Commit Graph

293 Commits

Author SHA1 Message Date
Daniel J Walsh
1c92c78eba - Fix anaconda transitions 2006-08-03 14:47:22 +00:00
Daniel J Walsh
5dc8b14fd5 - yet more xen rules
Tue Aug 1 2006 Dan Walsh <dwalsh@redhat.com> 2.3.3-17
- more xen rules
2006-08-02 19:36:17 +00:00
Daniel J Walsh
031e1ae2f7 - more xen rules 2006-08-01 21:38:02 +00:00
Daniel J Walsh
1b1dad04fb - Fixes for Samba 2006-07-31 21:25:08 +00:00
Daniel J Walsh
be45a2bf98 - Fixes for xen 2006-07-29 08:32:43 +00:00
Daniel J Walsh
9782db9573 - Allow setroubleshootd to send mail 2006-07-28 19:13:13 +00:00
Daniel J Walsh
1f20939ac3 - Add nagios policy 2006-07-28 17:44:17 +00:00
Daniel J Walsh
90c4086837 - fixes for setroubleshoot 2006-07-26 20:17:15 +00:00
Daniel J Walsh
9554c945c3 - Added Paul Howorth patch to only load policy packages shipped with this
package
- Allow pidof from initrc to ptrace higher level domains
- Allow firstboot to communicate with hal via dbus
2006-07-26 17:58:28 +00:00
Daniel J Walsh
9d77b6b4f0 - Allow pidof from initrc to ptrace higher level domains 2006-07-25 18:24:28 +00:00
Daniel J Walsh
8555e0e0d0 - Add policy for /var/run/ldapi 2006-07-24 16:23:16 +00:00
Daniel J Walsh
b14e13366e - Fix setroubleshoot policy 2006-07-22 19:00:47 +00:00
Daniel J Walsh
7b4c787492 - Fixes for mls use of ssh
- named has a new conf file
2006-07-22 03:11:32 +00:00
Daniel J Walsh
efa5f596d7 - Fixes to make setroubleshoot work 2006-07-21 13:28:12 +00:00
Daniel J Walsh
1c15e38b82 - Cups needs to be able to read domain state off of printer client 2006-07-19 20:27:22 +00:00
Daniel J Walsh
c7b7392126 - add boolean to allow zebra to write config files 2006-07-19 20:06:35 +00:00
Daniel J Walsh
31c47be0fe - setroubleshootd fixes 2006-07-19 18:39:31 +00:00
Daniel J Walsh
2bf148e90a - Allow prelink to read bin_t symlink
- allow xfs to read random devices
- Change gfs to support xattr
2006-07-18 15:51:21 +00:00
Daniel J Walsh
c62a78555a - Remove spamassassin_can_network boolean 2006-07-17 17:14:27 +00:00
Daniel J Walsh
2107557a81 - Update to upstream
- Fix lpr domain for mls
2006-07-14 21:22:36 +00:00
Daniel J Walsh
8a7ef5ec99 - Add setroubleshoot policy 2006-07-14 20:09:54 +00:00
Daniel J Walsh
317bd2fd17 - Turn off auditallow on setting booleans 2006-07-13 14:24:05 +00:00
Daniel J Walsh
d819090e1f - Multiple fixes 2006-07-12 02:50:30 +00:00
Daniel J Walsh
8bee3a4a58 - Update to upstream 2006-07-09 09:51:33 +00:00
Daniel J Walsh
4a291ab8b9 - Update to upstream
- Add new class for kernel key ring
2006-06-22 19:16:49 +00:00
Daniel J Walsh
9e7fd17a0c - Update to upstream 2006-06-21 20:33:38 +00:00
Daniel J Walsh
1065b18b06 - Update to upstream 2006-06-20 21:17:11 +00:00
Daniel J Walsh
446e9b443f - Fix requires 2006-06-20 21:15:11 +00:00
Daniel J Walsh
2b87b02daa - Update to upstream 2006-06-20 21:06:31 +00:00
Daniel J Walsh
63e20b9a82 - Break out selinux-devel package 2006-06-20 12:59:02 +00:00
Daniel J Walsh
77dc77cc7c - Break out selinux-devel package 2006-06-20 12:58:27 +00:00
Daniel J Walsh
af203b67d1 - Add ibmasmfs 2006-06-16 17:54:35 +00:00
Daniel J Walsh
cc073e7495 - Fix policygentool gen_requires 2006-06-16 03:10:44 +00:00
Daniel J Walsh
4ef386fa65 - Fix policygentool gen_requires 2006-06-15 14:45:40 +00:00
Daniel J Walsh
358335b9db - Update from Upstream 2006-06-14 15:48:59 +00:00
Daniel J Walsh
0fe5c73fe8 - Fix spec of realplay 2006-06-13 19:39:56 +00:00
Daniel J Walsh
2616c66ff4 - Update to upstream 2006-06-13 18:26:00 +00:00
Daniel J Walsh
b637d98325 - Allow useradd to create_home_dir in MLS environment 2006-06-12 14:51:08 +00:00
Daniel J Walsh
3004d53f75 - Update from upstream 2006-06-09 03:03:22 +00:00
Daniel J Walsh
c54f60d6ea - Update from upstream 2006-06-09 02:55:43 +00:00
Daniel J Walsh
cfc04db0db - Update from upstream 2006-06-08 14:03:38 +00:00
Daniel J Walsh
a4c7090921 - Add oprofilefs 2006-06-06 21:33:13 +00:00
Daniel J Walsh
a55870f781 - Fix for hplip and Picasa 2006-05-28 14:30:02 +00:00
Daniel J Walsh
43fe713171 - Update to upstream 2006-05-28 10:56:26 +00:00
Daniel J Walsh
7580a10c69 - fixes for java, openldap and webalizer 2006-05-26 10:09:26 +00:00
Daniel J Walsh
d065eef7e9 - Xen fixes 2006-05-24 03:12:56 +00:00
Daniel J Walsh
e30da942d7 - Xen fixes 2006-05-24 02:35:38 +00:00
Daniel J Walsh
e5e5095da5 - Upgrade to upstream 2006-05-20 12:01:14 +00:00
Daniel J Walsh
75d0fe4f47 - allow hal to read boot_t files
- Upgrade to upstream
2006-05-18 16:07:35 +00:00
Daniel J Walsh
4aae36507b - allow hal to read boot_t files 2006-05-18 15:42:55 +00:00
Daniel J Walsh
f4d170770a - Update from upstream 2006-05-17 01:40:53 +00:00
Daniel J Walsh
82d40f4e47 - Fixes for amavis 2006-05-15 20:48:00 +00:00
Daniel J Walsh
52288bc69c - Update from upstream 2006-05-15 16:20:58 +00:00
Daniel J Walsh
a97d1fe713 - Allow auditctl to search all directories 2006-05-12 18:59:26 +00:00
Daniel J Walsh
f08aca0783 - Add acquire service for mono. 2006-05-12 03:12:32 +00:00
Daniel J Walsh
89e397d026 - Turn off allow_execmem boolean
- Allow ftp dac_override when allowed to access users homedirs
2006-05-12 02:39:30 +00:00
Daniel J Walsh
ca8bc2df6e - Clean up spec file
- Transition from unconfined_t to prelink_t
2006-05-10 20:00:43 +00:00
Daniel J Walsh
539ba8aee6 - Allow execution of cvs command 2006-05-09 21:50:36 +00:00
Daniel J Walsh
a52275425c - Update to upstream 2006-05-08 19:26:49 +00:00
Daniel J Walsh
529f12c952 - Update to upstream 2006-05-04 17:39:16 +00:00
Daniel J Walsh
49dfee4ffa - Fix libjvm spec 2006-05-01 21:24:26 +00:00
Daniel J Walsh
ea725ce70c - Update to upstream 2006-04-29 04:47:05 +00:00
jantill
684125a0be - Add xm policy
- Fix policygentool
2006-04-25 15:19:51 +00:00
Daniel J Walsh
bbaa1f26d1 - Update to upstream
- Fix postun to only disable selinux on full removal of the packages
2006-04-25 11:03:12 +00:00
Daniel J Walsh
e847c84988 - Allow mono to chat with unconfined 2006-04-21 10:57:09 +00:00
Daniel J Walsh
d2fe1b1403 - Allow procmail to sendmail
- Allow nfs to share dosfs
2006-04-20 19:32:44 +00:00
Daniel J Walsh
5ff36d645b - Update to latest from upstream
- Allow selinux-policy to be removed and kernel not to crash
2006-04-19 17:37:38 +00:00
Daniel J Walsh
c74f145e08 - Update to latest from upstream
- Add James Antill patch for xen
- Many fixes for pegasus
2006-04-19 12:10:10 +00:00
Daniel J Walsh
3c584c7edb - Add unconfined_mount_t 2006-04-17 11:27:44 +00:00
Daniel J Walsh
ca0597162d - Update to latest from upstream 2006-04-14 19:50:03 +00:00
Daniel J Walsh
c4826d0271 - Update to latest from upstream
- Allow mono and unconfined to talk to initrc_t dbus objects
2006-04-13 21:28:19 +00:00
Daniel J Walsh
c7b01adddf - Change libraries.fc to stop shlib_t form overriding texrel_shlib_t 2006-04-11 21:58:53 +00:00
Daniel J Walsh
5cbfde1710 - Allow secadm_t ability to relabel all files
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t
2006-04-11 20:59:57 +00:00
Daniel J Walsh
c53f3b88ff - Allow secadm_t ability to relabel all files
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t
2006-04-10 21:10:33 +00:00
rcoker
a442ed4616 Change file contexts and several minor policy changes. 2006-04-10 12:15:07 +00:00
Daniel J Walsh
67bc5ebb6c - More textrel_shlib_t file path fixes
- Add ada support
2006-04-06 19:08:54 +00:00
Daniel J Walsh
4fd214b03b - Get auditctl working in MLS policy 2006-04-04 10:07:53 +00:00
Daniel J Walsh
2ad4f12eff - Add mono dbus support
- Lots of file_context fixes for textrel_shlib_t in FC5
- Turn off execmem auditallow since they are filling log files
2006-04-03 17:17:13 +00:00
Daniel J Walsh
da5d600a11 - Update to upstream 2006-03-31 20:57:44 +00:00
Daniel J Walsh
d2bd4f4f3d - Allow automount and dbus to read cert files 2006-03-30 22:27:52 +00:00
Daniel J Walsh
58ec7a5124 - Fix ftp policy
- Fix secadm running of auditctl
2006-03-30 19:57:31 +00:00
Daniel J Walsh
5c1cd7105c - Update to upstream 2006-03-29 20:21:25 +00:00
Daniel J Walsh
bbe0ad9e91 - Update to upstream 2006-03-27 22:47:14 +00:00
Daniel J Walsh
5a014310cd - Update to upstream 2006-03-27 22:07:37 +00:00
Daniel J Walsh
bd3f0ea368 - Fix policyhelp 2006-03-24 16:44:06 +00:00
Daniel J Walsh
faffd3afe5 - Fix pam_console handling of usb_device
- dontaudit logwatch reading /mnt dir
2006-03-22 15:56:09 +00:00
Daniel J Walsh
414d6d811a - Update to upstream 2006-03-21 19:46:10 +00:00
Daniel J Walsh
ad73e86386 - Update to upstream 2006-03-21 15:42:38 +00:00
Daniel J Walsh
727bb2e4d1 - Update to upstream 2006-03-18 04:09:10 +00:00
Daniel J Walsh
9f8b0589bf - Get transition rules to create policy.20 at SystemHigh 2006-03-16 14:41:17 +00:00
Daniel J Walsh
5b46764cba - Allow secadmin to shutdown system
- Allow sendmail to exec newalias
2006-03-14 22:43:44 +00:00
Daniel J Walsh
6d42754555 - MLS Fixes dmidecode needs mls_file_read_up
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t
2006-03-14 20:15:31 +00:00
Daniel J Walsh
0a74a26d18 - MLS Fixes dmidecode needs mls_file_read_up
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t
2006-03-14 20:13:28 +00:00
Karsten Hopp
4e431cfdce - remove mkdir /usr/share/selinux/, it's not required and even wrong
without a prepended $RPM_BUILD_ROOT (#185391)
2006-03-14 10:37:14 +00:00
Daniel J Walsh
4c9f08fbba - Get rid of mount/fsdisk scan of /dev messages
- Additional fixes for suspend/resume
2006-03-09 21:50:18 +00:00
Daniel J Walsh
54b0b5869e - Fake make to rebuild enableaudit.pp 2006-03-09 18:30:56 +00:00
Daniel J Walsh
6d2388955d - Get xen networking running. 2006-03-09 18:12:23 +00:00
Daniel J Walsh
23a177b7c3 - Fixes for Xen
- enableaudit should not be the same as base.pp
- Allow ps to work for all process
2006-03-09 15:34:49 +00:00
Jeremy Katz
b33ec3c21d - more xen policy fixups 2006-03-09 05:09:46 +00:00
Jeremy Katz
1b07552d67 - more xen fixage (#184393) 2006-03-09 00:18:57 +00:00