John Johansen
777ff460f8
update profiles for bugs that have been reported by various users
2008-02-19 10:35:19 +00:00
John Johansen
04acbd2bfb
update profile for bugs that have been reported by various people
2008-02-19 10:32:28 +00:00
John Johansen
486bb79ef7
merge over r1088 - Add descriptiion of append, lock and network rules to the man page
2008-02-19 10:19:28 +00:00
John Johansen
92977daf75
merge over change from 1082 - update parser .spec change log
2008-02-19 10:18:12 +00:00
John Johansen
66276373cd
add missing link subset tests
2008-02-18 11:19:11 +00:00
John Johansen
599e624b3a
fix bitmasking
2008-02-09 14:16:07 +00:00
John Johansen
451deea533
M vfs-mkdir.diff
...
- pass vfsmnt param for cgroups
A fix-user-audit.diff
- nothing
A fix-link-subset.diff
- fix reporting of failed link subsets
A apparmor-fix-lock-letter.diff
- fix the reported lock letter in apparmorfs/matching
- reverted audit request_mask back to requested_mask
A apparmor-fix-sysctl-refcount.diff
- fix a refcount leak in sysctl audit
2008-02-09 14:07:22 +00:00
John Johansen
7ef32ce6f0
conditionally wrap audit_messages so they are dependant on the audit subsystem being enabled
2008-01-11 18:49:15 +00:00
John Johansen
5a666b5d29
add missing apparmor.h to split_init.diff
2008-01-10 20:03:06 +00:00
John Johansen
46fefd63a1
- Add apparmorfs features file (may break this into a directory, sysfs style)
...
- do split init so apparmor is initialized in security_initcall
2008-01-10 18:05:50 +00:00
John Johansen
fb62cb15b2
update apparmor_status to work when apparmor is a kernel builtin
2008-01-05 08:29:39 +00:00
John Johansen
482b8741b7
fix init script so that it doesn't result in a regex with a null alternation ie. |apparmor
2008-01-03 23:21:07 +00:00
John Johansen
e9fd1d8fc1
update init functions to work with the apparmor module being builtin to the kernel
2008-01-03 22:27:20 +00:00
John Johansen
bad1c12112
remove patches for tests as they are now applied
2007-12-23 01:17:23 +00:00
John Johansen
781e6d1882
Add the ability to mark as test as a known_fail or known_pass,
...
which means the failure of the tests is known. So known_fail
means the test should fail but is known to succeed and similar
for known_pass.
This allows tests to be marked as having a known problem so that
regressions are useful to those less familure with what is failing
2007-12-23 01:10:29 +00:00
John Johansen
5d51c46fd6
make the link subset test livable
2007-12-23 01:07:16 +00:00
John Johansen
7742386a84
fix_changehat_fork.patch
2007-12-23 01:06:49 +00:00
John Johansen
ee47e61713
changehat-no-hats.patch
2007-12-23 01:06:30 +00:00
John Johansen
477e460858
net-raw.patch
2007-12-23 01:06:09 +00:00
John Johansen
2c7d194499
network-base.patch
2007-12-23 01:04:46 +00:00
John Johansen
a75127d9aa
link_exist.patch
2007-12-23 01:04:28 +00:00
John Johansen
fb036e3296
openat.patch
2007-12-23 01:04:12 +00:00
John Johansen
d447b3b4e4
chdir.patch
2007-12-23 01:03:58 +00:00
John Johansen
77dc3a81f6
access.patch
2007-12-23 01:03:39 +00:00
John Johansen
b5d54384f0
more updates to prolog-inc
2007-12-23 01:03:27 +00:00
John Johansen
247a887a95
sysctl.patch
2007-12-23 01:02:50 +00:00
John Johansen
25c06ea4fb
change_hat_profile_access.patch
2007-12-23 01:02:35 +00:00
John Johansen
7cb38c90aa
basename.patch
2007-12-23 01:02:15 +00:00
John Johansen
355b968257
confined.patch
2007-12-23 01:02:00 +00:00
John Johansen
7be938573e
link_perms.patch
2007-12-23 01:01:24 +00:00
John Johansen
5fb7c2cac6
dir-files.patch
2007-12-23 01:00:56 +00:00
John Johansen
93d88ebfd4
ptrace.patch
2007-12-23 01:00:33 +00:00
John Johansen
5b61f80b97
deleted-open-revalidate.patch
2007-12-23 01:00:19 +00:00
John Johansen
c843dbc392
exec_qual.patch
2007-12-23 01:00:00 +00:00
John Johansen
d54462a550
vfs-mnt.patch
2007-12-23 00:59:37 +00:00
John Johansen
98ce614c3b
start of 10.3 test update
2007-12-23 00:58:47 +00:00
John Johansen
5b758f9dad
fix bug where parser wasn't properly merging link rules, when a link pair was specified
2007-12-20 12:58:59 +00:00
John Johansen
edda8c2604
add owner parser tests
2007-12-20 12:58:16 +00:00
John Johansen
ace86e6d01
fix overlapping x modifiers perm computation
2007-12-20 12:56:50 +00:00
John Johansen
65e2c09be1
remove dead code
2007-12-20 12:55:27 +00:00
John Johansen
e0a1668ffd
- fix regression in link pairs where exec_unsafe was not being considered
...
in the link subset tests
- update fgetattr fuse patch to use fuse_update_atts
2007-12-11 15:37:19 +00:00
John Johansen
97dbaa02cb
change from U:G:O syntax to owner syntax and remove group permission
2007-11-29 18:06:53 +00:00
John Johansen
55abf6aa0b
add apparmor security goal documentation
2007-11-21 09:12:04 +00:00
John Johansen
1d3697e07e
remove #if 0 from fs/namei.c
2007-11-21 08:51:45 +00:00
John Johansen
33e0151579
Add reviewed by tag
2007-11-21 08:48:46 +00:00
John Johansen
3370223f9f
Add fgetattr, fsetattr patches to the vfs patch series
2007-11-21 08:37:28 +00:00
John Johansen
7cb2653a85
Refresh patches against 2.6.24
2007-11-19 23:18:48 +00:00
John Johansen
4ce25448af
allow specifying link permissions as a pair
2007-11-16 09:37:31 +00:00
John Johansen
398102afa8
old style link compatability
2007-11-16 09:36:42 +00:00
John Johansen
0e5484ce77
fix change profile
2007-11-16 09:36:19 +00:00