Commit Graph

402 Commits

Author SHA1 Message Date
Chris PeBenito
edb77e59fe add execstack and execheap to unconfined domain exclusion 2006-01-19 15:55:56 +00:00
Chris PeBenito
8dca6b9756 add lpr policy to lpd 2006-01-18 22:26:26 +00:00
Chris PeBenito
0a77288692 fixes from dan 2006-01-18 18:45:23 +00:00
Chris PeBenito
b94cc19178 there is no initrc_var_run_t:dir 2006-01-18 16:54:17 +00:00
Chris PeBenito
7c2f5a82ae add userhelper 2006-01-18 16:40:04 +00:00
Chris PeBenito
6b86ef00da move stray bin_t entry 2006-01-18 14:57:29 +00:00
Chris PeBenito
e1c41428e2 add portage from gentoo 2006-01-18 14:48:24 +00:00
Chris PeBenito
d3d270221f bump versions for release. 2006-01-17 20:14:04 +00:00
Chris PeBenito
93727e3fd2 patch from dan 1/16/06 2006-01-17 17:50:10 +00:00
Chris PeBenito
b7b1d238df add corenet patch from spencer 2006-01-16 18:48:57 +00:00
Chris PeBenito
9d594986b7 rename create verb to filetrans for type transitioning ifs 2006-01-13 21:06:49 +00:00
Chris PeBenito
8369293433 fix comments, clean out object classes 2006-01-13 19:10:31 +00:00
Chris PeBenito
460e051861 fix comments 2006-01-13 16:08:16 +00:00
Chris PeBenito
4ec6941bfa add cdrecord 2006-01-12 23:23:22 +00:00
Chris PeBenito
3ffe29880c add java 2006-01-12 22:26:46 +00:00
Chris PeBenito
2c243586e5 add prelink. 2006-01-11 23:20:28 +00:00
Chris PeBenito
1ae2c31350 add lockdev 2006-01-11 20:18:56 +00:00
Chris PeBenito
c8ba683007 add screen 2006-01-11 18:10:49 +00:00
Chris PeBenito
a77e65240b patch from dan. 2006-01-11 15:28:14 +00:00
Chris PeBenito
b07eaef9d8 add polyinstantiation. 2006-01-10 21:03:16 +00:00
Chris PeBenito
bf080a46c8 part of dan's mega patch 2006-01-06 22:51:40 +00:00
Chris PeBenito
6f11d6b894 add readahead 2006-01-04 19:31:53 +00:00
Chris PeBenito
871b685511 add smartmon 2006-01-04 15:26:42 +00:00
Chris PeBenito
9cca1cd593 policy-20051208.patch 2005-12-13 20:38:19 +00:00
Chris PeBenito
bb43724465 stuff from dan 2005-12-12 21:47:43 +00:00
Chris PeBenito
60caa302c2 fix ptracing of all domains 2005-12-12 16:52:46 +00:00
Chris PeBenito
cbe3275e1b add swat to samba, and fix an automount mistake 2005-12-09 21:07:30 +00:00
Chris PeBenito
7576fad511 add automount 2005-12-09 20:08:10 +00:00
Chris PeBenito
5ea24be958 fix module versions 2005-12-09 16:38:39 +00:00
Chris PeBenito
049e11af30 policy-20051208.patch from dan, plus a few adjustments 2005-12-09 15:42:39 +00:00
Chris PeBenito
0f73fdea9b add sysstat 2005-12-08 15:01:57 +00:00
Chris PeBenito
bd70373de4 add unlabeled association rules 2005-12-06 19:59:50 +00:00
Chris PeBenito
439aaa2446 fix module compile issues 2005-12-06 16:33:40 +00:00
Chris PeBenito
1470ffb03f fix dupe interfaces 2005-12-05 17:11:14 +00:00
Chris PeBenito
6f81e1d380 many loadable module build fixes 2005-12-02 22:06:05 +00:00
Chris PeBenito
058f3efd60 move files, corecommands, and domain to kernel layer 2005-12-01 20:25:27 +00:00
Chris PeBenito
4093c293f6 add i18n 2005-12-01 18:50:00 +00:00
Chris PeBenito
9fd4b818fc fix several modular build problems 2005-11-29 21:27:15 +00:00
Chris PeBenito
ac9aa26d2e work on users 2005-11-29 15:49:18 +00:00
Chris PeBenito
131e573dcc add yppasswdd to nis 2005-11-28 16:44:51 +00:00
Chris PeBenito
1328802a41 Change optional_policy() to refer to the module name rather than modulename.te. 2005-11-23 20:24:27 +00:00
Chris PeBenito
af23450c36 patch from dan 2005-11-23 19:02:40 +00:00
Chris PeBenito
704327e8b2 fix transitions in and out of unconfined. fix bugs uncovered by rawhide testing 2005-11-16 21:08:52 +00:00
Chris PeBenito
2e0a880165 changed rules fixes 2005-11-10 21:37:54 +00:00
Chris PeBenito
725926c586 pile of sediff fixes 2005-11-08 22:00:30 +00:00
Chris PeBenito
8967bf8b89 merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00
Chris PeBenito
7afca0b4c1 user tty fixes 2005-11-03 19:33:53 +00:00
Don Miner
8f882ffcd9 Added rules so that tracepath, traceroute and ping work. 2005-11-02 20:44:17 +00:00
Chris PeBenito
73ef293bc5 fixes just so sediff is easier to handle 2005-11-01 21:15:11 +00:00
Chris PeBenito
31a1c2df88 fix filesystem associations 2005-11-01 15:45:00 +00:00
Chris PeBenito
30910b37c6 more fixes 2005-10-31 22:19:16 +00:00
Chris PeBenito
f0f18e0734 typo 2005-10-28 15:12:23 +00:00
Chris PeBenito
495a7026d9 add missing range transition 2005-10-28 15:09:03 +00:00
Chris PeBenito
005a9aa6e2 initrc fixes 2005-10-28 14:34:26 +00:00
Chris PeBenito
4614e83fbb more fixing 2005-10-26 21:03:19 +00:00
Chris PeBenito
33acca55ce pile o fixes 2005-10-26 16:00:13 +00:00
Chris PeBenito
c3cf6693c7 try to fix associations 2005-10-25 20:06:27 +00:00
Chris PeBenito
2aec1461b4 use our own interface to make maintenance easier 2005-10-25 18:13:47 +00:00
Chris PeBenito
7eec657c86 add default_t read back 2005-10-25 18:00:42 +00:00
Chris PeBenito
60789e16d0 fixes 2005-10-25 02:51:07 +00:00
Don Miner
c11417c4df Reduced the number of differences in amanda between the targeted and the refpolicy 2005-10-24 21:35:50 +00:00
Chris PeBenito
67167371a5 fix most of samba 2005-10-24 21:33:46 +00:00
Chris PeBenito
7ebd6a9079 add proc_net lnk 2005-10-24 20:25:59 +00:00
Chris PeBenito
30705b6bc0 fixes 2005-10-24 19:50:21 +00:00
Chris PeBenito
9bbc757a76 more fix 2005-10-24 18:40:24 +00:00
Chris PeBenito
15fefa4958 remove bin policy and kern module assertions for now 2005-10-24 15:10:03 +00:00
Chris PeBenito
1480d3ad21 fix mls r_t 2005-10-24 14:22:13 +00:00
Chris PeBenito
34e722f3cd more sediff 2005-10-24 14:15:29 +00:00
Chris PeBenito
710791f1a4 more missing types 2005-10-24 03:52:35 +00:00
Chris PeBenito
19b5555f77 more fixes 2005-10-24 03:21:26 +00:00
Chris PeBenito
43989f82f8 add rpc 2005-10-24 01:53:13 +00:00
Chris PeBenito
2db2c7d099 fixes from sediff 2005-10-24 00:54:39 +00:00
Chris PeBenito
f85544209a nwmgr fixes 2005-10-23 22:46:06 +00:00
Chris PeBenito
ef5ca0fb79 add cups 2005-10-23 22:10:59 +00:00
Chris PeBenito
230838e117 add pegasus 2005-10-22 21:55:39 +00:00
Chris PeBenito
ad3b9d76dc add lpd 2005-10-22 21:09:03 +00:00
Chris PeBenito
10b1f324d5 add amanda 2005-10-22 19:58:58 +00:00
Chris PeBenito
1f8a8bbbbd more sediff fixes 2005-10-21 22:56:41 +00:00
Chris PeBenito
e6a2eaffdf more fixes 2005-10-21 21:35:25 +00:00
Chris PeBenito
da4fc9ce2b sediff fixes 2005-10-21 19:36:49 +00:00
Chris PeBenito
23a4442bf1 add xdm 2005-10-21 17:55:15 +00:00
Chris PeBenito
cf6141a72e fix corenetwork generation and add distcc 2005-10-21 13:11:17 +00:00
Chris PeBenito
12ae7557d3 piles of fixes for loadable modules 2005-10-18 18:25:33 +00:00
Chris PeBenito
c3812748c3 misc fixes 2005-10-18 15:07:11 +00:00
Chris PeBenito
e749cd12a6 wrap up almost all of apache 2005-10-17 17:55:38 +00:00
Chris PeBenito
e08118a52f add ppp 2005-10-14 20:00:07 +00:00
Chris PeBenito
d8636fc937 more merging from 1.27.1-15 2005-10-14 17:55:40 +00:00
Chris PeBenito
77f6e2cd27 partial (most of it) merge of selinux-policy-strict-sources-1.27.1-15 2005-10-13 20:59:36 +00:00
Chris PeBenito
c2b18fa1f3 more apache work 2005-10-12 16:23:22 +00:00
Chris PeBenito
4483ee849c add apm and arpwatch. fix implementation error on fs_getattr_all_files,
splitting it up into correct interfaces.
2005-10-10 18:11:46 +00:00
Chris PeBenito
e02c61cfa4 rename context_template() to gen_context() 2005-10-06 19:33:06 +00:00
Chris PeBenito
a5ec7cb6c4 more pieces of ftp 2005-09-29 13:32:28 +00:00
Chris PeBenito
f0574fa9aa add mls privileges 2005-09-26 20:26:32 +00:00
Chris PeBenito
6d788d87d1 comment fix 2005-09-26 20:24:44 +00:00
Chris PeBenito
842859260c add kudzu 2005-09-23 19:38:34 +00:00
Chris PeBenito
0058418017 remove classes from gen_requires, and disable net_raw for now 2005-09-23 15:37:41 +00:00
Chris PeBenito
681c9a02e7 fixes from sediff 2005-09-22 21:59:50 +00:00
Chris PeBenito
25c6746156 loadable module compile fixes 2005-09-21 20:01:40 +00:00
Chris PeBenito
9210553ecb add cpucontrol 2005-09-20 18:15:35 +00:00
Chris PeBenito
a1fcff33f2 final updates from nsa cvs 2005-09-19 21:17:45 +00:00
Chris PeBenito
41c4800de4 a few module compile fixes 2005-09-19 14:18:48 +00:00
Chris PeBenito
cf6a7d8993 more upstream merging 2005-09-16 21:20:37 +00:00
Chris PeBenito
cff75c90ca more upstream merging 2005-09-16 19:36:10 +00:00
Chris PeBenito
ccc5978224 add snmp 2005-09-16 14:54:36 +00:00
Chris PeBenito
a0824843c2 more merging from nsa cvs 2005-09-16 13:36:26 +00:00
Chris PeBenito
98a8ead4c5 more updates 2005-09-15 21:03:29 +00:00
Chris PeBenito
605ba28540 more merging from nsa cvs 2005-09-15 15:34:31 +00:00
Chris PeBenito
84c92239d4 add samba 2005-09-14 18:33:53 +00:00
Chris PeBenito
71fe0fa4c5 fixes for module compiling 2005-09-14 00:30:10 +00:00
Chris PeBenito
0907bda1e0 more merging of NSA CVS policy 2005-09-13 13:06:07 +00:00
Chris PeBenito
2705f9a0f3 begin merging in upstream NSA CVS changes 2005-09-12 21:40:56 +00:00
Chris PeBenito
712566ee41 fixes to make base module compilable 2005-09-12 15:17:39 +00:00
Chris PeBenito
603f90ab9d misc fixes 2005-09-05 18:17:17 +00:00
Chris PeBenito
b11a75a5e3 add ntp 2005-09-05 16:47:19 +00:00
Chris PeBenito
fdae8e755e add hal 2005-09-02 20:29:52 +00:00
Chris PeBenito
0f707d52ab add squid 2005-09-02 19:11:07 +00:00
Chris PeBenito
9d3bdc25af fix bugs uncovered from sediff 2005-09-01 20:13:42 +00:00
Chris PeBenito
6af06cd8b6 fix typos 2005-08-31 16:54:19 +00:00
Chris PeBenito
6e61566dba add comsat. clean up kerberos and nscd interfaces 2005-08-31 15:25:12 +00:00
Chris PeBenito
246839f3d2 fix up most of mta attribute insanity 2005-08-30 20:47:41 +00:00
Chris PeBenito
d83fdad248 add bind 2005-08-23 17:26:19 +00:00
Chris PeBenito
f6e28abbab moved to selinux module 2005-08-19 20:05:02 +00:00
Chris PeBenito
fb0a3a98c6 initial support for compiling loadable modules 2005-08-18 21:27:20 +00:00
Chris PeBenito
2d803edc73 more debian cleanup 2005-08-17 14:09:29 +00:00
Chris PeBenito
5f38a65aab try to knock out more of the distro_debian bootloader stuff 2005-08-15 19:31:37 +00:00
Chris PeBenito
8843093607 more comments 2005-08-12 19:28:30 +00:00
Chris PeBenito
f0b1efa2a2 all dev nodes assoc to tmpfs, since most everyone is moving to udev 2005-08-12 19:28:15 +00:00
Chris PeBenito
35b494789d fix some udev naming 2005-08-12 18:13:03 +00:00
Chris PeBenito
f7ebea06e3 finalize desc -> summary xml change 2005-08-11 17:46:39 +00:00
Chris PeBenito
052c953ae5 add quota 2005-08-11 14:49:58 +00:00
Chris PeBenito
9489149ec0 add su 2005-08-08 21:03:23 +00:00
Chris PeBenito
dce68dc48d add updfstab 2005-08-08 15:51:15 +00:00
Chris PeBenito
e5590ea5ec work on user transition 2005-07-28 20:52:55 +00:00
Chris PeBenito
022f61c0e3 add connect interface on ports to handle name_connect tcp perm 2005-07-22 15:38:01 +00:00
Chris PeBenito
50527cf581 make network_interface able to support multiple interfaces having the same type 2005-07-22 14:00:38 +00:00
Chris PeBenito
ef424c14d4 name_connect only on tcp_sockets 2005-07-20 17:10:07 +00:00
Chris PeBenito
9496fd5119 unconfined can name_connect to all ports 2005-07-20 17:08:07 +00:00
Chris PeBenito
d250634311 reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface 2005-07-20 17:06:10 +00:00
Chris PeBenito
f82c6ac64c bah typo 2005-07-20 15:08:33 +00:00
Chris PeBenito
1e3f610b3b add missing dir and file perms for selinuxfs in unconfined 2005-07-20 14:57:13 +00:00
Chris PeBenito
2ec4c9d38f more cleanup 2005-07-19 18:40:31 +00:00
Chris PeBenito
a5f339f134 more cleanup in system 2005-07-18 18:31:49 +00:00
Chris PeBenito
50aca6d2f9 add raid (mdadm) 2005-07-15 20:45:26 +00:00
Chris PeBenito
d9fd8e7562 more pcmcia cleanup 2005-07-15 19:18:55 +00:00
Chris PeBenito
50f6503452 * break up files_getattr_all_files into correct interfaces
* move stuff out of pcmcia into the appropriate modules
2005-07-15 15:17:57 +00:00
Chris PeBenito
f136a944c5 reorder in alpha order of type, for sanity purposes 2005-07-15 14:30:19 +00:00
Chris PeBenito
11633bbaa8 add ipsec 2005-07-14 18:15:47 +00:00
Chris PeBenito
df00b2e235 * fix chroot exec interface
* more TODO cleanup
* move IPC out of generic domtrans interfaces
2005-07-13 18:29:08 +00:00
Chris PeBenito
b24f35d8a3 more cleanup of current TODOs 2005-07-12 20:34:24 +00:00
Chris PeBenito
4051d15b62 fix xml 2005-07-11 19:15:54 +00:00