Commit Graph

  • d06f3c3752 remove secdesc since desc is sufficient Chris PeBenito 2005-08-11 17:55:47 +0000
  • f7ebea06e3 finalize desc -> summary xml change Chris PeBenito 2005-08-11 17:46:39 +0000
  • 4aa0dc20b4 add tcpd Chris PeBenito 2005-08-11 15:17:13 +0000
  • e694b51e6b fix no interface module handling in segenxml Chris PeBenito 2005-08-11 14:55:41 +0000
  • 052c953ae5 add quota Chris PeBenito 2005-08-11 14:49:58 +0000
  • 5a3895a9f6 tabbing fix Chris PeBenito 2005-08-11 14:35:52 +0000
  • e784300a62 add sudo Chris PeBenito 2005-08-09 19:30:43 +0000
  • b9d7d70b33 add template xml Chris PeBenito 2005-08-09 19:21:25 +0000
  • 9489149ec0 add su Chris PeBenito 2005-08-08 21:03:23 +0000
  • 9465452eec fix gen_user comment for more clarity Chris PeBenito 2005-08-08 18:13:56 +0000
  • dce68dc48d add updfstab Chris PeBenito 2005-08-08 15:51:15 +0000
  • f5e321b0f0 fix xml tags Chris PeBenito 2005-08-08 15:43:20 +0000
  • 7057c18db0 a few more ssh touchups Chris PeBenito 2005-08-05 18:49:23 +0000
  • ed78ea0034 add tmpreaper Chris PeBenito 2005-08-05 15:32:27 +0000
  • 9a66d4e562 add acct Chris PeBenito 2005-08-05 14:32:12 +0000
  • 3fd8336882 misc cleanup Chris PeBenito 2005-08-04 20:54:51 +0000
  • 7e40f17137 add back uses_shlib Chris PeBenito 2005-08-03 17:59:01 +0000
  • 42be7c214d add mysql Chris PeBenito 2005-08-03 17:56:26 +0000
  • 046a21da80 search sbin dirs to find the pgms Chris PeBenito 2005-08-03 17:43:41 +0000
  • 81343a6f90 * Rename ipsec connect interface for consistency. * Add missing parts of unix stream socket connect interface of ipsec. * Rename inetd connect interface for consistency. Chris PeBenito 2005-08-03 15:16:33 +0000
  • 80a63c7a98 clarify tmp_domain() Chris PeBenito 2005-08-02 17:26:10 +0000
  • 8b1125a766 update for release Chris PeBenito 2005-08-02 17:21:46 +0000
  • 369b504740 warn against using on production systems Chris PeBenito 2005-08-02 15:40:39 +0000
  • d299d7076f update for release Chris PeBenito 2005-08-02 15:19:49 +0000
  • 959220da71 dont do a, since it preserves perms and users, which doesnt work on sf Chris PeBenito 2005-08-02 15:19:26 +0000
  • 52a902b803 new release Chris PeBenito 2005-08-02 14:54:30 +0000
  • 6db8e52a8f new release Chris PeBenito 2005-08-02 14:51:50 +0000
  • 7c347cddcb more updates for release Chris PeBenito 2005-08-01 17:55:04 +0000
  • 60abb5fdab add missing Chris PeBenito 2005-08-01 15:58:14 +0000
  • cd8fa41253 fix comparison bug Chris PeBenito 2005-08-01 15:49:05 +0000
  • 96a150deac move file context validation to install Chris PeBenito 2005-07-29 20:49:52 +0000
  • bbdbdb9edf fix stray line that got out of TODO Chris PeBenito 2005-07-29 15:07:15 +0000
  • e5590ea5ec work on user transition Chris PeBenito 2005-07-28 20:52:55 +0000
  • c13146d97a update Chris PeBenito 2005-07-27 21:01:19 +0000
  • 14c0354954 update version from last release Chris PeBenito 2005-07-27 14:33:01 +0000
  • 01e30c9b2d initial commit Chris PeBenito 2005-07-27 14:32:12 +0000
  • 78d30cb1f4 Fix handling of ordered and unordered HTML lists. Chris PeBenito 2005-07-22 19:15:49 +0000
  • 022f61c0e3 add connect interface on ports to handle name_connect tcp perm Chris PeBenito 2005-07-22 15:38:01 +0000
  • 50527cf581 make network_interface able to support multiple interfaces having the same type Chris PeBenito 2005-07-22 14:00:38 +0000
  • 953541a918 update from privmail Chris PeBenito 2005-07-21 20:34:57 +0000
  • 7bb6108ffe massive updates Chris PeBenito 2005-07-21 20:34:12 +0000
  • 80526ccbdd add an example module config for a targeted policy Chris PeBenito 2005-07-20 20:11:49 +0000
  • ea7d571bd7 /var/lib is now a mountpoint Chris PeBenito 2005-07-20 17:36:48 +0000
  • 53857c8c05 unconfined can pass all constraints Chris PeBenito 2005-07-20 17:24:23 +0000
  • ef424c14d4 name_connect only on tcp_sockets Chris PeBenito 2005-07-20 17:10:07 +0000
  • 9496fd5119 unconfined can name_connect to all ports Chris PeBenito 2005-07-20 17:08:07 +0000
  • d250634311 reorder kernel policy, add attributes for sysctl and proc entries. fix unconfined interface Chris PeBenito 2005-07-20 17:06:10 +0000
  • f82c6ac64c bah typo Chris PeBenito 2005-07-20 15:08:33 +0000
  • 0b28a23114 user home dirs were missing file type in targ policy Chris PeBenito 2005-07-20 15:06:49 +0000
  • 1e3f610b3b add missing dir and file perms for selinuxfs in unconfined Chris PeBenito 2005-07-20 14:57:13 +0000
  • 689f6ddb35 fix typos and import some rules from NSA cvs to make targeted policy work Chris PeBenito 2005-07-20 14:25:24 +0000
  • 474f43d13d should actually try compiling first :x Chris PeBenito 2005-07-20 13:39:10 +0000
  • bd7e7a6417 missed a line Chris PeBenito 2005-07-20 13:37:18 +0000
  • a28f6db576 add in some rules from NSA CVS to make targeted policy work Chris PeBenito 2005-07-20 13:30:06 +0000
  • 8c3f438f75 corenet was missing from unconfined Chris PeBenito 2005-07-19 20:38:26 +0000
  • 892266ca76 more targeted policy fixes Chris PeBenito 2005-07-19 20:26:02 +0000
  • 21f47732b1 add new netlink socket class Chris PeBenito 2005-07-19 20:25:42 +0000
  • ec848d247f more fixes for targeted Chris PeBenito 2005-07-19 19:37:43 +0000
  • 2ec4c9d38f more cleanup Chris PeBenito 2005-07-19 18:40:31 +0000
  • 8b0bbdda34 fixes for targeted policy Chris PeBenito 2005-07-19 18:40:19 +0000
  • 391edeb577 fix assertions for framework Chris PeBenito 2005-07-18 20:17:21 +0000
  • a5f339f134 more cleanup in system Chris PeBenito 2005-07-18 18:31:49 +0000
  • 9f103ce14b fix to use context_template() Chris PeBenito 2005-07-18 14:25:05 +0000
  • 3b6174a142 add missing context template Chris PeBenito 2005-07-15 20:54:24 +0000
  • 50aca6d2f9 add raid (mdadm) Chris PeBenito 2005-07-15 20:45:26 +0000
  • d9fd8e7562 more pcmcia cleanup Chris PeBenito 2005-07-15 19:18:55 +0000
  • 157c69416f add macro to expand object class sets for use in require blocks Chris PeBenito 2005-07-15 15:53:54 +0000
  • 50f6503452 * break up files_getattr_all_files into correct interfaces * move stuff out of pcmcia into the appropriate modules Chris PeBenito 2005-07-15 15:17:57 +0000
  • f136a944c5 reorder in alpha order of type, for sanity purposes Chris PeBenito 2005-07-15 14:30:19 +0000
  • 316553a275 add pcmcia Chris PeBenito 2005-07-14 20:58:57 +0000
  • e0d57fbcb1 add pcmcia Chris PeBenito 2005-07-14 20:57:17 +0000
  • c429cb5e26 fix up the xml Chris PeBenito 2005-07-14 20:02:53 +0000
  • 11633bbaa8 add ipsec Chris PeBenito 2005-07-14 18:15:47 +0000
  • 8125c93a07 more updates Chris PeBenito 2005-07-13 20:50:20 +0000
  • 493d6c4adc add nscd Chris PeBenito 2005-07-13 20:48:51 +0000
  • df00b2e235 * fix chroot exec interface * more TODO cleanup * move IPC out of generic domtrans interfaces Chris PeBenito 2005-07-13 18:29:08 +0000
  • 25a0c61ffc add distro tunables. expand on a few comments Chris PeBenito 2005-07-13 18:08:12 +0000
  • b24f35d8a3 more cleanup of current TODOs Chris PeBenito 2005-07-12 20:34:24 +0000
  • 20a22759a7 fix comments for templates to have same number of # as interfaces Chris PeBenito 2005-07-12 20:33:42 +0000
  • 4051d15b62 fix xml Chris PeBenito 2005-07-11 19:15:54 +0000
  • ae9e2716c3 fix more TODOs. fix selinux.te to selinuxutil.te in optionals Chris PeBenito 2005-07-11 19:02:50 +0000
  • 34bbe50d50 improve display of tunables and booleans Chris PeBenito 2005-07-11 14:41:21 +0000
  • 4d7511ba57 add tun and bool descriptions Chris PeBenito 2005-07-11 13:49:15 +0000
  • 249d461f23 initial global booleans and tunables support. also fix index building, as it was being rebuilt for every module, rather then once after all modules are loaded. Chris PeBenito 2005-07-08 21:02:59 +0000
  • a42ca7ebec another round of TODO cleanup Chris PeBenito 2005-07-08 20:44:57 +0000
  • 4d0d4157f4 silly formatting fix Chris PeBenito 2005-07-08 19:44:12 +0000
  • c11958bd0f support for global booleans Chris PeBenito 2005-07-08 14:22:17 +0000
  • acb668edf1 * Added support for layer summaries. * Added a "Index" link on the menu to link to index.html * Added links from the master interface & template lists to their respective documentation in their module. * Added links to "Interfaces" and "Templates" in modules that have both. * Added "Return" links after the "Interfaces" and "Templates" section that go to the top of the module site. Chris PeBenito 2005-07-07 20:56:27 +0000
  • 58c7777e14 tag for 20050707 release Chris PeBenito 2005-07-07 17:25:53 +0000
  • 767266c2a7 update for 20050707 release Chris PeBenito 2005-07-07 17:19:13 +0000
  • dfa83e924c add changelog Chris PeBenito 2005-07-07 17:13:17 +0000
  • e5f8060316 implement direct_sysadm_daemon Chris PeBenito 2005-07-07 15:25:28 +0000
  • 1aa526281b missing rules uncovered by sediff Chris PeBenito 2005-07-07 15:20:24 +0000
  • c98340cfeb support for targeted policy Chris PeBenito 2005-07-06 20:28:29 +0000
  • 83ce670b3d put back to strict. will have separate strict and targeted appconfig Chris PeBenito 2005-07-06 19:42:27 +0000
  • 14b25bc455 validate file contexts Chris PeBenito 2005-07-06 18:34:27 +0000
  • ed1a92b88c ksu moves to su Chris PeBenito 2005-07-06 17:41:58 +0000
  • bb32544d61 add missing ssh file contexts Chris PeBenito 2005-07-06 15:59:54 +0000
  • a3fdcebc6a quiet the awk if modules.conf doesnt exist Chris PeBenito 2005-07-06 15:24:45 +0000
  • ebb884dec2 - Removed OUTPUT_VERSION as default. - Added default name as refpolicy to avoid clobbering string installs Karl MacMillan 2005-07-06 15:23:28 +0000