Commit Graph

139 Commits

Author SHA1 Message Date
Daniel J Walsh
d432883eeb - Update from NSA
Added set_matchpathcon_flags() function for setting flags controlling
    operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the
    base file_contexts file, not file_contexts.homedirs or
    file_contexts.local, and is for use by setfiles -c.
Updated matchpathcon.3 man page.
2005-03-17 15:39:58 +00:00
Daniel J Walsh
8e67581eb8 - Update from NSA 2005-03-10 14:44:02 +00:00
Daniel J Walsh
adbca5042d - Update from NSA
Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.
2005-03-08 20:15:20 +00:00
Daniel J Walsh
d4111cf41f - Update from NSA
Changed matchpathcon_common to ignore any non-format bits in the mode.
2005-03-02 04:04:04 +00:00
Daniel J Walsh
1ec9b46064 - Update from NSA
Merged several fixes from Ulrich Drepper.
2005-02-22 22:12:25 +00:00
Daniel J Walsh
4cc1ca9316 - Update from NSA
Merged several fixes from Ulrich Drepper.
2005-02-22 21:38:09 +00:00
Daniel J Walsh
e7c97c5559 - Fix matchpathcon on eof. 2005-02-21 14:25:51 +00:00
Daniel J Walsh
31e19c1580 - Fix matchpathcon on eof. 2005-02-21 14:10:27 +00:00
Daniel J Walsh
8e994c6484 - Update from NSA
Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
Added selinux_users_path() for path to directory containing system.users
    and local.users.
2005-02-17 19:27:56 +00:00
Daniel J Walsh
03d51ea8f7 - Process file_context.homedir 2005-02-11 01:38:47 +00:00
Daniel J Walsh
34474bcbb4 - Update from NSA
Changed relabel Makefile target to use restorecon.
2005-02-10 13:48:34 +00:00
Daniel J Walsh
e508830eca - Update from NSA
Regenerated av_permissions.h.
2005-02-08 21:20:55 +00:00
Daniel J Walsh
38db1503a7 add nsadiff stuff 2005-02-07 21:39:56 +00:00
Daniel J Walsh
3fbeee478d - Update from NSA
Modified avc_dump_av to explicitly check for any permissions that cannot be
    mapped to string names and display them as a hex value.
Regenerated av_permissions.h.
2005-02-02 23:18:13 +00:00
Daniel J Walsh
8851687ce1 - Update from NSA
Generalized matchpathcon internals, exported more interfaces, and moved
    additional code from setfiles into libselinux so that setfiles can
    directly use matchpathcon.
2005-01-31 18:51:58 +00:00
Daniel J Walsh
1d69704875 - Update from NSA
Prevent overflow of spec array in matchpathcon.
Fixed several uses of internal functions to avoid relocations.
Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular
    execve if not enabled (or unable to determine due to a lack of /proc,
    e.g. chroot'd environment).
2005-01-28 17:19:20 +00:00
Daniel J Walsh
cc65d5b546 - Update from NSA
Merged minor fix for avcstat from Dan Walsh.
2005-01-26 16:36:33 +00:00
Daniel J Walsh
e0a30a3da4 - rpmexeccon should not fail in permissive mode. 2005-01-24 20:46:24 +00:00
Daniel J Walsh
ca41c6e4bb - fix printf in avcstat 2005-01-21 20:57:55 +00:00
Daniel J Walsh
e1e9d62ce4 - Update from NSA 2005-01-20 13:58:18 +00:00
Daniel J Walsh
958b6d4982 - Modify matchpathcon to also process file_contexts.local if it exists 2005-01-18 22:27:57 +00:00
Daniel J Walsh
ae6f77c9ad - Add is_customizable_types function call 2005-01-12 14:37:21 +00:00
Daniel J Walsh
dffd9eaafd - Update to latest from upstream
Just changing version number to match upstream
2005-01-07 14:48:24 +00:00
Daniel J Walsh
c88fca683f - Update to latest from upstream
Changed matchpathcon to return -1 with errno ENOENT for <<none>> entries,
    and also for an empty file_contexts configuration.
2004-12-29 17:08:58 +00:00
Daniel J Walsh
7aa4e97275 - Fix link devel libraries 2004-12-28 15:40:26 +00:00
Daniel J Walsh
4f73d76fa3 - Fix unitialized variable in avcstat.c 2004-12-27 11:53:31 +00:00
Daniel J Walsh
e836ab9afb fix spec file 2004-12-20 14:25:06 +00:00
Daniel J Walsh
8ecfe2db4e - Upgrade to upstream
Removed some trivial utils that were not useful or redundant.
Changed BINDIR default to /usr/sbin to match change in Fedora.
Added security_compute_member.
Added man page for setcon.
2004-12-03 19:41:58 +00:00
Daniel J Walsh
cc63ca70ad - Upgrade to upstream 2004-12-01 01:31:34 +00:00
Daniel J Walsh
5d71053bd0 - Add avcstat program 2004-11-18 21:30:11 +00:00
Daniel J Walsh
6864134300 - Add avcstat program 2004-11-18 21:29:18 +00:00
Daniel J Walsh
2a0f8bbed9 - Add lots of missing man pages 2004-11-15 20:13:52 +00:00
Daniel J Walsh
4962db3e56 - Add lots of missing man pages 2004-11-15 20:05:55 +00:00
Daniel J Walsh
437c89fe9f - Fix output of getsebool. 2004-11-12 13:03:50 +00:00
Daniel J Walsh
38be80f2c3 - Update from upstream, fix setsebool -P segfault 2004-11-09 14:24:39 +00:00
Steve Grubb
37dbcb478d added patch from upstream 2004-11-05 22:26:36 +00:00
Daniel J Walsh
407b1fe335 - More fixes from sgrubb, better syslog 2004-11-04 18:25:37 +00:00
Steve Grubb
aed8abc66c spec file correction. 2004-11-04 17:30:03 +00:00
Daniel J Walsh
efa62ac4a5 - Have sesebool log to syslog 2004-11-04 15:50:24 +00:00
Daniel J Walsh
35c4f2492c fix spec file 2004-11-03 20:55:44 +00:00
Steve Grubb
71b3b1c0e0 Add patch to make setsebool update bool on disk. Make togglesebool have a
rollback capability in case it blows up inflight.
2004-11-03 20:50:26 +00:00
Daniel J Walsh
cfb1f307ae - Upgrade to latest from NSA 2004-11-02 19:47:54 +00:00
Steve Grubb
1d320842ce Updated 2 previous patches to output Usage before checking if selinux is
enabled. Apply a patch that fixes signed/unsigned issues and a memory
    leak.
2004-11-01 18:56:08 +00:00
Steve Grubb
76a08583da Move utilities to /usr/sbin 2004-10-28 21:25:27 +00:00
Steve Grubb
4af2226534 Adding patches for specfile 2004-10-27 20:53:11 +00:00
Daniel J Walsh
b2c3e1fca2 add -g to build and update with rpmexec 2004-10-15 13:42:33 +00:00
Daniel J Walsh
224faef153 update to NSA version 2004-10-06 14:03:28 +00:00
Daniel J Walsh
828726ceed change setenforce to accept Enforcing. permissive 2004-10-01 18:56:25 +00:00
Daniel J Walsh
72ef06e71f add alpha patch 2004-09-22 12:06:18 +00:00
Daniel J Walsh
228dd64e4f latest from NSA 2004-09-20 19:50:16 +00:00