Accepting request 157814 from security:SELinux

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/157814
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=30
This commit is contained in:
Stephan Kulow 2013-03-08 09:53:13 +00:00 committed by Git OBS Bridge
commit 70d3364e3a
7 changed files with 42 additions and 53 deletions

View File

@ -1,37 +0,0 @@
From 64aff2c80f28280724f64628d6bf4c4722b4f75f Mon Sep 17 00:00:00 2001
From: Xin Ouyang <xinpascal@gmail.com>
Date: Thu, 12 Jan 2012 16:58:34 +0800
Subject: [PATCH] libsemanage: Fix segfault for building standard policies.
If you are building "standard" policies(not MCS/MLS), libsemanage
will crash, which caused by strdup() to "level" NULL pointers.
For example, semodule -s refpolicy -b base.pp -i a.pp
---
libsemanage/src/genhomedircon.c | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/libsemanage/src/genhomedircon.c b/libsemanage/src/genhomedircon.c
index d2646ae..262a6cd 100644
--- a/libsemanage/src/genhomedircon.c
+++ b/libsemanage/src/genhomedircon.c
@@ -778,6 +778,8 @@ static int setup_fallback_user(genhomedircon_settings_t * s)
{
prefix = semanage_user_get_prefix(u);
level = semanage_user_get_mlslevel(u);
+ if (level == NULL)
+ level = "";
}
if (set_fallback_user(s, seuname, prefix, level) != 0)
@@ -861,6 +863,8 @@ static genhomedircon_user_entry_t *get_users(genhomedircon_settings_t * s,
if (u) {
prefix = semanage_user_get_prefix(*u);
level = semanage_user_get_mlslevel(*u);
+ if (level == NULL)
+ level = "";
} else {
prefix = name;
level = "s0";
--
1.7.7.3

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:64e6849fe50fb463ec0ba24653a26e3452fa4aaa7d7e192213d5c5a7c525aebb
size 135818

3
libsemanage-2.1.9.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6f01d17f9751412f7b76e6e7daafeb2faf301b9bfeea83506160c81becf035cc
size 136240

View File

@ -1,3 +1,28 @@
-------------------------------------------------------------------
Wed Jan 30 12:00:30 UTC 2013 - vcizek@suse.com
- update to 2.1.9
* dropped libsemanage-2.1.6-NULL_level_fix.patch (fixed upstream)
* libsemanage: do not set soname needlessly
* libsemanage: remove PYTHONLIBDIR and ruby equivalent
* do boolean name substitution
* Fix segfault for building standard policies.
* remove build warning when build swig c files
* additional makefile support for rubywrap
* ignore 80 column limit for readability
* semanage_store: fix snprintf length argument by using asprintf
* Use default semanage.conf as a fallback
* use after free in python bindings
* Alternate path for semanage.conf
* do not link against libpython, this is considered bad in Debian
* Allow to build for several ruby version
* fallback-user-level
-------------------------------------------------------------------
Mon Jan 7 21:43:31 UTC 2013 - jengelh@inai.de
- Remove obsolete defines/sections
-------------------------------------------------------------------
Wed Oct 24 16:36:25 UTC 2012 - vcizek@suse.com

View File

@ -1,7 +1,7 @@
#
# spec file for package libsemanage
#
# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -24,7 +24,7 @@ BuildRequires: libsepol-devel
BuildRequires: libustr-devel
Name: libsemanage
Version: 2.1.6
Version: 2.1.9
Release: 0
Summary: SELinux binary policy manipulation library
License: LGPL-2.1+
@ -32,9 +32,7 @@ Group: System/Libraries
Url: http://userspace.selinuxproject.org/
Source: http://userspace.selinuxproject.org/releases/20120216/%{name}-%{version}.tar.gz
Source1: baselibs.conf
Patch: libsemanage-2.1.6-NULL_level_fix.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%define debug_package_requires libsemanage1 = %{version}-%{release}
%description
Security-enhanced Linux is a feature of the Linux kernel and a number
@ -94,7 +92,6 @@ needed for developing applications that manipulate binary policies.
%prep
%setup -q
%patch -p2
%build
make clean
@ -108,9 +105,6 @@ mkdir -p %{buildroot}%{_includedir}
make DESTDIR=%{buildroot} LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}/%{_lib}" install
ln -sf /%{_lib}/libsemanage.so.1 %{buildroot}/%{_libdir}/libsemanage.so
%clean
rm -rf %{buildroot}
%post -n libsemanage1 -p /sbin/ldconfig
%postun -n libsemanage1 -p /sbin/ldconfig

View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Wed Jan 30 12:01:03 UTC 2013 - vcizek@suse.com
- update to 2.1.9
-------------------------------------------------------------------
Mon Jan 7 21:43:31 UTC 2013 - jengelh@inai.de
- Remove obsolete defines/sections
-------------------------------------------------------------------
Tue Oct 23 05:05:03 UTC 2012 - coolo@suse.com

View File

@ -1,7 +1,7 @@
#
# spec file for package python-semanage
#
# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -26,7 +26,7 @@ BuildRequires: python-devel
BuildRequires: swig
Name: python-semanage
Version: 2.1.6
Version: 2.1.9
Release: 0
Summary: Python bindings for libsemanage
License: LGPL-2.1
@ -63,9 +63,6 @@ rm -f %{buildroot}%{_libdir}/libsemanage.*
rm -rf %{buildroot}%{_libdir}/pkgconfig
rm -rf %{buildroot}%{_mandir}
%clean
rm -rf %{buildroot}
%files
%defattr(-,root,root)
%{python_sitearch}/*