Commit graph

879 commits

Author SHA1 Message Date
Dominic Reynolds
62eb92567d Add handling for clone operation from audit logs - which caused the
tracking of process forking to not work correctly in the tools.
2007-07-29 02:05:06 +00:00
Matt Barringer
f5dcd65275 - Adding a note regarding libaalogparse no longer being maintained. 2007-07-28 15:43:09 +00:00
Matt Barringer
4bea1da54c - Merged the library previously known as "libaalogparse" with
libapparmor.
- Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
Matt Barringer
65f4025e15 2007-07-28 15:38:27 +00:00
Steve Beattie
1791756480 Add changelog entry for recent checkins. 2007-07-27 21:51:23 +00:00
Steve Beattie
a83a78ee77 Incorporate part of a patch from Mathias Gug <mathiaz@ubuntu.com>, skips
one more type of dpkg debris.
2007-07-27 21:31:10 +00:00
Steve Beattie
6c1d6fdd80 Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Support placing the permission modes first before the pathname. This
makes things somewhat more consistent with other types of permissions
(capability [specific_cap], network [stuff], etc.).
2007-07-27 20:55:25 +00:00
Steve Beattie
318df7804a Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Allow using the keyword "hat" in place of the magic symbol '^'
2007-07-27 20:48:24 +00:00
Steve Beattie
9c4e50e7ca Patch from jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Use file_mode to remove duplicated code. Prelim for reordering file
permissions.
2007-07-27 20:47:17 +00:00
Steve Beattie
3216755358 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Use correct terminology; convert unconstrained to unconfined.
2007-07-27 20:45:45 +00:00
Steve Beattie
9df76dbcda Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Add mediation/keywords for locks.
2007-07-27 20:38:43 +00:00
Steve Beattie
95d6ab1b1b Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Add support for a distinction between write permission and append-only
permission.
2007-07-27 20:31:38 +00:00
Steve Beattie
2737f6bc97 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Support for basic network mediation keywords.
2007-07-27 20:29:47 +00:00
Steve Beattie
b383370856 Patch by jjohansen@suse.de
Acked-By: Steve Beattie <sbeattie@suse.de>

Don't allow commas at the end of an ID.
2007-07-27 20:27:41 +00:00
Steve Beattie
86e5ed3109 Patch from jjohansen@suse.de
Fix debugging with CHANGE_PROFILE.
2007-07-27 20:25:59 +00:00
John Johansen
17ff3b0f58 - append
- lock
- null-complain-profile on missing mandatory profile bug
- parameter cleanup
- network mediation patch
2007-07-27 20:20:50 +00:00
John Johansen
b2c6ec5b57 refresh patches for offsets against latest git pull 2007-07-27 18:36:31 +00:00
Matt Barringer
37cf7f900b - Working towards having this applet in OpenSUSE 10.3 2007-07-25 23:51:15 +00:00
Matt Barringer
f246dded28 -Typo in Makefile.am corrected. 2007-07-24 19:32:25 +00:00
Matt Barringer
2e9cdff31c - 10.3 uses ylwrap by default, which was throwing the
scanner generation off.  Fixed.
2007-07-24 19:29:02 +00:00
Matt Barringer
35257c4ff4 Trying to get this library to build on 10.3 2007-07-24 18:24:48 +00:00
Matt Barringer
a013140fce 2007-07-24 18:17:50 +00:00
Matt Barringer
748d811e03 2007-07-24 18:16:19 +00:00
Seth Arnold
87647fe7a7 add svn:keywords to tunables/proc 2007-07-23 16:31:39 +00:00
Andreas Gruenbacher
6d15b4eba7 - Rediff against 2.6.23-rc1. 2007-07-23 12:36:24 +00:00
Seth Arnold
5bd8083759 write to drift 2007-07-19 16:00:39 +00:00
Seth Arnold
f601f8c9ce services access 2007-07-19 15:59:58 +00:00
Steve Beattie
a6f387a17e Fix gcc warning about possible uninitialized use of the ms variable; if
match_string is NULL, the out: cleanup will test ms for !NULL and free
it, even though it hasn't been initialized.
2007-07-18 14:22:59 +00:00
Dominic Reynolds
74b0f0b5ad Read and write new change hat profile syntax
Read in the new audit message format used by the module
Updated the tools to handle the newer directory mediation in apparmor
2007-07-16 13:19:02 +00:00
John Johansen
dc3c7e0b20 refresh patches against latest git tree 2007-07-15 21:33:35 +00:00
John Johansen
4bd10c3aec fold patches into main apparmor patches 2007-07-15 15:42:43 +00:00
John Johansen
1ee0a2c2d3 - early bailout of change_hat/change_profile when the new_profile
doesn't exist
- in do_change_profile rename profile to new_profile
- fix bug in early bail out
- don't audit change_hat/change_profile token
- remove unused AA_AUDITTYPE defines
2007-07-15 15:27:08 +00:00
Dominic Reynolds
c8c8ca442c Repository fixes for tools.
- Ask Me Later option for enabling the repository not working  
 - Cleanup the syncronization code with the repository - ensure that 
   mofications are presented correctly as adds/changes to the users profile
   set
 - Correct bug in marking profiles as NEVERSUBMIT  
 - Fix bug in serlializing profiles with hats (was adding the globals
   #include above each hat - ick)
 - Added dialog and config handling code to enable user to choose the mode of
   usage of the profile repository: download only or upload new/changed
   profiles - so that they user isn't repeatedly prompted to sign in to the
   repository
 - Set default configuration for the repository to apparmor.test.opensuse.org
2007-07-13 17:53:12 +00:00
Matt Barringer
5a4a53563c - Cleaning up warnings from RPMLINT 2007-07-12 21:25:14 +00:00
Matt Barringer
7d54e6a856 - autogen.sh will make it easier for SVN users to build the library. 2007-07-12 20:18:27 +00:00
Matt Barringer
d8bc255e45 - Initial checkin of the RPM specfile 2007-07-12 18:40:39 +00:00
Matt Barringer
1fa3516397 - Modified configure to require --with-perl/python/ruby/etc
to enable the compilation of those SWIG wrappers.
- Put together a perl usage example
2007-07-11 01:08:06 +00:00
Matt Barringer
c6d5ebc7b6 - Modified src/Makefile.am, grammar.y & scanner.l to support autotools
generating the bison & flex output.  Removing generated files from
  SVN.
- It doesn't make sense to remove those generated files but leave
  autotools generated files, so I'm removing those.
- Removing SWIG generated files as well.
2007-07-10 16:38:23 +00:00
Matt Barringer
06faae5ec6 Added an audit_id field to the aa_log_record struct. 2007-07-09 19:08:02 +00:00
Andreas Gruenbacher
da56acb826 - Rediff against git. 2007-07-03 11:56:24 +00:00
John Johansen
d5f43d5a4f remove stupid debug fprintf statements that got left in 2007-06-27 01:27:44 +00:00
John Johansen
51c0b3d60c update Signed-off-by 2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe - refresh patches again newest git
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
12f3472c09 basic change_profile support 2007-06-26 21:10:28 +00:00
John Johansen
5655affcda flatten hats for individual profile load 2007-06-26 21:09:46 +00:00
John Johansen
84bfd57edf change_profile
- fix use of cxt->previous_profile, was changing it instead of searching
  based off its name, which would could result in use of a stale
  profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4 - Remove obsolete patches.
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
Matt Barringer
c3e8a4cbcb Initial checkin, version 0.6. 2007-06-24 18:34:55 +00:00
John Johansen
d740aec8e8 remove old patches that got folded into change_profile-3.diff 2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8 latest revision of change_profile patch, collapse several patches into change_profile-3.diff 2007-06-23 08:06:31 +00:00