diff --git a/libsepol-fedora.patch b/libsepol-fedora.patch index ca4ba1c..ec6391c 100644 --- a/libsepol-fedora.patch +++ b/libsepol-fedora.patch @@ -464,7 +464,7 @@ index 619a48f..15b58a7 100644 uint16_t low; diff --git libsepol-2.7/src/policydb.c libsepol-2.7/src/policydb.c -index 691101e..37788f3 100644 +index 691101e..c752123 100644 --- libsepol-2.7/src/policydb.c +++ libsepol-2.7/src/policydb.c @@ -1,5 +1,5 @@ @@ -474,6 +474,15 @@ index 691101e..37788f3 100644 /* * Updated: Trusted Computer Solutions, Inc. +@@ -1420,6 +1420,8 @@ void ocontext_selinux_free(ocontext_t **ocontexts) + if (i == OCON_ISID || i == OCON_FS || i == OCON_NETIF + || i == OCON_FSUSE) + free(ctmp->u.name); ++ else if (i == OCON_IBENDPORT) ++ free(ctmp->u.ibendport.dev_name); + free(ctmp); + } + } diff --git libsepol-2.7/src/services.c libsepol-2.7/src/services.c index 10338a6..d40793e 100644 --- libsepol-2.7/src/services.c diff --git a/libsepol.spec b/libsepol.spec index 030c297..1fb7970 100644 --- a/libsepol.spec +++ b/libsepol.spec @@ -1,14 +1,14 @@ Summary: SELinux binary policy manipulation library Name: libsepol Version: 2.7 -Release: 2%{?dist} +Release: 3%{?dist} License: LGPLv2+ Group: System Environment/Libraries Source: https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/libsepol-2.7.tar.gz # download https://raw.githubusercontent.com/fedora-selinux/scripts/master/selinux/make-fedora-selinux-patch.sh # run: # $ VERSION=2.7 ./make-fedora-selinux-patch.sh libsepol -# HEAD https://github.com/fedora-selinux/selinux/commit/4247fad665261169b430895f0ab10f56eb33dd10 +# HEAD https://github.com/fedora-selinux/selinux/commit/2d0b90c1d95ec908f94c06337ec07a96b7d1205e Patch1: libsepol-fedora.patch URL: https://github.com/SELinuxProject/selinux/wiki BuildRequires: flex @@ -106,6 +106,9 @@ exit 0 %{_libdir}/libsepol.so.1 %changelog +* Wed Nov 22 2017 Petr Lautrbach - 2.7-3 +- free ibendport device names + * Fri Oct 20 2017 Petr Lautrbach - 2.7-2 - reset pointer after free in cil_strpool_destroy() - cil: Add ability to redeclare types[attributes]