rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
1900668638
selinux-policy/policy/modules/system
History
Chris PeBenito 1900668638 trunk: Unified labeled networking policy from Paul Moore. 
The latest revision of the labeled policy patches which enable both labeled 
and unlabeled policy support for NetLabel.  This revision takes into account
Chris' feedback from the first version and reduces the number of interface
calls in each domain down to two at present: one for unlabeled access, one for
NetLabel access.  The older, transport layer specific interfaces, are still  
present for use by third-party modules but are not used in the default policy
modules.

trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore.

This patch changes the policy to use the netmsg initial SID as the "base"
SID/context for NetLabel packets which only have MLS security attributes.
Currently we use the unlabeled initial SID which makes it very difficult to
distinquish between actual unlabeled packets and those packets which have MLS
security attributes.
2007-06-27 15:23:21 +00:00
..
authlogin.fc patch from dan Tue, 24 Oct 2006 11:00:28 -0400 2006-10-31 21:01:48 +00:00
authlogin.if trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern(). 2007-06-12 18:46:14 +00:00
authlogin.te trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern(). 2007-06-12 18:46:14 +00:00
clock.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
clock.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
clock.te trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern(). 2007-06-12 18:46:14 +00:00
daemontools.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
daemontools.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
daemontools.te Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
fstools.fc add fc entry for make_reiser4 2007-06-08 20:01:34 +00:00
fstools.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
fstools.te add fc entry for make_reiser4 2007-06-08 20:01:34 +00:00
getty.fc patch from dan Wed, 26 Jul 2006 14:42:46 -0400 2006-07-28 15:13:58 +00:00
getty.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
getty.te bump module versions for release 2007-04-17 13:28:09 +00:00
hostname.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
hostname.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
hostname.te bump versions for release. 2006-12-12 21:22:47 +00:00
hotplug.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
hotplug.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
hotplug.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
init.fc add missing gentoo file contexts for initrc and lvm 2006-11-07 19:38:10 +00:00
init.if trunk: long overdue cleanup from when range_transitions were only in the base module 2007-05-14 15:35:47 +00:00
init.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
ipsec.fc patch from dan, Thu, 2007-01-25 at 08:12 -0500 2007-02-16 23:01:42 +00:00
ipsec.if six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed 2007-03-26 20:47:29 +00:00
ipsec.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
iptables.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
iptables.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
iptables.te trunk: 3 patches from dan 2007-06-11 15:43:37 +00:00
iscsi.fc patch from dan Tue, 24 Oct 2006 11:00:28 -0400 2006-10-31 21:01:48 +00:00
iscsi.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
iscsi.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
libraries.fc trunk: trivial gentoo tweaks 2007-06-20 20:08:26 +00:00
libraries.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
libraries.te trunk: trivial gentoo tweaks 2007-06-20 20:08:26 +00:00
locallogin.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
locallogin.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
locallogin.te Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
logging.fc gentoo testing fixes. 2006-10-13 21:44:02 +00:00
logging.if trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern(). 2007-06-12 18:46:14 +00:00
logging.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
lvm.fc patch from dan Wed, 29 Nov 2006 17:06:40 -0500 2006-12-04 20:10:56 +00:00
lvm.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
lvm.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
miscfiles.fc patches for file contexts in networkmanager, miscfiles, corecommands, devices, and java from Dan Walsh. 2007-03-01 15:43:39 +00:00
miscfiles.if patch from dan, Thu, 2007-01-25 at 08:12 -0500 2007-02-16 23:01:42 +00:00
miscfiles.te bump module versions for release 2007-04-17 13:28:09 +00:00
modutils.fc testing fixes 2006-08-18 18:20:22 +00:00
modutils.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
modutils.te - Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes 2007-05-02 17:31:38 +00:00
mount.fc patch from dan Tue, 24 Oct 2006 11:00:28 -0400 2006-10-31 21:01:48 +00:00
mount.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
mount.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
netlabel.fc merge netlabel stuff from labeled-networking branch 2006-10-17 16:58:17 +00:00
netlabel.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
netlabel.te merge netlabel stuff from labeled-networking branch 2006-10-17 16:58:17 +00:00
pcmcia.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
pcmcia.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
pcmcia.te bump module versions for release 2007-04-17 13:28:09 +00:00
raid.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
raid.if Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00
raid.te trunk: 5 patches from dan 2007-06-11 15:01:10 +00:00
selinuxutil.fc merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
selinuxutil.if merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
selinuxutil.te merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
setrans.fc - Move range transitions to modules. 2006-10-04 17:25:34 +00:00
setrans.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
setrans.te bump module versions for release 2007-04-17 13:28:09 +00:00
sysnetwork.fc more strict testing fixes 2006-08-23 19:36:04 +00:00
sysnetwork.if trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
sysnetwork.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
udev.fc 5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes 2007-04-11 17:56:03 +00:00
udev.if merge policy patterns to trunk 2006-12-12 20:08:08 +00:00
udev.te merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
unconfined.fc patch from dan, Thu, 2007-01-25 at 08:12 -0500 2007-02-16 23:01:42 +00:00
unconfined.if patch from dan, Thu, 2007-01-25 at 08:12 -0500 2007-02-16 23:01:42 +00:00
unconfined.te merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
userdomain.fc patch from dan, Thu, 2007-01-25 at 08:12 -0500 2007-02-16 23:01:42 +00:00
userdomain.if trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
userdomain.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00
xen.fc patch from dan Wed, 29 Nov 2006 17:06:40 -0500 2006-12-04 20:10:56 +00:00
xen.if trunk: xen updates from dan 2007-06-21 13:36:05 +00:00
xen.te trunk: Unified labeled networking policy from Paul Moore. 2007-06-27 15:23:21 +00:00