Changelog

   1 - Tunable connection to postgresql for users from KaiGai Kohei.
   2 - Memprotect support patch from Stephen Smalley.
   3 - Add logging_send_audit_msgs() interface and deprecate
   4   send_audit_msgs_pattern().
   5 - Openct updates patch from Dan Walsh.
   6 - Merge restorecon into setfiles.
   7 - Patch to begin separating out hald helper programs from Dan Walsh.
   8 - Fixes for squid, dovecot, and snmp from Dan Walsh.
   9 - Miscellaneous consolekit fixes from Dan Walsh.
  10 - Patch to have avahi use the nsswitch interface rather than individual
  11   permissions from Dan Walsh.
  12 - Patch to dontaudit logrotate searching avahi pid directory from Dan Walsh.
  13 - Patch to allow insmod to mount kvmfs and dontaudit rw unconfined_t pipes
  14   to handle usage from userhelper from Dan Walsh.
  15 - Patch to allow amavis to read spamassassin libraries from Dan Walsh.
  16 - Patch to allow slocate to getattr other filesystems and directories on those
  17   filesystems from Dan Walsh.
  18 - Fixes for RHEL4 from the CLIP project.
  19 - Replace the old lrrd fc entries with munin ones.
  20 - Move program admin template usage out of userdom_admin_user_template() to
  21   sysadm policy in userdomain.te to fix usage of the template for third
  22   parties.
  23 - Fix clockspeed_run_cli() declaration, it was incorrectly defined as a
  24   template instead of an interface.
  25 - Added modules:
  26         amtu (Dan Walsh)
  27         apcupsd (Dan Walsh)
  28         rwho (Nalin Dahyabhai)
  29
  30 * Tue Apr 17 2007 Chris PeBenito <selinux@tresys.com> - 20070417
  31 - Patch for sasl's use of kerberos from Dan Walsh.
  32 - Patches to confine ldconfig, udev, and insmod in the targeted policy from Dan Walsh.
  33 - Man page updates from Dan Walsh.
  34 - Two patches from Paul Moore to for ipsec to remove redundant rules and
  35   have setkey read the config file.
  36 - Move booleans and tunables to modules when it is only used in a single
  37   module.
  38 - Add support for tunables and booleans local to a module.
  39 - Merge sbin_t and ls_exec_t into bin_t.
  40 - Remove disable_trans booleans.
  41 - Output different header sets for kernel and userland from flask headers.
  42 - Marked the pax class as deprecated, changed it to userland so
  43   it will be removed from the kernel.
  44 - Stop including netfilter contexts by default.
  45 - Add dontaudits for init fds and console to init_daemon_domain().
  46 - Patch to allow gpg to create user keys dir.
  47 - Patch to support kvmfs from Dan Walsh.
  48 - Patch for misc fixes in sudo from Dan Walsh.
  49 - Patch to fix netlabel recvfrom MLS constraint from Paul Moore.
  50 - Patch for handling restart of nscd when ran from useradd, groupadd, and
  51   admin passwd, from Dan Walsh.
  52 - Patch for procmail, spamassassin, and pyzor updates from Dan Walsh.
  53 - Patch for setroubleshoot for validating file contexts from Dan Walsh.
  54 - Patch for gssd fixes from Dan Walsh.
  55 - Patch for lvm fixes from Dan Walsh.
  56 - Patch for ricci fixes from Dan Walsh.
  57 - Patch for postfix lmtp labeling and pickup rule fix from Dan Walsh.
  58 - Patch for kerberized telnet fixes from Dan Walsh.
  59 - Patch for kerberized ftp and other ftp fixes from Dan Walsh.
  60 - Patch for an additional wine executable from Dan Walsh.
  61 - Eight patches for file contexts in games, wine, networkmanager, miscfiles,
  62   corecommands, devices, and java from Dan Walsh.
  63 - Add support for libselinux 2.0.5 init_selinuxmnt() changes.
  64 - Patch for misc fixes to bluetooth from Dan Walsh.
  65 - Patch for misc fixes to kerberos from Dan Walsh.
  66 - Patch to start deprecating usercanread attribute from Ryan Bradetich.
  67 - Add dccp_socket object class which was added in kernel 2.6.20.
  68 - Patch for prelink relabefrom it's temp files from Dan Walsh.
  69 - Patch for capability fix for auditd and networking fix for syslogd from
  70   Dan Walsh.
  71 - Patch to remove redundant mls_trusted_object() call from Dan Walsh.
  72 - Patch for misc fixes to nis ypxfr policy from Dan Walsh.
  73 - Patch to allow apmd to telinit from Dan Walsh.
  74 - Patch for additional labeling of samba files from Stefan Schulze
  75   Frielinghaus.
  76 - Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich.
  77 - Fix ptys and ttys to be device nodes.
  78 - Fix explicit use of httpd_t in openca_domtrans().
  79 - Clean up file context regexes in apache and java, from Eamon Walsh.
  80 - Patches from Dan Walsh:
  81         Thu, 25 Jan 2007
  82 - Added modules:
  83         consolekit (Dan Walsh)
  84         fail2ban (Dan Walsh)
  85         zabbix (Dan Walsh)
  86
  87 * Tue Dec 12 2006 Chris PeBenito <selinux@tresys.com> - 20061212
  88 - Add policy patterns support macros.  This changes the behavior of
  89   the create_dir_perms and create_file_perms permission sets.
  90 - Association polmatch MLS constraint making unlabeled_t an exception
  91   is no longer needed, patch from Venkat Yekkirala.
  92 - Context contains checking for PAM and cron from James Antill.
  93 - Add a reload target to Modules.devel and change the load
  94   target to only insert modules that were changed.
  95 - Allow semanage to read from /root on strict non-MLS for
  96   local policy modules.
  97 - Gentoo init script fixes for udev.
  98 - Allow udev to read kernel modules.inputmap.
  99 - Dnsmasq fixes from testing.
 100 - Allow kernel NFS server to getattr filesystems so df can work
 101   on clients.
 102 - Patch from Matt Anderson for a MLS constraint exemption on a
 103   file that can be written to from a subject whose range is
 104   within the object's range.
 105 - Enhanced setransd support from Darrel Goeddel.
 106 - Patches from Dan Walsh:
 107         Tue, 24 Oct 2006
 108         Wed, 29 Nov 2006
 109 - Added modules:
 110         aide (Matt Anderson)
 111         ccs (Dan Walsh)
 112         iscsi (Dan Walsh)
 113         ricci (Dan Walsh)
 114
 115 * Wed Oct 18 2006 Chris PeBenito <selinux@tresys.com> - 20061018
 116 - Patch from Russell Coker Thu, 5 Oct 2006
 117 - Move range transitions to modules.
 118 - Make number of MLS sensitivities, and number of MLS and MCS
 119   categories configurable as build options.
 120 - Add role infrastructure.
 121 - Debian updates from Erich Schubert.
 122 - Add nscd_socket_use() to auth_use_nsswitch().
 123 - Remove old selopt rules.
 124 - Full support for netfilter_contexts.
 125 - MRTG patch for daemon operation from Stefan.
 126 - Add authlogin interface to abstract common access for login programs.
 127 - Remove setbool auditallow, except for RHEL4.
 128 - Change eventpollfs to task SID labeling.
 129 - Add key support from Michael LeMay.
 130 - Add ftpdctl domain to ftp, from Paul Howarth.
 131 - Fix build system to not move type declarations out of optionals.
 132 - Add gcc-config domain to portage.
 133 - Add packet object class and support in corenetwork.
 134 - Add a copy of genhomedircon for monolithic policy building, so that a
 135   policycoreutils package update is not required for RHEL4 systems.
 136 - Add appletalk sockets for use in cups.
 137 - Add Make target to validate module linking.
 138 - Make duplicate template and interface declarations a fatal error.
 139 - Patch to stabilize modules.conf `make conf` output, from Erich Schubert.
 140 - Move xconsole_device_t from devices to xserver since it is
 141   not actually a device, it is a named pipe.
 142 - Handle nonexistant .fc and .if files in devel Makefile by
 143   automatically creating empty files.
 144 - Remove unused devfs_control_t.
 145 - Add rhel4 distro, which also implies redhat distro.
 146 - Remove unneeded range_transition for su_exec_t and move the
 147   type declaration back to the su module.
 148 - Constrain transitions in MCS so unconfined_t cannot have
 149   arbitrary category sets.
 150 - Change reiserfs from xattr filesystem to genfscon as it's xattrs
 151   are currently nonfunctional.
 152 - Change files and filesystem modules to use their own interfaces.
 153 - Add user fonts to xserver.
 154 - Additional interfaces in corecommands, miscfiles, and userdomain
 155   from Joy Latten.
 156 - Miscellaneous fixes from Thomas Bleher.
 157 - Deprecate module name as first parameter of optional_policy()
 158   now that optionals are allowed everywhere.
 159 - Enable optional blocks in base module and monolithic policy.
 160   This requires checkpolicy 1.30.1.
 161 - Fix vpn module declaration.
 162 - Numerous fixes from Dan Walsh.
 163 - Change build order to preserve m4 line number information so policy
 164   compile errors are useful again.
 165 - Additional MLS interfaces from Chad Hanson.
 166 - Move some rules out of domain_type() and domain_base_type()
 167   to the TE file, to use the domain attribute to take advantage
 168   of space savings from attribute use.
 169 - Add global stack smashing protector rule for urandom access from
 170   Petre Rodan.
 171 - Fix temporary rules at the bottom of portmap.
 172 - Updated comments in mls file from Chad Hanson.
 173 - Patches from Dan Walsh:
 174         Fri, 17 Mar 2006
 175         Wed, 29 Mar 2006
 176         Tue, 11 Apr 2006
 177         Fri, 14 Apr 2006
 178         Tue, 18 Apr 2006
 179         Thu, 20 Apr 2006
 180         Tue, 02 May 2006
 181         Mon, 15 May 2006
 182         Thu, 18 May 2006
 183         Tue, 06 Jun 2006
 184         Mon, 12 Jun 2006
 185         Tue, 20 Jun 2006
 186         Wed, 26 Jul 2006
 187         Wed, 23 Aug 2006
 188         Thu, 31 Aug 2006
 189         Fri, 01 Sep 2006
 190         Tue, 05 Sep 2006
 191         Wed, 20 Sep 2006
 192         Fri, 22 Sep 2006
 193         Mon, 25 Sep 2006
 194 - Added modules:
 195         afs
 196         amavis (Erich Schubert)
 197         apt (Erich Schubert)
 198         asterisk
 199         audioentropy
 200         authbind
 201         backup
 202         calamaris
 203         cipe
 204         clamav (Erich Schubert)
 205         clockspeed (Petre Rodan)
 206         courier
 207         dante
 208         dcc
 209         ddclient
 210         dpkg (Erich Schubert)
 211         dnsmasq
 212         ethereal
 213         evolution
 214         games
 215         gatekeeper
 216         gift
 217         gnome (James Carter)
 218         imaze
 219         ircd
 220         jabber
 221         monop
 222         mozilla
 223         mplayer
 224         munin
 225         nagios
 226         nessus
 227         netlabel (Paul Moore)
 228         nsd
 229         ntop
 230         nx
 231         oav
 232         oddjob (Dan Walsh)
 233         openca
 234         openvpn (Petre Rodan)
 235         perdition
 236         portslave
 237         postgrey
 238         pxe
 239         pyzor (Dan Walsh)
 240         qmail (Petre Rodan)
 241         razor
 242         resmgr
 243         rhgb
 244         rssh
 245         snort
 246         soundserver
 247         speedtouch
 248         sxid
 249         thunderbird
 250         tor (Erich Schubert)
 251         transproxy
 252         tripwire
 253         uptime
 254         uwimap
 255         vmware
 256         watchdog
 257         xen (Dan Walsh)
 258         xprint
 259         yam
 260
 261 * Tue Mar 07 2006 Chris PeBenito <selinux@tresys.com> - 20060307
 262 - Make all interface parameters required.
 263 - Move boot_t, system_map_t, and modules_object_t to files module,
 264   and move bootloader to admin layer.
 265 - Add semanage policy for semodule from Dan Walsh.
 266 - Remove allow_execmem from targeted policy domain_base_type().
 267 - Add users_extra and seusers support.
 268 - Postfix fixes from Serge Hallyn.
 269 - Run python and shell directly to interpret scripts so policy
 270   sources need not be executable.
 271 - Add desc tag XML to booleans and tunables, and add summary
 272   to param XML tag, to make future translations possible.
 273 - Remove unused lvm_vg_t.
 274 - Many interface renames to improve naming consistency.
 275 - Merge xdm into xserver.
 276 - Remove kernel module reversed interfaces.
 277 - Add filename attribute to module XML tag and lineno attribute to
 278   interface XML tag.
 279 - Changed QUIET build option to a yes or no option.
 280 - Add a Makefile used for compiling loadable modules in a
 281   user's development environment, building against policy headers.
 282 - Add Make target for installing policy headers.
 283 - Separate per-userdomain template expansion from the userdomain
 284   module and add infrastructure to expand templates in the modules
 285   that own the template.
 286 - Enable secadm only for MLS policies.
 287 - Remove role change rules in su and sudo since this functionality has been
 288   removed from these programs.
 289 - Add ctags Make target from Thomas Bleher.
 290 - Collapse commands with grep piped to sed into one sed command.
 291 - Fix type_change bug in term_user_pty().
 292 - Move ice_tmp_t from miscfiles to xserver.
 293 - Login fixes from Serge Hallyn.
 294 - Move xserver_log_t from xdm to xserver.
 295 - Add lpr per-userdomain policy to lpd.
 296 - Miscellaneous fixes from Dan Walsh.
 297 - Change initrc_var_run_t interface noun from script_pid to utmp,
 298   for greater clarity.
 299 - Added modules:
 300         certwatch
 301         mono (Dan Walsh)
 302         mrtg
 303         portage
 304         tvtime
 305         userhelper
 306         usernetctl
 307         wine (Dan Walsh)
 308         xserver
 309
 310 * Tue Jan 17 2006 Chris PeBenito <selinux@tresys.com> - 20060117
 311 - Adds support for generating corenetwork interfaces based on attributes
 312   in addition to types.
 313 - Permits the listing of multiple nodes in a network_node() that will be
 314   given the same type.
 315 - Add two new permission sets for stream sockets.
 316 - Rename file type transition interfaces verb from create to
 317   filetrans to differentiate it from create interfaces without
 318   type transitions.
 319 - Fix expansion of interfaces from disabled modules.
 320 - Rsync can be long running from init,
 321   added rules to allow this.
 322 - Add polyinstantiation build option.
 323 - Add setcontext to the association object class.
 324 - Add apache relay and db connect tunables.
 325 - Rename texrel_shlib_t to textrel_shlib_t.
 326 - Add swat to samba module.
 327 - Numerous miscellaneous fixes from Dan Walsh.
 328 - Added modules:
 329         alsa
 330         automount
 331         cdrecord
 332         daemontools (Petre Rodan)
 333         ddcprobe
 334         djbdns (Petre Rodan)
 335         fetchmail
 336         irc
 337         java
 338         lockdev
 339         logwatch (Dan Walsh)
 340         openct
 341         prelink (Dan Walsh)
 342         publicfile (Petre Rodan)
 343         readahead
 344         roundup
 345         screen
 346         slocate (Dan Walsh)
 347         slrnpull
 348         smartmon
 349         sysstat
 350         ucspitcp (Petre Rodan)
 351         usbmodules
 352         vbetool (Dan Walsh)
 353
 354 * Wed Dec 07 2005 Chris PeBenito <selinux@tresys.com> - 20051207
 355 - Add unlabeled IPSEC association rule to domains with
 356   networking permissions.
 357 - Merge systemuser back in to users, as these files
 358   do not need to be split.
 359 - Add check for duplicate interface/template definitions.
 360 - Move domain, files, and corecommands modules to kernel
 361   layer to resolve some layering inconsistencies.
 362 - Move policy build options out of Makefile into build.conf.
 363 - Add yppasswd to nis module.
 364 - Change optional_policy() to refer to the module name
 365   rather than modulename.te.
 366 - Fix labeling targets to use installed file_contexts rather
 367   than partial file_contexts in the policy source directory.
 368 - Fix build process to use make's internal vpath functions
 369   to detect modules rather than using subshells and find.
 370 - Add install target for modular policy.
 371 - Add load target for modular policy.
 372 - Add appconfig dependency to the load target.
 373 - Miscellaneous fixes from Dan Walsh.
 374 - Fix corenetwork gen_context()'s to expand during the policy
 375   build phase instead of during the generation phase.
 376 - Added policies:
 377         amanda
 378         avahi
 379         canna
 380         cyrus
 381         dbskk
 382         dovecot
 383         distcc
 384         i18n_input
 385         irqbalance
 386         lpd
 387         networkmanager
 388         pegasus
 389         postfix
 390         procmail
 391         radius
 392         rdisc
 393         rpc
 394         spamassassin
 395         timidity
 396         xdm
 397         xfs
 398
 399 * Wed Oct 19 2005 Chris PeBenito <selinux@tresys.com> - 20051019
 400 - Many fixes to make loadable modules build.
 401 - Add targets for sechecker.
 402 - Updated to sedoctool to read bool files and tunable
 403   files separately.
 404 - Changed the xml tag of <boolean> to <bool> to be consistent
 405   with gen_bool().
 406 - Modified the implementation of segenxml to use regular
 407   expressions.
 408 - Rename context_template() to gen_context() to clarify
 409   that its not a Reference Policy template, but a support
 410   macro.
 411 - Add disable_*_trans bool support for targeted policy.
 412 - Add MLS module to handle MLS constraint exceptions,
 413   such as reading up and writing down.
 414 - Fix errors uncovered by sediff.
 415 - Added policies:
 416         anaconda
 417         apache
 418         apm
 419         arpwatch
 420         bluetooth
 421         dmidecode
 422         finger
 423         ftp
 424         kudzu
 425         mailman
 426         ppp
 427         radvd
 428         sasl
 429         webalizer
 430
 431 * Thu Sep 22 2005 Chris PeBenito <selinux@tresys.com> - 20050922
 432 - Make logrotate, sendmail, sshd, and rpm policies
 433   unconfined in the targeted policy so no special
 434   modules.conf is required.
 435 - Add experimental MCS support.
 436 - Add appconfig for MLS.
 437 - Add equivalents for old can_resolve(), can_ldap(), and
 438   can_portmap() to sysnetwork.
 439 - Fix base module compile issues.
 440 - Added policies:
 441         cpucontrol
 442         cvs
 443         ktalk
 444         portmap
 445         postgresql
 446         rlogin
 447         samba
 448         snmp
 449         stunnel
 450         telnet
 451         tftp
 452         uucp
 453         vpn
 454         zebra
 455
 456 * Wed Sep 07 2005 Chris PeBenito <selinux@tresys.com> - 20050907
 457 - Fix errors uncovered by sediff.
 458 - Doc tool will explicitly say a module does not have interfaces
 459   or templates on the module page.
 460 - Added policies:
 461         comsat
 462         dbus
 463         dhcp
 464         dictd
 465         hal
 466         inn
 467         ntp
 468         squid
 469
 470 * Fri Aug 26 2005 Chris PeBenito <selinux@tresys.com> - 20050826
 471 - Add Makefile support for building loadable modules.
 472 - Add genclassperms.py tool to add require blocks
 473   for loadable modules.
 474 - Change sedoctool to make required modules part of base
 475   by default, otherwise make as modules, in modules.conf.
 476 - Fix segenxml to handle modules with no interfaces.
 477 - Rename ipsec connect interface for consistency.
 478 - Add missing parts of unix stream socket connect interface
 479   of ipsec.
 480 - Rename inetd connect interface for consistency.
 481 - Rename interface for purging contents of tmp, for clarity,
 482   since it allows deletion of classes other than file.
 483 - Misc. cleanups.
 484 - Added policies:
 485         acct
 486         bind
 487         firstboot
 488         gpm
 489         howl
 490         ldap
 491         loadkeys
 492         mysql
 493         privoxy
 494         quota
 495         rshd
 496         rsync
 497         su
 498         sudo
 499         tcpd
 500         tmpreaper
 501         updfstab
 502
 503 * Tue Aug 2 2005 Chris PeBenito <selinux@tresys.com> - 20050802
 504 - Fix comparison bug in fc_sort.
 505 - Fix handling of ordered and unordered HTML lists.
 506 - Corenetwork now supports multiple network interfaces having the
 507   same type.
 508 - Doc tool now creates pages for global Booleans and global tunables.
 509 - Doc tool now links directly to the interface/template in the
 510   module page when it is selected in the interface/template index.
 511 - Added support for layer summaries.
 512 - Added policies:
 513         ipsec
 514         nscd
 515         pcmcia
 516         raid
 517
 518 * Thu Jul 7 2005 Chris PeBenito <selinux@tresys.com> - 20050707
 519 - Changed xml to have modules encapsulated by layer tags, rather
 520   than putting layer="foo" in the module tags.  Also in the future
 521   we can put a summary and description for each layer.
 522 - Added tool to infer interface, module, and layer tags.  This will
 523   now list all interfaces, even if they are missing xml docs.
 524 - Shortened xml tag names.
 525 - Added macros to declare interfaces and templates.
 526 - Added interface call trace.
 527 - Updated all xml documentation for shorter and inferred tags.
 528 - Doc tool now displays templates in the web pages.
 529 - Doc tool retains the user's settings in modules.conf and
 530   tunables.conf if the files already exist.
 531 - Modules.conf behavior has been changed to be a list of all
 532   available modules, and the user can specify if the module is
 533   built as a loadable module, included in the monolithic policy,
 534   or excluded.
 535 - Added policies:
 536         fstools (fsck, mkfs, swapon, etc. tools)
 537         logrotate
 538         inetd
 539         kerberos
 540         nis (ypbind and ypserv)
 541         ssh (server, client, and agent)
 542         unconfined
 543 - Added infrastructure for targeted policy support, only missing
 544         transition boolean support.
 545
 546 * Wed Jun 15 2005 Chris PeBenito <selinux@tresys.com> - 20050615
 547         - Initial release