diff --git a/libselinux-rhat.patch b/libselinux-rhat.patch index ce63f1b..b56024b 100644 --- a/libselinux-rhat.patch +++ b/libselinux-rhat.patch @@ -1,16 +1,63 @@ diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/fgetfilecon.3 libselinux-2.0.71/man/man3/fgetfilecon.3 --- nsalibselinux/man/man3/fgetfilecon.3 1969-12-31 19:00:00.000000000 -0500 -+++ libselinux-2.0.71/man/man3/fgetfilecon.3 2008-09-09 14:30:58.000000000 -0400 ++++ libselinux-2.0.71/man/man3/fgetfilecon.3 2008-09-09 16:21:46.000000000 -0400 @@ -0,0 +1 @@ +.so man3/getfilecon.3 +diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getkeycreatecon.3 libselinux-2.0.71/man/man3/getkeycreatecon.3 +--- nsalibselinux/man/man3/getkeycreatecon.3 1969-12-31 19:00:00.000000000 -0500 ++++ libselinux-2.0.71/man/man3/getkeycreatecon.3 2008-09-09 16:21:49.000000000 -0400 +@@ -0,0 +1,38 @@ ++.TH "getkeycreatecon" "3" "9 September 2008" "dwalsh@redhat.com from russell@coker.com.au" "SELinux API documentation" ++.SH "NAME" ++getkeycreatecon, setkeycreatecon \- get or set the SELinux security context used for creating a new kernel keyrings. ++ ++.SH "SYNOPSIS" ++.B #include ++.sp ++.BI "int getkeycreatecon(security_context_t *" con ); ++ ++.BI "int setkeycreatecon(security_context_t "context ); ++ ++.SH "DESCRIPTION" ++.B getkeycreatecon ++retrieves the context used for creating a new kernel keyring. ++This returned context should be freed with freecon if non-NULL. ++getkeycreatecon sets *con to NULL if no keycreate context has been explicitly ++set by the program (i.e. using the default policy behavior). ++ ++.B setkeycreatecon ++sets the context used for creating a new kernel keyring. ++NULL can be passed to ++setkeycreatecon to reset to the default policy behavior. ++The keycreate context is automatically reset after the next execve, so a ++program doesn't need to explicitly sanitize it upon startup. ++ ++setkeycreatecon can be applied prior to library ++functions that internally perform an file creation, ++in order to set an file context on the objects. ++ ++ ++Note: Signal handlers that perform an setkeycreate must take care to ++save, reset, and restore the keycreate context to avoid unexpected behavior. ++.SH "RETURN VALUE" ++On error -1 is returned. ++On success 0 is returned. ++ ++.SH "SEE ALSO" ++.BR selinux "(8), " freecon "(3), " getcon "(3), " getexeccon "(3)" diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/lgetfilecon.3 libselinux-2.0.71/man/man3/lgetfilecon.3 --- nsalibselinux/man/man3/lgetfilecon.3 1969-12-31 19:00:00.000000000 -0500 -+++ libselinux-2.0.71/man/man3/lgetfilecon.3 2008-09-09 14:30:43.000000000 -0400 ++++ libselinux-2.0.71/man/man3/lgetfilecon.3 2008-09-09 16:21:46.000000000 -0400 @@ -0,0 +1 @@ +.so man3/getfilecon.3 +diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/setkeycreatecon.3 libselinux-2.0.71/man/man3/setkeycreatecon.3 +--- nsalibselinux/man/man3/setkeycreatecon.3 1969-12-31 19:00:00.000000000 -0500 ++++ libselinux-2.0.71/man/man3/setkeycreatecon.3 2008-09-09 16:22:09.000000000 -0400 +@@ -0,0 +1 @@ ++.so man3/getkeycreatecon.3 diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinuxconlist.8 libselinux-2.0.71/man/man8/selinuxconlist.8 --- nsalibselinux/man/man8/selinuxconlist.8 1969-12-31 19:00:00.000000000 -0500 -+++ libselinux-2.0.71/man/man8/selinuxconlist.8 2008-08-13 09:01:48.000000000 -0400 ++++ libselinux-2.0.71/man/man8/selinuxconlist.8 2008-09-09 16:21:46.000000000 -0400 @@ -0,0 +1,18 @@ +.TH "selinuxconlist" "1" "7 May 2008" "dwalsh@redhat.com" "SELinux Command Line documentation" +.SH "NAME" @@ -32,7 +79,7 @@ diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinuxconlist.8 lib +secon(8), selinuxdefcon(8) diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinuxdefcon.8 libselinux-2.0.71/man/man8/selinuxdefcon.8 --- nsalibselinux/man/man8/selinuxdefcon.8 1969-12-31 19:00:00.000000000 -0500 -+++ libselinux-2.0.71/man/man8/selinuxdefcon.8 2008-08-13 09:01:48.000000000 -0400 ++++ libselinux-2.0.71/man/man8/selinuxdefcon.8 2008-09-09 16:21:46.000000000 -0400 @@ -0,0 +1,19 @@ +.TH "selinuxdefcon" "1" "7 May 2008" "dwalsh@redhat.com" "SELinux Command Line documentation" +.SH "NAME" @@ -55,7 +102,7 @@ diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinuxdefcon.8 libs +secon(8), selinuxconlist(8) diff --exclude-from=exclude -N -u -r nsalibselinux/src/callbacks.c libselinux-2.0.71/src/callbacks.c --- nsalibselinux/src/callbacks.c 2008-08-28 09:34:24.000000000 -0400 -+++ libselinux-2.0.71/src/callbacks.c 2008-08-13 09:01:48.000000000 -0400 ++++ libselinux-2.0.71/src/callbacks.c 2008-09-09 16:21:46.000000000 -0400 @@ -16,6 +16,7 @@ { int rc; @@ -66,7 +113,7 @@ diff --exclude-from=exclude -N -u -r nsalibselinux/src/callbacks.c libselinux-2. va_end(ap); diff --exclude-from=exclude -N -u -r nsalibselinux/src/matchpathcon.c libselinux-2.0.71/src/matchpathcon.c --- nsalibselinux/src/matchpathcon.c 2008-08-28 09:34:24.000000000 -0400 -+++ libselinux-2.0.71/src/matchpathcon.c 2008-08-13 09:01:48.000000000 -0400 ++++ libselinux-2.0.71/src/matchpathcon.c 2008-09-09 16:21:46.000000000 -0400 @@ -2,6 +2,7 @@ #include #include diff --git a/libselinux.spec b/libselinux.spec index bb1c6c1..3af7618 100644 --- a/libselinux.spec +++ b/libselinux.spec @@ -5,7 +5,7 @@ Summary: SELinux library and simple utilities Name: libselinux Version: 2.0.71 -Release: 3%{?dist} +Release: 4%{?dist} License: Public Domain Group: System Environment/Libraries Source: http://www.nsa.gov/selinux/archives/%{name}-%{version}.tgz @@ -163,6 +163,9 @@ exit 0 %{ruby_sitearch}/selinux.so %changelog +* Tue Sep 9 2008 Dan Walsh - 2.0.71-4 +- Add missing get/setkeycreatecon man pages + * Tue Sep 9 2008 Dan Walsh - 2.0.71-3 - Split out utilities