Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-08-21 | add GPL-3 header to weechat.cil | John Turner | |
2025-08-21 | add . prefix to "data" macro calls | John Turner | |
2025-08-21 | inherit macro_template_files for runuser | John Turner | |
2025-08-21 | rework how user files work | John Turner | |
Instead of assuming all user files exist under $HOME, we create a .file.user module and typeattribute. This allows user files to exist in places outside of $HOME. Also we changed filecon so that $HOME itself is user.home.file rather than home.file. | |||
2025-08-18 | allow all subj.common to read sysfs | John Turner | |
2025-08-18 | allow weechat to read /etc | John Turner | |
2025-08-18 | move loader block into file | John Turner | |
2025-08-18 | fixup | John Turner | |
2025-08-18 | rename irc.cil to reservedportnetirc.cil | John Turner | |
2025-08-17 | create module for the dynamic loader | John Turner | |
2025-08-17 | create policy for weechat | John Turner | |
2025-08-17 | disable some network checking | John Turner | |
2025-08-17 | fixup | John Turner | |
2025-08-17 | reserve port for irc | John Turner | |
2025-08-17 | inherit template and add filecons | John Turner | |
2025-08-17 | add .subj.common abstraction | John Turner | |
2025-08-16 | add map_file_files macro to .file | John Turner | |
2025-08-16 | auto format all files | John Turner | |
2025-08-14 | rewrite build system with meson | John Turner | |
2025-08-13 | create sshfile type | John Turner | |
2025-08-12 | move into conffile | John Turner | |
2025-08-12 | move into cgroupseclabelfs | John Turner | |
2025-08-12 | move into certfile | John Turner | |
2025-08-12 | move into cachefile | John Turner | |
2025-08-12 | move into bpfnoseclabelfs | John Turner | |
2025-08-12 | move into bootfile | John Turner | |
2025-06-19 | ttyxperm: adds TIOCSERGETLSR | Dominick Grift | |
2025-04-27 | /run/lock fixes | Dominick Grift | |
its world writable like /tmp default to none-spec inside there like /tmp | |||
2025-04-23 | misc.cil typo fix | Dominick Grift | |
2025-02-24 | Makefile: polvers 34 | Dominick Grift | |
2025-01-25 | update year | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2025-01-21 | sysctlfile is a procfile type | Dominick Grift | |
2025-01-10 | adds kvm-gmem anon inode | Dominick Grift | |
2024-12-21 | iouringav: fix dev.unconfined | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-12-18 | clean up dev.unconfined 2 | Dominick Grift | |
2024-12-18 | clean up dev.unconfined | Dominick Grift | |
2024-12-17 | subj: minor typo fix | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-11-04 | mls: support templates | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-08-26 | userspace_initial_context move to misc | Dominick Grift | |
2024-08-26 | support userspace_initial_context | Dominick Grift | |
2024-08-11 | libsepol does not allow this anymore | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-07-08 | nodenet: mlsconstrain | Dominick Grift | |
2024-04-25 | adds a ttynodedev and TIOCLINUX filtering support | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-02-28 | pidfs make it a noseclabelfs with genfscon | Dominick Grift | |
2024-02-23 | adds task pidfs | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2024-01-28 | adds bcachefs, resctlnoseclabelfs and mkosi.conf changes | Dominick Grift | |
2024-01-15 | mkosi v20 no scratch space and 2024 | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2023-10-27 | i2cnodedev: fixes filecon | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2023-08-26 | Mounts on sock files indicates a bug | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> | |||
2023-08-24 | misc.cil: removes the rpm typealias | Dominick Grift | |
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> |