blob: 48728f2d426ed8e4cb9a2d75e6f15a81099d3847 [file] [log] [blame]
Chad Sellers6f466062009-10-22 14:00:10 -040012.0.40 2009-10-22
2 * Add semanage_set_check_contexts() function to disable calling
3 setfiles
4
Joshua Brindle0e421af2009-09-24 15:18:12 -040052.0.39 2009-09-24
6 * make swigify
7
Joshua Brindle6e7e2472009-09-16 16:59:13 -040082.0.38 2009-09-16
9 * Change semodule upgrade behavior to install even if the module
10 is not present from Dan Walsh.
11 * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
12
Joshua Brindleeaaafe22009-09-04 13:26:37 -0400132.0.37 2009-09-04
14 * Fix persistent dontaudit support to rebuild policy if the
15 dontaudit state is changed from Chad Sellers.
16
Stephen Smalleye376f722009-08-24 15:28:42 -0400172.0.36 2009-08-24
18 * Changed bzip-blocksize=0 handling to support existing compressed
19 modules in the store.
20
Stephen Smalley0fb9c992009-08-05 14:13:27 -0400212.0.35 2009-08-05
22 * Revert hard linking of files between tmp/active/previous.
23
Stephen Smalley76412ff2009-08-05 08:40:36 -0400242.0.34 2009-08-05
25 * Enable configuration of bzip behavior from Stephen Smalley.
26 bzip-blocksize=0 to disable compression and decompression support.
27 bzip-blocksize=1..9 to set the blocksize for compression.
28 bzip-small=true to reduce memory usage for decompression.
29
Stephen Smalley4d92b1f2009-07-07 14:26:15 -0400302.0.33 2009-07-07
31 * Maintain disable dontaudit state from Christopher Pardy.
32
Stephen Smalley0b659be2009-05-28 10:55:27 -0400332.0.32 2009-05-28
34 * Ruby bindings from David Quigley.
35
Joshua Brindle10760732009-01-12 10:45:26 -0500362.0.31 2009-01-12
37 * Policy module compression (bzip) support from Dan Walsh.
38 * Hard link files between tmp/active/previous from Dan Walsh.
39
Stephen Smalley46dc6702008-11-12 09:27:21 -0500402.0.30 2008-11-12
41 * Add semanage_mls_enabled() interface from Stephen Smalley.
42
Joshua Brindle223bb402008-11-09 11:20:40 -0500432.0.29 2008-11-11
44 * Add USER to lines to homedir_template context file from Chris PeBenito.
45
Joshua Brindlef187d4a2008-09-15 11:25:27 -0400462.0.28 2008-09-15
47 * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh
48
Joshua Brindle13cd4c82008-08-19 15:30:36 -0400492.0.27 2008-08-05
50 * Modify genhomedircon to skip %groupname entries.
51 Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the %groupname syntax.
52
532.0.26 2008-07-29
54 * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
55 Strip any trailing slash before appending /*$.
56
572.0.25 2008-04-21
58 * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
59 Fixes semanage boolean -D seg fault (bug 441379).
60
612.0.24 2008-02-26
62 * make swigify
63
642.0.23 2008-02-04
65 * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.
66
672.0.22 2008-02-04
68 * Free policydb before fork from Joshua Brindle.
69
702.0.21 2008-02-04
71 * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.
72
732.0.12 2008-02-02
74 * Use sepol_set_expand_consume_base to reduce peak memory usage when
75 using semodule from Joshua Brindle.
76
772.0.19 2008-01-31
78 * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.
79
802.0.18 2008-01-28
81 * Fix spurious out of memory error reports.
82
832.0.17 2008-01-25
84 * Merged second version of fix for genhomedircon handling from Caleb Case.
85
862.0.16 2008-01-24
87 * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.
88
892.0.15 2007-12-05
90 * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
91 * Copy the store path in semanage_select_store from Dan Walsh.
92
932.0.14 2007-11-05
94 * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
95
962.0.13 2007-11-05
97 * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
98
992.0.12 2007-10-05
100 * ustr cleanups from James Antill.
101 * Ensure that /root gets labeled even if using the default context from Dan Walsh.
102
1032.0.11 2007-09-28
104 * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
105
1062.0.10 2007-09-28
107 * Fix error checking on getpw*_r functions from Todd Miller.
108 * Make genhomedircon skip invalid homedir contexts from Todd Miller.
109 * Set default user and prefix from seusers from Dan Walsh.
110 * Add swigify Makefile target from Dan Walsh.
111
1122.0.9 2007-09-24
113 * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
114
1152.0.8 2007-09-19
116 * Clear errno on non-fatal errors to avoid reporting them upon a
117 later error that does not set errno.
118
1192.0.7 2007-09-19
120 * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.
121
1222.0.6 2007-09-10
123 * Change to use getpw* function calls to the _r versions from Todd Miller.
124
1252.0.5 2007-08-23
126 * Replace genhomedircon script with equivalent functionality within
127 libsemanage and introduce disable-genhomedircon option in
128 semanage.conf from Todd Miller.
129 Note: Depends on ustr.
130
1312.0.4 2007-08-16
132 * Allow dontaudits to be turned off via semanage interface when
133 updating policy from Joshua Brindle.
134
1352.0.3 2007-04-25
136 * Fix to libsemanage man patches so whatis will work better from Dan Walsh
137
1382.0.2 2007-04-24
139 * Merged optimizations from Stephen Smalley.
140 - do not set all booleans upon commit, only those whose values have changed
141 - only install the sandbox upon commit if something was rebuilt
142
1432.0.1 2007-03-12
144 * Merged dbase_file_flush patch from Dan Walsh.
145 This removes any mention of specific tools (e.g. semanage)
146 from the comment header of the auto-generated files,
147 since there are multiple front-end tools.
148
1492.0.0 2007-02-20
150 * Merged Makefile test target patch from Caleb Case.
151 * Merged get_commit_number function rename patch from Caleb Case.
152 * Merged strnlen -> strlen patch from Todd Miller.
153
1541.10.1 2007-01-26
155 * Merged python binding fix from Dan Walsh.
156
1571.10.0 2007-01-18
158 * Updated version for stable branch.
159
1601.9.2 2007-01-08
161 * Merged patch to optionally reduce disk usage by removing
162 the backup module store and linked policy from Karl MacMillan
163 * Merged patch to correctly propagate return values in libsemanage
164
1651.9.1 2006-11-27
166 * Merged patch to compile wit -fPIC instead of -fpic from
167 Manoj Srivastava to prevent hitting the global offest table
168 limit. Patch changed to include libselinux and libsemanage in
169 addition to libsepol.
170
1711.8 2006-10-17
172 * Updated version for release.
173
1741.6.17 2006-09-29
175 * Merged patch to skip reload if no active store exists and
176 the store path doesn't match the active store path from Dan Walsh.
177 * Merged patch to not destroy sepol handle on error path of
178 connect from James Athey.
179 * Merged patch to add genhomedircon path to semanage.conf from
180 James Athey.
181
1821.6.16 2006-08-14
183 * Make most copy errors fatal, but allow exceptions for
184 file_contexts.local, seusers, and netfilter_contexts if
185 the source file does not exist in the store.
186
1871.6.15 2006-08-11
188 * Merged separate local file contexts patch from Chris PeBenito.
189
1901.6.14 2006-08-11
191 * Merged patch to make most copy errors non-fatal from Dan Walsh.
192
1931.6.13 2006-08-03
194 * Merged netfilter contexts support from Chris PeBenito.
195
1961.6.12 2006-07-11
197 * Merged support for read operations on read-only fs from
198 Caleb Case (Tresys Technology).
199
2001.6.11 2006-06-29
201 * Lindent.
202
2031.6.10 2006-06-26
204 * Merged setfiles location check patch from Dan Walsh.
205
2061.6.9 2006-06-16
207 * Merged several fixes from Serge Hallyn:
208 dbase_file_cache: deref of uninit data on error path.
209 dbase_policydb_cache: clear fp to avoid double fclose
210 semanage_fc_sort: destroy temp on error paths
211
2121.6.8 2006-06-02
213 * Updated default location for setfiles to /sbin to
214 match policycoreutils. This can also be adjusted via
215 semanage.conf using the syntax:
216 [setfiles]
217 path = /path/to/setfiles
218 args = -q -c $@ $<
219 [end]
220
2211.6.7 2006-05-05
222 * Merged fix warnings patch from Karl MacMillan.
223
2241.6.6 2006-04-14
225 * Merged updated file context sorting patch from Christopher
226 Ashworth, with bug fix for escaped character flag.
227
2281.6.5 2006-04-13
229 * Merged file context sorting code from Christopher Ashworth
230 (Tresys Technology), based on fc_sort.c code in refpolicy.
231
2321.6.4 2006-04-12
233 * Merged python binding t_output_helper removal patch from Dan Walsh.
234 * Regenerated swig files.
235
2361.6.3 2006-03-30
237 * Merged corrected fix for descriptor leak from Dan Walsh.
238
2391.6.2 2006-03-20
240 * Merged Makefile PYLIBVER definition patch from Dan Walsh.
241
2421.6.1 2006-03-20
243 * Merged man page reorganization from Ivan Gyurdiev.
244
2451.6 2006-03-14
246 * Updated version for release.
247
2481.5.31 2006-03-09
249 * Merged abort early on merge errors patch from Ivan Gyurdiev.
250
2511.5.30 2006-03-08
252 * Cleaned up error handling in semanage_split_fc based on a patch
253 by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
254
2551.5.29 2006-02-21
256 * Merged MLS handling fixes from Ivan Gyurdiev.
257
2581.5.28 2006-02-16
259 * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
260
2611.5.27 2006-02-16
262 * Merged base_merge_components changes from Ivan Gyurdiev.
263
2641.5.26 2006-02-15
265 * Merged paths array patch from Ivan Gyurdiev.
266 * Merged bug fix patch from Ivan Gyurdiev.
267
2681.5.25 2006-02-14
269 * Merged improve bindings patch from Ivan Gyurdiev.
270
2711.5.24 2006-02-14
272 * Merged use PyList patch from Ivan Gyurdiev.
273 * Merged memory leak fix patch from Ivan Gyurdiev.
274 * Merged nodecon support patch from Ivan Gyurdiev.
275 * Merged cleanups patch from Ivan Gyurdiev.
276 * Merged split swig patch from Ivan Gyurdiev.
277
2781.5.23 2006-02-13
279 * Merged optionals in base patch from Joshua Brindle.
280
2811.5.22 2006-02-13
282 * Merged treat seusers/users_extra as optional sections patch from
283 Ivan Gyurdiev.
284 * Merged parse_optional fixes from Ivan Gyurdiev.
285
2861.5.21 2006-02-07
287 * Merged seuser/user_extra support patch from Joshua Brindle.
288 * Merged remote system dbase patch from Ivan Gyurdiev.
289
2901.5.20 2006-02-02
291 * Merged clone record on set_con patch from Ivan Gyurdiev.
292
2931.5.19 2006-01-30
294 * Merged fname parameter patch from Ivan Gyurdiev.
295 * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
296 * Merged seusers.system patch from Ivan Gyurdiev.
297 * Merged improve port/fcontext API patch from Ivan Gyurdiev.
298
2991.5.18 2006-01-27
300 * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
301
3021.5.17 2006-01-27
303 * Merged set_create_store, access_check, and is_connected interfaces
304 from Joshua Brindle.
305
3061.5.16 2006-01-19
307 * Regenerate python wrappers.
308
3091.5.15 2006-01-18
310 * Merged pywrap Makefile diff from Dan Walsh.
311 * Merged cache management patch from Ivan Gyurdiev.
312 * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
313 * Merged remove apply_local function patch from Ivan Gyurdiev.
314 * Merged only do read locking in direct case patch from Ivan Gyurdiev.
315 * Merged cache error path memory leak fix from Ivan Gyurdiev.
316 * Merged auto-generated file header patch from Ivan Gyurdiev.
317 * Merged pywrap test update from Ivan Gyurdiev.
318 * Merged hidden defs update from Ivan Gyurdiev.
319
3201.5.14 2006-01-13
321 * Merged disallow port overlap patch from Ivan Gyurdiev.
322
3231.5.13 2006-01-12
324 * Merged join prereq and implementation patches from Ivan Gyurdiev.
325 * Merged join user extra data part 2 patch from Ivan Gyurdiev.
326 * Merged bugfix patch from Ivan Gyurdiev.
327
3281.5.12 2006-01-12
329 * Merged remove add_local/set_local patch from Ivan Gyurdiev.
330 * Merged user extra data part 1 patch from Ivan Gyurdiev.
331 * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
332 * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
333 bug noticed by Steve Grubb.
334 * Merged cleanups after add/set removal patch from Ivan Gyurdiev.
335
3361.5.11 2006-01-09
337 * Merged fcontext compare fix from Ivan Gyurdiev.
338
3391.5.10 2006-01-06
340 * Fixed commit to return the commit number aka policy sequence number.
341
3421.5.9 2006-01-06
343 * Merged const in APIs patch from Ivan Gyurdiev.
344 * Merged validation of local file contexts patch from Ivan Gyurdiev.
345 * Merged compare2 function patch from Ivan Gyurdiev.
346 * Merged hidden def/proto update patch from Ivan Gyurdiev.
347
3481.5.8 2006-01-05
349 * Re-applied string and file optimization patch from Russell Coker,
350 with bug fix.
351
3521.5.7 2006-01-05
353 * Reverted string and file optimization patch from Russell Coker.
354
3551.5.6 2006-01-05
356 * Clarified error messages from parse_module_headers and
357 parse_base_headers for base/module mismatches.
358
3591.5.5 2006-01-05
360 * Merged string and file optimization patch from Russell Coker.
361 * Merged swig header reordering patch from Ivan Gyurdiev.
362 * Merged toggle modify on add patch from Ivan Gyurdiev.
363 * Merged ports parser bugfix patch from Ivan Gyurdiev.
364 * Merged fcontext swig patch from Ivan Gyurdiev.
365 * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
366 * Merged man pages for dbase functions patch from Ivan Gyurdiev.
367 * Merged pywrap tests patch from Ivan Gyurdiev.
368
3691.5.4 2006-01-04
370 * Merged patch series from Ivan Gyurdiev.
371 This includes patches to:
372 - separate file rw code from linked list
373 - annotate objects
374 - fold together internal headers
375 - support ordering of records in compare function
376 - add active dbase backend, active booleans
377 - return commit numbers for ro database calls
378 - use modified flags to skip rebuild whenever possible
379 - enable port interfaces
380 - update swig interfaces and typemaps
381 - add an API for file_contexts.local and file_contexts
382 - flip the traversal order in iterate/list
383 - reorganize sandbox_expand
384 - add seusers MLS validation
385 - improve dbase spec/documentation
386 - clone record on set/add/modify
387
3881.5.3 2005-12-14
389 * Merged further header cleanups from Ivan Gyurdiev.
390
3911.5.2 2005-12-13
392 * Merged toggle modified flag in policydb_modify, fix memory leak
393 in clear_obsolete, polymorphism vs headers fix, and include guards
394 for internal headers patches from Ivan Gyurdiev.
395
3961.5.1 2005-12-12
397 * Added file-mode= setting to semanage.conf, default to 0644.
398 Changed semanage_copy_file and callers to use this mode when
399 installing policy files to runtime locations.
400
4011.4 2005-12-07
402 * Updated version for release.
403
4041.3.64 2005-12-06
405 * Changed semanage_handle_create() to set do_reload based on
406 is_selinux_enabled(). This prevents improper attempts to
407 load policy on a non-SELinux system.
408
4091.3.63 2005-12-05
410 * Dropped handle from user_del_role interface.
411
4121.3.62 2005-12-05
413 * Removed defrole interfaces.
414
4151.3.61 2005-11-29
416 * Merged Makefile python definitions patch from Dan Walsh.
417
4181.3.60 2005-11-29
419 * Removed is_selinux_mls_enabled() conditionals in seusers and users
420 file parsers.
421
4221.3.59 2005-11-28
423 * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
424
4251.3.58 2005-11-28
426 * Merged remove defrole from sepol patch from Ivan Gyurdiev.
427
4281.3.57 2005-11-28
429 * Merged swig wrappers for modifying users and seusers from Joshua Brindle.
430
4311.3.56 2005-11-16
432 * Fixed free->key_free bug.
433
4341.3.55 2005-11-16
435 * Merged clear obsolete patch from Ivan Gyurdiev.
436
4371.3.54 2005-11-15
438 * Merged modified swigify patch from Dan Walsh
439 (original patch from Joshua Brindle).
440 * Merged move genhomedircon call patch from Chad Sellers.
441
4421.3.53 2005-11-10
443 * Merged move seuser validation patch from Ivan Gyurdiev.
444 * Merged hidden declaration fixes from Ivan Gyurdiev,
445 with minor corrections.
446
4471.3.52 2005-11-09
448 * Merged cleanup patch from Ivan Gyurdiev.
449 This renames semanage_module_conn to semanage_direct_handle,
450 and moves sepol handle create/destroy into semanage handle
451 create/destroy to allow use even when disconnected (for the
452 record interfaces).
453
4541.3.51 2005-11-08
455 * Clear modules modified flag upon disconnect and commit.
456
4571.3.50 2005-11-08
458 * Added tracking of module modifications and use it to
459 determine whether expand-time checks should be applied
460 on commit.
461
4621.3.49 2005-11-08
463 * Reverted semanage_set_reload_bools() interface.
464
4651.3.48 2005-11-08
466 * Disabled calls to port dbase for merge and commit and stubbed
467 out calls to sepol_port interfaces since they are not exported.
468
4691.3.47 2005-11-08
470 * Merged rename instead of copy patch from Joshua Brindle (Tresys).
471
4721.3.46 2005-11-07
473 * Added hidden_def/hidden_proto for exported symbols used within
474 libsemanage to eliminate relocations. Wrapped type definitions
475 in exported headers as needed to avoid conflicts. Added
476 src/context_internal.h and src/iface_internal.h.
477
4781.3.45 2005-11-07
479 * Added semanage_is_managed() interface to allow detection of whether
480 the policy is managed via libsemanage. This enables proper handling
481 in setsebool for non-managed systems.
482
4831.3.44 2005-11-07
484 * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
485 to enable runtime control over preserving active boolean values
486 versus reloading their saved settings upon commit.
487
4881.3.43 2005-11-04
489 * Merged seuser parser resync, dbase tracking and cleanup, strtol
490 bug, copyright, and assert space patches from Ivan Gyurdiev.
491
4921.3.42 2005-11-04
493 * Added src/*_internal.h in preparation for other changes.
494 * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
495 src/seusers.[hc].
496
4971.3.41 2005-11-03
498 * Merged interface parse/print, context_to_string interface change,
499 move assert_noeof, and order preserving patches from Ivan Gyurdiev.
500 * Added src/dso.h in preparation for other changes.
501
5021.3.40 2005-11-01
503 * Merged install seusers, handle/error messages, MLS parsing,
504 and seusers validation patches from Ivan Gyurdiev.
505
5061.3.39 2005-10-31
507 * Merged record interface, dbase flush, common database code,
508 and record bugfix patches from Ivan Gyurdiev.
509
5101.3.38 2005-10-27
511 * Merged dbase policydb list and count change from Ivan Gyurdiev.
512
5131.3.37 2005-10-27
514 * Merged enable dbase and set relay patches from Ivan Gyurdiev.
515
5161.3.36 2005-10-27
517 * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.
518
5191.3.35 2005-10-26
520 * Merged sepol handle passing, seusers support, and policydb cache
521 patches from Ivan Gyurdiev.
522
5231.3.34 2005-10-25
524 * Merged resync to sepol changes and booleans fixes/improvements
525 patches from Ivan Gyurdiev.
526
5271.3.33 2005-10-25
528 * Merged support for genhomedircon/homedir template, store selection,
529 explicit policy reload, and semanage.conf relocation from Joshua
530 Brindle.
531
5321.3.32 2005-10-24
533 * Merged resync to sepol changes and transaction fix patches from
534 Ivan Gyurdiev.
535
5361.3.31 2005-10-21
537 * Merged reorganize users patch from Ivan Gyurdiev.
538 * Merged remove unused relay functions patch from Ivan Gyurdiev.
539
5401.3.30 2005-10-20
541 * Fixed policy file leaks in semanage_load_module and
542 semanage_write_module.
543 * Merged further database work from Ivan Gyurdiev.
544
5451.3.29 2005-10-20
546 * Fixed bug in semanage_direct_disconnect.
547
5481.3.28 2005-10-20
549 * Merged interface renaming patch from Ivan Gyurdiev.
550 * Merged policy component patch from Ivan Gyurdiev.
551
5521.3.27 2005-10-20
553 * Renamed 'check=' configuration value to 'expand-check=' for
554 clarity.
555 * Changed semanage_commit_sandbox to check for and report errors
556 on rename(2) calls performed during rollback.
557
5581.3.26 2005-10-19
559 * Added optional check= configuration value to semanage.conf
560 and updated call to sepol_expand_module to pass its value
561 to control assertion and hierarchy checking on module expansion.
562
5631.3.25 2005-10-19
564 * Merged fixes for make DESTDIR= builds from Joshua Brindle.
565
5661.3.24 2005-10-19
567 * Merged default database from Ivan Gyurdiev.
568 * Merged removal of connect requirement in policydb backend from
569 Ivan Gyurdiev.
570 * Merged commit locking fix and lock rename from Joshua Brindle.
571 * Merged transaction rollback in lock patch from Joshua Brindle.
572
5731.3.23 2005-10-18
574 * Changed default args for load_policy to be null, as it no longer
575 takes a pathname argument and we want to preserve booleans.
576
5771.3.22 2005-10-18
578 * Merged move local dbase initialization patch from Ivan Gyurdiev.
579 * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
580 * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
581
5821.3.21 2005-10-18
583 * Added calls to sepol_policy_file_set_handle interface prior
584 to invoking sepol operations on policy files.
585 * Updated call to sepol_policydb_from_image to pass the handle.
586
5871.3.20 2005-10-17
588 * Merged user and port APIs - policy database patch from Ivan
589 Gyurdiev.
590
5911.3.19 2005-10-17
592 * Converted calls to sepol link_packages and expand_module interfaces
593 from using buffers to using sepol handles for error reporting, and
594 changed direct_connect/disconnect to create/destroy sepol handles.
595
5961.3.18 2005-10-14
597 * Merged bugfix patch from Ivan Gyurdiev.
598
5991.3.17 2005-10-14
600 * Merged seuser database patch from Ivan Gyurdiev.
601 Merged direct user/port databases to the handle from Ivan Gyurdiev.
602
6031.3.16 2005-10-14
604 * Removed obsolete include/semanage/commit_api.h (leftover).
605 Merged seuser record patch from Ivan Gyurdiev.
606
6071.3.15 2005-10-14
608 * Merged boolean and interface databases from Ivan Gyurdiev.
609
6101.3.14 2005-10-13
611 * Updated to use get interfaces for hidden sepol_module_package type.
612
6131.3.13 2005-10-13
614 * Changed semanage_expand_sandbox and semanage_install_active
615 to generate/install the latest policy version supported by libsepol
616 by default (unless overridden by semanage.conf), since libselinux
617 will now downgrade automatically for load_policy.
618
6191.3.12 2005-10-13
620 * Merged new callback-based error reporting system and ongoing
621 database work from Ivan Gyurdiev.
622
6231.3.11 2005-10-11
624 * Fixed semanage_install_active() to use the same logic for
625 selecting a policy version as semanage_expand_sandbox(). Dropped
626 dead code from semanage_install_sandbox().
627
6281.3.10 2005-10-07
629 * Updated for changes to libsepol, and to only use types and interfaces
630 provided by the shared libsepol.
631
6321.3.9 2005-10-06
633 * Merged further database work from Ivan Gyurdiev.
634
6351.3.8 2005-10-04
636 * Merged iterate, redistribute, and dbase split patches from
637 Ivan Gyurdiev.
638
6391.3.7 2005-09-30
640 * Merged patch series from Ivan Gyurdiev.
641 (pointer typedef elimination, file renames, dbase work, backend
642 separation)
643
6441.3.6 2005-09-28
645 * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
646 * Separated handle create from connect interface.
647 * Added a constructor for initialization.
648 * Moved up src/include/*.h to src.
649 * Created a symbol map file; dropped dso.h and hidden markings.
650
6511.3.5 2005-09-28
652 * Merged major update to libsemanage organization and functionality
653 from Karl MacMillan (Tresys).
654
6551.3.4 2005-09-23
656 * Merged dbase redesign patch from Ivan Gyurdiev.
657
6581.3.3 2005-09-21
659 * Merged boolean record, stub record handler, and status codes
660 patches from Ivan Gyurdiev.
661
6621.3.2 2005-09-16
663 * Merged stub iterator functionality from Ivan Gyurdiev.
664 * Merged interface record patch from Ivan Gyurdiev.
665
6661.3.1 2005-09-14
667 * Merged stub functionality for managing user and port records,
668 and record table code from Ivan Gyurdiev.
669
6701.2 2005-09-06
671 * Updated version for release.
672
6731.1.6 2005-08-31
674 * Merged semod.conf template patch from Dan Walsh (Red Hat),
675 but restored location to /usr/share/semod/semod.conf.
676
6771.1.5 2005-08-30
678 * Fixed several bugs found by valgrind.
679 * Fixed bug in prior patch for the semod_build_module_list leak.
680
6811.1.4 2005-08-25
682 * Merged errno fix from Joshua Brindle (Tresys).
683 * Merged fix for semod_build_modules_list leak on error path
684 from Serge Hallyn (IBM). Bug found by Coverity.
685
6861.1.3 2005-08-22
687 * Merged several fixes from Serge Hallyn (IBM). Bugs found by
688 Coverity.
689 * Fixed several other bugs and warnings.
690
6911.1.2 2005-08-02
692 * Merged patch to move module read/write code from libsemanage
693 to libsepol from Jason Tang (Tresys).
694
6951.1.1 2005-08-02
696 * Merged relay records patch from Ivan Gyurdiev.
697 * Merged key extract patch from Ivan Gyurdiev.
698
6991.0 2005-07-27
700 * Initial version.