/[gentoo-x86]/sec-policy/selinux-base-policy/ChangeLog
Gentoo

Contents of /sec-policy/selinux-base-policy/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.42 - (show annotations) (download)
Thu Sep 8 01:34:14 2005 UTC (8 years, 10 months ago) by pebenito
Branch: MAIN
Changes since 1.41: +5 -1 lines
mark stable
(Portage version: 2.0.51.22-r2)

1 # ChangeLog for sec-policy/selinux-base-policy
2 # Copyright 2000-2005 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.41 2005/08/21 19:26:43 pebenito Exp $
4
5 08 Sep 2005; Chris PeBenito <pebenito@gentoo.org>
6 selinux-base-policy-20050821.ebuild:
7 Mark stable.
8
9 *selinux-base-policy-20050821 (21 Aug 2005)
10
11 21 Aug 2005; Chris PeBenito <pebenito@gentoo.org>
12 +selinux-base-policy-20050821.ebuild:
13 Minor updates for 2.6.12.
14
15 21 Jun 2005; Chris PeBenito <pebenito@gentoo.org>
16 selinux-base-policy-20050618.ebuild:
17 Mark stable.
18
19 *selinux-base-policy-20050618 (18 Jun 2005)
20
21 18 Jun 2005; Chris PeBenito <pebenito@gentoo.org>
22 -selinux-base-policy-20041123.ebuild,
23 -selinux-base-policy-20050306.ebuild,
24 +selinux-base-policy-20050618.ebuild:
25 New release to support 2.6.12 features.
26
27 10 May 2005; Stephen Bennett <spb@gentoo.org>
28 selinux-base-policy-20050322.ebuild:
29 mips stable
30
31 01 May 2005; Stephen Bennett <spb@gentoo.org>
32 selinux-base-policy-20050322.ebuild:
33 Added ~mips.
34
35 *selinux-base-policy-20050322 (23 Mar 2005)
36
37 23 Mar 2005; Chris PeBenito <pebenito@gentoo.org>
38 +selinux-base-policy-20050322.ebuild:
39 New release.
40
41 *selinux-base-policy-20050306 (06 Mar 2005)
42
43 06 Mar 2005; Chris PeBenito <pebenito@gentoo.org>
44 +selinux-base-policy-20050306.ebuild:
45 Fix bad samba_domain dummy macro. Add policies needed for udev support.
46
47 *selinux-base-policy-20050224 (24 Feb 2005)
48
49 24 Feb 2005; Chris PeBenito <pebenito@gentoo.org>
50 +selinux-base-policy-20050224.ebuild:
51 New release.
52
53 19 Jan 2005; Chris PeBenito <pebenito@gentoo.org>
54 selinux-base-policy-20041123.ebuild:
55 Mark stable.
56
57 *selinux-base-policy-20041123 (23 Nov 2004)
58
59 23 Nov 2004; Chris PeBenito <pebenito@gentoo.org>
60 +selinux-base-policy-20041123.ebuild:
61 New release with 1.18 merge.
62
63 *selinux-base-policy-20041023 (23 Oct 2004)
64
65 23 Oct 2004; Chris PeBenito <pebenito@gentoo.org>
66 +selinux-base-policy-20041023.ebuild:
67 New release with 1.16 merge. Tcpd and inetd have been deprecated since they
68 are not in the base system anymore, and probably no one uses them anyway.
69
70 *selinux-base-policy-20040906 (06 Sep 2004)
71
72 06 Sep 2004; Chris PeBenito <pebenito@gentoo.org>
73 +selinux-base-policy-20040906.ebuild:
74 New release with 1.14 merge, which has policy 18 (fine-grained netlink)
75 features.
76
77 05 Sep 2004; Chris PeBenito <pebenito@gentoo.org>
78 selinux-base-policy-20040225.ebuild, -selinux-base-policy-20040509.ebuild,
79 -selinux-base-policy-20040604.ebuild, selinux-base-policy-20040629.ebuild,
80 selinux-base-policy-20040702.ebuild:
81 Remove old builds, switch to epause and ebeep in remaining builds.
82
83 *selinux-base-policy-20040702 (02 Jul 2004)
84
85 02 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
86 +selinux-base-policy-20040702.ebuild:
87 Same as 20040629, except with updated flask headers, which will come out in
88 2.6.8.
89
90 *selinux-base-policy-20040629 (29 Jun 2004)
91
92 29 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
93 +selinux-base-policy-20040629.ebuild:
94 Large sysadmfile cleanup: disable admin_separation to give sysadm_r back its
95 ablility to modify all files. Minor fixes: portage_r works again, syslog-ng
96 breakage fixed, put back manual PaX policy for pageexec/segmexec.
97
98 16 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
99 selinux-base-policy-20040604.ebuild:
100 Mark stable.
101
102 10 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
103 selinux-base-policy-20040225.ebuild, selinux-base-policy-20040509.ebuild,
104 selinux-base-policy-20040604.ebuild:
105 Add src_compile() stub
106
107 *selinux-base-policy-20040604 (04 Jun 2004)
108
109 04 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
110 +selinux-base-policy-20040604.ebuild:
111 New release including 1.12 NSA policy, and experimental sesandbox.
112
113 15 May 2004; Chris PeBenito <pebenito@gentoo.org>
114 selinux-base-policy-20040509.ebuild:
115 Mark stable.
116
117 *selinux-base-policy-20040509 (09 May 2004)
118
119 09 May 2004; Chris PeBenito <pebenito@gentoo.org>
120 +selinux-base-policy-20040509.ebuild:
121 A few small cleanups. Make PaX non exec pages macro based on arch. Large
122 portage update, get rid of portage_exec_fetch_t, portage will setexec. Add
123 global_ssp tunable.
124
125 *selinux-base-policy-20040418 (18 Apr 2004)
126
127 18 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
128 +selinux-base-policy-20040418.ebuild:
129 New release for checkpolicy 1.10
130
131 *selinux-base-policy-20040414 (14 Apr 2004)
132
133 14 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
134 -selinux-base-policy-20040408.ebuild, +selinux-base-policy-20040414.ebuild:
135 Minor updates
136
137 *selinux-base-policy-20040408 (08 Apr 2004)
138
139 08 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
140 selinux-base-policy-20040408.ebuild:
141 New update. Users.fc is now deprecated, as the contexts for user directories
142 is now automatically generated. Portage fetching of distfiles now has a
143 subdomain, for dropping priviledges.
144
145 28 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
146 selinux-base-policy-20040225.ebuild:
147 Mark stable.
148
149 *selinux-base-policy-20040225 (25 Feb 2004)
150
151 25 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
152 selinux-base-policy-20040225.ebuild:
153 New support for PaX ACL hooks. Addition of tunable.te for configurable policy
154 options. Rewrite of portage.te. Now auto-transition for sysadm is default, can
155 reenable portage_r by tunable.te. Makefile update from NSA CVS.
156
157 *selinux-base-policy-20040209 (09 Feb 2004)
158
159 09 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
160 selinux-base-policy-20040209.ebuild:
161 Minor revision to add XFS labeling and policy for integrated
162 runscript-run_init.
163
164 07 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
165 selinux-base-policy-20040202.ebuild:
166 Mark x86 stable.
167
168 *selinux-base-policy-20040202 (02 Feb 2004)
169
170 02 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
171 selinux-base-policy-20040202.ebuild:
172 A few misc fixes. Allow portage to update bootloader code, such as in lilo or
173 grub postinst. This requires checkpolicy 1.4-r1.
174
175 *selinux-base-policy-20031225 (25 Dec 2003)
176
177 25 Dec 2003; Chris PeBenito <pebenito@gentoo.org>
178 selinux-base-policy-20031225.ebuild:
179 New release, with merged NSA 1.4 policy. One critical note, this policy
180 requires pam 0.77. Much work has been done to minimize access to /etc/shadow,
181 and one requirement is in the patch for pam 0.77. If you do not use this pam
182 version or newer, you will be unable to authenticate in enforcing. Since
183 devfs no longer is usable in SELinux, it's policy has been removed. You
184 should merge the changes, remove the devfsd policy (devfsd.te and devfsd.fc),
185 load the policy, and relabel.
186
187 27 Nov 2003; Chris PeBenito <pebenito@gentoo.org>
188 selinux-base-policy-20031010-r1.ebuild:
189 Mark stable. Add build USE flag for stage building.
190
191 *selinux-base-policy-20031010-r1 (12 Nov 2003)
192
193 12 Nov 2003; Chris PeBenito <pebenito@gentoo.org>
194 selinux-base-policy-20031010-r1.ebuild,
195 files/selinux-base-policy-20031010-cvs.diff:
196 Add fixes from policy cvs for compilers, so non x86 and ppc compilers can
197 work. Also portage update as a side effect of updated setfiles code in
198 portage, from bug 31748.
199
200 28 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
201 selinux-base-policy-20031010.ebuild:
202 Mark stable
203
204 *selinux-base-policy-20031010 (10 Oct 2003)
205
206 10 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
207 selinux-base-policy-20031010.ebuild:
208 New release for new API. Massive cleanups all over the place.
209
210 *selinux-base-policy-20030817 (17 Aug 2003)
211
212 17 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
213 selinux-base-policy-20030817.ebuild:
214 Initial commit of new API policy
215
216 10 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
217 selinux-base-policy-20030729-r1.ebuild:
218 Mark stable
219
220 *selinux-base-policy-20030729-r1 (31 Jul 2003)
221
222 31 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
223 selinux-base-policy-20030729-r1.ebuild:
224 New rev that handles an empty POLICYDIR sanely.
225
226 *selinux-base-policy-20030729 (29 Jul 2003)
227
228 29 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
229 selinux-base-policy-20030729.ebuild:
230 Make the ebuild use POLICYDIR. Important fix so portage can load policy so
231 selinux-policy.eclass works. update_modules_t cleanup. Fix for an access when
232 merging baselayout.
233
234 *selinux-base-policy-20030720 (20 Jul 2003)
235
236 20 Jul 2003; Chris PeBenito <pebenito@gentoo.org>
237 selinux-base-policy-20030720.ebuild:
238 Many fixes, including the syslog fix. File contexts have changed, so a relabel
239 is needed. You may encounter problems relabeling /usr/portage, as its file
240 context has changed, as files should not have the same type as a domain.
241 Relabelling in permissive will fix this, or temporarily give portage_t a
242 file_type attribute. Tightened the can_exec_any() macro. Moved staff.fc to
243 users.fc, since all users with SELinux identities should have their home
244 directories have the correct identity, not the generic identity.
245
246 06 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
247 selinux-base-policy-20030604.ebuild:
248 Mark stable
249
250 *selinux-base-policy-20030604 (04 Jun 2003)
251
252 04 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
253 selinux-base-policy-20030604.ebuild:
254 Fix broken 20030603
255
256 04 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
257 selinux-base-policy-20030603.ebuild:
258 Pulling 20030603, as there are problems, 20030604 later today
259
260 *selinux-base-policy-20030603 (03 Jun 2003)
261
262 03 Jun 2003; Chris PeBenito <pebenito@gentoo.org>
263 selinux-base-policy-20030603.ebuild:
264 Numerous various fixes. Added staff role. Removed ipsec, gpm and gpg policies
265 as they are not appropriate for the base policy, and untested.
266
267 *selinux-base-policy-20030522 (22 May 2003)
268
269 22 May 2003; Chris PeBenito <pebenito@gentoo.org>
270 selinux-base-policy-20030522.ebuild:
271 The policy is in pretty good shape now. I've been able to run in enforcing mode
272 with little problem. I've also been able to successfully merge and unmerge
273 packages in enforcing mode, with few exceptions (why does mysql need to run ps
274 during configure?).
275
276 *selinux-base-policy-20030514 (14 May 2003)
277
278 14 May 2003; Chris PeBenito <pebenito@gentoo.org>
279 selinux-base-policy-20030514.ebuild:
280 Many improvements in many areas. Of note, rlogind policies were removed. Klogd
281 is being merged into syslogd. The portage policy is much more complete, but
282 still needs work. Its suggested that all changes be merged in, policy
283 reloaded, then relabel.
284
285 *selinux-base-policy-20030419 (19 Apr 2003)
286
287 23 Apr 2003; Chris PeBenito <pebenito@gentoo.org>
288 selinux-base-policy-20030419.ebuild:
289 Marking stable for selinux-small stable usage
290
291 19 Apr 2003; Chris PeBenito <pebenito@gentoo.org> Manifest,
292 selinux-base-policy-20030419.ebuild:
293 Initial commit. Base policies for SELinux, with Gentoo-specifics

  ViewVC Help
Powered by ViewVC 1.1.20