2021-11-07 14:53:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Nov 7 13:23:22 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Update to release 2.5.3
|
|
|
|
|
* Update the syscall table for Linux v5.15
|
|
|
|
|
* Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
|
|
|
|
|
* Document that seccomp_rule_add() may return -EACCES
|
|
|
|
|
|
2021-09-13 10:31:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 13 08:19:30 UTC 2021 - Andreas Schwab <schwab@suse.de>
|
|
|
|
|
|
|
|
|
|
- Skip 11-basic-basic_errors test on qemu linux-user emulation
|
|
|
|
|
|
2021-09-01 20:57:44 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 1 18:48:49 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Update to release 2.5.2
|
|
|
|
|
* Update the syscall table for Linux v5.14-rc7
|
|
|
|
|
* Add a function, get_notify_fd(), to the Python bindings to
|
|
|
|
|
get the nofication file descriptor.
|
|
|
|
|
* Consolidate multiplexed syscall handling for all
|
|
|
|
|
architectures into one location.
|
|
|
|
|
* Add multiplexed syscall support to PPC and MIPS
|
|
|
|
|
* The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within
|
|
|
|
|
the kernel. libseccomp's fd notification logic was modified
|
|
|
|
|
to support the kernel's previous and new usage of
|
|
|
|
|
SECCOMP_IOCTL_NOTIF_ID_VALID.
|
|
|
|
|
|
2020-11-22 12:09:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Nov 21 16:59:46 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 2.5.1:
|
|
|
|
|
* Fix a bug where seccomp_load() could only be called once
|
|
|
|
|
* Change the notification fd handling to only request a notification fd if
|
|
|
|
|
* the filter has a _NOTIFY action
|
|
|
|
|
* Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
|
|
|
|
|
* Clarify the maintainers' GPG keys
|
|
|
|
|
- remove testsuite-riscv64-missing-syscalls.patch
|
|
|
|
|
|
2020-09-21 11:01:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 9 13:49:55 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Do not rely on gperf: pass GPERF=/bin/true to configure and
|
|
|
|
|
remove gperf BuildRequires. The syscalls.perf file it would
|
|
|
|
|
generate is part of the tarball already.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 8 15:00:01 UTC 2020 - Andreas Schwab <schwab@suse.de>
|
|
|
|
|
|
|
|
|
|
- testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on
|
|
|
|
|
riscv64
|
|
|
|
|
- Ignore failure of tests/52-basic-load on qemu linux-user emulation
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 8 14:00:13 UTC 2020 - Ralf Haferkamp <rhafer@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to release 2.5.0
|
|
|
|
|
* Add support for the seccomp user notifications, see the
|
|
|
|
|
seccomp_notify_alloc(3), seccomp_notify_receive(3),
|
|
|
|
|
seccomp_notify_respond(3) manpages for more information
|
|
|
|
|
* Add support for new filter optimization approaches, including a balanced
|
|
|
|
|
tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for
|
|
|
|
|
more information
|
|
|
|
|
* Add support for the 64-bit RISC-V architecture
|
|
|
|
|
* Performance improvements when adding new rules to a filter thanks to the
|
|
|
|
|
use of internal shadow transactions and improved syscall lookup tables
|
|
|
|
|
* Properly document the libseccomp API return values and include them in the
|
|
|
|
|
stable API promise
|
|
|
|
|
* Improvements to the s390 and s390x multiplexed syscall handling
|
|
|
|
|
* Multiple fixes and improvements to the libseccomp manpages
|
|
|
|
|
* Moved from manually maintained syscall tables to an automatically generated
|
|
|
|
|
syscall table in CSV format
|
|
|
|
|
* Update the syscall tables to Linux v5.8.0-rc5
|
|
|
|
|
* Python bindings and build now default to Python 3.x
|
|
|
|
|
* Improvements to the tests have boosted code coverage to over 93%
|
|
|
|
|
- libseccomp.keyring: replaced by Paul Moore <pmoore@redhat.com> key.
|
|
|
|
|
|
2020-06-05 15:20:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 5 13:12:29 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Update to release 2.4.3
|
|
|
|
|
* Add list of authorized release signatures to README.md
|
|
|
|
|
* Fix multiplexing issue with s390/s390x shm* syscalls
|
|
|
|
|
* Remove the static flag from libseccomp tools compilation
|
|
|
|
|
* Add define for __SNR_ppoll
|
|
|
|
|
* Fix potential memory leak identified by clang in the
|
|
|
|
|
scmp_bpf_sim tool
|
|
|
|
|
- Drop no-static.diff, libseccomp-fix_aarch64-test.patch,
|
|
|
|
|
SNR_ppoll.patch (merged)
|
|
|
|
|
|
2020-02-17 14:21:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 17 08:10:13 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add patch to fix ntpsec and others build (accidental drop of symbols):
|
|
|
|
|
* SNR_ppoll.patch
|
|
|
|
|
|
2020-01-07 17:29:38 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 7 15:07:23 UTC 2020 - Andreas Schwab <schwab@suse.de>
|
|
|
|
|
|
|
|
|
|
- Tests are passing on all architectures
|
|
|
|
|
|
2020-01-06 17:08:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 6 14:23:04 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Backport patch to fix test on aarch64:
|
|
|
|
|
* libseccomp-fix_aarch64-test.patch
|
|
|
|
|
|
2019-12-20 00:17:46 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 19 23:06:51 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Update to release 2.4.2
|
|
|
|
|
* Add support for io-uring related system calls
|
|
|
|
|
|
2019-08-11 14:44:42 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 24 09:37:26 UTC 2019 - Michel Normand <normand@linux.vnet.ibm.com>
|
|
|
|
|
|
|
|
|
|
- ignore make check error for ppc64/ppc64le, bypass boo#1142614
|
|
|
|
|
|
2019-03-17 11:08:41 +01:00
|
|
|
-------------------------------------------------------------------
|
2019-06-02 15:19:01 +02:00
|
|
|
Sun Jun 2 13:10:42 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.4.1
|
|
|
|
|
* Fix a BPF generation bug where the optimizer mistakenly
|
|
|
|
|
identified duplicate BPF code blocks.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-03-17 11:08:41 +01:00
|
|
|
Sun Mar 17 10:06:38 UTC 2019 - Marcus Meissner <meissner@suse.com>
|
|
|
|
|
|
2019-08-28 17:34:25 +02:00
|
|
|
- updated to 2.4.0 (bsc#1128828 CVE-2019-9893)
|
2019-03-17 11:08:41 +01:00
|
|
|
- Update the syscall table for Linux v5.0-rc5
|
|
|
|
|
- Added support for the SCMP_ACT_KILL_PROCESS action
|
|
|
|
|
- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute
|
|
|
|
|
- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension
|
|
|
|
|
- Added support for the parisc and parisc64 architectures
|
|
|
|
|
- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)
|
|
|
|
|
- Return -EDOM on an endian mismatch when adding an architecture to a filter
|
|
|
|
|
- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()
|
|
|
|
|
- Fix PFC generation when a syscall is prioritized, but no rule exists
|
|
|
|
|
- Numerous fixes to the seccomp-bpf filter generation code
|
|
|
|
|
- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
|
|
|
|
|
- Numerous tests added to the included test suite, coverage now at ~92%
|
|
|
|
|
- Update our Travis CI configuration to use Ubuntu 16.04
|
|
|
|
|
- Numerous documentation fixes and updates
|
|
|
|
|
- now gpg signed, added key of Paul Moore from keyserver.
|
|
|
|
|
|
2019-01-14 14:41:03 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 14 14:16:45 CET 2019 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Use %license instead of %doc [bsc#1082318]
|
|
|
|
|
|
2018-02-24 08:25:22 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Feb 24 02:53:57 UTC 2018 - asarai@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to release 2.3.3:
|
|
|
|
|
* Updated the syscall table for Linux v4.15-rc7
|
|
|
|
|
|
2017-05-22 00:31:54 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun May 21 22:31:41 UTC 2017 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Unconditionally rerun autoreconf because of patches
|
|
|
|
|
|
2017-05-21 20:47:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun May 21 18:07:04 UTC 2017 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to release 2.3.2:
|
|
|
|
|
* Achieved full compliance with the CII Best Practices program
|
|
|
|
|
* Added Travis CI builds to the GitHub repository
|
|
|
|
|
* Added code coverage reporting with the "--enable-code-coverage" configure
|
|
|
|
|
flag and added Coveralls to the GitHub repository
|
|
|
|
|
* Updated the syscall tables to match Linux v4.10-rc6+
|
|
|
|
|
* Support for building with Python v3.x
|
|
|
|
|
* Allow rules with the -1 syscall if the SCMP\_FLTATR\_API\_TSKIP attribute is
|
|
|
|
|
set to true
|
|
|
|
|
* Several small documentation fixes
|
|
|
|
|
- Remove service file as we are not based on git
|
|
|
|
|
|
2016-05-08 01:18:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 7 23:11:02 UTC 2016 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.3.1
|
|
|
|
|
* arch: fix the multiplexed ipc() syscalls
|
|
|
|
|
* s390: handle multiplexed syscalls correctly
|
|
|
|
|
- Remove 0001-arch-fix-a-number-of-32-bit-x86-failures-related-to-.patch,
|
|
|
|
|
0001-tests-replace-socket-syscall-references-in-15-basic-.patch
|
|
|
|
|
(fixed upstream)
|
|
|
|
|
|
2016-04-19 18:33:10 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 19 16:00:29 UTC 2016 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Add 0001-tests-replace-socket-syscall-references-in-15-basic-.patch
|
|
|
|
|
|
2016-04-11 01:15:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Apr 10 22:31:15 UTC 2016 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Add 0001-arch-fix-a-number-of-32-bit-x86-failures-related-to-.patch
|
|
|
|
|
|
2016-03-23 17:06:29 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 23 16:06:20 UTC 2016 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to final 2.3.0 release
|
2016-03-23 17:07:30 +01:00
|
|
|
- builderror-k316.diff: fixed upstream
|
2016-03-24 10:42:00 +01:00
|
|
|
- i586 testsuite fails, disable for now
|
2016-03-23 17:06:29 +01:00
|
|
|
|
2016-02-24 12:51:02 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 24 10:11:26 UTC 2016 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to git snapshot 2.3.0~g96
|
|
|
|
|
* have libseccomp build with newer linux-glibc-devel;
|
|
|
|
|
"multiplexed and direct socket syscalls"
|
|
|
|
|
- Drop libseccomp-s390x-support.patch, libseccomp-ppc64le.patch
|
|
|
|
|
(no longer apply - merged upstream)
|
2016-02-24 13:53:06 +01:00
|
|
|
- Add builderror-k316.diff
|
2016-02-24 12:51:02 +01:00
|
|
|
|
2015-08-31 17:19:59 +02:00
|
|
|
-------------------------------------------------------------------
|
2015-09-25 14:22:51 +02:00
|
|
|
Fri Sep 25 12:14:37 UTC 2015 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Add baselibs.conf: systemd-32bit-224+ links against
|
|
|
|
|
libseccomp.so.2.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-08-31 17:19:59 +02:00
|
|
|
Mon Aug 31 15:09:16 UTC 2015 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.2.3
|
|
|
|
|
* Fix a problem with the masked equality operator
|
|
|
|
|
* Fix a problem on x86_64/x32 involving invalid architectures
|
|
|
|
|
* Fix a problem with the ARM specific syscalls
|
|
|
|
|
|
2015-06-08 07:29:15 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 30 10:20:06 UTC 2015 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.2.1
|
|
|
|
|
* Fix a problem with syscall argument filtering on 64-bit systems
|
|
|
|
|
* Fix some problems with the 32-bit ARM syscall table
|
|
|
|
|
- Drop 0001-tools-add-the-missing-elf.h-header-file.patch,
|
|
|
|
|
libseccomp-arm-syscall-fixes.patch
|
|
|
|
|
(applied upstream)
|
|
|
|
|
|
2015-04-16 17:09:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 13 15:05:05 UTC 2015 - dvaleev@suse.com
|
|
|
|
|
|
2018-02-24 08:25:22 +01:00
|
|
|
- Fix ppc64le build: libseccomp-ppc64le.patch
|
2015-04-16 17:09:37 +02:00
|
|
|
|
2015-04-10 21:27:34 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 10 16:52:55 UTC 2015 - afaerber@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix some arm syscall constants
|
|
|
|
|
libseccomp-arm-syscall-fixes.patch
|
|
|
|
|
|
2015-03-29 01:34:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Mar 29 00:28:59 UTC 2015 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.2.0
|
|
|
|
|
* Added support for aarch64, mips, mips64, mips64n32 (BE/LE).
|
|
|
|
|
* Added support for using the new seccomp() syscall and the thread
|
|
|
|
|
sync functionality.
|
|
|
|
|
* Added Python bindings
|
|
|
|
|
- Remove 0001-build-use-autotools-as-build-system.patch
|
|
|
|
|
(merged). Add no-static.diff.
|
2015-03-29 15:11:52 +02:00
|
|
|
Add 0001-tools-add-the-missing-elf.h-header-file.patch
|
2015-03-29 01:34:37 +01:00
|
|
|
|
2014-07-12 13:47:13 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 12 11:26:10 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated ppc64le patch
|
|
|
|
|
|
2014-07-04 14:30:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 5 15:13:35 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
2014-07-04 16:06:57 +02:00
|
|
|
- libseccomp-s390x-support.patch:
|
|
|
|
|
support s390,s390x,ppc,ppc64 too. bnc#866526 (arm64 not yet done)
|
2014-07-04 14:30:55 +02:00
|
|
|
|
|
|
|
|
- disabled testsuite on the new platforms, as there
|
|
|
|
|
are still some failures.
|
|
|
|
|
|
2014-07-12 13:47:13 +02:00
|
|
|
s390 32bit: passed: 3823 / failed: 91 / errored: 43
|
|
|
|
|
|
2014-07-04 14:30:55 +02:00
|
|
|
s390x: passed: 2410 / failed: 879 / errored: 68
|
|
|
|
|
ppc64le: passed: 3914 / failed: 0 / errored: 43
|
|
|
|
|
|
2013-06-18 03:47:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 18 01:14:06 UTC 2013 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 2.1.0
|
|
|
|
|
* Add support for the x32 and ARM architectures
|
|
|
|
|
* More verbose PFC output, including translation of syscall
|
|
|
|
|
numbers to names
|
|
|
|
|
* Several assorted bugfixes affecting the seccomp BPF generation
|
|
|
|
|
* The syscall number/name resolver tool is now installed
|
|
|
|
|
* Fixes for the x86 multiplexed syscalls
|
|
|
|
|
* Additions to the API to better support non-native architecures
|
|
|
|
|
* Additions to the API to support multiple architecures in one filter
|
|
|
|
|
* Additions to the API to resolve syscall name/number mappings
|
|
|
|
|
- Remove 0001-build-use-ac-variables-in-pkgconfig-file.patch
|
|
|
|
|
(merged into 0001-build-use-autotools-as-build-system.patch)
|
|
|
|
|
|
2012-12-14 18:27:17 +01:00
|
|
|
-------------------------------------------------------------------
|
2012-12-21 06:48:35 +01:00
|
|
|
Fri Dec 21 05:47:29 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Make 0001-build-use-autotools-as-build-system.patch apply again
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-12-14 18:27:17 +01:00
|
|
|
Fri Dec 14 17:13:12 UTC 2012 - dvaleev@suse.com
|
|
|
|
|
|
|
|
|
|
- code is only x86 capable. Set ExclusiveArch: %{ix86} x86_64
|
|
|
|
|
|
2012-11-15 01:50:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 15 00:49:40 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Restore autotools patch (0001-build-use-autotools-as-build-system.patch)
|
|
|
|
|
that was previously embodied in the files in the tarball
|
|
|
|
|
|
2012-11-14 15:18:55 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 13 15:40:20 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 1.0.1 release
|
2012-11-15 01:49:33 +01:00
|
|
|
- The header file is now easier to use with C++ compilers
|
|
|
|
|
- Minor documentation fixes
|
|
|
|
|
- Minor memory leak fixes
|
|
|
|
|
- Corrected x86 filter generation on x86_64 systems
|
|
|
|
|
- Corrected problems with small filters and filters with arguments
|
2012-11-14 15:18:55 +01:00
|
|
|
- use public downloadable tarball
|
|
|
|
|
|
2012-09-08 09:16:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Sep 8 03:50:02 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Initial package (version 1.0.0) for build.opensuse.org
|
