pki.git/base/selinux/src, branch direct-deployment

Added pki_tomcat_script_t type and rules to support upgraded instances

2012-10-12T03:54:03+00:00

This is so runcon in pkicontrol will continue to work for d9 style
instances.

New selinux interface needed for certmonger directory access

2012-10-11T02:57:42+00:00

Added pki_tomcat_cert_t type and interface to access it

2012-10-10T04:34:12+00:00

Added permissions to certmonger to access the certdb.  Also added
some missing selinux permissions for pki_tomcat_t

Changes to start pki_ra and pki_tps in correct context

2012-10-05T20:00:47+00:00

Added required selinux versions to spec file.  Also added
additional rule needed for F17

add selinux context for pkidaemon, remove unneeded pid and lock code

2012-10-05T19:55:44+00:00

remove runcon from operations, add rules for spawn/destroy,
add mgrepl changes to policy

move common policy into tps, ra templates

2012-10-05T19:54:51+00:00

Use the tomcat selinux domain for the Java processes

2012-10-05T19:54:37+00:00

Correct incorrect file paths in default file contexts

2012-09-13T17:08:07+00:00

Changes to get TPS and RA running on dogtag 10

2012-08-15T19:38:45+00:00

Added systemd scripts for RA and TPS.  Modified init scripts
and configuration files to use correct directives for httpd 2.4.
TPS and RA subsystems are now installable using pkicreate

Changed selinux context for legacy instances

2012-08-06T14:33:25+00:00

In the new selinux policy, pki_ca_t etc. are all replaced by
pki_tomcat_t.  To allow old instances to work under dogtag 10, the
context in the run scripts needs to change.
Also added a rule needed by selinux policy.