|
|
|
|
Changelog for policycoreutils-restorecond-2.5-9.el7.i686.rpm :
Wed Oct 5 14:00:00 2016 Petr Lautrbach 2.5-9 - sandbox: create a new session for sandboxed processes - CVE-2016-7545 - sandbox: do not try to setup directories without -X or -M
Fri Aug 26 14:00:00 2016 Petr Lautrbach 2.5-8 - audit2allow: tests should use local copy not system - audit2allow: remove audit2why so that it gets symlinked - semanage: fix man page and help message for import option - semanage: fix error message for fcontext -m - semanage: Fix semanage fcontext -D - semanage: Correct fcontext auditing - semanage: Default serange to \"s0\" for port modify - semanage: Use socket.getprotobyname for protocol - semanage: fix modify action in node and interface
Wed Aug 10 14:00:00 2016 Petr Lautrbach 2.5-7 - fixfiles: Pass -n to restorecon for fixfiles check - sepolicy: Check get_rpm_nvr_list() return value - Don\'t use subprocess.getstatusoutput() in Python 2 code - semanage: Add auditing of changes in records - Remove unused \'q\' from semodule getopt string
Wed Aug 3 14:00:00 2016 Petr Lautrbach 2.5-6.2 - open_init_pty: Do not error on EINTR - Fix [-s STORE] typos in semanage - Don\'t use subprocess.getstatusoutput() in Python 2 code
Thu Jul 14 14:00:00 2016 Petr Lautrbach - 2.5-5.1 - Update translations
Thu Jul 7 14:00:00 2016 Petr Lautrbach - 2.5-4 - Use patches from RHEL-7.2 to avoid some regressions
Mon Jun 27 14:00:00 2016 Petr Lautrbach - 2.5-3 - Update sandbox types in sandbox manual - Fix typos in semanage manpages - Fix the documentation of -l,--list for semodule - Minor fix in a French translation - Fix the extract example in semodule.8 - Update sandbox.8 man page - Remove typos from chcat --help - Fix multiple spelling errors - hll/pp: Warn if module name different than output filename
Mon Apr 11 14:00:00 2016 Petr Lautrbach - 2.5-2 - sepolgen: Add support for TYPEBOUNDS statement in INTERFACE policy files (#1319338) - Add documentation for MCS separated domains - Move svirt man page out of libvirt into its own
Tue Feb 23 13:00:00 2016 Petr Lautrbach 2.5-1 - Update to upstream release 2016-02-23
Tue Oct 6 14:00:00 2015 Petr Lautrbach 2.2.5-20 - seunshare: Try to use setcurrent before setexec Resolves: rhbz#1268813
Wed Aug 19 14:00:00 2015 Petr Lautrbach 2.2.5-19 - Revert previous changes
Fri Jul 10 14:00:00 2015 Petr Lautrbach 2.2.5-18 - fixfiles: Fix several spellcheck warnings
Thu Jul 9 14:00:00 2015 Petr Lautrbach 2.2.5-17 - Fix handling of Forking daemon, to allow systemd to handle it better Resolves: rhbz#1186648 - Fix typo in semanage args for minimum policy store Resolves: rhbz#1208797 - Allow to define sock file in /etc directory Resolves: rhbz#1188360
Tue Jul 7 14:00:00 2015 Petr Lautrbach 2.2.5-16 - semanage: Use OrderedDict for list of fcontexts Resolves: rhbz#1206769 - fixfiles: Cover file_context.XXX.homedir Resolves: rhbz#1186640
Mon Nov 10 13:00:00 2014 Miroslav Grepl 2.2.5-15 - Fix sepolicy.search() to get good results everytime. Resolves:#1092356
Mon Oct 20 14:00:00 2014 Petr Lautrbach 2.2.5-14 - Fix semanage\'s man pages and help output Resolves: #1085246
Mon Sep 29 14:00:00 2014 Miroslav Grepl - 2.2.5-13 - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error Resolves:#1082956 - Make fixfiles_exclude_dirs working if there is a substituion for the given directory Resolves:#1082676 - Add ability to list the actual active modules Resolves:#1075023 - Update XDG_RUNTIME_DIR directory Resolves:#1112811 - Fix semanage man page to talk about semanage- * (8) man pages. Resolves:#1084390
Fri Jun 13 14:00:00 2014 Miroslav Grepl - 2.2.5-12 - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate Resolves:#1103292
Fri Apr 4 14:00:00 2014 Dan Walsh - 2.2.5-11 - One more time - Update Translations Resolves: #1030373
Mon Mar 31 14:00:00 2014 Dan Walsh - 2.2.5-10 - Update Translations Resolves: #1030373
Mon Mar 31 14:00:00 2014 Dan Walsh - 2.2.5-9 - Update Translations Resolves: #1030373
Mon Mar 24 13:00:00 2014 Dan Walsh - 2.2.5-8 - Update Translations Resolves: #1030373
Sun Mar 16 13:00:00 2014 Dan Walsh - 2.2.5-7 - yum should not be required for -python package
Wed Feb 26 13:00:00 2014 Miroslav Grepl - 2.2.5-6 Fix spec file to remove run_init which is no longer used because of systemd Resolves:#825725
Thu Jan 30 13:00:00 2014 Miroslav Grepl - 2.2.5-5 - Remove default s0 range from semanage-login command. It is handled in seobject.py. Resolves:#1028106
Fri Jan 24 13:00:00 2014 Daniel Mach - 2.2.5-4 - Mass rebuild 2014-01-24
Thu Jan 16 13:00:00 2014 Dan Walsh - 2.2.5-3 - Add Miroslav patch to - Fix previously_modified_initialize() to show modified changes properly for all selections Resolves: #1049977
Wed Jan 8 13:00:00 2014 Dan Walsh - 2.2.5-2 - Do not require /usr/share/selinux/devel/Makefile to build permissive domains
Mon Jan 6 13:00:00 2014 Dan Walsh - 2.2.5-1 - Fix Mass Rebuild problems - Update to upstream * Ignore selevel/serange if MLS is disabled from Sven Vermeulen. Resolves: #1043489
Fri Jan 3 13:00:00 2014 Dan Walsh - 2.2.4-8 - Update Tranlations - Patch from Yuri Chornoivan to fix typos
Fri Dec 27 13:00:00 2013 Daniel Mach - 2.2.4-7 - Mass rebuild 2013-12-27
Fri Dec 20 13:00:00 2013 Dan Walsh - 2.2.4-6 - Fix sepolicy gui selection for advanced screen - Update Translations - Move requires checkpolicy requirement into policycoreutils-python Resolves: #1043489
Mon Dec 16 13:00:00 2013 Dan Walsh - 2.2.4-5 - Fix semanage man page description of import command - Fix policy kit file to allow changing to permissive mode
Mon Dec 16 13:00:00 2013 Dan Walsh - 2.2.4-4 - Fix broken dependencies.
Fri Dec 13 13:00:00 2013 Dan Walsh - 2.2.4-3 - Break out python3 code into separate package
Fri Dec 6 13:00:00 2013 Dan Walsh - 2.2.4-2 - Add mgrepl patch - ptrace should be a part of deny_ptrace boolean in TEMPLATETYPE_admin
Tue Dec 3 13:00:00 2013 Dan Walsh - 2.2.4-1 - Update to upstream * Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems. - Add patches for sepolicy gui from mgrepl to Fix advanced_item_button_push() to allow to select an application in advanced search menu Fix previously_modified_initialize() to show modified changes properly for all selections
Fri Nov 22 13:00:00 2013 Dan Walsh - 2.2.3-1 - Update to upstream * Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh. * Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh. - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate
Wed Nov 20 13:00:00 2013 Dan Walsh - 2.2.2-2 - Fix selinux-polgengui, get_all_modules call
Fri Nov 15 13:00:00 2013 Dan Walsh - 2.2.2-1 Resolves: #1002529 Resolves: #924105 Resolves: #918140 Resolves: #1028096
- Speed up startup time of sepolicy gui - Clean up ports screen to only show enabled ports. - Update to upstream * Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh. * Make yum/extract_rpms optional for sepolicy generate from Dan Walsh. * Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.
Wed Nov 13 13:00:00 2013 Dan Walsh - 2.2-2 - Shift around some of the files to more appropriate packages. * semodule_ * packages are required for devel.
Wed Nov 13 13:00:00 2013 Dan Walsh - 2.2-1 - Update to upstream * Properly build the swig exception file from Laurent Bigonville. * Fix man pages from Laurent Bigonville. * Support overriding PATH and INITDIR in Makefile from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville. * Fix init_policy warning from Laurent Bigonville. * Fix semanage logging from Laurent Bigonville. * Open newrole stdin as read/write from Sven Vermeulen. * Fix sepolicy transition from Sven Vermeulen. * Support overriding CFLAGS from Simon Ruderich. * Create correct man directory for run_init from Russell Coker. * restorecon GLOB_BRACE change from Michal Trunecka. * Extend audit2why to report additional constraint information. * Catch IOError errors within audit2allow from Dan Walsh. * semanage export/import fixes from Dan Walsh. * Improve setfiles progress reporting from Dan Walsh. * Document setfiles -o option in usage from Dan Walsh. * Change setfiles to always return -1 on failure from Dan Walsh. * Improve setsebool error r eporting from Dan Walsh. * Major overhaul of gui from Dan Walsh. * Fix sepolicy handling of non-MLS policy from Dan Walsh. * Support returning type aliases from Dan Walsh. * Add sepolicy tests from Dan Walsh. * Add org.selinux.config.policy from Dan Walsh. * Improve range and user input checking by semanage from Dan Walsh. * Prevent source or target arguments that end with / for substitutions from Dan Walsh. * Allow use of <> for semanage fcontext from Dan Walsh. * Report customized user levels from Dan Walsh. * Support deleteall for restoring disabled modules from Dan Walsh. * Improve semanage error reporting from Dan Walsh. * Only list disabled modules for module locallist from Dan Walsh. * Fix logging from Dan Walsh. * Define new constants for file type character codes from Dan Walsh. * Improve bash completions from Dan Walsh. * Convert semanage to argparse from Dan Walsh (originally by Dave Quigley). * Add semanage tests from Dan Walsh. * Split semanage man pages from Dan Walsh. * Move bash completion scripts from Dan Walsh. * Replace genhomedircon script with a link to semodule from Dan Walsh. * Fix fixfiles from Dan Walsh. * Add support for systemd service for restorecon from Dan Walsh. * Spelling corrections from Dan Walsh. * Improve sandbox support for home dir symlinks and file caps from Dan Walsh. * Switch sandbox to openbox window manager from Dan Walsh. * Coalesce audit2why and audit2allow from Dan Walsh. * Change audit2allow to append to output file from Dan Walsh. * Update translations from Dan Walsh. * Change audit2why to use selinux_current_policy_path from Dan Walsh.
Tue Nov 12 13:00:00 2013 Dan Walsh - 2.1.14-89 - Update to latest sepolicy tool chain. - Document semodule -P - Verify input to semanage permissive -a is a valid domain. - Assigning login user with semanage login, range should default to user record
Wed Oct 16 14:00:00 2013 Dan Walsh - 2.1.14-88 - Cleanup errors found by pychecker - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs Resolves: #1018913
Fri Oct 11 14:00:00 2013 Dan Walsh - 2.1.14-87 - sepolicy gui - mgrepl fixes for users and login - Update Translations.
Fri Oct 11 14:00:00 2013 Dan Walsh - 2.1.14-86 - sepolicy gui - mgrepl added delete screens for users and login - Fix lots of bugs. - Update Translations.
Fri Oct 4 14:00:00 2013 Dan Walsh - 2.1.14-85 - Fixes for fixfiles * exclude_from_dirs should apply to all types of restorecon calls * fixfiles check now works * exit with the correct status
- semanage no longer import selinux
Wed Oct 2 14:00:00 2013 Dan Walsh - 2.1.14-84 - Fixes for sepolicy gui - Fix setsebool to return 0 on success - Update Po
Mon Sep 30 14:00:00 2013 Dan Walsh - 2.1.14-83 - Fix sizes of help screens in sepolicy gui
Sat Sep 28 14:00:00 2013 Dan Walsh - 2.1.14-82 - Improvements to sepolicy gui - Add more help information - Cleanup code - Add deny_ptrace on lockdown screen - Make unconfined/permissivedomains lockdown work - Add more support for file equivalency
Wed Sep 18 14:00:00 2013 Dan Walsh - 2.1.14-81 - Add back in the help png files - Begin Adding support for file equivalency.
Wed Sep 4 14:00:00 2013 Dan Walsh - 2.1.14-80 - Random fixes for sepolicy gui * Do not prompt for password until you make a change * Add user mappings and selinux users page * lots of code cleanup
- Verify homedir is owned by user before mounting over it with seunshare - Fix fixfiles to handle Relabel properly - Fix semanage fcontext -e / command to allow \"/\"
Wed Sep 4 14:00:00 2013 Dan Walsh - 2.1.14-79 - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names - Additional help screens for sepolicy gui
Tue Sep 3 14:00:00 2013 Dan Walsh - 2.1.14-78 - Random fixes for sepolicy gui - Update Translations
Fri Aug 30 14:00:00 2013 Dan Walsh - 2.1.14-77 - Add help screens for each page - Fixes for system page
Mon Aug 26 14:00:00 2013 Dan Walsh - 2.1.14-76 - Add Miroslav Grepl Patch to handle semanage -i and semanage -o better - Update Translations
Thu Aug 15 14:00:00 2013 Dan Walsh - 2.1.14-75 - Update sepolicy gui code, cleanups and add file transition tab - Fix semanage fcontext -a --ftype code to work.
Wed Aug 7 14:00:00 2013 Dan Walsh - 2.1.14-74 - If policy is not installed get_bools should not crash
Tue Aug 6 14:00:00 2013 Dan Walsh - 2.1.14-72 - Update sepolicy gui code, cleanups and add file transition tab - Fix semanage argparse problems
Fri Aug 2 14:00:00 2013 Dan Walsh - 2.1.14-71 - Update sepolicy gui code, adding dbus calls - Update Translations
Fri Jul 26 14:00:00 2013 Dan Walsh - 2.1.14-70 - Fix semanage argparse bugs - Update Translations - Add test suite for semanage command lines
Wed Jul 24 14:00:00 2013 Dan Walsh - 2.1.14-69 - Fix semanage argparse bugs
Tue Jul 23 14:00:00 2013 Dan Walsh - 2.1.14-68 - Fix bugs introduced by previous patch. semanage port - Update Translations - Add test suite for sepolicy command lines
Fri Jul 19 14:00:00 2013 Dan Walsh - 2.1.14-67 - Fix bugs introduced by previous patch. semanage port - Update Translations
Wed Jul 17 14:00:00 2013 Dan Walsh - 2.1.14-66 - Rewrite argparse code in semanage and fix reload problem.
Tue Jul 16 14:00:00 2013 Dan Walsh - 2.1.14-65 - Do not generate shell script or spec file for sepolicy generate --newtype - Update translations - Fix sepolicy generate --admin_user man page again - Fix setsebool to print less verbose error messages by default, add -V for ve
Mon Jul 15 14:00:00 2013 Dan Walsh - 2.1.14-64 - Move audit2allow and audit2why back into -python package
Wed Jul 10 14:00:00 2013 Dan Walsh - 2.1.14-63 - Update sepolicy gui. - Error out of you call sepolicy gui without policycoreutils-gui package installed - Fix semanage login -d command - Update Translations
Wed Jul 10 14:00:00 2013 Dan Walsh - 2.1.14-62 - Update sepolicy gui.
Fri Jul 5 14:00:00 2013 Dan Walsh - 2.1.14-61 - Add Ryan Hallisey sepolicy gui. - Update Translations
Mon Jun 24 14:00:00 2013 Dan Walsh - 2.1.14-60 - Fix semanage module error handling
Sun Jun 23 14:00:00 2013 Dan Walsh - 2.1.14-59 - Add back default exception handling for errors, which argparse rewrite removed.
Fri Jun 21 14:00:00 2013 Dan Walsh - 2.1.14-58 - Fix generation of booleans in man pages
Fri Jun 21 14:00:00 2013 Dan Walsh - 2.1.14-57 - Remove requires for systemd-sysv - Move systemd-units require to restorecond section - Update Tranlasions - More sepolicy interfaces for gui - Cleanup man pages for sepolicy generate
Wed Jun 19 14:00:00 2013 Dan Walsh - 2.1.14-56 - Fix semanage export/import commands - Fix semange module command - Remove --version option from sandbox
Tue Jun 18 14:00:00 2013 Dan Walsh - 2.1.14-55 - Add man page doc for --role and bash complestion support for sepolicy --role
Tue Jun 18 14:00:00 2013 Dan Walsh - 2.1.14-54 - Make fcdict return a dictionary of dictionaries - Fix for sepolicy manpage
Mon Jun 17 14:00:00 2013 Dan Walsh - 2.1.14-53 - Add new man pages for each semanage subsection
Mon Jun 17 14:00:00 2013 Dan Walsh - 2.1.14-52 - Fix handling of sepolicy network sorting. - Additional interfaces needed for sepolicy gui
Thu Jun 6 14:00:00 2013 Dan Walsh - 2.1.14-51 - Fix handling of semanage args
Thu Jun 6 14:00:00 2013 Dan Walsh - 2.1.14-50 - Fix sepolicy generate --confined_admin to generate tunables - Add new interface to generate entrypoints for use with new gui
Wed Jun 5 14:00:00 2013 Dan Walsh - 2.1.14-49 - Fix handing of semanage with no args
Tue Jun 4 14:00:00 2013 Dan Walsh - 2.1.14-48 - Fix audit2allow -o to open file for append - Fix the name of the spec file generated in the build script
Fri May 31 14:00:00 2013 Dan Walsh - 2.1.14-47 - Fix mgrepl patch to support all semanage command parsing
Sun May 26 14:00:00 2013 Dan Walsh - 2.1.14-46 - Fix the name of the spec file generated in the build script - Add mgrepl patch to support argparse for semanage command parsing
Tue May 21 14:00:00 2013 Dan Walsh - 2.1.14-45 - Fix sandbox to always use sandbox_file_t, so generated policy will work. - Update Translations
Thu May 16 14:00:00 2013 Dan Walsh - 2.1.14-44 - Fix sepolicy-generate man page to clear up options/policy type - Add Miroslav Grepl to not generate man page when doing sepolicy generate --customize - Add support for executing semanage user within spec file - Fix generation of confined admin domains, to handle booleans properly.
Tue May 14 14:00:00 2013 Dan Walsh - 2.1.14-43 - Need to handle gziped policy.xml as well as not compressed.
Tue May 14 14:00:00 2013 Dan Walsh - 2.1.14-42 - Add support for Xephyr -resizable, so sandbox can now resize window - Add support for compressed policy.xml - Miroslav Grepl patch to allow sepolicy interface on individual interface fil - Also add capability to test interfaces for correctness.
Mon May 13 14:00:00 2013 Dan Walsh - 2.1.14-41 - Apply patches from Sven Vermeulen for sepolgen to fix typos.
Mon May 13 14:00:00 2013 Dan Walsh - 2.1.14-40 - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.
Sun May 12 14:00:00 2013 Dan Walsh - 2.1.14-39 - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time - Add Sven Vermeulen patches to cleanup man pages
Fri May 10 14:00:00 2013 Dan Walsh - 2.1.14-38 - No longer run sepolgen-ifgen at install time. - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed. - Update Translations
Mon Apr 22 14:00:00 2013 Dan Walsh - 2.1.14-37 - Fix exceptionion hanling in audit2allow -o - Generate Man pages for everydomain, not just ones with exec_t entrypoints - sepolicy comunicate should return ValueError not TypeError - Trim header line in sepolicy manpage to use less space - Add missing options to restorecon man page
Thu Apr 11 14:00:00 2013 Dan Walsh - 2.1.14-36 - Raise proper Exception on sepolicy communicate with invalid value
Wed Apr 10 14:00:00 2013 Dan Walsh - 2.1.14-35 - Update translations - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.
Tue Apr 9 14:00:00 2013 Dan Walsh - 2.1.14-34 - Update translations - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.
Mon Apr 8 14:00:00 2013 Dan Walsh - 2.1.14-33 - Update translations - Add missing man pages and fixup existing man pages
Wed Apr 3 14:00:00 2013 Dan Walsh - 2.1.14-32 - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel - Apply Miroslav Grepl Patches for sepolicy -- Fix generate mutually groups option handling -- EUSER is used for existing policy -- customize options can be used together with admin_domain option -- Fix manpage.py to generate correct man pages for SELinux users -- Fix policy *.te file generated by customize+writepaths options -- Fix install script for confined_admin option
Mon Apr 1 14:00:00 2013 Dan Walsh - 2.1.14-31 - Add post install scripts for gui to make sure Icon Cache is refreshed. - Fix grammar issue in secon man page - Update Translations
Thu Mar 28 13:00:00 2013 Dan Walsh - 2.1.14-30 - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7 - Add support for returning alias data to sepolicy.info python bindings
Wed Mar 27 13:00:00 2013 Dan Walsh - 2.1.14-28 - Fix audit2allow output to better align analysys with the allow rules - Apply Miroslav Grepl patch to clean up sepolicy generate usage - Apply Miroslav Grepl patch to fixupt handing of admin_user generation - Update Tranlslations
Wed Mar 27 13:00:00 2013 Dan Walsh - 2.1.14-27 - Allow semanage fcontext -a -t \"<>\" ... to work
Mon Mar 25 13:00:00 2013 Dan Walsh - 2.1.14-26 - Can not unshare IPC in sandbox, since it blows up Xephyr - Remove bogus error message sandbox about reseting setfsuid
Thu Mar 21 13:00:00 2013 Dan Walsh - 2.1.14-25 - Fix sepolicy generate --customize to generate policy with -w commands
Thu Mar 21 13:00:00 2013 Dan Walsh - 2.1.14-24 - sepolgen-ifgen needs to handle filename transition rules containing \":\"
Tue Mar 19 13:00:00 2013 Dan Walsh - 2.1.14-23 - sepolicy manpage: - use nroff instead of man2html - Remove checking for name of person who created the man page - audit2allow - Fix output to show the level that is different.
Thu Mar 14 13:00:00 2013 Dan Walsh - 2.1.14-22 - Fix newrole to not drop capabilities from the bounding set. - Stop dropping capabilities from its children. - Add better error messages. - Change location of bash_completion files to /usr/share/bash-completion/compl
Mon Mar 11 13:00:00 2013 Dan Walsh - 2.1.14-21 - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page
Thu Mar 7 13:00:00 2013 Dan Walsh - 2.1.14-20 - Mention creation of permissive domains in sepolicy generate man page - Change sepolicy manpage to use shortname with an \"_\" to stop accidently grabbing unrelated types for a domain. - Fix audit2allow to show better information on constraint violations.
Wed Mar 6 13:00:00 2013 Dan Walsh - 2.1.14-19 - Have restorecon exit -1 on errors for consistancy.
Tue Mar 5 13:00:00 2013 Dan Walsh - 2.1.14-18 - Need to provide a value to semanage boolean -m
Mon Mar 4 13:00:00 2013 Dan Walsh - 2.1.14-17 - Fix cut and paste errors for sepolicy network command
Fri Mar 1 13:00:00 2013 Dan Walsh - 2.1.14-16 - Fix sepoicy interface to work properly
Thu Feb 28 13:00:00 2013 Dan Walsh - 2.1.14-15 - Fix fixfiles to use exclude_dirs on fixfiles restore
Thu Feb 28 13:00:00 2013 Dan Walsh - 2.1.14-14 - Allow users with symlinked homedirs to work. call realpath on homedir - Fix sepolicy reorganization of helper functions.
Sun Feb 24 13:00:00 2013 Dan Walsh - 2.1.14-13 - Update trans - Fix sepolicy reorganization of helper functions.
Sun Feb 24 13:00:00 2013 Rahul Sundaram - 2.1.14-13 - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247 - clean up spec to follow current guidelines
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-12 - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-11 - sepolgen-ifgen should use the current policy path if selinux is enabled
Fri Feb 22 13:00:00 2013 Dan Walsh - 2.1.14-10 - Fix sepolicy to be able to work on an SELinux disabled system. - Needed to be able to build man pages in selinux-policy package
Thu Feb 21 13:00:00 2013 Dan Walsh - 2.1.14-9 - Add yum to requires of policycoreutils-python since sepolicy requires it.
Thu Feb 21 13:00:00 2013 Dan Walsh - 2.1.14-8 - Sepolixy should not throw an exception on an SELinux disabled machine - Switch from using console app to using pkexec, so we will work better with policykit. - Add missing import to fix system-config-selinux startup - Add comment to pamd files about pam_rootok.so - Fix sepolicy generate to not comment out the first line
Wed Feb 20 13:00:00 2013 Dan Walsh - 2.1.14-7 - Add --root/-r flag to sepolicy manpage, - This allows us to generate man pages on the fly in the selinux-policy build
Mon Feb 18 13:00:00 2013 Dan Walsh - 2.1.14-6 - Fix newrole to retain cap_audit_write when compiled with namespace, also do not drop capabilities when run as root.
Thu Feb 14 13:00:00 2013 Dan Walsh - 2.1.14-5 - Fix man page generation and public_content description
Thu Feb 14 13:00:00 2013 Dan Walsh - 2.1.14-4 - Revert some changes which are causing the wrong policy version file to be created - Switch sandbox to start using openbox rather then matchbox - Make sepolgen a symlink to sepolicy - update translations
Wed Feb 13 13:00:00 2013 Dan Walsh - 2.1.14-3 - Fix empty system-config-selinux.png, again
Tue Feb 12 13:00:00 2013 Dan Walsh - 2.1.14-2 - Fix empty system-config-selinux.png
Thu Feb 7 13:00:00 2013 Dan Walsh - 2.1.14-1 - Update to upstream * setfiles: estimate percent progress * load_policy: make link at the destination directory * Rebuild polgen.glade with glade-3 * sepolicy: new command to unite small utilities * sepolicy: Update Makefiles and po files * sandbox: use sepolicy to look for sandbox_t * gui: switch to use sepolicy * gui: sepolgen: use sepolicy to generate * semanage: use sepolicy for boolean dictionary * add po file configuration information * po: stop running update-po on all * semanage: seobject verify policy types before allowing you to assign them. * gui: Start using Popen, instead of os.spawnl * sandbox: Copy /var/tmp to /tmp as they are the same inside * qualifier to shred content * semanage: Fix handling of boolean_sub names when using the -F flag * semanage: man: roles instead of role * gui: system-config-selinux: Catch no DISPLAY= error * setfiles: print error if no default label found * semanage: list logins file entries in semanage login -l * semanage: good error message is sepolgen python module missing * gui: system-config-selinux: do not use lokkit * secon: add support for setrans color information in prompt output * restorecond: remove /etc/mtab from default list * gui: If you are not able to read enforcemode set it to False * genhomedircon: regenerate genhomedircon more often * restorecond: Add /etc/udpatedb.conf to restorecond.conf * genhomedircon generation to allow spec file to pass in SEMODULE_PATH * fixfiles: relabel only after specific date * po: update translations * sandbox: seunshare: do not reassign realloc value * seunshare: do checking on setfsuid * sestatus: rewrite to shut up coverity
Thu Jan 31 13:00:00 2013 Dan Walsh - 2.1.12-58 - Reorginize sepolicy so all get_all functions are in main module - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.
Fri Jan 25 13:00:00 2013 Dan Walsh - 2.1.12-57 - Update to latest patches from eparis/Upstream - fixfiles onboot will write any flags handed to it to /.autorelabel. - * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore - * This should allow fixfiles -F onboot, to force a hard relabel. - Add -p to show progress on full relabel.
Tue Jan 15 13:00:00 2013 Dan Walsh - 2.1.12-56 - Additional changes for bash completsion and generate man page to match the w - Add newtype as a new qualifier to sepolicy generate. This new mechanism wil - a policy write to generate types after the initial policy has been written a - will autogenerate all of the interfaces. - I also added a -w options to allow policy writers from the command line to s - the writable directories of files. - - Modify network.py to include interface definitions for newly created port type - Standardize of te_types just like all of the other templates.
- Change permissive domains creation to raise exception if sepolgen is not ins - get_te_results no longer needs or uses the opts parameter. - The compliler was complaining so I just removed the option. - Start returning analysis data for audit2allow
Tue Jan 15 13:00:00 2013 Dan Walsh - 2.1.12-55 - Update Translations - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI - This fixes the spec file and script file getting wrong names for modules and types.
Wed Jan 9 13:00:00 2013 Dan Walsh - 2.1.12-54 - Additional patch from Miroslav to handle role attributes
Wed Jan 9 13:00:00 2013 Dan Walsh - 2.1.12-53 - Update with Miroslav patch to handle role attributes - Update Translations - import sepolicy will only throw exception on missing policy iff selinux is enabled
Sat Jan 5 13:00:00 2013 Dan Walsh - 2.1.12-52 - Update to latest patches from eparis/Upstream - secon: add support for setrans color information in prompt output - Update translations
Fri Jan 4 13:00:00 2013 Dan Walsh - 2.1.12-51 - Update translations - Fix sepolicy booleans to handle autogenerated booleans descriptions - Cleanups of sepolicy manpage - Fix crash on git_shell man page generation
Thu Jan 3 13:00:00 2013 Dan Walsh - 2.1.12-50 - Update translations - update sepolicy manpage to generate fcontext equivalence data and to list default file context paths. - Add ability to generate policy for confined admins and domains like puppet.
Thu Dec 20 13:00:00 2012 Dan Walsh - 2.1.12-49 - Fix semanage permissive , this time with the patch. - Update translations
Wed Dec 19 13:00:00 2012 Dan Walsh - 2.1.12-48 - Fix semanage permissive - Change to use correct gtk forward button - Update po
Mon Dec 17 13:00:00 2012 Dan Walsh - 2.1.12-47 - Move audit2why to -devel package
Mon Dec 17 13:00:00 2012 Dan Walsh - 2.1.12-46 - sepolicy transition was blowing up. Also cleanup output when only source is specified. - sepolicy generate should allow policy modules names that include - or _
Mon Dec 10 13:00:00 2012 Dan Walsh - 2.1.12-45 - Apply patch from Miroslav to display proper range description in man pages g - Should print warning on missing default label when run in recusive mode iff - Remove extra -R description, and fix recursive description
Thu Dec 6 13:00:00 2012 Dan Walsh - 2.1.12-44 - Additional fixes for disabled SELinux Box - system-config-selinux no longer relies on lokkit for /etc/selinux/config
Thu Dec 6 13:00:00 2012 Dan Walsh - 2.1.12-43 - sepolicy should failover to installed policy file on a disabled SELinux box, if it exists.
Wed Dec 5 13:00:00 2012 Dan Walsh - 2.1.12-42 - Update Translations - sepolicy network -d needs to accept multiple domains
Fri Nov 30 13:00:00 2012 Dan Walsh - 2.1.12-41 - Add --path as a parameter to sepolicy generate - Print warning message if program does not exists when generating policy, and do not attempt to run nm command - Fix sepolicy generate -T to not take an argument, and supress the help message - Since this is really just a testing tool
Fri Nov 30 13:00:00 2012 Dan Walsh - 2.1.12-40 - Fix sepolicy communicate to handle invalid input
Thu Nov 29 13:00:00 2012 Dan Walsh - 2.1.12-39 - Fix sepolicy network -p to handle high ports
Thu Nov 29 13:00:00 2012 Dan Walsh - 2.1.12-38 - Fix handling of manpages without entrypoints, nsswitch domains - Update Translations
Wed Nov 28 13:00:00 2012 Dan Walsh - 2.1.12-37 - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the
Tue Nov 27 13:00:00 2012 Dan Walsh - 2.1.12-36 - Fix sepolicy/__init__.py to handle _()
Wed Nov 21 13:00:00 2012 Dan Walsh - 2.1.12-35 - Add Miroslav Grepl patch to create etc_rw_t sock files policy
Fri Nov 16 13:00:00 2012 Dan Walsh - 2.1.12-34 - Fix semanage to work without policycoreutils-devel installed - Update translations
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-33 - Fix semanage login -l to list contents of /etc/selinux/POLICY/logins directory
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-32 - Fix booleansPage not showing booleans - Fix audit2allow -b
Tue Nov 13 13:00:00 2012 Dan Walsh - 2.1.12-31 - Fix sepolicy booleans again - Fix man page
Mon Nov 12 13:00:00 2012 Dan Walsh - 2.1.12-30 - Move policy generation tools into policycoreutils-devel
Mon Nov 12 13:00:00 2012 Dan Walsh - 2.1.12-29 - Document and fix sepolicy booleans - Update Translations - Fix several spelling mistakes
Wed Nov 7 13:00:00 2012 Dan Walsh - 2.1.12-27 - Only report restorecon warning for missing default label, if not running recusively - Update translations
Mon Nov 5 13:00:00 2012 Dan Walsh - 2.1.12-26 - Fix semanage booleans -l, move more boolean_dict handling into sepolicy - Update translations - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name - Fix kill function call should indicate signal_perms not kill capability - Error out cleanly in system-config-selinux, if it can not contact XServer
Mon Nov 5 13:00:00 2012 Dan Walsh - 2.1.12-25 - Remove run_init, no longer needed with systemd. - Fix sepolicy generate to not include subdirs in generated fcontext file. (mgrepl patch)
Sat Nov 3 13:00:00 2012 Dan Walsh - 2.1.12-24 - Fix manpage to generate proper man pages for alternate policy, basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as I pull the policy, policy.xml and file_contexts and file_contexts.homedir
Thu Nov 1 13:00:00 2012 Dan Walsh - 2.1.12-23 - Fix some build problems in sepolicy manpage and sepolicy transition
Tue Oct 30 13:00:00 2012 Dan Walsh - 2.1.12-22 - Add alias man pages to sepolicy manpage
Mon Oct 29 13:00:00 2012 Dan Walsh - 2.1.12-21 - Redesign sepolicy to only read the policy file once, not for every call
Mon Oct 29 13:00:00 2012 Dan Walsh - 2.1.12-20 - Fixes to sepolicy transition, allow it to list all transitions from a domain
Sat Oct 27 14:00:00 2012 Dan Walsh - 2.1.12-19 - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network
Fri Oct 26 14:00:00 2012 Dan Walsh - 2.1.12-18 - Allow sepolicy to specify the policy to generate content from
Thu Oct 25 14:00:00 2012 Dan Walsh - 2.1.12-17 - Fix semanage boolean -F to handle boolean subs
Thu Oct 25 14:00:00 2012 Dan Walsh - 2.1.12-16 - Add Miroslav Grepl patch to generate html man pages - Update Translations - Add option to sandbox to shred files before deleting
Mon Oct 22 14:00:00 2012 Dan Walsh - 2.1.12-15 - Add Requires(post) PKGNAME to sepolicy generate /usr/bin/pkg
Fri Oct 19 14:00:00 2012 Dan Walsh - 2.1.12-14 - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools. - Fix man page generator.
Wed Oct 17 14:00:00 2012 Dan Walsh - 2.1.12-13 - Remove dwalshAATTredhat.com from man pages - Fix spec file for sepolicy generate
Wed Oct 17 14:00:00 2012 Dan Walsh - 2.1.12-12 - Add missing spec.py from templates directory needed for sepolicy generate - Add /var/tmp as collection point for sandbox apps.
Tue Oct 16 14:00:00 2012 Dan Walsh - 2.1.12-11 - Handle audit2allow -b in foreign locales
Tue Oct 16 14:00:00 2012 Dan Walsh - 2.1.12-10 - Update sepolicy generate with patch to create spec file and man page. - Patch initiated by Miroslav Grepl
Wed Oct 10 14:00:00 2012 Dan Walsh - 2.1.12-9 - Fix semanage to verify that types are appropriate for commands. * Patch initiated by mgrepl * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port
Tue Oct 9 14:00:00 2012 Dan Walsh - 2.1.12-8 - Fix typo in preunstall line for restorecond - Add mgrepl patch to consolidate file context generated by sepolicy generate
Mon Oct 8 14:00:00 2012 Dan Walsh - 2.1.12-7 - Fix manpage generation, missing import - Add equiv_dict to get samba booleans into smbd_selinux - Add proper translations for booleans and remove selinux.tbl
Sat Oct 6 14:00:00 2012 Dan Walsh - 2.1.12-6 - Fix system-config-selinux to use sepolicy.generate instead of sepolgen
Thu Oct 4 14:00:00 2012 Dan Walsh - 2.1.12-5 - Add sepolicy commands, and change tools to use them.
Tue Sep 25 14:00:00 2012 Dan Walsh - 2.1.12-4 - Rebuild without bogus prebuild 64 bit seunshare app
Sun Sep 16 14:00:00 2012 Dan Walsh - 2.1.12-3 - Allow fixfiles to specify -v, so they can get verbosity rather then progress. - Fix load_file Makefile to use SBINDIR rather then real OS. - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.
Sun Sep 16 14:00:00 2012 Dan Walsh - 2.1.12-2 - Use systemd post install scriptlets
Thu Sep 13 14:00:00 2012 Dan Walsh - 2.1.12-1 - Update to upstream * genhomedircon: manual page improvements * setfiles/restorecon minor improvements * run_init: If open_init_pty is not available then just use exec * newrole: do not drop capabilities when newrole is run as * restorecon: only update type by default * scripts: Don\'t syslog setfiles changes on a fixfiles restore * setfiles: do not syslog if no changes * Disable user restorecond by default * Make restorecon return 0 when a file has changed context * setfiles: Fix process_glob error handling * semanage: allow enable/disable under -m * add .tx to gitignore * translations: commit translations from Fedora community * po: silence build process * gui: Checking in policy to support polgengui and sepolgen. * gui: polgen: search for systemd subpackage when generating policy * gui: for exploring booleans * gui: system-config-selinux gui * Add Makefiles to support new gui code * gui: remove lockdown wizard * return equivalency records in fcontext customized * semanage: option to not load new policy into kernel after * sandbox: manpage update to describe standard types * setsebool: -N should not reload policy on changes * semodule: Add -N qualifier to no reload kernel policy * gui: polgen: sort selinux types of user controls * gui: polgen: follow symlinks and get the real path to * gui: Fix missing error function * setfiles: return errors when bad paths are given * fixfiles: tell restorecon to ignore missing paths * setsebool: error when setting multiple options * semanage: use boolean subs. * sandbox: Make sure Xephyr never listens on tcp ports * sepolgen: return and output constraint violation information * semanage: skip comments while reading external configuration files * restorecond: relabel all mount runtime files in the restorecond example * genhomedircon: dynamically create genhomedircon * Allow returning of bastard matches * sepolgen: return and output constraint violation information * audit2allow: one role/type pair per line
Wed Aug 8 14:00:00 2012 Dan Walsh - 2.1.11-6 - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl
Fri Jul 27 14:00:00 2012 Dan Walsh - 2.1.11-5 - Fix sepolgen/audit2allow to handle multiple role/types in avc messages properly
Thu Jul 19 14:00:00 2012 Dan Walsh - 2.1.11-4 - Fix restorecon to generate a better percentage of completion on restorecon -R /. - Have audit2allow look at the constaint violation and tell the user whether it - is because of user,role or level
Wed Jul 11 14:00:00 2012 Dan Walsh - 2.1.11-3 - userapps is generating sandbox code in polgengui
Thu Jul 5 14:00:00 2012 Dan Walsh - 2.1.11-2 - Remove load_policy symbolic link on usrmove systems this breaks the system
Wed Jul 4 14:00:00 2012 Dan Walsh - 2.1.11-1 - Update to upstream - policycoreutils * restorecond: wrong options should exit with non-zero error code * restorecond: Add -h option to get usage command * resorecond: user: fix fd leak * mcstrans: add -f to run in foreground * semanage: fix man page range and level defaults * semanage: bash completion for modules should include -a,-m, -d * semanage: manpage update for -e * semanage: dontaudit off should work * semanage: locallist option does not take an argument * sepolgen: Make use of setools optional within sepolgen - sepolgen * Make use of setools optional within sepolgen * We need to support files that have a + in them
Thu May 24 14:00:00 2012 Dan Walsh - 2.1.11-18 - Make restorecon exit with an error on a bad path
Thu May 24 14:00:00 2012 Dan Walsh - 2.1.11-17 - Fix setsebool command, handling of = broken. - Add missing error option in booleansPage
Sun May 20 14:00:00 2012 Dan Walsh - 2.1.11-16 - Fix sepolgen to use realpath on executables handed to it. - Brian Bickford
Fri May 18 14:00:00 2012 Dan Walsh - 2.1.11-15 - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen - Trigger on selinux-policy needs to change to selinux-policy-devel - Update translations - Fix semanage dontaudit off/on exception
Tue May 8 14:00:00 2012 Dan Walsh - 2.1.11-12 - Add -N qualifier to semanage, setsebool and semodule to allow you to update - policy without reloading it into the kernel.
Thu May 3 14:00:00 2012 Dan Walsh - 2.1.11-11 - add some definition to the standard types available for sandboxes
Tue May 1 14:00:00 2012 Dan Walsh - 2.1.11-10 - Remove lockdown wizard
Mon Apr 30 14:00:00 2012 Dan Walsh - 2.1.11-9 - Fix semanage fcontext -E to extract the equivalance customizations.
Thu Apr 26 14:00:00 2012 Dan Walsh - 2.1.11-8 - Add mgrepl patch to have sepolgen search for -systemd rpm packages
Tue Apr 24 14:00:00 2012 Dan Walsh - 2.1.11-7 - Apply Stef Walter patch for semanage man page
Mon Apr 23 14:00:00 2012 Dan Walsh - 2.1.11-6 - Rebuild to get latest libsepol which fixes the file_name transition problems - Update translations - Fix calls to close fd for restorecond
Fri Apr 13 14:00:00 2012 Dan Walsh - 2.1.11-5 - Update translations - Fix sepolgen to discover unit files in /lib/systemd/
Tue Apr 3 14:00:00 2012 Dan Walsh - 2.1.11-4 - Update translations - Fix segfault on restorecon
Tue Apr 3 14:00:00 2012 Dan Walsh - 2.1.11-3 - Allow filename transitions to use + in a file name
Fri Mar 30 14:00:00 2012 Dan Walsh - 2.1.11-2 - Change policycoreutils-python to require selinux-policy-devel package
Thu Mar 29 14:00:00 2012 Dan Walsh - 2.1.11-1 - Update to upstream - policycoreutils * sandbox: do not propogate inside mounts outside * sandbox: Removing sandbox init script, should no longer be necessary * restorecond: Stop using deprecated interfaces for g_io * semanage: proper auditting of user changes for LSPP * semanage: audit message to show what record(s) and item(s) have chaged * scripts: Update Makefiles to handle /usrmove * mcstrans: Version should have been bumped on last check in * seunshare: Only drop caps not the Bounding Set from seunshare * Add bash-completion scripts for setsebool and semanage * newrole: Use correct capng calls in newrole * Fix infinite loop with inotify on 2.6.31 kernels * fix ftbfs with hardening flags * Only run setfiles if we found read-write filesystems to run it on * update .po files * remove empty po files * do not fail to install if unable to make load_policy lnk file
- sepolgen * Fix dead links to www.nsa.gov/selinux * audit.py Dont crash if empty data is passed to sepolgen * do not use md5 when calculating hash signatures * fix detection of policy loads
Wed Mar 28 14:00:00 2012 Dan Walsh - 2.1.10-30 - Have sepolgen script specify the pp file with the make command. From mgrepl.
Wed Mar 21 13:00:00 2012 Dan Walsh - 2.1.10-29 - Fix sepolgen handling of unit files.
Thu Mar 8 13:00:00 2012 Dan Walsh - 2.1.10-28 - Require selinux-policy-doc
Thu Mar 8 13:00:00 2012 Dan Walsh - 2.1.10-27 - Fix unit file handling in sepolgen
Wed Feb 29 13:00:00 2012 Dan Walsh - 2.1.10-26 - Add bash_command completion for setsebool/getsebool
Mon Feb 27 13:00:00 2012 Dan Walsh - 2.1.10-25 - Disable restorecond on desktop by default - Change seunshare to not modify the bounding set
Mon Feb 20 13:00:00 2012 Dan Walsh - 2.1.10-24 - Stop using sandbox init in post install since it no longer exists.
Thu Feb 16 13:00:00 2012 Dan Walsh - 2.1.10-23 - Change to use new selinux_current_policy_path()
Wed Feb 15 13:00:00 2012 Dan Walsh - 2.1.10-22 - Change to use new selinux_binary_policy_path() - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface
Fri Feb 3 13:00:00 2012 Dan Walsh - 2.1.10-21 - On full relabels we will now show a estimated percent complete rather then just *s.
Wed Feb 1 13:00:00 2012 Dan Walsh - 2.1.10-20 - Add unit_file.py for sepolgen
Tue Jan 31 13:00:00 2012 Dan Walsh - 2.1.10-19 - Change sepolgen to use sha256 instead of md5
Mon Jan 30 13:00:00 2012 Dan Walsh - 2.1.10-18 - Stop syslogging on full restore - Stop syslogging when restorecon is not changing values
Fri Jan 27 13:00:00 2012 Dan Walsh - 2.1.10-17 - Change semanage to produce proper audit records for Common Criteria - Cleanup packaging for usrmove
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-16 - fixed load_policy location
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-15 - fixed load_policy location
Thu Jan 26 13:00:00 2012 Harald Hoyer 2.1.10-14 - fixed load_policy location
Wed Jan 25 13:00:00 2012 Harald Hoyer 2.1.10-13 - add filesystem guard
Wed Jan 25 13:00:00 2012 Harald Hoyer 2.1.10-12 - install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove
Tue Jan 24 13:00:00 2012 Dan Walsh - 2.1.10-11 - restorecond fixes: Stop using depracated g_io interfaces Exit with non zero exit code if wrong options given Add -h option
Thu Jan 19 13:00:00 2012 Dan Walsh - 2.1.10-10 - Eliminate not needed Requires
Wed Jan 18 13:00:00 2012 Dan Walsh - 2.1.10-9 - fix sepolgen to not crash on echo \"\" | audit2allow
Mon Jan 16 13:00:00 2012 Dan Walsh - 2.1.10-8 - Remove sandbox init script, should no longer be necessary
Sun Jan 15 13:00:00 2012 Dan Walsh - 2.1.10-7 - Add unit file support to sepolgen, and cleanup some of the output.
Mon Jan 9 13:00:00 2012 Dan Walsh - 2.1.10-5 - Fix English in templates for sepolgen
Fri Dec 23 13:00:00 2011 Dan Walsh - 2.1.10-4 - Fix the handling of namespaces in seunshare/sandbox. - Currently mounting of directories within sandbox is propogating to the - parent namesspace.
Thu Dec 22 13:00:00 2011 Dan Walsh - 2.1.10-3 - Add umount code to seunshare to cleanup left over mounts of /var/tmp
Wed Dec 21 13:00:00 2011 Dan Walsh - 2.1.10-2 - Remove open_init_pty
Wed Dec 21 13:00:00 2011 Dan Walsh - 2.1.10-1 -Update to upstream - sepolgen * better analysis of why things broke - policycoreutils * Remove excess whitespace * sandbox: Add back in . functions to sandbox.init script * Fix Makefile to match other policycoreutils Makefiles * semanage: drop unused translation getopt
Thu Dec 15 13:00:00 2011 Dan Walsh - 2.1.9-3 - Bump libsepol version requires rebuild
Wed Dec 7 13:00:00 2011 Dan Walsh - 2.1.9-2 - Add back accidently dropped patches for semanage
Tue Dec 6 13:00:00 2011 Dan Walsh - 2.1.9-1 - Upgrade to upstream * sandbox: move sandbox.conf.5 to just sandbox.5 * po: Makefile use -p to preserve times to allow multilib simultatious installs * of po files * sandbox: Allow user to specify the DPI value for X in a sandbox * sandbox: make sure the domain launching sandbox has at least 100 categories * sandbox: do not try forever to find available category set * sandbox: only complain if sandbox unable to launch * sandbox: init script run twice is still successful * semanage: print local and dristo equiv rules * semanage: check file equivalence rules for conflict * semanage: Make sure semanage fcontext -l -C prints even if local keys * are not defined * semanage: change src,dst to target,substitute for equivalency * sestatus: Updated sestatus and man pages. * Added SELinux config file man page. * add clean target to man Makefile
Wed Nov 30 13:00:00 2011 Dan Walsh - 2.1.8-8 - Fix semange fcontext -a to check for more conflicts on equivalency
Tue Nov 29 13:00:00 2011 Dan Walsh - 2.1.8-7 | |