bff583b68b
- Update to Upstream
...
Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call
matchpathcon_init_prefix if not already initialized.
Add -q qualifier for -V option of matchpathcon and change it to indicate
whether verification succeeded or failed via exit status.
2008-05-28 14:15:30 +00:00
454774e22d
remove telinit -u, no longer needed
2008-05-16 19:04:17 +00:00
792921f4eb
- Add sedefaultcon and setconlist commands to dump login context
2008-05-07 17:34:12 +00:00
1209c857ab
- Update to Upstream
...
Fixed selinux_set_callback man page.
Try loading the max of the kernel-supported version and the
libsepol-supported version when no manipulation of the binary policy is
needed from Stephen Smalley.
Fix memory leaks in matchpathcon from Eamon Walsh.
2008-04-22 20:59:01 +00:00
d87adcfe95
- Add avc.h to swig code
2008-04-14 18:54:09 +00:00
9d13c9cd97
- Update to Upstream
...
Man page typo fix from Jim Meyering.
2008-04-01 04:16:52 +00:00
7384c1ecca
Changed selinux_init_load_policy() to not warn about a failed mount of
...
selinuxfs if selinux was disabled in the kernel.
2008-03-23 11:32:37 +00:00
eb8e2a0d36
- Fix matchpathcon memory leak
2008-03-13 23:45:19 +00:00
4594aed06b
- Update to Upstream
...
Merged new X label "poly_selection" namespace from Eamon Walsh.
2008-02-29 20:24:11 +00:00
0984abe5d8
- Update to Upstream
...
Merged reset_selinux_config() for load policy from Dan Walsh.
2008-02-28 21:06:47 +00:00
baab9d46ea
- Reload library on loading of policy to handle chroot
2008-02-28 16:58:02 +00:00
73272f9b7d
- Update to Upstream
...
Merged avc_has_perm() errno fix from Eamon Walsh.
2008-02-25 20:51:42 +00:00
3cb08a5330
- Update to Upstream
...
Regenerated Flask headers from refpolicy flask definitions.
2008-02-22 17:41:12 +00:00
198adb1f17
- Update to Upstream
...
Merged compute_member AVC function and manpages from Eamon Walsh.
Provide more error reporting on load policy failures from Stephen Smalley.
2008-02-13 16:18:16 +00:00
099d39a6e5
- Update to Upstream
...
Merged new X label "poly_prop" namespace from Eamon Walsh.
2008-02-08 15:45:10 +00:00
fc1475fc7f
- Update to Upstream
...
Disable setlocaldefs if no local boolean or users files are present from
Stephen Smalley.
Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen
Smalley.
2008-02-06 21:46:59 +00:00
8f9ecf5890
- Update to Upstream
...
Merged fix for audit2why from Dan Walsh.
2008-01-29 13:29:32 +00:00
213643620c
- Fix audit2why to grab latest policy versus the one selected by the kernel
2008-01-25 16:11:42 +00:00
e4623197a5
Merged audit2why python binding from Dan Walsh.
2008-01-23 21:52:01 +00:00
c633d69a56
Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
2008-01-23 19:40:26 +00:00
c097aeffd4
- Update to use libsepol-static library
2008-01-21 21:42:38 +00:00
45460445ad
- Put back libselinux.a
2008-01-15 13:49:29 +00:00
5c1daf361c
- Put back libselinux.a
2008-01-15 13:48:24 +00:00
2f233dfd7a
- Fix memory references in audit2why and change to use tuples
...
- Update to Upstream
granted null message bug from Stephen Smalley.
2008-01-11 15:55:35 +00:00
88cc8f8805
- Fix __init__.py specification
2008-01-11 13:48:43 +00:00
831e63b413
- Add audit2why python bindings
2008-01-10 19:01:20 +00:00
d189708d7a
- Add audit2why python bindings
2008-01-10 19:00:33 +00:00
4676dbee55
- Add audit2why python bindings
2008-01-10 18:44:50 +00:00
082b5c93a4
- Add audit2why python bindings
2008-01-10 18:44:01 +00:00
9ec7726e1d
- Add audit2why python bindings
2008-01-10 18:32:52 +00:00
625a8fb5a8
- Add pid_t typemap for swig bindings
2008-01-08 11:07:27 +00:00
5866f48366
- smp_mflag
2008-01-03 20:39:20 +00:00
e1e36a0421
- Fix spec file caused by spec review
2008-01-03 20:29:21 +00:00
41bd3b2ae1
- Upgrade to upstream
...
matchpathcon(8) man page update from Dan Walsh.
2007-12-11 02:52:13 +00:00
c4aa29e945
- Upgrade to upstream
...
dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
Based on a suggestion from Ulrich Drepper, defer regex compilation until we
have a stem match, by Stephen Smalley.
A further optimization would be to defer regex compilation until we have a
complete match of the constant prefix of the regex - TBD.
2007-11-30 20:13:08 +00:00
2a8f17ac0d
- Upgrade to upstream
...
AVC enforcing mode override patch from Eamon Walsh.
Aligned attributes in AVC netlink code from Eamon Walsh.
- Move libselinux.so back into devel package, procps has been fixed
2007-11-15 15:29:15 +00:00
79584e53ac
- Upgrade to upstream
...
Merged refactored AVC netlink code from Eamon Walsh.
Merged new X label namespaces from Eamon Walsh.
Bux fix and minor refactoring in string representation code.
2007-11-06 18:03:37 +00:00
39606ee687
- Upgrade to upstream
...
Merged selinux_get_callback, avc_open, empty string mapping from Eamon
Walsh.
2007-10-05 17:20:30 +00:00
dcd9773ab2
- Fix segfault on missing file_context file
2007-09-27 17:55:13 +00:00
7cbfb0e27a
- Upgrade to upstream
...
Make netlink socket close-on-exec to avoid descriptor leakage from Dan
Walsh.
Pass CFLAGS when using gcc for linking from Dennis Gilmore.
2007-09-27 14:54:10 +00:00
ae054c560b
*** empty log message ***
2007-09-24 15:56:01 +00:00
0102138c4a
*** empty log message ***
2007-09-24 15:42:11 +00:00
0fa749d083
*** empty log message ***
2007-09-18 20:44:47 +00:00
71cd1381ef
*** empty log message ***
2007-09-18 15:37:42 +00:00
31de56ffa4
*** empty log message ***
2007-09-13 12:29:38 +00:00
6a9919e596
*** empty log message ***
2007-09-06 12:37:00 +00:00
4e3172796e
*** empty log message ***
2007-08-28 15:27:49 +00:00
13a4ef3ffe
*** empty log message ***
2007-08-23 20:56:16 +00:00
fd5d99a5df
*** empty log message ***
2007-08-21 19:45:34 +00:00
0e28882119
*** empty log message ***
2007-08-10 16:09:35 +00:00
569b015f4c
*** empty log message ***
2007-08-10 16:01:16 +00:00
f3308819df
*** empty log message ***
2007-08-10 15:46:47 +00:00
6e60f16b98
*** empty log message ***
2007-08-03 20:06:53 +00:00
44ef5d5d9f
- Apply Steven Smalley patch to fix segfault in string_to_security_class
2007-07-23 14:23:50 +00:00
aebde7523f
- Fix matchpathcon to set default myprintf
2007-07-18 17:54:00 +00:00
571ac2998d
- Upgrade to upstream
...
Fix for getfilecon() for zero-length contexts from Stephen Smalley.
2007-07-16 18:22:25 +00:00
8ffc2801ed
- Update to match flask/access_vectors in policy
2007-07-11 14:52:47 +00:00
8e8fca8665
- Fix man page markup lanquage for translations
2007-07-10 16:27:52 +00:00
3e1ba6da3a
- Fix semanage segfault on x86 platform
2007-06-26 09:16:06 +00:00
029d48694c
- Upgrade to upstream
...
Labeling and callback interface patches from Eamon Walsh.
2007-06-21 15:34:10 +00:00
d43108c05f
- Upgrade to upstream
...
Labeling and callback interface patches from Eamon Walsh.
2007-06-21 14:40:52 +00:00
2324fecc2d
- Upgrade to upstream
...
Class and permission mapping support patches from Eamon Walsh.
Object class discovery support patches from Chris PeBenito.
Refactoring and errno support in string representation code.
2007-06-11 18:39:53 +00:00
d60d4d2e31
- Upgrade to upstream
...
Merged patch to reduce size of libselinux and remove need for libsepol for
embedded systems from Yuichi Nakamura. This patch also turns the
link-time dependency on libsepol into a runtime (dlopen) dependency
even in the non-embedded case.
2007-06-01 14:48:48 +00:00
35bc5a8a68
- Upgrade to upstream
...
Merged additional swig python bindings from Dan Walsh.
Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
2007-05-18 14:52:28 +00:00
20f7b1cb99
- Upgrade to upstream
...
Merged build fix for avc_internal.c from Joshua Brindle.
2007-04-24 14:48:35 +00:00
4dca0c42c9
- Add get_context_list funcitions to swig file
2007-04-23 14:38:02 +00:00
a11359c0ea
- Upgrade to upstream
...
Merged rpm_execcon python binding fix, matchpathcon man page fix, and
getsebool -a handling for EACCES from Dan Walsh.
2007-04-12 20:07:39 +00:00
6265db0381
2007-04-12 16:50:49 +00:00
1b14f693da
- Upgrade to upstream
...
Merged support for getting initial contexts from James Carter.
2007-04-11 13:12:34 +00:00
47b511b094
- Upgrade to upstream
...
Merged userspace AVC patch to follow kernel's behavior for permissive mode
in caching previous denials from Eamon Walsh.
Merged sidput(NULL) patch from Eamon Walsh.
2007-04-09 19:50:05 +00:00
ff4b4da61f
- Make rpm_exec swig work
2007-04-05 15:57:35 +00:00
ace2ebf6d7
- Upgrade to upstream
...
Merged class/av string conversion and avc_compute_create patch from Eamon
Walsh.
2007-04-02 19:14:28 +00:00
9a53490979
- Upgrade to upstream
...
Merged fix for avc.h #include's from Eamon Walsh.
2007-03-27 20:07:00 +00:00
71021c8327
- Upgrade to upstream
...
Merged fix for avc.h #include's from Eamon Walsh.
2007-03-27 19:49:37 +00:00
98a61bfb92
- Add stdint.h to avc.h
2007-03-22 20:50:31 +00:00
22298b4b74
Merged patch to drop support for CACHETRANS=0 config option from Steve
...
Grubb.
Merged patch to drop support for old /etc/sysconfig/selinux and
/etc/security policy file layout from Steve Grubb.
2007-03-13 00:20:29 +00:00
c7862e54aa
- Do not fail on permission denied in getsebool
2007-03-08 16:15:36 +00:00
21eddb1fd0
- Upgrade to upstream
...
Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve
Grubb.
2007-02-27 16:27:02 +00:00
8efd1ef10e
- Upgrade to upstream
...
Removed sending of setrans init message.
Merged matchpathcon memory leak fix from Steve Grubb.
2007-02-23 21:49:32 +00:00
14de1c34ad
- Upgrade to upstream
...
Merged patch from Todd Miller to convert int types over to C99 style.
2007-02-20 14:31:07 +00:00
29ad08b8d0
Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of
...
the use of the non-standard format %as. (original patch changed for
style).
Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
- Add context function to python to split context into 4 parts
2007-02-07 19:39:11 +00:00
ad1a6889cc
- Add context function to python to split context into 4 parts
2007-01-24 17:20:19 +00:00
751b5d4cbd
- Upgrade to upstream
...
Updated version for stable branch.
2007-01-19 14:22:46 +00:00
e1e027390c
- Upgrade to upstream
...
Merged man page updates to make "apropos selinux" work from Dan Walsh.
Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
- Upgrade to upstream
Merged getdefaultcon utility from Dan Walsh.
2007-01-17 16:12:56 +00:00
53158b7152
- Upgrade to upstream
...
Merged getdefaultcon utility from Dan Walsh.
2007-01-16 22:10:55 +00:00
5f8636d1e9
- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli
2007-01-15 21:30:17 +00:00
a9c082be34
- Add reference to selinux man page in all man pages to make apropos work
...
Resolves: # 217881
2007-01-12 16:02:56 +00:00
05bd40847c
- Upstream wanted some minor changes, upgrading to keep api the same
...
- Upgrade to upstream
#200110
2007-01-11 19:20:27 +00:00
1a8c15a969
- Upstream wanted some minor changes, upgrading to keep api the same
...
- Upgrade to upstream
#200110
2007-01-11 19:05:59 +00:00
e3bd599d8e
- Cleanup patch
2007-01-09 15:02:46 +00:00
e6bab37d57
- Add securetty handling Resolves : #200110
2007-01-05 17:54:21 +00:00
273c47d43c
- Upgrade to upstream
...
Merged patch for matchpathcon utility to use file mode information when
available from Dan Walsh.
2007-01-04 22:09:55 +00:00
0ee7a8fcb4
- rebuild against python 2.5
2006-12-07 15:46:04 +00:00
dbfbfbe639
- Fix matchpathcon to lstat files
2006-12-06 19:13:54 +00:00
846f2ad19d
- Update man page
2006-11-30 18:11:20 +00:00
25aea25d22
- Upgrade to upstream
2006-11-28 14:25:28 +00:00
2bcf9654c5
- Add James Antill patch for login verification of MLS Levels
...
- MLS ragnes need to be checked, Eg. login/cron. This patch adds
infrastructure.
2006-11-03 22:14:51 +00:00
c27fc16cad
- Upgrade to latest from NSA
...
Merged updated flask definitions from Darrel Goeddel. This adds the context
security class, and also adds the string definitions for setsockcreate
and polmatch.
2006-10-25 02:52:18 +00:00
e24dd65a42
- Upgrade to latest from NSA
...
Updated version for release.
2006-10-17 17:05:47 +00:00
9fcaa3e1fa
bump for gcc bug
2006-10-01 20:19:56 +00:00
Daniel J Walsh
Jeremy Katz
Jesse Keating