0e42ca
%global with_python3 1
0e42ca
0e42ca
%define ruby_inc %(pkg-config --cflags ruby)
0e42ca
%define ruby_sitearch %(ruby -rrbconfig -e "puts RbConfig::CONFIG['vendorarchdir']")
0e42ca
%define libsepolver 2.5-10
0e42ca
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
0e42ca
0e42ca
Summary: SELinux library and simple utilities
0e42ca
Name: libselinux
0e42ca
Version: 2.5
0e42ca
Release: 15%{?dist}
0e42ca
License: Public Domain
0e42ca
Group: System Environment/Libraries
0e42ca
# https://github.com/SELinuxProject/selinux/wiki/Releases
0e42ca
Source: https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/libselinux-2.5.tar.gz
0e42ca
Source1: selinuxconlist.8
0e42ca
Source2: selinuxdefcon.8
0e42ca
Url: https://github.com/SELinuxProject/selinux/wiki
0e42ca
# HEAD 0713edcc60b6c9e487f149af8ecc66206c9274b6
0e42ca
Patch1: libselinux-rhel.patch
0e42ca
BuildRequires: pkgconfig python python-devel ruby-devel ruby libsepol-static >= %{libsepolver} swig pcre-devel xz-devel
0e42ca
%if 0%{?with_python3}
0e42ca
BuildRequires: python3 python3-devel
0e42ca
%endif # if with_python3
0e42ca
Requires: libsepol%{?_isa} >= %{libsepolver} pcre
0e42ca
Conflicts: filesystem < 3
0e42ca
Conflicts: selinux-policy-base < 3.13.1-66
0e42ca
Conflicts: systemd < 219-20
0e42ca
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
0e42ca
0e42ca
%description
0e42ca
Security-enhanced Linux is a feature of the Linux® kernel and a number
0e42ca
of utilities with enhanced security functionality designed to add
0e42ca
mandatory access controls to Linux.  The Security-enhanced Linux
0e42ca
kernel contains new architectural components originally developed to
0e42ca
improve the security of the Flask operating system. These
0e42ca
architectural components provide general support for the enforcement
0e42ca
of many kinds of mandatory access control policies, including those
0e42ca
based on the concepts of Type Enforcement®, Role-based Access
0e42ca
Control, and Multi-level Security.
0e42ca
0e42ca
libselinux provides an API for SELinux applications to get and set
0e42ca
process and file security contexts and to obtain security policy
0e42ca
decisions.  Required for any applications that use the SELinux API.
0e42ca
0e42ca
%package utils
0e42ca
Summary: SELinux libselinux utilies
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux%{?_isa} = %{version}-%{release}
0e42ca
0e42ca
%description utils
0e42ca
The libselinux-utils package contains the utilities
0e42ca
0e42ca
%package python
0e42ca
Summary: SELinux python bindings for libselinux
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux%{?_isa} = %{version}-%{release}
0e42ca
0e42ca
%description python
0e42ca
The libselinux-python package contains the python bindings for developing 
0e42ca
SELinux applications. 
0e42ca
0e42ca
%if 0%{?with_python3}
0e42ca
%package python3
0e42ca
Summary: SELinux python 3 bindings for libselinux
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux%{?_isa} = %{version}-%{release}
0e42ca
Provides: python3-%{name} = %{version}-%{release}
0e42ca
Provides: python3-%{name}{?_isa} = %{version}-%{release}
0e42ca
0e42ca
%description python3
0e42ca
The libselinux-python3 package contains python 3 bindings for developing
0e42ca
SELinux applications. 
0e42ca
%endif # with_python3
0e42ca
0e42ca
%package ruby
0e42ca
Summary: SELinux ruby bindings for libselinux
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux%{?_isa} = %{version}-%{release}
0e42ca
Provides: ruby(selinux)
0e42ca
0e42ca
%description ruby
0e42ca
The libselinux-ruby package contains the ruby bindings for developing 
0e42ca
SELinux applications. 
0e42ca
0e42ca
%package devel
0e42ca
Summary: Header files and libraries used to build SELinux
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux%{?_isa} = %{version}-%{release}
0e42ca
Requires: libsepol-devel%{?_isa} >= %{libsepolver}
0e42ca
0e42ca
%description devel
0e42ca
The libselinux-devel package contains the libraries and header files
0e42ca
needed for developing SELinux applications. 
0e42ca
0e42ca
%package static
0e42ca
Summary: Static libraries used to build SELinux
0e42ca
Group: Development/Libraries
0e42ca
Requires: libselinux-devel%{?_isa} = %{version}-%{release}
0e42ca
0e42ca
%description static
0e42ca
The libselinux-static package contains the static libraries
0e42ca
needed for developing SELinux applications. 
0e42ca
0e42ca
%prep
0e42ca
%setup -q -n libselinux-2.5
0e42ca
%patch1 -p1 -b .rhel
0e42ca
0e42ca
%build
0e42ca
export LDFLAGS="%{?__global_ldflags}"
0e42ca
# FIXME: export DISABLE_RPM="y"
0e42ca
0e42ca
# To support building the Python wrapper against multiple Python runtimes
0e42ca
# Define a function, for how to perform a "build" of the python wrapper against
0e42ca
# a specific runtime:
0e42ca
BuildPythonWrapper() {
0e42ca
  BinaryName=$1
0e42ca
0e42ca
  # Perform the build from the upstream Makefile:
0e42ca
  make \
0e42ca
    PYTHON=$BinaryName \
0e42ca
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
0e42ca
    pywrap
0e42ca
}
0e42ca
0e42ca
make clean
0e42ca
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} swigify
0e42ca
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} all
0e42ca
0e42ca
BuildPythonWrapper %{__python}
0e42ca
%if 0%{?with_python3}
0e42ca
BuildPythonWrapper %{__python3}
0e42ca
%endif # with_python3
0e42ca
0e42ca
make RUBYINC="%{ruby_inc}" SHLIBDIR="%{_libdir}" LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} rubywrap
0e42ca
0e42ca
%install
0e42ca
InstallPythonWrapper() {
0e42ca
  BinaryName=$1
0e42ca
0e42ca
  make \
0e42ca
    PYTHON=$BinaryName \
0e42ca
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
0e42ca
    pywrap
0e42ca
0e42ca
  make \
0e42ca
    PYTHON=$BinaryName \
0e42ca
    DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" \
0e42ca
    SHLIBDIR="%{buildroot}/%{_lib}" BINDIR="%{buildroot}%{_bindir}" \
0e42ca
    SBINDIR="%{buildroot}%{_sbindir}" \
0e42ca
    install-pywrap
0e42ca
}
0e42ca
0e42ca
rm -rf %{buildroot}
0e42ca
mkdir -p %{buildroot}/%{_prefix}/lib/tmpfiles.d
0e42ca
mkdir -p %{buildroot}/%{_libdir} 
0e42ca
mkdir -p %{buildroot}%{_includedir} 
0e42ca
mkdir -p %{buildroot}%{_sbindir}
0e42ca
mkdir -p %{buildroot}/var/run/setrans
0e42ca
echo "d /var/run/setrans 0755 root root" > %{buildroot}/%{_prefix}/lib/tmpfiles.d/libselinux.conf
0e42ca
0e42ca
InstallPythonWrapper %{__python}
0e42ca
%if 0%{?with_python3}
0e42ca
InstallPythonWrapper %{__python3}
0e42ca
%endif # with_python3
0e42ca
0e42ca
make DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}%{_libdir}" BINDIR="%{buildroot}%{_bindir}" SBINDIR="%{buildroot}%{_sbindir}" RUBYINSTALL=%{buildroot}%{ruby_vendorarchdir} install install-rubywrap
0e42ca
0e42ca
# Nuke the files we don't want to distribute
0e42ca
rm -f %{buildroot}%{_sbindir}/compute_*
0e42ca
rm -f %{buildroot}%{_sbindir}/deftype
0e42ca
rm -f %{buildroot}%{_sbindir}/execcon
0e42ca
rm -f %{buildroot}%{_sbindir}/getenforcemode
0e42ca
rm -f %{buildroot}%{_sbindir}/getfilecon
0e42ca
rm -f %{buildroot}%{_sbindir}/getpidcon
0e42ca
rm -f %{buildroot}%{_sbindir}/mkdircon
0e42ca
rm -f %{buildroot}%{_sbindir}/policyvers
0e42ca
rm -f %{buildroot}%{_sbindir}/setfilecon
0e42ca
rm -f %{buildroot}%{_sbindir}/selinuxconfig
0e42ca
rm -f %{buildroot}%{_sbindir}/selinuxdisable
0e42ca
rm -f %{buildroot}%{_sbindir}/getseuser
0e42ca
rm -f %{buildroot}%{_sbindir}/togglesebool
0e42ca
rm -f %{buildroot}%{_sbindir}/selinux_check_securetty_context
0e42ca
mv %{buildroot}%{_sbindir}/getdefaultcon %{buildroot}%{_sbindir}/selinuxdefcon
0e42ca
mv %{buildroot}%{_sbindir}/getconlist %{buildroot}%{_sbindir}/selinuxconlist
0e42ca
install -d %{buildroot}%{_mandir}/man8/
0e42ca
install -m 644 %{SOURCE1} %{buildroot}%{_mandir}/man8/
0e42ca
install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/
0e42ca
rm -f %{buildroot}%{_mandir}/man8/togglesebool*
0e42ca
0e42ca
%clean
0e42ca
rm -rf %{buildroot}
0e42ca
0e42ca
%post -p /sbin/ldconfig
0e42ca
0e42ca
%postun -p /sbin/ldconfig
0e42ca
0e42ca
%files
0e42ca
%defattr(-,root,root,-)
0e42ca
%{_libdir}/libselinux.so.*
0e42ca
%ghost /var/run/setrans
0e42ca
%{_sbindir}/sefcontext_compile
0e42ca
%{_prefix}/lib/tmpfiles.d/libselinux.conf
0e42ca
0e42ca
%files utils
0e42ca
%defattr(-,root,root,-)
0e42ca
%{_sbindir}/avcstat
0e42ca
%{_sbindir}/getenforce
0e42ca
%{_sbindir}/getsebool
0e42ca
%{_sbindir}/matchpathcon
0e42ca
%{_sbindir}/selinuxconlist
0e42ca
%{_sbindir}/selinuxdefcon
0e42ca
%{_sbindir}/selinuxexeccon
0e42ca
%{_sbindir}/selinuxenabled
0e42ca
%{_sbindir}/setenforce
0e42ca
%{_sbindir}/selabel_digest
0e42ca
%{_sbindir}/selabel_lookup
0e42ca
%{_sbindir}/selabel_lookup_best_match
0e42ca
%{_sbindir}/selabel_partial_match
0e42ca
%{_sbindir}/selinux_restorecon
0e42ca
%{_mandir}/man5/*
0e42ca
%{_mandir}/man8/*
0e42ca
0e42ca
%files devel
0e42ca
%defattr(-,root,root,-)
0e42ca
%{_libdir}/libselinux.so
0e42ca
%{_libdir}/pkgconfig/libselinux.pc
0e42ca
%dir %{_libdir}/golang/src/pkg/github.com/selinux
0e42ca
%{_libdir}/golang/src/pkg/github.com/selinux/selinux.go
0e42ca
%dir %{_includedir}/selinux
0e42ca
%{_includedir}/selinux/*
0e42ca
%{_mandir}/man3/*
0e42ca
0e42ca
%files static
0e42ca
%defattr(-,root,root,-)
0e42ca
%{_libdir}/libselinux.a
0e42ca
0e42ca
%files python
0e42ca
%defattr(-,root,root,-)
0e42ca
%dir %{python_sitearch}/selinux
0e42ca
%{python_sitearch}/selinux/*
0e42ca
0e42ca
%if 0%{?with_python3}
0e42ca
%files python3
0e42ca
%defattr(-,root,root,-)
0e42ca
%dir %{python3_sitearch}/selinux
0e42ca
%dir %{python3_sitearch}/selinux/__pycache__
0e42ca
%{python3_sitearch}/selinux/*.py*
0e42ca
%{python3_sitearch}/selinux/*.so
0e42ca
%{python3_sitearch}/selinux/__pycache__/*
0e42ca
%endif with_python3
0e42ca
0e42ca
%files ruby
0e42ca
%defattr(-,root,root,-)
0e42ca
%{ruby_vendorarchdir}/selinux.so
0e42ca
0e42ca
%changelog
0e42ca
* Thu Sep 26 2019 Vit Mojzis <vmojzis@redhat.com> - 2.5-15
0e42ca
- Build libselinux-python3 subpackage (#1756015)
0e42ca
0e42ca
* Wed Jul 25 2018 Vit Mojzis <vmojzis@redhat.com> - 2.5-14.1
0e42ca
- Add conflict with selinux policy from before store migration (#1469571)
0e42ca
0e42ca
* Mon Apr 30 2018 Vit Mojzis <vmojzis@redhat.com> - 2.5-13
0e42ca
- Correct manpages regarding removable_context (#1395621)
0e42ca
0e42ca
* Tue Oct 17 2017 Vit Mojzis <vmojzis@redhat.com> - 2.5-12
0e42ca
- Improve getfilecon man page (#1258513)
0e42ca
0e42ca
* Thu Mar 23 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-11
0e42ca
- Fix audit2why.init error reporting (#1435139)
0e42ca
0e42ca
* Tue Mar 14 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-10
0e42ca
- Add missing av_permission values (#1025931)
0e42ca
- Set an appropriate errno in booleans.c (#1402140)
0e42ca
- Change matchpathcon usage to match with matchpathcon manpage (#1412797)
0e42ca
0e42ca
* Tue Feb 21 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-9
0e42ca
- Fix pointer handling in realpath_not_final (#1404644)
0e42ca
0e42ca
* Fri Jan 20 2017 Vit Mojzis <vmojzis@redhat.com> - 2.5-8
0e42ca
- selinux_restorecon: fix realpath logic (#1386498)
0e42ca
0e42ca
* Thu Jan 05 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-7
0e42ca
- Keep recursing if matchpathcon returns ENOENT (#1406520)
0e42ca
0e42ca
* Fri Aug 26 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-6
0e42ca
- Handle NULL pcre study data
0e42ca
0e42ca
* Wed Aug 10 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-5
0e42ca
- Fix in tree compilation of utils that depend on libsepol
0e42ca
0e42ca
* Mon Jun 27 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-4
0e42ca
- Clarify is_selinux_mls_enabled() description
0e42ca
- Explain how to free policy type from selinux_getpolicytype()
0e42ca
- Compare absolute pathname in matchpathcon -V
0e42ca
- Add selinux_snapperd_contexts_path()
0e42ca
- Modify audit2why analyze function to use loaded policy
0e42ca
- Sort object files for deterministic linking order
0e42ca
- Respect CC and PKG_CONFIG environment variable
0e42ca
- Avoid mounting /proc outside of selinux_init_load_policy()
0e42ca
- Fix multiple spelling errors
0e42ca
0e42ca
* Wed Apr 27 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-3
0e42ca
- Fix setexecfilecon() to work better in a chroot (#1329931)
0e42ca
- Fix typo in sefcontext_compile.8 (#1320062)
0e42ca
0e42ca
* Mon Apr 11 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-2
0e42ca
- Fix location of selinuxfs mount point (#1321086)
0e42ca
- Only mount /proc if necessary
0e42ca
- procattr: return einval for <= 0 pid args
0e42ca
- procattr: return error on invalid pid_t inpu
0e42ca
0e42ca
* Tue Feb 23 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-1
0e42ca
- Update to upstream release 2016-02-23
0e42ca
0e42ca
* Fri Feb 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-6
0e42ca
- Add additional go bindings for get*con calls
0e42ca
- Add go bindings test command
0e42ca
- Modify man pages of set*con calls to mention that they are thread specific
0e42ca
Resolves:#1053122
0e42ca
0e42ca
* Fri Jan 31 2014 Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
0e42ca
- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
0e42ca
- Add Int_to_mcs function to generate MCS labels from integers.
0e42ca
0e42ca
* Fri Jan 31 2014 Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
0e42ca
- Fix libselinux.spec file
0e42ca
- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
0e42ca
- Add Int_to_mcs function to generate MCS labels from integers.
0e42ca
0e42ca
* Tue Jan 28 2014 Daniel Mach <dmach@redhat.com> - 2.2.2-3
0e42ca
- Mass rebuild 2014-01-24
0e42ca
0e42ca
* Tue Jan 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-2
0e42ca
- Add ghost flag for /var/run/setrans
0e42ca
Resolves: #1053122
0e42ca
0e42ca
* Mon Jan 6 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-1
0e42ca
- Update to upstream 
0e42ca
      * Fix userspace AVC handling of per-domain permissive mode.
0e42ca
- Verify context is not null when passed into *setfilecon_raw
0e42ca
0e42ca
* Fri Dec 27 2013 Adam Williamson <awilliam@redhat.com> - 2.2.1-6
0e42ca
- revert unexplained change to rhat.patch which broke SELinux disablement
0e42ca
0e42ca
* Mon Dec 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-5
0e42ca
- Verify context is not null when passed into lsetfilecon_raw
0e42ca
0e42ca
* Wed Dec 18 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-4
0e42ca
- Mv selinux.go to /usr/share/gocode/src/selinux
0e42ca
- Add golang support to selinux.
0e42ca
0e42ca
* Tue Dec 17 2013 Daniel Mach <dmach@redhat.com> - 2.2.1-3
0e42ca
- Mass rebuild 2013-12-27
0e42ca
0e42ca
* Thu Dec 5 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-2
0e42ca
- Remove togglesebool man page
0e42ca
Resolves: #1038606
0e42ca
0e42ca
* Mon Nov 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
0e42ca
- Update to upstream 
0e42ca
	* Remove -lpthread from pkg-config file; it is not required.
0e42ca
- Add support for policy compressed with xv
0e42ca
0e42ca
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
0e42ca
- Update to upstream 
0e42ca
	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
0e42ca
	* Support overriding Makefile RANLIB from Sven Vermeulen.
0e42ca
	* Update pkgconfig definition from Sven Vermeulen.
0e42ca
	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
0e42ca
	* Fix man pages from Laurent Bigonville.
0e42ca
	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
0e42ca
	* Fix LDFLAGS usage from Laurent Bigonville
0e42ca
	* Avoid shadowing stat in load_mmap from Joe MacDonald.
0e42ca
	* Support building on older PCRE libraries from Joe MacDonald.
0e42ca
	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
0e42ca
	* Fix procattr cache from Dan Walsh.
0e42ca
	* Define python constants for getenforce result from Dan Walsh.
0e42ca
	* Fix label substitution handling of / from Dan Walsh.
0e42ca
	* Add selinux_current_policy_path from Dan Walsh.
0e42ca
	* Change get_context_list to only return good matches from Dan Walsh.
0e42ca
	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
0e42ca
	* Add support for local substitutions from Dan Walsh.
0e42ca
	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
0e42ca
	* Python wrapper leak fixes from Dan Walsh.
0e42ca
	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
0e42ca
	* Add selinux_systemd_contexts_path from Dan Walsh.
0e42ca
	* Add selinux_set_policy_root from Dan Walsh.
0e42ca
	* Add man page for sefcontext_compile from Dan Walsh.
0e42ca
0e42ca
* Fri Oct 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-21
0e42ca
- Add systemd_contexts support
0e42ca
- Do substitutions on a local sub followed by a dist sub
0e42ca
Resolves: #971425
0e42ca
0e42ca
* Thu Oct 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-20
0e42ca
- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek 
0e42ca
Resolves: #1013801
0e42ca
0e42ca
* Mon Sep 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-19
0e42ca
- Fix handling of libselinux getconlist with only one entry
0e42ca
0e42ca
* Tue Sep 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-17
0e42ca
- Add Python constants for SELinux enforcing modes
0e42ca
0e42ca
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.13-17
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
0e42ca
0e42ca
* Fri Jun 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
0e42ca
- Add sefcontext_compile.8  man page
0e42ca
- Add Russell Coker  patch to fix man pages
0e42ca
- Add patches from Laurent Bigonville to fix Makefiles for debian.
0e42ca
- modify spec file to use %{_prefix}/lib
0e42ca
0e42ca
* Mon May 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-15
0e42ca
- Fix patch that Handles substitutions for /
0e42ca
0e42ca
* Wed Apr 17 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-14
0e42ca
- Handle substitutions for /
0e42ca
- semanage fcontext -a -e  / /opt/rh/devtoolset-2/root
0e42ca
0e42ca
* Tue Apr 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-13
0e42ca
- Add Eric Paris patch to fix procattr calls after a fork.
0e42ca
0e42ca
* Tue Mar 26 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-12
0e42ca
- Move secolor.conf.5 into mcstrans package and out of libselinux 
0e42ca
0e42ca
* Wed Mar 20 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-11
0e42ca
- Fix python bindings for selinux_check_access
0e42ca
0e42ca
* Tue Mar 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-10
0e42ca
- Fix reseting the policy root in matchpathcon
0e42ca
0e42ca
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
0e42ca
- Cleanup setfcontext_compile atomic patch
0e42ca
- Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
0e42ca
- Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS
0e42ca
0e42ca
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-8
0e42ca
- Make setfcontext_compile atomic
0e42ca
0e42ca
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-7
0e42ca
- Fix memory leak in set*con calls.
0e42ca
0e42ca
* Thu Feb 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-6
0e42ca
- Move matchpathcon to -utils package
0e42ca
- Remove togglesebool
0e42ca
0e42ca
* Thu Feb 21 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-5
0e42ca
- Fix selinux man page to reflect what current selinux policy is.
0e42ca
0e42ca
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
0e42ca
- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.
0e42ca
0e42ca
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-3
0e42ca
- Bring back selinux_current_policy_path
0e42ca
0e42ca
* Thu Feb 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-2
0e42ca
- Revert some changes which are causing the wrong policy version file to be created
0e42ca
0e42ca
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
0e42ca
- Update to upstream 
0e42ca
        * audit2why: make sure path is nul terminated
0e42ca
        * utils: new file context regex compiler
0e42ca
        * label_file: use precompiled filecontext when possible
0e42ca
        * do not leak mmapfd
0e42ca
        * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
0e42ca
        * man: make selinux.8 mention service man pages
0e42ca
        * audit2why: Fix segfault if finish() called twice
0e42ca
        * audit2why: do not leak on multiple init() calls
0e42ca
        * mode_to_security_class: interface to translate a mode_t in to a security class
0e42ca
        * audit2why: Cleanup audit2why analysys function
0e42ca
        * man: Fix program synopsis and function prototypes in man pages
0e42ca
        * man: Fix man pages formatting
0e42ca
        * man: Fix typo in man page
0e42ca
        * man: Add references and man page links to _raw function variants
0e42ca
        * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
0e42ca
        * man: context_new(3): fix the return value description
0e42ca
        * selinux_status_open: handle error from sysconf
0e42ca
        * selinux_status_open: do not leak statusfd on exec
0e42ca
        * Fix errors found by coverity
0e42ca
        * Change boooleans.subs to booleans.subs_dist.
0e42ca
        * optimize set*con functions
0e42ca
        * pkg-config do not specifc ruby version
0e42ca
        * unmap file contexts on selabel_close()
0e42ca
        * do not leak file contexts with mmap'd backend
0e42ca
        * sefcontext_compile: do not leak fd on error
0e42ca
        * matchmediacon: do not leak fd 
0e42ca
        * src/label_android_property: do not leak fd on error
0e42ca
0e42ca
* Sun Jan 27 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-20
0e42ca
- Update to latest patches from eparis/Upstream
0e42ca
0e42ca
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
0e42ca
- Update to latest patches from eparis/Upstream
0e42ca
0e42ca
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-18
0e42ca
- Try procatt speedup patch again
0e42ca
0e42ca
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-17
0e42ca
- Roll back procattr speedups since it seems to be screwing up systemd labeling.
0e42ca
0e42ca
* Tue Jan 22 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
0e42ca
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
0e42ca
0e42ca
* Wed Jan 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-15
0e42ca
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
0e42ca
0e42ca
* Mon Jan 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
0e42ca
- setfscreatecon after fork was broken by the Set*con patch.
0e42ca
- We needed to reset the thread variables after a fork.
0e42ca
0e42ca
* Thu Jan 10 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-13
0e42ca
- Fix setfscreatecon call to handle failure mode, which was breaking udev
0e42ca
0e42ca
* Wed Jan 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
0e42ca
- Ondrej Oprala patch to optimize set*con functions
0e42ca
-    Set*con now caches the security context and only re-sets it if it changes.
0e42ca
0e42ca
* Tue Jan 8 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-11
0e42ca
- Rebuild against latest libsepol
0e42ca
0e42ca
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
0e42ca
- Update to latest patches from eparis/Upstream
0e42ca
-    Fix errors found by coverity
0e42ca
-    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
0e42ca
-    audit2why: remove a useless policy vers variable
0e42ca
-    audit2why: use the new constraint information
0e42ca
0e42ca
* Mon Nov 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
0e42ca
- Rebuild with latest libsepol
0e42ca
0e42ca
* Fri Nov 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
0e42ca
- Return EPERM if login program can not reach default label for user
0e42ca
- Attempt to return container info from audit2why
0e42ca
0e42ca
* Thu Nov 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
0e42ca
- Apply patch from eparis to fix leaked file descriptor in new labeling code
0e42ca
0e42ca
* Fri Oct 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
0e42ca
- Add new function mode_to_security_class which takes mode instead of a string.
0e42ca
- Possibly will be used with coreutils.
0e42ca
0e42ca
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-5
0e42ca
- Add back selinuxconlist and selinuxdefcon man pages
0e42ca
0e42ca
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
0e42ca
- Fix segfault from calling audit2why.finish() multiple times
0e42ca
0e42ca
* Fri Oct 12 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
0e42ca
- Fix up selinux man page to reference service man pages
0e42ca
0e42ca
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-2
0e42ca
- Rebuild with fixed libsepol
0e42ca
0e42ca
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
0e42ca
- Update to upstream 
0e42ca
	* Add support for lxc_contexts_path
0e42ca
	* utils: add service to getdefaultcon
0e42ca
	* libsemanage: do not set soname needlessly
0e42ca
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
0e42ca
	* boolean name equivalency
0e42ca
	* getsebool: support boolean name substitution
0e42ca
	* Add man page for new selinux_boolean_sub function.
0e42ca
	* expose selinux_boolean_sub
0e42ca
	* matchpathcon: add -m option to force file type check
0e42ca
	* utils: avcstat: clear sa_mask set
0e42ca
	* seusers: Check for strchr failure
0e42ca
	* booleans: initialize pointer to silence coveriety
0e42ca
	* stop messages when SELinux disabled
0e42ca
	* label_file: use PCRE instead of glibc regex functions
0e42ca
	* label_file: remove all typedefs
0e42ca
	* label_file: move definitions to include file
0e42ca
	* label_file: do string to mode_t conversion in a helper function
0e42ca
	* label_file: move error reporting back into caller
0e42ca
	* label_file: move stem/spec handling to header
0e42ca
	* label_file: drop useless ncomp field from label_file data
0e42ca
	* label_file: move spec_hasMetaChars to header
0e42ca
	* label_file: fix potential read past buffer in spec_hasMetaChars
0e42ca
	* label_file: move regex sorting to the header
0e42ca
	* label_file: add accessors for the pcre extra data
0e42ca
	* label_file: only run regex files one time
0e42ca
	* label_file: new process_file function
0e42ca
	* label_file: break up find_stem_from_spec
0e42ca
	* label_file: struct reorg
0e42ca
	* label_file: only run array once when sorting
0e42ca
	* Ensure that we only close the selinux netlink socket once.
0e42ca
	* improve the file_contexts.5 manual page
0e42ca
0e42ca
* Fri Aug 03 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-6
0e42ca
- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
0e42ca
0e42ca
* Wed Aug  1 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-5
0e42ca
- make with_python3 be conditional on fedora
0e42ca
0e42ca
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.11-4
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
0e42ca
0e42ca
* Mon Jul 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
0e42ca
- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d
0e42ca
0e42ca
* Fri Jul 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
0e42ca
- Revert Eric Paris Patch for selinux_binary_policy_path
0e42ca
0e42ca
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
0e42ca
- Update to upstream 
0e42ca
	* Fortify source now requires all code to be compiled with -O flag
0e42ca
	* asprintf return code must be checked
0e42ca
	* avc_netlink_recieve handle EINTR
0e42ca
	* audit2why: silence -Wmissing-prototypes warning
0e42ca
	* libsemanage: remove build warning when build swig c files
0e42ca
	* matchpathcon: bad handling of symlinks in /
0e42ca
	* seusers: remove unused lineno
0e42ca
	* seusers: getseuser: gracefully handle NULL service
0e42ca
	* New Android property labeling backend
0e42ca
	* label_android_property whitespace cleanups
0e42ca
	* additional makefile support for rubywrap
0e42ca
0e42ca
* Mon Jun 11 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
0e42ca
- Fix booleans.subs name, change function name to selinux_boolean_sub, 
0e42ca
  add man page, minor fixes to the function
0e42ca
0e42ca
* Fri May 25 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
0e42ca
- Fix to compile with Fortify source
0e42ca
      * Add -O compiler flag
0e42ca
      * Check return code from asprintf
0e42ca
- Fix handling of symbolic links in / by realpath_not_final
0e42ca
0e42ca
* Tue Apr 17 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
0e42ca
- Add support for lxc contexts file
0e42ca
0e42ca
* Fri Mar 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-2
0e42ca
- Add support fot boolean subs file
0e42ca
0e42ca
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
0e42ca
- Update to upstream 
0e42ca
	* Fix dead links to www.nsa.gov/selinux
0e42ca
	* Remove jump over variable declaration
0e42ca
	* Fix old style function definitions
0e42ca
	* Fix const-correctness
0e42ca
	* Remove unused flush_class_cache method
0e42ca
	* Add prototype decl for destructor
0e42ca
	* Add more printf format annotations
0e42ca
	* Add printf format attribute annotation to die() method
0e42ca
	* Fix const-ness of parameters & make usage() methods static
0e42ca
	* Enable many more gcc warnings for libselinux/src/ builds
0e42ca
	* utils: Enable many more gcc warnings for libselinux/utils builds
0e42ca
	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
0e42ca
	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
0e42ca
	* Update Makefiles to handle /usrmove
0e42ca
	* utils: Stop separating out matchpathcon as something special
0e42ca
	* pkg-config to figure out where ruby include files are located
0e42ca
	* build with either ruby 1.9 or ruby 1.8
0e42ca
	* assert if avc_init() not called
0e42ca
	* take security_deny_unknown into account
0e42ca
	* security_compute_create_name(3)
0e42ca
	* Do not link against python library, this is considered
0e42ca
	* bad practice in debian
0e42ca
	* Hide unnecessarily-exported library destructors
0e42ca
0e42ca
* Thu Feb 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
0e42ca
- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
0e42ca
- Otherwise search for policy on disk
0e42ca
0e42ca
* Wed Feb 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
0e42ca
- Change selinux_binary_policy_path to return /sys/fs/selinux/policy
0e42ca
- Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
0e42ca
- avc_has_perm will now return yes if the machine is in permissive mode
0e42ca
- Make work with ruby-1.9
0e42ca
0e42ca
* Fri Feb 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-7
0e42ca
- avc_netlink_recieve should continue to poll if it receinves an EINTR rather 
0e42ca
0e42ca
* Sun Jan 29 2012 Kay Sievers <kay@redhat.com> - 2.1.9-6
0e42ca
- use /sbin/ldconfig, glibc does not provide
0e42ca
  /usr/sbin/ldconfig in the RPM database for now
0e42ca
0e42ca
* Fri Jan 27 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-5
0e42ca
- Rebuild with cleaned up upstream to work in /usr
0e42ca
0e42ca
* Wed Jan 25 2012 Harald Hoyer <harald@redhat.com> 2.1.9-4
0e42ca
- install everything in /usr
0e42ca
  https://fedoraproject.org/wiki/Features/UsrMove
0e42ca
0e42ca
* Mon Jan 23 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-3
0e42ca
- Add Dan Berrange code cleanup patches.
0e42ca
0e42ca
* Wed Jan 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
0e42ca
- Fix selabal_open man page to refer to proper selinux_opt structure
0e42ca
0e42ca
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
0e42ca
-Update to upstream
0e42ca
	* Fix setenforce man page to refer to selinux man page
0e42ca
	* Cleanup Man pages
0e42ca
	* merge freecon with getcon man page
0e42ca
0e42ca
* Mon Dec 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
0e42ca
- Add patch from Richard Haines
0e42ca
      When selabel_lookup found an invalid context with validation enabled, it
0e42ca
      always stated it was 'file_contexts' whether media, x, db or file.
0e42ca
      The fix is to store the spec file name in the selabel_lookup_rec on
0e42ca
      selabel_open and use this as output for logs. Also a minor fix if key is
0e42ca
      NULL to stop seg faults.
0e42ca
- Fix setenforce manage page.
0e42ca
0e42ca
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
0e42ca
- Rebuild with new libsepol
0e42ca
0e42ca
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-2
0e42ca
- Fix setenforce man page, from Miroslav Grepl
0e42ca
0e42ca
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
0e42ca
- Upgrade to upstream
0e42ca
	* selinuxswig_python.i: don't make syscall if it won't change anything
0e42ca
	* Remove assert in security_get_boolean_names(3)
0e42ca
	* Mapped compute functions now obey deny_unknown flag
0e42ca
	* get_default_type now sets EINVAL if no entry.
0e42ca
	* return EINVAL if invalid role selected
0e42ca
	* Updated selabel_file(5) man page
0e42ca
	* Updated selabel_db(5) man page
0e42ca
	* Updated selabel_media(5) man page
0e42ca
	* Updated selabel_x(5) man page
0e42ca
	* Add man/man5 man pages
0e42ca
	* Add man/man5 man pages
0e42ca
	* Add man/man5 man pages
0e42ca
	* use -W and -Werror in utils
0e42ca
0e42ca
* Tue Nov 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-2
0e42ca
- Change python binding for restorecon to check if the context matches.
0e42ca
- If it does do not reset
0e42ca
0e42ca
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
0e42ca
- Upgrade to upstream
0e42ca
	* Makefiles: syntax, convert all ${VAR} to $(VAR)
0e42ca
	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
0e42ca
	* regenerate .pc on VERSION change
0e42ca
	* label: cosmetic cleanups
0e42ca
	* simple interface for access checks
0e42ca
	* Don't reinitialize avc_init if it has been called previously
0e42ca
	* seusers: fix to handle large sets of groups
0e42ca
	* audit2why: close fd on enomem
0e42ca
	* rename and export symlink_realpath
0e42ca
	* label_file: style changes to make Eric happy.
0e42ca
0e42ca
* Mon Oct 24 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-4
0e42ca
- Apply libselinux patch to handle large groups in seusers.
0e42ca
0e42ca
* Wed Oct 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-3
0e42ca
- Add selinux_check_access function. Needed for passwd, chfn, chsh
0e42ca
0e42ca
* Thu Sep 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
0e42ca
- Handle situation where selinux=0 passed to the kernel and both /selinux and 
0e42ca
0e42ca
* Mon Sep 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
0e42ca
-Update to upstream
0e42ca
	* utils: matchpathcon: remove duplicate declaration
0e42ca
	* src: matchpathcon: use myprintf not fprintf
0e42ca
	* src: matchpathcon: make sure resolved path starts
0e42ca
	* put libselinux.so.1 in /lib not /usr/lib
0e42ca
	* tree: default make target to all not
0e42ca
0e42ca
* Wed Sep 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-5
0e42ca
- Switch to use ":" as prefix separator rather then ";"
0e42ca
0e42ca
* Thu Sep  8 2011 Ville Skyttä <ville.skytta@iki.fi> - 2.1.5-4
0e42ca
- Avoid unnecessary shell invocation in %%post.
0e42ca
0e42ca
* Tue Sep 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
0e42ca
- Fix handling of subset labeling that is causing segfault in restorecon
0e42ca
0e42ca
* Fri Sep 2 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
0e42ca
- Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
0e42ca
prefixes.  Now you can specify a ";" separated list of prefixes and the 
0e42ca
labeling system will only load regular expressions that match these prefixes.
0e42ca
0e42ca
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
0e42ca
- Change matchpatcon to use proper myprintf
0e42ca
- Fix symlink_realpath to always include "/"
0e42ca
- Update to upstream
0e42ca
	* selinux_file_context_verify function returns wrong value.
0e42ca
	* move realpath helper to matchpathcon library
0e42ca
	* python wrapper makefile changes
0e42ca
0e42ca
* Mon Aug 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
0e42ca
- Move to new Makefile that can build with or without PYTHON being set
0e42ca
0e42ca
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
0e42ca
-Update to upstream
0e42ca
2.1.4 2011-0817
0e42ca
	* mapping fix for invalid class/perms after selinux_set_mapping
0e42ca
	* audit2why: work around python bug not defining
0e42ca
	* resolv symlinks and dot directories before matching
0e42ca
0e42ca
2.1.2 2011-0803
0e42ca
	* audit2allow: do not print statistics
0e42ca
	* make python bindings for restorecon work on relative path
0e42ca
	* fix python audit2why binding error
0e42ca
	* support new python3 functions
0e42ca
	* do not check fcontext duplicates on use
0e42ca
	* Patch for python3 for libselinux
0e42ca
0e42ca
2.1.1 2011-08-02
0e42ca
	* move .gitignore into utils
0e42ca
	* new setexecon utility
0e42ca
	* selabel_open fix processing of substitution files
0e42ca
	* mountpoint changing patch.
0e42ca
	* simplify SRCS in Makefile
0e42ca
0e42ca
2.1.1 2011-08-01
0e42ca
	* Remove generated files, introduce more .gitignore
0e42ca
0e42ca
0e42ca
0e42ca
* Thu Jul 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
0e42ca
-Update to upstream
0e42ca
	* Release, minor version bump
0e42ca
	* Give correct names to mount points in load_policy by Dan Walsh.
0e42ca
	* Make sure selinux state is reported correctly if selinux is disabled or
0e42ca
	fails to load by Dan Walsh.
0e42ca
	* Fix crash if selinux_key_create was never called by Dan Walsh.
0e42ca
	* Add new file_context.subs_dist for distro specific filecon substitutions
0e42ca
	by Dan Walsh.
0e42ca
	* Update man pages for selinux_color_* functions by Richard Haines.
0e42ca
0e42ca
* Mon Jun 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
0e42ca
- Only call dups check within selabel/matchpathcon if you are validating the 
0e42ca
context
0e42ca
- This seems to speed the loading of labels by 4 times.
0e42ca
0e42ca
* Fri Apr 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
0e42ca
- Move /selinux to /sys/fs/selinux
0e42ca
- Add selinuxexeccon
0e42ca
- Add realpath to matchpathcon to handle matchpathcon * type queries.
0e42ca
0e42ca
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-4
0e42ca
- Update for latest libsepol
0e42ca
0e42ca
* Mon Apr 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-3
0e42ca
- Update for latest libsepol
0e42ca
0e42ca
* Wed Apr 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-2
0e42ca
- Fix restorecon python binding to accept relative paths
0e42ca
0e42ca
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
0e42ca
-Update to upstream
0e42ca
	* Give correct names to mount points in load_policy by Dan Walsh.
0e42ca
	* Make sure selinux state is reported correctly if selinux is disabled or
0e42ca
	fails to load by Dan Walsh.
0e42ca
	* Fix crash if selinux_key_create was never called by Dan Walsh.
0e42ca
	* Add new file_context.subs_dist for distro specific filecon substitutions
0e42ca
	by Dan Walsh.
0e42ca
	* Update man pages for selinux_color_* functions by Richard Haines.
0e42ca
0e42ca
* Wed Apr 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
0e42ca
- Clean up patch to make handling of constructor  cleanup more portable
0e42ca
  * db_language object class support for selabel_lookup from KaiGai Kohei.
0e42ca
  * Library destructors for thread local storage keys from Eamon Walsh.
0e42ca
0e42ca
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-5
0e42ca
- Add distribution subs path
0e42ca
0e42ca
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
0e42ca
Add patch from dbhole@redhat.com to initialize thread keys to -1
0e42ca
Errors were being seen in libpthread/libdl that were related
0e42ca
to corrupt thread specific keys. Global destructors that are called on dl 
0e42ca
unload. During destruction delete a thread specific key without checking 
0e42ca
if it has been initialized. Since the constructor is not called each time 
0e42ca
(i.e. key is not initialized with pthread_key_create each time), and the 
0e42ca
default is 0, there is a possibility that key 0 for an active thread gets 
0e42ca
deleted. This is exactly what is happening in case of OpenJDK.
0e42ca
0e42ca
Workaround patch that initializes the key to -1. Thus if the constructor is not
0e42ca
called, the destructor tries to delete key -1 which is deemed invalid by 
0e42ca
pthread_key_delete, and is ignored.
0e42ca
0e42ca
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
0e42ca
- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data
0e42ca
0e42ca
* Fri Apr 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-2
0e42ca
- Change mount source options to use "proc" and "selinuxfs"
0e42ca
0e42ca
* Tue Mar 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-1
0e42ca
- Update to upstream
0e42ca
  * Turn off default user handling when computing user contexts by Dan Walsh
0e42ca
0e42ca
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
0e42ca
0e42ca
* Tue Feb 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-3
0e42ca
- Fixup selinux man page
0e42ca
0e42ca
* Tue Jan 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-2
0e42ca
- Fix Makefile to use pkg-config --cflags python3 to discover include paths
0e42ca
0e42ca
* Tue Dec 21 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.98-1
0e42ca
- Update to upstream 
0e42ca
  - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
0e42ca
0e42ca
* Mon Dec 6 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.97-1
0e42ca
- Update to upstream 
0e42ca
	* Thread local storage fixes from Eamon Walsh.
0e42ca
0e42ca
* Sat Dec 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-9
0e42ca
- Add /etc/tmpfiles.d support for /var/run/setrans
0e42ca
0e42ca
* Wed Nov 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-8
0e42ca
- Ghost /var/run/setrans
0e42ca
0e42ca
* Wed Sep 29 2010 jkeating - 2.0.96-7
0e42ca
- Rebuilt for gcc bug 634757
0e42ca
0e42ca
* Thu Sep 16 2010 Adam Tkac <atkac redhat com> - 2.0.96-6
0e42ca
- rebuild via updated swig (#624674)
0e42ca
0e42ca
* Sun Aug 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-5
0e42ca
- Update for python 3.2a1
0e42ca
0e42ca
* Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-4
0e42ca
- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
0e42ca
0e42ca
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.96-3
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
0e42ca
0e42ca
* Fri Jun 25 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-2
0e42ca
- Turn off messages in audit2why
0e42ca
0e42ca
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
0e42ca
- Update to upstream 
0e42ca
	* Add const qualifiers to public API where appropriate by KaiGai Kohei.
0e42ca
0e42ca
2.0.95 2010-06-10
0e42ca
	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
0e42ca
	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
0e42ca
- add python3 subpackage from David Malcolm 
0e42ca
0e42ca
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
0e42ca
* Set errno=EINVAL for invalid contexts from Dan Walsh.
0e42ca
0e42ca
* Tue Mar 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
0e42ca
- Update to upstream 
0e42ca
	* Show strerror for security_getenforce() by Colin Waters.
0e42ca
	* Merged selabel database support by KaiGai Kohei.
0e42ca
	* Modify netlink socket blocking code by KaiGai Kohei.
0e42ca
0e42ca
* Sun Mar 7 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
0e42ca
- Update to upstream 
0e42ca
	* Fix from Eric Paris to fix leak on non-selinux systems.
0e42ca
	* regenerate swig wrappers
0e42ca
	* pkgconfig fix to respect LIBDIR from Dan Walsh.
0e42ca
0e42ca
* Wed Feb 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
0e42ca
- Update to upstream 
0e42ca
	* Change the AVC to only audit the permissions specified by the
0e42ca
	policy, excluding any permissions specified via dontaudit or not
0e42ca
	specified via auditallow.
0e42ca
	* Fix compilation of label_file.c with latest glibc headers.
0e42ca
0e42ca
* Mon Feb 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-5
0e42ca
- Fix potential doublefree on init
0e42ca
0e42ca
* Thu Feb 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-4
0e42ca
- Fix libselinux.pc
0e42ca
0e42ca
* Mon Jan 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-3
0e42ca
- Fix man page for selinuxdefcon
0e42ca
0e42ca
* Mon Jan 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-2
0e42ca
- Free memory on disabled selinux boxes
0e42ca
0e42ca
* Tue Dec 1 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
0e42ca
- Update to upstream 
0e42ca
	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
0e42ca
	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>
0e42ca
0e42ca
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-2
0e42ca
- Fix selinuxdefcon man page
0e42ca
0e42ca
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-1
0e42ca
- Update to upstream 
0e42ca
	* Add pkgconfig file from Eamon Walsh.
0e42ca
0e42ca
* Thu Oct 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.88-1
0e42ca
- Update to upstream 
0e42ca
	* Rename and export selinux_reset_config()
0e42ca
0e42ca
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
0e42ca
- Update to upstream 
0e42ca
	* Add exception handling in libselinux from Dan Walsh. This uses a
0e42ca
	  shell script called exception.sh to generate a swig interface file.
0e42ca
	* make swigify
0e42ca
	* Make matchpathcon print <<none>> if path not found in fcontext file.
0e42ca
0e42ca
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-2
0e42ca
- Eliminate -pthread switch in Makefile
0e42ca
0e42ca
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-1
0e42ca
- Update to upstream 
0e42ca
	* Removal of reference counting on userspace AVC SID's.
0e42ca
0e42ca
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.85-2
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
0e42ca
0e42ca
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
0e42ca
- Update to upstream 
0e42ca
	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
0e42ca
	pthread dependency.
0e42ca
	* Removed fini_context_translations() altogether.
0e42ca
	* Merged lazy init patch from Stephen Smalley based on original patch
0e42ca
	by Steve Grubb.
0e42ca
0e42ca
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
0e42ca
- Update to upstream 
0e42ca
	* Add per-service seuser support from Dan Walsh.
0e42ca
	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
0e42ca
	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
0e42ca
	Paris.
0e42ca
0e42ca
* Wed Jun 24 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-2
0e42ca
- Add provices ruby(selinux)
0e42ca
0e42ca
* Tue Jun 23 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
0e42ca
- Update to upstream 
0e42ca
	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
0e42ca
	* Label substitution support from Dan Walsh.
0e42ca
	* Support for labeling virtual machine images from Dan Walsh.
0e42ca
0e42ca
* Mon May 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
0e42ca
- Update to upstream 
0e42ca
	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
0e42ca
	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
0e42ca
	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
0e42ca
	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.
0e42ca
0e42ca
* Wed Apr 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
0e42ca
- Update to upstream 
0e42ca
	* deny_unknown wrapper function from KaiGai Kohei.
0e42ca
	* security_compute_av_flags API from KaiGai Kohei.
0e42ca
	* Netlink socket management and callbacks from KaiGai Kohei.
0e42ca
0e42ca
* Fri Apr 3 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-6
0e42ca
- Fix Memory Leak
0e42ca
0e42ca
* Thu Apr 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-5
0e42ca
- Fix crash in python
0e42ca
0e42ca
* Sun Mar 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-4
0e42ca
- Add back in additional interfaces
0e42ca
0e42ca
* Fri Mar 27 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-3
0e42ca
- Add back in av_decision to python swig
0e42ca
0e42ca
* Thu Mar 12 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
0e42ca
- Update to upstream 
0e42ca
	* Netlink socket handoff patch from Adam Jackson.
0e42ca
	* AVC caching of compute_create results by Eric Paris.
0e42ca
0e42ca
* Tue Mar 10 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-5
0e42ca
- Add patch from ajax to accellerate X SELinux 
0e42ca
- Update eparis patch
0e42ca
0e42ca
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-4
0e42ca
- Add eparis patch to accellerate Xwindows performance
0e42ca
0e42ca
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-3
0e42ca
- Fix URL 
0e42ca
0e42ca
* Fri Mar 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-2
0e42ca
- Add substitute pattern 
0e42ca
- matchpathcon output <<none>> on ENOENT
0e42ca
0e42ca
* Mon Mar 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-1
0e42ca
- Update to upstream
0e42ca
	* Fix incorrect conversion in discover_class code.
0e42ca
0e42ca
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.77-6
0e42ca
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
0e42ca
0e42ca
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-5
0e42ca
- Add 
0e42ca
  - selinux_virtual_domain_context_path
0e42ca
  - selinux_virtual_image_context_path
0e42ca
0e42ca
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-3
0e42ca
- Throw exeptions in python swig bindings on failures
0e42ca
0e42ca
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-2
0e42ca
- Fix restorecon python code
0e42ca
0e42ca
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-1
0e42ca
- Update to upstream
0e42ca
0e42ca
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-6
0e42ca
- Strip trailing / for matchpathcon
0e42ca
0e42ca
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com>l - 2.0.76-5
0e42ca
- Fix segfault if seusers file does not work
0e42ca
0e42ca
* Fri Dec 12 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
0e42ca
- Add new function getseuser which will take username and service and return
0e42ca
- seuser and level.  ipa will populate file in future.
0e42ca
- Change selinuxdefcon to return just the context by default
0e42ca
0e42ca
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.0.76-2
0e42ca
- Rebuild for Python 2.6
0e42ca
0e42ca
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-1
0e42ca
- Update to Upstream
0e42ca
	* Allow shell-style wildcards in x_contexts file.
0e42ca
0e42ca
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
0e42ca
- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
0e42ca
- Add Restorecon/Install python functions from Luke Macken
0e42ca
0e42ca
* Fri Nov 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
0e42ca
- Update to Upstream
0e42ca
	* Correct message types in AVC log messages.
0e42ca
	* Make matchpathcon -V pass mode from Dan Walsh.
0e42ca
	* Add man page for selinux_file_context_cmp from Dan Walsh.
0e42ca
0e42ca
* Tue Sep 30 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
0e42ca
- Update to Upstream
0e42ca
	* New man pages from Dan Walsh.
0e42ca
	* Update flask headers from refpolicy trunk from Dan Walsh.
0e42ca
0e42ca
* Fri Sep 26 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-6
0e42ca
- Fix matchpathcon -V call 
0e42ca
0e42ca
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-5
0e42ca
- Add flask definitions for open, X and nlmsg_tty_audit
0e42ca
0e42ca
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-4
0e42ca
- Add missing get/setkeycreatecon man pages
0e42ca
0e42ca
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-3
0e42ca
- Split out utilities
0e42ca
0e42ca
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-2
0e42ca
- Add missing man page links for [lf]getfilecon
0e42ca
0e42ca
* Tue Aug 5 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
0e42ca
- Update to Upstream
0e42ca
	* Add group support to seusers using %groupname syntax from Dan Walsh.
0e42ca
	* Mark setrans socket close-on-exec from Stephen Smalley.
0e42ca
	* Only apply nodups checking to base file contexts from Stephen Smalley.
0e42ca
0e42ca
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
0e42ca
- Update to Upstream
0e42ca
	* Merge ruby bindings from Dan Walsh.
0e42ca
- Add support for Linux groups to getseuserbyname
0e42ca
0e42ca
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-2
0e42ca
- Allow group handling in getseuser call
0e42ca
0e42ca
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
0e42ca
- Update to Upstream
0e42ca
	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
0e42ca
	  This prevents adding them via semanage.
0e42ca
	* Fix audit2why shadowed variables from Stephen Smalley.
0e42ca
	* Note that freecon NULL is legal in man page from Karel Zak.
0e42ca
0e42ca
* Wed Jul 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-4
0e42ca
- Add ruby support for puppet
0e42ca
0e42ca
* Tue Jul 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-3
0e42ca
- Rebuild for new libsepol
0e42ca
0e42ca
* Sun Jun 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-2
0e42ca
- Add Karel Zak patch for freecon man page
0e42ca
0e42ca
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
0e42ca
- Update to Upstream
0e42ca
	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
0e42ca
	* Add swig python bindings for avc interfaces from Dan Walsh.
0e42ca
0e42ca
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
0e42ca
- Update to Upstream
0e42ca
	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
0e42ca
	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
0e42ca
0e42ca
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-3
0e42ca
- libselinux no longer neets to telnet -u in post install
0e42ca
0e42ca
* Wed May 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-2
0e42ca
- Add sedefaultcon and setconlist commands to dump login context
0e42ca
0e42ca
* Tue Apr 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
0e42ca
- Update to Upstream
0e42ca
	* Fixed selinux_set_callback man page.
0e42ca
	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
0e42ca
	* Fix memory leaks in matchpathcon from Eamon Walsh.
0e42ca
0e42ca
* Wed Apr 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-4
0e42ca
- Add Xavior Toth patch for security_id_t in swig
0e42ca
0e42ca
* Thu Apr 10 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-3
0e42ca
- Add avc.h to swig code
0e42ca
0e42ca
* Wed Apr 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-2
0e42ca
- Grab the latest policy for the kernel
0e42ca
0e42ca
* Tue Apr 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-1
0e42ca
- Update to Upstream
0e42ca
	* Man page typo fix from Jim Meyering.
0e42ca
0e42ca
* Sun Mar 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
0e42ca
- Update to Upstream
0e42ca
	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.
0e42ca
0e42ca
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-2
0e42ca
- Fix matchpathcon memory leak
0e42ca
0e42ca
* Fri Feb 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-1
0e42ca
- Update to Upstream
0e42ca
	* Merged new X label "poly_selection" namespace from Eamon Walsh.
0e42ca
0e42ca
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.58-1
0e42ca
- Update to Upstream
0e42ca
	* Merged reset_selinux_config() for load policy from Dan Walsh.
0e42ca
0e42ca
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-2
0e42ca
- Reload library on loading of policy to handle chroot
0e42ca
0e42ca
* Mon Feb 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-1
0e42ca
- Update to Upstream
0e42ca
	* Merged avc_has_perm() errno fix from Eamon Walsh.
0e42ca
0e42ca
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.56-1
0e42ca
- Update to Upstream
0e42ca
	* Regenerated Flask headers from refpolicy flask definitions.
0e42ca
0e42ca
* Wed Feb 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
0e42ca
- Update to Upstream
0e42ca
	* Merged compute_member AVC function and manpages from Eamon Walsh.
0e42ca
	* Provide more error reporting on load policy failures from Stephen Smalley.
0e42ca
0e42ca
* Fri Feb 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.53-1
0e42ca
- Update to Upstream
0e42ca
	* Merged new X label "poly_prop" namespace from Eamon Walsh.
0e42ca
0e42ca
* Wed Feb 6 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
0e42ca
- Update to Upstream
0e42ca
	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
0e42ca
	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.
0e42ca
0e42ca
* Tue Jan 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.50-1
0e42ca
- Update to Upstream
0e42ca
	* Merged fix for audit2why from Dan Walsh.
0e42ca
0e42ca
* Fri Jan 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-2
0e42ca
- Fix audit2why to grab latest policy versus the one selected by the kernel
0e42ca
0e42ca
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-1
0e42ca
* Merged audit2why python binding from Dan Walsh.
0e42ca
0e42ca
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.48-1
0e42ca
* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
0e42ca
0e42ca
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-4
0e42ca
- Update to use libsepol-static library
0e42ca
0e42ca
* Wed Jan 16 2008 Adel Gadllah <adel.gadllah@gmail.com> - 2.0.47-3
0e42ca
- Move libselinux.a to -static package
0e42ca
- Spec cleanups
0e42ca
0e42ca
* Tue Jan 15 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-2
0e42ca
- Put back libselinux.a
0e42ca
0e42ca
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
0e42ca
- Fix memory references in audit2why and change to use tuples
0e42ca
- Update to Upstream
0e42ca
	* Fix for the avc:  granted null message bug from Stephen Smalley.
0e42ca
0e42ca
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-6
0e42ca
- Fix __init__.py specification
0e42ca
0e42ca
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
0e42ca
- Add audit2why python bindings
0e42ca
0e42ca
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-4
0e42ca
- Add pid_t typemap for swig bindings
0e42ca
0e42ca
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-3
0e42ca
- smp_mflag
0e42ca
0e42ca
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-2
0e42ca
- Fix spec file caused by spec review 
0e42ca
0e42ca
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.46-1
0e42ca
- Upgrade to upstream
0e42ca
	* matchpathcon(8) man page update from Dan Walsh.
0e42ca
0e42ca
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
0e42ca
- Upgrade to upstream
0e42ca
	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
0e42ca
	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
0e42ca
	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.
0e42ca
0e42ca
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
0e42ca
- Upgrade to upstream
0e42ca
	* Regenerated Flask headers from policy.
0e42ca
0e42ca
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
0e42ca
- Upgrade to upstream
0e42ca
	* AVC enforcing mode override patch from Eamon Walsh.
0e42ca
	* Aligned attributes in AVC netlink code from Eamon Walsh.
0e42ca
- Move libselinux.so back into devel package, procps has been fixed
0e42ca
0e42ca
* Tue Nov 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged refactored AVC netlink code from Eamon Walsh.
0e42ca
	* Merged new X label namespaces from Eamon Walsh.
0e42ca
	* Bux fix and minor refactoring in string representation code.
0e42ca
0e42ca
* Fri Oct 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.
0e42ca
0e42ca
* Fri Sep 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
0e42ca
- Upgrade to upstream
0e42ca
	* Fix segfault resulting from missing file_contexts file.
0e42ca
0e42ca
* Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-2
0e42ca
- Fix segfault on missing file_context file
0e42ca
0e42ca
* Wed Sep 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
0e42ca
- Upgrade to upstream
0e42ca
	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
0e42ca
	* Pass CFLAGS when using gcc for linking from Dennis Gilmore. 
0e42ca
0e42ca
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-3
0e42ca
- Add sparc patch to from Dennis Gilmore to build on Sparc platform
0e42ca
0e42ca
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-2
0e42ca
- Remove leaked file descriptor
0e42ca
0e42ca
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Fix selabel option flag setting for 64-bit from Stephen Smalley.
0e42ca
0e42ca
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-2
0e42ca
- Change matchpatcon to use syslog instead of syserror
0e42ca
0e42ca
* Thu Sep 13 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
0e42ca
	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
0e42ca
	* Fix swig binding for rpm_execcon from James Athey.
0e42ca
0e42ca
* Thu Sep 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-4
0e42ca
- Apply James Athway patch to fix rpm_execcon python binding
0e42ca
0e42ca
* Tue Aug 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-3
0e42ca
- Move libselinux.so back into main package, breaks procps
0e42ca
0e42ca
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-2
0e42ca
- Upgrade to upstream
0e42ca
	* Fix file_contexts.homedirs path from Todd Miller.
0e42ca
0e42ca
* Tue Aug 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-2
0e42ca
- Remove requirement on setransd,  Moved to selinux-policy-mls 
0e42ca
0e42ca
* Fri Aug 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
0e42ca
- Move libselinux.so into devel package
0e42ca
- Upgrade to upstream
0e42ca
	* Fix segfault resulting from uninitialized print-callback pointer.
0e42ca
	* Added x_contexts path function patch from Eamon Walsh.
0e42ca
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
0e42ca
	* Fix markup problems in selinux man pages from Dan Walsh.
0e42ca
0e42ca
* Fri Aug 3 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
0e42ca
- Upgrade to upstream
0e42ca
	* Updated version for stable branch.	
0e42ca
	* Added x_contexts path function patch from Eamon Walsh.
0e42ca
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
0e42ca
	* Fix markup problems in selinux man pages from Dan Walsh.
0e42ca
	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
0e42ca
	* Added swigify to top-level Makefile from Dan Walsh.
0e42ca
	* Fix for string_to_security_class segfault on x86_64 from Stephen
0e42ca
	  Smalley.
0e42ca
0e42ca
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-3
0e42ca
- Apply Steven Smalley patch to fix segfault in string_to_security_class
0e42ca
0e42ca
* Wed Jul 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-2
0e42ca
- Fix matchpathcon to set default myprintf
0e42ca
0e42ca
* Mon Jul 16 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-1
0e42ca
- Upgrade to upstream
0e42ca
	* Fix for getfilecon() for zero-length contexts from Stephen Smalley.
0e42ca
0e42ca
* Wed Jul 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-3
0e42ca
- Update to match flask/access_vectors in policy
0e42ca
0e42ca
* Tue Jul 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
0e42ca
- Fix man page markup lanquage for translations
0e42ca
0e42ca
* Tue Jun 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
0e42ca
- Fix semanage segfault on x86 platform
0e42ca
0e42ca
* Thu Jun 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
0e42ca
- Upgrade to upstream
0e42ca
	* Labeling and callback interface patches from Eamon Walsh.
0e42ca
0e42ca
* Tue Jun 19 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-2
0e42ca
- Refactored swig
0e42ca
0e42ca
* Mon Jun 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
0e42ca
- Upgrade to upstream
0e42ca
	* Class and permission mapping support patches from Eamon Walsh.
0e42ca
	* Object class discovery support patches from Chris PeBenito.
0e42ca
	* Refactoring and errno support in string representation code.
0e42ca
0e42ca
* Fri Jun 1 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
0e42ca
- Upgrade to upstream
0e42ca
- Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
0e42ca
 This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.
0e42ca
0e42ca
2.0.17 2007-05-31
0e42ca
	* Updated Lindent script and reindented two header files.
0e42ca
0e42ca
* Fri May 4 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged additional swig python bindings from Dan Walsh.
0e42ca
	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
0e42ca
0e42ca
* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged build fix for avc_internal.c from Joshua Brindle.
0e42ca
0e42ca
* Mon Apr 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-2
0e42ca
- Add get_context_list funcitions to swig file
0e42ca
0e42ca
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.
0e42ca
0e42ca
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-2
0e42ca
- Add missing interface
0e42ca
0e42ca
* Wed Apr 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged support for getting initial contexts from James Carter.
0e42ca
0e42ca
* Mon Apr 9 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
0e42ca
	* Merged sidput(NULL) patch from Eamon Walsh.
0e42ca
0e42ca
* Thu Apr 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-2
0e42ca
- Make rpm_exec swig work
0e42ca
0e42ca
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.
0e42ca
0e42ca
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.8-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged fix for avc.h #include's from Eamon Walsh.
0e42ca
0e42ca
* Thu Mar 22 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-2
0e42ca
- Add stdint.h to avc.h
0e42ca
0e42ca
* Mon Mar 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
0e42ca
- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
0e42ca
- Merged patch to drop support for old /etc/sysconfig/selinux and
0e42ca
- /etc/security policy file layout from Steve Grubb.
0e42ca
0e42ca
* Thu Mar 8 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-2
0e42ca
- Do not fail on permission denied in getsebool
0e42ca
0e42ca
* Tue Feb 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.
0e42ca
0e42ca
* Wed Feb 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
0e42ca
- Upgrade to upstream
0e42ca
	* Removed sending of setrans init message.
0e42ca
	* Merged matchpathcon memory leak fix from Steve Grubb.
0e42ca
0e42ca
* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged more swig initializers from Dan Walsh.
0e42ca
0e42ca
* Sun Feb 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
0e42ca
- Upgrade to upstream
0e42ca
  * Merged patch from Todd Miller to convert int types over to C99 style.
0e42ca
0e42ca
* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
0e42ca
- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
0e42ca
  of the use of the non-standard format (original patch changed
0e42ca
  for style).
0e42ca
- Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
0e42ca
	
0e42ca
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
0e42ca
- Add context function to python to split context into 4 parts
0e42ca
0e42ca
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-1
0e42ca
- Upgrade to upstream
0e42ca
	* Updated version for stable branch.	
0e42ca
0e42ca
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.6-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged man page updates to make "apropos selinux" work from Dan Walsh.
0e42ca
0e42ca
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged getdefaultcon utility from Dan Walsh.
0e42ca
0e42ca
* Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
0e42ca
- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli
0e42ca
0e42ca
* Fri Jan 12 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-2
0e42ca
- Add reference to selinux man page in all man pages to make apropos work
0e42ca
Resolves: # 217881
0e42ca
0e42ca
* Thu Jan 11 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
0e42ca
- Upstream wanted some minor changes, upgrading to keep api the same
0e42ca
- Upgrade to upstream
0e42ca
	* Merged selinux_check_securetty_context() and support from Dan Walsh.
0e42ca
Resolves: #200110
0e42ca
0e42ca
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-3
0e42ca
- Cleanup patch
0e42ca
0e42ca
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-2
0e42ca
- Add securetty handling
0e42ca
Resolves: #200110
0e42ca
0e42ca
* Thu Jan 4 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
0e42ca
- Upgrade to upstream
0e42ca
	* Merged patch for matchpathcon utility to use file mode information
0e42ca
	  when available from Dan Walsh.
0e42ca
0e42ca
* Thu Dec  7 2006 Jeremy Katz <katzj@redhat.com> - 1.33.2-4
0e42ca
- rebuild against python 2.5
0e42ca
0e42ca
* Wed Dec 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-3
0e42ca
- Fix matchpathcon to lstat files
0e42ca
0e42ca
* Thu Nov 30 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-2
0e42ca
- Update man page
0e42ca
0e42ca
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-1
0e42ca
- Upgrade to upstream
0e42ca
0e42ca
* Fri Nov 3 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
0e42ca
- Add James Antill patch for login verification of MLS Levels
0e42ca
-  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.
0e42ca
0e42ca
* Tue Oct 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged updated flask definitions from Darrel Goeddel.
0e42ca
 	  This adds the context security class, and also adds
0e42ca
	  the string definitions for setsockcreate and polmatch.
0e42ca
0e42ca
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.32-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Updated version for release.
0e42ca
0e42ca
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.30.29-2
0e42ca
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
0e42ca
0e42ca
* Fri Sep  29 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged av_permissions.h update from Steve Grubb,
0e42ca
	  adding setsockcreate and polmatch definitions.
0e42ca
0e42ca
* Wed Sep 27 2006 Jeremy Katz <katzj@redhat.com> - 1.30.28-3
0e42ca
- really make -devel depend on libsepol-devel
0e42ca
0e42ca
* Wed Sep  27 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-2
0e42ca
- Add sgrubb patch for polmatch
0e42ca
0e42ca
* Wed Sep  13 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
0e42ca
0e42ca
* Tue Sep  5 2006 Jeremy Katz <katzj@redhat.com> - 1.30.27-2
0e42ca
- have -devel require libsepol-devel
0e42ca
0e42ca
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged patch to not log avc stats upon a reset from Steve Grubb.
0e42ca
	* Applied patch to revert compat_net setting upon policy load.
0e42ca
	* Merged file context homedir and local path functions from
0e42ca
	  Chris PeBenito.
0e42ca
0e42ca
* Fri Aug 18 2006 Jesse Keating <jkeating@redhat.com> - 1.20.26-2
0e42ca
- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
0e42ca
  (#203001)
0e42ca
0e42ca
* Sat Aug  12 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged file context homedir and local path functions from
0e42ca
	  Chris PeBenito.
0e42ca
	* Rework functions that access /proc/pid/attr to access the
0e42ca
	  per-thread nodes, and unify the code to simplify maintenance.
0e42ca
0e42ca
* Fri Aug  11 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged return value fix for *getfilecon() from Dan Walsh.
0e42ca
	* Merged sockcreate interfaces from Eric Paris.
0e42ca
0e42ca
* Wed Aug  9 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-2
0e42ca
- Fix translation return codes to return size of buffer
0e42ca
0e42ca
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
0e42ca
	* Merged netfilter_contexts support patch from Chris PeBenito.
0e42ca
0e42ca
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.20-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged context_*_set errno patch from Jim Meyering.
0e42ca
0e42ca
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-5
0e42ca
- only build non-fpic objects with -mno-tls-direct-seg-refs
0e42ca
0e42ca
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-4
0e42ca
- build with -mno-tls-direct-seg-refs on x86 to avoid triggering 
0e42ca
  segfaults with xen (#200783)  
0e42ca
0e42ca
* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-3
0e42ca
- Rebuild for new gcc
0e42ca
0e42ca
* Tue Jul 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-2
0e42ca
- Fix libselinux to not telinit during installs
0e42ca
0e42ca
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Lindent.
0e42ca
	* Merged {get,set}procattrcon patch set from Eric Paris.
0e42ca
	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
0e42ca
	* Regenerated Flask headers from refpolicy.
0e42ca
	* Merged patch from Dan Walsh with:
0e42ca
	  - Added selinux_file_context_{cmp,verify}.
0e42ca
	  - Added selinux_lsetfilecon_default.
0e42ca
	  - Delay translation of contexts in matchpathcon.
0e42ca
0e42ca
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-5
0e42ca
- Yet another change to matchpathcon
0e42ca
0e42ca
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-4
0e42ca
- Turn off error printing in library.  Need to compile with DEBUG to get it back
0e42ca
0e42ca
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-3
0e42ca
- Fix error reporting of matchpathcon
0e42ca
0e42ca
* Mon Jun 19 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-2
0e42ca
- Add function to compare file context on disk versus contexts in file_contexts file.
0e42ca
0e42ca
* Fri Jun 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged patch from Dan Walsh with:
0e42ca
	* Added selinux_getpolicytype() function.
0e42ca
	* Modified setrans code to skip processing if !mls_enabled.
0e42ca
	* Set errno in the !selinux_mnt case.
0e42ca
	* Allocate large buffers from the heap, not on stack.
0e42ca
	  Affects is_context_customizable, selinux_init_load_policy,
0e42ca
	  and selinux_getenforcemode.
0e42ca
0e42ca
* Thu Jun 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-2
0e42ca
- Add selinux_getpolicytype()
0e42ca
0e42ca
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged !selinux_mnt checks from Ian Kent.
0e42ca
0e42ca
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-2
0e42ca
- Check for selinux_mnt == NULL
0e42ca
0e42ca
* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1
0e42ca
- Merged matchmediacon and trans_to_raw_context fixes from 
0e42ca
  Serge Hallyn.
0e42ca
0e42ca
* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4
0e42ca
- Remove getseuser
0e42ca
0e42ca
* Thu May 25 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-3
0e42ca
- Bump requires to grab latest libsepol
0e42ca
0e42ca
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-2
0e42ca
- Add BuildRequires for swig
0e42ca
0e42ca
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged simple setrans client cache from Dan Walsh.
0e42ca
	  Merged avcstat patch from Russell Coker.
0e42ca
	* Modified selinux_mkload_policy() to also set /selinux/compat_net
0e42ca
	  appropriately for the loaded policy.
0e42ca
0e42ca
* Thu May 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1
0e42ca
- More fixes for translation cache
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Added matchpathcon_fini() function to free memory allocated by
0e42ca
	  matchpathcon_init().
0e42ca
0e42ca
* Wed May 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-2
0e42ca
- Add simple cache to improve translation speed
0e42ca
0e42ca
* Tue May 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged setrans client cleanup patch from Steve Grubb.
0e42ca
0e42ca
* Tue May 9 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2
0e42ca
- Add Russell's AVC patch to handle large numbers
0e42ca
0e42ca
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged getfscreatecon man page fix from Dan Walsh.
0e42ca
	* Updated booleans(8) man page to drop references to the old
0e42ca
	  booleans file and to note that setsebool can be used to set
0e42ca
	  the boot-time defaults via -P.
0e42ca
0e42ca
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.5-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged fix warnings patch from Karl MacMillan.	
0e42ca
	* Merged setrans client support from Dan Walsh.
0e42ca
	  This removes use of libsetrans.
0e42ca
	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
0e42ca
	* Merged swig typemap fixes from Glauber de Oliveira Costa.
0e42ca
0e42ca
* Wed May 3 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-3
0e42ca
- Change the way translations work,  Use setransd/remove libsetrans
0e42ca
0e42ca
* Tue May 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-2
0e42ca
- Add selinuxswig fixes
0e42ca
- Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)
0e42ca
0e42ca
* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Added distclean target to Makefile.
0e42ca
	* Regenerated swig files.
0e42ca
	* Changed matchpathcon_init to verify that the spec file is
0e42ca
	  a regular file.
0e42ca
	* Merged python binding t_output_helper removal patch from Dan Walsh.
0e42ca
0e42ca
* Tue Apr 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2
0e42ca
- Fix python bindings for matchpathcon
0e42ca
- Fix booleans man page
0e42ca
0e42ca
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1
0e42ca
- Merged Makefile PYLIBVER definition patch from Dan Walsh.
0e42ca
0e42ca
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1
0e42ca
- Make some fixes so it will build on RHEL4
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Updated version for release.
0e42ca
	* Altered rpm_execcon fallback logic for permissive mode to also
0e42ca
	  handle case where /selinux/enforce is not available.
0e42ca
0e42ca
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.2
0e42ca
- bump again for double-long bug on ppc(64)
0e42ca
0e42ca
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.1
0e42ca
- rebuilt for new gcc4.1 snapshot and glibc changes
0e42ca
0e42ca
* Fri Jan 20 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged install-pywrap Makefile patch from Joshua Brindle.
0e42ca
0e42ca
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.6-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged pywrap Makefile patch from Dan Walsh.
0e42ca
0e42ca
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-2
0e42ca
- Split out pywrap in Makefile
0e42ca
0e42ca
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Added getseuser test program.
0e42ca
0e42ca
* Fri Jan 6 2006 Dan Walsh <dwalsh@redhat.com> 1.29.4-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Added format attribute to myprintf in matchpathcon.c and
0e42ca
	  removed obsoleted rootlen variable in init_selinux_config().
0e42ca
0e42ca
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-2
0e42ca
- Build with new libsepol
0e42ca
0e42ca
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged several fixes and improvements from Ulrich Drepper
0e42ca
	  (Red Hat), including:
0e42ca
	  - corrected use of getline
0e42ca
	  - further calls to __fsetlocking for local files
0e42ca
	  - use of strdupa and asprintf
0e42ca
	  - proper handling of dirent in booleans code
0e42ca
	  - use of -z relro
0e42ca
	  - several other optimizations
0e42ca
	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).
0e42ca
0e42ca
* Sat Dec 24 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
0e42ca
- Add build requires line for libsepol-devel
0e42ca
0e42ca
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
0e42ca
- Fix swig call for getpidcon
0e42ca
0e42ca
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-2
0e42ca
- Move libselinux.so to base package
0e42ca
0e42ca
* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-1
0e42ca
- Upgrade to latest from NSA
0e42ca
	* Merged call to finish_context_translations from Dan Walsh.
0e42ca
	  This eliminates a memory leak from failing to release memory
0e42ca
	  allocated by libsetrans.
0e42ca
0e42ca
* Sun Dec 11 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-3
0e42ca
- update to latest libsetrans  
0e42ca
- Fix potential memory leak
0e42ca
0e42ca
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
0e42ca
- rebuilt
0e42ca
0e42ca
* Thu Dec 8 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
0e42ca
- Update to never version
0e42ca
	* Merged patch for swig interfaces from Dan Walsh.
0e42ca
0e42ca
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
0e42ca
- Update to never version
0e42ca
0e42ca
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-2
0e42ca
- Fix some of the python swig objects
0e42ca
0e42ca
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-1
0e42ca
- Update to latest from NSA
0e42ca
	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
0e42ca
	  modified matchpathcon implementation to make context validation/
0e42ca
	  canonicalization optional at matchpathcon_init time, deferring it
0e42ca
	  to a successful matchpathcon by default unless the new flag is set
0e42ca
	  by the caller.
0e42ca
	* Added matchpathcon_init_prefix() interface, and
0e42ca
	  reworked matchpathcon implementation to support selective
0e42ca
	  loading of file contexts entries based on prefix matching
0e42ca
	  between the pathname regex stems and the specified path
0e42ca
	  prefix (stem must be a prefix of the specified path prefix).
0e42ca
0e42ca
* Wed Nov 30 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-1
0e42ca
- Update to latest from NSA
0e42ca
	* Change getsebool to return on/off instead of active/inactive
0e42ca
0e42ca
* Tue Nov 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.25-1
0e42ca
- Update to latest from NSA
0e42ca
	* Added -f file_contexts option to matchpathcon util.
0e42ca
	  Fixed warning message in matchpathcon_init().
0e42ca
	* Merged Makefile python definitions patch from Dan Walsh.
0e42ca
0e42ca
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.23-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged swigify patch from Dan Walsh.
0e42ca
0e42ca
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-4
0e42ca
- Separate out libselinux-python bindings into separate rpm
0e42ca
0e42ca
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-3
0e42ca
- Read libsetrans requirement
0e42ca
0e42ca
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-2
0e42ca
- Add python bindings
0e42ca
0e42ca
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged make failure in rpm_execcon non-fatal in permissive mode
0e42ca
	  patch from Ivan Gyurdiev.
0e42ca
0e42ca
* Tue Nov 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-2
0e42ca
- Remove requirement for libsetrans
0e42ca
0e42ca
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-1
0e42ca
- Update to latest from NSA
0e42ca
	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
0e42ca
	  and modified matchpathcon_init() to skip context translation
0e42ca
	  if it is set by the caller.
0e42ca
0e42ca
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
0e42ca
- Update to latest from NSA
0e42ca
	* Added security_canonicalize_context() interface and
0e42ca
	  set_matchpathcon_canoncon() interface for obtaining
0e42ca
	  canonical contexts.  Changed matchpathcon internals
0e42ca
	  to obtain canonical contexts by default.  Provided
0e42ca
	  fallback for kernels that lack extended selinuxfs context
0e42ca
	  interface.
0e42ca
- Patch to not translate mls when calling setfiles
0e42ca
0e42ca
* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged seusers parser changes from Ivan Gyurdiev.
0e42ca
	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
0e42ca
	* Changed seusers parser to reject empty fields.
0e42ca
0e42ca
* Fri Nov 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.18-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged seusers empty level handling patch from Jonathan Kim (TCS).
0e42ca
0e42ca
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-4
0e42ca
- Rebuild for latest libsepol
0e42ca
0e42ca
* Mon Oct 31 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-2
0e42ca
- Rebuild for latest libsepol
0e42ca
0e42ca
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-1
0e42ca
- Change default to __default__
0e42ca
0e42ca
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-3
0e42ca
- Change default to __default__
0e42ca
0e42ca
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-2
0e42ca
- Add selinux_translations_path
0e42ca
0e42ca
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged selinux_path() and selinux_homedir_context_path()
0e42ca
	  functions from Joshua Brindle.
0e42ca
0e42ca
* Fri Oct 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-2
0e42ca
- Need to check for /sbin/telinit
0e42ca
0e42ca
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged fixes for make DESTDIR= builds from Joshua Brindle.
0e42ca
0e42ca
* Mon Oct 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.12-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged get_default_context_with_rolelevel and man pages from
0e42ca
	  Dan Walsh (Red Hat).
0e42ca
	* Updated call to sepol_policydb_to_image for sepol changes.
0e42ca
	* Changed getseuserbyname to ignore empty lines and to handle
0e42ca
	no matching entry in the same manner as no seusers file.
0e42ca
0e42ca
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2
0e42ca
- Tell init to reexec itself in post script
0e42ca
0e42ca
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-1
0e42ca
- Update to latest from NSA
0e42ca
	* Changed selinux_mkload_policy to try downgrading the
0e42ca
	latest policy version available to the kernel-supported version.
0e42ca
	* Changed selinux_mkload_policy to fall back to the maximum
0e42ca
	policy version supported by libsepol if the kernel policy version
0e42ca
	falls outside of the supported range.
0e42ca
0e42ca
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1
0e42ca
- Update to latest from NSA
0e42ca
	* Changed getseuserbyname to fall back to the Linux username and
0e42ca
	NULL level if seusers config file doesn't exist unless 
0e42ca
	REQUIRESEUSERS=1 is set in /etc/selinux/config.
0e42ca
	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.
0e42ca
0e42ca
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
0e42ca
- Update to latest from NSA
0e42ca
	* Added selinux_init_load_policy() function as an even higher level
0e42ca
	interface for the initial policy load by /sbin/init.  This obsoletes
0e42ca
	the load_policy() function in the sysvinit-selinux.patch. 
0e42ca
	* Added selinux_mkload_policy() function as a higher level interface
0e42ca
	for loading policy than the security_load_policy() interface.
0e42ca
0e42ca
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.4-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged fix for matchpathcon (regcomp error checking) from Johan
0e42ca
	Fischer.  Also added use of regerror to obtain the error string
0e42ca
	for inclusion in the error message.
0e42ca
0e42ca
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
0e42ca
- Update to latest from NSA
0e42ca
	* Changed getseuserbyname to not require (and ignore if present)
0e42ca
	the MLS level in seusers.conf if MLS is disabled, setting *level
0e42ca
	to NULL in this case.
0e42ca
0e42ca
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1
0e42ca
- Update to latest from NSA
0e42ca
	* Merged getseuserbyname patch from Dan Walsh.
0e42ca
0e42ca
* Thu Sep 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-3
0e42ca
- Fix patch to satisfy upstream
0e42ca
0e42ca
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-2
0e42ca
- Update to latest from NSA
0e42ca
- Add getseuserbyname
0e42ca
0e42ca
* Fri Sep 16 2005 Dan Walsh <dwalsh@redhat.com> 1.26-6
0e42ca
- Fix patch call
0e42ca
0e42ca
* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-5
0e42ca
- Fix strip_con call
0e42ca
0e42ca
* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-3
0e42ca
- Go back to original libsetrans code
0e42ca
0e42ca
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
0e42ca
- Eliminate forth param from mls context when mls is not enabled.
0e42ca
0e42ca
* Tue Sep 6 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-1
0e42ca
- Update from NSA
0e42ca
	* Merged modified form of patch to avoid dlopen/dlclose by
0e42ca
	the static libselinux from Dan Walsh.  Users of the static libselinux
0e42ca
	will not have any context translation by default.
0e42ca
0e42ca
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.6-1
0e42ca
- Update from NSA
0e42ca
	* Added public functions to export context translation to
0e42ca
	users of libselinux (selinux_trans_to_raw_context,
0e42ca
	selinux_raw_to_trans_context).
0e42ca
0e42ca
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
0e42ca
- Update from NSA
0e42ca
	* Remove special definition for context_range_set; use
0e42ca
	common code.
0e42ca
0e42ca
* Thu Aug 25 2005 Dan Walsh <dwalsh@redhat.com> 1.25.4-1
0e42ca
- Update from NSA
0e42ca
	* Hid translation-related symbols entirely and ensured that 
0e42ca
	raw functions have hidden definitions for internal use.
0e42ca
	* Allowed setting NULL via context_set* functions.
0e42ca
	* Allowed whitespace in MLS component of context.
0e42ca
	* Changed rpm_execcon to use translated functions to workaround
0e42ca
	lack of MLS level on upgraded systems.
0e42ca
0e42ca
* Wed Aug 24 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-2
0e42ca
- Allow set_comp on unset ranges
0e42ca
0e42ca
* Wed Aug 24 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
0e42ca
- Merged context translation patch, originally by TCS,
0e42ca
  with modifications by Dan Walsh (Red Hat).
0e42ca
0e42ca
* Wed Aug 17 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-2
0e42ca
- Apply translation patch
0e42ca
0e42ca
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
0e42ca
- Update from NSA
0e42ca
	* Merged several fixes for error handling paths in the
0e42ca
	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
0e42ca
	  code from Serge Hallyn (IBM). Bugs found by Coverity.
0e42ca
	* Removed setupns; migrated to pam.
0e42ca
	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
0e42ca
	  Original symbol is temporarily retained for compatibility until 
0e42ca
	  all callers are updated.
0e42ca
0e42ca
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.24.2-1
0e42ca
- Update makefiles
0e42ca
0e42ca
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.24.1-1
0e42ca
- Update from NSA
0e42ca
	* Merged security_setupns() from Chad Sellers.
0e42ca
- fix selinuxenabled man page
0e42ca
0e42ca
* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-1
0e42ca
- Update from NSA
0e42ca
	* Merged avcstat and selinux man page from Dan Walsh.
0e42ca
	* Changed security_load_booleans to process booleans.local 
0e42ca
	  even if booleans file doesn't exist.
0e42ca
	
0e42ca
* Fri Apr 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-3
0e42ca
- Fix avcstat to clear totals
0e42ca
0e42ca
* Fri Apr 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-2
0e42ca
- Add info to man page
0e42ca
0e42ca
* Fri Apr 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-1
0e42ca
- Update from NSA
0e42ca
	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
0e42ca
	* Rewrote get_ordered_context_list and helpers, including
0e42ca
	  changing logic to allow variable MLS fields.
0e42ca
0e42ca
* Tue Apr 26 2005 Dan Walsh <dwalsh@redhat.com> 1.23.8-1
0e42ca
- Update from NSA
0e42ca
0e42ca
* Thu Apr 21 2005 Dan Walsh <dwalsh@redhat.com> 1.23.7-3
0e42ca
- Add backin matchpathcon
0e42ca
0e42ca
* Wed Apr 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.7-2
0e42ca
- Fix selinux_policy_root man page
0e42ca
0e42ca
* Wed Apr 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.7-1
0e42ca
- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;
0e42ca
0e42ca
* Mon Apr 11 2005 Dan Walsh <dwalsh@redhat.com> 1.23.6-1
0e42ca
- Update from NSA
0e42ca
	* Fixed bug in matchpathcon_filespec_destroy.
0e42ca
0e42ca
* Wed Apr 6 2005 Dan Walsh <dwalsh@redhat.com> 1.23.5-1
0e42ca
- Update from NSA
0e42ca
	* Fixed bug in rpm_execcon error handling path.
0e42ca
0e42ca
* Mon Apr 4 2005 Dan Walsh <dwalsh@redhat.com> 1.23.4-1
0e42ca
- Update from NSA
0e42ca
	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
0e42ca
	* Merged fix for getconlist utility from Andreas Steinmetz.
0e42ca
0e42ca
* Tue Mar 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.2-3
0e42ca
- Update from NSA
0e42ca
0e42ca
* Wed Mar 23 2005 Dan Walsh <dwalsh@redhat.com> 1.23.2-2
0e42ca
- Better handling of booleans
0e42ca
0e42ca
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.2-1
0e42ca
- Update from NSA
0e42ca
	* Merged destructors patch from Tomas Mraz.
0e42ca
0e42ca
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.1-1
0e42ca
- Update from NSA
0e42ca
	* Added set_matchpathcon_flags() function for setting flags
0e42ca
	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
0e42ca
	  means only process the base file_contexts file, not 
0e42ca
	  file_contexts.homedirs or file_contexts.local, and is for use by
0e42ca
	  setfiles -c.
0e42ca
	* Updated matchpathcon.3 man page.
0e42ca
0e42ca
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-1
0e42ca
- Update from NSA
0e42ca
0e42ca
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.21.13-1
0e42ca
- Update from NSA
0e42ca
	* Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.
0e42ca
0e42ca
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.21.12-1
0e42ca
- Update from NSA
0e42ca
  * Changed matchpathcon_common to ignore any non-format bits in the mode.
0e42ca
0e42ca
* Mon Feb 28 2005 Dan Walsh <dwalsh@redhat.com> 1.21.11-2
0e42ca
- Default matchpathcon to regular files if the user specifies a mode
0e42ca
0e42ca
* Tue Feb 22 2005 Dan Walsh <dwalsh@redhat.com> 1.21.11-1
0e42ca
- Update from NSA
0e42ca
	* Merged several fixes from Ulrich Drepper.
0e42ca
0e42ca
* Mon Feb 21 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-3
0e42ca
- Fix matchpathcon on eof.
0e42ca
0e42ca
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-1
0e42ca
- Update from NSA
0e42ca
	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
0e42ca
	* Added selinux_users_path() for path to directory containing
0e42ca
	  system.users and local.users.
0e42ca
0e42ca
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.9-2
0e42ca
- Process file_context.homedir
0e42ca
0e42ca
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.9-1
0e42ca
- Update from NSA
0e42ca
  *	 Changed relabel Makefile target to use restorecon.
0e42ca
0e42ca
* Tue Feb 8 2005 Dan Walsh <dwalsh@redhat.com> 1.21.8-1
0e42ca
- Update from NSA
0e42ca
	* Regenerated av_permissions.h.
0e42ca
0e42ca
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.7-1
0e42ca
- Update from NSA
0e42ca
	* Modified avc_dump_av to explicitly check for any permissions that
0e42ca
	  cannot be mapped to string names and display them as a hex value.
0e42ca
	* Regenerated av_permissions.h.
0e42ca
0e42ca
* Mon Jan 31 2005 Dan Walsh <dwalsh@redhat.com> 1.21.5-1
0e42ca
- Update from NSA
0e42ca
	* Generalized matchpathcon internals, exported more interfaces,
0e42ca
	  and moved additional code from setfiles into libselinux so that
0e42ca
	  setfiles can directly use matchpathcon.
0e42ca
0e42ca
* Fri Jan 28 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-1
0e42ca
- Update from NSA
0e42ca
	* Prevent overflow of spec array in matchpathcon.
0e42ca
	* Fixed several uses of internal functions to avoid relocations.
0e42ca
	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
0e42ca
	  a regular execve if not enabled (or unable to determine due to a lack
0e42ca
	  of /proc, e.g. chroot'd environment).
0e42ca
0e42ca
* Wed Jan 26 2005 Dan Walsh <dwalsh@redhat.com> 1.21.2-1
0e42ca
- Update from NSA
0e42ca
	* Merged minor fix for avcstat from Dan Walsh.
0e42ca
0e42ca
* Mon Jan 24 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-3
0e42ca
- rpmexeccon should not fail in permissive mode.
0e42ca
0e42ca
* Fri Jan 21 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-2
0e42ca
- fix printf in avcstat
0e42ca
0e42ca
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-1
0e42ca
- Update from NSA
0e42ca
0e42ca
* Wed Jan 12 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-3
0e42ca
- Modify matchpathcon to also process file_contexts.local if it exists
0e42ca
0e42ca
* Wed Jan 12 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-2
0e42ca
- Add is_customizable_types function call
0e42ca
0e42ca
* Fri Jan 7 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-1
0e42ca
- Update to latest from upstream
0e42ca
	* Just changing version number to match upstream
0e42ca
0e42ca
* Wed Dec 29 2004 Dan Walsh <dwalsh@redhat.com> 1.19.4-1
0e42ca
- Update to latest from upstream
0e42ca
	* Changed matchpathcon to return -1 with errno ENOENT for 
0e42ca
	  <<none>> entries, and also for an empty file_contexts configuration.
0e42ca
0e42ca
* Tue Dec 28 2004 Dan Walsh <dwalsh@redhat.com> 1.19.3-3
0e42ca
- Fix link devel libraries
0e42ca
0e42ca
* Mon Dec 27 2004 Dan Walsh <dwalsh@redhat.com> 1.19.3-2
0e42ca
- Fix unitialized variable in avcstat.c
0e42ca
0e42ca
* Tue Nov 30 2004 Dan Walsh <dwalsh@redhat.com> 1.19.3-1
0e42ca
- Upgrade to upstream
0e42ca
	* Removed some trivial utils that were not useful or redundant.
0e42ca
	* Changed BINDIR default to /usr/sbin to match change in Fedora.
0e42ca
	* Added security_compute_member.
0e42ca
	* Added man page for setcon.
0e42ca
0e42ca
* Tue Nov 30 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
0e42ca
- Upgrade to upstream
0e42ca
0e42ca
* Thu Nov 18 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-6
0e42ca
- Add avcstat program
0e42ca
0e42ca
* Mon Nov 15 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-4
0e42ca
- Add lots of missing man pages
0e42ca
0e42ca
* Fri Nov 12 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-2
0e42ca
- Fix output of getsebool.
0e42ca
0e42ca
* Tue Nov 9 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-1
0e42ca
- Update from upstream, fix setsebool -P segfault
0e42ca
0e42ca
* Fri Nov 5 2004 Steve Grubb <sgrubb@redhat.com> 1.18.1-5
0e42ca
- Add a patch from upstream. Fixes signed/unsigned issues, and 
0e42ca
  incomplete structure copy.
0e42ca
0e42ca
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-4
0e42ca
- More fixes from sgrubb, better syslog
0e42ca
0e42ca
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-3
0e42ca
- Have setsebool and togglesebool log changes to syslog
0e42ca
0e42ca
* Wed Nov 3 2004 Steve Grubb <sgrubb@redhat.com> 1.18.1-2
0e42ca
- Add patch to make setsebool update bool on disk
0e42ca
- Make togglesebool have a rollback capability in case it blows up inflight
0e42ca
0e42ca
* Tue Nov 2 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-1
0e42ca
- Upgrade to latest from NSA
0e42ca
0e42ca
* Thu Oct 28 2004 Steve Grubb <sgrubb@redhat.com> 1.17.15-2
0e42ca
- Changed the location of the utilities to /usr/sbin since
0e42ca
  normal users can't use them anyways.
0e42ca
0e42ca
* Wed Oct 27 2004 Steve Grubb <sgrubb@redhat.com> 1.17.15-2
0e42ca
- Updated various utilities, removed utilities that are for testing,
0e42ca
  added man pages.
0e42ca
0e42ca
* Fri Oct 15 2004 Dan Walsh <dwalsh@redhat.com> 1.17.15-1
0e42ca
- Add -g flag to make
0e42ca
- Upgrade to latest  from NSA
0e42ca
	* Added rpm_execcon.
0e42ca
0e42ca
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.14-1
0e42ca
- Upgrade to latest  from NSA
0e42ca
	* Merged setenforce and removable context patch from Dan Walsh.
0e42ca
	* Merged build fix for alpha from Ulrich Drepper.
0e42ca
	* Removed copyright/license from selinux_netlink.h - definitions only.
0e42ca
0e42ca
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.13-3
0e42ca
- Change setenforce to accept Enforcing and Permissive
0e42ca
0e42ca
* Wed Sep 22 2004 Dan Walsh <dwalsh@redhat.com> 1.17.13-2
0e42ca
- Add alpha patch
0e42ca
0e42ca
* Mon Sep 20 2004 Dan Walsh <dwalsh@redhat.com> 1.17.13-1
0e42ca
- Upgrade to latest  from NSA
0e42ca
0e42ca
* Thu Sep 16 2004 Dan Walsh <dwalsh@redhat.com> 1.17.12-2
0e42ca
- Add selinux_removable_context_path
0e42ca
0e42ca
* Tue Sep 14 2004 Dan Walsh <dwalsh@redhat.com> 1.17.12-1
0e42ca
- Update from NSA
0e42ca
	* Add matchmediacon
0e42ca
0e42ca
* Tue Sep 14 2004 Dan Walsh <dwalsh@redhat.com> 1.17.11-1
0e42ca
- Update from NSA
0e42ca
	* Merged in matchmediacon changes.
0e42ca
0e42ca
* Fri Sep 10 2004 Dan Walsh <dwalsh@redhat.com> 1.17.10-1
0e42ca
- Update from NSA
0e42ca
	* Regenerated headers for new nscd permissions.
0e42ca
0e42ca
* Wed Sep 8 2004 Dan Walsh <dwalsh@redhat.com> 1.17.9-2
0e42ca
- Add matchmediacon
0e42ca
0e42ca
* Wed Sep 8 2004 Dan Walsh <dwalsh@redhat.com> 1.17.9-1
0e42ca
- Update from NSA
0e42ca
	* Added get_default_context_with_role.
0e42ca
0e42ca
* Thu Sep 2 2004 Dan Walsh <dwalsh@redhat.com> 1.17.8-2
0e42ca
- Clean up spec file
0e42ca
	* Patch from Matthias Saou
0e42ca
0e42ca
* Thu Sep 2 2004 Dan Walsh <dwalsh@redhat.com> 1.17.8-1
0e42ca
- Update from NSA
0e42ca
	* Added set_matchpathcon_printf.	
0e42ca
0e42ca
* Wed Sep 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.7-1
0e42ca
- Update from NSA
0e42ca
	* Reworked av_inherit.h to allow easier re-use by kernel. 
0e42ca
0e42ca
* Tue Aug 31 2004 Dan Walsh <dwalsh@redhat.com> 1.17.6-1
0e42ca
- Add strcasecmp in selinux_config
0e42ca
- Update from NSA
0e42ca
	* Changed avc_has_perm_noaudit to not fail on netlink errors.
0e42ca
	* Changed avc netlink code to check pid based on patch by Steve Grubb.
0e42ca
	* Merged second optimization patch from Ulrich Drepper.
0e42ca
	* Changed matchpathcon to skip invalid file_contexts entries.
0e42ca
	* Made string tables private to libselinux.
0e42ca
	* Merged strcat->stpcpy patch from Ulrich Drepper.
0e42ca
	* Merged matchpathcon man page from Dan Walsh.
0e42ca
	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
0e42ca
	* Autobind netlink socket.
0e42ca
	* Dropped compatibility code from security_compute_user.
0e42ca
	* Merged fix for context_range_set from Chad Hanson.
0e42ca
	* Merged allocation failure checking patch from Chad Hanson.
0e42ca
	* Merged avc netlink error message patch from Colin Walters.
0e42ca
0e42ca
0e42ca
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-1
0e42ca
- Update from NSA
0e42ca
	* Merged second optimization patch from Ulrich Drepper.
0e42ca
	* Changed matchpathcon to skip invalid file_contexts entries.
0e42ca
	* Made string tables private to libselinux.
0e42ca
	* Merged strcat->stpcpy patch from Ulrich Drepper.
0e42ca
	* Merged matchpathcon man page from Dan Walsh.
0e42ca
	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
0e42ca
	* Autobind netlink socket.
0e42ca
	* Dropped compatibility code from security_compute_user.
0e42ca
	* Merged fix for context_range_set from Chad Hanson.
0e42ca
	* Merged allocation failure checking patch from Chad Hanson.
0e42ca
	* Merged avc netlink error message patch from Colin Walters.
0e42ca
0e42ca
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.4-1
0e42ca
- Update from NSA
0e42ca
- Add optflags
0e42ca
0e42ca
* Fri Aug 27 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-1
0e42ca
- Update from NSA
0e42ca
0e42ca
* Thu Aug 26 2004 Dan Walsh <dwalsh@redhat.com> 1.17.2-1
0e42ca
- Add matchpathcon man page
0e42ca
- Latest from NSA
0e42ca
	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
0e42ca
	* Autobind netlink socket.
0e42ca
	* Dropped compatibility code from security_compute_user.
0e42ca
	* Merged fix for context_range_set from Chad Hanson.
0e42ca
	* Merged allocation failure checking patch from Chad Hanson.
0e42ca
	* Merged avc netlink error message patch from Colin Walters.
0e42ca
0e42ca
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.1-1
0e42ca
- Latest from NSA
0e42ca
	* Autobind netlink socket.
0e42ca
	* Dropped compatibility code from security_compute_user.
0e42ca
	* Merged fix for context_range_set from Chad Hanson.
0e42ca
	* Merged allocation failure checking patch from Chad Hanson.
0e42ca
	* Merged avc netlink error message patch from Colin Walters.
0e42ca
0e42ca
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.16.1-1
0e42ca
- Latest from NSA
0e42ca
0e42ca
* Thu Aug 19 2004 Colin Walters <walters@redhat.com> 1.16-1
0e42ca
- New upstream version
0e42ca
0e42ca
* Tue Aug 17 2004 Dan Walsh <dwalsh@redhat.com> 1.15.7-1
0e42ca
- Latest from Upstream
0e42ca
0e42ca
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.6-1
0e42ca
- Fix man pages
0e42ca
0e42ca
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.5-1
0e42ca
- Latest from Upstream
0e42ca
0e42ca
* Fri Aug 13 2004 Dan Walsh <dwalsh@redhat.com> 1.15.4-1
0e42ca
- Latest from Upstream
0e42ca
0e42ca
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-2
0e42ca
- Add man page for boolean functions and SELinux
0e42ca
0e42ca
* Sun Aug 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
0e42ca
- Latest from NSA
0e42ca
0e42ca
* Mon Jul 19 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
0e42ca
- Latest from NSA
0e42ca
0e42ca
* Mon Jul 19 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-3
0e42ca
- uppercase getenforce returns, to make them match system-config-securitylevel
0e42ca
0e42ca
* Thu Jul 15 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-2
0e42ca
- Remove old path patch
0e42ca
0e42ca
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
0e42ca
- Update to latest from NSA
0e42ca
- Add fix to only get old path if file_context file exists in old location
0e42ca
0e42ca
* Wed Jun 30 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-1
0e42ca
- Update to latest from NSA
0e42ca
0e42ca
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.13.4-1
0e42ca
- add nlclass patch
0e42ca
- Update to latest from NSA
0e42ca
0e42ca
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
0e42ca
- rebuilt
0e42ca
0e42ca
* Sun Jun 13 2004 Dan Walsh <dwalsh@redhat.com> 1.13.3-2
0e42ca
- Fix selinux_config to break once it finds SELINUXTYPE.
0e42ca
0e42ca
* Fri May 28 2004 Dan Walsh <dwalsh@redhat.com> 1.13.2-1
0e42ca
-Update with latest from NSA
0e42ca
0e42ca
* Thu May 27 2004 Dan Walsh <dwalsh@redhat.com> 1.13.1-1
0e42ca
- Change to use new policy mechanism
0e42ca
0e42ca
* Mon May 17 2004 Dan Walsh <dwalsh@redhat.com> 1.12-2
0e42ca
- add man patch
0e42ca
0e42ca
* Fri May 14 2004 Dan Walsh <dwalsh@redhat.com> 1.12-1
0e42ca
- Update with latest from NSA
0e42ca
0e42ca
* Wed May 5 2004 Dan Walsh <dwalsh@redhat.com> 1.11.4-1
0e42ca
- Update with latest from NSA
0e42ca
0e42ca
* Thu Apr 22 2004 Dan Walsh <dwalsh@redhat.com> 1.11.3-1
0e42ca
- Add changes for relaxed policy 
0e42ca
- Update to match NSA 
0e42ca
0e42ca
* Thu Apr 15 2004 Dan Walsh <dwalsh@redhat.com> 1.11.2-1
0e42ca
- Add relaxed policy changes 
0e42ca
0e42ca
* Thu Apr 15 2004 Dan Walsh <dwalsh@redhat.com> 1.11-4
0e42ca
- Sync with NSA
0e42ca
0e42ca
* Thu Apr 15 2004 Dan Walsh <dwalsh@redhat.com> 1.11-3
0e42ca
- Remove requires glibc>2.3.4
0e42ca
0e42ca
* Wed Apr 14 2004 Dan Walsh <dwalsh@redhat.com> 1.11-2
0e42ca
- Fix selinuxenabled man page.
0e42ca
0e42ca
* Wed Apr 7 2004 Dan Walsh <dwalsh@redhat.com> 1.11-1
0e42ca
- Upgrade to 1.11
0e42ca
0e42ca
* Wed Apr 7 2004 Dan Walsh <dwalsh@redhat.com> 1.10-2
0e42ca
- Add memleaks patch
0e42ca
0e42ca
* Wed Apr 7 2004 Dan Walsh <dwalsh@redhat.com> 1.10-1
0e42ca
- Upgrade to latest from NSA and add more man pages
0e42ca
0e42ca
* Thu Apr 1 2004 Dan Walsh <dwalsh@redhat.com> 1.9-1
0e42ca
- Update to match NSA
0e42ca
- Cleanup some man pages
0e42ca
0e42ca
* Tue Mar 30 2004 Dan Walsh <dwalsh@redhat.com> 1.8-1
0e42ca
- Upgrade to latest from NSA
0e42ca
0e42ca
* Thu Mar 25 2004 Dan Walsh <dwalsh@redhat.com> 1.6-6
0e42ca
- Add Russell's Man pages
0e42ca
0e42ca
* Thu Mar 25 2004 Dan Walsh <dwalsh@redhat.com> 1.6-5
0e42ca
- Change getenforce to also check is_selinux_enabled
0e42ca
0e42ca
* Thu Mar 25 2004 Dan Walsh <dwalsh@redhat.com> 1.6-4
0e42ca
- Add ownership to /usr/include/selinux
0e42ca
0e42ca
* Wed Mar 10 2004 Dan Walsh <dwalsh@redhat.com> 1.6-3
0e42ca
- fix location of file_contexts file.
0e42ca
0e42ca
* Wed Mar 10 2004 Dan Walsh <dwalsh@redhat.com> 1.6-2
0e42ca
- Fix matchpathcon to use BUFSIZ
0e42ca
0e42ca
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
0e42ca
- rebuilt
0e42ca
0e42ca
* Mon Feb 23 2004 Dan Walsh <dwalsh@redhat.com> 1.4-11
0e42ca
- add matchpathcon
0e42ca
0e42ca
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
0e42ca
- rebuilt
0e42ca
0e42ca
* Fri Jan 23 2004 Dan Walsh <dwalsh@redhat.com> 1.4-9
0e42ca
- Add rootok patch
0e42ca
0e42ca
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-8
0e42ca
- Updated getpeernam patch
0e42ca
0e42ca
* Tue Jan 13 2004 Dan Walsh <dwalsh@redhat.com> 1.4-7
0e42ca
- Add getpeernam patch
0e42ca
0e42ca
* Thu Dec 18 2003 Dan Walsh <dwalsh@redhat.com> 1.4-6
0e42ca
- Add getpeercon patch
0e42ca
0e42ca
* Thu Dec 18 2003 Dan Walsh <dwalsh@redhat.com> 1.4-5
0e42ca
- Put mntpoint patch, because found fix for SysVinit
0e42ca
0e42ca
* Wed Dec 17 2003 Dan Walsh <dwalsh@redhat.com> 1.4-4
0e42ca
- Add remove mntpoint patch, because it breaks SysVinit
0e42ca
0e42ca
* Wed Dec 17 2003 Dan Walsh <dwalsh@redhat.com> 1.4-3
0e42ca
- Add mntpoint patch for SysVinit
0e42ca
0e42ca
* Fri Dec 12 2003 Dan Walsh <dwalsh@redhat.com> 1.4-2
0e42ca
- Add -r -u -t to getcon 
0e42ca
0e42ca
* Sat Dec 6 2003 Dan Walsh <dwalsh@redhat.com> 1.4-1
0e42ca
- Upgrade to latest from NSA
0e42ca
0e42ca
* Mon Oct 27 2003 Dan Walsh <dwalsh@redhat.com> 1.3-2
0e42ca
- Fix x86_64 build
0e42ca
0e42ca
* Wed Oct 22 2003 Dan Walsh <dwalsh@redhat.com> 1.3-1
0e42ca
- Latest tarball from NSA.
0e42ca
0e42ca
* Tue Oct 21 2003 Dan Walsh <dwalsh@redhat.com> 1.2-9
0e42ca
- Update with latest changes from NSA
0e42ca
0e42ca
* Mon Oct 20 2003 Dan Walsh <dwalsh@redhat.com> 1.2-8
0e42ca
- Change location of .so file
0e42ca
0e42ca
* Wed Oct 8 2003 Dan Walsh <dwalsh@redhat.com> 1.2-7
0e42ca
- Break out into development library
0e42ca
0e42ca
* Wed Oct  8 2003 Dan Walsh <dwalsh@redhat.com> 1.2-6
0e42ca
- Move location of libselinux.so to /lib
0e42ca
0e42ca
* Fri Oct  3 2003 Dan Walsh <dwalsh@redhat.com> 1.2-5
0e42ca
- Add selinuxenabled patch
0e42ca
0e42ca
* Wed Oct  1 2003 Dan Walsh <dwalsh@redhat.com> 1.2-4
0e42ca
- Update with final NSA 1.2 sources.
0e42ca
0e42ca
* Fri Sep  12 2003 Dan Walsh <dwalsh@redhat.com> 1.2-3
0e42ca
- Update with latest from NSA.
0e42ca
0e42ca
* Thu Aug  28 2003 Dan Walsh <dwalsh@redhat.com> 1.2-2
0e42ca
- Fix to build on x86_64
0e42ca
0e42ca
* Thu Aug  21 2003 Dan Walsh <dwalsh@redhat.com> 1.2-1
0e42ca
- update for version 1.2
0e42ca
0e42ca
* Tue May 27 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
0e42ca
- Initial version