|
|
|
@ -1,29 +1,21 @@
|
|
|
|
## START: Set by rpmautospec
|
|
|
|
%define libselinuxver 3.5-1
|
|
|
|
## (rpmautospec version 0.6.5)
|
|
|
|
%define libsepolver 3.5-1
|
|
|
|
## RPMAUTOSPEC: autochangelog
|
|
|
|
|
|
|
|
## END: Set by rpmautospec
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%define libselinuxver 3.7-1
|
|
|
|
|
|
|
|
%define libsepolver 3.7-1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Summary: SELinux policy compiler
|
|
|
|
Summary: SELinux policy compiler
|
|
|
|
Name: checkpolicy
|
|
|
|
Name: checkpolicy
|
|
|
|
Version: 3.7
|
|
|
|
Version: 3.5
|
|
|
|
Release: 1%{?dist}
|
|
|
|
Release: 1%{?dist}
|
|
|
|
License: GPL-2.0-or-later AND LGPL-2.1-or-later
|
|
|
|
License: GPLv2
|
|
|
|
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.7/checkpolicy-3.7.tar.gz
|
|
|
|
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.5/checkpolicy-3.5.tar.gz
|
|
|
|
Source1: https://github.com/SELinuxProject/selinux/releases/download/3.7/checkpolicy-3.7.tar.gz.asc
|
|
|
|
|
|
|
|
Source2: https://github.com/bachradsusi.gpg
|
|
|
|
|
|
|
|
# $ git clone https://github.com/fedora-selinux/selinux.git
|
|
|
|
# $ git clone https://github.com/fedora-selinux/selinux.git
|
|
|
|
# $ cd selinux
|
|
|
|
# $ cd selinux
|
|
|
|
# $ git format-patch -N 3.7 -- checkpolicy
|
|
|
|
# $ git format-patch -N 3.5 -- checkpolicy
|
|
|
|
# $ i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
|
|
|
|
# $ i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
|
|
|
|
# Patch list start
|
|
|
|
# Patch list start
|
|
|
|
# Patch list end
|
|
|
|
# Patch list end
|
|
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: make
|
|
|
|
BuildRequires: make
|
|
|
|
BuildRequires: byacc bison flex flex-static libsepol-static >= %{libsepolver} libselinux-devel >= %{libselinuxver}
|
|
|
|
BuildRequires: byacc bison flex flex-static libsepol-static >= %{libsepolver} libselinux-devel >= %{libselinuxver}
|
|
|
|
BuildRequires: gnupg2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
%description
|
|
|
|
Security-enhanced Linux is a feature of the Linux® kernel and a number
|
|
|
|
Security-enhanced Linux is a feature of the Linux® kernel and a number
|
|
|
|
@ -40,7 +32,6 @@ This package contains checkpolicy, the SELinux policy compiler.
|
|
|
|
Only required for building policies.
|
|
|
|
Only required for building policies.
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%prep
|
|
|
|
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
|
|
|
|
|
|
|
%autosetup -p 2 -n checkpolicy-%{version}
|
|
|
|
%autosetup -p 2 -n checkpolicy-%{version}
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
%build
|
|
|
|
@ -64,80 +55,27 @@ install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
|
|
|
|
%{_bindir}/checkmodule
|
|
|
|
%{_bindir}/checkmodule
|
|
|
|
%{_mandir}/man8/checkpolicy.8.gz
|
|
|
|
%{_mandir}/man8/checkpolicy.8.gz
|
|
|
|
%{_mandir}/man8/checkmodule.8.gz
|
|
|
|
%{_mandir}/man8/checkmodule.8.gz
|
|
|
|
|
|
|
|
%{_mandir}/ru/man8/checkpolicy.8.gz
|
|
|
|
|
|
|
|
%{_mandir}/ru/man8/checkmodule.8.gz
|
|
|
|
%{_bindir}/sedismod
|
|
|
|
%{_bindir}/sedismod
|
|
|
|
%{_bindir}/sedispol
|
|
|
|
%{_bindir}/sedispol
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
%changelog
|
|
|
|
* Tue Nov 26 2024 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 3.7-1
|
|
|
|
* Thu Feb 23 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-1
|
|
|
|
- Rebuilt for MSVSphere 10
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## START: Generated by rpmautospec
|
|
|
|
|
|
|
|
* Thu Jun 27 2024 Petr Lautrbach <lautrbach@redhat.com> - 3.7-1
|
|
|
|
|
|
|
|
- SELinux userspace 3.7 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 3.6-4
|
|
|
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-3
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-2
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Dec 14 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-1
|
|
|
|
|
|
|
|
- SELinux userspace 3.6 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Nov 23 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-0.rc2.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.6-rc2 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Nov 14 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-0.rc1.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.6-rc1 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-3
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 22 2023 Vit Mojzis <vmojzis@redhat.com> - 3.5-2
|
|
|
|
|
|
|
|
- Add examples to man pages
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 24 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-1
|
|
|
|
|
|
|
|
- SELinux userspace 3.5 release
|
|
|
|
- SELinux userspace 3.5 release
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Feb 14 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc3.1
|
|
|
|
* Wed Feb 15 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc3.1
|
|
|
|
- SELinux userspace 3.5-rc3 release
|
|
|
|
- SELinux userspace 3.5-rc3 release
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-0.rc2.1.1
|
|
|
|
* Tue Jan 17 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc2.1
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 16 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc2.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.5-rc2 release
|
|
|
|
- SELinux userspace 3.5-rc2 release
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Dec 27 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc1.1
|
|
|
|
* Mon Jan 2 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc1.1
|
|
|
|
- SELinux userspace 3.5-rc1 release
|
|
|
|
- SELinux userspace 3.5-rc1 release
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Nov 21 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.4-4
|
|
|
|
* Fri May 20 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-1
|
|
|
|
- Rebase on upstream f56a72ac9e86
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.4-3
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed May 25 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-2
|
|
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 19 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-1
|
|
|
|
|
|
|
|
- SELinux userspace 3.4 release
|
|
|
|
- SELinux userspace 3.4 release
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 10 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc3.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.4-rc3 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Apr 22 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc2.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.4-rc2 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Apr 13 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc1.1
|
|
|
|
|
|
|
|
- SELinux userspace 3.4-rc1 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 19 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.3-2
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Oct 22 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-1
|
|
|
|
* Fri Oct 22 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-1
|
|
|
|
- SELinux userspace 3.3 release
|
|
|
|
- SELinux userspace 3.3 release
|
|
|
|
|
|
|
|
|
|
|
|
@ -147,11 +85,15 @@ install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
|
|
|
|
* Wed Sep 29 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-0.rc2.1
|
|
|
|
* Wed Sep 29 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-0.rc2.1
|
|
|
|
- SELinux userspace 3.3-rc2 release
|
|
|
|
- SELinux userspace 3.3-rc2 release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-4
|
|
|
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 28 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-3
|
|
|
|
* Wed Jul 28 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-3
|
|
|
|
- Rebase on upstream commit 32611aea6543
|
|
|
|
- Rebase on upstream commit 32611aea6543
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-2
|
|
|
|
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-2
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Mar 8 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-1
|
|
|
|
* Mon Mar 8 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-1
|
|
|
|
- SELinux userspace 3.2 release
|
|
|
|
- SELinux userspace 3.2 release
|
|
|
|
@ -302,7 +244,7 @@ install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
|
|
|
|
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* Add Android support for building dispol.
|
|
|
|
* Add Android support for building dispol.
|
|
|
|
* Report source file and line information for neverallow failures.
|
|
|
|
* Report source file and line information for neverallow failures.
|
|
|
|
* Prevent incompatible option combinations for checkmodule.
|
|
|
|
* Prevent incompatible option combinations for checkmodule.
|
|
|
|
@ -310,7 +252,7 @@ install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
|
|
|
|
* Add debug feature to display constraints/validatetrans from Richard Haines.
|
|
|
|
* Add debug feature to display constraints/validatetrans from Richard Haines.
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
|
|
|
|
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* Fix hyphen usage in man pages from Laurent Bigonville.
|
|
|
|
* Fix hyphen usage in man pages from Laurent Bigonville.
|
|
|
|
* handle-unknown / -U required argument fix from Laurent Bigonville.
|
|
|
|
* handle-unknown / -U required argument fix from Laurent Bigonville.
|
|
|
|
* Support overriding Makefile PATH and LIBDIR from Laurent Bigonville.
|
|
|
|
* Support overriding Makefile PATH and LIBDIR from Laurent Bigonville.
|
|
|
|
@ -332,7 +274,7 @@ for detecting this crash.
|
|
|
|
- Space should be allowed for file trans names
|
|
|
|
- Space should be allowed for file trans names
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
|
|
|
|
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* Fix errors found by coverity
|
|
|
|
* Fix errors found by coverity
|
|
|
|
* implement default type policy syntax
|
|
|
|
* implement default type policy syntax
|
|
|
|
* Free allocated memory when clean up / exit.
|
|
|
|
* Free allocated memory when clean up / exit.
|
|
|
|
@ -340,19 +282,19 @@ for detecting this crash.
|
|
|
|
* Sat Jan 5 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
|
|
|
|
* Sat Jan 5 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
|
|
|
|
- Update to latest patches from eparis/Upstream
|
|
|
|
- Update to latest patches from eparis/Upstream
|
|
|
|
- checkpolicy: libsepol: implement default type policy syntax
|
|
|
|
- checkpolicy: libsepol: implement default type policy syntax
|
|
|
|
-
|
|
|
|
-
|
|
|
|
- We currently have a mechanism in which the default user, role, and range
|
|
|
|
- We currently have a mechanism in which the default user, role, and range
|
|
|
|
- can be picked up from the source or the target object. This implements
|
|
|
|
- can be picked up from the source or the target object. This implements
|
|
|
|
- the same thing for types. The kernel will override this with type
|
|
|
|
- the same thing for types. The kernel will override this with type
|
|
|
|
- transition rules and similar. This is just the default if nothing
|
|
|
|
- transition rules and similar. This is just the default if nothing
|
|
|
|
- specific is given.
|
|
|
|
- specific is given.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
|
|
|
|
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
|
|
|
|
- Rebuild with fixed libsepol
|
|
|
|
- Rebuild with fixed libsepol
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
|
|
|
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* fd leak reading policy
|
|
|
|
* fd leak reading policy
|
|
|
|
* check return code on ebitmap_set_bit
|
|
|
|
* check return code on ebitmap_set_bit
|
|
|
|
|
|
|
|
|
|
|
|
@ -366,7 +308,7 @@ for detecting this crash.
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
|
|
|
|
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* sepolgen: We need to support files that have a + in them
|
|
|
|
* sepolgen: We need to support files that have a + in them
|
|
|
|
* Android/MacOS X build support
|
|
|
|
* Android/MacOS X build support
|
|
|
|
|
|
|
|
|
|
|
|
@ -380,7 +322,7 @@ for detecting this crash.
|
|
|
|
- Allow checkpolicy to use + in a file name
|
|
|
|
- Allow checkpolicy to use + in a file name
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
|
|
|
|
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
|
|
|
|
- Update to upstream
|
|
|
|
- Update to upstream
|
|
|
|
* implement new default labeling behaviors for usr, role, range
|
|
|
|
* implement new default labeling behaviors for usr, role, range
|
|
|
|
* Fix dead links to www.nsa.gov/selinux
|
|
|
|
* Fix dead links to www.nsa.gov/selinux
|
|
|
|
|
|
|
|
|
|
|
|
@ -407,11 +349,11 @@ for detecting this crash.
|
|
|
|
* dismod: fix unused parameter errors
|
|
|
|
* dismod: fix unused parameter errors
|
|
|
|
* test: Makefile: include -W and -Werror
|
|
|
|
* test: Makefile: include -W and -Werror
|
|
|
|
* allow ~ in filename transition rules
|
|
|
|
* allow ~ in filename transition rules
|
|
|
|
- Allow policy to specify the source of target for generating the default user,role
|
|
|
|
- Allow policy to specify the source of target for generating the default user,role
|
|
|
|
- or mls label for a new target.
|
|
|
|
- or mls label for a new target.
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Nov 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
|
|
|
|
* Mon Nov 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
|
|
|
|
- Allow ~ in a filename
|
|
|
|
- Allow ~ in a filename
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
|
|
|
|
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
|
|
|
|
- Upgrade to upstream
|
|
|
|
- Upgrade to upstream
|
|
|
|
@ -466,7 +408,7 @@ for detecting this crash.
|
|
|
|
- Fix type_transition to allow all files
|
|
|
|
- Fix type_transition to allow all files
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Mar 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.23-4
|
|
|
|
* Tue Mar 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.23-4
|
|
|
|
- Patches from Eric Paris
|
|
|
|
- Patches from Eric Paris
|
|
|
|
We just use random numbers to make menu selections. Use #defines and
|
|
|
|
We just use random numbers to make menu selections. Use #defines and
|
|
|
|
names that make some sense instead.
|
|
|
|
names that make some sense instead.
|
|
|
|
|
|
|
|
|
|
|
|
@ -498,7 +440,7 @@ such a rule is added to a conditional.
|
|
|
|
* Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
|
|
|
|
* Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Dec 8 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-2
|
|
|
|
* Wed Dec 8 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-2
|
|
|
|
- Rebuild to make sure it will build in Fedora
|
|
|
|
- Rebuild to make sure it will build in Fedora
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jun 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
|
|
|
|
* Wed Jun 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
|
|
|
|
- Latest update from NSA
|
|
|
|
- Latest update from NSA
|
|
|
|
@ -637,7 +579,7 @@ such a rule is added to a conditional.
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Sep 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
|
|
|
|
* Thu Sep 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
|
|
|
|
- Latest update from NSA
|
|
|
|
- Latest update from NSA
|
|
|
|
* Merged user and range_transition support for modules from
|
|
|
|
* Merged user and range_transition support for modules from
|
|
|
|
Darrel Goeddel
|
|
|
|
Darrel Goeddel
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
|
|
|
|
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
|
|
|
|
@ -653,17 +595,17 @@ such a rule is added to a conditional.
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
* Lindent.
|
|
|
|
* Lindent.
|
|
|
|
* Merged patch to remove TE rule conflict checking from the parser
|
|
|
|
* Merged patch to remove TE rule conflict checking from the parser
|
|
|
|
from Joshua Brindle. This can only be done properly by the
|
|
|
|
from Joshua Brindle. This can only be done properly by the
|
|
|
|
expander.
|
|
|
|
expander.
|
|
|
|
* Merged patch to make checkpolicy/checkmodule handling of
|
|
|
|
* Merged patch to make checkpolicy/checkmodule handling of
|
|
|
|
duplicate/conflicting TE rules the same as the expander
|
|
|
|
duplicate/conflicting TE rules the same as the expander
|
|
|
|
from Joshua Brindle.
|
|
|
|
from Joshua Brindle.
|
|
|
|
* Merged optionals in base take 2 patch set from Joshua Brindle.
|
|
|
|
* Merged optionals in base take 2 patch set from Joshua Brindle.
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
|
|
|
|
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
* Merged compiler cleanup patch from Karl MacMillan.
|
|
|
|
* Merged compiler cleanup patch from Karl MacMillan.
|
|
|
|
* Merged fix warnings patch from Karl MacMillan.
|
|
|
|
* Merged fix warnings patch from Karl MacMillan.
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
|
|
|
|
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
@ -758,15 +700,15 @@ such a rule is added to a conditional.
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.16-1
|
|
|
|
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.16-1
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
* Removed obsolete cond_check_type_rules() function and call and
|
|
|
|
* Removed obsolete cond_check_type_rules() function and call and
|
|
|
|
cond_optimize_lists() call from checkpolicy.c; these are handled
|
|
|
|
cond_optimize_lists() call from checkpolicy.c; these are handled
|
|
|
|
during parsing and expansion now.
|
|
|
|
during parsing and expansion now.
|
|
|
|
* Updated calls to expand_module for interface change.
|
|
|
|
* Updated calls to expand_module for interface change.
|
|
|
|
* Changed checkmodule to verify that expand_module succeeds
|
|
|
|
* Changed checkmodule to verify that expand_module succeeds
|
|
|
|
when building base modules.
|
|
|
|
when building base modules.
|
|
|
|
* Merged module compiler fixes from Joshua Brindle.
|
|
|
|
* Merged module compiler fixes from Joshua Brindle.
|
|
|
|
* Removed direct calls to hierarchy_check_constraints() and
|
|
|
|
* Removed direct calls to hierarchy_check_constraints() and
|
|
|
|
check_assertions() from checkpolicy since they are now called
|
|
|
|
check_assertions() from checkpolicy since they are now called
|
|
|
|
internally by expand_module().
|
|
|
|
internally by expand_module().
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1
|
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1
|
|
|
|
@ -830,7 +772,7 @@ such a rule is added to a conditional.
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Sep 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1
|
|
|
|
* Sat Sep 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
- Latest upgrade from NSA
|
|
|
|
* Merged bug fix for role dominance handling from Darrel Goeddel (TCS).
|
|
|
|
* Merged bug fix for role dominance handling from Darrel Goeddel (TCS).
|
|
|
|
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
|
|
|
|
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
|
|
|
|
- Rebuild to get latest libsepol
|
|
|
|
- Rebuild to get latest libsepol
|
|
|
|
|
|
|
|
|
|
|
|
@ -855,7 +797,7 @@ such a rule is added to a conditional.
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-1
|
|
|
|
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-1
|
|
|
|
- Update to NSA Release
|
|
|
|
- Update to NSA Release
|
|
|
|
* Merged use-after-free fix from Serge Hallyn (IBM).
|
|
|
|
* Merged use-after-free fix from Serge Hallyn (IBM).
|
|
|
|
Bug found by Coverity.
|
|
|
|
Bug found by Coverity.
|
|
|
|
|
|
|
|
|
|
|
|
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.10-1
|
|
|
|
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.10-1
|
|
|
|
@ -875,7 +817,7 @@ such a rule is added to a conditional.
|
|
|
|
- Update to NSA Release
|
|
|
|
- Update to NSA Release
|
|
|
|
* Updated checkpolicy and dispol for the new avtab format.
|
|
|
|
* Updated checkpolicy and dispol for the new avtab format.
|
|
|
|
Converted users of ebitmaps to new inline operators.
|
|
|
|
Converted users of ebitmaps to new inline operators.
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
version 20 as a result of these changes. To build a policy
|
|
|
|
version 20 as a result of these changes. To build a policy
|
|
|
|
for a kernel that does not yet include these changes, use
|
|
|
|
for a kernel that does not yet include these changes, use
|
|
|
|
the -c 19 option to checkpolicy.
|
|
|
|
the -c 19 option to checkpolicy.
|
|
|
|
@ -896,7 +838,7 @@ such a rule is added to a conditional.
|
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
|
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
|
|
|
|
- Update to NSA Release
|
|
|
|
- Update to NSA Release
|
|
|
|
* Merged loadable module support from Tresys Technology.
|
|
|
|
* Merged loadable module support from Tresys Technology.
|
|
|
|
* Merged patch to prohibit the use of * and ~ in type sets
|
|
|
|
* Merged patch to prohibit the use of * and ~ in type sets
|
|
|
|
(other than in neverallow statements) and in role sets
|
|
|
|
(other than in neverallow statements) and in role sets
|
|
|
|
from Joshua Brindle (Tresys).
|
|
|
|
from Joshua Brindle (Tresys).
|
|
|
|
* Updated version for release.
|
|
|
|
* Updated version for release.
|
|
|
|
@ -1062,5 +1004,3 @@ such a rule is added to a conditional.
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
|
|
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
|
|
|
- Initial version
|
|
|
|
- Initial version
|
|
|
|
|
|
|
|
|
|
|
|
## END: Generated by rpmautospec
|
|
|
|
|
|
|
|
|
