| 3dd432b3ec510b319beb4b2efd11d89d7daffbcf |
|
08-Jul-2014 |
Stephen Smalley <sds@tycho.nsa.gov> |
Log an error on unknown classes and permissions.
commit 7bdc38ccb21133155658279895b10ceb347b0b5a upstream.
Change-Id: I118354547c854a52655075753c29884ed742496a
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/external/libselinux/src/checkAccess.c
|
| 9feac613ddd7601d35a6bea7a28135662048d348 |
|
16-Mar-2012 |
Dan Walsh <dwalsh@redhat.com> |
libselinux: take security_deny_unknown into account
commit c7d749efe2fa6f1e765b0bc215476d533f1b4d7b upsteram.
selinux_check_access() should not error on bad class or perms if the
security_deny_unkown() function return false. If policy tells us to
allow unknown classes and perms we should respect that.
Change-Id: If2a8f71b51746d87b760e00eaeda38f8ed4a6a15
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/libselinux/src/checkAccess.c
|
| ab40ea9bfd71b50138f1482c4764a65ac17d8caf |
|
19-Feb-2014 |
Stephen Smalley <sds@tycho.nsa.gov> |
Get rid of security_context_t and fix const declarations.
The const security_context_t declarations were incorrect;
const char * was intended, not char * const. Easiest fix is to
replace them all with const char *. And while we are at it, just
get rid of all usage of security_context_t itself as it adds no value.
typedef left to permit building legacy users until such a time as all are
updated.
Change-Id: I2f9df7bb9f575f76024c3e5f5b660345da2931a7
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/external/libselinux/src/checkAccess.c
|
| 8aeb5c5fd002c09d32f3151c17c645b85d1bb8e5 |
|
14-Sep-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Only check SELinux enabled status once in selinux_check_access().
Move the SELinux enabled check to the once handler so that we do
not perform this on each call to selinux_check_access(). Reduces
overhead in both the SELinux-enabled and the SELinux-disabled cases.
Change-Id: I61fe85bc04fe53cbf840ba712c81bdb06e4e0c2f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/external/libselinux/src/checkAccess.c
|
| f074036424618c130dacb3464465a8b40bffef58 |
|
04-Jan-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Port of libselinux to Android.
/external/libselinux/src/checkAccess.c
|