git.ipfire.org Git - people/stevee/selinux-policy.git/commit

]> git.ipfire.org Git - people/stevee/selinux-policy.git/commit - policy/modules/roles/xguest.te

projects / people / stevee / selinux-policy.git / commit

author	dwalsh <dwalsh@redhat.com>
	Thu, 10 Nov 2011 14:27:27 +0000 (09:27 -0500)
committer	dwalsh <dwalsh@redhat.com>
	Thu, 10 Nov 2011 14:27:27 +0000 (09:27 -0500)
commit	4a09309634220f0053c2cb9191a649c6a563dcdd
tree	5ddc9f84552f559008895297240f8f09e1795406	tree \| snapshot
parent	e200bcc0364be9c7d73669f07b2b091252a4d3a5	commit \| diff

Remove execmem_exec_t, java_exec_t, mono_exec_t and allow confined users to use execmem, add deny_execmem boolean to turn off execmem for all users. Probably will only work in server non graphical environments since so much of the desktop now requies JIT and execmem

16 files changed:

policy/global_tunables		diff \| blob \| blame \| history
policy/modules/admin/rpm.te		diff \| blob \| blame \| history
policy/modules/apps/games.te		diff \| blob \| blame \| history
policy/modules/apps/mozilla.te		diff \| blob \| blame \| history
policy/modules/apps/mplayer.te		diff \| blob \| blame \| history
policy/modules/apps/sandbox.te		diff \| blob \| blame \| history
policy/modules/apps/thumb.te		diff \| blob \| blame \| history
policy/modules/kernel/corecommands.te		diff \| blob \| blame \| history
policy/modules/roles/unconfineduser.te		diff \| blob \| blame \| history
policy/modules/roles/xguest.te		diff \| blob \| blame \| history
policy/modules/services/hadoop.if		diff \| blob \| blame \| history
policy/modules/services/hadoop.te		diff \| blob \| blame \| history
policy/modules/services/postgresql.te		diff \| blob \| blame \| history
policy/modules/services/xserver.te		diff \| blob \| blame \| history
policy/modules/system/unconfined.if		diff \| blob \| blame \| history
policy/modules/system/userdomain.if		diff \| blob \| blame \| history

The IPFire selinux policy.

RSS Atom