* Add group support to seusers using %groupname syntax from Dan Walsh.
* Mark setrans socket close-on-exec from Stephen Smalley.
* Only apply nodups checking to base file contexts from Stephen Smalley.
2.0.70 2008-07-30
* Merge ruby bindings from Dan Walsh.
2.0.69 2008-07-29
* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
This prevents adding them via semanage.
2.0.68 2008-07-18
* Fix audit2why shadowed variables from Stephen Smalley.
* Note that freecon NULL is legal in man page from Karel Zak.
2.0.67 2008-06-13
* New and revised AVC, label, and mapping man pages from Eamon Walsh.
2.0.66 2008-06-11
* Add swig python bindings for avc interfaces from Dan Walsh.
2.0.65 2008-05-27
* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.
2.0.64 2008-04-21
* Fixed selinux_set_callback man page.
2.0.63 2008-04-18
* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
2.0.62 2008-04-18
* Fix memory leaks in matchpathcon from Eamon Walsh.
2.0.61 2008-03-31
* Man page typo fix from Jim Meyering.
2.0.60 2008-03-20
* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.
2.0.59 2008-02-29
* Merged new X label "poly_selection" namespace from Eamon Walsh.
2.0.58 2008-02-28
* Merged reset_selinux_config() for load policy from Dan Walsh.
2.0.57 2008-02-25
* Merged avc_has_perm() errno fix from Eamon Walsh.
2.0.56 2008-02-21
* Regenerated Flask headers from refpolicy flask definitions.
2.0.55 2008-02-08
* Merged compute_member AVC function and manpages from Eamon Walsh.
2.0.54 2008-02-08
* Provide more error reporting on load policy failures from Stephen Smalley.
2.0.53 2008-02-07
* Merged new X label "poly_prop" namespace from Eamon Walsh.
2.0.52 2008-02-06
* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
2.0.51 2008-02-05
* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.
2.0.50 2008-01-28
* Merged fix for audit2why from Dan Walsh.
2.0.49 2008-01-23
* Merged audit2why python binding from Dan Walsh.
2.0.48 2008-01-23
* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.
2.0.47 2007-12-21
* Fix for the avc: granted null message bug from Stephen Smalley.
2.0.46 2007-12-07
* matchpathcon(8) man page update from Dan Walsh.
2.0.45 2007-11-20
* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
2.0.44 2007-11-20
* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.
2.0.43 2007-11-15
* Regenerated Flask headers from policy.
2.0.42 2007-11-08
* AVC enforcing mode override patch from Eamon Walsh.
2.0.41 2007-11-06
* Aligned attributes in AVC netlink code from Eamon Walsh.
2.0.40 2007-11-01
* Merged refactored AVC netlink code from Eamon Walsh.
2.0.39 2007-10-19
* Merged new X label namespaces from Eamon Walsh.
2.0.38 2007-10-15
* Bux fix and minor refactoring in string representation code.
2.0.37 2007-10-05
* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.
2.0.36 2007-09-27
* Fix segfault resulting from missing file_contexts file.
2.0.35 2007-09-24
* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
* Pass CFLAGS when using gcc for linking from Dennis Gilmore.
2.0.34 2007-09-18
* Fix selabel option flag setting for 64-bit from Stephen Smalley.
2.0.33 2007-09-12
* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
2.0.32 2007-09-10
* Fix swig binding for rpm_execcon from James Athey.
2.0.31 2007-08-23
* Fix file_contexts.homedirs path from Todd Miller.
2.0.30 2007-08-06
* Fix segfault resulting from uninitialized print-callback pointer.
2.0.29 2007-08-02
* Added x_contexts path function patch from Eamon Walsh.
2.0.28 2007-08-01
* Fix build for EMBEDDED=y from Yuichi Nakamura.
2.0.27 2007-07-25
* Fix markup problems in selinux man pages from Dan Walsh.
2.0.26 2007-07-23
* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
* Added swigify to top-level Makefile from Dan Walsh.
2.0.25 2007-07-23
* Fix for string_to_security_class segfault on x86_64 from Stephen
Smalley.
2.0.24 2007-09-07
* Fix for getfilecon() for zero-length contexts from Stephen Smalley.
2.0.23 2007-06-22
* Refactored SWIG bindings from James Athey.
2.0.22 2007-06-20
* Labeling and callback interface patches from Eamon Walsh.
2.0.21 2007-06-11
* Class and permission mapping support patches from Eamon Walsh.
2.0.20 2007-06-07
* Object class discovery support patches from Chris PeBenito.
2.0.19 2007-06-05
* Refactoring and errno support in string representation code.
2.0.18 2007-05-31
* Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.
2.0.17 2007-05-31
* Updated Lindent script and reindented two header files.
2.0.16 2007-05-09
* Merged additional swig python bindings from Dan Walsh.
2.0.15 2007-04-27
* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.
2.0.14 2007-04-24
* Merged build fix for avc_internal.c from Joshua Brindle.
2.0.13 2007-04-12
* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.
2.0.12 2007-04-09
* Merged support for getting initial contexts from James Carter.
2.0.11 2007-04-05
* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
2.0.10 2007-04-05
* Merged sidput(NULL) patch from Eamon Walsh.
2.0.9 2007-03-30
* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.
2.0.8 2007-03-20
* Merged fix for avc.h #include's from Eamon Walsh.
2.0.7 2007-03-12
* Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
2.0.6 2007-03-12
* Merged patch to drop support for old /etc/sysconfig/selinux and
/etc/security policy file layout from Steve Grubb.
2.0.5 2007-02-27
* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.
2.0.4 2007-02-23
* Removed sending of setrans init message.
2.0.3 2007-02-22
* Merged matchpathcon memory leak fix from Steve Grubb.
2.0.2 2007-02-21
* Merged more swig initializers from Dan Walsh.
2.0.1 2007-02-20
* Merged patch from Todd Miller to convert int types over to C99 style.
2.0.0 2007-02-01
* Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
of the use of the non-standard format %as. (original patch changed
for style).
* Merged patch from Todd Miller to fix memory leak in matchpathcon.c.
1.34.1 2007-01-26
* Merged python binding fixes from Dan Walsh.
1.34.0 2007-01-18
* Updated version for stable branch.
1.33.6 2007-01-17
* Merged man page updates to make "apropos selinux" work from Dan Walsh.
1.33.5 2007-01-16
* Merged getdefaultcon utility from Dan Walsh.
1.33.4 2007-01-11
* Merged selinux_check_securetty_context() and support from Dan Walsh.
1.33.3 2007-01-04
* Merged patch for matchpathcon utility to use file mode information
when available from Dan Walsh.
1.33.2 2006-11-27
* Merged patch to compile with -fPIC instead of -fpic from
Manoj Srivastava to prevent hitting the global offset table
limit. Patch changed to include libsepol and libsemanage in
addition to libselinux.
1.33.1 2006-10-19
* Merged updated flask definitions from Darrel Goeddel.
This adds the context security class, and also adds
the string definitions for setsockcreate and polmatch.
1.32 2006-10-17
* Updated version for release.
1.30.30 2006-10-05
* Merged patch from Darrel Goeddel to always use untranslated
contexts in the userspace AVC.
1.30.29 2006-09-29
* Merged av_permissions.h update from Steve Grubb,
adding setsockcreate and polmatch definitions.
1.30.28 2006-09-13
* Merged patch from Steve Smalley to fix SIGPIPE in setrans_client
* Merged c++ class identifier fix from Joe Nall.
1.30.27 2006-08-24
* Merged patch to not log avc stats upon a reset from Steve Grubb.
* Applied patch to revert compat_net setting upon policy load.
1.30.26 2006-08-11
* Merged file context homedir and local path functions from
Chris PeBenito.
1.30.25 2006-08-11
* Rework functions that access /proc/pid/attr to access the
per-thread nodes, and unify the code to simplify maintenance.
1.30.24 2006-08-10
* Merged return value fix for *getfilecon() from Dan Walsh.
1.30.23 2006-08-10
* Merged sockcreate interfaces from Eric Paris.
1.30.22 2006-08-03
* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
1.30.21 2006-08-03
* Merged netfilter_contexts support patch from Chris PeBenito.
1.30.20 2006-08-01
* Merged context_*_set errno patch from Jim Meyering.
1.30.19 2006-06-29
* Lindent.
1.30.18 2006-06-27
* Merged {get,set}procattrcon patch set from Eric Paris.
* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
1.30.17 2006-06-27
* Regenerated Flask headers from refpolicy.
1.30.16 2006-06-26
* Merged patch from Dan Walsh with:
- Added selinux_file_context_{cmp,verify}.
- Added selinux_lsetfilecon_default.
- Delay translation of contexts in matchpathcon.
1.30.15 2006-06-16
* Merged patch from Dan Walsh with:
* Added selinux_getpolicytype() function.
* Modified setrans code to skip processing if !mls_enabled.
1.30.14 2006-06-16
* Set errno in the !selinux_mnt case.
1.30.13 2006-06-02
* Allocate large buffers from the heap, not on stack.
