| 1 |
# ChangeLog for sec-policy/selinux-base-policy
|
| 2 |
# Copyright 2000-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2
|
| 3 |
# $Header: /home/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.21 2004/05/10 01:38:36 pebenito Exp $
|
| 4 |
|
| 5 |
15 May 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 6 |
selinux-base-policy-20040509.ebuild:
|
| 7 |
Mark stable.
|
| 8 |
|
| 9 |
*selinux-base-policy-20040509 (09 May 2004)
|
| 10 |
|
| 11 |
09 May 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 12 |
+selinux-base-policy-20040509.ebuild:
|
| 13 |
A few small cleanups. Make PaX non exec pages macro based on arch. Large
|
| 14 |
portage update, get rid of portage_exec_fetch_t, portage will setexec. Add
|
| 15 |
global_ssp tunable.
|
| 16 |
|
| 17 |
*selinux-base-policy-20040418 (18 Apr 2004)
|
| 18 |
|
| 19 |
18 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 20 |
+selinux-base-policy-20040418.ebuild:
|
| 21 |
New release for checkpolicy 1.10
|
| 22 |
|
| 23 |
*selinux-base-policy-20040414 (14 Apr 2004)
|
| 24 |
|
| 25 |
14 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 26 |
-selinux-base-policy-20040408.ebuild, +selinux-base-policy-20040414.ebuild:
|
| 27 |
Minor updates
|
| 28 |
|
| 29 |
*selinux-base-policy-20040408 (08 Apr 2004)
|
| 30 |
|
| 31 |
08 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 32 |
selinux-base-policy-20040408.ebuild:
|
| 33 |
New update. Users.fc is now deprecated, as the contexts for user directories
|
| 34 |
is now automatically generated. Portage fetching of distfiles now has a
|
| 35 |
subdomain, for dropping priviledges.
|
| 36 |
|
| 37 |
28 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 38 |
selinux-base-policy-20040225.ebuild:
|
| 39 |
Mark stable.
|
| 40 |
|
| 41 |
*selinux-base-policy-20040225 (25 Feb 2004)
|
| 42 |
|
| 43 |
25 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 44 |
selinux-base-policy-20040225.ebuild:
|
| 45 |
New support for PaX ACL hooks. Addition of tunable.te for configurable policy
|
| 46 |
options. Rewrite of portage.te. Now auto-transition for sysadm is default, can
|
| 47 |
reenable portage_r by tunable.te. Makefile update from NSA CVS.
|
| 48 |
|
| 49 |
*selinux-base-policy-20040209 (09 Feb 2004)
|
| 50 |
|
| 51 |
09 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 52 |
selinux-base-policy-20040209.ebuild:
|
| 53 |
Minor revision to add XFS labeling and policy for integrated
|
| 54 |
runscript-run_init.
|
| 55 |
|
| 56 |
07 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 57 |
selinux-base-policy-20040202.ebuild:
|
| 58 |
Mark x86 stable.
|
| 59 |
|
| 60 |
*selinux-base-policy-20040202 (02 Feb 2004)
|
| 61 |
|
| 62 |
02 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
|
| 63 |
selinux-base-policy-20040202.ebuild:
|
| 64 |
A few misc fixes. Allow portage to update bootloader code, such as in lilo or
|
| 65 |
grub postinst. This requires checkpolicy 1.4-r1.
|
| 66 |
|
| 67 |
*selinux-base-policy-20031225 (25 Dec 2003)
|
| 68 |
|
| 69 |
25 Dec 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 70 |
selinux-base-policy-20031225.ebuild:
|
| 71 |
New release, with merged NSA 1.4 policy. One critical note, this policy
|
| 72 |
requires pam 0.77. Much work has been done to minimize access to /etc/shadow,
|
| 73 |
and one requirement is in the patch for pam 0.77. If you do not use this pam
|
| 74 |
version or newer, you will be unable to authenticate in enforcing. Since
|
| 75 |
devfs no longer is usable in SELinux, it's policy has been removed. You
|
| 76 |
should merge the changes, remove the devfsd policy (devfsd.te and devfsd.fc),
|
| 77 |
load the policy, and relabel.
|
| 78 |
|
| 79 |
27 Nov 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 80 |
selinux-base-policy-20031010-r1.ebuild:
|
| 81 |
Mark stable. Add build USE flag for stage building.
|
| 82 |
|
| 83 |
*selinux-base-policy-20031010-r1 (12 Nov 2003)
|
| 84 |
|
| 85 |
12 Nov 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 86 |
selinux-base-policy-20031010-r1.ebuild,
|
| 87 |
files/selinux-base-policy-20031010-cvs.diff:
|
| 88 |
Add fixes from policy cvs for compilers, so non x86 and ppc compilers can
|
| 89 |
work. Also portage update as a side effect of updated setfiles code in
|
| 90 |
portage, from bug 31748.
|
| 91 |
|
| 92 |
28 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 93 |
selinux-base-policy-20031010.ebuild:
|
| 94 |
Mark stable
|
| 95 |
|
| 96 |
*selinux-base-policy-20031010 (10 Oct 2003)
|
| 97 |
|
| 98 |
10 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 99 |
selinux-base-policy-20031010.ebuild:
|
| 100 |
New release for new API. Massive cleanups all over the place.
|
| 101 |
|
| 102 |
*selinux-base-policy-20030817 (17 Aug 2003)
|
| 103 |
|
| 104 |
17 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 105 |
selinux-base-policy-20030817.ebuild:
|
| 106 |
Initial commit of new API policy
|
| 107 |
|
| 108 |
10 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 109 |
selinux-base-policy-20030729-r1.ebuild:
|
| 110 |
Mark stable
|
| 111 |
|
| 112 |
*selinux-base-policy-20030729-r1 (31 Jul 2003)
|
| 113 |
|
| 114 |
31 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 115 |
selinux-base-policy-20030729-r1.ebuild:
|
| 116 |
New rev that handles an empty POLICYDIR sanely.
|
| 117 |
|
| 118 |
*selinux-base-policy-20030729 (29 Jul 2003)
|
| 119 |
|
| 120 |
29 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 121 |
selinux-base-policy-20030729.ebuild:
|
| 122 |
Make the ebuild use POLICYDIR. Important fix so portage can load policy so
|
| 123 |
selinux-policy.eclass works. update_modules_t cleanup. Fix for an access when
|
| 124 |
merging baselayout.
|
| 125 |
|
| 126 |
*selinux-base-policy-20030720 (20 Jul 2003)
|
| 127 |
|
| 128 |
20 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 129 |
selinux-base-policy-20030720.ebuild:
|
| 130 |
Many fixes, including the syslog fix. File contexts have changed, so a relabel
|
| 131 |
is needed. You may encounter problems relabeling /usr/portage, as its file
|
| 132 |
context has changed, as files should not have the same type as a domain.
|
| 133 |
Relabelling in permissive will fix this, or temporarily give portage_t a
|
| 134 |
file_type attribute. Tightened the can_exec_any() macro. Moved staff.fc to
|
| 135 |
users.fc, since all users with SELinux identities should have their home
|
| 136 |
directories have the correct identity, not the generic identity.
|
| 137 |
|
| 138 |
06 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 139 |
selinux-base-policy-20030604.ebuild:
|
| 140 |
Mark stable
|
| 141 |
|
| 142 |
*selinux-base-policy-20030604 (04 Jun 2003)
|
| 143 |
|
| 144 |
04 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 145 |
selinux-base-policy-20030604.ebuild:
|
| 146 |
Fix broken 20030603
|
| 147 |
|
| 148 |
04 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 149 |
selinux-base-policy-20030603.ebuild:
|
| 150 |
Pulling 20030603, as there are problems, 20030604 later today
|
| 151 |
|
| 152 |
*selinux-base-policy-20030603 (03 Jun 2003)
|
| 153 |
|
| 154 |
03 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 155 |
selinux-base-policy-20030603.ebuild:
|
| 156 |
Numerous various fixes. Added staff role. Removed ipsec, gpm and gpg policies
|
| 157 |
as they are not appropriate for the base policy, and untested.
|
| 158 |
|
| 159 |
*selinux-base-policy-20030522 (22 May 2003)
|
| 160 |
|
| 161 |
22 May 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 162 |
selinux-base-policy-20030522.ebuild:
|
| 163 |
The policy is in pretty good shape now. I've been able to run in enforcing mode
|
| 164 |
with little problem. I've also been able to successfully merge and unmerge
|
| 165 |
packages in enforcing mode, with few exceptions (why does mysql need to run ps
|
| 166 |
during configure?).
|
| 167 |
|
| 168 |
*selinux-base-policy-20030514 (14 May 2003)
|
| 169 |
|
| 170 |
14 May 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 171 |
selinux-base-policy-20030514.ebuild:
|
| 172 |
Many improvements in many areas. Of note, rlogind policies were removed. Klogd
|
| 173 |
is being merged into syslogd. The portage policy is much more complete, but
|
| 174 |
still needs work. Its suggested that all changes be merged in, policy
|
| 175 |
reloaded, then relabel.
|
| 176 |
|
| 177 |
*selinux-base-policy-20030419 (19 Apr 2003)
|
| 178 |
|
| 179 |
23 Apr 2003; Chris PeBenito <pebenito@gentoo.org>
|
| 180 |
selinux-base-policy-20030419.ebuild:
|
| 181 |
Marking stable for selinux-small stable usage
|
| 182 |
|
| 183 |
19 Apr 2003; Chris PeBenito <pebenito@gentoo.org> Manifest,
|
| 184 |
selinux-base-policy-20030419.ebuild:
|
| 185 |
Initial commit. Base policies for SELinux, with Gentoo-specifics
|
| 186 |
|
Parent Directory
| 
Revision Log