Commit Graph

51 Commits

Author SHA256 Message Date
Hu
f319bd351a Accepting request 1177316 from home:cahu:security:SELinux:fixleapbuild
- Build python-semanage for python311 in 15.4 and 15.5 instead of
  python3.6 to fix build dependencies

OBS-URL: https://build.opensuse.org/request/show/1177316
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=112
2024-06-03 13:58:07 +00:00
David Anes
8d0f0cf2b0 Accepting request 1134070 from home:cahu:branches:security:SELinux
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach <plautrba@redhat.com>
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>
- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages                       
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL    
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach <plautrba@redhat.com>
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman <jasonzaman@gmail.com>  
- Add key to keyring:   
  - B8682847764DF60DF52D992CBC3905F235179CF1   
    Petr Lautrbach <lautrbach@redhat.com>

OBS-URL: https://build.opensuse.org/request/show/1134070
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=110
2023-12-20 13:57:06 +00:00
Johannes Segitz
30ffe318a4 - Remove build counter syncing for real
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=106
2023-08-14 09:52:33 +00:00
Johannes Segitz
9ee66c5977 Accepting request 1103292 from home:adrianSuSE:branches:security:SELinux
openSUSE:Factory python-semanage flavor is configured to sync build
counter with libsemanage package. This means it always triggers a build
no matter which of the packages got initially triggered.

I am not sure if this is needed at all, if yes, please accept this 
request and forward with an explenation.

If not, just decline it and we will remove the build counter syncing 
in factory as well.

thanks

Details:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6GUU6JUQE72WCWEZCSLQYJLVVTNHBVTE/

OBS-URL: https://build.opensuse.org/request/show/1103292
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=104
2023-08-14 07:23:58 +00:00
Johannes Segitz
7804debdc0 Accepting request 1074196 from home:jsegitz:branches:security:SELinux
- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO

- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO

OBS-URL: https://build.opensuse.org/request/show/1074196
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=101
2023-03-24 14:08:46 +00:00
Johannes Segitz
8095c985a2 Accepting request 1073971 from home:marxin:branches:security:SELinux
- Enable LTO now (boo#1138812).

- Enable LTO now (boo#1138812).

OBS-URL: https://build.opensuse.org/request/show/1073971
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=100
2023-03-24 13:25:14 +00:00
Johannes Segitz
e526fad22d Accepting request 1067537 from home:jsegitz:branches:security:SELinux_toolchain
- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067537
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=98
2023-02-24 08:43:08 +00:00
Johannes Segitz
9527810a7e Accepting request 978291 from home:jsegitz:branches:security:SELinux
- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

OBS-URL: https://build.opensuse.org/request/show/978291
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=96
2022-05-20 14:53:32 +00:00
Johannes Segitz
1064db40e2 Accepting request 953171 from home:jsegitz:libustr_removal
- Drop Buildrequires for libustr-devel, not needed anymore

- Drop Buildrequires for libustr-devel, not needed anymore

OBS-URL: https://build.opensuse.org/request/show/953171
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=95
2022-02-10 12:39:21 +00:00
Johannes Segitz
4f3e42bcbb Accepting request 930929 from home:jsegitz:branches:security:SELinux
- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

OBS-URL: https://build.opensuse.org/request/show/930929
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=94
2021-11-11 16:01:49 +00:00
506203f4f2 Accepting request 912401 from home:favogt:branches:security:SELinux
- Call "make -j8 pywrap" instead of "make -j8 all pywrap" to fix random
  build failures. The toplevel Makefile does not support concurrency,
  and it resulted in parallel "make all" and "make pywrap" which weren't
  aware of each other and stepped over the other's artifacts.

OBS-URL: https://build.opensuse.org/request/show/912401
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=93
2021-08-16 13:20:13 +00:00
Johannes Segitz
779444cda3 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=91 2021-03-18 14:43:05 +00:00
Johannes Segitz
53616ca447 Accepting request 879845 from home:jsegitz:branches:security:SELinux
- Link to correct so version
- Minor spec file cleanups

- Minor spec file cleanups

OBS-URL: https://build.opensuse.org/request/show/879845
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=90
2021-03-18 10:06:40 +00:00
Johannes Segitz
111c53ca0a OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=88 2021-03-12 07:59:15 +00:00
Johannes Segitz
d11edeadfa Accepting request 820920 from home:jsegitz:branches:security:SELinux
- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

OBS-URL: https://build.opensuse.org/request/show/820920
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=84
2020-07-14 14:13:55 +00:00
822e5bb994 Accepting request 814848 from home:jsegitz:branches:security:SELinux
- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

OBS-URL: https://build.opensuse.org/request/show/814848
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=83
2020-06-16 09:26:34 +00:00
Johannes Segitz
23f21e2372 Accepting request 814134 from home:pmonrealgonzalez:branches:security:SELinux
- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

OBS-URL: https://build.opensuse.org/request/show/814134
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=82
2020-06-15 07:22:03 +00:00
Johannes Segitz
e8e279ff6b Accepting request 811357 from home:dimstar:Factory
- Drop suse_path.patch: replace it with a grep/sed logic replacing
  /usr/libexec in all files with the correct value for all distros
  (taking into account that openSUSE is in progress of migrating
  from /usr/lib to /usr/libexec).


By using %{_libexecdir} we don't have to worry anymore what the real value is: the spec file will set the righe value no matter what.

OBS-URL: https://build.opensuse.org/request/show/811357
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=80
2020-06-04 10:54:18 +00:00
Johannes Segitz
e5e66116f8 Accepting request 810879 from home:jsegitz:branches:security:SELinux
- Apply suse_path.patch only for older distributions. Newer
  use libexec

- Apply suse_path.patch only for older distributions. Newer
  use libexec

OBS-URL: https://build.opensuse.org/request/show/810879
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=79
2020-06-02 15:32:28 +00:00
Tomáš Chvátal
63a2d35fbe Accepting request 781797 from home:jsegitz:branches:security:SELinux
- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

OBS-URL: https://build.opensuse.org/request/show/781797
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=77
2020-03-05 10:11:12 +00:00
Tomáš Chvátal
0c7399af3a Accepting request 700376 from home:marxin:branches:security:SELinux
- Disable LTO (boo#1133280).

OBS-URL: https://build.opensuse.org/request/show/700376
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=73
2019-05-06 07:47:20 +00:00
Johannes Segitz
1e3fba61bc OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=71 2019-03-21 09:41:18 +00:00
Johannes Segitz
cbc4206644 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=70 2018-12-06 14:43:34 +00:00
Tomáš Chvátal
c6afe434d2 Accepting request 647269 from home:jengelh:branches:security:SELinux
Use more %make_install.

OBS-URL: https://build.opensuse.org/request/show/647269
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=68
2018-11-08 11:21:37 +00:00
Johannes Segitz
2e104018fc Accepting request 647227 from home:jsegitz:branches:security:SELinux
- Adjusted source urls (bsc#1115052)

- Adjusted source urls (bsc#1115052)

OBS-URL: https://build.opensuse.org/request/show/647227
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=67
2018-11-08 07:52:17 +00:00
Vítězslav Čížek
da3f8479b6 Accepting request 638795 from home:pmonrealgonzalez:branches:security:SELinux
- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/638795
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=66
2018-10-01 07:40:16 +00:00
Tomáš Chvátal
f484a64c12 Accepting request 584523 from home:goldwynr:branches:security:SELinux
update to v2.7

OBS-URL: https://build.opensuse.org/request/show/584523
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=65
2018-03-09 07:25:24 +00:00
Johannes Segitz
c2f5afe142 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=63 2017-11-27 09:18:53 +00:00
Tomáš Chvátal
fa71176da9 Accepting request 528990 from devel:languages:python:singlespec-staging
- build both python2 and python3 version of the semanage binding
  with the singlespec machinery

OBS-URL: https://build.opensuse.org/request/show/528990
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=61
2017-09-28 07:52:04 +00:00
Johannes Segitz
b22fe1786a Accepting request 411493 from home:jengelh:branches:security:SELinux
- Update RPM groups, trim description, combine filelist entries,
  ensure pkgconfig() symbols are generated.
Clean it like libsepol.

OBS-URL: https://build.opensuse.org/request/show/411493
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=57
2016-07-26 12:14:00 +00:00
Johannes Segitz
3c227b83de Accepting request 408533 from home:jsegitz:branches:security:SELinux
- Without bug number no submit to SLE 12 SP2 is possible, so to make
  sle-changelog-checker happy: bsc#988977

- Added suse_path.patch to fix path to hll compiler

OBS-URL: https://build.opensuse.org/request/show/408533
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=55
2016-07-14 14:27:12 +00:00
Johannes Segitz
1c3a2c7aa9 Accepting request 407317 from home:MargueriteSu:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/407317
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=54
2016-07-13 07:19:36 +00:00
Johannes Segitz
79647d89f4 fixed source URLs
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=52
2014-05-19 10:11:01 +00:00
Johannes Segitz
3c0bfec94a Accepting request 234487 from home:elvigia:branches:security:SELinux
- version 2.3
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.

OBS-URL: https://build.opensuse.org/request/show/234487
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=51
2014-05-19 07:32:09 +00:00
625d25be90 Accepting request 221860 from home:vitezslav_cizek:branches:security:SELinux
- add semanage.conf as SOURCE and install it instead of the default
  one

OBS-URL: https://build.opensuse.org/request/show/221860
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=49
2014-02-12 09:12:21 +00:00
4ac678e6ac Accepting request 205369 from home:posophe:branches:security:SELinux
- Update to version 2.2
  * Avoid duplicate list entries
  * Add audit support to libsemanage
  * Remove policy.kern and replace with symlink
  * Apply a MAX_UID check for genhomedircon
  * Fix man pages
- Add audit-devel BuildRequires; new dependency
- Add fdupes BuildRequires and use it to symlink duplicate manpages

OBS-URL: https://build.opensuse.org/request/show/205369
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=47
2013-11-07 10:20:19 +00:00
28314e3ba1 Accepting request 181181 from home:vitezslav_cizek:branches:security:SELinux
- change the source url to the official 2.1.10 release tarball

- change the source url to the official 2.1.10 release tarball

OBS-URL: https://build.opensuse.org/request/show/181181
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=45
2013-07-01 09:25:44 +00:00
0a3a9e28c7 Accepting request 162655 from home:vitezslav_cizek:branches:security:SELinux
- fixed source url
- removed old tarball

OBS-URL: https://build.opensuse.org/request/show/162655
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=43
2013-04-05 07:46:50 +00:00
d3e4c7a08c Accepting request 161740 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.10
  * Add sefcontext_compile to compile regex everytime policy is rebuilt
  * Cleanup/fix enable/disable/remove module.
  * redo genhomedircon minuid
  * fixes from coverity
  * semanage_store: do not leak memory in semanage_exec_prog
  * genhomedircon: remove useless conditional in get_home_dirs
  * genhomedircon: double free in get_home_dirs
  * fcontext_record: do not leak on error in semanage_fcontext_key_create
  * genhomedircon: do not leak on failure in write_gen_home_dir_context
  * semanage_store: do not leak fd
  * genhomedircon: do not leak shells list
  * semanage_store: do not leak on strdup failure
  * semanage_store: rewrite for readability

OBS-URL: https://build.opensuse.org/request/show/161740
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=42
2013-04-02 11:49:38 +00:00
Vítězslav Čížek
348c05be40 Accepting request 150435 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.9
  * dropped libsemanage-2.1.6-NULL_level_fix.patch (fixed upstream)
	* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
	* remove build warning when build swig c files
	* additional makefile support for rubywrap
	* ignore 80 column limit for readability
	* semanage_store: fix snprintf length argument by using asprintf
	* Use default semanage.conf as a fallback
	* use after free in python bindings
	* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level

- update to 2.1.9

OBS-URL: https://build.opensuse.org/request/show/150435
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=40
2013-01-31 15:22:46 +00:00
Vítězslav Čížek
5660c99e25 Accepting request 147458 from home:jengelh:branches:security:SELinux
- Remove obsolete defines/sections

- Remove obsolete defines/sections

OBS-URL: https://build.opensuse.org/request/show/147458
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=39
2013-01-08 10:50:28 +00:00
d35140335c Accepting request 139192 from home:vitezslav_cizek:branches:security:SELinux
- when building "standard" (not MCS/MLS) selinux-policies,
  libsemanage will crash, because "level" is NULL
  (libsemanage-2.1.6-NULL_level_fix.patch)

OBS-URL: https://build.opensuse.org/request/show/139192
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=37
2012-10-25 07:25:37 +00:00
6a94fb1241 Accepting request 139059 from home:coolo:branches:openSUSE:Factory
- buildrequire libbz2-devel (forwarded request 139058 from coolo)

OBS-URL: https://build.opensuse.org/request/show/139059
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=36
2012-10-23 10:01:57 +00:00
63ff65e59b OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=31 2012-08-01 08:01:36 +00:00
7db305c834 - Updated to 2.1.6
* changes too numerous to list

- updated to 2.1.6
  * changes too numerous to list

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=30
2012-08-01 07:57:49 +00:00
OBS User buildservice-autocommit
94639e803a Updating link to change in openSUSE:Factory/libsemanage revision 19.0
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=3e66a461e1abdd21cc4fb74be965a6bd
2011-05-24 11:33:19 +00:00
Pavol Rusnak
a7337d0b81 remove unpackaged files in python-semamage
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=22
2011-05-23 14:32:05 +00:00
Pavol Rusnak
f0613aa098 fix setup macro
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=21
2011-05-23 14:26:25 +00:00
Pavol Rusnak
4c3eb04387 once more :)
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=20
2011-05-23 14:25:26 +00:00
Pavol Rusnak
7ed3aba4e9 fix tarball name
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=19
2011-05-23 14:24:03 +00:00