selinux-policy/policy/modules/apps
Dan Walsh 6ed3f15e82 Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
Allow shutdown to write utmp and search /var/log
Allow mozilla_plugin to send nsplugin signals
Split out samba_run_unconfined_net from unconfined_domain stuff.  TO allow unconfined.pp module to be removed
Allow nrpe to send signal and sigkill to the plugins
Fix up xguest to allow it to read hwdata and gconf_etc_t
Allow initrc_t to manage faillog
2010-09-22 16:42:32 -04:00
..
ada.fc trunk: merge strict and targeted policies. merge shlib_t into lib_t. 2007-10-02 16:04:50 +00:00
ada.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ada.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
authbind.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
authbind.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
authbind.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
awstats.fc trunk: add awstats from Stefan Schulze Frielinghaus. 2007-09-17 17:25:40 +00:00
awstats.if trunk: whitespace fixes in xml blocks. 2008-12-03 19:16:20 +00:00
awstats.te Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710 2010-09-15 10:42:34 -04:00
calamaris.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
calamaris.if trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00
calamaris.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
cdrecord.fc three debian patches from manoj 2009-07-14 09:05:59 -04:00
cdrecord.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
cdrecord.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
chrome.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
chrome.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
chrome.te Add vnstat policy 2010-09-16 17:46:06 -04:00
cpufreqselector.fc add cpufreqselector from dan 2009-07-27 09:09:00 -04:00
cpufreqselector.if add cpufreqselector from dan 2009-07-27 09:09:00 -04:00
cpufreqselector.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
evolution.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.te Module version bumps for cert patch. 2010-09-10 11:31:22 -04:00
execmem.fc Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t 2010-09-08 12:06:20 -04:00
execmem.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
execmem.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
firewallgui.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
firewallgui.if Fixes for f14 2010-08-26 15:29:37 -04:00
firewallgui.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
games.fc trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate. 2007-08-27 17:57:36 +00:00
games.if trunk: 4 patches from dan. 2009-03-11 13:32:23 +00:00
games.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
gift.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
gitosis.fc gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.if gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.te Module version bump for 5f04c91. 2010-06-29 11:26:16 -04:00
gnome.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gnome.if Add labels for /lib/readahead. 2010-09-13 16:15:43 -04:00
gnome.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gpg.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gpg.if Allow gpg_pinentry_t to use fifo files of apps that transition to gpg_agent 2010-09-03 17:06:40 -04:00
gpg.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
kdumpgui.fc Additional kdumpgui cleanup. 2010-08-10 09:21:01 -04:00
kdumpgui.if Update f14 2010-08-26 12:55:57 -04:00
kdumpgui.te Fix policy 2010-08-26 11:09:31 -04:00
livecd.fc Add livecd from Dan Walsh. 2010-07-07 10:28:25 -04:00
livecd.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
livecd.te Update f14 2010-08-26 12:55:57 -04:00
loadkeys.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
loadkeys.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
loadkeys.te Loadkeys patch from Dan Walsh. 2010-06-18 15:12:33 -04:00
lockdev.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
lockdev.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
lockdev.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
mono.fc Mono patch from Dan Walsh. 2010-02-19 10:42:43 -05:00
mono.if Update f14 2010-08-26 12:55:57 -04:00
mono.te Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role(). 2010-07-06 13:17:05 -04:00
mozilla.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
mozilla.if Allow iptables to read shorewall tmp files 2010-09-07 16:23:09 -04:00
mozilla.te Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc 2010-09-22 16:42:32 -04:00
mplayer.fc trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
mplayer.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
mplayer.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
nsplugin.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
nsplugin.if Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc 2010-09-22 16:42:32 -04:00
nsplugin.te Fix some names in passenger policy 2010-09-13 10:26:10 -04:00
openoffice.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
openoffice.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
openoffice.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
podsleuth.fc podsleuth patch from dan. 2009-07-21 10:11:16 -04:00
podsleuth.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
podsleuth.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
ptchown.fc add ptchown policy from dan. 2009-08-31 10:21:01 -04:00
ptchown.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ptchown.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
pulseaudio.fc Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c. 2010-03-29 09:19:40 -04:00
pulseaudio.if Type print_spool_t is not required here. 2010-09-15 17:42:27 +02:00
pulseaudio.te Allow sudo domains to manage /var/db/sudo 2010-09-08 17:27:24 -04:00
qemu.fc Qemu patch from Dan Walsh. 2010-06-22 09:32:35 -04:00
qemu.if Allow virt_domains to exec qumu_exec_t, add boolean to allow svirt_t to connect to x 2010-09-08 15:05:08 -04:00
qemu.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
rssh.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
rssh.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
rssh.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
sambagui.fc system-config-samba dbus service policy from Dan Walsh 2010-08-09 09:37:29 -04:00
sambagui.if Update f14 2010-08-26 12:55:57 -04:00
sambagui.te Update f14 2010-08-26 12:55:57 -04:00
sandbox.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
sandbox.if Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc 2010-09-22 16:42:32 -04:00
sandbox.te Allow a couple of sandbox issues. 2010-09-14 10:02:43 -04:00
screen.fc trunk: 9 patches from dan. 2009-06-01 16:03:42 +00:00
screen.if Screen needs to setattr on user_ttydevice_t from Dan Walsh 2010-03-16 13:36:45 -04:00
screen.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
seunshare.fc add seunshare from dan. 2009-09-28 15:40:06 -04:00
seunshare.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
seunshare.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
slocate.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
slocate.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
slocate.te Slocate patch from Dan Walsh. 2010-06-22 09:58:14 -04:00
telepathy.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
telepathy.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
telepathy.te Fix gnome_setattr_config_home 2010-09-13 14:47:02 -04:00
thunderbird.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
thunderbird.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
thunderbird.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
tvtime.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
tvtime.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
tvtime.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
uml.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
userhelper.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
userhelper.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
userhelper.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
usernetctl.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
usernetctl.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
usernetctl.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
vmware.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
vmware.if VMWare patch from Dan Walsh. 2010-07-08 13:43:50 -04:00
vmware.te Fixes for vmware-host policy 2010-09-14 19:28:55 +02:00
webalizer.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
webalizer.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
webalizer.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
wine.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wine.if cleanup mmap_low merge with upstream 2010-09-01 14:55:04 -04:00
wine.te Fix mmap_zero patch 2010-09-03 09:22:06 -04:00
wireshark.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
wireshark.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
wireshark.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wm.fc wm policy from dan 2009-07-27 15:11:22 -04:00
wm.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wm.te Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role(). 2010-07-06 13:17:05 -04:00
xscreensaver.fc clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.if clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
yam.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
yam.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
yam.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00