Accepting request 407317 from home:MargueriteSu:branches:security:SELinux

OBS-URL: https://build.opensuse.org/request/show/407317
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=54

libsemanage-2.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:03e09e35e611c286e446bef92b6023ef2623815996f5a53394bb02e49a312e4b
-size 138231

libsemanage-2.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:46e2f36254369b6e91d1eea0460c262b139361b055a3a67d3ceea2d8ef72e006
+size 152884

libsemanage.changes

@@ -1,3 +1,54 @@
+-------------------------------------------------------------------
+Fri Jul  8 15:24:49 UTC 2016 - i@marguerite.su
+
+- update version 2.5
+  * Do not overwrite CFLAGS in test Makefile, from Nicolas Iooss.
+  * Fix uninitialized variable in direct_commit and direct_api
+  * semanage_migrate_store: Load libsepol.so.1 instead of libsepol.so
+  * Store homedir_template and users_extra in policy store
+  * Fix null pointer dereference in semanage_module_key_destroy
+  * Add semanage_module_extract() to extract a module as CIL or HLL
+  * semanage_migrate_store: add -r <root> option for migrating inside chroots
+  * Add file_contexts and seusers to the store
+  * Add policy binary and file_contexts.local to the store
+  * Allow to install compressed modules without a compression extension
+  * Do not copy contexts in semanage_migrate_store
+  * Fix logic in bunzip for uncompressed pp files
+  * Fix fname[] initialization in test_utilities.c
+  * Add remove-hll semanage.conf option to remove HLL files after
+	compilation to CIL
+  * Fix memory leaks when parsing semanage.conf
+  * Change bunzip to use heap instead of stack to prevent segfault on
+	systems with small stack size
+- changes in 2.4
+  * Fix Makefile to allow LIBDIR and SHLIBDIR to be set to different
+	directories
+  * Fix bugs found by hardened gcc flags
+  * Add missing manpage links to security_load_policy
+  * Fix failing libsemanage pywrap tests
+  * Fix deprecation warning for bison
+  * Skip policy module relink when only setting booleans
+  * Only try to compile file contexts if they exist
+  * Fix memory leak when setting a custom store path
+  * Add semodule option to set store root path in semanage.conf and the
+	semodule command
+  * Add semanage.conf option to set an alternative root path for policy
+	store
+  * Add support for High Level Language (HLL) to CIL compilers. The HLL
+	compiler path is configurable, but should be placed in 
+	/usr/libexec/selinux/hll by default
+  * Create a policy migration script for migrating the policy store from
+	/etc/selinux to /var/lib/selinux
+  * Add python3 support to the migration script
+  * Use libcil to compile modules
+  * Use symbolic versioning to maintain ABI compatibility for old install
+	functions
+  * Add a target-platform option to semanage.conf to control how policies
+	are built
+  * Add API to handle modules and source policies, moving module store to
+	/var/lib/selinux
+  * Only try to compile file contexts if they exist
+
 -------------------------------------------------------------------
 Sun May 18 00:10:55 UTC 2014 - crrodriguez@opensuse.org
 

libsemanage.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libsemanage
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,6 +16,16 @@
 #
 
 
+Name:           libsemanage
+Version:        2.5
+Release:        0
+Summary:        SELinux binary policy manipulation library
+License:        LGPL-2.1+
+Group:          System/Libraries
+Url:            https://github.com/SELinuxProject/selinux/wiki/Releases
+Source:         https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/%{name}-%{version}.tar.gz
+Source1:        baselibs.conf
+Source2:        semanage.conf
 BuildRequires:  audit-devel
 BuildRequires:  bison
 BuildRequires:  fdupes
@@ -24,17 +34,6 @@ BuildRequires:  libbz2-devel
 BuildRequires:  libselinux-devel
 BuildRequires:  libsepol-devel
 BuildRequires:  libustr-devel
-
-Name:           libsemanage
-Version:        2.3
-Release:        0
-Summary:        SELinux binary policy manipulation library
-License:        LGPL-2.1+
-Group:          System/Libraries
-Url:            http://userspace.selinuxproject.org/
-Source:         http://userspace.selinuxproject.org/releases/20140506/%{name}-%{version}.tar.gz
-Source1:        baselibs.conf
-Source2:        semanage.conf
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -77,6 +76,7 @@ boolean settings.
 %package devel
 Summary:        Header files and libraries used to build policy manipulation tools
 Group:          Development/Libraries
+# FIXME: use correct group, see "https://en.opensuse.org/openSUSE:Package_group_guidelines"
 Requires:       libsemanage1 = %{version}
 Requires:       libustr-devel
 
@@ -97,34 +97,35 @@ needed for developing applications that manipulate binary policies.
 %setup -q
 
 %build
-make clean
+make %{?_smp_mflags} clean
-make -j1 CFLAGS="%{optflags}" CC="%{__cc}"
+make -j1 CFLAGS="%{optflags}" CC="gcc"
-make -j1 CFLAGS="%{optflags}" LIBDIR="%{_libdir}" SHLIBDIR="%{_lib}" CC="%{__cc}" all
+make -j1 CFLAGS="%{optflags}" LIBDIR="%{_libdir}" LIBEXECDIR="%{_libexecdir}" SHLIBDIR="%{_lib}" CC="gcc" all
 
 %install
 mkdir -p %{buildroot}/%{_lib}
 mkdir -p %{buildroot}%{_libdir}
 mkdir -p %{buildroot}%{_includedir}
-make DESTDIR=%{buildroot} LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}/%{_lib}" install
+make DESTDIR=%{buildroot} LIBDIR="%{buildroot}%{_libdir}" LIBEXECDIR="%{buildroot}%{_libexecdir}" SHLIBDIR="%{buildroot}/%{_lib}" install
-ln -sf  /%{_lib}/libsemanage.so.1 %{buildroot}/%{_libdir}/libsemanage.so
+ln -sf  %{_libdir}/libsemanage.so.1 %{buildroot}/%{_libdir}/libsemanage.so
 cp %{SOURCE2} %{buildroot}%{_sysconfdir}/selinux/semanage.conf
 # Remove duplicate files
 %fdupes -s %{buildroot}%{_mandir}
 
 %post -n libsemanage1 -p /sbin/ldconfig
-
 %postun -n libsemanage1 -p /sbin/ldconfig
 
 %files -n libsemanage1
 %defattr(-,root,root)
 %dir %{_sysconfdir}/selinux
 %config(noreplace) %{_sysconfdir}/selinux/semanage.conf
-/%{_lib}/libsemanage.so.*
+%{_libdir}/libsemanage.so.*
 
 %files devel
 %defattr(-,root,root)
 %{_libdir}/libsemanage.so
 %{_libdir}/pkgconfig/libsemanage.pc
+%dir %{_libexecdir}/selinux
+%{_libexecdir}/selinux/semanage_migrate_store
 %dir %{_includedir}/semanage
 %{_includedir}/semanage/*.h
 %{_mandir}/man3/*

python-semanage.changes

@@ -1,3 +1,56 @@
+-------------------------------------------------------------------
+Fri Jul  8 15:35:05 UTC 2016 - i@marguerite.su
+
+- update version 2.5
+  * Do not overwrite CFLAGS in test Makefile, from Nicolas Iooss.
+  * Fix uninitialized variable in direct_commit and direct_api
+  * semanage_migrate_store: Load libsepol.so.1 instead of libsepol.so
+  * Store homedir_template and users_extra in policy store
+  * Fix null pointer dereference in semanage_module_key_destroy
+  * Add semanage_module_extract() to extract a module as CIL or HLL
+  * semanage_migrate_store: add -r <root> option for migrating inside chroots
+  * Add file_contexts and seusers to the store
+  * Add policy binary and file_contexts.local to the store
+  * Allow to install compressed modules without a compression extension
+  * Do not copy contexts in semanage_migrate_store
+  * Fix logic in bunzip for uncompressed pp files
+  * Fix fname[] initialization in test_utilities.c
+  * Add remove-hll semanage.conf option to remove HLL files after
+	compilation to CIL
+  * Fix memory leaks when parsing semanage.conf
+  * Change bunzip to use heap instead of stack to prevent segfault on
+	systems with small stack size
+- changes in 2.4
+  * Fix Makefile to allow LIBDIR and SHLIBDIR to be set to different
+	directories
+  * Fix bugs found by hardened gcc flags
+  * Add missing manpage links to security_load_policy
+  * Fix failing libsemanage pywrap tests
+  * Fix deprecation warning for bison
+  * Skip policy module relink when only setting booleans
+  * Only try to compile file contexts if they exist
+  * Fix memory leak when setting a custom store path
+  * Add semodule option to set store root path in semanage.conf and the
+	semodule command
+  * Add semanage.conf option to set an alternative root path for policy
+	store
+  * Add support for High Level Language (HLL) to CIL compilers. The HLL
+	compiler path is configurable, but should be placed in 
+	/usr/libexec/selinux/hll by default
+  * Create a policy migration script for migrating the policy store from
+	/etc/selinux to /var/lib/selinux
+  * Add python3 support to the migration script
+  * Use libcil to compile modules
+  * Use symbolic versioning to maintain ABI compatibility for old install
+	functions
+  * Add a target-platform option to semanage.conf to control how policies
+	are built
+  * Add API to handle modules and source policies, moving module store to
+	/var/lib/selinux
+  * Only try to compile file contexts if they exist
+- changes in 2.3
+  * Fix memory leak in semanage_genhomedircon
+
 -------------------------------------------------------------------
 Thu Oct 31 13:55:06 UTC 2013 - p.drouand@gmail.com
 

python-semanage.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-semanage
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,6 +16,15 @@
 #
 
 
+Name:           python-semanage
+Version:        2.5
+Release:        0
+Summary:        Python bindings for libsemanage
+License:        LGPL-2.1
+Group:          Development/Languages/Python
+Url:            https://github.com/SELinuxProject/selinux
+Source:         https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/libsemanage-%{version}.tar.gz
+Source1:        baselibs.conf
 BuildRequires:  audit-devel
 BuildRequires:  bison
 BuildRequires:  flex
@@ -25,18 +34,8 @@ BuildRequires:  libsepol-devel
 BuildRequires:  libustr-devel
 BuildRequires:  python-devel
 BuildRequires:  swig
-
-Name:           python-semanage
-Version:        2.3
-Release:        0
-Summary:        Python bindings for libsemanage
-License:        LGPL-2.1
-Group:          Development/Languages/Python
-Url:            http://www.nsa.gov/selinux/
-Source:         http://userspace.selinuxproject.org/releases/20140506/libsemanage-%{version}.tar.gz
-Source1:        baselibs.conf
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Requires:       libsemanage1 = %{version}
+BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
 This package contains the python bindings for developing
@@ -46,19 +45,23 @@ SELinux management applications.
 %setup -q -n libsemanage-%{version}
 
 %build
-make clean
+make %{?_smp_mflags} clean
 make -j1 CFLAGS="%{optflags}" swigify
-make -j1 CFLAGS="%{optflags}" LIBDIR="%{_libdir}" SHLIBDIR="%{_lib}" all pywrap
+make -j1 CFLAGS="%{optflags}" LIBDIR="%{_libdir}" LIBEXECDIR="%{_libexecdir}" SHLIBDIR="%{_lib}" all pywrap
 
 %install
 mkdir -p %{buildroot}/%{_lib}
 mkdir -p %{buildroot}%{_libdir}
 mkdir -p %{buildroot}%{_includedir}
-make DESTDIR=%{buildroot} LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}/%{_lib}" install install-pywrap
+make DESTDIR=%{buildroot} LIBDIR="%{buildroot}%{_libdir}" LIBEXECDIR="%{buildroot}%{_libexecdir}" SHLIBDIR="%{buildroot}/%{_lib}" install install-pywrap
 
 # remove files contained in other packages
 rm -rf %{buildroot}%{_sysconfdir}
-rm -rf %{buildroot}/%{_lib}
+%if "%{_lib}" == "lib64"
+rm -rf %{buildroot}%{_libexecdir}
+%else
+rm -rf %{buildroot}%{_libexecdir}/selinux
+%endif
 rm -rf %{buildroot}%{_includedir}
 rm  -f %{buildroot}%{_libdir}/libsemanage.*
 rm -rf %{buildroot}%{_libdir}/pkgconfig