John Johansen
2aa250e65a
refresh patch for removal of last comm
2007-05-03 20:20:39 +00:00
Andreas Gruenbacher
83f12d961c
remove_suid.diff rediff. fold fix_leaf.diff into leaf.diff.
2007-05-03 20:16:34 +00:00
Steve Beattie
142cd5ea0c
Fixup leaf.diff to take into account the mangle patches.
2007-05-03 19:43:23 +00:00
Steve Beattie
452c8e5c74
Reverting change 645 to patches/remove_suid.diff, as it breaks
...
compilation on git current.
2007-05-03 17:49:27 +00:00
Andreas Gruenbacher
60d2b63e42
Further audit fixes/cleanups
2007-05-03 14:35:48 +00:00
Andreas Gruenbacher
fe02a75aa1
Rediff against latest git.
2007-05-03 10:37:28 +00:00
Steve Beattie
a4a2ab16d0
Add dentry refcounting possible fix.
2007-05-03 04:09:35 +00:00
John Johansen
b7308dda2a
mask off MAX_EXEC checks for directories in inode_permission
2007-05-03 02:26:14 +00:00
John Johansen
1bd96a3266
comment_cleanup.diff - small patch to cleanup a couple of comments
...
mangle_on_audit.diff - mangle pathnames when outputting an audit message
2007-05-03 02:25:24 +00:00
John Johansen
a0efe08a97
Add patches to update new tests and deal with the new directory behavior
...
which doesn't automatically mask of MAY_WRITE in inode_permission.
openat.patch - comment of o_creat bug, remove exit before last test
chdir.patch - add trailing /, give profile read permission to the directory
access.patch - give profile dir read permissions, update test rwx (r) to
fail since w - perm is no longer masked off.
2007-05-02 22:35:33 +00:00
John Johansen
eb01df5a9f
remove patch to export get_task_comm since we no longer use it in audit messages
2007-04-30 22:55:33 +00:00
John Johansen
85beaaac65
remove comm from apparmor messages. They are only human readable hints and getting task->comm using proper locking results in a deadlock in interrupt context
2007-04-30 22:53:38 +00:00
Steve Beattie
53c97e6696
Add a testcase for fchdir, and test steps to verify we didn't break
...
normal chdir/fchdir. Minor formatting changes to chdir.c.
2007-04-30 18:40:42 +00:00
Andreas Gruenbacher
3256de5ffa
Rediff against latest GIT. Add leaf.diff.
2007-04-29 19:39:47 +00:00
Andreas Gruenbacher
88306ac952
Move one further patch out of the way; do not initialize unused fields intemporary nameidata.
2007-04-27 19:57:30 +00:00
Andreas Gruenbacher
769179ccf4
Fold apparmor-sysctl-pathname.diff into the other patches.
2007-04-27 19:02:03 +00:00
Andreas Gruenbacher
7ee57d5e7a
Fold patches, and remove obsolete ones.
2007-04-27 11:20:11 +00:00
Steve Beattie
77db9ae104
Make _clean get rid of the gzipped manpages, too.
2007-04-26 21:20:02 +00:00
John Johansen
a2e6d3cbf4
move kconfig patch in series to before split-up-nameidata.diff, convert AUDIT dependency to select
2007-04-26 19:03:21 +00:00
John Johansen
d21771b703
modify apparmor kconfig dependencies to include audit
2007-04-26 18:20:01 +00:00
Andreas Gruenbacher
fb7bda4009
Refresh for line offsets.
2007-04-26 17:52:18 +00:00
Jesse Michael
85392cc7fc
just fix a small typo
2007-04-26 17:28:18 +00:00
Andreas Gruenbacher
91a59f17e3
Add some patch headers.
2007-04-26 17:09:09 +00:00
Dominic Reynolds
8934b04b11
Correct localization problems identified in code review.
2007-04-26 16:31:08 +00:00
Andreas Gruenbacher
2b325c1267
Reorder patches.
2007-04-26 15:42:11 +00:00
Dominic Reynolds
9161f2f09d
Formatting/indentation corrections.
2007-04-26 14:42:56 +00:00
Steve Beattie
dfba6d467e
Drop CLONE_NEWNS restrictions per email discussion.
2007-04-26 14:24:32 +00:00
Andreas Gruenbacher
6d3e8fa14c
Add missing EXPORT_SYMBOL
2007-04-26 10:31:18 +00:00
Dominic Reynolds
a23751dff5
Uncommented use POSIX in ag_subdomain. POSIX::setlocale() function was reported
...
as undefined during execution.
2007-04-26 03:02:44 +00:00
Dominic Reynolds
58820fc7e2
Fixed some indentation/formatting problems from the previous checkins.
2007-04-26 03:00:22 +00:00
Dominic Reynolds
08a4da1016
Add support to make the profiles in /etc/apparmor/profiles/extras
...
usable directly from genprof/logprof when new profiles are needed.
2007-04-26 02:59:17 +00:00
Dominic Reynolds
b002b50ba6
Changes to support marking profiles as local only and subsequently
...
don't prompt the user to upload changes to the repository.
2007-04-26 02:58:10 +00:00
Dominic Reynolds
3d16e4e6d6
Add support in YaST UI wizards for the AppArmor profile repository.
2007-04-26 02:56:54 +00:00
Dominic Reynolds
73c22acbdf
Make repo user creation explicit choice in console UI during
...
logprof/genprof run.
2007-04-26 02:55:58 +00:00
Dominic Reynolds
54645b9e6b
Remove debug statement and wrap call to do_logprof_pass in eval block
...
for ag_genprof for error handling
2007-04-26 02:54:11 +00:00
Dominic Reynolds
afd8e30115
Correct problems with the yast backend agents after the cleanup to the
...
config file handling (in r611)
2007-04-26 02:51:41 +00:00
Dominic Reynolds
d27ff99e31
Changes to add support for the AppArmor profile repository to the
...
console UI tools. (jmichael)
2007-04-26 02:48:24 +00:00
Dominic Reynolds
4419185c4d
Cleanup for the profile tools UI.
2007-04-26 02:46:23 +00:00
Dominic Reynolds
7fb70b4b22
Refactor/cleanup reading/writing and handling of configuration options
...
in logprof.conf (jmichael)
2007-04-25 21:06:52 +00:00
Dominic Reynolds
7114db645f
refactor autodep to make it easier to add remote repository support
...
(jmichael)
2007-04-25 21:05:07 +00:00
Dominic Reynolds
43aa5f00f0
Reworks the profile loading code to be able to parse profile from a
...
string we might have gotten from the network instead of requiring to
read it from a file and clean up the error handling (jmichael)
2007-04-25 21:04:28 +00:00
Steve Beattie
9bfe436dff
Kill some bogus readme text
...
Pull in conversion to texlive-latex from openSUSE
Mark manpages as documentation (I didn't know files outside of
/usr/share/doc/packages/%{name}-%{version} could be marked as such).
2007-04-25 20:50:21 +00:00
Dominic Reynolds
dc4e5485f1
fix a bug in Add Hat dialog related to CMD_ABORT/CMD_FINISHED handling
...
(jmichael)
2007-04-25 20:48:51 +00:00
Dominic Reynolds
94c9775dde
Refactoring cleanup for CMD_ABORT/CMD_FINISHED handling (jmichael)
2007-04-25 20:47:13 +00:00
Steve Beattie
8c666d1c82
Export symbol that prevents current code from being built as a module.
2007-04-25 17:51:13 +00:00
Andreas Gruenbacher
1cab96a7b5
Add ecryptfs-d_revalidate.diff
2007-04-24 22:42:15 +00:00
Andreas Gruenbacher
1e94fcfe40
Bug in comm.diff.
2007-04-24 21:15:57 +00:00
Andreas Gruenbacher
ec2bd5823c
Update mangle.diff. Add audit-cleanup.diff and comm.diff.
2007-04-24 13:42:03 +00:00
Andreas Gruenbacher
583e75877a
Likely nfs nameidata bugfix
2007-04-24 08:42:40 +00:00
Andreas Gruenbacher
1841b3c31c
Add patch as reminder.
2007-04-24 08:38:08 +00:00
