rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
9dc3cd1635
selinux-policy/policy/modules/system
History
Paul Moore 9dc3cd1635 refpol: Policy for the new TUN driver access controls 
Add policy for the new TUN driver access controls which allow policy to
control which domains have the ability to create and attach to TUN/TAP
devices.  The policy rules for creating and attaching to a device are as
shown below:

  # create a new device
  allow domain_t self:tun_socket { create };

  # attach to a persistent device (created by tunlbl_t)
  allow domain_t tunlbl_t:tun_socket { relabelfrom };
  allow domain_t self:tun_socket { relabelto };

Further discussion can be found on this thread:

 * http://marc.info/?t=125080850900002&r=1&w=2

Signed-off-by: Paul Moore <paul.moore@hp.com>
2009-08-31 08:36:06 -04:00
..
application.fc trunk: add application module 2007-07-19 18:57:48 +00:00
application.if trunk: 3 patches from dan. 2007-10-29 22:08:34 +00:00
application.te trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
authlogin.fc trunk: 1 patch from dan. 2009-06-12 15:30:15 +00:00
authlogin.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
authlogin.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
clock.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
clock.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
clock.te fix ordering of interface calls in clock. 2009-08-05 09:52:34 -04:00
daemontools.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
daemontools.if trunk: whitespace fixes in xml blocks. 2008-12-03 19:16:20 +00:00
daemontools.te trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
fstools.fc trunk: one-liner from Shintaro Fujiwara 2007-09-26 14:28:20 +00:00
fstools.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
fstools.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
getty.fc trunk: 6 patches from the fedora policy, cherry picked by david hardeman. 2008-08-14 14:19:50 +00:00
getty.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
getty.te fix ordering of interface calls in getty. 2009-08-05 09:55:58 -04:00
hostname.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
hostname.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
hostname.te remove redundant xen_append_log() call in hostname. 2009-08-11 14:19:38 -04:00
hotplug.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
hotplug.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
hotplug.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
init.fc trunk: whitespace fix changing multiple spaces into tabs. 2008-12-03 18:33:19 +00:00
init.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
init.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
ipsec.fc trunk: 3 patches from dan. 2009-04-03 14:14:43 +00:00
ipsec.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
ipsec.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
iptables.fc trunk: 3 patches from dan. 2009-04-03 14:14:43 +00:00
iptables.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
iptables.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
iscsi.fc trunk: 3 patches from the fedora policy, cherry picked by David Hardeman. 2008-08-11 14:03:36 +00:00
iscsi.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
iscsi.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
libraries.fc fix refpolicy ticket #48. 2009-08-10 11:14:03 -04:00
libraries.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
libraries.te fix refpolicy ticket #48. 2009-08-10 11:14:03 -04:00
locallogin.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
locallogin.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
locallogin.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
logging.fc trunk: logging update from dan. 2008-09-18 13:20:57 +00:00
logging.if Remove excessive permissions in logging_send_syslog_msg(). Ticket #14. 2009-08-26 10:05:36 -04:00
logging.te Remove excessive permissions in logging_send_syslog_msg(). Ticket #14. 2009-08-26 10:05:36 -04:00
lvm.fc trunk: 5 patches from dan. 2009-05-06 14:26:20 +00:00
lvm.if trunk: whitespace fixes. 2009-05-06 14:44:57 +00:00
lvm.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
miscfiles.fc trunk: 3 patches from dan. 2009-03-20 13:58:15 +00:00
miscfiles.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
miscfiles.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
modutils.fc testing fixes 2006-08-18 18:20:22 +00:00
modutils.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
modutils.te fix ordering in modutils. 2009-08-05 10:15:45 -04:00
mount.fc patch from dan Tue, 24 Oct 2006 11:00:28 -0400 2006-10-31 21:01:48 +00:00
mount.if automount patch from dan. 2009-07-29 08:59:26 -04:00
mount.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
netlabel.fc merge netlabel stuff from labeled-networking branch 2006-10-17 16:58:17 +00:00
netlabel.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
netlabel.te trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
pcmcia.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
pcmcia.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
pcmcia.te split dev_create_cardmgr_dev() into a create and a filetrans interface. 2009-08-25 09:56:56 -04:00
raid.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
raid.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
raid.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
selinuxutil.fc merge restorecon into setfiles 2007-05-11 17:10:43 +00:00
selinuxutil.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
selinuxutil.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
setrans.fc trunk: init script for setrans. 2008-09-18 18:20:31 +00:00
setrans.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
setrans.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
sysnetwork.fc trunk: several fc updates from dan. 2007-12-12 15:55:21 +00:00
sysnetwork.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
sysnetwork.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
udev.fc trunk: 6 patches from dan. 2009-03-19 17:56:10 +00:00
udev.if trunk: 5 patches from dan. 2009-04-07 14:09:43 +00:00
udev.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00
unconfined.fc trunk: add openoffice locations in gentoo. 2007-12-10 15:59:01 +00:00
unconfined.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
unconfined.te Fix unconfined_r use of unconfined_java_t. 2009-08-17 13:19:26 -04:00
userdomain.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
userdomain.if refpol: Policy for the new TUN driver access controls 2009-08-31 08:36:06 -04:00
userdomain.te refpol: Policy for the new TUN driver access controls 2009-08-31 08:36:06 -04:00
xen.fc trunk: whitespace fix changing multiple spaces into tabs. 2008-12-03 18:33:19 +00:00
xen.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
xen.te module version number bump for release 2.20090730 that was mistakenly omitted. 2009-08-05 10:59:21 -04:00