Revision: policy--snapshot--0--patch-2
Archive: tbleher@gmx.de--selinux
Creator: Thomas Bleher <tbleher@gmx.de>
Date: Sat Mar  6 21:28:23 CET 2004
Standard-date: 2004-03-06 20:28:23 GMT
New-files: domains/program/unused/anaconda.te
    domains/program/unused/udev.te
    domains/program/unused/xprint.te
    file_contexts/program/anaconda.fc
    file_contexts/program/udev.fc
    file_contexts/program/xprint.fc
    macros/base_user_macros.te macros/mini_user_macros.te
    macros/program/ssh_agent_macros.te
Modified-files: ChangeLog Makefile VERSION
    appconfig/default_contexts domains/admin.te
    domains/program/crond.te domains/program/getty.te
    domains/program/init.te domains/program/login.te
    domains/program/mount.te domains/program/netutils.te
    domains/program/passwd.te domains/program/ssh.te
    domains/program/unused/apache.te
    domains/program/unused/authbind.te
    domains/program/unused/automount.te
    domains/program/unused/backup.te
    domains/program/unused/bootloader.te
    domains/program/unused/canna.te
    domains/program/unused/courier.te
    domains/program/unused/cups.te
    domains/program/unused/dbusd.te
    domains/program/unused/ddt-client.te
    domains/program/unused/devfsd.te
    domains/program/unused/dhcpc.te
    domains/program/unused/dhcpd.te
    domains/program/unused/dictd.te
    domains/program/unused/dpkg.te
    domains/program/unused/fingerd.te
    domains/program/unused/ftpd.te
    domains/program/unused/gatekeeper.te
    domains/program/unused/gpm.te
    domains/program/unused/hotplug.te
    domains/program/unused/hwclock.te
    domains/program/unused/inetd.te
    domains/program/unused/ircd.te
    domains/program/unused/kudzu.te
    domains/program/unused/mrtg.te
    domains/program/unused/mysqld.te
    domains/program/unused/nessusd.te
    domains/program/unused/netsaint.te
    domains/program/unused/nsd.te
    domains/program/unused/ntpd.te
    domains/program/unused/pam.te
    domains/program/unused/perdition.te
    domains/program/unused/ping.te
    domains/program/unused/postfix.te
    domains/program/unused/postgresql.te
    domains/program/unused/pppd.te
    domains/program/unused/prelink.te
    domains/program/unused/qmail.te
    domains/program/unused/radius.te
    domains/program/unused/radvd.te
    domains/program/unused/rhgb.te
    domains/program/unused/rpcd.te
    domains/program/unused/rpm.te
    domains/program/unused/samba.te
    domains/program/unused/slapd.te
    domains/program/unused/slocate.te
    domains/program/unused/snmpd.te
    domains/program/unused/spamd.te
    domains/program/unused/tftpd.te
    domains/program/unused/usbmodules.te
    domains/program/unused/vmware.te
    domains/program/unused/watchdog.te
    domains/program/unused/xdm.te
    domains/program/unused/xfs.te
    domains/program/unused/xserver.te
    file_contexts/program/authbind.fc
    file_contexts/program/bootloader.fc
    file_contexts/program/courier.fc
    file_contexts/program/cups.fc
    file_contexts/program/ddt-client.fc
    file_contexts/program/devfsd.fc
    file_contexts/program/dhcpc.fc
    file_contexts/program/dhcpd.fc
    file_contexts/program/dictd.fc
    file_contexts/program/dpkg.fc
    file_contexts/program/fingerd.fc
    file_contexts/program/ftpd.fc
    file_contexts/program/gatekeeper.fc
    file_contexts/program/getty.fc
    file_contexts/program/hotplug.fc
    file_contexts/program/ircd.fc
    file_contexts/program/mozilla.fc
    file_contexts/program/mrtg.fc
    file_contexts/program/mysqld.fc
    file_contexts/program/nessusd.fc
    file_contexts/program/netsaint.fc
    file_contexts/program/ntpd.fc
    file_contexts/program/pam.fc
    file_contexts/program/perdition.fc
    file_contexts/program/postfix.fc
    file_contexts/program/postgresql.fc
    file_contexts/program/prelink.fc
    file_contexts/program/qmail.fc
    file_contexts/program/radius.fc
    file_contexts/program/radvd.fc
    file_contexts/program/slapd.fc
    file_contexts/program/snmpd.fc
    file_contexts/program/tftpd.fc
    file_contexts/program/xdm.fc
    file_contexts/program/xserver.fc file_contexts/types.fc
    macros/admin_macros.te macros/global_macros.te
    macros/program/apache_macros.te
    macros/program/gpg_macros.te
    macros/program/gph_macros.te
    macros/program/irc_macros.te
    macros/program/lpr_macros.te
    macros/program/mozilla_macros.te
    macros/program/mta_macros.te
    macros/program/newrole_macros.te
    macros/program/screen_macros.te
    macros/program/sendmail_macros.te
    macros/program/ssh_macros.te
    macros/program/uml_macros.te
    macros/program/xauth_macros.te
    macros/program/xserver_macros.te macros/user_macros.te
    net_contexts policy.spec rbac tunable.te types/file.te
    types/network.te {arch}/=tagging-method
New-patches: tbleher@gmx.de--selinux/policy--snapshot--0--patch-2
Summary: 
Keywords: 

Many changes, because I was away for a week and Russell was busy updating 
his tree.

* new policy for anaconda, udev and xprint, ssh-keygen
* upstream release is now 1.6, policy version is 16
* new tunables: xdm_sysadmin_login, run_ssh_inetd, ftpd_is_daemon,
* fixes for login, bootloader, dpkg, ftpd, postfix, prelink, rpm, xdm, 
  mda_macros, numerous others
* more domains have can_ypbind(), read_locale()
* switch to <domain>_etc_t syntax
* conditional policy: allow users to ping
* new macros etc_domain(), etcdir_domain(), already used extensively
* admin_macros.te reworked (inherits from base_user_domain() now, among others)
* ssh-agent moved to own file
* moved single_userdomain-definitions to the coressponding domain definitions
* new tunable secure_levels: create a bool 'secure_mode', which when set allows
  sysadm_t logins only on the console and forbids direct disk access