libsemanage-2.5-9.fc25

- Do not list duplicate port entries after setting a boolean (#1439875)

libsemanage.spec

@@ -1,20 +1,20 @@
 %global with_python3 1
 %{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print (get_python_lib(1))")}
 
-%define libsepolver 2.5-7
-%define libselinuxver 2.5-7
+%define libsepolver 2.5-10
+%define libselinuxver 2.5-12
 
 Summary: SELinux binary policy manipulation library 
 Name: libsemanage
 Version: 2.5
-Release: 6%{?dist}
+Release: 9%{?dist}
 License: LGPLv2+
 Group: System Environment/Libraries
 Source: https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/libsemanage-2.5.tar.gz
 # download https://raw.githubusercontent.com/fedora-selinux/scripts/master/selinux/make-fedora-selinux-patch.sh
 # run:
-# $ VERSION=2.5 ./make-fedora-selinux-patch.sh libsemanage
-# HEAD https://github.com/fedora-selinux/selinux/commit/9abe77e2a670f2f2dfb91f9cec46ee37f9c23995
+# $ VERSION=2.5 BRANCH=f25 ./make-fedora-selinux-patch.sh libsemanage
+# HEAD https://github.com/fedora-selinux/selinux/commit/c6becd84e4d0e9321d2909a2583d4d129cffa506
 Patch1: libsemanage-fedora.patch
 URL: https://github.com/SELinuxProject/selinux/wiki
 Source1: semanage.conf
@@ -194,6 +194,26 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif # if with_python3
 
 %changelog
+* Tue Apr 18 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-9
+- Do not list duplicate port entries after setting a boolean (#1439875)
+
+* Mon Oct 03 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-8
+- Fixes bug preventing the installation of base modules
+- make distclean target work
+- Do not always print a module name warning
+- Use pp module name instead of filename when installing module
+- tests: Do not force using gcc
+- genhomedircon: remove hardcoded refpolicy strings
+- genhomedircon: add support for %group syntax
+- genhomedircon: generate contexts for logins mapped to the default user
+- Validate and compile file contexts before installing
+- Swap tcp and udp protocol numbers
+
+* Mon Aug 01 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-7
+- Revert "Enable expand-check by default" in order to avoid possible upgrade issues,
+  see https://bugzilla.redhat.com/show_bug.cgi?id=1319652#c25
+- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11
+
 * Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5-6
 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
 

semanage.conf

@@ -36,10 +36,9 @@ module-store = direct
 # version is necessary.
 #policy-version = 19
 
-# expand-check check neverallow rules when executing all semanage
-# commands. There might be a penalty in execution time if this
-# option is enabled.
-expand-check = 1
+# expand-check check neverallow rules when executing all semanage commands.
+# Large penalty in time if you turn this on.  
+expand-check=0
 
 # usepasswd check tells semanage to scan all pass word records for home directories
 # and setup the labeling correctly.  If this is turned off, SELinux will label /home