summaryrefslogtreecommitdiff
path: root/Xext/xselinux.c
AgeCommit message (Expand)Author
2009-07-29selinux: Only activate if policy says to be an object managerAdam Jackson
2009-07-26Replace dixLookupResource by dixLookupResourceBy{Type,Class}Keith Packard
2009-05-11xselinux: Relax ownership restriction on SetSelectionUseContext.Eamon Walsh
2009-04-09xselinux: Don't BadAlloc in List* requests if there are no items to list.Eamon Walsh
2009-04-08xselinux: Don't require incoming context strings to be null-terminated.Eamon Walsh
2009-03-27selinux: Add support for avc_acquire_netlink_fd()Adam Jackson
2009-03-27selinux: Don't bother relabeling resources that are being destroyedAdam Jackson
2009-03-03This patch changes all places in the X code to use _raw functions. TheEric Paris
2008-11-25xselinux: use "raw context" variants of getpeercon() and getcon().Eamon Walsh
2008-11-25xselinux: don't pass a NULL key string to selabel_lookup().Eamon Walsh
2008-10-30xselinux: send more specific message types to libaudit.Eamon Walsh
2008-08-28Attempt getpeercon() on remote sockets as well as local ones.Eamon Walsh
2008-08-28Prepare for array-index based devPrivates.Tomas Carnecky
2008-06-17SELinux: Add an extension alias under the OS-agnostic "Flask" name.Eamon Walsh
2008-03-31XSELinux: Add a request to get a client's context from a resource ID.Eamon Walsh
2008-03-28XSELinux: Add xorg.conf option for permissive/enforcing/disabled.Eamon Walsh
2008-03-20XSELinux: Do a check for whether background "None" is allowed.Eamon Walsh
2008-03-20XSELinux: Correctly handle some permission bits that are used more than once.Eamon Walsh
2008-03-04xselinux: Implement polyinstantiation support and related protocol.Eamon Walsh
2008-02-29XACE: Add generic support for property and selection polyinstantiation.Eamon Walsh
2008-02-29dix: Refactoring of selection code to allow for polyinstantiation.Eamon Walsh
2008-02-28xselinux: Don't require device "read" permission for XQueryPointer.Eamon Walsh
2008-02-28xselinux: Log messages to both libaudit and Xorg.0.log.Eamon Walsh
2008-02-27xselinux: Prefix a few remaining error messages with "SELinux".Eamon Walsh
2008-02-27xselinux: Don't throw BadAccess if DixUnknownAccess is passed in to a hook.Eamon Walsh
2008-02-26xselinux: Stub out selection protocol requests.Eamon Walsh
2008-02-26xselinux: Rip out the selection code in advance of polyinstantiation support.Eamon Walsh
2008-02-13xselinux: Add use to permission map for devices.Eamon Walsh
2008-02-07xselinux: Use the device name in debugging output.Eamon Walsh
2008-02-07xselinux: Split devPrivate state into subject and object records.Eamon Walsh
2008-02-07xselinux: Add getattr and setattr to the permission map for properties.Eamon Walsh
2008-02-05XACE: Push the dix "structure" includes down to the security modules.Eamon Walsh
2008-02-05XACE: Move the property access hook to its own function.Eamon Walsh
2008-01-24xselinux: Rename SelectionManager to more generic SecurityManager.Eamon Walsh
2008-01-24xselinux: Use a privileged bit in the state instead of passing an indexEamon Walsh
2008-01-24xselinux: Implement "get context" protocol requests.Eamon Walsh
2008-01-24xselinux: Whitespace fixups.Eamon Walsh
2007-12-28xselinux: Fix whitespace warnings.Eamon Walsh
2007-12-28xselinux: Remove "X" prefix on remaining functions and strings.Eamon Walsh
2007-12-28xselinux: don't FatalError on an invalid class mapping, just disable support.Eamon Walsh
2007-12-28xselinux: Implement swapped protocol request logic.Eamon Walsh
2007-12-20xselinux: Send AVC messages to audit system instead of log file/stderr.Eamon Walsh
2007-12-12xselinux: Add new protocol for setting device create context.Eamon Walsh
2007-11-20registry: Remove registry code from SELinux extension.Eamon Walsh
2007-11-14xselinux: adjust receive hook to use new synthetic_event class.Eamon Walsh
2007-11-09xselinux: add new synthetic_event security class, and fix registry code.Eamon Walsh
2007-11-05xselinux: Register SELinux extension protocol names.Eamon Walsh
2007-10-26xselinux: Add a SetDeviceContext request and stubs for more requests.Eamon Walsh
2007-10-25xselinux: Don't include the client in the receive hook audit messages.Eamon Walsh
2007-10-25xselinux: Label the default device directly with the process context.Eamon Walsh