63a6a44b3d
Module version bump for fixes from cgzones.
2017-03-12 16:36:49 -04:00
d62ce5b4e8
lvm: small adjustments
...
* align file contexts
* fix lvm_admin()
* call user_use_inherited_user_terminals and remove useless dontaudit call
2017-03-12 10:32:02 +01:00
4d028498d8
Module version bumps for fixes from cgzones.
2017-03-05 10:48:42 -05:00
919a478e47
Merge branch 'fix_usr_bin_merge' of git://github.com/cgzones/refpolicy
2017-03-05 09:43:50 -05:00
05fef195bc
Merge branch 'modutils_module' of git://github.com/cgzones/refpolicy
2017-03-05 09:11:54 -05:00
4b79a54b41
modutils: adopt callers to new interfaces
2017-03-03 12:28:17 +01:00
d2702a4224
corecmd_read_bin_symlinks(): remove deprecated and redundant calls
2017-03-03 12:00:07 +01:00
cdbca94133
Module version bump for getty patch from cgzones.
2017-03-02 20:25:04 -05:00
e77bd0b18b
Merge branch 'getty_module' of git://github.com/cgzones/refpolicy
2017-03-02 19:23:42 -05:00
ef653c810a
authlogin: put interface properly inside optional
2017-02-28 19:55:27 -05:00
40ef165744
Module version bump for misc fixes from cgzones.
2017-02-28 19:42:24 -05:00
aa0665cfac
Merge branch 'monit_depend' of git://github.com/cgzones/refpolicy
2017-02-28 19:31:33 -05:00
e36f5a4ce9
Module version bump for user terminal improvments from cgzones.
2017-02-28 19:14:29 -05:00
4d0d7cfc6f
systemd-tmpfiles: refactor runtime configs
...
handle runtime configuration files under /run/tmpfiles.d as 3rd party content, like /run or /var/lib
2017-02-27 19:32:20 +01:00
94311b1c20
modutils: adjust interfaces after recent binaries merge
2017-02-27 19:27:03 +01:00
7d1a81a006
modutils: format filecontexts
2017-02-27 19:27:03 +01:00
3c7cec58a2
getty: overlook module
...
* reorder file contexts
* rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t
* remove unneeded and confusing init permissions
* delete access on generic pids
* remove invalid etc filetrans: getty has no create permissions for its config files
* restrict logfile access
2017-02-27 19:21:39 +01:00
1f1e2474d8
improve documentation for user_user_(inherited_)?user_terminals
2017-02-27 18:17:10 +01:00
ca04cdb14b
Module version bump for patches from cgzones.
2017-02-26 12:23:19 -05:00
f727615595
Merge branch 'locallogin_module' of git://github.com/cgzones/refpolicy
2017-02-26 12:09:11 -05:00
10388e1319
auth: Move optional out of auth_use_pam_systemd() to callers.
2017-02-26 12:08:02 -05:00
15f0cc4fe1
Merge branch 'newrole_fixes' of git://github.com/cgzones/refpolicy
2017-02-26 11:58:43 -05:00
2170c65ad9
Merge branch 'su_module' of git://github.com/cgzones/refpolicy
2017-02-26 11:48:37 -05:00
9f99cfb771
Network daemon patches from Russell Coker.
2017-02-25 11:20:19 -05:00
e527ebaadf
systemd: Further revisions from Russell Coker.
2017-02-25 09:35:10 -05:00
1c5c70d4ab
init: Move interface and whitespace change.
2017-02-25 08:39:58 -05:00
5acda8076f
init: Rename init_search_pid_dirs() to init_search_pids().
2017-02-25 08:38:16 -05:00
35bd01104a
new init interfaces for systemd
...
These are needed by several patches I'm about to send.
Description: some new interfaces for init/systemd
Author: Russell Coker <russell@coker.com.au>
Last-Update: 2017-02-24
2017-02-25 08:19:39 -05:00
c3c767bae2
Module version bump for CI fixes.
2017-02-23 20:32:10 -05:00
65e60689d4
Fix CI errors.
2017-02-23 20:16:40 -05:00
2087bde934
Systemd fixes from Russell Coker.
2017-02-23 20:03:23 -05:00
485929b762
Module version bump for ntp fixes from cgzones.
2017-02-22 19:01:20 -05:00
17753638ca
add init_daemon_lock_file()
...
needed for ntp
2017-02-21 15:07:47 +01:00
498fb3c6e8
Module version bump for cgroups systemd fix from cgzones.
2017-02-20 11:21:00 -05:00
e72556c6dd
Merge branch 'cgroups_fix' of git://github.com/cgzones/refpolicy
2017-02-20 11:13:07 -05:00
132db642bd
Module version bump for selinuxutil and systmd changes from cgzones.
2017-02-20 10:57:50 -05:00
34cfce5410
Merge branch 'selinuxutil_module' of git://github.com/cgzones/refpolicy
2017-02-20 10:53:56 -05:00
e52b701f59
Merge branch 'systemd_transient' of git://github.com/cgzones/refpolicy
2017-02-20 10:43:18 -05:00
5770a8ee7c
update init_ACTION_all_units
...
When with systemd a program does not ship a systemd unit file but only a init script, systemd creates a pseudo service on the fly.
To be able to act on this service, add the target attribute init_script_file_type to the init_ACTION_all_units interfaces.
Useful for monit.
2017-02-20 14:24:56 +01:00
9b5d89fcf6
newrole: fix denials
...
dontaudit net_admin access due to setsockopt
allow communication with systemd-logind
2017-02-20 14:10:17 +01:00
53fb3a3ba4
dpkg: Updates from Russell Coker.
2017-02-19 16:13:14 -05:00
ba0e51c5b0
su: some adjustments
...
* systemd fixes
* remove unused attribute su_domain_type
* remove hide_broken_symptoms sections
* dontaudit init_t proc files access
* dontaudit net_admin capability due to setsockopt
2017-02-18 21:50:45 +01:00
4d413fd0cb
authlogin: introduce auth_use_pam_systemd
...
add special interface for pam_systemd module permissions
2017-02-18 21:50:45 +01:00
14566f96a9
Module version bump for hostname fix from cgzones.
2017-02-18 13:58:29 -05:00
a5658b85a0
locallogin: adjustments
...
* do not grant permissions by negativ matching
* separate dbus from consolekit block for systemd
2017-02-18 19:36:44 +01:00
36fa3d8916
Merge branch 'hostname_module' of git://github.com/cgzones/refpolicy
2017-02-18 13:32:23 -05:00
8266424bcb
systemd_cgroups_t: fix denials
2017-02-18 18:41:45 +01:00
3726cd58f6
Module version bump for changes from cgzones.
2017-02-18 12:28:38 -05:00
959f78de99
Merge branch 'setfiles_getattr' of git://github.com/cgzones/refpolicy
2017-02-18 11:34:23 -05:00
cb35cd587f
Little misc patches from Russell Coker.
2017-02-18 09:39:01 -05:00
Chris PeBenito
cgzones
Jason Zaman
Russell Coker