summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Update generated policy and doc files2.20231002-r1Kenton Groombridge2023-10-063-1821/+2651
* Merge upstreamKenton Groombridge2023-10-061-1/+1
* Separate label for /run/systemd/notify (#710)Dave Sugar2023-10-066-2/+48
* Label checkarray as mdadm_exec_t, allow it to read/write temp files inherited...Russell Coker2023-10-063-1/+4
* https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/Russell Coker2023-10-061-1/+1
* Add append to rw and manage lnk_file permission sets for consistency.Chris PeBenito2023-10-061-2/+2
* bind: fix for named serviceYi Zhao2023-10-061-0/+2
* systemd: allow journalctl to create /var/lib/systemd/catalogYi Zhao2023-10-061-1/+3
* Let openoffice perform temporary file transitions and manage link files.Guido Trentalancia2023-10-061-1/+2
* misc small email changes (#704)Russell Coker2023-10-069-5/+70
* mon.te patches as well as some fstools patches related to it (#697)Russell Coker2023-10-069-10/+72
* misc small patches for cron policy (#701)Russell Coker2023-10-066-1/+90
* small systemd patches (#708)Russell Coker2023-10-062-6/+9
* separate domain for journalctl during initDave Sugar2023-10-063-1/+54
* allow jabbers to create sock file and allow matrixd to read sysfs (#705)Russell Coker2023-10-062-0/+2
* postgresql: Move linesChris PeBenito2023-10-061-1/+2
* small storage changes (#706)Russell Coker2023-10-067-2/+70
* small network patches (#707)Russell Coker2023-10-0612-4/+74
* small ntp and dns changes (#703)Russell Coker2023-10-066-2/+42
* Added tmpfs file type for postgresql Small mysql stuff including anon_inodeRussell Coker2023-10-062-2/+11
* policy patches for anti-spam daemons (#698)Russell Coker2023-10-066-4/+63
* policy for the Reliability Availability servicability daemon (#690)Russell Coker2023-10-064-0/+91
* debian motd.d directory (#689)Russell Coker2023-10-063-0/+3
* systemd: allow systemd-networkd to create file in /run/systemd directoryYi Zhao2023-10-061-1/+1
* loadkeys: do not audit attempts to get attributes for all directoriesYi Zhao2023-10-061-0/+1
* mount: allow mount_t to get attributes for all directoriesYi Zhao2023-10-061-0/+1
* some misc userdomain fixesRussell Coker2023-10-063-1/+28
* Resolve some denials with colordDave Sugar2023-10-061-0/+11
* Allow all users to (optionally) send syslog messagesDave Sugar2023-10-062-0/+11
* policy for power profiles daemon, used to change power settingsRussell Coker2023-10-063-0/+63
* The X display manager uses an authentication mechanism based on an authorizat...Guido Trentalancia2023-10-063-0/+45
* Introduce two new booleans for the X server and X display manager domains whi...Guido Trentalancia2023-10-061-30/+52
* unconfined: Keys are linkable by systemd.Chris PeBenito2023-10-061-0/+1
* Introduce a new "dbus_can_network" boolean which controls whether or not the ...Guido Trentalancia2023-10-061-9/+22
* Under request from Christopher PeBenito, merge the two spamassassin rules upd...Guido Trentalancia2023-10-062-47/+12
* Update the spamassassin module in order to better support the rules updating ...Guido Trentalancia2023-10-062-25/+86
* Extend the scope of the "spamassassin_can_network" tunable policy boolean to ...Guido Trentalancia2023-10-061-36/+45
* switcheroo: Whitespace fix.Chris PeBenito2023-10-061-0/+1
* resolve lvm_t issues at shutdown with LUKS encrypted devicesDave Sugar2023-10-061-1/+6
* Add new gpg interfaces for gpg_agent execution and to avoid auditing search o...Guido Trentalancia2023-10-061-0/+80
* switcheroo is a daemon to manage discrete vs integrated GPU use for appsRussell Coker2023-10-063-0/+44
* Daemon to monitor memory pressure and notify applications and change … (#670)Russell Coker2023-10-064-0/+71
* /var/lib/sddm should be xdm_var_lib_tDave Sugar2023-10-061-1/+1
* Allow rsyslog to drop capabilitiesDave Sugar2023-10-061-0/+5
* Introduce a new interface in the mta module to manage the mail transport agen...Guido Trentalancia2023-10-061-0/+21
* Fix the recently introduced "logging_syslog_can_network" tunable policy, by i...Guido Trentalancia2023-10-061-2/+2
* For systemd-hostnamed service to runDave Sugar2023-10-061-0/+4
* Update the gnome module so that the gconf daemon is able to create Unix domai...Guido Trentalancia2023-10-061-0/+2
* Fix some ssh agent denialsDave Sugar2023-10-061-0/+2
* separate label for /etc/security/opasswdDave Sugar2023-10-065-3/+51