847937da7d
trunk: Patch to restructure user role templates to create restricted user roles from Dan Walsh.
2007-11-13 19:31:43 +00:00
4605adcba7
trunk: add postfixpolicyd from Jan-Frode Myklebust.
2007-11-07 20:17:44 +00:00
164772b537
trunk: Russian man page translations from Andrey Markelov.
2007-10-29 18:45:24 +00:00
bd973e3e68
trunk: remove unused types from dbus.
2007-10-26 18:04:38 +00:00
6bf8bf4f5c
trunk: add exim from dan.
2007-10-24 15:07:40 +00:00
a334d2918f
trunk: add infrastructure for managing user web content.
2007-10-18 19:23:33 +00:00
ef659a476e
Deprecate some old file and dir permission set macros in favor of the newer, more consistently-named macros.
2007-10-09 17:29:48 +00:00
6c53a10e28
trunk: Patch to clean up unescaped periods in several file context entries from Jan-Frode Myklebust.
2007-10-05 18:00:55 +00:00
350b6ab767
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
cb811cda3b
trunk: update version and changelog for release.
2007-09-28 15:14:55 +00:00
8acfcbcc2a
trunk: Add support for setting the unknown permissions handling.
2007-09-27 13:41:09 +00:00
96fc0a45be
trunk: Fix XML building for external reference builds and headers builds.
2007-09-21 15:06:58 +00:00
6f49b490b8
trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.
2007-09-17 18:04:35 +00:00
0cf6df55e5
trunk: add awstats from Stefan Schulze Frielinghaus.
2007-09-17 17:25:40 +00:00
8242f5a68d
trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().
2007-09-17 14:33:40 +00:00
8241b538af
trunk: udev update and brctl module from dan.
2007-09-05 17:55:57 +00:00
d62c0881e2
Update MLS constraints from LSPP evaluated policy.
2007-08-24 14:14:29 +00:00
2af7b42a06
trunk: switch daemons from inheriting from all levels to initrc_t sharing to all levels.
2007-08-22 20:21:52 +00:00
80d5e02c81
trunk: Files and radvd updates from Stefan Schulze Frielinghaus.
2007-08-21 19:03:34 +00:00
f8233ab7b0
trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency.
2007-08-20 18:26:08 +00:00
2d0c9cecaf
trunk: several MLS enhancements.
2007-08-20 15:15:03 +00:00
9760cbec2d
trunk: Database userspace object manager classes from KaiGai Kohei.
2007-08-09 13:15:07 +00:00
371d11ec04
trunk: add 3rd party interface for apache cgi.
2007-07-26 19:48:40 +00:00
924f3cc2cb
trunk: add getserv and shmemserv nscd permissions.
2007-07-24 19:52:18 +00:00
d46cfe45cd
trunk: add application module
2007-07-19 18:57:48 +00:00
f80a0e4f25
trunk: Add debian apcupsd binary location, from Stefan Schulze Frielinghaus.
2007-07-02 15:25:46 +00:00
970122ca12
trunk: updated version and changelog for release
2007-06-29 15:30:58 +00:00
113b4fc4a2
Fix incorrectly named files_lib_filetrans_shared_lib() interface in the libraries module.
2007-06-28 17:25:46 +00:00
7b61fe506d
trunk: add rpcbind from dan
2007-06-27 16:31:55 +00:00
1900668638
trunk: Unified labeled networking policy from Paul Moore.
...
The latest revision of the labeled policy patches which enable both labeled
and unlabeled policy support for NetLabel. This revision takes into account
Chris' feedback from the first version and reduces the number of interface
calls in each domain down to two at present: one for unlabeled access, one for
NetLabel access. The older, transport layer specific interfaces, are still
present for use by third-party modules but are not used in the default policy
modules.
trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore.
This patch changes the policy to use the netmsg initial SID as the "base"
SID/context for NetLabel packets which only have MLS security attributes.
Currently we use the unlabeled initial SID which makes it very difficult to
distinquish between actual unlabeled packets and those packets which have MLS
security attributes.
2007-06-27 15:23:21 +00:00
7f089782ae
trunk: xen updates from dan
2007-06-21 13:36:05 +00:00
5bf9deb5bb
trunk: 3 patches from dan
2007-06-20 19:47:10 +00:00
40df56772f
trunk: big samba update from dan
2007-06-19 19:11:35 +00:00
788d88c923
trunk: drop snmpd_etc_t.
2007-06-19 17:39:35 +00:00
6c8aba7b31
trunk: confine sendmail and logrotate on targeted
2007-06-19 17:01:39 +00:00
cb10a2d5bf
trunk: Tunable connection to postgresql for users from KaiGai Kohei.
2007-06-19 14:30:06 +00:00
41337aa8b9
Memprotect support patch from Stephen Smalley.
2007-06-19 13:02:26 +00:00
a74d1ad7cd
trunk: add amtu from dan
2007-06-12 18:58:36 +00:00
d5b81a81ff
trunk: Add logging_send_audit_msgs() interface and deprecate send_audit_msgs_pattern().
2007-06-12 18:46:14 +00:00
d534d35a7e
trunk: 5 patches from dan
2007-06-11 15:01:10 +00:00
762d2cb989
merge restorecon into setfiles
2007-05-11 17:10:43 +00:00
12217cc286
Patch to begin separating out hald helper programs from Dan Walsh.
2007-05-07 17:57:48 +00:00
78f17e6d6c
add apcupsd from dan
2007-05-07 14:55:54 +00:00
b129e2001c
Fixes for squid, dovecot, and snmp from Dan Walsh.
2007-05-07 13:45:17 +00:00
4967aaa320
Miscellaneous consolekit fixes from Dan Walsh.
2007-05-03 14:15:38 +00:00
ed4b7301fb
Patch to have avahi use the nsswitch interface rather than individual permissions from Dan Walsh.
2007-05-03 12:45:28 +00:00
517618f0b4
Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.
2007-05-02 17:55:03 +00:00
882186c933
- Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes
...
to handle usage from userhelper.
2007-05-02 17:31:38 +00:00
6a2975706a
add rwho from Nalin Dahyabhai
2007-04-30 17:39:01 +00:00
747ab18400
Patch to allow amavis to read spamassassin libraries from Dan Walsh.
2007-04-30 15:19:47 +00:00
Chris PeBenito