Commit graph

1055 commits

Author SHA1 Message Date
Steve Beattie
9eb8b7459f Fixup dependency on libapparmor-devel for non-suse dists. 2007-07-30 19:05:21 +00:00
Steve Beattie
bf0d391818 Fix dependencies for older versions of opensuse. 2007-07-30 18:48:00 +00:00
Steve Beattie
68c51fa152 From aj@suse.de: Fix permissions of README file. 2007-07-30 07:30:24 +00:00
Steve Beattie
09e0b627fa Convert builddep on libapparmor to libapparmor-devel 2007-07-30 07:18:07 +00:00
Steve Beattie
4150a569a7 Get rid of crufty crap that causes autobuild to fail. 2007-07-30 05:36:23 +00:00
Steve Beattie
01be9c93e3 Convert libapparmor build dependency to libapparmor-devel. 2007-07-30 05:18:39 +00:00
Steve Beattie
84db5d71e3 Convert build dependency on libapparmor to libapapparmor-devel 2007-07-30 05:05:42 +00:00
Matt Barringer
306ef1c9a8 - Had to add dbus-glib-lowlevel.h header to build on 10.3
- Cleaned up the install part of the makefile
2007-07-30 02:09:56 +00:00
Matt Barringer
3fa1810e26 - Final commit of what will be in OpenSUSE 10.3 Alpha7.
- Removed the last traces of a pcre dependency.
2007-07-30 02:07:48 +00:00
Dominic Reynolds
bc8b8d742a Fix bug in saving of local profiles in the yast UI. Front end wasn't
returning the selected list correctly and the backend wasn't processing
the returned list correctly.
2007-07-30 01:56:21 +00:00
Dominic Reynolds
ecf9f5b5bf Fix bug in changehat handling code where profiles read in from were set
as changed even though they may not be active profiles.
2007-07-30 01:54:25 +00:00
Dominic Reynolds
95769acf38 Patch from jmichael@suse.de to factor out validate_mode into
validate_log_mode() and validate_profile_mode()
2007-07-30 01:53:25 +00:00
Matt Barringer
f661eb59fd - Package now conforms to SUSE requirements
- The applet will be installed in $LIBEXECDIR
2007-07-29 16:58:57 +00:00
Matt Barringer
1b80dff02d - Using asprintf instead of snprintf 2007-07-29 06:05:41 +00:00
Matt Barringer
d53da59344 - Converted to using libapparmor
- Now it will send out all known information about an event in a
  somewhat structured way.
2007-07-29 05:30:51 +00:00
Matt Barringer
85eecb0dae - I'm not sure why scanner.l thought it should be generating
lex.yy.c instead of scanner.c, but that just isn't right.
- There was an unpleasant bug in the audit id recreation 
  part of grammar.y that was causing memory corruption.
  It is now fixed.
2007-07-29 04:37:22 +00:00
Dominic Reynolds
82b86abc58 Fix bug where events from the log were dropped for profiles in the
null-complain-profile.
2007-07-29 02:30:39 +00:00
Dominic Reynolds
371860fb03 Handle "mandatory profile missing" messages and autodep a new profile if
P|px is chosen.
2007-07-29 02:25:25 +00:00
Dominic Reynolds
b210319daa Fixes for regex handling in the tools to match the newer directory
handling syntax.
2007-07-29 02:23:31 +00:00
Dominic Reynolds
1a8ae64cfb Add handling for lock and append in logs and profiles. 2007-07-29 02:20:24 +00:00
Dominic Reynolds
c575edf759 Fix handshake bug between yast frontend/backend that caused the UI to
hang (was returning result to the wrong backend agent).
2007-07-29 02:19:35 +00:00
Dominic Reynolds
3f2ed86bef Don't process events for profiles that no longer exist. 2007-07-29 02:18:29 +00:00
Dominic Reynolds
6f5bc70ae1 Updated usage of SubDomain::readprofile() (which changed in r620) in
yast apparmor profile agent and syntax checking function in subdomain.pm
2007-07-29 02:17:17 +00:00
Dominic Reynolds
9e35713fa6 Added missing CMD_ values to apparmor_ycp_utils that were added to SubDomain.pm in r771 2007-07-29 02:09:59 +00:00
Dominic Reynolds
0bd08b78c8 Strip trailing comments from individual rule lines in the profiles when
they are parsed.
2007-07-29 02:06:41 +00:00
Dominic Reynolds
d3d92196f9 Add support to the tools for basic network access mediation - by
family/socket type.
2007-07-29 02:06:00 +00:00
Dominic Reynolds
62eb92567d Add handling for clone operation from audit logs - which caused the
tracking of process forking to not work correctly in the tools.
2007-07-29 02:05:06 +00:00
Matt Barringer
f5dcd65275 - Adding a note regarding libaalogparse no longer being maintained. 2007-07-28 15:43:09 +00:00
Matt Barringer
4bea1da54c - Merged the library previously known as "libaalogparse" with
libapparmor.
- Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
Matt Barringer
65f4025e15 2007-07-28 15:38:27 +00:00
Steve Beattie
1791756480 Add changelog entry for recent checkins. 2007-07-27 21:51:23 +00:00
Steve Beattie
a83a78ee77 Incorporate part of a patch from Mathias Gug <mathiaz@ubuntu.com>, skips
one more type of dpkg debris.
2007-07-27 21:31:10 +00:00
Steve Beattie
6c1d6fdd80 Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Support placing the permission modes first before the pathname. This
makes things somewhat more consistent with other types of permissions
(capability [specific_cap], network [stuff], etc.).
2007-07-27 20:55:25 +00:00
Steve Beattie
318df7804a Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Allow using the keyword "hat" in place of the magic symbol '^'
2007-07-27 20:48:24 +00:00
Steve Beattie
9c4e50e7ca Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Use file_mode to remove duplicated code. Prelim for reordering file
permissions.
2007-07-27 20:47:17 +00:00
Steve Beattie
3216755358 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Use correct terminology; convert unconstrained to unconfined.
2007-07-27 20:45:45 +00:00
Steve Beattie
9df76dbcda Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Add mediation/keywords for locks.
2007-07-27 20:38:43 +00:00
Steve Beattie
95d6ab1b1b Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Add support for a distinction between write permission and append-only
permission.
2007-07-27 20:31:38 +00:00
Steve Beattie
2737f6bc97 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Support for basic network mediation keywords.
2007-07-27 20:29:47 +00:00
Steve Beattie
b383370856 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Don't allow commas at the end of an ID.
2007-07-27 20:27:41 +00:00
Steve Beattie
86e5ed3109 Patch from jjohansen@suse.de
Fix debugging with CHANGE_PROFILE.
2007-07-27 20:25:59 +00:00
John Johansen
17ff3b0f58 - append
- lock
- null-complain-profile on missing mandatory profile bug
- parameter cleanup
- network mediation patch
2007-07-27 20:20:50 +00:00
John Johansen
b2c6ec5b57 refresh patches for offsets against latest git pull 2007-07-27 18:36:31 +00:00
Matt Barringer
37cf7f900b - Working towards having this applet in OpenSUSE 10.3 2007-07-25 23:51:15 +00:00
Matt Barringer
f246dded28 -Typo in Makefile.am corrected. 2007-07-24 19:32:25 +00:00
Matt Barringer
2e9cdff31c - 10.3 uses ylwrap by default, which was throwing the
scanner generation off.  Fixed.
2007-07-24 19:29:02 +00:00
Matt Barringer
35257c4ff4 Trying to get this library to build on 10.3 2007-07-24 18:24:48 +00:00
Matt Barringer
a013140fce 2007-07-24 18:17:50 +00:00
Matt Barringer
748d811e03 2007-07-24 18:16:19 +00:00
Seth Arnold
87647fe7a7 add svn:keywords to tunables/proc 2007-07-23 16:31:39 +00:00