Commit Graph

49 Commits

Author SHA256 Message Date
Johannes Segitz
e526fad22d Accepting request 1067537 from home:jsegitz:branches:security:SELinux_toolchain
- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

OBS-URL: https://build.opensuse.org/request/show/1067537
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=98
2023-02-24 08:43:08 +00:00
Johannes Segitz
9527810a7e Accepting request 978291 from home:jsegitz:branches:security:SELinux
- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names

OBS-URL: https://build.opensuse.org/request/show/978291
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=96
2022-05-20 14:53:32 +00:00
Johannes Segitz
1064db40e2 Accepting request 953171 from home:jsegitz:libustr_removal
- Drop Buildrequires for libustr-devel, not needed anymore

- Drop Buildrequires for libustr-devel, not needed anymore

OBS-URL: https://build.opensuse.org/request/show/953171
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=95
2022-02-10 12:39:21 +00:00
Johannes Segitz
4f3e42bcbb Accepting request 930929 from home:jsegitz:branches:security:SELinux
- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()

OBS-URL: https://build.opensuse.org/request/show/930929
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=94
2021-11-11 16:01:49 +00:00
Johannes Segitz
53616ca447 Accepting request 879845 from home:jsegitz:branches:security:SELinux
- Link to correct so version
- Minor spec file cleanups

- Minor spec file cleanups

OBS-URL: https://build.opensuse.org/request/show/879845
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=90
2021-03-18 10:06:40 +00:00
76295ef61a Accepting request 879702 from home:jsegitz:branches:security:SELinux
- Move configuration file to separate libsemanage-conf package to allow
  for parallel installation in future versions

OBS-URL: https://build.opensuse.org/request/show/879702
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=89
2021-03-17 15:35:23 +00:00
Johannes Segitz
111c53ca0a OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=88 2021-03-12 07:59:15 +00:00
Johannes Segitz
b2a97b41e1 Accepting request 823542 from home:kukuk:selinux
- Add /var/lib/selinux

OBS-URL: https://build.opensuse.org/request/show/823542
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=86
2020-07-30 12:20:11 +00:00
Johannes Segitz
65cc8a6923 Accepting request 821049 from home:jsegitz:branches:security:SELinux
- Remove libsemanage-update-map-file.patch to prevent checkers from declining
  the submission. Keeping the snippet in the spec file in case we try to 
  enable LTO again

OBS-URL: https://build.opensuse.org/request/show/821049
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=85
2020-07-15 08:23:27 +00:00
Johannes Segitz
d11edeadfa Accepting request 820920 from home:jsegitz:branches:security:SELinux
- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

- Update to version 3.1
  * Improved manpage
  * fsync final files before rename

OBS-URL: https://build.opensuse.org/request/show/820920
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=84
2020-07-14 14:13:55 +00:00
822e5bb994 Accepting request 814848 from home:jsegitz:branches:security:SELinux
- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux

OBS-URL: https://build.opensuse.org/request/show/814848
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=83
2020-06-16 09:26:34 +00:00
Johannes Segitz
23f21e2372 Accepting request 814134 from home:pmonrealgonzalez:branches:security:SELinux
- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

OBS-URL: https://build.opensuse.org/request/show/814134
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=82
2020-06-15 07:22:03 +00:00
Johannes Segitz
e8e279ff6b Accepting request 811357 from home:dimstar:Factory
- Drop suse_path.patch: replace it with a grep/sed logic replacing
  /usr/libexec in all files with the correct value for all distros
  (taking into account that openSUSE is in progress of migrating
  from /usr/lib to /usr/libexec).


By using %{_libexecdir} we don't have to worry anymore what the real value is: the spec file will set the righe value no matter what.

OBS-URL: https://build.opensuse.org/request/show/811357
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=80
2020-06-04 10:54:18 +00:00
Johannes Segitz
e5e66116f8 Accepting request 810879 from home:jsegitz:branches:security:SELinux
- Apply suse_path.patch only for older distributions. Newer
  use libexec

- Apply suse_path.patch only for older distributions. Newer
  use libexec

OBS-URL: https://build.opensuse.org/request/show/810879
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=79
2020-06-02 15:32:28 +00:00
Tomáš Chvátal
63a2d35fbe Accepting request 781797 from home:jsegitz:branches:security:SELinux
- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch

OBS-URL: https://build.opensuse.org/request/show/781797
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=77
2020-03-05 10:11:12 +00:00
05aeb8b56a Accepting request 711059 from home:marxin:branches:security:SELinux
- Disable LTO due to symbol versioning (boo#1138812).

OBS-URL: https://build.opensuse.org/request/show/711059
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=75
2019-06-20 11:55:57 +00:00
Johannes Segitz
1e3fba61bc OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=71 2019-03-21 09:41:18 +00:00
Tomáš Chvátal
c6afe434d2 Accepting request 647269 from home:jengelh:branches:security:SELinux
Use more %make_install.

OBS-URL: https://build.opensuse.org/request/show/647269
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=68
2018-11-08 11:21:37 +00:00
Johannes Segitz
2e104018fc Accepting request 647227 from home:jsegitz:branches:security:SELinux
- Adjusted source urls (bsc#1115052)

- Adjusted source urls (bsc#1115052)

OBS-URL: https://build.opensuse.org/request/show/647227
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=67
2018-11-08 07:52:17 +00:00
Vítězslav Čížek
da3f8479b6 Accepting request 638795 from home:pmonrealgonzalez:branches:security:SELinux
- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

- update to version 2.8
  * semanage fcontext -l now also lists home directory entries from
    file_contexts.homedirs.
  * libsemanage no longer deletes the tmp directory if there is an error
    while committing the policy transaction, so that any temporary files
    can be further inspected for debugging purposes (e.g. to examine a
    particular line of the generated CIL module).  The tmp directory will
    be deleted upon the next transaction, so no manual removal is needed.
  * When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc.,
    DESTDIR has to be removed from the definition. For example on Arch
    Linux, SBINDIR="${pkgdir}/usr/bin" was changed to SBINDIR="/usr/bin".
  * PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).
- Clened with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/638795
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=66
2018-10-01 07:40:16 +00:00
Tomáš Chvátal
f484a64c12 Accepting request 584523 from home:goldwynr:branches:security:SELinux
update to v2.7

OBS-URL: https://build.opensuse.org/request/show/584523
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=65
2018-03-09 07:25:24 +00:00
Johannes Segitz
c2f5afe142 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=63 2017-11-27 09:18:53 +00:00
Tomáš Chvátal
30ba64d8e9 Accepting request 445457 from home:dimstar:Factory
- Split out the Policy Store Migration tool into
  libsemanage-store-migrate: it is not a devel tool to start with.
  Additionally, it causes the -devel package to depend on python,
  which we want to avoid (libsemanabe being part of the core build
  cycle). The library suggests libsemanage-store-migrate.

OBS-URL: https://build.opensuse.org/request/show/445457
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=59
2016-12-12 15:12:21 +00:00
Johannes Segitz
b22fe1786a Accepting request 411493 from home:jengelh:branches:security:SELinux
- Update RPM groups, trim description, combine filelist entries,
  ensure pkgconfig() symbols are generated.
Clean it like libsepol.

OBS-URL: https://build.opensuse.org/request/show/411493
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=57
2016-07-26 12:14:00 +00:00
Johannes Segitz
3c227b83de Accepting request 408533 from home:jsegitz:branches:security:SELinux
- Without bug number no submit to SLE 12 SP2 is possible, so to make
  sle-changelog-checker happy: bsc#988977

- Added suse_path.patch to fix path to hll compiler

OBS-URL: https://build.opensuse.org/request/show/408533
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=55
2016-07-14 14:27:12 +00:00
Johannes Segitz
1c3a2c7aa9 Accepting request 407317 from home:MargueriteSu:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/407317
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=54
2016-07-13 07:19:36 +00:00
Johannes Segitz
3c0bfec94a Accepting request 234487 from home:elvigia:branches:security:SELinux
- version 2.3
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.

OBS-URL: https://build.opensuse.org/request/show/234487
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=51
2014-05-19 07:32:09 +00:00
625d25be90 Accepting request 221860 from home:vitezslav_cizek:branches:security:SELinux
- add semanage.conf as SOURCE and install it instead of the default
  one

OBS-URL: https://build.opensuse.org/request/show/221860
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=49
2014-02-12 09:12:21 +00:00
4ac678e6ac Accepting request 205369 from home:posophe:branches:security:SELinux
- Update to version 2.2
  * Avoid duplicate list entries
  * Add audit support to libsemanage
  * Remove policy.kern and replace with symlink
  * Apply a MAX_UID check for genhomedircon
  * Fix man pages
- Add audit-devel BuildRequires; new dependency
- Add fdupes BuildRequires and use it to symlink duplicate manpages

OBS-URL: https://build.opensuse.org/request/show/205369
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=47
2013-11-07 10:20:19 +00:00
28314e3ba1 Accepting request 181181 from home:vitezslav_cizek:branches:security:SELinux
- change the source url to the official 2.1.10 release tarball

- change the source url to the official 2.1.10 release tarball

OBS-URL: https://build.opensuse.org/request/show/181181
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=45
2013-07-01 09:25:44 +00:00
0a3a9e28c7 Accepting request 162655 from home:vitezslav_cizek:branches:security:SELinux
- fixed source url
- removed old tarball

OBS-URL: https://build.opensuse.org/request/show/162655
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=43
2013-04-05 07:46:50 +00:00
d3e4c7a08c Accepting request 161740 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.10
  * Add sefcontext_compile to compile regex everytime policy is rebuilt
  * Cleanup/fix enable/disable/remove module.
  * redo genhomedircon minuid
  * fixes from coverity
  * semanage_store: do not leak memory in semanage_exec_prog
  * genhomedircon: remove useless conditional in get_home_dirs
  * genhomedircon: double free in get_home_dirs
  * fcontext_record: do not leak on error in semanage_fcontext_key_create
  * genhomedircon: do not leak on failure in write_gen_home_dir_context
  * semanage_store: do not leak fd
  * genhomedircon: do not leak shells list
  * semanage_store: do not leak on strdup failure
  * semanage_store: rewrite for readability

OBS-URL: https://build.opensuse.org/request/show/161740
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=42
2013-04-02 11:49:38 +00:00
Vítězslav Čížek
348c05be40 Accepting request 150435 from home:vitezslav_cizek:branches:security:SELinux
- update to 2.1.9
  * dropped libsemanage-2.1.6-NULL_level_fix.patch (fixed upstream)
	* libsemanage: do not set soname needlessly
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
	* do boolean name substitution
	* Fix segfault for building standard policies.
	* remove build warning when build swig c files
	* additional makefile support for rubywrap
	* ignore 80 column limit for readability
	* semanage_store: fix snprintf length argument by using asprintf
	* Use default semanage.conf as a fallback
	* use after free in python bindings
	* Alternate path for semanage.conf
	* do not link against libpython, this is considered bad in Debian
	* Allow to build for several ruby version
	* fallback-user-level

- update to 2.1.9

OBS-URL: https://build.opensuse.org/request/show/150435
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=40
2013-01-31 15:22:46 +00:00
Vítězslav Čížek
5660c99e25 Accepting request 147458 from home:jengelh:branches:security:SELinux
- Remove obsolete defines/sections

- Remove obsolete defines/sections

OBS-URL: https://build.opensuse.org/request/show/147458
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=39
2013-01-08 10:50:28 +00:00
d35140335c Accepting request 139192 from home:vitezslav_cizek:branches:security:SELinux
- when building "standard" (not MCS/MLS) selinux-policies,
  libsemanage will crash, because "level" is NULL
  (libsemanage-2.1.6-NULL_level_fix.patch)

OBS-URL: https://build.opensuse.org/request/show/139192
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=37
2012-10-25 07:25:37 +00:00
Ismail Dönmez
3c45b3f1d9 Accepting request 131770 from home:babelworx:ldig:branches:security:SELinux
license update: LGPL-2.1+
Could not find any LGPL-2.1 "only" licensed files in the pacakge

OBS-URL: https://build.opensuse.org/request/show/131770
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=34
2012-08-27 14:52:51 +00:00
7db305c834 - Updated to 2.1.6
* changes too numerous to list

- updated to 2.1.6
  * changes too numerous to list

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=30
2012-08-01 07:57:49 +00:00
Pavol Rusnak
790799ae59 Accepting request 86731 from home:uli_suse:branches:security:SELinux
- cross-build fix: use %__cc macro

OBS-URL: https://build.opensuse.org/request/show/86731
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=28
2011-10-06 15:08:24 +00:00
Michal Vyskocil
26cd61a711 Accepting request 84434 from home:dirkmueller:branches:security:SELinux
- buildrequire libbz2-devel

OBS-URL: https://build.opensuse.org/request/show/84434
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=24
2011-09-22 11:23:43 +00:00
Pavol Rusnak
6d7c006f61 - split off python bindings to separate package to reduce build
dependencies for rpm [bnc#695436]

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=18
2011-05-23 14:20:28 +00:00
Stephan Kulow
4033e3c632 Accepting request 70554 from home:coolo:branches:openSUSE:Factory
- add baselibs.conf for rpm-32bit to use

OBS-URL: https://build.opensuse.org/request/show/70554
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libsemanage?expand=0&rev=16
2011-05-19 05:41:38 +00:00
Sascha Peilicke
e7530d73d4 Accepting request 62607 from security:SELinux
Accepted submit request 62607 from user coolo

OBS-URL: https://build.opensuse.org/request/show/62607
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=14
2011-02-23 10:02:41 +00:00
OBS User autobuild
200265d77f Accepting request 34370 from security:SELinux
Copy from security:SELinux/libsemanage based on submit request 34370 from user prusnak

OBS-URL: https://build.opensuse.org/request/show/34370
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=9
2010-03-09 14:46:15 +00:00
OBS User unknown
a835e72e16 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=6 2009-01-19 01:10:52 +00:00
OBS User unknown
4b7081c045 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=5 2009-01-16 00:48:40 +00:00
OBS User unknown
da747f9cb8 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=4 2008-10-22 23:18:07 +00:00
OBS User unknown
c407f15ff4 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=3 2008-09-23 22:34:45 +00:00
OBS User unknown
94069a2e43 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=2 2008-09-02 10:29:51 +00:00
OBS User unknown
51816338fb OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=1 2008-08-05 02:42:57 +00:00