 Helmut Pozimski
|
246fdd57dd
overviewer: add selinux policy module
|
4 years ago |
 Helmut Pozimski
|
b82ac6a871
add previously uncommited changes to the git and gogs policies
|
5 years ago |
|
Helmut Pozimski
|
79209473f3
ssh: allow access to httpd directories to configure sftp access for users
|
5 years ago |
|
Helmut Pozimski
|
4681697a77
apticron: allow relabelto for apticron_tmp_t
|
6 years ago |
|
Helmut Pozimski
|
c6d1e3dde6
php-fpm: allow capability dac_override
|
6 years ago |
|
Helmut Pozimski
|
29686b6436
jabber: allow writing to tmp directories
|
6 years ago |
|
Helmut Pozimski
|
4ddc0b0594
apticron: allow relabelfrom for apticron_var_lib_t:file
|
6 years ago |
|
Helmut Pozimski
|
56053a33f1
apticron: allow self setopt on tcp sockets
|
6 years ago |
|
Helmut Pozimski
|
362cfb2bfd
jabber: allow jabberd_t to manage it's log files
|
6 years ago |
|
Helmut Pozimski
|
10e5bc796b
apticron: allow to execute sendmail, add missing permissions
|
6 years ago |
|
Helmut Pozimski
|
066007f4ef
atop: allow management of log files
|
6 years ago |
|
Helmut Pozimski
|
c0f0bf03d9
postfix: update policy and merge with local changes
|
7 years ago |
|
Helmut Pozimski
|
add769bacb
amavis: allow management of links of type amavis_var_lib_t
|
7 years ago |
|
Helmut Pozimski
|
eb9c7bdd35
acmetool: allow kernel_read_vm_overcommit_sysctl
|
7 years ago |
|
Helmut Pozimski
|
b9923df92b
Merge branch 'acmetool_updater' of Hoshpak/selinux-policies into master
|
7 years ago |
|
Helmut Pozimski
|
12ec32fceb
acme-updater: fix type transition for ejabberd
|
7 years ago |
|
Helmut Pozimski
|
0147203c60
acme-updater: make external dependencies optional
|
7 years ago |
|
Helmut Pozimski
|
0d1c510e34
acme-updater: add json configuration file and file context
|
7 years ago |
|
Helmut Pozimski
|
359d65589f
update bind policy to cover unbound on Debian 8.x
|
7 years ago |
|
Helmut Pozimski
|
5f8b500cf4
specify role for jabber admin in acme-updater policy
|
7 years ago |
|
Helmut Pozimski
|
7ab04446b5
aloow acmeupdater to manager ejabberd and write to files in etc, needed for the ejabberd certificates
|
7 years ago |
|
Helmut Pozimski
|
52999703a0
acme-updater: allow execution of apache binaries (e.g. apachectl)
|
7 years ago |
|
Helmut Pozimski
|
7a5106ea2d
acme-updater: fix script name
|
7 years ago |
|
Helmut Pozimski
|
bd28010154
change files for acme-updater to adapt to the new version
|
7 years ago |
|
Helmut Pozimski
|
9f4c1054cf
allow acme_updater to read generic lock files (fixes #6)
|
7 years ago |
|
Helmut Pozimski
|
b9873111be
allow acme_updater to give itself the capability sys_resource (fixes #7)
|
7 years ago |
|
Helmut Pozimski
|
48bf495bb1
allow acme_updater to manage cert_t files to enable creating backups of dovecot cert files (fixes #5)
|
7 years ago |
|
Helmut Pozimski
|
e8ad21f6f0
allow drac_overrid to acme-updater so it can read the bind session key
|
7 years ago |
|
Helmut Pozimski
|
6455a55069
allow acme-updater to read binds run files
|
7 years ago |
|
Helmut Pozimski
|
87b53501e3
allow acme-updater to resolve dns records
|
7 years ago |
