~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2014-10-24	selinux: fix handling of relative paths when setting up create label	Lennart Poettering

2014-10-23	label: unify code to make directories, symlinks	Lennart Poettering

2014-10-23	selinux: clean up selinux label function naming	Lennart Poettering

2014-10-23	selinux: simplify and unify logging	Lennart Poettering
	Normally we shouldn#t log from "library" functions, but SELinux is weird, hence upgrade security messages uniformly to LOG_ERR when in enforcing mode.
2014-10-23	selinux: rework label query APIs	Lennart Poettering
	APIs that query and return something cannot silently fail, they must either return something useful, or an error. Fix that. Also, properly rollback socket unit fd creation when something goes wrong with the security framework.
2014-10-23	smack: rework SMACK label fixing code to follow more closely the semantics ↵	Lennart Poettering
	of the matching selinux code
2014-10-23	selinux: make use of cleanup gcc magic	Lennart Poettering

2014-10-23	mac: also rename use_{smack,selinux,apparmor}() calls so that they share the ↵	Lennart Poettering
	new mac_{smack,selinux,apparmor}_xyz() convention
2014-10-23	mac: rename apis with mac_{selinux/smack}_ prefix	WaLyong Cho

2014-10-23	label: rearrange mandatory access control(MAC) apis	WaLyong Cho
	move label apis to selinux-util.ch or smack-util.ch appropriately.
2013-10-10	security: rework selinux, smack, ima, apparmor detection logic	Lennart Poettering
	Always cache the results, and bypass low-level security calls when the respective subsystem is not enabled.
2012-10-03	build-sys: fix !HAVE_SELINUX case	Colin Walters

2012-10-02	selinux: rework selinux access check logic	Lennart Poettering
	a) Instead of parsing the bus messages inside of selinux-access.c simply pass everything pre-parsed in the functions b) implement the access checking with a macro that resolves to nothing on non-selinux builds c) split out the selinux checks into their own sources selinux-util.[ch] d) this unifies the job creation code behind the D-Bus calls Manager.StartUnit() and Unit.Start().