GitWeb
Get Gentoo!
gentoo.org sites
gentoo.org
Wiki
Bugs
Forums
Packages
Planet
Archives
Sources
Infra Status
Home
Gentoo Repository
Repositories
Projects
Developer Overlays
User Overlays
Data
Websites
index
:
proj/hardened-refpolicy.git
concord-dev
mailinfra
master
secmodel
Gentoo Hardened SELinux reference policy implementation
Sven Vermeulen <swift@gentoo.org>
summary
refs
log
tree
commit
diff
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
Lines
*
Merge upstream
2.20221101-r2
Kenton Groombridge
2022-11-02
1
-1
/
+1
*
Add 'DIRECT_INITRC' config to automated tests
Dave Sugar
2022-11-02
1
-19
/
+39
*
fapolicyd: fagenrules chgrp's the compiled.rules
Dave Sugar
2022-11-02
1
-1
/
+1
*
fix: issue #550 - compile failed when DIRECT_INITRC=y
Dave Sugar
2022-11-02
1
-1
/
+3
*
radius: fixes for freeradius
Yi Zhao
2022-11-02
1
-2
/
+2
*
logging: allow systemd-journal to manage syslogd_runtime_t sock_file
Yi Zhao
2022-11-02
1
-1
/
+1
*
glusterfs: add type for glusterd hooks
Kenton Groombridge
2022-11-02
3
-1
/
+11
*
glusterfs, selinuxutil: make modifying fcontexts a tunable
Kenton Groombridge
2022-11-02
3
-9
/
+64
*
selinuxutil: allow semanage, setfiles to inherit gluster fds
Kenton Groombridge
2022-11-02
2
-0
/
+27
*
mount: allow mounting glusterfs volumes
Kenton Groombridge
2022-11-02
1
-0
/
+7
*
glusterfs: add type for gluster bricks
Kenton Groombridge
2022-11-02
2
-1
/
+15
*
glusterfs: various fixes
Kenton Groombridge
2022-11-02
3
-15
/
+114
*
corenet: add portcon for glusterfs
Kenton Groombridge
2022-11-02
1
-0
/
+1
*
sysadm: allow opensm access
Kenton Groombridge
2022-11-02
1
-0
/
+4
*
opensm: initial policy
Kenton Groombridge
2022-11-02
3
-0
/
+141
*
xdg: add interface to dontaudit searching xdg data dirs
Kenton Groombridge
2022-11-02
1
-0
/
+19
*
devices: add interface to rw infiniband devices
Kenton Groombridge
2022-11-02
1
-0
/
+18
*
mta: add support for nullmailer
Kenton Groombridge
2022-11-02
2
-0
/
+4
*
zfs: various fixes
Kenton Groombridge
2022-11-02
1
-3
/
+44
*
Seeing long delay during shutdown saying: 'A stop job is running for Restore ...
Dave Sugar
2022-11-02
1
-0
/
+2
*
Drop audit_access allows.
Chris PeBenito
2022-11-02
5
-31
/
+31
*
tests.yml: Remove irrelevant comment.
Chris PeBenito
2022-11-02
1
-1
/
+1
*
fapolicyd: Fix selint issue.
Chris PeBenito
2022-11-02
1
-1
/
+1
*
Revise userspace and SELint versions in CI
Chris PeBenito
2022-11-02
1
-4
/
+3
*
sysnetwork: allow systemd_networkd_t to read link file
Yi Zhao
2022-11-02
1
-0
/
+1
*
postfix: allow postfix_local_t to search logwatch_cache_t
Yi Zhao
2022-11-02
1
-0
/
+4
*
logwatch: fixes for logwatch
Yi Zhao
2022-11-02
1
-2
/
+3
*
ci: build SELint from source
Christian Göttsche
2022-11-02
1
-6
/
+18
*
ci: update dependencies
Christian Göttsche
2022-11-02
1
-9
/
+11
*
firewalld: allow watch on firewalld files
Dave Sugar
2022-11-02
1
-1
/
+4
*
networkmanager: allow watch etc_t and lib_t
Dave Sugar
2022-11-02
2
-0
/
+21
*
fapolicyd: Initial SELinux policy
Dave Sugar
2022-11-02
5
-0
/
+382
*
domain: move kernel_read_crypto_sysctls to a common location
Dave Sugar
2022-11-02
52
-77
/
+2
*
Run Ci tests in parallel.
Chris PeBenito
2022-11-02
1
-3
/
+1
*
init: Add tunable for systemd to create all its mountpoints.
Chris PeBenito
2022-11-02
4
-0
/
+165
*
udev: allow reading ZFS config
Kenton Groombridge
2022-11-02
1
-0
/
+4
*
systemd, zfs: allow systemd-generator to read zfs config
Kenton Groombridge
2022-11-02
2
-0
/
+25
*
kernel: allow kthreads to read and write the zpool cache
Kenton Groombridge
2022-11-02
1
-0
/
+4
*
sysadm: allow admin access to zfs
Kenton Groombridge
2022-11-02
1
-0
/
+4
*
files, mount: remove legacy ZFS file contexts
Kenton Groombridge
2022-11-02
2
-6
/
+0
*
fstools, mount: remove legacy zfs rules
Kenton Groombridge
2022-11-02
2
-3
/
+0
*
zfs: initial policy module
Kenton Groombridge
2022-11-02
3
-0
/
+278
*
sysadm: allow sysadm to rw ipmi devices
Kenton Groombridge
2022-11-02
1
-0
/
+1
*
systemd: allow systemd-resolved to read generic certs
Kenton Groombridge
2022-11-02
1
-0
/
+2
*
bootloader, userdom: minor fixes for systemd-boot
Kenton Groombridge
2022-11-02
2
-1
/
+23
*
logging, systemd: allow auditctl to list userdb runtime dirs
Kenton Groombridge
2022-11-02
2
-0
/
+19
*
systemd: allow systemd-userdbd to search default contexts
Kenton Groombridge
2022-11-02
1
-0
/
+2
*
storage: include chr_files in fixed_disk_dev interfaces
Kenton Groombridge
2022-11-02
1
-0
/
+3
*
init: dontaudit initrc creating /dev/console during initrd
Kenton Groombridge
2022-11-02
1
-0
/
+1
*
various: fixes for nfs
Kenton Groombridge
2022-11-02
10
-2
/
+102
[next]