blob: 35a313fc6022d8f66a0374f28ad6bc56db0f2983 [file] [log] [blame]
Chad Sellersd17ed0d2010-12-16 14:11:57 -050012.0.46 2010-12-16
2 * Fix compliation under GCC 4.6 by Justin Mattock
3
Joshua Brindlee6bfff42010-03-06 18:10:51 -050042.0.45 2010-03-06
5 * Add enable/disable patch support from Dan Walsh.
6 * Add usepasswd flag to semanage.conf to disable genhomedircon using
7 passwd from Dan Walsh.
8 * regenerate swig wrappers
9
Stephen Smalley9a181482010-02-02 15:34:16 -0500102.0.44 2010-02-02
11 * Replace usage of fmemopen() with sepol_policy_file_set_mem() since
12 glibc < 2.9 does not support binary mode ('b') for fmemopen'd
13 streams.
14
Joshua Brindle7b9904b2009-11-27 13:02:43 -0500152.0.43 2009-11-27
16 * Move libsemanage.so to /usr/lib
17 * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>
18
Chad Sellers88a57ca2009-11-18 16:44:55 -0500192.0.42 2009-11-18
20 * Move load_policy from /usr/sbin to /sbin from Dan Walsh.
21
Eamon Walsh7cdfd6e2009-10-29 15:33:37 -0400222.0.41 2009-10-29
23 * Add pkgconfig file from Eamon Walsh.
24
Chad Sellers6f466062009-10-22 14:00:10 -0400252.0.40 2009-10-22
26 * Add semanage_set_check_contexts() function to disable calling
27 setfiles
28
Joshua Brindle0e421af2009-09-24 15:18:12 -0400292.0.39 2009-09-24
30 * make swigify
31
Joshua Brindle6e7e2472009-09-16 16:59:13 -0400322.0.38 2009-09-16
33 * Change semodule upgrade behavior to install even if the module
34 is not present from Dan Walsh.
35 * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.
36
Joshua Brindleeaaafe22009-09-04 13:26:37 -0400372.0.37 2009-09-04
38 * Fix persistent dontaudit support to rebuild policy if the
39 dontaudit state is changed from Chad Sellers.
40
Stephen Smalleye376f722009-08-24 15:28:42 -0400412.0.36 2009-08-24
42 * Changed bzip-blocksize=0 handling to support existing compressed
43 modules in the store.
44
Stephen Smalley0fb9c992009-08-05 14:13:27 -0400452.0.35 2009-08-05
46 * Revert hard linking of files between tmp/active/previous.
47
Stephen Smalley76412ff2009-08-05 08:40:36 -0400482.0.34 2009-08-05
49 * Enable configuration of bzip behavior from Stephen Smalley.
50 bzip-blocksize=0 to disable compression and decompression support.
51 bzip-blocksize=1..9 to set the blocksize for compression.
52 bzip-small=true to reduce memory usage for decompression.
53
Stephen Smalley4d92b1f2009-07-07 14:26:15 -0400542.0.33 2009-07-07
55 * Maintain disable dontaudit state from Christopher Pardy.
56
Stephen Smalley0b659be2009-05-28 10:55:27 -0400572.0.32 2009-05-28
58 * Ruby bindings from David Quigley.
59
Joshua Brindle10760732009-01-12 10:45:26 -0500602.0.31 2009-01-12
61 * Policy module compression (bzip) support from Dan Walsh.
62 * Hard link files between tmp/active/previous from Dan Walsh.
63
Stephen Smalley46dc6702008-11-12 09:27:21 -0500642.0.30 2008-11-12
65 * Add semanage_mls_enabled() interface from Stephen Smalley.
66
Joshua Brindle223bb402008-11-09 11:20:40 -0500672.0.29 2008-11-11
68 * Add USER to lines to homedir_template context file from Chris PeBenito.
69
Joshua Brindlef187d4a2008-09-15 11:25:27 -0400702.0.28 2008-09-15
71 * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh
72
Joshua Brindle13cd4c82008-08-19 15:30:36 -0400732.0.27 2008-08-05
74 * Modify genhomedircon to skip %groupname entries.
75 Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the %groupname syntax.
76
772.0.26 2008-07-29
78 * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
79 Strip any trailing slash before appending /*$.
80
812.0.25 2008-04-21
82 * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
83 Fixes semanage boolean -D seg fault (bug 441379).
84
852.0.24 2008-02-26
86 * make swigify
87
882.0.23 2008-02-04
89 * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.
90
912.0.22 2008-02-04
92 * Free policydb before fork from Joshua Brindle.
93
942.0.21 2008-02-04
95 * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.
96
972.0.12 2008-02-02
98 * Use sepol_set_expand_consume_base to reduce peak memory usage when
99 using semodule from Joshua Brindle.
100
1012.0.19 2008-01-31
102 * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.
103
1042.0.18 2008-01-28
105 * Fix spurious out of memory error reports.
106
1072.0.17 2008-01-25
108 * Merged second version of fix for genhomedircon handling from Caleb Case.
109
1102.0.16 2008-01-24
111 * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.
112
1132.0.15 2007-12-05
114 * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
115 * Copy the store path in semanage_select_store from Dan Walsh.
116
1172.0.14 2007-11-05
118 * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
119
1202.0.13 2007-11-05
121 * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
122
1232.0.12 2007-10-05
124 * ustr cleanups from James Antill.
125 * Ensure that /root gets labeled even if using the default context from Dan Walsh.
126
1272.0.11 2007-09-28
128 * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.
129
1302.0.10 2007-09-28
131 * Fix error checking on getpw*_r functions from Todd Miller.
132 * Make genhomedircon skip invalid homedir contexts from Todd Miller.
133 * Set default user and prefix from seusers from Dan Walsh.
134 * Add swigify Makefile target from Dan Walsh.
135
1362.0.9 2007-09-24
137 * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
138
1392.0.8 2007-09-19
140 * Clear errno on non-fatal errors to avoid reporting them upon a
141 later error that does not set errno.
142
1432.0.7 2007-09-19
144 * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.
145
1462.0.6 2007-09-10
147 * Change to use getpw* function calls to the _r versions from Todd Miller.
148
1492.0.5 2007-08-23
150 * Replace genhomedircon script with equivalent functionality within
151 libsemanage and introduce disable-genhomedircon option in
152 semanage.conf from Todd Miller.
153 Note: Depends on ustr.
154
1552.0.4 2007-08-16
156 * Allow dontaudits to be turned off via semanage interface when
157 updating policy from Joshua Brindle.
158
1592.0.3 2007-04-25
160 * Fix to libsemanage man patches so whatis will work better from Dan Walsh
161
1622.0.2 2007-04-24
163 * Merged optimizations from Stephen Smalley.
164 - do not set all booleans upon commit, only those whose values have changed
165 - only install the sandbox upon commit if something was rebuilt
166
1672.0.1 2007-03-12
168 * Merged dbase_file_flush patch from Dan Walsh.
169 This removes any mention of specific tools (e.g. semanage)
170 from the comment header of the auto-generated files,
171 since there are multiple front-end tools.
172
1732.0.0 2007-02-20
174 * Merged Makefile test target patch from Caleb Case.
175 * Merged get_commit_number function rename patch from Caleb Case.
176 * Merged strnlen -> strlen patch from Todd Miller.
177
1781.10.1 2007-01-26
179 * Merged python binding fix from Dan Walsh.
180
1811.10.0 2007-01-18
182 * Updated version for stable branch.
183
1841.9.2 2007-01-08
185 * Merged patch to optionally reduce disk usage by removing
186 the backup module store and linked policy from Karl MacMillan
187 * Merged patch to correctly propagate return values in libsemanage
188
1891.9.1 2006-11-27
190 * Merged patch to compile wit -fPIC instead of -fpic from
191 Manoj Srivastava to prevent hitting the global offest table
192 limit. Patch changed to include libselinux and libsemanage in
193 addition to libsepol.
194
1951.8 2006-10-17
196 * Updated version for release.
197
1981.6.17 2006-09-29
199 * Merged patch to skip reload if no active store exists and
200 the store path doesn't match the active store path from Dan Walsh.
201 * Merged patch to not destroy sepol handle on error path of
202 connect from James Athey.
203 * Merged patch to add genhomedircon path to semanage.conf from
204 James Athey.
205
2061.6.16 2006-08-14
207 * Make most copy errors fatal, but allow exceptions for
208 file_contexts.local, seusers, and netfilter_contexts if
209 the source file does not exist in the store.
210
2111.6.15 2006-08-11
212 * Merged separate local file contexts patch from Chris PeBenito.
213
2141.6.14 2006-08-11
215 * Merged patch to make most copy errors non-fatal from Dan Walsh.
216
2171.6.13 2006-08-03
218 * Merged netfilter contexts support from Chris PeBenito.
219
2201.6.12 2006-07-11
221 * Merged support for read operations on read-only fs from
222 Caleb Case (Tresys Technology).
223
2241.6.11 2006-06-29
225 * Lindent.
226
2271.6.10 2006-06-26
228 * Merged setfiles location check patch from Dan Walsh.
229
2301.6.9 2006-06-16
231 * Merged several fixes from Serge Hallyn:
232 dbase_file_cache: deref of uninit data on error path.
233 dbase_policydb_cache: clear fp to avoid double fclose
234 semanage_fc_sort: destroy temp on error paths
235
2361.6.8 2006-06-02
237 * Updated default location for setfiles to /sbin to
238 match policycoreutils. This can also be adjusted via
239 semanage.conf using the syntax:
240 [setfiles]
241 path = /path/to/setfiles
242 args = -q -c $@ $<
243 [end]
244
2451.6.7 2006-05-05
246 * Merged fix warnings patch from Karl MacMillan.
247
2481.6.6 2006-04-14
249 * Merged updated file context sorting patch from Christopher
250 Ashworth, with bug fix for escaped character flag.
251
2521.6.5 2006-04-13
253 * Merged file context sorting code from Christopher Ashworth
254 (Tresys Technology), based on fc_sort.c code in refpolicy.
255
2561.6.4 2006-04-12
257 * Merged python binding t_output_helper removal patch from Dan Walsh.
258 * Regenerated swig files.
259
2601.6.3 2006-03-30
261 * Merged corrected fix for descriptor leak from Dan Walsh.
262
2631.6.2 2006-03-20
264 * Merged Makefile PYLIBVER definition patch from Dan Walsh.
265
2661.6.1 2006-03-20
267 * Merged man page reorganization from Ivan Gyurdiev.
268
2691.6 2006-03-14
270 * Updated version for release.
271
2721.5.31 2006-03-09
273 * Merged abort early on merge errors patch from Ivan Gyurdiev.
274
2751.5.30 2006-03-08
276 * Cleaned up error handling in semanage_split_fc based on a patch
277 by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
278
2791.5.29 2006-02-21
280 * Merged MLS handling fixes from Ivan Gyurdiev.
281
2821.5.28 2006-02-16
283 * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
284
2851.5.27 2006-02-16
286 * Merged base_merge_components changes from Ivan Gyurdiev.
287
2881.5.26 2006-02-15
289 * Merged paths array patch from Ivan Gyurdiev.
290 * Merged bug fix patch from Ivan Gyurdiev.
291
2921.5.25 2006-02-14
293 * Merged improve bindings patch from Ivan Gyurdiev.
294
2951.5.24 2006-02-14
296 * Merged use PyList patch from Ivan Gyurdiev.
297 * Merged memory leak fix patch from Ivan Gyurdiev.
298 * Merged nodecon support patch from Ivan Gyurdiev.
299 * Merged cleanups patch from Ivan Gyurdiev.
300 * Merged split swig patch from Ivan Gyurdiev.
301
3021.5.23 2006-02-13
303 * Merged optionals in base patch from Joshua Brindle.
304
3051.5.22 2006-02-13
306 * Merged treat seusers/users_extra as optional sections patch from
307 Ivan Gyurdiev.
308 * Merged parse_optional fixes from Ivan Gyurdiev.
309
3101.5.21 2006-02-07
311 * Merged seuser/user_extra support patch from Joshua Brindle.
312 * Merged remote system dbase patch from Ivan Gyurdiev.
313
3141.5.20 2006-02-02
315 * Merged clone record on set_con patch from Ivan Gyurdiev.
316
3171.5.19 2006-01-30
318 * Merged fname parameter patch from Ivan Gyurdiev.
319 * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
320 * Merged seusers.system patch from Ivan Gyurdiev.
321 * Merged improve port/fcontext API patch from Ivan Gyurdiev.
322
3231.5.18 2006-01-27
324 * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
325
3261.5.17 2006-01-27
327 * Merged set_create_store, access_check, and is_connected interfaces
328 from Joshua Brindle.
329
3301.5.16 2006-01-19
331 * Regenerate python wrappers.
332
3331.5.15 2006-01-18
334 * Merged pywrap Makefile diff from Dan Walsh.
335 * Merged cache management patch from Ivan Gyurdiev.
336 * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
337 * Merged remove apply_local function patch from Ivan Gyurdiev.
338 * Merged only do read locking in direct case patch from Ivan Gyurdiev.
339 * Merged cache error path memory leak fix from Ivan Gyurdiev.
340 * Merged auto-generated file header patch from Ivan Gyurdiev.
341 * Merged pywrap test update from Ivan Gyurdiev.
342 * Merged hidden defs update from Ivan Gyurdiev.
343
3441.5.14 2006-01-13
345 * Merged disallow port overlap patch from Ivan Gyurdiev.
346
3471.5.13 2006-01-12
348 * Merged join prereq and implementation patches from Ivan Gyurdiev.
349 * Merged join user extra data part 2 patch from Ivan Gyurdiev.
350 * Merged bugfix patch from Ivan Gyurdiev.
351
3521.5.12 2006-01-12
353 * Merged remove add_local/set_local patch from Ivan Gyurdiev.
354 * Merged user extra data part 1 patch from Ivan Gyurdiev.
355 * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
356 * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
357 bug noticed by Steve Grubb.
358 * Merged cleanups after add/set removal patch from Ivan Gyurdiev.
359
3601.5.11 2006-01-09
361 * Merged fcontext compare fix from Ivan Gyurdiev.
362
3631.5.10 2006-01-06
364 * Fixed commit to return the commit number aka policy sequence number.
365
3661.5.9 2006-01-06
367 * Merged const in APIs patch from Ivan Gyurdiev.
368 * Merged validation of local file contexts patch from Ivan Gyurdiev.
369 * Merged compare2 function patch from Ivan Gyurdiev.
370 * Merged hidden def/proto update patch from Ivan Gyurdiev.
371
3721.5.8 2006-01-05
373 * Re-applied string and file optimization patch from Russell Coker,
374 with bug fix.
375
3761.5.7 2006-01-05
377 * Reverted string and file optimization patch from Russell Coker.
378
3791.5.6 2006-01-05
380 * Clarified error messages from parse_module_headers and
381 parse_base_headers for base/module mismatches.
382
3831.5.5 2006-01-05
384 * Merged string and file optimization patch from Russell Coker.
385 * Merged swig header reordering patch from Ivan Gyurdiev.
386 * Merged toggle modify on add patch from Ivan Gyurdiev.
387 * Merged ports parser bugfix patch from Ivan Gyurdiev.
388 * Merged fcontext swig patch from Ivan Gyurdiev.
389 * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
390 * Merged man pages for dbase functions patch from Ivan Gyurdiev.
391 * Merged pywrap tests patch from Ivan Gyurdiev.
392
3931.5.4 2006-01-04
394 * Merged patch series from Ivan Gyurdiev.
395 This includes patches to:
396 - separate file rw code from linked list
397 - annotate objects
398 - fold together internal headers
399 - support ordering of records in compare function
400 - add active dbase backend, active booleans
401 - return commit numbers for ro database calls
402 - use modified flags to skip rebuild whenever possible
403 - enable port interfaces
404 - update swig interfaces and typemaps
405 - add an API for file_contexts.local and file_contexts
406 - flip the traversal order in iterate/list
407 - reorganize sandbox_expand
408 - add seusers MLS validation
409 - improve dbase spec/documentation
410 - clone record on set/add/modify
411
4121.5.3 2005-12-14
413 * Merged further header cleanups from Ivan Gyurdiev.
414
4151.5.2 2005-12-13
416 * Merged toggle modified flag in policydb_modify, fix memory leak
417 in clear_obsolete, polymorphism vs headers fix, and include guards
418 for internal headers patches from Ivan Gyurdiev.
419
4201.5.1 2005-12-12
421 * Added file-mode= setting to semanage.conf, default to 0644.
422 Changed semanage_copy_file and callers to use this mode when
423 installing policy files to runtime locations.
424
4251.4 2005-12-07
426 * Updated version for release.
427
4281.3.64 2005-12-06
429 * Changed semanage_handle_create() to set do_reload based on
430 is_selinux_enabled(). This prevents improper attempts to
431 load policy on a non-SELinux system.
432
4331.3.63 2005-12-05
434 * Dropped handle from user_del_role interface.
435
4361.3.62 2005-12-05
437 * Removed defrole interfaces.
438
4391.3.61 2005-11-29
440 * Merged Makefile python definitions patch from Dan Walsh.
441
4421.3.60 2005-11-29
443 * Removed is_selinux_mls_enabled() conditionals in seusers and users
444 file parsers.
445
4461.3.59 2005-11-28
447 * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
448
4491.3.58 2005-11-28
450 * Merged remove defrole from sepol patch from Ivan Gyurdiev.
451
4521.3.57 2005-11-28
453 * Merged swig wrappers for modifying users and seusers from Joshua Brindle.
454
4551.3.56 2005-11-16
456 * Fixed free->key_free bug.
457
4581.3.55 2005-11-16
459 * Merged clear obsolete patch from Ivan Gyurdiev.
460
4611.3.54 2005-11-15
462 * Merged modified swigify patch from Dan Walsh
463 (original patch from Joshua Brindle).
464 * Merged move genhomedircon call patch from Chad Sellers.
465
4661.3.53 2005-11-10
467 * Merged move seuser validation patch from Ivan Gyurdiev.
468 * Merged hidden declaration fixes from Ivan Gyurdiev,
469 with minor corrections.
470
4711.3.52 2005-11-09
472 * Merged cleanup patch from Ivan Gyurdiev.
473 This renames semanage_module_conn to semanage_direct_handle,
474 and moves sepol handle create/destroy into semanage handle
475 create/destroy to allow use even when disconnected (for the
476 record interfaces).
477
4781.3.51 2005-11-08
479 * Clear modules modified flag upon disconnect and commit.
480
4811.3.50 2005-11-08
482 * Added tracking of module modifications and use it to
483 determine whether expand-time checks should be applied
484 on commit.
485
4861.3.49 2005-11-08
487 * Reverted semanage_set_reload_bools() interface.
488
4891.3.48 2005-11-08
490 * Disabled calls to port dbase for merge and commit and stubbed
491 out calls to sepol_port interfaces since they are not exported.
492
4931.3.47 2005-11-08
494 * Merged rename instead of copy patch from Joshua Brindle (Tresys).
495
4961.3.46 2005-11-07
497 * Added hidden_def/hidden_proto for exported symbols used within
498 libsemanage to eliminate relocations. Wrapped type definitions
499 in exported headers as needed to avoid conflicts. Added
500 src/context_internal.h and src/iface_internal.h.
501
5021.3.45 2005-11-07
503 * Added semanage_is_managed() interface to allow detection of whether
504 the policy is managed via libsemanage. This enables proper handling
505 in setsebool for non-managed systems.
506
5071.3.44 2005-11-07
508 * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
509 to enable runtime control over preserving active boolean values
510 versus reloading their saved settings upon commit.
511
5121.3.43 2005-11-04
513 * Merged seuser parser resync, dbase tracking and cleanup, strtol
514 bug, copyright, and assert space patches from Ivan Gyurdiev.
515
5161.3.42 2005-11-04
517 * Added src/*_internal.h in preparation for other changes.
518 * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
519 src/seusers.[hc].
520
5211.3.41 2005-11-03
522 * Merged interface parse/print, context_to_string interface change,
523 move assert_noeof, and order preserving patches from Ivan Gyurdiev.
524 * Added src/dso.h in preparation for other changes.
525
5261.3.40 2005-11-01
527 * Merged install seusers, handle/error messages, MLS parsing,
528 and seusers validation patches from Ivan Gyurdiev.
529
5301.3.39 2005-10-31
531 * Merged record interface, dbase flush, common database code,
532 and record bugfix patches from Ivan Gyurdiev.
533
5341.3.38 2005-10-27
535 * Merged dbase policydb list and count change from Ivan Gyurdiev.
536
5371.3.37 2005-10-27
538 * Merged enable dbase and set relay patches from Ivan Gyurdiev.
539
5401.3.36 2005-10-27
541 * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.
542
5431.3.35 2005-10-26
544 * Merged sepol handle passing, seusers support, and policydb cache
545 patches from Ivan Gyurdiev.
546
5471.3.34 2005-10-25
548 * Merged resync to sepol changes and booleans fixes/improvements
549 patches from Ivan Gyurdiev.
550
5511.3.33 2005-10-25
552 * Merged support for genhomedircon/homedir template, store selection,
553 explicit policy reload, and semanage.conf relocation from Joshua
554 Brindle.
555
5561.3.32 2005-10-24
557 * Merged resync to sepol changes and transaction fix patches from
558 Ivan Gyurdiev.
559
5601.3.31 2005-10-21
561 * Merged reorganize users patch from Ivan Gyurdiev.
562 * Merged remove unused relay functions patch from Ivan Gyurdiev.
563
5641.3.30 2005-10-20
565 * Fixed policy file leaks in semanage_load_module and
566 semanage_write_module.
567 * Merged further database work from Ivan Gyurdiev.
568
5691.3.29 2005-10-20
570 * Fixed bug in semanage_direct_disconnect.
571
5721.3.28 2005-10-20
573 * Merged interface renaming patch from Ivan Gyurdiev.
574 * Merged policy component patch from Ivan Gyurdiev.
575
5761.3.27 2005-10-20
577 * Renamed 'check=' configuration value to 'expand-check=' for
578 clarity.
579 * Changed semanage_commit_sandbox to check for and report errors
580 on rename(2) calls performed during rollback.
581
5821.3.26 2005-10-19
583 * Added optional check= configuration value to semanage.conf
584 and updated call to sepol_expand_module to pass its value
585 to control assertion and hierarchy checking on module expansion.
586
5871.3.25 2005-10-19
588 * Merged fixes for make DESTDIR= builds from Joshua Brindle.
589
5901.3.24 2005-10-19
591 * Merged default database from Ivan Gyurdiev.
592 * Merged removal of connect requirement in policydb backend from
593 Ivan Gyurdiev.
594 * Merged commit locking fix and lock rename from Joshua Brindle.
595 * Merged transaction rollback in lock patch from Joshua Brindle.
596
5971.3.23 2005-10-18
598 * Changed default args for load_policy to be null, as it no longer
599 takes a pathname argument and we want to preserve booleans.
600
6011.3.22 2005-10-18
602 * Merged move local dbase initialization patch from Ivan Gyurdiev.
603 * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
604 * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
605
6061.3.21 2005-10-18
607 * Added calls to sepol_policy_file_set_handle interface prior
608 to invoking sepol operations on policy files.
609 * Updated call to sepol_policydb_from_image to pass the handle.
610
6111.3.20 2005-10-17
612 * Merged user and port APIs - policy database patch from Ivan
613 Gyurdiev.
614
6151.3.19 2005-10-17
616 * Converted calls to sepol link_packages and expand_module interfaces
617 from using buffers to using sepol handles for error reporting, and
618 changed direct_connect/disconnect to create/destroy sepol handles.
619
6201.3.18 2005-10-14
621 * Merged bugfix patch from Ivan Gyurdiev.
622
6231.3.17 2005-10-14
624 * Merged seuser database patch from Ivan Gyurdiev.
625 Merged direct user/port databases to the handle from Ivan Gyurdiev.
626
6271.3.16 2005-10-14
628 * Removed obsolete include/semanage/commit_api.h (leftover).
629 Merged seuser record patch from Ivan Gyurdiev.
630
6311.3.15 2005-10-14
632 * Merged boolean and interface databases from Ivan Gyurdiev.
633
6341.3.14 2005-10-13
635 * Updated to use get interfaces for hidden sepol_module_package type.
636
6371.3.13 2005-10-13
638 * Changed semanage_expand_sandbox and semanage_install_active
639 to generate/install the latest policy version supported by libsepol
640 by default (unless overridden by semanage.conf), since libselinux
641 will now downgrade automatically for load_policy.
642
6431.3.12 2005-10-13
644 * Merged new callback-based error reporting system and ongoing
645 database work from Ivan Gyurdiev.
646
6471.3.11 2005-10-11
648 * Fixed semanage_install_active() to use the same logic for
649 selecting a policy version as semanage_expand_sandbox(). Dropped
650 dead code from semanage_install_sandbox().
651
6521.3.10 2005-10-07
653 * Updated for changes to libsepol, and to only use types and interfaces
654 provided by the shared libsepol.
655
6561.3.9 2005-10-06
657 * Merged further database work from Ivan Gyurdiev.
658
6591.3.8 2005-10-04
660 * Merged iterate, redistribute, and dbase split patches from
661 Ivan Gyurdiev.
662
6631.3.7 2005-09-30
664 * Merged patch series from Ivan Gyurdiev.
665 (pointer typedef elimination, file renames, dbase work, backend
666 separation)
667
6681.3.6 2005-09-28
669 * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
670 * Separated handle create from connect interface.
671 * Added a constructor for initialization.
672 * Moved up src/include/*.h to src.
673 * Created a symbol map file; dropped dso.h and hidden markings.
674
6751.3.5 2005-09-28
676 * Merged major update to libsemanage organization and functionality
677 from Karl MacMillan (Tresys).
678
6791.3.4 2005-09-23
680 * Merged dbase redesign patch from Ivan Gyurdiev.
681
6821.3.3 2005-09-21
683 * Merged boolean record, stub record handler, and status codes
684 patches from Ivan Gyurdiev.
685
6861.3.2 2005-09-16
687 * Merged stub iterator functionality from Ivan Gyurdiev.
688 * Merged interface record patch from Ivan Gyurdiev.
689
6901.3.1 2005-09-14
691 * Merged stub functionality for managing user and port records,
692 and record table code from Ivan Gyurdiev.
693
6941.2 2005-09-06
695 * Updated version for release.
696
6971.1.6 2005-08-31
698 * Merged semod.conf template patch from Dan Walsh (Red Hat),
699 but restored location to /usr/share/semod/semod.conf.
700
7011.1.5 2005-08-30
702 * Fixed several bugs found by valgrind.
703 * Fixed bug in prior patch for the semod_build_module_list leak.
704
7051.1.4 2005-08-25
706 * Merged errno fix from Joshua Brindle (Tresys).
707 * Merged fix for semod_build_modules_list leak on error path
708 from Serge Hallyn (IBM). Bug found by Coverity.
709
7101.1.3 2005-08-22
711 * Merged several fixes from Serge Hallyn (IBM). Bugs found by
712 Coverity.
713 * Fixed several other bugs and warnings.
714
7151.1.2 2005-08-02
716 * Merged patch to move module read/write code from libsemanage
717 to libsepol from Jason Tang (Tresys).
718
7191.1.1 2005-08-02
720 * Merged relay records patch from Ivan Gyurdiev.
721 * Merged key extract patch from Ivan Gyurdiev.
722
7231.0 2005-07-27
724 * Initial version.