Chris PeBenito 464c5df247 Reduce broad entrypoints for unconfined domains. ... Entrypoints into unconfined domains, like with confined domains, should be tightly controlled to make arbitrary code execution more difficult.		2016-03-22 15:43:30 -04:00
..
flask	Add systemd access vectors.	2015-10-20 15:01:27 -04:00
modules	Reduce broad entrypoints for unconfined domains.	2016-03-22 15:43:30 -04:00
support	Update netlink socket classes.	2015-05-22 08:29:03 -04:00
constraints	Update netlink socket classes.	2015-05-22 08:29:03 -04:00
context_defaults	Fix error in default_user example.	2014-04-28 10:19:22 -04:00
global_booleans	Move secure_mode_policyload into selinux module as that is the only place it is used.	2011-09-26 09:53:23 -04:00
global_tunables	…
mcs	Implement mcs_constrained_type	2012-11-28 16:12:25 -05:00
mls	Add mls support for some db classes	2016-01-28 15:34:03 -05:00
policy_capabilities	Add always_check_network policy capability.	2015-01-27 17:25:36 -05:00
users	Apply direct_initrc to unconfined_r:unconfined_t	2014-01-16 15:27:18 -05:00