summaryrefslogtreecommitdiffstats
path: root/SELinux
Commit message (Collapse)AuthorAgeFilesLines
* Update selinux policy for Fedora 17Nathan Straz2012-06-271-9/+21
|
* Add script to detect and work around some selinux policy issuesNathan Straz2012-06-271-0/+35
|
* Allow all domains more rights to qarshd_t socketsNathan Straz2010-06-301-2/+4
| | | | | | qarshd_t sockets end up as stdin, stdout, and stderr. Some programs will fstat them to determine what they are or change flags on the file descriptor, this is ok.
* Only include lvm and logging parts of system policyNathan Straz2009-12-032-17/+11
| | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name.
* Add system interfaces to qarshd policyNathan Straz2009-11-302-1/+8
| | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-3.6.32-41.fc12.noarch.
* Update bad-interfaces for Fedora 12Nathan Straz2009-11-201-17/+11
|
* Pull in all services and apps interfacesNathan Straz2009-11-193-18/+44
| | | | | | | | This isn't completely possible because some interfaces cause syntax or load errors. We need to keep a list of interfaces to filter out to get something that loads. This adds gxpp as a requirement to build qarsh.
* Add SELinux policy for qarshdNathan Straz2009-10-225-0/+72
We generate the policy based on which services we want to test.