Commit Graph

191 Commits

Author SHA256 Message Date
Dominique Leuenberger
2523e0dd9d Accepting request 1068396 from security:SELinux
SELinux 3.5 toolchain

OBS-URL: https://build.opensuse.org/request/show/1068396
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=72
2023-03-07 15:48:18 +00:00
Johannes Segitz
5ccbf70831 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=147 2023-02-24 09:11:29 +00:00
Johannes Segitz
2bc75a4367 - Refreshed python3.8-compat.patch
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=146
2023-02-24 08:56:26 +00:00
Johannes Segitz
5bc0b87998 Accepting request 1067536 from home:jsegitz:branches:security:SELinux_toolchain
- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)

- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067536
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=145
2023-02-24 08:43:11 +00:00
Richard Brown
7a7e3bbc03 Accepting request 988988 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/988988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=71
2022-07-18 16:32:42 +00:00
Johannes Segitz
e9ab567ff0 Accepting request 988987 from home:jsegitz:branches:security:SELinux
- Fixed initrd check in selinux-ready (bnc#1186127)

- Added restorecon_pin_file.patch. Fixes issus when running 
  fixfiles/restorecon

OBS-URL: https://build.opensuse.org/request/show/988987
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=143
2022-07-13 12:17:44 +00:00
Dominique Leuenberger
3cdf9f8d26 Accepting request 978304 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/978304
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=70
2022-06-20 13:36:49 +00:00
Johannes Segitz
0b9c3483a5 Accepting request 978290 from home:jsegitz:branches:security:SELinux
- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch

- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch

OBS-URL: https://build.opensuse.org/request/show/978290
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=141
2022-05-20 14:53:35 +00:00
Dominique Leuenberger
de1f0c2bcc Accepting request 956619 from security:SELinux
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/956619
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=69
2022-02-25 20:24:45 +00:00
Johannes Segitz
bf12ad7659 - Simplyfied check for correct boot paramaters in selinux-ready
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=140
2022-02-15 08:03:21 +00:00
Johannes Segitz
b6905172e8 - Add Requires for exact libselinux1 version for selinux-tools
(bsc#1195361)

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=139
2022-02-15 07:50:34 +00:00
Dominique Leuenberger
39a28afeb8 Accepting request 930941 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/930941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=68
2021-11-15 14:26:05 +00:00
Johannes Segitz
b9d0e7ecc5 Accepting request 930928 from home:jsegitz:branches:security:SELinux
- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing

- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing

OBS-URL: https://build.opensuse.org/request/show/930928
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=138
2021-11-11 16:01:53 +00:00
Dominique Leuenberger
3444265a93 Accepting request 907736 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/907736
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=67
2021-07-25 18:09:09 +00:00
Johannes Segitz
a70a6630a5 Accepting request 906915 from home:gmbr3:Active
- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works

OBS-URL: https://build.opensuse.org/request/show/906915
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=137
2021-07-22 12:03:41 +00:00
Dominique Leuenberger
2fef3f9e18 Accepting request 888478 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/888478
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=66
2021-04-29 20:44:22 +00:00
Johannes Segitz
3c5892f794 Accepting request 888475 from home:jsegitz:branches:security:SELinux
- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)

OBS-URL: https://build.opensuse.org/request/show/888475
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=135
2021-04-26 12:07:46 +00:00
Dominique Leuenberger
97f837bbb9 Accepting request 879862 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/879862
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=65
2021-03-24 15:09:01 +00:00
Johannes Segitz
04bc1b7bdc Accepting request 879710 from home:dimstar:Factory
- Switch to pcre2:
  + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8)
  + Pass USE_PCRE2=y to make.

As we have currently pcre2 AND pcre in the distro bootstrap, I'm trying to clean that up a little bit

Thie will hopefully allow to keep pcre2, but get rid of pcre - making the bootstrap cycle a little bit smaller
(Requires a Preinstall: libprcre2-8-0 in prjconf, which should replace the existing preinstall libpcre0 we already have)

OBS-URL: https://build.opensuse.org/request/show/879710
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=133
2021-03-18 10:08:18 +00:00
Johannes Segitz
1d19f598e4 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=132 2021-03-12 07:59:14 +00:00
Dominique Leuenberger
851ea4fad9 Accepting request 870223 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/870223
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=64
2021-02-11 11:45:41 +00:00
Johannes Segitz
3acfdcf315 Accepting request 869988 from home:mcepl:branches:security:SELinux
- Add Recommends: selinux-autorelabel, which is very important
  for healthy use of the SELinux on the system (/.autorelabel
  mechanism) (bsc#1181837).

OBS-URL: https://build.opensuse.org/request/show/869988
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=130
2021-02-08 09:39:48 +00:00
Dominique Leuenberger
8643e23761 Accepting request 849697 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/849697
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=63
2020-11-26 22:09:03 +00:00
Johannes Segitz
a84c4188f5 Accepting request 849625 from home:lnussel:usrmove
- install to /usr (boo#1029961)

OBS-URL: https://build.opensuse.org/request/show/849625
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=128
2020-11-20 15:12:12 +00:00
Dominique Leuenberger
1acf9db454 Accepting request 832090 from security:SELinux
please stage with updated gcc to prevent build failures

OBS-URL: https://build.opensuse.org/request/show/832090
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=62
2020-10-06 15:06:38 +00:00
Johannes Segitz
8a0ed0bdd6 Accepting request 820925 from home:jsegitz:branches:security:SELinux
- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch

- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated

OBS-URL: https://build.opensuse.org/request/show/820925
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=126
2020-07-14 14:13:39 +00:00
Dominique Leuenberger
f81ddd928c Accepting request 810880 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/810880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=61
2020-06-05 18:04:37 +00:00
Johannes Segitz
c400328f5b Accepting request 810878 from home:jsegitz:branches:security:SELinux
- Added skip_cycles.patch to skip directory cycles and not error
  out

OBS-URL: https://build.opensuse.org/request/show/810878
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=124
2020-06-02 15:31:13 +00:00
Dominique Leuenberger
228d1fe05c Accepting request 781808 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/781808
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=60
2020-03-11 17:31:09 +00:00
Johannes Segitz
8d14ff5615 Accepting request 781796 from home:jsegitz:branches:security:SELinux
- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"

- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"
  Dropped Use-Python-distutils-to-install-SELinux.patch, included
  upstream

OBS-URL: https://build.opensuse.org/request/show/781796
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=122
2020-03-05 10:13:39 +00:00
Dominique Leuenberger
96eca5dbe3 Accepting request 757383 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/757383
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=59
2019-12-21 11:40:30 +00:00
Johannes Segitz
bdda6228da Accepting request 757382 from home:jsegitz:branches:security:SELinux
- Added swig4_moduleimport.patch to prevent import errors due to
  SWIG 4

OBS-URL: https://build.opensuse.org/request/show/757382
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=120
2019-12-16 16:05:46 +00:00
Dominique Leuenberger
5334aff7f6 Accepting request 748056 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/748056
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=58
2019-11-17 18:20:35 +00:00
Johannes Segitz
3eb0216478 Accepting request 748053 from home:jsegitz:branches:security:SELinux
- Added Use-Python-distutils-to-install-SELinux.patch to use 
  Python's distutils instead of building and installing python 
  bindings manually

OBS-URL: https://build.opensuse.org/request/show/748053
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=118
2019-11-13 08:25:35 +00:00
Johannes Segitz
b41ac15d94 Accepting request 744322 from home:mcepl:branches:security:SELinux
Add python3.8-compat.patch which makes build possible even with
Python 3.8, which doesn’t automatically adds -lpython<ver>

OBS-URL: https://build.opensuse.org/request/show/744322
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=117
2019-11-11 07:03:37 +00:00
Dominique Leuenberger
b115b40d05 Accepting request 711058 from security:SELinux
- Disable LTO (boo#1133244).

OBS-URL: https://build.opensuse.org/request/show/711058
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=57
2019-07-08 13:05:45 +00:00
Dominique Leuenberger
9f0fa4fcaa Accepting request 709365 from security:SELinux
Resubmit rev that passed staging - only 2 test left running; LTO disablement is not that urgen to block the staging another 48 hours

OBS-URL: https://build.opensuse.org/request/show/709365
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=56
2019-06-12 11:07:28 +00:00
962c260ba0 Accepting request 705829 from home:marxin:branches:security:SELinux
- Disable LTO (boo#1133244).

OBS-URL: https://build.opensuse.org/request/show/705829
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=114
2019-06-12 09:33:33 +00:00
Johannes Segitz
4a6ecd2856 Accepting request 707195 from home:jsegitz:branches:security:SELinux
- In selinux-ready
  * Removed check for selinux-policy package as we don't ship one
    (bsc#1136845)
  * Add check that restorecond is installed and enabled

OBS-URL: https://build.opensuse.org/request/show/707195
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=113
2019-06-03 14:23:38 +00:00
Dominique Leuenberger
b4d86aab24 Accepting request 705247 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/705247
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=55
2019-05-28 07:41:57 +00:00
Johannes Segitz
4947377882 Accepting request 705234 from home:jsegitz:branches:security:SELinux
- Set License: to correct value (bsc#1135710)

- Set License: to correct value (bsc#1135710)

OBS-URL: https://build.opensuse.org/request/show/705234
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=111
2019-05-24 12:37:42 +00:00
Dominique Leuenberger
444da9e526 Accepting request 698072 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/698072
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=54
2019-05-02 17:13:14 +00:00
Johannes Segitz
32407a8d14 Accepting request 697749 from home:marxin:branches:security:SELinux
- Disable LTO (boo#1133244).

OBS-URL: https://build.opensuse.org/request/show/697749
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=109
2019-04-26 07:36:49 +00:00
Dominique Leuenberger
1c485f06e0 Accepting request 687202 from security:SELinux
please stage checkpolicy libselinux libsemanage libsepol mcstrans policycoreutils restorecond together

OBS-URL: https://build.opensuse.org/request/show/687202
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=53
2019-03-24 13:55:04 +00:00
Johannes Segitz
dd555c640a OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=107 2019-03-21 09:41:17 +00:00
Dominique Leuenberger
5f67530d45 Accepting request 662826 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/662826
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=52
2019-01-15 08:08:12 +00:00
Johannes Segitz
a921acf0e7 Accepting request 662825 from home:jsegitz:branches:security:SELinux
- Remove unneeded build requires for python3 (bsc#1120255)

OBS-URL: https://build.opensuse.org/request/show/662825
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=105
2019-01-04 14:49:04 +00:00
Johannes Segitz
310d40239e Accepting request 657437 from home:jsegitz:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/657437
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=104
2018-12-12 09:53:37 +00:00
Johannes Segitz
eeaec68a4f Accepting request 657416 from home:jsegitz:branches:security:SELinux
- Update to version 2.8 (bsc#1111732). 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt

OBS-URL: https://build.opensuse.org/request/show/657416
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=103
2018-12-12 09:16:33 +00:00
Johannes Segitz
89b8affa1a Accepting request 657404 from security:SELinux
Revert to revision pre merged -bindigs

OBS-URL: https://build.opensuse.org/request/show/657404
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=102
2018-12-12 08:31:21 +00:00