linux/meta-selinux.git/recipes-security/refpolicy, branch danny

refpolicy: oe-core /var/log symlink policy for apache

2013-03-19T03:06:14+00:00

Signed-off-by: Xin Ouyang

refpolicy*: fix file contexts for many oe-core recipes

2013-03-19T03:04:06+00:00

Signed-off-by: Xin Ouyang

refpolicy: two patches for nfs-kernel-server

2013-03-09T08:30:06+00:00

We still miss some rules for nfsd to bind on nfs ports, so add a patch to fix this. oe-core changed nfsd to use portmap, so also fix file contexts for portmap. Signed-off-by: Xin Ouyang

refpolicy: add selinux-config RDEPENDS

2013-02-27T07:07:30+00:00

Signed-off-by: Xin Ouyang

refpolicy: fix file contexts for bind

2013-02-27T07:07:22+00:00

Some files of bind are not installed to default pathes, fix the security contexts for these files. Signed-off-by: Xin Ouyang

refpolicy: add rules for /var/cache symlink

2013-02-27T07:07:13+00:00

/var/cache is a symlink in poky, so we need allow rules for files to read lnk_file while doing search/list/delete/rw.. in /var/cache/ directory. Signed-off-by: Xin Ouyang

refpolicy: policy fixes for seutils and auditd_log_t

2013-01-23T03:10:09+00:00

Two patches to fix these two issue: * Current policy has incomplete allow rules for selinux utils to manage selinux config files and policy store. * auditd_log_t(/var/log/audit/audit.log) is also placed in var_log_t, so add related rules. CQID: WIND00396415 Signed-off-by: Xin Ouyang

refpolicy: file contexts for alternatives of shadow

2013-01-22T07:40:18+00:00

CQID: WIND00399962 Signed-off-by: Xin Ouyang

refpolicy: add user_tty_device_t into customizable_types

2013-01-09T02:16:10+00:00

Add user_tty_device_t as a customizable_type, so that restorecon -R /dev will not complain about it or modify the security labels. Signed-off-by: Xin Ouyang

refpolicy: change hard-coded paches

2013-01-09T02:16:08+00:00

- /etc -> ${sysconfdir} - /usr/share -> ${datadir} Signed-off-by: Xin Ouyang