Commit Graph

118 Commits

Author SHA1 Message Date
Petr Lautrbach
d46add191f SELinux userspace 3.2 release 2021-03-08 17:24:40 +01:00
Petr Lautrbach
c239d45a05 SELinux userspace 3.2-rc2 release 2021-02-05 13:04:40 +01:00
Petr Lautrbach
6185b68d31 SELinux userspace 3.2-rc1 release
https://lore.kernel.org/selinux/87a6t36bpp.fsf@redhat.com/T/#u
2021-01-21 10:19:30 +01:00
Petr Lautrbach
54b53e380c checkpolicy-3.1-1
- SELinux userspace 3.1 release
2020-07-10 20:27:21 +02:00
Petr Lautrbach
ca4ac5b32e SELinux userspace 3.0 release 2019-12-06 10:16:44 +01:00
Petr Lautrbach
bf308d366f SELinux userspace 3.0-rc1 release candidate 2019-11-11 12:04:40 +01:00
Petr Lautrbach
6dfecce4ee SELinux userspace 2.9 release 2019-03-18 18:00:54 +01:00
Petr Lautrbach
32b01b4b5d SELinux userspace 2.9-rc2 release 2019-03-11 17:24:22 +01:00
Petr Lautrbach
445c9b4a2f SELinux userspace 2.9-rc1 release candidate 2019-01-30 10:25:45 +01:00
Petr Lautrbach
04fa4fd788 checkpolicy-2.8-1
- SELinux userspace 2.8 release
2018-05-25 12:18:07 +02:00
Petr Lautrbach
5d411cd10a SELinux userspace 2.8-rc3 release candidate 2018-05-15 10:36:24 +02:00
Petr Lautrbach
ccff9f365f SELinux userspace 2.8-rc1 release candidate 2018-04-23 16:05:04 +02:00
Petr Lautrbach
980d2c8c0c checkpolicy-2.7-1
- Update to upstream release 2017-08-04
2017-08-07 17:17:57 +02:00
Petr Lautrbach
269e7db87e checkpolicy-2.6-1
- Update to upstream release 2016-10-14
2017-02-20 12:36:39 +01:00
Petr Lautrbach
ce5393bbac checkpolicy-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 22:47:35 +01:00
Petr Lautrbach
cfa584572b checkpolicy-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 13:42:03 +01:00
Petr Lautrbach
76fb2b6d10 Update to 2.4 release 2015-07-20 18:53:21 +02:00
Dan Walsh
946ad38fd1 Update to upstream
* Add Android support for building dispol.
	* Report source file and line information for neverallow failures.
	* Prevent incompatible option combinations for checkmodule.
	* Drop -lselinux from LDLIBS for test programs; not used.
	* Add debug feature to display constraints/validatetrans from Richard Haines.
2014-05-06 14:20:14 -04:00
Dan Walsh
eddfbe52c6 UPdate to upstream 2013-10-31 09:21:49 -04:00
Dan Walsh
02cf4abf2d Update to upstream
* Fix errors found by coverity
        * implement default type policy syntax
        * Free allocated memory when clean up / exit.
2013-02-07 13:40:56 -05:00
rhatdan
1057df92ca Update to upstream
* fd leak reading policy
	* check return code on ebitmap_set_bit
2012-09-13 13:29:17 -04:00
Dan Walsh
f5401fa228 Update to upstream
* sepolgen: We need to support files that have a + in them
	* Android/MacOS X build support
2012-07-04 07:24:23 -04:00
Dan Walsh
9f8377e4c3 Update to upstream
* implement new default labeling behaviors for usr, role, range
	* Fix dead links to www.nsa.gov/selinux
2012-03-29 15:28:08 -04:00
Dan Walsh
1e9a9d79a0 Update to upstream
* add new helper to translate class sets into bitmaps
2011-12-21 17:59:52 +00:00
Dan Walsh
5ea3e823bf Upgrade to upstream
* dis* fixed signed vs unsigned errors
	* dismod: fix unused parameter errors
	* test: Makefile: include -W and -Werror
	* allow ~ in filename transition rules
Allow policy to specify the source of target for generating the default user,role
or mls label for a new target.
2011-12-15 14:30:26 -05:00
Dan Walsh
1e7f3c93f0 Upgrade to upstream
* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
	* drop libsepol dynamic link in checkpolicy
2011-11-04 09:27:03 -04:00
Dan Walsh
911694cf55 Update to upstream
* Separate tunable from boolean during compile.
2011-09-19 06:50:16 -04:00
Dan Walsh
68f262fbdb Update to upstream
* checkpolicy: fix spacing in output message
2011-08-30 16:15:26 -04:00
Dan Walsh
e87652be15 * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 07:00:03 -04:00
Dan Walsh
5bae77199e * add missing ; to attribute_role_def
*Redo filename/filesystem syntax to support filename trans
2011-08-18 06:51:40 -04:00
Dan Walsh
72448b2ce3 Update to upstream 2011-07-28 11:42:26 -04:00
Dan Walsh
5eaf35502b Update to upstream
* Wrap file names in filename transitions with quotes by Steve Lawrence.
	* Allow filesystem names to start with a digit by James Carter.
	* Add support for using the last path compnent in type transitions by Eric
2011-05-23 18:25:07 -04:00
Dan Walsh
66140a0889 Latest patches 2011-04-12 13:12:30 -04:00
Dan Walsh
5ea14e8ebf - Latest update from NSA
* Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
2010-12-21 16:41:10 -05:00
Daniel J Walsh
ff8894ce82 - Latest update from NSA
Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
- Allow policy version to be one number
2010-06-16 12:11:21 +00:00
Daniel J Walsh
7c6d84d139 - Latest update from NSA
Add support for building Xen policies from Paul Nuzzi.
Add long options to checkpolicy and checkmodule by Guido Trentalancia
    <guido@trentalancia.com>
2009-12-01 22:50:19 +00:00
Daniel J Walsh
69181ce9f3 - Latest update from NSA
Fix alias field in module format, caused by boundary format change from
    Caleb Case.
2009-02-18 21:54:40 +00:00
Daniel J Walsh
d9e3ea1a9d - Latest update from NSA
Update checkpolicy for user and role mapping support from Joshua Brindle.
2008-05-28 15:15:49 +00:00
Daniel J Walsh
ce4fbaf6a7 - Latest update from NSA
Add permissive domain support from Eric Paris.
2008-04-14 19:34:07 +00:00
Daniel J Walsh
3181c033e3 - Latest update from NSA
Split out non-grammar parts of policy_parse.yacc into policy_define.c and
    policy_define.h from Todd C. Miller.
Initialize struct policy_file before using it, from Todd C. Miller.
Remove unused define, move variable out of .y file, simplify COND_ERR, from
    Todd C. Miller.
2008-03-14 00:24:03 +00:00
Daniel J Walsh
e22ff16832 - Latest update from NSA
Use yyerror2() where appropriate from Todd C. Miller.
- Build against latest libsepol
2008-02-28 21:57:00 +00:00
Daniel J Walsh
d793dcb07e - Latest update from NSA
Update dispol for libsepol avtab changes from Stephen Smalley.
2008-02-04 17:24:34 +00:00
Daniel J Walsh
1257a8cea9 - Latest update from NSA
Deprecate role dominance in parser.
2008-01-25 16:19:00 +00:00
Daniel J Walsh
4dd1371296 - Update to use libsepol-static library 2008-01-21 21:42:58 +00:00
Daniel J Walsh
5c3895bc13 - Latest update from NSA
Initialize the source file name from the command line argument so that
    checkpolicy/checkmodule report something more useful than "unknown
    source".
Merged remove use of REJECT and trailing context in lex rules; make ipv4
    address parsing like ipv6 from James Carter.
2007-11-15 18:41:43 +00:00
Daniel J Walsh
5d693896f6 Merged handle unknown policydb flag support from Eric Paris. Adds new
command line options -U {allow, reject, deny} for selecting the flag
    when a base module or kernel policy is built.
2007-09-19 00:20:03 +00:00
Daniel J Walsh
4bd6947fff - Latest update from NSA
Merged fix for segfault on duplicate require of sensitivity from Caleb
    Case.
Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
2007-06-04 19:21:50 +00:00
Daniel J Walsh
7b7e59092d - Latest update from NSA
Merged checkmodule man page fix from Dan Walsh.
2007-04-12 20:05:28 +00:00
Daniel J Walsh
c1870cdf3a - Latest update from NSA
Merged patch to allow dots in class identifiers from Caleb Case.
2007-02-20 14:59:15 +00:00
Daniel J Walsh
1ec43fbb6a - Latest update from NSA
Merged patch to use new libsepol error codes by Karl MacMillan.
Updated version for stable branch.
2007-02-07 21:42:36 +00:00