rpms
/
checkpolicy
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
142 Commits 40 Branches 153 Tags 738 KiB
Commit Graph

142 Commits

Author SHA1 Message Date
Daniel J Walsh ff8894ce82 - Latest update from NSA 
Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
- Allow policy version to be one number
 2010-06-16 12:11:21 +00:00
Daniel J Walsh 7c6d84d139 - Latest update from NSA 
Add support for building Xen policies from Paul Nuzzi.
Add long options to checkpolicy and checkmodule by Guido Trentalancia
    <guido@trentalancia.com>
 2009-12-01 22:50:19 +00:00
Bill Nottingham 33508b5322 Fix typo that causes a failure to update the common directory. (releng 
#2781)
 2009-11-25 22:47:31 +00:00
Jesse Keating 377ab91c67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-24 18:52:16 +00:00
Jesse Keating 6cd52708e4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-24 07:15:25 +00:00
Daniel J Walsh 69181ce9f3 - Latest update from NSA 
Fix alias field in module format, caused by boundary format change from
    Caleb Case.
 2009-02-18 21:54:40 +00:00
Daniel J Walsh 31c67841df - Rebuild with new libsepol 2008-07-08 12:08:04 +00:00
Daniel J Walsh f0fa1b8c8a - Rebuild with new libsepol 2008-07-08 12:05:35 +00:00
Tom Callaway 4325162102 fix license tag 2008-05-28 21:41:21 +00:00
Daniel J Walsh d9e3ea1a9d - Latest update from NSA 
Update checkpolicy for user and role mapping support from Joshua Brindle.
 2008-05-28 15:15:49 +00:00
Daniel J Walsh a17aa67c97 - Allow modules with 4 sections or more 2008-05-06 18:22:18 +00:00
Daniel J Walsh ce4fbaf6a7 - Latest update from NSA 
Add permissive domain support from Eric Paris.
 2008-04-14 19:34:07 +00:00
Daniel J Walsh 1ca4c44086 - Latest update from NSA 
Add permissive domain support from Eric Paris.
 2008-03-27 17:39:08 +00:00
Daniel J Walsh 3181c033e3 - Latest update from NSA 
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
 2008-03-14 00:24:03 +00:00
Daniel J Walsh 164c17c9c1 - Latest update from NSA 
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
 2008-03-13 23:47:55 +00:00
Daniel J Walsh e22ff16832 - Latest update from NSA 
Use yyerror2() where appropriate from Todd C. Miller.
- Build against latest libsepol
 2008-02-28 21:57:00 +00:00
Daniel J Walsh 35299999e4 - Start shipping sedismod and sedispol 2008-02-22 19:33:37 +00:00
Daniel J Walsh 88d15070c2 - Latest update from NSA 
Update dispol for libsepol avtab changes from Stephen Smalley.
 2008-02-04 19:06:00 +00:00
Daniel J Walsh d793dcb07e - Latest update from NSA 
Update dispol for libsepol avtab changes from Stephen Smalley.
 2008-02-04 17:24:34 +00:00
Daniel J Walsh 1257a8cea9 - Latest update from NSA 
Deprecate role dominance in parser.
 2008-01-25 16:19:00 +00:00
Daniel J Walsh 2cb30aa859 - Update to use libsepol-static library 2008-01-23 20:19:17 +00:00
Daniel J Walsh 4dd1371296 - Update to use libsepol-static library 2008-01-21 21:42:58 +00:00
Daniel J Walsh 5c3895bc13 - Latest update from NSA 
Initialize the source file name from the command line argument so that
    checkpolicy/checkmodule report something more useful than "unknown
    source".
Merged remove use of REJECT and trailing context in lex rules; make ipv4
    address parsing like ipv6 from James Carter.
 2007-11-15 18:41:43 +00:00
Bill Nottingham b3826e5a21 makefile update to properly grab makefile.common 2007-10-15 18:39:30 +00:00
Daniel J Walsh 5d693896f6 Merged handle unknown policydb flag support from Eric Paris. Adds new 
command line options -U {allow, reject, deny} for selecting the flag
    when a base module or kernel policy is built.
 2007-09-19 00:20:03 +00:00
Jesse Keating 3667d6eef5 - Rebuild for selinux ppc32 issue. 2007-08-29 04:03:17 +00:00
Daniel J Walsh 7b1ac7a22c - Rebuild with the latest libsepol 2007-06-18 18:20:26 +00:00
Daniel J Walsh 4bd6947fff - Latest update from NSA 
Merged fix for segfault on duplicate require of sensitivity from Caleb
    Case.
Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
 2007-06-04 19:21:50 +00:00
Daniel J Walsh 7b7e59092d - Latest update from NSA 
Merged checkmodule man page fix from Dan Walsh.
 2007-04-12 20:05:28 +00:00
Daniel J Walsh ebb6b2e693 - Rebuild with new libsepol 2007-03-30 16:14:13 +00:00
Daniel J Walsh 7f274195c4 - Rebuild with new libsepol 2007-03-29 18:01:38 +00:00
Daniel J Walsh c1870cdf3a - Latest update from NSA 
Merged patch to allow dots in class identifiers from Caleb Case.
 2007-02-20 14:59:15 +00:00
Daniel J Walsh 1ec43fbb6a - Latest update from NSA 
Merged patch to use new libsepol error codes by Karl MacMillan.
Updated version for stable branch.
 2007-02-07 21:42:36 +00:00
Daniel J Walsh efbbda85bd - Rebuild for new libraries 2006-11-28 19:04:15 +00:00
Daniel J Walsh f9c5836922 - Latest update from NSA 
Collapse user identifiers and identifiers together.
 2006-11-28 18:56:56 +00:00
Daniel J Walsh c2957dde68 - Latest update from NSA 
Collapse user identifiers and identifiers together.
 2006-11-14 14:50:36 +00:00
Daniel J Walsh 9e6b63128e - Latest update from NSA 
Updated version for release.
 2006-11-03 21:45:02 +00:00
Daniel J Walsh 2fc5612c93 - Latest update from NSA 
Merged user and range_transition support for modules from Darrel Goeddel
 2006-09-29 14:22:59 +00:00
Daniel J Walsh 39e4bfb0e8 - Latest update from NSA 
merged range_transition enhancements and user module format changes from
    Darrel Goeddel
Merged symtab datum patch from Karl MacMillan.
 2006-09-06 18:16:16 +00:00
Jesse Keating d6c461cca2 bumped for rebuild 2006-07-12 04:47:50 +00:00
Daniel J Walsh 0962a544c8 - Latest upgrade from NSA 
Lindent.
Merged patch to remove TE rule conflict checking from the parser from
    Joshua Brindle. This can only be done properly by the expander.
Merged patch to make checkpolicy/checkmodule handling of
    duplicate/conflicting TE rules the same as the expander from Joshua
    Brindle.
Merged optionals in base take 2 patch set from Joshua Brindle.
 2006-07-05 10:43:21 +00:00
Daniel J Walsh 0b33b45a9e - Latest upgrade from NSA 
Merged compiler cleanup patch from Karl MacMillan.
Merged fix warnings patch from Karl MacMillan.
 2006-05-24 03:11:52 +00:00
Daniel J Walsh a7c8fb25b4 - Latest upgrade from NSA 
Changed require_class to reject permissions that have not been declared if
    building a base module.
 2006-04-05 17:46:41 +00:00
Daniel J Walsh cb354e0254 - Latest upgrade from NSA 
Fixed checkmodule to call link_modules prior to expand_module to handle
    optionals.
Fixed require_class to avoid shadowing permissions already defined in an
    inherited common definition.
 2006-03-28 20:07:42 +00:00
Daniel J Walsh d914ad5a8c - Rebuild with new libsepol 2006-03-27 22:13:22 +00:00
Daniel J Walsh 01a9ba841e - Latest upgrade from NSA 
Moved processing of role and user require statements to 2nd pass.
 2006-03-23 16:14:03 +00:00
Daniel J Walsh af7b9d6c00 - Latest upgrade from NSA 
Updated version for release.
Fixed bug in role dominance (define_role_dom).
 2006-03-17 18:36:26 +00:00
Daniel J Walsh dcec148fc4 - Latest upgrade from NSA 
Added a check for failure to declare each sensitivity in a level
    definition.
Changed to clone level data for aliased sensitivities to avoid double free
    upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
 2006-02-17 20:00:08 +00:00
Daniel J Walsh d0cfe1d1ab - Latest upgrade from NSA 
Added a check for failure to declare each sensitivity in a level
    definition.
Changed to clone level data for aliased sensitivities to avoid double free
    upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
 2006-02-16 18:44:15 +00:00
Daniel J Walsh 6d151699a3 - Latest upgrade from NSA 
Merged optionals in base patch from Joshua Brindle.
 2006-02-13 19:31:17 +00:00