Changeset 167

Show
Ignore:
Timestamp:
01/15/08 09:46:05 (11 months ago)
Author:
bwhalen
Message:

Update policy to tagged 20071214 release

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/RHEL5.1/refpolicy/build/Makefile

    r164 r167  
    3636 
    3737# change this to "y" to build a src rpm 
    38 BUILDSRC = n 
     38BUILDSRC = y 
    3939 
    4040# This is the mode that /etc/selinux/config will be set to 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/Changelog

    r153 r167  
     1* Fri Dec 14 2007 Chris PeBenito <selinux@tresys.com> - 20071214 
     2- Patch for debian logrotate to handle syslogd-listfiles, from Vaclav Ovsik. 
     3- Improve several tunables descriptions from Dan Walsh. 
     4- Patch to clean up ns switch usage in the policy from Dan Walsh. 
     5- More complete labeled networking infrastructure from KaiGai Kohei. 
     6- Add interface for libselinux constructor, for libselinux-linked 
     7  SELinux-enabled programs. 
    18- Patch to restructure user role templates to create restricted user roles 
    29  from Dan Walsh. 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/INSTALL

    r153 r167  
    1 Reference Policy has a requirement of checkpolicy 1.28.  Red Hat  
    2 Enterprise Linux 4 and Fedora Core 4 RPMs are available on 
    3 the Reference Policy download page at http://serefpolicy.sf.net, 
     1Reference Policy has a requirement of checkpolicy 1.33.1 and 
     2libsepol-1.16.2.  Red Hat Enterprise Linux 4 and Fedora Core 4 RPMs 
     3are available on the CLIP download page at http://oss.tresys.com, 
    44and can be installed thusly: 
    55 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/Makefile

    r153 r167  
    3535version = $(shell cat VERSION) 
    3636 
     37ifdef LOCAL_ROOT 
     38builddir := $(LOCAL_ROOT)/ 
     39tmpdir := $(LOCAL_ROOT)/tmp 
     40tags := $(LOCAL_ROOT)/tags 
     41else 
     42tmpdir := tmp 
     43tags := tags 
     44endif 
    3745 
    3846# executable paths 
    …… 
    4856tc_sbindir := /sbin 
    4957endif 
    50  
    51  
    52 ifdef LOCAL_ROOT 
    53 builddir := $(LOCAL_ROOT)/ 
    54 tmpdir := $(LOCAL_ROOT)/tmp 
    55 tags := $(LOCAL_ROOT)/tags 
    56 else 
    57 tmpdir := tmp 
    58 tags := tags 
    59 endif 
    60  
    6158CHECKPOLICY ?= $(tc_usrbindir)/checkpolicy 
    6259CHECKMODULE ?= $(tc_usrbindir)/checkmodule 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/README

    r153 r167  
    8585 
    8686TYPE                    String.  Available options are standard, mls, and mcs. 
     87                        For a type enforcement only system, set standard. 
    8788                        This optionally enables multi-level security (MLS) or 
    8889                        multi-category security (MCS) features.  This option 
    …… 
    110111                        blocks. 
    111112 
    112 POLY                    Boolean.  If set, policy for polyinstantiated 
    113                         directories will be enabled.  This option controls 
    114                         enable_polyinstantiation policy blocks. 
    115  
    116113OUTPUT_POLICY           Integer.  Set the version of the policy created when 
    117114                        building a monolithic policy.  This option has no effect 
    118115                        on modular policy. 
     116 
     117UNK_PERMS               String.  Set the kernel behavior for handling of 
     118                        permissions defined in the kernel but missing from the 
     119                        policy.  The permissions can either be allowed, denied, 
     120                        or the policy loading can be rejected. 
     121 
     122MLS_SENS                Integer.  Set the number of sensitivities in the MLS 
     123                        policy.  Ignored on standard and MCS policies. 
     124 
     125MLS_CATS                Integer.  Set the number of categories in the MLS 
     126                        policy.  Ignored on standard and MCS policies. 
     127 
     128MCS_CATS                Integer.  Set the number of categories in the MCS 
     129                        policy.  Ignored on standard and MLS policies. 
    119130 
    120131QUIET                   Boolean.  If set, the build system will only display 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/VERSION

    r153 r167  
    1 20070928 
     120071214 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/policy/booleans.conf

    r159 r167  
    1212 
    1313# 
    14 # boolean to determine whether the system permits loading policy and setting 
    15 # enforcing mode.  Set this to true and you 
     14# boolean to determine whether the system permits loading policy, setting 
     15# enforcing mode, and changing boolean values.  Set this to true and you 
    1616# have to reboot to set it back 
    1717#  

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/policy/global_booleans

    r158 r167  
    2323## <desc> 
    2424## <p> 
    25 ## boolean to determine whether the system permits loading policy and setting 
    26 ## enforcing mode.  Set this to true and you 
     25## boolean to determine whether the system permits loading policy, setting 
     26## enforcing mode, and changing boolean values.  Set this to true and you 
    2727## have to reboot to set it back 
    2828## </p> 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/policy/modules/admin/acct.te

    r153 r167  
    11 
    2 policy_module(acct,1.0.1) 
     2policy_module(acct,1.1.0) 
    33 
    44######################################## 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/policy/modules/admin/alsa.te

    r153 r167  
    11 
    2 policy_module(alsa,1.2.1) 
     2policy_module(alsa,1.3.0) 
    33 
    44######################################## 

  • trunk/RHEL5.1/refpolicy/src/selinux-policy-clip/policy/modules/admin/amanda.te

    r153