run_init/open_init_pty.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 legacy

scripts/fixfiles | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 made fixfiles display the progress

mcstrans/src/mcstrans.init | 36 23 + 13 - 0 !
restorecond/restorecond.init | 115 55 + 60 - 0 !
sandbox/sandbox.init | 40 27 + 13 - 0 !
3 files changed, 105 insertions(+), 86 deletions(-)

 init files

audit2why/audit2why.1 | 2 1 + 1 - 0 !
mcstrans/man/man8/mcs.8 | 2 1 + 1 - 0 !
semanage/semanage.8 | 13 6 + 7 - 0 !
setfiles/restorecon.8 | 10 10 + 0 - 0 !
setfiles/setfiles.8 | 9 8 + 1 - 0 !
5 files changed, 26 insertions(+), 10 deletions(-)

 manpages

Makefile | 6 4 + 2 - 0 !
mcstrans/src/Makefile | 3 2 + 1 - 0 !
mcstrans/utils/Makefile | 2 1 + 1 - 0 !
restorecond/Makefile | 6 3 + 3 - 0 !
run_init/Makefile | 2 1 + 1 - 0 !
sandbox/Makefile | 4 2 + 2 - 0 !
semodule_deps/Makefile | 2 1 + 1 - 0 !
sepolgen-ifgen/Makefile | 2 1 + 1 - 0 !
8 files changed, 15 insertions(+), 12 deletions(-)

 build system

restorecond/restorecond.conf | 5 5 + 0 - 0 !
sandbox/sandbox.conf | 2 2 + 0 - 0 !
sandbox/sandbox.config | 2 2 + 0 - 0 !
3 files changed, 9 insertions(+)

 default config

restorecond/watch.c | 28 15 + 13 - 0 !
1 file changed, 15 insertions(+), 13 deletions(-)

 fix infinite loop i watch code

    [topic--utmp-watch-fix]: Fix infinite loop i watch code

    With kernel 2.6.31, restorecond uses 99% of my CPU.

    This is because removing and readding the watch on utmp triggers inotify to
    return an IN_IGNORED event for the old watch descriptor.  If the watch gets
    allocated the same wd when it is readded, then restorecond thinks that utmp
    has changed, so removes and readds the watch again, potentially looping.

    With kernel <= 2.6.30, this never happened, because the kernel didn't reuse
    watch descriptors.  So the IN_IGNORED event comes with a wd that is no
    longer in use, and gets ignored.  But kernel 2.6.31 reuses the same watch
    descriptor.

    This patch fixes that by ignoring inotify events whose only bit set is
    IN_IGNORED.

    Note: it is not clear to me why it is necessary to remove and readd the
    watch in the first place.

    Patch by Martin Orr.

    Signed-off-by: Martin Orr <martin@martinorr.name>
    Signed-off-by: Manoj Srivastava <srivasta@debian.org>

scripts/fixfiles | 7 6 + 1 - 0 !
1 file changed, 6 insertions(+), 1 deletion(-)

 only run setfiles if we found read-write filesystems to run it on

Signed-off-by: Manoj Srivastava <srivasta@debian.org>

scripts/fixfiles | 10 5 + 5 - 0 !
1 file changed, 5 insertions(+), 5 deletions(-)

 find does not have a -context switch

Do not error out if find does not have a -context switch.

Signed-Off-By: Manoj Srivastava <srivasta@debian.org>

sandbox/seunshare.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix ftbfs with hardening flags

setfiles/restore.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 make restorecon return 0 when a file has changed context with no error

sandbox/sandbox.init | 8 4 + 4 - 0 !
1 file changed, 4 insertions(+), 4 deletions(-)

 remove non-existing sucess and failure functions
Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663419

sestatus/Makefile | 2 1 + 1 - 0 !
setfiles/Makefile | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 use build flags from environment (dpkg-buildflags).
 Necessary for hardening flags.

po/af.po | 634 331 + 303 - 0 !
po/am.po | 634 331 + 303 - 0 !
po/ar.po | 634 331 + 303 - 0 !
po/as.po | 722 393 + 329 - 0 !
po/be.po | 634 331 + 303 - 0 !
po/bg.po | 723 394 + 329 - 0 !
po/bn.po | 634 331 + 303 - 0 !
po/bn_IN.po | 722 393 + 329 - 0 !
po/bs.po | 702 385 + 317 - 0 !
po/ca.po | 712 391 + 321 - 0 !
po/cs.po | 722 376 + 346 - 0 !
po/cy.po | 634 331 + 303 - 0 !
po/da.po | 705 386 + 319 - 0 !
po/de.po | 721 394 + 327 - 0 !
po/el.po | 711 389 + 322 - 0 !
po/en_GB.po | 701 384 + 317 - 0 !
po/es.po | 731 397 + 334 - 0 !
po/et.po | 631 329 + 302 - 0 !
po/eu_ES.po | 634 331 + 303 - 0 !
po/fa.po | 634 331 + 303 - 0 !
po/fi.po | 634 331 + 303 - 0 !
po/fr.po | 744 407 + 337 - 0 !
po/gl.po | 631 329 + 302 - 0 !
po/gu.po | 722 393 + 329 - 0 !
po/he.po | 634 331 + 303 - 0 !
po/hi.po | 722 393 + 329 - 0 !
po/hr.po | 727 396 + 331 - 0 !
po/hu.po | 705 386 + 319 - 0 !
po/hy.po | 634 331 + 303 - 0 !
po/id.po | 631 329 + 302 - 0 !
po/is.po | 634 331 + 303 - 0 !
po/it.po | 725 395 + 330 - 0 !
po/ja.po | 722 393 + 329 - 0 !
po/ka.po | 634 331 + 303 - 0 !
po/kn.po | 725 395 + 330 - 0 !
po/ko.po | 719 393 + 326 - 0 !
po/ku.po | 634 331 + 303 - 0 !
po/lo.po | 634 331 + 303 - 0 !
po/lt.po | 634 331 + 303 - 0 !
po/lv.po | 634 331 + 303 - 0 !
po/mk.po | 704 386 + 318 - 0 !
po/ml.po | 726 395 + 331 - 0 !
po/mr.po | 726 395 + 331 - 0 !
po/ms.po | 698 380 + 318 - 0 !
po/my.po | 634 331 + 303 - 0 !
po/nb.po | 639 332 + 307 - 0 !
po/nl.po | 726 395 + 331 - 0 !
po/nn.po | 634 331 + 303 - 0 !
po/no.po | 634 331 + 303 - 0 !
po/nso.po | 634 331 + 303 - 0 !
po/or.po | 724 396 + 328 - 0 !
po/pa.po | 722 393 + 329 - 0 !
po/pl.po | 721 394 + 327 - 0 !
po/policycoreutils.pot | 634 331 + 303 - 0 !
po/pt.po | 727 396 + 331 - 0 !
po/pt_BR.po | 724 395 + 329 - 0 !
po/ro.po | 634 331 + 303 - 0 !
po/ru.po | 719 392 + 327 - 0 !
po/si.po | 634 331 + 303 - 0 !
po/sk.po | 703 385 + 318 - 0 !
po/sl.po | 634 331 + 303 - 0 !
po/sq.po | 634 331 + 303 - 0 !
po/sr.po | 728 396 + 332 - 0 !
po/sr@latin.po | 728 396 + 332 - 0 !
po/sv.po | 725 395 + 330 - 0 !
po/ta.po | 725 395 + 330 - 0 !
po/te.po | 726 395 + 331 - 0 !
po/th.po | 634 331 + 303 - 0 !
po/tr.po | 634 331 + 303 - 0 !
po/uk.po | 703 385 + 318 - 0 !
po/ur.po | 634 331 + 303 - 0 !
po/vi.po | 634 331 + 303 - 0 !
po/zh_CN.po | 717 392 + 325 - 0 !
po/zh_TW.po | 722 393 + 329 - 0 !
po/zu.po | 634 331 + 303 - 0 !
75 files changed, 27262 insertions(+), 23701 deletions(-)

 update po files to last source version
 The po files are getting updated to match the latest version of the sources
 during the build of the package. This is causing the package to fail to build
 twice in a row

mcstrans/src/mcstrans.c | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

 patch for mcstrans to not abort when it sees a squeeze config file

run_init/Makefile | 11 6 + 5 - 0 !
run_init/open_init_pty.cpp | 423 423 + 0 - 0 !
2 files changed, 429 insertions(+), 5 deletions(-)

 add new open_init_pty that doesn't waste cpu time

Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 add new open_init_pty that doesn't waste cpu time