a46b60549a
trunk: squid update from dan.
2008-09-15 13:31:28 +00:00
cdac989dee
trunk: fail2ban update from dan.
2008-09-05 14:17:18 +00:00
a71e136cc3
trunk: add cyphesis from dan.
2008-09-03 14:46:10 +00:00
e0ed765c0e
trunk: 3 patches from the fedora policy, cherry picked by David Hardeman.
2008-08-11 14:03:36 +00:00
308baad28c
trunk: Patch for labeled networking controls in 2.6.25 from Paul Moore.
2008-05-26 18:38:06 +00:00
320ea98330
trunk: add 3rd party corenet interfaces for (secmark) packets.
2008-01-17 15:28:24 +00:00
c8d4c38258
trunk: fix missing lo netif alias for standard and mcs configs.
2008-01-10 16:39:36 +00:00
0aa18d9fd5
trunk: version bumps for previous commit.
2007-11-26 16:46:38 +00:00
4605adcba7
trunk: add postfixpolicyd from Jan-Frode Myklebust.
2007-11-07 20:17:44 +00:00
495df41602
trunk: 11 patches from dan.
2007-10-29 18:35:32 +00:00
cdf98fedc0
trunk: 10 patches from dan.
2007-10-11 18:12:29 +00:00
8242f5a68d
trunk: add bitlbee from devin carraway and add tcpd_wrapped_domain().
2007-09-17 14:33:40 +00:00
1900668638
trunk: Unified labeled networking policy from Paul Moore.
...
The latest revision of the labeled policy patches which enable both labeled
and unlabeled policy support for NetLabel. This revision takes into account
Chris' feedback from the first version and reduces the number of interface
calls in each domain down to two at present: one for unlabeled access, one for
NetLabel access. The older, transport layer specific interfaces, are still
present for use by third-party modules but are not used in the default policy
modules.
trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore.
This patch changes the policy to use the netmsg initial SID as the "base"
SID/context for NetLabel packets which only have MLS security attributes.
Currently we use the unlabeled initial SID which makes it very difficult to
distinquish between actual unlabeled packets and those packets which have MLS
security attributes.
2007-06-27 15:23:21 +00:00
c412be6bef
trunk: remaining pieces for apcupsd module
2007-05-15 15:43:00 +00:00
b129e2001c
Fixes for squid, dovecot, and snmp from Dan Walsh.
2007-05-07 13:45:17 +00:00
6a2975706a
add rwho from Nalin Dahyabhai
2007-04-30 17:39:01 +00:00
697489040e
5 patches from dan. confine insmod and udev on targeted, misc fc fixes, sasl kerberos use, and samba port fixes
2007-04-11 17:56:03 +00:00
9af48eef6e
six patches from dan
2007-04-10 13:10:58 +00:00
6b19be3360
patch from dan, Thu, 2007-01-25 at 08:12 -0500
2007-02-16 23:01:42 +00:00
d6d16b9796
patch from dan Wed, 29 Nov 2006 17:06:40 -0500
2006-12-04 20:10:56 +00:00
fa45da0efd
add aide, ccs, and ricci
2006-11-16 20:56:24 +00:00
d9845ae92a
patch from dan Tue, 24 Oct 2006 11:00:28 -0400
2006-10-31 21:01:48 +00:00
a52b4d4f23
bump versions to release numbers
2006-10-18 19:25:27 +00:00
130f8a4aa5
merge netlabel stuff from labeled-networking branch
2006-10-17 16:58:17 +00:00
e070dd2df0
- Move range transitions to modules.
...
- Make number of MLS sensitivities, and number of MLS and MCS
categories configurable as build options.
2006-10-04 17:25:34 +00:00
f8cfddbb76
fix ticket #15 .
2006-09-29 18:00:21 +00:00
49317e6b49
fix corenetwork so the ifdef enable_mls survives to regular processing.
2006-09-29 17:37:57 +00:00
693d4aedb5
patch from dan Fri, 22 Sep 2006 16:30:34 -0400
2006-09-25 18:53:06 +00:00
bf469d7669
gentoo testing fixes
2006-09-19 17:02:29 +00:00
75beb95014
patch from dan Tue, 05 Sep 2006 17:06:06 -0400
2006-09-06 16:36:23 +00:00
eac818f040
patch from dan Thu, 31 Aug 2006 15:16:30 -0400
2006-09-01 15:52:05 +00:00
a5e2133bc8
patch from dan Wed, 23 Aug 2006 14:03:49 -0400
2006-08-29 02:41:00 +00:00
46551033aa
patch from dan Wed, 26 Jul 2006 14:42:46 -0400
2006-07-28 15:13:58 +00:00
17de1b790b
remove extra level of directory
2006-07-12 20:32:27 +00:00
Chris PeBenito