Chris PeBenito
|
0907bda1e0
|
more merging of NSA CVS policy
|
2005-09-13 13:06:07 +00:00 |
|
Chris PeBenito
|
712566ee41
|
fixes to make base module compilable
|
2005-09-12 15:17:39 +00:00 |
|
Chris PeBenito
|
9b06402eaf
|
add missing rules of other domains using inn
|
2005-09-08 13:23:11 +00:00 |
|
Chris PeBenito
|
603f90ab9d
|
misc fixes
|
2005-09-05 18:17:17 +00:00 |
|
Chris PeBenito
|
9d3bdc25af
|
fix bugs uncovered from sediff
|
2005-09-01 20:13:42 +00:00 |
|
Chris PeBenito
|
474f43d13d
|
should actually try compiling first :x
|
2005-07-20 13:39:10 +00:00 |
|
Chris PeBenito
|
bd7e7a6417
|
missed a line
|
2005-07-20 13:37:18 +00:00 |
|
Chris PeBenito
|
a28f6db576
|
add in some rules from NSA CVS to make targeted policy work
|
2005-07-20 13:30:06 +00:00 |
|
Chris PeBenito
|
a5f339f134
|
more cleanup in system
|
2005-07-18 18:31:49 +00:00 |
|
Chris PeBenito
|
ae9e2716c3
|
fix more TODOs. fix selinux.te to selinuxutil.te in optionals
|
2005-07-11 19:02:50 +00:00 |
|
Chris PeBenito
|
a42ca7ebec
|
another round of TODO cleanup
|
2005-07-08 20:44:57 +00:00 |
|
Chris PeBenito
|
e5f8060316
|
implement direct_sysadm_daemon
|
2005-07-07 15:25:28 +00:00 |
|
Chris PeBenito
|
fd89e19f12
|
more work on current modules
|
2005-06-30 18:54:08 +00:00 |
|
Chris PeBenito
|
ebdc3b7902
|
clean up more todos
|
2005-06-29 20:53:53 +00:00 |
|
Chris PeBenito
|
8fd3673225
|
another round of renaming, for consistency
|
2005-06-29 14:26:41 +00:00 |
|
Chris PeBenito
|
ab940a4cc1
|
autofs_t and ypbind cleanup
|
2005-06-27 16:30:55 +00:00 |
|
Chris PeBenito
|
2a3478cf15
|
fixes pointed out by steve, plus fixes revealed by the added assertions
|
2005-06-23 14:19:56 +00:00 |
|
Chris PeBenito
|
d35c621eb0
|
add a couple more nfs and cifs interfaces, to cover most of the
use_(nfs|cifs)_home_dirs tunable
|
2005-06-16 20:33:51 +00:00 |
|
Chris PeBenito
|
5e0da6a03e
|
finish renaming system/selinux to system/selinuxutil
|
2005-06-14 20:48:34 +00:00 |
|
Chris PeBenito
|
8bd6789954
|
move constraints interfaces to domain module. move sysfs and usbfs to
devices module
|
2005-06-14 19:56:46 +00:00 |
|
Chris PeBenito
|
31908be07f
|
a few missed renames, and start fixing up tunables
|
2005-06-13 20:27:32 +00:00 |
|
Chris PeBenito
|
c9428d33dc
|
renaming insanity
|
2005-06-13 17:35:46 +00:00 |
|
Karl MacMillan
|
f0c985ca80
|
Devices rename.
|
2005-06-13 16:22:32 +00:00 |
|
Chris PeBenito
|
0fd9dc55cf
|
renaming insanity
|
2005-06-10 01:01:13 +00:00 |
|
Chris PeBenito
|
cc41a97c99
|
aliases
|
2005-06-09 18:08:26 +00:00 |
|
Chris PeBenito
|
763c441e3b
|
start renaming filesystem interfaces
|
2005-06-08 13:12:00 +00:00 |
|
Chris PeBenito
|
254bbc7bb3
|
start switching over to new tunable infrastructure
|
2005-06-07 18:45:47 +00:00 |
|
Chris PeBenito
|
eb7f9a34cb
|
move audit to logging
|
2005-06-07 14:27:19 +00:00 |
|
Chris PeBenito
|
0c73cd2526
|
change over to some perm set macros. add indentation
|
2005-06-03 12:25:14 +00:00 |
|
Chris PeBenito
|
d115660e3b
|
change network verb in corenetwork to sendrecv
|
2005-06-02 18:55:47 +00:00 |
|
Chris PeBenito
|
aa40608fbe
|
remove copyright until licensing issues are resolved
|
2005-06-01 17:34:13 +00:00 |
|
Chris PeBenito
|
d115b24712
|
more cab work
|
2005-05-31 23:02:11 +00:00 |
|
Chris PeBenito
|
3b857eae09
|
add some file_t interfaces, and console write
|
2005-05-31 21:25:45 +00:00 |
|
Chris PeBenito
|
daa0e0b01f
|
add xml comments to interfaces, convert over userdomain stuff
|
2005-05-19 21:06:06 +00:00 |
|
Chris PeBenito
|
dd14d0d892
|
change read_shared_libraries to use_shared_libraries, since the execute
permission is checked when using shared libs to execute code in them, which
is not the same as just reading the shared libs.
|
2005-05-17 15:32:52 +00:00 |
|
Chris PeBenito
|
ff31386090
|
move make_{daemon,init,system}_domain to init to fix type_transition'ing
|
2005-05-13 20:21:50 +00:00 |
|
Chris PeBenito
|
d25dd9c1c2
|
add make temporary_file and daemon_runtime_file
|
2005-05-11 19:36:36 +00:00 |
|
Chris PeBenito
|
38e24ae49e
|
add files_make_temporary_file and remove type attribute from
create_private_tmp
|
2005-05-11 19:21:40 +00:00 |
|
Chris PeBenito
|
13e94c09e4
|
more authlogin handling
|
2005-05-09 21:07:53 +00:00 |
|
Chris PeBenito
|
a9a20ddaae
|
allow all domains to use /dev/{zero,null,tty}
|
2005-05-09 19:55:01 +00:00 |
|
Chris PeBenito
|
1e5c2a416a
|
more conversion
|
2005-05-04 17:01:46 +00:00 |
|
Chris PeBenito
|
25baab18d1
|
switch over to tunable_policy and optional_policy
|
2005-05-02 19:22:58 +00:00 |
|
Chris PeBenito
|
3009816bcd
|
convert over optional policy to optional_policy macro
|
2005-04-28 15:48:27 +00:00 |
|
Chris PeBenito
|
55f4564e31
|
start merging in rules from daemon domain
|
2005-04-27 21:56:41 +00:00 |
|
Chris PeBenito
|
960373dddd
|
add module statement macro and entrypoint executable attribute to replicate
can_exec($1,exec_type)
|
2005-04-26 17:00:25 +00:00 |
|
Chris PeBenito
|
91a7ab6cb3
|
add sysnetwork
|
2005-04-25 21:28:25 +00:00 |
|
Chris PeBenito
|
219bcf7a8f
|
attack with sediff, make fs:getattr interfaces consistent, create init and
daemon domains
|
2005-04-25 19:54:27 +00:00 |
|
Chris PeBenito
|
a266e3cc83
|
restructure kernel module to be consistent with other module ordering. put
in missing rules. fix naming problems
|
2005-04-25 16:11:21 +00:00 |
|
Chris PeBenito
|
e181fe05d8
|
add copyright statement
|
2005-04-20 19:07:16 +00:00 |
|
Chris PeBenito
|
4ddc1abd78
|
add all types for this module, and add klogd policy
|
2005-04-19 20:44:52 +00:00 |
|
Chris PeBenito
|
b4cd153394
|
initial commit
|
2005-04-14 20:18:17 +00:00 |
|