Change log for policycoreutils package in Ubuntu

policycoreutils (3.5-2) unstable; urgency=medium

  * Made fixfiles default to -T0 (threads=cores) Closes: #1042756
  * Added /usr/libexec/selinux/remove-leaf-dirs for use by policy packages

 -- Russell Coker <email address hidden>  Thu, 24 Aug 2023 22:26:45 +1000

Available diffs

• diff from 3.5-1 to 3.5-2 (1.1 KiB)

policycoreutils (3.5-1) unstable; urgency=medium

  * New upstream release
    - debian/control: Bump build-dependencies to match the new release
  * debian/upstream/signing-key.asc: Add public key of Jason Zaman
  * debian/control: Bump Standards-Version to 4.6.2 (no further changes)
  * debian/control: Drop lsb-base from the dependencies, to please lintian
  * debian/policycoreutils.lintian-overrides: Fix override

 -- Laurent Bigonville <email address hidden>  Tue, 11 Jul 2023 08:02:41 +0200

Available diffs

• diff from 3.4-1 to 3.5-1 (90.8 KiB)

policycoreutils (3.4-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * d/newrole.postinst: drop usage of which
  * d/policycoreutils.postrm: remove /.autorelabel on purge

  [ Laurent Bigonville ]
  * New upstream release
    - debian/control: Bump build-dependencies to match the new release
    - debian/patches/fixfiles-remove-extras: Refreshed
  * Enable GPG key validation of the upstream tarball

 -- Laurent Bigonville <email address hidden>  Sun, 05 Jun 2022 01:02:59 +0200

Available diffs

• diff from 3.3-1build1 (in Ubuntu) to 3.4-1 (2.1 MiB)

policycoreutils (3.3-1build1) jammy; urgency=medium

  * No-change rebuild to update maintainer scripts, see LP: 1959054

 -- Dave Jones <email address hidden>  Wed, 16 Feb 2022 17:26:23 +0000

Available diffs

• diff from 3.3-1 (in Debian) to 3.3-1build1 (360 bytes)

policycoreutils (3.3-1) unstable; urgency=medium

  * debian/watch: Update the URL to follow the new tagging format
  * New upstream version 3.3
    - debian/control: Bump build-dependencies to match the new release
    - Drop d/p/fixfiles-correctly-restore-context-of-mountpoints.patch,
      merged upstream
  * debian/policycoreutils.install: Install sestatus in /usr/bin and keep
    symlink in /usr/sbin
  * debian/control: Drop ancient Breaks/Replaces
  * debian/control: Bump Standards-Version to 4.6.0 (no further changes)

 -- Laurent Bigonville <email address hidden>  Mon, 08 Nov 2021 17:28:20 +0100

Available diffs

• diff from 3.1-3 to 3.3-1 (8.5 KiB)

policycoreutils (3.1-3) unstable; urgency=medium

  * Remove needless quotes around $FORCE variable in
    /lib/systemd/selinux-autorelabel to avoid shell error on empty file
    Closes: #983447
  * Add check for noautorelabel command line option to prevent relabeling
    Closes: #922448
  * Make fixfiles avoid trying to relabel tmpfs and other non-permanent
    filesystems
    Closes: #984567

 -- Russell Coker <email address hidden>  Fri, 05 Mar 2021 20:45:24 +1100

Available diffs

• diff from 3.1-2 to 3.1-3 (1.1 KiB)

policycoreutils (3.1-2) unstable; urgency=medium

  [ Laurent Bigonville ]
  * Add debian/gitlab-ci.yml file

  [ Christian Göttsche ]
  * d/local/selinux-autorelabel: Please shellcheck
  * d/gitlab-ci.yml: Use Debian recipe
  * d/control: Bump debhelper compat to level 13
  * d/control: Bump Standards-Version to 4.5.1 (no further changes)
  * d/control: update homepage
  * d/rules: Enable -Wall -Wextra
  * d/control: Convert cute fields
  * d/policycoreutils.maintscript: Drop entry for ancient version
  * d/patches: cherry-pick fixfiles: correctly restore context of mountpoints
    (Closes: #976455)

 -- Laurent Bigonville <email address hidden>  Wed, 10 Feb 2021 16:46:48 +0100

Available diffs

• diff from 3.1-1 to 3.1-2 (3.6 KiB)

policycoreutils (3.1-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Wrap long lines in changelog entries: 1.30.26-2, 1.30-1, 1.28-1.
  * Set debhelper-compat version in Build-Depends.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.5.0, no changes needed.

  [ Laurent Bigonville ]
  * New upstream release
    - debian/control: Bump {build-}dependencies to match the new release
  * debian/control: Set Rules-Requires-Root: no

 -- Laurent Bigonville <email address hidden>  Wed, 15 Jul 2020 11:41:14 +0200

Available diffs

• diff from 3.0-1 to 3.1-1 (6.1 KiB)

policycoreutils (3.0-1) unstable; urgency=medium

  * New upstream release
    - debian/control: Bump {build-}dependencies to match the new release
  * Switch to debhelper compat 12, stop overriding dh_missing
  * debian/control: Bump Standards-Version to 4.4.1 (no further changes)
  * debian/rules: Install the hll compiler in /usr/libexec now that the debian
    policy allows it

 -- Laurent Bigonville <email address hidden>  Thu, 12 Dec 2019 14:40:41 +0100

Available diffs

• diff from 2.9-2 to 3.0-1 (19.8 KiB)

policycoreutils (2.9-2) unstable; urgency=medium

  * Upload to unstable

 -- Laurent Bigonville <email address hidden>  Mon, 08 Jul 2019 09:30:38 +0200

Available diffs

• diff from 2.8-1 to 2.9-2 (20.5 KiB)

policycoreutils (2.8-1) unstable; urgency=medium

  * New upstream release
    - debian/control: Bump {build-}dependencies to match the new release
  * debian/control: Point Vcs-* fields to new (salsa) machine
  * debian/rules: Adjust to match upstream changes to the build system
  * debian/control: Bump Standards-Version to 4.1.4 (no further changes)
  * debian/rules: Use dh_missing --fail-missing instead of dh_install
  * debian/control: Bump the priority of the newrole package to optional,
    priority extra is deprecated

 -- Laurent Bigonville <email address hidden>  Tue, 29 May 2018 17:27:40 +0200

Available diffs

• diff from 2.7-1 to 2.8-1 (6.7 KiB)

policycoreutils (2.7-1) unstable; urgency=medium

  * New upstream release
    - debian/control: Bump {build-}dependencies to match the new release
  * selinux-autorelabel: remove incorrect redirection to /dev/null
  * debian/control: Remove Manoj from the uploader list and add myself
    instead. Thanks to him for all the work in the past.
  * Bump Standards-Version to 4.1.0 (no further changes)
  * Bump debhelper compatibility to 10

 -- Laurent Bigonville <email address hidden>  Sun, 10 Sep 2017 10:30:25 +0200

Available diffs

• diff from 2.6-3 to 2.7-1 (291.0 KiB)

policycoreutils (2.6-3) unstable; urgency=medium

  * Team upload.
  * d/p/Handle-python-error-returns-correctly.patch: Fix a bug that was
    preventing to override file contexts already defined in the policy

 -- Laurent Bigonville <email address hidden>  Tue, 10 Jan 2017 00:56:57 +0100

Available diffs

• diff from 2.6-2 to 2.6-3 (1.4 KiB)

policycoreutils (2.6-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable

 -- Laurent Bigonville <email address hidden>  Mon, 28 Nov 2016 13:19:15 +0100

Available diffs

• diff from 2.5-3 to 2.6-2 (379.3 KiB)

policycoreutils (2.5-3) unstable; urgency=medium

  * Team upload.
  * d/p/Dont_use_subprocess_getstatusoutput_in_Python_2_code.patch: Make the
    python code of chcat and sandbox compatible with both python2 and python3
  * debian/NEWS, debian/control: Fix a typo
  * Merge Fedora changes to the selinux-autorelabel systemd scripts and units.
    We now use a selinux-autorelabel.target and a generator that override the
    default.target in case we need to relabel the filesystems.
  * debian/patches/sandbox-dbus-run-session.patch: Use dbus-run-session
    instead of dbus-launch when available (Closes: #836289)
  * debian/patches/CVE-2016-7545.patch: create a new session for sandboxed
    processes (Closes: #838599 CVE-2016-7545)
  * debian/patches/sandbox-gobject-gtk.patch: Use GTK+ GObject introspection
    bindings instead of old pygtk2 ones
  * debian/patches/sandbox-x-window-manager.patch: Use system default window
    manager instead of openbox

 -- Laurent Bigonville <email address hidden>  Tue, 27 Sep 2016 22:30:28 +0200

Available diffs

• diff from 2.5-2 to 2.5-3 (5.3 KiB)

policycoreutils (2.5-2) unstable; urgency=medium

  * Team upload.
  * Remove the 'debian-' prefix from the selinux-autorelabel LSB script and
    systemd services, not sure why I added it in the first place…

 -- Laurent Bigonville <email address hidden>  Fri, 13 May 2016 22:49:27 +0200

Available diffs

• diff from 2.3-1 to 2.5-2 (148.6 KiB)
• diff from 2.5-1 to 2.5-2 (3.0 KiB)

policycoreutils (2.5-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Drop d/p/0001-legacy.patch, d/p/0016-open-init-pty: new open_init_pty
      has been merged upstream
    - debian/patches/0023-sepolicy-help-path.patch: Refreshed
    - debian/control: Bump {build-}dependencies to match the new release
    - Fix newrole to not drop capabilities from the bounding set. (Closes:
      #813604)
    - Fix crash when python-audit is not installed (Closes: #734806)
  * debian/control: Bump Standards-Version to 3.9.8 (no further changes)
  * debian/control: Update the Vcs-* URL's to please lintian (again)
  * debian/NEWS: Remove duplicate word, thanks to lintian

 -- Laurent Bigonville <email address hidden>  Tue, 26 Apr 2016 14:54:13 +0200

Available diffs

• diff from 2.4-4 to 2.5-1 (140.0 KiB)

policycoreutils (2.4-4) unstable; urgency=medium

  * Team upload.
  * Drop d/p/0009-find-does-not-have-a-context-switch.patch, findutils now
    supports the -context switch, also be sure we have the correct version
    installed.
  * Create the /usr/sbin/load_policy symlink in the postinst script to support
    the everything-in-usr directories scheme. (Closes: #767930)

 -- Laurent Bigonville <email address hidden>  Sun, 24 Jan 2016 12:12:53 +0100

Available diffs

• diff from 2.4-3 to 2.4-4 (1.6 KiB)

policycoreutils (2.4-3) unstable; urgency=medium

  * Team upload.
  * debian/gbp.conf: Sign tags by default
  * debian/control: Drop python-setools dependency, this is not needed anymore
  * debian/rules: Fix FTBFS when building arch-indep packages only (Closes:
    #809122)
  * debian/control: Bump libapol and libqpol build-dependencies to 3.3.8

 -- Laurent Bigonville <email address hidden>  Mon, 28 Dec 2015 14:34:35 +0100

Available diffs

• diff from 2.4-2 to 2.4-3 (915 bytes)

policycoreutils (2.4-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable

 -- Laurent Bigonville <email address hidden>  Thu, 19 Nov 2015 02:02:31 +0100

policycoreutils (2.3-1) unstable; urgency=medium


  * Team upload.
  * New upstream release
    - debian/control: Bump {build-}dependencies to match the new release
    - Drop d/p/0025-restorecon-service.patch, d/p/0024-fix-manpages.patch,
      applied upstream
    - Drop debian/policycoreutils.mcstrans.service, merged upstream
    - debian/policycoreutils.install: Install mcstrans.service from upstream
  * Drop d/p/0002-Made-fixfiles-display-the-progress.patch: the -d flag is
    already passed to restoreconf and setfiles and the patch is breaking the
    verbose mode as -v and -p are mutually exclusive.

 -- Laurent Bigonville <email address hidden>  Sat, 17 May 2014 12:09:09 +0200

Available diffs

• diff from 2.2.5-1 to 2.3-1 (11.6 KiB)

policycoreutils (2.2.5-1) unstable; urgency=medium


  * Team upload.
  * New upstream release
  * debian/control: Bump Standards-Version to 3.9.5 (no further changes)

 -- Laurent Bigonville <email address hidden>  Sun, 29 Dec 2013 14:43:17 +0100

Available diffs

• diff from 2.2.4-1 to 2.2.5-1 (1.4 KiB)

policycoreutils (2.2.4-1) unstable; urgency=low


  * Team upload.
  * New upstream release
    - Drop d/p/0023-semanage_default_encoding.patch: Merged upstream

 -- Laurent Bigonville <email address hidden>  Mon, 02 Dec 2013 20:02:14 +0100

Available diffs

• diff from 2.2.1-1 to 2.2.4-1 (2.3 KiB)

policycoreutils (2.2.1-1) unstable; urgency=low


  * Team upload.
  * New upstream release
    - debian/control: Bump {build-}dependencies to match the release
    - debian/control: Add python-dev, libapol-dev and libqpol-dev to the
      build-depencencies
    - Add new python-sepolicy package
    - d/p/0002-Made-fixfiles-display-the-progress.patch: Refreshed
    - Drop d/p/0004-manpages.patch: Fixed upstream
    - d/p/0005-build-system.patch: Refreshed
    - d/p/0006-default-config.patch: Refreshed
    - d/p/0009-find-does-not-have-a-context-switch.patch: Refreshed
    - Drop d/p/0013-use_dpkg_buildflags.patch: Fixed upstream
    - Drop d/p/0014-po-file-update.patch: .po files are not updated during
      build anymore
    - d/p/0017-no-sandbox: Refreshed
    - d/p/0018-sandbox-config.patch: Refreshed
  * debian/rules: bash-completion script are now properly installed
  * debian/patches/0022-sepolicy-path.patch: Install sepolicy modules in the
    correct location
  * debian/rules: Fix /usr/sbin/load_policy symlink creation
  * debian/rules: Set $SYSTEMDDIR variable to /lib/systemd, so systemd units
    files are installed in the correct directory
  * debian/control, debian/rules: Add calls to dh_systemd tools
  * debian/rules, debian/policycoreutils.install: Pass --destdir option to
    dh_auto_install and list files to install in the package
  * Add debian/patches/0023-semanage_default_encoding.patch: Remove import for
    not upstreamed module
  * Add debian/patches/0024-fix-manpages.patch: Fix some minor manpages issues
  * debian/control: Use canonical URL in VCS-Git field
  * d/p/0025-restorecon-service.patch: Improve restorecond service file

 -- Laurent Bigonville <email address hidden>  Wed, 06 Nov 2013 22:32:23 +0100

Available diffs

• diff from 2.1.13-2 to 2.2.1-1 (4.1 MiB)

policycoreutils (2.1.13-2) unstable; urgency=low


  * Team upload.
  * debian/control:
    - Add gawk to the build-dependencies, this is needed for some manpages
      generation
    - Add python-audit to the Recommends
    - Bump Standards-Version to 3.9.4 (no further changes)

 -- Laurent Bigonville <email address hidden>  Sat, 25 May 2013 01:44:10 +0200

Available diffs

• diff from 2.1.10-9build1 (in Ubuntu) to 2.1.13-2 (2.5 MiB)

policycoreutils (2.1.10-9build1) raring; urgency=low

  * No-change rebuild against libaudit1
 -- Jeremy Bicha <email address hidden>   Mon, 14 Jan 2013 11:30:12 -0500

Available diffs

• diff from 2.1.10-9 (in Debian) to 2.1.10-9build1 (372 bytes)

policycoreutils (2.1.10-9) unstable; urgency=high


  * Revert the munging of setrans.conf which was introduced in 2.1.10-7.
    Closes: #677759
  * Made mcstrans ignore a line containing "s0=" to properly solve the
    original problem.
  * Made the mcstrans init script not return an error when you stop it twice.
  * Included a new version of open_init_pty that doesn't take 100% CPU time.
    Closes: #474956
  * Removed sandbox because it's a new feature that we never had working, also
    removed seunshare because it's not needed and brought in an annoying
    dependency on libcgroup1
    Closes: #678590

 -- Russell Coker <email address hidden>  Tue, 26 Jun 2012 17:22:05 +1000

Available diffs

• diff from 2.1.10-8 to 2.1.10-9 (6.6 KiB)

policycoreutils (2.1.10-8) unstable; urgency=low


  * Drop /selinux directory, we are planning to move to /sys/fs/selinux, and
    it's already created by libselinux1 package anyway.
    From Laurent Bigonville

 -- Russell Coker <email address hidden>  Sat, 16 Jun 2012 23:37:05 +1000

Available diffs

• diff from 2.1.10-6 to 2.1.10-8 (1.0 KiB)

policycoreutils (2.1.0-3ubuntu1.1) precise-proposed; urgency=low

  * Fix FTBFS in precise: (LP: #935368)
    - Define _GNU_SOURCE earlier in seunshare.c
    - Update to multiarch path of libsepol.a
  * debian/policycoreutils.postrm:
    - Remove the rc.d links on purge (LP: #1005398)
 -- Jason Conti <email address hidden>   Mon, 04 Jun 2012 12:09:07 -0400

Available diffs

• diff from 2.1.0-3ubuntu1 to 2.1.0-3ubuntu1.1 (1.2 KiB)

policycoreutils (2.1.10-6) unstable; urgency=low


  * Team upload.
  * debian/control, debian/patches/0013-use_dpkg_buildflags.patch: Enable
    hardening flags for all components of the package (Closes: #665320)
  * debian/control: Fix Vcs-Browser URL
  * debian/patches/0014-po-file-update.patch: Update the po files, this allows
    the package to build twice in a row again (Closes: #662514)
  * debian/rules: Install the right pam files

 -- Laurent Bigonville <email address hidden>  Tue, 27 Mar 2012 17:45:36 +0200

Available diffs

• diff from 2.1.0-3ubuntu1 (in Ubuntu) to 2.1.10-6 (1.0 MiB)

policycoreutils (2.1.0-3ubuntu1) precise; urgency=low

  * Merge from Debian testing (LP: #896730).  Remaining changes:
    - Multiarch support in Makefile (LP: #832802)
    - debian/postinst: move restorecon to a higher startup level.

Available diffs

• diff from 2.0.82-5ubuntu2 to 2.1.0-3ubuntu1 (130.4 KiB)

policycoreutils (2.0.82-5ubuntu2) oneiric; urgency=low

  * Fix FTBFS(LP #832802)
    - Multiarch support in Makefile.
 -- Mitsuya Shibata <email address hidden>   Sun, 25 Sep 2011 12:11:28 +0900

Available diffs

• diff from 2.0.82-5ubuntu1 to 2.0.82-5ubuntu2 (624 bytes)

policycoreutils (2.0.82-5ubuntu1) natty; urgency=low

  * Merge from debian unstable. Remaining change:
    - ebian/postinst: move restorecon to a higher startup level.

Available diffs

• diff from 2.0.82-4ubuntu1 to 2.0.82-5ubuntu1 (656 bytes)

policycoreutils (2.0.82-4ubuntu1) natty; urgency=low

  * Merge from debian unstable.  Remaining changes:
    - debian/postinst: move restorecon to a higher startup level.
 -- Artur Rona <email address hidden>   Sat, 20 Nov 2010 21:00:55 +0100

Available diffs

• diff from 2.0.82-3ubuntu1 to 2.0.82-4ubuntu1 (779 bytes)

policycoreutils (2.0.82-3ubuntu1) maverick; urgency=low

  * Merge from debian unstable. (LP: #612126)  Remaining changes:
    - debian/postinst: move restorecon to a higher startup level.

Available diffs

• diff from 2.0.82-2ubuntu1 to 2.0.82-3ubuntu1 (691 bytes)

policycoreutils (2.0.82-2ubuntu1) maverick; urgency=low

  * Merge from debian unstable.  Remaining changes: LP: #597705
    - debian/postinst: move restorecon to a higher startup level.
 -- Bhavani Shankar <email address hidden>   Fri, 25 Jun 2010 11:37:15 +0530

Available diffs

• diff from 2.0.77-1ubuntu1 to 2.0.82-2ubuntu1 (205.4 KiB)

policycoreutils (2.0.77-1ubuntu1) lucid; urgency=low

  * Merge from Debian testing.  Remaining changes:
    - debian/postinst: move restorecon to a higher startup level.

Available diffs

• diff from 2.0.69-2ubuntu3 to 2.0.77-1ubuntu1 (27.4 KiB)

policycoreutils (2.0.69-2ubuntu3) karmic; urgency=low

  * policycoreutils/restorecond/restorecond.c: handle inotify changes
    if 2.6.31 to fix 100% CPU in restorecond, thanks to Caleb Case and
    Martin Orr (LP: #455739).

 -- Kees Cook <email address hidden>   Mon, 19 Oct 2009 12:37:16 -0700

Available diffs

• diff from 2.0.69-2ubuntu2 to 2.0.69-2ubuntu3 (753 bytes)

policycoreutils (2.0.69-2ubuntu2) karmic; urgency=low

  * Install man pages to /usr/share (LP: #418026).
  * Only use 'seclabel' checking if selinux is enabled (LP: #428043).

 -- Caleb Case <email address hidden>   Fri, 11 Sep 2009 14:26:09 -0400

Available diffs

• diff from 2.0.69-2ubuntu1 to 2.0.69-2ubuntu2 (708 bytes)

policycoreutils (2.0.69-2ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes: LP: #400111
    - load_policy/Makefile, debian/local.mk: move load_policy to /sbin
      ensuring it is available during early boot.
    - restorecond/restorecond.conf: adding more files from the /var/run
      pseudo fs.
    - debian/postinst: move restorecon to a higher startup level.

 -- Bhavani Shankar <email address hidden>   Thu, 20 Aug 2009 19:55:18 +0530

Available diffs

• diff from 2.0.55-1ubuntu1 to 2.0.69-2ubuntu1 (1.0 MiB)

policycoreutils (2.0.55-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - load_policy/Makefile, debian/local.mk: move load_policy to /sbin
      ensuring it is available during early boot.
    - restorecond/restorecond.conf: adding more files from the /var/run
      pseudo fs.
    - debian/postinst: move restorecon to a higher startup level.

Available diffs

• diff from 2.0.49-8ubuntu2 to 2.0.55-1ubuntu1 (10.8 KiB)

policycoreutils (2.0.49-8ubuntu2) jaunty; urgency=low

  * Moving restorecon to a higher startup level.
  * Adding files from the /var/run pseudo fs (LP: #352756).

 -- Caleb Case <email address hidden>   Tue, 31 Mar 2009 11:30:42 -0400

Available diffs

• diff from 2.0.49-8ubuntu1 to 2.0.49-8ubuntu2 (765 bytes)

policycoreutils (2.0.49-8ubuntu1) jaunty; urgency=low

  * Move load_policy to /sbin ensuring it is available at boot (LP: #126415).

 -- Caleb Case <email address hidden>   Tue, 17 Mar 2009 11:57:03 -0400

Available diffs

• diff from 2.0.49-8 to 2.0.49-8ubuntu1 (937 bytes)

policycoreutils (2.0.49-8) unstable; urgency=high

  * [62526b0]: Fix fr.po which causes semanage to fail 
    Bug fix: "list index out of range", thanks to Ezannelli
    This is an RC bug fix (though the severity should not really be
    serious, this is not a policy violation [just a mostly useless package
    for people using the french locale] -- this is a case where a
    flawed po translation was causing a show stopper bug, and should be
    interesting to release managers about how even translations can cause
    show stoppers in some cases)                        (Closes: #506727).

 -- Bhavani Shankar <email address hidden>   Thu,  08 Jan 2009 06:03:42 +0000

Available diffs

• diff from 2.0.49-7 to 2.0.49-8 (2.1 KiB)

policycoreutils (2.0.49-7) unstable; urgency=low

  * [a415013]: Merge branch 'topic--restorecond-init-script' 
   
    restorecond is started in runlevels "S" and 2 3 4 5.  When started in
    "S" it works correctly, but when started by one of the others
    start-stop-daemon exits with code 1 because it's already running. The
    fix was to simply add --oknodo to the start-stop-daemon invocations.
  
    Bug fix: "restorecond is started twice and gives an error on boot",
    thanks to Russell Coker                               (Closes: #506720).
  * [8b0c36a]: Remove a spurious $ sign in the init script 
    Bug fix: "bashism in /bin/sh script", thanks to Raphael Geissert
                                                          (Closes: #486055).
  * [debiandir:1da4d71]: Remove obsolete dependencies 
    This will help in back porting.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  27 Nov 2008 19:27:22 +0000

Available diffs

• diff from 2.0.49-6 to 2.0.49-7 (1.5 KiB)

policycoreutils (2.0.49-6) unstable; urgency=low

  * Fix conflict between LSB header and update-rc.d options (important
    bug).                                                  Closes: #493005

Available diffs

• diff from 2.0.49-2.1 to 2.0.49-6 (2.4 KiB)

policycoreutils (2.0.49-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * Made it recommend the new policy packages.

Available diffs

• diff from 2.0.43-0ubuntu2 to 2.0.49-2.1 (32.1 KiB)

policycoreutils (2.0.43-0ubuntu2) hardy; urgency=low

  * debian/policycoreutils.install, debian/policycoreutils.links:
    - Moved load_policy from /usr/sbin to /sbin and added symlink (LP: #126415).

 -- Caleb Case <email address hidden>   Fri, 29 Feb 2008 12:26:07 -0500

policycoreutils (2.0.43-0ubuntu1) hardy; urgency=low

  [ Caleb Case ]
  * New upstream SVN HEAD
   + Merged support for non-interactive newrole command invocation from
     Tim Reed.
   + Update Makefile to not build restorecond if
     /usr/include/sys/inotify.h is not present
   + Drop verbose output on fixfiles -C from Dan Walsh.
   + Fix argument handling in fixfiles from Dan Walsh.
   + Enhance boolean support in semanage, including using the .xml
     description when available, from Dan Walsh.
   + load_policy initial load option from Chad Sellers.
   + Fix semodule option handling from Dan Walsh.
   + Add deleteall support for ports and fcontexts in semanage from Dan
     Walsh.
   + Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
   + Update semodule man page for -D from Dan Walsh.
   + Add boolean, locallist, deleteall, and store support to semanage
     from Dan Walsh.
   + Improve semodule reporting of system errors from Stephen Smalley.
   + Fix setfiles selabel option flag setting for 64-bit from Stephen
     Smalley.
   + Remove genhomedircon script (functionality is now provided
     within libsemanage) from Todd Miller.
   + Fix genhomedircon searching for USER from Todd Miller
   + Install run_init with mode 0755 from Dan Walsh.
   + Fix chcat from Dan Walsh.
   + Fix fixfiles pattern expansion and error reporting from Dan Walsh.
   + Optimize genhomedircon to compile regexes once from Dan Walsh.
   + Fix semanage gettext call from Dan Walsh.
   + Disable dontaudits via semodule -D
   + Rebase setfiles to use new labeling interface.
   + Fixed setsebool (falling through to error path on success).
   + Merged genhomedircon fixes from Dan Walsh.
   + Merged setfiles -c usage fix from Dan Walsh.
   + Merged restorecon fix from Yuichi Nakamura.
   + Dropped -lsepol where no longer needed.
   + Merge newrole support for alternate pam configs from Ted X Toth.
   + Merged merging of restorecon into setfiles from Stephen Smalley.
   + Merged genhomedircon fix to find conflicting directories correctly
     from Dan Walsh.
  * debian/policycoreutils.restorecon.init
    * Removing improper '$'

  [ Joseph Jackson IV ]
  * debian/control
    - Update Debian Maintainer field

 -- Caleb Case <email address hidden>   Sat, 09 Feb 2008 21:36:48 -0500

policycoreutils (2.0.16-1) unstable; urgency=low

  * New upstream SVN HEAD
   + Merged updates to sepolgen-ifgen from Karl MacMillan.
   +  Merged seobject setransRecords patch to return the first alias from
      Xavier Toth. 
   + Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon
     patches from Dan Walsh. 
   + Dropped -b option from load_policy in preparation for always
     preserving booleans across reloads in the kernel. 
   + Merged genhomedircon patch to use the __default__ setting from Dan
     Walsh. 
   + Merged setsebool patch to only use libsemanage for persistent boolean
     changes from Stephen Smalley. 
   + Build fix for setsebool.
   + Merged move of audit2why to /usr/bin from Dan Walsh.
   + Merged support for modifying the prefix via semanage from Dan Walsh.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  08 May 2007 07:58:07 +0100

policycoreutils (2.0.7-1) unstable; urgency=low

  * New upstream trunk release
    * Merged sepolgen and audit2allow patches to leave generated files in
      the current directory from Karl MacMillan. 
    * Merged small fix to correct include of errcodes.h in semodule_deps
      from Dan Walsh. 
    * Merged new audit2allow from Karl MacMillan. This audit2allow depends
      on the new sepolgen python module. Note that you must run the
      sepolgen-ifgen tool to generate the data needed by audit2allow to
      generate refpolicy. 
  
  * Added build and runtime dependencies on sepolgen
  * Fixed watch file to correctly reflect the fact that this is the trunk
    version. 

policycoreutils (1.32-1) unstable; urgency=low

  * New upstream release
    * Merged newrole auditing of failures due to user actions from Michael
      Thompson. 
    * Merged audit2allow -l fix from Yuichi Nakamura.
    * Merged restorecon -i and -o - support from Karl MacMillan.
    * Merged semanage/seobject fix from Dan Walsh.
    * Merged fixfiles -R and verify changes from Dan Walsh.
    * Updated version for release. 
  * Bug fix: "/sbin/fixfiles: bash-ism in /sbin/fixfiles", thanks to Paul
    Cupis                                                  (Closes: #391674).

policycoreutils (1.30-2) unstable; urgency=low

  * Bug fix: "policycoreutils - FTBFS: error: 'SEMANAGE_CAN_READ'
    undeclared", thanks to Bastian Blank. Tighten dependency on
    libsemanage1-dev                                (Closes: #361903).

policycoreutils (1.28-3) unstable; urgency=low


  * Furthe changes to build dependencies; we now need python 2.4, since we
    use the selinux and semanage python bindings.

 -- Manoj Srivastava <email address hidden>  Sun,  1 Jan 2006 18:27:15 -0600

policycoreutils (1.28-2) unstable; urgency=low


  * Fix build dependencies; remove debian revisions from the dependency
    relations to facilitate backports.

 -- Manoj Srivastava <email address hidden>  Sat, 31 Dec 2005 14:20:08 -0600

policycoreutils (1.28-1) unstable; urgency=low


  * New upstream release
    * Updated version for release.
    * Clarified the genhomedircon warning message.
    * Changed genhomedircon to warn on use of ROLE in homedir_template
      if using managed policy, as libsemanage does not yet support it.
    * Merged genhomedircon bug fix from Dan Walsh.
    * Revised semodule* man pages to refer to checkmodule and
      to include example sections.
    * Merged audit2allow --tefile and --fcfile support from Dan Walsh.
    * Merged genhomedircon fix from Dan Walsh.
    * Merged semodule* man pages from Dan Walsh, and edited them.
    * Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
      retain validation/canonicalization of contexts during init.
    * Changed genhomedircon to always use user_r for the role in the
      managed case since user_get_defrole is broken.
    * Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
    * Fixed semodule -v option.
    * Merged audit2allow python script from Dan Walsh.
      (old script moved to audit2allow.perl, will be removed later).
    * Merged genhomedircon fixes from Dan Walsh.
    * Merged semodule quieting patch from Dan Walsh
      (inverts default, use -v to restore original behavior).
    * Merged genhomedircon rewrite from Dan Walsh.
    * Merged setsebool cleanup patch from Ivan Gyurdiev.
    * Added -B (--build) option to semodule to force a rebuild.
    * Reverted setsebool patch to call semanage_set_reload_bools().
    * Changed setsebool to disable policy reload and to call
      security_set_boolean_list to update the runtime booleans.
    * Changed setfiles -c to use new flag to set_matchpathcon_flags()
      to disable context translation by matchpathcon_init().
    * Changed setfiles for the context canonicalization support.
    * Changed setsebool to call semanage_is_managed() interface
      and fall back to security_set_boolean_list() if policy is
      not managed.
    * Merged setsebool memory leak fix from Ivan Gyurdiev.
    * Merged setsebool patch to call semanage_set_reload_bools()
      interface from Ivan Gyurdiev.
    * Merged setsebool patch from Ivan Gyurdiev.
      This moves setsebool from libselinux/utils to policycoreutils,
      and rewrites it to use libsemanage for permanent boolean changes.
    * Merged semodule support for reload, noreload, and store options
      from Joshua Brindle.
    * Merged semodule_package rewrite from Joshua Brindle.
    * Cleaned up usage and error messages and releasing of memory by
      semodule_* utilities.
    * Corrected error reporting by semodule.
    * Updated semodule_expand for change to sepol interface.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.
    * Updated semodule_package for sepol interface changes.
    * Updated semodule_expand/link for sepol interface changes.
    * Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.
    * Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
    * Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
    * Merged fixfiles patch from Dan Walsh (Red Hat).
    * Updated semodule for removal of semanage_strerror.
    * Updated semodule_link and semodule_expand to use shared libsepol.
    Fixed audit2why to call policydb_init prior to policydb_read (still
    uses the static libsepol).
  * Bug fix: "policycoreutils: doesn't remove /usr/sbin/setfiles.old on
    purge", thanks to Lars Wirzenius                     (Closes: #341418).

 -- Manoj Srivastava <email address hidden>  Fri, 30 Dec 2005 00:56:01 -0600

policycoreutils (1.26-1) unstable; urgency=low


  * New upstream release
     * Updated version for release.
     * Changed setfiles -c to translate the context to raw format
       prior to calling libsepol.
     * Changed semodule to report errors even without -v,
       to detect extraneous arguments, and corrected usage message.	
     * Merged patch for fixfiles -C from Dan Walsh.
     * Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
       Bugs found by Coverity.
     * Merged patch to move module read/write code from libsemanage
       to libsepol from Jason Tang (Tresys).
     * Changed semodule* to link with libsemanage.
     * Merged restorecon patch from Ivan Gyurdiev.
     * Merged load_policy, newrole, and genhomedircon patches from Red Hat.
     * Merged loadable module support from Tresys Technology.
  * Updated build depends.                                  (Closes: #326153).
  * policycoreutils: run_init blocks sigCHLD but doesn't unblock it before
    exec, thanks to Erich Schubert                          (Closes: #326152).

 -- Manoj Srivastava <email address hidden>  Thu, 15 Sep 2005 01:06:11 -0500

policycoreutils (1.22+0-2) unstable; urgency=low


  * New upstream release
  * Bug fix: "policycoreutils: package description typo(s) and the like",
    thanks to Florian Zumbiehl                         (Closes: #300054).

 -- Manoj Srivastava <email address hidden>  Thu, 17 Mar 2005 19:54:20 -0600

policycoreutils (1.24-1) unstable; urgency=low


  * New upstream release
        * Updated version for release.
        * Merged fixfiles and newrole patch from Dan Walsh.
        * Merged audit2why man page from Dan Walsh.
        * Extended audit2why to incorporate booleans and local user 
          settings when analyzing audit messages.
        * Updated audit2why for sepol_ prefixes on Flask types to
          avoid namespace collision with libselinux, and to 
          include <selinux/selinux.h> now.
        * Added audit2why utility.
        * Merged patch for fixfiles from Dan Walsh.
          Allow passing -F to force reset of customizable contexts.
        * Fixed signed/unsigned pointer bug in load_policy.
        * Reverted context validation patch for genhomedircon.
        * Reverted load_policy is_selinux_enabled patch from Dan Walsh.
          Otherwise, an initial policy load cannot be performed using
          load_policy, e.g. for anaconda.
        * Merged load_policy is_selinux_enabled patch from Dan Walsh.
        * Merged restorecon verbose output patch from Dan Walsh.
        * Merged setfiles altroot patch from Chris PeBenito.
        * Merged context validation patch for genhomedircon from Eric Paris.
        * Changed setfiles -c to call set_matchpathcon_flags(3) to
          turn off processing of .homedirs and .local.
        * Merged rewrite of genhomedircon by Eric Paris.
        * Changed fixfiles to relabel jfs since it now supports security xattrs
          (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
          fixed support for reiserfs and selinux.

 -- Manoj Srivastava <email address hidden>  Mon, 27 Jun 2005 16:00:56 -0500

policycoreutils (1.18-1) unstable; urgency=low


  * New upstream version.  Setfiles now works with policy Makefile.

 -- Russell Coker <email address hidden>  Sat,  6 Nov 2004 02:31:00 +1100

policycoreutils (1.12-5) unstable; urgency=low


  * Add better error messages to genhomedircon and make it not abort when only
    one role is specified for a user without {}.

 -- Russell Coker <email address hidden>  Sun, 20 Jun 2004 14:03:00 +1000