rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
b45aaab97c
selinux-policy/policy/modules/apps
History
Dan Walsh b45aaab97c Allow sudo to send signals to any domains the user could have transitioned to. 
Passwd in single user mode needs to talk to console_device_t
Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
locate tried to read a symbolic link, will dontaudit
New labels for telepathy-sunshine content in homedir
Google is storing other binaries under /opt/google/talkplugin
bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
modemmanger and bluetooth send dbus messages to devicekit_power
Samba needs to getquota on filesystems labeld samba_share_t
2010-10-01 11:58:15 -04:00
..
ada.fc trunk: merge strict and targeted policies. merge shlib_t into lib_t. 2007-10-02 16:04:50 +00:00
ada.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ada.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
authbind.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
authbind.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
authbind.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
awstats.fc trunk: add awstats from Stefan Schulze Frielinghaus. 2007-09-17 17:25:40 +00:00
awstats.if trunk: whitespace fixes in xml blocks. 2008-12-03 19:16:20 +00:00
awstats.te Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710 2010-09-15 10:42:34 -04:00
calamaris.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
calamaris.if trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00
calamaris.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
cdrecord.fc three debian patches from manoj 2009-07-14 09:05:59 -04:00
cdrecord.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
cdrecord.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
chrome.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
chrome.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
chrome.te Add vnstat policy 2010-09-16 17:46:06 -04:00
cpufreqselector.fc add cpufreqselector from dan 2009-07-27 09:09:00 -04:00
cpufreqselector.if add cpufreqselector from dan 2009-07-27 09:09:00 -04:00
cpufreqselector.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
evolution.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.te Module version bumps for cert patch. 2010-09-10 11:31:22 -04:00
execmem.fc Mozilla_plugin needs to getattr on tmpfs and no longer needs to write to tmpfs_t 2010-09-08 12:06:20 -04:00
execmem.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
execmem.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
firewallgui.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
firewallgui.if Fixes for f14 2010-08-26 15:29:37 -04:00
firewallgui.te Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home 2010-09-26 06:42:14 -04:00
games.fc trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate. 2007-08-27 17:57:36 +00:00
games.if trunk: 4 patches from dan. 2009-03-11 13:32:23 +00:00
games.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
gift.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
gitosis.fc gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.if gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.te Module version bump for 5f04c91. 2010-06-29 11:26:16 -04:00
gnome.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gnome.if Search parent directory to be able to interact with targets content. 2010-09-23 16:22:26 +02:00
gnome.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gpg.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
gpg.if Allow gpg_pinentry_t to use fifo files of apps that transition to gpg_agent 2010-09-03 17:06:40 -04:00
gpg.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
irc.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
java.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
kdumpgui.fc Additional kdumpgui cleanup. 2010-08-10 09:21:01 -04:00
kdumpgui.if Update f14 2010-08-26 12:55:57 -04:00
kdumpgui.te Fix policy 2010-08-26 11:09:31 -04:00
livecd.fc Add livecd from Dan Walsh. 2010-07-07 10:28:25 -04:00
livecd.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
livecd.te Update f14 2010-08-26 12:55:57 -04:00
loadkeys.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
loadkeys.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
loadkeys.te Loadkeys patch from Dan Walsh. 2010-06-18 15:12:33 -04:00
lockdev.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
lockdev.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
lockdev.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
mono.fc Mono patch from Dan Walsh. 2010-02-19 10:42:43 -05:00
mono.if Update f14 2010-08-26 12:55:57 -04:00
mono.te Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role(). 2010-07-06 13:17:05 -04:00
mozilla.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
mozilla.if Allow iptables to read shorewall tmp files 2010-09-07 16:23:09 -04:00
mozilla.te Allow sudo to send signals to any domains the user could have transitioned to. 2010-10-01 11:58:15 -04:00
mplayer.fc trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
mplayer.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
mplayer.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
nsplugin.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
nsplugin.if Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory. 2010-09-27 10:21:54 -04:00
nsplugin.te Allow nsplugin to sendto itself dgrams 2010-09-29 10:55:40 -04:00
openoffice.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
openoffice.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
openoffice.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
podsleuth.fc podsleuth patch from dan. 2009-07-21 10:11:16 -04:00
podsleuth.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
podsleuth.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
ptchown.fc add ptchown policy from dan. 2009-08-31 10:21:01 -04:00
ptchown.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ptchown.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
pulseaudio.fc Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c. 2010-03-29 09:19:40 -04:00
pulseaudio.if Type print_spool_t is not required here. 2010-09-15 17:42:27 +02:00
pulseaudio.te Allow sudo domains to manage /var/db/sudo 2010-09-08 17:27:24 -04:00
qemu.fc Qemu patch from Dan Walsh. 2010-06-22 09:32:35 -04:00
qemu.if Allow virt_domains to exec qumu_exec_t, add boolean to allow svirt_t to connect to x 2010-09-08 15:05:08 -04:00
qemu.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
rssh.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
rssh.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
rssh.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
sambagui.fc system-config-samba dbus service policy from Dan Walsh 2010-08-09 09:37:29 -04:00
sambagui.if Update f14 2010-08-26 12:55:57 -04:00
sambagui.te Update f14 2010-08-26 12:55:57 -04:00
sandbox.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
sandbox.if Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc 2010-09-22 16:42:32 -04:00
sandbox.te Allow a couple of sandbox issues. 2010-09-14 10:02:43 -04:00
screen.fc trunk: 9 patches from dan. 2009-06-01 16:03:42 +00:00
screen.if Screen needs to setattr on user_ttydevice_t from Dan Walsh 2010-03-16 13:36:45 -04:00
screen.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
seunshare.fc add seunshare from dan. 2009-09-28 15:40:06 -04:00
seunshare.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
seunshare.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
slocate.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
slocate.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
slocate.te Allow sudo to send signals to any domains the user could have transitioned to. 2010-10-01 11:58:15 -04:00
telepathy.fc Allow sudo to send signals to any domains the user could have transitioned to. 2010-10-01 11:58:15 -04:00
telepathy.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
telepathy.te Allow sudo to send signals to any domains the user could have transitioned to. 2010-10-01 11:58:15 -04:00
thunderbird.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
thunderbird.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
thunderbird.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
tvtime.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
tvtime.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
tvtime.te Module version bump for fa1847f. 2010-07-12 14:02:18 -04:00
uml.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
userhelper.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
userhelper.if fix typo 2010-09-23 17:31:09 -04:00
userhelper.te Allow consolehelper to read fonts and config files in user homedir 2010-09-23 15:14:34 -04:00
usernetctl.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
usernetctl.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
usernetctl.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
vmware.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
vmware.if VMWare patch from Dan Walsh. 2010-07-08 13:43:50 -04:00
vmware.te Fixes for vmware-host policy 2010-09-14 19:28:55 +02:00
webalizer.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
webalizer.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
webalizer.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
wine.fc UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wine.if cleanup mmap_low merge with upstream 2010-09-01 14:55:04 -04:00
wine.te Fix mmap_zero patch 2010-09-03 09:22:06 -04:00
wireshark.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
wireshark.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
wireshark.te UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wm.fc wm policy from dan 2009-07-27 15:11:22 -04:00
wm.if UPdate for f14 policy 2010-08-26 09:41:21 -04:00
wm.te Remove improper usage of userdom_manage_home_role(), userdom_manage_tmp_role(), and userdom_manage_tmpfs_role(). 2010-07-06 13:17:05 -04:00
xscreensaver.fc clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.if clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
yam.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
yam.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
yam.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00