Commit Graph

138 Commits

Author SHA1 Message Date
Daniel J Walsh
a11359c0ea - Upgrade to upstream
Merged rpm_execcon python binding fix, matchpathcon man page fix, and
    getsebool -a handling for EACCES from Dan Walsh.
2007-04-12 20:07:39 +00:00
Daniel J Walsh
1b14f693da - Upgrade to upstream
Merged support for getting initial contexts from James Carter.
2007-04-11 13:12:34 +00:00
Daniel J Walsh
47b511b094 - Upgrade to upstream
Merged userspace AVC patch to follow kernel's behavior for permissive mode
    in caching previous denials from Eamon Walsh.
Merged sidput(NULL) patch from Eamon Walsh.
2007-04-09 19:50:05 +00:00
Daniel J Walsh
ace2ebf6d7 - Upgrade to upstream
Merged class/av string conversion and avc_compute_create patch from Eamon
    Walsh.
2007-04-02 19:14:28 +00:00
Daniel J Walsh
71021c8327 - Upgrade to upstream
Merged fix for avc.h #include's from Eamon Walsh.
2007-03-27 19:49:37 +00:00
Daniel J Walsh
22298b4b74 Merged patch to drop support for CACHETRANS=0 config option from Steve
Grubb.
Merged patch to drop support for old /etc/sysconfig/selinux and
    /etc/security policy file layout from Steve Grubb.
2007-03-13 00:20:29 +00:00
Daniel J Walsh
21eddb1fd0 - Upgrade to upstream
Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve
    Grubb.
2007-02-27 16:27:02 +00:00
Daniel J Walsh
8efd1ef10e - Upgrade to upstream
Removed sending of setrans init message.
Merged matchpathcon memory leak fix from Steve Grubb.
2007-02-23 21:49:32 +00:00
Daniel J Walsh
14de1c34ad - Upgrade to upstream
Merged patch from Todd Miller to convert int types over to C99 style.
2007-02-20 14:31:07 +00:00
Daniel J Walsh
29ad08b8d0 Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of
the use of the non-standard format %as. (original patch changed for
    style).
Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
- Add context function to python to split context into 4 parts
2007-02-07 19:39:11 +00:00
Daniel J Walsh
751b5d4cbd - Upgrade to upstream
Updated version for stable branch.
2007-01-19 14:22:46 +00:00
Daniel J Walsh
e1e027390c - Upgrade to upstream
Merged man page updates to make "apropos selinux" work from Dan Walsh.
Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
- Upgrade to upstream
Merged getdefaultcon utility from Dan Walsh.
2007-01-17 16:12:56 +00:00
Daniel J Walsh
53158b7152 - Upgrade to upstream
Merged getdefaultcon utility from Dan Walsh.
2007-01-16 22:10:55 +00:00
Daniel J Walsh
05bd40847c - Upstream wanted some minor changes, upgrading to keep api the same
- Upgrade to upstream
#200110
2007-01-11 19:20:27 +00:00
Daniel J Walsh
273c47d43c - Upgrade to upstream
Merged patch for matchpathcon utility to use file mode information when
    available from Dan Walsh.
2007-01-04 22:09:55 +00:00
Daniel J Walsh
25aea25d22 - Upgrade to upstream 2006-11-28 14:25:28 +00:00
Daniel J Walsh
c27fc16cad - Upgrade to latest from NSA
Merged updated flask definitions from Darrel Goeddel. This adds the context
    security class, and also adds the string definitions for setsockcreate
    and polmatch.
2006-10-25 02:52:18 +00:00
Daniel J Walsh
e24dd65a42 - Upgrade to latest from NSA
Updated version for release.
2006-10-17 17:05:47 +00:00
Daniel J Walsh
de746cb12c - Upgrade to latest from NSA
Merged av_permissions.h update from Steve Grubb, adding setsockcreate and
    polmatch definitions.
2006-09-29 15:56:32 +00:00
Daniel J Walsh
ab45727649 - Upgrade to latest from NSA
Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
2006-09-13 17:39:35 +00:00
Daniel J Walsh
7bdc604160 - Upgrade to latest from NSA
Merged patch to not log avc stats upon a reset from Steve Grubb.
Applied patch to revert compat_net setting upon policy load.
Merged file context homedir and local path functions from Chris PeBenito.
2006-08-24 18:37:18 +00:00
Daniel J Walsh
77a0d2cc39 - Upgrade to latest from NSA
Merged file context homedir and local path functions from Chris PeBenito.
Rework functions that access /proc/pid/attr to access the per-thread nodes,
    and unify the code to simplify maintenance.
2006-08-12 11:21:11 +00:00
Daniel J Walsh
243c6756b4 - Upgrade to latest from NSA
Merged return value fix for *getfilecon() from Dan Walsh.
Merged sockcreate interfaces from Eric Paris.
2006-08-11 10:45:34 +00:00
Daniel J Walsh
ef26b847fa - Upgrade to latest from NSA
Merged no-tls-direct-seg-refs patch from Jeremy Katz.
Merged netfilter_contexts support patch from Chris PeBenito.
2006-08-04 22:49:48 +00:00
Daniel J Walsh
61ba667985 - Upgrade to latest from NSA
Merged context_*_set errno patch from Jim Meyering.
2006-08-02 21:05:42 +00:00
Daniel J Walsh
aa27b6bf81 - Upgrade to latest from NSA
Lindent.
Merged {get,set}procattrcon patch set from Eric Paris.
Merged re-base of keycreate patch originally by Michael LeMay from Eric
    Paris.
Regenerated Flask headers from refpolicy.
- Added selinux_file_context_{cmp,verify}.
- Added selinux_lsetfilecon_default.
- Delay translation of contexts in matchpathcon.
2006-07-05 10:42:47 +00:00
Daniel J Walsh
e60c844fba - Upgrade to latest from NSA
Added selinux_getpolicytype() function.
Modified setrans code to skip processing if !mls_enabled.
Set errno in the !selinux_mnt case.
Allocate large buffers from the heap, not on stack. Affects
    is_context_customizable, selinux_init_load_policy, and
    selinux_getenforcemode.
2006-06-16 19:16:03 +00:00
Daniel J Walsh
af1839bde5 - Upgrade to latest from NSA
Merged !selinux_mnt checks from Ian Kent.
2006-06-05 18:52:19 +00:00
Daniel J Walsh
9cf72ebb65 Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn. 2006-05-31 10:36:45 +00:00
Daniel J Walsh
c2de2ffa71 - Upgrade to latest from NSA
Merged simple setrans client cache from Dan Walsh. Merged avcstat patch
    from Russell Coker.
Modified selinux_mkload_policy() to also set /selinux/compat_net
    appropriately for the loaded policy.
2006-05-23 10:39:18 +00:00
Daniel J Walsh
8f927c4a9f - More fixes for translation cache
- Upgrade to latest from NSA
Added matchpathcon_fini() function to free memory allocated by
    matchpathcon_init().
2006-05-18 16:15:35 +00:00
Daniel J Walsh
b71bf0b207 - Upgrade to latest from NSA
Merged setrans client cleanup patch from Steve Grubb.
2006-05-17 00:49:24 +00:00
Daniel J Walsh
20222fb072 - Upgrade to latest from NSA
Merged getfscreatecon man page fix from Dan Walsh.
Updated booleans(8) man page to drop references to the old booleans file
    and to note that setsebool can be used to set the boot-time defaults
    via -P.
2006-05-08 15:04:16 +00:00
Daniel J Walsh
98a597a060 Merged fix warnings patch from Karl MacMillan.
Merged setrans client support from Dan Walsh. This removes use of
    libsetrans.
Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
Merged swig typemap fixes from Glauber de Oliveira Costa.
2006-05-08 14:08:21 +00:00
Daniel J Walsh
ea8c625b8c - Upgrade to latest from NSA
Added distclean target to Makefile.
Regenerated swig files.
Changed matchpathcon_init to verify that the spec file is a regular file.
Merged python binding t_output_helper removal patch from Dan Walsh.
2006-04-14 11:31:14 +00:00
Daniel J Walsh
c8030dcf96 Merged Makefile PYLIBVER definition patch from Dan Walsh. 2006-04-11 18:25:46 +00:00
Daniel J Walsh
d27dc97404 - Make some fixes so it will build on RHEL4
- Upgrade to latest from NSA
Updated version for release.
Altered rpm_execcon fallback logic for permissive mode to also handle case
    where /selinux/enforce is not available.
2006-03-17 17:20:57 +00:00
Daniel J Walsh
6a494f5394 - Upgrade to latest from NSA
Merged install-pywrap Makefile patch from Joshua Brindle.
2006-01-20 16:17:43 +00:00
Daniel J Walsh
9ecb57d018 - Upgrade to latest from NSA
Merged pywrap Makefile patch from Dan Walsh.
2006-01-18 16:16:30 +00:00
Daniel J Walsh
ee0a60b0f5 - Upgrade to latest from NSA
Added getseuser test program.
2006-01-13 22:14:28 +00:00
Daniel J Walsh
9ad8aa5f09 - Upgrade to latest from NSA
Added format attribute to myprintf in matchpathcon.c and removed obsoleted
    rootlen variable in init_selinux_config().
2006-01-06 15:47:03 +00:00
Daniel J Walsh
dab5a2cb5a - Upgrade to latest from NSA
- corrected use of getline
- further calls to __fsetlocking for local files
- use of strdupa and asprintf
- proper handling of dirent in booleans code
- use of -z relro
- several other optimizations
Merged getpidcon python wrapper from Dan Walsh (Red Hat).
2006-01-04 15:40:59 +00:00
Daniel J Walsh
0b65dc6081 - Upgrade to latest from NSA
Merged call to finish_context_translations from Dan Walsh. This eliminates
    a memory leak from failing to release memory allocated by libsetrans.
2005-12-14 19:22:10 +00:00
Daniel J Walsh
2774b7d0d8 - Update to never version
Merged patch for swig interfaces from Dan Walsh.
2005-12-08 18:04:22 +00:00
Daniel J Walsh
710322bbd4 - Update to never version 2005-12-08 04:35:07 +00:00
Daniel J Walsh
38b50da3f8 - Update to latest from NSA
Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified
    matchpathcon implementation to make context validation/
    canonicalization optional at matchpathcon_init time, deferring it to a
    successful matchpathcon by default unless the new flag is set by the
    caller.
Added matchpathcon_init_prefix() interface, and reworked matchpathcon
    implementation to support selective loading of file contexts entries
    based on prefix matching between the pathname regex stems and the
    specified path prefix (stem must be a prefix of the specified path
    prefix).
2005-12-01 19:20:49 +00:00
Daniel J Walsh
827fc8369b - Update to latest from NSA
Change getsebool to return on/off instead of active/inactive
2005-11-30 20:10:18 +00:00
Daniel J Walsh
116a5b0c09 - Update to latest from NSA
Added -f file_contexts option to matchpathcon util. Fixed warning message
    in matchpathcon_init().
Merged Makefile python definitions patch from Dan Walsh.
2005-11-29 18:47:52 +00:00
Daniel J Walsh
86e0b5f76e - Separate out libselinux-python bindings into separate rpm 2005-11-29 03:02:30 +00:00
Daniel J Walsh
ac2f72cc37 - Update to latest from NSA
Merged make failure in rpm_execcon non-fatal in permissive mode patch from
    Ivan Gyurdiev.
2005-11-17 02:41:51 +00:00