2005-08-12 02:57:19 +00:00
|
|
|
%define libsepolver 1.7.13-1
|
2004-09-09 03:45:40 +00:00
|
|
|
Summary: SELinux policy compiler
|
|
|
|
|
Name: checkpolicy
|
2005-08-12 02:57:19 +00:00
|
|
|
Version: 1.25.8
|
2005-05-07 05:18:00 +00:00
|
|
|
Release: 1
|
2004-09-09 03:45:40 +00:00
|
|
|
License: GPL
|
|
|
|
|
Group: Development/System
|
2004-12-20 14:16:37 +00:00
|
|
|
Source: http://www.nsa.gov/selinux/archives/%{name}-%{version}.tgz
|
2004-09-09 03:45:40 +00:00
|
|
|
Prefix: %{_prefix}
|
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-buildroot
|
2005-02-17 23:11:23 +00:00
|
|
|
BuildRequires: byacc flex libsepol-devel >= %{libsepolver}
|
|
|
|
|
Requires: libsepol >= %{libsepolver}
|
2004-09-09 03:45:40 +00:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
Security-enhanced Linux is a patch of the Linux® kernel and a number
|
|
|
|
|
of utilities with enhanced security functionality designed to add
|
|
|
|
|
mandatory access controls to Linux. The Security-enhanced Linux
|
|
|
|
|
kernel contains new architectural components originally developed to
|
|
|
|
|
improve the security of the Flask operating system. These
|
|
|
|
|
architectural components provide general support for the enforcement
|
|
|
|
|
of many kinds of mandatory access control policies, including those
|
|
|
|
|
based on the concepts of Type Enforcement®, Role-based Access
|
|
|
|
|
Control, and Multi-level Security.
|
|
|
|
|
|
|
|
|
|
This package contains checkpolicy, the SELinux policy compiler.
|
|
|
|
|
Only required for building policies.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
|
|
|
|
|
|
|
|
|
%build
|
2004-09-09 03:49:04 +00:00
|
|
|
make LIBDIR="%{_libdir}" CFLAGS="%{optflags}"
|
2004-09-09 03:45:40 +00:00
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
|
2005-07-07 11:23:32 +00:00
|
|
|
make LIBDIR="%{_libdir}" DESTDIR="${RPM_BUILD_ROOT}" install
|
2004-09-09 03:45:40 +00:00
|
|
|
|
|
|
|
|
%clean
|
|
|
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
%{_bindir}/checkpolicy
|
2005-07-07 11:23:32 +00:00
|
|
|
%{_bindir}/checkmodule
|
2004-09-09 03:45:40 +00:00
|
|
|
%{_mandir}/man8/checkpolicy.8.gz
|
|
|
|
|
|
|
|
|
|
%changelog
|
2005-08-12 02:57:19 +00:00
|
|
|
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Updated checkpolicy and dispol for the new avtab format.
|
|
|
|
|
Converted users of ebitmaps to new inline operators.
|
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
|
version 20 as a result of these changes. To build a policy
|
|
|
|
|
for a kernel that does not yet include these changes, use
|
|
|
|
|
the -c 19 option to checkpolicy.
|
|
|
|
|
* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
|
|
|
|
|
* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-08-10 21:05:55 +00:00
|
|
|
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Fixed call to hierarchy checking code to pass the right policydb.
|
|
|
|
|
* Merged patch to update dismod for the relocation of the
|
|
|
|
|
module read/write code from libsemanage to libsepol, and
|
|
|
|
|
to enable build of test subdirectory from Jason Tang (Tresys).
|
|
|
|
|
|
2005-08-02 16:58:50 +00:00
|
|
|
* Thu Jul 28 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Merged hierarchy check fix from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-07-07 10:54:19 +00:00
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Merged loadable module support from Tresys Technology.
|
|
|
|
|
* Merged patch to prohibit the use of * and ~ in type sets
|
|
|
|
|
(other than in neverallow statements) and in role sets
|
|
|
|
|
from Joshua Brindle (Tresys).
|
|
|
|
|
* Updated version for release.
|
|
|
|
|
|
2005-05-20 17:24:02 +00:00
|
|
|
* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23-4-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Merged cleanup patch from Dan Walsh.
|
|
|
|
|
|
2005-05-19 17:47:42 +00:00
|
|
|
* Thu May 19 2005 Dan Walsh <dwalsh@redhat.com> 1.23-3-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Added sepol_ prefix to Flask types to avoid namespace
|
|
|
|
|
collision with libselinux.
|
|
|
|
|
|
2005-05-07 05:12:50 +00:00
|
|
|
* Fri May 7 2005 Dan Walsh <dwalsh@redhat.com> 1.23-2-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
* Merged identifier fix from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-04-14 20:34:19 +00:00
|
|
|
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23,1-1
|
|
|
|
|
* Merged hierarchical type/role patch from Tresys Technology.
|
|
|
|
|
* Merged MLS fixes from Darrel Goeddel of TCS.
|
|
|
|
|
|
2005-03-10 14:47:40 +00:00
|
|
|
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-1
|
|
|
|
|
- Update to NSA Release
|
|
|
|
|
|
2005-03-02 04:13:04 +00:00
|
|
|
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-2
|
|
|
|
|
- Rebuild for FC4
|
|
|
|
|
|
2005-02-17 20:52:00 +00:00
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-1
|
|
|
|
|
* Merged define_user() cleanup patch from Darrel Goeddel (TCS).
|
|
|
|
|
* Moved genpolusers utility to libsepol.
|
|
|
|
|
* Merged range_transition support from Darrel Goeddel (TCS).
|
|
|
|
|
|
|
|
|
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Changed relabel Makefile target to use restorecon.
|
|
|
|
|
|
|
|
|
|
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Merged enhanced MLS support from Darrel Goeddel (TCS).
|
|
|
|
|
|
2005-01-07 14:51:13 +00:00
|
|
|
* Fri Jan 7 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-1
|
|
|
|
|
- Update for version increase at NSA
|
|
|
|
|
|
2004-12-20 14:16:37 +00:00
|
|
|
* Mon Dec 20 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Merged typeattribute statement patch from Darrel Goeddel of TCS.
|
|
|
|
|
* Changed genpolusers to handle multiple user config files.
|
|
|
|
|
* Merged nodecon ordering patch from Chad Hanson of TCS.
|
|
|
|
|
|
2004-11-11 12:38:33 +00:00
|
|
|
* Thu Nov 11 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Merged nodecon ordering patch from Chad Hanson of TCS.
|
|
|
|
|
|
2004-11-04 13:30:49 +00:00
|
|
|
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* MLS build fix.
|
|
|
|
|
|
2004-09-20 20:58:55 +00:00
|
|
|
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Fixed Makefile dependencies (Chris PeBenito).
|
|
|
|
|
|
2004-09-14 13:42:05 +00:00
|
|
|
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.4-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
* Fixed Makefile dependencies (Chris PeBenito).
|
|
|
|
|
|
2004-09-10 17:18:59 +00:00
|
|
|
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-1
|
|
|
|
|
- Latest from NSA
|
2004-09-14 13:42:05 +00:00
|
|
|
* Merged fix for role dominance ordering issue from Chad Hanson of TCS.
|
2004-09-10 17:18:59 +00:00
|
|
|
|
2004-09-09 03:49:04 +00:00
|
|
|
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:48:59 +00:00
|
|
|
* Thu Aug 26 2004 Dan Walsh <dwalsh@redhat.com> 1.16.3-1
|
|
|
|
|
- Fix NSA package to not include y.tab files.
|
|
|
|
|
|
2004-09-09 03:48:52 +00:00
|
|
|
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.16.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
- Allow port ranges to overlap
|
|
|
|
|
|
2004-09-09 03:48:48 +00:00
|
|
|
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.16.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:48:46 +00:00
|
|
|
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.6-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:48:34 +00:00
|
|
|
* Fri Aug 13 2004 Dan Walsh <dwalsh@redhat.com> 1.15.5-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:48:20 +00:00
|
|
|
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 1.15.4-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
|
|
|
|
* Sat Aug 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:49 +00:00
|
|
|
* Wed Aug 4 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:33 +00:00
|
|
|
* Sat Jul 31 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:22 +00:00
|
|
|
* Tue Jul 27 2004 Dan Walsh <dwalsh@redhat.com> 1.14.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:18 +00:00
|
|
|
* Wed Jun 30 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:09 +00:00
|
|
|
* Fri Jun 18 2004 Dan Walsh <dwalsh@redhat.com> 1.12.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
|
|
|
|
* Thu Jun 17 2004 Dan Walsh <dwalsh@redhat.com> 1.12.1-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
2004-09-09 03:47:06 +00:00
|
|
|
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.12-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
2004-09-09 03:46:59 +00:00
|
|
|
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.10-5
|
|
|
|
|
- Add nlclass patch
|
|
|
|
|
|
|
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 03:46:44 +00:00
|
|
|
* Fri Jun 4 2004 Dan Walsh <dwalsh@redhat.com> 1.10-3
|
|
|
|
|
- Add BuildRequires flex
|
|
|
|
|
|
2004-09-09 03:46:32 +00:00
|
|
|
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-2
|
|
|
|
|
- Add BuildRequires byacc
|
|
|
|
|
|
2004-09-09 03:46:19 +00:00
|
|
|
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-1
|
|
|
|
|
- Upgrade to the latest from NSA
|
|
|
|
|
|
2004-09-09 03:46:12 +00:00
|
|
|
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.8-1
|
|
|
|
|
- Upgrade to the latest from NSA
|
|
|
|
|
|
|
|
|
|
* Mon Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
|
|
|
|
- Upgrade to the latest from NSA
|
|
|
|
|
|
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 03:45:40 +00:00
|
|
|
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
|
|
|
|
|
- Add typealias patch
|
|
|
|
|
|
|
|
|
|
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
|
|
|
|
|
- Update excludetypes with negset-final patch
|
|
|
|
|
|
|
|
|
|
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-4
|
|
|
|
|
- Add excludetypes patch
|
|
|
|
|
|
|
|
|
|
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-3
|
|
|
|
|
- Add Colin Walter's lineno patch
|
|
|
|
|
|
|
|
|
|
* Wed Jan 7 2004 Dan Walsh <dwalsh@redhat.com> 1.4-2
|
|
|
|
|
- Remove check for roles transition
|
|
|
|
|
|
|
|
|
|
* Sat Dec 6 2003 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
|
|
|
- upgrade to 1.4
|
|
|
|
|
|
|
|
|
|
* Wed Oct 1 2003 Dan Walsh <dwalsh@redhat.com> 1.2-1
|
|
|
|
|
- upgrade to 1.2
|
|
|
|
|
|
|
|
|
|
* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com> 1.1-2
|
|
|
|
|
- upgrade to 1.1
|
|
|
|
|
|
|
|
|
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
|
|
|
|
- Initial version
|
|
|
|
|
|
