Steve Beattie
86e5ed3109
Patch from jjohansen@suse.de
...
Fix debugging with CHANGE_PROFILE.
2007-07-27 20:25:59 +00:00
John Johansen
17ff3b0f58
- append
...
- lock
- null-complain-profile on missing mandatory profile bug
- parameter cleanup
- network mediation patch
2007-07-27 20:20:50 +00:00
John Johansen
b2c6ec5b57
refresh patches for offsets against latest git pull
2007-07-27 18:36:31 +00:00
Matt Barringer
37cf7f900b
- Working towards having this applet in OpenSUSE 10.3
2007-07-25 23:51:15 +00:00
Matt Barringer
f246dded28
-Typo in Makefile.am corrected.
2007-07-24 19:32:25 +00:00
Matt Barringer
2e9cdff31c
- 10.3 uses ylwrap by default, which was throwing the
...
scanner generation off. Fixed.
2007-07-24 19:29:02 +00:00
Matt Barringer
35257c4ff4
Trying to get this library to build on 10.3
2007-07-24 18:24:48 +00:00
Matt Barringer
a013140fce
2007-07-24 18:17:50 +00:00
Matt Barringer
748d811e03
2007-07-24 18:16:19 +00:00
Seth Arnold
87647fe7a7
add svn:keywords to tunables/proc
2007-07-23 16:31:39 +00:00
Andreas Gruenbacher
6d15b4eba7
- Rediff against 2.6.23-rc1.
2007-07-23 12:36:24 +00:00
Seth Arnold
5bd8083759
write to drift
2007-07-19 16:00:39 +00:00
Seth Arnold
f601f8c9ce
services access
2007-07-19 15:59:58 +00:00
Steve Beattie
a6f387a17e
Fix gcc warning about possible uninitialized use of the ms variable; if
...
match_string is NULL, the out: cleanup will test ms for !NULL and free
it, even though it hasn't been initialized.
2007-07-18 14:22:59 +00:00
Dominic Reynolds
74b0f0b5ad
Read and write new change hat profile syntax
...
Read in the new audit message format used by the module
Updated the tools to handle the newer directory mediation in apparmor
2007-07-16 13:19:02 +00:00
John Johansen
dc3c7e0b20
refresh patches against latest git tree
2007-07-15 21:33:35 +00:00
John Johansen
4bd10c3aec
fold patches into main apparmor patches
2007-07-15 15:42:43 +00:00
John Johansen
1ee0a2c2d3
- early bailout of change_hat/change_profile when the new_profile
...
doesn't exist
- in do_change_profile rename profile to new_profile
- fix bug in early bail out
- don't audit change_hat/change_profile token
- remove unused AA_AUDITTYPE defines
2007-07-15 15:27:08 +00:00
Dominic Reynolds
c8c8ca442c
Repository fixes for tools.
...
- Ask Me Later option for enabling the repository not working
- Cleanup the syncronization code with the repository - ensure that
mofications are presented correctly as adds/changes to the users profile
set
- Correct bug in marking profiles as NEVERSUBMIT
- Fix bug in serlializing profiles with hats (was adding the globals
#include above each hat - ick)
- Added dialog and config handling code to enable user to choose the mode of
usage of the profile repository: download only or upload new/changed
profiles - so that they user isn't repeatedly prompted to sign in to the
repository
- Set default configuration for the repository to apparmor.test.opensuse.org
2007-07-13 17:53:12 +00:00
Matt Barringer
5a4a53563c
- Cleaning up warnings from RPMLINT
2007-07-12 21:25:14 +00:00
Matt Barringer
7d54e6a856
- autogen.sh will make it easier for SVN users to build the library.
2007-07-12 20:18:27 +00:00
Matt Barringer
d8bc255e45
- Initial checkin of the RPM specfile
2007-07-12 18:40:39 +00:00
Matt Barringer
1fa3516397
- Modified configure to require --with-perl/python/ruby/etc
...
to enable the compilation of those SWIG wrappers.
- Put together a perl usage example
2007-07-11 01:08:06 +00:00
Matt Barringer
c6d5ebc7b6
- Modified src/Makefile.am, grammar.y & scanner.l to support autotools
...
generating the bison & flex output. Removing generated files from
SVN.
- It doesn't make sense to remove those generated files but leave
autotools generated files, so I'm removing those.
- Removing SWIG generated files as well.
2007-07-10 16:38:23 +00:00
Matt Barringer
06faae5ec6
Added an audit_id field to the aa_log_record struct.
2007-07-09 19:08:02 +00:00
Andreas Gruenbacher
da56acb826
- Rediff against git.
2007-07-03 11:56:24 +00:00
John Johansen
d5f43d5a4f
remove stupid debug fprintf statements that got left in
2007-06-27 01:27:44 +00:00
John Johansen
51c0b3d60c
update Signed-off-by
2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe
- refresh patches again newest git
...
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
12f3472c09
basic change_profile support
2007-06-26 21:10:28 +00:00
John Johansen
5655affcda
flatten hats for individual profile load
2007-06-26 21:09:46 +00:00
John Johansen
84bfd57edf
change_profile
...
- fix use of cxt->previous_profile, was changing it instead of searching
based off its name, which would could result in use of a stale
profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4
- Remove obsolete patches.
...
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
Matt Barringer
c3e8a4cbcb
Initial checkin, version 0.6.
2007-06-24 18:34:55 +00:00
John Johansen
d740aec8e8
remove old patches that got folded into change_profile-3.diff
2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8
latest revision of change_profile patch, collapse several patches into change_profile-3.diff
2007-06-23 08:06:31 +00:00
Andreas Gruenbacher
97df59697c
Fold together the audit rework.
2007-06-22 18:52:49 +00:00
Andreas Gruenbacher
024b9d702a
Ignore the AA_CHANGE_PROFILE flag when checking for link permission.
2007-06-22 18:45:17 +00:00
Andreas Gruenbacher
b1ee140da5
aa_find_profile2 is unused now.
2007-06-22 18:02:30 +00:00
John Johansen
f2f77bacb4
add missing use-interface_lock
2007-06-22 17:56:19 +00:00
John Johansen
4b7150f21b
update change_profile patches
2007-06-21 18:27:17 +00:00
John Johansen
4a844e8d33
convert change_profile to use the interface lock - this is untested and likely broken
2007-06-19 17:11:32 +00:00
John Johansen
2b59d6f9ac
change_profile refactored and mostly working
2007-06-15 18:44:09 +00:00
Steve Beattie
a2423f3371
Patch from Mathias Gug <mathiaz@ubuntu.com>, I added the same
...
modification to the audit command.
This fix scans apparmor.d directory to find profiles that matches the
profile passed on the command line. Currently if the binary doesn't
exist on the system, complain/enforce fails even if a profile is defined.
2007-06-15 15:11:09 +00:00
Seth Arnold
d0cfcfa004
add a bunch of rules for dhcpcd -- including two Ux rules. Ugh. Should fix that, but they look like big black holes.
2007-06-11 22:14:18 +00:00
Seth Arnold
b7110070f2
fix up postfix's directories with the new / suffix
2007-06-11 21:55:56 +00:00
Seth Arnold
131355ec7a
move xfs away from X11R6
2007-06-11 17:56:00 +00:00
Seth Arnold
7509f7aae2
move xfs away from X11R6
2007-06-11 17:55:50 +00:00
Seth Arnold
6aad212284
move acroread
2007-06-11 17:53:45 +00:00
Seth Arnold
f0d8ce3159
a few dhcpcd and resmgrd fixes
2007-06-11 17:23:17 +00:00
