Dominic Reynolds
62eb92567d
Add handling for clone operation from audit logs - which caused the
...
tracking of process forking to not work correctly in the tools.
2007-07-29 02:05:06 +00:00
Matt Barringer
f5dcd65275
- Adding a note regarding libaalogparse no longer being maintained.
2007-07-28 15:43:09 +00:00
Matt Barringer
4bea1da54c
- Merged the library previously known as "libaalogparse" with
...
libapparmor.
- Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
Matt Barringer
65f4025e15
2007-07-28 15:38:27 +00:00
Steve Beattie
1791756480
Add changelog entry for recent checkins.
2007-07-27 21:51:23 +00:00
Steve Beattie
a83a78ee77
Incorporate part of a patch from Mathias Gug <mathiaz@ubuntu.com>, skips
...
one more type of dpkg debris.
2007-07-27 21:31:10 +00:00
Steve Beattie
6c1d6fdd80
Patch from jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Support placing the permission modes first before the pathname. This
makes things somewhat more consistent with other types of permissions
(capability [specific_cap], network [stuff], etc.).
2007-07-27 20:55:25 +00:00
Steve Beattie
318df7804a
Patch from jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Allow using the keyword "hat" in place of the magic symbol '^'
2007-07-27 20:48:24 +00:00
Steve Beattie
9c4e50e7ca
Patch from jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Use file_mode to remove duplicated code. Prelim for reordering file
permissions.
2007-07-27 20:47:17 +00:00
Steve Beattie
3216755358
Patch by jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Use correct terminology; convert unconstrained to unconfined.
2007-07-27 20:45:45 +00:00
Steve Beattie
9df76dbcda
Patch by jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Add mediation/keywords for locks.
2007-07-27 20:38:43 +00:00
Steve Beattie
95d6ab1b1b
Patch by jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Add support for a distinction between write permission and append-only
permission.
2007-07-27 20:31:38 +00:00
Steve Beattie
2737f6bc97
Patch by jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Support for basic network mediation keywords.
2007-07-27 20:29:47 +00:00
Steve Beattie
b383370856
Patch by jjohansen@suse.de
...
Acked-By: Steve Beattie <sbeattie@suse.de>
Don't allow commas at the end of an ID.
2007-07-27 20:27:41 +00:00
Steve Beattie
86e5ed3109
Patch from jjohansen@suse.de
...
Fix debugging with CHANGE_PROFILE.
2007-07-27 20:25:59 +00:00
John Johansen
17ff3b0f58
- append
...
- lock
- null-complain-profile on missing mandatory profile bug
- parameter cleanup
- network mediation patch
2007-07-27 20:20:50 +00:00
John Johansen
b2c6ec5b57
refresh patches for offsets against latest git pull
2007-07-27 18:36:31 +00:00
Matt Barringer
37cf7f900b
- Working towards having this applet in OpenSUSE 10.3
2007-07-25 23:51:15 +00:00
Matt Barringer
f246dded28
-Typo in Makefile.am corrected.
2007-07-24 19:32:25 +00:00
Matt Barringer
2e9cdff31c
- 10.3 uses ylwrap by default, which was throwing the
...
scanner generation off. Fixed.
2007-07-24 19:29:02 +00:00
Matt Barringer
35257c4ff4
Trying to get this library to build on 10.3
2007-07-24 18:24:48 +00:00
Matt Barringer
a013140fce
2007-07-24 18:17:50 +00:00
Matt Barringer
748d811e03
2007-07-24 18:16:19 +00:00
Seth Arnold
87647fe7a7
add svn:keywords to tunables/proc
2007-07-23 16:31:39 +00:00
Andreas Gruenbacher
6d15b4eba7
- Rediff against 2.6.23-rc1.
2007-07-23 12:36:24 +00:00
Seth Arnold
5bd8083759
write to drift
2007-07-19 16:00:39 +00:00
Seth Arnold
f601f8c9ce
services access
2007-07-19 15:59:58 +00:00
Steve Beattie
a6f387a17e
Fix gcc warning about possible uninitialized use of the ms variable; if
...
match_string is NULL, the out: cleanup will test ms for !NULL and free
it, even though it hasn't been initialized.
2007-07-18 14:22:59 +00:00
Dominic Reynolds
74b0f0b5ad
Read and write new change hat profile syntax
...
Read in the new audit message format used by the module
Updated the tools to handle the newer directory mediation in apparmor
2007-07-16 13:19:02 +00:00
John Johansen
dc3c7e0b20
refresh patches against latest git tree
2007-07-15 21:33:35 +00:00
John Johansen
4bd10c3aec
fold patches into main apparmor patches
2007-07-15 15:42:43 +00:00
John Johansen
1ee0a2c2d3
- early bailout of change_hat/change_profile when the new_profile
...
doesn't exist
- in do_change_profile rename profile to new_profile
- fix bug in early bail out
- don't audit change_hat/change_profile token
- remove unused AA_AUDITTYPE defines
2007-07-15 15:27:08 +00:00
Dominic Reynolds
c8c8ca442c
Repository fixes for tools.
...
- Ask Me Later option for enabling the repository not working
- Cleanup the syncronization code with the repository - ensure that
mofications are presented correctly as adds/changes to the users profile
set
- Correct bug in marking profiles as NEVERSUBMIT
- Fix bug in serlializing profiles with hats (was adding the globals
#include above each hat - ick)
- Added dialog and config handling code to enable user to choose the mode of
usage of the profile repository: download only or upload new/changed
profiles - so that they user isn't repeatedly prompted to sign in to the
repository
- Set default configuration for the repository to apparmor.test.opensuse.org
2007-07-13 17:53:12 +00:00
Matt Barringer
5a4a53563c
- Cleaning up warnings from RPMLINT
2007-07-12 21:25:14 +00:00
Matt Barringer
7d54e6a856
- autogen.sh will make it easier for SVN users to build the library.
2007-07-12 20:18:27 +00:00
Matt Barringer
d8bc255e45
- Initial checkin of the RPM specfile
2007-07-12 18:40:39 +00:00
Matt Barringer
1fa3516397
- Modified configure to require --with-perl/python/ruby/etc
...
to enable the compilation of those SWIG wrappers.
- Put together a perl usage example
2007-07-11 01:08:06 +00:00
Matt Barringer
c6d5ebc7b6
- Modified src/Makefile.am, grammar.y & scanner.l to support autotools
...
generating the bison & flex output. Removing generated files from
SVN.
- It doesn't make sense to remove those generated files but leave
autotools generated files, so I'm removing those.
- Removing SWIG generated files as well.
2007-07-10 16:38:23 +00:00
Matt Barringer
06faae5ec6
Added an audit_id field to the aa_log_record struct.
2007-07-09 19:08:02 +00:00
Andreas Gruenbacher
da56acb826
- Rediff against git.
2007-07-03 11:56:24 +00:00
John Johansen
d5f43d5a4f
remove stupid debug fprintf statements that got left in
2007-06-27 01:27:44 +00:00
John Johansen
51c0b3d60c
update Signed-off-by
2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe
- refresh patches again newest git
...
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
12f3472c09
basic change_profile support
2007-06-26 21:10:28 +00:00
John Johansen
5655affcda
flatten hats for individual profile load
2007-06-26 21:09:46 +00:00
John Johansen
84bfd57edf
change_profile
...
- fix use of cxt->previous_profile, was changing it instead of searching
based off its name, which would could result in use of a stale
profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4
- Remove obsolete patches.
...
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
Matt Barringer
c3e8a4cbcb
Initial checkin, version 0.6.
2007-06-24 18:34:55 +00:00
John Johansen
d740aec8e8
remove old patches that got folded into change_profile-3.diff
2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8
latest revision of change_profile patch, collapse several patches into change_profile-3.diff
2007-06-23 08:06:31 +00:00