0385dda17f
Update sepolicy gui code, adding dbus calls
...
- Update Translations
2013-08-02 14:24:25 -04:00
0eb608c431
Fix semanage argparse bugs
...
- Update Translations
- Add test suite for semanage command lines
2013-07-26 12:20:20 -04:00
04c19314d5
Fix semanage argparse bugs
2013-07-24 11:46:08 -04:00
f8c8b42b7a
Fix semanage argparse bugs
2013-07-24 11:42:48 -04:00
d21896c450
Fix bugs introduced by previous patch. semanage port
...
- Update Translations
- Add test suite for sepolicy command lines
2013-07-23 16:59:48 -04:00
7fa44b7304
Fix bugs introduced by previous patch. semanage port
...
- Update Translations
2013-07-19 07:07:18 -04:00
27d056afb8
Don't generate shell script or spec file for sepolicy generate --newtype
...
- Update translations
- Fix sepolicy generate --admin_user man page again
- Fix setsebool to print less verbose error messages by default, add -V for ve
2013-07-16 11:53:03 -04:00
101341aa44
Update sepolicy gui.
2013-07-10 16:48:48 -04:00
2ab6b02e3c
Add Ryan Hallisey sepolicy gui.
...
- Update Translations
2013-06-28 12:50:17 -04:00
e396b39f10
Fix semanage module error handling
2013-06-24 17:32:33 -04:00
863699842d
Add back default exception handling for errors, which argparse rewrite removed.
2013-06-23 07:02:14 -04:00
56882a583a
Fix semanage export/import commands
...
- Fix semange module command
2013-06-19 10:52:59 -04:00
11643b3535
Fix semanage export/import commands
...
- Fix semange module command
2013-06-19 10:44:58 -04:00
82362e85ca
Add man page doc for --role and bash complestion support for sepolicy --role
2013-06-18 14:49:19 -04:00
544468684c
Make fcdict return a dictionary of dictionaries
...
- Fix for sepolicy manpage
2013-06-18 14:38:47 -04:00
4f89c533b5
Add new man pages for each semanage subsection
2013-06-17 16:59:42 -04:00
69da86fcf8
Add new man pages for each semanage subsection
2013-06-17 16:18:37 -04:00
305ae476dd
Fix handling of sepolicy network sorting.
...
- Additional interfaces needed for sepolicy gui
2013-06-17 13:35:55 -04:00
b8c1b26e16
Fix sepolicy generate --confined_admin to generate tunables
...
- Add new interface to generate entrypoints for use with new gui
2013-06-06 14:05:52 -04:00
4f084e9fcd
Fix audit2allow -o to open file for append
...
- Fix the name of the spec file generated in the build script
2013-06-04 10:53:51 -04:00
4254724cef
Fix the name of the spec file generated in the build script
...
- Add mgrepl patch to support argparse for semanage command parsing
2013-05-26 07:00:33 -04:00
6dcb7ec4af
Fix sandbox to always use sandbox_file_t, so generated policy will work.
...
- Update Translations
2013-05-21 10:23:46 -04:00
f5d4f8f0dd
Fix sandbox to always use sandbox_file_t, so generated policy will work.
...
- Update Translations
2013-05-21 09:41:29 -04:00
a956fd7105
Need to handle gziped policy.xml as well as not compressed.
2013-05-14 15:53:54 -04:00
68b643cce8
Add support for Xephyr -resizable, so sandbox can now resize window
...
- Add support for compressed policy.xml
- Miroslav Grepl patch to allow sepolicy interface on individual interface fil
- Also add capability to test interfaces for correctness.
2013-05-14 08:17:18 -04:00
5918716f29
Apply patches from Sven Vermeulen for sepolgen to fix typos.
2013-05-13 16:47:23 -04:00
d610eb1fd8
Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
...
- Add Sven Vermeulen patches to cleanup man pages
2013-05-12 06:06:28 -04:00
a941cc9a2c
No longer run sepolgen-ifgen at install time.
...
- Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
- Update Translations
2013-05-10 09:33:24 -04:00
6a213d1e94
Fix exceptionion hanling in audit2allow -o
...
- Generate Man pages for everydomain, not just ones with exec_t entrypoints
- sepolicy comunicate should return ValueError not TypeError
- Trim header line in sepolicy manpage to use less space
- Add missing options to restorecon man page
2013-05-07 10:50:38 -04:00
b4c5b4829d
Fix exceptionion hanling in audit2allow -o
...
- Generate Man pages for everydomain, not just ones with exec_t entrypoints
- sepolicy comunicate should return ValueError not TypeError
- Trim header line in sepolicy manpage to use less space
- Add missing options to restorecon man page
2013-04-22 10:03:47 -04:00
19201f72c6
Update translations
...
- Add patch by Miroslav Grepl to add compile test for sepolicy interface command.
2013-04-10 16:46:39 -04:00
6b0d365200
Update translations
...
- Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.
2013-04-09 11:35:08 -04:00
bbf6a880b6
Update translations
...
- Add missing man pages and fixup existing man pages
2013-04-08 15:13:24 -04:00
0dad6598dd
Update translations
...
- Add missing man pages and fixup existing man pages
2013-04-08 14:53:05 -04:00
d4ae6ccd66
Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
...
- Apply Miroslav Grepl Patches for sepolicy
2013-04-03 11:18:44 -04:00
3cc0cfcac3
Add post install scripts for gui to make sure Icon Cache is refreshed.
...
- Fix grammar issue in secon man page
- Update Translations
2013-04-01 10:45:06 -04:00
4084a6ea89
Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
...
- Add support for returning alias data to sepolicy.info python bindings
2013-03-28 13:40:55 -04:00
e9b167e78d
Fix audit2allow output to better align analysys with the allow rules
...
- Apply Miroslav Grepl patch to clean up sepolicy generate usage
- Apply Miroslav Grepl patch to fixupt handing of admin_user generation
- Update Tranlslations
2013-03-27 14:00:16 -04:00
8e3bfe0949
Allow semanage fcontext -a -t "<<none>>" ... to work
2013-03-27 11:20:46 -04:00
98c418def3
Can not unshare IPC in sandbox, since it blows up Xephyr
...
- Remove bogus error message sandbox about reseting setfsuid
2013-03-25 09:21:51 -04:00
8be0816a98
sepolicy manpage:
...
- use nroff instead of man2html
- Remove checking for name of person who created the man page
- audit2allow
- Fix output to show the level that is different.
2013-03-19 16:58:35 -04:00
3aca74a161
Have restorecon exit -1 on errors for consistancy.
2013-03-06 12:03:27 -05:00
b4e4f79ed5
Need to provide a value to semanage boolean -m
2013-03-05 11:20:07 -05:00
e5aaa46215
Fix cut and paste errors for sepolicy network command
2013-03-04 11:34:25 -05:00
fefce8f581
Fix sepoicy interface to work properly
2013-03-01 14:18:15 -05:00
10913b779d
Fix fixfiles to use exclude_dirs on fixfiles restore
2013-02-28 15:28:38 -05:00
4cc4167518
Allow users with symlinked homedirs to work. call realpath on homedir
...
- Fix sepolicy reorganization of helper functions.
2013-02-28 14:24:35 -05:00
8c07616121
Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package
2013-02-22 17:38:59 +01:00
c617c0cebf
sepolgen-ifgen should use the current policy path if selinux is enabled
2013-02-22 14:06:28 +01:00
21179e1822
Fix sepolicy to be able to work on an SELinux disabled system.
...
- Needed to be able to build man pages in selinux-policy package
2013-02-22 13:06:49 +01:00
92a9b8454b
Sepolixy should not throw an exception on an SELinux disabled machine
...
- Switch from using console app to using pkexec, so we will work better
with policykit.
- Add missing import to fix system-config-selinux startup
- Add comment to pamd files about pam_rootok.so
- Fix sepolicy generate to not comment out the first line
2013-02-21 18:26:12 +01:00
3234f310f1
Add --root/-r flag to sepolicy manpage,
...
- This allows us to generate man pages on the fly in the selinux-policy build
2013-02-20 16:48:51 +01:00
68cfa786ad
Fix newrole to retain cap_audit_write when compiled with namespace, also
...
do not drop capabilities when run as root.
2013-02-18 14:14:39 -05:00
5855410892
Fix man page generation and public_content description
2013-02-14 10:13:51 -05:00
9057b25d2b
Revert some changes which are causing the wrong policy version file to be created
...
- Switch sandbox to start using openbox rather then matchpbox
- Make sepolgen a symlink to sepolicy
- update translations
2013-02-14 08:28:08 -05:00
296f63cbc3
Fix empty system-config-selinux.png
2013-02-12 16:16:02 -05:00
0e639a9ea0
Update to upstream
2013-02-08 09:44:20 -05:00
205e3429b9
Reorginize sepolicy so all get_all functions are in main module
...
- Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.
2013-01-31 13:58:25 -05:00
14f88c192c
Update to latest patches from eparis/Upstream
...
- fixfiles onboot will write any flags handed to it to /.autorelabel.
- * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
- * This should allow fixfiles -F onboot, to force a hard relabel.
- Add -p to show progress on full relabel.
2013-01-28 09:29:48 -05:00
3aa7d3a916
Update to latest patches from eparis/Upstream
...
- fixfiles onboot will write any flags handed to it to /.autorelabel.
- * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
- * This should allow fixfiles -F onboot, to force a hard relabel.
- Add -p to show progress on full relabel.
2013-01-25 18:03:21 -05:00
eef44bd006
Additional changes for bash completsion and generate man page to match the w
...
- Add newtype as a new qualifier to sepolicy generate. This new mechanism wil
- a policy write to generate types after the initial policy has been written a
- will autogenerate all of the interfaces.
- I also added a -w options to allow policy writers from the command line to s
- the writable directories of files.
-
- Modify network.py to include interface definitions for newly created port type
- Standardize of te_types just like all of the other templates.
2013-01-21 13:37:48 -06:00
d6717e2cff
Update Translations
...
- Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
- This fixes the spec file and script file getting wrong names for modules and types.
2013-01-15 12:46:10 -05:00
c910a0cf10
Update Translations
...
- Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
- This fixes the spec file and script file getting wrong names for modules and types.
2013-01-15 12:19:10 -05:00
422fcbbd1a
Update with Miroslav patch to handle role attributes
...
- Update Translations
- import sepolicy will only throw exception on missing policy iff selinux is enabled
2013-01-09 08:37:32 -05:00
6be5fbacb4
Update to latest patches from eparis/Upstream
...
- secon: add support for setrans color information in prompt output
- Update translations
2013-01-05 11:25:32 -05:00
5a6000efc7
Update translations
...
- Fix sepolicy booleans to handle autogenerated booleans descriptions
- Cleanups of sepolicy manpage
- Fix crash on git_shell man page generation
2013-01-04 17:14:27 -05:00
c488be004d
Update translations
...
- update sepolicy manpage to generate fcontext equivalence data and to list
default file context paths.
- Add ability to generate policy for confined admins and domains like puppet.
2013-01-03 15:21:48 -05:00
a61d456504
Fix semanage permissive , this time with the patch.
...
- Update translations
2012-12-20 10:05:01 -05:00
c28ba657ed
Fix semanage permissive
...
- Change to use correct gtk forward button
- Update po
2012-12-19 15:31:43 -05:00
558e4d0e2d
sepolicy transition was blowing up. Also cleanup output when only source is specified.
...
- sepolicy generate should allow policy modules names that include - or _
2012-12-17 13:22:14 -05:00
2a0d3b9155
Apply patch from Miroslav to display proper range description in man pages g
...
- Should print warning on missing default label when run in recusive mode iff
- Remove extra -R description, and fix recursive description
2012-12-10 11:02:46 -05:00
ceff76e017
Additional fixes for disabled SELinux Box
...
- system-config-selinux no longer relies on lokkit for /etc/selinux/config
2012-12-06 14:57:17 -05:00
4933c11cf0
sepolicy should failover to installed policy file on a disabled SELinux box, if it exists.
2012-12-06 09:16:30 -05:00
91c5cd51d5
Update Translations
...
- sepolicy network -d needs to accept multiple domains
2012-12-05 15:17:23 -05:00
844afda5b6
Add --path as a parameter to sepolicy generate
...
- Print warning message if program does not exists when generating policy, and do not attempt to run nm command
- Fix sepolicy generate -T to not take an argument, and supress the help message
- Since this is really just a testing tool
2012-11-30 00:46:59 -05:00
ad24fe0d6f
Fix sepolicy communicate to handle invalid input
2012-11-30 00:01:24 -05:00
ee03d6c97d
Fix sepolicy network -p to handle high ports
2012-11-29 16:03:36 -05:00
de745c0321
Fix handling of manpages without entrypoints, nsswitch domains
...
- Update Translations
2012-11-29 15:50:47 -05:00
5ffa11c17a
Fix sepolicy/__init__.py to handle _()
2012-11-27 16:35:09 -05:00
c80e41cce5
Add Miroslav Grepl patch to create etc_rw_t sock files policy
2012-11-21 14:32:28 -05:00
77c01a631e
Fix semanage to work without policycoreutils-devel installed
...
- Update translations
2012-11-16 14:44:43 -05:00
3df9272539
Fix semanage to work without policycoreutils-devel installed
...
- Update translations
2012-11-16 12:02:59 -05:00
356d85e93c
Fix semanage login -l to list contents of /etc/selinux/POLICY/logins directory
2012-11-13 17:05:58 -05:00
dcda6e4336
Fix booleansPage not showing booleans
...
- Fix audit2allow -b
2012-11-13 10:30:48 -05:00
435b38a137
Fix sepolicy booleans again
...
- Fix man page
2012-11-13 07:05:08 -05:00
bd8b5a05a7
Move policy generation tools into policycoreutils-devel
2012-11-12 17:02:39 -05:00
442a7187fc
Document and fix sepolicy booleans
...
- Update Translations
- Fix several spelling mistakes
2012-11-12 15:27:22 -05:00
6dfb3b920c
Only report restorecon warning for missing default label, if not running
...
recusively
- Update translations
2012-11-07 10:49:52 -05:00
16444033da
Fix semanage booleans -l, move more boolean_dict handling into sepolicy
...
- Update translations
- Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
- Fix kill function call should indicate signal_perms not kill capability
- Error out cleanly in system-config-selinux, if it can not contact XServer
2012-11-06 06:12:01 -05:00
321b3f2caa
Update translations
...
- Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
- Fix kill function call should indicate signal_perms not kill capability
- Error out cleanly in system-config-selinux, if it can not contact XServer
2012-11-05 15:41:11 -05:00
ddeee18742
Remove run_init, no longer needed with systemd.
...
- Fix sepolicy generate to not include subdirs in generated fcontext file. (mgrepl patch)
2012-11-05 13:23:00 -05:00
cc08d7735b
Fix manpage to generate proper man pages for alternate policy,
...
basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
I pull the policy, policy.xml and file_contexts and file_contexts.homedir
2012-11-03 07:19:34 -04:00
1cc95772be
Fix some build problems in sepolicy manpage and sepolicy transition
2012-11-01 14:36:52 -04:00
d76fa39cad
Add alias man pages to sepolicy manpage
2012-10-30 16:40:08 -04:00
13f0c57022
Redesign sepolicy to only read the policy file once, not for every call
2012-10-29 13:48:36 -04:00
7d197203b0
Redesign sepolicy to only read the policy file once, not for every call
2012-10-29 12:38:36 -04:00
7e71323398
Fixes to sepolicy transition, allow it to list all transitions from a domain
2012-10-29 09:09:07 -04:00
43cb5fa238
Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network
2012-10-27 08:28:54 -04:00
70bff091fa
Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network
2012-10-27 07:48:31 -04:00
91f5677207
Allow sepolicy to specify the policy to generate content from
2012-10-26 14:44:32 -04:00
Dan Walsh