aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
...
* selinuxutil: setfiles updatesChristian Göttsche2024-03-012-0/+21
* virt: label qemu configuration directoryChristian Göttsche2024-03-011-0/+2
* Makefile: set PYTHONPATH for test toolchainChristian Göttsche2024-03-011-3/+10
* Makefile: use sepolgen-ifgen-attr-helper from test toolchainChristian Göttsche2024-03-011-0/+4
* Rules.modular: use temporary file to not ignore errorChristian Göttsche2024-03-011-2/+2
* Rules.monolithic: pre-compile fcontexts on installChristian Göttsche2024-03-012-0/+7
* policy_capabilities: remove estimated from released versionsChristian Göttsche2024-03-011-1/+1
* Support multi-line interface callsChristian Göttsche2024-03-011-4/+9
* fix misc typosChristian Göttsche2024-03-013-4/+4
* support/genhomedircon: support usr prefixed pathsChristian Göttsche2024-03-011-1/+1
* access_vectors: define io_uring { cmd }Christian Göttsche2024-03-011-0/+1
* cloudinit: Add permissions derived from sysadm.Chris PeBenito2024-03-0115-26/+1216
* systemd: Updates for systemd-locale.Chris PeBenito2024-03-011-0/+5
* cloud-init: Change udev rulesChris PeBenito2024-03-011-0/+1
* cloud-init: Add systemd permissions.Chris PeBenito2024-03-012-4/+27
* cloud-init: Allow use of sudo in runcmd.Chris PeBenito2024-03-012-0/+33
* chronyd: Read /dev/urandom.Chris PeBenito2024-03-011-0/+1
* unconfined: Add remaining watch_* permissions.Chris PeBenito2024-03-014-29/+29
* usermanage: Handle symlinks in /usr/share/cracklib.Chris PeBenito2024-03-012-0/+2
* kdump: Fixes from testing kdumpctl.Chris PeBenito2024-03-011-0/+15
* cloudinit: Add support for installing RPMs and setting passwords.Chris PeBenito2024-03-013-0/+35
* files: Handle symlinks for /media and /srv.Chris PeBenito2024-03-011-1/+2
* usermanage: Add sysctl access for groupadd to get number of groups.Chris PeBenito2024-03-011-0/+4
* sysnetwork: ifconfig searches debugfs.Chris PeBenito2024-03-011-0/+1
* selinuxutil: Semanage reads policy for export.Chris PeBenito2024-03-011-0/+1
* init: Allow nnp/nosuid transitions from systemd initrc_t.Chris PeBenito2024-03-011-0/+2
* rpm: Minor fixesChris PeBenito2024-03-011-1/+3
* systemd: Minor coredump fixes.Chris PeBenito2024-03-012-7/+24
* Container: Minor fixes from interactive container use.Chris PeBenito2024-03-013-1/+29
* kernel: hv_utils shutdown on systemd systems.Chris PeBenito2024-03-011-0/+5
* systemd: systemd-cgroups reads kernel.cap_last_cap sysctl.Chris PeBenito2024-03-011-0/+3
* domain: Manage own fds.Chris PeBenito2024-03-011-3/+4
* kubernetes: allow kubelet to apply fsGroup to persistent volumesKenton Groombridge2024-03-012-0/+23
* container: allow spc to map kubernetes runtime filesKenton Groombridge2024-03-012-0/+19
* crio: allow reading container home contentKenton Groombridge2024-03-012-2/+22
* systemd: allow systemd generator to list exportsKenton Groombridge2024-03-011-0/+1
* dbus: allow the system bus to get the status of generic unitsKenton Groombridge2024-03-011-0/+3
* rpc: fix not labeling exports.d directoryKenton Groombridge2024-03-011-1/+1
* bootloader, init, udev: misc minor fixesKenton Groombridge2024-03-013-2/+4
* systemd: label systemd-tpm2-setup as systemd-pcrphaseKenton Groombridge2024-03-011-0/+1
* init: allow using system bus anon pidfsKenton Groombridge2024-03-011-0/+1
* kernel: allow managing mouse devicesKenton Groombridge2024-03-012-0/+21
* zfs: allow zfs to write to exportsKenton Groombridge2024-03-012-0/+21
* systemd: label systemd-pcrlock as systemd-pcrphaseKenton Groombridge2024-03-011-0/+1
* kubernetes: fix kubelet accountingKenton Groombridge2024-03-012-0/+65
* container, kubernetes: allow kubernetes to use fuse-overlayfsKenton Groombridge2024-03-014-0/+49
* systemd: add policy for systemd-machine-id-setupKenton Groombridge2024-03-012-0/+29
* init, systemd: allow systemd-pcrphase to write TPM measurementsKenton Groombridge2024-03-012-0/+106
* container: add filecons for rook-cephKenton Groombridge2024-03-011-0/+3
* kernel: dontaudit read fixed disk devicesKenton Groombridge2024-03-011-0/+4