Commit Graph

105 Commits

Author SHA1 Message Date
Daniel J Walsh
f6a1eaa2e3 - Add enable/disable modules 2009-08-28 18:03:05 +00:00
Daniel J Walsh
7313e2e746 - Make sure /root is not used in genhomedircon 2009-08-26 19:06:23 +00:00
Daniel J Walsh
168ea7cab1 Revert hard linking of files between tmp/active/previous.
Enable configuration of bzip behavior from Stephen Smalley.
    bzip-blocksize=0 to disable compression and decompression support.
    bzip-blocksize=1..9 to set the blocksize for compression.
    bzip-small=true to reduce memory usage for decompression.
2009-08-05 19:21:58 +00:00
Daniel J Walsh
1639efd7cd - Put check for /root back into genhomedircon 2009-07-10 18:46:52 +00:00
Daniel J Walsh
f4a5c19066 - Update to upstream 2009-07-07 21:09:15 +00:00
Daniel J Walsh
3652b31671 - Update to upstream
Ruby bindings from David Quigley.
2009-06-08 19:05:19 +00:00
Daniel J Walsh
713ea522a4 - Return error on invalid file 2009-04-17 15:25:00 +00:00
Daniel J Walsh
9b8c9f0229 - Fix typo 2009-03-11 19:38:20 +00:00
Daniel J Walsh
dd8fa006e0 - Fix link to only link on sandbox 2009-01-15 20:56:45 +00:00
Daniel J Walsh
cee66038e2 - Update to upstream
Policy module compression (bzip) support from Dan Walsh.
Hard link files between tmp/active/previous from Dan Walsh.
2009-01-13 13:14:25 +00:00
Daniel J Walsh
8aa784b272 - Fix up patch to get it upstreamed 2009-01-12 19:37:55 +00:00
Daniel J Walsh
25dcff4b7d - Fix up patch to get it upstreamed 2009-01-12 15:55:47 +00:00
Daniel J Walsh
81984aa5a2 Add semanage_mls_enabled() interface from Stephen Smalley. 2008-12-04 20:19:01 +00:00
Daniel J Walsh
43a16b6241 - Add compression support 2008-11-07 14:23:16 +00:00
Daniel J Walsh
be978502a0 - Update to upstream
allow fcontext and seuser changes without rebuilding the policy from Dan
    Walsh
2008-09-15 16:24:31 +00:00
Daniel J Walsh
ead711e339 - Additional fixes for Don't rebuild on fcontext or seuser modifications 2008-09-10 14:37:31 +00:00
Daniel J Walsh
62cd7b010a - Don't rebuild on fcontext or seuser modifications 2008-08-29 18:57:16 +00:00
Daniel J Walsh
5142c61edd - Don't rebuild on fcontext or seuser modifications 2008-08-14 20:17:19 +00:00
Daniel J Walsh
8bffda7314 - Update to upstream
Modify genhomedircon to skip %groupname entries. Ultimately we need to
    expand them to the list of users to support per-role homedir labeling
    when using the %groupname syntax.
2008-08-05 14:29:44 +00:00
Daniel J Walsh
feb8552515 - Update to upstream
Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any
    trailing slash before appending /*$.
2008-07-29 13:25:12 +00:00
Daniel J Walsh
e69414a046 - Another fix for genhomedircon 2008-07-17 18:35:34 +00:00
Daniel J Walsh
e2b1d219e7 - Update to upstream
Fix spurious out of memory error reports.
Merged second version of fix for genhomedircon handling from Caleb Case.
2008-01-29 13:36:49 +00:00
Daniel J Walsh
924325dc15 - Stop differentiating on user for homedir labeling 2008-01-22 19:38:14 +00:00
Daniel J Walsh
1427637c48 - Update to upstream
Fix genhomedircon handling of shells and missing user context template from
    Dan Walsh.
Copy the store path in semanage_select_store from Dan Walsh.
2007-12-07 01:18:18 +00:00
Daniel J Walsh
f026dfbc02 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 20:55:15 +00:00
Daniel J Walsh
3d2cf39af1 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 19:22:33 +00:00
Daniel J Walsh
e3e8d634bb - Allow semanage_genhomedircon to work with out a USER int homedir.template 2007-11-30 20:08:17 +00:00
Daniel J Walsh
3ba23c823c - Upgrade to latest from NSA
Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
2007-10-01 16:29:27 +00:00
Daniel J Walsh
8bb5a230f2 - Upgrade to latest from NSA
Pass CFLAGS to CC even on link command, per Dennis Gilmore.
Clear errno on non-fatal errors to avoid reporting them upon a later error
    that does not set errno.
Improve reporting of system errors, e.g. full filesystem or read-only
    filesystem from Stephen Smalley.
2007-09-27 00:20:09 +00:00
Daniel J Walsh
09711868c7 - Fix genhomedircon code to only generate valid context
- Fixes autorelabel problem
2007-09-26 20:51:43 +00:00
Daniel J Walsh
c0c84efd96 - Upgrade to latest from NSA 2007-09-06 02:48:04 +00:00
Daniel J Walsh
8f8294e39e - Upgrade to latest from NSA 2007-09-05 19:01:41 +00:00
Daniel J Walsh
cf2b1c22f9 - Upgrade to latest from NSA
Allow dontaudits to be turned off via semanage interface when updating
    policy
2007-08-20 23:30:14 +00:00
Daniel J Walsh
a65d30f4d2 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-08-11 10:42:54 +00:00
Daniel J Walsh
3068364d58 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-06-26 09:43:57 +00:00
Daniel J Walsh
eea9396386 - Add SELinux to Man page Names so man -k will work 2007-03-27 19:48:04 +00:00
Daniel J Walsh
4f442a2b56 - Upgrade to latest from NSA
Merged patch to optionally reduce disk usage by removing the backup module
    store and linked policy from Karl MacMillan
Merged patch to correctly propagate return values in libsemanage
2007-01-25 22:48:00 +00:00
Daniel J Walsh
7ccc8bd470 - Apply Karl MacMillan patch to get proper error codes. 2006-12-22 16:50:50 +00:00
Daniel J Walsh
73c5b03ea2 *** empty log message *** 2006-09-29 14:44:43 +00:00
Daniel J Walsh
df4486c793 - Change other updates to be non-fatal 2006-08-11 03:20:13 +00:00
Daniel J Walsh
6ba7395041 - Change netfilter stuff to be non-fatal so update can proceed. 2006-08-09 19:08:44 +00:00
Daniel J Walsh
64aa562bf6 - Handle setfiles being in /sbin or /usr/sbin 2006-06-16 17:56:42 +00:00
Daniel J Walsh
9b0bb205bf - Upgrade to latest from NSA
Merged file context sorting code from Christopher Ashworth (Tresys
    Technology), based on fc_sort.c code in refpolicy.
Merged python binding t_output_helper removal patch from Dan Walsh.
Regenerated swig files.
2006-04-14 11:37:57 +00:00
Daniel J Walsh
07a3ad638e - Fix leaky descriptor 2006-04-03 21:26:44 +00:00
Daniel J Walsh
aa0c632103 - Make work on RHEL4
- Upgrade to latest from NSA
Merged abort early on merge errors patch from Ivan Gyurdiev.
Cleaned up error handling in semanage_split_fc based on a patch by Serge
    Hallyn (IBM) and suggestions by Ivan Gyurdiev.
Merged MLS handling fixes from Ivan Gyurdiev.
2006-03-17 20:25:31 +00:00
Daniel J Walsh
437a1672f8 - Fix handling of seusers and users_map file 2006-02-10 16:42:07 +00:00
Daniel J Walsh
cef3ae1b81 *** empty log message *** 2006-01-14 04:52:47 +00:00
Daniel J Walsh
cde1f77237 *** empty log message *** 2006-01-13 22:36:39 +00:00
Daniel J Walsh
eddd487028 - Upgrade to latest from NSA
Clarified error messages from parse_module_headers and parse_base_headers
    for base/module mismatches.
Merged string and file optimization patch from Russell Coker.
Merged swig header reordering patch from Ivan Gyurdiev.
Merged toggle modify on add patch from Ivan Gyurdiev.
Merged ports parser bugfix patch from Ivan Gyurdiev.
Merged fcontext swig patch from Ivan Gyurdiev.
Merged remove add/modify/delete for active booleans patch from Ivan
    Gyurdiev.
Merged man pages for dbase functions patch from Ivan Gyurdiev.
Merged pywrap tests patch from Ivan Gyurdiev.
2006-01-05 16:21:25 +00:00
Daniel J Walsh
23614f87e1 - Add Ivans patch to turn on ports 2006-01-02 12:56:28 +00:00
Daniel J Walsh
97de529789 - Update version for release 2005-12-07 17:32:18 +00:00
Daniel J Walsh
066e239ed5 - Add additional swig objects
Merged wrap char*** for user_get_roles patch from Joshua Brindle.
Merged remove defrole from sepol patch from Ivan Gyurdiev.
Merged swig wrappers for modifying users and seusers from Joshua Brindle.
2005-11-29 03:16:02 +00:00
Daniel J Walsh
785fc2e237 - Update from NSA
Merged semod.conf template patch from Dan Walsh (Red Hat), but restored
    location to /usr/share/semod/semod.conf.
Fixed several bugs found by valgrind.
Fixed bug in prior patch for the semod_build_module_list leak.
Merged errno fix from Joshua Brindle (Tresys).
Merged fix for semod_build_modules_list leak on error path from Serge
    Hallyn (IBM). Bug found by Coverity.
2005-09-06 20:16:22 +00:00
Daniel J Walsh
b609a6d466 - Update from NSA
Merged errno fix from Joshua Brindle (Tresys).
Merged fix for semod_build_modules_list leak on error path from Serge
    Hallyn (IBM). Bug found by Coverity.
Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity.
Fixed several other bugs and warnings.
Merged patch to move module read/write code from libsemanage to libsepol
    from Jason Tang (Tresys).
Merged relay records patch from Ivan Gyurdiev.
Merged key extract patch from Ivan Gyurdiev.
2005-08-30 14:22:49 +00:00
Daniel J Walsh
d9ff1def7c - Update from NSA
Merged errno fix from Joshua Brindle (Tresys).
Merged fix for semod_build_modules_list leak on error path from Serge
    Hallyn (IBM). Bug found by Coverity.
Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity.
Fixed several other bugs and warnings.
Merged patch to move module read/write code from libsemanage to libsepol
    from Jason Tang (Tresys).
Merged relay records patch from Ivan Gyurdiev.
Merged key extract patch from Ivan Gyurdiev.
2005-08-30 13:46:52 +00:00