Chris PeBenito
c224995eeb
Fully configure logging in CLI tools.
2015-03-25 13:40:03 -04:00
Chris PeBenito
402c6d1c6f
seinfo: add useful expanded info for attributes
2015-03-22 11:46:44 -04:00
Chris PeBenito
b7ae7520a7
Add --common option to seinfo for CommonQuery.
2015-03-20 11:50:25 -04:00
Chris PeBenito
1dd17a0718
Remove unnecessary option defaults in CLI tools.
2015-03-19 15:20:37 -04:00
Chris PeBenito
de716ba6a5
Add logging.
...
Not comprehensive yet. Only planning to do setools pkg (not policyrep),
with the exception being the SELinuxPolicy class in policyrep.
Avoids performance-critical paths. Use only info and debug so in normal
cases the user only sees messages if they ask for it (e.g. -v).
2015-03-19 08:07:23 -04:00
Chris PeBenito
4ecd6d00a5
Implement TypeAttributeQuery.
...
closes #13
closes #14
2015-03-16 10:46:33 -04:00
Chris PeBenito
39898d9572
Fix dereferencing in policyrep.typeattr factories.
...
Qpol already dereferences aliases internally.
2015-03-16 10:40:53 -04:00
Chris PeBenito
f4b1b68195
Rename type attribute interfaces.
...
Make sure they reflect that they are for type rather than role attributes.
2015-03-16 10:38:43 -04:00
Chris PeBenito
e3f2a98c43
Merge validatetrans into constraints in policyrep.
2015-03-14 14:52:58 -04:00
Chris PeBenito
3c8afd93e2
Reorder seinfo options.
2015-03-13 13:00:55 -04:00
Chris PeBenito
659ae2b7b2
Implement ValidatetransQuery.
...
Still needs unit tests.
2015-03-12 13:45:42 -04:00
Chris PeBenito
6849f127a7
Implement permissive types query in seinfo.
2015-03-08 15:00:51 -04:00
Chris PeBenito
8812f02411
Implement part of ConstraintQuery.
...
Still requires criteria on the constraint expression.
closes #6
closes #12
2015-03-08 14:50:43 -04:00
Chris PeBenito
edb19126c9
Add --debug options to CLI tools.
...
Catch all exceptions in the main bulk of the CLI code. We can't do anything
if there is an exception, so either print the error message from the
exception, or print the traceback if debug is enabled.
2015-03-07 11:41:04 -05:00
Chris PeBenito
ac19359b71
Implement SensitivityQuery
...
closes #19
closes #20
2015-03-07 11:16:59 -05:00
Chris PeBenito
e55764700c
Refactor MLS-related objects.
...
Drop the "MLS" prepended to category, sensitivity, level, and range
objects.
2015-03-07 09:39:01 -05:00
Chris PeBenito
320c5e60f2
Implement MLSCategoryQuery.
...
closes #21
2015-03-06 09:19:35 -05:00
Chris PeBenito
2f44b599ca
Reflow lines with new max line length.
...
Undo past whitespace fixes that are now unnecessary now that the max
line length increased to 100.
2015-02-14 10:40:38 -05:00
Chris PeBenito
2d1c9184ed
Reorder parameters to meet PEP8 standards.
...
Except max line length of 100.
2015-02-12 13:59:54 -05:00
Chris PeBenito
a809d3c557
Change to ternary for MLS enabled/disabled display in seinfo.
...
For style consistency in seinfo.
2015-02-06 09:11:44 -05:00
Chris PeBenito
7a9915f34a
Move seinfo --flat option out of components option group.
2015-02-06 09:10:06 -05:00
Chris PeBenito
d2bc5be9d9
Whitespace fix in seinfo.
2015-02-06 09:08:45 -05:00
Fernand Lone-Sang
daa53937de
add a --flat option to seinfo
2015-02-06 00:22:46 +01:00
Fernand Lone-Sang
3b324d7f5e
adding a --all switch to seinfo
...
There are 3 major changes in this commit:
1/ Setting the default values to None instead of "". Indeed, when --all is
passed to the command line, default values are set to "" making the
'if insinstance(xxx, str)' being True, and thus the script takes the wrong
branch.
2/ if/elif/else have been replaced by if/else structure, to enable selection of
multiple switches. Selected component queries are stacked and displayed at
the end
3/ like the original seinfo, we append some descriptions string (info: count +
indented results) to the output
2015-02-04 10:25:03 +01:00
Chris PeBenito
c687d1d473
Fix copy-paste error in seinfo.
2014-11-30 16:27:55 -05:00
Chris PeBenito
36abf44bce
PEP8 fixes in seinfo
2014-11-30 13:31:31 -05:00
Chris PeBenito
6258b648aa
Implement policy statistics functions.
...
Do counting in C where possible.
2014-11-30 13:30:36 -05:00
Chris PeBenito
16f2eab30c
Restructure seinfo
...
* Restructure queries to only have one output
* Fix portcon help info to be clearer about specifying ports
* Cover all functions with exception handling
2014-11-30 09:34:59 -05:00
Chris PeBenito
9fec147c52
Implement portcon query.
2014-11-24 22:08:34 -05:00
Chris PeBenito
4f5486f033
Add netifcon query to seinfo.
2014-11-08 22:44:58 -05:00
Chris PeBenito
fc597fed99
Add nodecon query.
...
It could use IPv6 tests, but those have the same code paths as IPv4.
2014-11-05 13:09:35 -05:00
Chris PeBenito
574919cec3
Be explicit about which field to match in seinfo.
2014-11-03 15:00:02 -05:00
Chris PeBenito
2842962942
Add FSUseQuery.
2014-11-03 13:50:06 -05:00
Chris PeBenito
4e7aeed9ff
Implement genfscon query.
2014-11-02 10:47:30 -05:00
Chris PeBenito
f28682b88e
Fix SWIG exception raising in qpol_policy constructor.
2014-10-28 10:37:47 -04:00
Chris PeBenito
109ba68a92
Rename libapol package to setools.
2014-10-24 21:23:13 -04:00
Chris PeBenito
d1050e4d9c
Add initial SID query.
...
Range portion of context match still needs to be defined.
2014-10-08 11:31:05 -04:00
Chris PeBenito
997be5787b
Implement object class and commons queries.
2014-08-01 08:56:29 -04:00
Chris PeBenito
917327f345
Implement role query.
2014-07-21 13:26:30 -04:00
Chris PeBenito
8ea6da9c2f
Add user implementation and user query.
...
TODOL: MLS default level and range criteria
2014-07-17 09:39:06 -04:00
Chris PeBenito
39505d0295
Initial public release.
2014-07-08 14:28:55 -04:00
