%define libauditver 1.1.4-3

%define libsepolver 1.12.14-1

%define libsemanagever 1.6.5-1

%define libselinuxver 1.30.11-1

Summary: SELinux policy core utilities.

Name: policycoreutils

Version: 1.30.11

Release: 1

License: GPL

Group: System Environment/Base

Source: http://www.nsa.gov/selinux/archives/policycoreutils-%{version}.tgz

Patch: policycoreutils-rhat.patch

BuildRequires: pam-devel libsepol-devel >= %{libsepolver} libsemanage-devel >= %{libsemanagever} libselinux-devel >= %{libselinuxver}  libcap-devel audit-libs-devel

Requires: /bin/mount /bin/egrep /bin/awk /usr/bin/diff

Requires: libsepol >= %{libsepolver} libsemanage >= %{libsemanagever} libselinux-python coreutils audit-libs-python >=  %{libauditver} rhpl

Requires(post): /sbin/service

BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

%description

Security-enhanced Linux is a feature of the Linux® kernel and a number

of utilities with enhanced security functionality designed to add

mandatory access controls to Linux.  The Security-enhanced Linux

kernel contains new architectural components originally developed to

improve the security of the Flask operating system. These

architectural components provide general support for the enforcement

of many kinds of mandatory access control policies, including those

based on the concepts of Type Enforcement®, Role-based Access

Control, and Multi-level Security.

policycoreutils contains the policy core utilities that are required

for basic operation of a SELinux system.  These utilities include

load_policy to load policies, setfiles to label filesystems, newrole

to switch roles, and run_init to run /etc/init.d scripts in the proper

context.

%prep

%setup -q

%patch -p1 -b .rhat

%build

make LOG_AUDIT_PRIV=y LIBDIR="%{_libdir}" CFLAGS="%{optflags}" all 

%install

rm -rf %{buildroot}

mkdir -p %{buildroot}/etc/rc.d/init.d

mkdir -p %{buildroot}%{_bindir}

mkdir -p %{buildroot}%{_sbindir}

mkdir -p %{buildroot}/sbin

mkdir -p %{buildroot}%{_mandir}/man1

mkdir -p %{buildroot}%{_mandir}/man8

mkdir -p %{buildroot}%{_sysconfdir}/pam.d

make LOG_AUDIT_PRIV=y  DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" install

%find_lang %{name}

%clean

rm -rf %{buildroot}

%files -f %{name}.lang

%defattr(-,root,root)

/sbin/restorecon

/sbin/fixfiles

/sbin/setfiles

%{_sbindir}/restorecond

%{_sbindir}/setsebool

%{_sbindir}/semodule

%{_sbindir}/semanage

%{_sbindir}/load_policy

%{_sbindir}/audit2why

%{_sbindir}/genhomedircon

%{_sbindir}/sestatus

%{_sbindir}/run_init

%{_sbindir}/open_init_pty

%{_bindir}/newrole

%{_bindir}/audit2allow

%{_bindir}/chcat

%{_bindir}/secon

%{_bindir}/semodule_expand

%{_bindir}/semodule_link

%{_bindir}/semodule_package

%{_mandir}/man8/chcat.8.gz

%{_mandir}/man8/restorecond.8.gz

%{_mandir}/man8/restorecon.8.gz

%{_mandir}/man8/sestatus.8.gz

%{_mandir}/man8/semanage.8.gz

%{_mandir}/man8/semodule.8.gz

%{_mandir}/man8/semodule_link.8.gz

%{_mandir}/man8/semodule_package.8.gz

%{_mandir}/man8/semodule_expand.8.gz

%{_mandir}/man8/setfiles.8.gz

%{_mandir}/man8/fixfiles.8.gz

%{_mandir}/man8/load_policy.8.gz

%{_mandir}/man8/audit2why.8.gz

%{_mandir}/man8/genhomedircon.8.gz

%{_mandir}/man8/open_init_pty.8.gz

%{_mandir}/man8/setsebool.8.gz

%{_mandir}/man8/run_init.8.gz

%{_mandir}/man1/audit2allow.1.gz

%{_mandir}/man1/newrole.1.gz

%config %{_sysconfdir}/pam.d/newrole

%config %{_sysconfdir}/pam.d/run_init

%config(noreplace) %{_sysconfdir}/sestatus.conf

%{_libdir}/python2.4/site-packages/seobject.py*

%{_libdir}/python2.4/site-packages/avc.py*

%attr(755,root,root) /etc/rc.d/init.d/restorecond

%config(noreplace) /etc/selinux/restorecond.conf

%post

[ -x /sbin/service ] && /sbin/service restorecond condrestart

%changelog

* Tue May 30 2006 Dan Walsh <dwalsh@redhat.com> 1.30.11-1

- Update to upstream

	* Merged more translations from Dan Walsh.

	* Merged patch to relocate setfiles to /sbin for early relabel

	  when /usr might not be mounted from Dan Walsh.

	* Merged semanage/seobject patch to preserve fcontext ordering in list.

	* Merged secon patch from James Antill.

* Fri May 26 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-4

- Fix seobject.py to not sort the file_context file.

- move setfiles to /sbin

* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-3

- secon man page and getopt fixes.

- Enable mass relabel audit, even though it doesn't work.

* Wed May 24 2006 James Antill <jantill@redhat.com> 1.30.10-2

- secon fixes for --self-exec etc.

- secon change from level => sensitivity, add clearance.

- Add mass relabel AUDIT patch, but disable it until kernel problem solved.

* Tue May 24 2006 Dan Walsh <dwalsh@redhat.com> 1.30.10-1

- Update to upstream

	* Merged patch with updates to audit2allow, secon, genhomedircon,

	  and semanage from Dan Walsh.

* Sat May 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-4

- Fix exception in genhomedircon

* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-3

- Add rhpl dependancy

* Mon May 15 2006 James Antill <jantill@redhat.com> 1.30.9-2

- Add secon man page and prompt options.

* Mon May 15 2006 Dan Walsh <dwalsh@redhat.com> 1.30.9-1

- Update to upstream

	* Fixed audit2allow and po Makefiles for DESTDIR= builds.

	* Merged .po file patch from Dan Walsh.

	* Merged bug fix for genhomedircon.

* Wed May 10 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-2

- Fix exception on bad file_context

* Mon May 8 2006 Dan Walsh <dwalsh@redhat.com> 1.30.8-1

- Update to upstream

	* Merged fix warnings patch from Karl MacMillan.

	* Merged patch from Dan Walsh.

	  This includes audit2allow changes for analysis plugins,

	  internationalization support for several additional programs 

	  and added po files, some fixes for semanage, and several cleanups.

	  It also adds a new secon utility.

* Sun May 7 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-5

- Fix genhomedircon to catch duplicate homedir problem

* Thu May 4 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-4

- Add secon program

- Add translations

* Thu Apr 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-3

- Fix check for "msg"

* Mon Apr 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-2

- Ship avc.py

* Fri Apr 14 2006 Dan Walsh <dwalsh@redhat.com> 1.30.6-1

- Add /etc/samba/secrets.tdb to restorecond.conf

- Update from upstream

	* Merged semanage prefix support from Russell Coker.

	* Added a test to setfiles to check that the spec file is

	  a regular file.

* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-4

- added some missing buildrequires

- added Requires: initscripts for /sbin/service

* Thu Apr 06 2006 Karsten Hopp <karsten@redhat.de> 1.30.4-3

- use absolute path /sbin/service

* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-2

- Fix audit2allow to not require ausearch.

- Fix man page

- Add libflashplayer to restorecond.conf

* Wed Mar 29 2006 Dan Walsh <dwalsh@redhat.com> 1.30.4-1

- Update from upstream

	* Merged audit2allow fixes for refpolicy from Dan Walsh.

	* Merged fixfiles patch from Dan Walsh.

	* Merged restorecond daemon from Dan Walsh.

	* Merged semanage non-MLS fixes from Chris PeBenito.

	* Merged semanage and semodule man page examples from Thomas Bleher.

* Tue Mar 28 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-4

- Clean up reference policy generation in audit2allow

* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-3

- Add IN_MOVED_TO to catch renames

* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-2

- make restorecond only ignore non directories with lnk > 1

* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30.1-1

- Make audit2allow translate dontaudit as well as allow rules

- Update from upstream

	* Merged semanage labeling prefix patch from Ivan Gyurdiev.

* Tue Mar 21 2006 Dan Walsh <dwalsh@redhat.com> 1.30-5

- Fix audit2allow to retrieve dontaudit rules

* Mon Mar 20 2006 Dan Walsh <dwalsh@redhat.com> 1.30-4

- Open file descriptor to make sure file does not change from underneath.

* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-3

- Fixes for restorecond attack via symlinks

- Fixes for fixfiles

* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-2

- Restorecon has to handle suspend/resume

* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> 1.30-1

- Update to upstream

* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.27-1

- Add restorecond

* Fri Mar 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-6

- Remove prereq

* Mon Mar 6 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-5

- Fix audit2allow to generate all rules

* Fri Mar 3 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-4

- Minor fixes to chcat and semanage

* Sat Feb 24 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-3

- Add missing setsebool man page

* Thu Feb 23 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-2

- Change audit2allow to use devel instead of refpolicy

* Mon Feb 20 2006 Dan Walsh <dwalsh@redhat.com> 1.29.26-1

- Update from upstream

	* Merged semanage bug fix patch from Ivan Gyurdiev.

	* Merged improve bindings patch from Ivan Gyurdiev.

	* Merged semanage usage patch from Ivan Gyurdiev.

	* Merged use PyList patch from Ivan Gyurdiev.

* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.23-1

- Update from upstream

	* Merged newrole -V/--version support from Glauber de Oliveira Costa.

	* Merged genhomedircon prefix patch from Dan Walsh.

	* Merged optionals in base patch from Joshua Brindle.

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.20-2.1

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-2

- Fix auditing to semanage

- Change genhomedircon to use new prefix interface in libselinux

* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.20-1

- Update from upstream

	* Merged seuser/user_extra support patch to semodule_package 

	  from Joshua Brindle.

	* Merged getopt type fix for semodule_link/expand and sestatus

	  from Chris PeBenito.

- Fix genhomedircon output

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.29.18-2.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Fri Feb 3 2006 Dan Walsh <dwalsh@redhat.com> 1.29.18-2

- Add auditing to semanage

* Thu Feb 2 2006 Dan Walsh <dwalsh@redhat.com> 1.29.18-1

- Update from upstream

	* Merged clone record on set_con patch from Ivan Gyurdiev.

* Mon Jan 30 2006 Dan Walsh <dwalsh@redhat.com> 1.29.17-1

- Update from upstream

	* Merged genhomedircon fix from Dan Walsh.

	* Merged seusers.system patch from Ivan Gyurdiev.

	* Merged improve port/fcontext API patch from Ivan Gyurdiev.

	* Merged genhomedircon patch from Dan Walsh.

* Fri Jan 27 2006 Dan Walsh <dwalsh@redhat.com> 1.29.15-1

- Update from upstream

	* Merged newrole audit patch from Steve Grubb.

	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.

	* Merged semanage and semodule access check patches from Joshua Brindle.

* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.12-1

- Add a default of /export/home

* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-3

- Cleanup of the patch

* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-2

- Correct handling of symbolic links in restorecon

* Wed Jan 25 2006 Dan Walsh <dwalsh@redhat.com> 1.29.11-1

- Added translation support to semanage

- Update from upstream

	* Modified newrole and run_init to use the loginuid when

	  supported to obtain the Linux user identity to re-authenticate,

	  and to fall back to real uid.  Dropped the use of the SELinux

	  user identity, as Linux users are now mapped to SELinux users

	  via seusers and the SELinux user identity space is separate.

	* Merged semanage bug fixes from Ivan Gyurdiev.

	* Merged semanage fixes from Russell Coker.

	* Merged chcat.8 and genhomedircon patches from Dan Walsh.

* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.9-2

- Fix genhomedircon to work on MLS policy

* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.9-1

- Update to match NSA

	* Merged chcat, semanage, and setsebool patches from Dan Walsh.

* Thu Jan 19 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-4

- Fixes for "add"-"modify" error messages

- Fixes for chcat

* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-3

- Add management of translation file to semaange and seobject

* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-2

- Fix chcat -l -L to work while not root

* Wed Jan 18 2006 Dan Walsh <dwalsh@redhat.com> 1.29.8-1

- Update to match NSA

	* Merged semanage fixes from Ivan Gyurdiev.

	* Merged semanage fixes from Russell Coker.

	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.

* Tue Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-4

- Update chcat to manage user categories also

* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-3

- Add check for root for semanage, genhomedircon 

* Sat Jan 14 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-2

- Add ivans patch

* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.29.7-1

- Update to match NSA

	* Merged newrole cleanup patch from Steve Grubb.

	* Merged setfiles/restorecon performance patch from Russell Coker.

	* Merged genhomedircon and semanage patches from Dan Walsh.

	* Merged remove add_local/set_local patch from Ivan Gyurdiev.

* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-3

- Fixes for mls policy

* Tue Jan 10 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-2

- Update semanage and split out seobject

- Fix labeleing of home_root

* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.29.5-1

- Update to match NSA

	* Added filename to semodule error reporting.

* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.29.4-1

- Update to match NSA

	* Merged genhomedircon and semanage patch from Dan Walsh.

	* Changed semodule error reporting to include argv[0].

* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.29.3-1

- Update to match NSA

	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).

	* Merged patch series from Ivan Gyurdiev.

	  This includes patches to:

	  - cleanup setsebool

	  - update setsebool to apply active booleans through libsemanage

	  - update semodule to use the new semanage_set_rebuild() interface

	  - fix various bugs in semanage

	* Merged patch from Dan Walsh (Red Hat).

	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,

	  and semanage.

* Mon Jan 2 2006 Dan Walsh <dwalsh@redhat.com> 1.29.2-10

- Fix restorecon to not say it is changing user section when -vv is specified

* Tue Dec 27 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-9

- Fixes for semanage, patch from Ivan and added a test script

* Sat Dec 24 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-8

- Fix getpwnam call

* Fri Dec 23 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-7

- Anaconda fixes

* Thu Dec 22 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-6

- Turn off try catch block to debug anaconda failure

* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-5

- More fixes for chcat

* Tue Dec 20 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-4

- Add try catch for files that may not exists

* Mon Dec 19 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-3

- Remove commands from genhomedircon for installer

* Wed Dec 14 2005 Dan Walsh <dwalsh@redhat.com> 1.29.2-1

- Fix genhomedircon to work in installer

- Update to match NSA

	* Merged patch for chcat script from Dan Walsh.

* Fri Dec 9 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-2

- More fixes to chcat

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Thu Dec 8 2005 Dan Walsh <dwalsh@redhat.com> 1.29.1-1

- Update to match NSA

	* Merged fix for audit2allow long option list from Dan Walsh.

	* Merged -r option for restorecon (alias for -R) from Dan Walsh.

	* Merged chcat script and man page from Dan Walsh.

* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1

- Update to match NSA

- Add gfs support

* Wed Dec 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.37-1

- Update to match NSA

- Add chcat to policycoreutils, adding +/- syntax

`

* Tue Dec 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.36-2

- Require new version of libsemanage

* Mon Dec 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.36-1

- Update to match NSA

	* Changed genhomedircon to warn on use of ROLE in homedir_template

	  if using managed policy, as libsemanage does not yet support it.

* Sun Dec 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.35-1

- Update to match NSA

	* Merged genhomedircon bug fix from Dan Walsh.

	* Revised semodule* man pages to refer to checkmodule and

	  to include example sections.

* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.33-1

- Update to match NSA

	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.

	* Merged genhomedircon fix from Dan Walsh.

	* Merged semodule* man pages from Dan Walsh, and edited them.

	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to

	  retain validation/canonicalization of contexts during init.

* Wed Nov 30 2005 Dan Walsh <dwalsh@redhat.com> 1.27.31-1

- Update to match NSA

	* Changed genhomedircon to always use user_r for the role in the

	  managed case since user_get_defrole is broken.

- Add te file capabilities to audit2allow

- Add man pages for semodule

* Tue Nov 29 2005 Dan Walsh <dwalsh@redhat.com> 1.27.30-1

- Update to match NSA

	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.

	* Fixed semodule -v option.

* Mon Nov 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.29-1

- Update to match NSA

	* Merged audit2allow python script from Dan Walsh.

	  (old script moved to audit2allow.perl, will be removed later).

	* Merged genhomedircon fixes from Dan Walsh.

	* Merged semodule quieting patch from Dan Walsh

	  (inverts default, use -v to restore original behavior).

* Thu Nov 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-3

- Audit2allow

	* Add more error checking

	* Add gen policy package

	* Add gen requires

* Wed Nov 16 2005 Dan Walsh <dwalsh@redhat.com> 1.27.28-2

- Update to match NSA

	* Merged genhomedircon rewrite from Dan Walsh.

- Rewrite audit2allow to python

* Mon Nov 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-5

- Fix genhomedircon to work with non libsemanage systems

* Fri Nov 11 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-3

- Patch genhomedircon to use libsemanage.py stuff

* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.27.27-1

- Update to match NSA

	* Merged setsebool cleanup patch from Ivan Gyurdiev.

* Wed Nov 9 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-4

- Fix genhomedircon to use seusers file, temporary fix until swigified semanage

* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.26-1

	* Added -B (--build) option to semodule to force a rebuild.

	* Reverted setsebool patch to call semanage_set_reload_bools().

	* Changed setsebool to disable policy reload and to call

	  security_set_boolean_list to update the runtime booleans.

	* Changed setfiles -c to use new flag to set_matchpathcon_flags()

	  to disable context translation by matchpathcon_init().

* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.23-1

- Update to match NSA

	* Changed setfiles for the context canonicalization support.

	* Changed setsebool to call semanage_is_managed() interface

	  and fall back to security_set_boolean_list() if policy is

	  not managed.

	* Merged setsebool memory leak fix from Ivan Gyurdiev.

	* Merged setsebool patch to call semanage_set_reload_bools()

	  interface from Ivan Gyurdiev.

* Mon Nov 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1

- Update to match NSA

	* Merged setsebool patch from Ivan Gyurdiev.

	  This moves setsebool from libselinux/utils to policycoreutils,

	  and rewrites it to use libsemanage for permanent boolean changes.

* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-2

- Rebuild to use latest libselinux, libsemanage, and libsepol

* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1

- Update to match NSA

	* Merged semodule support for reload, noreload, and store options

	  from Joshua Brindle.

	* Merged semodule_package rewrite from Joshua Brindle.

* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.18-1

- Update to match NSA

	* Cleaned up usage and error messages and releasing of memory by

   	  semodule_* utilities.

	* Corrected error reporting by semodule.

	* Updated semodule_expand for change to sepol interface.

	* Merged fixes for make DESTDIR= builds from Joshua Brindle.

* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.14-1

- Update to match NSA

	* Updated semodule_package for sepol interface changes.

* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.13-1

- Update to match NSA

	* Updated semodule_expand/link for sepol interface changes.

* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.12-1

- Update to match NSA

	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.

* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1

- Update to match NSA

	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.

	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).

	* Merged fixfiles patch from Dan Walsh (Red Hat).

	* Updated semodule for removal of semanage_strerror.

* Thu Oct 13 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-2

- Fix run_init.pamd and spec file

* Wed Oct 12 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1

- Update to match NSA

	* Updated semodule_link and semodule_expand to use shared libsepol.

	Fixed audit2why to call policydb_init prior to policydb_read (still

	uses the static libsepol).

* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1

- Update to match NSA

	* Updated for changes to libsepol. 

	Changed semodule and semodule_package to use the shared libsepol.

	Disabled build of semodule_link and semodule_expand for now.

	Updated audit2why for relocated policydb internal headers,

	still needs to be converted to a shared lib interface.

* Fri Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-3

- Update newrole pam file to remove pam-stack

- Update run_init pam file to remove pam-stack

* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-1

- Update to match NSA

	* Fixed warnings in load_policy.

	* Rewrote load_policy to use the new selinux_mkload_policy()

	interface provided by libselinux.

* Wed Oct 5 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-2

- Rebuild with newer libararies 

* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1

- Update to match NSA

	* Merged patch to update semodule to the new libsemanage API

	and improve the user interface from Karl MacMillan (Tresys).

	* Modified semodule for the create/connect API split.

* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-2

- More fixes to stop find from following nfs paths

* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1

- Update to match NSA

	* Merged run_init open_init_pty bug fix from Manoj Srivastava

	  (unblock SIGCHLD).  Bug reported by Erich Schubert.

* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1

- Update to match NSA

	* Merged error shadowing bug fix for restorecon from Dan Walsh.

	* Merged setfiles usage/man page update for -r option from Dan Walsh.

	* Merged fixfiles -C patch to ignore :s0 addition on update

	  to a MCS/MLS policy from Dan Walsh.

* Thu Sep 15 2005 Dan Walsh <dwalsh@redhat.com> 1.26-3

- Add chcat script for use with chcon.

* Tue Sep 13 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2

- Fix restorecon to exit with error code

* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-1

	* Updated version for release.

* Tue Sep 6 2005 Dan Walsh <dwalsh@redhat.com> 1.25.9-2

- Add prereq for mount command

* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.9-1

- Update to match NSA

	* Changed setfiles -c to translate the context to raw format

	prior to calling libsepol.

* Fri Aug 26 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-3

- Use new version of libsemange and require it for install

* Fri Aug 26 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-2

- Ignore s0 in file context

* Thu Aug 25 2005 Dan Walsh <dwalsh@redhat.com> 1.25.7-1

- Update to match NSA

	* Merged patch for fixfiles -C from Dan Walsh.

* Tue Aug 23 2005 Dan Walsh <dwalsh@redhat.com> 1.25.6-1

- Update to match NSA

	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).

	  Bugs found by Coverity.

* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-3

- Fix fixfiles to call sort -u followed by sort -d.

* Wed Aug 17 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-2

- Change fixfiles to ignore /home directory on updates

* Fri Aug 5 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1

- Update to match NSA

	* Merged patch to move module read/write code from libsemanage

	  to libsepol from Jason Tang (Tresys).

* Thu Jul 28 2005 Dan Walsh <dwalsh@redhat.com> 1.25.4-1

- Update to match NSA

	* Changed semodule* to link with libsemanage.

* Wed Jul 27 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1

- Update to match NSA

	* Merged restorecon patch from Ivan Gyurdiev.

* Mon Jul 18 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1

- Update to match NSA

	* Merged load_policy, newrole, and genhomedircon patches from Red Hat.

* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.1-1

- Update to match NSA

	* Merged loadable module support from Tresys Technology.

* Wed Jun 29 2005 Dan Walsh <dwalsh@redhat.com> 1.24-1

- Update to match NSA

	* Updated version for release.

* Tue Jun 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-4

- Fix Ivan's patch for user role changes 

* Sat May 28 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-3

- Add Ivan's patch for user role changes in genhomedircon

* Thu May 26 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-2

- Fix warning message on reload of booleans

* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23.11-1

- Update to match NSA

	* Merged fixfiles and newrole patch from Dan Walsh.

	* Merged audit2why man page from Dan Walsh.

* Thu May 19 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-2

- Add call to pam_acct_mgmt in newrole.

* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.23.10-1

- Update to match NSA

	* Extended audit2why to incorporate booleans and local user 

	  settings when analyzing audit messages.

* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.23.9-1

- Update to match NSA

	* Updated audit2why for sepol_ prefixes on Flask types to

	  avoid namespace collision with libselinux, and to 

	  include <selinux/selinux.h> now.

* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.8-1

- Fix fixfiles to accept -f

- Update to match NSA

	* Added audit2why utility.

* Fri Apr 29 2005 Dan Walsh <dwalsh@redhat.com> 1.23.7-1

- Change -f flag in fixfiles to remove stuff from /tmp

- Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).

* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23.6-1

- Update to match NSA

	* Fixed signed/unsigned pointer bug in load_policy.

	* Reverted context validation patch for genhomedircon.

* Wed Apr 13 2005 Dan Walsh <dwalsh@redhat.com> 1.23.5-1

- Update to match NSA

	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.