Commit Graph

37 Commits

Author SHA1 Message Date
Chris PeBenito
8d4d7b5666 sediff: add extended permission rules
-A will now diff allow and allowxperm rules.

Related to #73
2016-03-25 15:43:41 -04:00
Chris PeBenito
7d88a1424e cli: switch to logging.exception for debug reporting of unrecoverable exception. 2016-03-04 13:59:21 -05:00
Chris PeBenito
89a96a422a Change #! to use standard Python form 2016-02-26 09:12:34 -05:00
Chris PeBenito
a4d4920d3c PolicyDifference: implement typebounds diff.
Closes #67
2016-02-10 11:44:41 -05:00
Chris PeBenito
522ab7e7f6 sediff: fix capitalization in role allow output 2016-02-05 09:30:37 -05:00
Chris PeBenito
b1b1a36ae2 PolicyDifference: implement constraints diff
Closes #63
2016-02-05 09:30:37 -05:00
Chris PeBenito
742255643f sediff/PolicyDifferenceTest: use explicit sorting key on tuples
Guarantee stable output.
2016-02-02 08:52:30 -05:00
Chris PeBenito
ce02bfc5a5 PolicyDifference: implement default_* diff.
Closes #65
2016-02-01 09:15:51 -05:00
Chris PeBenito
008c698bfe PolicyDifference: implement policy properties diff
Closes #62
2016-01-23 09:57:29 -05:00
Chris PeBenito
69df208ab6 PolicyDifference: implement portcon diff
Closes #37
2016-01-21 10:00:55 -05:00
Chris PeBenito
b64fcea379 PolicyDifference: implement policy capabilities diff
Closes #64
2016-01-15 09:43:01 -05:00
Chris PeBenito
dbad48a742 PolicyDifference: implement nodecon diff
Closes #38
2016-01-15 09:43:01 -05:00
Chris PeBenito
485c9746b4 PolicyDifference: implement netifcon diff
Closes #39
2016-01-15 09:42:00 -05:00
Chris PeBenito
4f711f2e49 sediff: change initial sid output to statement-based. 2016-01-13 09:43:51 -05:00
Chris PeBenito
00bc854968 PolicyDifference: implement level decl difference
Closes #36
2016-01-12 16:12:33 -05:00
Chris PeBenito
afeb3561d2 PolicyDifference: implement genfscon diff
Closes #41
2016-01-11 14:43:11 -05:00
Chris PeBenito
d6e0d56fac PolicyDifference: implement fs_use_* diff
Closes #40
2016-01-10 11:44:11 -05:00
Chris PeBenito
975e27f2f3 sediff: fix copy-paste error in initial SIDs 2016-01-10 11:02:15 -05:00
Chris PeBenito
64d6d4d075 PolicyDifference: implement initial SID diff
Closes #42
2016-01-09 11:45:22 -05:00
Chris PeBenito
62d04d217f sediff: CLI argument parser updates
* add labeling statements (genfscon, nodecon, etc.)
* minor other tweaks
2016-01-09 11:38:12 -05:00
Chris PeBenito
2bd871ae18 PolicyDifference: implement sensitivities diff
Closes #34
2016-01-09 09:01:52 -05:00
Chris PeBenito
8b136a007c PolicyDifference: implement categories diff
Closes #35
2016-01-09 08:56:40 -05:00
Chris PeBenito
d59444ef0e PolicyDifference: implement Booleans diff 2016-01-08 15:30:39 -05:00
Chris PeBenito
451e549001 PolicyDifference: add type attribute diff
Closes #33
2016-01-08 11:25:13 -05:00
Chris PeBenito
aebe3f8706 PolicyDifference: implement user diff
Closes #29
2016-01-08 09:55:34 -05:00
Chris PeBenito
ceb2a2a04a sediff: misc cleanups
* Fix help text for -u and -b options
* Add info that full diff is done if no item is chosen
* Make the --stats option work
2016-01-07 15:47:51 -05:00
Chris PeBenito
cce7c505e2 sediff: fix except blocks to only catch the expected exception.
Fix copy-paste bugs exposed by this.
2016-01-07 13:29:38 -05:00
Chris PeBenito
b0ed2c5477 PolicyDifference: add RBAC rule differences
Closes #44
2016-01-07 11:44:33 -05:00
Chris PeBenito
460be62a66 sediff: fix copy-paste error in range_transition rendering
range_transitions never have filenames nor conditionals.
2016-01-07 11:29:11 -05:00
Chris PeBenito
0513f0bb5a diff: implement MLS rule (range_transition) diff.
Closes #45
2016-01-07 09:37:47 -05:00
Chris PeBenito
d9752bc1c2 sediff: add TE rules output 2016-01-02 18:20:09 -05:00
Chris PeBenito
16756d21d6 sediff: implement command-line options for partial diffs. 2016-01-02 17:54:40 -05:00
Chris PeBenito
92134725c1 PolicyDifference: add object class diff
Closes #28
2015-12-21 11:01:30 -05:00
Chris PeBenito
b3dbe6a8b3 PolicyDifference: implement common permission set diff
Closes #27
2015-12-18 19:39:02 -05:00
Chris PeBenito
36546e76ac sediff: sort output 2015-12-18 19:03:34 -05:00
Chris PeBenito
e5bca0c409 sediff: add initial role and type output 2015-12-18 16:00:01 -05:00
Chris PeBenito
7330b7894a sediff: add skeleton.
Implement the CLI parser and diff creation.
2015-12-18 11:21:13 -05:00