John Johansen
|
ee03760c1d
|
disable named transition conversion to cx. Needs to be reworked
|
2008-04-16 08:48:06 +00:00 |
|
John Johansen
|
11f925abba
|
fix named transition, enable cx to imply transition to local profile, without having to specify name
|
2008-04-16 06:54:51 +00:00 |
|
John Johansen
|
015df061e3
|
Named transition - but disabled due to a bug
|
2008-04-16 04:45:02 +00:00 |
|
John Johansen
|
78590d1823
|
allow for simpe alias rules
|
2008-04-09 09:03:17 +00:00 |
|
John Johansen
|
34f2c96700
|
let a profile set a tasks caps, similar to fscaps
|
2008-04-06 18:55:27 +00:00 |
|
John Johansen
|
c460dcc52f
|
update change_hats rules to generate rules for all hats
|
2008-04-06 18:52:47 +00:00 |
|
John Johansen
|
74152bbd9d
|
Add the implicit change_hat rules for hats in the profile.
Allow external hats by declaring them in the profile via
^hatname,
eg.
/foo {
^local_hat {
}
^external_hat,
}
/foo//external_hat {
}
|
2008-04-05 05:44:44 +00:00 |
|
John Johansen
|
ec08477129
|
fix type on typename in cast bug
|
2008-04-05 04:57:51 +00:00 |
|
John Johansen
|
40c3686041
|
remove old netdomain syntax
|
2007-11-16 09:34:01 +00:00 |
|
John Johansen
|
a4721bd02d
|
add basic handling of profile namespaces
|
2007-11-16 09:18:48 +00:00 |
|
John Johansen
|
5655affcda
|
flatten hats for individual profile load
|
2007-06-26 21:09:46 +00:00 |
|
John Johansen
|
cd79c1ac77
|
update copyright dates
|
2007-04-11 08:12:51 +00:00 |
|
Steve Beattie
|
b547067e8d
|
This patch fixes the parser to do duplicate rule elimination after
variable expansion occurs, not before.
|
2007-03-30 18:34:37 +00:00 |
|
John Johansen
|
f3ba454d8c
|
Add dfa support to the parser
|
2007-02-27 02:29:16 +00:00 |
|
John Johansen
|
20dbc4d8cb
|
fix miss break #240986. Back out partial commit of dfa matcher support (that was mistakenly submitted)
|
2007-02-01 21:45:39 +00:00 |
|
John Johansen
|
d1f8df2fa5
|
dfa patches for the parser
|
2007-02-01 20:18:50 +00:00 |
|
Steve Beattie
|
f13d422be0
|
Fixup a type-mismatch that happened to not cause crashes purely by
coincidence.
|
2006-05-18 16:26:28 +00:00 |
|
Seth Arnold
|
eb6ca6797b
|
A quick hack that will test if the running kernel supports PCRE or not, and bail out with a more informative error message if the policy being loaded requires additional kernel support
|
2006-04-18 17:15:05 +00:00 |
|
Steve Beattie
|
6b0de8f6bc
|
Update keywords attribute, svn:ignore attribute, update Makefile to
point to the new location of the common/ dir.
|
2006-04-12 03:09:10 +00:00 |
|
Steve Beattie
|
6d3e74907d
|
Import the rest of the core functionality of the internal apparmor
development tree (trunk branch). From svn repo version 6381.
|
2006-04-11 21:52:54 +00:00 |
|