pool/libselinux
SHA256
2
0
Fork 3
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
105 Commits 2 Branches 0 Tags 1,020 KiB
8bc935fc0e
Commit Graph

105 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Johannes Segitz
8bc935fc0e Accepting request 1090487 from home:jsegitz:branches:home:ojkastl_buildservice:branches:security:SELinux 
- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)

OBS-URL: https://build.opensuse.org/request/show/1090487
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=154
 2023-06-02 12:03:50 +00:00
Johannes Segitz
781fce764f Accepting request 1085106 from home:dgarcia:branches:security:SELinux 
- Add python-wheel build dependency to build correctly with latest
  python-pip version.
Look at staging:H to see the actual problem
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:H/libselinux-bindings/standard/x86_64

OBS-URL: https://build.opensuse.org/request/show/1085106
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=152
 2023-05-05 13:50:20 +00:00
Johannes Segitz
71d3be4288 Accepting request 1084729 from home:fcrozat:branches:security:SELinux 
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

OBS-URL: https://build.opensuse.org/request/show/1084729
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=151
 2023-05-05 07:29:50 +00:00
Johannes Segitz
3db7e99550 Accepting request 1074195 from home:jsegitz:branches:security:SELinux 
- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO

OBS-URL: https://build.opensuse.org/request/show/1074195
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=150
 2023-03-24 14:08:42 +00:00
Johannes Segitz
90defc5b22 Accepting request 1073997 from home:marxin:branches:security:SELinux 
- Enable LTO as it works fine now.

- Enable LTO as it works fine now.

OBS-URL: https://build.opensuse.org/request/show/1073997
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=149
 2023-03-24 13:25:03 +00:00
Johannes Segitz
5ccbf70831 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=147 2023-02-24 09:11:29 +00:00
Johannes Segitz
2bc75a4367 - Refreshed python3.8-compat.patch 
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=146
 2023-02-24 08:56:26 +00:00
Johannes Segitz
5bc0b87998 Accepting request 1067536 from home:jsegitz:branches:security:SELinux_toolchain 
- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)

- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067536
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=145
 2023-02-24 08:43:11 +00:00
Johannes Segitz
e9ab567ff0 Accepting request 988987 from home:jsegitz:branches:security:SELinux 
- Fixed initrd check in selinux-ready (bnc#1186127)

- Added restorecon_pin_file.patch. Fixes issus when running 
  fixfiles/restorecon

OBS-URL: https://build.opensuse.org/request/show/988987
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=143
 2022-07-13 12:17:44 +00:00
Johannes Segitz
0b9c3483a5 Accepting request 978290 from home:jsegitz:branches:security:SELinux 
- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch

- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch

OBS-URL: https://build.opensuse.org/request/show/978290
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=141
 2022-05-20 14:53:35 +00:00
Johannes Segitz
bf12ad7659 - Simplyfied check for correct boot paramaters in selinux-ready 
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=140
 2022-02-15 08:03:21 +00:00
Johannes Segitz
b6905172e8 - Add Requires for exact libselinux1 version for selinux-tools 
(bsc#1195361)

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=139
 2022-02-15 07:50:34 +00:00
Johannes Segitz
b9d0e7ecc5 Accepting request 930928 from home:jsegitz:branches:security:SELinux 
- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing

- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing

OBS-URL: https://build.opensuse.org/request/show/930928
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=138
 2021-11-11 16:01:53 +00:00
Johannes Segitz
a70a6630a5 Accepting request 906915 from home:gmbr3:Active 
- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works

OBS-URL: https://build.opensuse.org/request/show/906915
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=137
 2021-07-22 12:03:41 +00:00
Johannes Segitz
3c5892f794 Accepting request 888475 from home:jsegitz:branches:security:SELinux 
- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)

OBS-URL: https://build.opensuse.org/request/show/888475
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=135
 2021-04-26 12:07:46 +00:00
Johannes Segitz
04bc1b7bdc Accepting request 879710 from home:dimstar:Factory 
- Switch to pcre2:
  + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8)
  + Pass USE_PCRE2=y to make.

As we have currently pcre2 AND pcre in the distro bootstrap, I'm trying to clean that up a little bit

Thie will hopefully allow to keep pcre2, but get rid of pcre - making the bootstrap cycle a little bit smaller
(Requires a Preinstall: libprcre2-8-0 in prjconf, which should replace the existing preinstall libpcre0 we already have)

OBS-URL: https://build.opensuse.org/request/show/879710
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=133
 2021-03-18 10:08:18 +00:00
Johannes Segitz
1d19f598e4 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=132 2021-03-12 07:59:14 +00:00
Johannes Segitz
3acfdcf315 Accepting request 869988 from home:mcepl:branches:security:SELinux 
- Add Recommends: selinux-autorelabel, which is very important
  for healthy use of the SELinux on the system (/.autorelabel
  mechanism) (bsc#1181837).

OBS-URL: https://build.opensuse.org/request/show/869988
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=130
 2021-02-08 09:39:48 +00:00
Johannes Segitz
a84c4188f5 Accepting request 849625 from home:lnussel:usrmove 
- install to /usr (boo#1029961)

OBS-URL: https://build.opensuse.org/request/show/849625
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=128
 2020-11-20 15:12:12 +00:00
Johannes Segitz
8a0ed0bdd6 Accepting request 820925 from home:jsegitz:branches:security:SELinux 
- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch

- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated

OBS-URL: https://build.opensuse.org/request/show/820925
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=126
 2020-07-14 14:13:39 +00:00
Johannes Segitz
c400328f5b Accepting request 810878 from home:jsegitz:branches:security:SELinux 
- Added skip_cycles.patch to skip directory cycles and not error
  out

OBS-URL: https://build.opensuse.org/request/show/810878
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=124
 2020-06-02 15:31:13 +00:00
Johannes Segitz
8d14ff5615 Accepting request 781796 from home:jsegitz:branches:security:SELinux 
- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"

- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"
  Dropped Use-Python-distutils-to-install-SELinux.patch, included
  upstream

OBS-URL: https://build.opensuse.org/request/show/781796
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=122
 2020-03-05 10:13:39 +00:00
Johannes Segitz
bdda6228da Accepting request 757382 from home:jsegitz:branches:security:SELinux 
- Added swig4_moduleimport.patch to prevent import errors due to
  SWIG 4

OBS-URL: https://build.opensuse.org/request/show/757382
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=120
 2019-12-16 16:05:46 +00:00
Johannes Segitz
3eb0216478 Accepting request 748053 from home:jsegitz:branches:security:SELinux 
- Added Use-Python-distutils-to-install-SELinux.patch to use 
  Python's distutils instead of building and installing python 
  bindings manually

OBS-URL: https://build.opensuse.org/request/show/748053
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=118
 2019-11-13 08:25:35 +00:00
Johannes Segitz
b41ac15d94 Accepting request 744322 from home:mcepl:branches:security:SELinux 
Add python3.8-compat.patch which makes build possible even with
Python 3.8, which doesn’t automatically adds -lpython<ver>

OBS-URL: https://build.opensuse.org/request/show/744322
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=117
 2019-11-11 07:03:37 +00:00
Marcus Meissner
962c260ba0 Accepting request 705829 from home:marxin:branches:security:SELinux 
- Disable LTO (boo#1133244).

OBS-URL: https://build.opensuse.org/request/show/705829
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=114
 2019-06-12 09:33:33 +00:00
Johannes Segitz
4a6ecd2856 Accepting request 707195 from home:jsegitz:branches:security:SELinux 
- In selinux-ready
  * Removed check for selinux-policy package as we don't ship one
    (bsc#1136845)
  * Add check that restorecond is installed and enabled

OBS-URL: https://build.opensuse.org/request/show/707195
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=113
 2019-06-03 14:23:38 +00:00
Johannes Segitz
4947377882 Accepting request 705234 from home:jsegitz:branches:security:SELinux 
- Set License: to correct value (bsc#1135710)

- Set License: to correct value (bsc#1135710)

OBS-URL: https://build.opensuse.org/request/show/705234
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=111
 2019-05-24 12:37:42 +00:00
Johannes Segitz
32407a8d14 Accepting request 697749 from home:marxin:branches:security:SELinux 
- Disable LTO (boo#1133244).

OBS-URL: https://build.opensuse.org/request/show/697749
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=109
 2019-04-26 07:36:49 +00:00
Johannes Segitz
dd555c640a OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=107 2019-03-21 09:41:17 +00:00
Johannes Segitz
a921acf0e7 Accepting request 662825 from home:jsegitz:branches:security:SELinux 
- Remove unneeded build requires for python3 (bsc#1120255)

OBS-URL: https://build.opensuse.org/request/show/662825
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=105
 2019-01-04 14:49:04 +00:00
Johannes Segitz
310d40239e Accepting request 657437 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/657437
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=104
 2018-12-12 09:53:37 +00:00
Johannes Segitz
eeaec68a4f Accepting request 657416 from home:jsegitz:branches:security:SELinux 
- Update to version 2.8 (bsc#1111732). 
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt

OBS-URL: https://build.opensuse.org/request/show/657416
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=103
 2018-12-12 09:16:33 +00:00
Johannes Segitz
89b8affa1a Accepting request 657404 from security:SELinux 
Revert to revision pre merged -bindigs

OBS-URL: https://build.opensuse.org/request/show/657404
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=102
 2018-12-12 08:31:21 +00:00
OBS User buildservice-autocommit
9af355fb4d Updating link to change in openSUSE:Factory/libselinux revision 51.0 
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=3cf65fff759ee1875ede1cd2103c8ed6
 2018-12-10 21:42:31 +00:00
Johannes Segitz
8b14e33853 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=100 2018-12-06 14:43:31 +00:00
Johannes Segitz
4d22c060dd Accepting request 652674 from home:jengelh:branches:security:SELinux 
- Replace old $RPM_* shell vars.

OBS-URL: https://build.opensuse.org/request/show/652674
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=99
 2018-12-01 07:36:52 +00:00
Johannes Segitz
f0b2b5c4ba Accepting request 651402 from home:jsegitz:branches:security:SELinux 
OBS-URL: https://build.opensuse.org/request/show/651402
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=98
 2018-11-23 15:27:12 +00:00
Vítězslav Čížek
a92929b64d Accepting request 642651 from home:jsegitz:branches:security:SELinux 
- Update to version 2.8 (bsc#1111732)

- Update to version 2.8 (bsc#1111732)

OBS-URL: https://build.opensuse.org/request/show/642651
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=97
 2018-10-23 12:13:57 +00:00
Johannes Segitz
f80cff1a4a Accepting request 609004 from home:mcepl:SELinux 
Rebase to 2.7

OBS-URL: https://build.opensuse.org/request/show/609004
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=96
 2018-05-23 07:59:14 +00:00
Johannes Segitz
a9b0f4a216 Accepting request 590073 from home:jsegitz:branches:libselinux 
- Updated spec file to use python3. Added python3.patch to fix
  build

OBS-URL: https://build.opensuse.org/request/show/590073
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=94
 2018-03-22 10:58:22 +00:00
Johannes Segitz
b0259f782e OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=92 2017-11-27 09:18:52 +00:00
Marcus Meissner
9e1669780b Accepting request 513170 from home:Andreas_Schwab:glibc:rebuild 
- readv-proto.patch: include <sys/uio.h> for readv prototype

OBS-URL: https://build.opensuse.org/request/show/513170
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=90
 2017-08-03 08:16:09 +00:00
Johannes Segitz
cef88e84da Accepting request 415258 from home:jengelh:branches:security:SELinux 
resubmit because merge conflict ensued

- Update RPM groups, trim description and combine filelist entries.
Note that the *SRPM* group field is updated here,
which must not be System/Libraries. Or at least should not be,
because there is a much better group for selinux
(be it System/Base, or Security/lol or D/L/C)

OBS-URL: https://build.opensuse.org/request/show/415258
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=88
 2016-07-26 14:56:29 +00:00
Johannes Segitz
1f94f8811a Accepting request 414915 from home:elvigia:branches:security:SELinux 
- -devel static subpackage requires libpcre-devel and libsepol-devel

- Avoid mounting /proc outside of selinux_init_load_policy().
  (Stephen Smalley) reverts upstream 5a8d8c4, 9df4988, fixes
  among other things systemd seccomp sandboxing otherwise all
  filters must allow mount(2)
  (libselinux-proc-mount-only-if-needed.patch)

OBS-URL: https://build.opensuse.org/request/show/414915
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=87
 2016-07-26 12:15:13 +00:00
Johannes Segitz
2aadb1f9f1 Accepting request 408436 from home:jsegitz:branches:security:SELinux 
- Adjusted source link

- Adjusted source link

OBS-URL: https://build.opensuse.org/request/show/408436
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=85
 2016-07-14 08:42:04 +00:00
Johannes Segitz
9503bfe5fe Accepting request 408218 from security:SELinux 
1

OBS-URL: https://build.opensuse.org/request/show/408218
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=84
 2016-07-13 07:22:28 +00:00
Johannes Segitz
9a44e1df85 Accepting request 319563 from home:jsegitz:branches:security:SELinux 
- Update to version 2.3 
* Get rid of security_context_t and fix const declarations.
* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.

- fixed selinux-ready to work with initrd files created by dracut (bsc#940006)

OBS-URL: https://build.opensuse.org/request/show/319563
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=83
 2015-07-30 12:06:49 +00:00
Vítězslav Čížek
2e246b5644 Accepting request 308905 from home:dimstar:Factory 
Fix building of libselinux-bindings: make proper use of ruby 2.2

OBS-URL: https://build.opensuse.org/request/show/308905
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=81
 2015-05-28 09:05:55 +00:00
Johannes Segitz
0b8e4bc585 Accepting request 247967 from home:jsegitz:branches:security:SELinux 
- updated selinux-ready script to handle initrd files compressed with xz

OBS-URL: https://build.opensuse.org/request/show/247967
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=79
 2014-09-08 09:42:21 +00:00