Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE
checkpolicy
checkpolicy.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File checkpolicy.changes of Package checkpolicy
------------------------------------------------------------------- Tue Dec 19 10:43:51 UTC 2023 - Cathy Hu <cathy.hu@suse.com> - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * checkpolicy: Add the command line argument -N, --disable-neverallow * dispol: add option to display users, drop duplicate option to display booleans, show number of entries before listing them * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies * dispol: add options: --actions ACTIONS, --help * dismod: add options: --actions ACTIONS, --help * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba@redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman@gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach@redhat.com> ------------------------------------------------------------------- Fri Feb 24 07:32:08 UTC 2023 - Johannes Segitz <jsegitz@suse.com> - Update to version 3.5 * error out if required permission would exceed limit * Improve error message for type bounds - Added additional developer key (Jason Zaman) ------------------------------------------------------------------- Mon May 9 10:09:06 UTC 2022 - Johannes Segitz <jsegitz@suse.com> - Update to version 3.4 * warn on bogus IP address or netmask in nodecon statement * allow wildcard permissions in constraints * mention class name on invalid permission ------------------------------------------------------------------- Thu Nov 11 13:23:59 UTC 2021 - Johannes Segitz <jsegitz@suse.com> - Update to version 3.3 * When reading a binary policy by checkpolicy, do not automatically change the version to the max policy version supported by libsepol or, if specified, the value given using the "-c" flag. * Updated documentation * Prints the reason why opening a source policy file failed ------------------------------------------------------------------- Tue Mar 9 08:59:58 UTC 2021 - Johannes Segitz <jsegitz@suse.com> - Update to version 3.2 * Fix a memleak and an integer overflow ------------------------------------------------------------------- Tue Jul 14 08:31:15 UTC 2020 - Johannes Segitz <jsegitz@suse.com> - Update to version 3.1 * checkpolicy treats invalid characters as an error - might break rare use cases (intentionally) * Drop extern_te_assert_t.patch, is upstream ------------------------------------------------------------------- Tue Mar 3 12:19:40 UTC 2020 - Johannes Segitz <jsegitz@suse.de> - Update to version 3.0 * add flag to enable policy optimization * allow to write policy to stdout * remove a redundant if-condition ------------------------------------------------------------------- Wed Jan 15 14:25:45 UTC 2020 - Johannes Segitz <jsegitz@suse.de> - Add extern_te_assert_t.patch to mark te_assert_t as extern. Prevents build failures on gcc10 (bsc#1160259) ------------------------------------------------------------------- Wed Mar 20 14:58:08 UTC 2019 - jsegitz@suse.com - Update to version 2.9 * Add option to sort contexts when creating a binary policy * Update manpage * check the result value of hashtable_search * destroy the class datum if it fails to initialize * remove extraneous policy build noise ------------------------------------------------------------------- Sun Nov 11 17:19:04 UTC 2018 - Jan Engelhardt <jengelh@inai.de> - Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS" (RPM_LD_FLAGS is always empty). ------------------------------------------------------------------- Wed Nov 7 16:26:24 UTC 2018 - jsegitz@suse.com - Source URL was invalid (bsc#1115052) ------------------------------------------------------------------- Wed Oct 17 11:52:55 UTC 2018 - jsegitz@suse.com - Update to version 2.8 (bsc#1111732). For changes please see https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt - Dropped checkpolicy-build.patch, not necessary anymore - Removed BuildRequires for byacc. It builds without and this blocks building on SLE 15 ------------------------------------------------------------------- Mon Jun 11 07:48:05 UTC 2018 - jsegitz@suse.com - checkpolicy-build.patch was added in the former change to fix build failures ------------------------------------------------------------------- Wed May 16 07:16:19 UTC 2018 - mcepl@suse.com - Rebase to 2.7. For changes please see https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt ------------------------------------------------------------------- Fri Nov 24 09:01:04 UTC 2017 - jsegitz@suse.com - Update to version 2.6. Notable changes: * Add types associated to a role in the current scope when parsing * Extend checkpolicy pathname matching * Set flex as default lexer * Fix checkmodule output message * Fail if module name different than output base filename * Add support for portcon dccp protocol ------------------------------------------------------------------- Thu Jun 29 21:05:43 UTC 2017 - mpluskal@suse.com - Use plain flex ------------------------------------------------------------------- Thu Jul 21 13:02:06 UTC 2016 - jengelh@inai.de - Trim/update description ------------------------------------------------------------------- Thu Jul 14 14:18:26 UTC 2016 - jsegitz@novell.com - Without bug number no submit to SLE 12 SP2 is possible, so to make sle-changelog-checker happy: bsc#988977 ------------------------------------------------------------------- Fri Jul 8 16:22:15 UTC 2016 - i@marguerite.su - update version 2.5 * Add neverallow support for ioctl extended permissions * fix double free on name-based type transitions * switch operations to extended perms * policy_define.c: fix compiler warnings * Remove uses of -Wno-return-type * Fix -Wreturn-type issues * dispol: display operations as ranges * dispol: Extend to display operations * Add support for ioctl command whitelisting * Add option to write CIL policy * Add device tree ocontext nodes to Xen policy * Widen Xen IOMEM context entries * Expand allowed character set in paths * Fix precedence between number and filesystem tokens * dispol/dismod fgets function warnings fix - changes in 2.4 * Fix bugs found by hardened gcc flags * Add missing semicolon in cond_else parser rule * Clear errno before call to strtol(3) * Global C++11 compatibility * Allow libsepol C++ static library on device ------------------------------------------------------------------- Sun May 18 00:18:53 UTC 2014 - crrodriguez@opensuse.org - version 2.3 * Report source file and line information for neverallow failures. * Prevent incompatible option combinations for checkmodule. * Drop -lselinux from LDLIBS for test programs; not used. * Add debug feature to display constraints/validatetrans from Richard Haines. ------------------------------------------------------------------- Thu Oct 31 13:41:13 UTC 2013 - p.drouand@gmail.com - Update to version 2.2 * Fix hyphen usage in man pages * handle-unknown / -U required argument fix * Support overriding Makefile PATH and LIBDIR * Support space and : in filenames - Remove checkpolicy-rhat.patch; fixed on upstream ------------------------------------------------------------------- Thu Jun 27 14:29:19 UTC 2013 - vcizek@suse.com - change the source url to the official 2.1.12 release tarball ------------------------------------------------------------------- Fri Mar 29 13:10:16 UTC 2013 - vcizek@suse.com - update to 2.1.12 * Fix errors found by coverity * implement default type policy syntax * Free allocated memory when clean up / exit. - changes in checkpolicy-rhat.patch: * original hunk was merged upstream * space should be allowed for file trans names ------------------------------------------------------------------- Wed Jan 30 11:40:10 UTC 2013 - vcizek@suse.com - update to 2.1.11 * fd leak reading policy * check return code on ebitmap_set_bit * sepolgen: We need to support files that have a + in them * implement new default labeling behaviors for usr, role, range ------------------------------------------------------------------- Wed Jul 25 11:24:54 UTC 2012 - meissner@suse.com - updated to 2.1.8 - various fixes ------------------------------------------------------------------- Sat Sep 17 22:52:07 UTC 2011 - jengelh@medozas.de - Remove redundant tags/sections from specfile - Use %_smp_mflags for parallel build ------------------------------------------------------------------- Thu Feb 25 14:51:44 UTC 2010 - prusnak@suse.cz - updated to 2.0.21 * Add support for building Xen policies from Paul Nuzzi. * Add long options to checkpolicy and checkmodule by Guido Trentalancia <guido@trentalancia.com> ------------------------------------------------------------------- Tue Jun 23 12:29:42 CEST 2009 - prusnak@suse.cz - require libsepol-devel-static ------------------------------------------------------------------- Wed May 27 13:52:37 CEST 2009 - prusnak@suse.cz - updated to 2.0.19 * fix alias field in module format, caused by boundary format change from Caleb Case * properly escape regex symbols in the lexer from Stephen Smalley * add bounds support from KaiGai Kohei ------------------------------------------------------------------- Mon Oct 20 18:03:54 CEST 2008 - prusnak@suse.cz - use flex-old for building (using flex does not build refpolicy) ------------------------------------------------------------------- Tue Jul 15 17:56:14 CEST 2008 - prusnak@suse.cz - initial version 2.0.16 * based on Fedora package by Dan Walsh <dwalsh@redhat.com>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor