diff options
author | Chris PeBenito <pebenito@ieee.org> | 2017-02-04 13:30:54 -0500 |
---|---|---|
committer | Jason Zaman <jason@perfinion.com> | 2017-02-05 14:26:54 +0800 |
commit | 5954c31f0b864c0f09d9917bdb2652da04b043c4 (patch) | |
tree | fcac1175a97fcaad825804bb40dc343d72aa6901 /Changelog | |
parent | Bump module versions for release. (diff) | |
download | hardened-refpolicy-5954c31f0b864c0f09d9917bdb2652da04b043c4.tar.gz hardened-refpolicy-5954c31f0b864c0f09d9917bdb2652da04b043c4.tar.bz2 hardened-refpolicy-5954c31f0b864c0f09d9917bdb2652da04b043c4.zip |
Update Changelog and VERSION for release.
Diffstat (limited to 'Changelog')
-rw-r--r-- | Changelog | 137 |
1 files changed, 137 insertions, 0 deletions
@@ -1,3 +1,140 @@ +* Sat Feb 04 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170204 +Chris PeBenito (55): + Module version bumps for patches from Guido Trentalancia. + Update contrib. + Remove unneeded system_u seusers mapping. + Update contrib. + Merge pull request #45 from cgzones/travis2 + Merge pull request #46 from cgzones/update_readme + Merge pull request #47 from cgzones/spelling + Module version bump for xserver patch from Guido Trentalancia + Update contrib. + Merge pull request #50 from cgzones/macros + Merge pull request #48 from cgzones/makefile + xserver: Rearrange lines + Module version bump for xserver changes from Guido Trentalancia. + Merge branch 'dhcp_avahi' of https://github.com/cgzones/refpolicy + Module version bumps for patches from cgzones. + Update contrib. + Merge branch 'syslogd' of git://github.com/cgzones/refpolicy + Module version bump for journald fixes from cgzones. + Merge pull request #57 from cgzones/trailing_whitespaces + modutils: Move lines. + Module version bumps for openoffice patches from Guido Trentalancia. + Module version bump for kernel sysctl patch from Luis Ressel + Update contrib. + Module version bump for netutils patch from Luis Ressel. + Module version bump for xserver patch from Guido Trentalancia. + Module version bumps for patches from Guido Trentalancia. + rtkit: enable dbus chat with xdm + xserver: Move interface definition. + Module version bump for patches from Guido Trentalancia. + Module version bump for xscreensaver patch from Guido Trentalancia. + Merge branch 'run_transition' of git://github.com/cgzones/refpolicy + Module version bumps for /run fc changes from cgzones. + Module version bump for patches from Guido Trentalancia. + Merge branch '2016-12-27_systemd' of + git://github.com/fishilico/selinux-refpolicy-patched + Module version bump for systemd patch from Nicolas Iooss. + Merge branch 'usr-fc' of + git://github.com/fishilico/selinux-refpolicy-patched + Module version bump for fc updates from Nicolas Iooss. + Module version bump for patches from Guido Trentalancia. + xserver: Update from Russell Coker for boinc. + Module version bump for patches from Guido Trentalancia. + Merge pull request #62 from cgzones/fix_permission_segenxml + Merge pull request #94 from cgzones/travis + Merge branch 'corenetork_module' of git://github.com/cgzones/refpolicy + Merge branch 'mount_module' of git://github.com/cgzones/refpolicy + Merge branch 'terminal_module' of git://github.com/cgzones/refpolicy + Merge branch 'files_search_src' of git://github.com/cgzones/refpolicy + Merge branch 'unconfined_module' of git://github.com/cgzones/refpolicy + Merge branch 'auditd_fixes' of git://github.com/cgzones/refpolicy + Module version bumps for patches from cgzones. + Module version bump for cpu_online genfscon from Laurent Bigonville. + Update contrib. + Fix contrib. + Module version bump for cups patch from Guido Trentalancia. + Module version bump for xkb fix from Jason Zaman. + Bump module versions for release. + +Guido Trentalancia (19): + xserver: remove unneeded user content permissions + xserver: remove unneeded user content permissions + Apache OpenOffice module (base policy part) + xserver: enable dbus messaging with devicekit power + authlogin: indentation/whitespace fix + wm: update the window manager (wm) module and enable its role template + (v7) + userdomain: separate optional conditionals for gnome and wm role templates + udev: manage tmpfs files and directories + udev: always enable kernel module loading + base: enable the xscreensaver role + bootloader: stricter permissions and more tailored file contexts + modutils: update to run in confined mode + base: use new genhomedircon template for username + kernel: missing permissions for confined execution + xserver: introduce new fc and interface to manage X session logs + kernel: add missing plymouth interface + xserver: restrict executable memory permissions + init: support sysvinit + udev: execute HPLIP applications in their own domain + +Guido Trentalancia via refpolicy (4): + Let users read/manage symlinks on fs that do not support xattr + Let unprivileged users list mounted filesystems + Let the user list noxattr fs directories + sysadm: add the shutdown role + +Jason Zaman (1): + xserver: allow X roles to read xkb libs to set keymaps + +Laurent Bigonville (1): + Use genfscon to label /sys/devices/system/cpu/online as cpu_online_t + +Luis Ressel (3): + system/modutils: Add kernel_search_key(kmod_t) + kernel.if: Allow listing /proc/sys/net/unix + netutils: Label iptstate as netutils_t + +Nicolas Iooss (4): + systemd: add systemd-backlight policy + systemd: add systemd-binfmt policy + Allow searching /proc/sys/fs when using /proc/sys/fs/binfmt_misc + Add file contexts in /usr for /bin, /usr/sbin and /usr/lib + +Russell Coker (1): + single binary modutils + +Stephen Smalley (2): + refpolicy: Define extended_socket_class policy capability and socket + classes + refpolicy: drop unused socket security classes + +cgzones (21): + update .travis.yml + update README + fix spelling + update Makefile + update policy/support macros + review + keep 2 empty lines in front of a new section + using intermediate target instead of splitting up conf files generation + define filecontext for /run/agetty.reload + allow dhcp_t to domtrans into avahi + fix syslogd audits + remove trailing whitespaces + transition file contexts to /run + fix permission of installed segenxml.py by install-headers + auditd / auditctl: fix audits + add files_search_src() + update unconfined module * grant capability2:wake_alarm * remove + deprecated interfaces + update terminal module + update corenetwork module + use travis cache + update mount module + * Sun Oct 23 2016 Chris PeBenito <pebenito@ieee.org> - 2.20161023 Chris PeBenito (94): Module version bump for systemd-user-sessions fc entry from Dominick Grift |