51 Commits

Author	SHA1	Message	Date
Dominick Grift	ef521e9919	Tunable, optional and if(n)def blocks go below. ... Tunable, optional and if(n)def blocks go below. Tunable, optional and if(n)def blocks go below. Tunable, optional and if(n)def blocks go below. Tunable, optional and if(n)def blocks go below.	2010-09-22 15:41:43 +02:00
Dominick Grift	68ac47d8c5	Whitespace, newline and tab fixes. ... Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes.	2010-09-22 15:41:42 +02:00
Dominick Grift	1dfc76f76b	Use permission sets where possible. ... Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible.	2010-09-22 15:39:43 +02:00
Dan Walsh	3eaa993945	UPdate for f14 policy	2010-08-26 09:41:21 -04:00
Chris PeBenito	48f99a81c0	Whitespace change: drop unnecessary blank line at the start of .te files.	2010-06-10 08:16:35 -04:00
Chris PeBenito	29af4c13e7	Bump module versions for release.	2010-05-24 15:32:01 -04:00
Chris PeBenito	4e698b0fca	Cups patch from Dan Walsh.	2010-05-18 10:59:37 -04:00
Chris PeBenito	9570b28801	module version number bump for release 2.20090730 that was mistakenly omitted.	2009-08-05 10:59:21 -04:00
Chris PeBenito	8f3bddfbfd	cups patch from dan.	2009-07-28 15:46:26 -04:00
Chris PeBenito	3f67f722bb	trunk: whitespace fixes	2009-06-26 14:40:13 +00:00
Chris PeBenito	c1262146e0	trunk: Remove node definitions and change node usage to generic nodes.	2009-01-09 19:48:02 +00:00
Chris PeBenito	668b3093ff	trunk: change network interface access from all to generic network interfaces.	2009-01-06 20:24:10 +00:00
Chris PeBenito	17ec8c1f84	trunk: bump module versions for release.	2008-12-10 19:38:10 +00:00
Chris PeBenito	296273a719	trunk: merge UBAC.	2008-11-05 16:10:46 +00:00
Chris PeBenito	2cca6b79b4	trunk: remove redundant shared lib calls.	2008-10-17 17:31:04 +00:00
Chris PeBenito	0b36a2146e	trunk: Enable open permission checks policy capability.	2008-10-16 16:09:20 +00:00
Chris PeBenito	5d4f4b5375	trunk: bump version numbers for release.	2008-10-14 15:46:36 +00:00
Chris PeBenito	9bcfb6dfa5	trunk: hplip uses dbus.	2008-08-29 14:25:09 +00:00
Chris PeBenito	0bfccda4e8	trunk: massive whitespace cleanup from dominick grift.	2008-07-23 21:38:39 +00:00
Chris PeBenito	cfcf5004e5	trunk: bump versions for release.	2008-07-02 14:07:57 +00:00
Chris PeBenito	b34db7a8ec	trunk: another pile of misc fixes.	2008-05-22 15:24:52 +00:00
Chris PeBenito	e9c6cda7da	trunk: Move user roles into individual modules.	2008-04-29 13:58:34 +00:00
Chris PeBenito	f7925f25f7	trunk: bump module versions for release.	2007-12-14 14:23:18 +00:00
Chris PeBenito	c0cf6e0a6e	trunk: clean up nsswitch usage, from dan.	2007-12-04 15:05:55 +00:00
Chris PeBenito	6ab634a512	trunk: fix dup specification for /var/spool/cups/*	2007-11-16 20:03:18 +00:00
Chris PeBenito	bd973e3e68	trunk: remove unused types from dbus.	2007-10-26 18:04:38 +00:00
Chris PeBenito	12e9ea1ae3	trunk: module version bumps for previous commit.	2007-10-02 17:15:07 +00:00
Chris PeBenito	350b6ab767	trunk: merge strict and targeted policies. merge shlib_t into lib_t.	2007-10-02 16:04:50 +00:00
Chris PeBenito	3480f3f239	trunk: bump version numbers for release.	2007-09-28 13:58:24 +00:00
Chris PeBenito	2af7b42a06	trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.	2007-08-22 20:21:52 +00:00
Chris PeBenito	f8233ab7b0	trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.	2007-08-20 18:26:08 +00:00
Chris PeBenito	2d0c9cecaf	trunk: several MLS enhancements.	2007-08-20 15:15:03 +00:00
Chris PeBenito	116c1da330	trunk: update module version numbers for release.	2007-06-29 14:48:13 +00:00
Chris PeBenito	1900668638	trunk: Unified labeled networking policy from Paul Moore. ... The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules. trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore. This patch changes the policy to use the netmsg initial SID as the "base" SID/context for NetLabel packets which only have MLS security attributes. Currently we use the unlabeled initial SID which makes it very difficult to distinquish between actual unlabeled packets and those packets which have MLS security attributes.	2007-06-27 15:23:21 +00:00
Chris PeBenito	d5b81a81ff	trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().	2007-06-12 18:46:14 +00:00
Chris PeBenito	0251df3e39	bump module versions for release	2007-04-17 13:28:09 +00:00
Chris PeBenito	8021cb4f63	Merge sbin_t and ls_exec_t into bin_t.	2007-03-23 23:24:59 +00:00
Chris PeBenito	a5f5eba459	Add dontaudits for init fds and console to init_daemon_domain().	2007-03-20 18:47:18 +00:00
Chris PeBenito	66cf194680	Patch to remove redundant mls_trusted_object() call from Dan Walsh.	2007-02-23 20:05:12 +00:00
Chris PeBenito	6b19be3360	patch from dan, Thu, 2007-01-25 at 08:12 -0500	2007-02-16 23:01:42 +00:00
Chris PeBenito	42c5c5f612	bump versions for release.	2006-12-12 21:22:47 +00:00
Chris PeBenito	c0868a7a3b	merge policy patterns to trunk	2006-12-12 20:08:08 +00:00
Chris PeBenito	d6d16b9796	patch from dan Wed, 29 Nov 2006 17:06:40 -0500	2006-12-04 20:10:56 +00:00
Chris PeBenito	d9845ae92a	patch from dan Tue, 24 Oct 2006 11:00:28 -0400	2006-10-31 21:01:48 +00:00
Chris PeBenito	a52b4d4f23	bump versions to release numbers	2006-10-18 19:25:27 +00:00
Chris PeBenito	e070dd2df0	- Move range transitions to modules. ... - Make number of MLS sensitivities, and number of MLS and MCS categories configurable as build options.	2006-10-04 17:25:34 +00:00
Chris PeBenito	8708d9bef2	patch from dan Wed, 20 Sep 2006 12:12:49 -0400	2006-09-22 17:14:35 +00:00
Chris PeBenito	376fbc0be9	clean up usercanread	2006-09-11 18:23:09 +00:00
Chris PeBenito	a5e2133bc8	patch from dan Wed, 23 Aug 2006 14:03:49 -0400	2006-08-29 02:41:00 +00:00
Chris PeBenito	33c7e6b4e8	remove dead selopt rules	2006-08-15 20:00:58 +00:00