pool/checkpolicy
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
57 Commits 1 Branch 0 Tags 152 KiB
25dc4f2451
Commit Graph

57 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
25dc4f2451 Accepting request 1185744 from security:SELinux 
- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once

OBS-URL: https://build.opensuse.org/request/show/1185744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=37
 2024-07-12 15:04:20 +00:00
Hu
732ba6f16b Accepting request 1184291 from home:cahu:security:SELinux:userspace37 
- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once

OBS-URL: https://build.opensuse.org/request/show/1184291
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=65
 2024-07-02 09:43:44 +00:00
Ana Guerrero
a15c422bed Accepting request 1137082 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/1137082
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=36
 2024-01-08 22:43:43 +00:00
Johannes Segitz
9f184f92ec Accepting request 1134066 from home:cahu:branches:security:SELinux 
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules  
  * Translations updated from  
    https://translate.fedoraproject.org/projects/selinux/    
  * Bug fixes  
- Remove keys from keyring since they expired:  
  - E853C1848B0185CF42864DF363A8AD4B982C4373  
    Petr Lautrbach <plautrba@redhat.com>  
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF  
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>

OBS-URL: https://build.opensuse.org/request/show/1134066
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=63
 2024-01-05 15:28:20 +00:00
Dominique Leuenberger
eafc16386c Accepting request 1068393 from security:SELinux 
SELinux 3.5 toolchain

OBS-URL: https://build.opensuse.org/request/show/1068393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=35
 2023-03-07 15:48:17 +00:00
Johannes Segitz
e65c87406d Accepting request 1067534 from home:jsegitz:branches:security:SELinux_toolchain 
- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067534
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=61
 2023-02-24 08:43:21 +00:00
Dominique Leuenberger
8a1fb1e6dc Accepting request 978305 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/978305
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=34
 2022-06-20 13:36:50 +00:00
Johannes Segitz
71208d0204 Accepting request 978288 from home:jsegitz:branches:security:SELinux 
- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission

OBS-URL: https://build.opensuse.org/request/show/978288
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=59
 2022-05-20 14:53:42 +00:00
Dominique Leuenberger
66fdcaf545 Accepting request 930942 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/930942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=33
 2021-11-15 14:26:06 +00:00
Johannes Segitz
0c57adb8e6 Accepting request 930926 from home:jsegitz:branches:security:SELinux 
- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed

OBS-URL: https://build.opensuse.org/request/show/930926
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=58
 2021-11-11 16:02:02 +00:00
Dominique Leuenberger
53d239fed7 Accepting request 879083 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/879083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=32
 2021-03-24 15:08:55 +00:00
Johannes Segitz
47957e5423 Accepting request 878722 from home:jengelh:branches:security:SELinux 
satisfy changelog requirements

OBS-URL: https://build.opensuse.org/request/show/878722
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=56
 2021-03-15 07:36:04 +00:00
Johannes Segitz
e661ece9d4 Accepting request 878478 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/878478
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=55
 2021-03-12 07:59:12 +00:00
Dominique Leuenberger
fd7b7f7931 Accepting request 832089 from security:SELinux 
please stage with updated gcc to prevent build failures

OBS-URL: https://build.opensuse.org/request/show/832089
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=31
 2020-10-06 15:06:28 +00:00
Johannes Segitz
ed5352add5 Accepting request 820917 from home:jsegitz:branches:security:SELinux 
- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream

OBS-URL: https://build.opensuse.org/request/show/820917
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=53
 2020-07-14 14:14:01 +00:00
Dominique Leuenberger
78ba0b1eb9 Accepting request 781807 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/781807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=30
 2020-03-11 17:31:04 +00:00
Johannes Segitz
a61dfed2ef Accepting request 781795 from home:jsegitz:branches:security:SELinux 
- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition

OBS-URL: https://build.opensuse.org/request/show/781795
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=51
 2020-03-05 10:13:36 +00:00
Dominique Leuenberger
047beb5fe8 Accepting request 764694 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/764694
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=29
 2020-01-18 11:16:27 +00:00
Johannes Segitz
1f573b48d3 Accepting request 764693 from home:jsegitz:branches:security:SELinux 
- Add extern_te_assert_t.patch to mark te_assert_t as extern. 
  Prevents build failures on gcc10 (bsc#1160259)

OBS-URL: https://build.opensuse.org/request/show/764693
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=49
 2020-01-15 14:40:03 +00:00
Dominique Leuenberger
466f1c4ce1 Accepting request 687199 from security:SELinux 
please stage checkpolicy libselinux libsemanage libsepol mcstrans policycoreutils restorecond together

OBS-URL: https://build.opensuse.org/request/show/687199
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=28
 2019-03-24 13:54:59 +00:00
Johannes Segitz
6f28f50290 Accepting request 687160 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/687160
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=47
 2019-03-21 09:41:15 +00:00
Dominique Leuenberger
99748c428f Accepting request 655710 from security:SELinux 
additional details for the changes file

- Update to version 2.8 (bsc#1111732). 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Rebase to 2.7. 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt

OBS-URL: https://build.opensuse.org/request/show/655710
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=27
 2018-12-07 13:36:33 +00:00
Johannes Segitz
8f1107fa0e Accepting request 655707 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/655707
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=45
 2018-12-06 14:43:30 +00:00
Dominique Leuenberger
ddbaae9ad5 Accepting request 651126 from security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/651126
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=26
 2018-11-27 09:40:46 +00:00
Vítězslav Čížek
28cb7e1d94 Accepting request 648239 from home:jengelh:branches:security:SELinux 
- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
  (RPM_LD_FLAGS is always empty).

OBS-URL: https://build.opensuse.org/request/show/648239
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=43
 2018-11-22 14:14:20 +00:00
Johannes Segitz
4230f02b2f Accepting request 647046 from home:jsegitz:branches:security:SELinux 
- Source URL was invalid (bsc#1115052)

OBS-URL: https://build.opensuse.org/request/show/647046
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=42
 2018-11-07 16:27:20 +00:00
Vítězslav Čížek
1c1b89d210 Accepting request 642650 from home:jsegitz:branches:security:SELinux 
- Update to version 2.8 (bsc#1111732)
- Dropped checkpolicy-build.patch, not necessary anymore
- Removed BuildRequires for byacc. It builds without and this blocks
  building on SLE 15

OBS-URL: https://build.opensuse.org/request/show/642650
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=41
 2018-10-23 12:14:10 +00:00
Johannes Segitz
b26d17089b - checkpolicy-build.patch was added in the former change to fix build 
failures

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=40
 2018-06-11 07:48:40 +00:00
Johannes Segitz
04327bf5b0 Accepting request 609005 from home:mcepl:SELinux 
Rebase to 2.7

OBS-URL: https://build.opensuse.org/request/show/609005
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=39
 2018-05-23 08:27:50 +00:00
Dominique Leuenberger
8df22faff1 Accepting request 545896 from security:SELinux 
please combine checkpolicy libselinux libsemanage libsepol policycoreutils

OBS-URL: https://build.opensuse.org/request/show/545896
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=25
 2017-12-11 17:56:09 +00:00
Johannes Segitz
58446a0a21 Accepting request 545876 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/545876
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=37
 2017-11-27 09:18:52 +00:00
Dominique Leuenberger
ffa30c7fa5 Accepting request 508010 from security:SELinux 
1

OBS-URL: https://build.opensuse.org/request/show/508010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=24
 2017-07-05 22:02:03 +00:00
Johannes Segitz
0909e9fa63 Accepting request 507174 from home:pluskalm:branches:security:SELinux 
- Use plain flex

OBS-URL: https://build.opensuse.org/request/show/507174
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=35
 2017-07-04 08:43:51 +00:00
Dominique Leuenberger
5fccbeb049 Accepting request 415255 from security:SELinux 
1

OBS-URL: https://build.opensuse.org/request/show/415255
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=23
 2016-08-03 09:43:15 +00:00
Johannes Segitz
525e6e2687 Accepting request 412566 from home:jengelh:branches:security:SELinux 
- Trim/update description

OBS-URL: https://build.opensuse.org/request/show/412566
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=33
 2016-07-26 12:14:20 +00:00
Dominique Leuenberger
bd127596b0 Accepting request 408538 from security:SELinux 
1

OBS-URL: https://build.opensuse.org/request/show/408538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=22
 2016-07-20 07:17:32 +00:00
Johannes Segitz
fb37f058e9 Accepting request 408532 from home:jsegitz:branches:security:SELinux 
- Without bug number no submit to SLE 12 SP2 is possible, so to make
  sle-changelog-checker happy: bsc#988977

OBS-URL: https://build.opensuse.org/request/show/408532
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=31
 2016-07-14 14:27:16 +00:00
Johannes Segitz
f9d676ec47 Accepting request 407325 from home:MargueriteSu:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/407325
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=30
 2016-07-13 07:19:09 +00:00
Stephan Kulow
52436250e2 Accepting request 234705 from security:SELinux 
update to version 2.3

OBS-URL: https://build.opensuse.org/request/show/234705
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=20
 2014-05-21 14:18:57 +00:00
Johannes Segitz
26bd167648 fixed source URL 
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=28
 2014-05-19 10:08:23 +00:00
Johannes Segitz
10e0d6c145 Accepting request 234488 from home:elvigia:branches:security:SELinux 
- version 2.3
* Report source file and line information for neverallow failures.
* Prevent incompatible option combinations for checkmodule.
* Drop -lselinux from LDLIBS for test programs; not used.
* Add debug feature to display constraints/validatetrans from Richard Haines.

OBS-URL: https://build.opensuse.org/request/show/234488
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=27
 2014-05-19 07:32:32 +00:00
Stephan Kulow
12cf23b246 Accepting request 206079 from security:SELinux 
- Update to version 2.2
  * Fix hyphen usage in man pages
  * handle-unknown / -U required argument fix
  * Support overriding Makefile PATH and LIBDIR
  * Support space and : in filenames
- Remove checkpolicy-rhat.patch; fixed on upstream (forwarded request 205367 from posophe)

OBS-URL: https://build.opensuse.org/request/show/206079
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=19
 2013-11-07 13:42:12 +00:00
Marcus Meissner
194a87a8e3 Accepting request 205367 from home:posophe:branches:security:SELinux 
- Update to version 2.2
  * Fix hyphen usage in man pages
  * handle-unknown / -U required argument fix
  * Support overriding Makefile PATH and LIBDIR
  * Support space and : in filenames
- Remove checkpolicy-rhat.patch; fixed on upstream

OBS-URL: https://build.opensuse.org/request/show/205367
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=25
 2013-11-07 10:18:30 +00:00
Stephan Kulow
efd14e09f3 Accepting request 181588 from security:SELinux 
- change the source url to the official 2.1.12 release tarball (forwarded request 181178 from vitezslav_cizek)

OBS-URL: https://build.opensuse.org/request/show/181588
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=17
 2013-07-02 04:44:40 +00:00
Marcus Meissner
11248c3c14 Accepting request 181178 from home:vitezslav_cizek:branches:security:SELinux 
- change the source url to the official 2.1.12 release tarball

OBS-URL: https://build.opensuse.org/request/show/181178
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=23
 2013-07-01 09:25:32 +00:00
Marcus Meissner
82f2d29446 Accepting request 162365 from home:vitezslav_cizek:branches:security:SELinux 
- update to 2.1.12
	* Fix errors found by coverity
	* implement default type policy syntax
	* Free allocated memory when clean up / exit.
- changes in checkpolicy-rhat.patch:
        * original hunk was merged upstream
	* space should be allowed for file trans names

OBS-URL: https://build.opensuse.org/request/show/162365
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=22
 2013-04-03 12:28:02 +00:00
Stephan Kulow
4c3ce7fb3a Accepting request 157812 from security:SELinux 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/157812
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=16
 2013-03-08 08:08:15 +00:00
Vítězslav Čížek
472fca2484 Accepting request 150420 from home:vitezslav_cizek:branches:security:SELinux 
- update to 2.1.11
	* fd leak reading policy
	* check return code on ebitmap_set_bit
	* sepolgen: We need to support files that have a + in them
	* implement new default labeling behaviors for usr, role, range

OBS-URL: https://build.opensuse.org/request/show/150420
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=20
 2013-01-31 15:23:28 +00:00
Ismail Dönmez
c426c4ae1f Accepting request 130335 from security:SELinux 
- updated to 2.1.8
  - various fixes

OBS-URL: https://build.opensuse.org/request/show/130335
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/checkpolicy?expand=0&rev=14
 2012-08-10 17:00:48 +00:00
Marcus Meissner
b1b606ade1 - updated to 2.1.8 
- various fixes

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=18
 2012-07-25 11:25:05 +00:00