Commit Graph

310 Commits

Author SHA1 Message Date
Petr Lautrbach f7d3e92ab4 libsepol-3.1-5
- Drop and obsolete libsepol-compat subpackage
- cil: Give error for more than one true or false block
2020-11-20 12:42:30 +01:00
Petr Lautrbach ed61d9f2c1 Drop and obsolete libsepol-compat 2020-11-20 10:38:10 +01:00
Petr Lautrbach 09d2e8094c Add make to BuildRequires 2020-11-04 20:10:59 +01:00
Petr Lautrbach 459a123b94 libsepol-3.1-4
- Drop deprecated functions and duplicated symbols
- Change library version to libsepol.so.2
- temporary ship -compat with libsepol.so.1
- Re-enable LTO flags
2020-10-23 23:19:09 +02:00
Petr Lautrbach 13eae1c266 Rebase on db0f2f382e31 at SELinuxProject
- drop deprecated functions and duplicated symbols
- change library version to libsepol.so.2
- temporary ship -compat with libsepol.so.1
- based on upstream db0f2f382e31
- re-enable lto flags
2020-10-23 23:19:02 +02:00
Petr Lautrbach 838d335395 libsepol-3.1-3
- Disable LTO cflags
- Drop telinit from % post sciptlet
2020-07-27 13:20:53 +02:00
Petr Lautrbach 32434c9af6 Disable lto cflags
Fixes:
  DEBUG util.py:621:  /usr/sbin/useradd: symbol lookup error: /lib64/libsemanage.so.1: undefined symbol: cil_compile, version LIBSEPOL_1.1
2020-07-27 13:20:43 +02:00
Petr Lautrbach 39b828ba84 Drop unnecessary telinit 2020-07-23 21:42:33 +02:00
Petr Lautrbach cdfab80e4f Use set_build_flags and -fno-semantic-interposition
see https://github.com/SELinuxProject/selinux/blob/master/README.md

CFLAGS that are encouraged to be set when overriding are:

  -fno-semantic-interposition for gcc or compilers that do not do this.
2020-07-22 21:19:47 +02:00
Tom Stellard 9252e3a610 Use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-13 22:32:25 +00:00
Petr Lautrbach c58a1c7ba8 libsepol-3.1-1
- SELinux userspace 3.1 release
2020-07-10 18:01:58 +02:00
Fedora Release Engineering 3579f74695 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 10:21:16 +00:00
Petr Lautrbach 7a84df0229 Fix -fno-common issues discovered by GCC 10 2020-01-28 11:00:08 +01:00
Petr Lautrbach 50ae97404c SELinux userspace 3.0 release 2019-12-06 08:05:46 +01:00
Petr Lautrbach 5c73d48883 Strip 2 leading slashes from each patch in %autosetup 2019-11-11 11:09:32 +01:00
Petr Lautrbach 01964798fa SELinux userspace 3.0-rc1 release candidate 2019-11-11 10:55:45 +01:00
Fedora Release Engineering d300c9886e - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 14:21:49 +00:00
Petr Lautrbach ce5eeffdaa SELinux userspace 2.9 release 2019-03-18 16:46:48 +01:00
Petr Lautrbach ba37cef257 SELinux userspace 2.9-rc2 release candidate 2019-03-06 17:20:17 +01:00
Fedora Release Engineering ddd17ca307 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 08:12:27 +00:00
Petr Lautrbach 6b4592388f SELinux userspace 2.9-rc1 release candidate 2019-01-30 09:51:37 +01:00
Petr Lautrbach 20bb12ceb9 libsepol-2.8-3
- Fix RESOURCE_LEAK coverity scan defects
2018-11-13 10:23:27 +01:00
Petr Lautrbach fa475c1e36 Drop ldconfig from %post scriptlets
According to [1] they are not necessary since Fedora 28:

 Shared Libraries

 On Fedora 28 and newer, no scriptlets are required when shared libraries are
 installed.

[1] https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries
2018-07-18 12:28:55 +02:00
Fedora Release Engineering 70ceab4461 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 08:49:16 +00:00
Petr Lautrbach 0ce45d72d2 libsepol-2.8-1
- SELinux userspace 2.8 release
2018-05-25 10:21:40 +02:00
Petr Lautrbach 8bb335b66c SELinux userspace 2.8-rc3 release candidate 2018-05-14 18:52:22 +02:00
Petr Lautrbach 4526ce3233 SELinux userspace 2.8-rc1 release candidate 2018-04-23 13:12:12 +02:00
Petr Lautrbach 3a48e0a688 libsepol-2.7-6
- Prevent freeing unitialized value in ibendport handling
- Add support for the SCTP portcon keyword
- Export sepol_polcap_getnum/name functions
2018-03-21 16:07:12 +01:00
Petr Lautrbach fc3f64a7e0 libsepol-2.7-5
- cil: Create new keep field for type attribute sets
- build: follow standard semantics for DESTDIR and PREFIX
- cil: show an error when cil_expr_to_string() fails
2018-03-13 12:31:00 +01:00
Petr Lautrbach eb32e87623 List gcc in BuildRequires
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/IJFYI5Q2BYZKIGDFS2WLOBDUSEGWHIKV/
https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires
2018-02-19 13:37:46 +01:00
Petr Lautrbach 89aa58d422 Spec file cleanup
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/
2018-02-16 10:34:54 +01:00
Igor Gnatenko 94d6cb61f3
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:07:10 +01:00
Fedora Release Engineering c7d36f14a7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 23:19:24 +00:00
Petr Lautrbach 355996f836 libsepol-2.7-3.fc28
- free ibendport device names
2017-11-22 11:05:27 +01:00
Petr Lautrbach 02871fc83d libsepol-2.7-2.fc28
- reset pointer after free in cil_strpool_destroy()
- cil: Add ability to redeclare types[attributes]
- cil: Keep attributes used by generated attributes in neverallow
ules
- use IN6ADDR_ANY_INIT to initialize IPv6 addresses
- fix memory leak in sepol_bool_query()
- cil: drop wrong unused attribute
- cil: fix -Wwrite-strings warning
- cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
2017-10-20 10:43:35 +02:00
Petr Lautrbach 640cc38286 libsepol-2.7-1
- Update to upstream release 2017-08-04
2017-08-07 13:44:45 +02:00
Fedora Release Engineering 41f64ace3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 02:15:36 +00:00
Florian Weimer e02987b8e3 Rebuild with binutils fix for ppc64le (#1475636) 2017-07-30 21:55:24 +02:00
Petr Lautrbach 259de5ea3b libsepol-2.6-3
- Fix neverallow bug when checking conditional policy
- Destroy the expanded level when mls_semantic_level_expand() fails
- Do not seg fault on sepol_*_key_free(NULL)
2017-07-28 14:02:33 +02:00
Fedora Release Engineering 175b09a804 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 19:42:12 +00:00
Petr Lautrbach 99653f4b76 libsepol-2.6-1
- Update to upstream release 2016-10-14
2017-02-20 12:27:15 +01:00
Fedora Release Engineering 6f37e10a79 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 19:26:32 +00:00
Petr Lautrbach d162105aae libsepol-2.5-10
- Check for too many permissions in classes and commons in CIL
- Fix xperm mapping between avrule and avtab
- tests: Fix mispelling of optimization option
- Fix unused/uninitialized variables on mac build
- Produce more meaningful error messages for conflicting type rules in CIL
- make "make test" fail when a CUnit test fails
- tests: fix g_b_role_2 test
- Change which attributes CIL keeps in the binary policy
- Port str_read() from kernel and remove multiple occurances of similar code
- Use calloc instead of malloc for all the *_to_val_structs
- Fix bugs found by AFL
- Fix memory leak in expand.c
- Fix invalid read when policy file is corrupt
- Fix possible use of uninitialized variables
2016-10-04 08:17:24 +02:00
Petr Lautrbach aac9abeb50 libsepol-2.5-9
- Warn instead of fail if permission is not resolved
- Ignore object_r when adding userrole mappings to policydb
2016-08-01 10:46:53 +02:00
Petr Lautrbach 5ec2ad1fb2 libsepol-2.5-8
- Add missing return to sepol_node_query()
- Add missing <stdarg.h> include
2016-07-14 10:36:41 +02:00
Petr Lautrbach 44e2d26a69 libsepol-2.5-7
- Correctly detect unknown classes in sepol_string_to_security_class
- Sort object files for deterministic linking order
- Fix neverallowxperm checking on attributes
- Remove libsepol.map when cleaning
- Add high-level language line marking support to CIL
2016-06-23 12:27:14 +02:00
Petr Lautrbach 0a1d1e58aa libsepol-2.5-6
- Change logic of bounds checking to match change in kernel
- Fix multiple spelling errors
2016-05-06 16:04:28 +02:00
Petr Lautrbach d88ffa19a4 libsepol-2.5-5
- Only apply bounds checking to source types in rules
- Fix CIL and not add an attribute as a type in the attr_type_map
2016-05-02 07:52:38 +02:00
Petr Lautrbach 29e9ab01e1 Don't use -S git in autosetup as it requires git in a buildroot
Fixes:

+ '[' 0 -ne 0 ']'
+ cd libsepol-2.5
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/bin/git init -q
/var/tmp/rpm-tmp.yCRSdD: line 42: /usr/bin/git: No such file or directory
error: Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
    Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
2016-04-29 12:06:32 +02:00
Petr Lautrbach 71b1a80d94 libsepol-2.5-4
- Build policy on systems not supporting DCCP protocol
- Fix extended permissions neverallow checking
- Fix CIL neverallow and bounds checking
- Android.mk: Add -D_GNU_SOURCE to common_cflags
2016-04-29 11:49:05 +02:00