|
|
|
|
@ -1,20 +1,28 @@
|
|
|
|
|
## START: Set by rpmautospec
|
|
|
|
|
## (rpmautospec version 0.6.5)
|
|
|
|
|
## RPMAUTOSPEC: autochangelog
|
|
|
|
|
## END: Set by rpmautospec
|
|
|
|
|
|
|
|
|
|
Summary: SELinux binary policy manipulation library
|
|
|
|
|
Name: libsepol
|
|
|
|
|
Version: 3.5
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
License: LGPLv2+
|
|
|
|
|
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.5/libsepol-3.5.tar.gz
|
|
|
|
|
Version: 3.7
|
|
|
|
|
Release: 2%{?dist}
|
|
|
|
|
License: LGPL-2.1-or-later
|
|
|
|
|
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.7/libsepol-3.7.tar.gz
|
|
|
|
|
Source1: https://github.com/SELinuxProject/selinux/releases/download/3.7/libsepol-3.7.tar.gz.asc
|
|
|
|
|
Source2: https://github.com/bachradsusi.gpg
|
|
|
|
|
URL: https://github.com/SELinuxProject/selinux/wiki
|
|
|
|
|
# $ git clone https://github.com/fedora-selinux/selinux.git
|
|
|
|
|
# $ cd selinux
|
|
|
|
|
# $ git format-patch -N libsepol-3.5 -- libsepol
|
|
|
|
|
# $ git format-patch -N libsepol-3.7 -- libsepol
|
|
|
|
|
# $ i=1; for j in 0*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
|
|
|
|
|
# Patch list start
|
|
|
|
|
Patch0001: 0001-libsepol-Bring-back-POLICYDB_CAPABILITY_-constants.patch
|
|
|
|
|
Patch0001: 0001-libsepol-sepol_compute_sid-Do-not-destroy-uninitiali.patch
|
|
|
|
|
# Patch list end
|
|
|
|
|
BuildRequires: make
|
|
|
|
|
BuildRequires: gcc
|
|
|
|
|
BuildRequires: flex
|
|
|
|
|
BuildRequires: gnupg2
|
|
|
|
|
Obsoletes: %{name}-compat = 3.1-4
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
@ -57,6 +65,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
|
|
The libsepol-utils package contains the utilities
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
|
|
|
|
%autosetup -p 2 -n libsepol-%{version}
|
|
|
|
|
|
|
|
|
|
# sparc64 is an -fPIC arch, so we need to fix it here
|
|
|
|
|
@ -107,24 +116,74 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
%{_mandir}/man8/chkcon.8.gz
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Thu Feb 23 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-1
|
|
|
|
|
## START: Generated by rpmautospec
|
|
|
|
|
* Fri Aug 09 2024 Vit Mojzis <vmojzis@redhat.com> - 3.7-4
|
|
|
|
|
- libsepol-3.7-2
|
|
|
|
|
- sepol_compute_sid: Do not destroy uninitialized context
|
|
|
|
|
|
|
|
|
|
* Thu Jun 27 2024 Petr Lautrbach <lautrbach@redhat.com> - 3.7-1
|
|
|
|
|
- SELinux userspace 3.7 release
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 3.6-4
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Dec 14 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-1
|
|
|
|
|
- SELinux userspace 3.6 release
|
|
|
|
|
|
|
|
|
|
* Thu Nov 23 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-0.rc2.1
|
|
|
|
|
- SELinux userspace 3.6-rc2 release
|
|
|
|
|
|
|
|
|
|
* Fri Nov 10 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.6-0.rc1.1
|
|
|
|
|
- SELinux userspace 3.6-rc1 release
|
|
|
|
|
|
|
|
|
|
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Feb 24 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-1
|
|
|
|
|
- SELinux userspace 3.5 release
|
|
|
|
|
|
|
|
|
|
* Tue Feb 14 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc3.1
|
|
|
|
|
* Mon Feb 13 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc3.1
|
|
|
|
|
- SELinux userspace 3.5-rc3 release
|
|
|
|
|
|
|
|
|
|
* Mon Jan 2 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc1.2
|
|
|
|
|
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-0.rc2.1.1
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Jan 16 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc2.1
|
|
|
|
|
- SELinux userspace 3.5-rc2 release
|
|
|
|
|
|
|
|
|
|
* Fri Dec 23 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc1.1
|
|
|
|
|
- SELinux userspace 3.5-rc1 release
|
|
|
|
|
|
|
|
|
|
* Fri Oct 21 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-3
|
|
|
|
|
- Fix validation of user declarations in modules (#2136212)
|
|
|
|
|
* Mon Nov 21 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.4-4
|
|
|
|
|
- Rebase on upstream f56a72ac9e86
|
|
|
|
|
|
|
|
|
|
* Wed Oct 12 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-2
|
|
|
|
|
- Restore error on context rule conflicts (#2127399)
|
|
|
|
|
* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.4-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon May 23 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-1.1
|
|
|
|
|
* Wed May 25 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-2
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
* Thu May 19 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-1
|
|
|
|
|
- SELinux userspace 3.4 release
|
|
|
|
|
|
|
|
|
|
* Tue May 10 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc3.1
|
|
|
|
|
- SELinux userspace 3.4-rc3 release
|
|
|
|
|
|
|
|
|
|
* Thu Apr 21 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc2.1
|
|
|
|
|
- SELinux userspace 3.4-rc2 release
|
|
|
|
|
|
|
|
|
|
* Tue Apr 12 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-0.rc1.1
|
|
|
|
|
- SELinux userspace 3.4-rc1 release
|
|
|
|
|
|
|
|
|
|
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.3-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Nov 11 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-2
|
|
|
|
|
- Use correct libdir in libsepol.pc (#2018492)
|
|
|
|
|
|
|
|
|
|
@ -137,15 +196,11 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
* Wed Sep 29 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-0.rc2.1
|
|
|
|
|
- SELinux userspace 3.3-rc2 release
|
|
|
|
|
|
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-4
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
|
|
|
|
* Wed Jul 28 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-3
|
|
|
|
|
- Rebase on upstream commit 32611aea6543
|
|
|
|
|
|
|
|
|
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-2
|
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
|
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Mar 8 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-1
|
|
|
|
|
- SELinux userspace 3.2 release
|
|
|
|
|
@ -353,7 +408,7 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Improve error message for name-based transition conflicts.
|
|
|
|
|
* Revert libsepol: filename_trans: use some better sorting to compare and merge.
|
|
|
|
|
* Report source file and line information for neverallow failures.
|
|
|
|
|
@ -361,7 +416,7 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
* Add sepol_validate_transition_reason_buffer function from Richard Haines.
|
|
|
|
|
|
|
|
|
|
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Richard Haines patch V1 Allow constraint denials to be determined.
|
|
|
|
|
- Add separate role declarations as required by modern checkpolicy.
|
|
|
|
|
|
|
|
|
|
@ -369,12 +424,12 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- filename_trans: use some better sorting to compare and merge
|
|
|
|
|
- coverity fixes
|
|
|
|
|
- implement default type policy syntax
|
|
|
|
|
- Fix memory leak issues found by Klocwork
|
|
|
|
|
- Add CONTRAINT_NAMES to the kernel
|
|
|
|
|
- Add CONTRAINT_NAMES to the kernel
|
|
|
|
|
|
|
|
|
|
* Sun Jan 27 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.8-8
|
|
|
|
|
- Update to latest patches from eparis/Upstream
|
|
|
|
|
@ -398,7 +453,7 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Revert patch that was attempting to expand filetrans attributes, but is breaking filetrans rules
|
|
|
|
|
|
|
|
|
|
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* fix neverallow checking on attributes
|
|
|
|
|
* Move context_copy() after switch block in ocontext_copy_*().
|
|
|
|
|
* check for missing initial SID labeling statement.
|
|
|
|
|
@ -415,7 +470,7 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* reserve policycapability for redhat testing of ptrace child
|
|
|
|
|
* cosmetic changes to make the source easier to read
|
|
|
|
|
* prepend instead of append to filename_trans list
|
|
|
|
|
@ -429,7 +484,7 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Add support for ptrace_child
|
|
|
|
|
|
|
|
|
|
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* checkpolicy: implement new default labeling behaviors
|
|
|
|
|
|
|
|
|
|
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.4-6
|
|
|
|
|
@ -445,11 +500,11 @@ rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
|
|
- Add Eparis patch for handling of default transition labeling
|
|
|
|
|
|
|
|
|
|
* Mon Dec 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
|
|
|
|
|
- Allow policy to specify the source of target for generating the default user,role
|
|
|
|
|
- Allow policy to specify the source of target for generating the default user,role
|
|
|
|
|
- or mls label for a new target.
|
|
|
|
|
|
|
|
|
|
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* regenerate .pc on VERSION change
|
|
|
|
|
* Move ebitmap_* functions from mcstrans to libsepol
|
|
|
|
|
* expand: do filename_trans type comparison on mapped representation
|
|
|
|
|
@ -481,23 +536,23 @@ dup!
|
|
|
|
|
- Add patch to handle preserving tunables
|
|
|
|
|
|
|
|
|
|
* Thu Sep 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-2
|
|
|
|
|
- export expand_module_avrules
|
|
|
|
|
- export expand_module_avrules
|
|
|
|
|
|
|
|
|
|
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Only call role_fix_callback for base.p_roles during expansion.
|
|
|
|
|
* use mapped role number instead of module role number
|
|
|
|
|
|
|
|
|
|
* Mon Aug 1 2011 Dan Walsh <dwalsh@redhat.com> 2.1.1-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Minor fix to reading policy with filename transition rules
|
|
|
|
|
|
|
|
|
|
* Wed Jul 27 2011 Dan Walsh <dwalsh@redhat.com> 2.1.0-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Release, minor version bump
|
|
|
|
|
|
|
|
|
|
* Tue May 3 2011 Dan Walsh <dwalsh@redhat.com> 2.0.45-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Warn if filename_trans rules are dropped by Steve Lawrence.
|
|
|
|
|
|
|
|
|
|
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> 2.0.44-2
|
|
|
|
|
@ -510,7 +565,7 @@ dup!
|
|
|
|
|
|
|
|
|
|
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.43-3
|
|
|
|
|
- re-add Erics patch for filename transitions
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.43-1
|
|
|
|
|
-Update to upstream
|
|
|
|
|
* Add new class field in role_transition by Harry Ciao.
|
|
|
|
|
@ -657,7 +712,7 @@ Resolves: #555835
|
|
|
|
|
* Reject self aliasing at link time from Stephen Smalley.
|
|
|
|
|
* Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
|
|
|
|
|
* Fixed bug in require checking from Stephen Smalley.
|
|
|
|
|
* Added user hierarchy checking from Todd Miller.
|
|
|
|
|
* Added user hierarchy checking from Todd Miller.
|
|
|
|
|
|
|
|
|
|
* Wed Sep 26 2007 Dan Walsh <dwalsh@redhat.com> 2.0.11-1
|
|
|
|
|
* Pass CFLAGS to CC even on link command, per Dennis Gilmore.
|
|
|
|
|
@ -698,7 +753,7 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Fri Mar 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.2-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged fix from Karl to remap booleans at expand time to
|
|
|
|
|
* Merged fix from Karl to remap booleans at expand time to
|
|
|
|
|
avoid holes in the symbol table.
|
|
|
|
|
|
|
|
|
|
* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-1
|
|
|
|
|
@ -706,7 +761,7 @@ Resolves: #555835
|
|
|
|
|
* Merged libsepol segfault fix from Stephen Smalley for when
|
|
|
|
|
sensitivities are required but not present in the base.
|
|
|
|
|
* Merged patch to add errcodes.h to libsepol by Karl MacMillan.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Updated version for stable branch.
|
|
|
|
|
@ -753,7 +808,7 @@ Resolves: #555835
|
|
|
|
|
- Fix location of include directory to devel package
|
|
|
|
|
|
|
|
|
|
* Fri Aug 25 2006 Dan Walsh <dwalsh@redhat.com> 1.12.25-2
|
|
|
|
|
- Remove invalid Requires
|
|
|
|
|
- Remove invalid Requires
|
|
|
|
|
|
|
|
|
|
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> 1.12.25-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -870,7 +925,7 @@ Resolves: #555835
|
|
|
|
|
* Merged bug fix patch from Ivan Gyurdiev.
|
|
|
|
|
* Added a defined flag to level_datum_t for use by checkpolicy.
|
|
|
|
|
* Merged nodecon support patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged cleanups patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged cleanups patch from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.14-2
|
|
|
|
|
- Fix post install not to fire if /dev/initctr does not exist
|
|
|
|
|
@ -894,13 +949,13 @@ Resolves: #555835
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged assertion copying bugfix from Joshua Brindle.
|
|
|
|
|
* Merged sepol_av_to_string patch from Joshua Brindle.
|
|
|
|
|
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Mon Jan 30 2006 Dan Walsh <dwalsh@redhat.com> 1.11.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged cond_expr mapping and package section count bug fixes
|
|
|
|
|
from Joshua Brindle.
|
|
|
|
|
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.9-1
|
|
|
|
|
@ -956,7 +1011,7 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Mon Dec 5 2005 Dan Walsh <dwalsh@redhat.com> 1.9.42-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Dropped handle from user_del_role interface.
|
|
|
|
|
* Dropped handle from user_del_role interface.
|
|
|
|
|
|
|
|
|
|
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.41-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -975,7 +1030,7 @@ Resolves: #555835
|
|
|
|
|
degenerate case where there are no booleans or booleans.local
|
|
|
|
|
files.
|
|
|
|
|
* Cleaned up sepol_genusers to not warn on missing local.users.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.9.38-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Removed sepol_port_* from libsepol.map, as the port interfaces
|
|
|
|
|
@ -998,16 +1053,16 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Mon Oct 31 2005 Dan Walsh <dwalsh@redhat.com> 1.9.34-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged record interface, record bugfix, and set_roles patches
|
|
|
|
|
* Merged record interface, record bugfix, and set_roles patches
|
|
|
|
|
from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Fri Oct 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.33-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged count specification change from Ivan Gyurdiev.
|
|
|
|
|
* Merged count specification change from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.9.32-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added further checking and error reporting to
|
|
|
|
|
* Added further checking and error reporting to
|
|
|
|
|
sepol_module_package_read and _info.
|
|
|
|
|
* Merged sepol handle passing, DEBUG conversion, and memory leak
|
|
|
|
|
fix patches from Ivan Gyurdiev.
|
|
|
|
|
@ -1028,8 +1083,8 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Mon Oct 24 2005 Dan Walsh <dwalsh@redhat.com> 1.9.26-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context interface cleanup, record conversion code,
|
|
|
|
|
key passing, and bug fix patches from Ivan Gyurdiev.
|
|
|
|
|
* Merged context interface cleanup, record conversion code,
|
|
|
|
|
key passing, and bug fix patches from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Fri Oct 21 2005 Dan Walsh <dwalsh@redhat.com> 1.9.25-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -1045,7 +1100,7 @@ Resolves: #555835
|
|
|
|
|
and hierarchy checking on expansion.
|
|
|
|
|
* Reworked check_assertions() and hierarchy_check_constraints()
|
|
|
|
|
to take handles and use callback-based error reporting.
|
|
|
|
|
* Changed expand_module() to call check_assertions() and
|
|
|
|
|
* Changed expand_module() to call check_assertions() and
|
|
|
|
|
hierarchy_check_constraints() prior to returning the expanded
|
|
|
|
|
policy.
|
|
|
|
|
|
|
|
|
|
@ -1058,9 +1113,9 @@ Resolves: #555835
|
|
|
|
|
* Added handle argument to policydb_from_image/to_image.
|
|
|
|
|
* Added sepol_module_package_set_file_contexts interface.
|
|
|
|
|
* Dropped sepol_module_package_create_file interface.
|
|
|
|
|
* Reworked policydb_read/write, policydb_from_image/to_image,
|
|
|
|
|
* Reworked policydb_read/write, policydb_from_image/to_image,
|
|
|
|
|
and sepol_module_package_read/write to use callback-based error
|
|
|
|
|
reporting system rather than DEBUG.
|
|
|
|
|
reporting system rather than DEBUG.
|
|
|
|
|
|
|
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.19-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -1100,9 +1155,9 @@ Resolves: #555835
|
|
|
|
|
Caller must do so first.
|
|
|
|
|
2) policydb_init no longer takes policy_type argument.
|
|
|
|
|
Caller must set policy_type separately.
|
|
|
|
|
3) expand_module automatically enables the global branch.
|
|
|
|
|
3) expand_module automatically enables the global branch.
|
|
|
|
|
Caller no longer needs to do so.
|
|
|
|
|
4) policydb_write uses the policy_type and policyvers from the
|
|
|
|
|
4) policydb_write uses the policy_type and policyvers from the
|
|
|
|
|
policydb itself, and sepol_set_policyvers() has been removed.
|
|
|
|
|
|
|
|
|
|
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.9.12-1
|
|
|
|
|
@ -1113,7 +1168,7 @@ Resolves: #555835
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged bug fix for check_assertions handling of no assertions
|
|
|
|
|
from Joshua Brindle (Tresys).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.9.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged iterate patch from Ivan Gyurdiev.
|
|
|
|
|
@ -1149,7 +1204,7 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-2
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged stddef.h patch and debug conversion patch from
|
|
|
|
|
* Merged stddef.h patch and debug conversion patch from
|
|
|
|
|
Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-1
|
|
|
|
|
@ -1173,14 +1228,14 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Tue Aug 23 2005 Dan Walsh <dwalsh@redhat.com> 1.7.20-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged more fixes for resource leaks on error paths
|
|
|
|
|
from Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
* Merged more fixes for resource leaks on error paths
|
|
|
|
|
from Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
|
|
|
|
|
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.7.19-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Changed to treat all type conflicts as fatal errors.
|
|
|
|
|
* Merged several error handling fixes from
|
|
|
|
|
Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
* Merged several error handling fixes from
|
|
|
|
|
Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
|
|
|
|
|
* Mon Aug 15 2005 Dan Walsh <dwalsh@redhat.com> 1.7.17-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -1190,7 +1245,7 @@ Resolves: #555835
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
|
|
Coverity, reported by Serge Hallyn (IBM).
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
when writing the type->attribute reverse map from
|
|
|
|
|
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
|
|
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
|
|
@ -1200,7 +1255,7 @@ Resolves: #555835
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
|
|
Coverity, reported by Serge Hallyn (IBM).
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
when writing the type->attribute reverse map from
|
|
|
|
|
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
|
|
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
|
|
@ -1209,15 +1264,15 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.13-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Improved memory use by SELinux by both reducing the avtab
|
|
|
|
|
* Improved memory use by SELinux by both reducing the avtab
|
|
|
|
|
node size and reducing the number of avtab nodes (by not
|
|
|
|
|
expanding attributes in TE rules when possible). Added
|
|
|
|
|
expand_avtab and expand_cond_av_list functions for use by
|
|
|
|
|
assertion checker, hierarchy checker, compatibility code,
|
|
|
|
|
and dispol. Added new inline ebitmap operators and converted
|
|
|
|
|
existing users of ebitmaps to the new operators for greater
|
|
|
|
|
existing users of ebitmaps to the new operators for greater
|
|
|
|
|
efficiency.
|
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
|
version 20 as a result of these changes.
|
|
|
|
|
|
|
|
|
|
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.12-1
|
|
|
|
|
@ -1241,11 +1296,11 @@ Resolves: #555835
|
|
|
|
|
* Merged mls_context_to_sid bugfix from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-2
|
|
|
|
|
- Fix MLS Free
|
|
|
|
|
- Fix MLS Free
|
|
|
|
|
|
|
|
|
|
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context reorganization, memory leak fixes,
|
|
|
|
|
* Merged context reorganization, memory leak fixes,
|
|
|
|
|
port and interface loading, replacements for genusers and
|
|
|
|
|
genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
|
|
|
|
|
* Merged uninitialized variable bugfix from Dan Walsh.
|
|
|
|
|
@ -1267,7 +1322,7 @@ Resolves: #555835
|
|
|
|
|
* Merged genbools debugging message cleanup from Red Hat.
|
|
|
|
|
|
|
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-2
|
|
|
|
|
- Remove genpolbools and genpoluser
|
|
|
|
|
- Remove genpolbools and genpoluser
|
|
|
|
|
|
|
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
@ -1292,7 +1347,7 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added sepol_ prefix to Flask types to avoid
|
|
|
|
|
* Added sepol_ prefix to Flask types to avoid
|
|
|
|
|
namespace collision with libselinux.
|
|
|
|
|
|
|
|
|
|
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.5.7-1
|
|
|
|
|
@ -1387,6 +1442,6 @@ Resolves: #555835
|
|
|
|
|
|
|
|
|
|
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 0.3.1-1
|
|
|
|
|
- Initial version
|
|
|
|
|
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
|
|
|
|
|
|
|
|
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
|
|
|
|
|
|
|
|
## END: Generated by rpmautospec
|
|
|
|
|
|
