4235807de2- Turn off messages in audit2why
Daniel J Walsh
2010-06-25 21:05:56 +0000
5abec270e9- Update to upstream Add const qualifiers to public API where appropriate by KaiGai Kohei.
Daniel J Walsh
2010-06-16 13:23:15 +0000
982ffdc3f5- Update to upstream Fix from Eric Paris to fix leak on non-selinux systems. regenerate swig wrappers pkgconfig fix to respect LIBDIR from Dan Walsh.
Daniel J Walsh
2010-03-08 13:14:35 +0000
68c8d967fd- Update to upstream Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. Fix compilation of label_file.c with latest glibc headers.
Daniel J Walsh
2010-02-24 19:12:12 +0000
de078cb3d5- Fix man page for selinuxdefcon
Daniel J Walsh
2010-01-18 21:59:45 +0000
995afc05f3- Fix man page for selinuxdefcon
Daniel J Walsh
2010-01-18 21:44:50 +0000
1f46a5f18fMon Jam 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-2 - Free memory on disabled selinux boxes
Daniel J Walsh
2010-01-04 22:17:33 +0000
76ecedb2d0- Update to upstream add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>. Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>
Daniel J Walsh
2009-12-01 21:18:45 +0000
6014312b2eFix typo that causes a failure to update the common directory. (releng #2781)
Bill Nottingham
2009-11-25 23:51:16 +0000
4ed79e3521- Fix selinuxdefcon man page
Daniel J Walsh
2009-11-23 18:32:48 +0000
ac492a22d6- Update to upstream Add pkgconfig file from Eamon Walsh.
Daniel J Walsh
2009-11-02 18:11:50 +0000
a69064eb95- Update to upstream Add pkgconfig file from Eamon Walsh.
Daniel J Walsh
2009-11-02 18:01:05 +0000
8a570f443e- Update to upstream Rename and export selinux_reset_config()
Daniel J Walsh
2009-10-29 19:36:32 +0000
510eba6977- Update to upstream Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. make swigify Make matchpathcon print <<none>> if path not found in fcontext file.
Daniel J Walsh
2009-09-28 20:33:26 +0000
d3cc14428b- Eliminate -pthread switch in Makefile
Daniel J Walsh
2009-09-15 19:24:22 +0000
9afde8153b- Update to upstream Removal of reference counting on userspace AVC SID's.
Daniel J Walsh
2009-09-08 13:09:19 +0000
fa621852dc- Update to upstream Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. Removed fini_context_translations() altogether. Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.
Daniel J Walsh
2009-07-14 15:29:55 +0000
23660c5dba- Update to upstream Add per-service seuser support from Dan Walsh. Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.
Daniel J Walsh
2009-07-07 16:26:11 +0000
94187eeda7- Add provices ruby(selinux)
Daniel J Walsh
2009-06-24 21:37:23 +0000
a66522107b- Update to upstream Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>. Label substitution support from Dan Walsh. Support for labeling virtual machine images from Dan Walsh.
Daniel J Walsh
2009-06-23 19:54:03 +0000
d6966f294b- Update to upstream Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>. Label substitution support from Dan Walsh. Support for labeling virtual machine images from Dan Walsh.
Daniel J Walsh
2009-06-23 19:40:42 +0000
403bfa5085- Update to upstream Trim / from the end of input paths to matchpathcon from Dan Walsh. Fix leak in process_line in label_file.c from Hiroshi Shinji. Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. getdefaultcon to print just the correct match and add verbose option from Dan Walsh.
Daniel J Walsh
2009-05-18 18:22:22 +0000
c1ed6edd9a- Update to upstream deny_unknown wrapper function from KaiGai Kohei. security_compute_av_flags API from KaiGai Kohei. Netlink socket management and callbacks from KaiGai Kohei.
Daniel J Walsh
2009-04-08 13:08:53 +0000
2f2316f496- Fix Memory Leak
Daniel J Walsh
2009-04-03 14:05:22 +0000
d6eb0cea47- Fix Memory Leak
Daniel J Walsh
2009-04-03 12:58:07 +0000
261c72abdb- Fix crash in python
Daniel J Walsh
2009-04-02 13:36:47 +0000
f6ba4d34de- Add back in additional interfaces
Daniel J Walsh
2009-03-29 15:18:28 +0000
55f4c91ff1- Add back in av_decision to python swig
Daniel J Walsh
2009-03-27 20:39:31 +0000
974a6e4ad2- Add back in av_decision to python swig
Daniel J Walsh
2009-03-27 18:25:16 +0000
c86e2e8d59- Update to upstream Netlink socket handoff patch from Adam Jackson. AVC caching of compute_create results by Eric Paris.
Daniel J Walsh
2009-03-12 12:57:57 +0000
ada6d88f6b- Add eparis patch to accellerate Xwindows performance
Daniel J Walsh
2009-03-09 15:52:25 +0000
79bb8b19a2- Fix URL
Daniel J Walsh
2009-03-09 14:03:12 +0000
3da9d84fdc- Add substitute pattern - matchpathcon output <<none>> on ENOENT
Daniel J Walsh
2009-03-06 21:31:10 +0000
07ae258133- Update to upstream Fix incorrect conversion in discover_class code.
Daniel J Walsh
2009-03-02 18:21:46 +0000
49eae3b63b- Update to upstream
Daniel J Walsh
2009-01-06 14:31:47 +0000
e672e99f9d- Strip trailing / for matchpathcon
Daniel J Walsh
2008-12-19 20:17:53 +0000
0c692a5a64- Fix segfault if seusers file does not work
Daniel J Walsh
2008-12-16 14:38:49 +0000
d9847be233- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default
Daniel J Walsh
2008-12-12 16:15:27 +0000
cd000f17c0- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default
Daniel J Walsh
2008-12-12 15:21:10 +0000
fdb97bc4bbRebuild for Python 2.6
Ignacio Vazquez-Abrams
2008-11-29 16:48:05 +0000
4d61602917- Update to Upstream Allow shell-style wildcards in x_contexts file.
Daniel J Walsh
2008-11-22 21:01:27 +0000
f53982306d- Update to Upstream Allow shell-style wildcards in x_contexts file.
Daniel J Walsh
2008-11-21 21:06:11 +0000
8222e32ca0Fix a typo in the restorecon method, and import the stat module.
Luke Macken
2008-11-18 21:25:09 +0000
f4a6eb5febThe restorecon method needs the stat module as well
Luke Macken
2008-11-17 20:26:34 +0000
896e46d7d4Fix a typo in the restorecon method of the libselinux-rhat patch
Luke Macken
2008-11-17 20:23:52 +0000
41931f8d57- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken
Daniel J Walsh
2008-11-17 15:27:48 +0000
d3b013d124- Update to Upstream Correct message types in AVC log messages. Make matchpathcon -V pass mode from Dan Walsh. Add man page for selinux_file_context_cmp from Dan Walsh.
Daniel J Walsh
2008-11-07 14:08:36 +0000
3898d8da39- Update to Upstream New man pages from Dan Walsh. Update flask headers from refpolicy trunk from Dan Walsh.
Daniel J Walsh
2008-09-30 13:30:18 +0000
3578778806- Add flask definitions for open, X and nlmsg_tty_audit
Daniel J Walsh
2008-09-22 17:52:30 +0000
15c5a627bc- Add missing get/setkeycreatecon man pages
Daniel J Walsh
2008-09-09 20:24:22 +0000
fa0215ab2a- Split out utilities
Daniel J Walsh
2008-09-09 19:07:33 +0000
ac4e772e3d- Add missing man page links for [lf]getfilecon
Daniel J Walsh
2008-09-09 18:45:26 +0000
7a7d4171f1Fix patch
Daniel J Walsh
2008-08-05 14:30:33 +0000
7918b2858e- Update to Upstream Add group support to seusers using %groupname syntax from Dan Walsh. Mark setrans socket close-on-exec from Stephen Smalley. Only apply nodups checking to base file contexts from Stephen Smalley.
Daniel J Walsh
2008-08-05 14:05:15 +0000
86ce8d44b1- Update to Upstream Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname
Daniel J Walsh
2008-08-01 10:56:37 +0000
0397b472b7- Update to Upstream Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. Fix audit2why shadowed variables from Stephen Smalley. Note that freecon NULL is legal in man page from Karel Zak.
Daniel J Walsh
2008-07-29 18:37:01 +0000
d0a06b2c34- Update to Upstream Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. Fix audit2why shadowed variables from Stephen Smalley. Note that freecon NULL is legal in man page from Karel Zak.
Daniel J Walsh
2008-07-29 13:22:45 +0000
ee778682f8- Add ruby support for puppet
Daniel J Walsh
2008-07-09 20:57:21 +0000
c56d166bb6- Rebuild for new libsepol
Daniel J Walsh
2008-07-08 12:07:38 +0000
ea56feab06- Add Karel Zak patch for freecon man page
Daniel J Walsh
2008-06-29 12:31:00 +0000
e434a93ac5- Update to Upstream New and revised AVC, label, and mapping man pages from Eamon Walsh. Add swig python bindings for avc interfaces from Dan Walsh.
Daniel J Walsh
2008-06-26 12:14:16 +0000
6359e2ad79- Update to Upstream New and revised AVC, label, and mapping man pages from Eamon Walsh. Add swig python bindings for avc interfaces from Dan Walsh.
Daniel J Walsh
2008-06-22 13:48:37 +0000
fc4f6a4f7d- Update to Upstream Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
Daniel J Walsh
2008-06-22 13:42:52 +0000
bff583b68b- Update to Upstream Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
Daniel J Walsh
2008-05-28 14:15:30 +0000
454774e22dremove telinit -u, no longer needed
Daniel J Walsh
2008-05-16 19:04:17 +0000
792921f4eb- Add sedefaultcon and setconlist commands to dump login context
Daniel J Walsh
2008-05-07 17:34:12 +0000
1209c857ab- Update to Upstream Fixed selinux_set_callback man page. Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. Fix memory leaks in matchpathcon from Eamon Walsh.
Daniel J Walsh
2008-04-22 20:59:01 +0000
d87adcfe95- Add avc.h to swig code
Daniel J Walsh
2008-04-14 18:54:09 +0000
9d13c9cd97- Update to Upstream Man page typo fix from Jim Meyering.
Daniel J Walsh
2008-04-01 04:16:52 +0000
7384c1eccaChanged selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.
Daniel J Walsh
2008-03-23 11:32:37 +0000
4594aed06b- Update to Upstream Merged new X label "poly_selection" namespace from Eamon Walsh.
Daniel J Walsh
2008-02-29 20:24:11 +0000
0984abe5d8- Update to Upstream Merged reset_selinux_config() for load policy from Dan Walsh.
Daniel J Walsh
2008-02-28 21:06:47 +0000
baab9d46ea- Reload library on loading of policy to handle chroot
Daniel J Walsh
2008-02-28 16:58:02 +0000
73272f9b7d- Update to Upstream Merged avc_has_perm() errno fix from Eamon Walsh.
Daniel J Walsh
2008-02-25 20:51:42 +0000
3cb08a5330- Update to Upstream Regenerated Flask headers from refpolicy flask definitions.
Daniel J Walsh
2008-02-22 17:41:12 +0000
198adb1f17- Update to Upstream Merged compute_member AVC function and manpages from Eamon Walsh. Provide more error reporting on load policy failures from Stephen Smalley.
Daniel J Walsh
2008-02-13 16:18:16 +0000
099d39a6e5- Update to Upstream Merged new X label "poly_prop" namespace from Eamon Walsh.
Daniel J Walsh
2008-02-08 15:45:10 +0000
fc1475fc7f- Update to Upstream Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.
Daniel J Walsh
2008-02-06 21:46:59 +0000
8f9ecf5890- Update to Upstream Merged fix for audit2why from Dan Walsh.
Daniel J Walsh
2008-01-29 13:29:32 +0000
213643620c- Fix audit2why to grab latest policy versus the one selected by the kernel
Daniel J Walsh
2008-01-25 16:11:42 +0000
e4623197a5Merged audit2why python binding from Dan Walsh.
Daniel J Walsh
2008-01-23 21:52:01 +0000
c633d69a56Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
Daniel J Walsh
2008-01-23 19:40:26 +0000
Dan Walsh
Jesse Keating
Adam Tkac
Fedora Release Engineering
Daniel J Walsh
dmalcolm
Bill Nottingham
Jesse Keating
Ignacio Vazquez-Abrams
Luke Macken