anag_factory
72b416796f
- Fix setools test package
- Update to version 4.7.0:
- Add MCP server to provide LLMs the ability to analyze policy.
- Internal changes:
- The source distribution is now a Python sdist.
- The policyrep C extension is cythonized, so cython is
an optional build dependency now. Still keeping it in, might be good
to still rebuild it ourselves.
- Adjust %suse_version to new scheme (jsc#PED-15790)
- Fix test multibuild flavor
- Change the test flavor so that it does not produce any RPMs, avoiding
duplicate binaries across the setools and setools-test packages
- Disable debuginfo generation for the test flavor, so that it does not break
due to the missing files.
- Simplify test multibuild flavor to fix broken build in Factory due to
debuginfo generation
- Move tests to a test multibuild flavor
- Update to version 4.6.0:
- User Visible Changes
* Add seinfo option to see roles allowed for a specified type.
* Add sechecker module for asserting kernel modules are read-only.
* Add support for the nlmsg extended permission.
- Under The Hood Changes
* Significant code quality and unit testing improvements.
* Drop methods marked for deprecation.
- Packaging Changes
* Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions
- Drop legacy %python_build and %python_install macros and
switch to pyproject macros instead as requested by packaging team
- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring
- Rework packaging to modern python packaging
- python-setools module now builds for python310, python311, python312
for tw and builds for python311 in 15.4 + 15.5
- setools-console scripts will use python311 as default in factory, 15.4
and 15.5
- moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
python-setools module into setools-console as it does not belong in there
and causes conflicts between python versions
- moved %{python_sitearch}/setoolsgui from setools-gui into the
python-setools module for multiversion build
- Update to version 4.5.1:
- Correct annotations of NetworkX types to make it optional again.
- Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests
- Fix build for 15.4 and 15.5:
- Minimum required python version is 3.11, so building only for python311
- Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch
- Update to version 4.5.0:
- User Visible Changes
* Add graphical results for information flow analysis and domain
transition analysis, available in apol, sedta, and seinfoflow.
* Add tooltips, What's This?, and detail popups in apol to help
cross-referencing query and analysis results along with
context-sensitive help.
- Under The Hood Changes
* Rework apol to fully generate the UI programmatically.
* Update apol to PyQt6
* Replace deprecated uses of pkg_resources and distutils.
* Begin adding unit tests for apol UI.
- Updated Dependencies
SETools now higher minimum versions of the following dependencies:
* Python 3.10
* NetworkX 2.6
* PyQt6
* Cython 0.29.14
- New Dependencies
* pygraphviz (for seinfoflow, sedta, apol)
- Update to version 4.4.4:
* Update for compiling with libsepol 3.6.
- Update to version 4.4.3:
* Fix compilation with Cython 3.0.0.
* Improve man pages.
* Remove neverallow options in sediff.
* Add -r option to seinfoflow to get flows into the source type.
* Reject a rule with no permissions as invalid policy.
- Add python3-setuptools as a runtime requirement of python3-setools
(boo#1213305)
- Update to version 4.4.2:
* Make NetworkX optional. sedta and seinfoflow tools, along with the
equivalent analyses in apol require NetworkX.
* Remove neverallow options in sesearch and apol. These are not usable
since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream
- Update to version 4.4.1:
* Replace deprecated NetworkX function use in information flow and domain
transition analysis. This function was removed in NetworkX 3.0.
* Fix bug in apol copy and cut functions when copying from a tree view.
* Fix bug with extended permission set construction when a range includes
0x0.
* Add sesearch -Sp option for permission subset match.
* Fix error in man page description for sesearch -ep option.
* Improve output stability in constraint, common, class, role, and user
queries.
* Updated permission map.
* Fix bug in sechecker parsing of multiline values.
* Other code cleanups not visible to users.
- Added README.SUSE and drop recommend for python3-networkx altogether
(bsc#1202676)
- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend
- Fix dependency of python3-setools: require python3, not python
(which is python2) (bsc#1200649).
- Update to the version 4.4.0:
* Added support for old Boolean name substitution in seinfo and sesearch.
* Added sechecker tool which is a configuration file driven analysis tool.
- Stay on a single python3 flavor even if there are more than one
gh#openSUSE/python-rpm-macros#73
- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not
tcl/tk
- python3-setools needs python3-networkx
- Update to the upstream version 4.3.0:
* Revised sediff method for TE rules. This drastically reduced memory
and run time.
* Added infiniband context support to seinfo, sediff, and apol.
* Added apol configuration for location of Qt assistant.
* Fixed sediff issue where properties header would display when not
requested.
* Fixed sediff issue with type_transition file name comparison.
* Fixed permission map socket sendto information flow direction.
* Added methods to TypeAttribute class to make it a complete Python
collection.
* Genfscon now will look up classes rather than using fixed values
which were dropped from libsepol
- Dropped python3.8-compat.patch
- Add python3.8-compat.patch to allow build with Python 3.8
Still doesn't work though because of gh#SELinuxProject/setools#31
- Update to the upstream version 4.2.2:
- Remove source policy references from man pages, as loading
source policies is no longer supported.
- Fixed a performance regression in alias loading after alias
dereferencing fixes in 4.2.1.
- Update to 4.2.1
* Set SIGPIPE handler for CLI tools.
* Fixed alias dereferencing in TypeQuery and type, category, and
sensitivity lookups.
* Fixed sediff bug for rendering modified nodecons.
* Fixed devicetreecon count output.
* Fixed policy target platform check.
* Fixed bug in creating permission set intersection in apol.
- Provide python-setools
- Changed requires of console subpackage to python3-setools
- Upgrade to 4.2.0
* Support for Python 2.7 was dropped
* Symbol names are now available as the name attribute (e.g. Boolean.name, Type.name, etc.)
* Move constraint expression to its own class.
* Made Conditional.evaluate() more useful and added BaseTERule.enabled() method to determine if a rule is enabled..
* Added support for SCTP portcons
* Updated permission maps
- Dropped warning.patch
- Single spec, limited to python3. Obsoletes python-setools, provides
python3-setools
- Added warning.patch in former change to prevent warnings from
stopping the build
- Upgrade to 4.1.1
- Update to version 4.0.1. SETools was reimplemented in Python.
- Doesn't build
* setools-libs
* setools-java
* setools-tcl
* setools-devel
anymore since the files are not povided anymore
- Dropped
* add-to-header-define_cond_filename_trans.patch
* implicit-fortify-decl.patch
* setools-3.3.5-javacflags.patch
* setools-3.3.5-nonvoid.patch
* setools-3.3.5-strcmp.patch
* setools-am121.patch
* setools-libsepol.patch
* setools-setup_py-prefix.patch
* setools-swig-2.0.7.patch
* setools-swig-2x.patch
* setools-tclass.patch
- Move to minimum java target of 1.6, 1.5 is no longer supported
- Added implicit-fortify-decl.patch to prevent warnings about implicit
declarations
- Deleted setools-3.3.7-libselinux-2.3.patch, we have a
current libselinux now
- Patch to work with current libsepol, libselinux
Added: setools-tclass.patch
- Update to version 3.3.8
* Fix bug preventing seaudit from starting
* Add python bindings for seinfo and sesearch
* seinfo exits with an error status
* Support for named file transition rules
* Add support for default types in sesearch
* Man page updates for seinfo, seaudit, and sediff
* Fix file type drop down list for open/close Apol query
* Fix compile errors on new parameter in libsepol role_set_expand().
- Update home project and download Urls
- Remove merged patches
* setools-python.patch
* 0003-Since-we-do-not-ship-neverallow-rules-all-always-fai.patch
* 0006-Changes-to-support-named-file_trans-rules.patch
* 0007-Remove-unused-variables.patch
- Update setools-3.3.6-libsepol.patch > setools-libsepol.patch
- Remove redundant %clean section
- add patch: setools-3.3.7-libselinux-2.3.patch
fix build with libselinux-2.3
- don't fail if there are no never-allow rules in the policy
- remove dangling symlink /usr/bin/seaudit (bnc#812285)
* added 0003-Since-we-do-not-ship-neverallow-rules-all-always-fai.patch
- javapackages-tools in buildrequires
- added patches:
* 0006-Changes-to-support-named-file_trans-rules.patch
* 0007-Remove-unused-variables.patch
- these two add support for named file trans rules
* add-to-header-define_cond_filename_trans.patch
- add missing define_cond_filename_trans() declaration
- add explicit buildrequire on libbz2-devel
- Add setools-3.3.6-libsepol.patch to fix compilation with new
libsepol
- updated to version 3.3.7
- removed 2 upstream patches
- add setools-am121.patch to fix build with automake 1.12.1
- fix build with swig-2.0.7 (untested, though)
- patch license to follow spdx.org standard
- add libtool as buildrequire to avoid implicit dependency
- Add setools-swig-2x.patch: correctly detect swig 2.x
- updated to 3.3.6
- remove libselinux requires, it does not exist and
autorequires will do the right thing anyway
- disable Requires: usermode
- require libsepol-devel-static
- disable Python for now (weird glibc errors)
- updated to 3.3.5
* Fixed errors in libapol's AV and TE rule rendering functions
where errno was not being set properly.
* Fixed error in apol_syn_avrule_render() where braces were
not being added around the target set when there is exactly one
target type and the keyword 'self'. Thanks to Ryan Kagin
for reporting this error.
* Added qpol_type_get_ispermissive(). SETools can now handle
version 23 policy.
- initial version 3.3.4
* based on Fedora package by Dan Walsh <dwalsh@redhat.com>
OBS-URL: https://build.opensuse.org/request/show/1362581
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=57
Additional functionality for these tools can be gained by installing python3-networkx. This pulls in many dependencies and is not needed for most people, therefore it's not required or recommended due to the size of the required dependencies.