pcp updates: pmdalinux, lberk merge
"Nathan Scott" <[email protected]> Tue, 7 Feb 2017 19:45:16 -0500 (EST)
| Newsgroups | gmane.comp.sysutils.pcp |
|---|---|
| Message-ID | <[email protected]> |
Changes committed to git://git.pcp.io/pcp.git master
Lukas Berk (15):
Tweak pmdadocker manpage
Initial selinux policy package and scafholding
Update type enforcement file
Fix typo in configure and configure.ac
Add selinux policy package testcase
Rework pcp module to pcpupstream module
Add selinux README file for additional info
selinux: update pcp.spec.in installation mechanism
Selinux: Add pmdalio type enforcement requirements
rpm build: tweak post{un} selinux scriptlet sections
Update pmdaproc ttyname to iterate through /dev
selinux: update type enforcement file context permissions
Updated type enforcement file with further QA caught denials
selinux: Add policy for qa/455 and pmdarsyslog
selinux qa: update output file with new policy
Nathan Scott (4):
pmdalinux: add missing counters from /proc/vmstat
pmdalinux: audit kernel code, add yet more /proc/vmstat counters
selinux: small build updates and minor corrections on review
build: fix configure.ac commenting not using dnl
build/rpm/GNUmakefile | 2
build/rpm/fedora.spec | 45 ++++++
build/rpm/pcp.spec.in | 55 +++++++
configure | 51 ++++---
configure.ac | 53 +++++--
qa/821.out | 288 +++++++++++++++++++++++++++++++++++++++++
qa/917 | 59 ++++++--
qa/917.out | 89 ++++++++++++
qa/admin/check-vm | 2
qa/group | 1
src/GNUmakefile | 1
src/include/builddefs.in | 4
src/pmdas/docker/pmdadocker.1 | 7
src/pmdas/linux/help | 37 +++++
src/pmdas/linux/pmda.c | 160 ++++++++++++++++++++++
src/pmdas/linux/proc_vmstat.c | 83 +++++++++++
src/pmdas/linux/proc_vmstat.h | 48 +++++-
src/pmdas/linux/root_linux | 38 ++++-
src/pmdas/linux_proc/getinfo.c | 32 ++--
src/selinux/GNUmakefile | 50 +++++--
src/selinux/README | 123 +++++++++++++++++
src/selinux/pcp.if | 288 ++++++++++++++++++++---------------------
src/selinux/pcp.te | 114 ++++++++--------
src/selinux/pcpupstream.if | 1
src/selinux/pcpupstream.te | 123 ++++++++++++++++-
25 files changed, 1456 insertions(+), 298 deletions(-)
commit 55f82a403c90061f53def6164167434f4f1f2152
Author: Nathan Scott <[email protected]>
Date: Wed Feb 8 11:42:33 2017 +1100
build: fix configure.ac commenting not using dnl
commit 1e3f6d61f4afd084fafa55eadb2b40f1d9fc59ff
Author: Nathan Scott <[email protected]>
Date: Wed Feb 8 11:41:28 2017 +1100
selinux: small build updates and minor corrections on review
commit 8f471a548c83f48d780c3792f56d4f53c86b32aa
Author: Nathan Scott <[email protected]>
Date: Wed Feb 8 10:11:30 2017 +1100
pmdalinux: audit kernel code, add yet more /proc/vmstat counters
Some of these are config-conditional so were missed earlier.
Still skipping those that are marked as debug in the kernel.
commit 031280922c678ad4905428b9444d1e2374019fa1
Author: Lukas Berk <[email protected]>
Date: Tue Feb 7 15:02:39 2017 -0500
selinux qa: update output file with new policy
commit 9877b10a00c1f4dd08ad3b1112f35ddffad00b12
Author: Lukas Berk <[email protected]>
Date: Tue Feb 7 12:05:11 2017 -0500
selinux: Add policy for qa/455 and pmdarsyslog
commit c539f1f9a6fe330aefd852b376ef0cd4fc8056ed
Author: Lukas Berk <[email protected]>
Date: Tue Feb 7 11:43:41 2017 -0500
Updated type enforcement file with further QA caught denials
pmdasummary and pmdalivrt tests fail without these policies
commit 538ed20c0f9515335feb953c899742b8dafc8d1a
Author: Lukas Berk <[email protected]>
Date: Thu Feb 2 11:36:54 2017 -0500
selinux: update type enforcement file context permissions
When checking a variety of metrics, such as filesys.used we were
getting denials. Updating the .te file accordingly
commit e7563075231684d3bd27c62ddf2c8106832c3561
Author: Lukas Berk <[email protected]>
Date: Thu Feb 2 11:33:24 2017 -0500
Update pmdaproc ttyname to iterate through /dev
Iterating through /proc/$PID/fd's to look for various tty's was
causing a variety of selinux denials. To the extent that it was
inappropriate to include that number of dontaudit lines in the type
enforcement file.
Instead, we now iterate through /dev/ and check if a device matches
the particular pid of interest. Similar to the approach ps takes.
commit 19ebddeca7f4a2290801710ec372fadc99d9172b
Author: Lukas Berk <[email protected]>
Date: Thu Feb 2 11:29:28 2017 -0500
rpm build: tweak post{un} selinux scriptlet sections
properly uninstall the selinux module when we're uninstalling the
subrpm package
commit 7bc87c4089abc6e928d37cc88cd633096ccbf224
Author: Lukas Berk <[email protected]>
Date: Tue Jan 24 14:16:01 2017 -0500
Selinux: Add pmdalio type enforcement requirements
commit 4270a200d98ec2541a519e8b89621edf839cc964
Author: Lukas Berk <[email protected]>
Date: Mon Jan 23 21:13:06 2017 -0500
selinux: update pcp.spec.in installation mechanism
update the configure variable to install the selinux related files to
a /var/lib/pcp/selinux directory, then un/install with semodule in
post/postun scriptlets
commit 9e946445082d115be2d333dce4df0bc60955d0f8
Author: Lukas Berk <[email protected]>
Date: Fri Jan 20 16:16:40 2017 -0500
Add selinux README file for additional info
commit 0a44cf8d50a53958c41079f88ce3eec7bcff820c
Author: Lukas Berk <[email protected]>
Date: Fri Jan 20 16:08:42 2017 -0500
Rework pcp module to pcpupstream module
Naming conflicts makes installing a 'pcp' module difficult. Change to
'pcpupstream' for now.
Add several new interfaces and rules to the Type Enforcement team.
commit 4a7d866bc75a2aff193439a62f076cd5f5a91d0b
Author: Lukas Berk <[email protected]>
Date: Fri Jan 20 15:49:46 2017 -0500
Add selinux policy package testcase
Begin the testcase to pull apart and check a policy package
commit df2016ff4ae8d415d1aaaa5633dba70a2ccd2ef2
Author: Lukas Berk <[email protected]>
Date: Fri Jan 20 15:42:06 2017 -0500
Fix typo in configure and configure.ac
commit 494c5da5ff448283145ddf7d1813a0bf90a60ab4
Author: Lukas Berk <[email protected]>
Date: Mon Jan 16 18:01:39 2017 -0500
Update type enforcement file
commit 8d606053d0ba76e94345b13a7c7f4c041cd86193
Author: Lukas Berk <[email protected]>
Date: Mon Jan 16 10:26:43 2017 -0500
Initial selinux policy package and scafholding
build/rpm/ - rpm build rpm and package
configure{,.ac} - check for selinux existance
src/selinux/pcp.fc - file contexts
src/selinux/pcp.if - interfaces
src/selinux/pcp.te - type enforcement
commit 72f805c2f7c16ce5e4dcb2804e4f8b1ceb22c6f7
Author: Lukas Berk <[email protected]>
Date: Tue Jan 17 11:08:42 2017 -0500
Tweak pmdadocker manpage
Include default timing frequency and fix typo in remote api call.
commit f93e5cc902a7b116df191989f881cb1baad93a94
Author: Nathan Scott <[email protected]>
Date: Tue Feb 7 22:11:32 2017 +1100
pmdalinux: add missing counters from /proc/vmstat
Resolves Red Hat BZ #396148.
-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links:
You receive all messages sent to this group.
View/Reply Online (#15086): https://groups.io/g/pcp/message/15086
View All Messages In Topic (1): https://groups.io/g/pcp/topic/4347015
Mute This Topic: https://groups.io/mt/4347015?uid=174580
New Topic: https://groups.io/g/pcp/post
-=-=-
pcp mailing list
[email protected]
https://groups.io/g/pcp/messages
-=-=-
Change Your Subscription: https://groups.io/g/pcp/editsub?uid=174580
Group Home: https://groups.io/g/pcp
Contact Group Owner: [email protected]
Terms of Service: https://groups.io/static/tos
Unsubscribe: https://groups.io/g/pcp/leave/354243/563757577/xyzzy
-=-=-=-=-=-=-=-=-=-=-=-