2013-04-03 15:10:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 3 10:17:21 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- fix source url
|
|
|
|
|
- document changes in libselinux-rhat.patch from previous submission:
|
|
|
|
|
(most code of the removed code was integrated upstream)
|
|
|
|
|
* Add matchpathcon -P /etc/selinux/mls support by allowing users
|
|
|
|
|
to set alternate root
|
|
|
|
|
* Add new constant SETRANS_DIR which points to the directory
|
|
|
|
|
where mstransd can find the socket and libvirt can write its
|
|
|
|
|
translations files
|
|
|
|
|
|
2013-04-02 13:49:27 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 29 15:12:50 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
-update to 2.1.13
|
|
|
|
|
* audit2why: make sure path is nul terminated
|
|
|
|
|
* utils: new file context regex compiler
|
|
|
|
|
* label_file: use precompiled filecontext when possible
|
|
|
|
|
* do not leak mmapfd
|
|
|
|
|
* sefcontontext_compile: Add error handling to help debug problems in libsemanage.
|
|
|
|
|
* man: make selinux.8 mention service man pages
|
|
|
|
|
* audit2why: Fix segfault if finish() called twice
|
|
|
|
|
* audit2why: do not leak on multiple init() calls
|
|
|
|
|
* mode_to_security_class: interface to translate a mode_t in to a security class
|
|
|
|
|
* audit2why: Cleanup audit2why analysys function
|
|
|
|
|
* man: Fix program synopsis and function prototypes in man pages
|
|
|
|
|
* man: Fix man pages formatting
|
|
|
|
|
* man: Fix typo in man page
|
|
|
|
|
* man: Add references and man page links to _raw function variants
|
|
|
|
|
* Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
|
|
|
|
|
* man: context_new(3): fix the return value description
|
|
|
|
|
* selinux_status_open: handle error from sysconf
|
|
|
|
|
* selinux_status_open: do not leak statusfd on exec
|
|
|
|
|
* Fix errors found by coverity
|
|
|
|
|
* Change boooleans.subs to booleans.subs_dist.
|
|
|
|
|
* optimize set*con functions
|
|
|
|
|
* pkg-config do not specifc ruby version
|
|
|
|
|
* unmap file contexts on selabel_close()
|
|
|
|
|
* do not leak file contexts with mmap'd backend
|
|
|
|
|
* sefcontext_compile: do not leak fd on error
|
|
|
|
|
* matchmediacon: do not leak fd
|
|
|
|
|
* src/label_android_property: do not leak fd on error
|
|
|
|
|
|
2013-01-31 16:22:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 30 11:44:45 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.12
|
|
|
|
|
- added the recent libselinux-rhat.patch
|
|
|
|
|
* Add support for lxc_contexts_path
|
|
|
|
|
* utils: add service to getdefaultcon
|
|
|
|
|
* libsemanage: do not set soname needlessly
|
|
|
|
|
* libsemanage: remove PYTHONLIBDIR and ruby equivalent
|
|
|
|
|
* boolean name equivalency
|
|
|
|
|
* getsebool: support boolean name substitution
|
|
|
|
|
* Add man page for new selinux_boolean_sub function.
|
|
|
|
|
* expose selinux_boolean_sub
|
|
|
|
|
* matchpathcon: add -m option to force file type check
|
|
|
|
|
* utils: avcstat: clear sa_mask set
|
|
|
|
|
* seusers: Check for strchr failure
|
|
|
|
|
* booleans: initialize pointer to silence coveriety
|
|
|
|
|
* stop messages when SELinux disabled
|
|
|
|
|
* Ensure that we only close the selinux netlink socket once.
|
|
|
|
|
* improve the file_contexts.5 manual page
|
|
|
|
|
* Fortify source now requires all code to be compiled with -O flag
|
|
|
|
|
* asprintf return code must be checked
|
|
|
|
|
* avc_netlink_recieve handle EINTR
|
|
|
|
|
* audit2why: silence -Wmissing-prototypes warning
|
|
|
|
|
* libsemanage: remove build warning when build swig c files
|
|
|
|
|
* matchpathcon: bad handling of symlinks in /
|
|
|
|
|
* seusers: remove unused lineno
|
|
|
|
|
* seusers: getseuser: gracefully handle NULL service
|
|
|
|
|
* New Android property labeling backend
|
|
|
|
|
* label_android_property whitespace cleanups
|
|
|
|
|
* additional makefile support for rubywrap
|
|
|
|
|
* Remove jump over variable declaration
|
|
|
|
|
* Fix old style function definitions
|
|
|
|
|
* Fix const-correctness
|
|
|
|
|
* Remove unused flush_class_cache method
|
|
|
|
|
* Add prototype decl for destructor
|
|
|
|
|
* Add more printf format annotations
|
|
|
|
|
* Add printf format attribute annotation to die() method
|
|
|
|
|
* Fix const-ness of parameters & make usage() methods static
|
|
|
|
|
* Enable many more gcc warnings for libselinux/src/ builds
|
|
|
|
|
* utils: Enable many more gcc warnings for libselinux/utils builds
|
|
|
|
|
* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
|
|
|
|
|
* Ensure there is a prototype for 'matchpathcon_lib_destructor'
|
|
|
|
|
* Update Makefiles to handle /usrmove
|
|
|
|
|
* utils: Stop separating out matchpathcon as something special
|
|
|
|
|
* pkg-config to figure out where ruby include files are located
|
|
|
|
|
* build with either ruby 1.9 or ruby 1.8
|
|
|
|
|
* assert if avc_init() not called
|
|
|
|
|
* take security_deny_unknown into account
|
|
|
|
|
* security_compute_create_name(3)
|
|
|
|
|
* Do not link against python library, this is considered
|
|
|
|
|
* bad practice in debian
|
|
|
|
|
* Hide unnecessarily-exported library destructors
|
|
|
|
|
|
2013-01-08 11:50:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 7 22:34:03 UTC 2013 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Remove obsolete defines/sections
|
|
|
|
|
|
2012-12-14 15:01:01 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 11 16:15:52 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update selinux-ready script
|
|
|
|
|
* use -L when stat()ing /etc/selinux/config
|
|
|
|
|
* make sure that SELINUX isn't disabled in /etc/selinux/config
|
|
|
|
|
* look for either of /sys/fs/selinux and /selinux directory
|
|
|
|
|
* use systemctl to check for restorecond
|
|
|
|
|
* don't look for booleans file (deprecated)
|
|
|
|
|
|
2012-11-27 15:46:54 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 27 12:38:29 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update selinux-ready script
|
|
|
|
|
|
2012-07-25 13:15:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 25 11:15:02 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 2.1.9 again (see below)
|
|
|
|
|
|
2012-06-13 10:57:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 13 08:56:36 UTC 2012 - coolo@suse.com
|
|
|
|
|
|
|
|
|
|
- go back even more - everything else requires the full SELinux stack
|
|
|
|
|
(too late for 12.2)
|
|
|
|
|
|
2012-06-11 11:09:02 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 11 09:06:55 UTC 2012 - factory-maintainer@kulow.org
|
|
|
|
|
|
|
|
|
|
- revert back to 2.0.98 for 12.2
|
|
|
|
|
|
2012-06-04 15:46:09 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 1 18:34:04 CEST 2012 - mls@suse.de
|
|
|
|
|
|
|
|
|
|
- update to libselinux-2.1.9
|
|
|
|
|
* better man pages
|
|
|
|
|
* selinux_status interfaces
|
|
|
|
|
* simple interface for access checks
|
|
|
|
|
* multiple bug fixes
|
|
|
|
|
|
2011-10-06 17:08:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 5 15:09:25 UTC 2011 - uli@suse.com
|
|
|
|
|
|
|
|
|
|
- cross-build fix: use %__cc macro
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 28 06:38:35 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- use %_smp_mflags
|
|
|
|
|
|
2010-05-03 17:33:38 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 3 10:30:40 UTC 2010 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- don't package /var/run/setrans in libselinux1 package
|
|
|
|
|
- Feature#303793
|
|
|
|
|
- the directory will be created in initscript of mcstrans package
|
|
|
|
|
|
2010-04-24 12:21:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Apr 24 09:53:28 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- buildrequire pkg-config to fix provides
|
|
|
|
|
|
2010-04-09 09:41:21 +02:00
|
|
|
-------------------------------------------------------------------
|
2010-04-23 19:09:34 +02:00
|
|
|
Fri Apr 9 07:27:27 UTC 2010 - thomas@novell.com
|
|
|
|
|
|
|
|
|
|
- selinux-ready: added function to check for restorecond in
|
|
|
|
|
runlevel 3/5
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 8 06:37:34 UTC 2010 - thomas@novell.com
|
|
|
|
|
|
|
|
|
|
- selinux-ready: added functions for checking PAM config and
|
|
|
|
|
policy boolean init_upstart
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 7 13:26:59 UTC 2010 - thomas@novell.com
|
|
|
|
|
|
|
|
|
|
- selinux-ready: fixed init ramfs checking
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 7 12:59:41 UTC 2010 - thomas@novell.com
|
|
|
|
|
|
|
|
|
|
- added new selinux-ready script
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2010-03-12 17:35:22 +01:00
|
|
|
Thu Feb 25 14:57:16 UTC 2010 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.91
|
|
|
|
|
* changes too numerous to list
|
|
|
|
|
|
2010-01-14 15:19:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Dec 12 16:43:54 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- add baselibs.conf as a source
|
|
|
|
|
|
2009-07-24 17:24:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 24 17:09:50 CEST 2009 - thomas@novell.com
|
|
|
|
|
|
2010-03-12 17:35:22 +01:00
|
|
|
- updated selinux-ready script
|
2009-07-24 17:24:37 +02:00
|
|
|
|
2009-07-23 15:32:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 22 15:17:25 CEST 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- change libsepol-devel to libsepol-devel-static in dependencies
|
|
|
|
|
of python bindings
|
|
|
|
|
|
2009-07-03 16:04:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 1 12:26:48 CEST 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- put libsepol-devel back to Requires of libselinux-devel
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 29 21:24:16 CEST 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- added selinux-ready tool to selinux-tools package
|
|
|
|
|
|
2009-06-29 14:18:50 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 9 20:17:54 CEST 2009 - crrodriguez@suse.de
|
|
|
|
|
|
|
|
|
|
- remove static libraries
|
2009-07-03 16:04:45 +02:00
|
|
|
- libselinux-devel does not require libsepol-devel
|
2009-06-29 14:18:50 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 27 14:06:14 CEST 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.80
|
|
|
|
|
* deny_unknown wrapper function from KaiGai Kohei
|
|
|
|
|
* security_compute_av_flags API from KaiGai Kohei
|
|
|
|
|
* Netlink socket management and callbacks from KaiGai Kohei
|
|
|
|
|
* Netlink socket handoff patch from Adam Jackson
|
|
|
|
|
* AVC caching of compute_create results by Eric Paris
|
|
|
|
|
* fix incorrect conversion in discover_class code
|
|
|
|
|
|
2009-04-23 18:30:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 17 17:12:06 CEST 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fixed memory leak (memleak.patch)
|
|
|
|
|
|
2009-01-19 02:22:32 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 14 14:04:30 CET 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.77
|
|
|
|
|
* add new function getseuser which will take username and service
|
|
|
|
|
and return seuser and level; ipa will populate file in future
|
|
|
|
|
* change selinuxdefcon to return just the context by default
|
|
|
|
|
* fix segfault if seusers file does not work
|
|
|
|
|
* strip trailing / for matchpathcon
|
|
|
|
|
* fix restorecon python code
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 1 11:32:50 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.76
|
|
|
|
|
* allow shell-style wildcarding in X names
|
|
|
|
|
* add Restorecon/Install python functions
|
|
|
|
|
* correct message types in AVC log messages
|
|
|
|
|
* make matchpathcon -V pass mode
|
|
|
|
|
* add man page for selinux_file_context_cmp
|
|
|
|
|
* update flask headers from refpolicy trunk
|
|
|
|
|
|
2008-10-23 01:17:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 22 16:28:59 CEST 2008 - mrueckert@suse.de
|
|
|
|
|
|
|
|
|
|
- fix debug_packages_requires define
|
|
|
|
|
|
2008-09-24 00:33:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 23 12:51:10 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- require only version, not release [bnc#429053]
|
|
|
|
|
|
2008-09-05 21:50:58 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 2 12:09:22 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.71
|
|
|
|
|
* Add group support to seusers using %groupname syntax from Dan Walsh.
|
|
|
|
|
* Mark setrans socket close-on-exec from Stephen Smalley.
|
|
|
|
|
* Only apply nodups checking to base file contexts from Stephen Smalley.
|
2009-01-19 02:22:32 +01:00
|
|
|
* Merge ruby bindings from Dan Walsh.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 1 07:35:00 CEST 2008 - aj@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix build of debuginfo.
|
2008-09-05 21:50:58 +02:00
|
|
|
|
2008-08-22 19:31:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 22 14:45:29 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- added baselibs.conf file
|
|
|
|
|
- split bindings into separate subpackage (libselinux-bindings)
|
|
|
|
|
- split tools into separate subpackage (selinux-tools)
|
|
|
|
|
|
2008-08-03 04:41:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 1 17:32:20 CEST 2008 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- fix requires for debuginfo package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 15 16:26:31 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- initial version 2.0.67
|
|
|
|
|
* based on Fedora package by Dan Walsh <dwalsh@redhat.com>
|
|
|
|
|
|
