rpms
/
libsepol
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
336 Commits 40 Branches 211 Tags 1.2 MiB
Commit Graph

336 Commits

Author SHA1 Message Date
Petr Lautrbach d162105aae libsepol-2.5-10 
- Check for too many permissions in classes and commons in CIL
- Fix xperm mapping between avrule and avtab
- tests: Fix mispelling of optimization option
- Fix unused/uninitialized variables on mac build
- Produce more meaningful error messages for conflicting type rules in CIL
- make "make test" fail when a CUnit test fails
- tests: fix g_b_role_2 test
- Change which attributes CIL keeps in the binary policy
- Port str_read() from kernel and remove multiple occurances of similar code
- Use calloc instead of malloc for all the *_to_val_structs
- Fix bugs found by AFL
- Fix memory leak in expand.c
- Fix invalid read when policy file is corrupt
- Fix possible use of uninitialized variables
 2016-10-04 08:17:24 +02:00
Petr Lautrbach aac9abeb50 libsepol-2.5-9 
- Warn instead of fail if permission is not resolved
- Ignore object_r when adding userrole mappings to policydb
 2016-08-01 10:46:53 +02:00
Petr Lautrbach 5ec2ad1fb2 libsepol-2.5-8 
- Add missing return to sepol_node_query()
- Add missing <stdarg.h> include
 2016-07-14 10:36:41 +02:00
Petr Lautrbach 44e2d26a69 libsepol-2.5-7 
- Correctly detect unknown classes in sepol_string_to_security_class
- Sort object files for deterministic linking order
- Fix neverallowxperm checking on attributes
- Remove libsepol.map when cleaning
- Add high-level language line marking support to CIL
 2016-06-23 12:27:14 +02:00
Petr Lautrbach 0a1d1e58aa libsepol-2.5-6 
- Change logic of bounds checking to match change in kernel
- Fix multiple spelling errors
 2016-05-06 16:04:28 +02:00
Petr Lautrbach d88ffa19a4 libsepol-2.5-5 
- Only apply bounds checking to source types in rules
- Fix CIL and not add an attribute as a type in the attr_type_map
 2016-05-02 07:52:38 +02:00
Petr Lautrbach 29e9ab01e1 Don't use -S git in autosetup as it requires git in a buildroot 
Fixes:

+ '[' 0 -ne 0 ']'
+ cd libsepol-2.5
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/bin/git init -q
/var/tmp/rpm-tmp.yCRSdD: line 42: /usr/bin/git: No such file or directory
error: Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
    Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
 2016-04-29 12:06:32 +02:00
Petr Lautrbach 71b1a80d94 libsepol-2.5-4 
- Build policy on systems not supporting DCCP protocol
- Fix extended permissions neverallow checking
- Fix CIL neverallow and bounds checking
- Android.mk: Add -D_GNU_SOURCE to common_cflags
 2016-04-29 11:49:05 +02:00
Petr Lautrbach 6bf5b06538 Use %autosetup to simplify updates 2016-04-29 11:47:41 +02:00
Petr Lautrbach a7ec325b44 libsepol-2.5-3 
- Fix bug in CIL when resetting classes
- Add support for portcon dccp protocol
 2016-04-08 20:27:32 +02:00
Petr Lautrbach 154778f82c libsepol-2.5-2.fc24 
- Use fully versioned arch-specific requires

https://fedoraproject.org/wiki/Packaging:Guidelines#Requiring_Base_Package
 2016-02-28 11:29:04 +01:00
Petr Lautrbach 0861542f57 libsepol-2.5-1 
- Update to upstream release 2016-02-23
 2016-02-23 21:31:12 +01:00
Petr Lautrbach 96ba36d4a0 Remove unused tmp.patch 2016-02-22 17:07:50 +01:00
Petr Lautrbach 3febb8cf9a libsepol-2.5-0.1.rc1 
Update to upstream rc1 release 2016-01-07
 2016-02-21 14:34:14 +01:00
Dennis Gilmore a554107a85 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 03:54:18 +00:00
Petr Lautrbach 8b5abd72f1 Revert "Improve compatibility with Python 3 SWIG bindings" 
The patch introduced new issues and memory leaks.

This reverts commit cb8eded90a.
 2015-09-01 16:41:48 +02:00
Michal Srb cb8eded90a Improve compatibility with Python 3 SWIG bindings 
- Resolves: rhbz#1247714
 2015-08-25 13:00:18 +02:00
Adam Jackson cc880287e2 Pass ldflags to make so hardening works 2015-08-14 14:52:55 -04:00
Petr Lautrbach 5e480567c8 Update to upstream release 2.4 2015-07-20 17:41:51 +02:00
Petr Lautrbach e4eba91d66 Drop unused libsepol-rhat.patch 2015-07-20 17:41:34 +02:00
Dennis Gilmore 658aaff9c8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 17:15:19 +00:00
Jaromir Capik 35b7bcbd4e Adding STAGE1 bootstrap recipe 2015-06-10 21:30:06 +02:00
Jaromir Capik f4c39a3999 Merge branch 'f21' 2015-06-10 21:28:13 +02:00
Peter Robinson 44f2d57366 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:57:06 +00:00
Peter Robinson 0d1fcdd0f7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:56:54 +00:00
Tom Callaway b84a7e51c3 fix license handling 2014-07-18 15:21:52 -04:00
Tom Callaway 2ec04ef185 fix license handling 2014-07-18 15:21:33 -04:00
Dennis Gilmore be60b4fdd2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 00:24:46 -05:00
Dan Walsh 87d9d9b744 Update to upstream 
* Improve error message for name-based transition conflicts.
	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
	* Report source file and line information for neverallow failures.
	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
	* Add sepol_validate_transition_reason_buffer function from Richard Haines.
 2014-05-06 14:20:51 -04:00
Dan Walsh 4704b23dcb Update to upstream 
* Improve error message for name-based transition conflicts.
	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
	* Report source file and line information for neverallow failures.
	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
	* Add sepol_validate_transition_reason_buffer function from Richard Haines.
 2014-05-06 14:17:40 -04:00
Dan Walsh ee7b363d01 Update to upstream 
- Richard Haines patch V1 Allow constraint denials to be determined.
- Add separate role declarations as required by modern checkpolicy.
 2013-10-31 09:19:31 -04:00
Dan Walsh 5c767f8d24 Update to upstream 
- Richard Haines patch V1 Allow constraint denials to be determined.
- Add separate role declarations as required by modern checkpolicy.
 2013-10-31 09:17:42 -04:00
Dennis Gilmore e7d43c0ef0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-03 01:58:02 -05:00
Dan Walsh 8f8f3fb514 Update to upstream 
* filename_trans: use some better sorting to compare and merge
	* coverity fixes
	* implement default type policy syntax
	* Fix memory leak issues found by Klocwork
- Add CONTRAINT_NAMES to the kernel
 2013-02-07 12:24:09 -05:00
Dan Walsh 1a48e42dcf Update to latest patches from eparis/Upstream 2013-01-27 19:55:20 -05:00
Dan Walsh d002148307 Update to latest patches from eparis/Upstream 2013-01-25 09:32:52 -05:00
Dan Walsh 6e6c78000d Update to latest patches from eparis/Upstream 2013-01-25 09:21:55 -05:00
Dan Walsh 5a38f90989 Fix libsepol.stack messages in audit2allow/audit2why 2013-01-08 13:35:56 -05:00
Dan Walsh 7a2ea3adf4 Fix libsepol.stack messages in audit2allow/audit2why 2013-01-08 13:30:18 -05:00
Dan Walsh 0df3b08ca9 Update to latest patches from eparis/Upstream 2013-01-04 17:17:25 -05:00
Dan Walsh a3698bbb34 Update Richard Haines patch to show constraint information 2012-11-27 16:31:35 -05:00
Dan Walsh 0557b38137 Add sepol_compute_av_reason_buffer patch from Richard Haines 2012-11-19 09:10:41 -05:00
rhatdan eb4908df1b Revert patch that was attempting to expand filetrans attributes, but is breaking filetrans rules 2012-09-19 16:09:53 -04:00
rhatdan 7a85deddcf Update to upstream 
* fix neverallow checking on attributes
	* Move context_copy() after switch block in ocontext_copy_*().
	* check for missing initial SID labeling statement.
	* Add always_check_network policy capability
	* role_fix_callback skips out-of-scope roles during expansion.
 2012-09-13 12:32:09 -04:00
Dan Walsh 99ee75724c Try new patches 2012-07-30 11:11:54 -04:00
Dan Walsh f204e024f1 Try new patches 2012-07-30 11:10:02 -04:00
Dan Walsh feedd04d81 Revert patches 2012-07-24 13:52:32 -04:00
Dan Walsh 4b02553992 Revert patches 2012-07-24 13:52:08 -04:00
Dan Walsh fa3013007e Revert patches 2012-07-24 13:50:59 -04:00
Dennis Gilmore 03f17d27e6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-19 16:10:21 -05:00