From: <ssm...@us...> - 2007-12-21 17:06:11
|
Revision: 2712 http://selinux.svn.sourceforge.net/selinux/?rev=2712&view=rev Author: ssmalley Date: 2007-12-21 09:06:08 -0800 (Fri, 21 Dec 2007) Log Message: ----------- updated libselinux to version 2.0.47 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2007-12-21 17:04:57 UTC (rev 2711) +++ trunk/libselinux/ChangeLog 2007-12-21 17:06:08 UTC (rev 2712) @@ -1,3 +1,6 @@ +2.0.47 2007-12-21 + * Fix for the avc: granted null message bug from Stephen Smalley. + 2.0.46 2007-12-07 * matchpathcon(8) man page update from Dan Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2007-12-21 17:04:57 UTC (rev 2711) +++ trunk/libselinux/VERSION 2007-12-21 17:06:08 UTC (rev 2712) @@ -1 +1 @@ -2.0.46 +2.0.47 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-01-23 14:23:58
|
Revision: 2737 http://selinux.svn.sourceforge.net/selinux/?rev=2737&view=rev Author: ssmalley Date: 2008-01-23 06:23:57 -0800 (Wed, 23 Jan 2008) Log Message: ----------- updated libselinux to version 2.0.48 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-01-23 14:19:47 UTC (rev 2736) +++ trunk/libselinux/ChangeLog 2008-01-23 14:23:57 UTC (rev 2737) @@ -1,3 +1,6 @@ +2.0.48 2008-01-23 + * Merged updated swig bindings from Dan Walsh, including typemap for pid_t. + 2.0.47 2007-12-21 * Fix for the avc: granted null message bug from Stephen Smalley. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-01-23 14:19:47 UTC (rev 2736) +++ trunk/libselinux/VERSION 2008-01-23 14:23:57 UTC (rev 2737) @@ -1 +1 @@ -2.0.47 +2.0.48 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-01-23 20:57:26
|
Revision: 2746 http://selinux.svn.sourceforge.net/selinux/?rev=2746&view=rev Author: ssmalley Date: 2008-01-23 12:57:24 -0800 (Wed, 23 Jan 2008) Log Message: ----------- updated libselinux to version 2.0.49 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-01-23 20:54:01 UTC (rev 2745) +++ trunk/libselinux/ChangeLog 2008-01-23 20:57:24 UTC (rev 2746) @@ -1,3 +1,6 @@ +2.0.49 2008-01-23 + * Merged audit2why python binding from Dan Walsh. + 2.0.48 2008-01-23 * Merged updated swig bindings from Dan Walsh, including typemap for pid_t. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-01-23 20:54:01 UTC (rev 2745) +++ trunk/libselinux/VERSION 2008-01-23 20:57:24 UTC (rev 2746) @@ -1 +1 @@ -2.0.48 +2.0.49 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-01-28 13:06:05
|
Revision: 2763 http://selinux.svn.sourceforge.net/selinux/?rev=2763&view=rev Author: ssmalley Date: 2008-01-28 05:06:00 -0800 (Mon, 28 Jan 2008) Log Message: ----------- updated libselinux to version 2.0.50 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-01-28 13:05:17 UTC (rev 2762) +++ trunk/libselinux/ChangeLog 2008-01-28 13:06:00 UTC (rev 2763) @@ -1,3 +1,6 @@ +2.0.50 2008-01-28 + * Merged fix for audit2why from Dan Walsh. + 2.0.49 2008-01-23 * Merged audit2why python binding from Dan Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-01-28 13:05:17 UTC (rev 2762) +++ trunk/libselinux/VERSION 2008-01-28 13:06:00 UTC (rev 2763) @@ -1 +1 @@ -2.0.49 +2.0.50 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-05 21:18:53
|
Revision: 2790 http://selinux.svn.sourceforge.net/selinux/?rev=2790&view=rev Author: ssmalley Date: 2008-02-05 13:18:52 -0800 (Tue, 05 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.51 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-05 21:17:02 UTC (rev 2789) +++ trunk/libselinux/ChangeLog 2008-02-05 21:18:52 UTC (rev 2790) @@ -1,3 +1,6 @@ +2.0.51 2008-02-05 + * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley. + 2.0.50 2008-01-28 * Merged fix for audit2why from Dan Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-05 21:17:02 UTC (rev 2789) +++ trunk/libselinux/VERSION 2008-02-05 21:18:52 UTC (rev 2790) @@ -1 +1 @@ -2.0.50 +2.0.51 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-06 18:57:47
|
Revision: 2793 http://selinux.svn.sourceforge.net/selinux/?rev=2793&view=rev Author: ssmalley Date: 2008-02-06 10:57:45 -0800 (Wed, 06 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.52 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-06 18:57:01 UTC (rev 2792) +++ trunk/libselinux/ChangeLog 2008-02-06 18:57:45 UTC (rev 2793) @@ -1,3 +1,6 @@ +2.0.52 2008-02-06 + * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. + 2.0.51 2008-02-05 * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-06 18:57:01 UTC (rev 2792) +++ trunk/libselinux/VERSION 2008-02-06 18:57:45 UTC (rev 2793) @@ -1 +1 @@ -2.0.51 +2.0.52 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-07 22:08:59
|
Revision: 2794 http://selinux.svn.sourceforge.net/selinux/?rev=2794&view=rev Author: ewalsh Date: 2008-02-07 14:06:37 -0800 (Thu, 07 Feb 2008) Log Message: ----------- Author: Eamon Walsh Email: ew...@ty... Subject: libselinux: add "poly_property" type to X contexts backend Date: Tue, 05 Feb 2008 16:30:46 -0500 This patch adds a poly_property type to the X contexts backend, so that the X Flask module can be informed which properties to polyinstantiate. Signed-off-by: Eamon Walsh <ew...@ty...> Acked-by: Stephen Smalley <sd...@ty...> Modified Paths: -------------- trunk/libselinux/include/selinux/label.h trunk/libselinux/src/label_x.c Modified: trunk/libselinux/include/selinux/label.h =================================================================== --- trunk/libselinux/include/selinux/label.h 2008-02-06 18:57:45 UTC (rev 2793) +++ trunk/libselinux/include/selinux/label.h 2008-02-07 22:06:37 UTC (rev 2794) @@ -113,6 +113,7 @@ #define SELABEL_X_CLIENT 3 #define SELABEL_X_EVENT 4 #define SELABEL_X_SELN 5 +#define SELABEL_X_POLYPROP 6 #ifdef __cplusplus Modified: trunk/libselinux/src/label_x.c =================================================================== --- trunk/libselinux/src/label_x.c 2008-02-06 18:57:45 UTC (rev 2793) +++ trunk/libselinux/src/label_x.c 2008-02-07 22:06:37 UTC (rev 2794) @@ -69,6 +69,8 @@ data->spec_arr[data->nspec].type = SELABEL_X_EVENT; else if (!strcmp(type, "selection")) data->spec_arr[data->nspec].type = SELABEL_X_SELN; + else if (!strcmp(type, "poly_property")) + data->spec_arr[data->nspec].type = SELABEL_X_POLYPROP; else { selinux_log(SELINUX_WARNING, "%s: line %d has invalid object type %s\n", This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-07 23:00:06
|
Revision: 2795 http://selinux.svn.sourceforge.net/selinux/?rev=2795&view=rev Author: ewalsh Date: 2008-02-07 14:07:27 -0800 (Thu, 07 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.53 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-07 22:06:37 UTC (rev 2794) +++ trunk/libselinux/ChangeLog 2008-02-07 22:07:27 UTC (rev 2795) @@ -1,3 +1,6 @@ +2.0.53 2008-02-07 + * Merged new X label "poly_prop" namespace from Eamon Walsh. + 2.0.52 2008-02-06 * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-07 22:06:37 UTC (rev 2794) +++ trunk/libselinux/VERSION 2008-02-07 22:07:27 UTC (rev 2795) @@ -1 +1 @@ -2.0.52 +2.0.53 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-08 16:13:45
|
Revision: 2797 http://selinux.svn.sourceforge.net/selinux/?rev=2797&view=rev Author: ssmalley Date: 2008-02-08 08:13:33 -0800 (Fri, 08 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.54 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-08 16:12:29 UTC (rev 2796) +++ trunk/libselinux/ChangeLog 2008-02-08 16:13:33 UTC (rev 2797) @@ -1,3 +1,6 @@ +2.0.54 2008-02-08 + * Provide more error reporting on load policy failures from Stephen Smalley. + 2.0.53 2008-02-07 * Merged new X label "poly_prop" namespace from Eamon Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-08 16:12:29 UTC (rev 2796) +++ trunk/libselinux/VERSION 2008-02-08 16:13:33 UTC (rev 2797) @@ -1 +1 @@ -2.0.53 +2.0.54 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-08 18:03:54
|
Revision: 2800 http://selinux.svn.sourceforge.net/selinux/?rev=2800&view=rev Author: ewalsh Date: 2008-02-08 10:03:06 -0800 (Fri, 08 Feb 2008) Log Message: ----------- Author: Eamon Walsh Email: ew...@ty... Subject: libselinux: avc_compute_member convenience function Date: Thu, 07 Feb 2008 17:42:31 -0500 avc_compute_member function, same as security_compute_member but takes userspace AVC SID's. Includes man page. Signed-off-by: Eamon Walsh <ew...@ty...> Acked-by: Stephen Smalley <sd...@ty...> Modified Paths: -------------- trunk/libselinux/include/selinux/avc.h trunk/libselinux/man/man3/avc_compute_create.3 trunk/libselinux/src/avc.c Added Paths: ----------- trunk/libselinux/man/man3/avc_compute_member.3 Modified: trunk/libselinux/include/selinux/avc.h =================================================================== --- trunk/libselinux/include/selinux/avc.h 2008-02-08 16:18:54 UTC (rev 2799) +++ trunk/libselinux/include/selinux/avc.h 2008-02-08 18:03:06 UTC (rev 2800) @@ -322,6 +322,24 @@ security_id_t tsid, security_class_t tclass, security_id_t * newsid); +/** + * avc_compute_member - Compute SID for polyinstantation. + * @ssid: source security identifier + * @tsid: target security identifier + * @tclass: target security class + * @newsid: pointer to SID reference + * + * Call the security server to obtain a context for labeling an + * object instance. Look up the context in the SID table, making + * a new entry if not found. Increment the reference counter + * for the SID. Store a pointer to the SID structure into the + * memory referenced by @newsid, returning %0 on success or -%1 on + * error with @errno set. + */ +int avc_compute_member(security_id_t ssid, + security_id_t tsid, + security_class_t tclass, security_id_t * newsid); + /* * security event callback facility */ Modified: trunk/libselinux/man/man3/avc_compute_create.3 =================================================================== --- trunk/libselinux/man/man3/avc_compute_create.3 2008-02-08 16:18:54 UTC (rev 2799) +++ trunk/libselinux/man/man3/avc_compute_create.3 2008-02-08 18:03:06 UTC (rev 2800) @@ -3,7 +3,7 @@ .\" Author: Eamon Walsh (ew...@ty...) 2007 .TH "avc_compute_create" "3" "30 Mar 2007" "" "SELinux API documentation" .SH "NAME" -avc_compute_create \- obtain SELinux label for new object. +avc_compute_create, avc_compute_member \- obtain SELinux label for new object. .SH "SYNOPSIS" .B #include <selinux/selinux.h> @@ -12,15 +12,25 @@ .BI "int avc_compute_create(security_id_t " ssid ", security_id_t " tsid , .in +\w'int avc_compute_create('u .BI "security_class_t " tclass ", security_id_t *" newsid ");" +.sp .in +.BI "int avc_compute_member(security_id_t " ssid ", security_id_t " tsid , +.in +\w'int avc_compute_member('u +.BI "security_class_t " tclass ", security_id_t *" newsid ");" +.in .SH "DESCRIPTION" .B avc_compute_create is used to compute a SID to use for labeling a new object in a particular class based on a SID pair. This call is identical to .BR security_compute_create , but does not require converting from userspace SID's to contexts and back again. -.B avc_compute_create -returns a SID for the computed context in the memory referenced by +.B avc_compute_member +is used to compute a SID to use for labeling a polyinstantiated object instance of a particular class based on a SID pair. This call is identical to +.BR security_compute_member , +but does not require converting from userspace SID's to contexts and back again. + +These functions +return a SID for the computed context in the memory referenced by .IR sid , incrementing its reference count by 1. Added: trunk/libselinux/man/man3/avc_compute_member.3 =================================================================== --- trunk/libselinux/man/man3/avc_compute_member.3 (rev 0) +++ trunk/libselinux/man/man3/avc_compute_member.3 2008-02-08 18:03:06 UTC (rev 2800) @@ -0,0 +1 @@ +.so man3/avc_compute_create.3 Modified: trunk/libselinux/src/avc.c =================================================================== --- trunk/libselinux/src/avc.c 2008-02-08 16:18:54 UTC (rev 2799) +++ trunk/libselinux/src/avc.c 2008-02-08 18:03:06 UTC (rev 2800) @@ -906,6 +906,31 @@ return rc; } +int avc_compute_member(security_id_t ssid, security_id_t tsid, + security_class_t tclass, security_id_t *newsid) +{ + int rc; + *newsid = NULL; + avc_get_lock(avc_lock); + if (ssid->refcnt > 0 && tsid->refcnt > 0) { + security_context_t ctx = NULL; + rc = security_compute_member_raw(ssid->ctx, tsid->ctx, tclass, + &ctx); + if (rc) + goto out; + rc = sidtab_context_to_sid(&avc_sidtab, ctx, newsid); + if (!rc) + (*newsid)->refcnt++; + freecon(ctx); + } else { + errno = EINVAL; /* bad reference count */ + rc = -1; + } +out: + avc_release_lock(avc_lock); + return rc; +} + int avc_add_callback(int (*callback) (uint32_t event, security_id_t ssid, security_id_t tsid, security_class_t tclass, This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-08 18:10:08
|
Revision: 2802 http://selinux.svn.sourceforge.net/selinux/?rev=2802&view=rev Author: ewalsh Date: 2008-02-08 10:10:06 -0800 (Fri, 08 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.55 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-08 18:09:01 UTC (rev 2801) +++ trunk/libselinux/ChangeLog 2008-02-08 18:10:06 UTC (rev 2802) @@ -1,3 +1,6 @@ +2.0.55 2008-02-08 + * Merged compute_member AVC function and manpages from Eamon Walsh. + 2.0.54 2008-02-08 * Provide more error reporting on load policy failures from Stephen Smalley. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-08 18:09:01 UTC (rev 2801) +++ trunk/libselinux/VERSION 2008-02-08 18:10:06 UTC (rev 2802) @@ -1 +1 @@ -2.0.54 +2.0.55 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-21 17:00:15
|
Revision: 2808 http://selinux.svn.sourceforge.net/selinux/?rev=2808&view=rev Author: ssmalley Date: 2008-02-21 08:12:21 -0800 (Thu, 21 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.56 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-21 16:11:33 UTC (rev 2807) +++ trunk/libselinux/ChangeLog 2008-02-21 16:12:21 UTC (rev 2808) @@ -1,3 +1,6 @@ +2.0.56 2008-02-21 + * Regenerated Flask headers from refpolicy flask definitions. + 2.0.55 2008-02-08 * Merged compute_member AVC function and manpages from Eamon Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-21 16:11:33 UTC (rev 2807) +++ trunk/libselinux/VERSION 2008-02-21 16:12:21 UTC (rev 2808) @@ -1 +1 @@ -2.0.55 +2.0.56 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-21 17:59:06
|
Revision: 2807 http://selinux.svn.sourceforge.net/selinux/?rev=2807&view=rev Author: ssmalley Date: 2008-02-21 08:11:33 -0800 (Thu, 21 Feb 2008) Log Message: ----------- Regenerate Flask headers from latest refpolicy definitions. Modified Paths: -------------- trunk/libselinux/include/selinux/av_permissions.h trunk/libselinux/include/selinux/flask.h trunk/libselinux/src/av_perm_to_string.h trunk/libselinux/src/class_to_string.h Modified: trunk/libselinux/include/selinux/av_permissions.h =================================================================== --- trunk/libselinux/include/selinux/av_permissions.h 2008-02-20 15:32:51 UTC (rev 2806) +++ trunk/libselinux/include/selinux/av_permissions.h 2008-02-21 16:11:33 UTC (rev 2807) @@ -298,6 +298,8 @@ #define NODE__ENFORCE_DEST 0x00000040UL #define NODE__DCCP_RECV 0x00000080UL #define NODE__DCCP_SEND 0x00000100UL +#define NODE__RECVFROM 0x00000200UL +#define NODE__SENDTO 0x00000400UL #define NETIF__TCP_RECV 0x00000001UL #define NETIF__TCP_SEND 0x00000002UL #define NETIF__UDP_RECV 0x00000004UL @@ -306,6 +308,8 @@ #define NETIF__RAWIP_SEND 0x00000020UL #define NETIF__DCCP_RECV 0x00000040UL #define NETIF__DCCP_SEND 0x00000080UL +#define NETIF__INGRESS 0x00000100UL +#define NETIF__EGRESS 0x00000200UL #define NETLINK_SOCKET__IOCTL 0x00000001UL #define NETLINK_SOCKET__READ 0x00000002UL #define NETLINK_SOCKET__WRITE 0x00000004UL @@ -535,6 +539,9 @@ #define CAPABILITY__LEASE 0x10000000UL #define CAPABILITY__AUDIT_WRITE 0x20000000UL #define CAPABILITY__AUDIT_CONTROL 0x40000000UL +#define CAPABILITY__SETFCAP 0x80000000UL +#define CAPABILITY2__MAC_OVERRIDE 0x00000001UL +#define CAPABILITY2__MAC_ADMIN 0x00000002UL #define PASSWD__PASSWD 0x00000001UL #define PASSWD__CHFN 0x00000002UL #define PASSWD__CHSH 0x00000004UL @@ -900,6 +907,10 @@ #define PACKET__SEND 0x00000001UL #define PACKET__RECV 0x00000002UL #define PACKET__RELABELTO 0x00000004UL +#define PACKET__FLOW_IN 0x00000008UL +#define PACKET__FLOW_OUT 0x00000010UL +#define PACKET__FORWARD_IN 0x00000020UL +#define PACKET__FORWARD_OUT 0x00000040UL #define KEY__VIEW 0x00000001UL #define KEY__READ 0x00000002UL #define KEY__WRITE 0x00000004UL @@ -992,3 +1003,4 @@ #define DB_BLOB__WRITE 0x00000080UL #define DB_BLOB__IMPORT 0x00000100UL #define DB_BLOB__EXPORT 0x00000200UL +#define PEER__RECV 0x00000001UL Modified: trunk/libselinux/include/selinux/flask.h =================================================================== --- trunk/libselinux/include/selinux/flask.h 2008-02-20 15:32:51 UTC (rev 2806) +++ trunk/libselinux/include/selinux/flask.h 2008-02-21 16:11:33 UTC (rev 2807) @@ -72,6 +72,8 @@ #define SECCLASS_DB_COLUMN 65 #define SECCLASS_DB_TUPLE 66 #define SECCLASS_DB_BLOB 67 +#define SECCLASS_PEER 68 +#define SECCLASS_CAPABILITY2 69 /* * Security identifier indices for initial entities Modified: trunk/libselinux/src/av_perm_to_string.h =================================================================== --- trunk/libselinux/src/av_perm_to_string.h 2008-02-20 15:32:51 UTC (rev 2806) +++ trunk/libselinux/src/av_perm_to_string.h 2008-02-21 16:11:33 UTC (rev 2807) @@ -37,6 +37,8 @@ S_(SECCLASS_NODE, NODE__ENFORCE_DEST, "enforce_dest") S_(SECCLASS_NODE, NODE__DCCP_RECV, "dccp_recv") S_(SECCLASS_NODE, NODE__DCCP_SEND, "dccp_send") + S_(SECCLASS_NODE, NODE__RECVFROM, "recvfrom") + S_(SECCLASS_NODE, NODE__SENDTO, "sendto") S_(SECCLASS_NETIF, NETIF__TCP_RECV, "tcp_recv") S_(SECCLASS_NETIF, NETIF__TCP_SEND, "tcp_send") S_(SECCLASS_NETIF, NETIF__UDP_RECV, "udp_recv") @@ -45,6 +47,8 @@ S_(SECCLASS_NETIF, NETIF__RAWIP_SEND, "rawip_send") S_(SECCLASS_NETIF, NETIF__DCCP_RECV, "dccp_recv") S_(SECCLASS_NETIF, NETIF__DCCP_SEND, "dccp_send") + S_(SECCLASS_NETIF, NETIF__INGRESS, "ingress") + S_(SECCLASS_NETIF, NETIF__EGRESS, "egress") S_(SECCLASS_UNIX_STREAM_SOCKET, UNIX_STREAM_SOCKET__CONNECTTO, "connectto") S_(SECCLASS_UNIX_STREAM_SOCKET, UNIX_STREAM_SOCKET__NEWCONN, "newconn") S_(SECCLASS_UNIX_STREAM_SOCKET, UNIX_STREAM_SOCKET__ACCEPTFROM, "acceptfrom") @@ -128,6 +132,9 @@ S_(SECCLASS_CAPABILITY, CAPABILITY__LEASE, "lease") S_(SECCLASS_CAPABILITY, CAPABILITY__AUDIT_WRITE, "audit_write") S_(SECCLASS_CAPABILITY, CAPABILITY__AUDIT_CONTROL, "audit_control") + S_(SECCLASS_CAPABILITY, CAPABILITY__SETFCAP, "setfcap") + S_(SECCLASS_CAPABILITY2, CAPABILITY2__MAC_OVERRIDE, "mac_override") + S_(SECCLASS_CAPABILITY2, CAPABILITY2__MAC_ADMIN, "mac_admin") S_(SECCLASS_PASSWD, PASSWD__PASSWD, "passwd") S_(SECCLASS_PASSWD, PASSWD__CHFN, "chfn") S_(SECCLASS_PASSWD, PASSWD__CHSH, "chsh") @@ -251,6 +258,10 @@ S_(SECCLASS_PACKET, PACKET__SEND, "send") S_(SECCLASS_PACKET, PACKET__RECV, "recv") S_(SECCLASS_PACKET, PACKET__RELABELTO, "relabelto") + S_(SECCLASS_PACKET, PACKET__FLOW_IN, "flow_in") + S_(SECCLASS_PACKET, PACKET__FLOW_OUT, "flow_out") + S_(SECCLASS_PACKET, PACKET__FORWARD_IN, "forward_in") + S_(SECCLASS_PACKET, PACKET__FORWARD_OUT, "forward_out") S_(SECCLASS_KEY, KEY__VIEW, "view") S_(SECCLASS_KEY, KEY__READ, "read") S_(SECCLASS_KEY, KEY__WRITE, "write") @@ -291,3 +302,4 @@ S_(SECCLASS_DB_BLOB, DB_BLOB__WRITE, "write") S_(SECCLASS_DB_BLOB, DB_BLOB__IMPORT, "import") S_(SECCLASS_DB_BLOB, DB_BLOB__EXPORT, "export") + S_(SECCLASS_PEER, PEER__RECV, "recv") Modified: trunk/libselinux/src/class_to_string.h =================================================================== --- trunk/libselinux/src/class_to_string.h 2008-02-20 15:32:51 UTC (rev 2806) +++ trunk/libselinux/src/class_to_string.h 2008-02-21 16:11:33 UTC (rev 2807) @@ -70,3 +70,5 @@ S_("db_column") S_("db_tuple") S_("db_blob") + S_("peer") + S_("capability2") This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-25 20:47:23
|
Revision: 2813 http://selinux.svn.sourceforge.net/selinux/?rev=2813&view=rev Author: ewalsh Date: 2008-02-25 12:47:12 -0800 (Mon, 25 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.57 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-25 20:45:32 UTC (rev 2812) +++ trunk/libselinux/ChangeLog 2008-02-25 20:47:12 UTC (rev 2813) @@ -1,3 +1,6 @@ +2.0.57 2008-02-25 + * Merged avc_has_perm() errno fix from Eamon Walsh. + 2.0.56 2008-02-21 * Regenerated Flask headers from refpolicy flask definitions. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-25 20:45:32 UTC (rev 2812) +++ trunk/libselinux/VERSION 2008-02-25 20:47:12 UTC (rev 2813) @@ -1 +1 @@ -2.0.56 +2.0.57 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-02-28 20:38:57
|
Revision: 2822 http://selinux.svn.sourceforge.net/selinux/?rev=2822&view=rev Author: ssmalley Date: 2008-02-28 12:38:55 -0800 (Thu, 28 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.58 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-28 20:38:11 UTC (rev 2821) +++ trunk/libselinux/ChangeLog 2008-02-28 20:38:55 UTC (rev 2822) @@ -1,3 +1,6 @@ +2.0.58 2008-02-28 + * Merged reset_selinux_config() for load policy from Dan Walsh. + 2.0.57 2008-02-25 * Merged avc_has_perm() errno fix from Eamon Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-28 20:38:11 UTC (rev 2821) +++ trunk/libselinux/VERSION 2008-02-28 20:38:55 UTC (rev 2822) @@ -1 +1 @@ -2.0.57 +2.0.58 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-29 06:44:37
|
Revision: 2827 http://selinux.svn.sourceforge.net/selinux/?rev=2827&view=rev Author: ewalsh Date: 2008-02-28 22:44:34 -0800 (Thu, 28 Feb 2008) Log Message: ----------- This patch adds a poly_selection type to the X contexts backend, so that the X Flask module can be informed which selections to polyinstantiate. Signed-off-by: Eamon Walsh <ew...@ty...> Modified Paths: -------------- trunk/libselinux/include/selinux/label.h trunk/libselinux/src/label_x.c Modified: trunk/libselinux/include/selinux/label.h =================================================================== --- trunk/libselinux/include/selinux/label.h 2008-02-28 20:41:51 UTC (rev 2826) +++ trunk/libselinux/include/selinux/label.h 2008-02-29 06:44:34 UTC (rev 2827) @@ -114,6 +114,7 @@ #define SELABEL_X_EVENT 4 #define SELABEL_X_SELN 5 #define SELABEL_X_POLYPROP 6 +#define SELABEL_X_POLYSELN 7 #ifdef __cplusplus Modified: trunk/libselinux/src/label_x.c =================================================================== --- trunk/libselinux/src/label_x.c 2008-02-28 20:41:51 UTC (rev 2826) +++ trunk/libselinux/src/label_x.c 2008-02-29 06:44:34 UTC (rev 2827) @@ -71,6 +71,8 @@ data->spec_arr[data->nspec].type = SELABEL_X_SELN; else if (!strcmp(type, "poly_property")) data->spec_arr[data->nspec].type = SELABEL_X_POLYPROP; + else if (!strcmp(type, "poly_selection")) + data->spec_arr[data->nspec].type = SELABEL_X_POLYSELN; else { selinux_log(SELINUX_WARNING, "%s: line %d has invalid object type %s\n", This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ew...@us...> - 2008-02-29 06:46:20
|
Revision: 2828 http://selinux.svn.sourceforge.net/selinux/?rev=2828&view=rev Author: ewalsh Date: 2008-02-28 22:46:18 -0800 (Thu, 28 Feb 2008) Log Message: ----------- updated libselinux to version 2.0.59 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-02-29 06:44:34 UTC (rev 2827) +++ trunk/libselinux/ChangeLog 2008-02-29 06:46:18 UTC (rev 2828) @@ -1,3 +1,6 @@ +2.0.59 2008-02-29 + * Merged new X label "poly_selection" namespace from Eamon Walsh. + 2.0.58 2008-02-28 * Merged reset_selinux_config() for load policy from Dan Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-02-29 06:44:34 UTC (rev 2827) +++ trunk/libselinux/VERSION 2008-02-29 06:46:18 UTC (rev 2828) @@ -1 +1 @@ -2.0.58 +2.0.59 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-03-20 19:02:18
|
Revision: 2854 http://selinux.svn.sourceforge.net/selinux/?rev=2854&view=rev Author: ssmalley Date: 2008-03-20 12:01:26 -0700 (Thu, 20 Mar 2008) Log Message: ----------- updated libselinux to version 2.0.60 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-03-20 18:59:05 UTC (rev 2853) +++ trunk/libselinux/ChangeLog 2008-03-20 19:01:26 UTC (rev 2854) @@ -1,3 +1,6 @@ +2.0.60 2008-03-20 + * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel. + 2.0.59 2008-02-29 * Merged new X label "poly_selection" namespace from Eamon Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-03-20 18:59:05 UTC (rev 2853) +++ trunk/libselinux/VERSION 2008-03-20 19:01:26 UTC (rev 2854) @@ -1 +1 @@ -2.0.59 +2.0.60 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-03-31 14:22:41
|
Revision: 2860 http://selinux.svn.sourceforge.net/selinux/?rev=2860&view=rev Author: ssmalley Date: 2008-03-31 07:22:40 -0700 (Mon, 31 Mar 2008) Log Message: ----------- updated libselinux to version 2.0.61 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-03-31 14:21:13 UTC (rev 2859) +++ trunk/libselinux/ChangeLog 2008-03-31 14:22:40 UTC (rev 2860) @@ -1,3 +1,6 @@ +2.0.61 2008-03-31 + * Man page typo fix from Jim Meyering. + 2.0.60 2008-03-20 * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-03-31 14:21:13 UTC (rev 2859) +++ trunk/libselinux/VERSION 2008-03-31 14:22:40 UTC (rev 2860) @@ -1 +1 @@ -2.0.60 +2.0.61 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-04-18 13:48:56
|
Revision: 2862 http://selinux.svn.sourceforge.net/selinux/?rev=2862&view=rev Author: ssmalley Date: 2008-04-18 06:48:24 -0700 (Fri, 18 Apr 2008) Log Message: ----------- updated libselinux to version 2.0.62 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-04-18 13:47:18 UTC (rev 2861) +++ trunk/libselinux/ChangeLog 2008-04-18 13:48:24 UTC (rev 2862) @@ -1,3 +1,6 @@ +2.0.62 2008-04-18 + * Fix memory leaks in matchpathcon from Eamon Walsh. + 2.0.61 2008-03-31 * Man page typo fix from Jim Meyering. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-04-18 13:47:18 UTC (rev 2861) +++ trunk/libselinux/VERSION 2008-04-18 13:48:24 UTC (rev 2862) @@ -1 +1 @@ -2.0.61 +2.0.62 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-04-18 13:52:14
|
Revision: 2864 http://selinux.svn.sourceforge.net/selinux/?rev=2864&view=rev Author: ssmalley Date: 2008-04-18 06:52:10 -0700 (Fri, 18 Apr 2008) Log Message: ----------- updated libselinux to version 2.0.63 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-04-18 13:50:58 UTC (rev 2863) +++ trunk/libselinux/ChangeLog 2008-04-18 13:52:10 UTC (rev 2864) @@ -1,3 +1,6 @@ +2.0.63 2008-04-18 + * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. + 2.0.62 2008-04-18 * Fix memory leaks in matchpathcon from Eamon Walsh. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-04-18 13:50:58 UTC (rev 2863) +++ trunk/libselinux/VERSION 2008-04-18 13:52:10 UTC (rev 2864) @@ -1 +1 @@ -2.0.62 +2.0.63 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-04-21 17:00:39
|
Revision: 2874 http://selinux.svn.sourceforge.net/selinux/?rev=2874&view=rev Author: ssmalley Date: 2008-04-21 09:59:06 -0700 (Mon, 21 Apr 2008) Log Message: ----------- updated libselinux to version 2.0.64 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-04-21 16:58:38 UTC (rev 2873) +++ trunk/libselinux/ChangeLog 2008-04-21 16:59:06 UTC (rev 2874) @@ -1,3 +1,6 @@ +2.0.64 2008-04-21 + * Fixed selinux_set_callback man page. + 2.0.63 2008-04-18 * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-04-21 16:58:38 UTC (rev 2873) +++ trunk/libselinux/VERSION 2008-04-21 16:59:06 UTC (rev 2874) @@ -1 +1 @@ -2.0.63 +2.0.64 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-05-27 19:53:33
|
Revision: 2884 http://selinux.svn.sourceforge.net/selinux/?rev=2884&view=rev Author: ssmalley Date: 2008-05-27 12:53:31 -0700 (Tue, 27 May 2008) Log Message: ----------- Author: Stephen Smalley Email: sd...@ty... Subject: Is there a command line tool that returns 1 if a file is in the wrong context? Date: Tue, 27 May 2008 11:28:38 -0400 On Sat, 2008-05-24 at 18:58 -0500, Joe Nall wrote: > Is there a command line tool that returns 1 if a file is in the wrong > context?. I want to add a %verifyscript to our rpms to validate the > installed file context when rpm -V is invoked. I was going to suggest matchpathcon -V, except when trying it, I found that there is a bug in the current libselinux that makes it seg fault and it also doesn't return the status but rather displays it. So how about the patch below to fix the bug and make the exit status usable? After this patch, you can run '/usr/sbin/matchpathcon -Vq path1 [path2...]' and check the exit status; 0 will mean that all verified; non-zero will be the count of failures. Modified Paths: -------------- trunk/libselinux/src/matchpathcon.c trunk/libselinux/utils/matchpathcon.c Modified: trunk/libselinux/src/matchpathcon.c =================================================================== --- trunk/libselinux/src/matchpathcon.c 2008-05-16 13:29:32 UTC (rev 2883) +++ trunk/libselinux/src/matchpathcon.c 2008-05-27 19:53:31 UTC (rev 2884) @@ -372,6 +372,9 @@ else return 0; } + + if (!hnd && (matchpathcon_init_prefix(NULL, NULL) < 0)) + return -1; if (selabel_lookup_raw(hnd, &fcontext, path, mode) != 0) { if (errno != ENOENT) @@ -394,6 +397,9 @@ if (lstat(path, &st) != 0) return rc; + if (!hnd && (matchpathcon_init_prefix(NULL, NULL) < 0)) + return -1; + /* If there's an error determining the context, or it has none, return to allow default context */ if (selabel_lookup_raw(hnd, &scontext, path, st.st_mode)) { Modified: trunk/libselinux/utils/matchpathcon.c =================================================================== --- trunk/libselinux/utils/matchpathcon.c 2008-05-16 13:29:32 UTC (rev 2883) +++ trunk/libselinux/utils/matchpathcon.c 2008-05-27 19:53:31 UTC (rev 2884) @@ -12,7 +12,7 @@ void usage(const char *progname) { fprintf(stderr, - "usage: %s [-N] [-n] [-f file_contexts] [-p prefix] [-V] path...\n", + "usage: %s [-N] [-n] [-f file_contexts] [-p prefix] [-Vq] path...\n", progname); exit(1); } @@ -42,11 +42,12 @@ int verify = 0; int notrans = 0; int error = 0; + int quiet = 0; if (argc < 2) usage(argv[0]); - while ((opt = getopt(argc, argv, "Nnf:p:V")) > 0) { + while ((opt = getopt(argc, argv, "Nnf:p:Vq")) > 0) { switch (opt) { case 'n': header = 0; @@ -90,6 +91,9 @@ exit(1); } break; + case 'q': + quiet = 1; + break; default: usage(argv[0]); } @@ -101,11 +105,18 @@ mode = buf.st_mode; if (verify) { + if (quiet) { + if (selinux_file_context_verify(argv[i], 0)) + continue; + else + exit(1); + } if (selinux_file_context_verify(argv[i], 0)) { printf("%s verified.\n", argv[i]); } else { security_context_t con; int rc; + error++; if (notrans) rc = lgetfilecon_raw(argv[i], &con); else @@ -114,15 +125,13 @@ if (rc >= 0) { printf("%s has context %s, should be ", argv[i], con); - error += - printmatchpathcon(argv[i], 0, mode); + printmatchpathcon(argv[i], 0, mode); freecon(con); } else { printf ("actual context unknown: %s, should be ", strerror(errno)); - error += - printmatchpathcon(argv[i], 0, mode); + printmatchpathcon(argv[i], 0, mode); } } } else { This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-05-27 19:59:04
|
Revision: 2885 http://selinux.svn.sourceforge.net/selinux/?rev=2885&view=rev Author: ssmalley Date: 2008-05-27 12:59:02 -0700 (Tue, 27 May 2008) Log Message: ----------- updated libselinux to version 2.0.65 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-05-27 19:53:31 UTC (rev 2884) +++ trunk/libselinux/ChangeLog 2008-05-27 19:59:02 UTC (rev 2885) @@ -1,3 +1,7 @@ +2.0.65 2008-05-27 + * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. + * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status. + 2.0.64 2008-04-21 * Fixed selinux_set_callback man page. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-05-27 19:53:31 UTC (rev 2884) +++ trunk/libselinux/VERSION 2008-05-27 19:59:02 UTC (rev 2885) @@ -1 +1 @@ -2.0.64 +2.0.65 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <ssm...@us...> - 2008-06-11 18:10:09
|
Revision: 2908 http://selinux.svn.sourceforge.net/selinux/?rev=2908&view=rev Author: ssmalley Date: 2008-06-11 11:10:07 -0700 (Wed, 11 Jun 2008) Log Message: ----------- updated libselinux to version 2.0.66 Modified Paths: -------------- trunk/libselinux/ChangeLog trunk/libselinux/VERSION Modified: trunk/libselinux/ChangeLog =================================================================== --- trunk/libselinux/ChangeLog 2008-06-11 18:09:03 UTC (rev 2907) +++ trunk/libselinux/ChangeLog 2008-06-11 18:10:07 UTC (rev 2908) @@ -1,3 +1,6 @@ +2.0.66 2008-06-11 + * Add swig python bindings for avc interfaces from Dan Walsh. + 2.0.65 2008-05-27 * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status. Modified: trunk/libselinux/VERSION =================================================================== --- trunk/libselinux/VERSION 2008-06-11 18:09:03 UTC (rev 2907) +++ trunk/libselinux/VERSION 2008-06-11 18:10:07 UTC (rev 2908) @@ -1 +1 @@ -2.0.65 +2.0.66 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |