diff options
author | Chris PeBenito <pebenito@ieee.org> | 2018-07-01 11:02:33 -0400 |
---|---|---|
committer | Jason Zaman <jason@perfinion.com> | 2018-07-02 19:47:17 +0800 |
commit | 6e8c92160e729f0f17027084c48b41ada0bedd17 (patch) | |
tree | dd5b28e5700662c86b2da3bdcd10e5714e1e1034 /Changelog | |
parent | Bump module versions for release. (diff) | |
download | hardened-refpolicy-6e8c92160e729f0f17027084c48b41ada0bedd17.tar.gz hardened-refpolicy-6e8c92160e729f0f17027084c48b41ada0bedd17.tar.bz2 hardened-refpolicy-6e8c92160e729f0f17027084c48b41ada0bedd17.zip |
Update Changelog and VERSION for release.
Diffstat (limited to 'Changelog')
-rw-r--r-- | Changelog | 83 |
1 files changed, 83 insertions, 0 deletions
@@ -1,3 +1,86 @@ +* Sun Jul 01 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180701 +Chris PeBenito (28): + Enable cgroup_seclabel and nnp_nosuid_transition. + Misc dbus fixes from Russell Coker. + Simple map patch from Russell Coker. + another trivial dbus patch from Russell Coker. + Merge branch 'xtable-proc' of https://github.com/bigon/refpolicy + iptables: Module version bump. + Update contrib. + .travis.yml: Change to master branch for sctp support. + corenetwork, init: Module version bump. + Module version bumps for patches from James Carter. + Update contrib. + init, logging, sysnetwork, systemd, udev: Module version bump. + sysnetwork: Move lines in sysnet_read_config(). + sysnetwork: Module version bump. + init: Module version bump. + Remove deprecated flask.py script. + Switch all remaining Python references to the Python 3 interpreter. + systemd: Move lines. + corecommands: Module version bump. + Makefile: Tweak cli output. + XDG: Module version bump. + Remove refpolicy-contrib submodule. + Re-add policy modules from old refpolicy-contrib submodule. + Move all files out of the old contrib directory. + Changelog.contrib: Add note about refpolicy-contrib removal. + sysnetwork: Module version bump. + xdg, xserver, mplayer, games: Module version bump. + Bump module versions for release. + +Christian Göttsche (1): + add definition of bpf class and systemd perms + +Dave Sugar (8): + Fix problems booting with fips=1 + Interface to read /run/systemd/resolve/resolv.conf + Allow systemd-resolved to read sysctl + Allow systemd_resolved to read systemd_networkd runtime files + Allow systemd-resolved to connect to system dbusd + systemd-resolved uses notify to indicate status + policy for systemd-update-done + policy for systemd-hwdb + +James Carter (8): + Removed unnecessary semicolons + Mark unused parameters as unused + Move the use of var_log_t from authlogin.fc to logging.fc + Move the use of initrc_var_run_t from files.fc to init.fc + Move use of systemd_unit_t from systemd.fc to init.fc + Move use of user_devpts_t from terminal.fc to userdomain.fc + Remove undeclared identifiers from interfaces + Remove undeclared identifiers from xserver interface + +Jason Zaman (9): + sysnetwork: put systemd_read_resolved_runtime in an ifdef + init: Add filetrans for /run/initctl + corecommands: adjust gcc fcontext to also work on musl + userdom: remove filetrans from userdom_user_content_access_template + xdg: Add map perms, also make lnk_file, dirs consistent + xdg: filetrans should not add filetrans from user_home_dir + xdg: Introduce xdg_search_cache_dirs + xserver: Add mesa_shader_cache for GLSL in ~/.cache/mesa_shader_cache/ + apps: rw mesa_shader_cache + +Laurent Bigonville (1): + Label /etc/hosts.allow as net_conf_t + +Miroslav Grepl (1): + xtables-multi wants to getattr of the proc fs + +Richard Haines (1): + refpolicy: Update for kernel sctp support + +Sven Vermeulen (7): + Add gentemplates.sh to extract template content + Update segenxml to include support for templated booleans and tunables + Generate template code and update genxml call for documentation generation + freedesktop location support + Allow X server users to manage all xdg resources + helper interfaces to read/manage all user content + tunable-managed user content access template + * Sun Jan 14 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180114 Adam Duskett (1): fix regex escape sequence error. |