Dan Walsh
568e47f118
Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module
...
indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can
ship active modules in rpm.
2011-06-07 13:54:28 -04:00
Dan Walsh
410db78cc0
Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module
...
indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can
ship active modules in rpm.
2011-06-07 13:14:57 -04:00
Dan Walsh
0984542175
Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools
2011-06-02 12:14:52 -04:00
Dan Walsh
6120de7432
- Update to upstream
...
* Fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:35:11 -05:00
Daniel J Walsh
0b6b0c93f2
- Update to upstream
...
Add enable/disable patch support from Dan Walsh.
Add usepasswd flag to semanage.conf to disable genhomedircon using passwd
from Dan Walsh.
regenerate swig wrappers
2010-03-08 18:19:41 +00:00
Daniel J Walsh
bae6b411c7
- Rebuild all c programs with -fPIC
2009-12-16 21:11:12 +00:00
Daniel J Walsh
71c0c5e065
- Update to upstream
...
Move load_policy from /usr/sbin to /sbin from Dan Walsh.
2009-11-18 22:19:06 +00:00
Daniel J Walsh
b1238c466b
- Dont relabel /root with genhomedircon
2009-09-20 11:43:05 +00:00
Daniel J Walsh
b05566938b
- Update to upstream
...
Change semodule upgrade behavior to install even if the module is not
present from Dan Walsh.
Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
2009-09-17 13:02:59 +00:00
Daniel J Walsh
5aeb590264
- Update to upstream
...
Fix persistent dontaudit support to rebuild policy if the dontaudit state
is changed from Chad Sellers.
- Move load_policy to /sbin
2009-09-09 17:57:13 +00:00
Daniel J Walsh
f6a1eaa2e3
- Add enable/disable modules
2009-08-28 18:03:05 +00:00
Daniel J Walsh
7313e2e746
- Make sure /root is not used in genhomedircon
2009-08-26 19:06:23 +00:00
Daniel J Walsh
168ea7cab1
Revert hard linking of files between tmp/active/previous.
...
Enable configuration of bzip behavior from Stephen Smalley.
bzip-blocksize=0 to disable compression and decompression support.
bzip-blocksize=1..9 to set the blocksize for compression.
bzip-small=true to reduce memory usage for decompression.
2009-08-05 19:21:58 +00:00
Daniel J Walsh
1639efd7cd
- Put check for /root back into genhomedircon
2009-07-10 18:46:52 +00:00
Daniel J Walsh
f4a5c19066
- Update to upstream
2009-07-07 21:09:15 +00:00
Daniel J Walsh
3652b31671
- Update to upstream
...
Ruby bindings from David Quigley.
2009-06-08 19:05:19 +00:00
Daniel J Walsh
713ea522a4
- Return error on invalid file
2009-04-17 15:25:00 +00:00
Daniel J Walsh
9b8c9f0229
- Fix typo
2009-03-11 19:38:20 +00:00
Daniel J Walsh
dd8fa006e0
- Fix link to only link on sandbox
2009-01-15 20:56:45 +00:00
Daniel J Walsh
cee66038e2
- Update to upstream
...
Policy module compression (bzip) support from Dan Walsh.
Hard link files between tmp/active/previous from Dan Walsh.
2009-01-13 13:14:25 +00:00
Daniel J Walsh
8aa784b272
- Fix up patch to get it upstreamed
2009-01-12 19:37:55 +00:00
Daniel J Walsh
25dcff4b7d
- Fix up patch to get it upstreamed
2009-01-12 15:55:47 +00:00
Daniel J Walsh
81984aa5a2
Add semanage_mls_enabled() interface from Stephen Smalley.
2008-12-04 20:19:01 +00:00
Daniel J Walsh
43a16b6241
- Add compression support
2008-11-07 14:23:16 +00:00
Daniel J Walsh
be978502a0
- Update to upstream
...
allow fcontext and seuser changes without rebuilding the policy from Dan
Walsh
2008-09-15 16:24:31 +00:00
Daniel J Walsh
ead711e339
- Additional fixes for Don't rebuild on fcontext or seuser modifications
2008-09-10 14:37:31 +00:00
Daniel J Walsh
62cd7b010a
- Don't rebuild on fcontext or seuser modifications
2008-08-29 18:57:16 +00:00
Daniel J Walsh
5142c61edd
- Don't rebuild on fcontext or seuser modifications
2008-08-14 20:17:19 +00:00
Daniel J Walsh
8bffda7314
- Update to upstream
...
Modify genhomedircon to skip %groupname entries. Ultimately we need to
expand them to the list of users to support per-role homedir labeling
when using the %groupname syntax.
2008-08-05 14:29:44 +00:00
Daniel J Walsh
feb8552515
- Update to upstream
...
Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any
trailing slash before appending /*$.
2008-07-29 13:25:12 +00:00
Daniel J Walsh
e69414a046
- Another fix for genhomedircon
2008-07-17 18:35:34 +00:00
Daniel J Walsh
e2b1d219e7
- Update to upstream
...
Fix spurious out of memory error reports.
Merged second version of fix for genhomedircon handling from Caleb Case.
2008-01-29 13:36:49 +00:00
Daniel J Walsh
924325dc15
- Stop differentiating on user for homedir labeling
2008-01-22 19:38:14 +00:00
Daniel J Walsh
1427637c48
- Update to upstream
...
Fix genhomedircon handling of shells and missing user context template from
Dan Walsh.
Copy the store path in semanage_select_store from Dan Walsh.
2007-12-07 01:18:18 +00:00
Daniel J Walsh
f026dfbc02
- Fix handling of /etc/shells so genhomedircon will work
2007-12-03 20:55:15 +00:00
Daniel J Walsh
3d2cf39af1
- Fix handling of /etc/shells so genhomedircon will work
2007-12-03 19:22:33 +00:00
Daniel J Walsh
e3e8d634bb
- Allow semanage_genhomedircon to work with out a USER int homedir.template
2007-11-30 20:08:17 +00:00
Daniel J Walsh
3ba23c823c
- Upgrade to latest from NSA
...
Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
2007-10-01 16:29:27 +00:00
Daniel J Walsh
8bb5a230f2
- Upgrade to latest from NSA
...
Pass CFLAGS to CC even on link command, per Dennis Gilmore.
Clear errno on non-fatal errors to avoid reporting them upon a later error
that does not set errno.
Improve reporting of system errors, e.g. full filesystem or read-only
filesystem from Stephen Smalley.
2007-09-27 00:20:09 +00:00
Daniel J Walsh
09711868c7
- Fix genhomedircon code to only generate valid context
...
- Fixes autorelabel problem
2007-09-26 20:51:43 +00:00
Daniel J Walsh
c0c84efd96
- Upgrade to latest from NSA
2007-09-06 02:48:04 +00:00
Daniel J Walsh
8f8294e39e
- Upgrade to latest from NSA
2007-09-05 19:01:41 +00:00
Daniel J Walsh
cf2b1c22f9
- Upgrade to latest from NSA
...
Allow dontaudits to be turned off via semanage interface when updating
policy
2007-08-20 23:30:14 +00:00
Daniel J Walsh
a65d30f4d2
- Rebuild to fix segfault on x86 platforms, swigify on each build
2007-08-11 10:42:54 +00:00
Daniel J Walsh
3068364d58
- Rebuild to fix segfault on x86 platforms, swigify on each build
2007-06-26 09:43:57 +00:00
Daniel J Walsh
eea9396386
- Add SELinux to Man page Names so man -k will work
2007-03-27 19:48:04 +00:00
Daniel J Walsh
4f442a2b56
- Upgrade to latest from NSA
...
Merged patch to optionally reduce disk usage by removing the backup module
store and linked policy from Karl MacMillan
Merged patch to correctly propagate return values in libsemanage
2007-01-25 22:48:00 +00:00
Daniel J Walsh
7ccc8bd470
- Apply Karl MacMillan patch to get proper error codes.
2006-12-22 16:50:50 +00:00
Daniel J Walsh
73c5b03ea2
*** empty log message ***
2006-09-29 14:44:43 +00:00
Daniel J Walsh
df4486c793
- Change other updates to be non-fatal
2006-08-11 03:20:13 +00:00