Daniel J Walsh 1ca4c4
%define libsepolver 2.0.26-1
cvsdist f2e381
Summary: SELinux policy compiler
cvsdist f2e381
Name: checkpolicy
Daniel J Walsh 1ca4c4
Version: 2.0.14
Daniel J Walsh e22ff1
Release: 1%{?dist}
cvsdist f2e381
License: GPL
cvsdist f2e381
Group: Development/System
Daniel J Walsh 945a63
Source: http://www.nsa.gov/selinux/archives/%{name}-%{version}.tgz
Daniel J Walsh e8c948
cvsdist f2e381
BuildRoot: %{_tmppath}/%{name}-buildroot
Daniel J Walsh 2cb30a
BuildRequires: byacc bison flex libsepol-static >= %{libsepolver} libselinux-devel
cvsdist f2e381
cvsdist f2e381
%description
Daniel J Walsh e21e3b
Security-enhanced Linux is a feature of the Linux® kernel and a number
cvsdist f2e381
of utilities with enhanced security functionality designed to add
cvsdist f2e381
mandatory access controls to Linux.  The Security-enhanced Linux
cvsdist f2e381
kernel contains new architectural components originally developed to
cvsdist f2e381
improve the security of the Flask operating system. These
cvsdist f2e381
architectural components provide general support for the enforcement
cvsdist f2e381
of many kinds of mandatory access control policies, including those
cvsdist f2e381
based on the concepts of Type Enforcement®, Role-based Access
cvsdist f2e381
Control, and Multi-level Security.
cvsdist f2e381
cvsdist f2e381
This package contains checkpolicy, the SELinux policy compiler.  
cvsdist f2e381
Only required for building policies. 
cvsdist f2e381
cvsdist f2e381
%prep
cvsdist f2e381
%setup -q
cvsdist f2e381
cvsdist f2e381
%build
Daniel J Walsh b1640a
make clean
cvsdist da7190
make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" 
Daniel J Walsh 352999
cd test
Daniel J Walsh 352999
make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" 
cvsdist f2e381
cvsdist f2e381
%install
cvsdist f2e381
rm -rf ${RPM_BUILD_ROOT}
cvsdist f2e381
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
Daniel J Walsh dfc85e
make LIBDIR="%{_libdir}" DESTDIR="${RPM_BUILD_ROOT}" install
Daniel J Walsh 352999
install test/dismod ${RPM_BUILD_ROOT}%{_bindir}/sedismod
Daniel J Walsh 352999
install test/dispol ${RPM_BUILD_ROOT}%{_bindir}/sedispol
cvsdist f2e381
cvsdist f2e381
%clean
cvsdist f2e381
rm -rf ${RPM_BUILD_ROOT}
cvsdist f2e381
cvsdist f2e381
%files
cvsdist f2e381
%defattr(-,root,root)
cvsdist f2e381
%{_bindir}/checkpolicy
Daniel J Walsh dfc85e
%{_bindir}/checkmodule
cvsdist f2e381
%{_mandir}/man8/checkpolicy.8.gz
Daniel J Walsh e8c948
%{_mandir}/man8/checkmodule.8.gz
Daniel J Walsh 352999
%{_bindir}/sedismod
Daniel J Walsh 352999
%{_bindir}/sedispol
cvsdist f2e381
cvsdist f2e381
%changelog
Daniel J Walsh 1ca4c4
* Thu Mar 27 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
Daniel J Walsh 1ca4c4
- Latest update from NSA
Daniel J Walsh 1ca4c4
	* Add permissive domain support from Eric Paris.
Daniel J Walsh 1ca4c4
Daniel J Walsh 164c17
* Thu Mar 13 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
Daniel J Walsh 164c17
- Latest update from NSA
Daniel J Walsh 164c17
	* Split out non-grammar parts of policy_parse.yacc into
Daniel J Walsh 164c17
	  policy_define.c and policy_define.h from Todd C. Miller.
Daniel J Walsh 164c17
	* Initialize struct policy_file before using it, from Todd C. Miller.
Daniel J Walsh 164c17
	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.
Daniel J Walsh 164c17
Daniel J Walsh e22ff1
* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
Daniel J Walsh e22ff1
- Latest update from NSA
Daniel J Walsh e22ff1
	* Use yyerror2() where appropriate from Todd C. Miller.
Daniel J Walsh e22ff1
- Build against latest libsepol
Daniel J Walsh e22ff1
Daniel J Walsh 352999
* Fri Feb 22 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.9-2
Daniel J Walsh 352999
- Start shipping sedismod and sedispol
Daniel J Walsh 352999
Daniel J Walsh d793dc
* Mon Feb 4 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
Daniel J Walsh d793dc
- Latest update from NSA
Daniel J Walsh d793dc
	* Update dispol for libsepol avtab changes from Stephen Smalley.
Daniel J Walsh d793dc
Daniel J Walsh 1257a8
* Fri Jan 25 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.8-1
Daniel J Walsh 1257a8
- Latest update from NSA
Daniel J Walsh 1257a8
	* Deprecate role dominance in parser.
Daniel J Walsh 1257a8
Daniel J Walsh 4dd137
* Mon Jan 21 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.7-2
Daniel J Walsh 4dd137
- Update to use libsepol-static library
Daniel J Walsh 4dd137
Daniel J Walsh 4dd137
* Fri Jan 11 2008 Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
Daniel J Walsh 4dd137
- Latest update from NSA
Daniel J Walsh 4dd137
	* Added support for policy capabilities from Todd Miller.
Daniel J Walsh 4dd137
Daniel J Walsh 5c3895
* Thu Nov 15 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
Daniel J Walsh 5c3895
- Latest update from NSA
Daniel J Walsh 5c3895
	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".
Daniel J Walsh 5c3895
	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.
Daniel J Walsh 5c3895
Daniel J Walsh 5d6938
* Tue Sep 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
Daniel J Walsh 5d6938
	* Merged handle unknown policydb flag support from Eric Paris.
Daniel J Walsh 5d6938
	  Adds new command line options -U {allow, reject, deny} for selecting
Daniel J Walsh 5d6938
	  the flag when a base module or kernel policy is built.
Daniel J Walsh 5d6938
Jesse Keating 3667d6
* Tue Aug 28 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 2.0.3-3
Jesse Keating 3667d6
- Rebuild for selinux ppc32 issue.
Jesse Keating 3667d6
Daniel J Walsh 7b1ac7
* Thu Jun 18 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.3-2
Daniel J Walsh 7b1ac7
- Rebuild with the latest libsepol
Daniel J Walsh 7b1ac7
Daniel J Walsh 7b1ac7
* Thu Jun 17 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
Daniel J Walsh 4bd694
- Latest update from NSA
Daniel J Walsh 4bd694
	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
Daniel J Walsh 4bd694
	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
Daniel J Walsh 4bd694
Daniel J Walsh 7b7e59
* Thu Apr 12 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
Daniel J Walsh 7b7e59
- Latest update from NSA
Daniel J Walsh 7b7e59
	* Merged checkmodule man page fix from Dan Walsh.
Daniel J Walsh 7b7e59
Daniel J Walsh ebb6b2
* Fri Mar 30 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-3
Daniel J Walsh ebb6b2
- Rebuild with new libsepol
Daniel J Walsh ebb6b2
Daniel J Walsh 7f2741
* Wed Mar 28 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.1-2
Daniel J Walsh 7f2741
- Rebuild with new libsepol
Daniel J Walsh 7f2741
Daniel J Walsh c1870c
* Tue Nov 20 2006 Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
Daniel J Walsh c1870c
- Latest update from NSA
Daniel J Walsh c1870c
	* Merged patch to allow dots in class identifiers from Caleb Case.
Daniel J Walsh c1870c
Daniel J Walsh 1ec43f
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
Daniel J Walsh 1ec43f
- Latest update from NSA
Daniel J Walsh 1ec43f
	* Merged patch to use new libsepol error codes by Karl MacMillan.
Daniel J Walsh 1ec43f
	* Updated version for stable branch.
Daniel J Walsh 1ec43f
Daniel J Walsh efbbda
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
Daniel J Walsh efbbda
- Rebuild for new libraries
Daniel J Walsh efbbda
Daniel J Walsh c2957d
* Tue Nov 14 2006 Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
Daniel J Walsh c2957d
- Latest update from NSA
Daniel J Walsh c2957d
	* Collapse user identifiers and identifiers together.
Daniel J Walsh c2957d
Daniel J Walsh 9e6b63
* Tue Oct 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.32-1
Daniel J Walsh 9e6b63
- Latest update from NSA
Daniel J Walsh 9e6b63
	* Updated version for release.
Daniel J Walsh 9e6b63
Daniel J Walsh 2fc561
* Thu Sep 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
Daniel J Walsh 2fc561
- Latest update from NSA
Daniel J Walsh 2fc561
	* Merged user and range_transition support for modules from 
Daniel J Walsh 2fc561
	  Darrel Goeddel
Daniel J Walsh 2fc561
Daniel J Walsh 39e4bf
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
Daniel J Walsh 39e4bf
- Latest update from NSA
Daniel J Walsh 39e4bf
	* merged range_transition enhancements and user module format
Daniel J Walsh 39e4bf
	  changes from Darrel Goeddel
Daniel J Walsh 39e4bf
	* Merged symtab datum patch from Karl MacMillan.
Daniel J Walsh 39e4bf
Jesse Keating d6c461
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.30.9-1.1
Jesse Keating d6c461
- rebuild
Jesse Keating d6c461
Daniel J Walsh 0962a5
* Tue Jul 4 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.8-1
Daniel J Walsh 0962a5
- Latest upgrade from NSA
Daniel J Walsh 0962a5
	* Lindent.
Daniel J Walsh 0962a5
	* Merged patch to remove TE rule conflict checking from the parser
Daniel J Walsh 0962a5
	  from Joshua Brindle.  This can only be done properly by the 
Daniel J Walsh 0962a5
	  expander.
Daniel J Walsh 0962a5
	* Merged patch to make checkpolicy/checkmodule handling of
Daniel J Walsh 0962a5
	  duplicate/conflicting TE rules the same as the expander 
Daniel J Walsh 0962a5
	  from Joshua Brindle.
Daniel J Walsh 0962a5
	* Merged optionals in base take 2 patch set from Joshua Brindle.
Daniel J Walsh 0962a5
Daniel J Walsh 0b33b4
* Wed May 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
Daniel J Walsh 0b33b4
- Latest upgrade from NSA
Daniel J Walsh 0b33b4
	* Merged compiler cleanup patch from Karl MacMillan.
Daniel J Walsh 0b33b4
	* Merged fix warnings patch from Karl MacMillan.	
Daniel J Walsh 0b33b4
Daniel J Walsh a7c8fb
* Wed Apr 5 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
Daniel J Walsh a7c8fb
- Latest upgrade from NSA
Daniel J Walsh a7c8fb
	* Changed require_class to reject permissions that have not been
Daniel J Walsh a7c8fb
	  declared if building a base module.
Daniel J Walsh a7c8fb
Daniel J Walsh cb354e
* Tue Mar 28 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.3-1
Daniel J Walsh cb354e
- Latest upgrade from NSA
Daniel J Walsh cb354e
	* Fixed checkmodule to call link_modules prior to expand_module
Daniel J Walsh cb354e
	  to handle optionals.
Daniel J Walsh cb354e
	* Fixed require_class to avoid shadowing permissions already defined
Daniel J Walsh cb354e
	  in an inherited common definition.
Daniel J Walsh cb354e
Daniel J Walsh d914ad
* Mon Mar 27 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.1-2
Daniel J Walsh d914ad
- Rebuild with new libsepol
Daniel J Walsh d914ad
Daniel J Walsh 01a9ba
* Thu Mar 23 2006 Dan Walsh <dwalsh@redhat.com> - 1.30.1-1
Daniel J Walsh 01a9ba
- Latest upgrade from NSA
Daniel J Walsh 01a9ba
	* Moved processing of role and user require statements to 2nd pass.
Daniel J Walsh 01a9ba
Daniel J Walsh af7b9d
* Fri Mar 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.30-1
Daniel J Walsh af7b9d
- Latest upgrade from NSA
Daniel J Walsh af7b9d
	* Updated version for release.
Daniel J Walsh af7b9d
	* Fixed bug in role dominance (define_role_dom).
Daniel J Walsh af7b9d
Daniel J Walsh af7b9d
* Fri Feb 17 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.4-1
Daniel J Walsh d0cfe1
- Latest upgrade from NSA
Daniel J Walsh d0cfe1
	* Added a check for failure to declare each sensitivity in
Daniel J Walsh d0cfe1
	  a level definition.
Daniel J Walsh d0cfe1
	* Changed to clone level data for aliased sensitivities to
Daniel J Walsh d0cfe1
	  avoid double free upon sens_destroy.  Bug reported by Kevin
Daniel J Walsh d0cfe1
	  Carr of Tresys Technology.
Daniel J Walsh d0cfe1
Daniel J Walsh 6d1516
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.2-1
Daniel J Walsh 6d1516
- Latest upgrade from NSA
Daniel J Walsh 6d1516
	* Merged optionals in base patch from Joshua Brindle.
Daniel J Walsh 6d1516
Daniel J Walsh bc40ef
* Mon Feb 13 2006 Dan Walsh <dwalsh@redhat.com> - 1.29.1-1.2
Daniel J Walsh 6d1516
- Need to build againi
Daniel J Walsh bc40ef
Jesse Keating f6e369
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.29.1-1.1
Jesse Keating f6e369
- bump again for double-long bug on ppc(64)
Jesse Keating f6e369
Daniel J Walsh 7cb707
* Tue Feb 07 2006 Dan Walsh <dwalsh@redhat.com> 1.29.1-1
Daniel J Walsh 7cb707
- Latest upgrade from NSA
Daniel J Walsh 7cb707
	* Merged sepol_av_to_string patch from Joshua Brindle.
Daniel J Walsh 7cb707
Jesse Keating 6c329b
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.28-5.1
Jesse Keating 6c329b
- rebuilt for new gcc4.1 snapshot and glibc changes
Jesse Keating 6c329b
Daniel J Walsh 413449
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.28-5
Daniel J Walsh 413449
- Rebuild to get latest libsepol
Daniel J Walsh 413449
Daniel J Walsh 7cb707
* Fri Jan 13 2006 Dan Walsh <dwalsh@redhat.com> 1.28-5
Daniel J Walsh 7cb707
- Rebuild to get latest libsepol
Daniel J Walsh 7cb707
Daniel J Walsh 7f0d31
* Thu Jan 5 2006 Dan Walsh <dwalsh@redhat.com> 1.28-4
Daniel J Walsh 7f0d31
- Rebuild to get latest libsepol
Daniel J Walsh 7f0d31
Daniel J Walsh 55423c
* Wed Jan 4 2006 Dan Walsh <dwalsh@redhat.com> 1.28-3
Daniel J Walsh 55423c
- Rebuild to get latest libsepol
Daniel J Walsh 55423c
Daniel J Walsh b1640a
* Fri Dec 16 2005 Dan Walsh <dwalsh@redhat.com> 1.28-2
Daniel J Walsh b1640a
- Rebuild to get latest libsepol
Daniel J Walsh b1640a
Jesse Keating aba9ac
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
Jesse Keating aba9ac
- rebuilt
Jesse Keating aba9ac
Daniel J Walsh 6300e4
* Fri Dec 9 2005 Dan Walsh <dwalsh@redhat.com> 1.28-1
Daniel J Walsh 6300e4
- Latest upgrade from NSA
Daniel J Walsh 6300e4
Daniel J Walsh 428c7a
* Sun Dec 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.20-1
Daniel J Walsh 428c7a
- Latest upgrade from NSA
Daniel J Walsh 428c7a
	* Merged checkmodule man page from Dan Walsh, and edited it.
Daniel J Walsh 428c7a
Daniel J Walsh e8c948
* Thu Dec 1 2005 Dan Walsh <dwalsh@redhat.com> 1.27.19-1
Daniel J Walsh e8c948
- Latest upgrade from NSA
Daniel J Walsh e8c948
	* Added error checking of all ebitmap_set_bit calls for out of
Daniel J Walsh e8c948
	  memory conditions.
Daniel J Walsh e8c948
	* Merged removal of compatibility handling of netlink classes
Daniel J Walsh e8c948
	  (requirement that policies with newer versions include the
Daniel J Walsh e8c948
	   netlink class definitions, remapping of fine-grained netlink
Daniel J Walsh e8c948
	   classes in newer source policies to single netlink class when
Daniel J Walsh e8c948
	   generating older policies) from George Coker.
Daniel J Walsh e8c948
Daniel J Walsh 671fd3
* Tue Nov 8 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-7
Daniel J Walsh e003d3
- Rebuild to get latest libsepol
Daniel J Walsh e003d3
Daniel J Walsh f45740
* Tue Oct 25 2005 Dan Walsh <dwalsh@redhat.com> 1.27.17-1
Daniel J Walsh f45740
- Latest upgrade from NSA
Daniel J Walsh f45740
	* Merged dismod fix from Joshua Brindle.
Daniel J Walsh f45740
Daniel J Walsh af4dd8
* Thu Oct 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.16-1
Daniel J Walsh af4dd8
- Latest upgrade from NSA
Daniel J Walsh af4dd8
	* Removed obsolete cond_check_type_rules() function and call and 
Daniel J Walsh af4dd8
	  cond_optimize_lists() call from checkpolicy.c; these are handled
Daniel J Walsh af4dd8
	  during parsing and expansion now.
Daniel J Walsh af4dd8
	* Updated calls to expand_module for interface change.
Daniel J Walsh af4dd8
	* Changed checkmodule to verify that expand_module succeeds 
Daniel J Walsh af4dd8
	  when building base modules.
Daniel J Walsh af4dd8
	* Merged module compiler fixes from Joshua Brindle.
Daniel J Walsh af4dd8
	* Removed direct calls to hierarchy_check_constraints() and 
Daniel J Walsh af4dd8
	  check_assertions() from checkpolicy since they are now called 
Daniel J Walsh af4dd8
	  internally by expand_module().
Daniel J Walsh af4dd8
Daniel J Walsh acfce4
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.11-1
Daniel J Walsh acfce4
- Latest upgrade from NSA
Daniel J Walsh acfce4
	* Updated for changes to sepol policydb_index_others interface.
Daniel J Walsh acfce4
Daniel J Walsh b1c24f
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 1.27.10-1
Daniel J Walsh b1c24f
- Latest upgrade from NSA
Daniel J Walsh b1c24f
	* Updated for changes to sepol expand_module and link_modules interfaces.
Daniel J Walsh f0af6a
* Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2
Daniel J Walsh f0af6a
- Rebuild to get latest libsepol
Daniel J Walsh f0af6a
Daniel J Walsh 571771
* Fri Oct 14 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-1
Daniel J Walsh 571771
- Latest upgrade from NSA
Daniel J Walsh 571771
	* Merged support for require blocks inside conditionals from
Daniel J Walsh 571771
	Joshua Brindle (Tresys).
Daniel J Walsh 571771
Karsten Hopp c7eb5f
* Wed Oct 12 2005 Karsten Hopp <karsten@redhat.de> 1.27.8-2
Karsten Hopp c7eb5f
- add buildrequirement for libselinux-devel for dispol
Karsten Hopp c7eb5f
Daniel J Walsh 1b6c42
* Mon Oct 10 2005 Dan Walsh <dwalsh@redhat.com> 1.27.8-1
Daniel J Walsh 1b6c42
- Latest upgrade from NSA
Daniel J Walsh 1b6c42
	* Updated for changes to libsepol.
Daniel J Walsh 1b6c42
Daniel J Walsh e19158
* Fri Oct 7 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-2
Daniel J Walsh e19158
- Rebuild to get latest libsepol
Daniel J Walsh e19158
Daniel J Walsh b8c325
* Thu Oct 6 2005 Dan Walsh <dwalsh@redhat.com> 1.27.7-1
Daniel J Walsh b8c325
- Latest upgrade from NSA
Daniel J Walsh b8c325
	* Merged several bug fixes from Joshua Brindle (Tresys).
Daniel J Walsh b8c325
Daniel J Walsh 433142
* Tue Oct 4 2005 Dan Walsh <dwalsh@redhat.com> 1.27.6-1
Daniel J Walsh 433142
- Latest upgrade from NSA
Daniel J Walsh 433142
	* Merged MLS in modules patch from Joshua Brindle (Tresys).
Daniel J Walsh 433142
Daniel J Walsh 1bc86e
* Mon Oct 3 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-2
Daniel J Walsh 1bc86e
- Rebuild to get latest libsepol
Daniel J Walsh 1bc86e
Daniel J Walsh e21e3b
* Wed Sep 28 2005 Dan Walsh <dwalsh@redhat.com> 1.27.5-1
Daniel J Walsh e21e3b
- Latest upgrade from NSA
Daniel J Walsh e21e3b
	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).
Daniel J Walsh e21e3b
Daniel J Walsh d3c90a
* Tue Sep 27 2005 Dan Walsh <dwalsh@redhat.com> 1.27.4-1
Daniel J Walsh d3c90a
- Latest upgrade from NSA
Daniel J Walsh d3c90a
	* Merged bugfix for dup role transition error messages from
Daniel J Walsh d3c90a
	Karl MacMillan (Tresys).
Daniel J Walsh d3c90a
Daniel J Walsh d3c90a
* Fri Sep 23 2005 Dan Walsh <dwalsh@redhat.com> 1.27.3-1
Daniel J Walsh d3c90a
- Latest upgrade from NSA
Daniel J Walsh d3c90a
	* Merged policyver/modulever patches from Joshua Brindle (Tresys).
Daniel J Walsh d3c90a
Daniel J Walsh c95e46
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-2
Daniel J Walsh c95e46
- Rebuild to get latest libsepol
Daniel J Walsh c95e46
Daniel J Walsh e34019
* Wed Sep 21 2005 Dan Walsh <dwalsh@redhat.com> 1.27.2-1
Daniel J Walsh e34019
- Latest upgrade from NSA
Daniel J Walsh e34019
	* Fixed parse_categories handling of undefined category.
Daniel J Walsh e34019
Daniel J Walsh e34019
* Tue Sep 20 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-2
Daniel J Walsh e34019
- Rebuild to get latest libsepol
Daniel J Walsh e34019
Daniel J Walsh ba974b
* Sat Sep 17 2005 Dan Walsh <dwalsh@redhat.com> 1.27.1-1
Daniel J Walsh ba974b
- Latest upgrade from NSA
Daniel J Walsh ba974b
	* Merged bug fix for role dominance handling from Darrel Goeddel (TCS). 
Daniel J Walsh af1d47
* Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2
Daniel J Walsh af1d47
- Rebuild to get latest libsepol
Daniel J Walsh af1d47
Daniel J Walsh 7ba2db
* Mon Sep 12 2005 Dan Walsh <dwalsh@redhat.com> 1.26-1
Daniel J Walsh 7ba2db
- Latest upgrade from NSA
Daniel J Walsh 7ba2db
	* Updated version for release.
Daniel J Walsh 7ba2db
- Rebuild to get latest libsepol
Daniel J Walsh 7ba2db
Daniel J Walsh edf32b
* Thu Sep 1 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-3
Daniel J Walsh edf32b
- Rebuild to get latest libsepol
Daniel J Walsh edf32b
Daniel J Walsh 0f4afa
* Mon Aug 29 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-2
Daniel J Walsh 0f4afa
- Rebuild to get latest libsepol
Daniel J Walsh 0f4afa
Daniel J Walsh f28bed
* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.12-1
Daniel J Walsh f28bed
- Update to NSA Release
Daniel J Walsh f28bed
	* Fixed handling of validatetrans constraint expressions.
Daniel J Walsh f28bed
	Bug reported by Dan Walsh for checkpolicy -M.
Daniel J Walsh f28bed
Daniel J Walsh 239571
* Mon Aug 22 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-2
Daniel J Walsh 239571
- Fix mls crash
Daniel J Walsh 239571
Daniel J Walsh b84650
* Fri Aug 19 2005 Dan Walsh <dwalsh@redhat.com> 1.25.11-1
Daniel J Walsh b84650
- Update to NSA Release
Daniel J Walsh b84650
	* Merged use-after-free fix from Serge Hallyn (IBM).  
Daniel J Walsh b84650
	  Bug found by Coverity.
Daniel J Walsh b84650
Daniel J Walsh cac0f0
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.10-1
Daniel J Walsh cac0f0
- Update to NSA Release
Daniel J Walsh cac0f0
	* Fixed further memory leaks found by valgrind.
Daniel J Walsh cac0f0
	* Changed checkpolicy to destroy the policydbs prior to exit
Daniel J Walsh cac0f0
	  to allow leak detection.
Daniel J Walsh cac0f0
	* Fixed several memory leaks found by valgrind.
Daniel J Walsh cac0f0
Daniel J Walsh 14ec96
* Sun Aug 14 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-3
Daniel J Walsh 14ec96
- Rebuild to get latest libsepol changes
Daniel J Walsh 14ec96
Daniel J Walsh a660f4
* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-2
Daniel J Walsh a660f4
- Rebuild to get latest libsepol changes
Daniel J Walsh a660f4
Daniel J Walsh 679838
* Thu Aug 11 2005 Dan Walsh <dwalsh@redhat.com> 1.25.8-1
Daniel J Walsh 679838
- Update to NSA Release
Daniel J Walsh 679838
	* Updated checkpolicy and dispol for the new avtab format.
Daniel J Walsh 679838
	  Converted users of ebitmaps to new inline operators.
Daniel J Walsh 679838
  	  Note:  The binary policy format version has been incremented to 
Daniel J Walsh 679838
	  version 20 as a result of these changes.  To build a policy
Daniel J Walsh 679838
	  for a kernel that does not yet include these changes, use
Daniel J Walsh 679838
	  the -c 19 option to checkpolicy.
Daniel J Walsh 679838
	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
Daniel J Walsh 679838
	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).
Daniel J Walsh 679838
Daniel J Walsh 2d61bf
* Wed Aug 10 2005 Dan Walsh <dwalsh@redhat.com> 1.25.5-1
Daniel J Walsh 2d61bf
- Update to NSA Release
Daniel J Walsh 2d61bf
	* Fixed call to hierarchy checking code to pass the right policydb.
Daniel J Walsh 2d61bf
	* Merged patch to update dismod for the relocation of the
Daniel J Walsh 2d61bf
	  module read/write code from libsemanage to libsepol, and
Daniel J Walsh 2d61bf
	  to enable build of test subdirectory from Jason Tang (Tresys).
Daniel J Walsh 2d61bf
Daniel J Walsh eb71cf
* Thu Jul 28 2005 Dan Walsh <dwalsh@redhat.com> 1.25.3-1
Daniel J Walsh eb71cf
- Update to NSA Release
Daniel J Walsh eb71cf
	* Merged hierarchy check fix from Joshua Brindle (Tresys).
Daniel J Walsh eb71cf
Daniel J Walsh 4fcad7
* Thu Jul 7 2005 Dan Walsh <dwalsh@redhat.com> 1.25.2-1
Daniel J Walsh 4fcad7
- Update to NSA Release
Daniel J Walsh 4fcad7
	* Merged loadable module support from Tresys Technology.
Daniel J Walsh 4fcad7
	* Merged patch to prohibit the use of * and ~ in type sets 
Daniel J Walsh 4fcad7
	  (other than in neverallow statements) and in role sets
Daniel J Walsh 4fcad7
	  from Joshua Brindle (Tresys).
Daniel J Walsh 4fcad7
	* Updated version for release.
Daniel J Walsh 4fcad7
Daniel J Walsh 486134
* Fri May 20 2005 Dan Walsh <dwalsh@redhat.com> 1.23-4-1
Daniel J Walsh 486134
- Update to NSA Release
Daniel J Walsh 486134
	* Merged cleanup patch from Dan Walsh.
Daniel J Walsh 486134
Daniel J Walsh 47d570
* Thu May 19 2005 Dan Walsh <dwalsh@redhat.com> 1.23-3-1
Daniel J Walsh 47d570
- Update to NSA Release
Daniel J Walsh 47d570
	* Added sepol_ prefix to Flask types to avoid namespace
Daniel J Walsh 47d570
	  collision with libselinux.
Daniel J Walsh 47d570
Daniel J Walsh ba85e9
* Fri May 7 2005 Dan Walsh <dwalsh@redhat.com> 1.23-2-1
Daniel J Walsh ba85e9
- Update to NSA Release
Daniel J Walsh ba85e9
	* Merged identifier fix from Joshua Brindle (Tresys).
Daniel J Walsh ba85e9
Daniel J Walsh 240d32
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.23,1-1
Daniel J Walsh 240d32
	* Merged hierarchical type/role patch from Tresys Technology.
Daniel J Walsh 240d32
	* Merged MLS fixes from Darrel Goeddel of TCS.
Daniel J Walsh 240d32
Daniel J Walsh 45f120
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.22-1
Daniel J Walsh 45f120
- Update to NSA Release
Daniel J Walsh 45f120
Daniel J Walsh 9f3bba
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-2
Daniel J Walsh 9f3bba
- Rebuild for FC4
Daniel J Walsh 9f3bba
Daniel J Walsh 123fce
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.21.4-1
Daniel J Walsh 123fce
	* Merged define_user() cleanup patch from Darrel Goeddel (TCS).
Daniel J Walsh 123fce
	* Moved genpolusers utility to libsepol.
Daniel J Walsh 123fce
	* Merged range_transition support from Darrel Goeddel (TCS).
Daniel J Walsh 123fce
Daniel J Walsh 123fce
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.21.2-1
Daniel J Walsh 123fce
- Latest from NSA
Daniel J Walsh 123fce
	* Changed relabel Makefile target to use restorecon.
Daniel J Walsh 123fce
Daniel J Walsh 123fce
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.21.1-1
Daniel J Walsh 123fce
- Latest from NSA
Daniel J Walsh 123fce
	* Merged enhanced MLS support from Darrel Goeddel (TCS).
Daniel J Walsh 123fce
Daniel J Walsh 9a1ec7
* Fri Jan 7 2005 Dan Walsh <dwalsh@redhat.com> 1.20.1-1
Daniel J Walsh 9a1ec7
- Update for version increase at NSA
Daniel J Walsh 9a1ec7
Daniel J Walsh 945a63
* Mon Dec 20 2004 Dan Walsh <dwalsh@redhat.com> 1.19.2-1
Daniel J Walsh 945a63
- Latest from NSA
Daniel J Walsh 945a63
	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
Daniel J Walsh 945a63
	* Changed genpolusers to handle multiple user config files.
Daniel J Walsh 945a63
	* Merged nodecon ordering patch from Chad Hanson of TCS.
Daniel J Walsh 945a63
Daniel J Walsh 1cde5b
* Thu Nov 11 2004 Dan Walsh <dwalsh@redhat.com> 1.19.1-1
Daniel J Walsh 1cde5b
- Latest from NSA
Daniel J Walsh 1cde5b
	* Merged nodecon ordering patch from Chad Hanson of TCS.
Daniel J Walsh 1cde5b
Daniel J Walsh 489593
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.18.1-1
Daniel J Walsh 489593
- Latest from NSA
Daniel J Walsh 489593
	* MLS build fix.
Daniel J Walsh 489593
Daniel J Walsh 6d25ed
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.5-1
Daniel J Walsh 6d25ed
- Latest from NSA
Daniel J Walsh 6d25ed
	* Fixed Makefile dependencies (Chris PeBenito).
Daniel J Walsh 6d25ed
Daniel J Walsh 7b8ecc
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.4-1
Daniel J Walsh 7b8ecc
- Latest from NSA
Daniel J Walsh 7b8ecc
	* Fixed Makefile dependencies (Chris PeBenito).
Daniel J Walsh 7b8ecc
Daniel J Walsh 9fde28
* Sat Sep 4 2004 Dan Walsh <dwalsh@redhat.com> 1.17.3-1
Daniel J Walsh 9fde28
- Latest from NSA
Daniel J Walsh 7b8ecc
	* Merged fix for role dominance ordering issue from Chad Hanson of TCS.
Daniel J Walsh 9fde28
cvsdist da7190
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.17.2-1
cvsdist da7190
- Latest from NSA
cvsdist da7190
cvsdist 8319f8
* Thu Aug 26 2004 Dan Walsh <dwalsh@redhat.com> 1.16.3-1
cvsdist 8319f8
- Fix NSA package to not include y.tab files.
cvsdist 8319f8
cvsdist 211730
* Tue Aug 24 2004 Dan Walsh <dwalsh@redhat.com> 1.16.2-1
cvsdist 211730
- Latest from NSA
cvsdist 211730
- Allow port ranges to overlap
cvsdist 211730
cvsdist 1512be
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.16.1-1
cvsdist 1512be
- Latest from NSA
cvsdist 1512be
cvsdist eaf1a2
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 1.15.6-1
cvsdist eaf1a2
- Latest from NSA
cvsdist eaf1a2
cvsdist db0378
* Fri Aug 13 2004 Dan Walsh <dwalsh@redhat.com> 1.15.5-1
cvsdist db0378
- Latest from NSA
cvsdist db0378
cvsdist 8291c6
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 1.15.4-1
cvsdist 8291c6
- Latest from NSA
cvsdist 8291c6
cvsdist 8291c6
* Sat Aug 8 2004 Dan Walsh <dwalsh@redhat.com> 1.15.3-1
cvsdist 8291c6
- Latest from NSA
cvsdist 8291c6
cvsdist c2acfd
* Wed Aug 4 2004 Dan Walsh <dwalsh@redhat.com> 1.15.2-1
cvsdist c2acfd
- Latest from NSA
cvsdist c2acfd
cvsdist 1bfbd5
* Sat Jul 31 2004 Dan Walsh <dwalsh@redhat.com> 1.15.1-1
cvsdist 1bfbd5
- Latest from NSA
cvsdist 1bfbd5
cvsdist 861a17
* Tue Jul 27 2004 Dan Walsh <dwalsh@redhat.com> 1.14.2-1
cvsdist 861a17
- Latest from NSA
cvsdist 861a17
cvsdist 11ced9
* Wed Jun 30 2004 Dan Walsh <dwalsh@redhat.com> 1.14.1-1
cvsdist 11ced9
- Latest from NSA
cvsdist 11ced9
cvsdist 2d805d
* Fri Jun 18 2004 Dan Walsh <dwalsh@redhat.com> 1.12.2-1
cvsdist 2d805d
- Latest from NSA
cvsdist 2d805d
cvsdist 2d805d
* Thu Jun 17 2004 Dan Walsh <dwalsh@redhat.com> 1.12.1-1
cvsdist 2d805d
- Update to latest from NSA
cvsdist 2d805d
cvsdist b472e6
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.12-1
cvsdist b472e6
- Update to latest from NSA
cvsdist b472e6
cvsdist a6ef65
* Wed Jun 16 2004 Dan Walsh <dwalsh@redhat.com> 1.10-5
cvsdist a6ef65
- Add nlclass patch
cvsdist a6ef65
cvsdist a6ef65
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
cvsdist a6ef65
- rebuilt
cvsdist a6ef65
cvsdist 0ac68c
* Fri Jun 4 2004 Dan Walsh <dwalsh@redhat.com> 1.10-3
cvsdist 0ac68c
- Add BuildRequires flex
cvsdist 0ac68c
cvsdist f5f8a5
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-2
cvsdist f5f8a5
- Add BuildRequires byacc
cvsdist f5f8a5
cvsdist 0bd8fc
* Thu Apr 8 2004 Dan Walsh <dwalsh@redhat.com> 1.10-1
cvsdist 0bd8fc
- Upgrade to the latest from NSA
cvsdist 0bd8fc
cvsdist bcdb28
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.8-1
cvsdist bcdb28
- Upgrade to the latest from NSA
cvsdist bcdb28
cvsdist bcdb28
* Mon Feb 24 2004 Dan Walsh <dwalsh@redhat.com> 1.6-1
cvsdist bcdb28
- Upgrade to the latest from NSA
cvsdist bcdb28
cvsdist bcdb28
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
cvsdist bcdb28
- rebuilt
cvsdist bcdb28
cvsdist f2e381
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-6
cvsdist f2e381
- Add typealias patch
cvsdist f2e381
cvsdist f2e381
* Tue Jan 20 2004 Dan Walsh <dwalsh@redhat.com> 1.4-5
cvsdist f2e381
- Update excludetypes with negset-final patch
cvsdist f2e381
cvsdist f2e381
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-4
cvsdist f2e381
- Add excludetypes patch
cvsdist f2e381
cvsdist f2e381
* Wed Jan 14 2004 Dan Walsh <dwalsh@redhat.com> 1.4-3
cvsdist f2e381
- Add Colin Walter's lineno patch
cvsdist f2e381
cvsdist f2e381
* Wed Jan 7 2004 Dan Walsh <dwalsh@redhat.com> 1.4-2
cvsdist f2e381
- Remove check for roles transition
cvsdist f2e381
cvsdist f2e381
* Sat Dec 6 2003 Dan Walsh <dwalsh@redhat.com> 1.4-1
cvsdist f2e381
- upgrade to 1.4
cvsdist f2e381
cvsdist f2e381
* Wed Oct 1 2003 Dan Walsh <dwalsh@redhat.com> 1.2-1
cvsdist f2e381
- upgrade to 1.2
cvsdist f2e381
cvsdist f2e381
* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com> 1.1-2
cvsdist f2e381
- upgrade to 1.1
cvsdist f2e381
cvsdist f2e381
* Mon Jun 2 2003 Dan Walsh <dwalsh@redhat.com> 1.0-1
cvsdist f2e381
- Initial version
cvsdist f2e381