|
cvsdist |
88c9ead |
Summary: SELinux binary policy manipulation library
|
|
cvsdist |
88c9ead |
Name: libsepol
|
|
|
36260cb |
Version: 1.7.17
|
|
|
c1a5ce0 |
Release: 1
|
|
cvsdist |
88c9ead |
License: GPL
|
|
cvsdist |
88c9ead |
Group: System Environment/Libraries
|
|
cvsdist |
88c9ead |
Source: http://www.nsa.gov/selinux/archives/libsepol-%{version}.tgz
|
|
|
bfb8873 |
|
|
cvsdist |
88c9ead |
Prefix: %{_prefix}
|
|
cvsdist |
88c9ead |
BuildRoot: %{_tmppath}/%{name}-buildroot
|
|
cvsdist |
88c9ead |
Provides: libsepol.so
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%description
|
|
cvsdist |
88c9ead |
Security-enhanced Linux is a patch of the Linux® kernel and a number
|
|
cvsdist |
88c9ead |
of utilities with enhanced security functionality designed to add
|
|
cvsdist |
88c9ead |
mandatory access controls to Linux. The Security-enhanced Linux
|
|
cvsdist |
88c9ead |
kernel contains new architectural components originally developed to
|
|
cvsdist |
88c9ead |
improve the security of the Flask operating system. These
|
|
cvsdist |
88c9ead |
architectural components provide general support for the enforcement
|
|
cvsdist |
88c9ead |
of many kinds of mandatory access control policies, including those
|
|
cvsdist |
88c9ead |
based on the concepts of Type Enforcement®, Role-based Access
|
|
cvsdist |
88c9ead |
Control, and Multi-level Security.
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
libsepol provides an API for the manipulation of SELinux binary policies.
|
|
cvsdist |
88c9ead |
It is used by checkpolicy (the policy compiler) and similar tools, as well
|
|
cvsdist |
88c9ead |
as by programs like load_policy that need to perform specific transformations
|
|
cvsdist |
88c9ead |
on binary policies such as customizing policy boolean settings.
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%package devel
|
|
cvsdist |
88c9ead |
Summary: Header files and libraries used to build policy manipulation tools
|
|
cvsdist |
88c9ead |
Group: Development/Libraries
|
|
cvsdist |
88c9ead |
Requires: libsepol = %{version}
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%description devel
|
|
cvsdist |
88c9ead |
The sepol-devel package contains the static libraries and header files
|
|
cvsdist |
88c9ead |
needed for developing applications that manipulate binary policies.
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%prep
|
|
cvsdist |
88c9ead |
%setup -q
|
|
|
07cf4bd |
|
|
cvsdist |
88c9ead |
%build
|
|
cvsdist |
3c07940 |
make CFLAGS="%{optflags}"
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%install
|
|
cvsdist |
88c9ead |
rm -rf ${RPM_BUILD_ROOT}
|
|
cvsdist |
88c9ead |
mkdir -p ${RPM_BUILD_ROOT}/%{_lib}
|
|
cvsdist |
88c9ead |
mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}
|
|
cvsdist |
88c9ead |
mkdir -p ${RPM_BUILD_ROOT}%{_includedir}
|
|
cvsdist |
5ad5404 |
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
|
|
cvsdist |
5ad5404 |
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man3
|
|
cvsdist |
5ad5404 |
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
cvsdist |
88c9ead |
make DESTDIR="${RPM_BUILD_ROOT}" LIBDIR="${RPM_BUILD_ROOT}%{_libdir}" SHLIBDIR="${RPM_BUILD_ROOT}/%{_lib}" install
|
|
|
57d97af |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolbools
|
|
|
57d97af |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/genpolusers
|
|
|
57d97af |
rm -f ${RPM_BUILD_ROOT}%{_bindir}/chkcon
|
|
|
414ccee |
rm -rf ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
cvsdist |
88c9ead |
%clean
|
|
cvsdist |
88c9ead |
rm -rf ${RPM_BUILD_ROOT}
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
a25ddb6 |
%post -p /sbin/ldconfig
|
|
cvsdist |
a25ddb6 |
|
|
cvsdist |
a25ddb6 |
%postun -p /sbin/ldconfig
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%files devel
|
|
cvsdist |
88c9ead |
%defattr(-,root,root)
|
|
cvsdist |
88c9ead |
%{_libdir}/libsepol.a
|
|
cvsdist |
88c9ead |
%{_libdir}/libsepol.so
|
|
cvsdist |
88c9ead |
%{_includedir}/sepol/*.h
|
|
cvsdist |
5ad5404 |
%{_mandir}/man3/*.3.gz
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%files
|
|
cvsdist |
88c9ead |
%defattr(-,root,root)
|
|
cvsdist |
88c9ead |
/%{_lib}/libsepol.so.1
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
%changelog
|
|
|
36260cb |
* Mon Aug 15 2005 Dan Walsh <dwalsh@redhat.com> 1.7.17-1
|
|
|
36260cb |
- Upgrade to latest from NSA
|
|
|
36260cb |
* Fixed several memory leaks found by valgrind.
|
|
|
36260cb |
|
|
|
56a2b4d |
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.15-1
|
|
|
56a2b4d |
- Upgrade to latest from NSA
|
|
|
56a2b4d |
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
56a2b4d |
Coverity, reported by Serge Hallyn (IBM).
|
|
|
56a2b4d |
* Merged patch to policydb_write to check errors
|
|
|
56a2b4d |
when writing the type->attribute reverse map from
|
|
|
56a2b4d |
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
56a2b4d |
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
56a2b4d |
or attr_type_map.
|
|
|
56a2b4d |
|
|
|
a0ffdcf |
* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 1.7.14-1
|
|
|
a0ffdcf |
- Upgrade to latest from NSA
|
|
|
a0ffdcf |
* Fixed empty list test in cond_write_av_list. Bug found by
|
|
|
a0ffdcf |
Coverity, reported by Serge Hallyn (IBM).
|
|
|
a0ffdcf |
* Merged patch to policydb_write to check errors
|
|
|
a0ffdcf |
when writing the type->attribute reverse map from
|
|
|
a0ffdcf |
Serge Hallyn (IBM). Bug found by Coverity.
|
|
|
a0ffdcf |
* Fixed policydb_destroy to properly handle NULL type_attr_map
|
|
|
a0ffdcf |
or attr_type_map.
|
|
|
a0ffdcf |
|
|
|
a0ffdcf |
|
|
|
9aea386 |
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.13-1
|
|
|
9aea386 |
- Upgrade to latest from NSA
|
|
|
9aea386 |
* Improved memory use by SELinux by both reducing the avtab
|
|
|
9aea386 |
node size and reducing the number of avtab nodes (by not
|
|
|
9aea386 |
expanding attributes in TE rules when possible). Added
|
|
|
9aea386 |
expand_avtab and expand_cond_av_list functions for use by
|
|
|
9aea386 |
assertion checker, hierarchy checker, compatibility code,
|
|
|
9aea386 |
and dispol. Added new inline ebitmap operators and converted
|
|
|
9aea386 |
existing users of ebitmaps to the new operators for greater
|
|
|
9aea386 |
efficiency.
|
|
|
9aea386 |
Note: The binary policy format version has been incremented to
|
|
|
9aea386 |
version 20 as a result of these changes.
|
|
|
9aea386 |
|
|
|
25190ca |
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.7.12-1
|
|
|
25190ca |
- Upgrade to latest from NSA
|
|
|
25190ca |
* Fixed bug in constraint_node_clone handling of name sets.
|
|
|
25190ca |
|
|
|
71a4369 |
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.7.11-1
|
|
|
71a4369 |
- Upgrade to latest from NSA
|
|
|
71a4369 |
* Fix range_trans_clone to map the type values properly.
|
|
|
71a4369 |
|
|
|
afa262c |
* Fri Aug 5 2005 Dan Walsh <dwalsh@redhat.com> 1.7.10-1
|
|
|
afa262c |
- Upgrade to latest from NSA
|
|
|
afa262c |
* Merged patch to move module read/write code from libsemanage
|
|
|
afa262c |
to libsepol from Jason Tang (Tresys).
|
|
|
afa262c |
|
|
|
c1a5ce0 |
* Tue Aug 2 2005 Dan Walsh <dwalsh@redhat.com> 1.7.9-1
|
|
|
c1a5ce0 |
- Upgrade to latest from NSA
|
|
|
c1a5ce0 |
* Enabled further compiler warning flags and fixed them.
|
|
|
c1a5ce0 |
* Merged user, context, port records patch from Ivan Gyurdiev.
|
|
|
c1a5ce0 |
* Merged key extract function patch from Ivan Gyurdiev.
|
|
|
c1a5ce0 |
* Merged mls_context_to_sid bugfix from Ivan Gyurdiev.
|
|
|
c1a5ce0 |
|
|
|
bfb8873 |
* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-2
|
|
|
bfb8873 |
- Fix MLS Free
|
|
|
bfb8873 |
|
|
|
b0f7b63 |
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.6-1
|
|
|
b0f7b63 |
- Upgrade to latest from NSA
|
|
|
b0f7b63 |
* Merged context reorganization, memory leak fixes,
|
|
|
b0f7b63 |
port and interface loading, replacements for genusers and
|
|
|
b0f7b63 |
genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
|
|
|
b0f7b63 |
* Merged uninitialized variable bugfix from Dan Walsh.
|
|
|
b0f7b63 |
|
|
|
5242278 |
* Mon Jul 25 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-2
|
|
|
5242278 |
- Fix unitialized variable problem
|
|
|
5242278 |
|
|
|
22cadfa |
* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.7.5-1
|
|
|
22cadfa |
- Upgrade to latest from NSA
|
|
|
22cadfa |
* Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
|
|
|
22cadfa |
* Removed genpolbools and genpolusers utilities.
|
|
|
22cadfa |
* Merged hierarchy check fix from Joshua Brindle (Tresys).
|
|
|
22cadfa |
|
|
|
22cadfa |
|
|
|
22cadfa |
|
|
|
4e37e11 |
* Thu Jul 14 2005 Dan Walsh <dwalsh@redhat.com> 1.7.3-1
|
|
|
4e37e11 |
- Upgrade to latest from NSA
|
|
|
4e37e11 |
* Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
|
|
|
4e37e11 |
* Merged genbools debugging message cleanup from Red Hat.
|
|
|
4e37e11 |
|
|
|
57d97af |
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-2
|
|
|
57d97af |
- Remove genpolbools and genpoluser
|
|
|
57d97af |
|
|
|
27c3880 |
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.7-1
|
|
|
27c3880 |
- Upgrade to latest from NSA
|
|
|
27c3880 |
* Merged loadable module support from Tresys Technology.
|
|
|
27c3880 |
|
|
|
3433537 |
* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.6-1
|
|
|
3433537 |
- Upgrade to latest from NSA
|
|
|
3433537 |
* Updated version for release.
|
|
|
3433537 |
|
|
|
07cf4bd |
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.10-1
|
|
|
07cf4bd |
- Fix reset booleans warning message
|
|
|
07cf4bd |
- Upgrade to latest from NSA
|
|
|
07cf4bd |
* License changed to LGPL v2.1, see COPYING.
|
|
|
07cf4bd |
|
|
|
7d8931a |
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.9-2
|
|
|
bf612b3 |
- Upgrade to latest from NSA
|
|
|
bf612b3 |
* Added sepol_genbools_policydb and sepol_genusers_policydb for
|
|
|
bf612b3 |
audit2why.
|
|
|
bf612b3 |
|
|
|
5d7a0aa |
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-2
|
|
|
5d7a0aa |
- export sepol_context_to_sid
|
|
|
5d7a0aa |
|
|
|
e043783 |
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-1
|
|
|
e043783 |
- Upgrade to latest from NSA
|
|
|
e043783 |
* Added sepol_ prefix to Flask types to avoid
|
|
|
e043783 |
namespace collision with libselinux.
|
|
|
e043783 |
|
|
|
e043783 |
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.5.7-1
|
|
|
90feaaf |
- Upgrade to latest from NSA
|
|
|
90feaaf |
* Added sepol_compute_av_reason() for audit2why.
|
|
|
90feaaf |
|
|
|
c4ff628 |
* Tue Apr 26 2005 Dan Walsh <dwalsh@redhat.com> 1.5.6-1
|
|
|
c4ff628 |
- Upgrade to latest from NSA
|
|
|
c4ff628 |
* Fixed bug in role hierarchy checker.
|
|
|
c4ff628 |
|
|
|
57d5dcc |
* Mon Apr 25 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-2
|
|
|
57d5dcc |
- Fixes found via intel compiler
|
|
|
57d5dcc |
|
|
|
fa4ea37 |
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-1
|
|
|
fa4ea37 |
- Update from NSA
|
|
|
fa4ea37 |
|
|
|
30eb218 |
* Tue Mar 29 2005 Dan Walsh <dwalsh@redhat.com> 1.5.3-1
|
|
|
30eb218 |
- Update from NSA
|
|
|
30eb218 |
|
|
|
041a966 |
* Thu Mar 24 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-2
|
|
|
041a966 |
- Handle booleans.local
|
|
|
041a966 |
|
|
|
b85e342 |
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-1
|
|
|
406a403 |
- Update to latest from NSA
|
|
|
b85e342 |
* Added man page for sepol_check_context.
|
|
|
406a403 |
* Added man page for sepol_genusers function.
|
|
|
406a403 |
* Merged man pages for genpolusers and chkcon from Manoj Srivastava.
|
|
|
406a403 |
|
|
|
6d972dd |
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
|
6d972dd |
- Update to latest from NSA
|
|
|
6d972dd |
|
|
|
bc67d33 |
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.3.8-1
|
|
|
bc67d33 |
- Update to latest from NSA
|
|
|
bc67d33 |
* Cleaned up error handling in sepol_genusers and sepol_genbools.
|
|
|
bc67d33 |
|
|
|
9e487d2 |
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.3.7-1
|
|
|
9e487d2 |
- Update to latest from NSA
|
|
|
9e487d2 |
* Merged sepol_debug and fclose patch from Dan Walsh.
|
|
|
9e487d2 |
|
|
|
9b7e5fe |
* Fri Feb 18 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-3
|
|
|
9b7e5fe |
- Make sure local_files file pointer is closed
|
|
|
2014478 |
- Stop outputing error messages
|
|
|
2014478 |
|
|
|
d6aaae0 |
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-1
|
|
|
d6aaae0 |
- Update to latest from NSA
|
|
|
d6aaae0 |
* Changed sepol_genusers to also use getline and correctly handle
|
|
|
d6aaae0 |
EOL.
|
|
|
d6aaae0 |
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.5-1
|
|
|
91a26c1 |
- Update to latest from NSA
|
|
|
7ed3ff5 |
* Merged endianness and compute_av patches from Darrel Goeddel (TCS).
|
|
|
91a26c1 |
* Merged range_transition support from Darrel Goeddel (TCS).
|
|
|
91a26c1 |
* Added sepol_genusers function.
|
|
|
7ed3ff5 |
|
|
|
d6aaae0 |
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.3.2-1
|
|
|
7ed3ff5 |
- Update to latest from NSA
|
|
|
7ed3ff5 |
* Changed relabel Makefile target to use restorecon.
|
|
|
7ed3ff5 |
|
|
|
d6aaae0 |
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.3.1-1
|
|
|
7ed3ff5 |
- Update to latest from NSA
|
|
|
7ed3ff5 |
* Merged enhanced MLS support from Darrel Goeddel (TCS).
|
|
|
7ed3ff5 |
|
|
|
d6aaae0 |
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.2.1.1-1
|
|
|
5a4e5b4 |
- Update to latest from NSA
|
|
|
5a4e5b4 |
* Merged build fix patch from Manoj Srivastava.
|
|
|
5a4e5b4 |
|
|
|
d6aaae0 |
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-1
|
|
|
90d964f |
- Update to latest from NSA
|
|
|
90d964f |
|
|
|
d6aaae0 |
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-2
|
|
cvsdist |
3c07940 |
- Add optargs for build
|
|
cvsdist |
3c07940 |
|
|
|
d6aaae0 |
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-1
|
|
cvsdist |
d9547a8 |
- New version from NSA
|
|
cvsdist |
d9547a8 |
|
|
cvsdist |
d08e6b4 |
* Fri Aug 20 2004 Colin Walters <walters@redhat.com> 1.0-2
|
|
cvsdist |
d08e6b4 |
- Apply Stephen's chkcon patch
|
|
cvsdist |
d08e6b4 |
|
|
cvsdist |
5b1b5b6 |
* Thu Aug 19 2004 Colin Walters <walters@redhat.com> 1.0-1
|
|
cvsdist |
5b1b5b6 |
- New upstream version
|
|
cvsdist |
5b1b5b6 |
|
|
|
d6aaae0 |
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 0.4.2-1
|
|
cvsdist |
3e7fdd1 |
- Newversion from upstream implementing stringcase compare
|
|
cvsdist |
3e7fdd1 |
|
|
cvsdist |
a25ddb6 |
* Fri Aug 13 2004 Bill Nottingham <notting@redhat.com> 0.4.1-2
|
|
cvsdist |
a25ddb6 |
- ldconfig tweaks
|
|
cvsdist |
88c9ead |
|
|
|
d6aaae0 |
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
cvsdist |
3e7fdd1 |
- Ignore case of true/false
|
|
cvsdist |
3e7fdd1 |
|
|
|
d6aaae0 |
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
cvsdist |
5ad5404 |
- New version from NSA
|
|
cvsdist |
5ad5404 |
|
|
|
d6aaae0 |
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 0.3.1-1
|
|
cvsdist |
88c9ead |
- Initial version
|
|
cvsdist |
88c9ead |
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
cvsdist |
88c9ead |
|
|
cvsdist |
88c9ead |
|