commit: 5954c31f0b864c0f09d9917bdb2652da04b043c4 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Sat Feb 4 18:30:54 2017 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sun Feb 5 06:26:54 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5954c31f
Update Changelog and VERSION for release. Changelog | 137 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ VERSION | 2 +- 2 files changed, 138 insertions(+), 1 deletion(-) diff --git a/Changelog b/Changelog index d00f2cf..ba14a4a 100644 --- a/Changelog +++ b/Changelog @@ -1,3 +1,140 @@ +* Sat Feb 04 2017 Chris PeBenito <peben...@ieee.org> - 2.20170204 +Chris PeBenito (55): + Module version bumps for patches from Guido Trentalancia. + Update contrib. + Remove unneeded system_u seusers mapping. + Update contrib. + Merge pull request #45 from cgzones/travis2 + Merge pull request #46 from cgzones/update_readme + Merge pull request #47 from cgzones/spelling + Module version bump for xserver patch from Guido Trentalancia + Update contrib. + Merge pull request #50 from cgzones/macros + Merge pull request #48 from cgzones/makefile + xserver: Rearrange lines + Module version bump for xserver changes from Guido Trentalancia. + Merge branch 'dhcp_avahi' of https://github.com/cgzones/refpolicy + Module version bumps for patches from cgzones. + Update contrib. + Merge branch 'syslogd' of git://github.com/cgzones/refpolicy + Module version bump for journald fixes from cgzones. + Merge pull request #57 from cgzones/trailing_whitespaces + modutils: Move lines. + Module version bumps for openoffice patches from Guido Trentalancia. + Module version bump for kernel sysctl patch from Luis Ressel + Update contrib. + Module version bump for netutils patch from Luis Ressel. + Module version bump for xserver patch from Guido Trentalancia. + Module version bumps for patches from Guido Trentalancia. + rtkit: enable dbus chat with xdm + xserver: Move interface definition. + Module version bump for patches from Guido Trentalancia. + Module version bump for xscreensaver patch from Guido Trentalancia. + Merge branch 'run_transition' of git://github.com/cgzones/refpolicy + Module version bumps for /run fc changes from cgzones. + Module version bump for patches from Guido Trentalancia. + Merge branch '2016-12-27_systemd' of + git://github.com/fishilico/selinux-refpolicy-patched + Module version bump for systemd patch from Nicolas Iooss. + Merge branch 'usr-fc' of + git://github.com/fishilico/selinux-refpolicy-patched + Module version bump for fc updates from Nicolas Iooss. + Module version bump for patches from Guido Trentalancia. + xserver: Update from Russell Coker for boinc. + Module version bump for patches from Guido Trentalancia. + Merge pull request #62 from cgzones/fix_permission_segenxml + Merge pull request #94 from cgzones/travis + Merge branch 'corenetork_module' of git://github.com/cgzones/refpolicy + Merge branch 'mount_module' of git://github.com/cgzones/refpolicy + Merge branch 'terminal_module' of git://github.com/cgzones/refpolicy + Merge branch 'files_search_src' of git://github.com/cgzones/refpolicy + Merge branch 'unconfined_module' of git://github.com/cgzones/refpolicy + Merge branch 'auditd_fixes' of git://github.com/cgzones/refpolicy + Module version bumps for patches from cgzones. + Module version bump for cpu_online genfscon from Laurent Bigonville. + Update contrib. + Fix contrib. + Module version bump for cups patch from Guido Trentalancia. + Module version bump for xkb fix from Jason Zaman. + Bump module versions for release. + +Guido Trentalancia (19): + xserver: remove unneeded user content permissions + xserver: remove unneeded user content permissions + Apache OpenOffice module (base policy part) + xserver: enable dbus messaging with devicekit power + authlogin: indentation/whitespace fix + wm: update the window manager (wm) module and enable its role template + (v7) + userdomain: separate optional conditionals for gnome and wm role templates + udev: manage tmpfs files and directories + udev: always enable kernel module loading + base: enable the xscreensaver role + bootloader: stricter permissions and more tailored file contexts + modutils: update to run in confined mode + base: use new genhomedircon template for username + kernel: missing permissions for confined execution + xserver: introduce new fc and interface to manage X session logs + kernel: add missing plymouth interface + xserver: restrict executable memory permissions + init: support sysvinit + udev: execute HPLIP applications in their own domain + +Guido Trentalancia via refpolicy (4): + Let users read/manage symlinks on fs that do not support xattr + Let unprivileged users list mounted filesystems + Let the user list noxattr fs directories + sysadm: add the shutdown role + +Jason Zaman (1): + xserver: allow X roles to read xkb libs to set keymaps + +Laurent Bigonville (1): + Use genfscon to label /sys/devices/system/cpu/online as cpu_online_t + +Luis Ressel (3): + system/modutils: Add kernel_search_key(kmod_t) + kernel.if: Allow listing /proc/sys/net/unix + netutils: Label iptstate as netutils_t + +Nicolas Iooss (4): + systemd: add systemd-backlight policy + systemd: add systemd-binfmt policy + Allow searching /proc/sys/fs when using /proc/sys/fs/binfmt_misc + Add file contexts in /usr for /bin, /usr/sbin and /usr/lib + +Russell Coker (1): + single binary modutils + +Stephen Smalley (2): + refpolicy: Define extended_socket_class policy capability and socket + classes + refpolicy: drop unused socket security classes + +cgzones (21): + update .travis.yml + update README + fix spelling + update Makefile + update policy/support macros + review + keep 2 empty lines in front of a new section + using intermediate target instead of splitting up conf files generation + define filecontext for /run/agetty.reload + allow dhcp_t to domtrans into avahi + fix syslogd audits + remove trailing whitespaces + transition file contexts to /run + fix permission of installed segenxml.py by install-headers + auditd / auditctl: fix audits + add files_search_src() + update unconfined module * grant capability2:wake_alarm * remove + deprecated interfaces + update terminal module + update corenetwork module + use travis cache + update mount module + * Sun Oct 23 2016 Chris PeBenito <peben...@ieee.org> - 2.20161023 Chris PeBenito (94): Module version bump for systemd-user-sessions fc entry from Dominick Grift diff --git a/VERSION b/VERSION index f011019..395af8d 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.20161023 +2.20170204
