rpms/policycoreutils
7
0
Fork 0
Code Issues Pull Requests Releases Activity
52 Commits 7 Branches 49 Tags 66 MiB
9616c6c3d6
Commit Graph

52 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Petr Lautrbach
9616c6c3d6 Use StandardInput=tty when AUTORELABEL=0 
selinux-autorelabel service can be configured to drop to a shell to allow
administrator to manually relabel a filesystem, see selinux_config(5). In
this case, the service needs to have a tty attached to stdin. Given that
tty should not be attached to the service by default, see
https://bugzilla.redhat.com/show_bug.cgi?id=1634661 , the
selinux-autorelabel-generator.sh will configure the service to attach
tty only if AUTORELABEL=0

Resolves: rhbz#2165508
 2023-02-08 12:00:47 +01:00
Petr Lautrbach
e634de4b77 policycoreutils-3.5-0.rc2.2 
- python/sepolicy: Cache conditional rule queries
Related: rhbz#2145229
 2023-02-08 12:00:37 +01:00
Vit Mojzis
a2173eef83 Update README.translations for use with Weblate 
Related: rhbz#2152806
 2023-01-19 10:46:43 +01:00
Petr Lautrbach
b9115374a7 SELinux userspace 3.5-rc2 release 
Resolves: rhbz#2145229
 2023-01-17 08:27:16 +01:00
Petr Lautrbach
e9a3ac1bce policycoreutils-3.5-0.rc1.2 
rebuild
Related: rhbz#2145229
 2023-01-03 10:46:59 +01:00
Petr Lautrbach
2a48e1b700 Requires: python3-distro 
Related: rhbz#2145229
 2023-01-03 10:42:20 +01:00
Petr Lautrbach
4eb418512d Drop pathfix 
All necessary changes were applied upstream.
Related: rhbz#2145229
 2023-01-03 10:40:45 +01:00
Petr Lautrbach
1e88a7f202 policycoreutils-3.5-0.rc1.1 
- SELinux userspace 3.5-rc1 release
Resolves: rhbz#2145229
 2023-01-02 15:46:21 +01:00
Petr Lautrbach
b04e4b18e3 Drop obsolete information from README.translation 
Related: rhbz#1989840
 2022-11-16 13:15:08 +01:00
Petr Lautrbach
3a737e798e Drop unused files 
Related: rhbz#1989840
 2022-11-16 13:15:03 +01:00
Petr Lautrbach
12ddfb8921 run tests via TMT/FMF 
Related: rhbz#1989840
 2022-11-16 13:14:35 +01:00
Vit Mojzis
50b1a0ab40 policycoreutils-3.4-4 
- Update translations

Resolves: rhbz#2062630
 2022-09-06 22:33:35 +02:00
Petr Lautrbach
8c2b86415b Suppres rpminspect upstream test on selinux-autorelabel* 
Fixes:
    Upstream source file `selinux-autorelabel` changed content
 2022-08-08 14:07:04 +02:00
Petr Lautrbach
cf91e6765e policycoreutils-3.4-3 
- Run autorelabel in parallel by default
  https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel

Resolves: rhbz#2115242
 2022-08-08 12:49:46 +02:00
Petr Lautrbach
0c5ee72257 Run autorelabel in parallel by default 
https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel
Resolves: rhbz#2115242
 2022-08-08 12:45:38 +02:00
Petr Lautrbach
ce9c9c7cb4 policycoreutils-3.4-2 
- gettext: handle unsupported languages properly (#2100378)
Resolves: rhbz#2100378
- semodule: rename --rebuild-if-modules-changed to --refresh
- python: Split "semanage import" into two transactions (#2063353)
Resolves: rhbz#2108174
- selinux-autorelabel: Do not force reboot (#2093133)
Resolves: rhbz#2108183
 2022-07-18 18:34:19 +02:00
Vit Mojzis
665c62cdc7 selinux-autorelabel: Do not force reboot 
Forced reboot ends up NOT triggering normal unit shutdown, but only
sends TERM signal, then KILL later. Some processes such as dmeventd
do not quit on receiving TERM signal (protected), which means they
are killed after a long delay by systemd using the KILL signal.

In case the normal reboot doesn't go through, "reboot.target" will be
triggered after a timeout and send the KILL signal anyway.

Resolves: rhbz#2093133
 2022-07-18 15:10:24 +02:00
Petr Lautrbach
7243ad7d8c SELinux userspace 3.4 release 
Resolves: rhbz#2079286
 2022-05-19 20:25:34 +02:00
Petr Lautrbach
bf83420279 policycoreutils-3.3-5 
- Improve error message when selabel_open fails
Resolves: rhbz#2041975
 2022-02-22 10:40:12 +01:00
Petr Lautrbach
c725778934 Fix output of fixfiles onboot 
See https://lore.kernel.org/selinux/CAFqZXNtBmoVppmhgrxfzuZrQ+oksWeSHH_x7ZgG4Wa6VO05Dsw@mail.gmail.com/

Resolves: rhbz#2050554
 2022-02-19 12:29:12 +01:00
Petr Lautrbach
a69a3b9636 Require libsemanage > 3.3-2 
The semodule command-line option to detect module changes requires
libsemanage-3.3-2 at least.

Resolves: rhbz#2049193
 2022-02-16 09:59:16 +01:00
Petr Lautrbach
8e0f1cd78b policycoreutils-3.3-4 
- semodule: add command-line option to detect module changes
Resolves: rhbz#2049193
 2022-02-15 12:47:31 +01:00
Petr Lautrbach
24b37e0f9f policycoreutils-3.3-3 
- fixfiles: Use parallel relabeling

Resolves: rhbz#2050554
 2022-02-14 14:04:33 +01:00
Petr Lautrbach
8201bb8181 Drop unused patches 
Related: rhbz#2050554
 2022-02-14 11:49:03 +01:00
Petr Lautrbach
da97ea7d41 policycoreutils-3.3-2 
- setfiles/restorecon: support parallel relabeling with -T <N> option
- semodule: add -m | --checksum option
Resolves: rhbz#2026682, rhbz#2026680
 2021-11-29 14:29:27 +01:00
Petr Lautrbach
d32e234813 SELinux userspace 3.3 release 
Resolves: rhbz#2003551
 2021-10-24 17:52:28 +02:00
Petr Lautrbach
e55e8c4b6b SELinux userspace 3.3-rc3 release 
Resolves: rhbz#2003551
 2021-10-24 17:50:52 +02:00
Vit Mojzis
75799a4ed7 policycoreutils-3.3-0.rc2.2 
- Update translations (#2003127)

Resolves: rhbz#2003127
 2021-10-01 10:08:25 +02:00
Petr Lautrbach
bcb4f6c48d SELinux userspace 3.3-rc2 release 
Resolves: rhbz#2003551
 2021-09-30 13:20:14 +02:00
Ondrej Mosnacek
6aff055821 Make p-devel's selinux-policy-devel dep conditional on selinux-policy 
Related: rhbz#2003551
The policycoreutils-devel package is used not only for working with an
installed policy, but also for building the policy from sources. In the
latter case, there is no need to install selinux-policy-devel (and
selinux-policy along with it), so make the dependency conditional on
selinux-policy.

Since policy is often built from source in a mock chroot or a container,
this will avoid the awkward and unnecessary cyclic build dependency of
selinux-policy on itself.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
 2021-09-30 13:20:03 +02:00
Mohan Boddu
832ae77fb2 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags 
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-08-10 00:00:13 +00:00
Petr Lautrbach
0187db596e Drop forgotten ru/ man pages from -restorecond 
It's was a leftover from the rebase before the latest rebase

Fixes:

    Error: Transaction test error:
      file /usr/share/man/ru/man8/restorecon_xattr.8.gz from install of policycoreutils-3.2-4.el9.x86_64 conflicts with file from package      policycoreutils-restorecond-3.2-5.el9.x86_64

Related: rhbz#1938843
 2021-08-03 10:48:09 +02:00
Petr Lautrbach
0ce93abfc4 policycoreutils-3.2-5 
- Use SHA-2 instead of SHA-1 (#1934964)
Resolves: rhbz#1977191

- Fix COPY_PASTE_ERROR (CWE-398)
Resolves: rhbz#1938843
 2021-07-30 14:20:20 +02:00
Petr Lautrbach
bb24785ce9 Fix gating.yaml for rhel-9 product 2021-07-01 13:30:26 +02:00
Petr Lautrbach
e9034b4c9f policycoreutils-3.2-4 
- policycoreutils-dbus requires polkit
- fixfiles: do not exclude /dev and /run in -C mode
- dbus: use GLib.MainLoop

Resolves: rhbz#1949841

Modified-by: Petr Lautrbach <plautrba@redhat.com>
Modified-by: Petr Lautrbach <plautrba@redhat.com>
Modified-by: Petr Lautrbach <plautrba@redhat.com>
 2021-05-13 11:23:52 +02:00
Petr Lautrbach
9e19888d09 Remove the python3-slip-dbus dependency from -dbus subpackage 
Resolves: rhbz#1949841
 2021-04-23 15:54:22 +02:00
Petr Lautrbach
2a9a817f17 policycoreutils-3.2-3.el9 
- Do not use Python slip (#1949841)
Resolves: rhbz#1949841
 2021-04-23 15:32:48 +02:00
Petr Lautrbach
e96ebee816 Do not use Python slip 
Python slip is not actively maintained anymore and it was use just as
polkit proxy. It looks like polkit dbus interface is quite simple to use
it directly via python dbus module.

Resolves: rhbz#1949841
 2021-04-21 17:09:10 +02:00
Mohan Boddu
e538d60828 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-04-16 04:03:16 +00:00
DistroBaker
5ec5b9b7e1 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#65687b17c15ced07f1ebd74e9726c1e1909f5c0d
 2021-03-18 14:02:38 +00:00
DistroBaker
80f421c2e8 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#65687b17c15ced07f1ebd74e9726c1e1909f5c0d
 2021-03-16 10:22:11 +00:00
DistroBaker
6b3ad541a8 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#8c9bb8afaf3b543eaa44b83bef64fcb67ee2e716
 2021-02-19 12:24:30 +00:00
DistroBaker
9304134a27 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#8c9bb8afaf3b543eaa44b83bef64fcb67ee2e716
 2021-02-17 12:28:10 +01:00
DistroBaker
170610ef88 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#b96da6593911f3b75a2849b5cf8c90b3e98c2977
 2021-01-21 22:28:29 +00:00
DistroBaker
dccc589510 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#d56dce0a5d42307320c8fe215cc70acafe72ad7f
 2020-12-15 17:28:56 +00:00
DistroBaker
dba0f0d2c8 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#d56dce0a5d42307320c8fe215cc70acafe72ad7f
 2020-12-04 17:11:24 +01:00
DistroBaker
db34d6e4bf Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#d56dce0a5d42307320c8fe215cc70acafe72ad7f
 2020-11-25 09:56:16 +00:00
DistroBaker
f8e6a6385b Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#c808ccc35cfb563b66b618147b399451acc7747c
 2020-11-24 11:28:16 +00:00
DistroBaker
c2d6194911 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#f052664e787cde48cdf61147856fda640f070d8d
 2020-11-09 10:26:22 +00:00
DistroBaker
4a6ab956fe Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/policycoreutils.git#b47cf5c7c221d52f659303fe41a406239a74d8d3
 2020-11-05 23:53:45 +00:00