Commit Graph

64 Commits

Author SHA256 Message Date
Hu
f319bd351a Accepting request 1177316 from home:cahu:security:SELinux:fixleapbuild
- Build python-semanage for python311 in 15.4 and 15.5 instead of
  python3.6 to fix build dependencies

OBS-URL: https://build.opensuse.org/request/show/1177316
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=112
2024-06-03 13:58:07 +00:00
David Anes
8d0f0cf2b0 Accepting request 1134070 from home:cahu:branches:security:SELinux
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach <plautrba@redhat.com>
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages                       
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL    
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach <plautrba@redhat.com>
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>

OBS-URL: https://build.opensuse.org/request/show/1134070
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=110
2023-12-20 13:57:06 +00:00
b279e4d137 Accepting request 1129104 from home:dgarcia:branches:security:SELinux
- Remove dependency on /usr/bin/python3, making scripts to depends on
  the real python3 binary, not the link. bsc#1212476

OBS-URL: https://build.opensuse.org/request/show/1129104
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=108
2023-11-28 08:34:20 +00:00
Johannes Segitz
7804debdc0 Accepting request 1074196 from home:jsegitz:branches:security:SELinux
- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO

- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO

OBS-URL: https://build.opensuse.org/request/show/1074196
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=101
2023-03-24 14:08:46 +00:00
Johannes Segitz
8095c985a2 Accepting request 1073971 from home:marxin:branches:security:SELinux
- Enable LTO now (boo#1138812).

- Enable LTO now (boo#1138812).

OBS-URL: https://build.opensuse.org/request/show/1073971
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=100
2023-03-24 13:25:14 +00:00
Johannes Segitz
e526fad22d Accepting request 1067537 from home:jsegitz:branches:security:SELinux_toolchain
- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067537
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=98
2023-02-24 08:43:08 +00:00
Johannes Segitz
9527810a7e Accepting request 978291 from home:jsegitz:branches:security:SELinux
- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

OBS-URL: https://build.opensuse.org/request/show/978291
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=96
2022-05-20 14:53:32 +00:00
Johannes Segitz
1064db40e2 Accepting request 953171 from home:jsegitz:libustr_removal
- Drop Buildrequires for libustr-devel, not needed anymore

- Drop Buildrequires for libustr-devel, not needed anymore

OBS-URL: https://build.opensuse.org/request/show/953171
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=95
2022-02-10 12:39:21 +00:00
Johannes Segitz
4f3e42bcbb Accepting request 930929 from home:jsegitz:branches:security:SELinux
- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

OBS-URL: https://build.opensuse.org/request/show/930929
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=94
2021-11-11 16:01:49 +00:00
Johannes Segitz
53616ca447 Accepting request 879845 from home:jsegitz:branches:security:SELinux
- Link to correct so version
- Minor spec file cleanups

- Minor spec file cleanups

OBS-URL: https://build.opensuse.org/request/show/879845
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=90
2021-03-18 10:06:40 +00:00
76295ef61a Accepting request 879702 from home:jsegitz:branches:security:SELinux
- Move configuration file to separate libsemanage-conf package to allow
  for parallel installation in future versions

OBS-URL: https://build.opensuse.org/request/show/879702
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=89
2021-03-17 15:35:23 +00:00
Johannes Segitz
111c53ca0a OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=88 2021-03-12 07:59:15 +00:00
Johannes Segitz
b2a97b41e1 Accepting request 823542 from home:kukuk:selinux
- Add /var/lib/selinux

OBS-URL: https://build.opensuse.org/request/show/823542
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=86
2020-07-30 12:20:11 +00:00
Johannes Segitz
d11edeadfa Accepting request 820920 from home:jsegitz:branches:security:SELinux
- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

OBS-URL: https://build.opensuse.org/request/show/820920
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=84
2020-07-14 14:13:55 +00:00
822e5bb994 Accepting request 814848 from home:jsegitz:branches:security:SELinux
- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

OBS-URL: https://build.opensuse.org/request/show/814848
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=83
2020-06-16 09:26:34 +00:00
Johannes Segitz
23f21e2372 Accepting request 814134 from home:pmonrealgonzalez:branches:security:SELinux
- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

OBS-URL: https://build.opensuse.org/request/show/814134
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=82
2020-06-15 07:22:03 +00:00
Johannes Segitz
e8e279ff6b Accepting request 811357 from home:dimstar:Factory
- Drop suse_path.patch: replace it with a grep/sed logic replacing
  /usr/libexec in all files with the correct value for all distros
  (taking into account that openSUSE is in progress of migrating
  from /usr/lib to /usr/libexec).


By using %{_libexecdir} we don't have to worry anymore what the real value is: the spec file will set the righe value no matter what.

OBS-URL: https://build.opensuse.org/request/show/811357
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=80
2020-06-04 10:54:18 +00:00
Johannes Segitz
e5e66116f8 Accepting request 810879 from home:jsegitz:branches:security:SELinux
- Apply suse_path.patch only for older distributions. Newer
  use libexec

- Apply suse_path.patch only for older distributions. Newer
  use libexec

OBS-URL: https://build.opensuse.org/request/show/810879
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=79
2020-06-02 15:32:28 +00:00
Tomáš Chvátal
63a2d35fbe Accepting request 781797 from home:jsegitz:branches:security:SELinux
- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

OBS-URL: https://build.opensuse.org/request/show/781797
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=77
2020-03-05 10:11:12 +00:00
05aeb8b56a Accepting request 711059 from home:marxin:branches:security:SELinux
- Disable LTO due to symbol versioning (boo#1138812).

OBS-URL: https://build.opensuse.org/request/show/711059
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=75
2019-06-20 11:55:57 +00:00
Tomáš Chvátal
0c7399af3a Accepting request 700376 from home:marxin:branches:security:SELinux
- Disable LTO (boo#1133280).

OBS-URL: https://build.opensuse.org/request/show/700376
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=73
2019-05-06 07:47:20 +00:00
Johannes Segitz
1e3fba61bc OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=71 2019-03-21 09:41:18 +00:00
Johannes Segitz
cbc4206644 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=70 2018-12-06 14:43:34 +00:00
Tomáš Chvátal
c6afe434d2 Accepting request 647269 from home:jengelh:branches:security:SELinux
Use more %make_install.

OBS-URL: https://build.opensuse.org/request/show/647269
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=68
2018-11-08 11:21:37 +00:00
Johannes Segitz
2e104018fc Accepting request 647227 from home:jsegitz:branches:security:SELinux
- Adjusted source urls (bsc#1115052)

- Adjusted source urls (bsc#1115052)

OBS-URL: https://build.opensuse.org/request/show/647227
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=67
2018-11-08 07:52:17 +00:00
Vítězslav Čížek
da3f8479b6 Accepting request 638795 from home:pmonrealgonzalez:branches:security:SELinux
- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/638795
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=66
2018-10-01 07:40:16 +00:00
Tomáš Chvátal
f484a64c12 Accepting request 584523 from home:goldwynr:branches:security:SELinux
update to v2.7

OBS-URL: https://build.opensuse.org/request/show/584523
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=65
2018-03-09 07:25:24 +00:00
Johannes Segitz
c2f5afe142 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=63 2017-11-27 09:18:53 +00:00
Tomáš Chvátal
fa71176da9 Accepting request 528990 from devel:languages:python:singlespec-staging
- build both python2 and python3 version of the semanage binding
  with the singlespec machinery

OBS-URL: https://build.opensuse.org/request/show/528990
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=61
2017-09-28 07:52:04 +00:00
Tomáš Chvátal
30ba64d8e9 Accepting request 445457 from home:dimstar:Factory
- Split out the Policy Store Migration tool into
  libsemanage-store-migrate: it is not a devel tool to start with.
  Additionally, it causes the -devel package to depend on python,
  which we want to avoid (libsemanabe being part of the core build
  cycle). The library suggests libsemanage-store-migrate.

OBS-URL: https://build.opensuse.org/request/show/445457
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=59
2016-12-12 15:12:21 +00:00
Johannes Segitz
b22fe1786a Accepting request 411493 from home:jengelh:branches:security:SELinux
- Update RPM groups, trim description, combine filelist entries,
  ensure pkgconfig() symbols are generated.
Clean it like libsepol.

OBS-URL: https://build.opensuse.org/request/show/411493
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=57
2016-07-26 12:14:00 +00:00
Johannes Segitz
3c227b83de Accepting request 408533 from home:jsegitz:branches:security:SELinux
- Without bug number no submit to SLE 12 SP2 is possible, so to make
  sle-changelog-checker happy: bsc#988977

- Added suse_path.patch to fix path to hll compiler

OBS-URL: https://build.opensuse.org/request/show/408533
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=55
2016-07-14 14:27:12 +00:00
Johannes Segitz
1c3a2c7aa9 Accepting request 407317 from home:MargueriteSu:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/407317
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=54
2016-07-13 07:19:36 +00:00
Johannes Segitz
79647d89f4 fixed source URLs
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=52
2014-05-19 10:11:01 +00:00
Johannes Segitz
3c0bfec94a Accepting request 234487 from home:elvigia:branches:security:SELinux
- version 2.3
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.

OBS-URL: https://build.opensuse.org/request/show/234487
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=51
2014-05-19 07:32:09 +00:00
625d25be90 Accepting request 221860 from home:vitezslav_cizek:branches:security:SELinux
- add semanage.conf as SOURCE and install it instead of the default
  one

OBS-URL: https://build.opensuse.org/request/show/221860
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=49
2014-02-12 09:12:21 +00:00
4ac678e6ac Accepting request 205369 from home:posophe:branches:security:SELinux
- Update to version 2.2
  * Avoid duplicate list entries
  * Add audit support to libsemanage
  * Remove policy.kern and replace with symlink
  * Apply a MAX_UID check for genhomedircon
  * Fix man pages
- Add audit-devel BuildRequires; new dependency
- Add fdupes BuildRequires and use it to symlink duplicate manpages

OBS-URL: https://build.opensuse.org/request/show/205369
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=47
2013-11-07 10:20:19 +00:00
28314e3ba1 Accepting request 181181 from home:vitezslav_cizek:branches:security:SELinux
- change the source url to the official 2.1.10 release tarball

- change the source url to the official 2.1.10 release tarball

OBS-URL: https://build.opensuse.org/request/show/181181
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=45
2013-07-01 09:25:44 +00:00
0a3a9e28c7 Accepting request 162655 from home:vitezslav_cizek:branches:security:SELinux
- fixed source url
- removed old tarball

OBS-URL: https://build.opensuse.org/request/show/162655
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=43
2013-04-05 07:46:50 +00:00
d3e4c7a08c Accepting request 161740 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.10
  * Add sefcontext_compile to compile regex everytime policy is rebuilt
  * Cleanup/fix enable/disable/remove module.
  * redo genhomedircon minuid
  * fixes from coverity
  * semanage_store: do not leak memory in semanage_exec_prog
  * genhomedircon: remove useless conditional in get_home_dirs
  * genhomedircon: double free in get_home_dirs
  * fcontext_record: do not leak on error in semanage_fcontext_key_create
  * genhomedircon: do not leak on failure in write_gen_home_dir_context
  * semanage_store: do not leak fd
  * genhomedircon: do not leak shells list
  * semanage_store: do not leak on strdup failure
  * semanage_store: rewrite for readability

OBS-URL: https://build.opensuse.org/request/show/161740
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=42
2013-04-02 11:49:38 +00:00
Vítězslav Čížek
348c05be40 Accepting request 150435 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.9
  * dropped libsemanage-2.1.6-NULL_level_fix.patch (fixed upstream)
	* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
	* remove build warning when build swig c files
	* additional makefile support for rubywrap
	* ignore 80 column limit for readability
	* semanage_store: fix snprintf length argument by using asprintf
	* Use default semanage.conf as a fallback
	* use after free in python bindings
	* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level

- update to 2.1.9

OBS-URL: https://build.opensuse.org/request/show/150435
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=40
2013-01-31 15:22:46 +00:00
Vítězslav Čížek
5660c99e25 Accepting request 147458 from home:jengelh:branches:security:SELinux
- Remove obsolete defines/sections

- Remove obsolete defines/sections

OBS-URL: https://build.opensuse.org/request/show/147458
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=39
2013-01-08 10:50:28 +00:00
d35140335c Accepting request 139192 from home:vitezslav_cizek:branches:security:SELinux
- when building "standard" (not MCS/MLS) selinux-policies,
  libsemanage will crash, because "level" is NULL
  (libsemanage-2.1.6-NULL_level_fix.patch)

OBS-URL: https://build.opensuse.org/request/show/139192
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=37
2012-10-25 07:25:37 +00:00
Ismail Dönmez
3c45b3f1d9 Accepting request 131770 from home:babelworx:ldig:branches:security:SELinux
license update: LGPL-2.1+
Could not find any LGPL-2.1 "only" licensed files in the pacakge

OBS-URL: https://build.opensuse.org/request/show/131770
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=34
2012-08-27 14:52:51 +00:00
61a3039036 manpage in man5
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=32
2012-08-01 12:02:55 +00:00
63ff65e59b OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=31 2012-08-01 08:01:36 +00:00
7db305c834 - Updated to 2.1.6
* changes too numerous to list

- updated to 2.1.6
  * changes too numerous to list

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=30
2012-08-01 07:57:49 +00:00
Pavol Rusnak
790799ae59 Accepting request 86731 from home:uli_suse:branches:security:SELinux
- cross-build fix: use %__cc macro

OBS-URL: https://build.opensuse.org/request/show/86731
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=28
2011-10-06 15:08:24 +00:00
Michal Vyskocil
ae77e5a63b split the BuildRequires per line
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=25
2011-09-22 11:24:33 +00:00
Michal Vyskocil
26cd61a711 Accepting request 84434 from home:dirkmueller:branches:security:SELinux
- buildrequire libbz2-devel

OBS-URL: https://build.opensuse.org/request/show/84434
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=24
2011-09-22 11:23:43 +00:00