Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove dangling %endifv1.26-3.el5 | Nathan Straz | 2010-09-15 | 1 | -2/+0 |
| | |||||
* | Bump version for new build | Nathan Straz | 2010-09-15 | 1 | -1/+5 |
| | |||||
* | Merge branch 'master' into rhel5 | Nathan Straz | 2010-09-15 | 1 | -3/+3 |
|\ | |||||
| * | Fix requires for selinux-policy build | Nathan Straz | 2010-09-15 | 1 | -3/+3 |
| | | | | | | | | | | These files need to be instaled before %post so mark the requirements as such. | ||||
| * | Turn SELinux BuildRequires to Requires | Nathan Straz | 2010-09-03 | 1 | -1/+1 |
| | | | | | | | | | | We need these on the install system since we're building the SELinux policy at install time. | ||||
* | | Merge branch 'master' into rhel5 | Nathan Straz | 2010-08-20 | 1 | -24/+11 |
|\| | | | | | | | | | | | | | Pull in changes to make selinux-policy generate at install time Conflicts: qarsh.spec - Merge together changelog | ||||
| * | Remove qarshd.pp from rpm file list | Nathan Straz | 2010-08-20 | 1 | -2/+1 |
| | | |||||
| * | Bump version for new releasev1.26-1 | Nathan Straz | 2010-08-20 | 1 | -1/+6 |
| | | |||||
| * | Remove pre-build selinux files | Nathan Straz | 2010-08-20 | 1 | -5/+1 |
| | | | | | | | | | | These are not going to be used at all since the post-install rebuild puts it all in /etc/selinux/... | ||||
| * | Don't build selinux-policy during build | Nathan Straz | 2010-08-20 | 1 | -4/+3 |
| | | | | | | | | | | | | The policy is dynamic so should be built on the system after install since we can't guarantee that the build chroot includes the latest selinux-policy package. | ||||
| * | Remove use of policyhelp | Nathan Straz | 2010-08-20 | 1 | -7/+1 |
| | | | | | | | | The file is gone is recent RHEL6 trees | ||||
* | | Bump version for new buildv1.25-7.el5 | Nathan Straz | 2010-06-30 | 1 | -1/+5 |
| | | |||||
* | | Resort qarshd.bad-interfaces | Nathan Straz | 2010-06-30 | 1 | -14/+14 |
| | | |||||
* | | Update SELinux policy to work with selinux-policy-2.4.6-279.el5 | Nathan Straz | 2010-06-30 | 1 | -0/+9 |
| | | |||||
* | | Merge branch 'rhel5' of ssh://sts-a//local/nstraz/git/qarsh into rhel5 | Nathan Straz | 2010-06-30 | 0 | -0/+0 |
|\ \ | |||||
| * | | [selinux] Require make | Nathan Straz | 2010-04-20 | 1 | -1/+1 |
| | | | | | | | | | | | | Make is needed to rebuild the qarshd selinux policy. | ||||
| * | | Bump release to include selinux changesv1.25-4 | Nathan Straz | 2009-12-03 | 1 | -1/+5 |
| | | | |||||
| * | | Only include lvm and logging parts of system policy | root | 2009-12-03 | 2 | -17/+11 |
| | | | | | | | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name. | ||||
| * | | Bump version for new build with system interfacesv1.25-3 | Nathan Straz | 2009-12-01 | 1 | -1/+5 |
| | | | |||||
| * | | Add system interfaces to qarshd policy | Nathan Straz | 2009-12-01 | 2 | -1/+10 |
| | | | | | | | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-devel-2.4.6-264.el5. | ||||
| * | | Fix warnings from rpmlint | Nathan Straz | 2009-12-01 | 1 | -10/+10 |
| | | | | | | | | | | | | | | | - Switch to tabs on all fields - Change to valid groups | ||||
| * | | Bump release for conditional selinux buildv1.25-2 | Nathan Straz | 2009-11-20 | 1 | -1/+3 |
| | | | |||||
| * | | Don't build selinux stuff on rhel4 | Nathan Straz | 2009-11-20 | 1 | -0/+12 |
| | | | |||||
| * | | Bump version for new release | Nathan Straz | 2009-11-20 | 1 | -2/+9 |
| | | | |||||
* | | | Bump release to include selinux changes | Nathan Straz | 2010-06-30 | 1 | -1/+5 |
| | | | |||||
* | | | Only include lvm and logging parts of system policy | root | 2010-06-30 | 1 | -13/+0 |
| | | | | | | | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name. | ||||
* | | | Bump version for new build with system interfaces | Nathan Straz | 2010-06-30 | 1 | -1/+5 |
| | | | |||||
* | | | Add system interfaces to qarshd policy | Nathan Straz | 2010-06-30 | 1 | -0/+23 |
| | | | | | | | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-devel-2.4.6-264.el5. | ||||
* | | | Bump release for conditional selinux build | Nathan Straz | 2010-06-30 | 1 | -1/+3 |
| | | | |||||
* | | | Don't build selinux stuff on rhel4 | Nathan Straz | 2010-06-30 | 1 | -0/+12 |
| |/ |/| | |||||
* | | Allow all domains more rights to qarshd_t sockets | Nathan Straz | 2010-06-30 | 1 | -2/+4 |
| | | | | | | | | | | | | qarshd_t sockets end up as stdin, stdout, and stderr. Some programs will fstat them to determine what they are or change flags on the file descriptor, this is ok. | ||||
* | | [selinux] Require make | Nathan Straz | 2010-06-17 | 1 | -1/+1 |
| | | | | | | | | Make is needed to rebuild the qarshd selinux policy. | ||||
* | | Set child_pid to 0 after child returns | Nathan Straz | 2010-06-03 | 1 | -0/+1 |
| | | | | | | | | This is mostly for clarity while debugging qarshd. | ||||
* | | Close file descriptors left open by parent process | Nathan Straz | 2010-04-28 | 1 | -0/+4 |
| | | | | | | | | | | | | Running things in parallel with pthreads in perl can lead to file descriptor leaks which may cause hangs in qarsh. | ||||
* | | Only include lvm and logging parts of system policy | Nathan Straz | 2009-12-03 | 2 | -17/+11 |
| | | | | | | | | | | There were a lot of bad things to include in the system layer. Exclude anything with "spec" in the name. | ||||
* | | Add system interfaces to qarshd policy | Nathan Straz | 2009-11-30 | 2 | -1/+8 |
| | | | | | | | | | | This allows qarshd to make any system interface transition. Tested against selinux-policy-3.6.32-41.fc12.noarch. | ||||
* | | Fix warnings from rpmlint | Nathan Straz | 2009-11-24 | 1 | -10/+10 |
| | | | | | | | | | | - Switch to tabs on all fields - Change to valid groups | ||||
* | | Bump version for new releasev1.25-1 | Nathan Straz | 2009-11-20 | 1 | -2/+9 |
| | | |||||
* | | Update bad-interfaces for Fedora 12 | Nathan Straz | 2009-11-20 | 1 | -17/+11 |
|/ | |||||
* | Pull in all services and apps interfaces | Nathan Straz | 2009-11-19 | 4 | -21/+46 |
| | | | | | | | | This isn't completely possible because some interfaces cause syntax or load errors. We need to keep a list of interfaces to filter out to get something that loads. This adds gxpp as a requirement to build qarsh. | ||||
* | Clean the SELinux directory after install | Nathan Straz | 2009-10-22 | 1 | -0/+1 |
| | | | | This will prevent temp files from being packaged | ||||
* | Add SELinux policy for qarshd | Nathan Straz | 2009-10-22 | 6 | -1/+116 |
| | | | | We generate the policy based on which services we want to test. | ||||
* | Only look up local username if remote not specified | Nathan Straz | 2009-10-08 | 1 | -4/+4 |
| | | | | | | In rare cases the getpwuid() call will fail because of a YP or LDAP timeout. If we're not using the local username we shouldn't even bother looking it up. | ||||
* | Add quiet option, document exit status | Nathan Straz | 2009-10-01 | 2 | -7/+16 |
| | |||||
* | Handle growing files better in qacp | Nathan Straz | 2009-09-14 | 1 | -3/+19 |
| | | | | | | Cache the results from the rstat packet and use that file size during the following sendfile so we don't send more than qacp is expecting. This should allow us to qacp root@host:/var/log/messages | ||||
* | Check Makefile to make an archive from gitv1.24-2 | Nathan Straz | 2009-04-17 | 1 | -11/+7 |
| | |||||
* | Fix up spec file to work with proper tarballs | Nathan Straz | 2009-04-17 | 1 | -8/+11 |
| | |||||
* | Bump version for new buildv1.24-1 | Nathan Straz | 2009-04-17 | 1 | -1/+9 |
| | |||||
* | [qarsh] Handle a very broken qarshd | Nathan Straz | 2009-03-27 | 1 | -1/+5 |
| | | | | | | If qarshd is broken enough that it can't load libxml2.so, it won't return an XML packet which we can parse. set_remote_user() really needs to error out of we didn't get a packet back. | ||||
* | [btime] Increase time to wait for response | Nathan Straz | 2009-03-27 | 1 | -1/+1 |
| | | | | | A quarter of a second may be too short for some connections. Increasing it to half a second should make it more reliable. |