4573cb2ce4
security: Revise set of permissions granted to untrusted clients.
...
Bug #14480 : untrusted access broken on 7.3.
2008-02-13 20:20:49 -05:00
e99aadbc26
xselinux: Add use to permission map for devices.
2008-02-13 20:20:49 -05:00
f3b3b37ec6
Use strerror instead of errno values in user strings.
2008-02-14 07:52:02 +11:00
62cfe88638
Redact all mention of PanoramiX from user strings.
2008-02-14 07:11:14 +11:00
0d492b2166
XACE: Move the selection access hook to its own function.
2008-02-12 19:59:10 -05:00
31934132a4
xselinux: Use the device name in debugging output.
2008-02-07 16:32:06 -05:00
6dcb7d732b
xselinux: Split devPrivate state into subject and object records.
2008-02-07 16:00:52 -05:00
2259b144f0
xselinux: Add getattr and setattr to the permission map for properties.
2008-02-07 14:35:02 -05:00
5c30327275
XACE: Push the dix "structure" includes down to the security modules.
2008-02-05 21:06:05 -05:00
bb1a577a68
XACE: Move the property access hook to its own function.
2008-02-05 20:07:08 -05:00
e915a26397
xselinux: Move the extension to extmod instead of being built-in.
2008-01-25 19:22:19 -05:00
f6a78ee143
XACE: Remove the extension code entirely, XACE is completely static now.
2008-01-25 18:04:10 -05:00
7724c30a75
XACE: Stop using fake requestVectors in favor of a simple hook call.
2008-01-25 17:28:17 -05:00
f82329b081
XACE: Don't need to actually register a protocol extension.
2008-01-25 16:20:46 -05:00
46794d0c96
xselinux: Rename SelectionManager to more generic SecurityManager.
2008-01-24 19:49:13 -05:00
6ffeecabb7
xselinux: Use a privileged bit in the state instead of passing an index
...
to the permission checking function.
2008-01-24 18:11:49 -05:00
7ba8e97cba
xselinux: Implement "get context" protocol requests.
2008-01-24 19:09:58 -05:00
f0bf9a5231
xselinux: Whitespace fixups.
2008-01-24 19:02:35 -05:00
be6c17fcf9
CVE-2007-6429: Always test for size+offset wrapping.
2008-01-21 16:13:21 +01:00
e9fa7c1c88
CVE-2007-6429: Don't spuriously reject <8bpp shm pixmaps.
...
Move size validation after depth validation, and only validate size if
the bpp of the pixmap format is > 8. If bpp < 8 then we're already
protected from overflow by the width and height checks.
2008-01-18 14:41:20 -05:00
6de61f8272
Fix for CVE-2007-6429 - MIT-SHM and EVI extensions integer overflows.
2008-01-17 15:28:42 +01:00
7dc1717ff0
Fix for CVE-2007-6428 - TOG-cup extension memory corruption.
2008-01-17 15:28:03 +01:00
e46f6ddecc
Yet another Xv extension byte swapping fix.
2008-01-16 14:24:22 +01:00
6844bd2e63
More Xv extension byte swapping fixes
2008-01-09 19:52:00 -08:00
c31aead0fe
[Kdrive] make XCalibrate 'orientation aware'
2008-01-08 12:31:47 +01:00
39cb782f28
XACE: DeleteCallbackList zeroes out its argument so don't do it twice.
2008-01-03 23:17:06 -05:00
cd0603c2dc
Bug #13765 : Heap corruption in XC-SECURITY extension code.
2008-01-03 21:41:02 -05:00
17a9714a67
Bug #13794 : Update MBE extension devPrivates to new interface.
2008-01-03 14:46:54 -05:00
dfd682b582
X.Org bug 4947/Sun bug 6646626: Xv extension not byte-swapping properly
...
X.Org Bugzilla #4947 <https://bugs.freedesktop.org/show_bug.cgi?id=4947 >
Sun bug 6646626 <http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6646626 >
Don't use swapped data after swapping it. When done swapping data,
send the swapped data, not the address of the pointer to it, to the client.
2008-01-02 19:27:22 -08:00
3b23dd9fd4
xselinux: Fix whitespace warnings.
2007-12-28 13:29:45 -05:00
643c52be32
xselinux: Remove "X" prefix on remaining functions and strings.
...
Should be evident from the context.
2007-12-28 13:27:28 -05:00
f4bc333fc1
xselinux: don't FatalError on an invalid class mapping, just disable support.
2007-12-28 13:27:28 -05:00
f3780ece52
xselinux: Implement swapped protocol request logic.
2007-12-28 13:27:28 -05:00
1bbf64ab11
xselinux: Remove unnecessary structure definition.
2007-12-28 13:27:28 -05:00
743008a481
Report serverClient resources in the X-Resource extension.
2007-12-23 14:27:14 -05:00
1393a97ea9
xselinux: Send AVC messages to audit system instead of log file/stderr.
2007-12-20 16:23:49 -05:00
66b00029e5
Xext: remove redefinition of Bool.
...
Thanks to Simon Thum.
2007-12-19 18:11:32 +10:30
51fab1eb30
Sun bug 6278039: Xevie checking wrong size in swapped XevieSelectInput requests
...
<http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6278039 >
2007-12-18 11:40:09 -08:00
97c82ce051
XACE: Restore the old background None behavior in response to bug #13683 .
...
From the X11 protocol spec:
"If background None is specified, the window has no defined background."
This means that toolkits and apps cannot rely on the "transparent" nature
of the current implementation! At some point before the next release,
XACE will switch back to a solid background as the default.
2007-12-17 23:12:01 -05:00
c8feb73f58
Merge branch 'master' into XACE-SELINUX
...
Conflicts:
Xext/EVI.c
Xext/bigreq.c
Xext/cup.c
Xext/dpms.c
Xext/fontcache.c
Xext/mitmisc.c
Xext/xcmisc.c
Xext/xf86bigfont.c
Xext/xtest.c
configure.ac
dbe/dbe.c
hw/darwin/darwin.h
hw/darwin/darwinEvents.c
hw/darwin/iokit/xfIOKit.h
hw/darwin/iokit/xfIOKitCursor.c
hw/darwin/quartz/fullscreen/fullscreen.c
hw/darwin/quartz/fullscreen/quartzCursor.c
hw/darwin/quartz/quartz.c
hw/darwin/quartz/quartzCommon.h
hw/darwin/quartz/quartzCursor.c
hw/darwin/quartz/xpr/dri.c
hw/darwin/quartz/xpr/dristruct.h
hw/darwin/quartz/xpr/xprCursor.c
hw/darwin/quartz/xpr/xprFrame.c
hw/xfree86/modes/xf86RandR12.c
include/cursor.h
miext/rootless/rootlessCommon.h
miext/rootless/rootlessScreen.c
miext/rootless/rootlessWindow.c
render/picturestr.h
Trying to pick up the pieces from the darwin churn here...
2007-12-13 18:38:25 -05:00
9a7ce57363
xselinux: Add new protocol for setting device create context.
2007-12-12 20:44:59 -05:00
2d723bbd0d
Add missing swaps in panoramiXSwap.c
2007-12-05 18:29:54 +00:00
0fff01f566
Fix swapped Xv dispatch under Xinerama.
...
Same-endian dispatch was properly calling through the Xinerama wrapping,
but other-endian dispatch wasn't.
2007-12-02 14:15:36 -05:00
fa47910045
Clean up many #if 0.
2007-12-02 12:40:25 -05:00
4363d70c6b
registry: Fix some mistakes in the reversion of prior commits.
2007-11-20 18:58:55 -05:00
5269da2bde
Revert "registry: Register XvMC extension protocol names."
...
This reverts commit 853ea337bd
2007-11-20 18:43:38 -05:00
03a86c8d5e
Revert "registry: Register Xv extension protocol names."
...
This reverts commit 12766c5b5f
2007-11-20 18:42:19 -05:00
edcf490cdb
registry: Remove registry code from XTest extension.
...
Moving all the names into dix/registry.c
2007-11-20 18:41:10 -05:00
5fea1ed50f
registry: Remove registry code from SELinux extension.
...
Moving all the names into dix/registry.c
2007-11-20 18:39:48 -05:00
9a8af33718
Revert "registry: Register Resource extension protocol names."
...
This reverts commit 5c8b1a9172
2007-11-20 18:38:24 -05:00
Eamon Walsh
Adam Jackson
Matthias Hopf
Matthieu Herrb
Michel Dänzer
Alan Coopersmith
Richard Purdie
Peter Hutterer
Sam Lau
Peter Harris
Adam Jackson