summaryrefslogtreecommitdiffstats
path: root/SELinux
Commit message (Collapse)AuthorAgeFilesLines
* Catch errors in both make commandsNathan Straz2013-08-271-17/+63
| | | | | Fix more errors as they are found. Takes longer to rebuild the policy, but we can start with no bad interfaces.
* Rebuild policy in a temp directoryNathan Straz2013-08-271-4/+16
| | | | | Avoid hitting an AVC from rebuilding in the doc directory. The logs are saved if we find more bad interfaces.
* Allow us to transition from init_t to qarshd_tNathan Straz2013-05-211-0/+1
|
* Bump selinux policy versionv1.27-1Nathan Straz2012-06-271-1/+1
|
* Update selinux policy for Fedora 17Nathan Straz2012-06-271-9/+21
|
* Add script to detect and work around some selinux policy issuesNathan Straz2012-06-271-0/+35
|
* Allow all domains more rights to qarshd_t socketsNathan Straz2010-06-301-2/+4
| | | | | | qarshd_t sockets end up as stdin, stdout, and stderr. Some programs will fstat them to determine what they are or change flags on the file descriptor, this is ok.
* Only include lvm and logging parts of system policyNathan Straz2009-12-032-17/+11
| | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name.
* Add system interfaces to qarshd policyNathan Straz2009-11-302-1/+8
| | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-3.6.32-41.fc12.noarch.
* Update bad-interfaces for Fedora 12Nathan Straz2009-11-201-17/+11
|
* Pull in all services and apps interfacesNathan Straz2009-11-193-18/+44
| | | | | | | | This isn't completely possible because some interfaces cause syntax or load errors. We need to keep a list of interfaces to filter out to get something that loads. This adds gxpp as a requirement to build qarsh.
* Add SELinux policy for qarshdNathan Straz2009-10-225-0/+72
We generate the policy based on which services we want to test.