Commit Graph

171 Commits

Author SHA1 Message Date
Daniel J Walsh
1990483943 Add semanage_mls_enabled() interface from Stephen Smalley. 2008-12-04 19:39:35 +00:00
Ignacio Vazquez-Abrams
ee2fde0d11 Rebuild for Python 2.6 2008-11-29 16:48:06 +00:00
Daniel J Walsh
ab25b0bd42 - Update to upstream
Add USER to lines to homedir_template context file from Chris PeBenito.
2008-11-11 21:16:07 +00:00
Daniel J Walsh
43a16b6241 - Add compression support 2008-11-07 14:23:16 +00:00
Daniel J Walsh
688b1ed5d1 - Add compression support 2008-11-07 14:12:03 +00:00
Daniel J Walsh
be978502a0 - Update to upstream
allow fcontext and seuser changes without rebuilding the policy from Dan
    Walsh
2008-09-15 16:24:31 +00:00
Daniel J Walsh
ead711e339 - Additional fixes for Don't rebuild on fcontext or seuser modifications 2008-09-10 14:37:31 +00:00
Daniel J Walsh
62cd7b010a - Don't rebuild on fcontext or seuser modifications 2008-08-29 18:57:16 +00:00
Daniel J Walsh
dd1def2551 - Don't rebuild on fcontext or seuser modifications 2008-08-15 16:59:10 +00:00
Daniel J Walsh
5142c61edd - Don't rebuild on fcontext or seuser modifications 2008-08-14 20:17:19 +00:00
Daniel J Walsh
8bffda7314 - Update to upstream
Modify genhomedircon to skip %groupname entries. Ultimately we need to
    expand them to the list of users to support per-role homedir labeling
    when using the %groupname syntax.
2008-08-05 14:29:44 +00:00
Daniel J Walsh
feb8552515 - Update to upstream
Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any
    trailing slash before appending /*$.
2008-07-29 13:25:12 +00:00
Daniel J Walsh
e69414a046 - Another fix for genhomedircon 2008-07-17 18:35:34 +00:00
Tom Callaway
3296a8cd7e fix license tag 2008-05-28 21:43:40 +00:00
Daniel J Walsh
272f92ab1c - Update to upstream
Do not call genhomedircon if the policy was not rebuilt from Stephen
    Smalley. Fixes semanage boolean -D seg fault (bug 441379).
2008-05-06 21:38:01 +00:00
Daniel J Walsh
084654f4e3 - Update to upstream
make swigify
2008-02-26 13:16:43 +00:00
Daniel J Walsh
ac914e44de - Update to upstream
Use vfork rather than fork for libsemanage helpers to reduce memory
    overhead as suggested by Todd Miller.
2008-02-05 20:26:58 +00:00
Daniel J Walsh
811753b1b0 - Update to upstream
Free policydb before fork from Joshua Brindle.
Drop the base module immediately after expanding to permit memory re-use
    from Stephen Smalley.
2008-02-04 17:25:53 +00:00
Daniel J Walsh
448d3446cf - Update to upstream
Use sepol_set_expand_consume_base to reduce peak memory usage when using
    semodule
2008-02-02 21:47:57 +00:00
Daniel J Walsh
ade6fffd9e - Update to upstream
Use sepol_set_expand_consume_base to reduce peak memory usage when using
    semodule
2008-02-02 21:38:32 +00:00
Daniel J Walsh
283295614d - Update to upstream
Fix genhomedircon to not override a file context with a homedir context
    from Todd Miller.
2008-02-01 10:49:29 +00:00
Daniel J Walsh
e2b1d219e7 - Update to upstream
Fix spurious out of memory error reports.
Merged second version of fix for genhomedircon handling from Caleb Case.
2008-01-29 13:36:49 +00:00
Daniel J Walsh
36d79c42d3 - Update to upstream
Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT
    templates from Caleb Case.
2008-01-25 16:20:02 +00:00
Daniel J Walsh
924325dc15 - Stop differentiating on user for homedir labeling 2008-01-22 19:38:14 +00:00
Daniel J Walsh
1427637c48 - Update to upstream
Fix genhomedircon handling of shells and missing user context template from
    Dan Walsh.
Copy the store path in semanage_select_store from Dan Walsh.
2007-12-07 01:18:18 +00:00
Daniel J Walsh
f026dfbc02 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 20:55:15 +00:00
Daniel J Walsh
3d2cf39af1 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 19:22:33 +00:00
Daniel J Walsh
e3e8d634bb - Allow semanage_genhomedircon to work with out a USER int homedir.template 2007-11-30 20:08:17 +00:00
Daniel J Walsh
90bffa9795 - Upgrade to latest from NSA
Call rmdir() rather than remove() on directory removal so that errno isn't
    polluted from Stephen Smalley.
Allow handle_unknown in base to be overridden by semanage.conf from Stephen
    Smalley.
2007-11-06 18:33:05 +00:00
Daniel J Walsh
58209b633d - Upgrade to latest from NSA
Call rmdir() rather than remove() on directory removal so that errno isn't
    polluted from Stephen Smalley.
Allow handle_unknown in base to be overridden by semanage.conf from Stephen
    Smalley.
2007-11-06 18:01:51 +00:00
Bill Nottingham
e2ce6e027d makefile update to properly grab makefile.common 2007-10-15 19:04:16 +00:00
Daniel J Walsh
2511741eac - Upgrade to latest from NSA
ustr cleanups from James Antill.
Ensure that /root gets labeled even if using the default context from Dan
    Walsh.
2007-10-05 17:20:57 +00:00
Daniel J Walsh
fbe2b7390b - Upgrade to latest from NSA
ustr cleanups from James Antill.
Ensure that /root gets labeled even if using the default context from Dan
    Walsh.
2007-10-05 17:18:12 +00:00
Daniel J Walsh
3ba23c823c - Upgrade to latest from NSA
Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
2007-10-01 16:29:27 +00:00
Daniel J Walsh
add9ada6d8 - Upgrade to latest from NSA
Fix error checking on getpw*_r functions from Todd Miller.
Make genhomedircon skip invalid homedir contexts from Todd Miller.
Set default user and prefix from seusers from Dan Walsh.
Add swigify Makefile target from Dan Walsh.
2007-09-28 13:53:30 +00:00
Daniel J Walsh
8bb5a230f2 - Upgrade to latest from NSA
Pass CFLAGS to CC even on link command, per Dennis Gilmore.
Clear errno on non-fatal errors to avoid reporting them upon a later error
    that does not set errno.
Improve reporting of system errors, e.g. full filesystem or read-only
    filesystem from Stephen Smalley.
2007-09-27 00:20:09 +00:00
Daniel J Walsh
09711868c7 - Fix genhomedircon code to only generate valid context
- Fixes autorelabel problem
2007-09-26 20:51:43 +00:00
Daniel J Walsh
422f3b68fd - Upgrade to latest from NSA
Change to use getpw* function calls to the _r versions from Todd Miller.
2007-09-13 12:29:42 +00:00
Daniel J Walsh
c0c84efd96 - Upgrade to latest from NSA 2007-09-06 02:48:04 +00:00
Daniel J Walsh
8f8294e39e - Upgrade to latest from NSA 2007-09-05 19:01:41 +00:00
Daniel J Walsh
cf2b1c22f9 - Upgrade to latest from NSA
Allow dontaudits to be turned off via semanage interface when updating
    policy
2007-08-20 23:30:14 +00:00
Daniel J Walsh
6da4db8e6f - Add ability to load a policy without dontaudit rules
-
2007-08-11 10:53:39 +00:00
Daniel J Walsh
a65d30f4d2 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-08-11 10:42:54 +00:00
Daniel J Walsh
3068364d58 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-06-26 09:43:57 +00:00
Daniel J Walsh
65c9f7004a - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-06-26 09:39:27 +00:00
Daniel J Walsh
d49d036d30 - Rebuild for rawhide 2007-06-01 14:45:13 +00:00
Daniel J Walsh
212e1b703f - Apply patch to fix dependencies in spec file from Robert Scheck 2007-05-04 17:26:34 +00:00
Daniel J Walsh
3e627b0d72 - Upgrade to latest from NSA
Fix to libsemanage man patches so whatis will work better from Dan Walsh
2007-04-26 00:05:03 +00:00
Daniel J Walsh
b8748b2834 - Upgrade to latest from NSA
Merged optimizations from Stephen Smalley.
- do not set all booleans upon commit, only those whose values have changed
- only install the sandbox upon commit if something was rebuilt
2007-04-25 15:11:21 +00:00
Daniel J Walsh
eea9396386 - Add SELinux to Man page Names so man -k will work 2007-03-27 19:48:04 +00:00