Commit graph

537 commits

Author SHA1 Message Date
John Johansen
d13ef600d8 update patches with feed back, refresh with -p ab 2007-04-10 20:54:28 +00:00
Andreas Gruenbacher
d6414e35dd Some further bugfixes 2007-04-10 20:34:11 +00:00
Andreas Gruenbacher
461273d456 Add -i option for in-place editing. 2007-04-10 19:32:10 +00:00
Andreas Gruenbacher
ea1ae48724 Get patch order right. 2007-04-10 18:35:13 +00:00
Andreas Gruenbacher
f55c928fbe Recognize quoted pathnames as well. 2007-04-10 18:16:03 +00:00
Andreas Gruenbacher
e3e5528dbc Add sketchy profile conversion script. 2007-04-10 14:45:09 +00:00
Andreas Gruenbacher
c97205bfeb Add makefile rule to generate HTML techdoc. 2007-04-10 01:38:56 +00:00
Andreas Gruenbacher
b9caf8ef1a Capitalization fixes. 2007-04-10 00:59:25 +00:00
Andreas Gruenbacher
220454063f Add technical documentation. 2007-04-10 00:52:43 +00:00
Andreas Gruenbacher
9b46fbca97 Add locking-comment.txt. 2007-04-08 17:58:53 +00:00
Andreas Gruenbacher
9597b4192f Add missing patches; new mostly-cosmetic one 2007-04-08 17:50:13 +00:00
Matt Barringer
6c06fbe63c 2007-04-08 07:54:29 +00:00
Matt Barringer
51805b5c25 Getting the netdomain tests working on the actual netdomain machine 2007-04-08 07:52:49 +00:00
Andreas Gruenbacher
dfdffc0e39 Update the ptrace patch. 2007-04-05 14:29:00 +00:00
Andreas Gruenbacher
4ff695d5a3 Add patch header comments 2007-04-05 10:04:00 +00:00
Steve Beattie
77cc03023e Subject: initscript: subdomain -> apparmor
This patch converts some of the internal references from subdomain to
apparmor (and s/sd/aa/ as well). Variables referenced in
/etc/apparmor/subdomain.conf (which also needs to be renamed) are not
renamed.
2007-04-04 21:56:08 +00:00
Steve Beattie
1696851ec4 Subject: initscript: kill debug option
The apparmor module no longer supports being loaded with the
subdomain_debug module argument. Kill the option that tried to do this.
2007-04-04 21:36:10 +00:00
Steve Beattie
f309bbd8e7 Subject: initscript: kill rebuild option
[This is a slight update to a patch originally by jjohansen@suse.de]

The ability of the rcapparmor initscript to rebuild the apparmor module
if attmepts to load the module failed had been broken for a while; this
patch rips out the option altogether. The ability to drop to runlevel
1 if the apparmor module can't be loaded is still available, if not
recently tested.
2007-04-04 21:28:43 +00:00
Steve Beattie
5cc6094944 Subject: initscript: support builtin apparmor
This patch, based on prior versions by jjohansen@suse.de, reworks the
rcapparmor initscript to support apparmor as a kernel builtin, instead
of just a module.
2007-04-04 21:23:42 +00:00
Steve Beattie
67a12028f2 Subject: initscript: ignore more dpkg
In the recent fixups for Ubuntu/Debian, .dpkg-new files got added to the
set of profile names that get ignored. Alas, that only got added in one
of two locations in the initscript; this patch fixes that by making a
common test function that both locations use.
2007-04-04 20:42:26 +00:00
Andreas Gruenbacher
87e2544d6f Fold together patches again. 2007-04-04 20:30:36 +00:00
Steve Beattie
feb167c51a Move some common manpage cleanup to common/Make.rules (and clean up
pod2html tmpfiles). Also mark manpages to be ignored by svn.
2007-04-03 20:12:16 +00:00
Steve Beattie
83eee1b4c6 Subject: Add mod_apparmor(8) to apache2-mod_apparmor package
Move the mod_apparmor(8) manpage to the apache2-mod_apparmor package.
2007-04-03 19:17:20 +00:00
Steve Beattie
60f2312372 Subject: Add manpages to utils package.
Move the autodep(8), complain(8), enforce(8), logprof(8), genprof(8),
unconfined(8), logprof.conf(5), and apparmor_status(8) manpages, along
with their aa- form symlinks, to the utils package.
2007-04-03 19:13:35 +00:00
Steve Beattie
38f4817876 Subject: Add change_hat(2) to libapparmor package
Move change_hat(2) manpage to libapparmor package.
2007-04-03 19:08:50 +00:00
Steve Beattie
24606ec70b Subject: Add manpages to the parser package
Move the apparmor.d(5), apparmor(7), apparmor_parser(8),
subdomain.conf(5) and apparmor.vim(5) (for lack of a better location)
into the apparmor-parser package.
2007-04-03 19:04:10 +00:00
Steve Beattie
9ef2941687 Subject: Move make targets from docs/ to common/Make.rules
This patch moves the make rules used to generate man pages and their
html counterparts from the docs package to the common/ directory, so
that all packages can make use of them. It also makes the immunix.css
stylesheet available via the common/ dir, renaming it to apparmor.css.
2007-04-03 18:51:56 +00:00
Andreas Gruenbacher
41bd5154e6 Add some more minor cleanups. 2007-04-03 16:48:07 +00:00
Andreas Gruenbacher
cd1eaa88a0 Add DFA table format README. 2007-04-03 13:53:24 +00:00
Andreas Gruenbacher
d622b621f1 security/Makefile: slightly cleaner version 2007-04-03 13:39:05 +00:00
Andreas Gruenbacher
368d9999ca Remove AA_LINK_X_MODIFIERS again. 2007-04-03 13:26:33 +00:00
Andreas Gruenbacher
72fba9803d Move to d_path fix backport from -mm tree (which is where our patch was merged). 2007-04-03 12:04:05 +00:00
Andreas Gruenbacher
026eb0b136 More logical patch order 2007-04-03 10:04:39 +00:00
Andreas Gruenbacher
0a12813bd8 Add comment 2007-04-03 09:33:34 +00:00
John Johansen
b5f18f5177 merge down patches to single apparmor.diff 2007-04-03 07:50:09 +00:00
Andreas Gruenbacher
8487f24e33 Inline function cleanup 2007-03-31 17:23:39 +00:00
Andreas Gruenbacher
ea49ba7712 Add setprocattr cleanup 2007-03-31 16:42:04 +00:00
Andreas Gruenbacher
4f7c1ecdfc Make sure we have at least one enabled profile; this looks as if it should work. 2007-03-30 22:45:28 +00:00
Andreas Gruenbacher
004af43f9f Bumt the version to 2.0.2. Move active/ profiles to extra/ pending review and regeneration with the latest syntax. 2007-03-30 22:32:48 +00:00
Andreas Gruenbacher
dacc176aca Add in reintroduce-interface-lock.diff which slipped through 2007-03-30 22:15:49 +00:00
Andreas Gruenbacher
f28840dff2 Fold all the apparmor patches together. Some line offsets in other patches. 2007-03-30 21:25:45 +00:00
Andreas Gruenbacher
152bc78d8b Line offset rediff only 2007-03-30 20:52:27 +00:00
Andreas Gruenbacher
b9057fd0bc Remove obsolete definition. 2007-03-30 20:39:11 +00:00
Andreas Gruenbacher
b379c2dcc3 Introduce reference counting for syntax tree nodes. Use that to share AcceptNodes, and split the bits in AcceptNodes to minimize the number of states. 2007-03-30 20:38:51 +00:00
Steve Beattie
b547067e8d This patch fixes the parser to do duplicate rule elimination after
variable expansion occurs, not before.
2007-03-30 18:34:37 +00:00
John Johansen
9d6cd4ffa8 make dfa the default output mode 2007-03-30 17:32:00 +00:00
Steve Beattie
abe841d7c4 Add an 'all' target for the pcre subdir. 2007-03-30 16:30:15 +00:00
Steve Beattie
7a4b823826 Always traverse subdirs to determine whether things need to be rebuilt
or not.
2007-03-30 16:26:50 +00:00
Jesse Michael
bef39bbff8 Add an empty install-debian: target to keep the makefile from blowing up
when running on Debian/Ubuntu systems and also make the init script skip
*.dpkg-new files when loading profiles.
2007-03-30 16:09:50 +00:00
Jesse Michael
3d84f865c9 The version of perl included with Ubuntu's Feisty release is generating
extra perl warnings about using an uninitialized value in a pattern
match when the user uses the arrow keys to move up and down in the option
list when asking how to handle path access rules.  This makes sure the
variables used in m// operations are always defined.
2007-03-30 16:04:04 +00:00