summaryrefslogtreecommitdiff
path: root/Xext/xselinux.c
AgeCommit message (Expand)AuthorFilesLines
2009-07-14Xext: switch to byte counting functionsPeter Hutterer1-3/+3
2009-06-26xselinux: ignore property hook calls with the new Post access mode bit set.Eamon Walsh1-0/+4
2009-06-18xselinux: Move the security class mapping to the header file.Eamon Walsh1-26/+1
2009-05-11xselinux: Relax ownership restriction on SetSelectionUseContext.Eamon Walsh1-9/+0
2009-04-09xselinux: Don't BadAlloc in List* requests if there are no items to list.Eamon Walsh1-3/+3
2009-04-08xselinux: Don't require incoming context strings to be null-terminated.Eamon Walsh1-21/+45
2009-03-27selinux: Only activate if policy says to be an object managerAdam Jackson1-0/+4
2009-03-16selinux: Add support for avc_acquire_netlink_fd()Adam Jackson1-0/+29
2009-03-09Replace dixLookupResource by dixLookupResourceBy{Type,Class}Keith Packard1-1/+1
2009-03-03Fix 2 const warnings.Eamon Walsh1-1/+2
2009-03-03This patch changes all places in the X code to use _raw functions. TheEric Paris1-32/+32
2009-02-27selinux: Don't bother relabeling resources that are being destroyedAdam Jackson1-0/+2
2008-12-18xselinux: Use xace Xtrans wrappers instead of the now-inaccessible wrapees.Eamon Walsh1-6/+2
2008-11-25xselinux: use "raw context" variants of getpeercon() and getcon().Eamon Walsh1-2/+2
2008-11-25xselinux: don't pass a NULL key string to selabel_lookup().Eamon Walsh1-1/+1
2008-10-30xselinux: send more specific message types to libaudit.Eamon Walsh1-1/+13
2008-08-28Attempt getpeercon() on remote sockets as well as local ones.Eamon Walsh1-11/+10
2008-08-28Prepare for array-index based devPrivates.Tomas Carnecky1-3/+6
2008-06-17SELinux: Add an extension alias under the OS-agnostic "Flask" name.Eamon Walsh1-0/+2
2008-03-31XSELinux: Add a request to get a client's context from a resource ID.Eamon Walsh1-0/+33
2008-03-28XSELinux: Add xorg.conf option for permissive/enforcing/disabled.Eamon Walsh1-5/+26
2008-03-20XSELinux: Do a check for whether background "None" is allowed.Eamon Walsh1-0/+7
2008-03-20XSELinux: Correctly handle some permission bits that are used more than once.Eamon Walsh1-5/+20
2008-03-04xselinux: Implement polyinstantiation support and related protocol.Eamon Walsh1-359/+657
2008-02-29XACE: Add generic support for property and selection polyinstantiation.Eamon Walsh1-16/+13
2008-02-29dix: Refactoring of selection code to allow for polyinstantiation.Eamon Walsh1-2/+0
2008-02-28xselinux: Don't require device "read" permission for XQueryPointer.Eamon Walsh1-0/+11
2008-02-28xselinux: Log messages to both libaudit and Xorg.0.log.Eamon Walsh1-0/+1
2008-02-27xselinux: Prefix a few remaining error messages with "SELinux".Eamon Walsh1-7/+6
2008-02-27xselinux: Don't throw BadAccess if DixUnknownAccess is passed in to a hook.Eamon Walsh1-0/+2
2008-02-26xselinux: Stub out selection protocol requests.Eamon Walsh1-0/+52
2008-02-26xselinux: Rip out the selection code in advance of polyinstantiation support.Eamon Walsh1-31/+0
2008-02-13xselinux: Add use to permission map for devices.Eamon Walsh1-1/+1
2008-02-07xselinux: Use the device name in debugging output.Eamon Walsh1-3/+8
2008-02-07xselinux: Split devPrivate state into subject and object records.Eamon Walsh1-87/+149
2008-02-07xselinux: Add getattr and setattr to the permission map for properties.Eamon Walsh1-1/+1
2008-02-05XACE: Push the dix "structure" includes down to the security modules.Eamon Walsh1-6/+11
2008-02-05XACE: Move the property access hook to its own function.Eamon Walsh1-1/+1
2008-01-24xselinux: Rename SelectionManager to more generic SecurityManager.Eamon Walsh1-30/+30
2008-01-24xselinux: Use a privileged bit in the state instead of passing an indexEamon Walsh1-33/+27
2008-01-24xselinux: Implement "get context" protocol requests.Eamon Walsh1-3/+116
2008-01-24xselinux: Whitespace fixups.Eamon Walsh1-34/+32
2007-12-28xselinux: Fix whitespace warnings.Eamon Walsh1-12/+12
2007-12-28xselinux: Remove "X" prefix on remaining functions and strings.Eamon Walsh1-37/+37
2007-12-28xselinux: don't FatalError on an invalid class mapping, just disable support.Eamon Walsh1-2/+7
2007-12-28xselinux: Implement swapped protocol request logic.Eamon Walsh1-28/+41
2007-12-20xselinux: Send AVC messages to audit system instead of log file/stderr.Eamon Walsh1-1/+5
2007-12-12xselinux: Add new protocol for setting device create context.Eamon Walsh1-0/+32
2007-11-20registry: Remove registry code from SELinux extension.Eamon Walsh1-24/+0
2007-11-14xselinux: adjust receive hook to use new synthetic_event class.Eamon Walsh1-7/+9
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-25 15:36:07 +0000