- Update to version 4.6.0:
- User Visible Changes
* Add seinfo option to see roles allowed for a specified type.
* Add sechecker module for asserting kernel modules are read-only.
* Add support for the nlmsg extended permission.
- Under The Hood Changes
* Significant code quality and unit testing improvements.
* Drop methods marked for deprecation.
- Packaging Changes
* Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions
OBS-URL: https://build.opensuse.org/request/show/1303538
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=111
- Rework packaging to modern python packaging
- python-setools module now builds for python310, python311, python312
for tw and builds for python311 in 15.4 + 15.5
- setools-console scripts will use python311 as default in factory, 15.4
and 15.5
- moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
python-setools module into setools-console as it does not belong in there
and causes conflicts between python versions
- moved %{python_sitearch}/setoolsgui from setools-gui into the
python-setools module for multiversion build
OBS-URL: https://build.opensuse.org/request/show/1177606
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=105
- Fix build for 15.4 and 15.5:
- Minimum required python version is 3.11, so building only for python311
- Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch
- Update to version 4.5.0:
- User Visible Changes
* Add graphical results for information flow analysis and domain
transition analysis, available in apol, sedta, and seinfoflow.
* Add tooltips, What's This?, and detail popups in apol to help
cross-referencing query and analysis results along with
context-sensitive help.
- Under The Hood Changes
* Rework apol to fully generate the UI programmatically.
* Update apol to PyQt6
* Replace deprecated uses of pkg_resources and distutils.
* Begin adding unit tests for apol UI.
- Updated Dependencies
SETools now higher minimum versions of the following dependencies:
* Python 3.10
* NetworkX 2.6
* PyQt6
* Cython 0.29.14
- New Dependencies
* pygraphviz (for seinfoflow, sedta, apol)
OBS-URL: https://build.opensuse.org/request/show/1168868
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=101
- Update to version 4.4.1:
* Replace deprecated NetworkX function use in information flow and domain
transition analysis. This function was removed in NetworkX 3.0.
* Fix bug in apol copy and cut functions when copying from a tree view.
* Fix bug with extended permission set construction when a range includes
0x0.
* Add sesearch -Sp option for permission subset match.
* Fix error in man page description for sesearch -ep option.
* Improve output stability in constraint, common, class, role, and user
queries.
* Updated permission map.
* Fix bug in sechecker parsing of multiline values.
* Other code cleanups not visible to users.
OBS-URL: https://build.opensuse.org/request/show/1063460
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=89
Make dependency on python3-networkx optional.
python3-network pulls in python38-matplotlib and python38-scipy, which then pulls in various mathematical and graphical libraries that are not needed on a minimal server environment (e.g. MicroOS).
While sedta will not work without python3-networkx, with this patch (already merged upstream https://github.com/SELinuxProject/setools/pull/68) it will emit an error message pointing user to install python3-networkx instead of throwing ImportError.
Further more, by default zypper install recommended packages as well, so general users are unlikely to even notice the difference. It only makes a difference if recommends are disabled; either explicitly by giving --no-recommends to zypper or setting solver.onlyRequires=true in zypp.conf, the latter is what MicroOS does.
OBS-URL: https://build.opensuse.org/request/show/956666
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=84
- Fix dependency of python3-setools: require python3, not python
(which is python2).
gh#openSUSE/python-rpm-macros#73
- Fix setools-gui dependencies, we are using python-qt5 and not
* Fixed sediff issue where properties header would display when not
* Added methods to TypeAttribute class to make it a complete Python
* Genfscon now will look up classes rather than using fixed values
* Support for Python 2.7 was dropped
- Deleted setools-3.3.7-libselinux-2.3.patch, we have a
- Add setools-swig-2x.patch: correctly detect swig 2.x
OBS-URL: https://build.opensuse.org/request/show/898351
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=82
- Update to the upstream version 4.3.0:
* Revised sediff method for TE rules. This drastically reduced memory
and run time.
* Added infiniband context support to seinfo, sediff, and apol.
* Added apol configuration for location of Qt assistant.
* Fixed sediff issue where properties header would display when not
requested.
* Fixed sediff issue with type_transition file name comparison.
* Fixed permission map socket sendto information flow direction.
* Added methods to TypeAttribute class to make it a complete Python
collection.
* Genfscon now will look up classes rather than using fixed values
which were dropped from libsepol
- Dropped python3.8-compat.patch
OBS-URL: https://build.opensuse.org/request/show/791203
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=71
- Add python3.8-compat.patch to allow build with Python 3.8
Still doesn't work perfectly because of gh#SELinuxProject/setools#31
(I had to remove -Werror)
- Update to the upstream version 4.2.2:
- Remove source policy references from man pages, as loading
source policies is no longer supported.
- Fixed a performance regression in alias loading after alias
dereferencing fixes in 4.2.1.
OBS-URL: https://build.opensuse.org/request/show/744477
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/setools?expand=0&rev=69
