Commit Graph

805 Commits

Author SHA1 Message Date
Dan Walsh 0bdae65be9 - Add seremote, to allow the execution of command inside the sandbox from outside the sandbox. 2010-09-14 17:35:00 -04:00
Dan Walsh cf96c73364 - Fix sandbox copyfile when copying a dir with a socket, print error 2010-09-13 11:42:53 -04:00
Dan Walsh 0f1eb5c333 - Fix bug preventing sandbox from using -l 2010-09-09 16:32:56 -04:00
Dan Walsh 680e7f371a - Eliminate quotes fro desktop files 2010-09-07 14:29:30 -04:00
Dan Walsh da69073802 - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
- Remove setsid on seunshare so ^c on sandbox will cause apps to exit
- Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
- Clean up error handling so error will get sent back to sandbox tool
2010-08-25 08:58:00 -04:00
Dan Walsh ae8fb9c2cb - Fix translation handling in file context page of system-config-selinux 2010-08-23 11:25:23 -04:00
Dan Walsh 8ceb5eceb9 - Fix sandbox error handling 2010-08-13 17:02:34 -04:00
Dan Walsh 27aa4ea173 * Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-7
- Update translations
2010-07-30 13:20:11 -04:00
Fedora Release Engineering eeec502624 dist-git conversion 2010-07-29 12:17:44 +00:00
Daniel J Walsh 3e8ecccde3 * Tue Jun 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-32
- Fix audit2allow type reporting
2010-06-21 14:12:58 +00:00
Daniel J Walsh 83ba7e08a0 * Tue Jun 15 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-31
- Fix sepolgen code generation
Resolve: #603001
2010-06-15 17:16:36 +00:00
Daniel J Walsh d28527ea65 * Mon Jun 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-29
- Allow creation of /var/cache/DOMAIN from sepolgen
2010-06-07 21:15:16 +00:00
Daniel J Walsh 288493882f * Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-28
- Fix sandbox init script
- Add dbus-launch to sandbox -X
Resolve: #599599
2010-06-03 21:14:52 +00:00
Daniel J Walsh 2777ec1690 * Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-27
- Move genhomedircon.8 to same package as genhomedircon
- Fix sandbox to pass unit test
Resolves: #595796
2010-06-03 15:05:44 +00:00
Daniel J Walsh 22b7be5824 * Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-27
- Move genhomedircon.8 to same package as genhomedircon
- Fix sandbox to pass unit test
Resolves: #595796
2010-06-03 15:05:42 +00:00
Daniel J Walsh 048b15b6ea * Wed Jun 2 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-26
- Fix listing of booleans from audit2allow
2010-06-02 15:48:41 +00:00
Daniel J Walsh 9cf7149c36 * Wed Jun 2 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-25
- Fix audit2allow to output if the current policy has avc
- Update translations
- Fix icon
2010-06-02 13:24:03 +00:00
Daniel J Walsh 1cd1e852d8 * Thu May 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-24
- Man page fixes
- sandbox fixes
Resolves: #595796
- Move seunshare to base package
2010-05-27 21:22:56 +00:00
Daniel J Walsh 1097da1cdb * Fri May 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-23
- Fix seunshare translations
- Fix seunshare to work on all arches
- Fix icon for system-config-selinux
2010-05-25 20:20:56 +00:00
Daniel J Walsh ea96d11661 * Fri May 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-22
- Fix can_exec definition in sepolgen
2010-05-21 14:39:49 +00:00
Daniel J Walsh d7683056ef * Wed May 19 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-20
- Fixes from upstream for sandbox command
2010-05-19 20:04:32 +00:00
Daniel J Walsh ea81388930 * Wed May 19 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-19
- Fixes from upstream for sandbox command
2010-05-19 18:57:34 +00:00
Daniel J Walsh 91e0a0ce0d * Thu May 13 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-18
- Fix sandbox error handling on copyfile
- Fix desktop files
2010-05-19 18:55:32 +00:00
Daniel J Walsh 164a05dfde * Wed May 19 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-19
- Fixes from upstream for sandbox command
2010-05-19 17:59:27 +00:00
Daniel J Walsh 09fe072042 * Thu May 13 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-18
- Fix sandbox error handling on copyfile
- Fix desktop files
2010-05-14 13:03:01 +00:00
Daniel J Walsh 5324213670 * Tue May 11 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-17
- Fix policy tool to have correct name in menus
- Fix seunshare to handle /tmp being in ~/home
Resolves: #589232
- Fix saving of altered files
Resolves: #580938
2010-05-11 20:28:00 +00:00
Daniel J Walsh c5e012d0ce * Tue May 11 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-16
- Fix policy tool to have correct name in menus
- Fix seunshare to handle /tmp being in ~/home
2010-05-11 19:53:42 +00:00
Daniel J Walsh a941635169 * Mon May 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-14
- Allow audit2allow to specify alternative policy file for analysis
- Update po
- Fix sepolgen --no_attrs
Resolves: #588280
2010-05-04 17:20:26 +00:00
Daniel J Walsh b813086803 * Thu Apr 29 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-13
- Make semanage boolean work on disabled machines and during livecd xguest
- Fix homedir and tmpdir handling in sandbox
Resolves: #587263
2010-04-30 14:50:24 +00:00
Daniel J Walsh 1577e6bdf7 * Thu Apr 29 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-12
- Make semanage boolean work on disabled machines and during livecd xguest
- Fix homedir and tmpdir handling in sandbox
Resolves: #587263
2010-04-29 17:35:00 +00:00
Daniel J Walsh 2aa0f1b516 * Wed Apr 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-11
- Make semanage boolean work on disabled machines
2010-04-28 21:57:24 +00:00
Daniel J Walsh 07e8306fc8 * Tue Apr 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-10
- Make sepolgen-ifgen be quiet
2010-04-27 14:11:17 +00:00
Daniel J Walsh 34a8ec78f7 * Tue Apr 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-9
- Make sepolgen-ifgen be quiet
2010-04-27 12:41:02 +00:00
Daniel J Walsh 5969a34153 * Tue Apr 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-9
- Make sepolgen-ifgen be quiet
2010-04-27 12:34:59 +00:00
Daniel J Walsh 5fd62ac9ce * Wed Apr 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-8
- Make sepolgen report on more interfaces
- Fix system-config-selinux display of modules
2010-04-23 16:50:25 +00:00
Daniel J Walsh 3036511cda * Thu Apr 15 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-7
- Fix crash when args are empty
Resolves: #582542
- Fix semange to exit on bad options
- Fix semanage dontaudit man page section
Resolves: #582533
2010-04-16 13:32:29 +00:00
Daniel J Walsh cb03303e2a * Wed Apr 14 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-6
- Remove debug line from semanage
- Update po
2010-04-14 13:02:56 +00:00
Daniel J Walsh e227d2c1df * Tue Apr 13 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-5
- Fix sandbox comment on HOMEDIRS
- Fix sandbox to throw error on bad executable
2010-04-13 18:13:00 +00:00
Daniel J Walsh e7ac5bf1c5 * Tue Apr 6 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-4
- Fix spacing in templates
2010-04-06 19:51:44 +00:00
Daniel J Walsh 4a46e3ba98 * Wed Mar 31 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-3
- Fix semanage return codes
2010-03-31 22:27:27 +00:00
Daniel J Walsh cf47f6f7a3 * Tue Mar 23 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-1
- Update to upstream
	* Add avc's since boot from Dan Walsh.
	* Fix unit tests from Dan Walsh.
2010-03-24 20:14:14 +00:00
Daniel J Walsh 54e7bdbbaa * Mon Mar 22 2010 Dan Walsh <dwalsh@redhat.com> 2.0.81-3
- Allow restorecon on > 2 Gig files
2010-03-22 18:33:08 +00:00
Daniel J Walsh 9f43bfd353 * Mon Mar 22 2010 Dan Walsh <dwalsh@redhat.com> 2.0.81-3
- Allow restorecon on > 2 Gig files
2010-03-22 18:13:06 +00:00
Daniel J Walsh d4df7a7906 * Mon Mar 22 2010 Dan Walsh <dwalsh@redhat.com> 2.0.81-3
- Allow restorecon on > 2 Gig files
2010-03-22 18:13:05 +00:00
Daniel J Walsh 7d684d3260 * Tue Mar 16 2010 Dan Walsh <dwalsh@redhat.com> 2.0.81-2
- Fix semanage handling of boolean options
- Update translations
2010-03-16 18:59:50 +00:00
Daniel J Walsh cc1f471500 * Tue Mar 16 2010 Dan Walsh <dwalsh@redhat.com> 2.0.81-2
- Fix semanage handling of boolean options
- Update translations
2010-03-16 18:18:01 +00:00
Daniel J Walsh fde59fdf8d * Thu Mar 11 2010 Dan Walsh <dwalsh@redhat.com> 2.0.80-2
- Use --rbind in sandbox init scripts
2010-03-11 22:16:29 +00:00
Daniel J Walsh fe2d2361bc * Thu Mar 11 2010 Dan Walsh <dwalsh@redhat.com> 2.0.80-2
- Use --rbind in sandbox init scripts
2010-03-11 22:06:43 +00:00
Daniel J Walsh b3de7f6587 * Mon Mar 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.80-1
- Update to upstream
	* Module enable/disable support from Dan Walsh.
2010-03-09 15:34:05 +00:00
Daniel J Walsh 1ff0435303 * Mon Mar 1 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-5
- Rewrite of sandbox script, add unit test for sandbox
- Update translations
2010-03-04 21:49:04 +00:00