Harry Ciao 3543bdda9f vlock_t only uses the relabeled terminal. ... The login or ssh program will relabel a tty or pty device after users log in, and the vlock domain would only need to use the relabeled tty or pty device, rather than the whole ttynode or ptynode attribute. Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>		2011-01-05 11:22:42 -05:00
..
flask	Add module_request permission, from Dan Walsh.	2009-11-19 08:52:06 -05:00
modules	vlock_t only uses the relabeled terminal.	2011-01-05 11:22:42 -05:00
support	Add tun_socket ubac constraint and add tun_socket to socket_class_set.	2010-11-11 09:48:43 -05:00
constraints	Add tun_socket ubac constraint and add tun_socket to socket_class_set.	2010-11-11 09:48:43 -05:00
global_booleans	trunk: merge strict and targeted policies. merge shlib_t into lib_t.	2007-10-02 16:04:50 +00:00
global_tunables	remove read_default_t tunable	2009-07-23 08:58:35 -04:00
mcs	revise MCS constraints to use only MCS-specific attributes.	2009-10-07 11:48:14 -04:00
mls	Add trusted object condition to unix socket connectto/sendto, to fix label translation.	2010-04-29 11:29:39 -04:00
policy_capabilities	trunk: update policycaps comments for sock_file open perm.	2009-07-01 13:34:54 +00:00
rolemap	trunk: merge UBAC.	2008-11-05 16:10:46 +00:00
users	Typo in policy/users	2009-12-18 08:51:58 -05:00