| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Fix more errors as they are found. Takes longer to
rebuild the policy, but we can start with no bad interfaces.
|
|
|
|
|
| |
Avoid hitting an AVC from rebuilding in the doc directory.
The logs are saved if we find more bad interfaces.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
qarshd_t sockets end up as stdin, stdout, and stderr.
Some programs will fstat them to determine what they
are or change flags on the file descriptor, this is ok.
|
|
|
|
|
| |
There were a lot of bad things to include in the system layer.
Exclude anything with "spec" in the name.
|
|
|
|
|
| |
This allows qarshd to make any system interface transition.
Tested against selinux-policy-3.6.32-41.fc12.noarch.
|
| |
|
|
|
|
|
|
|
|
| |
This isn't completely possible because some interfaces cause
syntax or load errors. We need to keep a list of interfaces
to filter out to get something that loads.
This adds gxpp as a requirement to build qarsh.
|
|
We generate the policy based on which services we want to test.
|