100 Commits

Author SHA256 Message Date
fa54227a06 Accepting request 1307312 from security:SELinux
- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.

OBS-URL: https://build.opensuse.org/request/show/1307312
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=55
2025-09-26 20:23:55 +00:00
ed8709e832 Accepting request 1307169 from home:fbonazzi:branches:security:SELinux
- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.

OBS-URL: https://build.opensuse.org/request/show/1307169
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=116
2025-09-26 08:31:28 +00:00
b4530e7ae2 Accepting request 1306567 from security:SELinux
- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation

OBS-URL: https://build.opensuse.org/request/show/1306567
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=54
2025-09-23 14:06:51 +00:00
f0c0f27586 Accepting request 1306566 from home:fbonazzi:branches:security:SELinux
- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation

OBS-URL: https://build.opensuse.org/request/show/1306566
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=114
2025-09-22 15:04:06 +00:00
21d7afe4fa Accepting request 1304046 from security:SELinux
- Move tests to a test multibuild flavor
- Update to version 4.6.0:
  - User Visible Changes
    * Add seinfo option to see roles allowed for a specified type.
    * Add sechecker module for asserting kernel modules are read-only.
    * Add support for the nlmsg extended permission.
  - Under The Hood Changes
    * Significant code quality and unit testing improvements.
    * Drop methods marked for deprecation.
  - Packaging Changes
    * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions

OBS-URL: https://build.opensuse.org/request/show/1304046
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=53
2025-09-12 19:09:02 +00:00
Hu
f9c827082e Accepting request 1304045 from home:fbonazzi:branches:security:SELinux
- Move tests to a test multibuild flavor

OBS-URL: https://build.opensuse.org/request/show/1304045
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=112
2025-09-11 09:22:59 +00:00
Hu
3f4297e3a4 Accepting request 1303538 from home:fbonazzi:branches:security:SELinux
- Update to version 4.6.0:
  - User Visible Changes
    * Add seinfo option to see roles allowed for a specified type.
    * Add sechecker module for asserting kernel modules are read-only.
    * Add support for the nlmsg extended permission.
  - Under The Hood Changes
    * Significant code quality and unit testing improvements.
    * Drop methods marked for deprecation.
  - Packaging Changes
    * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions

OBS-URL: https://build.opensuse.org/request/show/1303538
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=111
2025-09-10 08:25:09 +00:00
c604f8c6e7 Accepting request 1289308 from security:SELinux
- Drop legacy %python_build and %python_install macros and 
  switch to pyproject macros instead as requested by packaging team

OBS-URL: https://build.opensuse.org/request/show/1289308
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=52
2025-07-01 09:33:52 +00:00
Hu
010bd5e1d6 Accepting request 1289289 from home:cahu:branches:security:SELinux
- Drop legacy %python_build and %python_install macros and 
  switch to pyproject macros instead as requested by packaging team

OBS-URL: https://build.opensuse.org/request/show/1289289
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=109
2025-06-30 15:24:24 +00:00
278edcce7f Accepting request 1202534 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1202534
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=51
2024-09-23 13:18:45 +00:00
0030835c45 Accepting request 1201807 from home:fbonazzi:branches:security:SELinux
- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring

OBS-URL: https://build.opensuse.org/request/show/1201807
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=107
2024-09-23 06:21:25 +00:00
108a650a30 Accepting request 1178336 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1178336
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=50
2024-06-04 10:50:26 +00:00
Hu
2555057bbb Accepting request 1177606 from home:cahu:security:SELinux:fixleapbuild
- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5 
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build

OBS-URL: https://build.opensuse.org/request/show/1177606
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=105
2024-06-03 13:59:28 +00:00
d015c87174 Accepting request 1171339 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1171339
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=49
2024-05-02 21:42:58 +00:00
605bb7182d Accepting request 1171337 from home:fbonazzi:branches:security:SELinux
- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  -  Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests

OBS-URL: https://build.opensuse.org/request/show/1171337
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=103
2024-05-02 11:01:21 +00:00
6a181d131c Accepting request 1168880 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1168880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=48
2024-04-19 17:13:14 +00:00
c0eedad7be Accepting request 1168868 from home:cahu:security:SELinux:policytest2
- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311 
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch 
- Update to version 4.5.0:
  - User Visible Changes
    * Add graphical results for information flow analysis and domain
      transition analysis, available in apol, sedta, and seinfoflow.
    * Add tooltips, What's This?, and detail popups in apol to help
      cross-referencing query and analysis results along with
      context-sensitive help.
  - Under The Hood Changes
    * Rework apol to fully generate the UI programmatically.
    * Update apol to PyQt6
    * Replace deprecated uses of pkg_resources and distutils.
    * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
    * Python 3.10
    * NetworkX 2.6
    * PyQt6
    * Cython 0.29.14
  - New Dependencies
    * pygraphviz (for seinfoflow, sedta, apol)

OBS-URL: https://build.opensuse.org/request/show/1168868
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=101
2024-04-18 13:51:47 +00:00
94c41d06e0 Accepting request 1132435 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1132435
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=47
2023-12-11 20:49:47 +00:00
edf62e67bb Accepting request 1132434 from home:jsegitz:branches:security:SELinux
- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.

OBS-URL: https://build.opensuse.org/request/show/1132434
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=99
2023-12-11 08:28:18 +00:00
5aec49b9ec Accepting request 1115882 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1115882
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=46
2023-10-06 19:12:07 +00:00
Hu
10e681edc6 Accepting request 1115870 from home:cahu:branches:security:SELinux
Add missing reference bsc#1200649 to changelog

OBS-URL: https://build.opensuse.org/request/show/1115870
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=97
2023-10-05 15:22:53 +00:00
9c3a750639 Accepting request 1102155 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1102155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=45
2023-08-04 13:02:58 +00:00
b67adb8be8 Accepting request 1101719 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.

OBS-URL: https://build.opensuse.org/request/show/1101719
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=95
2023-08-03 11:19:58 +00:00
260b4f26fa Accepting request 1099111 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1099111
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=44
2023-07-19 17:09:45 +00:00
b32de8a89e Accepting request 1098586 from home:shunghsiyu:branches:security:SELinux
Add python3-setuptools as a runtime requirement of python3-setools (boo#1213305)

OBS-URL: https://build.opensuse.org/request/show/1098586
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=93
2023-07-17 15:00:50 +00:00
2978d56a3c Accepting request 1082988 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1082988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=43
2023-04-27 17:59:33 +00:00
fc744e54d5 Accepting request 1082976 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream

OBS-URL: https://build.opensuse.org/request/show/1082976
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=91
2023-04-26 11:36:22 +00:00
8f4d3a2a6c Accepting request 1063510 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1063510
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=42
2023-02-07 17:48:27 +00:00
39d7c96664 Accepting request 1063460 from home:fbonazzi:branches:security:SELinux
- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.

OBS-URL: https://build.opensuse.org/request/show/1063460
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=89
2023-02-06 19:11:22 +00:00
f859b2d4da Accepting request 1001362 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1001362
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=41
2022-09-07 09:05:22 +00:00
20573e42a6 Accepting request 1001361 from home:jsegitz:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/1001361
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=87
2022-09-06 06:46:14 +00:00
8d000653f5 Accepting request 1001198 from home:jsegitz:branches:security:SELinux
- Add make_networkx_optional.patch to cut down installation requirements

OBS-URL: https://build.opensuse.org/request/show/1001198
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=86
2022-09-05 06:41:50 +00:00
ac827008d7 Accepting request 1000891 from home:jsegitz:branches:security:SELinux
- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)

OBS-URL: https://build.opensuse.org/request/show/1000891
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=85
2022-09-02 12:53:45 +00:00
147aa60285 Accepting request 956807 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/956807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=40
2022-02-25 20:24:46 +00:00
24043dc960 Accepting request 956666 from home:shunghsiyu:branches:openSUSE:Factory
Make dependency on python3-networkx optional.

python3-network pulls in python38-matplotlib and python38-scipy, which then pulls in various mathematical and graphical libraries that are not needed on a minimal server environment (e.g. MicroOS).

While sedta will not work without python3-networkx, with this patch (already merged upstream https://github.com/SELinuxProject/setools/pull/68) it will emit an error message pointing user to install python3-networkx instead of throwing ImportError.

Further more, by default zypper install recommended packages as well, so general users are unlikely to even notice the difference. It only makes a difference if recommends are disabled; either explicitly by giving --no-recommends to zypper or setting solver.onlyRequires=true in zypp.conf, the latter is what MicroOS does.

OBS-URL: https://build.opensuse.org/request/show/956666
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=84
2022-02-22 15:38:03 +00:00
a70198125d Accepting request 898578 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/898578
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=39
2021-06-11 20:29:57 +00:00
b4032c25d8 Accepting request 898351 from home:dimstar:Factory
- Fix dependency of python3-setools: require python3, not python
  (which is python2).

  gh#openSUSE/python-rpm-macros#73
- Fix setools-gui dependencies, we are using python-qt5 and not
  * Fixed sediff issue where properties header would display when not
  * Added methods to TypeAttribute class to make it a complete Python
  * Genfscon now will look up classes rather than using fixed values
  * Support for Python 2.7 was dropped
- Deleted setools-3.3.7-libselinux-2.3.patch, we have a
- Add setools-swig-2x.patch: correctly detect swig 2.x

OBS-URL: https://build.opensuse.org/request/show/898351
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=82
2021-06-09 05:13:16 +00:00
ffe3e3f77e Accepting request 878583 from security:SELinux
big toolchain update, please stage together. so versions change, so this has high potential to break stuff. Probably best to stage it isolated

OBS-URL: https://build.opensuse.org/request/show/878583
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=38
2021-03-24 15:08:52 +00:00
ab50bbad06 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=80 2021-03-12 07:59:19 +00:00
0489bc2ef2 Accepting request 846882 from home:mcepl:branches:security:SELinux
Resubmit the update.

OBS-URL: https://build.opensuse.org/request/show/846882
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=79
2020-11-10 13:40:14 +00:00
d05e1e803d Accepting request 846428 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/846428
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=37
2020-11-09 12:56:32 +00:00
494f3ef843 Accepting request 845832 from home:mcepl:branches:security:SELinux
OBS-URL: https://build.opensuse.org/request/show/845832
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=77
2020-11-06 10:40:07 +00:00
bb33d53efa Accepting request 843145 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/843145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=36
2020-10-24 13:14:58 +00:00
cfc97abfc2 Accepting request 843140 from home:kukuk:selinux
- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not 
  tcl/tk

OBS-URL: https://build.opensuse.org/request/show/843140
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=75
2020-10-21 08:17:37 +00:00
a38de6dd89 Accepting request 823571 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/823571
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=35
2020-08-06 15:28:56 +00:00
e884e1ce86 Accepting request 823546 from home:kukuk:selinux
- python3-setools needs python3-networkx

OBS-URL: https://build.opensuse.org/request/show/823546
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=73
2020-07-30 12:23:01 +00:00
5e40b35481 Accepting request 791204 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/791204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=34
2020-04-05 18:49:56 +00:00
6034429f06 Accepting request 791203 from home:jsegitz:branches:security:SELinux
- Update to the upstream version 4.3.0:
  * Revised sediff method for TE rules. This drastically reduced memory
    and run time.
  * Added infiniband context support to seinfo, sediff, and apol.
  * Added apol configuration for location of Qt assistant.
  * Fixed sediff issue where properties header would display when not 
    requested.
  * Fixed sediff issue with type_transition file name comparison.
  * Fixed permission map socket sendto information flow direction.
  * Added methods to TypeAttribute class to make it a complete Python 
    collection.
  * Genfscon now will look up classes rather than using fixed values 
    which were dropped from libsepol
- Dropped python3.8-compat.patch

OBS-URL: https://build.opensuse.org/request/show/791203
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=71
2020-04-03 13:08:27 +00:00
73b6337c6f Accepting request 747293 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/747293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/setools?expand=0&rev=33
2019-11-13 12:13:37 +00:00
fdb9e98a89 Accepting request 744477 from home:mcepl:branches:security:SELinux
- Add python3.8-compat.patch to allow build with Python 3.8
  Still doesn't work perfectly because of gh#SELinuxProject/setools#31
  (I had to remove -Werror)

- Update to the upstream version 4.2.2:
  - Remove source policy references from man pages, as loading
    source policies is no longer supported.
  - Fixed a performance regression in alias loading after alias
    dereferencing fixes in 4.2.1.

OBS-URL: https://build.opensuse.org/request/show/744477
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=69
2019-11-11 07:10:34 +00:00