2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-28 12:58:07 +00:00

43 Commits

Author SHA1 Message Date
Dominic Reynolds
b210319daa Fixes for regex handling in the tools to match the newer directory
handling syntax.
2007-07-29 02:23:31 +00:00
Dominic Reynolds
1a8ae64cfb Add handling for lock and append in logs and profiles. 2007-07-29 02:20:24 +00:00
Dominic Reynolds
3f2ed86bef Don't process events for profiles that no longer exist. 2007-07-29 02:18:29 +00:00
Dominic Reynolds
6f5bc70ae1 Updated usage of SubDomain::readprofile() (which changed in r620) in
yast apparmor profile agent and syntax checking function in subdomain.pm
2007-07-29 02:17:17 +00:00
Dominic Reynolds
0bd08b78c8 Strip trailing comments from individual rule lines in the profiles when
they are parsed.
2007-07-29 02:06:41 +00:00
Dominic Reynolds
d3d92196f9 Add support to the tools for basic network access mediation - by
family/socket type.
2007-07-29 02:06:00 +00:00
Dominic Reynolds
62eb92567d Add handling for clone operation from audit logs - which caused the
tracking of process forking to not work correctly in the tools.
2007-07-29 02:05:06 +00:00
Dominic Reynolds
74b0f0b5ad Read and write new change hat profile syntax
Read in the new audit message format used by the module
Updated the tools to handle the newer directory mediation in apparmor
2007-07-16 13:19:02 +00:00
Dominic Reynolds
c8c8ca442c Repository fixes for tools.
- Ask Me Later option for enabling the repository not working  
 - Cleanup the syncronization code with the repository - ensure that 
   mofications are presented correctly as adds/changes to the users profile
   set
 - Correct bug in marking profiles as NEVERSUBMIT  
 - Fix bug in serlializing profiles with hats (was adding the globals
   #include above each hat - ick)
 - Added dialog and config handling code to enable user to choose the mode of
   usage of the profile repository: download only or upload new/changed
   profiles - so that they user isn't repeatedly prompted to sign in to the
   repository
 - Set default configuration for the repository to apparmor.test.opensuse.org
2007-07-13 17:53:12 +00:00
Dominic Reynolds
e0e441ac72 - Minor formatting
- use ENV{PAGER}
- chmod use changes to prevent races writing config files
- add preferred user (NOVELL) as config option in logprof.conf and sort
  profiles from repo so that preferred user is the default and first in
  the list
2007-05-22 20:49:51 +00:00
Dominic Reynolds
8934b04b11 Correct localization problems identified in code review. 2007-04-26 16:31:08 +00:00
Dominic Reynolds
9161f2f09d Formatting/indentation corrections. 2007-04-26 14:42:56 +00:00
Dominic Reynolds
58820fc7e2 Fixed some indentation/formatting problems from the previous checkins. 2007-04-26 03:00:22 +00:00
Dominic Reynolds
08a4da1016 Add support to make the profiles in /etc/apparmor/profiles/extras
usable directly from genprof/logprof when new profiles are needed.
2007-04-26 02:59:17 +00:00
Dominic Reynolds
b002b50ba6 Changes to support marking profiles as local only and subsequently
don't prompt the user to upload changes to the repository.
2007-04-26 02:58:10 +00:00
Dominic Reynolds
3d16e4e6d6 Add support in YaST UI wizards for the AppArmor profile repository. 2007-04-26 02:56:54 +00:00
Dominic Reynolds
73c22acbdf Make repo user creation explicit choice in console UI during
logprof/genprof run.
2007-04-26 02:55:58 +00:00
Dominic Reynolds
54645b9e6b Remove debug statement and wrap call to do_logprof_pass in eval block
for ag_genprof for error handling
2007-04-26 02:54:11 +00:00
Dominic Reynolds
d27ff99e31 Changes to add support for the AppArmor profile repository to the
console UI tools. (jmichael)
2007-04-26 02:48:24 +00:00
Dominic Reynolds
4419185c4d Cleanup for the profile tools UI. 2007-04-26 02:46:23 +00:00
Dominic Reynolds
7fb70b4b22 Refactor/cleanup reading/writing and handling of configuration options
in logprof.conf (jmichael)
2007-04-25 21:06:52 +00:00
Dominic Reynolds
7114db645f refactor autodep to make it easier to add remote repository support
(jmichael)
2007-04-25 21:05:07 +00:00
Dominic Reynolds
43aa5f00f0 Reworks the profile loading code to be able to parse profile from a
string we might have gotten from the network instead of requiring to
read it from a file and clean up the error handling (jmichael)
2007-04-25 21:04:28 +00:00
Dominic Reynolds
dc4e5485f1 fix a bug in Add Hat dialog related to CMD_ABORT/CMD_FINISHED handling
(jmichael)
2007-04-25 20:48:51 +00:00
Dominic Reynolds
94c9775dde Refactoring cleanup for CMD_ABORT/CMD_FINISHED handling (jmichael) 2007-04-25 20:47:13 +00:00
Jesse Michael
3d84f865c9 The version of perl included with Ubuntu's Feisty release is generating
extra perl warnings about using an uninitialized value in a pattern
match when the user uses the arrow keys to move up and down in the option
list when asking how to handle path access rules.  This makes sure the
variables used in m// operations are always defined.
2007-03-30 16:04:04 +00:00
Jesse Michael
33a58a858d keep logprof/genprof from spinning forever if the very last line in the
logfile is "PERMITTING x access to ..."
2007-03-29 16:39:28 +00:00
Steve Beattie
f5109ad203 This patch makes the utils tools consistent with the initscript as to
which sets of files they ignore (rpm backups, dotfiles, and emacs
backups). It moves the tests into a common function so that
modifications only need to occur in one location.
2007-03-23 18:52:22 +00:00
Jesse Michael
360ffc756e re-enable warnings for the utils perl modules and fix a couple initial
problems exposed by that.  there are likely to be more fixes coming.
2007-03-21 16:49:39 +00:00
Jesse Michael
e5ac6de656 fix typo in fork tracking code that could result in applications that
are currently running while logprof/genprof is used being left in the 
null-complain profile instead of being moved to the profile the user
has just specified.  

the profiles are updated correctly though, so if the application is 
stopped and restarted, it will be confined by the appropriate profile.
2007-03-21 15:54:57 +00:00
Jesse Michael
d8ae032328 used perltidy to clean up the formatting for the perl scripts in the
utils package and manually fixed some places where perltidy's
reformatting made it harder to read.  the options used were--

-i=4    # 4-space indentation
-l=0    # unlimited line length (for now)
-pt=2   # slightly tightened parens
-ce     # cuddled elses
-nolq   # don't outdent long quotes
-nsfs   # don't add spaces in front of semi-colons in for ( ) statements
-isbc   # only indent block comments that have whitespace in front of them
-otr    # don't place a break between a comma and an opening brace

the code will be refactored to make it possible to switch to using 
80-column line-breaks without resorting to really nasty formatting 
constructs.
2007-03-20 21:58:38 +00:00
Jesse Michael
7780d79c8d remove last vestiges of Immunix::Ycp in deference to official ycp module 2007-03-19 02:29:47 +00:00
Jesse Michael
c878e09840 fixes for bz #179656 - missing localization in subdomain.pm 2007-03-18 20:25:25 +00:00
Jesse Michael
5b2dd25bb1 revert broken commit. i'll check in the discrete fixes from the last checkin
in a second and then follow those up with the corrected cleanup fixes.
2007-03-18 19:44:57 +00:00
Dominic Reynolds
8fb0f8f3d1 Fixes for BZ 179656, 233768. Add new capabilities rating to sverity.db,
localization fixes in SubDomain.pm and Reports.pm.
2007-03-12 14:12:40 +00:00
Steve Beattie
7964feb031 The audit user space daemon has to be configured specially to include
the apparmor defined event numbers. genprof, logprof, and aa-eventd
should all still function correctly even when the audit daemon is not
configured correctly. This commit addresses that as well as adding the
needed dependency on perl-gettext.
2007-01-17 12:00:43 +00:00
David J Drewelow
277a4e1c24 Change to improve i18n string match. 2007-01-03 10:44:01 +00:00
Seth Arnold
27df0a157c Bug 215207 - apparmor-profiles: lib-ld missing in the profile -- now that the apparmor-profiles package has removed the ld.so profiles, genprof/autodep shouldn't be automatically providing 'px' access 2006-11-14 11:46:50 +00:00
Dominic Reynolds
1fe7e92955 Added checks for profile syntax and error dialogs in the yastui. 2006-10-05 21:29:22 +00:00
Dominic Reynolds
97593fb21b Changes to support new language features - exec modifiers Ux|Px and m
bit for mmap PROT_EXEC.
2006-08-04 16:38:22 +00:00
Steve Beattie
09f7264743 Set svn:keywords attributes on files, modify makefiles to point at new
common/ location after converting to novell forge svn repo.
2006-04-12 19:31:08 +00:00
Dominic Reynolds
93addb5b04 Rename changes subdomain -> apparmor in error messages 2006-04-11 22:26:05 +00:00
Steve Beattie
6d3e74907d Import the rest of the core functionality of the internal apparmor
development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00