selinux-policy

Author	SHA1	Message	Date
Dominick Grift	9c9e4c8180	This is a role capability. This is a role capability. This is a role capability. Signed-off-by: Dominick Grift <domg472@gmail.com> This is a role capability. This is a role capability.	2010-09-16 12:18:34 +02:00
Dominick Grift	dcf87460eb	Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Signed-off-by: Dominick Grift <domg472@gmail.com> Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes.	2010-09-16 12:18:33 +02:00
Dominick Grift	59c0340548	Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Signed-off-by: Dominick Grift <domg472@gmail.com> Use permission sets where possible. Signed-off-by: Dominick Grift <domg472@gmail.com> Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible.	2010-09-16 12:18:33 +02:00
Dominick Grift	f92662114a	Search parent directory to be able to interact with target content. Search parent directory to be able to interact with target content. Search parent directory to be able to interact with target content. Signed-off-by: Dominick Grift <domg472@gmail.com> Search parent directory to be able to interact with target content. Search parent directory to be able to interact with target content. Signed-off-by: Dominick Grift <domg472@gmail.com> Search parent directory to be able to interact with target content. Search parent directory to be able to interact with target content. Search parent directory to be able to interact with target content.	2010-09-16 12:18:33 +02:00
Dominick Grift	4ff4ddfaa3	Allow users to ptrace and send any kind of signal to spamassassin agents.	2010-09-16 12:18:33 +02:00
Dominick Grift	c5caddd673	This type is not required here.	2010-09-16 12:18:33 +02:00
Dan Walsh	3eaa993945	UPdate for f14 policy	2010-08-26 09:41:21 -04:00
Dominick Grift	288845a638	Services layer xml files. Signed-off-by: Dominick Grift <domg472@gmail.com>	2010-08-05 09:25:29 -04:00
Chris PeBenito	a72e42f485	Interface documentation standardization patch from Dan Walsh.	2010-08-02 09:22:09 -04:00
Chris PeBenito	ff8f0a63f4	trunk: whitespace fixes in xml blocks.	2008-12-03 19:16:20 +00:00
Chris PeBenito	296273a719	trunk: merge UBAC.	2008-11-05 16:10:46 +00:00
Chris PeBenito	2cca6b79b4	trunk: remove redundant shared lib calls.	2008-10-17 17:31:04 +00:00
Chris PeBenito	0b36a2146e	trunk: Enable open permission checks policy capability.	2008-10-16 16:09:20 +00:00
Chris PeBenito	0bfccda4e8	trunk: massive whitespace cleanup from dominick grift.	2008-07-23 21:38:39 +00:00
Chris PeBenito	ef659a476e	Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.	2007-10-09 17:29:48 +00:00
Chris PeBenito	350b6ab767	trunk: merge strict and targeted policies. merge shlib_t into lib_t.	2007-10-02 16:04:50 +00:00
Chris PeBenito	d46cfe45cd	trunk: add application module	2007-07-19 18:57:48 +00:00
Chris PeBenito	1900668638	trunk: Unified labeled networking policy from Paul Moore. The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules. trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore. This patch changes the policy to use the netmsg initial SID as the "base" SID/context for NetLabel packets which only have MLS security attributes. Currently we use the unlabeled initial SID which makes it very difficult to distinquish between actual unlabeled packets and those packets which have MLS security attributes.	2007-06-27 15:23:21 +00:00
Chris PeBenito	8021cb4f63	Merge sbin_t and ls_exec_t into bin_t.	2007-03-23 23:24:59 +00:00
Chris PeBenito	59bedc1886	procmail uses /tmp files Wants to send signull to itself Can exec ls Read spamassinn_lib_dirs New directory for spamassin /var/lib/ pyzor uses tmp files	2007-03-07 21:33:22 +00:00
Chris PeBenito	6b19be3360	patch from dan, Thu, 2007-01-25 at 08:12 -0500	2007-02-16 23:01:42 +00:00
Chris PeBenito	c0868a7a3b	merge policy patterns to trunk	2006-12-12 20:08:08 +00:00
Chris PeBenito	bbcd3c97dd	add main part of role-o-matic	2006-09-06 22:07:25 +00:00
Chris PeBenito	33c7e6b4e8	remove dead selopt rules	2006-08-15 20:00:58 +00:00
Chris PeBenito	17de1b790b	remove extra level of directory	2006-07-12 20:32:27 +00:00

25 Commits