[SELinux commit]SELinux userland upstream repository branch, src-policy, updated. 20080909-531-gb5866ed
slawrence at oss.tresys.com
slawrence at oss.tresys.com
Tue Nov 22 16:24:17 CST 2011
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "SELinux userland upstream repository".
The branch, src-policy has been updated
discards 1353ed59ef85148539e09120a4a945b553446f6d (commit)
discards 3c4c28638fabd9608607809a882313f98ace87a4 (commit)
discards 92c0e6942009e5fb8f1c2c5a7da727e3a31af79f (commit)
discards b97181d643b3c8ebe5045cb2c4b3f7b2d191f3b2 (commit)
discards 05fe48a4e85e514d2dfc27b40845bc8b37c566c9 (commit)
discards edb1d539246c7bcc6a60a7dd7e7ee040ed2d2521 (commit)
discards f98bab668bc3c9998b1e3935a643bf1a281c676f (commit)
discards fc8ea6e0d6590af7ee1168aece014b73a80d5654 (commit)
discards 36821971c7c85511cd2ec63a86018f1195c38eeb (commit)
discards 6a7c4c6070012b447497aa5c8e1a000bf369ef79 (commit)
discards 3f9fed5710c77c36e486e685b3975117cfd17dff (commit)
discards 354308403372e71adeeed53a48102aef81c8a29e (commit)
discards 09077a06616b20960655805fe1b25619ce1717fc (commit)
discards 18eb029770d006bc71c2bc0f6ae72ce3b486eeec (commit)
discards ce66fb45f5757bdcc4d9a8727e0e4b8ac72e7975 (commit)
via b5866ed29f1562f6f5bb608ce1040c98ca887471 (commit)
via 4932ecdbfa1335db1d2e1e0c9bb83c630c9b15f1 (commit)
via 9b00049b1e4a0a7a15664c1eee3891c1eb1d1da8 (commit)
via 62faa5e6f61488ee53ad3396c9dfba6bf5d79622 (commit)
via 4a25d564ab61da7fa00f8136cd91d6a08938af2d (commit)
via 2d7370de9262b68d2e5f067fa5d01ca4a2139bfb (commit)
via 2bd213c3f343a946101bd86fc86dd0a0659297a6 (commit)
via b5a92ab6a0422242a44ba38769f21ab752d3ec8a (commit)
via f0ebdbbb064d1b37ca0f0742d9a92c228c52570e (commit)
via 1a2f6c92f6ba8c608e3a2ce00786262ca8343992 (commit)
via 7e1ce220eca507c17742c706707525057e7b6bf0 (commit)
via c1671e90caec3af9191abc257c7d6451d0df3d5b (commit)
via 9e514f52914e2a4f73077846942905eedc0e7c67 (commit)
via 47a4071c02ad1da550bcc13ecbba6b275952995d (commit)
via 06619ef96e04ad9930e9970aa925e59d998fb3f6 (commit)
via 18b745b87ad29f7a86e0f37627b5245abd1e0940 (commit)
via 7d13c1278c7c42923382fe12088cb53b02dcf77b (commit)
via ba242539166ea32639e46dd7559f0cb2343e8d46 (commit)
via 3e9e67f6c24680cc2c469a14490e2d9e9a061189 (commit)
via 2020c2e20180855e2ad644e0184c954e5ee4f088 (commit)
via 8645a3b3b7fd7ba1174c2b644ab27e4d7dd545f5 (commit)
via 7844fbefc2220db94ddb66f65e7e6623b5b2cabd (commit)
via dd2cac3958ae5b8a0bf1336ae4f15ddbdeb7c574 (commit)
via ef7ef57048108b34686bec6052ef8c4691f71eaf (commit)
via cf4d4010839549643b6a576308c701631860ee33 (commit)
via d1c90c057242478e6da7ad1165c7373eacaba873 (commit)
via 47fb185755b5dbfca2e82dbc97a7a52a29f75122 (commit)
via 9cc787bc163998db1d2e549998067e5fbd679d73 (commit)
via 14e4b70b933a330fc1e63bf0ac5ebab4f9664062 (commit)
via 077e8635173ae51576ee6c27eb7c6d12243294e9 (commit)
via 9cbd404ceb6c87483a4b8b2718b8d9ed8e4e6b56 (commit)
via 10fb8fdbb16c3cc8a5a4abb3edd98a85756772b8 (commit)
via b9b7bddb28c85a7cc2340c753f37b21bd7a14dbd (commit)
via d4a39ca15b5a41b545630aeaa04e96fe7c0346fe (commit)
via 24b31a9da5a6f7f9d056ab13367ebdcb1fb3c585 (commit)
via e018eec325264aa33dfb25094f3566cc5df5f401 (commit)
via d5475a909a570d72c75bc86dbb4e449c0ba7bb57 (commit)
via 148682066511f76a1b5d0d4ae10268f85140673e (commit)
via 5e50b01fa45220e31b78e822db15a8c5fa4d5661 (commit)
via 88234671ed0d1db27c986f009570c6cbe730d259 (commit)
via e134013ab705e6edaf3311d4dc9db7c81e84e775 (commit)
via 4a145b76d02a0ff179758773e028333e020184f7 (commit)
via 9961ca64990f9547f5f7921d1766f57905098e10 (commit)
via 48681bb49c032d4c399e8331126c5dca020e0b3e (commit)
via 672eb80648152e7be67ff9a1b0afe8fd9467888b (commit)
via a67cd948c4a907a1adcb2aa72686f8aebb096213 (commit)
via 9ef48acb374b93bc34e0840b39d7c3bbc343dcb7 (commit)
via 1c15c8b537b6c632074fac07019e0c3e012687a5 (commit)
via 9cc0749a737dcf0f7909885e5f043b0cde54325c (commit)
via 5c2a0d143de7920b9edf070518d22f4e7dce5481 (commit)
via 1d274aca2dca306d7dd6e37d81e54e278d175a9d (commit)
via 2c4eca16dd4aaf2f7830012908aef66109106d82 (commit)
via 06f53004d93ddb6bd4e2b2f4d697c8cedf382e47 (commit)
via 0a778ba601d68ef91304f90c101b5dc67d433e04 (commit)
via 2f68def6338d072ae13328cf6357a4468408ce1b (commit)
via 2b06f474006db3f32895dab9e393324febb9e16f (commit)
via 74a9a5296688e2617d669b346d3f5ef6e31ae2d9 (commit)
via dd563b35e1f6918e5c96de29ea255b04ad34e891 (commit)
via 3b5e45f004e508cca8958f6e3a46961753af291e (commit)
via 9c46a0a3153124753e3afbd2090fea65a09e1df1 (commit)
via 86e8daafc3755820272c0f36a3dd115f0b01c93d (commit)
via 023c9c1fdee963606d830b70db108bd9031390f4 (commit)
via c81a43c753efbda6f2106dbf0a291005683474f8 (commit)
via b3b19fdce58ff6ddfa6dfb8e5576c922c96e1e45 (commit)
via 468bff095253171300a5faa4bb23f0b2524fde08 (commit)
via fdeeccaa0ec11a5a549c60fc2da1f4dcd8eb5c65 (commit)
via 5054b9019a669b1f85ed0d35e6dff7ee9f449ec6 (commit)
via cfdfe498b772f28eb8255b07ebefed64db27b1d6 (commit)
via 418dbc70e8e7b6b313a0a23455d24256c6807a46 (commit)
via 7a653efffc48d0ecb95be5ace45b4dc6e15ba949 (commit)
via 6a530237403066293813ad03d575df2487db28d0 (commit)
via eb695e5a5618ede939af2f9c9daed7c53e14b50a (commit)
via e172b87a305e3ef602ae9caf3272fcb1cae0f1a3 (commit)
via 9df5601b60490be8d449414ba262c91d5093174c (commit)
via 42a523c0bd7361726dc29921ee86e15aabe460b1 (commit)
via 7bfaa63839955b2f743f84f2d873fc13298f5777 (commit)
via 09b635fa20cb47d155ec67eb2909c0dd33c677cb (commit)
via bedd2a8dc4d95360fcc6dd870be04e615b4f2766 (commit)
via b1331909a0cac8325b817b8c60ccae8b2c69b83b (commit)
via adbd558c1c1bb312f363d19499646cd7bc21cc7f (commit)
via 90469f7f75d1e87584cde6927c47192306fb9e08 (commit)
via b10ff76086a4065b3aa29e6c2f83c54923ebef74 (commit)
via 9f709e6bab863036950644a7dd470d50663b558b (commit)
via e4bc1b223debcc6747fef4d7a2a0a320c0208a88 (commit)
via 5722d765c756ac8dc52c52077f9311b8886fe8da (commit)
via ad5951fcb142cf9c2e899d3d99ce35b729b66b4c (commit)
via d9d583759595e522a0ebfb56f74ee2a274d48d19 (commit)
via b0be2a06b7b377cfc3134bb7ebadc9cf9d070992 (commit)
via 80f26c5ee865993264ef638480c6a05ab574f7c0 (commit)
via f87ae538256eff759cb67c448416dc14031849a1 (commit)
via ab1195dcfeca07d49247940c529ad60b76c07dc0 (commit)
via eecf746aa87d22a84ed6f21a142d1e2303c68dda (commit)
via 216f456401151d02b39bd3c7f47581a4b8632ab8 (commit)
via e8575bf497806eb5aea0ff0e207e35a5a1534064 (commit)
via f37a6a71cb32d9bd26adfebd89df2bedd4bfaafd (commit)
via 31edb319affb5e5c6298a53ca2de62abedb01630 (commit)
via 4347a5c01d79778ffb9c74b02cd174b0469670c8 (commit)
via 3e532cffac63d2d57cebf0bc5248d35e29e50126 (commit)
via 1d54976d73c7dfdde5ecdf74346727e01445b2e1 (commit)
via f23e078018b5313dd6a320b401173cc834b9450d (commit)
via a2db3f2df850362a6f6f6ddf779bb20f0bba9cbe (commit)
via f14912ee6e8402a8ca357c518d9c4a8f79cade99 (commit)
via 037285e936d252eeb734a956b80158d3bf6685d9 (commit)
via f4ecef50b25833d56f18a9219bd6c919c8da7186 (commit)
via 5a2173519c4210e4b99b08bc08006dfb872442d2 (commit)
via 0299119625fe0067998fffdff9bdf721379f3131 (commit)
via 60c780ffb6e7a48a2121e871ad20471a8fe0337d (commit)
via 1f8cf403be49dd8b918e2ff21969a6a47928d672 (commit)
via 3f1446944eef99734bf4caef093b7fc1de51c747 (commit)
via de311acdc976f8a8ec186d99181782e56b12b454 (commit)
via ddc5063c167ea3c253262c79c177d72c6aab68f9 (commit)
via a0e2e16878c2aae375920f8fef8efe07bcd6ac3d (commit)
via 37644bfa936505cbfa9ab9cc20842ccaea89e036 (commit)
via 83e6416bca8d0d4a2c0ab804e9789610acd40426 (commit)
via f6558d9cecae6653e589039359465f796cca7d9a (commit)
via bf22cff3ea931abfe431856b015390600f969770 (commit)
via 149afc688a53839e57ca541dfa1f84c946bb6399 (commit)
via d6c09608cd6a1c29fa2befd1b9769350f3bdee50 (commit)
via 64b7a309c5d44ea1cefe84888e638dcdd6fa7ec4 (commit)
via 26ff83cf87b58247646894bd252de4ed74b391f8 (commit)
via da7ae7951c692a60b6137ebaf6f33232a9bd63be (commit)
via 3c5abbc34110b8f4393d011a2d6eb8484131ca24 (commit)
via baf4d59407c1663b29498c533b54e75bf648567b (commit)
via d7258412392f005e297d3a02670740e14057790f (commit)
via 74bb5c01d651d1f35f863d53671e55d9686cd079 (commit)
via 1701e786eaaf25b8b2fa3484691b9a06e6130658 (commit)
via 406ae12e31ac60ccbecc67dc1314dd88491ca9cd (commit)
via 89e3dd6c30edc2ffa1e52e8ed162c1085c6d6c9b (commit)
via 8fb9a4571d3db8675ec12ba5ee1e2f2c3cefbeec (commit)
via 242a98cd21adcb126305c9e2f0522564b702af3e (commit)
via 5ffa296798f892c6ba4946bd8181036dfddf29c9 (commit)
via 142209161fc5a383a8f34a7fd73bf6a8ecf349f3 (commit)
via e759841c08eb97bf7c8f7cd3197fe7758cd4cba6 (commit)
via acb4ecaa0111a428b2c443e0db937caa09696923 (commit)
via bc1a8e2a4af543d04e8df70a92a5a7a3aeebf669 (commit)
via 7df397d3d916e7018981b9fcf8062f992b4cec49 (commit)
via 57c6012f8662d8f40d42fe145a5ec55bbd1b0f73 (commit)
via 6b6b475dcfe77dbf3d37b4f6e4fee3539346f359 (commit)
via 3ed7221bf7832f207a125e6364ece1826d369c37 (commit)
via d761cc98490546da3dd048a5b201d2edb020d33b (commit)
via f97e508567a07e4f2680843ec8265295bae605fb (commit)
via 1654b964bccd03ab286c9fdc687670fd9e6ba6e4 (commit)
via e883871de23f64633a5b0a99e7ac372fe90ca15b (commit)
via d01c33c90ed9197e8cf29db15566e3c35a43fa77 (commit)
via f78aa2f81b9d974bedf8f7cc0dae7bbebdff15c8 (commit)
via e25ea71a5b288058288b70a2f23f757fe89bb0c8 (commit)
via f3fbc5d6dee7ccc85c6f8c55a9e7508a82000088 (commit)
via 2c3e6f6115c5879962fd726d2ce18567210bf947 (commit)
via 877447a9e7c8d4dce5054be9c16c1643f532a105 (commit)
via a0d1dc8a019c13cfa0db1192a700bcc9122f8606 (commit)
via d2f0f42570d9b2aebf55c96e60e6db6b52a79bfb (commit)
via 0c4d0788abf2364d0f05cac675014849ee66e423 (commit)
via 123559545f6244cde45f370dba0902869c1af49b (commit)
via cfddb3fa9a09ee3808f29594b195ef1603c1815a (commit)
via 643b9b703cd75e75dac532713b2516115f6336f9 (commit)
via 4c96df7d77a775aae7d3355d6097bee827f97a58 (commit)
via 12e29ee1ddfa3a16e101e92503b0bc8d14120dd4 (commit)
via 66564a67cf3fd8b282d1222aaec8b02ae97611fb (commit)
via 17c577ace7fcaae08401233cc9debde2d574b756 (commit)
via 5bd734dd7395a2f6c87546b8e7159b02544405f9 (commit)
via 35f4e6a870b517b964f68027d79f6cb17b5678a6 (commit)
via 1da72eea266fdee3603204423ab1d9e68ff05f79 (commit)
via e2769ff6700665bb054b7a8e3f8db67712b92da1 (commit)
via 275560b2a380a5f34041fd4569a38791f25aa195 (commit)
via 5e096d9ceb637a785d4537555799602a3de2b3dc (commit)
via 4b00b5c6a4876f3470b53252bad7a1e6f91899fc (commit)
via 9cd587f5533456e7b26601e27e65744272e2e783 (commit)
via 9406ace82b12780da84b2553cb74f88101978ea2 (commit)
via 78d58d73b4098ec56b6545abd9f9719563d0d587 (commit)
via d784fd71b56cb8f57d5b9fcd784094e004bf7c6a (commit)
via 34d9c258dac686f4baa2e7f0d6f25f7e7ca5aac6 (commit)
via 8faf23de0b534a19555691e8ba111dcde8f02af3 (commit)
via 4ad18969546c16bd78206799de642af6eb2293ea (commit)
via 5619635063741e1c8c9cf53a8746dd29be0cda79 (commit)
via d72a9ec825ef2a8723510f62292cf2adfd4a2a6c (commit)
via 47499404268aa4f064fe078710ccf7a139061753 (commit)
via 2ac99a505e462d0bbf24c974d5dcdd71cd04dcf3 (commit)
via dbc9a61819ea9a6b61bb29a2765b319ac974a775 (commit)
via e1ae7b43f1a7218831083921b00d2a5bb81f05a0 (commit)
via c52ff76180d04c38799e27ca963cb19c6715f939 (commit)
via f2a74f4f878498323877f971ac014355c85187ad (commit)
via b5c0a182efbf5e8db1ec35ba1883c4465ef7e678 (commit)
via b1820fcca6ab47969da6bf60c380f23a452a78b0 (commit)
via 72a83a110ddc461d345c52003618c2fb040966d2 (commit)
via 849e7d5be78e1d6264141463562d1da68e5076d8 (commit)
via c3226ebac9edea44bade7f9c8bef0c6f6bad62f9 (commit)
via 3fd3a927e22a0c817790433d7473a9cddb6f131e (commit)
via 7e00948bdba84b5ced1cd23720009b2c8cd629af (commit)
via 5763e720d88ff2dcc7066cd61ca0c2836566e93f (commit)
via 2b4d32dc4b03c4feb3be94ce21d9e2e6d02f4b44 (commit)
via 89ca0c2e296940aa5d0b4bc8c3c30d4227a96ff2 (commit)
via 2d0c192355ae836ffe047cacfc7c25e146f1fccb (commit)
via 593154505a8f8c99e8f19b0aae352cd4d1d7e173 (commit)
via 2bd5fd1642ef190fa593c2cc608970fe29771d54 (commit)
via 6084f72aafc8c7f70ef972e950dcc73777594c32 (commit)
via da484b88d577135167d36fd1c441e183baedb055 (commit)
via 6a1c070ea6870cc82eba2c5a755f00d35206b87c (commit)
via a57385c57835a2aa312a731fa28d64e054e0f706 (commit)
via 4c63498a4ce04e36398d332cc793dd43dd48fb30 (commit)
via 98dcd2497613cd9d79d67ce7df669e36d6cfd1e6 (commit)
via 10374e5e896cb46f1cc0d00449b4e1f85029b74c (commit)
via 0b8af757b67ee795deef9523f1fd72ca28721e22 (commit)
via e3ffa8c31fca71eba3c625f1e3ec26fdf8095f0f (commit)
via 802369fbe2c7aadc6a9de3c5c5c4f60b81203d5d (commit)
via c7ed95f449882f8a3bba47ed71416f034e345042 (commit)
via 2ea80c28a560ede4ad318aa7ccbfd5f555264465 (commit)
via 63df0f7ef12844b9b86cc293299671da772fcf84 (commit)
via 4f621a168682f96d0c98f7818493397766b13fd2 (commit)
via 874bac80bbfbf0a5af51bfa02cad2c233aac7273 (commit)
via 1867652e5424e867cea542a9311ccdc5fa9ec835 (commit)
via 78b4b56857145367256ece69b78c89146e1a423d (commit)
via 39066bd0ac3839d9c247dd1b769906c7100a10e0 (commit)
via 30ad11feb9c2557db22d6a1eeedaa791a9b9f269 (commit)
via 84ea17b5f3dd06c47470a50e35e334236ceb2210 (commit)
via 5ef65fd7846cb407e2327f494f85c52e1d5d2201 (commit)
via 441cf2ea924c13ed5002012aadd128f71d9e9c9d (commit)
via e3cab998b48ab293a9962faf9779d70ca339c65d (commit)
via 2f921b58324c76fb4d45df60842d7074d8407add (commit)
via 1236eef264f8022de4adc74750760a36dc420ab6 (commit)
via e4f49b120abfa5a46280de59b64384449c8a63f6 (commit)
via bbad2cb655ba444e088cbbfc5e841214d15054dd (commit)
via aec2e0265cabe74730d8950aae21be31f632337f (commit)
via 510003b63f3abd3039b1d154cab24fc13be0c581 (commit)
via 5aecaf1e68ea4ff4596850d5b4b4e02ebb50286c (commit)
via d67b1ea1cbe30afb4894634f06ca25916b03cbd7 (commit)
via dad5f79991eb04b5973c670c8566844a014a3a85 (commit)
via 109dc801ec27fc4f850f6927617acd6da5e6a544 (commit)
via 6fe09c7080dc31a0215121e6afe3e27fbcb140d0 (commit)
via c588b442196efff34e5afe1c1327db765bb210b4 (commit)
via 71b51fdbd657264c6b1942d90efd0d3ab2646e4d (commit)
via f1b004bf7d2453bda1a8076270f5c56b7ad90f56 (commit)
via 7190ed6020e061ccb204fd7b6e7f16bd22fdca82 (commit)
via 44121f662411dbc17bf2e196911c655ee6969d59 (commit)
via 5050408bf1de9d5ea4e11467621fd687ea899ac3 (commit)
via c3f5d75c3234ea2b03c7eba9eb18b550efcc1605 (commit)
via 3592ebea1a5beb390a520c09747d3699867af9de (commit)
via d4d90eceeba902874252fd7c1b9384fc5b1605d4 (commit)
via bff13595230dbd41692a98482ff3323078ae7d03 (commit)
via 8072dba146b213a3f12a394596537e73f1b9339c (commit)
via 16675b7f96b7a61ac64180b1824ec04984b72b3b (commit)
via 0acd0eae51089f01b814c5473afbcfe8b0f26d47 (commit)
via 17ac87ce8374ee635062ee0d9c4176231d3a87bc (commit)
via b42e15ffd5163effe3b2cb910685a5956a00defc (commit)
via cb271f7d4c1957950f4d1197b4973722705fb5b3 (commit)
via 2ecb2bfdde598f77dbfdb94c04ade56f65f5a434 (commit)
via 30c3a6e4c3abe5e3202344591768aa4666b66f76 (commit)
via c61b6934dd7b1c871001c049eddf4a4e57b604e8 (commit)
via d4c230386653db49d8e8116b603efcce4423df70 (commit)
via 516cb2a264448421bff692f47f61e8cf2a74237e (commit)
via 4ce7d734e8b8b243fc232c93d34690f9fdf67711 (commit)
via 16c6605da16836606178780562551d73581203eb (commit)
via 58fef61e7350d64049a04c9a4b21c86ce35c35de (commit)
via 34df32ab85a914c2bb7430e40716be7cbfa0a6bb (commit)
via 6eeb71538ea29b639ac7549831cd1aa4da32722a (commit)
via c7512cf11cc9c4de2be8381a5fefe2b2d5f4bf5f (commit)
via a0ea2d893df6d5ae57e941be5cad8e078de1c831 (commit)
via c99414fc1f0f04001f8bf76c34846b8b59cc5702 (commit)
via fe17b3d2d924018750386c5ee74f12ca4b054136 (commit)
via 20b43b3fd3d392c4f12a963a4e46c264e7ed5163 (commit)
via 1629d2f89a8c5f758413b87b94740aaaa5f21144 (commit)
via 5c6729b4d26fe6b3e64f9301efe6b0fa7d5c8487 (commit)
via f89d4aca9c9423fe7e0428900cedca0ab60ec70c (commit)
via 6db9b74210197f792a52038abbd10e946e99e49d (commit)
via 93417dfa28606d48dc3e37e05d5a3aeaa1488870 (commit)
via e95f358e3bbe850e5c99f56f8521abe1f5a6210b (commit)
via 45b2e6ec2340d698db506dff8c3df947b6e29452 (commit)
via acd3b7f9f1b7f52880ab80e4a4fa42e793017a36 (commit)
via c4737c2e3281f6d5ebece9a85d87c5ed366f9af1 (commit)
via 44d8ff2b0f560a086b8bab254c20cd21f4c54788 (commit)
via f0b3127ca3c99ae218dba43a6e3f7430081c412b (commit)
via fdab2ec2791e6b964055cbb5cde0de3391efe0a9 (commit)
via 6caa4cbe32e68bf3296ce8cbcf218509e58b550c (commit)
via bc2a8f418e3b7bd9c2abd83e441a45ad59631f1f (commit)
via b676c84dbd793808d690cc151e244b5c8bdb779d (commit)
via cba027c249bf692fa07f7ffa290f8291b254242e (commit)
via 16d1c1cbe5fe7de125084948280c46175ab6a712 (commit)
via d17ed0d90d100acb4d270613d12988f909cc1c3f (commit)
via 7bc4ffb5df96c2acaac80f3e7c7c8e27faccd627 (commit)
via f7dd4ca760de5f2dfa962749dddf8a99587f2257 (commit)
via 033959726bf32ab59a52201e0696f269c0810609 (commit)
via f997295da3e6377899ca31c05f92819eab7d3ea7 (commit)
via 705071c6b178dd5df710c69cc21d24b662eebe42 (commit)
via 569ce5498553b87dc7af343b2efb4da8d3ecdb4f (commit)
via a00fd94a46e92a233f4e613660e9962918f28207 (commit)
via a29ff33baf366825c0fbe721d30b12b5b96a64e1 (commit)
via 7bb6003219e5a3a26a5427dd81019b517a18804f (commit)
via 7e0f0124743d241354afa888f3bfe23355679bc9 (commit)
via c89625db93f63f29a57451e692ae33ab24d49291 (commit)
via fe19c7a6acf984f20875bbc1c3735e9796fc98ca (commit)
via 6a17cfaafcdab82c9909eccff56968913b36a631 (commit)
via 8867e1694fd6ca972581d56c725859fdf87b0e10 (commit)
via 36fe4c35ee6b86d11db92f047120b3e38ff64fa9 (commit)
via 02fd1f3308f3b783c110d930a1f491ff08ae3d71 (commit)
via 0750eb51143bb3f440d562fed80ef930bf3bfe85 (commit)
via 582fd00c7b493010f93696f0bfcc55412ab40c07 (commit)
via d6848ea77d9e0fed546a8286f8c62fe32be58ace (commit)
via 537721089af4466962e1520a571e4478d040edb3 (commit)
via 8f007923dd4ff89652479587d96e22bc63dbf822 (commit)
via edf1df5429e0b819ee8fdd9f73ec95190fcae379 (commit)
via 734f7621b8b4e6d8af0746ed9cce927a80667470 (commit)
via 7dcf27a7916db8172db015439ded5b914da25bc1 (commit)
via d57ea2c2c086b711c6272dfbbfd3244a29287d8d (commit)
via 4bbaeeb7bb266e61b9304623cd8d93fd390c5961 (commit)
via 6e35202e203951cb0a864e75fb196bb24fc5f979 (commit)
via bc256454b72a898ec4c63985f29087d1f9b39296 (commit)
via 52f9d9f2ad3225e44f9fd55722b49231f060e2f3 (commit)
via 386ab8df8e2f0ab4938edaa4a82779ef2c794a9c (commit)
via e796cee3f5c0dba5b66dcaa521bc5c533abccb56 (commit)
via e53b2cebf21b5e793642cbc6b12334407756734d (commit)
via 5af082709774bd19e7b6836eccc6bfb162a87185 (commit)
via 03cd8c2d47eb5ad3d7242ac1a0c71adc1e16ad89 (commit)
via 6688e9676776addd3e8e13045eafd03b1e6767e3 (commit)
via 0b2e0bd5d0b05e5f498ba9ea51af8fa7bb8ac788 (commit)
via dbbd0ab9038349e6f085f575fc0fdfd4791710b3 (commit)
via 70aeeb918aa721ad90ed8e1b433a55c8ecf2cb83 (commit)
via 78bc1a58bc14c3f3af1ba88cb496c09bbd3f5365 (commit)
via b5b2c2c2fefcd305362fbaa748c4eaf4d467a721 (commit)
via f509e1e8b96cd1b1c815d8007ace1d19021db0e2 (commit)
via 61d005b739f34b9471244428769a156d57358c9c (commit)
via a73f32c3e35093e5eaf9820954e56fdc1b327e8b (commit)
via e6bfff4372a2bf5fe8dbd1de49ffb6cf366b39e0 (commit)
via 7420787817c4949276d7947202b49d78eba37c13 (commit)
via d03b94113615c1751b8a074bbd4064d915c70ff9 (commit)
via c1323f22c7ad93b975eb8b6a251b893bc88f240f (commit)
via 654dcb897e49908a958dae55cf29793412c4b390 (commit)
via 660f70f4c4c169214da8ac670fbecfb37ce3d2d5 (commit)
via c8d100bb03e0fe0501037b914fe3638afd593ee4 (commit)
via 955f8d8e288bbba32732a661d1db6b2c471ae91e (commit)
via 070505f16f59b1ddbc6af670a04a3610253f50fc (commit)
via 0fc6c7762c2174a5fb3b978891b0adf8930aa184 (commit)
via 9a1814832b7e3b046d8edd5d7691a7a3aae427f6 (commit)
via 0b2f9ef8f3f91cd6e202dc8bdfe8e1156ae6c01a (commit)
via aafcaeb751399914356b93658be3dbbcd94bf6b0 (commit)
via 3084b9a1f961a61de137366594b0836654ab0691 (commit)
This update added new revisions after undoing existing revisions. That is
to say, the old revision is not a strict subset of the new revision. This
situation occurs when you --force push a change and generate a repository
containing something like this:
* -- * -- B -- O -- O -- O (1353ed59ef85148539e09120a4a945b553446f6d)
\
N -- N -- N (b5866ed29f1562f6f5bb608ce1040c98ca887471)
When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit b5866ed29f1562f6f5bb608ce1040c98ca887471
Author: Caleb Case <ccase at tresys.com>
Date: Tue Jan 26 16:26:31 2010 -0500
libsemanage: semanage_get_modules_names should get CIL path
semanage_get_modules_names should be returning the path for the CIL
instead of the HLL path since it is the CIL that is used during commit.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 4932ecdbfa1335db1d2e1e0c9bb83c630c9b15f1
Author: Caleb Case <ccase at tresys.com>
Date: Tue Jan 26 16:24:18 2010 -0500
libsemanage: fix semanage_module_get_module_info export in map
This patch fixes libsemanage.map which has the wrong export line for
semanage_module_get_module_info.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 9b00049b1e4a0a7a15664c1eee3891c1eb1d1da8
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:26:00 2009 -0500
semanage store migration script
We created a migration script to ease the burden of transition from the
old libsemanage store layout to the new. The script will detect all the
stores in /etc/selinux using the old layout and convert them to the new
layout in /var/lib/selinux. It also allows you to specify the default
priority to use with -p and store to operate on with -s. After migration
the script by default will leave the old store unchanged, but can be
told to remove the old modules directory with -c.
Examples:
# Migrate all stores to the new layout.
migrate.py
Migrating from /etc/selinux/targeted/modules/active to /var/lib/selinux/targeted/active
Attempting to rebuild policy from /var/lib/selinux
# Migrate only the targeted store.
migrate.py -s targeted
Migrating from /etc/selinux/targeted/modules/active to /var/lib/selinux/targeted/active
Attempting to rebuild policy from /var/lib/selinux
# Migrate all, but install to priority 150.
migrate.py -p 150
Migrating from /etc/selinux/targeted/modules/active to /var/lib/selinux/targeted/active
Attempting to rebuild policy from /var/lib/selinux
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 62faa5e6f61488ee53ad3396c9dfba6bf5d79622
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:59 2009 -0500
semodule: add priority, enabled, and extended listing
This updates the semodule tool with the ability to set the priority for
commands, to enable/disable modules, and extended module listing options
for displaying extra module information (e.g., priority, enabled status,
and language extension).
[semodule priority]
-p --priority set the priority for following operations
Notes:
* This sets the priority for the following operations.
* It can be used any number of times with its effect continuing until
the next priority is specified.
* The default priority is used if no priority has yet been specified.
Impact on current operations:
* Install module
* Without priority - Install at default priority.
* With priority - Install at specified priority.
* New warning when overriding (issued by libsemanage).
* Upgrade module
* Without priority - Upgrade at default priority (current upgrade
semantics apply).
* With priority - Upgrade at specified priority (current upgrade
semantics apply).
* New warning when overriding (issued by libsemanage).
* Remove module
* Without priority - Remove a module at the default if exists.
* With priority - Remove at that priority.
* New info messages (issued by libsemanage):
* If no modules exist at the given priority but do exist at other
priorities, give an info message listing the modules and priority.
* If a new module at a lower priority will become active print a
message.
* If the last module with this name is being removed print a
message.
* Base
* The name of base module on install is fixed to "_base" (performed by
libsemanage).
* Without priority - Install at default priority.
* With priority - Install at specified priority.
* New warning when overriding (issued by libsemanage).
* List modules
* See listing changes below.
Examples:
# install a module at default - this will install the module at priority 400
semodule -i foo.pp
# Install a module at a specific priority
semodule -p 500 -i foo.pp
[semodule enable/disable]
Add enable/disable status:
-e --enable enable the module (at all priorities)
-d --disable disable the module (at all priorities)
Notes:
* Base modules are always enabled and cannot have their enabled/disabled
status changed.
* New error when disabling a base module (from libsemanage).
* New warning when enabling a base module (from libsemanage).
Impact on current operations:
* Install module
* If a module with that name is already installed, then the enabled
status will remain the same after installing the new module.
* New warning when installing a module which will be disabled by
existing enabled status (from libsemanage).
* Upgrade module
* If a module with that name is already installed, then the enabled
status will remain the same after installing the new module.
* New warning when installing a module which will be disabled by
existing enabled status (from libsemanage).
* Remove module
* When the last module with a given name is removed (no more exist at
other priorities) then the enabled status is forgotten.
* Base
* Base modules are always installed enabled and remain so (can't be
disabled).
* List modules
* See listing changes below.
Examples:
# enable module
semodule -e foo
# disable module
semodule -d foo
[semodule list]
-l --list list modules as if by -lstandard
-lstandard --list=standard list name and version of highest priority,
enabled, non-base modules sorted alphabetical
by name
-lfull --list=full list all fields of all modules columnated
sorted high priority to low, within priority
alphabetical by name
Impact on current operations:
* List modules
* Default listing stays the same.
* New long options for 'standard' and 'full'.
Examples:
# list modules using standard method
semodule -l
semodule -lstandard
semodule --list=standard
alsa 1.7.1
apm 1.9.1
apt 1.5.2
authlogin 2.0.0
avahi 1.10.3
bluetooth 3.1.3
...
# list modules using full method
semodule -lfull
semodule --list=full
600 alsa 1.7.1 disabled pp
400 _base 1.0.0 pp
400 alsa 1.7.1 disabled pp
400 apm 1.9.1 pp
400 apt 1.5.2 pp
400 authlogin 2.0.0 pp
...
100 alsa 1.7.1 disabled pp
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 4a25d564ab61da7fa00f8136cd91d6a08938af2d
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:58 2009 -0500
libsemanage: new private api for unstable functions
Rather than export the new functions as part of the stable API we
chose to create a private API. The private API is unstable, may change
in the future, and is mainly intended to be used by upstream tools like
semodule. Keeping these new APIs private for a time will allow them to
both get tested through upstream tools and be changed as necessary
without causing the same change burdens as they would if they were in
the public API.
The private API is found in the includes:
include/semanage/private/handle.h
* Exports the handle get/set default priority functions.
include/semanage/private/module.h
* Exports the module info management functions.
* Exports the get/set enabled status functions.
* Exports the module key management functions.
* Exports the module install, upgrade, remove info/key functions.
include/semanage/private/semanage.h
* Includes the other private headers.
This patch includes the modifications to the map file for exporting the
necessary functions.
Internal prototypes were moved to the private API and the private
headers included as necessary.
Examples:
/* changing the default priority for a distro install */
semanage_set_default_priority(sh, 100);
/* creating module meta data */
semanage_module_info_t *modinfo = NULL;
semanage_module_info_create(sh, &modinfo);
/* filling in that data */
semanage_module_info_set_priority(
sh,
modinfo,
semanage_get_default_priority(sh));
semanage_module_info_set_name(
sh,
modinfo,
"mymodule");
semanage_module_info_set_version(
sh,
modinfo,
"0.1.2");
semanage_module_info_set_lang_ext(
sh,
modinfo,
"pp");
semanage_module_info_set_enabled(
sh,
modinfo,
-1); /* Sets enabled to default:
* If the module was already enabled/disabled
* then it will remain so after install.
* If it wasn't, then it will be enabled.
*/
/* install the module */
semanage_module_install_info(sh, modinfo, data, data_len);
/* cleanup modinfo */
semanage_module_info_destroy(sh, modinfo);
/* create a key for retrieving a module's meta data */
semanage_module_key_t *modkey = NULL;
semanage_module_key_create(sh, &modkey);
/* Only set the module name, this will find the highest
* priority module of that name.
*/
semanage_module_key_set_name(sh, modkey, "mymodule");
/* get the newly installed module */
semanage_module_get_module_info(sh, modkey, &modinfo);
/* get the priority of the module found */
uint16_t priority = 0;
semanage_module_info_get_priority(sh, modinfo, &priority);
/* set the priority in the key to the one found */
semanage_module_key_set_priority(sh, modkey, priority);
/* remove the highest priority module with the name "mymodule" */
semanage_module_remove_key(sh, modkey);
/* print all the modules installed */
semanage_module_info_t *modinfos = NULL;
int modinfos_len = 0;
semanage_module_list_all(sh, &modinfos, &modinfos_len);
char *name = NULL;
int i = 0;
for (i = 0; i < modinfos_len; i++) {
semanage_module_info_get_priority(
sh,
semanage_module_list_nth(modinfos, i),
&priority);
semanage_module_info_get_name(
sh,
semanage_module_list_nth(modinfos, i),
&name);
printf("%d\t%s\n", priority, name);
}
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 2d7370de9262b68d2e5f067fa5d01ca4a2139bfb
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:57 2009 -0500
libsemanage: installing/upgrading/removing modules via info and key
These functions install/upgrade/remove modules based on the module
info/key. The motivation for these interfaces is to provide the
additional information about a module (version, language, and enabled
status) at install time and also to separate the meta-data in
preparation for supporting source policies.
This patch combines the implementations of all the
install/upgrade/remove functions to use the
semanage_direct_install_info, semanage_direct_upgrade_info, and
semanage_direct_remove_key functions. The motivation here is to reduce
the amount of duplicate installation code (for example,
semanage_direct_install and semanage_direct_install_file have separate
but similar implementations).
With this patch the transition from the old store layout to the new one
is finished. This is accomplished mostly through the modification of
install functions and semanage_get_modules_names.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 2bd213c3f343a946101bd86fc86dd0a0659297a6
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:56 2009 -0500
libsemanage: provide function to get new base module path
The base module is being moved in with the other modules so that it can
benefit from the priority framework. This patch provides a utility
function for getting the highest priority base module path.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit b5a92ab6a0422242a44ba38769f21ab752d3ec8a
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:55 2009 -0500
libsemanage: get/set module info and enabled status
This provides the functions for enabling/disabling modules via a
semanage_module_key_t and getting/setting module info.
Enabled/disabled status is indicated by the presence of an empty file in
the disabled directory:
/var/lib/selinux/<policy type>/disabled/<module name>
The presence of a file there indicates that the module is disabled at
all priorities. Enable/disabling of modules is done across all
priorities simultaneously to avoid confusion that would likely arise
from per priority settings.
semanage_module_get_module_info gathers up the on disk information about
a module indicated by the module key and puts the information into
module info. In order to facilitate an easy mechanism for getting the
highest priority module of a given name, the key's priority value may
be 0 and the highest priority module with the given name will be located.
semanage_direct_set_module_info is a helper function that writes module
info to disk. The unused attribute is used to suppress warnings for
compilation and is removed in the module install patch later in the
series.
semanage_module_list_all behaves similar to semanage_module_list except
it returns all modules at all priorities. semanage_module_list will only
include the highest priority, enabled, non-base modules (this is its
current behavior). See the module install patch later in the series for
the modified semanage_module_list.
Adds a helper function for creating a directory if it doesn't already
exist (used to automatically create the disabled, priority, and module
dirs).
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit f0ebdbbb064d1b37ca0f0742d9a92c228c52570e
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:54 2009 -0500
libsemanage: augment semanage_module_info_t and provide semanage_module_key_t
Adds priority, language ext, and enabled fields to
semanage_module_info_t.
Adds get/set functions for all semanage_module_info_t/key_t fields. This
is necessary so that semanage_module_info_t/key_t can be used in the
specifing meta data on source policies.
Adds create, destroy, and init functions for semanage_module_info_t and
semanage_module_key_t. Create initializes and allocates, destroy
deallocates fields (but not struct), and init initializes fields.
Provide several utility functions for converting a string priority to a
uint16_t and validating fields.
Adds semanage_module_get_path for getting module specific file paths.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 1a2f6c92f6ba8c608e3a2ce00786262ca8343992
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:53 2009 -0500
libsemanage: add default priority to semanage_handle_t
For backwards compatiblity purposes we need to provide a default
priority that the current set of module install/upgrade/remove functions
can use.
The default priority is 400.
Adds semanage_module_validate_priority so that it can be used to verify
the given priority. See next patch for other validation functions.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 7e1ce220eca507c17742c706707525057e7b6bf0
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:52 2009 -0500
libsemanage: update unit tests for move to /var/lib/selinux
This updates the unit tests to accommodate the change in layout (no top
level 'modules' directory).
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit c1671e90caec3af9191abc257c7d6451d0df3d5b
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:51 2009 -0500
libsemanage: split final files into /var/lib/selinux/tmp
This patch moves the final files from inside
/var/lib/selinux/<store>/[active|previous|tmp] to
/var/lib/selinux/tmp/<store>. The move is done to facilitate using
source control management on the /var/lib/selinux/<store> directory. If
these files remain in /var/lib/selinux/<store> they will pose a size
problem if an SCM like git is used as we'd be storing lots of binary
diffs. We are suggesting making this change now, rather than later when
source policy, SCM, and CIL[1] support are available, to ease the
migration burden.
These are the files that have been moved:
/var/lib/selinux/<store>/active/... /var/lib/selinux/tmp/<store>/...
file_contexts contexts/files/file_contexts
file_contexts.homedirs contexts/files/file_contexts.homedirs
file_contexts.local contexts/files/file_contexts.local
netfilter_contexts contexts/netfilter_contexts
policy.kern policy/policy.<policyversion>
seusers.final seusers
The layout of these files in /var/lib/selinux/tmp/<store> is designed to
mirror their locations in /etc/selinux/<store>. This should help clarify
the relationship between these final files and the files installed in
etc.
One consequence of this move is that reverting to the previous policy
version requires a policy rebuild. Currently you can revert without
rebuilding.
[1] CIL RFC: http://marc.info/?l=selinux&m=124759244409438&w=2
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 9e514f52914e2a4f73077846942905eedc0e7c67
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:50 2009 -0500
libsemanage: move the module store to /var/lib/selinux
This patch moves the module store from /etc/selinux/<store>/modules to
/var/lib/selinux/<store>.
This move will allow for the use of a read-only /etc/selinux. Currently
that is not possible with semanage because of the lock files.
A consequence of this move is that packagers of libsemanage should
create the /var/lib/selinux directory.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 47a4071c02ad1da550bcc13ecbba6b275952995d
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:49 2009 -0500
semanage: move permissive module creation to /tmp
semanage currently uses /var/lib/selinux/tmp to create permissive
modules. However, with the move to /var, the same tmp directory is used
for building policy binaries, causing a conflict. This patch creates a
random temporary directory in /tmp and moves permissive module creation
to that directory, avoiding the directory conflict.
This patch also imports shutil for rmtree to easily delete all created
temporary files.
Signed-off-by: Chad Sellers <csellers at tresys.com>
commit 06619ef96e04ad9930e9970aa925e59d998fb3f6
Author: Caleb Case <ccase at tresys.com>
Date: Wed Dec 23 18:25:48 2009 -0500
libsemanage: fix typo in tests makefile -o -> -O
Fixed typo in the tests Makefile where '-o' should have been '-O'.
Signed-off-by: Chad Sellers <csellers at tresys.com>
-----------------------------------------------------------------------
Summary of changes:
.gitignore | 4 +
Makefile | 20 +-
checkpolicy/.gitignore | 5 +
checkpolicy/ChangeLog | 48 +
checkpolicy/VERSION | 2 +-
checkpolicy/checkmodule.8 | 7 +-
checkpolicy/checkmodule.c | 4 +-
checkpolicy/module_compiler.c | 79 +-
checkpolicy/module_compiler.h | 5 +-
checkpolicy/policy_define.c | 431 +-
checkpolicy/policy_define.h | 7 +-
checkpolicy/policy_parse.y | 53 +-
checkpolicy/policy_scan.l | 6 +
checkpolicy/test/.gitignore | 2 +
checkpolicy/test/Makefile | 2 +-
checkpolicy/test/dismod.c | 101 +-
checkpolicy/test/dispol.c | 37 +
libselinux/.gitignore | 20 -
libselinux/ChangeLog | 102 +
libselinux/VERSION | 2 +-
libselinux/include/Makefile | 4 +-
libselinux/include/selinux/avc.h | 40 +-
libselinux/include/selinux/label.h | 13 +
libselinux/include/selinux/selinux.h | 116 +-
libselinux/man/Makefile | 4 +-
libselinux/man/man3/avc_netlink_loop.3 | 11 +-
libselinux/man/man3/is_selinux_enabled.3 | 3 +-
libselinux/man/man3/security_compute_av.3 | 5 +
libselinux/man/man3/selabel_open.3 | 10 +-
libselinux/man/man3/selinux_binary_policy_path.3 | 4 +
...{checkPasswdAccess.3 => selinux_check_access.3} | 0
libselinux/man/man3/selinux_colors_path.3 | 36 +
libselinux/man/man3/selinux_file_context_cmp.3 | 74 +-
libselinux/man/man3/selinux_file_context_verify.3 | 99 +-
libselinux/man/man3/selinux_raw_context_to_color.3 | 124 +
libselinux/man/man3/selinux_status_close.3 | 1 +
libselinux/man/man3/selinux_status_deny_unknown.3 | 1 +
libselinux/man/man3/selinux_status_getenforce.3 | 1 +
libselinux/man/man3/selinux_status_open.3 | 96 +
libselinux/man/man3/selinux_status_policyload.3 | 1 +
libselinux/man/man3/selinux_status_updated.3 | 1 +
libselinux/man/man5/secolor.conf.5 | 181 +
libselinux/man/man5/selabel_db.5 | 93 +
libselinux/man/man8/selinux.8 | 6 +-
libselinux/man/man8/selinuxexeccon.8 | 24 +
libselinux/src/.gitignore | 3 +
libselinux/src/Makefile | 67 +-
libselinux/src/audit2why.c | 52 +-
libselinux/src/avc.c | 31 +-
libselinux/src/avc_internal.c | 20 +-
libselinux/src/avc_sidtab.c | 4 +-
libselinux/src/canonicalize_context.c | 6 +-
libselinux/src/checkAccess.c | 32 +
libselinux/src/check_context.c | 6 +-
libselinux/src/compute_av.c | 20 +-
libselinux/src/compute_create.c | 12 +-
libselinux/src/compute_member.c | 12 +-
libselinux/src/compute_relabel.c | 12 +-
libselinux/src/compute_user.c | 6 +-
libselinux/src/context.c | 2 +
libselinux/src/enabled.c | 33 -
libselinux/src/file_path_suffixes.h | 2 +
libselinux/src/fsetfilecon.c | 6 +-
libselinux/src/get_context_list.c | 14 +-
libselinux/src/init.c | 91 +-
libselinux/src/is_customizable_type.c | 2 +-
libselinux/src/label.c | 130 +-
libselinux/src/label_db.c | 338 +
libselinux/src/label_file.c | 105 +-
libselinux/src/label_internal.h | 15 +
libselinux/src/libselinux.pc.in | 2 +-
libselinux/src/load_policy.c | 21 +-
libselinux/src/lsetfilecon.c | 6 +-
libselinux/src/mapping.c | 41 +-
libselinux/src/matchpathcon.c | 117 +-
libselinux/src/policy.h | 6 +-
libselinux/src/procattr.c | 8 +-
libselinux/src/selinux.py | 2300 ----
libselinux/src/selinux_check_securetty_context.c | 2 +-
libselinux/src/selinux_config.c | 16 +-
libselinux/src/selinux_internal.h | 21 +
libselinux/src/selinuxswig_python.i | 41 +-
libselinux/src/selinuxswig_python_exception.i | 855 --
libselinux/src/selinuxswig_wrap.c |14103 --------------------
libselinux/src/sestatus.c | 340 +
libselinux/src/setfilecon.c | 6 +-
libselinux/src/setrans_client.c | 51 +-
libselinux/src/seusers.c | 28 +-
libselinux/src/stringrep.c | 4 +-
libselinux/utils/.gitignore | 21 +
libselinux/utils/matchpathcon.c | 41 +-
libselinux/utils/selinuxexeccon.c | 60 +
libsemanage/ChangeLog | 42 +
libsemanage/VERSION | 2 +-
libsemanage/include/Makefile | 4 +-
libsemanage/man/Makefile | 7 +-
libsemanage/man/man5/semanage.conf.5 | 93 +
libsemanage/src/.gitignore | 3 +
libsemanage/src/Makefile | 56 +-
libsemanage/src/conf-parse.y | 15 +-
libsemanage/src/conf-scan.l | 1 +
libsemanage/src/database.c | 22 +-
libsemanage/src/database_llist.c | 7 +-
libsemanage/src/database_policydb.c | 18 +-
libsemanage/src/debug.c | 2 +-
libsemanage/src/direct_api.c | 21 +-
libsemanage/src/exception.sh | 14 +
libsemanage/src/genhomedircon.c | 53 +-
libsemanage/src/libsemanage.pc.in | 2 +-
libsemanage/src/semanage.py | 1095 --
libsemanage/src/semanage_conf.h | 1 +
libsemanage/src/semanage_store.c | 28 +-
libsemanage/src/semanage_store.h | 2 +-
libsemanage/src/semanageswig_python.i | 1 +
libsemanage/src/semanageswig_wrap.c |12858 ------------------
libsemanage/tests/test_semanage_store.c | 18 +-
libsepol/ChangeLog | 44 +
libsepol/VERSION | 2 +-
libsepol/include/Makefile | 4 +-
libsepol/include/sepol/policydb/ebitmap.h | 6 +
libsepol/include/sepol/policydb/expand.h | 2 +-
libsepol/include/sepol/policydb/policydb.h | 46 +-
libsepol/man/Makefile | 4 +-
libsepol/src/Makefile | 5 +-
libsepol/src/avrule_block.c | 1 +
libsepol/src/booleans.c | 2 +-
libsepol/src/debug.c | 2 +-
libsepol/src/ebitmap.c | 76 +
libsepol/src/expand.c | 314 +-
libsepol/src/interfaces.c | 4 +-
libsepol/src/libsepol.map | 1 +
libsepol/src/libsepol.pc.in | 2 +-
libsepol/src/link.c | 237 +-
libsepol/src/nodes.c | 2 +-
libsepol/src/policydb.c | 274 +-
libsepol/src/ports.c | 2 +-
libsepol/src/private.h | 3 +
libsepol/src/roles.c | 2 +-
libsepol/src/services.c | 2 -
libsepol/src/users.c | 8 +-
libsepol/src/write.c | 203 +-
libsepol/tests/test-expander.c | 6 +-
policycoreutils/.gitignore | 1 +
policycoreutils/ChangeLog | 162 +
policycoreutils/Makefile | 2 +-
policycoreutils/VERSION | 2 +-
policycoreutils/audit2allow/Makefile | 2 +-
policycoreutils/audit2allow/audit2allow | 54 +-
policycoreutils/audit2allow/audit2allow.1 | 62 +-
policycoreutils/audit2allow/sepolgen-ifgen | 61 +-
policycoreutils/audit2why/Makefile | 2 +-
policycoreutils/load_policy/Makefile | 2 +-
policycoreutils/mcstrans/COPYING | 340 +
policycoreutils/mcstrans/ChangeLog | 18 +
policycoreutils/mcstrans/Makefile | 16 +
policycoreutils/mcstrans/TODO | 11 +
policycoreutils/mcstrans/VERSION | 1 +
policycoreutils/mcstrans/man/Makefile | 12 +
policycoreutils/mcstrans/man/man8/mcs.8 | 30 +
policycoreutils/mcstrans/man/man8/mcstransd.8 | 25 +
policycoreutils/mcstrans/man/man8/setrans.conf.8 | 106 +
.../mcstrans/share/examples/default/README | 8 +
.../mcstrans/share/examples/default/default.test | 31 +
.../mcstrans/share/examples/default/setrans.conf | 52 +
.../mcstrans/share/examples/include/README | 9 +
.../mcstrans/share/examples/include/default.test | 31 +
.../mcstrans/share/examples/include/setrans.conf | 15 +
.../examples/include/setrans.d/include-example | 52 +
.../mcstrans/share/examples/nato/README | 12 +
.../mcstrans/share/examples/nato/nato.test | 7 +
.../mcstrans/share/examples/nato/setrans.conf | 23 +
.../share/examples/nato/setrans.d/constraints.conf | 10 +
.../share/examples/nato/setrans.d/eyes-only.conf | 748 ++
.../share/examples/nato/setrans.d/rel.conf | 751 ++
.../mcstrans/share/examples/non-mls-color/README | 8 +
.../share/examples/non-mls-color/non-mls.color | 3 +
.../share/examples/non-mls-color/secolor.conf | 13 +
.../mcstrans/share/examples/pipes/pipes.test | 6 +
.../mcstrans/share/examples/pipes/setrans.conf | 20 +
.../share/examples/pipes/setrans.d/pipes.conf | 11 +
.../share/examples/urcsts-via-include/README | 17 +
.../share/examples/urcsts-via-include/secolor.conf | 21 +
.../share/examples/urcsts-via-include/setrans.conf | 15 +
.../examples/urcsts-via-include/setrans.d/c.conf | 7 +
.../examples/urcsts-via-include/setrans.d/r.conf | 7 +
.../examples/urcsts-via-include/setrans.d/s.conf | 7 +
.../urcsts-via-include/setrans.d/system.conf | 6 +
.../examples/urcsts-via-include/setrans.d/ts.conf | 8 +
.../examples/urcsts-via-include/setrans.d/u.conf | 7 +
.../share/examples/urcsts-via-include/urcsts.color | 21 +
.../share/examples/urcsts-via-include/urcsts.test | 27 +
.../mcstrans/share/examples/urcsts/README | 15 +
.../mcstrans/share/examples/urcsts/secolor.conf | 21 +
.../mcstrans/share/examples/urcsts/setrans.conf | 27 +
.../mcstrans/share/examples/urcsts/urcsts.color | 21 +
.../mcstrans/share/examples/urcsts/urcsts.test | 27 +
policycoreutils/mcstrans/share/util/mlscolor-test | 43 +
policycoreutils/mcstrans/share/util/mlstrans-test | 53 +
policycoreutils/mcstrans/share/util/try-all | 64 +
policycoreutils/mcstrans/src/Makefile | 44 +
policycoreutils/mcstrans/src/README | 3 +
policycoreutils/mcstrans/src/mcscolor.c | 344 +
policycoreutils/mcstrans/src/mcstrans.c | 1762 +++
policycoreutils/mcstrans/src/mcstrans.h | 9 +
policycoreutils/mcstrans/src/mcstrans.init | 102 +
policycoreutils/mcstrans/src/mcstransd.c | 591 +
policycoreutils/mcstrans/src/mls_level.c | 170 +
policycoreutils/mcstrans/src/mls_level.h | 10 +
policycoreutils/mcstrans/utils/Makefile | 41 +
policycoreutils/mcstrans/utils/callgrind-mcstransd | 5 +
policycoreutils/mcstrans/utils/transcon.c | 30 +
policycoreutils/mcstrans/utils/untranscon.c | 28 +
policycoreutils/mcstrans/utils/valgrind-mcstransd | 5 +
policycoreutils/newrole/Makefile | 20 +-
policycoreutils/newrole/newrole.c | 132 +-
policycoreutils/restorecond/Makefile | 26 +-
.../restorecond/org.selinux.Restorecond.service | 3 +
policycoreutils/restorecond/restorecond.8 | 15 +-
policycoreutils/restorecond/restorecond.c | 430 +-
policycoreutils/restorecond/restorecond.conf | 5 +-
policycoreutils/restorecond/restorecond.desktop | 7 +
policycoreutils/restorecond/restorecond.h | 19 +-
policycoreutils/restorecond/restorecond.init | 7 +-
policycoreutils/restorecond/restorecond_user.conf | 8 +
policycoreutils/restorecond/user.c | 259 +
policycoreutils/restorecond/utmpwatcher.c | 2 +-
policycoreutils/restorecond/watch.c | 272 +
policycoreutils/run_init/Makefile | 8 +-
policycoreutils/run_init/open_init_pty.8 | 8 +-
policycoreutils/run_init/run_init.8 | 4 +
policycoreutils/sandbox/.gitignore | 1 +
policycoreutils/sandbox/Makefile | 46 +
policycoreutils/sandbox/sandbox | 462 +
policycoreutils/sandbox/sandbox.8 | 78 +
policycoreutils/sandbox/sandbox.conf | 7 +
policycoreutils/sandbox/sandbox.conf.5 | 40 +
policycoreutils/sandbox/sandbox.config | 2 +
policycoreutils/sandbox/sandbox.init | 75 +
policycoreutils/sandbox/sandboxX.sh | 21 +
policycoreutils/sandbox/seunshare.8 | 43 +
policycoreutils/sandbox/seunshare.c | 1051 ++
policycoreutils/sandbox/start | 9 +
policycoreutils/sandbox/test_sandbox.py | 98 +
policycoreutils/scripts/Makefile | 3 +-
policycoreutils/scripts/chcat | 2 +-
policycoreutils/scripts/chcat.8 | 2 +-
policycoreutils/scripts/fixfiles | 145 +-
policycoreutils/scripts/fixfiles.8 | 2 +
policycoreutils/scripts/genhomedircon.8 | 37 +
policycoreutils/secon/Makefile | 4 +-
policycoreutils/semanage/Makefile | 2 +-
policycoreutils/semanage/semanage | 251 +-
policycoreutils/semanage/semanage.8 | 158 +-
policycoreutils/semanage/seobject.py | 491 +-
policycoreutils/semodule/Makefile | 2 +-
policycoreutils/semodule_deps/Makefile | 4 +-
policycoreutils/semodule_expand/Makefile | 4 +-
policycoreutils/semodule_expand/semodule_expand.8 | 5 +-
policycoreutils/semodule_link/Makefile | 4 +-
policycoreutils/semodule_package/Makefile | 10 +-
.../semodule_package/semodule_package.8 | 3 +-
.../semodule_package/semodule_unpackage.8 | 24 +
.../semodule_package/semodule_unpackage.c | 103 +
policycoreutils/sepolgen-ifgen/.gitignore | 1 +
policycoreutils/sepolgen-ifgen/Makefile | 25 +
.../sepolgen-ifgen/sepolgen-ifgen-attr-helper.c | 232 +
policycoreutils/sestatus/Makefile | 4 +-
policycoreutils/setfiles/Makefile | 4 +-
policycoreutils/setfiles/restore.c | 171 +-
policycoreutils/setfiles/restore.h | 4 +
policycoreutils/setfiles/restorecon.8 | 7 +-
policycoreutils/setfiles/setfiles.8 | 5 +-
policycoreutils/setfiles/setfiles.c | 91 +-
policycoreutils/setsebool/Makefile | 2 +-
policycoreutils/setsebool/setsebool.8 | 2 +-
policycoreutils/setsebool/setsebool.c | 18 +-
sepolgen/ChangeLog | 32 +
sepolgen/VERSION | 2 +-
sepolgen/src/sepolgen/Makefile | 4 +-
sepolgen/src/sepolgen/access.py | 15 +-
sepolgen/src/sepolgen/audit.py | 24 +
sepolgen/src/sepolgen/defaults.py | 3 +
sepolgen/src/sepolgen/interfaces.py | 73 +-
sepolgen/src/sepolgen/module.py | 4 +-
sepolgen/src/sepolgen/policygen.py | 7 +
sepolgen/src/sepolgen/refparser.py | 40 +-
sepolgen/src/share/Makefile | 4 +-
sepolgen/src/share/perm_map | 51 +-
sepolgen/tests/test_access.py | 4 +-
sepolgen/tests/test_interfaces.py | 26 +-
sepolgen/tests/test_matching.py | 14 +-
sepolgen/tests/test_refparser.py | 8 +-
292 files changed, 15251 insertions(+), 32932 deletions(-)
create mode 100644 checkpolicy/.gitignore
create mode 100644 checkpolicy/test/.gitignore
delete mode 100644 libselinux/.gitignore
copy libselinux/man/man3/{checkPasswdAccess.3 => selinux_check_access.3} (100%)
create mode 100644 libselinux/man/man3/selinux_colors_path.3
create mode 100644 libselinux/man/man3/selinux_raw_context_to_color.3
create mode 100644 libselinux/man/man3/selinux_status_close.3
create mode 100644 libselinux/man/man3/selinux_status_deny_unknown.3
create mode 100644 libselinux/man/man3/selinux_status_getenforce.3
create mode 100644 libselinux/man/man3/selinux_status_open.3
create mode 100644 libselinux/man/man3/selinux_status_policyload.3
create mode 100644 libselinux/man/man3/selinux_status_updated.3
create mode 100644 libselinux/man/man5/secolor.conf.5
create mode 100644 libselinux/man/man5/selabel_db.5
create mode 100644 libselinux/man/man8/selinuxexeccon.8
create mode 100644 libselinux/src/.gitignore
create mode 100644 libselinux/src/label_db.c
delete mode 100644 libselinux/src/selinux.py
delete mode 100644 libselinux/src/selinuxswig_python_exception.i
delete mode 100644 libselinux/src/selinuxswig_wrap.c
create mode 100644 libselinux/src/sestatus.c
create mode 100644 libselinux/utils/.gitignore
create mode 100644 libselinux/utils/selinuxexeccon.c
create mode 100644 libsemanage/man/man5/semanage.conf.5
create mode 100644 libsemanage/src/.gitignore
create mode 100644 libsemanage/src/exception.sh
delete mode 100644 libsemanage/src/semanage.py
delete mode 100644 libsemanage/src/semanageswig_wrap.c
create mode 100644 policycoreutils/mcstrans/COPYING
create mode 100644 policycoreutils/mcstrans/ChangeLog
create mode 100644 policycoreutils/mcstrans/Makefile
create mode 100644 policycoreutils/mcstrans/TODO
create mode 100644 policycoreutils/mcstrans/VERSION
create mode 100644 policycoreutils/mcstrans/man/Makefile
create mode 100644 policycoreutils/mcstrans/man/man8/mcs.8
create mode 100644 policycoreutils/mcstrans/man/man8/mcstransd.8
create mode 100644 policycoreutils/mcstrans/man/man8/setrans.conf.8
create mode 100644 policycoreutils/mcstrans/share/examples/default/README
create mode 100644 policycoreutils/mcstrans/share/examples/default/default.test
create mode 100644 policycoreutils/mcstrans/share/examples/default/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/include/README
create mode 100644 policycoreutils/mcstrans/share/examples/include/default.test
create mode 100644 policycoreutils/mcstrans/share/examples/include/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/include/setrans.d/include-example
create mode 100644 policycoreutils/mcstrans/share/examples/nato/README
create mode 100644 policycoreutils/mcstrans/share/examples/nato/nato.test
create mode 100644 policycoreutils/mcstrans/share/examples/nato/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/nato/setrans.d/constraints.conf
create mode 100644 policycoreutils/mcstrans/share/examples/nato/setrans.d/eyes-only.conf
create mode 100644 policycoreutils/mcstrans/share/examples/nato/setrans.d/rel.conf
create mode 100644 policycoreutils/mcstrans/share/examples/non-mls-color/README
create mode 100644 policycoreutils/mcstrans/share/examples/non-mls-color/non-mls.color
create mode 100644 policycoreutils/mcstrans/share/examples/non-mls-color/secolor.conf
create mode 100644 policycoreutils/mcstrans/share/examples/pipes/pipes.test
create mode 100644 policycoreutils/mcstrans/share/examples/pipes/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/pipes/setrans.d/pipes.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/README
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/secolor.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/c.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/r.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/s.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/system.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/ts.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/setrans.d/u.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/urcsts.color
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts-via-include/urcsts.test
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts/README
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts/secolor.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts/setrans.conf
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts/urcsts.color
create mode 100644 policycoreutils/mcstrans/share/examples/urcsts/urcsts.test
create mode 100644 policycoreutils/mcstrans/share/util/mlscolor-test
create mode 100644 policycoreutils/mcstrans/share/util/mlstrans-test
create mode 100644 policycoreutils/mcstrans/share/util/try-all
create mode 100644 policycoreutils/mcstrans/src/Makefile
create mode 100644 policycoreutils/mcstrans/src/README
create mode 100644 policycoreutils/mcstrans/src/mcscolor.c
create mode 100644 policycoreutils/mcstrans/src/mcstrans.c
create mode 100644 policycoreutils/mcstrans/src/mcstrans.h
create mode 100644 policycoreutils/mcstrans/src/mcstrans.init
create mode 100644 policycoreutils/mcstrans/src/mcstransd.c
create mode 100644 policycoreutils/mcstrans/src/mls_level.c
create mode 100644 policycoreutils/mcstrans/src/mls_level.h
create mode 100644 policycoreutils/mcstrans/utils/Makefile
create mode 100644 policycoreutils/mcstrans/utils/callgrind-mcstransd
create mode 100644 policycoreutils/mcstrans/utils/transcon.c
create mode 100644 policycoreutils/mcstrans/utils/untranscon.c
create mode 100644 policycoreutils/mcstrans/utils/valgrind-mcstransd
create mode 100644 policycoreutils/restorecond/org.selinux.Restorecond.service
create mode 100644 policycoreutils/restorecond/restorecond.desktop
create mode 100644 policycoreutils/restorecond/restorecond_user.conf
create mode 100644 policycoreutils/restorecond/user.c
create mode 100644 policycoreutils/restorecond/watch.c
create mode 100644 policycoreutils/sandbox/.gitignore
create mode 100644 policycoreutils/sandbox/Makefile
create mode 100644 policycoreutils/sandbox/sandbox
create mode 100644 policycoreutils/sandbox/sandbox.8
create mode 100644 policycoreutils/sandbox/sandbox.conf
create mode 100644 policycoreutils/sandbox/sandbox.conf.5
create mode 100644 policycoreutils/sandbox/sandbox.config
create mode 100644 policycoreutils/sandbox/sandbox.init
create mode 100644 policycoreutils/sandbox/sandboxX.sh
create mode 100644 policycoreutils/sandbox/seunshare.8
create mode 100644 policycoreutils/sandbox/seunshare.c
create mode 100644 policycoreutils/sandbox/start
create mode 100644 policycoreutils/sandbox/test_sandbox.py
create mode 100644 policycoreutils/scripts/genhomedircon.8
create mode 100644 policycoreutils/semodule_package/semodule_unpackage.8
create mode 100644 policycoreutils/semodule_package/semodule_unpackage.c
create mode 100644 policycoreutils/sepolgen-ifgen/.gitignore
create mode 100644 policycoreutils/sepolgen-ifgen/Makefile
create mode 100644 policycoreutils/sepolgen-ifgen/sepolgen-ifgen-attr-helper.c
hooks/post-receive
--
SELinux userland upstream repository
More information about the selinux-commits
mailing list