aboutsummaryrefslogtreecommitdiff
path: root/policy
Commit message (Expand)AuthorAgeFilesLines
* Update generated policy and doc filesHEAD2.20190201-r1masterJason Zaman2019-03-252-1229/+3278
* corenetwork: regenerate for query scriptsJason Zaman2019-03-252-116/+556
* authlogin, dbus, ntp: Module version bump.Chris PeBenito2019-03-253-3/+3
* Resolve denial about logging to journal from dbusSugar, David2019-03-251-0/+3
* Resolve denial about logging to journal from chkpwdSugar, David2019-03-251-0/+5
* Allow ntpd to update timezone symlinkSugar, David2019-03-251-0/+1
* Allow ntpd to update chronyd serviceSugar, David2019-03-251-0/+5
* Add interface ntp_dbus_chatSugar, David2019-03-251-0/+21
* sysadm, udev: Module version bump.Chris PeBenito2019-03-252-2/+2
* udev: Move one line and remove a redundant line.Chris PeBenito2019-03-251-3/+2
* udev: Whitespace fix.Chris PeBenito2019-03-251-1/+0
* Separate out udevadm into a new domainSugar, David2019-03-254-3/+107
* systemd, udev, usermanage: Module version bump.Chris PeBenito2019-03-253-3/+3
* usermanage: Move kernel_dgram_send(passwd_t) to systemd block.Chris PeBenito2019-03-251-1/+5
* Resolve denial while changing passwordSugar, David2019-03-251-0/+2
* Allow additional map permission when reading hwdbSugar, David2019-03-252-0/+19
* Remove incorrect comment about capability2:mac_admin.Chris PeBenito2019-03-251-1/+1
* filesystem, cron, authlogin: Module version bump.Chris PeBenito2019-03-252-2/+2
* Update cron use to pam interfaceSugar, David2019-03-252-4/+3
* Add interface to allow relabeling of iso 9660 filesystems.Sugar, David2019-03-251-0/+19
* aide, clamav: Module version bump.Chris PeBenito2019-03-252-2/+2
* Allow AIDE to mmap filesSugar, David2019-03-251-0/+13
* Allow AIDE to read kernel sysctl_crypto_tSugar, David2019-03-251-0/+1
* Allow AIDE to sendto kernel datagram socketSugar, David2019-03-251-0/+2
* Add interfaces to run freshclamSugar, David2019-03-251-0/+64
* Allow freshclam to read sysctl_crypto_tSugar, David2019-03-251-0/+1
* Fix incorrect type in clamav_enableddisable_clamd interfaceSugar, David2019-03-251-2/+2
* systemd: Module version bump.Chris PeBenito2019-03-251-1/+1
* Update systemd-update-done policyNicolas Iooss2019-03-252-3/+8
* logging, selinuxutil: Module version bump.Chris PeBenito2019-03-252-2/+2
* Remove a broad read-files rule for restorecondNicolas Iooss2019-03-251-1/+0
* Allow restorecond to read customizable_typesNicolas Iooss2019-03-251-0/+1
* Allow systemd-journald to use kill(pid, 0) on its clientsNicolas Iooss2019-03-251-0/+5
* logging, miscfiles, authlogin: Module version bump.Chris PeBenito2019-03-253-3/+3
* New interface to dontaudit access to cert_tSugar, David2019-03-252-0/+23
* Add interface to get status of rsyslog serviceSugar, David2019-03-251-0/+19
* init, systemd, cdrecord: Module version bump.Chris PeBenito2019-03-253-3/+3
* systemd: Remove unnecessary brackets.Chris PeBenito2019-03-251-1/+1
* Add interface to run cdrecord in caller domainSugar, David2019-03-251-0/+19
* Allow systemd-hostnamed to set the hostnameSugar, David2019-03-251-0/+2
* Allow init_t to read net_conf_tSugar, David2019-03-251-0/+2
* corenetwork: Module version bump.Chris PeBenito2019-03-251-1/+1
* Add policy for stubby DNS resolverNicolas Iooss2019-03-254-1/+58
* sysadm: Module version bump.Chris PeBenito2019-03-251-1/+1
* sysadm: allow resolving dynamic usersNicolas Iooss2019-03-251-0/+6
* systemd: Module version bump.Chris PeBenito2019-03-251-1/+1
* Separate domain for systemd-modules-loadSugar, David2019-03-252-0/+16
* Allow systemd-networkd to get IP address from dhcp serverSugar, David2019-03-251-0/+2
* Remove upstreamed interface kernel_dontaudit_read_kernel_sysctlsJason Zaman2019-02-102-19/+1
* remove duplicated dev_dontaudit_read_sysfs files_dontaudit_read_etc_filesJason Zaman2019-02-102-40/+0