Commit graph

860 commits

Author SHA1 Message Date
Dominic Reynolds
9c0820d5ed Fixes for "mandatory profile not found" profiling bug, empty configs in
logprof.conf generating undefined value errors, repository code
prompting user even if no configuration is present that specifies a
default repository.
2007-08-16 21:51:08 +00:00
Dominic Reynolds
0e60123f22 Updated translations for missing shortcuts in msgstr fields. 2007-08-16 21:38:34 +00:00
Steve Beattie
f1e851d8e4 Bump the version of apparmor to 2.1. 2007-08-16 17:18:46 +00:00
Steve Beattie
156476d738 Rename change_hat.2 to aa_change_hat.2, with backwards compatability
symlink generated by the rpm specfile.
Don't create libimmunix.so, nothing new should ever link against it.
2007-08-16 05:15:03 +00:00
Steve Beattie
45b5373b39 Add support for aa_change_profile(2) to both the library and to the swig
interfaces. A manpage still needs to be added.
2007-08-16 04:35:56 +00:00
Steve Beattie
adf6076d85 Rename change_hat(2) to aa_change_hat(2) (a backwards compatibility
macro is in place) and support 64 bit magic tokens.
2007-08-16 04:26:19 +00:00
Steve Beattie
bda571d643 Fix braindead symbol versioning issue where applications that linked
against libapparmor::change_hat would be linking against
change_hat@IMMUNIX_1.0 rather than change_hat@APPARMOR_1.0 (the
preferred version).

Remove -module to prevent linking portability warning when building
mod_apparmor.

Use RPM_OPT_FLAGS for CFLAGS when building rpms.
2007-08-16 04:19:54 +00:00
Seth Arnold
0c9d1c44ed new audit manpage from Mathias Gug 2007-08-15 21:43:40 +00:00
John Johansen
a92114480c Fix a double free bug in include handling 2007-08-15 20:24:58 +00:00
Matt Barringer
7d3a95c797 - Added the timestamp from the audit ID ('epoch')
to aa_log_record.
- Added the integer that follows the colon in the 
  audit ID ('audit_sub_id') to aa_log_record.
- Modified the testsuite to deal with the two new
  numbers.
2007-08-15 20:07:48 +00:00
Dominic Reynolds
ea8ed8f665 utitlity to look for problems in the po files. 2007-08-15 19:24:49 +00:00
Seth Arnold
0e5d6bddd2 Bug 288470 - ntp profile rejects access to /var/lib/ntp/etc/localtime 2007-08-15 17:31:26 +00:00
Dominic Reynolds
4b7a720d8a Fix problems with missing hotkey for "(S)can for SubDomain Events" in
genprof. Replace occurances of SubDomain in msgstr with AppArmor.
2007-08-15 16:24:26 +00:00
Dominic Reynolds
1c56662fe7 Added support for capablities and network toggles in #includes. 2007-08-15 16:17:50 +00:00
Seth Arnold
64ea5e3944 patch from Mathias Gug to correct change_hat manpage section 2007-08-15 00:14:39 +00:00
Steve Beattie
4c1effc3a2 Make the location of logger configurable via /etc/apparmor/logprof.conf 2007-08-14 22:07:40 +00:00
Dominic Reynolds
50d958b5e8 Refactoring changes for the apparmor-reports YaST module.
Author: ddrewelow@suse.de
2007-08-14 21:20:43 +00:00
Steve Beattie
6414c84357 Oops, fix up hardcoded reference to current/ in the linking of icons for
yast-gnome.
2007-08-14 19:53:30 +00:00
Steve Beattie
6123467433 skip files suffixed with .dpkg-old, based on a patch from Mathias Gug
<mathiaz@ubuntu.com> [Message-ID: <20070813201254.GD11381@mathias.mathiaz.net>]
Added comments to both file-skipping locations referencing the other
location that needs to be modified.

(The ideal solution would be for this information to be stored in one
commonly referenced location, configurable by distributors and
administratrors.)
2007-08-14 19:19:59 +00:00
Steve Beattie
b608f2643b This patch is from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu
[Message-ID: <20070813195328.GB11381@mathias.mathiaz.net>]

Ubuntu installs apxs, the apache module building binary in /usr/bin
rather than /usr/sbin, so search there as well.
2007-08-14 19:09:03 +00:00
Steve Beattie
cd73259db4 Patch from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu [Message-ID:
<20070813195328.GB11381@mathias.mathiaz.net>].

This fixes the make install target of pam_apparmor so that it depends on
the library already being built.
2007-08-14 19:06:19 +00:00
Steve Beattie
18785e848d Fix to ntpd profile from Mathias Gug <mathiaz@ubuntu.com> of Ubuntu. 2007-08-14 18:51:00 +00:00
Steve Beattie
1f0169a5f9 Launchpad bug #132468: Nameservice abstraction should also include
/var/run/resolvconf/resolv.conf:

  The Nameservice abstraction configuration file
  (/etc/apparmor.d/abstractions/nameservice) permits reads access to
  (amongst other paths) /etc/resolv.conf.

  However, on systems using resolvconf, this is a symbolic link to
  /etc/resolvconf/run/resolv.conf -- where /etc/resolvconf/run itself
  is a symlink to /var/run/resolvconf.
2007-08-14 14:50:09 +00:00
Steve Beattie
38c6f062f3 This fix is for #212500 "y2controlcenter-gnome does not find AppArmor
icons" and its duplicate #297243 "Missing YaST icon: All app armor
icons".

The problem was that (a) the .desktop spec doesn't really allow having
path elements in the "Icon=" entry, and (b) that y2controlcenter-gnome
was looking in /usr/share/icons/hicolor/[size]/apps/ for the apparmor
icons, which weren't there.
2007-08-14 03:51:32 +00:00
Steve Beattie
7e8fe42967 Fix for #298840, "apparmor-utils misses perl-TermReadKey dep" 2007-08-10 21:51:20 +00:00
Matt Barringer
ad4685c196 - Patched to remove annoying build error when the python module
is not enabled.
2007-08-08 22:56:16 +00:00
Steve Beattie
50df7d407d Reorganize buildrequires: lines and fix the dependency for sles10, to
allow yast2-apparmor to build against the SLE_10 target in the opensuse
buildservice.
2007-08-08 22:45:22 +00:00
Steve Beattie
6de4ff8971 Make pam_apparmor dependencies correct for opensuse 10.2 and earlier. 2007-08-08 19:09:01 +00:00
Matt Barringer
2f8c80c90f - I don't recall dropping an important #define, so now it's back in. 2007-08-08 18:25:57 +00:00
Steve Beattie
99b510da88 Now that config.h.in has been deleted, remove the dependency on it in
configure.in.
2007-08-08 16:57:34 +00:00
Steve Beattie
b8b12a6a6c Sigh, it actually did work, but the opensuse buildservice is somewhat
deceiving. Re-enabling.
2007-08-08 15:26:01 +00:00
Steve Beattie
47cef58f48 Back out change to use libimmunix on 10.0. It didn't appear to work. 2007-08-08 15:05:10 +00:00
Steve Beattie
5dc2a8a487 Use libimmunix on suse 10.0 (and earlier) 2007-08-08 06:28:22 +00:00
Matt Barringer
71f43c80bb - Cleaned up directory, added autogen.sh 2007-08-07 19:33:01 +00:00
Matt Barringer
e00c714ff1 - Cleaned up directory. 2007-08-07 19:29:19 +00:00
Matt Barringer
59f3f1e1ac - Cleaned up the directory. Now make -f Makefile.cvs will
set everything up.
- Fixed ScintillaWX so it'll build against wxWidgets 2.8
2007-08-07 19:20:13 +00:00
Matt Barringer
d1640ad894 - Removing config.h.in 2007-08-07 19:09:48 +00:00
Steve Beattie
336b5ebaef Remove some of the unnecessary and autogenerated autoconf junk, and set
the svn:ignore property to ignore it in the future.
2007-08-07 19:01:19 +00:00
Dominic Reynolds
fcfccdc1f7 Profile changes for the new network toggles and lock mediation. 2007-08-07 12:26:21 +00:00
Matt Barringer
6d47475de3 - Autobuild needed the "Group" to be GNOME rather than Gnome. 2007-08-06 19:09:54 +00:00
Dominic Reynolds
cfb52c03f8 Added AF_RXRPC to the list of ignored net families from socket.h that
are used in the generation of af_names.h.
2007-08-06 18:48:26 +00:00
Matt Barringer
3f389cd79b - Sometimes you do something so stupid that you want to kick yourself.
Today's example is my prepending APPARMOR_REJECT to a message, rather
  than APPARMOR_DENIED.  This caused problems and was a source of much
  hair tearing all weekend.
2007-08-06 18:47:12 +00:00
Dominic Reynolds
fcbd2cafae Updates for network toggles and new profiles. 2007-08-06 15:28:24 +00:00
Dominic Reynolds
073854651f Added updated translations. 2007-08-06 12:49:47 +00:00
Dominic Reynolds
737ffeb3c7 Added updated translations. 2007-08-06 12:48:39 +00:00
Matt Barringer
69173bb8ab - Oops, forgot a single ampersand. 2007-08-06 04:22:19 +00:00
Matt Barringer
578b8d5437 - Since magic_token moved to being an integer rather than a string,
apparmor-dbus needs to treat it as such.
2007-08-06 04:21:36 +00:00
Matt Barringer
e04d4a309f - Added "protocol", "family" and "sock_type" to the parser to
support the initial network support.
2007-08-06 02:38:30 +00:00
Matt Barringer
ab87fbfb94 - Was previously under the belief that pid="1234" and
magic_token="1245353" were correct syntax from the kernel.
  It turns out this is not the case.
2007-08-05 22:54:41 +00:00
Matt Barringer
f4d6d1ab1f - Changed the applet to understand that a byte array, rather than
a string, will be coming in for the profile name.
2007-08-05 22:15:02 +00:00