rpms/libsepol
5
0
Fork 0
Code Issues Pull Requests Releases Activity
281 Commits 7 Branches 24 Tags 799 KiB
d88ffa19a4
Commit Graph

263 Commits

Author SHA1 Message Date
Dan Walsh
6eec04097e Update to upstream 
* Only call role_fix_callback for base.p_roles during expansion.
	* use mapped role number instead of module role number
 2011-08-18 06:58:25 -04:00
Dan Walsh
a98ce44d26 Update to upstream 
* Release, minor version bump
 2011-07-28 11:35:27 -04:00
Dan Walsh
b7b88e49b7 Update to upstream 
* Warn if filename_trans rules are dropped by Steve Lawrence.
 2011-05-03 09:40:22 -04:00
Dan Walsh
1a403b0896 Fixes for new role_transition class field by Eric Paris. 2011-04-21 11:25:56 -04:00
Dan Walsh
6e97542597 Update to upstream 
* Fixes for new role_transition class field by Eric Paris.
	* Add libsepol support for filename_trans rules by Eric Paris.
 2011-04-14 08:52:33 -04:00
Dan Walsh
554824b9da Latest patches 2011-04-12 13:11:15 -04:00
Dan Walsh
53af5b6865 re-add Erics patch for filename transitions 
Update to upstream
	* Add new class field in role_transition by Harry Ciao.
 2011-04-12 10:36:13 -04:00
Dan Walsh
a3a7288b5c * Give correct names to mount points in load_policy by Dan Walsh. 
* Make sure selinux state is reported correctly if selinux is disabled or
	fails to load by Dan Walsh.
	* Fix crash if selinux_key_create was never called by Dan Walsh.
	* Add new file_context.subs_dist for distro specific filecon substitutions
	by Dan Walsh.
	* Update man pages for selinux_color_* functions by Richard Haines.
 2011-04-12 10:03:13 -04:00
Dan Walsh
92502fe369 Apply Eparis Patch 
This patch add libsepol support for filename_trans rules.  These rules
allow on to make labeling decisions for new objects based partially on
the last path component.  They are stored in a list.  If we find that
the number of rules grows to an significant size I will likely choose to
store these in a hash, both in libsepol and in the kernel.  But as long
as the number of such rules stays small, this should be good.
 2011-03-29 15:27:36 -04:00
Dennis Gilmore
65043ab531 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 05:21:04 -06:00
Dan Walsh
60894b281e - Upgrade to latest from NSA 
* Fix compliation under GCC 4.6 by Justin Mattock
 2010-12-22 14:56:26 -05:00
Dan Walsh
9788767c5c - Upgrade to latest from NSA 
* Fix compliation under GCC 4.6 by Justin Mattock
 2010-12-21 16:43:33 -05:00
Dan Horák
a7387c80ed - Fix libsepol.pc file 2010-06-17 07:38:54 +00:00
Daniel J Walsh
83e7a5b3fa - Resolve specfile problems Resolves: #555835 2010-01-28 21:04:22 +00:00
Daniel J Walsh
90faed0461 - Resolve specfile problems Resolves: #555835 2010-01-28 21:03:34 +00:00
Daniel J Walsh
aca479dae3 - Upgrade to latest from NSA 
Fixed typo in error message from Manoj Srivastava.
 2009-11-18 22:16:47 +00:00
Daniel J Walsh
a5bd29455e - Upgrade to latest from NSA 
Add pkgconfig file from Eamon Walsh.
 2009-11-02 18:11:36 +00:00
Daniel J Walsh
7f9cab778e - Upgrade to latest from NSA 
Add pkgconfig file from Eamon Walsh.
 2009-11-02 18:00:00 +00:00
Daniel J Walsh
31a56530a4 - Upgrade to latest from NSA 
Add support for building Xen policies from Paul Nuzzi.
 2009-10-29 19:27:40 +00:00
Daniel J Walsh
ad2013ee23 - Upgrade to latest from NSA 
Check last offset in the module package against the file size. Reported by
    Manoj Srivastava for bug filed by Max Kellermann.
 2009-09-08 13:08:11 +00:00
Jesse Keating
be396c6d8c - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-25 08:36:05 +00:00
Daniel J Walsh
cd4e504b6b - Upgrade to latest from NSA 
Add method to check disable dontaudit flag from Christopher Pardy.
 2009-07-07 19:33:40 +00:00
Daniel J Walsh
4ce335c44c - Upgrade to latest from NSA 
Fix boolean state smashing from Joshua Brindle.
 2009-03-25 20:37:52 +00:00
Daniel J Walsh
a2f29b67b1 - Fix license specification to be LGPL instead of GPL 2009-03-05 20:17:12 +00:00
Jesse Keating
47d254b60b - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-25 18:02:46 +00:00
Daniel J Walsh
848ca5cad6 - Upgrade to latest from NSA 
Fix alias field in module format, caused by boundary format change from
    Caleb Case.
 2009-02-18 21:47:17 +00:00
Daniel J Walsh
d13ce1e89d - Upgrade to latest from NSA 
Add bounds support from KaiGai Kohei.
Fix invalid aliases bug from Joshua Brindle.
 2008-11-07 14:11:04 +00:00
Daniel J Walsh
f25671b55a - Upgrade to latest from NSA 
Revert patch that removed expand_rule.
 2008-09-30 13:31:29 +00:00
Daniel J Walsh
962484ceef - Upgrade to latest from NSA 
Allow require then declare in the source policy from Joshua Brindle.
 2008-07-07 17:51:57 +00:00
Daniel J Walsh
38eb295021 - Upgrade to latest from NSA 
Fix mls_semantic_level_expand() to handle a user require w/o MLS
    information from Stephen Smalley.
 2008-06-22 13:52:55 +00:00
Daniel J Walsh
d7c858894a - Upgrade to latest from NSA 
Fix endianness bug in the handling of network node addresses from Stephen
    Smalley. Only affects big endian platforms. Bug reported by John Weeks
    of Sun upon policy mismatch between x86 and sparc.
 2008-06-11 12:16:46 +00:00
Daniel J Walsh
073e5ba19d - Upgrade to latest from NSA 
Merge user and role mapping support from Joshua Brindle.
 2008-05-28 14:18:54 +00:00
Daniel J Walsh
0f848837f2 - Upgrade to latest from NSA 
Merge user and role mapping support from Joshua Brindle.
 2008-05-28 14:16:58 +00:00
Daniel J Walsh
5249d73d8d - Upgrade to latest from NSA 
Fix mls_level_convert() to gracefully handle an empty user
    declaration/require from Stephen Smalley.
Belatedly merge test for policy downgrade from Todd Miller.
 2008-05-19 17:19:04 +00:00
Daniel J Walsh
f21dcfb077 - Upgrade to latest from NSA 
Add permissive domain support from Eric Paris.
 2008-03-27 17:22:50 +00:00
Daniel J Walsh
c5d82f51bd - Upgrade to latest from NSA 
Drop unused ->buffer field from struct policy_file.
Add policy_file_init() initalizer for struct policy_file and use it, from
    Todd C. Miller.
 2008-03-13 23:46:46 +00:00
Daniel J Walsh
e6e6048d2a - Upgrade to latest from NSA 
Accept "Flask" as an alternate identifier string in kernel policies from
    Stephen Smalley.
Add support for open_perms policy capability from Eric Paris.
 2008-02-28 21:02:13 +00:00
Daniel J Walsh
c24f89b2b2 - Upgrade to latest from NSA 
Fix invalid memory allocation in policydb_index_others() from Jason Tang.
 2008-02-20 18:48:48 +00:00
Daniel J Walsh
d0df7f69ca - Upgrade to latest from NSA 
Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the
    kernel avtab to libsepol from Stephen Smalley.
 2008-02-04 17:22:25 +00:00
Daniel J Walsh
8f9d76f061 - Upgrade to latest from NSA 
Add support for consuming avrule_blocks during expansion to reduce peak
    memory usage.
 2008-02-02 21:41:20 +00:00
Daniel J Walsh
0ca4a0a26c - Upgrade to latest from NSA 
Add support for consuming avrule_blocks during expansion to reduce peak
    memory usage.
 2008-02-02 21:39:44 +00:00
Daniel J Walsh
3e3efa7317 - Fixed for spec review 2008-01-21 20:56:18 +00:00
Daniel J Walsh
0ab5c85098 - Fixed for spec review 2008-01-21 20:42:49 +00:00
Daniel J Walsh
66f43a65e2 - Upgrade to latest from NSA 
Added support for policy capabilities from Todd Miller.
Prevent generation of policy.18 with MLS enabled from Todd Miller.
 2008-01-11 18:52:04 +00:00
Daniel J Walsh
a98dcaf709 - Upgrade to latest from NSA 
print module magic number in hex on mismatch, from Todd Miller.
 2007-12-11 02:53:58 +00:00
Daniel J Walsh
f823e8b3e9 - Upgrade to latest from NSA 
clarify and reduce neverallow error reporting from Stephen Smalley.
 2007-11-30 20:09:52 +00:00
Daniel J Walsh
54e869d983 - Upgrade to latest from NSA 
Reject self aliasing at link time from Stephen Smalley.
Allow handle_unknown in base to be overridden by semanage.conf from Stephen
    Smalley.
Fixed bug in require checking from Stephen Smalley.
Added user hierarchy checking from Todd Miller.
 2007-11-06 17:55:04 +00:00
Daniel J Walsh
cd3ee0bcf9 Pass CFLAGS to CC even on link command, per Dennis Gilmore. 2007-09-27 00:23:36 +00:00
Daniel J Walsh
340f7ecf02 - Upgrade to latest from NSA 
Merged support for the handle_unknown policydb flag from Eric Paris.
 2007-09-18 20:29:51 +00:00
Daniel J Walsh
9b4f035756 - Upgrade to latest from NSA 
Moved next_entry and put_entry out-of-line to reduce code size from Ulrich
    Drepper.
Fixed module_package_read_offsets bug introduced by the prior patch.
 2007-08-31 14:16:54 +00:00
Daniel J Walsh
e034fd16cd - Upgrade to latest from NSA 
Moved next_entry and put_entry out-of-line to reduce code size from Ulrich
    Drepper.
Fixed module_package_read_offsets bug introduced by the prior patch.
 2007-08-31 12:42:21 +00:00
Daniel J Walsh
b79588c078 - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-28 17:35:57 +00:00
Daniel J Walsh
d7175a2f83 - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-24 17:56:05 +00:00
Daniel J Walsh
b08149358f - Upgrade to latest from NSA 
Eliminate unaligned accesses from policy reading code from Stephen Smalley.
 2007-08-23 20:54:04 +00:00
Daniel J Walsh
7a9ae4d69d - Upgrade to latest from NSA 
Allow dontaudits to be turned off during policy expansion
 2007-08-20 23:20:34 +00:00
Daniel J Walsh
58a8c31c4d - Upgrade to latest from NSA 
Fix sepol_context_clone to handle a NULL context correctly. This happens
    for e.g. semanage_fcontext_set_con(sh, fcontext, NULL) to set the file
    context entry to "<<none>>".
- Apply patch from Joshua Brindle to disable dontaudit rules
 2007-08-11 11:01:41 +00:00
Daniel J Walsh
63e1b4a423 - Upgrade to latest from NSA 
Merged error handling patch from Eamon Walsh.
 2007-06-21 14:42:58 +00:00
Daniel J Walsh
d036a5297d - Upgrade to latest from NSA 
Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.
 2007-04-17 12:35:30 +00:00
Daniel J Walsh
53a0908255 - Upgrade to latest from NSA 
Merged fix from Karl to remap booleans at expand time to avoid holes in the
    symbol table.
 2007-03-30 16:05:14 +00:00
Daniel J Walsh
f50a75ee09 Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-1 
- Upgrade to latest from NSA
Merged libsepol segfault fix from Stephen Smalley for when sensitivities
    are required but not present in the base.
Merged patch to add errcodes.h to libsepol by Karl MacMillan.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
- Upgrade to latest from NSA
Updated version for stable branch.
 2007-03-28 18:55:21 +00:00
Daniel J Walsh
91512f93d1 - Upgrade to latest from NSA 
Merged libsepol segfault fix from Stephen Smalley for when sensitivities
    are required but not present in the base.
Merged patch to add errcodes.h to libsepol by Karl MacMillan.
Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
- Upgrade to latest from NSA
Updated version for stable branch.
 2007-02-07 17:18:00 +00:00
Daniel J Walsh
86fc00abee - Upgrade to latest from NSA 
Updated version for stable branch.
 2007-01-19 13:56:29 +00:00
Daniel J Walsh
7e8492d68d - Upgrade to latest from NSA 
Updated version for stable branch.
 2007-01-19 13:55:32 +00:00
Adam Jackson
57b6fc103f - Add dist tag and rebuild, fixes 6 to 7 upgrades. 2006-12-12 18:59:40 +00:00
Daniel J Walsh
e5a8dba063 - Upgrade to latest from NSA 
Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to
    prevent hitting the global offest table limit. Patch changed to include
    libselinux and libsemanage in addition to libselinux.
 2006-11-28 14:28:05 +00:00
Daniel J Walsh
a92b818305 - Upgrade to latest from NSA 
Merged fix from Karl MacMillan for a segfault when linking non-MLS modules
    with users in them.
 2006-11-01 15:06:55 +00:00
Daniel J Walsh
a3a13a236e - Upgrade to latest from NSA 
Merged fix for version comparison that was preventing range transition
    rules from being written for a version 5 base policy from Darrel
    Goeddel.
 2006-10-24 16:51:25 +00:00
Daniel J Walsh
288632e7be - NSA Released version - Same as previous but changed release number 2006-10-17 16:50:19 +00:00
Daniel J Walsh
04bc0ce6f1 - Upgrade to latest from NSA 
Build libsepol's static object files with -fpic
 2006-10-17 15:57:37 +00:00
Daniel J Walsh
dd59fb41a8 - Upgrade to latest from NSA 
Merged mls user and range_transition support in modules from Darrel Goeddel
 2006-09-28 15:03:27 +00:00
Daniel J Walsh
d51bbdb93e - Upgrade to latest from NSA 
Merged range transition enhancements and user format changes Darrel Goeddel
 2006-09-06 16:00:04 +00:00
Daniel J Walsh
6a90efc69e - Fix location of include directory to devel package 2006-08-25 20:08:16 +00:00
Daniel J Walsh
bfedd4e581 - Remove invalid Requires 2006-08-25 14:20:16 +00:00
Steve Grubb
bfcdb6e3f6 Added a Requires tag to prevent breakage when people don't upgrade 
everything
 2006-08-24 22:30:08 +00:00
Daniel J Walsh
156e9314f0 - Upgrade to latest from NSA 
Merged conditionally expand neverallows patch from Jeremy Mowery.
Merged refactor expander patch from Jeremy Mowery.
 2006-08-24 18:11:15 +00:00
Daniel J Walsh
f55a71fe00 - Upgrade to latest from NSA 
Merged libsepol unit tests from Joshua Brindle.
Merged symtab datum patch from Karl MacMillan.
Merged netfilter contexts support from Chris PeBenito.
 2006-08-03 20:26:10 +00:00
Daniel J Walsh
285dda519b - Upgrade to latest from NSA 
Merged symtab datum patch from Karl MacMillan.
Merged netfilter contexts support from Chris PeBenito.
 2006-08-03 15:23:51 +00:00
Daniel J Walsh
ae2ff08973 - Upgrade to latest from NSA 
Merged helpful hierarchy check errors patch from Joshua Brindle.
Merged semodule_deps patch from Karl MacMillan. This adds source module
    names to the avrule decls.
 2006-08-01 14:07:40 +00:00
Jesse Keating
31fdd8d749 bumped for rebuild 2006-07-12 06:55:59 +00:00
Daniel J Walsh
c4ad64e188 - Upgrade to latest from NSA 
Lindent.
Merged optionals in base take 2 patch set from Joshua Brindle.
 2006-07-05 02:24:55 +00:00
Bill Nottingham
79de5158e3 bump so it's newer than the FC5 version 2006-06-14 00:41:22 +00:00
Daniel J Walsh
6ab7e34097 - Upgrade to latest from NSA 
Revert 1.12.16.
Merged cleaner fix for bool_ids overflow from Karl MacMillan, replacing the
    prior patch.
Merged fixes for several memory leaks in the error paths during policy read
    from Serge Hallyn.
 2006-06-05 18:48:30 +00:00
Daniel J Walsh
56091823e1 - Upgrade to latest from NSA 
Fixed bool_ids overflow bug in cond_node_find and cond_copy_list, based on
    bug report and suggested fix by Cedric Roux.
Merged sens_copy_callback, check_role_hierarchy_callback, and
    node_from_record fixes from Serge Hallyn.
 2006-05-30 13:09:42 +00:00
Daniel J Walsh
4e6d19ba49 - Upgrade to latest from NSA 
Added sepol_policydb_compat_net() interface for testing whether a policy
    requires the compatibility support for network checks to be enabled in
    the kernel.
 2006-05-23 10:22:38 +00:00
Daniel J Walsh
af05b5a855 - Upgrade to latest from NSA 
Merged patch to initialize sym_val_to_name arrays from Kevin Carr. Reworked
    to use calloc in the first place, and converted some other
    malloc/memset pairs to calloc calls.
 2006-05-18 16:13:02 +00:00
Daniel J Walsh
ba09d11b46 - Upgrade to latest from NSA 
Merged patch to revert role/user decl upgrade from Karl MacMillan.
 2006-05-15 13:55:31 +00:00
Steve Grubb
2e432e52e4 - Couple minor spec file clean ups 2006-05-11 18:23:26 +00:00
Daniel J Walsh
c53a1651b7 - Upgrade to latest from NSA 
Dropped tests from all Makefile target.
Merged fix warnings patch from Karl MacMillan.
Merged libsepol test framework patch from Karl MacMillan.
 2006-05-08 15:02:44 +00:00
Daniel J Walsh
aa55ea3c11 - Upgrade to latest from NSA 
Merged fix warnings patch from Karl MacMillan.
Merged libsepol test framework patch from Karl MacMillan.
 2006-05-08 14:15:58 +00:00
Daniel J Walsh
9b242c95dc - Upgrade to latest from NSA 
Merged fix warnings patch from Karl MacMillan.
Merged libsepol test framework patch from Karl MacMillan.
 2006-05-08 13:58:26 +00:00
Daniel J Walsh
c704b5731d - Upgrade to latest from NSA 
Fixed cond_normalize to traverse the entire cond list at link time.
 2006-05-01 18:37:16 +00:00
Daniel J Walsh
d927fe6e5d - Upgrade to latest from NSA 
Merged fix for leak of optional package sections from Ivan Gyurdiev.
 2006-04-05 17:43:10 +00:00
Daniel J Walsh
adbebcb7e5 - Upgrade to latest from NSA 
Generalize test for bitmap overflow in ebitmap_set_bit.
 2006-03-29 20:36:50 +00:00
Daniel J Walsh
058dbc84ac - Upgrade to latest from NSA 
Fixed attr_convert_callback and expand_convert_type_set typemap bug.
 2006-03-27 22:04:50 +00:00
Daniel J Walsh
d808811bca - Upgrade to latest from NSA 
Fixed avrule_block_write num_decls endian bug.
 2006-03-24 17:58:27 +00:00
Daniel J Walsh
9affa071e4 - Upgrade to latest from NSA 
Fixed avrule_block_write num_decls endian bug.
 2006-03-24 17:57:31 +00:00
Daniel J Walsh
2405135ad9 - Upgrade to latest from NSA 
Fixed sepol_module_package_write buffer overflow bug.
 2006-03-20 20:24:57 +00:00
Daniel J Walsh
9901b10108 - Upgrade to latest from NSA 
Updated version for release.
Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
Merged sepol_policydb_mls_enabled interface and error handling changes from
    Ivan Gyurdiev.
 2006-03-17 18:39:47 +00:00
Daniel J Walsh
71e431529d - Upgrade to latest from NSA 
Updated version for release.
Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
Merged sepol_policydb_mls_enabled interface and error handling changes from
    Ivan Gyurdiev.
 2006-03-17 17:11:39 +00:00
Daniel J Walsh
405ea9b4e0 - Rebuild for fc5-head 
Fri Feb 17 2006 Dan Walsh <dwalsh@redhat.com> 1.11.18-1
- Upgrade to latest from NSA
Merged node_expand_addr bugfix and node_compare* change from Ivan Gyurdiev.
 2006-02-21 03:32:41 +00:00