Petr Šabata 85e255c
%if 0%{?fedora} > 12 || 0%{?rhel} >= 8
5abec27
%global with_python3 1
7ca2991
%endif
5abec27
775a744
%define ruby_inc %(pkg-config --cflags ruby)
d827474
%define libsepolver 2.7-3
c097aef
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
c097aef
cvsdist 9f53563
Summary: SELinux library and simple utilities
cvsdist 9f53563
Name: libselinux
2f49e06
Version: 2.7
6ec46c1
Release: 7%{?dist}
e1e36a0
License: Public Domain
cvsdist 9f53563
Group: System Environment/Libraries
e0682de
# https://github.com/SELinuxProject/selinux/wiki/Releases
2f49e06
Source: https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/libselinux-2.7.tar.gz
e1c914d
Source1: selinuxconlist.8
e1c914d
Source2: selinuxdefcon.8
e4fb3f8
Url: https://github.com/SELinuxProject/selinux/wiki
e58e944
# download https://raw.githubusercontent.com/fedora-selinux/scripts/master/selinux/make-fedora-selinux-patch.sh
e58e944
# run:
2f49e06
# $ VERSION=2.7 ./make-fedora-selinux-patch.sh libselinux
f2f46ec
# HEAD https://github.com/fedora-selinux/selinux/commit/4247fad665261169b430895f0ab10f56eb33dd10
e58e944
Patch1: libselinux-fedora.patch
2f49e06
BuildRequires: python python-devel ruby-devel ruby libsepol-static >= %{libsepolver} swig pcre2-devel xz-devel
5abec27
%if 0%{?with_python3}
a1ef8d8
BuildRequires: python3 python3-devel
5abec27
%endif # if with_python3
e8da680
BuildRequires: systemd
baf50b2
Requires: libsepol%{?_isa} >= %{libsepolver} pcre2
137759f
Conflicts: filesystem < 3, selinux-policy-base < 3.13.1-138
cvsdist 9f53563
cvsdist 9f53563
%description
bebb529
Security-enhanced Linux is a feature of the Linux® kernel and a number
cvsdist 9f53563
of utilities with enhanced security functionality designed to add
cvsdist 9f53563
mandatory access controls to Linux.  The Security-enhanced Linux
cvsdist 9f53563
kernel contains new architectural components originally developed to
cvsdist 9f53563
improve the security of the Flask operating system. These
cvsdist 9f53563
architectural components provide general support for the enforcement
cvsdist 9f53563
of many kinds of mandatory access control policies, including those
cvsdist 9f53563
based on the concepts of Type Enforcement®, Role-based Access
cvsdist 9f53563
Control, and Multi-level Security.
cvsdist 9f53563
cvsdist 9f53563
libselinux provides an API for SELinux applications to get and set
cvsdist 9f53563
process and file security contexts and to obtain security policy
cvsdist 9f53563
decisions.  Required for any applications that use the SELinux API.
cvsdist 9f53563
fa0215a
%package utils
fa0215a
Summary: SELinux libselinux utilies
fa0215a
Group: Development/Libraries
408641d
Requires: %{name}%{?_isa} = %{version}-%{release}
fa0215a
fa0215a
%description utils
fa0215a
The libselinux-utils package contains the utilities
fa0215a
36400b8
%package -n python2-libselinux
36400b8
%{?python_provide:%python_provide python2-libselinux}
36400b8
# Remove before F30
90861ef
Provides: %{name}-python = %{version}-%{release}
36400b8
Provides: %{name}-python%{?_isa} = %{version}-%{release}
36400b8
Obsoletes: %{name}-python < %{version}-%{release}
e1e36a0
Summary: SELinux python bindings for libselinux
4bb08c5
Group: Development/Libraries
408641d
Requires: %{name}%{?_isa} = %{version}-%{release}
4bb08c5
36400b8
%description -n python2-libselinux
e1e36a0
The libselinux-python package contains the python bindings for developing 
e1e36a0
SELinux applications. 
4bb08c5
5abec27
%if 0%{?with_python3}
7b100f1
%package -n python3-libselinux
5abec27
Summary: SELinux python 3 bindings for libselinux
5abec27
Group: Development/Libraries
408641d
Requires: %{name}%{?_isa} = %{version}-%{release}
7b100f1
%{?python_provide:%python_provide python3-libselinux}
7b100f1
# Remove before F30
90861ef
Provides: %{name}-python3 = %{version}-%{release}
7b100f1
Provides: %{name}-python3%{?_isa} = %{version}-%{release}
7b100f1
Obsoletes: %{name}-python3 < %{version}-%{release}
5abec27
7b100f1
%description -n python3-libselinux
5abec27
The libselinux-python3 package contains python 3 bindings for developing
5abec27
SELinux applications. 
5abec27
%endif # with_python3
5abec27
ee77868
%package ruby
ee77868
Summary: SELinux ruby bindings for libselinux
ee77868
Group: Development/Libraries
408641d
Requires: %{name}%{?_isa} = %{version}-%{release}
94187ee
Provides: ruby(selinux)
ee77868
ee77868
%description ruby
ee77868
The libselinux-ruby package contains the ruby bindings for developing 
ee77868
SELinux applications. 
ee77868
cvsdist 9f53563
%package devel
cvsdist 9f53563
Summary: Header files and libraries used to build SELinux
cvsdist 9f53563
Group: Development/Libraries
408641d
Requires: %{name}%{?_isa} = %{version}-%{release}
408641d
Requires: libsepol-devel%{?_isa} >= %{libsepolver}
cvsdist 9f53563
cvsdist 9f53563
%description devel
c097aef
The libselinux-devel package contains the libraries and header files
c097aef
needed for developing SELinux applications. 
c097aef
c097aef
%package static
c097aef
Summary: Static libraries used to build SELinux
c097aef
Group: Development/Libraries
408641d
Requires: %{name}-devel%{?_isa} = %{version}-%{release}
c097aef
c097aef
%description static
c097aef
The libselinux-static package contains the static libraries
cvsdist 9f53563
needed for developing SELinux applications. 
cvsdist 9f53563
cvsdist 9f53563
%prep
6146f71
%autosetup -p 1 -n libselinux-%{version}
31e19c1
cvsdist 9f53563
%build
b7e1bdd
export LDFLAGS="%{?__global_ldflags}"
8163749
export DISABLE_RPM="y"
2f49e06
export USE_PCRE2="y"
b7e1bdd
5abec27
# To support building the Python wrapper against multiple Python runtimes
5abec27
# Define a function, for how to perform a "build" of the python wrapper against
5abec27
# a specific runtime:
5abec27
BuildPythonWrapper() {
5abec27
  BinaryName=$1
5abec27
5abec27
  # Perform the build from the upstream Makefile:
5abec27
  make \
4eca5fc
    PYTHON=$BinaryName \
5abec27
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
5abec27
    pywrap
5abec27
}
5abec27
3371166
make clean
d189708
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} swigify
5abec27
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} all
5abec27
4eca5fc
BuildPythonWrapper %{__python}
5abec27
%if 0%{?with_python3}
4eca5fc
BuildPythonWrapper %{__python3}
5abec27
%endif # with_python3
5abec27
2f49e06
make RUBYINC="%{ruby_inc}" SHLIBDIR="%{_libdir}" LIBDIR="%{_libdir}" LIBSEPOLA="%{_libdir}/libsepol.a" CFLAGS="-g %{optflags}" %{?_smp_mflags} rubywrap
cvsdist 9f53563
cvsdist 9f53563
%install
5abec27
InstallPythonWrapper() {
5abec27
  BinaryName=$1
5abec27
5abec27
  make \
4eca5fc
    PYTHON=$BinaryName \
5abec27
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
2f49e06
    LIBSEPOLA="%{_libdir}/libsepol.a" \
5abec27
    pywrap
5abec27
5abec27
  make \
4eca5fc
    PYTHON=$BinaryName \
5abec27
    DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" \
86fcde8
    SHLIBDIR="%{buildroot}/%{_lib}" BINDIR="%{buildroot}%{_bindir}" \
86fcde8
    SBINDIR="%{buildroot}%{_sbindir}" \
2f49e06
    LIBSEPOLA="%{_libdir}/libsepol.a" \
86fcde8
    install-pywrap
5abec27
}
5abec27
b71bf0b
rm -rf %{buildroot}
e8da680
mkdir -p %{buildroot}%{_tmpfilesdir}
e8da680
mkdir -p %{buildroot}%{_libdir}
e8da680
mkdir -p %{buildroot}%{_includedir}
b71bf0b
mkdir -p %{buildroot}%{_sbindir}
e8da680
install -d -m 0755 %{buildroot}%{_rundir}/setrans
e8da680
echo "d %{_rundir}/setrans 0755 root root" > %{buildroot}%{_tmpfilesdir}/libselinux.conf
98a597a
4eca5fc
InstallPythonWrapper %{__python}
5abec27
%if 0%{?with_python3}
4eca5fc
InstallPythonWrapper %{__python3}
5abec27
%endif # with_python3
5abec27
013b672
make DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}%{_libdir}" BINDIR="%{buildroot}%{_bindir}" SBINDIR="%{buildroot}%{_sbindir}" RUBYINSTALL=%{buildroot}%{ruby_vendorarchdir} install install-rubywrap
cvsdist 9f53563
4af2226
# Nuke the files we don't want to distribute
b71bf0b
rm -f %{buildroot}%{_sbindir}/compute_*
b71bf0b
rm -f %{buildroot}%{_sbindir}/deftype
b71bf0b
rm -f %{buildroot}%{_sbindir}/execcon
b71bf0b
rm -f %{buildroot}%{_sbindir}/getenforcemode
b71bf0b
rm -f %{buildroot}%{_sbindir}/getfilecon
b71bf0b
rm -f %{buildroot}%{_sbindir}/getpidcon
b71bf0b
rm -f %{buildroot}%{_sbindir}/mkdircon
b71bf0b
rm -f %{buildroot}%{_sbindir}/policyvers
b71bf0b
rm -f %{buildroot}%{_sbindir}/setfilecon
b71bf0b
rm -f %{buildroot}%{_sbindir}/selinuxconfig
b71bf0b
rm -f %{buildroot}%{_sbindir}/selinuxdisable
cd024ca
rm -f %{buildroot}%{_sbindir}/getseuser
9df78f0
rm -f %{buildroot}%{_sbindir}/togglesebool
e6bab37
rm -f %{buildroot}%{_sbindir}/selinux_check_securetty_context
792921f
mv %{buildroot}%{_sbindir}/getdefaultcon %{buildroot}%{_sbindir}/selinuxdefcon
792921f
mv %{buildroot}%{_sbindir}/getconlist %{buildroot}%{_sbindir}/selinuxconlist
e1c914d
install -d %{buildroot}%{_mandir}/man8/
e1c914d
install -m 644 %{SOURCE1} %{buildroot}%{_mandir}/man8/
e1c914d
install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/
0662ba4
rm -f %{buildroot}%{_mandir}/man8/togglesebool*
4af2226
Kay Sievers de370ba
%post -p /sbin/ldconfig
cvsdist 1591c8d
Kay Sievers de370ba
%postun -p /sbin/ldconfig
cvsdist 9f53563
4bb08c5
%files
899f0c5
%license LICENSE
cca484b
%{_libdir}/libselinux.so.*
e8da680
%dir %{_rundir}/setrans/
01a1f70
%{_sbindir}/sefcontext_compile
e8da680
%{_tmpfilesdir}/libselinux.conf
fa0215a
fa0215a
%files utils
cd024ca
%{_sbindir}/avcstat
cd024ca
%{_sbindir}/getenforce
cd024ca
%{_sbindir}/getsebool
9df78f0
%{_sbindir}/matchpathcon
792921f
%{_sbindir}/selinuxconlist
792921f
%{_sbindir}/selinuxdefcon
2c3aaea
%{_sbindir}/selinuxexeccon
cd024ca
%{_sbindir}/selinuxenabled
cd024ca
%{_sbindir}/setenforce
e58e944
%{_sbindir}/selabel_digest
e58e944
%{_sbindir}/selabel_lookup
e58e944
%{_sbindir}/selabel_lookup_best_match
e58e944
%{_sbindir}/selabel_partial_match
2f49e06
%{_sbindir}/selinux_check_access
029d486
%{_mandir}/man5/*
4bb08c5
%{_mandir}/man8/*
4bb08c5
cvsdist 9f53563
%files devel
2a8f17a
%{_libdir}/libselinux.so
ac492a2
%{_libdir}/pkgconfig/libselinux.pc
61aa00d
%{_includedir}/selinux/
cvsdist adad8e9
%{_mandir}/man3/*
cvsdist 9f53563
c097aef
%files static
c097aef
%{_libdir}/libselinux.a
c097aef
36400b8
%files -n python2-libselinux
61aa00d
%{python2_sitearch}/selinux/
61aa00d
%{python2_sitearch}/_selinux.so
cvsdist 9f53563
5abec27
%if 0%{?with_python3}
7b100f1
%files -n python3-libselinux
61aa00d
%{python3_sitearch}/selinux/
61aa00d
%{python3_sitearch}/_selinux.*.so
5abec27
%endif with_python3
5abec27
ee77868
%files ruby
013b672
%{ruby_vendorarchdir}/selinux.so
ee77868
cvsdist 9f53563
%changelog
6ec46c1
* Fri Jan 05 2018 Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.7-7
6ec46c1
- F-28: rebuild for ruby25
6ec46c1
d827474
* Wed Nov 22 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-6
d827474
- Rebuild with libsepol-2.7-3
d827474
f2f46ec
* Fri Oct 20 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-5
f2f46ec
- Drop golang bindings
f2f46ec
- Add support for pcre2 to pkgconfig definition
f2f46ec
Petr Šabata 85e255c
* Wed Sep 27 2017 Petr Šabata <contyk@redhat.com> - 2.7-4
Petr Šabata 85e255c
- Enable the python3 subpackages on EL
Petr Šabata 85e255c
a12937f
* Sat Aug 19 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-3
a12937f
- Also add Provides for the old name without %%_isa
a12937f
36400b8
* Thu Aug 10 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
36400b8
- Python 2 binary package renamed to python2-libselinux
36400b8
  See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
7b100f1
- Python 3 binary package renamed to python3-libselinux
36400b8
2f49e06
* Mon Aug 07 2017 Petr Lautrbach <plautrba@redhat.com> - 2.7-1
2f49e06
- Update to upstream release 2017-08-04
2f49e06
64cffb5
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-10
64cffb5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
64cffb5
6979f56
* Sat Jul 29 2017 Florian Weimer <fweimer@redhat.com> - 2.6-9
6979f56
- Rebuild with binutils fix for ppc64le (#1475636)
6979f56
81b36a1
* Fri Jul 28 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-8
81b36a1
- Always unmount selinuxfs for SELINUX=disabled
81b36a1
54afe11
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.6-7
54afe11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
54afe11
ea9eee1
* Fri Apr 28 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-6
ea9eee1
- Don't finalize mount state in selinux_set_policy_root()
ea9eee1
- Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so
ea9eee1
5239c15
* Thu Apr 06 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-5
5239c15
- Fix setfiles progress indicator
5239c15
7f0ad32
* Wed Mar 22 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-4
7f0ad32
- Fix segfault in selinux_restorecon_sb() (#1433577)
7f0ad32
- Change matchpathcon usage to match with matchpathcon manpage
7f0ad32
- Fix a corner case getsebool return value
7f0ad32
26ed72a
* Tue Mar 14 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-3
26ed72a
- Fix 'semanage boolean -m' to modify active value
26ed72a
2f33357
* Thu Mar 02 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-2
2f33357
- Fix FTBFS - fatal error (#1427902)
2f33357
6146f71
* Sun Feb 12 2017 Petr Lautrbach <plautrba@redhat.com> - 2.6-1
6146f71
- Update to upstream release 2016-10-14
6146f71
0829798
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.5-18
0829798
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
0829798
899f0c5
* Wed Feb 01 2017 Stephen Gallagher <sgallagh@redhat.com> - 2.5-17
899f0c5
- Add missing %%license macro
899f0c5
202367a
* Fri Jan 13 2017 Vít Ondruch <vondruch@redhat.com> - 2.5-16
202367a
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4
202367a
7039bfb
* Wed Jan 11 2017 Petr Lautrbach <plautrba@redhat.com> - 2.5-15
7039bfb
- Rewrite restorecon() python method
7039bfb
1fdaaa8
* Fri Dec 09 2016 Charalampos Stratakis <cstratak@redhat.com> - 2.5-14
1fdaaa8
- Rebuild for Python 3.6
1fdaaa8
75cfa0f
* Tue Nov 22 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-13
75cfa0f
- Fix pointer handling in realpath_not_final (#1376598)
75cfa0f
5ad771e
* Mon Oct 03 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-12
5ad771e
- Fix -Wsign-compare warnings
5ad771e
- Drop unused stdio_ext.h header file
5ad771e
- Kill logging check for selinux_enabled()
5ad771e
- Drop usage of _D_ALLOC_NAMLEN
5ad771e
- Add openrc_contexts functions
5ad771e
- Fix redefinition of XATTR_NAME_SELINUX
5ad771e
- Correct error path to always try text
5ad771e
- Clean up process_file()
5ad771e
- Handle NULL pcre study data
5ad771e
- Fix in tree compilation of utils that depend on libsepol
5ad771e
1eb2b76
* Mon Aug 01 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-11
1eb2b76
- Rebuilt with libsepol-2.5-9
1eb2b76
4d08471
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5-10
4d08471
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
4d08471
27e80a6
* Mon Jun 27 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-9
27e80a6
- Clarify is_selinux_mls_enabled() description
27e80a6
- Explain how to free policy type from selinux_getpolicytype()
27e80a6
- Compare absolute pathname in matchpathcon -V
27e80a6
- Add selinux_snapperd_contexts_path()
27e80a6
b95f8bd
* Fri Jun 24 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-8
b95f8bd
- Move _selinux.so to /usr/lib64/python*/site-packages
b95f8bd
fd9d183
* Thu Jun 23 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-7
fd9d183
- Modify audit2why analyze function to use loaded policy
fd9d183
- Sort object files for deterministic linking order
fd9d183
- Respect CC and PKG_CONFIG environment variable
fd9d183
- Avoid mounting /proc outside of selinux_init_load_policy()
fd9d183
602edce
* Fri May 06 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-6
602edce
- Fix multiple spelling errors
602edce
a465d99
* Mon May 02 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-5
a465d99
- Rebuilt with libsepol-2.5-5
a465d99
7359ba5
* Fri Apr 29 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-4
7359ba5
- Fix typo in sefcontext_compile.8
7359ba5
d11c40b
* Fri Apr 08 2016 Petr Lautrbach <plautrba@redhat.com> - 2.5-3
d11c40b
- Fix location of selinuxfs mount point
d11c40b
- Only mount /proc if necessary
d11c40b
- procattr: return einval for <= 0 pid args
d11c40b
- procattr: return error on invalid pid_t input
d11c40b
408641d
* Sat Feb 27 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-2
408641d
- Use fully versioned arch-specific requires
408641d
c28c9a3
* Tue Feb 23 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-1
c28c9a3
- Update to upstream release 2016-02-23
c28c9a3
e58e944
* Sun Feb 21 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-0.1.rc1
e58e944
- Update to upstream rc1 release 2016-01-07
e58e944
dfc8a0a
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4-8
dfc8a0a
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
dfc8a0a
ab78d06
* Tue Jan 12 2016 Vít Ondruch <vondruch@redhat.com> - 2.4-7
ab78d06
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
ab78d06
bc2c12a
* Thu Dec 10 2015 Petr Lautrbach <plautrba@redhat.com> - 2.4-6
bc2c12a
- Build libselinux without rpm_execcon() (#1284019)
bc2c12a
Robert Kuska 7e4832f
* Thu Oct 15 2015 Robert Kuska <rkuska@redhat.com> - 2.4-5
Robert Kuska 7e4832f
- Rebuilt for Python3.5 rebuild
Robert Kuska 7e4832f
fd198b3
* Wed Sep 30 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-4
fd198b3
- Flush the class/perm string mapping cache on policy reload (#1264051)
fd198b3
- Fix restorecon when path has no context
fd198b3
8db7ce6
* Wed Sep 02 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-3
8db7ce6
- Simplify procattr cache (#1257157,#1232371)
8db7ce6
b7e1bdd
* Fri Aug 14 2015 Adam Jackson <ajax@redhat.com> 2.4-2
b7e1bdd
- Export ldflags into the build so hardening works
b7e1bdd
137759f
* Tue Jul 21 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-1.1
c9ef5a0
- Update to 2.4 release
c9ef5a0
bc82968
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-11
bc82968
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
bc82968
065dd13
* Tue May 12 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-10
065dd13
- is_selinux_enabled: Add /etc/selinux/config test (#1219045)
065dd13
- matchpathcon/selabel_file: Fix man pages (#1219718)
065dd13
ce749c9
* Thu Apr 23 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-9
ce749c9
- revert support for policy compressed with xv (#1185266)
ce749c9
fc7694d
* Tue Apr 21 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-8
fc7694d
- selinux.py - use os.walk() instead of os.path.walk() (#1195004)
fc7694d
- is_selinux_enabled(): drop no-policy-loaded test (#1195074)
fc7694d
- fix -Wformat errors and remove deprecated mudflap option
fc7694d
c11f149
* Mon Mar 16 2015 Than Ngo <than@redhat.com> - 2.3-7
c11f149
- bump release and rebuild so that koji-shadow can rebuild it
c11f149
  against new gcc on secondary arch
c11f149
a2d9f2d
* Mon Jan 19 2015 Vít Ondruch <vondruch@redhat.com> - 2.3-6
a2d9f2d
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2
a2d9f2d
aa0f5b6
* Thu Aug 21 2014 Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
aa0f5b6
- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
aa0f5b6
- Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts
aa0f5b6
bb1c9d8
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-4
bb1c9d8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
bb1c9d8
51d7114
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-3
51d7114
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
51d7114
aea6b4a
* Wed May 28 2014 Kalev Lember <kalevlember@gmail.com> - 2.3-2
aea6b4a
- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
aea6b4a
ed9898e
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
ed9898e
- Update to upstream 
ed9898e
	* Get rid of security_context_t and fix const declarations.
ed9898e
	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.
ed9898e
05fcafd
* Tue May 6 2014 Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-8
05fcafd
- Add selinux_openssh_contexts_path()
05fcafd
32b42e1
* Thu Apr 24 2014 Vít Ondruch <vondruch@redhat.com> - 2.2.2-7
32b42e1
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1
32b42e1
6339985
* Mon Feb 24 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-6
6339985
- Fix spelling mistake in man page
6339985
820aece
* Thu Feb 20 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-5
820aece
- More go bindings
820aece
-   restorecon, getpidcon, setexeccon
820aece
2492943
* Fri Feb 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-4
2492943
- Add additional go bindings for get*con calls
2492943
- Add go bindings test command
2492943
- Modify man pages of set*con calls to mention that they are thread specific
2492943
ee8c867
* Fri Jan 24 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-3
ee8c867
- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
ee8c867
- Add Int_to_mcs function to generate MCS labels from integers.
ee8c867
0aa8cbe
* Tue Jan 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-2
0aa8cbe
- Add ghost flag for /var/run/setrans
0aa8cbe
d6e8b72
* Mon Jan 6 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-1
d6e8b72
- Update to upstream 
d6e8b72
      * Fix userspace AVC handling of per-domain permissive mode.
d6e8b72
- Verify context is not null when passed into *setfilecon_raw
d6e8b72
9ba3cdd
* Fri Dec 27 2013 Adam Williamson <awilliam@redhat.com> - 2.2.1-6
9ba3cdd
- revert unexplained change to rhat.patch which broke SELinux disablement
9ba3cdd
e61de3d
* Mon Dec 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-5
e61de3d
- Verify context is not null when passed into lsetfilecon_raw
e61de3d
f4752d0
* Wed Dec 18 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-4
f4752d0
- Mv selinux.go to /usr/share/gocode/src/selinux
f4752d0
15fa31b
* Tue Dec 17 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-3
15fa31b
- Add golang support to selinux.
15fa31b
0662ba4
* Thu Dec 5 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-2
0662ba4
- Remove togglesebool man page
0662ba4
5f9e314
* Mon Nov 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
5f9e314
- Update to upstream 
5f9e314
	* Remove -lpthread from pkg-config file; it is not required.
d6f11ce
- Add support for policy compressed with xv
5f9e314
bb6f29d
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
bb6f29d
- Update to upstream 
bb6f29d
	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
bb6f29d
	* Support overriding Makefile RANLIB from Sven Vermeulen.
bb6f29d
	* Update pkgconfig definition from Sven Vermeulen.
bb6f29d
	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
bb6f29d
	* Fix man pages from Laurent Bigonville.
bb6f29d
	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
bb6f29d
	* Fix LDFLAGS usage from Laurent Bigonville
bb6f29d
	* Avoid shadowing stat in load_mmap from Joe MacDonald.
bb6f29d
	* Support building on older PCRE libraries from Joe MacDonald.
bb6f29d
	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
bb6f29d
	* Fix procattr cache from Dan Walsh.
bb6f29d
	* Define python constants for getenforce result from Dan Walsh.
bb6f29d
	* Fix label substitution handling of / from Dan Walsh.
bb6f29d
	* Add selinux_current_policy_path from Dan Walsh.
bb6f29d
	* Change get_context_list to only return good matches from Dan Walsh.
bb6f29d
	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
bb6f29d
	* Add support for local substitutions from Dan Walsh.
bb6f29d
	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
bb6f29d
	* Python wrapper leak fixes from Dan Walsh.
bb6f29d
	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
bb6f29d
	* Add selinux_systemd_contexts_path from Dan Walsh.
bb6f29d
	* Add selinux_set_policy_root from Dan Walsh.
bb6f29d
	* Add man page for sefcontext_compile from Dan Walsh.
bb6f29d
82deec5
* Fri Oct 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-21
82deec5
- Add systemd_contexts support
82deec5
- Do substitutions on a local sub followed by a dist sub
82deec5
0695b75
* Thu Oct 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-20
0695b75
- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek 
0695b75
Resolves #1013801
0695b75
763f66c
* Mon Sep 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-19
763f66c
- Fix handling of libselinux getconlist with only one entry
763f66c
763f66c
* Tue Sep 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-17
763f66c
- Add Python constants for SELinux enforcing modes
763f66c
aa93845
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.13-17
aa93845
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
aa93845
876a4a8
* Fri Jun 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
876a4a8
- Add sefcontext_compile.8  man page
876a4a8
- Add Russell Coker  patch to fix man pages
876a4a8
- Add patches from Laurent Bigonville to fix Makefiles for debian.
876a4a8
- modify spec file to use %{_prefix}/lib
876a4a8
4720ddb
* Mon May 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-15
4720ddb
- Fix patch that Handles substitutions for /
4720ddb
def2153
* Wed Apr 17 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-14
def2153
- Handle substitutions for /
def2153
- semanage fcontext -a -e  / /opt/rh/devtoolset-2/root
def2153
1961617
* Tue Apr 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-13
1961617
- Add Eric Paris patch to fix procattr calls after a fork.
1961617
4ab41c3
* Tue Mar 26 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-12
4ab41c3
- Move secolor.conf.5 into mcstrans package and out of libselinux 
4ab41c3
70712b9
* Wed Mar 20 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-11
70712b9
- Fix python bindings for selinux_check_access
70712b9
58f9722
* Tue Mar 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-10
58f9722
- Fix reseting the policy root in matchpathcon
58f9722
cc9c7dd
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
cc9c7dd
- Cleanup setfcontext_compile atomic patch
cc9c7dd
- Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
cc9c7dd
- Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS
cc9c7dd
8047eef
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-8
8047eef
- Make setfcontext_compile atomic
8047eef
9df78f0
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-7
9df78f0
- Fix memory leak in set*con calls.
9df78f0
afe87e8
* Thu Feb 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-6
afe87e8
- Move matchpathcon to -utils package
9df78f0
- Remove togglesebool
afe87e8
e27f806
* Thu Feb 21 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-5
e27f806
- Fix selinux man page to reflect what current selinux policy is.
e27f806
0781a5c
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
0781a5c
- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.
0781a5c
ade34f3
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-3
ade34f3
- Bring back selinux_current_policy_path
ade34f3
5e85dc3
* Thu Feb 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-2
5e85dc3
- Revert some changes which are causing the wrong policy version file to be created
5e85dc3
c1553db
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
c1553db
- Update to upstream 
c1553db
        * audit2why: make sure path is nul terminated
c1553db
        * utils: new file context regex compiler
c1553db
        * label_file: use precompiled filecontext when possible
c1553db
        * do not leak mmapfd
c1553db
        * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
c1553db
        * man: make selinux.8 mention service man pages
c1553db
        * audit2why: Fix segfault if finish() called twice
c1553db
        * audit2why: do not leak on multiple init() calls
c1553db
        * mode_to_security_class: interface to translate a mode_t in to a security class
c1553db
        * audit2why: Cleanup audit2why analysys function
c1553db
        * man: Fix program synopsis and function prototypes in man pages
c1553db
        * man: Fix man pages formatting
c1553db
        * man: Fix typo in man page
c1553db
        * man: Add references and man page links to _raw function variants
c1553db
        * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
c1553db
        * man: context_new(3): fix the return value description
c1553db
        * selinux_status_open: handle error from sysconf
c1553db
        * selinux_status_open: do not leak statusfd on exec
c1553db
        * Fix errors found by coverity
c1553db
        * Change boooleans.subs to booleans.subs_dist.
c1553db
        * optimize set*con functions
c1553db
        * pkg-config do not specifc ruby version
c1553db
        * unmap file contexts on selabel_close()
c1553db
        * do not leak file contexts with mmap'd backend
c1553db
        * sefcontext_compile: do not leak fd on error
c1553db
        * matchmediacon: do not leak fd 
c1553db
        * src/label_android_property: do not leak fd on error
c1553db
01e3787
* Sun Jan 27 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-20
01e3787
- Update to latest patches from eparis/Upstream
01e3787
01e3787
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
976da17
- Update to latest patches from eparis/Upstream
976da17
0a9b6f5
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-18
0a9b6f5
- Try procatt speedup patch again
0a9b6f5
f297425
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-17
f297425
- Roll back procattr speedups since it seems to be screwing up systemd labeling.
f297425
775a744
* Tue Jan 22 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
775a744
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
775a744
f0a0595
* Wed Jan 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-15
f0a0595
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
f0a0595
7a71cdb
* Mon Jan 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
7a71cdb
- setfscreatecon after fork was broken by the Set*con patch.
7a71cdb
- We needed to reset the thread variables after a fork.
7a71cdb
a9a8a9f
* Thu Jan 10 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-13
a9a8a9f
- Fix setfscreatecon call to handle failure mode, which was breaking udev
a9a8a9f
0974ef2
* Wed Jan 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
0974ef2
- Ondrej Oprala patch to optimize set*con functions
0974ef2
-    Set*con now caches the security context and only re-sets it if it changes.
0974ef2
0974ef2
* Tue Jan 8 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-11
0974ef2
- Rebuild against latest libsepol
0974ef2
3fdab66
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
3fdab66
- Update to latest patches from eparis/Upstream
3fdab66
-    Fix errors found by coverity
3fdab66
-    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
3fdab66
-    audit2why: remove a useless policy vers variable
3fdab66
-    audit2why: use the new constraint information
3fdab66
e7604b1
* Mon Nov 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
e7604b1
- Rebuild with latest libsepol
e7604b1
edd5aaa
* Fri Nov 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
edd5aaa
- Return EPERM if login program can not reach default label for user
edd5aaa
- Attempt to return container info from audit2why
edd5aaa
5a7e010
* Thu Nov 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
5a7e010
- Apply patch from eparis to fix leaked file descriptor in new labeling code
5a7e010
e1c914d
* Fri Oct 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
e1c914d
- Add new function mode_to_security_class which takes mode instead of a string.
e1c914d
- Possibly will be used with coreutils.
e1c914d
e1c914d
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-5
e1c914d
- Add back selinuxconlist and selinuxdefcon man pages
e1c914d
e1c914d
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
e1c914d
- Fix segfault from calling audit2why.finish() multiple times
e1c914d
e1c914d
* Fri Oct 12 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
e1c914d
- Fix up selinux man page to reference service man pages
e1c914d
e1c914d
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-2
e1c914d
- Rebuild with fixed libsepol
e1c914d
01a1f70
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
01a1f70
- Update to upstream 
01a1f70
	* Add support for lxc_contexts_path
01a1f70
	* utils: add service to getdefaultcon
01a1f70
	* libsemanage: do not set soname needlessly
01a1f70
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
01a1f70
	* boolean name equivalency
01a1f70
	* getsebool: support boolean name substitution
01a1f70
	* Add man page for new selinux_boolean_sub function.
01a1f70
	* expose selinux_boolean_sub
01a1f70
	* matchpathcon: add -m option to force file type check
01a1f70
	* utils: avcstat: clear sa_mask set
01a1f70
	* seusers: Check for strchr failure
01a1f70
	* booleans: initialize pointer to silence coveriety
01a1f70
	* stop messages when SELinux disabled
01a1f70
	* label_file: use PCRE instead of glibc regex functions
01a1f70
	* label_file: remove all typedefs
01a1f70
	* label_file: move definitions to include file
01a1f70
	* label_file: do string to mode_t conversion in a helper function
01a1f70
	* label_file: move error reporting back into caller
01a1f70
	* label_file: move stem/spec handling to header
01a1f70
	* label_file: drop useless ncomp field from label_file data
01a1f70
	* label_file: move spec_hasMetaChars to header
01a1f70
	* label_file: fix potential read past buffer in spec_hasMetaChars
01a1f70
	* label_file: move regex sorting to the header
01a1f70
	* label_file: add accessors for the pcre extra data
01a1f70
	* label_file: only run regex files one time
01a1f70
	* label_file: new process_file function
01a1f70
	* label_file: break up find_stem_from_spec
01a1f70
	* label_file: struct reorg
01a1f70
	* label_file: only run array once when sorting
01a1f70
	* Ensure that we only close the selinux netlink socket once.
01a1f70
	* improve the file_contexts.5 manual page
01a1f70
ebb7fce
* Fri Aug 03 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-6
ebb7fce
- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
ebb7fce
7ca2991
* Wed Aug  1 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-5
7ca2991
- make with_python3 be conditional on fedora
7ca2991
dc57424
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.11-4
dc57424
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
dc57424
6b51ca9
* Mon Jul 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
6b51ca9
- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d
6b51ca9
852ea73
* Fri Jul 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
852ea73
- Revert Eric Paris Patch for selinux_binary_policy_path
852ea73
cd092e1
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
cd092e1
- Update to upstream 
cd092e1
	* Fortify source now requires all code to be compiled with -O flag
cd092e1
	* asprintf return code must be checked
cd092e1
	* avc_netlink_recieve handle EINTR
cd092e1
	* audit2why: silence -Wmissing-prototypes warning
cd092e1
	* libsemanage: remove build warning when build swig c files
cd092e1
	* matchpathcon: bad handling of symlinks in /
cd092e1
	* seusers: remove unused lineno
cd092e1
	* seusers: getseuser: gracefully handle NULL service
cd092e1
	* New Android property labeling backend
cd092e1
	* label_android_property whitespace cleanups
cd092e1
	* additional makefile support for rubywrap
cd092e1
d9f6251
* Mon Jun 11 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
d9f6251
- Fix booleans.subs name, change function name to selinux_boolean_sub, 
d9f6251
  add man page, minor fixes to the function
d9f6251
f9135bb
* Fri May 25 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
f9135bb
- Fix to compile with Fortify source
f9135bb
      * Add -O compiler flag
f9135bb
      * Check return code from asprintf
f9135bb
- Fix handling of symbolic links in / by realpath_not_final
f9135bb
40eaa6c
* Tue Apr 17 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
40eaa6c
- Add support for lxc contexts file
40eaa6c
40eaa6c
* Fri Mar 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-2
40eaa6c
- Add support fot boolean subs file
40eaa6c
ce3cc63
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
ce3cc63
- Update to upstream 
ce3cc63
	* Fix dead links to www.nsa.gov/selinux
ce3cc63
	* Remove jump over variable declaration
ce3cc63
	* Fix old style function definitions
ce3cc63
	* Fix const-correctness
ce3cc63
	* Remove unused flush_class_cache method
ce3cc63
	* Add prototype decl for destructor
ce3cc63
	* Add more printf format annotations
ce3cc63
	* Add printf format attribute annotation to die() method
ce3cc63
	* Fix const-ness of parameters & make usage() methods static
ce3cc63
	* Enable many more gcc warnings for libselinux/src/ builds
ce3cc63
	* utils: Enable many more gcc warnings for libselinux/utils builds
ce3cc63
	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
ce3cc63
	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
ce3cc63
	* Update Makefiles to handle /usrmove
ce3cc63
	* utils: Stop separating out matchpathcon as something special
ce3cc63
	* pkg-config to figure out where ruby include files are located
ce3cc63
	* build with either ruby 1.9 or ruby 1.8
ce3cc63
	* assert if avc_init() not called
ce3cc63
	* take security_deny_unknown into account
ce3cc63
	* security_compute_create_name(3)
ce3cc63
	* Do not link against python library, this is considered
ce3cc63
	* bad practice in debian
ce3cc63
	* Hide unnecessarily-exported library destructors
ce3cc63
884d86d
* Thu Feb 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
884d86d
- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
884d86d
- Otherwise search for policy on disk
884d86d
884d86d
* Wed Feb 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
884d86d
- Change selinux_binary_policy_path to return /sys/fs/selinux/policy
884d86d
- Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
884d86d
- avc_has_perm will now return yes if the machine is in permissive mode
884d86d
- Make work with ruby-1.9
884d86d
a6c6ce4
* Fri Feb 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-7
76fb5c8
- avc_netlink_recieve should continue to poll if it receinves an EINTR rather 
76fb5c8
Kay Sievers 82dfd09
* Sun Jan 29 2012 Kay Sievers <kay@redhat.com> - 2.1.9-6
Kay Sievers 82dfd09
- use /sbin/ldconfig, glibc does not provide
Kay Sievers 82dfd09
  /usr/sbin/ldconfig in the RPM database for now
Kay Sievers 82dfd09
86fcde8
* Fri Jan 27 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-5
86fcde8
- Rebuild with cleaned up upstream to work in /usr
86fcde8
cca484b
* Wed Jan 25 2012 Harald Hoyer <harald@redhat.com> 2.1.9-4
cca484b
- install everything in /usr
cca484b
  https://fedoraproject.org/wiki/Features/UsrMove
cca484b
3b242a5
* Mon Jan 23 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-3
3b242a5
- Add Dan Berrange code cleanup patches.
3b242a5
ad8477f
* Wed Jan 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
ad8477f
- Fix selabal_open man page to refer to proper selinux_opt structure
ad8477f
3ae8450
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
3ae8450
-Update to upstream
3ae8450
	* Fix setenforce man page to refer to selinux man page
3ae8450
	* Cleanup Man pages
3ae8450
	* merge freecon with getcon man page
3ae8450
edd5aaa
* Mon Dec 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
0c717c5
- Add patch from Richard Haines
0c717c5
      When selabel_lookup found an invalid context with validation enabled, it
0c717c5
      always stated it was 'file_contexts' whether media, x, db or file.
0c717c5
      The fix is to store the spec file name in the selabel_lookup_rec on
0c717c5
      selabel_open and use this as output for logs. Also a minor fix if key is
0c717c5
      NULL to stop seg faults.
0c717c5
- Fix setenforce manage page.
0c717c5
3e52a15
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
7a677c0
- Rebuild with new libsepol
7a677c0
e9493af
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-2
e9493af
- Fix setenforce man page, from Miroslav Grepl
e9493af
de1ce20
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
de1ce20
- Upgrade to upstream
de1ce20
	* selinuxswig_python.i: don't make syscall if it won't change anything
de1ce20
	* Remove assert in security_get_boolean_names(3)
de1ce20
	* Mapped compute functions now obey deny_unknown flag
de1ce20
	* get_default_type now sets EINVAL if no entry.
de1ce20
	* return EINVAL if invalid role selected
de1ce20
	* Updated selabel_file(5) man page
de1ce20
	* Updated selabel_db(5) man page
de1ce20
	* Updated selabel_media(5) man page
de1ce20
	* Updated selabel_x(5) man page
de1ce20
	* Add man/man5 man pages
de1ce20
	* Add man/man5 man pages
de1ce20
	* Add man/man5 man pages
de1ce20
	* use -W and -Werror in utils
de1ce20
0921286
* Tue Nov 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-2
0921286
- Change python binding for restorecon to check if the context matches.
0921286
- If it does do not reset
0921286
5cb2893
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
0921286
- Upgrade to upstream
5cb2893
	* Makefiles: syntax, convert all ${VAR} to $(VAR)
5cb2893
	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
5cb2893
	* regenerate .pc on VERSION change
5cb2893
	* label: cosmetic cleanups
5cb2893
	* simple interface for access checks
5cb2893
	* Don't reinitialize avc_init if it has been called previously
5cb2893
	* seusers: fix to handle large sets of groups
5cb2893
	* audit2why: close fd on enomem
5cb2893
	* rename and export symlink_realpath
5cb2893
	* label_file: style changes to make Eric happy.
5cb2893
8075466
* Mon Oct 24 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-4
8075466
- Apply libselinux patch to handle large groups in seusers.
8075466
a8fa875
* Wed Oct 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-3
a8fa875
- Add selinux_check_access function. Needed for passwd, chfn, chsh
a8fa875
3f542eb
* Thu Sep 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
3f542eb
- Handle situation where selinux=0 passed to the kernel and both /selinux and 
3f542eb
aa09b7d
* Mon Sep 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
aa09b7d
-Update to upstream
aa09b7d
	* utils: matchpathcon: remove duplicate declaration
aa09b7d
	* src: matchpathcon: use myprintf not fprintf
aa09b7d
	* src: matchpathcon: make sure resolved path starts
aa09b7d
	* put libselinux.so.1 in /lib not /usr/lib
aa09b7d
	* tree: default make target to all not
aa09b7d
5113c75
* Wed Sep 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-5
5113c75
- Switch to use ":" as prefix separator rather then ";"
5113c75
09b6708
* Thu Sep  8 2011 Ville Skyttä <ville.skytta@iki.fi> - 2.1.5-4
09b6708
- Avoid unnecessary shell invocation in %%post.
09b6708
c03bd38
* Tue Sep 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
c03bd38
- Fix handling of subset labeling that is causing segfault in restorecon
c03bd38
10e77a8
* Fri Sep 2 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
10e77a8
- Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
10e77a8
prefixes.  Now you can specify a ";" separated list of prefixes and the 
10e77a8
labeling system will only load regular expressions that match these prefixes.
10e77a8
495b754
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
495b754
- Change matchpatcon to use proper myprintf
495b754
- Fix symlink_realpath to always include "/"
495b754
- Update to upstream
495b754
	* selinux_file_context_verify function returns wrong value.
495b754
	* move realpath helper to matchpathcon library
495b754
	* python wrapper makefile changes
495b754
4eca5fc
* Mon Aug 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
4eca5fc
- Move to new Makefile that can build with or without PYTHON being set
4eca5fc
00e063e
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
00e063e
-Update to upstream
00e063e
2.1.4 2011-0817
00e063e
	* mapping fix for invalid class/perms after selinux_set_mapping
00e063e
	* audit2why: work around python bug not defining
00e063e
	* resolv symlinks and dot directories before matching
00e063e
00e063e
2.1.2 2011-0803
00e063e
	* audit2allow: do not print statistics
00e063e
	* make python bindings for restorecon work on relative path
00e063e
	* fix python audit2why binding error
00e063e
	* support new python3 functions
00e063e
	* do not check fcontext duplicates on use
00e063e
	* Patch for python3 for libselinux
00e063e
00e063e
2.1.1 2011-08-02
00e063e
	* move .gitignore into utils
00e063e
	* new setexecon utility
00e063e
	* selabel_open fix processing of substitution files
00e063e
	* mountpoint changing patch.
00e063e
	* simplify SRCS in Makefile
00e063e
00e063e
2.1.1 2011-08-01
00e063e
	* Remove generated files, introduce more .gitignore
00e063e
00e063e
00e063e
125b5b1
* Thu Jul 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
125b5b1
-Update to upstream
125b5b1
	* Release, minor version bump
125b5b1
	* Give correct names to mount points in load_policy by Dan Walsh.
125b5b1
	* Make sure selinux state is reported correctly if selinux is disabled or
125b5b1
	fails to load by Dan Walsh.
125b5b1
	* Fix crash if selinux_key_create was never called by Dan Walsh.
125b5b1
	* Add new file_context.subs_dist for distro specific filecon substitutions
125b5b1
	by Dan Walsh.
125b5b1
	* Update man pages for selinux_color_* functions by Richard Haines.
125b5b1
076f35f
* Mon Jun 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
076f35f
- Only call dups check within selabel/matchpathcon if you are validating the 
076f35f
context
076f35f
- This seems to speed the loading of labels by 4 times.
076f35f
2c3aaea
* Fri Apr 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
2c3aaea
- Move /selinux to /sys/fs/selinux
2c3aaea
- Add selinuxexeccon
2c3aaea
- Add realpath to matchpathcon to handle matchpathcon * type queries.
2c3aaea
71e7978
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-4
71e7978
- Update for latest libsepol
71e7978
f0ee567
* Mon Apr 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-3
f0ee567
- Update for latest libsepol
f0ee567
73bed06
* Wed Apr 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-2
73bed06
- Fix restorecon python binding to accept relative paths
73bed06
982b2e5
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
982b2e5
-Update to upstream
982b2e5
	* Give correct names to mount points in load_policy by Dan Walsh.
982b2e5
	* Make sure selinux state is reported correctly if selinux is disabled or
982b2e5
	fails to load by Dan Walsh.
982b2e5
	* Fix crash if selinux_key_create was never called by Dan Walsh.
982b2e5
	* Add new file_context.subs_dist for distro specific filecon substitutions
982b2e5
	by Dan Walsh.
982b2e5
	* Update man pages for selinux_color_* functions by Richard Haines.
982b2e5
edd5aaa
* Wed Apr 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
3d499ce
- Clean up patch to make handling of constructor  cleanup more portable
d455eb5
  * db_language object class support for selabel_lookup from KaiGai Kohei.
d455eb5
  * Library destructors for thread local storage keys from Eamon Walsh.
3d499ce
8723500
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-5
8723500
- Add distribution subs path
8723500
4b2caaa
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
4b2caaa
Add patch from dbhole@redhat.com to initialize thread keys to -1
4b2caaa
Errors were being seen in libpthread/libdl that were related
4b2caaa
to corrupt thread specific keys. Global destructors that are called on dl 
4b2caaa
unload. During destruction delete a thread specific key without checking 
4b2caaa
if it has been initialized. Since the constructor is not called each time 
4b2caaa
(i.e. key is not initialized with pthread_key_create each time), and the 
4b2caaa
default is 0, there is a possibility that key 0 for an active thread gets 
4b2caaa
deleted. This is exactly what is happening in case of OpenJDK.
4b2caaa
4b2caaa
Workaround patch that initializes the key to -1. Thus if the constructor is not
4b2caaa
called, the destructor tries to delete key -1 which is deemed invalid by 
4b2caaa
pthread_key_delete, and is ignored.
4b2caaa
0cd375f
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
0cd375f
- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data
0cd375f
0cd375f
* Fri Apr 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-2
0cd375f
- Change mount source options to use "proc" and "selinuxfs"
0cd375f
1fefea1
* Tue Mar 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-1
1fefea1
- Update to upstream
1fefea1
  * Turn off default user handling when computing user contexts by Dan Walsh
1fefea1
1fefea1
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
148fda2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
148fda2
1fefea1
* Tue Feb 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-3
c49c04d
- Fixup selinux man page
c49c04d
1fefea1
* Tue Jan 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-2
3c1b814
- Fix Makefile to use pkg-config --cflags python3 to discover include paths
3c1b814
ca9cea7
* Tue Dec 21 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.98-1
ca9cea7
- Update to upstream 
ca9cea7
  - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
ca9cea7
2542902
* Mon Dec 6 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.97-1
2542902
- Update to upstream 
2542902
	* Thread local storage fixes from Eamon Walsh.
2542902
edd5aaa
* Sat Dec 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-9
8b8064a
- Add /etc/tmpfiles.d support for /var/run/setrans
8b8064a
edd5aaa
* Wed Nov 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-8
3dcd5c3
- Ghost /var/run/setrans
3dcd5c3
Jesse Keating 2f80936
* Wed Sep 29 2010 jkeating - 2.0.96-7
Jesse Keating 2f80936
- Rebuilt for gcc bug 634757
Jesse Keating 2f80936
Adam Tkac ae5808a
* Thu Sep 16 2010 Adam Tkac <atkac redhat com> - 2.0.96-6
Adam Tkac ae5808a
- rebuild via updated swig (#624674)
Adam Tkac ae5808a
7c0da10
* Sun Aug 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-5
7c0da10
- Update for python 3.2a1
7c0da10
159f7d2
* Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-4
159f7d2
- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
159f7d2
9eca71a
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.96-3
9eca71a
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
9eca71a
4235807
* Fri Jun 25 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-2
4235807
- Turn off messages in audit2why
4235807
5abec27
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
5abec27
- Update to upstream 
5abec27
	* Add const qualifiers to public API where appropriate by KaiGai Kohei.
5abec27
5abec27
2.0.95 2010-06-10
5abec27
	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
5abec27
	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
5abec27
- add python3 subpackage from David Malcolm 
5abec27
5abec27
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
876a4a8
* Set errno=EINVAL for invalid contexts from Dan Walsh.
5abec27
edd5aaa
* Tue Mar 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
5abec27
- Update to upstream 
5abec27
	* Show strerror for security_getenforce() by Colin Waters.
5abec27
	* Merged selabel database support by KaiGai Kohei.
5abec27
	* Modify netlink socket blocking code by KaiGai Kohei.
5abec27
982ffdc
* Sun Mar 7 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
982ffdc
- Update to upstream 
982ffdc
	* Fix from Eric Paris to fix leak on non-selinux systems.
982ffdc
	* regenerate swig wrappers
982ffdc
	* pkgconfig fix to respect LIBDIR from Dan Walsh.
982ffdc
68c8d96
* Wed Feb 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
68c8d96
- Update to upstream 
68c8d96
	* Change the AVC to only audit the permissions specified by the
68c8d96
	policy, excluding any permissions specified via dontaudit or not
68c8d96
	specified via auditallow.
68c8d96
	* Fix compilation of label_file.c with latest glibc headers.
68c8d96
68c8d96
* Mon Feb 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-5
68c8d96
- Fix potential doublefree on init
68c8d96
68c8d96
* Thu Feb 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-4
68c8d96
- Fix libselinux.pc
68c8d96
de078cb
* Mon Jan 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-3
de078cb
- Fix man page for selinuxdefcon
de078cb
de078cb
* Mon Jan 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-2
1f46a5f
- Free memory on disabled selinux boxes
1f46a5f
76ecedb
* Tue Dec 1 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
76ecedb
- Update to upstream 
76ecedb
	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
76ecedb
	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>
76ecedb
4ed79e3
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-2
4ed79e3
- Fix selinuxdefcon man page
4ed79e3
a69064e
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-1
a69064e
- Update to upstream 
a69064e
	* Add pkgconfig file from Eamon Walsh.
a69064e
8a570f4
* Thu Oct 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.88-1
8a570f4
- Update to upstream 
8a570f4
	* Rename and export selinux_reset_config()
8a570f4
510eba6
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
510eba6
- Update to upstream 
510eba6
	* Add exception handling in libselinux from Dan Walsh. This uses a
510eba6
	  shell script called exception.sh to generate a swig interface file.
510eba6
	* make swigify
510eba6
	* Make matchpathcon print <<none>> if path not found in fcontext file.
510eba6
d3cc144
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-2
d3cc144
- Eliminate -pthread switch in Makefile
d3cc144
9afde81
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-1
9afde81
- Update to upstream 
9afde81
	* Removal of reference counting on userspace AVC SID's.
9afde81
0762b64
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.85-2
0762b64
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
0762b64
fa62185
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
fa62185
- Update to upstream 
fa62185
	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
fa62185
	pthread dependency.
fa62185
	* Removed fini_context_translations() altogether.
fa62185
	* Merged lazy init patch from Stephen Smalley based on original patch
fa62185
	by Steve Grubb.
fa62185
23660c5
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
23660c5
- Update to upstream 
23660c5
	* Add per-service seuser support from Dan Walsh.
23660c5
	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
23660c5
	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
23660c5
	Paris.
23660c5
94187ee
* Wed Jun 24 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-2
94187ee
- Add provices ruby(selinux)
94187ee
a665221
* Tue Jun 23 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
a665221
- Update to upstream 
a665221
	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
a665221
	* Label substitution support from Dan Walsh.
a665221
	* Support for labeling virtual machine images from Dan Walsh.
a665221
403bfa5
* Mon May 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
403bfa5
- Update to upstream 
403bfa5
	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
403bfa5
	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
403bfa5
	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
403bfa5
	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.
403bfa5
c1ed6ed
* Wed Apr 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
c1ed6ed
- Update to upstream 
c1ed6ed
	* deny_unknown wrapper function from KaiGai Kohei.
c1ed6ed
	* security_compute_av_flags API from KaiGai Kohei.
c1ed6ed
	* Netlink socket management and callbacks from KaiGai Kohei.
c1ed6ed
d6eb0ce
* Fri Apr 3 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-6
d6eb0ce
- Fix Memory Leak
d6eb0ce
261c72a
* Thu Apr 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-5
261c72a
- Fix crash in python
261c72a
f6ba4d3
* Sun Mar 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-4
f6ba4d3
- Add back in additional interfaces
f6ba4d3
f6ba4d3
* Fri Mar 27 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-3
974a6e4
- Add back in av_decision to python swig
974a6e4
c86e2e8
* Thu Mar 12 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
c86e2e8
- Update to upstream 
c86e2e8
	* Netlink socket handoff patch from Adam Jackson.
c86e2e8
	* AVC caching of compute_create results by Eric Paris.
c86e2e8
c86e2e8
* Tue Mar 10 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-5
c86e2e8
- Add patch from ajax to accellerate X SELinux 
c86e2e8
- Update eparis patch
c86e2e8
ada6d88
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-4
ada6d88
- Add eparis patch to accellerate Xwindows performance
ada6d88
79bb8b1
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-3
79bb8b1
- Fix URL 
79bb8b1
3da9d84
* Fri Mar 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-2
3da9d84
- Add substitute pattern 
3da9d84
- matchpathcon output <<none>> on ENOENT
3da9d84
07ae258
* Mon Mar 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-1
07ae258
- Update to upstream
07ae258
	* Fix incorrect conversion in discover_class code.
07ae258
5b3b3ee
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.77-6
5b3b3ee
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
5b3b3ee
19dec57
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-5
6396f11
- Add 
6396f11
  - selinux_virtual_domain_context_path
6396f11
  - selinux_virtual_image_context_path
6396f11
b5b41bc
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-3
b5b41bc
- Throw exeptions in python swig bindings on failures
b5b41bc
c1e059f
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-2
c1e059f
- Fix restorecon python code
c1e059f
49eae3b
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-1
49eae3b
- Update to upstream
49eae3b
e672e99
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-6
e672e99
- Strip trailing / for matchpathcon
e672e99
49eae3b
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com>l - 2.0.76-5
0c692a5
- Fix segfault if seusers file does not work
0c692a5
d9847be
* Fri Dec 12 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
cd000f1
- Add new function getseuser which will take username and service and return
cd000f1
- seuser and level.  ipa will populate file in future.
cd000f1
- Change selinuxdefcon to return just the context by default
cd000f1
fdb97bc
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.0.76-2
fdb97bc
- Rebuild for Python 2.6
fdb97bc
f539823
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-1
f539823
- Update to Upstream
f539823
	* Allow shell-style wildcards in x_contexts file.
f539823
41931f8
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
41931f8
- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
41931f8
- Add Restorecon/Install python functions from Luke Macken
41931f8
d3b013d
* Fri Nov 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
d3b013d
- Update to Upstream
d3b013d
	* Correct message types in AVC log messages.
d3b013d
	* Make matchpathcon -V pass mode from Dan Walsh.
d3b013d
	* Add man page for selinux_file_context_cmp from Dan Walsh.
d3b013d
3898d8d
* Tue Sep 30 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
3898d8d
- Update to Upstream
3898d8d
	* New man pages from Dan Walsh.
3898d8d
	* Update flask headers from refpolicy trunk from Dan Walsh.
3898d8d
263ee4f
* Fri Sep 26 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-6
263ee4f
- Fix matchpathcon -V call 
263ee4f
3578778
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-5
3578778
- Add flask definitions for open, X and nlmsg_tty_audit
3578778
15c5a62
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-4
15c5a62
- Add missing get/setkeycreatecon man pages
15c5a62
fa0215a
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-3
fa0215a
- Split out utilities
fa0215a
ac4e772
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-2
ac4e772
- Add missing man page links for [lf]getfilecon
ac4e772
7918b28
* Tue Aug 5 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
7918b28
- Update to Upstream
7918b28
	* Add group support to seusers using %groupname syntax from Dan Walsh.
7918b28
	* Mark setrans socket close-on-exec from Stephen Smalley.
7918b28
	* Only apply nodups checking to base file contexts from Stephen Smalley.
7918b28
86ce8d4
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
86ce8d4
- Update to Upstream
86ce8d4
	* Merge ruby bindings from Dan Walsh.
86ce8d4
- Add support for Linux groups to getseuserbyname
86ce8d4
86ce8d4
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-2
86ce8d4
- Allow group handling in getseuser call
86ce8d4
d0a06b2
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
d0a06b2
- Update to Upstream
d0a06b2
	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
d0a06b2
	  This prevents adding them via semanage.
d0a06b2
	* Fix audit2why shadowed variables from Stephen Smalley.
d0a06b2
	* Note that freecon NULL is legal in man page from Karel Zak.
d0a06b2
ee77868
* Wed Jul 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-4
ee77868
- Add ruby support for puppet
ee77868
c56d166
* Tue Jul 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-3
c56d166
- Rebuild for new libsepol
c56d166
ea56fea
* Sun Jun 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-2
ea56fea
- Add Karel Zak patch for freecon man page
ea56fea
6359e2a
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
6359e2a
- Update to Upstream
6359e2a
	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
6359e2a
	* Add swig python bindings for avc interfaces from Dan Walsh.
6359e2a
fc4f6a4
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
bff583b
- Update to Upstream
bff583b
	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
bff583b
	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
bff583b
454774e
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-3
454774e
- libselinux no longer neets to telnet -u in post install
454774e
792921f
* Wed May 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-2
792921f
- Add sedefaultcon and setconlist commands to dump login context
792921f
1209c85
* Tue Apr 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
1209c85
- Update to Upstream
1209c85
	* Fixed selinux_set_callback man page.
1209c85
	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
1209c85
	* Fix memory leaks in matchpathcon from Eamon Walsh.
1209c85
1209c85
* Wed Apr 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-4
1209c85
- Add Xavior Toth patch for security_id_t in swig
1209c85
d87adcf
* Thu Apr 10 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-3
d87adcf
- Add avc.h to swig code
d87adcf
d87adcf
* Wed Apr 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-2
d87adcf
- Grab the latest policy for the kernel
d87adcf
9d13c9c
* Tue Apr 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-1
9d13c9c
- Update to Upstream
9d13c9c
	* Man page typo fix from Jim Meyering.
9d13c9c
7384c1e
* Sun Mar 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
9d13c9c
- Update to Upstream
7384c1e
	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.
7384c1e
eb8e2a0
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-2
eb8e2a0
- Fix matchpathcon memory leak
eb8e2a0
4594aed
* Fri Feb 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-1
4594aed
- Update to Upstream
4594aed
	* Merged new X label "poly_selection" namespace from Eamon Walsh.
4594aed
0984abe
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.58-1
0984abe
- Update to Upstream
0984abe
	* Merged reset_selinux_config() for load policy from Dan Walsh.
0984abe
baab9d4
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-2
baab9d4
- Reload library on loading of policy to handle chroot
baab9d4
73272f9
* Mon Feb 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-1
73272f9
- Update to Upstream
73272f9
	* Merged avc_has_perm() errno fix from Eamon Walsh.
73272f9
3cb08a5
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.56-1
3cb08a5
- Update to Upstream
3cb08a5
	* Regenerated Flask headers from refpolicy flask definitions.
3cb08a5
198adb1
* Wed Feb 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
198adb1
- Update to Upstream
198adb1
	* Merged compute_member AVC function and manpages from Eamon Walsh.
198adb1
	* Provide more error reporting on load policy failures from Stephen Smalley.
198adb1
099d39a
* Fri Feb 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.53-1
099d39a
- Update to Upstream
099d39a
	* Merged new X label "poly_prop" namespace from Eamon Walsh.
099d39a
fc1475f
* Wed Feb 6 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
fc1475f
- Update to Upstream
fc1475f
	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
fc1475f
	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.
fc1475f
8f9ecf5
* Tue Jan 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.50-1
8f9ecf5
- Update to Upstream
8f9ecf5
	* Merged fix for audit2why from Dan Walsh.
8f9ecf5
2136436
* Fri Jan 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-2
2136436
- Fix audit2why to grab latest policy versus the one selected by the kernel
2136436
e462319
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-1
e462319
* Merged audit2why python binding from Dan Walsh.
e462319
c633d69
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.48-1
c633d69
* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
c633d69
c097aef
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-4
c097aef
- Update to use libsepol-static library
c097aef
c097aef
* Wed Jan 16 2008 Adel Gadllah <adel.gadllah@gmail.com> - 2.0.47-3
c097aef
- Move libselinux.a to -static package
c097aef
- Spec cleanups
c097aef
5c1daf3
* Tue Jan 15 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-2
5c1daf3
- Put back libselinux.a
5c1daf3
2f233df
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
2f233df
- Fix memory references in audit2why and change to use tuples
2f233df
- Update to Upstream
2f233df
	* Fix for the avc:  granted null message bug from Stephen Smalley.
2f233df
88cc8f8
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-6
88cc8f8
- Fix __init__.py specification
88cc8f8
9ec7726
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
9ec7726
- Add audit2why python bindings
9ec7726
625a8fb
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-4
625a8fb
- Add pid_t typemap for swig bindings
625a8fb
5866f48
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-3
5866f48
- smp_mflag
5866f48
e1e36a0
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-2
e1e36a0
- Fix spec file caused by spec review 
e1e36a0
41bd3b2
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.46-1
41bd3b2
- Upgrade to upstream
41bd3b2
	* matchpathcon(8) man page update from Dan Walsh.
41bd3b2
c4aa29e
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
c4aa29e
- Upgrade to upstream
c4aa29e
	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
c4aa29e
	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
c4aa29e
	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.
c4aa29e
c4aa29e
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
c4aa29e
- Upgrade to upstream
c4aa29e
	* Regenerated Flask headers from policy.
c4aa29e
2a8f17a
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
2a8f17a
- Upgrade to upstream
2a8f17a
	* AVC enforcing mode override patch from Eamon Walsh.
2a8f17a
	* Aligned attributes in AVC netlink code from Eamon Walsh.
2a8f17a
- Move libselinux.so back into devel package, procps has been fixed
2a8f17a
79584e5
* Tue Nov 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
79584e5
- Upgrade to upstream
79584e5
	* Merged refactored AVC netlink code from Eamon Walsh.
79584e5
	* Merged new X label namespaces from Eamon Walsh.
79584e5
	* Bux fix and minor refactoring in string representation code.
79584e5
39606ee
* Fri Oct 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
39606ee
- Upgrade to upstream
39606ee
	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.
39606ee
39606ee
* Fri Sep 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
39606ee
- Upgrade to upstream
39606ee
	* Fix segfault resulting from missing file_contexts file.
39606ee
dcd9773
* Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-2
dcd9773
- Fix segfault on missing file_context file
dcd9773
7cbfb0e
* Wed Sep 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
7cbfb0e
- Upgrade to upstream
7cbfb0e
	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
7cbfb0e
	* Pass CFLAGS when using gcc for linking from Dennis Gilmore. 
6e60f16
ae054c5
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-3
ae054c5
- Add sparc patch to from Dennis Gilmore to build on Sparc platform
ae054c5
0102138
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-2
0102138
- Remove leaked file descriptor
0102138
0fa749d
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-1
0fa749d
- Upgrade to latest from NSA
0fa749d
	* Fix selabel option flag setting for 64-bit from Stephen Smalley.
0fa749d
71cd138
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-2
71cd138
- Change matchpatcon to use syslog instead of syserror
71cd138
31de56f
* Thu Sep 13 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
31de56f
- Upgrade to latest from NSA
31de56f
	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
31de56f
	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
31de56f
	* Fix swig binding for rpm_execcon from James Athey.
31de56f
6a9919e
* Thu Sep 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-4
6a9919e
- Apply James Athway patch to fix rpm_execcon python binding
6a9919e
4e31727
* Tue Aug 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-3
4e31727
- Move libselinux.so back into main package, breaks procps
4e31727
4e31727
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-2
13a4ef3
- Upgrade to upstream
13a4ef3
	* Fix file_contexts.homedirs path from Todd Miller.
13a4ef3
fd5d99a
* Tue Aug 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-2
fd5d99a
- Remove requirement on setransd,  Moved to selinux-policy-mls 
fd5d99a
569b015
* Fri Aug 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
f330881
- Move libselinux.so into devel package
569b015
- Upgrade to upstream
569b015
	* Fix segfault resulting from uninitialized print-callback pointer.
0e28882
	* Added x_contexts path function patch from Eamon Walsh.
0e28882
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
0e28882
	* Fix markup problems in selinux man pages from Dan Walsh.
f330881
6e60f16
* Fri Aug 3 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
6e60f16
- Upgrade to upstream
6e60f16
	* Updated version for stable branch.	
6e60f16
	* Added x_contexts path function patch from Eamon Walsh.
6e60f16
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
6e60f16
	* Fix markup problems in selinux man pages from Dan Walsh.
6e60f16
	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
6e60f16
	* Added swigify to top-level Makefile from Dan Walsh.
6e60f16
	* Fix for string_to_security_class segfault on x86_64 from Stephen
6e60f16
	  Smalley.
6e60f16
44ef5d5
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-3
44ef5d5
- Apply Steven Smalley patch to fix segfault in string_to_security_class
44ef5d5
aebde75
* Wed Jul 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-2
aebde75
- Fix matchpathcon to set default myprintf
aebde75
571ac29
* Mon Jul 16 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-1
571ac29
- Upgrade to upstream
571ac29
	* Fix for getfilecon() for zero-length contexts from Stephen Smalley.
571ac29
8ffc280
* Wed Jul 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-3
8ffc280
- Update to match flask/access_vectors in policy
8ffc280
8e8fca8
* Tue Jul 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
8e8fca8
- Fix man page markup lanquage for translations
8e8fca8
3e1ba6d
* Tue Jun 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
3e1ba6d
- Fix semanage segfault on x86 platform
3e1ba6d
d43108c
* Thu Jun 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
d43108c
- Upgrade to upstream
d43108c
	* Labeling and callback interface patches from Eamon Walsh.
d43108c
d43108c
* Tue Jun 19 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-2
d43108c
- Refactored swig
d43108c
2324fec
* Mon Jun 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
2324fec
- Upgrade to upstream
2324fec
	* Class and permission mapping support patches from Eamon Walsh.
2324fec
	* Object class discovery support patches from Chris PeBenito.
2324fec
	* Refactoring and errno support in string representation code.
2324fec
d60d4d2
* Fri Jun 1 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
d60d4d2
- Upgrade to upstream
876a4a8
- Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
876a4a8
 This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.
d60d4d2
d60d4d2
2.0.17 2007-05-31
d60d4d2
	* Updated Lindent script and reindented two header files.
d60d4d2
35bc5a8
* Fri May 4 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
35bc5a8
- Upgrade to upstream
35bc5a8
	* Merged additional swig python bindings from Dan Walsh.
35bc5a8
	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
35bc5a8
20f7b1c
* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
20f7b1c
- Upgrade to upstream
20f7b1c
	* Merged build fix for avc_internal.c from Joshua Brindle.
20f7b1c
4dca0c4
* Mon Apr 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-2
4dca0c4
- Add get_context_list funcitions to swig file
4dca0c4
a11359c
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
a11359c
- Upgrade to upstream
a11359c
	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.
a11359c
6265db0
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-2
a11359c
- Add missing interface
6265db0
1b14f69
* Wed Apr 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
1b14f69
- Upgrade to upstream
1b14f69
	* Merged support for getting initial contexts from James Carter.
1b14f69
47b511b
* Mon Apr 9 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
47b511b
- Upgrade to upstream
47b511b
	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
47b511b
	* Merged sidput(NULL) patch from Eamon Walsh.
47b511b
ff4b4da
* Thu Apr 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-2
ff4b4da
- Make rpm_exec swig work
ff4b4da
ace2ebf
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
ace2ebf
- Upgrade to upstream
ace2ebf
	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.
ace2ebf
9a53490
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.8-1
71021c8
- Upgrade to upstream
71021c8
	* Merged fix for avc.h #include's from Eamon Walsh.
71021c8
98a61bf
* Thu Mar 22 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-2
98a61bf
- Add stdint.h to avc.h
98a61bf
22298b4
* Mon Mar 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
876a4a8
- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
876a4a8
- Merged patch to drop support for old /etc/sysconfig/selinux and
876a4a8
- /etc/security policy file layout from Steve Grubb.
22298b4
edd5aaa
* Thu Mar 8 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-2
c7862e5
- Do not fail on permission denied in getsebool
c7862e5
21eddb1
* Tue Feb 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
21eddb1
- Upgrade to upstream
21eddb1
	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.
21eddb1
edd5aaa
* Wed Feb 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
8efd1ef
- Upgrade to upstream
8efd1ef
	* Removed sending of setrans init message.
8efd1ef
	* Merged matchpathcon memory leak fix from Steve Grubb.
8efd1ef
edd5aaa
* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
8efd1ef
- Upgrade to upstream
8efd1ef
	* Merged more swig initializers from Dan Walsh.
8efd1ef
edd5aaa
* Sun Feb 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
14de1c3
- Upgrade to upstream
876a4a8
  * Merged patch from Todd Miller to convert int types over to C99 style.
14de1c3
29ad08b
* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
876a4a8
- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
876a4a8
  of the use of the non-standard format (original patch changed
876a4a8
  for style).
876a4a8
- Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
29ad08b
	
ad1a688
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
ad1a688
- Add context function to python to split context into 4 parts
ad1a688
751b5d4
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-1
751b5d4
- Upgrade to upstream
751b5d4
	* Updated version for stable branch.	
751b5d4
751b5d4
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.6-1
e1e0273
- Upgrade to upstream
e1e0273
	* Merged man page updates to make "apropos selinux" work from Dan Walsh.
edd5aaa
edd5aaa
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
53158b7
- Upgrade to upstream
53158b7
	* Merged getdefaultcon utility from Dan Walsh.
53158b7
5f8636d
* Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
5f8636d
- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli
5f8636d
a9c082b
* Fri Jan 12 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-2
a9c082b
- Add reference to selinux man page in all man pages to make apropos work
a9c082b
Resolves: # 217881
a9c082b
a9c082b
* Thu Jan 11 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
1a8c15a
- Upstream wanted some minor changes, upgrading to keep api the same
1a8c15a
- Upgrade to upstream
1a8c15a
	* Merged selinux_check_securetty_context() and support from Dan Walsh.
1a8c15a
Resolves: #200110
1a8c15a
1a8c15a
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-3
e3bd599
- Cleanup patch
e3bd599
e6bab37
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-2
e6bab37
- Add securetty handling
e6bab37
Resolves: #200110
e6bab37
273c47d
* Thu Jan 4 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
273c47d
- Upgrade to upstream
273c47d
	* Merged patch for matchpathcon utility to use file mode information
273c47d
	  when available from Dan Walsh.
273c47d
0ee7a8f
* Thu Dec  7 2006 Jeremy Katz <katzj@redhat.com> - 1.33.2-4
0ee7a8f
- rebuild against python 2.5
0ee7a8f
dbfbfbe
* Wed Dec 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-3
dbfbfbe
- Fix matchpathcon to lstat files
dbfbfbe
846f2ad
* Thu Nov 30 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-2
846f2ad
- Update man page
846f2ad
25aea25
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-1
25aea25
- Upgrade to upstream
25aea25
2bcf965
* Fri Nov 3 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
2bcf965
- Add James Antill patch for login verification of MLS Levels
2bcf965
-  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.
2bcf965
c27fc16
* Tue Oct 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
c27fc16
- Upgrade to latest from NSA
c27fc16
	* Merged updated flask definitions from Darrel Goeddel.
c27fc16
 	  This adds the context security class, and also adds
c27fc16
	  the string definitions for setsockcreate and polmatch.
c27fc16
e24dd65
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.32-1
e24dd65
- Upgrade to latest from NSA
e24dd65
	* Updated version for release.
e24dd65
9fcaa3e
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.30.29-2
9fcaa3e
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
9fcaa3e
f6df692
* Fri Sep  29 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
f6df692
- Upgrade to latest from NSA
f6df692
	* Merged av_permissions.h update from Steve Grubb,
f6df692
	  adding setsockcreate and polmatch definitions.
f6df692
9505368
* Wed Sep 27 2006 Jeremy Katz <katzj@redhat.com> - 1.30.28-3
9505368
- really make -devel depend on libsepol-devel
9505368
edd5aaa
* Wed Sep  27 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-2
cfd1d13
- Add sgrubb patch for polmatch
cfd1d13
ab45727
* Wed Sep  13 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-1
ab45727
- Upgrade to latest from NSA
ab45727
	* Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
ab45727
8a855c5
* Tue Sep  5 2006 Jeremy Katz <katzj@redhat.com> - 1.30.27-2
8a855c5
- have -devel require libsepol-devel
8a855c5
7bdc604
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
7bdc604
- Upgrade to latest from NSA
7bdc604
	* Merged patch to not log avc stats upon a reset from Steve Grubb.
7bdc604
	* Applied patch to revert compat_net setting upon policy load.
7bdc604
	* Merged file context homedir and local path functions from
7bdc604
	  Chris PeBenito.
7bdc604
88e5d3a
* Fri Aug 18 2006 Jesse Keating <jkeating@redhat.com> - 1.20.26-2
88e5d3a
- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
88e5d3a
  (#203001)
88e5d3a
77a0d2c
* Sat Aug  12 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
77a0d2c
- Upgrade to latest from NSA
77a0d2c
	* Merged file context homedir and local path functions from
77a0d2c
	  Chris PeBenito.
77a0d2c
	* Rework functions that access /proc/pid/attr to access the
77a0d2c
	  per-thread nodes, and unify the code to simplify maintenance.
77a0d2c
243c675
* Fri Aug  11 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
243c675
- Upgrade to latest from NSA
243c675
	* Merged return value fix for *getfilecon() from Dan Walsh.
243c675
	* Merged sockcreate interfaces from Eric Paris.
243c675
b7bdc63
* Wed Aug  9 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-2
b7bdc63
- Fix translation return codes to return size of buffer
b7bdc63
ef26b84
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
ef26b84
- Upgrade to latest from NSA
ef26b84
	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
ef26b84
	* Merged netfilter_contexts support patch from Chris PeBenito.
ef26b84
61ba667
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.20-1
61ba667
- Upgrade to latest from NSA
61ba667
	* Merged context_*_set errno patch from Jim Meyering.
61ba667
75675c7
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-5
75675c7
- only build non-fpic objects with -mno-tls-direct-seg-refs
75675c7
be0d451
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-4
be0d451
- build with -mno-tls-direct-seg-refs on x86 to avoid triggering 
be0d451
  segfaults with xen (#200783)  
be0d451
5a5a289
* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-3
5a5a289
- Rebuild for new gcc
5a5a289
1e7c365
* Tue Jul 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-2
1e7c365
- Fix libselinux to not telinit during installs
1e7c365
aa27b6b
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-1
aa27b6b
- Upgrade to latest from NSA
aa27b6b
	* Lindent.
aa27b6b
	* Merged {get,set}procattrcon patch set from Eric Paris.
aa27b6b
	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
aa27b6b
	* Regenerated Flask headers from refpolicy.
aa27b6b
	* Merged patch from Dan Walsh with:
aa27b6b
	  - Added selinux_file_context_{cmp,verify}.
aa27b6b
	  - Added selinux_lsetfilecon_default.
aa27b6b
	  - Delay translation of contexts in matchpathcon.
aa27b6b
799720e
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-5
799720e
- Yet another change to matchpathcon
799720e
f4b45dd
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-4
f4b45dd
- Turn off error printing in library.  Need to compile with DEBUG to get it back
f4b45dd
2d9b36b
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-3
2d9b36b
- Fix error reporting of matchpathcon
2d9b36b
645f93a
* Mon Jun 19 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-2
645f93a
- Add function to compare file context on disk versus contexts in file_contexts file.
645f93a
e60c844
* Fri Jun 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-1
e60c844
- Upgrade to latest from NSA
e60c844
	* Merged patch from Dan Walsh with:
e1e36a0
	* Added selinux_getpolicytype() function.
e1e36a0
	* Modified setrans code to skip processing if !mls_enabled.
e60c844
	* Set errno in the !selinux_mnt case.
e60c844
	* Allocate large buffers from the heap, not on stack.
e60c844
	  Affects is_context_customizable, selinux_init_load_policy,
e60c844
	  and selinux_getenforcemode.
e60c844
8389437
* Thu Jun 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-2
8389437
- Add selinux_getpolicytype()
8389437
af1839b
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-1
af1839b
- Upgrade to latest from NSA
af1839b
	* Merged !selinux_mnt checks from Ian Kent.
af1839b
f3cb9dc
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-2
f3cb9dc
- Check for selinux_mnt == NULL
f3cb9dc
9cf72eb
* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1
876a4a8
- Merged matchmediacon and trans_to_raw_context fixes from 
876a4a8
  Serge Hallyn.
9cf72eb
cd024ca
* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4
cd024ca
- Remove getseuser
cd024ca
d1291ec
* Thu May 25 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-3
d1291ec
- Bump requires to grab latest libsepol
d1291ec
389a799
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-2
389a799
- Add BuildRequires for swig
389a799
96ed369
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1
96ed369
- Upgrade to latest from NSA
96ed369
	* Merged simple setrans client cache from Dan Walsh.
96ed369
	  Merged avcstat patch from Russell Coker.
96ed369
	* Modified selinux_mkload_policy() to also set /selinux/compat_net
96ed369
	  appropriately for the loaded policy.
96ed369
8f927c4
* Thu May 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1
8f927c4
- More fixes for translation cache
8f927c4
- Upgrade to latest from NSA
8f927c4
	* Added matchpathcon_fini() function to free memory allocated by
8f927c4
	  matchpathcon_init().
8f927c4
8f927c4
* Wed May 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-2
8f927c4
- Add simple cache to improve translation speed
8f927c4
b71bf0b
* Tue May 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-1
b71bf0b
- Upgrade to latest from NSA
b71bf0b
	* Merged setrans client cleanup patch from Steve Grubb.
b71bf0b
069461a
* Tue May 9 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2
069461a
- Add Russell's AVC patch to handle large numbers
069461a
20222fb
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1
20222fb
- Upgrade to latest from NSA
20222fb
	* Merged getfscreatecon man page fix from Dan Walsh.
20222fb
	* Updated booleans(8) man page to drop references to the old
20222fb
	  booleans file and to note that setsebool can be used to set
20222fb
	  the boot-time defaults via -P.
20222fb
98a597a
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.5-1
20222fb
- Upgrade to latest from NSA
98a597a
	* Merged fix warnings patch from Karl MacMillan.	
98a597a
	* Merged setrans client support from Dan Walsh.
98a597a
	  This removes use of libsetrans.
98a597a
	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
98a597a
	* Merged swig typemap fixes from Glauber de Oliveira Costa.
98a597a
98a597a
* Wed May 3 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-3
98a597a
- Change the way translations work,  Use setransd/remove libsetrans
98a597a
75c50e4
* Tue May 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-2
75c50e4
- Add selinuxswig fixes
a925159
- Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)
75c50e4
ea8c625
* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-1
ea8c625
- Upgrade to latest from NSA
ea8c625
	* Added distclean target to Makefile.
ea8c625
	* Regenerated swig files.
ea8c625
	* Changed matchpathcon_init to verify that the spec file is
ea8c625
	  a regular file.
ea8c625
	* Merged python binding t_output_helper removal patch from Dan Walsh.
ea8c625
edd5aaa
* Tue Apr 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2
fed1ce5
- Fix python bindings for matchpathcon
fed1ce5
- Fix booleans man page
fed1ce5
c8030dc
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1
876a4a8
- Merged Makefile PYLIBVER definition patch from Dan Walsh.
c8030dc
d27dc97
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1
d27dc97
- Make some fixes so it will build on RHEL4
d27dc97
- Upgrade to latest from NSA
d27dc97
	* Updated version for release.
d27dc97
	* Altered rpm_execcon fallback logic for permissive mode to also
d27dc97
	  handle case where /selinux/enforce is not available.
d27dc97
b531c75
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.2
b531c75
- bump again for double-long bug on ppc(64)
b531c75
79e8955
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.1
79e8955
- rebuilt for new gcc4.1 snapshot and glibc changes
79e8955
6a494f5
* Fri Jan 20 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-1
6a494f5
- Upgrade to latest from NSA
6a494f5
	* Merged install-pywrap Makefile patch from Joshua Brindle.
6a494f5
fd8295b
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.6-1
fd8295b
- Upgrade to latest from NSA
fd8295b
	* Merged pywrap Makefile patch from Dan Walsh.
fd8295b
f4d57a9
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-2
f4d57a9
- Split out pywrap in Makefile
f4d57a9
ee0a60b
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-1
ee0a60b
- Upgrade to latest from NSA
ee0a60b
	* Added getseuser test program.
ee0a60b
edd5aaa
* Fri Jan 6 2006 Dan Walsh <dwalsh@redhat.com> 1.29.4-1
9ad8aa5
- Upgrade to latest from NSA
9ad8aa5
	* Added format attribute to myprintf in matchpathcon.c and
9ad8aa5
	  removed obsoleted rootlen variable in init_selinux_config().
9ad8aa5
9ad8aa5
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-2
fb1f518
- Build with new libsepol
fb1f518
dab5a2c
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-1
dab5a2c
- Upgrade to latest from NSA
dab5a2c
	* Merged several fixes and improvements from Ulrich Drepper
dab5a2c
	  (Red Hat), including:
dab5a2c
	  - corrected use of getline
dab5a2c
	  - further calls to __fsetlocking for local files
dab5a2c
	  - use of strdupa and asprintf
dab5a2c
	  - proper handling of dirent in booleans code
dab5a2c
	  - use of -z relro
dab5a2c
	  - several other optimizations
dab5a2c
	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).
dab5a2c
cac4888
* Sat Dec 24 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
cac4888
- Add build requires line for libsepol-devel
cac4888
407234b
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
407234b
- Fix swig call for getpidcon
407234b
41b7ee2
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-2
41b7ee2
- Move libselinux.so to base package
41b7ee2
6c4b73a
* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-1
6c4b73a
- Upgrade to latest from NSA
6c4b73a
	* Merged call to finish_context_translations from Dan Walsh.
6c4b73a
	  This eliminates a memory leak from failing to release memory
6c4b73a
	  allocated by libsetrans.
6c4b73a
3371166
* Sun Dec 11 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-3
d21de0e
- update to latest libsetrans  
3371166
- Fix potential memory leak
d21de0e
16eca65
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
16eca65
- rebuilt
16eca65
2774b7d
* Thu Dec 8 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
2774b7d
- Update to never version
2774b7d
	* Merged patch for swig interfaces from Dan Walsh.
2774b7d
a73f673
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
710322b
- Update to never version
710322b
710322b
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-2
0e39b77
- Fix some of the python swig objects
0e39b77
38b50da
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-1
38b50da
- Update to latest from NSA
38b50da
	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
38b50da
	  modified matchpathcon implementation to make context validation/
38b50da
	  canonicalization optional at matchpathcon_init time, deferring it
38b50da
	  to a successful matchpathcon by default unless the new flag is set
38b50da
	  by the caller.
38b50da
	* Added matchpathcon_init_prefix() interface, and
38b50da
	  reworked matchpathcon implementation to support selective
38b50da
	  loading of file contexts entries based on prefix matching
38b50da
	  between the pathname regex stems and the specified path
38b50da
	  prefix (stem must be a prefix of the specified path prefix).
38b50da
827fc83
* Wed Nov 30 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-1
827fc83
- Update to latest from NSA
827fc83
	* Change getsebool to return on/off instead of active/inactive
56d326b
116a5b0
* Tue Nov 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.25-1
116a5b0
- Update to latest from NSA
116a5b0
	* Added -f file_contexts option to matchpathcon util.
116a5b0
	  Fixed warning message in matchpathcon_init().
116a5b0
	* Merged Makefile python definitions patch from Dan Walsh.
116a5b0
9983861
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.23-1
116a5b0
- Update to latest from NSA
9983861
	* Merged swigify patch from Dan Walsh.
9983861
4bb08c5
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-4
4bb08c5
- Separate out libselinux-python bindings into separate rpm
4bb08c5
555b917
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-3
4bb08c5
- Read libsetrans requirement
555b917
ae85aab
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-2
ae85aab
- Add python bindings
ae85aab
ac2f72c
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-1
ac2f72c
- Update to latest from NSA
ac2f72c
	* Merged make failure in rpm_execcon non-fatal in permissive mode
ac2f72c
	  patch from Ivan Gyurdiev.
ac2f72c
f0d8402
* Tue Nov 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-2
f0d8402
- Remove requirement for libsetrans
f0d8402
848a7fa
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-1
848a7fa
- Update to latest from NSA
848a7fa
	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
848a7fa
	  and modified matchpathcon_init() to skip context translation
848a7fa
	  if it is set by the caller.
848a7fa
e6236de
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
e6236de
- Update to latest from NSA
e6236de
	* Added security_canonicalize_context() interface and
e6236de