Chris PeBenito
|
bc1fbab472
|
interface review, and remove net_raw from raw node sends. only give
capability for raw send on an interface
|
2005-06-17 18:59:34 +00:00 |
|
Chris PeBenito
|
a7c3a1b920
|
eliminate _depend macros
|
2005-06-16 21:06:29 +00:00 |
|
Chris PeBenito
|
0e721690dc
|
misc cleanup
|
2005-06-16 20:54:18 +00:00 |
|
Chris PeBenito
|
d35c621eb0
|
add a couple more nfs and cifs interfaces, to cover most of the
use_(nfs|cifs)_home_dirs tunable
|
2005-06-16 20:33:51 +00:00 |
|
Chris PeBenito
|
828e03f635
|
initial commit
|
2005-06-15 13:53:48 +00:00 |
|
Chris PeBenito
|
5e0da6a03e
|
finish renaming system/selinux to system/selinuxutil
|
2005-06-14 20:48:34 +00:00 |
|
Chris PeBenito
|
ff7bc148e4
|
move security_t to selinux module
|
2005-06-14 20:40:09 +00:00 |
|
Chris PeBenito
|
8bd6789954
|
move constraints interfaces to domain module. move sysfs and usbfs to
devices module
|
2005-06-14 19:56:46 +00:00 |
|
Chris PeBenito
|
b57dd19400
|
stray renames in distro_redhat
|
2005-06-14 17:36:21 +00:00 |
|
Chris PeBenito
|
c24ac9c51c
|
rename requires_block_template to gen_require
|
2005-06-13 20:51:09 +00:00 |
|
Chris PeBenito
|
fa7bea8feb
|
rename requires_block_tempalte to gen_require
|
2005-06-13 20:47:04 +00:00 |
|
Chris PeBenito
|
5a45e70177
|
rename setattr removable_device_t
|
2005-06-13 20:00:36 +00:00 |
|
Karl MacMillan
|
8700497fb1
|
Updates to documentation.
|
2005-06-13 19:22:00 +00:00 |
|
Chris PeBenito
|
d9507b1874
|
fix xml
|
2005-06-13 17:40:51 +00:00 |
|
Chris PeBenito
|
c9428d33dc
|
renaming insanity
|
2005-06-13 17:35:46 +00:00 |
|
Karl MacMillan
|
f0c985ca80
|
Devices rename.
|
2005-06-13 16:22:32 +00:00 |
|
Chris PeBenito
|
0fd9dc55cf
|
renaming insanity
|
2005-06-10 01:01:13 +00:00 |
|
Chris PeBenito
|
a154cd45f3
|
reorder
|
2005-06-09 21:07:58 +00:00 |
|
Chris PeBenito
|
588ffaeb7f
|
kernel.if renaming
|
2005-06-09 20:50:17 +00:00 |
|
Chris PeBenito
|
eda201efe8
|
more renaming and xml
|
2005-06-09 19:52:50 +00:00 |
|
Chris PeBenito
|
eca5b2dd79
|
rename
|
2005-06-09 19:22:27 +00:00 |
|
Chris PeBenito
|
cc41a97c99
|
aliases
|
2005-06-09 18:08:26 +00:00 |
|
Chris PeBenito
|
c6ebefd2f2
|
rename
|
2005-06-09 17:51:40 +00:00 |
|
Chris PeBenito
|
d90b274e40
|
for now, drop infoflow tags
|
2005-06-09 17:23:53 +00:00 |
|
Chris PeBenito
|
fe040c9777
|
renaming and xml
|
2005-06-09 15:20:31 +00:00 |
|
Chris PeBenito
|
f2e4ab3a99
|
make corenetwork generation explicit, rather then on-the-fly
|
2005-06-08 21:46:39 +00:00 |
|
Chris PeBenito
|
b29d23f315
|
initial commit
|
2005-06-08 20:49:16 +00:00 |
|
Chris PeBenito
|
c2c00bee05
|
add aliases
|
2005-06-08 20:28:45 +00:00 |
|
Chris PeBenito
|
9f72a2655f
|
renaming
|
2005-06-08 18:40:30 +00:00 |
|
Chris PeBenito
|
0c5a288e98
|
interface renaming
|
2005-06-08 18:00:04 +00:00 |
|
Chris PeBenito
|
1694dee685
|
interface renaming
|
2005-06-08 16:18:08 +00:00 |
|
Chris PeBenito
|
763c441e3b
|
start renaming filesystem interfaces
|
2005-06-08 13:12:00 +00:00 |
|
Chris PeBenito
|
b46609f09f
|
fix missing _socket in class
|
2005-06-08 13:08:01 +00:00 |
|
Chris PeBenito
|
3865d6b95e
|
add xml
|
2005-06-07 22:36:07 +00:00 |
|
Chris PeBenito
|
254bbc7bb3
|
start switching over to new tunable infrastructure
|
2005-06-07 18:45:47 +00:00 |
|
Chris PeBenito
|
0c73cd2526
|
change over to some perm set macros. add indentation
|
2005-06-03 12:25:14 +00:00 |
|
Chris PeBenito
|
4196997813
|
add some indentation
|
2005-06-02 20:26:48 +00:00 |
|
Chris PeBenito
|
d115660e3b
|
change network verb in corenetwork to sendrecv
|
2005-06-02 18:55:47 +00:00 |
|
Chris PeBenito
|
cabfa520aa
|
move fs_use and isids to respective modules
|
2005-06-02 15:39:10 +00:00 |
|
Chris PeBenito
|
004db90d3f
|
do dtd verification on xml. fix current xml to be valid
|
2005-06-01 18:34:34 +00:00 |
|
Chris PeBenito
|
aa40608fbe
|
remove copyright until licensing issues are resolved
|
2005-06-01 17:34:13 +00:00 |
|
Chris PeBenito
|
f267dfbb8b
|
fix module name in xml
|
2005-06-01 17:27:39 +00:00 |
|
Chris PeBenito
|
e32d52ba47
|
fix xml
|
2005-06-01 14:17:43 +00:00 |
|
Chris PeBenito
|
1293184998
|
last fixes for cab
|
2005-06-01 13:51:54 +00:00 |
|
Chris PeBenito
|
d115b24712
|
more cab work
|
2005-05-31 23:02:11 +00:00 |
|
Chris PeBenito
|
3b857eae09
|
add some file_t interfaces, and console write
|
2005-05-31 21:25:45 +00:00 |
|
Chris PeBenito
|
4bf4ed9e68
|
permission set macro changes, plus more cab related work
|
2005-05-31 19:52:57 +00:00 |
|
Chris PeBenito
|
08eb9d1a33
|
fix tmpfs assoc call
|
2005-05-31 13:45:37 +00:00 |
|
Chris PeBenito
|
f5c42bd80b
|
many fixes from cab work
|
2005-05-30 21:17:20 +00:00 |
|
Chris PeBenito
|
32e53ac1b8
|
cleanup inspired by sediff
|
2005-05-27 21:56:01 +00:00 |
|
Chris PeBenito
|
c6fd1f85ba
|
restructure users, and add signalling
|
2005-05-27 20:44:05 +00:00 |
|
Chris PeBenito
|
07da0af7bd
|
tmpfs associate for redhat
|
2005-05-27 20:43:37 +00:00 |
|
Chris PeBenito
|
d490eb6b5c
|
fixes from cab
|
2005-05-26 20:38:45 +00:00 |
|
Chris PeBenito
|
efd8ede34d
|
many fixes from cab testing
|
2005-05-25 20:58:21 +00:00 |
|
Chris PeBenito
|
e7fcdc6d2f
|
fix the object class in process transition interfaces
|
2005-05-24 20:45:27 +00:00 |
|
Chris PeBenito
|
c907b3e2c7
|
cleanup for corenetwork interface generation
|
2005-05-24 17:34:29 +00:00 |
|
Chris PeBenito
|
dc771ff40e
|
another cleanup pass
|
2005-05-24 15:55:57 +00:00 |
|
Chris PeBenito
|
6276f10155
|
instead of using macros to drop out non-macro calls during corenetwork
interface generation, use grep to get the macro calls and feed to m4
|
2005-05-24 15:52:57 +00:00 |
|
Chris PeBenito
|
957e269eb2
|
fix tmpfs associate infoflow
|
2005-05-23 17:56:00 +00:00 |
|
Chris PeBenito
|
c4309768f1
|
add transitions
|
2005-05-23 15:47:13 +00:00 |
|
Chris PeBenito
|
e32c0d3b86
|
add mls sensitivity to genfscon, initial sids and fs_use
|
2005-05-20 20:43:18 +00:00 |
|
Chris PeBenito
|
0d0d2bafd6
|
add mls port support
|
2005-05-20 20:23:25 +00:00 |
|
Chris PeBenito
|
085faa06ff
|
add xml comments to generated sections, and add mls support to interfaces
and nodes
|
2005-05-20 20:07:42 +00:00 |
|
Chris PeBenito
|
daa0e0b01f
|
add xml comments to interfaces, convert over userdomain stuff
|
2005-05-19 21:06:06 +00:00 |
|
Chris PeBenito
|
bee546bfd4
|
add context template to support mls
|
2005-05-18 21:02:15 +00:00 |
|
Chris PeBenito
|
494e988f80
|
fix xml
|
2005-05-18 20:59:38 +00:00 |
|
Chris PeBenito
|
1786071159
|
rename some selinuxfs interfaces for more clarity
|
2005-05-18 13:22:37 +00:00 |
|
Chris PeBenito
|
759ba0a459
|
add get all filesystems quotas
|
2005-05-18 13:20:38 +00:00 |
|
Chris PeBenito
|
c3dff2e0a2
|
add device_node:{ chr_file blk_file } getattr;
|
2005-05-18 13:19:51 +00:00 |
|
Chris PeBenito
|
dd14d0d892
|
change read_shared_libraries to use_shared_libraries, since the execute
permission is checked when using shared libs to execute code in them, which
is not the same as just reading the shared libs.
|
2005-05-17 15:32:52 +00:00 |
|
Chris PeBenito
|
b16c6b8c32
|
start adding user domains. fix ttynode and ptynode handling, as they're
more then user terminals (at least ptynode is). start adding XML comments
|
2005-05-16 21:10:33 +00:00 |
|
Chris PeBenito
|
ff31386090
|
move make_{daemon,init,system}_domain to init to fix type_transition'ing
|
2005-05-13 20:21:50 +00:00 |
|
Chris PeBenito
|
24a7ae1a5a
|
add lvm.fc, and move relevant entries to devices.fc and storage.fc
|
2005-05-13 15:03:19 +00:00 |
|
Chris PeBenito
|
7bba9d317a
|
pile of updates
|
2005-05-13 14:37:13 +00:00 |
|
Chris PeBenito
|
075c4fdaf1
|
additions for cron and mta
|
2005-05-12 20:50:09 +00:00 |
|
Chris PeBenito
|
38e24ae49e
|
add files_make_temporary_file and remove type attribute from
create_private_tmp
|
2005-05-11 19:21:40 +00:00 |
|
Chris PeBenito
|
118186e3dc
|
make a reasonable lib_t interface
|
2005-05-11 15:46:51 +00:00 |
|
Chris PeBenito
|
dec1686f0b
|
oops
|
2005-05-10 20:25:20 +00:00 |
|
Chris PeBenito
|
6b674012fc
|
reorder for more consistency
|
2005-05-10 20:24:26 +00:00 |
|
Chris PeBenito
|
63a310c8cf
|
leftover from modutils
|
2005-05-10 19:50:41 +00:00 |
|
Chris PeBenito
|
0f3be6dbbb
|
initial commit
|
2005-05-10 15:31:48 +00:00 |
|
Chris PeBenito
|
35b2fb4d41
|
add v4l_device_t
|
2005-05-10 14:12:10 +00:00 |
|
Chris PeBenito
|
46be1f32ca
|
add printer_device_t
|
2005-05-10 13:59:10 +00:00 |
|
Chris PeBenito
|
a9a20ddaae
|
allow all domains to use /dev/{zero,null,tty}
|
2005-05-09 19:55:01 +00:00 |
|
Chris PeBenito
|
18f25afdf6
|
start adding infrastructure for the constraint exceptions
|
2005-05-09 17:41:29 +00:00 |
|
Chris PeBenito
|
8e02803ce3
|
add lvm_vg interfaces and do a little cleanup
|
2005-05-06 21:36:11 +00:00 |
|
Chris PeBenito
|
44a43b680b
|
interfaces needed for clock
|
2005-05-05 21:19:18 +00:00 |
|
Chris PeBenito
|
d0eddb6b0d
|
add in system_domain
|
2005-05-05 17:44:11 +00:00 |
|
Chris PeBenito
|
23af43bfef
|
fix depends
|
2005-05-05 14:02:32 +00:00 |
|
Chris PeBenito
|
1e5c2a416a
|
more conversion
|
2005-05-04 17:01:46 +00:00 |
|
Chris PeBenito
|
bd202fe157
|
clean up interfaces for new binary module optional structure
|
2005-05-04 13:19:47 +00:00 |
|
Chris PeBenito
|
3ce6cb4a45
|
fill pam and utempter authlogin policy and fix up interfaces
|
2005-05-03 20:23:33 +00:00 |
|
Chris PeBenito
|
07d6e32f44
|
reorg run_init a little, and add a convert to a few new interfaces
|
2005-05-02 21:02:14 +00:00 |
|
Chris PeBenito
|
25baab18d1
|
switch over to tunable_policy and optional_policy
|
2005-05-02 19:22:58 +00:00 |
|
Chris PeBenito
|
f360f82f54
|
fix stupid _depend define errors (s/ifdef/define/g)
|
2005-05-02 19:19:06 +00:00 |
|
Chris PeBenito
|
67484fced4
|
add ignore read system state
|
2005-05-02 18:42:33 +00:00 |
|
Chris PeBenito
|
de2cee6817
|
add tty_device_t and devpts_t chr_file interfaces
|
2005-05-02 18:42:10 +00:00 |
|
Chris PeBenito
|
5eafc37492
|
add append to /dev/null write
|
2005-05-02 15:42:20 +00:00 |
|
Chris PeBenito
|
4472f3ec01
|
doh
|
2005-04-29 21:00:29 +00:00 |
|
Chris PeBenito
|
7009881cc0
|
add in missing devices
|
2005-04-29 20:35:49 +00:00 |
|
Chris PeBenito
|
05a5cdccc3
|
add a few missing ports, and ppp_device_t
|
2005-04-29 20:22:04 +00:00 |
|
Chris PeBenito
|
a2d8246bf6
|
make mountpoints work, plus misc
|
2005-04-28 21:41:09 +00:00 |
|
Chris PeBenito
|
ee5772e455
|
add bulk of selinux module policy, and add required interfaces
|
2005-04-28 18:59:01 +00:00 |
|
Chris PeBenito
|
b5860610b4
|
missed that sysctl_dev is a dir too
|
2005-04-28 15:52:42 +00:00 |
|
Chris PeBenito
|
3009816bcd
|
convert over optional policy to optional_policy macro
|
2005-04-28 15:48:27 +00:00 |
|
Chris PeBenito
|
55a46da18a
|
add console setattr if
|
2005-04-28 15:47:50 +00:00 |
|
Chris PeBenito
|
8119850297
|
add console dontaudit
|
2005-04-27 21:54:39 +00:00 |
|
Chris PeBenito
|
960373dddd
|
add module statement macro and entrypoint executable attribute to replicate
can_exec($1,exec_type)
|
2005-04-26 17:00:25 +00:00 |
|
Chris PeBenito
|
5f75f56066
|
move modules_object_t back to bootloader
|
2005-04-25 21:32:09 +00:00 |
|
Chris PeBenito
|
219bcf7a8f
|
attack with sediff, make fs:getattr interfaces consistent, create init and
daemon domains
|
2005-04-25 19:54:27 +00:00 |
|
Chris PeBenito
|
a266e3cc83
|
restructure kernel module to be consistent with other module ordering. put
in missing rules. fix naming problems
|
2005-04-25 16:11:21 +00:00 |
|
Chris PeBenito
|
8a0da1086c
|
make getattr and setattr interfaces and make naming consistent
|
2005-04-22 19:31:32 +00:00 |
|
Chris PeBenito
|
33bc0dd994
|
clean up some filesystem assoc
|
2005-04-21 22:46:49 +00:00 |
|
Chris PeBenito
|
0e730cc8e1
|
complete corenetwork
|
2005-04-21 21:53:15 +00:00 |
|
Chris PeBenito
|
bf9e1e3f72
|
logging and modutils updates
|
2005-04-21 21:32:54 +00:00 |
|
Chris PeBenito
|
e181fe05d8
|
add copyright statement
|
2005-04-20 19:07:16 +00:00 |
|
Chris PeBenito
|
f0872d22b4
|
add cap sys_rawio to raw memory access interfaces
|
2005-04-19 20:47:29 +00:00 |
|
Chris PeBenito
|
053f6a200a
|
add dontaudit fs getattr
|
2005-04-19 18:56:47 +00:00 |
|
Chris PeBenito
|
5496553038
|
kernel can load modules
|
2005-04-19 13:52:45 +00:00 |
|
Chris PeBenito
|
7f89c7efc6
|
hold off on improving
|
2005-04-19 13:46:06 +00:00 |
|
Chris PeBenito
|
1ea98d0407
|
remove relabeling privilege for now
|
2005-04-18 20:27:16 +00:00 |
|
Chris PeBenito
|
57d236548b
|
move assert.te here
|
2005-04-18 20:17:25 +00:00 |
|
Chris PeBenito
|
5d78128fda
|
add interface to associate to filesystems w/o xattr. allow regular files to
associate to no xattr filesystems
|
2005-04-16 17:20:59 +00:00 |
|
Chris PeBenito
|
70dcf798e9
|
add boot_runtime_t
|
2005-04-16 17:18:34 +00:00 |
|
Chris PeBenito
|
b4cd153394
|
initial commit
|
2005-04-14 20:18:17 +00:00 |
|