packages/selinux-policy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
88 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
openeuler-ci-bot 95c8e88308
!233 [sync] PR-232: 【轻量级 PR】：enforcing selinux 
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-11-10 03:21:32 +00:00
access-to-iptables-run-file.patch
update avc for openEuler
2020-02-26 17:40:12 +08:00
add_userman_access_run_dir.patch
Package init
2019-09-30 11:16:49 -04:00
add-access-to-faillog-file-for-systemd.patch
update avc for openEuler
2020-02-26 17:40:12 +08:00
add-allow-for-ldconfig-to-map-libsudo_util-so.patch
update selinux
2020-08-31 16:09:27 +08:00
add-allow-shadow-tool-to-access-sssd-var-lib-file-di.patch
add avc for openEuler
2020-06-04 21:13:41 +08:00
add-allow-systemd-timedated-to-unlink-etc-link.patch
add rule for systemd timedated
2020-12-08 20:41:06 +08:00
add-allow-to-be-access-to-sssd-dir-and-file.patch
fix upgrade error
2020-03-17 19:49:40 +08:00
add-avc-for-kmod.patch
update selinux
2020-08-31 16:09:27 +08:00
add-avc-for-openEuler-1.patch
add avc
2020-12-13 15:41:21 +08:00
add-avc-for-systemd-hostnamed-and-systemd-logind.patch
update selinux
2020-08-31 16:09:27 +08:00
add-avc-for-systemd-journald.patch
update selinux
2020-08-31 16:09:27 +08:00
add-avc-for-systemd.patch
update selinux
2020-08-31 16:09:27 +08:00
add-firewalld-fc.patch
add file context for firewalld temporary file
2020-12-23 09:34:21 +08:00
add-rule-for-hostnamed-to-rpmscript-dbus-chat.patch
add rule for hostnamed to rpmscript dbus chat
2022-12-30 11:45:32 +08:00
allow-httpd-to-put-files-in-httpd-config-dir.patch
allow httpd create files in /etc/httpd
2022-06-25 15:42:40 +08:00
allow-ipmievd-to-read-the-process-state-proc-pid-of-.patch
update selinux
2020-08-31 16:09:27 +08:00
Allow-local_login-to-be-access-to-var-run-files-and-.patch
update avc for openEuler
2020-02-26 17:40:12 +08:00
allow-rpcbind-to-bind-all-port.patch
allow rpcbind to bind all port
2021-05-27 20:10:27 +08:00
allow-systemd-machined-create-userdbd-runtime-sock-file.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
allow-systemd-to-mount-unlabeled-filesystemd.patch
update selinux
2020-08-31 16:09:27 +08:00
backport-Add-dev_lock_all_blk_files-interface.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Add-file-context-for-.config-Yubico.patch
Fix CVE-2020-24612
2021-12-25 10:31:06 +08:00
backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Add-new-devices-and-filesystem-interfaces.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-domain-stat-proc-filesystem.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-domain-stat-the-sys-filesystem.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-dovecot-bind-to-smtp-ports.patch
sync modification on other branches
2021-03-05 10:11:01 +08:00
backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-kdump_t-net_admin-capability.patch
allow kdump_t net_admin capability
2021-05-29 14:58:00 +08:00
backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-login_userdomain-write-inaccessible-nodes.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-nsswitch_domain-read-cgroup-files.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-passwd-to-get-attributes-in-proc_t.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-systemd-logind-manage-init-s-pid-files.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Change-transitions-for-.config-Yubico.patch
Fix CVE-2020-24612
2021-12-25 10:31:06 +08:00
backport-Create-chronyd_pid_filetrans-interface.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Create-macro-corenet_icmp_bind_generic_node.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-iptables.fc-Add-missing-legacy-entries.patch
fix context of ebtables
2021-06-09 10:25:49 +08:00
backport-iptables.fc-Add-missing-legacy-restore-and-legacy-sa.patch
[backport] iptables.fc: Add missing legacy-restore and legacy-save entries
2021-06-17 21:42:51 +08:00
backport-iptables.fc-Remove-duplicate-file-context-entries.patch
fix context of ebtables
2021-06-09 10:25:49 +08:00
backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
backport-systemd-allow-all-systemd-services-to-check-selinux-.patch
sync modification on other branches
2021-03-05 10:11:01 +08:00
backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
backport upstream patch
2021-05-31 22:08:10 +08:00
booleans-minimum.conf
Package init
2019-09-30 11:16:49 -04:00
booleans-mls.conf
Package init
2019-09-30 11:16:49 -04:00
booleans-targeted.conf
update selinux
2020-08-31 16:09:27 +08:00
booleans.subs_dist
Package init
2019-09-30 11:16:49 -04:00
container-selinux.tgz
update selinux
2020-08-31 16:09:27 +08:00
customizable_types
Package init
2019-09-30 11:16:49 -04:00
file_contexts.subs_dist
update selinux
2020-08-31 16:09:27 +08:00
fix-selinux-label-for-hostname-digest-list.patch
add avc for openEuler
2020-06-04 21:13:41 +08:00
Makefile.devel
Package init
2019-09-30 11:16:49 -04:00
modules-mls-base.conf
Package init
2019-09-30 11:16:49 -04:00
modules-mls-contrib.conf
update selinux
2020-08-31 16:09:27 +08:00
modules-targeted-base.conf
Package init
2019-09-30 11:16:49 -04:00
modules-targeted-contrib.conf
update selinux
2020-08-31 16:09:27 +08:00
permissivedomains.cil
update selinux
2020-08-31 16:09:27 +08:00
rpm.macros
sync modification on other branches
2021-03-05 10:11:01 +08:00
securetty_types-minimum
Package init
2019-09-30 11:16:49 -04:00
securetty_types-mls
Package init
2019-09-30 11:16:49 -04:00
securetty_types-targeted
Package init
2019-09-30 11:16:49 -04:00
selinux-policy-9c84d68.tar.gz
update selinux
2020-08-31 16:09:27 +08:00
selinux-policy-contrib-27225b9.tar.gz
update selinux
2020-08-31 16:09:27 +08:00
selinux-policy.conf
Package init
2019-09-30 11:16:49 -04:00
selinux-policy.spec
enforcing selinux
2023-11-10 11:00:53 +08:00
setrans-minimum.conf
Package init
2019-09-30 11:16:49 -04:00
setrans-mls.conf
Package init
2019-09-30 11:16:49 -04:00
setrans-targeted.conf
Package init
2019-09-30 11:16:49 -04:00
solve-shutdown-permission-denied-caused-by-dracut.patch
add avc for openEuler
2020-06-04 21:13:41 +08:00
users-minimum
Package init
2019-09-30 11:16:49 -04:00
users-mls
Package init
2019-09-30 11:16:49 -04:00
users-targeted
Package init
2019-09-30 11:16:49 -04:00
Description
No description provided
2.1 MiB
Languages
Diff 100%