rpms/setroubleshoot
5
0
Fork 0
Code Issues Pull Requests Releases Activity

- Add white level, so plugins can tell setroubleshoot to ignore avc

Browse Source
This commit is contained in:
Daniel J Walsh 2010-03-15 20:59:23 +00:00
parent 0461d69b84
commit f221eabab4
3 changed files with 67 additions and 47 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.cvsignore
View File

@ -72,3 +72,7 @@ setroubleshoot-2.2.61.tar.gz
setroubleshoot-2.2.62.tar.gz setroubleshoot-2.2.62.tar.gz
setroubleshoot-2.2.63.tar.gz setroubleshoot-2.2.63.tar.gz
setroubleshoot-2.2.64.tar.gz setroubleshoot-2.2.64.tar.gz
setroubleshoot-2.2.65.tar.gz
setroubleshoot-2.2.66.tar.gz
setroubleshoot-2.2.67.tar.gz
setroubleshoot-2.2.69.tar.gz

108
setroubleshoot.spec
View File

@ -1,6 +1,6 @@
Summary: Helps troubleshoot SELinux problems Summary: Helps troubleshoot SELinux problems
Name: setroubleshoot Name: setroubleshoot
Version: 2.2.64 Version: 2.2.69
Release: 1%{?dist} Release: 1%{?dist}
License: GPLv2+ License: GPLv2+
Group: Applications/System Group: Applications/System
@ -214,6 +214,22 @@ Setroubleshoot documentation package
%doc %{pkgdocdir} %doc %{pkgdocdir}
%changelog %changelog
* Mon Mar 15 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.69-1
- Add white level, so plugins can tell setroubleshoot to ignore avc
* Mon Mar 8 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
- Fix browser to handle ignore flag
- Remove tpath for signature
- Fix audit2why handling for sealert and setroubleshoot
- Fix sort order selection
- Fix dontnotify handling
* Fri Mar 5 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.66-1
- Update translations
* Mon Feb 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.65-1
- Fix saving last position exception
* Sun Feb 14 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.64-1 * Sun Feb 14 2010 Dan Walsh <dwalsh@redhat.com> - 2.2.64-1
- Fix seapplet infinite loop from Tim Eliseo - Fix seapplet infinite loop from Tim Eliseo
@ -517,14 +533,14 @@ Setroubleshoot documentation package
and the selected alert has a fix command and the selected alert has a fix command
- add a config parameters 'run_fix_cmd_enable' to control if fix commands - add a config parameters 'run_fix_cmd_enable' to control if fix commands
can be run, defaults to False can be run, defaults to False
- Resolve bug #431380: prevent notify popups while setroubleshoot is open - Resolve bug 431380: prevent notify popups while setroubleshoot is open
* Wed Feb 6 2008 John Dennis <jdennis@redhat.com> - 2.0.5-1 * Wed Feb 6 2008 John Dennis <jdennis@redhat.com> - 2.0.5-1
- allow sealert -l lookup to accept * wildcard - allow sealert -l lookup to accept * wildcard
- add a few more audit fields needing special decode handling - add a few more audit fields needing special decode handling
* Thu Jan 31 2008 <jdennis@redhat.com> - 2.0.4-1 * Thu Jan 31 2008 <jdennis@redhat.com> - 2.0.4-1
- Resolve bug #430421: audit_listener_database.xml:3029: parser error in xmlParseDoc() - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
rewrite the audit_msg_decode logic to beaware of specific audit fields rewrite the audit_msg_decode logic to beaware of specific audit fields
- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
and is the full path name of $SOURCE, also add 'source' attribute in AVC class, and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
@ -533,33 +549,33 @@ Setroubleshoot documentation package
it had only been looking at path, fixes <Unknown> showing up for many targets it had only been looking at path, fixes <Unknown> showing up for many targets
- add exception handling around xml file writes (Alan Cox reports problem when /var is full) - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
- add testing documentation - add testing documentation
- Resolve bug #430845: obsolete URL in setroubleshoot package description - Resolve bug 430845: obsolete URL in setroubleshoot package description
- Resolve bug #428960: Permissive message makes no sense. - Resolve bug 428960: Permissive message makes no sense.
- init script now allows extra test options - init script now allows extra test options
- show_browser() now opens and raises the window (e.g. presents) rather than just - show_browser() now opens and raises the window (e.g. presents) rather than just
assuring it's realized (e.g. iconified, or hidden) assuring it's realized (e.g. iconified, or hidden)
- sealert -l message in syslog converts from html before writing to syslog - sealert -l message in syslog converts from html before writing to syslog
- Resolve bug #320881: export setroubleshoot_selinux_symposium in PDF format - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
- add code to verify all async rpc's have been cleared from the async rpc cache - add code to verify all async rpc's have been cleared from the async rpc cache
- add code to set a default rpc method return if the interface does not define a callbak - add code to set a default rpc method return if the interface does not define a callbak
(methods which did not have a callback were not returning anything and hence were no (methods which did not have a callback were not returning anything and hence were no
getting cleared from the cache) getting cleared from the cache)
* Fri Jan 11 2008 <jdennis@redhat.com> - 2.0.2-1 * Fri Jan 11 2008 <jdennis@redhat.com> - 2.0.2-1
- Resolve bug #428252: Problem with update/remove old version - Resolve bug 428252: Problem with update/remove old version
- Add code to validate xml database version, if file is incompatible it is not read, - Add code to validate xml database version, if file is incompatible it is not read,
the next time the database is written it will be in the new version format. the next time the database is written it will be in the new version format.
This means the database contents are not preserved across database version upgrades. This means the database contents are not preserved across database version upgrades.
- Remove postun trigger from spec file used to clear database between incompatible versions - Remove postun trigger from spec file used to clear database between incompatible versions
the new database version check during database read will handle this instead the new database version check during database read will handle this instead
- bullet proof exit status in init script and rpm scriptlets - bullet proof exit status in init script and rpm scriptlets
- Resolve bug #247302: setroubleshoot's autostart .desktop file fails to start under a KDE session - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
- Resolve bug #376041: Cannot check setroubleshoot service status as non-root - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
- Resolve bug #332281: remove obsolete translation - Resolve bug 332281: remove obsolete translation
- Resolve bug #344331: No description in gnome-session-properties - Resolve bug 344331: No description in gnome-session-properties
- Resolve bug #358581: missing libuser-python dependency - Resolve bug 358581: missing libuser-python dependency
- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
- Resolve bug #427260: German Translation - Resolve bug 427260: German Translation
- enhance the sealert man page - enhance the sealert man page
* Fri Jan 4 2008 <jdennis@redhat.com> - 2.0.1-1 * Fri Jan 4 2008 <jdennis@redhat.com> - 2.0.1-1
@ -569,8 +585,8 @@ Setroubleshoot documentation package
- rpc methods now check for authenticated state - rpc methods now check for authenticated state
- fix html handling of summary string - fix html handling of summary string
- add 'named' messages to status bar, make sure all messages either timeout or are named - add 'named' messages to status bar, make sure all messages either timeout or are named
- fix ordering of menus, resolves bug #427418 - fix ordering of menus, resolves bug 427418
- add 'hide quiet' to browser view filtering, resolves bug #427421 - add 'hide quiet' to browser view filtering, resolves bug 427421
- tweak siginfo text formatting - tweak siginfo text formatting
- add logon to SECommandLine so that sealert -l <local_id> works - add logon to SECommandLine so that sealert -l <local_id> works
@ -584,15 +600,15 @@ Setroubleshoot documentation package
- change identity to just username - change identity to just username
- make sure set_filter user validation works and reports error in browser - make sure set_filter user validation works and reports error in browser
- fix generation of line numbers and host when connected to audispd - fix generation of line numbers and host when connected to audispd
- add permissive notification, resolves bug #231334: Wording doesn't change for permissive mode - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
- resolves bug #244345: avc path information incomplete - resolves bug 244345: avc path information incomplete
- get the uid,gid when a client connects to the server - get the uid,gid when a client connects to the server
- set_filter now verifies the filter is owned by the user, - set_filter now verifies the filter is owned by the user,
- resolves bug #288261: setroubleshoot lack of user authentication - resolves bug 288261: setroubleshoot lack of user authentication
- remove filter options which weren't being used - remove filter options which weren't being used
- change '@' in audit data hostname to '.' - change '@' in audit data hostname to '.'
- remove restart dialog - remove restart dialog
resolves bug #321171: sealert's dialog after update is higly confusing resolves bug 321171: sealert's dialog after update is higly confusing
- fix rpc xml arg - fix rpc xml arg
- fix handling of host value - fix handling of host value
- tweak what fields are in signature - tweak what fields are in signature
@ -641,7 +657,7 @@ Setroubleshoot documentation package
- add "Host" column in browser - add "Host" column in browser
add "Toggle Column Visibility" menu to toggle display of any column on/off add "Toggle Column Visibility" menu to toggle display of any column on/off
- Resolves bug #310261: setroubleshoot notifications aren't throttled - Resolves bug 310261: setroubleshoot notifications aren't throttled
- add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
emit cached event. Disable timeouts used to flush events if emit cached event. Disable timeouts used to flush events if
@ -658,7 +674,7 @@ Setroubleshoot documentation package
- update Polish translation (Piotr Drąg (raven@pmail.pl)) - update Polish translation (Piotr Drąg (raven@pmail.pl))
- Resolves bug #239893: sealert wakes up very often - Resolves bug 239893: sealert wakes up very often
This was caused by the use of threads and pygtk's thread signal This was caused by the use of threads and pygtk's thread signal
handling. The only use of threads in sealert was for log file handling. The only use of threads in sealert was for log file
scanning so that the UI would remain responsive during a scanning so that the UI would remain responsive during a
@ -689,7 +705,7 @@ Setroubleshoot documentation package
been successfully run to completion, otherwise the user is only been successfully run to completion, otherwise the user is only
left with the option to cancel. left with the option to cancel.
- Relates bug #252035 bug #247469, setroubleshootd and sealert should - Relates bug 252035 bug 247469, setroubleshootd and sealert should
exit if SELinux is disabled. exit if SELinux is disabled.
- add utility functions escape_html() and unescape_html() - add utility functions escape_html() and unescape_html()
@ -710,7 +726,7 @@ Setroubleshoot documentation package
- require selinux policy version in spec file to allow system dbus use - require selinux policy version in spec file to allow system dbus use
- Resolves bug #256601: audit2allow generates incorrect syntax when comma "," in - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
denied list denied list
- update po i18n files - update po i18n files
@ -837,7 +853,7 @@ Setroubleshoot documentation package
- Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
- improve traceback error reporting in sealert - improve traceback error reporting in sealert
- rewrite AboutDialog, replacing glade version - rewrite AboutDialog, replacing glade version
- Resolves bug #229849 Bug# 230115, Relates bug #221850: fix uuid code to resolve - Resolves bug 229849 Bug# 230115, Relates bug 221850: fix uuid code to resolve
'_uuid_generate_random' is not defined error '_uuid_generate_random' is not defined error
* Thu Feb 22 2007 Dan Walsh <dwalsh@redhat.com> - 1.9.2-1 * Thu Feb 22 2007 Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
@ -857,12 +873,12 @@ Setroubleshoot documentation package
* Fri Feb 2 2007 John Dennis <jdennis@redhat.com> - 1.8.16-1 * Fri Feb 2 2007 John Dennis <jdennis@redhat.com> - 1.8.16-1
[John Dennis <jdennis@redhat.com>] [John Dennis <jdennis@redhat.com>]
- Resolves: Bug# 224343 sealert's "Aditional Info:" text should be in white box - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
- Resolves: Bug# 224336 sealert should have GtkRadioButtons in menu View - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
- Related: bug #224351 - Related: bug 224351
Rewrite parts of logging support to better support changing output Rewrite parts of logging support to better support changing output
categories, output destinations. Now -v -V verbose works in sealert. categories, output destinations. Now -v -V verbose works in sealert.
- Resolves bug# 225161, granted AVC's incorrectly identified as a denial - Resolves bug 225161, granted AVC's incorrectly identified as a denial
- add alert count to status bar - add alert count to status bar
- add "Help" command to Help menu, opens web browser on wiki User FAQ - add "Help" command to Help menu, opens web browser on wiki User FAQ
[Dan Walsh <dwalsh@redhat.com>] [Dan Walsh <dwalsh@redhat.com>]
@ -874,7 +890,7 @@ Setroubleshoot documentation package
- Cleanup Plugins - Cleanup Plugins
* Thu Jan 11 2007 John Dennis <jdennis@redhat.com> - 1.8.14-1 * Thu Jan 11 2007 John Dennis <jdennis@redhat.com> - 1.8.14-1
- Resolves: bug# 221850 - Fixes 221850
plugin module loading was failing in python 2.5 with the message plugin module loading was failing in python 2.5 with the message
"SystemError: Parent module 'plugins' not loaded". This is due to a "SystemError: Parent module 'plugins' not loaded". This is due to a
change in behavior between python 2.4 and 2.5, in python 2.4 the lack change in behavior between python 2.4 and 2.5, in python 2.4 the lack
@ -921,7 +937,7 @@ Setroubleshoot documentation package
- remove obsolte requires for python element tree - remove obsolte requires for python element tree
* Mon Dec 18 2006 John Dennis <jdennis@redhat.com> - 1.8.11-1 * Mon Dec 18 2006 John Dennis <jdennis@redhat.com> - 1.8.11-1
- Resolves: #216575, more translations - Fixes 216575, more translations
- Replace delete and expunge menu labels with something more intuitive - Replace delete and expunge menu labels with something more intuitive
- add ability for browser to be restarted with identical window - add ability for browser to be restarted with identical window
position and state position and state
@ -936,23 +952,23 @@ Setroubleshoot documentation package
* Wed Dec 9 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.10-1 * Wed Dec 9 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.10-1
- Improve quality of plugins - Improve quality of plugins
- Make matching easier - Make matching easier
- Resolves: #216575 - Fixes 216575
* Wed Dec 9 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.9-1 * Wed Dec 9 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.9-1
- Additional Translations - Additional Translations
- Resolves: #216575 - Fixes 216575
* Sat Dec 8 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.8-1 * Sat Dec 8 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.8-1
- Additional Translations - Additional Translations
- Change sealert to be able to run without X-Windows - Change sealert to be able to run without X-Windows
- Resolves: #216575 - Fixes 216575
* Fri Dec 8 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.7-1 * Fri Dec 8 2006 Dan Walsh <dwalsh@redhat.com> - 1.8.7-1
- Additional Translations - Additional Translations
- Change avc_audit.py to allow it to analyze /var/log/messages - Change avc_audit.py to allow it to analyze /var/log/messages
* Mon Dec 4 2006 John Dennis <jdennis@redhat.com> - 1.8.6-1 * Mon Dec 4 2006 John Dennis <jdennis@redhat.com> - 1.8.6-1
- Resolves: bug# 218150, - Fixes 218150,
"If view is set to "hide delete" you cannot filter new entries" "If view is set to "hide delete" you cannot filter new entries"
Actually, the bug was toggle cell renderer was connected to the Actually, the bug was toggle cell renderer was connected to the
base model instead of the model attached to the view, the sort base model instead of the model attached to the view, the sort
@ -964,9 +980,9 @@ Setroubleshoot documentation package
is initially empty, caused by last_selected_row == None is initially empty, caused by last_selected_row == None
* Thu Nov 30 2006 John Dennis <jdennis@redhat.com> - 1.8.3-1 * Thu Nov 30 2006 John Dennis <jdennis@redhat.com> - 1.8.3-1
- Resolves: bug# 217961, sealert needs pygtk2-libglade - Fixes 217961, sealert needs pygtk2-libglade
- more i18n translations - more i18n translations
- Resolves: bug# 217710, date representation did not respect locale, - Fixes 217710, date representation did not respect locale,
at the same time remove old date formatting code, now cruft since at the same time remove old date formatting code, now cruft since
we can't use it because it was specific to US English. we can't use it because it was specific to US English.
- fix how selections are handled when rows are expunged. - fix how selections are handled when rows are expunged.
@ -975,21 +991,21 @@ Setroubleshoot documentation package
table rows. table rows.
* Tue Nov 28 2006 John Dennis <jdennis@redhat.com> - 1.8.1-1 * Tue Nov 28 2006 John Dennis <jdennis@redhat.com> - 1.8.1-1
- Resolves: bug# 216936, bug# 215290, add 'Copy Alert' edit menu item - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
- clean up menu items, add tooltips - clean up menu items, add tooltips
- fix printing so it will work with multiple alerts, force font to - fix printing so it will work with multiple alerts, force font to
monospace 10pt, display error dialog if printing fails. monospace 10pt, display error dialog if printing fails.
- Resolves: bug# 216908, platform and raw audit messages were not wrapped - Fixes 216908, platform and raw audit messages were not wrapped
to fit on page. to fit on page.
- Related: bug# 216575, update i18n po files - Related: 216575, update i18n po files
- Resolves: bug# 216941, set default folder for save operation, also set - Fixes 216941, set default folder for save operation, also set
default filename default filename
- Resolves: #bug 216327 add menu items "toggle hide deleted", "select none". Add model - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
filter to control visibility of alerts filter to control visibility of alerts
- Resolves: bug# 214218, sealert with no command line - Fixes 214218, sealert with no command line
arguments induces startup as dbus service, this had been a arguments induces startup as dbus service, this had been a
regression. regression.
- Resolves: bug# 216327, rework how deletes are performed in browser. Delete - Fixes 216327, rework how deletes are performed in browser. Delete
now marks each seleted siginfo with a delete flag, expunge now marks each seleted siginfo with a delete flag, expunge
permanently deletes siginfo's marked for deletion, also add undelete permanently deletes siginfo's marked for deletion, also add undelete
command, removed delete confirmation dialog. Modify how text command, removed delete confirmation dialog. Modify how text
@ -1189,7 +1205,7 @@ it has already been seen
- Fix desktop - Fix desktop
* Tue Aug 22 2006 John Dennis <jdennis@redhat.com> - 0.30-1 * Tue Aug 22 2006 John Dennis <jdennis@redhat.com> - 0.30-1
- fix bug #203479, missing requires of audit-libs-python - fix bug 203479, missing requires of audit-libs-python
- add support to sealert to listen on a dbus session signal to display - add support to sealert to listen on a dbus session signal to display
the gui. This is needed for when the status icon is not visible and the gui. This is needed for when the status icon is not visible and
the user wants to see the UI. There is now a seperate program the user wants to see the UI. There is now a seperate program
@ -1232,7 +1248,7 @@ it has already been seen
* Thu Aug 17 2006 John Dennis <jdennis@redhat.com> - 0.23-1 * Thu Aug 17 2006 John Dennis <jdennis@redhat.com> - 0.23-1
- fix for bug #202206, require correct version of audit, - fix for bug 202206, require correct version of audit,
fixes for audit connection. fixes for audit connection.
* Thu Aug 10 2006 Dan Walsh <dwalsh@redhat.com> - 0.20-1 * Thu Aug 10 2006 Dan Walsh <dwalsh@redhat.com> - 0.20-1

2
sources
View File

@ -1 +1 @@
b44b3700523f48d88312dd5171d263b1 setroubleshoot-2.2.64.tar.gz 2aea3df47f68620944841fea2e0c6b1b setroubleshoot-2.2.69.tar.gz