Commit graph

999 commits

Author SHA1 Message Date
John Johansen
777ff460f8 update profiles for bugs that have been reported by various users 2008-02-19 10:35:19 +00:00
John Johansen
04acbd2bfb update profile for bugs that have been reported by various people 2008-02-19 10:32:28 +00:00
John Johansen
486bb79ef7 merge over r1088 - Add descriptiion of append, lock and network rules to the man page 2008-02-19 10:19:28 +00:00
John Johansen
92977daf75 merge over change from 1082 - update parser .spec change log 2008-02-19 10:18:12 +00:00
John Johansen
66276373cd add missing link subset tests 2008-02-18 11:19:11 +00:00
John Johansen
599e624b3a fix bitmasking 2008-02-09 14:16:07 +00:00
John Johansen
451deea533 M vfs-mkdir.diff
- pass vfsmnt param for cgroups

A    fix-user-audit.diff
- nothing

A    fix-link-subset.diff
- fix reporting of failed link subsets

A    apparmor-fix-lock-letter.diff
- fix the reported lock letter in apparmorfs/matching
- reverted audit request_mask back to requested_mask

A    apparmor-fix-sysctl-refcount.diff
- fix a refcount leak in sysctl audit
2008-02-09 14:07:22 +00:00
John Johansen
7ef32ce6f0 conditionally wrap audit_messages so they are dependant on the audit subsystem being enabled 2008-01-11 18:49:15 +00:00
John Johansen
5a666b5d29 add missing apparmor.h to split_init.diff 2008-01-10 20:03:06 +00:00
John Johansen
46fefd63a1 - Add apparmorfs features file (may break this into a directory, sysfs style)
- do split init so apparmor is initialized in security_initcall
2008-01-10 18:05:50 +00:00
John Johansen
fb62cb15b2 update apparmor_status to work when apparmor is a kernel builtin 2008-01-05 08:29:39 +00:00
John Johansen
482b8741b7 fix init script so that it doesn't result in a regex with a null alternation ie. |apparmor 2008-01-03 23:21:07 +00:00
John Johansen
e9fd1d8fc1 update init functions to work with the apparmor module being builtin to the kernel 2008-01-03 22:27:20 +00:00
John Johansen
bad1c12112 remove patches for tests as they are now applied 2007-12-23 01:17:23 +00:00
John Johansen
781e6d1882 Add the ability to mark as test as a known_fail or known_pass,
which means the failure of the tests is known.  So known_fail
means the test should fail but is known to succeed and similar
for known_pass.

This allows tests to be marked as having a known problem so that
regressions are useful to those less familure with what is failing
2007-12-23 01:10:29 +00:00
John Johansen
5d51c46fd6 make the link subset test livable 2007-12-23 01:07:16 +00:00
John Johansen
7742386a84 fix_changehat_fork.patch 2007-12-23 01:06:49 +00:00
John Johansen
ee47e61713 changehat-no-hats.patch 2007-12-23 01:06:30 +00:00
John Johansen
477e460858 net-raw.patch 2007-12-23 01:06:09 +00:00
John Johansen
2c7d194499 network-base.patch 2007-12-23 01:04:46 +00:00
John Johansen
a75127d9aa link_exist.patch 2007-12-23 01:04:28 +00:00
John Johansen
fb036e3296 openat.patch 2007-12-23 01:04:12 +00:00
John Johansen
d447b3b4e4 chdir.patch 2007-12-23 01:03:58 +00:00
John Johansen
77dc3a81f6 access.patch 2007-12-23 01:03:39 +00:00
John Johansen
b5d54384f0 more updates to prolog-inc 2007-12-23 01:03:27 +00:00
John Johansen
247a887a95 sysctl.patch 2007-12-23 01:02:50 +00:00
John Johansen
25c06ea4fb change_hat_profile_access.patch 2007-12-23 01:02:35 +00:00
John Johansen
7cb38c90aa basename.patch 2007-12-23 01:02:15 +00:00
John Johansen
355b968257 confined.patch 2007-12-23 01:02:00 +00:00
John Johansen
7be938573e link_perms.patch 2007-12-23 01:01:24 +00:00
John Johansen
5fb7c2cac6 dir-files.patch 2007-12-23 01:00:56 +00:00
John Johansen
93d88ebfd4 ptrace.patch 2007-12-23 01:00:33 +00:00
John Johansen
5b61f80b97 deleted-open-revalidate.patch 2007-12-23 01:00:19 +00:00
John Johansen
c843dbc392 exec_qual.patch 2007-12-23 01:00:00 +00:00
John Johansen
d54462a550 vfs-mnt.patch 2007-12-23 00:59:37 +00:00
John Johansen
98ce614c3b start of 10.3 test update 2007-12-23 00:58:47 +00:00
John Johansen
5b758f9dad fix bug where parser wasn't properly merging link rules, when a link pair was specified 2007-12-20 12:58:59 +00:00
John Johansen
edda8c2604 add owner parser tests 2007-12-20 12:58:16 +00:00
John Johansen
ace86e6d01 fix overlapping x modifiers perm computation 2007-12-20 12:56:50 +00:00
John Johansen
65e2c09be1 remove dead code 2007-12-20 12:55:27 +00:00
John Johansen
e0a1668ffd - fix regression in link pairs where exec_unsafe was not being considered
in the link subset tests
- update fgetattr fuse patch to use fuse_update_atts
2007-12-11 15:37:19 +00:00
John Johansen
97dbaa02cb change from U:G:O syntax to owner syntax and remove group permission 2007-11-29 18:06:53 +00:00
John Johansen
55abf6aa0b add apparmor security goal documentation 2007-11-21 09:12:04 +00:00
John Johansen
1d3697e07e remove #if 0 from fs/namei.c 2007-11-21 08:51:45 +00:00
John Johansen
33e0151579 Add reviewed by tag 2007-11-21 08:48:46 +00:00
John Johansen
3370223f9f Add fgetattr, fsetattr patches to the vfs patch series 2007-11-21 08:37:28 +00:00
John Johansen
7cb2653a85 Refresh patches against 2.6.24 2007-11-19 23:18:48 +00:00
John Johansen
4ce25448af allow specifying link permissions as a pair 2007-11-16 09:37:31 +00:00
John Johansen
398102afa8 old style link compatability 2007-11-16 09:36:42 +00:00
John Johansen
0e5484ce77 fix change profile 2007-11-16 09:36:19 +00:00