diff --git a/.cvsignore b/.cvsignore index e399b3b..92a3c4c 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -libselinux-1.17.5.tgz +libselinux-1.17.6.tgz diff --git a/libselinux-rhat.patch b/libselinux-rhat.patch new file mode 100644 index 0000000..db0a6bb --- /dev/null +++ b/libselinux-rhat.patch @@ -0,0 +1,21 @@ +--- libselinux-1.17.5/src/selinux_config.c.rhat 2004-08-31 11:21:16.000000000 -0400 ++++ libselinux-1.17.5/src/selinux_config.c 2004-08-31 13:47:56.906874190 -0400 +@@ -93,15 +93,15 @@ + while (fgets_unlocked(buf, 4096, cfg)) { + if (strncmp(buf,SELINUXTAG,len)) + continue; +- if (!strncmp(buf+len,"enforcing",sizeof("enforcing")-1)) { ++ if (!strncasecmp(buf+len,"enforcing",sizeof("enforcing")-1)) { + *enforce = 1; + ret=0; + break; +- } else if (!strncmp(buf+len,"permissive",sizeof("permissive")-1)) { ++ } else if (!strncasecmp(buf+len,"permissive",sizeof("permissive")-1)) { + *enforce = 0; + ret=0; + break; +- } else if (!strncmp(buf+len,"disabled",sizeof("disabled")-1)) { ++ } else if (!strncasecmp(buf+len,"disabled",sizeof("disabled")-1)) { + *enforce = -1; + ret=0; + break; diff --git a/libselinux.spec b/libselinux.spec index ec8865a..e83dfaf 100644 --- a/libselinux.spec +++ b/libselinux.spec @@ -1,11 +1,11 @@ Summary: SELinux library and simple utilities Name: libselinux -Version: 1.17.5 +Version: 1.17.6 Release: 1 License: Public domain (uncopyrighted) Group: System Environment/Libraries Source: http://www.nsa.gov/selinux/archives/libselinux-%{version}.tgz -#Patch: libselinux-rhat.patch +Patch: libselinux-rhat.patch Prefix: %{_prefix} BuildRoot: %{_tmppath}/%{name}-buildroot Provides: libselinux.so @@ -36,7 +36,7 @@ needed for developing SELinux applications. %prep %setup -q -#%patch -p1 -b .rhat +%patch -p1 -b .rhat %build make CFLAGS="%{optflags}" @@ -70,6 +70,24 @@ rm -rf ${RPM_BUILD_ROOT} %{_mandir}/man8/* %changelog +* Tue Aug 31 2004 Dan Walsh 1.17.6-1 +- Add strcasecmp in selinux_config +- Update from NSA + * Changed avc_has_perm_noaudit to not fail on netlink errors. + * Changed avc netlink code to check pid based on patch by Steve Grubb. + * Merged second optimization patch from Ulrich Drepper. + * Changed matchpathcon to skip invalid file_contexts entries. + * Made string tables private to libselinux. + * Merged strcat->stpcpy patch from Ulrich Drepper. + * Merged matchpathcon man page from Dan Walsh. + * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. + * Autobind netlink socket. + * Dropped compatibility code from security_compute_user. + * Merged fix for context_range_set from Chad Hanson. + * Merged allocation failure checking patch from Chad Hanson. + * Merged avc netlink error message patch from Colin Walters. + + * Mon Aug 30 2004 Dan Walsh 1.17.5-1 - Update from NSA * Merged second optimization patch from Ulrich Drepper. diff --git a/sources b/sources index 3c0b19d..e35cbef 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -aa54442e58f6e063c2894ec20bd47307 libselinux-1.17.5.tgz +b0d93c109e9bdcdd148e6756931152f6 libselinux-1.17.6.tgz