projects / people / stevee / selinux-policy.git / blame
| Commit | Line | Data |
|---|---|---|
| e28aa682 CP |
1 | - Add Makefile support for building loadable modules. |
| 2 | - Add genclassperms.py tool to add require blocks | |
| 3 | for loadable modules. | |
| 4 | - Change sedoctool to make required modules part of base | |
| 5 | by default, otherwise make as modules, in modules.conf. | |
| 6 | - Fix segenxml to handle modules with no interfaces. | |
| 7 | - Rename ipsec connect interface for consistency. | |
| 8 | - Add missing parts of unix stream socket connect interface | |
| 9 | of ipsec. | |
| 10 | - Rename inetd connect interface for consistency. | |
| 11 | - Rename interface for purging contents of tmp, for clarity, | |
| 12 | since it allows deletion of classes other than file. | |
| 13 | - Misc. cleanups. | |
| 14 | - Added policies: | |
| 15 | acct | |
| 16 | bind | |
| 17 | firstboot | |
| 18 | gpm | |
| 19 | howl | |
| 20 | ldap | |
| 21 | loadkeys | |
| 22 | mysql | |
| 23 | privoxy | |
| 24 | quota | |
| 25 | rshd | |
| 26 | rsync | |
| 27 | su | |
| 28 | sudo | |
| 29 | tcpd | |
| 30 | tmpreaper | |
| 31 | updfstab | |
| 81343a6f | 32 | |
| e28aa682 CP |
33 | * Tue Aug 2 2005 Chris PeBenito <selinux@tresys.com> - 20050802 |
| 34 | - Fix comparison bug in fc_sort. | |
| 35 | - Fix handling of ordered and unordered HTML lists. | |
| 36 | - Corenetwork now supports multiple network interfaces having the | |
| 37 | same type. | |
| 38 | - Doc tool now creates pages for global Booleans and global tunables. | |
| 39 | - Doc tool now links directly to the interface/template in the | |
| 40 | module page when it is selected in the interface/template index. | |
| 41 | - Added support for layer summaries. | |
| 42 | - Added policies: | |
| 43 | ipsec | |
| 44 | nscd | |
| 45 | pcmcia | |
| 46 | raid | |
| acb668ed | 47 | |
| e28aa682 CP |
48 | * Thu Jul 7 2005 Chris PeBenito <selinux@tresys.com> - 20050707 |
| 49 | - Changed xml to have modules encapsulated by layer tags, rather | |
| 50 | than putting layer="foo" in the module tags. Also in the future | |
| 51 | we can put a summary and description for each layer. | |
| 52 | - Added tool to infer interface, module, and layer tags. This will | |
| 53 | now list all interfaces, even if they are missing xml docs. | |
| 54 | - Shortened xml tag names. | |
| 55 | - Added macros to declare interfaces and templates. | |
| 56 | - Added interface call trace. | |
| 57 | - Updated all xml documentation for shorter and inferred tags. | |
| 58 | - Doc tool now displays templates in the web pages. | |
| 59 | - Doc tool retains the user's settings in modules.conf and | |
| 60 | tunables.conf if the files already exist. | |
| 61 | - Modules.conf behavior has been changed to be a list of all | |
| 62 | available modules, and the user can specify if the module is | |
| 63 | built as a loadable module, included in the monolithic policy, | |
| 64 | or excluded. | |
| 65 | - Added policies: | |
| 66 | fstools (fsck, mkfs, swapon, etc. tools) | |
| 67 | logrotate | |
| 68 | inetd | |
| 69 | kerberos | |
| 70 | nis (ypbind and ypserv) | |
| 71 | ssh (server, client, and agent) | |
| 72 | unconfined | |
| 73 | - Added infrastructure for targeted policy support, only missing | |
| 74 | transition boolean support. | |
| dfa83e92 | 75 | |
| e28aa682 CP |
76 | * Wed Jun 15 2005 Chris PeBenito <selinux@tresys.com> - 20050615 |
| 77 | - Initial release |