Commit Graph

986 Commits

Author SHA1 Message Date
Daniel J Walsh
08f4abfd6d - Allow radvd to use fifo_file
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home dirs if
    the boolean is set
2008-04-05 12:01:36 +00:00
Daniel J Walsh
27943de6a0 - Allow radvd to use fifo_file
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home dirs if
    the boolean is set
2008-04-05 10:39:06 +00:00
Daniel J Walsh
c66f2bc425 - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
- Allow syslog to manage innd logs.
- Allow procmail to ioctl spamd_exec_t
2008-04-01 09:21:21 +00:00
Daniel J Walsh
7b9c57c8ba - Allow initrc_t to dbus chat with consolekit. 2008-03-30 05:41:15 +00:00
Daniel J Walsh
294ea7a213 - Allow initrc_t to dbus chat with consolekit. 2008-03-29 18:36:09 +00:00
Daniel J Walsh
e54cb216a8 - Additional access for nsplugin
- Allow xdm setcap/getcap until pulseaudio is fixed
2008-03-28 22:07:45 +00:00
Daniel J Walsh
478aeeca6b - Additional access for nsplugin
- Allow xdm setcap/getcap until pulseaudio is fixed
2008-03-28 21:09:45 +00:00
Daniel J Walsh
f70afcdd9e - Allow mount to mkdir on tmpfs
- Allow ifconfig to search debugfs
2008-03-26 06:17:27 +00:00
Daniel J Walsh
bf3d39e959 - Fix file context for MATLAB
- Fixes for xace
2008-03-21 23:24:11 +00:00
Daniel J Walsh
5ea3f10caf - Allow stunnel to transition to inetd children domains
- Make unconfined_dbusd_t an unconfined domain
2008-03-20 16:11:16 +00:00
Daniel J Walsh
94b7be909e 2008-03-18 21:10:02 +00:00
Daniel J Walsh
ba9e5e8244 - Fixes for qemu/virtd 2008-03-17 21:42:05 +00:00
Daniel J Walsh
954e7c7340 - Fix bug in mozilla policy to allow xguest transition
- This will fix the
2008-03-17 21:40:53 +00:00
Daniel J Walsh
97081dcb9d - Fix bug in mozilla policy to allow xguest transition
- This will fix the
2008-03-14 21:17:21 +00:00
Daniel J Walsh
a6e1280791 - Fix bug in mozilla policy to allow xguest transition
- This will fix the
2008-03-14 21:13:24 +00:00
Daniel J Walsh
d593d26c1d - Allow nsplugin to run acroread 2008-03-14 15:59:07 +00:00
Daniel J Walsh
ad50da8a27 - Allow nsplugin to run acroread 2008-03-14 15:17:23 +00:00
Daniel J Walsh
987b10f86d - Add cups_pdf policy
- Add openoffice policy to run in xguest
2008-03-14 00:25:00 +00:00
Daniel J Walsh
7f811bf534 - prewika needs to contact mysql
- Allow syslog to read system_map files
2008-03-13 12:58:25 +00:00
Daniel J Walsh
ceda8feb68 - Change init_t to an unconfined_domain 2008-03-12 12:39:48 +00:00
Daniel J Walsh
41617c099b - Change init_t to an unconfined_domain 2008-03-12 12:35:06 +00:00
Daniel J Walsh
e9fce44302 - Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes
2008-03-12 02:21:18 +00:00
Daniel J Walsh
0879f489ab - Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes
2008-03-12 01:10:44 +00:00
Daniel J Walsh
59c6413a37 - Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes
2008-03-12 01:00:13 +00:00
Bill Nottingham
110bce3a29 fixes for init, rhgb. also, fix the build 2008-03-11 22:46:00 +00:00
Daniel J Walsh
2041ac3d49 - Additional changes for MLS policy 2008-03-10 20:58:06 +00:00
Daniel J Walsh
af0084d92b - Additional changes for MLS policy 2008-03-10 20:16:22 +00:00
Daniel J Walsh
1bf67d57ed - Fix initrc_context generation for MLS 2008-03-06 22:25:06 +00:00
Daniel J Walsh
cab5dce18d - Fix initrc_context generation for MLS 2008-03-06 21:55:29 +00:00
Daniel J Walsh
33b0aacf82 - Fix initrc_context generation for MLS 2008-03-06 21:50:52 +00:00
Daniel J Walsh
dc57e68eff - Fixes for libvirt 2008-03-05 23:11:52 +00:00
Daniel J Walsh
5947905ef9 - Allow bitlebee to read locale_t 2008-03-04 21:38:18 +00:00
Daniel J Walsh
d8c160273b - More xselinux rules 2008-02-29 22:33:22 +00:00
Daniel J Walsh
9a0f35b9ad - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t 2008-02-29 22:18:30 +00:00
Daniel J Walsh
a838d3f5db - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t 2008-02-29 22:13:08 +00:00
Daniel J Walsh
338714fc7f - 2008-02-28 21:51:10 +00:00
Daniel J Walsh
b7229ad8bb - Prepare policy for beta release
- Change some of the system domains back to unconfined
- Turn on some of the booleans
2008-02-28 05:01:51 +00:00
Daniel J Walsh
40ce26840e - Prepare policy for beta release
- Change some of the system domains back to unconfined
- Turn on some of the booleans
2008-02-28 04:35:56 +00:00
Daniel J Walsh
533c755e4d - Allow nsplugin_config execstack/execmem
- Allow nsplugin_t to read alsa config
- Change apache to use user content
2008-02-28 03:32:23 +00:00
Daniel J Walsh
2f648d978d - Add cyphesis policy 2008-02-27 02:30:24 +00:00
Daniel J Walsh
93f3656a99 - Add cyphesis policy 2008-02-27 02:26:49 +00:00
Daniel J Walsh
c092cc1478 - Add cyphesis policy 2008-02-26 23:02:51 +00:00
Daniel J Walsh
063999dd85 2008-02-26 19:24:53 +00:00
Daniel J Walsh
27b2b09ffe - 2008-02-26 16:15:00 +00:00
Daniel J Walsh
f75033d612 - Update to upstream fixes 2008-02-26 13:45:23 +00:00
Daniel J Walsh
5ca2ff99b6 - Add xace support 2008-02-22 20:32:52 +00:00
Daniel J Walsh
8bd036a289 - Add fusectl file system 2008-02-21 19:43:52 +00:00
Daniel J Walsh
8d4af9d064 - Fixes from yum-cron
- Update to latest upstream
2008-02-20 22:44:00 +00:00
Daniel J Walsh
b0260f2000 - Fixes from yum-cron
- Update to latest upstream
2008-02-20 22:12:36 +00:00
Daniel J Walsh
ca0e228453 - Fixes from yum-cron
- Update to latest upstream
2008-02-20 22:05:55 +00:00