Commit Graph

  • 606f41efdf
    Merge c5a76add70 into a0ea9a39e5 Clayton Casciato 2025-03-10 20:16:51 +0000
  • c5a76add70
    firewalld: fix firewalld_t firewalld_tmpfs_t exec Clayton Casciato 2025-03-10 14:15:39 -0600
  • 44191f3856
    Merge 3046a8b340 into a0ea9a39e5 Chris PeBenito 2025-03-06 21:36:41 +0000
  • 3046a8b340 CI: Add a semodule load test to verify modules insert to store. Chris PeBenito 2024-11-07 15:10:57 -0500
  • 73121b120d
    Merge ad7f2db84e into a0ea9a39e5 Chris PeBenito 2025-03-05 21:30:22 -0800
  • fb91772dca build-userspace/setools.yml: Add commit hash to cache ID. Chris PeBenito 2024-11-22 09:52:04 -0500
  • a0ea9a39e5
    Merge pull request #869 from 21sw-clayton/main main Chris PeBenito 2025-03-05 14:59:35 -0500
  • 8a4043060d
    firewalld: fix lib_t Python cache denial auditing Clayton Casciato 2025-03-04 08:17:47 -0700
  • 984da14fed
    Merge pull request #868 from 21sw-clayton/main Chris PeBenito 2025-03-04 10:03:58 -0500
  • bcb8e1d4db
    unconfined: fix oddjob security_compute_sid Clayton Casciato 2025-03-03 10:40:41 -0700
  • 78c8473272
    Merge pull request #865 from jcpunk/screen-tmux-init_t Chris PeBenito 2025-03-03 11:18:20 -0500
  • ec8a5080a3
    Permit init_t to start a detached screen session Pat Riehecky 2025-02-26 15:26:02 -0600
  • d7b03e684c
    Merge pull request #866 from 21sw-clayton/main Chris PeBenito 2025-03-03 10:05:29 -0500
  • da9a30ff66
    Merge pull request #867 from PPN-SD/upd-knot-sel Chris PeBenito 2025-03-03 09:53:09 -0500
  • a990731a38
    Merge 905fb5b58b into badb91ce49 cgzones 2025-03-02 17:25:03 +0100
  • b025e0ec4f
    Add setcap to knotd / add knotc_initrc_domtrans Nicolas PARLANT 2025-03-01 23:00:20 +0000
  • d0a0722889
    Merge f12c35f005 into badb91ce49 sgtsnookums 2025-02-28 12:22:35 -0700
  • 231960371d
    chronyd: fix dac_read_search denials Clayton Casciato 2025-02-27 15:53:30 -0700
  • badb91ce49
    Merge pull request #864 from pebenito/fc-fixes Chris PeBenito 2025-02-19 15:09:40 -0500
  • bcb967a279
    bootloader: Chane efibootmgr from fsadm. Chris PeBenito 2025-02-18 14:18:02 -0500
  • 91b9f225d6
    lvm: Add fc entries for veritysetup. Chris PeBenito 2025-02-18 14:11:50 -0500
  • 0dea08100e
    Merge pull request #863 from dburgener/skip-subs-dist Chris PeBenito 2025-02-18 09:51:54 -0500
  • 9f1083406a Don't build the fc subs dist install path in the builtappfiles target Daniel Burgener 2025-02-14 16:05:23 -0500
  • f12c35f005
    label dnf5 as rpm_exec_t Michael Snook 2025-02-10 14:52:39 -0500
  • 1ddfbb5c69
    add permissions for the systemd.offline-updates symlink Michael Snook 2025-02-10 14:17:58 -0500
  • acbe8e62cb
    Merge pull request #861 from yizhao1/fix Chris PeBenito 2025-02-13 10:32:52 -0500
  • bfe2f10cc7 systemd: allow system --user to get attributes of nsfs inodes Yi Zhao 2025-02-13 21:51:55 +0800
  • 2d59cfe012
    Update Changelog and VERSION for release 2.20250213. RELEASE_2_20250213 Chris PeBenito 2025-02-13 08:42:37 -0500
  • 5b13e7f365
    Merge pull request #859 from dsugar100/fapolicyd_watch_network_namespace Chris PeBenito 2025-02-12 10:17:58 -0500
  • fad6401e72
    Allow fapolicyd to watch /run/netns directory Dave Sugar 2025-02-06 13:57:21 -0500
  • f6c414423f
    Merge pull request #857 from yizhao1/fix Chris PeBenito 2025-02-05 09:00:03 -0500
  • e0477abc1e ntp: allow systemd-timesyncd to watch /run/systemd dir Yi Zhao 2025-02-05 15:46:27 +0800
  • 06b279518b systemd: allow systemd-resolve to watch /run/systemd dir Yi Zhao 2025-02-05 15:42:46 +0800
  • 395d07fe69 systemd: allow more components to get attributes of nsfs inodes Yi Zhao 2025-02-05 15:35:59 +0800
  • 265d949386
    Merge pull request #853 from uudiin/tpm2 Chris PeBenito 2025-01-30 10:04:21 -0500
  • 2949e90fa4 tpm2: Add the necessary policy to run tpm2 tools Tianjia Zhang 2024-12-19 14:46:00 +0800
  • e68f69cc0b tpm2: allow tpm-abrmd to access urandom Tianjia Zhang 2024-12-26 20:03:50 +0800
  • 4e33a516f6 tpm2: add correct fcontext for tpm2 tools Tianjia Zhang 2024-12-10 14:45:00 +0800
  • b9520bea08
    Merge pull request #852 from uudiin/secadm Chris PeBenito 2025-01-21 15:37:46 -0500
  • 0b0de5a288
    Merge pull request #855 from PPN-SD/patch-1 Chris PeBenito 2025-01-21 15:32:23 -0500
  • 684b47eddf
    fixdep dbus Nicolas PARLANT 2025-01-17 15:51:48 +0100
  • 293ea671c4
    Merge pull request #854 from uudiin/misc Chris PeBenito 2025-01-21 14:57:24 -0500
  • 2125fdc5cc usermanage: grant passwd_t dac_read_search capability Tianjia Zhang 2024-12-30 15:44:12 +0800
  • 796d0335f6 authlogin: allow unix_chkpwd to run Tianjia Zhang 2024-12-30 15:58:17 +0800
  • 7d6325b018 mount: allow mount_t to readwrite fifo file Tianjia Zhang 2024-12-22 18:21:19 +0800
  • 595f257431 lvm: allow to grant capability and create alg_socket Tianjia Zhang 2024-12-29 23:37:01 +0800
  • 4e7352b61f userdomain: allow grant mac_admin capability to security admin Tianjia Zhang 2025-01-16 10:38:28 +0800
  • 94d9ea49b4
    Merge pull request #851 from WavyEbuilder/misc-fixes Chris PeBenito 2025-01-13 09:41:16 -0500
  • 618637341d
    Merge pull request #850 from lquidfire/main Chris PeBenito 2025-01-13 08:40:59 -0500
  • 5601c47fad Add is a policy for the ARC milter lquidfire 2025-01-09 11:24:27 +0200
  • c74cb8566e systemd: allow getattr of namespace files for more components Rahul Sandhu 2025-01-11 00:47:46 +0000
  • c89e874170 NetworkManager: add /usr/lib/NetworkManager/dispatcher.d to filecon Rahul Sandhu 2025-01-11 00:38:24 +0000
  • aa1d9dddcb
    Merge pull request #848 from uudiin/secadmfix Chris PeBenito 2025-01-06 14:04:24 -0500
  • 59d35ec687 secadm: remove duplicate policies Tianjia Zhang 2024-12-19 23:59:18 +0800
  • 1fc3daff35
    Merge pull request #847 from besser82/topic/besser82/tcb_fixes Chris PeBenito 2025-01-06 08:56:15 -0500
  • 6a401751e1
    Merge pull request #845 from dsugar100/label_jspawnhelper Chris PeBenito 2025-01-06 08:55:10 -0500
  • 48f1063cf0
    Merge pull request #844 from dsugar100/no_mta_denial Chris PeBenito 2025-01-06 08:54:28 -0500
  • cc1f455fb3
    Merge pull request #842 from WavyEbuilder/main Chris PeBenito 2025-01-06 08:53:04 -0500
  • d939dcbff3
    authlogin: fix regex for /etc/tcb Björn Esser 2021-10-18 16:25:18 +0200
  • 4ec0e06eaf
    label jspawnhelper bin_t Dave Sugar 2024-12-17 15:13:18 -0500
  • e20fe9dc42
    If mta module is not installed useradd fails to create mailbox files Dave Sugar 2024-11-13 20:26:12 -0500
  • 4a08aff7da bootloader_t: use fs_list_auto_mountpoints for autofs_t:dir Rahul Sandhu 2024-12-14 03:51:31 +0000
  • d2b0f76635 systemd-logind: allow getattr for autofs_t for get bootloader Rahul Sandhu 2024-12-12 22:16:05 +0000
  • eabc5b9a7e bootloader_t: allow getattr for autofs_t Rahul Sandhu 2024-12-12 22:05:52 +0000
  • 8d1a59f7a4 systemd: appropriately label /run/log/systemd as systemd_log_t Rahul Sandhu 2024-12-12 21:54:07 +0000
  • 63f0c51fce
    Merge pull request #841 from WavyEbuilder/authlogin Chris PeBenito 2024-12-10 15:12:39 -0500
  • a5442bc69c authlogin: connect to nsresourced Rahul Sandhu 2024-12-10 16:05:19 +0000
  • 3b28edcfc7
    Merge pull request #839 from WavyEbuilder/homed-fixups Chris PeBenito 2024-12-10 11:14:45 -0500
  • a4485e56b7 systemd-homework: move optional policy to end of block Rahul Sandhu 2024-12-10 08:09:10 +0000
  • be6f0a5f75 systemd_stream_connect_homed: genrequire systemd_userdbd_runtime_t Rahul Sandhu 2024-12-10 08:07:26 +0000
  • 65aa17eeb9
    Merge pull request #838 from dsugar100/vmtools Chris PeBenito 2024-12-09 13:14:55 -0500
  • 63a57266a2 systemd-homed: fix filecontexts for systemd_home_storage_t objects Rahul Sandhu 2024-12-04 21:48:21 +0000
  • 84fd2d7df2 systemd-homed: use files_read_etc_runtime_files to read machine-id Rahul Sandhu 2024-12-04 21:41:46 +0000
  • bbf1e6fb16 systemd-homework: reformat *_files_pattern block Rahul Sandhu 2024-12-04 21:38:56 +0000
  • 28788aaa4b systemd-homed: make lvm related policy optional Rahul Sandhu 2024-12-04 21:37:52 +0000
  • 91b23cc6a8 systemd_stream_connect_homed: make use of stream_connect_pattern Rahul Sandhu 2024-12-04 21:35:08 +0000
  • 1399c35d81
    Add support for open-vm-tools Dave Sugar 2023-12-13 11:52:01 -0500
  • facba43a2e
    Merge pull request #834 from dsugar100/main Chris PeBenito 2024-12-04 13:43:47 -0500
  • de5329eeee
    Merge pull request #840 from cgzones/systemd Chris PeBenito 2024-12-04 13:41:11 -0500
  • cfeefc0998 systemd_homed_record_t: new type for user records Rahul Sandhu 2024-11-28 18:05:01 +0000
  • 76febf5388 systemd_homework_t: allow managing of lvm_runtime_t files and dirs Rahul Sandhu 2024-11-28 17:44:01 +0000
  • a74dd7b983 lvm_manage_runtime_dirs: new interface for managing LVM runtime dirs Rahul Sandhu 2024-11-28 17:41:24 +0000
  • f1142021e3 systemd: getattr namespace files Christian Göttsche 2024-11-28 11:19:06 +0100
  • 2765e7fc1b systemd: permit sysusers to create /etc/group Christian Göttsche 2024-11-16 15:05:13 +0100
  • b1babb9212 systemd_homed_runtime_work_dir_t: new type for systemd-homed workdir Rahul Sandhu 2024-11-28 02:56:31 +0000
  • 5b382a470d authlogin: connect to homed Rahul Sandhu 2024-11-28 02:21:24 +0000
  • 5a6334a4e1 systemd-homed: label LUKS home images as systemd_homed_storage_t Rahul Sandhu 2024-11-28 02:10:49 +0000
  • 8ee507074c systemd_homed_t, systemd_homework_t: allow reading of /etc/machine-id Rahul Sandhu 2024-11-28 01:49:27 +0000
  • 0b129eacdd locallogin: allow talking to systemd-homed user record APIs Rahul Sandhu 2024-11-28 01:48:46 +0000
  • c90195b7e5 systemd_stream_connect_homed: new interface to access account info Rahul Sandhu 2024-11-28 01:38:38 +0000
  • 16da307d2d
    mozilla adds .mozilla directory to /etc/skel which useradd tries to copy Dave Sugar 2024-11-19 17:41:17 -0500
  • 6e54a2eda6
    Merge pull request #835 from dsugar100/search_cert Chris PeBenito 2024-11-18 14:23:43 -0500
  • df2d2ef721
    Merge pull request #836 from dsugar100/locale_dbus Chris PeBenito 2024-11-18 14:17:07 -0500
  • 347da2802e
    Communicate with locale via dbus Dave Sugar 2024-11-18 11:29:28 -0500
  • 68fe367f4e
    Need search perms on cert_t/tls_privkey_t when using private types Dave Sugar 2024-11-17 21:48:53 -0500
  • cc6ce5dccd
    Merge pull request #831 from dsugar100/main Chris PeBenito 2024-11-13 11:36:29 -0500
  • bff76ffbca
    Setup sudo log file type Dave Sugar 2024-11-07 21:29:03 -0500
  • 905fb5b58b build: drop obsolete setfiles option Christian Göttsche 2024-11-10 15:19:18 +0100
  • 4938b79e4c ci: add module storage test Christian Göttsche 2024-11-10 14:17:51 +0100
  • 7718b32ce9
    Merge pull request #830 from cgzones/misc2 Chris PeBenito 2024-11-06 13:47:36 -0500