diff --git a/.fmf/version b/.fmf/version deleted file mode 100644 index d00491f..0000000 --- a/.fmf/version +++ /dev/null @@ -1 +0,0 @@ -1 diff --git a/.gitignore b/.gitignore index b838721..2175af9 100644 --- a/.gitignore +++ b/.gitignore @@ -1,21 +1 @@ -setools-3.3.7.tar.bz2 -setools-3.3.8.tar.bz2 -setools-3.3.8-f1e5b20.tar.bz2 -/4.1.0.tar.gz -/4.1.1.tar.gz -/4.2.0-beta.tar.gz -/4.2.0-rc.tar.gz -/4.2.0.tar.gz -/4.2.1.tar.gz -/4.2.2.tar.gz -/4.3.0.tar.gz -/05e90ee.tar.gz -/16c0696.tar.gz -/4.4.0.tar.gz -/4.4.1.tar.gz -/4.4.2.tar.gz -/4.4.3.tar.gz -/4.4.4.tar.gz -/4.5.0.tar.gz -/4.5.1.tar.gz -/4.6.0.tar.gz +setools-3.3.5.tar.gz diff --git a/156.patch b/156.patch deleted file mode 100644 index ea56fc1..0000000 --- a/156.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 39f7c88251925463c38f5000f6178fe70b484f44 Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Miro=20Hron=C4=8Dok?= -Date: Tue, 8 Apr 2025 11:22:47 +0200 -Subject: [PATCH] Remove redundant runtime requirement on setuptools -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -The dependency was dropped in 99a1cf3b50cd8bf502b5070293c4d1bf792d1566 - -Add a build time dependency for setup.py build_ext on Python 3.12+ -which no longer contains distutils. - -Signed-off-by: Miro Hrončok ---- - pyproject.toml | 2 +- - tox.ini | 1 + - 2 files changed, 2 insertions(+), 1 deletion(-) - -diff --git a/pyproject.toml b/pyproject.toml -index f7815a15..28ae121a 100644 ---- a/pyproject.toml -+++ b/pyproject.toml -@@ -39,7 +39,7 @@ classifiers = ["Development Status :: 5 - Production/Stable", - - requires-python=">=3.10" - # also requires libsepol.so and libselinux.so. --dependencies = ["setuptools"] -+dependencies = [] - - optional-dependencies.analysis = ["networkx>=2.6", - "pygraphviz"] -diff --git a/tox.ini b/tox.ini -index 8fa6954f..b2a21d6b 100644 ---- a/tox.ini -+++ b/tox.ini -@@ -56,5 +56,6 @@ deps = networkx>=2.6 - pygraphviz - pytest-qt - pytest-xvfb -+ setuptools;python_version>="3.12" - commands_pre = {envpython} setup.py build_ext -i - commands = {envpython} -m pytest tests diff --git a/157.patch b/157.patch deleted file mode 100644 index 24b6820..0000000 --- a/157.patch +++ /dev/null @@ -1,42 +0,0 @@ -From a33a2e394435316f3822e89ac9c2a9aabab17252 Mon Sep 17 00:00:00 2001 -From: Pranav Lawate -Date: Tue, 30 Sep 2025 22:29:10 +0530 -Subject: [PATCH] Fix seinfo argument parsing when policy path follows query - options - -Signed-off-by: Pranav Lawate ---- - seinfo | 13 +++++++++++++ - 1 file changed, 13 insertions(+) - -diff --git a/seinfo b/seinfo -index 99180c36..d04ec320 100755 ---- a/seinfo -+++ b/seinfo -@@ -12,6 +12,7 @@ import logging - import signal - import ipaddress - import warnings -+from pathlib import Path - from typing import Callable, List, Tuple - - -@@ -102,6 +103,18 @@ xen.add_argument("--devicetreecon", help="Print all devicetreecon statements.", - - args = parser.parse_args() - -+# Fix argument misparsing: when policy is None and a query option is a string, -+# check if the string is actually a policy file that is incorrectly consumed by the query option -+if not args.policy: -+ # Check all query options defined in the queries argument group -+ for action in queries._group_actions: -+ value = getattr(args, action.dest, None) -+ if isinstance(value, str) and Path(value).exists(): -+ # This query argument consumed the policy path - fix it -+ args.policy = value -+ setattr(args, action.dest, True) -+ break -+ - if args.debug: - logging.basicConfig(level=logging.DEBUG, - format='%(asctime)s|%(levelname)s|%(name)s|%(message)s') diff --git a/apol.desktop b/apol.desktop index 727733a..6cc82cc 100644 --- a/apol.desktop +++ b/apol.desktop @@ -2,10 +2,11 @@ Name=SELinux Policy Analysis GenericName=SELinux Policy Analysis Tool Comment=This tool can examine, search, and relate policy components and policy rules -Icon=apol +Icon=apol.png Exec=/usr/bin/apol Type=Application Terminal=false +Encoding=UTF-8 Categories=System; X-Desktop-File-Install-Version=0.2 StartupNotify=true diff --git a/gating.yaml b/gating.yaml deleted file mode 100644 index af6eb32..0000000 --- a/gating.yaml +++ /dev/null @@ -1,16 +0,0 @@ ---- !Policy -product_versions: - - fedora-* -decision_context: bodhi_update_push_testing -subject_type: koji_build -rules: - - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} - ---- !Policy -product_versions: - - fedora-* -decision_context: bodhi_update_push_stable -subject_type: koji_build -rules: - - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} - diff --git a/plans/selinux.fmf b/plans/selinux.fmf deleted file mode 100644 index b20003c..0000000 --- a/plans/selinux.fmf +++ /dev/null @@ -1,7 +0,0 @@ -summary: selinux tests - Tier 1 | policycoreutils | checkpolicy -discover: - how: fmf - url: https://src.fedoraproject.org/tests/selinux - filter: "tier: 1 | component: policycoreutils | component: checkpolicy" -execute: - how: tmt diff --git a/plans/tests.fmf b/plans/tests.fmf deleted file mode 100644 index 1caffcc..0000000 --- a/plans/tests.fmf +++ /dev/null @@ -1,5 +0,0 @@ -summary: setools test plan -discover: - how: fmf -execute: - how: tmt diff --git a/rpminspect.yaml b/rpminspect.yaml deleted file mode 100644 index 6bcfaca..0000000 --- a/rpminspect.yaml +++ /dev/null @@ -1,3 +0,0 @@ -emptyrpm: - expected_empty: - - setools diff --git a/seaudit.desktop b/seaudit.desktop index d3a277e..e07e62b 100644 --- a/seaudit.desktop +++ b/seaudit.desktop @@ -6,6 +6,7 @@ Icon=seaudit.png Exec=/usr/bin/seaudit Type=Application Terminal=false +Encoding=UTF-8 Categories=System; X-Desktop-File-Install-Version=0.2 StartupNotify=true diff --git a/sediffx.desktop b/sediffx.desktop index fb714d9..fe115cc 100644 --- a/sediffx.desktop +++ b/sediffx.desktop @@ -5,6 +5,7 @@ Comment=This tool allows you to compare two policy files Exec=/usr/bin/sediffx Type=Application Terminal=false +Encoding=UTF-8 Categories=System; X-Desktop-File-Install-Version=0.2 StartupNotify=true diff --git a/setools.spec b/setools.spec index e43d04a..1a02391 100644 --- a/setools.spec +++ b/setools.spec @@ -1,44 +1,150 @@ -%global sepol_ver 3.9 -%global selinux_ver 3.9 +%define setools_maj_ver 3.3 +%define setools_min_ver 5 +%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} +%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")} -Name: setools -Version: 4.6.0 -Release: 4%{?dist} -Summary: Policy analysis tools for SELinux +Name: setools +Version: %{setools_maj_ver}.%{setools_min_ver} +Release: 8%{?dist} +License: GPLv2 +URL: http://oss.tresys.com/projects/setools +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root +Source: http://oss.tresys.com/projects/setools/chrome/site/dists/setools-%{version}/setools-%{version}.tar.gz +Source1: setools.pam +Source2: apol.desktop +Source3: seaudit.desktop +Source4: sediffx.desktop +Summary: Policy analysis tools for SELinux +Group: System Environment/Base +Requires: setools-libs = %{version}-%{release} setools-libs-tcl = %{version}-%{release} setools-gui = %{version}-%{release} setools-console = %{version}-%{release} -License: GPL-2.0-only AND LGPL-2.1-only -URL: https://github.com/SELinuxProject/setools/wiki -Source0: https://github.com/SELinuxProject/setools/archive/%{version}.tar.gz -Source1: setools.pam -Source2: apol.desktop - -# Remove redundant runtime requirement on setuptools -Patch: https://github.com/SELinuxProject/setools/pull/156.patch -# Fix seinfo argument parsing when policy path follows query -Patch: https://github.com/SELinuxProject/setools/pull/157.patch - -Obsoletes: setools < 4.0.0, setools-devel < 4.0.0 -BuildRequires: flex, bison -BuildRequires: glibc-devel, gcc, git-core -BuildRequires: libsepol-devel >= %{sepol_ver}, libsepol-static >= %{sepol_ver} -BuildRequires: swig -BuildRequires: python3-Cython -BuildRequires: python3-devel -BuildRequires: libselinux-devel - -Requires: %{name}-console = %{version}-%{release} -Requires: %{name}-console-analyses = %{version}-%{release} -Requires: %{name}-gui = %{version}-%{release} +# external requirements +%define autoconf_ver 2.59 +%define bwidget_ver 1.8 +%define java_ver 1.2 +%define gtk_ver 2.8 +%define python_ver 2.3 +%define sepol_ver 1.12.27 +%define selinux_ver 1.30 +%define sqlite_ver 3.2.0 +%define swig_ver 1.3.28 +%define tcltk_ver 8.4.9 %description SETools is a collection of graphical tools, command-line tools, and -Python modules designed to facilitate SELinux policy analysis. +libraries designed to facilitate SELinux policy analysis. -%package console -Summary: Policy analysis command-line tools for SELinux -License: GPL-2.0-only -Requires: python3-setools = %{version}-%{release} -Requires: libselinux >= %{selinux_ver} +This meta-package depends upon the main packages necessary to run +SETools. + +%package libs +License: LGPLv2 +Summary: Policy analysis support libraries for SELinux +Group: System Environment/Libraries +Requires: libselinux >= %{selinux_ver} libsepol >= %{sepol_ver} sqlite >= %{sqlite_ver} +BuildRequires: flex bison pkgconfig +BuildRequires: glibc-devel libstdc++-devel gcc gcc-c++ +BuildRequires: libselinux-devel >= %{selinux_ver} libsepol-devel >= %{sepol_ver} +BuildRequires: libsepol-static >= %{sepol_ver} +BuildRequires: sqlite-devel >= %{sqlite_ver} libxml2-devel +BuildRequires: tcl-devel >= %{tcltk_ver} +BuildRequires: autoconf >= %{autoconf_ver} automake + +%description libs +SETools is a collection of graphical tools, command-line tools, and +libraries designed to facilitate SELinux policy analysis. + +This package includes the following run-time libraries: + + libapol policy analysis library + libpoldiff semantic policy difference library + libqpol library that abstracts policy internals + libseaudit parse and filter SELinux audit messages in log files + libsefs SELinux file contexts library + +%package libs-python +License: LGPLv2 +Summary: Python bindings for SELinux policy analysis +Group: Development/Languages +Requires: setools-libs = %{version}-%{release} python2 >= %{python_ver} +BuildRequires: python2-devel >= %{python_ver} swig >= %{swig_ver} + +%description libs-python +SETools is a collection of graphical tools, command-line tools, and +libraries designed to facilitate SELinux policy analysis. + +This package includes Python bindings for the following libraries: + + libapol policy analysis library + libpoldiff semantic policy difference library + libqpol library that abstracts policy internals + libseaudit parse and filter SELinux audit messages in log files + libsefs SELinux file contexts library + +%package libs-java +License: LGPLv2 +Summary: Java bindings for SELinux policy analysis +Group: Development/Languages +Requires: setools-libs = %{version}-%{release} java >= %{java_ver} +BuildRequires: java-devel >= %{java_ver} swig >= %{swig_ver} + +%description libs-java +SETools is a collection of graphical tools, command-line tools, and +libraries designed to facilitate SELinux policy analysis. + +This package includes Java bindings for the following libraries: + + libapol policy analysis library + libpoldiff semantic policy difference library + libqpol library that abstracts policy internals + libseaudit parse and filter SELinux audit messages in log files + libsefs SELinux file contexts library + +%package libs-tcl +License: LGPLv2 +Summary: Tcl bindings for SELinux policy analysis +Group: Development/Languages +Requires: setools-libs = %{version}-%{release} tcl >= %{tcltk_ver} +BuildRequires: tcl-devel >= %{tcltk_ver} swig >= %{swig_ver} + +%description libs-tcl +SETools is a collection of graphical tools, command-line tools, and +libraries designed to facilitate SELinux policy analysis. + +This package includes Tcl bindings for the following libraries: + + libapol policy analysis library + libpoldiff semantic policy difference library + libqpol library that abstracts policy internals + libseaudit parse and filter SELinux audit messages in log files + libsefs SELinux file contexts library + +%package devel +License: LGPLv2 +Summary: Policy analysis development files for SELinux +Group: Development/Libraries +Requires: libselinux-devel >= %{selinux_ver} libsepol-devel >= %{sepol_ver} setools-libs = %{version}-%{release} +BuildRequires: sqlite-devel >= %{sqlite_ver} libxml2-devel + +%description devel +SETools is a collection of graphical tools, command-line tools, and +libraries designed to facilitate SELinux policy analysis. + +This package includes header files and archives for the following +libraries: + + libapol policy analysis library + libpoldiff semantic policy difference library + libqpol library that abstracts policy internals + libseaudit parse and filter SELinux audit messages in log files + libsefs SELinux file contexts library + +%package console +Summary: Policy analysis command-line tools for SELinux +Group: System Environment/Base +License: GPLv2 +Requires: setools-libs = %{version}-%{release} +Requires: libselinux >= %{selinux_ver} %description console SETools is a collection of graphical tools, command-line tools, and @@ -46,355 +152,491 @@ libraries designed to facilitate SELinux policy analysis. This package includes the following console tools: - sediff Compare two policies to find differences. - seinfo List policy components. - sesearch Search rules (allow, type_transition, etc.) + seaudit-report audit log analysis tool + sechecker SELinux policy checking tool + secmds command line tools: seinfo, sesearch, findcon, + replcon, and indexcon + sediff semantic policy difference tool - -%package console-analyses -Summary: Policy analysis command-line tools for SELinux -License: GPL-2.0-only -Requires: python3-setools = %{version}-%{release} -Requires: libselinux >= %{selinux_ver} -Requires: python3-networkx - -%description console-analyses -SETools is a collection of graphical tools, command-line tools, and -libraries designed to facilitate SELinux policy analysis. - -This package includes the following console tools: - - sedta Perform domain transition analyses. - seinfoflow Perform information flow analyses. - - -%package -n python3-setools -Summary: Policy analysis tools for SELinux -License: LGPL-2.1-only -Obsoletes: setools-libs < 4.0.0 - -%description -n python3-setools -SETools is a collection of graphical tools, command-line tools, and -Python 3 modules designed to facilitate SELinux policy analysis. - - -%package gui -Summary: Policy analysis graphical tools for SELinux -License: GPL-2.0-only -Requires: python3-setools = %{version}-%{release} -Requires: python3-pyqt6 python3-pyqt6-sip -Requires: python3-networkx +%package gui +Summary: Policy analysis graphical tools for SELinux +Group: System Environment/Base +Requires: tcl >= %{tcltk_ver} tk >= %{tcltk_ver} bwidget >= %{bwidget_ver} +Requires: setools-libs = %{version}-%{release} setools-libs-tcl = %{version}-%{release} +Requires: glib2 gtk2 >= %{gtk_ver} usermode +BuildRequires: gtk2-devel >= %{gtk_ver} libglade2-devel libxml2-devel tk-devel >= %{tcltk_ver} +BuildRequires: desktop-file-utils %description gui SETools is a collection of graphical tools, command-line tools, and -Python modules designed to facilitate SELinux policy analysis. +libraries designed to facilitate SELinux policy analysis. +This package includes the following graphical tools: + + apol policy analysis tool + seaudit audit log analysis tool + sediffx semantic policy difference tool + +%define setoolsdir %{_datadir}/setools-%{setools_maj_ver} +%define pkg_py_lib %{python_sitelib}/setools +%define pkg_py_arch %{python_sitearch}/setools +%define javajardir %{_datadir}/java +%define tcllibdir %{_libdir}/setools %prep -%autosetup -p 1 -S git -n setools-%{version} - - -%generate_buildrequires -%pyproject_buildrequires - +%setup -q %build -%pyproject_wheel - +%configure --libdir=%{_libdir} --disable-bwidget-check --disable-selinux-check \ + --enable-swig-python --enable-swig-java --enable-swig-tcl --with-java-prefix=/usr/lib/jvm/java +# work around issue with gcc 4.3 + gnu99 + swig-generated code: +sed -i -e 's:$(CC):gcc -std=gnu89:' libseaudit/swig/python/Makefile +%ifarch sparc sparcv9 sparc64 s390 s390x + for file in `find . -name Makefile`; do + sed -i -e 's:-fpic:-fPIC:' $file; + done +%endif +make %{?_smp_mflags} %install -%pyproject_install - -%check -%if %{?_with_check:1}%{!?_with_check:0} -# dnf install python3-pytest python3-pytest-qt -%pytest -%endif +rm -rf ${RPM_BUILD_ROOT} +make DESTDIR=${RPM_BUILD_ROOT} INSTALL="install -p" install +mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/applications +mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/pixmaps +install -d -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/pam.d +install -p -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/pam.d/seaudit +install -d -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/security/console.apps +install -p -m 644 packages/rpm/seaudit.console ${RPM_BUILD_ROOT}%{_sysconfdir}/security/console.apps/seaudit +install -d -m 755 ${RPM_BUILD_ROOT}%{_datadir}/applications +install -p -m 644 apol/apol.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/apol.png +install -p -m 644 seaudit/seaudit.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/seaudit.png +install -p -m 644 sediff/sediffx.png ${RPM_BUILD_ROOT}%{_datadir}/pixmaps/sediffx.png +desktop-file-install --dir ${RPM_BUILD_ROOT}%{_datadir}/applications %{SOURCE2} %{SOURCE3} %{SOURCE4} +ln -sf consolehelper ${RPM_BUILD_ROOT}/%{_bindir}/seaudit +# replace absolute symlinks with relative symlinks +ln -sf ../setools-%{setools_maj_ver}/qpol.jar ${RPM_BUILD_ROOT}/%{javajardir}/qpol.jar +ln -sf ../setools-%{setools_maj_ver}/apol.jar ${RPM_BUILD_ROOT}/%{javajardir}/apol.jar +ln -sf ../setools-%{setools_maj_ver}/poldiff.jar ${RPM_BUILD_ROOT}/%{javajardir}/poldiff.jar +ln -sf ../setools-%{setools_maj_ver}/seaudit.jar ${RPM_BUILD_ROOT}/%{javajardir}/seaudit.jar +ln -sf ../setools-%{setools_maj_ver}/sefs.jar ${RPM_BUILD_ROOT}/%{javajardir}/sefs.jar +# remove static libs +rm -f ${RPM_BUILD_ROOT}/%{_libdir}/*.a +# ensure permissions are correct +chmod 0755 ${RPM_BUILD_ROOT}/%{_libdir}/*.so.* +chmod 0755 ${RPM_BUILD_ROOT}/%{_libdir}/%{name}/*/*.so.* +chmod 0755 ${RPM_BUILD_ROOT}/%{pkg_py_arch}/*.so.* +chmod 0755 ${RPM_BUILD_ROOT}/%{setoolsdir}/seaudit-report-service +chmod 0644 ${RPM_BUILD_ROOT}/%{tcllibdir}/*/pkgIndex.tcl +%clean +rm -rf ${RPM_BUILD_ROOT} %files +%defattr(-,root,root,-) + +%files libs +%defattr(-,root,root,-) +%doc AUTHORS ChangeLog COPYING COPYING.GPL COPYING.LGPL KNOWN-BUGS NEWS README +%{_libdir}/libqpol.so.* +%{_libdir}/libapol.so.* +%{_libdir}/libpoldiff.so.* +%{_libdir}/libsefs.so.* +%{_libdir}/libseaudit.so.* +%dir %{setoolsdir} + +%files libs-python +%defattr(-,root,root,-) +%{pkg_py_lib}/ +%ifarch x86_64 ppc64 sparc64 s390x +%{pkg_py_arch}/ +%endif + +%files libs-java +%defattr(-,root,root,-) +%{_libdir}/libjqpol.so.* +%{_libdir}/libjapol.so.* +%{_libdir}/libjpoldiff.so.* +%{_libdir}/libjseaudit.so.* +%{_libdir}/libjsefs.so.* +%{setoolsdir}/*.jar +%{javajardir}/*.jar + +%files libs-tcl +%defattr(-,root,root,-) +%dir %{tcllibdir} +%{tcllibdir}/qpol/ +%{tcllibdir}/apol/ +%{tcllibdir}/poldiff/ +%{tcllibdir}/seaudit/ +%{tcllibdir}/sefs/ + +%files devel +%defattr(-,root,root,-) +%{_libdir}/*.so +%{_libdir}/pkgconfig/* +%{_includedir}/qpol/ +%{_includedir}/apol/ +%{_includedir}/poldiff/ +%{_includedir}/seaudit/ +%{_includedir}/sefs/ %files console -%license COPYING.GPL -%{_bindir}/sechecker -%{_bindir}/sediff +%defattr(-,root,root,-) %{_bindir}/seinfo %{_bindir}/sesearch -%{_mandir}/man1/sechecker* -%{_mandir}/man1/sediff* -%{_mandir}/man1/seinfo* -%{_mandir}/man1/sesearch* -%{_mandir}/ru/man1/sediff* -%{_mandir}/ru/man1/seinfo* -%{_mandir}/ru/man1/sesearch* - -%files console-analyses -%license COPYING.GPL -%{_bindir}/sedta -%{_bindir}/seinfoflow -%{_mandir}/man1/sedta* -%{_mandir}/man1/seinfoflow* -%{_mandir}/ru/man1/sedta* -%{_mandir}/ru/man1/seinfoflow* - -%files -n python3-setools -%license COPYING COPYING.LGPL -%{python3_sitearch}/setools -%{python3_sitearch}/setools-* +%{_bindir}/indexcon +%{_bindir}/findcon +%{_bindir}/replcon +%{_bindir}/sechecker +%{_bindir}/sediff +%{_bindir}/seaudit-report +%{setoolsdir}/sechecker-profiles/ +%{setoolsdir}/sechecker_help.txt +%{setoolsdir}/seaudit-report-service +%{setoolsdir}/seaudit-report.conf +%{setoolsdir}/seaudit-report.css +%{_mandir}/man1/findcon.1.gz +%{_mandir}/man1/indexcon.1.gz +%{_mandir}/man1/replcon.1.gz +%{_mandir}/man1/sechecker.1.gz +%{_mandir}/man1/sediff.1.gz +%{_mandir}/man1/seinfo.1.gz +%{_mandir}/man1/sesearch.1.gz +%{_mandir}/man8/seaudit-report.8.gz %files gui -%license COPYING.GPL +%defattr(-,root,root,-) +%{_bindir}/seaudit +%{_bindir}/sediffx %{_bindir}/apol -%{python3_sitearch}/setoolsgui -%{_mandir}/man1/apol* -%{_mandir}/ru/man1/apol* +%{tcllibdir}/apol_tcl/ +%{setoolsdir}/sediff_help.txt +%{setoolsdir}/apol_help.txt +%{setoolsdir}/domaintrans_help.txt +%{setoolsdir}/file_relabel_help.txt +%{setoolsdir}/infoflow_help.txt +%{setoolsdir}/types_relation_help.txt +%{setoolsdir}/apol_perm_mapping_* +%{setoolsdir}/seaudit_help.txt +%{setoolsdir}/*.glade +%{setoolsdir}/*.png +%{setoolsdir}/apol.gif +%{setoolsdir}/dot_seaudit +%{_mandir}/man1/apol.1.gz +%{_mandir}/man1/sediffx.1.gz +%{_mandir}/man8/seaudit.8.gz +%{_sbindir}/seaudit +%config(noreplace) %{_sysconfdir}/pam.d/seaudit +%config(noreplace) %{_sysconfdir}/security/console.apps/seaudit +%{_datadir}/applications/* +%attr(0644,root,root) %{_datadir}/pixmaps/*.png + +%post libs -p /sbin/ldconfig + +%postun libs -p /sbin/ldconfig + +%post libs-java -p /sbin/ldconfig + +%postun libs-java -p /sbin/ldconfig + +%post libs-tcl -p /sbin/ldconfig + +%postun libs-tcl -p /sbin/ldconfig %changelog -* Mon Dec 01 2025 Veronika Syncakova - 4.6.0-4 -- Fix seinfo argument parsing when policy path follows query options +* Sun Apr 5 2009 Dan Horák - 3.3.5-8 +- don't expect that java-devel resolves as gcj -* Thu Oct 02 2025 Miro Hrončok - 4.6.0-3 -- Drop redundant runtime requirement on python3-setuptools (redux) +* Sun Apr 5 2009 Dan Horák - 3.3.5-7 +- add support for s390x -* Fri Sep 19 2025 Python Maint - 4.6.0-2 -- Rebuilt for Python 3.14.0rc3 bytecode +* Wed Feb 25 2009 Fedora Release Engineering - 3.3.5-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild -* Tue Sep 09 2025 Petr Lautrbach - 4.6.0-1 -- SETools 4.6.0 +* Thu Dec 04 2008 Ignacio Vazquez-Abrams - 3.3.5-5 +- Rebuild for Python 2.6 -* Fri Aug 15 2025 Python Maint - 4.5.1-11 -- Rebuilt for Python 3.14.0rc2 bytecode +* Mon Dec 1 2008 Michael Schwendt - 3.3.5-4 +- Include %%tcllibdir directory in -libs-tcl package. -* Mon Aug 04 2025 Miro Hrončok - 4.5.1-10 -- Drop redundant runtime requirement on python3-setuptools (correction) +* Sat Nov 29 2008 Ignacio Vazquez-Abrams - 3.3.5-3 +- Rebuild for Python 2.6 -* Fri Jul 25 2025 Fedora Release Engineering - 4.5.1-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild +* Wed Sep 17 2008 Dennis Gilmore 3.3.5-2 +- fix building in sparc and s390 arches -* Sat Jul 05 2025 Petr Lautrbach - 4.5.1-8 -- Rebuilt with SELinux userspace 3.9-rc2 release +* Tue Aug 26 2008 Chris PeBenito 3.3.5-1 +- Update to upstream version 3.3.5. -* Mon Jun 02 2025 Python Maint - 4.5.1-7 -- Rebuilt for Python 3.14 +* Wed Feb 27 2008 Chris PeBenito 3.3.4-1 +- Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues. +- Fix policy loading when policy on disk is higher version than the kernel. -* Tue Apr 01 2025 Miro Hrončok - 4.5.1-6 -- Drop redundant runtime requirement on python3-setuptools, dropped in setools 4.5.1 +* Tue Feb 19 2008 Fedora Release Engineering - 3.3.2-3 +- Autorebuild for GCC 4.3 -* Sun Jan 19 2025 Fedora Release Engineering - 4.5.1-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild +* Tue Jan 29 2008 Chris Pebenito 3.3.2-2.fc9 +- Bump to pick up new libsepol and policy 22. -* Sat Jul 20 2024 Fedora Release Engineering - 4.5.1-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild +* Wed Nov 28 2007 Chris Pebenito 3.3.2-1.fc9 +- Update for 3.3.2. -* Fri Jun 07 2024 Python Maint - 4.5.1-3 -- Rebuilt for Python 3.13 +* Thu Oct 18 2007 Chris PeBenito 3.3.1-7.fc8 +- Rebuild to fix ppc64 issue. -* Thu May 02 2024 Petr Lautrbach - 4.5.1-2 -- Fix License tag +* Wed Oct 17 2007 Chris PeBenito 3.3.1-6.fc8 +- Update for 3.3.1. -* Thu May 02 2024 Petr Lautrbach - 4.5.1-1 -- SETools 4.5.1 +* Tue Aug 28 2007 Fedora Release Engineering - 3.2-4 +- Rebuild for selinux ppc32 issue. -* Thu Apr 18 2024 Petr Lautrbach - 4.5.0-1 -- SETools 4.5.0 +* Fri Jul 20 2007 Dan Walsh 3.2-3 +- Move to Tresys spec file -* Sat Jan 27 2024 Fedora Release Engineering - 4.4.4-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild +* Wed Jun 13 2007 Dan Walsh 3.2-2 +- Bump for rebuild -* Mon Dec 11 2023 Petr Lautrbach - 4.4.4-1 -- SETools 4.4.4 release +* Mon Apr 30 2007 Dan Walsh 3.2-1 +- Start shipping the rest of the setools command line apps -* Mon Aug 28 2023 Petr Lautrbach - 4.4.3-2 -- Use Qt 6 +* Wed Apr 25 2007 Jason Tang 3.2-0 +- update to SETools 3.2 release -* Wed Aug 9 2023 Petr Lautrbach - 4.4.3-1 -- SETools 4.4.3 release +* Mon Feb 02 2007 Jason Tang 3.1-1 +- update to SETools 3.1 release -* Wed Jul 26 2023 Petr Lautrbach - 4.4.2-4 -- Disable/remove neverallow options in sediff. -- Improve man pages -- seinfoflow: Add -r option to get flows into the source type. -- seinfoflow.1: Remove references to sepolgen permission map. -- AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. -- SELinuxPolicy: Add explicit cast for libspol message +* Mon Oct 30 2006 Dan Walsh 3.0-2.fc6 +- bump for fc6 + +* Thu Oct 26 2006 Dan Walsh 3.0-2 +- Build on rawhide -* Sat Jul 22 2023 Fedora Release Engineering - 4.4.2-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild +* Sun Oct 15 2006 Dan Walsh 3.0-1 +- Update to upstream -* Tue Jun 13 2023 Python Maint - 4.4.2-2 -- Rebuilt for Python 3.12 +* Wed Jul 12 2006 Jesse Keating - sh: line 0: fg: no job control +- rebuild -* Thu Apr 20 2023 Petr Lautrbach - 4.4.2-1 -- SETools 4.4.2 release +* Tue May 23 2006 Dan Walsh 2.4-2 +- Remove sqlite include directory -* Mon Feb 6 2023 Petr Lautrbach - 4.4.1-1 -- SETools 4.4.1 release +* Wed May 3 2006 Dan Walsh 2.4-1 +- Update from upstream -* Sat Jan 21 2023 Fedora Release Engineering - 4.4.0-10 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild +* Mon Apr 10 2006 Dan Walsh 2.3-3 +- Fix help +- Add icons -* Sat Jul 23 2022 Fedora Release Engineering - 4.4.0-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild +* Tue Mar 21 2006 Dan Walsh 2.3-2 +- Remove console apps for sediff, sediffx and apol -* Thu Jun 16 2022 Python Maint - 4.4.0-8 -- Rebuilt for Python 3.11 +* Fri Feb 10 2006 Jesse Keating - 2.3-1.2 +- bump again for double-long bug on ppc(64) -* Mon Jun 13 2022 Petr Lautrbach - 4.4.0-7 -- Update required userspace versions to 3.4 -- Drop unnecessary Recommends +* Tue Feb 07 2006 Jesse Keating - 2.3-1.1 +- rebuilt for new gcc4.1 snapshot and glibc changes -* Mon Jun 13 2022 Python Maint - 4.4.0-6 -- Rebuilt for Python 3.11 +* Tue Jan 31 2006 Dan Walsh 2.3-1 +- Update from upstream + * apol: + added new MLS components tab for sensitivities, + levels, and categories. + Changed users tab to support ranges and default + levels. + added range transition tab for searching range + Transition rules. + added new tab for network context components. + added new tab for file system context components. + * libapol: + added binpol support for MLS, network contexts, + and file system contexts. + * seinfo: + added command line options for MLS components. + added command line options for network contexts + and file system contexts. + * sesearch: + added command line option for searching for rules + by conditional boolean name. + * seaudit: + added new column in the log view for the 'comm' + field found in auditd log files. + added filters for the 'comm' field and 'message' + field. + * manpages: + added manpages for all tools. -* Sat Jan 22 2022 Fedora Release Engineering - 4.4.0-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -* Fri Nov 19 2021 Petr Lautrbach - 4.4.0-4 -- Make seinfo output predictable - https://github.com/SELinuxProject/setools/issues/65 -* Fri Jul 23 2021 Fedora Release Engineering - 4.4.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild +* Fri Dec 16 2005 Jesse Keating +- rebuilt for new gcj -* Fri Jun 04 2021 Python Maint - 4.4.0-2 -- Rebuilt for Python 3.10 +* Wed Dec 14 2005 Dan Walsh 2.2-4 +- Fix dessktop files +- Apply fixes from bkyoung -* Mon Mar 8 2021 Petr Lautrbach - 4.4.0-1 -- SETools 4.4.0 release +* Fri Dec 09 2005 Jesse Keating +- rebuilt -* Wed Jan 27 2021 Fedora Release Engineering - 4.4.0-0.3.20210121git16c0696 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild +* Thu Nov 3 2005 Dan Walsh 2.2-3 +- Move more gui files out of base into gui -* Thu Jan 21 2021 Petr Lautrbach - 4.4.0-0.2.20210121git16c0696 -- Rebuild with SELinux userspace 3.2-rc1 -- Update to 16c0696 +* Thu Nov 3 2005 Dan Walsh 2.2-2 +- Move sediff from gui to main package -* Thu Dec 10 2020 Petr Lautrbach - 4.4.0-0.2.20201102git05e90ee -- Fix imports in /usr/bin/sedta +* Thu Nov 3 2005 Dan Walsh 2.2-1 +- Upgrade to upstream version -* Tue Nov 3 2020 Petr Lautrbach - 4.4.0-0.1.20201102git05e90ee -- Update to 05e90ee -- Add /usr/bin/sechecker -- Adapt to new libsepol filename transition structures -- Rebuild with libsepol.so.2 +* Thu Oct 13 2005 Dan Walsh 2.1.3-1 +- Upgrade to upstream version -* Sat Aug 01 2020 Fedora Release Engineering - 4.3.0-5 -- Second attempt - Rebuilt for - https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild +* Mon Oct 10 2005 Tomas Mraz 2.1.2-3 +- use include instead of pam_stack in pam config -* Wed Jul 29 2020 Fedora Release Engineering - 4.3.0-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild +* Thu Sep 1 2005 Dan Walsh 2.1.2-2 +- Fix spec file + +* Thu Sep 1 2005 Dan Walsh 2.1.2-1 +- Upgrade to upstream version + +* Thu Aug 18 2005 Florian La Roche +- do not package debug files into the -devel package -* Thu Jul 16 2020 Petr Lautrbach - 4.3.0-3 -- rebuild with SELinux userspace 3.1 release +* Wed Aug 17 2005 Jeremy Katz - 2.1.1-3 +- rebuild against new cairo -* Tue May 26 2020 Miro Hrončok - 4.3.0-2 -- Rebuilt for Python 3.9 +* Wed May 25 2005 Dan Walsh 2.1.1-0 +- Upgrade to upstream version -* Thu Apr 2 2020 Petr Lautrbach - 4.3.0-1 -- SETools 4.3.0 release -- Revised sediff method for TE rules. This drastically reduced memory and run time. -- Added infiniband context support to seinfo, sediff, and apol. -- Added apol configuration for location of Qt assistant. -- Fixed sediff issue where properties header would display when not requested. -- Fixed sediff issue with type_transition file name comparison. -- Fixed permission map socket sendto information flow direction. -- Added methods to TypeAttribute class to make it a complete Python collection. -- Genfscon now will look up classes rather than using fixed values which - were dropped from libsepol. +* Mon May 23 2005 Bill Nottingham 2.1.0-5 +- put libraries in the right place (also puts debuginfo in the right + package) +- add %%defattr for -devel too -* Mon Mar 23 2020 Petr Lautrbach - 4.2.2-5 -- setools requires -console, -console-analyses and -gui packages (#1794314) +* Thu May 12 2005 Dan Walsh 2.1.0-4 +- Move sepcut to gui apps. -* Thu Jan 30 2020 Fedora Release Engineering - 4.2.2-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild +* Fri May 6 2005 Dan Walsh 2.1.0-3 +- Fix Missing return code. -* Thu Oct 03 2019 Miro Hrončok - 4.2.2-3 -- Rebuilt for Python 3.8.0rc1 (#1748018) +* Wed Apr 20 2005 Dan Walsh 2.1.0-2 +- Fix requires line -* Mon Aug 19 2019 Miro Hrončok - 4.2.2-2 -- Rebuilt for Python 3.8 +* Tue Apr 19 2005 Dan Walsh 2.1.0-1 +- Update to latest from tresys -* Mon Jul 08 2019 Vit Mojzis - 4.2.2-1} -- SETools 4.2.2 release +* Tue Apr 5 2005 Dan Walsh 2.0.0-2 +- Fix buildrequires lines in spec file -* Mon May 13 2019 Vit Mojzis - 4.2.1-3 -- Use %set_build_flags instead of %optflags +* Tue Mar 2 2005 Dan Walsh 2.0.0-1 +- Update to latest from tresys -* Mon May 06 2019 Vit Mojzis - 4.2.1-2 -- SELinuxPolicy: Create a map of aliases on policy load (#1672631) +* Mon Nov 29 2004 Dan Walsh 1.5.1-6 +- add FALLBACK=true to /etc/security/console.apps/apol -* Tue Mar 26 2019 Petr Lautrbach - 4.2.1-1 -- SETools 4.2.1 release (#1581761, #1595582) +* Wed Nov 10 2004 Dan Walsh 1.5.1-3 +- Add badtcl patch from Tresys. -* Wed Nov 14 2018 Vit Mojzis - 4.2.0-1 -- Update source to SETools 4.2.0 release +* Mon Nov 8 2004 Dan Walsh 1.5.1-2 +- Apply malloc problem patch provided by Sami Farin -* Mon Oct 01 2018 Vit Mojzis - 4.2.0-0.3.rc -- Update upstream source to 4.2.0-rc +* Mon Nov 1 2004 Dan Walsh 1.5.1-1 +- Update to latest from Upstream -* Wed Sep 19 2018 Vit Mojzis - 4.2.0-0.2.beta -- Require userspace release 2.8 -- setools-gui requires python3-setools -- Add Requires for python[23]-setuptools - no longer required (just recommended) by python[23] (#1623371) -- Drop python2 subpackage (4.2.0 no longer supports python2) +* Wed Oct 6 2004 Dan Walsh 1.4.1-5 +- Update tresys patch -* Wed Aug 29 2018 Vit Mojzis - 4.1.1-13 -- Add Requires for python[23]-setuptools - no longer required (just recommended) - by python[23] (#1623371) +* Mon Oct 4 2004 Dan Walsh 1.4.1-4 +- Fix directory ownership -* Wed Aug 22 2018 Petr Lautrbach - 4.1.1-12.1 -- Fix SCTP patch - https://github.com/SELinuxProject/setools/issues/9 +* Thu Jul 8 2004 Dan Walsh 1.4.1-1 +- Latest from Tresys -* Sat Jul 14 2018 Fedora Release Engineering - 4.1.1-11 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild +* Wed Jun 23 2004 Dan Walsh 1.4-5 +- Add build requires libselinux -* Tue Jun 19 2018 Miro Hrončok - 4.1.1-10 -- Rebuilt for Python 3.7 +* Tue Jun 22 2004 Dan Walsh 1.4-4 +- Add support for policy.18 -* Thu Jun 14 2018 Petr Lautrbach - 4.1.1-9 -- Move gui python files to -gui subpackage +* Tue Jun 15 2004 Elliot Lee +- rebuilt -* Thu Apr 26 2018 Vit Mojzis - 4.1.1-8 -- Add support for SCTP protocol (#1568333) +* Thu Jun 10 2004 Dan Walsh 1.4-2 +- Fix install locations of policy_src_dir -* Thu Apr 19 2018 Iryna Shcherbina - 4.1.1-7 -- Update Python 2 dependency declarations to new packaging standards - (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) +* Wed Jun 2 2004 Dan Walsh 1.4-1 +- Update to latest from TRESYS. -* Fri Feb 09 2018 Fedora Release Engineering - 4.1.1-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild +* Tue Jun 1 2004 Dan Walsh 1.3-3 +- Make changes to work with targeted/strict policy +* Fri Apr 16 2004 Dan Walsh 1.3-2 +- Take out requirement for policy file -* Mon Sep 04 2017 Petr Lautrbach - 4.1.1-5 -- setools-python2 requires python2-enum34 +* Fri Apr 16 2004 Dan Walsh 1.3-1 +- Fix doc location -* Sun Aug 20 2017 Zbigniew Jędrzejewski-Szmek - 4.1.1-4 -- Add Provides for the old name without %%_isa +* Fri Apr 16 2004 Dan Walsh 1.3-1 +- Latest from TRESYS -* Thu Aug 10 2017 Zbigniew Jędrzejewski-Szmek - 4.1.1-3 -- Python 2 binary package renamed to python2-setools - See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 -- Python 3 binary package renamed to python3-setools +* Tue Apr 13 2004 Dan Walsh 1.2.1-8 +- fix location of policy.conf file -* Thu Aug 10 2017 Petr Lautrbach - 4.1.1-2 -- bswap_* macros are defined in byteswap.h +* Tue Apr 6 2004 Dan Walsh 1.2.1-7 +- Obsolete setools-devel +* Tue Apr 6 2004 Dan Walsh 1.2.1-6 +- Fix location of +* Tue Apr 6 2004 Dan Walsh 1.2.1-5 +- Remove devel libraries +- Fix installdir for lib64 -* Mon Aug 07 2017 Petr Lautrbach - 4.1.1-1 -- New upstream release +* Sat Apr 3 2004 Dan Walsh 1.2.1-4 +- Add usr_t file read to policy -* Thu Aug 03 2017 Fedora Release Engineering - 4.1.0-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild +* Thu Mar 25 2004 Dan Walsh 1.2.1-3 +- Use tcl8.4 -* Thu Jul 27 2017 Fedora Release Engineering - 4.1.0-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild +* Tue Mar 02 2004 Elliot Lee +- rebuilt -* Mon May 22 2017 Petr Lautrbach - 4.1.0-3 -- setools-python{,3} packages should have a weak dependency on libselinux-python{,3} - (#1447747) +* Fri Feb 13 2004 Elliot Lee +- rebuilt -* Thu Feb 23 2017 Petr Lautrbach - 4.1.0-2 -- Move python networkx dependency to -gui and -console-analyses -- Ship sedta and seinfoflow in setools-console-analyses +* Fri Feb 6 2004 Dan Walsh 1.2.1-1 +- New patch -* Wed Feb 15 2017 Petr Lautrbach - 4.1.0-1 -- New upstream release. +* Fri Feb 6 2004 Dan Walsh 1.2-1 +- Latest upstream version + +* Tue Dec 30 2003 Dan Walsh 1.1.1-1 +- New version from upstream +- Remove seuser.te. Now in policy file. + +* Tue Dec 30 2003 Dan Walsh 1.1-2 +- Add Defattr to devel +- move libs to base kit + +* Fri Dec 19 2003 Dan Walsh 1.1-1 +- Update to latest code from tresys +- Break into three separate packages for cmdline, devel and gui +- Incorporate the tcl patch + +* Mon Dec 15 2003 Jens Petersen - 1.0.1-3 +- apply setools-1.0.1-tcltk.patch to build against tcl/tk 8.4 +- buildrequire tk-devel + +* Thu Nov 20 2003 Dan Walsh 1.0.1-2 +- Add Bwidgets to this RPM + +* Tue Nov 4 2003 Dan Walsh 1.0.1-1 +- Upgrade to 1.0.1 + +* Wed Oct 15 2003 Dan Walsh 1.0-6 +- Clean up build + +* Tue Oct 14 2003 Dan Walsh 1.0-5 +- Update with correct seuser.te + +* Wed Oct 1 2003 Dan Walsh 1.0-4 +- Update with final release from Tresys + +* Mon Jun 2 2003 Dan Walsh 1.0-1 +- Initial version diff --git a/sources b/sources index 386b801..1308bb5 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (4.6.0.tar.gz) = 5b654f480f285717d15fa55f754fbd00cb030a0d8af8342d901e0514c4fdbacb7873e19420dab98540eaa481c687ff1e03423df893c0d1744eb4c53eb81afbf5 +4b4b9048d25425efaf645c5fa2696d35 setools-3.3.5.tar.gz diff --git a/tests/Regression/The-setools-package-doesn-t-install-any-tools/Makefile b/tests/Regression/The-setools-package-doesn-t-install-any-tools/Makefile deleted file mode 100644 index a5e7a6b..0000000 --- a/tests/Regression/The-setools-package-doesn-t-install-any-tools/Makefile +++ /dev/null @@ -1,63 +0,0 @@ -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Makefile of /CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools -# Description: Make sure setools requires setools-console and setools-gui -# Author: Vit Mojzis -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2020 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -export TEST=/CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools -export TESTVERSION=1.0 - -BUILT_FILES= - -FILES=$(METADATA) runtest.sh Makefile - -.PHONY: all install download clean - -run: $(FILES) build - ./runtest.sh - -build: $(BUILT_FILES) - test -x runtest.sh || chmod a+x runtest.sh - -clean: - rm -f *~ $(BUILT_FILES) - - -include /usr/share/rhts/lib/rhts-make.include - -$(METADATA): Makefile - @echo "Owner: Vit Mojzis " > $(METADATA) - @echo "Name: $(TEST)" >> $(METADATA) - @echo "TestVersion: $(TESTVERSION)" >> $(METADATA) - @echo "Path: $(TEST_DIR)" >> $(METADATA) - @echo "Description: Make sure setools requires setools-console and setools-gui" >> $(METADATA) - @echo "Type: Regression" >> $(METADATA) - @echo "TestTime: 5m" >> $(METADATA) - @echo "RunFor: setools" >> $(METADATA) - @echo "Priority: Normal" >> $(METADATA) - @echo "License: GPLv2+" >> $(METADATA) - @echo "Confidential: no" >> $(METADATA) - @echo "Destructive: no" >> $(METADATA) - @echo "Bug: 1820078" >> $(METADATA) - @echo "Releases: -RHEL4 -RHELClient5 -RHELServer5 -RHEL6 -RHEL7" >> $(METADATA) - - rhts-lint $(METADATA) diff --git a/tests/Regression/The-setools-package-doesn-t-install-any-tools/main.fmf b/tests/Regression/The-setools-package-doesn-t-install-any-tools/main.fmf deleted file mode 100644 index 11ff640..0000000 --- a/tests/Regression/The-setools-package-doesn-t-install-any-tools/main.fmf +++ /dev/null @@ -1,11 +0,0 @@ -summary: Make sure setools requires setools-console and setools-gui -contact: Vit Mojzis -component: - - setools -test: ./runtest.sh -framework: beakerlib -duration: 5m -link: - - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1820078 -extra-summary: /CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools -extra-task: /CoreOS/setools/Regression/The-setools-package-doesn-t-install-any-tools diff --git a/tests/Regression/The-setools-package-doesn-t-install-any-tools/runtest.sh b/tests/Regression/The-setools-package-doesn-t-install-any-tools/runtest.sh deleted file mode 100755 index ad83754..0000000 --- a/tests/Regression/The-setools-package-doesn-t-install-any-tools/runtest.sh +++ /dev/null @@ -1,53 +0,0 @@ -#!/bin/bash -# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# runtest.sh of /CoreOS/setools/Regression/bz1820078-The-setools-package-doesn-t-install-any-tools -# Description: Make sure setools requires setools-console and setools-gui -# Author: Vit Mojzis -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2020 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -# Include Beaker environment -. /usr/share/beakerlib/beakerlib.sh || exit 1 - -PACKAGE="setools" - -rlJournalStart - rlPhaseStartSetup - rlRun "dnf -y remove ${PACKAGE} ${PACKAGE}-gui ${PACKAGE}-console" - OUTPUT_FILE=`mktemp` - rlPhaseEnd - - rlPhaseStartTest "bz#1820078" - rlRun "dnf -y install ${PACKAGE}" 0 - rlAssertRpm "${PACKAGE}-gui" - rlAssertRpm "${PACKAGE}-console" - # make sure that setools-* packages do not require setools - rlRun "rpm -q --whatrequires ${PACKAGE} >& ${OUTPUT_FILE}" 0,1 - rlRun "grep -i \"${PACKAGE}-\" ${OUTPUT_FILE}" 1 - if [ $? -ne 1 ]; then rlRun "cat \"${OUTPUT_FILE}\""; fi - rlPhaseEnd - - rlPhaseStartCleanup - rm -f ${OUTPUT_FILE} - rlPhaseEnd -rlJournalPrintText -rlJournalEnd diff --git a/tests/Sanity/sedta/Makefile b/tests/Sanity/sedta/Makefile deleted file mode 100644 index e45b9de..0000000 --- a/tests/Sanity/sedta/Makefile +++ /dev/null @@ -1,63 +0,0 @@ -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Makefile of /CoreOS/setools/Sanity/sedta -# Description: Does sedta work as expected? Does it support all features? -# Author: Milos Malik -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2019 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -export TEST=/CoreOS/setools/Sanity/sedta -export TESTVERSION=1.0 - -BUILT_FILES= - -FILES=$(METADATA) runtest.sh Makefile PURPOSE testpolicy.cil - -.PHONY: all install download clean - -run: $(FILES) build - ./runtest.sh - -build: $(BUILT_FILES) - test -x runtest.sh || chmod a+x runtest.sh - -clean: - rm -f *~ $(BUILT_FILES) - -include /usr/share/rhts/lib/rhts-make.include - -$(METADATA): Makefile - @echo "Owner: Milos Malik " > $(METADATA) - @echo "Name: $(TEST)" >> $(METADATA) - @echo "TestVersion: $(TESTVERSION)" >> $(METADATA) - @echo "Path: $(TEST_DIR)" >> $(METADATA) - @echo "Description: Does sedta work as expected? Does it support all features?" >> $(METADATA) - @echo "Type: Sanity" >> $(METADATA) - @echo "TestTime: 1h" >> $(METADATA) - @echo "RunFor: setools" >> $(METADATA) - @echo "Requires: policycoreutils setools-console-analyses" >> $(METADATA) - @echo "Priority: Normal" >> $(METADATA) - @echo "License: GPLv2+" >> $(METADATA) - @echo "Confidential: no" >> $(METADATA) - @echo "Destructive: no" >> $(METADATA) - @echo "Releases: -RHEL4 -RHEL6 -RHEL7 -RHELClient5 -RHELServer5" >> $(METADATA) - - rhts-lint $(METADATA) - diff --git a/tests/Sanity/sedta/PURPOSE b/tests/Sanity/sedta/PURPOSE deleted file mode 100644 index db04487..0000000 --- a/tests/Sanity/sedta/PURPOSE +++ /dev/null @@ -1,3 +0,0 @@ -PURPOSE of /CoreOS/setools/Sanity/sedta -Description: Does sedta work as expected? Does it support all features? -Author: Milos Malik diff --git a/tests/Sanity/sedta/main.fmf b/tests/Sanity/sedta/main.fmf deleted file mode 100644 index e0c2de1..0000000 --- a/tests/Sanity/sedta/main.fmf +++ /dev/null @@ -1,30 +0,0 @@ -summary: Does sedta work as expected? Does it support all features? -description: '' -contact: Milos Malik -component: - - setools -test: ./runtest.sh -framework: beakerlib -recommend: - - git - - policycoreutils - - setools-console-analyses -duration: 1h -enabled: true -tag: - - CI-Tier-1 - - NoRHEL4 - - NoRHEL5 - - NoRHEL6 - - NoRHEL7 - - TIPfail_Security - - f32friendly - - f33friendly - - targeted -adjust: - - enabled: false - when: distro == rhel-4, rhel-5, rhel-6, rhel-7 - continue: false -extra-nitrate: TC#0604139 -extra-summary: /CoreOS/setools/Sanity/sedta -extra-task: /CoreOS/setools/Sanity/sedta diff --git a/tests/Sanity/sedta/runtest.sh b/tests/Sanity/sedta/runtest.sh deleted file mode 100755 index fa6372d..0000000 --- a/tests/Sanity/sedta/runtest.sh +++ /dev/null @@ -1,87 +0,0 @@ -#!/bin/bash -# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# runtest.sh of /CoreOS/setools/Sanity/sedta -# Description: Does sedta work as expected? Does it support all features? -# Author: Milos Malik -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2019 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -# Include Beaker environment -. /usr/share/beakerlib/beakerlib.sh || exit 1 - -PACKAGE="setools" - -rlJournalStart - rlPhaseStartSetup - rlAssertRpm ${PACKAGE}-console-analyses - OUTPUT_FILE=`mktemp` - rlRun "semodule -i testpolicy.cil" - rlRun "semodule -l | grep testpolicy" - rlPhaseEnd - - rlPhaseStartTest "invalid values" - rlRun "sedta -s unknown_t >& ${OUTPUT_FILE}" 1 - rlRun "grep -i 'not a valid type' ${OUTPUT_FILE}" - rlRun "sedta -s apmd_t -t unknown_t -S >& ${OUTPUT_FILE}" 1 - rlRun "grep -i 'not a valid type' ${OUTPUT_FILE}" - rlRun "sedta -s unknown_t -p /etc/selinux/unknown/policy/policy.31 >& ${OUTPUT_FILE}" 1 - rlRun "grep -i 'no such file or directory' ${OUTPUT_FILE}" - rlRun "sedta -s apmd_t -t var_lib_t -A -1 >& ${OUTPUT_FILE}" 1 - rlRun "grep -i 'must be positive' ${OUTPUT_FILE}" - rlRun "sedta -s xyz_t >& ${OUTPUT_FILE}" - rlRun "grep -i '^0.*transition.*found' ${OUTPUT_FILE}" - rlPhaseEnd - - rlPhaseStartTest "valid values" - # transitivity - rlRun "sedta -s first_t -t second_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - rlRun "sedta -s second_t -t third_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - rlRun "sedta -s first_t -t third_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - # reflexivity - rlRun "sedta -s first_t -t first_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - rlRun "sedta -s second_t -t second_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - rlRun "sedta -s third_t -t third_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^1 domain transition path.*found' ${OUTPUT_FILE}" - # path is longer than limit - rlRun "sedta -s first_t -t third_t -A 1 >& ${OUTPUT_FILE}" - rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}" - # non-existent relation - rlRun "sedta -s first_t -t third_t -S -r >& ${OUTPUT_FILE}" - rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}" - # non-existent relation - rlRun "sedta -s third_t -t first_t -S >& ${OUTPUT_FILE}" - rlRun "grep -i '^0 domain transition path.*found' ${OUTPUT_FILE}" - rlPhaseEnd - - rlPhaseStartCleanup - rlRun "semodule -r testpolicy" - rlRun "semodule -l | grep testpolicy" 1 - rm -f ${OUTPUT_FILE} - rlPhaseEnd -rlJournalPrintText -rlJournalEnd - diff --git a/tests/Sanity/sedta/testpolicy.cil b/tests/Sanity/sedta/testpolicy.cil deleted file mode 100644 index cc39d72..0000000 --- a/tests/Sanity/sedta/testpolicy.cil +++ /dev/null @@ -1,21 +0,0 @@ -( type xyz_t ) - -( type first_t ) -( type first_exec_t ) -( type second_t ) -( type second_exec_t ) -( type third_t ) -( type third_exec_t ) - -( typetransition first_t second_exec_t process second_t ) -( typetransition second_t third_exec_t process third_t ) - -( allow first_t second_exec_t ( file ( getattr open read execute ))) -( allow first_t second_t ( process ( transition ))) -( allow second_t third_exec_t ( file ( getattr open read execute ))) -( allow second_t third_t ( process ( transition ))) - -( allow first_t first_exec_t ( file ( entrypoint ))) -( allow second_t second_exec_t ( file ( entrypoint ))) -( allow third_t third_exec_t ( file ( entrypoint ))) - diff --git a/tests/Sanity/seinfo-consistent-output/Makefile b/tests/Sanity/seinfo-consistent-output/Makefile deleted file mode 100644 index e8bd655..0000000 --- a/tests/Sanity/seinfo-consistent-output/Makefile +++ /dev/null @@ -1,64 +0,0 @@ -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Makefile of Sanity/seinfo-consistent-output -# Description: Check whether different 2 or more runs of same seinfo commands produce same output -# Author: Petr Lautrbach -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2021 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -export TEST=Sanity/seinfo-consistent-output -export TESTVERSION=1.0 - -BUILT_FILES= - -FILES=$(METADATA) runtest.sh Makefile PURPOSE - -.PHONY: all install download clean - -run: $(FILES) build - ./runtest.sh - -build: $(BUILT_FILES) - test -x runtest.sh || chmod a+x runtest.sh - -clean: - rm -f *~ $(BUILT_FILES) - - -include /usr/share/rhts/lib/rhts-make.include - -$(METADATA): Makefile - @echo "Owner: Petr Lautrbach " > $(METADATA) - @echo "Name: $(TEST)" >> $(METADATA) - @echo "TestVersion: $(TESTVERSION)" >> $(METADATA) - @echo "Path: $(TEST_DIR)" >> $(METADATA) - @echo "Description: Check whether different 2 or more runs of same seinfo commands produce same output" >> $(METADATA) - @echo "Type: Sanity" >> $(METADATA) - @echo "TestTime: 5m" >> $(METADATA) - @echo "RunFor: setools" >> $(METADATA) - @echo "Requires: setools-console" >> $(METADATA) - @echo "Priority: Normal" >> $(METADATA) - @echo "License: GPLv2+" >> $(METADATA) - @echo "Confidential: no" >> $(METADATA) - @echo "Destructive: no" >> $(METADATA) - @echo "Bug: 2019962" >> $(METADATA) - @echo "Releases: -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA) - - rhts-lint $(METADATA) diff --git a/tests/Sanity/seinfo-consistent-output/PURPOSE b/tests/Sanity/seinfo-consistent-output/PURPOSE deleted file mode 100644 index 3202eb9..0000000 --- a/tests/Sanity/seinfo-consistent-output/PURPOSE +++ /dev/null @@ -1,3 +0,0 @@ -PURPOSE of Sanity/seinfo-consistent-output -Description: Check whether different 2 or more runs of same seinfo commands produce same output -Author: Petr Lautrbach diff --git a/tests/Sanity/seinfo-consistent-output/main.fmf b/tests/Sanity/seinfo-consistent-output/main.fmf deleted file mode 100644 index 1c908d7..0000000 --- a/tests/Sanity/seinfo-consistent-output/main.fmf +++ /dev/null @@ -1,15 +0,0 @@ -summary: Check whether different 2 or more runs of same seinfo commands produce same - output -description: '' -contact: Petr Lautrbach -component: - - setools -test: ./runtest.sh -framework: beakerlib -recommend: - - setools-console -duration: 5m -link: - - relates: https://bugzilla.redhat.com/show_bug.cgi?id=2019962 -extra-summary: Sanity/seinfo-consistent-output -extra-task: Sanity/seinfo-consistent-output diff --git a/tests/Sanity/seinfo-consistent-output/runtest.sh b/tests/Sanity/seinfo-consistent-output/runtest.sh deleted file mode 100755 index 0ad39a7..0000000 --- a/tests/Sanity/seinfo-consistent-output/runtest.sh +++ /dev/null @@ -1,63 +0,0 @@ -#!/bin/bash -# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# runtest.sh of Sanity/seinfo-consistent-output -# Description: Check whether different 2 or more runs of same seinfo commands produce same output -# Author: Petr Lautrbach -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2021 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -# Include Beaker environment -. /usr/share/beakerlib/beakerlib.sh || exit 1 - -PACKAGE="setools-console" - -rlJournalStart - rlPhaseStartSetup - rlAssertRpm $PACKAGE - rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory" - rlRun "pushd $TmpDir" - rlPhaseEnd - - commands=( - "seinfo --all -x" - "seinfo --constrain" - "seinfo --common" - "seinfo -c -x" - "seinfo -r -x" - "seinfo -u -x" - ) - - for c in "${commands[@]}"; do - - rlPhaseStartTest "$c" - rlRun "$c > 1.out" - rlRun "$c > 2.out" - rlRun "cmp 1.out 2.out" 0 - rlPhaseEnd - done - - rlPhaseStartCleanup - rlRun "popd" - rlRun "rm -r $TmpDir" 0 "Removing tmp directory" - rlPhaseEnd -rlJournalPrintText -rlJournalEnd