Commit Graph

69 Commits

Author SHA1 Message Date
Dan Walsh
5e780f2aa2 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-22 09:46:21 -04:00
Dan Walsh
716220e45b Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-19 06:34:47 -04:00
Dan Walsh
617897ade9 Update to upstream
2.1.2 2011-08-17
	* print error debug info for buggy fc
	* introduce semanage_set_root and friends
	* throw exceptions in python rather than return
	* python3 support.
	* patch for MCS/MLS in user files
2011-08-18 07:16:10 -04:00
Dan Walsh
c00e96cc0c More fixes for disabled modules 2011-06-08 14:46:29 -04:00
Dan Walsh
568e47f118 Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module
indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
ship active modules in rpm.
2011-06-07 13:54:28 -04:00
Dan Walsh
410db78cc0 Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module
indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
ship active modules in rpm.
2011-06-07 13:14:57 -04:00
Dan Walsh
0984542175 Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools 2011-06-02 12:14:52 -04:00
Dan Walsh
6120de7432 - Update to upstream
* Fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:35:11 -05:00
Daniel J Walsh
0b6b0c93f2 - Update to upstream
Add enable/disable patch support from Dan Walsh.
Add usepasswd flag to semanage.conf to disable genhomedircon using passwd
    from Dan Walsh.
regenerate swig wrappers
2010-03-08 18:19:41 +00:00
Daniel J Walsh
bae6b411c7 - Rebuild all c programs with -fPIC 2009-12-16 21:11:12 +00:00
Daniel J Walsh
71c0c5e065 - Update to upstream
Move load_policy from /usr/sbin to /sbin from Dan Walsh.
2009-11-18 22:19:06 +00:00
Daniel J Walsh
b1238c466b - Dont relabel /root with genhomedircon 2009-09-20 11:43:05 +00:00
Daniel J Walsh
b05566938b - Update to upstream
Change semodule upgrade behavior to install even if the module is not
    present from Dan Walsh.
Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
2009-09-17 13:02:59 +00:00
Daniel J Walsh
5aeb590264 - Update to upstream
Fix persistent dontaudit support to rebuild policy if the dontaudit state
    is changed from Chad Sellers.
- Move load_policy to /sbin
2009-09-09 17:57:13 +00:00
Daniel J Walsh
f6a1eaa2e3 - Add enable/disable modules 2009-08-28 18:03:05 +00:00
Daniel J Walsh
7313e2e746 - Make sure /root is not used in genhomedircon 2009-08-26 19:06:23 +00:00
Daniel J Walsh
168ea7cab1 Revert hard linking of files between tmp/active/previous.
Enable configuration of bzip behavior from Stephen Smalley.
    bzip-blocksize=0 to disable compression and decompression support.
    bzip-blocksize=1..9 to set the blocksize for compression.
    bzip-small=true to reduce memory usage for decompression.
2009-08-05 19:21:58 +00:00
Daniel J Walsh
1639efd7cd - Put check for /root back into genhomedircon 2009-07-10 18:46:52 +00:00
Daniel J Walsh
f4a5c19066 - Update to upstream 2009-07-07 21:09:15 +00:00
Daniel J Walsh
3652b31671 - Update to upstream
Ruby bindings from David Quigley.
2009-06-08 19:05:19 +00:00
Daniel J Walsh
713ea522a4 - Return error on invalid file 2009-04-17 15:25:00 +00:00
Daniel J Walsh
9b8c9f0229 - Fix typo 2009-03-11 19:38:20 +00:00
Daniel J Walsh
dd8fa006e0 - Fix link to only link on sandbox 2009-01-15 20:56:45 +00:00
Daniel J Walsh
cee66038e2 - Update to upstream
Policy module compression (bzip) support from Dan Walsh.
Hard link files between tmp/active/previous from Dan Walsh.
2009-01-13 13:14:25 +00:00
Daniel J Walsh
8aa784b272 - Fix up patch to get it upstreamed 2009-01-12 19:37:55 +00:00
Daniel J Walsh
25dcff4b7d - Fix up patch to get it upstreamed 2009-01-12 15:55:47 +00:00
Daniel J Walsh
81984aa5a2 Add semanage_mls_enabled() interface from Stephen Smalley. 2008-12-04 20:19:01 +00:00
Daniel J Walsh
43a16b6241 - Add compression support 2008-11-07 14:23:16 +00:00
Daniel J Walsh
be978502a0 - Update to upstream
allow fcontext and seuser changes without rebuilding the policy from Dan
    Walsh
2008-09-15 16:24:31 +00:00
Daniel J Walsh
ead711e339 - Additional fixes for Don't rebuild on fcontext or seuser modifications 2008-09-10 14:37:31 +00:00
Daniel J Walsh
62cd7b010a - Don't rebuild on fcontext or seuser modifications 2008-08-29 18:57:16 +00:00
Daniel J Walsh
5142c61edd - Don't rebuild on fcontext or seuser modifications 2008-08-14 20:17:19 +00:00
Daniel J Walsh
8bffda7314 - Update to upstream
Modify genhomedircon to skip %groupname entries. Ultimately we need to
    expand them to the list of users to support per-role homedir labeling
    when using the %groupname syntax.
2008-08-05 14:29:44 +00:00
Daniel J Walsh
feb8552515 - Update to upstream
Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any
    trailing slash before appending /*$.
2008-07-29 13:25:12 +00:00
Daniel J Walsh
e69414a046 - Another fix for genhomedircon 2008-07-17 18:35:34 +00:00
Daniel J Walsh
e2b1d219e7 - Update to upstream
Fix spurious out of memory error reports.
Merged second version of fix for genhomedircon handling from Caleb Case.
2008-01-29 13:36:49 +00:00
Daniel J Walsh
924325dc15 - Stop differentiating on user for homedir labeling 2008-01-22 19:38:14 +00:00
Daniel J Walsh
1427637c48 - Update to upstream
Fix genhomedircon handling of shells and missing user context template from
    Dan Walsh.
Copy the store path in semanage_select_store from Dan Walsh.
2007-12-07 01:18:18 +00:00
Daniel J Walsh
f026dfbc02 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 20:55:15 +00:00
Daniel J Walsh
3d2cf39af1 - Fix handling of /etc/shells so genhomedircon will work 2007-12-03 19:22:33 +00:00
Daniel J Walsh
e3e8d634bb - Allow semanage_genhomedircon to work with out a USER int homedir.template 2007-11-30 20:08:17 +00:00
Daniel J Walsh
3ba23c823c - Upgrade to latest from NSA
Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
2007-10-01 16:29:27 +00:00
Daniel J Walsh
8bb5a230f2 - Upgrade to latest from NSA
Pass CFLAGS to CC even on link command, per Dennis Gilmore.
Clear errno on non-fatal errors to avoid reporting them upon a later error
    that does not set errno.
Improve reporting of system errors, e.g. full filesystem or read-only
    filesystem from Stephen Smalley.
2007-09-27 00:20:09 +00:00
Daniel J Walsh
09711868c7 - Fix genhomedircon code to only generate valid context
- Fixes autorelabel problem
2007-09-26 20:51:43 +00:00
Daniel J Walsh
c0c84efd96 - Upgrade to latest from NSA 2007-09-06 02:48:04 +00:00
Daniel J Walsh
8f8294e39e - Upgrade to latest from NSA 2007-09-05 19:01:41 +00:00
Daniel J Walsh
cf2b1c22f9 - Upgrade to latest from NSA
Allow dontaudits to be turned off via semanage interface when updating
    policy
2007-08-20 23:30:14 +00:00
Daniel J Walsh
a65d30f4d2 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-08-11 10:42:54 +00:00
Daniel J Walsh
3068364d58 - Rebuild to fix segfault on x86 platforms, swigify on each build 2007-06-26 09:43:57 +00:00
Daniel J Walsh
eea9396386 - Add SELinux to Man page Names so man -k will work 2007-03-27 19:48:04 +00:00