Changelog for
checkpolicy-debuginfo-1.33.1-6.el5.i386.rpm :
Mon Nov 9 23:00:00 2009 Dan Walsh
- 1.33.1-6
- Fix checkpolicy man page to remove -m
Resolves: #533790
Sat Oct 17 00:00:00 2009 Dan Walsh - 1.33.1-5
- Add support for \"handle_unknown\"
Resolves: #531228
Thu Nov 15 23:00:00 2007 Josef Kubin - 1.33.1-4
- Applied checkpolicy-rhat.patch
Resolves: #236029
Wed Jul 11 00:00:00 2007 Dan Walsh - 1.33.1-3
- Fix man pages
Resolves: #236029
Tue Nov 28 23:00:00 2006 Dan Walsh - 1.33.1-2
- Rebuild for new libraries
Resolves: #213339
Tue Nov 14 23:00:00 2006 Dan Walsh - 1.33.1-1
- Latest update from NSA
* Collapse user identifiers and identifiers together.
Wed Oct 18 00:00:00 2006 Dan Walsh - 1.32-1
- Latest update from NSA
* Updated version for release.
Fri Sep 29 00:00:00 2006 Dan Walsh - 1.30.12-1
- Latest update from NSA
* Merged user and range_transition support for modules from
Darrel Goeddel
Thu Sep 7 00:00:00 2006 Dan Walsh - 1.30.11-1
- Latest update from NSA
* merged range_transition enhancements and user module format
changes from Darrel Goeddel
* Merged symtab datum patch from Karl MacMillan.
Thu Jul 13 00:00:00 2006 Jesse Keating - 1.30.9-1.1
- rebuild
Wed Jul 5 00:00:00 2006 Dan Walsh - 1.30.8-1
- Latest upgrade from NSA
* Lindent.
* Merged patch to remove TE rule conflict checking from the parser
from Joshua Brindle. This can only be done properly by the
expander.
* Merged patch to make checkpolicy/checkmodule handling of
duplicate/conflicting TE rules the same as the expander
from Joshua Brindle.
* Merged optionals in base take 2 patch set from Joshua Brindle.
Wed May 24 00:00:00 2006 Dan Walsh - 1.30.5-1
- Latest upgrade from NSA
* Merged compiler cleanup patch from Karl MacMillan.
* Merged fix warnings patch from Karl MacMillan.
Thu Apr 6 00:00:00 2006 Dan Walsh - 1.30.4-1
- Latest upgrade from NSA
* Changed require_class to reject permissions that have not been
declared if building a base module.
Wed Mar 29 00:00:00 2006 Dan Walsh - 1.30.3-1
- Latest upgrade from NSA
* Fixed checkmodule to call link_modules prior to expand_module
to handle optionals.
* Fixed require_class to avoid shadowing permissions already defined
in an inherited common definition.
Tue Mar 28 00:00:00 2006 Dan Walsh - 1.30.1-2
- Rebuild with new libsepol
Thu Mar 23 23:00:00 2006 Dan Walsh - 1.30.1-1
- Latest upgrade from NSA
* Moved processing of role and user require statements to 2nd pass.
Fri Mar 17 23:00:00 2006 Dan Walsh - 1.30-1
- Latest upgrade from NSA
* Updated version for release.
* Fixed bug in role dominance (define_role_dom).
Fri Feb 17 23:00:00 2006 Dan Walsh - 1.29.4-1
- Latest upgrade from NSA
* Added a check for failure to declare each sensitivity in
a level definition.
* Changed to clone level data for aliased sensitivities to
avoid double free upon sens_destroy. Bug reported by Kevin
Carr of Tresys Technology.
Mon Feb 13 23:00:00 2006 Dan Walsh - 1.29.2-1
- Latest upgrade from NSA
* Merged optionals in base patch from Joshua Brindle.
Mon Feb 13 23:00:00 2006 Dan Walsh - 1.29.1-1.2
- Need to build againi
Fri Feb 10 23:00:00 2006 Jesse Keating - 1.29.1-1.1
- bump again for double-long bug on ppc(64)
Tue Feb 7 23:00:00 2006 Dan Walsh 1.29.1-1
- Latest upgrade from NSA
* Merged sepol_av_to_string patch from Joshua Brindle.
Tue Feb 7 23:00:00 2006 Jesse Keating - 1.28-5.1
- rebuilt for new gcc4.1 snapshot and glibc changes
Fri Jan 13 23:00:00 2006 Dan Walsh 1.28-5
- Rebuild to get latest libsepol
Fri Jan 13 23:00:00 2006 Dan Walsh 1.28-5
- Rebuild to get latest libsepol
Thu Jan 5 23:00:00 2006 Dan Walsh 1.28-4
- Rebuild to get latest libsepol
Wed Jan 4 23:00:00 2006 Dan Walsh 1.28-3
- Rebuild to get latest libsepol
Fri Dec 16 23:00:00 2005 Dan Walsh 1.28-2
- Rebuild to get latest libsepol
Fri Dec 9 23:00:00 2005 Jesse Keating
- rebuilt
Fri Dec 9 23:00:00 2005 Dan Walsh 1.28-1
- Latest upgrade from NSA
Sun Dec 4 23:00:00 2005 Dan Walsh 1.27.20-1
- Latest upgrade from NSA
* Merged checkmodule man page from Dan Walsh, and edited it.
Thu Dec 1 23:00:00 2005 Dan Walsh 1.27.19-1
- Latest upgrade from NSA
* Added error checking of all ebitmap_set_bit calls for out of
memory conditions.
* Merged removal of compatibility handling of netlink classes
(requirement that policies with newer versions include the
netlink class definitions, remapping of fine-grained netlink
classes in newer source policies to single netlink class when
generating older policies) from George Coker.
Tue Nov 8 23:00:00 2005 Dan Walsh 1.27.17-7
- Rebuild to get latest libsepol
Wed Oct 26 00:00:00 2005 Dan Walsh 1.27.17-1
- Latest upgrade from NSA
* Merged dismod fix from Joshua Brindle.
Fri Oct 21 00:00:00 2005 Dan Walsh 1.27.16-1
- Latest upgrade from NSA
* Removed obsolete cond_check_type_rules() function and call and
cond_optimize_lists() call from checkpolicy.c; these are handled
during parsing and expansion now.
* Updated calls to expand_module for interface change.
* Changed checkmodule to verify that expand_module succeeds
when building base modules.
* Merged module compiler fixes from Joshua Brindle.
* Removed direct calls to hierarchy_check_constraints() and
check_assertions() from checkpolicy since they are now called
internally by expand_module().
Wed Oct 19 00:00:00 2005 Dan Walsh 1.27.11-1
- Latest upgrade from NSA
* Updated for changes to sepol policydb_index_others interface.
Wed Oct 19 00:00:00 2005 Dan Walsh 1.27.10-1
- Latest upgrade from NSA
* Updated for changes to sepol expand_module and link_modules interfaces.
Sun Oct 16 00:00:00 2005 Dan Walsh 1.27.9-2
- Rebuild to get latest libsepol
Sat Oct 15 00:00:00 2005 Dan Walsh 1.27.9-1
- Latest upgrade from NSA
* Merged support for require blocks inside conditionals from
Joshua Brindle (Tresys).
Thu Oct 13 00:00:00 2005 Karsten Hopp 1.27.8-2
- add buildrequirement for libselinux-devel for dispol
Tue Oct 11 00:00:00 2005 Dan Walsh 1.27.8-1
- Latest upgrade from NSA
* Updated for changes to libsepol.
Sat Oct 8 00:00:00 2005 Dan Walsh 1.27.7-2
- Rebuild to get latest libsepol
Fri Oct 7 00:00:00 2005 Dan Walsh 1.27.7-1
- Latest upgrade from NSA
* Merged several bug fixes from Joshua Brindle (Tresys).
Wed Oct 5 00:00:00 2005 Dan Walsh 1.27.6-1
- Latest upgrade from NSA
* Merged MLS in modules patch from Joshua Brindle (Tresys).
Tue Oct 4 00:00:00 2005 Dan Walsh 1.27.5-2
- Rebuild to get latest libsepol
Thu Sep 29 00:00:00 2005 Dan Walsh 1.27.5-1
- Latest upgrade from NSA
* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).
Wed Sep 28 00:00:00 2005 Dan Walsh 1.27.4-1
- Latest upgrade from NSA
* Merged bugfix for dup role transition error messages from
Karl MacMillan (Tresys).
Sat Sep 24 00:00:00 2005 Dan Walsh 1.27.3-1
- Latest upgrade from NSA
* Merged policyver/modulever patches from Joshua Brindle (Tresys).
Thu Sep 22 00:00:00 2005 Dan Walsh 1.27.2-2
- Rebuild to get latest libsepol
Thu Sep 22 00:00:00 2005 Dan Walsh 1.27.2-1
- Latest upgrade from NSA
* Fixed parse_categories handling of undefined category.
Wed Sep 21 00:00:00 2005 Dan Walsh 1.27.1-2
- Rebuild to get latest libsepol
Sun Sep 18 00:00:00 2005 Dan Walsh 1.27.1-1
- Latest upgrade from NSA
* Merged bug fix for role dominance handling from Darrel Goeddel (TCS).
Thu Sep 15 00:00:00 2005 Dan Walsh 1.26-2
- Rebuild to get latest libsepol
Tue Sep 13 00:00:00 2005 Dan Walsh 1.26-1
- Latest upgrade from NSA
* Updated version for release.
- Rebuild to get latest libsepol
Fri Sep 2 00:00:00 2005 Dan Walsh 1.25.12-3
- Rebuild to get latest libsepol
Tue Aug 30 00:00:00 2005 Dan Walsh 1.25.12-2
- Rebuild to get latest libsepol
Tue Aug 23 00:00:00 2005 Dan Walsh 1.25.12-1
- Update to NSA Release
* Fixed handling of validatetrans constraint expressions.
Bug reported by Dan Walsh for checkpolicy -M.
Tue Aug 23 00:00:00 2005 Dan Walsh 1.25.11-2
- Fix mls crash
Sat Aug 20 00:00:00 2005 Dan Walsh 1.25.11-1
- Update to NSA Release
* Merged use-after-free fix from Serge Hallyn (IBM).
Bug found by Coverity.
Mon Aug 15 00:00:00 2005 Dan Walsh 1.25.10-1
- Update to NSA Release
* Fixed further memory leaks found by valgrind.
* Changed checkpolicy to destroy the policydbs prior to exit
to allow leak detection.
* Fixed several memory leaks found by valgrind.
Mon Aug 15 00:00:00 2005 Dan Walsh 1.25.8-3
- Rebuild to get latest libsepol changes
Sun Aug 14 00:00:00 2005 Dan Walsh 1.25.8-2
- Rebuild to get latest libsepol changes
Fri Aug 12 00:00:00 2005 Dan Walsh 1.25.8-1
- Update to NSA Release
* Updated checkpolicy and dispol for the new avtab format.
Converted users of ebitmaps to new inline operators.
Note: The binary policy format version has been incremented to
version 20 as a result of these changes. To build a policy
for a kernel that does not yet include these changes, use
the -c 19 option to checkpolicy.
* Merged patch to prohibit use of \"self\" as a type name from Jason Tang (Tresys).
* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).
Thu Aug 11 00:00:00 2005 Dan Walsh 1.25.5-1
- Update to NSA Release
* Fixed call to hierarchy checking code to pass the right policydb.
* Merged patch to update dismod for the relocation of the
module read/write code from libsemanage to libsepol, and
to enable build of test subdirectory from Jason Tang (Tresys).
Fri Jul 29 00:00:00 2005 Dan Walsh 1.25.3-1
- Update to NSA Release
* Merged hierarchy check fix from Joshua Brindle (Tresys).
Fri Jul 8 00:00:00 2005 Dan Walsh 1.25.2-1
- Update to NSA Release
* Merged loadable module support from Tresys Technology.
* Merged patch to prohibit the use of
* and ~ in type sets
(other than in neverallow statements) and in role sets
from Joshua Brindle (Tresys).
* Updated version for release.
Sat May 21 00:00:00 2005 Dan Walsh 1.23-4-1
- Update to NSA Release
* Merged cleanup patch from Dan Walsh.
Fri May 20 00:00:00 2005 Dan Walsh 1.23-3-1
- Update to NSA Release
* Added sepol_ prefix to Flask types to avoid namespace
collision with libselinux.
Sun May 8 00:00:00 2005 Dan Walsh 1.23-2-1
- Update to NSA Release
* Merged identifier fix from Joshua Brindle (Tresys).
Fri Apr 15 00:00:00 2005 Dan Walsh 1.23,1-1
* Merged hierarchical type/role patch from Tresys Technology.
* Merged MLS fixes from Darrel Goeddel of TCS.
Thu Mar 10 23:00:00 2005 Dan Walsh 1.22-1
- Update to NSA Release
Tue Mar 1 23:00:00 2005 Dan Walsh 1.21.4-2
- Rebuild for FC4
Thu Feb 17 23:00:00 2005 Dan Walsh 1.21.4-1
* Merged define_user() cleanup patch from Darrel Goeddel (TCS).
* Moved genpolusers utility to libsepol.
* Merged range_transition support from Darrel Goeddel (TCS).
Thu Feb 10 23:00:00 2005 Dan Walsh 1.21.2-1
- Latest from NSA
* Changed relabel Makefile target to use restorecon.
Mon Feb 7 23:00:00 2005 Dan Walsh 1.21.1-1
- Latest from NSA
* Merged enhanced MLS support from Darrel Goeddel (TCS).
Fri Jan 7 23:00:00 2005 Dan Walsh 1.20.1-1
- Update for version increase at NSA
Mon Dec 20 23:00:00 2004 Dan Walsh 1.19.2-1
- Latest from NSA
* Merged typeattribute statement patch from Darrel Goeddel of TCS.
* Changed genpolusers to handle multiple user config files.
* Merged nodecon ordering patch from Chad Hanson of TCS.
Thu Nov 11 23:00:00 2004 Dan Walsh 1.19.1-1
- Latest from NSA
* Merged nodecon ordering patch from Chad Hanson of TCS.
Thu Nov 4 23:00:00 2004 Dan Walsh 1.18.1-1
- Latest from NSA
* MLS build fix.
Sun Sep 5 00:00:00 2004 Dan Walsh 1.17.5-1
- Latest from NSA
* Fixed Makefile dependencies (Chris PeBenito).
Sun Sep 5 00:00:00 2004 Dan Walsh 1.17.4-1
- Latest from NSA
* Fixed Makefile dependencies (Chris PeBenito).
Sun Sep 5 00:00:00 2004 Dan Walsh 1.17.3-1
- Latest from NSA
* Merged fix for role dominance ordering issue from Chad Hanson of TCS.
Tue Aug 31 00:00:00 2004 Dan Walsh 1.17.2-1
- Latest from NSA
Fri Aug 27 00:00:00 2004 Dan Walsh 1.16.3-1
- Fix NSA package to not include y.tab files.
Wed Aug 25 00:00:00 2004 Dan Walsh 1.16.2-1
- Latest from NSA
- Allow port ranges to overlap
Mon Aug 23 00:00:00 2004 Dan Walsh 1.16.1-1
- Latest from NSA
Tue Aug 17 00:00:00 2004 Dan Walsh 1.15.6-1
- Latest from NSA
Sat Aug 14 00:00:00 2004 Dan Walsh 1.15.5-1
- Latest from NSA
Thu Aug 12 00:00:00 2004 Dan Walsh 1.15.4-1
- Latest from NSA
Mon Aug 9 00:00:00 2004 Dan Walsh 1.15.3-1
- Latest from NSA
Thu Aug 5 00:00:00 2004 Dan Walsh 1.15.2-1
- Latest from NSA
Sun Aug 1 00:00:00 2004 Dan Walsh 1.15.1-1
- Latest from NSA
Wed Jul 28 00:00:00 2004 Dan Walsh 1.14.2-1
- Latest from NSA
Thu Jul 1 00:00:00 2004 Dan Walsh 1.14.1-1
- Latest from NSA
Sat Jun 19 00:00:00 2004 Dan Walsh 1.12.2-1
- Latest from NSA
Fri Jun 18 00:00:00 2004 Dan Walsh 1.12.1-1
- Update to latest from NSA
Thu Jun 17 00:00:00 2004 Dan Walsh 1.12-1
- Update to latest from NSA
Thu Jun 17 00:00:00 2004 Dan Walsh 1.10-5
- Add nlclass patch
Wed Jun 16 00:00:00 2004 Elliot Lee
- rebuilt
Sat Jun 5 00:00:00 2004 Dan Walsh 1.10-3
- Add BuildRequires flex
Fri Apr 9 00:00:00 2004 Dan Walsh 1.10-2
- Add BuildRequires byacc
Fri Apr 9 00:00:00 2004 Dan Walsh 1.10-1
- Upgrade to the latest from NSA
Mon Mar 15 23:00:00 2004 Dan Walsh 1.8-1
- Upgrade to the latest from NSA
Tue Feb 24 23:00:00 2004 Dan Walsh 1.6-1
- Upgrade to the latest from NSA
Fri Feb 13 23:00:00 2004 Elliot Lee
- rebuilt
Tue Jan 20 23:00:00 2004 Dan Walsh 1.4-6
- Add typealias patch
Tue Jan 20 23:00:00 2004 Dan Walsh 1.4-5
- Update excludetypes with negset-final patch
Wed Jan 14 23:00:00 2004 Dan Walsh 1.4-4
- Add excludetypes patch
Wed Jan 14 23:00:00 2004 Dan Walsh 1.4-3
- Add Colin Walter\'s lineno patch
Wed Jan 7 23:00:00 2004 Dan Walsh 1.4-2
- Remove check for roles transition
Sat Dec 6 23:00:00 2003 Dan Walsh 1.4-1
- upgrade to 1.4
Thu Oct 2 00:00:00 2003 Dan Walsh 1.2-1
- upgrade to 1.2
Fri Aug 29 00:00:00 2003 Dan Walsh 1.1-2
- upgrade to 1.1
Tue Jun 3 00:00:00 2003 Dan Walsh 1.0-1
- Initial version