Commit Graph

296 Commits

Author SHA1 Message Date
Petr Lautrbach
204211c106 Drop local tests 2018-02-23 12:49:19 +01:00
Serhii Turivny
986d1575d8 Add CI tests using the standard test interface
The following steps are used to execute the tests using the standard test interface:

Docker

    sudo ANSIBLE_INVENTORY=$(test -e inventory && echo inventory || echo /usr/share/ansible/inventory) TEST_SUBJECTS=docker:docker.io/library/fedora:26 TEST_ARTIFACTS=$PWD/artifacts ansible-playbook --tags container tests.yml

Classic

    sudo ANSIBLE_INVENTORY=$(test -e inventory && echo inventory || echo /usr/share/ansible/inventory) TEST_SUBJECTS="" TEST_ARTIFACTS=$PWD/artifacts ansible-playbook --tags classic tests.yml

https://src.fedoraproject.org/rpms/libsepol/pull-request/1
2018-02-23 12:49:19 +01:00
Petr Lautrbach
b002205687 libsepol-2.7-2.fc27
- free ibendport device names
- fix memory leak in sepol_bool_query()
- cil: drop wrong unused attribute
- cil: fix -Wwrite-strings warning
- cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
- use IN6ADDR_ANY_INIT to initialize IPv6 addresses
- cil: Keep attributes used by generated attributes in neverallow rules
- cil: Add ability to redeclare types[attributes]
- reset pointer after free in cil_strpool_destroy()
2017-12-14 10:01:36 +01:00
Petr Lautrbach
640cc38286 libsepol-2.7-1
- Update to upstream release 2017-08-04
2017-08-07 13:44:45 +02:00
Fedora Release Engineering
41f64ace3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 02:15:36 +00:00
Florian Weimer
e02987b8e3 Rebuild with binutils fix for ppc64le (#1475636) 2017-07-30 21:55:24 +02:00
Petr Lautrbach
259de5ea3b libsepol-2.6-3
- Fix neverallow bug when checking conditional policy
- Destroy the expanded level when mls_semantic_level_expand() fails
- Do not seg fault on sepol_*_key_free(NULL)
2017-07-28 14:02:33 +02:00
Fedora Release Engineering
175b09a804 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 19:42:12 +00:00
Petr Lautrbach
99653f4b76 libsepol-2.6-1
- Update to upstream release 2016-10-14
2017-02-20 12:27:15 +01:00
Fedora Release Engineering
6f37e10a79 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 19:26:32 +00:00
Petr Lautrbach
d162105aae libsepol-2.5-10
- Check for too many permissions in classes and commons in CIL
- Fix xperm mapping between avrule and avtab
- tests: Fix mispelling of optimization option
- Fix unused/uninitialized variables on mac build
- Produce more meaningful error messages for conflicting type rules in CIL
- make "make test" fail when a CUnit test fails
- tests: fix g_b_role_2 test
- Change which attributes CIL keeps in the binary policy
- Port str_read() from kernel and remove multiple occurances of similar code
- Use calloc instead of malloc for all the *_to_val_structs
- Fix bugs found by AFL
- Fix memory leak in expand.c
- Fix invalid read when policy file is corrupt
- Fix possible use of uninitialized variables
2016-10-04 08:17:24 +02:00
Petr Lautrbach
aac9abeb50 libsepol-2.5-9
- Warn instead of fail if permission is not resolved
- Ignore object_r when adding userrole mappings to policydb
2016-08-01 10:46:53 +02:00
Petr Lautrbach
5ec2ad1fb2 libsepol-2.5-8
- Add missing return to sepol_node_query()
- Add missing <stdarg.h> include
2016-07-14 10:36:41 +02:00
Petr Lautrbach
44e2d26a69 libsepol-2.5-7
- Correctly detect unknown classes in sepol_string_to_security_class
- Sort object files for deterministic linking order
- Fix neverallowxperm checking on attributes
- Remove libsepol.map when cleaning
- Add high-level language line marking support to CIL
2016-06-23 12:27:14 +02:00
Petr Lautrbach
0a1d1e58aa libsepol-2.5-6
- Change logic of bounds checking to match change in kernel
- Fix multiple spelling errors
2016-05-06 16:04:28 +02:00
Petr Lautrbach
d88ffa19a4 libsepol-2.5-5
- Only apply bounds checking to source types in rules
- Fix CIL and not add an attribute as a type in the attr_type_map
2016-05-02 07:52:38 +02:00
Petr Lautrbach
29e9ab01e1 Don't use -S git in autosetup as it requires git in a buildroot
Fixes:

+ '[' 0 -ne 0 ']'
+ cd libsepol-2.5
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/bin/git init -q
/var/tmp/rpm-tmp.yCRSdD: line 42: /usr/bin/git: No such file or directory
error: Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
    Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
2016-04-29 12:06:32 +02:00
Petr Lautrbach
71b1a80d94 libsepol-2.5-4
- Build policy on systems not supporting DCCP protocol
- Fix extended permissions neverallow checking
- Fix CIL neverallow and bounds checking
- Android.mk: Add -D_GNU_SOURCE to common_cflags
2016-04-29 11:49:05 +02:00
Petr Lautrbach
6bf5b06538 Use %autosetup to simplify updates 2016-04-29 11:47:41 +02:00
Petr Lautrbach
a7ec325b44 libsepol-2.5-3
- Fix bug in CIL when resetting classes
- Add support for portcon dccp protocol
2016-04-08 20:27:32 +02:00
Petr Lautrbach
154778f82c libsepol-2.5-2.fc24
- Use fully versioned arch-specific requires

https://fedoraproject.org/wiki/Packaging:Guidelines#Requiring_Base_Package
2016-02-28 11:29:04 +01:00
Petr Lautrbach
0861542f57 libsepol-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 21:31:12 +01:00
Petr Lautrbach
96ba36d4a0 Remove unused tmp.patch 2016-02-22 17:07:50 +01:00
Petr Lautrbach
3febb8cf9a libsepol-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 14:34:14 +01:00
Dennis Gilmore
a554107a85 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 03:54:18 +00:00
Petr Lautrbach
8b5abd72f1 Revert "Improve compatibility with Python 3 SWIG bindings"
The patch introduced new issues and memory leaks.

This reverts commit cb8eded90a.
2015-09-01 16:41:48 +02:00
Michal Srb
cb8eded90a Improve compatibility with Python 3 SWIG bindings
- Resolves: rhbz#1247714
2015-08-25 13:00:18 +02:00
Adam Jackson
cc880287e2 Pass ldflags to make so hardening works 2015-08-14 14:52:55 -04:00
Petr Lautrbach
5e480567c8 Update to upstream release 2.4 2015-07-20 17:41:51 +02:00
Petr Lautrbach
e4eba91d66 Drop unused libsepol-rhat.patch 2015-07-20 17:41:34 +02:00
Dennis Gilmore
658aaff9c8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 17:15:19 +00:00
Jaromir Capik
35b7bcbd4e Adding STAGE1 bootstrap recipe 2015-06-10 21:30:06 +02:00
Jaromir Capik
f4c39a3999 Merge branch 'f21' 2015-06-10 21:28:13 +02:00
Peter Robinson
44f2d57366 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:57:06 +00:00
Peter Robinson
0d1fcdd0f7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:56:54 +00:00
Tom Callaway
b84a7e51c3 fix license handling 2014-07-18 15:21:52 -04:00
Tom Callaway
2ec04ef185 fix license handling 2014-07-18 15:21:33 -04:00
Dennis Gilmore
be60b4fdd2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 00:24:46 -05:00
Dan Walsh
87d9d9b744 Update to upstream
* Improve error message for name-based transition conflicts.
	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
	* Report source file and line information for neverallow failures.
	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
	* Add sepol_validate_transition_reason_buffer function from Richard Haines.
2014-05-06 14:20:51 -04:00
Dan Walsh
4704b23dcb Update to upstream
* Improve error message for name-based transition conflicts.
	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
	* Report source file and line information for neverallow failures.
	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
	* Add sepol_validate_transition_reason_buffer function from Richard Haines.
2014-05-06 14:17:40 -04:00
Dan Walsh
ee7b363d01 Update to upstream
- Richard Haines patch V1 Allow constraint denials to be determined.
- Add separate role declarations as required by modern checkpolicy.
2013-10-31 09:19:31 -04:00
Dan Walsh
5c767f8d24 Update to upstream
- Richard Haines patch V1 Allow constraint denials to be determined.
- Add separate role declarations as required by modern checkpolicy.
2013-10-31 09:17:42 -04:00
Dennis Gilmore
e7d43c0ef0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-03 01:58:02 -05:00
Dan Walsh
8f8f3fb514 Update to upstream
* filename_trans: use some better sorting to compare and merge
	* coverity fixes
	* implement default type policy syntax
	* Fix memory leak issues found by Klocwork
- Add CONTRAINT_NAMES to the kernel
2013-02-07 12:24:09 -05:00
Dan Walsh
1a48e42dcf Update to latest patches from eparis/Upstream 2013-01-27 19:55:20 -05:00
Dan Walsh
d002148307 Update to latest patches from eparis/Upstream 2013-01-25 09:32:52 -05:00
Dan Walsh
6e6c78000d Update to latest patches from eparis/Upstream 2013-01-25 09:21:55 -05:00
Dan Walsh
5a38f90989 Fix libsepol.stack messages in audit2allow/audit2why 2013-01-08 13:35:56 -05:00
Dan Walsh
7a2ea3adf4 Fix libsepol.stack messages in audit2allow/audit2why 2013-01-08 13:30:18 -05:00
Dan Walsh
0df3b08ca9 Update to latest patches from eparis/Upstream 2013-01-04 17:17:25 -05:00