aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--[l---------]Changelog.contrib2211
-rw-r--r--policy/modules/admin/acct.fc (renamed from policy/modules/contrib/acct.fc)0
-rw-r--r--policy/modules/admin/acct.if (renamed from policy/modules/contrib/acct.if)0
-rw-r--r--policy/modules/admin/acct.te (renamed from policy/modules/contrib/acct.te)0
-rw-r--r--policy/modules/admin/aide.fc (renamed from policy/modules/contrib/aide.fc)0
-rw-r--r--policy/modules/admin/aide.if (renamed from policy/modules/contrib/aide.if)0
-rw-r--r--policy/modules/admin/aide.te (renamed from policy/modules/contrib/aide.te)0
-rw-r--r--policy/modules/admin/alsa.fc (renamed from policy/modules/contrib/alsa.fc)0
-rw-r--r--policy/modules/admin/alsa.if (renamed from policy/modules/contrib/alsa.if)0
-rw-r--r--policy/modules/admin/alsa.te (renamed from policy/modules/contrib/alsa.te)0
-rw-r--r--policy/modules/admin/amanda.fc (renamed from policy/modules/contrib/amanda.fc)0
-rw-r--r--policy/modules/admin/amanda.if (renamed from policy/modules/contrib/amanda.if)0
-rw-r--r--policy/modules/admin/amanda.te (renamed from policy/modules/contrib/amanda.te)0
-rw-r--r--policy/modules/admin/amtu.fc (renamed from policy/modules/contrib/amtu.fc)0
-rw-r--r--policy/modules/admin/amtu.if (renamed from policy/modules/contrib/amtu.if)0
-rw-r--r--policy/modules/admin/amtu.te (renamed from policy/modules/contrib/amtu.te)0
-rw-r--r--policy/modules/admin/anaconda.fc (renamed from policy/modules/contrib/anaconda.fc)0
-rw-r--r--policy/modules/admin/anaconda.if (renamed from policy/modules/contrib/anaconda.if)0
-rw-r--r--policy/modules/admin/anaconda.te (renamed from policy/modules/contrib/anaconda.te)0
-rw-r--r--policy/modules/admin/apt.fc (renamed from policy/modules/contrib/apt.fc)0
-rw-r--r--policy/modules/admin/apt.if (renamed from policy/modules/contrib/apt.if)0
-rw-r--r--policy/modules/admin/apt.te (renamed from policy/modules/contrib/apt.te)0
-rw-r--r--policy/modules/admin/backup.fc (renamed from policy/modules/contrib/backup.fc)0
-rw-r--r--policy/modules/admin/backup.if (renamed from policy/modules/contrib/backup.if)0
-rw-r--r--policy/modules/admin/backup.te (renamed from policy/modules/contrib/backup.te)0
-rw-r--r--policy/modules/admin/bacula.fc (renamed from policy/modules/contrib/bacula.fc)0
-rw-r--r--policy/modules/admin/bacula.if (renamed from policy/modules/contrib/bacula.if)0
-rw-r--r--policy/modules/admin/bacula.te (renamed from policy/modules/contrib/bacula.te)0
-rw-r--r--policy/modules/admin/bcfg2.fc (renamed from policy/modules/contrib/bcfg2.fc)0
-rw-r--r--policy/modules/admin/bcfg2.if (renamed from policy/modules/contrib/bcfg2.if)0
-rw-r--r--policy/modules/admin/bcfg2.te (renamed from policy/modules/contrib/bcfg2.te)0
-rw-r--r--policy/modules/admin/blueman.fc (renamed from policy/modules/contrib/blueman.fc)0
-rw-r--r--policy/modules/admin/blueman.if (renamed from policy/modules/contrib/blueman.if)0
-rw-r--r--policy/modules/admin/blueman.te (renamed from policy/modules/contrib/blueman.te)0
-rw-r--r--policy/modules/admin/brctl.fc (renamed from policy/modules/contrib/brctl.fc)0
-rw-r--r--policy/modules/admin/brctl.if (renamed from policy/modules/contrib/brctl.if)0
-rw-r--r--policy/modules/admin/brctl.te (renamed from policy/modules/contrib/brctl.te)0
-rw-r--r--policy/modules/admin/certwatch.fc (renamed from policy/modules/contrib/certwatch.fc)0
-rw-r--r--policy/modules/admin/certwatch.if (renamed from policy/modules/contrib/certwatch.if)0
-rw-r--r--policy/modules/admin/certwatch.te (renamed from policy/modules/contrib/certwatch.te)0
-rw-r--r--policy/modules/admin/cfengine.fc (renamed from policy/modules/contrib/cfengine.fc)0
-rw-r--r--policy/modules/admin/cfengine.if (renamed from policy/modules/contrib/cfengine.if)0
-rw-r--r--policy/modules/admin/cfengine.te (renamed from policy/modules/contrib/cfengine.te)0
-rw-r--r--policy/modules/admin/chkrootkit.fc (renamed from policy/modules/contrib/chkrootkit.fc)0
-rw-r--r--policy/modules/admin/chkrootkit.if (renamed from policy/modules/contrib/chkrootkit.if)0
-rw-r--r--policy/modules/admin/chkrootkit.te (renamed from policy/modules/contrib/chkrootkit.te)0
-rw-r--r--policy/modules/admin/ddcprobe.fc (renamed from policy/modules/contrib/ddcprobe.fc)0
-rw-r--r--policy/modules/admin/ddcprobe.if (renamed from policy/modules/contrib/ddcprobe.if)0
-rw-r--r--policy/modules/admin/ddcprobe.te (renamed from policy/modules/contrib/ddcprobe.te)0
-rw-r--r--policy/modules/admin/dmidecode.fc (renamed from policy/modules/contrib/dmidecode.fc)0
-rw-r--r--policy/modules/admin/dmidecode.if (renamed from policy/modules/contrib/dmidecode.if)0
-rw-r--r--policy/modules/admin/dmidecode.te (renamed from policy/modules/contrib/dmidecode.te)0
-rw-r--r--policy/modules/admin/dphysswapfile.fc (renamed from policy/modules/contrib/dphysswapfile.fc)0
-rw-r--r--policy/modules/admin/dphysswapfile.if (renamed from policy/modules/contrib/dphysswapfile.if)0
-rw-r--r--policy/modules/admin/dphysswapfile.te (renamed from policy/modules/contrib/dphysswapfile.te)0
-rw-r--r--policy/modules/admin/dpkg.fc (renamed from policy/modules/contrib/dpkg.fc)0
-rw-r--r--policy/modules/admin/dpkg.if (renamed from policy/modules/contrib/dpkg.if)0
-rw-r--r--policy/modules/admin/dpkg.te (renamed from policy/modules/contrib/dpkg.te)0
-rw-r--r--policy/modules/admin/fakehwclock.fc (renamed from policy/modules/contrib/fakehwclock.fc)0
-rw-r--r--policy/modules/admin/fakehwclock.if (renamed from policy/modules/contrib/fakehwclock.if)0
-rw-r--r--policy/modules/admin/fakehwclock.te (renamed from policy/modules/contrib/fakehwclock.te)0
-rw-r--r--policy/modules/admin/firstboot.fc (renamed from policy/modules/contrib/firstboot.fc)0
-rw-r--r--policy/modules/admin/firstboot.if (renamed from policy/modules/contrib/firstboot.if)0
-rw-r--r--policy/modules/admin/firstboot.te (renamed from policy/modules/contrib/firstboot.te)0
-rw-r--r--policy/modules/admin/hwloc.fc (renamed from policy/modules/contrib/hwloc.fc)0
-rw-r--r--policy/modules/admin/hwloc.if (renamed from policy/modules/contrib/hwloc.if)0
-rw-r--r--policy/modules/admin/hwloc.te (renamed from policy/modules/contrib/hwloc.te)0
-rw-r--r--policy/modules/admin/kdump.fc (renamed from policy/modules/contrib/kdump.fc)0
-rw-r--r--policy/modules/admin/kdump.if (renamed from policy/modules/contrib/kdump.if)0
-rw-r--r--policy/modules/admin/kdump.te (renamed from policy/modules/contrib/kdump.te)0
-rw-r--r--policy/modules/admin/kdumpgui.fc (renamed from policy/modules/contrib/kdumpgui.fc)0
-rw-r--r--policy/modules/admin/kdumpgui.if (renamed from policy/modules/contrib/kdumpgui.if)0
-rw-r--r--policy/modules/admin/kdumpgui.te (renamed from policy/modules/contrib/kdumpgui.te)0
-rw-r--r--policy/modules/admin/kismet.fc (renamed from policy/modules/contrib/kismet.fc)0
-rw-r--r--policy/modules/admin/kismet.if (renamed from policy/modules/contrib/kismet.if)0
-rw-r--r--policy/modules/admin/kismet.te (renamed from policy/modules/contrib/kismet.te)0
-rw-r--r--policy/modules/admin/kudzu.fc (renamed from policy/modules/contrib/kudzu.fc)0
-rw-r--r--policy/modules/admin/kudzu.if (renamed from policy/modules/contrib/kudzu.if)0
-rw-r--r--policy/modules/admin/kudzu.te (renamed from policy/modules/contrib/kudzu.te)0
-rw-r--r--policy/modules/admin/logrotate.fc (renamed from policy/modules/contrib/logrotate.fc)0
-rw-r--r--policy/modules/admin/logrotate.if (renamed from policy/modules/contrib/logrotate.if)0
-rw-r--r--policy/modules/admin/logrotate.te (renamed from policy/modules/contrib/logrotate.te)0
-rw-r--r--policy/modules/admin/logwatch.fc (renamed from policy/modules/contrib/logwatch.fc)0
-rw-r--r--policy/modules/admin/logwatch.if (renamed from policy/modules/contrib/logwatch.if)0
-rw-r--r--policy/modules/admin/logwatch.te (renamed from policy/modules/contrib/logwatch.te)0
-rw-r--r--policy/modules/admin/mcelog.fc (renamed from policy/modules/contrib/mcelog.fc)0
-rw-r--r--policy/modules/admin/mcelog.if (renamed from policy/modules/contrib/mcelog.if)0
-rw-r--r--policy/modules/admin/mcelog.te (renamed from policy/modules/contrib/mcelog.te)0
-rw-r--r--policy/modules/admin/mrtg.fc (renamed from policy/modules/contrib/mrtg.fc)0
-rw-r--r--policy/modules/admin/mrtg.if (renamed from policy/modules/contrib/mrtg.if)0
-rw-r--r--policy/modules/admin/mrtg.te (renamed from policy/modules/contrib/mrtg.te)0
-rw-r--r--policy/modules/admin/ncftool.fc (renamed from policy/modules/contrib/ncftool.fc)0
-rw-r--r--policy/modules/admin/ncftool.if (renamed from policy/modules/contrib/ncftool.if)0
-rw-r--r--policy/modules/admin/ncftool.te (renamed from policy/modules/contrib/ncftool.te)0
-rw-r--r--policy/modules/admin/passenger.fc (renamed from policy/modules/contrib/passenger.fc)0
-rw-r--r--policy/modules/admin/passenger.if (renamed from policy/modules/contrib/passenger.if)0
-rw-r--r--policy/modules/admin/passenger.te (renamed from policy/modules/contrib/passenger.te)0
-rw-r--r--policy/modules/admin/portage.fc (renamed from policy/modules/contrib/portage.fc)0
-rw-r--r--policy/modules/admin/portage.if (renamed from policy/modules/contrib/portage.if)0
-rw-r--r--policy/modules/admin/portage.te (renamed from policy/modules/contrib/portage.te)0
-rw-r--r--policy/modules/admin/prelink.fc (renamed from policy/modules/contrib/prelink.fc)0
-rw-r--r--policy/modules/admin/prelink.if (renamed from policy/modules/contrib/prelink.if)0
-rw-r--r--policy/modules/admin/prelink.te (renamed from policy/modules/contrib/prelink.te)0
-rw-r--r--policy/modules/admin/puppet.fc (renamed from policy/modules/contrib/puppet.fc)0
-rw-r--r--policy/modules/admin/puppet.if (renamed from policy/modules/contrib/puppet.if)0
-rw-r--r--policy/modules/admin/puppet.te (renamed from policy/modules/contrib/puppet.te)0
-rw-r--r--policy/modules/admin/quota.fc (renamed from policy/modules/contrib/quota.fc)0
-rw-r--r--policy/modules/admin/quota.if (renamed from policy/modules/contrib/quota.if)0
-rw-r--r--policy/modules/admin/quota.te (renamed from policy/modules/contrib/quota.te)0
-rw-r--r--policy/modules/admin/readahead.fc (renamed from policy/modules/contrib/readahead.fc)0
-rw-r--r--policy/modules/admin/readahead.if (renamed from policy/modules/contrib/readahead.if)0
-rw-r--r--policy/modules/admin/readahead.te (renamed from policy/modules/contrib/readahead.te)0
-rw-r--r--policy/modules/admin/rkhunter.fc (renamed from policy/modules/contrib/rkhunter.fc)0
-rw-r--r--policy/modules/admin/rkhunter.if (renamed from policy/modules/contrib/rkhunter.if)0
-rw-r--r--policy/modules/admin/rkhunter.te (renamed from policy/modules/contrib/rkhunter.te)0
-rw-r--r--policy/modules/admin/rpm.fc (renamed from policy/modules/contrib/rpm.fc)0
-rw-r--r--policy/modules/admin/rpm.if (renamed from policy/modules/contrib/rpm.if)0
-rw-r--r--policy/modules/admin/rpm.te (renamed from policy/modules/contrib/rpm.te)0
-rw-r--r--policy/modules/admin/samhain.fc (renamed from policy/modules/contrib/samhain.fc)0
-rw-r--r--policy/modules/admin/samhain.if (renamed from policy/modules/contrib/samhain.if)0
-rw-r--r--policy/modules/admin/samhain.te (renamed from policy/modules/contrib/samhain.te)0
-rw-r--r--policy/modules/admin/sblim.fc (renamed from policy/modules/contrib/sblim.fc)0
-rw-r--r--policy/modules/admin/sblim.if (renamed from policy/modules/contrib/sblim.if)0
-rw-r--r--policy/modules/admin/sblim.te (renamed from policy/modules/contrib/sblim.te)0
-rw-r--r--policy/modules/admin/sectoolm.fc (renamed from policy/modules/contrib/sectoolm.fc)0
-rw-r--r--policy/modules/admin/sectoolm.if (renamed from policy/modules/contrib/sectoolm.if)0
-rw-r--r--policy/modules/admin/sectoolm.te (renamed from policy/modules/contrib/sectoolm.te)0
-rw-r--r--policy/modules/admin/shorewall.fc (renamed from policy/modules/contrib/shorewall.fc)0
-rw-r--r--policy/modules/admin/shorewall.if (renamed from policy/modules/contrib/shorewall.if)0
-rw-r--r--policy/modules/admin/shorewall.te (renamed from policy/modules/contrib/shorewall.te)0
-rw-r--r--policy/modules/admin/shutdown.fc (renamed from policy/modules/contrib/shutdown.fc)0
-rw-r--r--policy/modules/admin/shutdown.if (renamed from policy/modules/contrib/shutdown.if)0
-rw-r--r--policy/modules/admin/shutdown.te (renamed from policy/modules/contrib/shutdown.te)0
-rw-r--r--policy/modules/admin/smoltclient.fc (renamed from policy/modules/contrib/smoltclient.fc)0
-rw-r--r--policy/modules/admin/smoltclient.if (renamed from policy/modules/contrib/smoltclient.if)0
-rw-r--r--policy/modules/admin/smoltclient.te (renamed from policy/modules/contrib/smoltclient.te)0
-rw-r--r--policy/modules/admin/sosreport.fc (renamed from policy/modules/contrib/sosreport.fc)0
-rw-r--r--policy/modules/admin/sosreport.if (renamed from policy/modules/contrib/sosreport.if)0
-rw-r--r--policy/modules/admin/sosreport.te (renamed from policy/modules/contrib/sosreport.te)0
-rw-r--r--policy/modules/admin/sxid.fc (renamed from policy/modules/contrib/sxid.fc)0
-rw-r--r--policy/modules/admin/sxid.if (renamed from policy/modules/contrib/sxid.if)0
-rw-r--r--policy/modules/admin/sxid.te (renamed from policy/modules/contrib/sxid.te)0
-rw-r--r--policy/modules/admin/tboot.fc (renamed from policy/modules/contrib/tboot.fc)0
-rw-r--r--policy/modules/admin/tboot.if (renamed from policy/modules/contrib/tboot.if)0
-rw-r--r--policy/modules/admin/tboot.te (renamed from policy/modules/contrib/tboot.te)0
-rw-r--r--policy/modules/admin/tmpreaper.fc (renamed from policy/modules/contrib/tmpreaper.fc)0
-rw-r--r--policy/modules/admin/tmpreaper.if (renamed from policy/modules/contrib/tmpreaper.if)0
-rw-r--r--policy/modules/admin/tmpreaper.te (renamed from policy/modules/contrib/tmpreaper.te)0
-rw-r--r--policy/modules/admin/tripwire.fc (renamed from policy/modules/contrib/tripwire.fc)0
-rw-r--r--policy/modules/admin/tripwire.if (renamed from policy/modules/contrib/tripwire.if)0
-rw-r--r--policy/modules/admin/tripwire.te (renamed from policy/modules/contrib/tripwire.te)0
-rw-r--r--policy/modules/admin/tzdata.fc (renamed from policy/modules/contrib/tzdata.fc)0
-rw-r--r--policy/modules/admin/tzdata.if (renamed from policy/modules/contrib/tzdata.if)0
-rw-r--r--policy/modules/admin/tzdata.te (renamed from policy/modules/contrib/tzdata.te)0
-rw-r--r--policy/modules/admin/updfstab.fc (renamed from policy/modules/contrib/updfstab.fc)0
-rw-r--r--policy/modules/admin/updfstab.if (renamed from policy/modules/contrib/updfstab.if)0
-rw-r--r--policy/modules/admin/updfstab.te (renamed from policy/modules/contrib/updfstab.te)0
-rw-r--r--policy/modules/admin/usbmodules.fc (renamed from policy/modules/contrib/usbmodules.fc)0
-rw-r--r--policy/modules/admin/usbmodules.if (renamed from policy/modules/contrib/usbmodules.if)0
-rw-r--r--policy/modules/admin/usbmodules.te (renamed from policy/modules/contrib/usbmodules.te)0
-rw-r--r--policy/modules/admin/vbetool.fc (renamed from policy/modules/contrib/vbetool.fc)0
-rw-r--r--policy/modules/admin/vbetool.if (renamed from policy/modules/contrib/vbetool.if)0
-rw-r--r--policy/modules/admin/vbetool.te (renamed from policy/modules/contrib/vbetool.te)0
-rw-r--r--policy/modules/admin/vpn.fc (renamed from policy/modules/contrib/vpn.fc)0
-rw-r--r--policy/modules/admin/vpn.if (renamed from policy/modules/contrib/vpn.if)0
-rw-r--r--policy/modules/admin/vpn.te (renamed from policy/modules/contrib/vpn.te)0
-rw-r--r--policy/modules/apps/ada.fc (renamed from policy/modules/contrib/ada.fc)0
-rw-r--r--policy/modules/apps/ada.if (renamed from policy/modules/contrib/ada.if)0
-rw-r--r--policy/modules/apps/ada.te (renamed from policy/modules/contrib/ada.te)0
-rw-r--r--policy/modules/apps/awstats.fc (renamed from policy/modules/contrib/awstats.fc)0
-rw-r--r--policy/modules/apps/awstats.if (renamed from policy/modules/contrib/awstats.if)0
-rw-r--r--policy/modules/apps/awstats.te (renamed from policy/modules/contrib/awstats.te)0
-rw-r--r--policy/modules/apps/calamaris.fc (renamed from policy/modules/contrib/calamaris.fc)0
-rw-r--r--policy/modules/apps/calamaris.if (renamed from policy/modules/contrib/calamaris.if)0
-rw-r--r--policy/modules/apps/calamaris.te (renamed from policy/modules/contrib/calamaris.te)0
-rw-r--r--policy/modules/apps/cdrecord.fc (renamed from policy/modules/contrib/cdrecord.fc)0
-rw-r--r--policy/modules/apps/cdrecord.if (renamed from policy/modules/contrib/cdrecord.if)0
-rw-r--r--policy/modules/apps/cdrecord.te (renamed from policy/modules/contrib/cdrecord.te)0
-rw-r--r--policy/modules/apps/cpufreqselector.fc (renamed from policy/modules/contrib/cpufreqselector.fc)0
-rw-r--r--policy/modules/apps/cpufreqselector.if (renamed from policy/modules/contrib/cpufreqselector.if)0
-rw-r--r--policy/modules/apps/cpufreqselector.te (renamed from policy/modules/contrib/cpufreqselector.te)0
-rw-r--r--policy/modules/apps/evolution.fc (renamed from policy/modules/contrib/evolution.fc)0
-rw-r--r--policy/modules/apps/evolution.if (renamed from policy/modules/contrib/evolution.if)0
-rw-r--r--policy/modules/apps/evolution.te (renamed from policy/modules/contrib/evolution.te)0
-rw-r--r--policy/modules/apps/firewallgui.fc (renamed from policy/modules/contrib/firewallgui.fc)0
-rw-r--r--policy/modules/apps/firewallgui.if (renamed from policy/modules/contrib/firewallgui.if)0
-rw-r--r--policy/modules/apps/firewallgui.te (renamed from policy/modules/contrib/firewallgui.te)0
-rw-r--r--policy/modules/apps/games.fc (renamed from policy/modules/contrib/games.fc)0
-rw-r--r--policy/modules/apps/games.if (renamed from policy/modules/contrib/games.if)0
-rw-r--r--policy/modules/apps/games.te (renamed from policy/modules/contrib/games.te)0
-rw-r--r--policy/modules/apps/gift.fc (renamed from policy/modules/contrib/gift.fc)0
-rw-r--r--policy/modules/apps/gift.if (renamed from policy/modules/contrib/gift.if)0
-rw-r--r--policy/modules/apps/gift.te (renamed from policy/modules/contrib/gift.te)0
-rw-r--r--policy/modules/apps/gitosis.fc (renamed from policy/modules/contrib/gitosis.fc)0
-rw-r--r--policy/modules/apps/gitosis.if (renamed from policy/modules/contrib/gitosis.if)0
-rw-r--r--policy/modules/apps/gitosis.te (renamed from policy/modules/contrib/gitosis.te)0
-rw-r--r--policy/modules/apps/gnome.fc (renamed from policy/modules/contrib/gnome.fc)0
-rw-r--r--policy/modules/apps/gnome.if (renamed from policy/modules/contrib/gnome.if)0
-rw-r--r--policy/modules/apps/gnome.te (renamed from policy/modules/contrib/gnome.te)0
-rw-r--r--policy/modules/apps/gpg.fc (renamed from policy/modules/contrib/gpg.fc)0
-rw-r--r--policy/modules/apps/gpg.if (renamed from policy/modules/contrib/gpg.if)0
-rw-r--r--policy/modules/apps/gpg.te (renamed from policy/modules/contrib/gpg.te)0
-rw-r--r--policy/modules/apps/irc.fc (renamed from policy/modules/contrib/irc.fc)0
-rw-r--r--policy/modules/apps/irc.if (renamed from policy/modules/contrib/irc.if)0
-rw-r--r--policy/modules/apps/irc.te (renamed from policy/modules/contrib/irc.te)0
-rw-r--r--policy/modules/apps/java.fc (renamed from policy/modules/contrib/java.fc)0
-rw-r--r--policy/modules/apps/java.if (renamed from policy/modules/contrib/java.if)0
-rw-r--r--policy/modules/apps/java.te (renamed from policy/modules/contrib/java.te)0
-rw-r--r--policy/modules/apps/libmtp.fc (renamed from policy/modules/contrib/libmtp.fc)0
-rw-r--r--policy/modules/apps/libmtp.if (renamed from policy/modules/contrib/libmtp.if)0
-rw-r--r--policy/modules/apps/libmtp.te (renamed from policy/modules/contrib/libmtp.te)0
-rw-r--r--policy/modules/apps/lightsquid.fc (renamed from policy/modules/contrib/lightsquid.fc)0
-rw-r--r--policy/modules/apps/lightsquid.if (renamed from policy/modules/contrib/lightsquid.if)0
-rw-r--r--policy/modules/apps/lightsquid.te (renamed from policy/modules/contrib/lightsquid.te)0
-rw-r--r--policy/modules/apps/livecd.fc (renamed from policy/modules/contrib/livecd.fc)0
-rw-r--r--policy/modules/apps/livecd.if (renamed from policy/modules/contrib/livecd.if)0
-rw-r--r--policy/modules/apps/livecd.te (renamed from policy/modules/contrib/livecd.te)0
-rw-r--r--policy/modules/apps/loadkeys.fc (renamed from policy/modules/contrib/loadkeys.fc)0
-rw-r--r--policy/modules/apps/loadkeys.if (renamed from policy/modules/contrib/loadkeys.if)0
-rw-r--r--policy/modules/apps/loadkeys.te (renamed from policy/modules/contrib/loadkeys.te)0
-rw-r--r--policy/modules/apps/lockdev.fc (renamed from policy/modules/contrib/lockdev.fc)0
-rw-r--r--policy/modules/apps/lockdev.if (renamed from policy/modules/contrib/lockdev.if)0
-rw-r--r--policy/modules/apps/lockdev.te (renamed from policy/modules/contrib/lockdev.te)0
-rw-r--r--policy/modules/apps/man2html.fc (renamed from policy/modules/contrib/man2html.fc)0
-rw-r--r--policy/modules/apps/man2html.if (renamed from policy/modules/contrib/man2html.if)0
-rw-r--r--policy/modules/apps/man2html.te (renamed from policy/modules/contrib/man2html.te)0
-rw-r--r--policy/modules/apps/mandb.fc (renamed from policy/modules/contrib/mandb.fc)0
-rw-r--r--policy/modules/apps/mandb.if (renamed from policy/modules/contrib/mandb.if)0
-rw-r--r--policy/modules/apps/mandb.te (renamed from policy/modules/contrib/mandb.te)0
-rw-r--r--policy/modules/apps/mono.fc (renamed from policy/modules/contrib/mono.fc)0
-rw-r--r--policy/modules/apps/mono.if (renamed from policy/modules/contrib/mono.if)0
-rw-r--r--policy/modules/apps/mono.te (renamed from policy/modules/contrib/mono.te)0
-rw-r--r--policy/modules/apps/mozilla.fc (renamed from policy/modules/contrib/mozilla.fc)0
-rw-r--r--policy/modules/apps/mozilla.if (renamed from policy/modules/contrib/mozilla.if)0
-rw-r--r--policy/modules/apps/mozilla.te (renamed from policy/modules/contrib/mozilla.te)0
-rw-r--r--policy/modules/apps/mplayer.fc (renamed from policy/modules/contrib/mplayer.fc)0
-rw-r--r--policy/modules/apps/mplayer.if (renamed from policy/modules/contrib/mplayer.if)0
-rw-r--r--policy/modules/apps/mplayer.te (renamed from policy/modules/contrib/mplayer.te)0
-rw-r--r--policy/modules/apps/openoffice.fc (renamed from policy/modules/contrib/openoffice.fc)0
-rw-r--r--policy/modules/apps/openoffice.if (renamed from policy/modules/contrib/openoffice.if)0
-rw-r--r--policy/modules/apps/openoffice.te (renamed from policy/modules/contrib/openoffice.te)0
-rw-r--r--policy/modules/apps/podsleuth.fc (renamed from policy/modules/contrib/podsleuth.fc)0
-rw-r--r--policy/modules/apps/podsleuth.if (renamed from policy/modules/contrib/podsleuth.if)0
-rw-r--r--policy/modules/apps/podsleuth.te (renamed from policy/modules/contrib/podsleuth.te)0
-rw-r--r--policy/modules/apps/ptchown.fc (renamed from policy/modules/contrib/ptchown.fc)0
-rw-r--r--policy/modules/apps/ptchown.if (renamed from policy/modules/contrib/ptchown.if)0
-rw-r--r--policy/modules/apps/ptchown.te (renamed from policy/modules/contrib/ptchown.te)0
-rw-r--r--policy/modules/apps/pulseaudio.fc (renamed from policy/modules/contrib/pulseaudio.fc)0
-rw-r--r--policy/modules/apps/pulseaudio.if (renamed from policy/modules/contrib/pulseaudio.if)0
-rw-r--r--policy/modules/apps/pulseaudio.te (renamed from policy/modules/contrib/pulseaudio.te)0
-rw-r--r--policy/modules/apps/qemu.fc (renamed from policy/modules/contrib/qemu.fc)0
-rw-r--r--policy/modules/apps/qemu.if (renamed from policy/modules/contrib/qemu.if)0
-rw-r--r--policy/modules/apps/qemu.te (renamed from policy/modules/contrib/qemu.te)0
-rw-r--r--policy/modules/apps/rssh.fc (renamed from policy/modules/contrib/rssh.fc)0
-rw-r--r--policy/modules/apps/rssh.if (renamed from policy/modules/contrib/rssh.if)0
-rw-r--r--policy/modules/apps/rssh.te (renamed from policy/modules/contrib/rssh.te)0
-rw-r--r--policy/modules/apps/sambagui.fc (renamed from policy/modules/contrib/sambagui.fc)0
-rw-r--r--policy/modules/apps/sambagui.if (renamed from policy/modules/contrib/sambagui.if)0
-rw-r--r--policy/modules/apps/sambagui.te (renamed from policy/modules/contrib/sambagui.te)0
-rw-r--r--policy/modules/apps/screen.fc (renamed from policy/modules/contrib/screen.fc)0
-rw-r--r--policy/modules/apps/screen.if (renamed from policy/modules/contrib/screen.if)0
-rw-r--r--policy/modules/apps/screen.te (renamed from policy/modules/contrib/screen.te)0
-rw-r--r--policy/modules/apps/slocate.fc (renamed from policy/modules/contrib/slocate.fc)0
-rw-r--r--policy/modules/apps/slocate.if (renamed from policy/modules/contrib/slocate.if)0
-rw-r--r--policy/modules/apps/slocate.te (renamed from policy/modules/contrib/slocate.te)0
-rw-r--r--policy/modules/apps/syncthing.fc (renamed from policy/modules/contrib/syncthing.fc)0
-rw-r--r--policy/modules/apps/syncthing.if (renamed from policy/modules/contrib/syncthing.if)0
-rw-r--r--policy/modules/apps/syncthing.te (renamed from policy/modules/contrib/syncthing.te)0
-rw-r--r--policy/modules/apps/telepathy.fc (renamed from policy/modules/contrib/telepathy.fc)0
-rw-r--r--policy/modules/apps/telepathy.if (renamed from policy/modules/contrib/telepathy.if)0
-rw-r--r--policy/modules/apps/telepathy.te (renamed from policy/modules/contrib/telepathy.te)0
-rw-r--r--policy/modules/apps/thunderbird.fc (renamed from policy/modules/contrib/thunderbird.fc)0
-rw-r--r--policy/modules/apps/thunderbird.if (renamed from policy/modules/contrib/thunderbird.if)0
-rw-r--r--policy/modules/apps/thunderbird.te (renamed from policy/modules/contrib/thunderbird.te)0
-rw-r--r--policy/modules/apps/tvtime.fc (renamed from policy/modules/contrib/tvtime.fc)0
-rw-r--r--policy/modules/apps/tvtime.if (renamed from policy/modules/contrib/tvtime.if)0
-rw-r--r--policy/modules/apps/tvtime.te (renamed from policy/modules/contrib/tvtime.te)0
-rw-r--r--policy/modules/apps/uml.fc (renamed from policy/modules/contrib/uml.fc)0
-rw-r--r--policy/modules/apps/uml.if (renamed from policy/modules/contrib/uml.if)0
-rw-r--r--policy/modules/apps/uml.te (renamed from policy/modules/contrib/uml.te)0
-rw-r--r--policy/modules/apps/userhelper.fc (renamed from policy/modules/contrib/userhelper.fc)0
-rw-r--r--policy/modules/apps/userhelper.if (renamed from policy/modules/contrib/userhelper.if)0
-rw-r--r--policy/modules/apps/userhelper.te (renamed from policy/modules/contrib/userhelper.te)0
-rw-r--r--policy/modules/apps/usernetctl.fc (renamed from policy/modules/contrib/usernetctl.fc)0
-rw-r--r--policy/modules/apps/usernetctl.if (renamed from policy/modules/contrib/usernetctl.if)0
-rw-r--r--policy/modules/apps/usernetctl.te (renamed from policy/modules/contrib/usernetctl.te)0
-rw-r--r--policy/modules/apps/vlock.fc (renamed from policy/modules/contrib/vlock.fc)0
-rw-r--r--policy/modules/apps/vlock.if (renamed from policy/modules/contrib/vlock.if)0
-rw-r--r--policy/modules/apps/vlock.te (renamed from policy/modules/contrib/vlock.te)0
-rw-r--r--policy/modules/apps/vmware.fc (renamed from policy/modules/contrib/vmware.fc)0
-rw-r--r--policy/modules/apps/vmware.if (renamed from policy/modules/contrib/vmware.if)0
-rw-r--r--policy/modules/apps/vmware.te (renamed from policy/modules/contrib/vmware.te)0
-rw-r--r--policy/modules/apps/webalizer.fc (renamed from policy/modules/contrib/webalizer.fc)0
-rw-r--r--policy/modules/apps/webalizer.if (renamed from policy/modules/contrib/webalizer.if)0
-rw-r--r--policy/modules/apps/webalizer.te (renamed from policy/modules/contrib/webalizer.te)0
-rw-r--r--policy/modules/apps/wine.fc (renamed from policy/modules/contrib/wine.fc)0
-rw-r--r--policy/modules/apps/wine.if (renamed from policy/modules/contrib/wine.if)0
-rw-r--r--policy/modules/apps/wine.te (renamed from policy/modules/contrib/wine.te)0
-rw-r--r--policy/modules/apps/wireshark.fc (renamed from policy/modules/contrib/wireshark.fc)0
-rw-r--r--policy/modules/apps/wireshark.if (renamed from policy/modules/contrib/wireshark.if)0
-rw-r--r--policy/modules/apps/wireshark.te (renamed from policy/modules/contrib/wireshark.te)0
-rw-r--r--policy/modules/apps/wm.fc (renamed from policy/modules/contrib/wm.fc)0
-rw-r--r--policy/modules/apps/wm.if (renamed from policy/modules/contrib/wm.if)0
-rw-r--r--policy/modules/apps/wm.te (renamed from policy/modules/contrib/wm.te)0
-rw-r--r--policy/modules/apps/xscreensaver.fc (renamed from policy/modules/contrib/xscreensaver.fc)0
-rw-r--r--policy/modules/apps/xscreensaver.if (renamed from policy/modules/contrib/xscreensaver.if)0
-rw-r--r--policy/modules/apps/xscreensaver.te (renamed from policy/modules/contrib/xscreensaver.te)0
-rw-r--r--policy/modules/apps/yam.fc (renamed from policy/modules/contrib/yam.fc)0
-rw-r--r--policy/modules/apps/yam.if (renamed from policy/modules/contrib/yam.if)0
-rw-r--r--policy/modules/apps/yam.te (renamed from policy/modules/contrib/yam.te)0
-rw-r--r--policy/modules/contrib/Changelog2210
-rw-r--r--policy/modules/contrib/metadata.xml1
-rw-r--r--policy/modules/roles/dbadm.fc (renamed from policy/modules/contrib/dbadm.fc)0
-rw-r--r--policy/modules/roles/dbadm.if (renamed from policy/modules/contrib/dbadm.if)0
-rw-r--r--policy/modules/roles/dbadm.te (renamed from policy/modules/contrib/dbadm.te)0
-rw-r--r--policy/modules/roles/guest.fc (renamed from policy/modules/contrib/guest.fc)0
-rw-r--r--policy/modules/roles/guest.if (renamed from policy/modules/contrib/guest.if)0
-rw-r--r--policy/modules/roles/guest.te (renamed from policy/modules/contrib/guest.te)0
-rw-r--r--policy/modules/roles/webadm.fc (renamed from policy/modules/contrib/webadm.fc)0
-rw-r--r--policy/modules/roles/webadm.if (renamed from policy/modules/contrib/webadm.if)0
-rw-r--r--policy/modules/roles/webadm.te (renamed from policy/modules/contrib/webadm.te)0
-rw-r--r--policy/modules/roles/xguest.fc (renamed from policy/modules/contrib/xguest.fc)0
-rw-r--r--policy/modules/roles/xguest.if (renamed from policy/modules/contrib/xguest.if)0
-rw-r--r--policy/modules/roles/xguest.te (renamed from policy/modules/contrib/xguest.te)0
-rw-r--r--policy/modules/services/abrt.fc (renamed from policy/modules/contrib/abrt.fc)0
-rw-r--r--policy/modules/services/abrt.if (renamed from policy/modules/contrib/abrt.if)0
-rw-r--r--policy/modules/services/abrt.te (renamed from policy/modules/contrib/abrt.te)0
-rw-r--r--policy/modules/services/accountsd.fc (renamed from policy/modules/contrib/accountsd.fc)0
-rw-r--r--policy/modules/services/accountsd.if (renamed from policy/modules/contrib/accountsd.if)0
-rw-r--r--policy/modules/services/accountsd.te (renamed from policy/modules/contrib/accountsd.te)0
-rw-r--r--policy/modules/services/acpi.fc (renamed from policy/modules/contrib/acpi.fc)0
-rw-r--r--policy/modules/services/acpi.if (renamed from policy/modules/contrib/acpi.if)0
-rw-r--r--policy/modules/services/acpi.te (renamed from policy/modules/contrib/acpi.te)0
-rw-r--r--policy/modules/services/afs.fc (renamed from policy/modules/contrib/afs.fc)0
-rw-r--r--policy/modules/services/afs.if (renamed from policy/modules/contrib/afs.if)0
-rw-r--r--policy/modules/services/afs.te (renamed from policy/modules/contrib/afs.te)0
-rw-r--r--policy/modules/services/aiccu.fc (renamed from policy/modules/contrib/aiccu.fc)0
-rw-r--r--policy/modules/services/aiccu.if (renamed from policy/modules/contrib/aiccu.if)0
-rw-r--r--policy/modules/services/aiccu.te (renamed from policy/modules/contrib/aiccu.te)0
-rw-r--r--policy/modules/services/aisexec.fc (renamed from policy/modules/contrib/aisexec.fc)0
-rw-r--r--policy/modules/services/aisexec.if (renamed from policy/modules/contrib/aisexec.if)0
-rw-r--r--policy/modules/services/aisexec.te (renamed from policy/modules/contrib/aisexec.te)0
-rw-r--r--policy/modules/services/amavis.fc (renamed from policy/modules/contrib/amavis.fc)0
-rw-r--r--policy/modules/services/amavis.if (renamed from policy/modules/contrib/amavis.if)0
-rw-r--r--policy/modules/services/amavis.te (renamed from policy/modules/contrib/amavis.te)0
-rw-r--r--policy/modules/services/apache.fc (renamed from policy/modules/contrib/apache.fc)0
-rw-r--r--policy/modules/services/apache.if (renamed from policy/modules/contrib/apache.if)0
-rw-r--r--policy/modules/services/apache.te (renamed from policy/modules/contrib/apache.te)0
-rw-r--r--policy/modules/services/apcupsd.fc (renamed from policy/modules/contrib/apcupsd.fc)0
-rw-r--r--policy/modules/services/apcupsd.if (renamed from policy/modules/contrib/apcupsd.if)0
-rw-r--r--policy/modules/services/apcupsd.te (renamed from policy/modules/contrib/apcupsd.te)0
-rw-r--r--policy/modules/services/arpwatch.fc (renamed from policy/modules/contrib/arpwatch.fc)0
-rw-r--r--policy/modules/services/arpwatch.if (renamed from policy/modules/contrib/arpwatch.if)0
-rw-r--r--policy/modules/services/arpwatch.te (renamed from policy/modules/contrib/arpwatch.te)0
-rw-r--r--policy/modules/services/asterisk.fc (renamed from policy/modules/contrib/asterisk.fc)0
-rw-r--r--policy/modules/services/asterisk.if (renamed from policy/modules/contrib/asterisk.if)0
-rw-r--r--policy/modules/services/asterisk.te (renamed from policy/modules/contrib/asterisk.te)0
-rw-r--r--policy/modules/services/automount.fc (renamed from policy/modules/contrib/automount.fc)0
-rw-r--r--policy/modules/services/automount.if (renamed from policy/modules/contrib/automount.if)0
-rw-r--r--policy/modules/services/automount.te (renamed from policy/modules/contrib/automount.te)0
-rw-r--r--policy/modules/services/avahi.fc (renamed from policy/modules/contrib/avahi.fc)0
-rw-r--r--policy/modules/services/avahi.if (renamed from policy/modules/contrib/avahi.if)0
-rw-r--r--policy/modules/services/avahi.te (renamed from policy/modules/contrib/avahi.te)0
-rw-r--r--policy/modules/services/bind.fc (renamed from policy/modules/contrib/bind.fc)0
-rw-r--r--policy/modules/services/bind.if (renamed from policy/modules/contrib/bind.if)0
-rw-r--r--policy/modules/services/bind.te (renamed from policy/modules/contrib/bind.te)0
-rw-r--r--policy/modules/services/bird.fc (renamed from policy/modules/contrib/bird.fc)0
-rw-r--r--policy/modules/services/bird.if (renamed from policy/modules/contrib/bird.if)0
-rw-r--r--policy/modules/services/bird.te (renamed from policy/modules/contrib/bird.te)0
-rw-r--r--policy/modules/services/bitlbee.fc (renamed from policy/modules/contrib/bitlbee.fc)0
-rw-r--r--policy/modules/services/bitlbee.if (renamed from policy/modules/contrib/bitlbee.if)0
-rw-r--r--policy/modules/services/bitlbee.te (renamed from policy/modules/contrib/bitlbee.te)0
-rw-r--r--policy/modules/services/bluetooth.fc (renamed from policy/modules/contrib/bluetooth.fc)0
-rw-r--r--policy/modules/services/bluetooth.if (renamed from policy/modules/contrib/bluetooth.if)0
-rw-r--r--policy/modules/services/bluetooth.te (renamed from policy/modules/contrib/bluetooth.te)0
-rw-r--r--policy/modules/services/boinc.fc (renamed from policy/modules/contrib/boinc.fc)0
-rw-r--r--policy/modules/services/boinc.if (renamed from policy/modules/contrib/boinc.if)0
-rw-r--r--policy/modules/services/boinc.te (renamed from policy/modules/contrib/boinc.te)0
-rw-r--r--policy/modules/services/bugzilla.fc (renamed from policy/modules/contrib/bugzilla.fc)0
-rw-r--r--policy/modules/services/bugzilla.if (renamed from policy/modules/contrib/bugzilla.if)0
-rw-r--r--policy/modules/services/bugzilla.te (renamed from policy/modules/contrib/bugzilla.te)0
-rw-r--r--policy/modules/services/cachefilesd.fc (renamed from policy/modules/contrib/cachefilesd.fc)0
-rw-r--r--policy/modules/services/cachefilesd.if (renamed from policy/modules/contrib/cachefilesd.if)0
-rw-r--r--policy/modules/services/cachefilesd.te (renamed from policy/modules/contrib/cachefilesd.te)0
-rw-r--r--policy/modules/services/callweaver.fc (renamed from policy/modules/contrib/callweaver.fc)0
-rw-r--r--policy/modules/services/callweaver.if (renamed from policy/modules/contrib/callweaver.if)0
-rw-r--r--policy/modules/services/callweaver.te (renamed from policy/modules/contrib/callweaver.te)0
-rw-r--r--policy/modules/services/canna.fc (renamed from policy/modules/contrib/canna.fc)0
-rw-r--r--policy/modules/services/canna.if (renamed from policy/modules/contrib/canna.if)0
-rw-r--r--policy/modules/services/canna.te (renamed from policy/modules/contrib/canna.te)0
-rw-r--r--policy/modules/services/ccs.fc (renamed from policy/modules/contrib/ccs.fc)0
-rw-r--r--policy/modules/services/ccs.if (renamed from policy/modules/contrib/ccs.if)0
-rw-r--r--policy/modules/services/ccs.te (renamed from policy/modules/contrib/ccs.te)0
-rw-r--r--policy/modules/services/certmaster.fc (renamed from policy/modules/contrib/certmaster.fc)0
-rw-r--r--policy/modules/services/certmaster.if (renamed from policy/modules/contrib/certmaster.if)0
-rw-r--r--policy/modules/services/certmaster.te (renamed from policy/modules/contrib/certmaster.te)0
-rw-r--r--policy/modules/services/certmonger.fc (renamed from policy/modules/contrib/certmonger.fc)0
-rw-r--r--policy/modules/services/certmonger.if (renamed from policy/modules/contrib/certmonger.if)0
-rw-r--r--policy/modules/services/certmonger.te (renamed from policy/modules/contrib/certmonger.te)0
-rw-r--r--policy/modules/services/cgmanager.fc (renamed from policy/modules/contrib/cgmanager.fc)0
-rw-r--r--policy/modules/services/cgmanager.if (renamed from policy/modules/contrib/cgmanager.if)0
-rw-r--r--policy/modules/services/cgmanager.te (renamed from policy/modules/contrib/cgmanager.te)0
-rw-r--r--policy/modules/services/cgroup.fc (renamed from policy/modules/contrib/cgroup.fc)0
-rw-r--r--policy/modules/services/cgroup.if (renamed from policy/modules/contrib/cgroup.if)0
-rw-r--r--policy/modules/services/cgroup.te (renamed from policy/modules/contrib/cgroup.te)0
-rw-r--r--policy/modules/services/chronyd.fc (renamed from policy/modules/contrib/chronyd.fc)0
-rw-r--r--policy/modules/services/chronyd.if (renamed from policy/modules/contrib/chronyd.if)0
-rw-r--r--policy/modules/services/chronyd.te (renamed from policy/modules/contrib/chronyd.te)0
-rw-r--r--policy/modules/services/cipe.fc (renamed from policy/modules/contrib/cipe.fc)0
-rw-r--r--policy/modules/services/cipe.if (renamed from policy/modules/contrib/cipe.if)0
-rw-r--r--policy/modules/services/cipe.te (renamed from policy/modules/contrib/cipe.te)0
-rw-r--r--policy/modules/services/clamav.fc (renamed from policy/modules/contrib/clamav.fc)0
-rw-r--r--policy/modules/services/clamav.if (renamed from policy/modules/contrib/clamav.if)0
-rw-r--r--policy/modules/services/clamav.te (renamed from policy/modules/contrib/clamav.te)0
-rw-r--r--policy/modules/services/clockspeed.fc (renamed from policy/modules/contrib/clockspeed.fc)0
-rw-r--r--policy/modules/services/clockspeed.if (renamed from policy/modules/contrib/clockspeed.if)0
-rw-r--r--policy/modules/services/clockspeed.te (renamed from policy/modules/contrib/clockspeed.te)0
-rw-r--r--policy/modules/services/clogd.fc (renamed from policy/modules/contrib/clogd.fc)0
-rw-r--r--policy/modules/services/clogd.if (renamed from policy/modules/contrib/clogd.if)0
-rw-r--r--policy/modules/services/clogd.te (renamed from policy/modules/contrib/clogd.te)0
-rw-r--r--policy/modules/services/cmirrord.fc (renamed from policy/modules/contrib/cmirrord.fc)0
-rw-r--r--policy/modules/services/cmirrord.if (renamed from policy/modules/contrib/cmirrord.if)0
-rw-r--r--policy/modules/services/cmirrord.te (renamed from policy/modules/contrib/cmirrord.te)0
-rw-r--r--policy/modules/services/cobbler.fc (renamed from policy/modules/contrib/cobbler.fc)0
-rw-r--r--policy/modules/services/cobbler.if (renamed from policy/modules/contrib/cobbler.if)0
-rw-r--r--policy/modules/services/cobbler.te (renamed from policy/modules/contrib/cobbler.te)0
-rw-r--r--policy/modules/services/collectd.fc (renamed from policy/modules/contrib/collectd.fc)0
-rw-r--r--policy/modules/services/collectd.if (renamed from policy/modules/contrib/collectd.if)0
-rw-r--r--policy/modules/services/collectd.te (renamed from policy/modules/contrib/collectd.te)0
-rw-r--r--policy/modules/services/colord.fc (renamed from policy/modules/contrib/colord.fc)0
-rw-r--r--policy/modules/services/colord.if (renamed from policy/modules/contrib/colord.if)0
-rw-r--r--policy/modules/services/colord.te (renamed from policy/modules/contrib/colord.te)0
-rw-r--r--policy/modules/services/comsat.fc (renamed from policy/modules/contrib/comsat.fc)0
-rw-r--r--policy/modules/services/comsat.if (renamed from policy/modules/contrib/comsat.if)0
-rw-r--r--policy/modules/services/comsat.te (renamed from policy/modules/contrib/comsat.te)0
-rw-r--r--policy/modules/services/condor.fc (renamed from policy/modules/contrib/condor.fc)0
-rw-r--r--policy/modules/services/condor.if (renamed from policy/modules/contrib/condor.if)0
-rw-r--r--policy/modules/services/condor.te (renamed from policy/modules/contrib/condor.te)0
-rw-r--r--policy/modules/services/consolekit.fc (renamed from policy/modules/contrib/consolekit.fc)0
-rw-r--r--policy/modules/services/consolekit.if (renamed from policy/modules/contrib/consolekit.if)0
-rw-r--r--policy/modules/services/consolekit.te (renamed from policy/modules/contrib/consolekit.te)0
-rw-r--r--policy/modules/services/corosync.fc (renamed from policy/modules/contrib/corosync.fc)0
-rw-r--r--policy/modules/services/corosync.if (renamed from policy/modules/contrib/corosync.if)0
-rw-r--r--policy/modules/services/corosync.te (renamed from policy/modules/contrib/corosync.te)0
-rw-r--r--policy/modules/services/couchdb.fc (renamed from policy/modules/contrib/couchdb.fc)0
-rw-r--r--policy/modules/services/couchdb.if (renamed from policy/modules/contrib/couchdb.if)0
-rw-r--r--policy/modules/services/couchdb.te (renamed from policy/modules/contrib/couchdb.te)0
-rw-r--r--policy/modules/services/courier.fc (renamed from policy/modules/contrib/courier.fc)0
-rw-r--r--policy/modules/services/courier.if (renamed from policy/modules/contrib/courier.if)0
-rw-r--r--policy/modules/services/courier.te (renamed from policy/modules/contrib/courier.te)0
-rw-r--r--policy/modules/services/cpucontrol.fc (renamed from policy/modules/contrib/cpucontrol.fc)0
-rw-r--r--policy/modules/services/cpucontrol.if (renamed from policy/modules/contrib/cpucontrol.if)0
-rw-r--r--policy/modules/services/cpucontrol.te (renamed from policy/modules/contrib/cpucontrol.te)0
-rw-r--r--policy/modules/services/cron.fc (renamed from policy/modules/contrib/cron.fc)0
-rw-r--r--policy/modules/services/cron.if (renamed from policy/modules/contrib/cron.if)0
-rw-r--r--policy/modules/services/cron.te (renamed from policy/modules/contrib/cron.te)0
-rw-r--r--policy/modules/services/ctdb.fc (renamed from policy/modules/contrib/ctdb.fc)0
-rw-r--r--policy/modules/services/ctdb.if (renamed from policy/modules/contrib/ctdb.if)0
-rw-r--r--policy/modules/services/ctdb.te (renamed from policy/modules/contrib/ctdb.te)0
-rw-r--r--policy/modules/services/cups.fc (renamed from policy/modules/contrib/cups.fc)0
-rw-r--r--policy/modules/services/cups.if (renamed from policy/modules/contrib/cups.if)0
-rw-r--r--policy/modules/services/cups.te (renamed from policy/modules/contrib/cups.te)0
-rw-r--r--policy/modules/services/cvs.fc (renamed from policy/modules/contrib/cvs.fc)0
-rw-r--r--policy/modules/services/cvs.if (renamed from policy/modules/contrib/cvs.if)0
-rw-r--r--policy/modules/services/cvs.te (renamed from policy/modules/contrib/cvs.te)0
-rw-r--r--policy/modules/services/cyphesis.fc (renamed from policy/modules/contrib/cyphesis.fc)0
-rw-r--r--policy/modules/services/cyphesis.if (renamed from policy/modules/contrib/cyphesis.if)0
-rw-r--r--policy/modules/services/cyphesis.te (renamed from policy/modules/contrib/cyphesis.te)0
-rw-r--r--policy/modules/services/cyrus.fc (renamed from policy/modules/contrib/cyrus.fc)0
-rw-r--r--policy/modules/services/cyrus.if (renamed from policy/modules/contrib/cyrus.if)0
-rw-r--r--policy/modules/services/cyrus.te (renamed from policy/modules/contrib/cyrus.te)0
-rw-r--r--policy/modules/services/dante.fc (renamed from policy/modules/contrib/dante.fc)0
-rw-r--r--policy/modules/services/dante.if (renamed from policy/modules/contrib/dante.if)0
-rw-r--r--policy/modules/services/dante.te (renamed from policy/modules/contrib/dante.te)0
-rw-r--r--policy/modules/services/dbskk.fc (renamed from policy/modules/contrib/dbskk.fc)0
-rw-r--r--policy/modules/services/dbskk.if (renamed from policy/modules/contrib/dbskk.if)0
-rw-r--r--policy/modules/services/dbskk.te (renamed from policy/modules/contrib/dbskk.te)0
-rw-r--r--policy/modules/services/dbus.fc (renamed from policy/modules/contrib/dbus.fc)0
-rw-r--r--policy/modules/services/dbus.if (renamed from policy/modules/contrib/dbus.if)0
-rw-r--r--policy/modules/services/dbus.te (renamed from policy/modules/contrib/dbus.te)0
-rw-r--r--policy/modules/services/dcc.fc (renamed from policy/modules/contrib/dcc.fc)0
-rw-r--r--policy/modules/services/dcc.if (renamed from policy/modules/contrib/dcc.if)0
-rw-r--r--policy/modules/services/dcc.te (renamed from policy/modules/contrib/dcc.te)0
-rw-r--r--policy/modules/services/ddclient.fc (renamed from policy/modules/contrib/ddclient.fc)0
-rw-r--r--policy/modules/services/ddclient.if (renamed from policy/modules/contrib/ddclient.if)0
-rw-r--r--policy/modules/services/ddclient.te (renamed from policy/modules/contrib/ddclient.te)0
-rw-r--r--policy/modules/services/denyhosts.fc (renamed from policy/modules/contrib/denyhosts.fc)0
-rw-r--r--policy/modules/services/denyhosts.if (renamed from policy/modules/contrib/denyhosts.if)0
-rw-r--r--policy/modules/services/denyhosts.te (renamed from policy/modules/contrib/denyhosts.te)0
-rw-r--r--policy/modules/services/devicekit.fc (renamed from policy/modules/contrib/devicekit.fc)0
-rw-r--r--policy/modules/services/devicekit.if (renamed from policy/modules/contrib/devicekit.if)0
-rw-r--r--policy/modules/services/devicekit.te (renamed from policy/modules/contrib/devicekit.te)0
-rw-r--r--policy/modules/services/dhcp.fc (renamed from policy/modules/contrib/dhcp.fc)0
-rw-r--r--policy/modules/services/dhcp.if (renamed from policy/modules/contrib/dhcp.if)0
-rw-r--r--policy/modules/services/dhcp.te (renamed from policy/modules/contrib/dhcp.te)0
-rw-r--r--policy/modules/services/dictd.fc (renamed from policy/modules/contrib/dictd.fc)0
-rw-r--r--policy/modules/services/dictd.if (renamed from policy/modules/contrib/dictd.if)0
-rw-r--r--policy/modules/services/dictd.te (renamed from policy/modules/contrib/dictd.te)0
-rw-r--r--policy/modules/services/dirmngr.fc (renamed from policy/modules/contrib/dirmngr.fc)0
-rw-r--r--policy/modules/services/dirmngr.if (renamed from policy/modules/contrib/dirmngr.if)0
-rw-r--r--policy/modules/services/dirmngr.te (renamed from policy/modules/contrib/dirmngr.te)0
-rw-r--r--policy/modules/services/distcc.fc (renamed from policy/modules/contrib/distcc.fc)0
-rw-r--r--policy/modules/services/distcc.if (renamed from policy/modules/contrib/distcc.if)0
-rw-r--r--policy/modules/services/distcc.te (renamed from policy/modules/contrib/distcc.te)0
-rw-r--r--policy/modules/services/djbdns.fc (renamed from policy/modules/contrib/djbdns.fc)0
-rw-r--r--policy/modules/services/djbdns.if (renamed from policy/modules/contrib/djbdns.if)0
-rw-r--r--policy/modules/services/djbdns.te (renamed from policy/modules/contrib/djbdns.te)0
-rw-r--r--policy/modules/services/dkim.fc (renamed from policy/modules/contrib/dkim.fc)0
-rw-r--r--policy/modules/services/dkim.if (renamed from policy/modules/contrib/dkim.if)0
-rw-r--r--policy/modules/services/dkim.te (renamed from policy/modules/contrib/dkim.te)0
-rw-r--r--policy/modules/services/dnsmasq.fc (renamed from policy/modules/contrib/dnsmasq.fc)0
-rw-r--r--policy/modules/services/dnsmasq.if (renamed from policy/modules/contrib/dnsmasq.if)0
-rw-r--r--policy/modules/services/dnsmasq.te (renamed from policy/modules/contrib/dnsmasq.te)0
-rw-r--r--policy/modules/services/dnssectrigger.fc (renamed from policy/modules/contrib/dnssectrigger.fc)0
-rw-r--r--policy/modules/services/dnssectrigger.if (renamed from policy/modules/contrib/dnssectrigger.if)0
-rw-r--r--policy/modules/services/dnssectrigger.te (renamed from policy/modules/contrib/dnssectrigger.te)0
-rw-r--r--policy/modules/services/dovecot.fc (renamed from policy/modules/contrib/dovecot.fc)0
-rw-r--r--policy/modules/services/dovecot.if (renamed from policy/modules/contrib/dovecot.if)0
-rw-r--r--policy/modules/services/dovecot.te (renamed from policy/modules/contrib/dovecot.te)0
-rw-r--r--policy/modules/services/drbd.fc (renamed from policy/modules/contrib/drbd.fc)0
-rw-r--r--policy/modules/services/drbd.if (renamed from policy/modules/contrib/drbd.if)0
-rw-r--r--policy/modules/services/drbd.te (renamed from policy/modules/contrib/drbd.te)0
-rw-r--r--policy/modules/services/dspam.fc (renamed from policy/modules/contrib/dspam.fc)0
-rw-r--r--policy/modules/services/dspam.if (renamed from policy/modules/contrib/dspam.if)0
-rw-r--r--policy/modules/services/dspam.te (renamed from policy/modules/contrib/dspam.te)0
-rw-r--r--policy/modules/services/entropyd.fc (renamed from policy/modules/contrib/entropyd.fc)0
-rw-r--r--policy/modules/services/entropyd.if (renamed from policy/modules/contrib/entropyd.if)0
-rw-r--r--policy/modules/services/entropyd.te (renamed from policy/modules/contrib/entropyd.te)0
-rw-r--r--policy/modules/services/exim.fc (renamed from policy/modules/contrib/exim.fc)0
-rw-r--r--policy/modules/services/exim.if (renamed from policy/modules/contrib/exim.if)0
-rw-r--r--policy/modules/services/exim.te (renamed from policy/modules/contrib/exim.te)0
-rw-r--r--policy/modules/services/fail2ban.fc (renamed from policy/modules/contrib/fail2ban.fc)0
-rw-r--r--policy/modules/services/fail2ban.if (renamed from policy/modules/contrib/fail2ban.if)0
-rw-r--r--policy/modules/services/fail2ban.te (renamed from policy/modules/contrib/fail2ban.te)0
-rw-r--r--policy/modules/services/fcoe.fc (renamed from policy/modules/contrib/fcoe.fc)0
-rw-r--r--policy/modules/services/fcoe.if (renamed from policy/modules/contrib/fcoe.if)0
-rw-r--r--policy/modules/services/fcoe.te (renamed from policy/modules/contrib/fcoe.te)0
-rw-r--r--policy/modules/services/fetchmail.fc (renamed from policy/modules/contrib/fetchmail.fc)0
-rw-r--r--policy/modules/services/fetchmail.if (renamed from policy/modules/contrib/fetchmail.if)0
-rw-r--r--policy/modules/services/fetchmail.te (renamed from policy/modules/contrib/fetchmail.te)0
-rw-r--r--policy/modules/services/finger.fc (renamed from policy/modules/contrib/finger.fc)0
-rw-r--r--policy/modules/services/finger.if (renamed from policy/modules/contrib/finger.if)0
-rw-r--r--policy/modules/services/finger.te (renamed from policy/modules/contrib/finger.te)0
-rw-r--r--policy/modules/services/firewalld.fc (renamed from policy/modules/contrib/firewalld.fc)0
-rw-r--r--policy/modules/services/firewalld.if (renamed from policy/modules/contrib/firewalld.if)0
-rw-r--r--policy/modules/services/firewalld.te (renamed from policy/modules/contrib/firewalld.te)0
-rw-r--r--policy/modules/services/fprintd.fc (renamed from policy/modules/contrib/fprintd.fc)0
-rw-r--r--policy/modules/services/fprintd.if (renamed from policy/modules/contrib/fprintd.if)0
-rw-r--r--policy/modules/services/fprintd.te (renamed from policy/modules/contrib/fprintd.te)0
-rw-r--r--policy/modules/services/ftp.fc (renamed from policy/modules/contrib/ftp.fc)0
-rw-r--r--policy/modules/services/ftp.if (renamed from policy/modules/contrib/ftp.if)0
-rw-r--r--policy/modules/services/ftp.te (renamed from policy/modules/contrib/ftp.te)0
-rw-r--r--policy/modules/services/gatekeeper.fc (renamed from policy/modules/contrib/gatekeeper.fc)0
-rw-r--r--policy/modules/services/gatekeeper.if (renamed from policy/modules/contrib/gatekeeper.if)0
-rw-r--r--policy/modules/services/gatekeeper.te (renamed from policy/modules/contrib/gatekeeper.te)0
-rw-r--r--policy/modules/services/gdomap.fc (renamed from policy/modules/contrib/gdomap.fc)0
-rw-r--r--policy/modules/services/gdomap.if (renamed from policy/modules/contrib/gdomap.if)0
-rw-r--r--policy/modules/services/gdomap.te (renamed from policy/modules/contrib/gdomap.te)0
-rw-r--r--policy/modules/services/geoclue.fc (renamed from policy/modules/contrib/geoclue.fc)0
-rw-r--r--policy/modules/services/geoclue.if (renamed from policy/modules/contrib/geoclue.if)0
-rw-r--r--policy/modules/services/geoclue.te (renamed from policy/modules/contrib/geoclue.te)0
-rw-r--r--policy/modules/services/git.fc (renamed from policy/modules/contrib/git.fc)0
-rw-r--r--policy/modules/services/git.if (renamed from policy/modules/contrib/git.if)0
-rw-r--r--policy/modules/services/git.te (renamed from policy/modules/contrib/git.te)0
-rw-r--r--policy/modules/services/glance.fc (renamed from policy/modules/contrib/glance.fc)0
-rw-r--r--policy/modules/services/glance.if (renamed from policy/modules/contrib/glance.if)0
-rw-r--r--policy/modules/services/glance.te (renamed from policy/modules/contrib/glance.te)0
-rw-r--r--policy/modules/services/glusterfs.fc (renamed from policy/modules/contrib/glusterfs.fc)0
-rw-r--r--policy/modules/services/glusterfs.if (renamed from policy/modules/contrib/glusterfs.if)0
-rw-r--r--policy/modules/services/glusterfs.te (renamed from policy/modules/contrib/glusterfs.te)0
-rw-r--r--policy/modules/services/gnomeclock.fc (renamed from policy/modules/contrib/gnomeclock.fc)0
-rw-r--r--policy/modules/services/gnomeclock.if (renamed from policy/modules/contrib/gnomeclock.if)0
-rw-r--r--policy/modules/services/gnomeclock.te (renamed from policy/modules/contrib/gnomeclock.te)0
-rw-r--r--policy/modules/services/gpm.fc (renamed from policy/modules/contrib/gpm.fc)0
-rw-r--r--policy/modules/services/gpm.if (renamed from policy/modules/contrib/gpm.if)0
-rw-r--r--policy/modules/services/gpm.te (renamed from policy/modules/contrib/gpm.te)0
-rw-r--r--policy/modules/services/gpsd.fc (renamed from policy/modules/contrib/gpsd.fc)0
-rw-r--r--policy/modules/services/gpsd.if (renamed from policy/modules/contrib/gpsd.if)0
-rw-r--r--policy/modules/services/gpsd.te (renamed from policy/modules/contrib/gpsd.te)0
-rw-r--r--policy/modules/services/gssproxy.fc (renamed from policy/modules/contrib/gssproxy.fc)0
-rw-r--r--policy/modules/services/gssproxy.if (renamed from policy/modules/contrib/gssproxy.if)0
-rw-r--r--policy/modules/services/gssproxy.te (renamed from policy/modules/contrib/gssproxy.te)0
-rw-r--r--policy/modules/services/hadoop.fc (renamed from policy/modules/contrib/hadoop.fc)0
-rw-r--r--policy/modules/services/hadoop.if (renamed from policy/modules/contrib/hadoop.if)0
-rw-r--r--policy/modules/services/hadoop.te (renamed from policy/modules/contrib/hadoop.te)0
-rw-r--r--policy/modules/services/hal.fc (renamed from policy/modules/contrib/hal.fc)0
-rw-r--r--policy/modules/services/hal.if (renamed from policy/modules/contrib/hal.if)0
-rw-r--r--policy/modules/services/hal.te (renamed from policy/modules/contrib/hal.te)0
-rw-r--r--policy/modules/services/hddtemp.fc (renamed from policy/modules/contrib/hddtemp.fc)0
-rw-r--r--policy/modules/services/hddtemp.if (renamed from policy/modules/contrib/hddtemp.if)0
-rw-r--r--policy/modules/services/hddtemp.te (renamed from policy/modules/contrib/hddtemp.te)0
-rw-r--r--policy/modules/services/howl.fc (renamed from policy/modules/contrib/howl.fc)0
-rw-r--r--policy/modules/services/howl.if (renamed from policy/modules/contrib/howl.if)0
-rw-r--r--policy/modules/services/howl.te (renamed from policy/modules/contrib/howl.te)0
-rw-r--r--policy/modules/services/hypervkvp.fc (renamed from policy/modules/contrib/hypervkvp.fc)0
-rw-r--r--policy/modules/services/hypervkvp.if (renamed from policy/modules/contrib/hypervkvp.if)0
-rw-r--r--policy/modules/services/hypervkvp.te (renamed from policy/modules/contrib/hypervkvp.te)0
-rw-r--r--policy/modules/services/i18n_input.fc (renamed from policy/modules/contrib/i18n_input.fc)0
-rw-r--r--policy/modules/services/i18n_input.if (renamed from policy/modules/contrib/i18n_input.if)0
-rw-r--r--policy/modules/services/i18n_input.te (renamed from policy/modules/contrib/i18n_input.te)0
-rw-r--r--policy/modules/services/icecast.fc (renamed from policy/modules/contrib/icecast.fc)0
-rw-r--r--policy/modules/services/icecast.if (renamed from policy/modules/contrib/icecast.if)0
-rw-r--r--policy/modules/services/icecast.te (renamed from policy/modules/contrib/icecast.te)0
-rw-r--r--policy/modules/services/ifplugd.fc (renamed from policy/modules/contrib/ifplugd.fc)0
-rw-r--r--policy/modules/services/ifplugd.if (renamed from policy/modules/contrib/ifplugd.if)0
-rw-r--r--policy/modules/services/ifplugd.te (renamed from policy/modules/contrib/ifplugd.te)0
-rw-r--r--policy/modules/services/imaze.fc (renamed from policy/modules/contrib/imaze.fc)0
-rw-r--r--policy/modules/services/imaze.if (renamed from policy/modules/contrib/imaze.if)0
-rw-r--r--policy/modules/services/imaze.te (renamed from policy/modules/contrib/imaze.te)0
-rw-r--r--policy/modules/services/inetd.fc (renamed from policy/modules/contrib/inetd.fc)0
-rw-r--r--policy/modules/services/inetd.if (renamed from policy/modules/contrib/inetd.if)0
-rw-r--r--policy/modules/services/inetd.te (renamed from policy/modules/contrib/inetd.te)0
-rw-r--r--policy/modules/services/inn.fc (renamed from policy/modules/contrib/inn.fc)0
-rw-r--r--policy/modules/services/inn.if (renamed from policy/modules/contrib/inn.if)0
-rw-r--r--policy/modules/services/inn.te (renamed from policy/modules/contrib/inn.te)0
-rw-r--r--policy/modules/services/iodine.fc (renamed from policy/modules/contrib/iodine.fc)0
-rw-r--r--policy/modules/services/iodine.if (renamed from policy/modules/contrib/iodine.if)0
-rw-r--r--policy/modules/services/iodine.te (renamed from policy/modules/contrib/iodine.te)0
-rw-r--r--policy/modules/services/ircd.fc (renamed from policy/modules/contrib/ircd.fc)0
-rw-r--r--policy/modules/services/ircd.if (renamed from policy/modules/contrib/ircd.if)0
-rw-r--r--policy/modules/services/ircd.te (renamed from policy/modules/contrib/ircd.te)0
-rw-r--r--policy/modules/services/irqbalance.fc (renamed from policy/modules/contrib/irqbalance.fc)0
-rw-r--r--policy/modules/services/irqbalance.if (renamed from policy/modules/contrib/irqbalance.if)0
-rw-r--r--policy/modules/services/irqbalance.te (renamed from policy/modules/contrib/irqbalance.te)0
-rw-r--r--policy/modules/services/isns.fc (renamed from policy/modules/contrib/isns.fc)0
-rw-r--r--policy/modules/services/isns.if (renamed from policy/modules/contrib/isns.if)0
-rw-r--r--policy/modules/services/isns.te (renamed from policy/modules/contrib/isns.te)0
-rw-r--r--policy/modules/services/jabber.fc (renamed from policy/modules/contrib/jabber.fc)0
-rw-r--r--policy/modules/services/jabber.if (renamed from policy/modules/contrib/jabber.if)0
-rw-r--r--policy/modules/services/jabber.te (renamed from policy/modules/contrib/jabber.te)0
-rw-r--r--policy/modules/services/jockey.fc (renamed from policy/modules/contrib/jockey.fc)0
-rw-r--r--policy/modules/services/jockey.if (renamed from policy/modules/contrib/jockey.if)0
-rw-r--r--policy/modules/services/jockey.te (renamed from policy/modules/contrib/jockey.te)0
-rw-r--r--policy/modules/services/kerberos.fc (renamed from policy/modules/contrib/kerberos.fc)0
-rw-r--r--policy/modules/services/kerberos.if (renamed from policy/modules/contrib/kerberos.if)0
-rw-r--r--policy/modules/services/kerberos.te (renamed from policy/modules/contrib/kerberos.te)0
-rw-r--r--policy/modules/services/kerneloops.fc (renamed from policy/modules/contrib/kerneloops.fc)0
-rw-r--r--policy/modules/services/kerneloops.if (renamed from policy/modules/contrib/kerneloops.if)0
-rw-r--r--policy/modules/services/kerneloops.te (renamed from policy/modules/contrib/kerneloops.te)0
-rw-r--r--policy/modules/services/keyboardd.fc (renamed from policy/modules/contrib/keyboardd.fc)0
-rw-r--r--policy/modules/services/keyboardd.if (renamed from policy/modules/contrib/keyboardd.if)0
-rw-r--r--policy/modules/services/keyboardd.te (renamed from policy/modules/contrib/keyboardd.te)0
-rw-r--r--policy/modules/services/keystone.fc (renamed from policy/modules/contrib/keystone.fc)0
-rw-r--r--policy/modules/services/keystone.if (renamed from policy/modules/contrib/keystone.if)0
-rw-r--r--policy/modules/services/keystone.te (renamed from policy/modules/contrib/keystone.te)0
-rw-r--r--policy/modules/services/ksmtuned.fc (renamed from policy/modules/contrib/ksmtuned.fc)0
-rw-r--r--policy/modules/services/ksmtuned.if (renamed from policy/modules/contrib/ksmtuned.if)0
-rw-r--r--policy/modules/services/ksmtuned.te (renamed from policy/modules/contrib/ksmtuned.te)0
-rw-r--r--policy/modules/services/ktalk.fc (renamed from policy/modules/contrib/ktalk.fc)0
-rw-r--r--policy/modules/services/ktalk.if (renamed from policy/modules/contrib/ktalk.if)0
-rw-r--r--policy/modules/services/ktalk.te (renamed from policy/modules/contrib/ktalk.te)0
-rw-r--r--policy/modules/services/l2tp.fc (renamed from policy/modules/contrib/l2tp.fc)0
-rw-r--r--policy/modules/services/l2tp.if (renamed from policy/modules/contrib/l2tp.if)0
-rw-r--r--policy/modules/services/l2tp.te (renamed from policy/modules/contrib/l2tp.te)0
-rw-r--r--policy/modules/services/ldap.fc (renamed from policy/modules/contrib/ldap.fc)0
-rw-r--r--policy/modules/services/ldap.if (renamed from policy/modules/contrib/ldap.if)0
-rw-r--r--policy/modules/services/ldap.te (renamed from policy/modules/contrib/ldap.te)0
-rw-r--r--policy/modules/services/likewise.fc (renamed from policy/modules/contrib/likewise.fc)0
-rw-r--r--policy/modules/services/likewise.if (renamed from policy/modules/contrib/likewise.if)0
-rw-r--r--policy/modules/services/likewise.te (renamed from policy/modules/contrib/likewise.te)0
-rw-r--r--policy/modules/services/lircd.fc (renamed from policy/modules/contrib/lircd.fc)0
-rw-r--r--policy/modules/services/lircd.if (renamed from policy/modules/contrib/lircd.if)0
-rw-r--r--policy/modules/services/lircd.te (renamed from policy/modules/contrib/lircd.te)0
-rw-r--r--policy/modules/services/lldpad.fc (renamed from policy/modules/contrib/lldpad.fc)0
-rw-r--r--policy/modules/services/lldpad.if (renamed from policy/modules/contrib/lldpad.if)0
-rw-r--r--policy/modules/services/lldpad.te (renamed from policy/modules/contrib/lldpad.te)0
-rw-r--r--policy/modules/services/lpd.fc (renamed from policy/modules/contrib/lpd.fc)0
-rw-r--r--policy/modules/services/lpd.if (renamed from policy/modules/contrib/lpd.if)0
-rw-r--r--policy/modules/services/lpd.te (renamed from policy/modules/contrib/lpd.te)0
-rw-r--r--policy/modules/services/lsm.fc (renamed from policy/modules/contrib/lsm.fc)0
-rw-r--r--policy/modules/services/lsm.if (renamed from policy/modules/contrib/lsm.if)0
-rw-r--r--policy/modules/services/lsm.te (renamed from policy/modules/contrib/lsm.te)0
-rw-r--r--policy/modules/services/mailman.fc (renamed from policy/modules/contrib/mailman.fc)0
-rw-r--r--policy/modules/services/mailman.if (renamed from policy/modules/contrib/mailman.if)0
-rw-r--r--policy/modules/services/mailman.te (renamed from policy/modules/contrib/mailman.te)0
-rw-r--r--policy/modules/services/mailscanner.fc (renamed from policy/modules/contrib/mailscanner.fc)0
-rw-r--r--policy/modules/services/mailscanner.if (renamed from policy/modules/contrib/mailscanner.if)0
-rw-r--r--policy/modules/services/mailscanner.te (renamed from policy/modules/contrib/mailscanner.te)0
-rw-r--r--policy/modules/services/mediawiki.fc (renamed from policy/modules/contrib/mediawiki.fc)0
-rw-r--r--policy/modules/services/mediawiki.if (renamed from policy/modules/contrib/mediawiki.if)0
-rw-r--r--policy/modules/services/mediawiki.te (renamed from policy/modules/contrib/mediawiki.te)0
-rw-r--r--policy/modules/services/memcached.fc (renamed from policy/modules/contrib/memcached.fc)0
-rw-r--r--policy/modules/services/memcached.if (renamed from policy/modules/contrib/memcached.if)0
-rw-r--r--policy/modules/services/memcached.te (renamed from policy/modules/contrib/memcached.te)0
-rw-r--r--policy/modules/services/milter.fc (renamed from policy/modules/contrib/milter.fc)0
-rw-r--r--policy/modules/services/milter.if (renamed from policy/modules/contrib/milter.if)0
-rw-r--r--policy/modules/services/milter.te (renamed from policy/modules/contrib/milter.te)0
-rw-r--r--policy/modules/services/minidlna.fc (renamed from policy/modules/contrib/minidlna.fc)0
-rw-r--r--policy/modules/services/minidlna.if (renamed from policy/modules/contrib/minidlna.if)0
-rw-r--r--policy/modules/services/minidlna.te (renamed from policy/modules/contrib/minidlna.te)0
-rw-r--r--policy/modules/services/minissdpd.fc (renamed from policy/modules/contrib/minissdpd.fc)0
-rw-r--r--policy/modules/services/minissdpd.if (renamed from policy/modules/contrib/minissdpd.if)0
-rw-r--r--policy/modules/services/minissdpd.te (renamed from policy/modules/contrib/minissdpd.te)0
-rw-r--r--policy/modules/services/modemmanager.fc (renamed from policy/modules/contrib/modemmanager.fc)0
-rw-r--r--policy/modules/services/modemmanager.if (renamed from policy/modules/contrib/modemmanager.if)0
-rw-r--r--policy/modules/services/modemmanager.te (renamed from policy/modules/contrib/modemmanager.te)0
-rw-r--r--policy/modules/services/mojomojo.fc (renamed from policy/modules/contrib/mojomojo.fc)0
-rw-r--r--policy/modules/services/mojomojo.if (renamed from policy/modules/contrib/mojomojo.if)0
-rw-r--r--policy/modules/services/mojomojo.te (renamed from policy/modules/contrib/mojomojo.te)0
-rw-r--r--policy/modules/services/mon.fc (renamed from policy/modules/contrib/mon.fc)0
-rw-r--r--policy/modules/services/mon.if (renamed from policy/modules/contrib/mon.if)0
-rw-r--r--policy/modules/services/mon.te (renamed from policy/modules/contrib/mon.te)0
-rw-r--r--policy/modules/services/mongodb.fc (renamed from policy/modules/contrib/mongodb.fc)0
-rw-r--r--policy/modules/services/mongodb.if (renamed from policy/modules/contrib/mongodb.if)0
-rw-r--r--policy/modules/services/mongodb.te (renamed from policy/modules/contrib/mongodb.te)0
-rw-r--r--policy/modules/services/monit.fc (renamed from policy/modules/contrib/monit.fc)0
-rw-r--r--policy/modules/services/monit.if (renamed from policy/modules/contrib/monit.if)0
-rw-r--r--policy/modules/services/monit.te (renamed from policy/modules/contrib/monit.te)0
-rw-r--r--policy/modules/services/monop.fc (renamed from policy/modules/contrib/monop.fc)0
-rw-r--r--policy/modules/services/monop.if (renamed from policy/modules/contrib/monop.if)0
-rw-r--r--policy/modules/services/monop.te (renamed from policy/modules/contrib/monop.te)0
-rw-r--r--policy/modules/services/mpd.fc (renamed from policy/modules/contrib/mpd.fc)0
-rw-r--r--policy/modules/services/mpd.if (renamed from policy/modules/contrib/mpd.if)0
-rw-r--r--policy/modules/services/mpd.te (renamed from policy/modules/contrib/mpd.te)0
-rw-r--r--policy/modules/services/mta.fc (renamed from policy/modules/contrib/mta.fc)0
-rw-r--r--policy/modules/services/mta.if (renamed from policy/modules/contrib/mta.if)0
-rw-r--r--policy/modules/services/mta.te (renamed from policy/modules/contrib/mta.te)0
-rw-r--r--policy/modules/services/munin.fc (renamed from policy/modules/contrib/munin.fc)0
-rw-r--r--policy/modules/services/munin.if (renamed from policy/modules/contrib/munin.if)0
-rw-r--r--policy/modules/services/munin.te (renamed from policy/modules/contrib/munin.te)0
-rw-r--r--policy/modules/services/mysql.fc (renamed from policy/modules/contrib/mysql.fc)0
-rw-r--r--policy/modules/services/mysql.if (renamed from policy/modules/contrib/mysql.if)0
-rw-r--r--policy/modules/services/mysql.te (renamed from policy/modules/contrib/mysql.te)0
-rw-r--r--policy/modules/services/nagios.fc (renamed from policy/modules/contrib/nagios.fc)0
-rw-r--r--policy/modules/services/nagios.if (renamed from policy/modules/contrib/nagios.if)0
-rw-r--r--policy/modules/services/nagios.te (renamed from policy/modules/contrib/nagios.te)0
-rw-r--r--policy/modules/services/nessus.fc (renamed from policy/modules/contrib/nessus.fc)0
-rw-r--r--policy/modules/services/nessus.if (renamed from policy/modules/contrib/nessus.if)0
-rw-r--r--policy/modules/services/nessus.te (renamed from policy/modules/contrib/nessus.te)0
-rw-r--r--policy/modules/services/networkmanager.fc (renamed from policy/modules/contrib/networkmanager.fc)0
-rw-r--r--policy/modules/services/networkmanager.if (renamed from policy/modules/contrib/networkmanager.if)0
-rw-r--r--policy/modules/services/networkmanager.te (renamed from policy/modules/contrib/networkmanager.te)0
-rw-r--r--policy/modules/services/nis.fc (renamed from policy/modules/contrib/nis.fc)0
-rw-r--r--policy/modules/services/nis.if (renamed from policy/modules/contrib/nis.if)0
-rw-r--r--policy/modules/services/nis.te (renamed from policy/modules/contrib/nis.te)0
-rw-r--r--policy/modules/services/nscd.fc (renamed from policy/modules/contrib/nscd.fc)0
-rw-r--r--policy/modules/services/nscd.if (renamed from policy/modules/contrib/nscd.if)0
-rw-r--r--policy/modules/services/nscd.te (renamed from policy/modules/contrib/nscd.te)0
-rw-r--r--policy/modules/services/nsd.fc (renamed from policy/modules/contrib/nsd.fc)0
-rw-r--r--policy/modules/services/nsd.if (renamed from policy/modules/contrib/nsd.if)0
-rw-r--r--policy/modules/services/nsd.te (renamed from policy/modules/contrib/nsd.te)0
-rw-r--r--policy/modules/services/nslcd.fc (renamed from policy/modules/contrib/nslcd.fc)0
-rw-r--r--policy/modules/services/nslcd.if (renamed from policy/modules/contrib/nslcd.if)0
-rw-r--r--policy/modules/services/nslcd.te (renamed from policy/modules/contrib/nslcd.te)0
-rw-r--r--policy/modules/services/ntop.fc (renamed from policy/modules/contrib/ntop.fc)0
-rw-r--r--policy/modules/services/ntop.if (renamed from policy/modules/contrib/ntop.if)0
-rw-r--r--policy/modules/services/ntop.te (renamed from policy/modules/contrib/ntop.te)0
-rw-r--r--policy/modules/services/ntp.fc (renamed from policy/modules/contrib/ntp.fc)0
-rw-r--r--policy/modules/services/ntp.if (renamed from policy/modules/contrib/ntp.if)0
-rw-r--r--policy/modules/services/ntp.te (renamed from policy/modules/contrib/ntp.te)0
-rw-r--r--policy/modules/services/numad.fc (renamed from policy/modules/contrib/numad.fc)0
-rw-r--r--policy/modules/services/numad.if (renamed from policy/modules/contrib/numad.if)0
-rw-r--r--policy/modules/services/numad.te (renamed from policy/modules/contrib/numad.te)0
-rw-r--r--policy/modules/services/nut.fc (renamed from policy/modules/contrib/nut.fc)0
-rw-r--r--policy/modules/services/nut.if (renamed from policy/modules/contrib/nut.if)0
-rw-r--r--policy/modules/services/nut.te (renamed from policy/modules/contrib/nut.te)0
-rw-r--r--policy/modules/services/nx.fc (renamed from policy/modules/contrib/nx.fc)0
-rw-r--r--policy/modules/services/nx.if (renamed from policy/modules/contrib/nx.if)0
-rw-r--r--policy/modules/services/nx.te (renamed from policy/modules/contrib/nx.te)0
-rw-r--r--policy/modules/services/oav.fc (renamed from policy/modules/contrib/oav.fc)0
-rw-r--r--policy/modules/services/oav.if (renamed from policy/modules/contrib/oav.if)0
-rw-r--r--policy/modules/services/oav.te (renamed from policy/modules/contrib/oav.te)0
-rw-r--r--policy/modules/services/obex.fc (renamed from policy/modules/contrib/obex.fc)0
-rw-r--r--policy/modules/services/obex.if (renamed from policy/modules/contrib/obex.if)0
-rw-r--r--policy/modules/services/obex.te (renamed from policy/modules/contrib/obex.te)0
-rw-r--r--policy/modules/services/oddjob.fc (renamed from policy/modules/contrib/oddjob.fc)0
-rw-r--r--policy/modules/services/oddjob.if (renamed from policy/modules/contrib/oddjob.if)0
-rw-r--r--policy/modules/services/oddjob.te (renamed from policy/modules/contrib/oddjob.te)0
-rw-r--r--policy/modules/services/oident.fc (renamed from policy/modules/contrib/oident.fc)0
-rw-r--r--policy/modules/services/oident.if (renamed from policy/modules/contrib/oident.if)0
-rw-r--r--policy/modules/services/oident.te (renamed from policy/modules/contrib/oident.te)0
-rw-r--r--policy/modules/services/openca.fc (renamed from policy/modules/contrib/openca.fc)0
-rw-r--r--policy/modules/services/openca.if (renamed from policy/modules/contrib/openca.if)0
-rw-r--r--policy/modules/services/openca.te (renamed from policy/modules/contrib/openca.te)0
-rw-r--r--policy/modules/services/openct.fc (renamed from policy/modules/contrib/openct.fc)0
-rw-r--r--policy/modules/services/openct.if (renamed from policy/modules/contrib/openct.if)0
-rw-r--r--policy/modules/services/openct.te (renamed from policy/modules/contrib/openct.te)0
-rw-r--r--policy/modules/services/openhpi.fc (renamed from policy/modules/contrib/openhpi.fc)0
-rw-r--r--policy/modules/services/openhpi.if (renamed from policy/modules/contrib/openhpi.if)0
-rw-r--r--policy/modules/services/openhpi.te (renamed from policy/modules/contrib/openhpi.te)0
-rw-r--r--policy/modules/services/openvpn.fc (renamed from policy/modules/contrib/openvpn.fc)0
-rw-r--r--policy/modules/services/openvpn.if (renamed from policy/modules/contrib/openvpn.if)0
-rw-r--r--policy/modules/services/openvpn.te (renamed from policy/modules/contrib/openvpn.te)0
-rw-r--r--policy/modules/services/openvswitch.fc (renamed from policy/modules/contrib/openvswitch.fc)0
-rw-r--r--policy/modules/services/openvswitch.if (renamed from policy/modules/contrib/openvswitch.if)0
-rw-r--r--policy/modules/services/openvswitch.te (renamed from policy/modules/contrib/openvswitch.te)0
-rw-r--r--policy/modules/services/pacemaker.fc (renamed from policy/modules/contrib/pacemaker.fc)0
-rw-r--r--policy/modules/services/pacemaker.if (renamed from policy/modules/contrib/pacemaker.if)0
-rw-r--r--policy/modules/services/pacemaker.te (renamed from policy/modules/contrib/pacemaker.te)0
-rw-r--r--policy/modules/services/pads.fc (renamed from policy/modules/contrib/pads.fc)0
-rw-r--r--policy/modules/services/pads.if (renamed from policy/modules/contrib/pads.if)0
-rw-r--r--policy/modules/services/pads.te (renamed from policy/modules/contrib/pads.te)0
-rw-r--r--policy/modules/services/pcscd.fc (renamed from policy/modules/contrib/pcscd.fc)0
-rw-r--r--policy/modules/services/pcscd.if (renamed from policy/modules/contrib/pcscd.if)0
-rw-r--r--policy/modules/services/pcscd.te (renamed from policy/modules/contrib/pcscd.te)0
-rw-r--r--policy/modules/services/pegasus.fc (renamed from policy/modules/contrib/pegasus.fc)0
-rw-r--r--policy/modules/services/pegasus.if (renamed from policy/modules/contrib/pegasus.if)0
-rw-r--r--policy/modules/services/pegasus.te (renamed from policy/modules/contrib/pegasus.te)0
-rw-r--r--policy/modules/services/perdition.fc (renamed from policy/modules/contrib/perdition.fc)0
-rw-r--r--policy/modules/services/perdition.if (renamed from policy/modules/contrib/perdition.if)0
-rw-r--r--policy/modules/services/perdition.te (renamed from policy/modules/contrib/perdition.te)0
-rw-r--r--policy/modules/services/pingd.fc (renamed from policy/modules/contrib/pingd.fc)0
-rw-r--r--policy/modules/services/pingd.if (renamed from policy/modules/contrib/pingd.if)0
-rw-r--r--policy/modules/services/pingd.te (renamed from policy/modules/contrib/pingd.te)0
-rw-r--r--policy/modules/services/pkcs.fc (renamed from policy/modules/contrib/pkcs.fc)0
-rw-r--r--policy/modules/services/pkcs.if (renamed from policy/modules/contrib/pkcs.if)0
-rw-r--r--policy/modules/services/pkcs.te (renamed from policy/modules/contrib/pkcs.te)0
-rw-r--r--policy/modules/services/plymouthd.fc (renamed from policy/modules/contrib/plymouthd.fc)0
-rw-r--r--policy/modules/services/plymouthd.if (renamed from policy/modules/contrib/plymouthd.if)0
-rw-r--r--policy/modules/services/plymouthd.te (renamed from policy/modules/contrib/plymouthd.te)0
-rw-r--r--policy/modules/services/policykit.fc (renamed from policy/modules/contrib/policykit.fc)0
-rw-r--r--policy/modules/services/policykit.if (renamed from policy/modules/contrib/policykit.if)0
-rw-r--r--policy/modules/services/policykit.te (renamed from policy/modules/contrib/policykit.te)0
-rw-r--r--policy/modules/services/polipo.fc (renamed from policy/modules/contrib/polipo.fc)0
-rw-r--r--policy/modules/services/polipo.if (renamed from policy/modules/contrib/polipo.if)0
-rw-r--r--policy/modules/services/polipo.te (renamed from policy/modules/contrib/polipo.te)0
-rw-r--r--policy/modules/services/portmap.fc (renamed from policy/modules/contrib/portmap.fc)0
-rw-r--r--policy/modules/services/portmap.if (renamed from policy/modules/contrib/portmap.if)0
-rw-r--r--policy/modules/services/portmap.te (renamed from policy/modules/contrib/portmap.te)0
-rw-r--r--policy/modules/services/portreserve.fc (renamed from policy/modules/contrib/portreserve.fc)0
-rw-r--r--policy/modules/services/portreserve.if (renamed from policy/modules/contrib/portreserve.if)0
-rw-r--r--policy/modules/services/portreserve.te (renamed from policy/modules/contrib/portreserve.te)0
-rw-r--r--policy/modules/services/portslave.fc (renamed from policy/modules/contrib/portslave.fc)0
-rw-r--r--policy/modules/services/portslave.if (renamed from policy/modules/contrib/portslave.if)0
-rw-r--r--policy/modules/services/portslave.te (renamed from policy/modules/contrib/portslave.te)0
-rw-r--r--policy/modules/services/postfix.fc (renamed from policy/modules/contrib/postfix.fc)0
-rw-r--r--policy/modules/services/postfix.if (renamed from policy/modules/contrib/postfix.if)0
-rw-r--r--policy/modules/services/postfix.te (renamed from policy/modules/contrib/postfix.te)0
-rw-r--r--policy/modules/services/postfixpolicyd.fc (renamed from policy/modules/contrib/postfixpolicyd.fc)0
-rw-r--r--policy/modules/services/postfixpolicyd.if (renamed from policy/modules/contrib/postfixpolicyd.if)0
-rw-r--r--policy/modules/services/postfixpolicyd.te (renamed from policy/modules/contrib/postfixpolicyd.te)0
-rw-r--r--policy/modules/services/postgrey.fc (renamed from policy/modules/contrib/postgrey.fc)0
-rw-r--r--policy/modules/services/postgrey.if (renamed from policy/modules/contrib/postgrey.if)0
-rw-r--r--policy/modules/services/postgrey.te (renamed from policy/modules/contrib/postgrey.te)0
-rw-r--r--policy/modules/services/ppp.fc (renamed from policy/modules/contrib/ppp.fc)0
-rw-r--r--policy/modules/services/ppp.if (renamed from policy/modules/contrib/ppp.if)0
-rw-r--r--policy/modules/services/ppp.te (renamed from policy/modules/contrib/ppp.te)0
-rw-r--r--policy/modules/services/prelude.fc (renamed from policy/modules/contrib/prelude.fc)0
-rw-r--r--policy/modules/services/prelude.if (renamed from policy/modules/contrib/prelude.if)0
-rw-r--r--policy/modules/services/prelude.te (renamed from policy/modules/contrib/prelude.te)0
-rw-r--r--policy/modules/services/privoxy.fc (renamed from policy/modules/contrib/privoxy.fc)0
-rw-r--r--policy/modules/services/privoxy.if (renamed from policy/modules/contrib/privoxy.if)0
-rw-r--r--policy/modules/services/privoxy.te (renamed from policy/modules/contrib/privoxy.te)0
-rw-r--r--policy/modules/services/procmail.fc (renamed from policy/modules/contrib/procmail.fc)0
-rw-r--r--policy/modules/services/procmail.if (renamed from policy/modules/contrib/procmail.if)0
-rw-r--r--policy/modules/services/procmail.te (renamed from policy/modules/contrib/procmail.te)0
-rw-r--r--policy/modules/services/psad.fc (renamed from policy/modules/contrib/psad.fc)0
-rw-r--r--policy/modules/services/psad.if (renamed from policy/modules/contrib/psad.if)0
-rw-r--r--policy/modules/services/psad.te (renamed from policy/modules/contrib/psad.te)0
-rw-r--r--policy/modules/services/publicfile.fc (renamed from policy/modules/contrib/publicfile.fc)0
-rw-r--r--policy/modules/services/publicfile.if (renamed from policy/modules/contrib/publicfile.if)0
-rw-r--r--policy/modules/services/publicfile.te (renamed from policy/modules/contrib/publicfile.te)0
-rw-r--r--policy/modules/services/pwauth.fc (renamed from policy/modules/contrib/pwauth.fc)0
-rw-r--r--policy/modules/services/pwauth.if (renamed from policy/modules/contrib/pwauth.if)0
-rw-r--r--policy/modules/services/pwauth.te (renamed from policy/modules/contrib/pwauth.te)0
-rw-r--r--policy/modules/services/pxe.fc (renamed from policy/modules/contrib/pxe.fc)0
-rw-r--r--policy/modules/services/pxe.if (renamed from policy/modules/contrib/pxe.if)0
-rw-r--r--policy/modules/services/pxe.te (renamed from policy/modules/contrib/pxe.te)0
-rw-r--r--policy/modules/services/pyicqt.fc (renamed from policy/modules/contrib/pyicqt.fc)0
-rw-r--r--policy/modules/services/pyicqt.if (renamed from policy/modules/contrib/pyicqt.if)0
-rw-r--r--policy/modules/services/pyicqt.te (renamed from policy/modules/contrib/pyicqt.te)0
-rw-r--r--policy/modules/services/pyzor.fc (renamed from policy/modules/contrib/pyzor.fc)0
-rw-r--r--policy/modules/services/pyzor.if (renamed from policy/modules/contrib/pyzor.if)0
-rw-r--r--policy/modules/services/pyzor.te (renamed from policy/modules/contrib/pyzor.te)0
-rw-r--r--policy/modules/services/qmail.fc (renamed from policy/modules/contrib/qmail.fc)0
-rw-r--r--policy/modules/services/qmail.if (renamed from policy/modules/contrib/qmail.if)0
-rw-r--r--policy/modules/services/qmail.te (renamed from policy/modules/contrib/qmail.te)0
-rw-r--r--policy/modules/services/qpid.fc (renamed from policy/modules/contrib/qpid.fc)0
-rw-r--r--policy/modules/services/qpid.if (renamed from policy/modules/contrib/qpid.if)0
-rw-r--r--policy/modules/services/qpid.te (renamed from policy/modules/contrib/qpid.te)0
-rw-r--r--policy/modules/services/quantum.fc (renamed from policy/modules/contrib/quantum.fc)0
-rw-r--r--policy/modules/services/quantum.if (renamed from policy/modules/contrib/quantum.if)0
-rw-r--r--policy/modules/services/quantum.te (renamed from policy/modules/contrib/quantum.te)0
-rw-r--r--policy/modules/services/rabbitmq.fc (renamed from policy/modules/contrib/rabbitmq.fc)0
-rw-r--r--policy/modules/services/rabbitmq.if (renamed from policy/modules/contrib/rabbitmq.if)0
-rw-r--r--policy/modules/services/rabbitmq.te (renamed from policy/modules/contrib/rabbitmq.te)0
-rw-r--r--policy/modules/services/radius.fc (renamed from policy/modules/contrib/radius.fc)0
-rw-r--r--policy/modules/services/radius.if (renamed from policy/modules/contrib/radius.if)0
-rw-r--r--policy/modules/services/radius.te (renamed from policy/modules/contrib/radius.te)0
-rw-r--r--policy/modules/services/radvd.fc (renamed from policy/modules/contrib/radvd.fc)0
-rw-r--r--policy/modules/services/radvd.if (renamed from policy/modules/contrib/radvd.if)0
-rw-r--r--policy/modules/services/radvd.te (renamed from policy/modules/contrib/radvd.te)0
-rw-r--r--policy/modules/services/razor.fc (renamed from policy/modules/contrib/razor.fc)0
-rw-r--r--policy/modules/services/razor.if (renamed from policy/modules/contrib/razor.if)0
-rw-r--r--policy/modules/services/razor.te (renamed from policy/modules/contrib/razor.te)0
-rw-r--r--policy/modules/services/rdisc.fc (renamed from policy/modules/contrib/rdisc.fc)0
-rw-r--r--policy/modules/services/rdisc.if (renamed from policy/modules/contrib/rdisc.if)0
-rw-r--r--policy/modules/services/rdisc.te (renamed from policy/modules/contrib/rdisc.te)0
-rw-r--r--policy/modules/services/realmd.fc (renamed from policy/modules/contrib/realmd.fc)0
-rw-r--r--policy/modules/services/realmd.if (renamed from policy/modules/contrib/realmd.if)0
-rw-r--r--policy/modules/services/realmd.te (renamed from policy/modules/contrib/realmd.te)0
-rw-r--r--policy/modules/services/redis.fc (renamed from policy/modules/contrib/redis.fc)0
-rw-r--r--policy/modules/services/redis.if (renamed from policy/modules/contrib/redis.if)0
-rw-r--r--policy/modules/services/redis.te (renamed from policy/modules/contrib/redis.te)0
-rw-r--r--policy/modules/services/remotelogin.fc (renamed from policy/modules/contrib/remotelogin.fc)0
-rw-r--r--policy/modules/services/remotelogin.if (renamed from policy/modules/contrib/remotelogin.if)0
-rw-r--r--policy/modules/services/remotelogin.te (renamed from policy/modules/contrib/remotelogin.te)0
-rw-r--r--policy/modules/services/resmgr.fc (renamed from policy/modules/contrib/resmgr.fc)0
-rw-r--r--policy/modules/services/resmgr.if (renamed from policy/modules/contrib/resmgr.if)0
-rw-r--r--policy/modules/services/resmgr.te (renamed from policy/modules/contrib/resmgr.te)0
-rw-r--r--policy/modules/services/rgmanager.fc (renamed from policy/modules/contrib/rgmanager.fc)0
-rw-r--r--policy/modules/services/rgmanager.if (renamed from policy/modules/contrib/rgmanager.if)0
-rw-r--r--policy/modules/services/rgmanager.te (renamed from policy/modules/contrib/rgmanager.te)0
-rw-r--r--policy/modules/services/rhcs.fc (renamed from policy/modules/contrib/rhcs.fc)0
-rw-r--r--policy/modules/services/rhcs.if (renamed from policy/modules/contrib/rhcs.if)0
-rw-r--r--policy/modules/services/rhcs.te (renamed from policy/modules/contrib/rhcs.te)0
-rw-r--r--policy/modules/services/rhgb.fc (renamed from policy/modules/contrib/rhgb.fc)0
-rw-r--r--policy/modules/services/rhgb.if (renamed from policy/modules/contrib/rhgb.if)0
-rw-r--r--policy/modules/services/rhgb.te (renamed from policy/modules/contrib/rhgb.te)0
-rw-r--r--policy/modules/services/rhsmcertd.fc (renamed from policy/modules/contrib/rhsmcertd.fc)0
-rw-r--r--policy/modules/services/rhsmcertd.if (renamed from policy/modules/contrib/rhsmcertd.if)0
-rw-r--r--policy/modules/services/rhsmcertd.te (renamed from policy/modules/contrib/rhsmcertd.te)0
-rw-r--r--policy/modules/services/ricci.fc (renamed from policy/modules/contrib/ricci.fc)0
-rw-r--r--policy/modules/services/ricci.if (renamed from policy/modules/contrib/ricci.if)0
-rw-r--r--policy/modules/services/ricci.te (renamed from policy/modules/contrib/ricci.te)0
-rw-r--r--policy/modules/services/rlogin.fc (renamed from policy/modules/contrib/rlogin.fc)0
-rw-r--r--policy/modules/services/rlogin.if (renamed from policy/modules/contrib/rlogin.if)0
-rw-r--r--policy/modules/services/rlogin.te (renamed from policy/modules/contrib/rlogin.te)0
-rw-r--r--policy/modules/services/rngd.fc (renamed from policy/modules/contrib/rngd.fc)0
-rw-r--r--policy/modules/services/rngd.if (renamed from policy/modules/contrib/rngd.if)0
-rw-r--r--policy/modules/services/rngd.te (renamed from policy/modules/contrib/rngd.te)0
-rw-r--r--policy/modules/services/roundup.fc (renamed from policy/modules/contrib/roundup.fc)0
-rw-r--r--policy/modules/services/roundup.if (renamed from policy/modules/contrib/roundup.if)0
-rw-r--r--policy/modules/services/roundup.te (renamed from policy/modules/contrib/roundup.te)0
-rw-r--r--policy/modules/services/rpc.fc (renamed from policy/modules/contrib/rpc.fc)0
-rw-r--r--policy/modules/services/rpc.if (renamed from policy/modules/contrib/rpc.if)0
-rw-r--r--policy/modules/services/rpc.te (renamed from policy/modules/contrib/rpc.te)0
-rw-r--r--policy/modules/services/rpcbind.fc (renamed from policy/modules/contrib/rpcbind.fc)0
-rw-r--r--policy/modules/services/rpcbind.if (renamed from policy/modules/contrib/rpcbind.if)0
-rw-r--r--policy/modules/services/rpcbind.te (renamed from policy/modules/contrib/rpcbind.te)0
-rw-r--r--policy/modules/services/rshd.fc (renamed from policy/modules/contrib/rshd.fc)0
-rw-r--r--policy/modules/services/rshd.if (renamed from policy/modules/contrib/rshd.if)0
-rw-r--r--policy/modules/services/rshd.te (renamed from policy/modules/contrib/rshd.te)0
-rw-r--r--policy/modules/services/rsync.fc (renamed from policy/modules/contrib/rsync.fc)0
-rw-r--r--policy/modules/services/rsync.if (renamed from policy/modules/contrib/rsync.if)0
-rw-r--r--policy/modules/services/rsync.te (renamed from policy/modules/contrib/rsync.te)0
-rw-r--r--policy/modules/services/rtkit.fc (renamed from policy/modules/contrib/rtkit.fc)0
-rw-r--r--policy/modules/services/rtkit.if (renamed from policy/modules/contrib/rtkit.if)0
-rw-r--r--policy/modules/services/rtkit.te (renamed from policy/modules/contrib/rtkit.te)0
-rw-r--r--policy/modules/services/rwho.fc (renamed from policy/modules/contrib/rwho.fc)0
-rw-r--r--policy/modules/services/rwho.if (renamed from policy/modules/contrib/rwho.if)0
-rw-r--r--policy/modules/services/rwho.te (renamed from policy/modules/contrib/rwho.te)0
-rw-r--r--policy/modules/services/samba.fc (renamed from policy/modules/contrib/samba.fc)0
-rw-r--r--policy/modules/services/samba.if (renamed from policy/modules/contrib/samba.if)0
-rw-r--r--policy/modules/services/samba.te (renamed from policy/modules/contrib/samba.te)0
-rw-r--r--policy/modules/services/sanlock.fc (renamed from policy/modules/contrib/sanlock.fc)0
-rw-r--r--policy/modules/services/sanlock.if (renamed from policy/modules/contrib/sanlock.if)0
-rw-r--r--policy/modules/services/sanlock.te (renamed from policy/modules/contrib/sanlock.te)0
-rw-r--r--policy/modules/services/sasl.fc (renamed from policy/modules/contrib/sasl.fc)0
-rw-r--r--policy/modules/services/sasl.if (renamed from policy/modules/contrib/sasl.if)0
-rw-r--r--policy/modules/services/sasl.te (renamed from policy/modules/contrib/sasl.te)0
-rw-r--r--policy/modules/services/sendmail.fc (renamed from policy/modules/contrib/sendmail.fc)0
-rw-r--r--policy/modules/services/sendmail.if (renamed from policy/modules/contrib/sendmail.if)0
-rw-r--r--policy/modules/services/sendmail.te (renamed from policy/modules/contrib/sendmail.te)0
-rw-r--r--policy/modules/services/sensord.fc (renamed from policy/modules/contrib/sensord.fc)0
-rw-r--r--policy/modules/services/sensord.if (renamed from policy/modules/contrib/sensord.if)0
-rw-r--r--policy/modules/services/sensord.te (renamed from policy/modules/contrib/sensord.te)0
-rw-r--r--policy/modules/services/setroubleshoot.fc (renamed from policy/modules/contrib/setroubleshoot.fc)0
-rw-r--r--policy/modules/services/setroubleshoot.if (renamed from policy/modules/contrib/setroubleshoot.if)0
-rw-r--r--policy/modules/services/setroubleshoot.te (renamed from policy/modules/contrib/setroubleshoot.te)0
-rw-r--r--policy/modules/services/shibboleth.fc (renamed from policy/modules/contrib/shibboleth.fc)0
-rw-r--r--policy/modules/services/shibboleth.if (renamed from policy/modules/contrib/shibboleth.if)0
-rw-r--r--policy/modules/services/shibboleth.te (renamed from policy/modules/contrib/shibboleth.te)0
-rw-r--r--policy/modules/services/slpd.fc (renamed from policy/modules/contrib/slpd.fc)0
-rw-r--r--policy/modules/services/slpd.if (renamed from policy/modules/contrib/slpd.if)0
-rw-r--r--policy/modules/services/slpd.te (renamed from policy/modules/contrib/slpd.te)0
-rw-r--r--policy/modules/services/slrnpull.fc (renamed from policy/modules/contrib/slrnpull.fc)0
-rw-r--r--policy/modules/services/slrnpull.if (renamed from policy/modules/contrib/slrnpull.if)0
-rw-r--r--policy/modules/services/slrnpull.te (renamed from policy/modules/contrib/slrnpull.te)0
-rw-r--r--policy/modules/services/smartmon.fc (renamed from policy/modules/contrib/smartmon.fc)0
-rw-r--r--policy/modules/services/smartmon.if (renamed from policy/modules/contrib/smartmon.if)0
-rw-r--r--policy/modules/services/smartmon.te (renamed from policy/modules/contrib/smartmon.te)0
-rw-r--r--policy/modules/services/smokeping.fc (renamed from policy/modules/contrib/smokeping.fc)0
-rw-r--r--policy/modules/services/smokeping.if (renamed from policy/modules/contrib/smokeping.if)0
-rw-r--r--policy/modules/services/smokeping.te (renamed from policy/modules/contrib/smokeping.te)0
-rw-r--r--policy/modules/services/smstools.fc (renamed from policy/modules/contrib/smstools.fc)0
-rw-r--r--policy/modules/services/smstools.if (renamed from policy/modules/contrib/smstools.if)0
-rw-r--r--policy/modules/services/smstools.te (renamed from policy/modules/contrib/smstools.te)0
-rw-r--r--policy/modules/services/snmp.fc (renamed from policy/modules/contrib/snmp.fc)0
-rw-r--r--policy/modules/services/snmp.if (renamed from policy/modules/contrib/snmp.if)0
-rw-r--r--policy/modules/services/snmp.te (renamed from policy/modules/contrib/snmp.te)0
-rw-r--r--policy/modules/services/snort.fc (renamed from policy/modules/contrib/snort.fc)0
-rw-r--r--policy/modules/services/snort.if (renamed from policy/modules/contrib/snort.if)0
-rw-r--r--policy/modules/services/snort.te (renamed from policy/modules/contrib/snort.te)0
-rw-r--r--policy/modules/services/soundserver.fc (renamed from policy/modules/contrib/soundserver.fc)0
-rw-r--r--policy/modules/services/soundserver.if (renamed from policy/modules/contrib/soundserver.if)0
-rw-r--r--policy/modules/services/soundserver.te (renamed from policy/modules/contrib/soundserver.te)0
-rw-r--r--policy/modules/services/spamassassin.fc (renamed from policy/modules/contrib/spamassassin.fc)0
-rw-r--r--policy/modules/services/spamassassin.if (renamed from policy/modules/contrib/spamassassin.if)0
-rw-r--r--policy/modules/services/spamassassin.te (renamed from policy/modules/contrib/spamassassin.te)0
-rw-r--r--policy/modules/services/speedtouch.fc (renamed from policy/modules/contrib/speedtouch.fc)0
-rw-r--r--policy/modules/services/speedtouch.if (renamed from policy/modules/contrib/speedtouch.if)0
-rw-r--r--policy/modules/services/speedtouch.te (renamed from policy/modules/contrib/speedtouch.te)0
-rw-r--r--policy/modules/services/squid.fc (renamed from policy/modules/contrib/squid.fc)0
-rw-r--r--policy/modules/services/squid.if (renamed from policy/modules/contrib/squid.if)0
-rw-r--r--policy/modules/services/squid.te (renamed from policy/modules/contrib/squid.te)0
-rw-r--r--policy/modules/services/sssd.fc (renamed from policy/modules/contrib/sssd.fc)0
-rw-r--r--policy/modules/services/sssd.if (renamed from policy/modules/contrib/sssd.if)0
-rw-r--r--policy/modules/services/sssd.te (renamed from policy/modules/contrib/sssd.te)0
-rw-r--r--policy/modules/services/stunnel.fc (renamed from policy/modules/contrib/stunnel.fc)0
-rw-r--r--policy/modules/services/stunnel.if (renamed from policy/modules/contrib/stunnel.if)0
-rw-r--r--policy/modules/services/stunnel.te (renamed from policy/modules/contrib/stunnel.te)0
-rw-r--r--policy/modules/services/svnserve.fc (renamed from policy/modules/contrib/svnserve.fc)0
-rw-r--r--policy/modules/services/svnserve.if (renamed from policy/modules/contrib/svnserve.if)0
-rw-r--r--policy/modules/services/svnserve.te (renamed from policy/modules/contrib/svnserve.te)0
-rw-r--r--policy/modules/services/sysstat.fc (renamed from policy/modules/contrib/sysstat.fc)0
-rw-r--r--policy/modules/services/sysstat.if (renamed from policy/modules/contrib/sysstat.if)0
-rw-r--r--policy/modules/services/sysstat.te (renamed from policy/modules/contrib/sysstat.te)0
-rw-r--r--policy/modules/services/systemtap.fc (renamed from policy/modules/contrib/systemtap.fc)0
-rw-r--r--policy/modules/services/systemtap.if (renamed from policy/modules/contrib/systemtap.if)0
-rw-r--r--policy/modules/services/systemtap.te (renamed from policy/modules/contrib/systemtap.te)0
-rw-r--r--policy/modules/services/tcpd.fc (renamed from policy/modules/contrib/tcpd.fc)0
-rw-r--r--policy/modules/services/tcpd.if (renamed from policy/modules/contrib/tcpd.if)0
-rw-r--r--policy/modules/services/tcpd.te (renamed from policy/modules/contrib/tcpd.te)0
-rw-r--r--policy/modules/services/tcsd.fc (renamed from policy/modules/contrib/tcsd.fc)0
-rw-r--r--policy/modules/services/tcsd.if (renamed from policy/modules/contrib/tcsd.if)0
-rw-r--r--policy/modules/services/tcsd.te (renamed from policy/modules/contrib/tcsd.te)0
-rw-r--r--policy/modules/services/telnet.fc (renamed from policy/modules/contrib/telnet.fc)0
-rw-r--r--policy/modules/services/telnet.if (renamed from policy/modules/contrib/telnet.if)0
-rw-r--r--policy/modules/services/telnet.te (renamed from policy/modules/contrib/telnet.te)0
-rw-r--r--policy/modules/services/tftp.fc (renamed from policy/modules/contrib/tftp.fc)0
-rw-r--r--policy/modules/services/tftp.if (renamed from policy/modules/contrib/tftp.if)0
-rw-r--r--policy/modules/services/tftp.te (renamed from policy/modules/contrib/tftp.te)0
-rw-r--r--policy/modules/services/tgtd.fc (renamed from policy/modules/contrib/tgtd.fc)0
-rw-r--r--policy/modules/services/tgtd.if (renamed from policy/modules/contrib/tgtd.if)0
-rw-r--r--policy/modules/services/tgtd.te (renamed from policy/modules/contrib/tgtd.te)0
-rw-r--r--policy/modules/services/timidity.fc (renamed from policy/modules/contrib/timidity.fc)0
-rw-r--r--policy/modules/services/timidity.if (renamed from policy/modules/contrib/timidity.if)0
-rw-r--r--policy/modules/services/timidity.te (renamed from policy/modules/contrib/timidity.te)0
-rw-r--r--policy/modules/services/tor.fc (renamed from policy/modules/contrib/tor.fc)0
-rw-r--r--policy/modules/services/tor.if (renamed from policy/modules/contrib/tor.if)0
-rw-r--r--policy/modules/services/tor.te (renamed from policy/modules/contrib/tor.te)0
-rw-r--r--policy/modules/services/transproxy.fc (renamed from policy/modules/contrib/transproxy.fc)0
-rw-r--r--policy/modules/services/transproxy.if (renamed from policy/modules/contrib/transproxy.if)0
-rw-r--r--policy/modules/services/transproxy.te (renamed from policy/modules/contrib/transproxy.te)0
-rw-r--r--policy/modules/services/tuned.fc (renamed from policy/modules/contrib/tuned.fc)0
-rw-r--r--policy/modules/services/tuned.if (renamed from policy/modules/contrib/tuned.if)0
-rw-r--r--policy/modules/services/tuned.te (renamed from policy/modules/contrib/tuned.te)0
-rw-r--r--policy/modules/services/ucspitcp.fc (renamed from policy/modules/contrib/ucspitcp.fc)0
-rw-r--r--policy/modules/services/ucspitcp.if (renamed from policy/modules/contrib/ucspitcp.if)0
-rw-r--r--policy/modules/services/ucspitcp.te (renamed from policy/modules/contrib/ucspitcp.te)0
-rw-r--r--policy/modules/services/ulogd.fc (renamed from policy/modules/contrib/ulogd.fc)0
-rw-r--r--policy/modules/services/ulogd.if (renamed from policy/modules/contrib/ulogd.if)0
-rw-r--r--policy/modules/services/ulogd.te (renamed from policy/modules/contrib/ulogd.te)0
-rw-r--r--policy/modules/services/uptime.fc (renamed from policy/modules/contrib/uptime.fc)0
-rw-r--r--policy/modules/services/uptime.if (renamed from policy/modules/contrib/uptime.if)0
-rw-r--r--policy/modules/services/uptime.te (renamed from policy/modules/contrib/uptime.te)0
-rw-r--r--policy/modules/services/usbmuxd.fc (renamed from policy/modules/contrib/usbmuxd.fc)0
-rw-r--r--policy/modules/services/usbmuxd.if (renamed from policy/modules/contrib/usbmuxd.if)0
-rw-r--r--policy/modules/services/usbmuxd.te (renamed from policy/modules/contrib/usbmuxd.te)0
-rw-r--r--policy/modules/services/uucp.fc (renamed from policy/modules/contrib/uucp.fc)0
-rw-r--r--policy/modules/services/uucp.if (renamed from policy/modules/contrib/uucp.if)0
-rw-r--r--policy/modules/services/uucp.te (renamed from policy/modules/contrib/uucp.te)0
-rw-r--r--policy/modules/services/uuidd.fc (renamed from policy/modules/contrib/uuidd.fc)0
-rw-r--r--policy/modules/services/uuidd.if (renamed from policy/modules/contrib/uuidd.if)0
-rw-r--r--policy/modules/services/uuidd.te (renamed from policy/modules/contrib/uuidd.te)0
-rw-r--r--policy/modules/services/uwimap.fc (renamed from policy/modules/contrib/uwimap.fc)0
-rw-r--r--policy/modules/services/uwimap.if (renamed from policy/modules/contrib/uwimap.if)0
-rw-r--r--policy/modules/services/uwimap.te (renamed from policy/modules/contrib/uwimap.te)0
-rw-r--r--policy/modules/services/varnishd.fc (renamed from policy/modules/contrib/varnishd.fc)0
-rw-r--r--policy/modules/services/varnishd.if (renamed from policy/modules/contrib/varnishd.if)0
-rw-r--r--policy/modules/services/varnishd.te (renamed from policy/modules/contrib/varnishd.te)0
-rw-r--r--policy/modules/services/vdagent.fc (renamed from policy/modules/contrib/vdagent.fc)0
-rw-r--r--policy/modules/services/vdagent.if (renamed from policy/modules/contrib/vdagent.if)0
-rw-r--r--policy/modules/services/vdagent.te (renamed from policy/modules/contrib/vdagent.te)0
-rw-r--r--policy/modules/services/vhostmd.fc (renamed from policy/modules/contrib/vhostmd.fc)0
-rw-r--r--policy/modules/services/vhostmd.if (renamed from policy/modules/contrib/vhostmd.if)0
-rw-r--r--policy/modules/services/vhostmd.te (renamed from policy/modules/contrib/vhostmd.te)0
-rw-r--r--policy/modules/services/virt.fc (renamed from policy/modules/contrib/virt.fc)0
-rw-r--r--policy/modules/services/virt.if (renamed from policy/modules/contrib/virt.if)0
-rw-r--r--policy/modules/services/virt.te (renamed from policy/modules/contrib/virt.te)0
-rw-r--r--policy/modules/services/vnstatd.fc (renamed from policy/modules/contrib/vnstatd.fc)0
-rw-r--r--policy/modules/services/vnstatd.if (renamed from policy/modules/contrib/vnstatd.if)0
-rw-r--r--policy/modules/services/vnstatd.te (renamed from policy/modules/contrib/vnstatd.te)0
-rw-r--r--policy/modules/services/w3c.fc (renamed from policy/modules/contrib/w3c.fc)0
-rw-r--r--policy/modules/services/w3c.if (renamed from policy/modules/contrib/w3c.if)0
-rw-r--r--policy/modules/services/w3c.te (renamed from policy/modules/contrib/w3c.te)0
-rw-r--r--policy/modules/services/watchdog.fc (renamed from policy/modules/contrib/watchdog.fc)0
-rw-r--r--policy/modules/services/watchdog.if (renamed from policy/modules/contrib/watchdog.if)0
-rw-r--r--policy/modules/services/watchdog.te (renamed from policy/modules/contrib/watchdog.te)0
-rw-r--r--policy/modules/services/wdmd.fc (renamed from policy/modules/contrib/wdmd.fc)0
-rw-r--r--policy/modules/services/wdmd.if (renamed from policy/modules/contrib/wdmd.if)0
-rw-r--r--policy/modules/services/wdmd.te (renamed from policy/modules/contrib/wdmd.te)0
-rw-r--r--policy/modules/services/xfs.fc (renamed from policy/modules/contrib/xfs.fc)0
-rw-r--r--policy/modules/services/xfs.if (renamed from policy/modules/contrib/xfs.if)0
-rw-r--r--policy/modules/services/xfs.te (renamed from policy/modules/contrib/xfs.te)0
-rw-r--r--policy/modules/services/xprint.fc (renamed from policy/modules/contrib/xprint.fc)0
-rw-r--r--policy/modules/services/xprint.if (renamed from policy/modules/contrib/xprint.if)0
-rw-r--r--policy/modules/services/xprint.te (renamed from policy/modules/contrib/xprint.te)0
-rw-r--r--policy/modules/services/zabbix.fc (renamed from policy/modules/contrib/zabbix.fc)0
-rw-r--r--policy/modules/services/zabbix.if (renamed from policy/modules/contrib/zabbix.if)0
-rw-r--r--policy/modules/services/zabbix.te (renamed from policy/modules/contrib/zabbix.te)0
-rw-r--r--policy/modules/services/zarafa.fc (renamed from policy/modules/contrib/zarafa.fc)0
-rw-r--r--policy/modules/services/zarafa.if (renamed from policy/modules/contrib/zarafa.if)0
-rw-r--r--policy/modules/services/zarafa.te (renamed from policy/modules/contrib/zarafa.te)0
-rw-r--r--policy/modules/services/zebra.fc (renamed from policy/modules/contrib/zebra.fc)0
-rw-r--r--policy/modules/services/zebra.if (renamed from policy/modules/contrib/zebra.if)0
-rw-r--r--policy/modules/services/zebra.te (renamed from policy/modules/contrib/zebra.te)0
-rw-r--r--policy/modules/services/zosremote.fc (renamed from policy/modules/contrib/zosremote.fc)0
-rw-r--r--policy/modules/services/zosremote.if (renamed from policy/modules/contrib/zosremote.if)0
-rw-r--r--policy/modules/services/zosremote.te (renamed from policy/modules/contrib/zosremote.te)0
-rw-r--r--policy/modules/system/daemontools.fc (renamed from policy/modules/contrib/daemontools.fc)0
-rw-r--r--policy/modules/system/daemontools.if (renamed from policy/modules/contrib/daemontools.if)0
-rw-r--r--policy/modules/system/daemontools.te (renamed from policy/modules/contrib/daemontools.te)0
-rw-r--r--policy/modules/system/iscsi.fc (renamed from policy/modules/contrib/iscsi.fc)0
-rw-r--r--policy/modules/system/iscsi.if (renamed from policy/modules/contrib/iscsi.if)0
-rw-r--r--policy/modules/system/iscsi.te (renamed from policy/modules/contrib/iscsi.te)0
-rw-r--r--policy/modules/system/pcmcia.fc (renamed from policy/modules/contrib/pcmcia.fc)0
-rw-r--r--policy/modules/system/pcmcia.if (renamed from policy/modules/contrib/pcmcia.if)0
-rw-r--r--policy/modules/system/pcmcia.te (renamed from policy/modules/contrib/pcmcia.te)0
-rw-r--r--policy/modules/system/raid.fc (renamed from policy/modules/contrib/raid.fc)0
-rw-r--r--policy/modules/system/raid.if (renamed from policy/modules/contrib/raid.if)0
-rw-r--r--policy/modules/system/raid.te (renamed from policy/modules/contrib/raid.te)0
-rw-r--r--policy/modules/system/xen.fc (renamed from policy/modules/contrib/xen.fc)0
-rw-r--r--policy/modules/system/xen.if (renamed from policy/modules/contrib/xen.if)0
-rw-r--r--policy/modules/system/xen.te (renamed from policy/modules/contrib/xen.te)0
1116 files changed, 2210 insertions, 2212 deletions
diff --git a/Changelog.contrib b/Changelog.contrib
index 452cbbb1..1596ba77 120000..100644
--- a/Changelog.contrib
+++ b/Changelog.contrib
@@ -1 +1,2210 @@
-policy/modules/contrib/Changelog \ No newline at end of file
+* Sun Jan 14 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180114
+Chad Hanson (1):
+ Allow rpm to relabel files at all levels
+
+Chris PeBenito (46):
+ Remove deprecated interfaces more than one year old.
+ Remove complement and wildcard in allow rules.
+ Merge branch 'master' of git://github.com/teg/refpolicy-contrib
+ dbus: Module version bump for dbus-broker patch from Tom Gundersen.
+ Module version bump for patches from Guido Trentalancia.
+ Module version bumps for patches from David Sugar.
+ dhcp, logrotate: Module version bump.
+ Module version bumps for chkrootkit, dkim, dmidecode, portage, and
+ rkhunter.
+ Module version bumps.
+ spamassassin: Move lines.
+ mandb, spamassassin: Module version bumps.
+ spamassassin: Fix build error.
+ spamassassin: Add missing requirement in spamassassin_admin().
+ dphysswapfile: Module version bump.
+ gpg, pulseaudio, rpc: Module version bump.
+ dnsmasq, gnome, mon, mta, openoffice, pulseaudio, wm: Version bumps.
+ Revert "postfix: Some table drivers (notably cdb) need to mmap() their
+ databases"
+ java, mozilla, mta, postfix: Module version bump.
+ portage: Fix usr_t map interface usage.
+ apache, portage: Module version bump.
+ dbus, policykit, wm: Module version bump.
+ dbus: Add comment.
+ Merge branch 'nm_audit' of git://github.com/bigon/refpolicy-contrib
+ networkmanager: Module version bump.
+ virt: Move a line.
+ alsa, mon, virt: Module version bump.
+ gpg, mozilla, rpc: Module version bump.
+ Several module version bumps.
+ blueman, evolution, gpg, mozilla, openoffice, thunderbird, wireshark, wm:
+ Module version bump.
+ wm: Module version bump.
+ networkmanager: Move line.
+ networkmanager: Module version bump.
+ Merge branch 'pkcs' of https://github.com/dodys/refpolicy-contrib
+ pkcs: Rename pkcs_slotd_unit_file_t.
+ pkcs: Module version bump.
+ accountsd, policykit: Module version bump.
+ dbus, devicekit, modemmanager, networkmanager, virt: Module version bump.
+ modemmanager: Move lines.
+ rpm: Module version bump.
+ cachefilesd, dbus, dirmngr, gnome, gpg, pulseaudio: Module version bump.
+ Replace deprecated mmap perm sets and pattern usage.
+ gssproxy: Module version bump.
+ monit: Module version bump.
+ apache, dkim, monit: Module version bump.
+ spamassassin: Module version bump.
+ Bump module versions for release.
+
+Christian Göttsche (20):
+ dkim: align filecontexts
+ dkim: update
+ milter: align filecontexts
+ apache: align filecontexts
+ dmidecode: use userdom_use_inherited_user_terminals
+ spamassassin: align filecontexts
+ chkrootkit: update
+ rkhunter: add several missing permission
+ fakehwclock: update
+ milter: update
+ mandb: fixes for systemd timer and /usr/local/man label
+ spamassassin: update
+ dphysswapfile: fix swapfile creation
+ apache: update
+ monit: update
+ dkim: align file contexts
+ dkim: update
+ apache: update
+ monit: read /usr/share/ca-certificates for cert verification
+ spamassassin: fix missing perms
+
+Daniel Jurgens (1):
+ networkmanager: Grant access to unlabeled PKeys
+
+David Sugar (5):
+ mon: move rpc_* into optional
+ wm: consolidate networkmanger interface calls into single optional
+ cron: optional_policy for mta_* interfaces
+ Label /usr/bin/mutter
+ Allow to read /proc/sys/crypto/fips_enabled
+
+Eduardo Barretto (2):
+ Update pkcs policy to include pkccsslotd.service
+ Update missing permissions for pkcs
+
+Guido Trentalancia (13):
+ libmtp: read symlinks in user home directories
+ spamassassin: update rules for the Bayesian classifier trainer
+ wm: let gnome-shell start properly
+ gnome: keyring daemon dbus policy update
+ gnome: keyring daemon read SELinux config
+ openoffice: improve temporary directories' operations
+ pulseaudio: general update
+ wm: gnome-shell SELinux integration
+ mozilla: run Java Web Start applications
+ wm: run PolicyKit
+ dbus: read user home content files
+ mozilla: read generic SSL certificates
+ contrib: use the new SSL private keys type (was: "let the mozilla and
+ other domains read generic SSL certificates")
+
+Jason Zaman (12):
+ cgmanager: Apply auth_use_nsswitch interface
+ alsa: needs to map its tmpfs files
+ virt: add policy for virtlogd
+ virt: updated perms for starting guests
+ gssproxy: add policy
+ rpc: Allow stream connect to gssproxy
+ gpg: search dir when connecting to agent socket
+ dirmngr: allow filetrans in gpg_runtime_t
+ gpg: Add gpg_agent_use_card boolean for OpenPGP cards
+ cachefilesd: make cachefilesd_cache_t a mountpoint
+ Set user_runtime_content_type for all remaining types in /run/user/%{UID}/
+ gssproxy: allow writing kerberos rcache
+
+Jason Zaman via refpolicy (3):
+ pulseaudio: Add neccessary map permissions
+ gpg: add fcontexts for user runtime sockets
+ rpc: add sm-notify pid fcontext
+
+Laurent Bigonville (2):
+ Allow NetworkManager to write to audit
+ Call systemd_write_inherited_logind_inhibit_pipes() where needed
+
+Luis Ressel (12):
+ portage: Allow portage_t and portage_sandbox_t to access locale_t
+ postfix: Some table drivers (notably cdb) need to mmap() their databases
+ portage: Grant the map permissions neccessary for git and install
+ alsa: alsactl needs to map its configuration
+ mozilla: Add neccessary map permissions
+ mandb: man-db needs to map its 'index.db' cache
+ portage: Remove nonsensical dontaudit of an allowed permission
+ portage: Transition to ldconfig_t when calling ldconfig
+ postfix: Some table drivers (notably cdb) need to mmap() their databases
+ postfix: Silence cap_dac_read_search denials
+ portage: Grant portage the map permission on usr_t
+ Allow gtk apps to map usr_t files
+
+Nicolas Iooss (2):
+ dbus: move comments out of the file context definitions
+ logrotate: allow systemd to start logrotate
+
+Russell Coker (3):
+ udev and dhcpd
+ minor nspawn, dnsmasq, and mon patches
+ refpolicy and certs
+
+Tom Gundersen (1):
+ dbus: add policy for dbus-broker
+
+* Sat Aug 05 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170805
+Chris PeBenito (82):
+ Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
+ Module version bump for usrmerge FC fixes from Jason Zaman.
+ mon policy from Russell Coker.
+ Module version bump for cups patches from Guido Trentalancia.
+ Module version bump for tbird and mozilla printing from Guido
+ Trentalancia.
+ Revert "cups/lpd: read permission for cupsd_var_run_t socket files"
+ Module version bump for cups revert.
+ Sort capabilities permissions from Russell Coker.
+ Little misc patch from Russell Coker.
+ mon: Fix deprecated interface usage.
+ dpkg: Updates from Russell Coker.
+ Monit policy from Russell Coker and cgzones.
+ monit: Fix build error.
+ fetchmail, mysql, tor: Misc fixes from Russell Coker.
+ Merge branch 'alsa_module' of git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'vnstat_module' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for alsa and vnstatd fixes from cgzones.
+ Merge branch 'ntp_module' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for ntp fixes from cgzones.
+ samba: A few line moves.
+ Module version bump for samba patch from Russell Coker.
+ Systemd fixes from Russell Coker.
+ Xen fixes from Russell Coker.
+ mailman: Fixes from Russell Coker.
+ MTA fixes from Russell Coker.
+ Network daemon patches from Russell Coker.
+ apache: Fix CI error.
+ Merge branch 'modutils_adapt_interfaces' of
+ git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'corecmd_read_bin_symlinks' of
+ git://github.com/cgzones/refpolicy-contrib
+ Module version bumps for fixes from cgzones.
+ Merge branch 'mandb' of git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'dphysswapfile' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for dphysswapfile and mandb fixes from cgzones.
+ Merge branch 'var_run_filecontext' of
+ git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'vnstatd' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for fixes from cgzones.
+ dontaudit net_admin for SO_SNDBUFFORCE
+ /var/run -> /run again
+ Merge branch 'monit' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for monit patch from cgzones.
+ systemd-resolvd, sessions, and tmpfiles take2
+ Misc fc changes from Russell Coker.
+ Systemd-related changes from Russell Coker.
+ networkmanager: adjust interface docs format.
+ wm: interface docs adjustment.
+ Module version bump for misc fixes from Guido Trentalancia.
+ systemd init from Russell Coker
+ misc daemons from Russell Coker.
+ logging patches from Russell Coker
+ kmod, lvm, brctl patches from Russell Coker
+ devicekit, mount, xserver, and selinuxutil from Russell Coker
+ some userdomain patches from Russell Coker
+ Module version bump for gnome fix from Guido Trentalancia.
+ apache: Move blocks. No rule changes.
+ Module version bump for changes from Sven Vermeulen and Guido
+ Trentalancia.
+ login take 4 from Russell Coker.
+ Rename apm to acpi from Russell Coker.
+ Module version bump for patches from Russell Coker.
+ some little misc things from Russell Coker.
+ apt/dpkg strict patches from Russell Coker.
+ Module version bump for minor fixes from Guido Trentalancia.
+ Merge branch 'usr_bin_fc' of
+ git://github.com/fishilico/selinux-refpolicy-contrib
+ Module version bump for /usr/bin fc fixes from Nicolas Iooss.
+ Module version bump for chronyd changes from Luis Ressel.
+ openoffice: Move ooffice_rw_tmp_files() implementation.
+ Module version bump for openoffice fix from Guido Trentalancia.
+ libmtp: move lines
+ Module version bump for fixes from Guido Trentalancia.
+ Module version bump for mmap fixes from Stephen Smalley.
+ Module version bump for misc patches from Guido Trentalancia.
+ gpg: Fix overspecified dependencies in gpg_agent_tmp_filetrans.
+ dirmngr: Whitespace fixes.
+ Module version bumps for patches from Jason Zaman.
+ cgmanager: Move lines
+ Module version bumps for patches from Jason Zaman.
+ gpg: Module version bump for patch from Guido Trentalancia.
+ mozilla: Module version bump for patch from Luis Ressel.
+ rkhunter: Fix module version and move lines.
+ Module version bump for patches from cgzones.
+ chkrootkit: Fix module version.
+ Module version bump for patches from cgzones.
+ Bump module versions for release.
+
+Guido Trentalancia (28):
+ cups: read permission for cupsd_var_run_t socket files in
+ cups_stream_connect()
+ cups/lpd: read permission for cupsd_var_run_t socket files
+ thunderbird: allow stream connections to cups so that it can print
+ mozilla: allow stream connections to cups so that it can print
+ java: enable interactive use
+ evolution: add dbus acquire service permission
+ evolution: do not audit kernel read state
+ evolution: add some critical permissions
+ mozilla: read hardware state information
+ mozilla: add a permission
+ wm: load the NetworkManager applet
+ wm: interactive start
+ Gnome and Evolution dbus chat permissions
+ openoffice: support starting it from the window manager
+ evolution: minor fixes and updates
+ java: error messages terminal printout
+ loadkeys: use init fds (system bootup)
+ plymouth: pid interface usability
+ shutdown: send msg to syslog
+ openoffice: open files retrieved using mozilla
+ contrib: new libmtp module
+ openoffice: minor update
+ gnome: improved integration with openoffice
+ cups: let hplip read udev pid files
+ dbus: let session bus daemon manage user runtime dirs
+ zabbix: Grant zabbix_agent_t to call setrlimit on self
+ ntp: fix the drift file context and transition
+ gpg: manage user runtime socket files and directories
+
+Jason Zaman (12):
+ usrmerge: Add missed /usr fcontexts
+ java: update fcontexts for new versions of icedtea
+ dirmngr: add to roles and allow gpg to domtrans
+ gpg dirmngr: create and connect to socket
+ dirmngr: fcontext for ~/.gnupg/crls.d/
+ dirmngr: Network rules to connect to keyserver
+ cgmanager: add policy from gentoo
+ consolekit: Add support for consolekit2
+ consolekit: allow purging tmp
+ consolekit: introduce consolekit_use_inhibit_lock interface
+ dbus: use consolekit inhibit locks
+ networkmanager: use consolekit inhibit locks
+
+Luis Ressel (3):
+ chronyd: Re-align fc file
+ chronyd: Allow init scripts to create /run/chrony
+ mozilla: Add fc for the files used by the firefox addon "vimperator"
+
+Nicolas Iooss (1):
+ Support systems with a single /usr/bin directory
+
+Russell Coker (1):
+ patch for samba
+
+Stephen Smalley (1):
+ contrib: allow map permission where needed
+
+Sven Vermeulen (1):
+ rpc_* interfaces should be wrapped by optional_policy()
+
+cgzones (16):
+ update ntp module
+ update alsa module
+ vnstatd: update module
+ corecmd_read_bin_symlinks(): remove deprecated and redundant calls
+ modutils: adopt calls to new interfaces
+ vnstatd: update
+ dphysswapfile: update
+ monit: update
+ mandb: update
+ logrotate: reload monit after log rotation
+ remove /var/run file context lefovers, add dbus exception
+ monit: add syslog access and support for monit systemd service
+ rkhunter: add policy module
+ arpwatch: align file contexts
+ chkrootkit: add policy module
+ arpwatch: update
+
+* Sat Feb 04 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170204
+Chris PeBenito (41):
+ Module version bump for patches from Jason Zaman.
+ authbind: Remove dead policy.
+ Module version bump for cups patch from Guido Trentalancia.
+ Merge pull request #29 from cgzones/deprecated_macros
+ Module version bump for Debian fprintd fc entry from Laurent Bigonville.
+ Module version bumps for openoffice patches from Guido Trentalancia.
+ Module version bumps for patches from Guido Trentalancia.
+ Merge pull request #30 from cgzones/trailing_whitespaces
+ Module version bumps for mozilla and gpg patches from Luis Ressel.
+ Module version bump for patches from Guido Trentalancia.
+ Module version bump for patches from Guido Trentalancia.
+ rtkit, wm: Remove calls to nonexistant interfaces.
+ Module version bumps for patches from Guido Trentalancia.
+ rtkit: enable dbus chat with xdm
+ Module version bump for patches from Guido Trentalancia.
+ Module version bump for xscreensaver patch from Guido Trentalancia.
+ Merge branch 'run_transition' of
+ git://github.com/cgzones/refpolicy-contrib
+ Module version bumps for /run fc changes from cgzones.
+ Module version bump for openoffice and wm patches from Guido Trentalancia.
+ Module version bump for patches from Guido Trentalancia.
+ Module version bump for wm patch from Guido Trentalancia.
+ Merge branch 'usr-fc' of
+ git://github.com/fishilico/selinux-refpolicy-contrib
+ Module version bump for fc updates from Nicolas Iooss.
+ Module version bump for patches from Guido Trentalancia.
+ Module version bump for capability2 fixes from Guido Trentalancia.
+ Module version bump for plymouth fix from Guido Trentalancia.
+ boinc: Update from Russell Coker.
+ Module version bump for mozilla update from Guido Trentalancia.
+ Merge pull request #47 from cgzones/dphysswap_module
+ Merge pull request #40 from cgzones/fakehwclock_module
+ Merge branch 'gpg_module' of git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'irqbalance_module' of
+ git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'loadkeys_module' of
+ git://github.com/cgzones/refpolicy-contrib
+ Module version bumps for patches from cgzones.
+ Merge branch 'exim_module' of git://github.com/cgzones/refpolicy-contrib
+ Merge branch 'screen_module' of git://github.com/cgzones/refpolicy-contrib
+ Module version bump for screen and exim changes from cgzones.
+ screen: Revert broken interface call.
+ cups: Move hplip_domtrans interface.
+ Module version bump for cups patch from Guido Trentalancia.
+ Bump module versions for release.
+
+Dominick Grift (1):
+ Re-add raid fc spec that must have been removed earlier by mistake
+
+Guido Trentalancia (29):
+ cups: descend "rw" directories when reading configuration files
+ Apache OpenOffice module (contrib policy part)
+ openoffice: rename two interfaces in openoffice and evolution
+ mozilla: extend dbus connection permissions
+ openoffice: permission to read user temporary files
+ xguest: restrict ability to execute files on noxattr filesystems
+ pulseaudio: update server and client permissions
+ mozilla: remove redundant pulseaudio interface calls
+ networkmanager: read user certs not user content (was enable
+ userdom_read_user_certs() throughout the policy)
+ Make several calls to mta interfaces optional
+ wm: update the window manager (wm) module and enable its role template
+ (v7)
+ rtkit: enable dbus chat with xdm
+ networkmanager: enable dbus chat with xdm
+ policykit: enable dbus chat with xdm
+ games: general update and improved pulseaudio integration
+ wm: improved integration with games
+ xscreensaver: update the module so that it can be effectively used
+ wm: properly set domain entrypoint in wm_application_domain()
+ openoffice: add writer support for sending email directly to multiple
+ recipients
+ contrib: use new genhomedircon template for username
+ contrib: extend wm ability to launch confined graphical applications
+ contrib: support the new interface to manage X session logs
+ networkmanager: dbus chat with cups
+ cups: add cups-browsed executable fc
+ devicekit: add new wake_alarm permission (capability2)
+ networkmanager: add new wake_alarm permission (capability2)
+ plymouth: use the correct running domain for the client
+ mozilla: execute evolution to send emails
+ cups: new interface to execute HPLIP applications in their own domain
+
+Jason Zaman (4):
+ pcscd: dbus and domain lookup
+ devicekit: fcontext for udisks2
+ gnome: add gkeyring rules and fcontext
+ gpg: add new socket paths
+
+Laurent Bigonville (1):
+ Add debian path for fprintd daemon
+
+Luis Ressel (3):
+ gpg: Add filetrans for scdaemon socket and gpg-agent extra sockets
+ gpg.fc: Adjust whitespace
+ mozilla: Add miscfiles_dontaudit_setattr_fonts_cache_dirs()
+
+Nicolas Iooss (1):
+ Add file contexts for files in /usr/{lib,sbin}
+
+cgzones (10):
+ use domain_auto_transition_pattern instead of domain_auto_trans
+ remove trailing whitespaces
+ transition file contexts to /run
+ update loadkeys module
+ add fakehwclock module
+ add dphysswapfile module
+ update gpg module
+ update screen module
+ update irqbalance module
+ update exim module
+
+* Sun Oct 23 2016 Chris PeBenito <pebenito@ieee.org> - 2.20161023
+Adam Tkac (2):
+ varnishncsa (varnishlog_t) reads localization files
+ Grant certmonger "chown" capability
+
+Chris PeBenito (42):
+ Merge branch 'bigon-geoclue'
+ Add additional comments in geoclue.
+ Merge branch 'bigon-virt-1'
+ Merge branch 'nm-1' of git://github.com/bigon/refpolicy-contrib into
+ bigon-nm-1
+ Merge branch 'bigon-nm-1'
+ Module version bump for virt and networkmanager patches from Laurent
+ Bigonville.
+ Merge branch 'master' of git://github.com/bigon/refpolicy-contrib
+ Module version bump for firewalld updates from Laurent Bigonville.
+ Module version bump for collectd update from Jason Zaman.
+ Module version bumps for user runtime fixes from Jason Zaman.
+ Boinc updates from Russell Coker.
+ rpcbind: Read /sys/devices/system/cpu/online from Russell Coker.
+ watchdog: Move line.
+ Module version bump for watchdog pidfile option from Russell Coker.
+ Systemd units from Russell Coker.
+ Module version bump for pulseaudio fc fix from Jason Zaman.
+ cpucontrol: revise cpucontrol_conf_t labeling, from Guido Trentalancia.
+ Module version bumps for patches from Guido Trentalancia.
+ Update the telepathy module:
+ Update the alsa module so that the alsa_etc_t file context (previously
+ alsa_etc_rw_t) is widened to the whole alsa share directory, instead of
+ just a couple of files.
+ alsa: Add compatibility alias for alsa_etc_rw_t.
+ Update the sysnetwork module to add some permissions needed by the dhcp
+ client (another separate patch makes changes to the ifconfig part).
+ Module version bump for various patches from Guido Trentalancia.
+ pulseaudio: Fix compile errors.
+ Merge branch 'master' of
+ https://github.com/SeanPlacchetti/refpolicy-contrib
+ Module version bump for webalizer dead type removal from Sean Placchetti.
+ Module version bump for Evolution SSL fix from Guido Trentalancia.
+ evolution: Read user certs from Guido Trentalancia.
+ cups: Move can_exec() line.
+ cups: Module version bump for hplip patch from Guido Trentalancia
+ pulseaudio: Move interface definitions.
+ Module version bump for mozilla patch from Guido Trentalancia.
+ Module version bump for gnome patch from Guido Trentalancia.
+ Module version bump for evolution patch from Guido Trentalancia.
+ gpg: Whitespace fix.
+ Merge branch 'feature/fix-networkmanager-varrun-macro' of
+ https://github.com/rfkrocktk/refpolicy-contrib
+ Module version bump for networkmanager fix from Naftuli Tzvi Kay.
+ Merge branch 'rfkrocktk-feature/syncthing'
+ Rearrange lines in syncthing.
+ webalizer: Rearrange a couple lines.
+ Module version bump for webalizer patch from Russell Coker.
+ Bump module versions for release.
+
+Dominick Grift (18):
+ Module version bump for changes to the geoclue module by Laurent
+ Bigonville.
+ Module version bump for changes to various modules from Laurent
+ Bigonville.
+ geoclue: move kernel interface call to the appropriate position
+ Actually associate mailmain_domain attribute with mailman domains
+ Module version bumps for changes to various modules by Nicolas Iooss
+ Module version bump for changes to the cron module by Jason Zaman
+ Module version bump for changes to the redis module by Grant Ridder
+ Module version bump for changes to the raid module by Laurent Bigonville
+ Module version bump for changes to the networkmanager module by Laurent
+ Bigonville.
+ Module version bump for changes to the redis module by Grant Ridder.
+ Module version bump for changes to the mozilla module by Laurent
+ Bigonville.
+ Module version bump for changes to the geoclue module by Nicolas Iooss.
+ Add hwloc-dump-hwdata SELinux policy
+ Module version bump for changes to the varnishd module by Robert Moucha
+ Module version bump for changes to the puppet module by Thomas Mueller
+ Module version bump for changes to the varnishd module by Adam Tkac
+ Module version bump for changes to the certmonger module by Adam Tkac
+ Revert "dbus: allow system, and session bus clients to answer to dbus
+ unconfined domains"
+
+Grant Ridder (2):
+ Add read/write perms for redis-sentinel
+ Allow tcp_connect to redis_port_t for redis_t
+
+Guido Trentalancia (7):
+ Policykit module: add fs_getattr_xattr_fs()
+ Update the policy for module apm
+ Let gpg disable core dumps
+ Update the rtkit module
+ Update the pulseaudio module for usability and ORC support
+ cups: update permissions for HP printers (load firmware)
+ gpg: public key signature verification in evolution
+
+Guido Trentalancia via refpolicy (3):
+ evolution: read SSL certificates
+ mozilla: let mozilla play audio
+ gnome: add support for the OIL Runtime Compiler (ORC) optimized code
+ execution
+
+Jason Zaman (10):
+ cron: Allow locks to be lnk_files
+ collectd: update policy for 5.5
+ consolekit: allow managing user runtime
+ pulseaudio: fcontext and filetrans for runtime
+ ftp: Add filetrans from user_runtime
+ gnome: Add filetrans from user_runtime
+ mplayer: Add filetrans from user_runtime
+ userhelper: Add filetrans from user_runtime
+ wm: Add filetrans from user_runtime
+ pulseaudio: fix user runtime fcontext
+
+Laurent Bigonville (13):
+ Add initial geoclue 2 module
+ Properly escape dot in the path to the geoclue daemon
+ Use auth_use_nsswitch() as we need DNS resolving and access nsswitch.conf
+ virt.fc: Add some debian contexts
+ networkmanager.fc: nm-dispatcher.action has been renamed to nm-dispatcher
+ Allow some domain to read sysctl_vm_overcommit_t
+ Allow mdadm read efivarfs files
+ Allow /var/run/firewalld/ directory to transition to firewalld_var_run_t
+ Add an interface to allow a domain to read firewalld_var_run_t files
+ Allow firewalld to create firewalld_var_run_t directory.
+ dontaudit firewalld attempt to relabel its own config files
+ Allow NM to execute arping
+ Debian now ships firefox-esr, properly label the executable
+
+Luis Ressel (1):
+ New policy for tboot utilities
+
+Naftuli Tzvi Kay (2):
+ Fix NetworkManager Read Pid Files Macro
+ Syncthing Policy
+
+Nicolas Iooss (3):
+ Describe _initrc_domtrans interfaces differently from the _domtrans ones
+ Fix typos in several interfaces
+ Add Arch Linux path for geoclue module
+
+Robert Moucha (1):
+ Fix trivial typo in varnishncsa name
+
+Russell Coker (2):
+ watchdog reads pid files
+ named reads vm sysctls
+
+Russell Coker via refpolicy (1):
+ webalizer patch for inclusion
+
+Sean Placchetti (1):
+ -Remove unused declarations from webalizer type enforcement file
+
+Thomas Mueller (1):
+ Allow puppet_t transtition to shorewall_t
+
+doverride (3):
+ Merge pull request #8 from bigon/geoclue
+ Merge pull request #11 from bigon/overcommit-1
+ Merge pull request #12 from fishilico/typos
+
+* Tue Dec 08 2015 Chris PeBenito <selinux@tresys.com> - 2.20151208
+Alexander Wetzel (1):
+ add vfio support for libvirt
+
+Chas Williams - CONTRACTOR (1):
+ afs: update labels, file contexts and allow access to urandom
+
+Chris PeBenito (14):
+ Module version bump for hadoop_admin() fix from Jazon Zaman.
+ Module version bump for fc typo in radius from Sven Vermeulen.
+ Module version bump for patches from Jason Zaman.
+ Module version bump for init_startstop_service from Jason Zaman.
+ Module version bump for cron_admin interface from Jason Zaman.
+ Comment/whitespace fix in virt.te.
+ Module version bump for vfio support for libvirt from Alexander Wetzel.
+ Add systemd unit types.
+ Add systemd socket activations.
+ Merge branch 'pebenito-master'
+ Module version bump for systemd additions.
+ Merge branch 'bigon-systemd'
+ Module version bump for dbus systemd patch from Laurent Bigonville.
+ Bump module versions for release.
+
+Dominick Grift (16):
+ Module version bump for courier fixes from Sven Vermeulen.
+ Module version bump for afs fixes from Chas Williams.
+ Redundant rules and afs_files_t is not a filesystem type
+ Various samhain fixes
+ Cachefilesd module updates
+ Module version bump for changes to the dnsmasq policy module by Jason
+ Zaman
+ Module version bump for changes to the snmp policy module by Jason Zaman
+ Module version bump for changes to the pulseaudio policy module by Jason
+ Zaman
+ cachefiles: It is cachefilesd_cache_t
+ Module version bump for update to the networkmanager policy module by
+ Stephen Smalley.
+ Module version bumps for "Remove run interface calls from admin
+ interfaces" changes by Jason Zaman.
+ Module version bump for changes to the pulseaudio module by Niklas Haas.
+ Changes to the git, hadoop and rsync modules by Jason Zaman.
+ Module version bump for changes to the virt module by Jason Zaman
+ Module version bump for changes to the mozilla module from Laurent
+ Bigonville.
+ Module version bump for changes to the wine module by Nicolas Iooss
+
+Jason Zaman (19):
+ hadoop: remove _role from _admin interface
+ rpcbind: typo fix
+ git: make inetd interface optional
+ rpc: introduce allow_gssd_write_tmp boolean
+ rpc: allow setgid capability
+ virt: add virt_tmpfs_t type and permissions
+ introduce virt_leaseshelper_t
+ dnsmasq: allow exec shell for scripts
+ snmp: missing fcontext for snmpd
+ pulseaudio: filetrans for autospawn.lock
+ Use init_startstop_service in admin interfaces A-M
+ Use init_startstop_service in admin interfaces N-Z
+ Remove _run() interfaces from _admin()
+ Introduce cron_admin interface
+ rsync: remove rsync_run from admin interface
+ git: allow git_system_t to listen on tcp_sockets
+ hadoop: init_startstop_service() can not take attributes
+ virt: Allow creating qemu guest agent socket
+ virt: Add policy for virtlockd the Virtual machine lock manager
+
+Laurent Bigonville (2):
+ Transition D-Bus system service out of the init_t domain when PID1 is
+ systemd
+ Label iceweasel plugin-container executable as mozilla_plugin_exec_t
+
+Nicolas Iooss (1):
+ wine: remove use of nonexisting interface
+
+Niklas Haas (1):
+ pulse: don't give pulseaudio_client full access to user_home_t
+
+Stephen Smalley (1):
+ contrib: networkmanager: allow netlink_generic_socket access
+
+Sven Vermeulen (6):
+ Locate authdaemon socket and communicate with authdaemon
+ Allow authdaemon to access selinux fs to check SELinux state
+ Grant setuid/setgid to courier_pop_t
+ Execute courier helper script after authentication
+ Courier IMAP needs to manage the users' maildir
+ Fix typo for radiusd /var/lib location
+
+doverride (2):
+ Merge pull request #3 from haasn/pulse-nohome
+ Merge pull request #6 from bigon/mozilla-1
+
+* Wed Dec 03 2014 Chris PeBenito <selinux@tresys.com> - 2.20141203
+Chris PeBenito (26):
+ Whitespace fix in ntp.fc.
+ Module version bump for ntp fc entries from Laurent Bigonville.
+ Whitespace fix in shibboleth.te.
+ Module version bump for new shibboleth module from Martin Lang.
+ Module version bump for apt fix from Nicolas Iooss.
+ Module version bump for dnsmasq MTU fix from Sven Vermeulen.
+ Module version bump for apache content interfaces from Sven Vermeulen.
+ Module version bump for gitweb fc entry on Debian and ArchLinux from
+ Nicolas Iooss.
+ Module version bump for fc regex fixes from Nicolas Iooss.
+ Module version bump for various fixes from Laurent Bigonville.
+ Module version bump for ModemManager fc entry from Laurent Bigonville.
+ Add missing cron_admin_role() dependency.
+ Move sock_file filetrans to fcron_crond conditional.
+ Module version bump for cron and snort updates from Sven Vermeulen.
+ Module version bump for java icedtea fc entries from Sven Vermeulen.
+ Module version bump for apache/mlogc patch from Elia Pinto.
+ Remove name from ntp-kod ntp_drift_t filetrans.
+ Module version bump for ntp-kod file support from Jason Zaman.
+ Module version bump for init_daemon_pid_file use from Sven Vermeulen.
+ Module version bump for alsa and hiawatha fixes from Sven Vermeulen.
+ Module version bump for ftp and tftp fixes from Nicolas Iooss.
+ Move irc exec lines.
+ Module version bump for irc re-exec itself patch from Luis Ressel.
+ Module version bump for NetworkManager fc fix for ArchLinux from Nicolas
+ Iooss.
+ Module version bump for _admin fixes from Jason Zaman.
+ Bump module versions for release.
+
+Dominick Grift (3):
+ Module version bump for changes to the loadkeys module by Nicolas Iooss
+ cron: that boolean identifier does not exist also require it
+ Module version bump for changes to the networkmanager modules by Lubomir
+ Rintel
+
+Elia Pinto (1):
+ apache.te: Add labelling support for /var/log/mlogc
+
+Jason Zaman (20):
+ Add filetrans for ntp-kod file
+ ccs: syntax errors in ccs_admin interface
+ condor: syntax error in condor_admin
+ distcc: syntax error in distcc_admin
+ ftp: syntax error in ftp_admin
+ kerberos: syntax error in kerberos_admin
+ kismet: syntax error in kismet_admin
+ nut: syntax error in nut_admin
+ prelude: syntax error in prelude_admin
+ psad: syntax error in psad_admin
+ quota: syntax error in quota_admin
+ rpcbind: syntax error in rpcbind_admin
+ rpm: syntax error in rpm_admin
+ systemtap: syntax error in stapserver_admin
+ svnserve: syntax error in svnserve_admin
+ uptime: syntax error in uptime_admin
+ zabbix: syntax error in zabbix_admin
+ remove pyzor_role() from pyzor_admin()
+ remove spamassassin_role() from spamassassin_admin()
+ rsync: syntax error in rsync_admin
+
+Laurent Bigonville (7):
+ Add several fcontext for debian specific paths for ntp
+ Fix dbus_all_session_domain(), session_bus_type is an attribute
+ Allow gconfd to be started by the session bus
+ Fix the usage of dbus_spec_session_domain() interface
+ Properly label exim4 initscript under Debian
+ Add new gnome_spec_domtrans_all_gkeyringd() interface
+ Label /usr/sbin/ModemManager as modemmanager_exec_t
+
+Lubomir Rintel (1):
+ Allow NetworkManager to create Bluetooth SDP sockets
+
+Luis Ressel (1):
+ irc.te: Allow irssi to re-execute itself
+
+Martin Lang (1):
+ Add a policy module for shibboleth authentication
+
+Nicolas Iooss (7):
+ apt: remove non-existing permission set write_dir_perms
+ Label /usr/share/gitweb/static as httpd_git_content_t
+ Fix strange file patterns
+ ftp: fix labels in /var/lock/subsys/
+ Label /usr/bin/tftpd as tftpd_exec_t
+ Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/
+ Allow loadkeys to read usr_t files
+
+Sven Vermeulen (17):
+ dnsmasq reads MTU sysctl
+ Support read/append/manage functions for various httpd content
+ Snort policy updates
+ fcron socket support
+ Fix typo in dnsmasq.if
+ Mark icedtea binaries as java_exec_t
+ Use init_daemon_pid_file for contrib modules
+ Enable asound.state.lock support
+ Add support for Hiawatha web server
+ Use logging_search_logs, not logging_search_log
+ Use logging_search_logs, not logging_search_log
+ Use files_search_etc, not logging_search_etc
+ Use files_search_etc, not logging_search_etc
+ Use files_search_etc, not files_search_config
+ Use corecmd_search_bin, not corecmd_searh_bin
+ Use fs_search_tmpfs, not files_search_tmpfs
+ Use domain_auto_trans, not auto_trans
+
+* Tue Mar 11 2014 Chris PeBenito <selinux@tresys.com> - 2.20140311
+Chris PeBenito (17):
+ Minor rearrangement of minidlna lines.
+ Module version bump for openvpn tmp files from Sven Vermeulen.
+ Update modules for file_t merge into unlabeled_t.
+ Module version bump for postfix showq fc from Laurent Bigonville.
+ Rename gpg_agent_connect to gpg_stream_connect_agent.
+ Module version bump for gpg agent interface from Luis Ressel.
+ Whitespace fixes in git.fc.
+ Module version bump for debian git fc entries from Laurent Bigonville.
+ Move bin_t fc to corecommands.
+ Move exec/transition lines in couchdb.
+ Add comment about couchdb_js policy.
+ Module version bump for couchdb updates from Luis Ressel.
+ Module version bump for pcscd fix from Luis Ressel.
+ Move screen dontaudit rule.
+ Module version bump for screen fix from Luis Ressel.
+ Module version bump for git fc fix from Nicolas Iooss.
+ Bump module versions for release.
+
+Dan Walsh (28):
+ Allow irc_t to use tcp sockets
+ Add labels for apache logs under miq package
+ Allow smbcontrol to create content in /var/lib/samba
+ Allow ktalkd to bind to the ktalkd_port
+ Allow memcache to read sysfs data
+ Allow mdadm to getattr any file system
+ Allow cupsd_lpd_t to bind to the printer port
+ Allow rlogind to bind to the rlogin_port
+ Allow cvs to bind to the cvs_port
+ svirt domains neeed to create kobject_uevint_sockets
+ Lots of new access required for sosreport
+ Allow tgtd_t to connect to isns ports
+ openct needs to be able to create netlink_object_uevent_sockets
+ Allow glusterd to create sock_file in /run
+ Add support for tmp directories to openvswitch
+ Allow virt_domain with USB devices to look at dos file systems
+ Additional access for MLS
+ Additional access for MLS window manager
+ Additional access for MLS window manager
+ Additional access for MLS window manager
+ Allow rpcbind to use nsswitch
+ Allow gpg_agent to use ssh-add
+ Add apache labeling for glpi
+ Allow pegasus to transition to dmidecode
+ Allow mcelog to use the /dev/cpu device
+ Allow apmd to request the kernel load modules
+ Allow postfix programs to getattr on all executables
+ label mate-keyring-daemon with gkeyringd_exec_t
+
+Dominick Grift (126):
+ Typo fix in ksmtuned_admin() by Shintaro Fujiwara
+ Fix monolithic built
+ Change file context spec for aide log files to catch suffixes
+ Module version bumps for changes in various policy modules by Sven
+ Vermeulen
+ Squid: Use a single pattern for brevity
+ Irc was already allowed to create tcp sockets, it only needed an
+ additional accept, and listen to be able to act as a proxy
+ Its probably a better idea to use the httpd_sys_ra_content_t type sid
+ for logs in these locations
+ Module version bump for changes to the tcsd policy module by Lukas
+ Vrabec
+ Module version bump for changes to various policy modules by Miroslav
+ Grepl
+ Module version bump for changes to the samba policy module by Dan Walsh
+ Module version bump for changes to the telepathy policy module by
+ Miroslav Grepl
+ We do not have a boinc domain type attribute Change boolean
+ description a bit
+ Additional rabbitmq couchdb support
+ Module version bumps for changes to various policy modules by Miroslav
+ Grepl
+ Additional git tcp networking rules
+ Additional ktalkd udp networking rules
+ Module version bump for changes to various policy modules by Dan Walsh
+ Addtional cups ldp tcp networking rules
+ Should be server packets because it is binding, and not connecting
+ Clean up telnet, and rlogin networking rules
+ Additional cvs tcp networking rules
+ Module version bump for changes to various policy modules by Dan Walsh
+ Addtional tgtd tcp networking rules
+ Additional polipo tcp networking rules
+ Fix asterisk files_spool_filetrans()
+ Module version bump for changes to the networkmanager policy module by
+ Lukas Vrabec
+ Additional fs_tmpfs_filetrans() for munin service plugin content on
+ tmpfs
+ Module version bump for changes to various policy modules by Miroslav
+ Grepl
+ Support rlogind, and telnetd as init daemon domains ( i think fedora is
+ campaigning to get rid of (x)?inetd )
+ Support mariadb logging, file context specification for mariadb specific
+ config location
+ Change logwatch boolean identifier to something more self-documenting.
+ Additional tcp networking rules
+ Module version bump for changes to various policy modules by Miroslav
+ Grepl
+ Fix inconsistencies in the pkcs policy module
+ Fix fetchmail inconsistencies
+ Module version bump for changes in various policy modules by Dan Walsh
+ Support for window managers to stream socket connect to pulseaudio
+ Logwatch does not need to be able to bind tcp sockets to generic nodes
+ since its only connecting
+ Adds userhelper_exec_consolehelper for window managers
+ Remove duplicate rules due to addition of auth_use_nsswitch()
+ We dont use the arbt domain types template. Use a more uniform boolean
+ discription
+ Clean up libstoragemngmt policy module We do not yet support systemd
+ Change type from etc_rw to conf for readability admin access to
+ condor_conf_t
+ Hit by a nasty optional policy nesting issue
+ We will find another way to run pa as a system server
+ Module version bump for changes to various policy modules by Miroslav
+ Grepl
+ Clean up hypervkvp policy module (seems incomplete)
+ Clean up initial redis policy module
+ Additional openvpn tcp networking rules
+ redis: allow redis to bind tcp sockets to redis_port_t type ports
+ bluetooth: bluetooth_t acquires org.bluez service on dbus system bus
+ wm: associate wm_exec_t to core command executable files so that initrc_t
+ (/sbin/start-stop-daemon) can access it (metacity)
+ logrotate restarts syslogd via init script in Debian
+ This file is called just man-db in Debian.
+ exim: exim owns directory /var/lib/exim4
+ accountsd: accounts-daemon lists /var/log
+ alsa: alsactl listing /dev/shm alsa: alsactl reading /dev/urandom alsa:
+ alsactl getting attributes of devtmpfs / (/dev) alsa: alsactl maintains
+ a pulseaudio tmpfs file
+ Cron: /sbin/runlevel reads /run/utmp cron: anacron (system_cronjob_t)
+ reading, writing inherited random crond tmp files (/tmp/tmpfk1VT2O)
+ dbus: allow system, and session bus clients to answer to dbus unconfined
+ domains
+ apt: Run apt system cronjobs in the apt_t domain apt: apt system cronjob
+ creates dpkg.status.* files in /var/backup
+ devicekit: upowerd reads own unix stream socket devicekit:
+ devicekit_power_t (runlevel) read /run/utmp
+ mandb: Make the man-db cronjob work on Debian
+ rtkit: traverse /proc to get to process state files
+ networkmanager: NetworkManager reads /run/udev/data/n2 file
+ avahi: create a avahi_initrc_domtrans for udev_t: udev runs a avahi dns
+ check script which does, i guess, a dns check. If needed it starts, or
+ stops avahi via its init script. I also created a
+ avahi_manage_pid_files() for udev_t because the script manages a file
+ called "checked_nameservers.*" in /run/avahi-daemon
+ Cleanups of various modules with regard to regular expressions and white
+ space
+ apt: As it turns out the /var/backups directory is labeled in the backup
+ module (which i incidentally did not have installed earlier). Instead
+ of creating this file with a file type transition to
+ apt_var_cache_t, allow apt_t to manage backup_store files
+ mta: this needs to be verified again, it should just have been running
+ in exim_t. I might have taken this from old logs
+ mandb: /etc/cron.daily/man-db executes dpkg, reads dpkg db on Debian
+ slocate: catch /usr/bin/updatedb.mlocate, and /etc/cron.daily/mlocate on
+ Debian
+ dpkg: catch /etc/cron.daily/dpkg on Debian dpkg: allow
+ /etc/cron.daily/dpkg to manage backup store files on Debian
+ cron: consistent usage of regular expressions cron: prelink no longer
+ runs in the system cronjob domain
+ alsa: alsactl wants to associate pulse-shm-.* to device_t type
+ filesystems. This happens early on but i do not understand how that
+ (/dev) relates to /dev/shm in this regard
+ devicekit: reads udev pid files modemmanager: reads udev pid files
+ vdagent: spice-vdagentd uses /dev/vport1p1 virtio console
+ tmpreaper: mountall-bootcl in the tmpreaper_t domain reads, writes
+ /dev/pts/0 inherited from init script
+ revert regular expressions
+ wm: allow $1_wm_t to stream connect to $1_gkeyringd_t
+ mta: allow system_mail_t (user_mail_domains) to read kernel sysctls and
+ to read exim var lib files.
+ mta: These are duplicates because system_mail_t is a user_mail_domain,
+ as it is based off of the mta_base_mail_template() which assigns that
+ type attribute
+ locate: extra rules needed by debian /etc/cron.daily/locate script
+ backup: in Debian /etc/cron.daily/passwd backs-up shadow, passwd etc to
+ /var/backups
+ avahi: create interfaces that will allow calles to create avahi pid dirs
+ and create specifc avahi pid objects with a type transition (for
+ udev, which runs: /usr/lib/avahi/avahi-daemon-check-dns.sh in
+ Debian
+ Initial gdomap policy module
+ Initial minissdpd policy module
+ alsa: due to a bug in gnome 3.4, in debian, alsactl does all kinds of
+ weird things related to pulseaudio
+ various: revert regex fixes: fcsort does not want this now
+ gdomap: gdomap_port_t is now available, gdomap binds tcp, and udp socket
+ to it
+ alsa: make alsa_t and pulseaudio_client so that pulseaudio_client rules
+ apply to it. alsactl does not actually run pulseaudio it seems though.
+ pulseaudio: allow all pulseaudio_client to send null signals to
+ unconfined_t, since unconfined_t is not actually a pulseaudio_client (
+ unconfined_t runs pulseaudio without a domain transition)
+ avahi: create avahi_setattr_pid_dirs() for udev (avahi dns check script
+ run by udev in Debian)
+ These { read write } tty_device_t chr files on boot up in Debian
+ colord: colord executable file locations in Debian
+ colord: reads /proc/1, reads /run/udev files
+ vdagent: read/write mtrr file
+ mandb: dpkg running in the mandb_t domain in Debian (mandb cronjob)
+ traverses /root
+ exim: traverses sysfs, uses system cronjob file descriptors (/dev/null) in
+ Debian (/etc/cron.daily/exim)
+ minissdpd fixes
+ devicekit: disk reads /proc/sys/vm/overcommit_memory
+ devicekit: edit devicekit_append_inherited_log_files to include get
+ attribute permission so that it can be also used for fsadm
+ devicekit: 95hdparm-apm (devicekit_power_t) gets attributes of /dev/sda
+ (fixed_disk_device_t)
+ networkmanager: added interfaces that fedora calls for dhcpc. In Debian it
+ was confirmed that at least dhclient manages
+ /var/lib/NetworkManager/dhclient-eth0.conf
+ firewalld: various fixes that i borrowed from Fedora but that also apply
+ to Debian (confirmed)
+ firewalld: interfaces created for iptables
+ irqbalance: getsched from Debian
+ colord: colord reads /proc/3412/cmdline (cupsd state files)
+ virt: libvirtd reads /run/udev/data/+input:input3
+ firewalld: traverses / on sysfs
+ rngd: needs ipc_lock capability, maintains /run/rngd.pid
+ tmpreaper: mountall-bootcl executes /bin/plymouth on Debian
+ minissdpd: deal with assertion violation (sys_module)
+ gdomap: missing networking rules, it traverses /tmp for some reason
+ ntp: create ntp_read_drift_files() for dhclient
+ dpkg: allow dpkg, and dpkg script to domain transition to initrc_t on any
+ init script file type rather than only the generic initrc_exec_t init
+ script file type
+ exim: exim4 reads online
+ apt: apt runs /usr/bin/apt-get apt: on_ac_power (apt_t) lists
+ /sys/class/power_supply
+ exim: exim_manage_var_lib_files created for init: init script runs helper
+ apps that create/manage /var/lib/exim4/config.autogenerated.tmp
+ gdomap/minissdpd: create read_config interfaces for initrc_t
+ exim: make exim init script create /var/run/exim4 with a proper context
+ pulseaudio: pulsaudio_t needs to be able to read user_tmpfs_files
+ (/run/shm/pulse-shm-.*)
+ dnsmasq: add support for /etc/dnsmasq.d/
+ Module version bumps for various policy modules
+ Module version bump for changes to the logrotate module by Luis Ressel
+ Git: git daemons can list and read git personal repositories
+ Module version bumps for changes to various policy modules by Fedora
+ redis, lsm: typo fixes
+ userhelper: append newline
+
+James Carter (8):
+ - Fixed typo in contrib/avahi.if
+ - Fixed typo in contrib/glusterfs.te
+ - Fixed typo in contrib/jabber.if
+ - Fixed typo in contrib/keystone.if
+ - Fixed typo in contrib/mailscanner.if
+ - Fixed typo in contrib/qpid.if
+ - Fixed typo in contrib/readahead.fc.
+ - Fixed typo in contrib/rpm.if.
+
+Laurent Bigonville (2):
+ Label /usr/lib/postfix/showq as postfix_showq_exec_t
+ Properly label git-daemon and gitweb.cgi on Debian
+
+Luis Ressel (10):
+ Allow initrc_t to create /var/run/opendkim
+ Label /etc/cron.daily/logrotate correctly.
+ gpg: Create gpg_agent_connect interface
+ Minor updates to couchdb policy
+ couchdb: Add separate domain for couchjs
+ couchdb: Dontaudit denials caused by Erlang's disksup
+ Reformat couchdb.fc
+ pcscd.if: Permit access to pid files inside /var/run/pcscd/.
+ Allow gpg-agent's scdaemon to connect to pcscd.
+ Dontaudit screen asking for the sys_tty_config capability
+
+Lukas Vrabec (8):
+ Allow tcsd to read utmp file
+ fix boinc policy
+ Add support for couchdb in rabbitmq policy
+ Fix transition rules in asterisk policy
+ Add fowner capability to networkmanager policy
+ Add policy for lsmd
+ Add policy for hypervkvpd
+ Add policy for redis-server
+
+Mika Pflüger (1):
+ Correct typo in passenger module name
+
+Miroslav Grepl (40):
+ Allow passenger to execute ifconfig
+ Allow mpd setcap which is needed by pulseaudio
+ Allow block_suspend cap for samba-net
+ Allow t-mission-control to manage gabble cache files
+ Allow nslcd to read /sys/devices/system/cpu
+ Add labeling for ~/.cache/telepathy/avatars/gabble
+ Allow firewalld to read NM state
+ Allow systemd running as git_systemd to bind git port
+ Fix labeling for fetchmail pid files/dirs
+ Fix polipo.te
+ Fix cupsd.te
+ Allow munin service plugins to manage own tmpfs files/dirs
+ Make ktalk as init domain
+ Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
+ Add logwatch_can_sendmail boolean
+ Allow rhsmcertd to read init state
+ Allow fsetid for pkcsslotd
+ Allow fetchmail to create own pid with correct labeling
+ Fix rhcs_domain_template()
+ Add support for abrt-upload-watch
+ Allow virtd to relabel unix stream socket
+ Fix lsm.fc for pid files
+ Also sock_file trans rule is needed in lsm
+ Update condor_master rules to allow read system state info and allow
+ logging
+ Add labeling for /etc/condor and allow condor domain to write it (bug)
+ Allow condor domains to manage own logs
+ Allow glusterd to read domains state
+ Add openvpn_can_network_connect() boolean
+ Fix minissdpd_admin()
+ Allow ctdb to getattr on al filesystems
+ Watchdog opens the raw socket
+ Allow watchdog to read network state info
+ Add setroubleshoot_signull() interface
+ Allow sosreport to send signull to setroubleshootd
+ Allow sosreport all signal perms
+ Allow sosreport to dbus chat with rpm
+ Allow zabbix_agentd to read all domain state
+ Allow smoltclient to execute ldconfig
+ Allow sosreport to request the kernel to load a module
+ Allow setpgid for sosreport
+
+Nicolas Iooss (1):
+ git: fix file pattern after whitespace fixes
+
+Sven Vermeulen (6):
+ Add minidlna policy
+ Allow openvpn temporary files
+ Add aide bin /usr/bin and mark /var/lib/aide
+ Provide alsa_write_lib interface
+ Run dmidecode after newrole or on terminals
+ Grant write privileges to squid on its log files
+
+* Wed Apr 24 2013 Chris PeBenito <selinux@tresys.com> - 2.20130424
+Chris PeBenito (18):
+ Rewrite of mcelog module from Guido Trentalancia
+ Remove unnecessary lines in mcelog.te.
+ Slight rearrangement in mcelog.te.
+ Module version bump for mcelog update from Guido Trentalancia.
+ Module version bump for ntp module fixes from Dominick Grift.
+ Module version bump for fc substitutions optimizations from Sven
+ Vermeulen.
+ Module version bump for postfix/mta misc fixes from Sven Vermeulen.
+ Module version bump for init_daemon_run_dirs usage from Sven Vermeulen.
+ Turn off all tunables by default, from Guido Trentalancia.
+ Module version bump for tunable default change.
+ Module version bump for saslauthd tcp mysql connections from Mika Flueger.
+ Move kernel request line in quota.
+ Module version bump for quota kernel module request from Mika Pflueger.
+ Module version bump for djbdns ports fixes from Russell Coker.
+ Remove stray + in keystone.te.
+ Whitespace fixes in cron.fc.
+ Module version bump for pulseaudio type_transition conflict fix from Sven
+ Vermeulen.
+ Bump module versions for release.
+
+Dominick Grift (889):
+ Initial BIRD Internet Routing Daemon policy
+ oident daemon fixes
+ Introduce ntp_conf_t
+ Allow ntp_admin() to manage ntp_drift_t content.
+ List etc_t directories
+ Use "Role allowed access." for consistency
+ Use permissions sets for compatibility.
+ Remove getattr permision from ntp_admin()
+ Initial Sensord policy module
+ Various block_suspend capability2 support from Fedora
+ Gitolite3 support from Fedora
+ /var/lib/sqlgrey is greylist milter data from Fedora
+ Terminal related fixes for plymouthd from Fedora Support block_suspend
+ capability2 for plymouth
+ Support minimal polkit in new location
+ Support ldap for user authentication from Fedora
+ Sanlock sends kill signals to non-root processes from Fedora Various
+ other capabilities for sanlock from Fedora
+ Initial support for sqlgrey from Fedora
+ Tor reads network sysctls from Fedora
+ GPG agent reads /dev/random from Fedora
+ Freshclam reads system and network state from Fedora
+ Execute wpa_cli in the NetworkManager_t domain for wicd from Fedora
+ lpstat.cups reads fips_enabled from Fedora
+ Initial system tap compile server policy module
+ Systemtap server admin manages stapserver_var_lib_t content
+ Telepathy Idle reads gschemas.compiled from Fedora
+ Initial slpd policy module
+ Initial lightsquid policy module
+ Initial wdmd policy module
+ Initial mailscanner policy module and some depencies.
+ Support slpd log rotation
+ Initial numad policy module
+ Open log files for append only
+ CGClear reads CGConfig files from Fedora Cosmetic changes to cgroup
+ policy module File contexts of cgroup app executables files in
+ /sbin also apply to /usr/sbin Make cgroup_admin() a bit more
+ compact
+ Initial svnserve policy module
+ Various small changes to ucspitcp
+ Initial fcoe policy module
+ Initial lldpad policy module
+ fcoemon sends to lldpad with a dgram socket
+ Initial quantum policy module
+ Initial dspam policy module
+ Module version bump for Telepathy file context spec fixes from Laurent
+ Bigonville.
+ Initial isns policy module
+ Various changes to tcs policy module
+ Initial ctdb policy module
+ Various changes to the sblim policy module and its dependencies
+ Initial polipo policy module
+ Module version bump for networkmanager fixes
+ Fixes to the polipo policy module
+ Module version bump for smartmon fixes from Laurent Bigonville.
+ Module version bump for accountsd file context spec fix from Laurent
+ Bigonville.
+ Various changes to the raid module
+ Module version bump for rtkit file context spec fix from Laurent
+ Bigonville
+ Initial couchdb policy module
+ Changes to the bind policy module
+ Initial dnssectrigger policy module
+ Initial man2html policy module
+ Initial openhpi policy module
+ Bind sends/receives http server instead of client packets conditionally
+ Two file context regular expression fixes by Eric Paris
+ Type mdadm_t is no longer a unconfined type
+ Initial pkcs policy module
+ Initial cfengine policy module
+ Initial keystone policy module
+ Initial l2tp policy module
+ Initial mongodb policy module
+ cfengine whitespace cleanup
+ Changes to the accountsservice policy module
+ Changes to the acct policy module
+ Changes to the ada policy module
+ changes to the afs policy module
+ Changes to the accountsservice policy module
+ Changes to the aiccu policy module
+ Changes to the aide policy module
+ Syntax error in afs_admin()
+ Changes to the aisexec policy module
+ Changes to the alsa policy module
+ Changes to the amanda policy module
+ Changes to the amavisd policy module and relevant dependencies
+ Changes to the amtu policy module
+ Changes to the anaconda policy module
+ Changes to the abrt policy module and relevant dependencies
+ numad sends/receives msgs from Fedora
+ Amtu executable file in installed in /usr/sbin in Fedora
+ The (usr/)? expression does not work consistently so better not use it
+ at all
+ Changes to the httpd policy module
+ Merge branch 'master' of
+ ssh://dgrift@oss.tresys.com/home/git/refpolicy-contrib
+ Fixes to the apache policy module and dependencies
+ Changes to the apcupsd policy module
+ Role attributes for lightsquid application domain
+ Changes to the mailscanner module
+ Changes to the svnserve policy module
+ Changes to the quantum policy module
+ Changes to the dspam module
+ Changes to the ctdb policy module
+ Changes to the couchdb policy module
+ Changes to the openhpid policy module
+ Changes to the keystone policy module
+ Changes to the l2tp policy module
+ Changes to the apm module and relevant dependencies
+ Changes to the arpwatch policy module
+ Changes to the apcupsd policy module
+ Changes to the abrt policy module
+ Changes to the apache policy module
+ Changes to the asterisk policy module and dependencies
+ Changes to the authbind policy module
+ Changes to the automount policy module
+ Change acpid lock file context spec
+ Changes to the avahi policy module and dependencies
+ Changes to the awstats policy module
+ Changes to the bacula policy module
+ Changes to the bcfg2 policy module
+ Changes to the apt policy module
+ Changes to the apache policy module
+ Changes to the backup module
+ Changes to the bind policy module
+ Bird module clean up
+ Fix arpwatch connected_stream_socket_perms
+ Changes to the bitlbee policy module
+ Changes to the blueman policy module
+ Changes to the bluetooth policy module
+ Changes to the brctl policy module
+ Changes to the apache policy module
+ Changes to the bugzilla policy module
+ Changes to the calamaris policy module
+ Implement lightsquid_admin()
+ Changes to the apache policy module and dependencies
+ Initial boinc policy module
+ Initial callweaver policy module
+ Changes to the canna policy module
+ Changes to the ccs policy module
+ Changes to the cdrecord policy module
+ Changes to the certmaster policy module and various role attribute fixes
+ cdrecord needs to read and write callers unix domain stream socket not
+ create it
+ Changes to the certmonger policy module and its dependencies
+ Initial cachefilesd policy module
+ Changes to the certwatch policy module
+ Changes to the chronyd policy module
+ Changes to the cipe policy module
+ Changes to the clamav policy module
+ Various network clean up
+ Add dev_rw_cachefiles() to cachefilesd policy module
+ Changes to the clockspeed policy module
+ Changes to the clogd policy module
+ Changes to the cmirrord policy module
+ Changes to the cobbler policy module
+ Changes to the colord policy module
+ Changes to the comsat policy module
+ Initial collectd policy module
+ Initial condor policy module and relevant dependencies
+ Changes to the consolekit policy module and relevant dependencies
+ Changes to the corosync policy module and relevant dependencies
+ Clean up couchdb network rules
+ Changes to the courier policy module
+ Changes to the cpucontrol policy module
+ Changes to the cpufreqselector policy module
+ Changes to the cron policy module and relevant dependencies
+ Changes to the cups policy module and relevant dependencies
+ Changes to the cvs policy module
+ Remove redundant connect avperms
+ Changes to the cyphesis policy module
+ Remove redundant rules from apache_admin()
+ Changes to the cyrus policy module
+ Changes to the daemontools policy module
+ Changes to the dante policy module
+ Modify dbadm boolean descriptions
+ Changes to the dbus policy module and its dependencies
+ Changes to the dcc policy module
+ Changes to the ddclient policy module
+ Changes to the ddcprobe policy module
+ Changes to the denyhosts policy module
+ Changes to the devicekit policy module and relevant dependencies
+ Changes to the dhcpd policy module
+ Changes tothe dictd policy module
+ Changes to the discc policy module
+ Changes to the djbdns policy module
+ Changes to the dkim policy module
+ Changes to the dmidecode policy module
+ Module bump for Laurent Bigonville trousers init script file context
+ specification fix
+ Module bump for Laurent Bigonville libvirt init script file context
+ specification fix
+ Changes to the dnsmasq policy module and relevant dependencies
+ Changes to the dovecot policy module
+ Changes to the dpkg policy module
+ Changes to the entropyd policy module
+ Changes to the evolution policy module
+ Changes to the exim policy module and relevant dependencies
+ Changes to the cron policy module
+ Changes to the fail2ban policy module
+ fcoemon XML clean up
+ Changes to the fetchmail policy module
+ Changes to the fingerd policy module
+ Initial firewalld policy module
+ Changes to the firstboot policy module
+ Changes to the fprint policy module and relevant dependencies
+ Changes to the ftp module
+ Changes to the games policy module
+ Clean up evolution and cdrecord XML
+ Changes to the gatekeeper policy module
+ Changes to the gift policy module
+ Changes to the git policy module
+ Changes to the gitosis policy module
+ Changes to the glance policy module
+ Initial glusterfs policy module
+ Add gatekeeper newline
+ Deprecate glusterd_admin() use glusterfs_admin() instead
+ Portage module version bump for autofs support by Matthew Thode and
+ clean up
+ cfengine: This location is now labeled with a cfengine private type
+ Changes to the slpd policy module
+ Changes to the gnomeclock policy module and relevant dependencies
+ Changes to the gpg policy module
+ Changes to the gpm policy module
+ Changes to the gpsd policy module and relevant dependencies
+ changes to the guest policy module
+ Changes to the gnomeclock policy module
+ Deprecate various DBUS interfaces and relevant dependencies
+ Changes to the cachefilesd policy module
+ Remove file context specification for kgpg which is a GUI frontend to
+ GPG. Domain transition to gpg_t will happen when kgpg runs gpg.
+ (rhbz#862229)
+ Initial mandb policy module
+ Changes to the hadoop policy module
+ Changes to the hald policy module
+ Changes to the hddtemp policy module
+ Changes to the howl policy module
+ changes to the mandb policy module
+ Changes to the dbus policy module
+ Changes to the rpm policy module
+ Changes to the i18n_input policy module
+ Changes to the icecast policy module
+ Changes to the ifplugd policy module
+ Changes to the imaze policy module
+ Changes to the inetd policy module and relevant dependencies
+ Changes to the innd policy module
+ Changes to the irc policy module
+ Changes to the ircd policy module
+ Changes to the irc policy module
+ Changes to the dbus policy module
+ Changes to the avahi policy module
+ Changes to the bluetooth policy module
+ Changes to the aiccu policy module
+ Changes to the bacula policy module
+ Changes to the boinc policy module
+ Changes to the bugzilla policy module
+ Changes to the ccs policy module
+ Changes to the clamav policy module
+ Changes to the cobbler policy module
+ Changes to the cyphesis policy module
+ Changes to the dante policy module
+ Changes to the dbskk policy module
+ Changes to the ddclient policy module
+ Changes to the denyhosts policy module
+ Changes to the dnssectrigger policy module
+ Changes to the dovecot policy module
+ Changes to the drbd policy module
+ Changes to the evolution policy module
+ Changes to the fail2ban policy module
+ Changes to the firewalld policy module
+ Changes to the firstboot policy module
+ Changes to the games policy module
+ Changes to the gift policy module
+ Changes to the glance policy module
+ Changes to the hald policy module
+ Changes to the dbus policy module
+ Changes to the git policy module
+ Changes to the polipo policy module
+ Changes to the firewalld policy module
+ Changes to the gpg policy module
+ Tab clean up in ircbalance file context file
+ Changes to the irqbalance policy module
+ Tab clean up in iscsi file context file
+ Changes to the iscsi policy module
+ Tab clean up in jabber file context file
+ Changes to the jabberd policy module
+ Changes to the pyicqt policy module
+ Tab clean up in java file context file
+ Changes to the java policy module
+ Changes to the dbus policy module
+ Changes to the gnome policy module
+ Changes to the apache policy module
+ Changes to the accountsd policy module
+ Changes to the alsa policy module
+ Changes to the evolution policy module
+ Changes to the bluetooth policy module
+ Changes to the games policy module
+ Changes to the gift policy module
+ Changes to the gpg policy module
+ Changes to the hadoop policy module
+ Tab clean up in kdump file context file
+ Changes to the kdump policy module
+ Changes to the gpg policy module
+ Changes to the dbus policy module
+ Changes to the evolution policy module
+ Changes to the gpm policy module
+ Version bump for evolution file context fixes by Laurent Bigonville
+ Version bump for nut file context fixes by Laurent Bigonville
+ Changes to the kdumpgui policy module
+ Tab clean up in kerberos file context file
+ Changes to the kerberos policy module and relevant dependencies
+ Changes to the kerneloops policy module
+ Tab clean up in kerberos file context file
+ Changes to the kismet policy module
+ Clean up amavis XML header
+ Initial keyboardd policy module
+ Tab clean up in ksmtuned file context file
+ Changes to the ksmtuned policy module
+ Tab clean up in ktalk file context file
+ Changes to the ktalk policy module
+ Changes to the kudzu policy module
+ Initial iodine policy module
+ Initial dirmngr policy module
+ Changes to the iodine policy module
+ Changes to the kerberos policy module
+ Changes to the kdumpgui policy module
+ Update deprecated interface calls ( gnome_read_config ->
+ gnome_read_generic_home_content )
+ Changes to the mozilla policy module
+ Changes to the thunderbird policy module
+ Changes to the l2tp policy module
+ Tab clean up in ldap file context file
+ Changes to the ldap policy module
+ Tab clean up in likewise file context file
+ Changes to the likewise policy module
+ Tab clean up in lircd file context file
+ Changes to the lircd policy module
+ Changes to the livecd policy module
+ Tab clean up in loadkeys file context file
+ Changes to the loadkeys policy module and relevant dependencies
+ Tab clean up in lockdev file context file
+ Changes to the lockdev policy module
+ Tab clean up in logrotate file context file
+ Changes to the logrotate policy module and relevant dependencies
+ Tab clean up in logwatch file context file
+ Changes to the logrotate policy module
+ Changes to the logwatch policy module
+ Tab clean up in lpd file context file
+ Changes to the lpd policy module
+ Tab clean up in cron policy module
+ Changes to the lpd policy module
+ Changes to the consolekit policy module
+ Tab fix in cron policy module
+ Tab clean up in mailman file context file
+ Changes to the mailman policy module and relevant dependencies
+ Tab clean up in mcelog file context file
+ Changes to the mcelog policy module
+ Tab clean up in mediawiki file context file
+ Mediawiki XML clean up
+ Tab clean up in memcached file context file
+ Changes to the memcached policy module
+ Changes to the apache policy module
+ Tab clean up in milter file context file
+ Changes to the milter policy module and relevant dependencies
+ Changes to the modemmanager policy module
+ Tab clean up in mojomojo file context file
+ Changes to the mojomojo policy module and relevant dependencies
+ Changes to the gpg policy module
+ Changes to the mongodb policy module
+ Changes to the mono policy module
+ Changes to the monop policy module
+ Tab clean up in mozilla file context file
+ Changes to the mozilla policy module and relevant dependencies
+ Changes to the mozilla policy module
+ Changes to the apache policy module
+ Tab clean up in mpd file context file
+ Changes to the mpd policy module
+ Tab clean up in mplayer file context file
+ Changes to the evolution policy module
+ Changes to the mplayer policy module
+ Changes to the irc policy module
+ Tab clean up in mrtg file context file
+ Changes to the mrtg policy module
+ Tab clean up in mta file context file
+ Changes to the mta policy module and relevant dependencies
+ Changes to the mta policy module and relevant dependencies
+ Get rid of mozilla_conf_t as it is unused
+ Changes to the logrotate policy module
+ Changes to the logwatch policy module
+ Changes to the java policy module
+ Changes to the apache module and relevant dependencies
+ Tab clean up in munin file context file
+ Changes to the munin policy module and relevant dependencies
+ Tab clean up in mysql file context file
+ Changes to mysqld policy module
+ Changes to various policy modules
+ Changes to the munin policy module
+ Changes to the dovecot policy module
+ Changes to various policy modules
+ Changes to the mta policy module
+ Changes to the certmonger policy module and relavant dependencies
+ Tab clean up in nagios file context file
+ Changes to the nagios policy module and relevant dependencies
+ Changes to the modutils policy module
+ Tab cleanup in the nessus file context file
+ Changes to the nessus policy module
+ Tab clean up in the network manager file context file
+ Changes to the networkmanager policy module and relevant dependencies
+ Changes to the mozilla policy module
+ Changes to the cobbler policy module
+ Initial rngd policy module
+ Tab clean up in the nis file context file
+ Changes to the nis policy module
+ Tab clean up in the nscd file context file
+ Changes to the nscd policy module
+ Tab clean up in the nsd file context file
+ Changes to the nsd policy module
+ Tab clean up in the nslcd file context file
+ Changes to the nslcd policy module
+ Tab clean up in the ntop file context file
+ Changes to the ntop policy module
+ Tab clean up in the ntp file context file
+ Changes to the ntp policy module
+ Changes to the numad policy module
+ Tab clean up in the nut file context file
+ Changes to the nut policy module
+ Tab clean up in the nx file context file
+ Changes to the nx policy module
+ Changes to the oav policy module
+ Initial obex policy module
+ Tab clean up in the oddjob file context file
+ Tab clean up in gpg policy module
+ Changes to the oddjob policy module
+ Changes to the mozilla policy module
+ Initial pacemaker policy module
+ Tab clean up in the oidentd file context file
+ Changes to the oident policy module
+ Tab clean up in the openca file context file
+ Changes to the openca policy module
+ Tab clean up in the openct file context file
+ Changes to the openct policy module
+ Tab clean up in the openvpn file context file
+ Changes to the openvpn policy module
+ Tab clean up in the pads file context file
+ Changes to the pads policy module
+ Tab clean up in the passenger file context file
+ Changes to the passenger policy module and relevant dependencies
+ Tab clean up in the pcmcia file context file
+ Changes to the pcmcia policy module
+ Tab clean up in the pcscd file context file
+ Changes to the pcscd policy module and relevant dependencies
+ Tab clean up in the pegasus file context file
+ Changes to the pegasus policy module
+ Tab clean up in the perdition file context file
+ Changes to the perdition policy module
+ Tab clean up in the pingd file context file
+ Changes to the pingd policy module
+ Changes to the plymouthd policy module
+ Changes to the mozilla policy module
+ Changes to the plymouth policy module
+ Tab clean up in the podsleuth file context file
+ Changes to the podsleuth policy module
+ Tab clean up in the policykit file context file
+ Changes to the policykit policy module and relevant dependencies
+ Tab clean up in the portage file context file
+ Changes to the portage policy module
+ Tab clean up in the portmap file context file
+ Changes to the portmap policy module
+ Tab clean up in the portreserve file context file
+ Changes to the portreserve policy module
+ Tab clean up in the portslave file context file
+ Changes to the portslave policy module and relevant dependencies
+ Tab clean up in the postfix file context file
+ Changes to the postfix policy module and relevant dependencies
+ Fixes to various policy modules
+ Tab clean up in the postfixpolicyd file context file
+ Changes to the postfixpolicyd policy module
+ Tab clean up in the postgrey file context file
+ Changes to the postgrey policy module
+ Tab clean up in the ppp file context file
+ Changes to the ppp policy module and relevant dependencies
+ Tab clean up in the prelink file context file
+ Changes to the prelink policy module and relevant dependencies
+ Tab clean up in the prelude file context file
+ Changes to the prelude policy module
+ Tab clean up in the privoxy file context file
+ Changes to the privoxy policy module
+ Tab clean up in the procmail file context file
+ Changes to the procmail policy module
+ Tab clean up in the psad file context file
+ Changes to the psad policy module
+ Changes to the ptchown policy module
+ Tab clean up in the publicfile file context file
+ Changes to the publicfile policy module
+ Fix a fatal syntax error in mozilla_plugin_role()
+ Changes to the plymouth policy module
+ Changes to the policykit policy module
+ Module version bump for fixes in shorewall, fail2ban and portage policy
+ modules by Sven Vermeulen
+ Tab clean up in the puppet file context file
+ Changes to ther puppet policy module and relevant dependencies
+ Initial pwauth policy module
+ Tab clean up in the pxe file context file
+ Changes to the pxe policy module
+ Tab clean up in the pyzor file context file
+ Changes to the pyzor policy module
+ Tab clean up in the qemu file context file
+ Changes to the qemu policy module
+ Tab clean up in the virt file context file
+ Changes to the virt policy module and relevant depedencies
+ Changes to the virt policy module
+ Changes to the cron policy module
+ Changes to the qemu policy module
+ Changes to the virt policy module
+ Epylog wants sys_nice and setsched
+ Tab clean up in the qmail file context file
+ Changes to the qmail policy module
+ Tab clean up in the qpid file context file
+ Changes to the qpid policy module
+ Tab clean up in the quota file context file
+ Changes to the quota policy module and relevant dependencies
+ Initial rabbitmq policy module
+ Tab clean up in the radius file context file
+ Changes to the radius policy module
+ Tab clean up in the radvd file context file
+ Changes to the radvd policy module
+ Changes to the raid policy module
+ Tab clean up in the razor file context file
+ Changes to the razor policy module and relevant dependencies
+ Smokeping cgi needs to run ping with a domain transition Remove
+ redundant socket create already provided by
+ sysnet_dns_name_resolve()
+ Changes to the virt policy module
+ Changes to the apache policy module
+ Changes to the gnome policy module
+ Changes to the rdisc policy mpdule
+ Changes to the readahead policy module
+ Changes to the remotelogin policy module
+ Tab clean up in the resmgr file context file
+ Changes to the resmgr policy module
+ Tab clean up in the rgmanager file context file
+ Changes to the rgmanager policy module
+ Initial Realmd policy module and relevant dependencies
+ Fix resmgrd init script file context specification
+ Changes to the cups policy module
+ automount reads overcommit_memory
+ Changes to the networkmanager policy module
+ Freshclam manages amavis spool content
+ Changes to the tftp policy module
+ Changes to the cobbler policy module
+ Tab clean up in the rhcs file context file
+ Changes to the rhcs policy module and relevant dependencies
+ Tab clean up in the rhgb file context file
+ Changes to the rhgb policy module
+ Tab clean up in the rhsmcertd file context file
+ Changes to the rhsmcertd policy module
+ Tab clean up in the ricci file context file
+ Changes to the ricci policy module
+ Tab clean up in the rlogin file context file
+ Changes to the rlogin policy module
+ Tab clean up in the roundup file context file
+ Changes to the roundup policy module
+ Changes to the remotelogin policy module
+ Changes to the apache policy module
+ Changes to the awstats policy module
+ fix puppet_admin() need to require types that it uses
+ Replace wrong type in puppet_admin()
+ Fix a syntax error in ricci_domtrans()
+ Catch all rpcbind content in /var/run
+ Changes to the cups policy module
+ Tab clean up in the rpc file context file
+ Changes to the rpc policy module
+ Tab clean up in the rpcbind file context file
+ Changes to the rpcbind policy module
+ Tab clean up in the rpm file context file
+ Changes to the rpm policy module and depedencies
+ Changes to the rshd policy module
+ Changes to the virt policy module
+ Changes to the rssh policy module
+ Tab clean up in the rsync file context file
+ Fix a typo in apache XML
+ Changes to the rsync policy module
+ Changes to the rtkit policy module
+ Tab clean up in the rwho file context file
+ Changes to the rwho policy module
+ Reads /proc/sys/kernel/random/poolsize
+ Tab clean up in the samba file context file
+ Changes to the samba policy module and relevant dependencies
+ Tab clean up in the sambagui file context file
+ Changes to the sambagui policy module
+ Initial firewallgui policy module
+ Tab clean up in the samhain file context file
+ Changes to the samhain policy module
+ Tab clean up in the sanlock file context file
+ Changes to the sanlock policy module and relevant dependencies
+ Tab clean up in the sasl file context file
+ Changes to the sasl policy module
+ Chnages to the sblim policy module
+ Tab clean up in the screen file context file
+ Changes to the screen policy module
+ Tab clean up in the sectoolm file context file
+ Changes to firewallgui policy module
+ Changes to the sectoolm policy module
+ Tab clean up in the sendmail file context file
+ Changes to the sendmail policy module and relevant dependencies
+ Tab clean up in the setroubleshoot file context file
+ Changes to the setroubleshoot policy module
+ Tab clean up in the shorewall file context file
+ Changes to the shorewall policy module
+ Tab clean up in the shutdown file context file
+ Changes to the shutdown policy module and relevant dependencies
+ Tab clean up in the slocate file context file
+ Changes to the slocate policy module and relevant dependencies
+ These domains transition to shutdown domain now so they no longer need
+ direct access
+ Re-add missing network rule in screen policy module
+ fail2ban server sets scheduler
+ shutdown XML clean up
+ libvirtd sets kernel scheduler
+ mongod reads cpuinfo_max_freq
+ Changes to the slrnpull policy module
+ Tab clean up in the smartmon file context file
+ Changes to the smartmon policy module
+ Tab clean up in the smokeping file context file
+ Changes to the smokeping policy module
+ Tab clean up in the smoltclient file context file
+ Changes to the smoltclient policy module
+ Tab clean up in the snmp file context file
+ Changes to the snmp policy module
+ Tab clean up in the snort file context file
+ Changes to the snort policy module
+ Changes to the sosreport policy module and relevant dependencies
+ Tab clean up in the soundserver file context file
+ Changes to the soundserver policy module
+ Tab clean up in the spamassassin file context file
+ Changes to the spamassassin policy module and relevant dependendies
+ spamassassin_role callers create ~/.spamd with the spamd_home_t user
+ home type instead
+ Re-add sys_admin capability that was lost with porting from Fedora
+ Move mailscanner content to mailscanner module
+ Changes to the speedtouch policy module
+ Tab clean up in the squid file context file
+ Changes to the squid policy module
+ Changes to the sssd policy module
+ Tab clean up in the stunnel file context file
+ Changes to the stunnel policy module
+ Tab clean up in the sxid file context file
+ Changes to the sxid policy module
+ Tab clean up in the sysstat file context file
+ Changes to the sysstat policy module
+ Tab clean up in the tcpd file context file
+ Changes to the tcpd policy module
+ Changes to the tcsd policy module
+ Tab clean up in the telepathy file context file
+ Changes to the telepathy policy module
+ Tab clean up in the telnet file context file
+ Changes to the telnet policy module
+ Tab clean up in the tftp file context file
+ Changes to the tftp policy module
+ Tab clean up in the tgtd file context file
+ Changes to the tgtd policy module
+ Tab clean up in the thunderbird file context file
+ Changes to the thunderbird policy module
+ Catch /var/log/cron directory as well
+ Dovecot module version bump for fixes by Sven Vermeulen
+ Portage module version bump for fixes by Sven Vermeulen
+ Cron module version bump for fixes by Sven Vermeulen
+ Changes to the exim policy module
+ Entropyd reads /proc/meminfo
+ Blueman reads tmp_t directories
+ Do not audit attempts by cups config to read tmp_t directories
+ Do not audit attempts by fail2ban to read tmp_t directories
+ Do not audit attempts by firewalld to read tmp_t directories
+ Gnomeclock reads urandom and realtime clock
+ Kdumpctl needs sys_chroot capability
+ Various kdumpgui fixes from Fedora
+ Do not audit attempts by logwatch to read tmp_t directories
+ Catch all alias files
+ Refine aliases file transition with names
+ Realmd dbus chat policykit and networkmanager from Fedora
+ Do not audit attempts by tuned to read tmp_t directories
+ Changes to the timidity policy module
+ Tab clean up in the tmpreaper file context file
+ Changes to the tmpreaper policy module and relevant dependencies
+ Tab clean up in the tor file context file
+ Changes to the tor policy module
+ Changes to the transproxy policy module
+ Tab clean up in the tripwire file context file
+ Changes to the tripwire policy module
+ Tab clean up in the tuned file context file
+ Changes to the tuned policy module
+ Tab clean up in the tvtime file context file
+ Changes to the tvtime policy module
+ Changes to the tzdata policy module
+ Changes to the ucspitcp policy module
+ Tab clean up in the ulogd file context file
+ Changes to the ulogd policy module
+ Tab clean up in the uml file context file
+ Changes to the uml policy module
+ Make it so that irc clients can also get attributes of cifs, nfs, fuse
+ and other file systems
+ Changes to the updfstab policy module
+ Changes to the uptime policy module
+ Tab clean up in the usbmodules file context file
+ Changes to the usbmodule policy module
+ Changes to the usbmuxd policy module
+ Tab clean up in the userhelper file context file
+ Screen sends child terminated signals to all interactive fd domains
+ Changes to the userhelper policy module and relevant dependencies
+ Changes to the virt policy module
+ Module version bump for fail2ban changes by Sven Vermeulen
+ Changes to the rpm policy module
+ fix smartmon init script file context specification
+ Changes to the usernetctl policy module
+ Tab clean up in the uucp file context file
+ Changes to the uucp policy module
+ Changes to the virt policy module
+ Tab clean up in the uuid file context file
+ Changes to the uuidd policy module
+ Tab clean up in the uwimap file context file
+ Changes to the uwimap policy module
+ Tab clean up in the varnishd file context file
+ Changes to the varnishd policy module
+ Changes to the vbetool policy module
+ Tab clean up in the vdagent file context file
+ Changes to the vdagent policy module
+ Tab clean up in the vhostmd file context file
+ Changes to the vhostmd policy module
+ Changes to the vlock policy module
+ Tab clean up in the vmware file context file
+ Changes to the vmware policy module
+ Tab clean up in the vnstatd file context file
+ Changes to the vnstatd policy module
+ Tab clean up in the vpn file context file
+ Changes to the vpnc policy module
+ Tab clean up in the w3c file context file
+ Changes to the w3c policy module
+ Tab clean up in the watchdog file context file
+ Changes to the watchdog policy module
+ Changes to the wdmd policy module
+ Changes to the webadm policy modules
+ Changes to the webalizer policy module
+ White space fix in apache policy module
+ Changes to the wine policy module
+ Tab clean up in the wireshark file context file
+ Changes to the wireshark policy module
+ Tab clean up in the wm file context file
+ Changes to the wm policy module
+ Changes to the inn policy module
+ Move man cache file type to miscfiles
+ Changes to the inn policy module
+ More accurate dbadm boolean descriptions
+ mysql_admin() has access to ~/.my.cnf files
+ Tab clean up in the xen file context file
+ Changes to the xen policy module and relevant dependencies
+ Tab clean up in the xfs file context file
+ Changes to the xfs policy module
+ Changes to the xguest policy module and relevant dependencies
+ Changes to the xprint policy module
+ Changes to the xscreensaver policy module
+ Tab clean up in the yam file context file
+ Changes to the yam policy module
+ Tab clean up in the zabbix file context file
+ Changes to the zabbix policy module
+ Tab clean up in the zarafa file context file
+ Changes to the zarafa policy module
+ Tab clean up in the zebra file context file
+ Changes to the zebra policy module
+ Changes to the zosremote policy module
+ Changes to the mysql policy module
+ Tab clean up in the pulseaudio file context file
+ Changes to the pulseaudio policy module and relevant dependencies
+ Changes to the pulseaudio policy module
+ One chown too many
+ Changes to the mplayer policy module
+ The prelink cron script now runs in its own domain
+ Initial smstools policy module
+ Initial openvswitch policy module and relevant dependencies
+ Reads pcsd pid files
+ Reads random device
+ winbind manages smbd pid sock files from Fedora
+ Changes to the bind policy module
+ CG rules daemon reads all sysctls
+ Runs consoletype and searches nfs state data from Fedora
+ Support munin unbound plugin from Fedora
+ Zabbix sends signals from Fedora
+ Blueman sets scheduler and sends signals from Fedora
+ pcscd_read_pub_files is deprecated, use pcscd_read_pid_files instead
+ Module version bumps for fixes in portage and virt modules by Sven
+ Vermeulen
+ Policy module version bumps for various changes by Sven Vermeulen
+ Changes to the openvpn policy module
+ Module version bumps for various fixes by Sven Vermeulen
+ Changes to the mandb policy module
+ Changes to the tmpreaper policy module
+ Changes to the munin policy module
+ Changes to the rngd policy module
+ Changes to the awstats policy module and relevant dependencies
+ Changes to the apache policy module
+ Changes to various policy modules
+ Changes to the abrt policy module
+ Changes to the passenger policy module and relevant depedencies
+ Changes to the pegagus policy module
+ Changes to the mta policy module
+ Changes to the fetchmail policy module
+ Changes to the bitlbee policy module
+ Changes to the blueman policy module and relevant dependencies
+ Changes to the amavis policy module
+ Changes to the userhelper policy module
+ Changes to the blueman policy module
+ Changes to the squid policy module
+ Changes to the sblim policy module
+ Changes to the kdumpgui policy module
+ Changes to the mailman policy module
+ Changes to the realmd policy module
+ Changes to the raid policy module
+ Changes to the samba policy module
+ Changes to the various policy modules
+ Changes to the snmp policy module
+ Changes to the spamassassin policy module
+ Changes to the sssd policy module
+ Changes to the l2tpd policy module
+ Changes to the shorewall policy module
+ Changes to the xen policy module
+ Changes to the tftp policy modules
+ Changes to the accountsd policy module
+ Changes to the tgtd policy module
+ Changes to the corosync policy module
+ Changes to the kdump policy module
+ Changes to the openvswitch policy module
+ Changes to the mpd policy module
+ Changes to the mozilla policy module
+ Changes to the zarafa policy module
+ Changes to the boinc policy module
+ Changes to the setroubleshoot policy module
+ Changes to the dspam policy module
+ Changes to the rgrmanager policy module and relevant dependencies
+ Changes to the svnserve policy module
+ Changes to the virt policy module
+ Changes to the prelink policy module
+ Changes to the apache policy module
+ Changes to the gnomeclock policy module
+ Changes to various policy modules
+ Changes to the pegagus policy module
+ Changes to the shorewall policy module
+ Changes to the kerberos policy module
+ Changes to the rhcs policy module
+ Changes to the irc policy module
+ Changes to the clamav policy module
+ Changes to the mrtg policy module
+ Changes to the munin policy module
+ Changes to the amavis policy module
+ Changes to the ppp policy module
+ Initial jockey policy module
+ Module version bumps for "several named transition for directories
+ created in /var/run by initscripts" in various modules by Laurent
+ Bigonville
+ Module version bumps for fixes in various modules by Laurent Bigonville
+ Module version bump for changes to the consolekit policy module by
+ Laurent Bigonville
+ Changes to the stunnel policy module
+ Module version bumps for fixes in various modules by Sven Vermeulen
+ Changes to the virt policy module
+ Changes to the apache policy module
+ Changes to the wm policy module
+ Changes to the samba policy module
+ Changes to the certmonger policy module
+ Changes to the mozilla policy module
+ Changes to the corosync policy module
+ Changes to the pacemaker policy module
+ Changes to the tuned policy module
+ Changes to the cups module and relevant dependencies
+ Changes to the rhsmcertd policy module
+ Changes to the lpd policy module
+ Changes to the munin policy module
+ Changes to the ntp policy module
+ Changes to the tor policy module
+ Changes to the firewalld policy module
+ Changes to the dspam policy module
+ Changes to the setroubleshoot policy module
+ Changes to the condor policy module
+ Changes to the kerberos policy module
+ Changes to the passenger policy module
+ Changes to the ppp policy module
+ Changes to the the dkim policy module
+ Changes to the abrt policy module
+ Changes to the lircd policy module
+ Changes to the dkim policy module
+ Changes to the virt policy module
+ Changes to the munin policy module
+ Changes to the dovecot policy module
+ Changes to the cobbler policy module
+ Changes to the userhelper policy module
+ Changes to the logwatch policy module
+ Changes to the wdmd policy module and relevant dependencies
+ Changes to the nscd policy module and relevant dependencies
+ Changes to the dbus policy module
+ Module version bumps for fixes in various policy modules by Laurent
+ Bigonville
+ Changes to the cups policy module
+ Changes to the dbus policy module
+ Changes to the apcupsd policy module
+ Remove redundant net_bind_service capabilities in various modules
+ Changes to the virt policy module
+ Changes to the puppet policy module
+ Module version bumps for fixes in various policy module by Sven
+ Vermeulen
+ Module version bumps for file context fixes in various policy modules by
+ Laurent Bigonville
+ Make httpd_manage_all_user_content() do what it advertises
+ Add more networking rules to mplayer policy module for compatibility
+ Fix fcronsighup file context. Should be crontab_exec_t as per previous
+ spec
+ Module version bumps for changes in various modules by Sven Vermeulen
+ Move asterisk_exec() and modify XML header
+ Consolekit creates /var/run/console directories with a type transition
+ unconditionally
+ Module version bump in consolekit policy module for changes by Sven
+ Vermeulen
+ The imaplogin executable file should be courier_pop_exec_t according to
+ existing file context specification
+ Module version bump for changes to the fail2ban policy module by Sven
+ Vermeulen
+ Modules version bumps for changes in various policy modules by Sven
+ Vermeulen
+
+Laurent Bigonville (28):
+ Add Debian locations for Telepathy connection managers
+ Label telepathy-rakia as telepathy-sofiasip
+ Allow smartd daemon to write in /var/lib/smartmontools directory
+ Add Debian location for smartd daemon initscript
+ Add Debian location for accounts-daemon daemon
+ Add Debian location for rtkit-daemon daemon
+ Add Debian location for tcsd init script
+ Add Debian location for libvirtd init script
+ Add Debian location for evolution executables
+ Add Debian locationis for nut executables and configuration files
+ Add several named transition for directories created in /var/run by
+ initscripts
+ Run packagekit under apt_t context on Debian distribution
+ Add proper label for colord daemon in debian
+ Allow the system dbus to search cgroup directories
+ Allow virtd_t context to read sysctl_crypto_t
+ Allow colord_t context to read sysctl_crypto_t
+ Add proper label for gconfd-2 daemon in Debian
+ Ensure that consolekit can create /var/run/console directory on Debian
+ Properly label nm-dispatcher.action on Debian
+ policykit.fc: Properly label polkit-agent-helper-1 on Debian
+ cups.fc: Properly label cups-pk-helper-mechanism on Debian
+ Allow pcscd the fsetid capability
+ Allow networkmanager_t to read crypto_sysctl_t
+ Allow virsh_t context to read sysctl_crypto_t
+ Allow cupsd_t to read cupsd_log_t
+ gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian
+ ptchown.fc: Properly label pt_chown executable in Debian
+ Label /usr/bin/kvm as qemu_exec_t
+
+Matthew Thode (2):
+ added autofs support and nsswitch support
+ removing refrences to named_var_lib_t as it doesn't exist anymore for
+ bind.if
+
+Mika Pflüger (3):
+ Allow saslauthd_t to talk to mysqld via TCP
+ Quota policy adjustments: * Allow quota_t to load kernel modules
+ Debian locations for dovecot deliver and dovecot auth.
+
+Russell Coker (1):
+ Fix djbdns ports
+
+Sven Vermeulen (75):
+ Update with new substitutions
+ Mark the pid directory as a pid directory
+ Add in transitions for queue types when the queues are created
+ Fix typo in interface postfix_exec_postqueue
+ Allow maildelivery to use dotlock files in the mail spool
+ Allow postfix local to change ownership of mailfiles
+ Use libexec location for postfix binaries
+ Allow initrc_t to create run dirs for contrib modules
+ Update logwatch location in file context
+ Sandbox is an inherent part of the portage inner workings
+ Fix startup issue with fail2ban-client
+ Be able to get output from fail2ban-client
+ Ignore searches when ran from the user home directory
+ Shorewall admins execute shorewall too
+ Shorewall needs sys_admin capability for manipulating network stack
+ Be able to display dovecot errors
+ Remove transition to ldconfig
+ Adding interfaces for handling cron log files
+ Fail2ban client checks state of log files before telling the server
+ Support mysql init script
+ Support initial creation of mysql database files
+ Portage fetch domain needs to access certificates
+ Make samba domtrans optional in virt
+ Fix typo in tunable declaration for fcron_crond
+ Introducing cron_manage_log_files interface
+ Introduce dontaudit interfaces for leaked fd and unix stream sockets
+ Dontaudit attempts by system_mail_t to use leaked fd or stream sockets
+ Support at service
+ Additional postfix admin requirements
+ Reintroduce postfix_var_run_t for pid directory and fowner capability
+ Postfix deferred queue should not mark mails as postfix_spool_maildrop_t
+ Running qemu with SDL support requires more xserver-related privileges
+ Fix typo in clockspeed comment
+ Support openvpn status file
+ Asterisk voicemail messages are generated from tmp
+ Make rtkit calls optional
+ Gentoo installs dovecot certs in /etc/ssl/dovecot
+ Moving sandbox code to sandbox section (v2)
+ Allow sandbox to log violations
+ Use rw_fifo_file_perms
+ Apache should not depend on gpg
+ Named init script creates rundir
+ Add ~/.maildir as a valid maildir destination
+ Support stunnel_read_config for startup
+ Updates on stunnel policy
+ More .maildir fixes
+ Mark make.profile entry as portage_conf_t (v2)
+ Move mta call (coding style)
+ Changes to puppet domain
+ Allow rpc admin to run exportfs
+ Grant sys_admin capability to puppet
+ Puppet module helper scripts are puppet_var_lib_t
+ Support netlink_route_socket creation for puppet
+ Puppet initscript creates /run/puppet
+ Puppet runs statfs against selinuxfs
+ mplayer streams HTTP resources
+ fcron and fcronsighup binaries are moved
+ Asterisk needs to search through logs
+ Denial in mail log on node bind
+ Fix typo in mcelog_admin (missing bracket)
+ Add in contexts for fcron rm.systab and systab.tmp
+ Remove pulseaudio filename_trans conflict
+ Allow asterisk admins to execute asterisk binary directly
+ Support tagfiles for consolekit
+ ConsoleKit needs to read the dbus machine-id
+ File context updates for courier-imap
+ Update on file contexts for OpenLDAP
+ Update on file contexts for wpa_supplicant
+ Allow IRC clients to read certificates
+ Allow reading /proc/self for fail2ban due to FAM support
+ Update file contexts for puppet
+ Support ~/.tmux.conf as tmux configuration file
+ Add setuid/setgid capability to ulogd_t
+ Support tmux control socket
+ Postfix creates defer(red) queue locations
+
diff --git a/policy/modules/contrib/acct.fc b/policy/modules/admin/acct.fc
index 5a772ec6..5a772ec6 100644
--- a/policy/modules/contrib/acct.fc
+++ b/policy/modules/admin/acct.fc
diff --git a/policy/modules/contrib/acct.if b/policy/modules/admin/acct.if
index 59d95d04..59d95d04 100644
--- a/policy/modules/contrib/acct.if
+++ b/policy/modules/admin/acct.if
diff --git a/policy/modules/contrib/acct.te b/policy/modules/admin/acct.te
index 4f3550cf..4f3550cf 100644
--- a/policy/modules/contrib/acct.te
+++ b/policy/modules/admin/acct.te
diff --git a/policy/modules/contrib/aide.fc b/policy/modules/admin/aide.fc
index b2f47de8..b2f47de8 100644
--- a/policy/modules/contrib/aide.fc
+++ b/policy/modules/admin/aide.fc
diff --git a/policy/modules/contrib/aide.if b/policy/modules/admin/aide.if
index 01cbb67d..01cbb67d 100644
--- a/policy/modules/contrib/aide.if
+++ b/policy/modules/admin/aide.if
diff --git a/policy/modules/contrib/aide.te b/policy/modules/admin/aide.te
index 9d3c19ce..9d3c19ce 100644
--- a/policy/modules/contrib/aide.te
+++ b/policy/modules/admin/aide.te
diff --git a/policy/modules/contrib/alsa.fc b/policy/modules/admin/alsa.fc
index 75ea9ebf..75ea9ebf 100644
--- a/policy/modules/contrib/alsa.fc
+++ b/policy/modules/admin/alsa.fc
diff --git a/policy/modules/contrib/alsa.if b/policy/modules/admin/alsa.if
index 9cff9efb..9cff9efb 100644
--- a/policy/modules/contrib/alsa.if
+++ b/policy/modules/admin/alsa.if
diff --git a/policy/modules/contrib/alsa.te b/policy/modules/admin/alsa.te
index 008b6d25..008b6d25 100644
--- a/policy/modules/contrib/alsa.te
+++ b/policy/modules/admin/alsa.te
diff --git a/policy/modules/contrib/amanda.fc b/policy/modules/admin/amanda.fc
index 0d90d71e..0d90d71e 100644
--- a/policy/modules/contrib/amanda.fc
+++ b/policy/modules/admin/amanda.fc
diff --git a/policy/modules/contrib/amanda.if b/policy/modules/admin/amanda.if
index 1de17880..1de17880 100644
--- a/policy/modules/contrib/amanda.if
+++ b/policy/modules/admin/amanda.if
diff --git a/policy/modules/contrib/amanda.te b/policy/modules/admin/amanda.te
index ea74ccd7..ea74ccd7 100644
--- a/policy/modules/contrib/amanda.te
+++ b/policy/modules/admin/amanda.te
diff --git a/policy/modules/contrib/amtu.fc b/policy/modules/admin/amtu.fc
index b21a14a2..b21a14a2 100644
--- a/policy/modules/contrib/amtu.fc
+++ b/policy/modules/admin/amtu.fc
diff --git a/policy/modules/contrib/amtu.if b/policy/modules/admin/amtu.if
index 69425600..69425600 100644
--- a/policy/modules/contrib/amtu.if
+++ b/policy/modules/admin/amtu.if
diff --git a/policy/modules/contrib/amtu.te b/policy/modules/admin/amtu.te
index 9342d566..9342d566 100644
--- a/policy/modules/contrib/amtu.te
+++ b/policy/modules/admin/amtu.te
diff --git a/policy/modules/contrib/anaconda.fc b/policy/modules/admin/anaconda.fc
index b098089d..b098089d 100644
--- a/policy/modules/contrib/anaconda.fc
+++ b/policy/modules/admin/anaconda.fc
diff --git a/policy/modules/contrib/anaconda.if b/policy/modules/admin/anaconda.if
index 14a61b7e..14a61b7e 100644
--- a/policy/modules/contrib/anaconda.if
+++ b/policy/modules/admin/anaconda.if
diff --git a/policy/modules/contrib/anaconda.te b/policy/modules/admin/anaconda.te
index 307f1e8f..307f1e8f 100644
--- a/policy/modules/contrib/anaconda.te
+++ b/policy/modules/admin/anaconda.te
diff --git a/policy/modules/contrib/apt.fc b/policy/modules/admin/apt.fc
index 92db84d6..92db84d6 100644
--- a/policy/modules/contrib/apt.fc
+++ b/policy/modules/admin/apt.fc
diff --git a/policy/modules/contrib/apt.if b/policy/modules/admin/apt.if
index 568aa97d..568aa97d 100644
--- a/policy/modules/contrib/apt.if
+++ b/policy/modules/admin/apt.if
diff --git a/policy/modules/contrib/apt.te b/policy/modules/admin/apt.te
index ed05a060..ed05a060 100644
--- a/policy/modules/contrib/apt.te
+++ b/policy/modules/admin/apt.te
diff --git a/policy/modules/contrib/backup.fc b/policy/modules/admin/backup.fc
index 349c26f5..349c26f5 100644
--- a/policy/modules/contrib/backup.fc
+++ b/policy/modules/admin/backup.fc
diff --git a/policy/modules/contrib/backup.if b/policy/modules/admin/backup.if
index fe3f740d..fe3f740d 100644
--- a/policy/modules/contrib/backup.if
+++ b/policy/modules/admin/backup.if
diff --git a/policy/modules/contrib/backup.te b/policy/modules/admin/backup.te
index ca3727ca..ca3727ca 100644
--- a/policy/modules/contrib/backup.te
+++ b/policy/modules/admin/backup.te
diff --git a/policy/modules/contrib/bacula.fc b/policy/modules/admin/bacula.fc
index 27c021c3..27c021c3 100644
--- a/policy/modules/contrib/bacula.fc
+++ b/policy/modules/admin/bacula.fc
diff --git a/policy/modules/contrib/bacula.if b/policy/modules/admin/bacula.if
index eba3f1ca..eba3f1ca 100644
--- a/policy/modules/contrib/bacula.if
+++ b/policy/modules/admin/bacula.if
diff --git a/policy/modules/contrib/bacula.te b/policy/modules/admin/bacula.te
index 8def92c1..8def92c1 100644
--- a/policy/modules/contrib/bacula.te
+++ b/policy/modules/admin/bacula.te
diff --git a/policy/modules/contrib/bcfg2.fc b/policy/modules/admin/bcfg2.fc
index feb5d9d9..feb5d9d9 100644
--- a/policy/modules/contrib/bcfg2.fc
+++ b/policy/modules/admin/bcfg2.fc
diff --git a/policy/modules/contrib/bcfg2.if b/policy/modules/admin/bcfg2.if
index 0cd2d35b..0cd2d35b 100644
--- a/policy/modules/contrib/bcfg2.if
+++ b/policy/modules/admin/bcfg2.if
diff --git a/policy/modules/contrib/bcfg2.te b/policy/modules/admin/bcfg2.te
index 3897511e..3897511e 100644
--- a/policy/modules/contrib/bcfg2.te
+++ b/policy/modules/admin/bcfg2.te
diff --git a/policy/modules/contrib/blueman.fc b/policy/modules/admin/blueman.fc
index c295d2e0..c295d2e0 100644
--- a/policy/modules/contrib/blueman.fc
+++ b/policy/modules/admin/blueman.fc
diff --git a/policy/modules/contrib/blueman.if b/policy/modules/admin/blueman.if
index 16ec5252..16ec5252 100644
--- a/policy/modules/contrib/blueman.if
+++ b/policy/modules/admin/blueman.if
diff --git a/policy/modules/contrib/blueman.te b/policy/modules/admin/blueman.te
index 718e3bf3..718e3bf3 100644
--- a/policy/modules/contrib/blueman.te
+++ b/policy/modules/admin/blueman.te
diff --git a/policy/modules/contrib/brctl.fc b/policy/modules/admin/brctl.fc
index ed472f09..ed472f09 100644
--- a/policy/modules/contrib/brctl.fc
+++ b/policy/modules/admin/brctl.fc
diff --git a/policy/modules/contrib/brctl.if b/policy/modules/admin/brctl.if
index 422a5c66..422a5c66 100644
--- a/policy/modules/contrib/brctl.if
+++ b/policy/modules/admin/brctl.if
diff --git a/policy/modules/contrib/brctl.te b/policy/modules/admin/brctl.te
index fad61476..fad61476 100644
--- a/policy/modules/contrib/brctl.te
+++ b/policy/modules/admin/brctl.te
diff --git a/policy/modules/contrib/certwatch.fc b/policy/modules/admin/certwatch.fc
index 726720cc..726720cc 100644
--- a/policy/modules/contrib/certwatch.fc
+++ b/policy/modules/admin/certwatch.fc
diff --git a/policy/modules/contrib/certwatch.if b/policy/modules/admin/certwatch.if
index 54e6e661..54e6e661 100644
--- a/policy/modules/contrib/certwatch.if
+++ b/policy/modules/admin/certwatch.if
diff --git a/policy/modules/contrib/certwatch.te b/policy/modules/admin/certwatch.te
index 171fafb9..171fafb9 100644
--- a/policy/modules/contrib/certwatch.te
+++ b/policy/modules/admin/certwatch.te
diff --git a/policy/modules/contrib/cfengine.fc b/policy/modules/admin/cfengine.fc
index 807467cb..807467cb 100644
--- a/policy/modules/contrib/cfengine.fc
+++ b/policy/modules/admin/cfengine.fc
diff --git a/policy/modules/contrib/cfengine.if b/policy/modules/admin/cfengine.if
index ff0b0038..ff0b0038 100644
--- a/policy/modules/contrib/cfengine.if
+++ b/policy/modules/admin/cfengine.if
diff --git a/policy/modules/contrib/cfengine.te b/policy/modules/admin/cfengine.te
index 18ffc278..18ffc278 100644
--- a/policy/modules/contrib/cfengine.te
+++ b/policy/modules/admin/cfengine.te
diff --git a/policy/modules/contrib/chkrootkit.fc b/policy/modules/admin/chkrootkit.fc
index fa780c34..fa780c34 100644
--- a/policy/modules/contrib/chkrootkit.fc
+++ b/policy/modules/admin/chkrootkit.fc
diff --git a/policy/modules/contrib/chkrootkit.if b/policy/modules/admin/chkrootkit.if
index 12589bd9..12589bd9 100644
--- a/policy/modules/contrib/chkrootkit.if
+++ b/policy/modules/admin/chkrootkit.if
diff --git a/policy/modules/contrib/chkrootkit.te b/policy/modules/admin/chkrootkit.te
index 6d9fc5c3..6d9fc5c3 100644
--- a/policy/modules/contrib/chkrootkit.te
+++ b/policy/modules/admin/chkrootkit.te
diff --git a/policy/modules/contrib/ddcprobe.fc b/policy/modules/admin/ddcprobe.fc
index 747c416e..747c416e 100644
--- a/policy/modules/contrib/ddcprobe.fc
+++ b/policy/modules/admin/ddcprobe.fc
diff --git a/policy/modules/contrib/ddcprobe.if b/policy/modules/admin/ddcprobe.if
index aeddb697..aeddb697 100644
--- a/policy/modules/contrib/ddcprobe.if
+++ b/policy/modules/admin/ddcprobe.if
diff --git a/policy/modules/contrib/ddcprobe.te b/policy/modules/admin/ddcprobe.te
index 212316cb..212316cb 100644
--- a/policy/modules/contrib/ddcprobe.te
+++ b/policy/modules/admin/ddcprobe.te
diff --git a/policy/modules/contrib/dmidecode.fc b/policy/modules/admin/dmidecode.fc
index 0ca4c99a..0ca4c99a 100644
--- a/policy/modules/contrib/dmidecode.fc
+++ b/policy/modules/admin/dmidecode.fc
diff --git a/policy/modules/contrib/dmidecode.if b/policy/modules/admin/dmidecode.if
index 41c3f677..41c3f677 100644
--- a/policy/modules/contrib/dmidecode.if
+++ b/policy/modules/admin/dmidecode.if
diff --git a/policy/modules/contrib/dmidecode.te b/policy/modules/admin/dmidecode.te
index bda30744..bda30744 100644
--- a/policy/modules/contrib/dmidecode.te
+++ b/policy/modules/admin/dmidecode.te
diff --git a/policy/modules/contrib/dphysswapfile.fc b/policy/modules/admin/dphysswapfile.fc
index dd8ab602..dd8ab602 100644
--- a/policy/modules/contrib/dphysswapfile.fc
+++ b/policy/modules/admin/dphysswapfile.fc
diff --git a/policy/modules/contrib/dphysswapfile.if b/policy/modules/admin/dphysswapfile.if
index c39464e4..c39464e4 100644
--- a/policy/modules/contrib/dphysswapfile.if
+++ b/policy/modules/admin/dphysswapfile.if
diff --git a/policy/modules/contrib/dphysswapfile.te b/policy/modules/admin/dphysswapfile.te
index ee4ec4e2..ee4ec4e2 100644
--- a/policy/modules/contrib/dphysswapfile.te
+++ b/policy/modules/admin/dphysswapfile.te
diff --git a/policy/modules/contrib/dpkg.fc b/policy/modules/admin/dpkg.fc
index 9ba6e312..9ba6e312 100644
--- a/policy/modules/contrib/dpkg.fc
+++ b/policy/modules/admin/dpkg.fc
diff --git a/policy/modules/contrib/dpkg.if b/policy/modules/admin/dpkg.if
index a5e88d6f..a5e88d6f 100644
--- a/policy/modules/contrib/dpkg.if
+++ b/policy/modules/admin/dpkg.if
diff --git a/policy/modules/contrib/dpkg.te b/policy/modules/admin/dpkg.te
index e7747bc7..e7747bc7 100644
--- a/policy/modules/contrib/dpkg.te
+++ b/policy/modules/admin/dpkg.te
diff --git a/policy/modules/contrib/fakehwclock.fc b/policy/modules/admin/fakehwclock.fc
index 85ea9317..85ea9317 100644
--- a/policy/modules/contrib/fakehwclock.fc
+++ b/policy/modules/admin/fakehwclock.fc
diff --git a/policy/modules/contrib/fakehwclock.if b/policy/modules/admin/fakehwclock.if
index 3e5afb14..3e5afb14 100644
--- a/policy/modules/contrib/fakehwclock.if
+++ b/policy/modules/admin/fakehwclock.if
diff --git a/policy/modules/contrib/fakehwclock.te b/policy/modules/admin/fakehwclock.te
index a773824c..a773824c 100644
--- a/policy/modules/contrib/fakehwclock.te
+++ b/policy/modules/admin/fakehwclock.te
diff --git a/policy/modules/contrib/firstboot.fc b/policy/modules/admin/firstboot.fc
index 2aafeb25..2aafeb25 100644
--- a/policy/modules/contrib/firstboot.fc
+++ b/policy/modules/admin/firstboot.fc
diff --git a/policy/modules/contrib/firstboot.if b/policy/modules/admin/firstboot.if
index 280f875f..280f875f 100644
--- a/policy/modules/contrib/firstboot.if
+++ b/policy/modules/admin/firstboot.if
diff --git a/policy/modules/contrib/firstboot.te b/policy/modules/admin/firstboot.te
index 1576b498..1576b498 100644
--- a/policy/modules/contrib/firstboot.te
+++ b/policy/modules/admin/firstboot.te
diff --git a/policy/modules/contrib/hwloc.fc b/policy/modules/admin/hwloc.fc
index 136bb697..136bb697 100644
--- a/policy/modules/contrib/hwloc.fc
+++ b/policy/modules/admin/hwloc.fc
diff --git a/policy/modules/contrib/hwloc.if b/policy/modules/admin/hwloc.if
index c2349ecf..c2349ecf 100644
--- a/policy/modules/contrib/hwloc.if
+++ b/policy/modules/admin/hwloc.if
diff --git a/policy/modules/contrib/hwloc.te b/policy/modules/admin/hwloc.te
index e0e2243f..e0e2243f 100644
--- a/policy/modules/contrib/hwloc.te
+++ b/policy/modules/admin/hwloc.te
diff --git a/policy/modules/contrib/kdump.fc b/policy/modules/admin/kdump.fc
index 4e396725..4e396725 100644
--- a/policy/modules/contrib/kdump.fc
+++ b/policy/modules/admin/kdump.fc
diff --git a/policy/modules/contrib/kdump.if b/policy/modules/admin/kdump.if
index 56fb3395..56fb3395 100644
--- a/policy/modules/contrib/kdump.if
+++ b/policy/modules/admin/kdump.if
diff --git a/policy/modules/contrib/kdump.te b/policy/modules/admin/kdump.te
index 4e27a84f..4e27a84f 100644
--- a/policy/modules/contrib/kdump.te
+++ b/policy/modules/admin/kdump.te
diff --git a/policy/modules/contrib/kdumpgui.fc b/policy/modules/admin/kdumpgui.fc
index 250679cd..250679cd 100644
--- a/policy/modules/contrib/kdumpgui.fc
+++ b/policy/modules/admin/kdumpgui.fc
diff --git a/policy/modules/contrib/kdumpgui.if b/policy/modules/admin/kdumpgui.if
index 182ab8b5..182ab8b5 100644
--- a/policy/modules/contrib/kdumpgui.if
+++ b/policy/modules/admin/kdumpgui.if
diff --git a/policy/modules/contrib/kdumpgui.te b/policy/modules/admin/kdumpgui.te
index 2990962b..2990962b 100644
--- a/policy/modules/contrib/kdumpgui.te
+++ b/policy/modules/admin/kdumpgui.te
diff --git a/policy/modules/contrib/kismet.fc b/policy/modules/admin/kismet.fc
index 09ccb80d..09ccb80d 100644
--- a/policy/modules/contrib/kismet.fc
+++ b/policy/modules/admin/kismet.fc
diff --git a/policy/modules/contrib/kismet.if b/policy/modules/admin/kismet.if
index 1ba783c4..1ba783c4 100644
--- a/policy/modules/contrib/kismet.if
+++ b/policy/modules/admin/kismet.if
diff --git a/policy/modules/contrib/kismet.te b/policy/modules/admin/kismet.te
index dc07e769..dc07e769 100644
--- a/policy/modules/contrib/kismet.te
+++ b/policy/modules/admin/kismet.te
diff --git a/policy/modules/contrib/kudzu.fc b/policy/modules/admin/kudzu.fc
index a0127d49..a0127d49 100644
--- a/policy/modules/contrib/kudzu.fc
+++ b/policy/modules/admin/kudzu.fc
diff --git a/policy/modules/contrib/kudzu.if b/policy/modules/admin/kudzu.if
index 85214c5b..85214c5b 100644
--- a/policy/modules/contrib/kudzu.if
+++ b/policy/modules/admin/kudzu.if
diff --git a/policy/modules/contrib/kudzu.te b/policy/modules/admin/kudzu.te
index 1ec6b513..1ec6b513 100644
--- a/policy/modules/contrib/kudzu.te
+++ b/policy/modules/admin/kudzu.te
diff --git a/policy/modules/contrib/logrotate.fc b/policy/modules/admin/logrotate.fc
index dac1af39..dac1af39 100644
--- a/policy/modules/contrib/logrotate.fc
+++ b/policy/modules/admin/logrotate.fc
diff --git a/policy/modules/contrib/logrotate.if b/policy/modules/admin/logrotate.if
index dd8e01af..dd8e01af 100644
--- a/policy/modules/contrib/logrotate.if
+++ b/policy/modules/admin/logrotate.if
diff --git a/policy/modules/contrib/logrotate.te b/policy/modules/admin/logrotate.te
index 2490cdfa..2490cdfa 100644
--- a/policy/modules/contrib/logrotate.te
+++ b/policy/modules/admin/logrotate.te
diff --git a/policy/modules/contrib/logwatch.fc b/policy/modules/admin/logwatch.fc
index 7e83c901..7e83c901 100644
--- a/policy/modules/contrib/logwatch.fc
+++ b/policy/modules/admin/logwatch.fc
diff --git a/policy/modules/contrib/logwatch.if b/policy/modules/admin/logwatch.if
index 06c3d36c..06c3d36c 100644
--- a/policy/modules/contrib/logwatch.if
+++ b/policy/modules/admin/logwatch.if
diff --git a/policy/modules/contrib/logwatch.te b/policy/modules/admin/logwatch.te
index f20454ab..f20454ab 100644
--- a/policy/modules/contrib/logwatch.te
+++ b/policy/modules/admin/logwatch.te
diff --git a/policy/modules/contrib/mcelog.fc b/policy/modules/admin/mcelog.fc
index a91a13f9..a91a13f9 100644
--- a/policy/modules/contrib/mcelog.fc
+++ b/policy/modules/admin/mcelog.fc
diff --git a/policy/modules/contrib/mcelog.if b/policy/modules/admin/mcelog.if
index 9b731b82..9b731b82 100644
--- a/policy/modules/contrib/mcelog.if
+++ b/policy/modules/admin/mcelog.if
diff --git a/policy/modules/contrib/mcelog.te b/policy/modules/admin/mcelog.te
index 1c342132..1c342132 100644
--- a/policy/modules/contrib/mcelog.te
+++ b/policy/modules/admin/mcelog.te
diff --git a/policy/modules/contrib/mrtg.fc b/policy/modules/admin/mrtg.fc
index fad30365..fad30365 100644
--- a/policy/modules/contrib/mrtg.fc
+++ b/policy/modules/admin/mrtg.fc
diff --git a/policy/modules/contrib/mrtg.if b/policy/modules/admin/mrtg.if
index b25b0894..b25b0894 100644
--- a/policy/modules/contrib/mrtg.if
+++ b/policy/modules/admin/mrtg.if
diff --git a/policy/modules/contrib/mrtg.te b/policy/modules/admin/mrtg.te
index 953738e9..953738e9 100644
--- a/policy/modules/contrib/mrtg.te
+++ b/policy/modules/admin/mrtg.te
diff --git a/policy/modules/contrib/ncftool.fc b/policy/modules/admin/ncftool.fc
index ca1a0e28..ca1a0e28 100644
--- a/policy/modules/contrib/ncftool.fc
+++ b/policy/modules/admin/ncftool.fc
diff --git a/policy/modules/contrib/ncftool.if b/policy/modules/admin/ncftool.if
index db9578f4..db9578f4 100644
--- a/policy/modules/contrib/ncftool.if
+++ b/policy/modules/admin/ncftool.if
diff --git a/policy/modules/contrib/ncftool.te b/policy/modules/admin/ncftool.te
index 676567d8..676567d8 100644
--- a/policy/modules/contrib/ncftool.te
+++ b/policy/modules/admin/ncftool.te
diff --git a/policy/modules/contrib/passenger.fc b/policy/modules/admin/passenger.fc
index a1a30929..a1a30929 100644
--- a/policy/modules/contrib/passenger.fc
+++ b/policy/modules/admin/passenger.fc
diff --git a/policy/modules/contrib/passenger.if b/policy/modules/admin/passenger.if
index bf59ef73..bf59ef73 100644
--- a/policy/modules/contrib/passenger.if
+++ b/policy/modules/admin/passenger.if
diff --git a/policy/modules/contrib/passenger.te b/policy/modules/admin/passenger.te
index b6181456..b6181456 100644
--- a/policy/modules/contrib/passenger.te
+++ b/policy/modules/admin/passenger.te
diff --git a/policy/modules/contrib/portage.fc b/policy/modules/admin/portage.fc
index 7f6ab05b..7f6ab05b 100644
--- a/policy/modules/contrib/portage.fc
+++ b/policy/modules/admin/portage.fc
diff --git a/policy/modules/contrib/portage.if b/policy/modules/admin/portage.if
index 23c15ba7..23c15ba7 100644
--- a/policy/modules/contrib/portage.if
+++ b/policy/modules/admin/portage.if
diff --git a/policy/modules/contrib/portage.te b/policy/modules/admin/portage.te
index dbe5b760..dbe5b760 100644
--- a/policy/modules/contrib/portage.te
+++ b/policy/modules/admin/portage.te
diff --git a/policy/modules/contrib/prelink.fc b/policy/modules/admin/prelink.fc
index 8823d27a..8823d27a 100644
--- a/policy/modules/contrib/prelink.fc
+++ b/policy/modules/admin/prelink.fc
diff --git a/policy/modules/contrib/prelink.if b/policy/modules/admin/prelink.if
index 20d46979..20d46979 100644
--- a/policy/modules/contrib/prelink.if
+++ b/policy/modules/admin/prelink.if
diff --git a/policy/modules/contrib/prelink.te b/policy/modules/admin/prelink.te
index 43276472..43276472 100644
--- a/policy/modules/contrib/prelink.te
+++ b/policy/modules/admin/prelink.te
diff --git a/policy/modules/contrib/puppet.fc b/policy/modules/admin/puppet.fc
index 9bb4d9f2..9bb4d9f2 100644
--- a/policy/modules/contrib/puppet.fc
+++ b/policy/modules/admin/puppet.fc
diff --git a/policy/modules/contrib/puppet.if b/policy/modules/admin/puppet.if
index 135dafb2..135dafb2 100644
--- a/policy/modules/contrib/puppet.if
+++ b/policy/modules/admin/puppet.if
diff --git a/policy/modules/contrib/puppet.te b/policy/modules/admin/puppet.te
index 0e8161a2..0e8161a2 100644
--- a/policy/modules/contrib/puppet.te
+++ b/policy/modules/admin/puppet.te
diff --git a/policy/modules/contrib/quota.fc b/policy/modules/admin/quota.fc
index 28a21a8b..28a21a8b 100644
--- a/policy/modules/contrib/quota.fc
+++ b/policy/modules/admin/quota.fc
diff --git a/policy/modules/contrib/quota.if b/policy/modules/admin/quota.if
index 6f8a9250..6f8a9250 100644
--- a/policy/modules/contrib/quota.if
+++ b/policy/modules/admin/quota.if
diff --git a/policy/modules/contrib/quota.te b/policy/modules/admin/quota.te
index e85d6d8b..e85d6d8b 100644
--- a/policy/modules/contrib/quota.te
+++ b/policy/modules/admin/quota.te
diff --git a/policy/modules/contrib/readahead.fc b/policy/modules/admin/readahead.fc
index 823f5454..823f5454 100644
--- a/policy/modules/contrib/readahead.fc
+++ b/policy/modules/admin/readahead.fc
diff --git a/policy/modules/contrib/readahead.if b/policy/modules/admin/readahead.if
index 661bb88f..661bb88f 100644
--- a/policy/modules/contrib/readahead.if
+++ b/policy/modules/admin/readahead.if
diff --git a/policy/modules/contrib/readahead.te b/policy/modules/admin/readahead.te
index 4b40fe71..4b40fe71 100644
--- a/policy/modules/contrib/readahead.te
+++ b/policy/modules/admin/readahead.te
diff --git a/policy/modules/contrib/rkhunter.fc b/policy/modules/admin/rkhunter.fc
index d3c949c8..d3c949c8 100644
--- a/policy/modules/contrib/rkhunter.fc
+++ b/policy/modules/admin/rkhunter.fc
diff --git a/policy/modules/contrib/rkhunter.if b/policy/modules/admin/rkhunter.if
index 9537e1f5..9537e1f5 100644
--- a/policy/modules/contrib/rkhunter.if
+++ b/policy/modules/admin/rkhunter.if
diff --git a/policy/modules/contrib/rkhunter.te b/policy/modules/admin/rkhunter.te
index e87a37fe..e87a37fe 100644
--- a/policy/modules/contrib/rkhunter.te
+++ b/policy/modules/admin/rkhunter.te
diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/admin/rpm.fc
index 9faf3c42..9faf3c42 100644
--- a/policy/modules/contrib/rpm.fc
+++ b/policy/modules/admin/rpm.fc
diff --git a/policy/modules/contrib/rpm.if b/policy/modules/admin/rpm.if
index d316410d..d316410d 100644
--- a/policy/modules/contrib/rpm.if
+++ b/policy/modules/admin/rpm.if
diff --git a/policy/modules/contrib/rpm.te b/policy/modules/admin/rpm.te
index aee8795b..aee8795b 100644
--- a/policy/modules/contrib/rpm.te
+++ b/policy/modules/admin/rpm.te
diff --git a/policy/modules/contrib/samhain.fc b/policy/modules/admin/samhain.fc
index 76b448c8..76b448c8 100644
--- a/policy/modules/contrib/samhain.fc
+++ b/policy/modules/admin/samhain.fc
diff --git a/policy/modules/contrib/samhain.if b/policy/modules/admin/samhain.if
index 8b6fb18b..8b6fb18b 100644
--- a/policy/modules/contrib/samhain.if
+++ b/policy/modules/admin/samhain.if
diff --git a/policy/modules/contrib/samhain.te b/policy/modules/admin/samhain.te
index 4d093b83..4d093b83 100644
--- a/policy/modules/contrib/samhain.te
+++ b/policy/modules/admin/samhain.te
diff --git a/policy/modules/contrib/sblim.fc b/policy/modules/admin/sblim.fc
index c2aed416..c2aed416 100644
--- a/policy/modules/contrib/sblim.fc
+++ b/policy/modules/admin/sblim.fc
diff --git a/policy/modules/contrib/sblim.if b/policy/modules/admin/sblim.if
index 00e2e69c..00e2e69c 100644
--- a/policy/modules/contrib/sblim.if
+++ b/policy/modules/admin/sblim.if
diff --git a/policy/modules/contrib/sblim.te b/policy/modules/admin/sblim.te
index d05bc1a6..d05bc1a6 100644
--- a/policy/modules/contrib/sblim.te
+++ b/policy/modules/admin/sblim.te
diff --git a/policy/modules/contrib/sectoolm.fc b/policy/modules/admin/sectoolm.fc
index 64a23945..64a23945 100644
--- a/policy/modules/contrib/sectoolm.fc
+++ b/policy/modules/admin/sectoolm.fc
diff --git a/policy/modules/contrib/sectoolm.if b/policy/modules/admin/sectoolm.if
index 9e9663b5..9e9663b5 100644
--- a/policy/modules/contrib/sectoolm.if
+++ b/policy/modules/admin/sectoolm.if
diff --git a/policy/modules/contrib/sectoolm.te b/policy/modules/admin/sectoolm.te
index ba3360f4..ba3360f4 100644
--- a/policy/modules/contrib/sectoolm.te
+++ b/policy/modules/admin/sectoolm.te
diff --git a/policy/modules/contrib/shorewall.fc b/policy/modules/admin/shorewall.fc
index aae46ecb..aae46ecb 100644
--- a/policy/modules/contrib/shorewall.fc
+++ b/policy/modules/admin/shorewall.fc
diff --git a/policy/modules/contrib/shorewall.if b/policy/modules/admin/shorewall.if
index 119ba279..119ba279 100644
--- a/policy/modules/contrib/shorewall.if
+++ b/policy/modules/admin/shorewall.if
diff --git a/policy/modules/contrib/shorewall.te b/policy/modules/admin/shorewall.te
index 429230e9..429230e9 100644
--- a/policy/modules/contrib/shorewall.te
+++ b/policy/modules/admin/shorewall.te
diff --git a/policy/modules/contrib/shutdown.fc b/policy/modules/admin/shutdown.fc
index 03a2230c..03a2230c 100644
--- a/policy/modules/contrib/shutdown.fc
+++ b/policy/modules/admin/shutdown.fc
diff --git a/policy/modules/contrib/shutdown.if b/policy/modules/admin/shutdown.if
index 819d19b0..819d19b0 100644
--- a/policy/modules/contrib/shutdown.if
+++ b/policy/modules/admin/shutdown.if
diff --git a/policy/modules/contrib/shutdown.te b/policy/modules/admin/shutdown.te
index 2168d03f..2168d03f 100644
--- a/policy/modules/contrib/shutdown.te
+++ b/policy/modules/admin/shutdown.te
diff --git a/policy/modules/contrib/smoltclient.fc b/policy/modules/admin/smoltclient.fc
index 1ff29582..1ff29582 100644
--- a/policy/modules/contrib/smoltclient.fc
+++ b/policy/modules/admin/smoltclient.fc
diff --git a/policy/modules/contrib/smoltclient.if b/policy/modules/admin/smoltclient.if
index 44a8ff1f..44a8ff1f 100644
--- a/policy/modules/contrib/smoltclient.if
+++ b/policy/modules/admin/smoltclient.if
diff --git a/policy/modules/contrib/smoltclient.te b/policy/modules/admin/smoltclient.te
index cc9aae0c..cc9aae0c 100644
--- a/policy/modules/contrib/smoltclient.te
+++ b/policy/modules/admin/smoltclient.te
diff --git a/policy/modules/contrib/sosreport.fc b/policy/modules/admin/sosreport.fc
index d445530f..d445530f 100644
--- a/policy/modules/contrib/sosreport.fc
+++ b/policy/modules/admin/sosreport.fc
diff --git a/policy/modules/contrib/sosreport.if b/policy/modules/admin/sosreport.if
index e1edfd96..e1edfd96 100644
--- a/policy/modules/contrib/sosreport.if
+++ b/policy/modules/admin/sosreport.if
diff --git a/policy/modules/contrib/sosreport.te b/policy/modules/admin/sosreport.te
index 0c7189ff..0c7189ff 100644
--- a/policy/modules/contrib/sosreport.te
+++ b/policy/modules/admin/sosreport.te
diff --git a/policy/modules/contrib/sxid.fc b/policy/modules/admin/sxid.fc
index 92d3ff1a..92d3ff1a 100644
--- a/policy/modules/contrib/sxid.fc
+++ b/policy/modules/admin/sxid.fc
diff --git a/policy/modules/contrib/sxid.if b/policy/modules/admin/sxid.if
index 83d2e94c..83d2e94c 100644
--- a/policy/modules/contrib/sxid.if
+++ b/policy/modules/admin/sxid.if
diff --git a/policy/modules/contrib/sxid.te b/policy/modules/admin/sxid.te
index ae7e27b3..ae7e27b3 100644
--- a/policy/modules/contrib/sxid.te
+++ b/policy/modules/admin/sxid.te
diff --git a/policy/modules/contrib/tboot.fc b/policy/modules/admin/tboot.fc
index 8c3e66c4..8c3e66c4 100644
--- a/policy/modules/contrib/tboot.fc
+++ b/policy/modules/admin/tboot.fc
diff --git a/policy/modules/contrib/tboot.if b/policy/modules/admin/tboot.if
index 0ffe6d83..0ffe6d83 100644
--- a/policy/modules/contrib/tboot.if
+++ b/policy/modules/admin/tboot.if
diff --git a/policy/modules/contrib/tboot.te b/policy/modules/admin/tboot.te
index 57b55ee9..57b55ee9 100644
--- a/policy/modules/contrib/tboot.te
+++ b/policy/modules/admin/tboot.te
diff --git a/policy/modules/contrib/tmpreaper.fc b/policy/modules/admin/tmpreaper.fc
index f4ce55e1..f4ce55e1 100644
--- a/policy/modules/contrib/tmpreaper.fc
+++ b/policy/modules/admin/tmpreaper.fc
diff --git a/policy/modules/contrib/tmpreaper.if b/policy/modules/admin/tmpreaper.if
index f621a275..f621a275 100644
--- a/policy/modules/contrib/tmpreaper.if
+++ b/policy/modules/admin/tmpreaper.if
diff --git a/policy/modules/contrib/tmpreaper.te b/policy/modules/admin/tmpreaper.te
index f4ce8dba..f4ce8dba 100644
--- a/policy/modules/contrib/tmpreaper.te
+++ b/policy/modules/admin/tmpreaper.te
diff --git a/policy/modules/contrib/tripwire.fc b/policy/modules/admin/tripwire.fc
index 77b259a4..77b259a4 100644
--- a/policy/modules/contrib/tripwire.fc
+++ b/policy/modules/admin/tripwire.fc
diff --git a/policy/modules/contrib/tripwire.if b/policy/modules/admin/tripwire.if
index a3a4d91b..a3a4d91b 100644
--- a/policy/modules/contrib/tripwire.if
+++ b/policy/modules/admin/tripwire.if
diff --git a/policy/modules/contrib/tripwire.te b/policy/modules/admin/tripwire.te
index ea532de5..ea532de5 100644
--- a/policy/modules/contrib/tripwire.te
+++ b/policy/modules/admin/tripwire.te
diff --git a/policy/modules/contrib/tzdata.fc b/policy/modules/admin/tzdata.fc
index c8448c68..c8448c68 100644
--- a/policy/modules/contrib/tzdata.fc
+++ b/policy/modules/admin/tzdata.fc
diff --git a/policy/modules/contrib/tzdata.if b/policy/modules/admin/tzdata.if
index 53ecd0de..53ecd0de 100644
--- a/policy/modules/contrib/tzdata.if
+++ b/policy/modules/admin/tzdata.if
diff --git a/policy/modules/contrib/tzdata.te b/policy/modules/admin/tzdata.te
index cbfb2299..cbfb2299 100644
--- a/policy/modules/contrib/tzdata.te
+++ b/policy/modules/admin/tzdata.te
diff --git a/policy/modules/contrib/updfstab.fc b/policy/modules/admin/updfstab.fc
index 27ac178d..27ac178d 100644
--- a/policy/modules/contrib/updfstab.fc
+++ b/policy/modules/admin/updfstab.fc
diff --git a/policy/modules/contrib/updfstab.if b/policy/modules/admin/updfstab.if
index ec0800bb..ec0800bb 100644
--- a/policy/modules/contrib/updfstab.if
+++ b/policy/modules/admin/updfstab.if
diff --git a/policy/modules/contrib/updfstab.te b/policy/modules/admin/updfstab.te
index e63ef612..e63ef612 100644
--- a/policy/modules/contrib/updfstab.te
+++ b/policy/modules/admin/updfstab.te
diff --git a/policy/modules/contrib/usbmodules.fc b/policy/modules/admin/usbmodules.fc
index 72188740..72188740 100644
--- a/policy/modules/contrib/usbmodules.fc
+++ b/policy/modules/admin/usbmodules.fc
diff --git a/policy/modules/contrib/usbmodules.if b/policy/modules/admin/usbmodules.if
index c5881ea5..c5881ea5 100644
--- a/policy/modules/contrib/usbmodules.if
+++ b/policy/modules/admin/usbmodules.if
diff --git a/policy/modules/contrib/usbmodules.te b/policy/modules/admin/usbmodules.te
index dd6bfe57..dd6bfe57 100644
--- a/policy/modules/contrib/usbmodules.te
+++ b/policy/modules/admin/usbmodules.te
diff --git a/policy/modules/contrib/vbetool.fc b/policy/modules/admin/vbetool.fc
index af6c0e38..af6c0e38 100644
--- a/policy/modules/contrib/vbetool.fc
+++ b/policy/modules/admin/vbetool.fc
diff --git a/policy/modules/contrib/vbetool.if b/policy/modules/admin/vbetool.if
index 4e648ba8..4e648ba8 100644
--- a/policy/modules/contrib/vbetool.if
+++ b/policy/modules/admin/vbetool.if
diff --git a/policy/modules/contrib/vbetool.te b/policy/modules/admin/vbetool.te
index b3757d02..b3757d02 100644
--- a/policy/modules/contrib/vbetool.te
+++ b/policy/modules/admin/vbetool.te
diff --git a/policy/modules/contrib/vpn.fc b/policy/modules/admin/vpn.fc
index 3e40c477..3e40c477 100644
--- a/policy/modules/contrib/vpn.fc
+++ b/policy/modules/admin/vpn.fc
diff --git a/policy/modules/contrib/vpn.if b/policy/modules/admin/vpn.if
index 7a7f3429..7a7f3429 100644
--- a/policy/modules/contrib/vpn.if
+++ b/policy/modules/admin/vpn.if
diff --git a/policy/modules/contrib/vpn.te b/policy/modules/admin/vpn.te
index 65de9063..65de9063 100644
--- a/policy/modules/contrib/vpn.te
+++ b/policy/modules/admin/vpn.te
diff --git a/policy/modules/contrib/ada.fc b/policy/modules/apps/ada.fc
index f1502de8..f1502de8 100644
--- a/policy/modules/contrib/ada.fc
+++ b/policy/modules/apps/ada.fc
diff --git a/policy/modules/contrib/ada.if b/policy/modules/apps/ada.if
index e514e8a9..e514e8a9 100644
--- a/policy/modules/contrib/ada.if
+++ b/policy/modules/apps/ada.if
diff --git a/policy/modules/contrib/ada.te b/policy/modules/apps/ada.te
index 8d42c97a..8d42c97a 100644
--- a/policy/modules/contrib/ada.te
+++ b/policy/modules/apps/ada.te
diff --git a/policy/modules/contrib/awstats.fc b/policy/modules/apps/awstats.fc
index 11e6d5ff..11e6d5ff 100644
--- a/policy/modules/contrib/awstats.fc
+++ b/policy/modules/apps/awstats.fc
diff --git a/policy/modules/contrib/awstats.if b/policy/modules/apps/awstats.if
index e86fe87f..e86fe87f 100644
--- a/policy/modules/contrib/awstats.if
+++ b/policy/modules/apps/awstats.if
diff --git a/policy/modules/contrib/awstats.te b/policy/modules/apps/awstats.te
index c1b16c39..c1b16c39 100644
--- a/policy/modules/contrib/awstats.te
+++ b/policy/modules/apps/awstats.te
diff --git a/policy/modules/contrib/calamaris.fc b/policy/modules/apps/calamaris.fc
index 1bf35dbb..1bf35dbb 100644
--- a/policy/modules/contrib/calamaris.fc
+++ b/policy/modules/apps/calamaris.fc
diff --git a/policy/modules/contrib/calamaris.if b/policy/modules/apps/calamaris.if
index cd9c5287..cd9c5287 100644
--- a/policy/modules/contrib/calamaris.if
+++ b/policy/modules/apps/calamaris.if
diff --git a/policy/modules/contrib/calamaris.te b/policy/modules/apps/calamaris.te
index 7e574604..7e574604 100644
--- a/policy/modules/contrib/calamaris.te
+++ b/policy/modules/apps/calamaris.te
diff --git a/policy/modules/contrib/cdrecord.fc b/policy/modules/apps/cdrecord.fc
index 819562d0..819562d0 100644
--- a/policy/modules/contrib/cdrecord.fc
+++ b/policy/modules/apps/cdrecord.fc
diff --git a/policy/modules/contrib/cdrecord.if b/policy/modules/apps/cdrecord.if
index fbc20f69..fbc20f69 100644
--- a/policy/modules/contrib/cdrecord.if
+++ b/policy/modules/apps/cdrecord.if
diff --git a/policy/modules/contrib/cdrecord.te b/policy/modules/apps/cdrecord.te
index 4af7717a..4af7717a 100644
--- a/policy/modules/contrib/cdrecord.te
+++ b/policy/modules/apps/cdrecord.te
diff --git a/policy/modules/contrib/cpufreqselector.fc b/policy/modules/apps/cpufreqselector.fc
index b187f0f7..b187f0f7 100644
--- a/policy/modules/contrib/cpufreqselector.fc
+++ b/policy/modules/apps/cpufreqselector.fc
diff --git a/policy/modules/contrib/cpufreqselector.if b/policy/modules/apps/cpufreqselector.if
index 932fa532..932fa532 100644
--- a/policy/modules/contrib/cpufreqselector.if
+++ b/policy/modules/apps/cpufreqselector.if
diff --git a/policy/modules/contrib/cpufreqselector.te b/policy/modules/apps/cpufreqselector.te
index 6cedb872..6cedb872 100644
--- a/policy/modules/contrib/cpufreqselector.te
+++ b/policy/modules/apps/cpufreqselector.te
diff --git a/policy/modules/contrib/evolution.fc b/policy/modules/apps/evolution.fc
index 7f5e8980..7f5e8980 100644
--- a/policy/modules/contrib/evolution.fc
+++ b/policy/modules/apps/evolution.fc
diff --git a/policy/modules/contrib/evolution.if b/policy/modules/apps/evolution.if
index 32cc77f2..32cc77f2 100644
--- a/policy/modules/contrib/evolution.if
+++ b/policy/modules/apps/evolution.if
diff --git a/policy/modules/contrib/evolution.te b/policy/modules/apps/evolution.te
index e8362b8a..e8362b8a 100644
--- a/policy/modules/contrib/evolution.te
+++ b/policy/modules/apps/evolution.te
diff --git a/policy/modules/contrib/firewallgui.fc b/policy/modules/apps/firewallgui.fc
index 94ab048b..94ab048b 100644
--- a/policy/modules/contrib/firewallgui.fc
+++ b/policy/modules/apps/firewallgui.fc
diff --git a/policy/modules/contrib/firewallgui.if b/policy/modules/apps/firewallgui.if
index e6866d1f..e6866d1f 100644
--- a/policy/modules/contrib/firewallgui.if
+++ b/policy/modules/apps/firewallgui.if
diff --git a/policy/modules/contrib/firewallgui.te b/policy/modules/apps/firewallgui.te
index 20945466..20945466 100644
--- a/policy/modules/contrib/firewallgui.te
+++ b/policy/modules/apps/firewallgui.te
diff --git a/policy/modules/contrib/games.fc b/policy/modules/apps/games.fc
index 5e2e4f2a..5e2e4f2a 100644
--- a/policy/modules/contrib/games.fc
+++ b/policy/modules/apps/games.fc
diff --git a/policy/modules/contrib/games.if b/policy/modules/apps/games.if
index d29977b2..d29977b2 100644
--- a/policy/modules/contrib/games.if
+++ b/policy/modules/apps/games.if
diff --git a/policy/modules/contrib/games.te b/policy/modules/apps/games.te
index 0cdebe62..0cdebe62 100644
--- a/policy/modules/contrib/games.te
+++ b/policy/modules/apps/games.te
diff --git a/policy/modules/contrib/gift.fc b/policy/modules/apps/gift.fc
index e27fa519..e27fa519 100644
--- a/policy/modules/contrib/gift.fc
+++ b/policy/modules/apps/gift.fc
diff --git a/policy/modules/contrib/gift.if b/policy/modules/apps/gift.if
index e9023e56..e9023e56 100644
--- a/policy/modules/contrib/gift.if
+++ b/policy/modules/apps/gift.if
diff --git a/policy/modules/contrib/gift.te b/policy/modules/apps/gift.te
index 21692909..21692909 100644
--- a/policy/modules/contrib/gift.te
+++ b/policy/modules/apps/gift.te
diff --git a/policy/modules/contrib/gitosis.fc b/policy/modules/apps/gitosis.fc
index b64de321..b64de321 100644
--- a/policy/modules/contrib/gitosis.fc
+++ b/policy/modules/apps/gitosis.fc
diff --git a/policy/modules/contrib/gitosis.if b/policy/modules/apps/gitosis.if
index f8ca38cb..f8ca38cb 100644
--- a/policy/modules/contrib/gitosis.if
+++ b/policy/modules/apps/gitosis.if
diff --git a/policy/modules/contrib/gitosis.te b/policy/modules/apps/gitosis.te
index 582db0a2..582db0a2 100644
--- a/policy/modules/contrib/gitosis.te
+++ b/policy/modules/apps/gitosis.te
diff --git a/policy/modules/contrib/gnome.fc b/policy/modules/apps/gnome.fc
index 81e9716a..81e9716a 100644
--- a/policy/modules/contrib/gnome.fc
+++ b/policy/modules/apps/gnome.fc
diff --git a/policy/modules/contrib/gnome.if b/policy/modules/apps/gnome.if
index 8b27d15a..8b27d15a 100644
--- a/policy/modules/contrib/gnome.if
+++ b/policy/modules/apps/gnome.if
diff --git a/policy/modules/contrib/gnome.te b/policy/modules/apps/gnome.te
index 340e394a..340e394a 100644
--- a/policy/modules/contrib/gnome.te
+++ b/policy/modules/apps/gnome.te
diff --git a/policy/modules/contrib/gpg.fc b/policy/modules/apps/gpg.fc
index c9362398..c9362398 100644
--- a/policy/modules/contrib/gpg.fc
+++ b/policy/modules/apps/gpg.fc
diff --git a/policy/modules/contrib/gpg.if b/policy/modules/apps/gpg.if
index 78efb186..78efb186 100644
--- a/policy/modules/contrib/gpg.if
+++ b/policy/modules/apps/gpg.if
diff --git a/policy/modules/contrib/gpg.te b/policy/modules/apps/gpg.te
index e763b76b..e763b76b 100644
--- a/policy/modules/contrib/gpg.te
+++ b/policy/modules/apps/gpg.te
diff --git a/policy/modules/contrib/irc.fc b/policy/modules/apps/irc.fc
index 48e7739f..48e7739f 100644
--- a/policy/modules/contrib/irc.fc
+++ b/policy/modules/apps/irc.fc
diff --git a/policy/modules/contrib/irc.if b/policy/modules/apps/irc.if
index ac00fb0f..ac00fb0f 100644
--- a/policy/modules/contrib/irc.if
+++ b/policy/modules/apps/irc.if
diff --git a/policy/modules/contrib/irc.te b/policy/modules/apps/irc.te
index 99ddaecb..99ddaecb 100644
--- a/policy/modules/contrib/irc.te
+++ b/policy/modules/apps/irc.te
diff --git a/policy/modules/contrib/java.fc b/policy/modules/apps/java.fc
index d2984281..d2984281 100644
--- a/policy/modules/contrib/java.fc
+++ b/policy/modules/apps/java.fc
diff --git a/policy/modules/contrib/java.if b/policy/modules/apps/java.if
index c981fc41..c981fc41 100644
--- a/policy/modules/contrib/java.if
+++ b/policy/modules/apps/java.if
diff --git a/policy/modules/contrib/java.te b/policy/modules/apps/java.te
index c9b2487e..c9b2487e 100644
--- a/policy/modules/contrib/java.te
+++ b/policy/modules/apps/java.te
diff --git a/policy/modules/contrib/libmtp.fc b/policy/modules/apps/libmtp.fc
index f8b91c24..f8b91c24 100644
--- a/policy/modules/contrib/libmtp.fc
+++ b/policy/modules/apps/libmtp.fc
diff --git a/policy/modules/contrib/libmtp.if b/policy/modules/apps/libmtp.if
index c010842d..c010842d 100644
--- a/policy/modules/contrib/libmtp.if
+++ b/policy/modules/apps/libmtp.if
diff --git a/policy/modules/contrib/libmtp.te b/policy/modules/apps/libmtp.te
index 7eb27c40..7eb27c40 100644
--- a/policy/modules/contrib/libmtp.te
+++ b/policy/modules/apps/libmtp.te
diff --git a/policy/modules/contrib/lightsquid.fc b/policy/modules/apps/lightsquid.fc
index 044390c6..044390c6 100644
--- a/policy/modules/contrib/lightsquid.fc
+++ b/policy/modules/apps/lightsquid.fc
diff --git a/policy/modules/contrib/lightsquid.if b/policy/modules/apps/lightsquid.if
index 33a28b9a..33a28b9a 100644
--- a/policy/modules/contrib/lightsquid.if
+++ b/policy/modules/apps/lightsquid.if
diff --git a/policy/modules/contrib/lightsquid.te b/policy/modules/apps/lightsquid.te
index 09c4f27b..09c4f27b 100644
--- a/policy/modules/contrib/lightsquid.te
+++ b/policy/modules/apps/lightsquid.te
diff --git a/policy/modules/contrib/livecd.fc b/policy/modules/apps/livecd.fc
index 34937fcf..34937fcf 100644
--- a/policy/modules/contrib/livecd.fc
+++ b/policy/modules/apps/livecd.fc
diff --git a/policy/modules/contrib/livecd.if b/policy/modules/apps/livecd.if
index e3541811..e3541811 100644
--- a/policy/modules/contrib/livecd.if
+++ b/policy/modules/apps/livecd.if
diff --git a/policy/modules/contrib/livecd.te b/policy/modules/apps/livecd.te
index 2f974bf8..2f974bf8 100644
--- a/policy/modules/contrib/livecd.te
+++ b/policy/modules/apps/livecd.te
diff --git a/policy/modules/contrib/loadkeys.fc b/policy/modules/apps/loadkeys.fc
index 38f91fed..38f91fed 100644
--- a/policy/modules/contrib/loadkeys.fc
+++ b/policy/modules/apps/loadkeys.fc
diff --git a/policy/modules/contrib/loadkeys.if b/policy/modules/apps/loadkeys.if
index 101c925d..101c925d 100644
--- a/policy/modules/contrib/loadkeys.if
+++ b/policy/modules/apps/loadkeys.if
diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/apps/loadkeys.te
index 1976e2cb..1976e2cb 100644
--- a/policy/modules/contrib/loadkeys.te
+++ b/policy/modules/apps/loadkeys.te
diff --git a/policy/modules/contrib/lockdev.fc b/policy/modules/apps/lockdev.fc
index 65ed30df..65ed30df 100644
--- a/policy/modules/contrib/lockdev.fc
+++ b/policy/modules/apps/lockdev.fc
diff --git a/policy/modules/contrib/lockdev.if b/policy/modules/apps/lockdev.if
index 4313b8bc..4313b8bc 100644
--- a/policy/modules/contrib/lockdev.if
+++ b/policy/modules/apps/lockdev.if
diff --git a/policy/modules/contrib/lockdev.te b/policy/modules/apps/lockdev.te
index b9c34625..b9c34625 100644
--- a/policy/modules/contrib/lockdev.te
+++ b/policy/modules/apps/lockdev.te
diff --git a/policy/modules/contrib/man2html.fc b/policy/modules/apps/man2html.fc
index 82f62555..82f62555 100644
--- a/policy/modules/contrib/man2html.fc
+++ b/policy/modules/apps/man2html.fc
diff --git a/policy/modules/contrib/man2html.if b/policy/modules/apps/man2html.if
index 54ec04d3..54ec04d3 100644
--- a/policy/modules/contrib/man2html.if
+++ b/policy/modules/apps/man2html.if
diff --git a/policy/modules/contrib/man2html.te b/policy/modules/apps/man2html.te
index e08c55d4..e08c55d4 100644
--- a/policy/modules/contrib/man2html.te
+++ b/policy/modules/apps/man2html.te
diff --git a/policy/modules/contrib/mandb.fc b/policy/modules/apps/mandb.fc
index d92a58fd..d92a58fd 100644
--- a/policy/modules/contrib/mandb.fc
+++ b/policy/modules/apps/mandb.fc
diff --git a/policy/modules/contrib/mandb.if b/policy/modules/apps/mandb.if
index e880655d..e880655d 100644
--- a/policy/modules/contrib/mandb.if
+++ b/policy/modules/apps/mandb.if
diff --git a/policy/modules/contrib/mandb.te b/policy/modules/apps/mandb.te
index 48c17bb8..48c17bb8 100644
--- a/policy/modules/contrib/mandb.te
+++ b/policy/modules/apps/mandb.te
diff --git a/policy/modules/contrib/mono.fc b/policy/modules/apps/mono.fc
index b01bc913..b01bc913 100644
--- a/policy/modules/contrib/mono.fc
+++ b/policy/modules/apps/mono.fc
diff --git a/policy/modules/contrib/mono.if b/policy/modules/apps/mono.if
index 70fe6457..70fe6457 100644
--- a/policy/modules/contrib/mono.if
+++ b/policy/modules/apps/mono.if
diff --git a/policy/modules/contrib/mono.te b/policy/modules/apps/mono.te
index 3bb756a5..3bb756a5 100644
--- a/policy/modules/contrib/mono.te
+++ b/policy/modules/apps/mono.te
diff --git a/policy/modules/contrib/mozilla.fc b/policy/modules/apps/mozilla.fc
index 15aa39b3..15aa39b3 100644
--- a/policy/modules/contrib/mozilla.fc
+++ b/policy/modules/apps/mozilla.fc
diff --git a/policy/modules/contrib/mozilla.if b/policy/modules/apps/mozilla.if
index 178d68d8..178d68d8 100644
--- a/policy/modules/contrib/mozilla.if
+++ b/policy/modules/apps/mozilla.if
diff --git a/policy/modules/contrib/mozilla.te b/policy/modules/apps/mozilla.te
index 807d3431..807d3431 100644
--- a/policy/modules/contrib/mozilla.te
+++ b/policy/modules/apps/mozilla.te
diff --git a/policy/modules/contrib/mplayer.fc b/policy/modules/apps/mplayer.fc
index 03ace714..03ace714 100644
--- a/policy/modules/contrib/mplayer.fc
+++ b/policy/modules/apps/mplayer.fc
diff --git a/policy/modules/contrib/mplayer.if b/policy/modules/apps/mplayer.if
index 861d5e97..861d5e97 100644
--- a/policy/modules/contrib/mplayer.if
+++ b/policy/modules/apps/mplayer.if
diff --git a/policy/modules/contrib/mplayer.te b/policy/modules/apps/mplayer.te
index 91b9569d..91b9569d 100644
--- a/policy/modules/contrib/mplayer.te
+++ b/policy/modules/apps/mplayer.te
diff --git a/policy/modules/contrib/openoffice.fc b/policy/modules/apps/openoffice.fc
index 6613bb44..6613bb44 100644
--- a/policy/modules/contrib/openoffice.fc
+++ b/policy/modules/apps/openoffice.fc
diff --git a/policy/modules/contrib/openoffice.if b/policy/modules/apps/openoffice.if
index 5580aaf7..5580aaf7 100644
--- a/policy/modules/contrib/openoffice.if
+++ b/policy/modules/apps/openoffice.if
diff --git a/policy/modules/contrib/openoffice.te b/policy/modules/apps/openoffice.te
index 2cb4d6d2..2cb4d6d2 100644
--- a/policy/modules/contrib/openoffice.te
+++ b/policy/modules/apps/openoffice.te
diff --git a/policy/modules/contrib/podsleuth.fc b/policy/modules/apps/podsleuth.fc
index c32a4f30..c32a4f30 100644
--- a/policy/modules/contrib/podsleuth.fc
+++ b/policy/modules/apps/podsleuth.fc
diff --git a/policy/modules/contrib/podsleuth.if b/policy/modules/apps/podsleuth.if
index a9427b4a..a9427b4a 100644
--- a/policy/modules/contrib/podsleuth.if
+++ b/policy/modules/apps/podsleuth.if
diff --git a/policy/modules/contrib/podsleuth.te b/policy/modules/apps/podsleuth.te
index 83dc77b5..83dc77b5 100644
--- a/policy/modules/contrib/podsleuth.te
+++ b/policy/modules/apps/podsleuth.te
diff --git a/policy/modules/contrib/ptchown.fc b/policy/modules/apps/ptchown.fc
index dd96822d..dd96822d 100644
--- a/policy/modules/contrib/ptchown.fc
+++ b/policy/modules/apps/ptchown.fc
diff --git a/policy/modules/contrib/ptchown.if b/policy/modules/apps/ptchown.if
index 97a1e7b1..97a1e7b1 100644
--- a/policy/modules/contrib/ptchown.if
+++ b/policy/modules/apps/ptchown.if
diff --git a/policy/modules/contrib/ptchown.te b/policy/modules/apps/ptchown.te
index 28d2abc0..28d2abc0 100644
--- a/policy/modules/contrib/ptchown.te
+++ b/policy/modules/apps/ptchown.te
diff --git a/policy/modules/contrib/pulseaudio.fc b/policy/modules/apps/pulseaudio.fc
index 0d9bc354..0d9bc354 100644
--- a/policy/modules/contrib/pulseaudio.fc
+++ b/policy/modules/apps/pulseaudio.fc
diff --git a/policy/modules/contrib/pulseaudio.if b/policy/modules/apps/pulseaudio.if
index ca005df0..ca005df0 100644
--- a/policy/modules/contrib/pulseaudio.if
+++ b/policy/modules/apps/pulseaudio.if
diff --git a/policy/modules/contrib/pulseaudio.te b/policy/modules/apps/pulseaudio.te
index 1a58bde5..1a58bde5 100644
--- a/policy/modules/contrib/pulseaudio.te
+++ b/policy/modules/apps/pulseaudio.te
diff --git a/policy/modules/contrib/qemu.fc b/policy/modules/apps/qemu.fc
index 1fc79800..1fc79800 100644
--- a/policy/modules/contrib/qemu.fc
+++ b/policy/modules/apps/qemu.fc
diff --git a/policy/modules/contrib/qemu.if b/policy/modules/apps/qemu.if
index b6d8e1c2..b6d8e1c2 100644
--- a/policy/modules/contrib/qemu.if
+++ b/policy/modules/apps/qemu.if
diff --git a/policy/modules/contrib/qemu.te b/policy/modules/apps/qemu.te
index a27624d8..a27624d8 100644
--- a/policy/modules/contrib/qemu.te
+++ b/policy/modules/apps/qemu.te
diff --git a/policy/modules/contrib/rssh.fc b/policy/modules/apps/rssh.fc
index c0768426..c0768426 100644
--- a/policy/modules/contrib/rssh.fc
+++ b/policy/modules/apps/rssh.fc
diff --git a/policy/modules/contrib/rssh.if b/policy/modules/apps/rssh.if
index 6ecadcbc..6ecadcbc 100644
--- a/policy/modules/contrib/rssh.if
+++ b/policy/modules/apps/rssh.if
diff --git a/policy/modules/contrib/rssh.te b/policy/modules/apps/rssh.te
index 91a89f65..91a89f65 100644
--- a/policy/modules/contrib/rssh.te
+++ b/policy/modules/apps/rssh.te
diff --git a/policy/modules/contrib/sambagui.fc b/policy/modules/apps/sambagui.fc
index 2640dcf0..2640dcf0 100644
--- a/policy/modules/contrib/sambagui.fc
+++ b/policy/modules/apps/sambagui.fc
diff --git a/policy/modules/contrib/sambagui.if b/policy/modules/apps/sambagui.if
index d9c7bb65..d9c7bb65 100644
--- a/policy/modules/contrib/sambagui.if
+++ b/policy/modules/apps/sambagui.if
diff --git a/policy/modules/contrib/sambagui.te b/policy/modules/apps/sambagui.te
index e18b0a28..e18b0a28 100644
--- a/policy/modules/contrib/sambagui.te
+++ b/policy/modules/apps/sambagui.te
diff --git a/policy/modules/contrib/screen.fc b/policy/modules/apps/screen.fc
index 7196c598..7196c598 100644
--- a/policy/modules/contrib/screen.fc
+++ b/policy/modules/apps/screen.fc
diff --git a/policy/modules/contrib/screen.if b/policy/modules/apps/screen.if
index 884e261a..884e261a 100644
--- a/policy/modules/contrib/screen.if
+++ b/policy/modules/apps/screen.if
diff --git a/policy/modules/contrib/screen.te b/policy/modules/apps/screen.te
index 845c61c8..845c61c8 100644
--- a/policy/modules/contrib/screen.te
+++ b/policy/modules/apps/screen.te
diff --git a/policy/modules/contrib/slocate.fc b/policy/modules/apps/slocate.fc
index 264e1bed..264e1bed 100644
--- a/policy/modules/contrib/slocate.fc
+++ b/policy/modules/apps/slocate.fc
diff --git a/policy/modules/contrib/slocate.if b/policy/modules/apps/slocate.if
index 82de1b68..82de1b68 100644
--- a/policy/modules/contrib/slocate.if
+++ b/policy/modules/apps/slocate.if
diff --git a/policy/modules/contrib/slocate.te b/policy/modules/apps/slocate.te
index 2bf0fed4..2bf0fed4 100644
--- a/policy/modules/contrib/slocate.te
+++ b/policy/modules/apps/slocate.te
diff --git a/policy/modules/contrib/syncthing.fc b/policy/modules/apps/syncthing.fc
index e95b451e..e95b451e 100644
--- a/policy/modules/contrib/syncthing.fc
+++ b/policy/modules/apps/syncthing.fc
diff --git a/policy/modules/contrib/syncthing.if b/policy/modules/apps/syncthing.if
index 2c0eb24c..2c0eb24c 100644
--- a/policy/modules/contrib/syncthing.if
+++ b/policy/modules/apps/syncthing.if
diff --git a/policy/modules/contrib/syncthing.te b/policy/modules/apps/syncthing.te
index 5799b8e2..5799b8e2 100644
--- a/policy/modules/contrib/syncthing.te
+++ b/policy/modules/apps/syncthing.te
diff --git a/policy/modules/contrib/telepathy.fc b/policy/modules/apps/telepathy.fc
index 4600d815..4600d815 100644
--- a/policy/modules/contrib/telepathy.fc
+++ b/policy/modules/apps/telepathy.fc
diff --git a/policy/modules/contrib/telepathy.if b/policy/modules/apps/telepathy.if
index d81dc193..d81dc193 100644
--- a/policy/modules/contrib/telepathy.if
+++ b/policy/modules/apps/telepathy.if
diff --git a/policy/modules/contrib/telepathy.te b/policy/modules/apps/telepathy.te
index 8f0997d9..8f0997d9 100644
--- a/policy/modules/contrib/telepathy.te
+++ b/policy/modules/apps/telepathy.te
diff --git a/policy/modules/contrib/thunderbird.fc b/policy/modules/apps/thunderbird.fc
index eacb7a17..eacb7a17 100644
--- a/policy/modules/contrib/thunderbird.fc
+++ b/policy/modules/apps/thunderbird.fc
diff --git a/policy/modules/contrib/thunderbird.if b/policy/modules/apps/thunderbird.if
index 9c5f0b91..9c5f0b91 100644
--- a/policy/modules/contrib/thunderbird.if
+++ b/policy/modules/apps/thunderbird.if
diff --git a/policy/modules/contrib/thunderbird.te b/policy/modules/apps/thunderbird.te
index 1f39efce..1f39efce 100644
--- a/policy/modules/contrib/thunderbird.te
+++ b/policy/modules/apps/thunderbird.te
diff --git a/policy/modules/contrib/tvtime.fc b/policy/modules/apps/tvtime.fc
index 92cb760a..92cb760a 100644
--- a/policy/modules/contrib/tvtime.fc
+++ b/policy/modules/apps/tvtime.fc
diff --git a/policy/modules/contrib/tvtime.if b/policy/modules/apps/tvtime.if
index 1bb0f7c7..1bb0f7c7 100644
--- a/policy/modules/contrib/tvtime.if
+++ b/policy/modules/apps/tvtime.if
diff --git a/policy/modules/contrib/tvtime.te b/policy/modules/apps/tvtime.te
index 1b138dd8..1b138dd8 100644
--- a/policy/modules/contrib/tvtime.te
+++ b/policy/modules/apps/tvtime.te
diff --git a/policy/modules/contrib/uml.fc b/policy/modules/apps/uml.fc
index 567966e0..567966e0 100644
--- a/policy/modules/contrib/uml.fc
+++ b/policy/modules/apps/uml.fc
diff --git a/policy/modules/contrib/uml.if b/policy/modules/apps/uml.if
index ab5c1d0d..ab5c1d0d 100644
--- a/policy/modules/contrib/uml.if
+++ b/policy/modules/apps/uml.if
diff --git a/policy/modules/contrib/uml.te b/policy/modules/apps/uml.te
index 0e2f4c99..0e2f4c99 100644
--- a/policy/modules/contrib/uml.te
+++ b/policy/modules/apps/uml.te
diff --git a/policy/modules/contrib/userhelper.fc b/policy/modules/apps/userhelper.fc
index 6a2cd2f0..6a2cd2f0 100644
--- a/policy/modules/contrib/userhelper.fc
+++ b/policy/modules/apps/userhelper.fc
diff --git a/policy/modules/contrib/userhelper.if b/policy/modules/apps/userhelper.if
index 2cdbf67e..2cdbf67e 100644
--- a/policy/modules/contrib/userhelper.if
+++ b/policy/modules/apps/userhelper.if
diff --git a/policy/modules/contrib/userhelper.te b/policy/modules/apps/userhelper.te
index bffbc94c..bffbc94c 100644
--- a/policy/modules/contrib/userhelper.te
+++ b/policy/modules/apps/userhelper.te
diff --git a/policy/modules/contrib/usernetctl.fc b/policy/modules/apps/usernetctl.fc
index 72f38b1b..72f38b1b 100644
--- a/policy/modules/contrib/usernetctl.fc
+++ b/policy/modules/apps/usernetctl.fc
diff --git a/policy/modules/contrib/usernetctl.if b/policy/modules/apps/usernetctl.if
index 7deec55c..7deec55c 100644
--- a/policy/modules/contrib/usernetctl.if
+++ b/policy/modules/apps/usernetctl.if
diff --git a/policy/modules/contrib/usernetctl.te b/policy/modules/apps/usernetctl.te
index 4ef6f9b2..4ef6f9b2 100644
--- a/policy/modules/contrib/usernetctl.te
+++ b/policy/modules/apps/usernetctl.te
diff --git a/policy/modules/contrib/vlock.fc b/policy/modules/apps/vlock.fc
index f668cde9..f668cde9 100644
--- a/policy/modules/contrib/vlock.fc
+++ b/policy/modules/apps/vlock.fc
diff --git a/policy/modules/contrib/vlock.if b/policy/modules/apps/vlock.if
index d5fc09ac..d5fc09ac 100644
--- a/policy/modules/contrib/vlock.if
+++ b/policy/modules/apps/vlock.if
diff --git a/policy/modules/contrib/vlock.te b/policy/modules/apps/vlock.te
index f025f7c1..f025f7c1 100644
--- a/policy/modules/contrib/vlock.te
+++ b/policy/modules/apps/vlock.te
diff --git a/policy/modules/contrib/vmware.fc b/policy/modules/apps/vmware.fc
index b1557721..b1557721 100644
--- a/policy/modules/contrib/vmware.fc
+++ b/policy/modules/apps/vmware.fc
diff --git a/policy/modules/contrib/vmware.if b/policy/modules/apps/vmware.if
index 20a1fb29..20a1fb29 100644
--- a/policy/modules/contrib/vmware.if
+++ b/policy/modules/apps/vmware.if
diff --git a/policy/modules/contrib/vmware.te b/policy/modules/apps/vmware.te
index 441fe9ef..441fe9ef 100644
--- a/policy/modules/contrib/vmware.te
+++ b/policy/modules/apps/vmware.te
diff --git a/policy/modules/contrib/webalizer.fc b/policy/modules/apps/webalizer.fc
index 64baf679..64baf679 100644
--- a/policy/modules/contrib/webalizer.fc
+++ b/policy/modules/apps/webalizer.fc
diff --git a/policy/modules/contrib/webalizer.if b/policy/modules/apps/webalizer.if
index cc831b6d..cc831b6d 100644
--- a/policy/modules/contrib/webalizer.if
+++ b/policy/modules/apps/webalizer.if
diff --git a/policy/modules/contrib/webalizer.te b/policy/modules/apps/webalizer.te
index da454655..da454655 100644
--- a/policy/modules/contrib/webalizer.te
+++ b/policy/modules/apps/webalizer.te
diff --git a/policy/modules/contrib/wine.fc b/policy/modules/apps/wine.fc
index 786a51e2..786a51e2 100644
--- a/policy/modules/contrib/wine.fc
+++ b/policy/modules/apps/wine.fc
diff --git a/policy/modules/contrib/wine.if b/policy/modules/apps/wine.if
index 2dba6216..2dba6216 100644
--- a/policy/modules/contrib/wine.if
+++ b/policy/modules/apps/wine.if
diff --git a/policy/modules/contrib/wine.te b/policy/modules/apps/wine.te
index 8ec8c969..8ec8c969 100644
--- a/policy/modules/contrib/wine.te
+++ b/policy/modules/apps/wine.te
diff --git a/policy/modules/contrib/wireshark.fc b/policy/modules/apps/wireshark.fc
index 7b07a705..7b07a705 100644
--- a/policy/modules/contrib/wireshark.fc
+++ b/policy/modules/apps/wireshark.fc
diff --git a/policy/modules/contrib/wireshark.if b/policy/modules/apps/wireshark.if
index 9cad4afe..9cad4afe 100644
--- a/policy/modules/contrib/wireshark.if
+++ b/policy/modules/apps/wireshark.if
diff --git a/policy/modules/contrib/wireshark.te b/policy/modules/apps/wireshark.te
index 1f2641f4..1f2641f4 100644
--- a/policy/modules/contrib/wireshark.te
+++ b/policy/modules/apps/wireshark.te
diff --git a/policy/modules/contrib/wm.fc b/policy/modules/apps/wm.fc
index 05129fea..05129fea 100644
--- a/policy/modules/contrib/wm.fc
+++ b/policy/modules/apps/wm.fc
diff --git a/policy/modules/contrib/wm.if b/policy/modules/apps/wm.if
index 260a7b01..260a7b01 100644
--- a/policy/modules/contrib/wm.if
+++ b/policy/modules/apps/wm.if
diff --git a/policy/modules/contrib/wm.te b/policy/modules/apps/wm.te
index 4b7e88ad..4b7e88ad 100644
--- a/policy/modules/contrib/wm.te
+++ b/policy/modules/apps/wm.te
diff --git a/policy/modules/contrib/xscreensaver.fc b/policy/modules/apps/xscreensaver.fc
index 70b71a5c..70b71a5c 100644
--- a/policy/modules/contrib/xscreensaver.fc
+++ b/policy/modules/apps/xscreensaver.fc
diff --git a/policy/modules/contrib/xscreensaver.if b/policy/modules/apps/xscreensaver.if
index 704c3bdd..704c3bdd 100644
--- a/policy/modules/contrib/xscreensaver.if
+++ b/policy/modules/apps/xscreensaver.if
diff --git a/policy/modules/contrib/xscreensaver.te b/policy/modules/apps/xscreensaver.te
index 4e67161c..4e67161c 100644
--- a/policy/modules/contrib/xscreensaver.te
+++ b/policy/modules/apps/xscreensaver.te
diff --git a/policy/modules/contrib/yam.fc b/policy/modules/apps/yam.fc
index 74401d54..74401d54 100644
--- a/policy/modules/contrib/yam.fc
+++ b/policy/modules/apps/yam.fc
diff --git a/policy/modules/contrib/yam.if b/policy/modules/apps/yam.if
index ba7c8c88..ba7c8c88 100644
--- a/policy/modules/contrib/yam.if
+++ b/policy/modules/apps/yam.if
diff --git a/policy/modules/contrib/yam.te b/policy/modules/apps/yam.te
index b451e6e8..b451e6e8 100644
--- a/policy/modules/contrib/yam.te
+++ b/policy/modules/apps/yam.te
diff --git a/policy/modules/contrib/Changelog b/policy/modules/contrib/Changelog
deleted file mode 100644
index 1596ba77..00000000
--- a/policy/modules/contrib/Changelog
+++ /dev/null
@@ -1,2210 +0,0 @@
-* Sun Jan 14 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180114
-Chad Hanson (1):
- Allow rpm to relabel files at all levels
-
-Chris PeBenito (46):
- Remove deprecated interfaces more than one year old.
- Remove complement and wildcard in allow rules.
- Merge branch 'master' of git://github.com/teg/refpolicy-contrib
- dbus: Module version bump for dbus-broker patch from Tom Gundersen.
- Module version bump for patches from Guido Trentalancia.
- Module version bumps for patches from David Sugar.
- dhcp, logrotate: Module version bump.
- Module version bumps for chkrootkit, dkim, dmidecode, portage, and
- rkhunter.
- Module version bumps.
- spamassassin: Move lines.
- mandb, spamassassin: Module version bumps.
- spamassassin: Fix build error.
- spamassassin: Add missing requirement in spamassassin_admin().
- dphysswapfile: Module version bump.
- gpg, pulseaudio, rpc: Module version bump.
- dnsmasq, gnome, mon, mta, openoffice, pulseaudio, wm: Version bumps.
- Revert "postfix: Some table drivers (notably cdb) need to mmap() their
- databases"
- java, mozilla, mta, postfix: Module version bump.
- portage: Fix usr_t map interface usage.
- apache, portage: Module version bump.
- dbus, policykit, wm: Module version bump.
- dbus: Add comment.
- Merge branch 'nm_audit' of git://github.com/bigon/refpolicy-contrib
- networkmanager: Module version bump.
- virt: Move a line.
- alsa, mon, virt: Module version bump.
- gpg, mozilla, rpc: Module version bump.
- Several module version bumps.
- blueman, evolution, gpg, mozilla, openoffice, thunderbird, wireshark, wm:
- Module version bump.
- wm: Module version bump.
- networkmanager: Move line.
- networkmanager: Module version bump.
- Merge branch 'pkcs' of https://github.com/dodys/refpolicy-contrib
- pkcs: Rename pkcs_slotd_unit_file_t.
- pkcs: Module version bump.
- accountsd, policykit: Module version bump.
- dbus, devicekit, modemmanager, networkmanager, virt: Module version bump.
- modemmanager: Move lines.
- rpm: Module version bump.
- cachefilesd, dbus, dirmngr, gnome, gpg, pulseaudio: Module version bump.
- Replace deprecated mmap perm sets and pattern usage.
- gssproxy: Module version bump.
- monit: Module version bump.
- apache, dkim, monit: Module version bump.
- spamassassin: Module version bump.
- Bump module versions for release.
-
-Christian Göttsche (20):
- dkim: align filecontexts
- dkim: update
- milter: align filecontexts
- apache: align filecontexts
- dmidecode: use userdom_use_inherited_user_terminals
- spamassassin: align filecontexts
- chkrootkit: update
- rkhunter: add several missing permission
- fakehwclock: update
- milter: update
- mandb: fixes for systemd timer and /usr/local/man label
- spamassassin: update
- dphysswapfile: fix swapfile creation
- apache: update
- monit: update
- dkim: align file contexts
- dkim: update
- apache: update
- monit: read /usr/share/ca-certificates for cert verification
- spamassassin: fix missing perms
-
-Daniel Jurgens (1):
- networkmanager: Grant access to unlabeled PKeys
-
-David Sugar (5):
- mon: move rpc_* into optional
- wm: consolidate networkmanger interface calls into single optional
- cron: optional_policy for mta_* interfaces
- Label /usr/bin/mutter
- Allow to read /proc/sys/crypto/fips_enabled
-
-Eduardo Barretto (2):
- Update pkcs policy to include pkccsslotd.service
- Update missing permissions for pkcs
-
-Guido Trentalancia (13):
- libmtp: read symlinks in user home directories
- spamassassin: update rules for the Bayesian classifier trainer
- wm: let gnome-shell start properly
- gnome: keyring daemon dbus policy update
- gnome: keyring daemon read SELinux config
- openoffice: improve temporary directories' operations
- pulseaudio: general update
- wm: gnome-shell SELinux integration
- mozilla: run Java Web Start applications
- wm: run PolicyKit
- dbus: read user home content files
- mozilla: read generic SSL certificates
- contrib: use the new SSL private keys type (was: "let the mozilla and
- other domains read generic SSL certificates")
-
-Jason Zaman (12):
- cgmanager: Apply auth_use_nsswitch interface
- alsa: needs to map its tmpfs files
- virt: add policy for virtlogd
- virt: updated perms for starting guests
- gssproxy: add policy
- rpc: Allow stream connect to gssproxy
- gpg: search dir when connecting to agent socket
- dirmngr: allow filetrans in gpg_runtime_t
- gpg: Add gpg_agent_use_card boolean for OpenPGP cards
- cachefilesd: make cachefilesd_cache_t a mountpoint
- Set user_runtime_content_type for all remaining types in /run/user/%{UID}/
- gssproxy: allow writing kerberos rcache
-
-Jason Zaman via refpolicy (3):
- pulseaudio: Add neccessary map permissions
- gpg: add fcontexts for user runtime sockets
- rpc: add sm-notify pid fcontext
-
-Laurent Bigonville (2):
- Allow NetworkManager to write to audit
- Call systemd_write_inherited_logind_inhibit_pipes() where needed
-
-Luis Ressel (12):
- portage: Allow portage_t and portage_sandbox_t to access locale_t
- postfix: Some table drivers (notably cdb) need to mmap() their databases
- portage: Grant the map permissions neccessary for git and install
- alsa: alsactl needs to map its configuration
- mozilla: Add neccessary map permissions
- mandb: man-db needs to map its 'index.db' cache
- portage: Remove nonsensical dontaudit of an allowed permission
- portage: Transition to ldconfig_t when calling ldconfig
- postfix: Some table drivers (notably cdb) need to mmap() their databases
- postfix: Silence cap_dac_read_search denials
- portage: Grant portage the map permission on usr_t
- Allow gtk apps to map usr_t files
-
-Nicolas Iooss (2):
- dbus: move comments out of the file context definitions
- logrotate: allow systemd to start logrotate
-
-Russell Coker (3):
- udev and dhcpd
- minor nspawn, dnsmasq, and mon patches
- refpolicy and certs
-
-Tom Gundersen (1):
- dbus: add policy for dbus-broker
-
-* Sat Aug 05 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170805
-Chris PeBenito (82):
- Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
- Module version bump for usrmerge FC fixes from Jason Zaman.
- mon policy from Russell Coker.
- Module version bump for cups patches from Guido Trentalancia.
- Module version bump for tbird and mozilla printing from Guido
- Trentalancia.
- Revert "cups/lpd: read permission for cupsd_var_run_t socket files"
- Module version bump for cups revert.
- Sort capabilities permissions from Russell Coker.
- Little misc patch from Russell Coker.
- mon: Fix deprecated interface usage.
- dpkg: Updates from Russell Coker.
- Monit policy from Russell Coker and cgzones.
- monit: Fix build error.
- fetchmail, mysql, tor: Misc fixes from Russell Coker.
- Merge branch 'alsa_module' of git://github.com/cgzones/refpolicy-contrib
- Merge branch 'vnstat_module' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for alsa and vnstatd fixes from cgzones.
- Merge branch 'ntp_module' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for ntp fixes from cgzones.
- samba: A few line moves.
- Module version bump for samba patch from Russell Coker.
- Systemd fixes from Russell Coker.
- Xen fixes from Russell Coker.
- mailman: Fixes from Russell Coker.
- MTA fixes from Russell Coker.
- Network daemon patches from Russell Coker.
- apache: Fix CI error.
- Merge branch 'modutils_adapt_interfaces' of
- git://github.com/cgzones/refpolicy-contrib
- Merge branch 'corecmd_read_bin_symlinks' of
- git://github.com/cgzones/refpolicy-contrib
- Module version bumps for fixes from cgzones.
- Merge branch 'mandb' of git://github.com/cgzones/refpolicy-contrib
- Merge branch 'dphysswapfile' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for dphysswapfile and mandb fixes from cgzones.
- Merge branch 'var_run_filecontext' of
- git://github.com/cgzones/refpolicy-contrib
- Merge branch 'vnstatd' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for fixes from cgzones.
- dontaudit net_admin for SO_SNDBUFFORCE
- /var/run -> /run again
- Merge branch 'monit' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for monit patch from cgzones.
- systemd-resolvd, sessions, and tmpfiles take2
- Misc fc changes from Russell Coker.
- Systemd-related changes from Russell Coker.
- networkmanager: adjust interface docs format.
- wm: interface docs adjustment.
- Module version bump for misc fixes from Guido Trentalancia.
- systemd init from Russell Coker
- misc daemons from Russell Coker.
- logging patches from Russell Coker
- kmod, lvm, brctl patches from Russell Coker
- devicekit, mount, xserver, and selinuxutil from Russell Coker
- some userdomain patches from Russell Coker
- Module version bump for gnome fix from Guido Trentalancia.
- apache: Move blocks. No rule changes.
- Module version bump for changes from Sven Vermeulen and Guido
- Trentalancia.
- login take 4 from Russell Coker.
- Rename apm to acpi from Russell Coker.
- Module version bump for patches from Russell Coker.
- some little misc things from Russell Coker.
- apt/dpkg strict patches from Russell Coker.
- Module version bump for minor fixes from Guido Trentalancia.
- Merge branch 'usr_bin_fc' of
- git://github.com/fishilico/selinux-refpolicy-contrib
- Module version bump for /usr/bin fc fixes from Nicolas Iooss.
- Module version bump for chronyd changes from Luis Ressel.
- openoffice: Move ooffice_rw_tmp_files() implementation.
- Module version bump for openoffice fix from Guido Trentalancia.
- libmtp: move lines
- Module version bump for fixes from Guido Trentalancia.
- Module version bump for mmap fixes from Stephen Smalley.
- Module version bump for misc patches from Guido Trentalancia.
- gpg: Fix overspecified dependencies in gpg_agent_tmp_filetrans.
- dirmngr: Whitespace fixes.
- Module version bumps for patches from Jason Zaman.
- cgmanager: Move lines
- Module version bumps for patches from Jason Zaman.
- gpg: Module version bump for patch from Guido Trentalancia.
- mozilla: Module version bump for patch from Luis Ressel.
- rkhunter: Fix module version and move lines.
- Module version bump for patches from cgzones.
- chkrootkit: Fix module version.
- Module version bump for patches from cgzones.
- Bump module versions for release.
-
-Guido Trentalancia (28):
- cups: read permission for cupsd_var_run_t socket files in
- cups_stream_connect()
- cups/lpd: read permission for cupsd_var_run_t socket files
- thunderbird: allow stream connections to cups so that it can print
- mozilla: allow stream connections to cups so that it can print
- java: enable interactive use
- evolution: add dbus acquire service permission
- evolution: do not audit kernel read state
- evolution: add some critical permissions
- mozilla: read hardware state information
- mozilla: add a permission
- wm: load the NetworkManager applet
- wm: interactive start
- Gnome and Evolution dbus chat permissions
- openoffice: support starting it from the window manager
- evolution: minor fixes and updates
- java: error messages terminal printout
- loadkeys: use init fds (system bootup)
- plymouth: pid interface usability
- shutdown: send msg to syslog
- openoffice: open files retrieved using mozilla
- contrib: new libmtp module
- openoffice: minor update
- gnome: improved integration with openoffice
- cups: let hplip read udev pid files
- dbus: let session bus daemon manage user runtime dirs
- zabbix: Grant zabbix_agent_t to call setrlimit on self
- ntp: fix the drift file context and transition
- gpg: manage user runtime socket files and directories
-
-Jason Zaman (12):
- usrmerge: Add missed /usr fcontexts
- java: update fcontexts for new versions of icedtea
- dirmngr: add to roles and allow gpg to domtrans
- gpg dirmngr: create and connect to socket
- dirmngr: fcontext for ~/.gnupg/crls.d/
- dirmngr: Network rules to connect to keyserver
- cgmanager: add policy from gentoo
- consolekit: Add support for consolekit2
- consolekit: allow purging tmp
- consolekit: introduce consolekit_use_inhibit_lock interface
- dbus: use consolekit inhibit locks
- networkmanager: use consolekit inhibit locks
-
-Luis Ressel (3):
- chronyd: Re-align fc file
- chronyd: Allow init scripts to create /run/chrony
- mozilla: Add fc for the files used by the firefox addon "vimperator"
-
-Nicolas Iooss (1):
- Support systems with a single /usr/bin directory
-
-Russell Coker (1):
- patch for samba
-
-Stephen Smalley (1):
- contrib: allow map permission where needed
-
-Sven Vermeulen (1):
- rpc_* interfaces should be wrapped by optional_policy()
-
-cgzones (16):
- update ntp module
- update alsa module
- vnstatd: update module
- corecmd_read_bin_symlinks(): remove deprecated and redundant calls
- modutils: adopt calls to new interfaces
- vnstatd: update
- dphysswapfile: update
- monit: update
- mandb: update
- logrotate: reload monit after log rotation
- remove /var/run file context lefovers, add dbus exception
- monit: add syslog access and support for monit systemd service
- rkhunter: add policy module
- arpwatch: align file contexts
- chkrootkit: add policy module
- arpwatch: update
-
-* Sat Feb 04 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170204
-Chris PeBenito (41):
- Module version bump for patches from Jason Zaman.
- authbind: Remove dead policy.
- Module version bump for cups patch from Guido Trentalancia.
- Merge pull request #29 from cgzones/deprecated_macros
- Module version bump for Debian fprintd fc entry from Laurent Bigonville.
- Module version bumps for openoffice patches from Guido Trentalancia.
- Module version bumps for patches from Guido Trentalancia.
- Merge pull request #30 from cgzones/trailing_whitespaces
- Module version bumps for mozilla and gpg patches from Luis Ressel.
- Module version bump for patches from Guido Trentalancia.
- Module version bump for patches from Guido Trentalancia.
- rtkit, wm: Remove calls to nonexistant interfaces.
- Module version bumps for patches from Guido Trentalancia.
- rtkit: enable dbus chat with xdm
- Module version bump for patches from Guido Trentalancia.
- Module version bump for xscreensaver patch from Guido Trentalancia.
- Merge branch 'run_transition' of
- git://github.com/cgzones/refpolicy-contrib
- Module version bumps for /run fc changes from cgzones.
- Module version bump for openoffice and wm patches from Guido Trentalancia.
- Module version bump for patches from Guido Trentalancia.
- Module version bump for wm patch from Guido Trentalancia.
- Merge branch 'usr-fc' of
- git://github.com/fishilico/selinux-refpolicy-contrib
- Module version bump for fc updates from Nicolas Iooss.
- Module version bump for patches from Guido Trentalancia.
- Module version bump for capability2 fixes from Guido Trentalancia.
- Module version bump for plymouth fix from Guido Trentalancia.
- boinc: Update from Russell Coker.
- Module version bump for mozilla update from Guido Trentalancia.
- Merge pull request #47 from cgzones/dphysswap_module
- Merge pull request #40 from cgzones/fakehwclock_module
- Merge branch 'gpg_module' of git://github.com/cgzones/refpolicy-contrib
- Merge branch 'irqbalance_module' of
- git://github.com/cgzones/refpolicy-contrib
- Merge branch 'loadkeys_module' of
- git://github.com/cgzones/refpolicy-contrib
- Module version bumps for patches from cgzones.
- Merge branch 'exim_module' of git://github.com/cgzones/refpolicy-contrib
- Merge branch 'screen_module' of git://github.com/cgzones/refpolicy-contrib
- Module version bump for screen and exim changes from cgzones.
- screen: Revert broken interface call.
- cups: Move hplip_domtrans interface.
- Module version bump for cups patch from Guido Trentalancia.
- Bump module versions for release.
-
-Dominick Grift (1):
- Re-add raid fc spec that must have been removed earlier by mistake
-
-Guido Trentalancia (29):
- cups: descend "rw" directories when reading configuration files
- Apache OpenOffice module (contrib policy part)
- openoffice: rename two interfaces in openoffice and evolution
- mozilla: extend dbus connection permissions
- openoffice: permission to read user temporary files
- xguest: restrict ability to execute files on noxattr filesystems
- pulseaudio: update server and client permissions
- mozilla: remove redundant pulseaudio interface calls
- networkmanager: read user certs not user content (was enable
- userdom_read_user_certs() throughout the policy)
- Make several calls to mta interfaces optional
- wm: update the window manager (wm) module and enable its role template
- (v7)
- rtkit: enable dbus chat with xdm
- networkmanager: enable dbus chat with xdm
- policykit: enable dbus chat with xdm
- games: general update and improved pulseaudio integration
- wm: improved integration with games
- xscreensaver: update the module so that it can be effectively used
- wm: properly set domain entrypoint in wm_application_domain()
- openoffice: add writer support for sending email directly to multiple
- recipients
- contrib: use new genhomedircon template for username
- contrib: extend wm ability to launch confined graphical applications
- contrib: support the new interface to manage X session logs
- networkmanager: dbus chat with cups
- cups: add cups-browsed executable fc
- devicekit: add new wake_alarm permission (capability2)
- networkmanager: add new wake_alarm permission (capability2)
- plymouth: use the correct running domain for the client
- mozilla: execute evolution to send emails
- cups: new interface to execute HPLIP applications in their own domain
-
-Jason Zaman (4):
- pcscd: dbus and domain lookup
- devicekit: fcontext for udisks2
- gnome: add gkeyring rules and fcontext
- gpg: add new socket paths
-
-Laurent Bigonville (1):
- Add debian path for fprintd daemon
-
-Luis Ressel (3):
- gpg: Add filetrans for scdaemon socket and gpg-agent extra sockets
- gpg.fc: Adjust whitespace
- mozilla: Add miscfiles_dontaudit_setattr_fonts_cache_dirs()
-
-Nicolas Iooss (1):
- Add file contexts for files in /usr/{lib,sbin}
-
-cgzones (10):
- use domain_auto_transition_pattern instead of domain_auto_trans
- remove trailing whitespaces
- transition file contexts to /run
- update loadkeys module
- add fakehwclock module
- add dphysswapfile module
- update gpg module
- update screen module
- update irqbalance module
- update exim module
-
-* Sun Oct 23 2016 Chris PeBenito <pebenito@ieee.org> - 2.20161023
-Adam Tkac (2):
- varnishncsa (varnishlog_t) reads localization files
- Grant certmonger "chown" capability
-
-Chris PeBenito (42):
- Merge branch 'bigon-geoclue'
- Add additional comments in geoclue.
- Merge branch 'bigon-virt-1'
- Merge branch 'nm-1' of git://github.com/bigon/refpolicy-contrib into
- bigon-nm-1
- Merge branch 'bigon-nm-1'
- Module version bump for virt and networkmanager patches from Laurent
- Bigonville.
- Merge branch 'master' of git://github.com/bigon/refpolicy-contrib
- Module version bump for firewalld updates from Laurent Bigonville.
- Module version bump for collectd update from Jason Zaman.
- Module version bumps for user runtime fixes from Jason Zaman.
- Boinc updates from Russell Coker.
- rpcbind: Read /sys/devices/system/cpu/online from Russell Coker.
- watchdog: Move line.
- Module version bump for watchdog pidfile option from Russell Coker.
- Systemd units from Russell Coker.
- Module version bump for pulseaudio fc fix from Jason Zaman.
- cpucontrol: revise cpucontrol_conf_t labeling, from Guido Trentalancia.
- Module version bumps for patches from Guido Trentalancia.
- Update the telepathy module:
- Update the alsa module so that the alsa_etc_t file context (previously
- alsa_etc_rw_t) is widened to the whole alsa share directory, instead of
- just a couple of files.
- alsa: Add compatibility alias for alsa_etc_rw_t.
- Update the sysnetwork module to add some permissions needed by the dhcp
- client (another separate patch makes changes to the ifconfig part).
- Module version bump for various patches from Guido Trentalancia.
- pulseaudio: Fix compile errors.
- Merge branch 'master' of
- https://github.com/SeanPlacchetti/refpolicy-contrib
- Module version bump for webalizer dead type removal from Sean Placchetti.
- Module version bump for Evolution SSL fix from Guido Trentalancia.
- evolution: Read user certs from Guido Trentalancia.
- cups: Move can_exec() line.
- cups: Module version bump for hplip patch from Guido Trentalancia
- pulseaudio: Move interface definitions.
- Module version bump for mozilla patch from Guido Trentalancia.
- Module version bump for gnome patch from Guido Trentalancia.
- Module version bump for evolution patch from Guido Trentalancia.
- gpg: Whitespace fix.
- Merge branch 'feature/fix-networkmanager-varrun-macro' of
- https://github.com/rfkrocktk/refpolicy-contrib
- Module version bump for networkmanager fix from Naftuli Tzvi Kay.
- Merge branch 'rfkrocktk-feature/syncthing'
- Rearrange lines in syncthing.
- webalizer: Rearrange a couple lines.
- Module version bump for webalizer patch from Russell Coker.
- Bump module versions for release.
-
-Dominick Grift (18):
- Module version bump for changes to the geoclue module by Laurent
- Bigonville.
- Module version bump for changes to various modules from Laurent
- Bigonville.
- geoclue: move kernel interface call to the appropriate position
- Actually associate mailmain_domain attribute with mailman domains
- Module version bumps for changes to various modules by Nicolas Iooss
- Module version bump for changes to the cron module by Jason Zaman
- Module version bump for changes to the redis module by Grant Ridder
- Module version bump for changes to the raid module by Laurent Bigonville
- Module version bump for changes to the networkmanager module by Laurent
- Bigonville.
- Module version bump for changes to the redis module by Grant Ridder.
- Module version bump for changes to the mozilla module by Laurent
- Bigonville.
- Module version bump for changes to the geoclue module by Nicolas Iooss.
- Add hwloc-dump-hwdata SELinux policy
- Module version bump for changes to the varnishd module by Robert Moucha
- Module version bump for changes to the puppet module by Thomas Mueller
- Module version bump for changes to the varnishd module by Adam Tkac
- Module version bump for changes to the certmonger module by Adam Tkac
- Revert "dbus: allow system, and session bus clients to answer to dbus
- unconfined domains"
-
-Grant Ridder (2):
- Add read/write perms for redis-sentinel
- Allow tcp_connect to redis_port_t for redis_t
-
-Guido Trentalancia (7):
- Policykit module: add fs_getattr_xattr_fs()
- Update the policy for module apm
- Let gpg disable core dumps
- Update the rtkit module
- Update the pulseaudio module for usability and ORC support
- cups: update permissions for HP printers (load firmware)
- gpg: public key signature verification in evolution
-
-Guido Trentalancia via refpolicy (3):
- evolution: read SSL certificates
- mozilla: let mozilla play audio
- gnome: add support for the OIL Runtime Compiler (ORC) optimized code
- execution
-
-Jason Zaman (10):
- cron: Allow locks to be lnk_files
- collectd: update policy for 5.5
- consolekit: allow managing user runtime
- pulseaudio: fcontext and filetrans for runtime
- ftp: Add filetrans from user_runtime
- gnome: Add filetrans from user_runtime
- mplayer: Add filetrans from user_runtime
- userhelper: Add filetrans from user_runtime
- wm: Add filetrans from user_runtime
- pulseaudio: fix user runtime fcontext
-
-Laurent Bigonville (13):
- Add initial geoclue 2 module
- Properly escape dot in the path to the geoclue daemon
- Use auth_use_nsswitch() as we need DNS resolving and access nsswitch.conf
- virt.fc: Add some debian contexts
- networkmanager.fc: nm-dispatcher.action has been renamed to nm-dispatcher
- Allow some domain to read sysctl_vm_overcommit_t
- Allow mdadm read efivarfs files
- Allow /var/run/firewalld/ directory to transition to firewalld_var_run_t
- Add an interface to allow a domain to read firewalld_var_run_t files
- Allow firewalld to create firewalld_var_run_t directory.
- dontaudit firewalld attempt to relabel its own config files
- Allow NM to execute arping
- Debian now ships firefox-esr, properly label the executable
-
-Luis Ressel (1):
- New policy for tboot utilities
-
-Naftuli Tzvi Kay (2):
- Fix NetworkManager Read Pid Files Macro
- Syncthing Policy
-
-Nicolas Iooss (3):
- Describe _initrc_domtrans interfaces differently from the _domtrans ones
- Fix typos in several interfaces
- Add Arch Linux path for geoclue module
-
-Robert Moucha (1):
- Fix trivial typo in varnishncsa name
-
-Russell Coker (2):
- watchdog reads pid files
- named reads vm sysctls
-
-Russell Coker via refpolicy (1):
- webalizer patch for inclusion
-
-Sean Placchetti (1):
- -Remove unused declarations from webalizer type enforcement file
-
-Thomas Mueller (1):
- Allow puppet_t transtition to shorewall_t
-
-doverride (3):
- Merge pull request #8 from bigon/geoclue
- Merge pull request #11 from bigon/overcommit-1
- Merge pull request #12 from fishilico/typos
-
-* Tue Dec 08 2015 Chris PeBenito <selinux@tresys.com> - 2.20151208
-Alexander Wetzel (1):
- add vfio support for libvirt
-
-Chas Williams - CONTRACTOR (1):
- afs: update labels, file contexts and allow access to urandom
-
-Chris PeBenito (14):
- Module version bump for hadoop_admin() fix from Jazon Zaman.
- Module version bump for fc typo in radius from Sven Vermeulen.
- Module version bump for patches from Jason Zaman.
- Module version bump for init_startstop_service from Jason Zaman.
- Module version bump for cron_admin interface from Jason Zaman.
- Comment/whitespace fix in virt.te.
- Module version bump for vfio support for libvirt from Alexander Wetzel.
- Add systemd unit types.
- Add systemd socket activations.
- Merge branch 'pebenito-master'
- Module version bump for systemd additions.
- Merge branch 'bigon-systemd'
- Module version bump for dbus systemd patch from Laurent Bigonville.
- Bump module versions for release.
-
-Dominick Grift (16):
- Module version bump for courier fixes from Sven Vermeulen.
- Module version bump for afs fixes from Chas Williams.
- Redundant rules and afs_files_t is not a filesystem type
- Various samhain fixes
- Cachefilesd module updates
- Module version bump for changes to the dnsmasq policy module by Jason
- Zaman
- Module version bump for changes to the snmp policy module by Jason Zaman
- Module version bump for changes to the pulseaudio policy module by Jason
- Zaman
- cachefiles: It is cachefilesd_cache_t
- Module version bump for update to the networkmanager policy module by
- Stephen Smalley.
- Module version bumps for "Remove run interface calls from admin
- interfaces" changes by Jason Zaman.
- Module version bump for changes to the pulseaudio module by Niklas Haas.
- Changes to the git, hadoop and rsync modules by Jason Zaman.
- Module version bump for changes to the virt module by Jason Zaman
- Module version bump for changes to the mozilla module from Laurent
- Bigonville.
- Module version bump for changes to the wine module by Nicolas Iooss
-
-Jason Zaman (19):
- hadoop: remove _role from _admin interface
- rpcbind: typo fix
- git: make inetd interface optional
- rpc: introduce allow_gssd_write_tmp boolean
- rpc: allow setgid capability
- virt: add virt_tmpfs_t type and permissions
- introduce virt_leaseshelper_t
- dnsmasq: allow exec shell for scripts
- snmp: missing fcontext for snmpd
- pulseaudio: filetrans for autospawn.lock
- Use init_startstop_service in admin interfaces A-M
- Use init_startstop_service in admin interfaces N-Z
- Remove _run() interfaces from _admin()
- Introduce cron_admin interface
- rsync: remove rsync_run from admin interface
- git: allow git_system_t to listen on tcp_sockets
- hadoop: init_startstop_service() can not take attributes
- virt: Allow creating qemu guest agent socket
- virt: Add policy for virtlockd the Virtual machine lock manager
-
-Laurent Bigonville (2):
- Transition D-Bus system service out of the init_t domain when PID1 is
- systemd
- Label iceweasel plugin-container executable as mozilla_plugin_exec_t
-
-Nicolas Iooss (1):
- wine: remove use of nonexisting interface
-
-Niklas Haas (1):
- pulse: don't give pulseaudio_client full access to user_home_t
-
-Stephen Smalley (1):
- contrib: networkmanager: allow netlink_generic_socket access
-
-Sven Vermeulen (6):
- Locate authdaemon socket and communicate with authdaemon
- Allow authdaemon to access selinux fs to check SELinux state
- Grant setuid/setgid to courier_pop_t
- Execute courier helper script after authentication
- Courier IMAP needs to manage the users' maildir
- Fix typo for radiusd /var/lib location
-
-doverride (2):
- Merge pull request #3 from haasn/pulse-nohome
- Merge pull request #6 from bigon/mozilla-1
-
-* Wed Dec 03 2014 Chris PeBenito <selinux@tresys.com> - 2.20141203
-Chris PeBenito (26):
- Whitespace fix in ntp.fc.
- Module version bump for ntp fc entries from Laurent Bigonville.
- Whitespace fix in shibboleth.te.
- Module version bump for new shibboleth module from Martin Lang.
- Module version bump for apt fix from Nicolas Iooss.
- Module version bump for dnsmasq MTU fix from Sven Vermeulen.
- Module version bump for apache content interfaces from Sven Vermeulen.
- Module version bump for gitweb fc entry on Debian and ArchLinux from
- Nicolas Iooss.
- Module version bump for fc regex fixes from Nicolas Iooss.
- Module version bump for various fixes from Laurent Bigonville.
- Module version bump for ModemManager fc entry from Laurent Bigonville.
- Add missing cron_admin_role() dependency.
- Move sock_file filetrans to fcron_crond conditional.
- Module version bump for cron and snort updates from Sven Vermeulen.
- Module version bump for java icedtea fc entries from Sven Vermeulen.
- Module version bump for apache/mlogc patch from Elia Pinto.
- Remove name from ntp-kod ntp_drift_t filetrans.
- Module version bump for ntp-kod file support from Jason Zaman.
- Module version bump for init_daemon_pid_file use from Sven Vermeulen.
- Module version bump for alsa and hiawatha fixes from Sven Vermeulen.
- Module version bump for ftp and tftp fixes from Nicolas Iooss.
- Move irc exec lines.
- Module version bump for irc re-exec itself patch from Luis Ressel.
- Module version bump for NetworkManager fc fix for ArchLinux from Nicolas
- Iooss.
- Module version bump for _admin fixes from Jason Zaman.
- Bump module versions for release.
-
-Dominick Grift (3):
- Module version bump for changes to the loadkeys module by Nicolas Iooss
- cron: that boolean identifier does not exist also require it
- Module version bump for changes to the networkmanager modules by Lubomir
- Rintel
-
-Elia Pinto (1):
- apache.te: Add labelling support for /var/log/mlogc
-
-Jason Zaman (20):
- Add filetrans for ntp-kod file
- ccs: syntax errors in ccs_admin interface
- condor: syntax error in condor_admin
- distcc: syntax error in distcc_admin
- ftp: syntax error in ftp_admin
- kerberos: syntax error in kerberos_admin
- kismet: syntax error in kismet_admin
- nut: syntax error in nut_admin
- prelude: syntax error in prelude_admin
- psad: syntax error in psad_admin
- quota: syntax error in quota_admin
- rpcbind: syntax error in rpcbind_admin
- rpm: syntax error in rpm_admin
- systemtap: syntax error in stapserver_admin
- svnserve: syntax error in svnserve_admin
- uptime: syntax error in uptime_admin
- zabbix: syntax error in zabbix_admin
- remove pyzor_role() from pyzor_admin()
- remove spamassassin_role() from spamassassin_admin()
- rsync: syntax error in rsync_admin
-
-Laurent Bigonville (7):
- Add several fcontext for debian specific paths for ntp
- Fix dbus_all_session_domain(), session_bus_type is an attribute
- Allow gconfd to be started by the session bus
- Fix the usage of dbus_spec_session_domain() interface
- Properly label exim4 initscript under Debian
- Add new gnome_spec_domtrans_all_gkeyringd() interface
- Label /usr/sbin/ModemManager as modemmanager_exec_t
-
-Lubomir Rintel (1):
- Allow NetworkManager to create Bluetooth SDP sockets
-
-Luis Ressel (1):
- irc.te: Allow irssi to re-execute itself
-
-Martin Lang (1):
- Add a policy module for shibboleth authentication
-
-Nicolas Iooss (7):
- apt: remove non-existing permission set write_dir_perms
- Label /usr/share/gitweb/static as httpd_git_content_t
- Fix strange file patterns
- ftp: fix labels in /var/lock/subsys/
- Label /usr/bin/tftpd as tftpd_exec_t
- Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/
- Allow loadkeys to read usr_t files
-
-Sven Vermeulen (17):
- dnsmasq reads MTU sysctl
- Support read/append/manage functions for various httpd content
- Snort policy updates
- fcron socket support
- Fix typo in dnsmasq.if
- Mark icedtea binaries as java_exec_t
- Use init_daemon_pid_file for contrib modules
- Enable asound.state.lock support
- Add support for Hiawatha web server
- Use logging_search_logs, not logging_search_log
- Use logging_search_logs, not logging_search_log
- Use files_search_etc, not logging_search_etc
- Use files_search_etc, not logging_search_etc
- Use files_search_etc, not files_search_config
- Use corecmd_search_bin, not corecmd_searh_bin
- Use fs_search_tmpfs, not files_search_tmpfs
- Use domain_auto_trans, not auto_trans
-
-* Tue Mar 11 2014 Chris PeBenito <selinux@tresys.com> - 2.20140311
-Chris PeBenito (17):
- Minor rearrangement of minidlna lines.
- Module version bump for openvpn tmp files from Sven Vermeulen.
- Update modules for file_t merge into unlabeled_t.
- Module version bump for postfix showq fc from Laurent Bigonville.
- Rename gpg_agent_connect to gpg_stream_connect_agent.
- Module version bump for gpg agent interface from Luis Ressel.
- Whitespace fixes in git.fc.
- Module version bump for debian git fc entries from Laurent Bigonville.
- Move bin_t fc to corecommands.
- Move exec/transition lines in couchdb.
- Add comment about couchdb_js policy.
- Module version bump for couchdb updates from Luis Ressel.
- Module version bump for pcscd fix from Luis Ressel.
- Move screen dontaudit rule.
- Module version bump for screen fix from Luis Ressel.
- Module version bump for git fc fix from Nicolas Iooss.
- Bump module versions for release.
-
-Dan Walsh (28):
- Allow irc_t to use tcp sockets
- Add labels for apache logs under miq package
- Allow smbcontrol to create content in /var/lib/samba
- Allow ktalkd to bind to the ktalkd_port
- Allow memcache to read sysfs data
- Allow mdadm to getattr any file system
- Allow cupsd_lpd_t to bind to the printer port
- Allow rlogind to bind to the rlogin_port
- Allow cvs to bind to the cvs_port
- svirt domains neeed to create kobject_uevint_sockets
- Lots of new access required for sosreport
- Allow tgtd_t to connect to isns ports
- openct needs to be able to create netlink_object_uevent_sockets
- Allow glusterd to create sock_file in /run
- Add support for tmp directories to openvswitch
- Allow virt_domain with USB devices to look at dos file systems
- Additional access for MLS
- Additional access for MLS window manager
- Additional access for MLS window manager
- Additional access for MLS window manager
- Allow rpcbind to use nsswitch
- Allow gpg_agent to use ssh-add
- Add apache labeling for glpi
- Allow pegasus to transition to dmidecode
- Allow mcelog to use the /dev/cpu device
- Allow apmd to request the kernel load modules
- Allow postfix programs to getattr on all executables
- label mate-keyring-daemon with gkeyringd_exec_t
-
-Dominick Grift (126):
- Typo fix in ksmtuned_admin() by Shintaro Fujiwara
- Fix monolithic built
- Change file context spec for aide log files to catch suffixes
- Module version bumps for changes in various policy modules by Sven
- Vermeulen
- Squid: Use a single pattern for brevity
- Irc was already allowed to create tcp sockets, it only needed an
- additional accept, and listen to be able to act as a proxy
- Its probably a better idea to use the httpd_sys_ra_content_t type sid
- for logs in these locations
- Module version bump for changes to the tcsd policy module by Lukas
- Vrabec
- Module version bump for changes to various policy modules by Miroslav
- Grepl
- Module version bump for changes to the samba policy module by Dan Walsh
- Module version bump for changes to the telepathy policy module by
- Miroslav Grepl
- We do not have a boinc domain type attribute Change boolean
- description a bit
- Additional rabbitmq couchdb support
- Module version bumps for changes to various policy modules by Miroslav
- Grepl
- Additional git tcp networking rules
- Additional ktalkd udp networking rules
- Module version bump for changes to various policy modules by Dan Walsh
- Addtional cups ldp tcp networking rules
- Should be server packets because it is binding, and not connecting
- Clean up telnet, and rlogin networking rules
- Additional cvs tcp networking rules
- Module version bump for changes to various policy modules by Dan Walsh
- Addtional tgtd tcp networking rules
- Additional polipo tcp networking rules
- Fix asterisk files_spool_filetrans()
- Module version bump for changes to the networkmanager policy module by
- Lukas Vrabec
- Additional fs_tmpfs_filetrans() for munin service plugin content on
- tmpfs
- Module version bump for changes to various policy modules by Miroslav
- Grepl
- Support rlogind, and telnetd as init daemon domains ( i think fedora is
- campaigning to get rid of (x)?inetd )
- Support mariadb logging, file context specification for mariadb specific
- config location
- Change logwatch boolean identifier to something more self-documenting.
- Additional tcp networking rules
- Module version bump for changes to various policy modules by Miroslav
- Grepl
- Fix inconsistencies in the pkcs policy module
- Fix fetchmail inconsistencies
- Module version bump for changes in various policy modules by Dan Walsh
- Support for window managers to stream socket connect to pulseaudio
- Logwatch does not need to be able to bind tcp sockets to generic nodes
- since its only connecting
- Adds userhelper_exec_consolehelper for window managers
- Remove duplicate rules due to addition of auth_use_nsswitch()
- We dont use the arbt domain types template. Use a more uniform boolean
- discription
- Clean up libstoragemngmt policy module We do not yet support systemd
- Change type from etc_rw to conf for readability admin access to
- condor_conf_t
- Hit by a nasty optional policy nesting issue
- We will find another way to run pa as a system server
- Module version bump for changes to various policy modules by Miroslav
- Grepl
- Clean up hypervkvp policy module (seems incomplete)
- Clean up initial redis policy module
- Additional openvpn tcp networking rules
- redis: allow redis to bind tcp sockets to redis_port_t type ports
- bluetooth: bluetooth_t acquires org.bluez service on dbus system bus
- wm: associate wm_exec_t to core command executable files so that initrc_t
- (/sbin/start-stop-daemon) can access it (metacity)
- logrotate restarts syslogd via init script in Debian
- This file is called just man-db in Debian.
- exim: exim owns directory /var/lib/exim4
- accountsd: accounts-daemon lists /var/log
- alsa: alsactl listing /dev/shm alsa: alsactl reading /dev/urandom alsa:
- alsactl getting attributes of devtmpfs / (/dev) alsa: alsactl maintains
- a pulseaudio tmpfs file
- Cron: /sbin/runlevel reads /run/utmp cron: anacron (system_cronjob_t)
- reading, writing inherited random crond tmp files (/tmp/tmpfk1VT2O)
- dbus: allow system, and session bus clients to answer to dbus unconfined
- domains
- apt: Run apt system cronjobs in the apt_t domain apt: apt system cronjob
- creates dpkg.status.* files in /var/backup
- devicekit: upowerd reads own unix stream socket devicekit:
- devicekit_power_t (runlevel) read /run/utmp
- mandb: Make the man-db cronjob work on Debian
- rtkit: traverse /proc to get to process state files
- networkmanager: NetworkManager reads /run/udev/data/n2 file
- avahi: create a avahi_initrc_domtrans for udev_t: udev runs a avahi dns
- check script which does, i guess, a dns check. If needed it starts, or
- stops avahi via its init script. I also created a
- avahi_manage_pid_files() for udev_t because the script manages a file
- called "checked_nameservers.*" in /run/avahi-daemon
- Cleanups of various modules with regard to regular expressions and white
- space
- apt: As it turns out the /var/backups directory is labeled in the backup
- module (which i incidentally did not have installed earlier). Instead
- of creating this file with a file type transition to
- apt_var_cache_t, allow apt_t to manage backup_store files
- mta: this needs to be verified again, it should just have been running
- in exim_t. I might have taken this from old logs
- mandb: /etc/cron.daily/man-db executes dpkg, reads dpkg db on Debian
- slocate: catch /usr/bin/updatedb.mlocate, and /etc/cron.daily/mlocate on
- Debian
- dpkg: catch /etc/cron.daily/dpkg on Debian dpkg: allow
- /etc/cron.daily/dpkg to manage backup store files on Debian
- cron: consistent usage of regular expressions cron: prelink no longer
- runs in the system cronjob domain
- alsa: alsactl wants to associate pulse-shm-.* to device_t type
- filesystems. This happens early on but i do not understand how that
- (/dev) relates to /dev/shm in this regard
- devicekit: reads udev pid files modemmanager: reads udev pid files
- vdagent: spice-vdagentd uses /dev/vport1p1 virtio console
- tmpreaper: mountall-bootcl in the tmpreaper_t domain reads, writes
- /dev/pts/0 inherited from init script
- revert regular expressions
- wm: allow $1_wm_t to stream connect to $1_gkeyringd_t
- mta: allow system_mail_t (user_mail_domains) to read kernel sysctls and
- to read exim var lib files.
- mta: These are duplicates because system_mail_t is a user_mail_domain,
- as it is based off of the mta_base_mail_template() which assigns that
- type attribute
- locate: extra rules needed by debian /etc/cron.daily/locate script
- backup: in Debian /etc/cron.daily/passwd backs-up shadow, passwd etc to
- /var/backups
- avahi: create interfaces that will allow calles to create avahi pid dirs
- and create specifc avahi pid objects with a type transition (for
- udev, which runs: /usr/lib/avahi/avahi-daemon-check-dns.sh in
- Debian
- Initial gdomap policy module
- Initial minissdpd policy module
- alsa: due to a bug in gnome 3.4, in debian, alsactl does all kinds of
- weird things related to pulseaudio
- various: revert regex fixes: fcsort does not want this now
- gdomap: gdomap_port_t is now available, gdomap binds tcp, and udp socket
- to it
- alsa: make alsa_t and pulseaudio_client so that pulseaudio_client rules
- apply to it. alsactl does not actually run pulseaudio it seems though.
- pulseaudio: allow all pulseaudio_client to send null signals to
- unconfined_t, since unconfined_t is not actually a pulseaudio_client (
- unconfined_t runs pulseaudio without a domain transition)
- avahi: create avahi_setattr_pid_dirs() for udev (avahi dns check script
- run by udev in Debian)
- These { read write } tty_device_t chr files on boot up in Debian
- colord: colord executable file locations in Debian
- colord: reads /proc/1, reads /run/udev files
- vdagent: read/write mtrr file
- mandb: dpkg running in the mandb_t domain in Debian (mandb cronjob)
- traverses /root
- exim: traverses sysfs, uses system cronjob file descriptors (/dev/null) in
- Debian (/etc/cron.daily/exim)
- minissdpd fixes
- devicekit: disk reads /proc/sys/vm/overcommit_memory
- devicekit: edit devicekit_append_inherited_log_files to include get
- attribute permission so that it can be also used for fsadm
- devicekit: 95hdparm-apm (devicekit_power_t) gets attributes of /dev/sda
- (fixed_disk_device_t)
- networkmanager: added interfaces that fedora calls for dhcpc. In Debian it
- was confirmed that at least dhclient manages
- /var/lib/NetworkManager/dhclient-eth0.conf
- firewalld: various fixes that i borrowed from Fedora but that also apply
- to Debian (confirmed)
- firewalld: interfaces created for iptables
- irqbalance: getsched from Debian
- colord: colord reads /proc/3412/cmdline (cupsd state files)
- virt: libvirtd reads /run/udev/data/+input:input3
- firewalld: traverses / on sysfs
- rngd: needs ipc_lock capability, maintains /run/rngd.pid
- tmpreaper: mountall-bootcl executes /bin/plymouth on Debian
- minissdpd: deal with assertion violation (sys_module)
- gdomap: missing networking rules, it traverses /tmp for some reason
- ntp: create ntp_read_drift_files() for dhclient
- dpkg: allow dpkg, and dpkg script to domain transition to initrc_t on any
- init script file type rather than only the generic initrc_exec_t init
- script file type
- exim: exim4 reads online
- apt: apt runs /usr/bin/apt-get apt: on_ac_power (apt_t) lists
- /sys/class/power_supply
- exim: exim_manage_var_lib_files created for init: init script runs helper
- apps that create/manage /var/lib/exim4/config.autogenerated.tmp
- gdomap/minissdpd: create read_config interfaces for initrc_t
- exim: make exim init script create /var/run/exim4 with a proper context
- pulseaudio: pulsaudio_t needs to be able to read user_tmpfs_files
- (/run/shm/pulse-shm-.*)
- dnsmasq: add support for /etc/dnsmasq.d/
- Module version bumps for various policy modules
- Module version bump for changes to the logrotate module by Luis Ressel
- Git: git daemons can list and read git personal repositories
- Module version bumps for changes to various policy modules by Fedora
- redis, lsm: typo fixes
- userhelper: append newline
-
-James Carter (8):
- - Fixed typo in contrib/avahi.if
- - Fixed typo in contrib/glusterfs.te
- - Fixed typo in contrib/jabber.if
- - Fixed typo in contrib/keystone.if
- - Fixed typo in contrib/mailscanner.if
- - Fixed typo in contrib/qpid.if
- - Fixed typo in contrib/readahead.fc.
- - Fixed typo in contrib/rpm.if.
-
-Laurent Bigonville (2):
- Label /usr/lib/postfix/showq as postfix_showq_exec_t
- Properly label git-daemon and gitweb.cgi on Debian
-
-Luis Ressel (10):
- Allow initrc_t to create /var/run/opendkim
- Label /etc/cron.daily/logrotate correctly.
- gpg: Create gpg_agent_connect interface
- Minor updates to couchdb policy
- couchdb: Add separate domain for couchjs
- couchdb: Dontaudit denials caused by Erlang's disksup
- Reformat couchdb.fc
- pcscd.if: Permit access to pid files inside /var/run/pcscd/.
- Allow gpg-agent's scdaemon to connect to pcscd.
- Dontaudit screen asking for the sys_tty_config capability
-
-Lukas Vrabec (8):
- Allow tcsd to read utmp file
- fix boinc policy
- Add support for couchdb in rabbitmq policy
- Fix transition rules in asterisk policy
- Add fowner capability to networkmanager policy
- Add policy for lsmd
- Add policy for hypervkvpd
- Add policy for redis-server
-
-Mika Pflüger (1):
- Correct typo in passenger module name
-
-Miroslav Grepl (40):
- Allow passenger to execute ifconfig
- Allow mpd setcap which is needed by pulseaudio
- Allow block_suspend cap for samba-net
- Allow t-mission-control to manage gabble cache files
- Allow nslcd to read /sys/devices/system/cpu
- Add labeling for ~/.cache/telepathy/avatars/gabble
- Allow firewalld to read NM state
- Allow systemd running as git_systemd to bind git port
- Fix labeling for fetchmail pid files/dirs
- Fix polipo.te
- Fix cupsd.te
- Allow munin service plugins to manage own tmpfs files/dirs
- Make ktalk as init domain
- Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
- Add logwatch_can_sendmail boolean
- Allow rhsmcertd to read init state
- Allow fsetid for pkcsslotd
- Allow fetchmail to create own pid with correct labeling
- Fix rhcs_domain_template()
- Add support for abrt-upload-watch
- Allow virtd to relabel unix stream socket
- Fix lsm.fc for pid files
- Also sock_file trans rule is needed in lsm
- Update condor_master rules to allow read system state info and allow
- logging
- Add labeling for /etc/condor and allow condor domain to write it (bug)
- Allow condor domains to manage own logs
- Allow glusterd to read domains state
- Add openvpn_can_network_connect() boolean
- Fix minissdpd_admin()
- Allow ctdb to getattr on al filesystems
- Watchdog opens the raw socket
- Allow watchdog to read network state info
- Add setroubleshoot_signull() interface
- Allow sosreport to send signull to setroubleshootd
- Allow sosreport all signal perms
- Allow sosreport to dbus chat with rpm
- Allow zabbix_agentd to read all domain state
- Allow smoltclient to execute ldconfig
- Allow sosreport to request the kernel to load a module
- Allow setpgid for sosreport
-
-Nicolas Iooss (1):
- git: fix file pattern after whitespace fixes
-
-Sven Vermeulen (6):
- Add minidlna policy
- Allow openvpn temporary files
- Add aide bin /usr/bin and mark /var/lib/aide
- Provide alsa_write_lib interface
- Run dmidecode after newrole or on terminals
- Grant write privileges to squid on its log files
-
-* Wed Apr 24 2013 Chris PeBenito <selinux@tresys.com> - 2.20130424
-Chris PeBenito (18):
- Rewrite of mcelog module from Guido Trentalancia
- Remove unnecessary lines in mcelog.te.
- Slight rearrangement in mcelog.te.
- Module version bump for mcelog update from Guido Trentalancia.
- Module version bump for ntp module fixes from Dominick Grift.
- Module version bump for fc substitutions optimizations from Sven
- Vermeulen.
- Module version bump for postfix/mta misc fixes from Sven Vermeulen.
- Module version bump for init_daemon_run_dirs usage from Sven Vermeulen.
- Turn off all tunables by default, from Guido Trentalancia.
- Module version bump for tunable default change.
- Module version bump for saslauthd tcp mysql connections from Mika Flueger.
- Move kernel request line in quota.
- Module version bump for quota kernel module request from Mika Pflueger.
- Module version bump for djbdns ports fixes from Russell Coker.
- Remove stray + in keystone.te.
- Whitespace fixes in cron.fc.
- Module version bump for pulseaudio type_transition conflict fix from Sven
- Vermeulen.
- Bump module versions for release.
-
-Dominick Grift (889):
- Initial BIRD Internet Routing Daemon policy
- oident daemon fixes
- Introduce ntp_conf_t
- Allow ntp_admin() to manage ntp_drift_t content.
- List etc_t directories
- Use "Role allowed access." for consistency
- Use permissions sets for compatibility.
- Remove getattr permision from ntp_admin()
- Initial Sensord policy module
- Various block_suspend capability2 support from Fedora
- Gitolite3 support from Fedora
- /var/lib/sqlgrey is greylist milter data from Fedora
- Terminal related fixes for plymouthd from Fedora Support block_suspend
- capability2 for plymouth
- Support minimal polkit in new location
- Support ldap for user authentication from Fedora
- Sanlock sends kill signals to non-root processes from Fedora Various
- other capabilities for sanlock from Fedora
- Initial support for sqlgrey from Fedora
- Tor reads network sysctls from Fedora
- GPG agent reads /dev/random from Fedora
- Freshclam reads system and network state from Fedora
- Execute wpa_cli in the NetworkManager_t domain for wicd from Fedora
- lpstat.cups reads fips_enabled from Fedora
- Initial system tap compile server policy module
- Systemtap server admin manages stapserver_var_lib_t content
- Telepathy Idle reads gschemas.compiled from Fedora
- Initial slpd policy module
- Initial lightsquid policy module
- Initial wdmd policy module
- Initial mailscanner policy module and some depencies.
- Support slpd log rotation
- Initial numad policy module
- Open log files for append only
- CGClear reads CGConfig files from Fedora Cosmetic changes to cgroup
- policy module File contexts of cgroup app executables files in
- /sbin also apply to /usr/sbin Make cgroup_admin() a bit more
- compact
- Initial svnserve policy module
- Various small changes to ucspitcp
- Initial fcoe policy module
- Initial lldpad policy module
- fcoemon sends to lldpad with a dgram socket
- Initial quantum policy module
- Initial dspam policy module
- Module version bump for Telepathy file context spec fixes from Laurent
- Bigonville.
- Initial isns policy module
- Various changes to tcs policy module
- Initial ctdb policy module
- Various changes to the sblim policy module and its dependencies
- Initial polipo policy module
- Module version bump for networkmanager fixes
- Fixes to the polipo policy module
- Module version bump for smartmon fixes from Laurent Bigonville.
- Module version bump for accountsd file context spec fix from Laurent
- Bigonville.
- Various changes to the raid module
- Module version bump for rtkit file context spec fix from Laurent
- Bigonville
- Initial couchdb policy module
- Changes to the bind policy module
- Initial dnssectrigger policy module
- Initial man2html policy module
- Initial openhpi policy module
- Bind sends/receives http server instead of client packets conditionally
- Two file context regular expression fixes by Eric Paris
- Type mdadm_t is no longer a unconfined type
- Initial pkcs policy module
- Initial cfengine policy module
- Initial keystone policy module
- Initial l2tp policy module
- Initial mongodb policy module
- cfengine whitespace cleanup
- Changes to the accountsservice policy module
- Changes to the acct policy module
- Changes to the ada policy module
- changes to the afs policy module
- Changes to the accountsservice policy module
- Changes to the aiccu policy module
- Changes to the aide policy module
- Syntax error in afs_admin()
- Changes to the aisexec policy module
- Changes to the alsa policy module
- Changes to the amanda policy module
- Changes to the amavisd policy module and relevant dependencies
- Changes to the amtu policy module
- Changes to the anaconda policy module
- Changes to the abrt policy module and relevant dependencies
- numad sends/receives msgs from Fedora
- Amtu executable file in installed in /usr/sbin in Fedora
- The (usr/)? expression does not work consistently so better not use it
- at all
- Changes to the httpd policy module
- Merge branch 'master' of
- ssh://dgrift@oss.tresys.com/home/git/refpolicy-contrib
- Fixes to the apache policy module and dependencies
- Changes to the apcupsd policy module
- Role attributes for lightsquid application domain
- Changes to the mailscanner module
- Changes to the svnserve policy module
- Changes to the quantum policy module
- Changes to the dspam module
- Changes to the ctdb policy module
- Changes to the couchdb policy module
- Changes to the openhpid policy module
- Changes to the keystone policy module
- Changes to the l2tp policy module
- Changes to the apm module and relevant dependencies
- Changes to the arpwatch policy module
- Changes to the apcupsd policy module
- Changes to the abrt policy module
- Changes to the apache policy module
- Changes to the asterisk policy module and dependencies
- Changes to the authbind policy module
- Changes to the automount policy module
- Change acpid lock file context spec
- Changes to the avahi policy module and dependencies
- Changes to the awstats policy module
- Changes to the bacula policy module
- Changes to the bcfg2 policy module
- Changes to the apt policy module
- Changes to the apache policy module
- Changes to the backup module
- Changes to the bind policy module
- Bird module clean up
- Fix arpwatch connected_stream_socket_perms
- Changes to the bitlbee policy module
- Changes to the blueman policy module
- Changes to the bluetooth policy module
- Changes to the brctl policy module
- Changes to the apache policy module
- Changes to the bugzilla policy module
- Changes to the calamaris policy module
- Implement lightsquid_admin()
- Changes to the apache policy module and dependencies
- Initial boinc policy module
- Initial callweaver policy module
- Changes to the canna policy module
- Changes to the ccs policy module
- Changes to the cdrecord policy module
- Changes to the certmaster policy module and various role attribute fixes
- cdrecord needs to read and write callers unix domain stream socket not
- create it
- Changes to the certmonger policy module and its dependencies
- Initial cachefilesd policy module
- Changes to the certwatch policy module
- Changes to the chronyd policy module
- Changes to the cipe policy module
- Changes to the clamav policy module
- Various network clean up
- Add dev_rw_cachefiles() to cachefilesd policy module
- Changes to the clockspeed policy module
- Changes to the clogd policy module
- Changes to the cmirrord policy module
- Changes to the cobbler policy module
- Changes to the colord policy module
- Changes to the comsat policy module
- Initial collectd policy module
- Initial condor policy module and relevant dependencies
- Changes to the consolekit policy module and relevant dependencies
- Changes to the corosync policy module and relevant dependencies
- Clean up couchdb network rules
- Changes to the courier policy module
- Changes to the cpucontrol policy module
- Changes to the cpufreqselector policy module
- Changes to the cron policy module and relevant dependencies
- Changes to the cups policy module and relevant dependencies
- Changes to the cvs policy module
- Remove redundant connect avperms
- Changes to the cyphesis policy module
- Remove redundant rules from apache_admin()
- Changes to the cyrus policy module
- Changes to the daemontools policy module
- Changes to the dante policy module
- Modify dbadm boolean descriptions
- Changes to the dbus policy module and its dependencies
- Changes to the dcc policy module
- Changes to the ddclient policy module
- Changes to the ddcprobe policy module
- Changes to the denyhosts policy module
- Changes to the devicekit policy module and relevant dependencies
- Changes to the dhcpd policy module
- Changes tothe dictd policy module
- Changes to the discc policy module
- Changes to the djbdns policy module
- Changes to the dkim policy module
- Changes to the dmidecode policy module
- Module bump for Laurent Bigonville trousers init script file context
- specification fix
- Module bump for Laurent Bigonville libvirt init script file context
- specification fix
- Changes to the dnsmasq policy module and relevant dependencies
- Changes to the dovecot policy module
- Changes to the dpkg policy module
- Changes to the entropyd policy module
- Changes to the evolution policy module
- Changes to the exim policy module and relevant dependencies
- Changes to the cron policy module
- Changes to the fail2ban policy module
- fcoemon XML clean up
- Changes to the fetchmail policy module
- Changes to the fingerd policy module
- Initial firewalld policy module
- Changes to the firstboot policy module
- Changes to the fprint policy module and relevant dependencies
- Changes to the ftp module
- Changes to the games policy module
- Clean up evolution and cdrecord XML
- Changes to the gatekeeper policy module
- Changes to the gift policy module
- Changes to the git policy module
- Changes to the gitosis policy module
- Changes to the glance policy module
- Initial glusterfs policy module
- Add gatekeeper newline
- Deprecate glusterd_admin() use glusterfs_admin() instead
- Portage module version bump for autofs support by Matthew Thode and
- clean up
- cfengine: This location is now labeled with a cfengine private type
- Changes to the slpd policy module
- Changes to the gnomeclock policy module and relevant dependencies
- Changes to the gpg policy module
- Changes to the gpm policy module
- Changes to the gpsd policy module and relevant dependencies
- changes to the guest policy module
- Changes to the gnomeclock policy module
- Deprecate various DBUS interfaces and relevant dependencies
- Changes to the cachefilesd policy module
- Remove file context specification for kgpg which is a GUI frontend to
- GPG. Domain transition to gpg_t will happen when kgpg runs gpg.
- (rhbz#862229)
- Initial mandb policy module
- Changes to the hadoop policy module
- Changes to the hald policy module
- Changes to the hddtemp policy module
- Changes to the howl policy module
- changes to the mandb policy module
- Changes to the dbus policy module
- Changes to the rpm policy module
- Changes to the i18n_input policy module
- Changes to the icecast policy module
- Changes to the ifplugd policy module
- Changes to the imaze policy module
- Changes to the inetd policy module and relevant dependencies
- Changes to the innd policy module
- Changes to the irc policy module
- Changes to the ircd policy module
- Changes to the irc policy module
- Changes to the dbus policy module
- Changes to the avahi policy module
- Changes to the bluetooth policy module
- Changes to the aiccu policy module
- Changes to the bacula policy module
- Changes to the boinc policy module
- Changes to the bugzilla policy module
- Changes to the ccs policy module
- Changes to the clamav policy module
- Changes to the cobbler policy module
- Changes to the cyphesis policy module
- Changes to the dante policy module
- Changes to the dbskk policy module
- Changes to the ddclient policy module
- Changes to the denyhosts policy module
- Changes to the dnssectrigger policy module
- Changes to the dovecot policy module
- Changes to the drbd policy module
- Changes to the evolution policy module
- Changes to the fail2ban policy module
- Changes to the firewalld policy module
- Changes to the firstboot policy module
- Changes to the games policy module
- Changes to the gift policy module
- Changes to the glance policy module
- Changes to the hald policy module
- Changes to the dbus policy module
- Changes to the git policy module
- Changes to the polipo policy module
- Changes to the firewalld policy module
- Changes to the gpg policy module
- Tab clean up in ircbalance file context file
- Changes to the irqbalance policy module
- Tab clean up in iscsi file context file
- Changes to the iscsi policy module
- Tab clean up in jabber file context file
- Changes to the jabberd policy module
- Changes to the pyicqt policy module
- Tab clean up in java file context file
- Changes to the java policy module
- Changes to the dbus policy module
- Changes to the gnome policy module
- Changes to the apache policy module
- Changes to the accountsd policy module
- Changes to the alsa policy module
- Changes to the evolution policy module
- Changes to the bluetooth policy module
- Changes to the games policy module
- Changes to the gift policy module
- Changes to the gpg policy module
- Changes to the hadoop policy module
- Tab clean up in kdump file context file
- Changes to the kdump policy module
- Changes to the gpg policy module
- Changes to the dbus policy module
- Changes to the evolution policy module
- Changes to the gpm policy module
- Version bump for evolution file context fixes by Laurent Bigonville
- Version bump for nut file context fixes by Laurent Bigonville
- Changes to the kdumpgui policy module
- Tab clean up in kerberos file context file
- Changes to the kerberos policy module and relevant dependencies
- Changes to the kerneloops policy module
- Tab clean up in kerberos file context file
- Changes to the kismet policy module
- Clean up amavis XML header
- Initial keyboardd policy module
- Tab clean up in ksmtuned file context file
- Changes to the ksmtuned policy module
- Tab clean up in ktalk file context file
- Changes to the ktalk policy module
- Changes to the kudzu policy module
- Initial iodine policy module
- Initial dirmngr policy module
- Changes to the iodine policy module
- Changes to the kerberos policy module
- Changes to the kdumpgui policy module
- Update deprecated interface calls ( gnome_read_config ->
- gnome_read_generic_home_content )
- Changes to the mozilla policy module
- Changes to the thunderbird policy module
- Changes to the l2tp policy module
- Tab clean up in ldap file context file
- Changes to the ldap policy module
- Tab clean up in likewise file context file
- Changes to the likewise policy module
- Tab clean up in lircd file context file
- Changes to the lircd policy module
- Changes to the livecd policy module
- Tab clean up in loadkeys file context file
- Changes to the loadkeys policy module and relevant dependencies
- Tab clean up in lockdev file context file
- Changes to the lockdev policy module
- Tab clean up in logrotate file context file
- Changes to the logrotate policy module and relevant dependencies
- Tab clean up in logwatch file context file
- Changes to the logrotate policy module
- Changes to the logwatch policy module
- Tab clean up in lpd file context file
- Changes to the lpd policy module
- Tab clean up in cron policy module
- Changes to the lpd policy module
- Changes to the consolekit policy module
- Tab fix in cron policy module
- Tab clean up in mailman file context file
- Changes to the mailman policy module and relevant dependencies
- Tab clean up in mcelog file context file
- Changes to the mcelog policy module
- Tab clean up in mediawiki file context file
- Mediawiki XML clean up
- Tab clean up in memcached file context file
- Changes to the memcached policy module
- Changes to the apache policy module
- Tab clean up in milter file context file
- Changes to the milter policy module and relevant dependencies
- Changes to the modemmanager policy module
- Tab clean up in mojomojo file context file
- Changes to the mojomojo policy module and relevant dependencies
- Changes to the gpg policy module
- Changes to the mongodb policy module
- Changes to the mono policy module
- Changes to the monop policy module
- Tab clean up in mozilla file context file
- Changes to the mozilla policy module and relevant dependencies
- Changes to the mozilla policy module
- Changes to the apache policy module
- Tab clean up in mpd file context file
- Changes to the mpd policy module
- Tab clean up in mplayer file context file
- Changes to the evolution policy module
- Changes to the mplayer policy module
- Changes to the irc policy module
- Tab clean up in mrtg file context file
- Changes to the mrtg policy module
- Tab clean up in mta file context file
- Changes to the mta policy module and relevant dependencies
- Changes to the mta policy module and relevant dependencies
- Get rid of mozilla_conf_t as it is unused
- Changes to the logrotate policy module
- Changes to the logwatch policy module
- Changes to the java policy module
- Changes to the apache module and relevant dependencies
- Tab clean up in munin file context file
- Changes to the munin policy module and relevant dependencies
- Tab clean up in mysql file context file
- Changes to mysqld policy module
- Changes to various policy modules
- Changes to the munin policy module
- Changes to the dovecot policy module
- Changes to various policy modules
- Changes to the mta policy module
- Changes to the certmonger policy module and relavant dependencies
- Tab clean up in nagios file context file
- Changes to the nagios policy module and relevant dependencies
- Changes to the modutils policy module
- Tab cleanup in the nessus file context file
- Changes to the nessus policy module
- Tab clean up in the network manager file context file
- Changes to the networkmanager policy module and relevant dependencies
- Changes to the mozilla policy module
- Changes to the cobbler policy module
- Initial rngd policy module
- Tab clean up in the nis file context file
- Changes to the nis policy module
- Tab clean up in the nscd file context file
- Changes to the nscd policy module
- Tab clean up in the nsd file context file
- Changes to the nsd policy module
- Tab clean up in the nslcd file context file
- Changes to the nslcd policy module
- Tab clean up in the ntop file context file
- Changes to the ntop policy module
- Tab clean up in the ntp file context file
- Changes to the ntp policy module
- Changes to the numad policy module
- Tab clean up in the nut file context file
- Changes to the nut policy module
- Tab clean up in the nx file context file
- Changes to the nx policy module
- Changes to the oav policy module
- Initial obex policy module
- Tab clean up in the oddjob file context file
- Tab clean up in gpg policy module
- Changes to the oddjob policy module
- Changes to the mozilla policy module
- Initial pacemaker policy module
- Tab clean up in the oidentd file context file
- Changes to the oident policy module
- Tab clean up in the openca file context file
- Changes to the openca policy module
- Tab clean up in the openct file context file
- Changes to the openct policy module
- Tab clean up in the openvpn file context file
- Changes to the openvpn policy module
- Tab clean up in the pads file context file
- Changes to the pads policy module
- Tab clean up in the passenger file context file
- Changes to the passenger policy module and relevant dependencies
- Tab clean up in the pcmcia file context file
- Changes to the pcmcia policy module
- Tab clean up in the pcscd file context file
- Changes to the pcscd policy module and relevant dependencies
- Tab clean up in the pegasus file context file
- Changes to the pegasus policy module
- Tab clean up in the perdition file context file
- Changes to the perdition policy module
- Tab clean up in the pingd file context file
- Changes to the pingd policy module
- Changes to the plymouthd policy module
- Changes to the mozilla policy module
- Changes to the plymouth policy module
- Tab clean up in the podsleuth file context file
- Changes to the podsleuth policy module
- Tab clean up in the policykit file context file
- Changes to the policykit policy module and relevant dependencies
- Tab clean up in the portage file context file
- Changes to the portage policy module
- Tab clean up in the portmap file context file
- Changes to the portmap policy module
- Tab clean up in the portreserve file context file
- Changes to the portreserve policy module
- Tab clean up in the portslave file context file
- Changes to the portslave policy module and relevant dependencies
- Tab clean up in the postfix file context file
- Changes to the postfix policy module and relevant dependencies
- Fixes to various policy modules
- Tab clean up in the postfixpolicyd file context file
- Changes to the postfixpolicyd policy module
- Tab clean up in the postgrey file context file
- Changes to the postgrey policy module
- Tab clean up in the ppp file context file
- Changes to the ppp policy module and relevant dependencies
- Tab clean up in the prelink file context file
- Changes to the prelink policy module and relevant dependencies
- Tab clean up in the prelude file context file
- Changes to the prelude policy module
- Tab clean up in the privoxy file context file
- Changes to the privoxy policy module
- Tab clean up in the procmail file context file
- Changes to the procmail policy module
- Tab clean up in the psad file context file
- Changes to the psad policy module
- Changes to the ptchown policy module
- Tab clean up in the publicfile file context file
- Changes to the publicfile policy module
- Fix a fatal syntax error in mozilla_plugin_role()
- Changes to the plymouth policy module
- Changes to the policykit policy module
- Module version bump for fixes in shorewall, fail2ban and portage policy
- modules by Sven Vermeulen
- Tab clean up in the puppet file context file
- Changes to ther puppet policy module and relevant dependencies
- Initial pwauth policy module
- Tab clean up in the pxe file context file
- Changes to the pxe policy module
- Tab clean up in the pyzor file context file
- Changes to the pyzor policy module
- Tab clean up in the qemu file context file
- Changes to the qemu policy module
- Tab clean up in the virt file context file
- Changes to the virt policy module and relevant depedencies
- Changes to the virt policy module
- Changes to the cron policy module
- Changes to the qemu policy module
- Changes to the virt policy module
- Epylog wants sys_nice and setsched
- Tab clean up in the qmail file context file
- Changes to the qmail policy module
- Tab clean up in the qpid file context file
- Changes to the qpid policy module
- Tab clean up in the quota file context file
- Changes to the quota policy module and relevant dependencies
- Initial rabbitmq policy module
- Tab clean up in the radius file context file
- Changes to the radius policy module
- Tab clean up in the radvd file context file
- Changes to the radvd policy module
- Changes to the raid policy module
- Tab clean up in the razor file context file
- Changes to the razor policy module and relevant dependencies
- Smokeping cgi needs to run ping with a domain transition Remove
- redundant socket create already provided by
- sysnet_dns_name_resolve()
- Changes to the virt policy module
- Changes to the apache policy module
- Changes to the gnome policy module
- Changes to the rdisc policy mpdule
- Changes to the readahead policy module
- Changes to the remotelogin policy module
- Tab clean up in the resmgr file context file
- Changes to the resmgr policy module
- Tab clean up in the rgmanager file context file
- Changes to the rgmanager policy module
- Initial Realmd policy module and relevant dependencies
- Fix resmgrd init script file context specification
- Changes to the cups policy module
- automount reads overcommit_memory
- Changes to the networkmanager policy module
- Freshclam manages amavis spool content
- Changes to the tftp policy module
- Changes to the cobbler policy module
- Tab clean up in the rhcs file context file
- Changes to the rhcs policy module and relevant dependencies
- Tab clean up in the rhgb file context file
- Changes to the rhgb policy module
- Tab clean up in the rhsmcertd file context file
- Changes to the rhsmcertd policy module
- Tab clean up in the ricci file context file
- Changes to the ricci policy module
- Tab clean up in the rlogin file context file
- Changes to the rlogin policy module
- Tab clean up in the roundup file context file
- Changes to the roundup policy module
- Changes to the remotelogin policy module
- Changes to the apache policy module
- Changes to the awstats policy module
- fix puppet_admin() need to require types that it uses
- Replace wrong type in puppet_admin()
- Fix a syntax error in ricci_domtrans()
- Catch all rpcbind content in /var/run
- Changes to the cups policy module
- Tab clean up in the rpc file context file
- Changes to the rpc policy module
- Tab clean up in the rpcbind file context file
- Changes to the rpcbind policy module
- Tab clean up in the rpm file context file
- Changes to the rpm policy module and depedencies
- Changes to the rshd policy module
- Changes to the virt policy module
- Changes to the rssh policy module
- Tab clean up in the rsync file context file
- Fix a typo in apache XML
- Changes to the rsync policy module
- Changes to the rtkit policy module
- Tab clean up in the rwho file context file
- Changes to the rwho policy module
- Reads /proc/sys/kernel/random/poolsize
- Tab clean up in the samba file context file
- Changes to the samba policy module and relevant dependencies
- Tab clean up in the sambagui file context file
- Changes to the sambagui policy module
- Initial firewallgui policy module
- Tab clean up in the samhain file context file
- Changes to the samhain policy module
- Tab clean up in the sanlock file context file
- Changes to the sanlock policy module and relevant dependencies
- Tab clean up in the sasl file context file
- Changes to the sasl policy module
- Chnages to the sblim policy module
- Tab clean up in the screen file context file
- Changes to the screen policy module
- Tab clean up in the sectoolm file context file
- Changes to firewallgui policy module
- Changes to the sectoolm policy module
- Tab clean up in the sendmail file context file
- Changes to the sendmail policy module and relevant dependencies
- Tab clean up in the setroubleshoot file context file
- Changes to the setroubleshoot policy module
- Tab clean up in the shorewall file context file
- Changes to the shorewall policy module
- Tab clean up in the shutdown file context file
- Changes to the shutdown policy module and relevant dependencies
- Tab clean up in the slocate file context file
- Changes to the slocate policy module and relevant dependencies
- These domains transition to shutdown domain now so they no longer need
- direct access
- Re-add missing network rule in screen policy module
- fail2ban server sets scheduler
- shutdown XML clean up
- libvirtd sets kernel scheduler
- mongod reads cpuinfo_max_freq
- Changes to the slrnpull policy module
- Tab clean up in the smartmon file context file
- Changes to the smartmon policy module
- Tab clean up in the smokeping file context file
- Changes to the smokeping policy module
- Tab clean up in the smoltclient file context file
- Changes to the smoltclient policy module
- Tab clean up in the snmp file context file
- Changes to the snmp policy module
- Tab clean up in the snort file context file
- Changes to the snort policy module
- Changes to the sosreport policy module and relevant dependencies
- Tab clean up in the soundserver file context file
- Changes to the soundserver policy module
- Tab clean up in the spamassassin file context file
- Changes to the spamassassin policy module and relevant dependendies
- spamassassin_role callers create ~/.spamd with the spamd_home_t user
- home type instead
- Re-add sys_admin capability that was lost with porting from Fedora
- Move mailscanner content to mailscanner module
- Changes to the speedtouch policy module
- Tab clean up in the squid file context file
- Changes to the squid policy module
- Changes to the sssd policy module
- Tab clean up in the stunnel file context file
- Changes to the stunnel policy module
- Tab clean up in the sxid file context file
- Changes to the sxid policy module
- Tab clean up in the sysstat file context file
- Changes to the sysstat policy module
- Tab clean up in the tcpd file context file
- Changes to the tcpd policy module
- Changes to the tcsd policy module
- Tab clean up in the telepathy file context file
- Changes to the telepathy policy module
- Tab clean up in the telnet file context file
- Changes to the telnet policy module
- Tab clean up in the tftp file context file
- Changes to the tftp policy module
- Tab clean up in the tgtd file context file
- Changes to the tgtd policy module
- Tab clean up in the thunderbird file context file
- Changes to the thunderbird policy module
- Catch /var/log/cron directory as well
- Dovecot module version bump for fixes by Sven Vermeulen
- Portage module version bump for fixes by Sven Vermeulen
- Cron module version bump for fixes by Sven Vermeulen
- Changes to the exim policy module
- Entropyd reads /proc/meminfo
- Blueman reads tmp_t directories
- Do not audit attempts by cups config to read tmp_t directories
- Do not audit attempts by fail2ban to read tmp_t directories
- Do not audit attempts by firewalld to read tmp_t directories
- Gnomeclock reads urandom and realtime clock
- Kdumpctl needs sys_chroot capability
- Various kdumpgui fixes from Fedora
- Do not audit attempts by logwatch to read tmp_t directories
- Catch all alias files
- Refine aliases file transition with names
- Realmd dbus chat policykit and networkmanager from Fedora
- Do not audit attempts by tuned to read tmp_t directories
- Changes to the timidity policy module
- Tab clean up in the tmpreaper file context file
- Changes to the tmpreaper policy module and relevant dependencies
- Tab clean up in the tor file context file
- Changes to the tor policy module
- Changes to the transproxy policy module
- Tab clean up in the tripwire file context file
- Changes to the tripwire policy module
- Tab clean up in the tuned file context file
- Changes to the tuned policy module
- Tab clean up in the tvtime file context file
- Changes to the tvtime policy module
- Changes to the tzdata policy module
- Changes to the ucspitcp policy module
- Tab clean up in the ulogd file context file
- Changes to the ulogd policy module
- Tab clean up in the uml file context file
- Changes to the uml policy module
- Make it so that irc clients can also get attributes of cifs, nfs, fuse
- and other file systems
- Changes to the updfstab policy module
- Changes to the uptime policy module
- Tab clean up in the usbmodules file context file
- Changes to the usbmodule policy module
- Changes to the usbmuxd policy module
- Tab clean up in the userhelper file context file
- Screen sends child terminated signals to all interactive fd domains
- Changes to the userhelper policy module and relevant dependencies
- Changes to the virt policy module
- Module version bump for fail2ban changes by Sven Vermeulen
- Changes to the rpm policy module
- fix smartmon init script file context specification
- Changes to the usernetctl policy module
- Tab clean up in the uucp file context file
- Changes to the uucp policy module
- Changes to the virt policy module
- Tab clean up in the uuid file context file
- Changes to the uuidd policy module
- Tab clean up in the uwimap file context file
- Changes to the uwimap policy module
- Tab clean up in the varnishd file context file
- Changes to the varnishd policy module
- Changes to the vbetool policy module
- Tab clean up in the vdagent file context file
- Changes to the vdagent policy module
- Tab clean up in the vhostmd file context file
- Changes to the vhostmd policy module
- Changes to the vlock policy module
- Tab clean up in the vmware file context file
- Changes to the vmware policy module
- Tab clean up in the vnstatd file context file
- Changes to the vnstatd policy module
- Tab clean up in the vpn file context file
- Changes to the vpnc policy module
- Tab clean up in the w3c file context file
- Changes to the w3c policy module
- Tab clean up in the watchdog file context file
- Changes to the watchdog policy module
- Changes to the wdmd policy module
- Changes to the webadm policy modules
- Changes to the webalizer policy module
- White space fix in apache policy module
- Changes to the wine policy module
- Tab clean up in the wireshark file context file
- Changes to the wireshark policy module
- Tab clean up in the wm file context file
- Changes to the wm policy module
- Changes to the inn policy module
- Move man cache file type to miscfiles
- Changes to the inn policy module
- More accurate dbadm boolean descriptions
- mysql_admin() has access to ~/.my.cnf files
- Tab clean up in the xen file context file
- Changes to the xen policy module and relevant dependencies
- Tab clean up in the xfs file context file
- Changes to the xfs policy module
- Changes to the xguest policy module and relevant dependencies
- Changes to the xprint policy module
- Changes to the xscreensaver policy module
- Tab clean up in the yam file context file
- Changes to the yam policy module
- Tab clean up in the zabbix file context file
- Changes to the zabbix policy module
- Tab clean up in the zarafa file context file
- Changes to the zarafa policy module
- Tab clean up in the zebra file context file
- Changes to the zebra policy module
- Changes to the zosremote policy module
- Changes to the mysql policy module
- Tab clean up in the pulseaudio file context file
- Changes to the pulseaudio policy module and relevant dependencies
- Changes to the pulseaudio policy module
- One chown too many
- Changes to the mplayer policy module
- The prelink cron script now runs in its own domain
- Initial smstools policy module
- Initial openvswitch policy module and relevant dependencies
- Reads pcsd pid files
- Reads random device
- winbind manages smbd pid sock files from Fedora
- Changes to the bind policy module
- CG rules daemon reads all sysctls
- Runs consoletype and searches nfs state data from Fedora
- Support munin unbound plugin from Fedora
- Zabbix sends signals from Fedora
- Blueman sets scheduler and sends signals from Fedora
- pcscd_read_pub_files is deprecated, use pcscd_read_pid_files instead
- Module version bumps for fixes in portage and virt modules by Sven
- Vermeulen
- Policy module version bumps for various changes by Sven Vermeulen
- Changes to the openvpn policy module
- Module version bumps for various fixes by Sven Vermeulen
- Changes to the mandb policy module
- Changes to the tmpreaper policy module
- Changes to the munin policy module
- Changes to the rngd policy module
- Changes to the awstats policy module and relevant dependencies
- Changes to the apache policy module
- Changes to various policy modules
- Changes to the abrt policy module
- Changes to the passenger policy module and relevant depedencies
- Changes to the pegagus policy module
- Changes to the mta policy module
- Changes to the fetchmail policy module
- Changes to the bitlbee policy module
- Changes to the blueman policy module and relevant dependencies
- Changes to the amavis policy module
- Changes to the userhelper policy module
- Changes to the blueman policy module
- Changes to the squid policy module
- Changes to the sblim policy module
- Changes to the kdumpgui policy module
- Changes to the mailman policy module
- Changes to the realmd policy module
- Changes to the raid policy module
- Changes to the samba policy module
- Changes to the various policy modules
- Changes to the snmp policy module
- Changes to the spamassassin policy module
- Changes to the sssd policy module
- Changes to the l2tpd policy module
- Changes to the shorewall policy module
- Changes to the xen policy module
- Changes to the tftp policy modules
- Changes to the accountsd policy module
- Changes to the tgtd policy module
- Changes to the corosync policy module
- Changes to the kdump policy module
- Changes to the openvswitch policy module
- Changes to the mpd policy module
- Changes to the mozilla policy module
- Changes to the zarafa policy module
- Changes to the boinc policy module
- Changes to the setroubleshoot policy module
- Changes to the dspam policy module
- Changes to the rgrmanager policy module and relevant dependencies
- Changes to the svnserve policy module
- Changes to the virt policy module
- Changes to the prelink policy module
- Changes to the apache policy module
- Changes to the gnomeclock policy module
- Changes to various policy modules
- Changes to the pegagus policy module
- Changes to the shorewall policy module
- Changes to the kerberos policy module
- Changes to the rhcs policy module
- Changes to the irc policy module
- Changes to the clamav policy module
- Changes to the mrtg policy module
- Changes to the munin policy module
- Changes to the amavis policy module
- Changes to the ppp policy module
- Initial jockey policy module
- Module version bumps for "several named transition for directories
- created in /var/run by initscripts" in various modules by Laurent
- Bigonville
- Module version bumps for fixes in various modules by Laurent Bigonville
- Module version bump for changes to the consolekit policy module by
- Laurent Bigonville
- Changes to the stunnel policy module
- Module version bumps for fixes in various modules by Sven Vermeulen
- Changes to the virt policy module
- Changes to the apache policy module
- Changes to the wm policy module
- Changes to the samba policy module
- Changes to the certmonger policy module
- Changes to the mozilla policy module
- Changes to the corosync policy module
- Changes to the pacemaker policy module
- Changes to the tuned policy module
- Changes to the cups module and relevant dependencies
- Changes to the rhsmcertd policy module
- Changes to the lpd policy module
- Changes to the munin policy module
- Changes to the ntp policy module
- Changes to the tor policy module
- Changes to the firewalld policy module
- Changes to the dspam policy module
- Changes to the setroubleshoot policy module
- Changes to the condor policy module
- Changes to the kerberos policy module
- Changes to the passenger policy module
- Changes to the ppp policy module
- Changes to the the dkim policy module
- Changes to the abrt policy module
- Changes to the lircd policy module
- Changes to the dkim policy module
- Changes to the virt policy module
- Changes to the munin policy module
- Changes to the dovecot policy module
- Changes to the cobbler policy module
- Changes to the userhelper policy module
- Changes to the logwatch policy module
- Changes to the wdmd policy module and relevant dependencies
- Changes to the nscd policy module and relevant dependencies
- Changes to the dbus policy module
- Module version bumps for fixes in various policy modules by Laurent
- Bigonville
- Changes to the cups policy module
- Changes to the dbus policy module
- Changes to the apcupsd policy module
- Remove redundant net_bind_service capabilities in various modules
- Changes to the virt policy module
- Changes to the puppet policy module
- Module version bumps for fixes in various policy module by Sven
- Vermeulen
- Module version bumps for file context fixes in various policy modules by
- Laurent Bigonville
- Make httpd_manage_all_user_content() do what it advertises
- Add more networking rules to mplayer policy module for compatibility
- Fix fcronsighup file context. Should be crontab_exec_t as per previous
- spec
- Module version bumps for changes in various modules by Sven Vermeulen
- Move asterisk_exec() and modify XML header
- Consolekit creates /var/run/console directories with a type transition
- unconditionally
- Module version bump in consolekit policy module for changes by Sven
- Vermeulen
- The imaplogin executable file should be courier_pop_exec_t according to
- existing file context specification
- Module version bump for changes to the fail2ban policy module by Sven
- Vermeulen
- Modules version bumps for changes in various policy modules by Sven
- Vermeulen
-
-Laurent Bigonville (28):
- Add Debian locations for Telepathy connection managers
- Label telepathy-rakia as telepathy-sofiasip
- Allow smartd daemon to write in /var/lib/smartmontools directory
- Add Debian location for smartd daemon initscript
- Add Debian location for accounts-daemon daemon
- Add Debian location for rtkit-daemon daemon
- Add Debian location for tcsd init script
- Add Debian location for libvirtd init script
- Add Debian location for evolution executables
- Add Debian locationis for nut executables and configuration files
- Add several named transition for directories created in /var/run by
- initscripts
- Run packagekit under apt_t context on Debian distribution
- Add proper label for colord daemon in debian
- Allow the system dbus to search cgroup directories
- Allow virtd_t context to read sysctl_crypto_t
- Allow colord_t context to read sysctl_crypto_t
- Add proper label for gconfd-2 daemon in Debian
- Ensure that consolekit can create /var/run/console directory on Debian
- Properly label nm-dispatcher.action on Debian
- policykit.fc: Properly label polkit-agent-helper-1 on Debian
- cups.fc: Properly label cups-pk-helper-mechanism on Debian
- Allow pcscd the fsetid capability
- Allow networkmanager_t to read crypto_sysctl_t
- Allow virsh_t context to read sysctl_crypto_t
- Allow cupsd_t to read cupsd_log_t
- gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian
- ptchown.fc: Properly label pt_chown executable in Debian
- Label /usr/bin/kvm as qemu_exec_t
-
-Matthew Thode (2):
- added autofs support and nsswitch support
- removing refrences to named_var_lib_t as it doesn't exist anymore for
- bind.if
-
-Mika Pflüger (3):
- Allow saslauthd_t to talk to mysqld via TCP
- Quota policy adjustments: * Allow quota_t to load kernel modules
- Debian locations for dovecot deliver and dovecot auth.
-
-Russell Coker (1):
- Fix djbdns ports
-
-Sven Vermeulen (75):
- Update with new substitutions
- Mark the pid directory as a pid directory
- Add in transitions for queue types when the queues are created
- Fix typo in interface postfix_exec_postqueue
- Allow maildelivery to use dotlock files in the mail spool
- Allow postfix local to change ownership of mailfiles
- Use libexec location for postfix binaries
- Allow initrc_t to create run dirs for contrib modules
- Update logwatch location in file context
- Sandbox is an inherent part of the portage inner workings
- Fix startup issue with fail2ban-client
- Be able to get output from fail2ban-client
- Ignore searches when ran from the user home directory
- Shorewall admins execute shorewall too
- Shorewall needs sys_admin capability for manipulating network stack
- Be able to display dovecot errors
- Remove transition to ldconfig
- Adding interfaces for handling cron log files
- Fail2ban client checks state of log files before telling the server
- Support mysql init script
- Support initial creation of mysql database files
- Portage fetch domain needs to access certificates
- Make samba domtrans optional in virt
- Fix typo in tunable declaration for fcron_crond
- Introducing cron_manage_log_files interface
- Introduce dontaudit interfaces for leaked fd and unix stream sockets
- Dontaudit attempts by system_mail_t to use leaked fd or stream sockets
- Support at service
- Additional postfix admin requirements
- Reintroduce postfix_var_run_t for pid directory and fowner capability
- Postfix deferred queue should not mark mails as postfix_spool_maildrop_t
- Running qemu with SDL support requires more xserver-related privileges
- Fix typo in clockspeed comment
- Support openvpn status file
- Asterisk voicemail messages are generated from tmp
- Make rtkit calls optional
- Gentoo installs dovecot certs in /etc/ssl/dovecot
- Moving sandbox code to sandbox section (v2)
- Allow sandbox to log violations
- Use rw_fifo_file_perms
- Apache should not depend on gpg
- Named init script creates rundir
- Add ~/.maildir as a valid maildir destination
- Support stunnel_read_config for startup
- Updates on stunnel policy
- More .maildir fixes
- Mark make.profile entry as portage_conf_t (v2)
- Move mta call (coding style)
- Changes to puppet domain
- Allow rpc admin to run exportfs
- Grant sys_admin capability to puppet
- Puppet module helper scripts are puppet_var_lib_t
- Support netlink_route_socket creation for puppet
- Puppet initscript creates /run/puppet
- Puppet runs statfs against selinuxfs
- mplayer streams HTTP resources
- fcron and fcronsighup binaries are moved
- Asterisk needs to search through logs
- Denial in mail log on node bind
- Fix typo in mcelog_admin (missing bracket)
- Add in contexts for fcron rm.systab and systab.tmp
- Remove pulseaudio filename_trans conflict
- Allow asterisk admins to execute asterisk binary directly
- Support tagfiles for consolekit
- ConsoleKit needs to read the dbus machine-id
- File context updates for courier-imap
- Update on file contexts for OpenLDAP
- Update on file contexts for wpa_supplicant
- Allow IRC clients to read certificates
- Allow reading /proc/self for fail2ban due to FAM support
- Update file contexts for puppet
- Support ~/.tmux.conf as tmux configuration file
- Add setuid/setgid capability to ulogd_t
- Support tmux control socket
- Postfix creates defer(red) queue locations
-
diff --git a/policy/modules/contrib/metadata.xml b/policy/modules/contrib/metadata.xml
deleted file mode 100644
index 71d9e256..00000000
--- a/policy/modules/contrib/metadata.xml
+++ /dev/null
@@ -1 +0,0 @@
-<summary>Contributed Reference Policy modules.</summary>
diff --git a/policy/modules/contrib/dbadm.fc b/policy/modules/roles/dbadm.fc
index e6aa2fba..e6aa2fba 100644
--- a/policy/modules/contrib/dbadm.fc
+++ b/policy/modules/roles/dbadm.fc
diff --git a/policy/modules/contrib/dbadm.if b/policy/modules/roles/dbadm.if
index d9ed6511..d9ed6511 100644
--- a/policy/modules/contrib/dbadm.if
+++ b/policy/modules/roles/dbadm.if
diff --git a/policy/modules/contrib/dbadm.te b/policy/modules/roles/dbadm.te
index b60c464f..b60c464f 100644
--- a/policy/modules/contrib/dbadm.te
+++ b/policy/modules/roles/dbadm.te
diff --git a/policy/modules/contrib/guest.fc b/policy/modules/roles/guest.fc
index 601a7b02..601a7b02 100644
--- a/policy/modules/contrib/guest.fc
+++ b/policy/modules/roles/guest.fc
diff --git a/policy/modules/contrib/guest.if b/policy/modules/roles/guest.if
index ad1653f9..ad1653f9 100644
--- a/policy/modules/contrib/guest.if
+++ b/policy/modules/roles/guest.if
diff --git a/policy/modules/contrib/guest.te b/policy/modules/roles/guest.te
index 19cdbe1d..19cdbe1d 100644
--- a/policy/modules/contrib/guest.te
+++ b/policy/modules/roles/guest.te
diff --git a/policy/modules/contrib/webadm.fc b/policy/modules/roles/webadm.fc
index d46378a0..d46378a0 100644
--- a/policy/modules/contrib/webadm.fc
+++ b/policy/modules/roles/webadm.fc
diff --git a/policy/modules/contrib/webadm.if b/policy/modules/roles/webadm.if
index e1a7350a..e1a7350a 100644
--- a/policy/modules/contrib/webadm.if
+++ b/policy/modules/roles/webadm.if
diff --git a/policy/modules/contrib/webadm.te b/policy/modules/roles/webadm.te
index 2a6cae77..2a6cae77 100644
--- a/policy/modules/contrib/webadm.te
+++ b/policy/modules/roles/webadm.te
diff --git a/policy/modules/contrib/xguest.fc b/policy/modules/roles/xguest.fc
index 601a7b02..601a7b02 100644
--- a/policy/modules/contrib/xguest.fc
+++ b/policy/modules/roles/xguest.fc
diff --git a/policy/modules/contrib/xguest.if b/policy/modules/roles/xguest.if
index 4f1d07d7..4f1d07d7 100644
--- a/policy/modules/contrib/xguest.if
+++ b/policy/modules/roles/xguest.if
diff --git a/policy/modules/contrib/xguest.te b/policy/modules/roles/xguest.te
index 1e7f6433..1e7f6433 100644
--- a/policy/modules/contrib/xguest.te
+++ b/policy/modules/roles/xguest.te
diff --git a/policy/modules/contrib/abrt.fc b/policy/modules/services/abrt.fc
index d05819be..d05819be 100644
--- a/policy/modules/contrib/abrt.fc
+++ b/policy/modules/services/abrt.fc
diff --git a/policy/modules/contrib/abrt.if b/policy/modules/services/abrt.if
index 9d1f00da..9d1f00da 100644
--- a/policy/modules/contrib/abrt.if
+++ b/policy/modules/services/abrt.if
diff --git a/policy/modules/contrib/abrt.te b/policy/modules/services/abrt.te
index 718736b5..718736b5 100644
--- a/policy/modules/contrib/abrt.te
+++ b/policy/modules/services/abrt.te
diff --git a/policy/modules/contrib/accountsd.fc b/policy/modules/services/accountsd.fc
index f9d8d7a9..f9d8d7a9 100644
--- a/policy/modules/contrib/accountsd.fc
+++ b/policy/modules/services/accountsd.fc
diff --git a/policy/modules/contrib/accountsd.if b/policy/modules/services/accountsd.if
index 312d5692..312d5692 100644
--- a/policy/modules/contrib/accountsd.if
+++ b/policy/modules/services/accountsd.if
diff --git a/policy/modules/contrib/accountsd.te b/policy/modules/services/accountsd.te
index 5ae5fa50..5ae5fa50 100644
--- a/policy/modules/contrib/accountsd.te
+++ b/policy/modules/services/accountsd.te
diff --git a/policy/modules/contrib/acpi.fc b/policy/modules/services/acpi.fc
index ffd4ea00..ffd4ea00 100644
--- a/policy/modules/contrib/acpi.fc
+++ b/policy/modules/services/acpi.fc
diff --git a/policy/modules/contrib/acpi.if b/policy/modules/services/acpi.if
index 109b644e..109b644e 100644
--- a/policy/modules/contrib/acpi.if
+++ b/policy/modules/services/acpi.if
diff --git a/policy/modules/contrib/acpi.te b/policy/modules/services/acpi.te
index 3a7320d7..3a7320d7 100644
--- a/policy/modules/contrib/acpi.te
+++ b/policy/modules/services/acpi.te
diff --git a/policy/modules/contrib/afs.fc b/policy/modules/services/afs.fc
index 9307074e..9307074e 100644
--- a/policy/modules/contrib/afs.fc
+++ b/policy/modules/services/afs.fc
diff --git a/policy/modules/contrib/afs.if b/policy/modules/services/afs.if
index d934f454..d934f454 100644
--- a/policy/modules/contrib/afs.if
+++ b/policy/modules/services/afs.if
diff --git a/policy/modules/contrib/afs.te b/policy/modules/services/afs.te
index 9ebe863a..9ebe863a 100644
--- a/policy/modules/contrib/afs.te
+++ b/policy/modules/services/afs.te
diff --git a/policy/modules/contrib/aiccu.fc b/policy/modules/services/aiccu.fc
index 5fc50bec..5fc50bec 100644
--- a/policy/modules/contrib/aiccu.fc
+++ b/policy/modules/services/aiccu.fc
diff --git a/policy/modules/contrib/aiccu.if b/policy/modules/services/aiccu.if
index cd22faa1..cd22faa1 100644
--- a/policy/modules/contrib/aiccu.if
+++ b/policy/modules/services/aiccu.if
diff --git a/policy/modules/contrib/aiccu.te b/policy/modules/services/aiccu.te
index 82c6dff3..82c6dff3 100644
--- a/policy/modules/contrib/aiccu.te
+++ b/policy/modules/services/aiccu.te
diff --git a/policy/modules/contrib/aisexec.fc b/policy/modules/services/aisexec.fc
index 578f2d33..578f2d33 100644
--- a/policy/modules/contrib/aisexec.fc
+++ b/policy/modules/services/aisexec.fc
diff --git a/policy/modules/contrib/aisexec.if b/policy/modules/services/aisexec.if
index 9e1a105a..9e1a105a 100644
--- a/policy/modules/contrib/aisexec.if
+++ b/policy/modules/services/aisexec.if
diff --git a/policy/modules/contrib/aisexec.te b/policy/modules/services/aisexec.te
index dfacbf51..dfacbf51 100644
--- a/policy/modules/contrib/aisexec.te
+++ b/policy/modules/services/aisexec.te
diff --git a/policy/modules/contrib/amavis.fc b/policy/modules/services/amavis.fc
index da86959b..da86959b 100644
--- a/policy/modules/contrib/amavis.fc
+++ b/policy/modules/services/amavis.fc
diff --git a/policy/modules/contrib/amavis.if b/policy/modules/services/amavis.if
index f8a810ce..f8a810ce 100644
--- a/policy/modules/contrib/amavis.if
+++ b/policy/modules/services/amavis.if
diff --git a/policy/modules/contrib/amavis.te b/policy/modules/services/amavis.te
index 9517486e..9517486e 100644
--- a/policy/modules/contrib/amavis.te
+++ b/policy/modules/services/amavis.te
diff --git a/policy/modules/contrib/apache.fc b/policy/modules/services/apache.fc
index f3202453..f3202453 100644
--- a/policy/modules/contrib/apache.fc
+++ b/policy/modules/services/apache.fc
diff --git a/policy/modules/contrib/apache.if b/policy/modules/services/apache.if
index 94878d66..94878d66 100644
--- a/policy/modules/contrib/apache.if
+++ b/policy/modules/services/apache.if
diff --git a/policy/modules/contrib/apache.te b/policy/modules/services/apache.te
index f04ba5c3..f04ba5c3 100644
--- a/policy/modules/contrib/apache.te
+++ b/policy/modules/services/apache.te
diff --git a/policy/modules/contrib/apcupsd.fc b/policy/modules/services/apcupsd.fc
index 43666b34..43666b34 100644
--- a/policy/modules/contrib/apcupsd.fc
+++ b/policy/modules/services/apcupsd.fc
diff --git a/policy/modules/contrib/apcupsd.if b/policy/modules/services/apcupsd.if
index 3dda6345..3dda6345 100644
--- a/policy/modules/contrib/apcupsd.if
+++ b/policy/modules/services/apcupsd.if
diff --git a/policy/modules/contrib/apcupsd.te b/policy/modules/services/apcupsd.te
index 3e4a2465..3e4a2465 100644
--- a/policy/modules/contrib/apcupsd.te
+++ b/policy/modules/services/apcupsd.te
diff --git a/policy/modules/contrib/arpwatch.fc b/policy/modules/services/arpwatch.fc
index 9b0eadc8..9b0eadc8 100644
--- a/policy/modules/contrib/arpwatch.fc
+++ b/policy/modules/services/arpwatch.fc
diff --git a/policy/modules/contrib/arpwatch.if b/policy/modules/services/arpwatch.if
index 63e1b571..63e1b571 100644
--- a/policy/modules/contrib/arpwatch.if
+++ b/policy/modules/services/arpwatch.if
diff --git a/policy/modules/contrib/arpwatch.te b/policy/modules/services/arpwatch.te
index 87aed96f..87aed96f 100644
--- a/policy/modules/contrib/arpwatch.te
+++ b/policy/modules/services/arpwatch.te
diff --git a/policy/modules/contrib/asterisk.fc b/policy/modules/services/asterisk.fc
index 337bf601..337bf601 100644
--- a/policy/modules/contrib/asterisk.fc
+++ b/policy/modules/services/asterisk.fc
diff --git a/policy/modules/contrib/asterisk.if b/policy/modules/services/asterisk.if
index 2e3f5a4b..2e3f5a4b 100644
--- a/policy/modules/contrib/asterisk.if
+++ b/policy/modules/services/asterisk.if
diff --git a/policy/modules/contrib/asterisk.te b/policy/modules/services/asterisk.te
index 2e0a687c..2e0a687c 100644
--- a/policy/modules/contrib/asterisk.te
+++ b/policy/modules/services/asterisk.te
diff --git a/policy/modules/contrib/automount.fc b/policy/modules/services/automount.fc
index dadd3a9f..dadd3a9f 100644
--- a/policy/modules/contrib/automount.fc
+++ b/policy/modules/services/automount.fc
diff --git a/policy/modules/contrib/automount.if b/policy/modules/services/automount.if
index fbaa3220..fbaa3220 100644
--- a/policy/modules/contrib/automount.if
+++ b/policy/modules/services/automount.if
diff --git a/policy/modules/contrib/automount.te b/policy/modules/services/automount.te
index 34922281..34922281 100644
--- a/policy/modules/contrib/automount.te
+++ b/policy/modules/services/automount.te
diff --git a/policy/modules/contrib/avahi.fc b/policy/modules/services/avahi.fc
index 2f72be4a..2f72be4a 100644
--- a/policy/modules/contrib/avahi.fc
+++ b/policy/modules/services/avahi.fc
diff --git a/policy/modules/contrib/avahi.if b/policy/modules/services/avahi.if
index 4652358f..4652358f 100644
--- a/policy/modules/contrib/avahi.if
+++ b/policy/modules/services/avahi.if
diff --git a/policy/modules/contrib/avahi.te b/policy/modules/services/avahi.te
index c9020826..c9020826 100644
--- a/policy/modules/contrib/avahi.te
+++ b/policy/modules/services/avahi.te
diff --git a/policy/modules/contrib/bind.fc b/policy/modules/services/bind.fc
index b4879dc1..b4879dc1 100644
--- a/policy/modules/contrib/bind.fc
+++ b/policy/modules/services/bind.fc
diff --git a/policy/modules/contrib/bind.if b/policy/modules/services/bind.if
index a99bae9c..a99bae9c 100644
--- a/policy/modules/contrib/bind.if
+++ b/policy/modules/services/bind.if
diff --git a/policy/modules/contrib/bind.te b/policy/modules/services/bind.te
index c96d0b82..c96d0b82 100644
--- a/policy/modules/contrib/bind.te
+++ b/policy/modules/services/bind.te
diff --git a/policy/modules/contrib/bird.fc b/policy/modules/services/bird.fc
index d415fdf3..d415fdf3 100644
--- a/policy/modules/contrib/bird.fc
+++ b/policy/modules/services/bird.fc
diff --git a/policy/modules/contrib/bird.if b/policy/modules/services/bird.if
index d744d6b8..d744d6b8 100644
--- a/policy/modules/contrib/bird.if
+++ b/policy/modules/services/bird.if
diff --git a/policy/modules/contrib/bird.te b/policy/modules/services/bird.te
index e525f326..e525f326 100644
--- a/policy/modules/contrib/bird.te
+++ b/policy/modules/services/bird.te
diff --git a/policy/modules/contrib/bitlbee.fc b/policy/modules/services/bitlbee.fc
index e7b0aa60..e7b0aa60 100644
--- a/policy/modules/contrib/bitlbee.fc
+++ b/policy/modules/services/bitlbee.fc
diff --git a/policy/modules/contrib/bitlbee.if b/policy/modules/services/bitlbee.if
index 3409d80d..3409d80d 100644
--- a/policy/modules/contrib/bitlbee.if
+++ b/policy/modules/services/bitlbee.if
diff --git a/policy/modules/contrib/bitlbee.te b/policy/modules/services/bitlbee.te
index b71fff2d..b71fff2d 100644
--- a/policy/modules/contrib/bitlbee.te
+++ b/policy/modules/services/bitlbee.te
diff --git a/policy/modules/contrib/bluetooth.fc b/policy/modules/services/bluetooth.fc
index 4fbe7955..4fbe7955 100644
--- a/policy/modules/contrib/bluetooth.fc
+++ b/policy/modules/services/bluetooth.fc
diff --git a/policy/modules/contrib/bluetooth.if b/policy/modules/services/bluetooth.if
index dc61988c..dc61988c 100644
--- a/policy/modules/contrib/bluetooth.if
+++ b/policy/modules/services/bluetooth.if
diff --git a/policy/modules/contrib/bluetooth.te b/policy/modules/services/bluetooth.te
index 45e5a361..45e5a361 100644
--- a/policy/modules/contrib/bluetooth.te
+++ b/policy/modules/services/bluetooth.te
diff --git a/policy/modules/contrib/boinc.fc b/policy/modules/services/boinc.fc
index e1e53a60..e1e53a60 100644
--- a/policy/modules/contrib/boinc.fc
+++ b/policy/modules/services/boinc.fc
diff --git a/policy/modules/contrib/boinc.if b/policy/modules/services/boinc.if
index 464a8968..464a8968 100644
--- a/policy/modules/contrib/boinc.if
+++ b/policy/modules/services/boinc.if
diff --git a/policy/modules/contrib/boinc.te b/policy/modules/services/boinc.te
index ed1aaf34..ed1aaf34 100644
--- a/policy/modules/contrib/boinc.te
+++ b/policy/modules/services/boinc.te
diff --git a/policy/modules/contrib/bugzilla.fc b/policy/modules/services/bugzilla.fc
index fce0b6eb..fce0b6eb 100644
--- a/