sec-policy / selinux-base

Gentoo base policy for SELinux

Official package sites : https://wiki.gentoo.org/wiki/Project:SELinux ·

Gentoo SELinux base policy. This contains policy for a system at the end of system installation. There is no extra policy in this package.

v9999 :: 0 :: gentoo

Modified
License
GPL-2
USE flags
doc systemd ubac unconfined unknown-perms

v2.20210203-r1 :: 0 :: gentoo

Modified
License
GPL-2
Keywords
-arm ~amd64 ~arm64 ~mips ~x86
USE flags
doc systemd ubac unconfined unknown-perms

v2.20200818-r2 :: 0 :: gentoo

Modified
License
GPL-2
Keywords
-arm amd64 x86 ~arm64 ~mips
USE flags
doc systemd ubac unconfined unknown-perms

General

doc
Add extra documentation (API, Javadoc, etc). It is recommended to enable per package instead of globally
systemd
Enable use of systemd-specific libraries and features like socket activation or session tracking
ubac
Enable User Based Access Control (UBAC) in the SELinux policy
unconfined
Enable support for the unconfined SELinux module
unknown-perms
Default allow unknown classes in kernels newer than the policy (SELinux policy capability).

sys-apps / policycoreutils : SELinux core utilities

sys-apps / policycoreutils : SELinux core utilities

sec-policy / selinux-base-policy : SELinux policy for core modules

695106
sec-policy/selinux-base: QA issues
770901
sec-policy/selinux-base-2.20200818-r2 fails to compile with dev-lang/python-exec[-native-symlinks]
794043
sec-policy/selinux-base and sec-policy/selinux-base-policy should set S to "${WORKDIR}/refpolicy"
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20210203-r1
Package-Manager: Portage-3.0.17, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: drop old 2.20190609-r1 policy
Package-Manager: Portage-3.0.13, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Drop old
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Stabilize SELinux policy 2.20200818-r2
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20200818-r2
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Jason Zaman · gentoo
sec-policy: Update selinux 9999 packages to EAPI7
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy/selinux-base: Drop unnecessary virtual/udev dep
Closes: https://bugs.gentoo.org/752186 Package-Manager: Portage-3.0.8, Repoman-3.0.2 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20200818-r1
Package-Manager: Portage-3.0.8, Repoman-3.0.1 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20190609-r1
Package-Manager: Portage-3.0.8, Repoman-3.0.1 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: drop old SELinux policies 2.2018
Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20190201-r1
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20190609-r1
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy/selinux-base: Add unknown-perms policy capability
Package-Manager: Portage-2.3.79, Repoman-2.3.16 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
David Seifert · gentoo
*/*: [QA] Remove redundant `|| die` guards
* Since all ebuilds in the tree are EAPI>=4, `|| die` on builtin commands is redundant and dead code. Closes: https://github.com/gentoo/gentoo/pull/13940 Reviewed-by: Ulrich Müller <ulm@gentoo.org> Reviewed-by: Michał Górny <mgorny@gentoo.org> Reviewed-by: Andreas K. Hüttel <dilfridge@gentoo.org> Signed-off-by: David Seifert <soap@gentoo.org>
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy/selinux-base: move patches to my dev space
Swift is retiring so move the SRC_URI for all the patches to dev.gentoo.org/~perfinion/patches/ instead. Signed-off-by: Jason Zaman <perfinion@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20190201-r1
Signed-off-by: Jason Zaman <perfinion@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20180701-r2
Signed-off-by: Jason Zaman <perfinion@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20180701-r1
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: drop old
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Jason Zaman · gentoo
sec-policy/selinux-base: 2.20180701 policies require userspace 2.8
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20180701-r1
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Jason Zaman · gentoo
sec-policy/selinux-base: update SRC_URI
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20180114-r2
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Repository mirror & CI · gentoo
Merge updates from master
Repository mirror & CI · gentoo
Merge updates from master
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20180114-r3
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Jason Zaman · gentoo
sec-policy: drop old
Package-Manager: Portage-2.3.40, Repoman-2.3.9
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20180114-r2
Package-Manager: Portage-2.3.24, Repoman-2.3.6
Michael Mair-Keimberger · gentoo
sec-policy/selinux-base: fix HOMEPAGE.
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20180114-r1
Package-Manager: Portage-2.3.19, Repoman-2.3.6
Sven Vermeulen · gentoo
sec-policy: Release of SELinux policies 2.20180114-r1
Package-Manager: Portage-2.3.19, Repoman-2.3.6
Sven Vermeulen · gentoo
sec-policy/selinux-base: Dependency on higher/latest SELinux userspace
Package-Manager: Portage-2.3.19, Repoman-2.3.6
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170805-r4
Package-Manager: Portage-2.3.13, Repoman-2.3.3
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20170805-r3
Package-Manager: Portage-2.3.13, Repoman-2.3.3
Jason Zaman · gentoo
sec-policy: add blank line to silence repoman header warning
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170805-r3
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20170805-r2
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Jason Zaman · gentoo
sec-policy: drop arm keyword because utils arent keyworded
Package-Manager: Portage-2.3.8, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: drop old
Package-Manager: Portage-2.3.8, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170805-r2
Package-Manager: Portage-2.3.8, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170805-r1
Package-Manager: Portage-2.3.6, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy/selinux-base: drop insecure git:// path in favour of https://
Package-Manager: Portage-2.3.6, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20170204-r4
Package-Manager: Portage-2.3.6, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20170204-r3
Package-Manager: Portage-2.3.5, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170204-r4
Package-Manager: Portage-2.3.5, Repoman-2.3.1
Sven Vermeulen · gentoo
sec-policy: Stabilize 2.20170204-r2 ebuilds
Package-Manager: Portage-2.3.3, Repoman-2.3.1
Sven Vermeulen · gentoo
sec-policy: Release of SELinux policies 2.20170204-r3
Package-Manager: Portage-2.3.3, Repoman-2.3.1
Robin H. Johnson · gentoo
Drop $Id$ per council decision in bug #611234.
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170204-r2
Package-Manager: Portage-2.3.3, Repoman-2.3.1
Jason Zaman · gentoo
sec-policy: update copyright line on live ebuilds
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20170204-r1
Package-Manager: portage-2.3.3
T. Malfatti · gentoo
media-libs/portaudio: Version bump
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20161023-r4
Package-Manager: portage-2.3.3
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20161023-r3
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Drop older than 2.20151208-r4
2.20151208-r4 was released more than 6 months ago so drop all before that. 2.20151208-r5 and -r6 were stabilized together so both are not needed. remove some forgotten FILESDIR too Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Drop 2.20161023-r2, broken patch doesnt apply
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20161023-r3
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy/selinux-base: update to EAPI6
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20161023-r2
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20161023-r1
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20151208-r6
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20151208-r5
Package-Manager: portage-2.3.0
Sven Vermeulen · gentoo
sec-policy: Release of SELinux policies 2.20161023-r1
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20151208-r6
Package-Manager: portage-2.3.0
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20151208-r5
Package-Manager: portage-2.2.28
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20151208-r4
Package-Manager: portage-2.2.28
Sven Vermeulen · gentoo
sec-policy: Clean up old packages
Remove year-old SELinux policy packages. Currently stick with the last stable one from the 2014 series, we can clean that up when there is an 2016 release made (upstream is currently still at the 20151203). Package-Manager: portage-2.2.28
Sven Vermeulen · gentoo
sec-policy: Release of SELinux policies 2.20151208-r4
Package-Manager: portage-2.2.28
Sven Vermeulen · gentoo
sec-policy/selinux-base: Drop old blocker on selinux-base-policy
The purpose of selinux-base is to provide the interface files and base module (but does not necessarily require it to load). Historically, the package was the full base policy, but since 2012 this was moved to the selinux-base-policy package. A blocker was put in place to ensure proper transitioning. As we no longer have these policies in our repository, remove this old blocker. Package-Manager: portage-2.2.28
Jason Zaman · gentoo
sec-policy/selinux-base: stabilize missed for -r2 policy
Package-Manager: portage-2.2.26
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20151208-r3
Package-Manager: portage-2.2.26
Mike Frysinger · gentoo
sec-policy/selinux-base: add arm/arm64/mips love
Mike Frysinger · gentoo
sec-policy/*: drop redundant empty KEYWORDS
This makes `ekeyword` much easier.
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20151208-r1
Package-Manager: portage-2.2.26
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20151208-r2
Package-Manager: portage-2.2.26
Jason Zaman · gentoo
sec-policy: Stabilize selinux policy 2.20141203-r10
Package-Manager: portage-2.2.24
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20151208-r1
Jason Zaman · gentoo
sec-policy: Drop old SELinux policies <=2.20140311-r7
Jason Zaman · gentoo
sec-policy: Stabilize SELinux policies 2.20141203-r9
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20141203-r10
Package-Manager: portage-2.2.20.1
Jason Zaman · gentoo
sec-policy/selinux-base: Add selinux useflag to live ebuild
Package-Manager: portage-2.2.20.1
Jason Zaman · gentoo
sec-policy/selinux-base: Remove outdated check on previous version
Package-Manager: portage-2.2.20.1
Jason Zaman · gentoo
sec-policy/selinux-base: Add @selinux-rebuild portage set
Package-Manager: portage-2.2.20.1
Jason Zaman · gentoo
sec-policy: Stabilize SELinux policies 2.20141203-r8
Package-Manager: portage-2.2.20.1
Jason Zaman · gentoo
sec-policy: Release of SELinux policies 2.20141203-r9
Package-Manager: portage-2.2.20.1
Justin Lecher · gentoo
Use https by default
Convert all URLs for sites supporting encrypted connections from http to https Signed-off-by: Justin Lecher <jlec@gentoo.org>
Robin H. Johnson · gentoo
proj/gentoo: Initial commit
This commit represents a new era for Gentoo: Storing the gentoo-x86 tree in Git, as converted from CVS. This commit is the start of the NEW history. Any historical data is intended to be grafted onto this point. Creation process: 1. Take final CVS checkout snapshot 2. Remove ALL ChangeLog* files 3. Transform all Manifests to thin 4. Remove empty Manifests 5. Convert all stale $Header$/$Id$ CVS keywords to non-expanded Git $Id$ 5.1. Do not touch files with -kb/-ko keyword flags. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> X-Thanks: Alec Warner <antarus@gentoo.org> - did the GSoC 2006 migration tests X-Thanks: Robin H. Johnson <robbat2@gentoo.org> - infra guy, herding this project X-Thanks: Nguyen Thai Ngoc Duy <pclouds@gentoo.org> - Former Gentoo developer, wrote Git features for the migration X-Thanks: Brian Harring <ferringb@gentoo.org> - wrote much python to improve cvs2svn X-Thanks: Rich Freeman <rich0@gentoo.org> - validation scripts X-Thanks: Patrick Lauer <patrick@gentoo.org> - Gentoo dev, running new 2014 work in migration X-Thanks: Michał Górny <mgorny@gentoo.org> - scripts, QA, nagging X-Thanks: All of other Gentoo developers - many ideas and lots of paint on the bikeshed