summary refs log tree commit diff
path: root/etc/guix-daemon.cil.in
AgeCommit message (Collapse)Author
2020-12-10etc: Add more SELinux permissions for the daemon.Marius Bakke
* etc/guix-daemon.cil.in (guix_daemon): Permit file write, getattr, link and unlink for the guix_daemon_exec_t type.
2020-11-27etc: Add more SELinux permissions for the daemon.Marius Bakke
* etc/guix-daemon.cil.in (guix_daemon): Permit more operations required for various build jobs.
2020-11-26etc: Add more SELinux permissions for the daemon.Marius Bakke
* etc/guix-daemon.cil.in (guix_daemon): Permit file appending, setattr, read/write UDP sockets, access to tmpfs and hugetlbfs, and connecting to PostgreSQL.
2020-11-25etc: Add more SELinux permissions for the daemon.Marius Bakke
This is needed for some package test suites. * etc/guix-daemon.cil.in (guix_daemon): Permit unix_dgram_socket operations.
2020-11-15etc: Updates for the guix-daemon SELinux policy.Daniel Brooks
* etc/guix-daemon.cil.in (guix_daemon): Specify more permissions for guix-daemon to account for daemon updates and newer SELinux. I can't promise that this is a complete list of everything that guix-daemon needs, but it's probably most of them. It can search for, install, upgrade, and remove packages, create virtual machines and containers, update itself, and so on. Signed-off-by: Marius Bakke <marius@gnu.org>
2019-09-08etc: Remove references to libexec/guix* from SELinux policy.Ludovic Courtès
* etc/guix-daemon.cil.in: Remove references to libexec/guix*.
2018-02-07etc: Add SELinux policy for the daemon.Ricardo Wurmus
* etc/guix-daemon.cil.in: New file. * Makefile.am (dist_selinux_policy_DATA): Define it. * configure.ac: Handle --with-selinux-policy-dir. * doc/guix.texi (SELinux Support): New section.