Compare commits
No commits in common. "rawhide" and "setools-3_3_2-1_fc9" have entirely different histories.
rawhide
...
setools-3_
1
.cvsignore
Normal file
1
.cvsignore
Normal file
@ -0,0 +1 @@
|
|||||||
|
setools-3.3.2.tar.gz
|
14
.gitignore
vendored
14
.gitignore
vendored
@ -1,14 +0,0 @@
|
|||||||
setools-3.3.7.tar.bz2
|
|
||||||
setools-3.3.8.tar.bz2
|
|
||||||
setools-3.3.8-f1e5b20.tar.bz2
|
|
||||||
/4.1.0.tar.gz
|
|
||||||
/4.1.1.tar.gz
|
|
||||||
/4.2.0-beta.tar.gz
|
|
||||||
/4.2.0-rc.tar.gz
|
|
||||||
/4.2.0.tar.gz
|
|
||||||
/4.2.1.tar.gz
|
|
||||||
/4.2.2.tar.gz
|
|
||||||
/4.3.0.tar.gz
|
|
||||||
/05e90ee.tar.gz
|
|
||||||
/16c0696.tar.gz
|
|
||||||
/4.4.0.tar.gz
|
|
@ -1,90 +0,0 @@
|
|||||||
From 8ed316d6bfb65e5e9b57f3761ea8490022ab3a05 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
Date: Thu, 18 Nov 2021 13:59:08 +0100
|
|
||||||
Subject: [PATCH] Make seinfo output predictable
|
|
||||||
|
|
||||||
There are few places where frozenset is used. Given that frozenset is an unordered
|
|
||||||
collection the output generated from this is unpredictable.
|
|
||||||
|
|
||||||
The following command outputs are fixed using sorted() on frozensets:
|
|
||||||
|
|
||||||
seinfo --constrain
|
|
||||||
seinfo --common
|
|
||||||
seinfo -c -x
|
|
||||||
seinfo -r -x
|
|
||||||
seinfo -u -x
|
|
||||||
|
|
||||||
Fixes: https://github.com/SELinuxProject/setools/issues/65
|
|
||||||
|
|
||||||
Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
---
|
|
||||||
setools/policyrep/constraint.pxi | 2 +-
|
|
||||||
setools/policyrep/objclass.pxi | 4 ++--
|
|
||||||
setools/policyrep/role.pxi | 2 +-
|
|
||||||
setools/policyrep/user.pxi | 2 +-
|
|
||||||
4 files changed, 5 insertions(+), 5 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/setools/policyrep/constraint.pxi b/setools/policyrep/constraint.pxi
|
|
||||||
index 01c63d87425b..0b4c5b9bcf6a 100644
|
|
||||||
--- a/setools/policyrep/constraint.pxi
|
|
||||||
+++ b/setools/policyrep/constraint.pxi
|
|
||||||
@@ -72,7 +72,7 @@ cdef class Constraint(BaseConstraint):
|
|
||||||
|
|
||||||
def statement(self):
|
|
||||||
if len(self.perms) > 1:
|
|
||||||
- perms = "{{ {0} }}".format(' '.join(self.perms))
|
|
||||||
+ perms = "{{ {0} }}".format(' '.join(sorted(self.perms)))
|
|
||||||
else:
|
|
||||||
# convert to list since sets cannot be indexed
|
|
||||||
perms = list(self.perms)[0]
|
|
||||||
diff --git a/setools/policyrep/objclass.pxi b/setools/policyrep/objclass.pxi
|
|
||||||
index b7ec7b7de5c3..8ed2be5a9bed 100644
|
|
||||||
--- a/setools/policyrep/objclass.pxi
|
|
||||||
+++ b/setools/policyrep/objclass.pxi
|
|
||||||
@@ -75,7 +75,7 @@ cdef class Common(PolicySymbol):
|
|
||||||
return other in self.perms
|
|
||||||
|
|
||||||
def statement(self):
|
|
||||||
- return "common {0}\n{{\n\t{1}\n}}".format(self, '\n\t'.join(self.perms))
|
|
||||||
+ return "common {0}\n{{\n\t{1}\n}}".format(self, '\n\t'.join(sorted(self.perms)))
|
|
||||||
|
|
||||||
|
|
||||||
cdef class ObjClass(PolicySymbol):
|
|
||||||
@@ -204,7 +204,7 @@ cdef class ObjClass(PolicySymbol):
|
|
||||||
|
|
||||||
# a class that inherits may not have additional permissions
|
|
||||||
if len(self.perms) > 0:
|
|
||||||
- stmt += "{{\n\t{0}\n}}".format('\n\t'.join(self.perms))
|
|
||||||
+ stmt += "{{\n\t{0}\n}}".format('\n\t'.join(sorted(self.perms)))
|
|
||||||
|
|
||||||
return stmt
|
|
||||||
|
|
||||||
diff --git a/setools/policyrep/role.pxi b/setools/policyrep/role.pxi
|
|
||||||
index 9a0dd39f27d9..3af8a3f72a1f 100644
|
|
||||||
--- a/setools/policyrep/role.pxi
|
|
||||||
+++ b/setools/policyrep/role.pxi
|
|
||||||
@@ -58,7 +58,7 @@ cdef class Role(PolicySymbol):
|
|
||||||
if count == 1:
|
|
||||||
stmt += " types {0}".format(types[0])
|
|
||||||
else:
|
|
||||||
- stmt += " types {{ {0} }}".format(' '.join(types))
|
|
||||||
+ stmt += " types {{ {0} }}".format(' '.join(sorted(types)))
|
|
||||||
|
|
||||||
stmt += ";"
|
|
||||||
return stmt
|
|
||||||
diff --git a/setools/policyrep/user.pxi b/setools/policyrep/user.pxi
|
|
||||||
index 9c82aa92eb72..e37af2939820 100644
|
|
||||||
--- a/setools/policyrep/user.pxi
|
|
||||||
+++ b/setools/policyrep/user.pxi
|
|
||||||
@@ -81,7 +81,7 @@ cdef class User(PolicySymbol):
|
|
||||||
if count == 1:
|
|
||||||
stmt += roles[0]
|
|
||||||
else:
|
|
||||||
- stmt += "{{ {0} }}".format(' '.join(roles))
|
|
||||||
+ stmt += "{{ {0} }}".format(' '.join(sorted(roles)))
|
|
||||||
|
|
||||||
if self._level:
|
|
||||||
stmt += " level {0.mls_level} range {0.mls_range};".format(self)
|
|
||||||
--
|
|
||||||
2.33.1
|
|
||||||
|
|
@ -1,142 +0,0 @@
|
|||||||
From e47d19f4985098ca316eea4a383510d419ec6055 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Vit Mojzis <vmojzis@redhat.com>
|
|
||||||
Date: Fri, 26 Apr 2019 15:27:25 +0200
|
|
||||||
Subject: [PATCH 1/2] Do not export/use setools.InfoFlowAnalysis and
|
|
||||||
setools.DomainTransitionAnalysis
|
|
||||||
|
|
||||||
dta and infoflow modules require networkx which brings lot of dependencies.
|
|
||||||
These dependencies are not necessary for setools module itself as it's
|
|
||||||
used in policycoreutils.
|
|
||||||
|
|
||||||
Therefore it's better to use setools.infoflow.InfoFlowAnalysis and
|
|
||||||
setools.dta.DomainTransitionAnalysis and let the package containing
|
|
||||||
sedta and seinfoflow to require python3-networkx
|
|
||||||
---
|
|
||||||
sedta | 5 +++--
|
|
||||||
seinfoflow | 4 ++--
|
|
||||||
setools/__init__.py | 4 ----
|
|
||||||
setoolsgui/apol/dta.py | 2 +-
|
|
||||||
setoolsgui/apol/infoflow.py | 2 +-
|
|
||||||
tests/dta.py | 2 +-
|
|
||||||
tests/infoflow.py | 2 +-
|
|
||||||
7 files changed, 9 insertions(+), 12 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/sedta b/sedta
|
|
||||||
index 57070098fe10..51890ea8ea73 100755
|
|
||||||
--- a/sedta
|
|
||||||
+++ b/sedta
|
|
||||||
@@ -23,9 +23,10 @@ import logging
|
|
||||||
import signal
|
|
||||||
|
|
||||||
import setools
|
|
||||||
+import setools.dta
|
|
||||||
|
|
||||||
|
|
||||||
-def print_transition(trans: setools.DomainTransition) -> None:
|
|
||||||
+def print_transition(trans: setools.dta.DomainTransition) -> None:
|
|
||||||
if trans.transition:
|
|
||||||
print("Domain transition rule(s):")
|
|
||||||
for t in trans.transition:
|
|
||||||
@@ -114,7 +115,7 @@ else:
|
|
||||||
|
|
||||||
try:
|
|
||||||
p = setools.SELinuxPolicy(args.policy)
|
|
||||||
- g = setools.DomainTransitionAnalysis(p, reverse=args.reverse, exclude=args.exclude)
|
|
||||||
+ g = setools.dta.DomainTransitionAnalysis(p, reverse=args.reverse, exclude=args.exclude)
|
|
||||||
|
|
||||||
if args.shortest_path or args.all_paths:
|
|
||||||
if args.shortest_path:
|
|
||||||
diff --git a/seinfoflow b/seinfoflow
|
|
||||||
index 0ddcfdc7c1fb..8321718b2640 100755
|
|
||||||
--- a/seinfoflow
|
|
||||||
+++ b/seinfoflow
|
|
||||||
@@ -17,7 +17,7 @@
|
|
||||||
# along with SETools. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
#
|
|
||||||
|
|
||||||
-import setools
|
|
||||||
+import setools.infoflow
|
|
||||||
import argparse
|
|
||||||
import sys
|
|
||||||
import logging
|
|
||||||
@@ -102,7 +102,7 @@ elif args.booleans is not None:
|
|
||||||
try:
|
|
||||||
p = setools.SELinuxPolicy(args.policy)
|
|
||||||
m = setools.PermissionMap(args.map)
|
|
||||||
- g = setools.InfoFlowAnalysis(p, m, min_weight=args.min_weight, exclude=args.exclude,
|
|
||||||
+ g = setools.infoflow.InfoFlowAnalysis(p, m, min_weight=args.min_weight, exclude=args.exclude,
|
|
||||||
booleans=booleans)
|
|
||||||
|
|
||||||
if args.shortest_path or args.all_paths:
|
|
||||||
diff --git a/setools/__init__.py b/setools/__init__.py
|
|
||||||
index d72d343e7e79..642485b9018d 100644
|
|
||||||
--- a/setools/__init__.py
|
|
||||||
+++ b/setools/__init__.py
|
|
||||||
@@ -91,12 +91,8 @@ from .pcideviceconquery import PcideviceconQuery
|
|
||||||
from .devicetreeconquery import DevicetreeconQuery
|
|
||||||
|
|
||||||
# Information Flow Analysis
|
|
||||||
-from .infoflow import InfoFlowAnalysis
|
|
||||||
from .permmap import PermissionMap, RuleWeight, Mapping
|
|
||||||
|
|
||||||
-# Domain Transition Analysis
|
|
||||||
-from .dta import DomainTransitionAnalysis, DomainEntrypoint, DomainTransition
|
|
||||||
-
|
|
||||||
# Policy difference
|
|
||||||
from .diff import PolicyDifference
|
|
||||||
|
|
||||||
diff --git a/setoolsgui/apol/dta.py b/setoolsgui/apol/dta.py
|
|
||||||
index 62dbf04d9a5e..0ea000e790f0 100644
|
|
||||||
--- a/setoolsgui/apol/dta.py
|
|
||||||
+++ b/setoolsgui/apol/dta.py
|
|
||||||
@@ -24,7 +24,7 @@ from PyQt5.QtCore import pyqtSignal, Qt, QStringListModel, QThread
|
|
||||||
from PyQt5.QtGui import QPalette, QTextCursor
|
|
||||||
from PyQt5.QtWidgets import QCompleter, QHeaderView, QMessageBox, QProgressDialog, \
|
|
||||||
QTreeWidgetItem
|
|
||||||
-from setools import DomainTransitionAnalysis
|
|
||||||
+from setools.dta import DomainTransitionAnalysis
|
|
||||||
|
|
||||||
from ..logtosignal import LogHandlerToSignal
|
|
||||||
from .analysistab import AnalysisSection, AnalysisTab
|
|
||||||
diff --git a/setoolsgui/apol/infoflow.py b/setoolsgui/apol/infoflow.py
|
|
||||||
index 28009aa2329c..92d350bf727c 100644
|
|
||||||
--- a/setoolsgui/apol/infoflow.py
|
|
||||||
+++ b/setoolsgui/apol/infoflow.py
|
|
||||||
@@ -26,7 +26,7 @@ from PyQt5.QtCore import pyqtSignal, Qt, QStringListModel, QThread
|
|
||||||
from PyQt5.QtGui import QPalette, QTextCursor
|
|
||||||
from PyQt5.QtWidgets import QCompleter, QHeaderView, QMessageBox, QProgressDialog, \
|
|
||||||
QTreeWidgetItem
|
|
||||||
-from setools import InfoFlowAnalysis
|
|
||||||
+from setools.infoflow import InfoFlowAnalysis
|
|
||||||
from setools.exception import UnmappedClass, UnmappedPermission
|
|
||||||
|
|
||||||
from ..logtosignal import LogHandlerToSignal
|
|
||||||
diff --git a/tests/dta.py b/tests/dta.py
|
|
||||||
index a0cc9381469c..177e6fb0b961 100644
|
|
||||||
--- a/tests/dta.py
|
|
||||||
+++ b/tests/dta.py
|
|
||||||
@@ -18,7 +18,7 @@
|
|
||||||
import os
|
|
||||||
import unittest
|
|
||||||
|
|
||||||
-from setools import DomainTransitionAnalysis
|
|
||||||
+from setools.dta import DomainTransitionAnalysis
|
|
||||||
from setools import TERuletype as TERT
|
|
||||||
from setools.exception import InvalidType
|
|
||||||
from setools.policyrep import Type
|
|
||||||
diff --git a/tests/infoflow.py b/tests/infoflow.py
|
|
||||||
index aa0e44a7e4f8..fca2848aeca5 100644
|
|
||||||
--- a/tests/infoflow.py
|
|
||||||
+++ b/tests/infoflow.py
|
|
||||||
@@ -18,7 +18,7 @@
|
|
||||||
import os
|
|
||||||
import unittest
|
|
||||||
|
|
||||||
-from setools import InfoFlowAnalysis
|
|
||||||
+from setools.infoflow import InfoFlowAnalysis
|
|
||||||
from setools import TERuletype as TERT
|
|
||||||
from setools.exception import InvalidType
|
|
||||||
from setools.permmap import PermissionMap
|
|
||||||
--
|
|
||||||
2.30.0
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
|||||||
From 7b73bdeda54b9c944774452bfa3b3c1f2733b3f0 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
Date: Thu, 2 Apr 2020 16:06:14 +0200
|
|
||||||
Subject: [PATCH 2/2] Require networkx on package level
|
|
||||||
|
|
||||||
It allows us to ship python3-setools without dependency on python3-networkx
|
|
||||||
---
|
|
||||||
setup.py | 2 +-
|
|
||||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/setup.py b/setup.py
|
|
||||||
index c593b786cc61..0551811e3fd1 100644
|
|
||||||
--- a/setup.py
|
|
||||||
+++ b/setup.py
|
|
||||||
@@ -163,5 +163,5 @@ setup(name='setools',
|
|
||||||
# setup also requires libsepol and libselinux
|
|
||||||
# C libraries and headers to compile.
|
|
||||||
setup_requires=['setuptools', 'Cython>=0.27'],
|
|
||||||
- install_requires=['setuptools', 'networkx>=2.0']
|
|
||||||
+ install_requires=['setuptools']
|
|
||||||
)
|
|
||||||
--
|
|
||||||
2.30.0
|
|
||||||
|
|
21
Makefile
Normal file
21
Makefile
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
# Makefile for source rpm: setools
|
||||||
|
# $Id: Makefile,v 1.1 2004/09/09 12:15:27 cvsdist Exp $
|
||||||
|
NAME := setools
|
||||||
|
SPECFILE = $(firstword $(wildcard *.spec))
|
||||||
|
|
||||||
|
define find-makefile-common
|
||||||
|
for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
|
||||||
|
endef
|
||||||
|
|
||||||
|
MAKEFILE_COMMON := $(shell $(find-makefile-common))
|
||||||
|
|
||||||
|
ifeq ($(MAKEFILE_COMMON),)
|
||||||
|
# attempt a checkout
|
||||||
|
define checkout-makefile-common
|
||||||
|
test -f CVS/Root && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2
|
||||||
|
endef
|
||||||
|
|
||||||
|
MAKEFILE_COMMON := $(shell $(checkout-makefile-common))
|
||||||
|
endif
|
||||||
|
|
||||||
|
include $(MAKEFILE_COMMON)
|
@ -2,10 +2,11 @@
|
|||||||
Name=SELinux Policy Analysis
|
Name=SELinux Policy Analysis
|
||||||
GenericName=SELinux Policy Analysis Tool
|
GenericName=SELinux Policy Analysis Tool
|
||||||
Comment=This tool can examine, search, and relate policy components and policy rules
|
Comment=This tool can examine, search, and relate policy components and policy rules
|
||||||
Icon=apol
|
Icon=apol.png
|
||||||
Exec=/usr/bin/apol
|
Exec=/usr/bin/apol
|
||||||
Type=Application
|
Type=Application
|
||||||
Terminal=false
|
Terminal=false
|
||||||
|
Encoding=UTF-8
|
||||||
Categories=System;
|
Categories=System;
|
||||||
X-Desktop-File-Install-Version=0.2
|
X-Desktop-File-Install-Version=0.2
|
||||||
StartupNotify=true
|
StartupNotify=true
|
||||||
|
16
gating.yaml
16
gating.yaml
@ -1,16 +0,0 @@
|
|||||||
--- !Policy
|
|
||||||
product_versions:
|
|
||||||
- fedora-*
|
|
||||||
decision_context: bodhi_update_push_testing
|
|
||||||
subject_type: koji_build
|
|
||||||
rules:
|
|
||||||
- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
|
|
||||||
|
|
||||||
--- !Policy
|
|
||||||
product_versions:
|
|
||||||
- fedora-*
|
|
||||||
decision_context: bodhi_update_push_stable
|
|
||||||
subject_type: koji_build
|
|
||||||
rules:
|
|
||||||
- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
|||||||
emptyrpm:
|
|
||||||
expected_empty:
|
|
||||||
- setools
|
|
@ -6,6 +6,7 @@ Icon=seaudit.png
|
|||||||
Exec=/usr/bin/seaudit
|
Exec=/usr/bin/seaudit
|
||||||
Type=Application
|
Type=Application
|
||||||
Terminal=false
|
Terminal=false
|
||||||
|
Encoding=UTF-8
|
||||||
Categories=System;
|
Categories=System;
|
||||||
X-Desktop-File-Install-Version=0.2
|
X-Desktop-File-Install-Version=0.2
|
||||||
StartupNotify=true
|
StartupNotify=true
|
||||||
|
@ -5,6 +5,7 @@ Comment=This tool allows you to compare two policy files
|
|||||||
Exec=/usr/bin/sediffx
|
Exec=/usr/bin/sediffx
|
||||||
Type=Application
|
Type=Application
|
||||||
Terminal=false
|
Terminal=false
|
||||||
|
Encoding=UTF-8
|
||||||
Categories=System;
|
Categories=System;
|
||||||
X-Desktop-File-Install-Version=0.2
|
X-Desktop-File-Install-Version=0.2
|
||||||
StartupNotify=true
|
StartupNotify=true
|
||||||
|
121
setools-rhat.patch
Normal file
121
setools-rhat.patch
Normal file
@ -0,0 +1,121 @@
|
|||||||
|
--- setools-3.1/packages/Makefile.am.rhat 2007-02-06 15:43:29.000000000 -0500
|
||||||
|
+++ setools-3.1/packages/Makefile.am 2007-02-15 11:20:09.000000000 -0500
|
||||||
|
@@ -8,7 +8,7 @@
|
||||||
|
tar jxf BWidget-1.8.0.tar.bz2
|
||||||
|
test -z "$(bwidget_destdir)" || $(mkdir_p) "$(bwidget_destdir)"
|
||||||
|
cd BWidget-1.8.0 && find . -type d -exec $(mkdir_p) "$(bwidget_destdir)/{}" \;
|
||||||
|
- cd BWidget-1.8.0 && find . -type f -exec $(INSTALL_DATA) '{}' $(bwidget_destdir) \;
|
||||||
|
+ cd BWidget-1.8.0 && find . -type f -exec $(INSTALL_DATA) '{}' $(bwidget_destdir)/'{}'\;
|
||||||
|
|
||||||
|
uninstall-local:
|
||||||
|
-rm -rf $(bwidget_destdir)/BWidget-1.8.0
|
||||||
|
--- setools-3.1/packages/Makefile.in.rhat 2007-02-15 11:21:11.000000000 -0500
|
||||||
|
+++ setools-3.1/packages/Makefile.in 2007-02-15 11:21:24.000000000 -0500
|
||||||
|
@@ -381,7 +381,7 @@
|
||||||
|
tar jxf BWidget-1.8.0.tar.bz2
|
||||||
|
test -z "$(bwidget_destdir)" || $(mkdir_p) "$(bwidget_destdir)"
|
||||||
|
cd BWidget-1.8.0 && find . -type d -exec $(mkdir_p) "$(bwidget_destdir)/{}" \;
|
||||||
|
- cd BWidget-1.8.0 && find . -type f -exec $(INSTALL_DATA) '{}' $(bwidget_destdir) \;
|
||||||
|
+ cd BWidget-1.8.0 && find . -type f -exec $(INSTALL_DATA) '{}' $(bwidget_destdir)/'{}' \;
|
||||||
|
|
||||||
|
uninstall-local:
|
||||||
|
-rm -rf $(bwidget_destdir)/BWidget-1.8.0
|
||||||
|
--- setools-3.1/libqpol/src/policy_parse.y.rhat 2007-02-06 15:43:26.000000000 -0500
|
||||||
|
+++ setools-3.1/libqpol/src/policy_parse.y 2007-02-15 11:19:06.000000000 -0500
|
||||||
|
@@ -1098,11 +1098,11 @@
|
||||||
|
ret = hashtab_insert(policydbp->p_commons.table,
|
||||||
|
(hashtab_key_t) id, (hashtab_datum_t) comdatum);
|
||||||
|
|
||||||
|
- if (ret == HASHTAB_PRESENT) {
|
||||||
|
+ if (ret == SEPOL_EEXIST) {
|
||||||
|
yyerror("duplicate common definition");
|
||||||
|
goto bad;
|
||||||
|
}
|
||||||
|
- if (ret == HASHTAB_OVERFLOW) {
|
||||||
|
+ if (ret == SEPOL_ENOMEM) {
|
||||||
|
yyerror("hash table overflow");
|
||||||
|
goto bad;
|
||||||
|
}
|
||||||
|
@@ -1130,14 +1130,14 @@
|
||||||
|
(hashtab_key_t) perm,
|
||||||
|
(hashtab_datum_t) perdatum);
|
||||||
|
|
||||||
|
- if (ret == HASHTAB_PRESENT) {
|
||||||
|
+ if (ret == SEPOL_EEXIST) {
|
||||||
|
sprintf(errormsg,
|
||||||
|
"duplicate permission %s in common %s", perm,
|
||||||
|
id);
|
||||||
|
yyerror(errormsg);
|
||||||
|
goto bad_perm;
|
||||||
|
}
|
||||||
|
- if (ret == HASHTAB_OVERFLOW) {
|
||||||
|
+ if (ret == SEPOL_ENOMEM) {
|
||||||
|
yyerror("hash table overflow");
|
||||||
|
goto bad_perm;
|
||||||
|
}
|
||||||
|
@@ -1259,12 +1259,12 @@
|
||||||
|
(hashtab_key_t) id,
|
||||||
|
(hashtab_datum_t) perdatum);
|
||||||
|
|
||||||
|
- if (ret == HASHTAB_PRESENT) {
|
||||||
|
+ if (ret == SEPOL_EEXIST) {
|
||||||
|
sprintf(errormsg, "duplicate permission %s", id);
|
||||||
|
yyerror(errormsg);
|
||||||
|
goto bad;
|
||||||
|
}
|
||||||
|
- if (ret == HASHTAB_OVERFLOW) {
|
||||||
|
+ if (ret == SEPOL_ENOMEM) {
|
||||||
|
yyerror("hash table overflow");
|
||||||
|
goto bad;
|
||||||
|
}
|
||||||
|
--- setools-3.1/libqpol/src/policy_extend.c.rhat 2007-02-07 14:16:52.000000000 -0500
|
||||||
|
+++ setools-3.1/libqpol/src/policy_extend.c 2007-02-15 11:19:06.000000000 -0500
|
||||||
|
@@ -167,7 +167,7 @@
|
||||||
|
|
||||||
|
retv = hashtab_insert(db->p_types.table, (hashtab_key_t) tmp_name, (hashtab_datum_t) tmp_type);
|
||||||
|
if (retv) {
|
||||||
|
- if (retv == HASHTAB_OVERFLOW)
|
||||||
|
+ if (retv == SEPOL_ENOMEM)
|
||||||
|
error = db->p_types.table ? ENOMEM : EINVAL;
|
||||||
|
else
|
||||||
|
error = EEXIST;
|
||||||
|
@@ -243,7 +243,7 @@
|
||||||
|
|
||||||
|
retv = hashtab_insert(db->p_types.table, (hashtab_key_t) tmp_name, (hashtab_datum_t) tmp_type);
|
||||||
|
if (retv) {
|
||||||
|
- if (retv == HASHTAB_OVERFLOW)
|
||||||
|
+ if (retv == SEPOL_ENOMEM)
|
||||||
|
error = db->p_types.table ? ENOMEM : EINVAL;
|
||||||
|
else
|
||||||
|
error = EEXIST;
|
||||||
|
--- setools-3.1/configure.ac.rhat 2007-02-07 10:48:44.000000000 -0500
|
||||||
|
+++ setools-3.1/configure.ac 2007-02-15 11:19:06.000000000 -0500
|
||||||
|
@@ -20,7 +20,7 @@
|
||||||
|
libseaudit_version=4.0.0
|
||||||
|
libseaudit_soname=libseaudit.so.4
|
||||||
|
|
||||||
|
-setoolsdir='${prefix}/share/setools-3.1'
|
||||||
|
+setoolsdir='${prefix}/share/setools'
|
||||||
|
|
||||||
|
version_min_sepol_major=1
|
||||||
|
version_min_sepol_minor=12
|
||||||
|
@@ -88,6 +88,7 @@
|
||||||
|
fi
|
||||||
|
AC_MSG_RESULT(disabled)
|
||||||
|
fi
|
||||||
|
+AC_SUBST(YFLAGS)
|
||||||
|
AC_SUBST(DEBUGCFLAGS)
|
||||||
|
AC_SUBST(DEBUGLDFLAGS)
|
||||||
|
QPOL_CFLAGS='-I$(top_srcdir)/libqpol/include'
|
||||||
|
@@ -227,7 +228,10 @@
|
||||||
|
AC_SUBST(BWIDGET_DESTDIR)
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
- copy_bwidget=no
|
||||||
|
+
|
||||||
|
+ BWIDGET_DESTDIR="\$(DESTDIR)/\${datadir}/tcl8.4/BWidget-1.8.0"
|
||||||
|
+ AC_SUBST(BWIDGET_DESTDIR)
|
||||||
|
+ copy_bwidget=yes
|
||||||
|
bwidget_ver=1.8
|
||||||
|
fi
|
||||||
|
|
744
setools.spec
744
setools.spec
@ -1,43 +1,149 @@
|
|||||||
%global sepol_ver 3.4-1
|
%define setools_maj_ver 3.3
|
||||||
%global selinux_ver 3.4-1
|
%define setools_min_ver 2
|
||||||
|
%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
|
||||||
|
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
|
||||||
|
|
||||||
Name: setools
|
Name: setools
|
||||||
Version: 4.4.0
|
Version: %{setools_maj_ver}.%{setools_min_ver}
|
||||||
Release: 9%{?dist}
|
Release: 1%{?dist}
|
||||||
Summary: Policy analysis tools for SELinux
|
License: GPLv2
|
||||||
|
URL: http://oss.tresys.com/projects/setools
|
||||||
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
|
||||||
|
Source: http://oss.tresys.com/projects/setools/chrome/site/dists/setools-%{version}/setools-%{version}.tar.gz
|
||||||
|
Source1: setools.pam
|
||||||
|
Source2: apol.desktop
|
||||||
|
Source3: seaudit.desktop
|
||||||
|
Source4: sediffx.desktop
|
||||||
|
Summary: Policy analysis tools for SELinux
|
||||||
|
Group: System Environment/Base
|
||||||
|
Requires: setools-libs = %{version}-%{release} setools-libs-tcl = %{version}-%{release} setools-gui = %{version}-%{release} setools-console = %{version}-%{release}
|
||||||
|
|
||||||
License: GPLv2
|
# external requirements
|
||||||
URL: https://github.com/SELinuxProject/setools/wiki
|
%define autoconf_ver 2.59
|
||||||
Source0: https://github.com/SELinuxProject/setools/archive/%{version}.tar.gz
|
%define bwidget_ver 1.8
|
||||||
Source1: setools.pam
|
%define java_ver 1.2
|
||||||
Source2: apol.desktop
|
%define gtk_ver 2.8
|
||||||
Patch0001: 0001-Make-seinfo-output-predictable.patch
|
%define python_ver 2.3
|
||||||
Patch1002: 1002-Do-not-export-use-setools.InfoFlowAnalysis-and-setoo.patch
|
%define sepol_ver 1.12.27
|
||||||
Patch1003: 1003-Require-networkx-on-package-level.patch
|
%define selinux_ver 1.30
|
||||||
Obsoletes: setools < 4.0.0, setools-devel < 4.0.0
|
%define sqlite_ver 3.2.0
|
||||||
BuildRequires: flex, bison
|
%define swig_ver 1.3.28
|
||||||
BuildRequires: glibc-devel, gcc, git-core
|
%define tcltk_ver 8.4.9
|
||||||
BuildRequires: libsepol-devel >= %{sepol_ver}, libsepol-static >= %{sepol_ver}
|
|
||||||
BuildRequires: qt5-qtbase-devel
|
|
||||||
BuildRequires: swig
|
|
||||||
BuildRequires: python3-Cython
|
|
||||||
BuildRequires: python3-devel
|
|
||||||
BuildRequires: python3-setuptools
|
|
||||||
BuildRequires: libselinux-devel
|
|
||||||
|
|
||||||
Requires: %{name}-console = %{version}-%{release}
|
|
||||||
Requires: %{name}-console-analyses = %{version}-%{release}
|
|
||||||
Requires: %{name}-gui = %{version}-%{release}
|
|
||||||
|
|
||||||
%description
|
%description
|
||||||
SETools is a collection of graphical tools, command-line tools, and
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
Python modules designed to facilitate SELinux policy analysis.
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
%package console
|
This meta-package depends upon the main packages necessary to run
|
||||||
Summary: Policy analysis command-line tools for SELinux
|
SETools.
|
||||||
License: GPLv2
|
|
||||||
Requires: python3-setools = %{version}-%{release}
|
%package libs
|
||||||
Requires: libselinux >= %{selinux_ver}
|
License: LGPLv2
|
||||||
|
Summary: Policy analysis support libraries for SELinux
|
||||||
|
Group: System Environment/Libraries
|
||||||
|
Requires: libselinux >= %{selinux_ver} libsepol >= %{sepol_ver} sqlite >= %{sqlite_ver}
|
||||||
|
BuildRequires: flex bison pkgconfig
|
||||||
|
BuildRequires: glibc-devel libstdc++-devel gcc gcc-c++
|
||||||
|
BuildRequires: libselinux-devel >= %{selinux_ver} libsepol-devel >= %{sepol_ver}
|
||||||
|
BuildRequires: sqlite-devel >= %{sqlite_ver} libxml2-devel
|
||||||
|
BuildRequires: tcl-devel >= %{tcltk_ver}
|
||||||
|
BuildRequires: autoconf >= %{autoconf_ver} automake
|
||||||
|
|
||||||
|
%description libs
|
||||||
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes the following run-time libraries:
|
||||||
|
|
||||||
|
libapol policy analysis library
|
||||||
|
libpoldiff semantic policy difference library
|
||||||
|
libqpol library that abstracts policy internals
|
||||||
|
libseaudit parse and filter SELinux audit messages in log files
|
||||||
|
libsefs SELinux file contexts library
|
||||||
|
|
||||||
|
%package libs-python
|
||||||
|
License: LGPLv2
|
||||||
|
Summary: Python bindings for SELinux policy analysis
|
||||||
|
Group: Development/Languages
|
||||||
|
Requires: setools-libs = %{version}-%{release} python2 >= %{python_ver}
|
||||||
|
BuildRequires: python2-devel >= %{python_ver} swig >= %{swig_ver}
|
||||||
|
|
||||||
|
%description libs-python
|
||||||
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes Python bindings for the following libraries:
|
||||||
|
|
||||||
|
libapol policy analysis library
|
||||||
|
libpoldiff semantic policy difference library
|
||||||
|
libqpol library that abstracts policy internals
|
||||||
|
libseaudit parse and filter SELinux audit messages in log files
|
||||||
|
libsefs SELinux file contexts library
|
||||||
|
|
||||||
|
%package libs-java
|
||||||
|
License: LGPLv2
|
||||||
|
Summary: Java bindings for SELinux policy analysis
|
||||||
|
Group: Development/Languages
|
||||||
|
Requires: setools-libs = %{version}-%{release} java >= %{java_ver}
|
||||||
|
BuildRequires: java-devel >= %{java_ver} swig >= %{swig_ver}
|
||||||
|
|
||||||
|
%description libs-java
|
||||||
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes Java bindings for the following libraries:
|
||||||
|
|
||||||
|
libapol policy analysis library
|
||||||
|
libpoldiff semantic policy difference library
|
||||||
|
libqpol library that abstracts policy internals
|
||||||
|
libseaudit parse and filter SELinux audit messages in log files
|
||||||
|
libsefs SELinux file contexts library
|
||||||
|
|
||||||
|
%package libs-tcl
|
||||||
|
License: LGPLv2
|
||||||
|
Summary: Tcl bindings for SELinux policy analysis
|
||||||
|
Group: Development/Languages
|
||||||
|
Requires: setools-libs = %{version}-%{release} tcl >= %{tcltk_ver}
|
||||||
|
BuildRequires: tcl-devel >= %{tcltk_ver} swig >= %{swig_ver}
|
||||||
|
|
||||||
|
%description libs-tcl
|
||||||
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes Tcl bindings for the following libraries:
|
||||||
|
|
||||||
|
libapol policy analysis library
|
||||||
|
libpoldiff semantic policy difference library
|
||||||
|
libqpol library that abstracts policy internals
|
||||||
|
libseaudit parse and filter SELinux audit messages in log files
|
||||||
|
libsefs SELinux file contexts library
|
||||||
|
|
||||||
|
%package devel
|
||||||
|
License: LGPLv2
|
||||||
|
Summary: Policy analysis development files for SELinux
|
||||||
|
Group: Development/Libraries
|
||||||
|
Requires: libselinux-devel >= %{selinux_ver} libsepol-devel >= %{sepol_ver} setools-libs = %{version}-%{release}
|
||||||
|
BuildRequires: sqlite-devel >= %{sqlite_ver} libxml2-devel
|
||||||
|
|
||||||
|
%description devel
|
||||||
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes header files and archives for the following
|
||||||
|
libraries:
|
||||||
|
|
||||||
|
libapol policy analysis library
|
||||||
|
libpoldiff semantic policy difference library
|
||||||
|
libqpol library that abstracts policy internals
|
||||||
|
libseaudit parse and filter SELinux audit messages in log files
|
||||||
|
libsefs SELinux file contexts library
|
||||||
|
|
||||||
|
%package console
|
||||||
|
Summary: Policy analysis command-line tools for SELinux
|
||||||
|
Group: System Environment/Base
|
||||||
|
License: GPLv2
|
||||||
|
Requires: setools-libs = %{version}-%{release}
|
||||||
|
Requires: libselinux >= %{selinux_ver}
|
||||||
|
|
||||||
%description console
|
%description console
|
||||||
SETools is a collection of graphical tools, command-line tools, and
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
@ -45,264 +151,450 @@ libraries designed to facilitate SELinux policy analysis.
|
|||||||
|
|
||||||
This package includes the following console tools:
|
This package includes the following console tools:
|
||||||
|
|
||||||
sediff Compare two policies to find differences.
|
seaudit-report audit log analysis tool
|
||||||
seinfo List policy components.
|
sechecker SELinux policy checking tool
|
||||||
sesearch Search rules (allow, type_transition, etc.)
|
secmds command line tools: seinfo, sesearch, findcon,
|
||||||
|
replcon, and indexcon
|
||||||
|
sediff semantic policy difference tool
|
||||||
|
|
||||||
|
%package gui
|
||||||
%package console-analyses
|
Summary: Policy analysis graphical tools for SELinux
|
||||||
Summary: Policy analysis command-line tools for SELinux
|
Group: System Environment/Base
|
||||||
License: GPLv2
|
Requires: tcl >= %{tcltk_ver} tk >= %{tcltk_ver} bwidget >= %{bwidget_ver}
|
||||||
Requires: python3-setools = %{version}-%{release}
|
Requires: setools-libs = %{version}-%{release} setools-libs-tcl = %{version}-%{release}
|
||||||
Requires: libselinux >= %{selinux_ver}
|
Requires: glib2 gtk2 >= %{gtk_ver} usermode
|
||||||
Requires: python3-networkx
|
BuildRequires: gtk2-devel >= %{gtk_ver} libglade2-devel libxml2-devel tk-devel >= %{tcltk_ver}
|
||||||
|
BuildRequires: desktop-file-utils
|
||||||
%description console-analyses
|
|
||||||
SETools is a collection of graphical tools, command-line tools, and
|
|
||||||
libraries designed to facilitate SELinux policy analysis.
|
|
||||||
|
|
||||||
This package includes the following console tools:
|
|
||||||
|
|
||||||
sedta Perform domain transition analyses.
|
|
||||||
seinfoflow Perform information flow analyses.
|
|
||||||
|
|
||||||
|
|
||||||
%package -n python3-setools
|
|
||||||
Summary: Policy analysis tools for SELinux
|
|
||||||
Obsoletes: setools-libs < 4.0.0
|
|
||||||
%{?python_provide:%python_provide python3-setools}
|
|
||||||
Requires: python3-setuptools
|
|
||||||
|
|
||||||
%description -n python3-setools
|
|
||||||
SETools is a collection of graphical tools, command-line tools, and
|
|
||||||
Python 3 modules designed to facilitate SELinux policy analysis.
|
|
||||||
|
|
||||||
|
|
||||||
%package gui
|
|
||||||
Summary: Policy analysis graphical tools for SELinux
|
|
||||||
Requires: python3-setools = %{version}-%{release}
|
|
||||||
Requires: python3-qt5
|
|
||||||
Requires: python3-networkx
|
|
||||||
|
|
||||||
%description gui
|
%description gui
|
||||||
SETools is a collection of graphical tools, command-line tools, and
|
SETools is a collection of graphical tools, command-line tools, and
|
||||||
Python modules designed to facilitate SELinux policy analysis.
|
libraries designed to facilitate SELinux policy analysis.
|
||||||
|
|
||||||
|
This package includes the following graphical tools:
|
||||||
|
|
||||||
|
apol policy analysis tool
|
||||||
|
seaudit audit log analysis tool
|
||||||
|
sediffx semantic policy difference tool
|
||||||
|
|
||||||
|
%define setoolsdir %{_datadir}/setools-%{setools_maj_ver}
|
||||||
|
%define pkg_py_lib %{python_sitelib}/setools
|
||||||
|
%define pkg_py_arch %{python_sitearch}/setools
|
||||||
|
%define javajardir %{_datadir}/java
|
||||||
|
%define tcllibdir %{_libdir}/setools
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%autosetup -p 1 -S git -n setools-%{version}
|
%setup -q
|
||||||
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%py3_build
|
%configure --libdir=%{_libdir} --disable-bwidget-check --disable-selinux-check --enable-swig-python --enable-swig-java --enable-swig-tcl
|
||||||
|
make %{?_smp_mflags}
|
||||||
|
|
||||||
%install
|
%install
|
||||||
%py3_install
|
rm -rf ${RPM_BUILD_ROOT}
|
||||||
|
make DESTDIR=${RPM_BUILD_ROOT} INSTALL="install -p" install
|
||||||
%check
|
mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/applications
|
||||||
%if %{?_with_check:1}%{!?_with_check:0}
|
mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/pixmaps
|
||||||
%{__python3} setup.py test
|
install -d -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/pam.d
|
||||||
%endif
|
install -p -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/pam.d/seaudit
|
||||||
|
install -d -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/security/console.apps
|
||||||
|
install -p -m 644 packages/rpm/seaudit.console ${RPM_BUILD_ROOT}%{_sysconfdir}/security/console.apps/seaudit
|
||||||
|
install -d -m 755 ${RPM_BUILD_ROOT}%{_datadir}/applications
|
||||||
|
install -p -m 644 apol/apol.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/apol.png
|
||||||
|
install -p -m 644 seaudit/seaudit.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/seaudit.png
|
||||||
|
install -p -m 644 sediff/sediffx.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/sediffx.png
|
||||||
|
desktop-file-install --dir ${RPM_BUILD_ROOT}%{_datadir}/applications %{SOURCE2} %{SOURCE3} %{SOURCE4}
|
||||||
|
ln -sf consolehelper ${RPM_BUILD_ROOT}/%{_bindir}/seaudit
|
||||||
|
# replace absolute symlinks with relative symlinks
|
||||||
|
ln -sf ../setools-%{setools_maj_ver}/qpol.jar ${RPM_BUILD_ROOT}/%{javajardir}/qpol.jar
|
||||||
|
ln -sf ../setools-%{setools_maj_ver}/apol.jar ${RPM_BUILD_ROOT}/%{javajardir}/apol.jar
|
||||||
|
ln -sf ../setools-%{setools_maj_ver}/poldiff.jar ${RPM_BUILD_ROOT}/%{javajardir}/poldiff.jar
|
||||||
|
ln -sf ../setools-%{setools_maj_ver}/seaudit.jar ${RPM_BUILD_ROOT}/%{javajardir}/seaudit.jar
|
||||||
|
ln -sf ../setools-%{setools_maj_ver}/sefs.jar ${RPM_BUILD_ROOT}/%{javajardir}/sefs.jar
|
||||||
|
# remove static libs
|
||||||
|
rm -f ${RPM_BUILD_ROOT}/%{_libdir}/*.a
|
||||||
|
# ensure permissions are correct
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{_libdir}/*.so.*
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{_libdir}/%{name}/*/*.so.*
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{pkg_py_arch}/*.so.*
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{_bindir}/*
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{_sbindir}/*
|
||||||
|
chmod 0755 ${RPM_BUILD_ROOT}/%{setoolsdir}/seaudit-report-service
|
||||||
|
chmod 0644 ${RPM_BUILD_ROOT}/%{tcllibdir}/*/pkgIndex.tcl
|
||||||
|
|
||||||
|
%clean
|
||||||
|
rm -rf ${RPM_BUILD_ROOT}
|
||||||
|
|
||||||
%files
|
%files
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
|
||||||
|
%files libs
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%doc AUTHORS ChangeLog COPYING COPYING.GPL COPYING.LGPL KNOWN-BUGS NEWS README
|
||||||
|
%{_libdir}/libqpol.so.*
|
||||||
|
%{_libdir}/libapol.so.*
|
||||||
|
%{_libdir}/libpoldiff.so.*
|
||||||
|
%{_libdir}/libsefs.so.*
|
||||||
|
%{_libdir}/libseaudit.so.*
|
||||||
|
%dir %{setoolsdir}
|
||||||
|
|
||||||
|
%files libs-python
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{pkg_py_lib}/
|
||||||
|
%ifarch x86_64 ppc64
|
||||||
|
%{pkg_py_arch}/
|
||||||
|
%endif
|
||||||
|
|
||||||
|
%files libs-java
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{_libdir}/libjqpol.so.*
|
||||||
|
%{_libdir}/libjapol.so.*
|
||||||
|
%{_libdir}/libjpoldiff.so.*
|
||||||
|
%{_libdir}/libjseaudit.so.*
|
||||||
|
%{_libdir}/libjsefs.so.*
|
||||||
|
%{setoolsdir}/*.jar
|
||||||
|
%{javajardir}/*.jar
|
||||||
|
|
||||||
|
%files libs-tcl
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{tcllibdir}/qpol/
|
||||||
|
%{tcllibdir}/apol/
|
||||||
|
%{tcllibdir}/poldiff/
|
||||||
|
%{tcllibdir}/seaudit/
|
||||||
|
%{tcllibdir}/sefs/
|
||||||
|
|
||||||
|
%files devel
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{_libdir}/*.so
|
||||||
|
%{_libdir}/pkgconfig/*
|
||||||
|
%{_includedir}/qpol/
|
||||||
|
%{_includedir}/apol/
|
||||||
|
%{_includedir}/poldiff/
|
||||||
|
%{_includedir}/seaudit/
|
||||||
|
%{_includedir}/sefs/
|
||||||
|
|
||||||
%files console
|
%files console
|
||||||
%{_bindir}/sechecker
|
%defattr(-,root,root,-)
|
||||||
%{_bindir}/sediff
|
|
||||||
%{_bindir}/seinfo
|
%{_bindir}/seinfo
|
||||||
%{_bindir}/sesearch
|
%{_bindir}/sesearch
|
||||||
%{_mandir}/man1/sechecker*
|
%{_bindir}/indexcon
|
||||||
%{_mandir}/man1/sediff*
|
%{_bindir}/findcon
|
||||||
%{_mandir}/man1/seinfo*
|
%{_bindir}/replcon
|
||||||
%{_mandir}/man1/sesearch*
|
%{_bindir}/sechecker
|
||||||
%{_mandir}/ru/man1/sediff*
|
%{_bindir}/sediff
|
||||||
%{_mandir}/ru/man1/seinfo*
|
%{_bindir}/seaudit-report
|
||||||
%{_mandir}/ru/man1/sesearch*
|
%{setoolsdir}/sechecker-profiles/
|
||||||
|
%{setoolsdir}/sechecker_help.txt
|
||||||
%files console-analyses
|
%{setoolsdir}/seaudit-report-service
|
||||||
%{_bindir}/sedta
|
%{setoolsdir}/seaudit-report.conf
|
||||||
%{_bindir}/seinfoflow
|
%{setoolsdir}/seaudit-report.css
|
||||||
%{_mandir}/man1/sedta*
|
%{_mandir}/man1/findcon.1.gz
|
||||||
%{_mandir}/man1/seinfoflow*
|
%{_mandir}/man1/indexcon.1.gz
|
||||||
%{_mandir}/ru/man1/sedta*
|
%{_mandir}/man1/replcon.1.gz
|
||||||
%{_mandir}/ru/man1/seinfoflow*
|
%{_mandir}/man1/sechecker.1.gz
|
||||||
|
%{_mandir}/man1/sediff.1.gz
|
||||||
%files -n python3-setools
|
%{_mandir}/man1/seinfo.1.gz
|
||||||
%license COPYING COPYING.GPL COPYING.LGPL
|
%{_mandir}/man1/sesearch.1.gz
|
||||||
%{python3_sitearch}/setools
|
%{_mandir}/man8/seaudit-report.8.gz
|
||||||
%{python3_sitearch}/setools-*
|
|
||||||
|
|
||||||
%files gui
|
%files gui
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{_bindir}/seaudit
|
||||||
|
%{_bindir}/sediffx
|
||||||
%{_bindir}/apol
|
%{_bindir}/apol
|
||||||
%{python3_sitearch}/setoolsgui
|
%{tcllibdir}/apol_tcl/
|
||||||
%{_mandir}/man1/apol*
|
%{setoolsdir}/sediff_help.txt
|
||||||
%{_mandir}/ru/man1/apol*
|
%{setoolsdir}/apol_help.txt
|
||||||
|
%{setoolsdir}/domaintrans_help.txt
|
||||||
|
%{setoolsdir}/file_relabel_help.txt
|
||||||
|
%{setoolsdir}/infoflow_help.txt
|
||||||
|
%{setoolsdir}/types_relation_help.txt
|
||||||
|
%{setoolsdir}/apol_perm_mapping_*
|
||||||
|
%{setoolsdir}/seaudit_help.txt
|
||||||
|
%{setoolsdir}/*.glade
|
||||||
|
%{setoolsdir}/*.png
|
||||||
|
%{setoolsdir}/apol.gif
|
||||||
|
%{setoolsdir}/dot_seaudit
|
||||||
|
%{_mandir}/man1/apol.1.gz
|
||||||
|
%{_mandir}/man1/sediffx.1.gz
|
||||||
|
%{_mandir}/man8/seaudit.8.gz
|
||||||
|
%{_sbindir}/seaudit
|
||||||
|
%config(noreplace) %{_sysconfdir}/pam.d/seaudit
|
||||||
|
%config(noreplace) %{_sysconfdir}/security/console.apps/seaudit
|
||||||
|
%{_datadir}/applications/*
|
||||||
|
%attr(0644,root,root) %{_datadir}/pixmaps/*.png
|
||||||
|
|
||||||
|
%post libs -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%postun libs -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%post libs-java -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%postun libs-java -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%post libs-tcl -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%postun libs-tcl -p /sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-9
|
* Wed Nov 28 2007 Chris Pebenito <cpebenito@tresys.com> 3.3.2-1.fc9
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
- Update for 3.3.2.
|
||||||
|
|
||||||
* Thu Jun 16 2022 Python Maint <python-maint@redhat.com> - 4.4.0-8
|
* Thu Oct 18 2007 Chris PeBenito <cpebenito@tresys.com> 3.3.1-7.fc8
|
||||||
- Rebuilt for Python 3.11
|
- Rebuild to fix ppc64 issue.
|
||||||
|
|
||||||
* Mon Jun 13 2022 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-7
|
* Wed Oct 17 2007 Chris PeBenito <cpebenito@tresys.com> 3.3.1-6.fc8
|
||||||
- Update required userspace versions to 3.4
|
- Update for 3.3.1.
|
||||||
- Drop unnecessary Recommends
|
|
||||||
|
|
||||||
* Mon Jun 13 2022 Python Maint <python-maint@redhat.com> - 4.4.0-6
|
* Tue Aug 28 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 3.2-4
|
||||||
- Rebuilt for Python 3.11
|
- Rebuild for selinux ppc32 issue.
|
||||||
|
|
||||||
* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-5
|
* Fri Jul 20 2007 Dan Walsh <dwalsh@redhat.com> 3.2-3
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
- Move to Tresys spec file
|
||||||
|
|
||||||
* Fri Nov 19 2021 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-4
|
* Wed Jun 13 2007 Dan Walsh <dwalsh@redhat.com> 3.2-2
|
||||||
- Make seinfo output predictable
|
- Bump for rebuild
|
||||||
https://github.com/SELinuxProject/setools/issues/65
|
|
||||||
|
|
||||||
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-3
|
* Mon Apr 30 2007 Dan Walsh <dwalsh@redhat.com> 3.2-1
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
- Start shipping the rest of the setools command line apps
|
||||||
|
|
||||||
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com> - 4.4.0-2
|
* Wed Apr 25 2007 Jason Tang <jtang@tresys.com> 3.2-0
|
||||||
- Rebuilt for Python 3.10
|
- update to SETools 3.2 release
|
||||||
|
|
||||||
* Mon Mar 8 2021 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-1
|
* Mon Feb 02 2007 Jason Tang <jtang@tresys.com> 3.1-1
|
||||||
- SETools 4.4.0 release
|
- update to SETools 3.1 release
|
||||||
|
|
||||||
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-0.3.20210121git16c0696
|
* Mon Oct 30 2006 Dan Walsh <dwalsh@redhat.com> 3.0-2.fc6
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
- bump for fc6
|
||||||
|
|
||||||
|
* Thu Oct 26 2006 Dan Walsh <dwalsh@redhat.com> 3.0-2
|
||||||
|
- Build on rawhide
|
||||||
|
|
||||||
* Thu Jan 21 2021 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.2.20210121git16c0696
|
* Sun Oct 15 2006 Dan Walsh <dwalsh@redhat.com> 3.0-1
|
||||||
- Rebuild with SELinux userspace 3.2-rc1
|
- Update to upstream
|
||||||
- Update to 16c0696
|
|
||||||
|
|
||||||
* Thu Dec 10 2020 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.2.20201102git05e90ee
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - sh: line 0: fg: no job control
|
||||||
- Fix imports in /usr/bin/sedta
|
- rebuild
|
||||||
|
|
||||||
* Tue Nov 3 2020 Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
|
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-2
|
||||||
- Update to 05e90ee
|
- Remove sqlite include directory
|
||||||
- Add /usr/bin/sechecker
|
|
||||||
- Adapt to new libsepol filename transition structures
|
|
||||||
- Rebuild with libsepol.so.2
|
|
||||||
|
|
||||||
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.0-5
|
* Wed May 3 2006 Dan Walsh <dwalsh@redhat.com> 2.4-1
|
||||||
- Second attempt - Rebuilt for
|
- Update from upstream
|
||||||
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
||||||
|
|
||||||
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.0-4
|
* Mon Apr 10 2006 Dan Walsh <dwalsh@redhat.com> 2.3-3
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
- Fix help
|
||||||
|
- Add icons
|
||||||
|
|
||||||
* Thu Jul 16 2020 Petr Lautrbach <plautrba@redhat.com> - 4.3.0-3
|
* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 2.3-2
|
||||||
- rebuild with SELinux userspace 3.1 release
|
- Remove console apps for sediff, sediffx and apol
|
||||||
|
|
||||||
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 4.3.0-2
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.3-1.2
|
||||||
- Rebuilt for Python 3.9
|
- bump again for double-long bug on ppc(64)
|
||||||
|
|
||||||
* Thu Apr 2 2020 Petr Lautrbach <plautrba@redhat.com> - 4.3.0-1
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2.3-1.1
|
||||||
- SETools 4.3.0 release
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
||||||
- Revised sediff method for TE rules. This drastically reduced memory and run time.
|
|
||||||
- Added infiniband context support to seinfo, sediff, and apol.
|
|
||||||
- Added apol configuration for location of Qt assistant.
|
|
||||||
- Fixed sediff issue where properties header would display when not requested.
|
|
||||||
- Fixed sediff issue with type_transition file name comparison.
|
|
||||||
- Fixed permission map socket sendto information flow direction.
|
|
||||||
- Added methods to TypeAttribute class to make it a complete Python collection.
|
|
||||||
- Genfscon now will look up classes rather than using fixed values which
|
|
||||||
were dropped from libsepol.
|
|
||||||
|
|
||||||
* Mon Mar 23 2020 Petr Lautrbach <plautrba@redhat.com> - 4.2.2-5
|
* Tue Jan 31 2006 Dan Walsh <dwalsh@redhat.com> 2.3-1
|
||||||
- setools requires -console, -console-analyses and -gui packages (#1794314)
|
- Update from upstream
|
||||||
|
* apol:
|
||||||
|
added new MLS components tab for sensitivities,
|
||||||
|
levels, and categories.
|
||||||
|
Changed users tab to support ranges and default
|
||||||
|
levels.
|
||||||
|
added range transition tab for searching range
|
||||||
|
Transition rules.
|
||||||
|
added new tab for network context components.
|
||||||
|
added new tab for file system context components.
|
||||||
|
* libapol:
|
||||||
|
added binpol support for MLS, network contexts,
|
||||||
|
and file system contexts.
|
||||||
|
* seinfo:
|
||||||
|
added command line options for MLS components.
|
||||||
|
added command line options for network contexts
|
||||||
|
and file system contexts.
|
||||||
|
* sesearch:
|
||||||
|
added command line option for searching for rules
|
||||||
|
by conditional boolean name.
|
||||||
|
* seaudit:
|
||||||
|
added new column in the log view for the 'comm'
|
||||||
|
field found in auditd log files.
|
||||||
|
added filters for the 'comm' field and 'message'
|
||||||
|
field.
|
||||||
|
* manpages:
|
||||||
|
added manpages for all tools.
|
||||||
|
|
||||||
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.2-4
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
||||||
|
|
||||||
* Thu Oct 03 2019 Miro Hrončok <mhroncok@redhat.com> - 4.2.2-3
|
|
||||||
- Rebuilt for Python 3.8.0rc1 (#1748018)
|
|
||||||
|
|
||||||
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 4.2.2-2
|
* Fri Dec 16 2005 Jesse Keating <jkeating@redhat.com>
|
||||||
- Rebuilt for Python 3.8
|
- rebuilt for new gcj
|
||||||
|
|
||||||
* Mon Jul 08 2019 Vit Mojzis <vmojzis@redhat.com> - 4.2.2-1}
|
* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 2.2-4
|
||||||
- SETools 4.2.2 release
|
- Fix dessktop files
|
||||||
|
- Apply fixes from bkyoung
|
||||||
|
|
||||||
* Mon May 13 2019 Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
||||||
- Use %set_build_flags instead of %optflags
|
- rebuilt
|
||||||
|
|
||||||
* Mon May 06 2019 Vit Mojzis <vmojzis@redhat.com> - 4.2.1-2
|
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 2.2-3
|
||||||
- SELinuxPolicy: Create a map of aliases on policy load (#1672631)
|
- Move more gui files out of base into gui
|
||||||
|
|
||||||
* Tue Mar 26 2019 Petr Lautrbach <plautrba@redhat.com> - 4.2.1-1
|
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 2.2-2
|
||||||
- SETools 4.2.1 release (#1581761, #1595582)
|
- Move sediff from gui to main package
|
||||||
|
|
||||||
* Wed Nov 14 2018 Vit Mojzis <vmojzis@redhat.com> - 4.2.0-1
|
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 2.2-1
|
||||||
- Update source to SETools 4.2.0 release
|
- Upgrade to upstream version
|
||||||
|
|
||||||
* Mon Oct 01 2018 Vit Mojzis <vmojzis@redhat.com> - 4.2.0-0.3.rc
|
* Thu Oct 13 2005 Dan Walsh <dwalsh@redhat.com> 2.1.3-1
|
||||||
- Update upstream source to 4.2.0-rc
|
- Upgrade to upstream version
|
||||||
|
|
||||||
* Wed Sep 19 2018 Vit Mojzis <vmojzis@redhat.com> - 4.2.0-0.2.beta
|
* Mon Oct 10 2005 Tomas Mraz <tmraz@redhat.com> 2.1.2-3
|
||||||
- Require userspace release 2.8
|
- use include instead of pam_stack in pam config
|
||||||
- setools-gui requires python3-setools
|
|
||||||
- Add Requires for python[23]-setuptools - no longer required (just recommended) by python[23] (#1623371)
|
|
||||||
- Drop python2 subpackage (4.2.0 no longer supports python2)
|
|
||||||
|
|
||||||
* Wed Aug 29 2018 Vit Mojzis <vmojzis@redhat.com> - 4.1.1-13
|
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 2.1.2-2
|
||||||
- Add Requires for python[23]-setuptools - no longer required (just recommended)
|
- Fix spec file
|
||||||
by python[23] (#1623371)
|
|
||||||
|
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 2.1.2-1
|
||||||
|
- Upgrade to upstream version
|
||||||
|
|
||||||
|
* Thu Aug 18 2005 Florian La Roche <laroche@redhat.com>
|
||||||
|
- do not package debug files into the -devel package
|
||||||
|
|
||||||
* Wed Aug 22 2018 Petr Lautrbach <plautrba@redhat.com> - 4.1.1-12.1
|
* Wed Aug 17 2005 Jeremy Katz <katzj@redhat.com> - 2.1.1-3
|
||||||
- Fix SCTP patch - https://github.com/SELinuxProject/setools/issues/9
|
- rebuild against new cairo
|
||||||
|
|
||||||
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.1-11
|
* Wed May 25 2005 Dan Walsh <dwalsh@redhat.com> 2.1.1-0
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
- Upgrade to upstream version
|
||||||
|
|
||||||
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 4.1.1-10
|
* Mon May 23 2005 Bill Nottingham <notting@redhat.com> 2.1.0-5
|
||||||
- Rebuilt for Python 3.7
|
- put libraries in the right place (also puts debuginfo in the right
|
||||||
|
package)
|
||||||
|
- add %%defattr for -devel too
|
||||||
|
|
||||||
* Thu Jun 14 2018 Petr Lautrbach <plautrba@redhat.com> - 4.1.1-9
|
* Thu May 12 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-4
|
||||||
- Move gui python files to -gui subpackage
|
- Move sepcut to gui apps.
|
||||||
|
|
||||||
* Thu Apr 26 2018 Vit Mojzis <vmojzis@redhat.com> - 4.1.1-8
|
* Fri May 6 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-3
|
||||||
- Add support for SCTP protocol (#1568333)
|
- Fix Missing return code.
|
||||||
|
|
||||||
* Thu Apr 19 2018 Iryna Shcherbina <shcherbina.iryna@gmail.com> - 4.1.1-7
|
* Wed Apr 20 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-2
|
||||||
- Update Python 2 dependency declarations to new packaging standards
|
- Fix requires line
|
||||||
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
|
|
||||||
|
|
||||||
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.1-6
|
* Tue Apr 19 2005 Dan Walsh <dwalsh@redhat.com> 2.1.0-1
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
- Update to latest from tresys
|
||||||
|
|
||||||
* Mon Sep 04 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.1-5
|
* Tue Apr 5 2005 Dan Walsh <dwalsh@redhat.com> 2.0.0-2
|
||||||
- setools-python2 requires python2-enum34
|
- Fix buildrequires lines in spec file
|
||||||
|
|
||||||
* Sun Aug 20 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.1.1-4
|
* Tue Mar 2 2005 Dan Walsh <dwalsh@redhat.com> 2.0.0-1
|
||||||
- Add Provides for the old name without %%_isa
|
- Update to latest from tresys
|
||||||
|
|
||||||
* Thu Aug 10 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.1.1-3
|
* Mon Nov 29 2004 Dan Walsh <dwalsh@redhat.com> 1.5.1-6
|
||||||
- Python 2 binary package renamed to python2-setools
|
- add FALLBACK=true to /etc/security/console.apps/apol
|
||||||
See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
|
|
||||||
- Python 3 binary package renamed to python3-setools
|
|
||||||
|
|
||||||
* Thu Aug 10 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.1-2
|
* Wed Nov 10 2004 Dan Walsh <dwalsh@redhat.com> 1.5.1-3
|
||||||
- bswap_* macros are defined in byteswap.h
|
- Add badtcl patch from Tresys.
|
||||||
|
|
||||||
* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.1-1
|
* Mon Nov 8 2004 Dan Walsh <dwalsh@redhat.com> 1.5.1-2
|
||||||
- New upstream release
|
- Apply malloc problem patch provided by Sami Farin
|
||||||
|
|
||||||
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.0-5
|
* Mon Nov 1 2004 Dan Walsh <dwalsh@redhat.com> 1.5.1-1
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
- Update to latest from Upstream
|
||||||
|
|
||||||
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.0-4
|
* Wed Oct 6 2004 Dan Walsh <dwalsh@redhat.com> 1.4.1-5
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
- Update tresys patch
|
||||||
|
|
||||||
* Mon May 22 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.0-3
|
* Mon Oct 4 2004 Dan Walsh <dwalsh@redhat.com> 1.4.1-4
|
||||||
- setools-python{,3} packages should have a weak dependency on libselinux-python{,3}
|
- Fix directory ownership
|
||||||
(#1447747)
|
|
||||||
|
|
||||||
* Thu Feb 23 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.0-2
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.4.1-1
|
||||||
- Move python networkx dependency to -gui and -console-analyses
|
- Latest from Tresys
|
||||||
- Ship sedta and seinfoflow in setools-console-analyses
|
|
||||||
|
|
||||||
* Wed Feb 15 2017 Petr Lautrbach <plautrba@redhat.com> - 4.1.0-1
|
* Wed Jun 23 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
|
||||||
- New upstream release.
|
- Add build requires libselinux
|
||||||
|
|
||||||
|
* Tue Jun 22 2004 Dan Walsh <dwalsh@redhat.com> 1.4-4
|
||||||
|
- Add support for policy.18
|
||||||
|
|
||||||
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
||||||
|
- rebuilt
|
||||||
|
|
||||||
|
* Thu Jun 10 2004 Dan Walsh <dwalsh@redhat.com> 1.4-2
|
||||||
|
- Fix install locations of policy_src_dir
|
||||||
|
|
||||||
|
* Wed Jun 2 2004 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
||||||
|
- Update to latest from TRESYS.
|
||||||
|
|
||||||
|
* Tue Jun 1 2004 Dan Walsh <dwalsh@redhat.com> 1.3-3
|
||||||
|
- Make changes to work with targeted/strict policy
|
||||||
|
* Fri Apr 16 2004 Dan Walsh <dwalsh@redhat.com> 1.3-2
|
||||||
|
- Take out requirement for policy file
|
||||||
|
|
||||||
|
* Fri Apr 16 2004 Dan Walsh <dwalsh@redhat.com> 1.3-1
|
||||||
|
- Fix doc location
|
||||||
|
|
||||||
|
* Fri Apr 16 2004 Dan Walsh <dwalsh@redhat.com> 1.3-1
|
||||||
|
- Latest from TRESYS
|
||||||
|
|
||||||
|
* Tue Apr 13 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-8
|
||||||
|
- fix location of policy.conf file
|
||||||
|
|
||||||
|
* Tue Apr 6 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-7
|
||||||
|
- Obsolete setools-devel
|
||||||
|
* Tue Apr 6 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-6
|
||||||
|
- Fix location of
|
||||||
|
* Tue Apr 6 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-5
|
||||||
|
- Remove devel libraries
|
||||||
|
- Fix installdir for lib64
|
||||||
|
|
||||||
|
* Sat Apr 3 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-4
|
||||||
|
- Add usr_t file read to policy
|
||||||
|
|
||||||
|
* Thu Mar 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-3
|
||||||
|
- Use tcl8.4
|
||||||
|
|
||||||
|
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
|
||||||
|
- rebuilt
|
||||||
|
|
||||||
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
||||||
|
- rebuilt
|
||||||
|
|
||||||
|
* Fri Feb 6 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-1
|
||||||
|
- New patch
|
||||||
|
|
||||||
|
* Fri Feb 6 2004 Dan Walsh <dwalsh@redhat.com> 1.2-1
|
||||||
|
- Latest upstream version
|
||||||
|
|
||||||
|
* Tue Dec 30 2003 Dan Walsh <dwalsh@redhat.com> 1.1.1-1
|
||||||
|
- New version from upstream
|
||||||
|
- Remove seuser.te. Now in policy file.
|
||||||
|
|
||||||
|
* Tue Dec 30 2003 Dan Walsh <dwalsh@redhat.com> 1.1-2
|
||||||
|
- Add Defattr to devel
|
||||||
|
- move libs to base kit
|
||||||
|
|
||||||
|
* Fri Dec 19 2003 Dan Walsh <dwalsh@redhat.com> 1.1-1
|
||||||
|
- Update to latest code from tresys
|
||||||
|
- Break into three separate packages for cmdline, devel and gui
|
||||||
|
- Incorporate the tcl patch
|
||||||
|
|
||||||
|
* Mon Dec 15 2003 Jens Petersen <petersen@redhat.com> - 1.0.1-3
|
||||||
|
- apply setools-1.0.1-tcltk.patch to build against tcl/tk 8.4
|
||||||
|
- buildrequire tk-devel
|
||||||
|
|
||||||
|
* Thu Nov 20 2003 Dan Walsh <dwalsh@redhat.com> 1.0.1-2
|
||||||
|
- Add Bwidgets to this RPM
|
||||||
|
|
||||||
|
* Tue Nov 4 2003 Dan Walsh <dwalsh@redhat.com> 1.0.1-1
|
||||||
|
- Upgrade to 1.0.1
|
||||||
|
|
||||||
|
* Wed Oct 15 2003 Dan Walsh <dwalsh@redhat.com> 1.0-6
|
||||||
|
- Clean up build
|
||||||
|
|
||||||
|
* Tue Oct 14 2003 Dan Walsh <dwalsh@redhat.com> 1.0-5
|
||||||
|
- Update with correct seuser.te
|
||||||
|
|
||||||
|
* Wed Oct 1 2003 Dan Walsh <dwalsh@redhat.com> 1.0-4
|
||||||
|
- Update with final release from Tresys
|
||||||
|
|
||||||
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
||||||
|
- Initial version
|
||||||
|
2
sources
2
sources
@ -1 +1 @@
|
|||||||
SHA512 (4.4.0.tar.gz) = 4033ce54213e47e3afd1bdb03b99b0ee3d977f085310d746b34dcfcfe48ac3a562ae0aa2f730d629a298b56dbf295ad219669d13f82578521866b465f8c976e8
|
17c1bec7fb4ad62fbb6177eb34b8e4a1 setools-3.3.2.tar.gz
|
||||||
|
@ -1,63 +0,0 @@
|
|||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Makefile of /CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools
|
|
||||||
# Description: Make sure setools requires setools-console and setools-gui
|
|
||||||
# Author: Vit Mojzis <vmojzis@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2020 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
export TEST=/CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools
|
|
||||||
export TESTVERSION=1.0
|
|
||||||
|
|
||||||
BUILT_FILES=
|
|
||||||
|
|
||||||
FILES=$(METADATA) runtest.sh Makefile
|
|
||||||
|
|
||||||
.PHONY: all install download clean
|
|
||||||
|
|
||||||
run: $(FILES) build
|
|
||||||
./runtest.sh
|
|
||||||
|
|
||||||
build: $(BUILT_FILES)
|
|
||||||
test -x runtest.sh || chmod a+x runtest.sh
|
|
||||||
|
|
||||||
clean:
|
|
||||||
rm -f *~ $(BUILT_FILES)
|
|
||||||
|
|
||||||
|
|
||||||
include /usr/share/rhts/lib/rhts-make.include
|
|
||||||
|
|
||||||
$(METADATA): Makefile
|
|
||||||
@echo "Owner: Vit Mojzis <vmojzis@redhat.com>" > $(METADATA)
|
|
||||||
@echo "Name: $(TEST)" >> $(METADATA)
|
|
||||||
@echo "TestVersion: $(TESTVERSION)" >> $(METADATA)
|
|
||||||
@echo "Path: $(TEST_DIR)" >> $(METADATA)
|
|
||||||
@echo "Description: Make sure setools requires setools-console and setools-gui" >> $(METADATA)
|
|
||||||
@echo "Type: Regression" >> $(METADATA)
|
|
||||||
@echo "TestTime: 5m" >> $(METADATA)
|
|
||||||
@echo "RunFor: setools" >> $(METADATA)
|
|
||||||
@echo "Priority: Normal" >> $(METADATA)
|
|
||||||
@echo "License: GPLv2+" >> $(METADATA)
|
|
||||||
@echo "Confidential: no" >> $(METADATA)
|
|
||||||
@echo "Destructive: no" >> $(METADATA)
|
|
||||||
@echo "Bug: 1820078" >> $(METADATA)
|
|
||||||
@echo "Releases: -RHEL4 -RHELClient5 -RHELServer5 -RHEL6 -RHEL7" >> $(METADATA)
|
|
||||||
|
|
||||||
rhts-lint $(METADATA)
|
|
@ -1,54 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# runtest.sh of /CoreOS/setools/Regression/bz1820078-The-setools-package-doesn-t-install-any-tools
|
|
||||||
# Description: Make sure setools requires setools-console and setools-gui
|
|
||||||
# Author: Vit Mojzis <vmojzis@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2020 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
# Include Beaker environment
|
|
||||||
. /usr/bin/rhts-environment.sh || exit 1
|
|
||||||
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
||||||
|
|
||||||
PACKAGE="setools"
|
|
||||||
|
|
||||||
rlJournalStart
|
|
||||||
rlPhaseStartSetup
|
|
||||||
rlRun "dnf -y remove ${PACKAGE} ${PACKAGE}-gui ${PACKAGE}-console"
|
|
||||||
OUTPUT_FILE=`mktemp`
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartTest "bz#1820078"
|
|
||||||
rlRun "dnf -y install ${PACKAGE}" 0
|
|
||||||
rlAssertRpm "${PACKAGE}-gui"
|
|
||||||
rlAssertRpm "${PACKAGE}-console"
|
|
||||||
# make sure that setools-* packages do not require setools
|
|
||||||
rlRun "rpm -q --whatrequires ${PACKAGE} >& ${OUTPUT_FILE}" 0,1
|
|
||||||
rlRun "grep -i \"${PACKAGE}-\" ${OUTPUT_FILE}" 1
|
|
||||||
if [ $? -ne 1 ]; then rlRun "cat \"${OUTPUT_FILE}\""; fi
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartCleanup
|
|
||||||
rm -f ${OUTPUT_FILE}
|
|
||||||
rlPhaseEnd
|
|
||||||
rlJournalPrintText
|
|
||||||
rlJournalEnd
|
|
@ -1,63 +0,0 @@
|
|||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Makefile of /CoreOS/setools/Sanity/sedta
|
|
||||||
# Description: Does sedta work as expected? Does it support all features?
|
|
||||||
# Author: Milos Malik <mmalik@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2019 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
export TEST=/CoreOS/setools/Sanity/sedta
|
|
||||||
export TESTVERSION=1.0
|
|
||||||
|
|
||||||
BUILT_FILES=
|
|
||||||
|
|
||||||
FILES=$(METADATA) runtest.sh Makefile PURPOSE testpolicy.cil
|
|
||||||
|
|
||||||
.PHONY: all install download clean
|
|
||||||
|
|
||||||
run: $(FILES) build
|
|
||||||
./runtest.sh
|
|
||||||
|
|
||||||
build: $(BUILT_FILES)
|
|
||||||
test -x runtest.sh || chmod a+x runtest.sh
|
|
||||||
|
|
||||||
clean:
|
|
||||||
rm -f *~ $(BUILT_FILES)
|
|
||||||
|
|
||||||
include /usr/share/rhts/lib/rhts-make.include
|
|
||||||
|
|
||||||
$(METADATA): Makefile
|
|
||||||
@echo "Owner: Milos Malik <mmalik@redhat.com>" > $(METADATA)
|
|
||||||
@echo "Name: $(TEST)" >> $(METADATA)
|
|
||||||
@echo "TestVersion: $(TESTVERSION)" >> $(METADATA)
|
|
||||||
@echo "Path: $(TEST_DIR)" >> $(METADATA)
|
|
||||||
@echo "Description: Does sedta work as expected? Does it support all features?" >> $(METADATA)
|
|
||||||
@echo "Type: Sanity" >> $(METADATA)
|
|
||||||
@echo "TestTime: 1h" >> $(METADATA)
|
|
||||||
@echo "RunFor: setools" >> $(METADATA)
|
|
||||||
@echo "Requires: policycoreutils setools-console-analyses" >> $(METADATA)
|
|
||||||
@echo "Priority: Normal" >> $(METADATA)
|
|
||||||
@echo "License: GPLv2+" >> $(METADATA)
|
|
||||||
@echo "Confidential: no" >> $(METADATA)
|
|
||||||
@echo "Destructive: no" >> $(METADATA)
|
|
||||||
@echo "Releases: -RHEL4 -RHEL6 -RHEL7 -RHELClient5 -RHELServer5" >> $(METADATA)
|
|
||||||
|
|
||||||
rhts-lint $(METADATA)
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
|||||||
PURPOSE of /CoreOS/setools/Sanity/sedta
|
|
||||||
Description: Does sedta work as expected? Does it support all features?
|
|
||||||
Author: Milos Malik <mmalik@redhat.com>
|
|
@ -1,88 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# runtest.sh of /CoreOS/setools/Sanity/sedta
|
|
||||||
# Description: Does sedta work as expected? Does it support all features?
|
|
||||||
# Author: Milos Malik <mmalik@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2019 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
# Include Beaker environment
|
|
||||||
. /usr/bin/rhts-environment.sh || exit 1
|
|
||||||
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
||||||
|
|
||||||
PACKAGE="setools"
|
|
||||||
|
|
||||||
rlJournalStart
|
|
||||||
rlPhaseStartSetup
|
|
||||||
rlAssertRpm ${PACKAGE}-console-analyses
|
|
||||||
OUTPUT_FILE=`mktemp`
|
|
||||||
rlRun "semodule -i testpolicy.cil"
|
|
||||||
rlRun "semodule -l | grep testpolicy"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartTest "invalid values"
|
|
||||||
rlRun "sedta -s unknown_t >& ${OUTPUT_FILE}" 1
|
|
||||||
rlRun "grep -i 'not a valid type' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s apmd_t -t unknown_t -S >& ${OUTPUT_FILE}" 1
|
|
||||||
rlRun "grep -i 'not a valid type' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s unknown_t -p /etc/selinux/unknown/policy/policy.31 >& ${OUTPUT_FILE}" 1
|
|
||||||
rlRun "grep -i 'no such file or directory' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s apmd_t -t var_lib_t -A -1 >& ${OUTPUT_FILE}" 1
|
|
||||||
rlRun "grep -i 'must be positive' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s xyz_t >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^0.*transition.*found' ${OUTPUT_FILE}"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartTest "valid values"
|
|
||||||
# transitivity
|
|
||||||
rlRun "sedta -s first_t -t second_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s second_t -t third_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s first_t -t third_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
# reflexivity
|
|
||||||
rlRun "sedta -s first_t -t first_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s second_t -t second_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
rlRun "sedta -s third_t -t third_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
# path is longer than limit
|
|
||||||
rlRun "sedta -s first_t -t third_t -A 1 >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
# non-existent relation
|
|
||||||
rlRun "sedta -s first_t -t third_t -S -r >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
# non-existent relation
|
|
||||||
rlRun "sedta -s third_t -t first_t -S >& ${OUTPUT_FILE}"
|
|
||||||
rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartCleanup
|
|
||||||
rlRun "semodule -r testpolicy"
|
|
||||||
rlRun "semodule -l | grep testpolicy" 1
|
|
||||||
rm -f ${OUTPUT_FILE}
|
|
||||||
rlPhaseEnd
|
|
||||||
rlJournalPrintText
|
|
||||||
rlJournalEnd
|
|
||||||
|
|
@ -1,21 +0,0 @@
|
|||||||
( type xyz_t )
|
|
||||||
|
|
||||||
( type first_t )
|
|
||||||
( type first_exec_t )
|
|
||||||
( type second_t )
|
|
||||||
( type second_exec_t )
|
|
||||||
( type third_t )
|
|
||||||
( type third_exec_t )
|
|
||||||
|
|
||||||
( typetransition first_t second_exec_t process second_t )
|
|
||||||
( typetransition second_t third_exec_t process third_t )
|
|
||||||
|
|
||||||
( allow first_t second_exec_t ( file ( getattr open read execute )))
|
|
||||||
( allow first_t second_t ( process ( transition )))
|
|
||||||
( allow second_t third_exec_t ( file ( getattr open read execute )))
|
|
||||||
( allow second_t third_t ( process ( transition )))
|
|
||||||
|
|
||||||
( allow first_t first_exec_t ( file ( entrypoint )))
|
|
||||||
( allow second_t second_exec_t ( file ( entrypoint )))
|
|
||||||
( allow third_t third_exec_t ( file ( entrypoint )))
|
|
||||||
|
|
@ -1,64 +0,0 @@
|
|||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Makefile of Sanity/seinfo-consistent-output
|
|
||||||
# Description: Check whether different 2 or more runs of same seinfo commands produce same output
|
|
||||||
# Author: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2021 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
export TEST=Sanity/seinfo-consistent-output
|
|
||||||
export TESTVERSION=1.0
|
|
||||||
|
|
||||||
BUILT_FILES=
|
|
||||||
|
|
||||||
FILES=$(METADATA) runtest.sh Makefile PURPOSE
|
|
||||||
|
|
||||||
.PHONY: all install download clean
|
|
||||||
|
|
||||||
run: $(FILES) build
|
|
||||||
./runtest.sh
|
|
||||||
|
|
||||||
build: $(BUILT_FILES)
|
|
||||||
test -x runtest.sh || chmod a+x runtest.sh
|
|
||||||
|
|
||||||
clean:
|
|
||||||
rm -f *~ $(BUILT_FILES)
|
|
||||||
|
|
||||||
|
|
||||||
include /usr/share/rhts/lib/rhts-make.include
|
|
||||||
|
|
||||||
$(METADATA): Makefile
|
|
||||||
@echo "Owner: Petr Lautrbach <plautrba@redhat.com>" > $(METADATA)
|
|
||||||
@echo "Name: $(TEST)" >> $(METADATA)
|
|
||||||
@echo "TestVersion: $(TESTVERSION)" >> $(METADATA)
|
|
||||||
@echo "Path: $(TEST_DIR)" >> $(METADATA)
|
|
||||||
@echo "Description: Check whether different 2 or more runs of same seinfo commands produce same output" >> $(METADATA)
|
|
||||||
@echo "Type: Sanity" >> $(METADATA)
|
|
||||||
@echo "TestTime: 5m" >> $(METADATA)
|
|
||||||
@echo "RunFor: setools" >> $(METADATA)
|
|
||||||
@echo "Requires: setools-console" >> $(METADATA)
|
|
||||||
@echo "Priority: Normal" >> $(METADATA)
|
|
||||||
@echo "License: GPLv2+" >> $(METADATA)
|
|
||||||
@echo "Confidential: no" >> $(METADATA)
|
|
||||||
@echo "Destructive: no" >> $(METADATA)
|
|
||||||
@echo "Bug: 2019962" >> $(METADATA)
|
|
||||||
@echo "Releases: -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA)
|
|
||||||
|
|
||||||
rhts-lint $(METADATA)
|
|
@ -1,3 +0,0 @@
|
|||||||
PURPOSE of Sanity/seinfo-consistent-output
|
|
||||||
Description: Check whether different 2 or more runs of same seinfo commands produce same output
|
|
||||||
Author: Petr Lautrbach <plautrba@redhat.com>
|
|
@ -1,64 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# runtest.sh of Sanity/seinfo-consistent-output
|
|
||||||
# Description: Check whether different 2 or more runs of same seinfo commands produce same output
|
|
||||||
# Author: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# Copyright (c) 2021 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or
|
|
||||||
# modify it under the terms of the GNU General Public License as
|
|
||||||
# published by the Free Software Foundation, either version 2 of
|
|
||||||
# the License, or (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be
|
|
||||||
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
||||||
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
||||||
# PURPOSE. See the GNU General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU General Public License
|
|
||||||
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
||||||
#
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
|
|
||||||
# Include Beaker environment
|
|
||||||
. /usr/bin/rhts-environment.sh || exit 1
|
|
||||||
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
||||||
|
|
||||||
PACKAGE="setools-console"
|
|
||||||
|
|
||||||
rlJournalStart
|
|
||||||
rlPhaseStartSetup
|
|
||||||
rlAssertRpm $PACKAGE
|
|
||||||
rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
|
|
||||||
rlRun "pushd $TmpDir"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
commands=(
|
|
||||||
"seinfo --all -x"
|
|
||||||
"seinfo --constrain"
|
|
||||||
"seinfo --common"
|
|
||||||
"seinfo -c -x"
|
|
||||||
"seinfo -r -x"
|
|
||||||
"seinfo -u -x"
|
|
||||||
)
|
|
||||||
|
|
||||||
for c in "${commands[@]}"; do
|
|
||||||
|
|
||||||
rlPhaseStartTest "$c"
|
|
||||||
rlRun "$c > 1.out"
|
|
||||||
rlRun "$c > 2.out"
|
|
||||||
rlRun "cmp 1.out 2.out" 0
|
|
||||||
rlPhaseEnd
|
|
||||||
done
|
|
||||||
|
|
||||||
rlPhaseStartCleanup
|
|
||||||
rlRun "popd"
|
|
||||||
rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
|
|
||||||
rlPhaseEnd
|
|
||||||
rlJournalPrintText
|
|
||||||
rlJournalEnd
|
|
@ -1,22 +0,0 @@
|
|||||||
---
|
|
||||||
# Test to run in classic context
|
|
||||||
- hosts: localhost
|
|
||||||
roles:
|
|
||||||
- role: standard-test-beakerlib
|
|
||||||
tags:
|
|
||||||
- classic
|
|
||||||
repositories:
|
|
||||||
- repo: "https://src.fedoraproject.org/tests/selinux.git"
|
|
||||||
dest: "selinux"
|
|
||||||
fmf_filter: "tier: 1 | component: policycoreutils | component: checkpolicy"
|
|
||||||
|
|
||||||
# Test to run in classic context
|
|
||||||
- hosts: localhost
|
|
||||||
roles:
|
|
||||||
- role: standard-test-beakerlib
|
|
||||||
tags:
|
|
||||||
- classic
|
|
||||||
tests:
|
|
||||||
- Sanity/sedta
|
|
||||||
- Regression/The-setools-package-doesn-t-install-any-tools
|
|
||||||
- Sanity/seinfo-consistent-output
|
|
Loading…
Reference in New Issue
Block a user