Steve Beattie
793afcd06c
Add support for an old style message hint "changing_profile" which
...
indicates that the pid referenced is being placed in the null-complain
profile.
2007-09-14 21:38:46 +00:00
David J Drewelow
935e7eb32f
Fixes ( #310454 ) to support new audit log format and new libapparmor1.
2007-09-14 21:23:08 +00:00
David J Drewelow
d46ba6ba79
Fixes ( #310454 ) to support new audit log format and new libapparmor1.
2007-09-14 21:22:26 +00:00
Steve Beattie
fa6dce4c65
This patch fixes up the support for parsing old style messages generated
...
on systems where auditd has not been compiled with --with-apparmor (i.e.
events are reported with an unknown type).
2007-09-14 14:36:01 +00:00
Steve Beattie
6700630539
This patch fixes the parsing of old-style apparmor log messages that
...
occur within a hat that's name does not begin with a '/'. New style
message parsing was not affected by this bug.
2007-09-14 14:33:05 +00:00
Steve Beattie
2228421afd
Stop printing "Error: syntax error" to stdout when the library has a
...
problem parsing the log message.
2007-09-14 14:29:07 +00:00
Steve Beattie
7f9a058d9c
This patch adds support for parsing apparmor messages that come through
...
syslog, along with testcases. This should work for both old and new
style log messages, as well as with dmesg timestamps enabled in the
kernel ("echo 1 > /sys/module/printk/parameters/printk_time").
This patch applies on top of the previous patch sent to support the
type=15xx messages.
2007-09-14 14:26:21 +00:00
Steve Beattie
a6a88a4dd7
This patch adds support to the logparsing library for the type=15xx
...
flags when events come through the audit subsystem. It also fixes the
case where the audit daemon has not been configured with apparmor
support and the events are reported as type=UNKNOWN[15xx].
It also fixes the testsuite dependencies so that they will get relinked
when the library changes.
2007-09-14 14:00:48 +00:00
Steve Beattie
16758ebdaa
Bump to version 1.2 to match autobuild version.
2007-09-13 16:50:57 +00:00
Steve Beattie
3df28e13db
Bump version in the configure.in file to match version in the specfile.
2007-09-13 16:15:06 +00:00
Dominic Reynolds
3b9e750206
Roll back reporting refactor changes for now. These will be readded to
...
trunk post 2.1.
2007-09-10 21:02:43 +00:00
Dominic Reynolds
b4b19bd9b4
Compile and include the AppArmorDialogs module in yast2-apparmor
2007-09-10 20:25:26 +00:00
Dominic Reynolds
33521849c7
Part of the user feedback for repository connections (r957) - missed
...
this file on initial checkin.
2007-09-10 19:50:15 +00:00
Dominic Reynolds
7faf960612
Update the logfile parsing in the tools to support syslog (in addition
...
to LAF) as a source of AppArmor module messages.
2007-09-10 19:44:07 +00:00
Dominic Reynolds
ddba73d87c
Very basic user feedback when connections are made to a remote
...
repository. For genprof/logprof just report "Connecting to the
repository". For yast display a dialog.
2007-09-10 19:42:18 +00:00
Dominic Reynolds
b451a537c4
Update the eventd schema to support the mode_deny mode_req types
...
reported by the latest apparmor module in its rejection/permitting
messages.
2007-09-10 19:41:03 +00:00
Dominic Reynolds
b80d1a3efe
Remove the auto-install hooks for apparmor-docs in the YaST2 apparmor
...
wizards.
2007-09-10 19:39:38 +00:00
John Johansen
8483740f37
have apparmor-dbus send null terminated strings
2007-09-05 21:42:38 +00:00
John Johansen
5a3d3ba05f
fix segfault when about dialog is closed
2007-09-05 21:39:00 +00:00
Steve Beattie
fd0ad65eac
Only run apparmor initscript at boottime on suse. (novell #286749 )
2007-08-31 19:05:54 +00:00
Seth Arnold
d66a9b2886
fixes for abstractions from Mathias Gug
2007-08-28 23:05:56 +00:00
Seth Arnold
c2f555ba0f
abstractions fixes from Mathias Gug (Ubuntu)
2007-08-28 22:39:52 +00:00
Seth Arnold
8621cb193a
some new abstractions from Mathias Gug
2007-08-27 23:49:51 +00:00
Seth Arnold
cbf2d633b2
Bug 295086 - abstractions/X lists /usr/X11R6
2007-08-23 23:26:49 +00:00
Seth Arnold
f9765ef6d6
Bug 288960 - nscd with nss_ldap and sasl/gss bind to ldap server failed
2007-08-23 23:23:06 +00:00
Seth Arnold
7486b2bbb0
Bug 288960 - nscd with nss_ldap and sasl/gss bind to ldap server failed
2007-08-23 23:22:06 +00:00
Seth Arnold
448fc73350
Bug 287579 - <abstractions/X> doesn't allow access to /usr/share/X11 and other xorg directories
2007-08-23 23:12:53 +00:00
Seth Arnold
f8fa7cf0d8
Bug 241479 - Fix for usr.sbin.nscd profile
2007-08-23 22:49:41 +00:00
Seth Arnold
1b92358fe1
Bug 241479 - Fix for usr.sbin.nscd profile
2007-08-23 22:49:11 +00:00
Steve Beattie
4cc2f981a3
[ https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/132468 ]
...
Dur, I put the wrong entry for resolvconf in the nameservice
abstraction, fixing.
2007-08-21 21:53:27 +00:00
Steve Beattie
aa94fc1d08
- Add configure check for the existence of asprint(3).
...
- Add -Wall to compilation (is there a way to only define this in the
toplevel Makefile.am and have it propogate down?)
- fix warnings once -Wall was enabled:
- no asprintf prototype due to _GNU_SOURCE not being defined
- possible uninitialezed use in scanner.l
- printf's that expected ints but were passed longs in the testsuite
2007-08-21 17:28:34 +00:00
Seth Arnold
b2d95817fa
seife reported nscd needs stream support too
2007-08-21 16:32:11 +00:00
David J Drewelow
99fc25eb37
Updated requirements for changes to libapparmor.
2007-08-20 15:07:43 +00:00
David J Drewelow
fd1c72183b
Updated sqlite db and related functions to support new parser and
...
libapparmor.
2007-08-20 15:07:13 +00:00
Steve Beattie
7a3ddb5ce7
mark initscripts as stop_on_removal on suse dists.
2007-08-20 03:43:32 +00:00
Dominic Reynolds
c33bcaba91
Updated ping profile to include network inet raw
2007-08-20 00:28:20 +00:00
Matt Barringer
74a25ea80b
- Initial checkin of libaaprofileparse
2007-08-19 19:12:28 +00:00
Dominic Reynolds
cd007f1162
Updates for cups, add inet|inet6 dgram|stream to nameservice abstraction
2007-08-17 21:46:56 +00:00
Dominic Reynolds
de7ec1e261
Missing shortcut fixes for german.
2007-08-17 21:41:37 +00:00
Dominic Reynolds
87cde25a44
Minor changes to ensure that removal of the repository section in
...
logprof.conf disables repository integration.
2007-08-17 21:05:28 +00:00
Dominic Reynolds
5c373ea077
Remove default/required hats for ssh in logprof.conf
2007-08-17 19:54:57 +00:00
Steve Beattie
707fda6680
This patch disables the apparmor event reporting daemon service before
...
uninstalling the apparmor-parser package. [#301418 ]
2007-08-17 18:14:57 +00:00
Steve Beattie
e756eec7c1
Ugh, fix broken symlink for the change_hat manpage.
2007-08-17 16:21:11 +00:00
Steve Beattie
a7b52e44e3
Vaguely make the toplevel target 'make tarball' work. It's good (if
...
slow) for getting a clean export of the source. But too many of the
packages make some assumptions that they're in a checked out svn tree
that a lot of the auto-rpm building infrastructure breaks. Use at your
own risk.
2007-08-16 22:11:01 +00:00
Dominic Reynolds
9c0820d5ed
Fixes for "mandatory profile not found" profiling bug, empty configs in
...
logprof.conf generating undefined value errors, repository code
prompting user even if no configuration is present that specifies a
default repository.
2007-08-16 21:51:08 +00:00
Dominic Reynolds
0e60123f22
Updated translations for missing shortcuts in msgstr fields.
2007-08-16 21:38:34 +00:00
Steve Beattie
f1e851d8e4
Bump the version of apparmor to 2.1.
2007-08-16 17:18:46 +00:00
Steve Beattie
156476d738
Rename change_hat.2 to aa_change_hat.2, with backwards compatability
...
symlink generated by the rpm specfile.
Don't create libimmunix.so, nothing new should ever link against it.
2007-08-16 05:15:03 +00:00
Steve Beattie
45b5373b39
Add support for aa_change_profile(2) to both the library and to the swig
...
interfaces. A manpage still needs to be added.
2007-08-16 04:35:56 +00:00
Steve Beattie
adf6076d85
Rename change_hat(2) to aa_change_hat(2) (a backwards compatibility
...
macro is in place) and support 64 bit magic tokens.
2007-08-16 04:26:19 +00:00
