Go to file
Thomas Hurd c046d974c5 libsepol: bool_copy_callback set state on creation
Boolean states are only written on a declaration.
If a module is turned off which includes a tunable declaration that
is required in another module, the state is never set. This patch
sets the state when the booldatum is created so that an uninitialized
memory read does not occur in cond_write_bool and write garbage to
the link binary.  This can cause a failure in cond_read_bool when
running semodule_expand.

Signed-off-by: Thomas Hurd <thurd@tresys.com>
2015-03-19 14:33:47 -04:00
checkpolicy Update ChangeLogs. 2015-03-18 08:37:10 -04:00
libselinux Update libselinux and policycoreutils ChangeLog. 2015-03-13 14:18:34 -04:00
libsemanage Update libsemanage ChangeLog. 2015-03-19 13:02:52 -04:00
libsepol libsepol: bool_copy_callback set state on creation 2015-03-19 14:33:47 -04:00
policycoreutils Update ChangeLogs. 2015-03-18 08:37:10 -04:00
scripts scripts: update release script to not output file name twice 2014-12-03 10:06:26 -05:00
sepolgen Update ChangeLogs. 2015-03-18 08:37:10 -04:00
.gitignore global: gitignore: add a couple of more editor backup filetypes 2013-02-01 12:14:57 -05:00
Makefile libselinux: additional makefile support for rubywrap 2012-06-28 11:21:16 -04:00
README Add further build dependencies. 2015-02-23 09:08:13 -05:00

README

Please submit all bug reports and patches to selinux@tycho.nsa.gov.
Subscribe via selinux-join@tycho.nsa.gov.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig ustr-devel

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.