Dan Walsh
697e7c645d
Update translations
...
- Fix segfault on restorecon
2012-04-05 10:16:30 -04:00
Dan Walsh
186fd9068c
Allow filename transitions to use + in a file name
2012-04-03 18:58:26 -04:00
Dan Walsh
071409ede1
Change policycoreutils-python to require -devel package
2012-03-30 15:39:04 -04:00
Dan Walsh
273033cb24
Update to upstream
...
- policycoreutils
* sandbox: do not propogate inside mounts outside
* sandbox: Removing sandbox init script, should no longer be necessary
* restorecond: Stop using deprecated interfaces for g_io
* semanage: proper auditting of user changes for LSPP
* semanage: audit message to show what record(s) and item(s) have chaged
* scripts: Update Makefiles to handle /usrmove
* mcstrans: Version should have been bumped on last check in
* seunshare: Only drop caps not the Bounding Set from seunshare
* Add bash-completion scripts for setsebool and semanage
* newrole: Use correct capng calls in newrole
* Fix infinite loop with inotify on 2.6.31 kernels
* fix ftbfs with hardening flags
* Only run setfiles if we found read-write filesystems to run it on
* update .po files
* remove empty po files
* do not fail to install if unable to make load_policy lnk file
2012-03-30 15:18:42 -04:00
Dan Walsh
821c8a5d61
On full relabels we will now show a estimated percent complete rather then
...
just *s.
2012-02-03 12:14:36 -05:00
Dan Walsh
a0ea1de748
Add unit_file.py for sepolgen
2012-02-01 08:44:52 -05:00
Dan Walsh
d4088bfa91
Stop syslogging on full restore
...
- Stop syslogging when restorecon is not changing values
2012-01-31 10:58:23 -05:00
Dan Walsh
662a1ad3a8
Change semanage to produce proper audit records for Common Criteria
...
- Cleanup packaging for usrmove
2012-01-27 14:09:12 -05:00
Dan Walsh
132b0f633b
Add ability to send proper audit messages to semanage
2012-01-27 13:24:08 -05:00
Harald Hoyer
1eac07342c
fixed load_policy location
2012-01-26 18:20:15 +01:00
Harald Hoyer
f8bca8aa02
fixed load_policy location
2012-01-26 18:05:23 +01:00
Harald Hoyer
626dd026d1
fixed load_policy location
2012-01-26 17:23:18 +01:00
Harald Hoyer
05b05a3209
add filesystem guard
2012-01-25 21:12:58 +01:00
Harald Hoyer
b4f656f9ce
removed ln -s /sbin/restorecon /usr/sbin/restorecon
2012-01-25 14:34:39 +01:00
Harald Hoyer
53f4a4c7dc
install everything in /usr
...
This patch is needed for the /usr-move feature
https://fedoraproject.org/wiki/Features/UsrMove
This package requires now 'filesystem' >= 3, which is only installable
on a system which has /bin, /sbin, /lib, /lib64 as symlinks to /usr and
not regular directories. The 'filesystem' package acts as a guard, to
prevent *this* package to be installed on old unconverted systems.
New installations will have the 'filesystem' >=3 layout right away, old
installations need to be converted with anaconda or dracut first; only
after that, the 'filesystem' package, and also *this* package can be
installed.
Packages *should* not install files in /bin, /sbin, /lib, /lib64, but
only in the corresponding directories in /usr. Packages *must* not
install conflicting files with the same names in the corresponding
directories in / and /usr. Especially compatibilty symlinks must not be
installed.
Feel free to modify any of the changes to the spec file, but keep the
above in mind.
2012-01-25 14:22:37 +01:00
Dan Walsh
acc953768b
restorecond fixes:
...
Stop using depracated g_io interfaces
Exit with non zero exit code if wrong options given
Add -h option
2012-01-24 11:26:46 -05:00
Dan Walsh
68264eb77e
Eliminate not needed Requires
2012-01-19 09:38:34 -05:00
Dan Walsh
685c820b6d
fix sepolgen to not crash on echo "" | audit2allow
...
Remove sandbox init script, should no longer be necessary
2012-01-18 16:43:57 -05:00
Dan Walsh
3886f5e4a9
Remove sandbox init script, should no longer be necessary
2012-01-16 14:40:22 -05:00
Dan Walsh
6312df65b6
Add unit file support to sepolgen, and cleanup some of the output.
2012-01-15 16:51:27 -05:00
Dan Walsh
db51c1ef98
Fix English in templates for sepolgen
2012-01-09 16:30:19 -05:00
Dan Walsh
42e269dd3c
Fix the handling of namespaces in seunshare/sandbox.
...
Currently mounting of directories within sandbox is propogating to the
parent namesspace.
2011-12-23 10:08:38 +00:00
Dan Walsh
6525007747
Add umount code to seunshare to cleanup left over mounts of /var/tmp
2011-12-22 18:59:59 +00:00
Dan Walsh
414b6a904d
Update to upstream
...
sepolgen
* better analysis of why things broke
policycoreutils
* Remove excess whitespace
* sandbox: Add back in . functions to sandbox.init script
* Fix Makefile to match other policycoreutils Makefiles
* semanage: drop unused translation getopt
2011-12-21 18:18:01 +00:00
Dan Walsh
1bf48c8679
Bump libsepol version requires rebuild
2011-12-16 06:23:26 -05:00
Dan Walsh
977eb87438
Bump libsepol version requires rebuild
2011-12-15 16:35:47 -05:00
Dan Walsh
1bb3b98779
Add back accidently dropped patches for semanage
2011-12-07 09:40:36 -05:00
Dan Walsh
076ffc0b0a
Upgrade to upstream
...
* sandbox: move sandbox.conf.5 to just sandbox.5
* po: Makefile use -p to preserve times to allow multilib simultatious installs
* of po files
* sandbox: Allow user to specify the DPI value for X in a sandbox
* sandbox: make sure the domain launching sandbox has at least 100 categories
* sandbox: do not try forever to find available category set
* sandbox: only complain if sandbox unable to launch
* sandbox: init script run twice is still successful
* semanage: print local and dristo equiv rules
* semanage: check file equivalence rules for conflict
* semanage: Make sure semanage fcontext -l -C prints even if local keys
* are not defined
* semanage: change src,dst to target,substitute for equivalency
* sestatus: Updated sestatus and man pages.
* Added SELinux config file man page.
* add clean target to man Makefile
2011-12-06 19:30:28 -05:00
Dan Walsh
6b9bc0eb8f
Fix dpi handling in sandbox
...
Make sure semanage fcontext -l -C prints if only local equiv have changed
2011-11-29 15:58:56 -05:00
Dan Walsh
c165d4c12a
Fix dpi handling in sandbox
2011-11-29 15:25:50 -05:00
Dan Walsh
e0ffc386e8
Add listing of distribution equivalence class from semanage fcontext -l
...
Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence
Allow ~ as a valid part of a filename in sepolgen
2011-11-16 15:41:18 -05:00
Dan Walsh
97d6c28e36
Allow ~ as a valid part of a filename in sepolgen
2011-11-16 11:26:11 -05:00
Dan Walsh
35a1c24b59
sandbox init script should always return 0
...
sandbox command needs to check range of categories and report error if not big enough
2011-11-11 15:25:44 -05:00
Dan Walsh
e71cb0d5d0
Allow user to specify DPI when running sandbox
2011-11-07 15:56:15 -05:00
Dan Walsh
6119a6b9f8
Add Miroslav patch to return all attributes
2011-11-07 15:15:28 -05:00
Dan Walsh
2c4e323ce5
Upgrade to policycoreutils upstream
...
* sandbox: Maintain the LANG environment into the sandbox
* audit2allow: use audit2why internally
* fixfiles: label /root but not /var/lib/BackupPC
* semanage: update local boolean settings is dealing with localstore
* semanage: missing modify=True
* semanage: set modified correctly
* restorecond: make restorecond dbuss-able
* restorecon: Always check return code on asprintf
* restorecond: make restorecond -u exit when terminal closes
* sandbox: introduce package name and language stuff
* semodule_package: remove semodule_unpackage on clean
* fix sandbox Makefile to support DESTDIR
* semanage: Add -o description to the semanage man page
* make use of the new realpath_not_final function
* setfiles: close /proc/mounts file when finished
* semodule: Document semodule -p in man page
* setfiles: fix use before initialized
* restorecond: Add .local/share as a directory to watch
Upgrade to sepolgen upstream
* Ignore permissive qualifier if found in an interface
* Return name field in avc data
2011-11-04 10:47:42 -04:00
Dan Walsh
2392ca1483
A couple of minor coverity fixes for a potential leaked file descriptor
...
An an unchecked return code.
Add ~/.local/share/* to restorecond_user watches
2011-10-28 16:47:40 -04:00
Dan Walsh
4f4e4913d7
Have sepolgen return name field in AVC
2011-10-13 13:29:56 -04:00
Dan Walsh
6c13d007c9
restorecond -u needs to watch terminal for exit if run outside of dbus.
2011-10-06 16:07:50 -04:00
Dan Walsh
ebadcd67f7
Do not drop capabilities if running newrole as root
2011-10-04 08:36:06 -04:00
Dan Walsh
3507aa6632
Update to upstream
...
* semanage: fix indentation error in seobject
2011-09-30 09:28:53 -04:00
Dan Walsh
b6236f9023
Ignore permissive commands in interfaces
2011-09-29 10:56:39 -04:00
Dan Walsh
e5b91b64fc
Remove gnome requirement from polgengui
2011-09-29 10:09:48 -04:00
Dan Walsh
b91e98e2c2
Update to upstream
...
policycoreutils-2.1.6
* sepolgen-ifgen: new attr-helper does something
* audit2allow: use alternate policy file
* audit2allow: sepolgen-ifgen use the attr helper
* setfiles: switch from stat to stat64
* setfiles: Fix potential crash using dereferenced ftsent
* setfiles: do not wrap * output at 80 characters
* sandbox: add -Wall and -Werror to makefile
* sandbox: add sandbox cgroup support
* sandbox: rewrite /tmp handling
* sandbox: do not bind mount so much
* sandbox: add level based kill option
* sandbox: cntrl-c should kill entire process control group
* Create a new preserve_tunables flag in sepol_handle_t.
* semanage: show running and disk setting for booleans
* semanage: Dont print heading if no items selected
* sepolgen: audit2allow is mistakakenly not allowing valid module names
* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
* More files to ignore
* tree: default make target to all not install
* sandbox: do not load unused generic init functions
sepolgen-1.1.2
* src: sepolgen: add attribute storing infrastructure
* Change perm-map and add open to try to get better results on
* look for booleans that might solve problems
* sepolgen: audit2allow is mistakakenly not allowing valid module names
* tree: default make target to all not install
2011-09-19 07:40:39 -04:00
Dan Walsh
64a1a56e71
Change separator on -L from ; to :
2011-09-14 22:08:19 -04:00
Dan Walsh
2d6eafee19
Add back lockdown wizard for booleans using pywebkitgtk
2011-09-08 09:47:43 -04:00
Dan Walsh
78175de296
Maintain the LANG environment Variable into the sandbox
...
Change restorecon/setfiles to only change type part of the context unless
f qualifier is given
2011-09-07 14:23:19 -04:00
Dan Walsh
fb1cfc265c
Remove lockdown wizard, since gtkhtml2 is no longer supported.
2011-09-06 13:19:19 -04:00
Dan Walsh
04b2851781
Allow setfiles and restorecon to use labeledprefix to speed up processing
...
and limit memory.
2011-09-02 09:24:40 -04:00
Dan Walsh
42466e2b7e
Update to upstream
...
* policycoreutils
* setfiles: Fix process_glob to handle error situations
* sandbox: Allow seunshare to run as root
* sandbox: trap sigterm to make sure sandbox
* sandbox: pass DPI from the desktop
* sandbox: seunshare: introduce helper spawn_command
* sandbox: seunshare: introduce new filesystem helpers
* sandbox: add -C option to not drop
* sandbox: split seunshare caps dropping
* sandbox: use dbus-launch
* sandbox: numerous simple updates to sandbox
* sandbox: do not require selinux context
* sandbox: Makefile: new man pages
* sandbox: rename dir to srcdir
* sandbox: allow users specify sandbox window size
* sandbox: check for paths up front
* sandbox: use defined values for paths rather
* sandbox: move seunshare globals to the top
* sandbox: whitespace fix
* semodule_package: Add semodule_unpackage executable
* setfiles: get rid of some stupid globals
* setfiles: move exclude_non_seclabel_mounts to a generic location
* sepolgen
* refparser: include open among valid permissions
* refparser: add support for filename_trans rules
2011-08-30 16:32:33 -04:00
Dan Walsh
8b0727dc56
Fix bug in glob handling for restorecon
2011-08-23 17:13:19 -04:00
Dan Walsh
dafba41234
Update to upstream
...
2.1.4 2011-08-17
* run_init: clarification of the usage in the
* semanage: fix usage header around booleans
* semanage: remove useless empty lines
* semanage: update man page with new examples
* semanage: update usage text
* semanage: introduce file context equivalencies
* semanage: enable and disable modules
* semanage: output all local modifications
* semanage: introduce extraction of local configuration
* semanage: cleanup error on invalid operation
* semanage: handle being called with no arguments
* semanage: return sooner to save CPU time
* semanage: surround getopt with try/except
* semanage: use define/raise instead of lots of
* semanage: some options are only valid for
* semanage: introduce better deleteall support
* semanage: do not allow spaces in file
* semanage: distinguish between builtin and local permissive
* semanage: centralized ip node handling
* setfiles: make the restore function exclude() non-static
* setfiles: use glob to handle ~ and
* fixfiles: do not hard code types
* fixfiles: stop trying to be smart about
* fixfiles: use new kernel seclabel option
* fixfiles: pipe everything to cat before sending
* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
* semodule: support for alternative root paths
2011-08-22 13:35:58 -04:00
Dan Walsh
831d6fd46c
Update to upstream
...
2.1.4 2011-08-17
* run_init: clarification of the usage in the
* semanage: fix usage header around booleans
* semanage: remove useless empty lines
* semanage: update man page with new examples
* semanage: update usage text
* semanage: introduce file context equivalencies
* semanage: enable and disable modules
* semanage: output all local modifications
* semanage: introduce extraction of local configuration
* semanage: cleanup error on invalid operation
* semanage: handle being called with no arguments
* semanage: return sooner to save CPU time
* semanage: surround getopt with try/except
* semanage: use define/raise instead of lots of
* semanage: some options are only valid for
* semanage: introduce better deleteall support
* semanage: do not allow spaces in file
* semanage: distinguish between builtin and local permissive
* semanage: centralized ip node handling
* setfiles: make the restore function exclude() non-static
* setfiles: use glob to handle ~ and
* fixfiles: do not hard code types
* fixfiles: stop trying to be smart about
* fixfiles: use new kernel seclabel option
* fixfiles: pipe everything to cat before sending
* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
* semodule: support for alternative root paths
2011-08-18 07:23:59 -04:00
Dan Walsh
a648c6f239
Change seunshare to send kill signals to the childs session.
...
Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.
2011-07-07 14:53:37 -04:00
Dan Walsh
af0f4926da
Change seunshare to send kill signals to the childs session.
...
Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.
2011-07-07 14:37:24 -04:00
Dan Walsh
8dbd4d49f6
dd new restorecond service
2011-07-05 17:18:12 -04:00
Dan Walsh
759501823b
Add -C option to sandbox and seunshare to maintain capabilities, otherwise
...
the bounding set will be dropped.
Change --cgroups short name -c rather then -C for consistancy
Fix memory and fd leaks in seunshare
2011-07-05 16:51:18 -04:00
Dan Walsh
173e9f90db
Do not drop capability bounding set in seunshare, this allows sandbox to
...
run setuid apps.
2011-06-13 13:37:04 -04:00
Dan Walsh
24d29a5015
Add semanage-bash-completion.sh script
2011-06-10 16:33:08 -04:00
Dan Walsh
299d98087e
Remove mount -o bind calls from sandbox init script
...
pam_namespace now has this built in.
2011-06-07 13:58:41 -04:00
Dan Walsh
dc86b007cf
Pass desktop dpi to sandbox Xephyr window
2011-06-07 08:37:18 -04:00
Dan Walsh
c2ef4a0bea
Allow semodule to pick alternate root for selinux files
...
Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.
2011-06-06 13:01:14 -04:00
Dan Walsh
93a347a42a
Fix var_spool template read_spool_files
...
Fix sepolgen to handle filename transitions
2011-05-25 16:20:29 -04:00
Dan Walsh
ed0051b493
Templates cleanedup by Dominic Grift
2011-05-23 17:05:41 -04:00
Dan Walsh
0b324049b3
Clean up some of the templates for sepolgen
2011-04-29 11:50:14 -04:00
Dan Walsh
4a56398540
Apply patches from Christoph A.
...
* fix sandbox title
* stop xephyr from li
Also ignore errors on sandbox include of directory missing files
2011-04-22 07:06:23 -04:00
Dan Walsh
e1285d4541
rebuild versus latest libsepol
2011-04-21 12:02:06 -04:00
Dan Walsh
588030fc2c
Change fixfiles restore to delete unlabeled sockets in /tmp
2011-04-18 13:18:18 -04:00
Dan Walsh
61f1bc2068
Change fixfiles restore to delete unlabeled sockets in /tmp
2011-04-18 12:47:15 -04:00
Dan Walsh
822e503b13
rebuild versus latest libsepol
2011-04-18 09:28:27 -04:00
Dan Walsh
9f65a26864
Update to upstream
...
* Use correct color range in mcstrand by Richard Haines.
2011-04-13 16:52:53 -04:00
Dan Walsh
8acc019498
rsynccmd should run outside of execcon
2011-04-01 13:29:38 -04:00
Dan Walsh
1da0399e25
rsynccmd should run outside of execcon
2011-03-30 14:42:36 -04:00
Dan Walsh
be38aa471e
Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
2011-03-03 13:35:37 -05:00
Dan Walsh
a710a4e711
- Fix sandbox policy creation with udp connect ports
2011-02-03 17:05:41 -05:00
Dan Walsh
433953b033
- Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
...
- Cleanup chcat man page
2011-02-03 16:15:43 -05:00
Dan Walsh
331e9ad06d
- Report full errors on OSError on Sandbox
2011-02-02 13:34:22 -05:00
Dan Walsh
e764b2d2b6
- Fix newrole hanlding of pcap
2011-01-21 15:11:31 -05:00
Dan Walsh
971f278f98
- Have restorecond watch more directories in homedir
2011-01-19 16:45:53 -05:00
Dan Walsh
01e471247b
- Add sandbox to sepolgen
2011-01-14 16:37:43 -05:00
Dan Walsh
afa2535b24
- Add sandbox to sepolgen
2011-01-14 14:39:26 -05:00
Dan Walsh
12eb5b45f4
- Fix proper handling of getopt errors
...
- Do not allow modules names to contain spaces
2011-01-10 14:39:21 -05:00
Dan Walsh
c76dc0c642
- Polgengui raises the wrong type of exception. #471078
...
- Change semanage to not allow it to semanage module -D
- Change setsebool to suggest run as root on failure
2011-01-06 14:38:19 -05:00
Dan Walsh
448a84b06a
- Polgengui raises the wrong type of exception. #471078
...
- Change semanage to not allow it to semanage module -D
2011-01-04 17:23:27 -05:00
Dan Walsh
18119ffd24
- Fix restorecond watching utmp file for people logging in our out
2010-12-22 14:38:46 -05:00
Dan Walsh
b1a3235896
- Update to upstream
2010-12-21 16:20:42 -05:00
Dan Walsh
a548207cc4
- Change to allow sandbox to run on nfs homedirs, add start python script
2010-12-21 16:20:01 -05:00
Dan Walsh
8937a040d8
- Change to allow sandbox to run on nfs homedirs, add start python script
2010-12-15 16:47:38 -05:00
Dan Walsh
3108046cf7
- Move seunshare to sandbox package
2010-12-15 14:15:49 -05:00
Dan Walsh
6c80e8dc19
- Fix sandbox to show correct types in usage statement
2010-11-30 12:09:48 -05:00
Dan Walsh
8c1d9b0f48
- Stop fixfiles from complaining about missing dirs
2010-11-29 10:14:39 -05:00
Dan Walsh
f0e85a70d6
- Update to upstream
...
- List types available for sandbox in usage statement
2010-11-24 13:41:52 -05:00
Dan Walsh
af19df0f00
- Don't report error on load_policy when system is disabled.
2010-11-22 13:50:29 -05:00
Dan Walsh
b9b7f4161c
- Fix up problems pointed out by solar designer on dropping capabilities
2010-11-08 15:12:25 -05:00
Dan Walsh
d7e1c238f4
- Check if you have full privs and reset otherwise dont drop caps
2010-11-01 16:21:00 -04:00
Dan Walsh
cdcc4526b7
- Fix setools require line
2010-11-01 09:50:12 -04:00
Dan Walsh
622bb69d77
- Move /etc/pam.d/newrole in to polcicycoreutils-newrole
...
- Additiona capability checking in sepolgen
2010-10-29 09:39:03 -04:00
Dan Walsh
9852e61813
- Remove setuid flag and replace with file capabilities
...
- Fix sandbox handling of files with spaces in them
2010-10-25 17:25:34 -04:00
Jesse Keating
c9df11e933
- Rebuilt for gcc bug 634757
2010-09-29 15:05:42 -07:00
Dan Walsh
cccd96b8cf
- Move restorecond into its own subpackage
2010-09-23 16:23:05 -04:00
Dan Walsh
e500ad80f0
* Wed Jul 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-9
...
- Update selinux-polgengui to sepolgen policy generation
2010-07-30 11:19:53 -04:00
Daniel J Walsh
57906a7d95
* Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-7
...
- Update translations
2010-07-27 13:59:26 +00:00
Daniel J Walsh
3fd25d56a5
* Mon Jul 26 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-6
...
- Fix sandbox man page
2010-07-26 15:58:23 +00:00
Daniel J Walsh
1eab65cee2
* Tue Jul 20 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-6
...
- Fix sandbox man page
2010-07-26 15:33:31 +00:00
dmalcolm
dee9b43382
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
2010-07-22 03:01:32 +00:00
Daniel J Walsh
d6510fbca2
* Tue Jul 20 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-4
...
- Add translations for menus
- Fixup man page from Russell Coker
2010-07-20 13:18:18 +00:00
Daniel J Walsh
614ca03ae7
* Tue Jun 15 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-3
...
- Change python scripts to use -s flag
- Update po
2010-07-13 17:32:51 +00:00
Daniel J Walsh
73342918cd
* Tue Jun 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-30
...
- Add cgroup support for sandbox
2010-06-08 19:13:40 +00:00
Daniel J Walsh
c6d112a36e
* Mon Jun 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-29
...
- Allow creation of /var/cache/DOMAIN from sepolgen
2010-06-07 20:48:46 +00:00
Daniel J Walsh
70b2ff10d0
* Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-28
...
- Fix sandbox init script
- Add dbus-launch to sandbox -X
Resolve : #599599
2010-06-03 21:14:18 +00:00
Daniel J Walsh
9ff9a87a26
* Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-27
...
- Move genhomedircon.8 to same package as genhomedircon
- Fix sandbox to pass unit test
Resolves : #595796
2010-06-03 15:04:52 +00:00
Daniel J Walsh
85a18e3dcc
* Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-27
...
- Move genhomedircon.8 to same package as genhomedircon
- Fix sandbox to pass unit test
Resolves : #595796
2010-06-03 15:04:49 +00:00
Daniel J Walsh
d98a8977c6
* Wed Jun 2 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-26
...
- Fix listing of booleans from audit2allow
2010-06-02 15:48:11 +00:00
Daniel J Walsh
829762e693
* Thu May 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-24
...
- Man page fixes
- sandbox fixes
Resolves : #595796
- Move seunshare to base package
2010-05-27 21:23:08 +00:00
Daniel J Walsh
be45950990
* Thu Feb 16 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-1
...
- Update to upstream
* Fix double-free in newrole
- Fix python language handling
2010-02-16 21:35:16 +00:00
Daniel J Walsh
fc6c93ebeb
* Thu Feb 16 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-1
...
- Update to upstream
* Fix double-free in newrole
2010-02-16 19:49:37 +00:00
Daniel J Walsh
ee3649bda5
* Thu Feb 11 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-21
...
- Fix display of command in sandbox
2010-02-11 18:24:55 +00:00
Daniel J Walsh
e7737e34ea
* Wed Feb 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-19
...
- Fix seobject and fixfiles
2010-02-03 20:24:35 +00:00
Daniel J Walsh
c8f4893a95
* Wed Feb 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-18
...
- Fix seobject and fixfiles
2010-02-03 16:42:37 +00:00
Daniel J Walsh
db71b70994
* Fri Jan 29 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-17
...
- Change seobject to use translations properly
2010-02-01 14:40:42 +00:00
Daniel J Walsh
ab47b01339
* Thu Jan 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-16
...
- Cleanup spec file
Resolves: 555835
2010-01-28 20:51:21 +00:00
Daniel J Walsh
fc6e11b600
* Thu Jan 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-15
...
- Add use_resolve to sepolgen
2010-01-28 17:19:01 +00:00
Daniel J Walsh
dd674534b4
* Wed Jan 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-14
...
- Add session capability to sandbox
- sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession
2010-01-27 21:52:27 +00:00
Daniel J Walsh
88295c72ea
* Thu Jan 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-13
...
- Fix executable template for fifo files
2010-01-21 14:35:19 +00:00
Daniel J Walsh
5b80bc7b2c
* Tue Jan 19 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-12
...
- Fix patch xod xmodmap
- Exit 0 from script
2010-01-19 17:28:01 +00:00
Daniel J Walsh
a02089d628
* Thu Jan 14 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-11
...
- Run with the same xdmodmap in sandbox as outside
- Patch from Josh Cogliati
2010-01-19 17:25:36 +00:00
Daniel J Walsh
54e6651778
* Thu Jan 14 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-11
...
- Run with the same xdmodmap in sandbox as outside
- Patch from Josh Cogliati
2010-01-14 21:34:51 +00:00
Daniel J Walsh
fc860fa036
* Fri Jan 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-10
...
- Fix sepolgen to not generate user sh section on non user policy
2010-01-08 15:22:16 +00:00
Daniel J Walsh
6c22c6b1f6
* Fri Jan 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-9
...
- Add -e to semanage man page
- Add -D qualifier to audit2allow to generate dontaudit rules
2010-01-08 14:37:32 +00:00
Daniel J Walsh
0779b0302c
* Wed Jan 6 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-8
...
- Speed up audit2allow processing of audit2why comments
2010-01-06 20:51:36 +00:00
Daniel J Walsh
6ed2be87b5
* Wed Jan 6 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-8
...
- Speed up audit2allow processing of audit2why comments
2010-01-06 20:49:27 +00:00
Daniel J Walsh
29b74ccd7d
* Fri Dec 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-7
...
- Fixes to sandbox man page
2009-12-21 21:56:27 +00:00
Daniel J Walsh
beaed6f629
* Thu Dec 17 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-6
...
- Add setools-libs-python to requires for gui
2009-12-17 13:24:23 +00:00
Daniel J Walsh
37227819c9
* Wed Dec 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-5
...
- If restorecond running as a user has no files to watch then it should exit. (NFS Homedirs)
2009-12-16 21:18:04 +00:00
Daniel J Walsh
a1bf0daa6c
* Wed Dec 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-5
...
- If restorecond running as a user has no files to watch then it should exit. (NFS Homedirs)
2009-12-16 13:21:49 +00:00
Daniel J Walsh
79944fd474
* Tue Dec 8 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-3
...
- Fix audit2allow to report constraints, dontaudits, types, booleans
2009-12-09 21:33:50 +00:00
Daniel J Walsh
3fbc112632
* Tue Dec 1 2009 Dan Walsh <dwalsh@redhat.com> 2.0.78-1
...
- Update to upstream
* Remove non-working OUTFILE from fixfiles from Dan Walsh.
* Additional exception handling in chcat from Dan Walsh.
2009-12-01 21:17:45 +00:00
Daniel J Walsh
f3a1cbae2a
* Tue Nov 24 2009 Dan Walsh <dwalsh@redhat.com> 2.0.77-1
...
- Update to upstream
* Fixed bug preventing semanage node -a from working
from Chad Sellers
* Fixed bug preventing semanage fcontext -l from working
from Chad Sellers
- Change semanage to use unicode
2009-11-24 15:30:53 +00:00
Daniel J Walsh
e973847bf6
* Wed Nov 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.76-1
...
- Update to upstream
* Remove setrans management from semanage, as it does not work
from Dan Walsh.
* Move load_policy from /usr/sbin to /sbin from Dan Walsh.
2009-11-18 22:20:42 +00:00
Daniel J Walsh
4e4a82e887
* Mon Nov 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.75-3
...
- Raise exception if user tries to add file context with an embedded space
2009-11-16 21:54:45 +00:00
Daniel J Walsh
a1e42cb153
* Wed Nov 11 2009 Dan Walsh <dwalsh@redhat.com> 2.0.75-2
...
- Fix sandbox to setsid so it can run under mozilla without crashing the session
2009-11-11 21:56:23 +00:00
Daniel J Walsh
942b683f29
* Tue Nov 2 2009 Dan Walsh <dwalsh@redhat.com> 2.0.75-1
...
- Update to upstream
* Factor out restoring logic from setfiles.c into restore.c
2009-11-09 21:12:58 +00:00
Daniel J Walsh
44bb682976
* Fri Oct 30 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-15
...
- Fix typo in seobject.py
2009-11-02 16:40:00 +00:00
Daniel J Walsh
8cf3bcfdee
* Fri Oct 30 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-14
...
- Allow semanage -i and semanage -o to generate customization files.
- semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration
2009-10-30 21:01:42 +00:00
Daniel J Walsh
d189740fc7
* Mon Oct 19 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-12
...
- Add generation of the users context file to polgengui
2009-10-19 19:05:28 +00:00
Daniel J Walsh
573cd1c340
* Fri Oct 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-11
...
- Remove tabs from system-config-selinux glade file
2009-10-16 14:46:45 +00:00
Daniel J Walsh
bf48090916
* Thu Oct 15 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-10
...
- Remove translations screen from system-config-selinux
2009-10-15 21:46:14 +00:00
Daniel J Walsh
fd3c8c94ea
* Wed Oct 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-9
...
- Move fixfiles man pages into the correct package
- Add genhomedircon to fixfiles restore
2009-10-14 14:47:50 +00:00
Daniel J Walsh
ac48b0b34b
* Thu Oct 6 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-8
...
- Add check to sandbox to verify save changes - Chris Pardy
- Fix memory leak in restorecond - Steve Grubb
2009-10-06 16:09:52 +00:00
Daniel J Walsh
678a86d335
* Thu Oct 1 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-7
...
- Fixes Templates
2009-10-01 16:04:13 +00:00
Daniel J Walsh
d909dfe9a1
* Wed Sep 30 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-5
...
- Fixes for semanage -equiv, readded modules, --enable, --disable
2009-09-30 17:28:58 +00:00
Daniel J Walsh
f466aa0b3b
* Wed Sep 30 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-5
...
- Fixes for semanage -equiv, readded modules, --enable, --disable
2009-09-30 15:37:12 +00:00
Daniel J Walsh
6c27d724c5
* Sun Sep 20 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-4
...
- Close sandbox when eclipse exits
2009-09-21 13:54:02 +00:00
Daniel J Walsh
425e7d2796
* Fri Sep 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-3
...
- Security fixes for seunshare
- Fix Sandbox to handle non file input to command.
2009-09-19 01:40:53 +00:00
Daniel J Walsh
b98d816316
* Thu Sep 17 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-2
...
- Security fixes for seunshare
2009-09-17 19:19:53 +00:00
Daniel J Walsh
26d020dedb
* Thu Sep 17 2009 Dan Walsh <dwalsh@redhat.com> 2.0.74-1
...
- Update to upstream
* Change semodule upgrade behavior to install even if the module
is not present from Dan Walsh.
* Make setfiles label if selinux is disabled and a seclabel aware
kernel is running from Caleb Case.
* Clarify forkpty() error message in run_init from Manoj Srivastava.
2009-09-17 13:07:45 +00:00
Daniel J Walsh
1696e8f7d1
* Mon Sep 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.73-5
...
- Fix sandbox to handle relative paths
2009-09-16 19:48:49 +00:00
Daniel J Walsh
c9fdf240be
* Mon Sep 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.73-4
...
- Add symbolic link to load_policy
2009-09-15 21:36:51 +00:00
Daniel J Walsh
f109f0076e
* Mon Sep 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.73-3
...
- Fix restorecond script to use force-reload
2009-09-14 19:39:09 +00:00
Daniel J Walsh
fc20c42a12
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> 2.0.73-2
...
- Fix init script to show status in usage message
2009-09-09 17:04:51 +00:00
Daniel J Walsh
7ae4fd64fa
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> 2.0.73-1
...
- Update to upstream
* Add semanage dontaudit to turn off dontaudits from Dan Walsh.
* Fix semanage to set correct mode for setrans file from Dan Walsh.
* Fix malformed dictionary in portRecord from Dan Walsh.
* Restore symlink handling support to restorecon based on a patch by
Martin Orr. This fixes the restorecon /dev/stdin performed by Debian
udev scripts that was broken by policycoreutils 2.0.70.
2009-09-08 14:15:50 +00:00
Bill Nottingham
05becad504
Fix typo
2009-09-02 15:09:25 +00:00
Daniel J Walsh
7b3ab100a9
* Fri Aug 28 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-14
...
- Add enable/disable patch
2009-08-28 18:18:46 +00:00
Tomáš Mráz
6c6ee0fad7
* Thu Aug 27 2009 Tomas Mraz <tmraz@redhat.com> - 2.0.71-13
...
- rebuilt with new audit
2009-08-27 07:51:00 +00:00
Daniel J Walsh
a39af4db38
* Wed Aug 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-12
...
- Tighten up controls on seunshare.c
2009-08-26 21:52:30 +00:00
Daniel J Walsh
0a51336809
* Wed Aug 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-11
...
- Add sandboxX
2009-08-26 20:45:29 +00:00
Daniel J Walsh
a45221f297
* Wed Aug 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-11
...
- Add sandboxX
2009-08-26 19:09:44 +00:00
Daniel J Walsh
2d7c5b6d7a
* Wed Aug 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-11
...
- Add sandboxX
2009-08-26 18:05:34 +00:00
Daniel J Walsh
349a457593
* Wed Aug 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-11
...
- Add sandboxX
2009-08-26 18:05:32 +00:00
Daniel J Walsh
4b8a9749e9
* Sat Aug 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-10
...
- Fix realpath usage to only happen on argv input from user
2009-08-22 12:08:34 +00:00
Daniel J Walsh
f6cc437735
* Fri Aug 21 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
...
- Don't try to remove restorecond after last erase (done already in %preun).
- Ensure scriptlets exit with status 0.
- Fix %post and %pr
2009-08-21 19:30:00 +00:00
Tomáš Mráz
7c396f5fa5
- rebuilt with new audit
2009-08-21 11:14:26 +00:00
Daniel J Walsh
3f2af1bab0
* Thu Aug 20 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-7
...
- Fix glob handling of /..
2009-08-20 19:05:30 +00:00
Daniel J Walsh
8c640c000d
* Wed Aug 19 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-6
...
- Redesign restorecond to use setfiles/restore functionality
2009-08-19 20:25:21 +00:00
Daniel J Walsh
48ee7275f3
* Wed Aug 19 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-5
...
- Fix sepolgen again
2009-08-19 19:02:29 +00:00
Daniel J Walsh
e96c403a63
* Tue Aug 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-4
...
- Add --boot flag to audit2allow to get all AVC messages since last boot
2009-08-18 19:25:04 +00:00
Daniel J Walsh
2b1f1bd524
* Tue Aug 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-3
...
- Fix semanage command
2009-08-18 12:32:44 +00:00
Daniel J Walsh
a66c52cf6b
* Thu Aug 13 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-2
...
- exclude unconfined.if from sepolgen
2009-08-13 22:22:35 +00:00
Daniel J Walsh
2267915618
* Thu Aug 13 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-1
...
- Fix chcat to report error on non existing file
- Update to upstream
* Modify setfiles/restorecon checking of exclude paths. Only check
user-supplied exclude paths (not automatically generated ones based on
lack of seclabel support), don't require them to be directories, and
ignore permission denied errors on them (it is ok to exclude a path to
which the caller lacks permission).
2009-08-13 22:01:02 +00:00
Daniel J Walsh
afa7adf27e
* Thu Aug 13 2009 Dan Walsh <dwalsh@redhat.com> 2.0.71-1
...
- Fix chcat to report error on non existing file
- Update to upstream
* Modify setfiles/restorecon checking of exclude paths. Only check
user-supplied exclude paths (not automatically generated ones based on
lack of seclabel support), don't require them to be directories, and
ignore permission denied errors on them (it is ok to exclude a path to
which the caller lacks permission).
2009-08-13 15:51:51 +00:00
Daniel J Walsh
f23e0fcdf3
* Mon Aug 10 2009 Dan Walsh <dwalsh@redhat.com> 2.0.70-2
...
- Don't warn if the user did not specify the exclude if root can not stat file system
2009-08-10 15:26:43 +00:00
Daniel J Walsh
886ea9345c
* Wed Aug 5 2009 Dan Walsh <dwalsh@redhat.com> 2.0.70-1
...
- Update to upstream
* Modify restorecon to only call realpath() on user-supplied pathnames
from Stephen Smalley.
* Fix typo in fixfiles that prevented it from relabeling btrfs
filesystems from Dan Walsh.
2009-08-05 19:27:53 +00:00
Daniel J Walsh
c57e98ae82
* Sun Jul 29 2009 Dan Walsh <dwalsh@redhat.com> 2.0.68-1
...
- Fix location of man pages
- Update to upstream
* Modify setfiles to exclude mounts without seclabel option in
/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
* Re-enable disable_dontaudit rules upon semodule -B from Christopher
Pardy and Dan Walsh.
* setfiles converted to fts from Thomas Liu.
2009-07-29 13:58:16 +00:00
Daniel J Walsh
d03de9fdcd
* Sun Jul 29 2009 Dan Walsh <dwalsh@redhat.com> 2.0.68-1
...
- Fix location of man pages
- Update to upstream
* Modify setfiles to exclude mounts without seclabel option in
/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
* Re-enable disable_dontaudit rules upon semodule -B from Christopher
Pardy and Dan Walsh.
* setfiles converted to fts from Thomas Liu.
2009-07-29 13:43:53 +00:00
Jesse Keating
d34f2573e0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2009-07-26 19:07:44 +00:00
Tom Callaway
5f4607465f
fix duplicate directory ownership with filesystem, selinux-policy
2009-07-07 15:40:49 +00:00
Daniel J Walsh
096b58de8c
* Fri Jun 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.64-1
...
- Update to upstream
* Keep setfiles from spamming console from Dan Walsh.
* Fix chcat's category expansion for users from Dan Walsh.
- Update po files
- Fix sepolgen
2009-06-26 18:48:24 +00:00
Daniel J Walsh
1734292fff
* Thu Jun 4 2009 Dan Walsh <dwalsh@redhat.com> 2.0.63-5
...
- Add sepolgen executable
2009-06-04 19:31:31 +00:00
Daniel J Walsh
b30ac013f1
* Mon Jun 1 2009 Dan Walsh <dwalsh@redhat.com> 2.0.63-4
...
- Fix Sandbox option handling
- Fix fixfiles handling of btrfs
2009-06-01 10:43:27 +00:00
Daniel J Walsh
61c2d77e4e
* Tue May 26 2009 Dan Walsh <dwalsh@redhat.com> 2.0.63-3
...
- Fix sandbox to be able to execute files in homedir
2009-05-26 16:58:40 +00:00
Daniel J Walsh
e785375a96
* Fri May 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.63-2
...
- Change polgen.py to be able to generate policy
2009-05-22 21:10:16 +00:00
Daniel J Walsh
7d0ef81ff4
* Wed May 20 2009 Dan Walsh <dwalsh@redhat.com> 2.0.63-1
...
- Update to upstream
* Fix transaction checking from Dan Walsh.
* Make fixfiles -R (for rpm) recursive.
* Make semanage permissive clean up after itself from Dan Walsh.
* add /root/.ssh/* to restorecond.conf
2009-05-22 18:00:00 +00:00
Daniel J Walsh
ff7a9e96a2
* Wed Apr 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-14
...
- Fix audit2allow -a to retun /var/log/messages
2009-05-12 19:45:50 +00:00
Daniel J Walsh
56e1de46e2
* Wed Apr 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-14
...
- Fix audit2allow -a to retun /var/log/messages
2009-05-05 19:13:45 +00:00
Daniel J Walsh
b61040e0cd
* Wed Apr 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-14
...
- Fix audit2allow -a to retun /var/log/messages
2009-05-05 18:51:52 +00:00
Daniel J Walsh
20fb912a16
* Thu Apr 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-11
...
- Add semanage module support
2009-04-16 18:53:29 +00:00
Daniel J Walsh
cdfce15287
* Tue Apr 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-10
...
- Do not print \n, if count < 1000;
2009-04-14 13:40:09 +00:00
Daniel J Walsh
a8ac23f196
* Sat Apr 11 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-9
...
- Handle case where subs file does not exist
2009-04-11 12:22:23 +00:00
Daniel J Walsh
28aeded808
* Wed Apr 8 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-8
...
- Update po files
- Add --equiv command for semanage
2009-04-09 02:05:21 +00:00
Daniel J Walsh
e5ab0eb59c
* Tue Mar 31 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-7
...
- Cleanup creation of permissive domains
- Update po files
2009-03-31 12:56:45 +00:00
Daniel J Walsh
ca6c46fd19
* Mon Mar 23 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-6
...
- Update po files
2009-03-23 13:31:01 +00:00
Daniel J Walsh
28777e87d2
* Thu Mar 12 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-5
...
- Fix semanage transations
2009-03-12 13:30:38 +00:00
Daniel J Walsh
15a087f5e4
* Sat Mar 7 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-4
...
- Update polgengui templates to match current upstream policy
2009-03-07 18:03:08 +00:00
Jesse Keating
7a66b67402
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
2009-02-27 01:28:51 +00:00
Daniel J Walsh
3a53f1bcb5
* Mon Feb 23 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-2
...
- Add /root/.ssh to restorecond.conf
- fixfiles -R package should recursively fix files
2009-02-23 16:34:14 +00:00
Daniel J Walsh
badeadc2fc
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.62-1
...
- Update to upstream
* Add btrfs to fixfiles from Dan Walsh.
* Remove restorecond error for matching globs with multiple hard links
and fix some error messages from Dan Walsh.
* Make removing a non-existant module a warning rather than an error
from Dan Walsh.
* Man page fixes from Dan Walsh.
2009-02-18 21:54:32 +00:00
Daniel J Walsh
b64d03f609
* Mon Feb 16 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-10
...
- Fix script created by polgengui to not refer to selinux-policy-devel
2009-02-16 14:21:37 +00:00
Daniel J Walsh
71c8918c91
* Mon Feb 9 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-8
...
- Add obsoletes to cause policycoreuils to update both python and non python version
2009-02-09 18:37:13 +00:00
Daniel J Walsh
fdaed91e49
* Fri Jan 30 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-7
...
- Dont report errors on glob match and multiple links
2009-01-30 16:35:12 +00:00
Daniel J Walsh
7d8dcb3134
* Thu Jan 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-6
...
- Move sepolgen-ifgen to post python
2009-01-22 20:25:45 +00:00
Daniel J Walsh
ea51d58adb
* Thu Jan 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-5
...
- Move sepolgen-ifgen to post python
2009-01-22 20:24:07 +00:00
Daniel J Walsh
5b46cccaf5
* Thu Jan 22 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-5
...
- Move sepolgen-ifgen to post python
2009-01-22 19:03:57 +00:00
Daniel J Walsh
15ec5ed084
* Tue Jan 21 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-4
...
- Fix Translations
2009-01-21 22:15:52 +00:00
Daniel J Walsh
93692e06c1
* Tue Jan 20 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-3
...
- Add Domains Page to system-config-selinux
- Add ability to create dbus confined applications to polgen
2009-01-20 14:58:13 +00:00
Daniel J Walsh
1fa363a8cc
* Wed Jan 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-2
...
- Split python into a separate package
2009-01-14 15:00:08 +00:00
Daniel J Walsh
b9ee74bd7b
Split out python package
2009-01-14 14:50:07 +00:00
Daniel J Walsh
f689b5c1ff
* Tue Jan 13 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-1
...
- Update to upstream
* chcat: cut categories at arbitrary point (25) from Dan Walsh
* semodule: use new interfaces in libsemanage for compressed files
from Dan Walsh
* audit2allow: string changes for usage
2009-01-13 14:09:47 +00:00
Daniel J Walsh
114d182b28
* Tue Jan 13 2009 Dan Walsh <dwalsh@redhat.com> 2.0.61-1
...
- Update to upstream
* chcat: cut categories at arbitrary point (25) from Dan Walsh
* semodule: use new interfaces in libsemanage for compressed files
from Dan Walsh
* audit2allow: string changes for usage
2009-01-13 14:01:10 +00:00
Daniel J Walsh
e2044195fe
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> 2.0.60-7
...
- Don't error out when removing a non existing module
2009-01-06 14:12:27 +00:00
Daniel J Walsh
55a7005067
* Mon Dec 15 2008 Dan Walsh <dwalsh@redhat.com> 2.0.60-6
...
- fix audit2allow man page
2009-01-04 19:46:52 +00:00
Daniel J Walsh
9f9bcaaa18
* Wed Dec 10 2008 Dan Walsh <dwalsh@redhat.com> 2.0.60-5
...
- Fix Japanese translations
2008-12-10 14:19:50 +00:00
Daniel J Walsh
c65f316b59
* Sat Dec 6 2008 Dan Walsh <dwalsh@redhat.com> 2.0.60-4
...
- Change md5 to hashlib.md5 in sepolgen
2008-12-06 12:28:04 +00:00
Ignacio Vazquez-Abrams
634db16783
Rebuild for Python 2.6
2008-12-04 17:20:47 +00:00
Daniel J Walsh
f4379014a9
* Tue Dec 2 2008 Dan Walsh <dwalsh@redhat.com> 2.0.60-2
...
- Fix error checking in restorecond, for inotify_add_watch
2008-12-02 13:37:45 +00:00
Daniel J Walsh
461604839c
* Mon Dec 1 2008 Dan Walsh <dwalsh@redhat.com> 2.0.60-1
...
- Update to upstream
* semanage: use semanage_mls_enabled() from Stephen Smalley.
2008-12-01 16:49:49 +00:00
Ignacio Vazquez-Abrams
62ef29b0dc
Rebuild for Python 2.6
2008-11-29 17:56:27 +00:00
Daniel J Walsh
127ce1fef4
* Tue Nov 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.59-1
...
- Update to upstream
* fcontext add checked local records twice, fix from Dan Walsh.
2008-11-11 21:18:08 +00:00
Daniel J Walsh
69a016d597
* Fri Nov 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-12
...
- add compression
2008-11-07 15:01:06 +00:00
Jesse Keating
4b9c47a54b
* Tue Nov 04 2008 Jesse Keating <jkeating@redhat.com> - 2.0.57-11
...
- Move the usermode-gtk requires to the -gui subpackage.
2008-11-04 23:02:34 +00:00
Daniel J Walsh
acb7809eb8
* Thu Oct 30 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-10
...
- Fix traceback in audit2why
2008-10-30 18:23:59 +00:00
Daniel J Walsh
6142b407fc
* Wed Oct 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-9
...
- Make GUI use translations
2008-10-29 17:02:31 +00:00
Daniel J Walsh
ac45055c8c
* Wed Oct 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-8
...
- Fix typo in man page
2008-10-29 13:46:43 +00:00
Daniel J Walsh
2560349477
* Mon Oct 28 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-7
...
- Handle selinux disabled correctly
- Handle manipulation of fcontext file correctly
2008-10-28 19:56:17 +00:00
Daniel J Walsh
3f2ca56c60
* Mon Oct 27 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-6
...
- Add usermode-gtk requires
2008-10-27 14:11:34 +00:00
Daniel J Walsh
1fd30f90e9
* Tue Oct 23 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-5
...
- Allow addition of local modifications of fcontext policy.
2008-10-23 17:17:24 +00:00
Daniel J Walsh
20b4a0e287
* Mon Oct 20 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-4
...
- Fix system-config-selinux booleanspage throwing and exception
- Update po files
2008-10-20 20:11:49 +00:00
Daniel J Walsh
1b0693a203
* Mon Oct 20 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-4
...
- Fix system-config-selinux booleanspage throwing and exception
- Update po files
2008-10-20 19:53:19 +00:00
Daniel J Walsh
26e1328daf
* Fri Oct 17 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-3
...
- Fix text in newrole
- Fix revertbutton on booleans page in system-config-selinux
2008-10-17 22:05:43 +00:00
Daniel J Walsh
9bb9beca12
* Wed Oct 1 2008 Dan Walsh <dwalsh@redhat.com> 2.0.57-1
...
- Update to upstream
* Update po files from Dan Walsh.
2008-10-06 19:05:59 +00:00
Daniel J Walsh
2cfc77b157
* Fri Sep 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.56-1
...
- Fix semanage help display
- Update to upstream
* fixfiles will now remove all files in /tmp and will check for
unlabeled_t in /tmp and /var/tmp from Dan Walsh.
* add glob support to restorecond from Dan Walsh.
* allow semanage to handle multi-line commands in a single transaction
from Dan Walsh.
2008-09-12 15:58:45 +00:00
Daniel J Walsh
77ffddfa2c
* Fri Sep 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-9
...
- Fix semanage help display
2008-09-12 15:45:19 +00:00
Daniel J Walsh
8bd2afcec2
* Thu Sep 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-8
...
- Only call gen_requires once in sepolgen
2008-09-11 13:55:11 +00:00
Daniel J Walsh
88dfc26d3c
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-7
...
- Change Requires line to gnome-python2-gnome
- Fix spelling mistakes
- Require libselinux-utils
2008-09-09 19:14:39 +00:00
Daniel J Walsh
5483ca1ccd
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-6
...
- Fix spelling mistake
2008-09-09 16:18:36 +00:00
Daniel J Walsh
9f10e60d0d
* Mon Sep 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-5
...
- Add node support to semanage
2008-09-08 21:03:49 +00:00
Daniel J Walsh
f015700775
* Mon Sep 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-4
...
- Fix fixfiles to correct unlabeled_t files and remove .? files
2008-09-08 18:09:36 +00:00
Daniel J Walsh
ac5ad8648b
* Mon Sep 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-3
...
- Fix fixfiles to correct unlabeled_t files and remove .? files
2008-09-08 17:47:59 +00:00
Daniel J Walsh
8b3cb0f67c
* Wed Sep 3 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-2
...
- Add glob support to restorecond so it can check every file in the homedir
2008-09-03 21:46:03 +00:00
Daniel J Walsh
2a4d967daa
* Thu Aug 28 2008 Dan Walsh <dwalsh@redhat.com> 2.0.55-1
...
- Update to upstream
* Merged semanage node support from Christian Kuester.
2008-08-29 19:05:21 +00:00
Daniel J Walsh
b67978a729
* Mon Aug 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-6
...
- Add missing html_util.py file
2008-08-11 15:58:06 +00:00
Daniel J Walsh
51c06b5513
* Thu Aug 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-5
...
- Fixes for multiple transactions
2008-08-08 21:04:55 +00:00
Daniel J Walsh
b0592a727f
* Thu Aug 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-4
...
- Fixes for multiple transactions
2008-08-07 20:04:12 +00:00
Daniel J Walsh
c7da14e85c
* Thu Aug 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-3
...
- Fixes for multiple transactions
2008-08-07 12:21:01 +00:00
Daniel J Walsh
875701c42a
* Wed Aug 6 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-2
...
- Allow multiple transactions in one semanage command
2008-08-06 22:11:40 +00:00
Daniel J Walsh
14f807a094
* Tue Aug 5 2008 Dan Walsh <dwalsh@redhat.com> 2.0.54-1
...
- Update to upstream
* Add support for boolean files and group support for seusers from Dan Walsh.
* Ensure that setfiles -p output is newline terminated from Russell Coker.
2008-08-05 14:18:33 +00:00
Daniel J Walsh
0fdc47a89f
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.53-1
...
- Update to upstream
* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.
2008-07-29 18:06:14 +00:00
Daniel J Walsh
cee9553174
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-6
...
- Fix boolean handling
- Upgrade to latest sepolgen
- Update po patch
2008-07-29 13:30:55 +00:00
Daniel J Walsh
1e4d97ba6c
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-6
...
- Fix boolean handling
- Upgrade to latest sepolgen
- Update po patch
2008-07-29 13:30:54 +00:00
Daniel J Walsh
794090192b
* Wed Jul 9 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-5
...
- Additial cleanup of boolean handling for semanage
2008-07-09 13:04:58 +00:00
Daniel J Walsh
fab4898fba
* Tue Jul 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-4
...
- Handle ranges of ports in gui
2008-07-08 19:50:55 +00:00
Daniel J Walsh
b54c5a833b
* Tue Jul 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-3
...
- Fix indent problems in seobject
2008-07-08 12:58:55 +00:00
Daniel J Walsh
df8efb5fb3
* Wed Jul 2 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-2
...
- Add lockdown wizard
- Allow semanage booleans to take an input file an process lots of booleans at once.
2008-07-03 17:25:34 +00:00
Daniel J Walsh
c66a0ee3f8
* Wed Jul 2 2008 Dan Walsh <dwalsh@redhat.com> 2.0.52-1
...
- Default prefix to "user"
2008-07-02 21:22:58 +00:00
Daniel J Walsh
7b711efa39
* Tue Jul 1 2008 Dan Walsh <dwalsh@redhat.com> 2.0.50-2
...
- Remove semodule use within semanage
- Fix launching of polgengui from toolbar
2008-07-02 02:04:52 +00:00
Daniel J Walsh
8ac1404c6b
* Tue Jul 1 2008 Dan Walsh <dwalsh@redhat.com> 2.0.50-2
...
- Remove semodule use within semanage
2008-07-02 00:52:32 +00:00
Daniel J Walsh
adf7360bca
* Mon Jun 30 2008 Dan Walsh <dwalsh@redhat.com> 2.0.50-1
...
- Update to upstream
* Fix audit2allow generation of role-type rules from Karl MacMillan.
2008-06-30 20:51:23 +00:00
Daniel J Walsh
d21474fea3
* Mon Jun 30 2008 Dan Walsh <dwalsh@redhat.com> 2.0.50-1
...
- Update to upstream
* Fix audit2allow generation of role-type rules from Karl MacMillan.
2008-06-30 15:52:24 +00:00
Daniel J Walsh
d0f20a4df5
* Tue Jun 24 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-10
...
- Fix spelling of enforcement
2008-06-27 11:03:38 +00:00
Daniel J Walsh
9236954d7c
* Mon Jun 23 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-8
...
- Fix sepolgen/audit2allow handling of roles
2008-06-23 11:09:58 +00:00
Daniel J Walsh
6efadc5ec5
* Mon Jun 16 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-7
...
- Fix sepolgen-ifgen processing
2008-06-16 10:43:37 +00:00
Daniel J Walsh
559a178835
* Thu Jun 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-6
...
- Add deleteall to semanage permissive, cleanup error handling
2008-06-12 18:35:22 +00:00
Daniel J Walsh
cec42f53db
* Thu Jun 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-5
...
- Complete removal of rhpl requirement
2008-06-12 16:08:44 +00:00
Daniel J Walsh
e3c69f6b4f
* Thu Jun 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-5
...
- Complete removal of rhpl requirement
2008-06-12 16:02:31 +00:00
Daniel J Walsh
69499e5535
* Wed Jun 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-4
...
- Add semanage permissive *
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-3
- Fix fixfiles to cleanup /tmp and /var/tmp
2008-06-11 20:20:15 +00:00
Daniel J Walsh
6ead03f02f
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-3
...
- Fix fixfiles to cleanup /tmp and /var/tmp
2008-05-22 18:05:56 +00:00
Daniel J Walsh
e6578b4da8
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-2
...
- Fix listing of types in gui
2008-05-16 16:21:49 +00:00
Daniel J Walsh
6c5a205c34
* Mon May 12 2008 Dan Walsh <dwalsh@redhat.com> 2.0.49-1
...
- Update to upstream
* Remove security_check_context calls for prefix validation from semanage.
* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.
2008-05-16 15:16:20 +00:00
Daniel J Walsh
3623aa968e
*** empty log message ***
2008-05-12 18:11:41 +00:00
Daniel J Walsh
d8a7e13fd5
*** empty log message ***
2008-05-08 20:30:22 +00:00
Daniel J Walsh
26821691ec
*** empty log message ***
2008-05-07 15:13:49 +00:00
Daniel J Walsh
2219648009
*** empty log message ***
2008-05-07 11:38:31 +00:00
Matthias Clasen
8e3de337f4
Uninvasive HIG approximations
2008-04-18 22:56:24 +00:00
Matthias Clasen
c2b0b017a5
fix spec
2008-04-18 17:35:42 +00:00
Matthias Clasen
1fc358c943
Move s-c-selinux to the right menu
2008-04-18 17:29:06 +00:00
Daniel J Walsh
c22424dd48
* Sun Apr 6 2008 Dan Walsh <dwalsh@redhat.com> 2.0.46-3
...
- Fix boolean descriptions
- Fix semanage man page
2008-04-08 13:54:34 +00:00
Daniel J Walsh
1f4b8a30fb
* Wed Mar 19 2008 Dan Walsh <dwalsh@redhat.com> 2.0.46-2
...
- Don't use prefix in gui
2008-03-20 12:43:37 +00:00
Daniel J Walsh
7d1caca617
* Tue Mar 18 2008 Dan Walsh <dwalsh@redhat.com> 2.0.46-1
...
- Update to upstream
* Update audit2allow to report dontaudit cases from Dan Walsh.
* Fix semanage port to use --proto from Caleb Case.
2008-03-18 20:59:17 +00:00
Daniel J Walsh
ea11570a87
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> 2.0.44-1
...
- Update to upstream
* Fix for segfault when conf file parse error occurs.
2008-02-22 19:36:05 +00:00
Daniel J Walsh
fc19e287d6
* Wed Feb 13 2008 Dan Walsh <dwalsh@redhat.com> 2.0.43-2
...
- Don't show tabs on polgengui
2008-02-13 21:16:28 +00:00
Daniel J Walsh
08594f6d5f
* Wed Feb 13 2008 Dan Walsh <dwalsh@redhat.com> 2.0.43-1
...
- Update to upstream
* Merged fix fixfiles option processing from Vaclav Ovsik.
- Added existing users, staff and user_t users to polgengui
2008-02-13 20:55:23 +00:00
Daniel J Walsh
813c122421
* Fri Feb 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.42-3
...
- Add messages for audit2allow DONTAUDIT
2008-02-08 19:59:45 +00:00
Daniel J Walsh
0568ee7f2d
* Tue Feb 5 2008 Dan Walsh <dwalsh@redhat.com> 2.0.42-2
...
- Add ability to transition to roles via polgengui
2008-02-06 15:19:11 +00:00
Daniel J Walsh
68de8438ea
* Sat Feb 2 2008 Dan Walsh <dwalsh@redhat.com> 2.0.42-1
...
- Update to upstream
* Make semodule_expand use sepol_set_expand_consume_base to reduce
peak memory usage.
2008-02-02 21:40:53 +00:00
Daniel J Walsh
75c4c38f00
* Tue Jan 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.41-1
...
- Update to upstream
* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
* Merged a second fixfiles -C fix from Marshall Miller.
2008-01-29 13:23:41 +00:00
Daniel J Walsh
dc637d77fd
* Thu Jan 24 2008 Dan Walsh <dwalsh@redhat.com> 2.0.39-1
...
- Don't initialize audit2allow for audit2why call. Use default
- Update to upstream
* Merged fixfiles -C fix from Marshall Miller.
2008-01-25 16:14:52 +00:00
Daniel J Walsh
375c226ef2
* Thu Jan 24 2008 Dan Walsh <dwalsh@redhat.com> 2.0.38-1
...
- Update to upstream
* Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
* Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
* Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.
2008-01-24 19:45:03 +00:00
Daniel J Walsh
5031b9bd5a
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> 2.0.37-1
...
- Update to upstream
* Merged replacement for audit2why from Dan Walsh.
2008-01-23 22:11:23 +00:00
Daniel J Walsh
dc277d2b31
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> 2.0.36-1
...
- Update to upstream
* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
* Merged sepolgen fixes from Dan Walsh.
2008-01-23 20:23:24 +00:00
Daniel J Walsh
f8fdb548ab
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> 2.0.36-1
...
- Update to upstream
* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
2008-01-23 19:44:15 +00:00
Daniel J Walsh
138cbeabb6
* Tue Jan 22 2008 Dan Walsh <dwalsh@redhat.com> 2.0.35-5
...
- handle files with spaces on upgrades
2008-01-23 18:37:06 +00:00
Daniel J Walsh
1aa6d7bef2
* Tue Jan 22 2008 Dan Walsh <dwalsh@redhat.com> 2.0.35-4
...
- Add support in fixfiles for ext4 ext4dev and gfs2
2008-01-22 20:50:27 +00:00
Daniel J Walsh
feaf320062
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> 2.0.35-3
...
- Allow files with spaces to be used by setfiles
2008-01-21 21:04:52 +00:00
Daniel J Walsh
b16ae3b80f
* Tue Jan 15 2008 Dan Walsh <dwalsh@redhat.com> 2.0.35-2
...
- Add descriptions of booleans to audit2allow
2008-01-15 16:34:45 +00:00
Daniel J Walsh
34a3b99b21
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
...
- Update to upstream
* Merged support for non-interactive newrole command invocation from Tim Reed.
2008-01-11 18:33:07 +00:00
Daniel J Walsh
c3a0872af7
* Thu Jan 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.34-8
...
- Change to use selinux bindings to audit2why
2008-01-10 20:15:08 +00:00
Daniel J Walsh
7870eae9ac
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.34-7
...
- Fix fixfiles to handle no args
2008-01-10 19:12:45 +00:00
Daniel J Walsh
d7cddef625
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.34-7
...
- Fix fixfiles to handle no args
2008-01-08 14:57:29 +00:00
Daniel J Walsh
856619e48c
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> 2.0.34-6
...
- Fix fixfiles to handle no args
2008-01-08 13:58:11 +00:00
Daniel J Walsh
d40cc99c51
* Mon Dec 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.34-5
...
- Fix roles output when creating a module
2007-12-31 19:24:10 +00:00
Daniel J Walsh
60ad59cab9
* Mon Dec 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.34-4
...
- Handle files with spaces in fixfiles
2007-12-31 16:26:02 +00:00
Daniel J Walsh
ec80e1ce63
* Fri Dec 21 2007 Dan Walsh <dwalsh@redhat.com> 2.0.34-3
...
- Catch SELINUX_ERR with audit2allow and generate policy
2007-12-21 07:14:11 +00:00
Daniel J Walsh
7f6f58266d
* Thu Dec 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.34-2
...
- Make sepolgen set error exit code when partial failure
- audit2why now checks booleans for avc diagnosis
2007-12-20 19:24:11 +00:00
Daniel J Walsh
bac931cd73
* Tue Dec 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.34-1
...
- Update to upstream
* Tue Dec 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-4
- Fix sepolgen to be able to parse Fedora 9 policy
Handle ifelse statements
Handle refpolicywarn inside of define
Add init.if and inetd.if into parse
Add parse_file to syntax error message
2007-12-19 17:55:58 +00:00
Daniel J Walsh
e61ad2382c
* Tue Dec 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-4
...
- Fix sepolgen to be able to parse Fedora 9 policy
Handle ifelse statements
Handle refpolicywarn inside of define
Add init.if and inetd.if into parse
Add parse_file to syntax error message
2007-12-19 10:40:23 +00:00
Daniel J Walsh
206b23918e
* Fri Dec 14 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-3
...
- Add scroll bar to fcontext gui page
2007-12-16 13:14:09 +00:00
Daniel J Walsh
96e66fc5d3
* Tue Dec 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-2
...
- Add Russion Man pages
2007-12-11 19:28:03 +00:00
Daniel J Walsh
ac18122279
* Mon Dec 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-1
...
- Upgrade from NSA
* Drop verbose output on fixfiles -C from Dan Walsh.
* Fix argument handling in fixfiles from Dan Walsh.
* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
- Fix handling of final screen in polgengui
2007-12-11 02:47:30 +00:00
Daniel J Walsh
9ecec66343
* Mon Dec 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.33-1
...
- Upgrade from NSA
* Drop verbose output on fixfiles -C from Dan Walsh.
* Fix argument handling in fixfiles from Dan Walsh.
* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
- Fix handling of final screen in polgengui
2007-12-11 02:47:29 +00:00
Daniel J Walsh
44cc1f1bc3
* Sun Dec 2 2007 Dan Walsh <dwalsh@redhat.com> 2.0.32-2
...
- Fix handling of disable selinux button in gui
2007-12-03 01:35:17 +00:00
Daniel J Walsh
8d32038fbc
* Mon Nov 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.32-1
...
- Upgrade from NSA
* load_policy initial load option from Chad Sellers.
2007-11-30 20:11:38 +00:00
Daniel J Walsh
b458bb5fd5
* Mon Nov 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-20
...
- Don't show error on missing policy.xml
2007-11-19 22:38:48 +00:00
Daniel J Walsh
616f54d725
* Mon Nov 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-19
...
- GUI Enhancements
- Fix cgi generation
- Use more patterns
2007-11-19 21:27:12 +00:00
Daniel J Walsh
ffb96ec3c8
* Mon Nov 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-18
...
- Remove codec hacking, which seems to be fixed in python
2007-11-19 18:18:08 +00:00
Daniel J Walsh
f51cda3313
* Fri Nov 16 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-16
...
- Fix fixfiles argument parsing
2007-11-16 15:56:33 +00:00
Daniel J Walsh
d2285e6e8b
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-15
...
- Fix File Labeling add
2007-11-15 16:02:26 +00:00
Daniel J Walsh
f5a3b73fcd
* Thu Nov 9 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-14
...
- Fix semanage to handle state where policy.xml is not installed
2007-11-09 17:10:22 +00:00
Daniel J Walsh
3ac73d19b1
* Mon Nov 5 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-13
...
- Remove -v from restorecon in fixfiles
2007-11-06 19:58:41 +00:00
Daniel J Walsh
7c2e75773b
*** empty log message ***
2007-11-05 21:30:56 +00:00
Daniel J Walsh
f73ca01a5e
*** empty log message ***
2007-11-02 20:27:48 +00:00
Daniel J Walsh
951b855b36
*** empty log message ***
2007-10-31 11:00:52 +00:00
Daniel J Walsh
7791fd5472
* Wed Oct 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-8
...
- Validate semanage fcontext input
- Fix template names for log files in gui
2007-10-31 10:57:59 +00:00
Daniel J Walsh
95c2ff0c21
* Fri Oct 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-7
...
- Fix consolekit link to selinux-polgengui
2007-10-19 16:35:27 +00:00
Daniel J Walsh
6e11e14635
* Thu Oct 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-6
...
- Fix the generation templates
2007-10-18 21:48:15 +00:00
Daniel J Walsh
3002dbceac
* Tue Oct 16 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-5
...
- Fix enable/disable audit messages
2007-10-17 03:39:17 +00:00
Daniel J Walsh
2d640c093d
* Mon Oct 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-4
...
- Add booleans page
2007-10-17 01:33:45 +00:00
Daniel J Walsh
2f136a328b
* Mon Oct 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-3
...
- Lots of updates to gui
2007-10-16 23:47:15 +00:00
Daniel J Walsh
8700841752
* Mon Oct 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-1
...
- Remove no.po
- Update to upstream
* Fix semodule option handling from Dan Walsh.
* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.
2007-10-15 20:59:29 +00:00
Daniel J Walsh
ccbc11e287
* Mon Oct 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-1
...
- Remove no.po
- Update to upstream
* Fix semodule option handling from Dan Walsh.
* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.
2007-10-15 18:09:34 +00:00
Daniel J Walsh
105dca2943
* Sun Oct 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.29-1
...
- Update to upstream
* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
- Add deleteall for ports and fcontext
2007-10-08 14:44:26 +00:00
Daniel J Walsh
6827dc2d8b
* Fri Oct 5 2007 Dan Walsh <dwalsh@redhat.com> 2.0.28-1
...
- Update to upstream
* Update semodule man page for -D from Dan Walsh.
* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.
2007-10-05 17:16:35 +00:00
Daniel J Walsh
07be4dd9c6
* Tue Oct 2 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-7
...
- Add genhomedircon script to rebuild file_context for shadow-utils
2007-10-04 14:30:30 +00:00
Daniel J Walsh
dc35f1b2f5
* Tue Oct 2 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-6
...
- Update translations
2007-10-03 02:45:18 +00:00
Daniel J Walsh
25ac073f85
* Fri Sep 28 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-5
...
- Additional checkboxes for application policy
2007-10-02 20:21:53 +00:00
Daniel J Walsh
76680e0455
* Fri Sep 28 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-4
...
- Allow policy writer to select user types to transition to there users
2007-10-01 21:45:35 +00:00
Daniel J Walsh
8f66192228
* Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-3
...
- Fix bug in building policy with polgengui
- Creating ports correctly
2007-09-27 19:05:27 +00:00
Daniel J Walsh
a8f58ae116
* Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.27-2
...
- Fix bug in building policy with polgengui
2007-09-27 15:24:00 +00:00
Daniel J Walsh
a33870f392
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.26-3
...
- Show local changes with semanage
2007-09-24 20:43:32 +00:00
Daniel J Walsh
1f2b67a04d
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.26-2
...
- Fixed spelling mistakes in booleans defs
- Update po
2007-09-24 16:22:03 +00:00
Daniel J Walsh
1452353611
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.26-1
...
- Update to upstream
* Fix setfiles selabel option flag setting for 64-bit from Stephen Smalley.
2007-09-19 02:29:47 +00:00
Daniel J Walsh
e99a8a65cb
* Fri Sep 14 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-14
...
- Fix calls to _admin interfaces
2007-09-14 14:41:51 +00:00
Daniel J Walsh
d7f1fcd1a3
* Tue Sep 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-13
...
- Upgrade version of sepolgen from NSA
* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
* Suppress generation of rules for non-denials from Karl MacMillan (take 3).
2007-09-13 12:32:16 +00:00
Daniel J Walsh
835e07e0e6
* Tue Sep 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-12
...
- Remove bogus import libxml2
2007-09-11 19:04:32 +00:00
Daniel J Walsh
fcb8db4597
* Mon Sep 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-11
...
- Lots of fixes for polgengui
2007-09-10 19:45:03 +00:00
Daniel J Walsh
a91903f082
* Thu Sep 6 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-10
...
- Change Requires /bin/rpm to rpm
2007-09-10 15:59:05 +00:00
Daniel J Walsh
35a05d0eef
* Wed Sep 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-9
...
- Bump libsemanage version for disable dontaudit
- New gui features for creating admin users
2007-09-06 12:25:31 +00:00
Daniel J Walsh
7683888461
* Fri Aug 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-8
...
- Fix generated code for admin policy
2007-08-31 21:17:12 +00:00
Daniel J Walsh
f6b16765a3
* Fri Aug 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-7
...
- Lots of fixes for role templates
2007-08-31 19:10:10 +00:00
Daniel J Walsh
08b9f6e005
* Tue Aug 28 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-6
...
- Add more role_templates
2007-08-28 19:31:24 +00:00
Daniel J Walsh
d0035566d5
* Tue Aug 28 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-5
...
- Update genpolgui to add creation of user domains
2007-08-28 15:45:56 +00:00
Daniel J Walsh
77822be0ca
* Mon Aug 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-4
...
- Fix location of sepolgen-ifgen
2007-08-27 13:23:58 +00:00
Daniel J Walsh
4373ede8c2
* Sat Aug 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-3
...
- Add selinux-polgengui to desktop
2007-08-25 10:55:38 +00:00
Daniel J Walsh
981bea936b
* Fri Aug 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-2
...
- Cleanup spec
2007-08-24 17:52:00 +00:00
Daniel J Walsh
32455f343f
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-1
...
- Update semodule man page
* Fix genhomedircon searching for USER from Todd Miller
* Install run_init with mode 0755 from Dan Walsh.
* Fix chcat from Dan Walsh.
* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
* Optimize genhomedircon to compile regexes once from Dan Walsh.
* Fix semanage gettext call from Dan Walsh.
2007-08-23 21:00:38 +00:00
Daniel J Walsh
4bf679be9e
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.23-2
...
- Update semodule man page
2007-08-23 14:24:18 +00:00
Daniel J Walsh
0f56395076
* Mon Aug 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.23-1
...
- Update to match NSA
* Disable dontaudits via semodule -D
2007-08-21 13:02:46 +00:00
Daniel J Walsh
4ecb32d9da
* Wed Aug 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-13
...
- Speed up genhomedircon by an order of magnitude by compiling regex
- Allow semanage fcontext -a -t <<none>> /path to work
2007-08-01 20:07:58 +00:00
Daniel J Walsh
85e2ce7e5a
* Wed Aug 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-12
...
- Allow semanage fcontext -a -t <<none>> /path to work
2007-08-01 13:42:41 +00:00
Daniel J Walsh
27013450e0
* Fri Jul 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-11
...
- Fixfiles update required to match new regex
2007-07-31 19:39:20 +00:00
Daniel J Walsh
a389a8568f
* Fri Jul 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-10
...
- Update booleans translations
2007-07-27 19:10:57 +00:00
Jeremy Katz
2ca34c3096
* Wed Jul 25 2007 Jeremy Katz <katzj@redhat.com> - 2.0.22-9
...
- rebuild for toolchain bug
2007-07-25 17:51:02 +00:00
Daniel J Walsh
4877d0eb59
* Tue Jul 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-8
...
- Add requires libselinux-python
2007-07-24 17:37:12 +00:00
Daniel J Walsh
18e5e753c6
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-7
...
- Fix fixfiles to report incorrect rpm
- Patch provided by Tony Nelson
2007-07-23 14:31:40 +00:00
Daniel J Walsh
e0e7edadda
* Fri Jul 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-6
...
- Clean up spec file
2007-07-20 16:09:40 +00:00
Daniel J Walsh
250de71949
* Thu Jul 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-5
...
- Require newer libselinux version
2007-07-12 18:26:35 +00:00
Daniel J Walsh
9c2c4da554
* Fri Jul 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-4
...
- Fix checking for conflicting directory specification in genhomedircon
2007-07-06 13:47:43 +00:00
Daniel J Walsh
0eeb57db00
* Mon Jun 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-3
...
- Fix spelling mistakes in GUI
2007-06-25 10:10:55 +00:00
Daniel J Walsh
df5eceb2a1
* Fri Jun 22 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-2
...
- Fix else path in chcat
2007-06-22 13:33:42 +00:00
Daniel J Walsh
a57e4b7bc5
* Thu Jun 21 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-1
...
- Update to match NSA
* Rebase setfiles to use new labeling interface.
2007-06-21 15:34:48 +00:00
Daniel J Walsh
4172449da2
* Wed Jun 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.21-2
...
- Add filter to all system-config-selinux lists
2007-06-13 20:59:11 +00:00
Daniel J Walsh
2112f918a0
* Wed Jun 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.21-1
...
- Update to match NSA
* Fixed setsebool (falling through to error path on success).
2007-06-13 12:50:55 +00:00
Daniel J Walsh
a0ef77a17e
* Mon Jun 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.20-1
...
- Update to match NSA
* Merged genhomedircon fixes from Dan Walsh.
* Merged setfiles -c usage fix from Dan Walsh.
* Merged restorecon fix from Yuichi Nakamura.
* Dropped -lsepol where no longer needed.
2007-06-11 18:44:01 +00:00
Daniel J Walsh
4efe23c541
* Mon Jun 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.19-5
...
- Fix translations code, Add more filters to gui
2007-06-11 16:47:29 +00:00
Daniel J Walsh
1f766d055e
* Mon Jun 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.19-4
...
- Fix setfiles -c to make it work
2007-06-04 21:46:14 +00:00
Daniel J Walsh
4c20f47670
* Mon Jun 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.19-3
...
- Fix french translation to not crash system-config-selinux
2007-06-04 14:58:22 +00:00
Daniel J Walsh
2b62f3a02f
* Fri Jun 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.19-2
...
- Fix genhomedircon to work in stage2 builds of anaconda
2007-06-01 14:33:57 +00:00
Daniel J Walsh
6f8d76967a
* Fri May 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.19-1
...
- Update to match NSA
2007-05-18 14:44:34 +00:00
Daniel J Walsh
2542ef46ba
* Thu May 17 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-2
...
- Fixes for polgentool templates file
2007-05-17 17:46:56 +00:00
Daniel J Walsh
5bafb36498
* Tue May 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-1
...
- Updated version of policycoreutils
* Merged support for modifying the prefix via semanage from Dan Walsh.
- Fixed genhomedircon to find homedirs correctly.
2007-05-04 17:30:00 +00:00
Daniel J Walsh
323af3f0d5
* Tue May 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.15-1
...
- Updated version of policycoreutils
* Merged po file updates from Dan Walsh.
- Fix semanage to be able to modify prefix in user record
2007-05-01 13:44:29 +00:00
Daniel J Walsh
68130465c9
* Mon Apr 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.14-2
...
- Fix title on system-config-selinux
2007-04-30 13:00:48 +00:00
Daniel J Walsh
ad6111b387
* Wed Apr 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.14-1
...
- Updated version of policycoreutils
* Build fix for setsebool.
2007-04-26 00:28:19 +00:00
Daniel J Walsh
0652cce264
* Wed Apr 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.13-1
...
- Updated version of policycoreutils
* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.
2007-04-25 15:32:00 +00:00
Daniel J Walsh
ca8e5bbe7c
* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.10-2
...
- Fixes for polgengui
2007-04-24 18:51:20 +00:00
Daniel J Walsh
1dd185bcfd
* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.10-1
...
- Updated version of policycoreutils
* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.
2007-04-24 14:44:06 +00:00
Daniel J Walsh
27712930f0
* Fri Apr 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-10
...
- Fix genhomedircon to handle non user_u for the default user
2007-04-20 18:01:26 +00:00
Daniel J Walsh
bd54d240df
* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-9
...
- More cleanups for gui
2007-04-19 13:38:40 +00:00
Daniel J Walsh
a55b66ed45
* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-8
...
- Fix size and use_tmp problem on gui
2007-04-18 19:19:25 +00:00
Daniel J Walsh
64fb16ae88
* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-7
...
- Fix restorecon crash
2007-04-18 18:35:04 +00:00
Daniel J Walsh
7f4e5a887b
* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-6
...
- Change polgengui to a druid
2007-04-18 17:18:15 +00:00
Daniel J Walsh
e041426664
* Tue Apr 16 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-5
...
- Fully path script.py
2007-04-17 12:30:19 +00:00