aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Bump module versions for release.Chris PeBenito2017-09-091-1/+1
|
* Module version bump for /usr/bin fc fixes from Nicolas Iooss.Chris PeBenito2017-05-071-1/+1
|
* Module version bump for getty patch from cgzones.Chris PeBenito2017-03-301-1/+1
|
* getty: overlook modulecgzones2017-03-301-17/+12
| | | | | | | | | * reorder file contexts * rename getty_var_run_t into getty_runtime_t and getty_etc_t into getty_conf_t * remove unneeded and confusing init permissions * delete access on generic pids * remove invalid etc filetrans: getty has no create permissions for its config files * restrict logfile access
* Sort capabilities permissions from Russell Coker.Chris PeBenito2017-02-171-1/+1
|
* Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.Chris PeBenito2017-02-051-1/+1
|
* Bump module versions for release.Chris PeBenito2017-02-051-1/+1
|
* Module version bump for fc updates from Nicolas Iooss.Chris PeBenito2017-01-021-1/+1
|
* Module version bumps for /run fc changes from cgzones.Chris PeBenito2017-01-021-1/+1
|
* Module version bumps for patches from cgzones.Chris PeBenito2016-12-061-1/+1
|
* Bump module versions for release.Chris PeBenito2016-10-241-1/+1
|
* Module version bump for getty patch from Luis Ressel.Chris PeBenito2016-03-121-1/+1
|
* Allow getty the sys_admin capabilityLuis Ressel2016-03-121-6/+1
| | | | | | It's required for agetty on kernels with a recent grsecurity patchset. (The denial itself has been showing up for quite some time, but it hasn't had any obvious ill effects until recently.)
* Bump module versions for release.Chris PeBenito2013-05-011-1/+1
|
* Module version bump for fixes from Dominick Grift.Chris PeBenito2013-01-031-1/+1
|
* NSCD related changes in various policy modulesDominick Grift2013-01-031-1/+1
| | | | | | | | | | | | | | | | Use nscd_use instead of nscd_socket_use. This conditionally allows nscd_shm_use Remove the nscd_socket_use from ssh_keygen since it was redundant already allowed by auth_use_nsswitch Had to make some ssh_keysign_t rules unconditional else nscd_use(ssh_keysign_t) would not build (nested booleans) but that does not matter, the only actual domain transition to ssh_keysign_t is conditional so the other unconditional ssh_keygen_t rules are conditional in practice Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
* Pushing 2.20120215 (current version)Sven Vermeulen2012-04-211-0/+141