|
![](/images/spacer.gif) |
![](/images/spacer.gif) |
![](/images/spacer.gif) |
Changelog for policycoreutils-sandbox-2.1.4-3.fc16.x86_64.rpm :
* Tue Oct 04 2011 Dan Walsh - 2.1.4-3- Backport fixes from F17 * Thu Aug 18 2011 Dan Walsh - 2.1.4-2- Fix bug in glob handling for restorecon * Thu Aug 18 2011 Dan Walsh - 2.1.4-1-Update to upstream2.1.4 2011-08-17 * run_init: clarification of the usage in the * semanage: fix usage header around booleans * semanage: remove useless empty lines * semanage: update man page with new examples * semanage: update usage text * semanage: introduce file context equivalencies * semanage: enable and disable modules * semanage: output all local modifications * semanage: introduce extraction of local configuration * semanage: cleanup error on invalid operation * semanage: handle being called with no arguments * semanage: return sooner to save CPU time * semanage: surround getopt with try/except * semanage: use define/raise instead of lots of * semanage: some options are only valid for * semanage: introduce better deleteall support * semanage: do not allow spaces in file * semanage: distinguish between builtin and local permissive * semanage: centralized ip node handling * setfiles: make the restore function exclude() non-static * setfiles: use glob to handle ~ and * fixfiles: do not hard code types * fixfiles: stop trying to be smart about * fixfiles: use new kernel seclabel option * fixfiles: pipe everything to cat before sending * fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs * semodule: support for alternative root paths2.1.3 2011-08-03 * semanage: fix indention * semodule_package: fix man page typo * semodule_expand: update man page with -a * semanage: handle os errors * semanage: fix traceback with bad options * semanage: show usage on -h or --help * semanage: introduce more deleteall options * semanage: verify ports < 65536 * transaction into semanageRecords * make get_handle a method of semanageRecords * remove a needless blank line * make process_one error if not initialized correctly * fixfiles: correct usage for r_opts.rootpath * put -p in help for restorecon and * fixfiles: do not try to only label * fixfiles clean up /var/run and /var/lib/debug * fixfiles delete tmp sockets and pipes rather * fixfile use find -delete instead of pipe * chcat man page typo * add man page for genhomedircon * setfiles fix typo * setsebool should inform users they need to * setsebool typos * open_init_tty man page typos * Don\'t add user site directory to sys.path * newrole retain CAP_SETPCAP2.1.2 2011-08-02 * seunshare: define _GNU_SOURCE earlier * make ignore_enoent do something * restorecond: first user logged in is not noticed * Repo: update .gitignore2.1.1 2011-08-01 * Man page updates * restorecon fix for bad inotify assumptions2.1.0 2011-07-27 * Release, minor version bump * Tue Jul 26 2011 Dan Walsh 2.0.86-20- Fix sepolgen usage statement- Stop using -k insandbox- Fix seunshare usage statement * Thu Jul 07 2011 Dan Walsh 2.0.86-18- Change seunshare to send kill signals to the childs session. - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown. * Wed Jul 06 2011 Dan Walsh 2.0.86-17- Add -k qualifier to seunshare to have it attempt to kill all processes with the matching MCS label. * Tue Jul 05 2011 Dan Walsh 2.0.86-16- Add -C option to sandbox and seunshare to maintain capabilities, otherwise the bounding set will be dropped.- Change --cgroups short name -c rather then -C for consistancy- Fix memory and fd leaks in seunshare * Wed Jun 29 2011 Jóhann B. Guðmundsson - 2.0.86-15- Introduce systemd unit file for restorecond drop SysV support * Mon Jun 13 2011 Dan Walsh 2.0.86-14- Do not drop capability bounding set in seunshare, this allows sandbox to - run setuid apps. * Fri Jun 10 2011 Dan Walsh 2.0.86-13- Add semanage-bash-completion.sh script * Tue Jun 07 2011 Dan Walsh 2.0.86-12- Remove mount -o bind calls from sandbox init script- pam_namespace now has this built in. * Tue Jun 07 2011 Dan Walsh 2.0.86-11- Pass desktop dpi to sandbox Xephyr window * Mon Jun 06 2011 Dan Walsh 2.0.86-10- Allow semodule to pick alternate root for selinux files- Add ~/.config/ * to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory. * Wed May 25 2011 Dan Walsh 2.0.86-9- Fix var_spool template read_spool_files- Fix sepolgen to handle filename transitions * Mon May 23 2011 Dan Walsh 2.0.86-8- Templates cleanedup by Dominic Grift * Fri Apr 29 2011 Dan Walsh 2.0.86-7- Clean up some of the templates for sepolgen * Fri Apr 22 2011 Dan Walsh 2.0.86-6- Apply patches from Christoph A. * fix sandbox title * stop xephyr from li- Also ignore errors on sandbox include of directory missing files * Thu Apr 21 2011 Dan Walsh 2.0.86-5- rebuild versus latest libsepol * Mon Apr 18 2011 Dan Walsh 2.0.86-4- Change fixfiles restore to delete unlabeled sockets in /tmp * Mon Apr 18 2011 Dan Walsh 2.0.86-2- rebuild versus latest libsepol * Tue Apr 12 2011 Dan Walsh 2.0.86-1- Update to upstream * Use correct color range in mcstrand by Richard Haines. * Mon Apr 11 2011 Dan Walsh 2.0.85-30- Add Elia Pinto patches to allow user to specify directories to ignore * Tue Apr 05 2011 Dan Walsh 2.0.85-29- Fix policycoreutils-sandbox description * Tue Mar 29 2011 Dan Walsh 2.0.85-28- rsynccmd should run outside of execcon * Thu Mar 24 2011 Dan Walsh 2.0.85-27- Fix semange node handling of ipv6 addresses * Wed Mar 23 2011 Dan Walsh 2.0.85-26- Fix sepolgen-ifgen call, add -p option * Wed Mar 23 2011 Dan Walsh 2.0.85-25- Fix sepolgen-ifgen call * Fri Mar 18 2011 Dan Walsh 2.0.85-24- Fix rsync command to work if the directory is old.- Fix all tests * Wed Mar 16 2011 Dan Walsh 2.0.85-23- Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node * Wed Mar 16 2011 Dan Walsh 2.0.85-22- Return to original seunshare man page * Fri Mar 11 2011 Dan Walsh 2.0.85-21- change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_ *- This will allow default sandboxes to work on NFS homedirs without allowing access to homedir data * Fri Mar 11 2011 Dan Walsh 2.0.85-20- Change sepolgen-ifgen to search all available policy files- Exit in restorecond if it can not find a UID in the passwd database * Wed Mar 09 2011 Dan Walsh 2.0.85-19- Fix portspage in system-config-selinux to not crash- More fixes for seunshare from Tomas Hoger * Tue Mar 08 2011 Dan Walsh 2.0.85-18- put back in old handling of -T in sandbox command- Put back setsid in seunshare- Fix rsync to maintain times * Tue Mar 08 2011 Dan Walsh 2.0.85-17- Use rewritten seunshare from thoger * Mon Mar 07 2011 Dan Walsh 2.0.85-16- Require python-IPy for policycoreutils-python package- Fixes for sepologen - Usage statement needs -n name - Names with _ are being prevented - dbus apps should get _chat interface * Thu Mar 03 2011 Dan Walsh 2.0.85-15- Fix error message in seunshare, check for tmpdir existance before unlink. * Fri Feb 25 2011 Dan Walsh 2.0.85-13- Rewrite seunshare to make sure /tmp is mounted stickybit owned by root- Only allow names in polgengui that contain letters and numbers- Fix up node handling in semanage command- Update translations * Wed Feb 09 2011 Fedora Release Engineering - 2.0.85-12- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Thu Feb 03 2011 Dan Walsh 2.0.85-11- Fix sandbox policy creation with udp connect ports * Thu Feb 03 2011 Dan Walsh 2.0.85-10- Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name- Cleanup chcat man page * Wed Feb 02 2011 Dan Walsh 2.0.85-9- Report full errors on OSError on Sandbox * Fri Jan 21 2011 Dan Walsh 2.0.85-8- Fix newrole hanlding of pcap * Wed Jan 19 2011 Dan Walsh 2.0.85-7- Have restorecond watch more directories in homedir * Fri Jan 14 2011 Dan Walsh 2.0.85-6- Add sandbox to sepolgen * Thu Jan 06 2011 Dan Walsh 2.0.85-4- Fix proper handling of getopt errors- Do not allow modules names to contain spaces * Wed Jan 05 2011 Dan Walsh 2.0.85-3- Polgengui raises the wrong type of exception. #471078- Change semanage to not allow it to semanage module -D- Change setsebool to suggest run as root on failure * Wed Dec 22 2010 Dan Walsh 2.0.85-2- Fix restorecond watching utmp file for people logging in our out * Tue Dec 21 2010 Dan Walsh 2.0.85-1- Update to upstream * Thu Dec 16 2010 Dan Walsh 2.0.84-5- Change to allow sandbox to run on nfs homedirs, add start python script * Wed Dec 15 2010 Dan Walsh 2.0.84-4- Move seunshare to sandbox package * Mon Nov 29 2010 Dan Walsh 2.0.84-3- Fix sandbox to show correct types in usage statement * Mon Nov 29 2010 Dan Walsh 2.0.84-2- Stop fixfiles from complaining about missing dirs * Mon Nov 22 2010 Dan Walsh 2.0.84-1- Update to upstream- List types available for sandbox in usage statement * Mon Nov 22 2010 Dan Walsh 2.0.83-37- Don\'t report error on load_policy when system is disabled. * Mon Nov 08 2010 Dan Walsh 2.0.83-36- Fix up problems pointed out by solar designer on dropping capabilities * Mon Nov 01 2010 Dan Walsh 2.0.83-35- Check if you have full privs and reset otherwise dont drop caps * Mon Nov 01 2010 Dan Walsh 2.0.83-34- Fix setools require line * Fri Oct 29 2010 Dan Walsh 2.0.83-33- Move /etc/pam.d/newrole in to polcicycoreutils-newrole- Additiona capability checking in sepolgen * Mon Oct 25 2010 Dan Walsh 2.0.83-32- Remove setuid flag and replace with file capabilities- Fix sandbox handling of files with spaces in them * Wed Sep 29 2010 jkeating - 2.0.83-31- Rebuilt for gcc bug 634757 * Thu Sep 23 2010 Dan Walsh 2.0.83-30- Move restorecond into its own subpackage * Thu Sep 23 2010 Dan Walsh 2.0.83-29- Fix semanage man page * Mon Sep 13 2010 Dan Walsh 2.0.83-28- Add seremote, to allow the execution of command inside the sandbox from outside the sandbox. * Mon Sep 13 2010 Dan Walsh 2.0.83-27- Fix sandbox copyfile when copying a dir with a socket, print error * Fri Sep 10 2010 Dan Walsh 2.0.83-26- Stop polgengui from crashing if selinux policy is not installed * Thu Sep 09 2010 Dan Walsh 2.0.83-25- Fix bug preventing sandbox from using -l * Tue Sep 07 2010 Dan Walsh 2.0.83-24- Eliminate quotes fro desktop files * Mon Aug 30 2010 Dan Walsh 2.0.83-23- Add -w windowsize patch from Christoph A. * Mon Aug 30 2010 Dan Walsh 2.0.83-22- Update po * Wed Aug 25 2010 Dan Walsh 2.0.83-21- Update po * Tue Aug 24 2010 Dan Walsh 2.0.83-20- Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;- Remove setsid on seunshare so ^c on sandbox will cause apps to exit- Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox- Clean up error handling so error will get sent back to sandbox tool * Mon Aug 23 2010 Dan Walsh 2.0.83-19- Fix translation handling in file context page of system-config-selinux * Fri Aug 13 2010 Dan Walsh 2.0.83-18- Fix sandbox error handling * Fri Aug 13 2010 Dan Walsh 2.0.83-17- Apply patch to restorecond from Chris Adams, which will cause restorecond - to watch first user that logs in. * Thu Aug 12 2010 Dan Walsh 2.0.83-16- Add COPYING file to doc dir * Thu Aug 05 2010 Dan Walsh 2.0.83-15- Update po and translationsResolves: #610473 * Thu Aug 05 2010 Dan Walsh 2.0.83-14- More fixes for polgen tools * Thu Aug 05 2010 Dan Walsh 2.0.83-13- Remove requirement to run selinux-polgen as root * Thu Aug 05 2010 Dan Walsh 2.0.83-12- Update po and translations- Fix gui policy generation tools * Wed Aug 04 2010 Dan Walsh 2.0.83-11- Update po and translations * Sat Jul 31 2010 David Malcolm - 2.0.83-10- rebuild against python 2.7 * Wed Jul 28 2010 Dan Walsh 2.0.83-9- Update selinux-polgengui to sepolgen policy generation * Wed Jul 28 2010 Dan Walsh 2.0.83-8- Fix invalid free in seunshare and fix man page * Tue Jul 27 2010 Dan Walsh 2.0.83-7- Update translations * Mon Jul 26 2010 Dan Walsh 2.0.83-6- Fix sandbox man page * Wed Jul 21 2010 David Malcolm - 2.0.83-5- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild * Tue Jul 20 2010 Dan Walsh 2.0.83-4- Add translations for menus- Fixup man page from Russell Coker * Tue Jun 15 2010 Dan Walsh 2.0.83-3- Change python scripts to use -s flag- Update po * Tue Jun 15 2010 Dan Walsh 2.0.83-1- Update to upstream * Add sandbox support from Dan Walsh with modifications from Steve Lawrence. * Tue Jun 15 2010 Dan Walsh 2.0.82-31- Fix sepolgen code generationResolve: #603001 * Tue Jun 08 2010 Dan Walsh 2.0.82-30- Add cgroup support for sandbox * Mon Jun 07 2010 Dan Walsh 2.0.82-29- Allow creation of /var/cache/DOMAIN from sepolgen * Thu Jun 03 2010 Dan Walsh 2.0.82-28- Fix sandbox init script - Add dbus-launch to sandbox -XResolve: #599599 * Thu Jun 03 2010 Dan Walsh 2.0.82-27- Move genhomedircon.8 to same package as genhomedircon- Fix sandbox to pass unit testResolves: #595796 * Wed Jun 02 2010 Dan Walsh 2.0.82-26- Fix listing of booleans from audit2allow * Wed Jun 02 2010 Dan Walsh 2.0.82-25- Fix audit2allow to output if the current policy has avc- Update translations- Fix icon * Thu May 27 2010 Dan Walsh 2.0.82-24- Man page fixes- sandbox fixes- Move seunshare to base package * Fri May 21 2010 Dan Walsh 2.0.82-23- Fix seunshare translations- Fix seunshare to work on all arches- Fix icon for system-config-selinuxResolves: #595276 * Fri May 21 2010 Dan Walsh 2.0.82-22- Fix can_exec definition in sepolgen * Fri May 21 2010 Dan Walsh 2.0.82-21- Add man page for seunshare and genhomedirconResolves: #594303- Fix node management via semanage * Wed May 19 2010 Dan Walsh 2.0.82-20- Fixes from upstream for sandbox commandResolves: #580938 * Thu May 13 2010 Dan Walsh 2.0.82-18- Fix sandbox error handling on copyfile- Fix desktop files * Tue May 11 2010 Dan Walsh 2.0.82-17- Fix policy tool to have correct name in menus- Fix seunshare to handle /tmp being in ~/home- Fix saving of altered files- Update translations * Tue May 04 2010 Dan Walsh 2.0.82-15- Allow audit2allow to specify alternative policy file for analysis * Mon May 03 2010 Dan Walsh 2.0.82-14- Update po- Fix sepolgen --no_attrsResolves: #588280 * Thu Apr 29 2010 Dan Walsh 2.0.82-13- Make semanage boolean work on disabled machines and during livecd xguest- Fix homedir and tmpdir handling in sandboxResolves: #587263 * Wed Apr 28 2010 Dan Walsh 2.0.82-11- Make semanage boolean work on disabled machines * Tue Apr 27 2010 Dan Walsh 2.0.82-10- Make sepolgen-ifgen be quiet * Wed Apr 21 2010 Dan Walsh 2.0.82-8- Make sepolgen report on more interfaces - Fix system-config-selinux display of modules * Thu Apr 15 2010 Dan Walsh 2.0.82-7- Fix crash when args are emptyResolves: #582542- Fix semange to exit on bad options- Fix semanage dontaudit man page sectionResolves: #582533 * Wed Apr 14 2010 Dan Walsh 2.0.82-6- Remove debug line from semanage- Update po * Tue Apr 13 2010 Dan Walsh 2.0.82-5- Fix sandbox comment on HOMEDIRS- Fix sandbox to throw error on bad executable * Tue Apr 06 2010 Dan Walsh 2.0.82-4- Fix spacing in templates * Wed Mar 31 2010 Dan Walsh 2.0.82-3- Fix semanage return codes * Tue Mar 30 2010 Dan Walsh 2.0.82-2- Fix sepolgen to confirm to the \"Reference Policy Style Guide\" * Tue Mar 23 2010 Dan Walsh 2.0.82-1- Update to upstream * Add avc\'s since boot from Dan Walsh. * Fix unit tests from Dan Walsh. * Tue Mar 23 2010 Dan Walsh 2.0.81-4- Update to upstream - sepolgen * Add since-last-boot option to audit2allow from Dan Walsh. * Fix sepolgen output to match what Chris expects for upstream refpolicy from Dan Walsh. * Mon Mar 22 2010 Dan Walsh 2.0.81-3- Allow restorecon on > 2 Gig files * Tue Mar 16 2010 Dan Walsh 2.0.81-2- Fix semanage handling of boolean options- Update translations * Fri Mar 12 2010 Dan Walsh 2.0.81-1- Update to upstream * Add dontaudit flag to audit2allow from Dan Walsh. * Thu Mar 11 2010 Dan Walsh 2.0.80-2- Use --rbind in sandbox init scripts * Mon Mar 08 2010 Dan Walsh 2.0.80-1- Update to upstream * Module enable/disable support from Dan Walsh. * Mon Mar 01 2010 Dan Walsh 2.0.79-5- Rewrite of sandbox script, add unit test for sandbox - Update translations * Mon Mar 01 2010 Dan Walsh 2.0.79-4- Fix patch for dontaudit rules from audit2allow for upstream acceptance * Fri Feb 26 2010 Dan Walsh 2.0.79-3- Fixes for fixfiles * Wed Feb 17 2010 Dan Walsh 2.0.79-2- Fix sandbox to complain if mount-shared has not been run- Fix to use /etc/sysconfig/sandbox * Tue Feb 16 2010 Dan Walsh 2.0.79-1- Update to upstream * Fix double-free in newrole- Fix python language handling * Thu Feb 11 2010 Dan Walsh 2.0.78-21- Fix display of command in sandbox * Fri Feb 05 2010 Dan Walsh 2.0.78-20- Catch OSError in semanage * Wed Feb 03 2010 Dan Walsh 2.0.78-19- Fix seobject and fixfiles * Fri Jan 29 2010 Dan Walsh 2.0.78-17- Change seobject to use translations properly * Thu Jan 28 2010 Dan Walsh 2.0.78-16- Cleanup spec fileResolves: 555835 * Thu Jan 28 2010 Dan Walsh 2.0.78-15- Add use_resolve to sepolgen * Wed Jan 27 2010 Dan Walsh 2.0.78-14- Add session capability to sandbox - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession * Thu Jan 21 2010 Dan Walsh 2.0.78-13- Fix executable template for fifo files * Tue Jan 19 2010 Dan Walsh 2.0.78-12- Fix patch xod xmodmap- Exit 0 from script * Thu Jan 14 2010 Dan Walsh 2.0.78-11- Run with the same xdmodmap in sandbox as outside- Patch from Josh Cogliati * Fri Jan 08 2010 Dan Walsh 2.0.78-10- Fix sepolgen to not generate user sh section on non user policy * Fri Jan 08 2010 Dan Walsh 2.0.78-9- Add -e to semanage man page- Add -D qualifier to audit2allow to generate dontaudit rules * Wed Jan 06 2010 Dan Walsh 2.0.78-8- Speed up audit2allow processing of audit2why comments * Fri Dec 18 2009 Dan Walsh 2.0.78-7- Fixes to sandbox man page * Thu Dec 17 2009 Dan Walsh 2.0.78-6- Add setools-libs-python to requires for gui * Wed Dec 16 2009 Dan Walsh 2.0.78-5- If restorecond running as a user has no files to watch then it should exit. (NFS Homedirs) * Thu Dec 10 2009 Dan Walsh 2.0.78-4- Move sandbox man page to base package * Tue Dec 08 2009 Dan Walsh 2.0.78-3- Fix audit2allow to report constraints, dontaudits, types, booleans * Fri Dec 04 2009 Dan Walsh 2.0.78-2- Fix restorecon -i to ignore enoent * Tue Dec 01 2009 Dan Walsh 2.0.78-1- Update to upstream * Remove non-working OUTFILE from fixfiles from Dan Walsh. * Additional exception handling in chcat from Dan Walsh. * fix sepolgen to read a \"type 1403\" msg as a policy load by Stephen Smalley * Add support for Xen ocontexts from Paul Nuzzi. * Tue Nov 24 2009 Dan Walsh 2.0.77-1- Update to upstream * Fixed bug preventing semanage node -a from working from Chad Sellers * Fixed bug preventing semanage fcontext -l from working from Chad Sellers- Change semanage to use unicode * Wed Nov 18 2009 Dan Walsh 2.0.76-1- Update to upstream * Remove setrans management from semanage, as it does not work from Dan Walsh. * Move load_policy from /usr/sbin to /sbin from Dan Walsh. * Mon Nov 16 2009 Dan Walsh 2.0.75-3- Raise exception if user tries to add file context with an embedded space * Wed Nov 11 2009 Dan Walsh 2.0.75-2- Fix sandbox to setsid so it can run under mozilla without crashing the session * Mon Nov 02 2009 Dan Walsh 2.0.75-1- Update to upstream * Factor out restoring logic from setfiles.c into restore.c * Fri Oct 30 2009 Dan Walsh 2.0.74-15- Fix typo in seobject.py * Fri Oct 30 2009 Dan Walsh 2.0.74-14- Allow semanage -i and semanage -o to generate customization files.- semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration * Tue Oct 20 2009 Dan Walsh 2.0.74-13- Fix restorecond man page * Mon Oct 19 2009 Dan Walsh 2.0.74-12- Add generation of the users context file to polgengui * Fri Oct 16 2009 Dan Walsh 2.0.74-11- Remove tabs from system-config-selinux glade file * Thu Oct 15 2009 Dan Walsh 2.0.74-10- Remove translations screen from system-config-selinux * Wed Oct 14 2009 Dan Walsh 2.0.74-9- Move fixfiles man pages into the correct package- Add genhomedircon to fixfiles restore * Tue Oct 06 2009 Dan Walsh 2.0.74-8- Add check to sandbox to verify save changes - Chris Pardy- Fix memory leak in restorecond - Steve Grubb * Thu Oct 01 2009 Dan Walsh 2.0.74-7- Fixes Templates * Thu Oct 01 2009 Dan Walsh 2.0.74-6- Fixes for polgengui to handle tcp ports correctly- Fix semanage node -a * Wed Sep 30 2009 Dan Walsh 2.0.74-5- Fixes for semanage -equiv, readded modules, --enable, --disable * Sun Sep 20 2009 Dan Walsh 2.0.74-4- Close sandbox when eclipse exits * Fri Sep 18 2009 Dan Walsh 2.0.74-3- Security fixes for seunshare- Fix Sandbox to handle non file input to command. * Thu Sep 17 2009 Dan Walsh 2.0.74-2- Security fixes for seunshare * Thu Sep 17 2009 Dan Walsh 2.0.74-1- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make setfiles label if selinux is disabled and a seclabel aware kernel is running from Caleb Case. * Clarify forkpty() error message in run_init from Manoj Srivastava. * Mon Sep 14 2009 Dan Walsh 2.0.73-5- Fix sandbox to handle relative paths * Mon Sep 14 2009 Dan Walsh 2.0.73-4- Add symbolic link to load_policy * Mon Sep 14 2009 Dan Walsh 2.0.73-3- Fix restorecond script to use force-reload * Tue Sep 08 2009 Dan Walsh 2.0.73-2- Fix init script to show status in usage message * Tue Sep 08 2009 Dan Walsh 2.0.73-1- Update to upstream * Add semanage dontaudit to turn off dontaudits from Dan Walsh. * Fix semanage to set correct mode for setrans file from Dan Walsh. * Fix malformed dictionary in portRecord from Dan Walsh. * Restore symlink handling support to restorecon based on a patch by Martin Orr. This fixes the restorecon /dev/stdin performed by Debian udev scripts that was broken by policycoreutils 2.0.70. * Thu Sep 03 2009 Dan Walsh 2.0.71-15- Add DAC_OVERRIED to seunshare * Wed Sep 02 2009 Bill Nottingham 2.0.71-15- Fix typo * Fri Aug 28 2009 Dan Walsh 2.0.71-14- Add enable/disable patch * Thu Aug 27 2009 Tomas Mraz - 2.0.71-13- rebuilt with new audit * Wed Aug 26 2009 Dan Walsh 2.0.71-12- Tighten up controls on seunshare.c * Wed Aug 26 2009 Dan Walsh 2.0.71-11- Add sandboxX * Sat Aug 22 2009 Dan Walsh 2.0.71-10- Fix realpath usage to only happen on argv input from user * Fri Aug 21 2009 Ville Skyttä - 2.0.71-9- Don\'t try to remove restorecond after last erase (done already in %preun).- Ensure scriptlets exit with status 0.- Fix %post and %pr * Thu Aug 20 2009 Dan Walsh 2.0.71-7- Fix glob handling of /.. * Wed Aug 19 2009 Dan Walsh 2.0.71-6- Redesign restorecond to use setfiles/restore functionality * Wed Aug 19 2009 Dan Walsh 2.0.71-5- Fix sepolgen again * Tue Aug 18 2009 Dan Walsh 2.0.71-4- Add --boot flag to audit2allow to get all AVC messages since last boot * Tue Aug 18 2009 Dan Walsh 2.0.71-3- Fix semanage command * Thu Aug 13 2009 Dan Walsh 2.0.71-2- exclude unconfined.if from sepolgen * Thu Aug 13 2009 Dan Walsh 2.0.71-1- Fix chcat to report error on non existing file- Update to upstream * Modify setfiles/restorecon checking of exclude paths. Only check user-supplied exclude paths (not automatically generated ones based on lack of seclabel support), don\'t require them to be directories, and ignore permission denied errors on them (it is ok to exclude a path to which the caller lacks permission). * Mon Aug 10 2009 Dan Walsh 2.0.70-2- Don\'t warn if the user did not specify the exclude if root can not stat file system * Wed Aug 05 2009 Dan Walsh 2.0.70-1- Update to upstream * Modify restorecon to only call realpath() on user-supplied pathnames from Stephen Smalley. * Fix typo in fixfiles that prevented it from relabeling btrfs filesystems from Dan Walsh. * Wed Jul 29 2009 Dan Walsh 2.0.68-1- Fix location of man pages- Update to upstream * Modify setfiles to exclude mounts without seclabel option in /proc/mounts on kernels >= 2.6.30 from Thomas Liu. * Re-enable disable_dontaudit rules upon semodule -B from Christopher Pardy and Dan Walsh. * setfiles converted to fts from Thomas Liu. * Sun Jul 26 2009 Fedora Release Engineering - 2.0.64-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jul 07 2009 Tom \"spot\" Callaway 2.0.64-2- fix multiple directory ownership of mandirs * Fri Jun 26 2009 Dan Walsh 2.0.64-1- Update to upstream * Keep setfiles from spamming console from Dan Walsh. * Fix chcat\'s category expansion for users from Dan Walsh.- Update po files- Fix sepolgen * Thu Jun 04 2009 Dan Walsh 2.0.63-5- Add sepolgen executable * Mon Jun 01 2009 Dan Walsh 2.0.63-4- Fix Sandbox option handling- Fix fixfiles handling of btrfs * Tue May 26 2009 Dan Walsh 2.0.63-3- Fix sandbox to be able to execute files in homedir * Fri May 22 2009 Dan Walsh 2.0.63-2- Change polgen.py to be able to generate policy * Wed May 20 2009 Dan Walsh 2.0.63-1- Update to upstream * Fix transaction checking from Dan Walsh. * Make fixfiles -R (for rpm) recursive. * Make semanage permissive clean up after itself from Dan Walsh. * add /root/.ssh/ * to restorecond.conf * Wed Apr 22 2009 Dan Walsh 2.0.62-14- Fix audit2allow -a to retun /var/log/messages * Wed Apr 22 2009 Dan Walsh 2.0.62-13- Run restorecond as a user service * Thu Apr 16 2009 Dan Walsh 2.0.62-12- Add semanage module support * Tue Apr 14 2009 Dan Walsh 2.0.62-10- Do not print \ , if count < 1000; * Sat Apr 11 2009 Dan Walsh 2.0.62-9- Handle case where subs file does not exist * Wed Apr 08 2009 Dan Walsh 2.0.62-8- Update po files- Add --equiv command for semanage * Tue Mar 31 2009 Dan Walsh 2.0.62-7- Cleanup creation of permissive domains- Update po files * Mon Mar 23 2009 Dan Walsh 2.0.62-6- Update po files * Thu Mar 12 2009 Dan Walsh 2.0.62-5- Fix semanage transations * Sat Mar 07 2009 Dan Walsh 2.0.62-4- Update polgengui templates to match current upstream policy * Thu Feb 26 2009 Fedora Release Engineering - 2.0.62-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Mon Feb 23 2009 Dan Walsh 2.0.62-2- Add /root/.ssh to restorecond.conf- fixfiles -R package should recursively fix files * Wed Feb 18 2009 Dan Walsh 2.0.62-1- Update to upstream * Add btrfs to fixfiles from Dan Walsh. * Remove restorecond error for matching globs with multiple hard links and fix some error messages from Dan Walsh. * Make removing a non-existant module a warning rather than an error from Dan Walsh. * Man page fixes from Dan Walsh. * Mon Feb 16 2009 Dan Walsh 2.0.61-10- Fix script created by polgengui to not refer to selinux-policy-devel * Mon Feb 09 2009 Dan Walsh 2.0.61-9- Change initc scripts to use proper labeling on gui * Mon Feb 09 2009 Dan Walsh 2.0.61-8- Add obsoletes to cause policycoreuils to update both python and non python version * Fri Jan 30 2009 Dan Walsh 2.0.61-7- Dont report errors on glob match and multiple links * Thu Jan 22 2009 Dan Walsh 2.0.61-6- Move sepolgen-ifgen to post python * Wed Jan 21 2009 Dan Walsh 2.0.61-4- Fix Translations * Tue Jan 20 2009 Dan Walsh 2.0.61-3- Add Domains Page to system-config-selinux- Add ability to create dbus confined applications to polgen * Wed Jan 14 2009 Dan Walsh 2.0.61-2- Split python into a separate package * Tue Jan 13 2009 Dan Walsh 2.0.61-1- Update to upstream * chcat: cut categories at arbitrary point (25) from Dan Walsh * semodule: use new interfaces in libsemanage for compressed files from Dan Walsh * audit2allow: string changes for usage * Tue Jan 06 2009 Dan Walsh 2.0.60-7- Don\'t error out when removing a non existing module * Mon Dec 15 2008 Dan Walsh 2.0.60-6- fix audit2allow man page * Wed Dec 10 2008 Dan Walsh 2.0.60-5- Fix Japanese translations * Sat Dec 06 2008 Dan Walsh 2.0.60-4- Change md5 to hashlib.md5 in sepolgen * Thu Dec 04 2008 Ignacio Vazquez-Abrams - 2.0.60-3- Rebuild for Python 2.6 * Tue Dec 02 2008 Dan Walsh 2.0.60-2- Fix error checking in restorecond, for inotify_add_watch * Mon Dec 01 2008 Dan Walsh 2.0.60-1- Update to upstream * semanage: use semanage_mls_enabled() from Stephen Smalley. * Sat Nov 29 2008 Ignacio Vazquez-Abrams - 2.0.59-2- Rebuild for Python 2.6 * Tue Nov 11 2008 Dan Walsh 2.0.59-1- Update to upstream * fcontext add checked local records twice, fix from Dan Walsh. * Mon Nov 10 2008 Dan Walsh 2.0.58-1- Update to upstream * Allow local file context entries to override policy entries in semanage from Dan Walsh. * Newrole error message corrections from Dan Walsh. * Add exception to audit2why call in audit2allow from Dan Walsh. * Fri Nov 07 2008 Dan Walsh 2.0.57-12- add compression * Tue Nov 04 2008 Jesse Keating - 2.0.57-11- Move the usermode-gtk requires to the -gui subpackage. * Thu Oct 30 2008 Dan Walsh 2.0.57-10- Fix traceback in audit2why * Wed Oct 29 2008 Dan Walsh 2.0.57-9- Make GUI use translations * Wed Oct 29 2008 Dan Walsh 2.0.57-8- Fix typo in man page * Tue Oct 28 2008 Dan Walsh 2.0.57-7- Handle selinux disabled correctly- Handle manipulation of fcontext file correctly * Mon Oct 27 2008 Dan Walsh 2.0.57-6- Add usermode-gtk requires * Thu Oct 23 2008 Dan Walsh 2.0.57-5- Allow addition of local modifications of fcontext policy. * Mon Oct 20 2008 Dan Walsh 2.0.57-4- Fix system-config-selinux booleanspage throwing and exception- Update po files * Fri Oct 17 2008 Dan Walsh 2.0.57-3- Fix text in newrole- Fix revertbutton on booleans page in system-config-selinux * Wed Oct 01 2008 Dan Walsh 2.0.57-2- Change semodule calls for libsemanage * Wed Oct 01 2008 Dan Walsh 2.0.57-1- Update to upstream * Update po files from Dan Walsh. * Fri Sep 12 2008 Dan Walsh 2.0.56-1- Fix semanage help display- Update to upstream * fixfiles will now remove all files in /tmp and will check for unlabeled_t in /tmp and /var/tmp from Dan Walsh. * add glob support to restorecond from Dan Walsh. * allow semanage to handle multi-line commands in a single transaction from Dan Walsh. * Thu Sep 11 2008 Dan Walsh 2.0.55-8- Only call gen_requires once in sepolgen | |