Commit Graph

315 Commits

Author SHA1 Message Date
Petr Lautrbach
ba37cef257 SELinux userspace 2.9-rc2 release candidate 2019-03-06 17:20:17 +01:00
Fedora Release Engineering
ddd17ca307 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 08:12:27 +00:00
Petr Lautrbach
6b4592388f SELinux userspace 2.9-rc1 release candidate 2019-01-30 09:51:37 +01:00
Petr Lautrbach
20bb12ceb9 libsepol-2.8-3
- Fix RESOURCE_LEAK coverity scan defects
2018-11-13 10:23:27 +01:00
Petr Šplíchal
bbccbf93a7 Remove explicit requires from tests.yml
Requires are now handled by Standard Test Roles based on the
individual test metadata so there is no need to list them here.
2018-10-08 13:02:22 +02:00
Petr Šplíchal
32c4c0d503 Use FMF filter instead of listing tests manually
There is a new feature in the Standard Test Roles which allows to
use an FMF filter instead of listing all tests manually. All tier
one selinux tests are selected as well, thus extending requires.
2018-10-02 13:18:15 +02:00
Petr Lautrbach
fa475c1e36 Drop ldconfig from %post scriptlets
According to [1] they are not necessary since Fedora 28:

 Shared Libraries

 On Fedora 28 and newer, no scriptlets are required when shared libraries are
 installed.

[1] https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries
2018-07-18 12:28:55 +02:00
Fedora Release Engineering
70ceab4461 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 08:49:16 +00:00
Petr Lautrbach
0ce45d72d2 libsepol-2.8-1
- SELinux userspace 2.8 release
2018-05-25 10:21:40 +02:00
Petr Lautrbach
8bb335b66c SELinux userspace 2.8-rc3 release candidate 2018-05-14 18:52:22 +02:00
Petr Lautrbach
4526ce3233 SELinux userspace 2.8-rc1 release candidate 2018-04-23 13:12:12 +02:00
Petr Lautrbach
3a48e0a688 libsepol-2.7-6
- Prevent freeing unitialized value in ibendport handling
- Add support for the SCTP portcon keyword
- Export sepol_polcap_getnum/name functions
2018-03-21 16:07:12 +01:00
Petr Lautrbach
fc3f64a7e0 libsepol-2.7-5
- cil: Create new keep field for type attribute sets
- build: follow standard semantics for DESTDIR and PREFIX
- cil: show an error when cil_expr_to_string() fails
2018-03-13 12:31:00 +01:00
Petr Lautrbach
eb32e87623 List gcc in BuildRequires
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/IJFYI5Q2BYZKIGDFS2WLOBDUSEGWHIKV/
https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires
2018-02-19 13:37:46 +01:00
Petr Lautrbach
89aa58d422 Spec file cleanup
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/
2018-02-16 10:34:54 +01:00
Petr Lautrbach
0de70f05fe Use shared repository for tests
https://fedoraproject.org/wiki/CI/Share_Test_Code
2018-02-14 13:59:37 +01:00
Petr Lautrbach
26d393d9cb Drop local tests 2018-02-14 13:57:41 +01:00
Igor Gnatenko
94d6cb61f3
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:07:10 +01:00
Fedora Release Engineering
c7d36f14a7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 23:19:24 +00:00
Petr Lautrbach
355996f836 libsepol-2.7-3.fc28
- free ibendport device names
2017-11-22 11:05:27 +01:00
Petr Lautrbach
02871fc83d libsepol-2.7-2.fc28
- reset pointer after free in cil_strpool_destroy()
- cil: Add ability to redeclare types[attributes]
- cil: Keep attributes used by generated attributes in neverallow
ules
- use IN6ADDR_ANY_INIT to initialize IPv6 addresses
- fix memory leak in sepol_bool_query()
- cil: drop wrong unused attribute
- cil: fix -Wwrite-strings warning
- cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
2017-10-20 10:43:35 +02:00
Serhii Turivny
3a71508af5 Add CI tests using the standard test interface
The following steps are used to execute the tests using the standard test interface:

Docker

    sudo ANSIBLE_INVENTORY=$(test -e inventory && echo inventory || echo /usr/share/ansible/inventory) TEST_SUBJECTS=docker:docker.io/library/fedora:26 TEST_ARTIFACTS=$PWD/artifacts ansible-playbook --tags container tests.yml

Classic

    sudo ANSIBLE_INVENTORY=$(test -e inventory && echo inventory || echo /usr/share/ansible/inventory) TEST_SUBJECTS="" TEST_ARTIFACTS=$PWD/artifacts ansible-playbook --tags classic tests.yml

https://src.fedoraproject.org/rpms/libsepol/pull-request/1
2017-10-12 17:17:39 +02:00
Petr Lautrbach
640cc38286 libsepol-2.7-1
- Update to upstream release 2017-08-04
2017-08-07 13:44:45 +02:00
Fedora Release Engineering
41f64ace3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 02:15:36 +00:00
Florian Weimer
e02987b8e3 Rebuild with binutils fix for ppc64le (#1475636) 2017-07-30 21:55:24 +02:00
Petr Lautrbach
259de5ea3b libsepol-2.6-3
- Fix neverallow bug when checking conditional policy
- Destroy the expanded level when mls_semantic_level_expand() fails
- Do not seg fault on sepol_*_key_free(NULL)
2017-07-28 14:02:33 +02:00
Fedora Release Engineering
175b09a804 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 19:42:12 +00:00
Petr Lautrbach
99653f4b76 libsepol-2.6-1
- Update to upstream release 2016-10-14
2017-02-20 12:27:15 +01:00
Fedora Release Engineering
6f37e10a79 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 19:26:32 +00:00
Petr Lautrbach
d162105aae libsepol-2.5-10
- Check for too many permissions in classes and commons in CIL
- Fix xperm mapping between avrule and avtab
- tests: Fix mispelling of optimization option
- Fix unused/uninitialized variables on mac build
- Produce more meaningful error messages for conflicting type rules in CIL
- make "make test" fail when a CUnit test fails
- tests: fix g_b_role_2 test
- Change which attributes CIL keeps in the binary policy
- Port str_read() from kernel and remove multiple occurances of similar code
- Use calloc instead of malloc for all the *_to_val_structs
- Fix bugs found by AFL
- Fix memory leak in expand.c
- Fix invalid read when policy file is corrupt
- Fix possible use of uninitialized variables
2016-10-04 08:17:24 +02:00
Petr Lautrbach
aac9abeb50 libsepol-2.5-9
- Warn instead of fail if permission is not resolved
- Ignore object_r when adding userrole mappings to policydb
2016-08-01 10:46:53 +02:00
Petr Lautrbach
5ec2ad1fb2 libsepol-2.5-8
- Add missing return to sepol_node_query()
- Add missing <stdarg.h> include
2016-07-14 10:36:41 +02:00
Petr Lautrbach
44e2d26a69 libsepol-2.5-7
- Correctly detect unknown classes in sepol_string_to_security_class
- Sort object files for deterministic linking order
- Fix neverallowxperm checking on attributes
- Remove libsepol.map when cleaning
- Add high-level language line marking support to CIL
2016-06-23 12:27:14 +02:00
Petr Lautrbach
0a1d1e58aa libsepol-2.5-6
- Change logic of bounds checking to match change in kernel
- Fix multiple spelling errors
2016-05-06 16:04:28 +02:00
Petr Lautrbach
d88ffa19a4 libsepol-2.5-5
- Only apply bounds checking to source types in rules
- Fix CIL and not add an attribute as a type in the attr_type_map
2016-05-02 07:52:38 +02:00
Petr Lautrbach
29e9ab01e1 Don't use -S git in autosetup as it requires git in a buildroot
Fixes:

+ '[' 0 -ne 0 ']'
+ cd libsepol-2.5
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/bin/git init -q
/var/tmp/rpm-tmp.yCRSdD: line 42: /usr/bin/git: No such file or directory
error: Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
    Bad exit status from /var/tmp/rpm-tmp.yCRSdD (%prep)
2016-04-29 12:06:32 +02:00
Petr Lautrbach
71b1a80d94 libsepol-2.5-4
- Build policy on systems not supporting DCCP protocol
- Fix extended permissions neverallow checking
- Fix CIL neverallow and bounds checking
- Android.mk: Add -D_GNU_SOURCE to common_cflags
2016-04-29 11:49:05 +02:00
Petr Lautrbach
6bf5b06538 Use %autosetup to simplify updates 2016-04-29 11:47:41 +02:00
Petr Lautrbach
a7ec325b44 libsepol-2.5-3
- Fix bug in CIL when resetting classes
- Add support for portcon dccp protocol
2016-04-08 20:27:32 +02:00
Petr Lautrbach
154778f82c libsepol-2.5-2.fc24
- Use fully versioned arch-specific requires

https://fedoraproject.org/wiki/Packaging:Guidelines#Requiring_Base_Package
2016-02-28 11:29:04 +01:00
Petr Lautrbach
0861542f57 libsepol-2.5-1
- Update to upstream release 2016-02-23
2016-02-23 21:31:12 +01:00
Petr Lautrbach
96ba36d4a0 Remove unused tmp.patch 2016-02-22 17:07:50 +01:00
Petr Lautrbach
3febb8cf9a libsepol-2.5-0.1.rc1
Update to upstream rc1 release 2016-01-07
2016-02-21 14:34:14 +01:00
Dennis Gilmore
a554107a85 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 03:54:18 +00:00
Petr Lautrbach
8b5abd72f1 Revert "Improve compatibility with Python 3 SWIG bindings"
The patch introduced new issues and memory leaks.

This reverts commit cb8eded90a.
2015-09-01 16:41:48 +02:00
Michal Srb
cb8eded90a Improve compatibility with Python 3 SWIG bindings
- Resolves: rhbz#1247714
2015-08-25 13:00:18 +02:00
Adam Jackson
cc880287e2 Pass ldflags to make so hardening works 2015-08-14 14:52:55 -04:00
Petr Lautrbach
5e480567c8 Update to upstream release 2.4 2015-07-20 17:41:51 +02:00
Petr Lautrbach
e4eba91d66 Drop unused libsepol-rhat.patch 2015-07-20 17:41:34 +02:00
Dennis Gilmore
658aaff9c8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 17:15:19 +00:00