Chris PeBenito
|
c5657a262b
|
add generic packet interfaces, and fix up unconfined handling
|
2006-05-25 17:01:36 +00:00 |
|
Chris PeBenito
|
e4b30fb010
|
remove debugging statemnet
|
2006-05-25 16:40:52 +00:00 |
|
Chris PeBenito
|
6962bb3283
|
add makefile support for netfilter contexts
|
2006-05-25 15:14:19 +00:00 |
|
Chris PeBenito
|
6b873c4da0
|
fix copyright years
|
2006-05-25 15:09:06 +00:00 |
|
Chris PeBenito
|
d24259b7a7
|
fix handling of comments at the end of the line, and add copyright
|
2006-05-25 15:04:39 +00:00 |
|
Chris PeBenito
|
df15d004ef
|
fix chain declaration
|
2006-05-25 14:10:55 +00:00 |
|
Chris PeBenito
|
d6d8b7037d
|
add command line arguments support, and mls/mcs support
|
2006-05-25 14:02:41 +00:00 |
|
Chris PeBenito
|
29a0519186
|
add compute_av for doing rootok check
|
2006-05-25 13:14:08 +00:00 |
|
Chris PeBenito
|
c890249a4c
|
use network_port()s to declare packets, since packets match up with these ports
|
2006-05-24 21:28:49 +00:00 |
|
Chris PeBenito
|
d6c62e7df7
|
initial commit of netfilter config generator tool, still needs work on mls/mcs side.
|
2006-05-24 21:27:52 +00:00 |
|
Chris PeBenito
|
6293baeacc
|
allow iptables to relabelto all packets
|
2006-05-23 19:07:22 +00:00 |
|
Chris PeBenito
|
e37158e6b9
|
initial support for packets
|
2006-05-23 18:31:02 +00:00 |
|
Chris PeBenito
|
a013b55e3e
|
initial addition of packet policy, allow unconfined to send unlabeled packets.
|
2006-05-22 20:47:05 +00:00 |
|
Chris PeBenito
|
e126047c73
|
no user contexts for strict policy
|
2006-05-22 18:24:19 +00:00 |
|
Chris PeBenito
|
263721b9a4
|
dontaudit just the kernel fd use, the others may indicate problems for other reasons.
|
2006-05-19 20:02:41 +00:00 |
|
Chris PeBenito
|
8fa4943032
|
add back stray file descriptors dontaudit for rhel4
|
2006-05-19 19:52:18 +00:00 |
|
Chris PeBenito
|
c55b6f28ee
|
add packet security class
|
2006-05-19 17:45:46 +00:00 |
|
Chris PeBenito
|
2288381d08
|
cleanup init_t a little
|
2006-05-19 17:44:27 +00:00 |
|
Chris PeBenito
|
41a0f8bf3b
|
move selinux unconfined to attribute setup, clean up unconfined interface a bit
|
2006-05-19 15:15:45 +00:00 |
|
Chris PeBenito
|
9d4538024a
|
patch from russell Fri, 19 May 2006 20:28:29 +1000
|
2006-05-19 14:06:18 +00:00 |
|
Chris PeBenito
|
87eb5c84e7
|
patch from dan Thu, 18 May 2006 11:56:22 -0400
|
2006-05-19 14:02:24 +00:00 |
|
Chris PeBenito
|
46fc46cfdd
|
fixes for gentoo
|
2006-05-19 13:14:37 +00:00 |
|
Chris PeBenito
|
5f4b5698c1
|
fix example.te
|
2006-05-18 17:55:03 +00:00 |
|
Chris PeBenito
|
b516e80f24
|
start cleaning up node binding and raw if/node access
|
2006-05-17 20:55:12 +00:00 |
|
Chris PeBenito
|
165b42d230
|
most of patch from dan Mon, 15 May 2006 11:58:01 -0400
|
2006-05-17 14:50:31 +00:00 |
|
Chris PeBenito
|
6c5614dca3
|
move old strict, targeted, and mls policies to archive
|
2006-05-16 18:36:25 +00:00 |
|
Chris PeBenito
|
75c1c261c1
|
add info on build options
|
2006-05-16 15:05:40 +00:00 |
|
Chris PeBenito
|
b0bdcba0e8
|
update admin template docs
|
2006-05-16 13:36:57 +00:00 |
|
Chris PeBenito
|
28401d2a1d
|
gentoo has passwd in /bin
|
2006-05-15 20:43:10 +00:00 |
|
Chris PeBenito
|
fc47b34c82
|
Add a copy of genhomedircon for monolithic policy building, so that a policycoreutils package update is not required for RHEL4 systems.
|
2006-05-15 15:21:43 +00:00 |
|
Chris PeBenito
|
21d173a460
|
remove rules added to make sediff easier
|
2006-05-12 19:37:56 +00:00 |
|
Chris PeBenito
|
e9a4084de1
|
clean up some apache networking perms
|
2006-05-12 18:43:31 +00:00 |
|
Chris PeBenito
|
013d746abc
|
add apache_manage_all_content, bug 1602
|
2006-05-10 20:24:40 +00:00 |
|
Chris PeBenito
|
88bc7af316
|
fix sendmail_exec_t encapsulation breakage
|
2006-05-10 18:42:22 +00:00 |
|
Chris PeBenito
|
ac9db9b54e
|
document remaining interfaces w/o XML. turn on warnings for missing XML.
|
2006-05-10 18:09:08 +00:00 |
|
Chris PeBenito
|
727758a042
|
make executable
|
2006-05-10 18:08:40 +00:00 |
|
Chris PeBenito
|
e8ffdfc78f
|
document postfix templates, remove postfix_public_domain_template()
|
2006-05-10 18:08:06 +00:00 |
|
Chris PeBenito
|
e58da022e9
|
document postfix templates, remove postfix_public_domain_template()
|
2006-05-10 18:07:31 +00:00 |
|
Chris PeBenito
|
eac0b8bd49
|
status update
|
2006-05-10 14:17:51 +00:00 |
|
Chris PeBenito
|
f827eb6320
|
fixes from testing
|
2006-05-09 20:13:25 +00:00 |
|
Chris PeBenito
|
88d68f60bc
|
remove unreproducible notatsecure problem, bug 1411
|
2006-05-09 18:39:35 +00:00 |
|
Chris PeBenito
|
54d01c821f
|
pyzor does not have a per userdomain template
|
2006-05-09 18:03:33 +00:00 |
|
Chris PeBenito
|
4c44b8d594
|
ssh_keysign_exec_t should be a bin
|
2006-05-09 15:24:11 +00:00 |
|
Chris PeBenito
|
6bd449484d
|
add nx, bug 1535
|
2006-05-09 15:12:17 +00:00 |
|
Chris PeBenito
|
46bec43425
|
add clockspeed from petre rodan
|
2006-05-08 14:16:10 +00:00 |
|
Chris PeBenito
|
bf2f29a845
|
fix broken macro calls
|
2006-05-08 13:22:11 +00:00 |
|
Chris PeBenito
|
858a1faefb
|
dontaudit chroot, glibc compile is ok without it
|
2006-05-08 13:21:36 +00:00 |
|
Chris PeBenito
|
20e929e0a1
|
add razor, bug 1542
|
2006-05-05 19:26:50 +00:00 |
|
Chris PeBenito
|
12cd9a06bf
|
add portslave, bug 1538
|
2006-05-05 18:51:42 +00:00 |
|
Chris PeBenito
|
48b1d0b0a0
|
add afs, bug 1514
|
2006-05-05 17:53:45 +00:00 |
|