Changelog for
checkpolicy-debuginfo-3.8-1.1.i586.rpm :
* Tue Feb 04 2025 Robert Frohl
- Update to version 3.8 https://github.com/SELinuxProject/selinux/releases/tag/3.8
* Code improvements and bug fixes- For a more in depth list of changes see https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt- keyring: Update Petr Lautrbach
* removed 0xBC3905F235179CF1 (expired: 2024-10-25)
* added 0xFB4C685B5DC1C13E (expires: 2026-11-04)
* Mon Jul 01 2024 Cathy Hu - Update to version 3.7 https://github.com/SELinuxProject/selinux/releases/tag/3.7
* User-visible changes:
* checkpolicy: support CIDR notation for nodecon statements
* checkpolicy: provide more descriptive error messages and improve error handling
* Bugfixes:
* checkpolicy: handle unprintable token
* checkpolicy: avoid assigning garbage values
* checkpolicy: free temporary bounds type
* checkpolicy: perform contiguous check in host byte order
* checkpolicy: include for isprint(3)
* oss-fuzz fixes:
* checkpolicy: add libfuzz based fuzzer
* checkpolicy: free complete role_allow_rule on error
* checkpolicy: free identifiers on invalid typebounds
* checkpolicy: return YYerror on invalid character
* checkpolicy: clone level only once
* Tue Dec 19 2023 Cathy Hu - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6
* checkpolicy: Add the command line argument -N, --disable-neverallow
* dispol: add option to display users, drop duplicate option to display booleans, show number of entries before listing them
* dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
* dispol: add options: --actions ACTIONS, --help
* dismod: add options: --actions ACTIONS, --help
* Add notself support for neverallow rules
* Improve man pages
* man pages: Remove the Russian translations
* Add notself and other support to CIL
* Add support for deny rules
* Translations updated from https://translate.fedoraproject.org/projects/selinux/
* Bug fixes- Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach
* Fri Feb 24 2023 Johannes Segitz - Update to version 3.5
* error out if required permission would exceed limit
* Improve error message for type bounds- Added additional developer key (Jason Zaman)
* Mon May 09 2022 Johannes Segitz - Update to version 3.4
* warn on bogus IP address or netmask in nodecon statement
* allow wildcard permissions in constraints
* mention class name on invalid permission
* Thu Nov 11 2021 Johannes Segitz - Update to version 3.3
* When reading a binary policy by checkpolicy, do not automatically change the version to the max policy version supported by libsepol or, if specified, the value given using the \"-c\" flag.
* Updated documentation
* Prints the reason why opening a source policy file failed
* Tue Mar 09 2021 Johannes Segitz - Update to version 3.2
* Fix a memleak and an integer overflow
* Tue Jul 14 2020 Johannes Segitz - Update to version 3.1
* checkpolicy treats invalid characters as an error - might break rare use cases (intentionally)
* Drop extern_te_assert_t.patch, is upstream
* Tue Mar 03 2020 Johannes Segitz - Update to version 3.0
* add flag to enable policy optimization
* allow to write policy to stdout
* remove a redundant if-condition
* Wed Jan 15 2020 Johannes Segitz - Add extern_te_assert_t.patch to mark te_assert_t as extern. Prevents build failures on gcc10 (bsc#1160259)