2006-02-10 17:04:04 +00:00
|
|
|
%define libauditver 1.1.4-3
|
2006-10-20 13:21:17 +00:00
|
|
|
%define libsepolver 1.12.27-1
|
2006-09-29 18:12:05 +00:00
|
|
|
%define libsemanagever 1.6.17-1
|
2006-10-20 13:08:28 +00:00
|
|
|
%define libselinuxver 1.30.29-2
|
2004-09-09 10:33:59 +00:00
|
|
|
Summary: SELinux policy core utilities.
|
|
|
|
|
Name: policycoreutils
|
2006-11-14 16:03:27 +00:00
|
|
|
Version: 1.33.1
|
2006-11-16 19:26:21 +00:00
|
|
|
Release: 8%{?dist}
|
2004-09-09 10:33:59 +00:00
|
|
|
License: GPL
|
|
|
|
|
Group: System Environment/Base
|
2004-09-09 10:34:37 +00:00
|
|
|
Source: http://www.nsa.gov/selinux/archives/policycoreutils-%{version}.tgz
|
2006-11-14 16:03:27 +00:00
|
|
|
Source1: system-config-selinux.png
|
|
|
|
|
Source2: system-config-selinux.desktop
|
|
|
|
|
Source3: system-config-selinux.pam
|
|
|
|
|
Source4: system-config-selinux.console
|
2006-08-12 17:16:43 +00:00
|
|
|
Patch: policycoreutils-rhat.patch
|
2006-09-08 14:53:08 +00:00
|
|
|
Patch1: policycoreutils-po.patch
|
2004-09-09 20:35:08 +00:00
|
|
|
|
2006-06-06 13:13:02 +00:00
|
|
|
BuildRequires: pam-devel libsepol-devel >= %{libsepolver} libsemanage-devel >= %{libsemanagever} libselinux-devel >= %{libselinuxver} libcap-devel audit-libs-devel gettext
|
2006-03-10 19:19:11 +00:00
|
|
|
Requires: /bin/mount /bin/egrep /bin/awk /usr/bin/diff
|
2006-11-09 13:39:52 +00:00
|
|
|
Requires: libsepol >= %{libsepolver} libsemanage >= %{libsemanagever} libselinux-python coreutils audit-libs-python >= %{libauditver}
|
2006-06-16 19:27:55 +00:00
|
|
|
Requires(post): /sbin/service /sbin/chkconfig
|
2006-05-10 18:46:34 +00:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
2004-09-09 10:33:59 +00:00
|
|
|
|
|
|
|
|
%description
|
2005-09-29 01:11:47 +00:00
|
|
|
Security-enhanced Linux is a feature of the Linux® kernel and a number
|
2004-09-09 10:33:59 +00:00
|
|
|
of utilities with enhanced security functionality designed to add
|
|
|
|
|
mandatory access controls to Linux. The Security-enhanced Linux
|
|
|
|
|
kernel contains new architectural components originally developed to
|
|
|
|
|
improve the security of the Flask operating system. These
|
|
|
|
|
architectural components provide general support for the enforcement
|
|
|
|
|
of many kinds of mandatory access control policies, including those
|
|
|
|
|
based on the concepts of Type Enforcement®, Role-based Access
|
|
|
|
|
Control, and Multi-level Security.
|
|
|
|
|
|
|
|
|
|
policycoreutils contains the policy core utilities that are required
|
|
|
|
|
for basic operation of a SELinux system. These utilities include
|
|
|
|
|
load_policy to load policies, setfiles to label filesystems, newrole
|
|
|
|
|
to switch roles, and run_init to run /etc/init.d scripts in the proper
|
|
|
|
|
context.
|
2005-10-18 14:16:52 +00:00
|
|
|
|
2004-09-09 10:33:59 +00:00
|
|
|
%prep
|
|
|
|
|
%setup -q
|
2006-09-05 12:01:21 +00:00
|
|
|
%patch -p1 -b .rhat
|
2006-09-08 14:53:08 +00:00
|
|
|
%patch1 -p1 -b .rhatpo
|
2005-08-02 16:57:45 +00:00
|
|
|
|
2004-09-09 10:33:59 +00:00
|
|
|
%build
|
2006-01-31 00:21:56 +00:00
|
|
|
make LOG_AUDIT_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags}" all
|
2004-09-09 10:33:59 +00:00
|
|
|
|
|
|
|
|
%install
|
2006-05-10 18:46:34 +00:00
|
|
|
rm -rf %{buildroot}
|
2006-05-26 12:49:40 +00:00
|
|
|
mkdir -p %{buildroot}/etc/rc.d/init.d
|
2006-05-10 18:46:34 +00:00
|
|
|
mkdir -p %{buildroot}%{_bindir}
|
|
|
|
|
mkdir -p %{buildroot}%{_sbindir}
|
|
|
|
|
mkdir -p %{buildroot}/sbin
|
|
|
|
|
mkdir -p %{buildroot}%{_mandir}/man1
|
|
|
|
|
mkdir -p %{buildroot}%{_mandir}/man8
|
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/pam.d
|
2006-11-14 16:03:27 +00:00
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/security/console.apps
|
2004-09-09 10:33:59 +00:00
|
|
|
|
2006-11-14 16:03:27 +00:00
|
|
|
make LOG_AUDIT_PRIV=y DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" install
|
|
|
|
|
install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/system-config-selinux/
|
|
|
|
|
install -m 644 %{SOURCE3} %{buildroot}%{_sysconfdir}/pam.d/system-config-selinux
|
|
|
|
|
install -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/security/console.apps/system-config-selinux
|
|
|
|
|
ln -sf consolehelper %{buildroot}%{_bindir}/system-config-selinux
|
|
|
|
|
|
|
|
|
|
desktop-file-install --vendor fedora \
|
|
|
|
|
--dir ${RPM_BUILD_ROOT}%{_datadir}/applications \
|
|
|
|
|
--add-category X-Fedora \
|
|
|
|
|
%{SOURCE2}
|
2004-09-09 10:33:59 +00:00
|
|
|
%find_lang %{name}
|
|
|
|
|
|
2006-10-20 13:08:28 +00:00
|
|
|
%package newrole
|
|
|
|
|
Summary: newrole application for RBAC/MLS
|
2006-11-14 16:03:27 +00:00
|
|
|
Group: System Environment/Base
|
2006-10-20 13:08:28 +00:00
|
|
|
Requires: policycoreutils = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description newrole
|
|
|
|
|
RBAC/MLS policy machines require newrole as a way of changing the role
|
|
|
|
|
or level of a logged in user.
|
|
|
|
|
|
|
|
|
|
%files newrole
|
|
|
|
|
%{_bindir}/newrole
|
|
|
|
|
%{_mandir}/man1/newrole.1.gz
|
|
|
|
|
|
2006-11-14 16:03:27 +00:00
|
|
|
%package gui
|
|
|
|
|
Summary: SELinux configuration GUI
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
Requires: policycoreutils = %{version}-%{release}
|
|
|
|
|
Requires: gnome-python2, pygtk2, pygtk2-libglade, gnome-python2-canvas
|
|
|
|
|
Requires: usermode, rhpl
|
|
|
|
|
Requires: python >= 2.4
|
|
|
|
|
BuildRequires: desktop-file-utils
|
|
|
|
|
Obsoletes: system-config-selinux
|
|
|
|
|
|
|
|
|
|
%description gui
|
|
|
|
|
system-config-selinux is a utility for managing the SELinux environment
|
|
|
|
|
|
|
|
|
|
%files gui
|
|
|
|
|
%{_bindir}/system-config-selinux
|
|
|
|
|
%{_datadir}/applications/fedora-system-config-selinux.desktop
|
|
|
|
|
%{_datadir}/system-config-selinux/
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/pam.d/system-config-selinux
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/security/console.apps/system-config-selinux
|
|
|
|
|
|
|
|
|
|
%clean
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
|
2004-09-09 10:33:59 +00:00
|
|
|
%files -f %{name}.lang
|
|
|
|
|
%defattr(-,root,root)
|
2004-09-09 10:34:14 +00:00
|
|
|
/sbin/restorecon
|
2006-03-17 21:39:21 +00:00
|
|
|
/sbin/fixfiles
|
2006-05-26 12:49:40 +00:00
|
|
|
/sbin/setfiles
|
2006-03-17 20:29:37 +00:00
|
|
|
%{_sbindir}/restorecond
|
2005-11-07 19:20:59 +00:00
|
|
|
%{_sbindir}/setsebool
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_sbindir}/semodule
|
2005-11-29 05:05:11 +00:00
|
|
|
%{_sbindir}/semanage
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_sbindir}/load_policy
|
|
|
|
|
%{_sbindir}/audit2why
|
2004-09-09 10:33:59 +00:00
|
|
|
%{_sbindir}/genhomedircon
|
2004-09-09 10:34:37 +00:00
|
|
|
%{_sbindir}/sestatus
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_sbindir}/run_init
|
|
|
|
|
%{_sbindir}/open_init_pty
|
|
|
|
|
%{_bindir}/audit2allow
|
2005-12-07 16:56:22 +00:00
|
|
|
%{_bindir}/chcat
|
2006-05-05 20:39:18 +00:00
|
|
|
%{_bindir}/secon
|
2006-08-02 18:44:04 +00:00
|
|
|
%{_bindir}/semodule_deps
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_bindir}/semodule_expand
|
|
|
|
|
%{_bindir}/semodule_link
|
2006-09-25 14:01:37 +00:00
|
|
|
%{_bindir}/semodule_package
|
2005-12-07 16:56:22 +00:00
|
|
|
%{_mandir}/man8/chcat.8.gz
|
2006-03-17 20:29:37 +00:00
|
|
|
%{_mandir}/man8/restorecond.8.gz
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_mandir}/man8/restorecon.8.gz
|
2004-09-09 10:34:37 +00:00
|
|
|
%{_mandir}/man8/sestatus.8.gz
|
2005-11-29 05:05:11 +00:00
|
|
|
%{_mandir}/man8/semanage.8.gz
|
2005-11-30 13:06:22 +00:00
|
|
|
%{_mandir}/man8/semodule.8.gz
|
2006-08-02 18:44:04 +00:00
|
|
|
%{_mandir}/man8/semodule_deps.8.gz
|
2005-11-30 13:06:22 +00:00
|
|
|
%{_mandir}/man8/semodule_link.8.gz
|
|
|
|
|
%{_mandir}/man8/semodule_package.8.gz
|
|
|
|
|
%{_mandir}/man8/semodule_expand.8.gz
|
2004-09-09 10:33:59 +00:00
|
|
|
%{_mandir}/man8/setfiles.8.gz
|
2004-09-09 10:34:37 +00:00
|
|
|
%{_mandir}/man8/fixfiles.8.gz
|
2004-09-09 10:38:01 +00:00
|
|
|
%{_mandir}/man8/load_policy.8.gz
|
2005-05-20 17:22:30 +00:00
|
|
|
%{_mandir}/man8/audit2why.8.gz
|
2005-01-24 17:07:54 +00:00
|
|
|
%{_mandir}/man8/genhomedircon.8.gz
|
|
|
|
|
%{_mandir}/man8/open_init_pty.8.gz
|
2006-03-04 05:05:58 +00:00
|
|
|
%{_mandir}/man8/setsebool.8.gz
|
2005-08-02 16:57:45 +00:00
|
|
|
%{_mandir}/man8/run_init.8.gz
|
|
|
|
|
%{_mandir}/man1/audit2allow.1.gz
|
2006-09-08 14:53:08 +00:00
|
|
|
%{_mandir}/man1/secon.1.gz
|
2004-09-09 10:33:59 +00:00
|
|
|
%config %{_sysconfdir}/pam.d/newrole
|
|
|
|
|
%config %{_sysconfdir}/pam.d/run_init
|
2004-09-09 10:34:37 +00:00
|
|
|
%config(noreplace) %{_sysconfdir}/sestatus.conf
|
2006-01-10 17:12:58 +00:00
|
|
|
%{_libdir}/python2.4/site-packages/seobject.py*
|
2006-04-18 20:53:54 +00:00
|
|
|
%{_libdir}/python2.4/site-packages/avc.py*
|
2006-03-17 20:29:37 +00:00
|
|
|
%attr(755,root,root) /etc/rc.d/init.d/restorecond
|
|
|
|
|
%config(noreplace) /etc/selinux/restorecond.conf
|
2004-09-09 10:33:59 +00:00
|
|
|
|
2006-11-14 16:03:27 +00:00
|
|
|
|
2006-07-18 15:10:35 +00:00
|
|
|
%preun
|
|
|
|
|
if [ $1 -eq 0 ]; then
|
|
|
|
|
/sbin/service restorecond stop > /dev/null 2>&1
|
|
|
|
|
/sbin/chkconfig --del restorecond
|
|
|
|
|
fi
|
|
|
|
|
|
2006-03-21 04:07:13 +00:00
|
|
|
%post
|
2006-06-16 19:27:55 +00:00
|
|
|
/sbin/chkconfig --add restorecond
|
2006-04-20 16:05:33 +00:00
|
|
|
[ -x /sbin/service ] && /sbin/service restorecond condrestart
|
2006-03-21 04:07:13 +00:00
|
|
|
|
2004-09-09 10:33:59 +00:00
|
|
|
%changelog
|
2006-11-16 19:26:21 +00:00
|
|
|
* Thu Nov 16 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-8
|
|
|
|
|
- Fix display of gui
|
|
|
|
|
|
2006-11-16 14:43:13 +00:00
|
|
|
* Thu Nov 16 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-7
|
|
|
|
|
- Add patch by Joe Plans to make run_init use pam_acct_mgmt
|
|
|
|
|
|
2006-11-15 23:24:20 +00:00
|
|
|
* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-6
|
|
|
|
|
- More fixes to gui
|
|
|
|
|
|
2006-11-15 21:34:02 +00:00
|
|
|
* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-5
|
|
|
|
|
- Fix audit2allow to generate referene policy
|
|
|
|
|
|
2006-11-15 21:14:38 +00:00
|
|
|
* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-4
|
|
|
|
|
- Add group sort for portsPage.py
|
|
|
|
|
- Add enable/disableaudit to modules page
|
|
|
|
|
|
2006-11-15 15:15:58 +00:00
|
|
|
* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-3
|
|
|
|
|
- Add glade file
|
|
|
|
|
|
2006-11-15 13:11:30 +00:00
|
|
|
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-2
|
|
|
|
|
- Fix Module handling in system-config-selinux
|
|
|
|
|
|
|
|
|
|
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-1
|
2006-11-14 16:03:27 +00:00
|
|
|
- Update to upstream
|
|
|
|
|
* Merged newrole patch set from Michael Thompson.
|
|
|
|
|
- Add policycoreutils-gui
|
|
|
|
|
|
2006-11-09 13:39:52 +00:00
|
|
|
* Thu Nov 9 2006 Dan Walsh <dwalsh@redhat.com> 1.32-3
|
|
|
|
|
- No longer requires rhpl
|
|
|
|
|
|
2006-11-07 16:49:02 +00:00
|
|
|
* Fri Nov 6 2006 Dan Walsh <dwalsh@redhat.com> 1.32-2
|
|
|
|
|
- Fix genhomedircon man page
|
|
|
|
|
|
2006-10-20 13:08:28 +00:00
|
|
|
* Fri Oct 9 2006 Dan Walsh <dwalsh@redhat.com> 1.32-1
|
|
|
|
|
- Add newrole audit patch from sgrubb
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged audit2allow -l fix from Yuichi Nakamura.
|
|
|
|
|
* Merged restorecon -i and -o - support from Karl MacMillan.
|
|
|
|
|
* Merged semanage/seobject fix from Dan Walsh.
|
|
|
|
|
* Merged fixfiles -R and verify changes from Dan Walsh.
|
|
|
|
|
|
|
|
|
|
* Fri Oct 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.30-2
|
|
|
|
|
- Separate out newrole into its own package
|
|
|
|
|
|
2006-09-29 18:12:05 +00:00
|
|
|
* Fri Sep 29 2006 Dan Walsh <dwalsh@redhat.com> 1.30.30-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged newrole auditing of failures due to user actions from
|
|
|
|
|
Michael Thompson.
|
|
|
|
|
|
2006-09-26 15:46:20 +00:00
|
|
|
* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-6
|
|
|
|
|
- Pass -i qualifier to restorecon for fixfiles -R
|
|
|
|
|
- Update translations
|
|
|
|
|
|
2006-09-23 23:35:08 +00:00
|
|
|
* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-5
|
|
|
|
|
- Remove recursion from fixfiles -R calls
|
|
|
|
|
- Fix semanage to verify prefix
|
|
|
|
|
|
2006-09-21 21:04:29 +00:00
|
|
|
* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-4
|
|
|
|
|
- More translations
|
|
|
|
|
- Compile with -pie
|
|
|
|
|
|
2006-09-18 20:02:57 +00:00
|
|
|
* Mon Sep 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-3
|
|
|
|
|
- Add translations
|
|
|
|
|
- Fix audit2allow -l
|
|
|
|
|
|
2006-09-16 11:50:44 +00:00
|
|
|
* Thu Sep 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-2
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
2006-09-14 12:34:54 +00:00
|
|
|
* Thu Sep 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
- Change -o to take "-" for stdout
|
|
|
|
|
|
|
|
|
|
* Wed Sep 13 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-9
|
|
|
|
|
- Add -h support for genhomedircon
|
|
|
|
|
|
2006-09-13 10:33:47 +00:00
|
|
|
* Wed Sep 13 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-8
|
|
|
|
|
- Fix fixfiles handling of -o
|
|
|
|
|
|
2006-09-11 14:29:14 +00:00
|
|
|
* Mon Sep 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-7
|
|
|
|
|
- Make restorecon return the number of changes files if you use the -n flag
|
|
|
|
|
|
2006-09-08 14:53:08 +00:00
|
|
|
* Fri Sep 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-6
|
|
|
|
|
- Change setfiles and restorecon to use stderr except for -o flag
|
|
|
|
|
- Also -o flag will now output files
|
|
|
|
|
|
2006-09-07 13:31:34 +00:00
|
|
|
* Thu Sep 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-5
|
|
|
|
|
- Put back Erich's change
|
|
|
|
|
|
2006-09-06 15:54:53 +00:00
|
|
|
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-4
|
|
|
|
|
- Remove recursive switch when using rpm
|
|
|
|
|
|
2006-09-06 14:54:32 +00:00
|
|
|
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-3
|
|
|
|
|
- Fix fixfiles to handle multiple rpm and make -o work
|
|
|
|
|
|
2006-09-05 12:01:21 +00:00
|
|
|
* Fri Sep 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-2
|
|
|
|
|
- Apply patch
|
|
|
|
|
|
2006-09-02 02:43:09 +00:00
|
|
|
* Fri Sep 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-1
|
|
|
|
|
- Security fixes to run python in a more locked down manner
|
|
|
|
|
- More Translations
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged fix for restorecon // handling from Erich Schubert.
|
|
|
|
|
* Merged translations update and fixfiles fix from Dan Walsh.
|
|
|
|
|
|
2006-08-31 20:18:10 +00:00
|
|
|
* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-5
|
|
|
|
|
- Change scripts to use /usr/sbin/python
|
|
|
|
|
|
2006-08-31 15:11:57 +00:00
|
|
|
* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-4
|
|
|
|
|
- Add -i qualified to restorecon to tell it to ignore files that do not exist
|
|
|
|
|
- Fixfiles also modified for this change
|
|
|
|
|
|
2006-08-31 12:09:46 +00:00
|
|
|
* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-3
|
|
|
|
|
- Ignore sigpipe
|
|
|
|
|
|
2006-08-31 11:42:45 +00:00
|
|
|
* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-2
|
|
|
|
|
- Fix init script and add translations
|
|
|
|
|
|
|
|
|
|
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged fix for restorecon symlink handling from Erich Schubert.
|
|
|
|
|
|
2006-08-12 17:16:43 +00:00
|
|
|
* Sat Aug 12 2006 Dan Walsh <dwalsh@redhat.com> 1.30.26-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged semanage local file contexts patch from Chris PeBenito.
|
|
|
|
|
- Fix fixfiles log creation
|
|
|
|
|
- More translations
|
|
|
|
|
|
2006-08-06 00:18:19 +00:00
|
|
|
* Thu Aug 3 2006 Dan Walsh <dwalsh@redhat.com> 1.30.25-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged patch from Dan Walsh with:
|
|
|
|
|
* audit2allow: process MAC_POLICY_LOAD events
|
|
|
|
|
* newrole: run shell with - prefix to start a login shell
|
|
|
|
|
* po: po file updates
|
|
|
|
|
* restorecond: bail if SELinux not enabled
|
|
|
|
|
* fixfiles: omit -q
|
|
|
|
|
* genhomedircon: fix exit code if non-root
|
|
|
|
|
* semodule_deps: install man page
|
|
|
|
|
* Merged secon Makefile fix from Joshua Brindle.
|
|
|
|
|
* Merged netfilter contexts support patch from Chris PeBenito.
|
|
|
|
|
|
2006-08-02 20:53:36 +00:00
|
|
|
* Wed Aug 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-3
|
|
|
|
|
- Fix audit2allow to handle reload of policy
|
|
|
|
|
|
2006-08-02 18:28:08 +00:00
|
|
|
* Wed Aug 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-2
|
|
|
|
|
- Stop restorecond init script when selinux is not enabled
|
|
|
|
|
|
2006-08-01 13:56:38 +00:00
|
|
|
* Tue Aug 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged restorecond size_t fix from Joshua Brindle.
|
|
|
|
|
* Merged secon keycreate patch from Michael LeMay.
|
|
|
|
|
* Merged restorecond fixes from Dan Walsh.
|
|
|
|
|
Merged updated po files from Dan Walsh.
|
|
|
|
|
* Merged python gettext patch from Stephen Bennett.
|
|
|
|
|
* Merged semodule_deps from Karl MacMillan.
|
|
|
|
|
|
2006-07-27 18:51:20 +00:00
|
|
|
* Thu Jul 27 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-7
|
|
|
|
|
- Change newrole to exec a login shell to prevent suspend.
|
|
|
|
|
|
|
|
|
|
* Fri Jul 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-6
|
|
|
|
|
- Report error when selinux not enabled in restorecond
|
|
|
|
|
|
2006-07-18 15:10:35 +00:00
|
|
|
* Tue Jul 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-5
|
|
|
|
|
- Fix handling of restorecond
|
|
|
|
|
|
2006-07-17 13:40:31 +00:00
|
|
|
* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-4
|
|
|
|
|
- Fix creation of restorecond pidfile
|
|
|
|
|
|
2006-07-17 13:10:11 +00:00
|
|
|
* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-3
|
|
|
|
|
- Update translations
|
|
|
|
|
- Update to new GCC
|
|
|
|
|
|
2006-07-11 19:29:29 +00:00
|
|
|
* Mon Jul 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-2
|
|
|
|
|
- Add verbose flag to restorecond and update translations
|
|
|
|
|
|
2006-07-07 11:34:10 +00:00
|
|
|
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Lindent.
|
|
|
|
|
* Merged patch from Dan Walsh with:
|
|
|
|
|
* -p option (progress) for setfiles and restorecon.
|
|
|
|
|
* disable context translation for setfiles and restorecon.
|
|
|
|
|
* on/off values for setsebool.
|
|
|
|
|
* Merged setfiles and semodule_link fixes from Joshua Brindle.
|
|
|
|
|
|
2006-06-22 18:37:08 +00:00
|
|
|
* Thu Jun 22 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-5
|
|
|
|
|
- Add progress indicator on fixfiles/setfiles/restorecon
|
|
|
|
|
|
2006-06-21 19:58:48 +00:00
|
|
|
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-4
|
|
|
|
|
- Don't use translations with matchpathcon
|
|
|
|
|
|
2006-06-20 13:14:45 +00:00
|
|
|
* Tue Jun 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-3
|
|
|
|
|
- Prompt for selinux-policy-devel package in audit2allow
|
|
|
|
|
|
2006-06-19 14:36:40 +00:00
|
|
|
* Mon Jun 19 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-2
|
|
|
|
|
- Allow setsebool to use on/off
|
|
|
|
|
- Update translations
|
|
|
|
|
|
2006-06-16 19:27:55 +00:00
|
|
|
* Fri Jun 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged fix for setsebool error path from Serge Hallyn.
|
|
|
|
|
* Merged patch from Dan Walsh with:
|
|
|
|
|
* Updated po files.
|
|
|
|
|
* Fixes for genhomedircon and seobject.
|
|
|
|
|
* Audit message for mass relabel by setfiles.
|
|
|
|
|
|
2006-06-13 20:25:13 +00:00
|
|
|
* Tue Jun 13 2006 James Antill <jantill@redhat.com> 1.30.12-5
|
|
|
|
|
- Update audit mass relabel to only compile in when audit is installed.
|
|
|
|
|
|
2006-06-12 15:19:05 +00:00
|
|
|
* Mon Jun 12 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-4
|
|
|
|
|
- Update to required versions
|
2006-06-12 16:52:57 +00:00
|
|
|
- Update translation
|
2006-06-12 15:19:05 +00:00
|
|
|
|
2006-06-07 14:51:47 +00:00
|
|
|
* Wed Jun 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-3
|
|
|
|
|
- Fix shell selection
|
|
|
|
|
|
2006-06-06 13:13:02 +00:00
|
|
|
* Mon Jun 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-2
|
|
|
|
|
- Add BuildRequires for gettext
|
|
|
|
|
|
2006-06-06 12:32:11 +00:00
|
|
|
* Mon Jun 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-1
|
|
|
|
|
* Updated fixfiles script for new setfiles location in /sbin.
|
|
|
|
|
|
2006-05-31 23:29:31 +00:00
|
|
|
* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged more translations from Dan Walsh.
|
|
|
|
|
* Merged patch to relocate setfiles to /sbin for early relabel
|
|
|
|
|
when /usr might not be mounted from Dan Walsh.
|
|
|
|
|
* Merged semanage/seobject patch to preserve fcontext ordering in list.
|
|
|
|
|
* Merged secon patch from James Antill.
|
|
|
|
|
|
2006-05-26 12:49:40 +00:00
|
|
|
* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4
|
|
|
|
|
- Fix seobject.py to not sort the file_context file.
|
|
|
|
|
- move setfiles to /sbin
|
|
|
|
|
|
2006-05-25 14:59:45 +00:00
|
|
|
* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-3
|
|
|
|
|
- secon man page and getopt fixes.
|
|
|
|
|
- Enable mass relabel audit, even though it doesn't work.
|
|
|
|
|
|
2006-05-24 18:08:17 +00:00
|
|
|
* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-2
|
|
|
|
|
- secon fixes for --self-exec etc.
|
|
|
|
|
- secon change from level => sensitivity, add clearance.
|
|
|
|
|
- Add mass relabel AUDIT patch, but disable it until kernel problem solved.
|
|
|
|
|
|
2006-05-23 10:40:36 +00:00
|
|
|
* Tue May 24 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged patch with updates to audit2allow, secon, genhomedircon,
|
|
|
|
|
and semanage from Dan Walsh.
|
|
|
|
|
|
2006-05-20 10:28:05 +00:00
|
|
|
* Sat May 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-4
|
|
|
|
|
- Fix exception in genhomedircon
|
|
|
|
|
|
2006-05-18 19:56:54 +00:00
|
|
|
* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-3
|
|
|
|
|
- Add rhpl dependancy
|
|
|
|
|
|
2006-05-15 20:44:19 +00:00
|
|
|
* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-2
|
|
|
|
|
- Add secon man page and prompt options.
|
|
|
|
|
|
2006-05-15 14:06:13 +00:00
|
|
|
* Mon May 15 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Fixed audit2allow and po Makefiles for DESTDIR= builds.
|
|
|
|
|
* Merged .po file patch from Dan Walsh.
|
|
|
|
|
* Merged bug fix for genhomedircon.
|
|
|
|
|
|
2006-05-10 18:46:34 +00:00
|
|
|
* Wed May 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-2
|
|
|
|
|
- Fix exception on bad file_context
|
|
|
|
|
|
2006-05-08 15:24:36 +00:00
|
|
|
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
* Merged fix warnings patch from Karl MacMillan.
|
|
|
|
|
* Merged patch from Dan Walsh.
|
|
|
|
|
This includes audit2allow changes for analysis plugins,
|
|
|
|
|
internationalization support for several additional programs
|
|
|
|
|
and added po files, some fixes for semanage, and several cleanups.
|
|
|
|
|
It also adds a new secon utility.
|
|
|
|
|
|
2006-05-07 11:07:53 +00:00
|
|
|
* Sun May 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-5
|
|
|
|
|
- Fix genhomedircon to catch duplicate homedir problem
|
|
|
|
|
|
2006-05-05 20:39:18 +00:00
|
|
|
* Thu May 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-4
|
|
|
|
|
- Add secon program
|
|
|
|
|
- Add translations
|
|
|
|
|
|
2006-04-20 16:05:33 +00:00
|
|
|
* Thu Apr 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-3
|
|
|
|
|
- Fix check for "msg"
|
|
|
|
|
|
|
|
|
|
* Mon Apr 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2
|
2006-04-18 20:53:54 +00:00
|
|
|
- Ship avc.py
|
|
|
|
|
|
2006-04-14 19:47:03 +00:00
|
|
|
* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1
|
2006-04-14 13:41:33 +00:00
|
|
|
- Add /etc/samba/secrets.tdb to restorecond.conf
|
2006-04-14 11:51:02 +00:00
|
|
|
- Update from upstream
|
2006-04-14 19:47:03 +00:00
|
|
|
* Merged semanage prefix support from Russell Coker.
|
2006-04-14 11:51:02 +00:00
|
|
|
* Added a test to setfiles to check that the spec file is
|
|
|
|
|
a regular file.
|
|
|
|
|
|
2006-04-06 10:21:29 +00:00
|
|
|
* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-4
|
|
|
|
|
- added some missing buildrequires
|
|
|
|
|
- added Requires: initscripts for /sbin/service
|
|
|
|
|
|
2006-04-06 09:31:39 +00:00
|
|
|
* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-3
|
|
|
|
|
- use absolute path /sbin/service
|
|
|
|
|
|
2006-05-05 20:39:18 +00:00
|
|
|
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-2
|
2006-04-05 13:11:54 +00:00
|
|
|
- Fix audit2allow to not require ausearch.
|
|
|
|
|
- Fix man page
|
|
|
|
|
- Add libflashplayer to restorecond.conf
|
|
|
|
|
|
2006-03-29 20:39:44 +00:00
|
|
|
* Wed Mar 29 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged audit2allow fixes for refpolicy from Dan Walsh.
|
|
|
|
|
* Merged fixfiles patch from Dan Walsh.
|
|
|
|
|
* Merged restorecond daemon from Dan Walsh.
|
|
|
|
|
* Merged semanage non-MLS fixes from Chris PeBenito.
|
|
|
|
|
* Merged semanage and semodule man page examples from Thomas Bleher.
|
|
|
|
|
|
|
|
|
|
* Tue Mar 28 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-4
|
2006-03-29 15:14:48 +00:00
|
|
|
- Clean up reference policy generation in audit2allow
|
|
|
|
|
|
2006-03-29 04:06:16 +00:00
|
|
|
* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-3
|
|
|
|
|
- Add IN_MOVED_TO to catch renames
|
|
|
|
|
|
2006-03-21 16:17:21 +00:00
|
|
|
* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2
|
|
|
|
|
- make restorecond only ignore non directories with lnk > 1
|
|
|
|
|
|
2006-03-21 15:49:19 +00:00
|
|
|
* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1
|
|
|
|
|
- Make audit2allow translate dontaudit as well as allow rules
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged semanage labeling prefix patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-03-21 14:19:08 +00:00
|
|
|
* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30-5
|
|
|
|
|
- Fix audit2allow to retrieve dontaudit rules
|
|
|
|
|
|
2006-03-21 04:07:13 +00:00
|
|
|
* Mon Mar 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30-4
|
|
|
|
|
- Open file descriptor to make sure file does not change from underneath.
|
|
|
|
|
|
2006-03-20 21:24:16 +00:00
|
|
|
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-3
|
|
|
|
|
- Fixes for restorecond attack via symlinks
|
|
|
|
|
- Fixes for fixfiles
|
|
|
|
|
|
2006-03-18 04:58:48 +00:00
|
|
|
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-2
|
|
|
|
|
- Restorecon has to handle suspend/resume
|
|
|
|
|
|
2006-03-17 20:32:59 +00:00
|
|
|
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1
|
|
|
|
|
- Update to upstream
|
|
|
|
|
|
2006-03-17 20:29:37 +00:00
|
|
|
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.27-1
|
|
|
|
|
- Add restorecond
|
|
|
|
|
|
2006-03-10 19:19:11 +00:00
|
|
|
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-6
|
|
|
|
|
- Remove prereq
|
|
|
|
|
|
2006-03-06 14:45:58 +00:00
|
|
|
* Mon Mar 6 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-5
|
|
|
|
|
- Fix audit2allow to generate all rules
|
|
|
|
|
|
2006-03-04 05:05:58 +00:00
|
|
|
* Fri Mar 3 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-4
|
|
|
|
|
- Minor fixes to chcat and semanage
|
|
|
|
|
|
|
|
|
|
* Sat Feb 24 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-3
|
|
|
|
|
- Add missing setsebool man page
|
|
|
|
|
|
2006-02-23 21:33:36 +00:00
|
|
|
* Thu Feb 23 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-2
|
|
|
|
|
- Change audit2allow to use devel instead of refpolicy
|
|
|
|
|
|
|
|
|
|
* Mon Feb 20 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-1
|
2006-02-21 19:09:17 +00:00
|
|
|
- Update from upstream
|
|
|
|
|
* Merged semanage bug fix patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged improve bindings patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged semanage usage patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged use PyList patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-02-13 19:54:09 +00:00
|
|
|
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.23-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged newrole -V/--version support from Glauber de Oliveira Costa.
|
|
|
|
|
* Merged genhomedircon prefix patch from Dan Walsh.
|
|
|
|
|
* Merged optionals in base patch from Joshua Brindle.
|
|
|
|
|
|
2006-02-11 05:12:23 +00:00
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.20-2.1
|
|
|
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
|
|
2006-02-10 17:04:04 +00:00
|
|
|
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-2
|
|
|
|
|
- Fix auditing to semanage
|
|
|
|
|
- Change genhomedircon to use new prefix interface in libselinux
|
|
|
|
|
|
2006-02-07 15:37:54 +00:00
|
|
|
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged seuser/user_extra support patch to semodule_package
|
|
|
|
|
from Joshua Brindle.
|
|
|
|
|
* Merged getopt type fix for semodule_link/expand and sestatus
|
|
|
|
|
from Chris PeBenito.
|
|
|
|
|
- Fix genhomedircon output
|
|
|
|
|
|
2006-02-07 13:34:13 +00:00
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.29.18-2.1
|
|
|
|
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
|
|
|
2006-02-03 14:58:37 +00:00
|
|
|
* Fri Feb 3 2006 Dan Walsh <dwalsh@redhat.com> 1.29.18-2
|
|
|
|
|
- Add auditing to semanage
|
|
|
|
|
|
2006-02-02 17:23:00 +00:00
|
|
|
* Thu Feb 2 2006 Dan Walsh <dwalsh@redhat.com> 1.29.18-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-31 00:21:56 +00:00
|
|
|
* Mon Jan 30 2006 Dan Walsh <dwalsh@redhat.com> 1.29.17-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged genhomedircon fix from Dan Walsh.
|
|
|
|
|
* Merged seusers.system patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged genhomedircon patch from Dan Walsh.
|
|
|
|
|
|
2006-01-28 02:47:35 +00:00
|
|
|
* Fri Jan 27 2006 Dan Walsh <dwalsh@redhat.com> 1.29.15-1
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Merged newrole audit patch from Steve Grubb.
|
|
|
|
|
* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
|
|
|
|
|
* Merged semanage and semodule access check patches from Joshua Brindle.
|
|
|
|
|
* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.12-1
|
|
|
|
|
- Add a default of /export/home
|
|
|
|
|
|
2006-01-26 17:22:04 +00:00
|
|
|
* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-3
|
|
|
|
|
- Cleanup of the patch
|
|
|
|
|
|
2006-01-25 19:07:56 +00:00
|
|
|
* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-2
|
|
|
|
|
- Correct handling of symbolic links in restorecon
|
|
|
|
|
|
2006-01-25 16:18:51 +00:00
|
|
|
* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-1
|
|
|
|
|
- Added translation support to semanage
|
|
|
|
|
- Update from upstream
|
|
|
|
|
* Modified newrole and run_init to use the loginuid when
|
|
|
|
|
supported to obtain the Linux user identity to re-authenticate,
|
|
|
|
|
and to fall back to real uid. Dropped the use of the SELinux
|
|
|
|
|
user identity, as Linux users are now mapped to SELinux users
|
|
|
|
|
via seusers and the SELinux user identity space is separate.
|
|
|
|
|
* Merged semanage bug fixes from Ivan Gyurdiev.
|
|
|
|
|
* Merged semanage fixes from Russell Coker.
|
|
|
|
|
* Merged chcat.8 and genhomedircon patches from Dan Walsh.
|
|
|
|
|
|
2006-01-19 22:25:24 +00:00
|
|
|
* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.9-2
|
|
|
|
|
- Fix genhomedircon to work on MLS policy
|
|
|
|
|
|
2006-01-19 21:14:38 +00:00
|
|
|
* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.9-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged chcat, semanage, and setsebool patches from Dan Walsh.
|
|
|
|
|
|
2006-01-19 14:45:25 +00:00
|
|
|
* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-4
|
|
|
|
|
- Fixes for "add"-"modify" error messages
|
|
|
|
|
- Fixes for chcat
|
|
|
|
|
|
2006-01-18 22:06:19 +00:00
|
|
|
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-3
|
|
|
|
|
- Add management of translation file to semaange and seobject
|
|
|
|
|
|
2006-01-18 18:55:09 +00:00
|
|
|
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-2
|
|
|
|
|
- Fix chcat -l -L to work while not root
|
|
|
|
|
|
2006-01-18 17:43:23 +00:00
|
|
|
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged semanage fixes from Ivan Gyurdiev.
|
|
|
|
|
* Merged semanage fixes from Russell Coker.
|
|
|
|
|
* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.
|
|
|
|
|
|
|
|
|
|
* Tue Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-4
|
|
|
|
|
- Update chcat to manage user categories also
|
|
|
|
|
|
2006-01-14 13:54:25 +00:00
|
|
|
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-3
|
|
|
|
|
- Add check for root for semanage, genhomedircon
|
|
|
|
|
|
2006-01-14 06:50:34 +00:00
|
|
|
* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-2
|
|
|
|
|
- Add ivans patch
|
|
|
|
|
|
2006-01-14 03:51:29 +00:00
|
|
|
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged newrole cleanup patch from Steve Grubb.
|
|
|
|
|
* Merged setfiles/restorecon performance patch from Russell Coker.
|
|
|
|
|
* Merged genhomedircon and semanage patches from Dan Walsh.
|
|
|
|
|
* Merged remove add_local/set_local patch from Ivan Gyurdiev.
|
|
|
|
|
|
2006-01-10 19:13:15 +00:00
|
|
|
* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-3
|
|
|
|
|
- Fixes for mls policy
|
|
|
|
|
|
2006-01-10 17:12:58 +00:00
|
|
|
* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-2
|
|
|
|
|
- Update semanage and split out seobject
|
|
|
|
|
- Fix labeleing of home_root
|
|
|
|
|
|
2006-01-05 21:52:31 +00:00
|
|
|
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Added filename to semodule error reporting.
|
|
|
|
|
|
2006-01-05 21:39:11 +00:00
|
|
|
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.29.4-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged genhomedircon and semanage patch from Dan Walsh.
|
|
|
|
|
* Changed semodule error reporting to include argv[0].
|
|
|
|
|
|
2006-01-04 18:53:16 +00:00
|
|
|
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
|
|
|
|
|
* Merged patch series from Ivan Gyurdiev.
|
|
|
|
|
This includes patches to:
|
|
|
|
|
- cleanup setsebool
|
|
|
|
|
- update setsebool to apply active booleans through libsemanage
|
|
|
|
|
- update semodule to use the new semanage_set_rebuild() interface
|
|
|
|
|
- fix various bugs in semanage
|
|
|
|
|
* Merged patch from Dan Walsh (Red Hat).
|
|
|
|
|
This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
|
|
|
|
|
and semanage.
|
|
|
|
|
|
2006-01-02 19:35:53 +00:00
|
|
|
* Mon Jan 2 2006 Dan Walsh <dwalsh@redhat.com> 1.29.2-10
|
|
|
|
|
- Fix restorecon to not say it is changing user section when -vv is specified
|
|
|
|
|
|
2005-12-27 15:08:31 +00:00
|
|
|
* Tue Dec 27 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-9
|
|
|
|
|
- Fixes for semanage, patch from Ivan and added a test script
|
|
|
|
|
|
2005-12-24 17:02:36 +00:00
|
|
|
* Sat Dec 24 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-8
|
|
|
|
|
- Fix getpwnam call
|
|
|
|
|
|
2005-12-24 00:36:40 +00:00
|
|
|
* Fri Dec 23 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-7
|
|
|
|
|
- Anaconda fixes
|
|
|
|
|
|
2005-12-22 21:21:08 +00:00
|
|
|
* Thu Dec 22 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-6
|
|
|
|
|
- Turn off try catch block to debug anaconda failure
|
|
|
|
|
|
2005-12-20 22:42:38 +00:00
|
|
|
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-5
|
|
|
|
|
- More fixes for chcat
|
|
|
|
|
|
2005-12-20 11:35:21 +00:00
|
|
|
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
|
|
|
|
|
- Add try catch for files that may not exists
|
|
|
|
|
|
|
|
|
|
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
|
2005-12-19 23:22:09 +00:00
|
|
|
- Remove commands from genhomedircon for installer
|
|
|
|
|
|
2005-12-14 20:34:32 +00:00
|
|
|
* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-1
|
|
|
|
|
- Fix genhomedircon to work in installer
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged patch for chcat script from Dan Walsh.
|
|
|
|
|
|
2005-12-09 23:23:25 +00:00
|
|
|
* Fri Dec 9 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-2
|
2005-12-09 23:23:03 +00:00
|
|
|
- More fixes to chcat
|
|
|
|
|
|
2005-12-09 22:42:45 +00:00
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2005-12-08 18:01:36 +00:00
|
|
|
* Thu Dec 8 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged fix for audit2allow long option list from Dan Walsh.
|
|
|
|
|
* Merged -r option for restorecon (alias for -R) from Dan Walsh.
|
|
|
|
|
* Merged chcat script and man page from Dan Walsh.
|
|
|
|
|
|
2005-12-07 20:23:01 +00:00
|
|
|
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
- Add gfs support
|
|
|
|
|
|
2005-12-07 16:39:21 +00:00
|
|
|
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.37-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
- Add chcat to policycoreutils, adding +/- syntax
|
|
|
|
|
`
|
2005-12-06 18:45:46 +00:00
|
|
|
* Tue Dec 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.36-2
|
|
|
|
|
- Require new version of libsemanage
|
|
|
|
|
|
2005-12-06 04:14:09 +00:00
|
|
|
* Mon Dec 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.36-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Changed genhomedircon to warn on use of ROLE in homedir_template
|
|
|
|
|
if using managed policy, as libsemanage does not yet support it.
|
2005-11-17 02:49:32 +00:00
|
|
|
|
2005-12-06 04:14:09 +00:00
|
|
|
* Sun Dec 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.35-1
|
2005-12-04 13:19:08 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged genhomedircon bug fix from Dan Walsh.
|
|
|
|
|
* Revised semodule* man pages to refer to checkmodule and
|
|
|
|
|
to include example sections.
|
|
|
|
|
|
|
|
|
|
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.33-1
|
2005-12-02 12:25:31 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
|
|
|
|
|
* Merged genhomedircon fix from Dan Walsh.
|
|
|
|
|
* Merged semodule* man pages from Dan Walsh, and edited them.
|
|
|
|
|
* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
|
|
|
|
|
retain validation/canonicalization of contexts during init.
|
|
|
|
|
|
2005-11-30 19:32:20 +00:00
|
|
|
* Wed Nov 30 2005 Dan Walsh <dwalsh@redhat.com> 1.27.31-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Changed genhomedircon to always use user_r for the role in the
|
|
|
|
|
managed case since user_get_defrole is broken.
|
|
|
|
|
- Add te file capabilities to audit2allow
|
|
|
|
|
- Add man pages for semodule
|
|
|
|
|
|
2005-11-30 13:06:22 +00:00
|
|
|
* Tue Nov 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.30-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
|
|
|
|
|
* Fixed semodule -v option.
|
|
|
|
|
|
|
|
|
|
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.29-1
|
2005-11-29 05:05:11 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged audit2allow python script from Dan Walsh.
|
|
|
|
|
(old script moved to audit2allow.perl, will be removed later).
|
|
|
|
|
* Merged genhomedircon fixes from Dan Walsh.
|
|
|
|
|
* Merged semodule quieting patch from Dan Walsh
|
|
|
|
|
(inverts default, use -v to restore original behavior).
|
|
|
|
|
|
2005-11-17 15:38:45 +00:00
|
|
|
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-3
|
|
|
|
|
- Audit2allow
|
|
|
|
|
* Add more error checking
|
|
|
|
|
* Add gen policy package
|
|
|
|
|
* Add gen requires
|
|
|
|
|
|
2005-11-17 04:08:11 +00:00
|
|
|
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-2
|
2005-11-17 02:49:32 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged genhomedircon rewrite from Dan Walsh.
|
|
|
|
|
- Rewrite audit2allow to python
|
|
|
|
|
|
2005-11-14 18:59:33 +00:00
|
|
|
* Mon Nov 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-5
|
2005-11-14 18:03:56 +00:00
|
|
|
- Fix genhomedircon to work with non libsemanage systems
|
|
|
|
|
|
2005-11-11 20:44:12 +00:00
|
|
|
* Fri Nov 11 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-3
|
2005-11-11 20:13:44 +00:00
|
|
|
- Patch genhomedircon to use libsemanage.py stuff
|
|
|
|
|
|
2005-11-10 02:59:06 +00:00
|
|
|
* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged setsebool cleanup patch from Ivan Gyurdiev.
|
|
|
|
|
|
2005-11-09 22:43:40 +00:00
|
|
|
* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-4
|
2005-11-09 22:12:40 +00:00
|
|
|
- Fix genhomedircon to use seusers file, temporary fix until swigified semanage
|
2005-11-09 19:13:13 +00:00
|
|
|
|
2005-11-09 01:55:26 +00:00
|
|
|
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-1
|
|
|
|
|
* Added -B (--build) option to semodule to force a rebuild.
|
|
|
|
|
* Reverted setsebool patch to call semanage_set_reload_bools().
|
|
|
|
|
* Changed setsebool to disable policy reload and to call
|
|
|
|
|
security_set_boolean_list to update the runtime booleans.
|
|
|
|
|
* Changed setfiles -c to use new flag to set_matchpathcon_flags()
|
|
|
|
|
to disable context translation by matchpathcon_init().
|
|
|
|
|
|
2005-11-08 23:54:22 +00:00
|
|
|
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.23-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Changed setfiles for the context canonicalization support.
|
|
|
|
|
* Changed setsebool to call semanage_is_managed() interface
|
|
|
|
|
and fall back to security_set_boolean_list() if policy is
|
|
|
|
|
not managed.
|
|
|
|
|
* Merged setsebool memory leak fix from Ivan Gyurdiev.
|
|
|
|
|
* Merged setsebool patch to call semanage_set_reload_bools()
|
|
|
|
|
interface from Ivan Gyurdiev.
|
|
|
|
|
|
2005-11-07 19:07:53 +00:00
|
|
|
* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged setsebool patch from Ivan Gyurdiev.
|
|
|
|
|
This moves setsebool from libselinux/utils to policycoreutils,
|
|
|
|
|
and rewrites it to use libsemanage for permanent boolean changes.
|
|
|
|
|
|
2005-10-28 15:01:34 +00:00
|
|
|
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-2
|
|
|
|
|
- Rebuild to use latest libselinux, libsemanage, and libsepol
|
|
|
|
|
|
2005-10-25 19:28:31 +00:00
|
|
|
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged semodule support for reload, noreload, and store options
|
|
|
|
|
from Joshua Brindle.
|
|
|
|
|
* Merged semodule_package rewrite from Joshua Brindle.
|
|
|
|
|
|
2005-10-21 14:35:30 +00:00
|
|
|
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.18-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Cleaned up usage and error messages and releasing of memory by
|
|
|
|
|
semodule_* utilities.
|
|
|
|
|
* Corrected error reporting by semodule.
|
|
|
|
|
* Updated semodule_expand for change to sepol interface.
|
|
|
|
|
* Merged fixes for make DESTDIR= builds from Joshua Brindle.
|
|
|
|
|
|
2005-10-18 18:40:47 +00:00
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated semodule_package for sepol interface changes.
|
|
|
|
|
|
2005-10-18 14:16:52 +00:00
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated semodule_expand/link for sepol interface changes.
|
|
|
|
|
|
2005-10-15 12:29:01 +00:00
|
|
|
* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.12-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.
|
|
|
|
|
|
2005-10-14 12:41:22 +00:00
|
|
|
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
|
|
|
|
|
* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
|
|
|
|
|
* Merged fixfiles patch from Dan Walsh (Red Hat).
|
|
|
|
|
* Updated semodule for removal of semanage_strerror.
|
|
|
|
|
|
|
|
|
|
|
2005-10-13 17:46:29 +00:00
|
|
|
* Thu Oct 13 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-2
|
|
|
|
|
- Fix run_init.pamd and spec file
|
|
|
|
|
|
2005-10-12 19:34:51 +00:00
|
|
|
* Wed Oct 12 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated semodule_link and semodule_expand to use shared libsepol.
|
|
|
|
|
Fixed audit2why to call policydb_init prior to policydb_read (still
|
|
|
|
|
uses the static libsepol).
|
|
|
|
|
|
2005-10-10 13:06:58 +00:00
|
|
|
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated for changes to libsepol.
|
|
|
|
|
Changed semodule and semodule_package to use the shared libsepol.
|
|
|
|
|
Disabled build of semodule_link and semodule_expand for now.
|
|
|
|
|
Updated audit2why for relocated policydb internal headers,
|
|
|
|
|
still needs to be converted to a shared lib interface.
|
|
|
|
|
|
2005-10-07 17:16:15 +00:00
|
|
|
* Fri Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-3
|
2005-10-07 14:19:10 +00:00
|
|
|
- Update newrole pam file to remove pam-stack
|
2005-10-07 17:16:15 +00:00
|
|
|
- Update run_init pam file to remove pam-stack
|
2005-10-07 14:19:10 +00:00
|
|
|
|
2005-10-06 19:11:25 +00:00
|
|
|
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Fixed warnings in load_policy.
|
|
|
|
|
* Rewrote load_policy to use the new selinux_mkload_policy()
|
|
|
|
|
interface provided by libselinux.
|
|
|
|
|
|
2005-10-05 14:45:40 +00:00
|
|
|
* Wed Oct 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-2
|
|
|
|
|
- Rebuild with newer libararies
|
|
|
|
|
|
|
|
|
|
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
|
2005-09-29 01:11:47 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged patch to update semodule to the new libsemanage API
|
|
|
|
|
and improve the user interface from Karl MacMillan (Tresys).
|
|
|
|
|
* Modified semodule for the create/connect API split.
|
|
|
|
|
|
2005-09-28 14:41:10 +00:00
|
|
|
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-2
|
|
|
|
|
- More fixes to stop find from following nfs paths
|
|
|
|
|
|
2005-09-21 18:10:15 +00:00
|
|
|
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged run_init open_init_pty bug fix from Manoj Srivastava
|
|
|
|
|
(unblock SIGCHLD). Bug reported by Erich Schubert.
|
|
|
|
|
|
2005-09-21 01:20:47 +00:00
|
|
|
* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged error shadowing bug fix for restorecon from Dan Walsh.
|
|
|
|
|
* Merged setfiles usage/man page update for -r option from Dan Walsh.
|
|
|
|
|
* Merged fixfiles -C patch to ignore :s0 addition on update
|
|
|
|
|
to a MCS/MLS policy from Dan Walsh.
|
|
|
|
|
|
2005-09-15 20:02:48 +00:00
|
|
|
* Thu Sep 15 2005 Dan Walsh <dwalsh@redhat.com> 1.26-3
|
|
|
|
|
- Add chcat script for use with chcon.
|
|
|
|
|
|
2005-09-13 16:38:52 +00:00
|
|
|
* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
|
|
|
|
|
- Fix restorecon to exit with error code
|
|
|
|
|
|
2005-09-12 20:37:18 +00:00
|
|
|
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-1
|
|
|
|
|
* Updated version for release.
|
|
|
|
|
|
2005-09-06 21:19:01 +00:00
|
|
|
* Tue Sep 6 2005 Dan Walsh <dwalsh@redhat.com> 1.25.9-2
|
|
|
|
|
- Add prereq for mount command
|
|
|
|
|
|
2005-09-01 16:17:38 +00:00
|
|
|
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.9-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Changed setfiles -c to translate the context to raw format
|
|
|
|
|
prior to calling libsepol.
|
|
|
|
|
|
|
|
|
|
* Fri Aug 26 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-3
|
|
|
|
|
- Use new version of libsemange and require it for install
|
|
|
|
|
|
|
|
|
|
* Fri Aug 26 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-2
|
|
|
|
|
- Ignore s0 in file context
|
|
|
|
|
|
2005-08-25 20:44:24 +00:00
|
|
|
* Thu Aug 25 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged patch for fixfiles -C from Dan Walsh.
|
|
|
|
|
|
2005-08-23 18:49:21 +00:00
|
|
|
* Tue Aug 23 2005 Dan Walsh <dwalsh@redhat.com> 1.25.6-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
|
|
|
|
|
Bugs found by Coverity.
|
|
|
|
|
|
2005-08-22 21:27:16 +00:00
|
|
|
* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-3
|
|
|
|
|
- Fix fixfiles to call sort -u followed by sort -d.
|
|
|
|
|
|
2005-08-17 16:26:54 +00:00
|
|
|
* Wed Aug 17 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-2
|
|
|
|
|
- Change fixfiles to ignore /home directory on updates
|
|
|
|
|
|
2005-08-06 01:40:07 +00:00
|
|
|
* Fri Aug 5 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
|
2005-08-06 01:38:19 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged patch to move module read/write code from libsemanage
|
|
|
|
|
to libsepol from Jason Tang (Tresys).
|
|
|
|
|
|
2005-08-02 16:57:45 +00:00
|
|
|
* Thu Jul 28 2005 Dan Walsh <dwalsh@redhat.com> 1.25.4-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Changed semodule* to link with libsemanage.
|
|
|
|
|
|
|
|
|
|
* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
|
2005-07-27 14:05:30 +00:00
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged restorecon patch from Ivan Gyurdiev.
|
|
|
|
|
|
|
|
|
|
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged load_policy, newrole, and genhomedircon patches from Red Hat.
|
|
|
|
|
|
2005-07-07 10:59:34 +00:00
|
|
|
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.1-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged loadable module support from Tresys Technology.
|
|
|
|
|
|
2005-06-29 20:10:11 +00:00
|
|
|
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.24-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated version for release.
|
|
|
|
|
|
2005-06-14 17:02:07 +00:00
|
|
|
* Tue Jun 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-4
|
|
|
|
|
- Fix Ivan's patch for user role changes
|
|
|
|
|
|
2005-05-28 05:29:19 +00:00
|
|
|
* Sat May 28 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-3
|
|
|
|
|
- Add Ivan's patch for user role changes in genhomedircon
|
|
|
|
|
|
2005-05-26 14:52:39 +00:00
|
|
|
* Thu May 26 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-2
|
|
|
|
|
- Fix warning message on reload of booleans
|
|
|
|
|
|
2005-07-07 10:59:34 +00:00
|
|
|
|
2005-05-20 17:22:30 +00:00
|
|
|
* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Merged fixfiles and newrole patch from Dan Walsh.
|
|
|
|
|
* Merged audit2why man page from Dan Walsh.
|
|
|
|
|
|
2005-05-19 16:56:55 +00:00
|
|
|
* Thu May 19 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-2
|
|
|
|
|
- Add call to pam_acct_mgmt in newrole.
|
|
|
|
|
|
2005-05-17 12:38:08 +00:00
|
|
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Extended audit2why to incorporate booleans and local user
|
|
|
|
|
settings when analyzing audit messages.
|
|
|
|
|
|
2005-05-16 20:32:42 +00:00
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.23.9-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Updated audit2why for sepol_ prefixes on Flask types to
|
|
|
|
|
avoid namespace collision with libselinux, and to
|
|
|
|
|
include <selinux/selinux.h> now.
|
|
|
|
|
|
2005-05-13 19:32:32 +00:00
|
|
|
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.8-1
|
|
|
|
|
- Fix fixfiles to accept -f
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Added audit2why utility.
|
|
|
|
|
|
2005-04-29 18:13:25 +00:00
|
|
|
* Fri Apr 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.7-1
|
2005-04-29 14:55:24 +00:00
|
|
|
- Change -f flag in fixfiles to remove stuff from /tmp
|
|
|
|
|
- Change -F flag to pass -F flag to restorecon/fixfiles. (IE Force relabel).
|
|
|
|
|
|
2005-04-14 20:32:36 +00:00
|
|
|
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.6-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
* Fixed signed/unsigned pointer bug in load_policy.
|
|
|
|
|
* Reverted context validation patch for genhomedircon.
|
|
|
|
|
|
2005-04-13 15:43:57 +00:00
|
|
|
* Wed Apr 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.5-1
|
|
|
|
|
- Update to match NSA
|
2005-04-14 20:32:36 +00:00
|
|
|
* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
|
|
|
|
|
Otherwise, an initial policy load cannot be performed using
|
|
|
|
|
load_policy, e.g. for anaconda.
|
|
|
|
|
|
2005-04-13 15:43:57 +00:00
|
|
|
|
2005-04-11 21:26:18 +00:00
|
|
|
* Mon Apr 11 2005 Dan Walsh <dwalsh@redhat.com> 1.23.4-3
|
|
|
|
|
- remove is_selinux_enabled check from load_policy (Bad idea)
|
2005-04-11 20:47:37 +00:00
|
|
|
|
2005-04-11 20:08:36 +00:00
|
|
|
* Mon Apr 11 2005 Dan Walsh <dwalsh@redhat.com> 1.23.4-1
|
|
|
|
|
- Update to version from NSA
|
|
|
|
|
* Merged load_policy is_selinux_enabled patch from Dan Walsh.
|
|
|
|
|
* Merged restorecon verbose output patch from Dan Walsh.
|
|
|
|
|
* Merged setfiles altroot patch from Chris PeBenito.
|
|
|
|
|
|
2005-04-07 21:09:22 +00:00
|
|
|
* Thu Apr 7 2005 Dan Walsh <dwalsh@redhat.com> 1.23.3-2
|
|
|
|
|
- Don't run load_policy on a non SELinux kernel.
|
|
|
|
|
|
2005-04-06 13:53:13 +00:00
|
|
|
* Wed Apr 6 2005 Dan Walsh <dwalsh@redhat.com> 1.23.3-1
|
|
|
|
|
- Update to version from NSA
|
|
|
|
|
* Merged context validation patch for genhomedircon from Eric Paris.
|
|
|
|
|
- Fix verbose output of restorecon
|
|
|
|
|
|
2005-03-17 17:44:20 +00:00
|
|
|
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.2-1
|
|
|
|
|
- Update to version from NSA
|
|
|
|
|
* Changed setfiles -c to call set_matchpathcon_flags(3) to
|
|
|
|
|
turn off processing of .homedirs and .local.
|
|
|
|
|
|
2005-03-15 13:49:41 +00:00
|
|
|
* Tue Mar 15 2005 Dan Walsh <dwalsh@redhat.com> 1.23.1-1
|
|
|
|
|
- Update to released version from NSA
|
|
|
|
|
* Merged rewrite of genhomedircon by Eric Paris.
|
|
|
|
|
* Changed fixfiles to relabel jfs since it now supports security xattrs
|
|
|
|
|
(as of 2.6.11). Removed reiserfs until 2.6.12 is released with
|
|
|
|
|
fixed support for reiserfs and selinux.
|
|
|
|
|
|
2005-03-10 19:27:18 +00:00
|
|
|
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-2
|
2005-03-10 14:41:31 +00:00
|
|
|
- Update to released version from NSA
|
|
|
|
|
- Patch genhomedircon to handle passwd in different places.
|
|
|
|
|
|
2005-03-09 15:40:39 +00:00
|
|
|
* Wed Mar 9 2005 Dan Walsh <dwalsh@redhat.com> 1.21.22-2
|
|
|
|
|
- Fix genhomedircon to not put bad userad error in file_contexts.homedir
|
|
|
|
|
|
2005-03-08 19:07:55 +00:00
|
|
|
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.21.22-1
|
|
|
|
|
- Cleanup error reporting
|
|
|
|
|
|
2005-03-02 04:06:33 +00:00
|
|
|
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.21.21-1
|
|
|
|
|
* Merged load_policy and genhomedircon patch from Dan Walsh.
|
|
|
|
|
|
2005-02-28 19:52:03 +00:00
|
|
|
* Mon Feb 28 2005 Dan Walsh <dwalsh@redhat.com> 1.21.20-3
|
|
|
|
|
- Fix genhomedircon to add extr "\n"
|
|
|
|
|
|
2005-02-25 20:11:44 +00:00
|
|
|
* Fri Feb 24 2005 Dan Walsh <dwalsh@redhat.com> 1.21.20-2
|
|
|
|
|
- Fix genhomedircon to handle blank users
|
|
|
|
|
|
2005-02-25 18:52:27 +00:00
|
|
|
* Fri Feb 24 2005 Dan Walsh <dwalsh@redhat.com> 1.21.20-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
- Add call to libsepol
|
|
|
|
|
|
2005-02-24 19:08:17 +00:00
|
|
|
* Thu Feb 23 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-4
|
2005-02-24 18:23:58 +00:00
|
|
|
- Fix genhomedircon to handle root
|
2005-02-24 19:08:17 +00:00
|
|
|
- Fix fixfiles to better handle file system types
|
2005-02-24 18:23:58 +00:00
|
|
|
|
2005-02-23 14:44:50 +00:00
|
|
|
* Wed Feb 23 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-2
|
|
|
|
|
- Fix genhomedircon to handle spaces in SELINUXPOLICYTYPE
|
|
|
|
|
|
2005-02-22 21:42:14 +00:00
|
|
|
* Tue Feb 22 2005 Dan Walsh <dwalsh@redhat.com> 1.21.19-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged several fixes from Ulrich Drepper.
|
|
|
|
|
|
2005-02-21 14:28:25 +00:00
|
|
|
* Mon Feb 21 2005 Dan Walsh <dwalsh@redhat.com> 1.21.18-2
|
|
|
|
|
- Apply Uli patch
|
|
|
|
|
* The Makefiles should use the -Wall option even if compiled in beehive
|
|
|
|
|
* Add -W, too
|
|
|
|
|
* use -Werror when used outside of beehive. This could also be used unconditionally
|
|
|
|
|
* setfiles/setfiles.c: fix resulting warning
|
|
|
|
|
* restorecon/restorecon.c: Likewise
|
|
|
|
|
* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
|
|
|
|
|
called without parameters. ignore the return value of nice properly.
|
|
|
|
|
* run_init: don't link with -ldl lutil
|
|
|
|
|
* load_policy: that's the bad bug. pointer to unsigned int is passed, size_t is
|
|
|
|
|
written to. fails on 64-bit archs
|
|
|
|
|
* sestatus: signed vs unsigned problem
|
|
|
|
|
* newrole: don't link with -ldl
|
|
|
|
|
|
2005-02-19 13:19:21 +00:00
|
|
|
* Sat Feb 19 2005 Dan Walsh <dwalsh@redhat.com> 1.21.18-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Changed load_policy to fall back to the original policy upon
|
|
|
|
|
an error from sepol_genusers().
|
|
|
|
|
|
2005-02-18 00:39:08 +00:00
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.17-2
|
|
|
|
|
- Only restorecon on ext[23], reiser and xfs
|
|
|
|
|
|
2005-02-17 23:12:06 +00:00
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.17-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged new genhomedircon script from Dan Walsh.
|
|
|
|
|
* Changed load_policy to call sepol_genusers().
|
|
|
|
|
|
|
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-9
|
|
|
|
|
- Remove Red Hat rhpl usage
|
|
|
|
|
- Add back in original syntax
|
|
|
|
|
- Update man page to match new syntax
|
|
|
|
|
|
2005-02-11 21:54:08 +00:00
|
|
|
* Fri Feb 11 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-8
|
2005-02-11 13:31:34 +00:00
|
|
|
- Fix genhomedircon regular expression
|
2005-02-11 21:54:08 +00:00
|
|
|
- Fix exclude in restorecon
|
2005-02-11 13:31:34 +00:00
|
|
|
|
2005-02-11 05:56:10 +00:00
|
|
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-5
|
2005-02-10 23:57:43 +00:00
|
|
|
- Trap failure on write
|
2005-02-10 22:13:36 +00:00
|
|
|
- Rewrite genhomedircon to generate file_context.homedirs
|
2005-02-11 05:56:10 +00:00
|
|
|
- several passes
|
2005-02-10 22:13:36 +00:00
|
|
|
|
2005-02-10 13:45:56 +00:00
|
|
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.15-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
* Changed relabel Makefile target to use restorecon.
|
|
|
|
|
|
2005-02-09 15:07:08 +00:00
|
|
|
* Wed Feb 9 2005 Dan Walsh <dwalsh@redhat.com> 1.21.14-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
* Merged restorecon patch from Dan Walsh.
|
|
|
|
|
|
2005-02-08 18:33:19 +00:00
|
|
|
* Tue Feb 8 2005 Dan Walsh <dwalsh@redhat.com> 1.21.13-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
* Merged further change to fixfiles -C from Dan Walsh.
|
|
|
|
|
* Merged updated fixfiles script from Dan Walsh.
|
|
|
|
|
- Fix error handling of restorecon
|
|
|
|
|
|
|
|
|
|
|
2005-02-07 18:58:47 +00:00
|
|
|
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.21.12-2
|
|
|
|
|
- Fix sestatus for longer booleans
|
|
|
|
|
|
2005-02-02 22:25:03 +00:00
|
|
|
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.12-1
|
|
|
|
|
- More cleanup of fixfiles sed patch
|
|
|
|
|
* Merged further patches for restorecon/setfiles -e and fixfiles -C.
|
|
|
|
|
|
2005-02-02 17:58:48 +00:00
|
|
|
* Wed Feb 2 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-2
|
|
|
|
|
- More cleanup of fixfiles sed patch
|
|
|
|
|
|
|
|
|
|
* Mon Jan 31 2005 Dan Walsh <dwalsh@redhat.com> 1.21.10-1
|
2005-02-02 13:56:22 +00:00
|
|
|
- More cleanup of fixfiles sed patch
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged patch for open_init_pty from Manoj Srivastava.
|
|
|
|
|
|
2005-01-31 19:04:21 +00:00
|
|
|
* Fri Jan 28 2005 Dan Walsh <dwalsh@redhat.com> 1.21.9-1
|
|
|
|
|
- More cleanup of sed patch
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged updated fixfiles script from Dan Walsh.
|
|
|
|
|
* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
|
|
|
|
|
* Reverted fixfiles patch for file_contexts.local;
|
|
|
|
|
obsoleted by setfiles rewrite.
|
|
|
|
|
* Merged error handling patch for restorecon from Dan Walsh.
|
|
|
|
|
* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
|
|
|
|
|
* Rewrote setfiles to use matchpathcon and the new interfaces
|
|
|
|
|
exported by libselinux (>= 1.21.5).
|
|
|
|
|
|
|
|
|
|
|
2005-01-28 21:07:49 +00:00
|
|
|
* Fri Jan 28 2005 Dan Walsh <dwalsh@redhat.com> 1.21.7-3
|
2005-01-28 20:43:44 +00:00
|
|
|
- Fix fixfiles patch
|
2005-01-28 16:21:25 +00:00
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Prevent overflow of spec array in setfiles.
|
|
|
|
|
- Add diff comparason between file_contexts to fixfiles
|
|
|
|
|
- Allow restorecon to give an warning on file not found instead of exiting
|
|
|
|
|
|
2005-01-27 15:07:13 +00:00
|
|
|
* Thu Jan 27 2005 Dan Walsh <dwalsh@redhat.com> 1.21.5-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged newrole -l support from Darrel Goeddel (TCS).
|
|
|
|
|
- Fix genhomedircon STARTING_UID
|
|
|
|
|
|
2005-01-26 16:33:56 +00:00
|
|
|
* Wed Jan 26 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Merged fixfiles patch for file_contexts.local from Dan Walsh.
|
|
|
|
|
|
2005-01-24 17:39:30 +00:00
|
|
|
* Fri Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.21.3-2
|
|
|
|
|
- Temp file needs to be created in /etc/selinux/POLICYTYPE/contexts/files/ directory.
|
|
|
|
|
|
2005-01-24 16:26:39 +00:00
|
|
|
* Fri Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.21.3-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
* Fixed restorecon to not treat errors from is_context_customizable()
|
|
|
|
|
as a customizable context.
|
|
|
|
|
* Merged setfiles/restorecon patch to not reset user field unless
|
|
|
|
|
-F option is specified from Dan Walsh.
|
|
|
|
|
* Merged open_init_pty helper for run_init from Manoj Srivastava.
|
|
|
|
|
* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.
|
|
|
|
|
|
2005-01-21 18:56:16 +00:00
|
|
|
* Fri Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-3
|
2005-01-21 18:22:40 +00:00
|
|
|
- Don't change user componant if it is all that changed unless forced.
|
2005-01-21 18:56:16 +00:00
|
|
|
- Change fixfiles to concatinate file_context.local for setfiles
|
2005-01-21 18:22:40 +00:00
|
|
|
|
2005-01-20 13:54:58 +00:00
|
|
|
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
2005-01-10 18:18:41 +00:00
|
|
|
* Mon Jan 10 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-2
|
|
|
|
|
- Fix restorecon segfault
|
|
|
|
|
|
2005-01-07 14:46:02 +00:00
|
|
|
* Mon Jan 3 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged fixfiles rewrite from Dan Walsh.
|
|
|
|
|
* Merged restorecon patch from Dan Walsh.
|
|
|
|
|
|
2005-01-05 20:17:09 +00:00
|
|
|
* Mon Jan 3 2005 Dan Walsh <dwalsh@redhat.com> 1.19.3-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Merged fixfiles and restorecon patches from Dan Walsh.
|
|
|
|
|
* Don't display change if only user part changed.
|
|
|
|
|
|
2005-01-03 20:52:19 +00:00
|
|
|
* Mon Jan 3 2005 Dan Walsh <dwalsh@redhat.com> 1.19.2-4
|
2005-01-03 18:32:44 +00:00
|
|
|
- Fix fixfiles handling of rpm
|
2005-01-03 19:18:21 +00:00
|
|
|
- Fix restorecon to not warn on symlinks unless -v -v
|
|
|
|
|
- Fix output of verbose to show old context as well as new context
|
2005-01-03 18:32:44 +00:00
|
|
|
|
2004-12-29 17:19:57 +00:00
|
|
|
* Mon Dec 29 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Changed restorecon to ignore ENOENT errors from matchpathcon.
|
|
|
|
|
* Merged nonls patch from Chris PeBenito.
|
|
|
|
|
|
2004-12-20 14:22:16 +00:00
|
|
|
* Mon Dec 20 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
* Removed fixfiles.cron.
|
|
|
|
|
* Merged run_init.8 patch from Dan Walsh.
|
|
|
|
|
|
2004-11-18 16:11:15 +00:00
|
|
|
* Thu Nov 18 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-3
|
2004-11-18 15:20:19 +00:00
|
|
|
- Fix run_init.8 to refer to correct location of initrc_context
|
|
|
|
|
|
2004-11-03 20:51:55 +00:00
|
|
|
* Wed Nov 3 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
|
2004-10-28 15:22:58 +00:00
|
|
|
* Wed Oct 27 2004 Steve Grubb <sgrubb@redhat.com> 1.17.7-3
|
|
|
|
|
- Add code to sestatus to output the current policy from config file
|
|
|
|
|
|
2004-10-28 14:39:53 +00:00
|
|
|
* Fri Oct 22 2004 Dan Walsh <dwalsh@redhat.com> 1.17.7-2
|
|
|
|
|
- Patch audit2allow to return self and no brackets if only one rule
|
|
|
|
|
|
2004-10-26 15:20:59 +00:00
|
|
|
* Fri Oct 22 2004 Dan Walsh <dwalsh@redhat.com> 1.17.7-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
- Eliminate fixfiles.cron
|
|
|
|
|
|
2004-10-12 14:55:07 +00:00
|
|
|
* Tue Oct 12 2004 Dan Walsh <dwalsh@redhat.com> 1.17.6-2
|
|
|
|
|
- Only run fixfiles.cron once a week, and eliminate null message
|
|
|
|
|
|
2004-10-06 13:53:23 +00:00
|
|
|
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.6-1
|
|
|
|
|
- Update with NSA
|
|
|
|
|
* Added -l option to setfiles to log changes via syslog.
|
|
|
|
|
* Merged -e option to setfiles to exclude directories.
|
|
|
|
|
* Merged -R option to restorecon for recursive descent.
|
2004-10-01 22:39:03 +00:00
|
|
|
* Fri Oct 1 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-6
|
|
|
|
|
- Add -e (exclude directory) switch to setfiles
|
|
|
|
|
- Add syslog to setfiles
|
|
|
|
|
|
2004-09-24 23:24:42 +00:00
|
|
|
* Fri Sep 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-5
|
|
|
|
|
- Add -R (recursive) switch to restorecon.
|
|
|
|
|
|
2004-09-23 16:40:36 +00:00
|
|
|
* Thu Sep 23 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-4
|
|
|
|
|
- Change to only display to terminal if tty is specified
|
|
|
|
|
|
2004-09-21 19:21:49 +00:00
|
|
|
* Tue Sep 21 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-3
|
|
|
|
|
- Only display to stdout if logfile not specified
|
|
|
|
|
|
2004-09-09 20:35:08 +00:00
|
|
|
* Mon Sep 9 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-2
|
|
|
|
|
- Add Steve Grubb patch to cleanup log files.
|
|
|
|
|
|
2004-09-09 10:39:04 +00:00
|
|
|
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-1
|
|
|
|
|
- Add optargs
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
|
2004-09-09 10:38:59 +00:00
|
|
|
* Wed Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.4-1
|
|
|
|
|
- Add fix to get cdrom info from /proc/media in fixfiles.
|
|
|
|
|
|
|
|
|
|
* Wed Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-4
|
|
|
|
|
- Add Steve Grub patches for
|
|
|
|
|
* Fix fixfiles.cron MAILTO
|
|
|
|
|
* Several problems in sestatus
|
|
|
|
|
|
2004-09-09 10:38:51 +00:00
|
|
|
* Wed Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-3
|
|
|
|
|
- Add -q (quiet) qualifier to load_policy to not report warnings
|
|
|
|
|
|
|
|
|
|
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-2
|
2004-09-09 10:38:47 +00:00
|
|
|
- Add requires for libsepol >= 1.1.1
|
2004-09-09 10:38:51 +00:00
|
|
|
|
2004-09-09 10:38:47 +00:00
|
|
|
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-1
|
2004-09-09 10:38:32 +00:00
|
|
|
- Update to latest from upstream
|
|
|
|
|
|
2004-09-09 10:38:16 +00:00
|
|
|
* Mon Aug 23 2004 Dan Walsh <dwalsh@redhat.com> 1.17.2-1
|
|
|
|
|
- Update to latest from upstream
|
|
|
|
|
- Includes Colin patch for verifying file_contexts
|
|
|
|
|
|
2004-09-09 10:38:12 +00:00
|
|
|
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.17.1-1
|
|
|
|
|
- Update to latest from upstream
|
|
|
|
|
|
2004-09-09 10:38:01 +00:00
|
|
|
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.7-1
|
|
|
|
|
- Update to latest from upstream
|
|
|
|
|
|
|
|
|
|
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 1.15.6-1
|
|
|
|
|
- Add Man page for load_policy
|
|
|
|
|
|
2004-09-09 10:37:51 +00:00
|
|
|
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 1.15.5-1
|
|
|
|
|
- new version from NSA uses libsepol
|
|
|
|
|
|
2004-09-09 10:37:46 +00:00
|
|
|
* Mon Aug 2 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-2
|
|
|
|
|
- Fix genhomedircon join command
|
|
|
|
|
|
2004-09-09 10:37:36 +00:00
|
|
|
* Thu Jul 29 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
2004-09-09 10:36:44 +00:00
|
|
|
* Mon Jul 26 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-4
|
|
|
|
|
- Change fixfiles to not change when running a check
|
|
|
|
|
|
2004-09-09 10:36:25 +00:00
|
|
|
* Tue Jul 20 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-3
|
|
|
|
|
- Fix restorecon getopt call to stop hang on IBM Arches
|
|
|
|
|
|
2004-09-09 10:36:21 +00:00
|
|
|
* Mon Jul 19 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-2
|
|
|
|
|
- Only mail files less than 100 lines from fixfiles.cron
|
|
|
|
|
- Add Russell's fix for genhomedircon
|
|
|
|
|
|
2004-09-09 10:36:04 +00:00
|
|
|
* Fri Jul 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
|
|
|
|
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-2
|
|
|
|
|
- Add ro warnings
|
|
|
|
|
|
2004-09-09 10:35:54 +00:00
|
|
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
|
|
|
|
|
- Latest from NSA
|
|
|
|
|
- Fix fixfiles.cron to delete outfile
|
|
|
|
|
|
2004-09-09 10:35:41 +00:00
|
|
|
* Tue Jul 6 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-2
|
|
|
|
|
- Fix fixfiles.cron to not run on non SELinux boxes
|
2004-09-09 10:35:44 +00:00
|
|
|
- Fix several problems in fixfiles and fixfiles.cron
|
2004-09-09 10:35:41 +00:00
|
|
|
|
2004-09-09 10:35:33 +00:00
|
|
|
* Wed Jun 30 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
- Add cron capability to fixfiles
|
|
|
|
|
|
|
|
|
|
* Fri Jun 25 2004 Dan Walsh <dwalsh@redhat.com> 1.13.4-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
|
2004-09-09 10:35:19 +00:00
|
|
|
* Thu Jun 24 2004 Dan Walsh <dwalsh@redhat.com> 1.13.3-2
|
|
|
|
|
- Fix fixfiles to handle no rpm file on relabel
|
|
|
|
|
|
2004-09-09 10:35:15 +00:00
|
|
|
* Wed Jun 23 2004 Dan Walsh <dwalsh@redhat.com> 1.13.3-1
|
|
|
|
|
- Update latest from NSA
|
|
|
|
|
- Add -o option to setfiles to save output of any files with incorrect context.
|
|
|
|
|
|
|
|
|
|
* Tue Jun 22 2004 Dan Walsh <dwalsh@redhat.com> 1.13.2-2
|
|
|
|
|
- Add rpm support to fixfiles
|
|
|
|
|
- Update restorecon to add file input support
|
|
|
|
|
|
2004-09-09 10:35:12 +00:00
|
|
|
* Fri Jun 18 2004 Dan Walsh <dwalsh@redhat.com> 1.13.2-1
|
|
|
|
|
- Update with NSA Latest
|
|
|
|
|
|
2004-09-09 10:35:07 +00:00
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 10:35:05 +00:00
|
|
|
* Sat Jun 12 2004 Dan Walsh <dwalsh@redhat.com> 1.13.1-2
|
|
|
|
|
- Fix run_init to use policy formats
|
|
|
|
|
|
|
|
|
|
* Wed Jun 2 2004 Dan Walsh <dwalsh@redhat.com> 1.13.1-1
|
|
|
|
|
- Update from NSA
|
|
|
|
|
|
2004-09-09 10:35:00 +00:00
|
|
|
* Tue May 25 2004 Dan Walsh <dwalsh@redhat.com> 1.13-3
|
|
|
|
|
- Change location of file_context file
|
|
|
|
|
|
2004-09-09 10:34:58 +00:00
|
|
|
* Tue May 25 2004 Dan Walsh <dwalsh@redhat.com> 1.13-2
|
|
|
|
|
- Change to use /etc/sysconfig/selinux to determine location of policy files
|
|
|
|
|
|
2004-09-09 10:34:56 +00:00
|
|
|
* Fri May 21 2004 Dan Walsh <dwalsh@redhat.com> 1.13-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
- Change fixfiles to prompt before deleteing /tmp files
|
|
|
|
|
|
|
|
|
|
* Tue May 18 2004 Dan Walsh <dwalsh@redhat.com> 1.12-2
|
|
|
|
|
- have restorecon ingnore <<none>>
|
|
|
|
|
- Hand matchpathcon the file status
|
|
|
|
|
|
|
|
|
|
* Thu May 14 2004 Dan Walsh <dwalsh@redhat.com> 1.12-1
|
|
|
|
|
- Update to match NSA
|
|
|
|
|
|
|
|
|
|
* Mon May 10 2004 Dan Walsh <dwalsh@redhat.com> 1.11-4
|
|
|
|
|
- Move location of log file to /var/tmp
|
|
|
|
|
|
|
|
|
|
* Mon May 10 2004 Dan Walsh <dwalsh@redhat.com> 1.11-3
|
|
|
|
|
- Better grep command for bind
|
|
|
|
|
|
2004-09-09 10:34:37 +00:00
|
|
|
* Fri May 7 2004 Dan Walsh <dwalsh@redhat.com> 1.11-2
|
|
|
|
|
- Eliminate bind and context mounts
|
|
|
|
|
|
|
|
|
|
* Wed May 5 2004 Dan Walsh <dwalsh@redhat.com> 1.11-1
|
|
|
|
|
- update to match NSA
|
|
|
|
|
|
|
|
|
|
* Wed Apr 28 2004 Dan Walsh <dwalsh@redhat.com> 1.10-4
|
|
|
|
|
- Log fixfiles to the /tmp directory
|
|
|
|
|
|
|
|
|
|
* Wed Apr 21 2004 Colin Walters <walters@redhat.com> 1.10-3
|
|
|
|
|
- Add patch to fall back to authenticating via uid if
|
|
|
|
|
the current user's SELinux user identity is the default
|
|
|
|
|
identity
|
|
|
|
|
- Add BuildRequires pam-devel
|
|
|
|
|
|
|
|
|
|
* Mon Apr 12 2004 Dan Walsh <dwalsh@redhat.com> 1.10-2
|
|
|
|
|
- Add man page, thanks to Richard Halley
|
|
|
|
|
|
|
|
|
|
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-1
|
|
|
|
|
- Upgrade to latest from NSA
|
|
|
|
|
|
|
|
|
|
* Fri Apr 2 2004 Dan Walsh <dwalsh@redhat.com> 1.9.2-1
|
|
|
|
|
- Update with latest from gentoo and NSA
|
|
|
|
|
|
|
|
|
|
* Thu Apr 1 2004 Dan Walsh <dwalsh@redhat.com> 1.9.1-1
|
|
|
|
|
- Check return codes in sestatus.c
|
|
|
|
|
|
|
|
|
|
* Mon Mar 29 2004 Dan Walsh <dwalsh@redhat.com> 1.9-19
|
|
|
|
|
- Fix sestatus to not double free
|
|
|
|
|
- Fix sestatus.conf to be unix format
|
|
|
|
|
|
|
|
|
|
* Mon Mar 29 2004 Dan Walsh <dwalsh@redhat.com> 1.9-18
|
|
|
|
|
- Warn on setfiles failure to relabel.
|
|
|
|
|
|
|
|
|
|
* Mon Mar 29 2004 Dan Walsh <dwalsh@redhat.com> 1.9-17
|
|
|
|
|
- Updated version of sestatus
|
|
|
|
|
|
|
|
|
|
* Mon Mar 29 2004 Dan Walsh <dwalsh@redhat.com> 1.9-16
|
|
|
|
|
- Fix fixfiles to checklabel properly
|
|
|
|
|
|
|
|
|
|
* Fri Mar 26 2004 Dan Walsh <dwalsh@redhat.com> 1.9-15
|
|
|
|
|
- add sestatus
|
|
|
|
|
|
|
|
|
|
* Thu Mar 25 2004 Dan Walsh <dwalsh@redhat.com> 1.9-14
|
|
|
|
|
- Change free call to freecon
|
|
|
|
|
- Cleanup
|
|
|
|
|
|
2004-09-09 10:34:14 +00:00
|
|
|
* Tue Mar 23 2004 Dan Walsh <dwalsh@redhat.com> 1.9-12
|
|
|
|
|
- Remove setfiles-assoc patch
|
|
|
|
|
- Fix restorecon to not crash on missing dir
|
|
|
|
|
|
|
|
|
|
* Thu Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-11
|
|
|
|
|
- Eliminate trailing / in restorecon
|
|
|
|
|
|
|
|
|
|
* Thu Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-10
|
|
|
|
|
- Add Verbosity check
|
|
|
|
|
|
|
|
|
|
* Thu Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-9
|
|
|
|
|
- Change restorecon to not follow symlinks. It is too difficult and confusing
|
|
|
|
|
- to figure out the file context for the file pointed to by a symlink.
|
|
|
|
|
|
|
|
|
|
* Wed Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-8
|
|
|
|
|
- Fix restorecon
|
|
|
|
|
* Wed Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-7
|
|
|
|
|
- Read restorecon patch
|
|
|
|
|
|
|
|
|
|
* Wed Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-6
|
|
|
|
|
- Change genhomedircon to take POLICYSOURCEDIR from command line
|
|
|
|
|
|
|
|
|
|
* Wed Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-5
|
|
|
|
|
- Add checkselinux
|
|
|
|
|
- move fixfiles and restorecon to /sbin
|
|
|
|
|
|
|
|
|
|
* Wed Mar 17 2004 Dan Walsh <dwalsh@redhat.com> 1.9-4
|
|
|
|
|
- Restore patch of genhomedircon
|
|
|
|
|
|
|
|
|
|
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.9-3
|
|
|
|
|
- Add setfiles-assoc patch to try to freeup memory use
|
|
|
|
|
|
|
|
|
|
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.9-2
|
|
|
|
|
- Add fixlabels
|
|
|
|
|
|
|
|
|
|
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.9-1
|
|
|
|
|
- Update to latest from NSA
|
|
|
|
|
|
|
|
|
|
* Wed Mar 10 2004 Dan Walsh <dwalsh@redhat.com> 1.6-8
|
|
|
|
|
- Increase the size of buffer accepted by setfiles to BUFSIZ.
|
|
|
|
|
|
|
|
|
|
* Tue Mar 9 2004 Dan Walsh <dwalsh@redhat.com> 1.6-7
|
|
|
|
|
- genhomedircon should complete even if it can't read /etc/default/useradd
|
|
|
|
|
|
|
|
|
|
* Tue Mar 9 2004 Dan Walsh <dwalsh@redhat.com> 1.6-6
|
|
|
|
|
- fix restorecon to relabel unlabled files.
|
|
|
|
|
|
|
|
|
|
* Fri Mar 5 2004 Dan Walsh <dwalsh@redhat.com> 1.6-5
|
|
|
|
|
- Add genhomedircon from tresys
|
|
|
|
|
- Fixed patch for restorecon
|
|
|
|
|
|
|
|
|
|
* Thu Feb 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6-4
|
|
|
|
|
- exit out when selinux is not enabled
|
|
|
|
|
|
|
|
|
|
* Thu Feb 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6-3
|
|
|
|
|
- Fix minor bugs in restorecon
|
|
|
|
|
|
|
|
|
|
* Thu Feb 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6-2
|
|
|
|
|
- Add restorecon c program
|
|
|
|
|
|
|
|
|
|
* Tue Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
|
|
|
|
- Update to latest tarball from NSA
|
|
|
|
|
|
|
|
|
|
* Thu Feb 19 2004 Dan Walsh <dwalsh@redhat.com> 1.4-9
|
|
|
|
|
- Add sort patch
|
|
|
|
|
|
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 10:33:59 +00:00
|
|
|
* Thu Jan 29 2004 Dan Walsh <dwalsh@redhat.com> 1.4-7
|
|
|
|
|
- remove mods to run_init since init scripts don't require it anymore
|
|
|
|
|
|
|
|
|
|
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
|
|
|
|
|
- fix genhomedircon not to return and error
|
|
|
|
|
|
|
|
|
|
* Wed Jan 28 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
|
|
|
|
|
- add setfiles quiet patch
|
|
|
|
|
|
|
|
|
|
* Tue Jan 27 2004 Dan Walsh <dwalsh@redhat.com> 1.4-4
|
|
|
|
|
- add checkcon to verify context match file_context
|
|
|
|
|
|
|
|
|
|
* Wed Jan 7 2004 Dan Walsh <dwalsh@redhat.com> 1.4-3
|
|
|
|
|
- fix command parsing restorecon
|
|
|
|
|
|
|
|
|
|
* Tue Jan 6 2004 Dan Walsh <dwalsh@redhat.com> 1.4-2
|
|
|
|
|
- Add restorecon
|
|
|
|
|
|
|
|
|
|
* Sat Dec 6 2003 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
|
|
|
- Update to latest NSA 1.4
|
|
|
|
|
|
|
|
|
|
* Tue Nov 25 2003 Dan Walsh <dwalsh@redhat.com> 1.2-9
|
|
|
|
|
- Change run_init.console to run as run_init_t
|
|
|
|
|
|
|
|
|
|
* Tue Oct 14 2003 Dan Walsh <dwalsh@redhat.com> 1.2-8
|
|
|
|
|
- Remove dietcc since load_policy is not in mkinitrd
|
|
|
|
|
- Change to use CONSOLEHELPER flag
|
|
|
|
|
|
|
|
|
|
* Tue Oct 14 2003 Dan Walsh <dwalsh@redhat.com> 1.2-7
|
|
|
|
|
- Don't authenticate run_init when used with consolehelper
|
|
|
|
|
|
|
|
|
|
* Wed Oct 01 2003 Dan Walsh <dwalsh@redhat.com> 1.2-6
|
|
|
|
|
- Add run_init consolehelper link
|
|
|
|
|
|
|
|
|
|
* Wed Sep 24 2003 Dan Walsh <dwalsh@redhat.com> 1.2-5
|
|
|
|
|
- Add russell spead up patch to deal with file path stems
|
|
|
|
|
|
|
|
|
|
* Fri Sep 12 2003 Dan Walsh <dwalsh@redhat.com> 1.2-4
|
|
|
|
|
- Build load_policy with diet gcc in order to save space on initrd
|
|
|
|
|
|
|
|
|
|
* Fri Sep 12 2003 Dan Walsh <dwalsh@redhat.com> 1.2-3
|
|
|
|
|
- Update with NSA latest
|
|
|
|
|
|
|
|
|
|
* Thu Aug 7 2003 Dan Walsh <dwalsh@redhat.com> 1.2-1
|
|
|
|
|
- remove i18n
|
|
|
|
|
- Temp remove gtk support
|
|
|
|
|
|
|
|
|
|
* Thu Aug 7 2003 Dan Walsh <dwalsh@redhat.com> 1.1-4
|
|
|
|
|
- Remove wnck requirement
|
|
|
|
|
|
|
|
|
|
* Thu Aug 7 2003 Dan Walsh <dwalsh@redhat.com> 1.1-3
|
|
|
|
|
- Add gtk support to run_init
|
|
|
|
|
|
|
|
|
|
* Tue Aug 5 2003 Dan Walsh <dwalsh@redhat.com> 1.1-2
|
|
|
|
|
- Add internationalization
|
|
|
|
|
|
|
|
|
|
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
|
|
|
|
|
- Initial version
|
|
|
|
|
|
