]> git.ipfire.org Git - people/stevee/selinux-policy.git/commit - policy/modules/kernel/kernel.te
projects / people / stevee / selinux-policy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fb7cadd) | patch
Kernel patch from Dan Walsh.
authorChris PeBenito <cpebenito@tresys.com>
Mon, 7 Jun 2010 15:08:35 +0000 (11:08 -0400)
committerChris PeBenito <cpebenito@tresys.com>
Mon, 7 Jun 2010 15:08:35 +0000 (11:08 -0400)
commit60f04fcb7adadd7969eaec59eff008d9ca7ee8ec
tree3edfb236e6eff855a91d468ef1ab84ceffc2f6aetree | snapshot
parentfb7caddb4fa4298aec0826b326a9f4929b93057bcommit | diff
Kernel patch from Dan Walsh.

Add ability to dontaudit requiests to load kernel modules.  If you
disable ipv6 every confined app that does ip, tries to get the kernel to
load the module.

Better handling of unlabeled files by the kernel interfaces
policy/modules/kernel/kernel.if diff | blob | blame | history
policy/modules/kernel/kernel.te diff | blob | blame | history
The IPFire selinux policy.