Commit Graph

254 Commits

Author SHA1 Message Date
Petr Lautrbach 695b18effb Drop unused checkpolicy-rhat.patch 2015-07-20 18:57:45 +02:00
Petr Lautrbach 76fb2b6d10 Update to 2.4 release 2015-07-20 18:53:21 +02:00
Dennis Gilmore 58f0113c23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 02:34:29 +00:00
Peter Robinson 437291d3d3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 00:01:56 +00:00
Tom Callaway ca57820539 fix license handling 2014-07-11 16:30:32 -04:00
Dennis Gilmore dd6f1ef617 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-06 23:34:12 -05:00
Dan Walsh 946ad38fd1 Update to upstream
* Add Android support for building dispol.
	* Report source file and line information for neverallow failures.
	* Prevent incompatible option combinations for checkmodule.
	* Drop -lselinux from LDLIBS for test programs; not used.
	* Add debug feature to display constraints/validatetrans from Richard Haines.
2014-05-06 14:20:14 -04:00
Dan Walsh 60787b1d18 Update to upstream
* Fix hyphen usage in man pages from Laurent Bigonville.
	* handle-unknown / -U required argument fix from Laurent Bigonville.
	* Support overriding Makefile PATH and LIBDIR from Laurent Bigonville.
	* Support space and : in filenames from Dan Walsh.
2013-10-31 09:23:42 -04:00
Dan Walsh eddfbe52c6 UPdate to upstream 2013-10-31 09:21:49 -04:00
Dan Walsh 6161a26457 UPdate to upstream 2013-10-31 09:21:25 -04:00
Dennis Gilmore d2e9a9d648 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-02 23:45:36 -05:00
Dan Walsh 4ca411361a Fix a segmentation fault if the --handle-unknown option was set without
arguments.
- Thanks to Alexandre Rebert and his team at Carnegie Mellon University
for detecting this crash.
2013-07-16 12:36:38 -04:00
Dan Walsh b640f10250 ":" should be allowed for file trans names 2013-07-16 12:35:19 -04:00
Dan Walsh 9e5a835ab1 ":" should be allowed for file trans names 2013-03-19 19:41:27 -04:00
Dan Walsh 6bfe32f6aa ":" should be allowed for file trans names 2013-03-19 10:48:10 -04:00
Dan Walsh 7a5e44fa80 Space should be allowed for file trans names 2013-03-12 08:43:39 -04:00
Dan Walsh 02cf4abf2d Update to upstream
* Fix errors found by coverity
        * implement default type policy syntax
        * Free allocated memory when clean up / exit.
2013-02-07 13:40:56 -05:00
Dan Walsh 889f900222 Update to latest patches from eparis/Upstream
-   checkpolicy: libsepol: implement default type policy syntax
-
-   We currently have a mechanism in which the default user, role, and range
-   can be picked up from the source or the target object.  This implements
-   the same thing for types.  The kernel will override this with type
-   transition rules and similar.  This is just the default if nothing
-   specific is given.
2013-01-05 11:08:17 -05:00
Dan Walsh 13d5e7a515 Update to latest patches from eparis/Upstream
-   checkpolicy: libsepol: implement default type policy syntax
-
-   We currently have a mechanism in which the default user, role, and range
-   can be picked up from the source or the target object.  This implements
-   the same thing for types.  The kernel will override this with type
-   transition rules and similar.  This is just the default if nothing
-   specific is given.
2013-01-05 11:02:10 -05:00
Dan Walsh c662668dab Rebuild with fixed libsepol 2013-01-05 07:09:43 -05:00
rhatdan aa082595d2 Rebuild with fixed libsepol 2012-09-25 15:42:44 -04:00
rhatdan 1057df92ca Update to upstream
* fd leak reading policy
	* check return code on ebitmap_set_bit
2012-09-13 13:29:17 -04:00
Dan Walsh 1796244eeb Rebuild to grab latest libsepol 2012-07-30 11:21:22 -04:00
Dan Walsh 04deb1acb8 Rebuild to grab latest libsepol 2012-07-24 14:04:15 -04:00
Dennis Gilmore c25bf4dc69 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-18 13:53:20 -05:00
Dan Walsh f5401fa228 Update to upstream
* sepolgen: We need to support files that have a + in them
	* Android/MacOS X build support
2012-07-04 07:24:23 -04:00
Dan Walsh fbd2801c70 Rebuild to get latest libsepol which fixes the file_name transition problems 2012-04-23 21:10:43 -04:00
Dan Walsh c856d94691 Recompile with libsepol that has support for ptrace_child 2012-04-17 17:06:35 -04:00
Dan Walsh 1ef68435f0 Allow checkpolicy to use + in a file name 2012-04-03 18:51:45 -04:00
Dan Walsh 9f8377e4c3 Update to upstream
* implement new default labeling behaviors for usr, role, range
	* Fix dead links to www.nsa.gov/selinux
2012-03-29 15:28:08 -04:00
Dan Walsh 9a3ff63515 Fix man page to link to www.nsa.giv/research/selinux 2012-01-16 12:13:04 -05:00
Dan Walsh 102b87e2ac Fix man page to link to www.nsa.giv/research/selinux 2012-01-16 12:12:18 -05:00
Dennis Gilmore 2bf4af1966 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-12 17:17:07 -06:00
Dan Walsh ab9a33402e Update to upstream
* add ignoredirs config for genhomedircon
	* Fallback_user_level can be NULL if you are not using MLS
2011-12-21 18:06:58 +00:00
Dan Walsh 1e9a9d79a0 Update to upstream
* add new helper to translate class sets into bitmaps
2011-12-21 17:59:52 +00:00
Dan Walsh 629e1bb095 Update to upstream
* add new helper to translate class sets into bitmaps
2011-12-21 17:59:06 +00:00
Dan Walsh 228c1db0c3 default_rules should be optional 2011-12-21 13:35:19 +00:00
Dan Walsh ca712cbf0b Rebuild with latest libsepol 2011-12-16 06:23:11 -05:00
Dan Walsh 62a79399e3 Upgrade to upstream
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
2011-12-15 16:32:47 -05:00
Dan Walsh 5ea3e823bf Upgrade to upstream
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
2011-12-15 14:30:26 -05:00
Dan Walsh e9ff6dfd95 Allow ~ in a filename 2011-11-14 11:35:35 -05:00
Dan Walsh 1e7f3c93f0 Upgrade to upstream
* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
	* drop libsepol dynamic link in checkpolicy
2011-11-04 09:27:03 -04:00
Dan Walsh 0708d417f5 Fix checkpolicy to ignore '"' in filename trans rules 2011-09-20 10:06:14 -04:00
Dan Walsh 911694cf55 Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:50:16 -04:00
Dan Walsh 84d179aabd Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:44:54 -04:00
Dan Walsh 253cdcd5ea Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:43:53 -04:00
Dan Walsh 68f262fbdb Update to upstream
* checkpolicy: fix spacing in output message
2011-08-30 16:15:26 -04:00
Dan Walsh e87652be15 * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 07:00:03 -04:00
Dan Walsh 5bae77199e * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 06:51:40 -04:00
Dan Walsh 72448b2ce3 Update to upstream 2011-07-28 11:42:26 -04:00