From: Steve Lawrence <slawrence@tresys.com>
To: Richard Haines <richard_c_haines@btinternet.com>,
<selinux@tycho.nsa.gov>, <setools-bugs@tresys.com>
Subject: Re: [PATCH 0/4] APOL Enhancements to support additional policy features
Date: Fri, 25 Apr 2014 12:32:52 -0400 [thread overview]
Message-ID: <535A8E34.5090009@tresys.com> (raw)
In-Reply-To: <1396968778-19260-1-git-send-email-richard_c_haines@btinternet.com>
On 04/08/2014 10:52 AM, Richard Haines wrote:
> These four patches will update setools-3.3.8.tar.bz2 available from
> http://oss.tresys.com/projects/setools/wiki/download
>
> I know this is not being fully supported but as I use APOL frequently
> I thought I would update it to support the latest policy version 29 (I
> could be the only user!!!). Tested on latest Fedora 20 x86_64
>
> The enhancements and bug fixes are listed below. All patches should be
> applied to setools-3.3.8 and then built as follows:
>
> autoreconf -i -s
> ./configure
> make
> make install
>
> This will put the binaries in /usr/local/bin, data files in
> /usr/local/share/setool-3.3, and libraries in /usr/local/lib.
> Assuming that /usr/local/bin is in your $PATH and /usr/local/lib in
> $LD_LIBRARY_PATH everything should now work.
>
> PATH=/usr/local/bin:$PATH
> export LD_LIBRARY_PATH=/usr/local/lib
>
> APOL enhancements and bug fixes
> -------------------------------
> * Add permissive type and typebound support to Types tab.
> * Add new Constraints tab to search all constraint statements.
> * Add new Bounds tab to search for userbound, rolebound and
> typebound statements.
> * Add new policy capabilities tab.
> * Add filename type_transition support on TE Rules tab.
> * Add new Default Object tab to support defaultuser, defaultrole,
> defaulttype and defaultrange rules.
> * Add new Namespaces tab to list CIL namespaces. This will also
> show any users, roles, types, classes, booleans, sensitivities
> and categories declared in each namespace. A global namespace is
> automatically generated (GLOBAL-NS).
> * Update Query/Policy Summary page to show the number of new
> rules added plus the policy handle_unknown flag.
> * Fixed File Contexts tab to stop hang when building the fc
> index when broken links/files found (libsefs). Also fixes indexcon util.
> * Fixed Booleans tab to display CIL namespace booleans.
> * Updated apol_help.txt to reflect the changes made plus how to
> load the running policy.
>
All patches look good and applied. Thanks!
- Steve
prev parent reply other threads:[~2014-04-25 16:33 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-04-08 14:52 [PATCH 0/4] APOL Enhancements to support additional policy features Richard Haines
2014-04-08 15:38 ` Christopher J. PeBenito
2014-04-08 15:57 ` Daniel J Walsh
2014-04-08 18:01 ` Steve Lawrence
2014-04-10 13:02 ` Richard Haines
2014-04-08 17:51 ` Steve Lawrence
2014-04-10 13:00 ` Richard Haines
2014-04-09 17:17 ` Joshua Brindle
2014-04-12 9:42 ` Richard Haines
2014-04-25 16:32 ` Steve Lawrence [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=535A8E34.5090009@tresys.com \
--to=slawrence@tresys.com \
--cc=richard_c_haines@btinternet.com \
--cc=selinux@tycho.nsa.gov \
--cc=setools-bugs@tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.