102 Commits

Author SHA256 Message Date
72ecd4b660 Accepting request 1331573 from security:SELinux
- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  - Fix problem with bounds statements in optional blocks
  - Provide a better error message for implicit role and user bounds
  - Allow type attributes to be associated with other type attributes
  - checkpolicy/tests: Modify tests to check handling of initial sids
- keyring: Add key of Jason Zaman <jasonzaman@gmail.com> 
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]

OBS-URL: https://build.opensuse.org/request/show/1331573
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=43
2026-02-09 10:42:49 +00:00
Hu
3773cbd7b3 Accepting request 1331558 from home:cahu:branches:toolchain310
- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  - Fix problem with bounds statements in optional blocks
  - Provide a better error message for implicit role and user bounds
  - Allow type attributes to be associated with other type attributes
  - checkpolicy/tests: Modify tests to check handling of initial sids
- keyring: Add key of Jason Zaman <jasonzaman@gmail.com> 
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]

OBS-URL: https://build.opensuse.org/request/show/1331558
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=76
2026-02-06 09:59:52 +00:00
fbce518c5c Accepting request 1295311 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1295311
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=42
2025-07-24 16:34:32 +00:00
cd46d98321 Accepting request 1295299 from home:jsegitz:branches:security:SELinux_3.9_new
next try for 3.9 toolchain. Addition of neveraudit causes the issues. We will have to rebuild all existing selinux modules. Dimstar is aware

OBS-URL: https://build.opensuse.org/request/show/1295299
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=74
2025-07-23 12:19:05 +00:00
054bcbd73f Accepting request 1295054 from openSUSE:Factory
https://bugzilla.suse.com/show_bug.cgi?id=1246831

OBS-URL: https://build.opensuse.org/request/show/1295054
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=41
2025-07-22 10:20:51 +00:00
OBS User buildservice-autocommit
b12fba686a Updating link to change in openSUSE:Factory/checkpolicy revision 41
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=4a109ab94347f0fecc1d063821b73881
2025-07-22 10:20:51 +00:00
34623041c8 Accepting request 1295054 from openSUSE:Factory
https://bugzilla.suse.com/show_bug.cgi?id=1246831

OBS-URL: https://build.opensuse.org/request/show/1295054
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=41
2025-07-22 10:20:51 +00:00
1cf295d46a Accepting request 1294366 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1294366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=40
2025-07-20 13:27:50 +00:00
d36dbbc7c7 Accepting request 1294366 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1294366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=40
2025-07-20 13:27:50 +00:00
fc4c5e4a5c Accepting request 1294335 from home:jsegitz:branches:security:SELinux_3.9
Toolchain 3.9 update

OBS-URL: https://build.opensuse.org/request/show/1294335
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=72
2025-07-18 12:03:02 +00:00
9f2c8cae3f Accepting request 1251762 from security:SELinux
- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change

OBS-URL: https://build.opensuse.org/request/show/1251762
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=39
2025-03-11 19:44:16 +00:00
e6d103bcfc Accepting request 1251762 from security:SELinux
- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change

OBS-URL: https://build.opensuse.org/request/show/1251762
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=39
2025-03-11 19:44:16 +00:00
Hu
d7eb14cca6 Accepting request 1251224 from home:cahu:branches:toolchain381
OBS-URL: https://build.opensuse.org/request/show/1251224
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=70
2025-03-07 14:39:18 +00:00
a53e1aaf5b Accepting request 1245829 from security:SELinux
update selinux userspace to 3.8

OBS-URL: https://build.opensuse.org/request/show/1245829
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=38
2025-02-14 18:20:03 +00:00
94b7a20205 Accepting request 1245829 from security:SELinux
update selinux userspace to 3.8

OBS-URL: https://build.opensuse.org/request/show/1245829
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=38
2025-02-14 18:20:03 +00:00
39584b5ed8 Accepting request 1245824 from home:rfrohl:branches:security:SELinux
3.8 with correct keyfiles

OBS-URL: https://build.opensuse.org/request/show/1245824
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=68
2025-02-14 08:07:21 +00:00
e8fee3cf8c Accepting request 1245665 from home:rfrohl:branches:security:SELinux
update selinux userspace to 3.8

OBS-URL: https://build.opensuse.org/request/show/1245665
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=67
2025-02-13 15:04:32 +00:00
d8a90fa83d Accepting request 1185744 from security:SELinux
- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once

OBS-URL: https://build.opensuse.org/request/show/1185744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=37
2024-07-12 15:04:20 +00:00
6ae1ba7915 Accepting request 1185744 from security:SELinux
- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once

OBS-URL: https://build.opensuse.org/request/show/1185744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=37
2024-07-12 15:04:20 +00:00
Hu
3ee6b3d74d Accepting request 1184291 from home:cahu:security:SELinux:userspace37
- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once

OBS-URL: https://build.opensuse.org/request/show/1184291
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=65
2024-07-02 09:43:44 +00:00
38e63a020a Accepting request 1137082 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1137082
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=36
2024-01-08 22:43:43 +00:00
caa92752db Accepting request 1137082 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1137082
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=36
2024-01-08 22:43:43 +00:00
95cda959b1 Accepting request 1134066 from home:cahu:branches:security:SELinux
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules  
  * Translations updated from  
    https://translate.fedoraproject.org/projects/selinux/    
  * Bug fixes  
- Remove keys from keyring since they expired:  
  - E853C1848B0185CF42864DF363A8AD4B982C4373  
    Petr Lautrbach <plautrba@redhat.com>  
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF  
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>

OBS-URL: https://build.opensuse.org/request/show/1134066
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=63
2024-01-05 15:28:20 +00:00
802b1bdc44 Accepting request 1068393 from security:SELinux
SELinux 3.5 toolchain

OBS-URL: https://build.opensuse.org/request/show/1068393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=35
2023-03-07 15:48:17 +00:00
170188fe3d Accepting request 1068393 from security:SELinux
SELinux 3.5 toolchain

OBS-URL: https://build.opensuse.org/request/show/1068393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=35
2023-03-07 15:48:17 +00:00
54401d27dd Accepting request 1067534 from home:jsegitz:branches:security:SELinux_toolchain
- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067534
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=61
2023-02-24 08:43:21 +00:00
0b191a788e Accepting request 978305 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/978305
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=34
2022-06-20 13:36:50 +00:00
660e21436e Accepting request 978305 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/978305
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=34
2022-06-20 13:36:50 +00:00
23cd133b9c Accepting request 978288 from home:jsegitz:branches:security:SELinux
- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission

OBS-URL: https://build.opensuse.org/request/show/978288
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=59
2022-05-20 14:53:42 +00:00
071ee882d5 Accepting request 930942 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/930942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=33
2021-11-15 14:26:06 +00:00
8cfb720893 Accepting request 930942 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/930942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=33
2021-11-15 14:26:06 +00:00
fc36a237c6 Accepting request 930926 from home:jsegitz:branches:security:SELinux
- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed

OBS-URL: https://build.opensuse.org/request/show/930926
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=58
2021-11-11 16:02:02 +00:00
12723c14d7 Accepting request 879083 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/879083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=32
2021-03-24 15:08:55 +00:00
abc06290d0 Accepting request 879083 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/879083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=32
2021-03-24 15:08:55 +00:00
c1555936c3 Accepting request 878722 from home:jengelh:branches:security:SELinux
satisfy changelog requirements

OBS-URL: https://build.opensuse.org/request/show/878722
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=56
2021-03-15 07:36:04 +00:00
a582e23244 Accepting request 878478 from home:jsegitz:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/878478
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=55
2021-03-12 07:59:12 +00:00
b03146fbba Accepting request 832089 from security:SELinux
please stage with updated gcc to prevent build failures

OBS-URL: https://build.opensuse.org/request/show/832089
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=31
2020-10-06 15:06:28 +00:00
5acf16a347 Accepting request 832089 from security:SELinux
please stage with updated gcc to prevent build failures

OBS-URL: https://build.opensuse.org/request/show/832089
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=31
2020-10-06 15:06:28 +00:00
c9b1c8276b Accepting request 820917 from home:jsegitz:branches:security:SELinux
- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream

OBS-URL: https://build.opensuse.org/request/show/820917
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=53
2020-07-14 14:14:01 +00:00
b6e1c104df Accepting request 781807 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/781807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=30
2020-03-11 17:31:04 +00:00
2a9fd92671 Accepting request 781807 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/781807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=30
2020-03-11 17:31:04 +00:00
c427c5d357 Accepting request 781795 from home:jsegitz:branches:security:SELinux
- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition

OBS-URL: https://build.opensuse.org/request/show/781795
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=51
2020-03-05 10:13:36 +00:00
918d2fa981 Accepting request 764694 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/764694
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=29
2020-01-18 11:16:27 +00:00
48cd21a973 Accepting request 764694 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/764694
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=29
2020-01-18 11:16:27 +00:00
76cd9d8a3e Accepting request 764693 from home:jsegitz:branches:security:SELinux
- Add extern_te_assert_t.patch to mark te_assert_t as extern. 
  Prevents build failures on gcc10 (bsc#1160259)

OBS-URL: https://build.opensuse.org/request/show/764693
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=49
2020-01-15 14:40:03 +00:00
feee0f5b78 Accepting request 687199 from security:SELinux
please stage checkpolicy libselinux libsemanage libsepol mcstrans policycoreutils restorecond together

OBS-URL: https://build.opensuse.org/request/show/687199
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=28
2019-03-24 13:54:59 +00:00
0b15274eb8 Accepting request 687199 from security:SELinux
please stage checkpolicy libselinux libsemanage libsepol mcstrans policycoreutils restorecond together

OBS-URL: https://build.opensuse.org/request/show/687199
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=28
2019-03-24 13:54:59 +00:00
9ffc49b95a Accepting request 687160 from home:jsegitz:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/687160
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=47
2019-03-21 09:41:15 +00:00
74b382e976 Accepting request 655710 from security:SELinux
additional details for the changes file

- Update to version 2.8 (bsc#1111732). 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Rebase to 2.7. 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt

OBS-URL: https://build.opensuse.org/request/show/655710
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=27
2018-12-07 13:36:33 +00:00
5f79580559 Accepting request 655710 from security:SELinux
additional details for the changes file

- Update to version 2.8 (bsc#1111732). 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Rebase to 2.7. 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt

OBS-URL: https://build.opensuse.org/request/show/655710
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=27
2018-12-07 13:36:33 +00:00