7.4.14

7.4.13
Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
2026-08-25 10:40:22 -05:00 · 2026-08-20 10:59:03 -05:00 · 2026-07-17 09:37:52 +00:00 · 2026-07-09 11:51:13 -05:00 · 2026-06-12 20:09:45 -04:00 · 2026-06-01 19:28:49 +02:00
11 changed files with 1010 additions and 1157 deletions
--- a/.fmf/version
+++ b/.fmf/version
@ -0,0 +1 @@
+1
--- a/.gitignore
+++ b/.gitignore
@ -85,3 +85,42 @@ zabbix-1.8.2.tar.gz
 /zabbix-6.0.4.tar.gz
 /zabbix-6.0.5.tar.gz
 /zabbix-6.0.6.tar.gz
+/zabbix-6.0.8.tar.gz
+/zabbix-6.0.12.tar.gz
+/zabbix-6.0.13.tar.gz
+/zabbix-6.0.14.tar.gz
+/zabbix-6.0.15.tar.gz
+/zabbix-6.0.16.tar.gz
+/zabbix-6.0.17.tar.gz
+/zabbix-6.0.18.tar.gz
+/zabbix-6.0.19.tar.gz
+/zabbix-6.0.20.tar.gz
+/zabbix-6.0.22.tar.gz
+/zabbix-6.0.25.tar.gz
+/zabbix-6.0.27.tar.gz
+/zabbix-6.0.29.tar.gz
+/zabbix-6.0.30.tar.gz
+/zabbix-6.0.33.tar.gz
+/zabbix-7.0.2.tar.gz
+/zabbix-7.0.3.tar.gz
+/zabbix-7.0.4.tar.gz
+/zabbix-7.0.5.tar.gz
+/zabbix-7.0.6.tar.gz
+/zabbix-7.2.0.tar.gz
+/zabbix-7.2.2.tar.gz
+/zabbix-7.2.5.tar.gz
+/zabbix-7.2.9.tar.gz
+/zabbix-7.2.10.tar.gz
+/zabbix-7.2.11.tar.gz
+/zabbix-7.4.1.tar.gz
+/zabbix-7.4.2.tar.gz
+/zabbix-7.4.3.tar.gz
+/zabbix-7.4.4.tar.gz
+/zabbix-7.4.5.tar.gz
+/zabbix-7.4.6.tar.gz
+/zabbix-7.4.7.tar.gz
+/zabbix-7.4.8.tar.gz
+/zabbix-7.4.9.tar.gz
+/zabbix-7.4.12.tar.gz
+/zabbix-7.4.13.tar.gz
+/zabbix-7.4.14.tar.gz
--- a/plans/dsp.fmf
+++ b/plans/dsp.fmf
@ -0,0 +1,22 @@
+summary: DSP test suite
+discover:
+  - name: DSP_test
+    how: fmf
+    url: https://github.com/fedora-selinux/DSP_test.git
+    ref: main
+
+execute:
+    how: tmt
+
+environment:
+    trigger: FedoraCI
+    # DSP_test specific variables:
+    TEST_RPM: "zabbix-selinux"
+    TEST_POLICY: "zabbix"
+
+prepare:
+    how: install
+    package:
+        - zabbix-selinux
+        - autoconf
+        - automake
--- a/2
+++ b/2
@ -1 +1 @@
-SHA512 (zabbix-6.0.6.tar.gz) = 4fc21f54cdfc09b5627a8e8dbe77ac645be7f3d3a0f18fc940cf136d05410ade755c3b4869254a47e9e316dba2b5da6b709a20a023b9cd765ad16094efcded43
+SHA512 (zabbix-7.4.14.tar.gz) = 98b26bfcd3b1803b23d85af70094fe875d138263cabbc4f6fa5c63ea9b07c4bedaa86eeed79ede74919f55515d6c17408391ea999ed204948320dc8ec29bbdc6
--- a/tests/tests-DSP.yml
+++ b/tests/tests-DSP.yml
@ -1,37 +0,0 @@
- hosts: localhost
-
-  roles:
-  - role: standard-test-beakerlib
-    tags:
-    - classic
-    repositories:
-      - repo: https://pagure.io/DSP_test.git
-        dest: DSP_test
-        version: master
-
-    tests:
-    - DSP_test
-    environment:
-      # RPM package containing the policy module
-      TEST_RPM: zabbix-selinux
-      # policy module name
-      TEST_POLICY: zabbix
-      # policy sources will be extracted from corresponding .src.rpm
-      # policy tar filename regexp (e.g. "usbguard-selinux*.tar.gz") 
-      # or empty string if policy sources are not inside a tar archive
-      POLICY_TAR: ''
-      # path to policy sources (in of the tar archive) -- <POLICY_TAR>/<POLICY_PATH>/<TEST_POLICY>.(te|if|fc)
-      # or path in the src.rpm if there is no tar archive -- <src.rpm>/<POLICY_PATH>/<TEST_POLICY>.(te|if|fc)
-      # can contain wildcards (e.g. for versions etc.)
-      POLICY_PATH: .
-
-    required_packages:
-    - policycoreutils
-    - selinux-policy
-    - selinux-policy-targeted
-    - setools-console
-    - libselinux-utils
-    - rpm
-    - tar
-    - git
-    - zabbix-selinux
--- a/zabbix-config.patch
+++ b/zabbix-config.patch
@ -1,7 +1,8 @@
-diff -up zabbix-6.0.2/ui/include/classes/core/CConfigFile.php.config zabbix-6.0.2/ui/include/classes/core/CConfigFile.php
--- zabbix-6.0.2/ui/include/classes/core/CConfigFile.php.config	2022-03-23 08:38:25.049013803 -0600
-+++ zabbix-6.0.2/ui/include/classes/core/CConfigFile.php	2022-03-23 08:39:25.001657019 -0600
-@@ -25,7 +25,7 @@ class CConfigFile {
+diff --git a/ui/include/classes/core/CConfigFile.php b/ui/include/classes/core/CConfigFile.php
+index d7ad93a..88b7d5f 100644
+--- a/ui/include/classes/core/CConfigFile.php
+++ b/ui/include/classes/core/CConfigFile.php
+@@ -20,7 +20,7 @@ class CConfigFile {
 	const CONFIG_ERROR = 2;
 	const CONFIG_VAULT_ERROR = 3;
 
@ -10,10 +11,11 @@ diff -up zabbix-6.0.2/ui/include/classes/core/CConfigFile.php.config zabbix-6.0.
 
 	private static $supported_db_types = [
 		ZBX_DB_MYSQL => true,
-diff -up zabbix-6.0.2/ui/include/classes/core/ZBase.php.config zabbix-6.0.2/ui/include/classes/core/ZBase.php
--- zabbix-6.0.2/ui/include/classes/core/ZBase.php.config	2022-03-14 03:57:00.000000000 -0600
-+++ zabbix-6.0.2/ui/include/classes/core/ZBase.php	2022-03-23 08:38:25.052013836 -0600
-@@ -368,7 +368,7 @@ class ZBase {
+diff --git a/ui/include/classes/core/ZBase.php b/ui/include/classes/core/ZBase.php
+index 51b2165..e57e5a8 100644
+--- a/ui/include/classes/core/ZBase.php
+++ b/ui/include/classes/core/ZBase.php
+@@ -392,7 +392,7 @@ class ZBase {
 	 * @throws Exception
 	 */
 	protected function setMaintenanceMode() {
@ -22,23 +24,24 @@ diff -up zabbix-6.0.2/ui/include/classes/core/ZBase.php.config zabbix-6.0.2/ui/i
 
 		if (defined('ZBX_DENY_GUI_ACCESS')) {
 			if (!isset($ZBX_GUI_ACCESS_IP_RANGE) || !in_array(CWebUser::getIp(), $ZBX_GUI_ACCESS_IP_RANGE)) {
-@@ -381,7 +381,7 @@ class ZBase {
+@@ -405,7 +405,7 @@ class ZBase {
 	 * Load zabbix config file.
 	 */
- 	protected function loadConfigFile() {
-		$configFile = $this->getRootDir().CConfigFile::CONFIG_FILE_PATH;
+ 	protected function loadConfigFile(): void {
+-		$configFile = $this->root_dir.CConfigFile::CONFIG_FILE_PATH;
 +		$configFile = CConfigFile::CONFIG_FILE_PATH;
+ 
 		$config = new CConfigFile($configFile);
- 		$this->config = $config->load();
- 	}
-diff -up zabbix-6.0.2/ui/include/classes/setup/CSetupWizard.php.config zabbix-6.0.2/ui/include/classes/setup/CSetupWizard.php
--- zabbix-6.0.2/ui/include/classes/setup/CSetupWizard.php.config	2022-03-14 03:57:00.000000000 -0600
-+++ zabbix-6.0.2/ui/include/classes/setup/CSetupWizard.php	2022-03-23 08:38:25.054013857 -0600
-@@ -271,7 +271,7 @@ class CSetupWizard extends CForm {
+ 
+diff --git a/ui/include/classes/setup/CSetupWizard.php b/ui/include/classes/setup/CSetupWizard.php
+index 8574868..79d0c72 100644
+--- a/ui/include/classes/setup/CSetupWizard.php
+++ b/ui/include/classes/setup/CSetupWizard.php
+@@ -328,7 +328,7 @@ class CSetupWizard extends CForm {
 				// make zabbix.conf.php downloadable
 				header('Content-Type: application/x-httpd-php');
 				header('Content-Disposition: attachment; filename="'.basename(CConfigFile::CONFIG_FILE_PATH).'"');
-				$config = new CConfigFile(APP::getInstance()->getRootDir().CConfigFile::CONFIG_FILE_PATH);
+-				$config = new CConfigFile(APP::getRootDir().CConfigFile::CONFIG_FILE_PATH);
 +				$config = new CConfigFile(CConfigFile::CONFIG_FILE_PATH);
 				$config->config = [
 					'DB' => [
--- a/zabbix-configure-sscanf.patch
+++ b/zabbix-configure-sscanf.patch
@ -0,0 +1,17 @@
+sscanf needs <stdio.h> for the prototype.  Submitted upstream here:
+
+  <https://support.zabbix.com/browse/ZBX-21946>
+
+diff --git a/configure.ac b/configure.ac
+index 0588004f9f89cdd5..bbc60e3a28369f9f 100644
+--- a/configure.ac
+++ b/configure.ac
+@@ -952,6 +952,7 @@ dnl FreeBSD 4.x does not support %llu
+ AC_MSG_CHECKING(for long long format)
+ AC_RUN_IFELSE([AC_LANG_SOURCE([[
+ #include <sys/types.h>
+#include <stdio.h>
+ int main()
+ {
+         uint64_t i;
+
--- a/zabbix-crypto-policy.patch
+++ b/zabbix-crypto-policy.patch
@ -1,7 +1,21 @@
-diff -up zabbix-5.0.2/src/libs/zbxcrypto/tls.c.crypto-policy zabbix-5.0.2/src/libs/zbxcrypto/tls.c
--- zabbix-5.0.2/src/libs/zbxcrypto/tls.c.crypto-policy	2020-07-06 03:54:32.000000000 -0600
-+++ zabbix-5.0.2/src/libs/zbxcrypto/tls.c	2020-07-18 21:22:13.125099598 -0600
-@@ -2932,7 +2932,7 @@ void	zbx_tls_init_child(void)
+diff --git a/src/go/pkg/tls/tls.go b/src/go/pkg/tls/tls.go
+index b7ddff4..063eb02 100644
+--- a/src/go/pkg/tls/tls.go
+++ b/src/go/pkg/tls/tls.go
+@@ -406,6 +406,8 @@ static void *tls_new_context(const char *ca_file, const char *crl_file, const ch
+ #endif
+ 	if (NULL != cipher)
+ 		ciphers = cipher;
+	else
+		ciphers = "PROFILE=SYSTEM";
+ 
+ 	if (1 != SSL_CTX_set_cipher_list(ctx, ciphers))
+ 		goto out;
+diff --git a/src/libs/zbxcomms/tls_openssl.c b/src/libs/zbxcomms/tls_openssl.c
+index 40394a3..b2eb0f0 100644
+--- a/src/libs/zbxcomms/tls_openssl.c
+++ b/src/libs/zbxcomms/tls_openssl.c
+@@ -1212,7 +1212,7 @@ void	zbx_tls_init_child(const zbx_config_tls_t *config_tls, zbx_get_program_type
 				goto out;
 			}
 		}
@ -10,7 +24,7 @@ diff -up zabbix-5.0.2/src/libs/zbxcrypto/tls.c.crypto-policy zabbix-5.0.2/src/li
 		{
 			zbx_snprintf_alloc(&error, &error_alloc, &error_offset, "cannot set list of certificate"
 					" ciphersuites:");
-@@ -3014,7 +3014,7 @@ void	zbx_tls_init_child(void)
+@@ -1302,7 +1302,7 @@ void	zbx_tls_init_child(const zbx_config_tls_t *config_tls, zbx_get_program_type
 				goto out;
 			}
 		}
@ -19,7 +33,7 @@ diff -up zabbix-5.0.2/src/libs/zbxcrypto/tls.c.crypto-policy zabbix-5.0.2/src/li
 		{
 			zbx_snprintf_alloc(&error, &error_alloc, &error_offset, "cannot set list of PSK ciphersuites:");
 			goto out;
-@@ -3070,7 +3070,7 @@ void	zbx_tls_init_child(void)
+@@ -1360,7 +1360,7 @@ void	zbx_tls_init_child(const zbx_config_tls_t *config_tls, zbx_get_program_type
 				goto out;
 			}
 		}
--- a/zabbix-out-of-tree.patch
+++ b/zabbix-out-of-tree.patch
--- a/zabbix.spec
+++ b/zabbix.spec
@ -15,13 +15,35 @@
 #%%global prerelease rc2

 Name:           zabbix
-Version:        6.0.6
-Release:        2%{?dist}
+Epoch:          1
+Version:        7.4.14
+Release:        1%{?dist}
 Summary:        Open-source monitoring solution for your IT infrastructure

-License:        GPLv2+
+# TODO - Note additional licenses in src/go when we start building with go
+# src/libs/zbxembed/duktape.c: MIT License
+# src/libs/zbxembed/duktape.h: MIT License
+# src/libs/zbxgetopt/getopt.c: GNU General Public License v2.0 or later
+# src/libs/zbxhash/md5.c: zlib License
+# ui/vendor/composer/LICENSE: MIT License
+# ui/js/vendors/D3/LICENSE: ISC License
+# ui/js/vendors/Leaflet/LICENSE: BSD 2-Clause License
+# ui/js/vendors/Leaflet.markercluster/LICENSE: MIT License
+# ui/js/vendors/jQueryUI/LICENSE: MIT License
+# ui/js/vendors/qrcode/LICENSE: MIT License
+# ui/vendor/duosecurity/duo_universal_php/LICENSE: BSD 3-Clause License
+# ui/vendor/firebase/php-jwt/LICENSE: BSD 3-Clause License
+# ui/vendor/onelogin/php-saml/LICENSE: MIT License
+# ui/vendor/paragonie/constant_time_encoding/LICENSE.txt: MIT License
+# ui/vendor/pragmarx/google2fa/LICENSE.md: MIT License
+# ui/vendor/symfony/deprecation-contracts/LICENSE: MIT License
+# ui/vendor/symfony/polyfill-ctype/LICENSE: MIT License
+# ui/vendor/symfony/yaml/LICENSE: MIT License
+# ui/assets/styles/vendors/Leaflet/LICENSE: BSD 2-Clause License
+# ui/vendor/paragonie/constant_time_encoding/src/*.php: MIT License
+License:        AGPL-3.0-only AND MIT AND GPL-2.0-or-later AND Zlib AND BSD-3-Clause AND BSD-2-Clause AND ISC
 URL:            https://www.zabbix.com
-Source0:        https://cdn.zabbix.com/zabbix/sources/stable/6.0/zabbix-%{version}.tar.gz
+Source0:        https://cdn.zabbix.com/zabbix/sources/stable/7.4/zabbix-%{version}.tar.gz
 Source1:        %{srcname}-web.conf
 Source2:        %{srcname}-php-fpm.conf
 Source5:        %{srcname}-logrotate.in
@ -48,15 +70,14 @@ Patch0:         %{srcname}-config.patch
 Patch1:         %{srcname}-out-of-tree.patch
 # Enforce Fedora Crypto Policy
 Patch2:         %{srcname}-crypto-policy.patch
+# Add <stdio> to sscanf check
+# https://support.zabbix.com/browse/ZBX-21946
+Patch3:         %{srcname}-configure-sscanf.patch

 # Patch1 patches automake files so we need to autoreconf
 BuildRequires:   libtool
 BuildRequires:   make
-%if 0%{?fedora} || 0%{?rhel} >= 8
 BuildRequires:   mariadb-connector-c-devel
-%else
-BuildRequires:   mysql-devel
-%endif
 BuildRequires:   libpq-devel
 BuildRequires:   sqlite-devel
 BuildRequires:   net-snmp-devel
@ -155,10 +176,11 @@ Requires:            %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-server-implementation = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            fping
 Requires:            traceroute
-Requires(pre):       shadow-utils
 Requires(post):      systemd
 Requires(preun):     systemd
 Requires(postun):    systemd
+Provides:            user(zabbixsrv)
+Provides:            group(zabbixsrv)

 %description server
 Zabbix server common files
@ -169,7 +191,6 @@ Requires:            %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-dbfiles-mysql
 Requires:            %{name}-server = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires(post):      %{_sbindir}/update-alternatives
-Requires(preun):     %{_sbindir}/alternatives
 Requires(postun):    %{_sbindir}/update-alternatives
 Provides:            %{name}-server-implementation = %{?epoch:%{epoch}:}%{version}-%{release}

@ -182,7 +203,6 @@ Requires:            %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-server = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-dbfiles-pgsql
 Requires(post):      %{_sbindir}/update-alternatives
-Requires(preun):     %{_sbindir}/alternatives
 Requires(postun):    %{_sbindir}/update-alternatives
 Provides:            %{name}-server-implementation = %{?epoch:%{epoch}:}%{version}-%{release}

@ -192,7 +212,6 @@ Zabbix server compiled to use PostgreSQL
 %package agent
 Summary:             Zabbix agent
 Requires:            %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
-Requires(pre):       shadow-utils
 Requires(post):      systemd
 Requires(preun):     systemd
 Requires(postun):    systemd
@ -205,7 +224,6 @@ Summary:             Zabbix proxy common files
 BuildArch:           noarch
 Requires:            %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-proxy-implementation = %{?epoch:%{epoch}:}%{version}-%{release}
-Requires(pre):       shadow-utils
 Requires(post):      systemd
 Requires(preun):     systemd
 Requires(postun):    systemd
@ -220,7 +238,6 @@ Requires:            %{name}-proxy = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-dbfiles-mysql
 Provides:            %{name}-proxy-implementation = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires(post):      %{_sbindir}/update-alternatives
-Requires(preun):     %{_sbindir}/alternatives
 Requires(postun):    %{_sbindir}/update-alternatives

 %description proxy-mysql
@ -232,7 +249,6 @@ Requires:            %{name}-proxy = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-dbfiles-pgsql
 Provides:            %{name}-proxy-implementation = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires(post):      %{_sbindir}/update-alternatives
-Requires(preun):     %{_sbindir}/alternatives
 Requires(postun):    %{_sbindir}/update-alternatives

 %description proxy-pgsql
@ -244,7 +260,6 @@ Requires:            %{name}-proxy = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires:            %{name}-dbfiles-sqlite3
 Provides:            %{name}-proxy-implementation = %{?epoch:%{epoch}:}%{version}-%{release}
 Requires(post):      %{_sbindir}/update-alternatives
-Requires(preun):     %{_sbindir}/alternatives
 Requires(postun):    %{_sbindir}/update-alternatives

 %description proxy-sqlite3
@ -261,9 +276,9 @@ Requires:        php-json
 Requires:        php-ldap
 Requires:        php-mbstring
 Requires:        php-xml
-# jquery 3.3.1 and jquery-ui 1.12.1 in the sources
+# jquery 3.6.0 and jquery-ui 1.13.2 in the sources
 Requires:        js-jquery >= 3.6.0
-Provides:        bundled(js-jquery-ui) = 1.12.1
+Provides:        bundled(js-jquery-ui) = 1.13.2
 # prototype 1.6.1 in the sources, Fedora package is dead
 #Requires:        prototype
 Requires:        dejavu-sans-fonts
@ -322,10 +337,7 @@ Custom SELinux policy module


 %prep
-%setup0 -q -n %{srcname}-%{version}%{?prerelease:.%{prerelease}}
-%patch0 -p1 -b .config
-%patch1 -p1 -b .out-of-tree
-%patch2 -p1 -b .crypto-policy
+%autosetup -p1
 autoreconf

 # Remove bundled java libs
@ -382,6 +394,11 @@ sed -i \
 # Install README file
 install -m 0644 -p %{SOURCE16} .

+# Create a sysusers.d config file
+cat >zabbix.sysusers.conf <<EOF
+u zabbix - 'Zabbix Monitoring System' %{_sharedstatedir}/zabbix -
+EOF
+

 %build

@ -536,8 +553,11 @@ cp -p database/sqlite3/schema.sql $RPM_BUILD_ROOT%{_datadir}/%{srcname}-sqlite3

 %if 0%{?with_selinux}
 install -D -m 0644 %{name}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2
+install -D -p -m 0644 selinux/%{name}.if %{buildroot}%{_datadir}/selinux/devel/include/distributed/%{name}.if
 %endif

+install -m0644 -D zabbix.sysusers.conf %{buildroot}%{_sysusersdir}/zabbix.conf
+

 %post server
 %systemd_post zabbix-server.service
@ -552,13 +572,25 @@ fi
 %post server-mysql
 %{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_server \
    %{srcname}-server %{_sbindir}/%{srcname}_server_mysql 10 \
-        --slave %{_unitdir}/zabbix-server.service %{srcname}-server-systemd \
+        --slave %{_unitdir}/zabbix-server.service %{srcname}-server.service \
+            %{_unitdir}/zabbix-server-mysql.service
+# This needs to be run twice to rename from old slave name in zabbix < 6.0.33-2
+# due to a bug in alternatives. Remove in F45
+%{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_server \
+    %{srcname}-server %{_sbindir}/%{srcname}_server_mysql 10 \
+        --slave %{_unitdir}/zabbix-server.service %{srcname}-server.service \
            %{_unitdir}/zabbix-server-mysql.service

 %post server-pgsql
 %{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_server \
    %{srcname}-server %{_sbindir}/%{srcname}_server_pgsql 10 \
-        --slave %{_unitdir}/zabbix-server.service %{srcname}-server-systemd \
+        --slave %{_unitdir}/zabbix-server.service %{srcname}-server.service \
+            %{_unitdir}/zabbix-server-pgsql.service
+# This needs to be run twice to rename from old slave name in zabbix < 6.0.33-2
+# due to a bug in alternatives. Remove in F45
+%{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_server \
+    %{srcname}-server %{_sbindir}/%{srcname}_server_pgsql 10 \
+        --slave %{_unitdir}/zabbix-server.service %{srcname}-server.service \
            %{_unitdir}/zabbix-server-pgsql.service

 %post proxy
@ -574,19 +606,37 @@ fi
 %post proxy-mysql
 %{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_mysql 10 \
-        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy-systemd \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
+            %{_unitdir}/zabbix-proxy-mysql.service
+# This needs to be run twice to rename from old slave name in zabbix < 6.0.33-2
+# due to a bug in alternatives. Remove in F45
+%{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
+    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_mysql 10 \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
            %{_unitdir}/zabbix-proxy-mysql.service

 %post proxy-pgsql
 %{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_pgsql 10 \
-        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy-systemd \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
+            %{_unitdir}/zabbix-proxy-pgsql.service
+# This needs to be run twice to rename from old slave name in zabbix < 6.0.33-2
+# due to a bug in alternatives. Remove in F45
+%{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
+    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_pgsql 10 \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
            %{_unitdir}/zabbix-proxy-pgsql.service

 %post proxy-sqlite3
 %{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_sqlite3 10 \
-        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy-systemd \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
+            %{_unitdir}/zabbix-proxy-sqlite3.service
+# This needs to be run twice to rename from old slave name in zabbix < 6.0.33-2
+# due to a bug in alternatives. Remove in F45
+%{_sbindir}/update-alternatives --install %{_sbindir}/%{srcname}_proxy \
+    %{srcname}-proxy %{_sbindir}/%{srcname}_proxy_sqlite3 10 \
+        --slave %{_unitdir}/zabbix-proxy.service %{srcname}-proxy.service \
            %{_unitdir}/zabbix-proxy-sqlite3.service

 %if 0%{?with_selinux}
@ -607,12 +657,6 @@ fi
 %selinux_relabel_post -s %{selinuxtype}
 %endif

-%pre agent
-getent group zabbix > /dev/null || groupadd -r zabbix
-getent passwd zabbix > /dev/null || \
-    useradd -r -g zabbix -d %{_sharedstatedir}/zabbix -s /sbin/nologin \
-    -c "Zabbix Monitoring System" zabbix
-:

 %post agent
 %systemd_post zabbix-agent.service
@ -738,7 +782,8 @@ fi
 %if 0%{?with_selinux}
 %files selinux
 %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.*
-%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{name}
+%{_datadir}/selinux/devel/include/distributed/%{name}.if
+%ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{name}
 %endif

 %files agent
@ -752,6 +797,7 @@ fi
 %{_unitdir}/zabbix-agent.service
 %{_sbindir}/zabbix_agentd
 %{_mandir}/man8/zabbix_agentd.8*
+%{_sysusersdir}/zabbix.conf

 %files proxy
 %doc misc/snmptrap/zabbix_trap_receiver.pl
@ -793,11 +839,673 @@ fi
 %files web-pgsql

 %changelog
-* Fri Jul 22 2022 Gwyn Ciesla <gwync@protonmail.com> - 6.0.6-2
+* Tue Aug 25 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.14-1
+- 7.4.14
+
+* Thu Aug 20 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.13-1
+- 7.4.13
+
+* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1:7.4.12-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
+* Thu Jul 09 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.12-1
+- 7.4.12
+
+* Sat Jun 13 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1:7.4.9-3
+- Rebuilt for openssl 4.0
+
+* Mon Apr 13 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.9-2
+- Openssl rebuild
+
+* Thu Apr 09 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.9-1
+- 7.4.9
+
+* Fri Mar 13 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.8-1
+- 7.4.8
+
+* Fri Feb 13 2026 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.7-1
+- 7.4.7
+
+* Fri Jan 23 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 1:7.4.6-3
+- Rebuilt for net-snmp 5.9.5.2
+
+* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1:7.4.6-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
+
+* Thu Dec 18 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.6-1
+- 7.4.6
+
+* Mon Nov 03 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.5-1
+- 7.4.5
+
+* Wed Oct 29 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.4-1
+- 7.4.4
+
+* Wed Oct 01 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.3-1
+- 7.4.3
+
+* Mon Aug 25 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.2-1
+- 7.4.2
+
+* Thu Jul 31 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.4.1-1
+- 7.4.1
+
+* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:7.2.11-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
+
+* Tue Jul 22 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.2.11-1
+- 7.2.11
+
+* Fri Jun 27 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.2.10-1
+- 7.2.10
+
+* Fri Jun 20 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.2.9-1
+- 7.2.9
+
+* Wed Apr 09 2025 Gwyn Ciesla <gwync@protonmail.com> - 1:7.2.5-2
+- Add user/group provides to -server to fix FTI
+
+* Wed Apr 02 2025 Orion Poplawski <orion@nwra.com> - 1:7.2.5-1
+- Update to 7.2.5 (CVE-2024-36469, CVE-2024-42325, CVE-2024-45700)
+
+* Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:7.2.2-3
+- Add sysusers.d config file to allow rpm to create users/groups automatically
+
+* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:7.2.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
+
+* Mon Jan 06 2025 Orion Poplawski <orion@nwra.com> - 1:7.2.2-1
+- Update to 7.2.2
+
+* Thu Dec 12 2024 Orion Poplawski <orion@nwra.com> - 1:7.2.0-1
+- Update to 7.2.0
+
+* Sat Nov 30 2024 Orion Poplawski <orion@nwra.com> - 1:7.0.6-1
+- Update to 7.0.6
+
+* Tue Oct 22 2024 Orion Poplawski <orion@nwra.com> - 1:7.0.5-1
+- Update to 7.0.5
+
+* Mon Oct 07 2024 Orion Poplawski <orion@nwra.com> - 1:7.0.4-2
+- Fix typo in crypto policy patch that broke SSL connections
+
+* Thu Sep 26 2024 Orion Poplawski <orion@nwra.com> - 1:7.0.4-1
+- Update to 7.0.4
+
+* Sat Aug 24 2024 Orion Poplawski <orion@nwra.com> - 1:7.0.3-1
+- Update to 7.0.3
+- License changed upstream to AGPL-3.0-only, note other licenses in source
+
+* Mon Aug 19 2024 Orion Poplawski <orion@nwra.com> - 1:6.0.33-2
+- Use alternatives name that systemd likes for units (bz#2305855)
+
+* Thu Aug 15 2024 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.33-1
+- 6.0.33
+
+* Mon Jul 29 2024 Miroslav Suchý <msuchy@redhat.com> - 1:6.0.30-3
+- convert license to SPDX
+
+* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:6.0.30-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
+
+* Tue May 21 2024 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.30-1
+- 6.0.30
+
+* Fri May 03 2024 Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
+- Update to 6.0.29
+- Hopefully really get the zabbix_run_sudo SELinux boolean working for
+  zabbix-agent and allow it to run lvm when enabled
+
+* Wed Feb 28 2024 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.27-1
+- Update to 6.0.27
+
+* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:6.0.25-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Thu Jan 04 2024 Orion Poplawski <orion@nwra.com> - 1:6.0.25-1
+- Update to 6.0.25
+
+* Fri Dec 01 2023 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.22-3
+- Patch for libxml2 2.12.x
+
+* Sat Oct 28 2023 Orion Poplawski <orion@nwra.com> - 1:6.0.22-2
+- Add dontaudit SELinux rules for spurious AVC denial messages (bz#2170630)
+
+* Wed Oct 04 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.22-1
+- Update to 6.0.22
+
+* Mon Aug 07 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.20-1
+- Update to 6.0.20
+
+* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:6.0.19-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Thu Jul 06 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.19-1
+- Update to 6.0.19
+
+* Thu Jun 15 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.18-1
+- Update to 6.0.18
+
+* Tue Apr 25 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.17-1
+- Update to 6.0.17
+
+* Tue Apr 11 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.16-1
+- Update to 6.0.16
+
+* Tue Apr 04 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.15-1
+- Update to 6.0.15
+
+* Tue Mar 21 2023 Morten Stevens <mstevens@fedoraproject.org> - 1:6.0.14-1
+- Update to 6.0.14
+
+* Wed Mar 01 2023 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.13-2
+- migrated to SPDX license
+
+* Thu Feb 16 2023 Orion Poplawski <orion@nwra.com> - 1:6.0.13-1
+- Update to 6.0.13
+- Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
+- Add policy to allow zabbix agent to run rpm read-only
+
+* Sun Jan 22 2023 Orion Poplawski <orion@nwra.com> - 1:6.0.12-1
+- Update to 6.0.12
+
+* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:6.0.8-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
+* Thu Nov 17 2022 Florian Weimer <fweimer@redhat.com> - 1:6.0.8-2
+- Include <stdio.h> in configure for sscanf prototype
+
+* Wed Sep 14 2022 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.8-1
+- 6.0.8
+
+* Fri Jul 22 2022 Gwyn Ciesla <gwync@protonmail.com> -1:6.0.6-2
 - Move to pcre2

-* Fri Jul 08 2022 Orion Poplawski <orion@nwra.com> - 6.0.6-1
+* Fri Jul 08 2022 Orion Poplawski <orion@nwra.com> - 1:6.0.6-1
 - Update to 6.0.6

-* Wed Mar 23 2022 Orion Poplawski <orion@nwra.com> - 6.0.2-1
+* Tue May 31 2022 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.5-1
+- 6.0.5
+
+* Mon May 09 2022 Orion Poplawski <orion@cora.nwra.com> - 1:6.0.4-1
+- Update to 6.0.4
+
+* Mon Apr 04 2022 Gwyn Ciesla <gwync@protonmail.com> - 1:6.0.3-1
+- 6.0.3
+
+* Wed Mar 23 2022 Orion Poplawski <orion@nwra.com> - 1:6.0.2-1
 - Update to 6.0.2
+
+* Fri Mar 11 2022 Gwyn Ciesla <gwync@protonmail.com> - 1:5.0.21-1
+- 5.0.21
+
+* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:5.0.19-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
+
+* Fri Jan 14 2022 Gwyn Ciesla <gwync@protonmail.com> - 1:5.0.19-1
+- 5.0.19
+- Fixed CVE-2022-23132, CVE-2022-23133, CVE-2022-23134.
+
+* Wed Dec 01 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.18-1
+- Update to 5.0.18
+
+* Mon Nov 01 2021 Orion Poplawski <orion@cora.nwra.com> - 1:5.0.17-1
+- Update to 5.0.17
+
+* Sat Oct 16 2021 Morten Stevens <mstevens@fedoraproject.org> - 1:5.0.16-1
+- Update to 5.0.16
+
+* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 1:5.0.14-2
+- Rebuilt with OpenSSL 3.0.0
+
+* Mon Jul 26 2021 Morten Stevens <mstevens@fedoraproject.org> - 1:5.0.14-1
+- Update to 5.0.14
+
+* Mon Jul 26 2021 Morten Stevens <mstevens@fedoraproject.org> - 1:5.0.10-3
+- Dropped support for DES
+
+* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:5.0.10-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
+
+* Tue Apr 20 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.10-1
+- Update to 5.0.10
+- SELinux: Allow fping to read the zabbix ping list
+
+* Fri Mar 05 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.9-1
+- Update to 5.0.9
+
+* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:5.0.8-2
+- Rebuilt for updated systemd-rpm-macros
+  See https://pagure.io/fesco/issue/2583.
+
+* Mon Feb 15 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.8-1
+- Update to 5.0.8
+- Update php configuration for php-fpm (bz#1928386)
+
+* Mon Feb 08 2021 Pavel Raiskup <praiskup@redhat.com> - 1:5.0.7-4
+- rebuild for libpq ABI fix rhbz#1908268
+
+* Thu Jan 28 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.7-3
+- Handle new dejavu-sans-fonts directory (bz#1921010)
+
+* Thu Jan 28 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:5.0.7-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Sun Jan 24 2021 Orion Poplawski <orion@nwra.com> - 1:5.0.7-1
+- Update to 5.0.7
+
+* Sun Dec 13 2020 Orion Poplawski <orion@nwra.com> - 1:5.0.6-1
+- Update to 5.0.6
+
+* Tue Sep 15 2020 Volker Froehlich <volker27@gmx.at> - 1:5.0.3-2
+- Rebuild for libevent soname bump
+
+* Tue Sep  1 2020 Orion Poplawski <orion@nwra.com> - 1:5.0.3-1
+- Update to 5.0.3
+
+* Tue Sep  1 2020 Orion Poplawski <orion@nwra.com> - 1:5.0.2-1
+- Update to 5.0.2
+- Enforce Fedora crypto policy
+
+* Thu Aug 27 2020 Josef Řídký <jridky@redhat.com> - 1:4.0.22-3
+- Rebuilt for new net-snmp release
+
+* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.0.22-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Sat Jul 18 2020 Orion Poplawski <orion@nwra.com> - 1:4.0.22-1
+- Update to 4.0.22 (bz#1858259) CVE-2020-15803
+- Fix alert/external scripts directories
+
+* Mon Apr 20 2020 Orion Poplawski <orion@nwra.com> - 1:4.0.19-3
+- Fix chmod/chown in scriptlet
+
+* Mon Apr 20 2020 Vit Mojzis <vmojzis@redhat.com> - 1:4.0.19-2
+- Add SELinux subpackage
+
+* Sun Apr 19 2020 Orion Poplawski <orion@nwra.com> - 1:4.0.19-1
+- Update to 4.0.19
+- Upstream now uses jquery 3, so link to that
+
+* Thu Apr 02 2020 Björn Esser <besser82@fedoraproject.org> - 1:4.0.16-3
+- Fix string quoting for rpm >= 4.16
+
+* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.0.16-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Mon Dec 23 2019 Volker Froehlich <volker27@gmx.at> - 1:4.0.16-1
+- New upstream release
+
+* Thu Nov 28 2019 Volker Froehlich <volker27@gmx.at> - 1:4.0.15-1
+- New upstream release
+
+* Thu Nov 14 2019 Volker Froehlich <volker27@gmx.at> - 1:4.0.14-1
+- New upstream release
+
+* Tue Oct 29 2019 Volker Froehlich <volker27@gmx.at> - 1:4.0.13-1
+- New upstream release
+
+* Sat Aug  3 2019 Volker Froehlich <volker27@gmx.at> - 1:4.0.11-1
+- New upstream release
+
+* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.0.10-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Wed Jul  3 2019 Volker Froehlich <volker27@gmx.at> - 4.0.10-1
+- New upstream release
+
+* Fri Jun 14 2019 Gwyn Ciesla <gwync@protonmail.com> - 1:4.0.9-1
+- 4.0.9
+
+* Thu May 30 2019 Gwyn Ciesla <gwync@protonmail.com> - 1:4.0.7-3
+- Correct Epoch in Requires.
+
+* Thu May 16 2019 Gwyn Ciesla <gwync@protonmail.com> - 1:4.0.7-2
+- revert to 4.0.7 LTS
+
+* Fri Apr 26 2019 Gwyn Ciesla <gwync@protonmail.com> - 4.2.1-1
+- 4.2.1
+
+* Tue Apr 23 2019 Volker Froehlich <volker27@gmx.at> - 4.0.7-1
+- New upstream release
+
+* Sun Mar 31 2019 Volker Froehlich <volker27@gmx.at> - 4.0.6-1
+- New upstream release
+
+* Tue Feb 26 2019 Volker Froehlich <volker27@gmx.at> - 4.0.5-1
+- New upstream release
+
+* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.24-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Thu Nov 29 2018 Volker Froehlich <volker27@gmx.at> - 3.0.24-1
+- New upstream release
+
+* Fri Sep 14 2018 Volker Froehlich <volker27@gmx.at> - 3.0.22-1
+- New upstream release
+
+* Tue Jul 24 2018 Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.16-4
+- Rebuild for unannounced net-snmp suversion bump.
+- Add build dependency on gcc.
+
+* Tue Jul 24 2018 Volker Froehlich <volker27@gmx.at> - 3.0.16-3
+- Build without iksemel (jabber) support -- package is retired
+
+* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.16-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Mon Apr 09 2018 Volker Froehlich <volker27@gmx.at> - 3.0.16-1
+- New upstream release
+
+* Tue Mar 20 2018 Volker Froehlich <volker27@gmx.at> - 3.0.15-1
+- New upstream release
+
+* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.14-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Thu Feb 08 2018 Volker Fröhlich <volker27@gmx.at> - 3.0.14-2
+- Remove group keyword
+
+* Thu Dec 28 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.14-1
+- New upstream release
+- Remove mariadb-connector patch
+
+* Sat Nov 11 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.13-1
+- New upstream release
+
+* Wed Oct 18 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.12-1
+- New upstream release
+
+* Mon Sep 25 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.11-1
+- New upstream release
+
+* Fri Sep 22 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.10-4
+- Replace mysql-devel with mariadb-connector-c-devel, resolves BZ #1493663
+
+* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.10-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.10-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Wed Jul 19 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.10-1
+- New upstream release
+
+* Thu Jul 13 2017 Adam Williamson <awilliam@redhat.com> - 3.0.9-2
+- Fix build with MariaDB 10.2+
+
+* Fri Jun 23 2017 Volker Fröhlich <volker27@gmx.at> - 3.0.9-1
+- New upstream release
+
+* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.7-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Wed Dec 21 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.7-1
+- New upstream release
+
+* Thu Dec 08 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.6-1
+- New upstream release
+
+* Wed Oct 05 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.5-1
+- New upstream release
+
+* Sat Jul 23 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.4-1
+- New upstream release
+
+* Mon Jul 11 2016 Orion Poplawski <orion@cora.nwra.com> - 3.0.3-2
+- Fix php mysql requires
+
+* Mon Jul 04 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.3-1
+- New upstream release
+
+* Mon May 09 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.2-1
+- New upstream release
+- Remove now-obsolete fping3 patch
+
+* Tue Mar 29 2016 Volker Fröhlich <volker27@gmx.at> - 3.0.1-1
+- Un-bundle jquery and prototype; remove the font patch and use a symlink instead
+- Add PHP configuration to Apache config file (BZ#1074292)
+- Fix the duplicate definition of a pidfile (BZ#1220392)
+- Change logrotate mode to truncate
+
+* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.7-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Thu Nov 12 2015 Volker Fröhlich <volker27@gmx.at> - 2.4.7-1
+- New release
+
+* Mon Aug 10 2015 Volker Fröhlich <volker27@gmx.at> - 2.4.6-1
+- New release
+
+* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.5-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Wed Apr 22 2015 Volker Fröhlich <volker27@gmx.at> - 2.4.5-1
+- New release
+
+* Tue Feb 24 2015 Volker Fröhlich <volker27@gmx.at> - 2.4.4-1
+- New release
+
+* Sat Dec 20 2014 Volker Fröhlich <volker27@gmx.at> - 2.4.3-1
+- New release
+
+* Wed Oct  8 2014 Volker Fröhlich <volker27@gmx.at> - 2.4.1-1
+- New release
+
+* Thu Sep 11 2014 Volker Fröhlich <volker27@gmx.at> - 2.4.0-1
+- New major version release
+
+* Mon Sep  1 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.6-2
+- Install tmpfiles configuration in the proper location per guidelines,
+  thus solving the startup trouble due to missing directories
+  (respectively BZ 1115251, 1081584, 982001, 1135696)
+- Clean between builds, otherwise zabbix_{proxy,server} are compiled
+  again on install; make server and proxy package noarch now
+- Set the service type to forking in unit files (BZ 1132437),
+  add PIDFile entry, remove RemainAfterExit, change /var/run to /run
+- Correct path to traceroute in DB dumps again
+- Leave database-specific datadir subdirectories to the dbfiles sub-packages
+- Harmonize package descriptions and summaries
+
+* Wed Aug 27 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.6-1
+- New upstream release
+- Use the upstream tarball, now that non-free json was replaced with android-json
+
+* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.5-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Fri Jul 18 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.5-1
+- New upstream release
+
+* Tue Jun 24 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.4-1
+- New upstream release
+- Remove obsolete patches
+
+* Fri Jun 20 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.3-4
+- Patch for ZBX-8151 (Local file inclusion via XXE attack) -- CVE-2014-3005
+
+* Sun Jun  8 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.3-3
+- Patch for ZBX-8238 (logrt may continue reading an old file repeatedly)
+
+* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Tue Apr 15 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.3-1
+- New upstream release
+
+* Sun Feb 16 2014 Volker Fröhlich <volker27@gmx.at> - 2.2.2-1
+- New major release
+- Preserve timestamp on all install commands
+- Provide bundled md5-deutsch
+- Add noarch sub-packages for DB files
+- Correct directory permissions
+- Correct Conflicts directives
+- Correct /var/lib/zabbixsrv owner and permissions
+- Use dir directive for home directories and their sub-directories
+- Update config patch
+- Provide "zabbix"
+- Add libxml2-devel as BR for VMware monitoring and --with-libxml2 flag
+- Move user zabbixsrv to his own group
+  - Split tmpfiles.d, thus solve BZ#982001 
+  - Split lock, log and run locations
+  - Adapt ownership and permissions
+- Update README
+
+* Sun Feb 16 2014 Volker Fröhlich <volker27@gmx.at> - 2.0.11-2
+- Remove if clauses for Fedora/RHEL as they are obsolete in EL 7
+- Use systemd scriplet macros (BZ#850378)
+- Remove init scripts
+
+* Wed Feb 12 2014 Volker Fröhlich <volker27@gmx.at> - 2.0.11-1
+- New upstream release
+- Truncate changelog
+
+* Sun Dec 15 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.10-2
+- The start function of the proxy init script had a typo causing failure
+- Improved the section on running multiple instances in the README
+
+* Fri Dec 13 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.10-1
+- New upstream release
+- Drop obsolete patch ZBX-7479
+- Improve init scripts to not kill other instances (BZ#1018293)
+- General overhaul of init scripts and documentation in README
+- Harmonize scriptlet if-clause style
+
+* Sun Nov  3 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.9-2
+- Fix vulnerability for remote command execution injection
+  (ZBX-7479, CVE-2013-6824)
+
+* Wed Oct  9 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.9-1
+- New upstream release
+- Drop obsolete patches ZBX-6804, ZBX-7091, ZBX-6922, ZBX-6992
+
+* Mon Sep 23 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.8-3
+- Add SQL speed-up patch (ZBX-6804)
+- Add SQL injection vulnerability patch (ZBX-7091, CVE-2013-5743)
+- Add patch for failing XML host import (ZBX-6922)
+
+* Fri Sep 13 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.8-2
+- Add php-ldap as a requirement for the frontend
+- Add patch for ZBX-6992
+
+* Fri Aug 23 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.8-1
+- New upstream release
+- Create and configure a spooling directory for fping files outside of /tmp
+- Update README to reflect that and add a SELinux section
+- Drop PrivateTmp from systemd unit files
+- Drop patch for ZBX-6526 (solved upstream)
+- Drop patch for CVE-2012-6086 (solved upstream)
+- Correct path for the flash applet when removing
+- Truncate changelog
+
+* Tue Jul 30 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.6-3
+- Backport fix for CVE-2012-6086
+
+* Tue May 07 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.6-2
+- Add patch for ZBX-6526
+- Solve permission problem with /var/run/zabbix in Fedora (BZ#904041)
+- Remove origin of directories BZ#867159, comment 14 and 16
+
+* Mon Apr 22 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.6-1
+- New upstream release
+- Drop ZBX-6290 and ZBX-6318 patches
+
+* Tue Mar 19 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.5-3
+- Include patch for ZBX-6318
+
+* Tue Feb 12 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.5-2
+- Include patch for ZBX-6290
+
+* Tue Feb 12 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.5-1
+- New upstream release
+- Drop now-included patches
+- Init file comments point to the actual configuration files now
+
+* Sat Feb  9 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.4-5
+- Dispensable version of COPYING is no more
+- Correct path to traceroute in DB dumps again
+
+* Tue Jan 22 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.4-4
+- Remove zabbix_get plus manpage from the proxy files section
+- Solve conflict for externalscripts symlink between proxy and
+  server package
+
+* Thu Jan 17 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.4-3
+- Patch for CVE-2013-1364
+
+* Mon Jan 14 2013 Volker Fröhlich <volker27@gmx.at> - 2.0.4-2
+- Apply patch for ZBX-6101
+- Add su line to logrotate config file
+- Do not own /var/run/zabbix on Fedora, systemd manages it
+- Add forgotten chkconfig and service commands on agent preun script
+
+* Sat Dec  8 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.4-1
+- New upstream release
+
+* Fri Dec  7 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-7
+- Add SNMP source IP address patch
+
+* Mon Nov 26 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-6
+- Apply fping 3 patch only for Fedora
+
+* Tue Nov 13 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-5
+- Adapt httpd configuration file for Apache 2.4 (BZ#871498)
+
+* Thu Nov  8 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-4
+- Require php explicitly again
+- Remove traces of /usr/local in configuration files
+- Improve Fedora README file
+
+* Sun Oct 14 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-3
+- Correct capitalization in unit files, init scripts and package description
+- Improve sysconfig sourcing in init scripts
+- Correct post-script permissions and owner on rpmnew files
+- Obsolete sqlite web and server sub-package
+
+* Sun Oct 14 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-2
+- Include agent configuration file in base package for zabbix_sender
+- Stricter permissions for server config file
+- Adapt DB patches to our file layout
+- Remove conditional around Source9
+- doc-sub-package obsolete only for Fedora, where the package keeps
+  the name "zabbix"
+- Add missing requirement for proxy scriplet
+- Remove Requires php because the PHP modules serve this purpose
+- Use systemd's PrivateTmp only for F17 and up
+- Correct proxy and server pre-scriplet (usergroup)
+
+* Fri Oct  5 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.3-1
+- New upstream release
+- Add Fedora specific README
+
+* Mon Aug 27 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.2-3
+- Eliminate Sqlite server and web sub-package
+  They never worked and are considered experimental by upstream
+- Harmonize conditionals
+- Put maintenance configuration in web configuration directory
+- Adapt man pages to file layout
+- Remove backup files from frontend
+- Move maintenance configuration file to /etc/...
+- Move ExternalScripts and AlertScripts to daemon home directory
+- Don't ship SQL scripts as documentation
+
+* Sun Aug 26 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.2-2
+- Use separate daemon users, so the agent can not parse the 
+  database password
+- Use PrivateTmp in unit files
+
+* Wed Aug 15 2012 Volker Fröhlich <volker27@gmx.at> - 2.0.2-1
+- New upstream release
+- Unified specfile for sys-v-init scripts and systemd
+- Switch to Alternatives system
+- Source from systemconfig in init scripts
+
+* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Thu Jul 12 2012 Dan Horák <dan[at]danny.cz> - 2.0.1-1
+- update to 2.0.1
+- rebased patches
+- upstream location (/etc) for config files is used with symlinks to the old /etc/zabbix
+- dropped our own SNMP trap processor, upstream one running directly under net-snmp daemon is used instead
+- moved zabbix_get and zabbix_sender tools to the main package
--- a/zabbix.te
+++ b/zabbix.te
@ -1,4 +1,4 @@
-policy_module(zabbix, 1.6.0)
+policy_module(zabbix, 1.7.0)

 ########################################
 #
@ -284,22 +284,53 @@ zabbix_tcp_connect(zabbix_agent_t)

 zabbix_script_domtrans(zabbix_agent_t)

+# These are triggered by vfs.dev.discovery enumerating everyting in /dev
+gen_require(`
+    type devlog_t;
+')
+dontaudit zabbix_agent_t devlog_t:sock_file getattr;
+init_dontaudit_getattr_initctl(zabbix_agent_t)
+kernel_dontaudit_getattr_core_if(zabbix_agent_t)
+
+gen_require(`
+    type kernel_t, sudo_log_t;
+')
 tunable_policy(`zabbix_run_sudo',`
-    allow zabbix_agent_t self:capability { setgid setuid sys_resource };
+    allow zabbix_agent_t self:capability { chown dac_read_search setgid setuid sys_resource };
    allow zabbix_agent_t self:process { setrlimit setsched };
    allow zabbix_agent_t self:key write;
    allow zabbix_agent_t self:passwd { passwd rootok };

+    allow zabbix_agent_t sudo_log_t:dir { add_name create setattr write };
+    allow zabbix_agent_t sudo_log_t:file { create open read setattr write };
+
+    allow zabbix_agent_t devlog_t:sock_file write;
+    allow zabbix_agent_t kernel_t:unix_dgram_socket sendto;
+    allow zabbix_agent_t self:unix_dgram_socket { connect create };
+
+    auth_domtrans_chkpwd(zabbix_agent_t)
    auth_rw_lastlog(zabbix_agent_t)
    auth_rw_faillog(zabbix_agent_t)
-    auth_exec_chkpwd(zabbix_agent_t)
+
+    logging_send_audit_msgs(zabbix_agent_t)

    selinux_compute_access_vector(zabbix_agent_t)

+    sssd_read_config(zabbix_agent_t)
+
    systemd_write_inherited_logind_sessions_pipes(zabbix_agent_t)
    systemd_dbus_chat_logind(zabbix_agent_t)

    xserver_exec_xauth(zabbix_agent_t)
+
+    # Conceivably this could be under a separate boolean, but the reason to allow sudo
+    # is to allow check like this
+    lvm_domtrans(zabbix_agent_t)
+')
+
+optional_policy(`
+    rpm_exec(zabbix_agent_t)
+    rpm_read_db(zabbix_agent_t)
 ')

 optional_policy(`
@ -330,6 +361,10 @@ allow zabbix_t zabbix_script_t:process signal;

 init_domtrans_script(zabbix_script_t)

+optional_policy(`
+	chronyd_domtrans_chronyc(zabbix_script_t)
+')
+
 optional_policy(`
    mta_send_mail(zabbix_script_t)
 ')
Author	SHA1	Message	Date
Gwyn Ciesla	8ae98fdd83	7.4.14	2026-08-25 10:40:22 -05:00
Gwyn Ciesla	7f38ab7d85	7.4.13	2026-08-20 10:59:03 -05:00
Fedora Release Engineering	4c30392e64	Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild	2026-07-17 09:37:52 +00:00
Gwyn Ciesla	58378901e3	7.4.12	2026-07-09 11:51:13 -05:00
Yaakov Selkowitz	307797fb4a	Rebuilt for openssl 4.0	2026-06-12 20:09:45 -04:00
Vit Mojzis	793044564c	plans/dsp.fmf: Update the test repo URL The test repo was migrated to github due to Pagure being retired. https://communityblog.fedoraproject.org/the-forge-is-our-new-home/	2026-06-01 19:28:49 +02:00
Gwyn Ciesla	d887788c85	Openssl rebuild	2026-04-13 10:03:15 -05:00
Gwyn Ciesla	c26fba9f42	7.4.9	2026-04-09 11:32:43 -05:00
Gwyn Ciesla	05e9520e06	7.4.8	2026-03-13 10:01:20 -05:00
Gwyn Ciesla	3d76032971	7.4.7	2026-02-13 10:40:29 -06:00
Benjamin A. Beasley	dcb907d6f3	Rebuilt for net-snmp 5.9.5.2	2026-01-23 09:32:42 +00:00
Fedora Release Engineering	bfec638230	Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild	2026-01-17 21:05:21 +00:00
Gwyn Ciesla	021eed3408	7.4.6	2025-12-18 14:24:08 -06:00
Gwyn Ciesla	0bec2cefd7	7.4.5	2025-11-03 10:09:31 -06:00
Gwyn Ciesla	0808d83ad8	7.4.4	2025-10-29 10:28:08 -05:00
Gwyn Ciesla	60d93295d4	7.4.3	2025-10-01 11:06:40 -05:00
Vit Mojzis	d630adcb76	tests/DSP: use TMT intead of STI STI is being obsoleted: https://fedoraproject.org/wiki/Changes/DisableSTI Signed-off-by: Vit Mojzis <vmojzis@redhat.com>	2025-08-26 14:40:44 +00:00
Gwyn Ciesla	15702963d5	7.4.2	2025-08-25 10:17:41 -05:00
Gwyn Ciesla	d685d7ddd2	7.4.1	2025-07-31 14:29:24 -05:00
Fedora Release Engineering	ed2d2f1c81	Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild	2025-07-25 21:15:24 +00:00
Gwyn Ciesla	f0a29a829e	7.2.11	2025-07-22 10:36:04 -05:00
Gwyn Ciesla	8c79fb4660	7.2.10	2025-06-27 11:05:18 -05:00
Gwyn Ciesla	b48bf08356	7.2.9	2025-06-20 14:34:05 -05:00
Gwyn Ciesla	19a5a7ebea	Add user/group provides to -server to fix FTI	2025-04-09 12:05:05 -05:00
Orion Poplawski	64b349486e	Update to 7.2.5 (CVE-2024-36469, CVE-2024-42325, CVE-2024-45700)	2025-04-02 16:39:36 -06:00
Zbigniew Jędrzejewski-Szmek	ac9d4d8a64	Add sysusers.d config file to allow rpm to create users/groups automatically See https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers.	2025-02-11 17:03:14 +01:00
Fedora Release Engineering	33312afacc	Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild	2025-01-19 16:40:04 +00:00
Orion Poplawski	469b5b2420	Update to 7.2.2	2025-01-06 08:16:54 -07:00
Orion Poplawski	51402e1481	Update to 7.2.0	2024-12-11 20:34:19 -07:00
Orion Poplawski	6ee862cdc3	Update to 7.0.6	2024-11-30 16:56:44 -07:00
Orion Poplawski	4f152bb914	Update to 7.0.5	2024-10-22 07:52:57 -06:00
Orion Poplawski	70dbeedb8a	Fix typo in crypto policy patch that broke SSL connections	2024-10-06 19:47:37 -06:00
Orion Poplawski	22167b38b7	Update to 7.0.4	2024-09-25 21:41:09 -06:00
Orion Poplawski	0ff9a4461a	Update to 7.0.3 License changed upstream to AGPL-3.0-only, note other licenses in source	2024-08-24 19:42:32 -06:00
Orion Poplawski	4c455b17c3	Use alternatives name that systemd likes for units (bz#2305855)	2024-08-19 11:57:43 -06:00
Gwyn Ciesla	90c6039bb7	6.0.33	2024-08-15 12:45:47 -05:00
Miroslav Suchý	7cde0209f8	convert GPLv2 license to SPDX This is part of https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_4	2024-07-29 12:34:37 +02:00
Fedora Release Engineering	cb23ac22d0	Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild	2024-07-20 10:47:09 +00:00
Gwyn Ciesla	09920057c2	6.0.30	2024-05-21 09:14:55 -05:00
Orion Poplawski	00b7fe9980	Update to 6.0.29 Hopefully really get the zabbix_run_sudo SELinux boolean working for zabbix-agent and allow it to run lvm when enabled	2024-05-03 15:21:45 -06:00
Morten Stevens	e5f68a6acc	Update to 6.0.27	2024-02-28 16:34:01 +01:00
Fedora Release Engineering	ad6fda5387	Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild	2024-01-27 10:56:47 +00:00
Orion Poplawski	e1c0851c37	Update zabbix-out-of-tree.patch	2024-01-04 16:39:36 -07:00
Orion Poplawski	2e759bc208	Update to 6.0.25	2024-01-04 16:37:48 -07:00
Gwyn Ciesla	f7d2d5eae6	Patch for libxml2 2.12.x	2023-12-01 15:50:56 -06:00
Orion Poplawski	94fa5ca481	Add dontaudit SELinux rules for spurious AVC denial messages (bz#2170630)	2023-10-30 18:07:19 -06:00
Morten Stevens	43e1780e36	Update to 6.0.22	2023-10-05 00:14:32 +02:00
Morten Stevens	76ee645c80	Update to 6.0.20	2023-08-07 12:23:17 +02:00
Fedora Release Engineering	5571a59095	Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>	2023-07-22 19:35:49 +00:00
Morten Stevens	61e223bea1	Update to 6.0.19	2023-07-06 17:21:19 +02:00
Morten Stevens	48cc1bbc01	Update to 6.0.18	2023-06-15 15:29:23 +02:00
Morten Stevens	8cece31e8c	Update to 6.0.17	2023-04-25 08:02:06 +02:00
Morten Stevens	01503a359d	Update to 6.0.16	2023-04-11 16:15:57 +02:00
Morten Stevens	3411c0f586	Update to 6.0.15	2023-04-04 11:11:37 +02:00
Morten Stevens	88890abe71	Update to 6.0.14	2023-03-21 17:34:23 +01:00
Gwyn Ciesla	490e3ed002	migrated to SPDX license	2023-03-01 14:16:35 -06:00
Orion Poplawski	87540912a1	Update to 6.0.13 Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180) Add policy to allow zabbix agent to run rpm read-only	2023-02-16 15:48:27 -07:00
Orion Poplawski	a11392074c	Update to 6.0.12	2023-01-22 13:56:30 -07:00
Fedora Release Engineering	30e53b1628	Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>	2023-01-21 08:10:26 +00:00
Florian Weimer	182e725d26	Include <stdio.h> in configure for sscanf prototype For: <https://fedoraproject.org/wiki/Changes/PortingToModernC>	2022-11-17 13:37:06 +01:00
Nikola Knazekova	22940093ae	selinux: Update based on latest packaging guide https://fedoraproject.org/wiki/SELinux/IndependentPolicy Start shipping zabbix interface file Exclude installed policy module file from RPM verification Signed-off-by: Nikola Knazekova <nknazeko@redhat.com>	2022-09-26 18:25:59 +02:00
Gwyn Ciesla	99dd20bd58	6.0.8	2022-09-14 12:20:17 -05:00