File: ChangeLog

package info (click to toggle)
checkpolicy 2.0.16-1
  • links: PTS, VCS
  • area: main
  • in suites: lenny
  • size: 416 kB
  • ctags: 498
  • sloc: ansic: 7,313; yacc: 739; lex: 254; makefile: 66; sh: 29
file content (354 lines) | stat: -rw-r--r-- 10,687 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
2.0.16 2008-05-27
	* Update checkpolicy for user and role mapping support from Joshua Brindle.

2.0.15 2008-05-05
	* Fix for policy module versions that look like IPv4 addresses from Jim Carter.
	  Resolves bug 444451.

2.0.14 2008-03-24
	* Add permissive domain support from Eric Paris.

2.0.13 2008-03-05
	* Split out non-grammar parts of policy_parse.yacc into
	  policy_define.c and policy_define.h from Todd C. Miller.

2.0.12 2008-03-04
	* Initialize struct policy_file before using it, from Todd C. Miller.

2.0.11 2008-03-03
	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.

2.0.10 2008-02-28
	* Use yyerror2() where appropriate from Todd C. Miller.

2.0.9 2008-02-04
	* Update dispol for libsepol avtab changes from Stephen Smalley.

2.0.8 2008-01-24
	* Deprecate role dominance in parser.

2.0.7 2008-01-02
	* Added support for policy capabilities from Todd Miller.

2.0.6 2007-11-15
	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".

2.0.5 2007-11-01
	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.

2.0.4 2007-09-18
	* Merged handle unknown policydb flag support from Eric Paris.
	  Adds new command line options -U {allow, reject, deny} for selecting
	  the flag when a base module or kernel policy is built.

2.0.3 2007-05-31
	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.

2.0.2 2007-04-12
	* Merged checkmodule man page fix from Dan Walsh.

2.0.1 2007-02-20
	* Merged patch to allow dots in class identifiers from Caleb Case.

2.0.0 2007-02-01
	* Merged patch to use new libsepol error codes by Karl MacMillan.

1.34.0 2007-01-18
	* Updated version for stable branch.

1.33.1 2006-11-13
	* Collapse user identifiers and identifiers together.

1.32 2006-10-17
	* Updated version for release.

1.30.12 2006-09-28
	* Merged user and range_transition support for modules from 
	  Darrel Goeddel

1.30.11 2006-09-05
	* merged range_transition enhancements and user module format
	  changes from Darrel Goeddel

1.30.10 2006-08-03
	* Merged symtab datum patch from Karl MacMillan.

1.30.9 2006-06-29
	* Lindent.

1.30.8 2006-06-29
	* Merged patch to remove TE rule conflict checking from the parser
	  from Joshua Brindle.  This can only be done properly by the 
	  expander.

1.30.7 2006-06-27
	* Merged patch to make checkpolicy/checkmodule handling of
	  duplicate/conflicting TE rules the same as the expander 
	  from Joshua Brindle.

1.30.6 2006-06-26
	* Merged optionals in base take 2 patch set from Joshua Brindle.

1.30.5 2006-05-05
	* Merged compiler cleanup patch from Karl MacMillan.
	* Merged fix warnings patch from Karl MacMillan.	

1.30.4 2006-04-05
	* Changed require_class to reject permissions that have not been
	  declared if building a base module.

1.30.3 2006-03-28
	* Fixed checkmodule to call link_modules prior to expand_module
	  to handle optionals.

1.30.2 2006-03-28
	* Fixed require_class to avoid shadowing permissions already defined
	  in an inherited common definition.

1.30.1 2006-03-22
	* Moved processing of role and user require statements to 2nd pass.

1.30 2006-03-14
	* Updated version for release.

1.29.5 2006-03-09
	* Fixed bug in role dominance (define_role_dom).

1.29.4 2006-02-14
	* Added a check for failure to declare each sensitivity in
	  a level definition.

1.29.3 2006-02-13
	* Changed to clone level data for aliased sensitivities to
	  avoid double free upon sens_destroy.  Bug reported by Kevin
	  Carr of Tresys Technology.

1.29.2 2006-02-13
	* Merged optionals in base patch from Joshua Brindle.

1.29.1 2006-02-01
	* Merged sepol_av_to_string patch from Joshua Brindle.

1.28 2005-12-07
	* Updated version for release.

1.27.20 2005-12-02
	* Merged checkmodule man page from Dan Walsh, and edited it.

1.27.19 2005-12-01
	* Added error checking of all ebitmap_set_bit calls for out of
	  memory conditions.

1.27.18 2005-12-01
	* Merged removal of compatibility handling of netlink classes
	  (requirement that policies with newer versions include the
	   netlink class definitions, remapping of fine-grained netlink
	   classes in newer source policies to single netlink class when
	   generating older policies) from George Coker.

1.27.17 2005-10-25
	* Merged dismod fix from Joshua Brindle.

1.27.16 2005-10-20
	* Removed obsolete cond_check_type_rules() function and call and 
	  cond_optimize_lists() call from checkpolicy.c; these are handled
	  during parsing and expansion now.

1.27.15 2005-10-19
	* Updated calls to expand_module for interface change.

1.27.14 2005-10-19
	* Changed checkmodule to verify that expand_module succeeds 
	  when building base modules.

1.27.13 2005-10-19
	* Merged module compiler fixes from Joshua Brindle.

1.27.12 2005-10-19
	* Removed direct calls to hierarchy_check_constraints() and 
	  check_assertions() from checkpolicy since they are now called 
	  internally by expand_module().

1.27.11 2005-10-18
	* Updated for changes to sepol policydb_index_others interface.

1.27.10 2005-10-17
	* Updated for changes to sepol expand_module and link_modules interfaces.

1.27.9 2005-10-13
	* Merged support for require blocks inside conditionals from
	Joshua Brindle (Tresys).

1.27.8 2005-10-06
	* Updated for changes to libsepol.

1.27.7 2005-10-05
	* Merged several bug fixes from Joshua Brindle (Tresys).

1.27.6 2005-10-03
	* Merged MLS in modules patch from Joshua Brindle (Tresys).

1.27.5 2005-09-28
	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).

1.27.4 2005-09-26
	* Merged bugfix for dup role transition error messages from
	Karl MacMillan (Tresys).

1.27.3 2005-09-23
	* Merged policyver/modulever patches from Joshua Brindle (Tresys).
	
1.27.2 2005-09-20
	* Fixed parse_categories handling of undefined category.

1.27.1 2005-09-16
	* Merged bug fix for role dominance handling from Darrel Goeddel (TCS). 

1.26 2005-09-06
	* Updated version for release.

1.25.12 2005-08-22
	* Fixed handling of validatetrans constraint expressions.
	Bug reported by Dan Walsh for checkpolicy -M.

1.25.11 2005-08-18
	* Merged use-after-free fix from Serge Hallyn (IBM).  
	  Bug found by Coverity.

1.25.10 2005-08-15
	* Fixed further memory leaks found by valgrind.

1.25.9 2005-08-15
	* Changed checkpolicy to destroy the policydbs prior to exit
	  to allow leak detection.
	* Fixed several memory leaks found by valgrind.

1.25.8 2005-08-11
	* Updated checkpolicy and dispol for the new avtab format.
	  Converted users of ebitmaps to new inline operators.
  	  Note:  The binary policy format version has been incremented to 
	  version 20 as a result of these changes.  To build a policy
	  for a kernel that does not yet include these changes, use
	  the -c 19 option to checkpolicy.

1.25.7 2005-08-11
	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).

1.25.6 2005-08-10
	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).

1.25.5 2005-08-09
	* Fixed call to hierarchy checking code to pass the right policydb.

1.25.4 2005-08-02
	* Merged patch to update dismod for the relocation of the
	  module read/write code from libsemanage to libsepol, and
	  to enable build of test subdirectory from Jason Tang (Tresys).

1.25.3 2005-07-18
	* Merged hierarchy check fix from Joshua Brindle (Tresys).

1.25.2 2005-07-06
	* Merged loadable module support from Tresys Technology.

1.25.1 2005-06-24
	* Merged patch to prohibit the use of * and ~ in type sets 
	  (other than in neverallow statements) and in role sets
	  from Joshua Brindle (Tresys).

1.24 2005-06-20
	* Updated version for release.

1.23.4 2005-05-19
	* Merged cleanup patch from Dan Walsh.

1.23.3 2005-05-13
	* Added sepol_ prefix to Flask types to avoid namespace
	  collision with libselinux.

1.23.2 2005-04-29
	* Merged identifier fix from Joshua Brindle (Tresys).
	
1.23.1 2005-04-13
	* Merged hierarchical type/role patch from Tresys Technology.
	* Merged MLS fixes from Darrel Goeddel of TCS.

1.22 2005-03-09
	* Updated version for release.

1.21.4 2005-02-17
	* Moved genpolusers utility to libsepol.
	* Merged range_transition support from Darrel Goeddel (TCS).

1.21.3 2005-02-16
	* Merged define_user() cleanup patch from Darrel Goeddel (TCS).

1.21.2 2005-02-09
	* Changed relabel Makefile target to use restorecon.

1.21.1 2005-01-26
	* Merged enhanced MLS support from Darrel Goeddel (TCS).

1.20 2005-01-04
	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
	* Changed genpolusers to handle multiple user config files.
	* Merged nodecon ordering patch from Chad Hanson of TCS.

1.18 2004-10-07
	* MLS build fix.
	* Fixed Makefile dependencies (Chris PeBenito).
	* Merged fix for role dominance ordering issue from Chad Hanson of TCS.
	* Preserve portcon ordering and apply more checking.

1.16 2004-08-13
	* Allow empty conditional clauses.
	* Moved genpolbools utility to libsepol.
	* Updated for libsepol set functions. 
	* Changed to link with libsepol.a.
	* Moved core functionality into libsepol.
	* Merged bug fix for conditional self handling from Karl MacMillan, Dave Caplan, and Joshua Brindle of Tresys.
	* Added genpolusers program.
	* Fixed bug in checkpolicy conditional code.

1.14 2004-06-28
	* Merged fix for MLS logic from Daniel Thayer of TCS. 
	* Require semicolon terminator for typealias statement.

1.12 2004-06-16
	* Merged fine-grained netlink class support.

1.10 2004-04-07
	* Merged ipv6 support from James Morris of RedHat.
	* Fixed compute_av bug discovered by Chad Hanson of TCS.

1.8 2004-03-09
	* Merged policydb MLS patch from Chad Hanson of TCS.
	* Fixed mmap of policy file.

1.6 2004-02-18
	* Merged conditional policy extensions from Tresys Technology.
	* Added typealias declaration support per Russell Coker's request.
	* Added support for excluding types from type sets based on
	  a patch by David Caplan, but reimplemented as a change to the
	  policy grammar.
	* Merged patch from Colin Walters to report source file name and line
	  number for errors when available.
	* Un-deprecated role transitions.

1.4 2003-12-01
	* Regenerated headers.
	* Merged patches from Bastian Blank and Joerg Hoh.

1.2 2003-09-30
	* Merged MLS build patch from Karl MacMillan of Tresys. 
	* Merged checkpolicy man page from Magosanyi Arpad.

1.1 2003-08-13
	* Fixed endian bug in policydb_write for behavior value. 
	* License -> GPL.
        * Merged coding style cleanups from James Morris. 

1.0 2003-07-11
	* Initial public release.