Dan Walsh
|
8dbd4d49f6
|
dd new restorecond service
|
2011-07-05 17:18:12 -04:00 |
|
Dan Walsh
|
759501823b
|
Add -C option to sandbox and seunshare to maintain capabilities, otherwise
the bounding set will be dropped.
Change --cgroups short name -c rather then -C for consistancy
Fix memory and fd leaks in seunshare
|
2011-07-05 16:51:18 -04:00 |
|
Dan Walsh
|
173e9f90db
|
Do not drop capability bounding set in seunshare, this allows sandbox to
run setuid apps.
|
2011-06-13 13:37:04 -04:00 |
|
Dan Walsh
|
24d29a5015
|
Add semanage-bash-completion.sh script
|
2011-06-10 16:33:08 -04:00 |
|
Dan Walsh
|
299d98087e
|
Remove mount -o bind calls from sandbox init script
pam_namespace now has this built in.
|
2011-06-07 13:58:41 -04:00 |
|
Dan Walsh
|
dc86b007cf
|
Pass desktop dpi to sandbox Xephyr window
|
2011-06-07 08:37:18 -04:00 |
|
Dan Walsh
|
c2ef4a0bea
|
Allow semodule to pick alternate root for selinux files
Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.
|
2011-06-06 13:01:14 -04:00 |
|
Dan Walsh
|
93a347a42a
|
Fix var_spool template read_spool_files
Fix sepolgen to handle filename transitions
|
2011-05-25 16:20:29 -04:00 |
|
Dan Walsh
|
ed0051b493
|
Templates cleanedup by Dominic Grift
|
2011-05-23 17:05:41 -04:00 |
|
Dan Walsh
|
0b324049b3
|
Clean up some of the templates for sepolgen
|
2011-04-29 11:50:14 -04:00 |
|
Dan Walsh
|
4a56398540
|
Apply patches from Christoph A.
* fix sandbox title
* stop xephyr from li
Also ignore errors on sandbox include of directory missing files
|
2011-04-22 07:06:23 -04:00 |
|
Dan Walsh
|
e1285d4541
|
rebuild versus latest libsepol
|
2011-04-21 12:02:06 -04:00 |
|
Dan Walsh
|
588030fc2c
|
Change fixfiles restore to delete unlabeled sockets in /tmp
|
2011-04-18 13:18:18 -04:00 |
|
Dan Walsh
|
61f1bc2068
|
Change fixfiles restore to delete unlabeled sockets in /tmp
|
2011-04-18 12:47:15 -04:00 |
|
Dan Walsh
|
822e503b13
|
rebuild versus latest libsepol
|
2011-04-18 09:28:27 -04:00 |
|
Dan Walsh
|
9f65a26864
|
Update to upstream
* Use correct color range in mcstrand by Richard Haines.
|
2011-04-13 16:52:53 -04:00 |
|
Dan Walsh
|
8acc019498
|
rsynccmd should run outside of execcon
|
2011-04-01 13:29:38 -04:00 |
|
Dan Walsh
|
1da0399e25
|
rsynccmd should run outside of execcon
|
2011-03-30 14:42:36 -04:00 |
|
Dan Walsh
|
be38aa471e
|
Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
|
2011-03-03 13:35:37 -05:00 |
|
Dan Walsh
|
a710a4e711
|
- Fix sandbox policy creation with udp connect ports
|
2011-02-03 17:05:41 -05:00 |
|
Dan Walsh
|
433953b033
|
- Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
- Cleanup chcat man page
|
2011-02-03 16:15:43 -05:00 |
|
Dan Walsh
|
331e9ad06d
|
- Report full errors on OSError on Sandbox
|
2011-02-02 13:34:22 -05:00 |
|
Dan Walsh
|
e764b2d2b6
|
- Fix newrole hanlding of pcap
|
2011-01-21 15:11:31 -05:00 |
|
Dan Walsh
|
971f278f98
|
- Have restorecond watch more directories in homedir
|
2011-01-19 16:45:53 -05:00 |
|
Dan Walsh
|
01e471247b
|
- Add sandbox to sepolgen
|
2011-01-14 16:37:43 -05:00 |
|
Dan Walsh
|
afa2535b24
|
- Add sandbox to sepolgen
|
2011-01-14 14:39:26 -05:00 |
|
Dan Walsh
|
12eb5b45f4
|
- Fix proper handling of getopt errors
- Do not allow modules names to contain spaces
|
2011-01-10 14:39:21 -05:00 |
|
Dan Walsh
|
c76dc0c642
|
- Polgengui raises the wrong type of exception. #471078
- Change semanage to not allow it to semanage module -D
- Change setsebool to suggest run as root on failure
|
2011-01-06 14:38:19 -05:00 |
|
Dan Walsh
|
448a84b06a
|
- Polgengui raises the wrong type of exception. #471078
- Change semanage to not allow it to semanage module -D
|
2011-01-04 17:23:27 -05:00 |
|
Dan Walsh
|
18119ffd24
|
- Fix restorecond watching utmp file for people logging in our out
|
2010-12-22 14:38:46 -05:00 |
|
Dan Walsh
|
b1a3235896
|
- Update to upstream
|
2010-12-21 16:20:42 -05:00 |
|
Dan Walsh
|
a548207cc4
|
- Change to allow sandbox to run on nfs homedirs, add start python script
|
2010-12-21 16:20:01 -05:00 |
|
Dan Walsh
|
8937a040d8
|
- Change to allow sandbox to run on nfs homedirs, add start python script
|
2010-12-15 16:47:38 -05:00 |
|
Dan Walsh
|
3108046cf7
|
- Move seunshare to sandbox package
|
2010-12-15 14:15:49 -05:00 |
|
Dan Walsh
|
6c80e8dc19
|
- Fix sandbox to show correct types in usage statement
|
2010-11-30 12:09:48 -05:00 |
|
Dan Walsh
|
8c1d9b0f48
|
- Stop fixfiles from complaining about missing dirs
|
2010-11-29 10:14:39 -05:00 |
|
Dan Walsh
|
f0e85a70d6
|
- Update to upstream
- List types available for sandbox in usage statement
|
2010-11-24 13:41:52 -05:00 |
|
Dan Walsh
|
af19df0f00
|
- Don't report error on load_policy when system is disabled.
|
2010-11-22 13:50:29 -05:00 |
|
Dan Walsh
|
b9b7f4161c
|
- Fix up problems pointed out by solar designer on dropping capabilities
|
2010-11-08 15:12:25 -05:00 |
|
Dan Walsh
|
d7e1c238f4
|
- Check if you have full privs and reset otherwise dont drop caps
|
2010-11-01 16:21:00 -04:00 |
|
Dan Walsh
|
cdcc4526b7
|
- Fix setools require line
|
2010-11-01 09:50:12 -04:00 |
|
Dan Walsh
|
622bb69d77
|
- Move /etc/pam.d/newrole in to polcicycoreutils-newrole
- Additiona capability checking in sepolgen
|
2010-10-29 09:39:03 -04:00 |
|
Dan Walsh
|
9852e61813
|
- Remove setuid flag and replace with file capabilities
- Fix sandbox handling of files with spaces in them
|
2010-10-25 17:25:34 -04:00 |
|
Jesse Keating
|
c9df11e933
|
- Rebuilt for gcc bug 634757
|
2010-09-29 15:05:42 -07:00 |
|
Dan Walsh
|
cccd96b8cf
|
- Move restorecond into its own subpackage
|
2010-09-23 16:23:05 -04:00 |
|
Dan Walsh
|
e500ad80f0
|
* Wed Jul 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-9
- Update selinux-polgengui to sepolgen policy generation
|
2010-07-30 11:19:53 -04:00 |
|
Daniel J Walsh
|
57906a7d95
|
* Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-7
- Update translations
|
2010-07-27 13:59:26 +00:00 |
|
Daniel J Walsh
|
3fd25d56a5
|
* Mon Jul 26 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-6
- Fix sandbox man page
|
2010-07-26 15:58:23 +00:00 |
|
Daniel J Walsh
|
1eab65cee2
|
* Tue Jul 20 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-6
- Fix sandbox man page
|
2010-07-26 15:33:31 +00:00 |
|
dmalcolm
|
dee9b43382
|
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
|
2010-07-22 03:01:32 +00:00 |
|