| 64afa1aff1cd610d2493f780e2a44b551f668b84 |
|
11-Dec-2016 |
Nick Kralevich <nnk@google.com> |
libselinux: add O_CLOEXEC
Makes libselinux safer and less likely to leak file descriptors when
used as part of a multithreaded program.
Signed-off-by: Nick Kralevich <nnk@google.com>
/external/selinux/libselinux/src/booleans.c
|
| c09fb32384ec3808a9dd668bed4c605f4c28f420 |
|
07-Apr-2017 |
Nicolas Iooss <nicolas.iooss@m4x.org> |
libselinux: make process_boolean() fail on invalid lines
When security_load_booleans() calls process_boolean() to parse a boolean
definition, process_boolean() returns a successful value when it fails
to use strtok_r() (e.g. when there is no "=" in the parsed line). This
leads security_load_booleans() to use uninitialized name and/or val when
setting the boolean into the policy.
This issue has been found using clang's static analyzer and is similar
to the one which has been fixed in libsepol with commit 76f8c04c197f
("libsepol: make process_boolean() fail on invalid lines"). Fix it in
the same way.
Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
/external/selinux/libselinux/src/booleans.c
|
| a79621874991f3bffd1a15ea70d7fd6ed9f0019b |
|
17-Oct-2016 |
William Roberts <william.c.roberts@intel.com> |
libselinux: DISABLE_BOOL move to include headers
Some systems, like Mac, don't have stdio_ext.h. Since we're
building with DISABLE_BOOL=y on Mac, just include the
header files with the DISABLE define, and use the bare
minimum headers for DISABLE_BOOL=y.
Signed-off-by: William Roberts <william.c.roberts@intel.com>
/external/selinux/libselinux/src/booleans.c
|
| adca103639923216475714b08b89c4ee3d88ef6b |
|
29-Sep-2016 |
William Roberts <william.c.roberts@intel.com> |
libselinux: re-introduce DISABLE_BOOL=y
Provide stubs to the public boolean API that always returns -1.
On Android, boolean symbols are needed for:
external/ltrace/sysdeps/linux-gnu/trace.c
Signed-off-by: William Roberts <william.c.roberts@intel.com>
/external/selinux/libselinux/src/booleans.c
|
| d88597798fdb1a2b344ca47e48f2f80ad433fd95 |
|
23-Sep-2016 |
William Roberts <william.c.roberts@intel.com> |
libselinux: drop usage of _D_ALLOC_NAMLEN
_D_ALLOC_NAMLEN is not very portable. Currently, the code
mallocs based on _D_ALLOC_NAMLEN() and then strcpy's dirent
d_name into the buffer. Instead, just use strdup.
Change-Id: I5c8ca47da2c593ea2726caba5781f5e9d9d910ae
Signed-off-by: William Roberts <william.c.roberts@intel.com>
/external/selinux/libselinux/src/booleans.c
|
| b2d86f82196e26e6d62443a6e216c5c807d03018 |
|
03-Jul-2012 |
Eric Paris <eparis@redhat.com> |
libselinux: booleans: initialize pointer to silence coveriety
The coveriety scanner is too stupid to realize that the strtok_r()
function initializes the saveptr variable. Since we are passing a
variable location without initializing it coveriety gets angry. Just
shut up the scanner, but nothing was wrong to start with.
Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/booleans.c
|
| ee6901618c9da360515474145504c7b58258441f |
|
11-Jun-2012 |
Dan Walsh <dwalsh@redhat.com> |
libselinux: expose selinux_boolean_sub
Make selinux_boolean_sub a public method so getsebool can use it, as well as
potentially used within libsemanage.
Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/booleans.c
|
| 88c35241535803247bd3044187c6c3b3c7f02c79 |
|
18-Apr-2012 |
Eric Paris <eparis@redhat.com> |
libselinux: boolean name equivalency
Add support for booleans.subs file. Basically this allows us to finally change
badly named booleans to some standard name.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/booleans.c
|
| 98234cf543474b8998c654cfc5b1d1cbc738c38b |
|
27-Nov-2011 |
Richard Haines <richard_c_haines@btinternet.com> |
libselinux: Remove assert in security_get_boolean_names(3)
Remove assert in security_get_boolean_names(3) if the len invalid and stop seg
fault if names is null. Set EINVAL instead and return error.
Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/booleans.c
|
| 13cd4c8960688af11ad23b4c946149015c80d549 |
|
19-Aug-2008 |
Joshua Brindle <method@manicmethod.com> |
initial import from svn trunk revision 2950
/external/selinux/libselinux/src/booleans.c
|