fa50eb742f
Module version bump for ping capabilities from Sven Vermeulen.
2013-09-26 10:47:32 -04:00
56c43144d7
Allow ping to get/set capabilities
...
When ping is installed with capabilities instead of being marked setuid,
then the ping_t domain needs to be allowed to getcap/setcap.
Reported-by: Luis Ressel <aranea@aixah.de>
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2013-09-26 10:46:33 -04:00
d174521a64
Bump module versions for release.
2013-04-24 16:14:52 -04:00
b30c5df388
Module version bump for logging and tcpdump fixes from Sven Vermeulen.
2012-11-27 09:57:13 -05:00
9241902062
tcpdump chroots into /var/lib/tcpdump
...
When invoking tcpdump, the application creates a netlink_socket and then chroots
into /var/lib/tcpdump.
Without the right to create a netlink_socket:
tcpdump: Can't open netlink socket 13:Permission denied
Without the right on dac_read_search and sys_chroot:
tcpdump: Couldn't chroot/chdir to '/var/lib/tcpdump': Permission denied
See also https://bugs.gentoo.org/show_bug.cgi?id=443624
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-11-27 09:12:17 -05:00
35bb8cbf62
Module version bump for arping setcap from Dominick Grift.
2012-10-30 14:28:53 -04:00
7ef9402705
Arping needs setcap to cap_set_proc
...
rhbz#869615
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2012-10-30 14:19:37 -04:00
826d014241
Bump module versions for release.
2010-12-13 09:12:22 -05:00
e7ee065485
Module version bump for Dominick's netutils cleanup.
2010-10-05 15:11:23 -04:00
b306b5acaa
netutils: permission sets.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-05 15:11:00 -04:00
696a65867a
netutils: redundant.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-05 15:11:00 -04:00
9a4d292902
Netutils patch from Dan Walsh.
...
ping gets leaked log descriptor from nagios.
Label send_arp as ping_exec_t
2010-06-17 10:16:19 -04:00
48f99a81c0
Whitespace change: drop unnecessary blank line at the start of .te files.
2010-06-10 08:16:35 -04:00
29af4c13e7
Bump module versions for release.
2010-05-24 15:32:01 -04:00
3d95ca2d82
Module version bump for 904f3d8.
2010-05-24 13:08:09 -04:00
7605d2738c
Remove call to nagios_rw_inherited_tmp_files
2010-05-24 13:08:07 -04:00
44dc1b9c21
netutils patch from Dan Walsh
...
Edits:
- Dropping term_use_all_terms and user_ping tunables for ping and traceroute
- Whitespace fixes
2010-05-24 13:08:07 -04:00
1322a1af4d
Remove redundant conditional user_ping terminal rules.
2010-02-11 14:35:38 -05:00
c3c753f786
Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users.
2010-02-11 14:20:10 -05:00
9570b28801
module version number bump for release 2.20090730 that was mistakenly omitted.
2009-08-05 10:59:21 -04:00
a65fd90a50
trunk: 6 patches from dan.
2009-06-11 15:00:48 +00:00
da04234f32
trunk: 5 patches from dan.
2009-03-10 19:32:04 +00:00
c1262146e0
trunk: Remove node definitions and change node usage to generic nodes.
2009-01-09 19:48:02 +00:00
668b3093ff
trunk: change network interface access from all to generic network interfaces.
2009-01-06 20:24:10 +00:00
17ec8c1f84
trunk: bump module versions for release.
2008-12-10 19:38:10 +00:00
296273a719
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
2cca6b79b4
trunk: remove redundant shared lib calls.
2008-10-17 17:31:04 +00:00
5d4f4b5375
trunk: bump version numbers for release.
2008-10-14 15:46:36 +00:00
74993c4dae
trunk: 8 patches from dan.
2008-10-13 15:06:23 +00:00
8a948caf2b
trunk: 11 more cherry picks from fedora policy, by david hardeman.
2008-08-07 14:17:50 +00:00
0bfccda4e8
trunk: massive whitespace cleanup from dominick grift.
2008-07-23 21:38:39 +00:00
f7925f25f7
trunk: bump module versions for release.
2007-12-14 14:23:18 +00:00
12e9ea1ae3
trunk: module version bumps for previous commit.
2007-10-02 17:15:07 +00:00
350b6ab767
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
116c1da330
trunk: update module version numbers for release.
2007-06-29 14:48:13 +00:00
1900668638
trunk: Unified labeled networking policy from Paul Moore.
...
The latest revision of the labeled policy patches which enable both labeled
and unlabeled policy support for NetLabel. This revision takes into account
Chris' feedback from the first version and reduces the number of interface
calls in each domain down to two at present: one for unlabeled access, one for
NetLabel access. The older, transport layer specific interfaces, are still
present for use by third-party modules but are not used in the default policy
modules.
trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore.
This patch changes the policy to use the netmsg initial SID as the "base"
SID/context for NetLabel packets which only have MLS security attributes.
Currently we use the unlabeled initial SID which makes it very difficult to
distinquish between actual unlabeled packets and those packets which have MLS
security attributes.
2007-06-27 15:23:21 +00:00
27c570f755
trivial fix for netutils from dan
2007-04-30 14:44:04 +00:00
0251df3e39
bump module versions for release
2007-04-17 13:28:09 +00:00
9e8f65c83e
six trivial patches from dan for iptables, netutils, ipsec, devices, filesystem and cpuspeed
2007-03-26 20:47:29 +00:00
56e1b3d207
- Move booleans and tunables to modules when it is only used in a single
...
module.
- Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00
42c5c5f612
bump versions for release.
2006-12-12 21:22:47 +00:00
c0868a7a3b
merge policy patterns to trunk
2006-12-12 20:08:08 +00:00
d9845ae92a
patch from dan Tue, 24 Oct 2006 11:00:28 -0400
2006-10-31 21:01:48 +00:00
a52b4d4f23
bump versions to release numbers
2006-10-18 19:25:27 +00:00
46551033aa
patch from dan Wed, 26 Jul 2006 14:42:46 -0400
2006-07-28 15:13:58 +00:00
17de1b790b
remove extra level of directory
2006-07-12 20:32:27 +00:00
Chris PeBenito
Sven Vermeulen
Dominick Grift
Dominick Grift
Jeremy Solt
Chris PeBenito