aboutsummaryrefslogtreecommitdiffstats
path: root/clatd.te
Commit message (Expand)AuthorAgeFilesLines
* Allow clatd CAP_IPC_LOCK for mmap()Erik Kline2015-06-161-5/+6
* dontaudit clatd self:capability ipc_lockNick Kralevich2015-02-261-0/+8
* Revert /proc/net related changesNick Kralevich2015-02-251-1/+0
* remove /proc/net read access from domain.teNick Kralevich2015-01-141-0/+1
* Remove clatd's dac_override abilities.Lorenzo Colitti2014-06-131-3/+0
* Remove clatd's ability to write to proc files.Lorenzo Colitti2014-06-131-1/+0
* Allow clatd to read from packet sockets and write to raw socketsLorenzo Colitti2014-06-121-2/+2
* Allow clatd to use local/unix datagram socket inherited from netd.Stephen Smalley2014-03-141-0/+2
* Make clatd enforcing.Stephen Smalley2014-03-071-1/+0
* Clean up socket rules.Stephen Smalley2014-02-251-1/+1
* Address SELinux denials with clatd.Stephen Smalley2014-02-211-1/+19
* Make clatd permissive or unconfined.Stephen Smalley2014-02-111-1/+1
* Move unconfined domains out of permissive mode.Nick Kralevich2013-10-211-1/+0
* Fix clatd, broken by selinux policing /dev/tunLorenzo Colitti2013-08-051-0/+8