Chris PeBenito
49317e6b49
fix corenetwork so the ifdef enable_mls survives to regular processing.
2006-09-29 17:37:57 +00:00
Chris PeBenito
6c63996d9b
fix build error
2006-09-29 14:24:57 +00:00
Chris PeBenito
e2b84ef79a
patch from dan Mon, 25 Sep 2006 15:46:40 -0400
2006-09-28 14:37:29 +00:00
Chris PeBenito
693d4aedb5
patch from dan Fri, 22 Sep 2006 16:30:34 -0400
2006-09-25 18:53:06 +00:00
Chris PeBenito
8708d9bef2
patch from dan Wed, 20 Sep 2006 12:12:49 -0400
2006-09-22 17:14:35 +00:00
Chris PeBenito
a9e03b3752
* add a macro for generating category declarations
...
* fix userdom_search_all_users_home_content() to use search_dir_perms;
* change ssh daemon macro to use userdom_search_all_users_home_dirs() instead of _home_content()
2006-09-21 15:48:15 +00:00
Chris PeBenito
bf469d7669
gentoo testing fixes
2006-09-19 17:02:29 +00:00
Chris PeBenito
cf7af137c0
add mls fd constraints
2006-09-15 19:05:03 +00:00
Chris PeBenito
2b571d6880
common users list inotifyfs
2006-09-14 18:19:04 +00:00
Chris PeBenito
9dfbd81493
forgot to bump policy vers
2006-09-13 18:42:49 +00:00
Chris PeBenito
73ca55d311
patches from erich Wed, 13 Sep 2006 16:18:18 +0200
2006-09-13 18:35:10 +00:00
Chris PeBenito
2cac32a605
fix miscfiles_read_localization()
2006-09-13 18:08:17 +00:00
Chris PeBenito
0d96ff339e
misc fixes
2006-09-13 14:23:04 +00:00
Chris PeBenito
376fbc0be9
clean up usercanread
2006-09-11 18:23:09 +00:00
Chris PeBenito
b1bf2f7811
add last bit of role infrastructure
2006-09-11 15:26:25 +00:00
Chris PeBenito
95b8223eed
cleanups
2006-09-08 17:21:28 +00:00
Chris PeBenito
bbcd3c97dd
add main part of role-o-matic
2006-09-06 22:07:25 +00:00
Chris PeBenito
75beb95014
patch from dan Tue, 05 Sep 2006 17:06:06 -0400
2006-09-06 16:36:23 +00:00
Chris PeBenito
91dabf4d78
fix up usb.ids per distro
2006-09-05 14:31:27 +00:00
Chris PeBenito
13d7cec671
patch from erich Sat, 02 Sep 2006 03:37:44 +0200
2006-09-04 18:22:12 +00:00
Chris PeBenito
5dbda5558a
patch from dan Fri, 01 Sep 2006 15:45:24 -0400
2006-09-04 15:15:35 +00:00
Chris PeBenito
eac818f040
patch from dan Thu, 31 Aug 2006 15:16:30 -0400
2006-09-01 15:52:05 +00:00
Chris PeBenito
a5e2133bc8
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
Chris PeBenito
ce6bf7cc23
more testing fixes
2006-08-28 02:46:20 +00:00
Chris PeBenito
e539a49638
This patch enables to use xattr on jffs2 filesystem.
...
The jffs2 filesystem is a filesystem for memory technology
devices (MTD), and xattr supporting on jffs2 is neccesary
to use SELinux with a small diskless PDA and so on.
This facility is queued for kernel 2.6.18 now, so I hope
to merge this small patch into the refpolicy repository.
Example of xattr/jffs2: SELinux on OpenZaurus :D
http://www.kaigai.gr.jp/pub/sezaurus.jpg
Thanks,
--
KaiGai Kohei <kaigai@kaigai.gr.jp>
2006-08-25 13:28:57 +00:00
Chris PeBenito
de222824e9
fix gentoo /opt contexts
2006-08-25 13:26:21 +00:00
Chris PeBenito
98de871cee
more strict testing fixes
2006-08-23 19:36:04 +00:00
Chris PeBenito
d15dd5a739
more testing fixes
2006-08-23 03:47:39 +00:00
Chris PeBenito
5b4ff3a104
fix ordering bug
2006-08-22 19:56:59 +00:00
Chris PeBenito
3ef029db7c
add nscd_socket_use() to auth_use_nsswitch() since it caches nss lookups.
2006-08-22 19:37:56 +00:00
Chris PeBenito
2ed690dd9b
fix typo in sxid
2006-08-21 13:35:51 +00:00
Chris PeBenito
e9b9e45214
testing fixes
2006-08-18 18:20:22 +00:00
Chris PeBenito
4bc6e32e28
fix for netfilter_contexts
2006-08-18 14:01:48 +00:00
Chris PeBenito
ba1a545fb3
cleanup in authlogin
2006-08-17 15:35:14 +00:00
Chris PeBenito
3573908f1c
fix cron_system_entry() rules
2006-08-16 13:52:18 +00:00
Chris PeBenito
33c7e6b4e8
remove dead selopt rules
2006-08-15 20:00:58 +00:00
Chris PeBenito
497da0953c
ps/ptrace dontaudit cleanup
2006-08-08 17:49:03 +00:00
Chris PeBenito
4846dc8ad4
patch from Stefan for mrtg daemon operation.
2006-08-07 17:14:00 +00:00
Chris PeBenito
80f928e24b
display warning if using loadkeys_domtrans() in targeted
2006-08-03 18:02:28 +00:00
Chris PeBenito
85476e94d8
fix up mtrr interfaces. missing the file class on a few interfaces, and read and write cannot be split.
2006-08-01 14:43:10 +00:00
Chris PeBenito
4b3b46d7ef
add authlogin interface to abstract common login program perms
2006-07-31 22:26:59 +00:00
Chris PeBenito
46551033aa
patch from dan Wed, 26 Jul 2006 14:42:46 -0400
2006-07-28 15:13:58 +00:00
Chris PeBenito
81aa67fcc0
more ssh agent fixes
2006-07-26 21:16:45 +00:00
Chris PeBenito
528811e040
clean up most of the remaining ssh TODO
2006-07-26 20:34:09 +00:00
Chris PeBenito
79f5f5e8fd
add gdm Xsession fc
2006-07-26 20:33:23 +00:00
Chris PeBenito
d617143ba4
remove deprecated mount_send_nfs_client_request() from stunnel
2006-07-25 22:28:47 +00:00
Chris PeBenito
ea3c1f508a
add helpers for printing warning and error messages
2006-07-25 17:27:00 +00:00
Chris PeBenito
8b9ebd3769
some cleanup in the kernel layer
2006-07-25 15:23:13 +00:00
Chris PeBenito
19ebf01d6a
patch to fix escaping of . in file contexts from james athey
2006-07-24 15:43:57 +00:00
Chris PeBenito
d822675850
add access to keys for unconfined
2006-07-14 13:11:42 +00:00
Chris PeBenito
da9bbc655a
fix up audit message perms now that audit_write denials are being audited by the kernel.
2006-07-13 17:22:08 +00:00
Chris PeBenito
133000c286
remove setbool auditallow, except for distro_rhel4.
2006-07-13 14:22:21 +00:00
Chris PeBenito
17de1b790b
remove extra level of directory
2006-07-12 20:32:27 +00:00