f7925f25f7
trunk: bump module versions for release.
2007-12-14 14:23:18 +00:00
1abafe3707
trunk: Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik.
2007-12-12 16:18:50 +00:00
09e21686ea
trunk: another round of nsswitch from dan.
2007-12-06 16:04:14 +00:00
c0cf6e0a6e
trunk: clean up nsswitch usage, from dan.
2007-12-04 15:05:55 +00:00
6c91189762
trunk: 8 patches from dan.
2007-11-15 16:54:18 +00:00
495df41602
trunk: 11 patches from dan.
2007-10-29 18:35:32 +00:00
bd973e3e68
trunk: remove unused types from dbus.
2007-10-26 18:04:38 +00:00
2f27163c1b
trunk: 3 patches from dan.
2007-10-18 19:31:14 +00:00
36627094e8
trunk: fix unconditional call to nscd from usermanage run interfaces.
2007-10-15 18:16:00 +00:00
f48782758e
trunk: reorganize amanda and bind
2007-10-12 17:50:11 +00:00
bc01b352f6
trunk: 2 patches from dan.
2007-10-12 17:35:56 +00:00
cdf98fedc0
trunk: 10 patches from dan.
2007-10-11 18:12:29 +00:00
ef659a476e
Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.
2007-10-09 17:29:48 +00:00
12e9ea1ae3
trunk: module version bumps for previous commit.
2007-10-02 17:15:07 +00:00
350b6ab767
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
3480f3f239
trunk: bump version numbers for release.
2007-09-28 13:58:24 +00:00
ff4085dacc
trunk: one-liner from Shintaro Fujiwara.
2007-09-18 19:49:35 +00:00
8241b538af
trunk: udev update and brctl module from dan.
2007-09-05 17:55:57 +00:00
016e5c5cdc
trunk: 4 patches from dan.
2007-09-05 14:48:21 +00:00
0a0b8078ca
trunk: 5 patches from dan.
2007-09-04 18:57:58 +00:00
4922765ec6
trunk: fix certwatch_run() interface, which had a typo in the name.
2007-08-30 15:01:48 +00:00
6dd721a686
trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate.
2007-08-27 17:57:36 +00:00
8d2c34195e
trunk: updates from dan on 9 modules
2007-08-22 20:02:41 +00:00
f8233ab7b0
trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.
2007-08-20 18:26:08 +00:00
d46cfe45cd
trunk: add application module
2007-07-19 18:57:48 +00:00
116c1da330
trunk: update module version numbers for release.
2007-06-29 14:48:13 +00:00
113b4fc4a2
Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.
2007-06-28 17:25:46 +00:00
f5842c1fa5
trunk: minor amanda update from dan
2007-06-27 19:19:20 +00:00
1900668638
trunk: Unified labeled networking policy from Paul Moore.
...
The latest revision of the labeled policy patches which enable both labeled
and unlabeled policy support for NetLabel. This revision takes into account
Chris' feedback from the first version and reduces the number of interface
calls in each domain down to two at present: one for unlabeled access, one for
NetLabel access. The older, transport layer specific interfaces, are still
present for use by third-party modules but are not used in the default policy
modules.
trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore.
This patch changes the policy to use the netmsg initial SID as the "base"
SID/context for NetLabel packets which only have MLS security attributes.
Currently we use the unlabeled initial SID which makes it very difficult to
distinquish between actual unlabeled packets and those packets which have MLS
security attributes.
2007-06-27 15:23:21 +00:00
6c8aba7b31
trunk: confine sendmail and logrotate on targeted
2007-06-19 17:01:39 +00:00
a74d1ad7cd
trunk: add amtu from dan
2007-06-12 18:58:36 +00:00
6649aec9d0
trunk: 3 patches from dan
2007-06-11 15:43:37 +00:00
762d2cb989
merge restorecon into setfiles
2007-05-11 17:10:43 +00:00
517618f0b4
Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.
2007-05-02 17:55:03 +00:00
27c570f755
trivial fix for netutils from dan
2007-04-30 14:44:04 +00:00
b4beb0a0fb
missed piece of clip patch
2007-04-30 14:32:31 +00:00
0251df3e39
bump module versions for release
2007-04-17 13:28:09 +00:00
82e284bb89
last piece of dan's previous patch
2007-04-11 13:31:10 +00:00
9af48eef6e
six patches from dan
2007-04-10 13:10:58 +00:00
9e8f65c83e
six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed
2007-03-26 20:47:29 +00:00
56e1b3d207
- Move booleans and tunables to modules when it is only used in a single
...
module.
- Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
8021cb4f63
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
efcf9df253
kudzu will telinit to make init re-read the inittab after configuring serial consoles
2007-03-20 19:00:35 +00:00
6c20f77e80
patch from Dan for sudo:
...
sudo should be able to getattr on all executables not just
bin_t/sbin_t. Confined executeables run from sudo need this.
sudo_exec_t needs to be marked as exec_type so prelink will work correctly.
sudo semanage should work
2007-03-19 16:32:44 +00:00
cdc91b9aeb
Patch for handling restart of nscd when ran from useradd, groupadd, and admin passwd, from Dan Walsh.
2007-03-08 15:14:45 +00:00
3a39015792
On Tue, 2007-02-20 at 12:30 -0500, Daniel J Walsh wrote:
...
> prelink creates temporarly files that it then needs to relabel.
2007-02-23 21:20:46 +00:00
6b19be3360
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
42c5c5f612
bump versions for release.
2006-12-12 21:22:47 +00:00
c0868a7a3b
merge policy patterns to trunk
2006-12-12 20:08:08 +00:00
d6d16b9796
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
Chris PeBenito