FFE upgrade setools from 2.4 to 3.3.3

Bug #198391 reported by Caleb Case
4
Affects Status Importance Assigned to Milestone
setools (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: setools

Update SETools to the latest release. The SELinux policies used in Hardy Heron are not supported by SETools version 2.4. Updating to version 3.3.3 will allow Hardy Heron users to analyze their SELinux policies.

Changelog:

setools (3.3.3-0ubuntu1) hardy; urgency=low

  * Merged SETools 3.3.3 release into this package.

 -- J. Tang <email address hidden> Thu, 21 Feb 2008 12:00:00 -0500

setools (3.3.2-0ubuntu3) hardy; urgency=low

  * debian/control
    - Changed from java2-compiler to java2-sdk in build depends
  * debian/rules
    - Set JAVA_HOME environment variable for icedtea
    - Set the --with-java-prefix configure flag

 -- Joseph Jackson IV <email address hidden> Sat, 02 Feb 2008 20:44:56 -0500

setools (3.3.2-0ubuntu2) hardy; urgency=low

  * debian/control
    - Update Debian Maintainer field

 -- Joseph Jackson IV <email address hidden> Sat, 02 Feb 2008 19:04:33 -0500

setools (3.3.2-0ubuntu1) hardy; urgency=low

  * Merged SETools 3.3.2 release into this package.

 -- J. Tang <email address hidden> Tue, 29 Jan 2008 12:00:00 -0500

Testing:

* Built with pbuilder without problems.
* Installs and runs correctly on Ubuntu Desktop.
* Upgrades from 2.4 correctly on Ubuntu Desktop.
* There aren't any packages which depend on SETools.

Revision history for this message
Caleb Case (calebcase) wrote :
Revision history for this message
Cesare Tirabassi (norsetto) wrote :

Looks like it would be nice to have this for hardy. We need more info though:

>There aren't any packages which depend on SETools

root@norsetto:/# apt-cache rdepends setools
setools
Reverse Depends:
  selinux-policy-refpolicy-dev
  libsefs1
  libsefs-dev
  libseaudit1
  libseaudit-dev
  libapol1
  libapol-dev

Can you attach your build and install logs?
Can you attach a diffstat and a diff of the upstream changelogs (the one in the tarball stops at 3.0 but since you are upstream you certainly have it)?

PS. For future sponsoring, this should not be a native package.

Revision history for this message
Kees Cook (kees) wrote :

Hm, yeah, it seems the prior setools produces many more binaries than this one:

Package: setools
Binary: libapol-dev, libseaudit1, libapol1, libsefs1, libsefs-dev, libseaudit-dev, setools
Version: 2.4-3

Luke Yelavich (themuso)
Changed in setools:
status: New → Incomplete
Revision history for this message
JasonTang (jtang-tresys) wrote :

SETools 3.x is a complete rewrite from SETools 2.x. A diffstat would be useless to examine. Prior to SETools 3.0, a ChangeLog was not maintained in a formal manner.

The SETools 2.x source Debian package errantly created many binary libraries; these have been combined in 3.x (libsetools, libsetools-dev) because of their inter-dependencies. Perhaps we should provide transitional packages for those obsolete library packages.

Revision history for this message
Scott Kitterman (kitterman) wrote : Re: [Bug 198391] Re: FFE upgrade setools from 2.4 to 3.3.3

Yes. Please. (for transitional packages)

Revision history for this message
Sarah Kowalik (hobbsee-deactivatedaccount) wrote :

+1 if you do the transitional packages as well.

Changed in setools:
status: Incomplete → Confirmed
Revision history for this message
Caleb Case (calebcase) wrote :

I've put an updated setools on revu that has the transitional packages
added. The version was changed to 3.3.4 upstream.

http://revu.tauware.de/details.py?package=setools

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package setools - 3.3.4-0ubuntu1

---------------
setools (3.3.4-0ubuntu1) hardy; urgency=low

  [ J. Tang ]
  * Merged SETools 3.3.4 release (LP: #198391).

  [ Joseph Jackson IV ]
  * debian/control
    - Changed from java2-compiler to java2-sdk in build depends
    - Update Debian Maintainer field
  * debian/rules
    - Set JAVA_HOME environment variable for icedtea
    - Set the --with-java-prefix configure flag

 -- <email address hidden> (J. Tang) Fri, 7 Mar 2008 12:00:00 -0500

Changed in setools:
status: Confirmed → Fix Released
Revision history for this message
Scott Kitterman (kitterman) wrote :

Looking back on this, it wasn't clear to me that we were forking from Debian without even discussing it with the Debian Maintainer.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.