rpms
/
libsepol
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
336 Commits 40 Branches 211 Tags 1.2 MiB
Commit Graph

336 Commits

Author SHA1 Message Date
Daniel J Walsh 0f848837f2 - Upgrade to latest from NSA 
Merge user and role mapping support from Joshua Brindle.
 2008-05-28 14:16:58 +00:00
Daniel J Walsh 5249d73d8d - Upgrade to latest from NSA 
Fix mls_level_convert() to gracefully handle an empty user
    declaration/require from Stephen Smalley.
Belatedly merge test for policy downgrade from Todd Miller.
 2008-05-19 17:19:04 +00:00
Daniel J Walsh f21dcfb077 - Upgrade to latest from NSA 
Add permissive domain support from Eric Paris.
 2008-03-27 17:22:50 +00:00
Daniel J Walsh c5d82f51bd - Upgrade to latest from NSA 
Drop unused ->buffer field from struct policy_file.
Add policy_file_init() initalizer for struct policy_file and use it, from
    Todd C. Miller.
 2008-03-13 23:46:46 +00:00
Daniel J Walsh e6e6048d2a - Upgrade to latest from NSA 
Accept "Flask" as an alternate identifier string in kernel policies from
    Stephen Smalley.
Add support for open_perms policy capability from Eric Paris.
 2008-02-28 21:02:13 +00:00
Daniel J Walsh c24f89b2b2 - Upgrade to latest from NSA 
Fix invalid memory allocation in policydb_index_others() from Jason Tang.
 2008-02-20 18:48:48 +00:00
Daniel J Walsh d0df7f69ca - Upgrade to latest from NSA 
Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the
    kernel avtab to libsepol from Stephen Smalley.
 2008-02-04 17:22:25 +00:00
Daniel J Walsh 8f9d76f061 - Upgrade to latest from NSA 
Add support for consuming avrule_blocks during expansion to reduce peak
    memory usage.
 2008-02-02 21:41:20 +00:00
Daniel J Walsh 0ca4a0a26c - Upgrade to latest from NSA 
Add support for consuming avrule_blocks during expansion to reduce peak
    memory usage.
 2008-02-02 21:39:44 +00:00
Daniel J Walsh 3e3efa7317 - Fixed for spec review 2008-01-21 20:56:18 +00:00
Daniel J Walsh 0ab5c85098 - Fixed for spec review 2008-01-21 20:42:49 +00:00
Daniel J Walsh 66f43a65e2 - Upgrade to latest from NSA 
Added support for policy capabilities from Todd Miller.
Prevent generation of policy.18 with MLS enabled from Todd Miller.
 2008-01-11 18:52:04 +00:00
Daniel J Walsh a98dcaf709 - Upgrade to latest from NSA 
print module magic number in hex on mismatch, from Todd Miller.
 2007-12-11 02:53:58 +00:00
Daniel J Walsh f823e8b3e9 - Upgrade to latest from NSA 
clarify and reduce neverallow error reporting from Stephen Smalley.
 2007-11-30 20:09:52 +00:00
Daniel J Walsh 54e869d983 - Upgrade to latest from NSA 
Reject self aliasing at link time from Stephen Smalley.
Allow handle_unknown in base to be overridden by semanage.conf from Stephen
    Smalley.
Fixed bug in require checking from Stephen Smalley.
Added user hierarchy checking from Todd Miller.
 2007-11-06 17:55:04 +00:00
Bill Nottingham ab03ce91c3 makefile update to properly grab makefile.common 2007-10-15 19:04:19 +00:00
Daniel J Walsh cd3ee0bcf9 Pass CFLAGS to CC even on link command, per Dennis Gilmore. 2007-09-27 00:23:36 +00:00
Daniel J Walsh 340f7ecf02 - Upgrade to latest from NSA 
Merged support for the handle_unknown policydb flag from Eric Paris.
 2007-09-18 20:29:51 +00:00
Daniel J Walsh 9b4f035756 - Upgrade to latest from NSA 
Moved next_entry and put_entry out-of-line to reduce code size from Ulrich
    Drepper.
Fixed module_package_read_offsets bug introduced by the prior patch.
 2007-08-31 14:16:54 +00:00
Daniel J Walsh e034fd16cd - Upgrade to latest from NSA 
Moved next_entry and put_entry out-of-line to reduce code size from Ulrich
    Drepper.
Fixed module_package_read_offsets bug introduced by the prior patch.
 2007-08-31 12:42:21 +00:00
Daniel J Walsh b79588c078 - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-28 17:35:57 +00:00
Daniel J Walsh d7175a2f83 - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-24 17:56:05 +00:00
Daniel J Walsh b08149358f - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-23 20:54:04 +00:00
Daniel J Walsh 7a9ae4d69d - Upgrade to latest from NSA 
Allow dontaudits to be turned off during policy expansion
 2007-08-20 23:20:34 +00:00
Daniel J Walsh 58a8c31c4d - Upgrade to latest from NSA 
Fix sepol_context_clone to handle a NULL context correctly. This happens
    for e.g. semanage_fcontext_set_con(sh, fcontext, NULL) to set the file
    context entry to "<<none>>".
- Apply patch from Joshua Brindle to disable dontaudit rules
 2007-08-11 11:01:41 +00:00
Daniel J Walsh 63e1b4a423 - Upgrade to latest from NSA 
Merged error handling patch from Eamon Walsh.
 2007-06-21 14:42:58 +00:00
Daniel J Walsh d036a5297d - Upgrade to latest from NSA 
Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.
 2007-04-17 12:35:30 +00:00
Daniel J Walsh 53a0908255 - Upgrade to latest from NSA 
Merged fix from Karl to remap booleans at expand time to avoid holes in the
    symbol table.
 2007-03-30 16:05:14 +00:00
Daniel J Walsh f50a75ee09 Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-1 
- Upgrade to latest from NSA
Merged libsepol segfault fix from Stephen Smalley for when sensitivities
    are required but not present in the base.
Merged patch to add errcodes.h to libsepol by Karl MacMillan.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
- Upgrade to latest from NSA
Updated version for stable branch.
 2007-03-28 18:55:21 +00:00
Daniel J Walsh 91512f93d1 - Upgrade to latest from NSA 
Merged libsepol segfault fix from Stephen Smalley for when sensitivities
    are required but not present in the base.
Merged patch to add errcodes.h to libsepol by Karl MacMillan.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
- Upgrade to latest from NSA
Updated version for stable branch.
 2007-02-07 17:18:00 +00:00
Daniel J Walsh 86fc00abee - Upgrade to latest from NSA 
Updated version for stable branch.
 2007-01-19 13:56:29 +00:00
Daniel J Walsh 7e8492d68d - Upgrade to latest from NSA 
Updated version for stable branch.
 2007-01-19 13:55:32 +00:00
Adam Jackson 57b6fc103f - Add dist tag and rebuild, fixes 6 to 7 upgrades. 2006-12-12 18:59:40 +00:00
Daniel J Walsh e5a8dba063 - Upgrade to latest from NSA 
Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to
    prevent hitting the global offest table limit. Patch changed to include
    libselinux and libsemanage in addition to libselinux.
 2006-11-28 14:28:05 +00:00
Daniel J Walsh a92b818305 - Upgrade to latest from NSA 
Merged fix from Karl MacMillan for a segfault when linking non-MLS modules
    with users in them.
 2006-11-01 15:06:55 +00:00
Daniel J Walsh a3a13a236e - Upgrade to latest from NSA 
Merged fix for version comparison that was preventing range transition
    rules from being written for a version 5 base policy from Darrel
    Goeddel.
 2006-10-24 16:51:25 +00:00
Daniel J Walsh 288632e7be - NSA Released version - Same as previous but changed release number 2006-10-17 16:50:19 +00:00
Daniel J Walsh 04bc0ce6f1 - Upgrade to latest from NSA 
Build libsepol's static object files with -fpic
 2006-10-17 15:57:37 +00:00
Daniel J Walsh dd59fb41a8 - Upgrade to latest from NSA 
Merged mls user and range_transition support in modules from Darrel Goeddel
 2006-09-28 15:03:27 +00:00
Daniel J Walsh d51bbdb93e - Upgrade to latest from NSA 
Merged range transition enhancements and user format changes Darrel Goeddel
 2006-09-06 16:00:04 +00:00
Daniel J Walsh 6a90efc69e - Fix location of include directory to devel package 2006-08-25 20:08:16 +00:00
Daniel J Walsh bfedd4e581 - Remove invalid Requires 2006-08-25 14:20:16 +00:00
Steve Grubb bfcdb6e3f6 Added a Requires tag to prevent breakage when people don't upgrade 
everything
 2006-08-24 22:30:08 +00:00
Daniel J Walsh 156e9314f0 - Upgrade to latest from NSA 
Merged conditionally expand neverallows patch from Jeremy Mowery.
Merged refactor expander patch from Jeremy Mowery.
 2006-08-24 18:11:15 +00:00
Daniel J Walsh f55a71fe00 - Upgrade to latest from NSA 
Merged libsepol unit tests from Joshua Brindle.
Merged symtab datum patch from Karl MacMillan.
Merged netfilter contexts support from Chris PeBenito.
 2006-08-03 20:26:10 +00:00
Daniel J Walsh 285dda519b - Upgrade to latest from NSA 
Merged symtab datum patch from Karl MacMillan.
Merged netfilter contexts support from Chris PeBenito.
 2006-08-03 15:23:51 +00:00
Daniel J Walsh ae2ff08973 - Upgrade to latest from NSA 
Merged helpful hierarchy check errors patch from Joshua Brindle.
Merged semodule_deps patch from Karl MacMillan. This adds source module
    names to the avrule decls.
 2006-08-01 14:07:40 +00:00
Jesse Keating 31fdd8d749 bumped for rebuild 2006-07-12 06:55:59 +00:00
Daniel J Walsh c4ad64e188 - Upgrade to latest from NSA 
Lindent.
Merged optionals in base take 2 patch set from Joshua Brindle.
 2006-07-05 02:24:55 +00:00
Bill Nottingham 79de5158e3 bump so it's newer than the FC5 version 2006-06-14 00:41:22 +00:00