Commit graph

879 commits

Author SHA1 Message Date
Seth Arnold
7486b2bbb0 Bug 288960 - nscd with nss_ldap and sasl/gss bind to ldap server failed 2007-08-23 23:22:06 +00:00
Seth Arnold
448fc73350 Bug 287579 - <abstractions/X> doesn't allow access to /usr/share/X11 and other xorg directories 2007-08-23 23:12:53 +00:00
Seth Arnold
f8fa7cf0d8 Bug 241479 - Fix for usr.sbin.nscd profile 2007-08-23 22:49:41 +00:00
Seth Arnold
1b92358fe1 Bug 241479 - Fix for usr.sbin.nscd profile 2007-08-23 22:49:11 +00:00
Steve Beattie
4cc2f981a3 [https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/132468]
Dur, I put the wrong entry for resolvconf in the nameservice
abstraction, fixing.
2007-08-21 21:53:27 +00:00
Steve Beattie
aa94fc1d08 - Add configure check for the existence of asprint(3).
- Add -Wall to compilation (is there a way to only define this in the
  toplevel Makefile.am and have it propogate down?)
- fix warnings once -Wall was enabled:
  - no asprintf prototype due to _GNU_SOURCE not being defined
  - possible uninitialezed use in scanner.l
  - printf's that expected ints but were passed longs in the testsuite
2007-08-21 17:28:34 +00:00
Seth Arnold
b2d95817fa seife reported nscd needs stream support too 2007-08-21 16:32:11 +00:00
David J Drewelow
99fc25eb37 Updated requirements for changes to libapparmor. 2007-08-20 15:07:43 +00:00
David J Drewelow
fd1c72183b Updated sqlite db and related functions to support new parser and
libapparmor.
2007-08-20 15:07:13 +00:00
Steve Beattie
7a3ddb5ce7 mark initscripts as stop_on_removal on suse dists. 2007-08-20 03:43:32 +00:00
Dominic Reynolds
c33bcaba91 Updated ping profile to include network inet raw 2007-08-20 00:28:20 +00:00
Matt Barringer
74a25ea80b - Initial checkin of libaaprofileparse 2007-08-19 19:12:28 +00:00
Dominic Reynolds
cd007f1162 Updates for cups, add inet|inet6 dgram|stream to nameservice abstraction 2007-08-17 21:46:56 +00:00
Dominic Reynolds
de7ec1e261 Missing shortcut fixes for german. 2007-08-17 21:41:37 +00:00
Dominic Reynolds
87cde25a44 Minor changes to ensure that removal of the repository section in
logprof.conf disables repository integration.
2007-08-17 21:05:28 +00:00
Dominic Reynolds
5c373ea077 Remove default/required hats for ssh in logprof.conf 2007-08-17 19:54:57 +00:00
Steve Beattie
707fda6680 This patch disables the apparmor event reporting daemon service before
uninstalling the apparmor-parser package. [#301418]
2007-08-17 18:14:57 +00:00
Steve Beattie
e756eec7c1 Ugh, fix broken symlink for the change_hat manpage. 2007-08-17 16:21:11 +00:00
Steve Beattie
a7b52e44e3 Vaguely make the toplevel target 'make tarball' work. It's good (if
slow) for getting a clean export of the source. But too many of the
packages make some assumptions that they're in a checked out svn tree
that a lot of the auto-rpm building infrastructure breaks. Use at your
own risk.
2007-08-16 22:11:01 +00:00
Dominic Reynolds
9c0820d5ed Fixes for "mandatory profile not found" profiling bug, empty configs in
logprof.conf generating undefined value errors, repository code
prompting user even if no configuration is present that specifies a
default repository.
2007-08-16 21:51:08 +00:00
Dominic Reynolds
0e60123f22 Updated translations for missing shortcuts in msgstr fields. 2007-08-16 21:38:34 +00:00
Steve Beattie
f1e851d8e4 Bump the version of apparmor to 2.1. 2007-08-16 17:18:46 +00:00
Steve Beattie
156476d738 Rename change_hat.2 to aa_change_hat.2, with backwards compatability
symlink generated by the rpm specfile.
Don't create libimmunix.so, nothing new should ever link against it.
2007-08-16 05:15:03 +00:00
Steve Beattie
45b5373b39 Add support for aa_change_profile(2) to both the library and to the swig
interfaces. A manpage still needs to be added.
2007-08-16 04:35:56 +00:00
Steve Beattie
adf6076d85 Rename change_hat(2) to aa_change_hat(2) (a backwards compatibility
macro is in place) and support 64 bit magic tokens.
2007-08-16 04:26:19 +00:00
Steve Beattie
bda571d643 Fix braindead symbol versioning issue where applications that linked
against libapparmor::change_hat would be linking against
change_hat@IMMUNIX_1.0 rather than change_hat@APPARMOR_1.0 (the
preferred version).

Remove -module to prevent linking portability warning when building
mod_apparmor.

Use RPM_OPT_FLAGS for CFLAGS when building rpms.
2007-08-16 04:19:54 +00:00
Seth Arnold
0c9d1c44ed new audit manpage from Mathias Gug 2007-08-15 21:43:40 +00:00
John Johansen
a92114480c Fix a double free bug in include handling 2007-08-15 20:24:58 +00:00
Matt Barringer
7d3a95c797 - Added the timestamp from the audit ID ('epoch')
to aa_log_record.
- Added the integer that follows the colon in the 
  audit ID ('audit_sub_id') to aa_log_record.
- Modified the testsuite to deal with the two new
  numbers.
2007-08-15 20:07:48 +00:00
Dominic Reynolds
ea8ed8f665 utitlity to look for problems in the po files. 2007-08-15 19:24:49 +00:00
Seth Arnold
0e5d6bddd2 Bug 288470 - ntp profile rejects access to /var/lib/ntp/etc/localtime 2007-08-15 17:31:26 +00:00
Dominic Reynolds
4b7a720d8a Fix problems with missing hotkey for "(S)can for SubDomain Events" in
genprof. Replace occurances of SubDomain in msgstr with AppArmor.
2007-08-15 16:24:26 +00:00
Dominic Reynolds
1c56662fe7 Added support for capablities and network toggles in #includes. 2007-08-15 16:17:50 +00:00
Seth Arnold
64ea5e3944 patch from Mathias Gug to correct change_hat manpage section 2007-08-15 00:14:39 +00:00
Steve Beattie
4c1effc3a2 Make the location of logger configurable via /etc/apparmor/logprof.conf 2007-08-14 22:07:40 +00:00
Dominic Reynolds
50d958b5e8 Refactoring changes for the apparmor-reports YaST module.
Author: ddrewelow@suse.de
2007-08-14 21:20:43 +00:00
Steve Beattie
6414c84357 Oops, fix up hardcoded reference to current/ in the linking of icons for
yast-gnome.
2007-08-14 19:53:30 +00:00
Steve Beattie
6123467433 skip files suffixed with .dpkg-old, based on a patch from Mathias Gug
<mathiaz@ubuntu.com> [Message-ID: <20070813201254.GD11381@mathias.mathiaz.net>]
Added comments to both file-skipping locations referencing the other
location that needs to be modified.

(The ideal solution would be for this information to be stored in one
commonly referenced location, configurable by distributors and
administratrors.)
2007-08-14 19:19:59 +00:00
Steve Beattie
b608f2643b This patch is from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu
[Message-ID: <20070813195328.GB11381@mathias.mathiaz.net>]

Ubuntu installs apxs, the apache module building binary in /usr/bin
rather than /usr/sbin, so search there as well.
2007-08-14 19:09:03 +00:00
Steve Beattie
cd73259db4 Patch from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu [Message-ID:
<20070813195328.GB11381@mathias.mathiaz.net>].

This fixes the make install target of pam_apparmor so that it depends on
the library already being built.
2007-08-14 19:06:19 +00:00
Steve Beattie
18785e848d Fix to ntpd profile from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu. 2007-08-14 18:51:00 +00:00
Steve Beattie
1f0169a5f9 Launchpad bug #132468: Nameservice abstraction should also include
/var/run/resolvconf/resolv.conf:

  The Nameservice abstraction configuration file
  (/etc/apparmor.d/abstractions/nameservice) permits reads access to
  (amongst other paths) /etc/resolv.conf.

  However, on systems using resolvconf, this is a symbolic link to
  /etc/resolvconf/run/resolv.conf -- where /etc/resolvconf/run itself
  is a symlink to /var/run/resolvconf.
2007-08-14 14:50:09 +00:00
Steve Beattie
38c6f062f3 This fix is for #212500 "y2controlcenter-gnome does not find AppArmor
icons" and its duplicate #297243 "Missing YaST icon: All app armor
icons".

The problem was that (a) the .desktop spec doesn't really allow having
path elements in the "Icon=" entry, and (b) that y2controlcenter-gnome
was looking in /usr/share/icons/hicolor/[size]/apps/ for the apparmor
icons, which weren't there.
2007-08-14 03:51:32 +00:00
Steve Beattie
7e8fe42967 Fix for #298840, "apparmor-utils misses perl-TermReadKey dep" 2007-08-10 21:51:20 +00:00
Matt Barringer
ad4685c196 - Patched to remove annoying build error when the python module
is not enabled.
2007-08-08 22:56:16 +00:00
Steve Beattie
50df7d407d Reorganize buildrequires: lines and fix the dependency for sles10, to
allow yast2-apparmor to build against the SLE_10 target in the opensuse
buildservice.
2007-08-08 22:45:22 +00:00
Steve Beattie
6de4ff8971 Make pam_apparmor dependencies correct for opensuse 10.2 and earlier. 2007-08-08 19:09:01 +00:00
Matt Barringer
2f8c80c90f - I don't recall dropping an important #define, so now it's back in. 2007-08-08 18:25:57 +00:00
Steve Beattie
99b510da88 Now that config.h.in has been deleted, remove the dependency on it in
configure.in.
2007-08-08 16:57:34 +00:00
Steve Beattie
b8b12a6a6c Sigh, it actually did work, but the opensuse buildservice is somewhat
deceiving. Re-enabling.
2007-08-08 15:26:01 +00:00