7ca299
%if 0%{?fedora} > 12
5abec2
%global with_python3 1
7ca299
%endif
5abec2
775a74
%define ruby_inc %(pkg-config --cflags ruby)
c28c9a
%define libsepolver 2.5
c097ae
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
c097ae
cvsdist 9f5356
Summary: SELinux library and simple utilities
cvsdist 9f5356
Name: libselinux
e58e94
Version: 2.5
c28c9a
Release: 1%{?dist}
e1e36a
License: Public Domain
cvsdist 9f5356
Group: System Environment/Libraries
e0682d
# https://github.com/SELinuxProject/selinux/wiki/Releases
c28c9a
Source: https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20160223/libselinux-2.5.tar.gz
e1c914
Source1: selinuxconlist.8
e1c914
Source2: selinuxdefcon.8
e4fb3f
Url: https://github.com/SELinuxProject/selinux/wiki
e58e94
# download https://raw.githubusercontent.com/fedora-selinux/scripts/master/selinux/make-fedora-selinux-patch.sh
e58e94
# run:
c28c9a
# $ VERSION=2.5 ./make-fedora-selinux-patch.sh libselinux
c28c9a
# HEAD https://github.com/fedora-selinux/selinux/commit/51852c78f110223be57cd9776069f14703ab49f9
e58e94
Patch1: libselinux-fedora.patch
a1ef8d
BuildRequires: pkgconfig python python-devel ruby-devel ruby libsepol-static >= %{libsepolver} swig pcre-devel xz-devel
5abec2
%if 0%{?with_python3}
a1ef8d
BuildRequires: python3 python3-devel
5abec2
%endif # if with_python3
166aec
Requires: libsepol >= %{libsepolver} pcre
137759
Conflicts: filesystem < 3, selinux-policy-base < 3.13.1-138
b71bf0
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
cvsdist 9f5356
cvsdist 9f5356
%description
bebb52
Security-enhanced Linux is a feature of the Linux® kernel and a number
cvsdist 9f5356
of utilities with enhanced security functionality designed to add
cvsdist 9f5356
mandatory access controls to Linux.  The Security-enhanced Linux
cvsdist 9f5356
kernel contains new architectural components originally developed to
cvsdist 9f5356
improve the security of the Flask operating system. These
cvsdist 9f5356
architectural components provide general support for the enforcement
cvsdist 9f5356
of many kinds of mandatory access control policies, including those
cvsdist 9f5356
based on the concepts of Type Enforcement®, Role-based Access
cvsdist 9f5356
Control, and Multi-level Security.
cvsdist 9f5356
cvsdist 9f5356
libselinux provides an API for SELinux applications to get and set
cvsdist 9f5356
process and file security contexts and to obtain security policy
cvsdist 9f5356
decisions.  Required for any applications that use the SELinux API.
cvsdist 9f5356
fa0215
%package utils
fa0215
Summary: SELinux libselinux utilies
fa0215
Group: Development/Libraries
fa0215
Requires: libselinux = %{version}-%{release} 
fa0215
fa0215
%description utils
fa0215
The libselinux-utils package contains the utilities
fa0215
4bb08c
%package python
e1e36a
Summary: SELinux python bindings for libselinux
4bb08c
Group: Development/Libraries
4bb08c
Requires: libselinux = %{version}-%{release} 
4bb08c
4bb08c
%description python
e1e36a
The libselinux-python package contains the python bindings for developing 
e1e36a
SELinux applications. 
4bb08c
5abec2
%if 0%{?with_python3}
5abec2
%package python3
5abec2
Summary: SELinux python 3 bindings for libselinux
5abec2
Group: Development/Libraries
5abec2
Requires: libselinux = %{version}-%{release} 
5abec2
5abec2
%description python3
5abec2
The libselinux-python3 package contains python 3 bindings for developing
5abec2
SELinux applications. 
5abec2
%endif # with_python3
5abec2
ee7786
%package ruby
ee7786
Summary: SELinux ruby bindings for libselinux
ee7786
Group: Development/Libraries
ee7786
Requires: libselinux = %{version}-%{release} 
94187e
Provides: ruby(selinux)
ee7786
ee7786
%description ruby
ee7786
The libselinux-ruby package contains the ruby bindings for developing 
ee7786
SELinux applications. 
ee7786
cvsdist 9f5356
%package devel
cvsdist 9f5356
Summary: Header files and libraries used to build SELinux
cvsdist 9f5356
Group: Development/Libraries
f6b11f
Requires: libselinux = %{version}-%{release} 
950536
Requires: libsepol-devel >= %{libsepolver}
cvsdist 9f5356
cvsdist 9f5356
%description devel
c097ae
The libselinux-devel package contains the libraries and header files
c097ae
needed for developing SELinux applications. 
c097ae
c097ae
%package static
c097ae
Summary: Static libraries used to build SELinux
c097ae
Group: Development/Libraries
c097ae
Requires: libselinux-devel = %{version}-%{release}
c097ae
c097ae
%description static
c097ae
The libselinux-static package contains the static libraries
cvsdist 9f5356
needed for developing SELinux applications. 
cvsdist 9f5356
cvsdist 9f5356
%prep
c28c9a
%setup -q -n libselinux-2.5
e58e94
%patch1 -p1 -b .fedora
31e19c
cvsdist 9f5356
%build
b7e1bd
export LDFLAGS="%{?__global_ldflags}"
816374
export DISABLE_RPM="y"
b7e1bd
5abec2
# To support building the Python wrapper against multiple Python runtimes
5abec2
# Define a function, for how to perform a "build" of the python wrapper against
5abec2
# a specific runtime:
5abec2
BuildPythonWrapper() {
5abec2
  BinaryName=$1
5abec2
5abec2
  # Perform the build from the upstream Makefile:
5abec2
  make \
4eca5f
    PYTHON=$BinaryName \
5abec2
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
5abec2
    pywrap
5abec2
}
5abec2
337116
make clean
d18970
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} swigify
5abec2
make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} all
5abec2
4eca5f
BuildPythonWrapper %{__python}
5abec2
%if 0%{?with_python3}
4eca5f
BuildPythonWrapper %{__python3}
5abec2
%endif # with_python3
5abec2
884d86
make RUBYINC="%{ruby_inc}" SHLIBDIR="%{_libdir}" LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} rubywrap
cvsdist 9f5356
cvsdist 9f5356
%install
5abec2
InstallPythonWrapper() {
5abec2
  BinaryName=$1
5abec2
5abec2
  make \
4eca5f
    PYTHON=$BinaryName \
5abec2
    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
5abec2
    pywrap
5abec2
5abec2
  make \
4eca5f
    PYTHON=$BinaryName \
5abec2
    DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" \
86fcde
    SHLIBDIR="%{buildroot}/%{_lib}" BINDIR="%{buildroot}%{_bindir}" \
86fcde
    SBINDIR="%{buildroot}%{_sbindir}" \
86fcde
    install-pywrap
5abec2
}
5abec2
b71bf0
rm -rf %{buildroot}
876a4a
mkdir -p %{buildroot}/%{_prefix}/lib/tmpfiles.d
b71bf0
mkdir -p %{buildroot}/%{_libdir} 
b71bf0
mkdir -p %{buildroot}%{_includedir} 
b71bf0
mkdir -p %{buildroot}%{_sbindir}
b71bf0
mkdir -p %{buildroot}/var/run/setrans
876a4a
echo "d /var/run/setrans 0755 root root" > %{buildroot}/%{_prefix}/lib/tmpfiles.d/libselinux.conf
98a597
4eca5f
InstallPythonWrapper %{__python}
5abec2
%if 0%{?with_python3}
4eca5f
InstallPythonWrapper %{__python3}
5abec2
%endif # with_python3
5abec2
013b67
make DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" SHLIBDIR="%{buildroot}%{_libdir}" BINDIR="%{buildroot}%{_bindir}" SBINDIR="%{buildroot}%{_sbindir}" RUBYINSTALL=%{buildroot}%{ruby_vendorarchdir} install install-rubywrap
cvsdist 9f5356
4af222
# Nuke the files we don't want to distribute
b71bf0
rm -f %{buildroot}%{_sbindir}/compute_*
b71bf0
rm -f %{buildroot}%{_sbindir}/deftype
b71bf0
rm -f %{buildroot}%{_sbindir}/execcon
b71bf0
rm -f %{buildroot}%{_sbindir}/getenforcemode
b71bf0
rm -f %{buildroot}%{_sbindir}/getfilecon
b71bf0
rm -f %{buildroot}%{_sbindir}/getpidcon
b71bf0
rm -f %{buildroot}%{_sbindir}/mkdircon
b71bf0
rm -f %{buildroot}%{_sbindir}/policyvers
b71bf0
rm -f %{buildroot}%{_sbindir}/setfilecon
b71bf0
rm -f %{buildroot}%{_sbindir}/selinuxconfig
b71bf0
rm -f %{buildroot}%{_sbindir}/selinuxdisable
cd024c
rm -f %{buildroot}%{_sbindir}/getseuser
9df78f
rm -f %{buildroot}%{_sbindir}/togglesebool
e6bab3
rm -f %{buildroot}%{_sbindir}/selinux_check_securetty_context
792921
mv %{buildroot}%{_sbindir}/getdefaultcon %{buildroot}%{_sbindir}/selinuxdefcon
792921
mv %{buildroot}%{_sbindir}/getconlist %{buildroot}%{_sbindir}/selinuxconlist
e1c914
install -d %{buildroot}%{_mandir}/man8/
e1c914
install -m 644 %{SOURCE1} %{buildroot}%{_mandir}/man8/
e1c914
install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/
0662ba
rm -f %{buildroot}%{_mandir}/man8/togglesebool*
4af222
cvsdist 9f5356
%clean
b71bf0
rm -rf %{buildroot}
cvsdist 9f5356
Kay Sievers de370b
%post -p /sbin/ldconfig
cvsdist 1591c8
Kay Sievers de370b
%postun -p /sbin/ldconfig
cvsdist 9f5356
4bb08c
%files
c097ae
%defattr(-,root,root,-)
cca484
%{_libdir}/libselinux.so.*
0aa8cb
%ghost /var/run/setrans
01a1f7
%{_sbindir}/sefcontext_compile
876a4a
%{_prefix}/lib/tmpfiles.d/libselinux.conf
fa0215
fa0215
%files utils
fa0215
%defattr(-,root,root,-)
cd024c
%{_sbindir}/avcstat
cd024c
%{_sbindir}/getenforce
cd024c
%{_sbindir}/getsebool
9df78f
%{_sbindir}/matchpathcon
792921
%{_sbindir}/selinuxconlist
792921
%{_sbindir}/selinuxdefcon
2c3aae
%{_sbindir}/selinuxexeccon
cd024c
%{_sbindir}/selinuxenabled
cd024c
%{_sbindir}/setenforce
e58e94
%{_sbindir}/selabel_digest
e58e94
%{_sbindir}/selabel_lookup
e58e94
%{_sbindir}/selabel_lookup_best_match
e58e94
%{_sbindir}/selabel_partial_match
e58e94
%{_sbindir}/selinux_restorecon
029d48
%{_mandir}/man5/*
4bb08c
%{_mandir}/man8/*
4bb08c
cvsdist 9f5356
%files devel
c097ae
%defattr(-,root,root,-)
2a8f17
%{_libdir}/libselinux.so
ac492a
%{_libdir}/pkgconfig/libselinux.pc
ee8c86
%dir %{_libdir}/golang/src/pkg/github.com/selinux
ee8c86
%{_libdir}/golang/src/pkg/github.com/selinux/selinux.go
cvsdist adad8e
%dir %{_includedir}/selinux
b71bf0
%{_includedir}/selinux/*
cvsdist adad8e
%{_mandir}/man3/*
cvsdist 9f5356
c097ae
%files static
c097ae
%defattr(-,root,root,-)
c097ae
%{_libdir}/libselinux.a
c097ae
4bb08c
%files python
c097ae
%defattr(-,root,root,-)
c097ae
%dir %{python_sitearch}/selinux
c097ae
%{python_sitearch}/selinux/*
cvsdist 9f5356
5abec2
%if 0%{?with_python3}
5abec2
%files python3
5abec2
%defattr(-,root,root,-)
5abec2
%dir %{python3_sitearch}/selinux
7c0da1
%dir %{python3_sitearch}/selinux/__pycache__
4eca5f
%{python3_sitearch}/selinux/*.py*
7c0da1
%{python3_sitearch}/selinux/*.so
7c0da1
%{python3_sitearch}/selinux/__pycache__/*
5abec2
%endif with_python3
5abec2
ee7786
%files ruby
ee7786
%defattr(-,root,root,-)
013b67
%{ruby_vendorarchdir}/selinux.so
ee7786
cvsdist 9f5356
%changelog
c28c9a
* Tue Feb 23 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-1
c28c9a
- Update to upstream release 2016-02-23
c28c9a
e58e94
* Sun Feb 21 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-0.1.rc1
e58e94
- Update to upstream rc1 release 2016-01-07
e58e94
dfc8a0
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4-8
dfc8a0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
dfc8a0
ab78d0
* Tue Jan 12 2016 Vít Ondruch <vondruch@redhat.com> - 2.4-7
ab78d0
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
ab78d0
bc2c12
* Thu Dec 10 2015 Petr Lautrbach <plautrba@redhat.com> - 2.4-6
bc2c12
- Build libselinux without rpm_execcon() (#1284019)
bc2c12
Robert Kuska 7e4832
* Thu Oct 15 2015 Robert Kuska <rkuska@redhat.com> - 2.4-5
Robert Kuska 7e4832
- Rebuilt for Python3.5 rebuild
Robert Kuska 7e4832
fd198b
* Wed Sep 30 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-4
fd198b
- Flush the class/perm string mapping cache on policy reload (#1264051)
fd198b
- Fix restorecon when path has no context
fd198b
8db7ce
* Wed Sep 02 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-3
8db7ce
- Simplify procattr cache (#1257157,#1232371)
8db7ce
b7e1bd
* Fri Aug 14 2015 Adam Jackson <ajax@redhat.com> 2.4-2
b7e1bd
- Export ldflags into the build so hardening works
b7e1bd
137759
* Tue Jul 21 2015 Petr Lautrbach <plautrba@redhat.com> 2.4-1.1
c9ef5a
- Update to 2.4 release
c9ef5a
bc8296
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-11
bc8296
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
bc8296
065dd1
* Tue May 12 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-10
065dd1
- is_selinux_enabled: Add /etc/selinux/config test (#1219045)
065dd1
- matchpathcon/selabel_file: Fix man pages (#1219718)
065dd1
ce749c
* Thu Apr 23 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-9
ce749c
- revert support for policy compressed with xv (#1185266)
ce749c
fc7694
* Tue Apr 21 2015 Petr Lautrbach <plautrba@redhat.com> 2.3-8
fc7694
- selinux.py - use os.walk() instead of os.path.walk() (#1195004)
fc7694
- is_selinux_enabled(): drop no-policy-loaded test (#1195074)
fc7694
- fix -Wformat errors and remove deprecated mudflap option
fc7694
c11f14
* Mon Mar 16 2015 Than Ngo <than@redhat.com> - 2.3-7
c11f14
- bump release and rebuild so that koji-shadow can rebuild it
c11f14
  against new gcc on secondary arch
c11f14
a2d9f2
* Mon Jan 19 2015 Vít Ondruch <vondruch@redhat.com> - 2.3-6
a2d9f2
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2
a2d9f2
aa0f5b
* Thu Aug 21 2014 Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
aa0f5b
- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
aa0f5b
- Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts
aa0f5b
bb1c9d
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-4
bb1c9d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
bb1c9d
51d711
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3-3
51d711
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
51d711
aea6b4
* Wed May 28 2014 Kalev Lember <kalevlember@gmail.com> - 2.3-2
aea6b4
- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
aea6b4
ed9898
* Tue May 6 2014 Dan Walsh <dwalsh@redhat.com> - 2.3-1
ed9898
- Update to upstream 
ed9898
	* Get rid of security_context_t and fix const declarations.
ed9898
	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.
ed9898
05fcaf
* Tue May 6 2014 Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-8
05fcaf
- Add selinux_openssh_contexts_path()
05fcaf
32b42e
* Thu Apr 24 2014 Vít Ondruch <vondruch@redhat.com> - 2.2.2-7
32b42e
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1
32b42e
633998
* Mon Feb 24 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-6
633998
- Fix spelling mistake in man page
633998
820aec
* Thu Feb 20 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-5
820aec
- More go bindings
820aec
-   restorecon, getpidcon, setexeccon
820aec
249294
* Fri Feb 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-4
249294
- Add additional go bindings for get*con calls
249294
- Add go bindings test command
249294
- Modify man pages of set*con calls to mention that they are thread specific
249294
ee8c86
* Fri Jan 24 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-3
ee8c86
- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
ee8c86
- Add Int_to_mcs function to generate MCS labels from integers.
ee8c86
0aa8cb
* Tue Jan 14 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-2
0aa8cb
- Add ghost flag for /var/run/setrans
0aa8cb
d6e8b7
* Mon Jan 6 2014 Dan Walsh <dwalsh@redhat.com>  - 2.2.2-1
d6e8b7
- Update to upstream 
d6e8b7
      * Fix userspace AVC handling of per-domain permissive mode.
d6e8b7
- Verify context is not null when passed into *setfilecon_raw
d6e8b7
9ba3cd
* Fri Dec 27 2013 Adam Williamson <awilliam@redhat.com> - 2.2.1-6
9ba3cd
- revert unexplained change to rhat.patch which broke SELinux disablement
9ba3cd
e61de3
* Mon Dec 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-5
e61de3
- Verify context is not null when passed into lsetfilecon_raw
e61de3
f4752d
* Wed Dec 18 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-4
f4752d
- Mv selinux.go to /usr/share/gocode/src/selinux
f4752d
15fa31
* Tue Dec 17 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-3
15fa31
- Add golang support to selinux.
15fa31
0662ba
* Thu Dec 5 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-2
0662ba
- Remove togglesebool man page
0662ba
5f9e31
* Mon Nov 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
5f9e31
- Update to upstream 
5f9e31
	* Remove -lpthread from pkg-config file; it is not required.
d6f11c
- Add support for policy compressed with xv
5f9e31
bb6f29
* Thu Oct 31 2013 Dan Walsh <dwalsh@redhat.com> - 2.2-1
bb6f29
- Update to upstream 
bb6f29
	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
bb6f29
	* Support overriding Makefile RANLIB from Sven Vermeulen.
bb6f29
	* Update pkgconfig definition from Sven Vermeulen.
bb6f29
	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
bb6f29
	* Fix man pages from Laurent Bigonville.
bb6f29
	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
bb6f29
	* Fix LDFLAGS usage from Laurent Bigonville
bb6f29
	* Avoid shadowing stat in load_mmap from Joe MacDonald.
bb6f29
	* Support building on older PCRE libraries from Joe MacDonald.
bb6f29
	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
bb6f29
	* Fix procattr cache from Dan Walsh.
bb6f29
	* Define python constants for getenforce result from Dan Walsh.
bb6f29
	* Fix label substitution handling of / from Dan Walsh.
bb6f29
	* Add selinux_current_policy_path from Dan Walsh.
bb6f29
	* Change get_context_list to only return good matches from Dan Walsh.
bb6f29
	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
bb6f29
	* Add support for local substitutions from Dan Walsh.
bb6f29
	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
bb6f29
	* Python wrapper leak fixes from Dan Walsh.
bb6f29
	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
bb6f29
	* Add selinux_systemd_contexts_path from Dan Walsh.
bb6f29
	* Add selinux_set_policy_root from Dan Walsh.
bb6f29
	* Add man page for sefcontext_compile from Dan Walsh.
bb6f29
82deec
* Fri Oct 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-21
82deec
- Add systemd_contexts support
82deec
- Do substitutions on a local sub followed by a dist sub
82deec
0695b7
* Thu Oct 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-20
0695b7
- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek 
0695b7
Resolves #1013801
0695b7
763f66
* Mon Sep 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-19
763f66
- Fix handling of libselinux getconlist with only one entry
763f66
763f66
* Tue Sep 3 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-17
763f66
- Add Python constants for SELinux enforcing modes
763f66
aa9384
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.13-17
aa9384
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
aa9384
876a4a
* Fri Jun 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
876a4a
- Add sefcontext_compile.8  man page
876a4a
- Add Russell Coker  patch to fix man pages
876a4a
- Add patches from Laurent Bigonville to fix Makefiles for debian.
876a4a
- modify spec file to use %{_prefix}/lib
876a4a
4720dd
* Mon May 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-15
4720dd
- Fix patch that Handles substitutions for /
4720dd
def215
* Wed Apr 17 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-14
def215
- Handle substitutions for /
def215
- semanage fcontext -a -e  / /opt/rh/devtoolset-2/root
def215
196161
* Tue Apr 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-13
196161
- Add Eric Paris patch to fix procattr calls after a fork.
196161
4ab41c
* Tue Mar 26 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-12
4ab41c
- Move secolor.conf.5 into mcstrans package and out of libselinux 
4ab41c
70712b
* Wed Mar 20 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-11
70712b
- Fix python bindings for selinux_check_access
70712b
58f972
* Tue Mar 19 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-10
58f972
- Fix reseting the policy root in matchpathcon
58f972
cc9c7d
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
cc9c7d
- Cleanup setfcontext_compile atomic patch
cc9c7d
- Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
cc9c7d
- Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS
cc9c7d
8047ee
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-8
8047ee
- Make setfcontext_compile atomic
8047ee
9df78f
* Wed Mar 6 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-7
9df78f
- Fix memory leak in set*con calls.
9df78f
afe87e
* Thu Feb 28 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-6
afe87e
- Move matchpathcon to -utils package
9df78f
- Remove togglesebool
afe87e
e27f80
* Thu Feb 21 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-5
e27f80
- Fix selinux man page to reflect what current selinux policy is.
e27f80
0781a5
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
0781a5
- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.
0781a5
ade34f
* Fri Feb 15 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-3
ade34f
- Bring back selinux_current_policy_path
ade34f
5e85dc
* Thu Feb 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-2
5e85dc
- Revert some changes which are causing the wrong policy version file to be created
5e85dc
c1553d
* Thu Feb 7 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
c1553d
- Update to upstream 
c1553d
        * audit2why: make sure path is nul terminated
c1553d
        * utils: new file context regex compiler
c1553d
        * label_file: use precompiled filecontext when possible
c1553d
        * do not leak mmapfd
c1553d
        * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
c1553d
        * man: make selinux.8 mention service man pages
c1553d
        * audit2why: Fix segfault if finish() called twice
c1553d
        * audit2why: do not leak on multiple init() calls
c1553d
        * mode_to_security_class: interface to translate a mode_t in to a security class
c1553d
        * audit2why: Cleanup audit2why analysys function
c1553d
        * man: Fix program synopsis and function prototypes in man pages
c1553d
        * man: Fix man pages formatting
c1553d
        * man: Fix typo in man page
c1553d
        * man: Add references and man page links to _raw function variants
c1553d
        * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
c1553d
        * man: context_new(3): fix the return value description
c1553d
        * selinux_status_open: handle error from sysconf
c1553d
        * selinux_status_open: do not leak statusfd on exec
c1553d
        * Fix errors found by coverity
c1553d
        * Change boooleans.subs to booleans.subs_dist.
c1553d
        * optimize set*con functions
c1553d
        * pkg-config do not specifc ruby version
c1553d
        * unmap file contexts on selabel_close()
c1553d
        * do not leak file contexts with mmap'd backend
c1553d
        * sefcontext_compile: do not leak fd on error
c1553d
        * matchmediacon: do not leak fd 
c1553d
        * src/label_android_property: do not leak fd on error
c1553d
01e378
* Sun Jan 27 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-20
01e378
- Update to latest patches from eparis/Upstream
01e378
01e378
* Fri Jan 25 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
976da1
- Update to latest patches from eparis/Upstream
976da1
0a9b6f
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-18
0a9b6f
- Try procatt speedup patch again
0a9b6f
f29742
* Wed Jan 23 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-17
f29742
- Roll back procattr speedups since it seems to be screwing up systemd labeling.
f29742
775a74
* Tue Jan 22 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
775a74
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
775a74
f0a059
* Wed Jan 16 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-15
f0a059
- Fix tid handling for setfscreatecon, old patch still broken in libvirt
f0a059
7a71cd
* Mon Jan 14 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
7a71cd
- setfscreatecon after fork was broken by the Set*con patch.
7a71cd
- We needed to reset the thread variables after a fork.
7a71cd
a9a8a9
* Thu Jan 10 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-13
a9a8a9
- Fix setfscreatecon call to handle failure mode, which was breaking udev
a9a8a9
0974ef
* Wed Jan 9 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
0974ef
- Ondrej Oprala patch to optimize set*con functions
0974ef
-    Set*con now caches the security context and only re-sets it if it changes.
0974ef
0974ef
* Tue Jan 8 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-11
0974ef
- Rebuild against latest libsepol
0974ef
3fdab6
* Fri Jan 4 2013 Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
3fdab6
- Update to latest patches from eparis/Upstream
3fdab6
-    Fix errors found by coverity
3fdab6
-    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
3fdab6
-    audit2why: remove a useless policy vers variable
3fdab6
-    audit2why: use the new constraint information
3fdab6
e7604b
* Mon Nov 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
e7604b
- Rebuild with latest libsepol
e7604b
edd5aa
* Fri Nov 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
edd5aa
- Return EPERM if login program can not reach default label for user
edd5aa
- Attempt to return container info from audit2why
edd5aa
5a7e01
* Thu Nov 1 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
5a7e01
- Apply patch from eparis to fix leaked file descriptor in new labeling code
5a7e01
e1c914
* Fri Oct 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
e1c914
- Add new function mode_to_security_class which takes mode instead of a string.
e1c914
- Possibly will be used with coreutils.
e1c914
e1c914
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-5
e1c914
- Add back selinuxconlist and selinuxdefcon man pages
e1c914
e1c914
* Mon Oct 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
e1c914
- Fix segfault from calling audit2why.finish() multiple times
e1c914
e1c914
* Fri Oct 12 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
e1c914
- Fix up selinux man page to reference service man pages
e1c914
e1c914
* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-2
e1c914
- Rebuild with fixed libsepol
e1c914
01a1f7
* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
01a1f7
- Update to upstream 
01a1f7
	* Add support for lxc_contexts_path
01a1f7
	* utils: add service to getdefaultcon
01a1f7
	* libsemanage: do not set soname needlessly
01a1f7
	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
01a1f7
	* boolean name equivalency
01a1f7
	* getsebool: support boolean name substitution
01a1f7
	* Add man page for new selinux_boolean_sub function.
01a1f7
	* expose selinux_boolean_sub
01a1f7
	* matchpathcon: add -m option to force file type check
01a1f7
	* utils: avcstat: clear sa_mask set
01a1f7
	* seusers: Check for strchr failure
01a1f7
	* booleans: initialize pointer to silence coveriety
01a1f7
	* stop messages when SELinux disabled
01a1f7
	* label_file: use PCRE instead of glibc regex functions
01a1f7
	* label_file: remove all typedefs
01a1f7
	* label_file: move definitions to include file
01a1f7
	* label_file: do string to mode_t conversion in a helper function
01a1f7
	* label_file: move error reporting back into caller
01a1f7
	* label_file: move stem/spec handling to header
01a1f7
	* label_file: drop useless ncomp field from label_file data
01a1f7
	* label_file: move spec_hasMetaChars to header
01a1f7
	* label_file: fix potential read past buffer in spec_hasMetaChars
01a1f7
	* label_file: move regex sorting to the header
01a1f7
	* label_file: add accessors for the pcre extra data
01a1f7
	* label_file: only run regex files one time
01a1f7
	* label_file: new process_file function
01a1f7
	* label_file: break up find_stem_from_spec
01a1f7
	* label_file: struct reorg
01a1f7
	* label_file: only run array once when sorting
01a1f7
	* Ensure that we only close the selinux netlink socket once.
01a1f7
	* improve the file_contexts.5 manual page
01a1f7
ebb7fc
* Fri Aug 03 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-6
ebb7fc
- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
ebb7fc
7ca299
* Wed Aug  1 2012 David Malcolm <dmalcolm@redhat.com> - 2.1.11-5
7ca299
- make with_python3 be conditional on fedora
7ca299
dc5742
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.11-4
dc5742
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
dc5742
6b51ca
* Mon Jul 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
6b51ca
- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d
6b51ca
852ea7
* Fri Jul 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
852ea7
- Revert Eric Paris Patch for selinux_binary_policy_path
852ea7
cd092e
* Wed Jul 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
cd092e
- Update to upstream 
cd092e
	* Fortify source now requires all code to be compiled with -O flag
cd092e
	* asprintf return code must be checked
cd092e
	* avc_netlink_recieve handle EINTR
cd092e
	* audit2why: silence -Wmissing-prototypes warning
cd092e
	* libsemanage: remove build warning when build swig c files
cd092e
	* matchpathcon: bad handling of symlinks in /
cd092e
	* seusers: remove unused lineno
cd092e
	* seusers: getseuser: gracefully handle NULL service
cd092e
	* New Android property labeling backend
cd092e
	* label_android_property whitespace cleanups
cd092e
	* additional makefile support for rubywrap
cd092e
d9f625
* Mon Jun 11 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
d9f625
- Fix booleans.subs name, change function name to selinux_boolean_sub, 
d9f625
  add man page, minor fixes to the function
d9f625
f9135b
* Fri May 25 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
f9135b
- Fix to compile with Fortify source
f9135b
      * Add -O compiler flag
f9135b
      * Check return code from asprintf
f9135b
- Fix handling of symbolic links in / by realpath_not_final
f9135b
40eaa6
* Tue Apr 17 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-3
40eaa6
- Add support for lxc contexts file
40eaa6
40eaa6
* Fri Mar 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-2
40eaa6
- Add support fot boolean subs file
40eaa6
ce3cc6
* Thu Mar 29 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
ce3cc6
- Update to upstream 
ce3cc6
	* Fix dead links to www.nsa.gov/selinux
ce3cc6
	* Remove jump over variable declaration
ce3cc6
	* Fix old style function definitions
ce3cc6
	* Fix const-correctness
ce3cc6
	* Remove unused flush_class_cache method
ce3cc6
	* Add prototype decl for destructor
ce3cc6
	* Add more printf format annotations
ce3cc6
	* Add printf format attribute annotation to die() method
ce3cc6
	* Fix const-ness of parameters & make usage() methods static
ce3cc6
	* Enable many more gcc warnings for libselinux/src/ builds
ce3cc6
	* utils: Enable many more gcc warnings for libselinux/utils builds
ce3cc6
	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
ce3cc6
	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
ce3cc6
	* Update Makefiles to handle /usrmove
ce3cc6
	* utils: Stop separating out matchpathcon as something special
ce3cc6
	* pkg-config to figure out where ruby include files are located
ce3cc6
	* build with either ruby 1.9 or ruby 1.8
ce3cc6
	* assert if avc_init() not called
ce3cc6
	* take security_deny_unknown into account
ce3cc6
	* security_compute_create_name(3)
ce3cc6
	* Do not link against python library, this is considered
ce3cc6
	* bad practice in debian
ce3cc6
	* Hide unnecessarily-exported library destructors
ce3cc6
884d86
* Thu Feb 16 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
884d86
- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
884d86
- Otherwise search for policy on disk
884d86
884d86
* Wed Feb 15 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
884d86
- Change selinux_binary_policy_path to return /sys/fs/selinux/policy
884d86
- Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
884d86
- avc_has_perm will now return yes if the machine is in permissive mode
884d86
- Make work with ruby-1.9
884d86
a6c6ce
* Fri Feb 3 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-7
76fb5c
- avc_netlink_recieve should continue to poll if it receinves an EINTR rather 
76fb5c
Kay Sievers 82dfd0
* Sun Jan 29 2012 Kay Sievers <kay@redhat.com> - 2.1.9-6
Kay Sievers 82dfd0
- use /sbin/ldconfig, glibc does not provide
Kay Sievers 82dfd0
  /usr/sbin/ldconfig in the RPM database for now
Kay Sievers 82dfd0
86fcde
* Fri Jan 27 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-5
86fcde
- Rebuild with cleaned up upstream to work in /usr
86fcde
cca484
* Wed Jan 25 2012 Harald Hoyer <harald@redhat.com> 2.1.9-4
cca484
- install everything in /usr
cca484
  https://fedoraproject.org/wiki/Features/UsrMove
cca484
3b242a
* Mon Jan 23 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-3
3b242a
- Add Dan Berrange code cleanup patches.
3b242a
ad8477
* Wed Jan 4 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
ad8477
- Fix selabal_open man page to refer to proper selinux_opt structure
ad8477
3ae845
* Wed Dec 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
3ae845
-Update to upstream
3ae845
	* Fix setenforce man page to refer to selinux man page
3ae845
	* Cleanup Man pages
3ae845
	* merge freecon with getcon man page
3ae845
edd5aa
* Mon Dec 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
0c717c
- Add patch from Richard Haines
0c717c
      When selabel_lookup found an invalid context with validation enabled, it
0c717c
      always stated it was 'file_contexts' whether media, x, db or file.
0c717c
      The fix is to store the spec file name in the selabel_lookup_rec on
0c717c
      selabel_open and use this as output for logs. Also a minor fix if key is
0c717c
      NULL to stop seg faults.
0c717c
- Fix setenforce manage page.
0c717c
3e52a1
* Thu Dec 15 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
7a677c
- Rebuild with new libsepol
7a677c
e9493a
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-2
e9493a
- Fix setenforce man page, from Miroslav Grepl
e9493a
de1ce2
* Tue Dec 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
de1ce2
- Upgrade to upstream
de1ce2
	* selinuxswig_python.i: don't make syscall if it won't change anything
de1ce2
	* Remove assert in security_get_boolean_names(3)
de1ce2
	* Mapped compute functions now obey deny_unknown flag
de1ce2
	* get_default_type now sets EINVAL if no entry.
de1ce2
	* return EINVAL if invalid role selected
de1ce2
	* Updated selabel_file(5) man page
de1ce2
	* Updated selabel_db(5) man page
de1ce2
	* Updated selabel_media(5) man page
de1ce2
	* Updated selabel_x(5) man page
de1ce2
	* Add man/man5 man pages
de1ce2
	* Add man/man5 man pages
de1ce2
	* Add man/man5 man pages
de1ce2
	* use -W and -Werror in utils
de1ce2
092128
* Tue Nov 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-2
092128
- Change python binding for restorecon to check if the context matches.
092128
- If it does do not reset
092128
5cb289
* Fri Nov 4 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
092128
- Upgrade to upstream
5cb289
	* Makefiles: syntax, convert all ${VAR} to $(VAR)
5cb289
	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
5cb289
	* regenerate .pc on VERSION change
5cb289
	* label: cosmetic cleanups
5cb289
	* simple interface for access checks
5cb289
	* Don't reinitialize avc_init if it has been called previously
5cb289
	* seusers: fix to handle large sets of groups
5cb289
	* audit2why: close fd on enomem
5cb289
	* rename and export symlink_realpath
5cb289
	* label_file: style changes to make Eric happy.
5cb289
807546
* Mon Oct 24 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-4
807546
- Apply libselinux patch to handle large groups in seusers.
807546
a8fa87
* Wed Oct 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-3
a8fa87
- Add selinux_check_access function. Needed for passwd, chfn, chsh
a8fa87
3f542e
* Thu Sep 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-2
3f542e
- Handle situation where selinux=0 passed to the kernel and both /selinux and 
3f542e
aa09b7
* Mon Sep 19 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
aa09b7
-Update to upstream
aa09b7
	* utils: matchpathcon: remove duplicate declaration
aa09b7
	* src: matchpathcon: use myprintf not fprintf
aa09b7
	* src: matchpathcon: make sure resolved path starts
aa09b7
	* put libselinux.so.1 in /lib not /usr/lib
aa09b7
	* tree: default make target to all not
aa09b7
5113c7
* Wed Sep 14 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-5
5113c7
- Switch to use ":" as prefix separator rather then ";"
5113c7
09b670
* Thu Sep  8 2011 Ville Skyttä <ville.skytta@iki.fi> - 2.1.5-4
09b670
- Avoid unnecessary shell invocation in %%post.
09b670
c03bd3
* Tue Sep 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
c03bd3
- Fix handling of subset labeling that is causing segfault in restorecon
c03bd3
10e77a
* Fri Sep 2 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
10e77a
- Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
10e77a
prefixes.  Now you can specify a ";" separated list of prefixes and the 
10e77a
labeling system will only load regular expressions that match these prefixes.
10e77a
495b75
* Tue Aug 30 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
495b75
- Change matchpatcon to use proper myprintf
495b75
- Fix symlink_realpath to always include "/"
495b75
- Update to upstream
495b75
	* selinux_file_context_verify function returns wrong value.
495b75
	* move realpath helper to matchpathcon library
495b75
	* python wrapper makefile changes
495b75
4eca5f
* Mon Aug 22 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
4eca5f
- Move to new Makefile that can build with or without PYTHON being set
4eca5f
00e063
* Thu Aug 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
00e063
-Update to upstream
00e063
2.1.4 2011-0817
00e063
	* mapping fix for invalid class/perms after selinux_set_mapping
00e063
	* audit2why: work around python bug not defining
00e063
	* resolv symlinks and dot directories before matching
00e063
00e063
2.1.2 2011-0803
00e063
	* audit2allow: do not print statistics
00e063
	* make python bindings for restorecon work on relative path
00e063
	* fix python audit2why binding error
00e063
	* support new python3 functions
00e063
	* do not check fcontext duplicates on use
00e063
	* Patch for python3 for libselinux
00e063
00e063
2.1.1 2011-08-02
00e063
	* move .gitignore into utils
00e063
	* new setexecon utility
00e063
	* selabel_open fix processing of substitution files
00e063
	* mountpoint changing patch.
00e063
	* simplify SRCS in Makefile
00e063
00e063
2.1.1 2011-08-01
00e063
	* Remove generated files, introduce more .gitignore
00e063
00e063
00e063
125b5b
* Thu Jul 28 2011 Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
125b5b
-Update to upstream
125b5b
	* Release, minor version bump
125b5b
	* Give correct names to mount points in load_policy by Dan Walsh.
125b5b
	* Make sure selinux state is reported correctly if selinux is disabled or
125b5b
	fails to load by Dan Walsh.
125b5b
	* Fix crash if selinux_key_create was never called by Dan Walsh.
125b5b
	* Add new file_context.subs_dist for distro specific filecon substitutions
125b5b
	by Dan Walsh.
125b5b
	* Update man pages for selinux_color_* functions by Richard Haines.
125b5b
076f35
* Mon Jun 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
076f35
- Only call dups check within selabel/matchpathcon if you are validating the 
076f35
context
076f35
- This seems to speed the loading of labels by 4 times.
076f35
2c3aae
* Fri Apr 29 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
2c3aae
- Move /selinux to /sys/fs/selinux
2c3aae
- Add selinuxexeccon
2c3aae
- Add realpath to matchpathcon to handle matchpathcon * type queries.
2c3aae
71e797
* Thu Apr 21 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-4
71e797
- Update for latest libsepol
71e797
f0ee56
* Mon Apr 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-3
f0ee56
- Update for latest libsepol
f0ee56
73bed0
* Wed Apr 13 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-2
73bed0
- Fix restorecon python binding to accept relative paths
73bed0
982b2e
* Tue Apr 12 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
982b2e
-Update to upstream
982b2e
	* Give correct names to mount points in load_policy by Dan Walsh.
982b2e
	* Make sure selinux state is reported correctly if selinux is disabled or
982b2e
	fails to load by Dan Walsh.
982b2e
	* Fix crash if selinux_key_create was never called by Dan Walsh.
982b2e
	* Add new file_context.subs_dist for distro specific filecon substitutions
982b2e
	by Dan Walsh.
982b2e
	* Update man pages for selinux_color_* functions by Richard Haines.
982b2e
edd5aa
* Wed Apr 6 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
3d499c
- Clean up patch to make handling of constructor  cleanup more portable
d455eb
  * db_language object class support for selabel_lookup from KaiGai Kohei.
d455eb
  * Library destructors for thread local storage keys from Eamon Walsh.
3d499c
872350
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-5
872350
- Add distribution subs path
872350
4b2caa
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
4b2caa
Add patch from dbhole@redhat.com to initialize thread keys to -1
4b2caa
Errors were being seen in libpthread/libdl that were related
4b2caa
to corrupt thread specific keys. Global destructors that are called on dl 
4b2caa
unload. During destruction delete a thread specific key without checking 
4b2caa
if it has been initialized. Since the constructor is not called each time 
4b2caa
(i.e. key is not initialized with pthread_key_create each time), and the 
4b2caa
default is 0, there is a possibility that key 0 for an active thread gets 
4b2caa
deleted. This is exactly what is happening in case of OpenJDK.
4b2caa
4b2caa
Workaround patch that initializes the key to -1. Thus if the constructor is not
4b2caa
called, the destructor tries to delete key -1 which is deemed invalid by 
4b2caa
pthread_key_delete, and is ignored.
4b2caa
0cd375
* Tue Apr 5 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
0cd375
- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data
0cd375
0cd375
* Fri Apr 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-2
0cd375
- Change mount source options to use "proc" and "selinuxfs"
0cd375
1fefea
* Tue Mar 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.99-1
1fefea
- Update to upstream
1fefea
  * Turn off default user handling when computing user contexts by Dan Walsh
1fefea
1fefea
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
148fda
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
148fda
1fefea
* Tue Feb 1 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-3
c49c04
- Fixup selinux man page
c49c04
1fefea
* Tue Jan 18 2011 Dan Walsh <dwalsh@redhat.com> - 2.0.98-2
3c1b81
- Fix Makefile to use pkg-config --cflags python3 to discover include paths
3c1b81
ca9cea
* Tue Dec 21 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.98-1
ca9cea
- Update to upstream 
ca9cea
  - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
ca9cea
254290
* Mon Dec 6 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.97-1
254290
- Update to upstream 
254290
	* Thread local storage fixes from Eamon Walsh.
254290
edd5aa
* Sat Dec 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-9
8b8064
- Add /etc/tmpfiles.d support for /var/run/setrans
8b8064
edd5aa
* Wed Nov 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-8
3dcd5c
- Ghost /var/run/setrans
3dcd5c
Jesse Keating 2f8093
* Wed Sep 29 2010 jkeating - 2.0.96-7
Jesse Keating 2f8093
- Rebuilt for gcc bug 634757
Jesse Keating 2f8093
Adam Tkac ae5808
* Thu Sep 16 2010 Adam Tkac <atkac redhat="" com=""> - 2.0.96-6
Adam Tkac ae5808
- rebuild via updated swig (#624674)
Adam Tkac ae5808
7c0da1
* Sun Aug 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-5
7c0da1
- Update for python 3.2a1
7c0da1
159f7d
* Tue Jul 27 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-4
159f7d
- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list
159f7d
9eca71
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.96-3
9eca71
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
9eca71
423580
* Fri Jun 25 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-2
423580
- Turn off messages in audit2why
423580
5abec2
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
5abec2
- Update to upstream 
5abec2
	* Add const qualifiers to public API where appropriate by KaiGai Kohei.
5abec2
5abec2
2.0.95 2010-06-10
5abec2
	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
5abec2
	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
5abec2
- add python3 subpackage from David Malcolm 
5abec2
5abec2
* Wed Mar 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
876a4a
* Set errno=EINVAL for invalid contexts from Dan Walsh.
5abec2
edd5aa
* Tue Mar 16 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
5abec2
- Update to upstream 
5abec2
	* Show strerror for security_getenforce() by Colin Waters.
5abec2
	* Merged selabel database support by KaiGai Kohei.
5abec2
	* Modify netlink socket blocking code by KaiGai Kohei.
5abec2
982ffd
* Sun Mar 7 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
982ffd
- Update to upstream 
982ffd
	* Fix from Eric Paris to fix leak on non-selinux systems.
982ffd
	* regenerate swig wrappers
982ffd
	* pkgconfig fix to respect LIBDIR from Dan Walsh.
982ffd
68c8d9
* Wed Feb 24 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
68c8d9
- Update to upstream 
68c8d9
	* Change the AVC to only audit the permissions specified by the
68c8d9
	policy, excluding any permissions specified via dontaudit or not
68c8d9
	specified via auditallow.
68c8d9
	* Fix compilation of label_file.c with latest glibc headers.
68c8d9
68c8d9
* Mon Feb 22 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-5
68c8d9
- Fix potential doublefree on init
68c8d9
68c8d9
* Thu Feb 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-4
68c8d9
- Fix libselinux.pc
68c8d9
de078c
* Mon Jan 18 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-3
de078c
- Fix man page for selinuxdefcon
de078c
de078c
* Mon Jan 4 2010 Dan Walsh <dwalsh@redhat.com> - 2.0.90-2
1f46a5
- Free memory on disabled selinux boxes
1f46a5
76eced
* Tue Dec 1 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
76eced
- Update to upstream 
76eced
	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
76eced
	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>
76eced
4ed79e
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-2
4ed79e
- Fix selinuxdefcon man page
4ed79e
a69064
* Mon Nov 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.89-1
a69064
- Update to upstream 
a69064
	* Add pkgconfig file from Eamon Walsh.
a69064
8a570f
* Thu Oct 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.88-1
8a570f
- Update to upstream 
8a570f
	* Rename and export selinux_reset_config()
8a570f
510eba
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
510eba
- Update to upstream 
510eba
	* Add exception handling in libselinux from Dan Walsh. This uses a
510eba
	  shell script called exception.sh to generate a swig interface file.
510eba
	* make swigify
510eba
	* Make matchpathcon print <<none>> if path not found in fcontext file.
510eba
d3cc14
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-2
d3cc14
- Eliminate -pthread switch in Makefile
d3cc14
9afde8
* Tue Sep 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.86-1
9afde8
- Update to upstream 
9afde8
	* Removal of reference counting on userspace AVC SID's.
9afde8
0762b6
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.85-2
0762b6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
0762b6
fa6218
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
fa6218
- Update to upstream 
fa6218
	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
fa6218
	pthread dependency.
fa6218
	* Removed fini_context_translations() altogether.
fa6218
	* Merged lazy init patch from Stephen Smalley based on original patch
fa6218
	by Steve Grubb.
fa6218
23660c
* Tue Jul 7 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
23660c
- Update to upstream 
23660c
	* Add per-service seuser support from Dan Walsh.
23660c
	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
23660c
	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
23660c
	Paris.
23660c
94187e
* Wed Jun 24 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-2
94187e
- Add provices ruby(selinux)
94187e
a66522
* Tue Jun 23 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
a66522
- Update to upstream 
a66522
	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
a66522
	* Label substitution support from Dan Walsh.
a66522
	* Support for labeling virtual machine images from Dan Walsh.
a66522
403bfa
* Mon May 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
403bfa
- Update to upstream 
403bfa
	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
403bfa
	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
403bfa
	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
403bfa
	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.
403bfa
c1ed6e
* Wed Apr 8 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
c1ed6e
- Update to upstream 
c1ed6e
	* deny_unknown wrapper function from KaiGai Kohei.
c1ed6e
	* security_compute_av_flags API from KaiGai Kohei.
c1ed6e
	* Netlink socket management and callbacks from KaiGai Kohei.
c1ed6e
d6eb0c
* Fri Apr 3 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-6
d6eb0c
- Fix Memory Leak
d6eb0c
261c72
* Thu Apr 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-5
261c72
- Fix crash in python
261c72
f6ba4d
* Sun Mar 29 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-4
f6ba4d
- Add back in additional interfaces
f6ba4d
f6ba4d
* Fri Mar 27 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-3
974a6e
- Add back in av_decision to python swig
974a6e
c86e2e
* Thu Mar 12 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
c86e2e
- Update to upstream 
c86e2e
	* Netlink socket handoff patch from Adam Jackson.
c86e2e
	* AVC caching of compute_create results by Eric Paris.
c86e2e
c86e2e
* Tue Mar 10 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-5
c86e2e
- Add patch from ajax to accellerate X SELinux 
c86e2e
- Update eparis patch
c86e2e
ada6d8
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-4
ada6d8
- Add eparis patch to accellerate Xwindows performance
ada6d8
79bb8b
* Mon Mar 9 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-3
79bb8b
- Fix URL 
79bb8b
3da9d8
* Fri Mar 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-2
3da9d8
- Add substitute pattern 
3da9d8
- matchpathcon output <<none>> on ENOENT
3da9d8
07ae25
* Mon Mar 2 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.78-1
07ae25
- Update to upstream
07ae25
	* Fix incorrect conversion in discover_class code.
07ae25
5b3b3e
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.77-6
5b3b3e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
5b3b3e
19dec5
* Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-5
6396f1
- Add 
6396f1
  - selinux_virtual_domain_context_path
6396f1
  - selinux_virtual_image_context_path
6396f1
b5b41b
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-3
b5b41b
- Throw exeptions in python swig bindings on failures
b5b41b
c1e059
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-2
c1e059
- Fix restorecon python code
c1e059
49eae3
* Tue Jan 6 2009 Dan Walsh <dwalsh@redhat.com> - 2.0.77-1
49eae3
- Update to upstream
49eae3
e672e9
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-6
e672e9
- Strip trailing / for matchpathcon
e672e9
49eae3
* Tue Dec 16 2008 Dan Walsh <dwalsh@redhat.com>l - 2.0.76-5
0c692a
- Fix segfault if seusers file does not work
0c692a
d9847b
* Fri Dec 12 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
cd000f
- Add new function getseuser which will take username and service and return
cd000f
- seuser and level.  ipa will populate file in future.
cd000f
- Change selinuxdefcon to return just the context by default
cd000f
fdb97b
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.0.76-2
fdb97b
- Rebuild for Python 2.6
fdb97b
f53982
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.76-1
f53982
- Update to Upstream
f53982
	* Allow shell-style wildcards in x_contexts file.
f53982
41931f
* Mon Nov 17 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
41931f
- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
41931f
- Add Restorecon/Install python functions from Luke Macken
41931f
d3b013
* Fri Nov 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
d3b013
- Update to Upstream
d3b013
	* Correct message types in AVC log messages.
d3b013
	* Make matchpathcon -V pass mode from Dan Walsh.
d3b013
	* Add man page for selinux_file_context_cmp from Dan Walsh.
d3b013
3898d8
* Tue Sep 30 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
3898d8
- Update to Upstream
3898d8
	* New man pages from Dan Walsh.
3898d8
	* Update flask headers from refpolicy trunk from Dan Walsh.
3898d8
263ee4
* Fri Sep 26 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-6
263ee4
- Fix matchpathcon -V call 
263ee4
357877
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-5
357877
- Add flask definitions for open, X and nlmsg_tty_audit
357877
15c5a6
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-4
15c5a6
- Add missing get/setkeycreatecon man pages
15c5a6
fa0215
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-3
fa0215
- Split out utilities
fa0215
ac4e77
* Tue Sep 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-2
ac4e77
- Add missing man page links for [lf]getfilecon
ac4e77
7918b2
* Tue Aug 5 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
7918b2
- Update to Upstream
7918b2
	* Add group support to seusers using %groupname syntax from Dan Walsh.
7918b2
	* Mark setrans socket close-on-exec from Stephen Smalley.
7918b2
	* Only apply nodups checking to base file contexts from Stephen Smalley.
7918b2
86ce8d
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
86ce8d
- Update to Upstream
86ce8d
	* Merge ruby bindings from Dan Walsh.
86ce8d
- Add support for Linux groups to getseuserbyname
86ce8d
86ce8d
* Fri Aug 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-2
86ce8d
- Allow group handling in getseuser call
86ce8d
d0a06b
* Tue Jul 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
d0a06b
- Update to Upstream
d0a06b
	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
d0a06b
	  This prevents adding them via semanage.
d0a06b
	* Fix audit2why shadowed variables from Stephen Smalley.
d0a06b
	* Note that freecon NULL is legal in man page from Karel Zak.
d0a06b
ee7786
* Wed Jul 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-4
ee7786
- Add ruby support for puppet
ee7786
c56d16
* Tue Jul 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-3
c56d16
- Rebuild for new libsepol
c56d16
ea56fe
* Sun Jun 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-2
ea56fe
- Add Karel Zak patch for freecon man page
ea56fe
6359e2
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
6359e2
- Update to Upstream
6359e2
	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
6359e2
	* Add swig python bindings for avc interfaces from Dan Walsh.
6359e2
fc4f6a
* Sun Jun 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
bff583
- Update to Upstream
bff583
	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
bff583
	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
bff583
454774
* Fri May 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-3
454774
- libselinux no longer neets to telnet -u in post install
454774
792921
* Wed May 7 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-2
792921
- Add sedefaultcon and setconlist commands to dump login context
792921
1209c8
* Tue Apr 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
1209c8
- Update to Upstream
1209c8
	* Fixed selinux_set_callback man page.
1209c8
	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
1209c8
	* Fix memory leaks in matchpathcon from Eamon Walsh.
1209c8
1209c8
* Wed Apr 16 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-4
1209c8
- Add Xavior Toth patch for security_id_t in swig
1209c8
d87adc
* Thu Apr 10 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-3
d87adc
- Add avc.h to swig code
d87adc
d87adc
* Wed Apr 9 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-2
d87adc
- Grab the latest policy for the kernel
d87adc
9d13c9
* Tue Apr 1 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.61-1
9d13c9
- Update to Upstream
9d13c9
	* Man page typo fix from Jim Meyering.
9d13c9
7384c1
* Sun Mar 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
9d13c9
- Update to Upstream
7384c1
	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.
7384c1
eb8e2a
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-2
eb8e2a
- Fix matchpathcon memory leak
eb8e2a
4594ae
* Fri Feb 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.59-1
4594ae
- Update to Upstream
4594ae
	* Merged new X label "poly_selection" namespace from Eamon Walsh.
4594ae
0984ab
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.58-1
0984ab
- Update to Upstream
0984ab
	* Merged reset_selinux_config() for load policy from Dan Walsh.
0984ab
baab9d
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-2
baab9d
- Reload library on loading of policy to handle chroot
baab9d
73272f
* Mon Feb 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.57-1
73272f
- Update to Upstream
73272f
	* Merged avc_has_perm() errno fix from Eamon Walsh.
73272f
3cb08a
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.56-1
3cb08a
- Update to Upstream
3cb08a
	* Regenerated Flask headers from refpolicy flask definitions.
3cb08a
198adb
* Wed Feb 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
198adb
- Update to Upstream
198adb
	* Merged compute_member AVC function and manpages from Eamon Walsh.
198adb
	* Provide more error reporting on load policy failures from Stephen Smalley.
198adb
099d39
* Fri Feb 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.53-1
099d39
- Update to Upstream
099d39
	* Merged new X label "poly_prop" namespace from Eamon Walsh.
099d39
fc1475
* Wed Feb 6 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
fc1475
- Update to Upstream
fc1475
	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
fc1475
	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.
fc1475
8f9ecf
* Tue Jan 29 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.50-1
8f9ecf
- Update to Upstream
8f9ecf
	* Merged fix for audit2why from Dan Walsh.
8f9ecf
213643
* Fri Jan 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-2
213643
- Fix audit2why to grab latest policy versus the one selected by the kernel
213643
e46231
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.49-1
e46231
* Merged audit2why python binding from Dan Walsh.
e46231
c633d6
* Wed Jan 23 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.48-1
c633d6
* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
c633d6
c097ae
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-4
c097ae
- Update to use libsepol-static library
c097ae
c097ae
* Wed Jan 16 2008 Adel Gadllah <adel.gadllah@gmail.com> - 2.0.47-3
c097ae
- Move libselinux.a to -static package
c097ae
- Spec cleanups
c097ae
5c1daf
* Tue Jan 15 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-2
5c1daf
- Put back libselinux.a
5c1daf
2f233d
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
2f233d
- Fix memory references in audit2why and change to use tuples
2f233d
- Update to Upstream
2f233d
	* Fix for the avc:  granted null message bug from Stephen Smalley.
2f233d
88cc8f
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-6
88cc8f
- Fix __init__.py specification
88cc8f
9ec772
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
9ec772
- Add audit2why python bindings
9ec772
625a8f
* Tue Jan 8 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-4
625a8f
- Add pid_t typemap for swig bindings
625a8f
5866f4
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-3
5866f4
- smp_mflag
5866f4
e1e36a
* Thu Jan 3 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.46-2
e1e36a
- Fix spec file caused by spec review 
e1e36a
41bd3b
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.46-1
41bd3b
- Upgrade to upstream
41bd3b
	* matchpathcon(8) man page update from Dan Walsh.
41bd3b
c4aa29
* Fri Nov 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
c4aa29
- Upgrade to upstream
c4aa29
	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
c4aa29
	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
c4aa29
	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.
c4aa29
c4aa29
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
c4aa29
- Upgrade to upstream
c4aa29
	* Regenerated Flask headers from policy.
c4aa29
2a8f17
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
2a8f17
- Upgrade to upstream
2a8f17
	* AVC enforcing mode override patch from Eamon Walsh.
2a8f17
	* Aligned attributes in AVC netlink code from Eamon Walsh.
2a8f17
- Move libselinux.so back into devel package, procps has been fixed
2a8f17
79584e
* Tue Nov 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
79584e
- Upgrade to upstream
79584e
	* Merged refactored AVC netlink code from Eamon Walsh.
79584e
	* Merged new X label namespaces from Eamon Walsh.
79584e
	* Bux fix and minor refactoring in string representation code.
79584e
39606e
* Fri Oct 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
39606e
- Upgrade to upstream
39606e
	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.
39606e
39606e
* Fri Sep 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
39606e
- Upgrade to upstream
39606e
	* Fix segfault resulting from missing file_contexts file.
39606e
dcd977
* Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-2
dcd977
- Fix segfault on missing file_context file
dcd977
7cbfb0
* Wed Sep 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
7cbfb0
- Upgrade to upstream
7cbfb0
	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
7cbfb0
	* Pass CFLAGS when using gcc for linking from Dennis Gilmore. 
6e60f1
ae054c
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-3
ae054c
- Add sparc patch to from Dennis Gilmore to build on Sparc platform
ae054c
010213
* Mon Sep 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-2
010213
- Remove leaked file descriptor
010213
0fa749
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.34-1
0fa749
- Upgrade to latest from NSA
0fa749
	* Fix selabel option flag setting for 64-bit from Stephen Smalley.
0fa749
71cd13
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-2
71cd13
- Change matchpatcon to use syslog instead of syserror
71cd13
31de56
* Thu Sep 13 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
31de56
- Upgrade to latest from NSA
31de56
	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
31de56
	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
31de56
	* Fix swig binding for rpm_execcon from James Athey.
31de56
6a9919
* Thu Sep 6 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-4
6a9919
- Apply James Athway patch to fix rpm_execcon python binding
6a9919
4e3172
* Tue Aug 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-3
4e3172
- Move libselinux.so back into main package, breaks procps
4e3172
4e3172
* Thu Aug 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.31-2
13a4ef
- Upgrade to upstream
13a4ef
	* Fix file_contexts.homedirs path from Todd Miller.
13a4ef
fd5d99
* Tue Aug 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-2
fd5d99
- Remove requirement on setransd,  Moved to selinux-policy-mls 
fd5d99
569b01
* Fri Aug 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
f33088
- Move libselinux.so into devel package
569b01
- Upgrade to upstream
569b01
	* Fix segfault resulting from uninitialized print-callback pointer.
0e2888
	* Added x_contexts path function patch from Eamon Walsh.
0e2888
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
0e2888
	* Fix markup problems in selinux man pages from Dan Walsh.
f33088
6e60f1
* Fri Aug 3 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
6e60f1
- Upgrade to upstream
6e60f1
	* Updated version for stable branch.	
6e60f1
	* Added x_contexts path function patch from Eamon Walsh.
6e60f1
	* Fix build for EMBEDDED=y from Yuichi Nakamura.
6e60f1
	* Fix markup problems in selinux man pages from Dan Walsh.
6e60f1
	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
6e60f1
	* Added swigify to top-level Makefile from Dan Walsh.
6e60f1
	* Fix for string_to_security_class segfault on x86_64 from Stephen
6e60f1
	  Smalley.
6e60f1
44ef5d
* Mon Jul 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-3
44ef5d
- Apply Steven Smalley patch to fix segfault in string_to_security_class
44ef5d
aebde7
* Wed Jul 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-2
aebde7
- Fix matchpathcon to set default myprintf
aebde7
571ac2
* Mon Jul 16 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.24-1
571ac2
- Upgrade to upstream
571ac2
	* Fix for getfilecon() for zero-length contexts from Stephen Smalley.
571ac2
8ffc28
* Wed Jul 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-3
8ffc28
- Update to match flask/access_vectors in policy
8ffc28
8e8fca
* Tue Jul 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
8e8fca
- Fix man page markup lanquage for translations
8e8fca
3e1ba6
* Tue Jun 26 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
3e1ba6
- Fix semanage segfault on x86 platform
3e1ba6
d43108
* Thu Jun 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
d43108
- Upgrade to upstream
d43108
	* Labeling and callback interface patches from Eamon Walsh.
d43108
d43108
* Tue Jun 19 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-2
d43108
- Refactored swig
d43108
2324fe
* Mon Jun 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
2324fe
- Upgrade to upstream
2324fe
	* Class and permission mapping support patches from Eamon Walsh.
2324fe
	* Object class discovery support patches from Chris PeBenito.
2324fe
	* Refactoring and errno support in string representation code.
2324fe
d60d4d
* Fri Jun 1 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
d60d4d
- Upgrade to upstream
876a4a
- Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
876a4a
 This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.
d60d4d
d60d4d
2.0.17 2007-05-31
d60d4d
	* Updated Lindent script and reindented two header files.
d60d4d
35bc5a
* Fri May 4 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
35bc5a
- Upgrade to upstream
35bc5a
	* Merged additional swig python bindings from Dan Walsh.
35bc5a
	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
35bc5a
20f7b1
* Tue Apr 24 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
20f7b1
- Upgrade to upstream
20f7b1
	* Merged build fix for avc_internal.c from Joshua Brindle.
20f7b1
4dca0c
* Mon Apr 23 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-2
4dca0c
- Add get_context_list funcitions to swig file
4dca0c
a11359
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
a11359
- Upgrade to upstream
a11359
	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.
a11359
6265db
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-2
a11359
- Add missing interface
6265db
1b14f6
* Wed Apr 11 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
1b14f6
- Upgrade to upstream
1b14f6
	* Merged support for getting initial contexts from James Carter.
1b14f6
47b511
* Mon Apr 9 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
47b511
- Upgrade to upstream
47b511
	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
47b511
	* Merged sidput(NULL) patch from Eamon Walsh.
47b511
ff4b4d
* Thu Apr 5 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-2
ff4b4d
- Make rpm_exec swig work
ff4b4d
ace2eb
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
ace2eb
- Upgrade to upstream
ace2eb
	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.
ace2eb
9a5349
* Tue Mar 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.8-1
71021c
- Upgrade to upstream
71021c
	* Merged fix for avc.h #include's from Eamon Walsh.
71021c
98a61b
* Thu Mar 22 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-2
98a61b
- Add stdint.h to avc.h
98a61b
22298b
* Mon Mar 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
876a4a
- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
876a4a
- Merged patch to drop support for old /etc/sysconfig/selinux and
876a4a
- /etc/security policy file layout from Steve Grubb.
22298b
edd5aa
* Thu Mar 8 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-2
c7862e
- Do not fail on permission denied in getsebool
c7862e
21eddb
* Tue Feb 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
21eddb
- Upgrade to upstream
21eddb
	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.
21eddb
edd5aa
* Wed Feb 21 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
8efd1e
- Upgrade to upstream
8efd1e
	* Removed sending of setrans init message.
8efd1e
	* Merged matchpathcon memory leak fix from Steve Grubb.
8efd1e
edd5aa
* Tue Feb 20 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
8efd1e
- Upgrade to upstream
8efd1e
	* Merged more swig initializers from Dan Walsh.
8efd1e
edd5aa
* Sun Feb 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
14de1c
- Upgrade to upstream
876a4a
  * Merged patch from Todd Miller to convert int types over to C99 style.
14de1c
29ad08
* Wed Feb 7 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
876a4a
- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
876a4a
  of the use of the non-standard format (original patch changed
876a4a
  for style).
876a4a
- Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
29ad08
	
ad1a68
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-2
ad1a68
- Add context function to python to split context into 4 parts
ad1a68
751b5d
* Fri Jan 19 2007 Dan Walsh <dwalsh@redhat.com> - 1.34.0-1
751b5d
- Upgrade to upstream
751b5d
	* Updated version for stable branch.	
751b5d
751b5d
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.6-1
e1e027
- Upgrade to upstream
e1e027
	* Merged man page updates to make "apropos selinux" work from Dan Walsh.
edd5aa
edd5aa
* Wed Jan 17 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.5-1
53158b
- Upgrade to upstream
53158b
	* Merged getdefaultcon utility from Dan Walsh.
53158b
5f8636
* Mon Jan 15 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
5f8636
- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli
5f8636
a9c082
* Fri Jan 12 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-2
a9c082
- Add reference to selinux man page in all man pages to make apropos work
a9c082
Resolves: # 217881
a9c082
a9c082
* Thu Jan 11 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
1a8c15
- Upstream wanted some minor changes, upgrading to keep api the same
1a8c15
- Upgrade to upstream
1a8c15
	* Merged selinux_check_securetty_context() and support from Dan Walsh.
1a8c15
Resolves: #200110
1a8c15
1a8c15
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-3
e3bd59
- Cleanup patch
e3bd59
e6bab3
* Fri Jan 5 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-2
e6bab3
- Add securetty handling
e6bab3
Resolves: #200110
e6bab3
273c47
* Thu Jan 4 2007 Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
273c47
- Upgrade to upstream
273c47
	* Merged patch for matchpathcon utility to use file mode information
273c47
	  when available from Dan Walsh.
273c47
0ee7a8
* Thu Dec  7 2006 Jeremy Katz <katzj@redhat.com> - 1.33.2-4
0ee7a8
- rebuild against python 2.5
0ee7a8
dbfbfb
* Wed Dec 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-3
dbfbfb
- Fix matchpathcon to lstat files
dbfbfb
846f2a
* Thu Nov 30 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-2
846f2a
- Update man page
846f2a
25aea2
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.2-1
25aea2
- Upgrade to upstream
25aea2
2bcf96
* Fri Nov 3 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
2bcf96
- Add James Antill patch for login verification of MLS Levels
2bcf96
-  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.
2bcf96
c27fc1
* Tue Oct 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
c27fc1
- Upgrade to latest from NSA
c27fc1
	* Merged updated flask definitions from Darrel Goeddel.
c27fc1
 	  This adds the context security class, and also adds
c27fc1
	  the string definitions for setsockcreate and polmatch.
c27fc1
e24dd6
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.32-1
e24dd6
- Upgrade to latest from NSA
e24dd6
	* Updated version for release.
e24dd6
9fcaa3
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.30.29-2
9fcaa3
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
9fcaa3
f6df69
* Fri Sep  29 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
f6df69
- Upgrade to latest from NSA
f6df69
	* Merged av_permissions.h update from Steve Grubb,
f6df69
	  adding setsockcreate and polmatch definitions.
f6df69
950536
* Wed Sep 27 2006 Jeremy Katz <katzj@redhat.com> - 1.30.28-3
950536
- really make -devel depend on libsepol-devel
950536
edd5aa
* Wed Sep  27 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-2
cfd1d1
- Add sgrubb patch for polmatch
cfd1d1
ab4572
* Wed Sep  13 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.28-1
ab4572
- Upgrade to latest from NSA
ab4572
	* Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
ab4572
8a855c
* Tue Sep  5 2006 Jeremy Katz <katzj@redhat.com> - 1.30.27-2
8a855c
- have -devel require libsepol-devel
8a855c
7bdc60
* Thu Aug 24 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
7bdc60
- Upgrade to latest from NSA
7bdc60
	* Merged patch to not log avc stats upon a reset from Steve Grubb.
7bdc60
	* Applied patch to revert compat_net setting upon policy load.
7bdc60
	* Merged file context homedir and local path functions from
7bdc60
	  Chris PeBenito.
7bdc60
88e5d3
* Fri Aug 18 2006 Jesse Keating <jkeating@redhat.com> - 1.20.26-2
88e5d3
- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
88e5d3
  (#203001)
88e5d3
77a0d2
* Sat Aug  12 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
77a0d2
- Upgrade to latest from NSA
77a0d2
	* Merged file context homedir and local path functions from
77a0d2
	  Chris PeBenito.
77a0d2
	* Rework functions that access /proc/pid/attr to access the
77a0d2
	  per-thread nodes, and unify the code to simplify maintenance.
77a0d2
243c67
* Fri Aug  11 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
243c67
- Upgrade to latest from NSA
243c67
	* Merged return value fix for *getfilecon() from Dan Walsh.
243c67
	* Merged sockcreate interfaces from Eric Paris.
243c67
b7bdc6
* Wed Aug  9 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-2
b7bdc6
- Fix translation return codes to return size of buffer
b7bdc6
ef26b8
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
ef26b8
- Upgrade to latest from NSA
ef26b8
	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
ef26b8
	* Merged netfilter_contexts support patch from Chris PeBenito.
ef26b8
61ba66
* Tue Aug  1 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.20-1
61ba66
- Upgrade to latest from NSA
61ba66
	* Merged context_*_set errno patch from Jim Meyering.
61ba66
75675c
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-5
75675c
- only build non-fpic objects with -mno-tls-direct-seg-refs
75675c
be0d45
* Tue Aug  1 2006 Jeremy Katz <katzj@redhat.com> - 1.30.19-4
be0d45
- build with -mno-tls-direct-seg-refs on x86 to avoid triggering 
be0d45
  segfaults with xen (#200783)  
be0d45
5a5a28
* Mon Jul 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-3
5a5a28
- Rebuild for new gcc
5a5a28
1e7c36
* Tue Jul 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-2
1e7c36
- Fix libselinux to not telinit during installs
1e7c36
aa27b6
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.19-1
aa27b6
- Upgrade to latest from NSA
aa27b6
	* Lindent.
aa27b6
	* Merged {get,set}procattrcon patch set from Eric Paris.
aa27b6
	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
aa27b6
	* Regenerated Flask headers from refpolicy.
aa27b6
	* Merged patch from Dan Walsh with:
aa27b6
	  - Added selinux_file_context_{cmp,verify}.
aa27b6
	  - Added selinux_lsetfilecon_default.
aa27b6
	  - Delay translation of contexts in matchpathcon.
aa27b6
799720
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-5
799720
- Yet another change to matchpathcon
799720
f4b45d
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-4
f4b45d
- Turn off error printing in library.  Need to compile with DEBUG to get it back
f4b45d
2d9b36
* Wed Jun 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-3
2d9b36
- Fix error reporting of matchpathcon
2d9b36
645f93
* Mon Jun 19 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-2
645f93
- Add function to compare file context on disk versus contexts in file_contexts file.
645f93
e60c84
* Fri Jun 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.15-1
e60c84
- Upgrade to latest from NSA
e60c84
	* Merged patch from Dan Walsh with:
e1e36a
	* Added selinux_getpolicytype() function.
e1e36a
	* Modified setrans code to skip processing if !mls_enabled.
e60c84
	* Set errno in the !selinux_mnt case.
e60c84
	* Allocate large buffers from the heap, not on stack.
e60c84
	  Affects is_context_customizable, selinux_init_load_policy,
e60c84
	  and selinux_getenforcemode.
e60c84
838943
* Thu Jun 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-2
838943
- Add selinux_getpolicytype()
838943
af1839
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.12-1
af1839
- Upgrade to latest from NSA
af1839
	* Merged !selinux_mnt checks from Ian Kent.
af1839
f3cb9d
* Thu Jun 1 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-2
f3cb9d
- Check for selinux_mnt == NULL
f3cb9d
9cf72e
* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1
876a4a
- Merged matchmediacon and trans_to_raw_context fixes from 
876a4a
  Serge Hallyn.
9cf72e
cd024c
* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4
cd024c
- Remove getseuser
cd024c
d1291e
* Thu May 25 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-3
d1291e
- Bump requires to grab latest libsepol
d1291e
389a79
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-2
389a79
- Add BuildRequires for swig
389a79
96ed36
* Tue May 23 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1
96ed36
- Upgrade to latest from NSA
96ed36
	* Merged simple setrans client cache from Dan Walsh.
96ed36
	  Merged avcstat patch from Russell Coker.
96ed36
	* Modified selinux_mkload_policy() to also set /selinux/compat_net
96ed36
	  appropriately for the loaded policy.
96ed36
8f927c
* Thu May 18 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1
8f927c
- More fixes for translation cache
8f927c
- Upgrade to latest from NSA
8f927c
	* Added matchpathcon_fini() function to free memory allocated by
8f927c
	  matchpathcon_init().
8f927c
8f927c
* Wed May 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-2
8f927c
- Add simple cache to improve translation speed
8f927c
b71bf0
* Tue May 16 2006 Dan Walsh <dwalsh@redhat.com> 1.30.7-1
b71bf0
- Upgrade to latest from NSA
b71bf0
	* Merged setrans client cleanup patch from Steve Grubb.
b71bf0
069461
* Tue May 9 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2
069461
- Add Russell's AVC patch to handle large numbers
069461
20222f
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1
20222f
- Upgrade to latest from NSA
20222f
	* Merged getfscreatecon man page fix from Dan Walsh.
20222f
	* Updated booleans(8) man page to drop references to the old
20222f
	  booleans file and to note that setsebool can be used to set
20222f
	  the boot-time defaults via -P.
20222f
98a597
* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.5-1
20222f
- Upgrade to latest from NSA
98a597
	* Merged fix warnings patch from Karl MacMillan.	
98a597
	* Merged setrans client support from Dan Walsh.
98a597
	  This removes use of libsetrans.
98a597
	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
98a597
	* Merged swig typemap fixes from Glauber de Oliveira Costa.
98a597
98a597
* Wed May 3 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-3
98a597
- Change the way translations work,  Use setransd/remove libsetrans
98a597
75c50e
* Tue May 2 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-2
75c50e
- Add selinuxswig fixes
a92515
- Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)
75c50e
ea8c62
* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.3-1
ea8c62
- Upgrade to latest from NSA
ea8c62
	* Added distclean target to Makefile.
ea8c62
	* Regenerated swig files.
ea8c62
	* Changed matchpathcon_init to verify that the spec file is
ea8c62
	  a regular file.
ea8c62
	* Merged python binding t_output_helper removal patch from Dan Walsh.
ea8c62
edd5aa
* Tue Apr 11 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2
fed1ce
- Fix python bindings for matchpathcon
fed1ce
- Fix booleans man page
fed1ce
c8030d
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1
876a4a
- Merged Makefile PYLIBVER definition patch from Dan Walsh.
c8030d
d27dc9
* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1
d27dc9
- Make some fixes so it will build on RHEL4
d27dc9
- Upgrade to latest from NSA
d27dc9
	* Updated version for release.
d27dc9
	* Altered rpm_execcon fallback logic for permissive mode to also
d27dc9
	  handle case where /selinux/enforce is not available.
d27dc9
b531c7
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.2
b531c7
- bump again for double-long bug on ppc(64)
b531c7
79e895
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.29.7-1.1
79e895
- rebuilt for new gcc4.1 snapshot and glibc changes
79e895
6a494f
* Fri Jan 20 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-1
6a494f
- Upgrade to latest from NSA
6a494f
	* Merged install-pywrap Makefile patch from Joshua Brindle.
6a494f
fd8295
* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.6-1
fd8295
- Upgrade to latest from NSA
fd8295
	* Merged pywrap Makefile patch from Dan Walsh.
fd8295
f4d57a
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-2
f4d57a
- Split out pywrap in Makefile
f4d57a
ee0a60
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-1
ee0a60
- Upgrade to latest from NSA
ee0a60
	* Added getseuser test program.
ee0a60
edd5aa
* Fri Jan 6 2006 Dan Walsh <dwalsh@redhat.com> 1.29.4-1
9ad8aa
- Upgrade to latest from NSA
9ad8aa
	* Added format attribute to myprintf in matchpathcon.c and
9ad8aa
	  removed obsoleted rootlen variable in init_selinux_config().
9ad8aa
9ad8aa
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-2
fb1f51
- Build with new libsepol
fb1f51
dab5a2
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-1
dab5a2
- Upgrade to latest from NSA
dab5a2
	* Merged several fixes and improvements from Ulrich Drepper
dab5a2
	  (Red Hat), including:
dab5a2
	  - corrected use of getline
dab5a2
	  - further calls to __fsetlocking for local files
dab5a2
	  - use of strdupa and asprintf
dab5a2
	  - proper handling of dirent in booleans code
dab5a2
	  - use of -z relro
dab5a2
	  - several other optimizations
dab5a2
	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).
dab5a2
cac488
* Sat Dec 24 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4
cac488
- Add build requires line for libsepol-devel
cac488
407234
* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3
407234
- Fix swig call for getpidcon
407234
41b7ee
* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-2
41b7ee
- Move libselinux.so to base package
41b7ee
6c4b73
* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-1
6c4b73
- Upgrade to latest from NSA
6c4b73
	* Merged call to finish_context_translations from Dan Walsh.
6c4b73
	  This eliminates a memory leak from failing to release memory
6c4b73
	  allocated by libsetrans.
6c4b73
337116
* Sun Dec 11 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-3
d21de0
- update to latest libsetrans  
337116
- Fix potential memory leak
d21de0
16eca6
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
16eca6
- rebuilt
16eca6
2774b7
* Thu Dec 8 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
2774b7
- Update to never version
2774b7
	* Merged patch for swig interfaces from Dan Walsh.
2774b7
a73f67
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
710322
- Update to never version
710322
710322
* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-2
0e39b7
- Fix some of the python swig objects
0e39b7
38b50d
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-1
38b50d
- Update to latest from NSA
38b50d
	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
38b50d
	  modified matchpathcon implementation to make context validation/
38b50d
	  canonicalization optional at matchpathcon_init time, deferring it
38b50d
	  to a successful matchpathcon by default unless the new flag is set
38b50d
	  by the caller.
38b50d
	* Added matchpathcon_init_prefix() interface, and
38b50d
	  reworked matchpathcon implementation to support selective
38b50d
	  loading of file contexts entries based on prefix matching
38b50d
	  between the pathname regex stems and the specified path
38b50d
	  prefix (stem must be a prefix of the specified path prefix).
38b50d
827fc8
* Wed Nov 30 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-1
827fc8
- Update to latest from NSA
827fc8
	* Change getsebool to return on/off instead of active/inactive
56d326
116a5b
* Tue Nov 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.25-1
116a5b
- Update to latest from NSA
116a5b
	* Added -f file_contexts option to matchpathcon util.
116a5b
	  Fixed warning message in matchpathcon_init().
116a5b
	* Merged Makefile python definitions patch from Dan Walsh.
116a5b
998386
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.23-1
116a5b
- Update to latest from NSA
998386
	* Merged swigify patch from Dan Walsh.
998386
4bb08c
* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-4
4bb08c
- Separate out libselinux-python bindings into separate rpm
4bb08c
555b91
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-3
4bb08c
- Read libsetrans requirement
555b91
ae85aa
* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-2
ae85aa
- Add python bindings
ae85aa
ac2f72
* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.27.22-1
ac2f72
- Update to latest from NSA
ac2f72
	* Merged make failure in rpm_execcon non-fatal in permissive mode
ac2f72
	  patch from Ivan Gyurdiev.
ac2f72
f0d840
* Tue Nov 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-2
f0d840
- Remove requirement for libsetrans
f0d840
848a7f
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.21-1
848a7f
- Update to latest from NSA
848a7f
	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
848a7f
	  and modified matchpathcon_init() to skip context translation
848a7f
	  if it is set by the caller.
848a7f
e6236d
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
e6236d
- Update to latest from NSA
e6236d
	* Added security_canonicalize_context() interface and
e6236d
	  set_matchpathcon_canoncon() interface for obtaining
e6236d
	  canonical contexts.  Changed matchpathcon internals
e6236d
	  to obtain canonical contexts by default.  Provided
e6236d
	  fallback for kernels that lack extended selinuxfs context
e6236d
	  interface.
70810f
- Patch to not translate mls when calling setfiles
70810f
8f768f
* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1
8f768f
- Update to latest from NSA
8f768f
	* Merged seusers parser changes from Ivan Gyurdiev.
8f768f
	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
8f768f
	* Changed seusers parser to reject empty fields.
8f768f
e559de
* Fri Nov 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.18-1
8f768f
- Update to latest from NSA
e559de
	* Merged seusers empty level handling patch from Jonathan Kim (TCS).
e559de
da7a01
* Thu Nov 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-4
93060b
- Rebuild for latest libsepol
93060b
597ff8
* Mon Oct 31 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-2
597ff8
- Rebuild for latest libsepol
597ff8
08d224
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-1
9f412a
- Change default to __default__
9f412a
08d224
* Wed Oct 26 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-3
08d224
- Change default to __default__
08d224
08d224
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-2
54939f
- Add selinux_translations_path
54939f
08d224
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-1
230098
- Update to latest from NSA
230098
	* Merged selinux_path() and selinux_homedir_context_path()
230098
	  functions from Joshua Brindle.
230098
08d224
* Fri Oct 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-2
f6b11f
- Need to check for /sbin/telinit
f6b11f
3ef1de
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-1
3ef1de
- Update to latest from NSA
3ef1de
	* Merged fixes for make DESTDIR= builds from Joshua Brindle.
3ef1de
78dc04
* Mon Oct 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.12-1
78dc04
- Update to latest from NSA
78dc04
	* Merged get_default_context_with_rolelevel and man pages from
78dc04
	  Dan Walsh (Red Hat).
78dc04
	* Updated call to sepol_policydb_to_image for sepol changes.
78dc04
	* Changed getseuserbyname to ignore empty lines and to handle
78dc04
	no matching entry in the same manner as no seusers file.
614279
d5c6e7
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2
d5c6e7
- Tell init to reexec itself in post script
d5c6e7
c52127
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-1
c52127
- Update to latest from NSA
c52127
	* Changed selinux_mkload_policy to try downgrading the
c52127
	latest policy version available to the kernel-supported version.
c52127
	* Changed selinux_mkload_policy to fall back to the maximum
c52127
	policy version supported by libsepol if the kernel policy version
c52127
	falls outside of the supported range.
c52127
b19e5c
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1
b19e5c
- Update to latest from NSA
b19e5c
	* Changed getseuserbyname to fall back to the Linux username and
b19e5c
	NULL level if seusers config file doesn't exist unless 
b19e5c
	REQUIRESEUSERS=1 is set in /etc/selinux/config.
b19e5c
	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.
b19e5c
33b553
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
33b553
- Update to latest from NSA
33b553
	* Added selinux_init_load_policy() function as an even higher level
33b553
	interface for the initial policy load by /sbin/init.  This obsoletes
33b553
	the load_policy() function in the sysvinit-selinux.patch. 
33b553
	* Added selinux_mkload_policy() function as a higher level interface
33b553
	for loading policy than the security_load_policy() interface.
33b553
90c281
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.4-1
90c281
- Update to latest from NSA
90c281
	* Merged fix for matchpathcon (regcomp error checking) from Johan
90c281
	Fischer.  Also added use of regerror to obtain the error string
90c281
	for inclusion in the error message.
90c281
f76369
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
f76369
- Update to latest from NSA
f76369
	* Changed getseuserbyname to not require (and ignore if present)
f76369
	the MLS level in seusers.conf if MLS is disabled, setting *level
f76369
	to NULL in this case.
f76369
1cfd4d
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1
1cfd4d
- Update to latest from NSA
1cfd4d
	* Merged getseuserbyname patch from Dan Walsh.
1cfd4d
4dc4d1
* Thu Sep 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-3
4dc4d1
- Fix patch to satisfy upstream
4dc4d1
bebb52
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-2
bebb52
- Update to latest from NSA
bebb52
- Add getseuserbyname
bebb52
edd5aa
* Fri Sep 16 2005 Dan Walsh <dwalsh@redhat.com> 1.26-6
fedf82
- Fix patch call
fedf82
edd5aa
* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-5
b86cfc
- Fix strip_con call
b86cfc
edd5aa
* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-3
c2b28e
- Go back to original libsetrans code
c2b28e
bc0a93
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
bc0a93
- Eliminate forth param from mls context when mls is not enabled.
bc0a93
99ddec
* Tue Sep 6 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-1
99ddec
- Update from NSA
99ddec
	* Merged modified form of patch to avoid dlopen/dlclose by
99ddec
	the static libselinux from Dan Walsh.  Users of the static libselinux
99ddec
	will not have any context translation by default.
99ddec
59d655
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.6-1
59d655
- Update from NSA
59d655
	* Added public functions to export context translation to
59d655
	users of libselinux (selinux_trans_to_raw_context,
59d655
	selinux_raw_to_trans_context).
59d655
eb500f
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
eb500f
- Update from NSA
eb500f
	* Remove special definition for context_range_set; use
eb500f
	common code.
eb500f
d3d9f9
* Thu Aug 25 2005 Dan Walsh <dwalsh@redhat.com> 1.25.4-1
d3d9f9
- Update from NSA
d3d9f9
	* Hid translation-related symbols entirely and ensured that 
d3d9f9
	raw functions have hidden definitions for internal use.
d3d9f9
	* Allowed setting NULL via context_set* functions.
d3d9f9
	* Allowed whitespace in MLS component of context.
d3d9f9
	* Changed rpm_execcon to use translated functions to workaround
d3d9f9
	lack of MLS level on upgraded systems.
d3d9f9
d3d9f9
* Wed Aug 24 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-2
d3d9f9
- Allow set_comp on unset ranges
d3d9f9
e7e35d
* Wed Aug 24 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
876a4a
- Merged context translation patch, originally by TCS,
876a4a
  with modifications by Dan Walsh (Red Hat).
e7e35d
e7e35d
* Wed Aug 17 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-2
e7e35d
- Apply translation patch
e7e35d
1f935e
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
1f935e
- Update from NSA
1f935e
	* Merged several fixes for error handling paths in the
1f935e
	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
e1e36a
	  code from Serge Hallyn (IBM). Bugs found by Coverity.
1f935e
	* Removed setupns; migrated to pam.
1f935e
	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
1f935e
	  Original symbol is temporarily retained for compatibility until 
1f935e
	  all callers are updated.
1f935e
856cdc
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.24.2-1
44200d
- Update makefiles
44200d
67d0ac
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.24.1-1
67d0ac
- Update from NSA
67d0ac
	* Merged security_setupns() from Chad Sellers.
67d0ac
- fix selinuxenabled man page