Chris PeBenito
|
308baad28c
|
trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.
|
2008-05-26 18:38:06 +00:00 |
|
Chris PeBenito
|
0ecd829ab4
|
trunk: add additional portage log locations.
|
2008-05-26 18:37:05 +00:00 |
|
Chris PeBenito
|
8926b25f39
|
trunk: tweak kerneloops.
|
2008-05-26 17:48:56 +00:00 |
|
Chris PeBenito
|
782c10e949
|
trunk: add kerneloops from dan.
|
2008-05-26 17:47:49 +00:00 |
|
Chris PeBenito
|
ff79b83c51
|
trunk: add kismet from dan.
|
2008-05-26 15:35:25 +00:00 |
|
Chris PeBenito
|
cbe82b179b
|
trunk: start adding open perm to obvious places.
|
2008-05-23 18:22:57 +00:00 |
|
Chris PeBenito
|
7d8fbdc062
|
trunk: fix bad cifs interface.
|
2008-05-23 14:41:36 +00:00 |
|
Chris PeBenito
|
e6fdb59601
|
trunk: fix typo
|
2008-05-23 13:50:38 +00:00 |
|
Chris PeBenito
|
8db508568b
|
trunk: temp workaround for toolchain breakage.
|
2008-05-23 12:52:31 +00:00 |
|
Chris PeBenito
|
4416c416fa
|
trunk: Module loading now requires setsched on kernel threads.
|
2008-05-22 18:39:03 +00:00 |
|
Chris PeBenito
|
b34db7a8ec
|
trunk: another pile of misc fixes.
|
2008-05-22 15:24:52 +00:00 |
|
Chris PeBenito
|
8f3a0a95e0
|
trunk: a pile of misc fixes, mainly sync xml docs with interface implementation.
|
2008-05-15 13:10:34 +00:00 |
|
Chris PeBenito
|
a42ce93a4d
|
trunk: Patch to allow gpg agent --write-env-file option from Vaclav Ovsik.
|
2008-05-12 20:05:32 +00:00 |
|
Chris PeBenito
|
d923d54c08
|
trunk: X application data class from Eamon Walsh and Ted Toth.
|
2008-05-06 14:37:05 +00:00 |
|
Chris PeBenito
|
e9c6cda7da
|
trunk: Move user roles into individual modules.
|
2008-04-29 13:58:34 +00:00 |
|
Chris PeBenito
|
a0647afa0c
|
trunk: add missing mplayer_etc_t require in role template.
|
2008-04-21 12:47:09 +00:00 |
|
Chris PeBenito
|
7e11b74087
|
trunk: make hald_log_t a log file.
|
2008-04-18 16:04:15 +00:00 |
|
Chris PeBenito
|
f12302af92
|
trunk: hal xml doc fix pointed out by Rob Myers.
|
2008-04-18 15:55:03 +00:00 |
|
Chris PeBenito
|
2083db2e40
|
trunk: Cryptsetup runs shell scripts. Patch from Martin Orr.
|
2008-04-18 15:32:03 +00:00 |
|
Chris PeBenito
|
c07f9ccd18
|
trunk: Add file for enabling policy capabilities.
|
2008-04-18 14:21:01 +00:00 |
|
Chris PeBenito
|
75da4b8ad3
|
trunk: Patch to fix leaky interface/template call depth calculator from Vaclav Ovsik.
|
2008-04-18 12:57:01 +00:00 |
|
Chris PeBenito
|
8152a78836
|
trunk: 7 patches from dan.
|
2008-04-04 17:08:34 +00:00 |
|
Chris PeBenito
|
0a14f3ae09
|
trunk: bump module version numbers for release.
|
2008-04-02 16:04:43 +00:00 |
|
Chris PeBenito
|
2c12b471ad
|
trunk: add core xselinux support.
|
2008-04-01 20:23:23 +00:00 |
|
Chris PeBenito
|
e828954c63
|
trunk: 4 patches from dan.
|
2008-03-27 15:20:16 +00:00 |
|
Chris PeBenito
|
9377a3e59c
|
trunk: fix winbind socket connection interface for default location of the sock_file.
|
2008-03-21 14:18:13 +00:00 |
|
Chris PeBenito
|
9e8c3aa651
|
trunk: add type transition to fix mysql socket creation.
|
2008-03-21 14:16:17 +00:00 |
|
Chris PeBenito
|
2ed4f5aedf
|
trunk: small fixes for gentoo system.
|
2008-03-20 14:55:17 +00:00 |
|
Chris PeBenito
|
6e2123fc72
|
trunk: add wireshark.
|
2008-03-14 15:26:52 +00:00 |
|
Chris PeBenito
|
91d6c92160
|
trunk: a pair of tweaks from gentoo systems.
|
2008-03-14 14:55:34 +00:00 |
|
Chris PeBenito
|
47333d8246
|
trunk: Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too.
|
2008-03-10 19:29:47 +00:00 |
|
Chris PeBenito
|
210607be61
|
trunk: Definitions for open permisson on file and similar objects from Eric Paris.
|
2008-03-04 20:19:29 +00:00 |
|
Chris PeBenito
|
e065ac8ab5
|
trunk: Apt updates for ptys and logs, from Martin Orr.
|
2008-03-04 19:48:58 +00:00 |
|
Chris PeBenito
|
01e8ff4ab3
|
trunk: rpc update from Vaclav Ovsik.
|
2008-03-04 19:14:08 +00:00 |
|
Chris PeBenito
|
737fcf232c
|
trunk: dontaudit init fds in loadkeys.
|
2008-03-04 18:48:30 +00:00 |
|
Chris PeBenito
|
d57a094347
|
trunk: Exim updates on Debian from Devin Carrawy.
|
2008-03-04 18:25:13 +00:00 |
|
Chris PeBenito
|
834401ff97
|
trunk: dovecot fix from Stefan Schulze Frielinghaus.
|
2008-02-25 19:31:03 +00:00 |
|
Chris PeBenito
|
90c3c561ef
|
trunk: fc fix and if addtion from Stefan Schulze Frielinghaus.
|
2008-02-25 14:20:56 +00:00 |
|
Chris PeBenito
|
9fa023ff58
|
trunk: Pam and samba updates from Stefan Schulze Frielinghaus.
|
2008-02-19 19:33:48 +00:00 |
|
Chris PeBenito
|
45b56b01e8
|
trunk: Backup update on Debian from Vaclav Ovsik.
|
2008-02-19 14:26:59 +00:00 |
|
Chris PeBenito
|
51223bfc56
|
trunk: Cracklib update on Deban from Vaclav Ovsik.
|
2008-02-19 14:06:11 +00:00 |
|
Chris PeBenito
|
ee6608baeb
|
trunk: 8 patches from dan.
|
2008-02-18 18:44:40 +00:00 |
|
Chris PeBenito
|
f508567646
|
trunk: 4 patches from dan.
|
2008-02-18 14:55:25 +00:00 |
|
Chris PeBenito
|
037fc0f4e6
|
trunk: label /proc/kallsyms with system_map_t.
|
2008-02-15 19:59:10 +00:00 |
|
Chris PeBenito
|
4f017813ab
|
trunk: fix pppd admin interface.
|
2008-02-14 16:03:24 +00:00 |
|
Chris PeBenito
|
6e7a1fc871
|
trunk: fix userdom_role_change_template() xml.
|
2008-02-13 20:26:18 +00:00 |
|
Chris PeBenito
|
f03433313a
|
trunk: labeled networking permission update from paul moore.
|
2008-02-12 14:46:29 +00:00 |
|
Chris PeBenito
|
8b9ffed517
|
trunk: add capability2 class, from Stephen Smalley.
|
2008-02-07 17:51:59 +00:00 |
|
Chris PeBenito
|
7a5e2d8a37
|
trunk: 12 patches from dan.
|
2008-02-07 16:37:47 +00:00 |
|
Chris PeBenito
|
12cf805e1c
|
trunk: add basic ubuntu support
|
2008-02-05 18:24:43 +00:00 |
|
Chris PeBenito
|
ce8a5299a8
|
trunk: 3 patches from dan.
|
2008-02-05 17:41:53 +00:00 |
|
Chris PeBenito
|
320ea98330
|
trunk: add 3rd party corenet interfaces for (secmark) packets.
|
2008-01-17 15:28:24 +00:00 |
|
Chris PeBenito
|
d4623f3d24
|
trunk: add setfcap capabiltiy, from Serge Hallyn.
|
2008-01-11 14:08:02 +00:00 |
|
Chris PeBenito
|
c8d4c38258
|
trunk: fix missing lo netif alias for standard and mcs configs.
|
2008-01-10 16:39:36 +00:00 |
|
Chris PeBenito
|
936f286c16
|
trunk: add mls constraints to dbus.
|
2008-01-03 20:37:25 +00:00 |
|
Chris PeBenito
|
9323a50bcc
|
trunk: add run_init domtrans to chk passwd.
|
2008-01-03 19:46:40 +00:00 |
|
Chris PeBenito
|
7cbfeb97cf
|
trunk: uncomment set loginuid for functional login programs under strict.
|
2008-01-03 18:30:45 +00:00 |
|
Chris PeBenito
|
f3da31d339
|
trunk: Labeled networking peer object class updates.
|
2008-01-03 16:20:01 +00:00 |
|
Chris PeBenito
|
f7925f25f7
|
trunk: bump module versions for release.
|
2007-12-14 14:23:18 +00:00 |
|
Chris PeBenito
|
1abafe3707
|
trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.
|
2007-12-12 16:18:50 +00:00 |
|
Chris PeBenito
|
02d968c581
|
trunk: several fc updates from dan.
|
2007-12-12 15:55:21 +00:00 |
|
Chris PeBenito
|
9f6e2db3ae
|
trunk: add openoffice locations in gentoo.
|
2007-12-10 15:59:01 +00:00 |
|
Chris PeBenito
|
dd9e1de35e
|
trunk: Improve several tunables descriptions from Dan Walsh.
|
2007-12-07 15:44:53 +00:00 |
|
Chris PeBenito
|
09e21686ea
|
trunk: another round of nsswitch from dan.
|
2007-12-06 16:04:14 +00:00 |
|
Chris PeBenito
|
74d920c3b5
|
trunk: add setrlimit to debian cron.
|
2007-12-06 14:35:44 +00:00 |
|
Chris PeBenito
|
5f63dd12a3
|
trunk: fix xconsole rw interface.
|
2007-12-04 15:11:53 +00:00 |
|
Chris PeBenito
|
c0cf6e0a6e
|
trunk: clean up nsswitch usage, from dan.
|
2007-12-04 15:05:55 +00:00 |
|
Chris PeBenito
|
08dccef215
|
trunk: add /dev symlink relabel since its not short circuited.
|
2007-11-30 15:56:48 +00:00 |
|
Chris PeBenito
|
f98cfb5a29
|
trunk: version bump for newrole fixes.
|
2007-11-28 20:20:49 +00:00 |
|
Chris PeBenito
|
c2b87f2af5
|
trunk: test fix 2 for newrole.
|
2007-11-28 19:06:07 +00:00 |
|
Chris PeBenito
|
6138d3da0e
|
trunk: test fix for newrole.
|
2007-11-28 18:39:47 +00:00 |
|
Chris PeBenito
|
1483be1fe5
|
trunk: handle early boot on debian, for /dev labeling.
|
2007-11-26 20:22:17 +00:00 |
|
Chris PeBenito
|
2f5c2f23da
|
trunk: remove duplicate init_system_domain() call for setfiles, from Vaclav Ovsik.
|
2007-11-26 19:32:51 +00:00 |
|
Chris PeBenito
|
0aa18d9fd5
|
trunk: version bumps for previous commit.
|
2007-11-26 16:46:38 +00:00 |
|
Chris PeBenito
|
0b6acad1bb
|
trunk: More complete labeled networking infrastructure from KaiGai Kohei.
|
2007-11-26 16:44:57 +00:00 |
|
Chris PeBenito
|
8d1f9d9e14
|
trunk: add missing tcp_socket rules for xfs.
|
2007-11-19 20:36:33 +00:00 |
|
Chris PeBenito
|
6ab634a512
|
trunk: fix dup specification for /var/spool/cups/*
|
2007-11-16 20:03:18 +00:00 |
|
Chris PeBenito
|
ccf6611bdd
|
trunk: add unconfined_run_to().
|
2007-11-16 19:50:34 +00:00 |
|
Chris PeBenito
|
013783b2b1
|
trunk: switch newrole and run_init over to use nsswitch.
|
2007-11-16 15:58:23 +00:00 |
|
Chris PeBenito
|
53da70cdaa
|
trunk: deprecate seutil_manage_selinux_config() in favor of correctly named seutil_manage_config().
|
2007-11-16 15:39:55 +00:00 |
|
Chris PeBenito
|
389ad7b48d
|
trunk: reorganize selinuxutil.
|
2007-11-16 15:39:09 +00:00 |
|
Chris PeBenito
|
eeef8dc451
|
trunk: Add interface for libselinux constructor, for libselinux-linked SELinux-enabled programs.
|
2007-11-16 14:58:17 +00:00 |
|
Chris PeBenito
|
226c06969c
|
trunk: 9 patches from dan.
|
2007-11-15 20:10:26 +00:00 |
|
Chris PeBenito
|
6c91189762
|
trunk: 8 patches from dan.
|
2007-11-15 16:54:18 +00:00 |
|
Chris PeBenito
|
2999cea1f2
|
trunk: remove duplicate specifiction for /usr/lib/devices on debian.
|
2007-11-14 20:12:44 +00:00 |
|
Chris PeBenito
|
9820351703
|
trunk: add in polmatch for default spd.
|
2007-11-14 15:53:18 +00:00 |
|
Chris PeBenito
|
bdccbacdd6
|
trunk: add labeled networking support to unconfined.
|
2007-11-14 14:38:45 +00:00 |
|
Chris PeBenito
|
a56055e362
|
trunk: rearrange the bottom of domain.if and fix domain_ipsec_labels().
|
2007-11-14 13:40:25 +00:00 |
|
Chris PeBenito
|
847937da7d
|
trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.
|
2007-11-13 19:31:43 +00:00 |
|
Chris PeBenito
|
3b498a9105
|
trunk: add gentoo hal fc entry.
|
2007-11-12 14:17:39 +00:00 |
|
Chris PeBenito
|
4605adcba7
|
trunk: add postfixpolicyd from Jan-Frode Myklebust.
|
2007-11-07 20:17:44 +00:00 |
|
Chris PeBenito
|
eaed904cd5
|
trunk: 3 patches from dan.
|
2007-11-05 19:35:08 +00:00 |
|
Chris PeBenito
|
3ece11804e
|
trunk: fix init_ranged_system_domain range_transition object class, from james carter.
|
2007-10-29 22:09:53 +00:00 |
|
Chris PeBenito
|
7d4161cdc9
|
trunk: 3 patches from dan.
|
2007-10-29 22:08:34 +00:00 |
|
Chris PeBenito
|
495df41602
|
trunk: 11 patches from dan.
|
2007-10-29 18:35:32 +00:00 |
|
Chris PeBenito
|
bd973e3e68
|
trunk: remove unused types from dbus.
|
2007-10-26 18:04:38 +00:00 |
|
Chris PeBenito
|
8e2fb69f88
|
trunk: filesystem patch from dan.
|
2007-10-24 18:37:26 +00:00 |
|
Chris PeBenito
|
6bf8bf4f5c
|
trunk: add exim from dan.
|
2007-10-24 15:07:40 +00:00 |
|
Chris PeBenito
|
3c99e5989a
|
trunk: add /var/lib search for system bus template.
|
2007-10-22 15:53:31 +00:00 |
|
Chris PeBenito
|
2f27163c1b
|
trunk: 3 patches from dan.
|
2007-10-18 19:31:14 +00:00 |
|
Chris PeBenito
|
a334d2918f
|
trunk: add infrastructure for managing user web content.
|
2007-10-18 19:23:33 +00:00 |
|
Chris PeBenito
|
e83edee5d2
|
trunk: fix do not userspace commons in kernel version of av_permissions.h.
|
2007-10-16 19:05:27 +00:00 |
|
Chris PeBenito
|
32c05ccbcd
|
trunk: fix flask.py Flask class userspace dictionary usage.
|
2007-10-16 18:56:32 +00:00 |
|
Chris PeBenito
|
651df3ceb6
|
trunk: do not emit lines in the kernel version of av_inherit.h for commons that are only inherited by userspace object classes.
|
2007-10-16 18:30:23 +00:00 |
|
Chris PeBenito
|
3a9096d94f
|
trunk: do not emit S_(0, 0, 0) in kernel headers for userspace classes that inherit commons.
|
2007-10-16 16:02:51 +00:00 |
|
Chris PeBenito
|
36627094e8
|
trunk: fix unconditional call to nscd from usermanage run interfaces.
|
2007-10-15 18:16:00 +00:00 |
|
Chris PeBenito
|
a27d1c6e84
|
trunk: gdm is in /usr/sbin on rawhide machines, from Eamon Walsh.
|
2007-10-15 17:50:07 +00:00 |
|
Chris PeBenito
|
f48782758e
|
trunk: reorganize amanda and bind
|
2007-10-12 17:50:11 +00:00 |
|
Chris PeBenito
|
bc01b352f6
|
trunk: 2 patches from dan.
|
2007-10-12 17:35:56 +00:00 |
|
Chris PeBenito
|
cdf98fedc0
|
trunk: 10 patches from dan.
|
2007-10-11 18:12:29 +00:00 |
|
Chris PeBenito
|
ef659a476e
|
Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.
|
2007-10-09 17:29:48 +00:00 |
|
Chris PeBenito
|
81d4c88f8c
|
trunk: remove stale user_net_control reference in usernetctl.if.
|
2007-10-08 13:38:25 +00:00 |
|
Chris PeBenito
|
6c53a10e28
|
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
|
2007-10-05 18:00:55 +00:00 |
|
Chris PeBenito
|
12e9ea1ae3
|
trunk: module version bumps for previous commit.
|
2007-10-02 17:15:07 +00:00 |
|
Chris PeBenito
|
350b6ab767
|
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
|
2007-10-02 16:04:50 +00:00 |
|
Chris PeBenito
|
3480f3f239
|
trunk: bump version numbers for release.
|
2007-09-28 13:58:24 +00:00 |
|
Chris PeBenito
|
aef93a760f
|
trunk: one-liner from Shintaro Fujiwara
|
2007-09-26 14:28:20 +00:00 |
|
Chris PeBenito
|
4ddc7ba539
|
trunk: xml doc one-liner from Stefan Schulze Frielinghaus.
|
2007-09-24 13:01:17 +00:00 |
|
Chris PeBenito
|
ff4085dacc
|
trunk: one-liner from Shintaro Fujiwara.
|
2007-09-18 19:49:35 +00:00 |
|
Chris PeBenito
|
6f49b490b8
|
trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.
|
2007-09-17 18:04:35 +00:00 |
|
Chris PeBenito
|
0cf6df55e5
|
trunk: add awstats from Stefan Schulze Frielinghaus.
|
2007-09-17 17:25:40 +00:00 |
|
Chris PeBenito
|
8242f5a68d
|
trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().
|
2007-09-17 14:33:40 +00:00 |
|
Chris PeBenito
|
14add30d03
|
trunk: 3 patches from dan.
|
2007-09-12 14:53:39 +00:00 |
|
Chris PeBenito
|
134a799c75
|
trunk: 3 patches from dan.
|
2007-09-11 19:24:32 +00:00 |
|
Chris PeBenito
|
8a9d6f6449
|
trunk: 6 patches from dan.
|
2007-09-07 13:41:20 +00:00 |
|
Chris PeBenito
|
abc89340c4
|
trunk: two tiny patches from Stefan Schulze Frielinghaus
|
2007-09-06 19:29:54 +00:00 |
|
Chris PeBenito
|
72f82c47c2
|
trunk: six patches from dan.
|
2007-09-06 18:34:40 +00:00 |
|
Chris PeBenito
|
8241b538af
|
trunk: udev update and brctl module from dan.
|
2007-09-05 17:55:57 +00:00 |
|
Chris PeBenito
|
016e5c5cdc
|
trunk: 4 patches from dan.
|
2007-09-05 14:48:21 +00:00 |
|
Chris PeBenito
|
0a0b8078ca
|
trunk: 5 patches from dan.
|
2007-09-04 18:57:58 +00:00 |
|
Chris PeBenito
|
ce2c80f3c6
|
trunk: make coda nfs_t, ticket #39.
|
2007-09-04 13:38:39 +00:00 |
|
Chris PeBenito
|
4922765ec6
|
trunk: fix certwatch_run() interface, which had a typo in the name.
|
2007-08-30 15:01:48 +00:00 |
|
Chris PeBenito
|
6dd721a686
|
trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.
|
2007-08-27 17:57:36 +00:00 |
|
Chris PeBenito
|
a2f444884b
|
trunk: patch to allow sendmail to read ssl/tls certificates from Stefan Schulze Frielinghaus.
|
2007-08-27 17:00:18 +00:00 |
|
Chris PeBenito
|
752ddf588f
|
trunk: add missing commas in can_exec in daemontools that worked by luck.
|
2007-08-24 15:55:06 +00:00 |
|
Chris PeBenito
|
d62c0881e2
|
Update MLS constraints from LSPP evaluated policy.
|
2007-08-24 14:14:29 +00:00 |
|
Chris PeBenito
|
2af7b42a06
|
trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.
|
2007-08-22 20:21:52 +00:00 |
|
Chris PeBenito
|
8d2c34195e
|
trunk: updates from dan on 9 modules
|
2007-08-22 20:02:41 +00:00 |
|
Chris PeBenito
|
80d5e02c81
|
trunk: Files and radvd updates from Stefan Schulze Frielinghaus.
|
2007-08-21 19:03:34 +00:00 |
|
Chris PeBenito
|
1779bef032
|
trunk: fix gdm xsession scripts on redhat machines.
|
2007-08-20 18:54:29 +00:00 |
|
Chris PeBenito
|
f8233ab7b0
|
trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.
|
2007-08-20 18:26:08 +00:00 |
|
Chris PeBenito
|
2d0c9cecaf
|
trunk: several MLS enhancements.
|
2007-08-20 15:15:03 +00:00 |
|
Chris PeBenito
|
9760cbec2d
|
trunk: Database userspace object manager classes from KaiGai Kohei.
|
2007-08-09 13:15:07 +00:00 |
|
Chris PeBenito
|
3d6e962dfa
|
trunk: filesystem patch from dan
|
2007-08-08 20:04:28 +00:00 |
|
Chris PeBenito
|
939a4287b3
|
trunk: 3 patches from dan
|
2007-08-07 17:06:32 +00:00 |
|
Chris PeBenito
|
c040ea12b2
|
trunk: several support macro fixes.
|
2007-07-31 15:11:22 +00:00 |
|
Chris PeBenito
|
371d11ec04
|
trunk: add 3rd party interface for apache cgi.
|
2007-07-26 19:48:40 +00:00 |
|
Chris PeBenito
|
63acaf59d7
|
trunk: fix pipe permission set in domtrans_pattern().
|
2007-07-26 19:41:15 +00:00 |
|
Chris PeBenito
|
924f3cc2cb
|
trunk: add getserv and shmemserv nscd permissions.
|
2007-07-24 19:52:18 +00:00 |
|
Chris PeBenito
|
708aab1393
|
trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.
|
2007-07-20 18:25:26 +00:00 |
|