|
 |
71cd55 |
Summary: SELinux binary policy manipulation library
|
|
|
71cd55 |
Name: libsepol
|
|
|
71cd55 |
Version: 3.2
|
|
|
71cd55 |
Release: 4%{?dist}
|
|
|
71cd55 |
License: LGPLv2+
|
|
|
71cd55 |
Source0: https://github.com/SELinuxProject/selinux/releases/download/3.2/libsepol-3.2.tar.gz
|
|
|
71cd55 |
URL: https://github.com/SELinuxProject/selinux/wiki
|
|
|
71cd55 |
# $ git clone https://github.com/fedora-selinux/selinux.git
|
|
|
71cd55 |
# $ cd selinux
|
|
|
71cd55 |
# $ git format-patch -N libsepol-3.2 -- libsepol
|
|
|
71cd55 |
# $ i=1; for j in 0*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
|
|
|
71cd55 |
# Patch list start
|
|
|
71cd55 |
Patch0001: 0001-libsepol-Expand-role-attributes-in-constraint-expres.patch
|
|
|
71cd55 |
Patch0002: 0002-libsepol-Properly-handle-types-associated-to-role-at.patch
|
|
|
71cd55 |
Patch0003: 0003-libsepol-Remove-unnecessary-copying-of-declarations-.patch
|
|
|
71cd55 |
Patch0004: 0004-libsepol-Check-kernel-to-CIL-and-Conf-functions-for-.patch
|
|
|
71cd55 |
Patch0005: 0005-libsepol-cil-make-cil_post_fc_fill_data-static.patch
|
|
|
71cd55 |
Patch0006: 0006-libsepol-cil-remove-stray-printf.patch
|
|
|
71cd55 |
Patch0007: 0007-libsepol-cil-replace-printf-with-proper-cil_tree_log.patch
|
|
|
71cd55 |
Patch0008: 0008-libsepol-cil-fix-NULL-pointer-dereference-in-__cil_i.patch
|
|
|
71cd55 |
Patch0009: 0009-libsepol-cil-do-not-leak-avrulex_ioctl_table-memory-.patch
|
|
|
71cd55 |
Patch0010: 0010-libsepol-make-num_-unsigned-int-in-module_to_cil.patch
|
|
|
71cd55 |
Patch0011: 0011-libsepol-Write-NO_IDENTIFIER-for-empty-constraint-ex.patch
|
|
|
71cd55 |
Patch0012: 0012-libsepol-Enclose-identifier-lists-in-constraint-expr.patch
|
|
|
71cd55 |
Patch0013: 0013-libsepol-cil-Allow-lists-in-constraint-expressions.patch
|
|
|
71cd55 |
Patch0014: 0014-libsepol-Enclose-identifier-lists-in-CIL-constraint-.patch
|
|
|
71cd55 |
Patch0015: 0015-libsepol-Write-NO_IDENTIFIER-for-empty-CIL-constrain.patch
|
|
|
71cd55 |
Patch0016: 0016-libsepol-cil-Check-for-duplicate-blocks-optionals-an.patch
|
|
|
71cd55 |
Patch0017: 0017-libsepol-cil-Fix-out-of-bound-read-of-file-context-p.patch
|
|
|
71cd55 |
Patch0018: 0018-libsepol-cil-Destroy-classperms-list-when-resetting-.patch
|
|
|
71cd55 |
Patch0019: 0019-libsepol-cil-Destroy-classperm-list-when-resetting-m.patch
|
|
|
71cd55 |
Patch0020: 0020-libsepol-cil-cil_reset_classperms_set-should-not-res.patch
|
|
|
71cd55 |
Patch0021: 0021-libsepol-cil-Set-class-field-to-NULL-when-resetting-.patch
|
|
|
71cd55 |
Patch0022: 0022-libsepol-cil-More-strict-verification-of-constraint-.patch
|
|
|
71cd55 |
Patch0023: 0023-libsepol-cil-Exit-with-an-error-if-declaration-name-.patch
|
|
|
71cd55 |
Patch0024: 0024-libsepol-cil-Allow-permission-expressions-when-using.patch
|
|
|
71cd55 |
Patch0025: 0025-libsepol-cil-Refactor-helper-function-for-cil_gen_no.patch
|
|
|
71cd55 |
Patch0026: 0026-libsepol-cil-Create-function-cil_add_decl_to_symtab-.patch
|
|
|
71cd55 |
Patch0027: 0027-libsepol-cil-Move-check-for-the-shadowing-of-macro-p.patch
|
|
|
71cd55 |
Patch0028: 0028-libsepol-cil-Reorder-checks-for-invalid-rules-when-b.patch
|
|
|
71cd55 |
Patch0029: 0029-libsepol-cil-Cleanup-build-AST-helper-functions.patch
|
|
|
71cd55 |
Patch0030: 0030-libsepol-cil-Create-new-first-child-helper-function-.patch
|
|
|
71cd55 |
Patch0031: 0031-libsepol-cil-Use-AST-to-track-blocks-and-optionals-w.patch
|
|
|
71cd55 |
Patch0032: 0032-libsepol-cil-Reorder-checks-for-invalid-rules-when-r.patch
|
|
|
71cd55 |
Patch0033: 0033-libsepol-cil-Sync-checks-for-invalid-rules-in-boolea.patch
|
|
|
71cd55 |
Patch0034: 0034-libsepol-cil-Check-for-statements-not-allowed-in-opt.patch
|
|
|
71cd55 |
Patch0035: 0035-libsepol-cil-Sync-checks-for-invalid-rules-in-macros.patch
|
|
|
71cd55 |
Patch0036: 0036-libsepol-cil-Do-not-allow-tunable-declarations-in-in.patch
|
|
|
71cd55 |
Patch0037: 0037-libsepol-cil-Make-invalid-statement-error-messages-c.patch
|
|
|
71cd55 |
Patch0038: 0038-libsepol-cil-Use-CIL_ERR-for-error-messages-in-cil_c.patch
|
|
|
71cd55 |
Patch0039: 0039-libsepol-cil-Create-functions-to-write-the-CIL-AST.patch
|
|
|
71cd55 |
Patch0040: 0040-libsepol-cil-Add-functions-to-make-use-of-cil_write_.patch
|
|
|
71cd55 |
Patch0041: 0041-libsepol-use-checked-arithmetic-builtin-to-perform-s.patch
|
|
|
71cd55 |
Patch0042: 0042-libsepol-cil-Properly-reset-an-anonymous-classperm-s.patch
|
|
|
71cd55 |
Patch0043: 0043-libsepol-cil-Fix-instances-where-an-error-returns-SE.patch
|
|
|
71cd55 |
Patch0044: 0044-libsepol-cil-Detect-degenerate-inheritance-and-exit-.patch
|
|
|
71cd55 |
Patch0045: 0045-libsepol-cil-Check-datum-in-ordered-list-for-expecte.patch
|
|
|
71cd55 |
Patch0046: 0046-libsepol-cil-Return-an-error-if-a-call-argument-fail.patch
|
|
|
71cd55 |
Patch0047: 0047-libsepol-cil-Check-for-self-referential-loops-in-set.patch
|
|
|
71cd55 |
Patch0048: 0048-libsepol-cil-Fix-name-resolution-involving-inherited.patch
|
|
|
71cd55 |
Patch0049: 0049-libsepol-cil-Make-name-resolution-in-macros-work-as-.patch
|
|
|
71cd55 |
Patch0050: 0050-libsepol-cil-Do-not-add-NULL-node-when-inserting-key.patch
|
|
|
71cd55 |
Patch0051: 0051-libsepo-cil-Refactor-macro-call-resolution.patch
|
|
|
71cd55 |
Patch0052: 0052-libsepol-cil-Do-not-resolve-arguments-to-declaration.patch
|
|
|
71cd55 |
Patch0053: 0053-libsepol-cil-Handle-disabled-optional-blocks-in-earl.patch
|
|
|
71cd55 |
Patch0054: 0054-libsepol-cil-Destroy-the-permission-nodes-when-exiti.patch
|
|
|
71cd55 |
Patch0055: 0055-libsepol-cil-Limit-the-number-of-open-parenthesis-al.patch
|
|
|
71cd55 |
Patch0056: 0056-libsepol-cil-Resolve-anonymous-class-permission-sets.patch
|
|
|
71cd55 |
Patch0057: 0057-libsepol-cil-Pointers-to-datums-should-be-set-to-NUL.patch
|
|
|
71cd55 |
Patch0058: 0058-libsepol-cil-Resolve-anonymous-levels-only-once.patch
|
|
|
71cd55 |
Patch0059: 0059-libsepol-quote-paths-in-CIL-conversion.patch
|
|
|
71cd55 |
Patch0060: 0060-libsepol-cil-Fix-anonymous-IP-address-call-arguments.patch
|
|
|
71cd55 |
Patch0061: 0061-libsepol-cil-Account-for-anonymous-category-sets-in-.patch
|
|
|
71cd55 |
Patch0062: 0062-libsepol-Quote-paths-when-generating-policy.conf-fro.patch
|
|
|
71cd55 |
Patch0063: 0063-libsepol-fix-typos.patch
|
|
|
71cd55 |
Patch0064: 0064-libsepol-resolve-missing-prototypes.patch
|
|
|
71cd55 |
Patch0065: 0065-libsepol-remove-unused-functions.patch
|
|
|
71cd55 |
Patch0066: 0066-libsepol-avoid-unsigned-integer-overflow.patch
|
|
|
71cd55 |
Patch0067: 0067-libsepol-follow-declaration-after-statement.patch
|
|
|
71cd55 |
Patch0068: 0068-libsepol-cil-follow-declaration-after-statement.patch
|
|
|
71cd55 |
Patch0069: 0069-libsepol-remove-dead-stores.patch
|
|
|
71cd55 |
Patch0070: 0070-libsepol-mark-read-only-parameters-of-ebitmap-interf.patch
|
|
|
71cd55 |
Patch0071: 0071-libsepol-mark-read-only-parameters-of-type_set_-inte.patch
|
|
|
71cd55 |
Patch0072: 0072-libsepol-do-not-allocate-memory-of-size-0.patch
|
|
|
71cd55 |
Patch0073: 0073-libsepol-remove-dead-stores.patch
|
|
|
71cd55 |
Patch0074: 0074-libsepol-cil-silence-cast-warning.patch
|
|
|
71cd55 |
Patch0075: 0075-libsepol-cil-drop-extra-semicolon.patch
|
|
|
71cd55 |
Patch0076: 0076-libsepol-cil-drop-dead-store.patch
|
|
|
71cd55 |
Patch0077: 0077-libsepol-cil-drop-unnecessary-casts.patch
|
|
|
71cd55 |
Patch0078: 0078-libsepol-cil-avoid-using-maybe-uninitialized-variabl.patch
|
|
|
71cd55 |
Patch0079: 0079-libsepol-drop-repeated-semicolons.patch
|
|
|
71cd55 |
Patch0080: 0080-libsepol-drop-unnecessary-casts.patch
|
|
|
71cd55 |
Patch0081: 0081-libsepol-declare-file-local-variable-static.patch
|
|
|
71cd55 |
Patch0082: 0082-libsepol-declare-read-only-arrays-const.patch
|
|
|
71cd55 |
Patch0083: 0083-libsepol-cil-Allow-duplicate-optional-blocks-in-most.patch
|
|
|
71cd55 |
Patch0084: 0084-libsepol-cil-Properly-check-for-loops-in-sets.patch
|
|
|
71cd55 |
Patch0085: 0085-libsepol-cil-Fix-syntax-checking-of-defaultrange-rul.patch
|
|
|
71cd55 |
Patch0086: 0086-libsepol-cil-Check-for-empty-list-when-marking-never.patch
|
|
|
71cd55 |
Patch0087: 0087-libsepol-cil-Reduce-the-initial-symtab-sizes-for-blo.patch
|
|
|
71cd55 |
Patch0088: 0088-libsepol-cil-Improve-degenerate-inheritance-check.patch
|
|
|
71cd55 |
Patch0089: 0089-libsepol-cil-Add-function-to-determine-if-a-subtree-.patch
|
|
|
71cd55 |
Patch0090: 0090-libsepol-cil-Only-reset-AST-if-optional-has-a-declar.patch
|
|
|
71cd55 |
Patch0091: 0091-libsepol-cil-make-array-cil_sym_sizes-const.patch
|
|
|
71cd55 |
Patch0092: 0092-libsepol-cil-Provide-option-to-allow-qualified-names.patch
|
|
|
71cd55 |
Patch0093: 0093-libsepol-cil-do-not-override-previous-results-of-__c.patch
|
|
|
71cd55 |
Patch0094: 0094-libsepol-silence-Wextra-semi-stmt-warning.patch
|
|
|
71cd55 |
Patch0095: 0095-libsepol-cil-Improve-checking-for-bad-inheritance-pa.patch
|
|
|
71cd55 |
Patch0096: 0096-libsepol-avoid-unsigned-integer-overflow.patch
|
|
|
71cd55 |
Patch0097: 0097-libsepol-ignore-UBSAN-false-positives.patch
|
|
|
71cd55 |
Patch0098: 0098-libsepol-avoid-implicit-conversions.patch
|
|
|
71cd55 |
Patch0099: 0099-libsepol-assure-string-NUL-termination-of-ibdev_name.patch
|
|
|
71cd55 |
Patch0100: 0100-libsepol-cil-Fix-handling-category-sets-in-an-expres.patch
|
|
|
71cd55 |
Patch0101: 0101-libsepol-cil-do-not-allow-0-in-quoted-strings.patch
|
|
|
71cd55 |
# Patch list end
|
|
|
71cd55 |
BuildRequires: make
|
|
|
71cd55 |
BuildRequires: gcc
|
|
|
71cd55 |
BuildRequires: flex
|
|
|
71cd55 |
Obsoletes: %{name}-compat = 3.1-4
|
|
|
71cd55 |
|
|
|
71cd55 |
%description
|
|
|
71cd55 |
Security-enhanced Linux is a feature of the Linux® kernel and a number
|
|
|
71cd55 |
of utilities with enhanced security functionality designed to add
|
|
|
71cd55 |
mandatory access controls to Linux. The Security-enhanced Linux
|
|
|
71cd55 |
kernel contains new architectural components originally developed to
|
|
|
71cd55 |
improve the security of the Flask operating system. These
|
|
|
71cd55 |
architectural components provide general support for the enforcement
|
|
|
71cd55 |
of many kinds of mandatory access control policies, including those
|
|
|
71cd55 |
based on the concepts of Type Enforcement®, Role-based Access
|
|
|
71cd55 |
Control, and Multi-level Security.
|
|
|
71cd55 |
|
|
|
71cd55 |
libsepol provides an API for the manipulation of SELinux binary policies.
|
|
|
71cd55 |
It is used by checkpolicy (the policy compiler) and similar tools, as well
|
|
|
71cd55 |
as by programs like load_policy that need to perform specific transformations
|
|
|
71cd55 |
on binary policies such as customizing policy boolean settings.
|
|
|
71cd55 |
|
|
|
71cd55 |
%package devel
|
|
|
71cd55 |
Summary: Header files and libraries used to build policy manipulation tools
|
|
|
71cd55 |
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
71cd55 |
|
|
|
71cd55 |
%description devel
|
|
|
71cd55 |
The libsepol-devel package contains the libraries and header files
|
|
|
71cd55 |
needed for developing applications that manipulate binary policies.
|
|
|
71cd55 |
|
|
|
71cd55 |
%package static
|
|
|
71cd55 |
Summary: static libraries used to build policy manipulation tools
|
|
|
71cd55 |
Requires: %{name}-devel%{?_isa} = %{version}-%{release}
|
|
|
71cd55 |
|
|
|
71cd55 |
%description static
|
|
|
71cd55 |
The libsepol-static package contains the static libraries and header files
|
|
|
71cd55 |
needed for developing applications that manipulate binary policies.
|
|
|
71cd55 |
|
|
|
71cd55 |
%prep
|
|
|
71cd55 |
%autosetup -p 2 -n libsepol-%{version}
|
|
|
71cd55 |
|
|
|
71cd55 |
# sparc64 is an -fPIC arch, so we need to fix it here
|
|
|
71cd55 |
%ifarch sparc64
|
|
|
71cd55 |
sed -i 's/fpic/fPIC/g' src/Makefile
|
|
|
71cd55 |
%endif
|
|
|
71cd55 |
|
|
|
71cd55 |
%build
|
|
|
71cd55 |
%set_build_flags
|
|
|
71cd55 |
CFLAGS="$CFLAGS -fno-semantic-interposition"
|
|
|
71cd55 |
%make_build
|
|
|
71cd55 |
|
|
|
71cd55 |
%install
|
|
|
71cd55 |
mkdir -p ${RPM_BUILD_ROOT}%{_libdir}
|
|
|
71cd55 |
mkdir -p ${RPM_BUILD_ROOT}%{_includedir}
|
|
|
71cd55 |
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
|
|
|
71cd55 |
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man3
|
|
|
71cd55 |
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
|
71cd55 |
%make_install LIBDIR="%{_libdir}" SHLIBDIR="%{_libdir}"
|
|
|
71cd55 |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolbools
|
|
|
71cd55 |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolusers
|
|
|
71cd55 |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/chkcon
|
|
|
71cd55 |
rm -rf ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
|
71cd55 |
rm -rf ${RPM_BUILD_ROOT}%{_mandir}/ru/man8
|
|
|
71cd55 |
|
|
|
71cd55 |
%files static
|
|
|
71cd55 |
%{_libdir}/libsepol.a
|
|
|
71cd55 |
|
|
|
71cd55 |
%files devel
|
|
|
71cd55 |
%{_libdir}/libsepol.so
|
|
|
71cd55 |
%{_libdir}/pkgconfig/libsepol.pc
|
|
|
71cd55 |
%{_includedir}/sepol/*.h
|
|
|
71cd55 |
%{_mandir}/man3/*.3.gz
|
|
|
71cd55 |
%dir %{_includedir}/sepol
|
|
|
71cd55 |
%dir %{_includedir}/sepol/policydb
|
|
|
71cd55 |
%{_includedir}/sepol/policydb/*.h
|
|
|
71cd55 |
%dir %{_includedir}/sepol/cil
|
|
|
71cd55 |
%{_includedir}/sepol/cil/*.h
|
|
|
71cd55 |
|
|
|
71cd55 |
%files
|
|
|
71cd55 |
%license COPYING
|
|
|
71cd55 |
%{_libdir}/libsepol.so.2
|
|
|
71cd55 |
|
|
|
71cd55 |
%changelog
|
|
|
71cd55 |
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-4
|
|
|
71cd55 |
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
71cd55 |
Related: rhbz#1991688
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 28 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-3
|
|
|
71cd55 |
- Rebase on upstream commit 32611aea6543
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 3.2-2
|
|
|
71cd55 |
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Mar 8 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-1
|
|
|
71cd55 |
- SELinux userspace 3.2 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 5 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-0.rc2.1
|
|
|
71cd55 |
- SELinux userspace 3.2-rc2 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.2-0.rc1.1.1
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jan 20 2021 Petr Lautrbach <plautrba@redhat.com> - 3.2-0.rc1.1
|
|
|
71cd55 |
- SELinux userspace 3.2-rc1 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Nov 20 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-5
|
|
|
71cd55 |
- Drop and obsolete libsepol-compat subpackage
|
|
|
71cd55 |
- cil: Give error for more than one true or false block
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 23 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-4
|
|
|
71cd55 |
- Drop deprecated functions and duplicated symbols
|
|
|
71cd55 |
- Dange library version to libsepol.so.2
|
|
|
71cd55 |
- temporary ship -compat with libsepol.so.1
|
|
|
71cd55 |
- Re-enable LTO flags
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 27 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-3
|
|
|
71cd55 |
- Disable LTO cflags
|
|
|
71cd55 |
- Drop telinit from % post sciptlet
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 13 2020 Tom Stellard <tstellar@redhat.com> - 3.1-2
|
|
|
71cd55 |
- Use make macros
|
|
|
71cd55 |
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
|
|
|
71cd55 |
- Use set_build_flags and -fno-semantic-interposition
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jul 10 2020 Petr Lautrbach <plautrba@redhat.com> - 3.1-1
|
|
|
71cd55 |
- SELinux userspace 3.1 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-3
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jan 28 2020 Petr Lautrbach <plautrba@redhat.com> - 3.0-2
|
|
|
71cd55 |
- Fix -fno-common issues discovered by GCC 10
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Dec 6 2019 Petr Lautrbach <plautrba@redhat.com> - 3.0-1
|
|
|
71cd55 |
- SELinux userspace 3.0 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Nov 11 2019 Petr Lautrbach <plautrba@redhat.com> - 3.0-0.rc.1
|
|
|
71cd55 |
- SELinux userspace 3.0-rc1 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Mar 18 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-1
|
|
|
71cd55 |
- SELinux userspace 2.9 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Mar 6 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-0.rc2.1
|
|
|
71cd55 |
- SELinux userspace 2.9-rc2 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9-0.rc1.1.1
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 25 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-0.rc1.1
|
|
|
71cd55 |
- SELinux userspace 2.9-rc1 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Nov 13 2018 Petr Lautrbach <plautrba@redhat.com> - 2.8-3
|
|
|
71cd55 |
- Fix RESOURCE_LEAK coverity scan defects
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.8-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri May 25 2018 Petr Lautrbach <plautrba@workstation> - 2.8-1
|
|
|
71cd55 |
- SELinux userspace 2.8 release
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 14 2018 Petr Lautrbach <plautrba@redhat.com> - 2.8-0.rc3.1
|
|
|
71cd55 |
- SELinux userspace 2.8-rc1 release candidate
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Apr 23 2018 Petr Lautrbach <plautrba@redhat.com> - 2.0-0.rc1.1
|
|
|
71cd55 |
- SELinux userspace 2.8-rc1 release candidate
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Mar 21 2018 Petr Lautrbach <plautrba@redhat.com> - 2.7-6
|
|
|
71cd55 |
- Prevent freeing unitialized value in ibendport handling
|
|
|
71cd55 |
- Add support for the SCTP portcon keyword
|
|
|
71cd55 |
- Export sepol_polcap_getnum/name functions
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Mar 13 2018 Petr Lautrbach <plautrba@redhat.com> - 2.7-5
|
|
|
71cd55 |
- cil: Create new keep field for type attribute sets
|
|
|
71cd55 |
- build: follow standard semantics for DESTDIR and PREFIX
|
|
|
71cd55 |
- cil: show an error when cil_expr_to_string() fails
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.7-4
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Nov 22 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-3
|
|
|
71cd55 |
- free ibendport device names
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 20 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-2
|
|
|
71cd55 |
- reset pointer after free in cil_strpool_destroy()
|
|
|
71cd55 |
- cil: Add ability to redeclare types[attributes]
|
|
|
71cd55 |
- cil: Keep attributes used by generated attributes in neverallow rules
|
|
|
71cd55 |
- use IN6ADDR_ANY_INIT to initialize IPv6 addresses
|
|
|
71cd55 |
- fix memory leak in sepol_bool_query()
|
|
|
71cd55 |
- cil: drop wrong unused attribute
|
|
|
71cd55 |
- cil: fix -Wwrite-strings warning
|
|
|
71cd55 |
- cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-1
|
|
|
71cd55 |
- Update to upstream release 2017-08-04
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-5
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Jul 30 2017 Florian Weimer <fweimer@redhat.com> - 2.6-4
|
|
|
71cd55 |
- Rebuild with binutils fix for ppc64le (#1475636)
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jul 28 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-3
|
|
|
71cd55 |
- Fix neverallow bug when checking conditional policy
|
|
|
71cd55 |
- Destroy the expanded level when mls_semantic_level_expand() fails
|
|
|
71cd55 |
- Do not seg fault on sepol_*_key_free(NULL)
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Feb 12 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-1
|
|
|
71cd55 |
- Update to upstream release 2016-10-14
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.5-11
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 03 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-10
|
|
|
71cd55 |
- Check for too many permissions in classes and commons in CIL
|
|
|
71cd55 |
- Fix xperm mapping between avrule and avtab
|
|
|
71cd55 |
- tests: Fix mispelling of optimization option
|
|
|
71cd55 |
- Fix unused/uninitialized variables on mac build
|
|
|
71cd55 |
- Produce more meaningful error messages for conflicting type rules in CIL
|
|
|
71cd55 |
- make "make test" fail when a CUnit test fails
|
|
|
71cd55 |
- tests: fix g_b_role_2 test
|
|
|
71cd55 |
- Change which attributes CIL keeps in the binary policy
|
|
|
71cd55 |
- Port str_read() from kernel and remove multiple occurances of similar code
|
|
|
71cd55 |
- Use calloc instead of malloc for all the *_to_val_structs
|
|
|
71cd55 |
- Fix bugs found by AFL
|
|
|
71cd55 |
- Fix memory leak in expand.c
|
|
|
71cd55 |
- Fix invalid read when policy file is corrupt
|
|
|
71cd55 |
- Fix possible use of uninitialized variables
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 01 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-9
|
|
|
71cd55 |
- Warn instead of fail if permission is not resolved
|
|
|
71cd55 |
- Ignore object_r when adding userrole mappings to policydb
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 14 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-8
|
|
|
71cd55 |
- Add missing return to sepol_node_query()
|
|
|
71cd55 |
- Add missing <stdarg.h> include
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jun 23 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-7
|
|
|
71cd55 |
- Correctly detect unknown classes in sepol_string_to_security_class
|
|
|
71cd55 |
- Sort object files for deterministic linking order
|
|
|
71cd55 |
- Fix neverallowxperm checking on attributes
|
|
|
71cd55 |
- Remove libsepol.map when cleaning
|
|
|
71cd55 |
- Add high-level language line marking support to CIL
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri May 06 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-6
|
|
|
71cd55 |
- Change logic of bounds checking to match change in kernel
|
|
|
71cd55 |
- Fix multiple spelling errors
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 02 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-5
|
|
|
71cd55 |
- Only apply bounds checking to source types in rules
|
|
|
71cd55 |
- Fix CIL and not add an attribute as a type in the attr_type_map
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Apr 29 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-4
|
|
|
71cd55 |
- Build policy on systems not supporting DCCP protocol
|
|
|
71cd55 |
- Fix extended permissions neverallow checking
|
|
|
71cd55 |
- Fix CIL neverallow and bounds checking
|
|
|
71cd55 |
- Android.mk: Add -D_GNU_SOURCE to common_cflags
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Apr 08 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-3
|
|
|
71cd55 |
- Fix bug in CIL when resetting classes
|
|
|
71cd55 |
- Add support for portcon dccp protocol
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Feb 28 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-2
|
|
|
71cd55 |
- Use fully versioned arch-specific requires
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Feb 23 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-1
|
|
|
71cd55 |
- Update to upstream release 2016-02-23
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Feb 21 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-0.1.rc1
|
|
|
71cd55 |
- Update to upstream rc1 release 2016-01-07
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4-4
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Aug 25 2015 Michal Srb <msrb@redhat.com> - 2.4-3
|
|
|
71cd55 |
- Improve compatibility with Python 3 SWIG bindings
|
|
|
71cd55 |
- Resolves: rhbz#1247714
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 14 2015 Adam Jackson <ajax@redhat.com> 2.4-2
|
|
|
71cd55 |
- Pass ldflags to make so hardening works
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Apr 13 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-0.1
|
|
|
71cd55 |
- Update to upstream release 2.4
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-4
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jul 18 2014 Tom Callaway <spot@fedoraproject.org> - 2.3-3
|
|
|
71cd55 |
- fix license handling
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* Improve error message for name-based transition conflicts.
|
|
|
71cd55 |
* Revert libsepol: filename_trans: use some better sorting to compare and merge.
|
|
|
71cd55 |
* Report source file and line information for neverallow failures.
|
|
|
71cd55 |
* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
|
|
|
71cd55 |
* Add sepol_validate_transition_reason_buffer function from Richard Haines.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
- Richard Haines patch V1 Allow constraint denials to be determined.
|
|
|
71cd55 |
- Add separate role declarations as required by modern checkpolicy.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.9-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
- filename_trans: use some better sorting to compare and merge
|
|
|
71cd55 |
- coverity fixes
|
|
|
71cd55 |
- implement default type policy syntax
|
|
|
71cd55 |
- Fix memory leak issues found by Klocwork
|
|
|
71cd55 |
- Add CONTRAINT_NAMES to the kernel
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Jan 27 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.8-8
|
|
|
71cd55 |
- Update to latest patches from eparis/Upstream
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
|
|
|
71cd55 |
- Update to latest patches from eparis/Upstream
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jan 8 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
|
|
|
71cd55 |
- Fix libsepol.stack messages in audit2allow/audit2why
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
|
|
|
71cd55 |
- Update to latest patches from eparis/Upstream
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Nov 27 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
|
|
|
71cd55 |
- Update Richard Haines patch to show constraint information
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Nov 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
|
|
|
71cd55 |
- Add sepol_compute_av_reason_buffer patch from Richard Haines
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-2
|
|
|
71cd55 |
- Revert patch that was attempting to expand filetrans attributes, but is breaking filetrans rules
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* fix neverallow checking on attributes
|
|
|
71cd55 |
* Move context_copy() after switch block in ocontext_copy_*().
|
|
|
71cd55 |
* check for missing initial SID labeling statement.
|
|
|
71cd55 |
* Add always_check_network policy capability
|
|
|
71cd55 |
* role_fix_callback skips out-of-scope roles during expansion.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.7-4
|
|
|
71cd55 |
- Try new patches
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jul 24 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.7-3
|
|
|
71cd55 |
- Revert patches
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.7-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* reserve policycapability for redhat testing of ptrace child
|
|
|
71cd55 |
* cosmetic changes to make the source easier to read
|
|
|
71cd55 |
* prepend instead of append to filename_trans list
|
|
|
71cd55 |
* Android/MacOS X build support
|
|
|
71cd55 |
* allocate enough space to hold filename in trans rules
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Apr 23 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
|
|
|
71cd55 |
- Fix off by one error that is causing file_name transition rules to be expanded- incorrectly on i686 machines
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Apr 17 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
|
|
|
71cd55 |
- Add support for ptrace_child
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* checkpolicy: implement new default labeling behaviors
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.4-6
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-5
|
|
|
71cd55 |
- Update to match eparis pool
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-4
|
|
|
71cd55 |
- Additional fix for default transitioning labeling for semodule
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-3
|
|
|
71cd55 |
- Add Eparis patch for handling of default transition labeling
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Dec 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
|
|
|
71cd55 |
- Allow policy to specify the source of target for generating the default user,role
|
|
|
71cd55 |
- or mls label for a new target.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* regenerate .pc on VERSION change
|
|
|
71cd55 |
* Move ebitmap_* functions from mcstrans to libsepol
|
|
|
71cd55 |
* expand: do filename_trans type comparison on mapped representation
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 31 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.3-2
|
|
|
71cd55 |
-The filename_trans code had a bug where duplicate detection was being
|
|
|
71cd55 |
done between the unmapped type value of a new rule and the type value of
|
|
|
71cd55 |
rules already in policy. This meant that duplicates were not being
|
|
|
71cd55 |
silently dropped and were instead outputting a message that there was a
|
|
|
71cd55 |
problem. It made things hard because the message WAS using the mapped
|
|
|
71cd55 |
type to convert to the string representation, so it didn't look like a
|
|
|
71cd55 |
dup!
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Sep 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
|
|
|
71cd55 |
-Update to upstream
|
|
|
71cd55 |
* Skip writing role attributes for policy.X and
|
|
|
71cd55 |
* Indicate when boolean is indeed a tunable.
|
|
|
71cd55 |
* Separate tunable from boolean during compile.
|
|
|
71cd55 |
* Write and read TUNABLE flags in related
|
|
|
71cd55 |
* Copy and check the cond_bool_datum_t.flags during link.
|
|
|
71cd55 |
* Permanently discard disabled branches of tunables in
|
|
|
71cd55 |
* Skip tunable identifier and cond_node_t in expansion.
|
|
|
71cd55 |
* Create a new preserve_tunables flag
|
|
|
71cd55 |
* Preserve tunables when required by semodule program.
|
|
|
71cd55 |
* setools expects expand_module_avrules to be an exported
|
|
|
71cd55 |
* tree: default make target to all not
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-3
|
|
|
71cd55 |
- Add patch to handle preserving tunables
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-2
|
|
|
71cd55 |
- export expand_module_avrules
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* Only call role_fix_callback for base.p_roles during expansion.
|
|
|
71cd55 |
* use mapped role number instead of module role number
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 1 2011 Dan Walsh <dwalsh@redhat.com> 2.1.1-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* Minor fix to reading policy with filename transition rules
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 27 2011 Dan Walsh <dwalsh@redhat.com> 2.1.0-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* Release, minor version bump
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 3 2011 Dan Walsh <dwalsh@redhat.com> 2.0.45-1
|
|
|
71cd55 |
- Update to upstream
|
|
|
71cd55 |
* Warn if filename_trans rules are dropped by Steve Lawrence.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> 2.0.44-2
|
|
|
71cd55 |
- Fixes for new role_transition class field by Eric Paris.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Apr 14 2011 Dan Walsh <dwalsh@redhat.com> 2.0.44-1
|
|
|
71cd55 |
-Update to upstream
|
|
|
71cd55 |
* Fixes for new role_transition class field by Eric Paris.
|
|
|
71cd55 |
* Add libsepol support for filename_trans rules by Eric Paris.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.43-3
|
|
|
71cd55 |
- re-add Erics patch for filename transitions
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.43-1
|
|
|
71cd55 |
-Update to upstream
|
|
|
71cd55 |
* Add new class field in role_transition by Harry Ciao.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Mar 29 2011 Dan Walsh <dwalsh@redhat.com> 2.0.42-3
|
|
|
71cd55 |
- Apply Eparis Patch
|
|
|
71cd55 |
This patch add libsepol support for filename_trans rules. These rules
|
|
|
71cd55 |
allow on to make labeling decisions for new objects based partially on
|
|
|
71cd55 |
the last path component. They are stored in a list. If we find that
|
|
|
71cd55 |
the number of rules grows to an significant size I will likely choose to
|
|
|
71cd55 |
store these in a hash, both in libsepol and in the kernel. But as long
|
|
|
71cd55 |
as the number of such rules stays small, this should be good.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.42-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Dec 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.42-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix compliation under GCC 4.6 by Justin Mattock
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 18 2010 Dan Walsh <dwalsh@redhat.com> 2.0.41-3
|
|
|
71cd55 |
- Fix libsepol.pc file
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jan 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.41-2
|
|
|
71cd55 |
- Resolve specfile problems
|
|
|
71cd55 |
Resolves: #555835
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Nov 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.41-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed typo in error message from Manoj Srivastava.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> 2.0.40-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add pkgconfig file from Eamon Walsh.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Oct 14 2009 Dan Walsh <dwalsh@redhat.com> 2.0.39-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add support for building Xen policies from Paul Nuzzi.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> 2.0.38-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Check last offset in the module package against the file size.
|
|
|
71cd55 |
Reported by Manoj Srivastava for bug filed by Max Kellermann.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.37-2
|
|
|
71cd55 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> 2.0.37-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add method to check disable dontaudit flag from Christopher Pardy.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Mar 25 2009 Dan Walsh <dwalsh@redhat.com> 2.0.36-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix boolean state smashing from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 5 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-3
|
|
|
71cd55 |
- Fix license specification to be LGPL instead of GPL
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix alias field in module format, caused by boundary format change
|
|
|
71cd55 |
from Caleb Case.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 14 2008 Dan Walsh <dwalsh@redhat.com> 2.0.34-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add bounds support from KaiGai Kohei.
|
|
|
71cd55 |
* Fix invalid aliases bug from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Sep 30 2008 Dan Walsh <dwalsh@redhat.com> 2.0.33-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Revert patch that removed expand_rule.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.32-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Allow require then declare in the source policy from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> 2.0.31-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jun 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.30-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix endianness bug in the handling of network node addresses from Stephen Smalley.
|
|
|
71cd55 |
Only affects big endian platforms.
|
|
|
71cd55 |
Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed May 28 2008 Dan Walsh <dwalsh@redhat.com> 2.0.29-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merge user and role mapping support from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 19 2008 Dan Walsh <dwalsh@redhat.com> 2.0.28-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
|
|
|
71cd55 |
* Belatedly merge test for policy downgrade from Todd Miller.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 27 2008 Dan Walsh <dwalsh@redhat.com> 2.0.26-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add permissive domain support from Eric Paris.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> 2.0.25-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Drop unused ->buffer field from struct policy_file.
|
|
|
71cd55 |
* Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> 2.0.23-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
|
|
|
71cd55 |
* Add support for open_perms policy capability from Eric Paris.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Feb 20 2008 Dan Walsh <dwalsh@redhat.com> 2.0.21-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix invalid memory allocation in policydb_index_others() from Jason Tang.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Feb 4 2008 Dan Walsh <dwalsh@redhat.com> 2.0.20-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Feb 2 2008 Dan Walsh <dwalsh@redhat.com> 2.0.19-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Add support for consuming avrule_blocks during expansion to reduce
|
|
|
71cd55 |
peak memory usage.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> 2.0.18-2
|
|
|
71cd55 |
- Fixed for spec review
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.18-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added support for policy capabilities from Todd Miller.
|
|
|
71cd55 |
* Prevent generation of policy.18 with MLS enabled from Todd Miller.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Dec 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* print module magic number in hex on mismatch, from Todd Miller.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.15-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* clarify and reduce neverallow error reporting from Stephen Smalley.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Nov 6 2007 Dan Walsh <dwalsh@redhat.com> 2.0.14-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Reject self aliasing at link time from Stephen Smalley.
|
|
|
71cd55 |
* Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
|
|
|
71cd55 |
* Fixed bug in require checking from Stephen Smalley.
|
|
|
71cd55 |
* Added user hierarchy checking from Todd Miller.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 26 2007 Dan Walsh <dwalsh@redhat.com> 2.0.11-1
|
|
|
71cd55 |
* Pass CFLAGS to CC even on link command, per Dennis Gilmore.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged support for the handle_unknown policydb flag from Eric Paris.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
|
|
|
71cd55 |
* Fixed module_package_read_offsets bug introduced by the prior patch.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Eliminate unaligned accesses from policy reading code from Stephen Smalley.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Allow dontaudits to be turned off during policy expansion
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.5-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix sepol_context_clone to handle a NULL context correctly.
|
|
|
71cd55 |
This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
|
|
|
71cd55 |
to set the file context entry to "<<none>>".
|
|
|
71cd55 |
- Apply patch from Joshua Brindle to disable dontaudit rules
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jun 21 2007 Dan Walsh <dwalsh@redhat.com> 2.0.4-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged error handling patch from Eamon Walsh.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Apr 17 2007 Dan Walsh <dwalsh@redhat.com> 2.0.3-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Mar 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.2-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix from Karl to remap booleans at expand time to
|
|
|
71cd55 |
avoid holes in the symbol table.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged libsepol segfault fix from Stephen Smalley for when
|
|
|
71cd55 |
sensitivities are required but not present in the base.
|
|
|
71cd55 |
* Merged patch to add errcodes.h to libsepol by Karl MacMillan.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> 1.16.0-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Updated version for stable branch.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Dec 12 2006 Adam Jackson <ajax@redhat.com> 1.15.3-1
|
|
|
71cd55 |
- Add dist tag and rebuild, fixes 6 to 7 upgrades.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Nov 28 2006 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged patch to compile wit -fPIC instead of -fpic from
|
|
|
71cd55 |
Manoj Srivastava to prevent hitting the global offest table
|
|
|
71cd55 |
limit. Patch changed to include libselinux and libsemanage in
|
|
|
71cd55 |
addition to libselinux.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Nov 1 2006 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix from Karl MacMillan for a segfault when linking
|
|
|
71cd55 |
non-MLS modules with users in them.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 24 2006 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix for version comparison that was preventing range
|
|
|
71cd55 |
transition rules from being written for a version 5 base policy
|
|
|
71cd55 |
from Darrel Goeddel.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> 1.14-1
|
|
|
71cd55 |
- NSA Released version - Same as previous but changed release number
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> 1.12.28-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Build libsepol's static object files with -fpic
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 28 2006 Dan Walsh <dwalsh@redhat.com> 1.12.27-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged mls user and range_transition support in modules
|
|
|
71cd55 |
from Darrel Goeddel
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> 1.12.26-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged range transition enhancements and user format changes
|
|
|
71cd55 |
Darrel Goeddel
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 25 2006 Dan Walsh <dwalsh@redhat.com> 1.12.25-3
|
|
|
71cd55 |
- Fix location of include directory to devel package
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 25 2006 Dan Walsh <dwalsh@redhat.com> 1.12.25-2
|
|
|
71cd55 |
- Remove invalid Requires
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> 1.12.25-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged conditionally expand neverallows patch from Jeremy Mowery.
|
|
|
71cd55 |
* Merged refactor expander patch from Jeremy Mowery.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 3 2006 Dan Walsh <dwalsh@redhat.com> 1.12.24-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged libsepol unit tests from Joshua Brindle.
|
|
|
71cd55 |
* Merged symtab datum patch from Karl MacMillan.
|
|
|
71cd55 |
* Merged netfilter contexts support from Chris PeBenito.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Aug 1 2006 Dan Walsh <dwalsh@redhat.com> 1.12.21-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged helpful hierarchy check errors patch from Joshua Brindle.
|
|
|
71cd55 |
* Merged semodule_deps patch from Karl MacMillan.
|
|
|
71cd55 |
This adds source module names to the avrule decls.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.12.19-1.1
|
|
|
71cd55 |
- rebuild
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.12.19-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Lindent.
|
|
|
71cd55 |
* Merged optionals in base take 2 patch set from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jun 13 2006 Bill Nottingham <notting@redhat.com> 1.12.17-2
|
|
|
71cd55 |
- bump so it's newer than the FC5 version
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jun 5 2006 Dan Walsh <dwalsh@redhat.com> 1.12.17-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Revert 1.12.16.
|
|
|
71cd55 |
* Merged cleaner fix for bool_ids overflow from Karl MacMillan,
|
|
|
71cd55 |
replacing the prior patch.
|
|
|
71cd55 |
* Merged fixes for several memory leaks in the error paths during
|
|
|
71cd55 |
policy read from Serge Hallyn.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.12.14-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
|
|
|
71cd55 |
based on bug report and suggested fix by Cedric Roux.
|
|
|
71cd55 |
* Merged sens_copy_callback, check_role_hierarchy_callback,
|
|
|
71cd55 |
and node_from_record fixes from Serge Hallyn.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.12.12-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added sepol_policydb_compat_net() interface for testing whether
|
|
|
71cd55 |
a policy requires the compatibility support for network checks
|
|
|
71cd55 |
to be enabled in the kernel.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu May 18 2006 Dan Walsh <dwalsh@redhat.com> 1.12.11-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
|
|
|
71cd55 |
Reworked to use calloc in the first place, and converted some other
|
|
|
71cd55 |
malloc/memset pairs to calloc calls.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 15 2006 Dan Walsh <dwalsh@redhat.com> 1.12.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged patch to revert role/user decl upgrade from Karl MacMillan.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu May 11 2006 Steve Grubb <sgrubb@redhat.com> 1.12.9
|
|
|
71cd55 |
- Couple minor spec file clean ups
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.12.9-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Dropped tests from all Makefile target.
|
|
|
71cd55 |
* Merged fix warnings patch from Karl MacMillan.
|
|
|
71cd55 |
* Merged libsepol test framework patch from Karl MacMillan.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 1 2006 Dan Walsh <dwalsh@redhat.com> 1.12.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed cond_normalize to traverse the entire cond list at link time.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> 1.12.5-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix for leak of optional package sections from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Mar 29 2006 Dan Walsh <dwalsh@redhat.com> 1.12.4-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Generalize test for bitmap overflow in ebitmap_set_bit.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> 1.12.3-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed attr_convert_callback and expand_convert_type_set
|
|
|
71cd55 |
typemap bug.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Mar 24 2006 Dan Walsh <dwalsh@redhat.com> 1.12.2-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed avrule_block_write num_decls endian bug.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.12.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed sepol_module_package_write buffer overflow bug.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.12-2
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Updated version for release.
|
|
|
71cd55 |
* Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
|
|
|
71cd55 |
* Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged sepol_policydb_mls_enabled interface and error handling
|
|
|
71cd55 |
changes from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Feb 20 2006 Dan Walsh <dwalsh@redhat.com> 1.11.18-2
|
|
|
71cd55 |
- Rebuild for fc5-head
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 17 2006 Dan Walsh <dwalsh@redhat.com> 1.11.18-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged node_expand_addr bugfix and node_compare* change from
|
|
|
71cd55 |
Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 16 2006 Dan Walsh <dwalsh@redhat.com> 1.11.17-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged bug fix patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Added a defined flag to level_datum_t for use by checkpolicy.
|
|
|
71cd55 |
* Merged nodecon support patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged cleanups patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.14-2
|
|
|
71cd55 |
- Fix post install not to fire if /dev/initctr does not exist
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.14-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged optionals in base patch from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.11.13-1.1
|
|
|
71cd55 |
- bump again for double-long bug on ppc(64)
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Feb 7 2006 Dan Walsh <dwalsh@redhat.com> 1.11.13-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged seuser/user_extra support patch from Joshua Brindle.
|
|
|
71cd55 |
* Merged fix patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.11.12-1.1
|
|
|
71cd55 |
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 2 2006 Dan Walsh <dwalsh@redhat.com> 1.11.12-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged assertion copying bugfix from Joshua Brindle.
|
|
|
71cd55 |
* Merged sepol_av_to_string patch from Joshua Brindle.
|
|
|
71cd55 |
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jan 30 2006 Dan Walsh <dwalsh@redhat.com> 1.11.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged cond_expr mapping and package section count bug fixes
|
|
|
71cd55 |
from Joshua Brindle.
|
|
|
71cd55 |
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.9-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged size_t -> unsigned int patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.11.8-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged 2nd const in APIs patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Jan 6 2006 Dan Walsh <dwalsh@redhat.com> 1.11.7-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged const in APIs patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged compare2 function patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Fixed hierarchy checker to only check allow rules.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.11.5-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged further fixes from Russell Coker, specifically:
|
|
|
71cd55 |
- av_to_string overflow checking
|
|
|
71cd55 |
- sepol_context_to_string error handling
|
|
|
71cd55 |
- hierarchy checking memory leak fixes and optimizations
|
|
|
71cd55 |
- avrule_block_read variable initialization
|
|
|
71cd55 |
* Marked deprecated code in genbools and genusers.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.11.4-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged bugfix for sepol_port_modify from Russell Coker.
|
|
|
71cd55 |
* Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged port ordering patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.11.2-2
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged patch series from Ivan Gyurdiev.
|
|
|
71cd55 |
This includes patches to:
|
|
|
71cd55 |
- support ordering of records in compare function
|
|
|
71cd55 |
- enable port interfaces
|
|
|
71cd55 |
- add interfaces for context validity and range checks
|
|
|
71cd55 |
- add include guards
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Dec 27 2005 Dan Walsh <dwalsh@redhat.com> 1.11.1-2
|
|
|
71cd55 |
- Add Ivans patch to make ports work
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Dec 16 2005 Dan Walsh <dwalsh@redhat.com> 1.11.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed mls_range_cpy bug.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
71cd55 |
- rebuilt
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Dec 5 2005 Dan Walsh <dwalsh@redhat.com> 1.9.42-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Dropped handle from user_del_role interface.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.41-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged remove defrole from sepol patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.9.40-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged module function and map file cleanup from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged MLS and genusers cleanups from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.9.39-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
Prepare for removal of booleans* and *.users files.
|
|
|
71cd55 |
* Cleaned up sepol_genbools to not regenerate the image if
|
|
|
71cd55 |
there were no changes in the boolean values, including the
|
|
|
71cd55 |
degenerate case where there are no booleans or booleans.local
|
|
|
71cd55 |
files.
|
|
|
71cd55 |
* Cleaned up sepol_genusers to not warn on missing local.users.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.9.38-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Removed sepol_port_* from libsepol.map, as the port interfaces
|
|
|
71cd55 |
are not yet stable.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.9.37-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged context destroy cleanup patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.36-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged context_to_string interface change patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.35-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added src/dso.h and src/*_internal.h.
|
|
|
71cd55 |
Added hidden_def for exported symbols used within libsepol.
|
|
|
71cd55 |
Added hidden for symbols that should not be exported by
|
|
|
71cd55 |
the wildcards in libsepol.map.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 31 2005 Dan Walsh <dwalsh@redhat.com> 1.9.34-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged record interface, record bugfix, and set_roles patches
|
|
|
71cd55 |
from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.33-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged count specification change from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.9.32-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added further checking and error reporting to
|
|
|
71cd55 |
sepol_module_package_read and _info.
|
|
|
71cd55 |
* Merged sepol handle passing, DEBUG conversion, and memory leak
|
|
|
71cd55 |
fix patches from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.9.30-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Removed processing of system.users from sepol_genusers and
|
|
|
71cd55 |
dropped delusers logic.
|
|
|
71cd55 |
* Removed policydb_destroy from error path of policydb_read,
|
|
|
71cd55 |
since create/init/destroy/free of policydb is handled by the
|
|
|
71cd55 |
caller now.
|
|
|
71cd55 |
* Fixed sepol_module_package_read to handle a failed policydb_read
|
|
|
71cd55 |
properly.
|
|
|
71cd55 |
* Merged query/exists and count patches from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged fix for pruned types in expand code from Joshua Brindle.
|
|
|
71cd55 |
* Merged new module package format code from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 24 2005 Dan Walsh <dwalsh@redhat.com> 1.9.26-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged context interface cleanup, record conversion code,
|
|
|
71cd55 |
key passing, and bug fix patches from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 21 2005 Dan Walsh <dwalsh@redhat.com> 1.9.25-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged users cleanup patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged user record memory leak fix from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged reorganize users patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
- Need to check for /sbin/telinit
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.23-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added check flag to expand_module() to control assertion
|
|
|
71cd55 |
and hierarchy checking on expansion.
|
|
|
71cd55 |
* Reworked check_assertions() and hierarchy_check_constraints()
|
|
|
71cd55 |
to take handles and use callback-based error reporting.
|
|
|
71cd55 |
* Changed expand_module() to call check_assertions() and
|
|
|
71cd55 |
hierarchy_check_constraints() prior to returning the expanded
|
|
|
71cd55 |
policy.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.21-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Changed sepol_module_package_set_file_contexts to copy the
|
|
|
71cd55 |
file contexts data since it is internally managed.
|
|
|
71cd55 |
* Added sepol_policy_file_set_handle interface to associate
|
|
|
71cd55 |
a handle with a policy file.
|
|
|
71cd55 |
* Added handle argument to policydb_from_image/to_image.
|
|
|
71cd55 |
* Added sepol_module_package_set_file_contexts interface.
|
|
|
71cd55 |
* Dropped sepol_module_package_create_file interface.
|
|
|
71cd55 |
* Reworked policydb_read/write, policydb_from_image/to_image,
|
|
|
71cd55 |
and sepol_module_package_read/write to use callback-based error
|
|
|
71cd55 |
reporting system rather than DEBUG.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.19-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Reworked link_packages, link_modules, and expand_module to use
|
|
|
71cd55 |
callback-based error reporting system rather than error buffering.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.9.18-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged conditional expression mapping fix in the module linking
|
|
|
71cd55 |
code from Joshua Brindle.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.9.17-2
|
|
|
71cd55 |
- Tell init to reexec itself in post script
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.9.17-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Hid sepol_module_package type definition, and added get interfaces.
|
|
|
71cd55 |
* Merged new callback-based error reporting system from Ivan
|
|
|
71cd55 |
Gyurdiev.
|
|
|
71cd55 |
* Merged support for require blocks inside conditionals from
|
|
|
71cd55 |
Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed use of policydb_from_image/to_image to ensure proper
|
|
|
71cd55 |
init of policydb.
|
|
|
71cd55 |
* Isolated policydb internal headers under <sepol/policydb/*.h>.
|
|
|
71cd55 |
These headers should only be used by users of the static libsepol.
|
|
|
71cd55 |
Created new <sepol/policydb.h> with new public types and interfaces
|
|
|
71cd55 |
for shared libsepol.
|
|
|
71cd55 |
Created new <sepol/module.h> with public types and interfaces moved
|
|
|
71cd55 |
or wrapped from old module.h, link.h, and expand.h, adjusted for
|
|
|
71cd55 |
new public types for policydb and policy_file.
|
|
|
71cd55 |
Added public interfaces to libsepol.map.
|
|
|
71cd55 |
Some implementation changes visible to users of the static libsepol:
|
|
|
71cd55 |
1) policydb_read no longer calls policydb_init.
|
|
|
71cd55 |
Caller must do so first.
|
|
|
71cd55 |
2) policydb_init no longer takes policy_type argument.
|
|
|
71cd55 |
Caller must set policy_type separately.
|
|
|
71cd55 |
3) expand_module automatically enables the global branch.
|
|
|
71cd55 |
Caller no longer needs to do so.
|
|
|
71cd55 |
4) policydb_write uses the policy_type and policyvers from the
|
|
|
71cd55 |
policydb itself, and sepol_set_policyvers() has been removed.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.9.12-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged function renaming and static cleanup from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.9.11-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged bug fix for check_assertions handling of no assertions
|
|
|
71cd55 |
from Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.9.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged iterate patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged MLS in modules patch from Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.8-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged pointer typedef elimination patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged user list function, new mls functions, and bugfix patch
|
|
|
71cd55 |
from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.7-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged sepol_get_num_roles fix from Karl MacMillan (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Sep 23 2005 Dan Walsh <dwalsh@redhat.com> 1.9.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged bug fix patches from Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.9.5-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged boolean record and memory leak fix patches from Ivan
|
|
|
71cd55 |
Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.9.4-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged interface record patch from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 15 2005 Dan Walsh <dwalsh@redhat.com> 1.9.3-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix for sepol_enable/disable_debug from Ivan
|
|
|
71cd55 |
Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-2
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged stddef.h patch and debug conversion patch from
|
|
|
71cd55 |
Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed expand_avtab and expand_cond_av_list to keep separate
|
|
|
71cd55 |
entries with identical keys but different enabled flags.
|
|
|
71cd55 |
* Updated version for release.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.7.24-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed symtab_insert return value for duplicate declarations.
|
|
|
71cd55 |
* Merged fix for memory error in policy_module_destroy from
|
|
|
71cd55 |
Jason Tang (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.7.22-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged fix for memory leak in sepol_context_to_sid from
|
|
|
71cd55 |
Jason Tang (Tresys).
|
|
|
71cd55 |
* Merged fixes for resource leaks on error paths and
|
|
|
71cd55 |
change to scope_destroy from Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Aug 23 2005 Dan Walsh <dwalsh@redhat.com> 1.7.20-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged more fixes for resource leaks on error paths
|
|
|
71cd55 |
from Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.7.19-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Changed to treat all type conflicts as fatal errors.
|
|
|
71cd55 |
* Merged several error handling fixes from
|
|
|
71cd55 |
Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 15 2005 Dan Walsh <dwalsh@redhat.com> 1.7.17-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed several memory leaks found by valgrind.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.15-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
71cd55 |
Coverity, reported by Serge Hallyn (IBM).
|
|
|
71cd55 |
* Merged patch to policydb_write to check errors
|
|
|
71cd55 |
when writing the type->attribute reverse map from
|
|
|
71cd55 |
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
71cd55 |
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
71cd55 |
or attr_type_map.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 1.7.14-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
71cd55 |
Coverity, reported by Serge Hallyn (IBM).
|
|
|
71cd55 |
* Merged patch to policydb_write to check errors
|
|
|
71cd55 |
when writing the type->attribute reverse map from
|
|
|
71cd55 |
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
71cd55 |
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
71cd55 |
or attr_type_map.
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.13-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Improved memory use by SELinux by both reducing the avtab
|
|
|
71cd55 |
node size and reducing the number of avtab nodes (by not
|
|
|
71cd55 |
expanding attributes in TE rules when possible). Added
|
|
|
71cd55 |
expand_avtab and expand_cond_av_list functions for use by
|
|
|
71cd55 |
assertion checker, hierarchy checker, compatibility code,
|
|
|
71cd55 |
and dispol. Added new inline ebitmap operators and converted
|
|
|
71cd55 |
existing users of ebitmaps to the new operators for greater
|
|
|
71cd55 |
efficiency.
|
|
|
71cd55 |
Note: The binary policy format version has been incremented to
|
|
|
71cd55 |
version 20 as a result of these changes.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.12-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed bug in constraint_node_clone handling of name sets.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.7.11-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fix range_trans_clone to map the type values properly.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 5 2005 Dan Walsh <dwalsh@redhat.com> 1.7.10-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged patch to move module read/write code from libsemanage
|
|
|
71cd55 |
to libsepol from Jason Tang (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Aug 2 2005 Dan Walsh <dwalsh@redhat.com> 1.7.9-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Enabled further compiler warning flags and fixed them.
|
|
|
71cd55 |
* Merged user, context, port records patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged key extract function patch from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged mls_context_to_sid bugfix from Ivan Gyurdiev.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-2
|
|
|
71cd55 |
- Fix MLS Free
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged context reorganization, memory leak fixes,
|
|
|
71cd55 |
port and interface loading, replacements for genusers and
|
|
|
71cd55 |
genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
|
|
|
71cd55 |
* Merged uninitialized variable bugfix from Dan Walsh.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-2
|
|
|
71cd55 |
- Fix unitialized variable problem
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
|
|
|
71cd55 |
* Removed genpolbools and genpolusers utilities.
|
|
|
71cd55 |
* Merged hierarchy check fix from Joshua Brindle (Tresys).
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.3-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
|
|
|
71cd55 |
* Merged genbools debugging message cleanup from Red Hat.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-2
|
|
|
71cd55 |
- Remove genpolbools and genpoluser
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Merged loadable module support from Tresys Technology.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Updated version for release.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.10-1
|
|
|
71cd55 |
- Fix reset booleans warning message
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* License changed to LGPL v2.1, see COPYING.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.9-2
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added sepol_genbools_policydb and sepol_genusers_policydb for
|
|
|
71cd55 |
audit2why.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-2
|
|
|
71cd55 |
- export sepol_context_to_sid
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added sepol_ prefix to Flask types to avoid
|
|
|
71cd55 |
namespace collision with libselinux.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.5.7-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Added sepol_compute_av_reason() for audit2why.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Apr 26 2005 Dan Walsh <dwalsh@redhat.com> 1.5.6-1
|
|
|
71cd55 |
- Upgrade to latest from NSA
|
|
|
71cd55 |
* Fixed bug in role hierarchy checker.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Apr 25 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-2
|
|
|
71cd55 |
- Fixes found via intel compiler
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-1
|
|
|
71cd55 |
- Update from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Mar 29 2005 Dan Walsh <dwalsh@redhat.com> 1.5.3-1
|
|
|
71cd55 |
- Update from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 24 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-2
|
|
|
71cd55 |
- Handle booleans.local
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Added man page for sepol_check_context.
|
|
|
71cd55 |
* Added man page for sepol_genusers function.
|
|
|
71cd55 |
* Merged man pages for genpolusers and chkcon from Manoj Srivastava.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.3.8-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Cleaned up error handling in sepol_genusers and sepol_genbools.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.3.7-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Merged sepol_debug and fclose patch from Dan Walsh.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Feb 18 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-3
|
|
|
71cd55 |
- Make sure local_files file pointer is closed
|
|
|
71cd55 |
- Stop outputing error messages
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Changed sepol_genusers to also use getline and correctly handle
|
|
|
71cd55 |
EOL.
|
|
|
71cd55 |
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.5-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Merged endianness and compute_av patches from Darrel Goeddel (TCS).
|
|
|
71cd55 |
* Merged range_transition support from Darrel Goeddel (TCS).
|
|
|
71cd55 |
* Added sepol_genusers function.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.3.2-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Changed relabel Makefile target to use restorecon.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.3.1-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Merged enhanced MLS support from Darrel Goeddel (TCS).
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.2.1.1-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
* Merged build fix patch from Manoj Srivastava.
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-1
|
|
|
71cd55 |
- Update to latest from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-2
|
|
|
71cd55 |
- Add optargs for build
|
|
|
71cd55 |
|
|
|
71cd55 |
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-1
|
|
|
71cd55 |
- New version from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 20 2004 Colin Walters <walters@redhat.com> 1.0-2
|
|
|
71cd55 |
- Apply Stephen's chkcon patch
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 19 2004 Colin Walters <walters@redhat.com> 1.0-1
|
|
|
71cd55 |
- New upstream version
|
|
|
71cd55 |
|
|
|
71cd55 |
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 0.4.2-1
|
|
|
71cd55 |
- Newversion from upstream implementing stringcase compare
|
|
|
71cd55 |
|
|
|
71cd55 |
* Fri Aug 13 2004 Bill Nottingham <notting@redhat.com> 0.4.1-2
|
|
|
71cd55 |
- ldconfig tweaks
|
|
|
71cd55 |
|
|
|
71cd55 |
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
|
71cd55 |
- Ignore case of true/false
|
|
|
71cd55 |
|
|
|
71cd55 |
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
|
71cd55 |
- New version from NSA
|
|
|
71cd55 |
|
|
|
71cd55 |
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 0.3.1-1
|
|
|
71cd55 |
- Initial version
|
|
|
71cd55 |
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
|
71cd55 |
|
|
|
71cd55 |
|