| Newsgroups |
gmane.comp.sysutils.pcp |
| Message-ID |
<[email protected]> |
20 New Commits:
[pcp:master] By Nathan Scott <[email protected]>:
f93e5cc902a7 ( https://github.com/performancecopilot/pcp/commit/f93e5cc902a7b116df191989f881cb1baad93a94 ) : pmdalinux: add missing counters from /proc/vmstat Resolves Red Hat BZ #396148.
Modified: qa/821.out ( https://github.com/performancecopilot/pcp/blob/master/qa/821.out )
Modified: src/pmdas/linux/help ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/help )
Modified: src/pmdas/linux/pmda.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/pmda.c )
Modified: src/pmdas/linux/proc_vmstat.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/proc_vmstat.c )
Modified: src/pmdas/linux/proc_vmstat.h ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/proc_vmstat.h )
Modified: src/pmdas/linux/root_linux ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/root_linux )
[pcp:master] By Lukas Berk <[email protected]>:
72f805c2f7c1 ( https://github.com/performancecopilot/pcp/commit/72f805c2f7c16ce5e4dcb2804e4f8b1ceb22c6f7 ) : Tweak pmdadocker manpage Include default timing frequency and fix typo in remote api call.
Modified: src/pmdas/docker/pmdadocker.1 ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/docker/pmdadocker.1 )
[pcp:master] By Lukas Berk <[email protected]>:
8d606053d0ba ( https://github.com/performancecopilot/pcp/commit/8d606053d0ba76e94345b13a7c7f4c041cd86193 ) : Initial selinux policy package and scafholding build/rpm/ - rpm build rpm and package configure{,.ac} - check for selinux existance src/selinux/pcp.fc - file contexts src/selinux/pcp.if - interfaces src/selinux/pcp.te - type enforcement
Added: src/selinux/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/GNUmakefile )
Added: src/selinux/pcp.fc ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.fc )
Added: src/selinux/pcp.if ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.if )
Added: src/selinux/pcp.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.te )
Modified: build/rpm/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/GNUmakefile )
Modified: build/rpm/fedora.spec ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/fedora.spec )
Modified: build/rpm/pcp.spec.in ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/pcp.spec.in )
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )
Modified: src/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/GNUmakefile )
Modified: src/include/builddefs.in ( https://github.com/performancecopilot/pcp/blob/master/src/include/builddefs.in )
[pcp:master] By Lukas Berk <[email protected]>:
494c5da5ff44 ( https://github.com/performancecopilot/pcp/commit/494c5da5ff448283145ddf7d1813a0bf90a60ab4 ) : Update type enforcement file
Modified: src/selinux/pcp.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.te )
[pcp:master] By Lukas Berk <[email protected]>:
df2016ff4ae8 ( https://github.com/performancecopilot/pcp/commit/df2016ff4ae8d415d1aaaa5633dba70a2ccd2ef2 ) : Fix typo in configure and configure.ac
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )
[pcp:master] By Lukas Berk <[email protected]>:
4a7d866bc75a ( https://github.com/performancecopilot/pcp/commit/4a7d866bc75a2aff193439a62f076cd5f5a91d0b ) : Add selinux policy package testcase Begin the testcase to pull apart and check a policy package
Added: qa/917 ( https://github.com/performancecopilot/pcp/blob/master/qa/917 )
Added: qa/917.out ( https://github.com/performancecopilot/pcp/blob/master/qa/917.out )
Modified: qa/group ( https://github.com/performancecopilot/pcp/blob/master/qa/group )
[pcp:master] By Lukas Berk <[email protected]>:
0a44cf8d50a5 ( https://github.com/performancecopilot/pcp/commit/0a44cf8d50a53958c41079f88ce3eec7bcff820c ) : Rework pcp module to pcpupstream module Naming conflicts makes installing a 'pcp' module difficult. Change to 'pcpupstream' for now. Add several new interfaces and rules to the Type Enforcement team.
Added: src/selinux/pcpupstream.fc ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.fc )
Added: src/selinux/pcpupstream.if ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.if )
Added: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
Removed: src/selinux/pcp.fc ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.fc )
Removed: src/selinux/pcp.if ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.if )
Removed: src/selinux/pcp.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcp.te )
Modified: src/selinux/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/GNUmakefile )
[pcp:master] By Lukas Berk <[email protected]>:
9e946445082d ( https://github.com/performancecopilot/pcp/commit/9e946445082d115be2d333dce4df0bc60955d0f8 ) : Add selinux README file for additional info
Added: src/selinux/README ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/README )
[pcp:master] By Lukas Berk <[email protected]>:
4270a200d98e ( https://github.com/performancecopilot/pcp/commit/4270a200d98ec2541a519e8b89621edf839cc964 ) : selinux: update pcp.spec.in installation mechanism update the configure variable to install the selinux related files to a /var/lib/pcp/selinux directory, then un/install with semodule in post/postun scriptlets
Modified: build/rpm/pcp.spec.in ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/pcp.spec.in )
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )
Modified: src/selinux/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/GNUmakefile )
Modified: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
[pcp:master] By Lukas Berk <[email protected]>:
7bc87c4089ab ( https://github.com/performancecopilot/pcp/commit/7bc87c4089abc6e928d37cc88cd633096ccbf224 ) : Selinux: Add pmdalio type enforcement requirements
Modified: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
[pcp:master] By Lukas Berk <[email protected]>:
19ebddeca7f4 ( https://github.com/performancecopilot/pcp/commit/19ebddeca7f4a2290801710ec372fadc99d9172b ) : rpm build: tweak post{un} selinux scriptlet sections properly uninstall the selinux module when we're uninstalling the subrpm package
Modified: build/rpm/fedora.spec ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/fedora.spec )
Modified: build/rpm/pcp.spec.in ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/pcp.spec.in )
[pcp:master] By Lukas Berk <[email protected]>:
e75630752316 ( https://github.com/performancecopilot/pcp/commit/e7563075231684d3bd27c62ddf2c8106832c3561 ) : Update pmdaproc ttyname to iterate through /dev Iterating through /proc/$PID/fd's to look for various tty's was causing a variety of selinux denials. To the extent that it was inappropriate to include that number of dontaudit lines in the type enforcement file. Instead, we now iterate through /dev/ and check if a device matches the particular pid of interest. Similar to the approach ps takes.
Modified: src/pmdas/linux_proc/getinfo.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux_proc/getinfo.c )
[pcp:master] By Lukas Berk <[email protected]>:
538ed20c0f95 ( https://github.com/performancecopilot/pcp/commit/538ed20c0f9515335feb953c899742b8dafc8d1a ) : selinux: update type enforcement file context permissions When checking a variety of metrics, such as filesys.used we were getting denials. Updating the .te file accordingly
Modified: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
[pcp:master] By Lukas Berk <[email protected]>:
c539f1f9a6fe ( https://github.com/performancecopilot/pcp/commit/c539f1f9a6fe330aefd852b376ef0cd4fc8056ed ) : Updated type enforcement file with further QA caught denials pmdasummary and pmdalivrt tests fail without these policies
Modified: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
[pcp:master] By Lukas Berk <[email protected]>:
9877b10a00c1 ( https://github.com/performancecopilot/pcp/commit/9877b10a00c1f4dd08ad3b1112f35ddffad00b12 ) : selinux: Add policy for qa/455 and pmdarsyslog
Modified: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
[pcp:master] By Lukas Berk <[email protected]>:
031280922c67 ( https://github.com/performancecopilot/pcp/commit/031280922c678ad4905428b9444d1e2374019fa1 ) : selinux qa: update output file with new policy
Modified: qa/917.out ( https://github.com/performancecopilot/pcp/blob/master/qa/917.out )
[pcp:master] By Nathan Scott <[email protected]>:
8f471a548c83 ( https://github.com/performancecopilot/pcp/commit/8f471a548c83f48d780c3792f56d4f53c86b32aa ) : pmdalinux: audit kernel code, add yet more /proc/vmstat counters Some of these are config-conditional so were missed earlier. Still skipping those that are marked as debug in the kernel.
Modified: qa/821.out ( https://github.com/performancecopilot/pcp/blob/master/qa/821.out )
Modified: src/pmdas/linux/help ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/help )
Modified: src/pmdas/linux/pmda.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/pmda.c )
Modified: src/pmdas/linux/proc_vmstat.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/proc_vmstat.c )
Modified: src/pmdas/linux/proc_vmstat.h ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/proc_vmstat.h )
Modified: src/pmdas/linux/root_linux ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux/root_linux )
[pcp:master] By Nathan Scott <[email protected]>:
0d90b9488db1 ( https://github.com/performancecopilot/pcp/commit/0d90b9488db1144f0b46afd810608b68d7369d6c ) : Merge branch 'selinux' of git://git.pcp.io/lberk/pcp into lberk-merge
Added: qa/917 ( https://github.com/performancecopilot/pcp/blob/master/qa/917 )
Added: qa/917.out ( https://github.com/performancecopilot/pcp/blob/master/qa/917.out )
Added: src/selinux/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/GNUmakefile )
Added: src/selinux/README ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/README )
Added: src/selinux/pcpupstream.fc ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.fc )
Added: src/selinux/pcpupstream.if ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.if )
Added: src/selinux/pcpupstream.te ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/pcpupstream.te )
Modified: build/rpm/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/GNUmakefile )
Modified: build/rpm/fedora.spec ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/fedora.spec )
Modified: build/rpm/pcp.spec.in ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/pcp.spec.in )
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )
Modified: qa/group ( https://github.com/performancecopilot/pcp/blob/master/qa/group )
Modified: src/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/GNUmakefile )
Modified: src/include/builddefs.in ( https://github.com/performancecopilot/pcp/blob/master/src/include/builddefs.in )
Modified: src/pmdas/docker/pmdadocker.1 ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/docker/pmdadocker.1 )
Modified: src/pmdas/linux_proc/getinfo.c ( https://github.com/performancecopilot/pcp/blob/master/src/pmdas/linux_proc/getinfo.c )
[pcp:master] By Nathan Scott <[email protected]>:
1e3f6d61f4af ( https://github.com/performancecopilot/pcp/commit/1e3f6d61f4afd084fafa55eadb2b40f1d9fc59ff ) : selinux: small build updates and minor corrections on review
Modified: build/rpm/fedora.spec ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/fedora.spec )
Modified: build/rpm/pcp.spec.in ( https://github.com/performancecopilot/pcp/blob/master/build/rpm/pcp.spec.in )
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )
Modified: qa/917 ( https://github.com/performancecopilot/pcp/blob/master/qa/917 )
Modified: qa/admin/check-vm ( https://github.com/performancecopilot/pcp/blob/master/qa/admin/check-vm )
Modified: src/include/builddefs.in ( https://github.com/performancecopilot/pcp/blob/master/src/include/builddefs.in )
Modified: src/selinux/GNUmakefile ( https://github.com/performancecopilot/pcp/blob/master/src/selinux/GNUmakefile )
[pcp:master] By Nathan Scott <[email protected]>:
55f82a403c90 ( https://github.com/performancecopilot/pcp/commit/55f82a403c90061f53def6164167434f4f1f2152 ) : build: fix configure.ac commenting not using dnl
Modified: configure ( https://github.com/performancecopilot/pcp/blob/master/configure )
Modified: configure.ac ( https://github.com/performancecopilot/pcp/blob/master/configure.ac )