Change logs for libselinux source package in Sid

  • libselinux (3.5-2) unstable; urgency=medium
    
      [ Michael Biebl ]
      * Move libselinux into /usr (Closes: #914247)
    
      [ Laurent Bigonville ]
      * debian/libselinux1.tmpfiles: claim /run/setrans directory.
        Thanks to Christian Göttsche, Michael Biebl (Closes: #1029095)
    
     -- Laurent Bigonville <email address hidden>  Wed, 24 Jan 2024 21:23:37 +0100
  • libselinux (3.5-1) unstable; urgency=medium
    
      [ Laurent Bigonville ]
      * New upstream release
        - debian/control: Add python3-setuptools and python3-pip to the BD
        - Bump libsepol-dev (build-)dependency to >= 3.5 to match the release
        - debian/libselinux1.symbols: Add newly exported symbols
      * debian/upstream/signing-key.asc: Add public key of Jason Zaman
      * debian/rules: Properly set the install layout for the python module
      * debian/control: Bump Standards-Version to 4.6.2 (no further changes)
      * debian/control: Drop dependency against ruby | ruby-interpreter, to please
        lintian
    
      [ Helmut Grohne ]
      * Fix FTCBFS: Support cross building python and ruby extensions.
        (Closes: #1022964)
      * Support the noudeb build profile. (Closes: #1024948)
    
      [ Bastian Germann ]
      * Fix "Inaccurate copyright file" (Closes: #1031678)
    
     -- Laurent Bigonville <email address hidden>  Sun, 09 Jul 2023 23:50:22 +0200
  • libselinux (3.4-1) unstable; urgency=medium
    
      [ Laurent Bigonville ]
      * New upstream release
        - Bump libsepol-dev build-dependency to >= 3.4 to match the release
        - debian/libselinux1.symbols: Add newly exported symbols
      * Enable GPG key validation of the upstream tarball
    
      [ Debian Janitor ]
      * Remove constraints unnecessary since buster:
        + Build-Depends: Drop versioned constraint on gem2deb.
    
     -- Laurent Bigonville <email address hidden>  Sat, 04 Jun 2022 12:41:40 +0200
  • libselinux (3.3-1) unstable; urgency=medium
    
      * New upstream version 3.3 (Closes: #989748)
        - Bump libsepol-dev build-dependency to >= 3.3 to match the release
      * debian/control: Bump Standards-Version to 4.6.0 (no further changes)
    
     -- Laurent Bigonville <email address hidden>  Mon, 08 Nov 2021 09:33:49 +0100
  • libselinux (3.1-3) unstable; urgency=medium
    
      [ Christian Göttsche ]
      * d/gitlab-ci.yml: Use Debian recipe
      * d/README: Drop note about ancient SELinux mount point
      * d/control: Bump debhelper compat to level 13
      * d/control: Bump Standards-Version to 4.5.1 (no further changes)
      * d/control: Update homepage
      * d/rules: Enable -Wall and -Werror
      * d/rules: Enable build hardening
      * d/control: Drop cute fields
    
      [ Laurent Bigonville ]
      * Do not use gettid() for Bullseye and use syscall() instead (Closes: #979970)
    
     -- Laurent Bigonville <email address hidden>  Tue, 09 Feb 2021 10:19:50 +0100
  • libselinux (3.1-2) unstable; urgency=medium
    
      [ Laurent Bigonville ]
      * debian/control: Bump libselinux1-dev dependency on libsepol1-dev to 3.1
    
      [ Balint Reczey ]
      * debian/libselinux1.symbols: Versioned symbols are available starting with
        3.1~ (Closes: #965136)
    
     -- Laurent Bigonville <email address hidden>  Thu, 16 Jul 2020 18:28:55 +0200
  • libselinux (3.1-1) unstable; urgency=medium
    
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 3.1 to match the release
      * debian/rules: Add -fno-semantic-interposition to the CFLAGS
    
     -- Laurent Bigonville <email address hidden>  Tue, 14 Jul 2020 19:00:18 +0200
  • libselinux (3.0-1) unstable; urgency=medium
    
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 3.0 to match the release
        - debian/libselinux1.symbols: Add newly exported symbols
        - Drop d/p/python_nodefs.patch, not needed anymore and add
          d/p/python_install-layout.patch to fix the installation layout for debian
      * debian/control: Bump Standards-Version to 4.4.1 (no further changes)
      * Bump debhelper compatibility to 12
    
     -- Laurent Bigonville <email address hidden>  Wed, 11 Dec 2019 14:38:39 +0100
  • libselinux (2.9-3) unstable; urgency=medium
    
      * Drop the python2 package (Closes: #936918)
    
     -- Laurent Bigonville <email address hidden>  Tue, 12 Nov 2019 10:42:53 +0100
  • libselinux (2.9-2) unstable; urgency=medium
    
      * Upload to unstable
      * debian/control: Mark ruby-selinux as Multi-Arch: same
    
     -- Laurent Bigonville <email address hidden>  Sun, 07 Jul 2019 11:50:04 +0200
  • libselinux (2.8-1) unstable; urgency=medium
    
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 2.8 to match the release
      * debian/control: Update the VCS-* fields now that we have migrated to
        gitlab/salsa machine
      * debian/rules: Adjust to match upstream changes to the build system
      * debian/control: Downgrade libselinux1 to Priority: optional
      * debian/copyright: Fix a spelling error, thanks to lintian
      * debian/rules: Use ?= instead of := to assig the dpkg architecture
        variables, thanks to lintian
      * debian/control: Remove X-Python(3)-Version fields as the required version
        is already in oldstable, to please lintian
      * debian/rules: Use dh_missing --fail-missing instead of dh_install
      * debian/control: Bump Standards-Version to 4.1.4 (no further changes)
      * debian/rules: Pass -V to dh_makeshlibs to ensure the udeb file has a
        minimal version set
    
     -- Laurent Bigonville <email address hidden>  Mon, 28 May 2018 20:50:31 +0200
  • libselinux (2.7-2) unstable; urgency=medium
    
      [ Helmut Grohne ]
      * Fix FTCBFS: Add the host architecture to pkg-config (Closes: #875507)
      * Use profiles nopython and noruby rather than stage1. (Closes: #875573)
    
     -- Laurent Bigonville <email address hidden>  Fri, 15 Sep 2017 11:46:07 +0200
  • libselinux (2.7-1) unstable; urgency=medium
    
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 2.7 to match the release
      * Bump debhelper compatibility to 10
      * Bump Standards-Version to 4.1.0 (no further changes)
      * debian/control: Remove Manoj from the uploader list and add myself
        instead. Thanks to him for all the work in the past.
      * Convert DEB_STAGE to DEB_BUILD_PROFILES (Closes: #869941)
    
     -- Laurent Bigonville <email address hidden>  Sat, 09 Sep 2017 23:32:59 +0200
  • libselinux (2.6-3) unstable; urgency=medium
    
      * Team upload.
      [ Christian Seiler ]
      * Add libselinux1-udeb (depended on by libmount1-udeb) (Closes: #835503)
    
     -- Laurent Bigonville <email address hidden>  Sun, 06 Nov 2016 18:22:28 +0100
  • libselinux (2.6-2) unstable; urgency=medium
    
      * Team upload.
      * Fix python binding under python3, some strings were represented as arrays
        of bytes instead of python strings
    
     -- Laurent Bigonville <email address hidden>  Sun, 06 Nov 2016 13:52:19 +0100
  • libselinux (2.6-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 2.6 to match the release
        - Make the build reproducible (Closes: #825655)
        - Drop 0003-Avoid-mounting-proc-outside-of-selinux_init_load_pol.patch,
          merged upstream
        - debian/patches/fix-makefile-bugs.patch,
          debian/patches/fix-cross-compile.patch: Refreshed
        - debian/python.mk: Fix python wrapper build
        - debian/libselinux1.symbols: Adjust the .symbols files, myprintf and
          obj_class_compat were never part of the public API
      * debian/libselinux1.symbols: Add the Build-Depends-Package field
      * debian/gbp.conf: Rename git-buildpackage section to buildpackage
    
     -- Laurent Bigonville <email address hidden>  Sat, 29 Oct 2016 02:31:28 +0200
  • libselinux (2.5-3) unstable; urgency=medium
    
      * Team upload.
      * Do not try to mount /proc during the libselinux initialization, in some
        use cases /proc is not mounted at early boot and mounting/unmounting it
        later might cause race conditions. (Closes: #823184)
    
     -- Laurent Bigonville <email address hidden>  Tue, 17 May 2016 14:04:22 +0200
  • libselinux (2.5-2) unstable; urgency=medium
    
      * Team upload.
      * d/p/only-mount-procfs-necessary.patch: Only mount /proc if necessary
        (Closes: #822679)
    
     -- Laurent Bigonville <email address hidden>  Sat, 30 Apr 2016 11:56:40 +0200
  • libselinux (2.5-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release
        - Bump libsepol1-dev build-dependency to >= 2.5 to match the release
        - debian/patches/fix-makefile-bugs.patch,
          debian/patches/fix-cross-compile.patch: Refreshed
        - Mount procfs before checking /proc/filesystems (Closes: #789218)
        - debian/libselinux1.symbols: Add new exported symbols
      * debian/gbp.conf: Sign tags by default
      * debian/control: Bump Standards-Version to 3.9.8 (no further changes)
      * debian/control: Fix Vcs-* URL's to please lintian (again)
      * debian/patches/fix-makefile-bugs.patch: Properly cleanup the files in
        clean-pywrap target, this way we are sure the python module is built with
        the correct version of python.
    
     -- Laurent Bigonville <email address hidden>  Mon, 25 Apr 2016 13:18:24 +0200
  • libselinux (2.4-3) unstable; urgency=medium
    
      * Team upload.
      * Upload to unstable
      * debian/python.mk: Add $(PYTHON3_VERSIONS) to the PHONY target
    
     -- Laurent Bigonville <email address hidden>  Wed, 18 Nov 2015 18:11:37 +0100
  • libselinux (2.3-2) unstable; urgency=medium
    
    
      * Team upload.
      * Add debian/patches/Add-pcre-version-string.patch: Add pcre version string
        to the compiled file_contexts format. This is necesarry to detect the
        cases where the internal libpcre representation has changed, if it's the
        case libselinux will rely on the non-compiled file (Closes: #756826)
      * Add debian/patches/Log-an-error-on-unknown-classes.patch: Log an error on
        unknown classes and permissions.
      * d/p/libselinux-man-Add-missing-manpage-links-to-security.patch: Add the
        missing manpage links for selinux_mkload_policy(3) and
        selinux_init_load_policy(3) (Closes: #753803)
      * Drop debian/libselinux1.postinst: Reloading systemd during an upgrade in
        an uncontroled way might endup with unwanted side effects (Closes: #753726)
    
     -- Laurent Bigonville <email address hidden>  Sun, 31 Aug 2014 20:57:58 +0200
  • libselinux (2.3-1) unstable; urgency=medium
    
    
      * Team upload.
      * New upstream release
        - debian/control: Bump {build-}dependencies to match new release
        - debian/libselinux1.symbols: Add new setexecfilecon() function
      * debian/ruby.mk: Rework the makefile, it should handle changes in the
        supported ruby versions by binNMU now (Closes: #747683)
      * Add Built-Using field for python-selinux as audit2why.so is statically
        linking against libsepol
    
     -- Laurent Bigonville <email address hidden>  Wed, 14 May 2014 20:13:57 +0200
  • libselinux (2.2.2-2) unstable; urgency=medium
    
    
      * Team upload.
      [ Laurent Bigonville ]
      * debian/rules: Do not require ruby or python dh helpers when bootstrapping
        thanks to Daniel Schepler <email address hidden> (Closes: #738148)
    
      [ Hideki Yamane ]
      * debian/{ruby.mk,ruby-selinux.install}
        - drop related to ruby1.9.1 and add ruby2.1.0 instead (Closes: #746024)
    
     -- Laurent Bigonville <email address hidden>  Fri, 02 May 2014 01:47:58 +0200
  • libselinux (2.2.2-1) unstable; urgency=medium
    
    
      * Team upload.
      * New upstream release
      * debian/control: Mark -dev package as Multi-arch: same. (Closes: #732098)
      * debian/control: Bump Standards-Version to 3.9.5 (no further changes)
      * debian/rules: Fix cross build, no need for a different prefix.
    
     -- Laurent Bigonville <email address hidden>  Sat, 11 Jan 2014 18:44:53 +0100
  • libselinux (2.2.1-1) unstable; urgency=low
    
    
      * Team upload.
      * New upstream release
      * Drop debian/patches/link_pthread.patch: Upstream disagreed with this
        solution, this will unfortunately require to rebuild some of the
        rdependencies
    
     -- Laurent Bigonville <email address hidden>  Sun, 10 Nov 2013 20:33:34 +0100
  • libselinux (2.2-2) unstable; urgency=low
    
    
      * Team upload.
      * debian/patches/link_pthread.patch: Explicitly link against -lpthread as
        libselinux is using it internally, without this ld.so is asserting in a
        weird way for some executables (Closes: #728529)
    
     -- Laurent Bigonville <email address hidden>  Sat, 02 Nov 2013 22:42:37 +0100
  • libselinux (2.2-1) unstable; urgency=low
    
    
      * Team upload.
      * New upstream release
        - Fix avc_has_perm() returns -1 even when SELinux is permissive.
          (Closes: #727766)
        - debian/control: Bump {build-}dependencies to match new release
        - debian/patches/fix-makefile-bugs.patch: Refreshed
        - Drop debian/patches/fix-manpages.patch: Not needed anymore
        - debian/patches/fix-cross-compile.patch: Refreshed
        - Drop debian/patches/allow-libbase-override.patch: Merged upstream
        - Drop debian/patches/fix_pcre_link.patch: Fixed upstream
        - Drop debian/patches/add_missing_private_pc.patch: Fixed upstream
        - Adjust debian/libselinux1.symbols: Add new symbols
      * debian/rules: getenforce and selinuxenabled executable are installed in
        /usr/sbin, keep their manpages in section 8
    
     -- Laurent Bigonville <email address hidden>  Fri, 01 Nov 2013 17:02:00 +0100
  • libselinux (2.1.13-3) unstable; urgency=low
    
    
      * Team upload.
      * debian/ruby.mk: Stop building binding for ruby 1.8 and start building it
        for ruby 2.0 (Closes: #720247)
      * debian/control: Bump Standards-Version to 3.9.4 (no further changes)
      * debian/control: Use canonical URL for VCS-Git field
      * debian/control, debian/rules: Drop libselinux-ruby1.8 transitional package
    
     -- Laurent Bigonville <email address hidden>  Wed, 02 Oct 2013 18:32:57 +0200
  • libselinux (2.1.13-2) unstable; urgency=low
    
    
      * Team upload.
      * debian/patches/add_missing_private_pc.patch: Add missing dependencies to
        the .pc file. This fix FTBFS of pkg that link statically against us
        (Closes: #708435)
      * debian/control: Add Dependency against libpcre3-dev on libselinux1-dev
        package
    
     -- Laurent Bigonville <email address hidden>  Mon, 20 May 2013 17:36:35 +0200
  • libselinux (2.1.13-1) unstable; urgency=low
    
    
      * Team upload.
      * New upstream release
        - debian/control: Bump libsepol1-dev (build-)dependency to match the release
        - Refresh the patches
        - debian/libselinux1.symbols: Add new symbol
      * debian/control: Add Homepage field
    
     -- Laurent Bigonville <email address hidden>  Thu, 09 May 2013 18:55:50 +0200
  • libselinux (2.1.9-5) unstable; urgency=low
    
    
      * Team upload.
      * Do not Conflicts with ruby transitional package, use versionized Breaks
        instead (Closes: #670058)
      * debian/ruby.mk: Also build for ruby1.9.1 now that's the default version
      * debian/gbp.conf: Change default git-buildpackage build-directory
    
     -- Laurent Bigonville <email address hidden>  Sun, 10 Jun 2012 08:33:05 +0200
  • libselinux (2.1.9-4) unstable; urgency=low
    
    
      * Team upload.
      * debian/control: Re-add Conflicts/Provides for libselinux1-dev, the Provides
        is still used.
    
     -- Laurent Bigonville <email address hidden>  Wed, 28 Mar 2012 14:03:32 +0200
  • libselinux (2.1.9-3) unstable; urgency=low
    
    
      * Team upload.
      * debian/control:
        - Bump debhelper build-dependency to 9
        - Move libselinux-ruby1.8 to Priority extra as it's a transitional package
        - Bump Standards-Version to 3.9.3 (no further changes)
        - Drop really old Conflicts/Replaces
        - Bump libselinux1-dev dependency on libsepol1-dev
        - Update Vcs-* fields
        - Bump libsepol1-dev build-dependency so we are sure libdir path is
          correct
        - Put under the Debian SELinux team maintenance
      * debian/libselinux1.lintian-overrides: Drop unused override
      * debian/patches/fix-manpages.patch: Fix section of selinuxexeccon.8
      * debian/patches/allow-libbase-override.patch: Fix .pc file to use multiarch
        path
      * debian/patches/python-link: Do not link against python library
        (Closes: #664291)
      * Add debian/gbp.conf file
      * Drop debian/patches/fix_FTBFS.patch: libsepol.pc is now giving libdir path
      * debian/rules: Append CPPFLAGS hardening flags to CFLAGS
    
     -- Laurent Bigonville <email address hidden>  Tue, 27 Mar 2012 21:47:29 +0200
  • libselinux (2.1.9-2) unstable; urgency=low
    
    
      * Moved the python libraries out of the multiarch directory because
        multiarch doesn't seem to work with python.
    
     -- Russell Coker <email address hidden>  Tue, 28 Feb 2012 14:19:24 +1100
  • libselinux (2.1.0-4.1) unstable; urgency=low
    
    
      * Non-maintainer upload.
      * debian/control
        - remove comment line since it prevents dch execution
      * debian/patches
        - add fix_FTBFS.patch to adjust path (Closes: #653680)
    
     -- Hideki Yamane <email address hidden>  Mon, 02 Jan 2012 18:34:40 +0900
  • libselinux (2.1.0-4) unstable; urgency=low
    
    
      * Put /selinux back in libselinux1
        Closes: #647035
    
     -- Russell Coker <email address hidden>  Mon, 31 Oct 2011 13:50:56 +1100
  • libselinux (2.1.0-3) unstable; urgency=low
    
    
      * Accept Kyle's changes.
        Closes: #645121
      * Merge Steve McIntyre's patch for cross compilation.
        Closes: #630626
      * Use two paragraphs for long description.
        Closes: #637369
    
     -- Russell Coker <email address hidden>  Fri, 28 Oct 2011 23:17:30 +1100
  • libselinux (2.1.0-1) unstable; urgency=low
    
    
      * New upstream release
      * Add symbols fini_selinuxmnt selinux_file_context_subs_dist_path
        selinux_status_close selinux_status_deny_unknown selinux_status_getenforce
        selinux_status_open selinux_status_policyload selinux_status_updated
      * Remove symbol selabelsublist which should never have been exported (it
        couldn't be used by outside code).
      * Made myself the maintainer as Manoj has been busy with paid work.
      * Made it build-depend on the latest libsepol1-dev.
    
     -- Russell Coker <email address hidden>  Tue, 30 Aug 2011 14:33:45 +1000
  • libselinux (2.0.98-1.1) unstable; urgency=low
      * Non-maintainer upload with permission of the maintainer.  * Build for multiarch, setting Pre-Depends multiarch-support in our shared    lib package.  * Always use -n with gzip, to avoid encoding timestamps in the gzip file;    this ensures compressed docs and other files are identical across    multiple builds, required for multiarch. -- Steve Langasek <email address hidden>  Tue, 21 Jun 2011 07:24:02 +0000
  • libselinux (2.0.98-1) unstable; urgency=low
      * New upstream release    + Turn off default user handling when computing user contexts by Dan Walsh    + Thread local storage fixes from Eamon Walsh.  * Added myself to the uploaders and changed the source URL.  * Made selabelsublist optional in the libselinux1.symbols file, it was    supposed to be private and there seems no possibility that anyone could    have used it without causing a crash so there seems no harm in removing it. -- Russell Coker <email address hidden>  Thu, 31 Mar 2011 23:14:03 +1100
  • libselinux (2.0.96-1) unstable; urgency=low
    
    
      * New upstream release
        + Add const qualifiers to public API where appropriate by KaiGai
          Kohei.
        + Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
        + Adds a chcon method to the libselinux python bindings from Steve Lawrence
    
     -- Manoj Srivastava <email address hidden>  Tue, 20 Jul 2010 23:27:20 -0700
  • libselinux (2.0.94-1) unstable; urgency=low
    
    
      * New upstream release
        * Set errno=EINVAL for invalid contexts from Dan Walsh.
        * Show strerror for security_getenforce() by Colin Walters.
        * Merged selabel database support by KaiGai Kohei.
        * Modify netlink socket blocking code by KaiGai Kohei.
        * Fix from Eric Paris to fix leak on non-selinux systems.
        * regenerate swig wrappers
        * pkgconfig fix to respect LIBDIR from Dan Walsh.
        * Change the AVC to only audit the permissions specified by the
          policy, excluding any permissions specified via dontaudit or not
          specified via auditallow.
        * Fix compilation of label_file.c with latest glibc headers.
        * add/reformat man pages by Guido Trentalancia <email address hidden>.
        * Change exception.sh to be called with bash by Manoj Srivastava
          <email address hidden>
      * Bug fix: "memory leak", thanks to Sam Hocevar. Upstream fixed bug
        a wee bit differently.                              (Closes: #570639).
    
    
     -- Manoj Srivastava <email address hidden>  Sun, 28 Mar 2010 08:40:37 -0700
  • libselinux (2.0.89-4) unstable; urgency=low
    
    
      * Revert decision not to ship /selinux; instead, ask policy folks to add
        an exception.                                Closes: #496752
    
     -- Manoj Srivastava <email address hidden>  Fri, 20 Nov 2009 13:00:47 -0600
  • libselinux (2.0.89-3) unstable; urgency=low
    
    
      * Fix breakage in python-selinux.
    
     -- Manoj Srivastava <email address hidden>  Thu, 19 Nov 2009 23:58:10 -0600
  • libselinux (2.0.89-2) unstable; urgency=low
    
    
      * [libselinux 16a76cd]: Do not ship /selinux
        Shipping /selinux is a violation of the FHS, and is proscribed by
        Debian policy. There is nothing that actually depends on /selinux
        being present, possibly apart from user scripts. From this point on,
        the machine operator will have to decide where to locate the mount
        point for selinuxfs, and modify /etc/fstab accordingly. SELinux
        modules scan for selinuxfs in /proc/mounts, so everything should
        adjust to the location of the selinuxfs mount automatically.
        Bug fix: "/selinux not in FHS", thanks to Kees Cook (Closes: #556972).
    
     -- Manoj Srivastava <email address hidden>  Thu, 19 Nov 2009 01:16:30 -0600
  • libselinux (2.0.89-1) unstable; urgency=low
    
    
      * New upstream point release
        + Add pkgconfig file. This eliminates a patch we have been carrying fr
          a while.
      * Update build dependency on libsepol so we pick up the typo fix in
        libsepol. 
    
     -- Manoj Srivastava <email address hidden>  Tue, 17 Nov 2009 13:31:24 -0600
  • libselinux (2.0.88-1) unstable; urgency=low
    
    
      * New upstream point release
        + Rename and export selinux_reset_config()
      
     -- Manoj Srivastava <email address hidden>  Sun, 25 Oct 2009 12:13:46 -0500
  • libselinux (2.0.87-3) unstable; urgency=low
    
    
      * [8dc8610]: [topic--exception-fix] exception.sh contains bashisms Use
        bash to run exception.sh (fails with non bash /bin/sh. Also, one now
        has to make swigify before building in ./src; this is the poximate
        cause of the bug.
        Bug fix: "python-selinux python modules are missing", thanks to Kees
        Cook (Closes: #551664).
    
     -- Manoj Srivastava <email address hidden>  Mon, 19 Oct 2009 19:05:26 -0500
  • libselinux (2.0.87-1) unstable; urgency=low
    
    
      * New upstream point release
        + Add exception handling in libselinux from Dan Walsh. This uses a
          shell script called exception.sh to generate a swig interface file.
        + Make matchpathcon print <<none>> if path not found in fcontext file.
        + Removal of reference counting on userspace AVC SID's.
      * Bug fix: "cross-build fixes", thanks to Colin Watson (Closes: #550731).
    
     -- Manoj Srivastava <email address hidden>  Tue, 13 Oct 2009 23:53:30 -0500
  • libselinux (2.0.85-4) unstable; urgency=high
    
    
      * Handle the ase of init=/bin/sh in postinst. We now make sure that
        /proc/init/exe is actually /sbin/init, and that we have /dev/initctl,
        before calling tellinit.
        Bug fix: "postinst script fails if there is no /dev/initctl", thanks
        to Johannes Schauer (Closes: #545647).
        Bug fix: "postinst script fails if there is no /dev/initctl", thanks
        to Johannes Schauer (Closes: #545673).
    
     -- Manoj Srivastava <email address hidden>  Tue, 08 Sep 2009 12:40:15 -0500
  • libselinux (2.0.85-2) unstable; urgency=low
    
    
      * Re-nenable building in parallel, which was disabled in the last
        upload. 
    
     -- Manoj Srivastava <email address hidden>  Sat, 22 Aug 2009 18:42:50 -0500
  • libselinux (2.0.85-1) unstable; urgency=low
    
    
      * New upstream release
        + Reverted Tomas Mraz's fix for freeing thread local storage to avoid
          pthread dependency.
        + Removed fini_context_translations() altogether.
        + Merged lazy init patch from Stephen Smalley based on original patch
          by Steve Grubb.
        + Add per-service seuser support from Dan Walsh.
        + Let load_policy gracefully handle selinuxfs being mounted from
          Stephen Smalley.
        + Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
          Paris.
      * Bug fix: "parallel building fails sometimes", thanks to Kees Cook
        Disabled for now.                                    (Closes: #536840).
      * Bug fix: "It fails to install into an (experimental) chroot", thanks
        to Francesco Paolo Lovergine. Stole chroot detection code from udev's
        postinst. In effect, we stat / and ensure that is the same as
        /proc/1/root's lstat value.                          (Closes: #537888).
    
     -- Manoj Srivastava <email address hidden>  Fri, 14 Aug 2009 00:57:32 -0500
  • libselinux (2.0.82-1) unstable; urgency=low
    
    
      * New upstream release
        + Fix improper use of thread local storage from Tomas Mraz
          <email address hidden>.
          Bug fix: "ends with Segmentation fault", thanks to Greg Auger
                                                   (Closes:    #505920).
        + Label substitution support from Dan Walsh.
        + Support for labeling virtual machine images from Dan Walsh. 
    
     -- Manoj Srivastava <email address hidden>  Wed, 24 Jun 2009 14:06:41 -0500
  • libselinux (2.0.71-1) unstable; urgency=low
    
    
      * New upstream release
         + Add group support to seusers using %groupname syntax from Dan Walsh.
         + Mark setrans socket close-on-exec from Stephen Smalley.
         + Only apply nodups checking to base file contexts from Stephen
           Smalley.
         + Merge ruby bindings from Dan Walsh.
         + Handle duplicate file context regexes as a fatal error from Stephen
           Smalley. This prevents adding them via semanage.
         + Fix audit2why shadowed variables from Stephen Smalley.
         + Note that freecon NULL is legal in man page from Karel Zak.
         + New and revised AVC, label, and mapping man pages from Eamon
           Walsh. 
         + Add swig python bindings for avc interfaces from Dan Walsh.
      * Added ruby bindings package
      * Updated the watch file
      * Updated the build system to the make -j friendly, non-double-colon
        taget based system. This should make building the package more
        robust. 
    
     -- Manoj Srivastava <email address hidden>  Tue, 10 Feb 2009 11:48:35 -0600
  • libselinux (2.0.65-5) unstable; urgency=high
    
    
      * Bug fix: "Python errors during upgrade", thanks to Frans Pop
        This is a serious bug.                              (Closes: #499086).
      * mount point /selinux does not exist. Fixed, though I believe it should
        go into base-files. But we need the fix for lenny, and I am not
        interested in bug-pong.                             (Closes: #498010)
      * Updated Standards-Version: No changes required.
    
     -- Manoj Srivastava <email address hidden>  Tue, 16 Sep 2008 00:51:17 -0500