Commit Graph

129 Commits

Author SHA1 Message Date
Petr Lautrbach 83d1ec7678 libsemanage-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 22:19:58 +01:00
Petr Lautrbach 288daf8999 libsemanage-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 12:37:19 +01:00
Petr Lautrbach 978a4047fc Upload libsemanage-2.4.tar.gz to lookaside cache 2015-07-20 18:14:08 +02:00
Dan Walsh 059a39519f Update to upstream
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.
2014-05-06 14:33:02 -04:00
Dan Walsh d76cbbc290 Update to upstream
* Avoid duplicate list entries from Dan Walsh.
	* Add audit support to libsemanage from Dan Walsh.
	* Remove policy.kern and replace with symlink from Dan Walsh.
	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
	* Fix man pages from Laurent Bigonville.
2013-10-31 09:31:40 -04:00
Dan Walsh 1021fcbc45 Update to upstream
* Add sefcontext_compile to compile regex everytime policy is rebuilt
	* Cleanup/fix enable/disable/remove module.
	* redo genhomedircon minuid
	* fixes from coverity
	* semanage_store: do not leak memory in semanage_exec_prog
	* genhomedircon: remove useless conditional in get_home_dirs
	* genhomedircon: double free in get_home_dirs
	* fcontext_record: do not leak on error in semanage_fcontext_key_create
	* genhomedircon: do not leak on failure in write_gen_home_dir_context
	* semanage_store: do not leak fd
	* genhomedircon: do not leak shells list
	* semanage_store: do not leak on strdup failure
	* semanage_store: rewrite for readability
2013-02-07 13:41:45 -05:00
rhatdan 70de4204ca Update to upstream
* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
2012-09-15 07:48:40 -04:00
Dan Walsh 114463ed84 Update to upstream
* remove build warning when build swig c files
	* additional makefile support for rubywrap
	* ignore 80 column limit for readability
	* semanage_store: fix snprintf length argument by using asprintf
	* Use default semanage.conf as a fallback
	* use after free in python bindings
2012-07-04 07:34:56 -04:00
Dan Walsh 72a84c3f42 Update to upstream
* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level
2012-03-29 15:28:29 -04:00
Dan Walsh 38c21bc8d2 Update to upstream 2011-12-21 18:04:15 +00:00
Dan Walsh a29afa3a34 Upgrade to upstream
* regenerate .pc on VERSION change
	* maintain mode even if umask is tighter
	* semanage.conf man page
	* create man5dir if not exist
2011-11-04 09:37:32 -04:00
Dan Walsh 71a9b31459 Update to upstream
* Create a new preserve_tunables flag
	* tree: default make target to all not
	* fix semanage_store_access_check calling arguments
2011-09-19 06:57:07 -04:00
Dan Walsh 43cf1c48fa Update to upstream
* python wrapper makefile changes
2011-08-30 16:34:31 -04:00
Dan Walsh 617897ade9 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-18 07:16:10 -04:00
Dan Walsh 38aed09666 Update to upstream
* Release, minor version bump
2011-07-28 11:53:53 -04:00
Dan Walsh 6120de7432 - Update to upstream
* Fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:35:11 -05:00
Daniel J Walsh 0b6b0c93f2 - Update to upstream
Add enable/disable patch support from Dan Walsh.
Add usepasswd flag to semanage.conf to disable genhomedircon using passwd
    from Dan Walsh.
regenerate swig wrappers
2010-03-08 18:19:41 +00:00
Daniel J Walsh ec76bdf88d - Update to upstream
Move libsemanage.so to /usr/lib
Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>
2009-12-01 22:47:17 +00:00
Daniel J Walsh 71c0c5e065 - Update to upstream
Move load_policy from /usr/sbin to /sbin from Dan Walsh.
2009-11-18 22:19:06 +00:00
Daniel J Walsh 372c07f302 - Update to upstream
Add pkgconfig file from Eamon Walsh.
Add semanage_set_check_contexts() function to disable calling setfiles
2009-11-02 18:11:54 +00:00
Daniel J Walsh f8b7dc8e1c - Update to upstream
make swigify
2009-09-28 20:36:12 +00:00
Daniel J Walsh b05566938b - Update to upstream
Change semodule upgrade behavior to install even if the module is not
    present from Dan Walsh.
Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
2009-09-17 13:02:59 +00:00
Daniel J Walsh 5aeb590264 - Update to upstream
Fix persistent dontaudit support to rebuild policy if the dontaudit state
    is changed from Chad Sellers.
- Move load_policy to /sbin
2009-09-09 17:57:13 +00:00
Daniel J Walsh f6a1eaa2e3 - Add enable/disable modules 2009-08-28 18:03:05 +00:00
Daniel J Walsh 168ea7cab1 Revert hard linking of files between tmp/active/previous.
Enable configuration of bzip behavior from Stephen Smalley.
    bzip-blocksize=0 to disable compression and decompression support.
    bzip-blocksize=1..9 to set the blocksize for compression.
    bzip-small=true to reduce memory usage for decompression.
2009-08-05 19:21:58 +00:00
Daniel J Walsh 1639efd7cd - Put check for /root back into genhomedircon 2009-07-10 18:46:52 +00:00
Daniel J Walsh f4a5c19066 - Update to upstream 2009-07-07 21:09:15 +00:00
Daniel J Walsh 3652b31671 - Update to upstream
Ruby bindings from David Quigley.
2009-06-08 19:05:19 +00:00
Daniel J Walsh cee66038e2 - Update to upstream
Policy module compression (bzip) support from Dan Walsh.
Hard link files between tmp/active/previous from Dan Walsh.
2009-01-13 13:14:25 +00:00
Daniel J Walsh 1990483943 Add semanage_mls_enabled() interface from Stephen Smalley. 2008-12-04 19:39:35 +00:00
Daniel J Walsh ab25b0bd42 - Update to upstream
Add USER to lines to homedir_template context file from Chris PeBenito.
2008-11-11 21:16:07 +00:00
Daniel J Walsh be978502a0 - Update to upstream
allow fcontext and seuser changes without rebuilding the policy from Dan
    Walsh
2008-09-15 16:24:31 +00:00
Daniel J Walsh 8bffda7314 - Update to upstream
Modify genhomedircon to skip %groupname entries. Ultimately we need to
    expand them to the list of users to support per-role homedir labeling
    when using the %groupname syntax.
2008-08-05 14:29:44 +00:00
Daniel J Walsh feb8552515 - Update to upstream
Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any
    trailing slash before appending /*$.
2008-07-29 13:25:12 +00:00
Daniel J Walsh 272f92ab1c - Update to upstream
Do not call genhomedircon if the policy was not rebuilt from Stephen
    Smalley. Fixes semanage boolean -D seg fault (bug 441379).
2008-05-06 21:38:01 +00:00
Daniel J Walsh 084654f4e3 - Update to upstream
make swigify
2008-02-26 13:16:43 +00:00
Daniel J Walsh ac914e44de - Update to upstream
Use vfork rather than fork for libsemanage helpers to reduce memory
    overhead as suggested by Todd Miller.
2008-02-05 20:26:58 +00:00
Daniel J Walsh 811753b1b0 - Update to upstream
Free policydb before fork from Joshua Brindle.
Drop the base module immediately after expanding to permit memory re-use
    from Stephen Smalley.
2008-02-04 17:25:53 +00:00
Daniel J Walsh 448d3446cf - Update to upstream
Use sepol_set_expand_consume_base to reduce peak memory usage when using
    semodule
2008-02-02 21:47:57 +00:00
Daniel J Walsh 283295614d - Update to upstream
Fix genhomedircon to not override a file context with a homedir context
    from Todd Miller.
2008-02-01 10:49:29 +00:00
Daniel J Walsh e2b1d219e7 - Update to upstream
Fix spurious out of memory error reports.
Merged second version of fix for genhomedircon handling from Caleb Case.
2008-01-29 13:36:49 +00:00
Daniel J Walsh 36d79c42d3 - Update to upstream
Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT
    templates from Caleb Case.
2008-01-25 16:20:02 +00:00
Daniel J Walsh 1427637c48 - Update to upstream
Fix genhomedircon handling of shells and missing user context template from
    Dan Walsh.
Copy the store path in semanage_select_store from Dan Walsh.
2007-12-07 01:18:18 +00:00
Daniel J Walsh 90bffa9795 - Upgrade to latest from NSA
Call rmdir() rather than remove() on directory removal so that errno isn't
    polluted from Stephen Smalley.
Allow handle_unknown in base to be overridden by semanage.conf from Stephen
    Smalley.
2007-11-06 18:33:05 +00:00
Daniel J Walsh 2511741eac - Upgrade to latest from NSA
ustr cleanups from James Antill.
Ensure that /root gets labeled even if using the default context from Dan
    Walsh.
2007-10-05 17:20:57 +00:00
Daniel J Walsh 3ba23c823c - Upgrade to latest from NSA
Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
2007-10-01 16:29:27 +00:00
Daniel J Walsh add9ada6d8 - Upgrade to latest from NSA
Fix error checking on getpw*_r functions from Todd Miller.
Make genhomedircon skip invalid homedir contexts from Todd Miller.
Set default user and prefix from seusers from Dan Walsh.
Add swigify Makefile target from Dan Walsh.
2007-09-28 13:53:30 +00:00
Daniel J Walsh 8bb5a230f2 - Upgrade to latest from NSA
Pass CFLAGS to CC even on link command, per Dennis Gilmore.
Clear errno on non-fatal errors to avoid reporting them upon a later error
    that does not set errno.
Improve reporting of system errors, e.g. full filesystem or read-only
    filesystem from Stephen Smalley.
2007-09-27 00:20:09 +00:00
Daniel J Walsh 422f3b68fd - Upgrade to latest from NSA
Change to use getpw* function calls to the _r versions from Todd Miller.
2007-09-13 12:29:42 +00:00
Daniel J Walsh 8f8294e39e - Upgrade to latest from NSA 2007-09-05 19:01:41 +00:00