|
|
|
@2832
|
[2832]
|
10/10/08 14:13:21 |
cpebenito |
rbacsep: update to trunk 2831. |
|
|
|
@2822
|
[2822]
|
10/01/08 14:52:21 |
cpebenito |
rbacsep: apply ubac exemptions where necessary. |
|
|
|
@2821
|
[2821]
|
09/26/08 08:29:57 |
cpebenito |
rbacsep: clean up role statements. |
|
|
|
@2820
|
[2820]
|
09/25/08 10:34:32 |
cpebenito |
rbacsep: update to trunk 2819. |
|
|
|
@2790
|
[2790]
|
08/27/08 12:53:52 |
cpebenito |
rbacsep: add remaining compatability aliases. |
|
|
|
@2789
|
[2789]
|
08/22/08 10:48:34 |
cpebenito |
rbacsep: update to trunk 2788. |
|
|
|
@2784
|
[2784]
|
08/18/08 10:14:42 |
cpebenito |
rbacsep: add missing auth_role(). |
|
|
|
@2783
|
[2783]
|
08/18/08 09:15:46 |
cpebenito |
rbacsep: add ssh_t role allow. |
|
|
|
@2782
|
[2782]
|
08/15/08 12:53:26 |
cpebenito |
rbacsep: update to trunk 2781. |
|
|
|
@2778
|
[2778]
|
08/13/08 13:49:01 |
cpebenito |
rbacsep: constrain ssh_t, not sshd_t. |
|
|
|
@2761
|
[2761]
|
07/16/08 10:28:13 |
cpebenito |
rbacsep: update to trunk 2760. |
|
|
|
@2759
|
[2759]
|
07/11/08 14:01:14 |
cpebenito |
rbacsep: begin adding ubac controls. |
|
|
|
@2758
|
[2758]
|
07/10/08 12:07:02 |
cpebenito |
rbacsep: start building up ubac. |
|
|
|
@2757
|
[2757]
|
07/10/08 08:05:53 |
cpebenito |
rbacsep: disable rbac separation. |
|
|
|
@2756
|
[2756]
|
07/09/08 13:11:38 |
cpebenito |
rbacsep: fixes for modular building |
|
|
|
@2755
|
[2755]
|
07/09/08 09:59:28 |
cpebenito |
rbacsep: fix accidental ssh_agent_exec_t declaration removal. |
|
|
|
@2754
|
[2754]
|
07/09/08 09:59:14 |
cpebenito |
rbacsep: fix up file contexts. |
|
|
|
@2753
|
[2753]
|
07/09/08 09:43:33 |
cpebenito |
rbacsep: restore dbus derived types. |
|
|
|
@2752
|
[2752]
|
07/09/08 08:49:46 |
cpebenito |
rbacsep: restore ssh-agent derived types. |
|
|
|
@2751
|
[2751]
|
07/09/08 07:51:36 |
cpebenito |
rbacsep: restore sudo derived types. |
|
|
|
@2750
|
[2750]
|
07/09/08 07:27:50 |
cpebenito |
rbacsep: revert userhelper to derived types. |
|
|
|
@2749
|
[2749]
|
07/09/08 07:27:13 |
cpebenito |
rbacsep: update for changes from last trunk merge. |
|
|
|
@2748
|
[2748]
|
07/09/08 07:25:56 |
cpebenito |
rbacsep: update for changes from last trunk merge. |
|
|
|
@2747
|
[2747]
|
07/08/08 13:05:30 |
cpebenito |
rbacsep: fixes. |
|
|
|
@2746
|
[2746]
|
07/08/08 12:59:52 |
cpebenito |
rbacsep: collapse sepostgres types. |
|
|
|
@2745
|
[2745]
|
07/08/08 10:43:41 |
cpebenito |
rbacsep: update to trunk 2744. |
|
|
|
@2739
|
[2739]
|
06/25/08 14:41:32 |
cpebenito |
rbacsep: change crontab to run helper apps in the same domain rather than … |
|
|
|
@2738
|
[2738]
|
06/25/08 14:39:10 |
cpebenito |
rbacsep: switch over screen to role template convention. |
|
|
|
@2737
|
[2737]
|
06/25/08 09:41:46 |
cpebenito |
rbacsep: revert screen to derived types. |
|
|
|
@2736
|
[2736]
|
06/25/08 08:39:11 |
cpebenito |
rbacsep: switch over su to role template convention. |
|
|
|
@2735
|
[2735]
|
06/25/08 08:23:29 |
cpebenito |
rbacsep: revert su back to derived types. |
|
|
|
@2728
|
[2728]
|
06/23/08 09:35:51 |
cpebenito |
rbacsep: make xserver compilable. |
|
|
|
@2727
|
[2727]
|
06/20/08 13:45:47 |
cpebenito |
rbacsep: a whole slew of fixes. |
|
|
|
@2726
|
[2726]
|
06/19/08 16:33:52 |
cpebenito |
rbacsep: remove almost all per_role templates. |
|
|
|
@2725
|
[2725]
|
06/19/08 15:57:09 |
cpebenito |
rbacsep: remove untrusted content booleans. |
|
|
|
@2724
|
[2724]
|
06/19/08 15:55:10 |
cpebenito |
rbacsep: reclaim/refactor derived type templated interfaces. drop … |
|
|
|
@2723
|
[2723]
|
06/19/08 12:49:08 |
cpebenito |
rbacsep: massive surgery on xserver to get it collapsed. |
|
|
|
@2720
|
[2720]
|
06/17/08 14:45:37 |
cpebenito |
rbacsep: switch old userdom templated interface calls over to reclaimed … |
|
|
|
@2715
|
[2715]
|
06/12/08 17:17:59 |
cpebenito |
rbacsep: reclaim templated interfaces for regular interface usage. |
|
|
|
@2714
|
[2714]
|
06/11/08 09:25:35 |
cpebenito |
rbacsep: initial collapse of user home, tmp, and tmpfs. |
|
|
|
@2710
|
[2710]
|
06/06/08 00:34:42 |
cpebenito |
rbacsep: additional xserver_role pieces. |
|
|
|
@2708
|
[2708]
|
06/05/08 22:15:56 |
cpebenito |
rbacsep: more xserver collapsing. |
|
|
|
@2706
|
[2706]
|
05/30/08 10:05:17 |
pebenito |
rbacsep: first steps in collapsing xserver. |
|
|
|
@2705
|
[2705]
|
05/29/08 08:33:29 |
pebenito |
rbacsep: update to trunk 2704 |
|
|
|
@2689
|
[2689]
|
05/22/08 08:54:28 |
pebenito |
rbacsep: more per_role_template replacement interfaces and calls. |
|
|
|
@2688
|
[2688]
|
05/21/08 13:15:13 |
pebenito |
rbacsep: fix parameter for role statements. |
|
|
|
@2687
|
[2687]
|
05/21/08 09:48:34 |
pebenito |
rbacsep: start adding per_role_template replacement interfaces and calls. |
|
|
|
@2686
|
[2686]
|
05/19/08 12:57:28 |
pebenito |
rbacsep: collapse services except xserver. |
|
|
|
@2685
|
[2685]
|
05/16/08 08:34:25 |
pebenito |
rbacsep: collapse system layer. |
|
|
|
@2684
|
[2684]
|
05/15/08 08:51:09 |
pebenito |
rbacsep: cut-n-paste collapse admin layer. |
|
|
|
@2682
|
[2682]
|
05/13/08 09:07:42 |
pebenito |
rbacsep: more collapsing in apps. |
|
|
|
@2680
|
[2680]
|
05/12/08 10:56:59 |
pebenito |
rbacsep: basic copy and paste collapsing of most apps modules. does not … |
|
|
|
@2679
|
[2679]
|
05/12/08 09:08:02 |
pebenito |
rbacsep: initial collapse of user terminals. |
|
|
|
@2678
|
[2678]
|
05/07/08 13:00:17 |
pebenito |
rbacsep: add exemptions. |
|
|
|
@2677
|
[2677]
|
05/07/08 09:54:32 |
pebenito |
rbacsep: more constraint work |
|
|
|
@2676
|
[2676]
|
05/06/08 15:52:46 |
pebenito |
rbacsep: start adding rbac constraints. |
|
|
|
@2675
|
[2675]
|
05/06/08 13:06:29 |
pebenito |
rbacsep: branch for rbac separation. |
|
|
|
@2672
|
[2672]
|
05/05/08 14:44:21 |
pebenito |
xselinux: remove stale branch. |
|
|
|
@2671
|
[2671]
|
05/05/08 14:39:39 |
pebenito |
fcglob: add additional globs. add log file for mismatches. |
|
|
|
@2670
|
[2670]
|
05/05/08 13:14:30 |
pebenito |
fcglob: fix bug in matching code, and add tmpfs to xattr file systems. |
|
|
|
@2667
|
[2667]
|
04/22/08 14:42:45 |
pebenito |
fcglob: have the fs walk skip over branches that aren't xattr fs'es. |
|
|
|
@2666
|
[2666]
|
04/22/08 13:14:36 |
pebenito |
fcglob: add a copy of libselinux with context validation disabled so the … |
|
|
|
@2654
|
[2654]
|
03/31/08 09:04:13 |
pebenito |
xselinux: update to trunk 2653. |
|
|
|
@2653
|
[2653]
|
03/31/08 08:29:12 |
pebenito |
xselinux: add comment on root colormap |
|
|
|
@2651
|
[2651]
|
03/26/08 14:44:25 |
pebenito |
xselinux: merge x_rootcolormap_t and x_rootwindow_t into a per-role type, … |
|
|
|
@2650
|
[2650]
|
03/21/08 09:18:43 |
pebenito |
xselinux: fix xserver_object_manager to not break X-SE if it is disabled. |
|
|
|
@2647
|
[2647]
|
03/20/08 18:46:46 |
ewalsh |
xselinux: Add new property append permission to allow rules. |
|
|
|
@2646
|
[2646]
|
03/20/08 18:40:12 |
ewalsh |
xselinux: Add new append permission to mls mappings. |
|
|
|
@2645
|
[2645]
|
03/20/08 18:39:39 |
ewalsh |
xselinux: Add append permission to x_property class. |
|
|
|
@2643
|
[2643]
|
03/18/08 10:06:34 |
pebenito |
xselinux: more xinerama to a standard extension, move dga and vidmode to … |
|
|
|
@2642
|
[2642]
|
03/18/08 10:05:43 |
pebenito |
xselinux: more rules from testing. |
|
|
|
@2641
|
[2641]
|
03/18/08 08:37:00 |
pebenito |
xselinux: add PRIMARY selection. |
|
|
|
@2640
|
[2640]
|
03/17/08 11:59:29 |
pebenito |
xselinux: some renaming to be more consistent with naming of fallback … |
|
|
|
@2637
|
[2637]
|
03/13/08 10:50:33 |
pebenito |
xselinux: fix |
|
|
|
@2636
|
[2636]
|
03/13/08 10:46:53 |
pebenito |
xelinux: first round of fixes from testing. |
|
|
|
@2635
|
[2635]
|
03/12/08 14:12:29 |
pebenito |
xselinux: fix per-role tmpl, the user xserver is sending the xevents and … |
|
|
|
@2634
|
[2634]
|
03/11/08 14:55:00 |
pebenito |
xselinux: update to trunk 2633. |
|
|
|
@2624
|
[2624]
|
02/21/08 14:21:35 |
pebenito |
xselinux: drop screens and fonts. |
|
|
|
@2623
|
[2623]
|
02/21/08 13:58:02 |
pebenito |
xselinux: dont deprecate user client template yet. make per-role rules … |
|
|
|
@2622
|
[2622]
|
02/21/08 13:30:48 |
pebenito |
xselinux: switch over apps to x domain template. |
|
|
|
@2621
|
[2621]
|
02/21/08 09:00:14 |
pebenito |
xselinux: initial rename/restructure to have a unified template for an x … |
|
|
|
@2620
|
[2620]
|
02/20/08 15:53:55 |
ewalsh |
xselinux: Add write permission to x_selection class. |
|
|
|
@2619
|
[2619]
|
02/20/08 14:39:42 |
pebenito |
xselinux: remove leftover xpriv_exec_t pieces. |
|
|
|
@2618
|
[2618]
|
02/20/08 08:36:48 |
pebenito |
xselinux: collapse extra attributes into x_domain where possible. |
|
|
|
@2614
|
[2614]
|
02/18/08 12:53:17 |
pebenito |
xselinux: x_contexts install target is now redundant due to generic … |
|
|
|
@2613
|
[2613]
|
02/18/08 12:51:46 |
pebenito |
xselinux: update to trunk 2612. |
|
|
|
@2609
|
[2609]
|
02/15/08 09:56:02 |
pebenito |
xselinux: remove xpriv pieces, remove 2-level architecture, boil down some … |
|
|
|
@2608
|
[2608]
|
02/15/08 07:25:40 |
pebenito |
fcglob: remove homedir contexts as they arent in the globs. tweak … |
|
|
|
@2607
|
[2607]
|
02/14/08 13:00:59 |
pebenito |
fcglob: fix handling of files with fcglob metacharacters in their name, eg … |
|
|
|
@2605
|
[2605]
|
02/13/08 16:58:43 |
ewalsh |
xselinux: Add new device permission to mls mappings. |
|
|
|
@2604
|
[2604]
|
02/13/08 16:57:47 |
ewalsh |
xselinux: Add use permission to x_device class. |
|
|
|
@2602
|
[2602]
|
02/13/08 14:19:54 |
pebenito |
fcglob: output <<none>> in c code to stdout, not stderr. |
|
|
|
@2601
|
[2601]
|
02/13/08 13:11:49 |
jmowery |
fcglob:
removed use of python-selinux
added line to build local version … |
|
|
|
@2600
|
[2600]
|
02/12/08 14:10:22 |
pebenito |
xselinux: remove unneeded $2_xevent_type attribute. |
|
|
|
@2599
|
[2599]
|
02/12/08 12:49:45 |
pebenito |
xselinux: remove unneeded role usage in basic template. |
|
|
|
@2598
|
[2598]
|
02/12/08 09:26:11 |
pebenito |
fcglob: add matchpathcon c wrapper. |
|
|
|
@2592
|
[2592]
|
01/31/08 18:25:24 |
ewalsh |
xselinux: Add new property permissions to mls mappings. |
|
|
|
@2591
|
[2591]
|
01/31/08 13:08:15 |
pebenito |
add a copy of David Beazley's python lex/yacc, ply, as this is not … |
|
|
|
@2590
|
[2590]
|
01/31/08 12:16:26 |
ewalsh |
xselinux: Add getattr and setattr permissions to x_property class. |
|
|
|
@2589
|
[2589]
|
01/31/08 09:07:17 |
pebenito |
fcglob: add modules.conf for testing purposes. |