2004-07-24 Havoc Pennington <hp@redhat.com>
authorHavoc Pennington <hp@redhat.com>
Fri, 30 Jul 2004 05:59:34 +0000 (05:59 +0000)
committerHavoc Pennington <hp@redhat.com>
Fri, 30 Jul 2004 05:59:34 +0000 (05:59 +0000)
commit1e9b185b0c274ef0d684b1e43418388225321e72
tree66bb08beb9ea1b4250953294134e2c995f8adf34
parent4076d31c71bee332c4a697597a93345b45850b33
2004-07-24  Havoc Pennington  <hp@redhat.com>

SELinux support from Matthew Rickard <mjricka@epoch.ncsc.mil>

* bus/selinux.c, bus/selinux.h: new file encapsulating selinux
functionality

* configure.in: add --enable-selinux

* bus/policy.c (bus_policy_merge): add FIXME to a comment

* bus/main.c (main): initialize and shut down selinux

* bus/connection.c: store SELinux ID on each connection, to avoid
repeated getting of the string context and converting it into
an ID

* bus/bus.c (bus_context_get_policy): new accessor, though it
isn't used
(bus_context_check_security_policy): check whether the security
context of sender connection can send to the security context of
recipient connection

* bus/config-parser.c: add parsing for <selinux> and <associate>

* dbus/dbus-transport.c (_dbus_transport_get_unix_fd): to
implement dbus_connection_get_unix_fd()

* dbus/dbus-connection.c (dbus_connection_get_unix_fd): new
function, used by the selinux stuff
24 files changed:
ChangeLog
bus/Makefile.am
bus/bus.c
bus/bus.h
bus/config-parser.c
bus/config-parser.h
bus/connection.c
bus/connection.h
bus/dbus-daemon-1.1.in
bus/main.c
bus/policy.c
bus/selinux.c [new file with mode: 0644]
bus/selinux.h [new file with mode: 0644]
bus/services.c
bus/services.h
bus/test-main.c
configure.in
dbus/dbus-connection.c
dbus/dbus-connection.h
dbus/dbus-transport-protected.h
dbus/dbus-transport-unix.c
dbus/dbus-transport.c
dbus/dbus-transport.h
test/data/valid-config-files/basic.conf