Commit Graph

397 Commits

Author SHA1 Message Date
Fedora Release Engineering
d5f4816edb - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 10:20:52 +00:00
Ondrej Mosnacek
5c57870019 Enable policy optimization
The new v3.0 SELInux userspace added support for optimizing the binary
policy by pruning redundant rules from it. Enable it on Fedora by
default, since it brings noticeable space savings and only negligibly
increases policy build time.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2020-01-22 15:21:38 +01:00
Petr Lautrbach
0549d7c12a SELinux userspace 3.0 release 2019-12-06 09:05:29 +01:00
Petr Lautrbach
6e2f3c16bb SELinux userpace 3.0-rc1 release candidate 2019-11-11 11:32:17 +01:00
Miro Hrončok
194ca16bb8 Rebuilt for Python 3.8.0rc1 (#1748018) 2019-10-03 13:56:07 +02:00
Zbigniew Jędrzejewski-Szmek
f44cd3fc4f Rebuilt for Python 3.8 2019-08-18 11:22:25 +02:00
Petr Lautrbach
f5a63af326 libsemanage-2.9-3
- Drop python2-libsemanage (#1738466)
2019-08-13 21:39:57 +02:00
Petr Lautrbach
077b89e12c Drop python2-libsemanage
https://bugzilla.redhat.com/show_bug.cgi?id=1738466
2019-08-13 21:39:57 +02:00
Petr Lautrbach
261ead2b51 Use %set_build_flags 2019-08-13 21:39:57 +02:00
Petr Lautrbach
04b65113f0 Use separate patches instead of one big libsemanage-fedora.patch 2019-08-13 21:39:57 +02:00
Fedora Release Engineering
079ba207f7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 14:21:28 +00:00
Petr Lautrbach
9519c0d906 SELinux userspace 2.9 release 2019-03-18 17:08:38 +01:00
Petr Lautrbach
09c83ba581 SELinux userspace 2.9-rc2 release 2019-03-11 16:37:29 +01:00
Fedora Release Engineering
3232cd5592 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 08:12:10 +00:00
Petr Lautrbach
64eaf02621 SELinux userspace 2.9-rc1 release candidate 2019-01-30 09:57:30 +01:00
Petr Lautrbach
eac1dd7964 libsemanage-2.8-8
- Always set errno to 0 before calling getpwent()
- Set selinux policy root around calls to selinux_boolean_sub
2019-01-21 17:34:55 +01:00
Petr Lautrbach
89f6442710 libsemanage-2.8-7
- genhomedircon - improve handling large groups
2018-12-10 17:50:04 +01:00
Petr Lautrbach
e4348e485a libsemanage-2.8-6
- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects
2018-11-13 10:45:59 +01:00
Petr Lautrbach
ac9030677f ustr is not used by libsemanage since Dec 2016 2018-09-17 23:58:40 +02:00
Petr Lautrbach
610584a4f1 libsemanage-2.8-5
- Include user name in ROLE_REMOVE audit events
2018-09-17 14:33:45 +02:00
Petr Lautrbach
0e04653dfb libsemanage-2.8-4
- Reset umask before creating directories (#1186422)
2018-09-04 09:20:24 +02:00
Petr Lautrbach
c5af50ed1a Use %{__python2} macro to build python2 packages
${__python} and /usr/bin/python are not available anymore.

Fixes:
make[1]: /usr/bin/python: Command not found
Please specify at least one package name on the command line.
cc -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=zEC12 -mtune=z13 -fasynchronous-unwind-tables -fstack-clash-protection -I../include -D_GNU_SOURCE -Wno-error -Wno-unused-but-set-variable -Wno-unused-variable -Wno-shadow -Wno-unused-parameter  -fPIC -DSHARED -c -o semanageswig_wrap.lo semanageswig_wrap.c
semanageswig_wrap.c:149:11: fatal error: Python.h: No such file or directory
 # include <Python.h>
           ^~~~~~~~~~
compilation terminated.
2018-07-23 13:51:55 +02:00
Fedora Release Engineering
fd362e344c - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 08:49:04 +00:00
Miro Hrončok
d115724f07 Rebuilt for Python 3.7 2018-06-19 10:46:32 +02:00
Petr Lautrbach
eb9f231d85 libsemanage-2.8-1
- SELinux userspace 2.8 release
2018-05-25 11:08:02 +02:00
Petr Lautrbach
44b16b07be SELinux userspace 2.8-rc3 release candidate 2018-05-14 19:09:55 +02:00
Petr Lautrbach
c9917ec265 SELinux userspace 2.8-rc2 release candidate 2018-05-04 16:06:05 +02:00
Petr Lautrbach
55e1d5666f It's rc1, not rc 2018-04-23 13:51:55 +02:00
Petr Lautrbach
cbe3dcf724 Use rcversion in autosetup macro 2018-04-23 13:44:28 +02:00
Petr Lautrbach
c269741e8c Fix unclosed macro 2018-04-23 13:37:18 +02:00
Petr Lautrbach
83146340e2 SELinux userspace 2.8-rc1 release candidate 2018-04-23 13:29:53 +02:00
Petr Lautrbach
2ce185aded libsemanage-2.7-12
- build: Replace PYSITEDIR with PYTHONLIBDIR
- direct_api.c: Fix iterating over array (#1557468)
2018-03-21 16:37:35 +01:00
Petr Lautrbach
84ddaa3113 libsemanage-2.7-11
- Revert "remove access() check to make setuid programs work" (#1557468)
2018-03-16 23:09:01 +01:00
Petr Lautrbach
4d223ca33e libsemanage-2.7-10
* Tue Mar 13 2018 Petr Lautrbach <plautrba@redhat.com> - 2.7-10
- properly check return value of iterate function
- Use umask(0077) for fopen() write operations
- Return commit number if save-previous false
- Allow tmp files to be kept if a compile fails
- build: follow standard semantics for DESTDIR and PREFIX
- Improve warning for installing disabled module
- silence clang static analyzer report
- remove access() check to make setuid programs work
2018-03-13 12:58:59 +01:00
Petr Lautrbach
ae81a4006d List gcc in BuildRequires
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/IJFYI5Q2BYZKIGDFS2WLOBDUSEGWHIKV/
https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires
2018-02-19 13:37:46 +01:00
Petr Lautrbach
94c9eab7de Spec file cleanup
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/
2018-02-16 10:36:41 +01:00
Igor Gnatenko
2f3b1427a3
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:07:07 +01:00
Igor Gnatenko
b9d7aeb4a2
Escape macros in %changelog
Reference: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/Y2ZUKK2B7T2IKXPMODNF6HB2O5T5TS6H/
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-09 09:04:59 +01:00
Fedora Release Engineering
d2e26de15b - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 23:18:51 +00:00
Igor Gnatenko
c8678b5827
Switch to %ldconfig_scriptlets
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-03 18:22:37 +01:00
Petr Lautrbach
9be262bc6e Drop with_python3 and use python2_sitearch macros
Fixes:
error: File not found: /home/user/rpmbuild/BUILDROOT/libsemanage-2.7-6.fc28.x86_64/_semanage.so
error: File not found: /home/user/rpmbuild/BUILDROOT/libsemanage-2.7-6.fc28.x86_64/semanage.py*
2018-01-22 20:08:33 +01:00
Iryna Shcherbina
b590caa247 Update Python 2 dependency declarations to new packaging standards 2018-01-09 19:00:41 +01:00
Petr Lautrbach
6561fe9a7f libsemanage-2.7-5.fc28
- free genhomedircon fallback user
- Rebuild with libsepol-2.7-3 and libselinux-2.7-6
2017-11-22 15:24:39 +01:00
Petr Lautrbach
3c53b37adc libsemanage-2.7-4.fc28
- Add support for listing fcontext.homedirs file (#1409813)
2017-10-20 11:04:35 +02:00
Zbigniew Jędrzejewski-Szmek
7378d3b052 Add Provides for the old names without %_isa 2017-08-20 09:37:30 -04:00
Zbigniew Jędrzejewski-Szmek
ce307ec889 Python 3 binary package renamed to python3-libsemanage 2017-08-12 08:31:05 -04:00
Zbigniew Jędrzejewski-Szmek
d47f691a28 Python 2 binary package renamed to python2-libsemanage 2017-08-12 08:27:02 -04:00
Petr Lautrbach
0b7304dd79 libsemanage-2.7-1
- Update to upstream release 2017-08-04
- Use 'sefcontext_compile -r' when it's run during SELinux policy build
2017-08-07 14:47:19 +02:00
Fedora Release Engineering
700682cb8e - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 02:15:26 +00:00
Fedora Release Engineering
b4d18a403e - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 19:42:04 +00:00
Petr Lautrbach
df2d1e28f9 libsemanage-2.6-4
- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so
2017-04-28 12:30:00 +02:00
Petr Lautrbach
4a5295e883 libsemanage-2.6-3
* Tue Apr 18 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-3
- Do not list duplicate port entries after setting a boolean (#1439875)
2017-04-18 10:46:14 +02:00
Petr Lautrbach
513da381ab libsemanage-2.6-2
- Fix FTBFS - fatal error (#1427903)
2017-03-02 13:22:13 +01:00
Petr Lautrbach
88e75bd275 libsemanage-2.6-1.1
- Update to upstream release 2016-10-14
2017-02-20 12:30:35 +01:00
Fedora Release Engineering
cbaff59d90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 19:26:25 +00:00
Charalampos Stratakis
4ae37e78d2 Rebuild for Python 3.6 2016-12-11 15:48:45 +01:00
Petr Lautrbach
3c4165cda9 libsemanage-2.5-8
- Fixes bug preventing the installation of base modules
- make distclean target work
- Do not always print a module name warning
- Use pp module name instead of filename when installing module
- tests: Do not force using gcc
- genhomedircon: remove hardcoded refpolicy strings
- genhomedircon: add support for %group syntax
- genhomedircon: generate contexts for logins mapped to the default
ser
- Validate and compile file contexts before installing
- Swap tcp and udp protocol numbers
2016-10-04 08:30:58 +02:00
Petr Lautrbach
c84bff920a libsemanage-2.5-7.fc26
- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11
2016-08-01 12:23:34 +02:00
Fedora Release Engineering
c5131cee74 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages 2016-07-19 07:46:16 +00:00
Petr Lautrbach
b007211697 libsemanage-2.5-5
- Sort object files for deterministic linking order
- Support overriding Makefile RANLIB
- Respect CC and PKG_CONFIG environment variable
2016-06-23 12:57:59 +02:00
Petr Lautrbach
71e0cd6576 libsemanage-2.5-4
- Fix multiple spelling errors
- genhomedircon: %{USERID} and %{USERNAME} support and code cleanup
2016-05-06 16:17:18 +02:00
Petr Lautrbach
2041bbce99 libsemanage-2.5-3
- Enable expand-check by default (#1319652)
2016-03-21 11:19:57 +01:00
Petr Lautrbach
ef444a88f3 libsemanage-2.5-2
- Use fully versioned arch-specific requires
2016-02-28 19:59:56 +01:00
Petr Lautrbach
5f5cd53c1b Use fully versioned arch-specific requires
https://fedoraproject.org/wiki/Packaging:Guidelines#Requiring_Base_Package
2016-02-28 19:58:49 +01:00
Petr Lautrbach
83d1ec7678 libsemanage-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 22:19:58 +01:00
Petr Lautrbach
5d71d668b9 BuildRequires: python 2016-02-21 14:59:48 +01:00
Petr Lautrbach
288daf8999 libsemanage-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 12:37:19 +01:00
Dennis Gilmore
95eef66f4c - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 03:54:09 +00:00
Robert Kuska
e6fb2b816f Rebuilt for Python3.5 rebuild 2015-11-04 10:43:01 +01:00
Petr Lautrbach
a24f66486d libsemanage-2.4-4
- Save homedir_template in the policy store for genhomedircon
  https://bugs.gentoo.org/558686
2015-09-04 09:58:55 +02:00
Adam Jackson
ec0d6590d9 Pass ldflags into the build so hardening works 2015-08-14 14:55:39 -04:00
Petr Lautrbach
489cabf310 libsemanage-2.4-2
- semanage_migrate_store: use /usr/bin/python3
- move semanage_migrate_store script to libsemanage-python3 (#1248002)
2015-07-30 18:17:39 +02:00
Petr Lautrbach
ed8fe0a212 Re-order changelogs entries 2015-07-20 18:10:32 +02:00
Petr Lautrbach
40002ca5f7 Merge branch 'private-master-2.4'
libsemanage-2.4-1
2015-07-20 18:09:00 +02:00
Petr Lautrbach
c1c140a26e * Wed Jun 24 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-0.6
- Allow to use compressed modules without a compression extension
2015-06-24 18:00:08 +02:00
Dennis Gilmore
2d874ef491 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 17:15:07 +00:00
Petr Lautrbach
7c6e3d711b * Tue Jun 16 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-0.5
- add /var/lib/selinux/tmp directory
2015-06-16 16:19:45 +02:00
Petr Lautrbach
814c1da596 add /var/lib/selinux/tmp directory 2015-06-16 16:19:16 +02:00
Petr Lautrbach
98249f5718 libsemanage-2.4-0.4 2015-05-12 19:32:12 +02:00
Petr Lautrbach
153a29f02a Update to upstream release 2.4 from https://github.com/bachradsusi/selinux.git branch 2.4 2015-04-13 14:52:15 +02:00
Peter Robinson
3387bb8a63 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 05:56:21 +00:00
Miroslav Grepl
bc9b70b7c6 * Wed Jul 30 2014 Miroslav Grepl <mgrepl@fedoraproject.org> - 2.3-5
- Skip policy module re-link when only setting booleans.
    * patch from Stephen Smalley
2014-07-30 19:22:07 +02:00
Tom Callaway
3b4c09022e fix license handling 2014-07-18 15:19:21 -04:00
Dennis Gilmore
01f8a9facb - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 00:24:21 -05:00
Kalev Lember
70daba3c78 Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 2014-05-28 12:12:50 +02:00
Dan Walsh
059a39519f Update to upstream
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.
2014-05-06 14:33:02 -04:00
Dan Walsh
a0fdb6de82 libsemanage: fix memory leak in semanage_genhomedircon
- Patch from THomas Hurd
2014-03-31 08:34:33 -04:00
Dan Walsh
b321505c81 Move semanage.conf man page from devel package to main package 2014-02-11 09:30:21 -05:00
Dan Walsh
d76cbbc290 Update to upstream
* Avoid duplicate list entries from Dan Walsh.
	* Add audit support to libsemanage from Dan Walsh.
	* Remove policy.kern and replace with symlink from Dan Walsh.
	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
	* Fix man pages from Laurent Bigonville.
2013-10-31 09:31:40 -04:00
Dan Walsh
ab84ace2a1 Cleanup handling of missing mls_range to fix problems with useradd -Z
- Fix auditing of login record changes, roles were not working correctly.
Resolves: #952237
2013-10-16 14:34:13 -04:00
Dan Walsh
8dcd430104 Fix errors found by coverity 2013-10-04 14:55:58 -04:00
Dan Walsh
2a9c9b49a7 Do not fail on missing SELinux User Record when adding login record 2013-09-25 12:46:19 -04:00
Dan Walsh
a7e3a97407 Add msg to audit records 2013-09-23 15:11:52 -04:00
Dan Walsh
4bccd198db Do not write error message to screen when looking for previous record for auditing.
- Add mls_range from user record if the MLS range is not specified by the seuser add record.
- Error out if seuser or mls range is not specified when adding user records
2013-09-23 14:30:33 -04:00
Dan Walsh
a70e6a436c Create symlink from policy.kern to active kernel. 2013-09-09 09:34:32 -04:00
Dan Walsh
a7785d28a7 Move handling of role audit records into the library
- Patch stops semanage from removing user record while in use
2013-07-26 17:49:13 -04:00
Dan Walsh
514a8aa4c0 Move handling of role audit records into the library
- Patch stops semanage from removing user record while in use
2013-07-26 17:39:40 -04:00
Dan Walsh
d0c5aefe7f Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it. 2013-07-09 11:12:34 -04:00
Dan Walsh
3d5abbea35 Allways build python3 version 2013-06-28 06:29:56 -04:00
Dan Walsh
4c4dc161a0 - Fix test suite to build 2013-06-28 06:29:06 -04:00