Chris PeBenito
|
81a016f501
|
change eventpollfs labeling to task sid
|
2006-06-28 20:28:09 +00:00 |
|
Chris PeBenito
|
c467d98e85
|
temporarily add unlabeled packet perm to unlabeled association if
|
2006-06-28 14:54:04 +00:00 |
|
Chris PeBenito
|
123a990b6f
|
patch from Dan Tue, 20 Jun 2006 16:19:13 -0400
|
2006-06-21 18:25:06 +00:00 |
|
Chris PeBenito
|
e586ecc752
|
fix typo
|
2006-06-16 13:10:40 +00:00 |
|
Chris PeBenito
|
b68a85cbef
|
clean up usercanread
|
2006-06-14 20:52:45 +00:00 |
|
Chris PeBenito
|
2dbd382425
|
patch from dan Mon, 12 Jun 2006 15:32:00 -0400
|
2006-06-12 21:36:38 +00:00 |
|
Chris PeBenito
|
c22705001e
|
another script in the apr build dir
|
2006-06-09 13:49:22 +00:00 |
|
Chris PeBenito
|
5fe209552e
|
shell scripts in the apr build dir
|
2006-06-09 13:47:58 +00:00 |
|
Chris PeBenito
|
9c1c08e38c
|
fix most bad rules in cups, bug 1771
|
2006-06-08 17:18:25 +00:00 |
|
Chris PeBenito
|
522b59bb97
|
patch from dan Tue, 06 Jun 2006 22:50:46 -0400
|
2006-06-07 17:43:10 +00:00 |
|
Chris PeBenito
|
e51048a4e8
|
fix execmod all files rule in wine
|
2006-06-06 17:51:24 +00:00 |
|
Chris PeBenito
|
fc2dac60c9
|
improve warning message, with file and line numbers
|
2006-06-06 17:25:23 +00:00 |
|
Chris PeBenito
|
97c57a1b3a
|
missing net_bind_service cap for bind_all_ports interfaces
|
2006-06-02 17:44:44 +00:00 |
|
Chris PeBenito
|
35a4b349f0
|
break packet_t into server_packet_t client_packet_t, and cover add packets to system modules where they make sense.
|
2006-05-29 15:04:49 +00:00 |
|
Chris PeBenito
|
b8373ee119
|
updates for nfs, squid, and mta
|
2006-05-26 20:29:51 +00:00 |
|
Chris PeBenito
|
72fcec8c66
|
more packets
|
2006-05-26 19:04:18 +00:00 |
|
Chris PeBenito
|
006e998287
|
packet updates for kernel, nscd, bind, ntp, spamassassin, and dhcpc
|
2006-05-26 18:04:46 +00:00 |
|
Chris PeBenito
|
332bb3f654
|
fix typos
|
2006-05-26 14:34:13 +00:00 |
|
Chris PeBenito
|
2f8eec29c5
|
add client and server packet attributes
|
2006-05-26 13:49:13 +00:00 |
|
Chris PeBenito
|
c5657a262b
|
add generic packet interfaces, and fix up unconfined handling
|
2006-05-25 17:01:36 +00:00 |
|
Chris PeBenito
|
c890249a4c
|
use network_port()s to declare packets, since packets match up with these ports
|
2006-05-24 21:28:49 +00:00 |
|
Chris PeBenito
|
6293baeacc
|
allow iptables to relabelto all packets
|
2006-05-23 19:07:22 +00:00 |
|
Chris PeBenito
|
e37158e6b9
|
initial support for packets
|
2006-05-23 18:31:02 +00:00 |
|
Chris PeBenito
|
a013b55e3e
|
initial addition of packet policy, allow unconfined to send unlabeled packets.
|
2006-05-22 20:47:05 +00:00 |
|
Chris PeBenito
|
41a0f8bf3b
|
move selinux unconfined to attribute setup, clean up unconfined interface a bit
|
2006-05-19 15:15:45 +00:00 |
|
Chris PeBenito
|
87eb5c84e7
|
patch from dan Thu, 18 May 2006 11:56:22 -0400
|
2006-05-19 14:02:24 +00:00 |
|
Chris PeBenito
|
46fc46cfdd
|
fixes for gentoo
|
2006-05-19 13:14:37 +00:00 |
|
Chris PeBenito
|
b516e80f24
|
start cleaning up node binding and raw if/node access
|
2006-05-17 20:55:12 +00:00 |
|
Chris PeBenito
|
165b42d230
|
most of patch from dan Mon, 15 May 2006 11:58:01 -0400
|
2006-05-17 14:50:31 +00:00 |
|
Chris PeBenito
|
ac9db9b54e
|
document remaining interfaces w/o XML. turn on warnings for missing XML.
|
2006-05-10 18:09:08 +00:00 |
|
Chris PeBenito
|
88d68f60bc
|
remove unreproducible notatsecure problem, bug 1411
|
2006-05-09 18:39:35 +00:00 |
|
Chris PeBenito
|
e993594365
|
patch from dan Tue, 02 May 2006 10:08:17 -0400, includes pyzor, bug 1541
|
2006-05-03 19:58:01 +00:00 |
|
Chris PeBenito
|
6714c268a5
|
split out filetrans part of files_manage_etc_runtime_files(), bug 1663
|
2006-05-02 18:34:35 +00:00 |
|
Chris PeBenito
|
512e8cf9ff
|
remove broad ldap access
|
2006-04-28 20:44:15 +00:00 |
|
Chris PeBenito
|
d592b69e87
|
add watchdog, bug 1662
|
2006-04-28 20:20:40 +00:00 |
|
Chris PeBenito
|
f30e6ea8c6
|
add yam, bug 1554
|
2006-04-28 18:30:02 +00:00 |
|
Chris PeBenito
|
03d797cc97
|
fixes for confined vmware sessions
|
2006-04-26 20:30:08 +00:00 |
|
Chris PeBenito
|
5b7b2b024a
|
fixes for testing with unconfined vms
|
2006-04-26 19:03:41 +00:00 |
|
Chris PeBenito
|
a6a638dc18
|
add vmware, bug 1389
|
2006-04-26 18:18:15 +00:00 |
|
Chris PeBenito
|
0e1c461e05
|
more of patch from dan Thu, 20 Apr 2006 14:06:03 -0400
|
2006-04-26 15:22:33 +00:00 |
|
Chris PeBenito
|
8536924eec
|
add tripwire, bug 1550
|
2006-04-24 18:00:32 +00:00 |
|
Chris PeBenito
|
0377627083
|
misc cleanup
|
2006-04-24 14:52:01 +00:00 |
|
Chris PeBenito
|
fb63d0b537
|
add concept of executables, and update policies which really want this intead of entrypoints
|
2006-04-19 21:43:02 +00:00 |
|
Chris PeBenito
|
478f0caee2
|
fix up openvpn port
|
2006-04-18 15:32:04 +00:00 |
|
Chris PeBenito
|
eeb8ea4b81
|
fix bad rules in samba, bug 1623
|
2006-04-17 19:51:46 +00:00 |
|
Chris PeBenito
|
abc73a7764
|
second part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
|
2006-04-17 17:54:57 +00:00 |
|
Chris PeBenito
|
cdc86ee57f
|
first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400
|
2006-04-17 17:32:54 +00:00 |
|
Chris PeBenito
|
4e656a1255
|
add uptime, bug 1551
|
2006-04-12 17:41:09 +00:00 |
|
Chris PeBenito
|
c655ec47f9
|
second part of dans patch Tue, 11 Apr 2006 09:25:24 -0400
|
2006-04-12 16:58:23 +00:00 |
|
Chris PeBenito
|
8cfa5a00e1
|
first part of dans patch Tue, 11 Apr 2006 09:25:24 -0400
|
2006-04-12 15:04:28 +00:00 |
|