Commit Graph

327 Commits

Author SHA1 Message Date
Adam Jackson ec0d6590d9 Pass ldflags into the build so hardening works 2015-08-14 14:55:39 -04:00
Petr Lautrbach 489cabf310 libsemanage-2.4-2
- semanage_migrate_store: use /usr/bin/python3
- move semanage_migrate_store script to libsemanage-python3 (#1248002)
2015-07-30 18:17:39 +02:00
Petr Lautrbach ed8fe0a212 Re-order changelogs entries 2015-07-20 18:10:32 +02:00
Petr Lautrbach 40002ca5f7 Merge branch 'private-master-2.4'
libsemanage-2.4-1
2015-07-20 18:09:00 +02:00
Petr Lautrbach c1c140a26e * Wed Jun 24 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-0.6
- Allow to use compressed modules without a compression extension
2015-06-24 18:00:08 +02:00
Dennis Gilmore 2d874ef491 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 17:15:07 +00:00
Petr Lautrbach 7c6e3d711b * Tue Jun 16 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-0.5
- add /var/lib/selinux/tmp directory
2015-06-16 16:19:45 +02:00
Petr Lautrbach 814c1da596 add /var/lib/selinux/tmp directory 2015-06-16 16:19:16 +02:00
Petr Lautrbach 98249f5718 libsemanage-2.4-0.4 2015-05-12 19:32:12 +02:00
Petr Lautrbach 153a29f02a Update to upstream release 2.4 from https://github.com/bachradsusi/selinux.git branch 2.4 2015-04-13 14:52:15 +02:00
Peter Robinson 3387bb8a63 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:56:21 +00:00
Miroslav Grepl bc9b70b7c6 * Wed Jul 30 2014 Miroslav Grepl <mgrepl@fedoraproject.org> - 2.3-5
- Skip policy module re-link when only setting booleans.
    * patch from Stephen Smalley
2014-07-30 19:22:07 +02:00
Tom Callaway 3b4c09022e fix license handling 2014-07-18 15:19:21 -04:00
Dennis Gilmore 01f8a9facb - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 00:24:21 -05:00
Kalev Lember 70daba3c78 Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 2014-05-28 12:12:50 +02:00
Dan Walsh 059a39519f Update to upstream
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.
2014-05-06 14:33:02 -04:00
Dan Walsh a0fdb6de82 libsemanage: fix memory leak in semanage_genhomedircon
- Patch from THomas Hurd
2014-03-31 08:34:33 -04:00
Dan Walsh b321505c81 Move semanage.conf man page from devel package to main package 2014-02-11 09:30:21 -05:00
Dan Walsh d76cbbc290 Update to upstream
* Avoid duplicate list entries from Dan Walsh.
	* Add audit support to libsemanage from Dan Walsh.
	* Remove policy.kern and replace with symlink from Dan Walsh.
	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
	* Fix man pages from Laurent Bigonville.
2013-10-31 09:31:40 -04:00
Dan Walsh ab84ace2a1 Cleanup handling of missing mls_range to fix problems with useradd -Z
- Fix auditing of login record changes, roles were not working correctly.
Resolves: #952237
2013-10-16 14:34:13 -04:00
Dan Walsh 8dcd430104 Fix errors found by coverity 2013-10-04 14:55:58 -04:00
Dan Walsh 2a9c9b49a7 Do not fail on missing SELinux User Record when adding login record 2013-09-25 12:46:19 -04:00
Dan Walsh a7e3a97407 Add msg to audit records 2013-09-23 15:11:52 -04:00
Dan Walsh 4bccd198db Do not write error message to screen when looking for previous record for auditing.
- Add mls_range from user record if the MLS range is not specified by the seuser add record.
- Error out if seuser or mls range is not specified when adding user records
2013-09-23 14:30:33 -04:00
Dan Walsh a70e6a436c Create symlink from policy.kern to active kernel. 2013-09-09 09:34:32 -04:00
Dan Walsh a7785d28a7 Move handling of role audit records into the library
- Patch stops semanage from removing user record while in use
2013-07-26 17:49:13 -04:00
Dan Walsh 514a8aa4c0 Move handling of role audit records into the library
- Patch stops semanage from removing user record while in use
2013-07-26 17:39:40 -04:00
Dan Walsh d0c5aefe7f Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it. 2013-07-09 11:12:34 -04:00
Dan Walsh 3d5abbea35 Allways build python3 version 2013-06-28 06:29:56 -04:00
Dan Walsh 4c4dc161a0 - Fix test suite to build 2013-06-28 06:29:06 -04:00
Dan Walsh 13bc72f76a - Fix test suite to build 2013-04-22 10:29:48 -04:00
Dan Walsh db579f949e Fix test suite to build 2013-04-11 11:37:19 -04:00
Dan Walsh 518c1aa0ae Revert some changes which are causing the wrong policy version file to be created 2013-02-14 07:58:54 -05:00
Dan Walsh 1021fcbc45 Update to upstream
* Add sefcontext_compile to compile regex everytime policy is rebuilt
	* Cleanup/fix enable/disable/remove module.
	* redo genhomedircon minuid
	* fixes from coverity
	* semanage_store: do not leak memory in semanage_exec_prog
	* genhomedircon: remove useless conditional in get_home_dirs
	* genhomedircon: double free in get_home_dirs
	* fcontext_record: do not leak on error in semanage_fcontext_key_create
	* genhomedircon: do not leak on failure in write_gen_home_dir_context
	* semanage_store: do not leak fd
	* genhomedircon: do not leak shells list
	* semanage_store: do not leak on strdup failure
	* semanage_store: rewrite for readability
2013-02-07 13:41:45 -05:00
Dan Walsh 4f6c727597 Add selinux-policy as a requires to get /etc/selinux owned 2013-01-16 09:56:17 -05:00
Dan Walsh 971fc3e245 Add /etc/selinux to payload for case where selinux-policy is not installed 2013-01-16 09:37:32 -05:00
Dan Walsh 15a3a08fb3 Update to latest patches from eparis/Upstream
-    libsemanage: fixes from coverity
-    libsemange: redo genhomedircon minuid
2013-01-05 11:31:53 -05:00
Dan Walsh f0b6adc46c Fix handling of missing semanage permissive -d foo, not failing correctly
- Previous to this fix the first module beginning with foo would get deleted.
2012-11-21 14:30:13 -05:00
rhatdan 1264a1fe67 Update to upstream
* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
2012-09-15 07:49:52 -04:00
rhatdan 70de4204ca Update to upstream
* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
2012-09-15 07:48:40 -04:00
David Malcolm bf4cea6a73 rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 2012-08-03 21:26:52 -04:00
David Malcolm bc9fb3a226 2.1.8-5: remove rhel logic from with_python3 conditional 2012-08-01 16:35:50 -04:00
Dennis Gilmore 644f7cae90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-19 16:09:51 -05:00
Dan Walsh 5f72978380 Attempt to allocate memory for selinux_binary_policy_path and free memory
- allocated by asprintf.
2012-07-13 16:37:22 -04:00
Dan Walsh ea5e4bfdc0 Revert Eric Paris Patch for binary_policy_path 2012-07-13 14:30:26 -04:00
Dan Walsh f21a19ce73 Fix asprintf within an asprintf call 2012-07-12 17:47:17 -04:00
Dan Walsh 114463ed84 Update to upstream
* remove build warning when build swig c files
	* additional makefile support for rubywrap
	* ignore 80 column limit for readability
	* semanage_store: fix snprintf length argument by using asprintf
	* Use default semanage.conf as a fallback
	* use after free in python bindings
2012-07-04 07:34:56 -04:00
Dan Walsh 340a7403e4 Apply patch from Sven Vermeulen to fix problem with python3 bindings. 2012-05-29 11:17:02 -04:00
Dan Walsh 3f1912d3f6 Update to upstream
* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level
2012-03-29 15:30:15 -04:00
Dan Walsh 72a84c3f42 Update to upstream
* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level
2012-03-29 15:28:29 -04:00
Dennis Gilmore eab46a4071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 02:24:26 -06:00
Dan Walsh 6bcdc7fca5 Add patch form Xin Ouyang to make library use private semanage.conf 2012-01-06 09:19:58 -05:00
Dan Walsh 99d9fa911a Update to upstream
* add ignoredirs config for genhomedircon
	* Fallback_user_level can be NULL if you are not using MLS
2011-12-21 18:09:42 +00:00
Dan Walsh 38c21bc8d2 Update to upstream 2011-12-21 18:04:15 +00:00
Dan Walsh fccf088a91 Rebuild with latest libsepol 2011-12-16 06:22:37 -05:00
Dan Walsh a2f964685a Rebuild with latest libsepol 2011-12-15 16:49:28 -05:00
Dan Walsh 32db106626 Add support for ignoredirs param in /etc/selinux/semanage.conf 2011-12-15 10:32:47 -05:00
Dan Walsh a29afa3a34 Upgrade to upstream
* regenerate .pc on VERSION change
	* maintain mode even if umask is tighter
	* semanage.conf man page
	* create man5dir if not exist
2011-11-04 09:37:32 -04:00
Dan Walsh 86ba998b25 Fix handling of umask, so files get created with the correct label. 2011-10-20 15:03:03 -04:00
Dan Walsh cfabb609a8 Add Guido Trentalancia semanage.conf man page 2011-09-19 07:59:28 -04:00
Dan Walsh 0b324a21d7 Add Guido Trentalancia semanage.conf man page 2011-09-19 07:29:40 -04:00
Dan Walsh 71a9b31459 Update to upstream
* Create a new preserve_tunables flag
	* tree: default make target to all not
	* fix semanage_store_access_check calling arguments
2011-09-19 06:57:07 -04:00
Dan Walsh f79f8038c0 Add support for preserving tunables 2011-09-14 22:47:54 -04:00
Dan Walsh b7399a1357 Add support for preserving tunables 2011-09-14 22:29:13 -04:00
Dan Walsh 43cf1c48fa Update to upstream
* python wrapper makefile changes
2011-08-30 16:34:31 -04:00
Dan Walsh f6b3fbbaf6 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-22 10:55:59 -04:00
Dan Walsh 5e780f2aa2 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-22 09:46:21 -04:00
Dan Walsh 617897ade9 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-18 07:16:10 -04:00
Dan Walsh 38aed09666 Update to upstream
* Release, minor version bump
2011-07-28 11:53:53 -04:00
Dan Walsh c00e96cc0c More fixes for disabled modules 2011-06-08 14:46:29 -04:00
Dan Walsh 410db78cc0 Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module
indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
ship active modules in rpm.
2011-06-07 13:14:57 -04:00
Dan Walsh 0984542175 Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools 2011-06-02 12:14:52 -04:00
Dennis Gilmore c01771c86b - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 05:20:19 -06:00
David Malcolm fb1cbdda8d Reworking of python support to cope with PEP 3149 changes in latest python 3.2
* Thu Dec 30 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
- big reworking of the support-multiple-python-builds patch to deal with
PEP 3149: the latest Python 3.2 onwards uses include paths and library names
that don't fit prior naming patterns, and so we must query python3-config for
this information.  To complicate things further, python 2's python-config
doesn't understand all of the options needed ("--extension-suffix").  I've
thus added new Makefile variables as needed, to be supplied by the specfile by
invoking the appropriate config tool (or by hardcoding the old value for
"--extension-suffix" i.e. ".so")
- rework python3 manifest for PEP 3149, and rebuild for newer python3
2010-12-30 10:50:53 -05:00
Dan Walsh 6120de7432 - Update to upstream
* Fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:35:11 -05:00
Thomas Spura 2a013f888e fix typo in %files 2010-08-25 18:10:25 +02:00
Thomas Spura 1003ac17a4 rebuild with python3.2
http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html
2010-08-25 18:00:50 +02:00
dmalcolm ced26f3e2f - Rebuilt for
https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
2010-07-22 02:20:06 +00:00
Daniel J Walsh fc28aa840f - add python3 subpackage 2010-05-06 15:50:55 +00:00
Daniel J Walsh 1088cc0705 - Fix -devel package to point at the correct shared library 2010-04-07 16:27:30 +00:00
Daniel J Walsh 8e01c2c706 - Move shared library to /usr/lib 2010-03-26 18:24:02 +00:00
Daniel J Walsh 0b6b0c93f2 - Update to upstream
Add enable/disable patch support from Dan Walsh.
Add usepasswd flag to semanage.conf to disable genhomedircon using passwd
    from Dan Walsh.
regenerate swig wrappers
2010-03-08 18:19:41 +00:00
Daniel J Walsh 4e0d31fc07 - Cleanup spec file 2010-01-28 20:39:21 +00:00
Daniel J Walsh 88ec2a622c - Splect libsemanage.a into a static subpackage to keep fedora packaging
guidelines happy
2010-01-18 21:54:15 +00:00
Daniel J Walsh 854b5d7cb1 - Splect libsemanage.a into a static subpackage to keep fedora packaging
guidelines happy
2010-01-18 21:45:33 +00:00
Daniel J Walsh bae6b411c7 - Rebuild all c programs with -fPIC 2009-12-16 21:11:12 +00:00
Daniel J Walsh ec76bdf88d - Update to upstream
Move libsemanage.so to /usr/lib
Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>
2009-12-01 22:47:17 +00:00
Daniel J Walsh 71c0c5e065 - Update to upstream
Move load_policy from /usr/sbin to /sbin from Dan Walsh.
2009-11-18 22:19:06 +00:00
Daniel J Walsh 372c07f302 - Update to upstream
Add pkgconfig file from Eamon Walsh.
Add semanage_set_check_contexts() function to disable calling setfiles
2009-11-02 18:11:54 +00:00
Daniel J Walsh 5111246f5b - Update to upstream
Add pkgconfig file from Eamon Walsh.
Add semanage_set_check_contexts() function to disable calling setfiles
2009-11-02 18:01:53 +00:00
Daniel J Walsh f8b7dc8e1c - Update to upstream
make swigify
2009-09-28 20:36:12 +00:00
Daniel J Walsh b1238c466b - Dont relabel /root with genhomedircon 2009-09-20 11:43:05 +00:00
Daniel J Walsh b05566938b - Update to upstream
Change semodule upgrade behavior to install even if the module is not
    present from Dan Walsh.
Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
2009-09-17 13:02:59 +00:00
Daniel J Walsh 5aeb590264 - Update to upstream
Fix persistent dontaudit support to rebuild policy if the dontaudit state
    is changed from Chad Sellers.
- Move load_policy to /sbin
2009-09-09 17:57:13 +00:00
Daniel J Walsh f6a1eaa2e3 - Add enable/disable modules 2009-08-28 18:03:05 +00:00
Daniel J Walsh 7313e2e746 - Make sure /root is not used in genhomedircon 2009-08-26 19:06:23 +00:00
Daniel J Walsh 168ea7cab1 Revert hard linking of files between tmp/active/previous.
Enable configuration of bzip behavior from Stephen Smalley.
    bzip-blocksize=0 to disable compression and decompression support.
    bzip-blocksize=1..9 to set the blocksize for compression.
    bzip-small=true to reduce memory usage for decompression.
2009-08-05 19:21:58 +00:00
Jesse Keating 6eb64237b0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-25 08:35:48 +00:00
Daniel J Walsh 1639efd7cd - Put check for /root back into genhomedircon 2009-07-10 18:46:52 +00:00
Daniel J Walsh f4a5c19066 - Update to upstream 2009-07-07 21:09:15 +00:00