Sync from SUSE:SLFO:Main policycoreutils revision 0059e14227373138cc8c508be5f99e8b

This commit is contained in:
Adrian Schröter 2024-05-03 19:31:03 +02:00
commit cba4aa977b
21 changed files with 1865 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

14
get_os_version.patch Normal file
View File

@ -0,0 +1,14 @@
Index: policycoreutils-3.5/selinux-python-3.5/sepolicy/sepolicy/__init__.py
===================================================================
--- policycoreutils-3.5.orig/selinux-python-3.5/sepolicy/sepolicy/__init__.py
+++ policycoreutils-3.5/selinux-python-3.5/sepolicy/sepolicy/__init__.py
@@ -1245,7 +1245,8 @@ def get_os_version():
import distro
system_release = distro.name(pretty=True)
except IOError:
- system_release = "Misc"
+ # make SUSE the default return value on SUSE systems
+ system_release = "SUSE"
return system_release

10
make_targets.patch Normal file
View File

@ -0,0 +1,10 @@
Index: policycoreutils-2.8/Makefile
===================================================================
--- policycoreutils-2.8.orig/Makefile 2018-05-24 20:21:09.000000000 +0200
+++ policycoreutils-2.8/Makefile 2018-11-21 15:59:44.968384128 +0100
@@ -1,4 +1,4 @@
-SUBDIRS = setfiles load_policy newrole run_init secon sestatus semodule setsebool scripts po man hll
+SUBDIRS = setfiles load_policy newrole run_init secon sestatus semodule setsebool scripts po man hll sepolicy audit2allow semanage sepolgen chcat semodule_expand semodule_link semodule_package
all install relabel clean indent:
@for subdir in $(SUBDIRS); do \

5
newrole.pam Normal file
View File

@ -0,0 +1,5 @@
auth include common-auth
account include common-account
password include common-password
session include common-session
session optional pam_xauth.so

BIN
policycoreutils-3.5.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -0,0 +1,19 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=j4WN
-----END PGP SIGNATURE-----

835
policycoreutils.changes Normal file
View File

@ -0,0 +1,835 @@
-------------------------------------------------------------------
Wed Oct 25 10:00:36 UTC 2023 - (null) Hu <cathy.hu@suse.com>
- Add reproducible-build.patch to make the output of "sepolicy manpage"
deterministic (bsc#1216452)
-------------------------------------------------------------------
Tue May 9 09:08:51 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>
- Add python-wheel build dependency to build correctly with latest
python-pip version.
-------------------------------------------------------------------
Fri Feb 24 07:54:02 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
- Update to version 3.5
* fixfiles: Unmount temporary bind mounts on SIGINT
* Lots of smaller changes
- Refreshed get_os_version.patch
- Drop chcat_handle_missing_translations.patch, is upstream
- Add additional BuildRequires for python
- Added additional developer key (Jason Zaman)
- Add requires for python3-distro for the devel package
-------------------------------------------------------------------
Mon Dec 19 14:38:47 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
- Use %_pam_vendordir
-------------------------------------------------------------------
Fri Dec 16 15:28:13 UTC 2022 - Stefan Schubert <schubi@suse.com>
- Error in spec file: No "config" tag in "/usr/ should be used.
-------------------------------------------------------------------
Fri Dec 9 17:12:04 UTC 2022 - Stefan Schubert <schubi@suse.com>
- Migration PAM settings to /usr/etc: Saving user changed
configuration files in /etc and restoring them while an RPM
update.
-------------------------------------------------------------------
Mon Jul 25 15:07:58 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Add recommends for ausearch binary (bsc#1201043)
-------------------------------------------------------------------
Wed Jun 22 15:39:31 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Handle missing translations properly in chcat. Added
chcat_handle_missing_translations.patch (bsc#1200752)
-------------------------------------------------------------------
Tue Jun 21 13:15:58 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
- Build and package translations for python-utils (boo#1200752).
-------------------------------------------------------------------
Mon May 9 10:59:34 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Update to version 3.4
* fixfiles: Use parallel relabeling
- Refreshed patches
* get_os_version.patch
* run_init.pamd.patch
-------------------------------------------------------------------
Wed Apr 20 12:41:52 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
- Fix file list: package ru/man8/sepolgen.8 only in the devel
package (was in devel and main).
-------------------------------------------------------------------
Thu Nov 25 13:59:02 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- finish UsrMerge (bsc#1191089)
-------------------------------------------------------------------
Wed Nov 24 16:27:00 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Add run_init.pamd.patch to adjust to SUSE pam setup. Removed
run_init_use_pam_keyinit.patch and included it in the new patch
(bsc#1190098)
-------------------------------------------------------------------
Thu Nov 11 14:15:29 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Update to version 3.3
* Lots of fuzzing fixes
* `fixfiles -C` doesn't exclude /dev and /run anymore
Refreshed get_os_version.patch
-------------------------------------------------------------------
Tue Mar 9 09:18:36 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Update to version 3.2
* Tools using sepolgen, e.g. audit2allow, print extended permissions in
hexadecimal
* sepolgen sorts extended rules like normal ones
* `setfiles` doesn't abort on labeling errors
- Refreshed get_os_version.patch
-------------------------------------------------------------------
Thu Sep 10 09:00:45 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
- Add get_os_version.patch
get_os_version is implemented in a very RH/Fedora specific way.
Ensure that it returns a valid string for SUSE by changing the
default. Also remove the RH specific logic when generating HTML
versions of the SELinux documentation
-------------------------------------------------------------------
Wed Jul 29 13:09:39 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Align more with Fedora spec file to get rid of python dependencies
in the core system
- create new python-utils sub-package
- move some tools to devel sub-package
- Cleanup dependencies
-------------------------------------------------------------------
Fri Jul 17 09:35:08 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
- Proper default permissions for newrole (4755)
-------------------------------------------------------------------
Tue Jul 14 08:28:44 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
- Update to version 3.1
* New `setfiles -E` option - treat conflicting specifications as errors, such
as where two hardlinks for the same inode have different contexts.
* `setsebool -V` reports errors from commit phase
* matchpathcon related interfaces are deprecated
* New `restorecon -x` option which prevents it from crossing file system
* boundaries.
* `sepolgen-ifgen` parses a gen_tunable statement as bool
* Removed Requires for python3-ipy as the ipaddress module is used. No
requires for python-ipaddress as it's assumed this is used only on recent
systems
* Drop chcat_join.patch, is upstream
-------------------------------------------------------------------
Thu Jun 4 10:13:21 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
- Pass the right value for LIBEXECDIR to make / make install
instead of trying to move the file around post install. This
caters for the planned change of libexecdir to change from
/usr/lib to /usr/libexec by injecting the right value no matter
what.
-------------------------------------------------------------------
Fri May 29 09:29:26 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Move pp binary to libexec directory instead of lib
-------------------------------------------------------------------
Mon Mar 9 08:31:11 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Dropped Recommends: for %{name}-lang and %{name}-devel. Not
allowed by openSUSE guidelines
-------------------------------------------------------------------
Tue Mar 3 12:30:55 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Update to version 3.0
* fixfiles: Fix "verify" option
* fixfiles: Fix [-B] [-F] onboot
* fixfiles: Force full relabel when SELinux is disabled
* semodule: Enable CIL logging
* semanage: Add support for DCCP and SCTP protocols
* semanage: Do not use default s0 range in "semanage login -a"
* semanage: Document DCCP and SCTP support
* semanage: Improve handling of "permissive" statements
* semanage: fix moduleRecords.customized()
Refreshed chcat_join.patch
-------------------------------------------------------------------
Thu Feb 27 16:03:36 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Ship working pam config for newrole (bsc#1163020)
- Recommend policycoreutils-devel to have perm_map file available
-------------------------------------------------------------------
Wed Feb 19 14:31:39 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Package perm_map as it's used by audit2* tools
-------------------------------------------------------------------
Tue Dec 17 10:36:49 UTC 2019 - Johannes Segitz <jsegitz@suse.de>
- Added chcat_join.patch to prevent joining non-existing categories
(bsc#1159262)
-------------------------------------------------------------------
Wed Sep 18 11:19:12 UTC 2019 - Johannes Segitz <jsegitz@suse.de>
- Added run_init_use_pam_keyinit.patch
Added pam_keyinit to the run_init pam config (bsc#1144052)
-------------------------------------------------------------------
Wed Mar 20 15:16:54 UTC 2019 - jsegitz@suse.com
- Update to version 2.9
* secon: free scon_trans before returning
* audit2allow/sepolgen-ifgen: show errors on stderr
* audit2allow: allow using audit2why as non-root user
* chcat: use check_call instead of getstatusoutput
* restorecon: add force option
* semanage module: Fix handling of -a/-e/-d/-r options
* semanage/seobject: Fix listing boolean values
* semanage: Drop python shebang from seobject.py
* semanage: Fix logger class definition
* semanage: Include MCS/MLS range when exporting local customizations
* semanage: Load a store policy and set the store SELinux policy root
* semanage: Start exporting "ibendport" and "ibpkey" entries
* semanage: Stop logging loginRecords changes
* semanage: Stop rejecting aliases in semanage commands
* semanage: Use standard argparse.error() method in handlePermissive
* semanage: do not show "None" levels when using a non-MLS policy
* semanage: import sepolicy only when it's needed
* semanage: move valid_types initialisations to class constructors
* sepolgen: close /etc/selinux/sepolgen.conf after parsing it
* sepolgen: fix access vector initialization
* sepolgen: fix refpolicy parsing of "permissive"
* sepolgen: print all AV rules correctly
* sepolgen: refpolicy installs its Makefile in include/Makefile
* sepolgen: return NotImplemented instead of raising it
* sepolgen: silence linter warning about has_key
* sepolgen: use self when accessing members in FilesystemUse
* sepolicy: Add sepolicy.load_store_policy(store)
* sepolicy: Make policy files sorting more robust
* sepolicy: Stop rejecting aliases in sepolicy commands
* sepolicy: Update to work with setools-4.2.0
* sepolicy: add missing % in network tab help text
* sepolicy: initialize mislabeled_files in __init__()
* sepolicy: search() also for dontaudit rules
* add xperms support to audit2allow
* replace aliases with corresponding type names
- Dropped python3.patch, upstream now
-------------------------------------------------------------------
Wed Feb 13 12:21:50 UTC 2019 - jsegitz@suse.com
- Make sure current devel package conflicts with old
policycoreutils-python (bsc#1124437)
-------------------------------------------------------------------
Tue Feb 5 15:27:55 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Replace overly complicated %setup calls.
-------------------------------------------------------------------
Mon Feb 4 08:30:53 UTC 2019 - jsegitz@suse.com
- Removed hardcoded python 3.6 path from spec file
-------------------------------------------------------------------
Thu Jan 31 10:19:44 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
- Fix build with python 3.7
-------------------------------------------------------------------
Fri Jan 11 14:18:32 UTC 2019 - jsegitz@suse.com
- Required python3-policycoreutils instead of just recommending it
for policycoreutils (bsc#1121455)
- Added requires for python3-setuptools to python3-policycoreutils
(bsc#1121455)
- Removed requires for audit-libs-python from policycoreutils
(bsc#1121455)
-------------------------------------------------------------------
Mon Jan 7 14:32:58 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- properly obsolete/provides for policycoreutils-python
- remove unneeded obsolete from the devel package
-------------------------------------------------------------------
Fri Dec 7 15:08:14 UTC 2018 - jsegitz@suse.com
- Don't require selinux-policy-devel for the devel package
-------------------------------------------------------------------
Fri Dec 7 13:10:50 UTC 2018 - jsegitz@suse.com
- Obsolete policycoreutils-python in policycoreutils and
policycoreutils-devel to prevent file conflicts
-------------------------------------------------------------------
Wed Nov 21 15:58:16 UTC 2018 - jsegitz@suse.com
- Included content of selinux-python-2.8 and semodule-utils-2.8.
I think it's easier to have all the relevant binaries in the
policycoreutils package (bsc#1116596).
Added make_targets.patch for this
- Removed restorecond, is now a separate package
- Added python3.patch to use python3 interpreter
- New runtime requires:
* libsepol1
* python3-ipy
* python3-networkx
* python3-semanage
- Provides and obsolete policycoreutils-python
-------------------------------------------------------------------
Thu Nov 8 07:19:24 UTC 2018 - jsegitz@suse.com
- Adjusted source urls (bsc#1115052)
-------------------------------------------------------------------
Wed Oct 17 11:58:44 UTC 2018 - jsegitz@suse.com
- Update to version 2.8 (bsc#1111732)
For changes please see
https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
-------------------------------------------------------------------
Wed May 16 07:26:07 UTC 2018 - mcepl@suse.com
- Rebase to 2.7
* Rather large rewrite of the SPEC file
* Significantly, support for python2 removed
For changes please see
https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt
- Dropped patches:
* policycoreutils-initscript.patch
* policycoreutils-pam-common.patch
* loadpolicy_path.patch
* CVE-2018-1063.patch
-------------------------------------------------------------------
Mon Apr 30 11:24:50 UTC 2018 - dimstar@opensuse.org
- Don't build policycoreutils-gui for anything suse_version >=
1500: there is no reason te believe that SLE16 will have those
old, depreacted dependencies back. Fixes also the issues for
Tumbleweed, where -gui was not installable.
-------------------------------------------------------------------
Thu Apr 26 11:37:36 UTC 2018 - jsegitz@suse.com
- SLE 15 doesn't have the necessary files for policycoreutils-gui,
don't build it there
-------------------------------------------------------------------
Wed Apr 25 14:31:29 UTC 2018 - jsegitz@suse.com
- Drop the requirement for selinux-policy for the gui tools.
-------------------------------------------------------------------
Tue Mar 27 13:46:37 UTC 2018 - tchvatal@suse.com
- Drop SLE11 support, needs the audit that is not present on SLE11
- Fix service link to actually work on current releases
- Drop SUSE_ASNEEDED=0 as it seems to build fine without it
- Do not depend on systemd, just systemd-rpm-macros
-------------------------------------------------------------------
Wed Mar 21 11:32:47 UTC 2018 - jsegitz@suse.com
- Added CVE-2018-1063.patch to prevent chcon from following symlinks in
/tmp, /var/tmp, /var/run and /var/lib/debug (bsc#1083624, CVE-2018-1063)
-------------------------------------------------------------------
Tue Mar 20 12:01:55 UTC 2018 - jsegitz@suse.com
- Remove BuildRequires for libcgroup-devel (bsc#1085837)
-------------------------------------------------------------------
Thu Dec 21 14:29:30 UTC 2017 - jsegitz@suse.com
- Removed BuildRequires for setools-devel and added new
runtime requirement for python2-networkx
-------------------------------------------------------------------
Mon Nov 27 14:23:12 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Fri Nov 24 09:21:51 UTC 2017 - jsegitz@suse.com
- Update to policycoreutils version 2.6. Notable changes:
* setfiles: reverse the sense of -D option
* sandbox: Use dbus-run-session instead of dbus-launch when available
* setfiles: Utility to find security.restorecon_last entries
* setfiles: Add option to stop setting the digest
* hll/pp: Change warning for module name not matching filename to match new behavior
* sepolicy: convert to setools4
* sandbox: create a new session for sandboxed processes
* sandbox: do not try to setup directories without -X or -M
* sandbox: do not run xmodmap in a new X session
* sandbox: fix file labels on copied files
* semanage: Fix semanage fcontext -D
* semanage: Default serange to "s0" for port modify
* semanage: Use socket.getprotobyname for protocol
* semanage: Add auditing of changes in records
* Improve compatibility with Python 3
* Update sandbox types in sandbox manual
* hll/pp: Warn if module name different than output filename
- Update to sepolgen version 2.6. Notable changes:
* Add support for TYPEBOUNDS statement in INTERFACE policy files
- Dropped CVE-2016-7545_sandbox_escape.patch
-------------------------------------------------------------------
Mon Dec 19 07:21:22 UTC 2016 - jsegitz@novell.com
- Added CVE-2016-7545_sandbox_escape.patch to fix CVE-2016-7545, bsc#1000998
Sandboxed session could have escaped to the parent session
-------------------------------------------------------------------
Sat Jul 23 05:47:50 UTC 2016 - jengelh@inai.de
- Trim description in line with other selinux packages
-------------------------------------------------------------------
Thu Jul 14 08:45:45 UTC 2016 - jsegitz@novell.com
- Changes submitted by MargueriteSu:
Update to version 2.5
* sepolicy: Do not overwrite CFLAGS, from Nicolas Iooss.
* sepolicy: Rename policy global variable conflict, from Nicolas Iooss.
* newrole: Add missing defined in #if, from Nicolas Iooss.
* newrole: Add description of missing parameter -p in newrole man page, from Lukas Vrabec.
* secon: Add missing descriptions for --*-key params in secon man page, from Lukas Vrabec
* semanage: List reserve_port_t in semanage port -l, from Petr Lautrbach.
* chcat: Add a fallback in case os.getlogin() returns nothing, from Laurent Bigonville.
* semanage: fix 'semanage permissions -l' subcommand, from Petr Lautrbach.
* semanage: replace string.join() with str.join(), from Petr Lautrbach.
* Man page warning fixes, from Ville Skyttä.
* sandbox: Fix sandbox to propagate specified MCS/MLS Security Level, from Miroslav Grepl.
* semanage: Require at least one argument for 'semanage permissive -d', from Petr Lautrbach.
* sepolicy: Improve sepolicy command line interface, from Petr Lautrbach.
* audit2allow/why: ignore setlocale errors, from Petr Lautrbach.
* semodule: Add --extract/-E, --cil/-c, and --hll/-H to extract modules, from Yuli Khodorkovskiy.
* audit2allow: Comment constraint rules in output, from Miroslav Grepl via Petr Lautrbach.
* Fix PEP8 issues, from Jason Zaman.
* semanage: fix moduleRecords deleteall method, from Stephen Smalley.
* Improve compatibility with Python 3, from Michal Srb.
* semanage: Set self.sename to sename after calling semanage_seuser_set_sename(), from Laurent Bigonville.
* semanage: Fix typo in semanage args for minimium policy store, from Petr Lautrbach.
* sepolicy: Only invoke RPM on RPM-enabled Linux distributions, from Sven Vermeulen.
* mcstransd: don't reinvent getpeercon, from Stephen Smalley.
* setfiles/restorecon: fix -r/-R option, from Petr Lautrbach.
* org.selinux.policy: Require auth_admin_keep for all actions, from Stephen Smalley.
* hll: Move core functions of pp to libsepol, from James Carter
* run_init: Use a ring buffer in open_init_pty, from Jason Zaman.
* run_init: fix open_init_pty availability check, from Nicolas Iooss.
* Widen Xen IOMEM context entries, from Daniel De Graaf.
* Fix -Wformat errors with gcc-5.0.0, from Petr Lautrbach.
* Fixed typo/grammatical error, from Christopher Peterson.
* Fix typo in semanage-port man page, from Andrew Spiers.
Update to version 2.4
* Fix bugs found by hardened gcc flags, from Nicolas Iooss.
* Improve support for building with different versions of python from
Nicolas Iooss.
* Ensure XDG_RUNTIME_DIR is passed through to the sandbox in seunshare,
from Dan Walsh
* Remove cgroups from sandbox, from Dan Walsh
* Try to use setcurrent before setexec in seunshare, from Andy Lutomirski
* Stop using the now deprecated flask.h and av_permissions.h, from Stephen Smalley
* Add a store root path in semodule, from Yuli Khodorkovskiy
* Add a flag to ignore cached CIL files and recompile HLL modules, from
Yuli Khodorkovskiy
* Add and install HLL compiler for policy packages to CIL. The compiler is
installed in /var/libexec/selinux/hll/ by default, from Steve Lawrence
* Fixes to pp compiler to better support roles and type attributes, from
Yuli Khodorkovskiy
* Deprecate base/upgrade/version in semodule. Calling these commands will
now call --install on the backend, from Yuli Khodorkovskiy
* Add ability to install modules with a specified priority, from Caleb
Case
* Use /tmp for permissive module creation, by Caleb Case
* Update semanage to use new source policy infrastructure, from Jason Dana
* Add RuntimeDirectory to mcstrans systemd unit file, from Laurent
Bigonville
-------------------------------------------------------------------
Wed Nov 5 14:04:30 UTC 2014 - jsegitz@novell.com
- added Requires: python-yum, yum-metadata-parser to fix sepolicy
(bnc#903841)
-------------------------------------------------------------------
Mon Sep 8 08:04:51 UTC 2014 - jsegitz@suse.com
- removed execute permission from systemd unit file
-------------------------------------------------------------------
Sun May 18 00:33:58 UTC 2014 - crrodriguez@opensuse.org
- Version 2.3
sepolgen: Add back attributes flag to fix exception crash from Dan Walsh.
(drop policycoreutils-sepolgen_missing_attributes.patch)
* Add -P semodule option to man page from Dan Walsh.
* selinux_current_policy_path will return none on a disabled SELinux system
* Add new icons for sepolicy gui from Dan Walsh.
* Only return writeable files that are enabled from Dan Walsh.
* Add domain to short list of domains, when -t and -d from Dan Walsh.
* Fix up desktop files to match current standards from Dan Walsh.
* Add support to return sensitivities and categories for python from Dan Walsh.
* Cleanup whitespace from Dan Walsh.
* Add message to tell user to install sandbox policy from Dan Walsh.
* Add systemd unit file for mcstrans from Laurent Bigonville.
* Improve restorecond systemd unit file from Laurent Bigonville.
* Minor man pages improvements from Laurent Bigonville.
* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.
-------------------------------------------------------------------
Fri Dec 13 14:13:32 UTC 2013 - vcizek@suse.com
- sepolgen: add back attributes
* fixes build of selinux-policy
* policycoreutils-sepolgen_missing_attributes.patch
-------------------------------------------------------------------
Mon Dec 9 11:20:57 UTC 2013 - vcizek@suse.com
- fix issues which prevented accepting to Factory
* mention the dropped patches (merged upstream):
- policycoreutils-rhat.patch
- policycoreutils-sepolgen.patch
-------------------------------------------------------------------
Thu Oct 31 14:48:31 UTC 2013 - p.drouand@gmail.com
- update to version 2.2
* Properly build the swig exception file
* Fix man pages
* Support overriding PATH and INITDIR in Makefile
* Fix LDFLAGS usage
* Fix init_policy warning
* Fix semanage logging
* Open newrole stdin as read/write
* Fix sepolicy transition
* Support overriding CFLAGS
* Create correct man directory for run_init
* restorecon GLOB_BRACE change
* Extend audit2why to report additional constraint information.
* Catch IOError errors within audit2allow
* semanage export/import fixes
* Improve setfiles progress reporting
* Document setfiles -o option in usage
* Change setfiles to always return -1 on failure
* Improve setsebool error r eporting
* Major overhaul of gui
* Fix sepolicy handling of non-MLS policy
* Support returning type aliases
* Add sepolicy tests
* Add org.selinux.config.policy
* Improve range and user input checking by semanage
* Prevent source or target arguments that end with / for substitutions
* Allow use of <<none>> for semanage fcontext
* Report customized user levels
* Support deleteall for restoring disabled modules
* Improve semanage error reporting
* Only list disabled modules for module locallist
* Fix logging
* Define new constants for file type character codes
* Improve bash completions
* Convert semanage to argparse
* Add semanage tests
* Split semanage man pages
* Move bash completion scripts
* Replace genhomedircon script with a link to semodule
* Fix fixfiles
* Add support for systemd service for restorecon
* Spelling corrections
* Improve sandbox support for home dir symlinks and file caps
* Switch sandbox to openbox window manager
* Coalesce audit2why and audit2allow
* Change audit2allow to append to output file
* Update translations
* Change audit2why to use selinux_current_policy_path
- Update sepolgen to version 1.2
* Return additional constraint information.
* Fix bug in calls to attributes
* Add support for filename transitions
* Fix sepolgen tests
- Remove restorecond.service; use upstream service file
- Don't provide support for sysvinit and systemd on a same system
Use either one or the other
-------------------------------------------------------------------
Thu Jun 27 14:51:08 UTC 2013 - vcizek@suse.com
- change the source url to the official release tarballs
-------------------------------------------------------------------
Wed Apr 3 10:06:06 UTC 2013 - vcizek@suse.com
- fixed source url
- removed old tarball
-------------------------------------------------------------------
Fri Mar 29 13:13:19 UTC 2013 - vcizek@suse.com
- update to 2.1.14
* setfiles: estimate percent progress
* load_policy: make link at the destination directory
* Rebuild polgen.glade with glade-3
* sepolicy: new command to unite small utilities
* sepolicy: Update Makefiles and po files
* sandbox: use sepolicy to look for sandbox_t
* gui: switch to use sepolicy
* gui: sepolgen: use sepolicy to generate
* semanage: use sepolicy for boolean dictionary
* add po file configuration information
* po: stop running update-po on all
* semanage: seobject verify policy types before allowing you to assign them.
* gui: Start using Popen, instead of os.spawnl
* sandbox: Copy /var/tmp to /tmp as they are the same inside
* qualifier to shred content
* semanage: Fix handling of boolean_sub names when using the -F flag
* semanage: man: roles instead of role
* gui: system-config-selinux: Catch no DISPLAY= error
* setfiles: print error if no default label found
* semanage: list logins file entries in semanage login -l
* semanage: good error message is sepolgen python module missing
* gui: system-config-selinux: do not use lokkit
* secon: add support for setrans color information in prompt output
* restorecond: remove /etc/mtab from default list
* gui: If you are not able to read enforcemode set it to False
* genhomedircon: regenerate genhomedircon more often
* restorecond: Add /etc/udpatedb.conf to restorecond.conf
* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
* fixfiles: relabel only after specific date
* po: update translations
* sandbox: seunshare: do not reassign realloc value
* seunshare: do checking on setfsuid
* sestatus: rewrite to shut up coverity
- removed policycoreutils-glibc217.patch (upstream fix)
- added patches:
* policycoreutils-rhat.patch
* policycoreutils-sepolgen.patch
* loadpolicy_path.patch
-------------------------------------------------------------------
Wed Jan 30 12:10:23 UTC 2013 - vcizek@suse.com
- update to 2.1.13
- drop policycoreutils-po.patch.bz2 (updated upstream)
- drop policycoreutils-gui.patch.bz2 (added to upstream)
- drop sandbox init scripts (shouldn't be needed anymore)
- numerous other changes
-------------------------------------------------------------------
Tue Dec 11 15:11:12 UTC 2012 - vcizek@suse.com
- added service unit for restorecond
-------------------------------------------------------------------
Wed Dec 5 13:41:33 UTC 2012 - vcizek@suse.com
- semanage needs python-xml and python-ipy to run
-------------------------------------------------------------------
Sat Nov 17 06:58:05 UTC 2012 - aj@suse.de
- Fix compilation with glibc 2.17 (add patch policycoreutils-glibc217.patch
extracted from Fedora)
-------------------------------------------------------------------
Tue Aug 7 15:30:58 UTC 2012 - meissner@suse.com
- updated policycoreutils to 2.1.10
- adapated patches
- updated sepolgen to 1.1.5
-------------------------------------------------------------------
Tue Feb 14 09:57:15 UTC 2012 - mvyskocil@suse.cz
- fix seceral rpmlint errors and warnings
* use /var/adm/fillup-template for sandbox
* don't use /var/lock/subsys in any of init script
* use set_permissions macro and add correct Requires(pre)
* fix the languages to new -lang package
* fix policycoreutils-sandbox Group
* remove runlevel 4 from inint scripts
-------------------------------------------------------------------
Mon Feb 13 10:53:53 UTC 2012 - coolo@suse.com
- patch license to follow spdx.org standard
-------------------------------------------------------------------
Mon Mar 14 15:16:51 UTC 2011 - prusnak@opensuse.org
- updated to 2.0.85
* changes too numerous to list
-------------------------------------------------------------------
Fri Feb 4 00:09:42 UTC 2011 - toddrme2178@gmail.com
- fix a typo in the package group
-------------------------------------------------------------------
Fri Jun 4 13:19:27 UTC 2010 - prusnak@opensuse.org
- remove usermode-gtk from Requires of -gui subpackage
-------------------------------------------------------------------
Fri May 7 14:01:05 CEST 2010 - meissner@suse.de
- remove incorrect and unnecessary rpmlintrc.
-------------------------------------------------------------------
Mon Mar 22 15:47:14 UTC 2010 - prusnak@suse.cz
- fix build by moving _GNU_SOURCE define (gnusource.patch), thx darix
-------------------------------------------------------------------
Thu Feb 25 15:28:18 UTC 2010 - prusnak@suse.cz
- updated to 2.0.79
* changes too numerous to list
-------------------------------------------------------------------
Wed Jul 15 13:31:00 CEST 2009 - prusnak@suse.cz
- disable Requires usermode-gtk
-------------------------------------------------------------------
Fri Jun 19 13:42:09 CEST 2009 - prusnak@suse.cz
- added libsepol-static-devel to BuildRequires
-------------------------------------------------------------------
Wed May 27 14:24:47 CEST 2009 - prusnak@suse.cz
- updated to 2.0.62
* Add btrfs to fixfiles from Dan Walsh.
* Remove restorecond error for matching globs with multiple hard links
and fix some error messages from Dan Walsh.
* Make removing a non-existant module a warning rather than an error
from Dan Walsh.
* Man page fixes from Dan Walsh.
-------------------------------------------------------------------
Wed Feb 11 01:09:12 CET 2009 - ro@suse.de
- use sr@latin instead of sr@Latn
-------------------------------------------------------------------
Wed Jan 14 14:12:53 CET 2009 - prusnak@suse.cz
- updated to 2.0.61
* semanage: use semanage_mls_enabled() from Stephen Smalley
* fix error checking in restorecond, for inotify_add_watch
* change md5 to hashlib.md5 in sepolgen
* fix Japanese translations
* fix audit2allow man page
* don't error out when removing a non existing module
* chcat: cut categories at arbitrary point (25) from Dan Walsh
* semodule: use new interfaces in libsemanage for compressed
files from Dan Walsh
* audit2allow: string changes for usage
-------------------------------------------------------------------
Mon Dec 1 11:23:02 CET 2008 - prusnak@suse.cz
- updated to 2.0.59
* Fix text in newrole
* Fix revertbutton on booleans page in system-config-selinux
* Fix system-config-selinux booleanspage throwing and exception
* Allow addition of local modifications of fcontext policy
* Handle selinux disabled correctly
* Handle manipulation of fcontext file correctly
* Fix traceback in audit2why
-------------------------------------------------------------------
Mon Nov 10 16:51:16 CET 2008 - ro@suse.de
- package "newrole" with permissions matching
"secure" permissions mode
-------------------------------------------------------------------
Fri Nov 7 02:44:25 CET 2008 - ro@suse.de
- buildfix: prevent regeneration of policycoreutils.pot
-------------------------------------------------------------------
Fri Oct 31 15:57:57 CET 2008 - prusnak@suse.cz
- use permissions for newrole
-------------------------------------------------------------------
Mon Oct 20 11:48:40 CEST 2008 - prusnak@suse.cz
- updated to 2.0.57
* Update po files from Dan Walsh.
- updated to 2.0.56
* fixfiles will now remove all files in /tmp and will check for
unlabeled_t in /tmp and /var/tmp from Dan Walsh.
* add glob support to restorecond from Dan Walsh.
* allow semanage to handle multi-line commands in a single transaction
from Dan Walsh.
-------------------------------------------------------------------
Mon Sep 8 14:18:48 CEST 2008 - prusnak@suse.cz
- fix scriptlets
-------------------------------------------------------------------
Tue Sep 2 12:25:39 CEST 2008 - prusnak@suse.cz
- updated to 2.0.55
* Merged semanage node support from Christian Kuester.
- updated to 2.0.54
* Add support for boolean files and group support for seusers from Dan Walsh.
* Ensure that setfiles -p output is newline terminated from Russell Coker.
- updated to 2.0.53
* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.
- updated sepolgen to 1.0.13
* Only append s0 suffix if MLS is enabled from Karl MacMillan.
- added missing preun/post/postun scriptlets
-------------------------------------------------------------------
Mon Aug 4 01:00:45 CEST 2008 - ro@suse.de
- add directory to filelist to fix build
-------------------------------------------------------------------
Tue Jul 15 18:11:09 CEST 2008 - prusnak@suse.cz
- initial version 2.0.52
* based on Fedora package by Dan Walsh <dwalsh@redhat.com>

305
policycoreutils.keyring Normal file
View File

@ -0,0 +1,305 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=UVQc
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----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=f80i
-----END PGP PUBLIC KEY BLOCK-----

431
policycoreutils.spec Normal file
View File

@ -0,0 +1,431 @@
#
# spec file for package policycoreutils
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define libaudit_ver 2.2
%define libsepol_ver 3.5
%define libsemanage_ver 3.5
%define libselinux_ver 3.5
%define setools_ver 4.1.1
Name: policycoreutils
Version: 3.5
Release: 0
Summary: SELinux policy core utilities
License: GPL-2.0-or-later
Group: Productivity/Security
URL: https://github.com/SELinuxProject/selinux
Source0: https://github.com/SELinuxProject/selinux/releases/download/%{version}/%{name}-%{version}.tar.gz
Source1: https://github.com/SELinuxProject/selinux/releases/download/%{version}/%{name}-%{version}.tar.gz.asc
Source2: policycoreutils.keyring
Source3: https://github.com/SELinuxProject/selinux/releases/download/%{version}/selinux-python-%{version}.tar.gz
Source4: https://github.com/SELinuxProject/selinux/releases/download/%{version}/selinux-python-%{version}.tar.gz.asc
Source5: https://github.com/SELinuxProject/selinux/releases/download/%{version}/semodule-utils-%{version}.tar.gz
Source6: https://github.com/SELinuxProject/selinux/releases/download/%{version}/semodule-utils-%{version}.tar.gz.asc
Source7: system-config-selinux.png
Source8: system-config-selinux.desktop
Source9: system-config-selinux.pam
Source10: system-config-selinux.console
Source11: selinux-polgengui.desktop
Source12: selinux-polgengui.console
Source13: newrole.pam
Patch0: make_targets.patch
Patch2: get_os_version.patch
Patch3: run_init.pamd.patch
Patch4: reproducible-build.patch
BuildRequires: audit-devel >= %{libaudit_ver}
BuildRequires: bison
BuildRequires: dbus-1-glib-devel
BuildRequires: fdupes
BuildRequires: flex
BuildRequires: gettext
BuildRequires: hicolor-icon-theme
BuildRequires: libbz2-devel
BuildRequires: libcap-devel
BuildRequires: libcap-ng-devel
BuildRequires: libselinux-devel >= %{libselinux_ver}
BuildRequires: libsemanage-devel >= %{libsemanage_ver}
BuildRequires: libsepol-devel-static >= %{libsepol_ver}
BuildRequires: pam-devel
# needed only for dir /usr/share/polkit-1 from policycoreutils-gui
BuildRequires: polkit
BuildRequires: %{python_module devel}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module wheel}
BuildRequires: python-rpm-macros
BuildRequires: python3
BuildRequires: update-desktop-files
BuildRequires: xmlto
Requires: gawk
Requires: libsepol2 >= %{libsepol_ver}
Requires: rpm
Requires: selinux-tools
Requires: util-linux
%description
policycoreutils contains the policy core utilities that are required
for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles, and run_init to run %{_initddir} scripts in the proper
context.
(Security-enhanced Linux is a feature of the kernel and some
utilities that implement mandatory access control policies, such as
Type Enforcement, Role-based Access Control and Multi-Level
Security.)
%lang_package
%package -n python3-%{name}
Summary: SELinux policy core python3 interfaces
Group: Productivity/Security
Requires: %{name} = %{version}-%{release}
Requires: checkpolicy
Requires: python3-audit >= %{libaudit_ver}
Requires: python3-selinux
Requires: python3-semanage >= %{libsepol_ver}
Requires: python3-setools >= %{setools_ver}
Requires: python3-setuptools
Provides: policycoreutils-python = %{version}-%{release}
Obsoletes: policycoreutils-python < %{version}
BuildArch: noarch
%description -n python3-%{name}
The python-policycoreutils package contains the interfaces that can be used
by python in an SELinux environment.
%package python-utils
Summary: SELinux policy core python utilities
Group: Productivity/Security
Requires: python3-policycoreutils = %{version}-%{release}
BuildArch: noarch
Obsoletes: policycoreutils-python
%description python-utils
The policycoreutils-python-utils package contains the management tools
use to manage an SELinux environment.
%package devel
Summary: SELinux policy core policy devel utilities
Group: Productivity/Security
Requires: %{_bindir}/make
Requires: python3-%{name} = %{version}-%{release}
Requires: python3-distro
Recommends: %{_sbindir}/ausearch
Conflicts: %{name}-python <= 2.6
%description devel
The policycoreutils-devel package contains the management tools use to develop policy in an SELinux environment.
%package sandbox
Summary: SELinux sandbox utilities
Group: Productivity/Security
Requires: python3-%{name} = %{version}
Requires: xorg-x11-server-extra
%description sandbox
The sandbox package contains the scripts to create graphical sandboxes.
%package newrole
Summary: The newrole application for RBAC/MLS
Group: Productivity/Security
Requires: %{name} = %{version}
# we need both, else permissions could be de-installed
# and verify failed
Requires: permissions
Requires(post): permissions
%description newrole
RBAC/MLS policy machines require newrole as a way of changing the role
or level of a logged-in user.
%if 0%{?suse_version} < 1500
%package gui
Summary: SELinux configuration GUI
Group: Productivity/Security
Requires: python
Requires: python-gnome
Requires: python-gtk
Requires: python3-%{name} = %{version}
Requires: selinux-policy
Requires: setools-console
%description gui
system-config-selinux is a utility for managing the SELinux environment.
%endif
%prep
%setup -q -a3 -a5
setools_python_pwd="$PWD/selinux-python-%{version}"
semodule_utils_pwd="$PWD/semodule-utils-%{version}"
%patch0 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
mv ${setools_python_pwd}/audit2allow ${setools_python_pwd}/chcat ${setools_python_pwd}/semanage ${setools_python_pwd}/sepolgen ${setools_python_pwd}/sepolicy .
mv ${semodule_utils_pwd}/semodule_expand ${semodule_utils_pwd}/semodule_link ${semodule_utils_pwd}/semodule_package .
%build
export PYTHON="python3" LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro"
make %{?_smp_mflags} LIBEXECDIR="%{_libexecdir}"
(cd selinux-python-%{version}/po && make)
%install
export PYTHON="python3"
mkdir -p %{buildroot}%{_localstatedir}/lib/selinux
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{_sbindir}
mkdir -p %{buildroot}/sbin
mkdir -p %{buildroot}%{_mandir}/man1
mkdir -p %{buildroot}%{_mandir}/man8
mkdir -p %{buildroot}%{_sysconfdir}/security/console.apps
%if 0%{?suse_version} > 1500
mkdir -p %{buildroot}%{_pam_vendordir}
%else
mkdir -p %{buildroot}%{_sysconfdir}/pam.d
%endif
make LSPP_PRIV=y DESTDIR=%{buildroot} install LIBEXECDIR=%{_libexecdir}
%if 0%{?suse_version} > 1500
cp -f %{SOURCE13} %{buildroot}%{_pam_vendordir}/newrole
rm %{buildroot}%{_sysconfdir}/pam.d/newrole
mv %{buildroot}%{_sysconfdir}/pam.d/run_init %{buildroot}%{_pam_vendordir}/run_init
%else
cp -f %{SOURCE13} %{buildroot}%{_sysconfdir}/pam.d/newrole
%endif
install -D -m 644 %{SOURCE12} %{buildroot}%{_datadir}/pixmaps/system-config-selinux.png
%if 0%{?suse_version} < 1500
install -m 644 %{SOURCE13} %{buildroot}%{_sysconfdir}/pam.d/system-config-selinux
install -m 644 %{SOURCE13} %{buildroot}%{_sysconfdir}/pam.d/selinux-polgengui
%endif
install -m 644 %{SOURCE10} %{buildroot}%{_sysconfdir}/security/console.apps/system-config-selinux
install -m 644 %{SOURCE12} %{buildroot}%{_sysconfdir}/security/console.apps/selinux-polgengui
rm -f %{buildroot}%{_mandir}/ru/man8/genhomedircon.8.gz
ln -sf consolehelper %{buildroot}%{_bindir}/system-config-selinux
ln -sf consolehelper %{buildroot}%{_bindir}/selinux-polgengui
mkdir -p %{buildroot}%{_libexecdir}/selinux/hll/
mkdir -p %{buildroot}%{_localstatedir}/lib/sepolgen
%suse_update_desktop_file -i system-config-selinux System Security Settings
%suse_update_desktop_file -i selinux-polgengui System Security Settings
(cd selinux-python-%{version}/po && make DESTDIR=%{buildroot} install)
%find_lang %{name}
%find_lang selinux-python
%fdupes -s %{buildroot}%{_datadir}
%if 0%{?suse_version} >= 1500
rm %{buildroot}%{_sysconfdir}/security/console.apps/selinux-polgengui \
%{buildroot}%{_sysconfdir}/security/console.apps/system-config-selinux \
%{buildroot}%{_bindir}/selinux-polgengui \
%{buildroot}%{_bindir}/system-config-selinux \
%{buildroot}%{_datadir}/applications/selinux-polgengui.desktop \
%{buildroot}%{_datadir}/applications/system-config-selinux.desktop \
%{buildroot}%{_datadir}/pixmaps/system-config-selinux.png
%endif
mv %{buildroot}/sbin/* %{buildroot}/usr/sbin/
%if 0%{?suse_version} > 1500
%pre
# Prepare for migration to /usr/etc; save any old .rpmsave
for i in pam.d/run_init ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||:
done
%pre newrole
# Prepare for migration to /usr/etc; save any old .rpmsave
for i in pam.d/newrole ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||:
done
%posttrans
# Migration to /usr/etc, restore just created .rpmsave
for i in pam.d/run_init ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||:
done
%posttrans newrole
# Migration to /usr/etc, restore just created .rpmsave
for i in pam.d/newrole ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||:
done
%endif
%post newrole
%set_permissions %{_bindir}/newrole
%verifyscript newrole
%verify_permissions -e %{_bindir}/newrole
%files
%{_bindir}/semodule_expand
%{_bindir}/semodule_link
%{_bindir}/semodule_package
%{_bindir}/semodule_unpackage
%{_sbindir}/restorecon
%{_sbindir}/setfiles
%{_sbindir}/restorecon_xattr
%{_sbindir}/fixfiles
%{_sbindir}/load_policy
%dir %{_libexecdir}/selinux
%dir %{_libexecdir}/selinux/hll
%{_libexecdir}/selinux/hll/pp
%{_sbindir}/genhomedircon
%{_sbindir}/setsebool
%{_sbindir}/semodule
%{_sbindir}/sestatus
%{_bindir}/sestatus
%{_sbindir}/run_init
%{_sbindir}/open_init_pty
%{_bindir}/secon
%if 0%{?suse_version} > 1500
%{_pam_vendordir}/run_init
%else
%config(noreplace) %{_sysconfdir}/pam.d/run_init
%endif
%config(noreplace) %{_sysconfdir}/sestatus.conf
%{_mandir}/man8/fixfiles.8%{?ext_man}
%{_mandir}/man8/genhomedircon.8%{?ext_man}
%{_mandir}/man8/load_policy.8%{?ext_man}
%{_mandir}/man8/open_init_pty.8%{?ext_man}
%{_mandir}/man8/restorecon.8%{?ext_man}
%{_mandir}/man8/restorecon_xattr.8%{?ext_man}
%{_mandir}/man8/run_init.8%{?ext_man}
%{_mandir}/man8/semodule.8%{?ext_man}
%{_mandir}/man8/semodule_expand.8%{?ext_man}
%{_mandir}/man8/semodule_link.8%{?ext_man}
%{_mandir}/man8/semodule_package.8%{?ext_man}
%{_mandir}/man8/semodule_unpackage.8%{?ext_man}
%{_mandir}/man8/sestatus.8%{?ext_man}
%{_mandir}/man8/setfiles.8%{?ext_man}
%{_mandir}/man8/setsebool.8%{?ext_man}
%{_mandir}/ru/man8/fixfiles.8%{?ext_man}
%{_mandir}/ru/man8/genhomedircon.8%{?ext_man}
%{_mandir}/ru/man8/load_policy.8%{?ext_man}
%{_mandir}/ru/man8/open_init_pty.8%{?ext_man}
%{_mandir}/ru/man8/restorecon.8%{?ext_man}
%{_mandir}/ru/man8/restorecon_xattr.8%{?ext_man}
%{_mandir}/ru/man8/run_init.8%{?ext_man}
%{_mandir}/ru/man8/semodule.8%{?ext_man}
%{_mandir}/ru/man8/semodule_expand.8%{?ext_man}
%{_mandir}/ru/man8/semodule_link.8%{?ext_man}
%{_mandir}/ru/man8/semodule_package.8%{?ext_man}
%{_mandir}/ru/man8/semodule_unpackage.8%{?ext_man}
%{_mandir}/ru/man8/sestatus.8%{?ext_man}
%{_mandir}/ru/man8/setfiles.8%{?ext_man}
%{_mandir}/ru/man8/setsebool.8%{?ext_man}
%{_mandir}/man5/selinux_config.5%{?ext_man}
%{_mandir}/man5/sestatus.conf.5%{?ext_man}
%{_mandir}/ru/man5/selinux_config.5%{?ext_man}
%{_mandir}/ru/man5/sestatus.conf.5%{?ext_man}
%{_mandir}/man1/secon.1%{?ext_man}
%{_mandir}/ru/man1/secon.1%{?ext_man}
%{_datadir}/bash-completion/completions/setsebool
%files -n python3-%{name}
%{python3_sitelib}/*
%dir %{_localstatedir}/lib/selinux
%files lang -f %{name}.lang
%files python-utils -f selinux-python.lang
%{_bindir}/audit2allow
%{_bindir}/audit2why
%{_bindir}/chcat
%{_sbindir}/semanage
%{_mandir}/man1/audit2allow.1%{?ext_man}
%{_mandir}/ru/man1/audit2allow.1%{?ext_man}
%{_mandir}/man1/audit2why.1%{?ext_man}
%{_mandir}/ru/man1/audit2why.1%{?ext_man}
%{_mandir}/man8/chcat.8%{?ext_man}
%{_mandir}/ru/man8/chcat.8%{?ext_man}
%{_mandir}/man8/semanage*.8%{?ext_man}
%{_mandir}/ru/man8/semanage*.8%{?ext_man}
%{_datadir}/bash-completion/completions/semanage
%files devel
%{_bindir}/sepolgen
%{_bindir}/sepolgen-ifgen
%{_bindir}/sepolgen-ifgen-attr-helper
%{_bindir}/sepolicy
%{_mandir}/man8/sepolicy-booleans.8%{?ext_man}
%{_mandir}/man8/sepolicy-communicate.8%{?ext_man}
%{_mandir}/man8/sepolicy-generate.8%{?ext_man}
%{_mandir}/man8/sepolicy-gui.8%{?ext_man}
%{_mandir}/man8/sepolicy-interface.8%{?ext_man}
%{_mandir}/man8/sepolicy-manpage.8%{?ext_man}
%{_mandir}/man8/sepolicy-network.8%{?ext_man}
%{_mandir}/man8/sepolicy-transition.8%{?ext_man}
%{_mandir}/man8/sepolicy.8%{?ext_man}
%{_mandir}/man8/sepolgen.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-booleans.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-communicate.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-generate.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-gui.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-interface.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-manpage.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-network.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy-transition.8%{?ext_man}
%{_mandir}/ru/man8/sepolicy.8%{?ext_man}
%{_mandir}/ru/man8/sepolgen.8%{?ext_man}
%dir %{_localstatedir}/lib/sepolgen
%{_localstatedir}/lib/sepolgen/perm_map
%{_datadir}/bash-completion/completions/sepolicy
%files newrole
%verify(not mode) %attr(4755,root,root) %{_bindir}/newrole
%{_mandir}/man1/newrole.1%{?ext_man}
%{_mandir}/ru/man1/newrole.1%{?ext_man}
%if 0%{?suse_version} > 1500
%{_pam_vendordir}/newrole
%else
%config(noreplace) %{_sysconfdir}/pam.d/newrole
%endif
%if 0%{?suse_version} < 1500
%files gui
%{_bindir}/system-config-selinux
%{_bindir}/selinux-polgengui
%{_datadir}/applications/system-config-selinux.desktop
%{_datadir}/system-config-selinux/system-config-selinux.desktop
%{_datadir}/applications/selinux-polgengui.desktop
%{_datadir}/applications/sepolicy.desktop
%{_datadir}/system-config-selinux/selinux-polgengui.desktop
%{_datadir}/system-config-selinux/sepolicy.desktop
%{_datadir}/icons/hicolor/24x24/apps/system-config-selinux.png
%{_datadir}/icons/hicolor/16x16/apps/sepolicy.png
%{_datadir}/icons/hicolor/22x22/apps/sepolicy.png
%{_datadir}/icons/hicolor/256x256/apps/sepolicy.png
%{_datadir}/icons/hicolor/32x32/apps/sepolicy.png
%{_datadir}/icons/hicolor/48x48/apps/sepolicy.png
%{_datadir}/pixmaps/sepolicy.png
%{_datadir}/pixmaps/system-config-selinux.png
%{_datadir}/polkit-1/actions/org.selinux.config.policy
%{_datadir}/polkit-1/actions/org.selinux.policy
%dir %{_datadir}/system-config-selinux
%{_datadir}/system-config-selinux/system-config-selinux.png
%{_datadir}/system-config-selinux/*.py*
%{_datadir}/system-config-selinux/*.glade
%{_mandir}/man8/selinux-polgengui.8%{?ext_man}
%{_mandir}/man8/system-config-selinux.8%{?ext_man}
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.selinux.conf
%config(noreplace) %{_sysconfdir}/pam.d/system-config-selinux
%config(noreplace) %{_sysconfdir}/pam.d/selinux-polgengui
%dir %{_sysconfdir}/security/console.apps
%config(noreplace) %{_sysconfdir}/security/console.apps/selinux-polgengui
%config(noreplace) %{_sysconfdir}/security/console.apps/system-config-selinux
%endif
%changelog

13
reproducible-build.patch Normal file
View File

@ -0,0 +1,13 @@
Index: policycoreutils-3.5/selinux-python-3.5/sepolicy/sepolicy/manpage.py
===================================================================
--- policycoreutils-3.5.orig/selinux-python-3.5/sepolicy/sepolicy/manpage.py
+++ policycoreutils-3.5/selinux-python-3.5/sepolicy/sepolicy/manpage.py
@@ -156,7 +156,7 @@ def get_alphabet_manpages(manpage_list):
if j.split("/")[-1][0] == i:
temp.append(j.split("/")[-1])
- alphabet_manpages[i] = temp
+ alphabet_manpages[i] = sorted(temp)
return alphabet_manpages

18
run_init.pamd.patch Normal file
View File

@ -0,0 +1,18 @@
Index: policycoreutils-3.4-rc3/run_init/run_init.pamd
===================================================================
--- policycoreutils-3.4-rc3.orig/run_init/run_init.pamd
+++ policycoreutils-3.4-rc3/run_init/run_init.pamd
@@ -1,8 +1,9 @@
#%PAM-1.0
# Uncomment the next line if you do not want to enter your passwd every time
#auth sufficient pam_rootok.so
-auth include system-auth
-account include system-auth
-password include system-auth
-session include system-auth
+auth include common-auth
+account include common-account
+password include common-password
+session include common-session
session optional pam_xauth.so
+session optional pam_keyinit.so revoke [force]

View File

@ -0,0 +1,3 @@
USER=root
PROGRAM=/usr/share/system-config-selinux/polgengui.py
SESSION=true

64
selinux-polgengui.desktop Normal file
View File

@ -0,0 +1,64 @@
[Desktop Entry]
Name=SELinux Policy Generation Tool
Name[bn_IN]=SELinux Policy ি
Name[ca]=Eina de generació de polítiques del SELinux
Name[de]=Tool zur Erstellung von SELinux-Richtlinien
Name[es]=Generador de Políticas de SELinux
Name[fi]=SELinux-käytäntöjen generointityökalu
Name[fr]=Outil de génération de stratégies SELinux
Name[gu]=SELinux િ
Name[hi]=SELinux ि
Name[it]=Tool di generazione della policy di SELinux
Name[ja]=SELinux
Name[kn]=SELinux ಿಿ
Name[ko]=SELinux
Name[ml]=SELinux ിി
Name[mr]=SELinux ि
Name[nl]=SELinux tactiek generatie gereedschap
Name[or]=SELinux ି ି
Name[pa]=SELinux ਿ ਿ
Name[pl]=Narzędzie tworzenia polityki SELinuksa
Name[pt]=Ferramenta de Geração de Políticas SELinux
Name[pt_BR]=Ferramenta de criação de políticas do SELinux
Name[ru]=Средство создания политики SELinux
Name[sv]=Genereringsverktyg för SELinuxpolicy
Name[ta]=SELinux ிி ி ி
Name[te]=SELinux ి
Name[uk]=Утиліта генерації політики SELinux
Name[zh_CN]=SELinux
Name[zh_TW]=SELinux SELinux Policy Generation Tool
GenericName=SELinux
Comment=Generate SELinux policy modules
Comment[bn_IN]=SELinux িি ি ি
Comment[ca]=Genera els mòduls de les polítiques de SELinux
Comment[de]=Tool zur Erstellung von SELinux-Richtlinien
Comment[es]=Generar módulos de política de SELinux
Comment[fi]=Generoi SELinuxin käytäntömoduuleja
Comment[fr]=Génére des modules de stratégie SELinux
Comment[gu]=SELinux િ
Comment[hi]= ि
Comment[it]=Genera moduli della politica di SELinux
Comment[ja]=
Comment[kn]=SELinux ಿಿ ಿ
Comment[ko]=SELinux
Comment[ml]=SELinux ിി
Comment[mr]=SELinux ि
Comment[nl]=Maak een SELinux tactiek module aan
Comment[or]=SELinux ି ି
Comment[pa]=SELinux ਿ ਿ
Comment[pl]=Tworzenie nowych modułów polityki SELinuksa
Comment[pt]=Gerar módulos de políticas SELinux
Comment[pt_BR]=Gerar módulos de política do SELinux
Comment[ru]=Генерация модулей политики SELinux
Comment[sv]=Generera SELinux-policymoduler
Comment[ta]=SELinux ி
Comment[te]=SELinux ి
Comment[uk]=Створення модулів контролю доступу SELinux
Comment[zh_CN]= SELinux
Comment[zh_TW]= SELinux
StartupNotify=true
Icon=system-config-selinux
Exec=selinux-polgengui
Type=Application
Terminal=false
Categories=System;Security;Settings;

BIN
selinux-python-3.5.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -0,0 +1,19 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=226C
-----END PGP SIGNATURE-----

BIN
semodule-utils-3.5.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -0,0 +1,19 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=RJwB
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,3 @@
USER=root
PROGRAM=/usr/share/system-config-selinux/system-config-selinux.py
SESSION=true

View File

@ -0,0 +1,64 @@
[Desktop Entry]
Name=SELinux Management
Name[bn_IN]=SELinux ি
Name[de]=SELinux-Management
Name[ca]=Gestió de SELinux
Name[es]=Administración de SELinux
Name[fi]=SELinuxin ylläpito
Name[fr]=Gestion de SELinux
Name[gu]=SELinux
Name[hi]=SELinux
Name[jp]=SELinux
Name[it]=Gestione di SELinux
Name[kn]=SELinux
Name[ko]=SELinux
Name[ml]=SELinux
Name[mr]=SELinux
Name[nl]=SELinux beheer
Name[or]=SELinux ି
Name[pa]=SELinux
Name[pl]=Zarządzanie SELinuksem
Name[pt_BR]=Gerenciamento do SELinux
Name[pt]=Gestão de SELinux
Name[ru]=Управление SELinux
Name[sv]=SELinux-hantering
Name[ta]=SELinux
Name[te]=SELinux ి
Name[uk]=Керування SELinux
Name[zh_CN]=SELinux
Name[zh_TW]=SELinux
GenericName=SELinux
Comment=Configure SELinux in a graphical setting
Comment[bn_IN]=ি ি SELinux ি
Comment[ca]=Configura SELinuc an mode de preferències gràfiques
Comment[de]=SELinux in einer grafischen Einstellung konfigurieren
Comment[es]=Defina SELinux en una configuración de interfaz gráfica
Comment[fi]=Tee SELinuxin asetukset graafisesti
Comment[fr]=Configure SELinux dans un environnement graphique
Comment[gu]=િ SELinux િ
Comment[hi]=SELinux ि ि
Comment[it]=Configura SELinux in una impostazione grafica
Comment[jp]= SELinux
Comment[ko]=SELinux
Comment[kn]=SELinux ಿ ಿಿ ಿಿ
Comment[ml]= ി ി SELinux ി
Comment[mr]=ि ि SELinux
Comment[nl]=Configureer SELinux in een grafische omgeving
Comment[or]=SELinux ି ି
Comment[pa]=SELinux ਿ ਿ ਿ
Comment[pl]=Konfiguracja SELinuksa w trybie graficznym
Comment[pt]=Configurar o SELinux num ambiente gráfico
Comment[pt_BR]=Configure o SELinux em uma configuração gráfica
Comment[ru]=Настройка SELinux в графическом режиме
Comment[sv]=Konfigurera SELinux i en grafisk miljö
Comment[ta]=SELinux ி
Comment[te]=SELinux ి ి
Comment[uk]=Засіб для налаштування SELinux з графічним інтерфейсом
Comment[zh_CN]= SELinux
Comment[zh_TW]= SELinux
StartupNotify=true
Icon=system-config-selinux
Exec=system-config-selinux
Type=Application
Terminal=false
Categories=System;Security;Settings;

View File

@ -0,0 +1,8 @@
#%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_timestamp.so
auth include common-auth
session required pam_permit.so
session optional pam_xauth.so
session optional pam_timestamp.so
account required pam_permit.so

BIN
system-config-selinux.png (Stored with Git LFS) Normal file

Binary file not shown.