| bd76d1c1f853604b622e08fff34376be574378d4 |
08-Oct-2014 |
Stephen Smalley <sds@tycho.nsa.gov> |
Report all neverallow violations.
Switch libsepol check_assertions() from only reporting the first violation
to reporting them all.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Cherry-pick of commit: 7b99e2f9e310bc77f40478c995348dc5e2af27c1
Bug: 19191637
Change-Id: I8b0976f7e233b35ce80e9a15cceb1b47f045de2b
rc/assertion.c
|
| 2066a66a2ab0c1b7d691d5a180b0ec1e47b0fb12 |
12-Jul-2014 |
Nick Kralevich <nnk@google.com> |
Fix for binary policy modules.
They do not retain the neverallow source information so we must
not assume that source_filename is set. Either need a new binary
module format if we want to propagate this information for modular
builds or get rid of binary modules.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Bug: https://code.google.com/p/android/issues/detail?id=73183
(cherry picked from commit d26204e7d0a3be178a97d4920b82007e05a2a632)
Change-Id: I88e220816430b57d5cb366f3a1e0c22fc64fffef
rc/expand.c
rc/link.c
|
| c71644b06ebd417ef060f3f07472125516f86c41 |
05-Mar-2014 |
Stephen Smalley <sds@tycho.nsa.gov> |
Report source file and line information for neverallow failures.
Change-Id: I0def97a5f2f6097e2dad7bcd5395b8fa740d7073
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
nclude/sepol/policydb/policydb.h
rc/assertion.c
rc/expand.c
rc/link.c
rc/policydb.c
|
| 24c94accb995e6bf114e502a1db146bcf31e0e88 |
01-Nov-2013 |
Stephen Smalley <sds@tycho.nsa.gov> |
am 8fd7c65a: Update to libsepol 2.2.
* commit '8fd7c65a336d45d5225f32363a9f26c1e3e60c3c':
Update to libsepol 2.2.
|
| 8fd7c65a336d45d5225f32363a9f26c1e3e60c3c |
30-Oct-2013 |
Stephen Smalley <sds@tycho.nsa.gov> |
Update to libsepol 2.2.
Update to current upstream libsepol release.
Includes memory leak fixes, improved handling of filename-based
type transitions, and support for latest kernel policy version.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
(cherry picked from commit dedcd596b31e0e4fc15d75b3a8b5e6b61e6c28b3)
Change-Id: I273e3aac223d25c918f71d566ea752b64ec59cd7
hangeLog
ERSION
nclude/sepol/policydb/policydb.h
nclude/sepol/policydb/services.h
an/man3/sepol_check_context.3
an/man3/sepol_genbools.3
an/man3/sepol_genusers.3
rc/Makefile
rc/avrule_block.c
rc/expand.c
rc/genbools.c
rc/genusers.c
rc/link.c
rc/module.c
rc/policydb.c
rc/services.c
rc/write.c
ests/policies/test-cond/refpolicy-base.conf
ests/policies/test-deps/base-metreq.conf
ests/policies/test-deps/base-notmetreq.conf
ests/policies/test-expander/alias-base.conf
ests/policies/test-expander/base-base-only.conf
ests/policies/test-expander/role-base.conf
ests/policies/test-expander/small-base.conf
ests/policies/test-expander/user-base.conf
ests/policies/test-linker/module1.conf
ests/policies/test-linker/module2.conf
ests/policies/test-linker/small-base.conf
|
| dedcd596b31e0e4fc15d75b3a8b5e6b61e6c28b3 |
30-Oct-2013 |
Stephen Smalley <sds@tycho.nsa.gov> |
Update to libsepol 2.2.
Update to current upstream libsepol release.
Includes memory leak fixes, improved handling of filename-based
type transitions, and support for latest kernel policy version.
Change-Id: Idabd3e4d50777c6691cb0d74b4e28f4fe06bef35
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
hangeLog
ERSION
nclude/sepol/policydb/policydb.h
nclude/sepol/policydb/services.h
an/man3/sepol_check_context.3
an/man3/sepol_genbools.3
an/man3/sepol_genusers.3
rc/Makefile
rc/avrule_block.c
rc/expand.c
rc/genbools.c
rc/genusers.c
rc/link.c
rc/module.c
rc/policydb.c
rc/services.c
rc/write.c
ests/policies/test-cond/refpolicy-base.conf
ests/policies/test-deps/base-metreq.conf
ests/policies/test-deps/base-notmetreq.conf
ests/policies/test-expander/alias-base.conf
ests/policies/test-expander/base-base-only.conf
ests/policies/test-expander/role-base.conf
ests/policies/test-expander/small-base.conf
ests/policies/test-expander/user-base.conf
ests/policies/test-linker/module1.conf
ests/policies/test-linker/module2.conf
ests/policies/test-linker/small-base.conf
|
| b0e0162a246f2c051427154909c0ecd694cc4805 |
17-Jan-2013 |
Alice Chu <alice.chu@sta.samsung.com> |
Fix memory leak issues found by Klocwork
Change-Id: If324d424dc11df435c26b0da11e314c7608180f9
nclude/sepol/policydb/symtab.h
rc/expand.c
rc/genusers.c
rc/hierarchy.c
rc/link.c
rc/policydb.c
rc/policydb_convert.c
rc/services.c
rc/symtab.c
rc/write.c
|
| 4ebc669d5dc59771284b2d61eb4cce53e6a7069e |
25-Sep-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Update to libsepol 2.1.8.
Change-Id: I7d848ee312d4c706162a822d2031f37a5557ed5f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
hangeLog
ERSION
nclude/sepol/policydb/polcaps.h
nclude/sepol/policydb/policydb.h
rc/expand.c
rc/link.c
rc/polcaps.c
rc/policydb.c
rc/private.h
rc/write.c
|
| 6617731185f5d7c899b376d1bfa2dea11eb494a0 |
21-Feb-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Merge branch 'upstream'
|
| fb82f8ed213dd54eebc6bdd5557984c3ba870496 |
21-Feb-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
libsepol 2.1.4
hangeLog
ERSION
nclude/Makefile
nclude/sepol/handle.h
nclude/sepol/policydb/conditional.h
nclude/sepol/policydb/ebitmap.h
nclude/sepol/policydb/policydb.h
an/Makefile
rc/Makefile
rc/conditional.c
rc/ebitmap.c
rc/expand.c
rc/handle.c
rc/handle.h
rc/libsepol.map
rc/link.c
rc/policydb.c
rc/private.h
rc/write.c
|
| b1db49d77789525ac1f4e73e978e35694f21ea1a |
24-Jan-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Support for building on MacOS X as part of Android.
ndroid.mk
rc/genbools.c
rc/genusers.c
rc/node_record.c
rc/private.h
tils/chkcon.c
|
| 255e72915d4cbddceb435e13d81601755714e9f3 |
24-Jan-2012 |
SE Android <seandroid@taiga.selinuxproject.org> |
Import libsepol 2.1.0 (Release 2011-07-27).
gitignore
OPYING
hangeLog
akefile
ERSION
nclude/Makefile
nclude/sepol/boolean_record.h
nclude/sepol/booleans.h
nclude/sepol/context.h
nclude/sepol/context_record.h
nclude/sepol/debug.h
nclude/sepol/errcodes.h
nclude/sepol/handle.h
nclude/sepol/iface_record.h
nclude/sepol/interfaces.h
nclude/sepol/module.h
nclude/sepol/node_record.h
nclude/sepol/nodes.h
nclude/sepol/policydb.h
nclude/sepol/policydb/avrule_block.h
nclude/sepol/policydb/avtab.h
nclude/sepol/policydb/conditional.h
nclude/sepol/policydb/constraint.h
nclude/sepol/policydb/context.h
nclude/sepol/policydb/ebitmap.h
nclude/sepol/policydb/expand.h
nclude/sepol/policydb/flask.h
nclude/sepol/policydb/flask_types.h
nclude/sepol/policydb/hashtab.h
nclude/sepol/policydb/hierarchy.h
nclude/sepol/policydb/link.h
nclude/sepol/policydb/mls_types.h
nclude/sepol/policydb/module.h
nclude/sepol/policydb/polcaps.h
nclude/sepol/policydb/policydb.h
nclude/sepol/policydb/services.h
nclude/sepol/policydb/sidtab.h
nclude/sepol/policydb/symtab.h
nclude/sepol/policydb/util.h
nclude/sepol/port_record.h
nclude/sepol/ports.h
nclude/sepol/roles.h
nclude/sepol/sepol.h
nclude/sepol/user_record.h
nclude/sepol/users.h
an/Makefile
an/man3/sepol_check_context.3
an/man3/sepol_genbools.3
an/man3/sepol_genusers.3
an/man8/chkcon.8
an/man8/genpolbools.8
an/man8/genpolusers.8
rc/Makefile
rc/assertion.c
rc/av_permissions.h
rc/avrule_block.c
rc/avtab.c
rc/boolean_internal.h
rc/boolean_record.c
rc/booleans.c
rc/conditional.c
rc/constraint.c
rc/context.c
rc/context.h
rc/context_internal.h
rc/context_record.c
rc/debug.c
rc/debug.h
rc/dso.h
rc/ebitmap.c
rc/expand.c
rc/genbools.c
rc/genusers.c
rc/handle.c
rc/handle.h
rc/hashtab.c
rc/hierarchy.c
rc/iface_internal.h
rc/iface_record.c
rc/interfaces.c
rc/libsepol.map
rc/libsepol.pc.in
rc/link.c
rc/mls.c
rc/mls.h
rc/module.c
rc/module_internal.h
rc/node_internal.h
rc/node_record.c
rc/nodes.c
rc/polcaps.c
rc/policydb.c
rc/policydb_convert.c
rc/policydb_internal.h
rc/policydb_public.c
rc/port_internal.h
rc/port_record.c
rc/ports.c
rc/private.h
rc/roles.c
rc/services.c
rc/sidtab.c
rc/symtab.c
rc/user_internal.h
rc/user_record.c
rc/users.c
rc/util.c
rc/write.c
ests/Makefile
ests/debug.c
ests/debug.h
ests/helpers.c
ests/helpers.h
ests/libsepol-tests.c
ests/policies/support/misc_macros.spt
ests/policies/test-cond/refpolicy-base.conf
ests/policies/test-deps/base-metreq.conf
ests/policies/test-deps/base-notmetreq.conf
ests/policies/test-deps/modreq-attr-global.conf
ests/policies/test-deps/modreq-attr-opt.conf
ests/policies/test-deps/modreq-bool-global.conf
ests/policies/test-deps/modreq-bool-opt.conf
ests/policies/test-deps/modreq-obj-global.conf
ests/policies/test-deps/modreq-obj-opt.conf
ests/policies/test-deps/modreq-perm-global.conf
ests/policies/test-deps/modreq-perm-opt.conf
ests/policies/test-deps/modreq-role-global.conf
ests/policies/test-deps/modreq-role-opt.conf
ests/policies/test-deps/modreq-type-global.conf
ests/policies/test-deps/modreq-type-opt.conf
ests/policies/test-deps/module.conf
ests/policies/test-deps/small-base.conf
ests/policies/test-expander/alias-base.conf
ests/policies/test-expander/alias-module.conf
ests/policies/test-expander/base-base-only.conf
ests/policies/test-expander/module.conf
ests/policies/test-expander/role-base.conf
ests/policies/test-expander/role-module.conf
ests/policies/test-expander/small-base.conf
ests/policies/test-expander/user-base.conf
ests/policies/test-expander/user-module.conf
ests/policies/test-hooks/cmp_policy.conf
ests/policies/test-hooks/module_add_role_allow_trans.conf
ests/policies/test-hooks/module_add_symbols.conf
ests/policies/test-hooks/small-base.conf
ests/policies/test-linker/module1.conf
ests/policies/test-linker/module2.conf
ests/policies/test-linker/small-base.conf
ests/test-common.c
ests/test-common.h
ests/test-cond.c
ests/test-cond.h
ests/test-deps.c
ests/test-deps.h
ests/test-downgrade.c
ests/test-downgrade.h
ests/test-expander-attr-map.c
ests/test-expander-attr-map.h
ests/test-expander-roles.c
ests/test-expander-roles.h
ests/test-expander-users.c
ests/test-expander-users.h
ests/test-expander.c
ests/test-expander.h
ests/test-linker-cond-map.c
ests/test-linker-cond-map.h
ests/test-linker-roles.c
ests/test-linker-roles.h
ests/test-linker-types.c
ests/test-linker-types.h
ests/test-linker.c
ests/test-linker.h
tils/Makefile
tils/chkcon.c
|