# build against xz?

%bcond_without xz

# just for giggles, option to build with internal Berkeley DB

%bcond_with int_bdb

# run internal testsuite?

%bcond_with check

# build with plugins?

%bcond_without plugins

# build with sanitizers?

%bcond_with sanitizer

# build with libarchive? (needed for rpm2archive)

%bcond_without libarchive

# build with libimaevm.so

%bcond_without libimaevm

# build with new db format

%bcond_with ndb

# build with zstd support?

%bcond_with zstd

# build with lmdb support?

%bcond_with lmdb

%if 0%{?rhel} > 7

# Disable python2 build by default

%bcond_with python2

%else

%bcond_without python2

%endif

%define rpmhome /usr/lib/rpm

%global rpmver 4.14.2

#global snapver rc2

%global rel 20

%global srcver %{version}%{?snapver:-%{snapver}}

%global srcdir %{?snapver:testing}%{!?snapver:%{name}-%(echo %{version} | cut -d'.' -f1-2).x}

%define bdbname libdb

%define bdbver 5.3.15

%define dbprefix db

Summary: The RPM package management system

Name: rpm

Version: %{rpmver}

Release: %{?snapver:0.%{snapver}.}%{rel}%{?dist}

Group: System Environment/Base

Url: http://www.rpm.org/

Source0: http://ftp.rpm.org/releases/%{srcdir}/%{name}-%{srcver}.tar.bz2

%if %{with int_bdb}

Source1: db-%{bdbver}.tar.gz

%else

BuildRequires: libdb-devel

%endif

# Disable autoconf config.site processing (#962837)

Patch1: rpm-4.11.x-siteconfig.patch

# Fedora specspo is setup differently than what rpm expects, considering

# this as Fedora-specific patch for now

Patch2: rpm-4.13.0-fedora-specspo.patch

# In current Fedora, man-pages pkg owns all the localized man directories

Patch3: rpm-4.9.90-no-man-dirs.patch

# gnupg2 comes installed by default, avoid need to drag in gnupg too

Patch4: rpm-4.8.1-use-gpg2.patch

# Temporary band-aid for rpm2cpio whining on payload size mismatch (#1142949)

Patch5: rpm-4.12.0-rpm2cpio-hack.patch

# Downstream-only patch:

# Add envvar that will be present during RPM build

# - Part of a Fedora Change for F28:

# - "Avoid /usr/bin/python in RPM build"

# - https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build

Patch7: rpm-4.14.1-Add-envvar-that-will-be-present-during-RPM-build.patch

# Patches already upstream:

Patch100: 0001-Fix-nasty-setperms-setugids-regression-in-4.14.2-RhB.patch

Patch101: rpm-4.14.2-RPMTAG_MODULARITYLABEL.patch

Patch102: 0001-Document-noverify-in-the-man-page-RhBug-1646458.patch

Patch103: 0001-Handle-unsupported-digests-the-same-as-disabled-ones.patch

Patch104: 0001-Mark-elements-with-associated-problems-as-failed.patch

Patch105: 0001-Fix-ancient-python-GIL-locking-bug-on-callback-RhBug.patch

Patch106: 0001-Fix-testing-for-wrong-variable-in-selinux-plugin-deb.patch

Patch107: 0001-Log-RPMLOG_ERR-level-messages-on-actual-errors-in-se.patch

Patch108: 0001-Only-read-through-payload-on-verify-if-actually-need.patch

Patch109: 0001-Make-rpmsign-exit-values-more-consistent-with-our-ot.patch

Patch110: 0002-Drop-internal-only-visibility-on-rpmvs-related-API.patch

Patch111: 0003-Verify-packages-before-signing-RhBug-1646388.patch

Patch112: 0001-Fix-FA_TOUCH-on-files-with-suid-sgid-bits-and-or-cap.patch

Patch113: 0001-Sort-list-of-hard-linked-files-in-find-debuginfo.sh-.patch

Patch114: 0001-Correct-rpm-ql-exit-value-when-optional-p-is-omitted.patch

Patch115: 0001-Show-list-of-files-only-once-when-use-rpm-ql-and-mul.patch

Patch116: 0001-Add-flag-to-use-strip-g-instead-of-full-strip-on-DSO.patch

Patch117: 0001-Fix-segfault-on-fingerprinting-symlink-round-RhBug-1.patch

Patch118: 0001-Fix-packages-getting-erased-on-failed-update-with-dn.patch

# Python 3 string API sanity

Patch500: 0001-In-Python-3-return-all-our-string-data-as-surrogate-.patch

Patch501: 0001-Return-NULL-string-as-None-from-utf8FromString.patch

# Temporary compat crutch, not upstream

Patch502: 0001-Monkey-patch-.decode-method-to-our-strings-as-a-temp.patch

# These are not yet upstream

# Audit support

Patch800: rpm-4.14.2-audit-3.patch

Patch906: rpm-4.7.1-geode-i686.patch

# Probably to be upstreamed in slightly different form

Patch907: rpm-4.13.90-ldflags.patch

# Switch off the part of the brp-python-bytecompile script

# that utilizes python2 to bytecompile .py files within

# non-standard paths.

Patch1000: disable-python-extra.patch

# Compile Python 3.6 stuff with /usr/libexec/platform-python instead of

# /usr/bin/python3.6

Patch1001: compile-with-Platform-Python-binary-where-relevant.patch

# make unversioned %%__python an error unless explicitly overridden

Patch1002: rpm-4.14.2-unversioned-python.patch

# Partially GPL/LGPL dual-licensed and some bits with BSD

# SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD 

License: GPLv2+

Requires: coreutils

%if %{without int_bdb}

# db recovery tools, rpmdb_util symlinks

Requires: %{_bindir}/%{dbprefix}_stat

%endif

Requires: popt%{_isa} >= 1.10.2.1

Requires: curl

%if %{without int_bdb}

BuildRequires: %{bdbname}-devel

%endif

%if %{with check}

BuildRequires: fakechroot gnupg2

%endif

# XXX generally assumed to be installed but make it explicit as rpm

# is a bit special...

BuildRequires: redhat-rpm-config

BuildRequires: gcc make

BuildRequires: gawk

BuildRequires: elfutils-devel >= 0.112

BuildRequires: elfutils-libelf-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: openssl-devel

# The popt version here just documents an older known-good version

BuildRequires: popt-devel >= 1.10.2

BuildRequires: file-devel

BuildRequires: gettext-devel

BuildRequires: ncurses-devel

BuildRequires: bzip2-devel >= 0.9.0c-2

BuildRequires: lua-devel >= 5.1

BuildRequires: libcap-devel

BuildRequires: libacl-devel

BuildRequires: audit-libs-devel

%if %{with xz}

BuildRequires: xz-devel >= 4.999.8

%endif

%if %{with libarchive}

BuildRequires: libarchive-devel

%endif

%if %{with zstd}

BuildRequires: libzstd-devel

%endif

%if %{with lmdb}

BuildRequires: lmdb-devel

%endif

# Only required by sepdebugcrcfix patch

BuildRequires: binutils-devel

# Couple of patches change makefiles so, require for now...

BuildRequires: automake libtool

%if %{with plugins}

BuildRequires: libselinux-devel

BuildRequires: dbus-devel

%endif

%if %{with sanitizer}

BuildRequires: libasan

BuildRequires: libubsan

#BuildRequires: liblsan

#BuildRequires: libtsan

%global sanitizer_flags -fsanitize=address -fsanitize=undefined

%endif

%if %{with libimaevm}

%if 0%{?fedora} >= 28 || 0%{?rhel} > 7

%global imadevname ima-evm-utils-devel

%else

%global imadevname ima-evm-utils

%endif

BuildRequires: %{imadevname} >= 1.0

%endif

%description

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

%package libs

Summary:  Libraries for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

# librpm uses cap_compare, introduced sometimes between libcap 2.10 and 2.16.

# A manual require is needed, see #505596

Requires: libcap%{_isa} >= 2.16

%description libs

This package contains the RPM shared libraries.

%package build-libs

Summary:  Libraries for building and signing RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: %{_bindir}/gpg2

%description build-libs

This package contains the RPM shared libraries for building and signing

packages.

%package devel

Summary:  Development files for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{_isa} = %{version}-%{release}

Requires: %{name}-build-libs%{_isa} = %{version}-%{release}

Requires: popt-devel%{_isa}

%description devel

This package contains the RPM C library and header files. These

development files will simplify the process of writing programs that

manipulate RPM packages and databases. These files are intended to

simplify the process of creating graphical package managers or any

other tools that need an intimate knowledge of RPM packages in order

to function.

This package should be installed if you want to develop programs that

will manipulate RPM packages and databases.

%package build

Summary: Scripts and executable programs used to build packages

Group: Development/Tools

Requires: rpm = %{version}-%{release}

Requires: elfutils >= 0.128 binutils

Requires: findutils sed grep gawk diffutils file patch >= 2.5

Requires: tar unzip gzip bzip2 cpio xz

%if %{with zstd}

Requires: zstd

%endif

Requires: pkgconfig >= 1:0.24

Requires: /usr/bin/gdb-add-index

# Technically rpmbuild doesn't require any external configuration, but

# creating distro-compatible packages does. To make the common case

# "just work" while allowing for alternatives, depend on a virtual

# provide, typically coming from redhat-rpm-config.

Requires: system-rpm-config

%description build

The rpm-build package contains the scripts and executable programs

that are used to build packages using the RPM Package Manager.

%package sign

Summary: Package signing support

Group: System Environment/Base

Requires: rpm-build-libs%{_isa} = %{version}-%{release}

%description sign

This package contains support for digitally signing RPM packages.

%if %{with python2}

%package -n python2-%{name}

Summary: Python 2 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python2-devel

%{?python_provide:%python_provide python2-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python = %{version}-%{release}

Obsoletes: %{name}-python < %{version}-%{release}

%description -n python2-%{name}

The python2-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 2

programs that will manipulate RPM packages and databases.

%endif # with python2

%package -n python3-%{name}

Summary: Python 3 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python3-devel

%{?python_provide:%python_provide python3-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python3 = %{version}-%{release}

Obsoletes: %{name}-python3 < %{version}-%{release}

%description -n python3-%{name}

The python3-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 3

programs that will manipulate RPM packages and databases.

%package apidocs

Summary: API documentation for RPM libraries

Group: Documentation

BuildArch: noarch

%description apidocs

This package contains API documentation for developing applications

that will manipulate RPM packages and databases.

%package cron

Summary: Create daily logs of installed packages.

Group: System Environment/Base

BuildArch: noarch

Requires: crontabs logrotate rpm = %{version}-%{release}

%description cron

This package contains a cron job which creates daily logs of installed

packages on a system.

%if %{with plugins}

%package plugin-selinux

Summary: Rpm plugin for SELinux functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: selinux-policy-base

%description plugin-selinux

%{summary}

%package plugin-syslog

Summary: Rpm plugin for syslog functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-syslog

%{summary}

%package plugin-systemd-inhibit

Summary: Rpm plugin for systemd inhibit functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-systemd-inhibit

This plugin blocks systemd from entering idle, sleep or shutdown while an rpm

transaction is running using the systemd-inhibit mechanism.

%package plugin-ima

Summary: Rpm plugin ima file signatures

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-ima

%{summary}

%package plugin-prioreset

Summary: Rpm plugin for resetting scriptlet priorities for SysV init

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-prioreset

%{summary}

Useful on legacy SysV init systems if you run rpm transactions with

nice/ionice priorities. Should not be used on systemd systems.

%endif # with plugins

%prep

%autosetup -n %{name}-%{srcver} %{?with_int_bdb:-a 1} -p1

%if %{with int_bdb}

ln -s db-%{bdbver} db

%endif

%build

%if %{without int_bdb}

#CPPFLAGS=-I%{_includedir}/db%{bdbver} 

#LDFLAGS=-L%{_libdir}/db%{bdbver}

%endif

CPPFLAGS="$CPPFLAGS -DLUA_COMPAT_APIINTCASTS"

CFLAGS="$RPM_OPT_FLAGS %{?sanitizer_flags} -DLUA_COMPAT_APIINTCASTS"

LDFLAGS="$LDFLAGS %{?__global_ldflags}"

export CPPFLAGS CFLAGS LDFLAGS

autoreconf -i -f

# Hardening hack taken from macro %%configure defined in redhat-rpm-config

for i in $(find . -name ltmain.sh) ; do

     %{__sed} -i.backup -e 's~compiler_flags=$~compiler_flags="%{_hardened_ldflags}"~' $i

done;

# Using configure macro has some unwanted side-effects on rpm platform

# setup, use the old-fashioned way for now only defining minimal paths.

./configure \

    --prefix=%{_usr} \

    --sysconfdir=%{_sysconfdir} \

    --localstatedir=%{_var} \

    --sharedstatedir=%{_var}/lib \

    --libdir=%{_libdir} \

    --build=%{_target_platform} \

    --host=%{_target_platform} \

    --with-vendor=redhat \

    %{!?with_int_bdb: --with-external-db} \

    %{!?with_plugins: --disable-plugins} \

    --with-lua \

    --with-selinux \

    --with-cap \

    --with-acl \

    %{?with_ndb: --with-ndb} \

    %{?with_libimaevm: --with-imaevm} \

    %{?with_zstd: --enable-zstd} \

    %{?with_lmdb: --enable-lmdb} \

    --enable-python \

    --with-crypto=openssl

make %{?_smp_mflags}

pushd python

%if %{with python2}

%{__python2} setup.py build

%endif # with python2

%{__python3} setup.py build

popd

%install

rm -rf $RPM_BUILD_ROOT

make DESTDIR="$RPM_BUILD_ROOT" install

# We need to build with --enable-python for the self-test suite, but we

# actually package the bindings built with setup.py (#531543#c26)

pushd python

%if %{with python2}

%{__python2} setup.py install --skip-build --root $RPM_BUILD_ROOT

%endif # with python2

%{__python3} setup.py install --skip-build --root $RPM_BUILD_ROOT

popd

# Save list of packages through cron

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily

install -m 755 scripts/rpm.daily ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/rpm

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

install -m 644 scripts/rpm.log ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/rpm

mkdir -p ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d

echo "r /var/lib/rpm/__db.*" > ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d/rpm.conf

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm

mkdir -p $RPM_BUILD_ROOT%{rpmhome}/macros.d

mkdir -p $RPM_BUILD_ROOT/var/lib/rpm

for dbi in \

    Basenames Conflictname Dirnames Group Installtid Name Obsoletename \

    Packages Providename Requirename Triggername Sha1header Sigmd5 \

    __db.001 __db.002 __db.003 __db.004 __db.005 __db.006 __db.007 \

    __db.008 __db.009

do

    touch $RPM_BUILD_ROOT/var/lib/rpm/$dbi

done

# plant links to relevant db utils as rpmdb_foo for documention compatibility

%if %{without int_bdb}

for dbutil in dump load recover stat upgrade verify

do

    ln -s ../../bin/%{dbprefix}_${dbutil} $RPM_BUILD_ROOT/%{rpmhome}/rpmdb_${dbutil}

done

%endif

%find_lang %{name}

find $RPM_BUILD_ROOT -name "*.la"|xargs rm -f

# These live in perl-generators and python-rpm-generators now

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{perldeps.pl,perl.*,pythond*}

rm -f $RPM_BUILD_ROOT/%{_fileattrsdir}/{perl*,python*}

# Axe unused cruft

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{tcl.req,osgideps.pl}

# Avoid unnecessary dependency on /usr/bin/python

chmod a-x $RPM_BUILD_ROOT/%{rpmhome}/python-macro-helper

%if %{with check}

%check

make check || cat tests/rpmtests.log

%endif

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post build-libs -p /sbin/ldconfig

%postun build-libs -p /sbin/ldconfig

%files -f %{name}.lang

%license COPYING

%doc CREDITS doc/manual/[a-z]*

/usr/lib/tmpfiles.d/rpm.conf

%dir %{_sysconfdir}/rpm

%attr(0755, root, root) %dir /var/lib/rpm

%attr(0644, root, root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/lib/rpm/*

%{_bindir}/rpm

%{_bindir}/rpm2archive

%{_bindir}/rpm2cpio

%{_bindir}/rpmdb

%{_bindir}/rpmkeys

%{_bindir}/rpmquery

%{_bindir}/rpmverify

%{_mandir}/man8/rpm.8*

%{_mandir}/man8/rpmdb.8*

%{_mandir}/man8/rpmkeys.8*

%{_mandir}/man8/rpm2cpio.8*

%{_mandir}/man8/rpm-misc.8*

# XXX this places translated manuals to wrong package wrt eg rpmbuild

%lang(fr) %{_mandir}/fr/man[18]/*.[18]*

%lang(ko) %{_mandir}/ko/man[18]/*.[18]*

%lang(ja) %{_mandir}/ja/man[18]/*.[18]*

%lang(pl) %{_mandir}/pl/man[18]/*.[18]*

%lang(ru) %{_mandir}/ru/man[18]/*.[18]*

%lang(sk) %{_mandir}/sk/man[18]/*.[18]*

%attr(0755, root, root) %dir %{rpmhome}

%{rpmhome}/macros

%{rpmhome}/macros.d

%{rpmhome}/rpmpopt*

%{rpmhome}/rpmrc

%{rpmhome}/rpmdb_*

%{rpmhome}/rpm.daily

%{rpmhome}/rpm.log

%{rpmhome}/rpm.supp

%{rpmhome}/rpm2cpio.sh

%{rpmhome}/tgpg

%{rpmhome}/python-macro-helper

%{rpmhome}/platform

%dir %{rpmhome}/fileattrs

%files libs

%{_libdir}/librpmio.so.*

%{_libdir}/librpm.so.*

%if %{with plugins}

%dir %{_libdir}/rpm-plugins

%files plugin-syslog

%{_libdir}/rpm-plugins/syslog.so

%files plugin-selinux

%{_libdir}/rpm-plugins/selinux.so

%files plugin-systemd-inhibit

%{_libdir}/rpm-plugins/systemd_inhibit.so

%{_mandir}/man8/rpm-plugin-systemd-inhibit.8*

%files plugin-ima

%{_libdir}/rpm-plugins/ima.so

%files plugin-prioreset

%{_libdir}/rpm-plugins/prioreset.so

%endif # with plugins

%files build-libs

%{_libdir}/librpmbuild.so.*

%{_libdir}/librpmsign.so.*

%files build

%{_bindir}/rpmbuild

%{_bindir}/gendiff

%{_bindir}/rpmspec

%{_mandir}/man1/gendiff.1*

%{_mandir}/man8/rpmbuild.8*

%{_mandir}/man8/rpmdeps.8*

%{_mandir}/man8/rpmspec.8*

%{rpmhome}/brp-*

%{rpmhome}/check-*

%{rpmhome}/debugedit

%{rpmhome}/sepdebugcrcfix

%{rpmhome}/find-debuginfo.sh

%{rpmhome}/find-lang.sh

%{rpmhome}/*provides*

%{rpmhome}/*requires*

%{rpmhome}/*deps*

%{rpmhome}/*.prov

%{rpmhome}/*.req

%{rpmhome}/config.*

%{rpmhome}/mkinstalldirs

%{rpmhome}/macros.p*

%{rpmhome}/fileattrs/*

%files sign

%{_bindir}/rpmsign

%{_mandir}/man8/rpmsign.8*

%if %{with python2}

%files -n python2-%{name}

%{python2_sitearch}/%{name}/

%{python2_sitearch}/%{name}-%{version}*.egg-info

%endif # with python2

%files -n python3-%{name}

%{python3_sitearch}/%{name}/

%{python3_sitearch}/%{name}-%{version}*.egg-info

%files devel

%{_mandir}/man8/rpmgraph.8*

%{_bindir}/rpmgraph

%{_libdir}/librp*[a-z].so

%{_libdir}/pkgconfig/%{name}.pc

%{_includedir}/%{name}/

%files cron

%{_sysconfdir}/cron.daily/rpm

%config(noreplace) %{_sysconfdir}/logrotate.d/rpm

%files apidocs

%license COPYING

%doc doc/librpm/html/*

%changelog

* Tue Jun 06 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-20

- Fix packages getting removed on failed update via dnf (#1710346)

* Tue Jun 04 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-19

- Fix rare segfault in fingerprinting symlink round (#1660232)

* Tue Jun 04 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-18

- Make use of unversioned %%__python macro an error (#1645663)

* Wed Apr 24 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-17

- Add flag to use strip -g instead of full strip on DSOs (#1689810)

* Wed Apr 24 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-16

- Sort list of hard linked files in find-debuginfo.sh (#1421272)

- Correct rpm -ql exit value when optional -p is omitted (#1680610)

- Show list of files only once when use rpm -ql and multiple rpm files (#1689898)

* Fri Apr 12 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-15

- Fix %_minimize_writes stripping suid/sgid bits and capabilities (#1690876)

* Thu Apr 11 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14

- Verify packages before signing (#1646388)

- Make rpmsign exist values more consistent with our other tools

* Thu Apr 11 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-13

- Report meaningful errors from SElinux plugin (#1679028)

* Thu Apr 11 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-12

- Fix an ancient GIL locking bug, required for the .decode() trick

* Thu Apr 11 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11

- Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)

- Add a .decode() method to returned Py3 strings for compatibility

* Wed Mar 06 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-10

- Return all string data as surrogate-escaped utf-8 in Python 3 (#1631292)

* Thu Dec 20 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-9

- Mark elements with associated problems as failed (needed for audit)

* Fri Dec 14 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-8

- Differentiate between install and update in audit log

* Mon Dec 03 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7

- Move python-macro-helper to main package where the macros are (#1651926)

- Document --noverify in the man page (#1646458)

- Handle unsupported digests the same as disabled ones (#1652529)

* Mon Dec 03 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-6

- Fix our SElinux dependencies (#1651926)

* Fri Nov 30 2018 Florian Festi <ffesti@redhat.com> - 4.14.2-5

- Add new tag MODULARITYLABEL (#1650287)

* Mon Oct 22 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-4

- Fix nasty --setperms/--setugids regression introduced in 4.14.2 (#1640470)

* Thu Sep 13 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-3

- Oops, op= was supposed to be first in the audit message (#1607612)

* Thu Sep 13 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-2

- Revised audit patch, log removals and verify failures too (#1607612)

* Mon Sep 03 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1

- Buildrequire audit-libs-devel to actually enable the feature (#1607612)

- Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)

* Fri Aug 10 2018 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1

- Update to rpm 4.14.2-rc2

- Fixes a regression in rpmlog error handling (#1597274)

- Fixes several resource leaks found by covscan (#1602681)

- Fixes DISTTAG not getting copied to source rpms (#1596193)

* Tue Aug 07 2018 Florian Festi <ffesti@redhat.com> - 4.14.2-0.rc1.5

- Wrap zstd Requires in build condition

* Thu Aug 02 2018 Florian Festi <ffesti@redhat.com> - 4.14.2-0.rc1.4

- Add log entries to audit system (#1607612)