File policycoreutils.changes of Package policycoreutils.3861
-------------------------------------------------------------------
Mon Dec 19 07:25:47 UTC 2016 - jsegitz@novell.com
- Added CVE-2016-7545_sandbox_escape.patch to fix CVE-2016-7545, bsc#1000998
Sandboxed session could have escaped to the parent session
-------------------------------------------------------------------
Mon Sep 8 08:04:51 UTC 2014 - jsegitz@suse.com
- removed execute permission from systemd unit file
-------------------------------------------------------------------
Sun May 18 00:33:58 UTC 2014 - crrodriguez@opensuse.org
- Version 2.3
sepolgen: Add back attributes flag to fix exception crash from Dan Walsh.
(drop policycoreutils-sepolgen_missing_attributes.patch)
* Add -P semodule option to man page from Dan Walsh.
* selinux_current_policy_path will return none on a disabled SELinux system
* Add new icons for sepolicy gui from Dan Walsh.
* Only return writeable files that are enabled from Dan Walsh.
* Add domain to short list of domains, when -t and -d from Dan Walsh.
* Fix up desktop files to match current standards from Dan Walsh.
* Add support to return sensitivities and categories for python from Dan Walsh.
* Cleanup whitespace from Dan Walsh.
* Add message to tell user to install sandbox policy from Dan Walsh.
* Add systemd unit file for mcstrans from Laurent Bigonville.
* Improve restorecond systemd unit file from Laurent Bigonville.
* Minor man pages improvements from Laurent Bigonville.
* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.
-------------------------------------------------------------------
Fri Dec 13 14:13:32 UTC 2013 - vcizek@suse.com
- sepolgen: add back attributes
* fixes build of selinux-policy
* policycoreutils-sepolgen_missing_attributes.patch
-------------------------------------------------------------------
Mon Dec 9 11:20:57 UTC 2013 - vcizek@suse.com
- fix issues which prevented accepting to Factory
* mention the dropped patches (merged upstream):
- policycoreutils-rhat.patch
- policycoreutils-sepolgen.patch
-------------------------------------------------------------------
Thu Oct 31 14:48:31 UTC 2013 - p.drouand@gmail.com
- update to version 2.2
* Properly build the swig exception file
* Fix man pages
* Support overriding PATH and INITDIR in Makefile
* Fix LDFLAGS usage
* Fix init_policy warning
* Fix semanage logging
* Open newrole stdin as read/write
* Fix sepolicy transition
* Support overriding CFLAGS
* Create correct man directory for run_init
* restorecon GLOB_BRACE change
* Extend audit2why to report additional constraint information.
* Catch IOError errors within audit2allow
* semanage export/import fixes
* Improve setfiles progress reporting
* Document setfiles -o option in usage
* Change setfiles to always return -1 on failure
* Improve setsebool error r eporting
* Major overhaul of gui
* Fix sepolicy handling of non-MLS policy
* Support returning type aliases
* Add sepolicy tests
* Add org.selinux.config.policy
* Improve range and user input checking by semanage
* Prevent source or target arguments that end with / for substitutions
* Allow use of <<none>> for semanage fcontext
* Report customized user levels
* Support deleteall for restoring disabled modules
* Improve semanage error reporting
* Only list disabled modules for module locallist
* Fix logging
* Define new constants for file type character codes
* Improve bash completions
* Convert semanage to argparse
* Add semanage tests
* Split semanage man pages
* Move bash completion scripts
* Replace genhomedircon script with a link to semodule
* Fix fixfiles
* Add support for systemd service for restorecon
* Spelling corrections
* Improve sandbox support for home dir symlinks and file caps
* Switch sandbox to openbox window manager
* Coalesce audit2why and audit2allow
* Change audit2allow to append to output file
* Update translations
* Change audit2why to use selinux_current_policy_path
- Update sepolgen to version 1.2
* Return additional constraint information.
* Fix bug in calls to attributes
* Add support for filename transitions
* Fix sepolgen tests
- Remove restorecond.service; use upstream service file
- Don't provide support for sysvinit and systemd on a same system
Use either one or the other
-------------------------------------------------------------------
Thu Jun 27 14:51:08 UTC 2013 - vcizek@suse.com
- change the source url to the official release tarballs
-------------------------------------------------------------------
Wed Apr 3 10:06:06 UTC 2013 - vcizek@suse.com
- fixed source url
- removed old tarball
-------------------------------------------------------------------
Fri Mar 29 13:13:19 UTC 2013 - vcizek@suse.com
- update to 2.1.14
* setfiles: estimate percent progress
* load_policy: make link at the destination directory
* Rebuild polgen.glade with glade-3
* sepolicy: new command to unite small utilities
* sepolicy: Update Makefiles and po files
* sandbox: use sepolicy to look for sandbox_t
* gui: switch to use sepolicy
* gui: sepolgen: use sepolicy to generate
* semanage: use sepolicy for boolean dictionary
* add po file configuration information
* po: stop running update-po on all
* semanage: seobject verify policy types before allowing you to assign them.
* gui: Start using Popen, instead of os.spawnl
* sandbox: Copy /var/tmp to /tmp as they are the same inside
* qualifier to shred content
* semanage: Fix handling of boolean_sub names when using the -F flag
* semanage: man: roles instead of role
* gui: system-config-selinux: Catch no DISPLAY= error
* setfiles: print error if no default label found
* semanage: list logins file entries in semanage login -l
* semanage: good error message is sepolgen python module missing
* gui: system-config-selinux: do not use lokkit
* secon: add support for setrans color information in prompt output
* restorecond: remove /etc/mtab from default list
* gui: If you are not able to read enforcemode set it to False
* genhomedircon: regenerate genhomedircon more often
* restorecond: Add /etc/udpatedb.conf to restorecond.conf
* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
* fixfiles: relabel only after specific date
* po: update translations
* sandbox: seunshare: do not reassign realloc value
* seunshare: do checking on setfsuid
* sestatus: rewrite to shut up coverity
- removed policycoreutils-glibc217.patch (upstream fix)
- added patches:
* policycoreutils-rhat.patch
* policycoreutils-sepolgen.patch
* loadpolicy_path.patch
-------------------------------------------------------------------
Wed Jan 30 12:10:23 UTC 2013 - vcizek@suse.com
- update to 2.1.13
- drop policycoreutils-po.patch.bz2 (updated upstream)
- drop policycoreutils-gui.patch.bz2 (added to upstream)
- drop sandbox init scripts (shouldn't be needed anymore)
- numerous other changes
-------------------------------------------------------------------
Tue Dec 11 15:11:12 UTC 2012 - vcizek@suse.com
- added service unit for restorecond
-------------------------------------------------------------------
Wed Dec 5 13:41:33 UTC 2012 - vcizek@suse.com
- semanage needs python-xml and python-ipy to run
-------------------------------------------------------------------
Sat Nov 17 06:58:05 UTC 2012 - aj@suse.de
- Fix compilation with glibc 2.17 (add patch policycoreutils-glibc217.patch
extracted from Fedora)
-------------------------------------------------------------------
Tue Aug 7 15:30:58 UTC 2012 - meissner@suse.com
- updated policycoreutils to 2.1.10
- adapated patches
- updated sepolgen to 1.1.5
-------------------------------------------------------------------
Tue Feb 14 09:57:15 UTC 2012 - mvyskocil@suse.cz
- fix seceral rpmlint errors and warnings
* use /var/adm/fillup-template for sandbox
* don't use /var/lock/subsys in any of init script
* use set_permissions macro and add correct Requires(pre)
* fix the languages to new -lang package
* fix policycoreutils-sandbox Group
* remove runlevel 4 from inint scripts
-------------------------------------------------------------------
Mon Feb 13 10:53:53 UTC 2012 - coolo@suse.com
- patch license to follow spdx.org standard
-------------------------------------------------------------------
Mon Mar 14 15:16:51 UTC 2011 - prusnak@opensuse.org
- updated to 2.0.85
* changes too numerous to list
-------------------------------------------------------------------
Fri Feb 4 00:09:42 UTC 2011 - toddrme2178@gmail.com
- fix a typo in the package group
-------------------------------------------------------------------
Fri Jun 4 13:19:27 UTC 2010 - prusnak@opensuse.org
- remove usermode-gtk from Requires of -gui subpackage
-------------------------------------------------------------------
Fri May 7 14:01:05 CEST 2010 - meissner@suse.de
- remove incorrect and unnecessary rpmlintrc.
-------------------------------------------------------------------
Mon Mar 22 15:47:14 UTC 2010 - prusnak@suse.cz
- fix build by moving _GNU_SOURCE define (gnusource.patch), thx darix
-------------------------------------------------------------------
Thu Feb 25 15:28:18 UTC 2010 - prusnak@suse.cz
- updated to 2.0.79
* changes too numerous to list
-------------------------------------------------------------------
Wed Jul 15 13:31:00 CEST 2009 - prusnak@suse.cz
- disable Requires usermode-gtk
-------------------------------------------------------------------
Fri Jun 19 13:42:09 CEST 2009 - prusnak@suse.cz
- added libsepol-static-devel to BuildRequires
-------------------------------------------------------------------
Wed May 27 14:24:47 CEST 2009 - prusnak@suse.cz
- updated to 2.0.62
* Add btrfs to fixfiles from Dan Walsh.
* Remove restorecond error for matching globs with multiple hard links
and fix some error messages from Dan Walsh.
* Make removing a non-existant module a warning rather than an error
from Dan Walsh.
* Man page fixes from Dan Walsh.
-------------------------------------------------------------------
Wed Feb 11 01:09:12 CET 2009 - ro@suse.de
- use sr@latin instead of sr@Latn
-------------------------------------------------------------------
Wed Jan 14 14:12:53 CET 2009 - prusnak@suse.cz
- updated to 2.0.61
* semanage: use semanage_mls_enabled() from Stephen Smalley
* fix error checking in restorecond, for inotify_add_watch
* change md5 to hashlib.md5 in sepolgen
* fix Japanese translations
* fix audit2allow man page
* don't error out when removing a non existing module
* chcat: cut categories at arbitrary point (25) from Dan Walsh
* semodule: use new interfaces in libsemanage for compressed
files from Dan Walsh
* audit2allow: string changes for usage
-------------------------------------------------------------------
Mon Dec 1 11:23:02 CET 2008 - prusnak@suse.cz
- updated to 2.0.59
* Fix text in newrole
* Fix revertbutton on booleans page in system-config-selinux
* Fix system-config-selinux booleanspage throwing and exception
* Allow addition of local modifications of fcontext policy
* Handle selinux disabled correctly
* Handle manipulation of fcontext file correctly
* Fix traceback in audit2why
-------------------------------------------------------------------
Mon Nov 10 16:51:16 CET 2008 - ro@suse.de
- package "newrole" with permissions matching
"secure" permissions mode
-------------------------------------------------------------------
Fri Nov 7 02:44:25 CET 2008 - ro@suse.de
- buildfix: prevent regeneration of policycoreutils.pot
-------------------------------------------------------------------
Fri Oct 31 15:57:57 CET 2008 - prusnak@suse.cz
- use permissions for newrole
-------------------------------------------------------------------
Mon Oct 20 11:48:40 CEST 2008 - prusnak@suse.cz
- updated to 2.0.57
* Update po files from Dan Walsh.
- updated to 2.0.56
* fixfiles will now remove all files in /tmp and will check for
unlabeled_t in /tmp and /var/tmp from Dan Walsh.
* add glob support to restorecond from Dan Walsh.
* allow semanage to handle multi-line commands in a single transaction
from Dan Walsh.
-------------------------------------------------------------------
Mon Sep 8 14:18:48 CEST 2008 - prusnak@suse.cz
- fix scriptlets
-------------------------------------------------------------------
Tue Sep 2 12:25:39 CEST 2008 - prusnak@suse.cz
- updated to 2.0.55
* Merged semanage node support from Christian Kuester.
- updated to 2.0.54
* Add support for boolean files and group support for seusers from Dan Walsh.
* Ensure that setfiles -p output is newline terminated from Russell Coker.
- updated to 2.0.53
* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.
- updated sepolgen to 1.0.13
* Only append s0 suffix if MLS is enabled from Karl MacMillan.
- added missing preun/post/postun scriptlets
-------------------------------------------------------------------
Mon Aug 4 01:00:45 CEST 2008 - ro@suse.de
- add directory to filelist to fix build
-------------------------------------------------------------------
Tue Jul 15 18:11:09 CEST 2008 - prusnak@suse.cz
- initial version 2.0.52
* based on Fedora package by Dan Walsh <dwalsh@redhat.com>
