Add Ryan Hallisey sepolicy gui.
- Update Translations
This commit is contained in:
parent
e396b39f10
commit
2ab6b02e3c
File diff suppressed because it is too large
Load Diff
@ -7,7 +7,7 @@
|
|||||||
Summary: SELinux policy core utilities
|
Summary: SELinux policy core utilities
|
||||||
Name: policycoreutils
|
Name: policycoreutils
|
||||||
Version: 2.1.14
|
Version: 2.1.14
|
||||||
Release: 60%{?dist}
|
Release: 61%{?dist}
|
||||||
License: GPLv2
|
License: GPLv2
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
# Based on git repository with tag 20101221
|
# Based on git repository with tag 20101221
|
||||||
@ -46,14 +46,14 @@ load_policy to load policies, setfiles to label filesystems, newrole
|
|||||||
to switch roles.
|
to switch roles.
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q -a 1
|
%setup -q -a 1
|
||||||
%patch -p2 -b .rhat
|
%patch -p2 -b .rhat
|
||||||
%patch1 -p2 -b .sepolgen -d sepolgen-%{sepolgenver}
|
%patch1 -p2 -b .sepolgen -d sepolgen-%{sepolgenver}
|
||||||
|
|
||||||
%build
|
%build
|
||||||
cp %{SOURCE3} gui/
|
cp %{SOURCE3} gui/
|
||||||
make LSPP_PRIV=y SBINDIR="%{_sbindir}" LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" SEMODULE_PATH="/usr/sbin" all
|
make LSPP_PRIV=y SBINDIR="%{_sbindir}" LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" SEMODULE_PATH="/usr/sbin" all
|
||||||
make -C sepolgen-%{sepolgenver} SBINDIR="%{_sbindir}" LSPP_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" all
|
make -C sepolgen-%{sepolgenver} SBINDIR="%{_sbindir}" LSPP_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" all
|
||||||
|
|
||||||
%install
|
%install
|
||||||
mkdir -p %{buildroot}/var/lib/selinux
|
mkdir -p %{buildroot}/var/lib/selinux
|
||||||
@ -67,7 +67,7 @@ cp COPYING %{buildroot}/%{_usr}/share/doc/%{name}-%{version}/
|
|||||||
|
|
||||||
make LSPP_PRIV=y DESTDIR="%{buildroot}" SBINDIR="%{buildroot}%{_sbindir}" LIBDIR="%{buildroot}%{_libdir}" SEMODULE_PATH="/usr/sbin" install
|
make LSPP_PRIV=y DESTDIR="%{buildroot}" SBINDIR="%{buildroot}%{_sbindir}" LIBDIR="%{buildroot}%{_libdir}" SEMODULE_PATH="/usr/sbin" install
|
||||||
|
|
||||||
# Systemd
|
# Systemd
|
||||||
rm -rf %{buildroot}/%{_sysconfdir}/rc.d/init.d/restorecond
|
rm -rf %{buildroot}/%{_sysconfdir}/rc.d/init.d/restorecond
|
||||||
|
|
||||||
make -C sepolgen-%{sepolgenver} DESTDIR="%{buildroot}" SBINDIR="%{buildroot}%{_sbindir}" LIBDIR="%{buildroot}%{_libdir}" install
|
make -C sepolgen-%{sepolgenver} DESTDIR="%{buildroot}" SBINDIR="%{buildroot}%{_sbindir}" LIBDIR="%{buildroot}%{_libdir}" install
|
||||||
@ -95,15 +95,15 @@ rm -f %{buildroot}%{_datadir}/system-config-selinux/system-config-selinux.deskto
|
|||||||
%package python
|
%package python
|
||||||
Summary: SELinux policy core python utilities
|
Summary: SELinux policy core python utilities
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Requires:policycoreutils = %{version}-%{release}
|
Requires:policycoreutils = %{version}-%{release}
|
||||||
Requires:libsemanage-python >= %{libsemanagever} libselinux-python libcgroup
|
Requires:libsemanage-python >= %{libsemanagever} libselinux-python libcgroup
|
||||||
Requires:audit-libs-python >= %{libauditver}
|
Requires:audit-libs-python >= %{libauditver}
|
||||||
Requires(pre): python >= 2.6
|
Requires(pre): python >= 2.6
|
||||||
Obsoletes: policycoreutils < 2.0.61-2
|
Obsoletes: policycoreutils < 2.0.61-2
|
||||||
Requires: python-IPy yum
|
Requires: python-IPy yum
|
||||||
|
|
||||||
%description python
|
%description python
|
||||||
The policycoreutils-python package contains the management tools use to manage
|
The policycoreutils-python package contains the management tools use to manage
|
||||||
an SELinux environment.
|
an SELinux environment.
|
||||||
|
|
||||||
%files python
|
%files python
|
||||||
@ -112,7 +112,18 @@ an SELinux environment.
|
|||||||
%{_bindir}/sandbox
|
%{_bindir}/sandbox
|
||||||
%{python_sitearch}/seobject.py*
|
%{python_sitearch}/seobject.py*
|
||||||
%{python_sitearch}/sepolgen
|
%{python_sitearch}/sepolgen
|
||||||
%{python_sitearch}/sepolicy
|
%dir %{python_sitearch}/sepolicy
|
||||||
|
%{python_sitearch}/sepolicy/*so
|
||||||
|
%{python_sitearch}/sepolicy/templates
|
||||||
|
%{python_sitearch}/sepolicy/__init__.py*
|
||||||
|
%{python_sitearch}/sepolicy/booleans.py*
|
||||||
|
%{python_sitearch}/sepolicy/communicate.py*
|
||||||
|
%{python_sitearch}/sepolicy/generate.py*
|
||||||
|
%{python_sitearch}/sepolicy/interface.py*
|
||||||
|
%{python_sitearch}/sepolicy/manpage.py*
|
||||||
|
%{python_sitearch}/sepolicy/network.py*
|
||||||
|
%{python_sitearch}/sepolicy/transition.py*
|
||||||
|
|
||||||
%{python_sitearch}/%{name}*.egg-info
|
%{python_sitearch}/%{name}*.egg-info
|
||||||
%{python_sitearch}/sepolicy*.egg-info
|
%{python_sitearch}/sepolicy*.egg-info
|
||||||
%{python_sitearch}/%{name}
|
%{python_sitearch}/%{name}
|
||||||
@ -128,7 +139,7 @@ an SELinux environment.
|
|||||||
%package devel
|
%package devel
|
||||||
Summary: SELinux policy core policy devel utilities
|
Summary: SELinux policy core policy devel utilities
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Requires: policycoreutils-python = %{version}-%{release}
|
Requires: policycoreutils-python = %{version}-%{release}
|
||||||
Requires: /usr/bin/make
|
Requires: /usr/bin/make
|
||||||
Requires: checkpolicy
|
Requires: checkpolicy
|
||||||
Requires: selinux-policy-devel
|
Requires: selinux-policy-devel
|
||||||
@ -148,21 +159,28 @@ The policycoreutils-devel package contains the management tools use to develop p
|
|||||||
%{_mandir}/ru/man1/audit2allow.1*
|
%{_mandir}/ru/man1/audit2allow.1*
|
||||||
%{_mandir}/man1/audit2why.1*
|
%{_mandir}/man1/audit2why.1*
|
||||||
%{_bindir}/sepolicy
|
%{_bindir}/sepolicy
|
||||||
%{_mandir}/man8/sepolicy*.8*
|
|
||||||
%{_mandir}/man8/sepolgen.8*
|
%{_mandir}/man8/sepolgen.8*
|
||||||
|
%{_mandir}/man8/sepolicy-booleans.8*
|
||||||
|
%{_mandir}/man8/sepolicy-generate.8*
|
||||||
|
%{_mandir}/man8/sepolicy-interface.8*
|
||||||
|
%{_mandir}/man8/sepolicy-network.8*
|
||||||
|
%{_mandir}/man8/sepolicy.8*
|
||||||
|
%{_mandir}/man8/sepolicy-communicate.8*
|
||||||
|
%{_mandir}/man8/sepolicy-manpage.8*
|
||||||
|
%{_mandir}/man8/sepolicy-transition.8*
|
||||||
%{_usr}/share/bash-completion/completions/sepolicy
|
%{_usr}/share/bash-completion/completions/sepolicy
|
||||||
|
|
||||||
%package sandbox
|
%package sandbox
|
||||||
Summary: SELinux sandbox utilities
|
Summary: SELinux sandbox utilities
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Requires: policycoreutils-python = %{version}-%{release}
|
Requires: policycoreutils-python = %{version}-%{release}
|
||||||
Requires: xorg-x11-server-Xephyr >= 1.14.1-2 /usr/bin/rsync /usr/bin/xmodmap
|
Requires: xorg-x11-server-Xephyr >= 1.14.1-2 /usr/bin/rsync /usr/bin/xmodmap
|
||||||
Requires: openbox
|
Requires: openbox
|
||||||
BuildRequires: openbox
|
BuildRequires: openbox
|
||||||
BuildRequires: libcap-ng-devel
|
BuildRequires: libcap-ng-devel
|
||||||
|
|
||||||
%description sandbox
|
%description sandbox
|
||||||
The policycoreutils-sandbox package contains the scripts to create graphical
|
The policycoreutils-sandbox package contains the scripts to create graphical
|
||||||
sandboxes
|
sandboxes
|
||||||
|
|
||||||
%files sandbox
|
%files sandbox
|
||||||
@ -174,12 +192,12 @@ sandboxes
|
|||||||
%{_mandir}/man5/sandbox.5*
|
%{_mandir}/man5/sandbox.5*
|
||||||
|
|
||||||
%package newrole
|
%package newrole
|
||||||
Summary: The newrole application for RBAC/MLS
|
Summary: The newrole application for RBAC/MLS
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Requires: policycoreutils = %{version}-%{release}
|
Requires: policycoreutils = %{version}-%{release}
|
||||||
|
|
||||||
%description newrole
|
%description newrole
|
||||||
RBAC/MLS policy machines require newrole as a way of changing the role
|
RBAC/MLS policy machines require newrole as a way of changing the role
|
||||||
or level of a logged in user.
|
or level of a logged in user.
|
||||||
|
|
||||||
%files newrole
|
%files newrole
|
||||||
@ -191,7 +209,7 @@ or level of a logged in user.
|
|||||||
%package gui
|
%package gui
|
||||||
Summary: SELinux configuration GUI
|
Summary: SELinux configuration GUI
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Requires: policycoreutils-devel = %{version}-%{release}
|
Requires: policycoreutils-devel = %{version}-%{release}
|
||||||
Requires: gnome-python2-gnome, pygtk2, pygtk2-libglade, gnome-python2-canvas
|
Requires: gnome-python2-gnome, pygtk2, pygtk2-libglade, gnome-python2-canvas
|
||||||
Requires: usermode-gtk
|
Requires: usermode-gtk
|
||||||
Requires: python >= 2.6
|
Requires: python >= 2.6
|
||||||
@ -212,8 +230,11 @@ system-config-selinux is a utility for managing the SELinux environment
|
|||||||
%{_datadir}/system-config-selinux/system-config-selinux.png
|
%{_datadir}/system-config-selinux/system-config-selinux.png
|
||||||
%{_datadir}/system-config-selinux/*.py*
|
%{_datadir}/system-config-selinux/*.py*
|
||||||
%{_datadir}/system-config-selinux/*.glade
|
%{_datadir}/system-config-selinux/*.glade
|
||||||
|
%{python_sitearch}/sepolicy/gui.py*
|
||||||
|
%{python_sitearch}/sepolicy/sepolicy.glade
|
||||||
%{_mandir}/man8/system-config-selinux.8*
|
%{_mandir}/man8/system-config-selinux.8*
|
||||||
%{_mandir}/man8/selinux-polgengui.8*
|
%{_mandir}/man8/selinux-polgengui.8*
|
||||||
|
%{_mandir}/man8/sepolicy-gui.8*
|
||||||
|
|
||||||
%post gui
|
%post gui
|
||||||
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
||||||
@ -309,8 +330,12 @@ The policycoreutils-restorecond package contains the restorecond service.
|
|||||||
%systemd_postun_with_restart restorecond.service
|
%systemd_postun_with_restart restorecond.service
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Jun 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-61
|
||||||
|
- Add Ryan Hallisey sepolicy gui.
|
||||||
|
- Update Translations
|
||||||
|
|
||||||
* Mon Jun 24 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-60
|
* Mon Jun 24 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-60
|
||||||
- Fix semanage module error handling
|
-- Fix semanage module error handling
|
||||||
|
|
||||||
* Sun Jun 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-59
|
* Sun Jun 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-59
|
||||||
- Add back default exception handling for errors, which argparse rewrite removed.
|
- Add back default exception handling for errors, which argparse rewrite removed.
|
||||||
@ -326,7 +351,7 @@ The policycoreutils-restorecond package contains the restorecond service.
|
|||||||
|
|
||||||
* Wed Jun 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
|
* Wed Jun 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
|
||||||
- Fix semanage export/import commands
|
- Fix semanage export/import commands
|
||||||
- Fix semange module command
|
- Fix semange module command
|
||||||
- Remove --version option from sandbox
|
- Remove --version option from sandbox
|
||||||
|
|
||||||
* Tue Jun 18 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-55
|
* Tue Jun 18 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-55
|
||||||
@ -370,7 +395,7 @@ The policycoreutils-restorecond package contains the restorecond service.
|
|||||||
|
|
||||||
* Thu May 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
|
* Thu May 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
|
||||||
- Fix sepolicy-generate man page to clear up options/policy type
|
- Fix sepolicy-generate man page to clear up options/policy type
|
||||||
- Add Miroslav Grepl to not generate man page when doing
|
- Add Miroslav Grepl to not generate man page when doing
|
||||||
sepolicy generate --customize
|
sepolicy generate --customize
|
||||||
- Add support for executing semanage user within spec file
|
- Add support for executing semanage user within spec file
|
||||||
- Fix generation of confined admin domains, to handle booleans properly.
|
- Fix generation of confined admin domains, to handle booleans properly.
|
||||||
@ -514,7 +539,7 @@ The policycoreutils-restorecond package contains the restorecond service.
|
|||||||
- sepolgen-ifgen should use the current policy path if selinux is enabled
|
- sepolgen-ifgen should use the current policy path if selinux is enabled
|
||||||
|
|
||||||
* Fri Feb 22 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
|
* Fri Feb 22 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
|
||||||
- Fix sepolicy to be able to work on an SELinux disabled system.
|
- Fix sepolicy to be able to work on an SELinux disabled system.
|
||||||
- Needed to be able to build man pages in selinux-policy package
|
- Needed to be able to build man pages in selinux-policy package
|
||||||
|
|
||||||
* Thu Feb 21 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-9
|
* Thu Feb 21 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-9
|
||||||
@ -552,7 +577,7 @@ do not drop capabilities when run as root.
|
|||||||
- Fix empty system-config-selinux.png
|
- Fix empty system-config-selinux.png
|
||||||
|
|
||||||
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
|
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* setfiles: estimate percent progress
|
* setfiles: estimate percent progress
|
||||||
* load_policy: make link at the destination directory
|
* load_policy: make link at the destination directory
|
||||||
* Rebuild polgen.glade with glade-3
|
* Rebuild polgen.glade with glade-3
|
||||||
@ -593,7 +618,7 @@ do not drop capabilities when run as root.
|
|||||||
|
|
||||||
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
|
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
|
||||||
- Update to latest patches from eparis/Upstream
|
- Update to latest patches from eparis/Upstream
|
||||||
- fixfiles onboot will write any flags handed to it to /.autorelabel.
|
- fixfiles onboot will write any flags handed to it to /.autorelabel.
|
||||||
- * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
|
- * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
|
||||||
- * This should allow fixfiles -F onboot, to force a hard relabel.
|
- * This should allow fixfiles -F onboot, to force a hard relabel.
|
||||||
- Add -p to show progress on full relabel.
|
- Add -p to show progress on full relabel.
|
||||||
@ -635,12 +660,12 @@ do not drop capabilities when run as root.
|
|||||||
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
|
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
|
||||||
- Update translations
|
- Update translations
|
||||||
- Fix sepolicy booleans to handle autogenerated booleans descriptions
|
- Fix sepolicy booleans to handle autogenerated booleans descriptions
|
||||||
- Cleanups of sepolicy manpage
|
- Cleanups of sepolicy manpage
|
||||||
- Fix crash on git_shell man page generation
|
- Fix crash on git_shell man page generation
|
||||||
|
|
||||||
* Thu Jan 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
|
* Thu Jan 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
|
||||||
- Update translations
|
- Update translations
|
||||||
- update sepolicy manpage to generate fcontext equivalence data and to list
|
- update sepolicy manpage to generate fcontext equivalence data and to list
|
||||||
default file context paths.
|
default file context paths.
|
||||||
- Add ability to generate policy for confined admins and domains like puppet.
|
- Add ability to generate policy for confined admins and domains like puppet.
|
||||||
|
|
||||||
@ -649,7 +674,7 @@ default file context paths.
|
|||||||
- Update translations
|
- Update translations
|
||||||
|
|
||||||
* Wed Dec 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-48
|
* Wed Dec 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-48
|
||||||
- Fix semanage permissive
|
- Fix semanage permissive
|
||||||
- Change to use correct gtk forward button
|
- Change to use correct gtk forward button
|
||||||
- Update po
|
- Update po
|
||||||
|
|
||||||
@ -662,7 +687,7 @@ default file context paths.
|
|||||||
|
|
||||||
* Mon Dec 10 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
|
* Mon Dec 10 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
|
||||||
- Apply patch from Miroslav to display proper range description in man pages g
|
- Apply patch from Miroslav to display proper range description in man pages g
|
||||||
- Should print warning on missing default label when run in recusive mode iff
|
- Should print warning on missing default label when run in recusive mode iff
|
||||||
- Remove extra -R description, and fix recursive description
|
- Remove extra -R description, and fix recursive description
|
||||||
|
|
||||||
* Thu Dec 6 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
|
* Thu Dec 6 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
|
||||||
@ -741,8 +766,8 @@ recusively
|
|||||||
- Fix sepolicy generate to not include subdirs in generated fcontext file. (mgrepl patch)
|
- Fix sepolicy generate to not include subdirs in generated fcontext file. (mgrepl patch)
|
||||||
|
|
||||||
* Sat Nov 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
|
* Sat Nov 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
|
||||||
- Fix manpage to generate proper man pages for alternate policy,
|
- Fix manpage to generate proper man pages for alternate policy,
|
||||||
basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
|
basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
|
||||||
I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
||||||
|
|
||||||
* Thu Nov 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-23
|
* Thu Nov 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-23
|
||||||
@ -794,7 +819,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Patch initiated by Miroslav Grepl
|
- Patch initiated by Miroslav Grepl
|
||||||
|
|
||||||
* Wed Oct 10 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
|
* Wed Oct 10 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
|
||||||
- Fix semanage to verify that types are appropriate for commands.
|
- Fix semanage to verify that types are appropriate for commands.
|
||||||
* Patch initiated by mgrepl
|
* Patch initiated by mgrepl
|
||||||
* Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port
|
* Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port
|
||||||
|
|
||||||
@ -825,7 +850,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Use systemd post install scriptlets
|
- Use systemd post install scriptlets
|
||||||
|
|
||||||
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
|
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* genhomedircon: manual page improvements
|
* genhomedircon: manual page improvements
|
||||||
* setfiles/restorecon minor improvements
|
* setfiles/restorecon minor improvements
|
||||||
* run_init: If open_init_pty is not available then just use exec
|
* run_init: If open_init_pty is not available then just use exec
|
||||||
@ -875,7 +900,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
|
|
||||||
* Thu Jul 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
|
* Thu Jul 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
|
||||||
- Fix restorecon to generate a better percentage of completion on restorecon -R /.
|
- Fix restorecon to generate a better percentage of completion on restorecon -R /.
|
||||||
- Have audit2allow look at the constaint violation and tell the user whether it
|
- Have audit2allow look at the constaint violation and tell the user whether it
|
||||||
- is because of user,role or level
|
- is because of user,role or level
|
||||||
|
|
||||||
|
|
||||||
@ -886,7 +911,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Remove load_policy symbolic link on usrmove systems this breaks the system
|
- Remove load_policy symbolic link on usrmove systems this breaks the system
|
||||||
|
|
||||||
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
- policycoreutils
|
- policycoreutils
|
||||||
* restorecond: wrong options should exit with non-zero error code
|
* restorecond: wrong options should exit with non-zero error code
|
||||||
* restorecond: Add -h option to get usage command
|
* restorecond: Add -h option to get usage command
|
||||||
@ -919,7 +944,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Fix semanage dontaudit off/on exception
|
- Fix semanage dontaudit off/on exception
|
||||||
|
|
||||||
* Tue May 8 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
|
* Tue May 8 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
|
||||||
- Add -N qualifier to semanage, setsebool and semodule to allow you to update
|
- Add -N qualifier to semanage, setsebool and semodule to allow you to update
|
||||||
- policy without reloading it into the kernel.
|
- policy without reloading it into the kernel.
|
||||||
|
|
||||||
* Thu May 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-11
|
* Thu May 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-11
|
||||||
@ -957,7 +982,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Change policycoreutils-python to require selinux-policy-devel package
|
- Change policycoreutils-python to require selinux-policy-devel package
|
||||||
|
|
||||||
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
- policycoreutils
|
- policycoreutils
|
||||||
* sandbox: do not propogate inside mounts outside
|
* sandbox: do not propogate inside mounts outside
|
||||||
* sandbox: Removing sandbox init script, should no longer be necessary
|
* sandbox: Removing sandbox init script, should no longer be necessary
|
||||||
@ -1012,7 +1037,7 @@ I pull the policy, policy.xml and file_contexts and file_contexts.homedir
|
|||||||
- Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface
|
- Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface
|
||||||
|
|
||||||
* Fri Feb 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-21
|
* Fri Feb 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-21
|
||||||
- On full relabels we will now show a estimated percent complete rather then
|
- On full relabels we will now show a estimated percent complete rather then
|
||||||
just *s.
|
just *s.
|
||||||
|
|
||||||
* Wed Feb 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-20
|
* Wed Feb 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-20
|
||||||
@ -1055,7 +1080,7 @@ just *s.
|
|||||||
- Eliminate not needed Requires
|
- Eliminate not needed Requires
|
||||||
|
|
||||||
* Wed Jan 18 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-9
|
* Wed Jan 18 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-9
|
||||||
- fix sepolgen to not crash on echo "" | audit2allow
|
- fix sepolgen to not crash on echo "" | audit2allow
|
||||||
|
|
||||||
* Mon Jan 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-8
|
* Mon Jan 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-8
|
||||||
- Remove sandbox init script, should no longer be necessary
|
- Remove sandbox init script, should no longer be necessary
|
||||||
@ -1068,7 +1093,7 @@ just *s.
|
|||||||
|
|
||||||
* Fri Dec 23 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
|
* Fri Dec 23 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
|
||||||
- Fix the handling of namespaces in seunshare/sandbox.
|
- Fix the handling of namespaces in seunshare/sandbox.
|
||||||
- Currently mounting of directories within sandbox is propogating to the
|
- Currently mounting of directories within sandbox is propogating to the
|
||||||
- parent namesspace.
|
- parent namesspace.
|
||||||
|
|
||||||
* Thu Dec 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
|
* Thu Dec 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
|
||||||
@ -1116,13 +1141,13 @@ just *s.
|
|||||||
- Fix semange fcontext -a to check for more conflicts on equivalency
|
- Fix semange fcontext -a to check for more conflicts on equivalency
|
||||||
|
|
||||||
* Tue Nov 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
|
* Tue Nov 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
|
||||||
- Fix dpi handling in sandbox
|
- Fix dpi handling in sandbox
|
||||||
- Make sure semanage fcontext -l -C prints if only local equiv have changed
|
- Make sure semanage fcontext -l -C prints if only local equiv have changed
|
||||||
|
|
||||||
* Wed Nov 16 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
|
* Wed Nov 16 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
|
||||||
- Add listing of distribution equivalence class from semanage fcontext -l
|
- Add listing of distribution equivalence class from semanage fcontext -l
|
||||||
- Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence
|
- Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence
|
||||||
|
|
||||||
* Wed Nov 16 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
|
* Wed Nov 16 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
|
||||||
- Allow ~ as a valid part of a filename in sepolgen
|
- Allow ~ as a valid part of a filename in sepolgen
|
||||||
|
|
||||||
@ -1161,7 +1186,7 @@ just *s.
|
|||||||
* Return name field in avc data
|
* Return name field in avc data
|
||||||
|
|
||||||
* Mon Oct 31 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-6
|
* Mon Oct 31 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-6
|
||||||
- Rebuild versus newer libsepol
|
- Rebuild versus newer libsepol
|
||||||
|
|
||||||
* Fri Oct 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
|
* Fri Oct 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
|
||||||
- A couple of minor coverity fixes for a potential leaked file descriptor
|
- A couple of minor coverity fixes for a potential leaked file descriptor
|
||||||
@ -1225,14 +1250,14 @@ just *s.
|
|||||||
|
|
||||||
* Wed Sep 7 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
|
* Wed Sep 7 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
|
||||||
- Maintain the LANG environment Variable into the sandbox
|
- Maintain the LANG environment Variable into the sandbox
|
||||||
- Change restorecon/setfiles to only change type part of the context unless
|
- Change restorecon/setfiles to only change type part of the context unless
|
||||||
-f qualifier is given
|
-f qualifier is given
|
||||||
|
|
||||||
* Tue Sep 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
|
* Tue Sep 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
|
||||||
- Remove lockdown wizard, since gtkhtml2 is no longer supported.
|
- Remove lockdown wizard, since gtkhtml2 is no longer supported.
|
||||||
|
|
||||||
* Fri Sep 2 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
|
* Fri Sep 2 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
|
||||||
- Allow setfiles and restorecon to use labeledprefix to speed up processing
|
- Allow setfiles and restorecon to use labeledprefix to speed up processing
|
||||||
and limit memory.
|
and limit memory.
|
||||||
|
|
||||||
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
|
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
|
||||||
@ -1344,15 +1369,15 @@ and limit memory.
|
|||||||
- Fix seunshare usage statement
|
- Fix seunshare usage statement
|
||||||
|
|
||||||
* Thu Jul 7 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-18
|
* Thu Jul 7 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-18
|
||||||
- Change seunshare to send kill signals to the childs session.
|
- Change seunshare to send kill signals to the childs session.
|
||||||
- Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.
|
- Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.
|
||||||
|
|
||||||
* Wed Jul 6 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-17
|
* Wed Jul 6 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-17
|
||||||
- Add -k qualifier to seunshare to have it attempt to kill all processes with
|
- Add -k qualifier to seunshare to have it attempt to kill all processes with
|
||||||
the matching MCS label.
|
the matching MCS label.
|
||||||
|
|
||||||
* Tue Jul 5 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-16
|
* Tue Jul 5 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-16
|
||||||
- Add -C option to sandbox and seunshare to maintain capabilities, otherwise
|
- Add -C option to sandbox and seunshare to maintain capabilities, otherwise
|
||||||
the bounding set will be dropped.
|
the bounding set will be dropped.
|
||||||
- Change --cgroups short name -c rather then -C for consistancy
|
- Change --cgroups short name -c rather then -C for consistancy
|
||||||
- Fix memory and fd leaks in seunshare
|
- Fix memory and fd leaks in seunshare
|
||||||
@ -1361,7 +1386,7 @@ the bounding set will be dropped.
|
|||||||
- Introduce systemd unit file for restorecond drop SysV support
|
- Introduce systemd unit file for restorecond drop SysV support
|
||||||
|
|
||||||
* Mon Jun 13 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-14
|
* Mon Jun 13 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-14
|
||||||
- Do not drop capability bounding set in seunshare, this allows sandbox to
|
- Do not drop capability bounding set in seunshare, this allows sandbox to
|
||||||
- run setuid apps.
|
- run setuid apps.
|
||||||
|
|
||||||
* Fri Jun 10 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-13
|
* Fri Jun 10 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-13
|
||||||
@ -1390,7 +1415,7 @@ the bounding set will be dropped.
|
|||||||
|
|
||||||
* Fri Apr 22 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-6
|
* Fri Apr 22 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-6
|
||||||
- Apply patches from Christoph A.
|
- Apply patches from Christoph A.
|
||||||
* fix sandbox title
|
* fix sandbox title
|
||||||
* stop xephyr from li
|
* stop xephyr from li
|
||||||
- Also ignore errors on sandbox include of directory missing files
|
- Also ignore errors on sandbox include of directory missing files
|
||||||
|
|
||||||
@ -1404,7 +1429,7 @@ the bounding set will be dropped.
|
|||||||
- rebuild versus latest libsepol
|
- rebuild versus latest libsepol
|
||||||
|
|
||||||
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-1
|
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> 2.0.86-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* Use correct color range in mcstrand by Richard Haines.
|
* Use correct color range in mcstrand by Richard Haines.
|
||||||
|
|
||||||
* Mon Apr 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-30
|
* Mon Apr 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-30
|
||||||
@ -1437,7 +1462,7 @@ the bounding set will be dropped.
|
|||||||
|
|
||||||
* Fri Mar 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-21
|
* Fri Mar 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-21
|
||||||
- change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
|
- change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
|
||||||
- This will allow default sandboxes to work on NFS homedirs without allowing
|
- This will allow default sandboxes to work on NFS homedirs without allowing
|
||||||
access to homedir data
|
access to homedir data
|
||||||
|
|
||||||
* Fri Mar 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-20
|
* Fri Mar 11 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-20
|
||||||
@ -1458,7 +1483,7 @@ the bounding set will be dropped.
|
|||||||
|
|
||||||
* Mon Mar 7 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-16
|
* Mon Mar 7 2011 Dan Walsh <dwalsh@redhat.com> 2.0.85-16
|
||||||
- Require python-IPy for policycoreutils-python package
|
- Require python-IPy for policycoreutils-python package
|
||||||
- Fixes for sepologen
|
- Fixes for sepologen
|
||||||
- Usage statement needs -n name
|
- Usage statement needs -n name
|
||||||
- Names with _ are being prevented
|
- Names with _ are being prevented
|
||||||
- dbus apps should get _chat interface
|
- dbus apps should get _chat interface
|
||||||
@ -1564,7 +1589,7 @@ the bounding set will be dropped.
|
|||||||
- Stop polgengui from crashing if selinux policy is not installed
|
- Stop polgengui from crashing if selinux policy is not installed
|
||||||
|
|
||||||
* Thu Sep 9 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-25
|
* Thu Sep 9 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-25
|
||||||
- Fix bug preventing sandbox from using -l
|
- Fix bug preventing sandbox from using -l
|
||||||
|
|
||||||
* Tue Sep 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-24
|
* Tue Sep 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-24
|
||||||
- Eliminate quotes fro desktop files
|
- Eliminate quotes fro desktop files
|
||||||
@ -1591,7 +1616,7 @@ the bounding set will be dropped.
|
|||||||
- Fix sandbox error handling
|
- Fix sandbox error handling
|
||||||
|
|
||||||
* Fri Aug 13 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-17
|
* Fri Aug 13 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-17
|
||||||
- Apply patch to restorecond from Chris Adams, which will cause restorecond
|
- Apply patch to restorecond from Chris Adams, which will cause restorecond
|
||||||
- to watch first user that logs in.
|
- to watch first user that logs in.
|
||||||
|
|
||||||
* Thu Aug 12 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-16
|
* Thu Aug 12 2010 Dan Walsh <dwalsh@redhat.com> 2.0.83-16
|
||||||
@ -1649,13 +1674,13 @@ Resolves: #610473
|
|||||||
Resolve: #603001
|
Resolve: #603001
|
||||||
|
|
||||||
* Tue Jun 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-30
|
* Tue Jun 8 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-30
|
||||||
- Add cgroup support for sandbox
|
- Add cgroup support for sandbox
|
||||||
|
|
||||||
* Mon Jun 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-29
|
* Mon Jun 7 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-29
|
||||||
- Allow creation of /var/cache/DOMAIN from sepolgen
|
- Allow creation of /var/cache/DOMAIN from sepolgen
|
||||||
|
|
||||||
* Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-28
|
* Thu Jun 3 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-28
|
||||||
- Fix sandbox init script
|
- Fix sandbox init script
|
||||||
- Add dbus-launch to sandbox -X
|
- Add dbus-launch to sandbox -X
|
||||||
Resolve: #599599
|
Resolve: #599599
|
||||||
|
|
||||||
@ -1719,13 +1744,13 @@ Resolves: #588280
|
|||||||
Resolves: #587263
|
Resolves: #587263
|
||||||
|
|
||||||
* Wed Apr 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-11
|
* Wed Apr 28 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-11
|
||||||
- Make semanage boolean work on disabled machines
|
- Make semanage boolean work on disabled machines
|
||||||
|
|
||||||
* Tue Apr 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-10
|
* Tue Apr 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-10
|
||||||
- Make sepolgen-ifgen be quiet
|
- Make sepolgen-ifgen be quiet
|
||||||
|
|
||||||
* Wed Apr 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-8
|
* Wed Apr 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-8
|
||||||
- Make sepolgen report on more interfaces
|
- Make sepolgen report on more interfaces
|
||||||
- Fix system-config-selinux display of modules
|
- Fix system-config-selinux display of modules
|
||||||
|
|
||||||
* Thu Apr 15 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-7
|
* Thu Apr 15 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-7
|
||||||
@ -1744,16 +1769,16 @@ Resolves: #582533
|
|||||||
- Fix sandbox to throw error on bad executable
|
- Fix sandbox to throw error on bad executable
|
||||||
|
|
||||||
* Tue Apr 6 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-4
|
* Tue Apr 6 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-4
|
||||||
- Fix spacing in templates
|
- Fix spacing in templates
|
||||||
|
|
||||||
* Wed Mar 31 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-3
|
* Wed Mar 31 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-3
|
||||||
- Fix semanage return codes
|
- Fix semanage return codes
|
||||||
|
|
||||||
* Tue Mar 30 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-2
|
* Tue Mar 30 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-2
|
||||||
- Fix sepolgen to confirm to the "Reference Policy Style Guide"
|
- Fix sepolgen to confirm to the "Reference Policy Style Guide"
|
||||||
|
|
||||||
* Tue Mar 23 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-1
|
* Tue Mar 23 2010 Dan Walsh <dwalsh@redhat.com> 2.0.82-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* Add avc's since boot from Dan Walsh.
|
* Add avc's since boot from Dan Walsh.
|
||||||
* Fix unit tests from Dan Walsh.
|
* Fix unit tests from Dan Walsh.
|
||||||
|
|
||||||
@ -1782,7 +1807,7 @@ Resolves: #582533
|
|||||||
* Module enable/disable support from Dan Walsh.
|
* Module enable/disable support from Dan Walsh.
|
||||||
|
|
||||||
* Mon Mar 1 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-5
|
* Mon Mar 1 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-5
|
||||||
- Rewrite of sandbox script, add unit test for sandbox
|
- Rewrite of sandbox script, add unit test for sandbox
|
||||||
- Update translations
|
- Update translations
|
||||||
|
|
||||||
* Mon Mar 1 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-4
|
* Mon Mar 1 2010 Dan Walsh <dwalsh@redhat.com> 2.0.79-4
|
||||||
@ -1820,7 +1845,7 @@ Resolves: 555835
|
|||||||
- Add use_resolve to sepolgen
|
- Add use_resolve to sepolgen
|
||||||
|
|
||||||
* Wed Jan 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-14
|
* Wed Jan 27 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-14
|
||||||
- Add session capability to sandbox
|
- Add session capability to sandbox
|
||||||
- sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession
|
- sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession
|
||||||
|
|
||||||
* Thu Jan 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-13
|
* Thu Jan 21 2010 Dan Walsh <dwalsh@redhat.com> 2.0.78-13
|
||||||
@ -2031,7 +2056,7 @@ Resolves: 555835
|
|||||||
- Update to upstream
|
- Update to upstream
|
||||||
* Modify restorecon to only call realpath() on user-supplied pathnames
|
* Modify restorecon to only call realpath() on user-supplied pathnames
|
||||||
from Stephen Smalley.
|
from Stephen Smalley.
|
||||||
* Fix typo in fixfiles that prevented it from relabeling btrfs
|
* Fix typo in fixfiles that prevented it from relabeling btrfs
|
||||||
filesystems from Dan Walsh.
|
filesystems from Dan Walsh.
|
||||||
|
|
||||||
* Wed Jul 29 2009 Dan Walsh <dwalsh@redhat.com> 2.0.68-1
|
* Wed Jul 29 2009 Dan Walsh <dwalsh@redhat.com> 2.0.68-1
|
||||||
@ -2183,7 +2208,7 @@ Resolves: 555835
|
|||||||
|
|
||||||
* Tue Nov 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.59-1
|
* Tue Nov 11 2008 Dan Walsh <dwalsh@redhat.com> 2.0.59-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* fcontext add checked local records twice, fix from Dan Walsh.
|
* fcontext add checked local records twice, fix from Dan Walsh.
|
||||||
|
|
||||||
* Mon Nov 10 2008 Dan Walsh <dwalsh@redhat.com> 2.0.58-1
|
* Mon Nov 10 2008 Dan Walsh <dwalsh@redhat.com> 2.0.58-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
@ -2283,7 +2308,7 @@ Resolves: 555835
|
|||||||
- Allow semanage user to add group lists % groupname
|
- Allow semanage user to add group lists % groupname
|
||||||
|
|
||||||
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.53-2
|
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.53-2
|
||||||
- Fix help
|
- Fix help
|
||||||
|
|
||||||
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.53-1
|
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> 2.0.53-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
@ -2357,7 +2382,7 @@ Resolves: 555835
|
|||||||
* Wed May 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.47-1
|
* Wed May 7 2008 Dan Walsh <dwalsh@redhat.com> 2.0.47-1
|
||||||
- Make restorecond not start by default
|
- Make restorecond not start by default
|
||||||
- Fix polgengui to allow defining of confined roles.
|
- Fix polgengui to allow defining of confined roles.
|
||||||
- Add patches from Lubomir Rintel <lkundrak@v3.sk>
|
- Add patches from Lubomir Rintel <lkundrak@v3.sk>
|
||||||
* Add necessary runtime dependencies on setools-console for -gui
|
* Add necessary runtime dependencies on setools-console for -gui
|
||||||
* separate stderr when run seinfo commands
|
* separate stderr when run seinfo commands
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
@ -2365,7 +2390,7 @@ Resolves: 555835
|
|||||||
* Add further error checking to seobject.py for setting booleans.
|
* Add further error checking to seobject.py for setting booleans.
|
||||||
|
|
||||||
* Fri Apr 18 2008 Matthias Clasen <mclasen@redhat.com> - 2.0.46-5
|
* Fri Apr 18 2008 Matthias Clasen <mclasen@redhat.com> - 2.0.46-5
|
||||||
- Uninvasive (ie no string or widget changes) HIG approximations
|
- Uninvasive (ie no string or widget changes) HIG approximations
|
||||||
in selinux-polgenui
|
in selinux-polgenui
|
||||||
|
|
||||||
* Fri Apr 18 2008 Matthias Clasen <mclasen@redhat.com> - 2.0.46-4
|
* Fri Apr 18 2008 Matthias Clasen <mclasen@redhat.com> - 2.0.46-4
|
||||||
@ -2521,7 +2546,7 @@ Resolves: 555835
|
|||||||
- Fix fixfiles argument parsing
|
- Fix fixfiles argument parsing
|
||||||
|
|
||||||
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-15
|
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-15
|
||||||
- Fix File Labeling add
|
- Fix File Labeling add
|
||||||
|
|
||||||
* Thu Nov 8 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-14
|
* Thu Nov 8 2007 Dan Walsh <dwalsh@redhat.com> 2.0.31-14
|
||||||
- Fix semanage to handle state where policy.xml is not installed
|
- Fix semanage to handle state where policy.xml is not installed
|
||||||
@ -2623,7 +2648,7 @@ Resolves: 555835
|
|||||||
* Suppress generation of rules for non-denials from Karl MacMillan (take 3).
|
* Suppress generation of rules for non-denials from Karl MacMillan (take 3).
|
||||||
|
|
||||||
* Tue Sep 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-12
|
* Tue Sep 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-12
|
||||||
- Remove bogus import libxml2
|
- Remove bogus import libxml2
|
||||||
|
|
||||||
* Mon Sep 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-11
|
* Mon Sep 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.25-11
|
||||||
- Lots of fixes for polgengui
|
- Lots of fixes for polgengui
|
||||||
@ -2661,7 +2686,7 @@ Resolves: 555835
|
|||||||
* Fix genhomedircon searching for USER from Todd Miller
|
* Fix genhomedircon searching for USER from Todd Miller
|
||||||
* Install run_init with mode 0755 from Dan Walsh.
|
* Install run_init with mode 0755 from Dan Walsh.
|
||||||
* Fix chcat from Dan Walsh.
|
* Fix chcat from Dan Walsh.
|
||||||
* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
|
* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
|
||||||
* Optimize genhomedircon to compile regexes once from Dan Walsh.
|
* Optimize genhomedircon to compile regexes once from Dan Walsh.
|
||||||
* Fix semanage gettext call from Dan Walsh.
|
* Fix semanage gettext call from Dan Walsh.
|
||||||
|
|
||||||
@ -2686,11 +2711,11 @@ Resolves: 555835
|
|||||||
- rebuild for toolchain bug
|
- rebuild for toolchain bug
|
||||||
|
|
||||||
* Tue Jul 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-8
|
* Tue Jul 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-8
|
||||||
- Add requires libselinux-python
|
- Add requires libselinux-python
|
||||||
|
|
||||||
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-7
|
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-7
|
||||||
- Fix fixfiles to report incorrect rpm
|
- Fix fixfiles to report incorrect rpm
|
||||||
- Patch provided by Tony Nelson
|
- Patch provided by Tony Nelson
|
||||||
|
|
||||||
* Fri Jul 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-6
|
* Fri Jul 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.22-6
|
||||||
- Clean up spec file
|
- Clean up spec file
|
||||||
@ -2808,7 +2833,7 @@ Resolves: 555835
|
|||||||
- Updated version of sepolgen
|
- Updated version of sepolgen
|
||||||
* Merged updates to sepolgen-ifgen from Karl MacMillan.
|
* Merged updates to sepolgen-ifgen from Karl MacMillan.
|
||||||
* Merged updates to sepolgen parser and tools from Karl MacMillan.
|
* Merged updates to sepolgen parser and tools from Karl MacMillan.
|
||||||
This includes improved debugging support, handling of interface
|
This includes improved debugging support, handling of interface
|
||||||
calls with list parameters, support for role transition rules,
|
calls with list parameters, support for role transition rules,
|
||||||
updated range transition rule support, and looser matching.
|
updated range transition rule support, and looser matching.
|
||||||
|
|
||||||
@ -2868,7 +2893,7 @@ Resolves: 555835
|
|||||||
- Update to upstream
|
- Update to upstream
|
||||||
- policycoreutils
|
- policycoreutils
|
||||||
* Merged newrole O_NONBLOCK fix from Linda Knippers.
|
* Merged newrole O_NONBLOCK fix from Linda Knippers.
|
||||||
* Merged sepolgen and audit2allow patches to leave generated files
|
* Merged sepolgen and audit2allow patches to leave generated files
|
||||||
in the current directory from Karl MacMillan.
|
in the current directory from Karl MacMillan.
|
||||||
* Merged restorecond memory leak fix from Steve Grubb.
|
* Merged restorecond memory leak fix from Steve Grubb.
|
||||||
-sepolgen
|
-sepolgen
|
||||||
@ -2913,7 +2938,7 @@ Resolves: 555835
|
|||||||
* Merged new audit2allow from Karl MacMillan.
|
* Merged new audit2allow from Karl MacMillan.
|
||||||
This audit2allow depends on the new sepolgen python module.
|
This audit2allow depends on the new sepolgen python module.
|
||||||
Note that you must run the sepolgen-ifgen tool to generate
|
Note that you must run the sepolgen-ifgen tool to generate
|
||||||
the data needed by audit2allow to generate refpolicy.
|
the data needed by audit2allow to generate refpolicy.
|
||||||
* Fixed newrole non-pam build.
|
* Fixed newrole non-pam build.
|
||||||
- Fix Changelog and spelling error in man page
|
- Fix Changelog and spelling error in man page
|
||||||
|
|
||||||
@ -2958,7 +2983,7 @@ Resolves: #200110
|
|||||||
* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.11-1
|
* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.11-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
* Merged fixfiles and seobject fixes from Dan Walsh.
|
* Merged fixfiles and seobject fixes from Dan Walsh.
|
||||||
* Merged semodule support for list of modules after -i from Karl MacMillan.
|
* Merged semodule support for list of modules after -i from Karl MacMillan.
|
||||||
|
|
||||||
* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.10-1
|
* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.10-1
|
||||||
- Update to upstream
|
- Update to upstream
|
||||||
@ -2982,7 +3007,7 @@ Resolves: #200110
|
|||||||
* Patch from Dan Walsh to correctly suppress warnings in load_policy.
|
* Patch from Dan Walsh to correctly suppress warnings in load_policy.
|
||||||
|
|
||||||
* Tue Jan 2 2007 Dan Walsh <dwalsh@redhat.com> 1.33.6-9
|
* Tue Jan 2 2007 Dan Walsh <dwalsh@redhat.com> 1.33.6-9
|
||||||
- Fix fixfiles script to use tty command correctly. If this command fails, it
|
- Fix fixfiles script to use tty command correctly. If this command fails, it
|
||||||
should set the LOGFILE to /dev/null
|
should set the LOGFILE to /dev/null
|
||||||
Resolves: #220879
|
Resolves: #220879
|
||||||
|
|
||||||
@ -2995,7 +3020,7 @@ Resolves: #219421
|
|||||||
|
|
||||||
* Mon Dec 18 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-6
|
* Mon Dec 18 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-6
|
||||||
- Fix audit2allow generating reference policy
|
- Fix audit2allow generating reference policy
|
||||||
- Fix semanage to manage user roles properly
|
- Fix semanage to manage user roles properly
|
||||||
Resolves: #220071
|
Resolves: #220071
|
||||||
|
|
||||||
* Fri Dec 8 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-5
|
* Fri Dec 8 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-5
|
||||||
@ -3021,7 +3046,7 @@ Resolves: #216920
|
|||||||
* Patch from Dan Walsh to remove verbose flag from semanage man page
|
* Patch from Dan Walsh to remove verbose flag from semanage man page
|
||||||
* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
|
* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
|
||||||
in /usr/share/selinux/<SELINUXTYPE>
|
in /usr/share/selinux/<SELINUXTYPE>
|
||||||
|
|
||||||
* Wed Nov 29 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-4
|
* Wed Nov 29 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-4
|
||||||
- Fixing the Makefile line again to build with LSPP support
|
- Fixing the Makefile line again to build with LSPP support
|
||||||
Resolves: #208838
|
Resolves: #208838
|
||||||
@ -3045,7 +3070,7 @@ Resolves: #208838
|
|||||||
|
|
||||||
* Wed Nov 22 2006 Dan Walsh <dwalsh@redhat.com> 1.33.4-1
|
* Wed Nov 22 2006 Dan Walsh <dwalsh@redhat.com> 1.33.4-1
|
||||||
- Upstream accepted my patches
|
- Upstream accepted my patches
|
||||||
* Merged setsebool patch from Karl MacMillan.
|
* Merged setsebool patch from Karl MacMillan.
|
||||||
This fixes a bug reported by Yuichi Nakamura with
|
This fixes a bug reported by Yuichi Nakamura with
|
||||||
always setting booleans persistently on an unmanaged system.
|
always setting booleans persistently on an unmanaged system.
|
||||||
|
|
||||||
@ -3110,7 +3135,7 @@ Resolves: #208838
|
|||||||
* Thu Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-6
|
* Thu Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-6
|
||||||
- Pass -i qualifier to restorecon for fixfiles -R
|
- Pass -i qualifier to restorecon for fixfiles -R
|
||||||
- Update translations
|
- Update translations
|
||||||
|
|
||||||
* Thu Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-5
|
* Thu Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-5
|
||||||
- Remove recursion from fixfiles -R calls
|
- Remove recursion from fixfiles -R calls
|
||||||
- Fix semanage to verify prefix
|
- Fix semanage to verify prefix
|
||||||
@ -3142,7 +3167,7 @@ Resolves: #208838
|
|||||||
* Fri Sep 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-6
|
* Fri Sep 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-6
|
||||||
- Change setfiles and restorecon to use stderr except for -o flag
|
- Change setfiles and restorecon to use stderr except for -o flag
|
||||||
- Also -o flag will now output files
|
- Also -o flag will now output files
|
||||||
|
|
||||||
* Thu Sep 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-5
|
* Thu Sep 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-5
|
||||||
- Put back Erich's change
|
- Put back Erich's change
|
||||||
|
|
||||||
@ -3192,7 +3217,7 @@ Resolves: #208838
|
|||||||
* newrole: run shell with - prefix to start a login shell
|
* newrole: run shell with - prefix to start a login shell
|
||||||
* po: po file updates
|
* po: po file updates
|
||||||
* restorecond: bail if SELinux not enabled
|
* restorecond: bail if SELinux not enabled
|
||||||
* fixfiles: omit -q
|
* fixfiles: omit -q
|
||||||
* genhomedircon: fix exit code if non-root
|
* genhomedircon: fix exit code if non-root
|
||||||
* semodule_deps: install man page
|
* semodule_deps: install man page
|
||||||
* Merged secon Makefile fix from Joshua Brindle.
|
* Merged secon Makefile fix from Joshua Brindle.
|
||||||
@ -3240,7 +3265,7 @@ Resolves: #208838
|
|||||||
* disable context translation for setfiles and restorecon.
|
* disable context translation for setfiles and restorecon.
|
||||||
* on/off values for setsebool.
|
* on/off values for setsebool.
|
||||||
* Merged setfiles and semodule_link fixes from Joshua Brindle.
|
* Merged setfiles and semodule_link fixes from Joshua Brindle.
|
||||||
|
|
||||||
* Thu Jun 22 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-5
|
* Thu Jun 22 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-5
|
||||||
- Add progress indicator on fixfiles/setfiles/restorecon
|
- Add progress indicator on fixfiles/setfiles/restorecon
|
||||||
|
|
||||||
@ -3327,7 +3352,7 @@ Resolves: #208838
|
|||||||
* Merged fix warnings patch from Karl MacMillan.
|
* Merged fix warnings patch from Karl MacMillan.
|
||||||
* Merged patch from Dan Walsh.
|
* Merged patch from Dan Walsh.
|
||||||
This includes audit2allow changes for analysis plugins,
|
This includes audit2allow changes for analysis plugins,
|
||||||
internationalization support for several additional programs
|
internationalization support for several additional programs
|
||||||
and added po files, some fixes for semanage, and several cleanups.
|
and added po files, some fixes for semanage, and several cleanups.
|
||||||
It also adds a new secon utility.
|
It also adds a new secon utility.
|
||||||
|
|
||||||
@ -3441,7 +3466,7 @@ Resolves: #208838
|
|||||||
|
|
||||||
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-1
|
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-1
|
||||||
- Update from upstream
|
- Update from upstream
|
||||||
* Merged seuser/user_extra support patch to semodule_package
|
* Merged seuser/user_extra support patch to semodule_package
|
||||||
from Joshua Brindle.
|
from Joshua Brindle.
|
||||||
* Merged getopt type fix for semodule_link/expand and sestatus
|
* Merged getopt type fix for semodule_link/expand and sestatus
|
||||||
from Chris PeBenito.
|
from Chris PeBenito.
|
||||||
@ -3517,7 +3542,7 @@ Resolves: #208838
|
|||||||
- Update chcat to manage user categories also
|
- Update chcat to manage user categories also
|
||||||
|
|
||||||
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-3
|
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-3
|
||||||
- Add check for root for semanage, genhomedircon
|
- Add check for root for semanage, genhomedircon
|
||||||
|
|
||||||
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-2
|
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-2
|
||||||
- Add ivans patch
|
- Add ivans patch
|
||||||
@ -3578,7 +3603,7 @@ Resolves: #208838
|
|||||||
|
|
||||||
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
|
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
|
||||||
- Add try catch for files that may not exists
|
- Add try catch for files that may not exists
|
||||||
|
|
||||||
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
|
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
|
||||||
- Remove commands from genhomedircon for installer
|
- Remove commands from genhomedircon for installer
|
||||||
|
|
||||||
@ -3745,7 +3770,7 @@ Resolves: #208838
|
|||||||
|
|
||||||
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
|
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
|
||||||
- Update to match NSA
|
- Update to match NSA
|
||||||
* Updated for changes to libsepol.
|
* Updated for changes to libsepol.
|
||||||
Changed semodule and semodule_package to use the shared libsepol.
|
Changed semodule and semodule_package to use the shared libsepol.
|
||||||
Disabled build of semodule_link and semodule_expand for now.
|
Disabled build of semodule_link and semodule_expand for now.
|
||||||
Updated audit2why for relocated policydb internal headers,
|
Updated audit2why for relocated policydb internal headers,
|
||||||
@ -3762,7 +3787,7 @@ Resolves: #208838
|
|||||||
interface provided by libselinux.
|
interface provided by libselinux.
|
||||||
|
|
||||||
* Wed Oct 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-2
|
* Wed Oct 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-2
|
||||||
- Rebuild with newer libararies
|
- Rebuild with newer libararies
|
||||||
|
|
||||||
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
|
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
|
||||||
- Update to match NSA
|
- Update to match NSA
|
||||||
@ -3849,7 +3874,7 @@ Resolves: #208838
|
|||||||
* Updated version for release.
|
* Updated version for release.
|
||||||
|
|
||||||
* Tue Jun 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-4
|
* Tue Jun 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-4
|
||||||
- Fix Ivan's patch for user role changes
|
- Fix Ivan's patch for user role changes
|
||||||
|
|
||||||
* Sat May 28 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-3
|
* Sat May 28 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-3
|
||||||
- Add Ivan's patch for user role changes in genhomedircon
|
- Add Ivan's patch for user role changes in genhomedircon
|
||||||
@ -3868,13 +3893,13 @@ Resolves: #208838
|
|||||||
|
|
||||||
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-1
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-1
|
||||||
- Update to match NSA
|
- Update to match NSA
|
||||||
* Extended audit2why to incorporate booleans and local user
|
* Extended audit2why to incorporate booleans and local user
|
||||||
settings when analyzing audit messages.
|
settings when analyzing audit messages.
|
||||||
|
|
||||||
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.23.9-1
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.23.9-1
|
||||||
- Update to match NSA
|
- Update to match NSA
|
||||||
* Updated audit2why for sepol_ prefixes on Flask types to
|
* Updated audit2why for sepol_ prefixes on Flask types to
|
||||||
avoid namespace collision with libselinux, and to
|
avoid namespace collision with libselinux, and to
|
||||||
include <selinux/selinux.h> now.
|
include <selinux/selinux.h> now.
|
||||||
|
|
||||||
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.8-1
|
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.8-1
|
||||||
@ -3924,7 +3949,7 @@ Resolves: #208838
|
|||||||
- Update to released version from NSA
|
- Update to released version from NSA
|
||||||
* Merged rewrite of genhomedircon by Eric Paris.
|
* Merged rewrite of genhomedircon by Eric Paris.
|
||||||
* Changed fixfiles to relabel jfs since it now supports security xattrs
|
* Changed fixfiles to relabel jfs since it now supports security xattrs
|
||||||
(as of 2.6.11). Removed reiserfs until 2.6.12 is released with
|
(as of 2.6.11). Removed reiserfs until 2.6.12 is released with
|
||||||
fixed support for reiserfs and selinux.
|
fixed support for reiserfs and selinux.
|
||||||
|
|
||||||
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-2
|
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-2
|
||||||
@ -3951,7 +3976,7 @@ Resolves: #208838
|
|||||||
- Add call to libsepol
|
- Add call to libsepol
|
||||||
|
|
||||||
* Thu Feb 24 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-4
|
* Thu Feb 24 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-4
|
||||||
- Fix genhomedircon to handle root
|
- Fix genhomedircon to handle root
|
||||||
- Fix fixfiles to better handle file system types
|
- Fix fixfiles to better handle file system types
|
||||||
|
|
||||||
* Wed Feb 23 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-2
|
* Wed Feb 23 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-2
|
||||||
@ -3991,15 +4016,15 @@ written to. fails on 64-bit archs
|
|||||||
|
|
||||||
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-9
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-9
|
||||||
- Remove Red Hat rhpl usage
|
- Remove Red Hat rhpl usage
|
||||||
- Add back in original syntax
|
- Add back in original syntax
|
||||||
- Update man page to match new syntax
|
- Update man page to match new syntax
|
||||||
|
|
||||||
* Fri Feb 11 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-8
|
* Fri Feb 11 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-8
|
||||||
- Fix genhomedircon regular expression
|
- Fix genhomedircon regular expression
|
||||||
- Fix exclude in restorecon
|
- Fix exclude in restorecon
|
||||||
|
|
||||||
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-5
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-5
|
||||||
- Trap failure on write
|
- Trap failure on write
|
||||||
- Rewrite genhomedircon to generate file_context.homedirs
|
- Rewrite genhomedircon to generate file_context.homedirs
|
||||||
- several passes
|
- several passes
|
||||||
|
|
||||||
@ -4023,7 +4048,7 @@ written to. fails on 64-bit archs
|
|||||||
|
|
||||||
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.12-1
|
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.12-1
|
||||||
- More cleanup of fixfiles sed patch
|
- More cleanup of fixfiles sed patch
|
||||||
* Merged further patches for restorecon/setfiles -e and fixfiles -C.
|
* Merged further patches for restorecon/setfiles -e and fixfiles -C.
|
||||||
|
|
||||||
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-2
|
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-2
|
||||||
- More cleanup of fixfiles sed patch
|
- More cleanup of fixfiles sed patch
|
||||||
@ -4038,7 +4063,7 @@ written to. fails on 64-bit archs
|
|||||||
- Upgrade to latest from NSA
|
- Upgrade to latest from NSA
|
||||||
* Merged updated fixfiles script from Dan Walsh.
|
* Merged updated fixfiles script from Dan Walsh.
|
||||||
* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
|
* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
|
||||||
* Reverted fixfiles patch for file_contexts.local;
|
* Reverted fixfiles patch for file_contexts.local;
|
||||||
obsoleted by setfiles rewrite.
|
obsoleted by setfiles rewrite.
|
||||||
* Merged error handling patch for restorecon from Dan Walsh.
|
* Merged error handling patch for restorecon from Dan Walsh.
|
||||||
* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
|
* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
|
||||||
@ -4096,7 +4121,7 @@ written to. fails on 64-bit archs
|
|||||||
|
|
||||||
* Mon Jan 3 2005 Dan Walsh <dwalsh@redhat.com> 1.19.2-4
|
* Mon Jan 3 2005 Dan Walsh <dwalsh@redhat.com> 1.19.2-4
|
||||||
- Fix fixfiles handling of rpm
|
- Fix fixfiles handling of rpm
|
||||||
- Fix restorecon to not warn on symlinks unless -v -v
|
- Fix restorecon to not warn on symlinks unless -v -v
|
||||||
- Fix output of verbose to show old context as well as new context
|
- Fix output of verbose to show old context as well as new context
|
||||||
|
|
||||||
* Wed Dec 29 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
|
* Wed Dec 29 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
|
||||||
@ -4134,7 +4159,7 @@ written to. fails on 64-bit archs
|
|||||||
* Merged -e option to setfiles to exclude directories.
|
* Merged -e option to setfiles to exclude directories.
|
||||||
* Merged -R option to restorecon for recursive descent.
|
* Merged -R option to restorecon for recursive descent.
|
||||||
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-6
|
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-6
|
||||||
- Add -e (exclude directory) switch to setfiles
|
- Add -e (exclude directory) switch to setfiles
|
||||||
- Add syslog to setfiles
|
- Add syslog to setfiles
|
||||||
|
|
||||||
* Fri Sep 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-5
|
* Fri Sep 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-5
|
||||||
@ -4157,7 +4182,7 @@ written to. fails on 64-bit archs
|
|||||||
- Add fix to get cdrom info from /proc/media in fixfiles.
|
- Add fix to get cdrom info from /proc/media in fixfiles.
|
||||||
|
|
||||||
* Wed Aug 25 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-4
|
* Wed Aug 25 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-4
|
||||||
- Add Steve Grub patches for
|
- Add Steve Grub patches for
|
||||||
* Fix fixfiles.cron MAILTO
|
* Fix fixfiles.cron MAILTO
|
||||||
* Several problems in sestatus
|
* Several problems in sestatus
|
||||||
|
|
||||||
@ -4206,7 +4231,7 @@ written to. fails on 64-bit archs
|
|||||||
- Latest from NSA
|
- Latest from NSA
|
||||||
|
|
||||||
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-2
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-2
|
||||||
- Add ro warnings
|
- Add ro warnings
|
||||||
|
|
||||||
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
|
||||||
- Latest from NSA
|
- Latest from NSA
|
||||||
@ -4374,7 +4399,7 @@ written to. fails on 64-bit archs
|
|||||||
- Fix minor bugs in restorecon
|
- Fix minor bugs in restorecon
|
||||||
|
|
||||||
* Thu Feb 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6-2
|
* Thu Feb 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6-2
|
||||||
- Add restorecon c program
|
- Add restorecon c program
|
||||||
|
|
||||||
* Tue Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
* Tue Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
||||||
- Update to latest tarball from NSA
|
- Update to latest tarball from NSA
|
||||||
@ -4389,7 +4414,7 @@ written to. fails on 64-bit archs
|
|||||||
- remove mods to run_init since init scripts don't require it anymore
|
- remove mods to run_init since init scripts don't require it anymore
|
||||||
|
|
||||||
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
|
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
|
||||||
- fix genhomedircon not to return and error
|
- fix genhomedircon not to return and error
|
||||||
|
|
||||||
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
|
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
|
||||||
- add setfiles quiet patch
|
- add setfiles quiet patch
|
||||||
@ -4443,4 +4468,3 @@ written to. fails on 64-bit archs
|
|||||||
|
|
||||||
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
||||||
- Initial version
|
- Initial version
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user