summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge upstream2.20151208-r3Jason Zaman2016-03-241-2/+2
* Reduce broad entrypoints for unconfined domains.Chris PeBenito2016-03-242-6/+10
* Module version bump for several Arch fixes from Nicolas Iooss.Chris PeBenito2016-03-243-3/+3
* Allow kdevtmpfs to unlink fixed disk devicesNicolas Iooss2016-03-241-0/+1
* Fix typo in dev_setattr_dlm_control interface requirementsNicolas Iooss2016-03-241-1/+1
* Do not label /usr/lib/gvfs/libgvfscommon.so as bin_tNicolas Iooss2016-03-241-1/+1
* Label some user session DBus services as bin_tNicolas Iooss2016-03-241-0/+3
* Label gedit plugins properly on Arch LinuxNicolas Iooss2016-03-241-0/+1
* Label system-config-printer applet properly on Arch LinuxNicolas Iooss2016-03-241-1/+1
* Label TexLive scripts bin_tNicolas Iooss2016-03-241-0/+1
* Module version bump for changes to the geoclue module by Nicolas Iooss.Dominick Grift2016-03-241-1/+1
* Add Arch Linux path for geoclue moduleNicolas Iooss2016-03-241-0/+1
* chromium: add fcontexts for prebuilt google-chromeJason Zaman2016-03-241-1/+23
* uwsgi: allow reading net sysctls and ldconfig for python appsJason Zaman2016-03-121-1/+4
* android: rules for the emulatorJason Zaman2016-03-121-0/+6
* Merge upstreamJason Zaman2016-03-121-2/+2
* Module version bump for changes to the mozilla module by Laurent Bigonville.Dominick Grift2016-03-121-1/+1
* Debian now ships firefox-esr, properly label the executableLaurent Bigonville2016-03-121-0/+1
* New policy for tboot utilitiesLuis Ressel2016-03-123-0/+71
* Module version bump for changes to the redis module by Grant Ridder.Dominick Grift2016-03-121-1/+1
* Allow tcp_connect to redis_port_t for redis_tGrant Ridder2016-03-121-0/+1
* Module version bump for changes to the networkmanager module by Laurent Bigon...Dominick Grift2016-03-121-1/+1
* Allow NM to execute arpingLaurent Bigonville2016-03-121-0/+1
* Module version bump for tboot utils from Luis Ressel and systemd fix from Jas...Chris PeBenito2016-03-122-2/+2
* system/init: move systemd_ interfaces into optional_policyJason Zaman2016-03-121-3/+5
* Allow sysadm to run txt-stat.Luis Ressel2016-03-121-0/+4
* Module version bump for getty patch from Luis Ressel.Chris PeBenito2016-03-121-1/+1
* Allow getty the sys_admin capabilityLuis Ressel2016-03-121-6/+1
* Add lxc_contexts config fileLaurent Bigonville2016-03-124-1/+10
* Module version bump for iptables/firewalld patch from Laurent Bigonville.Chris PeBenito2016-03-121-1/+1
* Allow {eb,ip,ip6}tables-restore to read files in /run/firewalldLaurent Bigonville2016-03-121-0/+1
* Dropbox: rules for 3.12.62.20151208-r2Jason Zaman2016-02-131-1/+7
* Merge upstreamJason Zaman2016-02-121-2/+2
* Module version bump for iptables fc entries from Laurent Bigonville and Lukas...Chris PeBenito2016-02-121-1/+1
* Whitespace fix in iptables.fc.Chris PeBenito2016-02-121-1/+1
* Label /var/run/ebtables.lock as iptables_var_run_t.Laurent Bigonville2016-02-121-0/+1
* Label /var/run/xtables.lock as iptables_var_run_t.Lukas Vrabec2016-02-121-0/+2
* Module version bump for ipset fc entry from Laurent Bigonville.Chris PeBenito2016-02-121-1/+1
* Add label for /sbin/ipsetLaurent Bigonville2016-02-121-0/+1
* Module version bump for efivarfs patches from Dan Walsh, Vit Mojzis, and Laur...Chris PeBenito2016-02-122-2/+2
* Allow logind to read efivarfs filesLaurent Bigonville2016-02-121-0/+2
* Add interface to allow reading files in efivarfs - contains Linux Kernel conf...Vit Mojzis2016-02-121-0/+20
* Add label for efivarfsDan Walsh2016-02-121-0/+5
* Module version bump for patches from Nicolas Iooss and Grant Ridder.Chris PeBenito2016-02-122-2/+2
* Label /sys/kernel/debug/tracing filesystemNicolas Iooss2016-02-121-0/+4
* Add redis-sentinel port to redis network_port defGrant Ridder2016-02-121-1/+1
* Module version bump for firewalld updates from Laurent Bigonville.Chris PeBenito2016-02-121-1/+1
* dontaudit firewalld attempt to relabel its own config filesLaurent Bigonville2016-02-121-0/+1
* Allow firewalld to create firewalld_var_run_t directory.Laurent Bigonville2016-02-121-0/+1
* Add an interface to allow a domain to read firewalld_var_run_t filesLaurent Bigonville2016-02-121-0/+19