GitWeb
Get Gentoo!
gentoo.org sites
gentoo.org
Wiki
Bugs
Forums
Packages
Planet
Archives
Sources
Infra Status
Home
Gentoo Repository
Repositories
Projects
Developer Overlays
User Overlays
Data
Websites
index
:
proj/hardened-refpolicy.git
concord-dev
mailinfra
master
secmodel
Gentoo Hardened SELinux reference policy implementation
Sven Vermeulen <swift@gentoo.org>
summary
refs
log
tree
commit
diff
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
Lines
*
Merge upstream
2.20151208-r3
Jason Zaman
2016-03-24
1
-2
/
+2
*
Reduce broad entrypoints for unconfined domains.
Chris PeBenito
2016-03-24
2
-6
/
+10
*
Module version bump for several Arch fixes from Nicolas Iooss.
Chris PeBenito
2016-03-24
3
-3
/
+3
*
Allow kdevtmpfs to unlink fixed disk devices
Nicolas Iooss
2016-03-24
1
-0
/
+1
*
Fix typo in dev_setattr_dlm_control interface requirements
Nicolas Iooss
2016-03-24
1
-1
/
+1
*
Do not label /usr/lib/gvfs/libgvfscommon.so as bin_t
Nicolas Iooss
2016-03-24
1
-1
/
+1
*
Label some user session DBus services as bin_t
Nicolas Iooss
2016-03-24
1
-0
/
+3
*
Label gedit plugins properly on Arch Linux
Nicolas Iooss
2016-03-24
1
-0
/
+1
*
Label system-config-printer applet properly on Arch Linux
Nicolas Iooss
2016-03-24
1
-1
/
+1
*
Label TexLive scripts bin_t
Nicolas Iooss
2016-03-24
1
-0
/
+1
*
Module version bump for changes to the geoclue module by Nicolas Iooss.
Dominick Grift
2016-03-24
1
-1
/
+1
*
Add Arch Linux path for geoclue module
Nicolas Iooss
2016-03-24
1
-0
/
+1
*
chromium: add fcontexts for prebuilt google-chrome
Jason Zaman
2016-03-24
1
-1
/
+23
*
uwsgi: allow reading net sysctls and ldconfig for python apps
Jason Zaman
2016-03-12
1
-1
/
+4
*
android: rules for the emulator
Jason Zaman
2016-03-12
1
-0
/
+6
*
Merge upstream
Jason Zaman
2016-03-12
1
-2
/
+2
*
Module version bump for changes to the mozilla module by Laurent Bigonville.
Dominick Grift
2016-03-12
1
-1
/
+1
*
Debian now ships firefox-esr, properly label the executable
Laurent Bigonville
2016-03-12
1
-0
/
+1
*
New policy for tboot utilities
Luis Ressel
2016-03-12
3
-0
/
+71
*
Module version bump for changes to the redis module by Grant Ridder.
Dominick Grift
2016-03-12
1
-1
/
+1
*
Allow tcp_connect to redis_port_t for redis_t
Grant Ridder
2016-03-12
1
-0
/
+1
*
Module version bump for changes to the networkmanager module by Laurent Bigon...
Dominick Grift
2016-03-12
1
-1
/
+1
*
Allow NM to execute arping
Laurent Bigonville
2016-03-12
1
-0
/
+1
*
Module version bump for tboot utils from Luis Ressel and systemd fix from Jas...
Chris PeBenito
2016-03-12
2
-2
/
+2
*
system/init: move systemd_ interfaces into optional_policy
Jason Zaman
2016-03-12
1
-3
/
+5
*
Allow sysadm to run txt-stat.
Luis Ressel
2016-03-12
1
-0
/
+4
*
Module version bump for getty patch from Luis Ressel.
Chris PeBenito
2016-03-12
1
-1
/
+1
*
Allow getty the sys_admin capability
Luis Ressel
2016-03-12
1
-6
/
+1
*
Add lxc_contexts config file
Laurent Bigonville
2016-03-12
4
-1
/
+10
*
Module version bump for iptables/firewalld patch from Laurent Bigonville.
Chris PeBenito
2016-03-12
1
-1
/
+1
*
Allow {eb,ip,ip6}tables-restore to read files in /run/firewalld
Laurent Bigonville
2016-03-12
1
-0
/
+1
*
Dropbox: rules for 3.12.6
2.20151208-r2
Jason Zaman
2016-02-13
1
-1
/
+7
*
Merge upstream
Jason Zaman
2016-02-12
1
-2
/
+2
*
Module version bump for iptables fc entries from Laurent Bigonville and Lukas...
Chris PeBenito
2016-02-12
1
-1
/
+1
*
Whitespace fix in iptables.fc.
Chris PeBenito
2016-02-12
1
-1
/
+1
*
Label /var/run/ebtables.lock as iptables_var_run_t.
Laurent Bigonville
2016-02-12
1
-0
/
+1
*
Label /var/run/xtables.lock as iptables_var_run_t.
Lukas Vrabec
2016-02-12
1
-0
/
+2
*
Module version bump for ipset fc entry from Laurent Bigonville.
Chris PeBenito
2016-02-12
1
-1
/
+1
*
Add label for /sbin/ipset
Laurent Bigonville
2016-02-12
1
-0
/
+1
*
Module version bump for efivarfs patches from Dan Walsh, Vit Mojzis, and Laur...
Chris PeBenito
2016-02-12
2
-2
/
+2
*
Allow logind to read efivarfs files
Laurent Bigonville
2016-02-12
1
-0
/
+2
*
Add interface to allow reading files in efivarfs - contains Linux Kernel conf...
Vit Mojzis
2016-02-12
1
-0
/
+20
*
Add label for efivarfs
Dan Walsh
2016-02-12
1
-0
/
+5
*
Module version bump for patches from Nicolas Iooss and Grant Ridder.
Chris PeBenito
2016-02-12
2
-2
/
+2
*
Label /sys/kernel/debug/tracing filesystem
Nicolas Iooss
2016-02-12
1
-0
/
+4
*
Add redis-sentinel port to redis network_port def
Grant Ridder
2016-02-12
1
-1
/
+1
*
Module version bump for firewalld updates from Laurent Bigonville.
Chris PeBenito
2016-02-12
1
-1
/
+1
*
dontaudit firewalld attempt to relabel its own config files
Laurent Bigonville
2016-02-12
1
-0
/
+1
*
Allow firewalld to create firewalld_var_run_t directory.
Laurent Bigonville
2016-02-12
1
-0
/
+1
*
Add an interface to allow a domain to read firewalld_var_run_t files
Laurent Bigonville
2016-02-12
1
-0
/
+19
[next]