Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP4:Update
policycoreutils.25312
policycoreutils.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File policycoreutils.changes of Package policycoreutils.25312
------------------------------------------------------------------- Fri Jul 15 07:05:36 UTC 2022 - Johannes Segitz <jsegitz@suse.com> - Added chcat_imports.patch to prevent errors when running chcat (bsc#1201369) ------------------------------------------------------------------- Wed Mar 21 11:14:25 UTC 2018 - jsegitz@suse.com - Added CVE-2018-1063.patch to prevent chcon from following symlinks in /tmp, /var/tmp, /var/run and /var/lib/debug (bsc#1083624, CVE-2018-1063) ------------------------------------------------------------------- Mon Jun 19 10:44:19 UTC 2017 - jsegitz@suse.com - Added policycoreutils-version-numbers.patch by Petr Lautrbach to show version numbers of modules where they are available (bsc#1043237). ------------------------------------------------------------------- Mon Dec 19 07:21:22 UTC 2016 - jsegitz@novell.com - Added CVE-2016-7545_sandbox_escape.patch to fix CVE-2016-7545, bsc#1000998 Sandboxed session could have escaped to the parent session ------------------------------------------------------------------- Thu Jul 14 08:45:45 UTC 2016 - jsegitz@novell.com - Changes submitted by MargueriteSu: Update to version 2.5 * sepolicy: Do not overwrite CFLAGS, from Nicolas Iooss. * sepolicy: Rename policy global variable conflict, from Nicolas Iooss. * newrole: Add missing defined in #if, from Nicolas Iooss. * newrole: Add description of missing parameter -p in newrole man page, from Lukas Vrabec. * secon: Add missing descriptions for --*-key params in secon man page, from Lukas Vrabec * semanage: List reserve_port_t in semanage port -l, from Petr Lautrbach. * chcat: Add a fallback in case os.getlogin() returns nothing, from Laurent Bigonville. * semanage: fix 'semanage permissions -l' subcommand, from Petr Lautrbach. * semanage: replace string.join() with str.join(), from Petr Lautrbach. * Man page warning fixes, from Ville Skyttä. * sandbox: Fix sandbox to propagate specified MCS/MLS Security Level, from Miroslav Grepl. * semanage: Require at least one argument for 'semanage permissive -d', from Petr Lautrbach. * sepolicy: Improve sepolicy command line interface, from Petr Lautrbach. * audit2allow/why: ignore setlocale errors, from Petr Lautrbach. * semodule: Add --extract/-E, --cil/-c, and --hll/-H to extract modules, from Yuli Khodorkovskiy. * audit2allow: Comment constraint rules in output, from Miroslav Grepl via Petr Lautrbach. * Fix PEP8 issues, from Jason Zaman. * semanage: fix moduleRecords deleteall method, from Stephen Smalley. * Improve compatibility with Python 3, from Michal Srb. * semanage: Set self.sename to sename after calling semanage_seuser_set_sename(), from Laurent Bigonville. * semanage: Fix typo in semanage args for minimium policy store, from Petr Lautrbach. * sepolicy: Only invoke RPM on RPM-enabled Linux distributions, from Sven Vermeulen. * mcstransd: don't reinvent getpeercon, from Stephen Smalley. * setfiles/restorecon: fix -r/-R option, from Petr Lautrbach. * org.selinux.policy: Require auth_admin_keep for all actions, from Stephen Smalley. * hll: Move core functions of pp to libsepol, from James Carter * run_init: Use a ring buffer in open_init_pty, from Jason Zaman. * run_init: fix open_init_pty availability check, from Nicolas Iooss. * Widen Xen IOMEM context entries, from Daniel De Graaf. * Fix -Wformat errors with gcc-5.0.0, from Petr Lautrbach. * Fixed typo/grammatical error, from Christopher Peterson. * Fix typo in semanage-port man page, from Andrew Spiers. Update to version 2.4 * Fix bugs found by hardened gcc flags, from Nicolas Iooss. * Improve support for building with different versions of python from Nicolas Iooss. * Ensure XDG_RUNTIME_DIR is passed through to the sandbox in seunshare, from Dan Walsh * Remove cgroups from sandbox, from Dan Walsh * Try to use setcurrent before setexec in seunshare, from Andy Lutomirski * Stop using the now deprecated flask.h and av_permissions.h, from Stephen Smalley * Add a store root path in semodule, from Yuli Khodorkovskiy * Add a flag to ignore cached CIL files and recompile HLL modules, from Yuli Khodorkovskiy * Add and install HLL compiler for policy packages to CIL. The compiler is installed in /var/libexec/selinux/hll/ by default, from Steve Lawrence * Fixes to pp compiler to better support roles and type attributes, from Yuli Khodorkovskiy * Deprecate base/upgrade/version in semodule. Calling these commands will now call --install on the backend, from Yuli Khodorkovskiy * Add ability to install modules with a specified priority, from Caleb Case * Use /tmp for permissive module creation, by Caleb Case * Update semanage to use new source policy infrastructure, from Jason Dana * Add RuntimeDirectory to mcstrans systemd unit file, from Laurent Bigonville ------------------------------------------------------------------- Wed Nov 5 14:04:30 UTC 2014 - jsegitz@novell.com - added Requires: python-yum, yum-metadata-parser to fix sepolicy (bnc#903841) ------------------------------------------------------------------- Mon Sep 8 08:04:51 UTC 2014 - jsegitz@suse.com - removed execute permission from systemd unit file ------------------------------------------------------------------- Sun May 18 00:33:58 UTC 2014 - crrodriguez@opensuse.org - Version 2.3 sepolgen: Add back attributes flag to fix exception crash from Dan Walsh. (drop policycoreutils-sepolgen_missing_attributes.patch) * Add -P semodule option to man page from Dan Walsh. * selinux_current_policy_path will return none on a disabled SELinux system * Add new icons for sepolicy gui from Dan Walsh. * Only return writeable files that are enabled from Dan Walsh. * Add domain to short list of domains, when -t and -d from Dan Walsh. * Fix up desktop files to match current standards from Dan Walsh. * Add support to return sensitivities and categories for python from Dan Walsh. * Cleanup whitespace from Dan Walsh. * Add message to tell user to install sandbox policy from Dan Walsh. * Add systemd unit file for mcstrans from Laurent Bigonville. * Improve restorecond systemd unit file from Laurent Bigonville. * Minor man pages improvements from Laurent Bigonville. * Ignore selevel/serange if MLS is disabled from Sven Vermeulen. * Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems. * Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh. * Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh. * Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh. * Make yum/extract_rpms optional for sepolicy generate from Dan Walsh. * Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh. ------------------------------------------------------------------- Fri Dec 13 14:13:32 UTC 2013 - vcizek@suse.com - sepolgen: add back attributes * fixes build of selinux-policy * policycoreutils-sepolgen_missing_attributes.patch ------------------------------------------------------------------- Mon Dec 9 11:20:57 UTC 2013 - vcizek@suse.com - fix issues which prevented accepting to Factory * mention the dropped patches (merged upstream): - policycoreutils-rhat.patch - policycoreutils-sepolgen.patch ------------------------------------------------------------------- Thu Oct 31 14:48:31 UTC 2013 - p.drouand@gmail.com - update to version 2.2 * Properly build the swig exception file * Fix man pages * Support overriding PATH and INITDIR in Makefile * Fix LDFLAGS usage * Fix init_policy warning * Fix semanage logging * Open newrole stdin as read/write * Fix sepolicy transition * Support overriding CFLAGS * Create correct man directory for run_init * restorecon GLOB_BRACE change * Extend audit2why to report additional constraint information. * Catch IOError errors within audit2allow * semanage export/import fixes * Improve setfiles progress reporting * Document setfiles -o option in usage * Change setfiles to always return -1 on failure * Improve setsebool error r eporting * Major overhaul of gui * Fix sepolicy handling of non-MLS policy * Support returning type aliases * Add sepolicy tests * Add org.selinux.config.policy * Improve range and user input checking by semanage * Prevent source or target arguments that end with / for substitutions * Allow use of <<none>> for semanage fcontext * Report customized user levels * Support deleteall for restoring disabled modules * Improve semanage error reporting * Only list disabled modules for module locallist * Fix logging * Define new constants for file type character codes * Improve bash completions * Convert semanage to argparse * Add semanage tests * Split semanage man pages * Move bash completion scripts * Replace genhomedircon script with a link to semodule * Fix fixfiles * Add support for systemd service for restorecon * Spelling corrections * Improve sandbox support for home dir symlinks and file caps * Switch sandbox to openbox window manager * Coalesce audit2why and audit2allow * Change audit2allow to append to output file * Update translations * Change audit2why to use selinux_current_policy_path - Update sepolgen to version 1.2 * Return additional constraint information. * Fix bug in calls to attributes * Add support for filename transitions * Fix sepolgen tests - Remove restorecond.service; use upstream service file - Don't provide support for sysvinit and systemd on a same system Use either one or the other ------------------------------------------------------------------- Thu Jun 27 14:51:08 UTC 2013 - vcizek@suse.com - change the source url to the official release tarballs ------------------------------------------------------------------- Wed Apr 3 10:06:06 UTC 2013 - vcizek@suse.com - fixed source url - removed old tarball ------------------------------------------------------------------- Fri Mar 29 13:13:19 UTC 2013 - vcizek@suse.com - update to 2.1.14 * setfiles: estimate percent progress * load_policy: make link at the destination directory * Rebuild polgen.glade with glade-3 * sepolicy: new command to unite small utilities * sepolicy: Update Makefiles and po files * sandbox: use sepolicy to look for sandbox_t * gui: switch to use sepolicy * gui: sepolgen: use sepolicy to generate * semanage: use sepolicy for boolean dictionary * add po file configuration information * po: stop running update-po on all * semanage: seobject verify policy types before allowing you to assign them. * gui: Start using Popen, instead of os.spawnl * sandbox: Copy /var/tmp to /tmp as they are the same inside * qualifier to shred content * semanage: Fix handling of boolean_sub names when using the -F flag * semanage: man: roles instead of role * gui: system-config-selinux: Catch no DISPLAY= error * setfiles: print error if no default label found * semanage: list logins file entries in semanage login -l * semanage: good error message is sepolgen python module missing * gui: system-config-selinux: do not use lokkit * secon: add support for setrans color information in prompt output * restorecond: remove /etc/mtab from default list * gui: If you are not able to read enforcemode set it to False * genhomedircon: regenerate genhomedircon more often * restorecond: Add /etc/udpatedb.conf to restorecond.conf * genhomedircon generation to allow spec file to pass in SEMODULE_PATH * fixfiles: relabel only after specific date * po: update translations * sandbox: seunshare: do not reassign realloc value * seunshare: do checking on setfsuid * sestatus: rewrite to shut up coverity - removed policycoreutils-glibc217.patch (upstream fix) - added patches: * policycoreutils-rhat.patch * policycoreutils-sepolgen.patch * loadpolicy_path.patch ------------------------------------------------------------------- Wed Jan 30 12:10:23 UTC 2013 - vcizek@suse.com - update to 2.1.13 - drop policycoreutils-po.patch.bz2 (updated upstream) - drop policycoreutils-gui.patch.bz2 (added to upstream) - drop sandbox init scripts (shouldn't be needed anymore) - numerous other changes ------------------------------------------------------------------- Tue Dec 11 15:11:12 UTC 2012 - vcizek@suse.com - added service unit for restorecond ------------------------------------------------------------------- Wed Dec 5 13:41:33 UTC 2012 - vcizek@suse.com - semanage needs python-xml and python-ipy to run ------------------------------------------------------------------- Sat Nov 17 06:58:05 UTC 2012 - aj@suse.de - Fix compilation with glibc 2.17 (add patch policycoreutils-glibc217.patch extracted from Fedora) ------------------------------------------------------------------- Tue Aug 7 15:30:58 UTC 2012 - meissner@suse.com - updated policycoreutils to 2.1.10 - adapated patches - updated sepolgen to 1.1.5 ------------------------------------------------------------------- Tue Feb 14 09:57:15 UTC 2012 - mvyskocil@suse.cz - fix seceral rpmlint errors and warnings * use /var/adm/fillup-template for sandbox * don't use /var/lock/subsys in any of init script * use set_permissions macro and add correct Requires(pre) * fix the languages to new -lang package * fix policycoreutils-sandbox Group * remove runlevel 4 from inint scripts ------------------------------------------------------------------- Mon Feb 13 10:53:53 UTC 2012 - coolo@suse.com - patch license to follow spdx.org standard ------------------------------------------------------------------- Mon Mar 14 15:16:51 UTC 2011 - prusnak@opensuse.org - updated to 2.0.85 * changes too numerous to list ------------------------------------------------------------------- Fri Feb 4 00:09:42 UTC 2011 - toddrme2178@gmail.com - fix a typo in the package group ------------------------------------------------------------------- Fri Jun 4 13:19:27 UTC 2010 - prusnak@opensuse.org - remove usermode-gtk from Requires of -gui subpackage ------------------------------------------------------------------- Fri May 7 14:01:05 CEST 2010 - meissner@suse.de - remove incorrect and unnecessary rpmlintrc. ------------------------------------------------------------------- Mon Mar 22 15:47:14 UTC 2010 - prusnak@suse.cz - fix build by moving _GNU_SOURCE define (gnusource.patch), thx darix ------------------------------------------------------------------- Thu Feb 25 15:28:18 UTC 2010 - prusnak@suse.cz - updated to 2.0.79 * changes too numerous to list ------------------------------------------------------------------- Wed Jul 15 13:31:00 CEST 2009 - prusnak@suse.cz - disable Requires usermode-gtk ------------------------------------------------------------------- Fri Jun 19 13:42:09 CEST 2009 - prusnak@suse.cz - added libsepol-static-devel to BuildRequires ------------------------------------------------------------------- Wed May 27 14:24:47 CEST 2009 - prusnak@suse.cz - updated to 2.0.62 * Add btrfs to fixfiles from Dan Walsh. * Remove restorecond error for matching globs with multiple hard links and fix some error messages from Dan Walsh. * Make removing a non-existant module a warning rather than an error from Dan Walsh. * Man page fixes from Dan Walsh. ------------------------------------------------------------------- Wed Feb 11 01:09:12 CET 2009 - ro@suse.de - use sr@latin instead of sr@Latn ------------------------------------------------------------------- Wed Jan 14 14:12:53 CET 2009 - prusnak@suse.cz - updated to 2.0.61 * semanage: use semanage_mls_enabled() from Stephen Smalley * fix error checking in restorecond, for inotify_add_watch * change md5 to hashlib.md5 in sepolgen * fix Japanese translations * fix audit2allow man page * don't error out when removing a non existing module * chcat: cut categories at arbitrary point (25) from Dan Walsh * semodule: use new interfaces in libsemanage for compressed files from Dan Walsh * audit2allow: string changes for usage ------------------------------------------------------------------- Mon Dec 1 11:23:02 CET 2008 - prusnak@suse.cz - updated to 2.0.59 * Fix text in newrole * Fix revertbutton on booleans page in system-config-selinux * Fix system-config-selinux booleanspage throwing and exception * Allow addition of local modifications of fcontext policy * Handle selinux disabled correctly * Handle manipulation of fcontext file correctly * Fix traceback in audit2why ------------------------------------------------------------------- Mon Nov 10 16:51:16 CET 2008 - ro@suse.de - package "newrole" with permissions matching "secure" permissions mode ------------------------------------------------------------------- Fri Nov 7 02:44:25 CET 2008 - ro@suse.de - buildfix: prevent regeneration of policycoreutils.pot ------------------------------------------------------------------- Fri Oct 31 15:57:57 CET 2008 - prusnak@suse.cz - use permissions for newrole ------------------------------------------------------------------- Mon Oct 20 11:48:40 CEST 2008 - prusnak@suse.cz - updated to 2.0.57 * Update po files from Dan Walsh. - updated to 2.0.56 * fixfiles will now remove all files in /tmp and will check for unlabeled_t in /tmp and /var/tmp from Dan Walsh. * add glob support to restorecond from Dan Walsh. * allow semanage to handle multi-line commands in a single transaction from Dan Walsh. ------------------------------------------------------------------- Mon Sep 8 14:18:48 CEST 2008 - prusnak@suse.cz - fix scriptlets ------------------------------------------------------------------- Tue Sep 2 12:25:39 CEST 2008 - prusnak@suse.cz - updated to 2.0.55 * Merged semanage node support from Christian Kuester. - updated to 2.0.54 * Add support for boolean files and group support for seusers from Dan Walsh. * Ensure that setfiles -p output is newline terminated from Russell Coker. - updated to 2.0.53 * Change setfiles to validate all file_contexts files when using -c from Stephen Smalley. - updated sepolgen to 1.0.13 * Only append s0 suffix if MLS is enabled from Karl MacMillan. - added missing preun/post/postun scriptlets ------------------------------------------------------------------- Mon Aug 4 01:00:45 CEST 2008 - ro@suse.de - add directory to filelist to fix build ------------------------------------------------------------------- Tue Jul 15 18:11:09 CEST 2008 - prusnak@suse.cz - initial version 2.0.52 * based on Fedora package by Dan Walsh <dwalsh@redhat.com>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
