rpms/policycoreutils
7
0
Fork 0
Code Issues Pull Requests Releases Activity
72 Commits 8 Branches 68 Tags 63 MiB
c9s
Commit Graph

72 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Petr Lautrbach
400e2f2208 policycoreutils-3.6-9 
- Several sandbox and seunshare security improvements
- https://github.com/SELinuxProject/selinux/security/advisories/GHSA-h4m3-rc99-c7m5

Resolves: RHEL-212364
 2026-08-04 17:21:22 +02:00
Vit Mojzis
4dab9f244f plans/selinux.fmf: fix test filter 
The original filter resulted in 0 matches.

Related: RHEL-141295
 2026-07-22 15:25:29 +02:00
Vit Mojzis
8902b37d79 policycoreutils-3.6-8 
- sepolicy: Fix detection of writeable locations

Resolves: RHEL-141295
 2026-07-17 17:39:02 +02:00
Petr Lautrbach
5219172d69 policycoreutils-3.6-7 
- restorecond.service: Use Type=simple
Resolves: RHEL-142541
 2026-04-07 15:56:34 +02:00
Petr Lautrbach
ba01c23cb6 policycoreutils-3.6-6 
- Improve semanage-fcontext(8) man page
Resolves: RHEL-16319
 2026-02-24 12:04:54 +01:00
Petr Lautrbach
e1c5c1143a Drop baseos-ci gating 
Support for STI and workflow-tomorrow based test executions has been
 discontinued.
 2026-02-04 08:09:27 +01:00
Petr Lautrbach
3737056377 policycoreutils-3.6-5 
- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup

Resolves: RHEL-144055
 2026-02-03 13:55:30 +01:00
Veronika Syncakova
cdbcc69240 policycoreutils-3.6-4 
- semanage: Reset active value when deleting boolean customizations

Resolves: RHEL-126712
 2026-01-15 16:39:39 +01:00
Petr Lautrbach
b04c04698f policycoreutils-3.6-3 
- restorecond: always add '\0' to ut_user
Resolves: RHEL-29175
 2025-04-28 14:30:22 +02:00
Petr Lautrbach
39fb3636a4 fixfiles: drop unnecessary \ line endings 
See https://github.com/koalaman/shellcheck/issues/2769

Fixes:
    $ shellcheck -S error fixfiles

    In fixfiles line 189:
            # These two sorts need to be separate commands \
                                                            ^-- SC1143 (error): This backslash is part of a comment and does not continue the line.

    For more information:
      https://www.shellcheck.net/wiki/SC1143 -- This backslash is part of a comme...

Resolves: RHEL-29059
 2024-06-12 10:51:54 +02:00
Petr Lautrbach
f0c9b84b41 policycoreutils-3.6-2.1 
- semanage: Allow modifying records on "add"
Resolves: RHEL-5170
 2024-02-19 20:51:10 +01:00
Petr Lautrbach
cb35df9d2f policycoreutils-3.6-2 
- semanage: Allow modifying records on "add"
Resolves: RHEL-5170
- semanage: Do not sort local fcontext definitions
Resolves: RHEL-25263
 2024-02-13 16:25:33 +01:00
Petr Lautrbach
a9239d604f SELinux userspace 3.6 release 
Resolves: RHEL-16238, RHEL-15434, RHEL-2254
 2023-12-14 08:37:21 +01:00
Petr Lautrbach
2b615599bb SELinux userspace 3.6-rc1 release 
Resolves: RHEL-16238
 2023-11-13 20:00:52 +01:00
Petr Lautrbach
1db9852ac6 policycoreutils-3.5-3 
- Update translations
  https://translate.fedoraproject.org/projects/selinux/
Resolves: RHEL-15307
 2023-11-02 17:57:56 +01:00
Petr Lautrbach
e09bf843f5 policycoreutils-3.5-2 
- Improve man pages (RHEL-672)
- Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)
 2023-06-27 11:14:09 +02:00
Petr Lautrbach
4050a6c3f7 SELinux userspace 3.5 release 
Resolves: rhbz#2145229
 2023-02-23 17:30:05 +01:00
Petr Lautrbach
1c61bbb09a Fix %changelog chronological order 
Related: rhbz#2145224
 2023-02-14 19:44:59 +01:00
Petr Lautrbach
9eca638f88 SELinux userspace 3.5-rc3 release 
Resolves: rhbz#2145224, rhbz#2152806
 2023-02-14 18:08:57 +01:00
Petr Lautrbach
584de92cc9 policycoreutils-3.5-0.rc2.3 
- Attach tty to selinux-autorelabel.service when AUTORELABEL=0
Resolves: rhbz#2165508
 2023-02-08 12:01:15 +01:00
Petr Lautrbach
9616c6c3d6 Use StandardInput=tty when AUTORELABEL=0 
selinux-autorelabel service can be configured to drop to a shell to allow
administrator to manually relabel a filesystem, see selinux_config(5). In
this case, the service needs to have a tty attached to stdin. Given that
tty should not be attached to the service by default, see
https://bugzilla.redhat.com/show_bug.cgi?id=1634661 , the
selinux-autorelabel-generator.sh will configure the service to attach
tty only if AUTORELABEL=0

Resolves: rhbz#2165508
 2023-02-08 12:00:47 +01:00
Petr Lautrbach
e634de4b77 policycoreutils-3.5-0.rc2.2 
- python/sepolicy: Cache conditional rule queries
Related: rhbz#2145229
 2023-02-08 12:00:37 +01:00
Vit Mojzis
a2173eef83 Update README.translations for use with Weblate 
Related: rhbz#2152806
 2023-01-19 10:46:43 +01:00
Petr Lautrbach
b9115374a7 SELinux userspace 3.5-rc2 release 
Resolves: rhbz#2145229
 2023-01-17 08:27:16 +01:00
Petr Lautrbach
e9a3ac1bce policycoreutils-3.5-0.rc1.2 
rebuild
Related: rhbz#2145229
 2023-01-03 10:46:59 +01:00
Petr Lautrbach
2a48e1b700 Requires: python3-distro 
Related: rhbz#2145229
 2023-01-03 10:42:20 +01:00
Petr Lautrbach
4eb418512d Drop pathfix 
All necessary changes were applied upstream.
Related: rhbz#2145229
 2023-01-03 10:40:45 +01:00
Petr Lautrbach
1e88a7f202 policycoreutils-3.5-0.rc1.1 
- SELinux userspace 3.5-rc1 release
Resolves: rhbz#2145229
 2023-01-02 15:46:21 +01:00
Petr Lautrbach
b04e4b18e3 Drop obsolete information from README.translation 
Related: rhbz#1989840
 2022-11-16 13:15:08 +01:00
Petr Lautrbach
3a737e798e Drop unused files 
Related: rhbz#1989840
 2022-11-16 13:15:03 +01:00
Petr Lautrbach
12ddfb8921 run tests via TMT/FMF 
Related: rhbz#1989840
 2022-11-16 13:14:35 +01:00
Vit Mojzis
50b1a0ab40 policycoreutils-3.4-4 
- Update translations

Resolves: rhbz#2062630
 2022-09-06 22:33:35 +02:00
Petr Lautrbach
8c2b86415b Suppres rpminspect upstream test on selinux-autorelabel* 
Fixes:
    Upstream source file `selinux-autorelabel` changed content
 2022-08-08 14:07:04 +02:00
Petr Lautrbach
cf91e6765e policycoreutils-3.4-3 
- Run autorelabel in parallel by default
  https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel

Resolves: rhbz#2115242
 2022-08-08 12:49:46 +02:00
Petr Lautrbach
0c5ee72257 Run autorelabel in parallel by default 
https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel
Resolves: rhbz#2115242
 2022-08-08 12:45:38 +02:00
Petr Lautrbach
ce9c9c7cb4 policycoreutils-3.4-2 
- gettext: handle unsupported languages properly (#2100378)
Resolves: rhbz#2100378
- semodule: rename --rebuild-if-modules-changed to --refresh
- python: Split "semanage import" into two transactions (#2063353)
Resolves: rhbz#2108174
- selinux-autorelabel: Do not force reboot (#2093133)
Resolves: rhbz#2108183
 2022-07-18 18:34:19 +02:00
Vit Mojzis
665c62cdc7 selinux-autorelabel: Do not force reboot 
Forced reboot ends up NOT triggering normal unit shutdown, but only
sends TERM signal, then KILL later. Some processes such as dmeventd
do not quit on receiving TERM signal (protected), which means they
are killed after a long delay by systemd using the KILL signal.

In case the normal reboot doesn't go through, "reboot.target" will be
triggered after a timeout and send the KILL signal anyway.

Resolves: rhbz#2093133
 2022-07-18 15:10:24 +02:00
Petr Lautrbach
7243ad7d8c SELinux userspace 3.4 release 
Resolves: rhbz#2079286
 2022-05-19 20:25:34 +02:00
Petr Lautrbach
bf83420279 policycoreutils-3.3-5 
- Improve error message when selabel_open fails
Resolves: rhbz#2041975
 2022-02-22 10:40:12 +01:00
Petr Lautrbach
c725778934 Fix output of fixfiles onboot 
See https://lore.kernel.org/selinux/CAFqZXNtBmoVppmhgrxfzuZrQ+oksWeSHH_x7ZgG4Wa6VO05Dsw@mail.gmail.com/

Resolves: rhbz#2050554
 2022-02-19 12:29:12 +01:00
Petr Lautrbach
a69a3b9636 Require libsemanage > 3.3-2 
The semodule command-line option to detect module changes requires
libsemanage-3.3-2 at least.

Resolves: rhbz#2049193
 2022-02-16 09:59:16 +01:00
Petr Lautrbach
8e0f1cd78b policycoreutils-3.3-4 
- semodule: add command-line option to detect module changes
Resolves: rhbz#2049193
 2022-02-15 12:47:31 +01:00
Petr Lautrbach
24b37e0f9f policycoreutils-3.3-3 
- fixfiles: Use parallel relabeling

Resolves: rhbz#2050554
 2022-02-14 14:04:33 +01:00
Petr Lautrbach
8201bb8181 Drop unused patches 
Related: rhbz#2050554
 2022-02-14 11:49:03 +01:00
Petr Lautrbach
da97ea7d41 policycoreutils-3.3-2 
- setfiles/restorecon: support parallel relabeling with -T <N> option
- semodule: add -m | --checksum option
Resolves: rhbz#2026682, rhbz#2026680
 2021-11-29 14:29:27 +01:00
Petr Lautrbach
d32e234813 SELinux userspace 3.3 release 
Resolves: rhbz#2003551
 2021-10-24 17:52:28 +02:00
Petr Lautrbach
e55e8c4b6b SELinux userspace 3.3-rc3 release 
Resolves: rhbz#2003551
 2021-10-24 17:50:52 +02:00
Vit Mojzis
75799a4ed7 policycoreutils-3.3-0.rc2.2 
- Update translations (#2003127)

Resolves: rhbz#2003127
 2021-10-01 10:08:25 +02:00
Petr Lautrbach
bcb4f6c48d SELinux userspace 3.3-rc2 release 
Resolves: rhbz#2003551
 2021-09-30 13:20:14 +02:00
Ondrej Mosnacek
6aff055821 Make p-devel's selinux-policy-devel dep conditional on selinux-policy 
Related: rhbz#2003551
The policycoreutils-devel package is used not only for working with an
installed policy, but also for building the policy from sources. In the
latter case, there is no need to install selinux-policy-devel (and
selinux-policy along with it), so make the dependency conditional on
selinux-policy.

Since policy is often built from source in a mock chroot or a container,
this will avoid the awkward and unnecessary cyclic build dependency of
selinux-policy on itself.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
 2021-09-30 13:20:03 +02:00