Show openSUSE:Backports:SLE-15-SP4:FactoryCandidates / checkpolicy

Overview Repositories Revisions Requests Users Attributes Meta

SELinux policy compiler

Security-enhanced Linux is a feature of the Linux(R) kernel and a
number of utilities with enhanced security functionality designed to
add mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These architectural
components provide general support for the enforcement of many kinds of
mandatory access control policies, including those based on the
concepts of Type Enforcement(R), Role-based Access Control, and
Multi-level Security.

This package contains checkpolicy, the SELinux policy compiler. Only
required for building policies.

Developed at security:SELinux
Sources inherited from project openSUSE:Factory
4 derived packages
Derived Packages
security:SELinux

openSUSE:Factory:Rings:1-MinimalX

SUSE:ALP:Source:Standard:0.1

home:bmwiedemann:repro...le:distribution:ring1
Cancel
Download package
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP4:FactoryCandidates/checkpolicy && cd $_
Create Badge

Build Results
RPM Lint

Refresh

Source Files

Filename	Size	Changed
checkpolicy-3.7.tar.gz	0000074992 73.2 KB	5 months ago
checkpolicy-3.7.tar.gz.asc	0000000833 833 Bytes	5 months ago
checkpolicy-tests.tar.gz	0000013993 13.7 KB	over 6 years ago
checkpolicy.changes	0000011109 10.8 KB	5 months ago
checkpolicy.keyring	0000006913 6.75 KB	11 months ago
checkpolicy.spec	0000003054 2.98 KB	5 months ago

Latest Revision

Ana Guerrero (anag+factory) accepted request 1185744 from

Cathy Hu (cahu) 4 months ago (revision 37)

- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
    * checkpolicy: support CIDR notation for nodecon statements
    * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
    * checkpolicy: handle unprintable token
    * checkpolicy: avoid assigning garbage values
    * checkpolicy: free temporary bounds type
    * checkpolicy: perform contiguous check in host byte order
    * checkpolicy: include <ctype.h> for isprint(3)
  * oss-fuzz fixes:
    * checkpolicy: add libfuzz based fuzzer
    * checkpolicy: free complete role_allow_rule on error
    * checkpolicy: free identifiers on invalid typebounds
    * checkpolicy: return YYerror on invalid character
    * checkpolicy: clone level only once