David Sugar 8d21fda960 Separate read and write interface for tun_tap_device_t ... The following patch creates two additional interfaces for tun_tap_device_t to grant only read or only write access (rather than both read and write access). It is possible to open a tap device for only reading or only writing and this allows policy to match that use. Signed-off-by: Dave Sugar <dsugar@tresys.com>		2017-09-06 10:59:34 -04:00
..
flask	Add nnp_nosuid_transition policycap and related class/perm definitions.	2017-08-05 12:13:21 -04:00
modules	Separate read and write interface for tun_tap_device_t	2017-09-06 10:59:34 -04:00
support	refpolicy: Define and allow map permission	2017-05-24 19:53:14 -04:00
constraints	remove trailing whitespaces	2016-12-06 13:45:13 +01:00
context_defaults	Fix error in default_user example.	2014-04-28 10:19:22 -04:00
global_booleans
global_tunables	user_udp_server tunable	2016-08-02 19:44:16 -04:00
mcs	remove trailing whitespaces	2016-12-06 13:45:13 +01:00
mls	remove trailing whitespaces	2016-12-06 13:45:13 +01:00
policy_capabilities	Add cgroup_seclabel policycap.	2017-08-05 12:15:02 -04:00
users	Apply direct_initrc to unconfined_r:unconfined_t	2014-01-16 15:27:18 -05:00