rpms/checkpolicy
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
275 Commits 40 Branches 153 Tags 738 KiB
5e2131283b
Commit Graph

275 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dan Walsh
9f8377e4c3 Update to upstream 
* implement new default labeling behaviors for usr, role, range
	* Fix dead links to www.nsa.gov/selinux
 2012-03-29 15:28:08 -04:00
Dan Walsh
9a3ff63515 Fix man page to link to www.nsa.giv/research/selinux 2012-01-16 12:13:04 -05:00
Dan Walsh
102b87e2ac Fix man page to link to www.nsa.giv/research/selinux 2012-01-16 12:12:18 -05:00
Dennis Gilmore
2bf4af1966 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-12 17:17:07 -06:00
Dan Walsh
ab9a33402e Update to upstream 
* add ignoredirs config for genhomedircon
	* Fallback_user_level can be NULL if you are not using MLS
 2011-12-21 18:06:58 +00:00
Dan Walsh
1e9a9d79a0 Update to upstream 
* add new helper to translate class sets into bitmaps
 2011-12-21 17:59:52 +00:00
Dan Walsh
629e1bb095 Update to upstream 
* add new helper to translate class sets into bitmaps
 2011-12-21 17:59:06 +00:00
Dan Walsh
228c1db0c3 default_rules should be optional 2011-12-21 13:35:19 +00:00
Dan Walsh
ca712cbf0b Rebuild with latest libsepol 2011-12-16 06:23:11 -05:00
Dan Walsh
62a79399e3 Upgrade to upstream 
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
 2011-12-15 16:32:47 -05:00
Dan Walsh
5ea3e823bf Upgrade to upstream 
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
 2011-12-15 14:30:26 -05:00
Dan Walsh
e9ff6dfd95 Allow ~ in a filename 2011-11-14 11:35:35 -05:00
Dan Walsh
1e7f3c93f0 Upgrade to upstream 
* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
	* drop libsepol dynamic link in checkpolicy
 2011-11-04 09:27:03 -04:00
Dan Walsh
0708d417f5 Fix checkpolicy to ignore '"' in filename trans rules 2011-09-20 10:06:14 -04:00
Dan Walsh
911694cf55 Update to upstream 
* Separate tunable from boolean during compile.
 2011-09-19 06:50:16 -04:00
Dan Walsh
84d179aabd Update to upstream 
* Separate tunable from boolean during compile.
 2011-09-19 06:44:54 -04:00
Dan Walsh
253cdcd5ea Update to upstream 
* Separate tunable from boolean during compile.
 2011-09-19 06:43:53 -04:00
Dan Walsh
68f262fbdb Update to upstream 
* checkpolicy: fix spacing in output message
 2011-08-30 16:15:26 -04:00
Dan Walsh
e87652be15 * add missing ; to attribute_role_def 
*Redo filename/filesystem syntax to support filename trans
 2011-08-18 07:00:03 -04:00
Dan Walsh
5bae77199e * add missing ; to attribute_role_def 
*Redo filename/filesystem syntax to support filename trans
 2011-08-18 06:51:40 -04:00
Dan Walsh
72448b2ce3 Update to upstream 2011-07-28 11:42:26 -04:00
Dan Walsh
920355cc3a Update to upstream 2011-07-28 11:38:45 -04:00
Dan Walsh
5eaf35502b Update to upstream 
* Wrap file names in filename transitions with quotes by Steve Lawrence.
	* Allow filesystem names to start with a digit by James Carter.
	* Add support for using the last path compnent in type transitions by Eric
 2011-05-23 18:25:07 -04:00
Dan Walsh
49877e7556 Fixes for filename transition code 2011-04-21 11:32:36 -04:00
Dan Walsh
f530d30afa Add "-" ass a file type 2011-04-15 14:10:50 -04:00
Dan Walsh
66140a0889 Latest patches 2011-04-12 13:12:30 -04:00
Dan Walsh
9d5bc6c8bd Patches from Eric Paris 
We just use random numbers to make menu selections.  Use #defines and
names that make some sense instead.
 2011-03-29 15:42:16 -04:00
Dennis Gilmore
ab345be6df - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 02:16:59 -06:00
Dan Walsh
2cb151d87e - Add James Carters Patch 
*This patch is needed because some filesystem names (such as 9p) start
  with a digit.
 2011-01-12 16:49:06 -05:00
Dan Walsh
5ea14e8ebf - Latest update from NSA 
* Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
 2010-12-21 16:41:10 -05:00
Dan Walsh
acd4c1a5bb - Rebuild to make sure it will build in Fedora 2010-12-08 11:56:11 -05:00
Dan Walsh
8bd7fb29dd - Rebuild to make sure it will build in Fedora 2010-12-08 11:37:45 -05:00
Fedora Release Engineering
9a2a32f733 dist-git conversion 2010-07-28 11:39:30 +00:00
Daniel J Walsh
ff8894ce82 - Latest update from NSA 
Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
- Allow policy version to be one number
 2010-06-16 12:11:21 +00:00
Daniel J Walsh
7c6d84d139 - Latest update from NSA 
Add support for building Xen policies from Paul Nuzzi.
Add long options to checkpolicy and checkmodule by Guido Trentalancia
    <guido@trentalancia.com>
 2009-12-01 22:50:19 +00:00
Bill Nottingham
33508b5322 Fix typo that causes a failure to update the common directory. (releng 
#2781)
 2009-11-25 22:47:31 +00:00
Jesse Keating
377ab91c67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-24 18:52:16 +00:00
Jesse Keating
6cd52708e4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-24 07:15:25 +00:00
Daniel J Walsh
69181ce9f3 - Latest update from NSA 
Fix alias field in module format, caused by boundary format change from
    Caleb Case.
 2009-02-18 21:54:40 +00:00
Daniel J Walsh
31c67841df - Rebuild with new libsepol 2008-07-08 12:08:04 +00:00
Daniel J Walsh
f0fa1b8c8a - Rebuild with new libsepol 2008-07-08 12:05:35 +00:00
Tom Callaway
4325162102 fix license tag 2008-05-28 21:41:21 +00:00
Daniel J Walsh
d9e3ea1a9d - Latest update from NSA 
Update checkpolicy for user and role mapping support from Joshua Brindle.
 2008-05-28 15:15:49 +00:00
Daniel J Walsh
a17aa67c97 - Allow modules with 4 sections or more 2008-05-06 18:22:18 +00:00
Daniel J Walsh
ce4fbaf6a7 - Latest update from NSA 
Add permissive domain support from Eric Paris.
 2008-04-14 19:34:07 +00:00
Daniel J Walsh
1ca4c44086 - Latest update from NSA 
Add permissive domain support from Eric Paris.
 2008-03-27 17:39:08 +00:00
Daniel J Walsh
3181c033e3 - Latest update from NSA 
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
 2008-03-14 00:24:03 +00:00
Daniel J Walsh
164c17c9c1 - Latest update from NSA 
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
 2008-03-13 23:47:55 +00:00
Daniel J Walsh
e22ff16832 - Latest update from NSA 
Use yyerror2() where appropriate from Todd C. Miller.
- Build against latest libsepol
 2008-02-28 21:57:00 +00:00
Daniel J Walsh
35299999e4 - Start shipping sedismod and sedispol 2008-02-22 19:33:37 +00:00