Chad Sellers | d17ed0d | 2010-12-16 14:11:57 -0500 | [diff] [blame^] | 1 | 2.0.46 2010-12-16 |
| 2 | * Fix compliation under GCC 4.6 by Justin Mattock |
| 3 | |
Joshua Brindle | e6bfff4 | 2010-03-06 18:10:51 -0500 | [diff] [blame] | 4 | 2.0.45 2010-03-06 |
| 5 | * Add enable/disable patch support from Dan Walsh. |
| 6 | * Add usepasswd flag to semanage.conf to disable genhomedircon using |
| 7 | passwd from Dan Walsh. |
| 8 | * regenerate swig wrappers |
| 9 | |
Stephen Smalley | 9a18148 | 2010-02-02 15:34:16 -0500 | [diff] [blame] | 10 | 2.0.44 2010-02-02 |
| 11 | * Replace usage of fmemopen() with sepol_policy_file_set_mem() since |
| 12 | glibc < 2.9 does not support binary mode ('b') for fmemopen'd |
| 13 | streams. |
| 14 | |
Joshua Brindle | 7b9904b | 2009-11-27 13:02:43 -0500 | [diff] [blame] | 15 | 2.0.43 2009-11-27 |
| 16 | * Move libsemanage.so to /usr/lib |
| 17 | * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org> |
| 18 | |
Chad Sellers | 88a57ca | 2009-11-18 16:44:55 -0500 | [diff] [blame] | 19 | 2.0.42 2009-11-18 |
| 20 | * Move load_policy from /usr/sbin to /sbin from Dan Walsh. |
| 21 | |
Eamon Walsh | 7cdfd6e | 2009-10-29 15:33:37 -0400 | [diff] [blame] | 22 | 2.0.41 2009-10-29 |
| 23 | * Add pkgconfig file from Eamon Walsh. |
| 24 | |
Chad Sellers | 6f46606 | 2009-10-22 14:00:10 -0400 | [diff] [blame] | 25 | 2.0.40 2009-10-22 |
| 26 | * Add semanage_set_check_contexts() function to disable calling |
| 27 | setfiles |
| 28 | |
Joshua Brindle | 0e421af | 2009-09-24 15:18:12 -0400 | [diff] [blame] | 29 | 2.0.39 2009-09-24 |
| 30 | * make swigify |
| 31 | |
Joshua Brindle | 6e7e247 | 2009-09-16 16:59:13 -0400 | [diff] [blame] | 32 | 2.0.38 2009-09-16 |
| 33 | * Change semodule upgrade behavior to install even if the module |
| 34 | is not present from Dan Walsh. |
| 35 | * Make genhomedircon trim excess '/' from homedirs from Dan Walsh. |
| 36 | |
Joshua Brindle | eaaafe2 | 2009-09-04 13:26:37 -0400 | [diff] [blame] | 37 | 2.0.37 2009-09-04 |
| 38 | * Fix persistent dontaudit support to rebuild policy if the |
| 39 | dontaudit state is changed from Chad Sellers. |
| 40 | |
Stephen Smalley | e376f72 | 2009-08-24 15:28:42 -0400 | [diff] [blame] | 41 | 2.0.36 2009-08-24 |
| 42 | * Changed bzip-blocksize=0 handling to support existing compressed |
| 43 | modules in the store. |
| 44 | |
Stephen Smalley | 0fb9c99 | 2009-08-05 14:13:27 -0400 | [diff] [blame] | 45 | 2.0.35 2009-08-05 |
| 46 | * Revert hard linking of files between tmp/active/previous. |
| 47 | |
Stephen Smalley | 76412ff | 2009-08-05 08:40:36 -0400 | [diff] [blame] | 48 | 2.0.34 2009-08-05 |
| 49 | * Enable configuration of bzip behavior from Stephen Smalley. |
| 50 | bzip-blocksize=0 to disable compression and decompression support. |
| 51 | bzip-blocksize=1..9 to set the blocksize for compression. |
| 52 | bzip-small=true to reduce memory usage for decompression. |
| 53 | |
Stephen Smalley | 4d92b1f | 2009-07-07 14:26:15 -0400 | [diff] [blame] | 54 | 2.0.33 2009-07-07 |
| 55 | * Maintain disable dontaudit state from Christopher Pardy. |
| 56 | |
Stephen Smalley | 0b659be | 2009-05-28 10:55:27 -0400 | [diff] [blame] | 57 | 2.0.32 2009-05-28 |
| 58 | * Ruby bindings from David Quigley. |
| 59 | |
Joshua Brindle | 1076073 | 2009-01-12 10:45:26 -0500 | [diff] [blame] | 60 | 2.0.31 2009-01-12 |
| 61 | * Policy module compression (bzip) support from Dan Walsh. |
| 62 | * Hard link files between tmp/active/previous from Dan Walsh. |
| 63 | |
Stephen Smalley | 46dc670 | 2008-11-12 09:27:21 -0500 | [diff] [blame] | 64 | 2.0.30 2008-11-12 |
| 65 | * Add semanage_mls_enabled() interface from Stephen Smalley. |
| 66 | |
Joshua Brindle | 223bb40 | 2008-11-09 11:20:40 -0500 | [diff] [blame] | 67 | 2.0.29 2008-11-11 |
| 68 | * Add USER to lines to homedir_template context file from Chris PeBenito. |
| 69 | |
Joshua Brindle | f187d4a | 2008-09-15 11:25:27 -0400 | [diff] [blame] | 70 | 2.0.28 2008-09-15 |
| 71 | * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh |
| 72 | |
Joshua Brindle | 13cd4c8 | 2008-08-19 15:30:36 -0400 | [diff] [blame] | 73 | 2.0.27 2008-08-05 |
| 74 | * Modify genhomedircon to skip %groupname entries. |
| 75 | Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the %groupname syntax. |
| 76 | |
| 77 | 2.0.26 2008-07-29 |
| 78 | * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. |
| 79 | Strip any trailing slash before appending /*$. |
| 80 | |
| 81 | 2.0.25 2008-04-21 |
| 82 | * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. |
| 83 | Fixes semanage boolean -D seg fault (bug 441379). |
| 84 | |
| 85 | 2.0.24 2008-02-26 |
| 86 | * make swigify |
| 87 | |
| 88 | 2.0.23 2008-02-04 |
| 89 | * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller. |
| 90 | |
| 91 | 2.0.22 2008-02-04 |
| 92 | * Free policydb before fork from Joshua Brindle. |
| 93 | |
| 94 | 2.0.21 2008-02-04 |
| 95 | * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley. |
| 96 | |
| 97 | 2.0.12 2008-02-02 |
| 98 | * Use sepol_set_expand_consume_base to reduce peak memory usage when |
| 99 | using semodule from Joshua Brindle. |
| 100 | |
| 101 | 2.0.19 2008-01-31 |
| 102 | * Fix genhomedircon to not override a file context with a homedir context from Todd Miller. |
| 103 | |
| 104 | 2.0.18 2008-01-28 |
| 105 | * Fix spurious out of memory error reports. |
| 106 | |
| 107 | 2.0.17 2008-01-25 |
| 108 | * Merged second version of fix for genhomedircon handling from Caleb Case. |
| 109 | |
| 110 | 2.0.16 2008-01-24 |
| 111 | * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case. |
| 112 | |
| 113 | 2.0.15 2007-12-05 |
| 114 | * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. |
| 115 | * Copy the store path in semanage_select_store from Dan Walsh. |
| 116 | |
| 117 | 2.0.14 2007-11-05 |
| 118 | * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. |
| 119 | |
| 120 | 2.0.13 2007-11-05 |
| 121 | * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley. |
| 122 | |
| 123 | 2.0.12 2007-10-05 |
| 124 | * ustr cleanups from James Antill. |
| 125 | * Ensure that /root gets labeled even if using the default context from Dan Walsh. |
| 126 | |
| 127 | 2.0.11 2007-09-28 |
| 128 | * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh. |
| 129 | |
| 130 | 2.0.10 2007-09-28 |
| 131 | * Fix error checking on getpw*_r functions from Todd Miller. |
| 132 | * Make genhomedircon skip invalid homedir contexts from Todd Miller. |
| 133 | * Set default user and prefix from seusers from Dan Walsh. |
| 134 | * Add swigify Makefile target from Dan Walsh. |
| 135 | |
| 136 | 2.0.9 2007-09-24 |
| 137 | * Pass CFLAGS to CC even on link command, per Dennis Gilmore. |
| 138 | |
| 139 | 2.0.8 2007-09-19 |
| 140 | * Clear errno on non-fatal errors to avoid reporting them upon a |
| 141 | later error that does not set errno. |
| 142 | |
| 143 | 2.0.7 2007-09-19 |
| 144 | * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. |
| 145 | |
| 146 | 2.0.6 2007-09-10 |
| 147 | * Change to use getpw* function calls to the _r versions from Todd Miller. |
| 148 | |
| 149 | 2.0.5 2007-08-23 |
| 150 | * Replace genhomedircon script with equivalent functionality within |
| 151 | libsemanage and introduce disable-genhomedircon option in |
| 152 | semanage.conf from Todd Miller. |
| 153 | Note: Depends on ustr. |
| 154 | |
| 155 | 2.0.4 2007-08-16 |
| 156 | * Allow dontaudits to be turned off via semanage interface when |
| 157 | updating policy from Joshua Brindle. |
| 158 | |
| 159 | 2.0.3 2007-04-25 |
| 160 | * Fix to libsemanage man patches so whatis will work better from Dan Walsh |
| 161 | |
| 162 | 2.0.2 2007-04-24 |
| 163 | * Merged optimizations from Stephen Smalley. |
| 164 | - do not set all booleans upon commit, only those whose values have changed |
| 165 | - only install the sandbox upon commit if something was rebuilt |
| 166 | |
| 167 | 2.0.1 2007-03-12 |
| 168 | * Merged dbase_file_flush patch from Dan Walsh. |
| 169 | This removes any mention of specific tools (e.g. semanage) |
| 170 | from the comment header of the auto-generated files, |
| 171 | since there are multiple front-end tools. |
| 172 | |
| 173 | 2.0.0 2007-02-20 |
| 174 | * Merged Makefile test target patch from Caleb Case. |
| 175 | * Merged get_commit_number function rename patch from Caleb Case. |
| 176 | * Merged strnlen -> strlen patch from Todd Miller. |
| 177 | |
| 178 | 1.10.1 2007-01-26 |
| 179 | * Merged python binding fix from Dan Walsh. |
| 180 | |
| 181 | 1.10.0 2007-01-18 |
| 182 | * Updated version for stable branch. |
| 183 | |
| 184 | 1.9.2 2007-01-08 |
| 185 | * Merged patch to optionally reduce disk usage by removing |
| 186 | the backup module store and linked policy from Karl MacMillan |
| 187 | * Merged patch to correctly propagate return values in libsemanage |
| 188 | |
| 189 | 1.9.1 2006-11-27 |
| 190 | * Merged patch to compile wit -fPIC instead of -fpic from |
| 191 | Manoj Srivastava to prevent hitting the global offest table |
| 192 | limit. Patch changed to include libselinux and libsemanage in |
| 193 | addition to libsepol. |
| 194 | |
| 195 | 1.8 2006-10-17 |
| 196 | * Updated version for release. |
| 197 | |
| 198 | 1.6.17 2006-09-29 |
| 199 | * Merged patch to skip reload if no active store exists and |
| 200 | the store path doesn't match the active store path from Dan Walsh. |
| 201 | * Merged patch to not destroy sepol handle on error path of |
| 202 | connect from James Athey. |
| 203 | * Merged patch to add genhomedircon path to semanage.conf from |
| 204 | James Athey. |
| 205 | |
| 206 | 1.6.16 2006-08-14 |
| 207 | * Make most copy errors fatal, but allow exceptions for |
| 208 | file_contexts.local, seusers, and netfilter_contexts if |
| 209 | the source file does not exist in the store. |
| 210 | |
| 211 | 1.6.15 2006-08-11 |
| 212 | * Merged separate local file contexts patch from Chris PeBenito. |
| 213 | |
| 214 | 1.6.14 2006-08-11 |
| 215 | * Merged patch to make most copy errors non-fatal from Dan Walsh. |
| 216 | |
| 217 | 1.6.13 2006-08-03 |
| 218 | * Merged netfilter contexts support from Chris PeBenito. |
| 219 | |
| 220 | 1.6.12 2006-07-11 |
| 221 | * Merged support for read operations on read-only fs from |
| 222 | Caleb Case (Tresys Technology). |
| 223 | |
| 224 | 1.6.11 2006-06-29 |
| 225 | * Lindent. |
| 226 | |
| 227 | 1.6.10 2006-06-26 |
| 228 | * Merged setfiles location check patch from Dan Walsh. |
| 229 | |
| 230 | 1.6.9 2006-06-16 |
| 231 | * Merged several fixes from Serge Hallyn: |
| 232 | dbase_file_cache: deref of uninit data on error path. |
| 233 | dbase_policydb_cache: clear fp to avoid double fclose |
| 234 | semanage_fc_sort: destroy temp on error paths |
| 235 | |
| 236 | 1.6.8 2006-06-02 |
| 237 | * Updated default location for setfiles to /sbin to |
| 238 | match policycoreutils. This can also be adjusted via |
| 239 | semanage.conf using the syntax: |
| 240 | [setfiles] |
| 241 | path = /path/to/setfiles |
| 242 | args = -q -c $@ $< |
| 243 | [end] |
| 244 | |
| 245 | 1.6.7 2006-05-05 |
| 246 | * Merged fix warnings patch from Karl MacMillan. |
| 247 | |
| 248 | 1.6.6 2006-04-14 |
| 249 | * Merged updated file context sorting patch from Christopher |
| 250 | Ashworth, with bug fix for escaped character flag. |
| 251 | |
| 252 | 1.6.5 2006-04-13 |
| 253 | * Merged file context sorting code from Christopher Ashworth |
| 254 | (Tresys Technology), based on fc_sort.c code in refpolicy. |
| 255 | |
| 256 | 1.6.4 2006-04-12 |
| 257 | * Merged python binding t_output_helper removal patch from Dan Walsh. |
| 258 | * Regenerated swig files. |
| 259 | |
| 260 | 1.6.3 2006-03-30 |
| 261 | * Merged corrected fix for descriptor leak from Dan Walsh. |
| 262 | |
| 263 | 1.6.2 2006-03-20 |
| 264 | * Merged Makefile PYLIBVER definition patch from Dan Walsh. |
| 265 | |
| 266 | 1.6.1 2006-03-20 |
| 267 | * Merged man page reorganization from Ivan Gyurdiev. |
| 268 | |
| 269 | 1.6 2006-03-14 |
| 270 | * Updated version for release. |
| 271 | |
| 272 | 1.5.31 2006-03-09 |
| 273 | * Merged abort early on merge errors patch from Ivan Gyurdiev. |
| 274 | |
| 275 | 1.5.30 2006-03-08 |
| 276 | * Cleaned up error handling in semanage_split_fc based on a patch |
| 277 | by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. |
| 278 | |
| 279 | 1.5.29 2006-02-21 |
| 280 | * Merged MLS handling fixes from Ivan Gyurdiev. |
| 281 | |
| 282 | 1.5.28 2006-02-16 |
| 283 | * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. |
| 284 | |
| 285 | 1.5.27 2006-02-16 |
| 286 | * Merged base_merge_components changes from Ivan Gyurdiev. |
| 287 | |
| 288 | 1.5.26 2006-02-15 |
| 289 | * Merged paths array patch from Ivan Gyurdiev. |
| 290 | * Merged bug fix patch from Ivan Gyurdiev. |
| 291 | |
| 292 | 1.5.25 2006-02-14 |
| 293 | * Merged improve bindings patch from Ivan Gyurdiev. |
| 294 | |
| 295 | 1.5.24 2006-02-14 |
| 296 | * Merged use PyList patch from Ivan Gyurdiev. |
| 297 | * Merged memory leak fix patch from Ivan Gyurdiev. |
| 298 | * Merged nodecon support patch from Ivan Gyurdiev. |
| 299 | * Merged cleanups patch from Ivan Gyurdiev. |
| 300 | * Merged split swig patch from Ivan Gyurdiev. |
| 301 | |
| 302 | 1.5.23 2006-02-13 |
| 303 | * Merged optionals in base patch from Joshua Brindle. |
| 304 | |
| 305 | 1.5.22 2006-02-13 |
| 306 | * Merged treat seusers/users_extra as optional sections patch from |
| 307 | Ivan Gyurdiev. |
| 308 | * Merged parse_optional fixes from Ivan Gyurdiev. |
| 309 | |
| 310 | 1.5.21 2006-02-07 |
| 311 | * Merged seuser/user_extra support patch from Joshua Brindle. |
| 312 | * Merged remote system dbase patch from Ivan Gyurdiev. |
| 313 | |
| 314 | 1.5.20 2006-02-02 |
| 315 | * Merged clone record on set_con patch from Ivan Gyurdiev. |
| 316 | |
| 317 | 1.5.19 2006-01-30 |
| 318 | * Merged fname parameter patch from Ivan Gyurdiev. |
| 319 | * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. |
| 320 | * Merged seusers.system patch from Ivan Gyurdiev. |
| 321 | * Merged improve port/fcontext API patch from Ivan Gyurdiev. |
| 322 | |
| 323 | 1.5.18 2006-01-27 |
| 324 | * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. |
| 325 | |
| 326 | 1.5.17 2006-01-27 |
| 327 | * Merged set_create_store, access_check, and is_connected interfaces |
| 328 | from Joshua Brindle. |
| 329 | |
| 330 | 1.5.16 2006-01-19 |
| 331 | * Regenerate python wrappers. |
| 332 | |
| 333 | 1.5.15 2006-01-18 |
| 334 | * Merged pywrap Makefile diff from Dan Walsh. |
| 335 | * Merged cache management patch from Ivan Gyurdiev. |
| 336 | * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. |
| 337 | * Merged remove apply_local function patch from Ivan Gyurdiev. |
| 338 | * Merged only do read locking in direct case patch from Ivan Gyurdiev. |
| 339 | * Merged cache error path memory leak fix from Ivan Gyurdiev. |
| 340 | * Merged auto-generated file header patch from Ivan Gyurdiev. |
| 341 | * Merged pywrap test update from Ivan Gyurdiev. |
| 342 | * Merged hidden defs update from Ivan Gyurdiev. |
| 343 | |
| 344 | 1.5.14 2006-01-13 |
| 345 | * Merged disallow port overlap patch from Ivan Gyurdiev. |
| 346 | |
| 347 | 1.5.13 2006-01-12 |
| 348 | * Merged join prereq and implementation patches from Ivan Gyurdiev. |
| 349 | * Merged join user extra data part 2 patch from Ivan Gyurdiev. |
| 350 | * Merged bugfix patch from Ivan Gyurdiev. |
| 351 | |
| 352 | 1.5.12 2006-01-12 |
| 353 | * Merged remove add_local/set_local patch from Ivan Gyurdiev. |
| 354 | * Merged user extra data part 1 patch from Ivan Gyurdiev. |
| 355 | * Merged size_t -> unsigned int patch from Ivan Gyurdiev. |
| 356 | * Merged calloc check in semanage_store patch from Ivan Gyurdiev, |
| 357 | bug noticed by Steve Grubb. |
| 358 | * Merged cleanups after add/set removal patch from Ivan Gyurdiev. |
| 359 | |
| 360 | 1.5.11 2006-01-09 |
| 361 | * Merged fcontext compare fix from Ivan Gyurdiev. |
| 362 | |
| 363 | 1.5.10 2006-01-06 |
| 364 | * Fixed commit to return the commit number aka policy sequence number. |
| 365 | |
| 366 | 1.5.9 2006-01-06 |
| 367 | * Merged const in APIs patch from Ivan Gyurdiev. |
| 368 | * Merged validation of local file contexts patch from Ivan Gyurdiev. |
| 369 | * Merged compare2 function patch from Ivan Gyurdiev. |
| 370 | * Merged hidden def/proto update patch from Ivan Gyurdiev. |
| 371 | |
| 372 | 1.5.8 2006-01-05 |
| 373 | * Re-applied string and file optimization patch from Russell Coker, |
| 374 | with bug fix. |
| 375 | |
| 376 | 1.5.7 2006-01-05 |
| 377 | * Reverted string and file optimization patch from Russell Coker. |
| 378 | |
| 379 | 1.5.6 2006-01-05 |
| 380 | * Clarified error messages from parse_module_headers and |
| 381 | parse_base_headers for base/module mismatches. |
| 382 | |
| 383 | 1.5.5 2006-01-05 |
| 384 | * Merged string and file optimization patch from Russell Coker. |
| 385 | * Merged swig header reordering patch from Ivan Gyurdiev. |
| 386 | * Merged toggle modify on add patch from Ivan Gyurdiev. |
| 387 | * Merged ports parser bugfix patch from Ivan Gyurdiev. |
| 388 | * Merged fcontext swig patch from Ivan Gyurdiev. |
| 389 | * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. |
| 390 | * Merged man pages for dbase functions patch from Ivan Gyurdiev. |
| 391 | * Merged pywrap tests patch from Ivan Gyurdiev. |
| 392 | |
| 393 | 1.5.4 2006-01-04 |
| 394 | * Merged patch series from Ivan Gyurdiev. |
| 395 | This includes patches to: |
| 396 | - separate file rw code from linked list |
| 397 | - annotate objects |
| 398 | - fold together internal headers |
| 399 | - support ordering of records in compare function |
| 400 | - add active dbase backend, active booleans |
| 401 | - return commit numbers for ro database calls |
| 402 | - use modified flags to skip rebuild whenever possible |
| 403 | - enable port interfaces |
| 404 | - update swig interfaces and typemaps |
| 405 | - add an API for file_contexts.local and file_contexts |
| 406 | - flip the traversal order in iterate/list |
| 407 | - reorganize sandbox_expand |
| 408 | - add seusers MLS validation |
| 409 | - improve dbase spec/documentation |
| 410 | - clone record on set/add/modify |
| 411 | |
| 412 | 1.5.3 2005-12-14 |
| 413 | * Merged further header cleanups from Ivan Gyurdiev. |
| 414 | |
| 415 | 1.5.2 2005-12-13 |
| 416 | * Merged toggle modified flag in policydb_modify, fix memory leak |
| 417 | in clear_obsolete, polymorphism vs headers fix, and include guards |
| 418 | for internal headers patches from Ivan Gyurdiev. |
| 419 | |
| 420 | 1.5.1 2005-12-12 |
| 421 | * Added file-mode= setting to semanage.conf, default to 0644. |
| 422 | Changed semanage_copy_file and callers to use this mode when |
| 423 | installing policy files to runtime locations. |
| 424 | |
| 425 | 1.4 2005-12-07 |
| 426 | * Updated version for release. |
| 427 | |
| 428 | 1.3.64 2005-12-06 |
| 429 | * Changed semanage_handle_create() to set do_reload based on |
| 430 | is_selinux_enabled(). This prevents improper attempts to |
| 431 | load policy on a non-SELinux system. |
| 432 | |
| 433 | 1.3.63 2005-12-05 |
| 434 | * Dropped handle from user_del_role interface. |
| 435 | |
| 436 | 1.3.62 2005-12-05 |
| 437 | * Removed defrole interfaces. |
| 438 | |
| 439 | 1.3.61 2005-11-29 |
| 440 | * Merged Makefile python definitions patch from Dan Walsh. |
| 441 | |
| 442 | 1.3.60 2005-11-29 |
| 443 | * Removed is_selinux_mls_enabled() conditionals in seusers and users |
| 444 | file parsers. |
| 445 | |
| 446 | 1.3.59 2005-11-28 |
| 447 | * Merged wrap char*** for user_get_roles patch from Joshua Brindle. |
| 448 | |
| 449 | 1.3.58 2005-11-28 |
| 450 | * Merged remove defrole from sepol patch from Ivan Gyurdiev. |
| 451 | |
| 452 | 1.3.57 2005-11-28 |
| 453 | * Merged swig wrappers for modifying users and seusers from Joshua Brindle. |
| 454 | |
| 455 | 1.3.56 2005-11-16 |
| 456 | * Fixed free->key_free bug. |
| 457 | |
| 458 | 1.3.55 2005-11-16 |
| 459 | * Merged clear obsolete patch from Ivan Gyurdiev. |
| 460 | |
| 461 | 1.3.54 2005-11-15 |
| 462 | * Merged modified swigify patch from Dan Walsh |
| 463 | (original patch from Joshua Brindle). |
| 464 | * Merged move genhomedircon call patch from Chad Sellers. |
| 465 | |
| 466 | 1.3.53 2005-11-10 |
| 467 | * Merged move seuser validation patch from Ivan Gyurdiev. |
| 468 | * Merged hidden declaration fixes from Ivan Gyurdiev, |
| 469 | with minor corrections. |
| 470 | |
| 471 | 1.3.52 2005-11-09 |
| 472 | * Merged cleanup patch from Ivan Gyurdiev. |
| 473 | This renames semanage_module_conn to semanage_direct_handle, |
| 474 | and moves sepol handle create/destroy into semanage handle |
| 475 | create/destroy to allow use even when disconnected (for the |
| 476 | record interfaces). |
| 477 | |
| 478 | 1.3.51 2005-11-08 |
| 479 | * Clear modules modified flag upon disconnect and commit. |
| 480 | |
| 481 | 1.3.50 2005-11-08 |
| 482 | * Added tracking of module modifications and use it to |
| 483 | determine whether expand-time checks should be applied |
| 484 | on commit. |
| 485 | |
| 486 | 1.3.49 2005-11-08 |
| 487 | * Reverted semanage_set_reload_bools() interface. |
| 488 | |
| 489 | 1.3.48 2005-11-08 |
| 490 | * Disabled calls to port dbase for merge and commit and stubbed |
| 491 | out calls to sepol_port interfaces since they are not exported. |
| 492 | |
| 493 | 1.3.47 2005-11-08 |
| 494 | * Merged rename instead of copy patch from Joshua Brindle (Tresys). |
| 495 | |
| 496 | 1.3.46 2005-11-07 |
| 497 | * Added hidden_def/hidden_proto for exported symbols used within |
| 498 | libsemanage to eliminate relocations. Wrapped type definitions |
| 499 | in exported headers as needed to avoid conflicts. Added |
| 500 | src/context_internal.h and src/iface_internal.h. |
| 501 | |
| 502 | 1.3.45 2005-11-07 |
| 503 | * Added semanage_is_managed() interface to allow detection of whether |
| 504 | the policy is managed via libsemanage. This enables proper handling |
| 505 | in setsebool for non-managed systems. |
| 506 | |
| 507 | 1.3.44 2005-11-07 |
| 508 | * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, |
| 509 | to enable runtime control over preserving active boolean values |
| 510 | versus reloading their saved settings upon commit. |
| 511 | |
| 512 | 1.3.43 2005-11-04 |
| 513 | * Merged seuser parser resync, dbase tracking and cleanup, strtol |
| 514 | bug, copyright, and assert space patches from Ivan Gyurdiev. |
| 515 | |
| 516 | 1.3.42 2005-11-04 |
| 517 | * Added src/*_internal.h in preparation for other changes. |
| 518 | * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and |
| 519 | src/seusers.[hc]. |
| 520 | |
| 521 | 1.3.41 2005-11-03 |
| 522 | * Merged interface parse/print, context_to_string interface change, |
| 523 | move assert_noeof, and order preserving patches from Ivan Gyurdiev. |
| 524 | * Added src/dso.h in preparation for other changes. |
| 525 | |
| 526 | 1.3.40 2005-11-01 |
| 527 | * Merged install seusers, handle/error messages, MLS parsing, |
| 528 | and seusers validation patches from Ivan Gyurdiev. |
| 529 | |
| 530 | 1.3.39 2005-10-31 |
| 531 | * Merged record interface, dbase flush, common database code, |
| 532 | and record bugfix patches from Ivan Gyurdiev. |
| 533 | |
| 534 | 1.3.38 2005-10-27 |
| 535 | * Merged dbase policydb list and count change from Ivan Gyurdiev. |
| 536 | |
| 537 | 1.3.37 2005-10-27 |
| 538 | * Merged enable dbase and set relay patches from Ivan Gyurdiev. |
| 539 | |
| 540 | 1.3.36 2005-10-27 |
| 541 | * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev. |
| 542 | |
| 543 | 1.3.35 2005-10-26 |
| 544 | * Merged sepol handle passing, seusers support, and policydb cache |
| 545 | patches from Ivan Gyurdiev. |
| 546 | |
| 547 | 1.3.34 2005-10-25 |
| 548 | * Merged resync to sepol changes and booleans fixes/improvements |
| 549 | patches from Ivan Gyurdiev. |
| 550 | |
| 551 | 1.3.33 2005-10-25 |
| 552 | * Merged support for genhomedircon/homedir template, store selection, |
| 553 | explicit policy reload, and semanage.conf relocation from Joshua |
| 554 | Brindle. |
| 555 | |
| 556 | 1.3.32 2005-10-24 |
| 557 | * Merged resync to sepol changes and transaction fix patches from |
| 558 | Ivan Gyurdiev. |
| 559 | |
| 560 | 1.3.31 2005-10-21 |
| 561 | * Merged reorganize users patch from Ivan Gyurdiev. |
| 562 | * Merged remove unused relay functions patch from Ivan Gyurdiev. |
| 563 | |
| 564 | 1.3.30 2005-10-20 |
| 565 | * Fixed policy file leaks in semanage_load_module and |
| 566 | semanage_write_module. |
| 567 | * Merged further database work from Ivan Gyurdiev. |
| 568 | |
| 569 | 1.3.29 2005-10-20 |
| 570 | * Fixed bug in semanage_direct_disconnect. |
| 571 | |
| 572 | 1.3.28 2005-10-20 |
| 573 | * Merged interface renaming patch from Ivan Gyurdiev. |
| 574 | * Merged policy component patch from Ivan Gyurdiev. |
| 575 | |
| 576 | 1.3.27 2005-10-20 |
| 577 | * Renamed 'check=' configuration value to 'expand-check=' for |
| 578 | clarity. |
| 579 | * Changed semanage_commit_sandbox to check for and report errors |
| 580 | on rename(2) calls performed during rollback. |
| 581 | |
| 582 | 1.3.26 2005-10-19 |
| 583 | * Added optional check= configuration value to semanage.conf |
| 584 | and updated call to sepol_expand_module to pass its value |
| 585 | to control assertion and hierarchy checking on module expansion. |
| 586 | |
| 587 | 1.3.25 2005-10-19 |
| 588 | * Merged fixes for make DESTDIR= builds from Joshua Brindle. |
| 589 | |
| 590 | 1.3.24 2005-10-19 |
| 591 | * Merged default database from Ivan Gyurdiev. |
| 592 | * Merged removal of connect requirement in policydb backend from |
| 593 | Ivan Gyurdiev. |
| 594 | * Merged commit locking fix and lock rename from Joshua Brindle. |
| 595 | * Merged transaction rollback in lock patch from Joshua Brindle. |
| 596 | |
| 597 | 1.3.23 2005-10-18 |
| 598 | * Changed default args for load_policy to be null, as it no longer |
| 599 | takes a pathname argument and we want to preserve booleans. |
| 600 | |
| 601 | 1.3.22 2005-10-18 |
| 602 | * Merged move local dbase initialization patch from Ivan Gyurdiev. |
| 603 | * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. |
| 604 | * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. |
| 605 | |
| 606 | 1.3.21 2005-10-18 |
| 607 | * Added calls to sepol_policy_file_set_handle interface prior |
| 608 | to invoking sepol operations on policy files. |
| 609 | * Updated call to sepol_policydb_from_image to pass the handle. |
| 610 | |
| 611 | 1.3.20 2005-10-17 |
| 612 | * Merged user and port APIs - policy database patch from Ivan |
| 613 | Gyurdiev. |
| 614 | |
| 615 | 1.3.19 2005-10-17 |
| 616 | * Converted calls to sepol link_packages and expand_module interfaces |
| 617 | from using buffers to using sepol handles for error reporting, and |
| 618 | changed direct_connect/disconnect to create/destroy sepol handles. |
| 619 | |
| 620 | 1.3.18 2005-10-14 |
| 621 | * Merged bugfix patch from Ivan Gyurdiev. |
| 622 | |
| 623 | 1.3.17 2005-10-14 |
| 624 | * Merged seuser database patch from Ivan Gyurdiev. |
| 625 | Merged direct user/port databases to the handle from Ivan Gyurdiev. |
| 626 | |
| 627 | 1.3.16 2005-10-14 |
| 628 | * Removed obsolete include/semanage/commit_api.h (leftover). |
| 629 | Merged seuser record patch from Ivan Gyurdiev. |
| 630 | |
| 631 | 1.3.15 2005-10-14 |
| 632 | * Merged boolean and interface databases from Ivan Gyurdiev. |
| 633 | |
| 634 | 1.3.14 2005-10-13 |
| 635 | * Updated to use get interfaces for hidden sepol_module_package type. |
| 636 | |
| 637 | 1.3.13 2005-10-13 |
| 638 | * Changed semanage_expand_sandbox and semanage_install_active |
| 639 | to generate/install the latest policy version supported by libsepol |
| 640 | by default (unless overridden by semanage.conf), since libselinux |
| 641 | will now downgrade automatically for load_policy. |
| 642 | |
| 643 | 1.3.12 2005-10-13 |
| 644 | * Merged new callback-based error reporting system and ongoing |
| 645 | database work from Ivan Gyurdiev. |
| 646 | |
| 647 | 1.3.11 2005-10-11 |
| 648 | * Fixed semanage_install_active() to use the same logic for |
| 649 | selecting a policy version as semanage_expand_sandbox(). Dropped |
| 650 | dead code from semanage_install_sandbox(). |
| 651 | |
| 652 | 1.3.10 2005-10-07 |
| 653 | * Updated for changes to libsepol, and to only use types and interfaces |
| 654 | provided by the shared libsepol. |
| 655 | |
| 656 | 1.3.9 2005-10-06 |
| 657 | * Merged further database work from Ivan Gyurdiev. |
| 658 | |
| 659 | 1.3.8 2005-10-04 |
| 660 | * Merged iterate, redistribute, and dbase split patches from |
| 661 | Ivan Gyurdiev. |
| 662 | |
| 663 | 1.3.7 2005-09-30 |
| 664 | * Merged patch series from Ivan Gyurdiev. |
| 665 | (pointer typedef elimination, file renames, dbase work, backend |
| 666 | separation) |
| 667 | |
| 668 | 1.3.6 2005-09-28 |
| 669 | * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. |
| 670 | * Separated handle create from connect interface. |
| 671 | * Added a constructor for initialization. |
| 672 | * Moved up src/include/*.h to src. |
| 673 | * Created a symbol map file; dropped dso.h and hidden markings. |
| 674 | |
| 675 | 1.3.5 2005-09-28 |
| 676 | * Merged major update to libsemanage organization and functionality |
| 677 | from Karl MacMillan (Tresys). |
| 678 | |
| 679 | 1.3.4 2005-09-23 |
| 680 | * Merged dbase redesign patch from Ivan Gyurdiev. |
| 681 | |
| 682 | 1.3.3 2005-09-21 |
| 683 | * Merged boolean record, stub record handler, and status codes |
| 684 | patches from Ivan Gyurdiev. |
| 685 | |
| 686 | 1.3.2 2005-09-16 |
| 687 | * Merged stub iterator functionality from Ivan Gyurdiev. |
| 688 | * Merged interface record patch from Ivan Gyurdiev. |
| 689 | |
| 690 | 1.3.1 2005-09-14 |
| 691 | * Merged stub functionality for managing user and port records, |
| 692 | and record table code from Ivan Gyurdiev. |
| 693 | |
| 694 | 1.2 2005-09-06 |
| 695 | * Updated version for release. |
| 696 | |
| 697 | 1.1.6 2005-08-31 |
| 698 | * Merged semod.conf template patch from Dan Walsh (Red Hat), |
| 699 | but restored location to /usr/share/semod/semod.conf. |
| 700 | |
| 701 | 1.1.5 2005-08-30 |
| 702 | * Fixed several bugs found by valgrind. |
| 703 | * Fixed bug in prior patch for the semod_build_module_list leak. |
| 704 | |
| 705 | 1.1.4 2005-08-25 |
| 706 | * Merged errno fix from Joshua Brindle (Tresys). |
| 707 | * Merged fix for semod_build_modules_list leak on error path |
| 708 | from Serge Hallyn (IBM). Bug found by Coverity. |
| 709 | |
| 710 | 1.1.3 2005-08-22 |
| 711 | * Merged several fixes from Serge Hallyn (IBM). Bugs found by |
| 712 | Coverity. |
| 713 | * Fixed several other bugs and warnings. |
| 714 | |
| 715 | 1.1.2 2005-08-02 |
| 716 | * Merged patch to move module read/write code from libsemanage |
| 717 | to libsepol from Jason Tang (Tresys). |
| 718 | |
| 719 | 1.1.1 2005-08-02 |
| 720 | * Merged relay records patch from Ivan Gyurdiev. |
| 721 | * Merged key extract patch from Ivan Gyurdiev. |
| 722 | |
| 723 | 1.0 2005-07-27 |
| 724 | * Initial version. |