Commit Graph

15 Commits

Author SHA1 Message Date
Petr Lautrbach
355996f836 libsepol-2.7-3.fc28
- free ibendport device names
2017-11-22 11:05:27 +01:00
Petr Lautrbach
02871fc83d libsepol-2.7-2.fc28
- reset pointer after free in cil_strpool_destroy()
- cil: Add ability to redeclare types[attributes]
- cil: Keep attributes used by generated attributes in neverallow
ules
- use IN6ADDR_ANY_INIT to initialize IPv6 addresses
- fix memory leak in sepol_bool_query()
- cil: drop wrong unused attribute
- cil: fix -Wwrite-strings warning
- cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
2017-10-20 10:43:35 +02:00
Petr Lautrbach
640cc38286 libsepol-2.7-1
- Update to upstream release 2017-08-04
2017-08-07 13:44:45 +02:00
Petr Lautrbach
259de5ea3b libsepol-2.6-3
- Fix neverallow bug when checking conditional policy
- Destroy the expanded level when mls_semantic_level_expand() fails
- Do not seg fault on sepol_*_key_free(NULL)
2017-07-28 14:02:33 +02:00
Petr Lautrbach
99653f4b76 libsepol-2.6-1
- Update to upstream release 2016-10-14
2017-02-20 12:27:15 +01:00
Petr Lautrbach
d162105aae libsepol-2.5-10
- Check for too many permissions in classes and commons in CIL
- Fix xperm mapping between avrule and avtab
- tests: Fix mispelling of optimization option
- Fix unused/uninitialized variables on mac build
- Produce more meaningful error messages for conflicting type rules in CIL
- make "make test" fail when a CUnit test fails
- tests: fix g_b_role_2 test
- Change which attributes CIL keeps in the binary policy
- Port str_read() from kernel and remove multiple occurances of similar code
- Use calloc instead of malloc for all the *_to_val_structs
- Fix bugs found by AFL
- Fix memory leak in expand.c
- Fix invalid read when policy file is corrupt
- Fix possible use of uninitialized variables
2016-10-04 08:17:24 +02:00
Petr Lautrbach
aac9abeb50 libsepol-2.5-9
- Warn instead of fail if permission is not resolved
- Ignore object_r when adding userrole mappings to policydb
2016-08-01 10:46:53 +02:00
Petr Lautrbach
5ec2ad1fb2 libsepol-2.5-8
- Add missing return to sepol_node_query()
- Add missing <stdarg.h> include
2016-07-14 10:36:41 +02:00
Petr Lautrbach
44e2d26a69 libsepol-2.5-7
- Correctly detect unknown classes in sepol_string_to_security_class
- Sort object files for deterministic linking order
- Fix neverallowxperm checking on attributes
- Remove libsepol.map when cleaning
- Add high-level language line marking support to CIL
2016-06-23 12:27:14 +02:00
Petr Lautrbach
0a1d1e58aa libsepol-2.5-6
- Change logic of bounds checking to match change in kernel
- Fix multiple spelling errors
2016-05-06 16:04:28 +02:00
Petr Lautrbach
d88ffa19a4 libsepol-2.5-5
- Only apply bounds checking to source types in rules
- Fix CIL and not add an attribute as a type in the attr_type_map
2016-05-02 07:52:38 +02:00
Petr Lautrbach
71b1a80d94 libsepol-2.5-4
- Build policy on systems not supporting DCCP protocol
- Fix extended permissions neverallow checking
- Fix CIL neverallow and bounds checking
- Android.mk: Add -D_GNU_SOURCE to common_cflags
2016-04-29 11:49:05 +02:00
Petr Lautrbach
a7ec325b44 libsepol-2.5-3
- Fix bug in CIL when resetting classes
- Add support for portcon dccp protocol
2016-04-08 20:27:32 +02:00
Petr Lautrbach
0861542f57 libsepol-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 21:31:12 +01:00
Petr Lautrbach
3febb8cf9a libsepol-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 14:34:14 +01:00