summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-08-17fixupJohn Turner
2025-08-17reserve port for ircJohn Turner
2025-08-17inherit template and add fileconsJohn Turner
2025-08-17add .subj.common abstractionJohn Turner
2025-08-16add map_file_files macro to .fileJohn Turner
2025-08-16auto format all filesJohn Turner
2025-08-14rewrite build system with mesonJohn Turner
2025-08-13create sshfile typeJohn Turner
2025-08-12move into conffileJohn Turner
2025-08-12move into cgroupseclabelfsJohn Turner
2025-08-12move into certfileJohn Turner
2025-08-12move into cachefileJohn Turner
2025-08-12move into bpfnoseclabelfsJohn Turner
2025-08-12move into bootfileJohn Turner
2025-06-19ttyxperm: adds TIOCSERGETLSRDominick Grift
2025-04-27/run/lock fixesDominick Grift
its world writable like /tmp default to none-spec inside there like /tmp
2025-04-23misc.cil typo fixDominick Grift
2025-02-24Makefile: polvers 34Dominick Grift
2025-01-25update yearDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2025-01-21sysctlfile is a procfile typeDominick Grift
2025-01-10adds kvm-gmem anon inodeDominick Grift
2024-12-21iouringav: fix dev.unconfinedDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-12-18clean up dev.unconfined 2Dominick Grift
2024-12-18clean up dev.unconfinedDominick Grift
2024-12-17subj: minor typo fixDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-11-04mls: support templatesDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-08-26userspace_initial_context move to miscDominick Grift
2024-08-26support userspace_initial_contextDominick Grift
2024-08-11libsepol does not allow this anymoreDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-07-08nodenet: mlsconstrainDominick Grift
2024-04-25adds a ttynodedev and TIOCLINUX filtering supportDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-02-28pidfs make it a noseclabelfs with genfsconDominick Grift
2024-02-23adds task pidfsDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2024-01-28adds bcachefs, resctlnoseclabelfs and mkosi.conf changesDominick Grift
2024-01-15mkosi v20 no scratch space and 2024Dominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-10-27i2cnodedev: fixes fileconDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-26Mounts on sock files indicates a bugDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-24misc.cil: removes the rpm typealiasDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-23Adds nfs4seclabelfsDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-23misc: Debian uses ssl instead of pkiDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-23nfsnoseclabelfs: nfs4 is a seclabelfsDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-23Tree-wide: various fixes and clean-upsDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-22binfmtmiscnoseclabelfs: removes duplicate blockinheritanceDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-22fs: blockinherit instead of blockabstractDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-22termdev: use modern in after for appending macrosDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-22Addresses prerequisite for cgroup_seclabelDominick Grift
Only worls if the / of the cgroupfs is labeled with setxattr. systemd will apply this filecon. Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-22Enables ioctl_skip_cloexecDominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2023-08-20Import dssp5Dominick Grift
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>