John Johansen
fb036e3296
openat.patch
2007-12-23 01:04:12 +00:00
John Johansen
d447b3b4e4
chdir.patch
2007-12-23 01:03:58 +00:00
John Johansen
77dc3a81f6
access.patch
2007-12-23 01:03:39 +00:00
John Johansen
b5d54384f0
more updates to prolog-inc
2007-12-23 01:03:27 +00:00
John Johansen
247a887a95
sysctl.patch
2007-12-23 01:02:50 +00:00
John Johansen
25c06ea4fb
change_hat_profile_access.patch
2007-12-23 01:02:35 +00:00
John Johansen
7cb38c90aa
basename.patch
2007-12-23 01:02:15 +00:00
John Johansen
355b968257
confined.patch
2007-12-23 01:02:00 +00:00
John Johansen
7be938573e
link_perms.patch
2007-12-23 01:01:24 +00:00
John Johansen
5fb7c2cac6
dir-files.patch
2007-12-23 01:00:56 +00:00
John Johansen
93d88ebfd4
ptrace.patch
2007-12-23 01:00:33 +00:00
John Johansen
5b61f80b97
deleted-open-revalidate.patch
2007-12-23 01:00:19 +00:00
John Johansen
c843dbc392
exec_qual.patch
2007-12-23 01:00:00 +00:00
John Johansen
d54462a550
vfs-mnt.patch
2007-12-23 00:59:37 +00:00
John Johansen
98ce614c3b
start of 10.3 test update
2007-12-23 00:58:47 +00:00
John Johansen
5b758f9dad
fix bug where parser wasn't properly merging link rules, when a link pair was specified
2007-12-20 12:58:59 +00:00
John Johansen
edda8c2604
add owner parser tests
2007-12-20 12:58:16 +00:00
John Johansen
ace86e6d01
fix overlapping x modifiers perm computation
2007-12-20 12:56:50 +00:00
John Johansen
65e2c09be1
remove dead code
2007-12-20 12:55:27 +00:00
John Johansen
e0a1668ffd
- fix regression in link pairs where exec_unsafe was not being considered
...
in the link subset tests
- update fgetattr fuse patch to use fuse_update_atts
2007-12-11 15:37:19 +00:00
John Johansen
97dbaa02cb
change from U:G:O syntax to owner syntax and remove group permission
2007-11-29 18:06:53 +00:00
John Johansen
55abf6aa0b
add apparmor security goal documentation
2007-11-21 09:12:04 +00:00
John Johansen
1d3697e07e
remove #if 0 from fs/namei.c
2007-11-21 08:51:45 +00:00
John Johansen
33e0151579
Add reviewed by tag
2007-11-21 08:48:46 +00:00
John Johansen
3370223f9f
Add fgetattr, fsetattr patches to the vfs patch series
2007-11-21 08:37:28 +00:00
John Johansen
7cb2653a85
Refresh patches against 2.6.24
2007-11-19 23:18:48 +00:00
John Johansen
4ce25448af
allow specifying link permissions as a pair
2007-11-16 09:37:31 +00:00
John Johansen
398102afa8
old style link compatability
2007-11-16 09:36:42 +00:00
John Johansen
0e5484ce77
fix change profile
2007-11-16 09:36:19 +00:00
John Johansen
638535d650
exec modes per U:G:O
2007-11-16 09:35:57 +00:00
John Johansen
ec639bc82c
user:group:any permissions
2007-11-16 09:35:31 +00:00
John Johansen
e601767e03
simple cleanup
2007-11-16 09:34:53 +00:00
John Johansen
40c3686041
remove old netdomain syntax
2007-11-16 09:34:01 +00:00
John Johansen
50284e8aad
autogenerate the capability names file
2007-11-16 09:32:38 +00:00
John Johansen
c841a140b3
make the use of flags= optional
2007-11-16 09:31:33 +00:00
John Johansen
999e291acc
factor use of id and varid into single token
2007-11-16 09:30:08 +00:00
John Johansen
20d5d20855
tests for pix exec mode
2007-11-16 09:28:30 +00:00
John Johansen
230b04231c
add pix transition mode
2007-11-16 09:27:34 +00:00
John Johansen
92a569fdb3
profile namespace tests
2007-11-16 09:22:49 +00:00
John Johansen
a4721bd02d
add basic handling of profile namespaces
2007-11-16 09:18:48 +00:00
John Johansen
11d8181d0d
Fix bug 254677
2007-11-16 00:16:04 +00:00
John Johansen
a2de30e4ce
Add missing patches
2007-11-13 16:57:45 +00:00
John Johansen
67f130c66c
Move deprecated code into the deprecated branch
2007-11-13 08:33:09 +00:00
Dominic Reynolds
472a1d333a
Added handling to correctly check the result of the profile development
...
run and reset the profile mode to enforce when the profile development
run exits without an error.
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328045
2007-11-06 18:08:24 +00:00
Dominic Reynolds
c074a19f24
Ignore complain flags when up|down loading profiles to|from the
...
repository. This makes the repository agnostic to profile mode
(complain/enforce) - users must manage this locally via
aa-complain/aa-enforce.
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328033
2007-11-06 18:06:18 +00:00
Dominic Reynolds
63a7fa4aed
Modified code to check the repository for new profile when:
...
- processing an unknown hat/execute rejection if its not already in the profile
- at the start of processing all the remain events for the profile
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328707
2007-11-06 16:46:57 +00:00
Dominic Reynolds
57f1e839b7
Updated regex used to detect syslog messages (from bug reported against
...
Ubuntu gutsy)
2007-11-06 16:37:52 +00:00
Steve Beattie
cfef502c54
Basic change_profile testcases, basic network rules testcases, testcases
...
around carat symbols and commas in file rules, and basic permission
modes first testcases from jjohansen@suse.de .
Acked-By: Steve Beattie <steve@nxnw.org>
2007-10-01 06:34:27 +00:00
Steve Beattie
815c103488
lock mode bit tests from jjohansen@suse.de
...
Also, make 'check' toplevel target be an alias for 'tests'
Acked-By: Steve Beattie <steve@nxnw.org>
2007-10-01 06:12:26 +00:00
Steve Beattie
4e0679ecc6
Append testcases from jjohansen@suse.de.
...
Acked-By: Steve Beattie <steve@nxnw.org>
2007-10-01 06:04:18 +00:00