openwrt/package/system
Dominick Grift 4379457098 selinux-policy: update to version 1.1
try to clean up some labeling inconsistencies
iwinfo loose ends
ucode loose ends
Makefile: adjust mintesttgt (adds blockmount/blockd)
nftables: reads inherited netifd pipe
ucode: reads inherited netifd pipes
mountroot: fowner
sandbox: writes inherited dropbear pipes
unbound related to /tmp/etc/ssl
unbound loose ends
adds a sslconftmpfile for /tmp/etc/ssl
README: maintain a wish list in the README
iwinfo: netifd forgot write
gptfdisk loose ends
iwinfo: netifd wpad reads/writes inherited netifd fifo files
netifd (mac80211.sh) executes iwinfo
luci: executes wireguard
luci-cgi: audits xtables execute access
rcuhttpd: lists ssl certfile dirs
iwinfo, wifi,nftables usage of ttyd pty if available
urandomseed: seedrng needs cap_sys_admin
iwinfo iwinfo, nftables and some chronyd rules related to ntp nts server
nftables, wifi and adds iwinfo skel
nftables, rpcd, ucode
nftables, ucode and seedrng ucode, fw3/nftables, luci
adds ucode skel and some fw3/nftables related
urandomseed: some seedrng rules
fw3 adds some support for fw4
urandomseed: /etc/seedrng is for seed.credit
hotplugcal: runs ucode which is interpreter like
adds a nftables skeleton and makes xtables optional
agent: allow all agents to write inherited dropbear pipes
urandomseed: this seems to be replaced by seedrng
kmodloader: label /etc/modules.conf kmodloader.conffile
Revert "shelexecfile: remove auditallow rule"
Makefile: sort the modules to process by secilc
Moves back to git.defensec.nl
unbound odhcpd (ip) reads net proc
tcp dump
shelexecfile: remove auditallow rule
rrd.cil: fixes indent
Target rddtool from cgi-io instead of runnit it without transition
rrd.cil related
rrd, rpcd, cgiio clean ups related to luci-app-statistics
Rules for rrd files and luci-statistics
unboundcontrol ordering
Several missing permissions
blockmount, dnsmasq, hotplugcall, rpcd, unbound
adds mctp_socket (linux 5.15)
ip: forgot tc-tiny type transition to go along with the fc spec
ip: adds a fc spec for tc-tiny (called by sqm)
adds ttyACM fc spec and various assorted loose ends
.gitattributes: do not export the github workflows
workflow use selinux 3.3

project moved back to https://git.defensec.nl/selinux-policy.git

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2022-05-02 21:10:43 +01:00
..
ca-certificates ca-certificates: fix python3-cryptography woes in certdata2pem.py 2021-12-01 17:52:35 +01:00
fstools fstools: update to git HEAD 2022-05-01 17:02:39 +01:00
fwtool
gpio-cdev/nu801 gpio-cdev: move kmod-leds-uleds dependency to MX100 2022-03-27 15:39:27 +02:00
iucode-tool iucode-tool: fix host-compile on macos and non-x86 linux 2022-02-26 19:52:41 +01:00
mtd mtd: fix imagetag compilation 2021-03-17 08:42:05 +01:00
openwrt-keyring openwrt-keyring: add OpenWrt 22.03 GPG/usign keys 2022-03-25 14:28:00 +01:00
opkg opkg: update to git HEAD of 2022-01-09 2022-01-09 20:10:32 +00:00
procd procd: update to git HEAD 2022-04-13 19:50:55 +01:00
refpolicy Revert "refpolicy: add variant that builds modular policy" 2020-11-22 15:20:35 +00:00
rpcd rpcd: update to latest Git HEAD 2022-02-07 11:44:37 +01:00
selinux-policy selinux-policy: update to version 1.1 2022-05-02 21:10:43 +01:00
ubox ubox: add example /etc/modules.conf + conffiles entry 2022-04-07 12:01:56 +02:00
ubus ubus: bump to git HEAD 2022-02-28 16:18:37 +02:00
ucert
uci uci: update to git HEAD 2021-10-22 23:51:51 +02:00
urandom-seed urandom-seed: go back to seeding with shell script temporarily 2022-04-14 10:12:34 +02:00
urngd treewide: remove BUILD_PARALLEL from CMake packages 2021-06-19 20:44:59 -10:00
usign
zram-swap zram-swap: clean up the log messages 2021-06-27 14:49:14 -10:00