SELinux userspace 3.0 release

This commit is contained in:
Petr Lautrbach 2019-12-06 09:35:34 +01:00
parent ef4795f423
commit 7ccd1ee567
20 changed files with 53 additions and 43 deletions

7
.gitignore vendored
View File

@ -308,3 +308,10 @@ policycoreutils-2.0.83.tgz
/selinux-python-3.0-rc1.tar.gz
/selinux-sandbox-3.0-rc1.tar.gz
/semodule-utils-3.0-rc1.tar.gz
/policycoreutils-3.0.tar.gz
/restorecond-3.0.tar.gz
/selinux-dbus-3.0.tar.gz
/selinux-gui-3.0.tar.gz
/selinux-python-3.0.tar.gz
/selinux-sandbox-3.0.tar.gz
/semodule-utils-3.0.tar.gz

View File

@ -1,4 +1,4 @@
From c42aea829e3f64e09f501007afd0a7ea475f1bcc Mon Sep 17 00:00:00 2001
From 269d3c64978af8053a84ecc54ab2adb7ee481d10 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Thu, 20 Aug 2015 12:58:41 +0200
Subject: [PATCH] sandbox: add -reset to Xephyr as it works better with it in

View File

@ -1,4 +1,4 @@
From a7acf25006b7625360f42682c8b7f01e23398cff Mon Sep 17 00:00:00 2001
From f8714034d527c1eb6bd698abcfd8f02d1542f648 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Mon, 21 Apr 2014 13:54:40 -0400
Subject: [PATCH] Fix STANDARD_FILE_CONTEXT section in man pages

View File

@ -1,4 +1,4 @@
From d0903a1f9bf17e16abc9a44f01ffae413d1103d1 Mon Sep 17 00:00:00 2001
From 73cfd014130f4a37b1db29d5a7b840bf414e8f19 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Mon, 12 May 2014 14:11:22 +0200
Subject: [PATCH] If there is no executable we don't want to print a part of

View File

@ -1,4 +1,4 @@
From 7e3f0b790e59d0d296ee689b74339dda0490f829 Mon Sep 17 00:00:00 2001
From 66766a7298065ae60819355f2b515fe3fcc248e3 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Thu, 19 Feb 2015 17:45:15 +0100
Subject: [PATCH] Simplication of sepolicy-manpage web functionality.

View File

@ -1,4 +1,4 @@
From 3fa844ec73d6ed98968e876687e45a884e41b71c Mon Sep 17 00:00:00 2001
From 59d6989beb341fb17f87b270e4fc8d55351d3a51 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Fri, 20 Feb 2015 16:42:01 +0100
Subject: [PATCH] We want to remove the trailing newline for

View File

@ -1,4 +1,4 @@
From 374e2a3ade4345887d2fe8bda2f3b41b7d76e78c Mon Sep 17 00:00:00 2001
From 600fda8edf440acc3e5b32a31a044b16d65cbef9 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Fri, 20 Feb 2015 16:42:53 +0100
Subject: [PATCH] Fix title in manpage.py to not contain 'online'.

View File

@ -1,4 +1,4 @@
From bbec5a6e4da0cc3ac839dd343a374c36e3276c36 Mon Sep 17 00:00:00 2001
From b45d202d954bad6cd4e96fe22d35677717e5eff9 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Fri, 14 Feb 2014 12:32:12 -0500
Subject: [PATCH] Don't be verbose if you are not on a tty

View File

@ -1,4 +1,4 @@
From d903f0809b2a8a2e19360e5d42886e78f2b1f244 Mon Sep 17 00:00:00 2001
From 61fcb9e5af82482d79c9e9edacb1a7f30686ee4a Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 27 Feb 2017 17:12:39 +0100
Subject: [PATCH] sepolicy: Drop old interface file_type_is_executable(f) and

View File

@ -1,4 +1,4 @@
From 2a10ed38c8c08618a370b2446929e60457547e72 Mon Sep 17 00:00:00 2001
From 15d2491e3c455f740a20eaf93f2c6a9b89e79d7a Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Tue, 28 Feb 2017 21:29:46 +0100
Subject: [PATCH] sepolicy: Another small optimization for mcs types

View File

@ -1,4 +1,4 @@
From 45771768cd00225bf82fa260e59f55c5a2641b9c Mon Sep 17 00:00:00 2001
From 8e02b757f90827f4e850b732ccea32c2897036a8 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 6 Aug 2018 13:23:00 +0200
Subject: [PATCH] Move po/ translation files into the right sub-directories

View File

@ -1,4 +1,4 @@
From 7e88d2395d39f7a15d812c8d3e4d176a832da7ae Mon Sep 17 00:00:00 2001
From 68d019a8ca73a24d2a01564180cb95dfd10da6fa Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 6 Aug 2018 13:37:07 +0200
Subject: [PATCH] Use correct gettext domains in python/ gui/ sandbox/
@ -250,10 +250,10 @@ index ea05d892bf3b..9a9c2ae9f237 100644
import gettext
kwargs = {}
diff --git a/python/sepolicy/sepolicy/generate.py b/python/sepolicy/sepolicy/generate.py
index 973edb9d6b91..6202e30d69ac 100644
index e8d07e7d65a9..744ee13f692d 100644
--- a/python/sepolicy/sepolicy/generate.py
+++ b/python/sepolicy/sepolicy/generate.py
@@ -49,7 +49,7 @@ import sepolgen.defaults as defaults
@@ -48,7 +48,7 @@ import sepolgen.defaults as defaults
##
## I18N
##

View File

@ -1,4 +1,4 @@
From 51fec6b3c4a2c3de15217be121503fd6829f0c9b Mon Sep 17 00:00:00 2001
From 8384f31cdcf0afd2b13f93f4e8bc42254b4b7928 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 6 Aug 2018 14:23:19 +0200
Subject: [PATCH] Initial .pot files for gui/ python/ sandbox/

View File

@ -1,4 +1,4 @@
From 4582e6315f8107cdea7833732ddcab3568ef4a55 Mon Sep 17 00:00:00 2001
From 7ba0b4502d12f00b9d62f66ce19ce6afffbe078f Mon Sep 17 00:00:00 2001
From: Vit Mojzis <vmojzis@redhat.com>
Date: Wed, 21 Mar 2018 08:51:31 +0100
Subject: [PATCH] policycoreutils/setfiles: Improve description of -d switch

View File

@ -1,4 +1,4 @@
From 3537da12ca15942763bf70a64cbf6f4fd0659154 Mon Sep 17 00:00:00 2001
From f2625885226a65df2b0d7f825bafe462a6454c49 Mon Sep 17 00:00:00 2001
From: Masatake YAMATO <yamato@redhat.com>
Date: Thu, 14 Dec 2017 15:57:58 +0900
Subject: [PATCH] sepolicy-generate: Handle more reserved port types
@ -52,10 +52,10 @@ https://lore.kernel.org/selinux/20150610.190635.1866127952891120915.yamato@redha
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/python/sepolicy/sepolicy/generate.py b/python/sepolicy/sepolicy/generate.py
index 6202e30d69ac..da45f49a06ce 100644
index 744ee13f692d..a6309783e85e 100644
--- a/python/sepolicy/sepolicy/generate.py
+++ b/python/sepolicy/sepolicy/generate.py
@@ -100,7 +100,9 @@ def get_all_ports():
@@ -99,7 +99,9 @@ def get_all_ports():
for p in sepolicy.info(sepolicy.PORT):
if p['type'] == "reserved_port_t" or \
p['type'] == "port_t" or \

View File

@ -1,4 +1,4 @@
From d53fcf1cb3f84a4f125efdd6e6f8162bafef4a34 Mon Sep 17 00:00:00 2001
From 6f510c03e54b0058b74fabae6489099f5369a957 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Thu, 8 Nov 2018 09:20:58 +0100
Subject: [PATCH] semodule-utils: Fix RESOURCE_LEAK coverity scan defects

View File

@ -1,4 +1,4 @@
From 380ea80e85eedd07ed4adfbca96cad20e02c3ef4 Mon Sep 17 00:00:00 2001
From 7afddf20e889731126fda14b2fa713a367d9dd84 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Wed, 18 Jul 2018 09:09:35 +0200
Subject: [PATCH] sandbox: Use matchbox-window-manager instead of openbox

View File

@ -1,4 +1,4 @@
From fe39bba27704da0fbcda0677e41b16976be0dab8 Mon Sep 17 00:00:00 2001
From ddbb8387ff7465f114df1d72c2b7ad64944e52c3 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 3 Dec 2018 14:40:09 +0100
Subject: [PATCH] python: Use ipaddress instead of IPy

View File

@ -1,8 +1,8 @@
%global libauditver 3.0
%global libsepolver 3.0
%global libsemanagever 3.0
%global libselinuxver 3.0
%global sepolgenver 3.0
%global libsepolver 3.0-1
%global libsemanagever 3.0-1
%global libselinuxver 3.0-1
%global sepolgenver 3.0-1
%global generatorsdir %{_prefix}/lib/systemd/system-generators
@ -12,16 +12,16 @@
Summary: SELinux policy core utilities
Name: policycoreutils
Version: 3.0
Release: 0.rc1.1%{?dist}
Release: 1%{?dist}
License: GPLv2
# https://github.com/SELinuxProject/selinux/wiki/Releases
Source0: https://github.com/SELinuxProject/selinux/releases/download/20191031/policycoreutils-3.0-rc1.tar.gz
Source1: https://github.com/SELinuxProject/selinux/releases/download/20191031/selinux-python-3.0-rc1.tar.gz
Source2: https://github.com/SELinuxProject/selinux/releases/download/20191031/selinux-gui-3.0-rc1.tar.gz
Source3: https://github.com/SELinuxProject/selinux/releases/download/20191031/selinux-sandbox-3.0-rc1.tar.gz
Source4: https://github.com/SELinuxProject/selinux/releases/download/20191031/selinux-dbus-3.0-rc1.tar.gz
Source5: https://github.com/SELinuxProject/selinux/releases/download/20191031/semodule-utils-3.0-rc1.tar.gz
Source6: https://github.com/SELinuxProject/selinux/releases/download/20191031/restorecond-3.0-rc1.tar.gz
Source0: https://github.com/SELinuxProject/selinux/releases/download/20191204/policycoreutils-3.0.tar.gz
Source1: https://github.com/SELinuxProject/selinux/releases/download/20191204/selinux-python-3.0.tar.gz
Source2: https://github.com/SELinuxProject/selinux/releases/download/20191204/selinux-gui-3.0.tar.gz
Source3: https://github.com/SELinuxProject/selinux/releases/download/20191204/selinux-sandbox-3.0.tar.gz
Source4: https://github.com/SELinuxProject/selinux/releases/download/20191204/selinux-dbus-3.0.tar.gz
Source5: https://github.com/SELinuxProject/selinux/releases/download/20191204/semodule-utils-3.0.tar.gz
Source6: https://github.com/SELinuxProject/selinux/releases/download/20191204/restorecond-3.0.tar.gz
URL: https://github.com/SELinuxProject/selinux
Source13: system-config-selinux.png
Source14: sepolicy-icons.tgz
@ -35,7 +35,7 @@ Source21: python-po.tgz
Source22: gui-po.tgz
Source23: sandbox-po.tgz
# https://github.com/fedora-selinux/selinux
# $ git format-patch -N 20191031 -- policycoreutils python gui sandbox dbus semodule-utils restorecond
# $ git format-patch -N 20191204 -- policycoreutils python gui sandbox dbus semodule-utils restorecond
# $ for j in [0-9]*.patch; do printf "Patch%s: %s\n" ${j/-*/} $j; done
# Patch list start
Patch0001: 0001-sandbox-add-reset-to-Xephyr-as-it-works-better-with-.patch
@ -100,8 +100,8 @@ to switch roles.
%autosetup -S git -N -T -D -a 6 -n selinux
for i in *; do
git mv $i ${i/-%{version}-rc1/}
git commit -q --allow-empty -a --author 'rpm-build <rpm-build>' -m "$i -> ${i/-%{version}-rc1/}"
git mv $i ${i/-%{version}/}
git commit -q --allow-empty -a --author 'rpm-build <rpm-build>' -m "$i -> ${i/-%{version}/}"
done
for i in selinux-*; do
@ -530,6 +530,9 @@ The policycoreutils-restorecond package contains the restorecond service.
%systemd_postun_with_restart restorecond.service
%changelog
* Fri Dec 6 2019 Petr Lautrbach <plautrba@redhat.com> - 3.0-1
- SELinux userspace 3.0 release
* Wed Sep 4 2019 Petr Lautrbach <plautrba@redhat.com> - 2.9-7
- semanage: Do not use default s0 range in "semanage login -a" (#1312283)

14
sources
View File

@ -1,10 +1,10 @@
SHA512 (policycoreutils-3.0-rc1.tar.gz) = 96cbcb5024dc1eb0037fe41fc14b94faeecee64bc1f4aad6b0a916af9d596f90db09aba87202b476737c25b9f31a5575e0db840d5ba8d5f433185fdd1d4f4e13
SHA512 (restorecond-3.0-rc1.tar.gz) = 170a863cc150a92dc8a3d62e7527f8a13c11753b46524ef572f8fe341f3d5390fe67f576c43547befe4f3de4237897bae76ff3432a2b42ba5f87a17f16109261
SHA512 (selinux-dbus-3.0-rc1.tar.gz) = 0867c70261098f9ccfbc66b6348ba821b62d77c33cc7360795744b076d41e75649c8405b39030e4abc2161f38f8a263b3615331341caca38e9d874dbce5c1685
SHA512 (selinux-gui-3.0-rc1.tar.gz) = 7a73c605b40138e7a17f6cfd17e540f0155cdd05195ef30e838634589992ca42e700d557335977d891d8758e99204681df6d07fe3c3db27b9ca4e0372934d3a8
SHA512 (selinux-python-3.0-rc1.tar.gz) = fc6da30a881be857f1da2e95e095a25371fa67132a7fce6ede143edcd5d19d761b0b410315df48e12a93446e666e5271c1e18e034aec287308b1ae81368c1282
SHA512 (selinux-sandbox-3.0-rc1.tar.gz) = 6ae1fe10b825a0b24b76aa0afe0e2cc13c5d2c55c8c9916129a8b8432244c7d2c95f9cf7214346a42d77931f26c3b4e4fe2924f0dbff1c873d57636803d6fd4b
SHA512 (semodule-utils-3.0-rc1.tar.gz) = 9984dfcbd4d393d2728dc13398b0b4b776e14856620a4e1dc34b09b4173d8b28fed88f7ac3c025e7c65d05cc45e77eb849626d5230b5453ba0aff36b89264efa
SHA512 (policycoreutils-3.0.tar.gz) = d8d25db48c1caef69228e87d7ebb2c0f075e44e4ff6bf18a26af341d948b81375b33945128cd0410ffebc64ca478fd19a207295189c716c95e6a3c586e9f053d
SHA512 (restorecond-3.0.tar.gz) = f75088f72a17f1f7550ef67052202cea1fd9cf1bb1eec0355f4a0641ba25097b289f629df328ee79aec00f8361cbc6df10efc4a5af2f0b67f9922ceaf92aa956
SHA512 (selinux-dbus-3.0.tar.gz) = d74e115bfedfede00776f061de194ab75e87192de67400ece40f069e4a2f98d3afc5d8511e303a4e39e91868c8ef53fa74c675721f3062b71b1e4983906b0672
SHA512 (selinux-gui-3.0.tar.gz) = 7f6be63843fa1493cb18f5306f5429507512ae02590973384a6b601578ed6aa32d1acc66d5eb7e5dc2d055a02132eddfdda8668f847b8303d72b0c8febf9516a
SHA512 (selinux-python-3.0.tar.gz) = 743df60a643477465e4355880c56813ea8539415ea7c9631fb9b7cd7969a37cce572a6a94b785065d92baf9d7b6c753daa5d2f9709df7c9203c7effba46d58f2
SHA512 (selinux-sandbox-3.0.tar.gz) = 96fef5e0d7430b1d7379ed4203a83881b47bd7b4f0393416e526319b9da880d04cb729e81593278e208fa1bf6c639b4d502a8ec58552550450670a1e42751d9a
SHA512 (semodule-utils-3.0.tar.gz) = 004e8f02f7e7e6f016b2b5a1a7720a87409d77d0040f7df830cf73808c9f8e3d87b41a7cea273420909971ce8bcc6540d5a46bd25be8c032b12257b4861e1769
SHA512 (gui-po.tgz) = 8e0855256b825eea422b8e2b82cc0decf66b902c9930840905c5ad5dda7bef3679943a22db62709907d48f8a331d67edc5efed3e2638b53e379959b14077b4ea
SHA512 (policycoreutils-po.tgz) = 66b908f7a167225bebded46f9cf92f42eb194daa2a083d48de43c2a5d33fa42724c5add0a9d029ac9d62c500f6f1c8d3bc138dd598b1fd97e609d7cc7160be72
SHA512 (python-po.tgz) = 7f2a082b77c7b4417d5d3dac35d86dd635635a9c05a80e5f9284d03604e2f2a06ec879fb29b056d1a46d3fc448cd76e6fd25196834c18a161fd6677f2e11b2be