Dominic Reynolds
74b0f0b5ad
Read and write new change hat profile syntax
...
Read in the new audit message format used by the module
Updated the tools to handle the newer directory mediation in apparmor
2007-07-16 13:19:02 +00:00
John Johansen
dc3c7e0b20
refresh patches against latest git tree
2007-07-15 21:33:35 +00:00
John Johansen
4bd10c3aec
fold patches into main apparmor patches
2007-07-15 15:42:43 +00:00
John Johansen
1ee0a2c2d3
- early bailout of change_hat/change_profile when the new_profile
...
doesn't exist
- in do_change_profile rename profile to new_profile
- fix bug in early bail out
- don't audit change_hat/change_profile token
- remove unused AA_AUDITTYPE defines
2007-07-15 15:27:08 +00:00
Dominic Reynolds
c8c8ca442c
Repository fixes for tools.
...
- Ask Me Later option for enabling the repository not working
- Cleanup the syncronization code with the repository - ensure that
mofications are presented correctly as adds/changes to the users profile
set
- Correct bug in marking profiles as NEVERSUBMIT
- Fix bug in serlializing profiles with hats (was adding the globals
#include above each hat - ick)
- Added dialog and config handling code to enable user to choose the mode of
usage of the profile repository: download only or upload new/changed
profiles - so that they user isn't repeatedly prompted to sign in to the
repository
- Set default configuration for the repository to apparmor.test.opensuse.org
2007-07-13 17:53:12 +00:00
Matt Barringer
5a4a53563c
- Cleaning up warnings from RPMLINT
2007-07-12 21:25:14 +00:00
Matt Barringer
7d54e6a856
- autogen.sh will make it easier for SVN users to build the library.
2007-07-12 20:18:27 +00:00
Matt Barringer
d8bc255e45
- Initial checkin of the RPM specfile
2007-07-12 18:40:39 +00:00
Matt Barringer
1fa3516397
- Modified configure to require --with-perl/python/ruby/etc
...
to enable the compilation of those SWIG wrappers.
- Put together a perl usage example
2007-07-11 01:08:06 +00:00
Matt Barringer
c6d5ebc7b6
- Modified src/Makefile.am, grammar.y & scanner.l to support autotools
...
generating the bison & flex output. Removing generated files from
SVN.
- It doesn't make sense to remove those generated files but leave
autotools generated files, so I'm removing those.
- Removing SWIG generated files as well.
2007-07-10 16:38:23 +00:00
Matt Barringer
06faae5ec6
Added an audit_id field to the aa_log_record struct.
2007-07-09 19:08:02 +00:00
Andreas Gruenbacher
da56acb826
- Rediff against git.
2007-07-03 11:56:24 +00:00
John Johansen
d5f43d5a4f
remove stupid debug fprintf statements that got left in
2007-06-27 01:27:44 +00:00
John Johansen
51c0b3d60c
update Signed-off-by
2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe
- refresh patches again newest git
...
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
12f3472c09
basic change_profile support
2007-06-26 21:10:28 +00:00
John Johansen
5655affcda
flatten hats for individual profile load
2007-06-26 21:09:46 +00:00
John Johansen
84bfd57edf
change_profile
...
- fix use of cxt->previous_profile, was changing it instead of searching
based off its name, which would could result in use of a stale
profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4
- Remove obsolete patches.
...
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
Matt Barringer
c3e8a4cbcb
Initial checkin, version 0.6.
2007-06-24 18:34:55 +00:00
John Johansen
d740aec8e8
remove old patches that got folded into change_profile-3.diff
2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8
latest revision of change_profile patch, collapse several patches into change_profile-3.diff
2007-06-23 08:06:31 +00:00
Andreas Gruenbacher
97df59697c
Fold together the audit rework.
2007-06-22 18:52:49 +00:00
Andreas Gruenbacher
024b9d702a
Ignore the AA_CHANGE_PROFILE flag when checking for link permission.
2007-06-22 18:45:17 +00:00
Andreas Gruenbacher
b1ee140da5
aa_find_profile2 is unused now.
2007-06-22 18:02:30 +00:00
John Johansen
f2f77bacb4
add missing use-interface_lock
2007-06-22 17:56:19 +00:00
John Johansen
4b7150f21b
update change_profile patches
2007-06-21 18:27:17 +00:00
John Johansen
4a844e8d33
convert change_profile to use the interface lock - this is untested and likely broken
2007-06-19 17:11:32 +00:00
John Johansen
2b59d6f9ac
change_profile refactored and mostly working
2007-06-15 18:44:09 +00:00
Steve Beattie
a2423f3371
Patch from Mathias Gug <mathiaz@ubuntu.com>, I added the same
...
modification to the audit command.
This fix scans apparmor.d directory to find profiles that matches the
profile passed on the command line. Currently if the binary doesn't
exist on the system, complain/enforce fails even if a profile is defined.
2007-06-15 15:11:09 +00:00
Seth Arnold
d0cfcfa004
add a bunch of rules for dhcpcd -- including two Ux rules. Ugh. Should fix that, but they look like big black holes.
2007-06-11 22:14:18 +00:00
Seth Arnold
b7110070f2
fix up postfix's directories with the new / suffix
2007-06-11 21:55:56 +00:00
Seth Arnold
131355ec7a
move xfs away from X11R6
2007-06-11 17:56:00 +00:00
Seth Arnold
7509f7aae2
move xfs away from X11R6
2007-06-11 17:55:50 +00:00
Seth Arnold
6aad212284
move acroread
2007-06-11 17:53:45 +00:00
Seth Arnold
f0d8ce3159
a few dhcpcd and resmgrd fixes
2007-06-11 17:23:17 +00:00
Andreas Gruenbacher
807c9147d2
Proposed revert / cleanup for logging permission masks
2007-06-11 11:48:05 +00:00
Seth Arnold
1f3cc4e008
gconfd-2 rmix to itself, 64bit version too
2007-06-11 04:17:30 +00:00
Seth Arnold
a998abbd3e
make a 64bit copy of gconfd-2
2007-06-11 04:15:55 +00:00
Seth Arnold
677c9feb2b
rename gconfd-2
2007-06-11 04:15:34 +00:00
Seth Arnold
334761bdbe
rename ethereal -> wireshark
2007-06-11 04:14:29 +00:00
Seth Arnold
daa4e31b27
rename gaim
2007-06-11 04:13:53 +00:00
Seth Arnold
41215a97f8
fix up bonobo-activation-server with rmix access to itself
2007-06-11 04:13:19 +00:00
Seth Arnold
e7b4565f49
rename bonobo-activation-server
2007-06-11 04:12:29 +00:00
Seth Arnold
0ffba14641
rename evolution-data-server
2007-06-11 04:10:48 +00:00
Seth Arnold
b504df44e0
rename evolution
2007-06-11 04:10:13 +00:00
Seth Arnold
0b888a5203
removing /opt/gnome, /opt/OpenOffice.org, /usr/X11R6/, /opt/mozilla
2007-06-11 04:09:23 +00:00
Seth Arnold
e435b8f706
first step in replacing /opt/gnome with more sensible paths -- next step, renaming
2007-06-11 04:07:41 +00:00
John Johansen
7e3aacdda5
bleah fix typos that slipped into previous commit, and change AUDIT_REJECT to AUDIT_DENIED and AUDIT_COMPLAIN to AUDIT_ALLOWED
2007-06-09 00:35:37 +00:00
John Johansen
4d14203e90
Add auditing of x modifiers and split mask into requested and denied masks
2007-06-08 21:48:30 +00:00
