~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2015-03-13	tree-wide: there is no ENOTSUP on linux	David Herrmann
	Replace ENOTSUP by EOPNOTSUPP as this is what linux actually uses.
2015-02-23	remove unused includes	Thomas Hindoe Paaboel Andersen
	This patch removes includes that are not used. The removals were found with include-what-you-use which checks if any of the symbols from a header is in use.
2014-12-04	selinux: figure out selinux context applied on exec() before closing all fds	Michal Sekletar
	We need original socket_fd around otherwise mac_selinux_get_child_mls_label fails with -EINVAL return code. Also don't call setexeccon twice but rather pass context value of SELinuxContext option as an extra argument.
2014-11-06	shared: create files even if the SELinux policy has no context for them	Michal Schmidt
	The SELinux policy defines no context for some files. E.g.: $ matchpathcon /run/lock/subsys /dev/mqueue /run/lock/subsys <<none>> /dev/mqueue <<none>> We still need to be able to create them. In this case selabel_lookup_raw() returns ENOENT. We should then skip setfscreatecon(), but still return success. It was broken since c34255bdb2 ("label: unify code to make directories, symlinks").
2014-10-24	selinux: fix handling of relative paths when setting up create label	Lennart Poettering

2014-10-23	label: unify code to make directories, symlinks	Lennart Poettering

2014-10-23	selinux: clean up selinux label function naming	Lennart Poettering

2014-10-23	selinux: simplify and unify logging	Lennart Poettering
	Normally we shouldn#t log from "library" functions, but SELinux is weird, hence upgrade security messages uniformly to LOG_ERR when in enforcing mode.
2014-10-23	selinux: rework label query APIs	Lennart Poettering
	APIs that query and return something cannot silently fail, they must either return something useful, or an error. Fix that. Also, properly rollback socket unit fd creation when something goes wrong with the security framework.
2014-10-23	smack: rework SMACK label fixing code to follow more closely the semantics ↵	Lennart Poettering
	of the matching selinux code
2014-10-23	selinux: make use of cleanup gcc magic	Lennart Poettering

2014-10-23	mac: also rename use_{smack,selinux,apparmor}() calls so that they share the ↵	Lennart Poettering
	new mac_{smack,selinux,apparmor}_xyz() convention
2014-10-23	mac: rename apis with mac_{selinux/smack}_ prefix	WaLyong Cho

2014-10-23	label: rearrange mandatory access control(MAC) apis	WaLyong Cho
	move label apis to selinux-util.ch or smack-util.ch appropriately.
2013-10-10	security: rework selinux, smack, ima, apparmor detection logic	Lennart Poettering
	Always cache the results, and bypass low-level security calls when the respective subsystem is not enabled.
2012-10-03	build-sys: fix !HAVE_SELINUX case	Colin Walters

2012-10-02	selinux: rework selinux access check logic	Lennart Poettering
	a) Instead of parsing the bus messages inside of selinux-access.c simply pass everything pre-parsed in the functions b) implement the access checking with a macro that resolves to nothing on non-selinux builds c) split out the selinux checks into their own sources selinux-util.[ch] d) this unifies the job creation code behind the D-Bus calls Manager.StartUnit() and Unit.Start().