 Helmut Pozimski
|
b9923df92b
Merge branch 'acmetool_updater' of Hoshpak/selinux-policies into master
|
vor 7 Jahren |
 Helmut Pozimski
|
12ec32fceb
acme-updater: fix type transition for ejabberd
|
vor 7 Jahren |
|
Helmut Pozimski
|
0147203c60
acme-updater: make external dependencies optional
|
vor 7 Jahren |
|
Helmut Pozimski
|
0d1c510e34
acme-updater: add json configuration file and file context
|
vor 7 Jahren |
|
Helmut Pozimski
|
359d65589f
update bind policy to cover unbound on Debian 8.x
|
vor 7 Jahren |
|
Helmut Pozimski
|
5f8b500cf4
specify role for jabber admin in acme-updater policy
|
vor 7 Jahren |
|
Helmut Pozimski
|
7ab04446b5
aloow acmeupdater to manager ejabberd and write to files in etc, needed for the ejabberd certificates
|
vor 7 Jahren |
|
Helmut Pozimski
|
52999703a0
acme-updater: allow execution of apache binaries (e.g. apachectl)
|
vor 7 Jahren |
|
Helmut Pozimski
|
7a5106ea2d
acme-updater: fix script name
|
vor 7 Jahren |
|
Helmut Pozimski
|
bd28010154
change files for acme-updater to adapt to the new version
|
vor 7 Jahren |
|
Helmut Pozimski
|
9f4c1054cf
allow acme_updater to read generic lock files (fixes #6)
|
vor 7 Jahren |
|
Helmut Pozimski
|
b9873111be
allow acme_updater to give itself the capability sys_resource (fixes #7)
|
vor 7 Jahren |
|
Helmut Pozimski
|
48bf495bb1
allow acme_updater to manage cert_t files to enable creating backups of dovecot cert files (fixes #5)
|
vor 7 Jahren |
|
Helmut Pozimski
|
e8ad21f6f0
allow drac_overrid to acme-updater so it can read the bind session key
|
vor 8 Jahren |
|
Helmut Pozimski
|
6455a55069
allow acme-updater to read binds run files
|
vor 8 Jahren |
|
Helmut Pozimski
|
87b53501e3
allow acme-updater to resolve dns records
|
vor 8 Jahren |
|
Helmut Pozimski
|
ae76aa8400
allow acme-updater to manage dovecot and postfix
|
vor 8 Jahren |
|
Helmut Pozimski
|
0b7aeae0f7
allow apache to read phpfpm temp files to work around wrong contexts created by php file upload
|
vor 8 Jahren |
|
Helmut Pozimski
|
f0936b3db5
allow acme-updater to search var_lib_t
|
vor 8 Jahren |
|
Helmut Pozimski
|
0a8038d9e8
add missing permissions to acme-updater
|
vor 8 Jahren |
|
Helmut Pozimski
|
16f3a4fecf
add policy for acme-updater
|
vor 8 Jahren |
|
Helmut Pozimski
|
1632ea18a5
logrotate: update to the version from stretch and merge with my own changes
|
vor 7 Jahren |
|
Helmut Pozimski
|
12a3653f9f
atop: update policy with missing permissions
|
vor 7 Jahren |
|
Helmut Pozimski
|
c5f59a0683
jabber: allow kernel_read_vm_overcommit_sysctl and extend policy to use a cache directory for httpupload
|
vor 7 Jahren |
|
Helmut Pozimski
|
ee1bc1d3bd
atop: extend policy to also cover atopacct
|
vor 7 Jahren |
|
Helmut Pozimski
|
26636d0339
murmur: correct path to run directory
|
vor 7 Jahren |
|
Helmut Pozimski
|
04403d1b99
xonotic: allow kernel_read_crypto_sysctls
|
vor 7 Jahren |
|
Helmut Pozimski
|
9fc1d1141f
turnserver: update policy for the new version in Debian stretch
|
vor 7 Jahren |
|
Helmut Pozimski
|
6df2dbed12
mta: merge policy with the current version from Debian stretch and bump version number
|
vor 7 Jahren |
|
Helmut Pozimski
|
2ae226e802
php-fpm: correct PID directory
|
vor 7 Jahren |
