Accepting request 407325 from home:MargueriteSu:branches:security:SELinux

OBS-URL: https://build.opensuse.org/request/show/407325
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=30

checkpolicy-2.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:90632d11afecb66997971d4c5c5d70dfb02d3969ec610ee2918ba6df99c8207b
-size 64970

checkpolicy-2.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:33af9f3eb19135a7e6536ecd3fbb9686323000016cd51eb88346346ed7546001
+size 69857

checkpolicy.changes

@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Fri Jul  8 16:22:15 UTC 2016 - i@marguerite.su
+
+- update version 2.5
+  * Add neverallow support for ioctl extended permissions
+  * fix double free on name-based type transitions
+  * switch operations to extended perms
+  * policy_define.c: fix compiler warnings
+  * Remove uses of -Wno-return-type
+  * Fix -Wreturn-type issues
+  * dispol: display operations as ranges
+  * dispol: Extend to display operations
+  * Add support for ioctl command whitelisting
+  * Add option to write CIL policy
+  * Add device tree ocontext nodes to Xen policy
+  * Widen Xen IOMEM context entries
+  * Expand allowed character set in paths
+  * Fix precedence between number and filesystem tokens
+  * dispol/dismod fgets function warnings fix
+- changes in 2.4
+  * Fix bugs found by hardened gcc flags
+  * Add missing semicolon in cond_else parser rule
+  * Clear errno before call to strtol(3)
+  * Global C++11 compatibility
+  * Allow libsepol C++ static library on device
+
 -------------------------------------------------------------------
 Sun May 18 00:18:53 UTC 2014 - crrodriguez@opensuse.org
 

checkpolicy.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package checkpolicy
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,20 +16,19 @@
 #
 
 
-%define libsepol_ver 2.3
+%define libsepol_ver 2.5
+Name:           checkpolicy
+Version:        2.5
+Release:        0
+Summary:        SELinux policy compiler
+License:        GPL-2.0+
+Group:          Productivity/Security
+Url:            https://github.com/SELinuxProject/selinux
+Source:         https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/%{name}-%{version}.tar.gz
 BuildRequires:  bison
 BuildRequires:  flex-old
 BuildRequires:  libselinux-devel
 BuildRequires:  libsepol-devel-static >= %{libsepol_ver}
-
-Name:           checkpolicy
-Version:        2.3
-Release:        0
-Url:            http://userspace.selinuxproject.org/
-Summary:        SELinux policy compiler
-License:        GPL-2.0+
-Group:          Productivity/Security
-Source:         http://userspace.selinuxproject.org/releases/20140506/%{name}-%{version}.tar.gz
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -46,31 +45,29 @@ Multi-level Security.
 This package contains checkpolicy, the SELinux policy compiler. Only
 required for building policies.
 
-
-
 %prep
 %setup -q
 
 %build
-make clean
-make LIBDIR="%{_libdir}" CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
+make %{?_smp_mflags} clean
+make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" %{?_smp_mflags}
 cd test
-make LIBDIR="%{_libdir}" CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
+make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" %{?_smp_mflags}
 
 %install
-mkdir -p $RPM_BUILD_ROOT%{_bindir}
-make LIBDIR="%{_libdir}" DESTDIR="$RPM_BUILD_ROOT" install
-install test/dismod $RPM_BUILD_ROOT%{_bindir}/sedismod
-install test/dispol $RPM_BUILD_ROOT%{_bindir}/sedispol
+mkdir -p %{buildroot}%{_bindir}
+make LIBDIR="%{_libdir}" DESTDIR=%{buildroot} install
+install test/dismod %{buildroot}%{_bindir}/sedismod
+install test/dispol %{buildroot}%{_bindir}/sedispol
 
 %files
 %defattr(-,root,root)
 %doc COPYING ChangeLog
 %{_bindir}/checkpolicy
 %{_bindir}/checkmodule
-%{_mandir}/man8/checkpolicy.*
-%{_mandir}/man8/checkmodule.*
 %{_bindir}/sedismod
 %{_bindir}/sedispol
+%{_mandir}/man8/checkmodule.8%{ext_man}
+%{_mandir}/man8/checkpolicy.8%{ext_man}
 
 %changelog