1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
|
policycoreutils (1.32-3) unstable; urgency=high
* Remember to run arch_export from the correct checked out working tree,
so as to include the patches that you tested in the upload.
-- Manoj Srivastava <srivasta@debian.org> Wed, 7 Mar 2007 16:27:19 -0600
policycoreutils (1.32-2) unstable; urgency=low
* Bug fix: "policycoreutils: fixfiles should warn if no suitable fs
found", thanks to David Härdeman. This was a missing simple check --
now fixfiles does not attempt to run setfiles on an empty set if it
did not find a valid directory. Low risk, simple test. (Closes: #397198).
* Bug fix: "policycoreutils: audit2allow line 135 should refer to debian
package", thanks to Russell Coker. It now asks the users to install
the checkpolicy package, not the chckpolicy rpm package.
(Closes: #401369).
* Bug fix: "policycoreutils: patch for semanage.8", thanks to Russell
Coker. This adds some options that had been missing from the man page.
(Closes: #406702).
* Bug fix: "policycoreutils: fixfiles excludes reiserfs", thanks to
David Härdeman. Actually, it should: Support for atomic inode labeling
has not been implemented in reiserfs, so there is no SELinux support
for it. This is documented in selinux-doc. Reiser just won't label
files when they are created making it basically worthless for xattr
labeling. (Closes: #397196).
-- Manoj Srivastava <srivasta@debian.org> Sun, 4 Mar 2007 00:06:37 -0600
policycoreutils (1.32-1) unstable; urgency=low
* New upstream release
* Merged newrole auditing of failures due to user actions from Michael
Thompson.
* Merged audit2allow -l fix from Yuichi Nakamura.
* Merged restorecon -i and -o - support from Karl MacMillan.
* Merged semanage/seobject fix from Dan Walsh.
* Merged fixfiles -R and verify changes from Dan Walsh.
* Updated version for release.
* Bug fix: "/sbin/fixfiles: bash-ism in /sbin/fixfiles", thanks to Paul
Cupis (Closes: #391674).
-- Manoj Srivastava <srivasta@debian.org> Fri, 20 Oct 2006 17:12:58 -0500
policycoreutils (1.30.29-1) unstable; urgency=low
* New upstream point release
* Man page corrections from Dan Walsh
* Change all python invocations to /usr/bin/python -E
* Add missing getopt flags to genhomedircon
-- Manoj Srivastava <srivasta@debian.org> Wed, 20 Sep 2006 15:09:32 -0500
policycoreutils (1.30.28-2) unstable; urgency=low
* Bug fix: "Is purging of the whole /etc/selinux a good idea?", thanks
to Uwe Hermann. Perhaps not. (Closes: #386929).
* Bug fix: "postinst: /etc/selinux/config: no such file or directory",
thanks to Uwe Hermann (Closes: #386927).
-- Manoj Srivastava <srivasta@debian.org> Mon, 11 Sep 2006 16:29:44 -0500
policycoreutils (1.30.28-1) unstable; urgency=low
* New upstream point release
* Merged fix for restorecon symlink handling from Erich Schubert.
* Merged fix for restorecon // handling from Erich Schubert.
* Merged translations update and fixfiles fix from Dan Walsh.
* Fix the initial /etc/selinux/config to refer to
SELINUXTYPE=refpolicy-targeted to match what we ship (as opposed to
paths on red hat installations).
* Bug fix: "Can't open '/etc/selinux/targeted/policy/policy.20': No such
file or directory", thanks to Uwe Hermann (Closes: #384852).
* Add md5sums
* With this version of policycoreutils, the file /etc/selinux/config
shall have the variable SELINUXTYPE set to refpolicy-targeted (you may
also set it to be refpolicy-strict or refpolicy-src). Only 1.30.26-3
created the file with SELINUXTYPE set to targeted (which is
appropriate on Red Hat machines and not Debian). We can't
automatically change /etc/selinux/config (preserve user changes) since
/etc/selinux/targeted/policy/policy.N might be a legitimate local
security policy. If it is not, and if any of the files
/etc/selinux/refpolicy-targeted/policy/policy.N,
/etc/selinux/refpolicy-strict/policy/policy.N, or
/etc/selinux/refpolicy-src/policy/policy.N exist, please select one
for the SELINUXTYPE variable in /etc/selinux/config
-- Manoj Srivastava <srivasta@debian.org> Thu, 7 Sep 2006 11:37:47 -0500
policycoreutils (1.30.26-3) unstable; urgency=low
* Create /etc/selinux/config if that file does not exist. We default to
targeted permissive.
* Recommend on of the new reference policy based policy packages.
-- Manoj Srivastava <srivasta@debian.org> Mon, 21 Aug 2006 16:42:22 -0500
policycoreutils (1.30.26-2) unstable; urgency=low
* Bug fix: "ImportError: No module named seobject", thanks to Erich
Schubert. Fix wrong directory the modules were installed in. (Closes: #383101).
-- Manoj Srivastava <srivasta@debian.org> Tue, 15 Aug 2006 00:44:57 -0500
policycoreutils (1.30.26-1) unstable; urgency=low
* New upstream point release
* Merged semanage local file contexts patch from Chris PeBenito.
-- Manoj Srivastava <srivasta@debian.org> Sun, 13 Aug 2006 00:50:58 -0500
policycoreutils (1.30.25-1) unstable; urgency=low
* New upstream point release.
* Merged patch from Dan Walsh with:
* audit2allow: process MAC_POLICY_LOAD events
* newrole: run shell with - prefix to start a login shell
* po: po file updates
* restorecond: bail if SELinux not enabled
* fixfiles: omit -q
* genhomedircon: fix exit code if non-root
* semodule_deps: install man page
* Merged secon Makefile fix from Joshua Brindle.
* Merged netfilter contexts support patch from Chris PeBenito.
* Merged restorecond size_t fix from Joshua Brindle.
* Merged secon keycreate patch from Michael LeMay.
* Merged restorecond fixes from Dan Walsh.
Merged updated po files from Dan Walsh.
* Merged python gettext patch from Stephen Bennett.
* Merged semodule_deps from Karl MacMillan.
* Lindent.
* Merged patch from Dan Walsh with:
* -p option (progress) for setfiles and restorecon.
* disable context translation for setfiles and restorecon.
* on/off values for setsebool.
* Merged setfiles and semodule_link fixes from Joshua Brindle.
* Merged fix for setsebool error path from Serge Hallyn.
* Merged patch from Dan Walsh with:
* Updated po files.
* Fixes for genhomedircon and seobject.
* Audit message for mass relabel by setfiles.
* Updated fixfiles script for new setfiles location in /sbin.
* Merged more translations from Dan Walsh.
* Merged patch to relocate setfiles to /sbin for early relabel
when /usr might not be mounted from Dan Walsh.
* Merged semanage/seobject patch to preserve fcontext ordering in list.
* Merged secon patch from James Antill.
* Merged patch with updates to audit2allow, secon, genhomedircon,
and semanage from Dan Walsh.
* Fixed audit2allow and po Makefiles for DESTDIR= builds.
* Merged .po file patch from Dan Walsh.
* Merged bug fix for genhomedircon.
* Merged patch from Dan Walsh.
This includes audit2allow changes for analysis plugins,
internationalization support for several additional programs
and added po files, some fixes for semanage, and several cleanups.
It also adds a new secon utility.
* Merged fix warnings patch from Karl MacMillan.
* Merged semanage prefix support from Russell Coker.
* Added a test to setfiles to check that the spec file is
a regular file.
* Merged audit2allow fixes for refpolicy from Dan Walsh.
* Merged fixfiles patch from Dan Walsh.
* Merged restorecond daemon from Dan Walsh.
* Merged semanage non-MLS fixes from Chris PeBenito.
* Merged semanage and semodule man page examples from Thomas Bleher.
* Merged semanage labeling prefix patch from Ivan Gyurdiev.
* Bug fix: "ImportError: No module named semanage", thanks to Uwe
Hermann. Since the new semanage package has moved to the new Python
policy, and we depend on it, this issue is resolved. (Closes: #372543).
* Bug fix: "policycoreutils: incorrect syntax in genhomedircon", thanks
to Piotr Meyer. The new point release fixes this. (Closes: #369852).
* Remove support for restorecond, since we do not have support for
inotify in glibc (glibc 2.4 is sitting in experimental)
-- Manoj Srivastava <srivasta@debian.org> Sat, 12 Aug 2006 23:52:53 -0500
policycoreutils (1.30-2) unstable; urgency=low
* Bug fix: "policycoreutils - FTBFS: error: 'SEMANAGE_CAN_READ'
undeclared", thanks to Bastian Blank. Tighten dependency on
libsemanage1-dev (Closes: #361903).
-- Manoj Srivastava <srivasta@debian.org> Tue, 11 Apr 2006 09:07:42 -0500
policycoreutils (1.30-1) unstable; urgency=low
* New upstream release
* Updated version for release.
* Merged German translations (de.po) by Debian translation team from Manoj Srivastava.
* Merged audit2allow -R support, chcat fix, semanage MLS checks
and semanage audit calls from Dan Walsh.
* Merged semanage bug fix patch from Ivan Gyurdiev.
* Merged improve bindings patch from Ivan Gyurdiev.
* Merged semanage usage patch from Ivan Gyurdiev.
* Merged use PyList patch from Ivan Gyurdiev.
* Merged newrole -V/--version support from Glauber de Oliveira Costa.
* Merged genhomedircon prefix patch from Dan Walsh.
* Merged optionals in base patch from Joshua Brindle.
* Merged seuser/user_extra support patch to semodule_package
from Joshua Brindle.
* Merged getopt type fix for semodule_link/expand and sestatus
from Chris PeBenito.
* Merged clone record on set_con patch from Ivan Gyurdiev.
* Merged genhomedircon fix from Dan Walsh.
* Merged seusers.system patch from Ivan Gyurdiev.
* Merged improve port/fcontext API patch from Ivan Gyurdiev.
* Merged genhomedircon patch from Dan Walsh.
* Merged newrole audit patch from Steve Grubb.
* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
* Merged semanage and semodule access check patches from Joshua Brindle.
* Merged restorecon, chcat, and semanage patches from Dan Walsh.
* Modified newrole and run_init to use the loginuid when
supported to obtain the Linux user identity to re-authenticate,
and to fall back to real uid. Dropped the use of the SELinux
user identity, as Linux users are now mapped to SELinux users
via seusers and the SELinux user identity space is separate.
* Merged semanage bug fixes from Ivan Gyurdiev.
* Merged semanage fixes from Russell Coker.
* Merged chcat.8 and genhomedircon patches from Dan Walsh.
* Merged chcat, semanage, and setsebool patches from Dan Walsh.
* Merged semanage fixes from Ivan Gyurdiev.
* Merged semanage fixes from Russell Coker.
* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.
* Merged newrole cleanup patch from Steve Grubb.
* Merged setfiles/restorecon performance patch from Russell Coker.
* Merged genhomedircon and semanage patches from Dan Walsh.
* Merged remove add_local/set_local patch from Ivan Gyurdiev.
* Added filename to semodule error reporting.
* Merged genhomedircon and semanage patch from Dan Walsh.
* Changed semodule error reporting to include argv[0].
* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
* Merged patch series from Ivan Gyurdiev.
This includes patches to:
- cleanup setsebool
- update setsebool to apply active booleans through libsemanage
- update semodule to use the new semanage_set_rebuild() interface
- fix various bugs in semanage
* Merged patch from Dan Walsh (Red Hat).
This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
and semanage.
* Merged patch for chcat script from Dan Walsh.
* Merged fix for audit2allow long option list from Dan Walsh.
* Merged -r option for restorecon (alias for -R) from Dan Walsh.
* Merged chcat script and man page from Dan Walsh.
-- Manoj Srivastava <srivasta@debian.org> Mon, 10 Apr 2006 15:11:05 -0500
policycoreutils (1.28-6) unstable; urgency=low
* Hmm. Actually ship the postrm file, so we really remove setfiles.old
-- Manoj Srivastava <srivasta@debian.org> Sun, 12 Mar 2006 10:55:39 -0600
policycoreutils (1.28-5) unstable; urgency=low
* Bug fix: "policycoreutils: [L10N:DE] German PO file update", thanks to
Holger Wansing (Closes: #353069).
-- Manoj Srivastava <srivasta@debian.org> Sun, 12 Mar 2006 10:17:22 -0600
policycoreutils (1.28-4) unstable; urgency=low
* Bug fix: "undeclared conflict with selinux-utils over
/usr/sbin/setsebool", thanks to Robert Bihlmeyer (Closes: #346356).
-- Manoj Srivastava <srivasta@debian.org> Mon, 23 Jan 2006 13:38:02 -0600
policycoreutils (1.28-3) unstable; urgency=low
* Furthe changes to build dependencies; we now need python 2.4, since we
use the selinux and semanage python bindings.
-- Manoj Srivastava <srivasta@debian.org> Sun, 1 Jan 2006 18:27:15 -0600
policycoreutils (1.28-2) unstable; urgency=low
* Fix build dependencies; remove debian revisions from the dependency
relations to facilitate backports.
-- Manoj Srivastava <srivasta@debian.org> Sat, 31 Dec 2005 14:20:08 -0600
policycoreutils (1.28-1) unstable; urgency=low
* New upstream release
* Updated version for release.
* Clarified the genhomedircon warning message.
* Changed genhomedircon to warn on use of ROLE in homedir_template
if using managed policy, as libsemanage does not yet support it.
* Merged genhomedircon bug fix from Dan Walsh.
* Revised semodule* man pages to refer to checkmodule and
to include example sections.
* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
* Merged genhomedircon fix from Dan Walsh.
* Merged semodule* man pages from Dan Walsh, and edited them.
* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
retain validation/canonicalization of contexts during init.
* Changed genhomedircon to always use user_r for the role in the
managed case since user_get_defrole is broken.
* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
* Fixed semodule -v option.
* Merged audit2allow python script from Dan Walsh.
(old script moved to audit2allow.perl, will be removed later).
* Merged genhomedircon fixes from Dan Walsh.
* Merged semodule quieting patch from Dan Walsh
(inverts default, use -v to restore original behavior).
* Merged genhomedircon rewrite from Dan Walsh.
* Merged setsebool cleanup patch from Ivan Gyurdiev.
* Added -B (--build) option to semodule to force a rebuild.
* Reverted setsebool patch to call semanage_set_reload_bools().
* Changed setsebool to disable policy reload and to call
security_set_boolean_list to update the runtime booleans.
* Changed setfiles -c to use new flag to set_matchpathcon_flags()
to disable context translation by matchpathcon_init().
* Changed setfiles for the context canonicalization support.
* Changed setsebool to call semanage_is_managed() interface
and fall back to security_set_boolean_list() if policy is
not managed.
* Merged setsebool memory leak fix from Ivan Gyurdiev.
* Merged setsebool patch to call semanage_set_reload_bools()
interface from Ivan Gyurdiev.
* Merged setsebool patch from Ivan Gyurdiev.
This moves setsebool from libselinux/utils to policycoreutils,
and rewrites it to use libsemanage for permanent boolean changes.
* Merged semodule support for reload, noreload, and store options
from Joshua Brindle.
* Merged semodule_package rewrite from Joshua Brindle.
* Cleaned up usage and error messages and releasing of memory by
semodule_* utilities.
* Corrected error reporting by semodule.
* Updated semodule_expand for change to sepol interface.
* Merged fixes for make DESTDIR= builds from Joshua Brindle.
* Updated semodule_package for sepol interface changes.
* Updated semodule_expand/link for sepol interface changes.
* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.
* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
* Merged fixfiles patch from Dan Walsh (Red Hat).
* Updated semodule for removal of semanage_strerror.
* Updated semodule_link and semodule_expand to use shared libsepol.
Fixed audit2why to call policydb_init prior to policydb_read (still
uses the static libsepol).
* Bug fix: "policycoreutils: doesn't remove /usr/sbin/setfiles.old on
purge", thanks to Lars Wirzenius (Closes: #341418).
-- Manoj Srivastava <srivasta@debian.org> Fri, 30 Dec 2005 00:56:01 -0600
policycoreutils (1.26-1) unstable; urgency=low
* New upstream release
* Updated version for release.
* Changed setfiles -c to translate the context to raw format
prior to calling libsepol.
* Changed semodule to report errors even without -v,
to detect extraneous arguments, and corrected usage message.
* Merged patch for fixfiles -C from Dan Walsh.
* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
Bugs found by Coverity.
* Merged patch to move module read/write code from libsemanage
to libsepol from Jason Tang (Tresys).
* Changed semodule* to link with libsemanage.
* Merged restorecon patch from Ivan Gyurdiev.
* Merged load_policy, newrole, and genhomedircon patches from Red Hat.
* Merged loadable module support from Tresys Technology.
* Updated build depends. (Closes: #326153).
* policycoreutils: run_init blocks sigCHLD but doesn't unblock it before
exec, thanks to Erich Schubert (Closes: #326152).
-- Manoj Srivastava <srivasta@debian.org> Thu, 15 Sep 2005 01:06:11 -0500
policycoreutils (1.24-2) unstable; urgency=low
* use /etc/adduser.conf as authoritative for the starting UID, and
otherwise change genhomedircon to match Debian practice. This had
worked while Russell Coker maintained this package, but this patch was
lost in transition.
* Bug fix: "FTBFS: build-depends not strict enough", thanks to Christian
T. Steigies (Closes: #316440).
-- Manoj Srivastava <srivasta@debian.org> Thu, 7 Jul 2005 13:11:01 -0500
policycoreutils (1.24-1) unstable; urgency=low
* New upstream release
* Updated version for release.
* Merged fixfiles and newrole patch from Dan Walsh.
* Merged audit2why man page from Dan Walsh.
* Extended audit2why to incorporate booleans and local user
settings when analyzing audit messages.
* Updated audit2why for sepol_ prefixes on Flask types to
avoid namespace collision with libselinux, and to
include <selinux/selinux.h> now.
* Added audit2why utility.
* Merged patch for fixfiles from Dan Walsh.
Allow passing -F to force reset of customizable contexts.
* Fixed signed/unsigned pointer bug in load_policy.
* Reverted context validation patch for genhomedircon.
* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
Otherwise, an initial policy load cannot be performed using
load_policy, e.g. for anaconda.
* Merged load_policy is_selinux_enabled patch from Dan Walsh.
* Merged restorecon verbose output patch from Dan Walsh.
* Merged setfiles altroot patch from Chris PeBenito.
* Merged context validation patch for genhomedircon from Eric Paris.
* Changed setfiles -c to call set_matchpathcon_flags(3) to
turn off processing of .homedirs and .local.
* Merged rewrite of genhomedircon by Eric Paris.
* Changed fixfiles to relabel jfs since it now supports security xattrs
(as of 2.6.11). Removed reiserfs until 2.6.12 is released with
fixed support for reiserfs and selinux.
-- Manoj Srivastava <srivasta@debian.org> Mon, 27 Jun 2005 16:00:56 -0500
policycoreutils (1.22+0-2) unstable; urgency=low
* New upstream release
* Bug fix: "policycoreutils: package description typo(s) and the like",
thanks to Florian Zumbiehl (Closes: #300054).
-- Manoj Srivastava <srivasta@debian.org> Thu, 17 Mar 2005 19:54:20 -0600
policycoreutils (1.22+0-1) unstable; urgency=low
* An release number designed to fix up fix the broken orig.tar.gz in the
previous release. This is really the 1.22-2 release, but the
1.22.orig.tar.gz in the archive is an incorrect one.
* Bug fix: "policycoreutils: FTBFS due to undeclared functions", thanks
to Christian T. Steigies. The build dependencies needed to be
versioned as well. (Closes: #299338).
-- Manoj Srivastava <srivasta@debian.org> Sun, 13 Mar 2005 13:36:24 -0600
policycoreutils (1.22-1) unstable; urgency=low
* New upstream release
* Merged restorecon and genhomedircon patch from Dan Walsh.
* Merged load_policy and genhomedircon patch from Dan Walsh.
* Merged fixfiles and genhomedircon patch from Dan Walsh.
* Merged several fixes from Ulrich Drepper.
* Changed load_policy to fall back to the original policy upon
an error from sepol_genusers().
* Merged new genhomedircon script from Dan Walsh.
* Changed load_policy to call sepol_genusers().
* Changed relabel Makefile target to use restorecon.
* Merged restorecon patch from Dan Walsh.
* Merged sestatus patch from Dan Walsh.
* Merged further change to fixfiles -C from Dan Walsh.
* Merged further patches for restorecon/setfiles -e and fixfiles -C.
* Merged patch for fixfiles -C option from Dan Walsh.
* Merged patch -e support for restorecon from Dan Walsh.
* Merged updated -e support for setfiles from Dan Walsh.
* Merged patch for open_init_pty from Manoj Srivastava.
* Merged updated fixfiles script from Dan Walsh.
* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
* Reverted fixfiles patch for file_contexts.local;
obsoleted by setfiles rewrite.
* Merged error handling patch for restorecon from Dan Walsh.
* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
* Rewrote setfiles to use matchpathcon and the new interfaces
exported by libselinux (>= 1.21.5).
* Prevent overflow of spec array in setfiles.
* Merged genhomedircon STARTING_UID bug fix from Dan Walsh.
* Merged newrole -l support from Darrel Goeddel (TCS).
* Merged fixfiles patch for file_contexts.local from Dan Walsh.
* Fixed restorecon to not treat errors from is_context_customizable()
as a customizable context.
* Merged setfiles/restorecon patch to not reset user field unless
-F option is specified from Dan Walsh.
* Merged open_init_pty helper for run_init from Manoj Srivastava.
* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.
* Merged customizable contexts patch for restorecon/setfiles from Dan Walsh.
-- Manoj Srivastava <srivasta@debian.org> Sat, 12 Mar 2005 18:07:50 -0600
policycoreutils (1.20-3) unstable; urgency=low
* policycoreutils_1.20-2(ia64/unstable): FTBFS: missing build-depends,
thanks to Lamont Jones. I wonder why this builds on my debootstrap
installed UML with just build essential ad selinux. (Closes: #291501).
-- Manoj Srivastava <srivasta@debian.org> Fri, 21 Jan 2005 10:30:16 -0600
policycoreutils (1.20-2) unstable; urgency=low
* Arranged to flush stdout and stderr run at all the exit points for the
open_init_pty executable. Also, improved comments and man page for
genhomedircon, and corrected the default value for STARTING_UID.
-- Manoj Srivastava <srivasta@debian.org> Thu, 20 Jan 2005 23:15:13 -0600
policycoreutils (1.20-1) unstable; urgency=low
* New upstream release.
* Merged fixfiles rewrite from Dan Walsh.
* Merged restorecon patch from Dan Walsh.
* Merged fixfiles and restorecon patches from Dan Walsh.
* Changed restorecon to ignore ENOENT errors from matchpathcon.
* Merged nonls patch from Chris PeBenito.
* Removed fixfiles.cron.
* Merged run_init.8 patch from Dan Walsh.
* Added man pages for genhomedircon, audit2allow, and all the se_*
scripts.
* Converted to new build system, and arch.
* Bug fix: "policycoreutils: Too heavy dependency on the package
expect", thanks to YAMASHITA Junji. rewrote open_init_tty in C, and
added man page. I guess it can be moved to /usr/bin, though I don't
really see what other purpose it can serve. (Closes: #255674).
* Bug fix: "policycoreutils: error in genhomedircon: doesn't recognize
FIRST_UID", thanks to Thomas Bleher. Since this was packaged from
scratch, this debian specific flaw has been corrected. (Closes: #281988).
-- Manoj Srivastava <srivasta@debian.org> Thu, 20 Jan 2005 01:53:32 -0600
policycoreutils (1.18-1) unstable; urgency=low
* New upstream version. Setfiles now works with policy Makefile.
-- Russell Coker <russell@coker.com.au> Sat, 6 Nov 2004 02:31:00 +1100
policycoreutils (1.16-2) unstable; urgency=low
* Depends on libsepol for load_polixy.
-- Russell Coker <russell@coker.com.au> Mon, 23 Aug 2004 19:25:00 +1000
policycoreutils (1.16-1) unstable; urgency=low
* New upstream release.
-- Russell Coker <russell@coker.com.au> Fri, 20 Aug 2004 22:48:00 +1000
policycoreutils (1.14-6) unstable; urgency=low
* Minor newrole bugfix from Chad Hanson <chanson@TrustedCS.com>.
-- Russell Coker <russell@coker.com.au> Tue, 10 Aug 2004 16:23:00 +1000
policycoreutils (1.14-5) unstable; urgency=low
* Fixed a couple of minor bugs in error handling for genhomedircon.
-- Russell Coker <russell@coker.com.au> Sun, 8 Aug 2004 22:39:00 +1000
policycoreutils (1.14-4) unstable; urgency=low
* Made it depend on the latest sed, genhomedircon doesn't seem to work with
older versions.
-- Russell Coker <russell@coker.com.au> Sun, 1 Aug 2004 17:50:00 +1000
policycoreutils (1.14-3) unstable; urgency=low
* Changed genhomedircon to search /etc/adduser.conf for the first UID for a
non-system user. The previous version really stuffed up a system that had
a system user with a home directory under /var/run.
-- Russell Coker <russell@coker.com.au> Mon, 19 Jul 2004 22:56:00 +1000
policycoreutils (1.14-2) unstable; urgency=low
* Made it build-depend on the latest libselinux1-dev.
Closes: #257351
-- Russell Coker <russell@coker.com.au> Sat, 3 Jul 2004 22:54:00 +1000
policycoreutils (1.14-1) unstable; urgency=low
* New upstream version, adds -o option to setfiles and a few other features.
-- Russell Coker <russell@coker.com.au> Wed, 30 Jun 2004 15:21:00 +1000
policycoreutils (1.12-5) unstable; urgency=low
* Add better error messages to genhomedircon and make it not abort when only
one role is specified for a user without {}.
-- Russell Coker <russell@coker.com.au> Sun, 20 Jun 2004 14:03:00 +1000
policycoreutils (1.12-4) unstable; urgency=low
* Use the upstream genhomedircon and patch it to use DHOME from
/etc/adduser.conf
-- Russell Coker <russell@coker.com.au> Thu, 10 Jun 2004 17:59:00 +1000
policycoreutils (1.12-3) unstable; urgency=low
* Made setfiles -s use lstat() instead of stat() so it can label sym-links.
-- Russell Coker <russell@coker.com.au> Sun, 30 May 2004 14:08:00 +1000
policycoreutils (1.12-2) unstable; urgency=low
* Added /selinux directory.
-- Russell Coker <russell@coker.com.au> Sat, 29 May 2004 13:48:00 +1000
policycoreutils (1.12-1) unstable; urgency=low
* New upstream version and taking over the package.
* Newrole patch and added fixfiles.
-- Russell Coker <russell@coker.com.au> Sat, 15 May 2004 16:34:00 +1000
policycoreutils (1.10-0.1) unstable; urgency=low
* NMU for new upstream version.
-- Russell Coker <russell@coker.com.au> Fri, 9 Apr 2004 15:09:00 +1000
policycoreutils (1.8-0.1) unstable; urgency=low
* NMU for new upstream version.
* Moved load_policy back to /usr/sbin.
-- Russell Coker <russell@coker.com.au> Tue, 16 Mar 2004 19:05:00 +1100
policycoreutils (1.6-0.3) unstable; urgency=low
* New upload because of rejected build-depends.
-- Russell Coker <russell@coker.com.au> Thu, 26 Feb 2004 22:56:00 +1100
policycoreutils (1.6-0.1) unstable; urgency=low
* NMU to upload new upstream version.
-- Russell Coker <russell@coker.com.au> Thu, 26 Feb 2004 21:46:00 +1100
policycoreutils (1.4-4) unstable; urgency=low
* debian/patches/setfiles-order.patch:
- New patch to fix ordering of file context regexps, from
Stephen Smalley.
-- Colin Walters <walters@debian.org> Mon, 23 Feb 2004 04:43:36 +0000
policycoreutils (1.4-3) unstable; urgency=low
* Rebuild with fixed tar to remove /DEBIAN (Closes: #231541)
* Apply (modified) patch from Robert Bihlmeyer to handle
regexps with starting metacharacters (Closes: #231561)
-- Colin Walters <walters@debian.org> Sun, 15 Feb 2004 03:46:17 +0000
policycoreutils (1.4-2) unstable; urgency=low
* debian/genhomedircon:
- New file, used to set contexts in home directories.
* debian/control:
- Conflict with selinux-policy-default (<< 1:1.4-5).
-- Colin Walters <walters@debian.org> Wed, 4 Feb 2004 13:46:23 +0000
policycoreutils (1.4-1) unstable; urgency=low
* debian/control:
- Build-Depend on libpam0g-dev (Closes: #225727)
- Depend on expect (Closes: #225880)
-- Colin Walters <walters@debian.org> Sun, 4 Jan 2004 00:16:55 +0000
policycoreutils (1.4-0.2) unstable; urgency=low
* Fixed a the help for audit2allow to have the right name.
-- Russell Coker <russell@coker.com.au> Fri, 26 Dec 2003 10:37:00 +1100
policycoreutils (1.4-0.1) unstable; urgency=low
* New upstream, no significant change as mostly I had included the changes
already.
-- Russell Coker <russell@coker.com.au> Sat, 6 Dec 2003 22:59:00 +1100
policycoreutils (1.2-0.2) unstable; urgency=low
* Put in a symlink for /usr/sbin/load_policy so existing scripts will work.
-- Russell Coker <russell@coker.com.au> Fri, 21 Nov 2003 12:43:00 +1100
policycoreutils (1.2-0.1) unstable; urgency=low
* Patches from CVS upstream version, makes setfiles slightly faster and
adds audit2allow.
-- Russell Coker <russell@coker.com.au> Fri, 21 Nov 2003 01:20:00 +1100
policycoreutils (1.2-0) unstable; urgency=low
* New upstream version (NMU). Setfiles is now a lot faster.
-- Russell Coker <russell@coker.com.au> Wed, 19 Nov 2003 18:18:00 +1100
policycoreutils (1.0-1) unstable; urgency=low
* Initial version.
-- Colin Walters <walters@debian.org> Thu, 3 Jul 2003 17:16:19 -0400
|
