Commit graph

1,296 commits

Author SHA1 Message Date
Vit Mojzis
a815382f6c Drop unused BuildRequires
desktop-file-utils does not appear to be needed. It is unclear from the
commit that introduced it if it was ever needed, but I found no
reference to the content of the package in the userspace code.

Reported by Marián Konček <mkoncek@redhat.com>
https://mkoncek.fedorapeople.org/unbreq.html

Fixes: SELINUX-6551
2026-07-24 17:44:57 +02:00
Fedora Release Engineering
6f99690f02 Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild 2026-07-16 17:31:02 +00:00
Petr Lautrbach
f118670c73 Add missing BR python3-build 2026-07-01 22:08:18 +02:00
Petr Lautrbach
117d3bf1b1 SELinux userspace 3.11 release 2026-07-01 21:56:45 +02:00
Python Maint
dd6c2e4568 Rebuilt for Python 3.15 2026-06-03 17:38:37 +02:00
Petr Lautrbach
0f69820971 policycoreutils-3.10-4
- Several sandbox and seunshare security improvements
2026-05-25 14:32:28 +02:00
Petr Lautrbach
dc36266331 Fix 0008 patch name and content
Minor change, dropped PIDFile
2026-04-07 07:38:17 +02:00
Petr Lautrbach
b5bc53a49a * Mon Apr 06 2026 Petr Lautrbach <lautrbach@redhat.com> - 3.10-3
- restorecond.service: Use Type=simple
2026-04-06 19:54:20 +02:00
Yaakov Selkowitz
73db4fa86c Use python3-libdnf5 where dnf5 is the package manager
sepolicy now supports using libdnf5:

1a32e6d66a
2026-02-18 17:27:02 -05:00
Petr Lautrbach
0ceaafe1ae SELinux userspace 3.10 release 2026-02-02 14:14:50 +01:00
Petr Lautrbach
bdaabb6165 SELinux userspace 3.10-rc2 release 2026-01-29 07:58:24 +01:00
Fedora Release Engineering
334519545a Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild 2026-01-17 05:36:44 +00:00
Petr Lautrbach
1e699f4433 Do not use %autochangelog
It can't be used without %autorelease.
Use our own macro to add entries from SOURCE3: changelog to %changelog

    %add_changelog %SOURCE3

Also install changelog to /usr/share/doc/policycoreutils/changelog
2025-12-16 12:30:13 +01:00
Vit Mojzis
e0a0eb0859 policycoreutils-3.9-7
- semanage: Reset active value when deleting boolean customizations (RHEL-111421)
- setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
- sepolicy: Fix detection of writeable locations

Resolves: RHEL-111421, RHEL-111505
2025-12-11 08:10:13 +01:00
Petr Lautrbach
668dfbb056 Bring back patches unintentionally dropped before 2025-12-11 07:31:22 +01:00
Petr Lautrbach
3a35854319 Move %changelog entries to changelog 2025-12-09 08:06:57 +01:00
Petr Lautrbach
2f22660c9f Fix manpages pattern
https://docs.fedoraproject.org/en-US/packaging-guidelines/#_manpages

    When installing man pages, note that RPM will re-compress them into
    its preferred format. So the %files section MUST reference manpages
    with a pattern that takes this into account:

    %files
    %{_mandir}/man1/foo.1*
2025-12-09 07:33:59 +01:00
Python Maint
7a130bd9c1 Rebuilt for Python 3.14.0rc3 bytecode 2025-09-19 12:37:25 +02:00
Python Maint
1c3d6107fc Rebuilt for Python 3.14.0rc2 bytecode 2025-08-15 13:07:03 +02:00
Petr Lautrbach
6c0adeff69 policycoreutils-3.9-3
- Drop unused BuildRequires on python3-wheel
2025-08-11 10:04:30 +02:00
Miro Hrončok
13fd9c38cc Drop unused BuildRequires on python3-wheel
See https://github.com/fedora-eln/eln/issues/284

When pip sees a setup.py file and it has setuptools and wheel installed
it does not use build isolation (by default).
When we remove wheel, the default changes, so we need to be explicit.

Note that setting PIP_NO_BUILD_ISOLATION=0 disables build isolation,
which is a tad confusing, see https://github.com/pypa/pip/issues/5735
2025-07-29 18:13:42 +02:00
Fedora Release Engineering
9613beb188 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 06:00:45 +00:00
Petr Lautrbach
dd082a7b12 SELinux userspace 3.9 release 2025-07-16 16:24:54 +02:00
Petr Lautrbach
552779a79e SELinux userspace 3.9-rc2 release 2025-07-04 13:39:25 +02:00
Petr Lautrbach
6ebaf8c522 policycoreutils-3.8-3
- Use multiprocessing 'fork' method (rhbz#2374569)
2025-06-25 16:58:23 +02:00
Python Maint
ba57ad8856 Rebuilt for Python 3.14 2025-06-02 21:22:44 +02:00
Petr Lautrbach
5d6ff85741 SELinux userspace 3.8 release 2025-01-30 15:51:05 +01:00
Petr Lautrbach
0d18a959c7 Make rpm a weak dependency
The goal is to allow systems based on bootc without rpm installed.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2338647
2025-01-22 08:54:40 +01:00
Petr Lautrbach
5ab4154096 Fix changelog 2025-01-22 08:45:34 +01:00
Fedora Release Engineering
ff9ef4f536 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 10:31:59 +00:00
4ede7dad37 Rebuilt for the bin-sbin merge (2nd attempt)
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
2025-01-12 14:39:08 +01:00
Petr Lautrbach
a8be26778e SELinux userspace 3.8-rc3 release 2024-12-18 16:14:46 +01:00
Petr Lautrbach
1959cc983f SELinux userspace 3.8-rc1 release 2024-11-28 22:03:47 +01:00
Petr Lautrbach
2265bc4616 policycoreutils-3.7-5
- fixfiles: use `grep -F` when search in mounts (bz#2323728)

[skip changelog]
2024-11-13 18:24:25 +01:00
Petr Lautrbach
f08722bf2a fixfiles: use grep -F when search in mounts (bz#2323728) 2024-11-13 18:17:15 +01:00
Petr Lautrbach
07240ecb02 sepolgen-ifgen: allow M4 escaped filenames
When a file name in type transition rule used in an interface is same as
a keyword, it needs to be M4 escaped so that the keyword is not expanded
by M4, e.g.

-	filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "interface")
+	filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "``interface''")

But sepolgen-ifgen could not parse such string:

    # sepolgen-ifgen
    Illegal character '`'

This change allows M4 escaping inside quoted strings and fixed described
problem.

https://bugzilla.redhat.com/show_bug.cgi?id=2254206
2024-08-20 11:02:43 +02:00
Fedora Release Engineering
345af02a21 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 08:13:40 +00:00
b91c86874b Rebuilt for the bin-sbin merge
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
2024-07-09 13:47:32 +02:00
Petr Lautrbach
853954a187 Move changelog to changelog and use %autochangelog
https://docs.pagure.org/Fedora-Infra.rpmautospec/autochangelog.html

`rpmautospec generate-changelog` can be used to preview how the
generated changelog will look

[skip changelog]
2024-06-27 18:02:27 +02:00
Petr Lautrbach
0af2af4e05 Verify upstream tarball signature
https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification
2024-06-27 18:00:01 +02:00
Petr Lautrbach
4c447e2cc8 SELinux userspace 3.7 release 2024-06-27 17:47:47 +02:00
Python Maint
6b350d55f4 Rebuilt for Python 3.13 2024-06-07 08:34:19 +02:00
Petr Lautrbach
303ec7f9f8 policycoreutils-3.6-4
- Add Wayland support
2024-05-15 19:01:47 +02:00
Petr Lautrbach
75a6e9fab4 sandbox: Add support for Wayland
- use XWayland for X application if it's run in Wayland session
- run Wayland apps directly if it's run in Wayland session
- add sandbox -Y option to run run Wayland application
2024-05-15 19:01:47 +02:00
Petr Lautrbach
8cc9f3dabd Limit sandbox dependencies RHEL > 9 2024-05-15 19:00:57 +02:00
Petr Lautrbach
2b61e9ad2c Limit sandbox dependencies RHEL > 9 2024-05-09 15:57:43 +02:00
7ebfa734bd Prepare for bin-sbin merge
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin

- do not hardcode "/usr/sbin" in most places, use the macro instead.
- fix build when %_sbindir==%_bindir.
- add compat Provides for Requires in other packages. Rely on
  filesystem creating symlinks for us.

This commit makes things compatible with the state before and after
the merge.
2024-04-11 10:37:00 +02:00
Fedora Release Engineering
bc27ad616a Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 23:53:50 +00:00
Fedora Release Engineering
8afcf5f068 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 22:06:51 +00:00
Petr Lautrbach
0b9f7c1112 sandbox to require xorg only in Fedora and RHEL <= 9 2023-12-14 18:08:50 +01:00