Age | Commit message (Expand) | Author |
---|---|---|
2015-06-16 | Allow clatd CAP_IPC_LOCK for mmap() | Erik Kline |
2015-02-26 | dontaudit clatd self:capability ipc_lock | Nick Kralevich |
2015-02-25 | Revert /proc/net related changes | Nick Kralevich |
2015-01-14 | remove /proc/net read access from domain.te | Nick Kralevich |
2014-06-13 | Remove clatd's dac_override abilities. | Lorenzo Colitti |
2014-06-13 | Remove clatd's ability to write to proc files. | Lorenzo Colitti |
2014-06-12 | Allow clatd to read from packet sockets and write to raw sockets | Lorenzo Colitti |
2014-03-14 | Allow clatd to use local/unix datagram socket inherited from netd. | Stephen Smalley |
2014-03-07 | Make clatd enforcing. | Stephen Smalley |
2014-02-25 | Clean up socket rules. | Stephen Smalley |
2014-02-21 | Address SELinux denials with clatd. | Stephen Smalley |
2014-02-11 | Make clatd permissive or unconfined. | Stephen Smalley |
2013-10-21 | Move unconfined domains out of permissive mode. | Nick Kralevich |
2013-08-05 | Fix clatd, broken by selinux policing /dev/tun | Lorenzo Colitti |