Commit graph

1,412 commits

Author SHA1 Message Date
Petr Lautrbach
1e699f4433 Do not use %autochangelog
It can't be used without %autorelease.
Use our own macro to add entries from SOURCE3: changelog to %changelog

    %add_changelog %SOURCE3

Also install changelog to /usr/share/doc/policycoreutils/changelog
2025-12-16 12:30:13 +01:00
Vit Mojzis
e0a0eb0859 policycoreutils-3.9-7
- semanage: Reset active value when deleting boolean customizations (RHEL-111421)
- setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
- sepolicy: Fix detection of writeable locations

Resolves: RHEL-111421, RHEL-111505
2025-12-11 08:10:13 +01:00
Vit Mojzis
109f2b2f07 selinux-autorelabel: Improve comments
The original comment of relabel_selinux() no longer applies. The system
is restarted either way.

Resolves: RHEL-93949
2025-12-11 08:10:13 +01:00
Petr Lautrbach
668dfbb056 Bring back patches unintentionally dropped before 2025-12-11 07:31:22 +01:00
Petr Lautrbach
3a35854319 Move %changelog entries to changelog 2025-12-09 08:06:57 +01:00
Petr Lautrbach
2f22660c9f Fix manpages pattern
https://docs.fedoraproject.org/en-US/packaging-guidelines/#_manpages

    When installing man pages, note that RPM will re-compress them into
    its preferred format. So the %files section MUST reference manpages
    with a pattern that takes this into account:

    %files
    %{_mandir}/man1/foo.1*
2025-12-09 07:33:59 +01:00
Python Maint
7a130bd9c1 Rebuilt for Python 3.14.0rc3 bytecode 2025-09-19 12:37:25 +02:00
Python Maint
1c3d6107fc Rebuilt for Python 3.14.0rc2 bytecode 2025-08-15 13:07:03 +02:00
Petr Lautrbach
6c0adeff69 policycoreutils-3.9-3
- Drop unused BuildRequires on python3-wheel
2025-08-11 10:04:30 +02:00
Miro Hrončok
13fd9c38cc Drop unused BuildRequires on python3-wheel
See https://github.com/fedora-eln/eln/issues/284

When pip sees a setup.py file and it has setuptools and wheel installed
it does not use build isolation (by default).
When we remove wheel, the default changes, so we need to be explicit.

Note that setting PIP_NO_BUILD_ISOLATION=0 disables build isolation,
which is a tad confusing, see https://github.com/pypa/pip/issues/5735
2025-07-29 18:13:42 +02:00
Fedora Release Engineering
9613beb188 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 06:00:45 +00:00
Petr Lautrbach
dd082a7b12 SELinux userspace 3.9 release 2025-07-16 16:24:54 +02:00
Petr Lautrbach
552779a79e SELinux userspace 3.9-rc2 release 2025-07-04 13:39:25 +02:00
Petr Lautrbach
6ebaf8c522 policycoreutils-3.8-3
- Use multiprocessing 'fork' method (rhbz#2374569)
2025-06-25 16:58:23 +02:00
Python Maint
ba57ad8856 Rebuilt for Python 3.14 2025-06-02 21:22:44 +02:00
Petr Lautrbach
5d6ff85741 SELinux userspace 3.8 release 2025-01-30 15:51:05 +01:00
Petr Lautrbach
0d18a959c7 Make rpm a weak dependency
The goal is to allow systems based on bootc without rpm installed.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2338647
2025-01-22 08:54:40 +01:00
Petr Lautrbach
5ab4154096 Fix changelog 2025-01-22 08:45:34 +01:00
Fedora Release Engineering
ff9ef4f536 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 10:31:59 +00:00
Zbigniew Jędrzejewski-Szmek
4ede7dad37 Rebuilt for the bin-sbin merge (2nd attempt)
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
2025-01-12 14:39:08 +01:00
Petr Lautrbach
a8be26778e SELinux userspace 3.8-rc3 release 2024-12-18 16:14:46 +01:00
Petr Lautrbach
1959cc983f SELinux userspace 3.8-rc1 release 2024-11-28 22:03:47 +01:00
Petr Lautrbach
2265bc4616 policycoreutils-3.7-5
- fixfiles: use `grep -F` when search in mounts (bz#2323728)

[skip changelog]
2024-11-13 18:24:25 +01:00
Petr Lautrbach
f08722bf2a fixfiles: use grep -F when search in mounts (bz#2323728) 2024-11-13 18:17:15 +01:00
Petr Lautrbach
07240ecb02 sepolgen-ifgen: allow M4 escaped filenames
When a file name in type transition rule used in an interface is same as
a keyword, it needs to be M4 escaped so that the keyword is not expanded
by M4, e.g.

-	filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "interface")
+	filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "``interface''")

But sepolgen-ifgen could not parse such string:

    # sepolgen-ifgen
    Illegal character '`'

This change allows M4 escaping inside quoted strings and fixed described
problem.

https://bugzilla.redhat.com/show_bug.cgi?id=2254206
2024-08-20 11:02:43 +02:00
Fedora Release Engineering
345af02a21 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 08:13:40 +00:00
Zbigniew Jędrzejewski-Szmek
b91c86874b Rebuilt for the bin-sbin merge
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin
2024-07-09 13:47:32 +02:00
Petr Lautrbach
853954a187 Move changelog to changelog and use %autochangelog
https://docs.pagure.org/Fedora-Infra.rpmautospec/autochangelog.html

`rpmautospec generate-changelog` can be used to preview how the
generated changelog will look

[skip changelog]
2024-06-27 18:02:27 +02:00
Petr Lautrbach
0af2af4e05 Verify upstream tarball signature
https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification
2024-06-27 18:00:01 +02:00
Petr Lautrbach
4c447e2cc8 SELinux userspace 3.7 release 2024-06-27 17:47:47 +02:00
Python Maint
6b350d55f4 Rebuilt for Python 3.13 2024-06-07 08:34:19 +02:00
Petr Lautrbach
303ec7f9f8 policycoreutils-3.6-4
- Add Wayland support
2024-05-15 19:01:47 +02:00
Petr Lautrbach
75a6e9fab4 sandbox: Add support for Wayland
- use XWayland for X application if it's run in Wayland session
- run Wayland apps directly if it's run in Wayland session
- add sandbox -Y option to run run Wayland application
2024-05-15 19:01:47 +02:00
Petr Lautrbach
8cc9f3dabd Limit sandbox dependencies RHEL > 9 2024-05-15 19:00:57 +02:00
Petr Lautrbach
2b61e9ad2c Limit sandbox dependencies RHEL > 9 2024-05-09 15:57:43 +02:00
Zbigniew Jędrzejewski-Szmek
7ebfa734bd Prepare for bin-sbin merge
https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin

- do not hardcode "/usr/sbin" in most places, use the macro instead.
- fix build when %_sbindir==%_bindir.
- add compat Provides for Requires in other packages. Rely on
  filesystem creating symlinks for us.

This commit makes things compatible with the state before and after
the merge.
2024-04-11 10:37:00 +02:00
Fedora Release Engineering
bc27ad616a Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 23:53:50 +00:00
Fedora Release Engineering
8afcf5f068 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 22:06:51 +00:00
Petr Lautrbach
0b9f7c1112 sandbox to require xorg only in Fedora and RHEL <= 9 2023-12-14 18:08:50 +01:00
Petr Lautrbach
99b3f5a5d3 SELinux userspace 3.6 release 2023-12-14 17:52:44 +01:00
Petr Lautrbach
e8ba46eae6 SELinux userspace 3.6-rc2 release 2023-11-23 17:45:19 +01:00
Petr Lautrbach
907549e21f SELinux userspace 3.6-rc1 release 2023-11-14 20:44:51 +01:00
Petr Lautrbach
4b1f77eef9 policycoreutils-3.5-8
- Update translations
  https://translate.fedoraproject.org/projects/selinux/
2023-10-30 16:18:33 +01:00
Petr Lautrbach
05444f27d0 policycoreutils-3.5-7
- python: improve format strings for proper localization
- python: Drop hard formating from localized strings
- sepolicy: port to dnf4 python API (rhbz#2209404)
2023-08-01 11:38:39 +02:00
Fedora Release Engineering
aa0a78d0f1 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 06:01:10 +00:00
Vit Mojzis
21f11b304c policycoreutils-3.5-5
- python/sepolicy: Fix spec file dependencies
- python/sepolicy: Fix template for confined user policy modules
- Improve man pages and add examples

Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
2023-06-23 11:20:28 +02:00
Python Maint
ac0a1ffe5c Rebuilt for Python 3.12 2023-06-13 20:25:18 +02:00
Petr Lautrbach
28f9992604 Use /bin/bash instead of /bin/sh
Fixes:

$ shellcheck -S warning selinux-autorelabel-generator.sh

In selinux-autorelabel-generator.sh line 22:
    source /etc/selinux/config
    ^------------------------^ SC3046 (warning): In POSIX sh, 'source' in place of '.' is undefined.

For more information:
  https://www.shellcheck.net/wiki/SC3046 -- In POSIX sh, 'source' in place of...

https://bugzilla.redhat.com/show_bug.cgi?id=2210593
2023-05-30 10:28:15 +00:00
Miro Hrončok
3cac2f0428 Fix build with pip 23.1.2+
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2209016
2023-05-26 11:27:31 +02:00
Tomas Popela
8acd4a7172 Drop unused BR on dbus-glib-devel and explicitly BR glib2-devel
The project has moved away from dbus-glib in version 3.2[0] and the BR
is not needed at all. Explicitly add the glib2-devel to BR to fix the
build after this change (it got there previously through
dbus-glib-devel).

[0] - 252925ccdf
2023-05-10 14:38:07 +02:00