Chris PeBenito
580ccf880e
Rebase policyrep to new qpol interface.
2014-10-24 21:08:22 -04:00
Chris PeBenito
8363f8edf7
Import libqpol from setools3.
...
Break setools3 dependence. Also fix SWIG wrapper to work with SWIG 2.x.
2014-10-24 21:00:24 -04:00
Chris PeBenito
8649a761fa
Add additional dta and infoflow test policy.
...
Get full test coverage on graph building functions.
2014-10-13 10:53:13 -04:00
Chris PeBenito
30c277745f
Remove unnecessary condition out of dta build graph.
2014-10-13 10:48:32 -04:00
Chris PeBenito
f63c637349
Update SETools 3 dependency
2014-10-10 13:29:37 -04:00
Chris PeBenito
cf0c64a757
Add initial SID query unit tests.
2014-10-10 10:28:09 -04:00
Chris PeBenito
e11b31de63
Fix regex compilation in ContextQuery
...
A copy-paste error.
2014-10-10 10:25:44 -04:00
Chris PeBenito
d1050e4d9c
Add initial SID query.
...
Range portion of context match still needs to be defined.
2014-10-08 11:31:05 -04:00
Chris PeBenito
61e0a852e5
Add permissive type query.
2014-10-02 14:29:07 -04:00
Chris PeBenito
0d5f9cff12
Tweak TERule conditional rendering.
...
No need for the cond intermediate object.
2014-10-02 11:42:17 -04:00
Chris PeBenito
04c18218b2
Add RBAC rule query unit tests.
2014-10-02 11:37:28 -04:00
Chris PeBenito
10e07c472a
Leverage new libqpol function for getting object class from role trans.
2014-10-01 10:53:04 -04:00
Chris PeBenito
3f90e48677
Add MLS level comparison.
2014-09-25 08:57:29 -04:00
Chris PeBenito
8de369a517
Add permissive type generator function.
2014-09-22 13:19:27 -04:00
Chris PeBenito
69a7b577b4
Add compact category notation implementation.
2014-09-17 15:38:53 -04:00
Chris PeBenito
32b1380626
Add __contains__ to ConditionalExpr.
...
For checking if a Boolean is in a conditional expression.
2014-08-26 09:25:20 -04:00
Chris PeBenito
c4325adf9c
Handle MLS-disabled policies in Context class.
...
Add an exception for when MLS is disabled.
2014-08-26 09:22:34 -04:00
Chris PeBenito
86b67ca96a
Initial constraints implementation.
2014-08-22 08:44:58 -04:00
Chris PeBenito
4e995cc13f
Convert unit tests over to assertListEqual where possible.
...
It makes determining what's wrong easier since it has a diff-style
output. Also put the expected list first, so the diff style makes sense.
2014-08-01 10:52:17 -04:00
Chris PeBenito
09554705c1
Clarify set/regex options in relevant queries.
...
Set logic is used except in regex matching.
2014-08-01 09:00:07 -04:00
Chris PeBenito
e379eea919
Misc PEP 8 fixes.
2014-08-01 08:58:31 -04:00
Chris PeBenito
997be5787b
Implement object class and commons queries.
2014-08-01 08:56:29 -04:00
Chris PeBenito
a15c7ffd9b
Change commons permission from list to set.
...
Order isn't relevant.
2014-08-01 08:50:42 -04:00
Chris PeBenito
c419b9c3f0
Implement ObjClass and Common classes.
2014-07-24 09:37:30 -04:00
Chris PeBenito
ef7b9add4c
Raise exception for None being returned from qpol.
...
The C code returns NULL for cases such as getting the conditional for
unconditional rules. The SWIG passes that up as None rather than
raising exceptions.
Update TERule for this change.
2014-07-24 09:33:03 -04:00
Chris PeBenito
de06014e0f
Restructure TERule __str__
...
Eliminate instance check and try common case of getting perms; catch
exception for type_* rules case.
2014-07-24 09:15:23 -04:00
Chris PeBenito
3cdb59cdd0
Fix rolequery unit test for PEP8.
2014-07-21 13:45:09 -04:00
Chris PeBenito
7a571230e9
Add missing libapol rolequery import.
2014-07-21 13:42:10 -04:00
Chris PeBenito
917327f345
Implement role query.
2014-07-21 13:26:30 -04:00
Chris PeBenito
763d59db4d
Fix user statement rendering issues.
2014-07-17 09:52:16 -04:00
Chris PeBenito
8ea6da9c2f
Add user implementation and user query.
...
TODOL: MLS default level and range criteria
2014-07-17 09:39:06 -04:00
Chris PeBenito
39505d0295
Initial public release.
2014-07-08 14:28:55 -04:00
