This website requires JavaScript.
Explore
Help
Sign In
packages
/
selinux-policy
Watch
1
Star
0
Fork
0
You've already forked selinux-policy
Code
Issues
Pull Requests
Packages
Projects
Releases
Wiki
Activity
116
Commits
1
Branch
0
Tags
Go to file
Code
Clone
HTTPS
Open with VS Code
Open with VSCodium
Open with Intellij IDEA
Download ZIP
Download TAR.GZ
Download BUNDLE
openeuler-ci-bot
7cb24d4355
!219
[sync] PR-218: add avc rules for cloud-init
...
From: @openeuler-sync-bot Reviewed-by: @HuaxinLuGitee Signed-off-by: @HuaxinLuGitee
2023-06-13 07:08:19 +00:00
add_userman_access_run_dir.patch
add add_userman_access_run_dir.patch
2020-08-28 22:45:33 +08:00
add-allow-for-ldconfig-to-map-libsudo_util-so.patch
update selinux-policy
2020-07-27 09:57:59 +08:00
add-allow-systemd-timedated-to-unlink-etc-link.patch
add rule for systemd timedated
2020-12-08 21:01:54 +08:00
add-avc-for-openEuler-1.patch
add avc
2020-12-13 15:42:53 +08:00
add-avc-for-systemd-journald.patch
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
add-avc-for-systemd.patch
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
add-firewalld-fc.patch
add file context for firewalld temporary file
2020-09-24 09:40:51 +08:00
Add-permission-open-to-files_read_inherited_tmp_file.patch
add open permission to files_read_inherited_tmp_file
2022-04-28 20:06:48 +08:00
add-qemu_exec_t-for-stratovirt.patch
Add qemu_exec_t for stratovirt.
2021-08-20 15:04:54 +08:00
add-rule-for-hostnamed-to-rpmscript-dbus-chat.patch
add rule for hostnamed to rpmscript dbus chat
2022-12-29 16:53:41 +08:00
allow-httpd-to-put-files-in-httpd-config-dir.patch
allow httpd to create files in /etc/httpd
2022-06-25 15:26:17 +08:00
allow-init_t-create-fifo-file-in-net_conf-dir.patch
allow init_t create fifo file in net_conf dir.
2023-06-09 09:33:23 +08:00
allow-ipmievd-to-read-the-process-state-proc-pid-of-.patch
update selinux-policy
2020-07-27 09:57:59 +08:00
Allow-local_login-to-be-access-to-var-run-files-and-.patch
update avc for openEuler
2020-02-26 17:40:12 +08:00
allow-map-postfix_master_t.patch
allow map postfix_master_t
2022-09-19 16:51:25 +08:00
allow-rpcbind-to-bind-all-port.patch
allow rpcbind to bind all port
2021-05-27 20:46:18 +08:00
backport-Add-bgpd-sys_chroot-capability.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Add-numad-the-ipc_owner-capability.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Add-permissions-to-manage-lnk_files-into-gnome_manag.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Add-systemd_getattr_generic_unit_files-interface.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Add-the-corecmd_watch_bin_dirs-interface.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Add-the-init_append_stream_sockets-interface.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Add-the-map-permission-to-common_anon_inode_perm-per.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Add-the-userdom_prog_run_bpf_userdomain-interface.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-admin-userdomains-use-socketpair.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-administrative-users-the-bpf-capability.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-alsa-bind-mixer-controls-to-led-triggers.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-alsactl-set-group-Process-ID-of-a-process.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-chage-domtrans-to-sssd.patch
Allow chage domtrans to sssd
2022-08-19 10:57:43 +08:00
backport-Allow-chronyd-send-a-message-to-sosreport-over-datag.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-chronyd-talk-with-unconfined-user-over-unix-do.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-cloud-init-dbus-chat-with-systemd-logind.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-confined-sysadmin-to-use-tool-vipw.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-dhclient-manage-pid-files-used-by-chronyd.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-dnsmasq-watch-etc-dnsmasq.d-directories.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-domain-transition-to-sssd_t-and-role-access-to.patch
Allow domain transition to sssd_t and role access to sssd
2022-06-30 20:50:00 +08:00
backport-Allow-domain-use-userfaultfd-over-all-domains.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-domtrans-to-sssd_t-and-role-access-to-sssd.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-fcoemon-request-the-kernel-to-load-a-module.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-firewalld-read-the-contents-of-the-sysfs-files.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-gssproxy-access-to-various-system-files.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-gssproxy-read-and-write-z90crypt-device.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-gssproxy-read-write-and-map-ica-tmpfs-files.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-haproxy-get-attributes-of-cgroup-filesystems.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-haproxy-get-attributes-of-filesystems-with-ext.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-httpd-read-network-sysctls.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-icecast-rename-its-log-files.patch
backport patch Allow virt_domain read device sysctls
2023-03-23 10:31:36 +08:00
backport-Allow-init-delete-generic-tmp-named-pipes.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-init-map-its-private-tmp-files.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-init-read-stratis-data-symlinks.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-init-read-write-inherited-user-fifo-files.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-init-remount-all-file_type-filesystems.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-init-watch-and-watch_reads-user-ttys.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-ipsec_t-read-write-tpm-devices.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-iptables-list-cgroup-directories.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-iscsid-the-sys_ptrace-userns-capability.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-keepalived-setsched-and-sys_nice.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-kpropd-get-attributes-of-cgroup-filesystems.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-launch-xenstored-read-filesystem-sysctls.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-lldpd-connect-to-snmpd-with-a-unix-domain-stre.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-lldpd-use-an-snmp-subagent-over-a-tcp-socket.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-login_userdomain-check-status-of-mount-units.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-login_userdomain-create-session_dbusd-tmp-sock.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-map-var-lib-directories.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-login_userdomain-open-read-map-system-journal.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-login_userdomain-read-systemd-runtime-files.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-login_userdomain-watch-accountsd-lib-directori.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-watch-generic-directories-in-.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-watch-library-and-fonts-dirs.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-login_userdomain-watch-localization-directorie.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-watch-system-configuration-di.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-login_userdomain-watch-systemd-logind-PID-dire.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-watch-systemd-machined-PID-di.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-login_userdomain-watch-various-directories.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-login_userdomain-watch-various-files-and-dirs.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-login_userdomain-write-to-boltd-named-pipes.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-login_userdomain-write-to-session_dbusd-tmp-so.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-ModemManager-connect-to-the-unconfined-user-do.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-NetworkManager-talk-with-unconfined-user-over-.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-openvswitch-fsetid-capability.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-openvswitch-search-tracefs-dirs.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-openvswitch-use-its-private-tmpfs-files-and-di.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-pcp-pmcd-search-tracefs-and-acct_data-dirs.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-pcscd-the-sys_ptrace-userns-capability.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-PID-1-and-dbus-broker-IPC-with-a-systemd-user-.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-pmdalinux-read-files-on-an-nfsd-filesystem.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-pmie-read-network-state-information-and-networ.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-pppd-create-a-file-in-the-locks-directory.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-redis-get-attributes-of-filesystems-with-exten.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-rhsmcertd-get-attributes-of-tmpfs_t-filesystem.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-rngd-drop-privileges-via-setuid-setgid-setcap.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-rpmdb-create-directory-in-usr-lib-sysimage.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-rpmdb-read-admin-home-config-files.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-rpmdb-read-generic-SSL-certificates.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-sanlock-get-attributes-of-filesystems-with-ext.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-services-execute-systemd-notify.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-smbcontrol-read-the-network-state-information.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-smbcontrol-use-additional-socket-types.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-some-domains-use-sd_notify.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-sosreport-dbus-chat-abrt-systemd-timedatex.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-ssh-client-read-kerberos-homedir-config-files.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-sshd-read-filesystem-sysctl-files.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-sss-daemons-read-write-unnamed-pipes-of-cloud-.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-sssd_kcm-read-and-write-z90crypt-device.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-sssd-domtrans-to-pkcs_slotd_t.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-staff_u-and-user_u-users-write-to-bolt-pipe.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-sudodomain-send-a-null-signal-to-sshd-processe.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-sudodomains-execute-passwd-in-the-passwd-domai.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-svnserve-send-mail-from-the-system.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-sysadm_passwd_t-to-relabel-passwd-and-group-fi.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-sysadm_t-start-and-stop-transient-services.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-sysadm_t-to-run-bpftool-on-the-userdomain-attr.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-sysadm-execute-sysadmctl-in-sysadm_t-domain-us.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-system-dbus-daemon-watch-generic-directories-i.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-systemd-coredump-read-and-write-usermodehelper.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-systemd-coredump-userns-capabilities-and-root-.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-systemd-gpt-auto-generator-create-and-use-netl.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-systemd-gpt-auto-generator-to-check-for-empty-.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-systemd-io-bridge-ioctl-rpm_script_t.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-systemd-logind-dbus-chat-with-sosreport.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-systemd-logind-delete-session_dbusd-tmp-socket.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-systemd-networkd-create-and-use-netlink-netfil.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-systemd-read-unlabeled-symbolic-links.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-systemd-services-watch-dbusd-pid-directory-and.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-systemd-sysctl-read-the-security-state-informa.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-systemd-watch-and-watch_reads-user-ptys.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-timedatex-dbus-chat-with-xdm.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-tlp-dbus-chat-with-NetworkManager.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-tlp-read-its-systemd-unit.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-tumblerd-write-to-session_dbusd-tmp-socket-fil.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Allow-userdomain-read-symlinks-in-var-lib.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Allow-userdomains-use-pam_ssh_agent_auth-for-passwor.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-Allow-utempter-append-to-login_userdomain-stream.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Allow-virt_domain-map-vhost-devices.patch
update upstream patches
2022-09-13 20:46:36 +08:00
backport-Allow-virt_domain-read-device-sysctls.patch
backport patch Allow virt_domain read device sysctls
2023-03-23 10:31:36 +08:00
backport-Allow-xdm-read-the-kernel-key-ring.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Allow-xenstored-change-its-hard-resource-limits.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-blueman-mechanism-can-read-.local-lib-python-site-pa.patch
update upstream patches
2022-12-03 21:10:28 +08:00
backport-Do-not-allow-login_userdomain-use-sd_notify.patch
backport upstream patches
2022-09-15 17:33:58 +08:00
backport-Ensure-that-run-systemd-are-properly-labeled.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
backport-filesystem-add-fs_use_trans-for-ramfs.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Label-var-run-ecblp0-pipe-with-cupsd_var_run_t.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Support-using-systemd-update-helper-in-rpm-scriptlet.patch
backport upstream patches
2022-09-15 10:22:36 +08:00
backport-Update-chronyd_pid_filetrans-to-allow-create-dirs.patch
update upstream patches
2022-09-14 17:58:22 +08:00
backport-Update-userdom_exec_user_tmp_files-with-an-entrypoin.patch
backport upstream patches
2022-09-13 19:07:21 +08:00
booleans-minimum.conf
Package init
2019-09-30 11:16:49 -04:00
booleans-mls.conf
Package init
2019-09-30 11:16:49 -04:00
booleans-targeted.conf
set httpd_can_network_connect bool true
2021-09-15 14:38:28 +08:00
booleans.subs_dist
Package init
2019-09-30 11:16:49 -04:00
container-selinux.tgz
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
customizable_types
Package init
2019-09-30 11:16:49 -04:00
file_contexts.subs_dist
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
fix-context-of-usr-bin-rpmdb.patch
fix context of /usr/bin/rpmdb
2022-03-01 10:39:30 +08:00
fix-selinux-label-for-hostname-digest-list.patch
add avc for openEuler
2020-06-04 21:13:41 +08:00
macro-expander
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
Makefile.devel
Package init
2019-09-30 11:16:49 -04:00
modules-mls-base.conf
Package init
2019-09-30 11:16:49 -04:00
modules-mls-contrib.conf
update selinux-policy
2020-07-27 09:57:59 +08:00
modules-targeted-base.conf
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
modules-targeted-contrib.conf
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
permissivedomains.cil
update selinux-policy
2020-07-27 09:57:59 +08:00
rpm.macros
selinux_requires macro shouldn't depend on policycoreutils-python
2022-02-19 10:52:10 +08:00
securetty_types-minimum
Package init
2019-09-30 11:16:49 -04:00
securetty_types-mls
Package init
2019-09-30 11:16:49 -04:00
securetty_types-targeted
Package init
2019-09-30 11:16:49 -04:00
selinux-policy-02b35cf.tar.gz
update selinux-policy-3.14.2 to selinux-policy-35.5-1
2021-12-21 20:12:05 +08:00
selinux-policy.conf
Package init
2019-09-30 11:16:49 -04:00
selinux-policy.spec
allow init_t create fifo file in net_conf dir.
2023-06-09 09:33:23 +08:00
selinux-policy.yaml
Add yaml file
2020-09-24 20:17:16 +08:00
setrans-minimum.conf
Package init
2019-09-30 11:16:49 -04:00
setrans-mls.conf
Package init
2019-09-30 11:16:49 -04:00
setrans-targeted.conf
Package init
2019-09-30 11:16:49 -04:00
users-minimum
Package init
2019-09-30 11:16:49 -04:00
users-mls
Package init
2019-09-30 11:16:49 -04:00
users-targeted
Package init
2019-09-30 11:16:49 -04:00
Description
No description provided
3.3
MiB
Languages
Shell
100%
