|
|
 |
|
|
Changelog for policycoreutils-2.1.14-46.8.fc19.i686.rpm :
Mon Apr 7 14:00:00 2014 Miroslav Grepl - 2.1.14-46.8
- seunshare: Use setcurrent before setexec from lutoAATTamacapital.net
Fri Jan 3 13:00:00 2014 Miroslav Grepl - 2.1.14-46.7
- policycoreutils-python should require checkpolicy
Fri Oct 4 14:00:00 2013 Dan Walsh - 2.1.14-46.6
- Fix sandbox to work properly with seunshare using file capabilties.
Wed Sep 4 14:00:00 2013 Dan Walsh - 2.1.14-46.5
- Move audit2allow back into policycoreutils-python package
- Fix semanage logging to syslog
- Fix setsebool error handling
- Fix fixfiles scripts to work as documentet
Fri Jun 21 14:00:00 2013 Dan Walsh - 2.1.14-46.4
- Fix generation of booleans in man pages
Fri Jun 21 14:00:00 2013 Dan Walsh - 2.1.14-46.3
- Update Translations
- Remove requires for systemd-sysv
- Move systemd-units require to restorecond section
- More sepolicy interfaces for gui
- Fixes for semanage -i and semanage -o
- Remove --version flage from sandbox
Thu Jun 6 14:00:00 2013 Dan Walsh - 2.1.14-46.2
- Fix sepolicy generate --confined_admin to generate tunables
- Add new interface to generate entrypoints for use with new gui
Tue Jun 4 14:00:00 2013 Dan Walsh - 2.1.14-46.1
- Fix audit2allow -o to open file for append
- Fix the name of the spec file generated in the build script
Sun May 26 14:00:00 2013 Dan Walsh - 2.1.14-46
- Fix the name of the spec file generated in the build script
- Add mgrepl patch to support argparse for semanage command parsing
Tue May 21 14:00:00 2013 Dan Walsh - 2.1.14-45
- Fix sandbox to always use sandbox_file_t, so generated policy will work.
- Update Translations
Thu May 16 14:00:00 2013 Dan Walsh - 2.1.14-44
- Fix sepolicy-generate man page to clear up options/policy type
- Add Miroslav Grepl to not generate man page when doing
sepolicy generate --customize
- Add support for executing semanage user within spec file
- Fix generation of confined admin domains, to handle booleans properly.
Tue May 14 14:00:00 2013 Dan Walsh - 2.1.14-43
- Need to handle gziped policy.xml as well as not compressed.
Tue May 14 14:00:00 2013 Dan Walsh - 2.1.14-42
- Add support for Xephyr -resizable, so sandbox can now resize window
- Add support for compressed policy.xml
- Miroslav Grepl patch to allow sepolicy interface on individual interface fil
- Also add capability to test interfaces for correctness.
Mon May 13 14:00:00 2013 Dan Walsh - 2.1.14-41
- Apply patches from Sven Vermeulen for sepolgen to fix typos.
Mon May 13 14:00:00 2013 Dan Walsh - 2.1.14-40
- Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.
Sun May 12 14:00:00 2013 Dan Walsh - 2.1.14-39
- Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
- Add Sven Vermeulen patches to cleanup man pages
Fri May 10 14:00:00 2013 Dan Walsh - 2.1.14-38
- No longer run sepolgen-ifgen at install time.
- Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
- Update Translations
Mon Apr 22 14:00:00 2013 Dan Walsh - 2.1.14-37
- Fix exceptionion hanling in audit2allow -o
- Generate Man pages for everydomain, not just ones with exec_t entrypoints
- sepolicy comunicate should return ValueError not TypeError
- Trim header line in sepolicy manpage to use less space
- Add missing options to restorecon man page
Thu Apr 11 14:00:00 2013 Dan Walsh - 2.1.14-36
- Raise proper Exception on sepolicy communicate with invalid value
Wed Apr 10 14:00:00 2013 Dan Walsh - 2.1.14-35
- Update translations
- Add patch by Miroslav Grepl to add compile test for sepolicy interface command.
Tue Apr 9 14:00:00 2013 Dan Walsh - 2.1.14-34
- Update translations
- Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.
Mon Apr 8 14:00:00 2013 Dan Walsh - 2.1.14-33
- Update translations
- Add missing man pages and fixup existing man pages
Wed Apr 3 14:00:00 2013 Dan Walsh - 2.1.14-32
- Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
- Apply Miroslav Grepl Patches for sepolicy
-- Fix generate mutually groups option handling
-- EUSER is used for existing policy
-- customize options can be used together with admin_domain option
-- Fix manpage.py to generate correct man pages for SELinux users
-- Fix policy
*.te file generated by customize+writepaths options
-- Fix install script for confined_admin option
Mon Apr 1 14:00:00 2013 Dan Walsh - 2.1.14-31
- Add post install scripts for gui to make sure Icon Cache is refreshed.
- Fix grammar issue in secon man page
- Update Translations
Thu Mar 28 13:00:00 2013 Dan Walsh - 2.1.14-30
- Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
- Add support for returning alias data to sepolicy.info python bindings
Wed Mar 27 13:00:00 2013 Dan Walsh - 2.1.14-28
- Fix audit2allow output to better align analysys with the allow rules
- Apply Miroslav Grepl patch to clean up sepolicy generate usage
- Apply Miroslav Grepl patch to fixupt handing of admin_user generation
- Update Tranlslations
Wed Mar 27 13:00:00 2013 Dan Walsh - 2.1.14-27
- Allow semanage fcontext -a -t \"<>\" ... to work
Mon Mar 25 13:00:00 2013 Dan Walsh - 2.1.14-26
- Can not unshare IPC in sandbox, since it blows up Xephyr
- Remove bogus error message sandbox about reseting setfsuid
Thu Mar 21 13:00:00 2013 Dan Walsh - 2.1.14-25
- Fix sepolicy generate --customize to generate policy with -w commands
Thu Mar 21 13:00:00 2013 Dan Walsh - 2.1.14-24
- sepolgen-ifgen needs to handle filename transition rules containing \":\"
Tue Mar 19 13:00:00 2013 Dan Walsh - 2.1.14-23
- sepolicy manpage:
- use nroff instead of man2html
- Remove checking for name of person who created the man page
- audit2allow
- Fix output to show the level that is different.
Thu Mar 14 13:00:00 2013 Dan Walsh - 2.1.14-22
- Fix newrole to not drop capabilities from the bounding set.
- Stop dropping capabilities from its children.
- Add better error messages.
- Change location of bash_completion files to /usr/share/bash-completion/compl
Mon Mar 11 13:00:00 2013 Dan Walsh - 2.1.14-21
- sepolicy generate should look for booleans that effect equivalence names, and add them to the man page
Thu Mar 7 13:00:00 2013 Dan Walsh - 2.1.14-20
- Mention creation of permissive domains in sepolicy generate man page
- Change sepolicy manpage to use shortname with an \"_\" to stop accidently grabbing unrelated types for a domain.
- Fix audit2allow to show better information on constraint violations.
Wed Mar 6 13:00:00 2013 Dan Walsh - 2.1.14-19
- Have restorecon exit -1 on errors for consistancy.
Tue Mar 5 13:00:00 2013 Dan Walsh - 2.1.14-18
- Need to provide a value to semanage boolean -m
Mon Mar 4 13:00:00 2013 Dan Walsh - 2.1.14-17
- Fix cut and paste errors for sepolicy network command
Fri Mar 1 13:00:00 2013 Dan Walsh - 2.1.14-16
- Fix sepoicy interface to work properly
Thu Feb 28 13:00:00 2013 Dan Walsh - 2.1.14-15
- Fix fixfiles to use exclude_dirs on fixfiles restore
Thu Feb 28 13:00:00 2013 Dan Walsh - 2.1.14-14
- Allow users with symlinked homedirs to work. call realpath on homedir
- Fix sepolicy reorganization of helper functions.
Sun Feb 24 13:00:00 2013 Dan Walsh - 2.1.14-13
- Update trans
- Fix sepolicy reorganization of helper functions.
Sun Feb 24 13:00:00 2013 Rahul Sundaram - 2.1.14-13
- remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
- clean up spec to follow current guidelines
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-12
- Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-11
- sepolgen-ifgen should use the current policy path if selinux is enabled
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-10
- Fix sepolicy to be able to work on an SELinux disabled system.
- Needed to be able to build man pages in selinux-policy package
Thu Feb 21 13:00:00 2013 Dan Walsh - 2.1.14-9
- Add yum to requires of policycoreutils-python since sepolicy requires it.
Thu Feb 21 13:00:00 2013 Dan Walsh - 2.1.14-8
- Sepolixy should not throw an exception on an SELinux disabled machine
- Switch from using console app to using pkexec, so we will work better
with policykit.
- Add missing import to fix system-config-selinux startup
- Add comment to pamd files about pam_rootok.so
- Fix sepolicy generate to not comment out the first line
Wed Feb 20 13:00:00 2013 Dan Walsh - 2.1.14-7
- Add --root/-r flag to sepolicy manpage,
- This allows us to generate man pages on the fly in the selinux-policy build
Mon Feb 18 13:00:00 2013 Dan Walsh - 2.1.14-6
- Fix newrole to retain cap_audit_write when compiled with namespace, also
do not drop capabilities when run as root.
Thu Feb 14 13:00:00 2013 Dan Walsh - 2.1.14-5
- Fix man page generation and public_content description
Thu Feb 14 13:00:00 2013 Dan Walsh - 2.1.14-4
- Revert some changes which are causing the wrong policy version file to be created
- Switch sandbox to start using openbox rather then matchbox
- Make sepolgen a symlink to sepolicy
- update translations
Wed Feb 13 13:00:00 2013 Dan Walsh - 2.1.14-3
- Fix empty system-config-selinux.png, again
Tue Feb 12 13:00:00 2013 Dan Walsh - 2.1.14-2
- Fix empty system-config-selinux.png
Thu Feb 7 13:00:00 2013 Dan Walsh - 2.1.14-1
- Update to upstream
* setfiles: estimate percent progress
* load_policy: make link at the destination directory
* Rebuild polgen.glade with glade-3
* sepolicy: new command to unite small utilities
* sepolicy: Update Makefiles and po files
* sandbox: use sepolicy to look for sandbox_t
* gui: switch to use sepolicy
* gui: sepolgen: use sepolicy to generate
* semanage: use sepolicy for boolean dictionary
* add po file configuration information
* po: stop running update-po on all
* semanage: seobject verify policy types before allowing you to assign them.
* gui: Start using Popen, instead of os.spawnl
* sandbox: Copy /var/tmp to /tmp as they are the same inside
* qualifier to shred content
* semanage: Fix handling of boolean_sub names when using the -F flag
* semanage: man: roles instead of role
* gui: system-config-selinux: Catch no DISPLAY= error
* setfiles: print error if no default label found
* semanage: list logins file entries in semanage login -l
* semanage: good error message is sepolgen python module missing
* gui: system-config-selinux: do not use lokkit
* secon: add support for setrans color information in prompt output
* restorecond: remove /etc/mtab from default list
* gui: If you are not able to read enforcemode set it to False
* genhomedircon: regenerate genhomedircon more often
* restorecond: Add /etc/udpatedb.conf to restorecond.conf
* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
* fixfiles: relabel only after specific date
* po: update translations
* sandbox: seunshare: do not reassign realloc value
* seunshare: do checking on setfsuid
* sestatus: rewrite to shut up coverity
Thu Jan 31 13:00:00 2013 Dan Walsh - 2.1.12-58
- Reorginize sepolicy so all get_all functions are in main module
- Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.
Fri Jan 25 13:00:00 2013 Dan Walsh - 2.1.12-57
- Update to latest patches from eparis/Upstream
- fixfiles onboot will write any flags handed to it to /.autorelabel.
-
* Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
-
* This should allow fixfiles -F onboot, to force a hard relabel.
- Add -p to show progress on full relabel.
Tue Jan 15 13:00:00 2013 Dan Walsh - 2.1.12-56
- Additional changes for bash completsion and generate man page to match the w
- Add newtype as a new qualifier to sepolicy generate. This new mechanism wil
- a policy write to generate types after the initial policy has been written a
- will autogenerate all of the interfaces.
- I also added a -w options to allow policy writers from the command line to s
- the writable directories of files.
-
- Modify network.py to include interface definitions for newly created port type
- Standardize of te_types just like all of the other templates.
- Change permissive domains creation to raise exception if sepolgen is not ins
- get_te_results no longer needs or uses the opts parameter.
- The compliler was complaining so I just removed the option.
- Start returning analysis data for audit2allow
Tue Jan 15 13:00:00 2013 Dan Walsh - 2.1.12-55
- Update Translations
- Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
- This fixes the spec file and script file getting wrong names for modules and types.
Wed Jan 9 13:00:00 2013 Dan Walsh - 2.1.12-54
- Additional patch from Miroslav to handle role attributes
Wed Jan 9 13:00:00 2013 Dan Walsh - 2.1.12-53
- Update with Miroslav patch to handle role attributes
- Update Translations
- import sepolicy will only throw exception on missing policy iff selinux is enabled
Sat Jan 5 13:00:00 2013 Dan Walsh - 2.1.12-52
- Update to latest patches from eparis/Upstream
- secon: add support for setrans color information in prompt output
- Update translations
Fri Jan 4 13:00:00 2013 Dan Walsh - 2.1.12-51
- Update translations
- Fix sepolicy booleans to handle autogenerated booleans descriptions
- Cleanups of sepolicy manpage
- Fix crash on git_shell man page generation
Thu Jan 3 13:00:00 2013 Dan Walsh - 2.1.12-50
- Update translations
- update sepolicy manpage to generate fcontext equivalence data and to list
default file context paths.
- Add ability to generate policy for confined admins and domains like puppet.
Thu Dec 20 13:00:00 2012 Dan Walsh - 2.1.12-49
- Fix semanage permissive , this time with the patch.
- Update translations
Wed Dec 19 13:00:00 2012 Dan Walsh - 2.1.12-48
- Fix semanage permissive
- Change to use correct gtk forward button
- Update po
Mon Dec 17 13:00:00 2012 Dan Walsh - 2.1.12-47
- Move audit2why to -devel package
Mon Dec 17 13:00:00 2012 Dan Walsh - 2.1.12-46
- sepolicy transition was blowing up. Also cleanup output when only source is specified.
- sepolicy generate should allow policy modules names that include - or _
Mon Dec 10 13:00:00 2012 Dan Walsh - 2.1.12-45
- Apply patch from Miroslav to display proper range description in man pages g
- Should print warning on missing default label when run in recusive mode iff
- Remove extra -R description, and fix recursive description
Thu Dec 6 13:00:00 2012 Dan Walsh - 2.1.12-44
- Additional fixes for disabled SELinux Box
- system-config-selinux no longer relies on lokkit for /etc/selinux/config
Thu Dec 6 13:00:00 2012 Dan Walsh - 2.1.12-43
- sepolicy should failover to installed policy file on a disabled SELinux box, if it exists.
Wed Dec 5 13:00:00 2012 Dan Walsh - 2.1.12-42
- Update Translations
- sepolicy network -d needs to accept multiple domains
Fri Nov 30 13:00:00 2012 Dan Walsh - 2.1.12-41
- Add --path as a parameter to sepolicy generate
- Print warning message if program does not exists when generating policy, and do not attempt to run nm command
- Fix sepolicy generate -T to not take an argument, and supress the help message
- Since this is really just a testing tool
Fri Nov 30 13:00:00 2012 Dan Walsh - 2.1.12-40
- Fix sepolicy communicate to handle invalid input
Thu Nov 29 13:00:00 2012 Dan Walsh - 2.1.12-39
- Fix sepolicy network -p to handle high ports
Thu Nov 29 13:00:00 2012 Dan Walsh - 2.1.12-38
- Fix handling of manpages without entrypoints, nsswitch domains
- Update Translations
Wed Nov 28 13:00:00 2012 Dan Walsh - 2.1.12-37
- Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the
Tue Nov 27 13:00:00 2012 Dan Walsh - 2.1.12-36
- Fix sepolicy/__init__.py to handle _()
Wed Nov 21 13:00:00 2012 Dan Walsh - 2.1.12-35
- Add Miroslav Grepl patch to create etc_rw_t sock files policy
Fri Nov 16 13:00:00 2012 Dan Walsh - 2.1.12-34
- Fix semanage to work without policycoreutils-devel installed
- Update translations
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-33
- Fix semanage login -l to list contents of /etc/selinux/POLICY/logins directory
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-32
- Fix booleansPage not showing booleans
- Fix audit2allow -b
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-31
- Fix sepolicy booleans again
- Fix man page
Mon Nov 12 13:00:00 2012 Dan Walsh - 2.1.12-30
- Move policy generation tools into policycoreutils-devel
Mon Nov 12 13:00:00 2012 Dan Walsh - 2.1.12-29
- Document and fix sepolicy booleans
- Update Translations
- Fix several spelling mistakes
Wed Nov 7 13:00:00 2012 Dan Walsh - 2.1.12-27
- Only report restorecon warning for missing default label, if not running
recusively
- Update translations
Mon Nov 5 13:00:00 2012 Dan Walsh - 2.1.12-26
- Fix semanage booleans -l, move more boolean_dict handling into sepolicy
- Update translations
- Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
- Fix kill function call should indicate signal_perms not kill capability
- Error out cleanly in system-config-selinux, if it can not contact XServer
Mon Nov 5 13:00:00 2012 Dan Walsh - 2.1.12-25
- Remove run_init, no longer needed with systemd.
- Fix sepolicy generate to not include subdirs in generated fcontext file. (mgrepl patch)
Sat Nov 3 13:00:00 2012 Dan Walsh - 2.1.12-24
- Fix manpage to generate proper man pages for alternate policy,
basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
I pull the policy, policy.xml and file_contexts and file_contexts.homedir
Thu Nov 1 13:00:00 2012 Dan Walsh - 2.1.12-23
- Fix some build problems in sepolicy manpage and sepolicy transition
Tue Oct 30 13:00:00 2012 Dan Walsh - 2.1.12-22
- Add alias man pages to sepolicy manpage
Mon Oct 29 13:00:00 2012 Dan Walsh - 2.1.12-21
- Redesign sepolicy to only read the policy file once, not for every call
Mon Oct 29 13:00:00 2012 Dan Walsh - 2.1.12-20
- Fixes to sepolicy transition, allow it to list all transitions from a domain
Sat Oct 27 14:00:00 2012 Dan Walsh - 2.1.12-19
- Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network
Fri Oct 26 14:00:00 2012 Dan Walsh - 2.1.12-18
- Allow sepolicy to specify the policy to generate content from
Thu Oct 25 14:00:00 2012 Dan Walsh - 2.1.12-17
- Fix semanage boolean -F to handle boolean subs
Thu Oct 25 14:00:00 2012 Dan Walsh - 2.1.12-16
- Add Miroslav Grepl patch to generate html man pages
- Update Translations
- Add option to sandbox to shred files before deleting
Mon Oct 22 14:00:00 2012 Dan Walsh - 2.1.12-15
- Add Requires(post) PKGNAME to sepolicy generate /usr/bin/pkg
Fri Oct 19 14:00:00 2012 Dan Walsh - 2.1.12-14
- Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
- Fix man page generator.
Wed Oct 17 14:00:00 2012 Dan Walsh - 2.1.12-13
- Remove dwalshAATTredhat.com from man pages
- Fix spec file for sepolicy generate
Wed Oct 17 14:00:00 2012 Dan Walsh - 2.1.12-12
- Add missing spec.py from templates directory needed for sepolicy generate
- Add /var/tmp as collection point for sandbox apps.
Tue Oct 16 14:00:00 2012 Dan Walsh - 2.1.12-11
- Handle audit2allow -b in foreign locales
Tue Oct 16 14:00:00 2012 Dan Walsh - 2.1.12-10
- Update sepolicy generate with patch to create spec file and man page.
- Patch initiated by Miroslav Grepl
Wed Oct 10 14:00:00 2012 Dan Walsh - 2.1.12-9
- Fix semanage to verify that types are appropriate for commands.
* Patch initiated by mgrepl
* Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port
Tue Oct 9 14:00:00 2012 Dan Walsh - 2.1.12-8
- Fix typo in preunstall line for restorecond
- Add mgrepl patch to consolidate file context generated by sepolicy generate
Mon Oct 8 14:00:00 2012 Dan Walsh - 2.1.12-7
- Fix manpage generation, missing import
- Add equiv_dict to get samba booleans into smbd_selinux
- Add proper translations for booleans and remove selinux.tbl
Sat Oct 6 14:00:00 2012 Dan Walsh - 2.1.12-6
- Fix system-config-selinux to use sepolicy.generate instead of sepolgen
Thu Oct 4 14:00:00 2012 Dan Walsh - 2.1.12-5
- Add sepolicy commands, and change tools to use them.
Tue Sep 25 14:00:00 2012 Dan Walsh - 2.1.12-4
- Rebuild without bogus prebuild 64 bit seunshare app
Sun Sep 16 14:00:00 2012 Dan Walsh - 2.1.12-3
- Allow fixfiles to specify -v, so they can get verbosity rather then progress.
- Fix load_file Makefile to use SBINDIR rather then real OS.
- Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.
Sun Sep 16 14:00:00 2012 Dan Walsh - 2.1.12-2
- Use systemd post install scriptlets
Thu Sep 13 14:00:00 2012 Dan Walsh - 2.1.12-1
- Update to upstream
* genhomedircon: manual page improvements
* setfiles/restorecon minor improvements
* run_init: If open_init_pty is not available then just use exec
* newrole: do not drop capabilities when newrole is run as
* restorecon: only update type by default
* scripts: Don\'t syslog setfiles changes on a fixfiles restore
* setfiles: do not syslog if no changes
* Disable user restorecond by default
* Make restorecon return 0 when a file has changed context
* setfiles: Fix process_glob error handling
* semanage: allow enable/disable under -m
* add .tx to gitignore
* translations: commit translations from Fedora community
* po: silence build process
* gui: Checking in policy to support polgengui and sepolgen.
* gui: polgen: search for systemd subpackage when generating policy
* gui: for exploring booleans
* gui: system-config-selinux gui
* Add Makefiles to support new gui code
* gui: remove lockdown wizard
* return equivalency records in fcontext customized
* semanage: option to not load new policy into kernel after
* sandbox: manpage update to describe standard types
* setsebool: -N should not reload policy on changes
* semodule: Add -N qualifier to no reload kernel policy
* gui: polgen: sort selinux types of user controls
* gui: polgen: follow symlinks and get the real path to
* gui: Fix missing error function
* setfiles: return errors when bad paths are given
* fixfiles: tell restorecon to ignore missing paths
* setsebool: error when setting multiple options
* semanage: use boolean subs.
* sandbox: Make sure Xephyr never listens on tcp ports
* sepolgen: return and output constraint violation information
* semanage: skip comments while reading external configuration files
* restorecond: relabel all mount runtime files in the restorecond example
* genhomedircon: dynamically create genhomedircon
* Allow returning of bastard matches
* sepolgen: return and output constraint violation information
* audit2allow: one role/type pair per line
Wed Aug 8 14:00:00 2012 Dan Walsh - 2.1.11-6
- Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl
Fri Jul 27 14:00:00 2012 Dan Walsh - 2.1.11-5
- Fix sepolgen/audit2allow to handle multiple role/types in avc messages properly
Thu Jul 19 14:00:00 2012 Dan Walsh - 2.1.11-4
- Fix restorecon to generate a better percentage of completion on restorecon -R /.
- Have audit2allow look at the constaint violation and tell the user whether it
- is because of user,role or level
Wed Jul 11 14:00:00 2012 Dan Walsh - 2.1.11-3
- userapps is generating sandbox code in polgengui
Thu Jul 5 14:00:00 2012 Dan Walsh - 2.1.11-2
- Remove load_policy symbolic link on usrmove systems this breaks the system
Wed Jul 4 14:00:00 2012 Dan Walsh - 2.1.11-1
- Update to upstream
- policycoreutils
* restorecond: wrong options should exit with non-zero error code
* restorecond: Add -h option to get usage command
* resorecond: user: fix fd leak
* mcstrans: add -f to run in foreground
* semanage: fix man page range and level defaults
* semanage: bash completion for modules should include -a,-m, -d
* semanage: manpage update for -e
* semanage: dontaudit off should work
* semanage: locallist option does not take an argument
* sepolgen: Make use of setools optional within sepolgen
- sepolgen
* Make use of setools optional within sepolgen
* We need to support files that have a + in them
Thu May 24 14:00:00 2012 Dan Walsh - 2.1.11-18
- Make restorecon exit with an error on a bad path
Thu May 24 14:00:00 2012 Dan Walsh - 2.1.11-17
- Fix setsebool command, handling of = broken.
- Add missing error option in booleansPage
Sun May 20 14:00:00 2012 Dan Walsh - 2.1.11-16
- Fix sepolgen to use realpath on executables handed to it. - Brian Bickford
Fri May 18 14:00:00 2012 Dan Walsh - 2.1.11-15
- Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
- Trigger on selinux-policy needs to change to selinux-policy-devel
- Update translations
- Fix semanage dontaudit off/on exception
Tue May 8 14:00:00 2012 Dan Walsh - 2.1.11-12
- Add -N qualifier to semanage, setsebool and semodule to allow you to update
- policy without reloading it into the kernel.
Thu May 3 14:00:00 2012 Dan Walsh - 2.1.11-11
- add some definition to the standard types available for sandboxes
Tue May 1 14:00:00 2012 Dan Walsh - 2.1.11-10
- Remove lockdown wizard
Mon Apr 30 14:00:00 2012 Dan Walsh - 2.1.11-9
- Fix semanage fcontext -E to extract the equivalance customizations.
Thu Apr 26 14:00:00 2012 Dan Walsh - 2.1.11-8
- Add mgrepl patch to have sepolgen search for -systemd rpm packages
Tue Apr 24 14:00:00 2012 Dan Walsh - 2.1.11-7
- Apply Stef Walter patch for semanage man page
Mon Apr 23 14:00:00 2012 Dan Walsh - 2.1.11-6
- Rebuild to get latest libsepol which fixes the file_name transition problems
- Update translations
- Fix calls to close fd for restorecond
Fri Apr 13 14:00:00 2012 Dan Walsh - 2.1.11-5
- Update translations
- Fix sepolgen to discover unit files in /lib/systemd/
Tue Apr 3 14:00:00 2012 Dan Walsh - 2.1.11-4
- Update translations
- Fix segfault on restorecon
Tue Apr 3 14:00:00 2012 Dan Walsh - 2.1.11-3
- Allow filename transitions to use + in a file name
Fri Mar 30 14:00:00 2012 Dan Walsh - 2.1.11-2
- Change policycoreutils-python to require selinux-policy-devel package
Thu Mar 29 14:00:00 2012 Dan Walsh - 2.1.11-1
- Update to upstream
- policycoreutils
* sandbox: do not propogate inside mounts outside
* sandbox: Removing sandbox init script, should no longer be necessary
* restorecond: Stop using deprecated interfaces for g_io
* semanage: proper auditting of user changes for LSPP
* semanage: audit message to show what record(s) and item(s) have chaged
* scripts: Update Makefiles to handle /usrmove
* mcstrans: Version should have been bumped on last check in
* seunshare: Only drop caps not the Bounding Set from seunshare
* Add bash-completion scripts for setsebool and semanage
* newrole: Use correct capng calls in newrole
* Fix infinite loop with inotify on 2.6.31 kernels
* fix ftbfs with hardening flags
* Only run setfiles if we found read-write filesystems to run it on
* update .po files
* remove empty po files
* do not fail to install if unable to make load_policy lnk file
- sepolgen
* Fix dead links to www.nsa.gov/selinux
* audit.py Dont crash if empty data is passed to sepolgen
* do not use md5 when calculating hash signatures
* fix detection of policy loads
Wed Mar 28 14:00:00 2012 Dan Walsh - 2.1.10-30
- Have sepolgen script specify the pp file with the make command. From mgrepl.
Wed Mar 21 13:00:00 2012 Dan Walsh - 2.1.10-29
- Fix sepolgen handling of unit files.
Thu Mar 8 13:00:00 2012 Dan Walsh - 2.1.10-28
- Require selinux-policy-doc
Thu Mar 8 13:00:00 2012 Dan Walsh - 2.1.10-27
- Fix unit file handling in sepolgen
Wed Feb 29 13:00:00 2012 Dan Walsh - 2.1.10-26
- Add bash_command completion for setsebool/getsebool
Mon Feb 27 13:00:00 2012 Dan Walsh - 2.1.10-25
- Disable restorecond on desktop by default
- Change seunshare to not modify the bounding set
Mon Feb 20 13:00:00 2012 Dan Walsh - 2.1.10-24
- Stop using sandbox init in post install since it no longer exists.
Thu Feb 16 13:00:00 2012 Dan Walsh - 2.1.10-23
- Change to use new selinux_current_policy_path()
Wed Feb 15 13:00:00 2012 Dan Walsh - 2.1.10-22
- Change to use new selinux_binary_policy_path()
- Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface
Fri Feb 3 13:00:00 2012 Dan Walsh - 2.1.10-21
- On full relabels we will now show a estimated percent complete rather then
just
*s.
Wed Feb 1 13:00:00 2012 Dan Walsh - 2.1.10-20
- Add unit_file.py for sepolgen
Tue Jan 31 13:00:00 2012 Dan Walsh - 2.1.10-19
- Change sepolgen to use sha256 instead of md5
Mon Jan 30 13:00:00 2012 Dan Walsh - 2.1.10-18
- Stop syslogging on full restore
- Stop syslogging when restorecon is not changing values
Fri Jan 27 13:00:00 2012 Dan Walsh - 2.1.10-17
- Change semanage to produce proper audit records for Common Criteria
- Cleanup packaging for usrmove
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-16
- fixed load_policy location
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-15
- fixed load_policy location
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-14
- fixed load_policy location
Wed Jan 25 13:00:00 2012 Harald Hoyer 2.1.10-13
- add filesystem guard
Wed Jan 25 13:00:00 2012 Harald Hoyer 2.1.10-12
- install everything in /usr
https://fedoraproject.org/wiki/Features/UsrMove
Tue Jan 24 13:00:00 2012 Dan Walsh - 2.1.10-11
- restorecond fixes:
Stop using depracated g_io interfaces
Exit with non zero exit code if wrong options given
Add -h option
Thu Jan 19 13:00:00 2012 Dan Walsh - 2.1.10-10
- Eliminate not needed Requires
Wed Jan 18 13:00:00 2012 Dan Walsh - 2.1.10-9
- fix sepolgen to not crash on echo \"\" | audit2allow
Mon Jan 16 13:00:00 2012 Dan Walsh - 2.1.10-8
- Remove sandbox init script, should no longer be necessary
Sun Jan 15 13:00:00 2012 Dan Walsh - 2.1.10-7
- Add unit file support to sepolgen, and cleanup some of the output.
Mon Jan 9 13:00:00 2012 Dan Walsh - 2.1.10-5
- Fix English in templates for sepolgen
Fri Dec 23 13:00:00 2011 Dan Walsh - 2.1.10-4
- Fix the handling of namespaces in seunshare/sandbox.
- Currently mounting of directories within sandbox is propogating to the
- parent namesspace.
Thu Dec 22 13:00:00 2011 Dan Walsh - 2.1.10-3
- Add umount code to seunshare to cleanup left over mounts of /var/tmp
Wed Dec 21 13:00:00 2011 Dan Walsh - 2.1.10-2
- Remove open_init_pty
Wed Dec 21 13:00:00 2011 Dan Walsh - 2.1.10-1
-Update to upstream
- sepolgen
* better analysis of why things broke
- policycoreutils
* Remove excess whitespace
* sandbox: Add back in . functions to sandbox.init script
* Fix Makefile to match other policycoreutils Makefiles
* semanage: drop unused translation getopt
Thu Dec 15 13:00:00 2011 Dan Walsh - 2.1.9-3
- Bump libsepol version requires rebuild
Wed Dec 7 13:00:00 2011 Dan Walsh - 2.1.9-2
- Add back accidently dropped patches for semanage
Tue Dec 6 13:00:00 2011 Dan Walsh - 2.1.9-1
- Upgrade to upstream
* sandbox: move sandbox.conf.5 to just sandbox.5
* po: Makefile use -p to preserve times to allow multilib simultatious installs
* of po files
* sandbox: Allow user to specify the DPI value for X in a sandbox
* sandbox: make sure the domain launching sandbox has at least 100 categories
* sandbox: do not try forever to find available category set
* sandbox: only complain if sandbox unable to launch
* sandbox: init script run twice is still successful
* semanage: print local and dristo equiv rules
* semanage: check file equivalence rules for conflict
* semanage: Make sure semanage fcontext -l -C prints even if local keys
* are not defined
* semanage: change src,dst to target,substitute for equivalency
* sestatus: Updated sestatus and man pages.
* Added SELinux config file man page.
* add clean target to man Makefile
Wed Nov 30 13:00:00 2011 Dan Walsh - 2.1.8-8
- Fix semange fcontext -a to check for more conflicts on equivalency
Tue Nov 29 13:00:00 2011 Dan Walsh - 2.1.8-7
- Fix dpi handling in sandbox
- Make sure semanage fcontext -l -C prints if only local equiv have changed
Wed Nov 16 13:00:00 2011 Dan Walsh - 2.1.8-6
- Add listing of distribution equivalence class from semanage fcontext -l
- Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence
Wed Nov 16 13:00:00 2011 Dan Walsh - 2.1.8-5
- Allow ~ as a valid part of a filename in sepolgen
Fri Nov 11 13:00:00 2011 Dan Walsh - 2.1.8-4
- sandbox init script should always return 0
- sandbox command needs to check range of categories and report error if not big enough
Mon Nov 7 13:00:00 2011 Dan Walsh - 2.1.8-3
- Allow user to specify DPI when running sandbox
Mon Nov 7 13:00:00 2011 Dan Walsh - 2.1.8-2
- Add Miroslav patch to return all attributes
Fri Nov 4 13:00:00 2011 Dan Walsh - 2.1.8-1
- Upgrade to policycoreutils upstream
* sandbox: Maintain the LANG environment into the sandbox
* audit2allow: use audit2why internally
* fixfiles: label /root but not /var/lib/BackupPC
* semanage: update local boolean settings is dealing with localstore
* semanage: missing modify=True
* semanage: set modified correctly
* restorecond: make restorecond dbuss-able
* restorecon: Always check return code on asprintf
* restorecond: make restorecond -u exit when terminal closes
* sandbox: introduce package name and language stuff
* semodule_package: remove semodule_unpackage on clean
* fix sandbox Makefile to support DESTDIR
* semanage: Add -o description to the semanage man page
* make use of the new realpath_not_final function
* setfiles: close /proc/mounts file when finished
* semodule: Document semodule -p in man page
* setfiles: fix use before initialized
* restorecond: Add .local/share as a directory to watch
- Upgrade to sepolgen upstream
* Ignore permissive qualifier if found in an interface
* Return name field in avc data
Mon Oct 31 13:00:00 2011 Dan Walsh - 2.1.7-6
- Rebuild versus newer libsepol
Fri Oct 28 14:00:00 2011 Dan Walsh - 2.1.7-5
- A couple of minor coverity fixes for a potential leaked file descriptor
- An an unchecked return code.
- Add ~/.local/share/
* to restorecond_user watches
Thu Oct 13 14:00:00 2011 Dan Walsh - 2.1.7-4
- Have sepolgen return name field in AVC
Thu Oct 6 14:00:00 2011 Dan Walsh - 2.1.7-3
- restorecond -u needs to watch terminal for exit if run outside of dbus.
Tue Oct 4 14:00:00 2011 Dan Walsh - 2.1.7-2
- Do not drop capabilities if running newrole as root
Fri Sep 30 14:00:00 2011 Dan Walsh - 2.1.7-1
-Update to upstream
* semanage: fix indentation error in seobject
Thu Sep 29 14:00:00 2011 Dan Walsh - 2.1.6-3
- Ignore permissive commands in interfaces
Thu Sep 29 14:00:00 2011 Dan Walsh - 2.1.6-2
- Remove gnome requirement from polgengui
Mon Sep 19 14:00:00 2011 Dan Walsh - 2.1.6-1
-Update to upstream
policycoreutils-2.1.6
* sepolgen-ifgen: new attr-helper does something
* audit2allow: use alternate policy file
* audit2allow: sepolgen-ifgen use the attr helper
* setfiles: switch from stat to stat64
* setfiles: Fix potential crash using dereferenced ftsent
* setfiles: do not wrap
* output at 80 characters
* sandbox: add -Wall and -Werror to makefile
* sandbox: add sandbox cgroup support
* sandbox: rewrite /tmp handling
* sandbox: do not bind mount so much
* sandbox: add level based kill option
* sandbox: cntrl-c should kill entire process control group
* Create a new preserve_tunables flag in sepol_handle_t.
* semanage: show running and disk setting for booleans
* semanage: Dont print heading if no items selected
* sepolgen: audit2allow is mistakakenly not allowing valid module names
* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
* More files to ignore
* tree: default make target to all not install
* sandbox: do not load unused generic init functions
sepolgen-1.1.2
* src: sepolgen: add attribute storing infrastructure
* Change perm-map and add open to try to get better results on
* look for booleans that might solve problems
* sepolgen: audit2allow is mistakakenly not allowing valid module names
* tree: default make target to all not install
Wed Sep 14 14:00:00 2011 Dan Walsh - 2.1.5-6
- Change separator on -L from ; to :
Thu Sep 8 14:00:00 2011 Dan Walsh - 2.1.5-5
- Add back lockdown wizard for booleans using pywebkitgtk
Wed Sep 7 14:00:00 2011 Dan Walsh - 2.1.5-4
- Maintain the LANG environment Variable into the sandbox
- Change restorecon/setfiles to only change type part of the context unless
-f qualifier is given
Tue Sep 6 14:00:00 2011 Dan Walsh - 2.1.5-3
- Remove lockdown wizard, since gtkhtml2 is no longer supported.
Fri Sep 2 14:00:00 2011 Dan Walsh - 2.1.5-2
- Allow setfiles and restorecon to use labeledprefix to speed up processing
and limit memory.
Tue Aug 30 14:00:00 2011 Dan Walsh - 2.1.5-1
-Update to upstream
* policycoreutils
* setfiles: Fix process_glob to handle error situations
* sandbox: Allow seunshare to run as root
* sandbox: trap sigterm to make sure sandbox
* sandbox: pass DPI from the desktop
* sandbox: seunshare: introduce helper spawn_command
* sandbox: seunshare: introduce new filesystem helpers
* sandbox: add -C option to not drop
* sandbox: split seunshare caps dropping
* sandbox: use dbus-launch
* sandbox: numerous simple updates to sandbox
* sandbox: do not require selinux context
* sandbox: Makefile: new man pages
* sandbox: rename dir to srcdir
* sandbox: allow users specify sandbox window size
* sandbox: check for paths up front
* sandbox: use defined values for paths rather
* sandbox: move seunshare globals to the top
* sandbox: whitespace fix
* semodule_package: Add semodule_unpackage executable
* setfiles: get rid of some stupid globals
* setfiles: move exclude_non_seclabel_mounts to a generic location
* sepolgen
* refparser: include open among valid permissions
* refparser: add support for filename_trans rules
Thu Aug 18 14:00:00 2011 Dan Walsh - 2.1.4-2
- Fix bug in glob handling for restorecon
Thu Aug 18 14:00:00 2011 Dan Walsh - 2.1.4-1
-Update to upstream
2.1.4 2011-08-17
* run_init: clarification of the usage in the
* semanage: fix usage header around booleans
* semanage: remove useless empty lines
* semanage: update man page with new examples
* semanage: update usage text
* semanage: introduce file context equivalencies
* semanage: enable and disable modules
* semanage: output all local modifications
* semanage: introduce extraction of local configuration
* semanage: cleanup error on invalid operation
* semanage: handle being called with no arguments
* semanage: return sooner to save CPU time
* semanage: surround getopt with try/except
* semanage: use define/raise instead of lots of
* semanage: some options are only valid for
* semanage: introduce better deleteall support
* semanage: do not allow spaces in file
* semanage: distinguish between builtin and local permissive
* semanage: centralized ip node handling
* setfiles: make the restore function exclude() non-static
* setfiles: use glob to handle ~ and
* fixfiles: do not hard code types
* fixfiles: stop trying to be smart about
* fixfiles: use new kernel seclabel option
* fixfiles: pipe everything to cat before sending
* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
* semodule: support for alternative root paths
2.1.3 2011-08-03
* semanage: fix indention
* semodule_package: fix man page typo
* semodule_expand: update man page with -a
* semanage: handle os errors
* semanage: fix traceback with bad options
* semanage: show usage on -h or --help
* semanage: introduce more deleteall options
* semanage: verify ports < 65536
* transaction into semanageRecords
* make get_handle a method of semanageRecords
* remove a needless blank line
* make process_one error if not initialized correctly
* fixfiles: correct usage for r_opts.rootpath
* put -p in help for restorecon and
* fixfiles: do not try to only label
* fixfiles clean up /var/run and /var/lib/debug
* fixfiles delete tmp sockets and pipes rather
* fixfile use find -delete instead of pipe
* chcat man page typo
* add man page for genhomedircon
* setfiles fix typo
* setsebool should inform users they need to
* setsebool typos
* open_init_tty man page typos
* Don\'t add user site directory to sys.path
* newrole retain CAP_SETPCAP
2.1.2 2011-08-02
* seunshare: define _GNU_SOURCE earlier
* make ignore_enoent do something
* restorecond: first user logged in is not noticed
* Repo: update .gitignore
2.1.1 2011-08-01
* Man page updates
* restorecon fix for bad inotify assumptions
2.1.0 2011-07-27
* Release, minor version bump
Tue Jul 26 14:00:00 2011 Dan Walsh 2.0.86-20
- Fix sepolgen usage statement
- Stop using -k insandbox
- Fix seunshare usage statement
Thu Jul 7 14:00:00 2011 Dan Walsh 2.0.86-18
- Change seunshare to send kill signals to the childs session.
- Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.
Wed Jul 6 14:00:00 2011 Dan Walsh 2.0.86-17
- Add -k qualifier to seunshare to have it attempt to kill all processes with
the matching MCS label.
Tue Jul 5 14:00:00 2011 Dan Walsh 2.0.86-16
- Add -C option to sandbox and seunshare to maintain capabilities, otherwise
the bounding set will be dropped.
- Change --cgroups short name -c rather then -C for consistancy
- Fix memory and fd leaks in seunshare
Wed Jun 29 14:00:00 2011 Jóhann B. Guðmundsson - 2.0.86-15
- Introduce systemd unit file for restorecond drop SysV support
Mon Jun 13 14:00:00 2011 Dan Walsh 2.0.86-14
- Do not drop capability bounding set in seunshare, this allows sandbox to
- run setuid apps.
Fri Jun 10 14:00:00 2011 Dan Walsh 2.0.86-13
- Add semanage-bash-completion.sh script
Tue Jun 7 14:00:00 2011 Dan Walsh 2.0.86-12
- Remove mount -o bind calls from sandbox init script
- pam_namespace now has this built in.
Tue Jun 7 14:00:00 2011 Dan Walsh 2.0.86-11
- Pass desktop dpi to sandbox Xephyr window
Mon Jun 6 14:00:00 2011 Dan Walsh 2.0.86-10
- Allow semodule to pick alternate root for selinux files
- Add ~/.config/
* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.
Wed May 25 14:00:00 2011 Dan Walsh 2.0.86-9
- Fix var_spool template read_spool_files
- Fix sepolgen to handle filename transitions
Mon May 23 14:00:00 2011 Dan Walsh 2.0.86-8
- Templates cleanedup by Dominic Grift
Fri Apr 29 14:00:00 2011 Dan Walsh 2.0.86-7
- Clean up some of the templates for sepolgen
Fri Apr 22 14:00:00 2011 Dan Walsh 2.0.86-6
- Apply patches from Christoph A.
* fix sandbox title
* stop xephyr from li
- Also ignore errors on sandbox include of directory missing files
Thu Apr 21 14:00:00 2011 Dan Walsh 2.0.86-5
- rebuild versus latest libsepol
Mon Apr 18 14:00:00 2011 Dan Walsh 2.0.86-4
- Change fixfiles restore to delete unlabeled sockets in /tmp
Mon Apr 18 14:00:00 2011 Dan Walsh 2.0.86-2
- rebuild versus latest libsepol
Tue Apr 12 14:00:00 2011 Dan Walsh 2.0.86-1
- Update to upstream
* Use correct color range in mcstrand by Richard Haines.
Mon Apr 11 14:00:00 2011 Dan Walsh 2.0.85-30
- Add Elia Pinto patches to allow user to specify directories to ignore
Tue Apr 5 14:00:00 2011 Dan Walsh 2.0.85-29
- Fix policycoreutils-sandbox description
Tue Mar 29 14:00:00 2011 Dan Walsh 2.0.85-28
- rsynccmd should run outside of execcon
Thu Mar 24 13:00:00 2011 Dan Walsh 2.0.85-27
- Fix semange node handling of ipv6 addresses
Wed Mar 23 13:00:00 2011 Dan Walsh 2.0.85-26
- Fix sepolgen-ifgen call, add -p option
Wed Mar 23 13:00:00 2011 Dan Walsh 2.0.85-25
- Fix sepolgen-ifgen call
Fri Mar 18 13:00:00 2011 Dan Walsh 2.0.85-24
- Fix rsync command to work if the directory is old.
- Fix all tests
Wed Mar 16 13:00:00 2011 Dan Walsh 2.0.85-23
- Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node
Wed Mar 16 13:00:00 2011 Dan Walsh 2.0.85-22
- Return to original seunshare man page
Fri Mar 11 13:00:00 2011 Dan Walsh 2.0.85-21
- change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_
*
- This will allow default sandboxes to work on NFS homedirs without allowing
access to homedir data
Fri Mar 11 13:00:00 2011 Dan Walsh 2.0.85-20
- Change sepolgen-ifgen to search all available policy files
- Exit in restorecond if it can not find a UID in the passwd database
Wed Mar 9 13:00:00 2011 Dan Walsh 2.0.85-19
- Fix portspage in system-config-selinux to not crash
- More fixes for seunshare from Tomas Hoger
Tue Mar 8 13:00:00 2011 Dan Walsh 2.0.85-18
- put back in old handling of -T in sandbox command
- Put back setsid in seunshare
- Fix rsync to maintain times
Tue Mar 8 13:00:00 2011 Dan Walsh 2.0.85-17
- Use rewritten seunshare from thoger
Mon Mar 7 13:00:00 2011 Dan Walsh 2.0.85-16
- Require python-IPy for policycoreutils-python package
- Fixes for sepologen
- Usage statement needs -n name
- Names with _ are being prevented
- dbus apps should get _chat interface
Thu Mar 3 13:00:00 2011 Dan Walsh 2.0.85-15
- Fix error message in seunshare, check for tmpdir existance before unlink.
Fri Feb 25 13:00:00 2011 Dan Walsh 2.0.85-13
- Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
- Only allow names in polgengui that contain letters and numbers
- Fix up node handling in semanage command
- Update translations
Wed Feb 9 13:00:00 2011 Fedora Release Engineering - 2.0.85-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
Thu Feb 3 13:00:00 2011 Dan Walsh 2.0.85-11
- Fix sandbox policy creation with udp connect ports
Thu Feb 3 13:00:00 2011 Dan Walsh 2.0.85-10
- Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
- Cleanup chcat man page
Wed Feb 2 13:00:00 2011 Dan Walsh 2.0.85-9
- Report full errors on OSError on Sandbox
Fri Jan 21 13:00:00 2011 Dan Walsh 2.0.85-8
- Fix newrole hanlding of pcap
Wed Jan 19 13:00:00 2011 Dan Walsh 2.0.85-7
- Have restorecond watch more directories in homedir
Fri Jan 14 13:00:00 2011 Dan Walsh 2.0.85-6
- Add sandbox to sepolgen
Thu Jan 6 13:00:00 2011 Dan Walsh 2.0.85-4
- Fix proper handling of getopt errors
- Do not allow modules names to contain spaces
Wed Jan 5 13:00:00 2011 Dan Walsh 2.0.85-3
- Polgengui raises the wrong type of exception. #471078
- Change semanage to not allow it to semanage module -D
- Change setsebool to suggest run as root on failure
Wed Dec 22 13:00:00 2010 Dan Walsh 2.0.85-2
- Fix restorecond watching utmp file for people logging in our out
Tue Dec 21 13:00:00 2010 Dan Walsh 2.0.85-1
- Update to upstream
Thu Dec 16 13:00:00 2010 Dan Walsh 2.0.84-5
- Change to allow sandbox to run on nfs homedirs, add start python script
Wed Dec 15 13:00:00 2010 Dan Walsh 2.0.84-4
- Move seunshare to sandbox package
Mon Nov 29 13:00:00 2010 Dan Walsh 2.0.84-3
- Fix sandbox to show correct types in usage statement
Mon Nov 29 13:00:00 2010 Dan Walsh 2.0.84-2
- Stop fixfiles from complaining about missing dirs
Mon Nov 22 13:00:00 2010 Dan Walsh 2.0.84-1
- Update to upstream
- List types available for sandbox in usage statement
Mon Nov 22 13:00:00 2010 Dan Walsh 2.0.83-37
- Don\'t report error on load_policy when system is disabled.
Mon Nov 8 13:00:00 2010 Dan Walsh 2.0.83-36 | |
