Changelog for
selinux-policy-strict-sources-1.19.10-2.noarch.rpm :
* Thu Dec 02 2004 Dan Walsh
1.19-10-2- Bump for FC3
* Thu Dec 02 2004 Dan Walsh 1.19-10-1- Update to latest from NSA- Fix tty devices from IBM Platforms
* Thu Dec 02 2004 Dan Walsh 1.19-9-1- Update to add execmem and execmod
* Wed Dec 01 2004 Dan Walsh 1.19-8-4- Allow boolloader to can_exec_any
* Wed Dec 01 2004 Dan Walsh 1.19-8-3- Add ipx support- Fix portmap
* Tue Nov 30 2004 Dan Walsh 1.19-8-2- Make htdig work
* Tue Nov 30 2004 Dan Walsh 1.19-8-1- Cleanup several network_client calls- Update from upstream
* Tue Nov 30 2004 Dan Walsh 1.19-7-2- Remove root_dir_type, fix hotplug
* Tue Nov 30 2004 Dan Walsh 1.19-7-1- Update to Upstream
* Mon Nov 29 2004 Dan Walsh 1.19-6-1- Update to Upstream
* Wed Nov 24 2004 Dan Walsh 1.19-5-1- Update to Upstream- Convert to new network_macros.te
* Tue Nov 23 2004 Dan Walsh 1.19-4-4- Add proc_net for unconfined_t
* Mon Nov 22 2004 Dan Walsh 1.19-4-3- Fix location of selinuxenabled
* Mon Nov 22 2004 Dan Walsh 1.19-4-2- Add some rules to allow httpd_sys_content_t to access to httpdcontent if httpd_unified is seto
* Sun Nov 21 2004 Dan Walsh 1.19-4-1- Upgrade to match upstream- Require policycoreutils
* Fri Nov 19 2004 Dan Walsh 1.19-3-1- Upgrade to upstream- Add fixes for postgres and apache
* Thu Nov 18 2004 Dan Walsh 1.19-2-1- Upgrade to upstream
* Wed Nov 17 2004 Dan Walsh 1.19-1-14Add back in zebra
* Wed Nov 17 2004 Dan Walsh 1.19-1-13- don\'t transition from sysadm_t (unconfined_t) to system_mail_t whenexecuting sendmail in targeted policy
* Wed Nov 17 2004 Dan Walsh 1.19-1-12- Fixes for crond fifo file, httpd_unified, and cups
* Tue Nov 16 2004 Dan Walsh 1.19-1-11- Fixed for /dev/pmu and printconf
* Tue Nov 16 2004 Dan Walsh 1.19-1-10- Add boolean to allow httpd to communicate with tty
* Sat Nov 13 2004 Dan Walsh 1.19-1-9- Minor fixes- Add postgresql.te to targeted
* Fri Nov 12 2004 Dan Walsh 1.19-1-8- tighten security on squirrelmail
* Fri Nov 12 2004 Dan Walsh 1.19-1-7- Fixes to get squirrelmail working in targeted policy
* Thu Nov 11 2004 Dan Walsh 1.19-1-6- Remove unwanted te files to make policy smaller
* Thu Nov 11 2004 Dan Walsh 1.19-1-5- Add allow_kerberos for targeted policy and fix ntpd for targetd
* Wed Nov 10 2004 Dan Walsh 1.19-1-4- Fix mysql.te
* Wed Nov 10 2004 Dan Walsh 1.19-1-3- Cleanup of Dovecot and squirrelmail
* Wed Nov 10 2004 Dan Walsh 1.19-1-2- Allow httpd to read bin_t lnk_files
* Tue Nov 09 2004 Dan Walsh 1.19-1-1- Update from NSA
* Mon Nov 08 2004 Dan Walsh 1.18.2-4- Add /dev/pmu and privoxy fixes
* Mon Nov 08 2004 Dan Walsh 1.18.2-3- Complete lockdev and test with mincom
* Sat Nov 06 2004 Dan Walsh 1.18.2-2- Add preliminary lockdev defs
* Sat Nov 06 2004 Dan Walsh 1.18.2-1- Allow gpg to read/write user homedir files
* Sat Nov 06 2004 Dan Walsh 1.18.2-1- Merge with upstream- Allow users to read xdm pid files- Allow sysadm_t to communicate with xdm fifo file.
* Thu Nov 04 2004 Dan Walsh 1.18.1-3- ooffice is crashing because it needs to getattr on a dri device.
* Wed Nov 03 2004 Dan Walsh 1.18.1-2- Eliminate single user domain
* Tue Nov 02 2004 Dan Walsh 1.18.1-1- Update from NSA
* Tue Nov 02 2004 Dan Walsh 1.17.37-2- Many fixes for tighter can_network policy and nscd_client_domain
* Mon Nov 01 2004 Dan Walsh 1.17.37-1- Merge with upstream
* Sat Oct 30 2004 Dan Walsh 1.17.36-3- Eliminate ability to read tmp_t lnk_files
* Fri Oct 29 2004 Dan Walsh 1.17.36-2- Add ability to specify port to can_tcp_network
* Thu Oct 28 2004 Dan Walsh 1.17.36-1- Break out can_network in to can_tcp_network and can_udp_network- Add lots of nscd_client_domain
* Wed Oct 27 2004 Dan Walsh 1.17.35-2- Add russells patch for ntpdate- Add Colins batch for dbus_macro
* Wed Oct 27 2004 Dan Walsh 1.17.35-1- New fixes for fowner in setfiles and restorecon
* Tue Oct 26 2004 Dan Walsh 1.17.34-2- Fix spec file
* Tue Oct 26 2004 Dan Walsh 1.17.34-1- Update to latest from NSA
* Thu Oct 21 2004 Dan Walsh 1.17.33-2- Add some squid fixes and add disable_games boolean
* Wed Oct 20 2004 Dan Walsh 1.17.33-1- Update to latest from NSA- Add apache unified patch
* Tue Oct 19 2004 Dan Walsh 1.17.32-2- fixes for nscd- Fixes for /var/run file contexts
* Thu Oct 14 2004 Dan Walsh 1.17.32-1- Latest from NSA
* Thu Oct 14 2004 Dan Walsh 1.17.31-2- Begin fixing bugs when turning off unlimitedinitrc
* Thu Oct 14 2004 Dan Walsh 1.17.31-1- Small fixes to cleanup reboot- FTP RLOGIN RSH- Update with NSA
* Wed Oct 13 2004 Dan Walsh 1.17.30-2- Cleanup patch - Add removable_t associate
* Sun Oct 10 2004 Dan Walsh 1.17.30-1- Upstream merge from NSA- Add arpwatch.- Turned on every service on machine and got multiple avc messages.
* Sat Oct 09 2004 Dan Walsh 1.17.29-4- Change allow_ypbind to be a boolean.
* Fri Oct 08 2004 Dan Walsh 1.17.29-3- Add reserved_port_type
* Fri Oct 08 2004 Dan Walsh 1.17.29-2- minor fixes- Fix nfsd and ypbind
* Fri Oct 08 2004 Dan Walsh 1.17.29-1- Update for latest from NSA
* Thu Oct 07 2004 Dan Walsh 1.17.28-2- Add reiser fix- allow syslog_t to access tmpfs_t for minilog
* Thu Oct 07 2004 Dan Walsh 1.17.28-1- Update from NSA- Rearrange rpm.te file for targeted policy
* Wed Oct 06 2004 Dan Walsh 1.17.27-1- Update from NSA
* Tue Oct 05 2004 Dan Walsh 1.17.26-3- Fix inetd_child stuff.
* Tue Oct 05 2004 Dan Walsh 1.17.26-2- Cleanup sendmail policy.
* Sat Oct 02 2004 Dan Walsh 1.17.26-1- Update with NSA
* Fri Oct 01 2004 Dan Walsh 1.17.25-1- Update from NSA- more inetd fixes, mozilla fixes
* Fri Oct 01 2004 Dan Walsh 1.17.24-4- Minor fixes- Fix snmpd.te to allow creation of /var/net-snmp
* Thu Sep 30 2004 Dan Walsh 1.17.24-3- Add tvtime
* Thu Sep 30 2004 Dan Walsh 1.17.24-2- New fixes for comsat- Add removable_context
* Thu Sep 30 2004 Dan Walsh 1.17.24-1- New location for mailman- Update from NSA- Fixes for ktalkd
* Wed Sep 29 2004 Dan Walsh 1.17.23-2- add vpnc policy
* Tue Sep 28 2004 Dan Walsh 1.17.23-1- Add changes for homedir- Update to latest from NSA
* Tue Sep 28 2004 Dan Walsh 1.17.22-2- added ktalkd and other patches form Russell
* Tue Sep 28 2004 Dan Walsh 1.17.22-1- Remove screensaver stuff
* Sat Sep 25 2004 Dan Walsh 1.17.21-1- Latest from NSA- Added inetd_macros.te and swat, in.comcast, ktalkd, rsync policy- Many fixes for strict policy
* Fri Sep 24 2004 Dan Walsh 1.17.20-3- Apply Russell\'s patch
* Fri Sep 24 2004 Dan Walsh 1.17.20-2- Change nfs tunables into booleans for reading exported file systems
* Fri Sep 24 2004 Dan Walsh 1.17.20-1- Update with NSA fixes.
* Wed Sep 22 2004 Dan Walsh 1.17.19-2- Many fixes for nscd
* Wed Sep 22 2004 Dan Walsh 1.17.19-1- Update to latest from NSA
* Sat Sep 18 2004 Dan Walsh 1.17.18-3- Add associate file_type nfs_t for mv command
* Sat Sep 18 2004 Dan Walsh 1.17.18-2- Change targeted policy to use devfs.
* Fri Sep 17 2004 Dan Walsh 1.17.18-1- Fix rhgb and console
* Fri Sep 17 2004 Dan Walsh 1.17.17-3- Allow nscd to read context files
* Fri Sep 17 2004 Dan Walsh 1.17.17-2- Add removable_t for all removable media
* Fri Sep 17 2004 Dan Walsh 1.17.17-1- Update from NSA
* Thu Sep 16 2004 Dan Walsh 1.17.16-3- add context for /lib/tls/i486- Fix /etc/mozpluggerrc
* Thu Sep 16 2004 Dan Walsh 1.17.16-2- Cleanup patch
* Thu Sep 16 2004 Dan Walsh 1.17.16-1- Update to match NSA Policy- Added proc_fs attributes
* Wed Sep 15 2004 Dan Walsh 1.17.15-3- More nscd fixes
* Wed Sep 15 2004 Dan Walsh 1.17.15-2- New changes for nscd in targeted policy. Small cleanup of can_ypbind
* Wed Sep 15 2004 Dan Walsh 1.17.15-1- Update from NSA
* Sat Sep 11 2004 Dan Walsh 1.17.14-1- Update from NSA
* Sat Sep 11 2004 Dan Walsh 1.17.13-1- Update from NSA- Fixed for dbus
* Fri Sep 10 2004 Dan Walsh 1.17.12-1- Add media context file- Add ncsd.te to targeted policy
* Thu Sep 09 2004 Dan Walsh 1.17.11-2- Many changes to get X and dbus to work with /dev on tmpfs
* Thu Sep 09 2004 Dan Walsh 1.17.11-1- Update from NSA
* Wed Sep 08 2004 Dan Walsh 1.17.10-2- Fix named file context and add dbus patch from Colin- Fix udev and tmpfs boot problems
* Sun Sep 05 2004 Dan Walsh 1.17.10-1- Update from NSA
* Fri Sep 03 2004 Dan Walsh 1.17.9-2- Clean up patch
* Fri Sep 03 2004 Dan Walsh 1.17.9-1- Latest from NSA- Merge in Russell Changes
* Thu Sep 02 2004 Jeremy Katz - 1.17.8-2- use underlying context for tmpfs
* Wed Sep 01 2004 Dan Walsh 1.17.8-1- Update from NSA
* Added reserved_port_t type and portcon entries to map all other reserved ports to this type.
* Added distro_ prefix to distro tunables to avoid conflicts.
* Merged diffs from Russell Coker.
* Tue Aug 31 2004 Dan Walsh 1.17.7-1- Update with uli\'s fixes
* Tue Aug 31 2004 Dan Walsh 1.17.6-1- Update for NSA- Add ssh policy fixes
* Sat Aug 28 2004 Dan Walsh 1.17.5-2- Fix spec file
* Sat Aug 28 2004 Dan Walsh 1.17.5-1- Update from NSA- Add ftpd_is_daemon=1 boolean
* Sat Aug 28 2004 Dan Walsh 1.17.4-5- Fix patch and spec file
* Fri Aug 27 2004 Dan Walsh 1.17.4-4- Add cdrom check for makefile- Add some patches from Russell
* Thu Aug 26 2004 Dan Walsh 1.17.4-3- Fix directory ownership
* Thu Aug 26 2004 Dan Walsh 1.17.4-2- Fix portmap name_bind to reserved_port_t
* Thu Aug 26 2004 Dan Walsh 1.17.4-1- More changes to make named work- Added can_ypbind to several te files
* Wed Aug 25 2004 Dan Walsh 1.17.3-2- Russell Changes to Named- Add unrestricted attribute
* Wed Aug 25 2004 Dan Walsh 1.17.3-1- Latest from NSA- Portmap change
* Tue Aug 24 2004 Dan Walsh 1.17.2-1- Colin patch to check file_contexts- Add rssh policy- Latest from NSA
* Mon Aug 23 2004 Dan Walsh 1.17.1-1- Update from NSA
* Fri Aug 20 2004 Colin Walters 1.15.16-2- Add printer_device_t to types/devices.te, remove from lpd.te.
* Thu Aug 19 2004 Dan Walsh 1.15.16-1- Update from NSA, fixes for udev
* Wed Aug 18 2004 Dan Walsh 1.15.15-1- Update from NSA, remove unused te files
* Sat Aug 14 2004 Dan Walsh 1.15.14-1- Update from NSA
* Thu Aug 12 2004 Dan Walsh 1.15.13-4- Make booleans specific to policy type
* Thu Aug 12 2004 Dan Walsh 1.15.13-3- Fix booleans
* Thu Aug 12 2004 Dan Walsh 1.15.13-2- Fix bind to work in targeted policy
* Mon Aug 09 2004 Dan Walsh 1.15.13-1- Latest changes from NSA including more booleans changes.
* Wed Aug 04 2004 Dan Walsh 1.15.12-1- Update to latest from NSA- Major rewrite to use booleans
* Wed Aug 04 2004 Dan Walsh 1.15.11-2- Fix targeted policy to create tun file
* Sun Aug 01 2004 Dan Walsh 1.15.11-1- Update to latest from NSA- Rename tunables to .tun
* Fri Jul 30 2004 Dan Walsh 1.15.10-1- Update to latest from NSA
* Thu Jul 29 2004 Dan Walsh 1.15.9-1- Fix audit2allow by adding auditallow load_policy to unconfined_t
* Wed Jul 28 2004 Dan Walsh 1.15.8-3- Fix tunables
* Wed Jul 28 2004 Dan Walsh 1.15.8-1- Latest from NSA
* Tue Jul 27 2004 Dan Walsh 1.15.7-6- New policy for bind, fix net_contexts
* Thu Jul 22 2004 Dan Walsh 1.15.7-4- Fixes for ptal
* Wed Jul 21 2004 Dan Walsh 1.15.7-3- Fix udev spec
* Tue Jul 20 2004 Dan Walsh 1.15.7-2- Add patches for NFS Home dirs and some suse patches
* Tue Jul 20 2004 Dan Walsh 1.15.7-1- Latest version from NSA
* Sat Jul 17 2004 Dan Walsh 1.15.6-2- Fix firefox spec and other problems with bootloader
* Fri Jul 16 2004 Dan Walsh 1.15.6-1- Rewrite Tunables comments for system-config-securitylevel
* Thu Jul 15 2004 Dan Walsh 1.15.5-2- Add device_type create_file_perms to unconfined_t
* Thu Jul 15 2004 Dan Walsh 1.15.5-1- add rpm_t for unconfined_t
* Tue Jul 13 2004 Dan Walsh 1.15.4-1- Break out unlimitedServices in to multiple tunables
* Tue Jul 13 2004 Dan Walsh 1.15.3-1- Fixes for sudo and userhelper.
* Thu Jul 08 2004 Dan Walsh 1.15.2-1
* Wed Jul 7 2004 Dan Walsh 1.15.1-1- Update with latest from NSA
* Thu Jul 08 2004 Dan Walsh 1.14.1-5- Add allow for syslog looking at /initrd
* Wed Jul 07 2004 Dan Walsh 1.14.1-3- Fix automount file system- More fixes for postgress
* Thu Jul 01 2004 Dan Walsh 1.14.1-2- Fixes for postgres- Lots of fixes from Fedora list
* Thu Jul 01 2004 Dan Walsh 1.14.1-1- Update with latest from NSA
* Sun Jun 27 2004 Dan Walsh 1.13.10-3- Fix some problems generated by turning off tunables
* Sun Jun 27 2004 Dan Walsh 1.13.10-2- Fix post scripts
* Sun Jun 27 2004 Dan Walsh 1.13.10-1- Update with latest NSA
* Sat Jun 26 2004 Dan Walsh 1.13.9-1- Update with latest NSA- Add more Colin patches
* Thu Jun 24 2004 Dan Walsh 1.13.8-1- Add Kerberos policy- Update with latest from NSA
* Sat Jun 19 2004 Dan Walsh 1.13.7-1- NSA Update
* Fri Jun 18 2004 Dan Walsh 1.13.6-1- Another NSA update.- Added Russell\'s rpm patch- Added netlink patches
* Thu Jun 17 2004 Dan Walsh 1.13.5-1- Add postfix and mdadm fix from Colin- Update to match latest from NSA
* Thu Jun 17 2004 Dan Walsh 1.13.4-8- Add nlclass patch
* Wed Jun 16 2004 Elliot Lee - rebuilt
* Tue Jun 15 2004 Dan Walsh 1.13.4-6- Keep version with strict policy- Remove uwimapd patch
* Thu Jun 10 2004 Dan Walsh 1.13.4-5- Fix patch
* Thu Jun 10 2004 Dan Walsh 1.13.4-4- Add Additional Russell fixes
* Wed Jun 09 2004 Dan Walsh 1.13.4-3- Add Hotplug fixes
* Tue Jun 08 2004 Dan Walsh 1.13.4-2- Add most of Russell\'s mods
* Tue Jun 08 2004 Dan Walsh 1.13.4-1- Handle newrole changes for new design- Update to latest from NSA
* Fri Jun 04 2004 Dan Walsh 1.13.3-3- Handle updating /etc/selinux/config
* Thu Jun 03 2004 Dan Walsh 1.13.3-1- Update to latest from NSA- Fix numerous bugs
* Thu Jun 03 2004 Dan Walsh 1.13.2-7- Fix su policy for terminal rename with new pam_selinux.
* Thu Jun 03 2004 Dan Walsh 1.13.2-6- Fix policy for setfiles and restorecon
* Thu Jun 03 2004 Dan Walsh 1.13.2-5- Add tunables subdir
* Wed Jun 02 2004 Dan Walsh 1.13.2-4- Fix hotplug and udev
* Wed Jun 02 2004 Dan Walsh 1.13.2-3- Fix handling of selinux_config_t and default_context_t
* Sat May 29 2004 Dan Walsh 1.13.2-2- Only update policy if this policy is running
* Sat May 29 2004 Dan Walsh 1.13.2-1- Update to match NSA
* Fri May 28 2004 Dan Walsh 1.13.1-2- Change location of file_contexts and add new security contexts
* Tue May 25 2004 Dan Walsh 1.13.1-1- Initial version created from policy.spec