4676dbee55
- Add audit2why python bindings
2008-01-10 18:44:50 +00:00
082b5c93a4
- Add audit2why python bindings
2008-01-10 18:44:01 +00:00
9ec7726e1d
- Add audit2why python bindings
2008-01-10 18:32:52 +00:00
625a8fb5a8
- Add pid_t typemap for swig bindings
2008-01-08 11:07:27 +00:00
5866f48366
- smp_mflag
2008-01-03 20:39:20 +00:00
e1e36a0421
- Fix spec file caused by spec review
2008-01-03 20:29:21 +00:00
41bd3b2ae1
- Upgrade to upstream
...
matchpathcon(8) man page update from Dan Walsh.
2007-12-11 02:52:13 +00:00
c4aa29e945
- Upgrade to upstream
...
dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
Based on a suggestion from Ulrich Drepper, defer regex compilation until we
have a stem match, by Stephen Smalley.
A further optimization would be to defer regex compilation until we have a
complete match of the constant prefix of the regex - TBD.
2007-11-30 20:13:08 +00:00
2a8f17ac0d
- Upgrade to upstream
...
AVC enforcing mode override patch from Eamon Walsh.
Aligned attributes in AVC netlink code from Eamon Walsh.
- Move libselinux.so back into devel package, procps has been fixed
2007-11-15 15:29:15 +00:00
79584e53ac
- Upgrade to upstream
...
Merged refactored AVC netlink code from Eamon Walsh.
Merged new X label namespaces from Eamon Walsh.
Bux fix and minor refactoring in string representation code.
2007-11-06 18:03:37 +00:00
39606ee687
- Upgrade to upstream
...
Merged selinux_get_callback, avc_open, empty string mapping from Eamon
Walsh.
2007-10-05 17:20:30 +00:00
dcd9773ab2
- Fix segfault on missing file_context file
2007-09-27 17:55:13 +00:00
7cbfb0e27a
- Upgrade to upstream
...
Make netlink socket close-on-exec to avoid descriptor leakage from Dan
Walsh.
Pass CFLAGS when using gcc for linking from Dennis Gilmore.
2007-09-27 14:54:10 +00:00
ae054c560b
*** empty log message ***
2007-09-24 15:56:01 +00:00
0102138c4a
*** empty log message ***
2007-09-24 15:42:11 +00:00
0fa749d083
*** empty log message ***
2007-09-18 20:44:47 +00:00
71cd1381ef
*** empty log message ***
2007-09-18 15:37:42 +00:00
31de56ffa4
*** empty log message ***
2007-09-13 12:29:38 +00:00
6a9919e596
*** empty log message ***
2007-09-06 12:37:00 +00:00
4e3172796e
*** empty log message ***
2007-08-28 15:27:49 +00:00
13a4ef3ffe
*** empty log message ***
2007-08-23 20:56:16 +00:00
fd5d99a5df
*** empty log message ***
2007-08-21 19:45:34 +00:00
0e28882119
*** empty log message ***
2007-08-10 16:09:35 +00:00
569b015f4c
*** empty log message ***
2007-08-10 16:01:16 +00:00
f3308819df
*** empty log message ***
2007-08-10 15:46:47 +00:00
6e60f16b98
*** empty log message ***
2007-08-03 20:06:53 +00:00
44ef5d5d9f
- Apply Steven Smalley patch to fix segfault in string_to_security_class
2007-07-23 14:23:50 +00:00
aebde7523f
- Fix matchpathcon to set default myprintf
2007-07-18 17:54:00 +00:00
571ac2998d
- Upgrade to upstream
...
Fix for getfilecon() for zero-length contexts from Stephen Smalley.
2007-07-16 18:22:25 +00:00
8ffc2801ed
- Update to match flask/access_vectors in policy
2007-07-11 14:52:47 +00:00
8e8fca8665
- Fix man page markup lanquage for translations
2007-07-10 16:27:52 +00:00
3e1ba6da3a
- Fix semanage segfault on x86 platform
2007-06-26 09:16:06 +00:00
029d48694c
- Upgrade to upstream
...
Labeling and callback interface patches from Eamon Walsh.
2007-06-21 15:34:10 +00:00
d43108c05f
- Upgrade to upstream
...
Labeling and callback interface patches from Eamon Walsh.
2007-06-21 14:40:52 +00:00
2324fecc2d
- Upgrade to upstream
...
Class and permission mapping support patches from Eamon Walsh.
Object class discovery support patches from Chris PeBenito.
Refactoring and errno support in string representation code.
2007-06-11 18:39:53 +00:00
d60d4d2e31
- Upgrade to upstream
...
Merged patch to reduce size of libselinux and remove need for libsepol for
embedded systems from Yuichi Nakamura. This patch also turns the
link-time dependency on libsepol into a runtime (dlopen) dependency
even in the non-embedded case.
2007-06-01 14:48:48 +00:00
35bc5a8a68
- Upgrade to upstream
...
Merged additional swig python bindings from Dan Walsh.
Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
2007-05-18 14:52:28 +00:00
20f7b1cb99
- Upgrade to upstream
...
Merged build fix for avc_internal.c from Joshua Brindle.
2007-04-24 14:48:35 +00:00
4dca0c42c9
- Add get_context_list funcitions to swig file
2007-04-23 14:38:02 +00:00
a11359c0ea
- Upgrade to upstream
...
Merged rpm_execcon python binding fix, matchpathcon man page fix, and
getsebool -a handling for EACCES from Dan Walsh.
2007-04-12 20:07:39 +00:00
6265db0381
2007-04-12 16:50:49 +00:00
1b14f693da
- Upgrade to upstream
...
Merged support for getting initial contexts from James Carter.
2007-04-11 13:12:34 +00:00
47b511b094
- Upgrade to upstream
...
Merged userspace AVC patch to follow kernel's behavior for permissive mode
in caching previous denials from Eamon Walsh.
Merged sidput(NULL) patch from Eamon Walsh.
2007-04-09 19:50:05 +00:00
ff4b4da61f
- Make rpm_exec swig work
2007-04-05 15:57:35 +00:00
ace2ebf6d7
- Upgrade to upstream
...
Merged class/av string conversion and avc_compute_create patch from Eamon
Walsh.
2007-04-02 19:14:28 +00:00
9a53490979
- Upgrade to upstream
...
Merged fix for avc.h #include's from Eamon Walsh.
2007-03-27 20:07:00 +00:00
71021c8327
- Upgrade to upstream
...
Merged fix for avc.h #include's from Eamon Walsh.
2007-03-27 19:49:37 +00:00
98a61bfb92
- Add stdint.h to avc.h
2007-03-22 20:50:31 +00:00
22298b4b74
Merged patch to drop support for CACHETRANS=0 config option from Steve
...
Grubb.
Merged patch to drop support for old /etc/sysconfig/selinux and
/etc/security policy file layout from Steve Grubb.
2007-03-13 00:20:29 +00:00
c7862e54aa
- Do not fail on permission denied in getsebool
2007-03-08 16:15:36 +00:00
21eddb1fd0
- Upgrade to upstream
...
Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve
Grubb.
2007-02-27 16:27:02 +00:00
8efd1ef10e
- Upgrade to upstream
...
Removed sending of setrans init message.
Merged matchpathcon memory leak fix from Steve Grubb.
2007-02-23 21:49:32 +00:00
14de1c34ad
- Upgrade to upstream
...
Merged patch from Todd Miller to convert int types over to C99 style.
2007-02-20 14:31:07 +00:00
29ad08b8d0
Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of
...
the use of the non-standard format %as. (original patch changed for
style).
Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
- Add context function to python to split context into 4 parts
2007-02-07 19:39:11 +00:00
ad1a6889cc
- Add context function to python to split context into 4 parts
2007-01-24 17:20:19 +00:00
751b5d4cbd
- Upgrade to upstream
...
Updated version for stable branch.
2007-01-19 14:22:46 +00:00
e1e027390c
- Upgrade to upstream
...
Merged man page updates to make "apropos selinux" work from Dan Walsh.
Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
- Upgrade to upstream
Merged getdefaultcon utility from Dan Walsh.
2007-01-17 16:12:56 +00:00
53158b7152
- Upgrade to upstream
...
Merged getdefaultcon utility from Dan Walsh.
2007-01-16 22:10:55 +00:00
5f8636d1e9
- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli
2007-01-15 21:30:17 +00:00
a9c082be34
- Add reference to selinux man page in all man pages to make apropos work
...
Resolves: # 217881
2007-01-12 16:02:56 +00:00
05bd40847c
- Upstream wanted some minor changes, upgrading to keep api the same
...
- Upgrade to upstream
#200110
2007-01-11 19:20:27 +00:00
1a8c15a969
- Upstream wanted some minor changes, upgrading to keep api the same
...
- Upgrade to upstream
#200110
2007-01-11 19:05:59 +00:00
e3bd599d8e
- Cleanup patch
2007-01-09 15:02:46 +00:00
e6bab37d57
- Add securetty handling Resolves : #200110
2007-01-05 17:54:21 +00:00
273c47d43c
- Upgrade to upstream
...
Merged patch for matchpathcon utility to use file mode information when
available from Dan Walsh.
2007-01-04 22:09:55 +00:00
0ee7a8fcb4
- rebuild against python 2.5
2006-12-07 15:46:04 +00:00
dbfbfbe639
- Fix matchpathcon to lstat files
2006-12-06 19:13:54 +00:00
846f2ad19d
- Update man page
2006-11-30 18:11:20 +00:00
25aea25d22
- Upgrade to upstream
2006-11-28 14:25:28 +00:00
2bcf9654c5
- Add James Antill patch for login verification of MLS Levels
...
- MLS ragnes need to be checked, Eg. login/cron. This patch adds
infrastructure.
2006-11-03 22:14:51 +00:00
c27fc16cad
- Upgrade to latest from NSA
...
Merged updated flask definitions from Darrel Goeddel. This adds the context
security class, and also adds the string definitions for setsockcreate
and polmatch.
2006-10-25 02:52:18 +00:00
e24dd65a42
- Upgrade to latest from NSA
...
Updated version for release.
2006-10-17 17:05:47 +00:00
9fcaa3e1fa
bump for gcc bug
2006-10-01 20:19:56 +00:00
2a0f9c5cfa
- Upgrade to latest from NSA
...
Merged av_permissions.h update from Steve Grubb, adding setsockcreate and
polmatch definitions.
2006-09-29 18:12:11 +00:00
de746cb12c
- Upgrade to latest from NSA
...
Merged av_permissions.h update from Steve Grubb, adding setsockcreate and
polmatch definitions.
2006-09-29 15:56:32 +00:00
f6df692173
- Upgrade to latest from NSA
...
Merged av_permissions.h update from Steve Grubb, adding setsockcreate and
polmatch definitions.
2006-09-29 15:56:14 +00:00
95053689d2
- really make -devel depend on libsepol-devel
2006-09-28 01:51:37 +00:00
cfd1d1337d
- Add sgrubb patch for polmatch
2006-09-25 14:19:06 +00:00
ab45727649
- Upgrade to latest from NSA
...
Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
2006-09-13 17:39:35 +00:00
8a855c559b
- have -devel require libsepol-devel
2006-09-05 19:44:37 +00:00
7bdc604160
- Upgrade to latest from NSA
...
Merged patch to not log avc stats upon a reset from Steve Grubb.
Applied patch to revert compat_net setting upon policy load.
Merged file context homedir and local path functions from Chris PeBenito.
2006-08-24 18:37:18 +00:00
88e5d3a474
rebuilt with latest binutils
2006-08-18 20:14:02 +00:00
77a0d2cc39
- Upgrade to latest from NSA
...
Merged file context homedir and local path functions from Chris PeBenito.
Rework functions that access /proc/pid/attr to access the per-thread nodes,
and unify the code to simplify maintenance.
2006-08-12 11:21:11 +00:00
243c6756b4
- Upgrade to latest from NSA
...
Merged return value fix for *getfilecon() from Dan Walsh.
Merged sockcreate interfaces from Eric Paris.
2006-08-11 10:45:34 +00:00
b7bdc631f1
- Fix translation return codes to return size of buffer
2006-08-10 15:34:47 +00:00
ef26b847fa
- Upgrade to latest from NSA
...
Merged no-tls-direct-seg-refs patch from Jeremy Katz.
Merged netfilter_contexts support patch from Chris PeBenito.
2006-08-04 22:49:48 +00:00
61ba667985
- Upgrade to latest from NSA
...
Merged context_*_set errno patch from Jim Meyering.
2006-08-02 21:05:42 +00:00
75675c7d50
- only build non-fpic objects with -mno-tls-direct-seg-refs
2006-08-01 18:38:57 +00:00
be0d45133a
- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults
...
with xen (#200783 )
2006-08-01 18:26:09 +00:00
6b84a37b8f
- Rebuild for new gcc
2006-07-17 13:12:11 +00:00
5a5a289fc8
- Rebuild for new gcc
2006-07-17 13:11:16 +00:00
1e7c365c44
- Fix libselinux to not telinit during installs
2006-07-11 19:26:08 +00:00
aa27b6bf81
- Upgrade to latest from NSA
...
Lindent.
Merged {get,set}procattrcon patch set from Eric Paris.
Merged re-base of keycreate patch originally by Michael LeMay from Eric
Paris.
Regenerated Flask headers from refpolicy.
- Added selinux_file_context_{cmp,verify}.
- Added selinux_lsetfilecon_default.
- Delay translation of contexts in matchpathcon.
2006-07-05 10:42:47 +00:00
799720edd4
- Yet another change to matchpathcon
2006-06-21 20:16:13 +00:00
f4b45ddd03
- Turn off error printing in library. Need to compile with DEBUG to get it
...
back
2006-06-21 18:33:13 +00:00
2d9b36b51e
- Fix error reporting of matchpathcon
2006-06-21 13:12:11 +00:00
645f93a8a5
- Add function to compare file context on disk versus contexts in
...
file_contexts file.
2006-06-20 20:30:59 +00:00
e60c844fba
- Upgrade to latest from NSA
...
Added selinux_getpolicytype() function.
Modified setrans code to skip processing if !mls_enabled.
Set errno in the !selinux_mnt case.
Allocate large buffers from the heap, not on stack. Affects
is_context_customizable, selinux_init_load_policy, and
selinux_getenforcemode.
2006-06-16 19:16:03 +00:00
8389437eda
- Add selinux_getpolicytype()
2006-06-09 19:43:52 +00:00
af1839bde5
- Upgrade to latest from NSA
...
Merged !selinux_mnt checks from Ian Kent.
2006-06-05 18:52:19 +00:00
f3cb9dc26b
- Check for selinux_mnt == NULL
2006-06-01 17:25:22 +00:00
9cf72ebb65
Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.
2006-05-31 10:36:45 +00:00
cd024ca945
- Remove getseuser
2006-05-30 12:44:31 +00:00
d1291eceea
- Bump requires to grab latest libsepol
2006-05-25 19:30:29 +00:00
389a79998b
- Add BuildRequires for swig
2006-05-24 03:50:03 +00:00
c2de2ffa71
- Upgrade to latest from NSA
...
Merged simple setrans client cache from Dan Walsh. Merged avcstat patch
from Russell Coker.
Modified selinux_mkload_policy() to also set /selinux/compat_net
appropriately for the loaded policy.
2006-05-23 10:39:18 +00:00
96ed369e9d
- Upgrade to latest from NSA
...
Merged simple setrans client cache from Dan Walsh. Merged avcstat patch
from Russell Coker.
Modified selinux_mkload_policy() to also set /selinux/compat_net
appropriately for the loaded policy.
2006-05-23 10:26:55 +00:00
8f927c4a9f
- More fixes for translation cache
...
- Upgrade to latest from NSA
Added matchpathcon_fini() function to free memory allocated by
matchpathcon_init().
2006-05-18 16:15:35 +00:00
b71bf0b207
- Upgrade to latest from NSA
...
Merged setrans client cleanup patch from Steve Grubb.
2006-05-17 00:49:24 +00:00
069461a7d8
- Add Russell's AVC patch to handle large numbers
2006-05-09 19:13:08 +00:00
20222fb072
- Upgrade to latest from NSA
...
Merged getfscreatecon man page fix from Dan Walsh.
Updated booleans(8) man page to drop references to the old booleans file
and to note that setsebool can be used to set the boot-time defaults
via -P.
2006-05-08 15:04:16 +00:00
98a597a060
Merged fix warnings patch from Karl MacMillan.
...
Merged setrans client support from Dan Walsh. This removes use of
libsetrans.
Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
Merged swig typemap fixes from Glauber de Oliveira Costa.
2006-05-08 14:08:21 +00:00
a925159382
- Add selinuxswig fixes
...
- Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)
2006-05-02 18:49:41 +00:00
e0ab958383
- Add selinuxswig fixes
...
- Stop using PAGE_SIZE and start using sysconfig(_SC_PAGE_SIZE)
2006-05-02 18:23:25 +00:00
75c50e4988
- Add selinuxswig fixes
2006-05-02 17:09:39 +00:00
ea8c625b8c
- Upgrade to latest from NSA
...
Added distclean target to Makefile.
Regenerated swig files.
Changed matchpathcon_init to verify that the spec file is a regular file.
Merged python binding t_output_helper removal patch from Dan Walsh.
2006-04-14 11:31:14 +00:00
fed1ce5b77
- Fix python bindings for matchpathcon
...
- Fix booleans man page
2006-04-11 19:03:13 +00:00
c8030dcf96
Merged Makefile PYLIBVER definition patch from Dan Walsh.
2006-04-11 18:25:46 +00:00
55f0304445
- Make some fixes so it will build on RHEL4
...
- Upgrade to latest from NSA
Updated version for release.
Altered rpm_execcon fallback logic for permissive mode to also handle case
where /selinux/enforce is not available.
2006-03-17 18:33:18 +00:00
d27dc97404
- Make some fixes so it will build on RHEL4
...
- Upgrade to latest from NSA
Updated version for release.
Altered rpm_execcon fallback logic for permissive mode to also handle case
where /selinux/enforce is not available.
2006-03-17 17:20:57 +00:00
b531c7552a
bump for bug in double-long on ppc(64)
2006-02-11 04:12:30 +00:00
79e8955796
bump for new gcc/glibc
2006-02-07 12:43:42 +00:00
6a494f5394
- Upgrade to latest from NSA
...
Merged install-pywrap Makefile patch from Joshua Brindle.
2006-01-20 16:17:43 +00:00
9ecb57d018
- Upgrade to latest from NSA
...
Merged pywrap Makefile patch from Dan Walsh.
2006-01-18 16:16:30 +00:00
fd8295b044
- Upgrade to latest from NSA
...
Merged pywrap Makefile patch from Dan Walsh.
2006-01-18 16:14:55 +00:00
f4d57a9014
- Split out pywrap in Makefile
2006-01-14 05:05:19 +00:00
ee0a60b0f5
- Upgrade to latest from NSA
...
Added getseuser test program.
2006-01-13 22:14:28 +00:00
9ad8aa5f09
- Upgrade to latest from NSA
...
Added format attribute to myprintf in matchpathcon.c and removed obsoleted
rootlen variable in init_selinux_config().
2006-01-06 15:47:03 +00:00
fb1f51806c
- Build with new libsepol
2006-01-04 18:34:57 +00:00
dab5a2cb5a
- Upgrade to latest from NSA
...
- corrected use of getline
- further calls to __fsetlocking for local files
- use of strdupa and asprintf
- proper handling of dirent in booleans code
- use of -z relro
- several other optimizations
Merged getpidcon python wrapper from Dan Walsh (Red Hat).
2006-01-04 15:40:59 +00:00
cac4888385
- Add build requires line for libsepol-devel
2005-12-24 13:03:59 +00:00
407234b39f
- Fix swig call for getpidcon
2005-12-20 14:44:43 +00:00
41b7ee2ce3
- Move libselinux.so to base package
2005-12-19 14:35:26 +00:00
0b65dc6081
- Upgrade to latest from NSA
...
Merged call to finish_context_translations from Dan Walsh. This eliminates
a memory leak from failing to release memory allocated by libsetrans.
2005-12-14 19:22:10 +00:00
6c4b73afbd
- Upgrade to latest from NSA
...
Merged call to finish_context_translations from Dan Walsh. This eliminates
a memory leak from failing to release memory allocated by libsetrans.
2005-12-14 19:19:29 +00:00
3371166078
- update to latest libsetrans
...
- Fix potential memory leak
2005-12-13 20:44:36 +00:00
d21de0e9f0
- update to latest libsetrans
2005-12-11 17:26:58 +00:00
16eca654b0
gcc update bump
2005-12-09 22:41:41 +00:00
2774b7d0d8
- Update to never version
...
Merged patch for swig interfaces from Dan Walsh.
2005-12-08 18:04:22 +00:00
a73f673890
- Update to never version
2005-12-08 04:36:24 +00:00
710322bbd4
- Update to never version
2005-12-08 04:35:07 +00:00
0e39b77de1
- Fix some of the python swig objects
2005-12-07 15:53:55 +00:00
38b50da3f8
- Update to latest from NSA
...
Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified
matchpathcon implementation to make context validation/
canonicalization optional at matchpathcon_init time, deferring it to a
successful matchpathcon by default unless the new flag is set by the
caller.
Added matchpathcon_init_prefix() interface, and reworked matchpathcon
implementation to support selective loading of file contexts entries
based on prefix matching between the pathname regex stems and the
specified path prefix (stem must be a prefix of the specified path
prefix).
2005-12-01 19:20:49 +00:00
827fc8369b
- Update to latest from NSA
...
Change getsebool to return on/off instead of active/inactive
2005-11-30 20:10:18 +00:00
56d326bb01
- Change getsebool to return on/off instead of active/inactive
2005-11-29 19:21:03 +00:00
116a5b0c09
- Update to latest from NSA
...
Added -f file_contexts option to matchpathcon util. Fixed warning message
in matchpathcon_init().
Merged Makefile python definitions patch from Dan Walsh.
2005-11-29 18:47:52 +00:00
998386142a
Merged swigify patch from Dan Walsh.
2005-11-29 03:04:19 +00:00
86e0b5f76e
- Separate out libselinux-python bindings into separate rpm
2005-11-29 03:02:30 +00:00
4bb08c52c4
- Separate out libselinux-python bindings into separate rpm
2005-11-28 22:02:25 +00:00
555b9174f8
- Readd libsetrans requirement
2005-11-22 17:53:13 +00:00
Daniel J Walsh
Jeremy Katz
Jesse Keating