| .. |
|
acme-updater.fc
|
0d1c510e34
acme-updater: add json configuration file and file context
|
%!s(int64=7) %!d(string=hai) anos |
|
acme-updater.te
|
12ec32fceb
acme-updater: fix type transition for ejabberd
|
%!s(int64=7) %!d(string=hai) anos |
|
acmetool.fc
|
d8929817dc
add skeleton module for acmetool
|
%!s(int64=8) %!d(string=hai) anos |
|
acmetool.te
|
eb9c7bdd35
acmetool: allow kernel_read_vm_overcommit_sysctl
|
%!s(int64=7) %!d(string=hai) anos |
|
amavis.fc
|
a787d913d6
add amavis policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
amavis.if
|
a787d913d6
add amavis policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
amavis.te
|
add769bacb
amavis: allow management of links of type amavis_var_lib_t
|
%!s(int64=7) %!d(string=hai) anos |
|
apache.fc
|
fbc3b9ae56
remove /var/lib/php from apache, conflicting with php-fpm
|
%!s(int64=7) %!d(string=hai) anos |
|
apache.if
|
d9368b3c96
apache: merge policy from Debian stretch selinux-policy-src
|
%!s(int64=7) %!d(string=hai) anos |
|
apache.te
|
0b7aeae0f7
allow apache to read phpfpm temp files to work around wrong contexts created by php file upload
|
%!s(int64=7) %!d(string=hai) anos |
|
apm.fc
|
c0a06e2f2e
add the apm policy module to fork it
|
%!s(int64=8) %!d(string=hai) anos |
|
apm.if
|
c0a06e2f2e
add the apm policy module to fork it
|
%!s(int64=8) %!d(string=hai) anos |
|
apm.te
|
fa9a408f5a
allow apmd_t to init_read_utmp
|
%!s(int64=8) %!d(string=hai) anos |
|
apticron.fc
|
82f3c528af
add apticron policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
apticron.te
|
b41a5ec364
add missing permissions for apticron, this only works when you manually set heirloom-mailx to use smtp though
|
%!s(int64=9) %!d(string=hai) anos |
|
atop.fc
|
ee1bc1d3bd
atop: extend policy to also cover atopacct
|
%!s(int64=7) %!d(string=hai) anos |
|
atop.te
|
066007f4ef
atop: allow management of log files
|
%!s(int64=7) %!d(string=hai) anos |
|
bind.fc
|
359d65589f
update bind policy to cover unbound on Debian 8.x
|
%!s(int64=7) %!d(string=hai) anos |
|
bind.if
|
0388bd041a
add a fork of the bind policy to allow it to connect to udev via udp
|
%!s(int64=9) %!d(string=hai) anos |
|
bind.te
|
359d65589f
update bind policy to cover unbound on Debian 8.x
|
%!s(int64=7) %!d(string=hai) anos |
|
bootloader.fc
|
dd00707aa6
add bootloader policy module to fork it
|
%!s(int64=9) %!d(string=hai) anos |
|
bootloader.if
|
dd00707aa6
add bootloader policy module to fork it
|
%!s(int64=9) %!d(string=hai) anos |
|
bootloader.te
|
9d931d48b9
add permissions to read file contexts and getattr for xconsole to bootloader_t
|
%!s(int64=9) %!d(string=hai) anos |
|
clamav.fc
|
0a19f1fd5d
add clamav policy module from the reference policy
|
%!s(int64=9) %!d(string=hai) anos |
|
clamav.if
|
0a19f1fd5d
add clamav policy module from the reference policy
|
%!s(int64=9) %!d(string=hai) anos |
|
clamav.te
|
a8e0582b58
allow clamd to read vm sysctls
|
%!s(int64=9) %!d(string=hai) anos |
|
dnsping.fc
|
56cf3c1593
add selinux policy for my custom dnsping IP update script
|
%!s(int64=9) %!d(string=hai) anos |
|
dnsping.te
|
85d0b97d56
dnsping: add missing permissions for Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
dovecot.fc
|
7ec11d0bd5
add dovecot managesieve-login to dovecot file contexts
|
%!s(int64=9) %!d(string=hai) anos |
|
dovecot.if
|
d60008cf7d
add dovecot policy module to fork it
|
%!s(int64=9) %!d(string=hai) anos |
|
dovecot.te
|
eeea104868
dovecot: merge with 1.18.0 and bump minor version
|
%!s(int64=7) %!d(string=hai) anos |
|
fail2ban.fc
|
a52dc2cfa5
add the fail2ban module to modify it
|
%!s(int64=9) %!d(string=hai) anos |
|
fail2ban.if
|
a52dc2cfa5
add the fail2ban module to modify it
|
%!s(int64=9) %!d(string=hai) anos |
|
fail2ban.te
|
4af5a03991
add the missing domain transition for fail2ban_var_run_t and correct the permissions for fail2ban_client_t
|
%!s(int64=9) %!d(string=hai) anos |
|
git.fc
|
179384777d
label all git binaries and allow gogs to execute generic bin files, *sigh*
|
%!s(int64=8) %!d(string=hai) anos |
|
git.if
|
cd654dbd8c
add policy module for git to give the binary a file context
|
%!s(int64=8) %!d(string=hai) anos |
|
git.te
|
179384777d
label all git binaries and allow gogs to execute generic bin files, *sigh*
|
%!s(int64=8) %!d(string=hai) anos |
|
gogs.fc
|
578a6a21c7
extend the gogs policy with all permissions necessary for the program to run
|
%!s(int64=8) %!d(string=hai) anos |
|
gogs.te
|
db7665a8de
allow gogs kernel_read_vm_sysctls
|
%!s(int64=7) %!d(string=hai) anos |
|
hostname.fc
|
f7b8f792b2
add hostname policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
hostname.if
|
f7b8f792b2
add hostname policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
hostname.te
|
9c19a6582d
allow hostname to read urandom
|
%!s(int64=9) %!d(string=hai) anos |
|
ipsec.fc
|
ac160709f3
add remaining domain transistions to make strongswan work
|
%!s(int64=9) %!d(string=hai) anos |
|
ipsec.if
|
4762bce146
add a copy of the ipsec module of the reference policy
|
%!s(int64=9) %!d(string=hai) anos |
|
ipsec.te
|
7cec747609
allow ipsec_t to kill the charon process
|
%!s(int64=8) %!d(string=hai) anos |
|
iptables.fc
|
64324c83c3
add for of the iptables policy module and allow access to urandom
|
%!s(int64=9) %!d(string=hai) anos |
|
iptables.if
|
64324c83c3
add for of the iptables policy module and allow access to urandom
|
%!s(int64=9) %!d(string=hai) anos |
|
iptables.te
|
64324c83c3
add for of the iptables policy module and allow access to urandom
|
%!s(int64=9) %!d(string=hai) anos |
|
jabber.fc
|
c5f59a0683
jabber: allow kernel_read_vm_overcommit_sysctl and extend policy to use a cache directory for httpupload
|
%!s(int64=7) %!d(string=hai) anos |
|
jabber.if
|
e90545059e
add jabber_domtrans interface to the jabber module
|
%!s(int64=9) %!d(string=hai) anos |
|
jabber.te
|
c5f59a0683
jabber: allow kernel_read_vm_overcommit_sysctl and extend policy to use a cache directory for httpupload
|
%!s(int64=7) %!d(string=hai) anos |
|
logrotate.fc
|
1632ea18a5
logrotate: update to the version from stretch and merge with my own changes
|
%!s(int64=7) %!d(string=hai) anos |
|
logrotate.if
|
e54a282860
add a fork of the logrotate policy and allow capability sys_ptrace
|
%!s(int64=9) %!d(string=hai) anos |
|
logrotate.te
|
1632ea18a5
logrotate: update to the version from stretch and merge with my own changes
|
%!s(int64=7) %!d(string=hai) anos |
|
mapcrafter.fc
|
1b9f39292c
add mapcrafter policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
mapcrafter.te
|
1b9f39292c
add mapcrafter policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
minecraft.fc
|
28d593b3e8
add initial version of the minecraft selinux policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
minecraft.te
|
0eb708dd3b
minecraft: update permissions to work with Java 8
|
%!s(int64=7) %!d(string=hai) anos |
|
mta.fc
|
148a9e44ff
add fork of the mta policy module and extend it to be able to write to cron temporary files
|
%!s(int64=9) %!d(string=hai) anos |
|
mta.if
|
148a9e44ff
add fork of the mta policy module and extend it to be able to write to cron temporary files
|
%!s(int64=9) %!d(string=hai) anos |
|
mta.te
|
6df2dbed12
mta: merge policy with the current version from Debian stretch and bump version number
|
%!s(int64=7) %!d(string=hai) anos |
|
murmur.fc
|
26636d0339
murmur: correct path to run directory
|
%!s(int64=7) %!d(string=hai) anos |
|
murmur.te
|
26636d0339
murmur: correct path to run directory
|
%!s(int64=7) %!d(string=hai) anos |
|
mysql.fc
|
d647a1f6a6
add mysql policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
mysql.if
|
d647a1f6a6
add mysql policy module
|
%!s(int64=9) %!d(string=hai) anos |
|
mysql.te
|
1e1b0ad700
allow mysqld_safe_t sys_tty_config
|
%!s(int64=9) %!d(string=hai) anos |
|
mysqldump.fc
|
870acd4d2f
add mysqldump.fc, allow php logrotation
|
%!s(int64=9) %!d(string=hai) anos |
|
mysqldump.te
|
2ca3e25aca
mysqldump: add missing permissions for Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
ntp.fc
|
e2fdfebaac
ntp: add policy from Debian stretch selinux-policy-src
|
%!s(int64=7) %!d(string=hai) anos |
|
ntp.if
|
e2fdfebaac
ntp: add policy from Debian stretch selinux-policy-src
|
%!s(int64=7) %!d(string=hai) anos |
|
ntp.te
|
a3f0da9a7d
ntp: grant files_manage_generic_locks to write the ntpdate lock file
|
%!s(int64=7) %!d(string=hai) anos |
|
php-fpm.fc
|
2ae226e802
php-fpm: correct PID directory
|
%!s(int64=7) %!d(string=hai) anos |
|
php-fpm.if
|
4e2eda6757
add dontaudit interfaces to phpfpm and set them in the mta policy
|
%!s(int64=9) %!d(string=hai) anos |
|
php-fpm.te
|
2ae226e802
php-fpm: correct PID directory
|
%!s(int64=7) %!d(string=hai) anos |
|
postfix.fc
|
c0f0bf03d9
postfix: update policy and merge with local changes
|
%!s(int64=7) %!d(string=hai) anos |
|
postfix.if
|
c0f0bf03d9
postfix: update policy and merge with local changes
|
%!s(int64=7) %!d(string=hai) anos |
|
postfix.te
|
c0f0bf03d9
postfix: update policy and merge with local changes
|
%!s(int64=7) %!d(string=hai) anos |
|
shutdown.fc
|
a37c120ba6
add the shutdown policy module from the reference policy
|
%!s(int64=8) %!d(string=hai) anos |
|
shutdown.if
|
a37c120ba6
add the shutdown policy module from the reference policy
|
%!s(int64=8) %!d(string=hai) anos |
|
shutdown.te
|
0f8a9e1440
allow shutdown to send syslog messages
|
%!s(int64=8) %!d(string=hai) anos |
|
spamassassin.fc
|
d56ad60eff
update to 2.9.0 and merge my own changes
|
%!s(int64=7) %!d(string=hai) anos |
|
spamassassin.if
|
d56ad60eff
update to 2.9.0 and merge my own changes
|
%!s(int64=7) %!d(string=hai) anos |
|
spamassassin.te
|
d56ad60eff
update to 2.9.0 and merge my own changes
|
%!s(int64=7) %!d(string=hai) anos |
|
spreed-webrtc.fc
|
07770361b7
add policy module for spreed-webrtc
|
%!s(int64=8) %!d(string=hai) anos |
|
spreed-webrtc.te
|
07770361b7
add policy module for spreed-webrtc
|
%!s(int64=8) %!d(string=hai) anos |
|
ssh.fc
|
3431ba1bfd
ssh: update policy to the one from selinux-policy-src in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
ssh.if
|
3431ba1bfd
ssh: update policy to the one from selinux-policy-src in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
ssh.te
|
0c561aea8a
ssh: allow sshd to write motd.dynamic
|
%!s(int64=7) %!d(string=hai) anos |
|
sshguard.fc
|
b6036eeb17
sshguard: update policy to work with the version in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
sshguard.te
|
b6036eeb17
sshguard: update policy to work with the version in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
starbound.fc
|
a9fb529e0f
include the 32 bit binary in the starbound policy
|
%!s(int64=8) %!d(string=hai) anos |
|
starbound.te
|
a9fb529e0f
include the 32 bit binary in the starbound policy
|
%!s(int64=8) %!d(string=hai) anos |
|
supervisor.fc
|
8e134f1b54
add supervisor policy, initial implementation
|
%!s(int64=8) %!d(string=hai) anos |
|
supervisor.if
|
682e09be03
complement supervisor and starbound policies, add terraria policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
supervisor.te
|
682e09be03
complement supervisor and starbound policies, add terraria policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
terraria.fc
|
682e09be03
complement supervisor and starbound policies, add terraria policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
terraria.te
|
682e09be03
complement supervisor and starbound policies, add terraria policy module
|
%!s(int64=8) %!d(string=hai) anos |
|
turnserver.fc
|
9fc1d1141f
turnserver: update policy for the new version in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
turnserver.te
|
9fc1d1141f
turnserver: update policy for the new version in Debian stretch
|
%!s(int64=7) %!d(string=hai) anos |
|
udev.fc
|
ffa99ee15f
add a fork of the udev module, allow udev to transistion to rndc_t and manage postfix to satisfy script dependencies in /etc/network/if-up.d
|
%!s(int64=9) %!d(string=hai) anos |
|
udev.if
|
ffa99ee15f
add a fork of the udev module, allow udev to transistion to rndc_t and manage postfix to satisfy script dependencies in /etc/network/if-up.d
|
%!s(int64=9) %!d(string=hai) anos |
|
udev.te
|
af4827644c
allow udev_t to read the sshd pid file as needed by the script in if-up.d
|
%!s(int64=9) %!d(string=hai) anos |
|
unconfined.fc
|
ce285de609
add unconfined policy for forking
|
%!s(int64=9) %!d(string=hai) anos |
|
unconfined.if
|
ce285de609
add unconfined policy for forking
|
%!s(int64=9) %!d(string=hai) anos |
|
unconfined.te
|
674fcdace0
allow unconfined to execute git
|
%!s(int64=8) %!d(string=hai) anos |
|
xonotic.fc
|
ec1428fd7a
add policy for a custom installed xonotic game server
|
%!s(int64=9) %!d(string=hai) anos |
|
xonotic.te
|
04403d1b99
xonotic: allow kernel_read_crypto_sysctls
|
%!s(int64=7) %!d(string=hai) anos |
Helmut Pozimski
066007f4ef
atop: allow management of log files