path: root/gradm3-changelog.txt

commit 0e009da7d037e7b0a4747e4f5d819ab541652042
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jul 31 21:34:39 2017 -0400

    Add systemd-logind subject

commit b1f130d2161e75fef04b24658d802a17f9d3dfd4
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jul 31 21:19:22 2017 -0400

    Add more subjects to the default policy to support Debian 9

commit de0152b05524ddf12d4f80234971e1964b260cf0
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jul 31 20:16:15 2017 -0400

    Make sock_families static, eliminates a GCC 6 warning.
    Comment out the extern definition and document the size of the array

commit 6d40319978bcdda2faa227c506df336a44c82e1d
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jan 3 17:36:31 2017 -0500

    Add gradm support for CAN/infiniband/MPLS, as reported by Blub

commit c3983a1f600e7aed795600d366449d9ab4cd5a88
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Aug 13 09:49:50 2016 -0400

    Change type to unsigned long

commit 0df1abe7a129076f13bccd1e4b4f0dcb59c5413d
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Aug 13 08:53:59 2016 -0400

    Compile fix for musl forcing rlim_t to 64-bit regardless of any #defines

commit f838422d0dab5717617bbdf74b0b7c67021a25ee
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Aug 13 08:10:10 2016 -0400

    Add an inherit-no-learn for /etc/cron.daily/apt and document the reason

commit eb89ffc008c8fd2a45ef66756566b8eff0d2cb4b
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Aug 13 07:43:33 2016 -0400

    Add AF_QIPCRTR support

commit d325ee096c79c1d0ff1fffb4422aa919ad96eaf5
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Jul 17 23:08:12 2016 -0400

    Add gradm_pam support for Kerberos, from forum user shogberg:
    https://forums.grsecurity.net/viewtopic.php?f=1&t=4431

commit c8a3ac5f1b7d1d8d661a2015129a93ca118548eb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 2 11:50:05 2016 -0400

    Add AF_KCM support

commit 5500ab0023b3bfb0e20f039bb4c8996d5177e91c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jun 22 21:18:22 2016 -0400

    Add one lingering /dev/initctl fix

commit 00cc1522ea34c29fd5e324eb67e100e1493f75ba
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jun 22 20:46:30 2016 -0400

    Fix some default policy warnings on systemd systems, reported by nocs

commit 7e68540d5c7252474346834fa30fc391017aa380
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Mar 15 21:44:49 2016 -0400

    Count up errors instead of exiting immediately

commit ab39cd322e5f028369b00f4c64aeb3015f2cf5d1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Mar 13 12:57:46 2016 -0400

    Add support for non-inherited nested subjects, reported by salam on
    the forums.

commit 4adee0c83142b4496b1cdd7e5473119af88d0b84
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Jul 19 16:51:04 2015 -0400

    Fix issue reported by user basegat on the forums:
    https://forums.grsecurity.net/viewtopic.php?f=3&t=4237
    which will result in a crash during processing full learning logs
    in some instances.
    
    The correct fix is to use our for_each_removable_list_entry() macro
    so that we don't try to dereference ->next on the freed entry.

commit d4b4235f801a5e5bcf044447ab11d3b76d373080
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 4 11:13:18 2015 -0400

    Make gradm aware of newer socket families so that auto-learned policies won't
    end up being generated with incorrect syntax.  Observed with the new ALG sockets
    in cryptsetup by user grpanik on IRC.

commit 62d850e956fe619eefa81eec35492ff8a405366e
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jun 8 19:09:04 2015 -0400

    Fix an issue with lexing utf-8 filenames, reported by sakura:
    https://forums.grsecurity.net/viewtopic.php?f=3&t=4213
    
    Also fix documentation, referred to "learn-config" instead of "learn_config"
    in an error message.

commit 847b2c7a3f51b73933a85b53d96c1f9b5c27be04
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Mar 13 07:35:13 2015 -0400

    Add CAP_AUDIT_READ, as reported by Sverd Johnsen

commit c1a76e1e950cf9cdbe0127ad7cc876096c95265b
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Feb 22 20:47:57 2015 -0500

    Fix up a use of stat to use stat64

commit 7142b52f9e7b002134e190ddfa6f49edcdbcd2df
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Feb 22 20:31:23 2015 -0500

    don't use _FILE_OFFSET_BITS=64 for now, because we don't want to waste 200 bytes per subject on 64bit rlimits that won't be used in practice (and which the kernel won't use anyway on 32bit systems)

commit 097a41a1fc96e9f7dcb13f9c18334f4ac69ce6e3
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Feb 22 11:08:44 2015 -0500

    update copyright year

commit eb6ea9e2176ce182114198ef283ccf15f14b4d2c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Feb 22 09:37:14 2015 -0500

    update copyright dates on applicable files

commit 4c3154121d9ab1033c7f9af2b4c0e59d24bed32b
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Feb 21 23:49:26 2015 -0500

    Use 64-bit inode values internally and bump grsec version to 3.1

commit a055dec172f42e967debd364ba5dc6225a277333
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Feb 20 17:52:54 2015 -0500

    There's no need for RES_NOFILE limiting in gradm -- we'll clamp
    the values as needed in the kernel based on the current sysctl value

commit 33ff28e77b211d90f60bc0f9e785358c51dd16ee
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Dec 11 08:04:44 2014 -0500

    error on globbing characters in unquoted subject names

commit 66f1ae7335b82bc33b0a2497d4828b11c1ffefe1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Dec 7 19:13:17 2014 -0500

    prefix learning problems with Error: instead of Warning: to clarify
    their severity (as they prevent loading)
    
    Suggested by tjh on the forums

commit c44950660ffb93142d72f0bca1456df1b2e8a153
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Oct 9 20:50:05 2014 -0400

    provide guidance on the init.d lines of learn_config

commit 55002cd18a9577ea1e46cc96f96c6d432b14f473
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Sep 9 18:54:02 2014 -0400

    compile all gradm-related binaries with PIE
    only gradm_pam presents a real privilege boundary, so it's only useful there
    
    On systems using RBAC, these binaries are automatically restricted to least
    privilege
    
    via: https://build.opensuse.org/package/view_file/home:dsterba:grsecurity/gradm/make-grsec_pam-with-pie.diff?expand=1

commit f71c3f95696a43c43d84b5de451f22486454a732
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Aug 25 08:14:11 2014 -0400

    clean up whitespace

commit 9665a4b4606493e81ff0cf3b2fde2a53c836e322
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Aug 19 17:49:10 2014 -0400

    add support for CAP_BLOCK_SUSPEND

commit 63017cb29510c1ded5308ca0a32b8d33f4c05d7c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jul 22 21:16:08 2014 -0400

    fix broken password authentication caused by recent commit
    4b923540573b90c0b2274d510e4948aa9c962775
    
    It was not possible to authenticate to the RBAC system as I misread
    the code and didn't notice it was stripping the trailing newline

commit a4dc27c99f7c5089b61790c8fe3f887038d3c36c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jul 16 21:54:09 2014 -0400

    add object for more systemd bikeshedding, reported by Wolfgang Bumiller
    https://forums.grsecurity.net/viewtopic.php?f=1&t=4009

commit 5c26384385e0b5178d3f562733c0f90e515c668f
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jul 16 20:13:29 2014 -0400

    Rewind var_object pointers to head and perform set operations
    forward instead of backwards to not flip their contents on each operation
    
    Reworked based on a patch from Wolfgang Bumiller <wry.git@bumiller.com>
    Many thanks!

commit d896facb27f2b0ba8f2af444e8abcdd5423bfaa1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jul 15 18:54:06 2014 -0400

    clean up whitespace

commit 51f5d6d623872cbe0beed25cd8a4cd5b77905fe1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jul 15 18:48:20 2014 -0400

    fix the set subtraction operation in gradm variable support -- the first
    operand was being modified by the operation.  Many thanks to Blub on the
    forums for the report!
    https://forums.grsecurity.net/viewtopic.php?f=3&t=4006

commit 0e86547200909dd2ba6b226eba825bc2926e34fb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Jul 11 20:41:41 2014 -0400

    add the rest needed to support LDAP in gradm_pam, as reported by
    Maarten Broekman:
    https://forums.grsecurity.net/viewtopic.php?t=4002&p=14200#p14200

commit 182cd95de6fb627aea14f6b7adcb45ce32fea1cb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jul 10 18:46:36 2014 -0400

    allow LDAP to be used with gradm_pam, as reported by Maarten Broekman
    here: https://forums.grsecurity.net/viewtopic.php?f=3&t=4002

commit 13f9ee6faf4e08166f2f17c51e9bc1b02665e84f
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:41:35 2014 -0400

    continue parsing the current file if we happen to include a directory
    with no policies inside it, otherwise we'll crash on a null deref
    caught by coverity

commit 8a45f7d4486cd7bf0535d6a59af138cee50ce916
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:37:40 2014 -0400

    silence a coverity warning

commit a9d632a8c452a2c0a8b428e45c11c2c60da893d0
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:33:08 2014 -0400

    add missing break on rare EAGAIN case when trying to communicate
    with the kernel -- only will result in an extra (wrong) message to
    be displayed
    found by coverity

commit e4b6f222ca8c1a8d33282f2758c40792c4244fbb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:29:59 2014 -0400

    make sure coverity knows gradm_realpath is null terminated by
    doing it after the call to readlink

commit 4b923540573b90c0b2274d510e4948aa9c962775
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:23:14 2014 -0400

    ensure gradm password is null terminated when created,
    found by coverity.  Impact is only a potential crash when creating
    a password 128 characters in length -- not security relevant.

commit c96a718353f5ff0bca8830d5cd9a437e59fa1f57
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:17:16 2014 -0400

    the kernel will never give us a full read buffer, but
    let's ensure coverity thinks the string is null terminated
    to silence a warning

commit 7a7c696393390ddeab1fdc5eca8f5609c00c546d
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:05:44 2014 -0400

    initialize dummy variable to silence coverity warning

commit 3a16d6706c115dbcc2b8a6c82689bb57273c6ec2
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jun 19 19:03:00 2014 -0400

    fix bogus sizeof, found by coverity

commit f10cb9459a8bd97ce553c0184d8d285a92cbd92c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed May 28 18:33:12 2014 -0400

    preserve linked list ordering with 'Z' duplicated subject
    reported on the forums by countermode

commit a2e9307e64b8bd4aa676ff8bdb2a614c77e13509
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Mar 5 18:00:49 2014 -0500

    allow access to /etc/ld.so.nohwcap for gradm

commit 1da5765d8f33133b2f2fa101985ee9d16d213fb7
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Feb 25 17:30:37 2014 -0500

    Update the default policy to fix common sshd breakage

commit b5bc5a64507972c83be37b65ed610fa0bbe72d91
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jan 29 17:56:27 2014 -0500

    Work around a more extreme form of Lennart braindamage, /usr/sbin being
    a symlink to /usr/bin.  Thanks to Amir Jofreh for the report.

commit 79439320b1ee6e45dea09e7e49c1351f19c23d7f
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jan 28 20:46:20 2014 -0500

    Make sure it's perfectly clear in every single source code file that
    the license on the software is GPLv2, not that it apparently does anything
    to prevent multi-billion dollar corporations from stealing this work
    and selling it to customers who are completely unaware that free software
    is included in the product because no written offer is included.

commit 93d34388b59df6a1a6b1be5d320cda596132f054
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jan 27 20:52:09 2014 -0500

    New versions of gradm are licensed under the GPLv2 only.  Companies
    should contact Brad Spengler at spender@grsecurity.net if they wish
    to purchase a differently-licensed version of gradm.

commit d751e952cd82c70fe09f526b34b9cd8792f3a909
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jan 23 19:25:32 2014 -0500

    update copyright date displayed on gradm -v

commit a51fee86de5b501cdbd4012fb3b87479840882ab
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jan 23 19:23:37 2014 -0500

    Update copyright date, include a full copy of the GPL v2, standardize
    a bit

commit 86f5be14d00e226d8396ae52b766257ad5e81bf2
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jan 8 19:33:21 2014 -0500

    Make slashbeast's day:
    Allow to override previously-specified subjects and objects in policy with a new
    subject/object flag: Z
    
    This can be used for including general policies within a role/subject and
    then overriding subsets of them for particular instances

commit ea392296caf4b1f0bd7a195a935cb3b85da00112
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jan 4 14:02:54 2014 -0500

    handle /usr relocation

commit 6703f5650d3212f09fb910ba85d0eefa59ae69c3
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jan 2 19:51:55 2014 -0500

    fix typo

commit 33a22101b492cb726f0da85844e8f483018adf61
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jan 2 19:49:23 2014 -0500

    Change symlink warnings into something more sane:
    if the symlink owner doesn't match its target or if the
    mode of the symlink object doesn't match the mode of the target's
    matching object, then warn.  This resolves, for instance, the
    useless warning about /etc/localtime not having an exact matching object
    when there existed a /usr/share/timezone object with the same permissions.

commit dbb0b113bd754a63717bbdf636869e37b761f69d
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Nov 24 14:42:33 2013 -0500

    Finish up new handling of mountpoints, create a hash table of mountpoints to perform
    lookups in since we can't depend on any properties of inode numbers at the mount root

commit 0b80215d141d05c1fadd20ad24cc0b88bed6ec19
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Nov 24 13:21:34 2013 -0500

    Solve the long-running problem of readdir against a directory containing
    mountpoints returning visible mountpoints despite an 'h' object mode
    on the mountpoints.  We do this by determining the canonical inode/dev
    pair for the mountpoint to be the inode/dev of the directory on the parent
    filesystem holding the mount.  Normal backward walks will eventually hit
    this inode/dev and readdir will see the correct inode.
    
    Therefore it's no longer necessary to resolve this inconsistency with
    globbed objects.

commit 0272e42ef7872b34dabfd5f5b724d43a1c398586
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Nov 22 20:16:20 2013 -0500

    Bump version up to 3.0, default to using the new reload mechanism
    Old reload mechanism is still possible with gradm -r or gradm --oldreload

commit 82075190fb3a1fffd3a3489f135c94ae3e0f456a
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Sep 8 14:04:07 2013 -0400

    add /sys to protected-path rule in learn_config so we don't generate policies
    that allow writing to it in default subjects (which we detect already and
    prevent to load)

commit f05995f951429661918fb50f7752edd4e8b795dd
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Aug 12 12:28:18 2013 -0400

    add char * casts to trailing NULL arg in execl, for some non-gcc compilers
    reported by segoon

commit d1468892d8844eb0eddffe6be5a1c16f2b345403
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Aug 9 16:10:36 2013 -0400

    Fix line number reported during error when in a file included
    from a directory in policy
    
    Thanks to slashbeast for the report

commit 8af1efee26697e676fe97c7e42eb7aa30a1375a9
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Aug 2 17:30:01 2013 -0400

    Fix some issues with learning on inheriting subjects
    Also document network policies not supporting policy inheritance
    Add warning for cases where we believe the admin assumed network policy inheritance was occurring

commit cb82a83cc0ad1a40823bf3490bd14522c2d9b808
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Aug 2 15:22:13 2013 -0400

    insert globbed objects when performing per-subject learning generation

commit 74d946066cdf063d62123d5b713134da336ff7eb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Aug 2 13:03:41 2013 -0400

    display proper netmask in debug mode

commit 894ddca33739d4112513e5404f9d01da8e6546d1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jul 30 19:29:53 2013 -0400

    choose default arch when building gradm now that 32bit binaries can
    load a policy into a 64bit kernel

commit 7a46cf5760f3ffe7bd28c30f3d819f26c1cd0321
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jul 30 19:24:01 2013 -0400

    Ignore nonexistent user/group names, emit warning upon loading policy
    instead of failing the policy load
    Ignored roles will not be copied to the kernel policy
    
    Requested by a sponsor

commit 15dfd2902e10b38148c796fc400593467d52a7fb
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Apr 6 17:17:10 2013 -0400

    Allow gradm to be compiled with c++ compilers

commit 10ce6725edb5d6ef8ea74ff99cf265325f2fd82c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Apr 3 09:16:43 2013 -0400

    prevent crash in learning verification when debugging is enabled, don't
    perform checks if there are no file objects for a given subject

commit 696cbe64febef40c8272e9ca79d9c9d27dcde88f
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Apr 3 08:45:43 2013 -0400

    Fix clang warning, harmless since the string involved is const

commit 3d1062b66e089d53d9d438949dd5b86fdfaf3791
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jan 3 18:25:16 2013 -0500

    Remove outdated/unnecessary GR_NESTED flag -- nested subjects have
    been attached to the objects that can execute them for some time now.
    
    Fix expansion of nested subjects as reported by slashbeast from #grsecurity.
    When iterating over the subject list and setting up socket families automatically
    depending on the socket policies, we did not account for nested subjects.
    Iterate over a separate list and handle the socket families there.

commit 35a4b241e2b86d570528d3a31c757a1dc2d4ae02
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Dec 1 11:45:18 2012 -0500

    Using -O <dir> is only valid for full learning.

commit 8fa5a423b396eabdaa419176b15ea5d6c016ad25
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Oct 30 19:19:13 2012 -0400

    Thanks to Yao Zhao (yao.zhao@windriver.com) for the following patch
    contribution:
    
    fix dependency issue when parallel compiling.
    
    when parallel compiling, it may fail like this:
    ./gradm_fulllearn_pass1.l:3:33: fatal error: fulllearn_pass1.tab.h: No
    such file or directory
    ./gradm_fulllearn_pass3.l:3:33: fatal error: fulllearn_pass3.tab.h: No
    such file or directory
    
    add dependency to make sure tab.h is generated before compiling .c to .o
    
    add xxx_tab_c_h_wrapper target, to avoid parallel make problem that
    multiple targets will be run multiple times.
    
    Signed-off-by: Yao Zhao <yao.zhao@windriver.com>

commit a1c2aee02eb4a9a1839e3837f7000ae631152fbc
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Oct 13 23:39:05 2012 -0400

    Add policy analysis for policies on non-canonical paths where the
    symlinked directory is permitted by policy to be modified

commit 88bfa54f8a57e3059cdbc047f2a7a680500cd90a
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Oct 11 19:36:03 2012 -0400

    Use stderr to display password prompt instead of stdout, suggested by
    slashbeast on irc

commit 62c3978c666b61b3672a5c5735d864f90abd6047
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sun Sep 9 19:14:16 2012 -0400

    Update copyright year

commit ce5831f07368e1e35e33cef57d610a09d3e4a258
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Jul 26 06:56:31 2012 -0400

    Remove now-duplicated lex cases

commit da77927c5f64954a215cc07d2dd4c1eb81d1bebe
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Jul 25 20:53:38 2012 -0400

    Add connect/bind support to 'define' rules as suggested by a sponsor
    Additionally add support for capabilities to 'define' rules

commit 4f7c7f386f1a30d1e2d1f59604996ea889871317
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Jul 20 15:40:15 2012 -0400

    Allocate buffer for learn log buffering

commit f34bbab890379b50b07b961e83f5d2c8d0fcca9c
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Jul 20 15:36:07 2012 -0400

    Fix error message

commit 10faed2a626f466dff476e3c5bae2bc1ab4753cc
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Jul 20 15:34:11 2012 -0400

    Use 16MB buffer for handling of learning logs

commit 62f2b987808403b53913f750b416c21404fe4e9a
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 7 18:15:56 2012 -0400

    Remove duplication in error messages

commit 92afe8608f0984cb79a08cedacf7e65b3ee7e7e5
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 7 18:15:13 2012 -0400

    Fix typo

commit 512d04013bf08c5d4e7725ba062e92c62e2e8114
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 7 18:12:36 2012 -0400

    Only compare objects with the same anchor

commit 19195273076aa5cb50fad0bc91fd8a1aa4e37bf8
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 7 18:03:07 2012 -0400

    Log subject name

commit 218681a6ace61d6e6ac39280d20a68c0bc5dd2f4
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jul 7 18:00:43 2012 -0400

    Check for bad globbed objects, further eliminates user error

commit 4efb875f40db25b026be3ffc6d38fedc19ae68c9
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Jun 19 17:29:05 2012 -0400

    Prevent users from just 'touch'ing /etc/grsec/grlearn_config to avoid
    a fatal error, inform them of the consequence and offer a simple solution

commit 6e5ac7f0c297df875720ab3500b46ce6d4a17a19
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jun 9 18:37:38 2012 -0400

    add X32 support

commit 8baf906573d7d5c56641bac8bda07de9ef7b12df
Author: Brad Spengler <spender@grsecurity.net>
Date:   Sat Jun 9 13:09:39 2012 -0400

    Fix kernel version checking, bump version to 2.9.1

commit dc1c781a08b395881ccac498a3ad2347b7726b6e
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Jun 4 20:36:39 2012 -0400

    Disallow GR_LEARN and GR_INHERITLEARN being used together on a subject,
    otherwise inheritance-based learning won't happen
    Reported by GOBBLES Security

commit 9f71ef8ad53ecfcc3d7051e3709f5d737184370e
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Mar 22 17:15:30 2012 -0400

    Fix compiler warnings

commit 79a97c058dd23b0cb50a0f3670d7dfd10096c95a
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Feb 23 18:19:47 2012 -0500

    Update documentation based on kernel changes

commit f9637a0b749cd7c27393525a8eb5c1ed12f562ab
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Feb 23 18:14:12 2012 -0500

    Make default umask 0, we'll OR any umask with the user's provided
    umask to create the intersection

commit 3ed8ff119786abe9ae768b2c950e8e32507a6a53
Author: Brad Spengler <spender@grsecurity.net>
Date:   Thu Feb 23 17:12:37 2012 -0500

    Compilation fix from split_roles support
    Make umask unsigned short

commit 04dfcecfb968cfcec87a5d781773e00f08fe932b
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Feb 22 19:09:04 2012 -0500

    Add per-role umask enforcement, requested by a sponsor

commit a381aa3106a47d52f05f9aa8ee6330726a073588
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Feb 20 19:56:55 2012 -0500

    Wipe out any existing policy if we're using -O with -F
    Previously we were appending to the policy, which is never what we want
    for full system learning

commit a451f4166b3079b7365b31e3991fbc062129aee1
Author: Brad Spengler <spender@grsecurity.net>
Date:   Mon Feb 20 19:54:10 2012 -0500

    Add support for "split-roles" in learn_config
    Example use with split-roles enabled:
    gradm -F -L /etc/grsec/learning.logs -O /etc/grsec
    
    This will wipe out any existing policy and replace it with one generated
    from full system learning.  /etc/grsec/users and /etc/grsec/groups will
    be created when necessary, and each file in such directories will
    contain either a full user role or a full group role

commit 58f410812b0e20db6c4d33bc0db0713746834773
Author: Brad Spengler <spender@grsecurity.net>
Date:   Tue Feb 14 09:11:14 2012 -0500

    Add /run/initctl to the shutdown role, protect /run by default in RBAC
    and automatically generate policies that protect it

commit f9e9fa37cedb2df3f6552c51f91a498f5a0f3532
Author: Brad Spengler <spender@grsecurity.net>
Date:   Fri Jan 13 09:14:57 2012 -0500

    update learn_config documentation, from lavish

commit c79f6a6609c77f5b4e23fc06dd354307b776bf9d
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Nov 30 20:44:09 2011 -0500

    add note about admin role to policy file (git test 2/RBAC learning)

commit 7ae19ebcf194e51a5d738146ad13a7ded6521dd5
Author: Brad Spengler <spender@grsecurity.net>
Date:   Wed Nov 30 20:34:32 2011 -0500

    Update date (git test)

commit 1aef284bceeb8dffca4e5e11a837761907f16a8c
Author: spender <spender>
Date:   Sun Nov 27 18:23:41 2011 +0000

    handle auto-adding of objects for symlinked subjects properly

commit 69c3ebc640cee48a88a7372592625390799e594d
Author: spender <spender>
Date:   Tue Nov 1 02:30:35 2011 +0000

    fix policy analysis

commit 87958cf696e223fbfae102f2c4fdb04a2fbde38a
Author: spender <spender>
Date:   Thu Oct 20 04:52:11 2011 +0000

    add CAP_WAKE_ALARM

commit 207268db13cdbd034826fee58588d21ee914f573
Author: spender <spender>
Date:   Wed Oct 19 11:30:11 2011 +0000

    add explanation for /lib

commit 80563809d5a07a7d8471b25ffd4875067cda14cc
Author: spender <spender>
Date:   Wed Oct 19 11:19:47 2011 +0000

    add /lib subject to policy

commit fd2c81b2b381b6388f21d3ce448c5f6788ada2b7
Author: spender <spender>
Date:   Wed Oct 19 11:04:06 2011 +0000

    add /proc/self exemption

commit 297851aade285a1ffbdde5dae1402c49010387d7
Author: spender <spender>
Date:   Wed Oct 19 00:16:53 2011 +0000

    add subjects to policy to demonstrate preventing breaking out of subjects with /lib rx by executing ld.so

commit e050a0992c89a8204b86eb263d4622daeacbe42f
Author: spender <spender>
Date:   Tue Oct 18 23:53:34 2011 +0000

    add lib32/lib64 to shutdown role

commit 96b0dbfdbd2353d2ad9c3f9315f20d9d64064280
Author: spender <spender>
Date:   Tue Oct 18 11:51:59 2011 +0000

    introduce new symlink and globbing behavior: No longer require the anchor for a glob to appear prior to the globbed object. No longer follow symlink objects in policy, but instead warn if there doesn't exist an exact object matching the target of a symlink in the policy.  This removes the ordering issues that previously existed with symlinks in policy.  Enforce base security on /lib32, /lib32/modules, and /usr/lib32.  Enforce removal of CAP_SYSLOG in policy.

commit 912bc5c55cf53fb52ece37f1f480bad51406b5d7
Author: spender <spender>
Date:   Mon Oct 17 14:00:43 2011 +0000

    dupecheck domain members against other roles and domains, reported by lavish

commit c9e07fdc3ecea6699b6ad38fa88ef8eccd2d2573
Author: spender <spender>
Date:   Mon Oct 17 12:05:41 2011 +0000

    extract get_matching_object function

commit 8716a90fb019b699f335582af8ed50ac05f60057
Author: spender <spender>
Date:   Mon Oct 17 03:19:09 2011 +0000

    add space

commit bc2f8fc88aa4e352963ae25795427a41cf8402c6
Author: spender <spender>
Date:   Mon Oct 17 03:18:14 2011 +0000

    output role name as comment prior to subject in learn policies, suggestion by tjh on the forums

commit 4ef2e0d9cef26f7831ab22c14753b14e4101f3c7
Author: spender <spender>
Date:   Thu Oct 6 01:23:37 2011 +0000

    add permissions needed for gradm_pam on SLES11 SP1, from nt1277 on the forums

commit 6fb4bd09a182ac44b74ddca89992663f6608461b
Author: spender <spender>
Date:   Wed Oct 5 09:16:29 2011 +0000

    compilation fix with debugging enabled, from Zbyniu Krzystolik

commit c1c4932793a84643825bbd230998500be2d90154
Author: spender <spender>
Date:   Wed Sep 28 07:53:25 2011 +0000

    when checking permissions, look up by ino/dev in addition to name, as duplicate names for the same inode/dev pair won't be allowed

commit e5de2e5f8e1158badc1abb2b3c46ffa8bbfb9ed8
Author: spender <spender>
Date:   Tue Sep 27 13:26:03 2011 +0000

    fix other bit testing errors

commit 92fc002be40aa1d33e5d656ca567119c7471b3f9
Author: spender <spender>
Date:   Tue Sep 27 13:22:04 2011 +0000

    fix bit checking, causes false positive persistent role error during analysis, reported on forums

commit 7b11859b0c03fbc4a491b40dca97b0732fa45b61
Author: spender <spender>
Date:   Sat Sep 24 13:56:17 2011 +0000

    don't display warnings on object duplicates when the modes are the same, fixes annoying warnings on some systems with /lib64 symlinked to /lib

commit ce3201065c9b6c03ccf3d283b3ba820819c78ea0
Author: spender <spender>
Date:   Thu Sep 15 03:28:56 2011 +0000

    enforce protection for /lib64/modules which exists on some distros

commit f0408626a2f0293bd68182c5210fbc0a2ab05994
Author: spender <spender>
Date:   Mon Aug 15 00:17:51 2011 +0000

    fix parsing of allowed/denied users/groups, users listed after uid 1 would be ignored, groups listed after gid 2 would be ignored (variable name confusion), reported by tr

commit 37f6a138dc6b8c85580843cc1eb60b8136199f69
Author: spender <spender>
Date:   Thu Jul 21 22:08:46 2011 +0000

    display the duplicate variable name instead of crashing, thanks to Marcin from the forums for reporting

commit 19f996d5b35b035bcdd48eb4033636d2afd8a90e
Author: spender <spender>
Date:   Sat Jun 11 20:17:51 2011 +0000

    add new subject mode to allow executable shared memory

commit 6e386fa8a3d468ae972a8f43a8c16eb6f6347bbd
Author: spender <spender>
Date:   Mon Jun 6 03:14:53 2011 +0000

    add shutdown role to full system learning, ignore symlink dupes if the object modes match

commit 8f432bc846d65422b875dc4c23133a7ca6ece9fb
Author: spender <spender>
Date:   Mon Jun 6 02:35:10 2011 +0000

    add globbing support for read-protected-path, protected-path, and high-protected-path

commit c4297175659db5ecaf573926bc40d33ca3a77bae
Author: spender <spender>
Date:   Mon Jun 6 01:56:56 2011 +0000

    add read-protected-path to lex/yacc

commit 7f157afb7a2811bc488810a5f93aff8ce9b5912f
Author: spender <spender>
Date:   Mon Jun 6 01:50:41 2011 +0000

    add read-protected-path to learn_config, populate with default values

commit 97d4ff22faeea775dc11c8423e4672fb788cf2b9
Author: spender <spender>
Date:   Sat Mar 26 21:06:47 2011 +0000

    update policy

commit d8a76ea242e0205b3218a6ec1226d18d27fff953
Author: spender <spender>
Date:   Sat Mar 26 21:03:48 2011 +0000

    auto-add gradm subject to shutdown role

commit 11136b1eb56e942934523e56119e2d3f58f42cbe
Author: spender <spender>
Date:   Sat Mar 26 20:40:24 2011 +0000

    update documentation and flag

commit c9936184e2ffe4b0a0668f9cb404b6b6cc302761
Author: spender <spender>
Date:   Sat Mar 26 20:31:42 2011 +0000

    add init transfer flag

commit 7d2d1741fc91b95ccee5b4bc4b66b250176b2f9e
Author: spender <spender>
Date:   Sat Mar 26 20:06:40 2011 +0000

    update documentation about transfer of privilege through signals

commit cdd5b4c0848473e832a620fe94afd10dae0bbd1f
Author: spender <spender>
Date:   Sat Mar 26 18:53:02 2011 +0000

    make shutdown role persistent

commit 0700a23c894a06538523fcd79d048328b28993da
Author: spender <spender>
Date:   Sat Mar 26 18:50:34 2011 +0000

    add transition

commit 09921f05c44629c62d9c340b906659116dffccf5
Author: spender <spender>
Date:   Sat Mar 26 18:48:57 2011 +0000

    fix typos

commit e77541423f4749bb3a92e7906a37326939d76156
Author: spender <spender>
Date:   Sat Mar 26 18:48:17 2011 +0000

    remove dupes

commit 74e3524baa0e52677220b7e9feb7147b41fc3887
Author: spender <spender>
Date:   Sat Mar 26 18:47:24 2011 +0000

    remove dupes

commit ef7ff56de7d31b4db1604f0a10fc2c5541a1bff7
Author: spender <spender>
Date:   Sat Mar 26 18:46:14 2011 +0000

    compilation fix for some amd64 systems

commit 5a0ab68b8ff7952a8a76d42281ad90a08a51bb18
Author: spender <spender>
Date:   Sat Mar 26 18:44:19 2011 +0000

    fix typo

commit a9787bc384b251efc015b0384a47bd516a65bced
Author: spender <spender>
Date:   Sat Mar 26 18:35:11 2011 +0000

    update documentation

commit bb9b738b3fdac9ddf7dfa63f4f0af4d5bfcd9a11
Author: spender <spender>
Date:   Sat Mar 26 18:26:52 2011 +0000

    introduce persistent special roles

commit 7ca67a5d7faa22193c17a6f6d231d521985c4841
Author: spender <spender>
Date:   Sat Mar 26 17:03:07 2011 +0000

    move check

commit e94e861e3455ae473bb9f87229c78d10e3675063
Author: spender <spender>
Date:   Sat Mar 26 17:01:23 2011 +0000

    don't silently ignore non-option arguments

commit 24936223b21771e1740e86bc11ed1b6928b69455
Author: spender <spender>
Date:   Thu Mar 24 22:09:52 2011 +0000

    check fgets return, loop on prompt

commit 694a1215f3a670dac48d2b7602a46a08fda8b4a7
Author: spender <spender>
Date:   Tue Mar 22 00:25:27 2011 +0000

    add CAP_SYSLOG

commit 699d1c0dc2741794aa6e29958cfdaaaef0cd62fd
Author: spender <spender>
Date:   Fri Mar 11 23:48:44 2011 +0000

    protect /sys more, in line with new config option

commit 44ced44ba24e44a63de565f8602cb195bea5012c
Author: spender <spender>
Date:   Mon Dec 27 13:55:00 2010 +0000

    add additional socket defines for systems with old headers

commit adeca02079d06a925e4ea48019a70e7a7e1b12a2
Author: spender <spender>
Date:   Sat Dec 11 00:46:46 2010 +0000

    AF_LOCAL is the same as AF_UNIX

commit 920e2aa79e62802bc6bdca52d366abbfc893e060
Author: spender <spender>
Date:   Fri Dec 10 03:42:39 2010 +0000

    switch ordering of checks around

commit 43484f32050863894dc0e81f517fe56903c9d4c9
Author: spender <spender>
Date:   Fri Dec 10 03:02:00 2010 +0000

    fix T mode checking

commit e4de4acc4c04e14cbe06f3b6ed053177805b142d
Author: spender <spender>
Date:   Fri Dec 10 01:52:18 2010 +0000

    fix socket family learning, reported by zakalwe

commit 722a056dc4cc7bebb936c26c762da3891c8948b8
Author: spender <spender>
Date:   Fri Dec 10 01:31:24 2010 +0000

    add unspec

commit aa229def47ee470ec8dad81ebc8983a68764fa2c
Author: spender <spender>
Date:   Thu Dec 9 04:09:36 2010 +0000

    add new consistency check when debugging is enabled to check the enforcement of high-protected-path

commit cc67637dd1188db427b4dc393cbd661b3890949a
Author: spender <spender>
Date:   Thu Dec 9 03:17:08 2010 +0000

    fix compilation

commit 534689c0e99d50d08654255d1da072e843b13fed
Author: spender <spender>
Date:   Thu Dec 9 03:16:02 2010 +0000

    fix learned policy corruption with new rewrite, update linked list sort to mergesort, add numerous consistency checks when GRADM_DEBUG is enabled

commit ee2b3b7bbfcd1901698e5fc9aab4c06ca7814d6d
Author: spender <spender>
Date:   Sun Dec 5 17:41:31 2010 +0000

    add kerberos/ldap directories to learn_config

commit 68bd5150610fe0efffd041d9015bc5e3a1245f41
Author: spender <spender>
Date:   Sun Dec 5 17:40:43 2010 +0000

    rewrite/cleanup learning code, add comments, add sorting of subjects/objects, to be optimized later

commit b3b6f6a536ceb4ac6021001a0ce5549a79ad425d
Author: spender <spender>
Date:   Sat Dec 4 06:14:13 2010 +0000

    update default learn_config based on feedback

commit 4c750a8f2c8976e6fb1a46f27283e3e893357e22
Author: spender <spender>
Date:   Sat Dec 4 03:24:01 2010 +0000

    allow multiple families

commit beb3ebea130108df9d9116fb58a9cde90114c2a8
Author: spender <spender>
Date:   Sat Dec 4 03:04:44 2010 +0000

    don't output any sock_allow_family if we saw no families learned

commit 9a8aababd7b0e2a80e0ddf7f36f3e99b7ab033b1
Author: spender <spender>
Date:   Sat Dec 4 02:36:53 2010 +0000

    don't output sock_allow_family if it's covered by connect/bind rules

commit de170a3952a06bef82323806dff8d0b6aae62969
Author: spender <spender>
Date:   Sat Dec 4 02:27:12 2010 +0000

    sock_family -> sock_allow_family

commit 7d43e785e343d0d4923f9ba74dfc1ef3be8b8988
Author: spender <spender>
Date:   Sat Nov 27 16:30:20 2010 +0000

    current_subject -> subject

commit ef180d2f4be1fb8e1f5a946f42a1d99ef8ba54a0
Author: spender <spender>
Date:   Sat Nov 27 13:41:26 2010 +0000

    attach families to subject, not current_subject

commit 9f0b23d901526cc7e9732a044d2007c905800124
Author: spender <spender>
Date:   Wed Nov 24 14:22:08 2010 +0000

    add extra warning, fix struct size, fix warning

commit 962e6bb4a3583f0b23898e3319aceb907cf70aa7
Author: spender <spender>
Date:   Sun Nov 21 02:53:46 2010 +0000

    add the caif family, from 2.6.36

commit 392127782b9a402637e63ffaa2a1ba3a35190760
Author: spender <spender>
Date:   Sun Nov 21 02:50:42 2010 +0000

    add sock_family policy and learning/full learning for sock_family policy

commit f31bfff2682ca92d6aeea12cc2c05e19be66b541
Author: spender <spender>
Date:   Sat Nov 20 20:08:48 2010 +0000

    update documentation

commit 80494c07738a9517c4ba7f0b5f22ca5288720da6
Author: spender <spender>
Date:   Sat Nov 20 20:04:06 2010 +0000

    increment gradm version

commit bf59c26226c9d3b6ce7b122646d1e4739bc80f87
Author: spender <spender>
Date:   Sat Nov 20 20:02:20 2010 +0000

    add AT_SECURE support

commit 22440980fe2675db00a95b888e3bb86cf0a409eb
Author: spender <spender>
Date:   Sat Nov 20 19:43:08 2010 +0000

    enforce SETFCAP removal

commit 933eea158f50be6646b12b2d6aa95990d7a03310
Author: spender <spender>
Date:   Sat Nov 20 19:36:32 2010 +0000

    remove SETFCAP

commit 5519745c8d6d77f5dd692e44100c50ca9908cf53
Author: spender <spender>
Date:   Sat Nov 20 01:43:42 2010 +0000

    allow not-yet-existent user/group roles, cleanup the parsing of IDs from role names

commit de7fd690091480cc16cd5849e4f2a1c2506030b8
Author: spender <spender>
Date:   Sat Nov 20 00:46:30 2010 +0000

    add Xorg and xauth subjects

commit c0071690399dd74351a6716f20e26064f715ca31
Author: spender <spender>
Date:   Sat Nov 20 00:40:29 2010 +0000

    add rsyslogd subject

commit 84a3054628185ebbd15c29874b0f5bf4771f3ac2
Author: spender <spender>
Date:   Fri Nov 19 22:36:19 2010 +0000

    add su and sudo

commit f9dfc102dee554b1da4d1f8e89717b6876cdd542
Author: spender <spender>
Date:   Fri Nov 19 22:33:27 2010 +0000

    add comment

commit 48e56755926174d99e554747fec47c2a1a7853b5
Author: spender <spender>
Date:   Fri Nov 19 22:32:03 2010 +0000

    demonstrate defines in the sample policy, from Zbyniu Krzystolik

commit 2f481c830a642b3499ee7350f594759b4301849e
Author: spender <spender>
Date:   Fri Nov 19 22:06:13 2010 +0000

    update sshd policy

commit b04d2ee09d76889d333c07ae83ba74613137cbf4
Author: spender <spender>
Date:   Fri Nov 19 21:59:33 2010 +0000

    add .nscd_socket to sshd

commit dd14232d7d1b31f341ab8eafc1091fd16559d58e
Author: spender <spender>
Date:   Fri Nov 19 21:56:08 2010 +0000

    add /var/run/utmpx to sshd

commit 2bfec0221ca3aca56b8584bf2e82220baf667a22
Author: spender <spender>
Date:   Fri Nov 19 21:51:09 2010 +0000

    fix up sshd policy

commit 77092c0e3905513fd30cca036bfe37b04e9ba9cc
Author: spender <spender>
Date:   Fri Nov 19 21:46:01 2010 +0000

    remove typo

commit a8c034b21fbf9efabab3c50a933d84135139e996
Author: spender <spender>
Date:   Fri Nov 19 21:36:58 2010 +0000

    add crond subject

commit c7515b14ecddabd8d030f19ddb13786c7748b18a
Author: spender <spender>
Date:   Fri Nov 19 21:35:11 2010 +0000

    add postgres and exim subjects

commit 612c2466a06da9b5842993629e7888fbb79b95e3
Author: spender <spender>
Date:   Fri Nov 19 21:27:35 2010 +0000

    add CAP_AUDIT_WRITE to sshd

commit dd42626f9e55f94783c9518fbb69e6fc5d82f29b
Author: spender <spender>
Date:   Fri Nov 19 21:22:14 2010 +0000

    add 64bit library paths

commit ef1b170c98cb56359421efe88050bf83bc5e9081
Author: spender <spender>
Date:   Fri Nov 5 01:53:35 2010 +0000

    don't follow symlinks if the owner of the target is different than the owner of the symlink, also don't add rules for targets of dangling symlinks

commit 2cf4a3aae054a06621d322a244dd41c08e76b7b7
Author: spender <spender>
Date:   Sun Oct 31 16:29:21 2010 +0000

    add dont-learn-allowed-ips option to learn_config

commit 51c08f7bc9b030ccc08cc63fe7e7526f323615c6
Author: spender <spender>
Date:   Sat Oct 30 22:26:31 2010 +0000

    add more permissions for gradm_pam, from Zbyniu Krzystolik

commit a550dc53f415ecc25755c4cd317452f9254e9ed9
Author: spender <spender>
Date:   Fri Sep 3 00:46:52 2010 +0000

    turn on echo

commit 6eed381547cdb8f13f8f282acce5b9ed1dfc65cc
Author: spender <spender>
Date:   Fri Sep 3 00:42:54 2010 +0000

    add ctrl+c handler during password prompt

commit 22245fb5d7ba4d56923ba516eacf847505f6cfea
Author: spender <spender>
Date:   Thu Aug 26 21:02:06 2010 +0000

    reset link count if no deleted file or symlink found, from Ilya Novikov

commit e7808207c64a1b6fb86ad268d614339eb472ec28
Author: spender <spender>
Date:   Wed Aug 11 01:15:20 2010 +0000

    change quote order for aesthetics

commit 61ef2385b2b160dac3443bed4be893fe1c85b5ba
Author: spender <spender>
Date:   Wed Aug 11 01:11:26 2010 +0000

    add checking for empty roles

commit 8a85ca44b3bd1864545b55ef96cc1d1ae7be3f23
Author: spender <spender>
Date:   Fri Jul 23 03:03:31 2010 +0000

    don't open before we have a writer

commit 97ff2f60e8076f61918bd0d7c235041f76c38758
Author: spender <spender>
Date:   Fri Jul 23 02:56:59 2010 +0000

    don't rely on hardcoded fd, use named pipe

commit 7b94bafa053c0f040d93d553d367b10263e14f11
Author: spender <spender>
Date:   Sat Jul 3 00:22:39 2010 +0000

    update learn_config to match default policy requirements

commit 3b14e98e3b7ed90f7e41f5532490bfb2f1b346d5
Author: spender <spender>
Date:   Sun Jun 20 00:58:42 2010 +0000

    add capability auditing and suppression from Zbyniu Krzystolik

commit 0d38e4581cbc141327035984e5aca4ef20a794cc
Author: spender <spender>
Date:   Tue May 4 14:03:43 2010 +0000

    fix syntax

commit 6be03015c5c5be7f8cd85d726e8d37bd89fc0fcb
Author: spender <spender>
Date:   Tue May 4 14:01:49 2010 +0000

    update udev rule

commit a34a0102174f94deea7fbc83f6dcd6403a5bb02b
Author: spender <spender>
Date:   Tue May 4 13:41:11 2010 +0000

    add udev support

commit 4df01b9c7c8dd1fcd986b196567f255ecdaa32b7
Author: spender <spender>
Date:   Tue Apr 6 21:45:01 2010 +0000

    fix status check on non-grsec kernels

commit 2fcae51fd9e1a71c5b316e0e57d7c6e1764eeda1
Author: spender <spender>
Date:   Wed Oct 7 23:16:49 2009 +0000

    allow more modes for domains

commit 3809daef850335cb9790b98a6e02289cc2651f72
Author: spender <spender>
Date:   Wed Oct 7 01:14:12 2009 +0000

    -R can't be used with -V

commit 865b7727fca088e8fe481de31c148db87ffa9721
Author: spender <spender>
Date:   Wed Oct 7 00:00:12 2009 +0000

    fix uid based roles

commit d3bef579f69611e3e6699f7402a71572017e112a
Author: spender <spender>
Date:   Tue Oct 6 23:40:25 2009 +0000

    fix compile

commit 3031f4fefaa0e9a413eee825864c90782baad716
Author: spender <spender>
Date:   Tue Oct 6 23:38:12 2009 +0000

    fix makefile

commit ff5f48656e4188038b1b577d6fc6b79e4875e87d
Author: spender <spender>
Date:   Tue Oct 6 23:37:29 2009 +0000

    fix compile warnings, force bison

commit 39d1370e3537bd965879d7d7b05216f62a673dbf
Author: spender <spender>
Date:   Tue Oct 6 23:35:19 2009 +0000

    force bison, thanks to ubuntu

commit 3b7a9919f7aa1a832a9d4d73329c263dc04c9802
Author: spender <spender>
Date:   Tue Oct 6 22:57:12 2009 +0000

    check return values

commit 6fabe70dfd118905fe086ae7c151e776d434333e
Author: spender <spender>
Date:   Tue Oct 6 22:51:31 2009 +0000

    fix format string

commit 252de61bcd131105363f1f4a607862c4902ff7d6
Author: spender <spender>
Date:   Tue Oct 6 22:46:57 2009 +0000

    check getcwd error

commit 7c128d6353b64548ef71fe1b19499353940ab4b8
Author: spender <spender>
Date:   Tue Oct 6 22:45:13 2009 +0000

    add limits header

commit d879ace38989897bf930c2f137e421fe0c9318d8
Author: spender <spender>
Date:   Fri Oct 2 21:35:55 2009 +0000

    allow policy debugging with -C

commit ec150fa0e8d393427622241d4e83257a0da5bc38
Author: spender <spender>
Date:   Fri Oct 2 20:39:25 2009 +0000

    limit symlink depth, from Zbyniu Krzystolik

commit e0c055129d9efc5421afe3e24deead32eea46155
Author: spender <spender>
Date:   Fri Oct 2 20:34:28 2009 +0000

    user/group transition debugging, from Zbyniu Krzystolik

commit 15c74a86d3fd8ea6cef4bef7b21684d7b339322d
Author: spender <spender>
Date:   Fri Oct 2 20:26:56 2009 +0000

    allow numerical uids/gids in policy -- modified from Zbyniu Krzystolik

commit 3f3ae6c82606d044dd8ff4e19d2baf1e34368f01
Author: spender <spender>
Date:   Fri Oct 2 18:26:16 2009 +0000

    update default policy

commit a9c97a710c573d048ee2eb925135f824eedf9d2a
Author: spender <spender>
Date:   Fri Oct 2 18:25:35 2009 +0000

    add kallsyms to enforced protection

commit 94a2261313e6d2e10a2ea0d60f157489a42b0c84
Author: spender <spender>
Date:   Fri Oct 2 18:10:06 2009 +0000

    allow verbose stats with -C

commit a32bc2574f14f42803b9081112f2b97cde0bdbc7
Author: spender <spender>
Date:   Fri Oct 2 18:05:48 2009 +0000

    fix formatting

commit 17062e8376418911bb0715fcb507b19c0ff994c0
Author: spender <spender>
Date:   Fri Oct 2 18:02:16 2009 +0000

    add replace rule and -C option to check policy

commit f1af9a360f2ea9794efd75f33c476b37cc40d5da
Author: spender <spender>
Date:   Thu Sep 24 02:06:22 2009 +0000

    update initial deleted file inode

commit 6fddc6abd2546c25e4fe38d6e0a60bb074610fc0
Author: spender <spender>
Date:   Thu Sep 17 00:21:00 2009 +0000

    don't allow a bind rule without a connect rule, and vice-versa

commit 3d5ecadd9bbcbba2630eaa74b1b308be4565b47c
Author: spender <spender>
Date:   Wed Sep 16 13:27:50 2009 +0000

    fix missing paren

commit 722745b84812720de288c58a150cad07849a7267
Author: spender <spender>
Date:   Wed Sep 16 13:22:29 2009 +0000

    fix special roles, they aren't required to have the G flag

commit e1c4e78075802d37a9cf4b27e268acd339e8d6b8
Author: spender <spender>
Date:   Tue Sep 15 01:53:57 2009 +0000

    don't allow role_transitions unless the role has the G flag

commit 28061cb37ee6d26cbdf068b2cbbdcee4730f36a3
Author: spender <spender>
Date:   Sun Sep 13 23:15:12 2009 +0000

    reject improper paths

commit 95ec9160cfbb77d166865858de8f72871cd2040e
Author: spender <spender>
Date:   Mon Sep 7 02:29:21 2009 +0000

    enforce /proc/modules protection

commit fc69700dc872c0b2132cd2802b7d548e1d8e5bfc
Author: spender <spender>
Date:   Wed Aug 26 20:25:10 2009 +0000

    only require enforcement if it exists

commit 191d5c88b4dd830c949be6686cc0739a93a44985
Author: spender <spender>
Date:   Tue Aug 25 03:00:31 2009 +0000

    add module protection

commit 808f4872f24e26892fb17dce7be7be040abe93d9
Author: spender <spender>
Date:   Wed Jul 29 03:49:29 2009 +0000

    update warning for CAP_SYS_BOOT enforcement

commit eae9d421735964a8a7b65ef124bd6de393f1d232
Author: spender <spender>
Date:   Mon Jul 6 20:52:55 2009 +0000

    update documentation on restarting sshd

commit 61c94d317d4a045a182107c1c8bd6b072e07c07e
Author: spender <spender>
Date:   Fri May 15 23:13:03 2009 +0000

    add /var/backups to high-protected-path in learn_config, since it can contain backups of the /etc/shadow file

commit 227acdcbcb1280c854389e2a829882441739dad5
Author: spender <spender>
Date:   Wed May 13 19:34:56 2009 +0000

    add resource learning

commit d2070ca6d1432dda459f83213f041d15a88749f1
Author: spender <spender>
Date:   Sat Apr 25 00:18:27 2009 +0000

    move gr_enable up earlier

commit ff320953f1dfdf95cbf5196be6d733544058af52
Author: spender <spender>
Date:   Sat Apr 25 00:09:20 2009 +0000

    warn if enabling RBAC system with non-standard gradm binary

commit dd4693fadcd6ba1720a57eb9cc045150a057bcd4
Author: spender <spender>
Date:   Fri Apr 24 23:35:33 2009 +0000

    fix RES_CRASH crash

commit 3810b430323d7f7ea7e9c6bebf205fd63bb84dae
Author: spender <spender>
Date:   Fri Apr 24 03:24:25 2009 +0000

    update copyright

commit 6c4caff2f6aa850c845bda60545f8c219072b839
Author: spender <spender>
Date:   Tue Apr 21 20:02:36 2009 +0000

    update copyright

commit f4ce004f28e3cce5a4c71fc691dc01e4fae66704
Author: spender <spender>
Date:   Tue Apr 14 17:56:26 2009 +0000

    fix learning crash on NULL node subject

commit bd8bfa04de58159fa4255163b4777a23f30fb9a5
Author: spender <spender>
Date:   Sat Apr 11 00:33:23 2009 +0000

    update learn_config to protect /proc/slabinfo

commit bae6f78413defce4a7fb34c6828f96afdde93645
Author: spender <spender>
Date:   Sat Apr 11 00:27:16 2009 +0000

    enforce non-readable /proc/slabinfo

commit 206a4541d436c789f36ca1d22ef7adf9b072a4b7
Author: spender <spender>
Date:   Sat Apr 11 00:05:22 2009 +0000

    enforce protection of kernel images

commit 61d390b05a2f840fd6ee7c571a6baed897b365b6
Author: spender <spender>
Date:   Sat Mar 28 17:11:47 2009 +0000

    change resource array size, add support for new resources, increment version

commit 030df7acd32b1f50c711f8d0ab9340ccb7942b11
Author: spender <spender>
Date:   Tue Feb 24 02:50:26 2009 +0000

    ignore CVS, .svn directories and and *~ files, adapted from Zbyniu Krzystolik

commit 048fc3db5b5cb9160628feeeccc52354246f0c06
Author: spender <spender>
Date:   Tue Feb 24 02:35:17 2009 +0000

    64bit capability support with GRADM_DEBUG, from Zbyniu Krzystolik

commit 8ea59ca227625bac64c4ade919ec48a1b6699636
Author: spender <spender>
Date:   Sat Feb 21 17:15:32 2009 +0000

    add INADDR_ANY overriding

commit 46c56d37219e4f4c1de45cb7b9c1cf42befc99b2
Author: spender <spender>
Date:   Sun Jan 25 19:08:44 2009 +0000

    fix unlimited RES_NOFILE limit

commit 3fb2769972168bc90efb537565d62af7519cee88
Author: spender <spender>
Date:   Wed Jun 25 22:56:39 2008 +0000

    update documentation per zakalwe's suggestion

commit 93fcb5f6efa2c978a2711762bb6cf2e7a40bcf49
Author: spender <spender>
Date:   Wed Jun 25 22:52:48 2008 +0000

    update documentation per zakalwe's suggestion

commit 0ae230d2ee56028fd2fb6d1b1e8f9f458cedaf2f
Author: spender <spender>
Date:   Tue Jun 24 04:09:02 2008 +0000

    update mode for default subject

commit b5c29c4d88676dc37188b1db5fedab42d09565ec
Author: spender <spender>
Date:   Tue Jun 24 04:07:16 2008 +0000

    fix mode for default subject

commit 91befc7239e65442a5b7f1e3a6974a621aad8b29
Author: spender <spender>
Date:   Sun May 18 14:40:41 2008 +0000

    add prototypes

commit c3d8794865bc0ea07cecff1f99d281c2c72bd980
Author: spender <spender>
Date:   Sun May 18 06:59:29 2008 +0000

    add 64bit capability support, add new capabilities

commit 8707e091113c180ed463aae30d820ac4f35e25cb
Author: spender <spender>
Date:   Tue Apr 15 00:54:53 2008 +0000

    add support for CAP_SETFCAP

commit b7e457e1c0c62bf2b99ed4ca245af5bc17a56946
Author: spender <spender>
Date:   Fri Apr 4 20:05:26 2008 +0000

    extend username limits

commit ad1c5e2f899b76ad43eb57f228f5b931c0ff4b7a
Author: spender <spender>
Date:   Fri Mar 28 01:25:00 2008 +0000

    always reduce portage

commit 25cb53869ca8c93669b82a9306c25b58d17518ac
Author: spender <spender>
Date:   Mon Mar 17 21:43:13 2008 +0000

    fix error checking when not done per-role

commit 21a20f4f5338f785e10cb8196fc483424f01b0ae
Author: spender <spender>
Date:   Mon Mar 17 21:38:17 2008 +0000

    always check for default subjects/objects

commit 405f22aefd542be12e3b12b4400e54e25ef49790
Author: spender <spender>
Date:   Fri Mar 14 01:01:39 2008 +0000

    support policies on files > 2gb

commit f4d2d015ce56f432ec27779b0288a4f189b52d39
Author: spender <spender>
Date:   Mon Mar 10 22:07:00 2008 +0000

    fix open learning config

commit 341e6be2f0e4d5636a89f702b188cf0f2a627a78
Author: spender <spender>
Date:   Mon Mar 10 21:50:49 2008 +0000

    don't leak fd

commit 430202a642f4a1faab70d379a6f0303f37feda0e
Author: spender <spender>
Date:   Mon Mar 10 21:45:50 2008 +0000

    replace racy signal handling with pipe

commit eeba54552126d64599dfb73f535fa5d140408b23
Author: spender <spender>
Date:   Sun Feb 24 21:14:20 2008 +0000

    error on invalid port numbers

commit d41ea1ebb0a94cb226a136fb16a8971cfc548087
Author: spender <spender>
Date:   Mon Nov 26 23:05:35 2007 +0000

    show_policy fixes from Zbyniu Krzystolik

commit 7aa5e67653299376e502b9869ead7a3facb40242
Author: spender <spender>
Date:   Wed Aug 1 20:30:35 2007 +0000

    add support for new capabilities, increment version, from Zbyniu Krzystolik

commit e5fd5d0f5fa5c1b369c34f5767d196614f903c6c
Author: spender <spender>
Date:   Mon Jul 23 22:04:52 2007 +0000

    don't duplicate union members

commit 6dccd256c8ee886f73345b48764d100364b5a17d
Author: spender <spender>
Date:   Tue May 29 20:38:16 2007 +0000

    kernel image protection

commit be86b197040055a9fc86603289c6b308462b588a
Author: spender <spender>
Date:   Sat Feb 10 14:28:32 2007 +0000

    update default policy

commit 1587e0dedbead02f6a1052b4498be55a7fc39fa6
Author: spender <spender>
Date:   Sat Feb 10 14:13:01 2007 +0000

    code cleanups

commit 1e4ffdc73014a8ef97aa77a2de74001af56f81f3
Author: spender <spender>
Date:   Fri Feb 9 22:44:40 2007 +0000

    allow coredumps if GRADM_DEBUG is added to makefile

commit 86056d5b7cfd60160342bfc5885fe34634b1ce7f
Author: spender <spender>
Date:   Fri Jan 12 23:50:01 2007 +0000

    add admin role to full learning

commit f0c31f3b0fb948d0ebf3a9b3e7457dca7b1edc32
Author: spender <spender>
Date:   Sat Dec 30 03:47:03 2006 +0000

    update pax flags and gradm version

commit 5f71aed69c243868f7dd0397c2ccc395f0c13a73
Author: spender <spender>
Date:   Mon Oct 9 14:13:18 2006 +0000

    fix full learning

commit 0b2871f7f6762080b354e33cf7eddd1a1b051efd
Author: spender <spender>
Date:   Sat Sep 23 12:53:02 2006 +0000

    bug fix

commit 2f91752dac52f09d124c9f16b9329714fe6838c2
Author: spender <spender>
Date:   Sat Sep 23 02:09:34 2006 +0000

    make sure learning is actually being used if enabled on any subject or role

commit a7a7113aa2670fa6ba3acb58b64665eb11df0f88
Author: spender <spender>
Date:   Thu Aug 24 22:55:42 2006 +0000

    update policy

commit 3c704d486e0c73a2c7b109a6f3853782c90aa522
Author: spender <spender>
Date:   Sat Jul 15 01:26:49 2006 +0000

    update documentation

commit 7a19f04464701fbd080ab749dcb29701004b440c
Author: spender <spender>
Date:   Mon Mar 13 23:07:49 2006 +0000

    fix ordering of define objects

commit 9b50e72381887e5e4eb50ea841354f8dae48545a
Author: spender <spender>
Date:   Sun Mar 5 00:35:52 2006 +0000

    skip admin roles in T subject flag

commit 57ba05dc35762654ab51035a6874888e047f563a
Author: spender <spender>
Date:   Tue Feb 14 23:46:26 2006 +0000

    update to 2.1.9

commit 601598ece4483e7c92776b75fe5a7af97b02c80b
Author: spender <spender>
Date:   Wed Feb 8 00:42:51 2006 +0000

    add to ptr listing

commit 64c3e4cc5984d62553e0e9887d11ca1525a3fa5e
Author: spender <spender>
Date:   Mon Feb 6 23:27:16 2006 +0000

    fix interface bug

commit f4514515394bd7b38c7498ea732549426e3abd78
Author: spender <spender>
Date:   Sun Feb 5 22:51:05 2006 +0000

    fix symlink issue on gradm_pam

commit 0f9357ddb42f2734173a40266c9c423ac48fff0d
Author: spender <spender>
Date:   Sun Jan 22 04:40:42 2006 +0000

    fix error on noauth+G

commit 553f69d0ef916c6720ccdab2c5093066d2ee17bd
Author: spender <spender>
Date:   Sun Jan 22 04:26:56 2006 +0000

    fix typo

commit bc345f1b68318dd139d5d9ba48d4fbd8672d21c9
Author: spender <spender>
Date:   Sun Jan 8 17:45:37 2006 +0000

    add additional analysis

commit cc8cf46fae64708255a438532873f0973728cdcf
Author: spender <spender>
Date:   Sat Jan 7 00:16:50 2006 +0000

    fix false dupe for good

commit 05fc60491025941615c2c83490273d6e0047cad3
Author: spender <spender>
Date:   Mon Jan 2 01:44:39 2006 +0000

    add limit on virtual interfaces

commit 5037f06f90b0b7853dfe6fc238798aa8698c29e1
Author: spender <spender>
Date:   Mon Jan 2 01:37:36 2006 +0000

    update interface support, add virtual interface support

commit 5368988a22309d1963a8e07c4d8028d17e061752
Author: spender <spender>
Date:   Thu Dec 22 16:36:08 2005 +0000

    update version

commit c9a714856732857878893ad9af900dcae008e884
Author: spender <spender>
Date:   Thu Dec 22 14:06:11 2005 +0000

    better handling of invalid characters, report instead of ignoring

commit 3bb44d92f1d8b14f79aa9179c301be9795367912
Author: spender <spender>
Date:   Thu Dec 22 13:44:30 2005 +0000

    compile fix

commit ab3f1ee4620d775dc7330b7ef480e071b1983fa8
Author: spender <spender>
Date:   Thu Dec 22 13:42:38 2005 +0000

    error on invalid role mode

commit 10d5bfdf5c951067b1ca3b5b97fb20b5dc8cea40
Author: spender <spender>
Date:   Sun Dec 18 00:56:48 2005 +0000

    update documentation

commit ec3952cde70a4f6799f449c192ff3baf949ae089
Author: spender <spender>
Date:   Sun Dec 18 00:24:06 2005 +0000

    add new pax flags implementation

commit 88e2e39fb18c5f7e85cfff24dd8244d77de5a716
Author: spender <spender>
Date:   Wed Dec 7 02:14:48 2005 +0000

    inform the user if they have a special role that is inaccessible from any role, due to lacking role transitions

commit 0cd68452279f26a8103e367db11a2dc4cd05157f
Author: spender <spender>
Date:   Wed Dec 7 00:18:29 2005 +0000

    fix lib64 symlinking problem, better error reporting for internal full learning policy, byacc bugfix

commit cf5cdb477b80ad583f42e427626c11239ad9afef
Author: spender <spender>
Date:   Wed Dec 7 00:15:18 2005 +0000

    fix lib64 symlinking problem

commit 5fa75bb8bedad1e2722b1e75131506ab8663dc38
Author: spender <spender>
Date:   Tue Nov 15 02:04:52 2005 +0000

    add userspace component of interface support

commit 41bd23d4bc8dcf9fc2f4934c6f20838c3c227df1
Author: spender <spender>
Date:   Tue Nov 1 03:45:19 2005 +0000

    have gradm use /dev/urandom instead of /dev/random for salt generation, since the salt is large and essentially secret

commit 0596b302b199b02557a2fc1352134c7b19fd3ad8
Author: spender <spender>
Date:   Mon Sep 19 00:51:06 2005 +0000

    fix x incompatibility

commit 3364c8c737a0b64bb0c35516795ebeb863f97431
Author: spender <spender>
Date:   Sat Sep 10 20:46:45 2005 +0000

    fix gcc4 warnings

commit da6562f2e423db84a806d6292cae53cefd8ff9f0
Author: spender <spender>
Date:   Sat Sep 10 20:41:13 2005 +0000

    add reporting of duplicate names, and verbosity for duplicates due to symlinking/hardlinking

commit ad316beb2d6111b2a2acb61d7cfd7bdb3ebf5e10
Author: spender <spender>
Date:   Sat Sep 10 20:34:55 2005 +0000

    fix /sys duplicate error

commit a0069b81c6c9e5a0303a00e11a554db529f4f026
Author: spender <spender>
Date:   Sat Sep 10 20:10:34 2005 +0000

    fix cpu time limits

commit 3d8af501a62458e2401407706edb26c16ed52ae9
Author: spender <spender>
Date:   Sat Aug 20 20:50:23 2005 +0000

    update version

commit ef7321fa4d9077b7f68ed7aa4a338d73fae586f2
Author: spender <spender>
Date:   Sat Aug 20 20:19:14 2005 +0000

    change device number

commit f22864dae38d798a520432bf217a119ee1ba7150
Author: spender <spender>
Date:   Thu Aug 4 23:49:17 2005 +0000

    fix gcc4 warnings

commit 1c1aaeb375336f72645cbcc3419f7b7bc2c44b21
Author: spender <spender>
Date:   Thu Aug 4 23:30:07 2005 +0000

    fix regex conflict

commit 7ab19f23a482253335a90e1c0e41a962629ae15d
Author: spender <spender>
Date:   Thu Aug 4 23:22:52 2005 +0000

    update role lex

commit 9d30f1ca998d01a17a01f7af539ee631ee9ef30f
Author: spender <spender>
Date:   Thu Aug 4 23:20:11 2005 +0000

    update role lex

commit 78721cd46e6edbe8467bb5ed73a9be53897840be
Author: spender <spender>
Date:   Mon Jul 18 23:51:12 2005 +0000

    import fix from julien tinnes

commit 39730cb13d5220c449334e0adb0c9a3c75663679
Author: spender <spender>
Date:   Sat Jul 2 12:29:24 2005 +0000

    make /tmp,/var/tmp always reduce

commit 0a88a8554159f756615eca1f7ed5dbadbb117a5e
Author: spender <spender>
Date:   Mon Jun 13 16:45:53 2005 +0000

    fix pausing

commit 7f6eeac4468aa9844aeecae12aa2273d47e68680
Author: spender <spender>
Date:   Mon Jun 13 16:21:49 2005 +0000

    add a flag to subjects

commit 6fe9952d77e8e14c90755ab7c2c9e09d516220fa
Author: spender <spender>
Date:   Mon Jun 13 13:59:46 2005 +0000

    fix

commit f7037fb1a50249b052566e8efb9762bb06d769f5
Author: spender <spender>
Date:   Sun Jun 12 23:42:58 2005 +0000

    remove unused variables

commit a6b2bc254acd9b4ab86951c65b626ab2d67d5484
Author: spender <spender>
Date:   Sun Jun 12 23:39:56 2005 +0000

    fix null pointer deref

commit 18ca992e0f47ec922767b65e2999fa46f61c5ef1
Author: spender <spender>
Date:   Sun Jun 12 18:57:34 2005 +0000

    update learn_config

commit b4be40e5f92f8337d320dd6cb9b79af65225aeed
Author: spender <spender>
Date:   Sun Jun 12 18:43:08 2005 +0000

    fixes

commit 02ebed6e7f04c5d970ce3bf1c6a3689b8d757d8a
Author: spender <spender>
Date:   Sun Jun 12 18:34:01 2005 +0000

    compile fix

commit 927db72edaf356cb522eed622412da279d5a16ab
Author: spender <spender>
Date:   Sun Jun 12 18:32:08 2005 +0000

    fix improper role reduction

commit ddcc83da4814a2da0d23285af211cb02829513d4
Author: spender <spender>
Date:   Fri Jun 10 17:02:49 2005 +0000

    fix ip mode

commit e8acfa3955adf7c4fe4c5ae3a6efb6accc8101d2
Author: spender <spender>
Date:   Fri Jun 10 16:49:52 2005 +0000

    add signal handler

commit 45dadeb11b94dda6bceb101c17f97bf05ae84452
Author: spender <spender>
Date:   Fri Jun 10 11:17:48 2005 +0000

    compile fix

commit ec5e08d6fb55cf7c4110ef37447c859c1276d7c1
Author: spender <spender>
Date:   Thu Jun 9 12:08:32 2005 +0000

    fix compile with bison

commit a5ca006cf6fc46a78c981ce48f3e50fa43acf7ea
Author: spender <spender>
Date:   Thu Jun 9 12:02:13 2005 +0000

    add fixes from peter s mazinger

commit 2a914c73bc1837c296b84dd8ac77cdbb764dd940
Author: spender <spender>
Date:   Wed Jun 8 13:44:13 2005 +0000

    update version

commit 888ddf3c4dc197a66a495756e61b094291ba54ff
Author: spender <spender>
Date:   Wed May 18 02:17:35 2005 +0000

    remove deleted_objects

commit 851ffb31422161793aca809eb4d5c2ffa320162d
Author: spender <spender>
Date:   Wed May 18 02:04:42 2005 +0000

    remove mode flag, add counter

commit d1a918afb80f4bce120158d67d1d3718b90d4987
Author: spender <spender>
Date:   Wed May 18 01:58:53 2005 +0000

    add hasdeleted subject flag

commit c4c84f76adc325d68aaab3953589c39ef6e4b886
Author: spender <spender>
Date:   Sun May 15 20:04:14 2005 +0000

    revert last change

commit 08db0a3bf0b5d11a08be87b1f9851cd5d9870f60
Author: spender <spender>
Date:   Sun May 15 19:49:33 2005 +0000

    update enforce check

commit 15e81bb8dbf541c321bbe73adb60982f8ea0aeb2
Author: spender <spender>
Date:   Sat May 14 19:17:15 2005 +0000

    have grlearn interpret always-reduce-path

commit 066651fea9600e69d21b12fa1ad3ed8b14662a4e
Author: spender <spender>
Date:   Sat May 14 19:10:34 2005 +0000

    have grlearn interpret always-reduce-path

commit f66f6f3c48ff5ce77d4c1f3bda64c914c097c815
Author: spender <spender>
Date:   Thu May 12 19:09:05 2005 +0000

    update default sshd policy

commit 4c24f8e871aa9259afcb6f5d18f237ccb16b75b2
Author: spender <spender>
Date:   Tue May 10 21:51:25 2005 +0000

    fix role dupe checking

commit 77303a77b69a897ba43b935d2164544f48d92bbf
Author: spender <spender>
Date:   Thu May 5 16:58:32 2005 +0000

    code cleanup

commit 11a9b8ce2b6fd6f2b67eecacf909b84ff80f5001
Author: spender <spender>
Date:   Thu May 5 16:53:18 2005 +0000

    free possibly allocated passwords

commit aa73941a762a86ceb1d080961fd1867f14046577
Author: spender <spender>
Date:   Thu May 5 16:49:21 2005 +0000

    code cleanups

commit 2f076b662a23214341edaea2396f9980bc2d5747
Author: spender <spender>
Date:   Thu May 5 02:15:58 2005 +0000

    update makefile

commit bc86c93fa0b2bf8033b661443c12f5800a781633
Author: spender <spender>
Date:   Thu May 5 02:05:07 2005 +0000

    make gradm_pam suid root

commit 6e3b926e37b3a56ca72ddae1c03fcd4fedcc1086
Author: spender <spender>
Date:   Thu May 5 01:25:00 2005 +0000

    move rule

commit 513b8ae9b1f6b3db86021db488e41c99bf8e7558
Author: spender <spender>
Date:   Thu May 5 01:24:23 2005 +0000

    remove dupe

commit 8b4cf548b7eb20c9169a79c9d45aaf856315dd88
Author: spender <spender>
Date:   Thu May 5 01:23:44 2005 +0000

    update gradm_pam rules

commit c2653360a31a310984e3554adda21c2fda0429ff
Author: spender <spender>
Date:   Thu May 5 01:20:51 2005 +0000

    update gradm_pam rules

commit 86b9ab243aed0a129fe52b079ced4a10f7858591
Author: spender <spender>
Date:   Thu May 5 01:17:57 2005 +0000

    update gradm_pam rules

commit 6be02587fa528f21ed276bd5a4783833c8028ac3
Author: spender <spender>
Date:   Thu May 5 01:17:03 2005 +0000

    add rules for gradm_pam

commit ca46467a216fdecd1121eeceedce84634dd98fd3
Author: spender <spender>
Date:   Thu May 5 01:14:59 2005 +0000

    set arg

commit fe203a678a6ebac15c042282b869c95bd66a339c
Author: spender <spender>
Date:   Thu May 5 01:13:36 2005 +0000

    add new entry mode

commit 205b1020f1ffce45dcab154226cb2475e2a6d9e9
Author: spender <spender>
Date:   Thu May 5 01:10:38 2005 +0000

    add gradm_pam to gradm accesses

commit 79ac6845182d7b7f0531ce19c11a611219c6fe43
Author: spender <spender>
Date:   Thu May 5 00:32:50 2005 +0000

    update

commit 50515d32a024acf441bfebc4cdd3a2cc5f11a0a1
Author: spender <spender>
Date:   Thu May 5 00:28:24 2005 +0000

    add pam authentication support, new subject flag

commit bbe885b0b4af9cbfee76ee8bf76ed53df42ebb65
Author: spender <spender>
Date:   Wed May 4 17:50:53 2005 +0000

    add check for /dev/grsec

commit 2d2acfe8c635b2f9f2ccd7d641aaa742ac63069c
Author: spender <spender>
Date:   Wed May 4 16:44:36 2005 +0000

    reverse macros

commit ac3497b401c3b183f0bb0b1741b2fb10308c9572
Author: spender <spender>
Date:   Wed May 4 15:46:46 2005 +0000

    allow gradm to work on both 2.4/2.6 kernels with the same binary

commit 3020c86515e4c99f6a23129640f56c6d1841f034
Author: spender <spender>
Date:   Wed May 4 00:03:23 2005 +0000

    update documentation

commit f697826460026f8f64a4730c15f6af41e0f6a3fe
Author: spender <spender>
Date:   Tue May 3 23:43:53 2005 +0000

    add inverted socket policies

commit faa0b3220466eadc7db13ef60ff07f0c774f2eed
Author: spender <spender>
Date:   Thu Apr 21 20:03:06 2005 +0000

    fix crash on include

commit fc6506a14b96f10f8ee4634622f7ef0bc9920fac
Author: spender <spender>
Date:   Thu Apr 21 18:11:52 2005 +0000

    remove unused variable

commit afcc39f9dcb70ac33e9e26cd5de25c9c6954c764
Author: spender <spender>
Date:   Thu Apr 21 17:58:38 2005 +0000

    add redhat init.d support

commit 394c6eff42933359cceb9faf654064818871d4c4
Author: spender <spender>
Date:   Thu Apr 21 17:56:02 2005 +0000

    add init.d to inherit-learn

commit dae5a2abdfe9573efab455d0a0ec6ab97da85a4a
Author: spender <spender>
Date:   Thu Apr 21 16:12:46 2005 +0000

    add more always-reduce-path entries

commit 7960645c658184dbe52a16f54d849c7ded83c322
Author: spender <spender>
Date:   Thu Apr 21 16:09:47 2005 +0000

    add high-protected-path entries

commit 5d65c1c56ba8e773cd0b35de762f186a883d9d2e
Author: spender <spender>
Date:   Thu Apr 21 16:07:35 2005 +0000

    protect /sys

commit 0265a708113f83c6ff456e28602ae6401ba26ea9
Author: spender <spender>
Date:   Thu Apr 21 16:03:05 2005 +0000

    add inherit-learn entry

commit 4024a227080e1c0bde757d60437bf60f572b8c6c
Author: spender <spender>
Date:   Thu Apr 21 16:00:57 2005 +0000

    code cleanup

commit a718288f61438e381f44e681e4050f853c9ae749
Author: spender <spender>
Date:   Thu Apr 21 13:28:28 2005 +0000

    set key

commit cf4cae05cd5c7b0211956e99c5080f9a6a7a50d3
Author: spender <spender>
Date:   Thu Apr 21 13:22:32 2005 +0000

    use key, not index

commit 4ec830896d88e17197ba11515984bee82cb34a40
Author: spender <spender>
Date:   Thu Apr 21 13:14:27 2005 +0000

    add key to hash entry to avoid string comparisons if possible

commit 807964d02afc4c454ea02140ddb5b494b24c5025
Author: spender <spender>
Date:   Thu Apr 21 02:19:19 2005 +0000

    add always-reduce-path entries

commit add438984150ae05b4d06bff702f30a2d31e201a
Author: spender <spender>
Date:   Thu Apr 21 01:50:54 2005 +0000

    remove debugging

commit bea52368e0800733255c3866ec8077a99798132f
Author: spender <spender>
Date:   Thu Apr 21 01:49:41 2005 +0000

    fix include code

commit ac25c4bdeb8321d7eb48733bb422fc5e04648b3d
Author: spender <spender>
Date:   Tue Apr 19 02:14:37 2005 +0000

    allow stdin as a learning log file

commit 18ca325bc5f6350ba02ee3a1d21f7bdf61fac800
Author: spender <spender>
Date:   Fri Apr 8 15:15:54 2005 +0000

    compile fix

commit 057c5a06cc30575c4936d061aecc3dbddcdf1762
Author: spender <spender>
Date:   Fri Apr 8 15:04:26 2005 +0000

    update resource name outputs

commit 467f1b6aae0032a08986481284b866f2774be9be
Author: spender <spender>
Date:   Thu Apr 7 00:38:10 2005 +0000

    no need to strip (deleted)

commit 4fe156243979da167ec624410dd6ba5e71461b30
Author: spender <spender>
Date:   Wed Apr 6 13:33:11 2005 +0000

    update learn_config

commit 3b237c75e62ac08c165df5d629b37ba8ce1d2b95
Author: spender <spender>
Date:   Mon Apr 4 22:19:39 2005 +0000

    fix /dev/pts warning

commit 08618b3d7eee57076697aa5dea3f799b1dcc371b
Author: spender <spender>
Date:   Mon Apr 4 22:13:44 2005 +0000

    update documentation, update directive names

commit c9cc8f4eac5e7f5ff94a92218be8d078e1d1f6ff
Author: spender <spender>
Date:   Mon Apr 4 22:10:11 2005 +0000

    update documentation

commit 113060576a05c7505826891e98b1ef1baae88e3d
Author: spender <spender>
Date:   Mon Apr 4 21:42:32 2005 +0000

    update version

commit ec257de5ca7ca7656a188c36eed60141e669b8fa
Author: spender <spender>
Date:   Mon Apr 4 21:28:24 2005 +0000

    add always-reduce

commit f85fc6ae600c1e712a7487639f8e9d6a530211af
Author: spender <spender>
Date:   Sun Apr 3 23:05:35 2005 +0000

    error on /dev/pts/* objects

commit 010df0c7e7b58880a9eac5de2b3fbb4c5359365a
Author: spender <spender>
Date:   Sun Apr 3 22:59:32 2005 +0000

    add always-reduce directive

commit 3a0d8df6f19ae2797f60fc381a1741ca35910ade
Author: spender <spender>
Date:   Sun Apr 3 21:22:20 2005 +0000

    fix resource names on archs that define their own rlimit order

commit 1fe5a713439940aca3fdfd2347ed9b015ad6f5f1
Author: spender <spender>
Date:   Tue Mar 29 12:52:58 2005 +0000

    fix full learn crashing

commit 4b48e6dc271362e7511762b9455a8f44bc5a953f
Author: spender <spender>
Date:   Tue Mar 22 15:15:49 2005 +0000

    fix override

commit a913f57e06ae0c24b7f2848692b6ccdbb7f691a3
Author: spender <spender>
Date:   Tue Mar 22 15:09:24 2005 +0000

    fix override mode for learning

commit bbaf4162852579616f3da17b938c571a12bafbbd
Author: spender <spender>
Date:   Mon Mar 21 23:45:06 2005 +0000

    update version

commit c431984838990e6de1a8b8fe9589864b34d4f77d
Author: spender <spender>
Date:   Sun Mar 20 14:45:34 2005 +0000

    fix ip add

commit 5b69db5f92530ecf43457715a780d870b53ff147
Author: spender <spender>
Date:   Sun Mar 20 12:56:47 2005 +0000

    rewrite /dev/pts entries

commit 6f73a69740a4ebfb85d32b6152bc274494c4626d
Author: spender <spender>
Date:   Mon Mar 7 14:15:41 2005 +0000

    don't go interactive if compiling for distro

commit bad42d54a5a985702e46294913f20c7f5bde986f
Author: spender <spender>
Date:   Mon Mar 7 03:47:48 2005 +0000

    fix /SYSV000000 accesses

commit dd41f398e6836738677962c648dd8fbbfc38a13c
Author: spender <spender>
Date:   Mon Mar 7 03:34:13 2005 +0000

    add t subject flag

commit c71c14629095ce7088cff1327e1b00ddac0f03b6
Author: spender <spender>
Date:   Mon Mar 7 03:00:25 2005 +0000

    remove comment

commit 6ce180400cbf70d180dff11054600ade7c68d458
Author: spender <spender>
Date:   Mon Mar 7 02:59:48 2005 +0000

    add GR_PROCFIND flag, update version

commit 535e943b32c8d372d09e10644f6b3677512c6dc6
Author: spender <spender>
Date:   Fri Mar 4 00:24:49 2005 +0000

    remove randexec support

commit 6d73232137c11cf163dde1cba73f7db2502b16f8
Author: spender <spender>
Date:   Thu Feb 24 15:39:48 2005 +0000

    update lexer

commit cf8aba00cbf1accb6291a690bfd21587792f7bd0
Author: spender <spender>
Date:   Thu Feb 24 15:33:07 2005 +0000

    add hostname support

commit 8016f40bf17b28822c5dd9479ce645451fcb464b
Author: spender <spender>
Date:   Mon Feb 21 22:17:00 2005 +0000

    fix install

commit 57e50ca07fe2f04b61b994809701066e27611703
Author: spender <spender>
Date:   Fri Feb 18 20:33:23 2005 +0000

    update version

commit 865e496fcaec69c680e57c97c0ac7c23af672443
Author: spender <spender>
Date:   Thu Feb 17 01:41:41 2005 +0000

    cachednode -> cachedlen

commit ce0348b63f7d755eec30c3fefad9d7518f0295b3
Author: spender <spender>
Date:   Sun Jan 30 18:44:24 2005 +0000

    update copyright

commit f95c129013e8edc10242d2fdc734f2536b31bc30
Author: spender <spender>
Date:   Tue Jan 25 04:02:59 2005 +0000

    update makefile, from Peter S. Mazinger

commit 8c266710956525659e868a8a0409c732af8aeecf
Author: spender <spender>
Date:   Sun Jan 23 04:13:44 2005 +0000

    fix including crash

commit 97b621581515fc4534105061529f2e095b047117
Author: spender <spender>
Date:   Sun Jan 23 02:33:20 2005 +0000

    fix learning crash

commit c56087055795cd9db1974691f8f0147aa425bb57
Author: spender <spender>
Date:   Sun Jan 23 02:25:58 2005 +0000

    fix crash with certain learning logs

commit 638f34c7b623b6395a595868d68c1dabc5f9eecb
Author: spender <spender>
Date:   Sat Jan 22 18:04:39 2005 +0000

    update makefile to build 64bit x86-64 binaries

commit 0c5706a1f2085dd5fb90e173f9eb7947f8f46ace
Author: spender <spender>
Date:   Fri Jan 21 15:23:21 2005 +0000

    update kernel role

commit 04447de2e8d57b690abd5f8c3bdd5c38beb87b36
Author: spender <spender>
Date:   Tue Jan 18 01:16:05 2005 +0000

    update policy

commit 80914ae926702c9dbca750905f1286fdd5348c6c
Author: spender <spender>
Date:   Tue Jan 18 01:14:58 2005 +0000

    update policy

commit 8d40c636640a9f24806a31fb62083c89f31c5f5d
Author: spender <spender>
Date:   Mon Jan 17 20:41:31 2005 +0000

    update documentation

commit 0637763e7b509efd7b379f71810b098d1eeb3229
Author: spender <spender>
Date:   Sat Jan 15 18:22:54 2005 +0000

    update high reduce paths

commit 67d28250764d1a36a6d9688edd3abe5d2413cd2b
Author: spender <spender>
Date:   Sat Jan 15 18:09:12 2005 +0000

    update weights

commit 0f343bbea45aada00737327d5d10cd25de0b5842
Author: spender <spender>
Date:   Sat Jan 15 17:51:33 2005 +0000

    update weight

commit 58f6ade14b18430fd559eae8cb149a7828f24110
Author: spender <spender>
Date:   Sat Jan 15 17:29:02 2005 +0000

    compile fix

commit a73a8a81f579fd6e4ea2c52687c0fe533257ac45
Author: spender <spender>
Date:   Sat Jan 15 17:27:58 2005 +0000

    remove debugging

commit 129c28203efafea98fc6ce33a7b959de2bababd5
Author: spender <spender>
Date:   Sat Jan 15 17:26:12 2005 +0000

    update reduction

commit a5453565de95b7d3d09f3e58a91afe51f7561c7f
Author: spender <spender>
Date:   Sat Jan 15 17:14:04 2005 +0000

    update mode reduction

commit 404791caa8815fc46b3bd77714d77ebac0baa256
Author: spender <spender>
Date:   Sat Jan 15 16:53:01 2005 +0000

    update weights

commit ddc40956600dd08bc7d7a96584c99c98fc65df3e
Author: spender <spender>
Date:   Sat Jan 15 16:36:53 2005 +0000

    update mode reduction

commit 97b925d8de0705581229fa4f09f3922d0839e3a9
Author: spender <spender>
Date:   Sat Jan 15 16:30:26 2005 +0000

    don't reduce /home

commit 55f3f15befb03f8f685585bea454c29fa8db1bdc
Author: spender <spender>
Date:   Sat Jan 15 16:26:23 2005 +0000

    update high reduction paths

commit 81e53f11ce60c9f2d1da41f397413e95686b4b01
Author: spender <spender>
Date:   Sat Jan 15 16:15:47 2005 +0000

    /tmp rewriting

commit 45b8a3fafe2ebe226071a4cf4b3f67c9e918e382
Author: spender <spender>
Date:   Fri Jan 14 18:21:19 2005 +0000

    fix makefile

commit c2362b555c2de5a4a6cb4021e534bfb6cb142a73
Author: spender <spender>
Date:   Fri Jan 14 17:20:59 2005 +0000

    update message

commit d23fa34081d122fb4ab15ad8680f7c11bf1084ee
Author: spender <spender>
Date:   Fri Jan 14 17:18:00 2005 +0000

    update sniffing message

commit 361e491786fe37023e650216d578689c70e8259b
Author: spender <spender>
Date:   Fri Jan 14 15:01:26 2005 +0000

    makefile update

commit ddb187a98f043812dbf3a4bc83154ac299d69dba
Author: spender <spender>
Date:   Thu Jan 13 22:36:02 2005 +0000

    update documentation

commit da2c0b0192d1cdce97f30f5298d72f532de76b94
Author: spender <spender>
Date:   Thu Jan 13 03:17:31 2005 +0000

    fix $HOME

commit 4a083a6e96ad2f67855e1f1fe737feb6b17a8e57
Author: spender <spender>
Date:   Thu Jan 13 03:16:02 2005 +0000

    fix $HOME

commit faaa7de04f42dc1f34d19a23d499c5a628b4181b
Author: spender <spender>
Date:   Thu Jan 13 03:06:08 2005 +0000

    can't use /home/spender for domains

commit 3edba658bd5cd117dfe348eccaeba3828a7924c7
Author: spender <spender>
Date:   Thu Jan 13 03:00:26 2005 +0000

    update info

commit b14983791efd4104b5e3a8932fbc43a102d59324
Author: spender <spender>
Date:   Thu Jan 13 02:53:37 2005 +0000

    fix warning

commit 8be5c3dee09bffbb66c52f5fb81d504fcba9e5d5
Author: spender <spender>
Date:   Thu Jan 13 02:52:34 2005 +0000

    domain dupe checking

commit c1ce54e4cf3b425a74f120129313cb3487a39674
Author: spender <spender>
Date:   Thu Jan 13 02:46:45 2005 +0000

    add multiple line support for domains

commit af0dd7b668d086cbb693435857e8e074b692e03c
Author: spender <spender>
Date:   Thu Jan 13 01:00:23 2005 +0000

    fix typo

commit 39ba78d3ed240932d8dc4052491c0258e0fd7e6f
Author: spender <spender>
Date:   Thu Jan 13 00:59:39 2005 +0000

    fix typos

commit b1c9d4da959066bc80cf88526ab2284d65b4f8f3
Author: spender <spender>
Date:   Thu Jan 13 00:58:57 2005 +0000

    ignore kernel role

commit 8d726807bd87321ac0658d98cb075903a65b88cc
Author: spender <spender>
Date:   Thu Jan 13 00:56:16 2005 +0000

    add more information

commit 8bed3b093389de7ae838f4d9a58b483c40e16eb2
Author: spender <spender>
Date:   Thu Jan 13 00:51:24 2005 +0000

    fix symbol usage

commit 384f6b1e18b4a92c1fb76483ab81050342960603
Author: spender <spender>
Date:   Thu Jan 13 00:32:27 2005 +0000

    include updates

commit 022ffdd203ade8a87347ee623157cbafbd5086bd
Author: spender <spender>
Date:   Wed Jan 12 22:38:54 2005 +0000

    start grlearn later

commit 6e3218322c50c0f00050d99782a1e361c80cc572
Author: spender <spender>
Date:   Wed Jan 12 18:13:22 2005 +0000

    update learn buffer size

commit 900ace4bfae0449e7d0bb2a316cda16fdf82cddc
Author: spender <spender>
Date:   Wed Jan 12 17:36:24 2005 +0000

    fix /home/spender

commit 4815990979269d43ecf2c5bde2599f912a1b4daa
Author: spender <spender>
Date:   Wed Jan 12 01:49:16 2005 +0000

    fix deleted flag

commit e0d49c4f18fdbefa67aacfe797ac481eb66676f0
Author: spender <spender>
Date:   Tue Jan 11 20:07:53 2005 +0000

    update error

commit dafeda4f5f5213b07f0c0c0ea995473e88332137
Author: spender <spender>
Date:   Tue Jan 11 19:31:11 2005 +0000

    pass right version

commit d9241a7eed1adcd1513273b95529c86c2489584c
Author: spender <spender>
Date:   Tue Jan 11 19:13:42 2005 +0000

    better error message when handling 2.4/2.6 gradm

commit 77bc2cee2a3d1cb103e61ac1b0619c51aa041670
Author: spender <spender>
Date:   Tue Jan 11 06:42:04 2005 +0000

    update policy

commit 7db2036fd10da746af12cbd2c6080b5ca19d4df4
Author: spender <spender>
Date:   Sun Jan 9 05:49:06 2005 +0000

    update version

commit 9b72a20b70d6ce0ece889b929139a74bf7c7477d
Author: spender <spender>
Date:   Sun Jan 9 02:31:26 2005 +0000

    add automatic tty sniffing detection

commit 81c16769d9f2fba5b98013e61243a39cda51fa0e
Author: spender <spender>
Date:   Sat Jan 8 17:10:13 2005 +0000

    add admin to role transitions

commit 3dac3355781e7a719973fa05ac046efe04621f2d
Author: spender <spender>
Date:   Sat Jan 8 17:01:43 2005 +0000

    fix typos

commit ecb789b04318c1b506ee86a1be0680ea21d3baaf
Author: spender <spender>
Date:   Sat Jan 8 16:59:45 2005 +0000

    add do-anything admin role for full learning

commit 9b768961f21a593a9ff431d45b64f565a3838356
Author: spender <spender>
Date:   Sat Jan 8 16:45:41 2005 +0000

    parse learning config both when enabling full learning and when parsing learning logs

commit a04f96195e5a7915a24aa0a934c047789e62c8a5
Author: spender <spender>
Date:   Sat Jan 8 16:16:51 2005 +0000

    check for null

commit 480497d6834eb93abcba22e13d81a20dd494a420
Author: spender <spender>
Date:   Sat Jan 8 16:03:10 2005 +0000

    make learning heuristics much more configurable

commit 9bb07f410f3623042f3cc92e1b6e29d8b60b4b26
Author: spender <spender>
Date:   Sat Jan 8 15:42:45 2005 +0000

    fix unsprole error msg

commit fe78312851ec2f709c9a5b418447a431141e0319
Author: spender <spender>
Date:   Sat Jan 8 00:28:42 2005 +0000

    fix old bison compile

commit bde66b7f6720e7d2a8563bc576d87714f9ff49a4
Author: spender <spender>
Date:   Mon Jan 3 14:26:02 2005 +0000

    fix typo

commit 0ff857efef7b21f80c5da9457df378bae39f40b8
Author: spender <spender>
Date:   Mon Jan 3 14:24:52 2005 +0000

    add GR_LINK, GR_AUDIT_LINK

commit d8f526e5c1aa4a4fdb2cb5f2d64378f11345c1b0
Author: spender <spender>
Date:   Sun Jan 2 22:54:09 2005 +0000

    kick version up to 2.1.0, many important changes

commit 05bd094ff1069776a18988b8e18ef46d53df682e
Author: spender <spender>
Date:   Sun Jan 2 17:15:47 2005 +0000

    update policy

commit 41d2cbfb66f5736225166f0378a7427c1c7d1c28
Author: spender <spender>
Date:   Sun Jan 2 17:14:18 2005 +0000

    update policy

commit 5da250ab090531d002b10fd98cdf3e81393981ef
Author: spender <spender>
Date:   Fri Dec 31 21:50:55 2004 +0000

    gr_dyn_alloc for initial allocation

commit 3532b4d6bac60129782831cc2832c4a177478098
Author: spender <spender>
Date:   Wed Dec 29 17:48:47 2004 +0000

    resolve relative paths in PATH envvar

commit 2ebc2bda380802478422ac8a9dc1e72358ad01d5
Author: spender <spender>
Date:   Mon Dec 27 14:34:48 2004 +0000

    add declaration

commit 0bc6b2c8dc0ad9c0824817ca779dece45a7975c5
Author: spender <spender>
Date:   Mon Dec 27 14:07:21 2004 +0000

    fix double frees, exit on strdup failure

commit b4fb95a2cd2d354ed05d58fb1d4744a81e911a58
Author: spender <spender>
Date:   Mon Dec 27 13:55:40 2004 +0000

    calloc memory if NULL passed to gr_dyn_realloc

commit 805fd4a4dd55fb91508046c8a08b875eb70f436b
Author: spender <spender>
Date:   Thu Dec 23 13:35:37 2004 +0000

    fix crash, from barry schwartz

commit 22afe9c8e60c196fd6c93509ae301a83668caec0
Author: spender <spender>
Date:   Wed Dec 22 01:14:13 2004 +0000

    don't include kernel role

commit f08ac3bc8b23bd8b94456d8f2035dcbbff4ccf6d
Author: spender <spender>
Date:   Wed Dec 22 01:09:10 2004 +0000

    shorten line

commit f68010107ef629c8ccaad2eff062233ad59c0e27
Author: spender <spender>
Date:   Wed Dec 22 01:08:04 2004 +0000

    extend line

commit b14491c9f6174a4017757b2ff7ef20bc3223b7fc
Author: spender <spender>
Date:   Wed Dec 22 01:06:32 2004 +0000

    change stats

commit 07331e17ae00c71b56b877ab5b76c402a275019e
Author: spender <spender>
Date:   Wed Dec 22 01:01:28 2004 +0000

    better formatting

commit e53c443b5acb8de53d1908a183bc5926884ea311
Author: spender <spender>
Date:   Wed Dec 22 00:59:50 2004 +0000

    remove newline

commit e732566fa6519d783f0e8c3f0011a053d639964b
Author: spender <spender>
Date:   Wed Dec 22 00:57:33 2004 +0000

    non-admin

commit 103e4f40a4392f53f723ab2a3aacaaddccfd4224
Author: spender <spender>
Date:   Wed Dec 22 00:55:27 2004 +0000

    fix typo

commit c1e0ded158e7b5229ba8338f69198d992b4b7c74
Author: spender <spender>
Date:   Wed Dec 22 00:54:05 2004 +0000

    add policy statistics

commit bd3aff4bed4a4ba07479a3599ea696cb1edd88cc
Author: spender <spender>
Date:   Tue Dec 21 20:37:45 2004 +0000

    move pid writer

commit 4af7c67418c7f3f74be133c450bc4460e056c4e7
Author: spender <spender>
Date:   Tue Dec 21 19:23:29 2004 +0000

    update kill, print to stdout

commit c2439cf132a24a44be6d1478b69748c4bcfd4c71
Author: spender <spender>
Date:   Tue Dec 21 19:17:04 2004 +0000

    remove debugging

commit 71228c72345e584a9f417e4440e891548fdb7b8d
Author: spender <spender>
Date:   Tue Dec 21 02:54:36 2004 +0000

    update documentation

commit 40f77de0941a4a0db112c67bc980a0b9f1cfad70
Author: spender <spender>
Date:   Sun Dec 19 23:10:14 2004 +0000

    rewrite pipe/socket entries to /proc, free them appropriately, free strings on non-full-learning, add id transition support to non-full-learning

commit 90e846f2566dc5246f5e8ea53132748f5da2b65b
Author: spender <spender>
Date:   Sun Dec 19 17:55:17 2004 +0000

    remove unused var

commit d17f88d97da6aaa1d1b2effcc75cb0fd8246a1bb
Author: spender <spender>
Date:   Sun Dec 19 17:54:16 2004 +0000

    add signal handler to flush buffer when grlearn is stopped

commit de51af4c1af5a5f4db988949519fb7694ed11225
Author: spender <spender>
Date:   Sun Dec 19 17:39:11 2004 +0000

    speed up caching, reduce context switches by buffering writes

commit f5c16099ea8f51e2fc1fc5bfc517c2155c0bf40c
Author: spender <spender>
Date:   Sat Dec 18 18:49:24 2004 +0000

    fix sock type

commit 3a771e58f281a84b2d69423869ced403ee324583
Author: spender <spender>
Date:   Sat Dec 18 18:48:15 2004 +0000

    add more debugging

commit d3e04e4a5abe4d67dd0af1099ce8a3fc0af7125c
Author: spender <spender>
Date:   Sat Dec 18 14:51:12 2004 +0000

    allow gradm to be installed on an nfs mounted root

commit 62d9b8d9b1b349abf112a2ffd6e2716992e9c7b1
Author: spender <spender>
Date:   Fri Dec 17 19:38:54 2004 +0000

    fix -Wall warning

commit bbe835d646c3db6cb85f3f685d909037881d9954
Author: spender <spender>
Date:   Fri Dec 17 18:39:14 2004 +0000

    tweak reduction weights

commit f254a94d07e7bfafb3d6a0e454a0463305a9b3d2
Author: spender <spender>
Date:   Fri Dec 17 17:57:39 2004 +0000

    fix compile error

commit 8ef2f3a04a81e8f2484efd27a7933c035059db4c
Author: spender <spender>
Date:   Fri Dec 17 17:56:42 2004 +0000

    fix typo

commit c99fdc532170a7fe8275b6976b006ca2f620201a
Author: spender <spender>
Date:   Fri Dec 17 17:55:09 2004 +0000

    only add id transitions when CAP_SETUID/CAP_SETGID is present

commit be90f043bdf1fab41ddfbc99ae4ebc78e72fa1a3
Author: spender <spender>
Date:   Fri Dec 17 17:19:24 2004 +0000

    fix free

commit 51ec2fe4393dd35a5f94204d672fa6b669b246d9
Author: spender <spender>
Date:   Fri Dec 17 17:15:47 2004 +0000

    fix id insert

commit 5d3198fbaede5cf2bec71b2dfa0eeecb902814f7
Author: spender <spender>
Date:   Fri Dec 17 17:11:32 2004 +0000

    don't make id changes cause a subject creation, CAP_SET*ID will already create them

commit ce8f2c0aea249f5eacbdf84980934a10f831a52b
Author: spender <spender>
Date:   Fri Dec 17 17:03:46 2004 +0000

    free subject ids, clean up reduction

commit 9802ccc6741439c8410d0021dcd19cafad6e16fb
Author: spender <spender>
Date:   Fri Dec 17 16:51:36 2004 +0000

    fix display

commit ae5dd0ad1167a7ceb749a80e7df2a66c0163070a
Author: spender <spender>
Date:   Fri Dec 17 15:45:10 2004 +0000

    check if list != null

commit b5a98c226827f81fb86b5b27c880d6115da2479b
Author: spender <spender>
Date:   Fri Dec 17 15:40:51 2004 +0000

    update license

commit 6585a46bf276e57408bbfa6e6a25c174c8e1b8e9
Author: spender <spender>
Date:   Fri Dec 17 14:49:11 2004 +0000

    fix typo

commit 8f955284e8d3d2a55954644b958764ee1aec906d
Author: spender <spender>
Date:   Fri Dec 17 14:48:28 2004 +0000

    add displaying of id transitions

commit c7dde1d334fff7c70308fb91f2fe9bf2699e287b
Author: spender <spender>
Date:   Fri Dec 17 14:39:27 2004 +0000

    add id transition reduction

commit 8a4fc76f69c35567129746dfeda4a718716dcb0f
Author: spender <spender>
Date:   Fri Dec 17 14:30:46 2004 +0000

    add id transition learning function

commit 2f1b8c04ea4cd5135102a265ad3d99c757a23b1e
Author: spender <spender>
Date:   Fri Dec 17 14:02:05 2004 +0000

    add insert_learn_id_transition prototype

commit 65faa2804810163ad05adeff23b5897516ea10e4
Author: spender <spender>
Date:   Fri Dec 17 13:43:44 2004 +0000

    free filename, not $9

commit 86f2e0592b17fa6ea3d0a10905c889891181d7b4
Author: spender <spender>
Date:   Fri Dec 17 13:36:53 2004 +0000

    more lex/yacc for user/group transitions

commit ce7afa517ca742bf796165c5b27cb2a794024fd4
Author: spender <spender>
Date:   Fri Dec 17 06:37:13 2004 +0000

    first bit of userspace parsing of new id change learning

commit a0f1a4e1ea94b202957a924c573e9b549120c0db
Author: spender <spender>
Date:   Wed Dec 15 23:16:25 2004 +0000

    add /var and /opt to irreducible dirs

commit 2d79827ba96550606027c6a6765743ee9f8d88e3
Author: spender <spender>
Date:   Wed Dec 15 23:08:55 2004 +0000

    fix learn config

commit b9ce291ad59b18b6f314b39ac1fff9b7c68d5363
Author: spender <spender>
Date:   Wed Dec 15 23:01:55 2004 +0000

    fix learn config

commit 9db7bc4ba8e3e37d958a86900f05f680a9a6ea80
Author: spender <spender>
Date:   Wed Dec 15 22:48:02 2004 +0000

    fix cron names

commit 5242df762809f44388aecb522e53dc1d7957f4af
Author: spender <spender>
Date:   Wed Dec 15 21:21:50 2004 +0000

    fix up types, no longer include any kernel headers

commit df75f7e58011f78868db310ad25ebde2f332c78d
Author: spender <spender>
Date:   Wed Dec 15 20:52:53 2004 +0000

    clean up makefile

commit 03e0401bc5bbbb340b406dfe3865ae0c8b4b3d77
Author: spender <spender>
Date:   Wed Dec 15 13:24:10 2004 +0000

    update version

commit 0cba810c15e7c76202f1905bed99ac2cb86aa164
Author: spender <spender>
Date:   Mon Dec 13 22:25:09 2004 +0000

    remove comment

commit 4ef300701d7ee70a52b503719d28afbf5749833b
Author: spender <spender>
Date:   Mon Dec 13 22:24:08 2004 +0000

    full learning update

commit 404dcedbee11577c6c5cbde28ceff5f2be18e6d4
Author: spender <spender>
Date:   Mon Dec 13 22:23:26 2004 +0000

    full learning updates

commit b7537d0d4baf22d7ac3549a7b9b4630985e1bd02
Author: spender <spender>
Date:   Mon Dec 13 21:04:33 2004 +0000

    acl -> policy

commit 8dbaccf3273f70438413fde9b1585291a1806ed4
Author: spender <spender>
Date:   Mon Dec 13 20:08:12 2004 +0000

    fix typo

commit 8dbddfba2cea306587514be81ae66aff51a35284
Author: spender <spender>
Date:   Mon Dec 13 20:07:36 2004 +0000

    cleanup return value

commit 5a61767d5f498cf6c499adc45d12ac63781770a5
Author: spender <spender>
Date:   Mon Dec 13 19:46:15 2004 +0000

    update reduction policy

commit feaebd7f5c8bef5a22d5688fa9efeea7a7714305
Author: spender <spender>
Date:   Mon Dec 13 18:56:48 2004 +0000

    add documentation

commit 629bfd3a8d81f3c6f65235f509c86e2ba48dbab1
Author: spender <spender>
Date:   Mon Dec 13 18:40:10 2004 +0000

    integrate learning config

commit e846229c17753bb5a94f8d06e4ba028ae658779c
Author: spender <spender>
Date:   Mon Dec 13 04:02:25 2004 +0000

    add define

commit 48287143cd3cd15f8d71734dd2faf2f58fe9f57d
Author: spender <spender>
Date:   Mon Dec 13 03:58:46 2004 +0000

    learning config updates

commit f37ebea04cdf36c4c281322e0281a49a316a2e78
Author: spender <spender>
Date:   Sun Dec 12 14:35:39 2004 +0000

    add basic learn config parser

commit 5413f9e1e072310d7480bfb7f2ad2d28e376dabf
Author: spender <spender>
Date:   Sun Dec 12 14:05:57 2004 +0000

    add inheritance-based learning

commit 160fb5ce20a1def9307b3f1e7ee6e2238a4cdb88
Author: spender <spender>
Date:   Fri Dec 10 22:15:54 2004 +0000

    strip off deleted

commit a467acd4b0665c231f8ab313f2c662ecafadd2f0
Author: spender <spender>
Date:   Tue Dec 7 18:47:12 2004 +0000

    update define

commit 2bbb5eb520b54a1fbfa059d205708fec4f1f6f0d
Author: spender <spender>
Date:   Tue Dec 7 18:28:37 2004 +0000

    fix glibc 2.3.3 problem

commit 0397e65e2a5aef32d8c24f25199d1e3ed17a03b2
Author: spender <spender>
Date:   Mon Dec 6 17:44:09 2004 +0000

    more cleanup

commit 28bea10f65ac26baeed15b5c04bd234f6508ec1d
Author: spender <spender>
Date:   Mon Dec 6 17:44:08 2004 +0000

    more cleanup

commit 1d7be3bed022ec69c45e84707d4a75b5e2ec13be
Author: spender <spender>
Date:   Mon Dec 6 17:42:32 2004 +0000

    more cleanup

commit 4d502656222dce48dfdc7292da35701d30154c9a
Author: spender <spender>
Date:   Mon Dec 6 17:39:21 2004 +0000

    more cleanup

commit adc03477be1167eaf0518e7b733b9e115e0c9f4e
Author: spender <spender>
Date:   Mon Dec 6 17:37:42 2004 +0000

    more cleanup

commit bcfb62e5ca14e66f1567a953ec57ceda4d88673c
Author: spender <spender>
Date:   Mon Dec 6 17:31:18 2004 +0000

    clean up allocations

commit 7a09fdf190a42f8a8e2294146428cbb8e332d2f4
Author: spender <spender>
Date:   Mon Dec 6 17:28:34 2004 +0000

    fewer allocations

commit c6f2568df1c1bb80b934f151bc82a7168824ff23
Author: spender <spender>
Date:   Mon Dec 6 15:44:05 2004 +0000

    simplify kern version

commit 03be9e54797fb3f3c940bb3342efa4312c901c57
Author: spender <spender>
Date:   Wed Nov 24 14:04:16 2004 +0000

    update copyright date

commit 7a60706ebd7b9b5fe21080a3797cdd1b9a9d43e8
Author: spender <spender>
Date:   Tue Nov 23 15:34:13 2004 +0000

    fix bison error

commit 36573bada4186aad1eb4ad75d99d1a1cb6a0ffc3
Author: spender <spender>
Date:   Tue Nov 23 15:33:40 2004 +0000

    fix bison error

commit f34bad1846bb435ebfad08e9b523eb8b2e40beb1
Author: spender <spender>
Date:   Tue Nov 23 15:32:46 2004 +0000

    fix bison error

commit 8fb039af6f9f72203f22c9ec0ad67ab12b98cc3b
Author: spender <spender>
Date:   Tue Nov 23 12:05:30 2004 +0000

    compile fix

commit b315dfbc7b4f0c25e5592a0d75fdedbc73bd05ff
Author: spender <spender>
Date:   Fri Nov 19 23:39:35 2004 +0000

    free ->users

commit cb70c09316771308f778c58ba73c917177caf58e
Author: spender <spender>
Date:   Fri Nov 19 23:31:21 2004 +0000

    dramatically improve memory footprint and running time of full learning analysis

commit efa48907927b0b0f74e07a8dcf1bdfeb1c823d90
Author: spender <spender>
Date:   Thu Nov 18 01:11:01 2004 +0000

    don't require /dev/grsec for full learning analysis

commit 678be436b8f3ac368605717a511b354e62d493a1
Author: spender <spender>
Date:   Wed Nov 17 14:27:32 2004 +0000

    fix define

commit 47548b406addeb20b8e6cd4079b81a8a4dece561
Author: spender <spender>
Date:   Fri Nov 5 13:16:58 2004 +0000

    don't bother restricting kernel threads, they have all capabilities enabled

commit 85be645fcb724215973db0c7c74114d8d7f56098
Author: spender <spender>
Date:   Fri Oct 29 00:03:43 2004 +0000

    fixes from barry schwartz

commit 33aef5bf0ec53c118ec8649ec91f96646fab5238
Author: spender <spender>
Date:   Thu Oct 14 16:01:59 2004 +0000

    add to kernel role

commit ddf769e366140d2050fb3b10826875be45d3a5f1
Author: spender <spender>
Date:   Thu Sep 23 14:17:20 2004 +0000

    add missing parenthesis

commit 6dcd3c46a73c1ec3c5e26adda84a179bf8ed9f8d
Author: spender <spender>
Date:   Tue Sep 21 12:40:12 2004 +0000

    remove hardcoding of /etc/grsec

commit 1aaa532368b94f22e803c474605c0a3197be20ab
Author: spender <spender>
Date:   Tue Sep 21 12:34:35 2004 +0000

    fix typo

commit 77695c87c7dcf8682863766cd2fa37fe58c2fe8a
Author: spender <spender>
Date:   Tue Sep 21 01:44:01 2004 +0000

    fix index, thanks to barry schwartz

commit 750d65d108e4b1ca848324408333113dcfa3f7b3
Author: spender <spender>
Date:   Mon Sep 20 13:17:06 2004 +0000

    allow RES_NOFILE ulimited

commit 423953291579b1e27305801738d5cf8ff60dc2c2
Author: spender <spender>
Date:   Thu Sep 16 19:38:52 2004 +0000

    allow rw to /proc/bus/usb by kernel modules

commit 2661b9085535a514855e556f55d4ff5dc42a7345
Author: spender <spender>
Date:   Tue Sep 7 13:26:39 2004 +0000

    update mode numbers

commit d667f638bc474953675178f13662f4c4b712c794
Author: spender <spender>
Date:   Tue Aug 10 18:02:00 2004 +0000

    fix error, thanks to vinceh

commit 0f44ed4f35983165a2bc8b681f4045e92de01be4
Author: spender <spender>
Date:   Wed Aug 4 23:59:20 2004 +0000

    match most specific globbed rule first

commit 8c45c638c2e8477409d86581169fc82d9705fe1c
Author: spender <spender>
Date:   Wed Jul 28 21:54:16 2004 +0000

    fix null dereference

commit a36c91df74a1795e01ecf514033a2b1fdc733da6
Author: spender <spender>
Date:   Fri Jul 23 01:57:59 2004 +0000

    bugfix

commit ce55ff444f563b06d33018afe3436a1f3ce8ee19
Author: spender <spender>
Date:   Fri Jul 23 01:08:00 2004 +0000

    fix typo

commit ecc89d5ee4fbdb7a11fea179f86a30cb88ecfea9
Author: spender <spender>
Date:   Fri Jul 23 00:57:29 2004 +0000

    zero

commit e3f9f47cf85df129c606747966912f52b49e65c6
Author: spender <spender>
Date:   Fri Jul 23 00:56:39 2004 +0000

    null out name

commit ea3bfe6049b4b492cbbfef17e15f76247524e1e2
Author: spender <spender>
Date:   Fri Jul 23 00:47:51 2004 +0000

    remove comment

commit e9595c6d5b9d27a775ee7527eeaa09f1e0849b15
Author: spender <spender>
Date:   Fri Jul 23 00:42:38 2004 +0000

    bugfix

commit dab5a417d3b60085691d24d7f2e601dc990fe834
Author: spender <spender>
Date:   Fri Jul 23 00:36:49 2004 +0000

    Fix directory including

commit 00769980c99c7c6d5068640b325bdcea8cb55ddd
Author: spender <spender>
Date:   Fri Jul 9 18:43:37 2004 +0000

    automatically detect if being compiled on sparc64 and modify compiler flags accordingly

commit 5e6cb5aec8fc9e110e76454b91993d8bccd1be7b
Author: spender <spender>
Date:   Fri Jul 9 18:36:28 2004 +0000

    remove whitespace

commit 43cfe78a62581a09f61006cc384eb8c1939baa86
Author: spender <spender>
Date:   Fri Jul 9 18:21:57 2004 +0000

    automatic conversion to /etc/grsec/policy

commit b76d0504f7160e1f8ab3ff8acd8adef09e9aa717
Author: spender <spender>
Date:   Fri Jul 9 15:27:20 2004 +0000

    fix directory including

commit e0d473193b78a8e8f6deee8cf496ff3b1f1b5907
Author: spender <spender>
Date:   Fri Jul 9 13:34:10 2004 +0000

    add more documentation to policy

commit a177c2b5dfb4fd513831577fc1a3dc583f43c3b5
Author: spender <spender>
Date:   Fri Jul 9 12:58:37 2004 +0000

    update policy

commit 271c16ae5f809c44232a81da77240f304468d516
Author: spender <spender>
Date:   Fri Jul 9 12:23:49 2004 +0000

    update policy

commit 4ee9611abc37a1b2854d454a522af45b8bbd0c80
Author: spender <spender>
Date:   Fri Jul 9 12:20:37 2004 +0000

    update policy

commit a3da1a98af3f50bc7c6778489b27ca3a87a4bcd3
Author: spender <spender>
Date:   Fri Jul 9 12:19:34 2004 +0000

    update policy

commit 6e3963cec15baaf6e6d06ac821c695a3735c93b5
Author: spender <spender>
Date:   Fri Jul 9 12:18:00 2004 +0000

    update policy

commit b426cec9aba46e3f5241e151f0f1af00759bc68d
Author: spender <spender>
Date:   Thu Jul 8 13:58:46 2004 +0000

    add back including of directories

commit b511bbf740c5eaaab5417012d00696e4f3ca245d
Author: spender <spender>
Date:   Wed Jul 7 00:55:49 2004 +0000

    add /etc/ld.so.preload r

commit 1ca711d78b82d263c0f2b5164126c9f743e2fa9c
Author: spender <spender>
Date:   Tue Jul 6 21:54:15 2004 +0000

    add /dev/null rw

commit d44369660a46a8c6825039b6507eaab609e7e36e
Author: spender <spender>
Date:   Tue Jul 6 13:45:16 2004 +0000

    allow /dev/tty rw

commit 390a1bed1498a31c4201d49a4a7610996d10989a
Author: spender <spender>
Date:   Tue Jul 6 13:20:17 2004 +0000

    allow domain learning

commit df15aa8bc556fd4fb39128d9d53287a1ea88c8c0
Author: spender <spender>
Date:   Mon Jul 5 19:02:09 2004 +0000

    add domain info

commit 58c0fac457d6702d98fd7a744884b2b3174bb70e
Author: spender <spender>
Date:   Mon Jul 5 18:47:31 2004 +0000

    add domain support, naming convention changes, bugfixes

commit 129255180399cca384acfaee4d23431187c9e3c8
Author: spender <spender>
Date:   Mon Jul 5 15:31:23 2004 +0000

    fix allocation

commit 0c4c4cb6774b3b59a223e05afb5505f943b673f6
Author: spender <spender>
Date:   Mon Jul 5 15:30:35 2004 +0000

    revert last change

commit 8864f26aa7edfefba915d6098060fb8f6399942c
Author: spender <spender>
Date:   Mon Jul 5 15:26:25 2004 +0000

    fix allocation

commit 2c11ea4ff5518498590445e9136fc405b587b0bd
Author: spender <spender>
Date:   Wed Jun 30 16:51:10 2004 +0000

    update minor number

commit 8f733a91dd1551278fedb5d071b0dd1e33165cac
Author: spender <spender>
Date:   Wed Jun 30 16:48:06 2004 +0000

    change minor number

commit 70fbe527e8988696be74eedc4d4b2dd9265a2618
Author: spender <spender>
Date:   Tue Jun 29 16:19:08 2004 +0000

    allow new regex matching

commit 81e52f484750ceba1f624291bc0ff9695c4cb0da
Author: spender <spender>
Date:   Fri Jun 25 17:04:25 2004 +0000

    update version

commit cdb369c6b8fcebd28c9e1ddb5fce4b8454cb57a2
Author: spender <spender>
Date:   Wed Jun 23 21:19:53 2004 +0000

    return nonzero exit code on failure

commit aadd1c2a20fc30e666a5e061da0722b9a4c54430
Author: spender <spender>
Date:   Wed Jun 23 20:55:46 2004 +0000

    use glibc elf headers

commit 6a62c122321e932767ae7d8508f0bae9a2e0b82e
Author: spender <spender>
Date:   Fri Jun 18 02:50:52 2004 +0000

    remove debugging

commit b5e322c0d76176e076b26e96f3becfa1aade5bd8
Author: spender <spender>
Date:   Fri Jun 18 02:50:20 2004 +0000

    fix learning analysis crash

commit 56debf5a242d54a3a28957ccb08e2bbd5db3877b
Author: spender <spender>
Date:   Fri Jun 18 01:51:29 2004 +0000

    remove debugging

commit d346af43fda4d3209a6d3cf7a6b7de638d0a623d
Author: spender <spender>
Date:   Fri Jun 18 01:50:57 2004 +0000

    fix crash with nested subjects

commit 35148042e57622072439c6281bc9b597939bec05
Author: spender <spender>
Date:   Wed Jun 16 10:02:54 2004 +0000

    don't insert nested subjects into main hash

commit 831291831a537a12e5a7e4b7ade08f6c55f0e829
Author: spender <spender>
Date:   Mon Jun 14 07:09:48 2004 +0000

    fix crash

commit db0b52902f6141780001cfc1aeb1ddec9956032a
Author: spender <spender>
Date:   Sun Jun 13 04:12:04 2004 +0000

    compile fix

commit bf24fd9d270437c1cd4eda68a9b70555aa4e74a3
Author: spender <spender>
Date:   Sat Jun 12 09:04:36 2004 +0000

    pass only a pointer to the kernel during interaction

commit 74a37f3e5690a2db9bc946e878055978d48bd22a
Author: spender <spender>
Date:   Sat Jun 12 08:31:04 2004 +0000

    don\'t require password for role deauthentication

commit fc3ebb927dada39c27c495f60657ca4700b44b91
Author: spender <spender>
Date:   Sat Jun 12 08:21:07 2004 +0000

    fix segfault in lex/yacc due to buggy gcc

commit 72828f941f1b797a459ae62f4fa70d74555c01e2
Author: spender <spender>
Date:   Mon May 31 15:03:56 2004 +0000

    add check for default role

commit 901ed614febc76522935d8e42da006126b295546
Author: spender <spender>
Date:   Sat May 8 19:26:47 2004 +0000

    reduce complexity of finding subject to inherit from

commit 2f64fb531654707cf0b11e7dc541eec49d2bd8ac
Author: spender <spender>
Date:   Tue Apr 6 19:09:33 2004 +0000

    add mode

commit 55d4e419fdf1e02f0d847d466f26f5ef44c90149
Author: spender <spender>
Date:   Tue Apr 6 19:05:48 2004 +0000

    much better reduction of directories with multiple modes

commit 7c4c5391b0a48ca656449031e79f797b346d460a
Author: spender <spender>
Date:   Tue Apr 6 03:10:05 2004 +0000

    comment out object rewriting until it can be handled properly in the reduction code

commit 3adcb661b4985308db2676a247ec1ae0461f7163
Author: spender <spender>
Date:   Tue Apr 6 02:08:01 2004 +0000

    revert last change

commit a3c17ab01a664edb8c52b7ec10e6cda67bcab31b
Author: spender <spender>
Date:   Tue Apr 6 02:03:58 2004 +0000

    don't reduce /proc/*/blah to /proc/*

commit bc3db07655115af95a51d1166d3a75cb4570243c
Author: spender <spender>
Date:   Tue Apr 6 00:12:55 2004 +0000

    return the orig string

commit cf934893c0b2c458fca9a9b70c2b57774836842d
Author: spender <spender>
Date:   Tue Apr 6 00:06:41 2004 +0000

    fix crash

commit 6a95a7eb7743a04cf8ad98dc7749053079a6ae4d
Author: spender <spender>
Date:   Tue Apr 6 00:01:47 2004 +0000

    fix typo

commit fa621a5a62a80e077b2250b80cc971eed89fb400
Author: spender <spender>
Date:   Mon Apr 5 23:59:52 2004 +0000

    optimizations and pre-disk /proc/<pid> rewriting

commit 447d6985531e7fd532118ffc4482022aceeda812
Author: spender <spender>
Date:   Sun Apr 4 05:19:40 2004 +0000

    fix 2.4/2.6 support

commit 24b293b7d5bddb700c2bd98b6741d307ac2b3c5b
Author: spender <spender>
Date:   Sat Apr 3 17:18:11 2004 +0000

    move function, fix typo

commit eec71fc1f3247aac09b6de5c776ca0181c339611
Author: spender <spender>
Date:   Sat Apr 3 17:17:04 2004 +0000

    fix typo

commit 8e25f5b0917f41c33bdf5048535a37ded05cbbe5
Author: spender <spender>
Date:   Sat Apr 3 17:13:04 2004 +0000

    compile fix

commit f92decd8727fbca6a9eaf4f029452ec390848b5f
Author: spender <spender>
Date:   Sat Apr 3 17:11:59 2004 +0000

    revert last change

commit 7d38064b22fd499122995bf723b0de702aa7f3d7
Author: spender <spender>
Date:   Sat Apr 3 17:11:28 2004 +0000

    include header

commit c9f321102965f1a816d04255f36fc98496d1c8e8
Author: spender <spender>
Date:   Sat Apr 3 16:22:57 2004 +0000

    support both 2.4 and 2.6

commit ad12aa9f636b1bf5dad5e9d97e93f728441a5d55
Author: spender <spender>
Date:   Sat Apr 3 16:03:57 2004 +0000

    remove t

commit b7d4b311562f821402572fc1664567aa077bbde2
Author: spender <spender>
Date:   Sat Apr 3 16:03:42 2004 +0000

    remove t

commit 7dfe1181660ac5f06da449e2f7a01ccb018d8067
Author: spender <spender>
Date:   Sat Apr 3 16:03:13 2004 +0000

    make the no ptrace flag an object mode

commit cfa5a0468bb7765d9fbc1140ef6a868401467083
Author: spender <spender>
Date:   Sat Apr 3 15:48:26 2004 +0000

    add /home/spender support to user roles

commit 18214624c2a94e4ba8d25ff1dca0477832360365
Author: spender <spender>
Date:   Wed Mar 31 01:20:18 2004 +0000

    warning fixes from peter s mazinger

commit c9b621c61237ac628dc73af77c6d400af043eed1
Author: spender <spender>
Date:   Thu Mar 25 01:26:03 2004 +0000

    update last change

commit 30d8d5fbcbe449709ecafc1cd3b12bdbf7e145a7
Author: spender <spender>
Date:   Thu Mar 25 01:21:18 2004 +0000

    don't read in pwfile on unauth

commit 42fcafb7ed3e231fa16194b4d703d0ff08ffc751
Author: spender <spender>
Date:   Thu Mar 25 01:20:26 2004 +0000

    fix unauth problem

commit ec93a364aacd7fbcd29baeb376581cd4f066d994
Author: spender <spender>
Date:   Fri Mar 12 11:16:44 2004 +0000

    add /dev/urandom access for propoliced systems

commit 3ee2e1524b745780ca5f7469bd5285a4b49b9b75
Author: spender <spender>
Date:   Wed Mar 10 02:54:44 2004 +0000

    better structure packing

commit 3296b4f6028b7678481d4526688c4f4614e69a6a
Author: spender <spender>
Date:   Wed Mar 10 01:45:17 2004 +0000

    ACL -> RBAC

commit fcc4cdb1bf79fe7a8f91b07768644388b503d163
Author: spender <spender>
Date:   Mon Mar 8 02:45:36 2004 +0000

    update docs

commit 6160b92dd2ad38c42308ec12a4c60a5c51c70137
Author: spender <spender>
Date:   Mon Mar 8 00:30:02 2004 +0000

    compile fixes

commit 014e9d22a8a9784777d8f9085b638ab1dc103d98
Author: spender <spender>
Date:   Mon Mar 8 00:22:09 2004 +0000

    implement user and group transition checking and enforcement

commit 967d48e138b7e9829b2c8417795df50730a4635c
Author: spender <spender>
Date:   Thu Mar 4 05:30:05 2004 +0000

    update progress

commit daff6095c28b4e5345c5d8dc2cdad035ee70f24e
Author: spender <spender>
Date:   Thu Mar 4 05:27:57 2004 +0000

    update progress

commit 75b776ae826d1e0a96a93e54f323e496ec20cb68
Author: spender <spender>
Date:   Thu Mar 4 05:20:26 2004 +0000

    flush buffers

commit 38243804ff67167683e04f79ef097b602861e7ab
Author: spender <spender>
Date:   Thu Mar 4 05:18:07 2004 +0000

    update progress

commit 5913417dad391465b4e1e1aab6c9d6250a2ee355
Author: spender <spender>
Date:   Thu Mar 4 05:13:08 2004 +0000

    add more progress

commit 966d2ed70991d264db5754cc7129cd17e3c2db8f
Author: spender <spender>
Date:   Thu Mar 4 05:09:57 2004 +0000

    fix typo

commit 8a4f36f957639416f3c70bcac0d93a6e22b0e3ca
Author: spender <spender>
Date:   Thu Mar 4 05:09:20 2004 +0000

    add progress

commit 03b2674b2a2810162fa063da356bfa96877102ad
Author: spender <spender>
Date:   Thu Mar 4 04:27:56 2004 +0000

    fix hash

commit 447327b4d94a33751047ce46db7b323ab204f059
Author: spender <spender>
Date:   Thu Mar 4 04:21:39 2004 +0000

    fix null

commit de739afe7b6fc67c258c8550d22cd8f63eea5041
Author: spender <spender>
Date:   Thu Mar 4 04:17:04 2004 +0000

    fix typos

commit 1015e891281fe6ea5403077e25569efc8af04502
Author: spender <spender>
Date:   Thu Mar 4 04:15:36 2004 +0000

    compile fix

commit 0c830f35fd2611cca914400f06fecd5bb2261b43
Author: spender <spender>
Date:   Thu Mar 4 04:14:06 2004 +0000

    compile fixes

commit 6201f6481de043d97c86fa42baf43a79432ebb9b
Author: spender <spender>
Date:   Thu Mar 4 04:11:59 2004 +0000

    compile fixes

commit 350e774e0f0296b35031a594ad1fb8fd538b1577
Author: spender <spender>
Date:   Thu Mar 4 04:05:42 2004 +0000

    first attempt at learning optimizations

commit 37a6409f2886abf272c7890705a882617a77fe19
Author: spender <spender>
Date:   Thu Mar 4 01:59:42 2004 +0000

    update frees

commit 98bc4220e387a3791cee62f515e6f74c309a67cf
Author: spender <spender>
Date:   Wed Mar 3 19:18:11 2004 +0000

    remove frees

commit 9292434ac7fea0d03f5ffe89fda611c6253c66be
Author: spender <spender>
Date:   Wed Mar 3 19:15:35 2004 +0000

    mimic realloc behavior

commit d17a5db694a3368b1d5a75483a83af48a172e4ea
Author: spender <spender>
Date:   Wed Mar 3 18:48:33 2004 +0000

    fix parsing

commit 71c167b0c10f80df525673594dfcce51e26ec2ce
Author: spender <spender>
Date:   Wed Mar 3 18:44:26 2004 +0000

    update gradm acl

commit 00a8f89d29973cdb60f52bfe9578703ac4b4f4e0
Author: spender <spender>
Date:   Wed Mar 3 18:41:13 2004 +0000

    more flexible include

commit 5ec055dddb2c4ab0284780104cc2e8a845d5fb8e
Author: spender <spender>
Date:   Tue Mar 2 20:57:15 2004 +0000

    update docs

commit 1608f077fd1834e3e8a18fdaebf425a36ff31bf4
Author: spender <spender>
Date:   Tue Mar 2 20:42:31 2004 +0000

    implement new capability inheritance system

commit 537d4af81412e325c0f1e7122badada3db8dcc21
Author: spender <spender>
Date:   Tue Mar 2 19:13:40 2004 +0000

    use new learning log system that can store more logs

commit d664848fd31e70ad19ae11ed8f193e0cb7199ef3
Author: spender <spender>
Date:   Sun Feb 29 15:55:35 2004 +0000

    force subjects to have hash table

commit f66cd38d752c517894065628ac71b5d924bb6ada
Author: spender <spender>
Date:   Sun Feb 29 15:49:28 2004 +0000

    copy over linked list

commit 8feebf07b97fd02eb023c9e4f268f2e52e0dd507
Author: spender <spender>
Date:   Sun Feb 29 15:36:03 2004 +0000

    fix typo

commit da09f4f83779689fd31d274050aacdd9453c38f8
Author: spender <spender>
Date:   Sun Feb 29 15:31:25 2004 +0000

    fix function calls

commit 7cfc6893ed17f834bb7c1701522169f132ad3829
Author: spender <spender>
Date:   Sun Feb 29 15:23:22 2004 +0000

    fix lookups

commit 6a87bd24baad08587e02b4fc18e356b6a7dcad11
Author: spender <spender>
Date:   Sun Feb 29 15:05:11 2004 +0000

    convert userspace lookup functions to O(1)

commit 99823ee67d4a0e3b52100a1d513fa8289b490205
Author: spender <spender>
Date:   Wed Feb 25 03:11:02 2004 +0000

    use new anticipatory memory allocator and resizer

commit 2412906aa315766e65e49cd83346dba5e216978d
Author: spender <spender>
Date:   Sun Feb 22 15:12:20 2004 +0000

    implement userspace code for two new subject flags

commit b174f9e224952728a25ea73f3f6c06e8acf3646e
Author: spender <spender>
Date:   Sat Feb 21 18:54:00 2004 +0000

    compile fix

commit e612c9d67b7100b6ee922305a164febc41f8698d
Author: spender <spender>
Date:   Sat Feb 21 18:38:09 2004 +0000

    kernel interpretation of globbing

commit 7460edeb4b97a23301e5a0b0dbee981bfe50eddd
Author: spender <spender>
Date:   Thu Feb 19 01:34:39 2004 +0000

    version update

commit 7c46f51ed8d2539cd0c890425a3daaedd8c07850
Author: spender <spender>
Date:   Wed Feb 18 14:37:17 2004 +0000

    merge kernel inheritance code

commit 7ba90b09d7498abb8b0bb824cff77fb044437535
Author: spender <spender>
Date:   Fri Jan 30 02:46:25 2004 +0000

    update factor

commit 735a72adf534196121db69f4de07650b81e890d4
Author: spender <spender>
Date:   Fri Jan 30 02:42:15 2004 +0000

    add anticipatory allocator and resizer, allocator is 70 percent faster than malloc, resizer is 700 percent faster than realloc

commit 207110526141571c29d90898a63446e8f5f5bb92
Author: spender <spender>
Date:   Mon Dec 15 14:01:16 2003 +0000

    revert change

commit a509593e1d926e226e6fa73684626dc9b509ddcf
Author: spender <spender>
Date:   Mon Dec 15 13:53:25 2003 +0000

    add header

commit db79e1559c69fdb8ff56a6c89af5d95551ec9d37
Author: spender <spender>
Date:   Mon Dec 15 13:51:50 2003 +0000

    set exclusive bit on terminal

commit d00e8e2269603bb7134ec85702202138a71ba625
Author: spender <spender>
Date:   Mon Dec 15 02:58:58 2003 +0000

    only set the nested pointer on executable objects

commit 75e066ed35753af5781d4b4dfd1027516891befb
Author: spender <spender>
Date:   Sun Dec 14 00:22:06 2003 +0000

    allow nested subjects on directories

commit 7f88713c4ea6e63cd39dd6a180b83acf1a4e93c8
Author: spender <spender>
Date:   Sat Dec 13 23:48:29 2003 +0000

    cleanups

commit 8dcf00de5b16ba4c8e2393ce7ca7059993603089
Author: spender <spender>
Date:   Tue Dec 2 02:30:42 2003 +0000

    allow 64-bit libraries

commit b70264ffcdc8cd17f3c898b409d50454eab0636e
Author: spender <spender>
Date:   Sun Nov 30 21:20:23 2003 +0000

    update analysis/enforcement

commit 77ca2e46ab39865c38ebc1fc728def1cbe6970ed
Author: spender <spender>
Date:   Sun Nov 30 21:13:31 2003 +0000

    update acl

commit 56e2352e5f2546d25bd1aca83de9c6d74f9d20cb
Author: spender <spender>
Date:   Tue Nov 18 17:55:22 2003 +0000

    update header

commit eb1a77052066d8d55d911ec00b89c367983b5ee4
Author: spender <spender>
Date:   Tue Nov 18 17:52:18 2003 +0000

    update version

commit 0c6d1a66209c689fffb2bbbfbcc9bd6e2b53f7d7
Author: spender <spender>
Date:   Tue Nov 18 17:51:56 2003 +0000

    can't be static any longer, due to LDAP and such

commit bb019cb69ccc0920d5909742203be4c2c8d59248
Author: spender <spender>
Date:   Tue Nov 18 01:06:40 2003 +0000

    update defines

commit 8cbda5c03017aea0cbb517b5dde1f125a9847c46
Author: spender <spender>
Date:   Mon Nov 3 02:09:55 2003 +0000

    update lexer

commit 0281f0eb038659bf8c1a4a2584cd2c06b08fef13
Author: spender <spender>
Date:   Wed Aug 20 11:33:45 2003 +0000

    add un-admin mode

commit 3452f2ffeccd0ca3a2077b90bbf43ba5e5d13e73
Author: spender <spender>
Date:   Thu Aug 14 18:15:11 2003 +0000

    update default acl

commit d59ce9d5d0085a460c84073a009c97f3d796fafa
Author: spender <spender>
Date:   Tue Aug 12 16:58:36 2003 +0000

    actually fix it

commit b4891cdbb553993038451c79ee9c28b8a62b7e08
Author: spender <spender>
Date:   Tue Aug 12 16:51:00 2003 +0000

    fix stupid typos

commit bfed7bc2c8e64d7e6e353dd4df7ac971f33b9cfc
Author: spender <spender>
Date:   Tue Aug 12 16:39:25 2003 +0000

    fix

commit 81ef43cf759a5b11acf8f314297cf3e12acf179b
Author: spender <spender>
Date:   Tue Aug 12 16:26:58 2003 +0000

    fix logic

commit b3ca4a1c3c32c0d3ef0e4b6258d249ed459f762d
Author: spender <spender>
Date:   Tue Aug 12 16:18:45 2003 +0000

    resolve full path for learning

commit 8f643c439dd4d4b4c758fc61849f53b15bfb4f80
Author: spender <spender>
Date:   Tue Aug 12 14:05:11 2003 +0000

    update

commit 2b2506c381da1d6013b5509e717776e82bee31e4
Author: spender <spender>
Date:   Tue Aug 12 13:57:21 2003 +0000

    revert last change

commit 3d770590666df574c6591ed64c55e8032dde390f
Author: spender <spender>
Date:   Tue Aug 12 13:41:27 2003 +0000

    initialize

commit 1b5bdcd557c4a9b7713a152298b09997c1d8d94f
Author: spender <spender>
Date:   Tue Aug 12 13:00:01 2003 +0000

    better error reporting when including directory

commit 34f7bd9142d3ba97473c3a9e5898f19744101c57
Author: spender <spender>
Date:   Thu Aug 7 18:44:15 2003 +0000

    fix

commit fab7bb41427b3cf0154bc8057959dc4807b9a0d0
Author: spender <spender>
Date:   Thu Aug 7 18:42:20 2003 +0000

    still looking for the right numbers

commit cc5f664ed5d9842adc5d7566be03655f7deffe15
Author: spender <spender>
Date:   Thu Aug 7 18:39:25 2003 +0000

    update

commit 166e3f39f8a5ac02ad1afed2d059731150a24548
Author: spender <spender>
Date:   Thu Aug 7 18:36:49 2003 +0000

    updates

commit c8322f8d2211da851b329bb2b92657213bf6a418
Author: spender <spender>
Date:   Thu Aug 7 18:35:25 2003 +0000

    update

commit 0e525afd926c1ef0665063b76afae8b2d332273a
Author: spender <spender>
Date:   Thu Aug 7 18:33:48 2003 +0000

    some more

commit ded4464d46afb82201b1b4fe4c29f695abc09c78
Author: spender <spender>
Date:   Thu Aug 7 18:32:55 2003 +0000

    more changes

commit 5dce0983e58ffb77f771dbc146b0dac681b02f70
Author: spender <spender>
Date:   Thu Aug 7 18:31:07 2003 +0000

    more updates

commit fd31d9524e62c97f94119f56ac5227ae636b09d2
Author: spender <spender>
Date:   Thu Aug 7 18:28:36 2003 +0000

    updates

commit 2a07e7ae88bba05b23640e2868e0d81782d0dd79
Author: spender <spender>
Date:   Thu Aug 7 18:27:03 2003 +0000

    updates

commit 357cb9b3f689190dc200d1ec028bcdcc694cc2db
Author: spender <spender>
Date:   Thu Aug 7 18:22:05 2003 +0000

    updates

commit 8f9c2b7f4087a97d2ca6a2294865416e4ad2dd7b
Author: spender <spender>
Date:   Thu Aug 7 18:19:29 2003 +0000

    more of a gradient

commit 7bfc2c752a76468d92ca8afa28b2a542cc810496
Author: spender <spender>
Date:   Thu Aug 7 18:16:09 2003 +0000

    use tabbing gradient

commit f3ae79e29b145af828b13d7df563ccb2abcfac19
Author: spender <spender>
Date:   Thu Aug 7 18:12:37 2003 +0000

    use tabs

commit 03de1159f247b514de06ff6fb2849eaf51be392c
Author: spender <spender>
Date:   Thu Aug 7 18:01:37 2003 +0000

    fix header

commit a61369cb65fb1590a6cc41d4f12abb748611eec8
Author: spender <spender>
Date:   Thu Aug 7 18:00:39 2003 +0000

    fix up headers

commit 0ac6c38610c9e63cd43a55311f3991c82a1c0d19
Author: spender <spender>
Date:   Wed Aug 6 13:36:16 2003 +0000

    add userspace code for TPE in the rbac system

commit a1e2a2f39f5dfd42cc66c1429a8699eaf3653379
Author: spender <spender>
Date:   Wed Aug 6 13:26:02 2003 +0000

    don't kill other stuff accidentally

commit 47d153c7fba47b3de891e751cf4c546adeebe116
Author: spender <spender>
Date:   Tue Jul 29 18:52:36 2003 +0000

    don't memset the entire buffer on each read

commit 74a7de56b59da655d44c1079651c6734ac76645d
Author: spender <spender>
Date:   Tue Jul 29 00:37:36 2003 +0000

    don't reduce /usr, i've seen it in a couple of my acls, not nice

commit 3eb8ca01f5daa92187d5f8142f19762ce882df5d
Author: spender <spender>
Date:   Tue Jul 29 00:35:19 2003 +0000

    update protected paths

commit 034576c90086752342fc30673fb9463eb6254780
Author: spender <spender>
Date:   Thu Jul 24 19:05:21 2003 +0000

    update sizes

commit 720116faed5cd6058fe8bd92c8f1cd886e48c9cb
Author: spender <spender>
Date:   Wed Jul 23 23:16:54 2003 +0000

    fix reload

commit c2fa69796fdbf312a1fa5bbd23d434a6dfcf15a1
Author: spender <spender>
Date:   Wed Jul 23 16:44:42 2003 +0000

    update for kernel changes

commit d35952d2bb916be686bf7bf2c09973d4e474de84
Author: spender <spender>
Date:   Tue Jul 15 19:22:13 2003 +0000

    update documentation

commit 6fa5ac80d7c9d5784c827507fe532d4d0303968f
Author: spender <spender>
Date:   Tue Jul 15 19:10:17 2003 +0000

    fix

commit de342e14e78da588f37e14a865caa0374b560e09
Author: spender <spender>
Date:   Tue Jul 15 19:07:34 2003 +0000

    cleanup

commit eba82bfabe80046cdf782640564139acddace808
Author: spender <spender>
Date:   Tue Jul 15 19:05:52 2003 +0000

    cleanup

commit 877bbd5cc22e1271db303686bde1f83768c14216
Author: spender <spender>
Date:   Tue Jul 15 19:03:01 2003 +0000

    cleanup

commit 46590d075647078c4e3bcae5c922b6ad4a6fb417
Author: spender <spender>
Date:   Tue Jul 15 18:56:39 2003 +0000

    fix learning bug

commit 38a9621e2f75cef20597c3028347ec663c50db0f
Author: spender <spender>
Date:   Tue Jul 15 18:52:15 2003 +0000

    fix extraction

commit c8fee1dd34a62b2e7560b3bf845002dbfda4fc0d
Author: spender <spender>
Date:   Tue Jul 15 18:36:47 2003 +0000

    fix initializer

commit 60aaa3bd4a0d79305096a0deadef3ca13064b0a8
Author: spender <spender>
Date:   Tue Jul 15 18:29:08 2003 +0000

    cleanups

commit 211526b99bbbd60f24b6bf011c42f2028544b364
Author: spender <spender>
Date:   Tue Jul 15 18:06:19 2003 +0000

    no need for ntohl

commit a9371da47c30c94766ae1f8587e5f565823e559b
Author: spender <spender>
Date:   Mon Jul 14 23:38:55 2003 +0000

    fix endianness bugs

commit cc27d348a279f6cfb8ddaab424625992b5a4e76a
Author: spender <spender>
Date:   Mon Jul 14 20:41:43 2003 +0000

    put it back

commit 0c7df87f5a8c141f51cc1b00b69ea81c15764099
Author: spender <spender>
Date:   Mon Jul 14 18:07:43 2003 +0000

    cosmetic fix

commit d37469809639508957a8adc77a9835bc3cc704fd
Author: spender <spender>
Date:   Mon Jul 14 17:31:48 2003 +0000

    fix learning log generation while rbac enabled

commit f45fbfd56afc5b3cc4ab4e47d8ac7f9531e454d1
Author: spender <spender>
Date:   Thu Jul 10 18:06:59 2003 +0000

    fix several kernel daemons

commit 775a8184cba9bdbcca66a99be8e5c204c3dc9bb5
Author: spender <spender>
Date:   Thu Jul 10 00:15:59 2003 +0000

    don't allow -F and -E

commit 31d145ac9b25d5b310f11d64e899c60537c01441
Author: spender <spender>
Date:   Wed Jul 9 21:09:34 2003 +0000

    fix warning

commit 7d93edfcf7a3ef65e0517c1178fa1e5adde7dedc
Author: spender <spender>
Date:   Wed Jul 9 15:14:44 2003 +0000

    add check for grlearn

commit 0153579d4aa4606c4bb4fa19aadb36e9dc74ee1b
Author: spender <spender>
Date:   Mon Jun 30 17:00:42 2003 +0000

    cleanups thanks to peter s. mazinger, learning fix by me

commit 5515c2b8a69e4d1ed192e119b4f11fafbf25a7ef
Author: spender <spender>
Date:   Fri Jun 27 20:18:59 2003 +0000

    don't add kernel acls

commit 9408749e0f192e5359b3d696e3acc0b94efac903
Author: spender <spender>
Date:   Fri Jun 27 18:52:20 2003 +0000

    fix subject name

commit f594e7c97df1363755c1543abd21459f26dce7fe
Author: spender <spender>
Date:   Thu Jun 26 00:18:55 2003 +0000

    relax thresholds a bit for better learning

commit f6d245c28e39303c1ce0facd68f0ac194905e667
Author: spender <spender>
Date:   Wed Jun 25 23:55:56 2003 +0000

    fix proto and socktype reduction

commit de9ef0d3b06789a6628d3486ee434c461302608b
Author: spender <spender>
Date:   Wed Jun 25 19:01:10 2003 +0000

    update to new learning

commit 153ff78b049505f8fb7c6db7b8e5534ab21acc72
Author: spender <spender>
Date:   Wed Jun 25 16:46:45 2003 +0000

    add userspace portion of rbac status mechanism

commit 49c6717dc33b9dbf17a4e446e8d4cb4a2e0bf18e
Author: spender <spender>
Date:   Wed Jun 25 15:36:25 2003 +0000

    fix third pass reduction

commit 93d626c485e6824649ed5869cb52cb7afcb49a8f
Author: spender <spender>
Date:   Wed Jun 25 14:12:08 2003 +0000

    update usage

commit 2e0abfb5cf93870b4158ad0b487c10e51dc3a9fd
Author: spender <spender>
Date:   Tue Jun 24 21:19:49 2003 +0000

    add G to root role

commit 99bc40ce615a1065aa7ce3ae0bb0fb50c2667d2d
Author: spender <spender>
Date:   Tue Jun 24 18:20:13 2003 +0000

    allow use of more protocols

commit 26dfa428a8e56c5f0ae9efeffe41ffb2341bf79c
Author: spender <spender>
Date:   Tue Jun 24 16:15:40 2003 +0000

    compile fix

commit cc71e99919777a6ee5129f018bd69e5037463bc8
Author: spender <spender>
Date:   Tue Jun 24 02:56:36 2003 +0000

    fix for filenames with spaces

commit a5130961dce788fe069fb058ce1ed6f753b3a709
Author: spender <spender>
Date:   Tue Jun 24 02:29:01 2003 +0000

    add gradm acl when enabling full learning

commit 5f665daf341b7324a73f58be10e85fdc030d86ee
Author: spender <spender>
Date:   Mon Jun 23 22:12:36 2003 +0000

    fix makefile

commit 0456ff98c759e163ddff911c29f7a8df3af478ba
Author: spender <spender>
Date:   Mon Jun 23 19:26:35 2003 +0000

    fix makefile

commit d5fd3c03831752ad5521e7ba2b828e4d7a25c56f
Author: spender <spender>
Date:   Mon Jun 23 19:15:04 2003 +0000

    fix makefile

commit 20b078ce16d388eb835ec379c9ee8448a8e300b4
Author: spender <spender>
Date:   Mon Jun 23 19:01:11 2003 +0000

    update devfs check

commit 32cc7acc64e3e61d6f3e78f411e1b411d7543d38
Author: spender <spender>
Date:   Mon Jun 23 18:57:23 2003 +0000

    fix install with devfs

commit 952d82250c6ec585959d873bf823c29bc1ac20c6
Author: spender <spender>
Date:   Sun Jun 22 22:55:58 2003 +0000

    wrong function

commit aacd7525bc98946ee67c3289619bdd058d29a46e
Author: spender <spender>
Date:   Sun Jun 22 22:53:05 2003 +0000

    ensure default subject security on role-based learning

commit cabffbd50e1e43c12e58b044f5fd231cfc169280
Author: spender <spender>
Date:   Sun Jun 22 22:05:55 2003 +0000

    update documentation

commit 90282939ca5ee817f7ef17ffb60d258f872382a0
Author: spender <spender>
Date:   Sun Jun 22 21:32:14 2003 +0000

    put back stripping

commit cd3f7f4e518698b8e786c4e1ad9bb9a4297cbfee
Author: spender <spender>
Date:   Sun Jun 22 21:30:29 2003 +0000

    I apologize in advance for putting the security industry out of business.

commit 3746b3f9d63e6bd890d2e62fde2ff6937544e8b0
Author: spender <spender>
Date:   Fri Jun 13 23:57:33 2003 +0000

    make sure no one tries to make gradm suid root...god knows why

commit e0168b7840d05c4f4b70bd18a3d2cdce520012fc
Author: spender <spender>
Date:   Thu Jun 12 14:32:22 2003 +0000

    fix typo

commit d614b329b42bda2fd9a1b21611ad6a4cafb5d0c5
Author: spender <spender>
Date:   Wed Jun 11 21:29:30 2003 +0000

    cosmetic fix

commit 1dad6fb93f94e69ec956b1ca6a488d34a6abe7df
Author: spender <spender>
Date:   Mon Jun 9 04:36:25 2003 +0000

    update manpage

commit 4a9ec809698870fc510508c00ff18c2acef9fa70
Author: spender <spender>
Date:   Sun Jun 8 01:07:00 2003 +0000

    fix up default acl for new modes, fix object modes in lexer

commit a95fa7a0f431acc62a20cf18a19b48be91c03f99
Author: spender <spender>
Date:   Sat Jun 7 00:30:18 2003 +0000

    update default acl

commit c8a032e6365d131a85198ea4953028509ff3a8b6
Author: spender <spender>
Date:   Fri Jun 6 22:52:19 2003 +0000

    error checking for modes

commit 38b932e74b2dadfdd4a77cf8e37755cdf3dd1138
Author: spender <spender>
Date:   Fri Jun 6 21:21:33 2003 +0000

    add creation and deletion modes, change chmod +s mode representation to m

commit 5bc0dc8ac3a28b0dcc658eba6f66c09adc34a84f
Author: spender <spender>
Date:   Fri Jun 6 14:28:10 2003 +0000

    fix capabilities bug when only the default acl exists

commit 865675ae346aaf1d6e3c4efcdae36ffc34b8fa4a
Author: spender <spender>
Date:   Tue Jun 3 00:34:16 2003 +0000

    update modes, add auditing flag

commit 1b45c3ce0a5a840aa6a7e280235a0b805d62a028
Author: spender <spender>
Date:   Mon Jun 2 23:58:21 2003 +0000

    add chmod +s object mode

commit 5951691484bda9558b87a385c8f1479e37bf81b4
Author: spender <spender>
Date:   Wed May 28 14:27:40 2003 +0000

    more cleanups by peter s. mazinger

commit b71bcd0d481c2ba246f2557da843852acc7d26fc
Author: spender <spender>
Date:   Wed May 28 14:24:20 2003 +0000

    cleanup by peter s. mazinger

commit 61afaa69c72ea18fdb42a50be4519478749a987a
Author: spender <spender>
Date:   Wed May 28 01:47:53 2003 +0000

    merge patches submitted by peter s. mazinger

commit 26f1684b50140a710667f46abf1dd4ca7b7b95b8
Author: spender <spender>
Date:   Wed May 28 01:40:09 2003 +0000

    set the mode during open

commit dacc9c5544306b61c64923656cafd99f817d3e80
Author: spender <spender>
Date:   Sat May 24 19:43:20 2003 +0000

    fix inheritance bug

commit fb0dad4d04e89e440b37bc482dc4030ab59eb164
Author: spender <spender>
Date:   Fri May 16 21:59:28 2003 +0000

    more verbose errors for duplicates, ACL -> RBAC changes

commit 3367c7dee02229a8db6eed0c98d791c317f9e19e
Author: spender <spender>
Date:   Mon May 5 02:10:22 2003 +0000

    fix broken symlinks with globbing

commit 278a2ce0e82d0e68ec6a67756fb0c413376fdc10
Author: spender <spender>
Date:   Mon May 5 01:49:01 2003 +0000

    fix broken symlink code. 1.9.9 was correct

commit d30e9b590a11078f9b83a4cd9d448770a2f8f5fc
Author: spender <spender>
Date:   Sat May 3 14:33:48 2003 +0000

    fix up difference operator

commit fb70cd90b4fa9100c4eb8600023fe3aee0787ced
Author: spender <spender>
Date:   Sat May 3 14:28:55 2003 +0000

    fix up difference operator

commit 73a88fb37282b8fa7e6b46c681daf72ceef7b5bf
Author: spender <spender>
Date:   Sat May 3 14:23:29 2003 +0000

    fix typo

commit 87b2486d4d4886615721aefaa1d0a8c9e0f27865
Author: spender <spender>
Date:   Sat May 3 14:23:04 2003 +0000

    update difference operator

commit 4fea5d80c606ae01b37302c2c99ffa21e8331534
Author: spender <spender>
Date:   Sat May 3 13:51:03 2003 +0000

    allow comments within variable definition

commit 9b0178d9e525889d9cb10b65da38ef68dbcbfef9
Author: spender <spender>
Date:   Sat May 3 13:39:46 2003 +0000

    implement set operations on variables: AND, OR, DIFFERENCE, eg: ( & ) -

commit bcd8a05c85c0f817f647e9ec718d09b7a25bbcb2
Author: spender <spender>
Date:   Mon Apr 28 22:11:02 2003 +0000

    add dynamically allocated symbol table and variable support for objects

commit c08f64977027561436f43cfb3b9e24ac1115de10
Author: spender <spender>
Date:   Sun Apr 27 14:49:05 2003 +0000

    fix capability inheritance

commit efefb03ffb5a90e9516d821ab91530fa3c245f2a
Author: spender <spender>
Date:   Wed Apr 16 21:50:00 2003 +0000

    allow use of {}'s...they just have no meaning

commit 15696318712bcebcecdc7af1dc4d7ed226c5a26a
Author: spender <spender>
Date:   Wed Apr 16 21:40:29 2003 +0000

    update default acl

commit 27eb56d95f8441d5964e0791bacfd31bb0a2a7ad
Author: spender <spender>
Date:   Wed Apr 16 21:39:04 2003 +0000

    enforce hidden /dev/grsec

commit d9c2b4f8f79a774542f117658e45e42c4e8632f5
Author: spender <spender>
Date:   Wed Apr 16 20:59:47 2003 +0000

    fix

commit 46678e36f3b063bf4c34ebae839745c2d98acffc
Author: spender <spender>
Date:   Wed Apr 16 20:50:03 2003 +0000

    fix symlink parsing

commit 3276bca888efe152fc2b346d5eb9a129f206a846
Author: spender <spender>
Date:   Wed Apr 16 19:41:44 2003 +0000

    small speedups, only use strlen when we have to

commit b0e7e2a83bd682fea21cbb92bb2db497998eb58b
Author: spender <spender>
Date:   Wed Apr 16 18:04:06 2003 +0000

    hide and protect learning process

commit 74619ea4aee702e4c4211387f4b7530c30eacbe1
Author: spender <spender>
Date:   Wed Apr 16 13:42:34 2003 +0000

    fixes

commit f59efd2860ba4843b49bd1c52aa235a56c5e2602
Author: spender <spender>
Date:   Wed Apr 16 13:35:01 2003 +0000

    fix learning

commit 8024f9f7f15a1cbeda0eab2d1b19647d60003230
Author: spender <spender>
Date:   Wed Apr 16 13:33:37 2003 +0000

    remove func

commit 8a0f8191126aa81b01e7684695beaefe1440d18e
Author: spender <spender>
Date:   Wed Apr 16 13:33:20 2003 +0000

    remove syslog code

commit 5aadeae5d1a6516812cbc9cb68866c88190effb4
Author: spender <spender>
Date:   Wed Apr 16 13:32:23 2003 +0000

    finish up gradm integration

commit 34e685a9141a557b6ee80c9d83f1d0bfb03f8824
Author: spender <spender>
Date:   Wed Apr 16 11:44:24 2003 +0000

    update header

commit 7d00c327401cf74a541f061e76af9fa24dcf3ee2
Author: spender <spender>
Date:   Wed Apr 16 11:43:46 2003 +0000

    first parts of gradm integration

commit 976714c64036bee10fb691d85687d5e5f506f8f3
Author: spender <spender>
Date:   Wed Apr 16 11:16:22 2003 +0000

    add new learning daemon...gradm integration coming next

commit f597edb2754b45f97dd3f4a80ab79e44cdd07e47
Author: spender <spender>
Date:   Wed Apr 16 03:04:43 2003 +0000

    remove pw file if upgrading to 2.0

commit 7a70414cbb08a83e96b177e8125ffd381ca07b3a
Author: spender <spender>
Date:   Wed Apr 16 02:02:10 2003 +0000

    update makefile

commit cdc60b398111035f3218b34c92881db3f47596d6
Author: spender <spender>
Date:   Tue Apr 15 18:03:55 2003 +0000

    fix

commit c3a51a2b341202c6705a068830e64d3b78ca96d6
Author: spender <spender>
Date:   Tue Apr 15 16:34:48 2003 +0000

    clean up

commit db9f7478d22fa11623de3d221a82d8296f3a82d4
Author: spender <spender>
Date:   Tue Apr 15 16:20:16 2003 +0000

    update

commit 2d58fab856628a87944a208ec263b09f1058bd68
Author: spender <spender>
Date:   Tue Apr 15 16:16:36 2003 +0000

    update makefile

commit 25482b25637e12f99c00b06bddb31449a4b5df6b
Author: spender <spender>
Date:   Tue Apr 15 16:14:31 2003 +0000

    use /dev/grsec

commit dc8e63fd1395359ea116c35710abd94aa13b010a
Author: spender <spender>
Date:   Tue Apr 15 15:47:46 2003 +0000

    install device

commit a7624335188245459ced1c040a6244dc6e228206
Author: spender <spender>
Date:   Tue Apr 15 15:34:21 2003 +0000

    update learning parser for new handling

commit 874796e7cd5616a2087fd6f77e95b6432a822e60
Author: spender <spender>
Date:   Sun Apr 13 22:24:21 2003 +0000

    fix typo

commit 1df7629ef4d7b42462194473c8a073e3322b2363
Author: spender <spender>
Date:   Sun Apr 13 20:10:29 2003 +0000

    update

commit 736fc34c55f70384be34c3d1823f538141d3222e
Author: spender <spender>
Date:   Sun Apr 13 19:46:13 2003 +0000

    update in-acl documentation

commit 8b033a01adfc8e90d5ff0fac662985557092b63a
Author: spender <spender>
Date:   Sun Apr 13 19:39:50 2003 +0000

    add configuration inheritance support for nested subjects, they inherit rules from their nested parents

commit e29649ca828675d6a0048a0bc4ddbec3d017cf90
Author: spender <spender>
Date:   Sun Apr 13 19:31:28 2003 +0000

    update acl inheritance

commit f21e9a7a5fddb5cec172df15b5488f76ac717682
Author: spender <spender>
Date:   Sun Apr 13 19:14:48 2003 +0000

    update

commit d00e0648919679401e3617acac77cd35a6800463
Author: spender <spender>
Date:   Sun Apr 13 19:03:02 2003 +0000

    update learner

commit c24e031ae11762fce40e5765e72b31d0c8cf16d2
Author: spender <spender>
Date:   Sun Apr 13 18:44:58 2003 +0000

    update

commit 9dccd40eaf9b4c59cb7a1b2161eec03b7b1194f8
Author: spender <spender>
Date:   Sun Apr 13 18:43:46 2003 +0000

    update

commit 579450f33ce4354bd302d72045fbf5f428e9100b
Author: spender <spender>
Date:   Sun Apr 13 01:32:37 2003 +0000

    updates

commit a2763375c9dc1e16ded4c04fd0e2920b63217d4a
Author: spender <spender>
Date:   Sun Apr 13 01:29:10 2003 +0000

    auto-add binary for nested subjects

commit fa452672f5e9acde8b7f8951533aecc4630b4dd4
Author: spender <spender>
Date:   Sun Apr 13 01:23:55 2003 +0000

    add gradm_nest.c

commit b381fc7e63936db8f9061988cf6efdc5ae9454c6
Author: spender <spender>
Date:   Sat Apr 12 20:29:32 2003 +0000

    add userspace code for nested subjects

commit d3a942fcde3457b95f9566747e64889c61b82868
Author: spender <spender>
Date:   Sat Apr 12 17:33:13 2003 +0000

    fix ip acls

commit 11070371717a96b702fd2dd5020a1560abcc9686
Author: spender <spender>
Date:   Sun Apr 6 15:08:36 2003 +0000

    add some small documentation

commit ca0b6e6321d1904be48b766a22dcd91e9b8b995d
Author: spender <spender>
Date:   Sun Apr 6 03:57:19 2003 +0000

    default action

commit 8e8750206a3cbdf7da327debd31185c62879ace2
Author: spender <spender>
Date:   Sun Apr 6 03:13:14 2003 +0000

    lindent code

commit 21ff28f3dd315f39d97720c3db0ce59f82e82f1e
Author: spender <spender>
Date:   Sun Apr 6 00:14:47 2003 +0000

    add transition debugging

commit 63cbf881db3cc2f3252f681ab201b88acf534b24
Author: spender <spender>
Date:   Sun Apr 6 00:09:14 2003 +0000

    update default acl

commit c30c9f2f4a8c5de7e04c09958974f2e02959314a
Author: spender <spender>
Date:   Sun Apr 6 00:07:55 2003 +0000

    add role transition

commit 823f25d0cf5860834bc9b1e0ba3ca23768448def
Author: spender <spender>
Date:   Sat Apr 5 23:51:17 2003 +0000

    add define

commit 15f64e89bafb217c12e95914c03afb4416f56612
Author: spender <spender>
Date:   Sat Apr 5 23:46:22 2003 +0000

    implement userspace code for role transition tables

commit db1abc75fcc8aaf2d5974602cf394a7b77ec0f3c
Author: spender <spender>
Date:   Sat Apr 5 23:13:26 2003 +0000

    compile fix

commit 01a6672e0197593d64ad47eb8c9462b8bc856b94
Author: spender <spender>
Date:   Sat Apr 5 19:06:04 2003 +0000

    make role type 16bit

commit f6266f879f206b6da5a4be9731516ecfe3cc7eae
Author: spender <spender>
Date:   Sat Apr 5 16:37:36 2003 +0000

    update default acl

commit 1fed56a26d0d2ac16fdd56d2c013dd563e924498
Author: spender <spender>
Date:   Sat Apr 5 15:38:56 2003 +0000

    update default acl

commit d4db286b6941cb2175ffb38749b1090d423fc444
Author: spender <spender>
Date:   Sat Apr 5 14:57:14 2003 +0000

    don't log mlock when non-root

commit f2eb426b25e7247d9b101843233b92340ee2b2f6
Author: spender <spender>
Date:   Sat Apr 5 14:42:39 2003 +0000

    add new arg

commit 9d1d7c4705febb650643982c76a73b7d316bb73a
Author: spender <spender>
Date:   Sat Apr 5 14:21:42 2003 +0000

    updates

commit e773051a5b861c000b4ec471f3d078ec4dde7dd8
Author: spender <spender>
Date:   Sat Apr 5 13:55:52 2003 +0000

    skip analysis for special roles

commit d24317d24afede0990504acc1e8e5d1ab8edee99
Author: spender <spender>
Date:   Sat Apr 5 13:53:29 2003 +0000

    fix pw replace

commit 1ee97627100ef235cf80e298052ed8eef25ba5c4
Author: spender <spender>
Date:   Sat Apr 5 13:48:15 2003 +0000

    compile fix

commit bdcb20fb07842b5f84972a8853c279e7bd7363b0
Author: spender <spender>
Date:   Sat Apr 5 13:45:41 2003 +0000

    update makefile

commit f74bf015d66722eb81f7ae4fbf45358ac1fe8045
Author: spender <spender>
Date:   Sat Apr 5 13:42:59 2003 +0000

    update getopt

commit dd31d929c0142c87c049305ae0af48ce41f4444f
Author: spender <spender>
Date:   Sat Apr 5 13:41:35 2003 +0000

    update kernel role

commit d1d2cad4ce635f7965fcbe52511c7cc60ead5530
Author: spender <spender>
Date:   Sat Apr 5 13:34:49 2003 +0000

    fix typo

commit ae7503bde6887d5f13bba1c1ff06f826a54bee30
Author: spender <spender>
Date:   Sat Apr 5 13:33:49 2003 +0000

    update

commit 139b5680f6f0177f7f8107a496ab86e061858000
Author: spender <spender>
Date:   Sat Apr 5 13:31:49 2003 +0000

    update header

commit 1e25d9ae12380519efa35cc63a020151ab0a2510
Author: spender <spender>
Date:   Sat Apr 5 13:31:23 2003 +0000

    update

commit 5fb41ab63aad9438e3bcdd88fa5bc65f62f47052
Author: spender <spender>
Date:   Sat Apr 5 13:30:00 2003 +0000

    update header

commit 4a986157a3e8b00e9ae22902bf6c2dc2c729e416
Author: spender <spender>
Date:   Sat Apr 5 13:28:21 2003 +0000

    fix typo

commit 55db6572d8c30cb3b7080f90944cc45146b71221
Author: spender <spender>
Date:   Sat Apr 5 13:28:06 2003 +0000

    add back define

commit 0944012921540b8cf55e58841a37d1393402e89a
Author: spender <spender>
Date:   Sat Apr 5 13:27:10 2003 +0000

    compile fix

commit c398d702d0b584bf8a0655be67941f61150042d6
Author: spender <spender>
Date:   Sat Apr 5 13:25:14 2003 +0000

    update dupe check

commit 701115dd1b01a840039b6aae3a15f3953b1b52c3
Author: spender <spender>
Date:   Sat Apr 5 13:23:43 2003 +0000

    update parser

commit 46a7d77d46f0e9439531510a50e383076bc4f977
Author: spender <spender>
Date:   Sat Apr 5 13:22:25 2003 +0000

    update headers

commit a586e74d20601f65d71fd236f552defb01e943c8
Author: spender <spender>
Date:   Sat Apr 5 13:19:24 2003 +0000

    compile fix

commit 334d279ef15829b5fb8145177139abcb63dc0334
Author: spender <spender>
Date:   Sat Apr 5 13:18:01 2003 +0000

    finish special roles

commit 059e84ed7504f81e72942acb7fd10e42a6943169
Author: spender <spender>
Date:   Sat Apr 5 12:44:36 2003 +0000

    updates for special roles

commit 987df31d62cd226d323986b9914be3c3a3c49593
Author: spender <spender>
Date:   Sat Apr 5 12:44:35 2003 +0000

    updates for special roles

commit d61434292ea9706e9fa399a7ff3707d2bbffd1c5
Author: spender <spender>
Date:   Sat Apr 5 03:39:15 2003 +0000

    implement password handling routines for new special roles

commit ad37680e52d58ec0d70089e1b9ea6b894b00b9f9
Author: spender <spender>
Date:   Sat Apr 5 02:24:29 2003 +0000

    update makefile

commit d1f940ba9f76f48e92dd1cf5988fbbe727fe29c3
Author: spender <spender>
Date:   Sat Apr 5 02:24:01 2003 +0000

    update defines

commit 7501d88883768ea396a623a17081f476e26f9ad6
Author: spender <spender>
Date:   Thu Apr 3 18:29:29 2003 +0000

    fix typo

commit 6ae2293ab386fc317be85c8b100641ead03f6af8
Author: spender <spender>
Date:   Thu Apr 3 18:28:03 2003 +0000

    tokenize ROLE_ALLOW_IP

commit d3c0a3886ad01f0560388512b1fa880a58f872bf
Author: spender <spender>
Date:   Thu Apr 3 18:26:58 2003 +0000

    type ip_netmask

commit 109dc900447bbae70aff4024c4f8f4d90eff4dd2
Author: spender <spender>
Date:   Thu Apr 3 18:04:18 2003 +0000

    add ips to gr_arg

commit cc4e57b355becbc9425550c64a5c606756c3aa0a
Author: spender <spender>
Date:   Thu Apr 3 17:46:38 2003 +0000

    update

commit 3a303db699c1327b3fcd47502fe9fd3530d1bd53
Author: spender <spender>
Date:   Thu Apr 3 17:45:04 2003 +0000

    add first bit of userspace code for ip-based roles

commit 05a789aebf8b9e1259b1e438eb6d8f9966363a73
Author: spender <spender>
Date:   Thu Apr 3 15:06:55 2003 +0000

    small speedup

commit 36dcbd296ecdcdc3d13d1a3b3d532ce4ff7558dc
Author: spender <spender>
Date:   Thu Apr 3 14:26:55 2003 +0000

    update learning mode

commit 913db1f7f91b2802c14a96300ea4f7c5a3b00812
Author: spender <spender>
Date:   Thu Apr 3 14:15:52 2003 +0000

    update lexer

commit 1ffc480b696add70110ab6a6c6dffb6cd59bbc56
Author: spender <spender>
Date:   Thu Apr 3 14:13:36 2003 +0000

    remove debugging

commit 53dec029328d24cc70a798211a812c7338300935
Author: spender <spender>
Date:   Thu Apr 3 13:57:35 2003 +0000

    update learning

commit a97c6fc7a64a14a94ae822a2dc716c38b1e9ae72
Author: spender <spender>
Date:   Thu Apr 3 13:47:17 2003 +0000

    update declarations

commit bfe216b8919b1730f93319e123e1f382245413c3
Author: spender <spender>
Date:   Thu Apr 3 13:46:35 2003 +0000

    update declarations

commit 402ac06dc4eab97679ba067c3c51ba33d3e09b6a
Author: spender <spender>
Date:   Thu Apr 3 13:43:18 2003 +0000

    add userspace code for new learning

commit 36fd2068d742d82827f9ea95b6b61eefe0ad6de1
Author: spender <spender>
Date:   Thu Apr 3 13:26:29 2003 +0000

    update parser for learning

commit 54614c5cf9ee98c7fdfc36db33b16cf40e5f3795
Author: spender <spender>
Date:   Thu Apr 3 12:29:00 2003 +0000

    skip kernel and admin for acl checks

commit d39899de70ed4b60aff924068fc4e73830d1791b
Author: spender <spender>
Date:   Thu Apr 3 12:25:22 2003 +0000

    enable analysis

commit bab5bea172c7c97803b22af6b7ebd5e49e31f0bc
Author: spender <spender>
Date:   Thu Apr 3 11:31:00 2003 +0000

    update

commit 44263d884aa1f2577313cb319128ef7092ceb118
Author: spender <spender>
Date:   Thu Apr 3 05:34:00 2003 +0000

    update acl

commit 20152d96f8e62c627f8cb44bef03e189c945e03d
Author: spender <spender>
Date:   Thu Apr 3 05:33:11 2003 +0000

    update

commit 2c5bfb5f8a44ba8037c7968f8292f1270c6b5c50
Author: spender <spender>
Date:   Thu Apr 3 05:30:38 2003 +0000

    updates

commit 4b10236725d8750b3a645735886d8b26b88e352e
Author: spender <spender>
Date:   Thu Apr 3 05:17:29 2003 +0000

    updates

commit 9358e150a343ee65c57b7c1e209ac41e6ce67046
Author: spender <spender>
Date:   Thu Apr 3 05:14:16 2003 +0000

    updates

commit 60298707f7d6ba45943b9eb59f499bb5e65804e1
Author: spender <spender>
Date:   Thu Apr 3 05:06:15 2003 +0000

    add admin and kernel acls

commit 287ec6ccf7b675bfa9c87264f5e13b9aaf1b546d
Author: spender <spender>
Date:   Thu Apr 3 04:51:54 2003 +0000

    updates

commit e47a9cbdb63a5eabeeef1149ad7495a8320d4f0f
Author: spender <spender>
Date:   Thu Apr 3 04:15:57 2003 +0000

    compile fix

commit d7f13bd55ec1996d28c0bff20f3f6bff8b51cfee
Author: spender <spender>
Date:   Thu Apr 3 04:07:02 2003 +0000

    compile fix

commit 81b3d5cb3c3cc6afb65cc6272e4f7e1331267d99
Author: spender <spender>
Date:   Thu Apr 3 03:12:22 2003 +0000

    update logging

commit 4be54f9be9d1c5bbf59bcd558d9516fe76a0b3cb
Author: spender <spender>
Date:   Thu Apr 3 03:09:34 2003 +0000

    fix acl analysis

commit 6672436515f8b8bfb21054679081dadc43d3e0ca
Author: spender <spender>
Date:   Thu Apr 3 03:04:35 2003 +0000

    fix acl analysis

commit 16900a8924c073bf78ab79373cb64153b1b58ffc
Author: spender <spender>
Date:   Thu Apr 3 02:47:24 2003 +0000

    update analysis

commit 4e8dc054443ac42051934bd468197cbc254ac930
Author: spender <spender>
Date:   Thu Apr 3 02:16:01 2003 +0000

    add G to default, allows for authentication to kernel

commit 17b63722294402119e31bbfaff35bb552d6749b9
Author: spender <spender>
Date:   Thu Apr 3 01:46:00 2003 +0000

    updates

commit fe22a4ea1864eaaf11ad9b754eba691cb7cc88a4
Author: spender <spender>
Date:   Thu Apr 3 01:32:29 2003 +0000

    updates

commit 042f9d990e859d21b00200ce73301cc9e5f11dc9
Author: spender <spender>
Date:   Wed Apr 2 15:11:00 2003 +0000

    add authentication error reporting

commit e558838af925742d3d96e2dcaf8dc56168c6b289
Author: spender <spender>
Date:   Tue Apr 1 00:33:37 2003 +0000

    add error detection

commit 22b1153a15d97cbc8bc2a12bca399f7c5e962f53
Author: spender <spender>
Date:   Tue Apr 1 00:30:57 2003 +0000

    fix commenting

commit eb5625e65db04a9dec22cade4bc02b3b9ce24229
Author: spender <spender>
Date:   Sun Mar 30 01:36:00 2003 +0000

    fix learning for syslogng

commit 6acb57baeea4b7ae07dea7af8f7de793c455693e
Author: spender <spender>
Date:   Sat Mar 29 14:42:22 2003 +0000

    keep states during include

commit f2478af9b9dec9d6bae5a8ec012e939cfb76669d
Author: spender <spender>
Date:   Fri Mar 28 23:15:55 2003 +0000

    implement recursive parser, correct include directive

commit c6385a5fb1419857f73f4ac25fbc4c9b27ce2abc
Author: spender <spender>
Date:   Fri Mar 28 22:50:01 2003 +0000

    fix typo

commit e46a45971f175aad9c240280ed8e20676803d9e5
Author: spender <spender>
Date:   Fri Mar 28 22:22:18 2003 +0000

    dietlibc updates

commit 02e469089f01170f0f80a26f625094327b08ce03
Author: spender <spender>
Date:   Fri Mar 28 03:31:02 2003 +0000

    better symlink/globbing code

commit d11475722a40e0ee215884bd456e3086bf112942
Author: spender <spender>
Date:   Sun Mar 23 18:46:22 2003 +0000

    update header

commit 45b40696295c92719b72c23b8be1c5538164dc15
Author: spender <spender>
Date:   Sun Mar 23 03:31:16 2003 +0000

    lock authentication structures into physical memory

commit 5dd542b13b512b892aa1b4b7adf33210d6b9f6fc
Author: spender <spender>
Date:   Mon Mar 17 23:17:36 2003 +0000

    stat fix

commit 37c613d075b656a51096d2e99aa54604b7970447
Author: spender <spender>
Date:   Mon Mar 17 03:28:20 2003 +0000

    update dupe checks

commit ef4da8ed536defa155e042f6b2ffeeafe10c3db4
Author: spender <spender>
Date:   Tue Feb 25 22:32:23 2003 +0000

    allow no socket ops for gradm

commit d86b225092dd8dbcbd2ce016919b04ea193b840d
Author: spender <spender>
Date:   Tue Feb 25 21:57:20 2003 +0000

    fix -L arg handling

commit 2943e2c0fb5d9b7492a7cb6cd410deccbbadc61e
Author: spender <spender>
Date:   Sat Feb 22 02:42:23 2003 +0000

    protprocpid -> protprocfd

commit 74ec881edd5e52cb2b27b8cfceed9553c862e7c8
Author: spender <spender>
Date:   Sat Feb 22 02:37:04 2003 +0000

    add log suppression, process accounting, update globbing behavior

commit dccf6643597d3e369d38ccb7c76ac219495a8838
Author: spender <spender>
Date:   Thu Feb 20 12:49:55 2003 +0000

    update glob error reporting

commit b023abc0f920f4636876e664b3cf551018da1053
Author: spender <spender>
Date:   Thu Feb 6 12:25:45 2003 +0000

    fix support for some syslog-ng installs

commit bb9d476f02ab469bf92aaf976f246620504c0408
Author: spender <spender>
Date:   Wed Jan 29 16:17:36 2003 +0000

    add new proc fd/mem restriction subject flag

commit fa7c6c1704f6d4b5ea10e5441e3e0a6a042275b4
Author: spender <spender>
Date:   Thu Jan 23 01:31:59 2003 +0000

    throw in the beginnings of special roles

commit 93d5b54e010953b87e26a9d3c8ce035e6bc120b5
Author: spender <spender>
Date:   Mon Jan 20 19:00:51 2003 +0000

    fix kernel acl

commit 1588a682c2cfd6fbf2d1d845bb7b1304669475e2
Author: spender <spender>
Date:   Sun Jan 19 23:55:35 2003 +0000

    fix typo

commit fccb517158bc3fc1a28dddeeb25349b8c4628f08
Author: spender <spender>
Date:   Sun Jan 19 23:51:08 2003 +0000

    fix internal acl adding

commit 6807699abda117ecc66d48ef976895403e121487
Author: spender <spender>
Date:   Sun Jan 19 18:18:04 2003 +0000

    remove o object mode, it's silly

commit 883ad925660cd0e83f6bd1e01d7130573083b8d8
Author: spender <spender>
Date:   Sat Jan 18 03:41:53 2003 +0000

    fix keventd incompatibility

commit a98bdb58d3d7b4b2de0622bc3c742074053d6be5
Author: spender <spender>
Date:   Fri Jan 17 23:52:09 2003 +0000

    fix compilation on m68k

commit fdf7973540ba553bde4f8c13e749d3ad9be1ff58
Author: spender <spender>
Date:   Thu Jan 16 22:22:13 2003 +0000

    fix resource learning

commit e0b2973a8604759332bd018513c2ae029e52d0d6
Author: spender <spender>
Date:   Thu Jan 16 04:31:05 2003 +0000

    initial import of gradm 2.0-pre1