summaryrefslogtreecommitdiffstats
path: root/base/selinux
Commit message (Collapse)AuthorAgeFilesLines
* Added pki_tomcat_script_t type and rules to support upgraded instancesAde Lee2012-10-111-1/+18
| | | | | This is so runcon in pkicontrol will continue to work for d9 style instances.
* New selinux interface needed for certmonger directory accessAde Lee2012-10-102-1/+21
|
* Added pki_tomcat_cert_t type and interface to access itAde Lee2012-10-103-1/+39
| | | | | Added permissions to certmonger to access the certdb. Also added some missing selinux permissions for pki_tomcat_t
* Changes to start pki_ra and pki_tps in correct contextAde Lee2012-10-053-2/+20
| | | | | Added required selinux versions to spec file. Also added additional rule needed for F17
* add selinux context for pkidaemon, remove unneeded pid and lock codeAde Lee2012-10-053-18/+26
| | | | | remove runcon from operations, add rules for spawn/destroy, add mgrepl changes to policy
* move common policy into tps, ra templatesAde Lee2012-10-052-336/+98
|
* Use the tomcat selinux domain for the Java processesAde Lee2012-10-052-321/+97
|
* Correct incorrect file paths in default file contextsAde Lee2012-09-131-3/+3
|
* Changes to get TPS and RA running on dogtag 10Ade Lee2012-08-151-1/+1
| | | | | | Added systemd scripts for RA and TPS. Modified init scripts and configuration files to use correct directives for httpd 2.4. TPS and RA subsystems are now installable using pkicreate
* Changed selinux context for legacy instancesAde Lee2012-08-061-0/+1
| | | | | | | In the new selinux policy, pki_ca_t etc. are all replaced by pki_tomcat_t. To allow old instances to work under dogtag 10, the context in the run scripts needs to change. Also added a rule needed by selinux policy.
* selinux policy changes to use standard portsAde Lee2012-07-312-8/+14
| | | | | | | Selinux policy has been changed to use standard tomcat ports. Corresponding changes have been made in the pki-deploy scripts. Minor change in config script for password check.
* Selinux policy for new configuration.Ade Lee2012-07-253-368/+119
| | | | | | Added tomcat_t for java processes. Added aliases for old types to allow compatibility of existng subsystems. Added install scripts for pkispawn and pkidestroy
* Removed unnecessary pki folder.Endi Sukma Dewata2012-03-268-0/+1557
Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131