Changelog for libsemanage2-3.7-150600.132.3.x86_64.rpm :

* Mon Jul 01 2024 cathy.huAATTsuse.com- Update to version 3.7 https://github.com/SELinuxProject/selinux/releases/tag/3.7
* Bugfixes:
* libsemanage: support huge passwd entries
* Tue Dec 19 2023 cathy.huAATTsuse.com- Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6
* Add notself support for neverallow rules
* Improve man pages
* man pages: Remove the Russian translations
* Add notself and other support to CIL
* Add support for deny rules
* Translations updated from https://translate.fedoraproject.org/projects/selinux/
* Bug fixes- Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach
* Mon Nov 27 2023 daniel.garciaAATTsuse.com- Remove dependency on /usr/bin/python3, making scripts to depends on the real python3 binary, not the link. bsc#1212476
* Mon Aug 14 2023 jsegitzAATTsuse.com- Remove build counter syncing for real
* Thu May 04 2023 fcrozatAATTsuse.com- Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS.
* Fri Mar 24 2023 jsegitzAATTsuse.com- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO
* Thu Mar 23 2023 mliskaAATTsuse.cz- Enable LTO now (boo#1138812).
* Fri Feb 24 2023 jsegitzAATTsuse.com- Update to version 3.5
* Allow user to set SYSCONFDIR
* always write kernel policy when check_ext_changes is specified- Added additional developer key (Jason Zaman)
* Mon May 09 2022 jsegitzAATTsuse.com- Update to version 3.4
* Optionally rebuild policy when modules are changed externally
* Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
* Allow spaces in user/group names
* Thu Feb 10 2022 jsegitzAATTsuse.com- Drop Buildrequires for libustr-devel, not needed anymore
* Thu Nov 11 2021 jsegitzAATTsuse.com- Update to version 3.3
* Fixed use-after-free in parse_module_store()
* Fixed use_after_free in semanage_direct_write_langext()
* Thu Mar 18 2021 jsegitzAATTsuse.com- Link to correct so version- Minor spec file cleanups
* Wed Mar 17 2021 jsegitzAATTsuse.com- Move configuration file to separate libsemanage-conf package to allow for parallel installation in future versions
* Tue Mar 09 2021 jsegitzAATTsuse.com- Update to version 3.2
* dropped old and deprecated symbols and functions libsemanage version was bumped to libsemanage.so.2
* libsemanage tries to sync data to prevent empty files in SELinux module store
* Wed Jul 29 2020 kukukAATTsuse.com- Add /var/lib/selinux
* Wed Jul 15 2020 jsegitzAATTsuse.com- Remove libsemanage-update-map-file.patch to prevent checkers from declining the submission. Keeping the snippet in the spec file in case we try to enable LTO again
* Tue Jul 14 2020 jsegitzAATTsuse.com- Update to version 3.1
* Improved manpage
* fsync final files before rename
* Tue Jun 16 2020 jsegitzAATTsuse.com- Disabled LTO again. This breaks e.g. shadow and also other packages in security:SELinux
* Fri Jun 12 2020 pmonrealgonzalezAATTsuse.com- Fix build with LTO: [bsc#1133102]
* Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
* Update map file to include new symbols and remove wildcards- Add libsemanage-update-map-file.patch
* Thu Jun 04 2020 dimstarAATTopensuse.org- Drop suse_path.patch: replace it with a grep/sed logic replacing /usr/libexec in all files with the correct value for all distros (taking into account that openSUSE is in progress of migrating from /usr/lib to /usr/libexec).
* Fri May 29 2020 jsegitzAATTsuse.de- Apply suse_path.patch only for older distributions. Newer use libexec
* Tue Mar 03 2020 jsegitzAATTsuse.de- Update to version 3.0
* Add support for DCCP and SCTP protocols
* include internal header to use the hidden function prototypes
* mark all exported function \"extern\"
* optionally optimize policy on rebuild Refreshed suse_path.patch
* Thu Jun 20 2019 mliskaAATTsuse.cz- Disable LTO due to symbol versioning (boo#1138812).
* Wed Mar 20 2019 jsegitzAATTsuse.com- Update to version 2.9
* Always set errno to 0 before calling getpwent()
* Include user name in ROLE_REMOVE audit events
* genhomedircon - improve handling large groups
* improve semanage_migrate_store import failure
* reset umask before creating directories
* set selinux policy root around calls to selinux_boolean_sub
* use previous seuser when getting the previous name
* Thu Nov 08 2018 jengelhAATTinai.de- Use more %make_install.
* Thu Nov 08 2018 jsegitzAATTsuse.com- Adjusted source urls (bsc#1115052)
* Thu Sep 27 2018 pmonrealgonzalezAATTsuse.com- update to version 2.8
* semanage fcontext -l now also lists home directory entries from file_contexts.homedirs.
* libsemanage no longer deletes the tmp directory if there is an error while committing the policy transaction, so that any temporary files can be further inspected for debugging purposes (e.g. to examine a particular line of the generated CIL module). The tmp directory will be deleted upon the next transaction, so no manual removal is needed.
* When overriding PREFIX, BINDIR, SBINDIR, SHLIBDIR, LIBEXECDIR, etc., DESTDIR has to be removed from the definition. For example on Arch Linux, SBINDIR=\"${pkgdir}/usr/bin\" was changed to SBINDIR=\"/usr/bin\".
* PYSITEDIR has been renamed PYTHONLIBDIR (and its definition changed).- Clened with spec-cleaner
* Thu Mar 08 2018 rgoldwynAATTsuse.com- Update to version 2.7. Changes:
* IB support
* saves linked policy and skips relinking whenever possible
* Fri Nov 24 2017 jsegitzAATTsuse.com- Update to version 2.6. Notable changes:
* genhomedircon: do not suppress logging from libsepol
* genhomedircon: use userprefix as the role for homedir
* Fix bug preventing the installation of base modules
* Use pp module name instead of filename when installing module
* genhomedircon: remove hardcoded refpolicy strings
* genhomedircon: add support for %group syntax
* genhomedircon: generate contexts for logins mapped to the default user
* Validate and compile file contexts before installing
* Swap tcp and udp protocol numbers
* genhomedircon: %{USERID} and %{USERNAME} support and code cleanups
* Mon Dec 12 2016 dimstarAATTopensuse.org- Split out the Policy Store Migration tool into libsemanage-store-migrate: it is not a devel tool to start with. Additionally, it causes the -devel package to depend on python, which we want to avoid (libsemanabe being part of the core build cycle). The library suggests libsemanage-store-migrate.
* Sun Jul 17 2016 jengelhAATTinai.de- Update RPM groups, trim description, combine filelist entries, ensure pkgconfig() symbols are generated.
* Thu Jul 14 2016 jsegitzAATTnovell.com- Without bug number no submit to SLE 12 SP2 is possible, so to make sle-changelog-checker happy: bsc#988977
* Wed Jul 13 2016 jsegitzAATTnovell.com- Added suse_path.patch to fix path to hll compiler
* Fri Jul 08 2016 iAATTmarguerite.su- update version 2.5
* Do not overwrite CFLAGS in test Makefile, from Nicolas Iooss.
* Fix uninitialized variable in direct_commit and direct_api
* semanage_migrate_store: Load libsepol.so.1 instead of libsepol.so
* Store homedir_template and users_extra in policy store
* Fix null pointer dereference in semanage_module_key_destroy
* Add semanage_module_extract() to extract a module as CIL or HLL
* semanage_migrate_store: add -r option for migrating inside chroots
* Add file_contexts and seusers to the store
* Add policy binary and file_contexts.local to the store
* Allow to install compressed modules without a compression extension
* Do not copy contexts in semanage_migrate_store
* Fix logic in bunzip for uncompressed pp files
* Fix fname[] initialization in test_utilities.c
* Add remove-hll semanage.conf option to remove HLL files after compilation to CIL
* Fix memory leaks when parsing semanage.conf
* Change bunzip to use heap instead of stack to prevent segfault on systems with small stack size- changes in 2.4
* Fix Makefile to allow LIBDIR and SHLIBDIR to be set to different directories
* Fix bugs found by hardened gcc flags
* Add missing manpage links to security_load_policy
* Fix failing libsemanage pywrap tests
* Fix deprecation warning for bison
* Skip policy module relink when only setting booleans
* Only try to compile file contexts if they exist
* Fix memory leak when setting a custom store path
* Add semodule option to set store root path in semanage.conf and the semodule command
* Add semanage.conf option to set an alternative root path for policy store
* Add support for High Level Language (HLL) to CIL compilers. The HLL compiler path is configurable, but should be placed in /usr/libexec/selinux/hll by default
* Create a policy migration script for migrating the policy store from /etc/selinux to /var/lib/selinux
* Add python3 support to the migration script
* Use libcil to compile modules
* Use symbolic versioning to maintain ABI compatibility for old install functions
* Add a target-platform option to semanage.conf to control how policies are built
* Add API to handle modules and source policies, moving module store to /var/lib/selinux
* Only try to compile file contexts if they exist