aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* access_vectors: define io_uring { cmd }Christian Göttsche2024-03-011-0/+1
* Define user_namespace object class.Chris PeBenito2023-03-312-0/+7
* flask: add new kernel security classesChristian Göttsche2022-03-302-2/+19
* access_vectors: Add new capabilities to cap2Dannick Pomerleau2020-11-161-1/+4
* define lockdown class and accessbauen12020-08-092-0/+8
* Add perf_event access vectors.Chris PeBenito2020-02-152-0/+12
* Rename obsolete netlink_firewall_socket and netlink_ip6fw_socket classesStephen Smalley2020-02-152-4/+4
* access_vectors: remove flow_in and flow_out permissions from packet classStephen Smalley2020-02-151-2/+0
* access_vectors: Remove entrypoint and execute_no_trans from chr_fileStephen Smalley2020-02-151-4/+0
* access_vectors: Remove unused permissionsStephen Smalley2020-02-151-26/+0
* Fix file common ordering and kernel version from previous commit.Chris PeBenito2019-12-161-1/+1
* Add file and filesystem watch access vectors.Chris PeBenito2019-12-161-0/+6
* Move open, audit_access, and execmod to file common.Chris PeBenito2019-12-161-29/+3
* Remove incorrect comment about capability2:mac_admin.Chris PeBenito2019-03-251-1/+1
* Add xdp_socket security class and access vectorsLaurent Bigonville2018-11-122-0/+5
* Remove unused translate permission in context userspace class.Chris PeBenito2018-11-121-1/+1
* refpolicy: Update for kernel sctp supportRichard Haines2018-06-141-0/+2
* Remove deprecated flask.py script.Chris PeBenito2018-06-082-587/+0
* Revert "refpolicy: Update for kernel sctp support"Jason Zaman2018-04-221-2/+0
* add definition of bpf class and systemd permsChristian Göttsche2018-03-252-0/+11
* refpolicy: Update for kernel sctp supportRichard Haines2018-03-251-0/+2
* Add nnp_nosuid_transition policycap and related class/perm definitions.Chris PeBenito2017-09-092-0/+7
* refpolicy: Define and allow map permissionStephen Smalley2017-05-261-0/+2
* refpolicy: Infiniband pkeys and endportsDaniel Jurgens2017-05-262-0/+14
* refpolicy: Define smc_socket security classStephen Smalley2017-05-182-0/+4
* refpolicy: Define getrlimit permission for class processStephen Smalley2017-05-181-0/+1
* refpolicy: drop unused socket security classesStephen Smalley2017-01-232-12/+0
* refpolicy: Define extended_socket_class policy capability and socket classesStephen Smalley2016-12-112-0/+150
* remove trailing whitespacescgzones2016-12-083-8/+8
* Add module_load permission to class systemGuido Trentalancia2016-08-141-0/+1
* Add the validate_trans access vector to the security classLaurent Bigonville2016-05-131-0/+1
* Add user namespace capability object classes.Chris PeBenito2016-05-132-49/+72
* Add systemd access vectors.Chris PeBenito2015-10-262-0/+23
* Update netlink socket classes.Stephen Smalley2015-05-222-0/+34
* Add "binder" security class and access vectorsLaurent Bigonville2015-05-222-0/+10
* Add new audit_read access vector in capability2 classLaurent Bigonville2014-11-221-0/+1
* Renamed db_type to db_datatype, to avoid confusion with SELinux "type"Artyom Smirnov2014-06-252-2/+2
* Fixes for db_domain and db_exceptionArtyom Smirnov2014-06-252-2/+8
* New database object classesArtyom Smirnov2014-06-252-0/+8
* flask: add the attach_queue permission to the tun_socket object classPaul Moore2013-02-041-0/+3
* backport from refpolicy - rename epollwakeup capability2 permission to block_...Sven Vermeulen2012-07-251-1/+1
* Update object class for new wake_alarm and epollwakeup capabilitiesSven Vermeulen2012-06-241-0/+2
* SEPostgresql changes frmo Kohei KaiGai (backport)Sven Vermeulen2012-05-281-3/+1
* Who uses html pages to embed python code in... oh right, we doSven Vermeulen2012-05-011-2/+2
* Pushing 2.20120215 (current version)Sven Vermeulen2012-04-215-0/+1620