rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
5,550 Commits 8 Branches 96 Tags 37 MiB
afa546b7e3
Commit Graph

1745 Commits

Author SHA1 Message Date
Daniel J Walsh
b0ecaa962d - Allow semanage to signal mcstrans 2006-11-15 21:43:36 +00:00
Daniel J Walsh
73ea8c2e4d - Update to upstream 2006-11-15 15:22:30 +00:00
Daniel J Walsh
d925bd337d - Allow modstorage to edit /etc/fstab file 2006-11-14 18:33:09 +00:00
Daniel J Walsh
ec17438ae0 - Fix for qemu, /dev/ 
Mon Nov 13 2006 Dan Walsh <dwalsh@redhat.com> 2.4.3-11
- Fix path to realplayer.bin
 2006-11-14 04:57:37 +00:00
Daniel J Walsh
32b91c9d1f - Fix path to realplayer.bin 2006-11-13 20:48:57 +00:00
Daniel J Walsh
06b64f8c21 - Allow xen to connect to xen port 2006-11-10 20:37:08 +00:00
Daniel J Walsh
1a986f04dc - Allow cups to search samba_etc_t directory 
- Allow xend_t to list auto_mountpoints
 2006-11-10 13:31:34 +00:00
Daniel J Walsh
2098c9bff2 - Allow xen to search automount 2006-11-09 20:12:53 +00:00
Daniel J Walsh
6ba4868651 - Fix spec of jre files 2006-11-09 18:57:53 +00:00
Daniel J Walsh
0806593363 - Fix unconfined access to shadow file 2006-11-08 20:21:53 +00:00
Daniel J Walsh
4d11495dab - Allow xend to create files in xen_image_t directories 2006-11-08 20:10:30 +00:00
Daniel J Walsh
0fcc493f96 - Fixes for /var/lib/hal 2006-11-08 13:28:28 +00:00
Daniel J Walsh
f08bf9299c - Remove ability for sysadm_t to look at audit.log 2006-11-07 21:16:47 +00:00
Daniel J Walsh
f3ecbbfcb9 - Fix rpc_port_types 
- Add aide policy for mls
 2006-11-07 20:38:46 +00:00
Daniel J Walsh
d7e0f9fa0d - Merge with upstream 2006-11-06 21:15:57 +00:00
Daniel J Walsh
0dae3b6d89 - Lots of fixes for ricci 2006-11-03 21:27:47 +00:00
Daniel J Walsh
d095a0e65b - Add perms for swat 2006-11-01 00:09:08 +00:00
Daniel J Walsh
6b97615edf - Allow daemons to dump core files to / 2006-10-30 21:18:40 +00:00
Daniel J Walsh
8fb79d40f4 - Fixes for ricci 2006-10-30 16:45:09 +00:00
Daniel J Walsh
6672fcfbdd - Allow mount.nfs to work 2006-10-27 19:16:43 +00:00
Daniel J Walsh
85659e704f - Allow ricci-modstorage to look at lvm_etc_t 2006-10-27 14:42:56 +00:00
Daniel J Walsh
08efeffbe5 - Fixes for ricci using saslauthd 2006-10-25 15:31:39 +00:00
Daniel J Walsh
dc804f3593 - Allow mountpoint on home_dir_t and home_t 2006-10-24 19:55:28 +00:00
Daniel J Walsh
8ff9d6e5a3 - Update xen to read nfs files 2006-10-24 16:12:29 +00:00
Daniel J Walsh
3d011ff2e8 Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4 
- Allow noxattrfs to associate with other noxattrfs
 2006-10-23 20:54:50 +00:00
Daniel J Walsh
11d7ea1908 - Allow hal to use power_device_t 2006-10-23 17:26:25 +00:00
Daniel J Walsh
d6926f7f13 - Allow procemail to look at autofs_t 
- Allow xen_image_t to work as a fixed device
 2006-10-20 21:08:15 +00:00
Daniel J Walsh
e2eecb7a01 - Refupdate from upstream 2006-10-19 15:52:02 +00:00
Daniel J Walsh
302afb6db1 - Add lots of fixes for mls cups 2006-10-19 14:32:27 +00:00
Daniel J Walsh
6fa5ecef5d - Lots of fixes for ricci 2006-10-18 20:58:51 +00:00
Daniel J Walsh
2d1b4a450f - Fix number of cats 2006-10-17 19:59:07 +00:00
Daniel J Walsh
da08298372 - Update to upstream 2006-10-17 18:43:08 +00:00
jantill
a3698a1d5b - More iSCSI changes for #209854 2006-10-12 15:43:58 +00:00
jantill
cd0a0d2169 - Test ISCSI fixes for #209854 2006-10-12 15:24:06 +00:00
Daniel J Walsh
ed9a4ccc00 - allow semodule to rmdir selinux_config_t dir 2006-10-08 21:45:47 +00:00
Daniel J Walsh
70e2dbc497 - Fix boot_runtime_t problem on ppc. Should not be creating these files. 2006-10-06 20:38:14 +00:00
Daniel J Walsh
16c971a867 - Fix context mounts on reboot 
- Fix ccs creation of directory in /var/log
 2006-10-05 19:31:33 +00:00
Daniel J Walsh
7316db5b42 - Update for tallylog 2006-10-05 15:11:16 +00:00
Daniel J Walsh
bfcffeacff - Allow xend to rewrite dhcp conf files 
- Allow mgetty sys_admin capability
 2006-10-05 13:48:32 +00:00
Daniel J Walsh
160281be0a - Make xentapctrl work 2006-10-04 19:31:42 +00:00
Daniel J Walsh
46f098ac91 - Don't transition unconfined_t to bootloader_t 
- Fix label in /dev/xen/blktap
 2006-10-03 20:35:40 +00:00
Daniel J Walsh
f21d67baff - Patch for labeled networking 2006-10-03 18:47:06 +00:00
Daniel J Walsh
42dd742837 - Fix crond handling for mls 2006-10-02 19:45:00 +00:00
Daniel J Walsh
8fff699602 - Update to upstream 2006-09-29 19:19:18 +00:00
Daniel J Walsh
52ba98baf2 - Remove bluetooth-helper transition 
- Add selinux_validate for semanage
- Require new version of libsemanage
 2006-09-29 18:12:18 +00:00
Daniel J Walsh
5096e7d5da - Fix prelink 2006-09-29 14:22:55 +00:00
Daniel J Walsh
3c4577002a - Fix rhgb 2006-09-29 05:33:37 +00:00
Daniel J Walsh
172c6c7dc9 - Fix setrans handling on MLS and useradd 2006-09-28 16:45:43 +00:00
Daniel J Walsh
afbab5a372 - Support for fuse 
- fix vigr
 2006-09-27 23:56:21 +00:00
Daniel J Walsh
bfd584d6c7 - Fix dovecot, amanda 
- Fix mls
 2006-09-27 20:59:46 +00:00
Daniel J Walsh
201e1d333f - Fix dovecot, amanda 2006-09-27 19:49:43 +00:00
Daniel J Walsh
d25a3eebb6 - Allow java execheap for itanium 2006-09-26 20:41:36 +00:00
Daniel J Walsh
a76cf8a10b - Update with upstream 2006-09-26 14:59:58 +00:00
Daniel J Walsh
857ce15e7f - mls fixes 2006-09-25 15:58:33 +00:00
Daniel J Walsh
85bd855811 - Update from upstream 2006-09-22 20:41:12 +00:00
Daniel J Walsh
8d52bdbe62 - More fixes for mls 
- Revert change on automount transition to mount
 2006-09-22 14:21:35 +00:00
Daniel J Walsh
5ec822a112 - Fix cron jobs to run under the correct context 2006-09-21 23:05:49 +00:00
Daniel J Walsh
cc9afdc096 - Fixes to make pppd work 2006-09-19 21:10:48 +00:00
Daniel J Walsh
b4815d027f - Fixes to make pppd work 2006-09-19 19:14:48 +00:00
Daniel J Walsh
c56aa106dc - Multiple policy fixes 
- Change max categories to 1023
 2006-09-19 14:59:46 +00:00
Daniel J Walsh
b8c78504ab - Fix transition on mcstransd 2006-09-16 12:06:36 +00:00
Daniel J Walsh
38b22ca261 - Add /dev/em8300 defs 2006-09-15 20:59:56 +00:00
Daniel J Walsh
3f1bb62fc8 - Upgrade to upstream 2006-09-15 18:28:09 +00:00
Daniel J Walsh
f511de4575 - Upgrade to upstream 2006-09-15 18:03:54 +00:00
Daniel J Walsh
60792f9cd0 - Fix ppp connections from network manager 2006-09-15 16:39:25 +00:00
Daniel J Walsh
588fb9dab1 - Fix ppp connections from network manager 2006-09-15 16:22:25 +00:00
Daniel J Walsh
5f2a4e5d4f - Fix ppp connections from network manager 2006-09-15 12:44:15 +00:00
Daniel J Walsh
861af1c0df - Add tty access to all domains boolean 
- Fix gnome-pty-helper context for ia64
 2006-09-13 12:00:21 +00:00
Daniel J Walsh
9fbb713e0e - Fixed typealias of firstboot_rw_t 2006-09-11 20:56:05 +00:00
Daniel J Walsh
8b6c3732d7 - Fix location of xel log files 
- Fix handling of sysadm_r -> rpm_exec_t
 2006-09-08 17:10:41 +00:00
Daniel J Walsh
1ef9d40e46 - Fixes for autofs, lp 2006-09-07 19:15:29 +00:00
Daniel J Walsh
937c1cc4df - Update from upstream 2006-09-06 18:29:35 +00:00
Daniel J Walsh
57075ee245 - Fixup for test6 2006-09-05 21:13:31 +00:00
Daniel J Walsh
66ca8d0003 - Fixup for test6 2006-09-05 20:19:56 +00:00
Daniel J Walsh
4bf7cf3e30 - Fixup for test6 2006-09-05 19:45:07 +00:00
Daniel J Walsh
efb08979c0 - Update to upstream 2006-09-05 12:03:37 +00:00
Daniel J Walsh
928af41d8b - Update to upstream 2006-09-01 19:45:39 +00:00
Daniel J Walsh
04dd122d14 - Fix suspend to disk problems 2006-09-01 14:58:36 +00:00
Daniel J Walsh
a1c3b4ef0a - Lots of fixes for restarting daemons at the console. 2006-08-31 21:39:01 +00:00
Daniel J Walsh
3723ca6f56 - Lots of fixes for restarting daemons at the console. 2006-08-31 19:32:34 +00:00
Daniel J Walsh
e4710b3b72 - Fix audit line 
- Fix requires line
 2006-08-31 12:13:31 +00:00
Daniel J Walsh
7f5a12d575 - Fix audit line 
- Fix requires line
 2006-08-30 21:44:22 +00:00
Daniel J Walsh
358adda620 - Fix requires line 2006-08-30 21:19:12 +00:00
Daniel J Walsh
06027c9ac0 - Upgrade to upstream 2006-08-30 20:59:51 +00:00
Daniel J Walsh
1616552ae2 - Fix install problems 2006-08-28 21:49:05 +00:00
Daniel J Walsh
9e88149b16 - Allow setroubleshoot to getattr on all dirs to gather RPM data 2006-08-25 20:06:07 +00:00
Daniel J Walsh
4c348582ff - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 
platform
- Fix spec for /dev/adsp
 2006-08-25 17:32:13 +00:00
Daniel J Walsh
b2d3ebd7a0 - Fix xen tty devices 2006-08-24 20:53:40 +00:00
Daniel J Walsh
8cd82cf62b - Fixes for setroubleshoot 2006-08-24 20:31:13 +00:00
Daniel J Walsh
a5dcfa874f - Update to upstream 2006-08-23 20:42:38 +00:00
Daniel J Walsh
3559b5314e - Fixes for stunnel and postgresql 
- Update from upstream
 2006-08-20 15:11:37 +00:00
Daniel J Walsh
6f77ee084f - Fixes for stunnel and postgresql 2006-08-20 14:54:47 +00:00
Daniel J Walsh
79b5c47536 - Update from upstream 2006-08-18 14:18:35 +00:00
Daniel J Walsh
256cfc628c - Update from upstream 
- More java fixes
 2006-08-12 11:54:51 +00:00
Daniel J Walsh
543bc335c1 - Change allow_execstack to default to on, for RHEL5 Beta. This is required 
because of a Java compiler problem. Hope to turn off for next beta
 2006-08-11 15:39:50 +00:00
Daniel J Walsh
5974f40b57 - Misc fixes 2006-08-11 03:16:13 +00:00
Daniel J Walsh
c22acae47c Th Aug 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3.6-3 
- Misc fixes
 2006-08-11 03:11:59 +00:00
Daniel J Walsh
d0ed11a83d - More fixes for strict policy 2006-08-09 19:14:24 +00:00
Daniel J Walsh
8da541a5e6 - Quiet down anaconda audit messages 2006-08-08 20:40:36 +00:00
Daniel J Walsh
932c79f792 - Fix setroubleshootd 2006-08-08 00:26:46 +00:00
Daniel J Walsh
26202062d0 - Update to the latest from upstream 2006-08-04 22:58:10 +00:00
Daniel J Walsh
7505584432 - More fixes for xen 2006-08-03 16:50:26 +00:00
Daniel J Walsh
1c92c78eba - Fix anaconda transitions 2006-08-03 14:47:22 +00:00
Daniel J Walsh
5dc8b14fd5 - yet more xen rules 
Tue Aug 1 2006 Dan Walsh <dwalsh@redhat.com> 2.3.3-17
- more xen rules
 2006-08-02 19:36:17 +00:00
Daniel J Walsh
031e1ae2f7 - more xen rules 2006-08-01 21:38:02 +00:00
Daniel J Walsh
1b1dad04fb - Fixes for Samba 2006-07-31 21:25:08 +00:00
Daniel J Walsh
be45a2bf98 - Fixes for xen 2006-07-29 08:32:43 +00:00
Daniel J Walsh
9782db9573 - Allow setroubleshootd to send mail 2006-07-28 19:13:13 +00:00
Daniel J Walsh
1f20939ac3 - Add nagios policy 2006-07-28 17:44:17 +00:00
Daniel J Walsh
90c4086837 - fixes for setroubleshoot 2006-07-26 20:17:15 +00:00
Daniel J Walsh
9554c945c3 - Added Paul Howorth patch to only load policy packages shipped with this 
package
- Allow pidof from initrc to ptrace higher level domains
- Allow firstboot to communicate with hal via dbus
 2006-07-26 17:58:28 +00:00
Daniel J Walsh
9d77b6b4f0 - Allow pidof from initrc to ptrace higher level domains 2006-07-25 18:24:28 +00:00
Daniel J Walsh
8555e0e0d0 - Add policy for /var/run/ldapi 2006-07-24 16:23:16 +00:00
Daniel J Walsh
b14e13366e - Fix setroubleshoot policy 2006-07-22 19:00:47 +00:00
Daniel J Walsh
7b4c787492 - Fixes for mls use of ssh 
- named has a new conf file
 2006-07-22 03:11:32 +00:00
Daniel J Walsh
efa5f596d7 - Fixes to make setroubleshoot work 2006-07-21 13:28:12 +00:00
Daniel J Walsh
1c15e38b82 - Cups needs to be able to read domain state off of printer client 2006-07-19 20:27:22 +00:00
Daniel J Walsh
c7b7392126 - add boolean to allow zebra to write config files 2006-07-19 20:06:35 +00:00
Daniel J Walsh
31c47be0fe - setroubleshootd fixes 2006-07-19 18:39:31 +00:00
Daniel J Walsh
2bf148e90a - Allow prelink to read bin_t symlink 
- allow xfs to read random devices
- Change gfs to support xattr
 2006-07-18 15:51:21 +00:00
Daniel J Walsh
c62a78555a - Remove spamassassin_can_network boolean 2006-07-17 17:14:27 +00:00
Daniel J Walsh
2107557a81 - Update to upstream 
- Fix lpr domain for mls
 2006-07-14 21:22:36 +00:00
Daniel J Walsh
8a7ef5ec99 - Add setroubleshoot policy 2006-07-14 20:09:54 +00:00
Daniel J Walsh
317bd2fd17 - Turn off auditallow on setting booleans 2006-07-13 14:24:05 +00:00
Daniel J Walsh
d819090e1f - Multiple fixes 2006-07-12 02:50:30 +00:00
Daniel J Walsh
8bee3a4a58 - Update to upstream 2006-07-09 09:51:33 +00:00
Daniel J Walsh
4a291ab8b9 - Update to upstream 
- Add new class for kernel key ring
 2006-06-22 19:16:49 +00:00
Daniel J Walsh
9e7fd17a0c - Update to upstream 2006-06-21 20:33:38 +00:00
Daniel J Walsh
1065b18b06 - Update to upstream 2006-06-20 21:17:11 +00:00
Daniel J Walsh
446e9b443f - Fix requires 2006-06-20 21:15:11 +00:00
Daniel J Walsh
2b87b02daa - Update to upstream 2006-06-20 21:06:31 +00:00
Daniel J Walsh
63e20b9a82 - Break out selinux-devel package 2006-06-20 12:59:02 +00:00
Daniel J Walsh
77dc77cc7c - Break out selinux-devel package 2006-06-20 12:58:27 +00:00
Daniel J Walsh
af203b67d1 - Add ibmasmfs 2006-06-16 17:54:35 +00:00
Daniel J Walsh
cc073e7495 - Fix policygentool gen_requires 2006-06-16 03:10:44 +00:00
Daniel J Walsh
4ef386fa65 - Fix policygentool gen_requires 2006-06-15 14:45:40 +00:00
Daniel J Walsh
358335b9db - Update from Upstream 2006-06-14 15:48:59 +00:00
Daniel J Walsh
0fe5c73fe8 - Fix spec of realplay 2006-06-13 19:39:56 +00:00
Daniel J Walsh
2616c66ff4 - Update to upstream 2006-06-13 18:26:00 +00:00
Daniel J Walsh
b637d98325 - Allow useradd to create_home_dir in MLS environment 2006-06-12 14:51:08 +00:00
Daniel J Walsh
3004d53f75 - Update from upstream 2006-06-09 03:03:22 +00:00
Daniel J Walsh
c54f60d6ea - Update from upstream 2006-06-09 02:55:43 +00:00
Daniel J Walsh
cfc04db0db - Update from upstream 2006-06-08 14:03:38 +00:00
Daniel J Walsh
a4c7090921 - Add oprofilefs 2006-06-06 21:33:13 +00:00
Daniel J Walsh
a55870f781 - Fix for hplip and Picasa 2006-05-28 14:30:02 +00:00
Daniel J Walsh
43fe713171 - Update to upstream 2006-05-28 10:56:26 +00:00
Daniel J Walsh
7580a10c69 - fixes for java, openldap and webalizer 2006-05-26 10:09:26 +00:00
Daniel J Walsh
d065eef7e9 - Xen fixes 2006-05-24 03:12:56 +00:00
Daniel J Walsh
e30da942d7 - Xen fixes 2006-05-24 02:35:38 +00:00
Daniel J Walsh
e5e5095da5 - Upgrade to upstream 2006-05-20 12:01:14 +00:00
Daniel J Walsh
75d0fe4f47 - allow hal to read boot_t files 
- Upgrade to upstream
 2006-05-18 16:07:35 +00:00
Daniel J Walsh
4aae36507b - allow hal to read boot_t files 2006-05-18 15:42:55 +00:00
Daniel J Walsh
f4d170770a - Update from upstream 2006-05-17 01:40:53 +00:00
Daniel J Walsh
82d40f4e47 - Fixes for amavis 2006-05-15 20:48:00 +00:00
Daniel J Walsh
52288bc69c - Update from upstream 2006-05-15 16:20:58 +00:00
Daniel J Walsh
a97d1fe713 - Allow auditctl to search all directories 2006-05-12 18:59:26 +00:00
Daniel J Walsh
f08aca0783 - Add acquire service for mono. 2006-05-12 03:12:32 +00:00
Daniel J Walsh
89e397d026 - Turn off allow_execmem boolean 
- Allow ftp dac_override when allowed to access users homedirs
 2006-05-12 02:39:30 +00:00
Daniel J Walsh
ca8bc2df6e - Clean up spec file 
- Transition from unconfined_t to prelink_t
 2006-05-10 20:00:43 +00:00
Daniel J Walsh
539ba8aee6 - Allow execution of cvs command 2006-05-09 21:50:36 +00:00
Daniel J Walsh
a52275425c - Update to upstream 2006-05-08 19:26:49 +00:00
Daniel J Walsh
529f12c952 - Update to upstream 2006-05-04 17:39:16 +00:00
Daniel J Walsh
49dfee4ffa - Fix libjvm spec 2006-05-01 21:24:26 +00:00
Daniel J Walsh
ea725ce70c - Update to upstream 2006-04-29 04:47:05 +00:00
jantill
684125a0be - Add xm policy 
- Fix policygentool
 2006-04-25 15:19:51 +00:00
Daniel J Walsh
bbaa1f26d1 - Update to upstream 
- Fix postun to only disable selinux on full removal of the packages
 2006-04-25 11:03:12 +00:00
Daniel J Walsh
e847c84988 - Allow mono to chat with unconfined 2006-04-21 10:57:09 +00:00
Daniel J Walsh
d2fe1b1403 - Allow procmail to sendmail 
- Allow nfs to share dosfs
 2006-04-20 19:32:44 +00:00
Daniel J Walsh
5ff36d645b - Update to latest from upstream 
- Allow selinux-policy to be removed and kernel not to crash
 2006-04-19 17:37:38 +00:00
Daniel J Walsh
c74f145e08 - Update to latest from upstream 
- Add James Antill patch for xen
- Many fixes for pegasus
 2006-04-19 12:10:10 +00:00
Daniel J Walsh
3c584c7edb - Add unconfined_mount_t 2006-04-17 11:27:44 +00:00
Daniel J Walsh
ca0597162d - Update to latest from upstream 2006-04-14 19:50:03 +00:00
Daniel J Walsh
c4826d0271 - Update to latest from upstream 
- Allow mono and unconfined to talk to initrc_t dbus objects
 2006-04-13 21:28:19 +00:00
Daniel J Walsh
c7b01adddf - Change libraries.fc to stop shlib_t form overriding texrel_shlib_t 2006-04-11 21:58:53 +00:00
Daniel J Walsh
5cbfde1710 - Allow secadm_t ability to relabel all files 
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t
 2006-04-11 20:59:57 +00:00
Daniel J Walsh
c53f3b88ff - Allow secadm_t ability to relabel all files 
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t
 2006-04-10 21:10:33 +00:00
rcoker
a442ed4616 Change file contexts and several minor policy changes. 2006-04-10 12:15:07 +00:00
Daniel J Walsh
67bc5ebb6c - More textrel_shlib_t file path fixes 
- Add ada support
 2006-04-06 19:08:54 +00:00
Daniel J Walsh
4fd214b03b - Get auditctl working in MLS policy 2006-04-04 10:07:53 +00:00
Daniel J Walsh
2ad4f12eff - Add mono dbus support 
- Lots of file_context fixes for textrel_shlib_t in FC5
- Turn off execmem auditallow since they are filling log files
 2006-04-03 17:17:13 +00:00
Daniel J Walsh
da5d600a11 - Update to upstream 2006-03-31 20:57:44 +00:00
Daniel J Walsh
d2bd4f4f3d - Allow automount and dbus to read cert files 2006-03-30 22:27:52 +00:00
Daniel J Walsh
58ec7a5124 - Fix ftp policy 
- Fix secadm running of auditctl
 2006-03-30 19:57:31 +00:00
Daniel J Walsh
5c1cd7105c - Update to upstream 2006-03-29 20:21:25 +00:00
Daniel J Walsh
bbe0ad9e91 - Update to upstream 2006-03-27 22:47:14 +00:00
Daniel J Walsh
5a014310cd - Update to upstream 2006-03-27 22:07:37 +00:00
Daniel J Walsh
bd3f0ea368 - Fix policyhelp 2006-03-24 16:44:06 +00:00
Daniel J Walsh
faffd3afe5 - Fix pam_console handling of usb_device 
- dontaudit logwatch reading /mnt dir
 2006-03-22 15:56:09 +00:00
Daniel J Walsh
414d6d811a - Update to upstream 2006-03-21 19:46:10 +00:00
Daniel J Walsh
ad73e86386 - Update to upstream 2006-03-21 15:42:38 +00:00
Daniel J Walsh
727bb2e4d1 - Update to upstream 2006-03-18 04:09:10 +00:00
Daniel J Walsh
9f8b0589bf - Get transition rules to create policy.20 at SystemHigh 2006-03-16 14:41:17 +00:00
Daniel J Walsh
5b46764cba - Allow secadmin to shutdown system 
- Allow sendmail to exec newalias
 2006-03-14 22:43:44 +00:00
Daniel J Walsh
6d42754555 - MLS Fixes dmidecode needs mls_file_read_up 
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t
 2006-03-14 20:15:31 +00:00
Daniel J Walsh
0a74a26d18 - MLS Fixes dmidecode needs mls_file_read_up 
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t
 2006-03-14 20:13:28 +00:00
Karsten Hopp
4e431cfdce - remove mkdir /usr/share/selinux/, it's not required and even wrong 
without a prepended $RPM_BUILD_ROOT (#185391)
 2006-03-14 10:37:14 +00:00
Daniel J Walsh
4c9f08fbba - Get rid of mount/fsdisk scan of /dev messages 
- Additional fixes for suspend/resume
 2006-03-09 21:50:18 +00:00
Daniel J Walsh
54b0b5869e - Fake make to rebuild enableaudit.pp 2006-03-09 18:30:56 +00:00
Daniel J Walsh
6d2388955d - Get xen networking running. 2006-03-09 18:12:23 +00:00
Daniel J Walsh
23a177b7c3 - Fixes for Xen 
- enableaudit should not be the same as base.pp
- Allow ps to work for all process
 2006-03-09 15:34:49 +00:00
Jeremy Katz
b33ec3c21d - more xen policy fixups 2006-03-09 05:09:46 +00:00
Jeremy Katz
1b07552d67 - more xen fixage (#184393) 2006-03-09 00:18:57 +00:00
Daniel J Walsh
060041b7bf - Fix blkid specification 
- Allow postfix to execute mailman_que
 2006-03-08 22:11:17 +00:00
Daniel J Walsh
9c64bb6f27 - Blkid changes 
- Allow udev access to usb_device_t
- Fix post script to create targeted policy config file
 2006-03-08 20:40:43 +00:00
Daniel J Walsh
4c9f658bb2 - Allow lvm tools to create drevice dir 2006-03-08 17:02:01 +00:00
Daniel J Walsh
020477271b - Add Xen support 2006-03-07 22:22:14 +00:00
Daniel J Walsh
72a1365426 - Fixes for cups 
- Make cryptosetup work with hal
 2006-03-06 23:05:10 +00:00
Daniel J Walsh
0296aff141 - Fixes for cups 
- Make cryptosetup work with hal
 2006-03-06 21:33:51 +00:00
Daniel J Walsh
76d7c52ccf - Load Policy needs translock 2006-03-06 02:00:43 +00:00
Daniel J Walsh
ef0cb15960 - Fix cups html interface 2006-03-04 23:24:54 +00:00
Daniel J Walsh
21277d9d7a - Add hal changes suggested by Jeremy 
- add policyhelp to point at policy html pages
 2006-03-04 14:49:35 +00:00
Daniel J Walsh
d2c2609f8c - add policyhelp to point at policy html pages 2006-03-04 05:10:54 +00:00
Daniel J Walsh
8254bb0ce6 - Additional fixes for nvidia and cups 2006-02-27 23:23:06 +00:00
Daniel J Walsh
575aa98fb7 - Update to upstream 
- Merged my latest fixes
- Fix cups policy to handle unix domain sockets
 2006-02-27 23:00:40 +00:00
Daniel J Walsh
fbec4b5191 *** empty log message *** 2006-02-25 20:50:53 +00:00
Daniel J Walsh
290aa68ca4 *** empty log message *** 2006-02-24 20:50:49 +00:00
Daniel J Walsh
dd2612b757 *** empty log message *** 2006-02-24 18:39:09 +00:00
Daniel J Walsh
e135c767ec *** empty log message *** 2006-02-24 16:45:01 +00:00
Daniel J Walsh
7716868268 *** empty log message *** 2006-02-24 16:43:26 +00:00
Daniel J Walsh
c126996365 *** empty log message *** 2006-02-24 15:50:38 +00:00
Daniel J Walsh
7dca0e2e81 *** empty log message *** 2006-02-23 22:28:34 +00:00
Daniel J Walsh
5d5343f8cc *** empty log message *** 2006-02-23 21:02:49 +00:00
Daniel J Walsh
d19b685646 *** empty log message *** 2006-02-23 18:56:17 +00:00
Daniel J Walsh
701455e3c5 *** empty log message *** 2006-02-23 15:12:37 +00:00
Daniel J Walsh
585f827b55 *** empty log message *** 2006-02-22 22:46:02 +00:00
Daniel J Walsh
d4d1f2b10a *** empty log message *** 2006-02-22 18:48:03 +00:00
Daniel J Walsh
4dab27663b *** empty log message *** 2006-02-22 18:41:25 +00:00
Daniel J Walsh
a57054e5e9 *** empty log message *** 2006-02-22 00:53:12 +00:00
Daniel J Walsh
d5ae27dcc7 *** empty log message *** 2006-02-21 20:39:54 +00:00
Daniel J Walsh
28c4257a6b *** empty log message *** 2006-02-21 19:17:26 +00:00
Daniel J Walsh
46bd65b6cf *** empty log message *** 2006-02-21 19:16:52 +00:00
Daniel J Walsh
31d4d26d94 *** empty log message *** 2006-02-21 15:36:15 +00:00
Daniel J Walsh
f0e87bc6c8 *** empty log message *** 2006-02-21 04:51:22 +00:00
Daniel J Walsh
3debd0a982 *** empty log message *** 2006-02-20 22:11:40 +00:00
Daniel J Walsh
6e9bcb4a8d *** empty log message *** 2006-02-19 12:17:15 +00:00
Daniel J Walsh
f3a3900067 *** empty log message *** 2006-02-15 16:19:41 +00:00
Daniel J Walsh
025d1ec54d *** empty log message *** 2006-02-14 22:48:01 +00:00
Daniel J Walsh
2f15a23304 *** empty log message *** 2006-02-14 21:52:23 +00:00
Daniel J Walsh
c417f6b886 *** empty log message *** 2006-02-14 17:11:59 +00:00
Daniel J Walsh
cb99f70c9e *** empty log message *** 2006-02-13 19:51:43 +00:00
Daniel J Walsh
847884da96 *** empty log message *** 2006-02-13 17:14:30 +00:00
Daniel J Walsh
32b8716cff *** empty log message *** 2006-02-13 15:55:10 +00:00
Daniel J Walsh
faa80bb2e1 *** empty log message *** 2006-02-11 02:41:50 +00:00
Daniel J Walsh
5a82999d92 *** empty log message *** 2006-02-09 12:26:53 +00:00
Daniel J Walsh
b28bebeb11 *** empty log message *** 2006-02-06 19:12:13 +00:00
Daniel J Walsh
a3a62aba77 *** empty log message *** 2006-02-04 03:03:32 +00:00
Daniel J Walsh
de82d855b5 *** empty log message *** 2006-02-03 14:59:07 +00:00
Daniel J Walsh
38c8068bd0 *** empty log message *** 2006-02-01 13:21:35 +00:00
Daniel J Walsh
681c9dc1a9 - Update to upstream 
- Fix rhgb, and other Xorg startups
 2006-01-31 00:35:32 +00:00
Daniel J Walsh
737432388b - Update to upstream 
- Fix rhgb, and other Xorg startups
 2006-01-28 05:39:52 +00:00
Daniel J Walsh
33253774cc - Update to upstream 
- Fix rhgb
 2006-01-28 04:52:34 +00:00
Daniel J Walsh
70d9b4899e - Update to upstream 2006-01-28 04:50:20 +00:00
Daniel J Walsh
78265f434d - Update to upstream 2006-01-27 07:06:21 +00:00
Daniel J Walsh
b6e6b56d1a - Add inotifyfs handling 2006-01-26 17:02:46 +00:00
Daniel J Walsh
e76babe5db - Update to upstream 
- Put back in changes for pup/zen
 2006-01-26 15:47:02 +00:00
Daniel J Walsh
a3b5c300fa - Many changes for MLS 
- Turn on strict policy
 2006-01-24 21:47:16 +00:00
Daniel J Walsh
129ba16c5a - Update to upstream 2006-01-24 15:41:46 +00:00
Daniel J Walsh
30a020fcb8 - Update to upstream 
- Turn off execheap execstack for unconfined users
- Add mono/wine policy to allow execheap and execstack for them
- Add execheap for Xdm policy
 2006-01-19 19:10:47 +00:00
Daniel J Walsh
05207b6b63 - Update to upstream 2006-01-17 22:47:12 +00:00
Daniel J Walsh
a1c584a9c1 - Update to upstream 
- Add rules to allow rpcd to work with unlabeled_networks.
 2006-01-17 20:02:54 +00:00
Daniel J Walsh
2e71478caf - Update to upstream 2006-01-17 19:40:15 +00:00
Daniel J Walsh
cdab5cb3e1 - Update to upstream 
- Fix ftp Man page
 2006-01-17 03:55:13 +00:00
Daniel J Walsh
7ba8b0d5a8 - Update to upstream 2006-01-13 22:32:06 +00:00
Jeremy Katz
b9b2d8a63a - fix pup transitions (#177262) 
- fix xen disks (#177599)
 2006-01-12 02:36:17 +00:00
Daniel J Walsh
64012806da - Update to upstream 2006-01-11 22:25:06 +00:00
Daniel J Walsh
ef14779637 - More Fixes for hal and readahead 2006-01-10 17:36:14 +00:00
Daniel J Walsh
e485f59f95 - Fixes for hal and readahead 2006-01-09 22:50:57 +00:00
Daniel J Walsh
26e33dff20 - Update to upstream 2006-01-09 20:20:08 +00:00
Daniel J Walsh
451d9b499b - Handle new location of hal scripts 2006-01-06 01:04:12 +00:00
Daniel J Walsh
0088858611 - Allow su to read /etc/mtab 2006-01-05 21:55:48 +00:00
Daniel J Walsh
026fac633f - Update to upstream 2006-01-04 19:21:36 +00:00
Daniel J Walsh
2864321e7c - Update to upstream 2006-01-04 19:20:36 +00:00
Daniel J Walsh
a736f971f2 - Update to upstream 2006-01-04 19:02:16 +00:00
Daniel J Walsh
120d3b52ce - Fix "libsemanage.parse_module_headers: Data did not represent a module." 
problem
 2006-01-03 18:23:17 +00:00
Daniel J Walsh
ce66f5002d - Allow load_policy to read /etc/mtab 2006-01-03 17:21:11 +00:00
Daniel J Walsh
1f312240b0 - Fix dovecot to allow dovecot_auth to look at /tmp 2006-01-02 19:56:17 +00:00
Daniel J Walsh
d7b05bca05 - Allow restorecon to read unlabeled_t directories in order to fix 
labeling.
 2006-01-02 19:38:23 +00:00
Daniel J Walsh
3607aaf0c5 - Add Logwatch policy 2006-01-02 13:26:14 +00:00
Daniel J Walsh
a08ba87128 - Add Logwatch policy 2005-12-30 16:08:00 +00:00
Daniel J Walsh
798572ff3d - Fix /dev/ub[a-z] file context 2005-12-28 12:56:36 +00:00
Daniel J Walsh
9f7b037d0a - Fix library specification 
- Give kudzu execmem privs
 2005-12-27 20:34:15 +00:00
Daniel J Walsh
596229f500 - Fix hostname in targeted policy 2005-12-22 22:35:01 +00:00
Daniel J Walsh
5a47e648ad - Fix passwd command on mls 2005-12-22 21:40:15 +00:00
Daniel J Walsh
71ee99d3db - Lots of fixes to make mls policy work 2005-12-21 18:07:27 +00:00
Daniel J Walsh
6e9ee77d3b - Add dri libs to textrel_shlib_t 
- Add system_r role for java
- Add unconfined_exec_t for vncserver
- Allow slapd to use kerberos
 2005-12-20 22:47:39 +00:00
Daniel J Walsh
9d20b260a9 - Add dri libs to textrel_shlib_t 2005-12-20 19:03:31 +00:00
Daniel J Walsh
1335ee87a4 - Add man pages 2005-12-20 04:02:59 +00:00
Daniel J Walsh
315b4a40cf - Add enableaudit.pp 2005-12-17 13:41:58 +00:00
Daniel J Walsh
105bbf6bd9 - Fix mls policy 2005-12-17 04:35:55 +00:00
Daniel J Walsh
ecb7268725 - Update mls file from old version 2005-12-16 18:39:42 +00:00
Daniel J Walsh
a587fa4259 - Update mls file from old version 2005-12-16 18:36:00 +00:00
Daniel J Walsh
0c9f87bd98 - Update mls file from old version 2005-12-16 15:30:02 +00:00
Daniel J Walsh
dce316d016 - Add sids back in 
- Rebuild with update checkpolicy
 2005-12-16 14:39:19 +00:00
Daniel J Walsh
9ce97af9cc - Fixes to allow automount to use portmap 
- Fixes to start kernel in s0-s15:c0.c255
 2005-12-15 23:19:08 +00:00
Daniel J Walsh
1c86025686 - Add java unconfined/execmem policy 2005-12-15 03:31:43 +00:00
Daniel J Walsh
1ef62fe126 - Add file context for /var/cvs 
- Dontaudit webalizer search of homedir
 2005-12-14 22:47:12 +00:00
Daniel J Walsh
1f00750f8d - Add file context for /var/cvs 
- Dontaudit webalizer search of homedir
 2005-12-14 22:06:38 +00:00
Daniel J Walsh
504da9fea1 - Update from upstream 
- Allow unconfined_t to transition to rpm_script_t
 2005-12-13 22:13:21 +00:00
Daniel J Walsh
e24a8b160d - Fixes for hal 
- Update to upstream
 2005-12-13 04:53:03 +00:00
Daniel J Walsh
1ff14ab434 - Fixes for hal 2005-12-12 23:57:06 +00:00
Daniel J Walsh
d8566e6094 - Turn back on execmem since we need it for java, firefox, ooffice 
- Allow gpm to stream socket to itself
 2005-12-12 21:00:36 +00:00
Daniel J Walsh
7171df22fe - Turn back on execmem since we need it for java, firefox, ooffice 2005-12-12 20:59:35 +00:00
Daniel J Walsh
cfcb308b2a - Turn back on execmem since we need it for java, firefox, ooffice 2005-12-12 20:59:12 +00:00
Daniel J Walsh
afa8a21584 - Allow gpm to stream socket to itself 2005-12-12 20:47:41 +00:00
Daniel J Walsh
57c18fe4b0 - Allow gpm to stream socket to itself 2005-12-12 20:43:43 +00:00
Jeremy Katz
eb190f83a7 - fix requirements to be on the actual packages so that policy can get 
created properly at install time
 2005-12-12 19:43:05 +00:00
Daniel J Walsh
9e85a85af9 - Allow unconfined_t to execmod texrel_shlib_t 2005-12-11 17:29:15 +00:00
Daniel J Walsh
d4da533c32 - Update to upstream 
- Turn off allow_execmem and allow_execmod booleans
- Add tcpd and automount policies
 2005-12-10 05:19:29 +00:00
Daniel J Walsh
e1ccb6fe66 - Add two new httpd booleans, turned off by default 
httpd_can_network_relay
httpd_can_network_connect_db
 2005-12-09 20:59:20 +00:00
Daniel J Walsh
7c94e8ecfd - Add ghost for policy.20 2005-12-09 18:31:04 +00:00
Daniel J Walsh
6f5a3bc6a7 - Update to upstream 
- Turn off boolean allow_execstack
 2005-12-08 21:56:50 +00:00
Daniel J Walsh
c6c4985f3e - Change setrans-mls to use new libsetrans 
- Add default_context rule for xdm
 2005-12-08 20:33:17 +00:00
Daniel J Walsh
12e089ca6c - Change Requires to PreReg for requiring of policycoreutils on install 2005-12-08 17:04:27 +00:00
Daniel J Walsh
97bd2aa228 Add xdm policy 2005-12-08 05:02:10 +00:00
Daniel J Walsh
46a9067121 Update from upstream 2005-12-07 01:07:26 +00:00
Daniel J Walsh
913e479f74 Update from upstream 2005-12-06 17:44:30 +00:00
Daniel J Walsh
a1e07bd458 Update from upstream 2005-12-06 04:12:01 +00:00
Daniel J Walsh
47518615a8 Update from upstream 2005-12-06 03:41:59 +00:00
Daniel J Walsh
caeef12f57 Update from upstream 2005-12-02 22:58:20 +00:00
Nalin Dahyabhai
2b2203d51a - fix trigger (dwalsh looking over my shoulder) 2005-12-02 22:11:34 +00:00
Daniel J Walsh
28930b1e35 - No longer installing policy.20 file, anaconda handles the building of the 
app.
 2005-12-01 18:27:55 +00:00
Daniel J Walsh
bd7e86c379 - Fixes for dovecot and saslauthd 2005-12-01 18:16:50 +00:00
Daniel J Walsh
4199dc8023 - Fixes for dovecot and saslauthd 2005-11-29 17:32:09 +00:00
Daniel J Walsh
a0336204d8 - Cleanup pegasus and named 
- Fix spec file
- Fix up passwd changing applications
 2005-11-29 05:22:53 +00:00
Daniel J Walsh
c1b0228afa - Cleanup pegasus and named 
- Fix spec file
- Fix up passwd changing applications
 2005-11-23 22:38:02 +00:00
Daniel J Walsh
25e721d6e5 - Cleanup pegasus and named 
- Fix spec file
 2005-11-23 21:08:47 +00:00
Daniel J Walsh
21dea1c61e - Cleanup pegasus and named 
- Fix spec file
 2005-11-23 19:11:28 +00:00
Daniel J Walsh
598be154e8 -Update to latest from upstream 2005-11-23 17:11:44 +00:00
Daniel J Walsh
e38dc4108f -Update to latest from upstream 2005-11-23 15:20:18 +00:00
Daniel J Walsh
b33f08f453 - Add rules for pegasus and avahi 2005-11-22 22:46:58 +00:00
Daniel J Walsh
765f818d32 - Add rules for pegasus and avahi 2005-11-22 19:25:26 +00:00
Daniel J Walsh
d77f56b9f2 - Start building MLS Policy 2005-11-22 18:59:41 +00:00
Daniel J Walsh
a32f665665 - Start building MLS Policy 2005-11-21 21:50:16 +00:00
Daniel J Walsh
e568731790 - Update to upstream 2005-11-21 21:49:31 +00:00
Daniel J Walsh
3e930b80c0 - Update to upstream 2005-11-21 21:43:55 +00:00
Daniel J Walsh
1a0a256c0c - Update to upstream 2005-11-18 21:35:08 +00:00
Daniel J Walsh
205d3ff11f - Turn on bash 2005-11-17 03:31:37 +00:00
Daniel J Walsh
f0b87c9d0c - Initial version 2005-11-16 03:43:46 +00:00
Nalin Dahyabhai
af6090863d now how about this? do you like it? is it finally good enough for you? 2005-11-15 00:07:50 +00:00
Nalin Dahyabhai
46e7261190 try this 2005-11-15 00:01:46 +00:00
Nalin Dahyabhai
f852dde3c4 try anything 2005-11-14 23:51:43 +00:00
Daniel J Walsh
be926abb95 - Initial version 2005-11-14 23:43:27 +00:00
Daniel J Walsh
edb750876f - Initial version 2005-11-14 23:35:53 +00:00
Daniel J Walsh
cc9c9ee183 - Initial version 2005-11-14 23:28:26 +00:00
Daniel J Walsh
1580c873c7 auto-import selinux-policy-2.0.0-0.6 on branch devel from 
selinux-policy-2.0.0-0.6.src.rpm
 2005-11-14 23:22:29 +00:00