Commit Graph

99 Commits

Author SHA1 Message Date
Daniel J Walsh
a7c8fb25b4 - Latest upgrade from NSA
Changed require_class to reject permissions that have not been declared if
    building a base module.
2006-04-05 17:46:41 +00:00
Daniel J Walsh
cb354e0254 - Latest upgrade from NSA
Fixed checkmodule to call link_modules prior to expand_module to handle
    optionals.
Fixed require_class to avoid shadowing permissions already defined in an
    inherited common definition.
2006-03-28 20:07:42 +00:00
Daniel J Walsh
d914ad5a8c - Rebuild with new libsepol 2006-03-27 22:13:22 +00:00
Daniel J Walsh
01a9ba841e - Latest upgrade from NSA
Moved processing of role and user require statements to 2nd pass.
2006-03-23 16:14:03 +00:00
Daniel J Walsh
af7b9d6c00 - Latest upgrade from NSA
Updated version for release.
Fixed bug in role dominance (define_role_dom).
2006-03-17 18:36:26 +00:00
Daniel J Walsh
dcec148fc4 - Latest upgrade from NSA
Added a check for failure to declare each sensitivity in a level
    definition.
Changed to clone level data for aliased sensitivities to avoid double free
    upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
2006-02-17 20:00:08 +00:00
Daniel J Walsh
d0cfe1d1ab - Latest upgrade from NSA
Added a check for failure to declare each sensitivity in a level
    definition.
Changed to clone level data for aliased sensitivities to avoid double free
    upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
2006-02-16 18:44:15 +00:00
Daniel J Walsh
6d151699a3 - Latest upgrade from NSA
Merged optionals in base patch from Joshua Brindle.
2006-02-13 19:31:17 +00:00
Daniel J Walsh
bc40ef4345 - Need to build again 2006-02-13 15:28:42 +00:00
Jesse Keating
f6e3697d00 bump for bug in double-long on ppc(64) 2006-02-11 02:15:00 +00:00
Daniel J Walsh
7cb707226a - Latest upgrade from NSA
Merged sepol_av_to_string patch from Joshua Brindle.
2006-02-07 15:33:17 +00:00
Jesse Keating
6c329b1c58 bump for new gcc/glibc 2006-02-07 11:14:04 +00:00
Daniel J Walsh
41344977f8 - Rebuild to get latest libsepol 2006-01-13 22:33:16 +00:00
Daniel J Walsh
d8a7f7e3b2 - Rebuild to get latest libsepol 2006-01-05 22:02:52 +00:00
Daniel J Walsh
7f0d3160ab - Rebuild to get latest libsepol 2006-01-05 21:58:33 +00:00
Daniel J Walsh
55423c321d - Rebuild to get latest libsepol 2006-01-04 18:55:25 +00:00
Daniel J Walsh
b1640a4ffb - Rebuild to get latest libsepol 2005-12-16 14:18:43 +00:00
Jesse Keating
aba9acb9b5 gcc update bump 2005-12-09 22:39:58 +00:00
Daniel J Walsh
6300e4418d - Latest upgrade from NSA 2005-12-09 18:24:24 +00:00
Daniel J Walsh
428c7aa7cd - Latest upgrade from NSA
Merged checkmodule man page from Dan Walsh, and edited it.
2005-12-04 13:13:34 +00:00
Daniel J Walsh
e8c9487983 - Latest upgrade from NSA
Added error checking of all ebitmap_set_bit calls for out of memory
    conditions.
Merged removal of compatibility handling of netlink classes (requirement
    that policies with newer versions include the netlink class
    definitions, remapping of fine-grained netlink classes in newer source
    policies to single netlink class when generating older policies) from
    George Coker.
2005-12-01 20:02:47 +00:00
Daniel J Walsh
671fd361f0 - Rebuild to get latest libsepol 2005-11-10 02:44:34 +00:00
Daniel J Walsh
647b078eee - Rebuild to get latest libsepol 2005-11-08 23:42:05 +00:00
Daniel J Walsh
72ae42ae01 - Rebuild to get latest libsepol 2005-11-07 14:50:52 +00:00
Daniel J Walsh
6b2bcc3c72 - Rebuild to get latest libsepol 2005-11-03 15:48:45 +00:00
Daniel J Walsh
a7259909df - Rebuild to get latest libsepol 2005-10-31 21:03:46 +00:00
Daniel J Walsh
e003d30798 - Rebuild to get latest libsepol 2005-10-28 19:25:01 +00:00
Daniel J Walsh
f4574040bd - Latest upgrade from NSA
Merged dismod fix from Joshua Brindle.
2005-10-25 19:18:26 +00:00
Daniel J Walsh
33c5c28812 - Latest upgrade from NSA
Removed obsolete cond_check_type_rules() function and call and
    cond_optimize_lists() call from checkpolicy.c; these are handled during
    parsing and expansion now.
Updated calls to expand_module for interface change.
Changed checkmodule to verify that expand_module succeeds when building
    base modules.
Merged module compiler fixes from Joshua Brindle.
Removed direct calls to hierarchy_check_constraints() and
    check_assertions() from checkpolicy since they are now called
    internally by expand_module().
2005-10-21 18:48:50 +00:00
Daniel J Walsh
af4dd8d071 - Latest upgrade from NSA
Removed obsolete cond_check_type_rules() function and call and
    cond_optimize_lists() call from checkpolicy.c; these are handled during
    parsing and expansion now.
Updated calls to expand_module for interface change.
Changed checkmodule to verify that expand_module succeeds when building
    base modules.
Merged module compiler fixes from Joshua Brindle.
Removed direct calls to hierarchy_check_constraints() and
    check_assertions() from checkpolicy since they are now called
    internally by expand_module().
2005-10-20 20:34:02 +00:00
Daniel J Walsh
acfce4cb75 - Latest upgrade from NSA
Updated for changes to sepol policydb_index_others interface.
2005-10-18 18:27:54 +00:00
Daniel J Walsh
b1c24f328b - Latest upgrade from NSA
Updated for changes to sepol expand_module and link_modules interfaces.
Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2
- Rebuild to get latest libsepol
2005-10-18 14:17:02 +00:00
Daniel J Walsh
f0af6ae6b8 - Rebuild to get latest libsepol 2005-10-15 12:27:09 +00:00
Daniel J Walsh
571771b17d - Latest upgrade from NSA
Merged support for require blocks inside conditionals from Joshua Brindle
    (Tresys).
2005-10-14 12:31:36 +00:00
Karsten Hopp
c7eb5fa60e - add buildrequirement for libselinux-devel for dispol 2005-10-12 12:02:45 +00:00
Daniel J Walsh
1b6c428fd8 - Latest upgrade from NSA
Updated for changes to libsepol.
2005-10-10 13:00:20 +00:00
Daniel J Walsh
e191585b52 - Rebuild to get latest libsepol 2005-10-07 14:19:15 +00:00
Daniel J Walsh
b8c325caf1 - Latest upgrade from NSA
Merged several bug fixes from Joshua Brindle (Tresys).
2005-10-06 16:08:53 +00:00
Daniel J Walsh
43314203eb - Latest upgrade from NSA
Merged MLS in modules patch from Joshua Brindle (Tresys).
2005-10-04 18:02:36 +00:00
Daniel J Walsh
1bc86e3fa3 - Rebuild to get latest libsepol 2005-10-03 13:23:30 +00:00
Daniel J Walsh
e21e3bfb9d - Latest upgrade from NSA
Merged error handling improvement in checkmodule from Karl MacMillan
    (Tresys).
2005-09-29 01:18:06 +00:00
Daniel J Walsh
d3c90af390 - Latest upgrade from NSA
Merged bugfix for dup role transition error messages from Karl MacMillan
    (Tresys).
2005-09-27 19:00:56 +00:00
Daniel J Walsh
c95e46a95f - Rebuild to get latest libsepol 2005-09-21 18:23:46 +00:00
Daniel J Walsh
e34019964c - Latest upgrade from NSA
Fixed parse_categories handling of undefined category.
2005-09-21 14:18:23 +00:00
Daniel J Walsh
ba974b169b - Latest upgrade from NSA
Merged bug fix for role dominance handling from Darrel Goeddel (TCS).
Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
- Rebuild to get latest libsepol
2005-09-17 11:40:23 +00:00
Daniel J Walsh
a9313a61a4 - Rebuild to get latest libsepol 2005-09-15 14:55:49 +00:00
Daniel J Walsh
af1d472265 - Rebuild to get latest libsepol 2005-09-14 19:36:33 +00:00
Daniel J Walsh
7ba2db9576 - Latest upgrade from NSA
Updated version for release.
- Rebuild to get latest libsepol
2005-09-12 20:30:47 +00:00
Daniel J Walsh
edf32bd45a - Rebuild to get latest libsepol 2005-09-01 16:17:07 +00:00
Daniel J Walsh
0f4afaf913 - Rebuild to get latest libsepol 2005-08-29 14:22:45 +00:00