Commit Graph

267 Commits

Author SHA1 Message Date
Dan Walsh ca712cbf0b Rebuild with latest libsepol 2011-12-16 06:23:11 -05:00
Dan Walsh 62a79399e3 Upgrade to upstream
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
2011-12-15 16:32:47 -05:00
Dan Walsh 5ea3e823bf Upgrade to upstream
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
2011-12-15 14:30:26 -05:00
Dan Walsh e9ff6dfd95 Allow ~ in a filename 2011-11-14 11:35:35 -05:00
Dan Walsh 1e7f3c93f0 Upgrade to upstream
* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
	* drop libsepol dynamic link in checkpolicy
2011-11-04 09:27:03 -04:00
Dan Walsh 0708d417f5 Fix checkpolicy to ignore '"' in filename trans rules 2011-09-20 10:06:14 -04:00
Dan Walsh 911694cf55 Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:50:16 -04:00
Dan Walsh 84d179aabd Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:44:54 -04:00
Dan Walsh 253cdcd5ea Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:43:53 -04:00
Dan Walsh 68f262fbdb Update to upstream
* checkpolicy: fix spacing in output message
2011-08-30 16:15:26 -04:00
Dan Walsh e87652be15 * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 07:00:03 -04:00
Dan Walsh 5bae77199e * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 06:51:40 -04:00
Dan Walsh 72448b2ce3 Update to upstream 2011-07-28 11:42:26 -04:00
Dan Walsh 920355cc3a Update to upstream 2011-07-28 11:38:45 -04:00
Dan Walsh 5eaf35502b Update to upstream
* Wrap file names in filename transitions with quotes by Steve Lawrence.
	* Allow filesystem names to start with a digit by James Carter.
	* Add support for using the last path compnent in type transitions by Eric
2011-05-23 18:25:07 -04:00
Dan Walsh 49877e7556 Fixes for filename transition code 2011-04-21 11:32:36 -04:00
Dan Walsh f530d30afa Add "-" ass a file type 2011-04-15 14:10:50 -04:00
Dan Walsh 66140a0889 Latest patches 2011-04-12 13:12:30 -04:00
Dan Walsh 9d5bc6c8bd Patches from Eric Paris
We just use random numbers to make menu selections.  Use #defines and
names that make some sense instead.
2011-03-29 15:42:16 -04:00
Dennis Gilmore ab345be6df - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 02:16:59 -06:00
Dan Walsh 2cb151d87e - Add James Carters Patch
*This patch is needed because some filesystem names (such as 9p) start
  with a digit.
2011-01-12 16:49:06 -05:00
Dan Walsh 5ea14e8ebf - Latest update from NSA
* Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:41:10 -05:00
Dan Walsh acd4c1a5bb - Rebuild to make sure it will build in Fedora 2010-12-08 11:56:11 -05:00
Dan Walsh 8bd7fb29dd - Rebuild to make sure it will build in Fedora 2010-12-08 11:37:45 -05:00
Fedora Release Engineering 9a2a32f733 dist-git conversion 2010-07-28 11:39:30 +00:00
Daniel J Walsh ff8894ce82 - Latest update from NSA
Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
- Allow policy version to be one number
2010-06-16 12:11:21 +00:00
Daniel J Walsh 7c6d84d139 - Latest update from NSA
Add support for building Xen policies from Paul Nuzzi.
Add long options to checkpolicy and checkmodule by Guido Trentalancia
    <guido@trentalancia.com>
2009-12-01 22:50:19 +00:00
Bill Nottingham 33508b5322 Fix typo that causes a failure to update the common directory. (releng
#2781)
2009-11-25 22:47:31 +00:00
Jesse Keating 377ab91c67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-24 18:52:16 +00:00
Jesse Keating 6cd52708e4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-24 07:15:25 +00:00
Daniel J Walsh 69181ce9f3 - Latest update from NSA
Fix alias field in module format, caused by boundary format change from
    Caleb Case.
2009-02-18 21:54:40 +00:00
Daniel J Walsh 31c67841df - Rebuild with new libsepol 2008-07-08 12:08:04 +00:00
Daniel J Walsh f0fa1b8c8a - Rebuild with new libsepol 2008-07-08 12:05:35 +00:00
Tom Callaway 4325162102 fix license tag 2008-05-28 21:41:21 +00:00
Daniel J Walsh d9e3ea1a9d - Latest update from NSA
Update checkpolicy for user and role mapping support from Joshua Brindle.
2008-05-28 15:15:49 +00:00
Daniel J Walsh a17aa67c97 - Allow modules with 4 sections or more 2008-05-06 18:22:18 +00:00
Daniel J Walsh ce4fbaf6a7 - Latest update from NSA
Add permissive domain support from Eric Paris.
2008-04-14 19:34:07 +00:00
Daniel J Walsh 1ca4c44086 - Latest update from NSA
Add permissive domain support from Eric Paris.
2008-03-27 17:39:08 +00:00
Daniel J Walsh 3181c033e3 - Latest update from NSA
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
2008-03-14 00:24:03 +00:00
Daniel J Walsh 164c17c9c1 - Latest update from NSA
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
2008-03-13 23:47:55 +00:00
Daniel J Walsh e22ff16832 - Latest update from NSA
Use yyerror2() where appropriate from Todd C. Miller.
- Build against latest libsepol
2008-02-28 21:57:00 +00:00
Daniel J Walsh 35299999e4 - Start shipping sedismod and sedispol 2008-02-22 19:33:37 +00:00
Daniel J Walsh 88d15070c2 - Latest update from NSA
Update dispol for libsepol avtab changes from Stephen Smalley.
2008-02-04 19:06:00 +00:00
Daniel J Walsh d793dcb07e - Latest update from NSA
Update dispol for libsepol avtab changes from Stephen Smalley.
2008-02-04 17:24:34 +00:00
Daniel J Walsh 1257a8cea9 - Latest update from NSA
Deprecate role dominance in parser.
2008-01-25 16:19:00 +00:00
Daniel J Walsh 2cb30aa859 - Update to use libsepol-static library 2008-01-23 20:19:17 +00:00
Daniel J Walsh 4dd1371296 - Update to use libsepol-static library 2008-01-21 21:42:58 +00:00
Daniel J Walsh 5c3895bc13 - Latest update from NSA
Initialize the source file name from the command line argument so that
    checkpolicy/checkmodule report something more useful than "unknown
    source".
Merged remove use of REJECT and trailing context in lex rules; make ipv4
    address parsing like ipv6 from James Carter.
2007-11-15 18:41:43 +00:00
Bill Nottingham b3826e5a21 makefile update to properly grab makefile.common 2007-10-15 18:39:30 +00:00
Daniel J Walsh 5d693896f6 Merged handle unknown policydb flag support from Eric Paris. Adds new
command line options -U {allow, reject, deny} for selecting the flag
    when a base module or kernel policy is built.
2007-09-19 00:20:03 +00:00