Joshua Brindle | 223bb40 | 2008-11-09 11:20:40 -0500 | [diff] [blame^] | 1 | 2.0.29 2008-11-11 |
| 2 | * Add USER to lines to homedir_template context file from Chris PeBenito. |
| 3 | |
Joshua Brindle | f187d4a | 2008-09-15 11:25:27 -0400 | [diff] [blame] | 4 | 2.0.28 2008-09-15 |
| 5 | * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh |
| 6 | |
Joshua Brindle | 13cd4c8 | 2008-08-19 15:30:36 -0400 | [diff] [blame] | 7 | 2.0.27 2008-08-05 |
| 8 | * Modify genhomedircon to skip %groupname entries. |
| 9 | Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the %groupname syntax. |
| 10 | |
| 11 | 2.0.26 2008-07-29 |
| 12 | * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. |
| 13 | Strip any trailing slash before appending /*$. |
| 14 | |
| 15 | 2.0.25 2008-04-21 |
| 16 | * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. |
| 17 | Fixes semanage boolean -D seg fault (bug 441379). |
| 18 | |
| 19 | 2.0.24 2008-02-26 |
| 20 | * make swigify |
| 21 | |
| 22 | 2.0.23 2008-02-04 |
| 23 | * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller. |
| 24 | |
| 25 | 2.0.22 2008-02-04 |
| 26 | * Free policydb before fork from Joshua Brindle. |
| 27 | |
| 28 | 2.0.21 2008-02-04 |
| 29 | * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley. |
| 30 | |
| 31 | 2.0.12 2008-02-02 |
| 32 | * Use sepol_set_expand_consume_base to reduce peak memory usage when |
| 33 | using semodule from Joshua Brindle. |
| 34 | |
| 35 | 2.0.19 2008-01-31 |
| 36 | * Fix genhomedircon to not override a file context with a homedir context from Todd Miller. |
| 37 | |
| 38 | 2.0.18 2008-01-28 |
| 39 | * Fix spurious out of memory error reports. |
| 40 | |
| 41 | 2.0.17 2008-01-25 |
| 42 | * Merged second version of fix for genhomedircon handling from Caleb Case. |
| 43 | |
| 44 | 2.0.16 2008-01-24 |
| 45 | * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case. |
| 46 | |
| 47 | 2.0.15 2007-12-05 |
| 48 | * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. |
| 49 | * Copy the store path in semanage_select_store from Dan Walsh. |
| 50 | |
| 51 | 2.0.14 2007-11-05 |
| 52 | * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. |
| 53 | |
| 54 | 2.0.13 2007-11-05 |
| 55 | * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley. |
| 56 | |
| 57 | 2.0.12 2007-10-05 |
| 58 | * ustr cleanups from James Antill. |
| 59 | * Ensure that /root gets labeled even if using the default context from Dan Walsh. |
| 60 | |
| 61 | 2.0.11 2007-09-28 |
| 62 | * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh. |
| 63 | |
| 64 | 2.0.10 2007-09-28 |
| 65 | * Fix error checking on getpw*_r functions from Todd Miller. |
| 66 | * Make genhomedircon skip invalid homedir contexts from Todd Miller. |
| 67 | * Set default user and prefix from seusers from Dan Walsh. |
| 68 | * Add swigify Makefile target from Dan Walsh. |
| 69 | |
| 70 | 2.0.9 2007-09-24 |
| 71 | * Pass CFLAGS to CC even on link command, per Dennis Gilmore. |
| 72 | |
| 73 | 2.0.8 2007-09-19 |
| 74 | * Clear errno on non-fatal errors to avoid reporting them upon a |
| 75 | later error that does not set errno. |
| 76 | |
| 77 | 2.0.7 2007-09-19 |
| 78 | * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. |
| 79 | |
| 80 | 2.0.6 2007-09-10 |
| 81 | * Change to use getpw* function calls to the _r versions from Todd Miller. |
| 82 | |
| 83 | 2.0.5 2007-08-23 |
| 84 | * Replace genhomedircon script with equivalent functionality within |
| 85 | libsemanage and introduce disable-genhomedircon option in |
| 86 | semanage.conf from Todd Miller. |
| 87 | Note: Depends on ustr. |
| 88 | |
| 89 | 2.0.4 2007-08-16 |
| 90 | * Allow dontaudits to be turned off via semanage interface when |
| 91 | updating policy from Joshua Brindle. |
| 92 | |
| 93 | 2.0.3 2007-04-25 |
| 94 | * Fix to libsemanage man patches so whatis will work better from Dan Walsh |
| 95 | |
| 96 | 2.0.2 2007-04-24 |
| 97 | * Merged optimizations from Stephen Smalley. |
| 98 | - do not set all booleans upon commit, only those whose values have changed |
| 99 | - only install the sandbox upon commit if something was rebuilt |
| 100 | |
| 101 | 2.0.1 2007-03-12 |
| 102 | * Merged dbase_file_flush patch from Dan Walsh. |
| 103 | This removes any mention of specific tools (e.g. semanage) |
| 104 | from the comment header of the auto-generated files, |
| 105 | since there are multiple front-end tools. |
| 106 | |
| 107 | 2.0.0 2007-02-20 |
| 108 | * Merged Makefile test target patch from Caleb Case. |
| 109 | * Merged get_commit_number function rename patch from Caleb Case. |
| 110 | * Merged strnlen -> strlen patch from Todd Miller. |
| 111 | |
| 112 | 1.10.1 2007-01-26 |
| 113 | * Merged python binding fix from Dan Walsh. |
| 114 | |
| 115 | 1.10.0 2007-01-18 |
| 116 | * Updated version for stable branch. |
| 117 | |
| 118 | 1.9.2 2007-01-08 |
| 119 | * Merged patch to optionally reduce disk usage by removing |
| 120 | the backup module store and linked policy from Karl MacMillan |
| 121 | * Merged patch to correctly propagate return values in libsemanage |
| 122 | |
| 123 | 1.9.1 2006-11-27 |
| 124 | * Merged patch to compile wit -fPIC instead of -fpic from |
| 125 | Manoj Srivastava to prevent hitting the global offest table |
| 126 | limit. Patch changed to include libselinux and libsemanage in |
| 127 | addition to libsepol. |
| 128 | |
| 129 | 1.8 2006-10-17 |
| 130 | * Updated version for release. |
| 131 | |
| 132 | 1.6.17 2006-09-29 |
| 133 | * Merged patch to skip reload if no active store exists and |
| 134 | the store path doesn't match the active store path from Dan Walsh. |
| 135 | * Merged patch to not destroy sepol handle on error path of |
| 136 | connect from James Athey. |
| 137 | * Merged patch to add genhomedircon path to semanage.conf from |
| 138 | James Athey. |
| 139 | |
| 140 | 1.6.16 2006-08-14 |
| 141 | * Make most copy errors fatal, but allow exceptions for |
| 142 | file_contexts.local, seusers, and netfilter_contexts if |
| 143 | the source file does not exist in the store. |
| 144 | |
| 145 | 1.6.15 2006-08-11 |
| 146 | * Merged separate local file contexts patch from Chris PeBenito. |
| 147 | |
| 148 | 1.6.14 2006-08-11 |
| 149 | * Merged patch to make most copy errors non-fatal from Dan Walsh. |
| 150 | |
| 151 | 1.6.13 2006-08-03 |
| 152 | * Merged netfilter contexts support from Chris PeBenito. |
| 153 | |
| 154 | 1.6.12 2006-07-11 |
| 155 | * Merged support for read operations on read-only fs from |
| 156 | Caleb Case (Tresys Technology). |
| 157 | |
| 158 | 1.6.11 2006-06-29 |
| 159 | * Lindent. |
| 160 | |
| 161 | 1.6.10 2006-06-26 |
| 162 | * Merged setfiles location check patch from Dan Walsh. |
| 163 | |
| 164 | 1.6.9 2006-06-16 |
| 165 | * Merged several fixes from Serge Hallyn: |
| 166 | dbase_file_cache: deref of uninit data on error path. |
| 167 | dbase_policydb_cache: clear fp to avoid double fclose |
| 168 | semanage_fc_sort: destroy temp on error paths |
| 169 | |
| 170 | 1.6.8 2006-06-02 |
| 171 | * Updated default location for setfiles to /sbin to |
| 172 | match policycoreutils. This can also be adjusted via |
| 173 | semanage.conf using the syntax: |
| 174 | [setfiles] |
| 175 | path = /path/to/setfiles |
| 176 | args = -q -c $@ $< |
| 177 | [end] |
| 178 | |
| 179 | 1.6.7 2006-05-05 |
| 180 | * Merged fix warnings patch from Karl MacMillan. |
| 181 | |
| 182 | 1.6.6 2006-04-14 |
| 183 | * Merged updated file context sorting patch from Christopher |
| 184 | Ashworth, with bug fix for escaped character flag. |
| 185 | |
| 186 | 1.6.5 2006-04-13 |
| 187 | * Merged file context sorting code from Christopher Ashworth |
| 188 | (Tresys Technology), based on fc_sort.c code in refpolicy. |
| 189 | |
| 190 | 1.6.4 2006-04-12 |
| 191 | * Merged python binding t_output_helper removal patch from Dan Walsh. |
| 192 | * Regenerated swig files. |
| 193 | |
| 194 | 1.6.3 2006-03-30 |
| 195 | * Merged corrected fix for descriptor leak from Dan Walsh. |
| 196 | |
| 197 | 1.6.2 2006-03-20 |
| 198 | * Merged Makefile PYLIBVER definition patch from Dan Walsh. |
| 199 | |
| 200 | 1.6.1 2006-03-20 |
| 201 | * Merged man page reorganization from Ivan Gyurdiev. |
| 202 | |
| 203 | 1.6 2006-03-14 |
| 204 | * Updated version for release. |
| 205 | |
| 206 | 1.5.31 2006-03-09 |
| 207 | * Merged abort early on merge errors patch from Ivan Gyurdiev. |
| 208 | |
| 209 | 1.5.30 2006-03-08 |
| 210 | * Cleaned up error handling in semanage_split_fc based on a patch |
| 211 | by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. |
| 212 | |
| 213 | 1.5.29 2006-02-21 |
| 214 | * Merged MLS handling fixes from Ivan Gyurdiev. |
| 215 | |
| 216 | 1.5.28 2006-02-16 |
| 217 | * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. |
| 218 | |
| 219 | 1.5.27 2006-02-16 |
| 220 | * Merged base_merge_components changes from Ivan Gyurdiev. |
| 221 | |
| 222 | 1.5.26 2006-02-15 |
| 223 | * Merged paths array patch from Ivan Gyurdiev. |
| 224 | * Merged bug fix patch from Ivan Gyurdiev. |
| 225 | |
| 226 | 1.5.25 2006-02-14 |
| 227 | * Merged improve bindings patch from Ivan Gyurdiev. |
| 228 | |
| 229 | 1.5.24 2006-02-14 |
| 230 | * Merged use PyList patch from Ivan Gyurdiev. |
| 231 | * Merged memory leak fix patch from Ivan Gyurdiev. |
| 232 | * Merged nodecon support patch from Ivan Gyurdiev. |
| 233 | * Merged cleanups patch from Ivan Gyurdiev. |
| 234 | * Merged split swig patch from Ivan Gyurdiev. |
| 235 | |
| 236 | 1.5.23 2006-02-13 |
| 237 | * Merged optionals in base patch from Joshua Brindle. |
| 238 | |
| 239 | 1.5.22 2006-02-13 |
| 240 | * Merged treat seusers/users_extra as optional sections patch from |
| 241 | Ivan Gyurdiev. |
| 242 | * Merged parse_optional fixes from Ivan Gyurdiev. |
| 243 | |
| 244 | 1.5.21 2006-02-07 |
| 245 | * Merged seuser/user_extra support patch from Joshua Brindle. |
| 246 | * Merged remote system dbase patch from Ivan Gyurdiev. |
| 247 | |
| 248 | 1.5.20 2006-02-02 |
| 249 | * Merged clone record on set_con patch from Ivan Gyurdiev. |
| 250 | |
| 251 | 1.5.19 2006-01-30 |
| 252 | * Merged fname parameter patch from Ivan Gyurdiev. |
| 253 | * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. |
| 254 | * Merged seusers.system patch from Ivan Gyurdiev. |
| 255 | * Merged improve port/fcontext API patch from Ivan Gyurdiev. |
| 256 | |
| 257 | 1.5.18 2006-01-27 |
| 258 | * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. |
| 259 | |
| 260 | 1.5.17 2006-01-27 |
| 261 | * Merged set_create_store, access_check, and is_connected interfaces |
| 262 | from Joshua Brindle. |
| 263 | |
| 264 | 1.5.16 2006-01-19 |
| 265 | * Regenerate python wrappers. |
| 266 | |
| 267 | 1.5.15 2006-01-18 |
| 268 | * Merged pywrap Makefile diff from Dan Walsh. |
| 269 | * Merged cache management patch from Ivan Gyurdiev. |
| 270 | * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. |
| 271 | * Merged remove apply_local function patch from Ivan Gyurdiev. |
| 272 | * Merged only do read locking in direct case patch from Ivan Gyurdiev. |
| 273 | * Merged cache error path memory leak fix from Ivan Gyurdiev. |
| 274 | * Merged auto-generated file header patch from Ivan Gyurdiev. |
| 275 | * Merged pywrap test update from Ivan Gyurdiev. |
| 276 | * Merged hidden defs update from Ivan Gyurdiev. |
| 277 | |
| 278 | 1.5.14 2006-01-13 |
| 279 | * Merged disallow port overlap patch from Ivan Gyurdiev. |
| 280 | |
| 281 | 1.5.13 2006-01-12 |
| 282 | * Merged join prereq and implementation patches from Ivan Gyurdiev. |
| 283 | * Merged join user extra data part 2 patch from Ivan Gyurdiev. |
| 284 | * Merged bugfix patch from Ivan Gyurdiev. |
| 285 | |
| 286 | 1.5.12 2006-01-12 |
| 287 | * Merged remove add_local/set_local patch from Ivan Gyurdiev. |
| 288 | * Merged user extra data part 1 patch from Ivan Gyurdiev. |
| 289 | * Merged size_t -> unsigned int patch from Ivan Gyurdiev. |
| 290 | * Merged calloc check in semanage_store patch from Ivan Gyurdiev, |
| 291 | bug noticed by Steve Grubb. |
| 292 | * Merged cleanups after add/set removal patch from Ivan Gyurdiev. |
| 293 | |
| 294 | 1.5.11 2006-01-09 |
| 295 | * Merged fcontext compare fix from Ivan Gyurdiev. |
| 296 | |
| 297 | 1.5.10 2006-01-06 |
| 298 | * Fixed commit to return the commit number aka policy sequence number. |
| 299 | |
| 300 | 1.5.9 2006-01-06 |
| 301 | * Merged const in APIs patch from Ivan Gyurdiev. |
| 302 | * Merged validation of local file contexts patch from Ivan Gyurdiev. |
| 303 | * Merged compare2 function patch from Ivan Gyurdiev. |
| 304 | * Merged hidden def/proto update patch from Ivan Gyurdiev. |
| 305 | |
| 306 | 1.5.8 2006-01-05 |
| 307 | * Re-applied string and file optimization patch from Russell Coker, |
| 308 | with bug fix. |
| 309 | |
| 310 | 1.5.7 2006-01-05 |
| 311 | * Reverted string and file optimization patch from Russell Coker. |
| 312 | |
| 313 | 1.5.6 2006-01-05 |
| 314 | * Clarified error messages from parse_module_headers and |
| 315 | parse_base_headers for base/module mismatches. |
| 316 | |
| 317 | 1.5.5 2006-01-05 |
| 318 | * Merged string and file optimization patch from Russell Coker. |
| 319 | * Merged swig header reordering patch from Ivan Gyurdiev. |
| 320 | * Merged toggle modify on add patch from Ivan Gyurdiev. |
| 321 | * Merged ports parser bugfix patch from Ivan Gyurdiev. |
| 322 | * Merged fcontext swig patch from Ivan Gyurdiev. |
| 323 | * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. |
| 324 | * Merged man pages for dbase functions patch from Ivan Gyurdiev. |
| 325 | * Merged pywrap tests patch from Ivan Gyurdiev. |
| 326 | |
| 327 | 1.5.4 2006-01-04 |
| 328 | * Merged patch series from Ivan Gyurdiev. |
| 329 | This includes patches to: |
| 330 | - separate file rw code from linked list |
| 331 | - annotate objects |
| 332 | - fold together internal headers |
| 333 | - support ordering of records in compare function |
| 334 | - add active dbase backend, active booleans |
| 335 | - return commit numbers for ro database calls |
| 336 | - use modified flags to skip rebuild whenever possible |
| 337 | - enable port interfaces |
| 338 | - update swig interfaces and typemaps |
| 339 | - add an API for file_contexts.local and file_contexts |
| 340 | - flip the traversal order in iterate/list |
| 341 | - reorganize sandbox_expand |
| 342 | - add seusers MLS validation |
| 343 | - improve dbase spec/documentation |
| 344 | - clone record on set/add/modify |
| 345 | |
| 346 | 1.5.3 2005-12-14 |
| 347 | * Merged further header cleanups from Ivan Gyurdiev. |
| 348 | |
| 349 | 1.5.2 2005-12-13 |
| 350 | * Merged toggle modified flag in policydb_modify, fix memory leak |
| 351 | in clear_obsolete, polymorphism vs headers fix, and include guards |
| 352 | for internal headers patches from Ivan Gyurdiev. |
| 353 | |
| 354 | 1.5.1 2005-12-12 |
| 355 | * Added file-mode= setting to semanage.conf, default to 0644. |
| 356 | Changed semanage_copy_file and callers to use this mode when |
| 357 | installing policy files to runtime locations. |
| 358 | |
| 359 | 1.4 2005-12-07 |
| 360 | * Updated version for release. |
| 361 | |
| 362 | 1.3.64 2005-12-06 |
| 363 | * Changed semanage_handle_create() to set do_reload based on |
| 364 | is_selinux_enabled(). This prevents improper attempts to |
| 365 | load policy on a non-SELinux system. |
| 366 | |
| 367 | 1.3.63 2005-12-05 |
| 368 | * Dropped handle from user_del_role interface. |
| 369 | |
| 370 | 1.3.62 2005-12-05 |
| 371 | * Removed defrole interfaces. |
| 372 | |
| 373 | 1.3.61 2005-11-29 |
| 374 | * Merged Makefile python definitions patch from Dan Walsh. |
| 375 | |
| 376 | 1.3.60 2005-11-29 |
| 377 | * Removed is_selinux_mls_enabled() conditionals in seusers and users |
| 378 | file parsers. |
| 379 | |
| 380 | 1.3.59 2005-11-28 |
| 381 | * Merged wrap char*** for user_get_roles patch from Joshua Brindle. |
| 382 | |
| 383 | 1.3.58 2005-11-28 |
| 384 | * Merged remove defrole from sepol patch from Ivan Gyurdiev. |
| 385 | |
| 386 | 1.3.57 2005-11-28 |
| 387 | * Merged swig wrappers for modifying users and seusers from Joshua Brindle. |
| 388 | |
| 389 | 1.3.56 2005-11-16 |
| 390 | * Fixed free->key_free bug. |
| 391 | |
| 392 | 1.3.55 2005-11-16 |
| 393 | * Merged clear obsolete patch from Ivan Gyurdiev. |
| 394 | |
| 395 | 1.3.54 2005-11-15 |
| 396 | * Merged modified swigify patch from Dan Walsh |
| 397 | (original patch from Joshua Brindle). |
| 398 | * Merged move genhomedircon call patch from Chad Sellers. |
| 399 | |
| 400 | 1.3.53 2005-11-10 |
| 401 | * Merged move seuser validation patch from Ivan Gyurdiev. |
| 402 | * Merged hidden declaration fixes from Ivan Gyurdiev, |
| 403 | with minor corrections. |
| 404 | |
| 405 | 1.3.52 2005-11-09 |
| 406 | * Merged cleanup patch from Ivan Gyurdiev. |
| 407 | This renames semanage_module_conn to semanage_direct_handle, |
| 408 | and moves sepol handle create/destroy into semanage handle |
| 409 | create/destroy to allow use even when disconnected (for the |
| 410 | record interfaces). |
| 411 | |
| 412 | 1.3.51 2005-11-08 |
| 413 | * Clear modules modified flag upon disconnect and commit. |
| 414 | |
| 415 | 1.3.50 2005-11-08 |
| 416 | * Added tracking of module modifications and use it to |
| 417 | determine whether expand-time checks should be applied |
| 418 | on commit. |
| 419 | |
| 420 | 1.3.49 2005-11-08 |
| 421 | * Reverted semanage_set_reload_bools() interface. |
| 422 | |
| 423 | 1.3.48 2005-11-08 |
| 424 | * Disabled calls to port dbase for merge and commit and stubbed |
| 425 | out calls to sepol_port interfaces since they are not exported. |
| 426 | |
| 427 | 1.3.47 2005-11-08 |
| 428 | * Merged rename instead of copy patch from Joshua Brindle (Tresys). |
| 429 | |
| 430 | 1.3.46 2005-11-07 |
| 431 | * Added hidden_def/hidden_proto for exported symbols used within |
| 432 | libsemanage to eliminate relocations. Wrapped type definitions |
| 433 | in exported headers as needed to avoid conflicts. Added |
| 434 | src/context_internal.h and src/iface_internal.h. |
| 435 | |
| 436 | 1.3.45 2005-11-07 |
| 437 | * Added semanage_is_managed() interface to allow detection of whether |
| 438 | the policy is managed via libsemanage. This enables proper handling |
| 439 | in setsebool for non-managed systems. |
| 440 | |
| 441 | 1.3.44 2005-11-07 |
| 442 | * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, |
| 443 | to enable runtime control over preserving active boolean values |
| 444 | versus reloading their saved settings upon commit. |
| 445 | |
| 446 | 1.3.43 2005-11-04 |
| 447 | * Merged seuser parser resync, dbase tracking and cleanup, strtol |
| 448 | bug, copyright, and assert space patches from Ivan Gyurdiev. |
| 449 | |
| 450 | 1.3.42 2005-11-04 |
| 451 | * Added src/*_internal.h in preparation for other changes. |
| 452 | * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and |
| 453 | src/seusers.[hc]. |
| 454 | |
| 455 | 1.3.41 2005-11-03 |
| 456 | * Merged interface parse/print, context_to_string interface change, |
| 457 | move assert_noeof, and order preserving patches from Ivan Gyurdiev. |
| 458 | * Added src/dso.h in preparation for other changes. |
| 459 | |
| 460 | 1.3.40 2005-11-01 |
| 461 | * Merged install seusers, handle/error messages, MLS parsing, |
| 462 | and seusers validation patches from Ivan Gyurdiev. |
| 463 | |
| 464 | 1.3.39 2005-10-31 |
| 465 | * Merged record interface, dbase flush, common database code, |
| 466 | and record bugfix patches from Ivan Gyurdiev. |
| 467 | |
| 468 | 1.3.38 2005-10-27 |
| 469 | * Merged dbase policydb list and count change from Ivan Gyurdiev. |
| 470 | |
| 471 | 1.3.37 2005-10-27 |
| 472 | * Merged enable dbase and set relay patches from Ivan Gyurdiev. |
| 473 | |
| 474 | 1.3.36 2005-10-27 |
| 475 | * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev. |
| 476 | |
| 477 | 1.3.35 2005-10-26 |
| 478 | * Merged sepol handle passing, seusers support, and policydb cache |
| 479 | patches from Ivan Gyurdiev. |
| 480 | |
| 481 | 1.3.34 2005-10-25 |
| 482 | * Merged resync to sepol changes and booleans fixes/improvements |
| 483 | patches from Ivan Gyurdiev. |
| 484 | |
| 485 | 1.3.33 2005-10-25 |
| 486 | * Merged support for genhomedircon/homedir template, store selection, |
| 487 | explicit policy reload, and semanage.conf relocation from Joshua |
| 488 | Brindle. |
| 489 | |
| 490 | 1.3.32 2005-10-24 |
| 491 | * Merged resync to sepol changes and transaction fix patches from |
| 492 | Ivan Gyurdiev. |
| 493 | |
| 494 | 1.3.31 2005-10-21 |
| 495 | * Merged reorganize users patch from Ivan Gyurdiev. |
| 496 | * Merged remove unused relay functions patch from Ivan Gyurdiev. |
| 497 | |
| 498 | 1.3.30 2005-10-20 |
| 499 | * Fixed policy file leaks in semanage_load_module and |
| 500 | semanage_write_module. |
| 501 | * Merged further database work from Ivan Gyurdiev. |
| 502 | |
| 503 | 1.3.29 2005-10-20 |
| 504 | * Fixed bug in semanage_direct_disconnect. |
| 505 | |
| 506 | 1.3.28 2005-10-20 |
| 507 | * Merged interface renaming patch from Ivan Gyurdiev. |
| 508 | * Merged policy component patch from Ivan Gyurdiev. |
| 509 | |
| 510 | 1.3.27 2005-10-20 |
| 511 | * Renamed 'check=' configuration value to 'expand-check=' for |
| 512 | clarity. |
| 513 | * Changed semanage_commit_sandbox to check for and report errors |
| 514 | on rename(2) calls performed during rollback. |
| 515 | |
| 516 | 1.3.26 2005-10-19 |
| 517 | * Added optional check= configuration value to semanage.conf |
| 518 | and updated call to sepol_expand_module to pass its value |
| 519 | to control assertion and hierarchy checking on module expansion. |
| 520 | |
| 521 | 1.3.25 2005-10-19 |
| 522 | * Merged fixes for make DESTDIR= builds from Joshua Brindle. |
| 523 | |
| 524 | 1.3.24 2005-10-19 |
| 525 | * Merged default database from Ivan Gyurdiev. |
| 526 | * Merged removal of connect requirement in policydb backend from |
| 527 | Ivan Gyurdiev. |
| 528 | * Merged commit locking fix and lock rename from Joshua Brindle. |
| 529 | * Merged transaction rollback in lock patch from Joshua Brindle. |
| 530 | |
| 531 | 1.3.23 2005-10-18 |
| 532 | * Changed default args for load_policy to be null, as it no longer |
| 533 | takes a pathname argument and we want to preserve booleans. |
| 534 | |
| 535 | 1.3.22 2005-10-18 |
| 536 | * Merged move local dbase initialization patch from Ivan Gyurdiev. |
| 537 | * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. |
| 538 | * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. |
| 539 | |
| 540 | 1.3.21 2005-10-18 |
| 541 | * Added calls to sepol_policy_file_set_handle interface prior |
| 542 | to invoking sepol operations on policy files. |
| 543 | * Updated call to sepol_policydb_from_image to pass the handle. |
| 544 | |
| 545 | 1.3.20 2005-10-17 |
| 546 | * Merged user and port APIs - policy database patch from Ivan |
| 547 | Gyurdiev. |
| 548 | |
| 549 | 1.3.19 2005-10-17 |
| 550 | * Converted calls to sepol link_packages and expand_module interfaces |
| 551 | from using buffers to using sepol handles for error reporting, and |
| 552 | changed direct_connect/disconnect to create/destroy sepol handles. |
| 553 | |
| 554 | 1.3.18 2005-10-14 |
| 555 | * Merged bugfix patch from Ivan Gyurdiev. |
| 556 | |
| 557 | 1.3.17 2005-10-14 |
| 558 | * Merged seuser database patch from Ivan Gyurdiev. |
| 559 | Merged direct user/port databases to the handle from Ivan Gyurdiev. |
| 560 | |
| 561 | 1.3.16 2005-10-14 |
| 562 | * Removed obsolete include/semanage/commit_api.h (leftover). |
| 563 | Merged seuser record patch from Ivan Gyurdiev. |
| 564 | |
| 565 | 1.3.15 2005-10-14 |
| 566 | * Merged boolean and interface databases from Ivan Gyurdiev. |
| 567 | |
| 568 | 1.3.14 2005-10-13 |
| 569 | * Updated to use get interfaces for hidden sepol_module_package type. |
| 570 | |
| 571 | 1.3.13 2005-10-13 |
| 572 | * Changed semanage_expand_sandbox and semanage_install_active |
| 573 | to generate/install the latest policy version supported by libsepol |
| 574 | by default (unless overridden by semanage.conf), since libselinux |
| 575 | will now downgrade automatically for load_policy. |
| 576 | |
| 577 | 1.3.12 2005-10-13 |
| 578 | * Merged new callback-based error reporting system and ongoing |
| 579 | database work from Ivan Gyurdiev. |
| 580 | |
| 581 | 1.3.11 2005-10-11 |
| 582 | * Fixed semanage_install_active() to use the same logic for |
| 583 | selecting a policy version as semanage_expand_sandbox(). Dropped |
| 584 | dead code from semanage_install_sandbox(). |
| 585 | |
| 586 | 1.3.10 2005-10-07 |
| 587 | * Updated for changes to libsepol, and to only use types and interfaces |
| 588 | provided by the shared libsepol. |
| 589 | |
| 590 | 1.3.9 2005-10-06 |
| 591 | * Merged further database work from Ivan Gyurdiev. |
| 592 | |
| 593 | 1.3.8 2005-10-04 |
| 594 | * Merged iterate, redistribute, and dbase split patches from |
| 595 | Ivan Gyurdiev. |
| 596 | |
| 597 | 1.3.7 2005-09-30 |
| 598 | * Merged patch series from Ivan Gyurdiev. |
| 599 | (pointer typedef elimination, file renames, dbase work, backend |
| 600 | separation) |
| 601 | |
| 602 | 1.3.6 2005-09-28 |
| 603 | * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. |
| 604 | * Separated handle create from connect interface. |
| 605 | * Added a constructor for initialization. |
| 606 | * Moved up src/include/*.h to src. |
| 607 | * Created a symbol map file; dropped dso.h and hidden markings. |
| 608 | |
| 609 | 1.3.5 2005-09-28 |
| 610 | * Merged major update to libsemanage organization and functionality |
| 611 | from Karl MacMillan (Tresys). |
| 612 | |
| 613 | 1.3.4 2005-09-23 |
| 614 | * Merged dbase redesign patch from Ivan Gyurdiev. |
| 615 | |
| 616 | 1.3.3 2005-09-21 |
| 617 | * Merged boolean record, stub record handler, and status codes |
| 618 | patches from Ivan Gyurdiev. |
| 619 | |
| 620 | 1.3.2 2005-09-16 |
| 621 | * Merged stub iterator functionality from Ivan Gyurdiev. |
| 622 | * Merged interface record patch from Ivan Gyurdiev. |
| 623 | |
| 624 | 1.3.1 2005-09-14 |
| 625 | * Merged stub functionality for managing user and port records, |
| 626 | and record table code from Ivan Gyurdiev. |
| 627 | |
| 628 | 1.2 2005-09-06 |
| 629 | * Updated version for release. |
| 630 | |
| 631 | 1.1.6 2005-08-31 |
| 632 | * Merged semod.conf template patch from Dan Walsh (Red Hat), |
| 633 | but restored location to /usr/share/semod/semod.conf. |
| 634 | |
| 635 | 1.1.5 2005-08-30 |
| 636 | * Fixed several bugs found by valgrind. |
| 637 | * Fixed bug in prior patch for the semod_build_module_list leak. |
| 638 | |
| 639 | 1.1.4 2005-08-25 |
| 640 | * Merged errno fix from Joshua Brindle (Tresys). |
| 641 | * Merged fix for semod_build_modules_list leak on error path |
| 642 | from Serge Hallyn (IBM). Bug found by Coverity. |
| 643 | |
| 644 | 1.1.3 2005-08-22 |
| 645 | * Merged several fixes from Serge Hallyn (IBM). Bugs found by |
| 646 | Coverity. |
| 647 | * Fixed several other bugs and warnings. |
| 648 | |
| 649 | 1.1.2 2005-08-02 |
| 650 | * Merged patch to move module read/write code from libsemanage |
| 651 | to libsepol from Jason Tang (Tresys). |
| 652 | |
| 653 | 1.1.1 2005-08-02 |
| 654 | * Merged relay records patch from Ivan Gyurdiev. |
| 655 | * Merged key extract patch from Ivan Gyurdiev. |
| 656 | |
| 657 | 1.0 2005-07-27 |
| 658 | * Initial version. |