selinux-refpolicy/policy/modules/admin
Luis Ressel 792b75b70e Grant ping_t getattr on rawip_socket
If the (sadly nearly undocumented) Linux kernel feature which allows
specific user groups to send ICMP echos without CAP_NET_RAW
(configurable with the sysctl net.ipv4.ping_group_range, available since
3.0) is used, ping needs the getattr permission of the rawip_socket
class in order to work.
2014-08-18 09:48:08 -04:00
..
bootloader.fc Label grub2-install as bootloader_exec_t 2014-03-03 08:45:10 -05:00
bootloader.if Changes to the bootloader policy module 2012-10-09 10:26:15 -04:00
bootloader.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
consoletype.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
consoletype.if Admin layer xml fixes. 2010-08-05 08:46:44 -04:00
consoletype.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
dmesg.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
dmesg.if Admin layer xml fixes. 2010-08-05 08:46:44 -04:00
dmesg.te Bump module versions for release. 2014-03-11 08:16:57 -04:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
netutils.fc Netutils patch from Dan Walsh. 2010-06-17 10:16:19 -04:00
netutils.if netutils: search parent. 2010-10-05 15:11:00 -04:00
netutils.te Grant ping_t getattr on rawip_socket 2014-08-18 09:48:08 -04:00
su.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
su.if Add user application, tmp and tmpfs file interfaces. 2011-10-28 08:48:10 -04:00
su.te Bump module versions for release. 2012-02-15 14:32:45 -05:00
sudo.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
sudo.if Hide getattr denials upon sudo invocation 2014-04-04 16:07:43 -04:00
sudo.te Bump module versions for release. 2012-07-25 14:33:06 -04:00
usermanage.fc Whitespace fix in usermanage. 2013-12-06 08:16:10 -05:00
usermanage.if Introduce exec-check interfaces for passwd binaries and useradd binaries 2013-01-03 10:32:41 -05:00
usermanage.te Bump module versions for release. 2014-03-11 08:16:57 -04:00