05 17:53:45 +00:00
Chris PeBenito
f40b22bf42 add appletalk socket for cups 2006-05-04 20:40:49 +00:00
Chris PeBenito
6ba4d96490 add dcc, bug 1522 2006-05-04 17:44:26 +00:00
Chris PeBenito
988930d3a7 HOME_DIR only on strict 2006-05-03 20:32:35 +00:00
Chris PeBenito
8bf6f58e76 split type transition from auth_manage_shadow 2006-05-03 20:29:14 +00:00
Chris PeBenito
e993594365 patch from dan Tue, 02 May 2006 10:08:17 -0400, includes pyzor, bug 1541 2006-05-03 19:58:01 +00:00
Chris PeBenito
2e9cd95e07 add oav, bug 1536 2006-05-02 19:42:04 +00:00
Chris PeBenito
6714c268a5 split out filetrans part of files_manage_etc_runtime_files(), bug 1663 2006-05-02 18:34:35 +00:00
Chris PeBenito
5bd9fd7bc2 add openca, bug 1660 2006-05-02 17:42:41 +00:00
Chris PeBenito
5706facdf2 make dupe interface and templates a fatal error. 2006-05-02 14:34:32 +00:00
Chris PeBenito
b6cc2f91f4 add sxid, bug 1661 2006-05-01 20:36:13 +00:00
Chris PeBenito
e8bf4dc9ec fix optional 2006-05-01 20:35:26 +00:00
Chris PeBenito
3f1c086f9b add monop, bug 1659. 2006-05-01 19:45:30 +00:00
Chris PeBenito
d40c0ecf7a fix up entrypoints 2006-05-01 19:11:54 +00:00
Chris PeBenito
27881870eb add missing entrypoint 2006-05-01 15:06:17 +00:00
Chris PeBenito
512e8cf9ff remove broad ldap access 2006-04-28 20:44:15 +00:00
Chris PeBenito
d592b69e87 add watchdog, bug 1662 2006-04-28 20:20:40 +00:00
Chris PeBenito
050f364c01 add ircd, bug 1658 2006-04-28 19:23:17 +00:00
Chris PeBenito
f30e6ea8c6 add yam, bug 1554 2006-04-28 18:30:02 +00:00
Chris PeBenito
b6d37ebb7c add munin, bug 1530 2006-04-28 15:50:06 +00:00
Chris PeBenito
6a21cefd8b add nsd, bug 1534 2006-04-27 19:41:35 +00:00
Chris PeBenito
b6b5747bac add authbind, bug 1516 2006-04-27 18:11:26 +00:00
Chris PeBenito
06e2775687 add nrpe to nagios, bug 1533 2006-04-27 16:37:40 +00:00
Chris PeBenito
03d797cc97 fixes for confined vmware sessions 2006-04-26 20:30:08 +00:00
Chris PeBenito
677de4d479 add template doc 2006-04-26 19:24:38 +00:00
Chris PeBenito
5b7b2b024a fixes for testing with unconfined vms 2006-04-26 19:03:41 +00:00
Chris PeBenito
a6a638dc18 add vmware, bug 1389 2006-04-26 18:18:15 +00:00
Chris PeBenito
0e1c461e05 more of patch from dan Thu, 20 Apr 2006 14:06:03 -0400 2006-04-26 15:22:33 +00:00
Chris PeBenito
5540e76ac7 add rssh, bug 1544 2006-04-25 19:17:43 +00:00
Chris PeBenito
70b8a7231e add ddclient, bug 1523 2006-04-25 17:50:31 +00:00
Chris PeBenito
4d73bb4f97 add imaze, bug 1528 2006-04-25 15:33:44 +00:00
Chris PeBenito
9b244cb0d4 add soundserver, bug 1547 2006-04-25 15:13:59 +00:00
Chris PeBenito
9e725d8a1a add dnsmasq, bug 1524 2006-04-25 14:45:14 +00:00
Chris PeBenito
53bf559b07 fix stray texrel_shlib_t references 2006-04-25 13:58:06 +00:00
Chris PeBenito
6cd6d7aa1f add gift, bug 1527 2006-04-24 20:21:27 +00:00
Chris PeBenito
57f233b01f add backup, bug 1517 2006-04-24 18:58:46 +00:00
Chris PeBenito
8536924eec add tripwire, bug 1550 2006-04-24 18:00:32 +00:00
Chris PeBenito
0377627083 misc cleanup 2006-04-24 14:52:01 +00:00
Chris PeBenito
82f1dfb5e8 fixes 2006-04-21 18:00:51 +00:00
Chris PeBenito
02f9b21e8c first cut of hierarchical policy 2006-04-21 15:08:21 +00:00
Chris PeBenito
fb63d0b537 add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00
Chris PeBenito
85a0f96798 patch from dan Tue, 18 Apr 2006 23:16:15 -0400 2006-04-19 15:25:22 +00:00
Chris PeBenito
5d03fc244b add gatekeeper, bug 1526 2006-04-18 20:35:09 +00:00
Chris PeBenito
478f0caee2 fix up openvpn port 2006-04-18 15:32:04 +00:00
Chris PeBenito
e3e37e853a add asterisk and ntop. 2006-04-18 13:44:07 +00:00
Chris PeBenito
eeb8ea4b81 fix bad rules in samba, bug 1623 2006-04-17 19:51:46 +00:00
Chris PeBenito
abc73a7764 second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:54:57 +00:00
Chris PeBenito
cdc86ee57f first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:32:54 +00:00
Chris PeBenito
2ba3de9690 add openvpn from petre rodan 2006-04-14 20:07:01 +00:00
Chris PeBenito
b057be8d6d add resmgr, bug 1543 2006-04-14 19:13:17 +00:00
Chris PeBenito
e38cb71833 add semanage transition for unconfined 2006-04-14 17:34:47 +00:00
Chris PeBenito
61cf534fee add jabber, bug 1529 2006-04-12 20:10:47 +00:00
Chris PeBenito
0cc79fcc63 add perdition, bug 1537 2006-04-12 19:24:21 +00:00
Chris PeBenito
5501be59f0 add speedtouch, bug 1548 2006-04-12 18:22:54 +00:00
Chris PeBenito
fa8951606e add transproxy, bug 1549 2006-04-12 18:02:55 +00:00
Chris PeBenito
4e656a1255 add uptime, bug 1551 2006-04-12 17:41:09 +00:00
Chris PeBenito
c655ec47f9 second part of dans patch Tue, 11 Apr 2006 09:25:24 -0400 2006-04-12 16:58:23 +00:00
Chris PeBenito
8cfa5a00e1 first part of dans patch Tue, 11 Apr 2006 09:25:24 -0400 2006-04-12 15:04:28 +00:00
Chris PeBenito
6f8cda9673 add courier, bug 1520 2006-04-11 15:28:37 +00:00
Chris PeBenito
f82f22cf7c fix assertions 2006-04-11 14:19:38 +00:00
Chris PeBenito
b518fc2edf move over to attributes for unconfined interfaces. 2006-04-10 21:04:51 +00:00
Chris PeBenito
5516db6703 add xprint, bug 1553 2006-04-07 20:53:39 +00:00
Chris PeBenito
3eec24bdf4 add uwimap, bug 1552 2006-04-07 19:37:16 +00:00
Chris PeBenito
413982c6a3 move xconsole to xserver mod 2006-04-06 19:27:41 +00:00
Chris PeBenito
fc70c9d38a remove devfs_control_t 2006-04-06 15:14:11 +00:00