RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/system
History
Russell Coker d97a1cd3c8 refpolicy and certs 
The following patch allows mon_t to set limits for it's children and removes
cert_t labelling from CA public keys (that aren't secret) so that processes
which only need to verify keys (EG https clients) don't need cert_t access.
 		2017-10-30 21:38:27 -04:00
..
application.fc
…
application.if
…
application.te
…
authlogin.fc sudo: add fcontext for /run/sudo/ts/USERNAME 2017-09-16 13:05:53 -04:00
authlogin.if Remove deprecated interfaces older than one year old. 2017-08-06 17:03:17 -04:00
authlogin.te authlogin, logging, udev: Module version bump. 2017-09-16 13:30:33 -04:00
clock.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
clock.if
…
clock.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
fstools.fc dphysswapfile: add interfaces and sysadm access 2017-09-14 17:19:55 -04:00
fstools.if dphysswapfile: add interfaces and sysadm access 2017-09-14 17:19:55 -04:00
fstools.te sysadm,fstools: Module version bump. 2017-09-14 17:21:56 -04:00
getty.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
getty.if getty: overlook module 2017-02-27 19:21:39 +01:00
getty.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
hostname.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
hostname.if
…
hostname.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
hotplug.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
hotplug.if
…
hotplug.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
init.fc init: Remove sm-notify.pid fc entry which collides with the rpc module. 2017-09-16 13:31:12 -04:00
init.if remove interface init_inherit_rlimit 2017-09-27 19:37:19 -04:00
init.te files, init, sysnetwork, systemd: Module version bumps. 2017-10-12 18:48:29 -04:00
ipsec.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
ipsec.if
…
ipsec.te ipsec: Module version bump. 2017-10-11 18:45:29 -04:00
iptables.fc iptables: update 2017-06-12 18:42:53 -04:00
iptables.if iptables: update 2017-06-12 18:42:53 -04:00
iptables.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
libraries.fc libraries: update wildcard /usr/lib fcontext 2017-05-11 19:35:53 -04:00
libraries.if Remove deprecated interfaces older than one year old. 2017-08-06 17:03:17 -04:00
libraries.te Several module version bumps. 2017-09-11 20:34:13 -04:00
locallogin.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
locallogin.if
…
locallogin.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
logging.fc Label /etc/rsyslog.d as syslog_conf_t 2017-09-11 18:57:29 -04:00
logging.if logging: Various audit tools (auditctl, ausearch, etc) map their config and logs 2017-09-12 19:29:34 -04:00
logging.te authlogin, logging, udev: Module version bump. 2017-09-16 13:30:33 -04:00
lvm.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
lvm.if lvm: small adjustments 2017-03-12 10:32:02 +01:00
lvm.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
metadata.xml
…
miscfiles.fc refpolicy and certs 2017-10-30 21:38:27 -04:00
miscfiles.if userdomain: man-db needs to map its 'index.db' cache 2017-09-12 19:29:34 -04:00
miscfiles.te Module version bumps. 2017-09-12 20:16:35 -04:00
modutils.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
modutils.if modutils: libkmod mmap()s modules.dep and *.ko's 2017-09-11 20:31:23 -04:00
modutils.te Several module version bumps. 2017-09-11 20:34:13 -04:00
mount.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
mount.if Remove deprecated interfaces older than one year old. 2017-08-06 17:03:17 -04:00
mount.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
netlabel.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
netlabel.if
…
netlabel.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
selinuxutil.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
selinuxutil.if selinuxutil: Add map permissions neccessary for semanage 2017-09-11 20:31:23 -04:00
selinuxutil.te Several module version bumps. 2017-09-11 20:34:13 -04:00
setrans.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
setrans.if
…
setrans.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
sysnetwork.fc policy for systemd-networkd 2017-10-12 18:38:54 -04:00
sysnetwork.if Systemd-related changes from Russell Coker. 2017-04-06 17:37:50 -04:00
sysnetwork.te files, init, sysnetwork, systemd: Module version bumps. 2017-10-12 18:48:29 -04:00
systemd.fc policy for systemd-networkd 2017-10-12 18:38:54 -04:00
systemd.if policy for systemd-networkd 2017-10-12 18:38:54 -04:00
systemd.te files, init, sysnetwork, systemd: Module version bumps. 2017-10-12 18:48:29 -04:00
udev.fc Support systems with a single /usr/bin directory 2017-04-15 20:49:07 +02:00
udev.if init: allow systemd to relabel /dev and /run 2017-09-11 20:03:31 -04:00
udev.te authlogin, logging, udev: Module version bump. 2017-09-16 13:30:33 -04:00
unconfined.fc Apache OpenOffice module (base policy part) 2016-12-06 20:08:06 -05:00
unconfined.if Remove complement and wildcard in allow rules. 2017-08-13 16:21:44 -04:00
unconfined.te Bump module versions for release. 2017-08-05 12:59:42 -04:00
userdomain.fc base: use new genhomedircon template for username 2016-12-27 10:34:04 -05:00
userdomain.if minor nspawn, dnsmasq, and mon patches 2017-09-17 11:08:06 -04:00
userdomain.te corecommands, xserver, systemd, userdomain: Version bumps. 2017-09-17 11:11:18 -04:00