100 Commits

Author SHA256 Message Date
4a3b6bd42c Accepting request 1307312 from security:SELinux
- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.

OBS-URL: https://build.opensuse.org/request/show/1307312
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=55
2025-09-26 20:23:55 +00:00
69b5cda2a7 - Fix test multibuild flavor
- Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=116
2025-09-26 08:31:28 +00:00
137fb05ba5 Accepting request 1306567 from security:SELinux
- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation

OBS-URL: https://build.opensuse.org/request/show/1306567
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=54
2025-09-23 14:06:51 +00:00
0ec0bc6b07 - Simplify test multibuild flavor to fix broken build in Factory due to
debuginfo generation

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=114
2025-09-22 15:04:06 +00:00
0a55ae213d Accepting request 1304046 from security:SELinux
- Move tests to a test multibuild flavor
- Update to version 4.6.0:
  - User Visible Changes
    * Add seinfo option to see roles allowed for a specified type.
    * Add sechecker module for asserting kernel modules are read-only.
    * Add support for the nlmsg extended permission.
  - Under The Hood Changes
    * Significant code quality and unit testing improvements.
    * Drop methods marked for deprecation.
  - Packaging Changes
    * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions

OBS-URL: https://build.opensuse.org/request/show/1304046
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=53
2025-09-12 19:09:02 +00:00
Hu
ca56b8c8a6 - Move tests to a test multibuild flavor
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=112
2025-09-11 09:22:59 +00:00
Hu
b2e1df0680 - Update to version 4.6.0:
- User Visible Changes
    * Add seinfo option to see roles allowed for a specified type.
    * Add sechecker module for asserting kernel modules are read-only.
    * Add support for the nlmsg extended permission.
  - Under The Hood Changes
    * Significant code quality and unit testing improvements.
    * Drop methods marked for deprecation.
  - Packaging Changes
    * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=111
2025-09-10 08:25:09 +00:00
d476cff163 Accepting request 1289308 from security:SELinux
- Drop legacy %python_build and %python_install macros and 
  switch to pyproject macros instead as requested by packaging team

OBS-URL: https://build.opensuse.org/request/show/1289308
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=52
2025-07-01 09:33:52 +00:00
Hu
51aa156822 - Drop legacy %python_build and %python_install macros and
switch to pyproject macros instead as requested by packaging team

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=109
2025-06-30 15:24:24 +00:00
668863d84b Accepting request 1202534 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1202534
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=51
2024-09-23 13:18:45 +00:00
0e6fae65e5 - Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring

OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=107
2024-09-23 06:21:25 +00:00
ea2c187284 Accepting request 1178336 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1178336
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=50
2024-06-04 10:50:26 +00:00
Hu
f101acefb2 Accepting request 1177606 from home:cahu:security:SELinux:fixleapbuild
- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5 
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build

OBS-URL: https://build.opensuse.org/request/show/1177606
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=105
2024-06-03 13:59:28 +00:00
5b1c14c8c4 Accepting request 1171339 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1171339
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=49
2024-05-02 21:42:58 +00:00
102582abc7 Accepting request 1171337 from home:fbonazzi:branches:security:SELinux
- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  -  Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests

OBS-URL: https://build.opensuse.org/request/show/1171337
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=103
2024-05-02 11:01:21 +00:00
1c05bb0a4c Accepting request 1168880 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1168880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=48
2024-04-19 17:13:14 +00:00
1bf18c7b28 Accepting request 1168868 from home:cahu:security:SELinux:policytest2
- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311 
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch 
- Update to version 4.5.0:
  - User Visible Changes
    * Add graphical results for information flow analysis and domain
      transition analysis, available in apol, sedta, and seinfoflow.
    * Add tooltips, What's This?, and detail popups in apol to help
      cross-referencing query and analysis results along with
      context-sensitive help.
  - Under The Hood Changes
    * Rework apol to fully generate the UI programmatically.
    * Update apol to PyQt6
    * Replace deprecated uses of pkg_resources and distutils.
    * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
    * Python 3.10
    * NetworkX 2.6
    * PyQt6
    * Cython 0.29.14
  - New Dependencies
    * pygraphviz (for seinfoflow, sedta, apol)

OBS-URL: https://build.opensuse.org/request/show/1168868
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=101
2024-04-18 13:51:47 +00:00
59a6b51bc9 Accepting request 1132435 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1132435
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=47
2023-12-11 20:49:47 +00:00
ef6218b175 Accepting request 1132434 from home:jsegitz:branches:security:SELinux
- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.

OBS-URL: https://build.opensuse.org/request/show/1132434
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=99
2023-12-11 08:28:18 +00:00
795c1e96ee Accepting request 1115882 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1115882
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=46
2023-10-06 19:12:07 +00:00
Hu
1c067173f4 Accepting request 1115870 from home:cahu:branches:security:SELinux
Add missing reference bsc#1200649 to changelog

OBS-URL: https://build.opensuse.org/request/show/1115870
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=97
2023-10-05 15:22:53 +00:00
89711056fa Accepting request 1102155 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1102155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=45
2023-08-04 13:02:58 +00:00
d56eee7d81 Accepting request 1101719 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.

OBS-URL: https://build.opensuse.org/request/show/1101719
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=95
2023-08-03 11:19:58 +00:00
1ac4cfbcf7 Accepting request 1099111 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1099111
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=44
2023-07-19 17:09:45 +00:00
9b3cfd1f26 Accepting request 1098586 from home:shunghsiyu:branches:security:SELinux
Add python3-setuptools as a runtime requirement of python3-setools (boo#1213305)

OBS-URL: https://build.opensuse.org/request/show/1098586
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=93
2023-07-17 15:00:50 +00:00
bd9995d336 Accepting request 1082988 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1082988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=43
2023-04-27 17:59:33 +00:00
9ae288d38d Accepting request 1082976 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream

OBS-URL: https://build.opensuse.org/request/show/1082976
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=91
2023-04-26 11:36:22 +00:00
d0da89cb66 Accepting request 1063510 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1063510
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=42
2023-02-07 17:48:27 +00:00
7a9a7c36d5 Accepting request 1063460 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.

OBS-URL: https://build.opensuse.org/request/show/1063460
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=89
2023-02-06 19:11:22 +00:00
7cb5f93ea8 Accepting request 1001362 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1001362
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=41
2022-09-07 09:05:22 +00:00
f4490c61ae Accepting request 1001361 from home:jsegitz:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1001361
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=87
2022-09-06 06:46:14 +00:00
581661343f Accepting request 1001198 from home:jsegitz:branches:security:SELinux
- Add make_networkx_optional.patch to cut down installation requirements

OBS-URL: https://build.opensuse.org/request/show/1001198
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=86
2022-09-05 06:41:50 +00:00
e9cb7e6fed Accepting request 1000891 from home:jsegitz:branches:security:SELinux
- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)

OBS-URL: https://build.opensuse.org/request/show/1000891
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=85
2022-09-02 12:53:45 +00:00
7194bafe2e Accepting request 956807 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/956807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=40
2022-02-25 20:24:46 +00:00
46eb5c010e Accepting request 956666 from home:shunghsiyu:branches:openSUSE:Factory
Make dependency on python3-networkx optional.

python3-network pulls in python38-matplotlib and python38-scipy, which then pulls in various mathematical and graphical libraries that are not needed on a minimal server environment (e.g. MicroOS).

While sedta will not work without python3-networkx, with this patch (already merged upstream https://github.com/SELinuxProject/setools/pull/68) it will emit an error message pointing user to install python3-networkx instead of throwing ImportError.

Further more, by default zypper install recommended packages as well, so general users are unlikely to even notice the difference. It only makes a difference if recommends are disabled; either explicitly by giving --no-recommends to zypper or setting solver.onlyRequires=true in zypp.conf, the latter is what MicroOS does.

OBS-URL: https://build.opensuse.org/request/show/956666
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=84
2022-02-22 15:38:03 +00:00
437ddb5fc6 Accepting request 898578 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/898578
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=39
2021-06-11 20:29:57 +00:00
0dba65a9d5 Accepting request 898351 from home:dimstar:Factory
- Fix dependency of python3-setools: require python3, not python
  (which is python2).

  gh#openSUSE/python-rpm-macros#73
- Fix setools-gui dependencies, we are using python-qt5 and not
  * Fixed sediff issue where properties header would display when not
  * Added methods to TypeAttribute class to make it a complete Python
  * Genfscon now will look up classes rather than using fixed values
  * Support for Python 2.7 was dropped
- Deleted setools-3.3.7-libselinux-2.3.patch, we have a
- Add setools-swig-2x.patch: correctly detect swig 2.x

OBS-URL: https://build.opensuse.org/request/show/898351
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=82
2021-06-09 05:13:16 +00:00
77c43bd6d5 Accepting request 878583 from security:SELinux
big toolchain update, please stage together. so versions change, so this has high potential to break stuff. Probably best to stage it isolated

OBS-URL: https://build.opensuse.org/request/show/878583
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=38
2021-03-24 15:08:52 +00:00
67e04a1493 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=80 2021-03-12 07:59:19 +00:00
4ef7198fa3 Accepting request 846882 from home:mcepl:branches:security:SELinux
Resubmit the update.

OBS-URL: https://build.opensuse.org/request/show/846882
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=79
2020-11-10 13:40:14 +00:00
59042827b3 Accepting request 846428 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/846428
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=37
2020-11-09 12:56:32 +00:00
8af179d5d8 Accepting request 845832 from home:mcepl:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/845832
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=77
2020-11-06 10:40:07 +00:00
29e57f12e9 Accepting request 843145 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/843145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=36
2020-10-24 13:14:58 +00:00
2512b7fb23 Accepting request 843140 from home:kukuk:selinux
- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not 
  tcl/tk

OBS-URL: https://build.opensuse.org/request/show/843140
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=75
2020-10-21 08:17:37 +00:00
9f4faa1b76 Accepting request 823571 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/823571
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=35
2020-08-06 15:28:56 +00:00
847204cde2 Accepting request 823546 from home:kukuk:selinux
- python3-setools needs python3-networkx

OBS-URL: https://build.opensuse.org/request/show/823546
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=73
2020-07-30 12:23:01 +00:00
1389b93696 Accepting request 791204 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/791204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=34
2020-04-05 18:49:56 +00:00
0a2e869863 Accepting request 791203 from home:jsegitz:branches:security:SELinux
- Update to the upstream version 4.3.0:
  * Revised sediff method for TE rules. This drastically reduced memory
    and run time.
  * Added infiniband context support to seinfo, sediff, and apol.
  * Added apol configuration for location of Qt assistant.
  * Fixed sediff issue where properties header would display when not 
    requested.
  * Fixed sediff issue with type_transition file name comparison.
  * Fixed permission map socket sendto information flow direction.
  * Added methods to TypeAttribute class to make it a complete Python 
    collection.
  * Genfscon now will look up classes rather than using fixed values 
    which were dropped from libsepol
- Dropped python3.8-compat.patch

OBS-URL: https://build.opensuse.org/request/show/791203
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=71
2020-04-03 13:08:27 +00:00
a79eac8fae Accepting request 747293 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/747293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=33
2019-11-13 12:13:37 +00:00
05e359c230 Accepting request 744477 from home:mcepl:branches:security:SELinux
- Add python3.8-compat.patch to allow build with Python 3.8
  Still doesn't work perfectly because of gh#SELinuxProject/setools#31
  (I had to remove -Werror)

- Update to the upstream version 4.2.2:
  - Remove source policy references from man pages, as loading
    source policies is no longer supported.
  - Fixed a performance regression in alias loading after alias
    dereferencing fixes in 4.2.1.

OBS-URL: https://build.opensuse.org/request/show/744477
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=69
2019-11-11 07:10:34 +00:00