Commit Graph

628 Commits

Author SHA1 Message Date
Daniel J Walsh
0088858611 - Allow su to read /etc/mtab 2006-01-05 21:55:48 +00:00
Daniel J Walsh
aaa1fb9063 - Update to upstream 2006-01-05 21:54:11 +00:00
Daniel J Walsh
026fac633f - Update to upstream 2006-01-04 19:21:36 +00:00
Daniel J Walsh
2864321e7c - Update to upstream 2006-01-04 19:20:36 +00:00
Daniel J Walsh
a736f971f2 - Update to upstream 2006-01-04 19:02:16 +00:00
Daniel J Walsh
120d3b52ce - Fix "libsemanage.parse_module_headers: Data did not represent a module."
problem
2006-01-03 18:23:17 +00:00
Daniel J Walsh
ce66f5002d - Allow load_policy to read /etc/mtab 2006-01-03 17:21:11 +00:00
Daniel J Walsh
1f312240b0 - Fix dovecot to allow dovecot_auth to look at /tmp 2006-01-02 19:56:17 +00:00
Daniel J Walsh
d7b05bca05 - Allow restorecon to read unlabeled_t directories in order to fix
labeling.
2006-01-02 19:38:23 +00:00
Daniel J Walsh
3607aaf0c5 - Add Logwatch policy 2006-01-02 13:26:14 +00:00
Daniel J Walsh
a08ba87128 - Add Logwatch policy 2005-12-30 16:08:00 +00:00
Daniel J Walsh
798572ff3d - Fix /dev/ub[a-z] file context 2005-12-28 12:56:36 +00:00
Daniel J Walsh
9f7b037d0a - Fix library specification
- Give kudzu execmem privs
2005-12-27 20:34:15 +00:00
Daniel J Walsh
596229f500 - Fix hostname in targeted policy 2005-12-22 22:35:01 +00:00
Daniel J Walsh
5a47e648ad - Fix passwd command on mls 2005-12-22 21:40:15 +00:00
Daniel J Walsh
71ee99d3db - Lots of fixes to make mls policy work 2005-12-21 18:07:27 +00:00
Daniel J Walsh
6e9ee77d3b - Add dri libs to textrel_shlib_t
- Add system_r role for java
- Add unconfined_exec_t for vncserver
- Allow slapd to use kerberos
2005-12-20 22:47:39 +00:00
Daniel J Walsh
9d20b260a9 - Add dri libs to textrel_shlib_t 2005-12-20 19:03:31 +00:00
Daniel J Walsh
1335ee87a4 - Add man pages 2005-12-20 04:02:59 +00:00
Daniel J Walsh
315b4a40cf - Add enableaudit.pp 2005-12-17 13:41:58 +00:00
Daniel J Walsh
105bbf6bd9 - Fix mls policy 2005-12-17 04:35:55 +00:00
Daniel J Walsh
ecb7268725 - Update mls file from old version 2005-12-16 18:39:42 +00:00
Daniel J Walsh
a587fa4259 - Update mls file from old version 2005-12-16 18:36:00 +00:00
Daniel J Walsh
0c9f87bd98 - Update mls file from old version 2005-12-16 15:30:02 +00:00
Daniel J Walsh
dce316d016 - Add sids back in
- Rebuild with update checkpolicy
2005-12-16 14:39:19 +00:00
Daniel J Walsh
9ce97af9cc - Fixes to allow automount to use portmap
- Fixes to start kernel in s0-s15:c0.c255
2005-12-15 23:19:08 +00:00
Daniel J Walsh
1c86025686 - Add java unconfined/execmem policy 2005-12-15 03:31:43 +00:00
Daniel J Walsh
1ef62fe126 - Add file context for /var/cvs
- Dontaudit webalizer search of homedir
2005-12-14 22:47:12 +00:00
Daniel J Walsh
1f00750f8d - Add file context for /var/cvs
- Dontaudit webalizer search of homedir
2005-12-14 22:06:38 +00:00
Daniel J Walsh
504da9fea1 - Update from upstream
- Allow unconfined_t to transition to rpm_script_t
2005-12-13 22:13:21 +00:00
Daniel J Walsh
e24a8b160d - Fixes for hal
- Update to upstream
2005-12-13 04:53:03 +00:00
Daniel J Walsh
1ff14ab434 - Fixes for hal 2005-12-12 23:57:06 +00:00
Daniel J Walsh
d8566e6094 - Turn back on execmem since we need it for java, firefox, ooffice
- Allow gpm to stream socket to itself
2005-12-12 21:00:36 +00:00
Daniel J Walsh
7171df22fe - Turn back on execmem since we need it for java, firefox, ooffice 2005-12-12 20:59:35 +00:00
Daniel J Walsh
cfcb308b2a - Turn back on execmem since we need it for java, firefox, ooffice 2005-12-12 20:59:12 +00:00
Daniel J Walsh
afa8a21584 - Allow gpm to stream socket to itself 2005-12-12 20:47:41 +00:00
Daniel J Walsh
57c18fe4b0 - Allow gpm to stream socket to itself 2005-12-12 20:43:43 +00:00
Jeremy Katz
eb190f83a7 - fix requirements to be on the actual packages so that policy can get
created properly at install time
2005-12-12 19:43:05 +00:00
Daniel J Walsh
9e85a85af9 - Allow unconfined_t to execmod texrel_shlib_t 2005-12-11 17:29:15 +00:00
Daniel J Walsh
d4da533c32 - Update to upstream
- Turn off allow_execmem and allow_execmod booleans
- Add tcpd and automount policies
2005-12-10 05:19:29 +00:00
Daniel J Walsh
e1ccb6fe66 - Add two new httpd booleans, turned off by default
httpd_can_network_relay
httpd_can_network_connect_db
2005-12-09 20:59:20 +00:00
Daniel J Walsh
7c94e8ecfd - Add ghost for policy.20 2005-12-09 18:31:04 +00:00
Daniel J Walsh
6f5a3bc6a7 - Update to upstream
- Turn off boolean allow_execstack
2005-12-08 21:56:50 +00:00
Daniel J Walsh
c6c4985f3e - Change setrans-mls to use new libsetrans
- Add default_context rule for xdm
2005-12-08 20:33:17 +00:00
Daniel J Walsh
12e089ca6c - Change Requires to PreReg for requiring of policycoreutils on install 2005-12-08 17:04:27 +00:00
Daniel J Walsh
97bd2aa228 Add xdm policy 2005-12-08 05:02:10 +00:00
Daniel J Walsh
46a9067121 Update from upstream 2005-12-07 01:07:26 +00:00
Daniel J Walsh
913e479f74 Update from upstream 2005-12-06 17:44:30 +00:00
Daniel J Walsh
a1e07bd458 Update from upstream 2005-12-06 04:12:01 +00:00
Daniel J Walsh
47518615a8 Update from upstream 2005-12-06 03:41:59 +00:00