Dominick Grift
534e57b770
Various afs fixes.
...
Fix afs_initrc_domtrans.
Remove obsolete require in afs_admin.
Allow domains to search var to enable read write cache.
Allow domains to search bin to enable run afs executable.
Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-02-24 10:07:28 -05:00
Dominick Grift
6306637c89
mysqlmanagerd_var_run_t is not a domain type.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-02-24 10:00:05 -05:00
Chris PeBenito
1021460884
Minor tweaks and module version bump for 68cda59.
2010-02-23 13:58:18 -05:00
Chris Richards
68cda59844
Add MySQL Manager to MySQL policy module
...
Second submission to fix mistakes from first.
Signed-off-by: Chris Richards <gizmo@giz-works.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-02-23 13:23:42 -05:00
Chris PeBenito
1049180cd8
Automount patch from Dan Walsh.
2010-02-19 13:50:01 -05:00
Chris PeBenito
fa03ecc046
Shorewall patch from Dan Walsh.
2010-02-19 11:53:19 -05:00
Chris PeBenito
6ae29c7378
Vbetool patch from Dan Walsh.
2010-02-19 11:34:28 -05:00
Chris PeBenito
4fd0889171
Java patch from Dan Walsh.
2010-02-19 11:21:38 -05:00
Chris PeBenito
1e0f483a18
Mono patch from Dan Walsh.
2010-02-19 10:42:43 -05:00
Chris PeBenito
a777957b49
Rename qemu_unconfined_t to unconfined_qemu_t.
2010-02-19 10:27:09 -05:00
Chris PeBenito
8a1c9c505f
Rearrage qemu.if.
2010-02-19 10:16:28 -05:00
Chris PeBenito
72295e93e1
Qemu patch from Dan Walsh.
2010-02-19 10:15:19 -05:00
Chris PeBenito
29b580ce8f
Add sectoolm by Miroslav Grepl.
2010-02-19 09:39:06 -05:00
Chris PeBenito
4796d07ee0
Wine patch from Dan Walsh.
2010-02-19 09:17:51 -05:00
Chris PeBenito
6a9da24987
Useradd home dir creation fix from Gentoo.
2010-02-17 20:34:23 -05:00
Chris PeBenito
2f84a77d22
Syslog fixes from Gentoo.
2010-02-17 20:33:53 -05:00
Chris PeBenito
8b8501991e
Clean up leaked portage file descriptors.
2010-02-17 20:33:31 -05:00
Chris PeBenito
d08a3df046
Ssh key creation fix from Gentoo.
2010-02-17 20:32:08 -05:00
Chris PeBenito
2c05132062
Utmp fix from Gentoo.
2010-02-17 20:31:46 -05:00
Chris PeBenito
72c8a37c2b
Setfiles fix from Gentoo.
2010-02-17 20:30:42 -05:00
Chris PeBenito
679a63d09f
Mount usbfs fix from Gentoo.
2010-02-17 20:30:13 -05:00
Chris PeBenito
aadcb968f9
Move netlink route sockets from nsswitch to DNS name resolve.
2010-02-17 20:28:59 -05:00
Chris PeBenito
15d80e3646
Misc portage fixes.
2010-02-17 20:25:39 -05:00
Chris PeBenito
05bd2f9837
Portage fixes for installing SELinux-aware programs.
2010-02-17 20:23:41 -05:00
Chris PeBenito
c06a4452e2
Xguest patch from Dan Walsh.
2010-02-17 09:23:17 -05:00
Chris PeBenito
6f30d7e770
Pulseaudio patch from Dan Walsh.
2010-02-16 15:13:08 -05:00
Chris PeBenito
a513794b4c
Chronyd from Miroslav Grepl.
2010-02-16 14:53:59 -05:00
Chris PeBenito
3fb2b72c65
Ccs patch from Dan Walsh.
2010-02-16 11:28:08 -05:00
Chris PeBenito
0ab2c1eae9
Clear xserver TODO.
2010-02-12 10:29:41 -05:00
Chris PeBenito
6246e7d30a
Non-drawing X client support for consolekit.
2010-02-12 10:29:00 -05:00
Chris PeBenito
1322a1af4d
Remove redundant conditional user_ping terminal rules.
2010-02-11 14:35:38 -05:00
Chris PeBenito
c3c753f786
Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.
2010-02-11 14:20:10 -05:00
Chris PeBenito
ed03a5b916
Sudo patch from Dan Walsh.
2010-02-11 09:15:45 -05:00
Chris PeBenito
ca5dc2f1cb
Consoletype patch from Dan Walsh.
2010-02-11 08:56:53 -05:00
Chris PeBenito
21673b238a
Hal patch from Dan Walsh.
2010-02-11 08:42:00 -05:00
Chris PeBenito
3079cbceb1
Virt/svirt patch from Dan Walsh.
2010-02-09 10:28:17 -05:00
Chris PeBenito
aa9e3b4b65
Ktalk patch from Dan Walsh.
2010-02-09 10:28:00 -05:00
Chris PeBenito
12dc618bff
Add changelog entry for 1031ee6.
2010-02-08 14:52:02 -05:00
Chris PeBenito
16412e2ff9
Merge branch 'master' of git+ssh://cpebenito@oss.tresys.com/home/git/refpolicy
2010-02-08 14:47:06 -05:00
Chris PeBenito
27eab81f2f
Misc fixes for 1031ee6.
2010-02-08 13:38:48 -05:00
Chris PeBenito
7d2f96783c
Module version number bump for 1031ee6.
2010-02-08 13:37:42 -05:00
Dominick Grift
1031ee6f6a
Implement cobblerd policy.
...
My previous version had a minor bug in admin_role where it was using cobblerd_var_log_t, and cobblerd_var_lib_t instead of cobbler_var_log_t, and cobbler_var_lib_t.
Whilst i was at it, i decided the implement a cobbler_etc_t for cobbler content in /etc. This because you cannot admin a cobbler environment witouth having access to cobbler config files and i dont want to give cobbler_admin access to manage etc_t.
As a consequence if this i also removed the files_read_etc_files(cobblerd_t), as i think that cobbler only needed it to read its own files in /etc. However this is not confirmed, and it may need read access to etc_t afteral.
Also i would like to underscore my reason for using public_content_rw_t. One of the reasons is that i do not want to give cobbler access to manage httpd_sys_content_rw_t. In general i do not want to depend on apache module at all.
Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <pebenito@gentoo.org>
2010-02-08 12:56:01 -05:00
Chris PeBenito
2d743657f4
Userdomain patch from Stefan Schulze Frielinghaus.
2010-02-08 11:43:44 -05:00
Chris PeBenito
e526fca176
Add nut from Stefan Schulze Frielinghaus and Miroslav Grepl.
2010-02-08 11:29:12 -05:00
Chris PeBenito
4ebfec7303
Add pyicqt from Stefan Schulze Frielinghaus.
2010-02-08 10:58:16 -05:00
Chris PeBenito
22a2874dbf
Add dbadm, from KaiGai Kohei.
2010-02-08 10:34:08 -05:00
Chris PeBenito
edc2f7dea4
Fix home_ssh_t usage.
2010-01-25 08:34:28 -05:00
Chris PeBenito
82b5d290cc
PPP patch from Dan Walsh.
2010-01-15 15:46:07 -05:00
Chris PeBenito
cde15072d0
SSH patch from Dan Walsh.
2010-01-15 15:28:27 -05:00
Chris PeBenito
fee5bb73bc
Uucp patch from Dan Walsh.
2010-01-08 10:37:47 -05:00
