413aac13de
Allow common users to manage and relabel Alsa home files.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-01 09:41:22 -04:00
329138beba
Move oident manage and relabel home content interfaces to common user template.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-01 09:41:12 -04:00
a492b22ab1
Fix whitespace in cyphesis.
2010-09-17 08:50:26 -04:00
92f6d7cf64
cyphesis patch from Dan Walsh
2010-09-17 08:46:23 -04:00
fee48647ac
Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710
...
67effb0483be01c6c63f6b0d8d595b082e4b8097d6689d9545afc3d3f3c5e77a59e50ccf8723317759c7dc1db54e9bf16d4f95198bf40792622c63bc20842cdc7cc4d792d448
2010-09-15 10:42:34 -04:00
792d44840c
radvd patch from Dan Walsh
2010-09-15 09:14:55 -04:00
dc7cc4d5c1
snort patch from Dan Walsh
2010-09-15 09:14:55 -04:00
c20842caf8
stunnel patch from Dan Walsh
2010-09-15 09:14:55 -04:00
622c63b4e3
zabbix patch from Dan Walsh
2010-09-15 09:14:55 -04:00
bf40792ae5
zebra patch from Dan Walsh
2010-09-15 09:14:54 -04:00
4f95198644
awstats patch from Dan Walsh
2010-09-15 09:14:54 -04:00
e9bf16d2d9
certmaster patch from Dan Walsh
2010-09-15 09:14:54 -04:00
dc1db5407a
pcscd patch from Dan Walsh
...
Edit: removed the dev_list_sysfs call, dev_read_sysfs takes care of it
2010-09-15 09:14:54 -04:00
17759c7326
postgresql patch from Dan Walsh
2010-09-15 09:14:54 -04:00
cf872339b2
postgrey patch from Dan Walsh
2010-09-15 09:14:54 -04:00
a59e50c12c
prelude patch from Dan Walsh
2010-09-15 09:14:54 -04:00
f3c5e77754
certwatch patch from Dan Walsh
...
Not including userdom_dontaudit_list_admin_dir - still no admin_home_t in refpolicy
2010-09-15 09:14:54 -04:00
5afc3d3589
firstboot patch from Dan Walsh
...
Not including gnome_admin_home_gconf_filetrans - no admin_home_t in refpolicy
2010-09-15 09:14:54 -04:00
689d95422f
smoltclient patch from Dan Walsh
2010-09-15 09:14:53 -04:00
b8097d6ec4
amavis patch from Dan Walsh
2010-09-15 09:14:53 -04:00
5b082e4acf
arpwatch patch from Dan Walsh
2010-09-15 09:14:53 -04:00
b0d8d59ff0
canna patch from Dan Walsh
2010-09-15 09:14:53 -04:00
c6c63f63c7
certmonger patch from Dan Walsh
2010-09-15 09:14:53 -04:00
483be01302
courier patch from Dan Walsh
2010-09-15 09:14:53 -04:00
67effb0450
dcc patch from Dan Walsh
2010-09-15 09:14:53 -04:00
a831710a6a
style change to djbdns.te
2010-09-15 09:14:52 -04:00
c4fbfaecdd
fetchmail patch from Dan Walsh
2010-09-15 09:14:52 -04:00
01c441355e
icecast patch from Dan Walsh
2010-09-15 09:14:52 -04:00
2a2b6a79fa
nslcd patch from Dan Walsh
2010-09-15 09:14:52 -04:00
5271920764
nut patch from Dan Walsh
2010-09-15 09:14:52 -04:00
c17ad385ac
openct patch from Dan Walsh
2010-09-15 09:14:52 -04:00
25d796ed37
Unconditional staff and user oidentd home config access from Dominick Grift.
2010-09-15 08:20:16 -04:00
941e3db567
Access for confined users to oidentd user home content is unconditional.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-15 08:05:41 -04:00
da12b54802
Module version bumps for cert patch.
2010-09-10 11:31:22 -04:00
e9d6dfb8b1
Fix missed deprecated interface usage from the cert patch. Add back a few rolecap tags.
2010-09-10 11:31:00 -04:00
8340621920
Implement miscfiles_cert_type().
...
This is based on Fedoras' miscfiles_cert_type implementation.
The idea was that openvpn needs to be able read home certificates (home_cert_t) which is not implemented in refpolicy yet, as well as generic cert_t certificates.
Note that openvpn is allowed to read all cert_types, as i know that it needs access to both generic cert_t as well as (future) home_cert_t. Dwalsh noted that other domains may need this as well but because i do not know exactly which domains i will not changes any other domains call to generic cert type interfaces.
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-10 11:05:46 -04:00
8fbea561bb
Module version bump for 8296eb2.
2010-09-10 08:51:54 -04:00
9c2c77403f
Remove unallocated tty access in amanda since it was originally there for the old targeted policy, and now all roles have a user tty type.
2010-09-09 09:32:31 -04:00
36c6e47384
Clean up Anaconda policy.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-09 08:14:56 -04:00
e02146370a
Clean up Amtu module.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-09 08:14:09 -04:00
8296eb2261
Clean up Amanda module.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-09 08:13:13 -04:00
28d96f0e39
Module version bumps for b7ceb34 5675107 e411968 eca7eb3.
2010-09-03 13:09:40 -04:00
eca7eb3b47
Rearrange alsa interfaces.
2010-09-03 11:56:10 -04:00
e411968dff
Implement alsa_home_t for asoundrc. Clean up Alsa module.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-03 11:23:06 -04:00
5675107ff9
Libcgroup moved the cgroup directory to /sys/fs/cgroup.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-03 11:03:10 -04:00
b7ceb34995
Do not try to relabel the contents of the /dev/shm directory.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-03 10:55:16 -04:00
785ee7988c
Module version bump and changelog entry for conditional mmap_zero patch.
2010-09-01 10:08:09 -04:00
a1b42052c9
Fix mmap_zero assertion violation in xserver.
2010-09-01 09:59:39 -04:00
623e4f0885
1/1] Make the ability to mmap zero conditional where this is fapplicable.
...
Retry: forgot to include attribute mmap_low_domain_type attribute to domain_mmap_low() :
Inspired by similar implementation in Fedora.
Wine and vbetool do not always actually need the ability to mmap a low area of the address space.
In some cases this can be silently denied.
Therefore introduce an interface that facilitates "mmap low" conditionally, and the corresponding boolean.
Also implement booleans for wine and vbetool that enables the ability to not audit attempts by wine and vbetool to mmap a low area of the address space.
Rename domain_mmap_low interface to domain_mmap_low_uncond.
Change call to domain_mmap_low to domain_mmap_low_uncond for xserver_t. Also move this call to distro redhat ifndef block because Redhat does not need this ability.
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-01 09:41:56 -04:00
76a9fe96e4
Module version bumps and changelog for devtmpfs patchset.
2010-08-25 11:19:27 -04:00
Dominick Grift
Chris PeBenito
Jeremy Solt