Chris PeBenito
|
2705f9a0f3
|
begin merging in upstream NSA CVS changes
|
2005-09-12 21:40:56 +00:00 |
|
Chris PeBenito
|
712566ee41
|
fixes to make base module compilable
|
2005-09-12 15:17:39 +00:00 |
|
Chris PeBenito
|
9ff3003346
|
add zebra. change ssh to default to initrc transition instead of inetd while typeattribute in conditionals doesnt work
|
2005-09-09 13:24:11 +00:00 |
|
Chris PeBenito
|
eb3cb6820a
|
add portmap
|
2005-09-08 17:12:38 +00:00 |
|
Chris PeBenito
|
9b06402eaf
|
add missing rules of other domains using inn
|
2005-09-08 13:23:11 +00:00 |
|
Chris PeBenito
|
603f90ab9d
|
misc fixes
|
2005-09-05 18:17:17 +00:00 |
|
Chris PeBenito
|
0f707d52ab
|
add squid
|
2005-09-02 19:11:07 +00:00 |
|
Chris PeBenito
|
7c8fc35b14
|
add dhcpd
|
2005-09-02 14:52:08 +00:00 |
|
Chris PeBenito
|
9d3bdc25af
|
fix bugs uncovered from sediff
|
2005-09-01 20:13:42 +00:00 |
|
Chris PeBenito
|
0c3d170578
|
add dbus
|
2005-08-31 20:58:12 +00:00 |
|
Chris PeBenito
|
d83fdad248
|
add bind
|
2005-08-23 17:26:19 +00:00 |
|
Chris PeBenito
|
f862c35c37
|
add gpm
|
2005-08-17 21:28:31 +00:00 |
|
Chris PeBenito
|
2961e79b55
|
add ldap
|
2005-08-17 18:33:43 +00:00 |
|
Chris PeBenito
|
21468a6076
|
add loadkeys
|
2005-08-15 14:46:17 +00:00 |
|
Chris PeBenito
|
052c953ae5
|
add quota
|
2005-08-11 14:49:58 +00:00 |
|
Chris PeBenito
|
ed78ea0034
|
add tmpreaper
|
2005-08-05 15:32:27 +00:00 |
|
Chris PeBenito
|
42be7c214d
|
add mysql
|
2005-08-03 17:56:26 +00:00 |
|
Chris PeBenito
|
892266ca76
|
more targeted policy fixes
|
2005-07-19 20:26:02 +00:00 |
|
Chris PeBenito
|
a5f339f134
|
more cleanup in system
|
2005-07-18 18:31:49 +00:00 |
|
Chris PeBenito
|
50f6503452
|
* break up files_getattr_all_files into correct interfaces
* move stuff out of pcmcia into the appropriate modules
|
2005-07-15 15:17:57 +00:00 |
|
Chris PeBenito
|
df00b2e235
|
* fix chroot exec interface
* more TODO cleanup
* move IPC out of generic domtrans interfaces
|
2005-07-13 18:29:08 +00:00 |
|
Chris PeBenito
|
a42ca7ebec
|
another round of TODO cleanup
|
2005-07-08 20:44:57 +00:00 |
|
Chris PeBenito
|
e5f8060316
|
implement direct_sysadm_daemon
|
2005-07-07 15:25:28 +00:00 |
|
Chris PeBenito
|
a7a9799d79
|
convert can_kerberos()
|
2005-07-01 13:31:34 +00:00 |
|
Chris PeBenito
|
fd89e19f12
|
more work on current modules
|
2005-06-30 18:54:08 +00:00 |
|
Chris PeBenito
|
ebdc3b7902
|
clean up more todos
|
2005-06-29 20:53:53 +00:00 |
|
Chris PeBenito
|
8fd3673225
|
another round of renaming, for consistency
|
2005-06-29 14:26:41 +00:00 |
|
Chris PeBenito
|
e88003ffe3
|
xml updates and nis stuff
|
2005-06-24 20:37:09 +00:00 |
|
Chris PeBenito
|
9ccd96dfc6
|
more work on ssh, plus import ssh-agent
|
2005-06-22 21:14:48 +00:00 |
|
Chris PeBenito
|
d35c621eb0
|
add a couple more nfs and cifs interfaces, to cover most of the
use_(nfs|cifs)_home_dirs tunable
|
2005-06-16 20:33:51 +00:00 |
|
Chris PeBenito
|
5e0da6a03e
|
finish renaming system/selinux to system/selinuxutil
|
2005-06-14 20:48:34 +00:00 |
|
Chris PeBenito
|
8bd6789954
|
move constraints interfaces to domain module. move sysfs and usbfs to
devices module
|
2005-06-14 19:56:46 +00:00 |
|
Chris PeBenito
|
b57dd19400
|
stray renames in distro_redhat
|
2005-06-14 17:36:21 +00:00 |
|
Chris PeBenito
|
5a45e70177
|
rename setattr removable_device_t
|
2005-06-13 20:00:36 +00:00 |
|
Chris PeBenito
|
c9428d33dc
|
renaming insanity
|
2005-06-13 17:35:46 +00:00 |
|
Karl MacMillan
|
f0c985ca80
|
Devices rename.
|
2005-06-13 16:22:32 +00:00 |
|
Chris PeBenito
|
0fd9dc55cf
|
renaming insanity
|
2005-06-10 01:01:13 +00:00 |
|
Chris PeBenito
|
588ffaeb7f
|
kernel.if renaming
|
2005-06-09 20:50:17 +00:00 |
|
Chris PeBenito
|
dd822947d2
|
aliases
|
2005-06-09 14:50:48 +00:00 |
|
Chris PeBenito
|
763c441e3b
|
start renaming filesystem interfaces
|
2005-06-08 13:12:00 +00:00 |
|
Chris PeBenito
|
254bbc7bb3
|
start switching over to new tunable infrastructure
|
2005-06-07 18:45:47 +00:00 |
|
Chris PeBenito
|
d115660e3b
|
change network verb in corenetwork to sendrecv
|
2005-06-02 18:55:47 +00:00 |
|
Chris PeBenito
|
aa40608fbe
|
remove copyright until licensing issues are resolved
|
2005-06-01 17:34:13 +00:00 |
|
Chris PeBenito
|
1293184998
|
last fixes for cab
|
2005-06-01 13:51:54 +00:00 |
|
Chris PeBenito
|
d115b24712
|
more cab work
|
2005-05-31 23:02:11 +00:00 |
|
Chris PeBenito
|
3b857eae09
|
add some file_t interfaces, and console write
|
2005-05-31 21:25:45 +00:00 |
|
Chris PeBenito
|
f5c42bd80b
|
many fixes from cab work
|
2005-05-30 21:17:20 +00:00 |
|
Chris PeBenito
|
c6fd1f85ba
|
restructure users, and add signalling
|
2005-05-27 20:44:05 +00:00 |
|
Chris PeBenito
|
d490eb6b5c
|
fixes from cab
|
2005-05-26 20:38:45 +00:00 |
|
Chris PeBenito
|
efd8ede34d
|
many fixes from cab testing
|
2005-05-25 20:58:21 +00:00 |
|
Chris PeBenito
|
cbeef67c1c
|
cleanup
|
2005-05-24 22:22:26 +00:00 |
|
Chris PeBenito
|
e7fcdc6d2f
|
fix the object class in process transition interfaces
|
2005-05-24 20:45:27 +00:00 |
|
Chris PeBenito
|
dc771ff40e
|
another cleanup pass
|
2005-05-24 15:55:57 +00:00 |
|
Chris PeBenito
|
39255175ca
|
move in stuff from rpm
|
2005-05-23 17:01:51 +00:00 |
|
Chris PeBenito
|
daa0e0b01f
|
add xml comments to interfaces, convert over userdomain stuff
|
2005-05-19 21:06:06 +00:00 |
|
Chris PeBenito
|
8623d5b854
|
move run_init to selinux, as it is part of policycoreutils
|
2005-05-18 16:03:54 +00:00 |
|
Chris PeBenito
|
1786071159
|
rename some selinuxfs interfaces for more clarity
|
2005-05-18 13:22:37 +00:00 |
|
Chris PeBenito
|
dd14d0d892
|
change read_shared_libraries to use_shared_libraries, since the execute
permission is checked when using shared libs to execute code in them, which
is not the same as just reading the shared libs.
|
2005-05-17 15:32:52 +00:00 |
|
Chris PeBenito
|
b16c6b8c32
|
start adding user domains. fix ttynode and ptynode handling, as they're
more then user terminals (at least ptynode is). start adding XML comments
|
2005-05-16 21:10:33 +00:00 |
|
Chris PeBenito
|
ff31386090
|
move make_{daemon,init,system}_domain to init to fix type_transition'ing
|
2005-05-13 20:21:50 +00:00 |
|
Chris PeBenito
|
7bba9d317a
|
pile of updates
|
2005-05-13 14:37:13 +00:00 |
|
Chris PeBenito
|
d25dd9c1c2
|
add make temporary_file and daemon_runtime_file
|
2005-05-11 19:36:36 +00:00 |
|
Chris PeBenito
|
38e24ae49e
|
add files_make_temporary_file and remove type attribute from
create_private_tmp
|
2005-05-11 19:21:40 +00:00 |
|
Chris PeBenito
|
118186e3dc
|
make a reasonable lib_t interface
|
2005-05-11 15:46:51 +00:00 |
|
Chris PeBenito
|
c18e825f57
|
unexpand can_kerberos
|
2005-05-09 21:03:38 +00:00 |
|
Chris PeBenito
|
bbd6a62111
|
convert over to system_domain, plus a couple init cleanups
|
2005-05-05 18:30:00 +00:00 |
|
Chris PeBenito
|
d0eddb6b0d
|
add in system_domain
|
2005-05-05 17:44:11 +00:00 |
|
Chris PeBenito
|
f1470e5ede
|
rules picked up from sediff
|
2005-05-04 21:44:51 +00:00 |
|
Chris PeBenito
|
1e5c2a416a
|
more conversion
|
2005-05-04 17:01:46 +00:00 |
|
Chris PeBenito
|
f1578d05a9
|
stuff from sysnetwork
|
2005-05-04 13:16:34 +00:00 |
|
Chris PeBenito
|
b2e0625ca1
|
more conversion due to new interfaces
|
2005-05-03 20:44:35 +00:00 |
|
Chris PeBenito
|
3ce6cb4a45
|
fill pam and utempter authlogin policy and fix up interfaces
|
2005-05-03 20:23:33 +00:00 |
|
Chris PeBenito
|
07d6e32f44
|
reorg run_init a little, and add a convert to a few new interfaces
|
2005-05-02 21:02:14 +00:00 |
|
Chris PeBenito
|
25baab18d1
|
switch over to tunable_policy and optional_policy
|
2005-05-02 19:22:58 +00:00 |
|
Chris PeBenito
|
ba7740d145
|
handful of changes
|
2005-05-02 18:38:02 +00:00 |
|
Chris PeBenito
|
3009816bcd
|
convert over optional policy to optional_policy macro
|
2005-04-28 15:48:27 +00:00 |
|
Chris PeBenito
|
960373dddd
|
add module statement macro and entrypoint executable attribute to replicate
can_exec($1,exec_type)
|
2005-04-26 17:00:25 +00:00 |
|
Chris PeBenito
|
91a7ab6cb3
|
add sysnetwork
|
2005-04-25 21:28:25 +00:00 |
|
Chris PeBenito
|
219bcf7a8f
|
attack with sediff, make fs:getattr interfaces consistent, create init and
daemon domains
|
2005-04-25 19:54:27 +00:00 |
|
Chris PeBenito
|
343a231d5f
|
reorg
|
2005-04-22 22:00:09 +00:00 |
|
Chris PeBenito
|
8a0da1086c
|
make getattr and setattr interfaces and make naming consistent
|
2005-04-22 19:31:32 +00:00 |
|
Chris PeBenito
|
33bc0dd994
|
clean up some filesystem assoc
|
2005-04-21 22:46:49 +00:00 |
|
Chris PeBenito
|
0e730cc8e1
|
complete corenetwork
|
2005-04-21 21:53:15 +00:00 |
|
Chris PeBenito
|
033c80e683
|
rename files_manage_general_lock_files() to more appropriate files_manage_system_lock_files()
|
2005-04-21 13:35:01 +00:00 |
|
Chris PeBenito
|
e181fe05d8
|
add copyright statement
|
2005-04-20 19:07:16 +00:00 |
|
Chris PeBenito
|
5050e500fe
|
use interface to send syslog messages
|
2005-04-19 20:43:44 +00:00 |
|
Chris PeBenito
|
f0578249d1
|
reorganize and add rootfs dontaudits
|
2005-04-19 18:58:16 +00:00 |
|
Chris PeBenito
|
7f89c7efc6
|
hold off on improving
|
2005-04-19 13:46:06 +00:00 |
|
Chris PeBenito
|
b4cd153394
|
initial commit
|
2005-04-14 20:18:17 +00:00 |
|