Changelog for
selinux-policy-strict-2.2.40-1.ML5.noarch.rpm :
Fri Jun 16 00:00:00 2006 Eddy Nigg
- Rebuild for StartCom Linux 5.0.x
Thu May 18 00:00:00 2006 Dan Walsh 2.2.40-1.fc5
- Bump for fc5
Wed May 17 00:00:00 2006 Dan Walsh 2.2.40-1
- Update from upstream
Tue May 16 00:00:00 2006 Dan Walsh 2.2.39-2
- Fixes for amavis
Tue May 16 00:00:00 2006 Dan Walsh 2.2.39-1
- Update from upstream
Sat May 13 00:00:00 2006 Dan Walsh 2.2.38-6
- Allow auditctl to search all directories
Fri May 12 00:00:00 2006 Dan Walsh 2.2.38-5
- Add acquire service for mono.
Fri May 12 00:00:00 2006 Dan Walsh 2.2.38-4
- Turn off allow_execmem boolean
- Allow ftp dac_override when allowed to access users homedirs
Thu May 11 00:00:00 2006 Dan Walsh 2.2.38-3
- Clean up spec file
- Transition from unconfined_t to prelink_t
Tue May 9 00:00:00 2006 Dan Walsh 2.2.38-2
- Allow execution of cvs command
Tue May 9 00:00:00 2006 Dan Walsh 2.2.38-1.fc5
- Bump for fc5
Sat May 6 00:00:00 2006 Dan Walsh 2.2.38-1
- Update to upstream
Thu May 4 00:00:00 2006 Dan Walsh 2.2.37-1
- Update to upstream
Tue May 2 00:00:00 2006 Dan Walsh 2.2.36-2.fc5
- Bump for fc5
Tue May 2 00:00:00 2006 Dan Walsh 2.2.36-2
- Fix libjvm spec
Wed Apr 26 00:00:00 2006 Dan Walsh 2.2.36-1
- Update to upstream
Wed Apr 26 00:00:00 2006 James Antill 2.2.35-2
- Add xm policy
- Fix policygentool
Tue Apr 25 00:00:00 2006 Dan Walsh 2.2.35-1
- Update to upstream
- Fix postun to only disable selinux on full removal of the packages
Sat Apr 22 00:00:00 2006 Dan Walsh 2.2.34-3.fc5
- Bump for fc5
Sat Apr 22 00:00:00 2006 Dan Walsh 2.2.34-3
- Allow mono to chat with unconfined
Fri Apr 21 00:00:00 2006 Dan Walsh 2.2.34-2
- Allow procmail to sendmail
- Allow nfs to share dosfs
Fri Apr 21 00:00:00 2006 Dan Walsh 2.2.34-1
- Update to latest from upstream
- Allow selinux-policy to be removed and kernel not to crash
Wed Apr 19 00:00:00 2006 Dan Walsh 2.2.33-1
- Update to latest from upstream
- Add James Antill patch for xen
- Many fixes for pegasus
Sun Apr 16 00:00:00 2006 Dan Walsh 2.2.32-2
- Add unconfined_mount_t
- Allow privoxy to connect to httpd_cache
- fix cups labeleing on /var/cache/cups
Sun Apr 16 00:00:00 2006 Dan Walsh 2.2.32-1.fc5
- Bump for fc5
Sat Apr 15 00:00:00 2006 Dan Walsh 2.2.32-1
- Update to latest from upstream
Sat Apr 15 00:00:00 2006 Dan Walsh 2.2.31-1
- Update to latest from upstream
- Allow mono and unconfined to talk to initrc_t dbus objects
Wed Apr 12 00:00:00 2006 Dan Walsh 2.2.30-2
- Change libraries.fc to stop shlib_t form overriding texrel_shlib_t
Wed Apr 12 00:00:00 2006 Dan Walsh 2.2.30-1
- Fix samba creating dirs in homedir
- Fix NFS so its booleans would work
Tue Apr 11 00:00:00 2006 Dan Walsh 2.2.29-6
- Allow secadm_t ability to relabel all files
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t
Tue Apr 11 00:00:00 2006 Russell Coker 2.2.29-5
- Fixed mailman with Postfix #183928
- Allowed semanage to create file_context files.
- Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
to bind to reserved ports. #149030
- Don\'t allow devpts_t to be associated with tmp_t.
- Allow hald_t to stat all mountpoints.
- Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
- Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
/etc/mtab.
- Changed the file_contexts to not have a regex before the first ^/[a-z]/
whenever possible, makes restorecon slightly faster.
- Correct the label of /etc/named.caching-nameserver.conf
- Now label /usr/src/kernels/.+/lib(/.
*)? as usr_t instead of
/usr/src(/.
*)?/lib(/.
*)? - I don\'t think we need anything else under /usr/src
hit by this.
- Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
xenstored_t rw access to the xen device node.
Wed Apr 5 00:00:00 2006 Dan Walsh 2.2.29-4
- More textrel_shlib_t file path fixes
- Add ada support
Wed Apr 5 00:00:00 2006 Dan Walsh 2.2.29-3.fc5
- Bump for fc5
Tue Apr 4 00:00:00 2006 Dan Walsh 2.2.29-3
- Get auditctl working in MLS policy
Tue Apr 4 00:00:00 2006 Dan Walsh 2.2.29-2
- Add mono dbus support
- Lots of file_context fixes for textrel_shlib_t in FC5
- Turn off execmem auditallow since they are filling log files
Fri Mar 31 00:00:00 2006 Dan Walsh 2.2.29-1
- Update to upstream
Fri Mar 31 00:00:00 2006 Dan Walsh 2.2.28-3
- Allow automount and dbus to read cert files
Fri Mar 31 00:00:00 2006 Dan Walsh 2.2.28-2
- Fix ftp policy
- Fix secadm running of auditctl
Tue Mar 28 00:00:00 2006 Dan Walsh 2.2.28-1
- Update to upstream
Wed Mar 22 23:00:00 2006 Dan Walsh 2.2.27-1
- Update to upstream
Wed Mar 22 23:00:00 2006 Dan Walsh 2.2.25-3.fc5
- Bump for fc5
- Fixes for hplip and klogd
Wed Mar 22 23:00:00 2006 Dan Walsh 2.2.25-3
- Fix policyhelp
Wed Mar 22 23:00:00 2006 Dan Walsh 2.2.25-2.fc5
- Rebuild for FC5
Wed Mar 22 23:00:00 2006 Dan Walsh 2.2.25-2
- Fix pam_console handling of usb_device
- dontaudit logwatch reading /mnt dir
Fri Mar 17 23:00:00 2006 Dan Walsh 2.2.24-1
- Update to upstream
Wed Mar 15 23:00:00 2006 Dan Walsh 2.2.23-19
- Get transition rules to create policy.20 at SystemHigh
Tue Mar 14 23:00:00 2006 Dan Walsh 2.2.23-18
- Allow secadmin to shutdown system
- Allow sendmail to exec newalias
Tue Mar 14 23:00:00 2006 Dan Walsh 2.2.23-17
- MLS Fixes
dmidecode needs mls_file_read_up
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t
Tue Mar 14 23:00:00 2006 Karsten Hopp 2.2.23-16
- fix buildroot usage (#185391)
Thu Mar 9 23:00:00 2006 Dan Walsh 2.2.23-15
- Get rid of mount/fsdisk scan of /dev messages
- Additional fixes for suspend/resume
Thu Mar 9 23:00:00 2006 Dan Walsh 2.2.23-14
- Fake make to rebuild enableaudit.pp
Thu Mar 9 23:00:00 2006 Dan Walsh 2.2.23-13
- Get xen networking running.
Thu Mar 9 23:00:00 2006 Dan Walsh 2.2.23-12
- Fixes for Xen
- enableaudit should not be the same as base.pp
- Allow ps to work for all process
Thu Mar 9 23:00:00 2006 Jeremy Katz - 2.2.23-11
- more xen policy fixups
Wed Mar 8 23:00:00 2006 Jeremy Katz - 2.2.23-10
- more xen fixage (#184393)
Wed Mar 8 23:00:00 2006 Dan Walsh 2.2.23-9
- Fix blkid specification
- Allow postfix to execute mailman_que
Wed Mar 8 23:00:00 2006 Dan Walsh 2.2.23-8
- Blkid changes
- Allow udev access to usb_device_t
- Fix post script to create targeted policy config file
Wed Mar 8 23:00:00 2006 Dan Walsh 2.2.23-7
- Allow lvm tools to create drevice dir
Tue Mar 7 23:00:00 2006 Dan Walsh 2.2.23-5
- Add Xen support
Mon Mar 6 23:00:00 2006 Dan Walsh 2.2.23-4
- Fixes for cups
- Make cryptosetup work with hal
Sun Mar 5 23:00:00 2006 Dan Walsh 2.2.23-3
- Load Policy needs translock
Sat Mar 4 23:00:00 2006 Dan Walsh 2.2.23-2
- Fix cups html interface
Sat Mar 4 23:00:00 2006 Dan Walsh 2.2.23-1
- Add hal changes suggested by Jeremy
- add policyhelp to point at policy html pages
Mon Feb 27 23:00:00 2006 Dan Walsh 2.2.22-2
- Additional fixes for nvidia and cups
Mon Feb 27 23:00:00 2006 Dan Walsh 2.2.22-1
- Update to upstream
- Merged my latest fixes
- Fix cups policy to handle unix domain sockets
Sat Feb 25 23:00:00 2006 Dan Walsh 2.2.21-9
- NSCD socket is in nscd_var_run_t needs to be able to search dir
Fri Feb 24 23:00:00 2006 Dan Walsh 2.2.21-8
- Fixes Apache interface file
Fri Feb 24 23:00:00 2006 Dan Walsh 2.2.21-7
- Fixes for new version of cups
Fri Feb 24 23:00:00 2006 Dan Walsh 2.2.21-6
- Turn off polyinstatiate util after FC5
Fri Feb 24 23:00:00 2006 Dan Walsh 2.2.21-5
- Fix problem with privoxy talking to Tor
Wed Feb 22 23:00:00 2006 Dan Walsh 2.2.21-4
- Turn on polyinstatiation
Wed Feb 22 23:00:00 2006 Dan Walsh 2.2.21-3
- Don\'t transition from unconfined_t to fsadm_t
Wed Feb 22 23:00:00 2006 Dan Walsh 2.2.21-2
- Fix policy update model.
Wed Feb 22 23:00:00 2006 Dan Walsh 2.2.21-1
- Update to upstream
Wed Feb 22 23:00:00 2006 Dan Walsh 2.2.20-1
- Fix load_policy to work on MLS
- Fix cron_rw_system_pipes for postfix_postdrop_t
- Allow audotmount to run showmount
Tue Feb 21 23:00:00 2006 Dan Walsh 2.2.19-2
- Fix swapon
- allow httpd_sys_script_t to be entered via a shell
- Allow httpd_sys_script_t to read eventpolfs
Tue Feb 21 23:00:00 2006 Dan Walsh 2.2.19-1
- Update from upstream
Tue Feb 21 23:00:00 2006 Dan Walsh 2.2.18-2
- allow cron to read apache files
Tue Feb 21 23:00:00 2006 Dan Walsh 2.2.18-1
- Fix vpnc policy to work from NetworkManager
Mon Feb 20 23:00:00 2006 Dan Walsh 2.2.17-2
- Update to upstream
- Fix semoudle polcy
Thu Feb 16 23:00:00 2006 Dan Walsh 2.2.16-1
- Update to upstream
- fix sysconfig/selinux link
Wed Feb 15 23:00:00 2006 Dan Walsh 2.2.15-4
- Add router port for zebra
- Add imaze port for spamd
- Fixes for amanda and java
Tue Feb 14 23:00:00 2006 Dan Walsh 2.2.15-3
- Fix bluetooth handling of usb devices
- Fix spamd reading of ~/
- fix nvidia spec
Tue Feb 14 23:00:00 2006 Dan Walsh 2.2.15-1
- Update to upsteam
Mon Feb 13 23:00:00 2006 Dan Walsh 2.2.14-2
- Add users_extra files
Fri Feb 10 23:00:00 2006 Dan Walsh 2.2.14-1
- Update to upstream
Fri Feb 10 23:00:00 2006 Dan Walsh 2.2.13-1
- Add semodule policy
Tue Feb 7 23:00:00 2006 Dan Walsh 2.2.12-1
- Update from upstream
Mon Feb 6 23:00:00 2006 Dan Walsh 2.2.11-2
- Fix for spamd to use razor port
Fri Feb 3 23:00:00 2006 Dan Walsh 2.2.11-1
- Fixes for mcs
- Turn on mount and fsadm for unconfined_t
Wed Feb 1 23:00:00 2006 Dan Walsh 2.2.10-1
- Fixes for the -devel package
Wed Feb 1 23:00:00 2006 Dan Walsh 2.2.9-2
- Fix for spamd to use ldap
Fri Jan 27 23:00:00 2006 Dan Walsh 2.2.9-1
- Update to upstream
Fri Jan 27 23:00:00 2006 Dan Walsh 2.2.8-2
- Update to upstream
- Fix rhgb, and other Xorg startups
Thu Jan 26 23:00:00 2006 Dan Walsh 2.2.7-1
- Update to upstream
Thu Jan 26 23:00:00 2006 Dan Walsh 2.2.6-3
- Separate out role of secadm for mls
Thu Jan 26 23:00:00 2006 Dan Walsh 2.2.6-2
- Add inotifyfs handling
Thu Jan 26 23:00:00 2006 Dan Walsh 2.2.6-1
- Update to upstream
- Put back in changes for pup/zen
Tue Jan 24 23:00:00 2006 Dan Walsh 2.2.5-1
- Many changes for MLS
- Turn on strict policy
Mon Jan 23 23:00:00 2006 Dan Walsh 2.2.4-1
- Update to upstream
Wed Jan 18 23:00:00 2006 Dan Walsh 2.2.3-1
- Update to upstream
- Fixes for booting and logging in on MLS machine
Wed Jan 18 23:00:00 2006 Dan Walsh 2.2.2-1
- Update to upstream
- Turn off execheap execstack for unconfined users
- Add mono/wine policy to allow execheap and execstack for them
- Add execheap for Xdm policy
Wed Jan 18 23:00:00 2006 Dan Walsh 2.2.1-1
- Update to upstream
- Fixes to fetchmail,
Tue Jan 17 23:00:00 2006 Dan Walsh 2.1.13-1
- Update to upstream
Tue Jan 17 23:00:00 2006 Dan Walsh 2.1.12-3
- Fix for procmail/spamassasin
- Update to upstream
- Add rules to allow rpcd to work with unlabeled_networks.
Sat Jan 14 23:00:00 2006 Dan Walsh 2.1.11-1
- Update to upstream
- Fix ftp Man page
Fri Jan 13 23:00:00 2006 Dan Walsh 2.1.10-1
- Update to upstream
Wed Jan 11 23:00:00 2006 Jeremy Katz - 2.1.9-2
- fix pup transitions (#177262)
- fix xen disks (#177599)
Tue Jan 10 23:00:00 2006 Dan Walsh 2.1.9-1
- Update to upstream
Tue Jan 10 23:00:00 2006 Dan Walsh 2.1.8-3
- More Fixes for hal and readahead
Mon Jan 9 23:00:00 2006 Dan Walsh 2.1.8-2
- Fixes for hal and readahead
Mon Jan 9 23:00:00 2006 Dan Walsh 2.1.8-1
- Update to upstream
- Apply
Sat Jan 7 23:00:00 2006 Dan Walsh 2.1.7-4
- Add wine and fix hal problems
Fri Jan 6 23:00:00 2006 Dan Walsh 2.1.7-3
- Handle new location of hal scripts
Thu Jan 5 23:00:00 2006 Dan Walsh 2.1.7-2
- Allow su to read /etc/mtab
Wed Jan 4 23:00:00 2006 Dan Walsh 2.1.7-1
- Update to upstream
Tue Jan 3 23:00:00 2006 Dan Walsh 2.1.6-24
- Fix \"libsemanage.parse_module_headers: Data did not represent a module.\" problem
Tue Jan 3 23:00:00 2006 Dan Walsh 2.1.6-23
- Allow load_policy to read /etc/mtab
Mon Jan 2 23:00:00 2006 Dan Walsh 2.1.6-22
- Fix dovecot to allow dovecot_auth to look at /tmp
Mon Jan 2 23:00:00 2006 Dan Walsh 2.1.6-21
- Allow restorecon to read unlabeled_t directories in order to fix labeling.
Fri Dec 30 23:00:00 2005 Dan Walsh 2.1.6-20
- Add Logwatch policy
Wed Dec 28 23:00:00 2005 Dan Walsh 2.1.6-18
- Fix /dev/ub[a-z] file context
Tue Dec 27 23:00:00 2005 Dan Walsh 2.1.6-17
- Fix library specification
- Give kudzu execmem privs
Thu Dec 22 23:00:00 2005 Dan Walsh 2.1.6-16
- Fix hostname in targeted policy
Wed Dec 21 23:00:00 2005 Dan Walsh 2.1.6-15
- Fix passwd command on mls
Wed Dec 21 23:00:00 2005 Dan Walsh 2.1.6-14
- Lots of fixes to make mls policy work
Tue Dec 20 23:00:00 2005 Dan Walsh 2.1.6-13
- Add dri libs to textrel_shlib_t
- Add system_r role for java
- Add unconfined_exec_t for vncserver
- Allow slapd to use kerberos
Mon Dec 19 23:00:00 2005 Dan Walsh 2.1.6-11
- Add man pages
Fri Dec 16 23:00:00 2005 Dan Walsh 2.1.6-10
- Add enableaudit.pp
Fri Dec 16 23:00:00 2005 Dan Walsh 2.1.6-9
- Fix mls policy
Fri Dec 16 23:00:00 2005 Dan Walsh 2.1.6-8
- Update mls file from old version
Thu Dec 15 23:00:00 2005 Dan Walsh 2.1.6-5
- Add sids back in
- Rebuild with update checkpolicy
Thu Dec 15 23:00:00 2005 Dan Walsh 2.1.6-4
- Fixes to allow automount to use portmap
- Fixes to start kernel in s0-s15:c0.c255
Wed Dec 14 23:00:00 2005 Dan Walsh 2.1.6-3
- Add java unconfined/execmem policy
Wed Dec 14 23:00:00 2005 Dan Walsh 2.1.6-2
- Add file context for /var/cvs
- Dontaudit webalizer search of homedir
Tue Dec 13 23:00:00 2005 Dan Walsh 2.1.6-1
- Update from upstream
Tue Dec 13 23:00:00 2005 Dan Walsh 2.1.4-2
- Clean up spec
- range_transition crond to SystemHigh
Mon Dec 12 23:00:00 2005 Dan Walsh 2.1.4-1
- Fixes for hal
- Update to upstream
Mon Dec 12 23:00:00 2005 Dan Walsh 2.1.3-1
- Turn back on execmem since we need it for java, firefox, ooffice
- Allow gpm to stream socket to itself
Mon Dec 12 23:00:00 2005 Jeremy Katz - 2.1.2-3
- fix requirements to be on the actual packages so that policy can get
created properly at install time
Sat Dec 10 23:00:00 2005 Dan Walsh 2.1.2-2
- Allow unconfined_t to execmod texrel_shlib_t
Fri Dec 9 23:00:00 2005 Dan Walsh 2.1.2-1
- Update to upstream
- Turn off allow_execmem and allow_execmod booleans
- Add tcpd and automount policies
Thu Dec 8 23:00:00 2005 Dan Walsh 2.1.1-3
- Add two new httpd booleans, turned off by default
* httpd_can_network_relay
* httpd_can_network_connect_db
Thu Dec 8 23:00:00 2005 Dan Walsh 2.1.1-2
- Add ghost for policy.20
Thu Dec 8 23:00:00 2005 Dan Walsh 2.1.1-1
- Update to upstream
- Turn off boolean allow_execstack
Thu Dec 8 23:00:00 2005 Dan Walsh 2.1.0-3
- Change setrans-mls to use new libsetrans
- Add default_context rule for xdm
Thu Dec 8 23:00:00 2005 Dan Walsh 2.1.0-2.
- Change Requires to PreReg for requiring of policycoreutils on install
Wed Dec 7 23:00:00 2005 Dan Walsh 2.1.0-1.
- New upstream release
Wed Dec 7 23:00:00 2005 Dan Walsh 2.0.11-2.
Add xdm policy
Tue Dec 6 23:00:00 2005 Dan Walsh 2.0.11-1.
Update from upstream
Fri Dec 2 23:00:00 2005 Dan Walsh 2.0.9-1.
Update from upstream
Fri Dec 2 23:00:00 2005 Dan Walsh 2.0.8-1.
Update from upstream
Fri Dec 2 23:00:00 2005 Dan Walsh 2.0.7-3
- Also trigger to rebuild policy for versions up to 2.0.7.
Tue Nov 29 23:00:00 2005 Dan Walsh 2.0.7-2
- No longer installing policy.20 file, anaconda handles the building of the app.
Tue Nov 29 23:00:00 2005 Dan Walsh 2.0.6-2
- Fixes for dovecot and saslauthd
Wed Nov 23 23:00:00 2005 Dan Walsh 2.0.5-4
- Cleanup pegasus and named
- Fix spec file
- Fix up passwd changing applications
Mon Nov 21 23:00:00 2005 Dan Walsh 2.0.5-1
-Update to latest from upstream
Mon Nov 21 23:00:00 2005 Dan Walsh 2.0.4-1
- Add rules for pegasus and avahi
Mon Nov 21 23:00:00 2005 Dan Walsh 2.0.2-2
- Start building MLS Policy
Fri Nov 18 23:00:00 2005 Dan Walsh 2.0.2-1
- Update to upstream
Wed Nov 9 23:00:00 2005 Dan Walsh 2.0.1-2
- Turn on bash
Wed Nov 9 23:00:00 2005 Dan Walsh 2.0.1-1
- Initial version
