Chris PeBenito
a42ca7ebec
another round of TODO cleanup
2005-07-08 20:44:57 +00:00
Chris PeBenito
4d0d4157f4
silly formatting fix
2005-07-08 19:44:12 +00:00
Chris PeBenito
c11958bd0f
support for global booleans
2005-07-08 14:22:17 +00:00
Chris PeBenito
acb668edf1
* Added support for layer summaries.
...
* Added a "Index" link on the menu to link to index.html
* Added links from the master interface & template lists
to their respective documentation in their module.
* Added links to "Interfaces" and "Templates" in modules
that have both.
* Added "Return" links after the "Interfaces" and "Templates"
section that go to the top of the module site.
2005-07-07 20:56:27 +00:00
Chris PeBenito
58c7777e14
tag for 20050707 release
2005-07-07 17:25:53 +00:00
Chris PeBenito
dfa83e924c
add changelog
2005-07-07 17:13:17 +00:00
Chris PeBenito
e5f8060316
implement direct_sysadm_daemon
2005-07-07 15:25:28 +00:00
Chris PeBenito
1aa526281b
missing rules uncovered by sediff
2005-07-07 15:20:24 +00:00
Chris PeBenito
c98340cfeb
support for targeted policy
2005-07-06 20:28:29 +00:00
Chris PeBenito
83ce670b3d
put back to strict. will have separate strict and targeted appconfig
2005-07-06 19:42:27 +00:00
Chris PeBenito
14b25bc455
validate file contexts
2005-07-06 18:34:27 +00:00
Chris PeBenito
ed1a92b88c
ksu moves to su
2005-07-06 17:41:58 +00:00
Chris PeBenito
bb32544d61
add missing ssh file contexts
2005-07-06 15:59:54 +00:00
Chris PeBenito
a3fdcebc6a
quiet the awk if modules.conf doesnt exist
2005-07-06 15:24:45 +00:00
Karl MacMillan
ebb884dec2
- Removed OUTPUT_VERSION as default.
...
- Added default name as refpolicy to avoid clobbering string installs
2005-07-06 15:23:28 +00:00
Chris PeBenito
e17cb83c3d
update appconfig for unconfined login
2005-07-06 13:12:20 +00:00
Chris PeBenito
9726b31857
add unconfined
2005-07-05 20:59:51 +00:00
Chris PeBenito
e8f0055b6d
fix quoting problem
2005-07-05 20:54:12 +00:00
Chris PeBenito
e8b3e30abe
fix for new new modules.conf behavior
2005-07-05 19:42:11 +00:00
Chris PeBenito
f0cc1acd4a
update for required tag
2005-07-05 19:35:07 +00:00
Chris PeBenito
2745476e4a
add required tags
2005-07-05 17:47:15 +00:00
Chris PeBenito
d78fdee465
add tag for required modules
2005-07-05 16:03:47 +00:00
Chris PeBenito
a7a9799d79
convert can_kerberos()
2005-07-01 13:31:34 +00:00
Chris PeBenito
65c8613766
ul has to be in a p
2005-07-01 13:10:57 +00:00
Chris PeBenito
5e1ed4903e
initial commit
2005-06-30 21:11:54 +00:00
Chris PeBenito
fd89e19f12
more work on current modules
2005-06-30 18:54:08 +00:00
Chris PeBenito
ebdc3b7902
clean up more todos
2005-06-29 20:53:53 +00:00
Chris PeBenito
e8d8faa820
dont show interface/template hotlinks if the module doesnt have one of them.
2005-06-29 16:55:13 +00:00
Chris PeBenito
d233bfce3f
make layer summary required
2005-06-29 16:54:13 +00:00
Chris PeBenito
00172fb7c4
change messages for missing docs
2005-06-29 14:48:28 +00:00
Chris PeBenito
06c9680d78
make interfaces or templates section not shown if empty
2005-06-29 14:48:13 +00:00
Chris PeBenito
8fd3673225
another round of renaming, for consistency
2005-06-29 14:26:41 +00:00
Chris PeBenito
743b65115c
link fix
2005-06-29 13:05:16 +00:00
Chris PeBenito
96ce00afcc
add logrotate, more low-hanging fruit
2005-06-28 20:54:49 +00:00
Chris PeBenito
effd58c647
add templates
2005-06-28 20:41:50 +00:00
Chris PeBenito
ceebe3b4b0
change desc to summary
2005-06-28 19:51:46 +00:00
Chris PeBenito
896badc4d2
add comments and error handling
2005-06-28 19:50:38 +00:00
Chris PeBenito
2d56fdc240
preserve tunable values if tunables.conf exists
2005-06-28 18:01:47 +00:00
Chris PeBenito
cbca03f513
add lost_found_t manage, rename fs_type attribute to filesystem_type and rename fs_make_fs to fs_type
2005-06-28 17:48:59 +00:00
Chris PeBenito
783b38347e
more low hanging fruit cleanup
2005-06-28 17:32:57 +00:00
Chris PeBenito
cedae2e49e
better handling of whitespace
2005-06-28 17:31:50 +00:00
Chris PeBenito
19db6ba5a9
change modules.conf behavior to be in line with behavior which will be used in the future for base module
2005-06-28 17:31:18 +00:00
Chris PeBenito
a4c639ddd5
change modules.conf handling
2005-06-28 15:19:40 +00:00
Chris PeBenito
58c3da55f3
add fstools, and more cleanup
2005-06-27 20:59:28 +00:00
Chris PeBenito
80436b9b8f
changes to make inetd work
2005-06-27 18:37:33 +00:00
Chris PeBenito
24bf11c62a
initial commit
2005-06-27 18:36:56 +00:00
Chris PeBenito
ab940a4cc1
autofs_t and ypbind cleanup
2005-06-27 16:30:55 +00:00
Chris PeBenito
e88003ffe3
xml updates and nis stuff
2005-06-24 20:37:09 +00:00
Chris PeBenito
f8838e6ac1
better dummy xml entries
2005-06-24 20:36:49 +00:00
Chris PeBenito
73fbc771d1
initial commit
2005-06-24 19:49:46 +00:00
Chris PeBenito
62a7b02c5b
add/update comments
2005-06-24 13:36:57 +00:00
Chris PeBenito
e81f0220b6
add template support, and add dummy parameters for interfaces that have no comments, so it is valid against the dtd
2005-06-24 13:36:22 +00:00
Chris PeBenito
414e415198
update for new documentation method
2005-06-23 21:30:57 +00:00
Chris PeBenito
aad5b98eba
more updates
2005-06-23 20:35:48 +00:00
Chris PeBenito
c3a0754c23
a couple output fixes
2005-06-23 20:27:25 +00:00
Chris PeBenito
9916c694b4
update to new commenting style
2005-06-23 20:27:06 +00:00
Chris PeBenito
45239964e5
move ssh tunables into global_tunables
2005-06-23 19:57:15 +00:00
Chris PeBenito
95db422832
initial commit of segenxml. add support in Makefile
2005-06-23 19:55:23 +00:00
Chris PeBenito
19ea99d495
fix
2005-06-23 16:06:39 +00:00
Chris PeBenito
7c2b84e7a1
fix for shortened tags
2005-06-23 16:06:25 +00:00
Chris PeBenito
261e0e66ee
shorten some xml tags
2005-06-23 16:00:05 +00:00
Chris PeBenito
d3b892e4fd
convert a couple network macros
2005-06-23 15:44:18 +00:00
Chris PeBenito
007ca5600c
more setcurrent stuff
2005-06-23 15:37:39 +00:00
Chris PeBenito
2a3478cf15
fixes pointed out by steve, plus fixes revealed by the added assertions
2005-06-23 14:19:56 +00:00
Chris PeBenito
9ccd96dfc6
more work on ssh, plus import ssh-agent
2005-06-22 21:14:48 +00:00
Chris PeBenito
199895e201
move all interfaces over to the interface macro. add traceback debugging info
2005-06-22 19:21:31 +00:00
Chris PeBenito
cbc9d6951a
remove remaining _depend macros to prep for switchover to interface declaration macro
2005-06-22 16:07:14 +00:00
Chris PeBenito
0404a3903a
initial commit of ssh.
2005-06-21 21:07:46 +00:00
Chris PeBenito
21871a5cf6
work on newrole policy
2005-06-21 17:01:45 +00:00
Chris PeBenito
7fb9c1c72b
change doctool to bring in line with the xml tag change (layers encapsulate
...
modules)
2005-06-20 20:31:58 +00:00
Chris PeBenito
e04b8e7832
initial commit
2005-06-20 18:43:14 +00:00
Chris PeBenito
57869a681e
XML: encapsulate modules in layers, rather then layer being an attribute of
...
module tag
2005-06-20 18:40:44 +00:00
Chris PeBenito
7a2f20a315
more work to clean up and complete current modules
2005-06-20 17:41:29 +00:00
Chris PeBenito
2ba9a794db
interface review, and remove net_raw from raw node sends. only give
...
capability for raw send on an interface
2005-06-17 19:17:57 +00:00
Chris PeBenito
bc1fbab472
interface review, and remove net_raw from raw node sends. only give
...
capability for raw send on an interface
2005-06-17 18:59:34 +00:00
Chris PeBenito
c9b7f1a28e
add rw_term_perms
2005-06-17 18:56:23 +00:00
Chris PeBenito
5e6f9e5aac
services interfaces review
2005-06-17 18:41:07 +00:00
Chris PeBenito
7f2e39b8e6
review of admin interfaces
2005-06-17 18:27:08 +00:00
Chris PeBenito
139520a233
review of system interfaces
2005-06-17 17:59:26 +00:00
Chris PeBenito
a7c3a1b920
eliminate _depend macros
2005-06-16 21:06:29 +00:00
Chris PeBenito
0e721690dc
misc cleanup
2005-06-16 20:54:18 +00:00
Chris PeBenito
562cc2bd6c
reorder gpg tunable for alpha sorting
2005-06-16 20:34:57 +00:00
Chris PeBenito
d35c621eb0
add a couple more nfs and cifs interfaces, to cover most of the
...
use_(nfs|cifs)_home_dirs tunable
2005-06-16 20:33:51 +00:00
Chris PeBenito
77c124c8cd
eliminate _depend macros
2005-06-16 20:30:59 +00:00
Chris PeBenito
8c2f3ac695
have can_exec add a require block
2005-06-16 20:30:07 +00:00
Chris PeBenito
4ce9bdf0aa
fix
2005-06-15 21:08:58 +00:00
Chris PeBenito
815ff39128
initialize description to None so missing descriptions dont show wrong data
2005-06-15 20:53:19 +00:00
Chris PeBenito
102a59ba77
add comments for clean and bare
2005-06-15 15:45:54 +00:00
Chris PeBenito
337e4afa22
for use until we have a full README
2005-06-15 15:34:44 +00:00
Chris PeBenito
c592e52e38
add install-src target
2005-06-15 14:14:20 +00:00
Chris PeBenito
f08f5a030e
initial commit
2005-06-15 14:10:38 +00:00
Chris PeBenito
c7b41e9536
add CFLAGS, and drop -C from install since it doesn't exist in all distros,
...
and its function is useless
2005-06-15 14:08:18 +00:00
Chris PeBenito
8eaa723d28
put user line in col 1, since genhomedircon breaks otherwise
2005-06-15 14:07:20 +00:00
Chris PeBenito
828e03f635
initial commit
2005-06-15 13:53:48 +00:00
Chris PeBenito
5e0da6a03e
finish renaming system/selinux to system/selinuxutil
2005-06-14 20:48:34 +00:00
Chris PeBenito
ff7bc148e4
move security_t to selinux module
2005-06-14 20:40:09 +00:00
Chris PeBenito
be4a8011d4
move selinux to selinuxutil
2005-06-14 20:12:46 +00:00
Chris PeBenito
8bd6789954
move constraints interfaces to domain module. move sysfs and usbfs to
...
devices module
2005-06-14 19:56:46 +00:00
Chris PeBenito
8ae194f629
when a generated file is already generated, it shows up in the generated_*
...
variable, and also the make wildcard, so use sort, since it removes
duplicates.
2005-06-14 18:39:55 +00:00
Chris PeBenito
810f2b7155
fix typo
2005-06-14 18:15:01 +00:00
Chris PeBenito
1beba1c654
fix up appconfig, and generate $(installdir)/booleans
2005-06-14 18:13:55 +00:00
Chris PeBenito
b57dd19400
stray renames in distro_redhat
2005-06-14 17:36:21 +00:00
Chris PeBenito
d2d6c8ce17
fix makefile to only rebuild modules.conf and tunables.conf explicitly
2005-06-14 15:54:55 +00:00
Chris PeBenito
e75f78666c
initial commit
2005-06-14 14:43:15 +00:00
Chris PeBenito
3eed10909e
convert relevant conditionals into tunable_policy
2005-06-14 14:43:04 +00:00
Chris PeBenito
92e928e1bd
start making genhomedircon work
2005-06-13 21:16:05 +00:00
Chris PeBenito
c24ac9c51c
rename requires_block_template to gen_require
2005-06-13 20:51:09 +00:00
Chris PeBenito
fa7bea8feb
rename requires_block_tempalte to gen_require
2005-06-13 20:47:04 +00:00
Chris PeBenito
34c8fabeeb
tunables work
2005-06-13 20:44:23 +00:00
Chris PeBenito
31908be07f
a few missed renames, and start fixing up tunables
2005-06-13 20:27:32 +00:00
Chris PeBenito
94670f292b
fix
2005-06-13 20:10:01 +00:00
Chris PeBenito
eec67390d7
make summary and description optional in interfaces until we can clean it up
2005-06-13 20:03:08 +00:00
Chris PeBenito
5a45e70177
rename setattr removable_device_t
2005-06-13 20:00:36 +00:00
Karl MacMillan
8700497fb1
Updates to documentation.
2005-06-13 19:22:00 +00:00
Chris PeBenito
61bbe5312e
add "this is a generated file!" comment to top of corenetwork.{te,if}
2005-06-13 18:40:08 +00:00
Chris PeBenito
3c6d78b920
ul end tag fix, and css tweak
2005-06-13 18:07:35 +00:00
Chris PeBenito
fae6ff9aab
update from method
2005-06-13 17:41:38 +00:00
Chris PeBenito
d9507b1874
fix xml
2005-06-13 17:40:51 +00:00
Chris PeBenito
c9428d33dc
renaming insanity
2005-06-13 17:35:46 +00:00
Chris PeBenito
b2bf0b5c98
overwrite the generated .te file instead of append
2005-06-13 17:32:40 +00:00
Karl MacMillan
f0c985ca80
Devices rename.
2005-06-13 16:22:32 +00:00
Chris PeBenito
12b559a402
move policy.xml to doc, so it doesnt get deleted on a make clean
2005-06-13 12:55:56 +00:00
Chris PeBenito
bec110090f
make module description optional and interface summary optional until
...
everything is updated
2005-06-10 21:12:55 +00:00
Chris PeBenito
e214f62733
html tag updates
2005-06-10 20:39:41 +00:00
Karl MacMillan
bef4f00aa9
Added missing interface.
2005-06-10 14:33:06 +00:00
Chris PeBenito
d46f023278
more updates from method
2005-06-10 01:35:43 +00:00
Chris PeBenito
0fd9dc55cf
renaming insanity
2005-06-10 01:01:13 +00:00
Chris PeBenito
24040829d0
fix can_exec
2005-06-10 01:00:48 +00:00
Chris PeBenito
e1db6e9d0d
policy.xml is now in tmp/
2005-06-09 23:06:49 +00:00
Chris PeBenito
cab7c00ff4
make macro work
2005-06-09 23:06:23 +00:00
Chris PeBenito
e3fd778b8f
add can_exec
2005-06-09 23:06:07 +00:00
Chris PeBenito
1b8d67d157
fix
2005-06-09 22:46:38 +00:00
Karl MacMillan
c75e65afad
Templates for menu ordering change.
2005-06-09 21:19:37 +00:00
Chris PeBenito
a154cd45f3
reorder
2005-06-09 21:07:58 +00:00
Karl MacMillan
d6b0f3712f
Fixed doc tool to order menus.
2005-06-09 21:05:33 +00:00
Chris PeBenito
5d9417870c
speed improvement
2005-06-09 20:53:45 +00:00
Chris PeBenito
588ffaeb7f
kernel.if renaming
2005-06-09 20:50:17 +00:00
Chris PeBenito
eda201efe8
more renaming and xml
2005-06-09 19:52:50 +00:00
Chris PeBenito
eca5b2dd79
rename
2005-06-09 19:22:27 +00:00
Chris PeBenito
997bd99521
fix bracket display for optional parameters
2005-06-09 19:21:32 +00:00
Chris PeBenito
20030ef5d6
add back html page generation
2005-06-09 19:02:52 +00:00
Chris PeBenito
1601fb3738
fixes and remove debug code
2005-06-09 19:02:32 +00:00
Chris PeBenito
fe3bd5a557
more indentation for modules in the menu
2005-06-09 18:56:50 +00:00
Chris PeBenito
eb437dd092
initial commit
2005-06-09 18:17:25 +00:00
Chris PeBenito
5a3299bd30
updates
2005-06-09 18:16:51 +00:00
Chris PeBenito
cc41a97c99
aliases
2005-06-09 18:08:26 +00:00
Chris PeBenito
7591e83cba
fix layer in module tag
2005-06-09 17:56:38 +00:00
Chris PeBenito
c6ebefd2f2
rename
2005-06-09 17:51:40 +00:00
Chris PeBenito
d90b274e40
for now, drop infoflow tags
2005-06-09 17:23:53 +00:00
Chris PeBenito
16e1cf48cd
make policy.xml depend on all if's being generated
2005-06-09 17:23:23 +00:00