872 lines
30 KiB
Plaintext
872 lines
30 KiB
Plaintext
2.6-rc1 2016-09-30
|
|
* make distclean target work, from Nicolas Iooss.
|
|
* Do not always print a module name warning, from Miroslav Grepl.
|
|
* Use pp module name instead of filename when installing module, from Petr Lautrbach.
|
|
* tests: Do not force using gcc, from Nicolas Iooss.
|
|
* genhomedircon: remove hardcoded refpolicy strings, from Gary Tierney.
|
|
* genhomedircon: add support for %group syntax, from Gary Tierney.
|
|
* genhomedircon: generate contexts for logins mapped to the default user, from Gary Tierney.
|
|
* Validate and compile file contexts before installing, from Stephen Smalley.
|
|
* Swap tcp and udp protocol numbers, from Miroslav Vadkerti.
|
|
* Sort object files for deterministic linking order, from Laurent Bigonville.
|
|
* Support overriding Makefile RANLIB, from Julien Pivotto.
|
|
* Respect CC and PKG_CONFIG environment variable, from Julien Pivotto.
|
|
* Fix multiple spelling errors, from Laurent Bigonville.
|
|
* genhomedircon: %{USERID} and %{USERNAME} support and code cleanups, from Jason Zaman.
|
|
|
|
2.5 2016-02-23
|
|
* Do not overwrite CFLAGS in test Makefile, from Nicolas Iooss.
|
|
* Fix uninitialized variable in direct_commit and direct_api, from Nicolas Iooss.
|
|
* semanage_migrate_store: Load libsepol.so.1 instead of libsepol.so, from Laurent Bigonville.
|
|
* Store homedir_template and users_extra in policy store, from Steve Lawrence
|
|
* Fix null pointer dereference in semanage_module_key_destroy, from Yuli Khodorkovskiy.
|
|
* Add semanage_module_extract() to extract a module as CIL or HLL, from Yuli Khodorkovskiy.
|
|
* semanage_migrate_store: add -r <root> option for migrating inside chroots, from Petr Lautrbach.
|
|
* Add file_contexts and seusers to the store, from Yuli Khodorkovskiy.
|
|
* Add policy binary and file_contexts.local to the store, from Yuli Khodorkovskiy.
|
|
* Allow to install compressed modules without a compression extension,
|
|
from Petr Lautrbach.
|
|
* Do not copy contexts in semanage_migrate_store, from Jason Zaman.
|
|
* Fix logic in bunzip for uncompressed pp files, from Thomas Hurd.
|
|
* Fix fname[] initialization in test_utilities.c, from Petr Lautrbach.
|
|
* Add remove-hll semanage.conf option to remove HLL files after
|
|
compilation to CIL, from Yuli Khodorkovskiy
|
|
* Fix memory leaks when parsing semanage.conf, from Yuli Khodorkovskiy
|
|
* Change bunzip to use heap instead of stack to prevent segfault on
|
|
systems with small stack size, from Thomas Hurd.
|
|
|
|
2.4 2015-02-02
|
|
* Fix Makefile to allow LIBDIR and SHLIBDIR to be set to different
|
|
directories, from Steve Lawrence
|
|
* Fix bugs found by hardened gcc flags, from Nicolas Iooss.
|
|
* Add missing manpage links to security_load_policy, from Laurent
|
|
Bigonville.
|
|
* Fix failing libsemanage pywrap tests, from Nicolas Iooss
|
|
* Fix deprecation warning for bison, from Ilya Frolov
|
|
* Skip policy module relink when only setting booleans, from Stephen
|
|
Smalley
|
|
* Fix typo in tests makefile, from Caleb Case
|
|
* Only try to compile file contexts if they exist, from Steve Lawrence
|
|
* Fix memory leak when setting a custom store path, from Yuli
|
|
Khodorkovskiy
|
|
* Add semodule option to set store root path in semanage.conf and the
|
|
semodule command, from Yuli Khodorkovskiy
|
|
* Add semanage.conf option to set an alternative root path for policy
|
|
store, from Yuli Khodorkovskiy
|
|
* Add support for High Level Language (HLL) to CIL compilers. The HLL
|
|
compiler path is configurable, but should be placed in
|
|
/usr/libexec/selinux/hll by default, from Yuli Khodorkovskiy
|
|
* Create a policy migration script for migrating the policy store from
|
|
/etc/selinux to /var/lib/selinux, from Caleb Case
|
|
* Add python3 support to the migration script, from Jason Zaman
|
|
* Use libcil to compile modules, from Steve Lawrence
|
|
* Use symbolic versioning to maintain ABI compatibility for old install
|
|
functions, from Yuli Khodorkovskiy
|
|
* Add a target-platform option to semanage.conf to control how policies
|
|
are built, from Steve Lawrence
|
|
* Add API to handle modules and source policies, moving module store to
|
|
/var/lib/selinux, from Caleb Case
|
|
* Only try to compile file contexts if they exist, from Steve Lawrence
|
|
|
|
2.3 2014-05-06
|
|
* Fix memory leak in semanage_genhomedircon from Thomas Hurd.
|
|
|
|
2.2 2013-10-30
|
|
* Avoid duplicate list entries from Dan Walsh.
|
|
* Add audit support to libsemanage from Dan Walsh.
|
|
* Remove policy.kern and replace with symlink from Dan Walsh.
|
|
* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
|
|
* Fix man pages from Laurent Bigonville.
|
|
|
|
2.1.10 2013-02-01
|
|
* Add sefcontext_compile to compile regex everytime policy is rebuilt
|
|
* Cleanup/fix enable/disable/remove module.
|
|
* redo genhomedircon minuid
|
|
* fixes from coverity
|
|
* semanage_store: do not leak memory in semanage_exec_prog
|
|
* genhomedircon: remove useless conditional in get_home_dirs
|
|
* genhomedircon: double free in get_home_dirs
|
|
* fcontext_record: do not leak on error in semanage_fcontext_key_create
|
|
* genhomedircon: do not leak on failure in write_gen_home_dir_context
|
|
* semanage_store: do not leak fd
|
|
* genhomedircon: do not leak shells list
|
|
* semanage_store: do not leak on strdup failure
|
|
* semanage_store: rewrite for readability
|
|
|
|
2.1.9 2012-09-13
|
|
* libsemanage: do not set soname needlessly
|
|
* libsemanage: remove PYTHONLIBDIR and ruby equivalent
|
|
* do boolean name substitution
|
|
* Fix segfault for building standard policies.
|
|
|
|
2.1.8 2012-06-28
|
|
* remove build warning when build swig c files
|
|
* additional makefile support for rubywrap
|
|
* ignore 80 column limit for readability
|
|
* semanage_store: fix snprintf length argument by using asprintf
|
|
* Use default semanage.conf as a fallback
|
|
* use after free in python bindings
|
|
|
|
2.1.7 2012-03-28
|
|
* Alternate path for semanage.conf
|
|
* do not link against libpython, this is considered bad in Debian
|
|
* Allow to build for several ruby version
|
|
* fallback-user-level
|
|
|
|
2.1.6 2011-12-21
|
|
* add ignoredirs config for genhomedircon
|
|
* Fallback_user_level can be NULL if you are not using MLS
|
|
|
|
2.1.5 2011-11-03
|
|
* regenerate .pc on VERSION change
|
|
* maintain mode even if umask is tighter
|
|
* semanage.conf man page
|
|
* create man5dir if not exist
|
|
|
|
2.1.4 2011-09-15
|
|
* Create a new preserve_tunables flag
|
|
* tree: default make target to all not
|
|
* fix semanage_store_access_check calling arguments
|
|
|
|
2.1.3 2011-08-26
|
|
* python wrapper makefile changes
|
|
|
|
2.1.2 2011-08-17
|
|
* print error debug info for buggy fc
|
|
* introduce semanage_set_root and friends
|
|
* throw exceptions in python rather than return
|
|
* python3 support.
|
|
* patch for MCS/MLS in user files
|
|
|
|
2.1.1 2011-08-01
|
|
* Remove generated files, expand .gitignore
|
|
* Use -Werror and change a few prototypes to support it
|
|
|
|
2.1.0 2011-07-27
|
|
* Release, minor version bump
|
|
|
|
2.0.46 2010-12-16
|
|
* Fix compliation under GCC 4.6 by Justin Mattock
|
|
|
|
2.0.45 2010-03-06
|
|
* Add enable/disable patch support from Dan Walsh.
|
|
* Add usepasswd flag to semanage.conf to disable genhomedircon using
|
|
passwd from Dan Walsh.
|
|
* regenerate swig wrappers
|
|
|
|
2.0.44 2010-02-02
|
|
* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
|
|
glibc < 2.9 does not support binary mode ('b') for fmemopen'd
|
|
streams.
|
|
|
|
2.0.43 2009-11-27
|
|
* Move libsemanage.so to /usr/lib
|
|
* Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>
|
|
|
|
2.0.42 2009-11-18
|
|
* Move load_policy from /usr/sbin to /sbin from Dan Walsh.
|
|
|
|
2.0.41 2009-10-29
|
|
* Add pkgconfig file from Eamon Walsh.
|
|
|
|
2.0.40 2009-10-22
|
|
* Add semanage_set_check_contexts() function to disable calling
|
|
setfiles
|
|
|
|
2.0.39 2009-09-24
|
|
* make swigify
|
|
|
|
2.0.38 2009-09-16
|
|
* Change semodule upgrade behavior to install even if the module
|
|
is not present from Dan Walsh.
|
|
* Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
|
|
|
|
2.0.37 2009-09-04
|
|
* Fix persistent dontaudit support to rebuild policy if the
|
|
dontaudit state is changed from Chad Sellers.
|
|
|
|
2.0.36 2009-08-24
|
|
* Changed bzip-blocksize=0 handling to support existing compressed
|
|
modules in the store.
|
|
|
|
2.0.35 2009-08-05
|
|
* Revert hard linking of files between tmp/active/previous.
|
|
|
|
2.0.34 2009-08-05
|
|
* Enable configuration of bzip behavior from Stephen Smalley.
|
|
bzip-blocksize=0 to disable compression and decompression support.
|
|
bzip-blocksize=1..9 to set the blocksize for compression.
|
|
bzip-small=true to reduce memory usage for decompression.
|
|
|
|
2.0.33 2009-07-07
|
|
* Maintain disable dontaudit state from Christopher Pardy.
|
|
|
|
2.0.32 2009-05-28
|
|
* Ruby bindings from David Quigley.
|
|
|
|
2.0.31 2009-01-12
|
|
* Policy module compression (bzip) support from Dan Walsh.
|
|
* Hard link files between tmp/active/previous from Dan Walsh.
|
|
|
|
2.0.30 2008-11-12
|
|
* Add semanage_mls_enabled() interface from Stephen Smalley.
|
|
|
|
2.0.29 2008-11-11
|
|
* Add USER to lines to homedir_template context file from Chris PeBenito.
|
|
|
|
2.0.28 2008-09-15
|
|
* allow fcontext and seuser changes without rebuilding the policy from Dan Walsh
|
|
|
|
2.0.27 2008-08-05
|
|
* Modify genhomedircon to skip %groupname entries.
|
|
Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the %groupname syntax.
|
|
|
|
2.0.26 2008-07-29
|
|
* Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
|
|
Strip any trailing slash before appending /*$.
|
|
|
|
2.0.25 2008-04-21
|
|
* Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
|
|
Fixes semanage boolean -D seg fault (bug 441379).
|
|
|
|
2.0.24 2008-02-26
|
|
* make swigify
|
|
|
|
2.0.23 2008-02-04
|
|
* Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.
|
|
|
|
2.0.22 2008-02-04
|
|
* Free policydb before fork from Joshua Brindle.
|
|
|
|
2.0.21 2008-02-04
|
|
* Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.
|
|
|
|
2.0.12 2008-02-02
|
|
* Use sepol_set_expand_consume_base to reduce peak memory usage when
|
|
using semodule from Joshua Brindle.
|
|
|
|
2.0.19 2008-01-31
|
|
* Fix genhomedircon to not override a file context with a homedir context from Todd Miller.
|
|
|
|
2.0.18 2008-01-28
|
|
* Fix spurious out of memory error reports.
|
|
|
|
2.0.17 2008-01-25
|
|
* Merged second version of fix for genhomedircon handling from Caleb Case.
|
|
|
|
2.0.16 2008-01-24
|
|
* Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.
|
|
|
|
2.0.15 2007-12-05
|
|
* Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
|
|
* Copy the store path in semanage_select_store from Dan Walsh.
|
|
|
|
2.0.14 2007-11-05
|
|
* Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
|
|
|
|
2.0.13 2007-11-05
|
|
* Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
|
|
|
|
2.0.12 2007-10-05
|
|
* ustr cleanups from James Antill.
|
|
* Ensure that /root gets labeled even if using the default context from Dan Walsh.
|
|
|
|
2.0.11 2007-09-28
|
|
* Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
|
|
|
|
2.0.10 2007-09-28
|
|
* Fix error checking on getpw*_r functions from Todd Miller.
|
|
* Make genhomedircon skip invalid homedir contexts from Todd Miller.
|
|
* Set default user and prefix from seusers from Dan Walsh.
|
|
* Add swigify Makefile target from Dan Walsh.
|
|
|
|
2.0.9 2007-09-24
|
|
* Pass CFLAGS to CC even on link command, per Dennis Gilmore.
|
|
|
|
2.0.8 2007-09-19
|
|
* Clear errno on non-fatal errors to avoid reporting them upon a
|
|
later error that does not set errno.
|
|
|
|
2.0.7 2007-09-19
|
|
* Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.
|
|
|
|
2.0.6 2007-09-10
|
|
* Change to use getpw* function calls to the _r versions from Todd Miller.
|
|
|
|
2.0.5 2007-08-23
|
|
* Replace genhomedircon script with equivalent functionality within
|
|
libsemanage and introduce disable-genhomedircon option in
|
|
semanage.conf from Todd Miller.
|
|
Note: Depends on ustr.
|
|
|
|
2.0.4 2007-08-16
|
|
* Allow dontaudits to be turned off via semanage interface when
|
|
updating policy from Joshua Brindle.
|
|
|
|
2.0.3 2007-04-25
|
|
* Fix to libsemanage man patches so whatis will work better from Dan Walsh
|
|
|
|
2.0.2 2007-04-24
|
|
* Merged optimizations from Stephen Smalley.
|
|
- do not set all booleans upon commit, only those whose values have changed
|
|
- only install the sandbox upon commit if something was rebuilt
|
|
|
|
2.0.1 2007-03-12
|
|
* Merged dbase_file_flush patch from Dan Walsh.
|
|
This removes any mention of specific tools (e.g. semanage)
|
|
from the comment header of the auto-generated files,
|
|
since there are multiple front-end tools.
|
|
|
|
2.0.0 2007-02-20
|
|
* Merged Makefile test target patch from Caleb Case.
|
|
* Merged get_commit_number function rename patch from Caleb Case.
|
|
* Merged strnlen -> strlen patch from Todd Miller.
|
|
|
|
1.10.1 2007-01-26
|
|
* Merged python binding fix from Dan Walsh.
|
|
|
|
1.10.0 2007-01-18
|
|
* Updated version for stable branch.
|
|
|
|
1.9.2 2007-01-08
|
|
* Merged patch to optionally reduce disk usage by removing
|
|
the backup module store and linked policy from Karl MacMillan
|
|
* Merged patch to correctly propagate return values in libsemanage
|
|
|
|
1.9.1 2006-11-27
|
|
* Merged patch to compile wit -fPIC instead of -fpic from
|
|
Manoj Srivastava to prevent hitting the global offest table
|
|
limit. Patch changed to include libselinux and libsemanage in
|
|
addition to libsepol.
|
|
|
|
1.8 2006-10-17
|
|
* Updated version for release.
|
|
|
|
1.6.17 2006-09-29
|
|
* Merged patch to skip reload if no active store exists and
|
|
the store path doesn't match the active store path from Dan Walsh.
|
|
* Merged patch to not destroy sepol handle on error path of
|
|
connect from James Athey.
|
|
* Merged patch to add genhomedircon path to semanage.conf from
|
|
James Athey.
|
|
|
|
1.6.16 2006-08-14
|
|
* Make most copy errors fatal, but allow exceptions for
|
|
file_contexts.local, seusers, and netfilter_contexts if
|
|
the source file does not exist in the store.
|
|
|
|
1.6.15 2006-08-11
|
|
* Merged separate local file contexts patch from Chris PeBenito.
|
|
|
|
1.6.14 2006-08-11
|
|
* Merged patch to make most copy errors non-fatal from Dan Walsh.
|
|
|
|
1.6.13 2006-08-03
|
|
* Merged netfilter contexts support from Chris PeBenito.
|
|
|
|
1.6.12 2006-07-11
|
|
* Merged support for read operations on read-only fs from
|
|
Caleb Case (Tresys Technology).
|
|
|
|
1.6.11 2006-06-29
|
|
* Lindent.
|
|
|
|
1.6.10 2006-06-26
|
|
* Merged setfiles location check patch from Dan Walsh.
|
|
|
|
1.6.9 2006-06-16
|
|
* Merged several fixes from Serge Hallyn:
|
|
dbase_file_cache: deref of uninit data on error path.
|
|
dbase_policydb_cache: clear fp to avoid double fclose
|
|
semanage_fc_sort: destroy temp on error paths
|
|
|
|
1.6.8 2006-06-02
|
|
* Updated default location for setfiles to /sbin to
|
|
match policycoreutils. This can also be adjusted via
|
|
semanage.conf using the syntax:
|
|
[setfiles]
|
|
path = /path/to/setfiles
|
|
args = -q -c $@ $<
|
|
[end]
|
|
|
|
1.6.7 2006-05-05
|
|
* Merged fix warnings patch from Karl MacMillan.
|
|
|
|
1.6.6 2006-04-14
|
|
* Merged updated file context sorting patch from Christopher
|
|
Ashworth, with bug fix for escaped character flag.
|
|
|
|
1.6.5 2006-04-13
|
|
* Merged file context sorting code from Christopher Ashworth
|
|
(Tresys Technology), based on fc_sort.c code in refpolicy.
|
|
|
|
1.6.4 2006-04-12
|
|
* Merged python binding t_output_helper removal patch from Dan Walsh.
|
|
* Regenerated swig files.
|
|
|
|
1.6.3 2006-03-30
|
|
* Merged corrected fix for descriptor leak from Dan Walsh.
|
|
|
|
1.6.2 2006-03-20
|
|
* Merged Makefile PYLIBVER definition patch from Dan Walsh.
|
|
|
|
1.6.1 2006-03-20
|
|
* Merged man page reorganization from Ivan Gyurdiev.
|
|
|
|
1.6 2006-03-14
|
|
* Updated version for release.
|
|
|
|
1.5.31 2006-03-09
|
|
* Merged abort early on merge errors patch from Ivan Gyurdiev.
|
|
|
|
1.5.30 2006-03-08
|
|
* Cleaned up error handling in semanage_split_fc based on a patch
|
|
by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
|
|
|
|
1.5.29 2006-02-21
|
|
* Merged MLS handling fixes from Ivan Gyurdiev.
|
|
|
|
1.5.28 2006-02-16
|
|
* Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
|
|
|
|
1.5.27 2006-02-16
|
|
* Merged base_merge_components changes from Ivan Gyurdiev.
|
|
|
|
1.5.26 2006-02-15
|
|
* Merged paths array patch from Ivan Gyurdiev.
|
|
* Merged bug fix patch from Ivan Gyurdiev.
|
|
|
|
1.5.25 2006-02-14
|
|
* Merged improve bindings patch from Ivan Gyurdiev.
|
|
|
|
1.5.24 2006-02-14
|
|
* Merged use PyList patch from Ivan Gyurdiev.
|
|
* Merged memory leak fix patch from Ivan Gyurdiev.
|
|
* Merged nodecon support patch from Ivan Gyurdiev.
|
|
* Merged cleanups patch from Ivan Gyurdiev.
|
|
* Merged split swig patch from Ivan Gyurdiev.
|
|
|
|
1.5.23 2006-02-13
|
|
* Merged optionals in base patch from Joshua Brindle.
|
|
|
|
1.5.22 2006-02-13
|
|
* Merged treat seusers/users_extra as optional sections patch from
|
|
Ivan Gyurdiev.
|
|
* Merged parse_optional fixes from Ivan Gyurdiev.
|
|
|
|
1.5.21 2006-02-07
|
|
* Merged seuser/user_extra support patch from Joshua Brindle.
|
|
* Merged remote system dbase patch from Ivan Gyurdiev.
|
|
|
|
1.5.20 2006-02-02
|
|
* Merged clone record on set_con patch from Ivan Gyurdiev.
|
|
|
|
1.5.19 2006-01-30
|
|
* Merged fname parameter patch from Ivan Gyurdiev.
|
|
* Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
|
|
* Merged seusers.system patch from Ivan Gyurdiev.
|
|
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
|
|
|
|
1.5.18 2006-01-27
|
|
* Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
|
|
|
|
1.5.17 2006-01-27
|
|
* Merged set_create_store, access_check, and is_connected interfaces
|
|
from Joshua Brindle.
|
|
|
|
1.5.16 2006-01-19
|
|
* Regenerate python wrappers.
|
|
|
|
1.5.15 2006-01-18
|
|
* Merged pywrap Makefile diff from Dan Walsh.
|
|
* Merged cache management patch from Ivan Gyurdiev.
|
|
* Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
|
|
* Merged remove apply_local function patch from Ivan Gyurdiev.
|
|
* Merged only do read locking in direct case patch from Ivan Gyurdiev.
|
|
* Merged cache error path memory leak fix from Ivan Gyurdiev.
|
|
* Merged auto-generated file header patch from Ivan Gyurdiev.
|
|
* Merged pywrap test update from Ivan Gyurdiev.
|
|
* Merged hidden defs update from Ivan Gyurdiev.
|
|
|
|
1.5.14 2006-01-13
|
|
* Merged disallow port overlap patch from Ivan Gyurdiev.
|
|
|
|
1.5.13 2006-01-12
|
|
* Merged join prereq and implementation patches from Ivan Gyurdiev.
|
|
* Merged join user extra data part 2 patch from Ivan Gyurdiev.
|
|
* Merged bugfix patch from Ivan Gyurdiev.
|
|
|
|
1.5.12 2006-01-12
|
|
* Merged remove add_local/set_local patch from Ivan Gyurdiev.
|
|
* Merged user extra data part 1 patch from Ivan Gyurdiev.
|
|
* Merged size_t -> unsigned int patch from Ivan Gyurdiev.
|
|
* Merged calloc check in semanage_store patch from Ivan Gyurdiev,
|
|
bug noticed by Steve Grubb.
|
|
* Merged cleanups after add/set removal patch from Ivan Gyurdiev.
|
|
|
|
1.5.11 2006-01-09
|
|
* Merged fcontext compare fix from Ivan Gyurdiev.
|
|
|
|
1.5.10 2006-01-06
|
|
* Fixed commit to return the commit number aka policy sequence number.
|
|
|
|
1.5.9 2006-01-06
|
|
* Merged const in APIs patch from Ivan Gyurdiev.
|
|
* Merged validation of local file contexts patch from Ivan Gyurdiev.
|
|
* Merged compare2 function patch from Ivan Gyurdiev.
|
|
* Merged hidden def/proto update patch from Ivan Gyurdiev.
|
|
|
|
1.5.8 2006-01-05
|
|
* Re-applied string and file optimization patch from Russell Coker,
|
|
with bug fix.
|
|
|
|
1.5.7 2006-01-05
|
|
* Reverted string and file optimization patch from Russell Coker.
|
|
|
|
1.5.6 2006-01-05
|
|
* Clarified error messages from parse_module_headers and
|
|
parse_base_headers for base/module mismatches.
|
|
|
|
1.5.5 2006-01-05
|
|
* Merged string and file optimization patch from Russell Coker.
|
|
* Merged swig header reordering patch from Ivan Gyurdiev.
|
|
* Merged toggle modify on add patch from Ivan Gyurdiev.
|
|
* Merged ports parser bugfix patch from Ivan Gyurdiev.
|
|
* Merged fcontext swig patch from Ivan Gyurdiev.
|
|
* Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
|
|
* Merged man pages for dbase functions patch from Ivan Gyurdiev.
|
|
* Merged pywrap tests patch from Ivan Gyurdiev.
|
|
|
|
1.5.4 2006-01-04
|
|
* Merged patch series from Ivan Gyurdiev.
|
|
This includes patches to:
|
|
- separate file rw code from linked list
|
|
- annotate objects
|
|
- fold together internal headers
|
|
- support ordering of records in compare function
|
|
- add active dbase backend, active booleans
|
|
- return commit numbers for ro database calls
|
|
- use modified flags to skip rebuild whenever possible
|
|
- enable port interfaces
|
|
- update swig interfaces and typemaps
|
|
- add an API for file_contexts.local and file_contexts
|
|
- flip the traversal order in iterate/list
|
|
- reorganize sandbox_expand
|
|
- add seusers MLS validation
|
|
- improve dbase spec/documentation
|
|
- clone record on set/add/modify
|
|
|
|
1.5.3 2005-12-14
|
|
* Merged further header cleanups from Ivan Gyurdiev.
|
|
|
|
1.5.2 2005-12-13
|
|
* Merged toggle modified flag in policydb_modify, fix memory leak
|
|
in clear_obsolete, polymorphism vs headers fix, and include guards
|
|
for internal headers patches from Ivan Gyurdiev.
|
|
|
|
1.5.1 2005-12-12
|
|
* Added file-mode= setting to semanage.conf, default to 0644.
|
|
Changed semanage_copy_file and callers to use this mode when
|
|
installing policy files to runtime locations.
|
|
|
|
1.4 2005-12-07
|
|
* Updated version for release.
|
|
|
|
1.3.64 2005-12-06
|
|
* Changed semanage_handle_create() to set do_reload based on
|
|
is_selinux_enabled(). This prevents improper attempts to
|
|
load policy on a non-SELinux system.
|
|
|
|
1.3.63 2005-12-05
|
|
* Dropped handle from user_del_role interface.
|
|
|
|
1.3.62 2005-12-05
|
|
* Removed defrole interfaces.
|
|
|
|
1.3.61 2005-11-29
|
|
* Merged Makefile python definitions patch from Dan Walsh.
|
|
|
|
1.3.60 2005-11-29
|
|
* Removed is_selinux_mls_enabled() conditionals in seusers and users
|
|
file parsers.
|
|
|
|
1.3.59 2005-11-28
|
|
* Merged wrap char*** for user_get_roles patch from Joshua Brindle.
|
|
|
|
1.3.58 2005-11-28
|
|
* Merged remove defrole from sepol patch from Ivan Gyurdiev.
|
|
|
|
1.3.57 2005-11-28
|
|
* Merged swig wrappers for modifying users and seusers from Joshua Brindle.
|
|
|
|
1.3.56 2005-11-16
|
|
* Fixed free->key_free bug.
|
|
|
|
1.3.55 2005-11-16
|
|
* Merged clear obsolete patch from Ivan Gyurdiev.
|
|
|
|
1.3.54 2005-11-15
|
|
* Merged modified swigify patch from Dan Walsh
|
|
(original patch from Joshua Brindle).
|
|
* Merged move genhomedircon call patch from Chad Sellers.
|
|
|
|
1.3.53 2005-11-10
|
|
* Merged move seuser validation patch from Ivan Gyurdiev.
|
|
* Merged hidden declaration fixes from Ivan Gyurdiev,
|
|
with minor corrections.
|
|
|
|
1.3.52 2005-11-09
|
|
* Merged cleanup patch from Ivan Gyurdiev.
|
|
This renames semanage_module_conn to semanage_direct_handle,
|
|
and moves sepol handle create/destroy into semanage handle
|
|
create/destroy to allow use even when disconnected (for the
|
|
record interfaces).
|
|
|
|
1.3.51 2005-11-08
|
|
* Clear modules modified flag upon disconnect and commit.
|
|
|
|
1.3.50 2005-11-08
|
|
* Added tracking of module modifications and use it to
|
|
determine whether expand-time checks should be applied
|
|
on commit.
|
|
|
|
1.3.49 2005-11-08
|
|
* Reverted semanage_set_reload_bools() interface.
|
|
|
|
1.3.48 2005-11-08
|
|
* Disabled calls to port dbase for merge and commit and stubbed
|
|
out calls to sepol_port interfaces since they are not exported.
|
|
|
|
1.3.47 2005-11-08
|
|
* Merged rename instead of copy patch from Joshua Brindle (Tresys).
|
|
|
|
1.3.46 2005-11-07
|
|
* Added hidden_def/hidden_proto for exported symbols used within
|
|
libsemanage to eliminate relocations. Wrapped type definitions
|
|
in exported headers as needed to avoid conflicts. Added
|
|
src/context_internal.h and src/iface_internal.h.
|
|
|
|
1.3.45 2005-11-07
|
|
* Added semanage_is_managed() interface to allow detection of whether
|
|
the policy is managed via libsemanage. This enables proper handling
|
|
in setsebool for non-managed systems.
|
|
|
|
1.3.44 2005-11-07
|
|
* Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
|
|
to enable runtime control over preserving active boolean values
|
|
versus reloading their saved settings upon commit.
|
|
|
|
1.3.43 2005-11-04
|
|
* Merged seuser parser resync, dbase tracking and cleanup, strtol
|
|
bug, copyright, and assert space patches from Ivan Gyurdiev.
|
|
|
|
1.3.42 2005-11-04
|
|
* Added src/*_internal.h in preparation for other changes.
|
|
* Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
|
|
src/seusers.[hc].
|
|
|
|
1.3.41 2005-11-03
|
|
* Merged interface parse/print, context_to_string interface change,
|
|
move assert_noeof, and order preserving patches from Ivan Gyurdiev.
|
|
* Added src/dso.h in preparation for other changes.
|
|
|
|
1.3.40 2005-11-01
|
|
* Merged install seusers, handle/error messages, MLS parsing,
|
|
and seusers validation patches from Ivan Gyurdiev.
|
|
|
|
1.3.39 2005-10-31
|
|
* Merged record interface, dbase flush, common database code,
|
|
and record bugfix patches from Ivan Gyurdiev.
|
|
|
|
1.3.38 2005-10-27
|
|
* Merged dbase policydb list and count change from Ivan Gyurdiev.
|
|
|
|
1.3.37 2005-10-27
|
|
* Merged enable dbase and set relay patches from Ivan Gyurdiev.
|
|
|
|
1.3.36 2005-10-27
|
|
* Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.
|
|
|
|
1.3.35 2005-10-26
|
|
* Merged sepol handle passing, seusers support, and policydb cache
|
|
patches from Ivan Gyurdiev.
|
|
|
|
1.3.34 2005-10-25
|
|
* Merged resync to sepol changes and booleans fixes/improvements
|
|
patches from Ivan Gyurdiev.
|
|
|
|
1.3.33 2005-10-25
|
|
* Merged support for genhomedircon/homedir template, store selection,
|
|
explicit policy reload, and semanage.conf relocation from Joshua
|
|
Brindle.
|
|
|
|
1.3.32 2005-10-24
|
|
* Merged resync to sepol changes and transaction fix patches from
|
|
Ivan Gyurdiev.
|
|
|
|
1.3.31 2005-10-21
|
|
* Merged reorganize users patch from Ivan Gyurdiev.
|
|
* Merged remove unused relay functions patch from Ivan Gyurdiev.
|
|
|
|
1.3.30 2005-10-20
|
|
* Fixed policy file leaks in semanage_load_module and
|
|
semanage_write_module.
|
|
* Merged further database work from Ivan Gyurdiev.
|
|
|
|
1.3.29 2005-10-20
|
|
* Fixed bug in semanage_direct_disconnect.
|
|
|
|
1.3.28 2005-10-20
|
|
* Merged interface renaming patch from Ivan Gyurdiev.
|
|
* Merged policy component patch from Ivan Gyurdiev.
|
|
|
|
1.3.27 2005-10-20
|
|
* Renamed 'check=' configuration value to 'expand-check=' for
|
|
clarity.
|
|
* Changed semanage_commit_sandbox to check for and report errors
|
|
on rename(2) calls performed during rollback.
|
|
|
|
1.3.26 2005-10-19
|
|
* Added optional check= configuration value to semanage.conf
|
|
and updated call to sepol_expand_module to pass its value
|
|
to control assertion and hierarchy checking on module expansion.
|
|
|
|
1.3.25 2005-10-19
|
|
* Merged fixes for make DESTDIR= builds from Joshua Brindle.
|
|
|
|
1.3.24 2005-10-19
|
|
* Merged default database from Ivan Gyurdiev.
|
|
* Merged removal of connect requirement in policydb backend from
|
|
Ivan Gyurdiev.
|
|
* Merged commit locking fix and lock rename from Joshua Brindle.
|
|
* Merged transaction rollback in lock patch from Joshua Brindle.
|
|
|
|
1.3.23 2005-10-18
|
|
* Changed default args for load_policy to be null, as it no longer
|
|
takes a pathname argument and we want to preserve booleans.
|
|
|
|
1.3.22 2005-10-18
|
|
* Merged move local dbase initialization patch from Ivan Gyurdiev.
|
|
* Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
|
|
* Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
|
|
|
|
1.3.21 2005-10-18
|
|
* Added calls to sepol_policy_file_set_handle interface prior
|
|
to invoking sepol operations on policy files.
|
|
* Updated call to sepol_policydb_from_image to pass the handle.
|
|
|
|
1.3.20 2005-10-17
|
|
* Merged user and port APIs - policy database patch from Ivan
|
|
Gyurdiev.
|
|
|
|
1.3.19 2005-10-17
|
|
* Converted calls to sepol link_packages and expand_module interfaces
|
|
from using buffers to using sepol handles for error reporting, and
|
|
changed direct_connect/disconnect to create/destroy sepol handles.
|
|
|
|
1.3.18 2005-10-14
|
|
* Merged bugfix patch from Ivan Gyurdiev.
|
|
|
|
1.3.17 2005-10-14
|
|
* Merged seuser database patch from Ivan Gyurdiev.
|
|
Merged direct user/port databases to the handle from Ivan Gyurdiev.
|
|
|
|
1.3.16 2005-10-14
|
|
* Removed obsolete include/semanage/commit_api.h (leftover).
|
|
Merged seuser record patch from Ivan Gyurdiev.
|
|
|
|
1.3.15 2005-10-14
|
|
* Merged boolean and interface databases from Ivan Gyurdiev.
|
|
|
|
1.3.14 2005-10-13
|
|
* Updated to use get interfaces for hidden sepol_module_package type.
|
|
|
|
1.3.13 2005-10-13
|
|
* Changed semanage_expand_sandbox and semanage_install_active
|
|
to generate/install the latest policy version supported by libsepol
|
|
by default (unless overridden by semanage.conf), since libselinux
|
|
will now downgrade automatically for load_policy.
|
|
|
|
1.3.12 2005-10-13
|
|
* Merged new callback-based error reporting system and ongoing
|
|
database work from Ivan Gyurdiev.
|
|
|
|
1.3.11 2005-10-11
|
|
* Fixed semanage_install_active() to use the same logic for
|
|
selecting a policy version as semanage_expand_sandbox(). Dropped
|
|
dead code from semanage_install_sandbox().
|
|
|
|
1.3.10 2005-10-07
|
|
* Updated for changes to libsepol, and to only use types and interfaces
|
|
provided by the shared libsepol.
|
|
|
|
1.3.9 2005-10-06
|
|
* Merged further database work from Ivan Gyurdiev.
|
|
|
|
1.3.8 2005-10-04
|
|
* Merged iterate, redistribute, and dbase split patches from
|
|
Ivan Gyurdiev.
|
|
|
|
1.3.7 2005-09-30
|
|
* Merged patch series from Ivan Gyurdiev.
|
|
(pointer typedef elimination, file renames, dbase work, backend
|
|
separation)
|
|
|
|
1.3.6 2005-09-28
|
|
* Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
|
|
* Separated handle create from connect interface.
|
|
* Added a constructor for initialization.
|
|
* Moved up src/include/*.h to src.
|
|
* Created a symbol map file; dropped dso.h and hidden markings.
|
|
|
|
1.3.5 2005-09-28
|
|
* Merged major update to libsemanage organization and functionality
|
|
from Karl MacMillan (Tresys).
|
|
|
|
1.3.4 2005-09-23
|
|
* Merged dbase redesign patch from Ivan Gyurdiev.
|
|
|
|
1.3.3 2005-09-21
|
|
* Merged boolean record, stub record handler, and status codes
|
|
patches from Ivan Gyurdiev.
|
|
|
|
1.3.2 2005-09-16
|
|
* Merged stub iterator functionality from Ivan Gyurdiev.
|
|
* Merged interface record patch from Ivan Gyurdiev.
|
|
|
|
1.3.1 2005-09-14
|
|
* Merged stub functionality for managing user and port records,
|
|
and record table code from Ivan Gyurdiev.
|
|
|
|
1.2 2005-09-06
|
|
* Updated version for release.
|
|
|
|
1.1.6 2005-08-31
|
|
* Merged semod.conf template patch from Dan Walsh (Red Hat),
|
|
but restored location to /usr/share/semod/semod.conf.
|
|
|
|
1.1.5 2005-08-30
|
|
* Fixed several bugs found by valgrind.
|
|
* Fixed bug in prior patch for the semod_build_module_list leak.
|
|
|
|
1.1.4 2005-08-25
|
|
* Merged errno fix from Joshua Brindle (Tresys).
|
|
* Merged fix for semod_build_modules_list leak on error path
|
|
from Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
|
1.1.3 2005-08-22
|
|
* Merged several fixes from Serge Hallyn (IBM). Bugs found by
|
|
Coverity.
|
|
* Fixed several other bugs and warnings.
|
|
|
|
1.1.2 2005-08-02
|
|
* Merged patch to move module read/write code from libsemanage
|
|
to libsepol from Jason Tang (Tresys).
|
|
|
|
1.1.1 2005-08-02
|
|
* Merged relay records patch from Ivan Gyurdiev.
|
|
* Merged key extract patch from Ivan Gyurdiev.
|
|
|
|
1.0 2005-07-27
|
|
* Initial version.
|