Commit Graph

44 Commits

Author SHA1 Message Date
Chris PeBenito
4684eca5bc tests: Revise unit tests for binary-only policy support.
Closes #72
2018-06-15 20:26:49 -04:00
Chris PeBenito
51b91d6130 Convert policyrep and SWIG wrapper into Cython libpolicyrep. 2018-06-15 20:26:49 -04:00
Chris PeBenito
78a15c92ac Nodecon: Implement network property.
The network property will return an IPv4Network or IPv6Network based on the
nodecon.  If the policy has host bits set, the ipaddress module will
simply ignore the host bits, so there may be unexpected results in network
comparisons.

Closes #108
2017-09-17 09:43:13 -04:00
Chris PeBenito
96428e6309 Implement an enumeration for *bounds rule types. 2016-09-03 16:44:13 -04:00
Chris PeBenito
9648d013a2 Implement an enumeration for constraint rule type. 2016-09-03 16:44:13 -04:00
Chris PeBenito
693b5a435b Implement an enumeration for default rule type, value, and range value. 2016-09-03 16:44:13 -04:00
Chris PeBenito
8ea292f934 Implement an enumeration for fs_use_* ruletype. 2016-09-03 16:44:07 -04:00
Chris PeBenito
4b5b6c0970 Implement an enumeration for MLS rule type. 2016-09-03 16:40:54 -04:00
Chris PeBenito
a441a92937 Implement an enumeration for RBAC rule type. 2016-09-03 16:19:52 -04:00
Chris PeBenito
f3fb462c88 Implement an enumeration for TE rule types. 2016-09-03 16:17:07 -04:00
Chris PeBenito
47d8eda957 TERulesDifference: add extended permission rules
Related to #73
2016-03-25 15:33:07 -04:00
Chris PeBenito
a4d4920d3c PolicyDifference: implement typebounds diff.
Closes #67
2016-02-10 11:44:41 -05:00
Chris PeBenito
b1b1a36ae2 PolicyDifference: implement constraints diff
Closes #63
2016-02-05 09:30:37 -05:00
Chris PeBenito
1a21b2e0dd PolicyDifferenceTest: test for None rather than False where appropriate. 2016-02-02 09:00:42 -05:00
Chris PeBenito
742255643f sediff/PolicyDifferenceTest: use explicit sorting key on tuples
Guarantee stable output.
2016-02-02 08:52:30 -05:00
Chris PeBenito
ce02bfc5a5 PolicyDifference: implement default_* diff.
Closes #65
2016-02-01 09:15:51 -05:00
Chris PeBenito
acaee3a3d3 Implement MLS to standard (non-MLS) policy diff test suite
Closes #61
2016-01-26 11:01:35 -05:00
Chris PeBenito
1db73d396d PolicyDifferenceTest, PolicyDifferenceTestNoDiff: fix setup 2016-01-26 09:44:10 -05:00
Chris PeBenito
008c698bfe PolicyDifference: implement policy properties diff
Closes #62
2016-01-23 09:57:29 -05:00
Chris PeBenito
87d9d56a55 libqpol: stop adding all types to object_r.
This is not what is in the policy. The object_r behavior is a special case
in the kernel code.
2016-01-22 09:28:23 -05:00
Chris PeBenito
69df208ab6 PolicyDifference: implement portcon diff
Closes #37
2016-01-21 10:00:55 -05:00
Chris PeBenito
3227fb87de PolicyDifferenceTest: fix invalid policies.
Found the policy compile-load has a bug and does not detect if a user's
default level is not within the allowed range.

Opened #72 to track.
2016-01-20 14:13:01 -05:00
Chris PeBenito
b64fcea379 PolicyDifference: implement policy capabilities diff
Closes #64
2016-01-15 09:43:01 -05:00
Chris PeBenito
dbad48a742 PolicyDifference: implement nodecon diff
Closes #38
2016-01-15 09:43:01 -05:00
Chris PeBenito
485c9746b4 PolicyDifference: implement netifcon diff
Closes #39
2016-01-15 09:42:00 -05:00
Chris PeBenito
00bc854968 PolicyDifference: implement level decl difference
Closes #36
2016-01-12 16:12:33 -05:00
Chris PeBenito
afeb3561d2 PolicyDifference: implement genfscon diff
Closes #41
2016-01-11 14:43:11 -05:00
Chris PeBenito
d6e0d56fac PolicyDifference: implement fs_use_* diff
Closes #40
2016-01-10 11:44:11 -05:00
Chris PeBenito
5728f87111 PolicyDifferenceTest: fix check types in modified sensitivity test 2016-01-09 11:48:07 -05:00
Chris PeBenito
64d6d4d075 PolicyDifference: implement initial SID diff
Closes #42
2016-01-09 11:45:22 -05:00
Chris PeBenito
2bd871ae18 PolicyDifference: implement sensitivities diff
Closes #34
2016-01-09 09:01:52 -05:00
Chris PeBenito
8b136a007c PolicyDifference: implement categories diff
Closes #35
2016-01-09 08:56:40 -05:00
Chris PeBenito
3bba5acf5e PolicyDifferenceTest(NoDiff): fix copy/paste errors 2016-01-08 15:33:59 -05:00
Chris PeBenito
d59444ef0e PolicyDifference: implement Booleans diff 2016-01-08 15:30:39 -05:00
Chris PeBenito
451e549001 PolicyDifference: add type attribute diff
Closes #33
2016-01-08 11:25:13 -05:00
Chris PeBenito
aebe3f8706 PolicyDifference: implement user diff
Closes #29
2016-01-08 09:55:34 -05:00
Chris PeBenito
b0ed2c5477 PolicyDifference: add RBAC rule differences
Closes #44
2016-01-07 11:44:33 -05:00
Chris PeBenito
0513f0bb5a diff: implement MLS rule (range_transition) diff.
Closes #45
2016-01-07 09:37:47 -05:00
Chris PeBenito
c913989f8c PolicyDifference: implement TE rule difference
Closes #43
2016-01-02 18:17:39 -05:00
Chris PeBenito
92134725c1 PolicyDifference: add object class diff
Closes #28
2015-12-21 11:01:30 -05:00
Chris PeBenito
b3dbe6a8b3 PolicyDifference: implement common permission set diff
Closes #27
2015-12-18 19:39:02 -05:00
Chris PeBenito
12b13406f1 PolicyDifference: add role difference
Closes #30
2015-12-18 11:07:37 -05:00
Chris PeBenito
7a13a9136a PolicyDifferenceTest: drop test numbers 2015-12-18 09:35:52 -05:00
Chris PeBenito
eae9ff97d5 setools: add PolicyDifference class
Begin diff functions by implementing type difference function.

Closes #32
2015-12-17 11:08:35 -05:00