2005-10-31 20:23:34 +00:00
|
|
|
Summary: SELinux binary policy manipulation library
|
2004-09-09 07:41:16 +00:00
|
|
|
Name: libsepol
|
2006-02-17 19:47:41 +00:00
|
|
|
Version: 1.11.18
|
2006-02-16 18:40:45 +00:00
|
|
|
Release: 1
|
2004-09-09 07:41:16 +00:00
|
|
|
License: GPL
|
|
|
|
|
Group: System Environment/Libraries
|
|
|
|
|
Source: http://www.nsa.gov/selinux/archives/libsepol-%{version}.tgz
|
2005-07-27 16:19:22 +00:00
|
|
|
|
2004-09-09 07:41:16 +00:00
|
|
|
Prefix: %{_prefix}
|
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-buildroot
|
|
|
|
|
Provides: libsepol.so
|
|
|
|
|
|
|
|
|
|
%description
|
2005-09-29 01:06:23 +00:00
|
|
|
Security-enhanced Linux is a feature of the Linux® kernel and a number
|
2004-09-09 07:41:16 +00:00
|
|
|
of utilities with enhanced security functionality designed to add
|
|
|
|
|
mandatory access controls to Linux. The Security-enhanced Linux
|
|
|
|
|
kernel contains new architectural components originally developed to
|
|
|
|
|
improve the security of the Flask operating system. These
|
|
|
|
|
architectural components provide general support for the enforcement
|
|
|
|
|
of many kinds of mandatory access control policies, including those
|
|
|
|
|
based on the concepts of Type Enforcement®, Role-based Access
|
|
|
|
|
Control, and Multi-level Security.
|
|
|
|
|
|
|
|
|
|
libsepol provides an API for the manipulation of SELinux binary policies.
|
|
|
|
|
It is used by checkpolicy (the policy compiler) and similar tools, as well
|
|
|
|
|
as by programs like load_policy that need to perform specific transformations
|
|
|
|
|
on binary policies such as customizing policy boolean settings.
|
|
|
|
|
|
|
|
|
|
%package devel
|
|
|
|
|
Summary: Header files and libraries used to build policy manipulation tools
|
|
|
|
|
Group: Development/Libraries
|
2005-10-21 14:51:33 +00:00
|
|
|
Requires: libsepol = %{version}
|
2004-09-09 07:41:16 +00:00
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
|
The sepol-devel package contains the static libraries and header files
|
|
|
|
|
needed for developing applications that manipulate binary policies.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
2005-05-26 15:00:01 +00:00
|
|
|
|
2004-09-09 07:41:16 +00:00
|
|
|
%build
|
2005-12-16 14:15:10 +00:00
|
|
|
make clean
|
2004-09-09 07:42:31 +00:00
|
|
|
make CFLAGS="%{optflags}"
|
2004-09-09 07:41:16 +00:00
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{_lib}
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_includedir}
|
2004-09-09 07:41:20 +00:00
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man3
|
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8
|
2004-09-09 07:41:16 +00:00
|
|
|
make DESTDIR="${RPM_BUILD_ROOT}" LIBDIR="${RPM_BUILD_ROOT}%{_libdir}" SHLIBDIR="${RPM_BUILD_ROOT}/%{_lib}" install
|
2005-07-08 01:16:49 +00:00
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolbools
|
|
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolusers
|
|
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_bindir}/chkcon
|
2005-07-08 01:20:21 +00:00
|
|
|
rm -rf ${RPM_BUILD_ROOT}%{_mandir}/man8
|
2004-09-09 07:41:16 +00:00
|
|
|
%clean
|
|
|
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
|
|
|
|
2005-10-14 16:11:17 +00:00
|
|
|
%post
|
|
|
|
|
/sbin/ldconfig
|
2006-02-13 20:57:55 +00:00
|
|
|
[ -x /sbin/telinit ] && [ -p /dev/initctl ] && /sbin/telinit U
|
2005-10-14 16:11:17 +00:00
|
|
|
exit 0
|
2004-09-09 07:41:25 +00:00
|
|
|
|
|
|
|
|
%postun -p /sbin/ldconfig
|
2004-09-09 07:41:16 +00:00
|
|
|
|
|
|
|
|
%files devel
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
%{_libdir}/libsepol.a
|
|
|
|
|
%{_libdir}/libsepol.so
|
|
|
|
|
%{_includedir}/sepol/*.h
|
2004-09-09 07:41:20 +00:00
|
|
|
%{_mandir}/man3/*.3.gz
|
2004-09-09 07:41:16 +00:00
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
/%{_lib}/libsepol.so.1
|
2005-10-10 12:20:32 +00:00
|
|
|
%dir %{_includedir}/sepol
|
|
|
|
|
%dir %{_includedir}/sepol/policydb
|
|
|
|
|
%{_includedir}/sepol/policydb/*.h
|
2004-09-09 07:41:16 +00:00
|
|
|
|
|
|
|
|
%changelog
|
2006-02-17 19:47:41 +00:00
|
|
|
* Fri Feb 17 2006 Dan Walsh <dwalsh@redhat.com> 1.11.18-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged node_expand_addr bugfix and node_compare* change from
|
|
|
|
|
Ivan Gyurdiev.
|
|
|
|
|
|
2006-02-16 18:40:45 +00:00
|
|
|
* Thu Feb 16 2006 Dan Walsh <dwalsh@redhat.com> 1.11.17-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged bug fix patch from Ivan Gyurdiev.
|
|
|
|
|
* Added a defined flag to level_datum_t for use by checkpolicy.
|
|
|
|
|
* Merged nodecon support patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged cleanups patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-02-13 20:57:55 +00:00
|
|
|
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.14-2
|
|
|
|
|
- Fix post install not to fire if /dev/initctr does not exist
|
|
|
|
|
|
2006-02-13 15:50:33 +00:00
|
|
|
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.14-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged optionals in base patch from Joshua Brindle.
|
|
|
|
|
|
2006-02-11 04:12:51 +00:00
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.11.13-1.1
|
|
|
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
|
|
2006-02-13 15:50:33 +00:00
|
|
|
* Tue Feb 7 2006 Dan Walsh <dwalsh@redhat.com> 1.11.13-1
|
2006-02-07 15:27:01 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged seuser/user_extra support patch from Joshua Brindle.
|
|
|
|
|
* Merged fix patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-02-07 12:43:58 +00:00
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.11.12-1.1
|
|
|
|
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
|
|
|
2006-02-02 17:08:27 +00:00
|
|
|
* Thu Feb 2 2006 Dan Walsh <dwalsh@redhat.com> 1.11.12-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged assertion copying bugfix from Joshua Brindle.
|
|
|
|
|
* Merged sepol_av_to_string patch from Joshua Brindle.
|
|
|
|
|
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-30 23:34:34 +00:00
|
|
|
* Mon Jan 30 2006 Dan Walsh <dwalsh@redhat.com> 1.11.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged cond_expr mapping and package section count bug fixes
|
|
|
|
|
from Joshua Brindle.
|
|
|
|
|
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-13 14:51:35 +00:00
|
|
|
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.11.9-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged size_t -> unsigned int patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-10 13:48:05 +00:00
|
|
|
* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.11.8-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged 2nd const in APIs patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-06 15:35:55 +00:00
|
|
|
* Fri Jan 7 2006 Dan Walsh <dwalsh@redhat.com> 1.11.7-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged const in APIs patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged compare2 function patch from Ivan Gyurdiev.
|
|
|
|
|
* Fixed hierarchy checker to only check allow rules.
|
|
|
|
|
|
2006-01-05 19:43:51 +00:00
|
|
|
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.11.5-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged further fixes from Russell Coker, specifically:
|
|
|
|
|
- av_to_string overflow checking
|
|
|
|
|
- sepol_context_to_string error handling
|
|
|
|
|
- hierarchy checking memory leak fixes and optimizations
|
|
|
|
|
- avrule_block_read variable initialization
|
|
|
|
|
* Marked deprecated code in genbools and genusers.
|
|
|
|
|
|
2006-01-05 16:01:15 +00:00
|
|
|
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.11.4-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged bugfix for sepol_port_modify from Russell Coker.
|
|
|
|
|
* Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
|
|
|
|
|
* Merged port ordering patch from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.11.2-2
|
2006-01-04 18:10:14 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged patch series from Ivan Gyurdiev.
|
|
|
|
|
This includes patches to:
|
|
|
|
|
- support ordering of records in compare function
|
|
|
|
|
- enable port interfaces
|
|
|
|
|
- add interfaces for context validity and range checks
|
|
|
|
|
- add include guards
|
|
|
|
|
|
2005-12-27 20:14:51 +00:00
|
|
|
* Tue Dec 27 2005 Dan Walsh <dwalsh@redhat.com> 1.11.1-2
|
|
|
|
|
- Add Ivans patch to make ports work
|
|
|
|
|
|
2005-12-16 14:15:10 +00:00
|
|
|
* Fri Dec 16 2005 Dan Walsh <dwalsh@redhat.com> 1.11.1-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed mls_range_cpy bug.
|
|
|
|
|
|
2005-12-09 22:41:41 +00:00
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2005-12-07 20:27:56 +00:00
|
|
|
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
|
2005-12-06 03:43:47 +00:00
|
|
|
* Mon Dec 5 2005 Dan Walsh <dwalsh@redhat.com> 1.9.42-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Dropped handle from user_del_role interface.
|
|
|
|
|
|
2005-11-29 02:50:16 +00:00
|
|
|
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.41-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged remove defrole from sepol patch from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.9.40-1
|
2005-11-16 20:46:33 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged module function and map file cleanup from Ivan Gyurdiev.
|
|
|
|
|
* Merged MLS and genusers cleanups from Ivan Gyurdiev.
|
|
|
|
|
|
2005-11-10 02:38:10 +00:00
|
|
|
* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.9.39-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
Prepare for removal of booleans* and *.users files.
|
|
|
|
|
* Cleaned up sepol_genbools to not regenerate the image if
|
|
|
|
|
there were no changes in the boolean values, including the
|
|
|
|
|
degenerate case where there are no booleans or booleans.local
|
|
|
|
|
files.
|
|
|
|
|
* Cleaned up sepol_genusers to not warn on missing local.users.
|
|
|
|
|
|
2005-11-08 23:31:51 +00:00
|
|
|
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.9.38-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Removed sepol_port_* from libsepol.map, as the port interfaces
|
|
|
|
|
are not yet stable.
|
|
|
|
|
|
2005-11-07 14:44:25 +00:00
|
|
|
* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.9.37-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context destroy cleanup patch from Ivan Gyurdiev.
|
|
|
|
|
|
2005-11-03 18:28:38 +00:00
|
|
|
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.36-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context_to_string interface change patch from Ivan Gyurdiev.
|
|
|
|
|
|
2005-11-03 14:34:12 +00:00
|
|
|
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.35-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added src/dso.h and src/*_internal.h.
|
|
|
|
|
Added hidden_def for exported symbols used within libsepol.
|
|
|
|
|
Added hidden for symbols that should not be exported by
|
|
|
|
|
the wildcards in libsepol.map.
|
|
|
|
|
|
2005-10-31 20:23:19 +00:00
|
|
|
* Mon Oct 31 2005 Dan Walsh <dwalsh@redhat.com> 1.9.34-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged record interface, record bugfix, and set_roles patches
|
|
|
|
|
from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-28 14:14:06 +00:00
|
|
|
* Fri Oct 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.33-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged count specification change from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-26 19:47:04 +00:00
|
|
|
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.9.32-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added further checking and error reporting to
|
|
|
|
|
sepol_module_package_read and _info.
|
|
|
|
|
* Merged sepol handle passing, DEBUG conversion, and memory leak
|
|
|
|
|
fix patches from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-25 19:13:06 +00:00
|
|
|
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.9.30-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Removed processing of system.users from sepol_genusers and
|
|
|
|
|
dropped delusers logic.
|
|
|
|
|
* Removed policydb_destroy from error path of policydb_read,
|
|
|
|
|
since create/init/destroy/free of policydb is handled by the
|
|
|
|
|
caller now.
|
|
|
|
|
* Fixed sepol_module_package_read to handle a failed policydb_read
|
|
|
|
|
properly.
|
|
|
|
|
* Merged query/exists and count patches from Ivan Gyurdiev.
|
|
|
|
|
* Merged fix for pruned types in expand code from Joshua Brindle.
|
|
|
|
|
* Merged new module package format code from Joshua Brindle.
|
|
|
|
|
|
|
|
|
|
|
2005-10-24 17:49:18 +00:00
|
|
|
* Mon Oct 24 2005 Dan Walsh <dwalsh@redhat.com> 1.9.26-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context interface cleanup, record conversion code,
|
|
|
|
|
key passing, and bug fix patches from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-21 18:40:07 +00:00
|
|
|
* Fri Oct 21 2005 Dan Walsh <dwalsh@redhat.com> 1.9.25-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged users cleanup patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged user record memory leak fix from Ivan Gyurdiev.
|
|
|
|
|
* Merged reorganize users patch from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-21 14:51:33 +00:00
|
|
|
- Need to check for /sbin/telinit
|
|
|
|
|
|
2005-10-20 20:23:56 +00:00
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.23-1
|
2005-10-21 18:40:07 +00:00
|
|
|
- Upgrade to latest from NSA
|
2005-10-20 20:23:56 +00:00
|
|
|
* Added check flag to expand_module() to control assertion
|
|
|
|
|
and hierarchy checking on expansion.
|
|
|
|
|
* Reworked check_assertions() and hierarchy_check_constraints()
|
|
|
|
|
to take handles and use callback-based error reporting.
|
|
|
|
|
* Changed expand_module() to call check_assertions() and
|
|
|
|
|
hierarchy_check_constraints() prior to returning the expanded
|
|
|
|
|
policy.
|
|
|
|
|
|
|
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.21-1
|
2005-10-18 17:43:53 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Changed sepol_module_package_set_file_contexts to copy the
|
|
|
|
|
file contexts data since it is internally managed.
|
|
|
|
|
* Added sepol_policy_file_set_handle interface to associate
|
|
|
|
|
a handle with a policy file.
|
|
|
|
|
* Added handle argument to policydb_from_image/to_image.
|
|
|
|
|
* Added sepol_module_package_set_file_contexts interface.
|
|
|
|
|
* Dropped sepol_module_package_create_file interface.
|
|
|
|
|
* Reworked policydb_read/write, policydb_from_image/to_image,
|
|
|
|
|
and sepol_module_package_read/write to use callback-based error
|
|
|
|
|
reporting system rather than DEBUG.
|
|
|
|
|
|
2005-10-18 13:37:22 +00:00
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.9.19-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Reworked link_packages, link_modules, and expand_module to use
|
|
|
|
|
callback-based error reporting system rather than error buffering.
|
|
|
|
|
|
2005-10-15 12:21:10 +00:00
|
|
|
* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.9.18-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged conditional expression mapping fix in the module linking
|
|
|
|
|
code from Joshua Brindle.
|
|
|
|
|
|
2005-10-14 16:11:17 +00:00
|
|
|
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.9.17-2
|
|
|
|
|
- Tell init to reexec itself in post script
|
|
|
|
|
|
2005-10-14 12:23:28 +00:00
|
|
|
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.9.17-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Hid sepol_module_package type definition, and added get interfaces.
|
|
|
|
|
* Merged new callback-based error reporting system from Ivan
|
|
|
|
|
Gyurdiev.
|
|
|
|
|
* Merged support for require blocks inside conditionals from
|
|
|
|
|
Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-10-12 19:34:29 +00:00
|
|
|
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
|
2005-10-10 12:12:02 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed use of policydb_from_image/to_image to ensure proper
|
|
|
|
|
init of policydb.
|
|
|
|
|
* Isolated policydb internal headers under <sepol/policydb/*.h>.
|
|
|
|
|
These headers should only be used by users of the static libsepol.
|
|
|
|
|
Created new <sepol/policydb.h> with new public types and interfaces
|
|
|
|
|
for shared libsepol.
|
|
|
|
|
Created new <sepol/module.h> with public types and interfaces moved
|
|
|
|
|
or wrapped from old module.h, link.h, and expand.h, adjusted for
|
|
|
|
|
new public types for policydb and policy_file.
|
|
|
|
|
Added public interfaces to libsepol.map.
|
|
|
|
|
Some implementation changes visible to users of the static libsepol:
|
|
|
|
|
1) policydb_read no longer calls policydb_init.
|
|
|
|
|
Caller must do so first.
|
|
|
|
|
2) policydb_init no longer takes policy_type argument.
|
|
|
|
|
Caller must set policy_type separately.
|
|
|
|
|
3) expand_module automatically enables the global branch.
|
|
|
|
|
Caller no longer needs to do so.
|
|
|
|
|
4) policydb_write uses the policy_type and policyvers from the
|
|
|
|
|
policydb itself, and sepol_set_policyvers() has been removed.
|
|
|
|
|
|
2005-10-07 14:11:02 +00:00
|
|
|
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.9.12-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged function renaming and static cleanup from Ivan Gyurdiev.
|
|
|
|
|
|
2005-10-06 13:31:44 +00:00
|
|
|
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.9.11-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged bug fix for check_assertions handling of no assertions
|
|
|
|
|
from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-10-04 17:58:33 +00:00
|
|
|
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.9.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged iterate patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged MLS in modules patch from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-10-03 13:19:50 +00:00
|
|
|
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.9.8-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged pointer typedef elimination patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged user list function, new mls functions, and bugfix patch
|
|
|
|
|
from Ivan Gyurdiev.
|
|
|
|
|
|
2005-09-29 01:06:23 +00:00
|
|
|
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.9.7-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged sepol_get_num_roles fix from Karl MacMillan (Tresys).
|
|
|
|
|
|
2005-09-23 20:06:53 +00:00
|
|
|
* Fri Sep 23 2005 Dan Walsh <dwalsh@redhat.com> 1.9.6-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged bug fix patches from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-09-21 18:12:17 +00:00
|
|
|
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.9.5-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged boolean record and memory leak fix patches from Ivan
|
|
|
|
|
Gyurdiev.
|
|
|
|
|
|
2005-09-20 12:55:39 +00:00
|
|
|
* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.9.4-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged interface record patch from Ivan Gyurdiev.
|
|
|
|
|
|
2005-09-15 14:51:03 +00:00
|
|
|
* Thu Sep 15 2005 Dan Walsh <dwalsh@redhat.com> 1.9.3-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged fix for sepol_enable/disable_debug from Ivan
|
|
|
|
|
Gyurdiev.
|
|
|
|
|
|
2005-09-14 19:28:36 +00:00
|
|
|
* Mon Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-2
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged stddef.h patch and debug conversion patch from
|
|
|
|
|
Ivan Gyurdiev.
|
|
|
|
|
|
2005-09-12 20:27:31 +00:00
|
|
|
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.9.1-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed expand_avtab and expand_cond_av_list to keep separate
|
|
|
|
|
entries with identical keys but different enabled flags.
|
|
|
|
|
* Updated version for release.
|
|
|
|
|
|
2005-09-01 15:50:37 +00:00
|
|
|
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.7.24-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed symtab_insert return value for duplicate declarations.
|
|
|
|
|
* Merged fix for memory error in policy_module_destroy from
|
|
|
|
|
Jason Tang (Tresys).
|
|
|
|
|
|
2005-08-29 12:02:32 +00:00
|
|
|
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.7.22-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged fix for memory leak in sepol_context_to_sid from
|
|
|
|
|
Jason Tang (Tresys).
|
|
|
|
|
* Merged fixes for resource leaks on error paths and
|
|
|
|
|
change to scope_destroy from Joshua Brindle (Tresys).
|
|
|
|
|
|
2005-08-23 18:23:04 +00:00
|
|
|
* Tue Aug 23 2005 Dan Walsh <dwalsh@redhat.com> 1.7.20-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged more fixes for resource leaks on error paths
|
|
|
|
|
from Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
|
2005-08-19 19:53:42 +00:00
|
|
|
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.7.19-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Changed to treat all type conflicts as fatal errors.
|
|
|
|
|
* Merged several error handling fixes from
|
|
|
|
|
Serge Hallyn (IBM). Bugs found by Coverity.
|
|
|
|
|
|
2005-08-15 20:10:28 +00:00
|
|
|
* Mon Aug 15 2005 Dan Walsh <dwalsh@redhat.com> 1.7.17-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed several memory leaks found by valgrind.
|
|
|
|
|
|
2005-08-14 19:58:19 +00:00
|
|
|
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.15-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
|
|
Coverity, reported by Serge Hallyn (IBM).
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
when writing the type->attribute reverse map from
|
|
|
|
|
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
|
|
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
|
|
or attr_type_map.
|
|
|
|
|
|
2005-08-13 09:54:35 +00:00
|
|
|
* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 1.7.14-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
|
|
Coverity, reported by Serge Hallyn (IBM).
|
|
|
|
|
* Merged patch to policydb_write to check errors
|
|
|
|
|
when writing the type->attribute reverse map from
|
|
|
|
|
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
|
|
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
|
|
or attr_type_map.
|
|
|
|
|
|
|
|
|
|
|
2005-08-12 02:51:25 +00:00
|
|
|
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.13-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Improved memory use by SELinux by both reducing the avtab
|
|
|
|
|
node size and reducing the number of avtab nodes (by not
|
|
|
|
|
expanding attributes in TE rules when possible). Added
|
|
|
|
|
expand_avtab and expand_cond_av_list functions for use by
|
|
|
|
|
assertion checker, hierarchy checker, compatibility code,
|
|
|
|
|
and dispol. Added new inline ebitmap operators and converted
|
|
|
|
|
existing users of ebitmaps to the new operators for greater
|
|
|
|
|
efficiency.
|
|
|
|
|
Note: The binary policy format version has been incremented to
|
|
|
|
|
version 20 as a result of these changes.
|
|
|
|
|
|
2005-08-11 11:54:12 +00:00
|
|
|
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.12-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed bug in constraint_node_clone handling of name sets.
|
|
|
|
|
|
2005-08-10 21:05:20 +00:00
|
|
|
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.7.11-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fix range_trans_clone to map the type values properly.
|
|
|
|
|
|
2005-08-06 01:34:59 +00:00
|
|
|
* Fri Aug 5 2005 Dan Walsh <dwalsh@redhat.com> 1.7.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged patch to move module read/write code from libsemanage
|
|
|
|
|
to libsepol from Jason Tang (Tresys).
|
|
|
|
|
|
2005-08-02 20:23:38 +00:00
|
|
|
* Tue Aug 2 2005 Dan Walsh <dwalsh@redhat.com> 1.7.9-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Enabled further compiler warning flags and fixed them.
|
|
|
|
|
* Merged user, context, port records patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged key extract function patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged mls_context_to_sid bugfix from Ivan Gyurdiev.
|
|
|
|
|
|
2005-07-27 16:19:22 +00:00
|
|
|
* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-2
|
|
|
|
|
- Fix MLS Free
|
|
|
|
|
|
2005-07-27 13:29:14 +00:00
|
|
|
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged context reorganization, memory leak fixes,
|
|
|
|
|
port and interface loading, replacements for genusers and
|
|
|
|
|
genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
|
|
|
|
|
* Merged uninitialized variable bugfix from Dan Walsh.
|
|
|
|
|
|
2005-07-25 13:37:45 +00:00
|
|
|
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-2
|
|
|
|
|
- Fix unitialized variable problem
|
|
|
|
|
|
2005-07-18 19:06:58 +00:00
|
|
|
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
|
|
|
|
|
* Removed genpolbools and genpolusers utilities.
|
|
|
|
|
* Merged hierarchy check fix from Joshua Brindle (Tresys).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2005-07-14 11:25:27 +00:00
|
|
|
* Thu Jul 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.3-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
|
|
|
|
|
* Merged genbools debugging message cleanup from Red Hat.
|
|
|
|
|
|
2005-07-08 01:16:49 +00:00
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-2
|
|
|
|
|
- Remove genpolbools and genpoluser
|
|
|
|
|
|
2005-07-07 10:51:39 +00:00
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged loadable module support from Tresys Technology.
|
|
|
|
|
|
2005-06-29 20:16:24 +00:00
|
|
|
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Updated version for release.
|
|
|
|
|
|
2005-05-26 15:00:01 +00:00
|
|
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.10-1
|
|
|
|
|
- Fix reset booleans warning message
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* License changed to LGPL v2.1, see COPYING.
|
|
|
|
|
|
2005-05-17 12:33:22 +00:00
|
|
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.9-2
|
2005-05-17 12:13:26 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added sepol_genbools_policydb and sepol_genusers_policydb for
|
|
|
|
|
audit2why.
|
|
|
|
|
|
2005-05-16 21:46:33 +00:00
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-2
|
|
|
|
|
- export sepol_context_to_sid
|
|
|
|
|
|
2005-05-16 19:48:44 +00:00
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added sepol_ prefix to Flask types to avoid
|
|
|
|
|
namespace collision with libselinux.
|
|
|
|
|
|
|
|
|
|
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.5.7-1
|
2005-05-13 18:51:47 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Added sepol_compute_av_reason() for audit2why.
|
|
|
|
|
|
2005-04-26 16:31:56 +00:00
|
|
|
* Tue Apr 26 2005 Dan Walsh <dwalsh@redhat.com> 1.5.6-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed bug in role hierarchy checker.
|
|
|
|
|
|
2005-04-25 19:35:34 +00:00
|
|
|
* Mon Apr 25 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-2
|
|
|
|
|
- Fixes found via intel compiler
|
|
|
|
|
|
2005-04-14 20:28:58 +00:00
|
|
|
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
|
2005-03-30 03:04:56 +00:00
|
|
|
* Tue Mar 29 2005 Dan Walsh <dwalsh@redhat.com> 1.5.3-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
|
2005-03-29 15:39:54 +00:00
|
|
|
* Thu Mar 24 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-2
|
|
|
|
|
- Handle booleans.local
|
|
|
|
|
|
2005-03-17 20:04:11 +00:00
|
|
|
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-1
|
2005-03-17 15:41:45 +00:00
|
|
|
- Update to latest from NSA
|
2005-03-17 20:04:11 +00:00
|
|
|
* Added man page for sepol_check_context.
|
2005-03-17 15:41:45 +00:00
|
|
|
* Added man page for sepol_genusers function.
|
|
|
|
|
* Merged man pages for genpolusers and chkcon from Manoj Srivastava.
|
|
|
|
|
|
2005-03-10 14:46:04 +00:00
|
|
|
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
2005-03-08 20:19:30 +00:00
|
|
|
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.3.8-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Cleaned up error handling in sepol_genusers and sepol_genbools.
|
|
|
|
|
|
2005-03-02 04:09:23 +00:00
|
|
|
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.3.7-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged sepol_debug and fclose patch from Dan Walsh.
|
|
|
|
|
|
2005-02-25 19:52:36 +00:00
|
|
|
* Fri Feb 18 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-3
|
|
|
|
|
- Make sure local_files file pointer is closed
|
2005-02-25 18:44:18 +00:00
|
|
|
- Stop outputing error messages
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Changed sepol_genusers to also use getline and correctly handle
|
|
|
|
|
EOL.
|
|
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.5-1
|
2005-02-17 22:59:42 +00:00
|
|
|
- Update to latest from NSA
|
2005-02-17 20:48:43 +00:00
|
|
|
* Merged endianness and compute_av patches from Darrel Goeddel (TCS).
|
2005-02-17 22:59:42 +00:00
|
|
|
* Merged range_transition support from Darrel Goeddel (TCS).
|
|
|
|
|
* Added sepol_genusers function.
|
2005-02-17 20:48:43 +00:00
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.3.2-1
|
2005-02-17 20:48:43 +00:00
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Changed relabel Makefile target to use restorecon.
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.3.1-1
|
2005-02-17 20:48:43 +00:00
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged enhanced MLS support from Darrel Goeddel (TCS).
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.2.1.1-1
|
2005-01-20 14:15:15 +00:00
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged build fix patch from Manoj Srivastava.
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-1
|
2004-11-04 13:25:56 +00:00
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-2
|
2004-09-09 07:42:31 +00:00
|
|
|
- Add optargs for build
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-1
|
2004-09-09 07:42:27 +00:00
|
|
|
- New version from NSA
|
|
|
|
|
|
2004-09-09 07:42:21 +00:00
|
|
|
* Fri Aug 20 2004 Colin Walters <walters@redhat.com> 1.0-2
|
|
|
|
|
- Apply Stephen's chkcon patch
|
|
|
|
|
|
2004-09-09 07:41:57 +00:00
|
|
|
* Thu Aug 19 2004 Colin Walters <walters@redhat.com> 1.0-1
|
|
|
|
|
- New upstream version
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 0.4.2-1
|
2004-09-09 07:41:47 +00:00
|
|
|
- Newversion from upstream implementing stringcase compare
|
|
|
|
|
|
2004-09-09 07:41:25 +00:00
|
|
|
* Fri Aug 13 2004 Bill Nottingham <notting@redhat.com> 0.4.1-2
|
|
|
|
|
- ldconfig tweaks
|
2004-09-09 07:41:16 +00:00
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
2004-09-09 07:41:47 +00:00
|
|
|
- Ignore case of true/false
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
2004-09-09 07:41:20 +00:00
|
|
|
- New version from NSA
|
|
|
|
|
|
2005-02-22 22:11:16 +00:00
|
|
|
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 0.3.1-1
|
2004-09-09 07:41:16 +00:00
|
|
|
- Initial version
|
|
|
|
|
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
|
|
|
|
|
|
|
|
|
