Changelog for
selinux-policy-devel-3.0.8-128.fc8.noarch.rpm :
Tue Dec 9 23:00:00 2008 Dan Walsh
3.0.8-128
- Allow NetworkManager to read polkit lib files
Thu Nov 13 23:00:00 2008 Dan Walsh 3.0.8-127
- Add pki policy
Thu Nov 13 23:00:00 2008 Dan Walsh 3.0.8-124
- More fixes for NetworkManager/dnsmasq
Mon Oct 27 23:00:00 2008 Dan Walsh 3.0.8-123
- Update to latest audit policy
Wed Oct 22 00:00:00 2008 Dan Walsh 3.0.8-122
- Remove mod_fcgid-selinux package
Thu Oct 16 00:00:00 2008 Dan Walsh 3.0.8-121
- Allow wine to mmap_zero
- Fix mapping for google/picasa/wine
Wed Oct 15 00:00:00 2008 Dan Walsh 3.0.8-120
- Backport networkmanager and ppp policy from f9
Wed Oct 15 00:00:00 2008 Dan Walsh 3.0.8-119
- Fix sendmail transition rules to postfix
Thu Oct 9 00:00:00 2008 Dan Walsh 3.0.8-118
- Add policykit policy
Fri Sep 26 00:00:00 2008 Dan Walsh 3.0.8-117
- Update networkmanager to latest upstream version
Wed Sep 10 00:00:00 2008 Dan Walsh 3.0.8-116
- add mimedefang to spamd
Wed Aug 27 00:00:00 2008 Dan Walsh 3.0.8-115
- Remove definition for /var/run/mod_fcgid(/.
*)?
Wed Aug 13 00:00:00 2008 Dan Walsh 3.0.8-114
- Allow bluetooth to read hwdate
Wed Aug 6 00:00:00 2008 Dan Walsh 3.0.8-113
- dontaudit semanage config_tty
- Allow samba to share fusefs
Fri Jul 25 00:00:00 2008 Dan Walsh 3.0.8-112
- Change dhclient to be able to red networkmanager_var_run
Thu Jul 3 00:00:00 2008 Dan Walsh 3.0.8-111
- Handle updated NetworkManager
Thu Jun 19 00:00:00 2008 Dan Walsh 3.0.8-110
- Add cxoffice homedir context
Fri May 30 00:00:00 2008 Dan Walsh 3.0.8-109
- Remove extra context for dbus
Wed May 21 00:00:00 2008 Dan Walsh 3.0.8-106
- More fixes for network manager
Wed May 21 00:00:00 2008 Dan Walsh 3.0.8-105
- Fixes for new network
- Logs of fixes for networkmanager
Tue May 20 00:00:00 2008 Dan Walsh 3.0.8-104
- Dontaudit reading of nfs by consolekit
Wed May 14 00:00:00 2008 Dan Walsh 3.0.8-103
Fix labeling on /var/spool/fax and /var/spool/voice
Thu May 8 00:00:00 2008 Dan Walsh 3.0.8-102
- Allow pam_console to setattr on cpu_device_t
- Dontaudit pam_t writing homedir
- Add sys_nice for audispd
Fri Apr 18 00:00:00 2008 Dan Walsh 3.0.8-101
- Allow nfs to look at all filesystem directories
Wed Apr 16 00:00:00 2008 Dan Walsh 3.0.8-100
- Dontaudit validating context when using kerberos libraries
- Allow postfix_virtual write access to postfix_private sockets
Wed Apr 9 00:00:00 2008 Dan Walsh 3.0.8-99
- Allow privoxy to write to /etc/privoxy/default\\.action
Sat Apr 5 00:00:00 2008 Dan Walsh 3.0.8-98
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home
dirs if the boolean is set
- Allow fetchmail to manage sendmail_log
Fri Mar 28 23:00:00 2008 Dan Walsh 3.0.8-97
- Allow stunnel apps to r/w the stunnel socket
Fri Mar 28 23:00:00 2008 Dan Walsh 3.0.8-96
- Allow munin-node to bind to socket
Tue Mar 18 23:00:00 2008 Dan Walsh 3.0.8-95
- Allow rythmbox to talk to avahi
- Add prewikka policy
Mon Mar 17 23:00:00 2008 Dan Walsh 3.0.8-94
- Correct labeling on /var/run/dmevent.
*
- Allow pam_t to read wtmp file
- Allow squid to run chkpwd
- Allow postfix_local to exec clamscan
- Allow munin to listen on munin_port
- Label /var/lib/cups-pdf correctly
- Allow fail2ban to read etc_runtime files and to connectto itself
- Label lustrefs and panfs as nfs_t
- Allow kismet to talk to the terminal
Tue Mar 11 23:00:00 2008 Dan Walsh 3.0.8-93
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
Tue Mar 4 23:00:00 2008 Dan Walsh 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
Tue Mar 4 23:00:00 2008 Dan Walsh 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
Tue Mar 4 23:00:00 2008 Dan Walsh 3.0.8-91
- Allow rpc.mountd to write to lvm_control_t chr_file
Tue Mar 4 23:00:00 2008 Dan Walsh 3.0.8-90
- Allow mozilla to auth_use_nsswitch
- Change location of mock
- Fix context on /usr/sbin/validate
- allow vbetool to map low kernel memory
- Allow fail2ban to connect to whois port
- Allow bitlbee to read locale files
- Allow clamd to execute shell
- dontaudit setroubleshoot reading cifs and nfs files
Thu Feb 21 23:00:00 2008 Dan Walsh 3.0.8-89
- Add jkubin changes for nx and groupadd
- Add isns port
Wed Feb 20 23:00:00 2008 Dan Walsh 3.0.8-88
- Add policy for /dev/autofs
Mon Feb 18 23:00:00 2008 Dan Walsh 3.0.8-87
- Allow apmd to talk to consolekit via dbus
Fri Feb 15 23:00:00 2008 Dan Walsh 3.0.8-86
- Add prelude/audisp policy
Tue Feb 12 23:00:00 2008 Dan Walsh 3.0.8-85
- Fix cups executables labeling
Fri Feb 1 23:00:00 2008 Dan Walsh 3.0.8-84
- Allow fail2ban to create sock_files in /var/run
Tue Jan 22 23:00:00 2008 Dan Walsh 3.0.8-83
- Make oddjob_mkhomedir work with confined login domains
Tue Jan 22 23:00:00 2008 Dan Walsh 3.0.8-82
- Allow xdm to sys_ptrace
Tue Jan 22 23:00:00 2008 Dan Walsh 3.0.8-81
- Allow zebra to listen on port 521
Thu Jan 17 23:00:00 2008 Dan Walsh 3.0.8-79
- Add procmail_log support
- Lots of fixes for munin
- fixes for dnsmasq
- Allow tmpreaper to delete aqmavis spool files
Wed Jan 16 23:00:00 2008 Dan Walsh 3.0.8-78
- Allow procmal to signal pyzor
Tue Jan 15 23:00:00 2008 Dan Walsh 3.0.8-77
- Allow daemons to write to cron fifo_files
Mon Jan 14 23:00:00 2008 Dan Walsh 3.0.8-76
- Fix filecontext for networkmanagerlog files
- Allow mount to read samba config
- Fix label of /var/lib/tftpboot
- Fix label of /usr/lib(64)?/xorg/modules/glesx.so
- Fix label on /etc/NetworkManager/dispatcher.d/
*
- Allow httpd to send dbus messages
Thu Jan 3 23:00:00 2008 Dan Walsh 3.0.8-75
- Alow postgrey to read postfix_etc_t
- Lots of fixes to get javaplugin to run under xguest
Thu Jan 3 23:00:00 2008 Dan Walsh 3.0.8-74
- Allow updatedb to getatt on fifo_files
Mon Dec 31 23:00:00 2007 Dan Walsh 3.0.8-73
- Fix specification for clamav and clamd log files
Sat Dec 22 23:00:00 2007 Dan Walsh 3.0.8-72
- Fixes to make confined mozilla work better
- Allow procmail to transition to spamd
Fri Dec 21 23:00:00 2007 Dan Walsh 3.0.8-71
- add file context for nspluginwrapper
Fri Dec 21 23:00:00 2007 Dan Walsh 3.0.8-70
- Allow mount.crypto to work
- Allow fsck to read file_t
Wed Dec 12 23:00:00 2007 Dan Walsh 3.0.8-69
- Allow ssh to read sym links in homedirs
Mon Dec 10 23:00:00 2007 Dan Walsh 3.0.8-68
- Allow ldconfig to manage files in the homedir
Thu Dec 6 23:00:00 2007 Dan Walsh 3.0.8-67
- Allow kdm to transition to bootloader_t through grub
Thu Dec 6 23:00:00 2007 Dan Walsh 3.0.8-66
- Allow depmod to read tmp files from rpm
- Dontaudit pam_timestamp_check access to ~.xsessions
- Allow postfix_local to transition to dovecot_deliver
- Allow postgrey to read postfix_spool
Tue Dec 4 23:00:00 2007 Dan Walsh 3.0.8-65
- Allow httpd_sys_script_t to search users homedirs
Sun Dec 2 23:00:00 2007 Dan Walsh 3.0.8-64
- Allow xdm to list all filesystem directories
Wed Nov 28 23:00:00 2007 Dan Walsh 3.0.8-63
- Change labeling on hpijs
- Fix unconfined_u defintion
- Set vmware to unconfiend domain, since policy is very good yet.
Mon Nov 26 23:00:00 2007 Dan Walsh 3.0.8-62
- Allow xend to create xend_var_log_t directories
- dontaudit setfiles relabel of /proc /sys caused by named-chroot
- Add rules for pam_keyinit (setkeycreate, ipc_lock)
- Allow mount to read unlabeled directorys for reiserfs
Tue Nov 20 23:00:00 2007 Dan Walsh 3.0.8-61
- Allow xguest to mount hal devices and read/write file systems
- that do not support extended attributes. Allows kiosk users to
- copy to usb media
Tue Nov 20 23:00:00 2007 Dan Walsh 3.0.8-60
- Allow cupsd to sigkill hplip_t
- Allow automount to create fifo files
Tue Nov 20 23:00:00 2007 Dan Walsh 3.0.8-59
- Allow logwatch to search all directories
- Allow sendmail to use sasl
- Allow system_mail_t to write to exim_log_t
Fri Nov 16 23:00:00 2007 Dan Walsh 3.0.8-58
- Allow nmbd to list inotifyfs_t
- Dontaudit consolekit access to user homedir
- dontaudit nscd getserv and shmemserv
- Allow rsync_t dac overrides
- Allow xfs_t to listen to sockets
Fri Nov 16 23:00:00 2007 Dan Walsh 3.0.8-57
- Allow lvm to search mnt
- Add booleans for xguest account
xguest_mount_media
xguest_connect_network
xguest_use_bluetooth
Thu Nov 15 23:00:00 2007 Dan Walsh 3.0.8-56
- Remove /usr/sbin/gdm label
- Label gstreamer codecs in homedir as textrel_shlib_t
Wed Nov 14 23:00:00 2007 Dan Walsh 3.0.8-55
- Allow spamd to manage razor files
Mon Nov 12 23:00:00 2007 Dan Walsh 3.0.8-54
- Allow cyrus to authenticate via sasl
- Allow sshd to work in tunnel mode
- Allow sshd to use -R
- Allow ssh to read user homedirs
- Add /var/lib/tftp to tftp.fc
- Add labels for /dev/dmmdi and /dev/admmdi
- Allow postmap to be run by unconfined_t
- Allow dictd to write pid file
- Allow bluetooth to connectto unix_stream_sockets
Mon Nov 12 23:00:00 2007 Dan Walsh 3.0.8-53
- Allow bugzilla policy to connect to postgresql and mysql on other machines
Mon Nov 12 23:00:00 2007 Dan Walsh 3.0.8-52
- Allow apache to read unconfined users content
Sat Nov 10 23:00:00 2007 Dan Walsh 3.0.8-51
- Allow login programs to run mount
- Dontaudit writes to user_home_t for semanage
- Allow sendmail to write to cyrus_stream
- Define /dev/dmmidi1 as a sound_device_t
- Allow saslauthd to use nis_authentication
Fri Nov 9 23:00:00 2007 Dan Walsh 3.0.8-50
- Allow login programs to delete user temp files
Thu Nov 8 23:00:00 2007 Dan Walsh 3.0.8-49
- Separate xguest from guest
- Allow confined domains to output to rpm pipes
Wed Nov 7 23:00:00 2007 Dan Walsh 3.0.8-48
- Add obsoletes selinux-policy-strict
- Run inetd unconfined
- dontaudit loadkeys looking at homedir
Tue Nov 6 23:00:00 2007 Dan Walsh 3.0.8-47
- Allow all dns_resolves to use avahi stream
- Don\'t transition from unconfined_t to ping_t
Tue Nov 6 23:00:00 2007 Dan Walsh 3.0.8-46
- Allow sendmail to interact with winbind
- Allow dovecot to write log files
Fri Nov 2 23:00:00 2007 Dan Walsh 3.0.8-45
- Allow system_mail_t to domtrans to exim_t
Thu Nov 1 23:00:00 2007 Dan Walsh 3.0.8-44
- Add policy.xml to devel
- Dontaudit tmpreaper getattr on lost_found dir
- Additional bluetooth file context
- Allow dhcpc to transition to networkmanager
Tue Oct 30 23:00:00 2007 Dan Walsh 3.0.8-43
- Add type definition for /dev/kvm
Tue Oct 30 23:00:00 2007 Dan Walsh 3.0.8-42
- Make tcbdomain
- Allow domain domain:fd use
- Dontaudit rpm_rw_pipes
Mon Oct 29 23:00:00 2007 Dan Walsh 3.0.8-41
- Fix labeling on /var/run/bluetoothd_address
- Allow tmpreaper to search logs directory
Mon Oct 29 23:00:00 2007 Jeremy Katz - 3.0.8-40
- fix ps3 disk tyop
Mon Oct 29 23:00:00 2007 Dan Walsh 3.0.8-39
- Allow unconfined to run crontab
Sun Oct 28 00:00:00 2007 Dan Walsh 3.0.8-38
- Allow ip to load sys_modules in order to bring up ip6 networks
Sat Oct 27 00:00:00 2007 Dan Walsh 3.0.8-37
- Fix keyring handling
Sat Oct 27 00:00:00 2007 Dan Walsh 3.0.8-36
- Allow unconfined_t to run crontab -e as root
Fri Oct 26 00:00:00 2007 Dan Walsh 3.0.8-35
- Add ecryptfs definition
Fri Oct 26 00:00:00 2007 Dan Walsh 3.0.8-34
- Allow automounter to create a sock file in /var/run/autofs
- Fix corecmd_search_sbin to be corecmd_search_bin
Fri Oct 26 00:00:00 2007 Dan Walsh 3.0.8-33
- Allow cupsd_config_t to use usb_device_t
- Dontaudit use of kernel_t
- Fix creation of unconfined_gnome_home_t
Thu Oct 25 00:00:00 2007 Dan Walsh 3.0.8-32
- Dontaudit mail programs looking at munin_var_lib
- Allow NetworkManager to restart/reload nscd
Wed Oct 24 00:00:00 2007 Dan Walsh 3.0.8-31
- Fixes for vmware
- Additional textrel_shlib_t for codecs
Tue Oct 23 00:00:00 2007 Dan Walsh 3.0.8-30
- Allow XServer to read /proc/self/cmdline
- Fix unconfined cron jobs
- Allow fetchmail to transition to procmail
- Fixes for hald_mac
- Allow system_mail to transition to exim
- Allow tftpd to upload files
- Allow xdm to manage unconfined_tmp
- Allow udef to read alsa config
- Fix xguest to be able to connect to sound port
Thu Oct 18 00:00:00 2007 Dan Walsh 3.0.8-28
- Fixes for hald_mac
- Treat unconfined_home_dir_t as a home dir
- dontaudit rhgb writes to fonts and root
Thu Oct 18 00:00:00 2007 Dan Walsh 3.0.8-27
- Fix dnsmasq
- Allow rshd full login privs
Wed Oct 17 00:00:00 2007 Dan Walsh 3.0.8-26
- Allow rshd to connect to ports > 1023
Wed Oct 17 00:00:00 2007 Dan Walsh 3.0.8-25
- Fix vpn to bind to port 4500
- Allow ssh to create shm
- Add Kismet policy
Wed Oct 17 00:00:00 2007 Dan Walsh 3.0.8-24
- Allow rpm to chat with networkmanager
Tue Oct 16 00:00:00 2007 Dan Walsh 3.0.8-23
- Fixes for ipsec and exim mail
- Change default to unconfined user
Sat Oct 13 00:00:00 2007 Dan Walsh 3.0.8-22
- Pass the UNK_PERMS param to makefile
- Fix gdm location
Thu Oct 11 00:00:00 2007 Dan Walsh 3.0.8-21
- Make alsa work
Wed Oct 10 00:00:00 2007 Dan Walsh 3.0.8-20
- Fixes for consolekit and startx sessions
Tue Oct 9 00:00:00 2007 Dan Walsh 3.0.8-19
- Dontaudit consoletype talking to unconfined_t
Fri Oct 5 00:00:00 2007 Dan Walsh 3.0.8-18
- Remove homedir_template
Wed Oct 3 00:00:00 2007 Dan Walsh 3.0.8-17
- Check asound.state
Tue Oct 2 00:00:00 2007 Dan Walsh 3.0.8-16
- Fix exim policy
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-15
- Allow tmpreadper to read man_t
- Allow racoon to bind to all nodes
- Fixes for finger print reader
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-14
- Allow xdm to talk to input device (fingerprint reader)
- Allow octave to run as java
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-13
- Allow login programs to set ioctl on /proc
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-12
- Allow nsswitch apps to read samba_var_t
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-11
- Fix maxima
Tue Sep 25 00:00:00 2007 Dan Walsh 3.0.8-10
- Eliminate rpm_t:fifo_file avcs
- Fix dbus path for helper app
Sun Sep 23 00:00:00 2007 Dan Walsh 3.0.8-9
- Fix service start stop terminal avc\'s
Sat Sep 22 00:00:00 2007 Dan Walsh 3.0.8-8
- Allow also to search var_lib
- New context for dbus launcher
Sat Sep 22 00:00:00 2007 Dan Walsh 3.0.8-7
- Allow cupsd_config_t to read/write usb_device_t
- Support for finger print reader,
- Many fixes for clvmd
- dbus starting networkmanager
Fri Sep 21 00:00:00 2007 Dan Walsh 3.0.8-5
- Fix java and mono to run in xguest account
Thu Sep 20 00:00:00 2007 Dan Walsh 3.0.8-4
- Fix to add xguest account when inititial install
- Allow mono, java, wine to run in userdomains
Thu Sep 20 00:00:00 2007 Dan Walsh 3.0.8-3
- Allow xserver to search devpts_t
- Dontaudit ldconfig output to homedir
Wed Sep 19 00:00:00 2007 Dan Walsh 3.0.8-2
- Remove hplip_etc_t change back to etc_t.
Tue Sep 18 00:00:00 2007 Dan Walsh 3.0.8-1
- Allow cron to search nfs and samba homedirs
Wed Sep 12 00:00:00 2007 Dan Walsh 3.0.7-10
- Allow NetworkManager to dbus chat with yum-updated
Wed Sep 12 00:00:00 2007 Dan Walsh 3.0.7-9
- Allow xfs to bind to port 7100
Tue Sep 11 00:00:00 2007 Dan Walsh 3.0.7-8
- Allow newalias/sendmail dac_override
- Allow bind to bind to all udp ports
Sat Sep 8 00:00:00 2007 Dan Walsh 3.0.7-7
- Turn off direct transition
Sat Sep 8 00:00:00 2007 Dan Walsh 3.0.7-6
- Allow wine to run in system role
Fri Sep 7 00:00:00 2007 Dan Walsh 3.0.7-5
- Fix java labeling
Fri Sep 7 00:00:00 2007 Dan Walsh 3.0.7-4
- Define user_home_type as home_type
Wed Aug 29 00:00:00 2007 Dan Walsh 3.0.7-3
- Allow sendmail to create etc_aliases_t
Wed Aug 29 00:00:00 2007 Dan Walsh 3.0.7-2
- Allow login programs to read symlinks on homedirs
Tue Aug 28 00:00:00 2007 Dan Walsh 3.0.7-1
- Update an readd modules
Sat Aug 25 00:00:00 2007 Dan Walsh 3.0.6-3
- Cleanup spec file
Sat Aug 25 00:00:00 2007 Dan Walsh 3.0.6-2
- Allow xserver to be started by unconfined process and talk to tty
Thu Aug 23 00:00:00 2007 Dan Walsh 3.0.6-1
- Upgrade to upstream to grab postgressql changes
Wed Aug 22 00:00:00 2007 Dan Walsh 3.0.5-11
- Add setransd for mls policy
Tue Aug 21 00:00:00 2007 Dan Walsh 3.0.5-10
- Add ldconfig_cache_t
Sun Aug 19 00:00:00 2007 Dan Walsh 3.0.5-9
- Allow sshd to write to proc_t for afs login
Sun Aug 19 00:00:00 2007 Dan Walsh 3.0.5-8
- Allow xserver access to urand
Wed Aug 15 00:00:00 2007 Dan Walsh 3.0.5-7
- allow dovecot to search mountpoints
Sun Aug 12 00:00:00 2007 Dan Walsh 3.0.5-6
- Fix Makefile for building policy modules
Sat Aug 11 00:00:00 2007 Dan Walsh 3.0.5-5
- Fix dhcpc startup of service
Sat Aug 11 00:00:00 2007 Dan Walsh 3.0.5-4
- Fix dbus chat to not happen for xguest and guest users
Tue Aug 7 00:00:00 2007 Dan Walsh 3.0.5-3
- Fix nagios cgi
- allow squid to communicate with winbind
Tue Aug 7 00:00:00 2007 Dan Walsh 3.0.5-2
- Fixes for ldconfig
Fri Aug 3 00:00:00 2007 Dan Walsh 3.0.5-1
- Update from upstream
Thu Aug 2 00:00:00 2007 Dan Walsh 3.0.4-6
- Add nasd support
Thu Aug 2 00:00:00 2007 Dan Walsh 3.0.4-5
- Fix new usb devices and dmfm
Tue Jul 31 00:00:00 2007 Dan Walsh 3.0.4-4
- Eliminate mount_ntfs_t policy, merge into mount_t
Tue Jul 31 00:00:00 2007 Dan Walsh 3.0.4-3
- Allow xserver to write to ramfs mounted by rhgb
Tue Jul 24 00:00:00 2007 Dan Walsh 3.0.4-2
- Add context for dbus machine id
Tue Jul 24 00:00:00 2007 Dan Walsh 3.0.4-1
- Update with latest changes from upstream
Tue Jul 24 00:00:00 2007 Dan Walsh 3.0.3-6
- Fix prelink to handle execmod
Tue Jul 24 00:00:00 2007 Dan Walsh 3.0.3-5
- Add ntpd_key_t to handle secret data
Sat Jul 21 00:00:00 2007 Dan Walsh 3.0.3-4
- Add anon_inodefs
- Allow unpriv user exec pam_exec_t
- Fix trigger
Sat Jul 21 00:00:00 2007 Dan Walsh 3.0.3-3
- Allow cups to use generic usb
- fix inetd to be able to run random apps (git)
Fri Jul 20 00:00:00 2007 Dan Walsh 3.0.3-2
- Add proper contexts for rsyslogd
Fri Jul 20 00:00:00 2007 Dan Walsh 3.0.3-1
- Fixes for xguest policy
Wed Jul 18 00:00:00 2007 Dan Walsh 3.0.2-9
- Allow execution of gconf
Sun Jul 15 00:00:00 2007 Dan Walsh 3.0.2-8
- Fix moilscanner update problem
Fri Jul 13 00:00:00 2007 Dan Walsh 3.0.2-7
- Begin adding policy to separate setsebool from semanage
- Fix xserver.if definition to not break sepolgen.if
Thu Jul 12 00:00:00 2007 Dan Walsh 3.0.2-5
- Add new devices
Wed Jul 11 00:00:00 2007 Dan Walsh 3.0.2-4
- Add brctl policy
Sat Jul 7 00:00:00 2007 Dan Walsh 3.0.2-3
- Fix root login to include system_r
Sat Jul 7 00:00:00 2007 Dan Walsh 3.0.2-2
- Allow prelink to read kernel sysctls
Tue Jul 3 00:00:00 2007 Dan Walsh 3.0.1-5
- Default to user_u:system_r:unconfined_t
Mon Jul 2 00:00:00 2007 Dan Walsh 3.0.1-4
- fix squid
- Fix rpm running as uid
Wed Jun 27 00:00:00 2007 Dan Walsh 3.0.1-3
- Fix syslog declaration
Wed Jun 27 00:00:00 2007 Dan Walsh 3.0.1-2
- Allow avahi to access inotify
- Remove a lot of bogus security_t:filesystem avcs
Sat May 26 00:00:00 2007 Dan Walsh 3.0.1-1
- Remove ifdef strict policy from upstream
Sat May 19 00:00:00 2007 Dan Walsh 2.6.5-3
- Remove ifdef strict to allow user_u to login
Sat May 19 00:00:00 2007 Dan Walsh 2.6.5-2
- Fix for amands
- Allow semanage to read pp files
- Allow rhgb to read xdm_xserver_tmp
Sat May 19 00:00:00 2007 Dan Walsh 2.6.4-7
- Allow kerberos servers to use ldap for backing store
Fri May 18 00:00:00 2007 Dan Walsh 2.6.4-6
- allow alsactl to read kernel state
Thu May 17 00:00:00 2007 Dan Walsh 2.6.4-5
- More fixes for alsactl
- Transition from hal and modutils
- Fixes for suspend resume.
- insmod domtrans to alsactl
- insmod writes to hal log
Thu May 17 00:00:00 2007 Dan Walsh 2.6.4-2
- Allow unconfined_t to transition to NetworkManager_t
- Fix netlabel policy
Tue May 15 00:00:00 2007 Dan Walsh 2.6.4-1
- Update to latest from upstream
Sat May 5 00:00:00 2007 Dan Walsh 2.6.3-1
- Update to latest from upstream
Tue May 1 00:00:00 2007 Dan Walsh 2.6.2-1
- Update to latest from upstream
Sat Apr 28 00:00:00 2007 Dan Walsh 2.6.1-4
- Allow pcscd_t to send itself signals
Sat Apr 28 00:00:00 2007 Dan Walsh 2.6.1-3
-
Thu Apr 26 00:00:00 2007 Dan Walsh 2.6.1-2
- Fixes for unix_update
- Fix logwatch to be able to search all dirs
Tue Apr 24 00:00:00 2007 Dan Walsh 2.6.1-1
- Upstream bumped the version
Fri Apr 20 00:00:00 2007 Dan Walsh 2.5.12-12
- Allow consolekit to syslog
- Allow ntfs to work with hal
Fri Apr 20 00:00:00 2007 Dan Walsh 2.5.12-11
- Allow iptables to read etc_runtime_t
Fri Apr 20 00:00:00 2007 Dan Walsh 2.5.12-10
- MLS Fixes
Thu Apr 19 00:00:00 2007 Dan Walsh 2.5.12-8
- Fix path of /etc/lvm/cache directory
- Fixes for alsactl and pppd_t
- Fixes for consolekit
Wed Apr 18 00:00:00 2007 Dan Walsh 2.5.12-5
- Allow insmod_t to mount kvmfs_t filesystems
Wed Apr 18 00:00:00 2007 Dan Walsh 2.5.12-4
- Rwho policy
- Fixes for consolekit
Fri Apr 13 00:00:00 2007 Dan Walsh 2.5.12-3
- fixes for fusefs
Fri Apr 13 00:00:00 2007 Dan Walsh 2.5.12-2
- Fix samba_net to allow it to view samba_var_t
Wed Apr 11 00:00:00 2007 Dan Walsh 2.5.12-1
- Update to upstream
Wed Apr 11 00:00:00 2007 Dan Walsh 2.5.11-8
- Fix Sonypic backlight
- Allow snmp to look at squid_conf_t
Tue Apr 10 00:00:00 2007 Dan Walsh 2.5.11-7
- Fixes for pyzor, cyrus, consoletype on everything installs
Tue Apr 10 00:00:00 2007 Dan Walsh 2.5.11-6
- Fix hald_acl_t to be able to getattr/setattr on usb devices
- Dontaudit write to unconfined_pipes for load_policy
Fri Apr 6 00:00:00 2007 Dan Walsh 2.5.11-5
- Allow bluetooth to read inotifyfs
Thu Apr 5 00:00:00 2007 Dan Walsh 2.5.11-4
- Fixes for samba domain controller.
- Allow ConsoleKit to look at ttys
Wed Apr 4 00:00:00 2007 Dan Walsh 2.5.11-3
- Fix interface call
Wed Apr 4 00:00:00 2007 Dan Walsh 2.5.11-2
- Allow syslog-ng to read /var
- Allow locate to getattr on all filesystems
- nscd needs setcap
Tue Mar 27 00:00:00 2007 Dan Walsh 2.5.11-1
- Update to upstream
Fri Mar 23 23:00:00 2007 Dan Walsh 2.5.10-2
- Allow samba to run groupadd
Thu Mar 22 23:00:00 2007 Dan Walsh 2.5.10-1
- Update to upstream
Thu Mar 22 23:00:00 2007 Dan Walsh 2.5.9-6
- Allow mdadm to access generic scsi devices
Wed Mar 21 23:00:00 2007 Dan Walsh 2.5.9-5
- Fix labeling on udev.tbl dirs
Tue Mar 20 23:00:00 2007 Dan Walsh 2.5.9-4
- Fixes for logwatch
Tue Mar 20 23:00:00 2007 Dan Walsh 2.5.9-3
- Add fusermount and mount_ntfs policy
Tue Mar 20 23:00:00 2007 Dan Walsh 2.5.9-2
- Update to upstream
- Allow saslauthd to use kerberos keytabs
Mon Mar 19 23:00:00 2007 Dan Walsh 2.5.8-8
- Fixes for samba_var_t
Mon Mar 19 23:00:00 2007 Dan Walsh 2.5.8-7
- Allow networkmanager to setpgid
- Fixes for hal_acl_t
Mon Mar 19 23:00:00 2007 Dan Walsh 2.5.8-6
- Remove disable_trans booleans
- hald_acl_t needs to talk to nscd
Thu Mar 15 23:00:00 2007 Dan Walsh 2.5.8-5
- Fix prelink to be able to manage usr dirs.
Tue Mar 13 23:00:00 2007 Dan Walsh 2.5.8-4
- Allow insmod to launch init scripts
Tue Mar 13 23:00:00 2007 Dan Walsh 2.5.8-3
- Remove setsebool policy
Mon Mar 12 23:00:00 2007 Dan Walsh 2.5.8-2
- Fix handling of unlabled_t packets
Thu Mar 8 23:00:00 2007 Dan Walsh 2.5.8-1
- More of my patches from upstream
Thu Mar 1 23:00:00 2007 Dan Walsh 2.5.7-1
- Update to latest from upstream
- Add fail2ban policy
Wed Feb 28 23:00:00 2007 Dan Walsh 2.5.6-1
- Update to remove security_t:filesystem getattr problems
Fri Feb 23 23:00:00 2007 Dan Walsh 2.5.5-2
- Policy for consolekit
Fri Feb 23 23:00:00 2007 Dan Walsh 2.5.5-1
- Update to latest from upstream
Wed Feb 21 23:00:00 2007 Dan Walsh 2.5.4-2
- Revert Nemiver change
- Set sudo as a corecmd so prelink will work, remove sudoedit mapping, since this will not work, it does not transition.
- Allow samba to execute useradd
Tue Feb 20 23:00:00 2007 Dan Walsh 2.5.4-1
- Upgrade to the latest from upstream
Thu Feb 15 23:00:00 2007 Dan Walsh 2.5.3-3
- Add sepolgen support
- Add bugzilla policy
Wed Feb 14 23:00:00 2007 Dan Walsh 2.5.3-2
- Fix file context for nemiver
Sun Feb 11 23:00:00 2007 Dan Walsh 2.5.3-1
- Remove include sym link
Mon Feb 5 23:00:00 2007 Dan Walsh 2.5.2-6
- Allow mozilla, evolution and thunderbird to read dev_random.
Resolves: #227002
- Allow spamd to connect to smtp port
Resolves: #227184
- Fixes to make ypxfr work
Resolves: #227237
Sun Feb 4 23:00:00 2007 Dan Walsh 2.5.2-5
- Fix ssh_agent to be marked as an executable
- Allow Hal to rw sound device
Thu Feb 1 23:00:00 2007 Dan Walsh 2.5.2-4
- Fix spamassisin so crond can update spam files
- Fixes to allow kpasswd to work
- Fixes for bluetooth
Thu Jan 25 23:00:00 2007 Dan Walsh 2.5.2-3
- Remove some targeted diffs in file context file
Thu Jan 25 23:00:00 2007 Dan Walsh 2.5.2-2
- Fix squid cachemgr labeling
Thu Jan 25 23:00:00 2007 Dan Walsh 2.5.2-1
- Add ability to generate webadm_t policy
- Lots of new interfaces for httpd
- Allow sshd to login as unconfined_t
Mon Jan 22 23:00:00 2007 Dan Walsh 2.5.1-5
- Continue fixing, additional user domains
Wed Jan 10 23:00:00 2007 Dan Walsh 2.5.1-4
- Begin adding user confinement to targeted policy
Wed Jan 10 23:00:00 2007 Dan Walsh 2.5.1-2
- Fixes for prelink, ktalkd, netlabel
Mon Jan 8 23:00:00 2007 Dan Walsh 2.5.1-1
- Allow prelink when run from rpm to create tmp files
Resolves: #221865
- Remove file_context for exportfs
Resolves: #221181
- Allow spamassassin to create ~/.spamassissin
Resolves: #203290
- Allow ssh access to the krb tickets
- Allow sshd to change passwd
- Stop newrole -l from working on non securetty
Resolves: #200110
- Fixes to run prelink in MLS machine
Resolves: #221233
- Allow spamassassin to read var_lib_t dir
Resolves: #219234
Fri Dec 29 23:00:00 2006 Dan Walsh 2.4.6-20
- fix mplayer to work under strict policy
- Allow iptables to use nscd
Resolves: #220794
Thu Dec 28 23:00:00 2006 Dan Walsh 2.4.6-19
- Add gconf policy and make it work with strict
Sat Dec 23 23:00:00 2006 Dan Walsh 2.4.6-18
- Many fixes for strict policy and by extension mls.
Fri Dec 22 23:00:00 2006 Dan Walsh 2.4.6-17
- Fix to allow ftp to bind to ports > 1024
Resolves: #219349
Tue Dec 19 23:00:00 2006 Dan Walsh 2.4.6-16
- Allow semanage to exec it self. Label genhomedircon as semanage_exec_t
Resolves: #219421
- Allow sysadm_lpr_t to manage other print spool jobs
Resolves: #220080
Mon Dec 18 23:00:00 2006 Dan Walsh 2.4.6-15
- allow automount to setgid
Resolves: #219999
Thu Dec 14 23:00:00 2006 Dan Walsh 2.4.6-14
- Allow cron to polyinstatiate
- Fix creation of boot flags
Resolves: #207433
Thu Dec 14 23:00:00 2006 Dan Walsh 2.4.6-13
- Fixes for irqbalance
Resolves: #219606
Thu Dec 14 23:00:00 2006 Dan Walsh 2.4.6-12
- Fix vixie-cron to work on mls
Resolves: #207433
Wed Dec 13 23:00:00 2006 Dan Walsh 2.4.6-11
Resolves: #218978
Tue Dec 12 23:00:00 2006 Dan Walsh 2.4.6-10