summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove dangling %endifv1.26-3.el5Nathan Straz2010-09-151-2/+0
|
* Bump version for new buildNathan Straz2010-09-151-1/+5
|
* Merge branch 'master' into rhel5Nathan Straz2010-09-151-3/+3
|\
| * Fix requires for selinux-policy buildNathan Straz2010-09-151-3/+3
| | | | | | | | | | These files need to be instaled before %post so mark the requirements as such.
| * Turn SELinux BuildRequires to RequiresNathan Straz2010-09-031-1/+1
| | | | | | | | | | We need these on the install system since we're building the SELinux policy at install time.
* | Merge branch 'master' into rhel5Nathan Straz2010-08-201-24/+11
|\| | | | | | | | | | | | | Pull in changes to make selinux-policy generate at install time Conflicts: qarsh.spec - Merge together changelog
| * Remove qarshd.pp from rpm file listNathan Straz2010-08-201-2/+1
| |
| * Bump version for new releasev1.26-1Nathan Straz2010-08-201-1/+6
| |
| * Remove pre-build selinux filesNathan Straz2010-08-201-5/+1
| | | | | | | | | | These are not going to be used at all since the post-install rebuild puts it all in /etc/selinux/...
| * Don't build selinux-policy during buildNathan Straz2010-08-201-4/+3
| | | | | | | | | | | | The policy is dynamic so should be built on the system after install since we can't guarantee that the build chroot includes the latest selinux-policy package.
| * Remove use of policyhelpNathan Straz2010-08-201-7/+1
| | | | | | | | The file is gone is recent RHEL6 trees
* | Bump version for new buildv1.25-7.el5Nathan Straz2010-06-301-1/+5
| |
* | Resort qarshd.bad-interfacesNathan Straz2010-06-301-14/+14
| |
* | Update SELinux policy to work with selinux-policy-2.4.6-279.el5Nathan Straz2010-06-301-0/+9
| |
* | Merge branch 'rhel5' of ssh://sts-a//local/nstraz/git/qarsh into rhel5Nathan Straz2010-06-300-0/+0
|\ \
| * | [selinux] Require makeNathan Straz2010-04-201-1/+1
| | | | | | | | | | | | Make is needed to rebuild the qarshd selinux policy.
| * | Bump release to include selinux changesv1.25-4Nathan Straz2009-12-031-1/+5
| | |
| * | Only include lvm and logging parts of system policyroot2009-12-032-17/+11
| | | | | | | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name.
| * | Bump version for new build with system interfacesv1.25-3Nathan Straz2009-12-011-1/+5
| | |
| * | Add system interfaces to qarshd policyNathan Straz2009-12-012-1/+10
| | | | | | | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-devel-2.4.6-264.el5.
| * | Fix warnings from rpmlintNathan Straz2009-12-011-10/+10
| | | | | | | | | | | | | | | - Switch to tabs on all fields - Change to valid groups
| * | Bump release for conditional selinux buildv1.25-2Nathan Straz2009-11-201-1/+3
| | |
| * | Don't build selinux stuff on rhel4Nathan Straz2009-11-201-0/+12
| | |
| * | Bump version for new releaseNathan Straz2009-11-201-2/+9
| | |
* | | Bump release to include selinux changesNathan Straz2010-06-301-1/+5
| | |
* | | Only include lvm and logging parts of system policyroot2010-06-301-13/+0
| | | | | | | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name.
* | | Bump version for new build with system interfacesNathan Straz2010-06-301-1/+5
| | |
* | | Add system interfaces to qarshd policyNathan Straz2010-06-301-0/+23
| | | | | | | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-devel-2.4.6-264.el5.
* | | Bump release for conditional selinux buildNathan Straz2010-06-301-1/+3
| | |
* | | Don't build selinux stuff on rhel4Nathan Straz2010-06-301-0/+12
| |/ |/|
* | Allow all domains more rights to qarshd_t socketsNathan Straz2010-06-301-2/+4
| | | | | | | | | | | | qarshd_t sockets end up as stdin, stdout, and stderr. Some programs will fstat them to determine what they are or change flags on the file descriptor, this is ok.
* | [selinux] Require makeNathan Straz2010-06-171-1/+1
| | | | | | | | Make is needed to rebuild the qarshd selinux policy.
* | Set child_pid to 0 after child returnsNathan Straz2010-06-031-0/+1
| | | | | | | | This is mostly for clarity while debugging qarshd.
* | Close file descriptors left open by parent processNathan Straz2010-04-281-0/+4
| | | | | | | | | | | | Running things in parallel with pthreads in perl can lead to file descriptor leaks which may cause hangs in qarsh.
* | Only include lvm and logging parts of system policyNathan Straz2009-12-032-17/+11
| | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name.
* | Add system interfaces to qarshd policyNathan Straz2009-11-302-1/+8
| | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-3.6.32-41.fc12.noarch.
* | Fix warnings from rpmlintNathan Straz2009-11-241-10/+10
| | | | | | | | | | - Switch to tabs on all fields - Change to valid groups
* | Bump version for new releasev1.25-1Nathan Straz2009-11-201-2/+9
| |
* | Update bad-interfaces for Fedora 12Nathan Straz2009-11-201-17/+11
|/
* Pull in all services and apps interfacesNathan Straz2009-11-194-21/+46
| | | | | | | | This isn't completely possible because some interfaces cause syntax or load errors. We need to keep a list of interfaces to filter out to get something that loads. This adds gxpp as a requirement to build qarsh.
* Clean the SELinux directory after installNathan Straz2009-10-221-0/+1
| | | | This will prevent temp files from being packaged
* Add SELinux policy for qarshdNathan Straz2009-10-226-1/+116
| | | | We generate the policy based on which services we want to test.
* Only look up local username if remote not specifiedNathan Straz2009-10-081-4/+4
| | | | | | In rare cases the getpwuid() call will fail because of a YP or LDAP timeout. If we're not using the local username we shouldn't even bother looking it up.
* Add quiet option, document exit statusNathan Straz2009-10-012-7/+16
|
* Handle growing files better in qacpNathan Straz2009-09-141-3/+19
| | | | | | Cache the results from the rstat packet and use that file size during the following sendfile so we don't send more than qacp is expecting. This should allow us to qacp root@host:/var/log/messages
* Check Makefile to make an archive from gitv1.24-2Nathan Straz2009-04-171-11/+7
|
* Fix up spec file to work with proper tarballsNathan Straz2009-04-171-8/+11
|
* Bump version for new buildv1.24-1Nathan Straz2009-04-171-1/+9
|
* [qarsh] Handle a very broken qarshdNathan Straz2009-03-271-1/+5
| | | | | | If qarshd is broken enough that it can't load libxml2.so, it won't return an XML packet which we can parse. set_remote_user() really needs to error out of we didn't get a packet back.
* [btime] Increase time to wait for responseNathan Straz2009-03-271-1/+1
| | | | | A quarter of a second may be too short for some connections. Increasing it to half a second should make it more reliable.