Blame SPECS/checkpolicy.spec

558c50
%define libselinuxver 3.3-1
558c50
%define libsepolver 3.3-1
558c50
558c50
Summary: SELinux policy compiler
558c50
Name: checkpolicy
558c50
Version: 3.3
558c50
Release: 1%{?dist}
558c50
License: GPLv2
558c50
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.3/checkpolicy-3.3.tar.gz
558c50
# $ git clone https://github.com/fedora-selinux/selinux.git
558c50
# $ cd selinux
558c50
# $ git format-patch -N 3.3 -- checkpolicy
558c50
# $ i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
558c50
# Patch list start
558c50
# Patch list end
558c50
BuildRequires: gcc
558c50
BuildRequires: make
558c50
BuildRequires: byacc bison flex flex-static libsepol-static >= %{libsepolver} libselinux-devel  >= %{libselinuxver} 
558c50
558c50
%description
558c50
Security-enhanced Linux is a feature of the Linux® kernel and a number
558c50
of utilities with enhanced security functionality designed to add
558c50
mandatory access controls to Linux.  The Security-enhanced Linux
558c50
kernel contains new architectural components originally developed to
558c50
improve the security of the Flask operating system. These
558c50
architectural components provide general support for the enforcement
558c50
of many kinds of mandatory access control policies, including those
558c50
based on the concepts of Type Enforcement®, Role-based Access
558c50
Control, and Multi-level Security.
558c50
558c50
This package contains checkpolicy, the SELinux policy compiler.  
558c50
Only required for building policies. 
558c50
558c50
%prep
558c50
%autosetup -p 2 -n checkpolicy-%{version}
558c50
558c50
%build
558c50
558c50
%set_build_flags
558c50
558c50
%make_build LIBDIR="%{_libdir}"
558c50
cd test
558c50
%make_build LIBDIR="%{_libdir}"
558c50
558c50
%install
558c50
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
558c50
%make_install LIBDIR="%{_libdir}"
558c50
install test/dismod ${RPM_BUILD_ROOT}%{_bindir}/sedismod
558c50
install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
558c50
558c50
%files
558c50
%{!?_licensedir:%global license %%doc}
558c50
%license COPYING
558c50
%{_bindir}/checkpolicy
558c50
%{_bindir}/checkmodule
558c50
%{_mandir}/man8/checkpolicy.8.gz
558c50
%{_mandir}/man8/checkmodule.8.gz
558c50
%{_mandir}/ru/man8/checkpolicy.8.gz
558c50
%{_mandir}/ru/man8/checkmodule.8.gz
558c50
%{_bindir}/sedismod
558c50
%{_bindir}/sedispol
558c50
558c50
%changelog
558c50
* Fri Oct 22 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-1
558c50
- SELinux userspace 3.3 release
558c50
558c50
* Mon Oct 11 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-0.rc3.1
558c50
- SELinux userspace 3.3-rc3 release
558c50
558c50
* Wed Sep 29 2021 Petr Lautrbach <plautrba@redhat.com> - 3.3-0.rc2.1
558c50
- SELinux userspace 3.3-rc2 release
558c50
558c50
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-4
558c50
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
558c50
  Related: rhbz#1991688
558c50
558c50
* Wed Jul 28 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-3
558c50
- Rebase on upstream commit 32611aea6543
558c50
558c50
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-2
558c50
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
558c50
558c50
* Mon Mar  8 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-1
558c50
- SELinux userspace 3.2 release
558c50
558c50
* Fri Feb  5 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-0.rc2.1
558c50
- SELinux userspace 3.2-rc2 release
558c50
558c50
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.rc1.1.1
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
558c50
558c50
* Thu Jan 21 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-0.rc1.1
558c50
- SELinux userspace 3.2-rc1 release
558c50
558c50
* Sun Nov  1 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-4
558c50
- Fix signed overflow caused by using (1 << 31) - 1
558c50
- Optimize storage of filename transitions
558c50
- Rebuild with libsepol.so.2
558c50
558c50
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.1-3
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
558c50
558c50
* Mon Jul 13 2020 Tom Stellard <tstellar@redhat.com> - 3.1-2
558c50
- Use make macros
558c50
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
558c50
558c50
* Fri Jul 10 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-1
558c50
- SELinux userspace 3.1 release
558c50
558c50
* Tue Jan 28 2020 Petr Lautrbach <plautrba@redhat.com> - 3.0-3
558c50
- Fix -fno-common issues discovered by GCC 10
558c50
558c50
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
558c50
558c50
* Fri Dec  6 2019 Petr Lautrbach <plautrba@redhat.com> - 3.0-1
558c50
- SELinux userspace 3.0 release
558c50
558c50
* Mon Nov 11 2019 Petr Lautrbach <plautrba@redhat.com> - 3.0-0.rc1.1
558c50
- SELinux userspace 3.0-rc1 release candidate
558c50
558c50
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
558c50
558c50
* Mon Mar 18 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-1
558c50
- SELinux userspace 2.9 release
558c50
558c50
* Mon Mar 11 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-0.rc2.1
558c50
- SELinux userspace 2.9-rc2 release
558c50
558c50
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9-0.rc1.1.1
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
558c50
558c50
* Fri Jan 25 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-0.rc1.1
558c50
- SELinux userspace 2.9-rc1 release
558c50
558c50
* Mon Jan 21 2019 Petr Lautrbach <plautrba@redhat.com> - 2.8-3
558c50
- Check the result value of hashtable_search
558c50
- Destroy the class datum if it fails to initialize
558c50
558c50
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.8-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
558c50
558c50
* Fri May 25 2018 Petr Lautrbach <plautrba@redhat.com> - 2.8-1
558c50
- SELinux userspace 2.8 release
558c50
558c50
* Tue May 15 2018 Petr Lautrbach <plautrba@workstation> - 2.8-0.rc3.1
558c50
- SELinux userspace 2.8-rc3 release candidate
558c50
558c50
* Mon Apr 23 2018 Petr Lautrbach <plautrba@redhat.com> - 2.8-0.rc1.1
558c50
- SELinux userspace 2.8-rc1 release candidate
558c50
558c50
* Wed Mar 21 2018 Petr Lautrbach <plautrba@redhat.com> - 2.7-7
558c50
- Add support for the SCTP portcon keyword
558c50
558c50
* Tue Mar 13 2018 Petr Lautrbach <plautrba@redhat.com> - 2.7-6
558c50
- build: follow standard semantics for DESTDIR and PREFIX
558c50
558c50
* Thu Feb 22 2018 Florian Weimer <fweimer@redhat.com> - 2.7-5
558c50
- Use LDFLAGS from redhat-rpm-config
558c50
558c50
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.7-4
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
558c50
558c50
* Wed Nov 22 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-3
558c50
- Rebuild with libsepol-2.7-3 and libselinux-2.7-6
558c50
558c50
* Fri Oct 20 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-2
558c50
- Rebuilt with libsepol-2.7-2
558c50
558c50
* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-1
558c50
- Update to upstream release 2017-08-04
558c50
558c50
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-3
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
558c50
558c50
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
558c50
558c50
* Wed Feb 15 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-1
558c50
- Update to upstream release 2016-10-14
558c50
558c50
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.5-9
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
558c50
558c50
* Mon Oct 03 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-8
558c50
- Add types associated to a role in the current scope when parsing
558c50
558c50
* Mon Aug 01 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-7
558c50
- Extend checkpolicy pathname matching
558c50
- Rebuilt with libsepol-2.5-9
558c50
558c50
* Mon Jun 27 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-6
558c50
- Fix typos in sedispol
558c50
558c50
* Thu Jun 23 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-5
558c50
- Set flex as default lexer
558c50
- Fix checkmodule output message
558c50
558c50
* Wed May 11 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-4
558c50
- Rebuilt with libsepol-2.5-6
558c50
558c50
* Fri Apr 29 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-3
558c50
- Build policy on systems not supporting DCCP protocol
558c50
- Fail if module name different than output base filename
558c50
558c50
* Fri Apr 08 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-2
558c50
- Add support for portcon dccp protocol
558c50
558c50
* Tue Feb 23 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-1
558c50
- Update to upstream release 2016-02-23
558c50
558c50
* Sun Feb 21 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-0.1.rc1
558c50
- Update to upstream rc1 release 2016-01-07
558c50
558c50
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4-2.1
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
558c50
558c50
* Tue Jul 21 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-1.1
558c50
- Update to 2.4 release
558c50
558c50
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-4
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
558c50
558c50
* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> - 2.3-3
558c50
- fix license handling
558c50
558c50
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
558c50
558c50
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
558c50
- Update to upstream 
558c50
	* Add Android support for building dispol.
558c50
	* Report source file and line information for neverallow failures.
558c50
	* Prevent incompatible option combinations for checkmodule.
558c50
	* Drop -lselinux from LDLIBS for test programs; not used.
558c50
	* Add debug feature to display constraints/validatetrans from Richard Haines.
558c50
558c50
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
558c50
- Update to upstream 
558c50
	* Fix hyphen usage in man pages from Laurent Bigonville.
558c50
	* handle-unknown / -U required argument fix from Laurent Bigonville.
558c50
	* Support overriding Makefile PATH and LIBDIR from Laurent Bigonville.
558c50
	* Support space and : in filenames from Dan Walsh.
558c50
558c50
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.12-5
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
558c50
558c50
* Tue Jul 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
558c50
- Fix a segmentation fault if the --handle-unknown option was set without
558c50
arguments.
558c50
- Thanks to Alexandre Rebert and his team at Carnegie Mellon University
558c50
for detecting this crash.
558c50
558c50
* Tue Mar 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
558c50
- ":" should be allowed for file trans names
558c50
558c50
* Tue Mar 12 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-2
558c50
- Space should be allowed for file trans names
558c50
558c50
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
558c50
- Update to upstream 
558c50
        * Fix errors found by coverity
558c50
        * implement default type policy syntax
558c50
        * Free allocated memory when clean up / exit.
558c50
558c50
* Sat Jan 5 2013 Dan Walsh <dwalsh@redhat.com> -  2.1.11-3
558c50
- Update to latest patches from eparis/Upstream
558c50
-   checkpolicy: libsepol: implement default type policy syntax
558c50
-   
558c50
-   We currently have a mechanism in which the default user, role, and range
558c50
-   can be picked up from the source or the target object.  This implements
558c50
-   the same thing for types.  The kernel will override this with type
558c50
-   transition rules and similar.  This is just the default if nothing
558c50
-   specific is given.
558c50
    
558c50
558c50
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
558c50
- Rebuild with fixed libsepol
558c50
558c50
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
558c50
- Update to upstream 
558c50
	* fd leak reading policy
558c50
	* check return code on ebitmap_set_bit
558c50
558c50
* Mon Jul 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
558c50
- Rebuild to grab latest libsepol
558c50
558c50
* Tue Jul 24 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
558c50
- Rebuild to grab latest libsepol
558c50
558c50
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.10-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
558c50
558c50
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
558c50
- Update to upstream 
558c50
	* sepolgen: We need to support files that have a + in them
558c50
	* Android/MacOS X build support
558c50
558c50
* Mon Apr 23 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-4
558c50
- Rebuild to get latest libsepol which fixes the file_name transition problems
558c50
558c50
* Tue Apr 17 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-3
558c50
- Recompile with libsepol that has support for ptrace_child
558c50
558c50
* Tue Apr 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
558c50
- Allow checkpolicy to use + in a file name
558c50
558c50
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
558c50
- Update to upstream 
558c50
	* implement new default labeling behaviors for usr, role, range
558c50
	* Fix dead links to www.nsa.gov/selinux
558c50
558c50
* Mon Jan 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
558c50
- Fix man page to link to www.nsa.giv/research/selinux
558c50
558c50
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.8-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
558c50
558c50
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
558c50
-Update to upstream
558c50
	* add ignoredirs config for genhomedircon
558c50
	* Fallback_user_level can be NULL if you are not using MLS
558c50
558c50
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-3
558c50
- default_rules should be optional
558c50
558c50
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-2
558c50
- Rebuild with latest libsepol
558c50
558c50
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
558c50
- Upgrade to upstream
558c50
	* dis* fixed signed vs unsigned errors
558c50
	* dismod: fix unused parameter errors
558c50
	* test: Makefile: include -W and -Werror
558c50
	* allow ~ in filename transition rules
558c50
- Allow policy to specify the source of target for generating the default user,role 
558c50
- or mls label for a new target.
558c50
558c50
* Mon Nov 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
558c50
- Allow ~ in a filename 
558c50
558c50
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
558c50
- Upgrade to upstream
558c50
	* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
558c50
	* drop libsepol dynamic link in checkpolicy
558c50
558c50
* Tue Sep 20 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
558c50
- Fix checkpolicy to ignore '"' in filename trans rules
558c50
558c50
* Mon Sep 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
558c50
-Update to upstream
558c50
	* Separate tunable from boolean during compile.
558c50
558c50
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-0
558c50
-Update to upstream
558c50
	* checkpolicy: fix spacing in output message
558c50
558c50
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.3-0
558c50
	* add missing ; to attribute_role_def
558c50
	*Redo filename/filesystem syntax to support filename trans
558c50
558c50
* Wed Aug 3 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
558c50
-Update to upstream
558c50
	* .gitignore changes
558c50
	* dispol output of role trans
558c50
	* man page update: build a module with an older policy version
558c50
558c50
* Thu Jul 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.1-0
558c50
-Update to upstream
558c50
	* Minor updates to filename trans rule output in dis{mod,pol}
558c50
558c50
* Thu Jul 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
558c50
-Update to upstream
558c50
558c50
* Mon May 23 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
558c50
-Update to upstream
558c50
	* Wrap file names in filename transitions with quotes by Steve Lawrence.
558c50
	* Allow filesystem names to start with a digit by James Carter.
558c50
	* Add support for using the last path compnent in type transitions by Eric
558c50
558c50
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.24-2
558c50
* Fixes for new role_transition class field by Eric Paris.
558c50
558c50
* Fri Apr 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.24-2
558c50
- Add "-" as a file type
558c50
558c50
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.24-1
558c50
-Update to upstream
558c50
	* Add new class field in role_transition by Harry Ciao.
558c50
558c50
* Mon Apr 11 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.23-5
558c50
- Fix type_transition to allow all files
558c50
558c50
* Tue Mar 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.23-4
558c50
- Patches from Eric Paris 
558c50
We just use random numbers to make menu selections.  Use #defines and
558c50
names that make some sense instead.
558c50
558c50
This patch adds support for using the last path component as part of the
558c50
information in making labeling decisions for new objects.  A example
558c50
rule looks like so:
558c50
558c50
type_transition unconfined_t etc_t:file system_conf_t eric;
558c50
558c50
This rule says if unconfined_t creates a file in a directory labeled
558c50
etc_t and the last path component is "eric" (no globbing, no matching
558c50
magic, just exact strcmp) it should be labeled system_conf_t.
558c50
558c50
The kernel and policy representation does not have support for such
558c50
rules in conditionals, and thus policy explicitly notes that fact if
558c50
such a rule is added to a conditional.
558c50
558c50
558c50
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.23-3
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
558c50
558c50
* Wed Jan 12 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
558c50
- Add James Carters Patch
558c50
  *This patch is needed because some filesystem names (such as 9p) start
558c50
  with a digit.
558c50
558c50
* Tue Dec 21 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
558c50
- Latest update from NSA
558c50
  * Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock
558c50
558c50
* Wed Dec 8 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-2
558c50
- Rebuild to make sure it will build in Fedora 
558c50
558c50
* Wed Jun 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
558c50
- Latest update from NSA
558c50
	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
558c50
- Allow policy version to be one number
558c50
558c50
* Mon May 3 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.21-2
558c50
- Fix checkmodule man page and usage statements
558c50
558c50
* Sun Nov 1 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
558c50
- Latest update from NSA
558c50
	* Add support for building Xen policies from Paul Nuzzi.
558c50
	* Add long options to checkpolicy and checkmodule by Guido
558c50
	  Trentalancia <guido@trentalancia.com>
558c50
558c50
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-3
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
558c50
558c50
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-2
558c50
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
558c50
558c50
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
558c50
- Latest update from NSA
558c50
	* Fix alias field in module format, caused by boundary format change
558c50
	  from Caleb Case.
558c50
558c50
* Fri Jan 30 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
558c50
- Latest update from NSA
558c50
	* Properly escape regex symbols in the lexer from Stephen Smalley.
558c50
	* Add bounds support from KaiGai Kohei.
558c50
558c50
* Tue Oct 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.16-4
558c50
558c50
* Mon Jul 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.16-3
558c50
- Rebuild with new libsepol
558c50
558c50
* Wed May 28 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.0.16-2
558c50
- fix license tag
558c50
558c50
* Wed May 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
558c50
- Latest update from NSA
558c50
	* Update checkpolicy for user and role mapping support from Joshua Brindle.
558c50
558c50
* Fri May 2 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
558c50
- Latest update from NSA
558c50
	* Fix for policy module versions that look like IPv4 addresses from Jim Carter.
558c50
	  Resolves bug 444451.
558c50
558c50
* Fri May 2 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.14-2
558c50
- Allow modules with 4 sections or more
558c50
558c50
* Thu Mar 27 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
558c50
- Latest update from NSA
558c50
	* Add permissive domain support from Eric Paris.
558c50
558c50
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
558c50
- Latest update from NSA
558c50
	* Split out non-grammar parts of policy_parse.yacc into
558c50
	  policy_define.c and policy_define.h from Todd C. Miller.
558c50
	* Initialize struct policy_file before using it, from Todd C. Miller.
558c50
	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.
558c50
558c50
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
558c50
- Latest update from NSA
558c50
	* Use yyerror2() where appropriate from Todd C. Miller.
558c50
- Build against latest libsepol
558c50
558c50
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.9-2
558c50
- Start shipping sedismod and sedispol
558c50
558c50
* Mon Feb 4 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
558c50
- Latest update from NSA
558c50
	* Update dispol for libsepol avtab changes from Stephen Smalley.
558c50
558c50
* Fri Jan 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.8-1
558c50
- Latest update from NSA
558c50
	* Deprecate role dominance in parser.
558c50
558c50
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.7-2
558c50
- Update to use libsepol-static library
558c50
558c50
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
558c50
- Latest update from NSA
558c50
	* Added support for policy capabilities from Todd Miller.
558c50
558c50
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
558c50
- Latest update from NSA
558c50
	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".
558c50
	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.
558c50
558c50
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
558c50
	* Merged handle unknown policydb flag support from Eric Paris.
558c50
	  Adds new command line options -U {allow, reject, deny} for selecting
558c50
	  the flag when a base module or kernel policy is built.
558c50
558c50
* Tue Aug 28 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 2.0.3-3
558c50
- Rebuild for selinux ppc32 issue.
558c50
558c50
* Mon Jun 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.3-2
558c50
- Rebuild with the latest libsepol
558c50
558c50
* Sun Jun 17 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
558c50
- Latest update from NSA
558c50
	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
558c50
	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
558c50
558c50
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
558c50
- Latest update from NSA
558c50
	* Merged checkmodule man page fix from Dan Walsh.
558c50
558c50
* Fri Mar 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-3
558c50
- Rebuild with new libsepol
558c50
558c50
* Wed Mar 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-2
558c50
- Rebuild with new libsepol
558c50
558c50
* Mon Nov 20 2006 Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
558c50
- Latest update from NSA
558c50
	* Merged patch to allow dots in class identifiers from Caleb Case.
558c50
558c50
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
558c50
- Latest update from NSA
558c50
	* Merged patch to use new libsepol error codes by Karl MacMillan.
558c50
	* Updated version for stable branch.
558c50
558c50
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
558c50
- Rebuild for new libraries
558c50
558c50
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
558c50
- Latest update from NSA
558c50
	* Collapse user identifiers and identifiers together.
558c50
558c50
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.32-1
558c50
- Latest update from NSA
558c50
	* Updated version for release.
558c50
558c50
* Thu Sep 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
558c50
- Latest update from NSA
558c50
	* Merged user and range_transition support for modules from 
558c50
	  Darrel Goeddel
558c50
558c50
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
558c50
- Latest update from NSA
558c50
	* merged range_transition enhancements and user module format
558c50
	  changes from Darrel Goeddel
558c50
	* Merged symtab datum patch from Karl MacMillan.
558c50
558c50
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.30.9-1.1
558c50
- rebuild
558c50
558c50
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.8-1
558c50
- Latest upgrade from NSA
558c50
	* Lindent.
558c50
	* Merged patch to remove TE rule conflict checking from the parser
558c50
	  from Joshua Brindle.  This can only be done properly by the 
558c50
	  expander.
558c50
	* Merged patch to make checkpolicy/checkmodule handling of
558c50
	  duplicate/conflicting TE rules the same as the expander 
558c50
	  from Joshua Brindle.
558c50
	* Merged optionals in base take 2 patch set from Joshua Brindle.
558c50
558c50
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
558c50
- Latest upgrade from NSA
558c50
	* Merged compiler cleanup patch from Karl MacMillan.
558c50
	* Merged fix warnings patch from Karl MacMillan.	
558c50
558c50
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
558c50
- Latest upgrade from NSA
558c50
	* Changed require_class to reject permissions that have not been
558c50
	  declared if building a base module.
558c50
558c50
* Tue Mar 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.3-1
558c50
- Latest upgrade from NSA
558c50
	* Fixed checkmodule to call link_modules prior to expand_module
558c50
	  to handle optionals.
558c50
	* Fixed require_class to avoid shadowing permissions already defined
558c50
	  in an inherited common definition.
558c50
558c50
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.1-2
558c50
- Rebuild with new libsepol
558c50
558c50
* Thu Mar 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.1-1
558c50
- Latest upgrade from NSA
558c50
	* Moved processing of role and user require statements to 2nd pass.
558c50
558c50
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.30-1
558c50
- Latest upgrade from NSA
558c50
	* Updated version for release.
558c50
	* Fixed bug in role dominance (define_role_dom).
558c50
558c50
* Fri Feb 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.4-1
558c50
- Latest upgrade from NSA
558c50
	* Added a check for failure to declare each sensitivity in
558c50
	  a level definition.
558c50
	* Changed to clone level data for aliased sensitivities to
558c50
	  avoid double free upon sens_destroy.  Bug reported by Kevin
558c50
	  Carr of Tresys Technology.
558c50
558c50
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.2-1
558c50
- Latest upgrade from NSA
558c50
	* Merged optionals in base patch from Joshua Brindle.
558c50
558c50
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.1-1.2
558c50
- Need to build againi
558c50
558c50
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.1-1.1
558c50
- bump again for double-long bug on ppc(64)
558c50
558c50
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
558c50
- Latest upgrade from NSA
558c50
	* Merged sepol_av_to_string patch from Joshua Brindle.
558c50
558c50
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.28-5.1
558c50
- rebuilt for new gcc4.1 snapshot and glibc changes
558c50
558c50
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.28-5
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.28-5
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.28-4
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.28-3
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Fri Dec 16 2005 Dan Walsh <dwalsh@redhat.com> 1.28-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
558c50
- rebuilt
558c50
558c50
* Fri Dec 9 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
558c50
- Latest upgrade from NSA
558c50
558c50
* Sun Dec 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
558c50
- Latest upgrade from NSA
558c50
	* Merged checkmodule man page from Dan Walsh, and edited it.
558c50
558c50
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1
558c50
- Latest upgrade from NSA
558c50
	* Added error checking of all ebitmap_set_bit calls for out of
558c50
	  memory conditions.
558c50
	* Merged removal of compatibility handling of netlink classes
558c50
	  (requirement that policies with newer versions include the
558c50
	   netlink class definitions, remapping of fine-grained netlink
558c50
	   classes in newer source policies to single netlink class when
558c50
	   generating older policies) from George Coker.
558c50
558c50
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-7
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-1
558c50
- Latest upgrade from NSA
558c50
	* Merged dismod fix from Joshua Brindle.
558c50
558c50
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.16-1
558c50
- Latest upgrade from NSA
558c50
	* Removed obsolete cond_check_type_rules() function and call and 
558c50
	  cond_optimize_lists() call from checkpolicy.c; these are handled
558c50
	  during parsing and expansion now.
558c50
	* Updated calls to expand_module for interface change.
558c50
	* Changed checkmodule to verify that expand_module succeeds 
558c50
	  when building base modules.
558c50
	* Merged module compiler fixes from Joshua Brindle.
558c50
	* Removed direct calls to hierarchy_check_constraints() and 
558c50
	  check_assertions() from checkpolicy since they are now called 
558c50
	  internally by expand_module().
558c50
558c50
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1
558c50
- Latest upgrade from NSA
558c50
	* Updated for changes to sepol policydb_index_others interface.
558c50
558c50
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.10-1
558c50
- Latest upgrade from NSA
558c50
	* Updated for changes to sepol expand_module and link_modules interfaces.
558c50
* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-1
558c50
- Latest upgrade from NSA
558c50
	* Merged support for require blocks inside conditionals from
558c50
	Joshua Brindle (Tresys).
558c50
558c50
* Wed Oct 12 2005 Karsten Hopp <karsten@redhat.de> 1.27.8-2
558c50
- add buildrequirement for libselinux-devel for dispol
558c50
558c50
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.8-1
558c50
- Latest upgrade from NSA
558c50
	* Updated for changes to libsepol.
558c50
558c50
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1
558c50
- Latest upgrade from NSA
558c50
	* Merged several bug fixes from Joshua Brindle (Tresys).
558c50
558c50
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
558c50
- Latest upgrade from NSA
558c50
	* Merged MLS in modules patch from Joshua Brindle (Tresys).
558c50
558c50
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-1
558c50
- Latest upgrade from NSA
558c50
	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).
558c50
558c50
* Tue Sep 27 2005 Dan Walsh <dwalsh@redhat.com> 1.27.4-1
558c50
- Latest upgrade from NSA
558c50
	* Merged bugfix for dup role transition error messages from
558c50
	Karl MacMillan (Tresys).
558c50
558c50
* Fri Sep 23 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
558c50
- Latest upgrade from NSA
558c50
	* Merged policyver/modulever patches from Joshua Brindle (Tresys).
558c50
558c50
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1
558c50
- Latest upgrade from NSA
558c50
	* Fixed parse_categories handling of undefined category.
558c50
558c50
* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Sat Sep 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1
558c50
- Latest upgrade from NSA
558c50
	* Merged bug fix for role dominance handling from Darrel Goeddel (TCS). 
558c50
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-1
558c50
- Latest upgrade from NSA
558c50
	* Updated version for release.
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-3
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-2
558c50
- Rebuild to get latest libsepol
558c50
558c50
* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-1
558c50
- Update to NSA Release
558c50
	* Fixed handling of validatetrans constraint expressions.
558c50
	Bug reported by Dan Walsh for checkpolicy -M.
558c50
558c50
* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-2
558c50
- Fix mls crash
558c50
558c50
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-1
558c50
- Update to NSA Release
558c50
	* Merged use-after-free fix from Serge Hallyn (IBM).  
558c50
	  Bug found by Coverity.
558c50
558c50
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.10-1
558c50
- Update to NSA Release
558c50
	* Fixed further memory leaks found by valgrind.
558c50
	* Changed checkpolicy to destroy the policydbs prior to exit
558c50
	  to allow leak detection.
558c50
	* Fixed several memory leaks found by valgrind.
558c50
558c50
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-3
558c50
- Rebuild to get latest libsepol changes
558c50
558c50
* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-2
558c50
- Rebuild to get latest libsepol changes
558c50
558c50
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-1
558c50
- Update to NSA Release
558c50
	* Updated checkpolicy and dispol for the new avtab format.
558c50
	  Converted users of ebitmaps to new inline operators.
558c50
  	  Note:  The binary policy format version has been incremented to 
558c50
	  version 20 as a result of these changes.  To build a policy
558c50
	  for a kernel that does not yet include these changes, use
558c50
	  the -c 19 option to checkpolicy.
558c50
	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
558c50
	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).
558c50
558c50
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
558c50
- Update to NSA Release
558c50
	* Fixed call to hierarchy checking code to pass the right policydb.
558c50
	* Merged patch to update dismod for the relocation of the
558c50
	  module read/write code from libsemanage to libsepol, and
558c50
	  to enable build of test subdirectory from Jason Tang (Tresys).
558c50
558c50
* Thu Jul 28 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
558c50
- Update to NSA Release
558c50
	* Merged hierarchy check fix from Joshua Brindle (Tresys).
558c50
558c50
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
558c50
- Update to NSA Release
558c50
	* Merged loadable module support from Tresys Technology.
558c50
	* Merged patch to prohibit the use of * and ~ in type sets 
558c50
	  (other than in neverallow statements) and in role sets
558c50
	  from Joshua Brindle (Tresys).
558c50
	* Updated version for release.
558c50
558c50
* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23-4-1
558c50
- Update to NSA Release
558c50
	* Merged cleanup patch from Dan Walsh.
558c50
558c50
* Thu May 19 2005 Dan Walsh <dwalsh@redhat.com> 1.23-3-1
558c50
- Update to NSA Release
558c50
	* Added sepol_ prefix to Flask types to avoid namespace
558c50
	  collision with libselinux.
558c50
558c50
* Sat May 7 2005 Dan Walsh <dwalsh@redhat.com> 1.23-2-1
558c50
- Update to NSA Release
558c50
	* Merged identifier fix from Joshua Brindle (Tresys).
558c50
558c50
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23,1-1
558c50
	* Merged hierarchical type/role patch from Tresys Technology.
558c50
	* Merged MLS fixes from Darrel Goeddel of TCS.
558c50
558c50
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-1
558c50
- Update to NSA Release
558c50
558c50
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-2
558c50
- Rebuild for FC4
558c50
558c50
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-1
558c50
	* Merged define_user() cleanup patch from Darrel Goeddel (TCS).
558c50
	* Moved genpolusers utility to libsepol.
558c50
	* Merged range_transition support from Darrel Goeddel (TCS).
558c50
558c50
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.2-1
558c50
- Latest from NSA
558c50
	* Changed relabel Makefile target to use restorecon.
558c50
558c50
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-1
558c50
- Latest from NSA
558c50
	* Merged enhanced MLS support from Darrel Goeddel (TCS).
558c50
558c50
* Fri Jan 7 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-1
558c50
- Update for version increase at NSA
558c50
558c50
* Mon Dec 20 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
558c50
- Latest from NSA
558c50
	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
558c50
	* Changed genpolusers to handle multiple user config files.
558c50
	* Merged nodecon ordering patch from Chad Hanson of TCS.
558c50
558c50
* Thu Nov 11 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-1
558c50
- Latest from NSA
558c50
	* Merged nodecon ordering patch from Chad Hanson of TCS.
558c50
558c50
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-1
558c50
- Latest from NSA
558c50
	* MLS build fix.
558c50
558c50
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-1
558c50
- Latest from NSA
558c50
	* Fixed Makefile dependencies (Chris PeBenito).
558c50
558c50
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.4-1
558c50
- Latest from NSA
558c50
	* Fixed Makefile dependencies (Chris PeBenito).
558c50
558c50
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-1
558c50
- Latest from NSA
558c50
	* Merged fix for role dominance ordering issue from Chad Hanson of TCS.
558c50
558c50
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.2-1
558c50
- Latest from NSA
558c50
558c50
* Thu Aug 26 2004 Dan Walsh <dwalsh@redhat.com> 1.16.3-1
558c50
- Fix NSA package to not include y.tab files.
558c50
558c50
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.16.2-1
558c50
- Latest from NSA
558c50
- Allow port ranges to overlap
558c50
558c50
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.16.1-1
558c50
- Latest from NSA
558c50
558c50
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.6-1
558c50
- Latest from NSA
558c50
558c50
* Fri Aug 13 2004 Dan Walsh <dwalsh@redhat.com> 1.15.5-1
558c50
- Latest from NSA
558c50
558c50
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 1.15.4-1
558c50
- Latest from NSA
558c50
558c50
* Sat Aug 7 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
558c50
- Latest from NSA
558c50
558c50
* Wed Aug 4 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
558c50
- Latest from NSA
558c50
558c50
* Sat Jul 31 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
558c50
- Latest from NSA
558c50
558c50
* Tue Jul 27 2004 Dan Walsh <dwalsh@redhat.com> 1.14.2-1
558c50
- Latest from NSA
558c50
558c50
* Wed Jun 30 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-1
558c50
- Latest from NSA
558c50
558c50
* Fri Jun 18 2004 Dan Walsh <dwalsh@redhat.com> 1.12.2-1
558c50
- Latest from NSA
558c50
558c50
* Thu Jun 17 2004 Dan Walsh <dwalsh@redhat.com> 1.12.1-1
558c50
- Update to latest from NSA
558c50
558c50
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.12-1
558c50
- Update to latest from NSA
558c50
558c50
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.10-5
558c50
- Add nlclass patch
558c50
558c50
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
558c50
- rebuilt
558c50
558c50
* Fri Jun 4 2004 Dan Walsh <dwalsh@redhat.com> 1.10-3
558c50
- Add BuildRequires flex
558c50
558c50
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-2
558c50
- Add BuildRequires byacc
558c50
558c50
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-1
558c50
- Upgrade to the latest from NSA
558c50
558c50
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.8-1
558c50
- Upgrade to the latest from NSA
558c50
558c50
* Tue Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
558c50
- Upgrade to the latest from NSA
558c50
558c50
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
558c50
- rebuilt
558c50
558c50
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
558c50
- Add typealias patch
558c50
558c50
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
558c50
- Update excludetypes with negset-final patch
558c50
558c50
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-4
558c50
- Add excludetypes patch
558c50
558c50
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-3
558c50
- Add Colin Walter's lineno patch
558c50
558c50
* Wed Jan 7 2004 Dan Walsh <dwalsh@redhat.com> 1.4-2
558c50
- Remove check for roles transition
558c50
558c50
* Sat Dec 6 2003 Dan Walsh <dwalsh@redhat.com> 1.4-1
558c50
- upgrade to 1.4
558c50
558c50
* Wed Oct 1 2003 Dan Walsh <dwalsh@redhat.com> 1.2-1
558c50
- upgrade to 1.2
558c50
558c50
* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com> 1.1-2
558c50
- upgrade to 1.1
558c50
558c50
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
558c50
- Initial version