dist-git conversion

- Fix system-config-selinux deletion of file context

.gitignore

@@ -1,3 +1,4 @@
+.svn
 policycoreutils-1.17.5.tgz
 policycoreutils-1.17.6.tgz
 policycoreutils-1.17.7.tgz
@@ -94,3 +95,58 @@ policycoreutils-1.29.23.tgz
 policycoreutils-1.29.26.tgz
 policycoreutils-1.29.27.tgz
 policycoreutils-1.30.tgz
+policycoreutils-1.30.1.tgz
+policycoreutils-1.30.4.tgz
+policycoreutils-1.30.5.tgz
+policycoreutils-1.30.6.tgz
+policycoreutils-1.30.7.tgz
+policycoreutils-1.30.8.tgz
+policycoreutils-1.30.9.tgz
+policycoreutils-1.30.10.tgz
+policycoreutils-1.30.11.tgz
+policycoreutils-1.30.12.tgz
+policycoreutils-1.30.14.tgz
+policycoreutils-1.30.17.tgz
+policycoreutils-1.30.22.tgz
+policycoreutils-1.30.25.tgz
+policycoreutils-1.30.26.tgz
+policycoreutils-1.30.27.tgz
+policycoreutils-1.30.28.tgz
+policycoreutils-1.30.29.tgz
+policycoreutils-1.30.30.tgz
+policycoreutils-1.32.tgz
+policycoreutils-1.33.1.tgz
+policycoreutils-1.33.2.tgz
+policycoreutils-1.33.4.tgz
+policycoreutils-1.33.5.tgz
+policycoreutils-1.33.6.tgz
+policycoreutils-1.33.7.tgz
+policycoreutils-1.33.8.tgz
+policycoreutils-1.33.10.tgz
+policycoreutils-1.33.11.tgz
+policycoreutils-1.33.12.tgz
+policycoreutils-1.33.14.tgz
+policycoreutils-1.33.15.tgz
+policycoreutils-1.34.0.tgz
+policycoreutils-1.34.1.tgz
+policycoreutils-2.0.0.tgz
+policycoreutils-2.0.1.tgz
+sepolgen-1.0.0.tgz
+policycoreutils-2.0.2.tgz
+policycoreutils-2.0.3.tgz
+sepolgen-1.0.1.tgz
+policycoreutils-2.0.6.tgz
+sepolgen-1.0.2.tgz
+sepolgen-1.0.3.tgz
+policycoreutils-2.0.7.tgz
+sepolgen-1.0.4.tgz
+sepolgen-1.0.6.tgz
+sepolgen-1.0.7.tgz
+policycoreutils-2.0.8.tgz
+sepolgen-1.0.8.tgz
+policycoreutils-2.0.9.tgz
+policycoreutils-2.0.10.tgz
+policycoreutils-2.0.13.tgz
+policycoreutils-2.0.14.tgz
+policycoreutils-2.0.15.tgz
+policycoreutils-2.0.16.tgz

branch

@@ -0,0 +1 @@
+F-7

policycoreutils.spec

@@ -1,20 +1,30 @@
-%define libauditver 1.1.4-3
-%define libsepolver 1.12-1
-%define libsemanagever 1.6-1
-%define libselinuxver 1.30-1
+%define libauditver 1.4.2-1
+%define libsepolver 2.0.1-1
+%define libsemanagever 1.10.0-1
+%define libselinuxver 2.0.0-1
+%define sepolgenver 1.0.8
 Summary: SELinux policy core utilities.
 Name: policycoreutils
-Version: 1.30
-Release: 1
+Version: 2.0.16
+Release: 16%{?dist}
 License: GPL
 Group: System Environment/Base
 Source: http://www.nsa.gov/selinux/archives/policycoreutils-%{version}.tgz
+Source1: http://www.nsa.gov/selinux/archives/sepolgen-%{sepolgenver}.tgz
+Source2: system-config-selinux.png
+Source3: system-config-selinux.desktop
+Source4: system-config-selinux.pam
+Source5: system-config-selinux.console
 Patch: policycoreutils-rhat.patch
+Patch1: policycoreutils-po.patch
+#Patch2: policycoreutils-sepolgen.patch
+Patch3: policycoreutils-gui.patch
 
-BuildRequires: pam-devel libsepol-devel >= %{libsepolver} libsemanage-devel >= %{libsemanagever} libselinux-devel >= %{libselinuxver} 
-Requires: /bin/mount /bin/egrep /bin/awk /usr/bin/diff
-Requires: libsepol >= %{libsepolver} libsemanage >= %{libsemanagever} libselinux-python coreutils audit-libs-python >=  %{libauditver} 
-BuildRoot: %{_tmppath}/%{name}-buildroot
+BuildRequires: pam-devel libsepol-devel >= %{libsepolver} libsemanage-devel >= %{libsemanagever} libselinux-devel >= %{libselinuxver}  libcap-devel audit-libs-devel >=  %{libauditver} gettext
+Requires: /bin/mount /bin/egrep /bin/awk /usr/bin/diff /bin/rpm /bin/sed
+Requires: libsepol >= %{libsepolver} libsemanage >= %{libsemanagever} libselinux-python coreutils audit-libs-python >=  %{libauditver} checkpolicy
+Requires(post): /sbin/service /sbin/chkconfig 
+BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 %description
 Security-enhanced Linux is a feature of the Linux® kernel and a number
@@ -34,46 +44,103 @@ to switch roles, and run_init to run /etc/init.d scripts in the proper
 context.
 
 %prep
-%setup -q
+%setup -q -a 1 
 %patch -p1 -b .rhat
+%patch1 -p1 -b .rhatpo
+#%patch2 -p1 -b .sepolgen
+%patch3 -p1 -b .gui
 
 %build
-make LOG_AUDIT_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags}" all 
+make LSPP_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" all 
+make -C sepolgen-%{sepolgenver} LSPP_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags} -fPIE" LDFLAGS="-pie -Wl,-z,relro" all 
 
 %install
-rm -rf ${RPM_BUILD_ROOT}
-mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
-mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
-mkdir -p ${RPM_BUILD_ROOT}%{_sbindir}
-mkdir -p ${RPM_BUILD_ROOT}/sbin
-mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man1
-mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8
-mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/pam.d
-make LOG_AUDIT_PRIV=y  DESTDIR="${RPM_BUILD_ROOT}" LIBDIR="${RPM_BUILD_ROOT}%{_libdir}" install
+rm -rf %{buildroot}
+mkdir -p %{buildroot}/etc/rc.d/init.d
+mkdir -p %{buildroot}%{_bindir}
+mkdir -p %{buildroot}%{_sbindir}
+mkdir -p %{buildroot}/sbin
+mkdir -p %{buildroot}%{_mandir}/man1
+mkdir -p %{buildroot}%{_mandir}/man8
+mkdir -p %{buildroot}%{_sysconfdir}/pam.d
+mkdir -p %{buildroot}%{_sysconfdir}/security/console.apps
 
+make LSPP_PRIV=y  DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" install
+make -C sepolgen-%{sepolgenver} DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" install
+
+install -m 644 %{SOURCE2} %{buildroot}%{_datadir}/system-config-selinux/
+install -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/pam.d/system-config-selinux
+install -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/security/console.apps/system-config-selinux
+ln -sf consolehelper %{buildroot}%{_bindir}/system-config-selinux
+
+desktop-file-install --vendor fedora                            \
+	--dir ${RPM_BUILD_ROOT}%{_datadir}/applications         \
+        --add-category X-Fedora                                 \
+	%{SOURCE3}
 %find_lang %{name}
 
+%package newrole
+Summary: newrole application for RBAC/MLS 
+Group: System Environment/Base
+Requires: policycoreutils = %{version}-%{release} 
+
+%description newrole
+RBAC/MLS policy machines require newrole as a way of changing the role 
+or level of a logged in user.
+
+%files newrole
+%{_bindir}/newrole
+%{_mandir}/man1/newrole.1.gz
+
+%package gui
+Summary: SELinux configuration GUI
+Group: System Environment/Base
+Requires: policycoreutils = %{version}-%{release} 
+Requires: gnome-python2, pygtk2, pygtk2-libglade, gnome-python2-canvas 
+Requires: usermode, rhpl
+Requires: python >= 2.4
+BuildRequires: desktop-file-utils
+Obsoletes: system-config-selinux
+
+%description gui
+system-config-selinux is a utility for managing the SELinux environment
+
+%files gui
+%{_bindir}/system-config-selinux
+%{_datadir}/applications/fedora-system-config-selinux.desktop
+%dir %{_datadir}/system-config-selinux
+%dir %{_datadir}/system-config-selinux/templates
+%{_datadir}/system-config-selinux/*.py*
+%{_datadir}/system-config-selinux/selinux.tbl
+%{_datadir}/system-config-selinux/*png
+%{_datadir}/system-config-selinux/*.glade
+%{_datadir}/system-config-selinux/templates/*.py*
+%config(noreplace) %{_sysconfdir}/pam.d/system-config-selinux
+%config(noreplace) %{_sysconfdir}/security/console.apps/system-config-selinux
+
 %clean
-rm -rf ${RPM_BUILD_ROOT}
+rm -rf %{buildroot}
 
 %files -f %{name}.lang
 %defattr(-,root,root)
 /sbin/restorecon
+/sbin/fixfiles
+/sbin/setfiles
 %{_sbindir}/restorecond
-%{_sbindir}/fixfiles
-%{_sbindir}/setfiles
 %{_sbindir}/setsebool
 %{_sbindir}/semodule
 %{_sbindir}/semanage
 %{_sbindir}/load_policy
-%{_sbindir}/audit2why
 %{_sbindir}/genhomedircon
+%{_sbindir}/sepolgen-ifgen
 %{_sbindir}/sestatus
 %{_sbindir}/run_init
 %{_sbindir}/open_init_pty
-%{_bindir}/newrole
 %{_bindir}/audit2allow
+%{_bindir}/audit2why
 %{_bindir}/chcat
+%{_bindir}/secon
+%{_bindir}/semodule_deps
 %{_bindir}/semodule_expand
 %{_bindir}/semodule_link
 %{_bindir}/semodule_package
@@ -83,6 +150,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/man8/sestatus.8.gz
 %{_mandir}/man8/semanage.8.gz
 %{_mandir}/man8/semodule.8.gz
+%{_mandir}/man8/semodule_deps.8.gz
 %{_mandir}/man8/semodule_link.8.gz
 %{_mandir}/man8/semodule_package.8.gz
 %{_mandir}/man8/semodule_expand.8.gz
@@ -95,15 +163,734 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/man8/setsebool.8.gz
 %{_mandir}/man8/run_init.8.gz
 %{_mandir}/man1/audit2allow.1.gz
-%{_mandir}/man1/newrole.1.gz
+%{_mandir}/man1/secon.1.gz
 %config %{_sysconfdir}/pam.d/newrole
 %config %{_sysconfdir}/pam.d/run_init
 %config(noreplace) %{_sysconfdir}/sestatus.conf
-%{_libdir}/python2.4/site-packages/seobject.py*
+%{_libdir}/python?.?/site-packages/seobject.py*
 %attr(755,root,root) /etc/rc.d/init.d/restorecond
 %config(noreplace) /etc/selinux/restorecond.conf
+%dir %{_libdir}/python?.?/site-packages/sepolgen
+%{_libdir}/python?.?/site-packages/sepolgen/*
+%dir  /var/lib/sepolgen
+/var/lib/sepolgen/perm_map
+
+%preun
+if [ $1 -eq 0 ]; then
+   /sbin/service restorecond stop > /dev/null 2>&1
+   /sbin/chkconfig --del restorecond
+fi
+
+%post
+/sbin/chkconfig --add restorecond
+[ -f /usr/share/selinux/devel/include/build.conf ] && /usr/sbin/sepolgen-ifgen  > /dev/null 
+exit 0
+
+%postun
+if [ "$1" -ge "1" ]; then 
+   [ -x /sbin/service ] && /sbin/service restorecond condrestart  > /dev/null
+fi
 
 %changelog
+* Mon Dec 10 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-16
+- Fix system-config-selinux deletion of file context
+
+* Tue Nov 6 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-15
+- Remove -v from restorecon in fixfiles
+
+* Tue Oct 31 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-14
+- Update to latest semanage and system-config-selinux
+
+* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-13
+- More changes to gui
+
+* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-12
+- Update to latest upstream policycoreutils gui
+
+* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-11
+- Add checkpoliicy requires
+- Fix fixfiles to report incorrect rpm
+- Patch provided by Tony Nelson 
+
+* Fri Jul 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-10
+- Fix checking for conflicting directory specification in genhomedircon
+
+* Mon Jun 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-9
+- Clean up spelling mistakes in gui
+
+* Fri Jun 22 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-8
+- Fix chcat else conditions
+
+* Wed Jun 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-7
+- Update system-config-selinux gui
+
+* Wed Jun 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-6
+- Fix broken code path on setsebool
+
+* Mon Jun 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-5
+- Fix french translation to not crash system-config-selinux
+
+* Fri Jun 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-4
+- Fix genhomedircon to work in chroot environment
+
+* Thu May 17 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-3
+- Fixes for polgentool templates file
+
+* Tue May 4 2007 Dan Walsh <dwalsh@redhat.com> 2.0.16-1
+- Updated version of policycoreutils
+	* Merged support for modifying the prefix via semanage from Dan Walsh.
+- Fixed genhomedircon to find homedirs correctly.
+
+* Tue May 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.15-1
+- Updated version of policycoreutils
+	* Merged po file updates from Dan Walsh.
+- Fix semanage to be able to modify prefix in user record
+
+* Mon Apr 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.14-2
+- Fix title on system-config-selinux
+
+* Wed Apr 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.14-1
+- Updated version of policycoreutils
+	* Build fix for setsebool.
+
+* Wed Apr 25 2007 Dan Walsh <dwalsh@redhat.com> 2.0.13-1
+- Updated version of policycoreutils
+	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
+	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
+	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.
+
+* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.10-2
+- Fixes for polgengui
+
+* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> 2.0.10-1
+- Updated version of policycoreutils
+	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.
+
+* Fri Apr 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-10
+- Fix genhomedircon to handle non user_u for the default user
+
+* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-9
+- More cleanups for gui
+
+* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-8
+- Fix size and use_tmp problem on gui
+
+* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-7
+- Fix restorecon crash
+
+* Wed Apr 18 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-6
+- Change polgengui to a druid
+
+* Tue Apr 16 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-5
+- Fully path script.py
+
+* Mon Apr 16 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-4
+- Add -l flag to restorecon to not traverse file systems
+
+* Sat Apr 14 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-3
+- Fixes for policygengui
+
+* Fri Apr 13 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-2
+- Add polgengui
+
+* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> 2.0.9-1
+- Updated version of sepolgen
+	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.
+
+* Wed Apr 11 2007 Dan Walsh <dwalsh@redhat.com> 2.0.8-1
+- Updated version of sepolgen
+	* Merged updates to sepolgen-ifgen from Karl MacMillan.
+	* Merged updates to sepolgen parser and tools from Karl MacMillan.
+	  This includes improved debugging support, handling of interface 
+	  calls with list parameters, support for role transition rules,
+	  updated range transition rule support, and looser matching.
+
+* Mon Apr 9 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-11
+- Don't generate invalid context with genhomedircon
+
+* Mon Apr 9 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-10
+- Add filter to booleans page
+
+* Tue Apr 3 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-9
+- Fix polgen.py to not generate udp rules on tcp input
+
+* Fri Mar 30 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-8
+- system-config-selinux should be able to run on a disabled system,
+- at least enough to get it enabled.
+
+* Thu Mar 29 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-7
+- Many fixes to polgengui
+
+* Fri Mar 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-6
+- Updated version of sepolgen
+	* Merged patch to discard self from types when generating requires from Karl MacMillan.
+
+* Fri Mar 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-5
+- Change location of audit2allow and sepol-ifgen to sbin
+- Updated version of sepolgen
+	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.
+
+* Mon Mar 19 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-4
+- Add polgen gui
+- Many fixes to system-config-selinux
+
+* Mon Mar 12 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-3
+- service restorecond status needs to set exit value correctly
+
+* Mon Mar 12 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-2
+- Fix gui
+
+* Thu Mar 1 2007 Dan Walsh <dwalsh@redhat.com> 2.0.7-1
+- Update to upstream
+	* Merged restorecond init script LSB compliance patch from Steve Grubb.
+  -sepolgen
+	* Merged better matching for refpolicy style from Karl MacMillan
+	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
+	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.
+
+* Tue Feb 27 2007 Dan Walsh <dwalsh@redhat.com> 2.0.6-3
+- Update to upstream
+  -sepolgen
+	* Merged support for enabling parser debugging from Karl MacMillan.
+- Add sgrupp cleanup of restorcon init script
+
+* Mon Feb 26 2007 Dan Walsh <dwalsh@redhat.com> 2.0.6-2
+- Add Bill Nottinham patch to run restorcond condrestart in postun
+
+* Fri Feb 23 2007 Dan Walsh <dwalsh@redhat.com> 2.0.6-1
+- Update to upstream
+  - policycoreutils
+	* Merged newrole O_NONBLOCK fix from Linda Knippers.
+	* Merged sepolgen and audit2allow patches to leave generated files 
+	  in the current directory from Karl MacMillan.
+	* Merged restorecond memory leak fix from Steve Grubb.
+  -sepolgen
+	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
+	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
+	* Merged patch to update PLY from Karl MacMillan.
+	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.
+
+* Thu Feb 22 2007 Dan Walsh <dwalsh@redhat.com> 2.0.3-2
+- Do not fail on sepolgen-ifgen
+
+* Thu Feb 22 2007 Dan Walsh <dwalsh@redhat.com> 2.0.3-1
+- Update to upstream
+	* Merged translations update from Dan Walsh.
+	* Merged chcat fixes from Dan Walsh.
+	* Merged man page fixes from Dan Walsh.
+	* Merged seobject prefix validity checking from Dan Walsh.
+	* Merged Makefile and refparser.py patch from Dan Walsh.
+	  Fixes PYTHONLIBDIR definition and error handling on interface files.
+
+* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.2-3
+- Updated newrole NONBlOCK patch
+
+* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.2-2
+- Remove Requires: %{name}-plugins
+
+* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> 2.0.2-1
+- Update to upstream
+	* Merged seobject exception handler fix from Caleb Case.
+	* Merged setfiles memory leak patch from Todd Miller.
+
+* Thu Feb 15 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-2
+- Cleanup man pages syntax
+- Add sepolgen
+
+* Mon Feb 12 2007 Dan Walsh <dwalsh@redhat.com> 2.0.1-1
+- Update to upstream
+	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.
+
+* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> 2.0.0-1
+- Update to upstream
+	* Merged new audit2allow from Karl MacMillan.
+	  This audit2allow depends on the new sepolgen python module.
+	  Note that you must run the sepolgen-ifgen tool to generate
+	  the data needed by audit2allow to generate refpolicy. 
+	* Fixed newrole non-pam build.
+- Fix Changelog and spelling error in man page
+
+* Thu Feb 1 2007 Dan Walsh <dwalsh@redhat.com> 1.34.1-4
+- Fix audit2allow on missing translations
+
+* Wed Jan 24 2007 Dan Walsh <dwalsh@redhat.com> 1.34.1-3
+- More chcat fixes
+
+* Wed Jan 24 2007 Dan Walsh <dwalsh@redhat.com> 1.34.1-2
+- Change chcat to exec semodule so file context is maintained
+
+* Wed Jan 24 2007 Dan Walsh <dwalsh@redhat.com> 1.34.1-1
+- Fix system-config-selinux ports view
+- Update to upstream
+	* Fixed newrole non-pam build.
+	* Updated version for stable branch.
+
+* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> 1.33.15-1
+- Update to upstream
+	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
+	* Merged man page updates to make "apropos selinux" work from Dan Walsh.
+* Tue Jan 16 2007 Dan Walsh <dwalsh@redhat.com> 1.33.14-1
+	* Merged newrole man page patch from Michael Thompson.
+	* Merged patch to fix python unicode problem from Dan Walsh.
+
+* Tue Jan 16 2007 Dan Walsh <dwalsh@redhat.com> 1.33.12-3
+- Fix handling of audit messages for useradd change
+Resolves: #222159
+
+* Fri Jan 12 2007 Dan Walsh <dwalsh@redhat.com> 1.33.12-2
+- Update man pages by adding SELinux to header to fix apropos database
+Resolves: #217881
+
+* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.12-1
+- Want to update to match api
+- Update to upstream
+	* Merged newrole securetty check from Dan Walsh.
+	* Merged semodule patch to generalize list support from Karl MacMillan.
+Resolves: #200110
+
+* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.11-1
+- Update to upstream
+	* Merged fixfiles and seobject fixes from Dan Walsh.
+	* Merged semodule support for list of modules after -i from Karl MacMillan. 
+
+* Tue Jan 9 2007 Dan Walsh <dwalsh@redhat.com> 1.33.10-1
+- Update to upstream
+	* Merged patch to correctly handle a failure during semanage handle
+	  creation from Karl MacMillan.
+	* Merged patch to fix seobject role modification from Dan Walsh.
+
+* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> 1.33.8-2
+- Stop newrole -l from working on non secure ttys
+Resolves: #200110
+
+* Thu Jan 4 2007 Dan Walsh <dwalsh@redhat.com> 1.33.8-1
+- Update to upstream
+	* Merged patches from Dan Walsh to:
+	  - omit the optional name from audit2allow
+	  - use the installed python version in the Makefiles
+	  - re-open the tty with O_RDWR in newrole
+
+* Wed Jan 3 2007 Dan Walsh <dwalsh@redhat.com> 1.33.7-1
+- Update to upstream
+	* Patch from Dan Walsh to correctly suppress warnings in load_policy.
+
+* Tue Jan 2 2007 Dan Walsh <dwalsh@redhat.com> 1.33.6-9
+- Fix fixfiles script to use tty command correctly.  If this command fails, it 
+should set the LOGFILE to /dev/null
+Resolves: #220879
+
+* Wed Dec 20 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-8
+- Remove hard coding of python2.4 from Makefiles
+
+* Tue Dec 19 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-7
+- add exists switch to semanage to tell it not to check for existance of Linux user
+Resolves: #219421
+
+* Mon Dec 18 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-6
+- Fix audit2allow generating reference policy
+- Fix semanage to manage user roles properly 
+Resolves: #220071
+
+* Fri Dec 8 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-5
+- Update po files
+- Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
+Resolves: #216920
+
+* Thu Dec  7 2006 Jeremy Katz <katzj@redhat.com> - 1.33.6-4
+- rebuild for python 2.5
+
+* Wed Dec 6 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-3
+- Update po files
+Resolves: #216920
+
+* Fri Dec 1 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-2
+- Update po files
+Resolves: #216920
+
+* Wed Nov 29 2006 Dan Walsh <dwalsh@redhat.com> 1.33.6-1
+- Update to upstream
+	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
+	* Patch from Dan Walsh to fix error code returns in newrole
+	* Patch from Dan Walsh to remove verbose flag from semanage man page
+	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
+	  in /usr/share/selinux/<SELINUXTYPE>
+	
+* Wed Nov 29 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-4
+- Fixing the Makefile line again to build with LSPP support
+Resolves: #208838
+
+* Wed Nov 29 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-3
+- Don't report errors on restorecond when file system does not support XATTRS
+Resolves: #217694
+
+* Tue Nov 28 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-2
+- Fix -q qualifier on load_policy
+Resolves: #214827
+
+* Tue Nov 28 2006 Dan Walsh <dwalsh@redhat.com> 1.33.5-1
+- Merge to upstream
+- Fix makefile line
+Resolves: #208838
+
+* Fri Nov 24 2006 Dan Walsh <dwalsh@redhat.com> 1.33.4-2
+- Additional po changes
+- Added all booleans definitions
+
+* Wed Nov 22 2006 Dan Walsh <dwalsh@redhat.com> 1.33.4-1
+- Upstream accepted my patches
+	* Merged setsebool patch from Karl MacMillan. 
+	  This fixes a bug reported by Yuichi Nakamura with
+	  always setting booleans persistently on an unmanaged system.
+
+* Mon Nov 20 2006 Dan Walsh <dwalsh@redhat.com> 1.33.2-2
+- Fixes for the gui
+
+* Mon Nov 20 2006 Dan Walsh <dwalsh@redhat.com> 1.33.2-1
+- Upstream accepted my patches
+
+* Fri Nov 17 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-9
+- Add Amy Grifis Patch to preserve newrole exit status
+
+* Thu Nov 16 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-8
+- Fix display of gui
+
+* Thu Nov 16 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-7
+- Add patch by Jose Plans to make run_init use pam_acct_mgmt
+
+* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-6
+- More fixes to gui
+
+* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-5
+- Fix audit2allow to generate referene policy
+
+* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-4
+- Add group sort for portsPage.py
+- Add enable/disableaudit to modules page
+
+* Wed Nov 15 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-3
+- Add glade file
+
+* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-2
+- Fix Module handling in system-config-selinux
+
+* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> 1.33.1-1
+- Update to upstream
+	* Merged newrole patch set from Michael Thompson.
+- Add policycoreutils-gui
+
+* Thu Nov 9 2006 Dan Walsh <dwalsh@redhat.com> 1.32-3
+- No longer requires rhpl
+
+* Fri Nov 6 2006 Dan Walsh <dwalsh@redhat.com> 1.32-2
+- Fix genhomedircon man page
+
+* Fri Oct 9 2006 Dan Walsh <dwalsh@redhat.com> 1.32-1
+- Add newrole audit patch from sgrubb
+- Update to upstream
+	* Merged audit2allow -l fix from Yuichi Nakamura.
+	* Merged restorecon -i and -o - support from Karl MacMillan.
+	* Merged semanage/seobject fix from Dan Walsh.
+	* Merged fixfiles -R and verify changes from Dan Walsh.
+
+* Fri Oct 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.30-2
+- Separate out newrole into its own package
+
+* Fri Sep 29 2006 Dan Walsh <dwalsh@redhat.com> 1.30.30-1
+- Update to upstream
+	* Merged newrole auditing of failures due to user actions from
+	  Michael Thompson.
+
+* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-6
+- Pass -i qualifier to restorecon  for fixfiles -R
+- Update translations
+ 
+* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-5
+- Remove recursion from fixfiles -R calls
+- Fix semanage to verify prefix
+
+* Tue Sep 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-4
+- More translations
+- Compile with -pie
+
+* Mon Sep 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-3
+- Add translations
+- Fix audit2allow -l
+
+* Thu Sep 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-2
+- Rebuild
+
+* Thu Sep 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.29-1
+- Update to upstream
+- Change -o to take "-" for stdout
+
+* Wed Sep 13 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-9
+- Add -h support for genhomedircon
+
+* Wed Sep 13 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-8
+- Fix fixfiles handling of -o
+
+* Mon Sep 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-7
+- Make restorecon return the number of changes files if you use the -n flag
+
+* Fri Sep 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-6
+- Change setfiles and restorecon to use stderr except for -o flag
+- Also -o flag will now output files
+ 
+* Thu Sep 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-5
+- Put back Erich's change
+
+* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-4
+- Remove recursive switch when using rpm
+
+* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-3
+- Fix fixfiles to handle multiple rpm and make -o work
+
+* Fri Sep 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-2
+- Apply patch
+
+* Fri Sep 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.28-1
+- Security fixes to run python in a more locked down manner
+- More Translations
+- Update to upstream
+	* Merged fix for restorecon // handling from Erich Schubert.
+	* Merged translations update and fixfiles fix from Dan Walsh.
+
+* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-5
+- Change scripts to use /usr/sbin/python
+
+* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-4
+- Add -i qualified to restorecon to tell it to ignore files that do not exist
+- Fixfiles also modified for this change
+
+* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-3
+- Ignore sigpipe
+
+* Thu Aug 31 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-2
+- Fix init script and add translations
+
+* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> 1.30.27-1
+- Update to upstream
+	* Merged fix for restorecon symlink handling from Erich Schubert.
+
+* Sat Aug 12 2006 Dan Walsh <dwalsh@redhat.com> 1.30.26-1
+- Update to upstream
+	* Merged semanage local file contexts patch from Chris PeBenito.
+- Fix fixfiles log creation
+- More translations
+
+* Thu Aug 3 2006 Dan Walsh <dwalsh@redhat.com> 1.30.25-1
+- Update to upstream
+	* Merged patch from Dan Walsh with:
+	  * audit2allow: process MAC_POLICY_LOAD events
+	  * newrole:  run shell with - prefix to start a login shell
+	  * po:  po file updates
+	  * restorecond:  bail if SELinux not enabled
+	  * fixfiles: omit -q 
+	  * genhomedircon:  fix exit code if non-root
+	  * semodule_deps:  install man page
+	* Merged secon Makefile fix from Joshua Brindle.
+	* Merged netfilter contexts support patch from Chris PeBenito.
+
+* Wed Aug 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-3
+- Fix audit2allow to handle reload of policy
+
+* Wed Aug 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-2
+- Stop restorecond init script when selinux is not enabled
+
+* Tue Aug 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.22-1
+- Update to upstream
+	* Merged restorecond size_t fix from Joshua Brindle.
+	* Merged secon keycreate patch from Michael LeMay.
+	* Merged restorecond fixes from Dan Walsh.
+	  Merged updated po files from Dan Walsh.
+	* Merged python gettext patch from Stephen Bennett.
+	* Merged semodule_deps from Karl MacMillan.
+
+* Thu Jul 27 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-7
+- Change newrole to exec a login shell to prevent suspend.
+
+* Fri Jul 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-6
+- Report error when selinux not enabled in restorecond
+
+* Tue Jul 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-5
+- Fix handling of restorecond
+
+* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-4
+- Fix creation of restorecond pidfile
+
+* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-3
+- Update translations
+- Update to new GCC
+
+* Mon Jul 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-2
+- Add verbose flag to restorecond and update translations
+
+* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.17-1
+- Update to upstream
+	* Lindent.
+	* Merged patch from Dan Walsh with:
+	  * -p option (progress) for setfiles and restorecon.
+	  * disable context translation for setfiles and restorecon.
+	  * on/off values for setsebool.
+	* Merged setfiles and semodule_link fixes from Joshua Brindle.
+	
+* Thu Jun 22 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-5
+- Add progress indicator on fixfiles/setfiles/restorecon
+
+* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-4
+- Don't use translations with matchpathcon
+
+* Tue Jun 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-3
+- Prompt for selinux-policy-devel package in audit2allow
+
+* Mon Jun 19 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-2
+- Allow setsebool to use on/off
+- Update translations
+
+* Fri Jun 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.14-1
+- Update to upstream
+	* Merged fix for setsebool error path from Serge Hallyn.
+	* Merged patch from Dan Walsh with:
+	*    Updated po files.
+	*    Fixes for genhomedircon and seobject.
+	*    Audit message for mass relabel by setfiles.
+
+* Tue Jun 13 2006 James Antill <jantill@redhat.com> 1.30.12-5
+- Update audit mass relabel to only compile in when audit is installed.
+
+* Mon Jun 12 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-4
+- Update to required versions
+- Update translation
+
+* Wed Jun 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-3
+- Fix shell selection
+
+* Mon Jun 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-2
+- Add BuildRequires for gettext
+
+* Mon Jun 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-1
+	* Updated fixfiles script for new setfiles location in /sbin.
+
+* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1
+- Update to upstream
+	* Merged more translations from Dan Walsh.
+	* Merged patch to relocate setfiles to /sbin for early relabel
+	  when /usr might not be mounted from Dan Walsh.
+	* Merged semanage/seobject patch to preserve fcontext ordering in list.
+	* Merged secon patch from James Antill.
+
+* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4
+- Fix seobject.py to not sort the file_context file.
+- move setfiles to /sbin
+
+* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-3
+- secon man page and getopt fixes.
+- Enable mass relabel audit, even though it doesn't work.
+
+* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-2
+- secon fixes for --self-exec etc.
+- secon change from level => sensitivity, add clearance.
+- Add mass relabel AUDIT patch, but disable it until kernel problem solved.
+
+* Tue May 24 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1
+- Update to upstream
+	* Merged patch with updates to audit2allow, secon, genhomedircon,
+	  and semanage from Dan Walsh.
+
+* Sat May 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-4
+- Fix exception in genhomedircon
+
+* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-3
+- Add rhpl dependancy
+
+* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-2
+- Add secon man page and prompt options.
+
+* Mon May 15 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-1
+- Update to upstream
+	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
+	* Merged .po file patch from Dan Walsh.
+	* Merged bug fix for genhomedircon.
+
+* Wed May 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-2
+- Fix exception on bad file_context
+
+* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1
+- Update to upstream
+	* Merged fix warnings patch from Karl MacMillan.
+	* Merged patch from Dan Walsh.
+	  This includes audit2allow changes for analysis plugins,
+	  internationalization support for several additional programs 
+	  and added po files, some fixes for semanage, and several cleanups.
+	  It also adds a new secon utility.
+
+* Sun May 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-5
+- Fix genhomedircon to catch duplicate homedir problem
+
+* Thu May 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-4
+- Add secon program
+- Add translations
+
+* Thu Apr 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-3
+- Fix check for "msg"
+
+* Mon Apr 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2
+- Ship avc.py
+
+* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1
+- Add /etc/samba/secrets.tdb to restorecond.conf
+- Update from upstream
+	* Merged semanage prefix support from Russell Coker.
+	* Added a test to setfiles to check that the spec file is
+	  a regular file.
+
+* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-4
+- added some missing buildrequires
+- added Requires: initscripts for /sbin/service
+
+* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-3
+- use absolute path /sbin/service
+
+* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-2
+- Fix audit2allow to not require ausearch.
+- Fix man page
+- Add libflashplayer to restorecond.conf
+
+* Wed Mar 29 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-1
+- Update from upstream
+	* Merged audit2allow fixes for refpolicy from Dan Walsh.
+	* Merged fixfiles patch from Dan Walsh.
+	* Merged restorecond daemon from Dan Walsh.
+	* Merged semanage non-MLS fixes from Chris PeBenito.
+	* Merged semanage and semodule man page examples from Thomas Bleher.
+
+* Tue Mar 28 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-4
+- Clean up reference policy generation in audit2allow
+
+* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-3
+- Add IN_MOVED_TO to catch renames
+
+* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2
+- make restorecond only ignore non directories with lnk > 1
+
+* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1
+- Make audit2allow translate dontaudit as well as allow rules
+- Update from upstream
+	* Merged semanage labeling prefix patch from Ivan Gyurdiev.
+
+* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30-5
+- Fix audit2allow to retrieve dontaudit rules
+
+* Mon Mar 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30-4
+- Open file descriptor to make sure file does not change from underneath.
+
+* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-3
+- Fixes for restorecond attack via symlinks
+- Fixes for fixfiles
+
+* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-2
+- Restorecon has to handle suspend/resume
+
 * Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1
 - Update to upstream
 

sources

@@ -1 +1,2 @@
-e017bfddf27e124cef2743496dcfcc49  policycoreutils-1.30.tgz
+4d6e57c7fc396efbcf96b7accab4ba30  sepolgen-1.0.8.tgz
+19c4fbfa60756282d78012fd8695c821  policycoreutils-2.0.16.tgz

system-config-selinux.console

@@ -0,0 +1,3 @@
+USER=root
+PROGRAM=/usr/share/system-config-selinux/system-config-selinux.py
+SESSION=true

system-config-selinux.desktop

@@ -0,0 +1,12 @@
+[Desktop Entry]
+Name=SELinux Management
+GenericName=SELinux
+Comment=Configure SELinux in a graphical setting
+StartupNotify=true
+Icon=/usr/share/system-config-selinux/system-config-selinux.png
+Exec=/usr/bin/system-config-selinux
+Type=Application
+Terminal=false
+Encoding=UTF-8
+Categories=Application;SystemSetup;X-Red-Hat-Base;
+X-Desktop-File-Install-Version=0.2

system-config-selinux.pam

@@ -0,0 +1,8 @@
+#%PAM-1.0
+auth       sufficient	pam_rootok.so
+auth       sufficient   pam_timestamp.so
+auth       include	system-auth
+session	   required	pam_permit.so
+session    optional	pam_xauth.so
+session    optional     pam_timestamp.so
+account    required	pam_permit.so