File: //proc/thread-self/root/proc/self/root/proc/thread-self/root/var/lib/rpm/__db.003
`� �������� �������� �������� �������� �������� �������� �������� �������� �������� �������� � �7� �6�� � ������������������������� � � 0 h P � 3 ��y � 5 m �P � � X �4� � E�?] �O� �%� ! _��k ) ��y X! p! 8! 8! 8 ���������������p�������8 � ���������������8�������� � �������� �������� �������� �������� �������� ��������
�������� �������� ��������
�������� �������� �������� � �������� �������� �������� �������� � ���������������P�������� � �������� �������� �������� �w �,
�* h^ 8� = � � �� �~ �� ж � XC
� @� �� @0 ! �: 0 " p� � # �d �� $ `K h* % x� �r & � � ' �� h� ( (H � ) PR �R * k `�
+ � hF , � 0� - 8� � . �� �A / �� X� 0 p�
�~ 1 � �@ 2 �, � 3 M (< 4 � `' 5 �������� 6 �������� 7 h� h� 8 X� H�
9 Xl �� : � �; ; � � < ع 0O = �������� > p� �� ? x4
�4
@ �������� A �������� B �������� C �������� D � �) E �s p� F �z �c G �i �3 H pD � I xs �� J 0� ��
K �I
�� L X 8X M �8 �8 N ȕ � O � 8� P Ht `t Q �������� R �������� S � � T �������� U XW pW V P� �� W � 0� X X� p� Y �
8�
Z �������� [ `� x� \ @N XN ] �* �* ^ �+ _ p � ` �
0�
a `� x� b � 0�
c �� �� d �� �4 e �������� f �������� g �������� h �������� i �������� j �������� k �H �H l �������� m �������� n �������� o h� �� p p� �� q �\ �� r 0 H s (9 @9 t �� P� u ة � v `� �p w �a �Q x ��
y ��
0�
z P� �H
{ �� � | �
��
} � 8� ~ � � 8� (% � �� �T � x+ � � �
�
� �������� � h` �` � �� � � H p � �� h � � P� � � H� � h� @M � @� �� � �� �� � ��
�m � � �� � �) �� � �Z � � � � (� Ȥ � p� X9 � �� � � �� �d � �| (� � � �R
� (�������������x������� x ��������������� ��������������� H X����������������������H 5 ? ? ? `& ��������@����� ���� l� � � : & �& H �����������������������H �� � 8��1 @ ����������������@������@ Packages @ ���������������� ������@ � ������������������������ X !�y (D �� � �$ ���������������� � � D _CRYPTO_LIB_ARC4=m, CONFIG_CRYPTO_DEV_ATMEL_I2C=m,
- CONFIG_CRYPTO_DEV_ATMEL_ECC=m, CONFIG_CRYPTO_DEV_ATMEL_SHA204A=m,
- CONFIG_ARCH_HAS_FORCE_DMA_UNENCRYPTED=y, CONFIG_DIMLIB=y,
- CONFIG_HAVE_GENERIC_VDSO=y and CONFIG_GENERIC_GETTIMEOFDAY=y - Updated with the 5.2.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14] - Updated with the 5.2.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.13] - Updated with the 5.2.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.12] - Updated with the 5.2.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.11] - Updated with the 5.2.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10] - Updated with the 5.2.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8] - Updated with the 5.2.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.7] - Updated with the 5.2.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6] - Updated with the 5.2.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.5] - Updated with the 5.2.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.4] - Updated with the 5.2.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3] - Updated with the 5.2.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.2]
- General availability. - [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15]
- The second release candidate of a kernel-ml package set for EL8. - [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15]
- The first release candidate of a kernel-ml package set for EL8. builder0001.linux.locaweb.com.br 1690985467
5.15.123-9.el8 5.15.123-9.el8 bpftool bpftool bpftool-btf.8.gz bpftool-cgroup.8.gz bpftool-feature.8.gz bpftool-gen.8.gz bpftool-iter.8.gz bpftool-link.8.gz bpftool-map.8.gz bpftool-net.8.gz bpftool-perf.8.gz bpftool-prog.8.gz bpftool-struct_ops.8.gz bpftool.8.gz /etc/bash_completion.d/ /usr/sbin/ /usr/share/man/man8/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=1cff5f19ce263d629e4a581f7de05531c126b70c, not stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R
R R R R R R R R R R R
R R R R R R R �c�軔^�W��rb%�q utf-8 ca7eee166312163ce1f59fb964b205971f96eec582dfab9af7f23e549fa8c7a0 ? ���P
�p �
�
�i狼��128932fa067af0ef04ddcde7eb75430e88cbaf2f 9d973e91563d3da447013e3ea68ebb1a6073a955bdce077e6fff69e94eac835d e} 4� e}83051]
- [sound] ALSA: ASoC: eliminate left-over from Raumfeld machine driver removal (Jaroslav Kysela) [1683051]
- [sound] ALSA: ASoC: rt298: fix boolean tests (Jaroslav Kysela) [1683051]
- [sound] ALSA: ASoC: rl6437a: use __be32 for a __be32 buf (Jaroslav Kysela) [1683051]
- [sound] ALSA: ASoC: rt5645: store eq kcontrol byte in __be (Jaroslav Kysela) [1683051]
- [sound] ALSA: ASoC: da7219: use logical AND (Jarosl x�����(U �� �8 ��������������� �8 �� � ���������S �� � �� � �ƌ�q cmemx ����������������h� x Name dename ����������������p������@ s ch� ����������������0������� X om3�y to . 0� d wi�$ ���������������� � relocation (#1682954) - Add malloc fastbin tunable (#1764218) - Fix race condition in tst-clone3 and add a new ldconfig test,
tst-ldconfig-bad-aux-cache (#1764226) - Remove unwanted whitespace from size lines and account for top chunk in
malloc_info output (#1735747) - Enhance malloc tcache (#1746933) - Don't define initgroups in nsswitch.conf (#1747505) - libio: Remove codecvt vtable. (#1764241) - Implement --preload option for the dynamic linker.(#1747453) - Make nsswitch.conf more distribution friendly.
Improve nscd.conf comments. (#1747505) - Update system call names list to Linux 5.3 (#1764234) - Skip wide buffer handling for legacy stdio handles (#1722215) - Remove copy_file_range emulation (#1724975) - Avoid nscd assertion failure during persistent db check (#1727152) - Fix invalid free under valgrind with libdl (#1717438) - Account for size of locale-archive in rpm package (#1725131) - Reject IP addresses with trailing characters in getaddrinfo (#1727241) - Avoid header conflict between <sys/stat.h> and <linux/stat.h> (#1699194) - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
- Do not mark /usr/lib/locale/locale-archive as a configuration file
because it is always automatically overwritten by build-locale-archive. - Avoid ABI exposure of the NSS service_user type (#1710894) - Enable full ICMP errors for UDP DNS sockets. (#1670043) - Convert post-install binary to rpm lua scriptlet (#1639346) - Fix crash during wide stream buffer flush (#1710478) - Add PF_XDP, AF_XDP and SOL_XDP from Linux 4.18 (#1706777) - Add .gdb_index to debug information (#1612448) - iconv, localedef: avoid floating point rounding differences (#1691528) - locale: Add LOCPATH diagnostics to the locale program (#1701605) - Fix hang in pldd. (#1702539) - s390x string function improvements (#1659438) - Fix test suite failures due to race conditions in posix/tst-spawn
spawned processes. (#1659512) - Add missing CFI data to __mpn_* functions on ppc64le (#1658901) - intl: Do not return NULL on asprintf failure in gettext (#1663035) - Increase BIND_NOW coverage (#1639343) - Fix pthread_rwlock_trywrlock and pthread_rwlock_tryrdlock stalls (#1659293) - malloc: Improve bad chunk detection (#1651283) - Add compiler barriers around modifications of the robust mutex list
for pthread_mutex_trylock. (#1672773) - powerpc: Only enable HTM if kernel supports PPC_FEATURE2_HTM_NOSC (#1651742) - Only build libm with -fno-math-errno (#1664408) - ja_JP: Add new Japanese Era name (#1577438) - math: Add XFAILs for some IBM 128-bit long double fma tests (#1623537) - malloc: realloc ncopies integer overflow (#1662843) - Fix rdlock stall with PREFER_WRITER_NONRECURSIVE_NP (#1654872) - malloc: Implement double-free check for the thread cache (#1642094) - Add upstream test case for CVE-2018-19591 (#1654010) - Add GCC dependency for new inline string functions on ppc64le (#1652932) - Add requires on explicit glibc version for glibc-nss-devel (#1649890) - Fix data race in dynamic loader when using LD_AUDIT (#1635779) - CVE-2018-19591: File descriptor leak in if_nametoindex (#1654010) - Do not use parallel make for building locales (#1652229) - support: Print timestamps in timeout handler (#1651274) - Increase test timeout for libio/tst-readline (#1638520) - Fix tzfile low-memory assertion failure (#1650571) - Add newlines in __libc_fatal calls (#1650566) - nscd: Fix use-after-free in addgetnetgrentX (#1650563) - Update syscall names to Linux 4.19 (#1650560) - kl_GL: Fix spelling of Sunday, should be "sapaat" (#1645597) - Fix x86 CPU flags analysis for string function selection (#1641982) - Reduce RAM requirements for stdlib/test-bz22786 (#1638523) - x86: Improve enablement for 32-bit code using CET (#1645601) - Fix crash in getaddrinfo_a when thread creation fails (#1646379) - Fix race in pthread_mutex_lock related to PTHREAD_MUTEX_ELISION_NP (#1645604) - Fix misreported errno on preadv2/pwritev2 (#1645596) - Fix posix/tst-spawn4-compat test case (#1645593) - Disable CET for binaries created by older link� x���������������������� X lv��y#219��������� to �$ ����������������
� transition to mount - Fix cron jobs to run under the correct context - Fixes to make pppd work - Multiple policy fixes
- Change max categories to 1023 - Fix transition on mcstransd - Add /dev/em8300 defs - Upgrade to upstream - Fix ppp connections from network manager - Add tty access to all domains boolean
- Fix gnome-pty-helper context for ia64 - Fixed typealias of firstboot_rw_t - Fix location of xel log files
- Fix handling of sysadm_r -> rpm_exec_t - Fixes for autofs, lp - Update from upstream - Fixup for test6 - Update to upstream - Update to upstream - Fix suspend to disk problems - Lots of fixes for restarting daemons at the console. - Fix audit line
- Fix requires line - Upgrade to upstream - Fix install problems - Allow setroubleshoot to getattr on all dirs to gather RPM data - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
- Fix spec for /dev/adsp - Fix xen tty devices - Fixes for setroubleshoot - Update to upstream - Fixes for stunnel and postgresql
- Update from upstream - Update from upstream
- More java fixes - Change allow_execstack to default to on, for RHEL5 Beta.
This is required because of a Java compiler problem.
Hope to turn off for next beta - Misc fixes - More fixes for strict policy - Quiet down anaconda audit messages - Fix setroubleshootd - Update to the latest from upstream - More fixes for xen - Fix anaconda transitions - yet more xen rules - more xen rules - Fixes for Samba - Fixes for xen - Allow setroubleshootd to send mail - Add nagios policy - fixes for setroubleshoot - Added Paul Howarth patch to only load policy packages shipped
with this package
- Allow pidof from initrc to ptrace higher level domains
- Allow firstboot to communicate with hal via dbus - Add policy for /var/run/ldapi - Fix setroubleshoot policy - Fixes for mls use of ssh
- named has a new conf file - Fixes to make setroubleshoot work - Cups needs to be able to read domain state off of printer client - add boolean to allow zebra to write config files - setroubleshootd fixes - Allow prelink to read bin_t symlink
- allow xfs to read random devices
- Change gfs to support xattr - Remove spamassassin_can_network boolean - Update to upstream
- Fix lpr domain for mls - Add setroubleshoot policy - Turn off auditallow on setting booleans - Multiple fixes - Update to upstream - Update to upstream
- Add new class for kernel key ring - Update to upstream - Update to upstream - Break out selinux-devel package - Add ibmasmfs - Fix policygentool gen_requires - Update from Upstream - Fix spec of realplay - Update to upstream - Fix semanage - Allow useradd to create_home_dir in MLS environment - Update from upstream - Update from upstream - Add oprofilefs - Fix for hplip and Picasus - Update to upstream - Update to upstream - fixes for spamd - fixes for java, openldap and webalizer - Xen fixes - Upgrade to upstream - allow hal to read boot_t files
- Upgrade to upstream - allow hal to read boot_t files - Update from upstream - Fixes for amavis - Update from upstream - Allow auditctl to search all directories - Add acquire service for mono. - Turn off allow_execmem boolean
- Allow ftp dac_override when allowed to access users homedirs - Clean up spec file
- Transition from unconfined_t to prelink_t - Allow execution of cvs command - Update to upstream - Update to upstream - Fix libjvm spec - Update to upstream - Add xm policy
- Fix policygentool - Update to upstream
- Fix postun to only disable selinux on full removal of the packages - Allow mono to chat with unconfined - Allow procmail to sendmail
- Allow nfs to share dosfs - Update to latest from upstream
- Allow selinux-policy to be removed and kernel not to crash - Update to latest from upstream
- Add James Antill patch for xen
- Many fixes for pegasus - Add unconfined_mount_t
- Allow privoxy to connect to httpd_cache
- fix cups labeleing on /var/cache/cups - Update to latest from upstream - Update to latest from upstream
- Allow mono and unconfined to talk to initrc_t dbus objects - Change libraries.fc to stop shl� x������������� �������� X d �yect H* H � over�$
���������������� � � � � Bartlett <ajb@elrepo.org> - 5.4.12-1 Alan Bartlett <ajb@elrepo.org> - 5.4.11-1 Alan Bartlett <ajb@elrepo.org> - 5.4.10-1 Alan Bartlett <ajb@elrepo.org> - 5.4.9-1 Alan Bartlett <ajb@elrepo.org> - 5.4.8-1 Alan Bartlett <ajb@elrepo.org> - 5.4.7-1 Alan Bartlett <ajb@elrepo.org> - 5.4.6-1 Alan Bartlett <ajb@elrepo.org> - 5.4.5-1 Alan Bartlett <ajb@elrepo.org> - 5.4.4-1 Alan Bartlett <ajb@elrepo.org> - 5.4.3-1 Alan Bartlett <ajb@elrepo.org> - 5.4.2-1 Alan Bartlett <ajb@elrepo.org> - 5.4.1-1 Alan Bartlett <ajb@elrepo.org> - 5.4.0-1 Alan Bartlett <ajb@elrepo.org> - 5.3.13-1 Alan Bartlett <ajb@elrepo.org> - 5.3.12-1 Alan Bartlett <ajb@elrepo.org> - 5.3.11-1 Alan Bartlett <ajb@elrepo.org> - 5.3.10-1 Alan Bartlett <ajb@elrepo.org> - 5.3.9-1 Alan Bartlett <ajb@elrepo.org> - 5.3.8-1 Alan Bartlett <ajb@elrepo.org> - 5.3.7-1 Alan Bartlett <ajb@elrepo.org> - 5.3.6-1 Alan Bartlett <ajb@elrepo.org> - 5.3.5-1 Alan Bartlett <ajb@elrepo.org> - 5.3.4-1 Alan Bartlett <ajb@elrepo.org> - 5.3.2-1 Alan Bartlett <ajb@elrepo.org> - 5.3.1-1 Alan Bartlett <ajb@elrepo.org> - 5.3.0-1 Alan Bartlett <ajb@elrepo.org> - 5.2.14-1 Alan Bartlett <ajb@elrepo.org> - 5.2.13-1 Alan Bartlett <ajb@elrepo.org> - 5.2.12-1 Alan Bartlett <ajb@elrepo.org> - 5.2.11-1 Alan Bartlett <ajb@elrepo.org> - 5.2.10-1 Alan Bartlett <ajb@elrepo.org> - 5.2.8-1 Alan Bartlett <ajb@elrepo.org> - 5.2.7-1 Alan Bartlett <ajb@elrepo.org> - 5.2.6-1 Alan Bartlett <ajb@elrepo.org> - 5.2.5-1 Alan Bartlett <ajb@elrepo.org> - 5.2.4-1 Alan Bartlett <ajb@elrepo.org> - 5.2.3-1 Alan Bartlett <ajb@elrepo.org> - 5.2.2-1 Alan Bartlett <ajb@elrepo.org> - 5.1.15-0.rc2 Alan Bartlett <ajb@elrepo.org> - 5.1.15-0.rc1 - Updated with the 5.15.123 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.123] - Updated with the 5.15.122 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.122] - Updated with the 5.15.121 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.121] - Updated with the 5.15.120 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.120] - Updated with the 5.15.119 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.119] - Updated with the 5.15.118 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.118] - Updated with the 5.15.117 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.117] - Updated with the 5.15.116 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.116] - Updated with the 5.15.115 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.115] - Updated with the 5.15.114 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.114] - Updated with the 5.15.113 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.113] - Updated with the 5.15.112 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.112] - Updated with the 5.15.111 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.111] - Updated with the 5.15.110 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.110] - Updated with the 5.15.109 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.109] - Updated with the 5.15.108 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.108] - Updated with the 5.15.107 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.107] - Updated with the 5.15.106 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.106] - Updated with the 5.15.105 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.105] - Updated with the 5.15.104 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.104] - Updated with the 5.15.103 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.103] - Updated with the 5.15.102 source tarball.
- [https://www.k� x���������������������� X - ��y0-0.h�
����� remi�$ ���������������� � d_kernel_modules() for module deps which are still labeled as modules_dep_t.
- Remove modules_dep_t labeling for kernel module deps. depmod is a symlink to kmod which is labeled as insmod_exec_t which handles modules_object_t and there is no transition to modules_dep_t. Also some of these module deps are placed by cpio during install/update of kernel package. - Allow acpid to attempt to connect to the Linux kernel via generic netlink socket.
- Clean up pkcs11proxyd policy.
- We need to require sandbox_web_type attribute in sandbox_x_domain_template().
- Revert "depmod is a symlink to insmod so it runs as insmod_t. It causes that dep kernel modules files are not created with the correct labeling modules_dep_t. This fix adds filenamtrans rules for insmod_t."
- depmod is a symlink to insmod so it runs as insmod_t. It causes that dep kernel modules files are not created with the correct labeling modules_dep_t. This fix adds filenamtrans rules for insmod_t.
- Update files_read_kernel_modules() to contain modutils_read_module_deps() calling because module deps labeling has been updated and it allows to avoid regressions.
- Update modules_filetrans_named_content() interface to cover more modules.* files.
- New policy for systemd-machined. #1255305
- In Rawhide/F24, we added pam_selinux.so support for systemd-users to have user sessions running under correct SELinux labeling. It also supports another new feature with systemd+dbus and we have sessions dbuses running with the correct labeling - unconfined_dbus_t for example.
- Allow systemd-logind read access to efivarfs - Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables). #1244973, #1267207 (partial solution)
- Merge pull request #42 from vmojzis/rawhide-base
- Add interface to allow reading files in efivarfs - contains Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables) - Add few rules related to new policy for pkcs11proxyd
- Added new policy for pkcs11proxyd daemon
- We need to require sandbox_web_type attribute in sandbox_x_domain_template().
- Dontaudit abrt_t to rw lvm_lock_t dir.
- Allow abrt_d domain to write to kernel msg device.
- Add interface lvm_dontaudit_rw_lock_dir()
- Merge pull request #35 from lkundrak/lr-libreswan - Update config.tgz to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.
- Added support for permissive domains
- Allow rpcbind_t domain to change file owner and group
- rpm-ostree has a daemon mode now and need to speak to polkit/logind for authorization. BZ(#1264988)
- Allow dnssec-trigger to send generic signal to Network-Manager. BZ(#1242578)
- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
- Revert "Add apache_read_pid_files() interface"
- Allow dirsrv-admin read httpd pid files.
- Add apache_read_pid_files() interface
- Add label for dirsrv-admin unit file.
- Allow qpid daemon to connect on amqp tcp port.
- Allow dirsrvadmin-script read /etc/passwd file Allow dirsrvadmin-script exec systemctl
- Add labels for afs binaries: dafileserver, davolserver, salvageserver, dasalvager
- Add lsmd_plugin_t sys_admin capability, Allow lsmd_plugin_t getattr from sysfs filesystem.
- Allow rhsmcertd_t send signull to unconfined_service_t domains.
- Revert "Allow pcp to read docker lib files."
- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled. BZ(#1262993)
- Allow pcp to read docker lib files.
- Revert "init_t needs to be login_pgm domain because of systemd-users + pam_selinux.so"
- Add login_userdomain attribute also for unconfined_t.
- Add userdom_login_userdomain() interface.
- Label /etc/ipa/nssdb dir as cert_t
- init_t needs to be login_pgm domain because of systemd-users + pam_selinux.so
- Add interface unconfined_server_signull() to allow domains send signull to unconfined_service_t
- Call userdom_transition_� x������������� �������� X je%�yrg> ��������4@ Coll�$ $ ���������������� 4@ 5@ 3@ � redhat.com> 1.3.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-2 Adam Jackson <ajax@redhat.com> 1.3.0-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2 Adam Jackson <ajax@redhat.com> 1.2.0-1 Adam Tkac <atkac redhat com> 1.1.2-2 Adam Jackson <ajax@redhat.com> 1.1.2-1 Robert Scheck <robert@fedoraproject.org> 1.1-2 Adam Jackson <ajax@redhat.com> 1.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.99.4-3 Adam Jackson <ajax@redhat.com> 1.0.99.4-2 Peter Hutterer <peter.hutterer@redhat.com> 1.0.99.4-1 Adam Jackson <ajax@redhat.com> 1.0.99.2-0 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.99.1-2 Adam Jackson <ajax@redhat.com> 1.0.99.1-1 Matthias Clasen <mclasen@redhat.com> 1.0.4-2 Adam Jackson <ajax@redhat.com> 1.0.4-1 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.0.1-6 parag <paragn@fedoraproject.org> - 1.0.1-5 Adam Jackson <ajax@redhat.com> - 1.0.1-4 Matthias Clasen <mclasen@redhat.com> 1.0.1-4 Adam Jackson <ajackson@redhat.com> 1.0.1-3 Jesse Keating <jkeating@redhat.com> - 1.0.1-2.1 Mike A. Harris <mharris@redhat.com> 1.0.1-2 Adam Jackson <ajackson@redhat.com> 1.0.1-1 Jesse Keating <jkeating@redhat.com> - 1.0.0-3.2 Jesse Keating <jkeating@redhat.com> - 1.0.0-3.1 Mike A. Harris <mharris@redhat.com> 1.0.0-3 Mike A. Harris <mharris@redhat.com> 1.0.0-2 Mike A. Harris <mharris@redhat.com> 1.0.0-1 Mike A. Harris <mharris@redhat.com> 0.99.3-1 Jesse Keating <jkeating@redhat.com> Mike A. Harris <mharris@redhat.com> 0.99.2-1 Mike A. Harris <mharris@redhat.com> 0.99.1-1 Mike A. Harris <mharris@redhat.com> 0.99.0-3 Mike A. Harris <mharris@redhat.com> 0.99.0-2 Mike A. Harris <mharris@redhat.com> 0.99.0-1 - libXext 1.3.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Use ldconfig scriptlet macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Remove unnecessary defattr - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - libXext 1.3.3 - Xge: remove warning messages about missing Xge extension event translations (rhbz #1122011) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - libXext 1.3.2 - Really require libX11 1.6RC2 for _XEatDataWords - Require libX11 1.6RC2 for _XEatDataWords - Update to git snapshot to fix CVEs listed below
- CVE-2013-1982 - autoreconf for aarch64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - libXext 1.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - libXext 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - libXext 1.2.0 - rebuild to ensure F14 NVR is higher than F13 - libXext 1.1.2 - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
- libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
if the server has an older extension version than the client. - libXext 1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Un-require xorg-x11-filesystem - libXext 1.0.99.4
- fix.patch: Drop. - libXext snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - libXext 1.0.99.1 - Rebuild for pkg-config auto-provides - libXext 1.0.4 - Autorebuild for GCC 4.3 - Merge-Review #226070
- Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
- Removed BR:pkgconfig
- Removed zero-length README file - Rebuild for build id - Don't install INSTALL - Force xorg-x11-proto-devel on >= 7.1-10 (for LBX headers), � x�������������xt������� X s �yal o���������
� docs�$ ���������������� � �
� � Log-5.6.1] - Updated with the 5.6.0 source tarball.
- CONFIG_BUILDTIME_TABLE_SORT=y, CONFIG_TIME_NS=y,
- CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y, CONFIG_BPF_JIT_DEFAULT_ON=y,
- CONFIG_IA32_FEAT_CTL=y, CONFIG_X86_VMX_FEATURE_NAMES=y,
- CONFIG_MMU_GATHER_TABLE_FREE=y, CONFIG_MMU_GATHER_RCU_TABLE_FREE=y,
- CONFIG_BLK_DEV_INTEGRITY_T10=m, CONFIG_NET_SCH_FQ_PIE=m,
- CONFIG_NET_SCH_ETS=m, CONFIG_VSOCKETS_LOOPBACK=m,
- CONFIG_ETHTOOL_NETLINK=y, CONFIG_WIREGUARD=m, CONFIG_BCM84881_PHY=y,
- CONFIG_ISDN_CAPI=y, CONFIG_CAPI_TRACE=y, CONFIG_SPI_PXA2XX=m,
- CONFIG_SPI_PXA2XX_PCI=m, CONFIG_PINCTRL_LYNXPOINT=m,
- CONFIG_SENSORS_ADM1177=m, CONFIG_SENSORS_DRIVETEMP=m,
- CONFIG_SENSORS_MAX31722=m, CONFIG_SENSORS_MAX31730=m,
- CONFIG_SENSORS_MAX20730=m, CONFIG_SENSORS_XDPE122=m,
- CONFIG_DRM_AMD_DC_DCN=y, CONFIG_SND_PCSP=m,
- CONFIG_SND_HDA_PREALLOC_SIZE=0,
- CONFIG_SND_SOC_INTEL_BDW_RT5650_MACH=m, CONFIG_INTEL_IDXD=m,
- CONFIG_PLX_DMA=m, CONFIG_EXTCON=m, CONFIG_NFS_DISABLE_UDP_SUPPORT=y,
- CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9,
- CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256,
- CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y, CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y,
- CONFIG_CRYPTO_LIB_POLY1305_RSIZE=11, CONFIG_GENERIC_VDSO_TIME_NS=y and
- CONFIG_GENERIC_PTDUMP=y - Updated with the 5.5.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.13] - Updated with the 5.5.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.12] - Updated with the 5.5.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11] - Updated with the 5.5.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.10] - Updated with the 5.5.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.9] - Updated with the 5.5.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8] - Updated with the 5.5.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7] - Updated with the 5.5.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.6] - Updated with the 5.5.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.5]
- Adjustments to the PRCO lines for the kernel-ml-headers
- and kernel-ml-devel subpackages.
- [https://elrepo.org/bugs/view.php?id=991] - Updated with the 5.5.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4] - Updated with the 5.5.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.3] - Updated with the 5.5.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.2] - Updated with the 5.5.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.1] - Updated with the 5.5.0 source tarball.
- CONFIG_IRQ_MSI_IOMMU=y, CONFIG_CC_HAS_INT128=y,
- CONFIG_X86_IOPL_IOPERM=y, CONFIG_X86_UMIP=y,
- CONFIG_BLK_CGROUP_RWSTAT=y, CONFIG_MAPPING_DIRTY_HELPERS=y,
- CONFIG_TIPC_CRYPTO=y, CONFIG_FW_CACHE=y, CONFIG_NVME_HWMON=y,
- CONFIG_DP83869_PHY=m, CONFIG_PINCTRL_TIGERLAKE=m,
- CONFIG_SENSORS_LTC2947=m, CONFIG_SENSORS_LTC2947_I2C=m,
- CONFIG_SENSORS_LTC2947_SPI=m, CONFIG_SENSORS_BEL_PFE=m,
- CONFIG_SENSORS_TMP513=m, CONFIG_DRM_TTM_DMA_PAGE_POOL=y,
- CONFIG_DRM_TTM_HELPER=m, CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500,
- CONFIG_DRM_I915_PREEMPT_TIMEOUT=640,
- CONFIG_DRM_I915_STOP_TIMEOUT=100,
- CONFIG_DRM_I915_TIMESLICE_DURATION=1, CONFIG_LCD_L4F00242T03=m,
- CONFIG_LCD_LMS283GF05=m, CONFIG_LCD_LTV350QV=m, CONFIG_LCD_ILI922X=m,
- CONFIG_LCD_ILI9320=m, CONFIG_LCD_TDO24M=m, CONFIG_LCD_VGG2432A4=m,
- CONFIG_LCD_AMS369FG06=m, CONFIG_LCD_LMS501KF03=m, CONFIG_LCD_HX8357=m,
- CONFIG_LCD_OTM3225A=m, CONFIG_BACKLIGHT_GENERIC=m,
- CONFIG_BACKLIGHT_QCOM_WLED=m, CONFIG_BACKLIGHT_SAHARA=m,
- CONFIG_BACKLIGHT_ADP8860=m, CONFIG_BACKLIGHT_ADP8870=m,
- CONFIG_BACKLIGHT_LM3630A=m, CONFIG_BACKLIGHT_LM3639=m,
- CONFIG_BACKLIGHT_LV5207LP=m, CONFIG_BACKLIGHT_BD6107=m,
- CONFIG_BACKLIGHT_ARCXCNN=m, CONFIG_SND_INTEL_NHLT=y,
- CONFIG_SND_INTEL_DSP_CONFIG=m,
- CONFIG_� x������ �c������� X m E�y ��
� �L �$ ���������������� �L �L �L � rly.patch had both bindir changes and start-early; the
latter was upstreamed, so start-early is now bindir.patch.
Ideally later get this partial-bindir stuff upstream. - Drop dbus-libs requiring dbus; this was unnecessary for programs
which happened to speak the dbus protocol but don't require
the daemon.
Note that libdbus does support autolaunching dbus-daemon in
the session as an emergency fallback for legacy situations; however,
these cases were likely to have dbus installed already (via comps).
If they don't, well one turned to the wrong page in the choose your
own adventure book. - Don't link libdub against libcap-ng - Fix activation of daemons (#545267)
- Fix reload memleak (fdo #24697)
- Don't forget about pending activations on reload (fdo #24350)
- Fix reload race (fdo #21597) - Drop capabilities (#518541) - Add missing diagrams to the docs (#527650) - Fix timeout accounting - rebuilt with new audit - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Remove conflicting -U option to useradd - Explicitly add a dbus group id, fixes dbus files getting a
random group id in cases where the RPM install order varies.
Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183 - Upstream 1.2.16
- Remove inotify patch, now upstreamed
- Remove timeout patch, obsolete with upstream change to infinite
timeout maximum by default - Don't leak inotify fd (#505338) - CVE-2009-1189
* Update to 1.2.14 - Switch to non-permissive branch:
http://fedoraproject.org/wiki/Features/DBusPolicy - Mark -doc content as %doc - Make -doc noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - New upstream - New upstream - Revert to upstream 1.2.4, add epoch - And drop it again, needs more work - Add back working syslog patch - Remove accidentally added syslog patch - New upstream 1.2.8
Allows signals by default. - New upstream 1.2.6 - Tweak descriptions - New upstream 1.2.4 - Avoid using noreplace for files that aren't really config files - New upstream 1.2.2
- Drop patches that were upstreamed - Own /usr/share/dbus-1/interfaces - Add a patch from upstream git that adds a method
for changing the activation environment on the session bus - Patch to increase max method timeout - Patches for fd.o bugs 15635, 15571, 15588, 15570 - drop last patch after discussion on dbus list - ensure uuid is created at post time - update to latest upstream
- major version change is really a maint release for 1.1.20
please read the NEWS file in the source for more information - Update to latest upstream release. Includes fix for CVE-2008-0595.
- Drop some patches that went upstream already - Really rebuild against new libcap - rebuild against new libcap - Fix a dbus-launch problem (#430412) - Start message bus from xinitrc.d instead of hard coding it
at the end of Xsession - Make it build against the latest gcc/glibc - new upstream version
- fixes inotify patch which was consuming 100% cpu and memory - new upstream version which obsoletes a number of our patches
- doc section added for the devhelp docs - clean up spec file as per the merge review (#225676) - have -libs obsolete older versions of the main package so that yum upgrades work - Make the daemon a PIE executable (#210039) - fix daemon abort when SELinux denies passing on a message (#283231) - Reverse we_were_root check to setpcap if we were root. Also only init
audit if we were root. So error dbus message will not show up when policy
reload happens. dbus -session will no longer try to send audit message,
only system will. - Make dbus require dbus-libs (#261721) - Add libs to a libs subpackage
- Update license tag - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
the correct mode and permissions.
- Own the directory /usr/share/dbus-1/system-services
- Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
- Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
system bus activation helper fails - Update to 1.1.2 - Add LSB header to init script (#246902) - inc� x�������������XS������� X ! lo{�yil s���������� � iadb�$ { ���������������� � � � � ot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root ro� x��������������B������� X " az�y64. pt 0 � at �$ ���������������� � � 2 � d interface
- Allow load_policy_t domain to read/write to systemd sockets BZ(1582812)
- Add new interface init_prog_run_bpf()
- Allow unconfined and sysadm users to use bpftool BZ(1591440)
- Label /run/cockpit/motd as etc_t BZ(1584167)
- Allow systemd_machined_t domain to sendto syslogd_t over unix dgram sockets
- Add interface userdom_dontaudit_mmap_user_home_content_files()
- Allow systemd to listen bluetooth sockets BZ(1592223)
- Allow systemd to remove user_home_t files BZ(1418463)
- Allow xdm_t domain to mmap and read cert_t files BZ(1553761)
- Allow nsswitch_domain to mmap passwd_file_t files BZ(1518655)
- Allow systemd to delete user temp files BZ(1595189)
- Allow systemd to mounton core kernel interface
- Add dac_override capability to ipsec_t domain BZ(1589534)
- Allow systemd domain to mmap lvm config files BZ(1594584)
- Allow systemd to write systemd_logind_inhibit_var_run_t fifo files
- Allow systemd_modules_load_t to access unabeled infiniband pkeys - Add ibacm policy
- Label /usr/sbin/rhn_check-[0-9]+.[0-9]+ as rpm_exec_t
- Allow kdumpgui_t domain to allow execute and mmap all binaries labeled as kdumpgui_tmp_t
- Allow rpm to check if SELinux will check original protection mode or modified protection mode (read-implies-exec) for mmap/mprotect. Allow rpm to reload systemd services
- Allow crond_t domain to create netlink selinux sockets and dac_override cap.
- Allow radiusd_t domain to have dac_override capability
- Allow amanda_t domain to have setgid capability
- Allow psad domain to setrlimit. Allow psad domain to stream connect to dbus Allow psad domain to exec journalctl_exec_t binary
- Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
- Allow abrt_t domain to write to rhsmcertd pid files
- Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
- Add vhostmd_t domain to read/write to svirt images
- Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
- Allow sssd_t and slpad_t domains to mmap generic certs
- Allow chronyc_t domain use inherited user ttys
- Allow stapserver_t domain to mmap own tmp files
- Update nscd_dontaudit_write_sock_file() to dontaudit also stream connect to nscd_t domain
- Merge pull request #60 from vmojzis/rawhide
- Allow tangd_t domain stream connect to sssd
- Allow oddjob_t domain to chat with systemd via dbus
- Allow freeipmi domains to mmap sysfs files
- Fix typo in logwatch interface file
- Allow spamd_t to manage logwatch_cache_t files/dirs
- Allow dnsmasw_t domain to create own tmp files and manage mnt files
- Allow fail2ban_client_t to inherit rlimit information from parent process
- Allow nscd_t to read kernel sysctls
- Label /var/log/conman.d as conman_log_t
- Add dac_override capability to tor_t domain
- Allow certmonger_t to readwrite to user_tmp_t dirs
- Allow abrt_upload_watch_t domain to read general certs
- Allow chornyd_t read phc2sys_t shared memory
- Add several allow rules for pesign policy:
- Add setgid and setuid capabilities to mysqlfd_safe_t domain
- Add tomcat_can_network_connect_db boolean
- Update virt_use_sanlock() boolean to read sanlock state
- Add sanlock_read_state() interface
- Allow zoneminder_t to getattr of fs_t
- Allow rhsmcertd_t domain to send signull to postgresql_t domain
- Add log file type to collectd and allow corresponding access
- Allow policykit_t domain to dbus chat with dhcpc_t
- Adding new boolean keepalived_connect_any()
- Allow amanda to create own amanda_tmpfs_t files
- Allow gdomap_t domain to connect to qdomap_port_t
- /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
- Allow ntop_t domain to create/map various sockets/files.
- Enable the dictd to communicate via D-bus.
- Allow inetd_child process to chat via dbus with abrt
- Allow zabbix_agent_t domain to connect to redis_port_t
- Allow rhsmcertd_t domain to read xenfs_t files
- Allow zabbix_agent_t to run zabbix scripts
- Fix openvswith SELinux module
- Fix wrong p� x������R 82������� X p -�y 0c �� �! �$ q ���������������� �! �! �! � pec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix memory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service re� x��������������!������� X $ h [�yconf���������k �� 3.1
�$ l ���������������� �� �� � � edhat.com> 3.6.4-1 Dan Walsh <dwalsh@redhat.com> 3.6.3-13 Dan Walsh <dwalsh@redhat.com> 3.6.3-12 Dan Walsh <dwalsh@redhat.com> 3.6.3-11 Dan Walsh <dwalsh@redhat.com> 3.6.3-10 Dan Walsh <dwalsh@redhat.com> 3.6.3-9 Dan Walsh <dwalsh@redhat.com> 3.6.3-8 Dan Walsh <dwalsh@redhat.com> 3.6.3-7 Dan Walsh <dwalsh@redhat.com> 3.6.3-6 Dan Walsh <dwalsh@redhat.com> 3.6.3-3 Dan Walsh <dwalsh@redhat.com> 3.6.3-2 Dan Walsh <dwalsh@redhat.com> 3.6.3-1 Dan Walsh <dwalsh@redhat.com> 3.6.2-5 Dan Walsh <dwalsh@redhat.com> 3.6.2-4 Dan Walsh <dwalsh@redhat.com> 3.6.2-3 Dan Walsh <dwalsh@redhat.com> 3.6.2-2 Dan Walsh <dwalsh@redhat.com> 3.6.2-1 Dan Walsh <dwalsh@redhat.com> 3.6.1-15 Dan Walsh <dwalsh@redhat.com> 3.6.1-14 Dan Walsh <dwalsh@redhat.com> 3.6.1-13 Dan Walsh <dwalsh@redhat.com> 3.6.1-12 Dan Walsh <dwalsh@redhat.com> 3.6.1-11 Dan Walsh <dwalsh@redhat.com> 3.6.1-10 Dan Walsh <dwalsh@redhat.com> 3.6.1-9 Dan Walsh <dwalsh@redhat.com> 3.6.1-8 Dan Walsh <dwalsh@redhat.com> 3.6.1-7 Dan Walsh <dwalsh@redhat.com> 3.6.1-4 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 3.6.1-2 Dan Walsh <dwalsh@redhat.com> 3.5.13-19 Dan Walsh <dwalsh@redhat.com> 3.5.13-18 Dan Walsh <dwalsh@redhat.com> 3.5.13-17 Dan Walsh <dwalsh@redhat.com> 3.5.13-16 Dan Walsh <dwalsh@redhat.com> 3.5.13-15 Dan Walsh <dwalsh@redhat.com> 3.5.13-14 Dan Walsh <dwalsh@redhat.com> 3.5.13-13 Dan Walsh <dwalsh@redhat.com> 3.5.13-12 Dan Walsh <dwalsh@redhat.com> 3.5.13-11 Dan Walsh <dwalsh@redhat.com> 3.5.13-9 Dan Walsh <dwalsh@redhat.com> 3.5.13-8 Dan Walsh <dwalsh@redhat.com> 3.5.13-7 Dan Walsh <dwalsh@redhat.com> 3.5.13-6 Dan Walsh <dwalsh@redhat.com> 3.5.13-5 Dan Walsh <dwalsh@redhat.com> 3.5.13-4 Dan Walsh <dwalsh@redhat.com> 3.5.13-3 Dan Walsh <dwalsh@redhat.com> 3.5.13-2 Dan Walsh <dwalsh@redhat.com> 3.5.13-1 Dan Walsh <dwalsh@redhat.com> 3.5.12-3 Dan Walsh <dwalsh@redhat.com> 3.5.12-2 Dan Walsh <dwalsh@redhat.com> 3.5.12-1 Dan Walsh <dwalsh@redhat.com> 3.5.11-1 Dan Walsh <dwalsh@redhat.com> 3.5.10-3 Dan Walsh <dwalsh@redhat.com> 3.5.10-2 Dan Walsh <dwalsh@redhat.com> 3.5.10-1 Dan Walsh <dwalsh@redhat.com> 3.5.9-4 Dan Walsh <dwalsh@redhat.com> 3.5.9-3 Dan Walsh <dwalsh@redhat.com> 3.5.9-2 Dan Walsh <dwalsh@redhat.com> 3.5.9-1 Dan Walsh <dwalsh@redhat.com> 3.5.8-7 Dan Walsh <dwalsh@redhat.com> 3.5.8-6 Dan Walsh <dwalsh@redhat.com> 3.5.8-5 Dan Walsh <dwalsh@redhat.com> 3.5.8-4 Dan Walsh <dwalsh@redhat.com> 3.5.8-3 Dan Walsh <dwalsh@redhat.com> 3.5.8-1 Dan Walsh <dwalsh@redhat.com> 3.5.7-2 Dan Walsh <dwalsh@redhat.com> 3.5.7-1 Dan Walsh <dwalsh@redhat.com> 3.5.6-2 Dan Walsh <dwalsh@redhat.com> 3.5.6-1 Dan Walsh <dwalsh@redhat.com> 3.5.5-4 Dan Walsh <dwalsh@redhat.com> 3.5.5-3 Dan Walsh <dwalsh@redhat.com> 3.5.5-2 Dan Walsh <dwalsh@redhat.com> 3.5.4-2 Dan Walsh <dwalsh@redhat.com> 3.5.4-1 Dan Walsh <dwalsh@redhat.com> 3.5.3-1 Dan Walsh <dwalsh@redhat.com> 3.5.2-2 Dan Walsh <dwalsh@redhat.com> 3.5.1-5 Dan Walsh <dwalsh@redhat.com> 3.5.1-4 Dan Walsh <dwalsh@redhat.com> 3.5.1-3 Dan Walsh <dwalsh@redhat.com> 3.5.1-2 Dan Walsh <dwalsh@redhat.com> 3.5.1-1 Dan Walsh <dwalsh@redhat.com> 3.5.0-1 Dan Walsh <dwalsh@redhat.com> 3.4.2-14 Dan Walsh <dwalsh@redhat.com> 3.4.2-13 Dan Walsh <dwalsh@redhat.com> 3.4.2-12 Dan Walsh <dwalsh@redhat.com> 3.4.2-11 Dan Walsh <dwalsh@redhat.com> 3.4.2-10 Dan Walsh <dwalsh@redhat.com> 3.4.2-9 Dan Walsh <dwalsh@redhat.com> 3.4.2-8 Dan Walsh <dwalsh@redhat.com> 3.4.2-7 Dan Walsh <dwalsh@redhat.com> 3.4.2-6 Dan Walsh <dwalsh@redhat.com> 3.4.2-5 Dan Walsh <dwalsh@redhat.com> 3.4.2-4 Dan Walsh <dwalsh@redhat.com> 3.4.2-3 Dan Walsh <dwalsh@redhat.com> 3.4.2-2 Dan Walsh <dwalsh@redhat.com> 3.4.2-1 Dan Walsh <dwalsh@redhat.com> 3.4.1-5 Dan Walsh <dwalsh@redhat.com> 3.4.1-3 Dan Walsh <dwalsh@redhat.com> 3.4.1-2 Dan Walsh <dwalsh@redhat.com> 3.4.1-1 Dan Walsh <dwalsh@redhat.com> 3.3.1-48 Dan Walsh <dwalsh@redhat.com> 3.3.1-47 Dan Walsh <dwalsh@redhat.com> 3.3.1-46 Dan Walsh <dwalsh@redhat.com> 3.3.1-45 Dan Walsh <dwalsh@redhat.com> 3.3.1-44 Dan Walsh <dwalsh@redhat.com> 3.3.1-43 Dan Walsh <dwalsh@redhat.com> 3.3.1-42 Dan Walsh <dwalsh@re� x�������������X������� X % at-�yain @3 �� s Al�$ � ���������������� � <carlos@redhat.com> - 2.28-113 Carlos O'Donell <carlos@redhat.com> - 2.28-112 Carlos O'Donell <carlos@redhat.com> - 2.28-111 Carlos O'Donell <carlos@redhat.com> - 2.28-110 Carlos O'Donell <carlos@redhat.com> - 2.28-109 Carlos O'Donell <carlos@redhat.com> - 2.28-108 Carlos O'Donell <carlos@redhat.com> - 2.28-107 Patsy Griffin <patsy@redhat.com> - 2.28-106 Patsy Griffin <patsy@redhat.com> - 2.28-105 DJ Delorie <dj@redhat.com> - 2.28-104 DJ Delorie <dj@redhat.com> - 2.28-103 DJ Delorie <dj@redhat.com> - 2.28-102 Florian Weimer <fweimer@redhat.com> - 2.28-101 Florian Weimer <fweimer@redhat.com> - 2.28-100 Florian Weimer <fweimer@redhat.com> - 2.28-99 Florian Weimer <fweimer@redhat.com> - 2.28-98 Florian Weimer <fweimer@redhat.com> - 2.28-97 Florian Weimer <fweimer@redhat.com> - 2.28-96 DJ Delorie <dj@redhat.com> - 2.28-95 DJ Delorie <dj@redhat.com> - 2.28-94 Carlos O'Donell <carlos@redhat.com> - 2.28-93 Carlos O'Donell <carlos@redhat.com> - 2.28-92 Carlos O'Donell <carlos@redhat.com> - 2.28-91 Florian Weimer <fweimer@redhat.com> - 2.28-90 Florian Weimer <fweimer@redhat.com> - 2.28-89 Florian Weimer <fweimer@redhat.com> - 2.28-88 Florian Weimer <fweimer@redhat.com> - 2.28-87 Florian Weimer <fweimer@redhat.com> - 2.28-86 DJ Delorie <dj@redhat.com> - 2.28-85 DJ Delorie <dj@redhat.com> - 2.28-84 DJ Delorie <dj@redhat.com> - 2.28-83 DJ Delorie <dj@redhat.com> - 2.28-82 Arjun Shankar <arjun@redhat.com> - 2.28-81 Arjun Shankar <arjun@redhat.com> - 2.28-80 Arjun Shankar <arjun@redhat.com> - 2.28-79 Arjun Shankar <arjun@redhat.com> - 2.28-78 Patsy Griffin <patsy@redhat.com> - 2.28-77 Patsy Griffin <patsy@redhat.com> - 2.28-76 Patsy Griffin <patsy@redhat.com> - 2.28-75 Patsy Griffin <patsy@redhat.com> - 2.28-74 Patsy Griffin <patsy@redhat.com> - 2.28-73 Carlos O'Donell <carlos@redhat.com> - 2.28-72 Carlos O'Donell <carlos@redhat.com> - 2.28-71 Carlos O'Donell <carlos@redhat.com> - 2.28-70 Carlos O'Donell <carlos@redhat.com> - 2.28-69 Carlos O'Donell <carlos@redhat.com> - 2.28-68 Carlos O'Donell <carlos@redhat.com> - 2.28-67 Florian Weimer <fweimer@redhat.com> - 2.28-66 Florian Weimer <fweimer@redhat.com> - 2.28-65 DJ Delorie <dj@redhat.com> - 2.28-64 Patsy Griffin Franklin <patsy@redhat.com> - 2.28-63 Carlos O'Donell <carlos@redhat.com> - 2.28-62 Florian Weimer <fweimer@redhat.com> - 2.28-61 Carlos O'Donell <carlos@redhat.com> - 2.28-60 DJ Delorie <dj@redhat.com> - 2.28-59 DJ Delorie <dj@redhat.com) - 2.28-58 Arjun Shankar <arjun@redhat.com> - 2.28-57 Patsy Griffin Franklin <patsy@redhat.com> - 2.28-56 Florian Weimer <fweimer@redhat.com> - 2.28-55 Patsy Griffin Franklin <patsy@redhat.com> - 2.28-54 DJ Delorie <dj@redhat.com> - 2.28-53 Arjun Shankar <arjun@redhat.com> - 2.28-52 Florian Weimer <fweimer@redhat.com> - 2.28-51 Carlos O'Donell <carlos@redhat.com> - 2.28-50 Arjun Shankar <arjun@redhat.com> - 2.28-49 Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48 DJ Delorie <dj@redhat.com> - 2.28-47 Florian Weimer <fweimer@redhat.com> - 2.28-46 Florian Weimer <fweimer@redhat.com> - 2.28-45 Florian Weimer <fweimer@redhat.com> - 2.28-44 Florian Weimer <fweimer@redhat.com> - 2.28-43 Florian Weimer <fweimer@redhat.com> - 2.28-42 Florian Weimer <fweimer@redhat.com> - 2.28-41 Florian Weimer <fweimer@redhat.com> - 2.28-40 Florian Weimer <fweimer@redhat.com> - 2.28-39 Carlos O'Donell <carlos@redhat.com> - 2.28-38 Carlos O'Donell <carlos@redhat.com> - 2.28-37 Florian Weimer <fweimer@redhat.com> - 2.28-36 Florian Weimer <fweimer@redhat.com> - 2.28-35 Florian Weimer <fweimer@redhat.com> - 2.28-34 Florian Weimer <fweimer@redhat.com> - 2.28-33 Florian Weimer <fweimer@redhat.com> - 2.28-32 Florian Weimer <fweimer@redhat.com> - 2.28-31 Florian Weimer <fweimer@redhat.com> - 2.28-30 Florian Weimer <fweimer@redhat.com> - 2.28-29 Florian Weimer <fweimer@redhat.com> - 2.28-28 Florian Weimer <fweimer@redhat.com> - 2.28-27 Florian Weimer <fweimer@redhat.com> - 2.28-26 Florian Weimer <fweimer@redhat.com> - 2.28-25 Florian Weimer <fweimer@redhat.com> - 2.28-24 Florian Weimer <fweimer@redhat.com> - 2.28-23 Florian Weimer <fweimer@redha� x�������������� ������� X & el��y/pub�2 bG hang�$ r ���������������� bG aG cG � - update to 7.3.0alpha1
- switch from pcre to pcre2 - update to 7.2.7RC1 - Update to 7.2.6 - http://www.php.net/releases/7_2_6.php - rebuild against EL 7.5 - update to 7.2.6RC1 - Update to 7.2.5 - http://www.php.net/releases/7_2_5.php - update to 7.2.5RC1 - add upstream patch for oniguruma 6.8.1, FTBFS #1562583 - Update to 7.2.4 - http://www.php.net/releases/7_2_4.php
- FPM: update default pool configuration for process.dumpable - add file trigger to restart the php-fpm service
when new pool or new extension installed (F27+) - update to 7.2.4RC1 - devel: drop dependency on devtoolset - Update to 7.2.3 - http://www.php.net/releases/7_2_3.php
- FPM: revert pid file removal
- improve devel dependencies - rebuild for new tag and drop patch merged upstream
- drop ldconfig scriptlets on F28 - update to 7.2.3RC1
- adapt systzdata, fixheader and ldap_r patches
- apply upstream patch for date ext - Update to 7.2.2 - http://www.php.net/releases/7_2_2.php - update to 7.2.2RC1
- define SOURCE_DATE_EPOCH for reproducible build - Update to 7.2.1 - http://www.php.net/releases/7_2_1.php - add upstream patch for https://bugs.php.net/75579 - update to 7.2.1RC1 - update to 7.2.0 GA - update to 7.2.0RC6 - update to 7.2.0RC5 - enable argon2 password hash - update to 7.2.0RC4
- oci8 version is now 2.1.8 - dont obsolete php72-php-pecl-libsodium - update to 7.2.0RC3 - RC3 test build
- F27: php now requires php-fpm and start it with httpd / nginx - update builder from RHEL 7.3 to RHEL 7.4 - update to 7.2.0RC2 - add patch for EL-6, fix undefined symbol: sqlite3_errstr - update to 7.2.0RC1 - test build from git snapshot
- refresh configuration files, sync with upstream, drop .so suffix - test build from git snapshot - test build from git snapshot
- adapt tzdata patch for timelib 2017.05beta7
- disable httpd MPM check - update to 7.2.0beta3 - add patch for EL-6, fix undefined symbol: sqlite3_errstr
- revert use of sqlite3_close_v2 on EL-6 - update to 7.2.0beta2
- oci8 version is now 2.1.7 - update to 7.2.0beta1
- oci8 version is now 2.1.6
- bump apiver and zendver to 20170718 - test build
- add sodium extension in new sub-package - update to 7.2.0alpha3 - update to 7.2.0alpha2
- oci8 version is now 2.1.5
- use oracle instant client version 12.2 - update to 7.2.0alpha1 - new snapshot
- use system oniguruma (F26) - new snapshot - test build for release process test, 7.2.0alpha0
- dba: add --with-lmdb build option - new snapshot - new snapshot, May the 4th be with you
- enable PHP execution of .phar files, see #1117140 - refresh - update to 7.2.0-dev
- drop mcrypt subpackage (removed upstream) - Update to 7.1.4 - http://www.php.net/releases/7_1_4.php - Update to 7.1.4RC1 - Update to 7.1.3 - http://www.php.net/releases/7_1_3.php - fix interbase build on F26 - Update to 7.1.3RC1 - Update to 7.1.2 - http://www.php.net/releases/7_1_2.php - Update to 7.1.2RC1 (new sources) - Update to 7.1.2RC1 - EL-7: add patch for https://bugs.php.net/73956
- switch back to gcc 6.2 - EL-7: rebuild using gcc 4.8 instead of 6.2
because of https://bugzilla.redhat.com/1414348 - Update to 7.1.1 - http://www.php.net/releases/7_1_1.php - Update to 7.1.1RC1 - test optimized build using GCC 6.2 - Update to 7.1.0 - http://www.php.net/releases/7_1_0.php
- use bundled pcre library 8.38 on EL-7
- disable pcre.jit everywhere as it raise AVC #1398474
- sync provided configuration with upstream production defaults - Update to 7.1.0RC6 - Update to 7.1.0RC5 - Update to 7.1.0RC4
- update tzdata patch to v14, improve check for valid tz file
- oci8 version is now 2.1.3 - rebuild - Update to 7.1.0RC3 - Update to 7.1.0RC2
- API version is now 20160303 - Update to 7.1.0RC1
- oci8 version is now 2.1.2 - Update to 7.1.0beta2 - Update to 7.1.0beta1 - Update to 7.1.0alpha3 - own tests/doc directories for pecl packages (f24) - Update to 7.1.0alpha2 (rebuild) - Update to 7.1.0alpha2 - Update to 7.1.0alpha1 - Update to 7.0.7 - http://www.php.net/releases/7_0_7.php - Update to 7.0.7RC1
- oci8 version is now 2.1.1 - Update to 7.0.6 - http://www.php.net/releases/7_0_6.php
- r� x�������������H����� X ' t ��yfuse�� ��������K - nr�$ u ���������������� �K �K �K � slav Trmač <mitr@redhat.com> - 0.115-1 Ray Strode <rstrode@redhat.com> - 0.114-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-16 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-15 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-14 Richard Hughes <rhughes@redhat.com> - 0.113-13 Miloslav Trmač <mitr@redhat.com> - 0.113-12 Miloslav Trmač <mitr@redhat.com> - 0.113-11 Peter Robinson <pbrobinson@fedoraproject.org> 0.113-10 Rex Dieter <rdieter@fedoraproject.org> - 0.113-9 Peter Robinson <pbrobinson@fedoraproject.org> 0.113-8 Miloslav Trmač <mitr@redhat.com> - 0.113-7 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-6 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-5 Miloslav Trmač <mitr@redhat.com> - 0.113-4 Rex Dieter <rdieter@fedoraproject.org> 0.113-3 Miloslav Trmač <mitr@redhat.com> - 0.113-2 Miloslav Trmač <mitr@redhat.com> - 0.113-1 Miloslav Trmač <mitr@redhat.com> - 0.112-11 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-10 Rex Dieter <rdieter@fedoraproject.org> - 0.112-9 Colin Walters <walters@redhat.com> - 0.112-8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-7 Kalev Lember <kalevlember@gmail.com> - 0.112-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-5 Kay Sievers <kay@redhat.com> - 0.112-4 Miloslav Trmač <mitr@redhat.com> - 0.112-3 Miloslav Trmač <mitr@redhat.com> - 0.112-2 Miloslav Trmač <mitr@redhat.com> - 0.112-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.111-3 Tomas Bzatek <tbzatek@redhat.com> - 0.111-2 Miloslav Trmač <mitr@redhat.com> - 0.111-1 Miloslav Trmač <mitr@redhat.com> - 0.110-4 Miloslav Trmač <mitr@redhat.com> - 0.110-4 Miloslav Trmač <mitr@redhat.com> - 0.110-3 Miloslav Trmač <mitr@redhat.com> - 0.110-2 David Zeuthen <davidz@redhat.com> - 0.110-1.el8 Matthias Clasen <mclasen@redhat.com> - 0.109-2.el8 David Zeuthen <davidz@redhat.com> 0.109-1.el8 David Zeuthen <davidz@redhat.com> 0.108-3.el8 David Zeuthen <davidz@redhat.com> 0.108-2.el8 David Zeuthen <davidz@redhat.com> 0.108-1.el8 Adam Jackson <ajax@redhat.com> 0.107-4 David Zeuthen <davidz@redhat.com> 0.107-3.el8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.107-2 David Zeuthen <davidz@redhat.com> 0.107-1.el8 David Zeuthen <davidz@redhat.com> 0.106-2.el8 David Zeuthen <davidz@redhat.com> 0.106-1.el8 David Zeuthen <davidz@redhat.com> 0.105-1.el8 David Zeuthen <davidz@redhat.com> 0.104-6.el8 Matthias Clasen <mclasen@redhat.com> - 0.104-5.el8 David Zeuthen <davidz@redhat.com> 0.104-4.el8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.104-3 David Zeuthen <davidz@redhat.com> 0.104-2.el8 David Zeuthen <davidz@redhat.com> 0.104-1.el8 David Zeuthen <davidz@redhat.com> 0.103-1.el8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.102-3 David Zeuthen <davidz@redhat.com> 0.102-2.el8 David Zeuthen <davidz@redhat.com> 0.102-1 Bastien Nocera <bnocera@redhat.com> 0.101-7 Matthias Clasen <mclasen@redhat.com> - 0.101-6 David Zeuthen <davidz@redhat.com> - 0.101-5 Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.101-4 David Zeuthen <davidz@redhat.com> - 0.101-3 David Zeuthen <davidz@redhat.com> - 0.101-2 David Zeuthen <davidz@redhat.com> - 0.101-1 David Zeuthen <davidz@redhat.com> - 0.100-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.98-7 Matthias Clasen <mclasen@redhat.com> - 0.98-6 Matthias Clasen <mclasen@redhat.com> - 0.98-5 David Zeuthen <davidz@redhat.com> - 0.98-4 David Zeuthen <davidz@redhat.com> - 0.98-2 Matthias Clasen <mclasen@redhat.com> - 0.98-1 Matthias Clasen <mclasen@redhat.com> - 0.97-5 Matthias Clasen <mclasen@redhat.com> - 0.97-4 David Zeuthen <davidz@redhat.com> - 0.97-3 David Zeuthen <davidz@redhat.com> - 0.97-2 David Zeuthen <davidz@redhat.com> - 0.97-1 David Zeuthen <davidz@redhat.com> - 0.96-1 David Zeuthen <davidz@redhat.com> - 0.95-2 David Zeuthen <davidz@redhat.com> - 0.95-1 Matthias Clasen <mclasen@redhat.com> - 0.95-0.git20090913.3 David Zeuthen <davidz@redhat.com> - 0.95-0.� x��������������������� X X �y � �3 �X �$ u ���������������� �X �X �X � (httpd from CentOS8 provides
its own uwsgi module now)
- Change Requires on uwsgi-plugin-python to uwsgi-plugin-python3 - Change Requires from PyYAML to python3-pyyaml - First stab at building piglet under a python3 environment - Remove uneeded items from MAP_DECODE in
src/lib/piglet/g2/actions.py (PRB0052655) - Fix POST on /cron/mail endpoint - Bugfix on createAlias call - Include GETCLIENTPATH call - CHG0045451 INC0283867 - Bugfix on user password change API - Better logging support - Include piglet log directory creation - G2 endpoint routes support - Remove dependency of Aka Package - Depends on Aka package
- Small changes on piglet log for better information
- Change from CAS authentication to a hmac based on - BugFix: problems with request object not imported
- Change from hosting name module to shared - Remove cgi-bin from route - Bugfix: Syntax problems with syslog calls
- Change bottle to be inside piglet directory
- Changes on setup.py to get the other modules - BugFix: problems loading bottle module - Moving piglet app to bin directory - Initial release /bin/sh /bin/sh pigletbuild 1770748793
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p� x�������������(������� X ) , ��yrpre��������������aG x86-�$ q ���������������� aG `G bG � to 7.4.3 - http://www.php.net/releases/7_4_3.php - update to 7.4.3RC1 - make sodium mandatory on EL-7, to avoid user confusion
https://github.com/remicollet/remirepo/issues/137 - Update to 7.4.2 - http://www.php.net/releases/7_4_2.php - update to 7.4.2RC1 - Update to 7.4.1 - http://www.php.net/releases/7_4_1.php - update to 7.4.1RC1
- use oracle client library version 19.5 - update to 7.4.0 GA - update to 7.4.0RC6 - update to 7.4.0RC5
- set opcache.enable_cli in provided default configuration - add /usr/share/php/preload as default ffi.preload configuration - allow wildcards in ffi.preload - fix preload, add more upstream patches for #78713 #78716 - fix preload, add upstream patch for #78512 - update to 7.4.0RC4 - test build with more upstream patches - fix librt issue on F31 using upstream patch - ensure all shared extensions can be loaded - fix broken intl extension on EL-7 - update to 7.4.0RC3 - fix broken gmp extension https://bugs.php.net/78574 - update to 7.4.0RC2 (new tag) - update to 7.4.0RC2
- add tarball signature check
- reduce to 4 concurrent test workers - update to 7.4.0RC1
- bump API number to 20190902 - update to 7.4.0beta4 - update to 7.4.0beta2 - update to 7.4.0beta1 (new tag) - update to 7.4.0beta1
- main package now recommends commonly used extensions and SAPI
(json, mbstring, opcache, pdo, xml)
- fix gd build options and dependencies
- refresh provided configuration from upstream production values - drop recode extension, moved to php-pecl-recode
- add upstream patch for argon2 password - update to 7.4.0alpha3
- drop argon2 dependency using libsodium implementation - update to 7.4.0alpha2 - use oracle client library version 19.3 - add 3 upstream patches - update to 7.4.0alpha1 - new snapshot
- use pkgconfig dependencies for libxslt, libexslt, libsasl2, libargon2 - new snapshot - new snapshot
- bump ABI version
- add patch for old unixODBC from
https://github.com/php/php-src/pull/4203 - new snapshot - new snapshot with configuration updated from upstream - new snapshot for enchant and sodium fix - new snapshot for sqlite3 fix - update to 7.4.0-dev
- drop interbase extension and sub-package
- move pdo_firebird extension in pdo-firebird sub-package
- drop wddx extension
- add ffi extension in new ffi sub-package
- use pkgconfig dependencies for ext using PHP_CHECK_MODULE - update to 7.3.6RC1 (new tag) - update to 7.3.6RC1 - test build for https://bugs.php.net/77653
patch from https://github.com/php/php-src/pull/4007 - Update to 7.3.5 - http://www.php.net/releases/7_3_5.php - update to 7.3.5RC1 - build with system oniguruma5 - test build for https://bugs.php.net/77653
patch from https://github.com/php/php-src/pull/4007 - Update to 7.3.4 - http://www.php.net/releases/7_3_4.php - update to 7.3.4RC1 new tag
- add upstream patches for failed tests - update to 7.3.4RC1 - Update to 7.3.3 - http://www.php.net/releases/7_3_3.php
- add upstream patch for OpenSSL 1.1.1b - php-devel: drop dependency on libicu-devel - update to 7.3.3RC1
- adapt systzdata patch (v18) - pdo_oci: backport PDOStatement::getColumnMeta from 7.4 - rebuild using libicu62 - Update to 7.3.2 - http://www.php.net/releases/7_3_2.php - update to 7.3.2RC1
- update system tzdata patch for timelib 2018.01 - cleanup for EL-8 - test build for https://bugs.php.net/77430 - Update to 7.3.1 - http://www.php.net/releases/7_3_1.php - update to 7.3.1RC1
- oci8 version is now 2.2.0 - update to 7.3.0 GA
- update FPM configuration from upstream - update to 7.3.0RC6 - update to 7.3.0RC5 - test build for https://github.com/php/php-src/pull/3652 - update to 7.3.0RC4 - update to 7.3.0RC3 - update to 7.3.0RC2
- use oracle client library version 18.3 - update to 7.3.0RC1
- with oniguruma 6.9.0 - add upstream patch for openssl failing test - add upstream patch for F29 - update to 7.3.0beta3 - update to 7.3.0beta2
- bump API numbers - update to 7.3.0alpha4 - update to 7.3.0alpha3 - update to 7.3.0alpha2 new sources - update to 7.3.0alpha2
- bump php(zend-abi) and php(api) to 20180606
- revert 5dd1ef90caec3021e6ce55c8554e695edf641eaf � x������� ��������� X ��y ��������(�������� �$ H ���������������� �� �� �� � kill() interface
- Add rgmanager_search_lib() interface
- Allow wdmd to getattr on all filesystems. Back ported from RHEL6 - Allow realmd to create tmp files
- FIx ircssi_home_t type to irssi_home_t
- Allow adcli running as realmd_t to connect to ldap port
- Allow NetworkManager to transition to ipsec_t, for running strongswan
- Make openshift_initrc_t an lxc_domain
- Allow gssd to manage user_tmp_t files
- Fix handling of irclogs in users homedir
- Fix labeling for drupal an wp-content in subdirs of /var/www/html
- Allow abrt to read utmp_t file
- Fix openshift policy to transition lnk_file, sock-file an fifo_file when created in a tmpfs_t, needs back port to RHEL6
- fix labeling for (oo|rhc)-restorer-wrapper.sh
- firewalld needs to be able to write to network sysctls
- Fix mozilla_plugin_dontaudit_rw_sem() interface
- Dontaudit generic ipc read/write to a mozilla_plugin for sandbox_x domains
- Add mozilla_plugin_dontaudit_rw_sem() interface
- Allow svirt_lxc_t to transition to openshift domains
- Allow condor domains block_suspend and dac_override caps
- Allow condor_master to read passd
- Allow condor_master to read system state
- Allow NetworkManager to transition to ipsec_t, for running strongswan
- Lots of access required by lvm_t to created encrypted usb device
- Allow xdm_t to dbus communicate with systemd_localed_t
- Label strongswan content as ipsec_exec_mgmt_t for now
- Allow users to dbus chat with systemd_localed
- Fix handling of .xsession-errors in xserver.if, so kde will work
- Might be a bug but we are seeing avc's about people status on init_t:service
- Make sure we label content under /var/run/lock as <<none>>
- Allow daemon and systemprocesses to search init_var_run_t directory
- Add boolean to allow xdm to write xauth data to the home directory
- Allow mount to write keys for the unconfined domain
- Add unconfined_write_keys() interface - Add labeling for /usr/share/pki
- Allow programs that read var_run_t symlinks also read var_t symlinks
- Add additional ports as mongod_port_t for 27018, 27019, 28017, 28018 and 28019 ports
- Fix labeling for /etc/dhcp directory
- add missing systemd_stub_unit_file() interface
- Add files_stub_var() interface
- Add lables for cert_t directories
- Make localectl set-x11-keymap working at all
- Allow abrt to manage mock build environments to catch build problems.
- Allow virt_domains to setsched for running gdb on itself
- Allow thumb_t to execute user home content
- Allow pulseaudio running as mozilla_plugin_t to read /run/systemd/users/1000
- Allow certwatch to execut /usr/bin/httpd
- Allow cgred to send signal perms to itself, needs back port to RHEL6
- Allow openshift_cron_t to look at quota
- Allow cups_t to read inhered tmpfs_t from the kernel
- Allow yppasswdd to use NIS
- Tuned wants sys_rawio capability
- Add ftpd_use_fusefs boolean
- Allow dirsrvadmin_t to signal itself - Allow localectl to read /etc/X11/xorg.conf.d directory
- Revert "Revert "Fix filetrans rules for kdm creates .xsession-errors""
- Allow mount to transition to systemd_passwd_agent
- Make sure abrt directories are labeled correctly
- Allow commands that are going to read mount pid files to search mount_var_run_t
- label /usr/bin/repoquery as rpm_exec_t
- Allow automount to block suspend
- Add abrt_filetrans_named_content so that abrt directories get labeled correctly
- Allow virt domains to setrlimit and read file_context - Allow nagios to manage nagios spool files
- /var/spool/snmptt is a directory which snmdp needs to write to, needs back port to RHEL6
- Add swift_alias.* policy files which contain typealiases for swift types
- Add support for /run/lock/opencryptoki
- Allow pkcsslotd chown capability
- Allow pkcsslotd to read passwd
- Add rsync_stub() interface
- Allow systemd_timedate also manage gnome config homedirs
- Label /usr/lib64/security/pam_krb5/pam_krb5_cchelper as bin_t
- Fix filetrans rules for kdm creates .xsession-errors
- Allow sytemd_tmpfiles to create wtmp file
- Really should not label content under /var/lock, since it could have labels on it � x��������������������� X + er��y<lpo���������\ 1:1.�$ ���������������� � domain. Allow hypervkvp daemon create connection to the system DBUS
- Allow openhpid_t to read system state.
- Add temporary fixes for sandbox related to #1103622. It allows to run everything under one sandbox type.
- Added labels for files provided by rh-nginx18 collection
- Dontaudit block_suspend capability for ipa_helper_t, this is kernel bug. Allow ipa_helper_t capability net_admin. Allow ipa_helper_t to list /tmp. Allow ipa_helper_t to read rpm db.
- Allow rhsmcertd exec rhsmcertd_var_run_t files and rhsmcerd_tmp_t files. This rules are in hide_broken_sympthons until we find better solution.
- Update files_manage_all_files to contain auth_reader_shadow and auth_writer_shadow tosatisfy neverallow assertions.
- Update files_relabel_all_files() interface to contain auth_relabelto_shadow() interface to satisfy neverallow assertion.
- seunshare domains needs to have set_curr_context attribute to resolve neverallow assertion issues.
- Add dev_raw_memory_writer() interface
- Add auth_reader_shadow() and auth_writer_shadow() interfaces
- Add dev_raw_memory_reader() interface.
- Add storage_rw_inherited_scsi_generic() interface.
- Update files_relabel_non_auth_files() to contain seutil_relabelto_bin_policy() to make neverallow assertion working.
- Update kernel_read_all_proc() interface to contain can_dump_kernel and can_receive_kernel_messages attributes to fix neverallow violated issue for proc_kcore_t and proc_kmsg_t.
- Update storage_rw_inherited_fixed_disk_dev() interface to use proper attributes to fix neverallow violated issues caused by neverallow check during build process. - Allow samba_net_t to manage samba_var_t sock files.
- Allow httpd daemon to manage httpd_var_lib_t lnk_files.
- Allow collectd stream connect to pdns.(BZ #1191044)
- Add interface pdns_stream_connect()
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Allow chronyd exec systemctl
- Merge pull request #30 from vmojzis/rawhide-contrib
- Hsqldb policy upgrade -Allow sock_file management
- Add inteface chronyd_signal Allow timemaster_t send generic signals to chronyd_t.
- Hsqldb policy upgrade. -Disallow hsqldb_tmp_t link_file management
- Hsqldb policy upgrade: -Remove tmp link_file transition -Add policy summary -Remove redundant parameter for "hsqldb_admin" interface
- Label /var/run/chrony-helper dir as chronyd_var_run_t.
- Allow lldpad_t to getattr tmpfs_t. Label /dev/shm/lldpad.* as lldapd_tmpfs_t
- Fix label on /var/tmp/kiprop_0
- Add mountpoint dontaudit access check in rhsmcertd policy.
- Allow pcp_domain to manage pcp_var_lib_t lnk_files.
- Allow chronyd to execute mkdir command.
- Allow chronyd_t to read dhcpc state.
- Label /usr/libexec/chrony-helper as chronyd_exec_t
- Allow openhpid liboa_soap plugin to read resolv.conf file.
- Allow openhpid liboa_soap plugin to read generic certs.
- Allow openhpid use libwatchdog plugin. (Allow openhpid_t rw watchdog device)
- Allow logrotate to reload services.
- Allow apcupsd_t to read /sys/devices
- Allow kpropd to connect to kropd tcp port.
- Allow systemd_networkd to send logs to syslog.
- Added interface fs_dontaudit_write_configfs_dirs
- Allow audisp client to read system state.
- Label /var/run/xtables.lock as iptables_var_run_t.
- Add labels for /dev/memory_bandwith and /dev/vhci. Thanks ssekidde
- Add interface to read/write watchdog device.
- Add transition rule for iptables_var_lib_t - Allow chronyd to execute mkdir command.
- Allow chronyd_t to read dhcpc state.
- Label /usr/libexec/chrony-helper as chronyd_exec_t
- Allow openhpid liboa_soap plugin to read resolv.conf file.
- Allow openhpid liboa_soap plugin to read generic certs.
- Allow openhpid use libwatchdog plugin. (Allow openhpid_t rw watchdog device)
- Allow logrotate to reload services.
- Allow apcupsd_t to read /sys/devices
- Allow kpropd to connect to kropd tcp port.
- Allow lsmd also setuid capability. Some commands need to executed under root privs. Other commands are executed under unprivileged user.
- Allow snapperd to pass data (one way on� x���������������������� X , onp�yphp.��������(�������F& .1
-�$ V ���������������� F& E& G& � pdate zebra SELinux policy to make it work also with frr service
Resolves: rhbz#1714984
- Allow chronyd_t domain to manage and create chronyd_tmp_t dirs,files,sock_file objects.
Resolves: rhbz#1711909
- Allow chronyc_t domain to append to all non_security files
Resolves: rhbz#1696252
- Allow httpd_t domain to read/write named_cache_t files
Resolves: rhbz#1690484
- Add new interface bind_rw_cache()
Resolves: rhbz#1690484
- Label /var/run/mysql as mysqld_var_run_t
Resolves: rhbz#1687867
- Allow cupsd_t domain to create directory with name ppd in dirs labeled as cupsd_etc_t with label cupsd_rw_etc_t.
Resolves: rhbz#1612552
- Update cron_role, cron_admin_role and cron_unconfined_role to avoid *_t_t types
Resolves: rhbz#1647971
- Allow sandbox_web_type domains to sys_ptrace and sys_chroot in user namespaces
Resolves: rhbz#1663874
- Update gnome_dontaudit_read_config
Resolves: rhbz#1663874
- Update tomcat_can_network_connect_db boolean to allow tomcat domains also connect to redis ports
Resolves: rhbz#1687499
- Update keepalived policy
Resolves: rhbz#1728332
- Add sys_admin capability for keepalived_t labeled processes
Resolves: rhbz#1729174
- Fix abrt_upload_watch_t in abrt policy
Resolves: rhbz#1737419
- Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label
Resolves: rhbz#1737550
- Allow amanda_t to manage its var lib files and read random_device_t
Resolves: rhbz#1739137
- Allow zebrat_t domain to read state of NetworkManager_t processes BZ(1739983)
Resolves: rhbz#1743684
- Allow pesign_t domain to read/write named cache files.
Resolves: rhbz#1745429
- Allow login user type to use systemd user session
Resolves: rhbz#1727887
- Allow avahi_t to send msg to xdm_t
Resolves: rhbz#1755401
- Allow ldconfig_t domain to manage initrc_tmp_t objects
Resolves: rhbz#1756006
- Add new interface init_write_initrc_tmp_pipes()
- Add new interface init_manage_script_tmp_files()
- Add new interface udev_getattr_rules_chr_files()
- Run lvmdbusd service as lvm_t
Resolves: rhbz#1726166
- Label 2618/tcp and 2618/udp as priority_e_com_port_t
- Label 2616/tcp and 2616/udp as appswitch_emp_port_t
- Label 2615/tcp and 2615/udp as firepower_port_t
- Label 2610/tcp and 2610/udp as versa_tek_port_t
- Label 2613/tcp and 2613/udp as smntubootstrap_port_t
- Label 3784/tcp and 3784/udp as bfd_control_port_t
- Allow systemd labeled as init_t domain to remount rootfs filesystem
Resolves: rhbz#1698197
- Add interface files_remount_rootfs()
- New interface files_append_non_security_files()
- Allow domains systemd_networkd_t and systemd_logind_t to chat over dbus
Resolves: rhbz#1612552
- Update userdomains to pass correct parametes based on updates from cron_*_role interfaces
Resolves: rhbz#1647971
- Dontaudit sys_admin capability for iptables_t SELinux domain
Resolves: rhbz#1669040
- Allow systemd labeled as init_t domain to read/write faillog_t. BZ(1723132)
Resolves: rhbz#1671019
- Allow userdomains to dbus chat with policykit daemon
Resolves: rhbz#1727902
- Allow ipsec_t domain to read/write named cache files
Resolves: rhbz#1743777
- Add sys_admin capability for ipsec_t domain
Resolves: rhbz#1753662 - Label /var/log/hawkey.log as rpm_log_t and update rpm named filetrans interfaces.
- Allow sysadm_t to create hawkey log file with rpm_log_t SELinux label
Resolves: rhbz#1720639 - Update cpucontrol_t SELinux policy
Resolves: rhbz#1743930 - Allow dlm_controld_t domain to transition to the lvm_t
Resolves: rhbz#1732956 - Label /usr/libexec/microcode_ctl/reload_microcode as cpucontrol_exec_t
Resolves: rhbz#1669485
- Fix typo in networkmanager_append_log() interface
Resolves: rhbz#1687460
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1640296 - Allow audisp_remote_t domain to read kerberos keytab
Resolves: rhbz#1740146 - Dontaudit abrt_t domain to read root_t files
Resolves: rhbz#1734403
- Allow ipa_dnskey_t domain to read kerberos keytab
Resolves: rhbz#1730144
- Update ibacm_t policy
- Allow dlm_controld_t domain setgid capability
Resolves: rhbz#1738608
- Allow auditd_t domain to create auditd_tmp_t temporary files an� x���������������������� X - agZ�yto u��������ؐ �� tys
�$ k ���������������� �� �� �� � walsh@redhat.com> 3.6.26-2 Dan Walsh <dwalsh@redhat.com> 3.6.26-1 Dan Walsh <dwalsh@redhat.com> 3.6.25-1 Dan Walsh <dwalsh@redhat.com> 3.6.24-1 Dan Walsh <dwalsh@redhat.com> 3.6.23-2 Dan Walsh <dwalsh@redhat.com> 3.6.23-1 Dan Walsh <dwalsh@redhat.com> 3.6.22-3 Dan Walsh <dwalsh@redhat.com> 3.6.22-1 Dan Walsh <dwalsh@redhat.com> 3.6.21-4 Dan Walsh <dwalsh@redhat.com> 3.6.21-3 Tom "spot" Callaway <tcallawa@redhat.com> 3.6.21-2 Dan Walsh <dwalsh@redhat.com> 3.6.21-1 Dan Walsh <dwalsh@redhat.com> 3.6.20-2 Dan Walsh <dwalsh@redhat.com> 3.6.20-1 Dan Walsh <dwalsh@redhat.com> 3.6.19-5 Dan Walsh <dwalsh@redhat.com> 3.6.19-4 Dan Walsh <dwalsh@redhat.com> 3.6.19-3 Dan Walsh <dwalsh@redhat.com> 3.6.19-2 Dan Walsh <dwalsh@redhat.com> 3.6.19-1 Dan Walsh <dwalsh@redhat.com> 3.6.18-1 Dan Walsh <dwalsh@redhat.com> 3.6.17-1 Dan Walsh <dwalsh@redhat.com> 3.6.16-4 Dan Walsh <dwalsh@redhat.com> 3.6.16-3 Dan Walsh <dwalsh@redhat.com> 3.6.16-2 Dan Walsh <dwalsh@redhat.com> 3.6.16-1 Dan Walsh <dwalsh@redhat.com> 3.6.14-3 Dan Walsh <dwalsh@redhat.com> 3.6.14-2 Dan Walsh <dwalsh@redhat.com> 3.6.14-1 Dan Walsh <dwalsh@redhat.com> 3.6.13-3 Dan Walsh <dwalsh@redhat.com> 3.6.13-2 Dan Walsh <dwalsh@redhat.com> 3.6.13-1 Dan Walsh <dwalsh@redhat.com> 3.6.12-39 Dan Walsh <dwalsh@redhat.com> 3.6.12-38 Dan Walsh <dwalsh@redhat.com> 3.6.12-37 Dan Walsh <dwalsh@redhat.com> 3.6.12-36 Dan Walsh <dwalsh@redhat.com> 3.6.12-35 Dan Walsh <dwalsh@redhat.com> 3.6.12-34 Dan Walsh <dwalsh@redhat.com> 3.6.12-33 Dan Walsh <dwalsh@redhat.com> 3.6.12-31 Dan Walsh <dwalsh@redhat.com> 3.6.12-30 Dan Walsh <dwalsh@redhat.com> 3.6.12-29 Dan Walsh <dwalsh@redhat.com> 3.6.12-28 Dan Walsh <dwalsh@redhat.com> 3.6.12-27 Dan Walsh <dwalsh@redhat.com> 3.6.12-26 Dan Walsh <dwalsh@redhat.com> 3.6.12-25 Dan Walsh <dwalsh@redhat.com> 3.6.12-24 Dan Walsh <dwalsh@redhat.com> 3.6.12-23 Dan Walsh <dwalsh@redhat.com> 3.6.12-22 Dan Walsh <dwalsh@redhat.com> 3.6.12-21 Dan Walsh <dwalsh@redhat.com> 3.6.12-20 Dan Walsh <dwalsh@redhat.com> 3.6.12-19 Dan Walsh <dwalsh@redhat.com> 3.6.12-16 Dan Walsh <dwalsh@redhat.com> 3.6.12-15 Dan Walsh <dwalsh@redhat.com> 3.6.12-14 Dan Walsh <dwalsh@redhat.com> 3.6.12-13 Dan Walsh <dwalsh@redhat.com> 3.6.12-12 Dan Walsh <dwalsh@redhat.com> 3.6.12-11 Dan Walsh <dwalsh@redhat.com> 3.6.12-10 Dan Walsh <dwalsh@redhat.com> 3.6.12-9 Dan Walsh <dwalsh@redhat.com> 3.6.12-8 Dan Walsh <dwalsh@redhat.com> 3.6.12-7 Dan Walsh <dwalsh@redhat.com> 3.6.12-6 Dan Walsh <dwalsh@redhat.com> 3.6.12-5 Dan Walsh <dwalsh@redhat.com> 3.6.12-4 Dan Walsh <dwalsh@redhat.com> 3.6.12-3 Dan Walsh <dwalsh@redhat.com> 3.6.12-2 Dan Walsh <dwalsh@redhat.com> 3.6.12-1 Dan Walsh <dwalsh@redhat.com> 3.6.11-1 Dan Walsh <dwalsh@redhat.com> 3.6.10-9 Dan Walsh <dwalsh@redhat.com> 3.6.10-8 Dan Walsh <dwalsh@redhat.com> 3.6.10-7 Dan Walsh <dwalsh@redhat.com> 3.6.10-6 Dan Walsh <dwalsh@redhat.com> 3.6.10-5 Dan Walsh <dwalsh@redhat.com> 3.6.10-4 Dan Walsh <dwalsh@redhat.com> 3.6.10-3 Dan Walsh <dwalsh@redhat.com> 3.6.10-2 Dan Walsh <dwalsh@redhat.com> 3.6.10-1 Dan Walsh <dwalsh@redhat.com> 3.6.9-4 Dan Walsh <dwalsh@redhat.com> 3.6.9-3 Dan Walsh <dwalsh@redhat.com> 3.6.9-2 Dan Walsh <dwalsh@redhat.com> 3.6.9-1 Dan Walsh <dwalsh@redhat.com> 3.6.8-4 Dan Walsh <dwalsh@redhat.com> 3.6.8-3 Dan Walsh <dwalsh@redhat.com> 3.6.8-2 Dan Walsh <dwalsh@redhat.com> 3.6.8-1 Dan Walsh <dwalsh@redhat.com> 3.6.7-2 Dan Walsh <dwalsh@redhat.com> 3.6.7-1 Dan Walsh <dwalsh@redhat.com> 3.6.6-9 Dan Walsh <dwalsh@redhat.com> 3.6.6-8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.6.6-7 Dan Walsh <dwalsh@redhat.com> 3.6.6-6 Dan Walsh <dwalsh@redhat.com> 3.6.6-5 Dan Walsh <dwalsh@redhat.com> 3.6.6-4 Dan Walsh <dwalsh@redhat.com> 3.6.6-3 Dan Walsh <dwalsh@redhat.com> 3.6.6-2 Dan Walsh <dwalsh@redhat.com> 3.6.6-1 Dan Walsh <dwalsh@redhat.com> 3.6.5-3 Dan Walsh <dwalsh@redhat.com> 3.6.5-1 Dan Walsh <dwalsh@redhat.com> 3.6.4-6 Dan Walsh <dwalsh@redhat.com> 3.6.4-5 Dan Walsh <dwalsh@redhat.com> 3.6.4-4 Dan Walsh <dwalsh@redhat.com> 3.6.4-3 Dan Walsh <dwalsh@redhat.com> 3.6.4-2 Dan Walsh <dwalsh@r� x�������������`|������� X . ��y 0x � �5 �$ w ���������������� �5 �5 �5 � at.com> - 5.3.0-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.0-5 Joe Orton <jorton@redhat.com> 5.3.0-4 Joe Orton <jorton@redhat.com> 5.3.0-3 Joe Orton <jorton@redhat.com> 5.3.0-2 Remi Collet <Fedora@famillecollet.com> 5.3.0-1 Remi Collet <Fedora@famillecollet.com> 5.2.10-1 Remi Collet <Fedora@FamilleCollet.com> - 5.2.9-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.2.8-10 Joe Orton <jorton@redhat.com> 5.2.8-9 Joe Orton <jorton@redhat.com> 5.2.8-8 Joe Orton <jorton@redhat.com> 5.2.8-7 Joe Orton <jorton@redhat.com> 5.2.8-5 Joe Orton <jorton@redhat.com> 5.2.8-4 Joe Orton <jorton@redhat.com> 5.2.8-3 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-2 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1.1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1 Joe Orton <jorton@redhat.com> 5.2.6-7 Joe Orton <jorton@redhat.com> 5.2.6-6 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-5 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-4 Joe Orton <jorton@redhat.com> 5.2.6-3 Joe Orton <jorton@redhat.com> 5.2.5-7 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.2.5-6 Joe Orton <jorton@redhat.com> 5.2.5-5 Joe Orton <jorton@redhat.com> 5.2.5-4 Release Engineering <rel-eng at fedoraproject dot org> - 5.2.5-3 Joe Orton <jorton@redhat.com> 5.2.5-2 Joe Orton <jorton@redhat.com> 5.2.4-3 Joe Orton <jorton@redhat.com> 5.2.4-2 Joe Orton <jorton@redhat.com> 5.2.3-9 Joe Orton <jorton@redhat.com> 5.2.3-8 Hans de Goede <j.w.r.degoede@hhs.nl> 5.2.3-7 Joe Orton <jorton@redhat.com> 5.2.3-6 Joe Orton <jorton@redhat.com> 5.2.3-5 Joe Orton <jorton@redhat.com> 5.2.3-4 Joe Orton <jorton@redhat.com> 5.2.3-3 Joe Orton <jorton@redhat.com> 5.2.3-2 Joe Orton <jorton@redhat.com> 5.2.2-4 Joe Orton <jorton@redhat.com> 5.2.2-3 Joe Orton <jorton@redhat.com> 5.2.2-2 Joe Orton <jorton@redhat.com> 5.2.1-5 Joe Orton <jorton@redhat.com> 5.2.1-4 Joe Orton <jorton@redhat.com> 5.2.1-3 Joe Orton <jorton@redhat.com> 5.2.1-2 Joe Orton <jorton@redhat.com> 5.2.0-10 Joe Orton <jorton@redhat.com> 5.2.0-9 Joe Orton <jorton@redhat.com> 5.2.0-8 Joe Orton <jorton@redhat.com> 5.2.0-7 Joe Orton <jorton@redhat.com> 5.2.0-6 Joe Orton <jorton@redhat.com> 5.2.0-5 Joe Orton <jorton@redhat.com> 5.2.0-4 Joe Orton <jorton@redhat.com> 5.2.0-3 Joseph Orton <jorton@redhat.com> 5.1.6-4 Joe Orton <jorton@redhat.com> 5.1.6-3 Joe Orton <jorton@redhat.com> 5.1.6-2 Jesse Keating <jkeating@redhat.com> - 5.1.4-8.1 Joe Orton <jorton@redhat.com> 5.1.4-8 Joe Orton <jorton@redhat.com> 5.1.4-7 Joe Orton <jorton@redhat.com> 5.1.4-6 Radek Vokal <rvokal@redhat.com> 5.1.4-5.1 Joe Orton <jorton@redhat.com> 5.1.4-5 Joe Orton <jorton@redhat.com> 5.1.4-3 Joe Orton <jorton@redhat.com> 5.1.3-3 Joe Orton <jorton@redhat.com> 5.1.2-5 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.3 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.1 Joe Orton <jorton@redhat.com> 5.1.2-4 Joe Orton <jorton@redhat.com> 5.1.2-3 Joe Orton <jorton@redhat.com> 5.1.2-2 Joe Orton <jorton@redhat.com> 5.1.1-8 Joe Orton <jorton@redhat.com> 5.1.1-7 Joe Orton <jorton@redhat.com> 5.1.1-6 Jesse Keating <jkeating@redhat.com> Joe Orton <jorton@redhat.com> 5.1.1-5 Joe Orton <jorton@redhat.com> 5.1.1-4 Joe Orton <jorton@redhat.com> 5.1.1-3 Joe Orton <jorton@redhat.com> 5.1.1-2 Tomas Mraz <tmraz@redhat.com> 5.0.5-6 Joe Orton <jorton@redhat.com> 5.0.5-5 Joe Orton <jorton@redhat.com> 5.0.5-4 Joe Orton <jorton@redhat.com> 5.0.5-3 Joe Orton <jorton@redhat.com> 5.0.4-11 Joe Orton <jorton@redhat.com> 5.0.4-10 Joe Orton <jorton@redhat.com> 5.0.4-9 Joe Orton <jorton@redhat.com> 5.0.4-8 Joe Orton <jorton@redhat.com> 5.0.4-7 Joe Orton <jorton@redhat.com> 5.0.4-6 Joe Orton <jorton@redhat.com> 5.0.4-5 Joe Orton <jorton@redhat.com> 5.0.4-4 Joe Orton <jorton@redhat.com> 5.0.4-3 Joe Orton <jorton@redhat.com> 5.0.4-2 Joe Orton <jorton@redhat.com> 5.0.4-1 Joe Orton <jorton@redhat.com> 5.0.3-5 Joe Orton <jorton@redhat.com> 5.0.3-4 Joe Orton <jorton@redhat.com> 5.0.3-3 Joe Orton <jorton@redhat.com> 5.0.3-2 Joe Orton <jorton@redhat.com> 5.0.3-1 Joe Orton <jorton@redhat.com> 5.0.2-8 � x�������������(l������� X / em��ym vi��������(
Res�$ ����������������
� ib_t form overriding texrel_shlib_t - Fix samba creating dirs in homedir
- Fix NFS so its booleans would work - Allow secadm_t ability to relabel all files
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t - Fixed mailman with Postfix #183928
- Allowed semanage to create file_context files.
- Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
to bind to reserved ports. #149030
- Don't allow devpts_t to be associated with tmp_t.
- Allow hald_t to stat all mountpoints.
- Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
- Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
/etc/mtab.
- Changed the file_contexts to not have a regex before the first ^/[a-z]/
whenever possible, makes restorecon slightly faster.
- Correct the label of /etc/named.caching-nameserver.conf
- Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
/usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
hit by this.
- Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
xenstored_t rw access to the xen device node. - More textrel_shlib_t file path fixes
- Add ada support - Get auditctl working in MLS policy - Add mono dbus support
- Lots of file_context fixes for textrel_shlib_t in FC5
- Turn off execmem auditallow since they are filling log files - Update to upstream - Allow automount and dbus to read cert files - Fix ftp policy
- Fix secadm running of auditctl - Update to upstream - Update to upstream - Fix policyhelp - Fix pam_console handling of usb_device
- dontaudit logwatch reading /mnt dir - Update to upstream - Get transition rules to create policy.20 at SystemHigh - Allow secadmin to shutdown system
- Allow sendmail to exec newalias - MLS Fixes
dmidecode needs mls_file_read_up
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t - fix buildroot usage (#185391) - Get rid of mount/fsdisk scan of /dev messages
- Additional fixes for suspend/resume - Fake make to rebuild enableaudit.pp - Get xen networking running. - Fixes for Xen
- enableaudit should not be the same as base.pp
- Allow ps to work for all process - more xen policy fixups - more xen fixage (#184393) - Fix blkid specification
- Allow postfix to execute mailman_que - Blkid changes
- Allow udev access to usb_device_t
- Fix post script to create targeted policy config file - Allow lvm tools to create drevice dir - Add Xen support - Fixes for cups
- Make cryptosetup work with hal - Load Policy needs translock - Fix cups html interface - Add hal changes suggested by Jeremy
- add policyhelp to point at policy html pages - Additional fixes for nvidia and cups - Update to upstream
- Merged my latest fixes
- Fix cups policy to handle unix domain sockets - NSCD socket is in nscd_var_run_t needs to be able to search dir - Fixes Apache interface file - Fixes for new version of cups - Turn off polyinstatiate util after FC5 - Fix problem with privoxy talking to Tor - Turn on polyinstatiation - Don't transition from unconfined_t to fsadm_t - Fix policy update model. - Update to upstream - Fix load_policy to work on MLS
- Fix cron_rw_system_pipes for postfix_postdrop_t
- Allow audotmount to run showmount - Fix swapon
- allow httpd_sys_script_t to be entered via a shell
- Allow httpd_sys_script_t to read eventpolfs - Update from upstream - allow cron to read apache files - Fix vpnc policy to work from NetworkManager - Update to upstream
- Fix semoudle polcy - Update to upstream
- fix sysconfig/selinux link - Add router port for zebra
- Add imaze port for spamd
- Fixes for amanda and java - Fix bluetooth handling of usb devices
- Fix spamd reading of ~/
- fix nvidia spec - Update to upsteam - Add users_extra files - Update to upstream - Add semodule policy - Update from upstream - Fix for spamd to use razor port - Fixes for mcs
- Turn on mount and fsadm for unconfined_t - Fixes for the -� x��������������[������� X 0 - ��y off0# pK �5 for �$ y ���������������� �5 �5 �5 � Update to 7.4.9 - http://www.php.net/releases/7_4_9.php - update to 7.4.9RC1
- build using ICU 65 - Update to 7.4.8 - http://www.php.net/releases/7_4_8.php
rebuild from new sources - Update to 7.4.8 - http://www.php.net/releases/7_4_8.php - display build system and provider in phpinfo (from 8.0) - update to 7.4.8RC1
- drop patch to fix PHP_UNAME - Update to 7.4.7 - http://www.php.net/releases/7_4_7.php
- rebuild using oniguruma5php
- build phpdbg only once - update to 7.4.7RC1 - use php-config from embed SAPI to reduce used libs - Update to 7.4.6 - http://www.php.net/releases/7_4_6.php - update to 7.4.6RC1 - Update to 7.4.5 - http://www.php.net/releases/7_4_5.php - update to 7.4.5RC1 - Update to 7.4.4 - http://www.php.net/releases/7_4_4.php
- use oracle client library version 19.6 (18.5 on EL-6) - update to 7.4.4RC1 - Update to 7.4.3 - http://www.php.net/releases/7_4_3.php - update to 7.4.3RC1 - make sodium mandatory on EL-7, to avoid user confusion
https://github.com/remicollet/remirepo/issues/137 - Update to 7.4.2 - http://www.php.net/releases/7_4_2.php - update to 7.4.2RC1 - Update to 7.4.1 - http://www.php.net/releases/7_4_1.php - update to 7.4.1RC1
- use oracle client library version 19.5 - update to 7.4.0 GA - update to 7.4.0RC6 - update to 7.4.0RC5
- set opcache.enable_cli in provided default configuration - add /usr/share/php/preload as default ffi.preload configuration - allow wildcards in ffi.preload - fix preload, add more upstream patches for #78713 #78716 - fix preload, add upstream patch for #78512 - update to 7.4.0RC4 - test build with more upstream patches - fix librt issue on F31 using upstream patch - ensure all shared extensions can be loaded - fix broken intl extension on EL-7 - update to 7.4.0RC3 - fix broken gmp extension https://bugs.php.net/78574 - update to 7.4.0RC2 (new tag) - update to 7.4.0RC2
- add tarball signature check
- reduce to 4 concurrent test workers - update to 7.4.0RC1
- bump API number to 20190902 - update to 7.4.0beta4 - update to 7.4.0beta2 - update to 7.4.0beta1 (new tag) - update to 7.4.0beta1
- main package now recommends commonly used extensions and SAPI
(json, mbstring, opcache, pdo, xml)
- fix gd build options and dependencies
- refresh provided configuration from upstream production values - drop recode extension, moved to php-pecl-recode
- add upstream patch for argon2 password - update to 7.4.0alpha3
- drop argon2 dependency using libsodium implementation - update to 7.4.0alpha2 - use oracle client library version 19.3 - add 3 upstream patches - update to 7.4.0alpha1 - new snapshot
- use pkgconfig dependencies for libxslt, libexslt, libsasl2, libargon2 - new snapshot - new snapshot
- bump ABI version
- add patch for old unixODBC from
https://github.com/php/php-src/pull/4203 - new snapshot - new snapshot with configuration updated from upstream - new snapshot for enchant and sodium fix - new snapshot for sqlite3 fix - update to 7.4.0-dev
- drop interbase extension and sub-package
- move pdo_firebird extension in pdo-firebird sub-package
- drop wddx extension
- add ffi extension in new ffi sub-package
- use pkgconfig dependencies for ext using PHP_CHECK_MODULE - update to 7.3.6RC1 (new tag) - update to 7.3.6RC1 - test build for https://bugs.php.net/77653
patch from https://github.com/php/php-src/pull/4007 - Update to 7.3.5 - http://www.php.net/releases/7_3_5.php - update to 7.3.5RC1 - build with system oniguruma5 - test build for https://bugs.php.net/77653
patch from https://github.com/php/php-src/pull/4007 - Update to 7.3.4 - http://www.php.net/releases/7_3_4.php - update to 7.3.4RC1 new tag
- add upstream patches for failed tests - update to 7.3.4RC1 - Update to 7.3.3 - http://www.php.net/releases/7_3_3.php
- add upstream patch for OpenSSL 1.1.1b - php-devel: drop dependency on libicu-devel - update to 7.3.3RC1
- adapt systzdata patch (v18) - pdo_oci: backport PDOStatement::getColumnMeta from 7.4 - rebuild using libicu62 - Update to 7.3.2 - http://www.php.net/releases/7_3_2.php - update to 7.3.2RC1
- update system tzdata patch for t� x�������������K������� X 1 le��yes (�^ �,
�5 44) �$ x ���������������� �5 �5 �5 � Joe Orton <jorton@redhat.com> 5.0.2-7 Joe Orton <jorton@redhat.com> 5.0.2-6 Joe Orton <jorton@redhat.com> 5.0.2-5 Joe Orton <jorton@redhat.com> 5.0.2-4 Joe Orton <jorton@redhat.com> 5.0.1-4 Joe Orton <jorton@redhat.com> 5.0.1-3 Joe Orton <jorton@redhat.com> 5.0.1-2 Joe Orton <jorton@redhat.com> 5.0.1-1 Tom Callaway <tcallawa@redhat.com> Tom Callaway <tcallawa@redhat.com> - use ICU 73.2
- use oracle client library version 21.12 on x86_64, 19.19 on aarch64
- add fixes for libxml 2.11 and 2.12 from 8.1 - use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM - Fix Security issue with external entity loading in XML without enabling it
GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc - Fix Missing error check and insufficient random bytes in HTTP Digest
authentication for SOAP
GHSA-76gg-c692-v2mw CVE-2023-3247 - use ICU 72.1
- use oracle client library version 21.10
- fix possible buffer overflow in date
- define %php74___phpize and %php74___phpconfig - F38: enable imap extension - fix #81744: Password_verify() always return true with some hash
CVE-2023-0567
- fix #81746: 1-byte array overrun in common path resolve code
CVE-2023-0568
- fix DOS vulnerability when parsing multipart request body
CVE-2023-0662
- add dependency on pcre2 minimal version - pdo: fix #81740: PDO::quote() may return unquoted string
CVE-2022-31631
- use oracle client library version 21.8 - Update to 7.4.33 - http://www.php.net/releases/7_4_33.php - add upstream fix for CVE-2022-31630 and CVE-2022-37454 - Update to 7.4.32 - http://www.php.net/releases/7_4_32.php
- use ICU 71.1 - Update to 7.4.30 - http://www.php.net/releases/7_4_30.php
- use oracle client library version 21.6 - Update to 7.4.29 - http://www.php.net/releases/7_4_29.php - retrieve tzdata version
- use oracle client library version 21.5 - Update to 7.4.28 - http://www.php.net/releases/7_4_28.php - Update to 7.4.27 - http://www.php.net/releases/7_4_27.php - ensure we use libgd >= 2.3 - update to 7.4.27RC1
- use oracle client library version 21.4 - Update to 7.4.26 - http://www.php.net/releases/7_4_26.php - add patch for OpenSSL 3.0, backported from 8.1 - update to 7.4.26RC1 - dba: enable qdbm backend - Update to 7.4.25 - http://www.php.net/releases/7_4_25.php - update to 7.4.25RC1
- use libicu version 69 - Update to 7.4.24 - http://www.php.net/releases/7_4_24.php - update to 7.4.24RC1
- use oracle client library version 21.3 - Update to 7.4.23 - http://www.php.net/releases/7_4_23.php - update to 7.4.23RC1 - Update to 7.4.22 - http://www.php.net/releases/7_4_22.php - update to 7.4.22RC1 - Update to 7.4.21 - http://www.php.net/releases/7_4_21.php - update to 7.4.21RC1
- ignore unsupported "threads" option on password_hash - Update to 7.4.20 - http://www.php.net/releases/7_4_20.php - fix snmp extension build with net-snmp without DES - update to 7.4.20RC1 - Update to 7.4.19 - http://www.php.net/releases/7_4_19.php - Update to 7.4.18 - http://www.php.net/releases/7_4_18.php - update to 7.4.18RC1 - update to 7.4.17RC1
- use oracle client library version 21.1 - Update to 7.4.16 - http://www.php.net/releases/7_4_16.php - update to 7.4.16RC1 - Update to 7.4.15 - http://www.php.net/releases/7_4_15.php - add upstream patch for https://bugs.php.net/80682
fix opcache doesn't honour pcre.jit option - update to 7.4.15RC2 - Update to 7.4.14 - http://www.php.net/releases/7_4_14.php - update to 7.4.14RC1 - fix service dependency name
- add dependency on make for devel - Update to 7.4.13 - http://www.php.net/releases/7_4_13.php
- use oracle client library version 19.9 (x86_64) - update to 7.4.13RC1 - Update to 7.4.12 - http://www.php.net/releases/7_4_12.php - update to 7.4.12RC1 - Update to 7.4.11 - http://www.php.net/releases/7_4_11.php - update to 7.4.11RC1 - Update to 7.4.10 - http://www.php.net/releases/7_4_10.php - update to 7.4.10RC1
- use oracle client library version 19.8 (x86_64) - � x��������������:������� X 2 ed��ycom>��������(V������� Vrab�$ ` ���������������� � � � � dit at the same time.) - Add wordpress/wp-content/uploads label
- Fixes for sandbox when run from staff_t - Update to upstream
- Fixes for devicekit_disk - More fixes - Lots of fixes for initrc and other unconfined domains - Allow xserver to use netlink_kobject_uevent_socket - Fixes for sandbox - Dontaudit setroubleshootfix looking at /root directory - Update to upsteam - Allow gssd to send signals to users
- Fix duplicate label for apache content - Update to upstream - Remove polkit_auth on upgrades - Add back in unconfined.pp and unconfineduser.pp
- Add Sandbox unshare - Fixes for cdrecord, mdadm, and others - Add capability setting to dhcpc and gpm - Allow cronjobs to read exim_spool_t - Add ABRT policy - Fix system-config-services policy - Allow libvirt to change user componant of virt_domain - Allow cupsd_config_t to be started by dbus
- Add smoltclient policy - Add policycoreutils-python to pre install - Make all unconfined_domains permissive so we can see what AVC's happen - Add pt_chown policy - Add kdump policy for Miroslav Grepl
- Turn off execstack boolean - Turn on execstack on a temporary basis (#512845) - Allow nsplugin to connecto the session bus
- Allow samba_net to write to coolkey data - Allow devicekit_disk to list inotify - Allow svirt images to create sock_file in svirt_var_run_t - Allow exim to getattr on mountpoints
- Fixes for pulseaudio - Allow svirt_t to stream_connect to virtd_t - Allod hald_dccm_t to create sock_files in /tmp - More fixes from upstream - Fix polkit label
- Remove hidebrokensymptoms for nss_ldap fix
- Add modemmanager policy
- Lots of merges from upstream
- Begin removing textrel_shlib_t labels, from fixed libraries - Update to upstream - Allow certmaster to override dac permissions - Update to upstream - Fix context for VirtualBox - Update to upstream - Allow clamscan read amavis spool files - Fixes for xguest - fix multiple directory ownership of mandirs - Update to upstream - Add rules for rtkit-daemon - Update to upstream
- Fix nlscd_stream_connect - Add rtkit policy - Allow rpcd_t to stream connect to rpcbind - Allow kpropd to create tmp files - Fix last duplicate /var/log/rpmpkgs - Update to upstream
* add sssd - Update to upstream
* cleanup - Update to upstream
- Additional mail ports
- Add virt_use_usb boolean for svirt - Fix mcs rules to include chr_file and blk_file - Add label for udev-acl - Additional rules for consolekit/udev, privoxy and various other fixes - New version for upstream - Allow NetworkManager to read inotifyfs - Allow setroubleshoot to run mlocate - Update to upstream - Add fish as a shell
- Allow fprintd to list usbfs_t
- Allow consolekit to search mountpoints
- Add proper labeling for shorewall - New log file for vmware
- Allow xdm to setattr on user_tmp_t - Upgrade to upstream - Allow fprintd to access sys_ptrace
- Add sandbox policy - Add varnishd policy - Fixes for kpropd - Allow brctl to r/w tun_tap_device_t - Add /usr/share/selinux/packages - Allow rpcd_t to send signals to kernel threads - Fix upgrade for F10 to F11 - Add policy for /var/lib/fprint -Remove duplicate line - Allow svirt to manage pci and other sysfs device data - Fix package selection handling - Fix /sbin/ip6tables-save context
- Allod udev to transition to mount
- Fix loading of mls policy file - Add shorewall policy - Additional rules for fprintd and sssd - Allow nsplugin to unix_read unix_write sem for unconfined_java - Fix uml files to be owned by users - Fix Upgrade path to install unconfineduser.pp when unocnfined package is 3.0.0 or less - Allow confined users to manage virt_content_t, since this is home dir content
- Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection - Fix labeling on /var/lib/misc/prelink*
- Allow xserver to rw_shm_perms with all x_clients
- Allow prelink to execute files in the users home directory - Allow initrc_t to delete dev_null
- Allow readahead to configure auditing
- Fix milter policy
- Add /var/lib/readahead - Update to latest milter code from Paul Howarth - Additional perms fo� x�������������*������� X 3 th��ydavix�
hL������� 3-1 �$ ���������������� � � � � r readahead - Allow pulseaudio to acquire_svc on session bus
- Fix readahead labeling - Allow sysadm_t to run rpm directly
- libvirt needs fowner - Allow sshd to read var_lib symlinks for freenx - Allow nsplugin unix_read and write on users shm and sem
- Allow sysadm_t to execute su - Dontaudit attempts to getattr user_tmpfs_t by lvm
- Allow nfs to share removable media - Add ability to run postdrop from confined users - Fixes for podsleuth - Turn off nsplugin transition
- Remove Konsole leaked file descriptors for release - Allow cupsd_t to create link files in print_spool_t
- Fix iscsi_stream_connect typo
- Fix labeling on /etc/acpi/actions
- Don't reinstall unconfine and unconfineuser on upgrade if they are not installed - Allow audioentroy to read etc files - Add fail2ban_var_lib_t
- Fixes for devicekit_power_t - Separate out the ucnonfined user from the unconfined.pp package - Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t. - Upgrade to latest upstream
- Allow devicekit_disk sys_rawio - Dontaudit binds to ports < 1024 for named
- Upgrade to latest upstream - Allow podsleuth to use tmpfs files - Add customizable_types for svirt - Allow setroubelshoot exec* privs to prevent crash from bad libraries
- add cpufreqselector - Dontaudit listing of /root directory for cron system jobs - Fix missing ld.so.cache label - Add label for ~/.forward and /root/.forward - Fixes for svirt - Fixes to allow svirt read iso files in homedir - Add xenner and wine fixes from mgrepl - Allow mdadm to read/write mls override - Change to svirt to only access svirt_image_t - Fix libvirt policy - Upgrade to latest upstream - Fixes for iscsid and sssd
- More cleanups for upgrade from F10 to Rawhide. - Add pulseaudio, sssd policy
- Allow networkmanager to exec udevadm - Add pulseaudio context - Upgrade to latest patches - Fixes for libvirt - Update to Latest upstream - Fix setrans.conf to show SystemLow for s0 - Further confinement of qemu images via svirt - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Allow NetworkManager to manage /etc/NetworkManager/system-connections - add virtual_image_context and virtual_domain_context files - Allow rpcd_t to send signal to mount_t
- Allow libvirtd to run ranged - Fix sysnet/net_conf_t - Fix squidGuard labeling - Re-add corenet_in_generic_if(unlabeled_t) * Tue Feb 10 2009 Dan Walsh <dwalsh@redhat.com> 3.6.5-2
- Add git web policy - Add setrans contains from upstream - Do transitions outside of the booleans - Allow xdm to create user_tmp_t sockets for switch user to work - Fix staff_t domain - Grab remainder of network_peer_controls patch - More fixes for devicekit - Upgrade to latest upstream - Add boolean to disallow unconfined_t login - Add back transition from xguest to mozilla - Add virt_content_ro_t and labeling for isos directory - Fixes for wicd daemon - More mls/rpm fixes - Add policy to make dbus/nm-applet work - Remove polgen-ifgen from post and add trigger to policycoreutils-python - Add wm policy
- Make mls work in graphics mode - Fixed for DeviceKit - Add devicekit policy - Update to upstream - Define openoffice as an x_domain - Fixes for reading xserver_tmp_t - Allow cups_pdf_t write to nfs_t - Remove audio_entropy policy - Update to upstream - Allow hal_acl_t to getattr/setattr fixed_disk - Change userdom_read_all_users_state to include reading symbolic links in /proc - Fix dbus reading /proc information - Add missing alias for home directory content - Fixes for IBM java location - Allow unconfined_r unconfined_java_t - Add cron_role back to user domains - Fix sudo setting of user keys - Allow iptables to talk to terminals
- Fixes for policy kit
- lots of fixes for booting. - Cleanup policy - Rebuild for Python 2.6 - Fix labeling on /var/spool/rsyslog - Allow postgresl to bind to udp nodes - Allow lvm to dbus chat with hal
- Allow rlogind to read nfs_t - Fix cyphesis file context - Allow hal/pm-utils to look at /var/run/video.rom
- Add ulogd policy - Additional fixes for cyphesis
- Fix certmaster file context
- Add policy � x��������������������� X 4 em/�ymire�� �&������ Remi�$ ���������������� � 2.26.9000-35 Florian Weimer <fweimer@redhat.com> - 2.26.9000-34 Florian Weimer <fweimer@redhat.com> - 2.26.9000-33 Florian Weimer <fweimer@redhat.com> - 2.26.9000-32 Florian Weimer <fweimer@redhat.com> - 2.26.9000-31 Florian Weimer <fweimer@redhat.com> - 2.26.9000-30 Florian Weimer <fweimer@redhat.com> - 2.26.9000-29 Florian Weimer <fweimer@redhat.com> - 2.26.9000-28 Florian Weimer <fweimer@redhat.com> - 2.26.9000-27 Florian Weimer <fweimer@redhat.com> - 2.26.9000-26 Florian Weimer <fweimer@redhat.com> - 2.26.9000-25 Florian Weimer <fweimer@redhat.com> - 2.26.9000-24 Florian Weimer <fweimer@redhat.com> - 2.26.9000-23 Florian Weimer <fweimer@redhat.com> - 2.26.90-22 Florian Weimer <fweimer@redhat.com> - 2.26.90-21 Florian Weimer <fweimer@redhat.com> - 2.26.90-20 Florian Weimer <fweimer@redhat.com> - 2.26.90-19 Carlos O'Donell <carlos@systemhalted.org> - 2.26.90-18 Florian Weimer <fweimer@redhat.com> - 2.26.90-17 Florian Weimer <fweimer@redhat.com> - 2.26.90-16 Florian Weimer <fweimer@redhat.com> - 2.26.90-15 Florian Weimer <fweimer@redhat.com> - 2.26.90-14 Florian Weimer <fweimer@redhat.com> - 2.26.90-13 Florian Weimer <fweimer@redhat.com> - 2.26.90-12 Florian Weimer <fweimer@redhat.com> - 2.26.90-11 Florian Weimer <fweimer@redhat.com> - 2.26.90-10 Florian Weimer <fweimer@redhat.com> - 2.26.90-9 Florian Weimer <fweimer@redhat.com> - 2.26.90-8 Florian Weimer <fweimer@redhat.com> - 2.26.90-7 Florian Weimer <fweimer@redhat.com> - 2.26.90-6 Florian Weimer <fweimer@redhat.com> - 2.26.90-5 Tomasz Kłoczko <kloczek@fedoraproject.org> - 2.26-4 Florian Weimer <fweimer@redhat.com> - 2.26.90-3 Florian Weimer <fweimer@redhat.com> - 2.26-2 Carlos O'Donell <carlos@systemhalted.org> - 2.26-1 - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using
ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo
and AF_UNSPEC.
- Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error
responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen
- libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp
- Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init
- elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
- elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
- CVE-2024-33600: nscd: null pointer d� x��������������������� X 5 dh|�yom> ��������8� � epl �$ z ���������������� � � � � ot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root ro� x�������������`�������� X 6 rc��yrbal � �������� rnel�$ u ���������������� �� �� �� � g
- Allow dspam to bind to lmtp ports
- Add new policy to allow staff_t and user_t to look at logs using journalctl
- Allow apache cgi scripts to list sysfs
- Dontaudit attempts to write/delete user_tmp_t files
- Allow all antivirus domains to manage also own log dirs
- Allow pegasus_openlmi_services_t to stream connect to sssd_t - Add missing permission checks for nscd - Fix alias decl in corenetwork.te.in
- Add support for fuse.glusterfs
- Add file transition rules for content created by f5link
- Rename quantum_port information to neutron
- Allow all antivirus domains to manage also own log dirs
- Rename quantum_port information to neutron
- Allow pegasus_openlmi_services_t to stream connect to sssd_t - Allow sysadm_t to read login information
- Allow systemd_tmpfiles to setattr on var_log_t directories
- Udpdate Makefile to include systemd_contexts
- Add systemd_contexts
- Add fs_exec_hugetlbfs_files() interface
- Add daemons_enable_cluster_mode boolean
- Fix rsync_filetrans_named_content()
- Add rhcs_read_cluster_pid_files() interface
- Update rhcs.if with additional interfaces from RHEL6
- Fix rhcs_domain_template() to not create run dirs with cluster_var_run_t
- Allow glusterd_t to mounton glusterd_tmp_t
- Allow glusterd to unmout al filesystems
- Allow xenstored to read virt config
- Add label for swift_server.lock and make add filetrans_named_content to make sure content gets created with the correct label
- Allow mozilla_plugin_t to mmap hugepages as an executable - Add back userdom_security_admin_template() interface and use it for sysadm_t if sysadm_secadm.pp - Allow sshd_t to read openshift content, needs backport to RHEL6.5
- Label /usr/lib64/sasl2/libsasldb.so.3.0.0 as textrel_shlib_t
- Make sur kdump lock is created with correct label if kdumpctl is executed
- gnome interface calls should always be made within an optional_block
- Allow syslogd_t to connect to the syslog_tls port
- Add labeling for /var/run/charon.ctl socket
- Add kdump_filetrans_named_content()
- Allo setpgid for fenced_t
- Allow setpgid and r/w cluster tmpfs for fenced_t
- gnome calls should always be within optional blocks
- wicd.pid should be labeled as networkmanager_var_run_t
- Allow sys_resource for lldpad - Add rtas policy - Allow mailserver_domains to manage and transition to mailman data
- Dontaudit attempts by mozilla plugin to relabel content, caused by using mv and cp commands
- Allow mailserver_domains to manage and transition to mailman data
- Allow svirt_domains to read sysctl_net_t
- Allow thumb_t to use tmpfs inherited from the user
- Allow mozilla_plugin to bind to the vnc port if running with spice
- Add new attribute to discover confined_admins and assign confined admin to it
- Fix zabbix to handle attributes in interfaces
- Fix zabbix to read system states for all zabbix domains
- Fix piranha_domain_template()
- Allow ctdbd to create udp_socket. Allow ndmbd to access ctdbd var files.
- Allow lldpad sys_rouserce cap due to #986870
- Allow dovecot-auth to read nologin
- Allow openlmi-networking to read /proc/net/dev
- Allow smsd_t to execute scripts created on the fly labeled as smsd_spool_t
- Add zabbix_domain attribute for zabbix domains to treat them together
- Add labels for zabbix-poxy-* (#1018221)
- Update openlmi-storage policy to reflect #1015067
- Back port piranha tmpfs fixes from RHEL6
- Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
- Add postfix_rw_spool_maildrop_files interface
- Call new userdom_admin_user_templat() also for sysadm_secadm.pp
- Fix typo in userdom_admin_user_template()
- Allow SELinux users to create coolkeypk11sE-Gate in /var/cache/coolkey
- Add new attribute to discover confined_admins
- Fix labeling for /etc/strongswan/ipsec.d
- systemd_logind seems to pass fd to anyone who dbus communicates with it
- Dontaudit leaked write descriptor to dmesg - Fix gnome_read_generic_data_home_files()
- allow openshift_cgroup_t to read/write inherited openshift file types
- Remove httpd_cobbler_content * from cobbler_admin interface
- Allow svirt s� x�������������������� X 7 lx��yto s �� �� a so�$ c ���������������� �� �� �� � connections on stream generic sockets - Rebuild for rpm bug 1131960 - Allow ssytemd_logind_t to list tmpfs directories
- Allow lvm_t to create undefined sockets
- Allow passwd_t to read/write stream sockets
- Allow docker lots more access.
- Fix label for ports
- Add support for arptables-{restore,save} and also labeling for /usr/lib/systemd/system/arptables.service.
- Label tcp port 4194 as kubernetes port.
- Additional access required for passenger_t
- sandbox domains should be allowed to use libraries which require execmod
- Allow qpid to read passwd files BZ (#1130086)
- Remove cockpit port, it is now going to use websm port
- Add getattr to the list of access to dontaudit on unix_stream_sockets
- Allow sendmail to append dead.letter located in var/spool/nagios/dead.letter. - docker needs to be able to look at everything in /dev
- Allow all processes to send themselves signals
- Allow sysadm_t to create netlink_tcpdiag socket
- sysadm_t should be allowed to communicate with networkmanager
- These are required for bluejeans to work on a unconfined.pp disabled machine
- docker needs setfcap
- Allow svirt domains to manage chr files and blk files for mknod commands
- Allow fail2ban to read audit logs
- Allow cachefilesd_t to send itself signals
- Allow smokeping cgi script to send syslog messages
- Allow svirt sandbox domains to relabel content
- Since apache content can be placed anywhere, we should just allow apache to search through any directory
- These are required for bluejeans to work on a unconfined.pp disabled machin - shell_exec_t should not be in cockip.fc - Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.
- Allow denyhosts to enable synchronization which needs to connect to tcp/9911 port.
- Allow nacl_helper_boo running in :chrome_sandbox_t to send SIGCHLD to chrome_sandbox_nacl_t.
- Dontaudit write access on generic cert files. We don't audit also access check.
- Add support for arptables.
- Add labels and filenametrans rules for ostree repo directories which needs to be writable by subscription-manager. - fix license handling - Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow users to use these plugins properly using this boolean. (#1109681)
- Allow smokeping cgi scripts to accept connection on httpd stream socket.
- docker does a getattr on all file systems
- Label all abort-dump programs
- Allow alsa to create lock file to see if it fixes.
- Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run "semodule -d unconfined" to make system running without unconfined domains. The default location of these scripts is /usr/lib/zabbix/externalscripts. If a user change DATADIR in CONFIG_EXTERNALSCRIPTS then he needs to set labeling for this new location.
- Add interface for journalctl_exec
- Add labels also for glusterd sockets.
- Change virt.te to match default docker capabilies
- Add additional booleans for turning on mknod or all caps.
- Also add interface to allow users to write policy that matches docker defaults
- for capabilies.
- Label dhcpd6 unit file.
- Add support also for dhcp IPv6 services.
- Added support for dhcrelay service
- Additional access for bluejeans
- docker needs more access, need back port to RHEL7
- Allow mdadm to connect to own socket created by mdadm running as kernel_t.
- Fix pkcs, Remove pkcs_lock_filetrans and Add files_search_locks
- Allow bacula manage bacula_log_t dirs
- Allow pkcs_slotd_t read /etc/passwd, Label /var/lock/opencryptoki as pkcs_slotd_lock_t
- Fix mistakes keystone and quantum
- Label neutron var run dir
- Label keystone var run dir
- Fix bad labeling for /usr/s?bin/(oo|rhc)-restorer-wrapper.sh in openshift.fc.
- Dontaudit attempts to access check cert dirs/files for sssd.
- Allow sensord to send a signal.
- Allow certmonger to stream connect to dirsrv� x�������������P������� X 8 ys��yi@te����������
X 1-1 �$ ���������������� X X X � L-8 - Update to 5.6.40 - http://www.php.net/releases/5_6_40.php - Update to 5.6.39 - http://www.php.net/releases/5_6_39.php - use oracle client library version 18.3 - Update to 5.6.38 - http://www.php.net/releases/5_6_38.php - F29: backport ICU 62.1 support from 7.1 - Update to 5.6.37 - http://www.php.net/releases/5_6_37.php - Update to 5.6.36 - http://www.php.net/releases/5_6_36.php - Update to 5.6.35 - http://www.php.net/releases/5_6_35.php
- FPM: update default pool configuration for process.dumpable - add file trigger to restart the php-fpm service
when new pool or new extension installed (F27+) - Update to 5.6.34 - http://www.php.net/releases/5_6_34.php
- FPM: revert pid file removal
- improve devel dependencies - Update to 5.6.33 - http://www.php.net/releases/5_6_33.php - Update to 5.6.32 - http://www.php.net/releases/5_6_32.php - F27: php now requires php-fpm and start it with httpd / nginx - disable httpd MPM check - refresh openssl 1.1 patch for F26 - Update to 5.6.31 - http://www.php.net/releases/5_6_31.php
- use oracle instant client version 12.2 - add patch for tests with tzdata 2017.1 - add patch for firebird configuration
- add patch for OpenSSL 1.1 on F26 - disable dtrace by default, this may be enabled again using
environment variable USE_ZEND_DTRACE=1, backported from PHP 7 - Update to 5.6.30 - http://www.php.net/releases/5_6_30.php - update to 5.6.30RC1 - Update to 5.6.29 - http://www.php.net/releases/5_6_29.php - update to 5.6.29RC1 - Update to 5.6.28 - http://www.php.net/releases/5_6_28.php - update to 5.6.28RC1 - Update to 5.6.27 - http://www.php.net/releases/5_6_27.php - update to 5.6.27RC1 - Update to 5.6.26 - http://www.php.net/releases/5_6_26.php - update to 5.6.26RC1
- oci8 version is now 2.0.12 - Update to 5.6.25 - http://www.php.net/releases/5_6_25.php - update to 5.6.25RC1 - Update to 5.6.24 - http://www.php.net/releases/5_6_24.php - update to 5.6.24RC1 - own tests/doc directories for pecl packages (f24) - Update to 5.6.23 - http://www.php.net/releases/5_6_23.php - update to 5.6.23RC1 - Update to 5.6.22 - http://www.php.net/releases/5_6_22.php - update to 5.6.22RC1 - Update to 5.6.21
http://www.php.net/releases/5_6_21.php - update to 5.6.21RC1
- bump oci8 version to 2.0.11 - Update to 5.6.20
http://www.php.net/releases/5_6_20.php - update to 5.6.20RC1 - adapt for F24: define %pecl_xmldir and own it - Update to 5.6.19
http://www.php.net/releases/5_6_19.php - update to 5.6.19RC1 - Update to 5.6.18
http://www.php.net/releases/5_6_18.php - FPM: test build for https://bugs.php.net/62172 - update to 5.6.18RC1 - Update to 5.6.17
http://www.php.net/releases/5_6_17.php
- curl: add CURL_SSLVERSION_TLSv1_x constants
- fpm: switch to UDS on Fedora >= 21 - update to 5.6.17RC1 - Update to 5.6.16
http://www.php.net/releases/5_6_16.php - update to 5.6.16RC1 - Update to 5.6.15
http://www.php.net/releases/5_6_15.php
- php-config: reports all built sapis - update to 5.6.15RC1 - Update to 5.6.14
http://www.php.net/releases/5_6_14.php
- php-fpm: enable http authorization headers - update to 5.6.14RC1 - Update to 5.6.13
http://www.php.net/releases/5_6_13.php - Update to 5.6.12
http://www.php.net/releases/5_6_12.php - update to 5.6.12RC1 - Update to 5.6.11
http://www.php.net/releases/5_6_11.php - update to 5.6.11RC1
- the phar link is now correctly created - Update to 5.6.10
http://www.php.net/releases/5_6_10.php - update to 5.6.10RC1
- opcache is now 7.0.6-dev - Update to 5.6.9
http://www.php.net/releases/5_6_9.php - update to 5.6.9RC1 - test build (new zic) - Update to 5.6.8
http://www.php.net/releases/5_6_8.php - add upstream patch to drop SSLv3 tests - update to 5.6.8RC1 - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.php.net/releases/5_6_4� x��������������������� X 9 io@�yfixe���������� �� loud�$ ���������������� �� �� �� � eadline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service relocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812� x�������������@�������� X : mi��yorapP���������������� .1.R�$ l ���������������� �� �� �� � nitial Polipo
- Sanlock needs to run ranged in order to kill svirt processes
- Allow smbcontrol to stream connect to ctdbd - Add label for /etc/passwd - Change unconfined_domains to permissive for Rawhide
- Add definition for the ephemeral_ports - Make mta_role() active
- Allow asterisk to connect to jabber client port
- Allow procmail to read utmp
- Add NIS support for systemd_logind_t
- Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
- Fix systemd_manage_unit_dirs() interface
- Allow ssh_t to manage directories passed into it
- init needs to be able to create and delete unit file directories
- Fix typo in apache_exec_sys_script
- Add ability for logrotate to transition to awstat domain - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
- Add SELinux support for ssh pre-auth net process in F17
- Add logging_syslogd_can_sendmail boolean - Add definition for ephemeral ports
- Define user_tty_device_t as a customizable_type - Needs to require a new version of checkpolicy
- Interface fixes - Allow sanlock to manage virt lib files
- Add virt_use_sanlock booelan
- ksmtuned is trying to resolve uids
- Make sure .gvfs is labeled user_home_t in the users home directory
- Sanlock sends kill signals and needs the kill capability
- Allow mockbuild to work on nfs homedirs
- Fix kerberos_manage_host_rcache() interface
- Allow exim to read system state - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
- We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t - Allow collectd to read hardware state information
- Add loop_control_device_t
- Allow mdadm to request kernel to load module
- Allow domains that start other domains via systemctl to search unit dir
- systemd_tmpfiles, needs to list any file systems mounted on /tmp
- No one can explain why radius is listing the contents of /tmp, so we will dontaudit
- If I can manage etc_runtime files, I should be able to read the links
- Dontaudit hostname writing to mock library chr_files
- Have gdm_t setup labeling correctly in users home dir
- Label content unde /var/run/user/NAME/dconf as config_home_t
- Allow sa-update to execute shell
- Make ssh-keygen working with fips_enabled
- Make mock work for staff_t user
- Tighten security on mock_t - removing unconfined_notrans_t no longer necessary
- Clean up handling of secure_mode_insmod and secure_mode_policyload
- Remove unconfined_mount_t - Add exim_exec_t label for /usr/sbin/exim_tidydb
- Call init_dontaudit_rw_stream_socket() interface in mta policy
- sssd need to search /var/cache/krb5rcache directory
- Allow corosync to relabel own tmp files
- Allow zarafa domains to send system log messages
- Allow ssh to do tunneling
- Allow initrc scripts to sendto init_t unix_stream_socket
- Changes to make sure dmsmasq and virt directories are labeled correctly
- Changes needed to allow sysadm_t to manage systemd unit files
- init is passing file descriptors to dbus and on to system daemons
- Allow sulogin additional access Reported by dgrift and Jeremy Miller
- Steve Grubb believes that wireshark does not need this access
- Fix /var/run/initramfs to stop restorecon from looking at
- pki needs another port
- Add more labels for cluster scripts
- Allow apps that manage cgroup_files to manage cgroup link files
- Fix label on nfs-utils scripts directories
- Allow gatherd to read /dev/rand and /dev/urand - pki needs another port
- Add more labels for cluster scripts
- Fix label on nfs-utils scripts directories
- Fixes for cluster
- Allow gatherd to read /dev/rand and /dev/urand
- abrt leaks fifo files - Add glance policy
- Allow mdadm setsched
- /var/run/initramfs should not be relabeled with a restorecon run
- memcache can be setup to override sys_resource
- Allow httpd_t to read tetex data
- Allow systemd_tmpfiles to delete kernel modules left in /tmp directory. - Allow Postfix to deliver to Dovecot LMTP socket
- Ignore bogus sys_module for lld� x���������������������� X ; ps0�yugs.� ����� dbc �$ ����������������
� ereferences in netgroup cache (RHEL-34267)
- CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - Fix force-first handling in dlclose (RHEL-10481) - Avoid lazy binding failures during dlclose (RHEL-3639) - Add /usr/share/doc/glibc/gai.conf to glibc-doc (RHEL-12894) - nscd: Skip unusable entries in first pass in prune_cache (RHEL-1192) - Fix slow tls access after dlopen (RHEL-2122) - Enable running a single test from the testsuite (RHEL-3757) - CVE-2023-4911 glibc: buffer overflow in ld.so leading to privilege escalation (RHEL-3036) - Revert: Always call destructors in reverse constructor order (#2233338) - CVE-2023-4806 glibc: potential use-after-free in getaddrinfo (RHEL-2423) - CVE-2023-4813: Work around RHEL-8 limitation in test (RHEL-2435) - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435) - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaaa mode (#2234714) - Always call destructors in reverse constructor order (#2233338) - Fix string and memory function tuning on small systems (#2180462) - Fix temporal threshold calculations (#2180462) - Ignore symbolic link change on /etc/nsswitch.conf (#2229709) - Update test to closer match upstream. (#2176707) - Make libSegFault.so NODELETE (#2224348) - Update ESTALE error message translations (#2186781) - Don't block SIGCHILD when system() is called concurrently (#2176707) - resolv_conf: release lock on allocation failure (#2213909) - gmon: Various bug fixes (#2180155) - Change sgetsgent_r to set errno. (#2172949) - Fix incorrect inline feraiseexcept on i686, x86-64 (#2183081) - Enforce a specififc internal ordering for tunables (#2154914) - Fix rtld-audit trampoline for aarch64 (#2144568) - Backport upstream fixes to tst-pldd (#2142937) - Restore IPC_64 support in sysvipc *ctl functions (#2141989) - Switch to fast DSO dependency sorting algorithm (#1159809) - Explicitly switch to --with-default-link=no (#2109510)
- Define MAP_SYNC on ppc64le (#2139875) - Fix -Wstrict-overflow warning when using CMSG_NXTHDR macro (#2116938) - Fix dlmopen/dlclose/dlmopen sequence and libc initialization (#2121746) - Fix memory corruption in printf with thousands separators and large
integer width (#2122501) - Retain .gnu_debuglink section for libc.so.6 (#2115830)
- Remove .annobin* symbols from ld.so
- Remove redundant ld.so debuginfo file - Improve malloc implementation (#1871383) - Fix hwcaps search path size computation (#2125222) - Fix nscd netlink cache invalidation if epoll is used (#2122498) - Run tst-audit-tlsdesc, tst-audit-tlsdesc-dlopen everywhere (#2118667) - Preserve GLRO (dl_naudit) internal ABI (#2119304)
- Avoid s390x ABI change due to z16 recognition on s390x (#2119304) - Fix locale en_US@ampm (#2104907) - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
- Add dlinfo() API support for RTLD_DI_PHDR (#2097898) - Update syscall-names.list to Linux 5.18. (#2080349) - Add the no-aaaa DNS stub resolver option (#2096189) - Fix deadlocks in pthread_atfork handlers (#1888660) - Fix incorrect strncpy results on POWER9 (#2091553) - Increase tempnam randomness (#2089247) - 390x: Add support for IBM z16. (#2077835) - Ensure that condition in __glibc_fortify is a constant (#2086853) - Add missing MACRON to EBCDIC character� x�������������0�������� X < . ��yw co��������������' raw,�$ 7 ���������������� ' & ( � code "5" if cupsd not exist or is not executable
return code "6" if cupsd.conf not exist - Use password-auth common PAM configuration instead of system-auth
when available. - Fixed 'service cups status' to check for correct subsys name
(bug #521641). - 1.4.1. - Fixed the dnssd backend so that it only reports devices once avahi
resolution has completed. This makes it report Device IDs
(bug #520858).
- Fix locale code for Norwegian (bug #520379). - 1.4.0. - rebuild - Fixed admin.cgi crash when modifying a class (bug #519724,
STR #3312, patch from Jiri Popelka). - Prevent infinite loop in cupsDoIORequest when processing HTTP
errors (bug #518065, bug #519663, STR #3311).
- Fixed document-format-supported attribute when
application/octet-stream is enabled (bug #516507, STR #3308, patch
from Jiri Popelka).
- Fixed buggy JobKillDelay handling fix (STR #3292).
- Prevent infinite loop in ppdc (STR #3293). - rebuilt with new audit - Removed 3-distribution symlink (bug #514244). - Fixed JobKillDelay handling for cancelled jobs (bug #518026, STR
- Use 'exec' to invoke ghostscript in the pstoraster filter. This
allows the SIGTERM signal to reach the correct process, as well as
conserving memory (part of bug #518026). - Avoid empty BrowseLocalProtocols setting (bug #516460, STR #3287). - Fixed ppds.dat handling of drv files (bug #515027, STR #3279).
- Fixed udev rules file to avoid DEVTYPE warning messages.
- Fixed cupsGetNamedDest() so it does not fall back to the default
printer when a destination has been named (bug #516439, STR #3285).
- Fixed MIME type rules for image/jpeg and image/x-bitmap
(bug #516438, STR #3284).
- Clear out cache files on upgrade.
- Require acl. - Ship udev rules to allow libusb to access printer devices.
- Fixed duplex test pages (bug #514898, STR #3277). - Fixed Avahi support in the dnssd backend (bug #513888).
- Fixed incorrect arguments to sigaction() in dnssd backend (STR #3272).
- Cheaply restore compatibility with 1.1.x by having cups_get_sdests()
perform a CUPS_GET_CLASSES request if it is not sure it is talking
to CUPS 1.2 or later (bug #512866).
- Prevent ipp backend looping with bad IPP devices (bug #476424,
STR #3262).
- Fixed Device ID reporting in the usb backend (STR #3266). - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Tell udevd to replay printer add events in the initscript. - Applied patch to prevent bad job control files crashing cupsd on
start-up (STR #3253, bug #509741).
- Correctly handle CUPS-Get-PPDs requests for models with '+' in their
names (STR #3254, bug #509586).
- Accept incorrect device URIs in the (non-libusb) usb backend for
compatibility with Fedora 11 before bug #507244 was fixed.
- Applied patch to fix incorrect device URIs (STR #3259, bug #507244).
- Applied patch to fix job-hold-until for remote queues (STR #3258,
bug #497376). - add PHP ABI check
- use php_extdir
- add php configuration file (/etc/php.d/cups.ini) - Build does not require aspell-devel (bug #510405). - Fixed template problem preventing current printer option defaults
from being shown in the web interface (bug #506794, STR #3244). - Fixed lpadmin for remote 1.3.x servers (bug #506977, STR #3231). - Added more debugging output when constructing filter chain. - More complete fix for STR #3229 (bug #506461). - Don't use RPM_SOURCE_DIR macro.
- Fixed add/modify-printer templates which had extra double-quote
characters, preventing the Continue button from appearing in certain
browsers (bug #506461, STR #3229). - 1.4rc1. No longer need str3124, CVE-2009-0163, CVE-2009-0164,
str3197, missing-devices patches.
- Disabled avahi patch for the time being. More work is needed to
port this to rc1.
- Removed wbuffer patch as it is not needed (see STR #1968). - More complete fix for STR #3197 (bug #500859). - Prevent cupsd crash when handling IPP_TAG_DELETEATTR requests
(STR #3197, bug #500859). - Avoid stripping binaries before rpmbuild creates the -debuginfo subpackage. - Accept "Host: ::1" (bug #497393).
- Acc� x���������������������� X = .9��ysourx� @�������" ://w�$ 2 ���������������� " ! # � string literal for format string in sd_journal_print call. - Prevent USB timeouts causing incorrect print output (bug #1026914). - Avoid stale lockfile in dbus notifier (bug #1026949). - Use upstream patch for stringpool corruption issue (bug #974048). - Adjusted commented out default for SyncOnClose in cups-files.conf. - Set the default for SyncOnClose to Yes. - Use upstream patch to fix job history. - 1.7.0. - Fix job history logging. - Allow "journal" log type for log output to system journal. - Reverted upstream change to FINAL_CONTENT_TYPE in order to fix
printing to remote CUPS servers (bug #1010580). - Add SyncOnClose option (bug #984883). - Increase web interface get-devices timeout to 10s (bug #996664). - Build with full read-only relocations (bug #996740). - Fixes for jobs with multiple files and multiple formats. - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Fixed cups-config, broken by last change (bug #987660). - Removed stale comment in spec file.
- Link against OpenSSL instead of GnuTLS. - Fixed avahi-no-threaded patch (was missing part of cupsd.h). Thanks
to Joseph Wang for spotting it. - Fixed downoad URL to point to the actual source, not a download
page. - 1.7rc1 - Avoid sign-extending CRCs for gz decompression (bug #983486). - Fixed download URL. - Remove pstops cost factor tweak from conf/mime.convs.in - Don't use D-Bus from two threads (bug #979748). - Fix for DNSSD name resolution. - Default to IPP/1.1 for now (bug #977813). - Added libusb quirk for Canon PIXMA MP540 (bug #967873). - Don't link against libgcrypt needlessly. - Remove scriptlet for migrating to a systemd unit from a SysV initscript - Use IP_FREEBIND socket option when binding listening sockets (bug #970809). - Added IEEE 1284 Device ID for a Dymo device (bug #747866). - Prevent stringpool damage leading to memory leaks (bug #974048). - Return from cupsEnumDests() once all records have been returned. - don't ship Russian web templates because they're broken (#960571, STR #4310) - move cups/ppdc/ to filesystem subpackage - Do not apply unary exclamation mark to va_list (bug #957737). - 1.7b1
- use _tmpfilesdir macro - cups-dbus-utf.patch: now that the scheduler only accepts valid UTF-8
strings for job-name, there's no need to validate it as UTF-8 in the
dbus notifier. - Use IP address when resolving DNSSD URIs (bug #948288). - Check for cupsd.conf existence prior to grepping it (bug #928816). - revert previous bug #919489 fix (i.e we don't ship banners now) - 1.6.2 - ship banners again (#919489) - Talk about systemd in cups-lpd manpage (part of bug #884641). - Documentation fixes from STR #4223 (bug #915981). - Removed obsolete browsing directives from cupsd.conf (bug #880826, STR #4157).
- Updated summary and descriptions (#882982).
- Fixed bogus dates in changelog. - Applied colorman fix from STR #4232 and STR #4276. - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Add quirk rule for Canon MP210 (#847923). - Fix unowned directories (#894531). - Clean /var/spool/cups/tmp with tmpfiles.d instead of tmpwatch&cron (#893834). - Migrate cups-lpd from xinetd to systemd socket activatable service (#884641).
- Clean up old Requires/Conflicts/Obsoletes/Provides. - Additional fix relating to CVE-2012-5519 to avoid misleading error
message about actions to take to enable file device URIs. - Small error handling improvements in the configuration migration
script. - move ipptoolfile(5) to ipptool subpackage - Applied additional upstream patch for CVE-2012-5519 so that the
RemoteRoot keyword is recognised in the correct configuration file. - Fixed paths in config migration %post script.
- Set default cups-files.conf filename. - Apply upstream fix for CVE-2012-5519 (STR #4223, bug #875898).
Migrate configuration keywords as needed. - Re-enable the web interface as it is required for adjusting server
settings (bug #878090). - Disable the web interface by default (bug #864522). - Ensure attributes are valid UTF-8 in dbus notifier (bug #863387). - Removed broken@ x�������������������@ ual � �����������������s������� X > n �yg htP� @�������! virt�$ 1 ���������������� ! " � scripts no longer supported. - Change mode of subscriptions.conf from 644 to 640 (bug #1259770). - 2.1.0 - fix crash in scheduler (#1253135) - better fix for STR#4687 - 2.1rc1 - 2.0.4 - BuildRequires: gnutls-devel -> pkgconfig(gnutls) - RPM_BUILD_ROOT -> %{buildroot}, put braces around lspp and use_alternatives - Fix slow resume of jobs after restart (STR #4646).
- Fix redirection from CGI scripts (bug #1232030, STR #4538). - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - 2.0.3 - Rebuilt for GCC 5 C++11 ABI change - Avoid busy loop in cupsd when connection is closed after request
sent (bug #1179596). - Fixed multilib.patch to check for gnutls instead of openssl. - 2.0.2 - Fixed systemd notify support (bug #1184453). - 2.0.1 - Re-introduce SSLOptions configuration directive, disable SSL3 by
default (STR #4476).
- Enable SSL again via GnuTLS (bug #1161235). - Removed openssl requirements from spec file as it is no longer
supported upstream (see bug #1161235). - cups-lspp.patch: use cupsdLogJob() when appropriate.
- Fixed some warnings in cups-lspp.patch.
- New systemd journal fields CUPS_DEST and CUPS_PRINTER, as well as
accurate code location fields. - Upstream fix for cupsd crash on restart when colord not available
- (STR #4496). - Fix for last fix (bug #1153660, bug #1154284). - Start cupsd systemd service after network.target (bug #1153660). - Fix cupsGetPPD3() so it doesn't give the caller an unreadable file
(bug #1150917, STR #4500). - Can no longer reproduce bug #1010580 so removing final-content-type
patch as it causes issues for some backends (bug #1149244). - comment out unnecessary PageLogFormat from cups-files.conf (#1148995) - s/org.cups.cupsd/cups/ cups.service - 2.0.0 - 2.0rc1 - Fix icon display in web interface during server restart (STR #4475). - More STR #4461 fixes from upstream. - Use upstream patch for STR #4461. - Removed old one-off trigger now it's no longer needed.
- Run systemd postun script for path and socket unit files as well as
the main service unit file.
- Upstream patch for STR #4396, pre-requisite for STR #2913 patch.
- Upstream patch for STR #2913 to limit Get-Jobs replies to 500 jobs
(bug #421671). - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Fix conf/log file reading for authenticated users (STR #4461). - 1.7.5 - CVE-2014-5029, CVE-2014-5030, CVE-2014-5031 (#1122601) - Fix CGI handling (STR #4454). - 1.7.4: CVE-2014-3537 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - 1.7.3
- str4386.patch merged upstream in STR #4403 - Another attempt at avoiding race condition when sending IPP requests
(STR #4386, bug #1072952). - Make cups.service Type=notify (bug #1088918). - 1.7.2 - Log to the system journal by default (bug #1078781). - libcups: avoid race condition when sending IPP requests (STR #4386,
bug #1072952). - New client subpackage containing command line client tools (bug #1002342).
- Removed unneeded Group tags.
- Removed 'Requires: /sbin/chkconfig'.
- Moved 'Provides: lpd' to lpd subpackage. - Removed patch for STR #4386 as it does not work and causes problems
instead (bug #1077239). - BuildRequires: pkgconfig(foo) instead of foo-devel - Track local default in cupsEnumDests() (STR #4332).
- libcups: avoid race condition when sending IPP requests (STR #4386).
- Prevent feedback loop when fetching error_log over HTTP (STR #4366). - Fix for cupsEnumDest() 'removed' callbacks (bug #1054312, STR #4380). - Document 'journal' logging target. - Prevent dnssd backend exiting too early (bug #1026940, STR #4365). - move macros.cups from /etc/rpm/ to /usr/lib/rpm/macros.d - 1.7.1 - Apply upstream patch to improve cupsUser() (STR #4327). - Removed cups-dbus-utf8.patch as no longer needed (see STR #4314).
- Return jobs in rank order when handling IPP-Get-Jobs (STR #4326). - dbus notifier: call _exit when handling SIGTERM (STR #4314).
- Use '-f' when using rm in %setup section.
- Fixed avahi-no-threaded patch so it removes a call to
avahi_threaded_poll_stop() (bug #1044602). - Use� x�������������Xc������� X ? .4&�yadek�
�q������3@ t.co�$ # ���������������� 3@ 4@ 2@ � and rebuild. - rebuild - Replace "makeinstall" with "make install DESTDIR=..."
- Remove package ownership of mandir/libdir/etc. - Update to 1.0.1 - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
- Added "libX11-devel" to devel package (#176078) - Bumped and rebuilt - Updated libXext to version 1.0.0 from X11R7 RC4 - Updated libXext to version 0.99.3 from X11R7 RC3
- Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
that /usr/lib/X11 and /usr/include/X11 pre-exist.
- Removed 'x' suffix from manpage directories to match RC3 upstream. - rebuilt - Updated libXext to version 0.99.2 from X11R7 RC2
- Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
- Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes' - Updated to libXext-0.99.1 from the X11R7 RC1 release.
- Added manpages that were absent in X11R7 RC0, and updated the file lists
to find them in section "man3x". - Renamed package to remove xorg-x11 from the name due to unanimous decision
between developers.
- Use Fedora Extras style BuildRoot tag.
- Disable static library creation by default.
- Add missing defattr to devel subpackage
- Add missing documentation files to doc macro - Renamed package to prepend "xorg-x11" to the name for consistency with
the rest of the X11R7 packages.
- Added "Requires: %{name} = %{version}-%{release}" dependency to devel
subpackage to ensure the devel package matches the installed shared libs.
- Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
allow applications to use implementation agnostic dependencies.
- Added post/postun scripts which call ldconfig.
- Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
and Conflicts with XFree86-devel and xorg-x11-devel to devel package. - Initial build. � 1.3.4-1.el8 1.3.4-1.el8 .build-id 15 35472c03b66a18c3dd2bbecd4b910840c1bae9 libXext.so.6 libXext.so.6.4.0 libXext AUTHORS COPYING /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/15/ /usr/lib64/ /usr/share/doc/ /usr/share/doc/libXext/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1535472c03b66a18c3dd2bbecd4b910840c1bae9, stripped ASCII text P R R R R R R R
utf-8 1d796793fc7dbe371e0b92f3fcffc5d51851024ce382a82d10a4c93dd395d1a5 ? ���@ �ȉ3 !pQ�p�)�Tξ7��]�mtZ``sқ
�]�mtZ`�Y ���9�/M�He��{��_Nb��*�����`e�M�2�: uR��;x����s���=U3_��X�I)�d��j�qO~�X��T����A�x�՝�� ����v�R��d
ѓ��2 ��H\����X?�ffΰKo� �ɪ[�6�PM�fR��k�Of�hN>�;�D�N��fk��B�u���Å� lзt��Ᏸ)����o кk�ip�2LL�D��'���^�� �<X5�#F1�NF(A �iZ#t������
��r �5<MT�tȔh挟1�f!���h�O]Ťp���i�_h�ߧ�S �Iӕ��a+���B{|����j�K1�&u�LUs�'���)|�7�1���$��L�*���#� �Q��Z����+}���Y<���SQ��,��6R������7��G�.b
�s��U���������q�?̳$�e �!��s���� �>>��7�'v_����/fJl9�>/ ���G�Ϻrݭ��^�r����ϏX ���՝�}�3 !pQ�p�)�Tξ7��]�mtZ``sқ
�]�mtZ`�v �LRwL�2� �X
�xm6�?��u�}��|p4MnwB�qɽ"�Ȯoe��,���H6��5Kξ��9EUQ����<-�~a`��J{$^O?z� 6��3��FŘ|㟰��j6
X$t�H �=�6���cRo��[�W�1�'?�� �-��<'����F�jJ�k��ح���E0(5�R��η�3V� v�m�O1�JCv���* �Yh��I��� �� w�� ܘ�>b��X��jp�K�` �B婭,�VF���gvP����.��&�B�4�� 6V��Ǻ�(�W��S*���{�d�R.-ѽI�
�ٶ5\ ��r����y(K�Uýt��54�կ� x��������������R������� X @ D��yalsh�� �s������g 3.7�$ w ���������������� g f h � #134601). - Fixed reload logic (bug #134080). - Remove .pdf from docs, fix links - Write a pid file (bug #132987). - 1.1.21. - Updated DBUS patch (from Colin Walters). - 1.1.21rc2.
- No longer need state, reload-timeout or str743 patches.
- httpnBase64 patch no longer applies; alternate method implemented
upstream.
- Fix single byte overread in usersys.c (spotted by Colin Walters). - Applied httpnEncode64 patch from Colin Walters. - Session printing patch (Colin Walters). Disabled for now. - Shorter reload timeout (Colin Walters).
- Updated DBUS patch from Colin Walters. - Updated IPP backend IPP_PORT patch from Colin Walters. - Preserve DBUS_SESSION_BUS_ADDRESS in environment (Colin Walters).
- Fixed enabledisable patch. - Bumped DBUS version to 0.22. - Patch from Colin Walters to prevent IPP backend using non-standard
IPP port. - Really bumped DBUS version. - Bumped DBUS version. - Added version to LPRng obsoletes: tag (bug #128024). - Updated DBUS patch. - Apply patch from STR #743 (bug #114999). - Fix permissions on logrotate script (bug #126426). - rebuilt - Build for dbus-0.21.
- Fix SetPrinterState(). - Use configure's --with-optim parameter instead of setting OPTIM at
make time (bug #125228). - 1.1.21rc1.
- No longer need str716, str718, authtype or encryption patches. - Build on ppc and ppc64 again. - ExcludeArch ppc, ppc64.
- More D-BUS changes. - Enable optimizations on ia64 again. - D-BUS changes. - Build requires make >= 3.80 (bug #124472). - Finish fix for cupsenable/cupsdisable (bug #102490).
- Fix MaxLogSize setting (bug #123003). - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
result STR #719. This fixes several problems including those noted in
bug #114999. - Use upstream patch for exit code fix for bug #110135 [STR 718]. - If cupsd fails to start, make it exit with an appropriate code so that
initlog notifies the user (bug #110135). - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
or requested (bug #118982).
- Use upstream patch for the HTTP/1.1 Continue bug (from STR716). - Fix non-conformance with HTTP/1.1, which caused failures when printing
to a Xerox Phaser 8200 via IPP (bug #122352).
- Make lppasswd(1) PIE.
- Rotate logs within cupsd (instead of relying on logrotate) if we start
to approach the filesystem file size limit (bug #123003). - Fix pie patch (bug #120078). - Fix rcp patch for new system-config-printer name. - rebuilt - rebuilt - Tracked D-BUS API changes.
- Updated D-BUS configuration file.
- Symlinks to avoid conflicting with bash builtins (bug #102490). - Improved PIE patch.
- Fixed compilation with GCC 3.4. - Don't ship cupsconfig now that nothing uses it. - Try harder to find a translated page for the web interface (bug #107619).
- Added build_as_pie conditional to spec file to facilitate debugging. - 1.1.20.
- No longer need idefense, str226 patches.
- Updated sanity patch.
- The devel sub-package requires openssl-devel (bug #110772). - removed -Wl,-rpath from cups-sharedlibs.m4 (replaced old no_rpath patch) - no rpath in cups-config anymore - Enable PIE for cupsd. - Don't ignore the file descriptor when ShutdownClient is called: it
might get closed before we next try to read it (bug #107787). - Removed busy-loop patch; 1.1.19 has its own fix for this. - Apply patch from STR 226 to make CUPS reload better behaved (bug #101507). - Prevent a libcups busy loop (bug #97958). - Another attempt to fix bug #100984. - Pass correct attributes-natural-language through even in the absence
of translations for that language (bug #100984).
- Show compilation command lines. - Prevent lpstat displaying garbage. - Mark mime.convs and mime.types as config files (bug #99461). - Start cupsd before nfs server processes (bug #97767). - Add some %if %use_dbus / %endif's to make it compile without dbus
(bug #97397). Patch from Jos Vos. - Don't busy loop in the client if the IPP port is in use by another
app (bug #97468). - Mark pam.d/cups as config file not to be replaced (bug #92236). - rebuilt - Provi� x�������������HB������� X A pu��ynux/�n pa�������� g-5.�$ p ���������������� �� �� �� � to fix ##992920,#992931
- Allow glusterd to mount filesystems
- Loading a vm from /usr/tmp with virt-manager
- Trying to load a VM I got an AVC from devicekit_disk for loopcontrol device
- Add fix for pand service
- shorewall touches own log
- Allow nrpe to list /var
- Mozilla_plugin_roles can not be passed into lpd_run_lpr
- Allow afs domains to read afs_config files
- Allow login programs to read afs config
- Allow virt_domain to read virt_var_run_t symlinks
- Allow smokeping to send its process signals
- Allow fetchmail to setuid
- Add kdump_manage_crash() interface
- Allow abrt domain to write abrt.socket - Add more aliases in pegasus.te
- Add more fixes for *_admin interfaces
- Add interface fixes
- Allow nscd to stream connect to nmbd
- Allow gnupg apps to write to pcscd socket
- Add more fixes for openlmi provides. Fix naming and support for additionals
- Allow fetchmail to resolve host names
- Allow firewalld to interact also with lnk files labeled as firewalld_etc_rw_t
- Add labeling for cmpiLMI_Fan-cimprovagt
- Allow net_admin for glusterd
- Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
- Add pegasus_openlmi_system_t
- Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
- Fix corecmd_exec_chroot()
- Fix logging_relabel_syslog_pid_socket interface
- Fix typo in unconfineduser.te
- Allow system_r to access unconfined_dbusd_t to run hp_chec - Allow xdm_t to act as a dbus client to itsel
- Allow fetchmail to resolve host names
- Allow gnupg apps to write to pcscd socket
- Add labeling for cmpiLMI_Fan-cimprovagt
- Allow net_admin for glusterd
- Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
- Add pegasus_openlmi_system_t
- Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
-httpd_t does access_check on certs - Add support for cmpiLMI_Service-cimprovagt
- Allow pegasus domtrans to rpm_t to make pycmpiLMI_Software-cimprovagt running as rpm_t
- Label pycmpiLMI_Software-cimprovagt as rpm_exec_t
- Add support for pycmpiLMI_Storage-cimprovagt
- Add support for cmpiLMI_Networking-cimprovagt
- Allow system_cronjob_t to create user_tmpfs_t to make pulseaudio working
- Allow virtual machines and containers to run as user doains, needed for virt-sandbox
- Allow buglist.cgi to read cpu info - Allow systemd-tmpfile to handle tmp content in print spool dir
- Allow systemd-sysctl to send system log messages
- Add support for RTP media ports and fmpro-internal
- Make auditd working if audit is configured to perform SINGLE action on disk error
- Add interfaces to handle systemd units
- Make systemd-notify working if pcsd is used
- Add support for netlabel and label /usr/sbin/netlabelctl as iptables_exec_t
- Instead of having all unconfined domains get all of the named transition rules,
- Only allow unconfined_t, init_t, initrc_t and rpm_script_t by default.
- Add definition for the salt ports
- Allow xdm_t to create link files in xdm_var_run_t
- Dontaudit reads of blk files or chr files leaked into ldconfig_t
- Allow sys_chroot for useradd_t
- Allow net_raw cap for ipsec_t
- Allow sysadm_t to reload services
- Add additional fixes to make strongswan working with a simple conf
- Allow sysadm_t to enable/disable init_t services
- Add additional glusterd perms
- Allow apache to read lnk files in the /mnt directory
- Allow glusterd to ask the kernel to load a module
- Fix description of ftpd_use_fusefs boolean
- Allow svirt_lxc_net_t to sys_chroot, modify policy to tighten up svirt_lxc_domain capabilties and process controls, but add them to svirt_lxc_net_t
- Allow glusterds to request load a kernel module
- Allow boinc to stream connect to xserver_t
- Allow sblim domains to read /etc/passwd
- Allow mdadm to read usb devices
- Allow collectd to use ping plugin
- Make foghorn working with SNMP
- Allow sssd to read ldap certs
- Allow haproxy to connect to RTP media ports
- Add additional trans rules for aide_db
- Add labeling for /usr/lib/pcsd/pcsd
- Add labeling for /var/log/pcsd
- � x��������������1������� X B ti��ye .rX� �M������� yml �$ a ���������������� � � � � to upstream - Allow boinc to read kernel sysctl
- Fix snmp port definitions
- Allow apache to read anon_inodefs - Allow shutdown dac_override - Add device_t as a file system
- Fix sysfs association - Dontaudit ipsec_mgmt sys_ptrace
- Allow at to mail its spool files
- Allow nsplugin to search in .pulse directory - Update to upstream - Allow users to dbus chat with xdm
- Allow users to r/w wireless_device_t
- Dontaudit reading of process states by ipsec_mgmt - Fix openoffice from unconfined_t - Add shutdown policy so consolekit can shutdown system - Update to upstream - Update to upstream - Update to upstream - These are merges of my patches
- Remove 389 labeling conflicts
- Add MLS fixes found in RHEL6 testing
- Allow pulseaudio to run as a service
- Add label for mssql and allow apache to connect to this database port if boolean set
- Dontaudit searches of debugfs mount point
- Allow policykit_auth to send signals to itself
- Allow modcluster to call getpwnam
- Allow swat to signal winbind
- Allow usbmux to run as a system role
- Allow svirt to create and use devpts - Add MLS fixes found in RHEL6 testing
- Allow domains to append to rpm_tmp_t
- Add cachefilesfd policy
- Dontaudit leaks when transitioning - Change allow_execstack and allow_execmem booleans to on
- dontaudit acct using console
- Add label for fping
- Allow tmpreaper to delete sandbox_file_t
- Fix wine dontaudit mmap_zero
- Allow abrt to read var_t symlinks - Additional policy for rgmanager - Allow sshd to setattr on pseudo terms - Update to upstream - Allow policykit to send itself signals - Fix duplicate cobbler definition - Fix file context of /var/lib/avahi-autoipd - Merge with upstream - Allow sandbox to work with MLS - Make Chrome work with staff user - Add icecast policy
- Cleanup spec file - Add mcelog policy - Lots of fixes found in F12 - Fix rpm_dontaudit_leaks - Add getsched to hald_t
- Add file context for Fedora/Redhat Directory Server - Allow abrt_helper to getattr on all filesystems
- Add label for /opt/real/RealPlayer/plugins/oggfformat\.so - Add gstreamer_home_t for ~/.gstreamer - Update to upstream - Fix git - Turn on puppet policy
- Update to dgrift git policy - Move users file to selection by spec file.
- Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t - Update to upstream - Remove most of the permissive domains from F12. - Add cobbler policy from dgrift - add usbmon device
- Add allow rulse for devicekit_disk - Lots of fixes found in F12, fixes from Tom London - Cleanups from dgrift - Add back xserver_manage_home_fonts - Dontaudit sandbox trying to read nscd and sssd - Update to upstream - Rename udisks-daemon back to devicekit_disk_t policy - Fixes for abrt calls - Add tgtd policy - Update to upstream release - Add asterisk policy back in
- Update to upstream release 2.20091117 - Update to upstream release 2.20091117 - Fixup nut policy - Update to upstream - Allow vpnc request the kernel to load modules - Fix minimum policy installs
- Allow udev and rpcbind to request the kernel to load modules - Add plymouth policy
- Allow local_login to sys_admin - Allow cupsd_config to read user tmp
- Allow snmpd_t to signal itself
- Allow sysstat_t to makedir in sysstat_log_t - Update rhcs policy - Allow users to exec restorecond - Allow sendmail to request kernel modules load - Fix all kernel_request_load_module domains - Fix all kernel_request_load_module domains - Remove allow_exec* booleans for confined users. Only available for unconfined_t - More fixes for sandbox_web_t - Allow sshd to create .ssh directory and content - Fix request_module line to module_request - Fix sandbox policy to allow it to run under firefox.
- Dont audit leaks. - Fixes for sandbox - Update to upstream
- Dontaudit nsplugin search /root
- Dontaudit nsplugin sys_nice - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
- Remove policycoreutils-python requirement except for minimum - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
- Conflicts seedit (You can not use selinux-policy-targeted and see� x�������������8!������� X C _tu�ysys_��
h)������ form�$ ���������������� � Dohnal <zdohnal@redhat.com> - 1:2.2.1-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.0-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.2.0-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2-0.4rc1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2-0.2rc1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2-0.2b2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2-0.1b2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.1.4-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.1.4-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1.3-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.1.2-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.1.2-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1.1-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1.0-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.1.0-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1-0.3rc1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1-0.2rc1 Jiri Popelka <jpopelka@redhat.com> - 1:2.1-0.1rc1 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.4-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.3-5 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.3-4 Tim Waugh <twaugh@redhat.com> - 1:2.0.3-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:2.0.3-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.3-1 Kalev Lember <kalevlember@gmail.com> - 1:2.0.2-6 Tim Waugh <twaugh@redhat.com> - 1:2.0.2-5 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.2-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.2-1 Tim Waugh <twaugh@redhat.com> - 1:2.0.1-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.1-1 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-12 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-11 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-10 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-9 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-7 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-6 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-5 Tim Waugh <twaugh@redhat.com> - 1:2.0.0-4 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.0-3 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.0-2 Jiri Popelka <jpopelka@redhat.com> - 1:2.0.0-1 Jiri Popelka <jpopelka@redhat.com> - 1:2.0-0.1.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7.5-7 Tim Waugh <twaugh@redhat.com> - 1:1.7.5-6 Tim Waugh <twaugh@redhat.com> - 1:1.7.5-5 Tim Waugh <twaugh@redhat.com> - 1:1.7.5-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.7.5-3 Tim Waugh <twaugh@redhat.com> - 1:1.7.5-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.5-1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.4-3 Tim Waugh <twaugh@redhat.com> - 1:1.7.4-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.4-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.7.3-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.3-1 Tim Waugh <twaugh@redhat.com> - 1:1.7.2-3 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.2-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.2-1 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-11 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-10 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-9 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-8 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-7 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-6 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-5 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-4 Tim Waugh <twaugh@redhat.com> - 1:1.7.1-3 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-1 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-11 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-10 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-9 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-8 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-7 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-6 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-5 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-4 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-3 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-2 Tim Waugh <twaugh@redhat.com> - 1:1.7.0-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> - 1:1.7-0.27.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.26.rc1 Jaromír Končický <jkoncick@redhat.com> Tim Waugh <twaugh@redhat.com> - 1:1.7-0.25.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.24.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.23.rc1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.7-0.22.rc1 Tim Waugh <twaugh@redhat.com> � x��������������������� X D es�y_4.p0c (C � JIT �$ ���������������� � � � � -5.12.6] - Updated with the 5.12.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.5] - Updated with the 5.12.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4] - Updated with the 5.12.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.3] - Updated with the 5.12.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.2]
- CONFIG_HSA_AMD=y [https://elrepo.org/bugs/view.php?id=1091] - Updated with the 5.12.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.1] - Updated with the 5.12 source tarball.
- CONFIG_LD_IS_BFD=y, CONFIG_LD_VERSION=23000, CONFIG_ACPI_PLATFORM_PROFILE=m,
- CONFIG_KVM_XEN=y, CONFIG_ARCH_SUPPORTS_LTO_CLANG=y,
- CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN=y, CONFIG_LTO_NONE=y,
- CONFIG_HAVE_IRQ_EXIT_ON_IRQ_STACK=y, CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK=y,
- CONFIG_HAVE_PREEMPT_DYNAMIC=y, CONFIG_ARCH_HAS_ELFCORE_COMPAT=y,
- CONFIG_IP_VS_TWOS=m, CONFIG_SOCK_RX_QUEUE_MAPPING=y, CONFIG_XILINX_EMACLITE=m,
- CONFIG_MT76_SDIO=m, CONFIG_MT76_CONNAC_LIB=m, CONFIG_MT7663S=m,
- CONFIG_MT7921E=m, CONFIG_TCG_TIS_SPI=m, CONFIG_TCG_TIS_I2C_CR50=m,
- CONFIG_TCG_TIS_ST33ZP24_SPI=m, CONFIG_SENSORS_AHT10=m,
- CONFIG_SENSORS_TPS23861=m, CONFIG_DVB_MXL692=m,
- CONFIG_SND_INTEL_SOUNDWIRE_ACPI=m, CONFIG_SND_SOC_SOF_PCI_DEV=m,
- CONFIG_SND_SOC_SOF_ACPI_DEV=m, CONFIG_SND_SOC_SOF_INTEL_APL=m,
- CONFIG_SND_SOC_SOF_INTEL_CNL=m, CONFIG_SND_SOC_SOF_INTEL_ICL=m,
- CONFIG_SND_SOC_SOF_INTEL_TGL=m, CONFIG_SND_SOC_RT5659=m,
- CONFIG_SND_SOC_LPASS_RX_MACRO=m, CONFIG_SND_SOC_LPASS_TX_MACRO=m,
- CONFIG_USB_SERIAL_XR=m, CONFIG_TYPEC_UCSI=m, CONFIG_UCSI_ACPI=m,
- CONFIG_LEDS_TRIGGER_TTY=m, CONFIG_LEDS_BLINK=y, CONFIG_VIRTIO_PCI_LIB=y,
- CONFIG_X86_PLATFORM_DRIVERS_DELL=y, CONFIG_IOMMU_IO_PGTABLE=y,
- CONFIG_F2FS_FS_LZ4HC=y, CONFIG_NFS_V4_2_SSC_HELPER=m, CONFIG_LZ4HC_COMPRESS=y,
- CONFIG_HAVE_ARCH_KFENCE=y, CONFIG_HAVE_OBJTOOL_MCOUNT=y and
- CONFIG_FTRACE_MCOUNT_USE_CC=y - Updated with the 5.11.16 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.16] - Updated with the 5.11.15 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.15] - Updated with the 5.11.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14] - Updated with the 5.11.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.13] - Updated with the 5.11.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.12]
- CONFIG_REGMAP_SOUNDWIRE=m, CONFIG_SND_SOC_INTEL_SOF_WM8804_MACH=m,
- CONFIG_SND_SOC_INTEL_GLK_DA7219_MAX98357A_MACH=m,
- CONFIG_SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH=m,
- CONFIG_SND_SOC_INTEL_SOF_RT5682_MACH=m,
- CONFIG_SND_SOC_INTEL_SOF_PCM512x_MACH=m,
- CONFIG_SND_SOC_INTEL_CML_LP_DA7219_MAX98357A_MACH=m,
- CONFIG_SND_SOC_INTEL_SOF_CML_RT1011_RT5682_MACH=m,
- CONFIG_SND_SOC_INTEL_SOF_DA7219_MAX98373_MACH=m,
- CONFIG_SND_SOC_INTEL_EHL_RT5660_MACH=m, CONFIG_SND_SOC_SOF_TOPLEVEL=y,
- CONFIG_SND_SOC_SOF_PCI=m, CONFIG_SND_SOC_SOF_ACPI=m,
- CONFIG_SND_SOC_SOF=m, CONFIG_SND_SOC_SOF_PROBE_WORK_QUEUE=y,
- CONFIG_SND_SOC_SOF_INTEL_TOPLEVEL=y, CONFIG_SND_SOC_SOF_INTEL_ACPI=m,
- CONFIG_SND_SOC_SOF_INTEL_PCI=m, CONFIG_SND_SOC_SOF_INTEL_HIFI_EP_IPC=m,
- CONFIG_SND_SOC_SOF_INTEL_ATOM_HIFI_EP=m, CONFIG_SND_SOC_SOF_INTEL_COMMON=m,
- CONFIG_SND_SOC_SOF_BAYTRAIL_SUPPORT=y, CONFIG_SND_SOC_SOF_BAYTRAIL=m,
- CONFIG_SND_SOC_SOF_BROADWELL_SUPPORT=y, CONFIG_SND_SOC_SOF_BROADWELL=m,
- CONFIG_SND_SOC_SOF_MERRIFIELD_SUPPORT=y, CONFIG_SND_SOC_SOF_MERRIFIELD=m,
- CONFIG_SND_SOC_SOF_APOLLOLAKE_SUPPORT=y, CONFIG_SND_SOC_SOF_APOLLOLAKE=m,
- CONFIG_SND_SOC_SOF_GEMINILAKE_SUPPORT=y, CONFIG_SND_SOC_SOF_GEMINILAKE=m,
- CONFIG_SND_SOC_SOF_CANNONLAKE_SUPPORT=y, CONFIG_SND_SOC_SOF_CANNONLAKE=m,
- CONFIG_SND_SOC_SOF_COFFEELAKE_SUPPORT=y, CONFIG_SND_SOC_SOF_COFFEELAKE=m,
- CONFIG_SND_SOC_SOF_ICELAKE_SUPPORT=y, CONFIG_SND_SOC_SOF_ICELAKE=m,
- CONFIG_SND_SOC_SOF_COMETLAKE=m, CONFIG_SND_SOC_SOF_COMETLAKE_SUPPORT=y,
- � x�������������( ������� X E w $�yfix_0c �������5@ ect �$ % ���������������� 5@ 4@ � G ,X ? 'D d � �
� � � 8 � \ � ` � � � � � � � � � � � � � � � � � � � ,
< \ $
d � � � � @ p � ( � 8 � < 9 � < : $ < G "� H "� I # X # Y #, \ #H ] #h ^ #� b $; d %� e %� f %� l %� t %� u %� v %� w &� x &� y &� � &� � &� � &� � '@ 'T 'X 6 )� )� 6
+� +� � ,@ ,D ,L g ,P h ,T C libXext 1.3.4 1.el8 X.Org X11 libXext runtime library X.Org X11 libXext runtime library `s�Aord1-prod-x86build003.svc.aws.rockylinux.org gNKoji Rocky MIT infrastructure@rockylinux.org System Environment/Libraries http://www.x.org linux x86_64 & ;X � (\A�A�����A큤�� `s�@`s�@`s�@`s�?`s�@`s�@\�5�\�5� d6d421380e93a5759120fc2c59e1406f5ec6459b6679b2f5923fbaf225573237 0fec8da1b5c74ba9919d8f57ba27035f0dfbbd441b2994fbc537c631d3cda608 80767ac915f2f0f94de9efb15f0197a59b6f1e609cae85059f8703272dc3e146 ../../../../usr/lib64/libXext.so.6.4.0 libXext.so.6.4.0 root root root root root root root root root root root root root root root root libXext-1.3.4-1.el8.src.rpm ��������������������������������libXext libXext(x86-64) libXext.so.6()(64bit) @ @ @ @ @ @
@ libX11 libX11.so.6()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 1.5.99.902 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 ^��@\T4�[H�@[6 @Zz�@Y�@Yx�@X��@V�=@V��U�a@S�@S�@S�R@S���Q��Q��@Q�J�Q�J�Q�V@Q8�@Q �P��OX�@O �N�@MO�L�e�Ls�@L�K#��J�1@Ji�@JhP�Jf�@Je��I�2�IK��IH�G��G��G��@F��F)��E"P�D��@D���DP�@C�@C�C�Q@C��@C��@C���C�q�Ct��CX�@C;�@C �C �@Benjamin Tissoires <benjamin.tissoires@redhat.com> - 1.3.4-1 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-11 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-10 Adam Jackson <ajax@redhat.com> - 1.3.3-9 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-8 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-7 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-6 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-5 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.3-4 Peter Hutterer <peter.hutterer@redhat.com> Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.3-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.3-2 Peter Hutterer <peter.hutterer@redhat.com> 1.3.3-1 Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.3.2-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.2-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.2-2 Peter Hutterer <peter.hutterer@redhat.com> 1.3.2-1 Peter Hutterer <peter.hutterer@redhat.com> - 1.3.1-6.20130524gitdfe6e1f3b Peter Hutterer <peter.hutterer@redhat.com> - 1.3.1-5.20130524gitdfe6e1f3b Peter Hutterer <peter.hutterer@redhat.com> 1.3.1-3.20130524gitdfe6e1f3b Peter Hutterer <peter.hutterer@redhat.com> - 1.3.1-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-2 Adam Jackson <ajax@� x�������������`������ X o 9�y �# @�
� �$ ���������������� � �� � � Y after the amount (swbz#22019) - Switch to .9000 version numbers during development - Auto-sync with upstream branch master,
commit c38a4bfd596db2be2b9c1f96715bdc833eab760a:
- malloc: Use compat_symbol_reference in libmcheck (swbz#22050) - Auto-sync with upstream branch master,
commit 596f70134a8f11967c65c1d55a94a3a2718c731d:
- Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 (swbz#22052)
- locale: No warning for non-symbolic character (swbz#22295)
- locale: Allow "" int_curr_Symbol (swbz#22294)
- locale: Fix localedef exit code (swbz#22292)
- nptl: Preserve error in setxid thread broadcast in coredumps (swbz#22153)
- powerpc: Avoid putting floating point values in memory (swbz#22189)
- powerpc: Fix the carry bit on mpn_[add|sub]_n on POWER7 (swbz#22142)
- Support profiling PIE (swbz#22284) - Auto-sync with upstream branch master,
commit d8425e116cdd954fea0c04c0f406179b5daebbb3:
- nss_files performance issue in multi mode (swbz#22078)
- Ensure C99 and C11 interfaces are available for C++ (swbz#21326) - Move /var/db/Makefile to nss_db (#1498900)
- Auto-sync with upstream branch master,
commit 645ac9aaf89e3311949828546df6334322f48933:
- openpty: use TIOCGPTPEER to open slave side fd - Auto-sync with upstream master,
commit 1e26d35193efbb29239c710a4c46a64708643320.
- malloc: Fix tcache leak after thread destruction (swbz#22111)
- powerpc: Fix IFUNC for memrchr.
- aarch64: Optimized implementation of memmove for Qualcomm Falkor
- Always do locking when iterating over list of streams (swbz#15142)
- abort: Do not flush stdio streams (swbz#15436) - Move nss_compat to the main glibc package (#1400538)
- Auto-sync with upstream master,
commit 11c4f5010c58029e73e656d5df4f8f42c9b8e877:
- crypt: Use NSPR header files in addition to NSS header files (#1489339)
- math: Fix yn(n,0) without SVID wrapper (swbz#22244)
- math: Fix log2(0) and log(10) in downward rounding (swbz#22243)
- math: Add C++ versions of iscanonical for ldbl-96, ldbl-128ibm (swbz#22235)
- powerpc: Optimize memrchr for power8
- Hide various internal functions (swbz#18822) - Auto-sync with upstream master,
commit 1e2bffd05c36a9be30d7092d6593a9e9aa009ada:
- Add IBM858 charset (#1416405)
- Update kernel version in syscall-names.list to 4.13
- Add Linux 4.13 constants to bits/fcntl-linux.h
- Add fcntl sealing interfaces from Linux 3.17 to bits/fcntl-linux.h
- math: New generic powf, log2f, logf
- Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
- Mark __dso_handle as hidden (swbz#18822)
- Skip PT_DYNAMIC segment with p_filesz == 0 (swbz#22101)
- glob now matches dangling symbolic links (swbz#866, swbz#22183)
- nscd: Release read lock after resetting timeout (swbz#22161)
- Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
- Fix dlclose/exit race (swbz#22180)
- x86: Add SSE4.1 trunc, truncf (swbz#20142)
- Fix atexit/exit race (swbz#14333)
- Use execveat syscall in fexecve (swbz#22134)
- Enable unwind info in libc-start.c and backtrace.c
- powerpc: Avoid misaligned stores in memset
- powerpc: build some IFUNC math functions for libc and libm (swbz#21745)
- Removed redundant data (LC_TIME and LC_MESSAGES) for niu_NZ (swbz#22023)
- Fix LC_TELEPHONE for az_AZ (swbz#22112)
- x86: Add MathVec_Prefer_No_AVX512 to cpu-features (swbz#21967)
- x86: Add x86_64 to x86-64 HWCAP (swbz#22093)
- Finish change from “Bengali” to “Bangla” (swbz#14925)
- posix: fix glob bugs with long login names (swbz#1062)
- posix: Fix getpwnam_r usage (swbz#1062)
- posix: accept inode 0 is a valid inode number (swbz#19971)
- Remove redundant LC_TIME data in om_KE (swbz#22100)
- Remove remaining _HAVE_STRING_ARCH_* definitions (swbz#18858)
- resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
- Add miq_NI locale for Miskito (swbz#20498)
- Fix bits/math-finite.h exp10 condition (swbz#22082) - Auto-sync with upstream master,
commit b38042f51430974642616a60afbbf96fd0b98659:
- Implement tmpfile with O_TMPFILE (swbz#21530)
- Obsolete pow10 functions
- math.h: Warn about an already-defined log macro - Buil� x�������������������� X G oo�yot rX� 0������� oot �$ � ���������������� � � � � nel/v5.x/ChangeLog-5.10.15] - Updated with the 5.10.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.14] - Updated with the 5.10.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13] - Updated with the 5.10.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12] - Updated with the 5.10.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11] - Updated with the 5.10.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10] - Updated with the 5.10.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9] - Updated with the 5.10.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.8] - Updated with the 5.10.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.7] - Updated with the 5.10.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6] - Updated with the 5.10.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.5]
- CONFIG_BRCMFMAC_SDIO=y, CONFIG_RSI_SDIO=m,
- CONFIG_SSB_SDIOHOST_POSSIBLE=y, CONFIG_MMC=m, CONFIG_MMC_BLOCK=m,
- CONFIG_MMC_BLOCK_MINORS=8, CONFIG_SDIO_UART=m, CONFIG_MMC_SDHCI=m,
- CONFIG_MMC_SDHCI_IO_ACCESSORS=y, CONFIG_MMC_SDHCI_PCI=m,
- CONFIG_MMC_RICOH_MMC=y, CONFIG_MMC_SDHCI_ACPI=m,
- CONFIG_MMC_SDHCI_PLTFM=m, CONFIG_MMC_SDHCI_F_SDH30=m,
- CONFIG_MMC_WBSD=m, CONFIG_MMC_TIFM_SD=m, CONFIG_MMC_SPI=m,
- CONFIG_MMC_CB710=m, CONFIG_MMC_VIA_SDMMC=m, CONFIG_MMC_VUB300=m,
- CONFIG_MMC_USHC=m, CONFIG_MMC_USDHI6ROL0=m, CONFIG_MMC_REALTEK_PCI=m,
- CONFIG_MMC_REALTEK_USB=m, CONFIG_MMC_CQHCI=m, CONFIG_MMC_HSQ=m,
- CONFIG_MMC_TOSHIBA_PCI=m, CONFIG_MMC_MTK=m and
- CONFIG_MMC_SDHCI_XENON=m
- [https://elrepo.org/bugs/view.php?id=1067] - Updated with the 5.10.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.4] - Updated with the 5.10.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.3] - Updated with the 5.10.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.2] - Updated with the 5.10.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.1] - Updated with the 5.10 source tarball.
- CONFIG_LLD_VERSION=0, CONFIG_GENERIC_IRQ_CHIP=y, CONFIG_TASKS_TRACE_RCU=y,
- CONFIG_LD_ORPHAN_WARN=y, CONFIG_ACPI_DPTF=y, CONFIG_DPTF_PCH_FIVR=m,
- CONFIG_HAVE_ARCH_SECCOMP=y, CONFIG_ISA_BUS_API=y, CONFIG_HAVE_STATIC_CALL=y,
- CONFIG_HAVE_STATIC_CALL_INLINE=y, CONFIG_ARCH_WANT_LD_ORPHAN_WARN=y,
- CONFIG_VMAP_PFN=y, CONFIG_WANT_COMPAT_NETLINK_MESSAGES=y,
- CONFIG_XFRM_USER_COMPAT=m, CONFIG_NFT_SYNPROXY=m, CONFIG_QRTR=m,
- CONFIG_QRTR_MHI=m, CONFIG_CAN_MCP251XFD=m, CONFIG_MHI_BUS=m,
- CONFIG_CHELSIO_INLINE_CRYPTO=y, CONFIG_CHELSIO_IPSEC_INLINE=m,
- CONFIG_CHELSIO_TLS_DEVICE=m, CONFIG_PRESTERA=m, CONFIG_PRESTERA_PCI=m,
- CONFIG_PCS_XPCS=m, CONFIG_ATH11K=m, CONFIG_ATH11K_PCI=m,
- CONFIG_TOUCHSCREEN_ADS7846=m, CONFIG_TOUCHSCREEN_AD7877=m,
- CONFIG_TOUCHSCREEN_AD7879=m, CONFIG_TOUCHSCREEN_AD7879_I2C=m,
- CONFIG_TOUCHSCREEN_AD7879_SPI=m, CONFIG_TOUCHSCREEN_ADC=m,
- CONFIG_TOUCHSCREEN_ATMEL_MXT=m, CONFIG_TOUCHSCREEN_AUO_PIXCIR=m,
- CONFIG_TOUCHSCREEN_BU21013=m, CONFIG_TOUCHSCREEN_BU21029=m,
- CONFIG_TOUCHSCREEN_CHIPONE_ICN8505=m, CONFIG_TOUCHSCREEN_CY8CTMA140=m,
- CONFIG_TOUCHSCREEN_CY8CTMG110=m, CONFIG_TOUCHSCREEN_CYTTSP_CORE=m,
- CONFIG_TOUCHSCREEN_CYTTSP_I2C=m, CONFIG_TOUCHSCREEN_CYTTSP_SPI=m,
- CONFIG_TOUCHSCREEN_CYTTSP4_CORE=m, CONFIG_TOUCHSCREEN_CYTTSP4_I2C=m,
- CONFIG_TOUCHSCREEN_CYTTSP4_SPI=m, CONFIG_TOUCHSCREEN_DYNAPRO=m,
- CONFIG_TOUCHSCREEN_HAMPSHIRE=m, CONFIG_TOUCHSCREEN_EETI=m,
- CONFIG_TOUCHSCREEN_EGALAX_SERIAL=m, CONFIG_TOUCHSCREEN_EXC3000=m,
- CONFIG_TOUCHSCREEN_FUJITSU=m, CONFIG_TOUCHSCREEN_GOODIX=m,
- CONFIG_TOUCHSCREEN_HIDEEP=m, CONFIG_TOUCHSCREEN_ILI210X=m,
- CONFIG_TOUCHSCREEN_S6SY761=m, CONFIG_TOUCHSCREEN_GUNZE=m,
- CONFIG_TOUCHSCREEN_EKTF2127=m, CONFIG_TOUCHSCREEN_ELAN=m,
- CONFIG_TOUCHSCREEN_MAX118� x��������������������� X H ss?�ydran�� ���������� nets�$ ���������������� �� �� �� � itivity
- ignore Factory in date tests
- disable opcache.fast_shutdown in default config
- add php56-cgi command in base system - Update to PHP 5.6.2
http://php.net/releases/5_6_2.php - Update to PHP 5.6.1
http://php.net/releases/5_6_1.php
- use default system cipher list by Fedora policy
http://fedoraproject.org/wiki/Changes/CryptoPolicy
- add system php library to default include_path - enable libvpx on EL 6 (with libvpx 1.3.0)
- add php56-phpdbg command in base system - PHP 5.6.0 is GA
- add lsphp56 command in base system - initial spec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix memory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use r� x���������������������� X I us��ytall�1 �* X s).
�$ ���������������� X X X � oraproject.org> 5.4.0-5 Joe Orton <jorton@redhat.com> - 5.4.0-4 Joe Orton <jorton@redhat.com> - 5.4.0-3 Joe Orton <jorton@redhat.com> - 5.4.0-2 Remi Collet <remi@fedoraproject.org> 5.4.0-1 Remi Collet <remi@fedoraproject.org> 5.4.0-0.4.RC8 Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7 Remi Collet <remi@fedoraproject.org> 5.4.0-0.2.RC6 Remi Collet <remi@fedoraproject.org> 5.4.0-0.1.RC6 Remi Collet <remi@fedoraproject.org> 5.3.8-4.4 Remi Collet <remi@fedoraproject.org> 5.3.8-4.3 Adam Jackson <ajax@redhat.com> - 5.3.8-4.2 Marcela Mašláňová <mmaslano@redhat.com> - 5.3.8-3.2 Peter Schiffer <pschiffe@redhat.com> - 5.3.8-3.1 Remi Collet <remi@fedoraproject.org> 5.3.8-3 Remi Collet <remi@fedoraproject.org> 5.3.8-2 Remi Collet <remi@fedoraproject.org> 5.3.8-1 Remi Collet <remi@fedoraproject.org> 5.3.7-1 Joe Orton <jorton@redhat.com> - 5.3.6-4 Remi Collet <Fedora@famillecollet.com> 5.3.6-3 Remi Collet <Fedora@famillecollet.com> 5.3.6-2 Remi Collet <Fedora@famillecollet.com> 5.3.6-1 Joe Orton <jorton@redhat.com> - 5.3.5-6 Caolán McNamara <caolanm@redhat.com> 5.3.5-5 Remi Collet <Fedora@famillecollet.com> 5.3.5-4 Remi Collet <Fedora@famillecollet.com> 5.3.5-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.5-2 Remi Collet <Fedora@famillecollet.com> 5.3.5-1 Remi Collet <rpms@famillecollet.com> 5.3.4-2 Remi Collet <rpms@famillecollet.com> 5.3.4-1.1 Remi Collet <Fedora@famillecollet.com> 5.3.4-1 Remi Collet <Fedora@famillecollet.com> 5.3.3-5 Joe Orton <jorton@redhat.com> - 5.3.3-4 Joe Orton <jorton@redhat.com> - 5.3.3-3 Remi Collet <Fedora@famillecollet.com> 5.3.3-2 Remi Collet <Fedora@famillecollet.com> 5.3.3-1 Remi Collet <Fedora@famillecollet.com> 5.3.2-3 Caolán McNamara <caolanm@redhat.com> 5.3.2-2 Remi Collet <Fedora@famillecollet.com> 5.3.2-1 Joe Orton <jorton@redhat.com> - 5.3.1-3 Joe Orton <jorton@redhat.com> - 5.3.1-2 Remi Collet <Fedora@famillecollet.com> 5.3.1-1 Tom "spot" Callaway <tcallawa@redhat.com> - 5.3.0-7 Tomas Mraz <tmraz@redhat.com> - 5.3.0-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.0-5 Joe Orton <jorton@redhat.com> 5.3.0-4 Joe Orton <jorton@redhat.com> 5.3.0-3 Joe Orton <jorton@redhat.com> 5.3.0-2 Remi Collet <Fedora@famillecollet.com> 5.3.0-1 Remi Collet <Fedora@famillecollet.com> 5.2.10-1 Remi Collet <Fedora@FamilleCollet.com> - 5.2.9-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.2.8-10 Joe Orton <jorton@redhat.com> 5.2.8-9 Joe Orton <jorton@redhat.com> 5.2.8-8 Joe Orton <jorton@redhat.com> 5.2.8-7 Joe Orton <jorton@redhat.com> 5.2.8-5 Joe Orton <jorton@redhat.com> 5.2.8-4 Joe Orton <jorton@redhat.com> 5.2.8-3 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-2 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1.1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1 Joe Orton <jorton@redhat.com> 5.2.6-7 Joe Orton <jorton@redhat.com> 5.2.6-6 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-5 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-4 Joe Orton <jorton@redhat.com> 5.2.6-3 Joe Orton <jorton@redhat.com> 5.2.5-7 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.2.5-6 Joe Orton <jorton@redhat.com> 5.2.5-5 Joe Orton <jorton@redhat.com> 5.2.5-4 Release Engineering <rel-eng at fedoraproject dot org> - 5.2.5-3 Joe Orton <jorton@redhat.com> 5.2.5-2 Joe Orton <jorton@redhat.com> 5.2.4-3 Joe Orton <jorton@redhat.com> 5.2.4-2 Joe Orton <jorton@redhat.com> 5.2.3-9 Joe Orton <jorton@redhat.com> 5.2.3-8 Hans de Goede <j.w.r.degoede@hhs.nl> 5.2.3-7 Joe Orton <jorton@redhat.com> 5.2.3-6 Joe Orton <jorton@redhat.com> 5.2.3-5 Joe Orton <jorton@redhat.com> 5.2.3-4 Joe Orton <jorton@redhat.com> 5.2.3-3 Joe Orton <jorton@redhat.com> 5.2.3-2 Joe Orton <jorton@redhat.com> 5.2.2-4 Joe Orton <jorton@redhat.com> 5.2.2-3 Joe Orton <jorton@redhat.com> 5.2.2-2 Joe Orton <jorton@redhat.com> 5.2.1-5 Joe Orton <jorton@redhat.com> 5.2.1-4 Joe Orton <jorton@redhat.com> 5.2.1-3 Joe Orton <jorton@redhat.com> 5.2.1-2 Joe Orton <jorton@redhat.com> 5.2.0-10 Joe Orton <jorton@redhat.com> 5.2.0-9 Joe Orton <jorton@� x�������������p�������� X J ys��y
- AX ������X rea�$ ���������������� X X X � redhat.com> 5.2.0-8 Joe Orton <jorton@redhat.com> 5.2.0-7 Joe Orton <jorton@redhat.com> 5.2.0-6 Joe Orton <jorton@redhat.com> 5.2.0-5 Joe Orton <jorton@redhat.com> 5.2.0-4 Joe Orton <jorton@redhat.com> 5.2.0-3 Joseph Orton <jorton@redhat.com> 5.1.6-4 Joe Orton <jorton@redhat.com> 5.1.6-3 Joe Orton <jorton@redhat.com> 5.1.6-2 Jesse Keating <jkeating@redhat.com> - 5.1.4-8.1 Joe Orton <jorton@redhat.com> 5.1.4-8 Joe Orton <jorton@redhat.com> 5.1.4-7 Joe Orton <jorton@redhat.com> 5.1.4-6 Radek Vokal <rvokal@redhat.com> 5.1.4-5.1 Joe Orton <jorton@redhat.com> 5.1.4-5 Joe Orton <jorton@redhat.com> 5.1.4-3 Joe Orton <jorton@redhat.com> 5.1.3-3 Joe Orton <jorton@redhat.com> 5.1.2-5 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.3 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.1 Joe Orton <jorton@redhat.com> 5.1.2-4 Joe Orton <jorton@redhat.com> 5.1.2-3 Joe Orton <jorton@redhat.com> 5.1.2-2 Joe Orton <jorton@redhat.com> 5.1.1-8 Joe Orton <jorton@redhat.com> 5.1.1-7 Joe Orton <jorton@redhat.com> 5.1.1-6 Jesse Keating <jkeating@redhat.com> Joe Orton <jorton@redhat.com> 5.1.1-5 Joe Orton <jorton@redhat.com> 5.1.1-4 Joe Orton <jorton@redhat.com> 5.1.1-3 Joe Orton <jorton@redhat.com> 5.1.1-2 Tomas Mraz <tmraz@redhat.com> 5.0.5-6 Joe Orton <jorton@redhat.com> 5.0.5-5 Joe Orton <jorton@redhat.com> 5.0.5-4 Joe Orton <jorton@redhat.com> 5.0.5-3 Joe Orton <jorton@redhat.com> 5.0.4-11 Joe Orton <jorton@redhat.com> 5.0.4-10 Joe Orton <jorton@redhat.com> 5.0.4-9 Joe Orton <jorton@redhat.com> 5.0.4-8 Joe Orton <jorton@redhat.com> 5.0.4-7 Joe Orton <jorton@redhat.com> 5.0.4-6 Joe Orton <jorton@redhat.com> 5.0.4-5 Joe Orton <jorton@redhat.com> 5.0.4-4 Joe Orton <jorton@redhat.com> 5.0.4-3 Joe Orton <jorton@redhat.com> 5.0.4-2 Joe Orton <jorton@redhat.com> 5.0.4-1 Joe Orton <jorton@redhat.com> 5.0.3-5 Joe Orton <jorton@redhat.com> 5.0.3-4 Joe Orton <jorton@redhat.com> 5.0.3-3 Joe Orton <jorton@redhat.com> 5.0.3-2 Joe Orton <jorton@redhat.com> 5.0.3-1 Joe Orton <jorton@redhat.com> 5.0.2-8 Joe Orton <jorton@redhat.com> 5.0.2-7 Joe Orton <jorton@redhat.com> 5.0.2-6 Joe Orton <jorton@redhat.com> 5.0.2-5 Joe Orton <jorton@redhat.com> 5.0.2-4 Joe Orton <jorton@redhat.com> 5.0.1-4 Joe Orton <jorton@redhat.com> 5.0.1-3 Joe Orton <jorton@redhat.com> 5.0.1-2 Joe Orton <jorton@redhat.com> 5.0.1-1 Tom Callaway <tcallawa@redhat.com> Tom Callaway <tcallawa@redhat.com> - Fix Security issue with external entity loading in XML without enabling it
GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc - fix possible buffer overflow in date
- define %php56___phpize and %php56___phpconfig - Fix insufficient random bytes in HTTP Digest authentication for SOAP
GHSA-76gg-c692-v2mw CVE-2023-3247
- use oracle client library version 21.10 - fix #81744: Password_verify() always return true with some hash
CVE-2023-0567
- fix #81746: 1-byte array overrun in common path resolve code
CVE-2023-0568
- fix DOS vulnerability when parsing multipart request body
CVE-2023-0662 - pdo: fix #81740: PDO::quote() may return unquoted string
CVE-2022-31631
- use oracle client library version 21.8 - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
- core: fix #81727 Don't mangle HTTP variable names that clash with ones
that have a specific semantic meaning. CVE-2022-31629
- use oracle client library version 21.7 - use oracle client library version 21.6
- mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
- pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625 - Fix #79971 special character is breaking the path in xml function
CVE-2021-21707 - fix PHP-FPM oob R/W in root process leading to priv escalation
CVE-2021-21703
- use libicu version 69
- use oracle client library version 21.3 - fix intl build on F35 - Fix #81211 Symlinks are followed when creating PHAR archive - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
CVE-2021-21705
- Fix #65689 PDO_Firebrid / exec() does no� x�������������������� X K .8~�y.RC1p� ������5 edor�$ % ���������������� 5 4 6 � #213 from tmzullinger/rawhide
- Allow xdm_t domain to install Nouveau drivers BZ(1570996) - Allow unconfined_domain_type to create libs filetrans named content BZ(1513806) - Allow dnssec_trigger_t domain to read system network state BZ(1570205)
- Add dac_override capability to mailman_mail_t domain
- Add dac_override capability to radvd_t domain
- Update openvswitch policy
- Add dac_override capability to oddjob_homedir_t domain
- Allow slapd_t domain to mmap slapd_var_run_t files
- Rename tang policy to tangd
- Allow virtd_t domain to relabel virt_var_lib_t files
- Allow logrotate_t domain to stop services via systemd
- Add tang policy
- Allow mozilla_plugin_t to create mozilla.pdf file in user homedir with label mozilla_home_t
- Allow snapperd_t daemon to create unlabeled dirs.
- Make httpd_var_run_t mountpoint
- Allow hsqldb_t domain to mmap own temp files
- We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence
- Allow Openvswitch adding netdev bridge ovs 2.7.2.10 FDP
- Add new Boolean tomcat_use_execmem
- Allow nfsd_t domain to read/write sysctl fs files
- Allow conman to read system state
- Allow brltty_t domain to be dbusd system client
- Allow zebra_t domain to bind on babel udp port
- Allow freeipmi domain to read sysfs_t files
- Allow targetd_t domain mmap lvm config files
- Allow abrt_t domain to manage kdump crash files
- gnome_data_filetrans macro should be in optional block
- Allow netutils_t domain to create bluetooth sockets
- Allow traceroute to bind on generic sctp node
- Allow traceroute to search network sysctls
- Allow systemd to use virtio console
- Label /dev/op_panel and /dev/opal-prd as opal_device_t
- Label /run/ebtables.lock as iptables_var_run_t
- Allow udev_t domain to manage udev_rules_t char files.
- Assign babel_port_t label to udp port 6696
- Add new interface lvm_map_config
- Merge pull request #212 from stlaz/patch-1
- Allow local_login_t reads of udev_var_run_t context - Allow networkmanager domain to write to ecryptfs_t files BZ(1566706)
- Allow l2tpd domain to stream connect to sssd BZ(1568160)
- Dontaudit abrt_t to write to lib_t dirs BZ(1566784)
- Allow NetworkManager_ssh_t domain transition to insmod_t BZ(1567630) - Allow certwatch to manage cert files BZ(1561418)
- Allow abrt_dump_oops_t domain to mmap all non security files BZ(1565748)
- Allow gpg_t domain mmap cert_t files Allow gpg_t mmap gpg_agent_t files
- Allow NetworkManager_ssh_t domain use generic ptys. BZ(1565851)
- Allow pppd_t domain read/write l2tpd pppox sockets BZ(1566096)
- Allow xguest user use bluetooth sockets if xguest_use_bluetooth boolean is turned on.
- Allow pppd_t domain creating pppox sockets BZ(1566271)
- Allow abrt to map var_lib_t files
- Allow chronyc to read system state BZ(1565217)
- Allow keepalived_t domain to chat with systemd via dbus
- Allow git to mmap git_(sys|user)_content_t files BZ(1518027)
- removed boinc dev_getattr_*_dev
- Allow iptables_t domain to create dirs in etc_t with system_conf_t labels
- Allow x userdomain to mmap xserver_tmpfs_t files
- Allow sysadm_t to mount tracefs_t
- Allow unconfined user all perms under bpf class BZ(1565738)
- Allow SELinux users (except guest and xguest) to using bluetooth sockets
- Add new interface files_map_var_lib_files()
- Allow user_t and staff_t domains create netlink tcpdiag sockets
- Allow systemd-networkd to read sysctl_t files
- Allow systemd_networkd_t to read/write tun tap devices
- refpolicy: Update for kernel sctp support - Add new boolean redis_enable_notify()
- Label /var/log/shibboleth-www(/.*) as httpd_sys_rw_content_t
- Add new label for vmtools scripts and label it as vmtools_unconfined_t stored in /etc/vmware-tools/
- Allow svnserve_t domain to manage kerberos rcache and read krb5 keytab
- Add dac_override and dac_read_search capability to hypervvssd_t domain
- Label /usr/lib/systemd/systemd-fence_sanlockd as fenced_exec_t
- Allow samba to create /tmp/host_0 as krb5_host_rcache_t
- Add dac_override capability � x�������������`�������� X L io��yAllo�K �������G o cr�$ ���������������� G G G � _cron_system_t to getpw calls
- Allow sudo domains to manage kerberos rcache files
- Allow user_mail_domains to work with courie
- Port definitions necessary for running jboss apps within openshift
- Add support for openstack-nova-metadata-api
- Add support for nova-console*
- Add support for openstack-nova-xvpvncproxy
- Fixes to make privsep+SELinux working if we try to use chage to change passwd
- Fix auth_role() interface
- Allow numad to read sysfs
- Allow matahari-rpcd to execute shell
- Add label for ~/.spicec
- xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
- Devicekit_disk wants to read the logind sessions file when writing a cd
- Add fixes for condor to make condor jobs working correctly
- Change label of /var/log/rpmpkgs to cron_log_t
- Access requires to allow systemd-tmpfiles --create to work.
- Fix obex to be a user application started by the session bus.
- Add additional filename trans rules for kerberos
- Fix /var/run/heartbeat labeling
- Allow apps that are managing rcache to file trans correctly
- Allow openvpn to authenticate against ldap server
- Containers need to listen to network starting and stopping events - Make systemd unit files less specific - Fix zarafa labeling
- Allow guest_t to fix labeling
- corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
- add lxc_contexts
- Allow accountsd to read /proc
- Allow restorecond to getattr on all file sytems
- tmpwatch now calls getpw
- Allow apache daemon to transition to pwauth domain
- Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
- The obex socket seems to be a stream socket
- dd label for /var/run/nologin - Allow jetty running as httpd_t to read hugetlbfs files
- Allow sys_nice and setsched for rhsmcertd
- Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
- Allow setfiles to append to xdm_tmp_t
- Add labeling for /export as a usr_t directory
- Add labels for .grl files created by gstreamer - Add labeling for /usr/share/jetty/bin/jetty.sh
- Add jetty policy which contains file type definitios
- Allow jockey to use its own fifo_file and make this the default for all domains
- Allow mozilla_plugins to use spice (vnc_port/couchdb)
- asterisk wants to read the network state
- Blueman now uses /var/lib/blueman- Add label for nodejs_debug
- Allow mozilla_plugin_t to create ~/.pki directory and content - Add clamscan_can_scan_system boolean
- Allow mysqld to read kernel network state
- Allow sshd to read/write condor lib files
- Allow sshd to read/write condor-startd tcp socket
- Fix description on httpd_graceful_shutdown
- Allow glance_registry to communicate with mysql
- dbus_system_domain is using systemd to lauch applications
- add interfaces to allow domains to send kill signals to user mail agents
- Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
- Lots of new access required for secure containers
- Corosync needs sys_admin capability
- ALlow colord to create shm
- .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
- Add boolean to control whether or not mozilla plugins can create random content in the users homedir
- Add new interface to allow domains to list msyql_db directories, needed for libra
- shutdown has to be allowed to delete etc_runtime_t
- Fail2ban needs to read /etc/passwd
- Allow ldconfig to create /var/cache/ldconfig
- Allow tgtd to read hardware state information
- Allow collectd to create packet socket
- Allow chronyd to send signal to itself
- Allow collectd to read /dev/random
- Allow collectd to send signal to itself
- firewalld needs to execute restorecon
- Allow restorecon and other login domains to execute restorecon - Allow logrotate to getattr on systemd unit files
- Add support for tor systemd unit file
- Allow apmd to create /var/run/pm-utils with the correct label
- Allow l2tpd to send sigkill to pppd
- Allow pppd to stream connect to l2tpd
- Add label for scripts in /etc/gdm/
- Allow sys� x��������������{������� X 5��y
- r�U �������X _DIR�$
���������������� X X X � 5.6.40-32 Remi Collet <remi@remirepo.net> - 5.6.40-31 Remi Collet <remi@remirepo.net> - 5.6.40-30 Remi Collet <remi@remirepo.net> - 5.6.40-29 Remi Collet <remi@remirepo.net> - 5.6.40-28 Remi Collet <remi@remirepo.net> - 5.6.40-27 Remi Collet <remi@remirepo.net> - 5.6.40-26 Remi Collet <remi@remirepo.net> - 5.6.40-25 Remi Collet <remi@remirepo.net> - 5.6.40-24 Remi Collet <remi@remirepo.net> - 5.6.40-23 Remi Collet <remi@remirepo.net> - 5.6.40-22 Remi Collet <remi@remirepo.net> - 5.6.40-21 Remi Collet <remi@remirepo.net> - 5.6.40-20 Remi Collet <remi@remirepo.net> - 5.6.40-19 Remi Collet <remi@remirepo.net> - 5.6.40-18.fc32 Remi Collet <remi@remirepo.net> - 5.6.40-18 Remi Collet <remi@remirepo.net> - 5.6.40-17 Remi Collet <remi@remirepo.net> - 5.6.40-15 Remi Collet <remi@remirepo.net> - 5.6.40-14 Remi Collet <remi@remirepo.net> - 5.6.40-13 Remi Collet <remi@remirepo.net> - 5.6.40-12 Remi Collet <remi@remirepo.net> - 5.6.40-11 Remi Collet <remi@remirepo.net> - 5.6.40-9 Remi Collet <remi@remirepo.net> - 5.6.40-8 Remi Collet <remi@remirepo.net> - 5.6.40-7 Remi Collet <remi@remirepo.net> - 5.6.40-6 Remi Collet <remi@remirepo.net> - 5.6.40-5 Remi Collet <remi@remirepo.net> - 5.6.40-4 Remi Collet <remi@remirepo.net> - 5.6.40-3 Remi Collet <remi@remirepo.net> - 5.6.40-2 Remi Collet <remi@remirepo.net> - 5.6.40-1 Remi Collet <remi@remirepo.net> - 5.6.39-1 Remi Collet <remi@remirepo.net> - 5.6.38-2 Remi Collet <remi@remirepo.net> - 5.6.38-1 Remi Collet <remi@remirepo.net> - 5.6.37-2 Remi Collet <remi@remirepo.net> - 5.6.37-1 Remi Collet <remi@remirepo.net> - 5.6.36-1 Remi Collet <remi@remirepo.net> - 5.6.35-1 Remi Collet <remi@remirepo.net> - 5.6.34-2 Remi Collet <remi@remirepo.net> - 5.6.34-1 Remi Collet <remi@fedoraproject.org> 5.6.33-1 Remi Collet <remi@fedoraproject.org> 5.6.32-1 Remi Collet <remi@fedoraproject.org> - 5.6.31-4 Remi Collet <remi@fedoraproject.org> - 5.6.31-3 Remi Collet <remi@fedoraproject.org> 5.6.31-2 Remi Collet <remi@fedoraproject.org> 5.6.31-1 Remi Collet <remi@remirepo.net> - 5.6.30-5 Remi Collet <remi@remirepo.net> - 5.6.30-4 Remi Collet <remi@fedoraproject.org> 5.6.30-3 Remi Collet <remi@fedoraproject.org> 5.6.30-1 Remi Collet <remi@fedoraproject.org> 5.6.30-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.29-1 Remi Collet <remi@fedoraproject.org> 5.6.29-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.28-1 Remi Collet <remi@fedoraproject.org> 5.6.28-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.27-1 Remi Collet <remi@fedoraproject.org> 5.6.27-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.26-1 Remi Collet <remi@fedoraproject.org> 5.6.26-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.25-1 Remi Collet <remi@fedoraproject.org> 5.6.25-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.24-1 Remi Collet <remi@fedoraproject.org> 5.6.24-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.23-1.1 Remi Collet <remi@fedoraproject.org> 5.6.23-1 Remi Collet <remi@fedoraproject.org> 5.6.23-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.22-1 Remi Collet <remi@fedoraproject.org> 5.6.22-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.21-1 Remi Collet <remi@fedoraproject.org> 5.6.21-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.20-1 Remi Collet <remi@fedoraproject.org> 5.6.20-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.19-2 Remi Collet <remi@fedoraproject.org> 5.6.19-1 Remi Collet <remi@fedoraproject.org> 5.6.19-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.18-1 Remi Collet <remi@fedoraproject.org> 5.6.18-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.18-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.17-1 Remi Collet <remi@fedoraproject.org> 5.6.17-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.16-1 Remi Collet <remi@fedoraproject.org> 5.6.16-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.15-1 Remi Collet <remi@fedoraproject.org> 5.6.15-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.14-1 Remi Collet <remi@fedoraproject.org> 5.6.14-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.13-1 Remi Collet <remi@fedoraproject.org> 5.6.12-1 Remi Collet <remi@fedoraproject.org> 5.6.� x�������������@k������� X buQ�yext.H� s������e� op.p�$ u ���������������� e� �F �� � 3.13.1-233 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-231 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-228 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-222 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-221 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219 Colin Walters <walters@redhat.com> - 3.13.1-218 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-216 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-215 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-214 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-213 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-212 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-210 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-209 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-208 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-207 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-206 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-205 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-204 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-203 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-202 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-201 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-200 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-199 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-198 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-197 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-196 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-195 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-194 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-193 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-192 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-188 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-187 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-186 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-185 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-184 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-183 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-182 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-181 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-180 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-179 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-178 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-177 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-176 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-175 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-174 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-173 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-172 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-171 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-170 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-169 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-168 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-167 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-166 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-165 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-164 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-163 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-162 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-161 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-159 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-158 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-157 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-156 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-155 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-154 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-153 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-151 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-149 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-148 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-147 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-146 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-145 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-144 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-143 Lukas� x��������������Z������� X o ��yl sp�! �|�������� nitr�$ } ���������������� �� �� �� � together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
- Fix label on irclogs in the homedir - Modify xdm_write_home to allow create files/links in /root with xdm_home_t
- Add more fixes for https://fedoraproject.org/wiki/Changes/XorgWithoutRootRights
- Add xserver_dbus_chat() interface
- Add sysnet_filetrans_named_content_ifconfig() interface
- Change userdom_use_user_inherited_ttys to userdom_use_user_ttys for systemd-tty-ask
- Turn on cron_userdomain_transition by default for now. Until we get a fix for #1063503
- Allow lscpu running as rhsmcertd_t to read sysinfo
- Allow virt domains to read network state
- Added pcp rules
- Allow ctdbd to connect own ports
- Fix samba_export_all_rw booleanto cover also non security dirs
- Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
- Allow neutron to create /run/netns with correct labeling
- Allow to run ip cmd in neutron_t domain
- Allow rpm_script_t to dbus chat also with systemd-located
- Fix ipa_stream_connect_otpd() - Allow block_suspend cap2 for systemd-logind and rw dri device
- Add labeling for /usr/libexec/nm-libreswan-service
- Allow locallogin to rw xdm key to make Virtual Terminal login providing smartcard pin working
- Add xserver_rw_xdm_keys()
- Allow rpm_script_t to dbus chat also with systemd-located
- Fix ipa_stream_connect_otpd()
- update lpd_manage_spool() interface
- Allow krb5kdc to stream connect to ipa-otpd
- Add ipa_stream_connect_otpd() interface
- Allow vpnc to unlink NM pids
- Add networkmanager_delete_pid_files()
- Allow munin plugins to access unconfined plugins
- update abrt_filetrans_named_content to cover /var/spool/debug
- Label /var/spool/debug as abrt_var_cache_t
- Allow rhsmcertd to connect to squid port
- Make docker_transition_unconfined as optional boolean
- Allow certmonger to list home dirs - Make docker as permissive domain - Allow bumblebeed to send signal to insmod
- Dontaudit attempts by crond_t net_admin caused by journald
- Allow the docker daemon to mounton tty_device_t
- Add addtional snapper fixes to allo relabel file_t
- Allow setattr for all mountpoints
- Allow snapperd to write all dirs
- Add support for /etc/sysconfig/snapper
- Allow mozilla_plugin to getsession
- Add labeling for thttpd
- Allow sosreport to execute grub2-probe
- Allow NM to manage hostname config file
- Allow systemd_timedated_t to dbus chat with rpm_script_t
- Allow lsmd plugins to connect to http/ssh/http_cache ports by default
- Add lsmd_plugin_connect_any boolea
- Add support for ipset
- Add support for /dev/sclp_line0
- Add modutils_signal_insmod()
- Add files_relabelto_all_mountpoints() interface
- Allow the docker daemon to mounton tty_device_t
- Allow all systemd domains to read /proc/1
- Login programs talking to journald are attempting to net_admin, add dontaudit
- init is not gettar on processes as shutdown time
- Add systemd_hostnamed_manage_config() interface
- Make unconfined_service_t valid in enforcing
- Remove transition for temp dirs created by init_t
- gdm-simple-slave uses use setsockopt
- Add lvm_read_metadata() - Make unconfined_service_t valid in enforcing
- Remove transition for temp dirs created by init_t
- gdm-simple-slave uses use setsockopt
- Treat usermodehelper_t as a sysctl_type
- xdm communicates with geo
- Add lvm_read_metadata()
- Allow rabbitmq_beam to connect to jabber_interserver_port
- Allow logwatch_mail_t to transition to qmail_inject and queueu
- Added new rules to pcp policy
- Allow vmtools_helper_t to change role to system_r
- Allow NM to dbus chat with vmtools - Add labeling for /usr/sbin/amavi
- Colin asked for this program to be treated as cloud-init
- Allow ftp services to manage xferlog_t
- Fix vmtools policy to allow user roles to access vmtools_helper_t
- Allow block_suspend cap2 for ipa-otpd
- Allow certmonger to search home content
- Allow pkcsslotd to read users state
- Allow exim to use pam stack to check passwords
- Add labeling for /usr/sbin/amavi
- Colin asked for this program to be treated as cloud-init
- � x�������������0J������� X M b�y p� pV������� � �$ ���������������� � � � � br> - 5.4.46-8.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.46-7.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.46-6.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.46-5.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.46-4.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.45-3.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.45-2.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.45-1.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.44-3.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.44-2.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.44-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.42-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.41-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.40-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.4.38-1 Luiz Viana <lviana@include.io> - 5.4.34-1 - Fixed interbase for FPM - Porting to Centos 8. Changed firebird-libfbclient to libfbclient2 dependency,
switch "with-libmysql" from 1 to 0. Hardcoded /usr/bin/apxs to configure path.
- Added pdo_firebird to pdo package.
- Added custom libs dependency (OpenSSL, cURL, Cyrus-SASL, IMAP, KRB5, net-snmp, OpenLDAP, LIBPQ and LIBDB) - Enabling interbase/firebird module - Include libc-client-2007f package requirement for imap package - Enabling imap module - Include pdo_dblib in pdo packaging - Enabling mssql module - Enabling mcrypt module - Rolling back inclusion of ExecStartPre on unit service file - Change start,min and max servers for www pool - New upstream release - mkdir with -p flag doesnt show error if dir already exists - Include creation of /run/php-fpm dir on ExecStartPre - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - PHP software collection release
- new upstream stable release, 5.4
- based on Red Hat 7 PHP specfile builder 1601071004
5.4.45-3.el8 5.4.45-3.el8 5.4.45-3.el8 pdo.ini pdo_dblib.ini pdo_firebird.ini pdo_sqlite.ini sqlite3.ini pdo.so pdo_dblib.so pdo_firebird.so pdo_sqlite.so sqlite3.so .build-id 44 b42e1ee83777f6e9e1d4123e15cc728e67b2dd 64 bebe361e55a5c6f2df1ff6c2ae7a347751a6e9 ec c074b03d0bad71a3c7d142f80fcc8822f8edb0 ee 1916311aa3ba1cb4c1a1c4bc9d1af73b5c07d7 f4 b0b92c6a59e58f87b0009761fc2442bd1eecfe /etc/php/5.4/php.d/ /opt/lc/php/5.4/lib64/php/modules/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/44/ /usr/lib/.build-id/64/ /usr/lib/.build-id/ec/ /usr/lib/.build-id/ee/ /usr/lib/.build-id/f4/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee1916311aa3ba1cb4c1a1c4bc9d1af73b5c07d7, with debug_info, not stripped, too many notes (256) ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44b42e1ee83777f6e9e1d4123e15cc728e67b2dd, with debug_info, not stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecc074b03d0bad71a3c7d142f80fcc8822f8edb0, with debug_info, not stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=64bebe361e55a5c6f2df1ff6c2ae7a347751a6e9, with debug_info, not stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, Bui� x��������������9������� X N at��yn mo��������(C � onf-�$ t ���������������� � � � � /s390x - Don't build kbdrate on s390/s390x
- Don't make the pivot_root.8 man page executable(!) - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login
acquisition of controlling terminal). - fix permissions problem with vipw & shadow files, again (doh!) - added patch from Olaf Kirch to fix possible pwent structure overwriting - fdisk patch from arjan - Don't include cfdisk, since it appears to be an even bigger pile of junk than fdisk? :) - don't require usermode - Incorporate kbdrate back in. - revert the patch that calls setsid() in login that we had reverted
locally but got integrated upstream (#46223) - correct s390x patch - Add my megapatch (various bugs)
- Include pivot_root (#44828) - make shadow files 0400, not 0600 - fix permissions problem with vipw & shadow files - update to 2.11f, remove any merged patches
- add s390x patches for somewhat larger swap - added --verbose patch to mkcramfs; it's much quieter by default now - removed warning about starting partitions on cylinder 0 -- swap version2
makes it unnecessary - Fix up s390x support - Fix up login for real (a console session should be the controlling tty)
by reverting to 2.10s code (#36839, #36840, #39237)
- Add man page for agetty (#39287)
- 2.11b, while at it - /sbin/nologin from OpenBSD added. - Fix up login - exiting immediately even if the password is correct
is not exactly a nice feature.
- Make definite plans to kill people who update login without checking
if the new version works ;) - upgraded to 2.11a (kbdrate moved to kbd, among other things)
- turned off ALLOW_VCS_USE
- modified mkcramfs to not use a large number of file descriptors
- include mkfs.bfs - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
(fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop) - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
coding 4096 (fixes mkcramfs on alpha...) - added mkcramfs (from linux/scripts/mkcramfs) - fixed bug #29131, where ipc.info didn't have an info dir entry,
added the dir entry to ipc.texi (Patch58) - use lang finder script
- install info files - reverted login patch; seems to cause problems
- added agetty - updated kill man page
- added patch to fix vipw race
- updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
- added patch to disassociate login from tty, session, and pgrp - fixed problem w/ empty extended partitions
- added patch to fix the date in the more man page
- set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
- fixed fdisk -l /Proc/partitions parsing
- updated to 2.10s - danish translations added - fix segfault in login in btmp patch (#24025) - ported to s390 - update to 2.10p
- update patch37 to newer fdisk version - update to 2.10o
- fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
- login: not installed suid
- getopt: by default install aux files in /usr/share/misc
- update to 2.10n:
- added blockdev.8
- change to elvtune (andrea)
- fixed overrun in agetty (vii@penguinpowered.com)
- shutdown: prefer umounting by mount point (rgooch)
- fdisk: added plan9
- fdisk: remove empty links in chain of extended partitions
- hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
- script: added -f (flush) option (Ivan Schreter)
- script: added -q (quiet) option (Per Andreas Buer)
- getopt: updated to version 1.1.0 (Frodo Looijaard)
- Czech messages (Jiri Pavlovsky)
- login.1 man page had not /var/spool/mail path (#16998).
- sln.8 man page (but not executable) included (#10601).
- teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610). - rebuild to cope with glibc locale binary incompatibility, again - setfdprm should open with O_WRONLY, not 3. - fdformat should open with O_WRONLY, not 3. - make 'look' look in /usr/share/dict - put /usr/local/sbin:/usr/local/bin in root's path - rebuild to cope with glibc locale binary incompatibility - automatic rebuild - enable hwclock to use /dev/efirtc on ia64 (gettext is fun. :( ) - move cfdisk to /usr/s� x�������������)������� X O ht6�y//wwh4 x
ux/k�$ ���������������� �� � Add file triggers to do ldconfig calls automatically - Auto-sync with upstream branch master,
commit 21c0696cdef617517de6e25711958c40455c554f:
- locale: Implement alternative month names (swbz#10871)
- locale: Change month names for pl_PL (swbz#10871) - Unconditionally build without libcrypt - Remove deprecated libcrypt, gets replaced by libxcrypt
- Add applicable Requires on libxcrypt - Drop static PIE support on aarch64. It leads to crashes at run time.
- Remove glibc-rpcgen subpackage. See rpcsvc-proto. (#1531540) - Correct the list of static PIE architectures (#1247050)
- glibc_post_upgrade: Remove process restart logic
- glibc_post_upgrade: Integrate into the build process
- glibc_post_upgrade: Do not clean up tls subdirectories
- glibc_post_upgrade: Drop ia64 support
- Remove architecture-specific symbolic link for iconvconfig
- Auto-sync with upstream branch master,
commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
- powerpc: Fix syscalls during early process initialization (swbz#22685) - Enable static PIE support on i386, x86_64 (#1247050)
- Remove add-on support (already gone upstream)
- Rework test suite status reporting
- Auto-sync with upstream branch master,
commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
- malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
- x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
- aarch64: Update bits/hwcap.h for Linux 4.15
- Add NT_ARM_SVE to elf.h - CVE-2017-14062, CVE-2016-6261, CVE-2016-6263:
Use libidn2 for IDNA support (#1452750) - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
(#1533837)
- elf: Synchronize DF_1_* flags with binutils (#1439328)
- Auto-sync with upstream branch master,
commit 860b0240a5645edd6490161de3f8d1d1f2786025:
- aarch64: fix static pie enabled libc when main is in a shared library
- malloc: Ensure that the consolidated fast chunk has a sane size - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
- Use unversioned Supplements: for langpacks (#1490725)
- Auto-sync with upstream branch master,
commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
- hu_HU locale: Avoid double space (swbz#22657)
- math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
(swbz#22702) - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
- Introduce libnsl subpackage and remove NIS headers (#1531540)
- Use versioned Obsoletes: for libcrypt-nss.
- Auto-sync with upstream branch master,
commit 08c6e95234c60a5c2f37532d1111acf084f39345:
- nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
- math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693) - nptl: Fix stack guard size accounting (#1527887)
- Remove invalid Obsoletes: on glibc-header provides
- Require python3 instead of python during builds
- Auto-sync with upstream branch master,
commit 09085ede12fb9650f286bdcd805609ae69f80618:
- math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
- x86-64: Add sincosf with vector FMA - Add glibc-rpcgen subpackage, until the replacement is packaged (#1531540) - Auto-sync with upstream branch master,
commit 579396ee082565ab5f42ff166a264891223b7b82:
- nptl: Add test for callee-saved register restore in pthread_exit
- getrlimit64: fix for 32-bit configurations with default version >= 2.2
- elf: Add linux-4.15 VDSO hash for RISC-V
- elf: Add RISC-V dynamic relocations to elf.h
- powerpc: Fix error message during relocation overflow
- prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678) - Remove sln (#1531546)
- Remove Sun RPC interfaces (#1531540)
- Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
- Auto-sync with upstream branch master,
commit f1a844ac6389ea4e111afc019323ca982b5b027d:
- CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
- i386: In makecontext, align the stack before calling exit (swbz#22667)
- x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
- elf: check for rpath emptiness before making a copy � x�������������x������� X P fi �y- Adص �3 � Add �$ ���������������� � � � D g� ? g d � �
� � � W � � � � � � � � � � � � ( � . 8 p �
� � n
| � � @ d � � (
0 (
e 8
l > 9 d > : A� > F `� G `� H `� I a0 X a@ Y aH \ ah ] a� ^ b� b b� d d e d f d l d t d4 u dl v d� w e� x f y fL z f� � f� � f� � f� � g g g$
g4 g] � g� g� g� g g� h g� C bpftool 5.15.123 9.el8 Inspection and simple manipulation of eBPF programs and maps. This package provides the bpftool which allows inspection and simple
manipulation of eBPF programs and maps. d�c�builder0001.linux.locaweb.com.br 4��GPLv2 System Environment/Kernel https://www.kernel.org/ linux x86_64 �� 3�H % } 6 � T � � 8 � ] � v���큤���������������������� d�b�d�c d�b�d�b�d�b�d�b�d�b�d�b�d�b�d�b�d�b�d�b�d�b�d�b�f91f22e212071d951d82403f0942428f77b3b9522bf8465d45ba5f5f03da0103 a8ec45727cdbd7e81d2a56793e7903817a1e86d493a22674144cf77f3be7e65f 3917dbc4e445a09eb38903bb8d6022c7d150503a9a8022461aa7bc61399467b8 0d6764cbe0c157bad085775aedbfc38c00bdd1631bd10faff7ab64a449427394 7ead7b91b4c7ff423554b478be02c79de8402c2a8913b63242638fbcc3451653 708284867d452d831bf8b99b133cbd00a567b94fbd1182c4d5e6e06b33f2ea43 28a10242093adf9508fe4508a81cde21cb624c41b07f29b53b8d704fa22c2307 ad8635921347e2af83a16e96eaad855a21f7e7f9fd20acc32b5a2f94623eaa86 0936d9d276c99e02de9ca851266202be5d68eabf6d5e9c5c87cd7ccc7c8e377f b6a8b66db85cfb750a2d9a8c39c399a8b194d97a8f4b8a2560cc0d85e794cfcc 9e31294566ef6797e0c532ba08734fc2eec481866117f1233343accd1911892c c1ec3764b5b456d4643f5bb68d9bc1b6378f64307e420e8726477838f85bca34 cd395981b95f0811a90b23c3dedf5e6e61ec25db0a50658dd5f5b373bb236031 2888a5d20eca622b34827aae11a8ae787e0afe81d5ba33102bb809034791b481 root root root root root root root root root root root root root root root root root root root root root root root root root root root root kernel-ml-5.15.123-9.el8.nosrc.rpm ��������������������������������������������������������bpftool bpftool(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ libc.so.6()(64bit) libc.so.6(GLIBC_2.11)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.22)(64bit) libc.so.6(GLIBC_2.26)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.9)(64bit) libcap.so.2()(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libelf.so.1()(64bit) libelf.so.1(ELFUTILS_1.0)(64bit) libelf.so.1(ELFUTILS_1.5)(64bit) libz.so.1()(64bit) libz.so.1(ZLIB_1.2.0)(64bit) libz.so.1(ZLIB_1.2.3.3)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d�@d��@d��@d���d� �d�7�d���d�@d}�@du�@doM�df@d`�@dO��dI@dA)@d9@@d.�@d%y�d ?@dV@d@d
��d
��d m@d�@d�@c��@c�U@c��@c��@c��c�T@c��@c��@c@c�G�c�$@c�F�c�R@c���c��c�:@c���ct�cn9@cd��c]�cZr�cJ��cF�@c>�@c47@c.�@c)�@c#�c*�c*�c6@c��cd@co�b�)�b��@b�c@b� @b��bڑ@b�V�bγ�b� @b���b�>�b�J@b�U�b�@b�� x��������������������� X r *�y �t � �$ ���������������� � L � ? � d � � � � ) � G � H � L � | � � � � � � � � 5 � A � d � j q 8 P \
h �
8 P n � � � , � ( 9 8 @ 9 < : Q` @
x G
� H
� I
� X
� Y
� \ ] ^ � b � d
% e
* f
- l
/ t
H u
` v
x w , x D y \ � ` � > � D � H � d � h � n � � � � � 6
7 � x | � g � h � C glibc-all-langpacks 2.28 251.el8_10.31 All language packs for glibc. i���ord1-prod-x86build006.svc.aws.rockylinux.org �Rocky Linux 8 Rocky LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL infrastructure@rockylinux.org Unspecified http://www.gnu.org/software/glibc/ linux x86_64 -- In the postun we remove the locale cache if unstalling.
-- (build-locale-archive will delete the archive during an upgrade.)
if arg[2] == 0 then
os.remove("/usr/lib/locale/locale-archive")
end ) �d@ �d@
$A�A������� i���i���i���i��\i��\i��� face24cc79abb9c2375141895b5650c2d65ce4f37d35b0a60af8b6e52b6ff251 901e7148e74abd268010a93f540a60857630abeca304e2d657940768ba231e7c ../../../../usr/sbin/build-locale-archive @ root root root root root root root root root root root root glibc-2.28-251.el8_10.31.src.rpm �����������������������glibc-all-langpacks glibc-all-langpacks(x86-64) glibc-langpack
@ glibc glibc-common rpmlib(BuiltinLuaScripts) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rpmlib(ScriptletExpansion) rtld(GNU_HASH) 2.28-251.el8_10.31 2.28-251.el8_10.31 4.2.2-1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.9.0-1 4.14.3 iwW@in �in �ij(@i �hߺ�h� @hA��hA��h4W�h$��h��h y@h>�g���g�=�g�@g�;�g���g�i�gV�g? �g4��g1�g�@f�o@f�?@f��@f���f+�@f �e��e���e�L@e���e�(�ez�@es@e`�@e\��e[J@eN@e7��e2k�e-%�e-%�e
�e �@e �@e �@eG@e�@d�@d�h�d�.@d��d�
�d�s@d��@d��@d��@dkY@df@dRL�cʂ@c�E�c��@c|��cws�cc�@cV~@cIO@cG��c=q�c47@c)�@c)�@c)�@cd@c�@bڑ@b�V�b��@b��b�=�b�w@b��@b�<�bzS�brj�bg�bb��bL/@b0�b/.@b+9�b(��b%�b%�b!�@a�@a��@a�a�@a�N�a�+@a�+@a�+@a�6�a�5�a�A@a�A@a�A@a�c�a�@a�z�a��a��@a��@a��@a��@a{�@af�@af�@a]��a�a�`��`̊�`��`���`�e@`v�@`dd@`[)�`S@�`S@�`P��`OL@`OL@`OL@` 3@`@`x@_�@_إ@_�
�_��_���_���_�:�_� @_� �_�"�_��@_��@_{
�_w@_w@_d�@_cO�^�y�^�V@^�2�^�>@^��@^�@^���^���^�k@^�k@^�%@^�%@^�%@^�%@^��^��^��^��^��^��^��^}�^}�^{G�^{G�^{G�^ P@]�}@]�e@]�e@]��]��]�A�]�A�]�A�]�A�]�A�]��@]µ�]µ�]µ�]µ�]��]� @]� @]��]��]��]��]�{@]�)�]��@]��@]��@]��]5�@]5�@]5�@]5�@]0_@]0_@]�@] �@\�F@\� @\� �\� �\�@\�9�\�9�\�9�\ޢ@\�\@\��\Ɋ@\��\��\��@\��@\���\��\�}�\�N�\�@\y �\�@\�@\I�\I�\w�\&@[��@[��@[�@[�@[�@[�@[�@[�@[�[�[�v�[�v�[�v�[�v�[�v�[�v�[�v�[�<@[��@[�t�[�t�[�t�[�t�[��@[��@[���[���[���[r�@[r�@[r�@[qr�[m~@[b�@[b�@[a��[^��[Y��[H�@[E�@[E�@[E�@[D��[?Y�[?Y�[>@[<��[<��[:�[6 @[4�[+�@[+�@['��['��['��[5@[��[W�[W�Z�n�Z���Z���Z�Z�U�Z��@Z��@Z���Z��Z�k�Z���Z��@Z��@Z���Z��@Z�$�Zz�@Zz�@ZxG@Zp^@Zo �Zo �Zo �Ze�@Ze�@Za�Za�Za�Za�Z_:�Z\��ZX�@ZWQ�ZV @ZS]@ZS]@ZOh�Z<�Z1@Z1@Z'�Z%8�Z �@Z�@Zr@Z�@Y�6�Y��@Y��Y��Y�@Y��Y�d�Y�p@Y��@Yχ@Y�@@Y�K�Y���Y��Y�@Y���Y� �Y�� x��������������������� X R ll��yrows���������
�������� t to�$ F ���������������� �� �� �� � t] child from plautrba@redhat.com
- Tor uses a new port
- Remove bin_t for authconfig.py
- Fix so only one call to userdom_home_file_trans
- Allow home_manager_types to create content with the correctl label
- Fix all domains that write data into the homedir to do it with the correct label
- Change the postgresql to use proper boolean names, which is causing httpd_t to
- not get access to postgresql_var_run_t
- Hostname needs to send syslog messages
- Localectl needs to be able to send dbus signals to users
- Make sure userdom_filetrans_type will create files/dirs with user_home_t labeling by default
- Allow user_home_manger domains to create spam* homedir content with correct labeling
- Allow user_home_manger domains to create HOMEDIR/.tvtime with correct labeling
- Add missing miscfiles_setattr_man_pages() interface and for now comment some rules for userdom_filetrans_type to make build process working
- Declare userdom_filetrans_type attribute
- userdom_manage_home_role() needs to be called withoout usertype attribute because of userdom_filetrans_type attribute
- fusefsd is mounding a fuse file system on /run/user/UID/gvfs - Man pages are now generated in the build process
- Allow cgred to list inotifyfs filesystem - Allow gluster to get attrs on all fs
- New access required for virt-sandbox
- Allow dnsmasq to execute bin_t
- Allow dnsmasq to create content in /var/run/NetworkManager
- Fix openshift_initrc_signal() interface
- Dontaudit openshift domains doing getattr on other domains
- Allow consolehelper domain to communicate with session bus
- Mock should not be transitioning to any other domains, we should keep mock_t as mock_t
- Update virt_qemu_ga_t policy
- Allow authconfig running from realmd to restart oddjob service
- Add systemd support for oddjob
- Add initial policy for realmd_consolehelper_t which if for authconfig executed by realmd
- Add labeling for gnashpluginrc
- Allow chrome_nacl to execute /dev/zero
- Allow condor domains to read /proc
- mozilla_plugin_t will getattr on /core if firefox crashes
- Allow condor domains to read /etc/passwd
- Allow dnsmasq to execute shell scripts, openstack requires this access
- Fix glusterd labeling
- Allow virtd_t to interact with the socket type
- Allow nmbd_t to override dac if you turned on sharing all files
- Allow tuned to created kobject_uevent socket
- Allow guest user to run fusermount
- Allow openshift to read /proc and locale
- Allow realmd to dbus chat with rpm
- Add new interface for virt
- Remove depracated interfaces
- Allow systemd_domains read access on etc, etc_runtime and usr files, also allow them to connect stream to syslog socket
- /usr/share/munin/plugins/plugin.sh should be labeled as bin_t
- Remove some more unconfined_t process transitions, that I don't believe are necessary
- Stop transitioning uncofnined_t to checkpc
- dmraid creates /var/lock/dmraid
- Allow systemd_localed to creatre unix_dgram_sockets
- Allow systemd_localed to write kernel messages.
- Also cleanup systemd definition a little.
- Fix userdom_restricted_xwindows_user_template() interface
- Label any block devices or char devices under /dev/infiniband as fixed_disk_device_t
- User accounts need to dbus chat with accountsd daemon
- Gnome requires all users to be able to read /proc/1/ - virsh now does a setexeccon call
- Additional rules required by openshift domains
- Allow svirt_lxc_domains to use inherited terminals, needed to make virt-sandbox-service execute work
- Allow spamd_update_t to search spamc_home_t
- Avcs discovered by mounting an isci device under /mnt
- Allow lspci running as logrotate to read pci.ids
- Additional fix for networkmanager_read_pid_files()
- Fix networkmanager_read_pid_files() interface
- Allow all svirt domains to connect to svirt_socket_t
- Allow virsh to set SELinux context for a process.
- Allow tuned to create netlink_kobject_uevent_socket
- Allow systemd-timestamp to set SELinux context
- Add support for /var/lib/systemd/linger
- Fix ssh_sysadm_login to be working on MLS as expected - Rename files_rw_inherited_� x�������������@������ X S �D�y���* + �L oj�$ ���������������� �L �L �L � ucktype documentation - add --enable-user-session to ship systemd user bus units - Update to 1.10.0 - Adjust configure calls to make LDFLAGS patch unneccesary - Link libdbus with -z now - Update to 1.9.20 - Update to 1.9.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 1.9.16 - Update to 1.9.14
- Update man page globs in files section
- Build tests in a separate build directory
- Enable installed tests, with new -tests subpackage
- Allow extra dependencies for tests to be disabled independently of check - bump release and rebuild so that koji-shadow can rebuild it
against new gcc on secondary arch - Update to 1.8.16
- Fixes CVE-2015-0245 (fd.o#88811) - Update to 1.8.14 - Relax subpackage dependencies (#1175837) - Drop bindir patch, and update to comply with UsrMove
- Correct license description for multiple licenses
- Use macroized systemd scriptlets (#850083)
- Add some more documentation from the upstream tarball
- Tighten subpackage dependencies by using %{?_isa}
- Use --with-tests to conditionalize test dependencies
- Use /run instead of /var/run
- Remove obsolete dbus.target.wants (#1084087) - Update to 1.8.12 (#1168438)
- Fixes CVE-2014-3635 (fd.o#83622)
- Fixes CVE-2014-3636 (fd.o#82820)
- Fixes CVE-2014-3637 (fd.o#80559)
- Fixes CVE-2014-3638 (fd.o#81053)
- Fixes CVE-2014-3639 (fd.o#80919)
- Fixes CVE-2014-7824 (fd.o#85105) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - New upstream version
- Fixes CVE-2014-3477 (fd.o#80163)
- Fixes CVE-2014-3533 (fd.o#79694) - New upstream version:
- Fixes CVE-2014-3477 (fd.o#78979): "local DoS in dbus-daemon"
- Drop "make check" for now, per http://lists.freedesktop.org/archives/dbus/2014-June/016223.html
- BR systemd-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Adapt to unversioned docdirs; don't ship all docs in main package.
- Fix bogus dates in %changelog and tabs vs spaces warning. - Test rebuild to see if we are affected by cast-align warnings now. - New upstream version
- Added backported patch which should fix the test suite; thanks to
Yanko Kaneti for the suggestion. - Add patch to fix test-marshal on s390. - Find all logs automake has hidden and cat them for visibility
into the mock logs. - Enable all upstream tests
Resolves: #955532
This is fairly hacky; a much better replacement would be
something like the InstalledTests system. But we have to live
with rpm and stuff for now... - New upstream release
- CVE-2013-2168 - Hardened build - Add patch from Matej Cepl to enable check section, modified by me
to use common configure opts. - minor .spec cleanups
- tighten lib deps via %{?_isa}
- drop old Conflicts/Obsoletes/patches - Drop systemd-sysv-convert in trigger, and resulting dependency (#852822) - 1.6.8 - 1.6.6 - CVE-2012-3524 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Update to 1.6.0 - Make D-Bus work in containers - Update to 1.4.20; closes #806082
- Ensure /var/lib/dbus exists; this seems to have been
dropped from upstream build rules.
- Adapt to documentation actually being installed - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled.
- https://bugzilla.redhat.com/show_bug.cgi?id=732426 - Drop SysV support, #697523 (from Jóhann B. Guðmundsson <johannbg@gmail.com>) - New upstream version
- Drop XML docs patch which is now upstream
- Drop devhelp stuff; people should be using GDBus now. If you
don't, the raw doxygen is fine. - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - %ghost /var/run content (#656571) - New upstream release - Conversion from systemd-install to systemctl - git Snapshot with systemd activation - New upstream release - New upstream release
- Drop upstreamed patch - Add patch to fix syslog crasher - New upstream release - New upstream release
- Actually add start-early.patch - New upstream release
Drop all upstreamed patches.
- start-ea� x��������������������� X T ��y �� �� fG � �$ v ���������������� fG eG <� � res - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of systzdata patch - fix build with autoconf 2.6x - update to 5.3.1
- remove openssl patch (merged upstream)
- add provides for php-pecl-json
- add prod/devel php.ini in doc - use libedit instead of readline to resolve licensing issues - rebuilt with new openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - rediff systzdata patch - update to v6 of systzdata patch; various fixes - update to v5 of systzdata patch; parses zone.tab and extracts
timezone->{country-code,long/lat,comment} mapping table - update to 5.3.0
- remove ncurses, dbase, mhash extensions
- add enchant, sqlite3, intl, phar, fileinfo extensions
- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
- sync with upstream "production" php.ini - update to 5.2.10
- add interbase sub-package - update to 5.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - add recode support, -recode subpackage (#106755)
- add -zts subpackage with ZTS-enabled build of httpd SAPI
- adjust php.conf to use -zts SAPI build for worker MPM - fix patch fuzz, renumber patches - drop obsolete configure args
- drop -odbc patch (#483690) - split out sysvshm, sysvsem, sysvmsg, posix into php-process - move wddx to php-xml, build curl shared in -common
- remove BR for expat-devel, bogus configure option - rebuild for new MySQL - libtool 2 workaround for phpize (#476004)
- add missing php_embed.h (#457777) - update to 5.2.8 - libtool 2 workaround - update to 5.2.7
- enable pdo_dblib driver in php-mssql - tweak Summary, thanks to Richard Hughes - move gd_README to php-gd
- update to r4 of systzdata patch; introduces a default timezone
name of "System/Localtime", which uses /etc/localtime (#469532) - enable XPM support in php-gd
- Fix BR for php-gd - enable T1lib support in php-gd - update to 5.2.6
- sync default php.ini with upstream
- drop extension_dir from default php.ini, rely on hard-coded
default, to make php-common multilib-safe (#455091)
- update to r3 of systzdata patch - split pspell extension out into php-spell (#443857) - Autorebuild for GCC 4.3 - ext/date: use system timezone database - rebuild for libc-client bump - Rebuild for openssl bump - update to 5.2.5 - correct pcre BR version (#333021)
- restore metaphone fix (#205714)
- add READMEs to php-cli - update to 5.2.4 - rebuild for fixed APR - add ldconfig post/postun for -embedded (Hans de Goede) - add php-embedded sub-package - fix build with new glibc
- fix License - define php_extdir in macros.php - obsolete php-dbase - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
- enable dbase extension and package in -common - update to 5.2.3 (thanks to Jeff Sheltren) - fix php-pdo *_arg_force_ref global symbol abuse (#216125) - rebuild against uw-imap-devel - update to 5.2.2
- synch changes from upstream recommended php.ini - enable SASL support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for net-snmp soname bump - build json and zip shared, in -common (Remi Collet, #215966)
- obsolete php-json and php-pecl-zip
- build readline extension into /usr/bi� x�������������0������� X U D1�yalshn ������
2.5�$ ����������������
� sets (#1961109) - Fix glob defects on certain XFS filesystems (#1982608) - Fix fortify false positive with mbsrtowcs and mbsnrtowcs (#2072329). - Fix multi-threaded popen defect leading to segfault (#2065588) - timezone: Fix a test that causes occasional build failure (#2071745) - Synchronize feature guards in fortified functions (#2063042) - nss: Avoid clobbering errno in get*ent via dlopen (#2063712) - Enable support for _FORTIFY_SOURCE=3 for gcc 12 and later (#2033684) - memory operation A64FX SVE performance improvement (#2037416) - Move build-locale-archive to glibc-all-langpacks (#2057513) - Fix build-locale-archive to handle symbolic links (#2054790) - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054790)
- Fix localedef so it can handle symbolic links when generating locale-archive. - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
(#2032281) - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
for "unix" and svcunix_create (#2045063). - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032281) - Fix pthread_once regression with C++ exceptions (#2007327) - Adjust to rpm's find-debuginfo.sh changes, to keep stripping binaries (#1661513) - Conversion from ISO-2022-JP-3 may emit spurious NUL character (#2033655) - aarch64: A64FX optimizations break "sve=off" guest mode (#2036955) - Handle truncated timezones from tzcode-2021d and later. (#2033648) - Weaken dependency of glibc on glibc-gconv-extra (#2015768) - Do not install /usr/lib/debug/usr/bin/ld.so.debug (#2023420) - Add /usr/bin/ld.so --list-diagnostics (#2023420) - Preliminary support for new IBM zSeries hardware (#1984802) - Fix --with and --without builds for benchtests and bootstrap (#2020989) - A64FX memcpy/memmove/memset optimizations (#1929928) - Fix dl-tls.c assert failure with pthread_create & dlopen (#1991001)
- Fix x86_64 TLS lazy binding with auditors (#1950056) - Introduce new glibc-doc.noarch subpackage (#2021671)
- Move the reference manual info pages from glibc-devel to glibc-doc
- Move debugger interface documentation from glibc to glibc-doc
- Remove unnecessary README, INSTALL, NEWS files from glibc
- Remove unnecessary README.timezone and gai.conf files from glibc-common - Add new English-language 12 hour time locale en_US@ampm.UTF-8 (#2000374) - Build build-locale-archive with -static-pie when supported (#1965377) - elf: Always set link map in _dl_init_paths (#1934162) - x86: Properly disable XSAVE related features when its use is disabled via
tunables (#1937515) - s390: Use long branches across object boundaries (#2021452) - Optimize memcmp, strcpy, and stpcpy for IBM POWER10 (#1983203) - malloc: Initiate tcache shutdown even without allocations (#1977614) - Fix debuginfo location for gconv-extra and make glibc Require it (#1971664). - Split extra gconv modules into a separate package (#1971664). - librt: fix NULL pointer dereference (#1966472). - CVE-2021-33574: Deep copy pthread attribute in mq_notify (#1966472) - CVE-2021-35942: wordexp: handle overflow in positional parameter number
(#1979127) - Improve POWER10 performance with POWER9 fallbacks (#1956357) - Backport POWER10 optimized rawmemchr for ppc64le (#1956357) - Backport additional ifunc optimizations for ppc64le (#1956357) - Rebuild with new binutils (#1946518) - Consistently SXID_ERASE tunables in sxid binaries (#1934155) - Backport ifunc optimizations for glibc for ppc64le (#1918719) - CVE-2021-27645: nscd: Fix double free in netgroupcache (#1927877) - Add IPPROTO_ETHERNET, IPPROTO_MPTCP, and INADDR_ALLSNOOPERS_GROUP defines
(#1930302) - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
msgctl, and shmctl. (#1912670) - Update syscall-names.list to 5.7, 5.8, 5.9, 5.10 and 5.11. (#1871386) - CVE-2019-9169: Fix buffer overread in regexec.c (#1936864). - Rebuild glibc to update security markup metadata (#1935128) - Fix NSS files and compat service upgrade defect (#1932770). - CVE-2021-3326: iconv assertion failure in ISO-2022-JP-� x���������������������� X V us��yb/rp����������������� ened�$ % ���������������� �� �� �� � - fix #882305 - agetty: unstable /dev/tty* permissions
- fix #885314 - hexdump segfault
- fix #896447 - No newlines in piped "cal" command
- fix libblkid cache usage (upstream patch)
- fix #905008 - uuidd: /usr/sbin/uuidd has incorrect file permissions - fix #889888 - wipefs does not completely wipe btrfs volume - upgrade to upstream maintenance release 2.22.2 - sources cleanup - fix #872787 - su: COMMAND not specified - backport upstream runuser(1)
- enable su(1) - apply pathes from upstream stable/v2.22 branch
- fix #865961 - wipefs -a should use O_EXCL - upgrade to the release 2.22.1 - remove obsolete references to e2fsprogs - upgrade to the release 2.22
- enable eject(1) from util-linux, obsolete original eject package
- fix #853164 - setuid program should have full RELRO
- fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV - upgrade to the release 2.22-rc2
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes
- add sulogin, utmpdump, lslocks, wdctl - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - replace udev dependenceis with systemd - upgrade to bugfix release 2.21.2
- fix #814699 - namei(1) incorrectly resolves relative symlinks
- fix #820707 - Impossible to unmount nfsv4/krb5 mounts after network disconnect
- fix #816877 - libmount does not close device fd before mount(2)
- fix #822705 - unable to login after installing - upgrade to bugfix release 2.21.1 - upgrade to release 2.21 - fix #788703 - /run/blkid does not exist - upgrade to the release 2.21-rc2
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.21/v2.21-ReleaseNotes
- add {fsck,mkfs}.minix
- add new command chcpu(8)
- add new command prlimit(1)
- enable raw(8) command
- move 60-raw.rules from /etc from /usr/lib/udev/rules.d
- move blkid cache from etc to /run/blkid - install everything in /usr
https://fedoraproject.org/wiki/Features/UsrMove - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - fix #748216 - util-linux requires pam >= 1.1.3-7
- remove ddate(1) - Rebuilt for glibc bug#747377 - upgrade to the release 2.20.1
ftp://ftp.infradead.org/pub/util-linux/v2.20/v2.20.1-ReleaseNotes - upgrade to the release 2.20 - upgrade to the release 2.20-rc2
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-rc2-ChangeLog - upgrade to the release 2.20-rc1
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-ReleaseNotes - fix #716483 - /var/tmp --(BIND-mounted)--> /tmp disrupts/hangs bootup
- fix #709681 - failure to mount if a mount point ends with a slash in /etc/fstab
- fix #709319 - 'mount -a' mounts already mounted directories
- fix kernel version parsing - upgrade to the release 2.19.1
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-ReleaseNotes - upgrade to the release 2.19.1-rc1
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-rc1-ChangeLog - fix #682502 - Broken source URL to floppy tarball, new version available
- upgrade to floppy-0.18 - upgrade to the release 2.19
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes
- remove /sbin/mount.tmpfs -- integrated to mount(8) - fix #665062 - add support for the postlogin PAM stack to util-linux-ng - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - upgrade to the release 2.19-rc3
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc3-ChangeLog - upgrade to the release 2.19-rc2
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc2-ChangeLog
- fix #671893 - SELinux is preventing /bin/chown from 'setattr' accesses
on the file mounts. - clean up specfile (review #667416) - upgrade to the release 2.19-rc1
ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes - fix #645640 - new "-s" parameter parsing in agetty does not work
- add -l (lock) support to fsck - fix #623685 - please extend agetty to not require a baud rate to be specified - fix #620924 - /sbin/mount.tmpfs uses not available /usr/bin/id - fix #615719 - tmpfs mount fails with 'user' option.
- fix #598631 - shutdown, � x������������� �������� X W xe,�y she��������� /.sp�$
���������������� � ar <siddhesh@redhat.com> - 2.28-202 Arjun Shankar <arjun@redhat.com> - 2.28-201 DJ Delorie <dj@redhat.com> - 2.28-200 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-199 Carlos O'Donell <carlos@redhat.com> - 2.28-198 Arjun Shankar <arjun@redhat.com> - 2.28-197 Siddhesh Poyarekar <siddhesh@redhat.com> 2.28-196 Florian Weimer <fweimer@redhat.com> - 2.28-195 Siddhesh Poyarekar <siddhesh@redhat.com> 2.28-194 DJ Delorie <dj@redhat.com> - 2.28-193 Arjun Shankar <arjun@redhat.com> - 2.28-192 Arjun Shankar <arjun@redhat.com> - 2.28-191 Arjun Shankar <arjun@redhat.com> - 2.28-190 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-189 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-187 Carlos O'Donell <carlos@redhat.com> - 2.28-186 DJ Delorie <dj@redhat.com> - 2.28-185 Florian Weimer <fweimer@redhat.com> - 2.28-184 Florian Weimer <fweimer@redhat.com> - 2.28-183 Patsy Griffin <patsy@redhat.com> - 2.28-182 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-181 Florian Weimer <fweimer@redhat.com> - 2.28-180 Florian Weimer <fweimer@redhat.com> - 2.28-179 Carlos O'Donell <carlos@redhat.com> - 2.28-178 Carlos O'Donell <carlos@redhat.com> - 2.28-177 Florian Weimer <fweimer@redhat.com> - 2.28-176 Florian Weimer <fweimer@redhat.com> - 2.28-175 Arjun Shankar <arjun@redhat.com> - 2.28-174 Patsy Griffin <patsy@redhat.com> - 2.28-173 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-172 DJ Delorie <dj@redhat.com> - 2.28-171 Arjun Shankar <arjun@redhat.com> - 2.28-170 Arjun Shankar <arjun@redhat.com> - 2.28-169 Arjun Shankar <arjun@redhat.com> - 2.28-168 Arjun Shankar <arjun@redhat.com> - 2.28-167 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-166 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-165 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-163 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-162 Carlos O'Donell <carlos@redhat.com> - 2.28-161 Arjun Shankar <arjun@redhat.com> - 2.28-160 Arjun Shankar <arjun@redhat.com> - 2.28-159 Florian Weimer <fweimer@redhat.com> - 2.28-158 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-157 DJ Delorie <dj@redhat.com> - 2.28-156 Arjun Shankar <arjun@redhat.com> - 2.28-155 Carlos O'Donell <carlos@redhat.com> - 2.28-154 Carlos O'Donell <carlos@redhat.com> - 2.28-153 Patsy Griffin <patsy@redhat.com> - 2.28-152 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-151 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-150 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-149 Florian Weimer <fweimer@redhat.com> - 2.28-148 Florian Weimer <fweimer@redhat.com> - 2.28-147 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-146 Florian Weimer <fweimer@redhat.com> - 2.28-145 Florian Weimer <fweimer@redhat.com> - 2.28-144 Florian Weimer <fweimer@redhat.com> - 2.28-142 Carlos O'Donell <carlos@redhat.com> - 2.28-141 Carlos O'Donell <carlos@redhat.com> - 2.28-140 Arjun Shankar <arjun@redhat.com> - 2.28-139 Florian Weimer <fweimer@redhat.com> - 2.28-138 Florian Weimer <fweimer@redhat.com> - 2.28-137 DJ Delorie <dj@redhat.com> - 2.28-136 DJ Delorie <dj@redhat.com> - 2.28-135 Florian Weimer <fweimer@redhat.com> - 2.28-134 Florian Weimer <fweimer@redhat.com> - 2.28-133 DJ Delorie <dj@redhat.com> - 2.28-132 Patsy Griffin <patsy@redhat.com> - 2.28-131 Patsy Griffin <patsy@redhat.com> - 2.28-130 Arjun Shankar <arjun@redhat.com> - 2.28-129 Arjun Shankar <arjun@redhat.com> - 2.28-128 Carlos O'Donell <calros@redhat.com> - 2.28-127 Florian Weimer <fweimer@redhat.com> - 2.28-126 Carlos O'Donell <carlos@redhat.com> - 2.28-125 Florian Weimer <fweimer@redhat.com> - 2.28-124 Florian Weimer <fweimer@redhat.com> - 2.28-123 DJ Delorie <dj@redhat.com> - 2.28-122 Florian Weimer <fweimer@redhat.com> - 2.28-121 Florian Weimer <fweimer@redhat.com> - 2.28-120 Florian Weimer <fweimer@redhat.com> - 2.28-119 Florian Weimer <fweimer@redhat.com> - 2.28-118 Patsy Griffin <patsy@redhat.com> - 2.28-117 Patsy Griffin <patsy@redhat.com> - 2.28-116 Patsy Griffin <patsy@redhat.com> - 2.28-115 Patsy Griffin <patsy@redhat.com> - 2.28-114 Carlos O'Donell� x������} 8�������� X c /�y p^ V �! �$ s ���������������� �! �! �! � systzdata patch - fix build with autoconf 2.6x - update to 5.3.1
- remove openssl patch (merged upstream)
- add provides for php-pecl-json
- add prod/devel php.ini in doc - use libedit instead of readline to resolve licensing issues - rebuilt with new openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - rediff systzdata patch - update to v6 of systzdata patch; various fixes - update to v5 of systzdata patch; parses zone.tab and extracts
timezone->{country-code,long/lat,comment} mapping table - update to 5.3.0
- remove ncurses, dbase, mhash extensions
- add enchant, sqlite3, intl, phar, fileinfo extensions
- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
- sync with upstream "production" php.ini - update to 5.2.10
- add interbase sub-package - update to 5.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - add recode support, -recode subpackage (#106755)
- add -zts subpackage with ZTS-enabled build of httpd SAPI
- adjust php.conf to use -zts SAPI build for worker MPM - fix patch fuzz, renumber patches - drop obsolete configure args
- drop -odbc patch (#483690) - split out sysvshm, sysvsem, sysvmsg, posix into php-process - move wddx to php-xml, build curl shared in -common
- remove BR for expat-devel, bogus configure option - rebuild for new MySQL - libtool 2 workaround for phpize (#476004)
- add missing php_embed.h (#457777) - update to 5.2.8 - libtool 2 workaround - update to 5.2.7
- enable pdo_dblib driver in php-mssql - tweak Summary, thanks to Richard Hughes - move gd_README to php-gd
- update to r4 of systzdata patch; introduces a default timezone
name of "System/Localtime", which uses /etc/localtime (#469532) - enable XPM support in php-gd
- Fix BR for php-gd - enable T1lib support in php-gd - update to 5.2.6
- sync default php.ini with upstream
- drop extension_dir from default php.ini, rely on hard-coded
default, to make php-common multilib-safe (#455091)
- update to r3 of systzdata patch - split pspell extension out into php-spell (#443857) - Autorebuild for GCC 4.3 - ext/date: use system timezone database - rebuild for libc-client bump - Rebuild for openssl bump - update to 5.2.5 - correct pcre BR version (#333021)
- restore metaphone fix (#205714)
- add READMEs to php-cli - update to 5.2.4 - rebuild for fixed APR - add ldconfig post/postun for -embedded (Hans de Goede) - add php-embedded sub-package - fix build with new glibc
- fix License - define php_extdir in macros.php - obsolete php-dbase - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
- enable dbase extension and package in -common - update to 5.2.3 (thanks to Jeff Sheltren) - fix php-pdo *_arg_force_ref global symbol abuse (#216125) - rebuild against uw-imap-devel - update to 5.2.2
- synch changes from upstream recommended php.ini - enable SASL support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for net-snmp soname bump - build json and zip shared, in -common (Remi Collet, #215966)
- obsolete php-json and php-pecl-zip
- build readline extension into /usr/bin/php* (#210585)
- change module subpackages to require php-common not php (#177821) - provide php-zend-abi (#212804)
- add /etc/rpm/macros.php exporting interface versions
- synch with upstream recommended php.ini - update to 5.2.0 (#213837)
- php-xml provides php-domxml (#215656)
- fix php-pdo-abi provide (#214281) - rebuild for curl soname bump
- add build fix for curl 7.16 API - fro� x��������������������� X Y VE��y3-67P������� � curs�$ w ���������������� � � � �g6�4* ��,ﺍ����`�n�]��T𨿴��� �>�h�zmYď���D50379f74d841e03b4349b5c9244b79806fa1be5a6 c2e776229365910fa39300a09d8215e2271ffec6b7afd0a947280f5bcb42a734 i��� �� i��� � x��������������s������� X Z c��ye th���������A�������� /va�$ a ���������������� �� �� �� � rubber
- Allow swift to connect to keystone and memcache ports.
- Fix labeling for /usr/lib/systemd/system/openstack-cinder-backup
- Add policies for openstack-cinder
- Add support for /usr/bin/nova-conductor
- Add neutron_can_network boolean
- Allow neutron to connet to neutron port
- Allow glance domain to use syslog
- Add support for /usr/bin/swift-object-expirer and label it as swift_exec_t - Allow swift to use tcp/6200 swift port
- ALlow swift to search apache configs
- Remove duplicate .fc entry for Grilo plugin bookmarks
- Remove duplicate .fc entry for telepathy-gabble
- Additional allow rules for docker sandbox processes
- Allow keepalived connect to agentx port
- Allow neutron-ns-metadata to connectto own unix stream socket
- Add support for tcp/6200 port
- Remove ability for confined users to run xinit
- New tool for managing wireless /usr/sbin/iw - Add back MLS policy - Implement new spec file handling for *.pp modules which allows us to move a policy module out of the policy - Allow system_bus_types to use stream_sockets inherited from system_dbusd
- Allow journalctl to call getpw
- New access needed by dbus to talk to kernel stream
- Label sm-notifypid files correctly
- contrib: Add KMSCon policy module - Add mozilla_plugin_use_bluejeans boolean
- Add additional interfaces needed by mozilla_plugin_use_bluejeans boolean - Allow staff_t to communicate and run docker
- Fix *_ecryptfs_home_dirs booleans
- Allow ldconfig_t to read/write inherited user tmp pipes
- Allow storaged to dbus chat with lvm_t
- Add support for storaged and storaged-lvm-helper. Labeled it as lvm_exec_t.
- Use proper calling in ssh.te for userdom_home_manager attribute
- Use userdom_home_manager_type() also for ssh_keygen_t
- Allow locate to list directories without labels
- Allow bitlbee to use tcp/7778 port
- /etc/cron.daily/logrotate to execute fail2ban-client.
- Allow keepalives to connect to SNMP port. Support to do SNMP stuff
- Allow staff_t to communicate and run docker
- Dontaudit search mgrepl/.local for cobblerd_t
- Allow neutron to execute kmod in insmod_t
- Allow neutron to execute udevadm in udev_t
- Allow also fowner cap for varnishd
- Allow keepalived to execute bin_t/shell_exec_t
- rhsmcertd seems to need these accesses. We need this backported to RHEL7 and perhaps RHEL6 policy
- Add cups_execmem boolean
- Allow gear to manage gear service
- New requires for gear to use systemctl and init var_run_t
- Allow cups to execute its rw_etc_t files, for brothers printers
- Add fixes to make munin and munin-cgi working. Allow munin-cgit to create files/dirs in /tmp, list munin conf dirs and manage munin logs.
- Allow swift to execute bin_t
- Allow swift to bind http_cache - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add decl for cockip port
- Allow sysadm_t to read all kernel proc
- Allow logrotate to execute all executables
- Allow lircd_t to use tty_device_t for use withmythtv
- Make sure all zabbix files direcories in /var/log have the correct label
- Allow bittlebee to create directories and files in /var/log with the correct label
- Label /var/log/horizon as an apache log
- Add squid directory in /var/run
- Add transition rules to allow rabbitmq to create log files and var_lib files with the correct label
- Wronly labeled avahi_var_lib_t as a pid file
- Fix labels on rabbitmq_var_run_t on file/dir creation
- Allow neutron to create sock files
- Allow postfix domains to getattr on all file systems
- Label swift-proxy-server as swift_exec_t
- Tighten SELinux capabilities to match docker capabilities
- Add fixes for squid which is configured to run with more than one worker.
- Allow cockpit to bind to its port - geard seems to do a lot of relabeling
- Allow system_mail_t to append to munin_var_lib_t
- Allow mozilla_plugin to read alsa_rw_ content
- Allow asterisk to connect to the apache ports
- Dontaudit attempts to read fixed disk
- Dontaudit search gconf_home_t
- Allow rsync to create swift_server.lock with swift.log labeling
- Add labeling for swift lock files
- Use swift� x������������� c������� X [ be��y82@f* @J������ G 3.9.�$ ���������������� G G �� � - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
- Allow all postfix domains to use the fifo_file
- Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
- Allow apmd_t to read grub.cfg
- Let firewallgui read the selinux config
- Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
- Fix devicekit_manage_pid_files() interface
- Allow squid to check the network state
- Dontaudit colord getattr on file systems
- Allow ping domains to read zabbix_tmp_t files - Allow mcelog_t to create dir and file in /var/run and label it correctly
- Allow dbus to manage fusefs
- Mount needs to read process state when mounting gluster file systems
- Allow collectd-web to read collectd lib files
- Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
- Allow colord to get the attributes of tmpfs filesystem
- Add sanlock_use_nfs and sanlock_use_samba booleans
- Add bin_t label for /usr/lib/virtualbox/VBoxManage - Add ssh_dontaudit_search_home_dir
- Changes to allow namespace_init_t to work
- Add interface to allow exec of mongod, add port definition for mongod port, 27017
- Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
- Allow spamd and clamd to steam connect to each other
- Add policy label for passwd.OLD
- More fixes for postfix and postfix maildro
- Add ftp support for mozilla plugins
- Useradd now needs to manage policy since it calls libsemanage
- Fix devicekit_manage_log_files() interface
- Allow colord to execute ifconfig
- Allow accountsd to read /sys
- Allow mysqld-safe to execute shell
- Allow openct to stream connect to pcscd
- Add label for /var/run/nm-dns-dnsmasq\.conf
- Allow networkmanager to chat with virtd_t - Pulseaudio changes
- Merge patches - Merge patches back into git repository. - Remove allow_execmem boolean and replace with deny_execmem boolean - Turn back on allow_execmem boolean - Add more MCS fixes to make sandbox working
- Make faillog MLS trusted to make sudo_$1_t working
- Allow sandbox_web_client_t to read passwd_file_t
- Add .mailrc file context
- Remove execheap from openoffice domain
- Allow chrome_sandbox_nacl_t to read cpu_info
- Allow virtd to relabel generic usb which is need if USB device
- Fixes for virt.if interfaces to consider chr_file as image file type - Remove Open Office policy
- Remove execmem policy - MCS fixes
- quota fixes - Remove transitions to consoletype - Make nvidia* to be labeled correctly
- Fix abrt_manage_cache() interface
- Make filetrans rules optional so base policy will build
- Dontaudit chkpwd_t access to inherited TTYS
- Make sure postfix content gets created with the correct label
- Allow gnomeclock to read cgroup
- Fixes for cloudform policy - Check in fixed for Chrome nacl support - Begin removing qemu_t domain, we really no longer need this domain.
- systemd_passwd needs dac_overide to communicate with users TTY's
- Allow svirt_lxc domains to send kill signals within their container - Remove qemu.pp again without causing a crash - Remove qemu.pp, everything should use svirt_t or stay in its current domain - Allow policykit to talk to the systemd via dbus
- Move chrome_sandbox_nacl_t to permissive domains
- Additional rules for chrome_sandbox_nacl - Change bootstrap name to nacl
- Chrome still needs execmem
- Missing role for chrome_sandbox_bootstrap
- Add boolean to remove execmem and execstack from virtual machines
- Dontaudit xdm_t doing an access_check on etc_t directories - Allow named to connect to dirsrv by default
- add ldapmap1_0 as a krb5_host_rcache_t file
- Google chrome developers asked me to add bootstrap policy for nacl stuff
- Allow rhev_agentd_t to getattr on mountpoints
- Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets - Fixes for cloudform policies which need to connect to random ports
- Make sure if an admin creates modules content it creates them with the correct label
- Add port 8953 as a dns � x�������������xR������� X \ c_��y_uni���������B �� om_c�$ _ ���������������� �� �� �� � to search all directories for sshd_home_t content
- Allow staff domains to send dbus messages to kdumpgui
- Fix labels on /etc/.pwd.lock and friends to be passwd_file_t
- Dontaudit setfiles reading urand
- Add files_dontaudit_list_tmp() for domains to which we added sys_nice/setsched
- Allow staff_gkeyringd_t to read /home/$USER/.local/share/keyrings dir
- Allow systemd-timedated to read /dev/urandom
- Allow entropyd_t to read proc_t (meminfo)
- Add unconfined munin plugin
- Fix networkmanager_read_conf() interface
- Allow blueman to list /tmp which is needed by sys_nic/setsched
- Fix label of /etc/mail/aliasesdb-stamp
- numad is searching cgroups
- realmd is communicating with networkmanager using dbus
- Lots of fixes to try to get kdump to work - Allow loging programs to dbus chat with realmd
- Make apache_content_template calling as optional
- realmd is using policy kit - Add new selinuxuser_use_ssh_chroot boolean
- dbus needs to be able to read/write inherited fixed disk device_t passed through it
- Cleanup netutils process allow rule
- Dontaudit leaked fifo files from openshift to ping
- sanlock needs to read mnt_t lnk files
- Fail2ban needs to setsched and sys_nice - Change default label of all files in /var/run/rpcbind
- Allow sandbox domains (java) to read hugetlbfs_t
- Allow awstats cgi content to create tmp files and read apache log files
- Allow setuid/setgid for cupsd-config
- Allow setsched/sys_nice pro cupsd-config
- Fix /etc/localtime sym link to be labeled locale_t
- Allow sshd to search postgresql db t since this is a homedir
- Allow xwindows users to chat with realmd
- Allow unconfined domains to configure all files and null_device_t service - Adopt pki-selinux policy - pki is leaking which we dontaudit until a pki code fix
- Allow setcap for arping
- Update man pages
- Add labeling for /usr/sbin/mcollectived
- pki fixes
- Allow smokeping to execute fping in the netutils_t domain - Allow mount to relabelfrom unlabeled file systems
- systemd_logind wants to send and receive messages from devicekit disk over dbus to make connected mouse working
- Add label to get bin files under libreoffice labeled correctly
- Fix interface to allow executing of base_ro_file_type
- Add fixes for realmd
- Update pki policy
- Add tftp_homedir boolean
- Allow blueman sched_setscheduler
- openshift user domains wants to r/w ssh tcp sockets - Additional requirements for disable unconfined module when booting
- Fix label of systemd script files
- semanage can use -F /dev/stdin to get input
- syslog now uses kerberos keytabs
- Allow xserver to compromise_kernel access
- Allow nfsd to write to mount_var_run_t when running the mount command
- Add filename transition rule for bin_t directories
- Allow files to read usr_t lnk_files
- dhcpc wants chown
- Add support for new openshift labeling
- Clean up for tunable+optional statements
- Add labeling for /usr/sbin/mkhomedir_helper
- Allow antivirus domain to managa amavis spool files
- Allow rpcbind_t to read passwd
- Allow pyzor running as spamc to manage amavis spool - Add interfaces to read kernel_t proc info
- Missed this version of exec_all
- Allow anyone who can load a kernel module to compromise kernel
- Add oddjob_dbus_chat to openshift apache policy
- Allow chrome_sandbox_nacl_t to send signals to itself
- Add unit file support to usbmuxd_t
- Allow all openshift domains to read sysfs info
- Allow openshift domains to getattr on all domains - MLS fixes from Dan
- Fix name of capability2 secure_firmware->compromise_kerne - Allow xdm to search all file systems
- Add interface to allow the config of all files
- Add rngd policy
- Remove kgpg as a gpg_exec_t type
- Allow plymouthd to block suspend
- Allow systemd_dbus to config any file
- Allow system_dbus_t to configure all services
- Allow freshclam_t to read usr_files
- varnishd requires execmem to load modules - Allow semanage to verify types
- Allow sudo domain to execute user home files
- Allow session_bus_type to transition to user_tmpfs_t
- Add dontaudit caused by yum updates
- Implement pki po� x��������������A������� X ] R7��y
- A~ ha�������K xor�$ r ���������������� �K �K �K � Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
- Require GLib >= 2.25.12 instead of 2.25.11
- Ensure polkit-gnome packages earlier than 0.97 are not used with
these packages - Rebuild - Update to 0.97. This release contains a port from EggDBus to the
GDBus code available in recent GLib releases. - Update to 0.96
- Disable introspection support for the time being - Rebuild - Update to 0.95
- Drop upstreamed patches - Fix a typo in pklocalauthority(8) - Refine how Obsolete: is used and also add Provides: (thanks Jesse
Keating and nim-nim) - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
- Obsolete old PolicyKit packages - Update to git snapshot
- Drop upstreamed patches
- Turn on GObject introspection
- Don't delete desktop_admin_r and desktop_user_r groups when
uninstalling polkit-desktop-policy - Add some patches from git master
- Sort pkaction(1) output
- Bug 23867 – UnixProcess vs. SystemBusName aliasing - Add desktop_admin_r and desktop_user_r groups along with a first cut
of default authorizations for users in these groups. - Disable GObject Introspection for now as it breaks the build - Update to upstream release 0.94 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Rebuild - Update to 0.93 - Don't make docs noarch (I *heart* multilib)
- Change license to LGPLv2+ - Rebuild - Update to 0.92 release - Update to 0.92 snapshot - Initial spec file. /sbin/ldconfig /sbin/ldconfig
� � 0.115-15.el8 0.115-15.el8 .build-id 30 c4d34849946cdc9fe14f9915ecafb74ce55e30 88 d856b6821ab429fabe1ee11405bd545943b4f5 Polkit-1.0.typelib PolkitAgent-1.0.typelib libpolkit-agent-1.so.0 libpolkit-agent-1.so.0.0.0 libpolkit-gobject-1.so.0 libpolkit-gobject-1.so.0.0.0 /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/30/ /usr/lib/.build-id/88/ /usr/lib64/girepository-1.0/ /usr/lib64/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=88d856b6821ab429fabe1ee11405bd545943b4f5, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=30c4d34849946cdc9fe14f9915ecafb74ce55e30, stripped P R
R R R R R R R
R R R R R R P R
R R R R R R R
R R R R R utf-8 76f52e3bab5edd192280cf0ed01a97a192373973981a8e519348f624656bc2e6 ? ��� D�3 !pQ�p�)�Tξ7��]�mtZ`c���
�]�mtZ`
� ��p^K�:��������/���?�AD�*��cj��zN��0A��;-�t�r� }�g��5��8u��RH���^ �w/������%o �;� ���� �ie��̬^�� a�(��S>!�ȓC�P��DZH���`|��F�<�8�8���>;�&Ra��L̔"��F�M ^���m�m �}�RH���6���
����>��� �w��|�G�
�@:�h���j����a\ω6F�E נ�e�_��摈Η�R�p���:&%*|S-�W���uzq�/�3���d��9�����DV�]��%�0e��X��I����E��i�ڧڀ� ���R�|L+(�ទi�� �G�O� 0�
Փu���$u���[! �>E��_�� ���� ��z���Rb�S�dTخR��M%p�\?���k � w@��' ��7{"����1*� �%� S�J��B��F�IN�܂D�L���*�i v� lj|cO�%X٨���9���IJ�u �P:�4�r�3 !pQ�p�)�Tξ7��]�mtZ`c���
�]�mtZ`��(@sF�� �!@q �8�'ʩ��)�P�.��[u1�#�C�1 I1ӳ���L�}��Մ;� ۼ%<r�H�M��s�ekS[q3RQ�zOV��o��Ź�a&L�I'�w��(�� �/� G ]�؉�y��1 ��9i�(��㱠ʟH�7��=C�)��x捃a�do�����xԪ�Z��5D�ƅ�-ص��ztۣ�$��!I2��{j�{\�0,�x��#f~!je � q3GQ� t���dS����8��r��q�
�-nm��{�H�}�}�,�2��$�O-b�v��U܃�|���#�~
)vUkd� ��2�J����f ��dr���w.j �9�Jp^� x�������������h1������� X ^ wx�ynew H� h
� n in�$
���������������� � � � � ream_socket
- Revert "Add same context for symlink as binary"
- Allow mysql execute rsync
- Update nfsd_t policy because of ganesha features
- Allow conman to getattr devpts_t
- Allow tomcat_domain to connect to smtp ports
- Allow tomcat_t domain to mmap tomcat_var_lib_t files
- Allow nagios_t domain to mmap nagios_log_t files
- Allow kpropd_t domain to mmap krb5kdc_principal_t files
- Allow kdumpctl_t domain to read fixed disk storage
- Allow xserver_t domain to start using systemd socket activation
- Tweak SELinux policy for systemd to allow DynamicUsers systemd feature
- Associate several proc labels to fs_t
- Update init_named_socket_activation() interface to allow systemd also create link files in /var/run
- Fix typo in syslogd policy
- Update syslogd policy to make working elasticsearch
- Label tcp and udp ports 9200 as wap_wsp_port
- Allow few domains to rw inherited kdumpctl tmp pipes - Add missing tarball from sources
Resolves: rhbz#1615312 - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
Resolves: rhbz#1615312 - Fix issue with aliases in apache interface file
Resolves: rhbz#1596618
- Add same context for symlink as binary
- Allow boltd_t to send logs to journal
- Allow colord_use_nfs to allow colord also mmap nfs_t files
- Allow mysqld_safe_t do execute itself
- Allow smbd_t domain to chat via dbus with avahi daemon
- cupsd_t domain will create /etc/cupsd/ppd as cupsd_etc_rw_t
- Update screen_role_template to allow caller domain to have screen_exec_t as entrypoint do new domain
- Add alias httpd__script_t to _script_t to make sepolicy generate working
- Allow gpg_t domain to mmap gpg_agent_tmp_t files
- Allow kprop_t domain to read network state
- Add support boltd policy
- Allow kpropd domain to exec itself
- Allow pdns_t to bind on tcp transproxy port
- Add support for opafm service
- Allow hsqldb_t domain to read cgroup files
- Allow rngd_t domain to read generic certs
- Allow innd_t domain to mmap own var_lib_t files
- Update screen_role_temaplate interface
- Allow chronyd_t domain to mmap own tmpfs files
- Allow chronyd_t domain to mmap own tmpfs files
- label /var/lib/pgsql/data/log as postgresql_log_t
- Allow sysadm_t domain to accept socket
- Allow systemd to manage passwd_file_t
- Allow sshd_t domain to mmap user_tmp_t files
- Allow systemd to mounont boltd lib dirs
- Allow sysadm_t domain to create rawip sockets
- Allow sysadm_t domain to listen on socket
- Update sudo_role_template() to allow caller domain also setattr generic ptys - Allow sblim_sfcbd_t domain to mmap own tmpfs files
- Allow nfsd_t domain to read krb5 keytab files
- Allow nfsd_t domain to manage fadm pid files
- Allow virt_domain to create icmp sockets BZ(1609142)
- Dontaudit oracleasm_t domain to request sys_admin capability
- Update logging_manage_all_logs() interface to allow caller domain map all logfiles - Allow aide to mmap all files
- Revert "Allow firewalld_t do read iptables_var_run_t files"
- Revert "Allow firewalld to create rawip sockets"
- Allow svirt_tcg_t domain to read system state of virtd_t domains
- Update rhcs contexts to reflects the latest fenced changes
- Allow httpd_t domain to rw user_tmp_t files
- Fix typo in openct policy
- Allow winbind_t domian to connect to all ephemeral ports
- Allow firewalld_t do read iptables_var_run_t files
- Allow abrt_t domain to mmap data_home files
- Allow glusterd_t domain to mmap user_tmp_t files
- Allow mongodb_t domain to mmap own var_lib_t files
- Allow firewalld to read kernel usermodehelper state
- Allow modemmanager_t to read sssd public files
- Allow openct_t domain to mmap own var_run_t files
- Allow nnp transition for devicekit daemons
- Allow firewalld to create rawip sockets
- Allow firewalld to getattr proc filesystem
- Dontaudit sys_admin capability for pcscd_t domain
- Revert "Allow pcsd_t domain sys_admin capability"
- Allow fetchmail_t domain to stream connect to sssd
- Allow pcsd_t domain sys_admin capability
- Allow cupsd_t to create cupsd_etc_t dirs
- Allow varnishlog_t domain to list varnishd_var_lib_t� x�������������� ������� X _ co�yore �� �A������X y.
�$ � ���������������� X X X � canner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service relocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - � x�������������X������� X ` a��yed t��������3 �� h re�$ y ���������������� �� �� �� � ate to read squid.conf
- Additional rules to get docker and lxc to play well with SELinux
- Call kernel_read_usermodhelper/kernel_rw_usermodhelper
- Make rpm_transition_script accept a role
- Added new policy for pcp
- Allow bumbleed to connect to xserver port
- Allow pegasus_openlmi_storage_t to read hwdata - Make rpm_transition_script accept a role
- Clean up pcp.te
- Added new policy for pcp
- Allow bumbleed to connect to xserver port
- Added support for named-sdb in bind policy
- Allow NetworkManager to signal and sigkill init scripts
- Allow pegasus_openlmi_storage_t to read hwdata
- Fix rhcs_rw_cluster_tmpfs()
- Allow fenced_t to bind on zented udp port
- Fix mirrormanager_read_lib_files()
- Allow mirromanager scripts running as httpd_t to manage mirrormanager pid files
- Dontaudit read/write to init stream socket for lsmd_plugin_t
- Allow automount to read nfs link files
- Allow lsm plugins to read/write lsmd stream socket
- Allow svirt_lxc domains to umount dockersocket filesytem
- Allow gnome keyring domains to create gnome config dirs
- Allow rpm scritplets to create /run/gather with correct labeling
- Add sblim_filetrans_named_content() interface
- Allow ctdb to create sock files in /var/run/ctdb
- Add also labeling for /var/run/ctdb
- Add missing labeling for /var/lib/ctdb
- ALlow tuned to manage syslog.conf. Should be fixed in tuned. #1030446
- Dontaudit hypervkvp to search homedirs
- Dontaudit hypervkvp to search admin homedirs
- Allow hypervkvp to execute bin_t and ifconfig in the caller domain
- Dontaudit xguest_t to read ABRT conf files
- Add abrt_dontaudit_read_config()
- Allow namespace-init to getattr on fs
- Add thumb_role() also for xguest
- Add filename transitions to create .spamassassin with correct labeling
- Allow apache domain to read mirrormanager pid files
- Allow domains to read/write shm and sem owned by mozilla_plugin_t
- Allow alsactl to send a generic signal to kernel_t
- Allow plymouthd to read run/udev/queue.bin
- Allow sys_chroot for NM required by iodine service
- Change glusterd to allow mounton all non security
- Labeled ~/.nv/GLCache as being gstreamer output
- Restrict the ability to set usermodehelpers and proc security settings.
- Limit the ability to write to the files that configure kernel i
- usermodehelpers and security-sensitive proc settings to the init domain. i
- Permissive domains can also continue to set these values.
- The current list is not exhaustive, just an initial set.
- Not all of these files will exist on all kernels/devices.
- Controlling access to certain kernel usermodehelpers, e.g. cgroup
- release_agent, will require kernel changes to support and cannot be
- addressed here.
- Ideas come from Stephen Smalley and seandroid
- Make rpm_transition_script accept a role
- Make rpm_transition_script accept a role
- Allow NetworkManager to signal and sigkill init scripts
- Allow init_t to work on transitient and snapshot unit files
- Add logging_manage_syslog_config()
- Update sysnet_dns_name_resolve() to allow connect to dnssec port - Remove file_t from the system and realias it with unlabeled_t - Add gluster fixes
- Remove ability to transition to unconfined_t from confined domains
- Additional allow rules to get libvirt-lxc containers working with docker - passwd to create gnome-keyring passwd socket
- systemd_systemctl needs sys_admin capability
- Allow cobbler to search dhcp_etc_t directory
- Allow sytemd_tmpfiles_t to delete all directories
- allow sshd to write to all process levels in order to change passwd when running at a level
- Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range
- Allow apcuspd_t to status and start the power unit file
- Allow udev to manage kdump unit file
- Added new interface modutils_dontaudit_exec_insmod
- Add labeling for /var/lib/servicelog/servicelog.db-journal
- Allow init_t to create tmpfs_t lnk_file
- Add label for ~/.cvsignore
- Allow fprintd_t to send syslog messages
- Add zabbix_var_lib_t for /var/lib/zabbixsrv, also allow zabix to connect to smtp port
- A� x��������������������� X a f��yolic��������w �� daem�$ \ ���������������� �� �� �� � onfig_usr_t - Fix labeling substitution so rpm will label /lib/systemd content correctly - Add file name transitions for ttyACM0
- spice-vdagent(d)'s are going to log over to syslog
- Add sensord policy
- Add more fixes for passenger policy related to puppet
- Allow wdmd to create wdmd_tmpfs_t
- Fix labeling for /var/run/cachefilesd\.pid
- Add thumb_tmpfs_t files type - Allow svirt domains to manage the network since this is containerized
- Allow svirt_lxc_net_t to send audit messages - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working
- Allow dlm_controld to execute dlm_stonith labeled as bin_t
- Allow GFS2 working on F17
- Abrt needs to execute dmesg
- Allow jockey to list the contents of modeprobe.d
- Add policy for lightsquid as squid_cron_t
- Mailscanner is creating files and directories in /tmp
- dmesg is now reading /dev/kmsg
- Allow xserver to communicate with secure_firmware
- Allow fsadm tools (fsck) to read /run/mount contnet
- Allow sysadm types to read /dev/kmsg
- - Allow postfix, sssd, rpcd to block_suspend
- udev seems to need secure_firmware capability
- Allow virtd to send dbus messages to firewalld so it can configure the firewall - Fix labeling of content in /run created by virsh_t
- Allow condor domains to read kernel sysctls
- Allow condor_master to connect to amqp
- Allow thumb drives to create shared memory and semaphores
- Allow abrt to read mozilla_plugin config files
- Add labels for lightsquid
- Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow
- dovecot_auth_t uses ldap for user auth
- Allow domains that can read dhcp_etc_t to read lnk_files
- Add more then one watchdog device
- Allow useradd_t to manage etc_t files so it can rename it and edit them
- Fix invalid class dir should be fifo_file
- Move /run/blkid to fsadm and make sure labeling is correct - Fix bogus regex found by eparis
- Fix manage run interface since lvm needs more access
- syslogd is searching cgroups directory
- Fixes to allow virt-sandbox-service to manage lxc var run content - Fix Boolean settings
- Add new libjavascriptcoregtk as textrel_shlib_t
- Allow xdm_t to create xdm_home_t directories
- Additional access required for systemd
- Dontaudit mozilla_plugin attempts to ipc_lock
- Allow tmpreaper to delete unlabeled files
- Eliminate screen_tmp_t and allow it to manage user_tmp_t
- Dontaudit mozilla_plugin_config_t to append to leaked file descriptors
- Allow web plugins to connect to the asterisk ports
- Condor will recreate the lock directory if it does not exist
- Oddjob mkhomedir needs to connectto user processes
- Make oddjob_mkhomedir_t a userdom home manager - Put placeholder back in place for proper numbering of capabilities
- Systemd also configures init scripts - Fix ecryptfs interfaces
- Bootloader seems to be trolling around /dev/shm and /dev
- init wants to create /etc/systemd/system-update.target.wants
- Fix systemd_filetrans call to move it out of tunable
- Fix up policy to work with systemd userspace manager
- Add secure_firmware capability and remove bogus epolwakeup
- Call seutil_*_login_config interfaces where should be needed
- Allow rhsmcertd to send signal to itself
- Allow thin domains to send signal to itself
- Allow Chrome_ChildIO to read dosfs_t - Add role rules for realmd, sambagui - Add new type selinux_login_config_t for /etc/selinux/<type>/logins/
- Additional fixes for seutil_manage_module_store()
- dbus_system_domain() should be used with optional_policy
- Fix svirt to be allowed to use fusefs file system
- Allow login programs to read /run/ data created by systemd_login
- sssd wants to write /etc/selinux/<policy>/logins/ for SELinux PAM module
- Fix svirt to be allowed to use fusefs file system
- Allow piranha domain to use nsswitch
- Sanlock needs to send Kill Signals to non root processes
- Pulseaudio wants to execute /run/user/PID/.orc - Fix saslauthd when it tries to read /etc/shadow
- Label gnome-boxes as a virt homedir
- Need to allow svirt_t ability to getattr on nfs_t file systems
- Update sanlock policy to solve all AVC's
- Cha� x�������������H������ X b 5G�y9-3.�'�������� �L thia�$ ���������������� �L �L �L � ic libraries from python bindings - Backport patch from CVS that fixes int32's being marshaled as
uint16's in the python bindings - update to upstream 0.33
- renable selinux audit patch - Added patch to fix deadlocks when using recursive g_mains - replace selinux_init patch with selinux_chroot_workaround patch
to work around bad selinux interactions when using chroots
on the beehive build machines - add print_child_pid patch which make sure we prin the child's pid if we fork - add fix for glib infinite loop (fdo #2889) - add selinux-init patch to fix dbus from segfaulting when
building on machines that don't have selinux enabled - update to upstream version 0.32 - Pyrex has been patched to generate gcc4.0 complient code
- Rebuild for gcc4.0 - change compat-gcc requirement to compat-gcc-32
- rebuild with gcc 3.2 - Remove precompiled init script and let the sources generate it - update to upstream version 0.31
- take out user has same id patch (merged upstream)
- udi patch updated
- dbus-daemon-1 renamed to dbus-daemon
- dbus-glib-tool renamed to dbus-binding-tool
- force gcc33 because pyrex generate improper lvalue code
- disable audit patch for now - Explicitly pass in the pid file location to ./configure instead of
letting it guess based on the build enviornment - Add patch to fix random users from connecting to a users session bus - Add Steve Grubb's SE-Linux audit patch (Bug# 144920) - Update to upstream version 0.23
- Drop all patches except for the UDI patch as they have been
integrated upstream
- List of API changes:
* add setgroups() to drop supplementary groups
* removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
* added support for int64 and uint64 to the python bindings
* use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted - rebuild against python 2.4 - Add a requires for glib2-devel in the devel package
- Add SE-Linux backport from Colin Walters that fixes
messages getting lost in SE-Linux contexts - Bump up release and rebuild - Run /sbin/ldconfig for glib sub-package (bug #134062). - Fixed patch to use dbus-1 instead of dbus-1.0
- (configure.in): Exported just the datadir instead of
the full path to the dbus datadir for consistency - Adding patch to move /usr/lib/dbus-1.0/services to
/usr/share/dbus-1.0/services - reverting BuildRequires: redhat-release because of issues with build system
- added precompiled version of the messagebus init script - changed /etc/redhat-release to the package redhat-release - added python int64 patch from davidz - added BuildRequires: /etc/redhat-release (RH Bug #132436) - Added Steve Grubb's spec file patch (RH Bug #130201) - Disabled dbus-gtk since dbus-viewer doesn't do anything right now - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
no longer requires X or GTK libraries. (RH Bug #130029) - Update to new 0.22 release - Added BuildRequires for libselinux-devel and Requires for libselinux - Add SE-DBus patch - Added lib64 workaround for python bindings installing to
the wrong lib directory on 64 bit archs - Updated console-auth patch
- rebuild - Update to upstream CVS build
- Added console-auth patch - Workaround added to fix gcc-3.4 bug on ia64 - require new Pyrex version and see if it builds this time - rebuild with updated Pyrex (0.9.2.1) - rebuilt - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
into the dbus-glib package so that the main dbus
package does not depend on glib (Bug #125285) - rebuilt - added my Python patch
- took out the qt build requires
- added a gtk+ build requires - Changed build requirement to version 0.9-3 of Pyrex
to fix problem with builing on x86_64 - update to upstream 0.21
- removed dbus-0.20-varargs.patch patch (fixed upstream) - added a dbus-python package to generate python bindings
- added Pyrex build dependacy - rebuilt - fix dbus error functions on x86-64 (#116324)
- add prereq (#112027) - rebuilt - Conflict with cups prior to configuration file change, so that the
%postun service condrestart wor� x��������������������� X c
R �yves:��������(������ Y w ll�$ ���������������� Y Y \ 5baabe3c68de99bf4da2728e5 es~& ` es~$rt.so.1()(64bit) libsqlite3.so.0()(64bit) libsybdb.so.5()(64bit) php-5.3-lc-common(x86-64) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 5.3.29-3.el8 5.3.29-3.el8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.2 _q�@_d�@ZF.@Z �@Z��YRH�YP�@Y5G�X�@Vf@U�@U��U�@U[%�TR(@Thiago Linhares <thiago.linhares@locaweb.com.br> - 5.3.29-3.lc Thiago Linhares <thiago.linhares@locaweb.com.br> - 5.3.29-1.lc Andre Luis Lopes <andre.llopes@locaweb.com.br> - 5.3.29-13.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-12.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-11.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-10.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-9.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-8.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-7.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-6.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-5.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-4.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-3.lc Andre Ferraz <andre.ferraz@locaweb.com.br> - 5.3.29-2.lc Luiz Viana <lviana@include.io> - 5.3.29-1 - Fixed interbase and MySQL extensions to work with FPM. - Porting to Centos 8. Changed firebird-libfbclient to libfbclient2 dependency,
switch "with-libmysql" from 1 to 0. Hardcoded /usr/bin/apxs to configure path.
- Added pdo_firebird to pdo package.
- Added custom libs dependency (OpenSSL, cURL, Cyrus-SASL, IMAP, KRB5, net-snmp, OpenLDAP, LIBPQ and LIBDB) - Enabling interbase/firebird module - Include libc-client-2007f package requirement for imap package - Enabling imap module - Include pdo_dblib in pdo packaging - Fixing pdo packaging - Enalbing mssql module - Enabling mcrypt module - Rolling back inclusion of ExecStartPre on unit service file - Change start,min and max servers for www pool - mkdir with -p flag doesnt show error if dir already exists - Include creation of /run/php-fpm dir on ExecStartPre - Change Type from unit to Simple - PHP software collection release
- new upstream oldstable release, 5.3
- based on Red Hat 7 PHP specfile builder 1601296341
5.3.29-3.el8 5.3.29-3.el8 5.3.29-3.el8
pdo.ini pdo_dblib.ini pdo_firebird.ini pdo_odbc.ini pdo_pgsql.ini pdo_sqlite.ini sqlite3.ini pdo.so pdo_dblib.so pdo_firebird.so pdo_odbc.so pdo_pgsql.so pdo_sqlite.so sqlite3.so .build-id 11 54045a1a38d64f0665d1f6628d5ed562912b63 35 b313a930f6f3af9c83f4b5e1f307e2ea633b6a 50 a01b79205a13a3db26fac15bb2c84ea0e7ac52 79 4cd6729f0111b316d15672f310ccaec4011681 b1 e6db11ee48f240586fcd27647c3540e3ebb87e d4 26cdee817584faf451162127cb6689bebcd5f1 ea dab018d95f499aaed2a7616209431b81081868 /etc/php/5.3/php.d/ /opt/lc/php/5.3/lib64/php/modules/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/11/ /usr/lib/.build-id/35/ /usr/lib/.build-id/50/ /usr/lib/.build-id/79/ /usr/lib/.build-id/b1/ /usr/lib/.build-id/d4/ /usr/lib/.build-id/ea/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII te� x�������������8������� X d 6-��y8, C��������P������� nfin�$ r ���������������� � � � � 141773) - Update to util-linux-2.12p. This changes swap header format
from - you may need to rerun mkswap if you did a clean install of
FC3. - Update to util-linux-2.12j - Corrected a buffer overflow problem with nfs mounts.
(bz# 141733) - Patches for various bugs. - Made NFS mounts adhere to the IP protocol if specified on
command line as well as made NFS umounts adhere to the
current IP protocol. Fix #140016 - Add include_raw macro, build with it off for Fedora - Add raw patch to allow binding of devices not yet in /dev - Add David Zeuthen's patch to enable the pamconsole flag #133941 - Restore raw utils (bugzilla #130016) - Add the missing remote entry in pam.d - Rechecked in some missing NFS mounting code. - Make swaplabel support work with swapon -a -e - Updated the NFS and NFS4 code to the latest CITI patch set
(in which they incorporate a number of our local patches). - Fix #132196 - turn on SELinux support at build-time. - Fix #91174 with pamstart.patch - Fix #16415, #70616 with rdevman.patch
- Fix #102566 with loginman.patch
- Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
- Fix #130016 - remove raw.
- Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger) - Made the NFS security checks more explicit to avoid confusion
(an upstream fix)
- Also removed a compilation warning - Remove unused mount libdevmapper inclusion. - Add device-mapper mount-by-label support
- Fix segfault in mount-by-label when a device without a label is present. - Updated nfs man page to show that intr are on by
default for nfs4 - modified warning causing heart attack for >16 partitions, #107824 - Fix #126623, #126572
- Patch cleanup
- Remove agetty (use mgetty, agetty is broken) - rebuilt - Update to 2.12a
- Fix #122448 - Change pam_selinux to run last - Fix #122448 (autofs issues) - Fix #119157 by editing the patch
- Add patch145 to fix #119986 - Fix #118803 - mkcramfs: use PAGE_SIZE for default blocksize (#118681) - Updated the nfs-mount.patch to correctly
handle the mounthost option and to ignore
servers that do not set auth flavors - Fix selinux ordering or pam for login - Make RPC error messages displayed with -v argument
- Added two checks to the nfs4 path what will print warnings
when rpc.idmapd and rpc.gssd are not running
- Ping NFS v4 servers before diving into kernel
- Make v4 mount interruptible which also make the intr option on by default - Reworked how the rpc.idmapd and rpc.gssd checks were
done due to review comments from upstream.
- Added rpc_strerror() so the '-v' flag will show RPC errors. - Added two checks to the nfs4 path what will print warnings
when rpc.idmapd and rpc.gssd are not running. - Reworked and updated the nfsv4 patches. - Bump version - Tried to make nfs error message a bit more meaninful
- Cleaned up some warnings - Added pesudo flavors for nfsv4 mounts.
- Added BuildRequires: libselinux-devel and Requires: libselinux
when WITH_SELINUX is set. - check for 2.6.3 kernel in mount options - Remove /bin/kill for #116100 - rebuilt - rebuilt - Final 2.12 has been out for ages - might as well use it. - Added mount patches that have NFS version 4 support - Provides: mount losetup - Add multiple to /etc/pam.d/login for SELinux - 2.12pre-1
- Merge mount/losetup packages into the main package (#112324)
- Lose separate - remove selinux code from login and use pam_selinux - turn on selinux - Add BuildRequires: texinfo (from a bug# I don't remember)
- Fix #90588 with mountman patch142. - turn off selinux - turn on selinux
- remove context selection - Add patch140 (alldevs) to fix #101772. Printing the total size of
all devices was deemed a lower priority than having all devices
(e.g. /dev/ida/c0d9) displayed. - turn off selinux - turn on selinux - Fix #103004, #103954 - turn off selinux - build with selinux - Use urandom instead for mkcramfs - add SELINUX 2.5 support - #100433 patch - #97381 patch - rebuilt - Change patch128 to improve ipcs -l - Fix #85407 - Change patch128 to uti� x���������������������� X e ru��y.9.0 S 0�������� h fo�$ I ���������������� �� �� �� � erface
- Fix cobbler_manage_lib_files() interface
- Allow nagios check disk plugins to execute bin_t
- Allow quantum to transition to openvswitch_t
- Allow postdrop to stream connect to postfix-master
- Allow quantum to stream connect to openvswitch
- Add xserver_dontaudit_xdm_rw_stream_sockets() interface
- Allow daemon to send dgrams to initrc_t
- Allow kdm to start the power service to initiate a reboot or poweroff - Add mising nslcd_dontaudit_write_sock_file() interface
- one more fix
- Fix pki_read_tomcat_lib_files() interface
- Allow certmonger to read pki-tomcat lib files
- Allow certwatch to execute bin_t
- Allow snmp to manage /var/lib/net-snmp files
- Don't audit attempts to write to stream socket of nscld by thumbnailers
- Allow git_system_t to read network state
- Allow pegasas to execute mount command
- Fix desc for drdb_admin
- Fix condor_amin()
- Interface fixes for uptime, vdagent, vnstatd
- Fix labeling for moodle in /var/www/moodle/data
- Add interface fixes
- Allow bugzilla to read certs
- /var/www/moodle needs to be writable by apache
- Add interface to dontaudit attempts to send dbus messages to systemd domains, for xguest
- Fix namespace_init_t to create content with proper labels, and allow it to manage all user content
- Allow httpd_t to connect to osapi_compute port using httpd_use_openstack bolean
- Fixes for dlm_controld
- Fix apache_read_sys_content_rw_dirs() interface
- Allow logrotate to read /var/log/z-push dir
- Fix sys_nice for cups_domain
- Allow postfix_postdrop to acces postfix_public socket
- Allow sched_setscheduler for cupsd_t
- Add missing context for /usr/sbin/snmpd
- Kernel_t needs mac_admin in order to support labeled NFS
- Fix systemd_dontaudit_dbus_chat() interface
- Add interface to dontaudit attempts to send dbus messages to systemd domains, for xguest
- Allow consolehelper domain to write Xauth files in /root
- Add port definition for osapi_compute port
- Allow unconfined to create /etc/hostname with correct labeling
- Add systemd_filetrans_named_hostname() interface - Allow httpd_t to connect to osapi_compute port using httpd_use_openstack bolean
- Fixes for dlm_controld
- Fix apache_read_sys_content_rw_dirs() interface
- Allow logrotate to read /var/log/z-push dir
- Allow postfix_postdrop to acces postfix_public socket
- Allow sched_setscheduler for cupsd_t
- Add missing context for /usr/sbin/snmpd
- Allow consolehelper more access discovered by Tom London
- Allow fsdaemon to send signull to all domain
- Add port definition for osapi_compute port
- Allow unconfined to create /etc/hostname with correct labeling
- Add systemd_filetrans_named_hostname() interface - Fix file_contexts.subs to label /run/lock correctly - Try to label on controlC devices up to 30 correctly
- Add mount_rw_pid_files() interface
- Add additional mount/umount interfaces needed by mock
- fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk
- Fix tabs
- Allow initrc_domain to search rgmanager lib files
- Add more fixes which make mock working together with confined users
* Allow mock_t to manage rpm files
* Allow mock_t to read rpm log files
* Allow mock to setattr on tmpfs, devpts
* Allow mount/umount filesystems
- Add rpm_read_log() interface
- yum-cron runs rpm from within it.
- Allow tuned to transition to dmidecode
- Allow firewalld to do net_admin
- Allow mock to unmont tmpfs_t
- Fix virt_sigkill() interface
- Add additional fixes for mock. Mainly caused by mount running in mock_t
- Allow mock to write sysfs_t and mount pid files
- Add mailman_domain to mailman_template()
- Allow openvswitch to execute shell
- Allow qpidd to use kerberos
- Allow mailman to use fusefs, needs back port to RHEL6
- Allow apache and its scripts to use anon_inodefs
- Add alias for git_user_content_t and git_sys_content_t so that RHEL6 will update to RHEL7
- Realmd needs to connect to samba ports, needs back port to F18 also
- Allow colord to read /run/initial-setup-
- Allow sanlock-helper to send sigkill to virtd which is registred to sanlock
- Add virt_� x�������������(�������� X f itP�yuire�� ط�������a vel
�$ ���������������� �a �a �a � .3.5-4 Remi Collet <Fedora@famillecollet.com> 5.3.5-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.5-2 Remi Collet <Fedora@famillecollet.com> 5.3.5-1 Remi Collet <rpms@famillecollet.com> 5.3.4-2 Remi Collet <rpms@famillecollet.com> 5.3.4-1.1 Remi Collet <Fedora@famillecollet.com> 5.3.4-1 Remi Collet <Fedora@famillecollet.com> 5.3.3-5 Joe Orton <jorton@redhat.com> - 5.3.3-4 Joe Orton <jorton@redhat.com> - 5.3.3-3 Remi Collet <Fedora@famillecollet.com> 5.3.3-2 Remi Collet <Fedora@famillecollet.com> 5.3.3-1 Remi Collet <Fedora@famillecollet.com> 5.3.2-3 Caolán McNamara <caolanm@redhat.com> 5.3.2-2 Remi Collet <Fedora@famillecollet.com> 5.3.2-1 Joe Orton <jorton@redhat.com> - 5.3.1-3 Joe Orton <jorton@redhat.com> - 5.3.1-2 Remi Collet <Fedora@famillecollet.com> 5.3.1-1 Tom "spot" Callaway <tcallawa@redhat.com> - 5.3.0-7 Tomas Mraz <tmraz@redhat.com> - 5.3.0-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.0-5 Joe Orton <jorton@redhat.com> 5.3.0-4 Joe Orton <jorton@redhat.com> 5.3.0-3 Joe Orton <jorton@redhat.com> 5.3.0-2 Remi Collet <Fedora@famillecollet.com> 5.3.0-1 Remi Collet <Fedora@famillecollet.com> 5.2.10-1 Remi Collet <Fedora@FamilleCollet.com> - 5.2.9-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.2.8-10 Joe Orton <jorton@redhat.com> 5.2.8-9 Joe Orton <jorton@redhat.com> 5.2.8-8 Joe Orton <jorton@redhat.com> 5.2.8-7 Joe Orton <jorton@redhat.com> 5.2.8-5 Joe Orton <jorton@redhat.com> 5.2.8-4 Joe Orton <jorton@redhat.com> 5.2.8-3 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-2 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1.1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1 Joe Orton <jorton@redhat.com> 5.2.6-7 Joe Orton <jorton@redhat.com> 5.2.6-6 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-5 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-4 Joe Orton <jorton@redhat.com> 5.2.6-3 Joe Orton <jorton@redhat.com> 5.2.5-7 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.2.5-6 Joe Orton <jorton@redhat.com> 5.2.5-5 Joe Orton <jorton@redhat.com> 5.2.5-4 Release Engineering <rel-eng at fedoraproject dot org> - 5.2.5-3 Joe Orton <jorton@redhat.com> 5.2.5-2 Joe Orton <jorton@redhat.com> 5.2.4-3 Joe Orton <jorton@redhat.com> 5.2.4-2 Joe Orton <jorton@redhat.com> 5.2.3-9 Joe Orton <jorton@redhat.com> 5.2.3-8 Hans de Goede <j.w.r.degoede@hhs.nl> 5.2.3-7 Joe Orton <jorton@redhat.com> 5.2.3-6 Joe Orton <jorton@redhat.com> 5.2.3-5 Joe Orton <jorton@redhat.com> 5.2.3-4 Joe Orton <jorton@redhat.com> 5.2.3-3 Joe Orton <jorton@redhat.com> 5.2.3-2 Joe Orton <jorton@redhat.com> 5.2.2-4 Joe Orton <jorton@redhat.com> 5.2.2-3 Joe Orton <jorton@redhat.com> 5.2.2-2 Joe Orton <jorton@redhat.com> 5.2.1-5 Joe Orton <jorton@redhat.com> 5.2.1-4 Joe Orton <jorton@redhat.com> 5.2.1-3 Joe Orton <jorton@redhat.com> 5.2.1-2 Joe Orton <jorton@redhat.com> 5.2.0-10 Joe Orton <jorton@redhat.com> 5.2.0-9 Joe Orton <jorton@redhat.com> 5.2.0-8 Joe Orton <jorton@redhat.com> 5.2.0-7 Joe Orton <jorton@redhat.com> 5.2.0-6 Joe Orton <jorton@redhat.com> 5.2.0-5 Joe Orton <jorton@redhat.com> 5.2.0-4 Joe Orton <jorton@redhat.com> 5.2.0-3 Joseph Orton <jorton@redhat.com> 5.1.6-4 Joe Orton <jorton@redhat.com> 5.1.6-3 Joe Orton <jorton@redhat.com> 5.1.6-2 Jesse Keating <jkeating@redhat.com> - 5.1.4-8.1 Joe Orton <jorton@redhat.com> 5.1.4-8 Joe Orton <jorton@redhat.com> 5.1.4-7 Joe Orton <jorton@redhat.com> 5.1.4-6 Radek Vokal <rvokal@redhat.com> 5.1.4-5.1 Joe Orton <jorton@redhat.com> 5.1.4-5 Joe Orton <jorton@redhat.com> 5.1.4-3 Joe Orton <jorton@redhat.com> 5.1.3-3 Joe Orton <jorton@redhat.com> 5.1.2-5 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.3 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.1 Joe Orton <jorton@redhat.com> 5.1.2-4 Joe Orton <jorton@redhat.com> 5.1.2-3 Joe Orton <jorton@redhat.com> 5.1.2-2 Joe Orton <jorton@redhat.com> 5.1.1-8 Joe Orton <jorton@redhat.com> 5.1.1-7 Joe Orton <jorton@redhat.com> 5.1.1-6 Jesse Keating <jkeating@redhat.com> Joe Orton <jorton@redhat.com> 5.1.1-5 Joe Orton <jorton@redhat.com> 5.1.1-4 Joe� x���������������������� X g ksC�yajax�4 �< �L 4-2 �$
���������������� �L �L �L � Havoc Pennington <hp@redhat.com> 0.13-6 Havoc Pennington <hp@redhat.com> 0.13-5 Havoc Pennington <hp@redhat.com> 0.13-4 Havoc Pennington <hp@redhat.com> 0.13-3 Havoc Pennington <hp@redhat.com> 0.13-2 Havoc Pennington <hp@redhat.com> 0.13-1 Havoc Pennington <hp@redhat.com> 0.11.91-3 Elliot Lee <sopwith@redhat.com> Havoc Pennington <hp@redhat.com> 0.11.91-1 Havoc Pennington <hp@redhat.com> 0.11.90-1 Havoc Pennington <hp@redhat.com> 0.11-2 Havoc Pennington <hp@redhat.com> 0.11-1 Havoc Pennington <hp@redhat.com> 0.10.90-1 Havoc Pennington <hp@redhat.com> 0.9-1 Havoc Pennington <hp@redhat.com> 0.6.94-1 Havoc Pennington <hp@redhat.com> 0.6.93-1 Havoc Pennington <hp@redhat.com> 0.6.92-1 Havoc Pennington <hp@redhat.com> 0.6.91-1 Havoc Pennington <hp@redhat.com> 0.6.90-1 - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing
a single connection.
Resolves: #2189201 - Fix CVE-2022-42010 (#2133645)
- Fix CVE-2022-42011 (#2133639)
- Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH
session monitoring script.
Related: #2089362 - Use hangup signal instead of termination signal to
kill sesssion monitoring script to appeach tcsh.
Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the
session exits.
Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those
sessions.
Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Packaging updates from Fedora (#1941642) - Fix dbus-launch call in sh snippet (#1940348) - Fix raising hard fd limit (#1839753) - Install X11 SSH forwarding snippets (#1874282) - Fix CVE-2020-12049 (#1851997) - Improve permissions on ghosted /run/dbus (#1797833) - Ensure that patches are applied (#1725570) - Fix CVE-2019-12749 (#1725570) - Fix useradd dependency of dbus-daemon rhbz#1634496 - Drop unpublished -doc package to fix FTBFS rhbz#1640736
- Add dist-git smoketest rhbz#1625683
- Move dbus system user creation to correct package rhbz#1634496 - BuildRequire python3-gobject instead of pygobject3
- Related: bug#1614611 - More python3 - Use python3-dbus to drop python2 deps - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
utilities independent of the actual message bus. They are valid to be used
with independent message-bus implementations, so they should not needlessly
pull in dbus-daemon. - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
and setup files as independent package ready for alternative Message Bus
implementations to be used. - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
compatibility around and make it pull in the new 'dbus-daemon' package. - Update to 1.12.8 (#1556590) - Don't Require: xorg-x11-xinit. We don't actually need it, and newer
filesystem packages own the directory for us. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.12.0 - Update to 1.11.22 - Update to 1.11.20
- Allow cmake support to be disabled (#1497257) - Update to 1.11.18 - Rebuilt for AutoReq cmake-filesystem - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuild with binutils fix for ppc64le (#1475636) - Update to 1.11.16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 1.11.14 - Update to 1.11.12 - Own session.d and system.d directories (#1285033) - Update to 1.11.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 1.11.8 - Update to 1.11.6
- Use systemd user unit macros - Update to 1.11.4 - Update to 1.11.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 1.11.0
- Fix sending of audit events (#1278602) - Update to 1.10.6 - Update to 1.10.4 - Update to 1.10.2 - Inject session bus address into user bus environment (#1274700) - Enable D� x��������������������� X h �@I�y_�@(� � �L _����$ ���������������� �L �L j 86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=03b16c1283d036085f8e73da8b23020fb13210a4, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=439e5c9cef6a9e5c089d9a1c425c9b2f42eeecd4, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a0b6a02cd6f672d6a5a2fc7bcff3e7901db05fcd, stripped ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e4f3a1395752122633cfc6c760e84d1d28056884, stripped UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) # .
R
R
R R R R R R R
R R R
R R R R R R R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R R R R R R
R R R R
R R R R R R R utf-8 4f570f6853edd89eabc7cda5fe205b93a353f93e2e6470b5b85567eea36a7573 ? ���� � �3 !pQ�p�)�Tξ7��]�mtZ`d��W
�]�mtZ`� �ZK=�:d���I��~��<B+uK L+�0��a���9�\g�j��q%���1]���Z�KQ]��,�N1��� �WJER��B���W��� �.�giΎE�G 5�ެ+q����h�i�!�u�~2-�z��9ǒ��� IW�#�S��{��P���+HۄD��*tZ�n�����ݬ��͇ʿ�2�pY���q��P����ƞ��j���g�#1X��V��z�h ����#|F\���S�)�a5��CZ.6\����8�eZ\X�� 8�?��G�3��?���}vx$=s&�ߎ���6�g�ɪ J*�QN B�'M/�>tY`K6ܣ��{�Ձ�$d�k<� ��� � t��V�D�� x�9��,��� N�g.���sH�&�X�ٹ �u����* ������GS
WL�<�8qY�<f��!B;b:Ņʼ��ܧ;HDuP�/Q�&�V�t��:���3vF� ̿V]&�d�<cd4 ��J�̫�j�x�'x���Jq���H ���U���3 !pQ�p�)�Tξ7��]�mtZ`d��W
�]�mtZ`�g �q/� �)$�}�r�z�v�i���я�ئ~�� �bN�α������!�ս��%3���+���`��-�9�@�%>����̇���V}Q0���!&�G���hl�� �mTlڈ�,�^J�f"��<f�[ä������b�)ي�5���͵l�q�lłय़��(�G)��6��3+������∐�������mڶb/:B�an��;�' ��Q�Kn� 0�e�Ɓsc� ����Aŭ~c7���;ae��i��M�6�P� ��Q?m�`�rB �!���r�'o �� ���hNM�7`��-�G5�%Ps
�� �� �5���ᑱ\��P�B���W4�/輛�F\ �<�}ID�: �J� XF �`��Q�-��cD]� 0�0�Z�y����n�sC2eonmvN�վ����y�v��S�Bn� /\�.f�� �� �eF2V�E�e���� _^��h��ۏ�H�zQ�B#t��9d������d> )�7ec29702a330e333119d172b4661d8b26d93f56b bd4490b981a47333de80f289e878a094984a8f1f5d54511886fdad753d39fb89 ee� �T ee�� blk_exit_queue() (Ming Lei) [1614198]
- [block] blkcg: Introduce blkg_root_lookup() (Ming Lei) [1614198]
- [block] block: Remove two superfluous #include directives (Ming Lei) [1614198]
- [block] blk-mq: count the hctx as active before allocating tag (Ming Lei) [1614198]
- [block] block: bvec_nr_vecs() returns value for wrong slab (Ming Lei) [1614198]
- [block] drivers/block/drbd: remove the null check for (Ming Lei) [1614198]
- [block] drivers/block/aoe/aoedev: NULL check is not needed for (Ming Lei) [1614198]
- [block] drivers/block/mtip32xx: remove the null check for (Ming Lei) [1614198]
- [block] cfq: Suppress compiler warnings about comparisons (Ming Lei) [1614198]
- [block] cfq: Annotate fall-through in a switch statement (Ming Lei) [1614198]
- [block] blk-wbt: Avoid lock contention and thundering herd issue in (Ming Lei) [1590363]
- [block] target/loop: depend on SCSI (Ming Lei) [1614198]
- [block] xen-blkfront: use true and false for boolean values (Ming Lei) [1614198]
- [block] lightnvm: remove minor version check for 2.0 (Ming Lei) [1614198]
- [block] scsi: Check sense buffer size at build time (Ming Lei) [1614198]
- [b� x��������������{������� X i en��y139,P� з b -of-�$ r ���������������� b & nobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection cpio xz 2 noarch-redhat-linux-gnu directory empty UTF-8 Unicode text ASCII text https://bugs.rockylinux.org utf-8 aace327e4cfb59ab7a4813fa4d62bda20c248e1be9e9abf8a60b4dece139967c ? ����
al�!�졖c��[X6O�3 !pQ�p�)�Tξ7��]�mtZ`i���
�]�mtZ`Z}�g�z��s�@�
���^X��N|ޣeZ�)�
���ouE �[;A��y�|˷���Z �]�0���H�G.ת�"ܣ �G�+6 �A�N �hJu���'J�}��g�?�~$�ţ�j:�`���e"8]��q/��0�o��KѦ8z�f!Gx�ԝ..l�����j.R�(R�o�q����yt�U�����&n�}������߮,�!=��t�tnAf �i�L
�Y�<#y5�� "�&��1���' B�(�Ϸ4#ʷ�l���m�V�ц��@�ye�`��j`g�H�� H�y�c��*���=^�֦����V�?@5j�����,� ���J�
ЩD��Ϟ� ��D!Dn��$�B
@;�h��2"��e]q% � n��j������zr=�N�3�,h����}�Q �P�lNȳ��&϶�Vb` K�Q��
�g���}�ſ$ ��Go�5=�(4&e;�Ǜ�i><y=�N�!0V�GΟ�%�K���J4�,�f�Z[��`��u����o��O߈��R�df51711f48afd026db3573588ba7737ca66eda57 1a713fc1ac754bfd3f7df0e8216aaa2d0a819499f4bb5269143ec45835184083 i�up e� i�unn (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728) - man: mention System Administrator's Guide in systemctl manpage (#1623116)
- udev: introduce udev net_id "naming schemes" (#1827462)
- meson: make net.naming-scheme= default configurable (#1827462)
- man: describe naming schemes in a new man page (#1827462)
- udev/net_id: parse _SUN ACPI index as a signed integer (#1827462)
- udev/net_id: don't generate slot based names if multiple devices might claim the same slot (#1827462)
- fix typo in ProtectSystem= option (#1871139)
- remove references of non-existent man pages (#1876807)
- log: Prefer logging to CLI unless JOURNAL_STREAM is set (#1865840)
- locale-util: add new helper locale_is_installed() (#1755287)
- test: add test case for locale_is_installed() (#1755287)
- tree-wide: port various bits over to locale_is_installed() (#1755287)
- install: allow instantiated units to be enabled via presets (#1812972)
- install: small refactor to combine two function calls into one function (#1812972)
- test: fix a memleak (#1812972)
- docs: Add syntax for templated units to systemd.preset man page (#1812972)
- shared/� x�������������k������� X j je��yrg> � V �� <re�$ t ���������������� �� �� �� � andbox domains to setattr on chr_file and blk_file svirt_sandbox_file_t, so sshd will work within a container
- Allow httpd_t to read also git sys content symlinks
- Allow init_t to read gnome home data
- Dontaudit setroubleshoot_fixit_t execmem, since it does not seem to really need it.
- Allow virsh to execute systemctl
- Fix for nagios_services plugins
- add type defintion for ctdbd_var_t
- Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
- Allow net_admin/netlink_socket all hyperv_domain domains
- Add labeling for zarafa-search.log and zarafa-search.pid
- Fix hypervkvp.te
- Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type
- Fix logging policy
- Allow syslog to bind to tls ports
- Update labeling for /dev/cdc-wdm
- Allow to su_domain to read init states
- Allow init_t to read gnome home data
- Make sure if systemd_logind creates nologin file with the correct label
- Clean up ipsec.te - Add auth_exec_chkpwd interface
- Fix port definition for ctdb ports
- Allow systemd domains to read /dev/urand
- Dontaudit attempts for mozilla_plugin to append to /dev/random
- Add label for /var/run/charon.*
- Add labeling for /usr/lib/systemd/system/lvm2.*dd policy for motion service
- Fix for nagios_services plugins
- Fix some bugs in zoneminder policy
- add type defintion for ctdbd_var_t
- Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
- Allow net_admin/netlink_socket all hyperv_domain domains
- Add labeling for zarafa-search.log and zarafa-search.pid
- glusterd binds to random unreserved ports
- Additional allow rules found by testing glusterfs
- apcupsd needs to send a message to all users on the system so needs to look them up
- Fix the label on ~/.juniper_networks
- Dontaudit attempts for mozilla_plugin to append to /dev/random
- Allow polipo_daemon to connect to flash ports
- Allow gssproxy_t to create replay caches
- Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type - init reload from systemd_localed_t
- Allow domains that communicate with systemd_logind_sessions to use systemd_logind_t fd
- Allow systemd_localed_t to ask systemd to reload the locale.
- Add systemd_runtime_unit_file_t type for unit files that systemd creates in memory
- Allow readahead to read /dev/urand
- Fix lots of avcs about tuned
- Any file names xenstored in /var/log should be treated as xenstored_var_log_t
- Allow tuned to inderact with hugepages
- Allow condor domains to list etc rw dirs - Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type
- Add additional fixes forpegasus_openlmi_account_t
- Allow mdadm to read /dev/urand
- Allow pegasus_openlmi_storage_t to create mdadm.conf and write it
- Add label/rules for /etc/mdadm.conf
- Allow pegasus_openlmi_storage_t to transition to fsadm_t
- Fixes for interface definition problems
- Dontaudit dovecot-deliver to gettatr on all fs dirs
- Allow domains to search data_home_t directories
- Allow cobblerd to connect to mysql
- Allow mdadm to r/w kdump lock files
- Add support for kdump lock files
- Label zarafa-search as zarafa-indexer
- Openshift cgroup wants to read /etc/passwd
- Add new sandbox domains for kvm
- Allow mpd to interact with pulseaudio if mpd_enable_homedirs is turned on
- Fix labeling for /usr/lib/systemd/system/lvm2.*
- Add labeling for /usr/lib/systemd/system/lvm2.*
- Fix typos to get a new build. We should not cover filename trans rules to prevent duplicate rules
- Add sshd_keygen_t policy for sshd-keygen
- Fix alsa_home_filetrans interface name and definition
- Allow chown for ssh_keygen_t
- Add fs_dontaudit_ge� x��������������Z������� X k 01��yfcd,��������X� l t EL�$ | ���������������� l � : for db4-4.3 (Robert Scheck, #140167)
- build against mysql-devel
- run tests in %check - truncate changelog at 4.3.1-1
- merge from 4.3.x package:
- enable mime_magic extension and Require: file (#130276) - fix dom/sqlite enable/without confusion - fix phpize installation for lib64 platforms
- add fix for segfault in variable parsing introduced in 5.0.2 - update to 5.0.2 (#127980)
- build against mysqlclient10-devel
- use new RTLD_DEEPBIND to load extension modules
- drop explicit requirement for elfutils-devel
- use AddHandler in default conf.d/php.conf (#135664)
- "fix" round() fudging for recent gcc on x86
- disable sqlite pending audit of warnings and subpackage split - don't build dom extension into 2.0 SAPI - ExclusiveArch: x86 ppc x86_64 for the moment - fix default extension_dir and conf.d/php.conf - update to 5.0.1
- only build shared modules once
- put dom extension in php-dom subpackage again
- move extension modules into %{_libdir}/php/modules
- don't use --with-regex=system, it's ignored for the apache* SAPIs - Merge in some spec file changes from Jeff Stern (jastern@uci.edu) - bump to 5.0.0
- add patch to prevent clobbering struct re_registers from regex.h
- remove domxml references, replaced with dom now built-in
- fix php.ini to refer to php5 not php4 php70-php-pecl-oci8 7.0.33-40.el8.remi 7.0.33-40.el8.remi 7.0.33-40.el8.remi 2.1.8 2.1.8 2.1.8 20-oci8.ini 30-pdo_oci.ini oci8.so pdo_oci.so /etc/opt/remi/php70/php.d/ /opt/remi/php70/root/usr/lib64/php/modules/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=596fb8bfce7cb96c4ad0b0ddf9033ef464048a7a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36fb216862358123953a050d2f66dfb62ec947cc, stripped https://forum.remirepo.net/ utf-8 e088bdee2b3df7f23db94eba98030e7dce346d62c220633ebab0ddca9a2c9850 ? ��� � bK{�y[*ӎ�9S�_�3 !k8��# ��+���UP�Y_sZd� [
UP�Y_sZ`;�N�O���
�y����G6/9H˳�?�8`)��S�v�a�T�lF�����&kR_E��1|�
��NU�G>�{ �#M1��C�4ُ�,�0���C�K B����c:�nf�r��= � :q�6
� � X�ZVn�)A��hH~<P�1 �蝈���N��֢V��om8�T���#����������1�'���fo�����2�T������ ��|��µ� �맟�"�$���8fm(��$�7�; ���/�ְ���Y�9�ӗ7��3� Sm����I
®]�I8p��p�� i�`R���# V(Ԁ ��c�P �}f~K��*%�z�� _���w$���QD.�>�%�ǿ�{�Z�Y�uK��נc��"� Շ|D�͗_f��� ���J[�� U�L�h�
JC��v���m7�{��-��]�-����U*�lݞ�/�S62�{��,�ܳk�a֙�@|X��:�?hh4��P�$Y�����. ���3���+M%V6b05f46996e46864c89cea5f9d5ca2970e8c26f9 02d1fbe3c8bfc03b75687484af640f4e780444359e2672e7b6dc542ad4e5cd15 h� �� h�aul) [1707312 1688524 1685552 1685427 1665631 1665088 1664615 1664609 1664189 1664177 1664175 1664104 1662017 1660302 1643842 1640840 1639990 1639436 1637606 1633845 1633843 1633842 1504286]
- [drm] drm/i915: Polish skl_is_16gb_dimm() (Lyude Paul) [1707312 1688524 1685552 1685427 1665631 1665088 1664615 1664609 1664189 1664177 1664175 1664104 1662017 1660302 1643842 1640840 1639990 1639436 1637606 1633845 1633843 1633842 1504286]
- [drm] drm/i915: Extract functions to derive SKL+ DIMM info (Lyude Paul) [1707312 1688524 1685552 1685427 1665631 1665088 1664615 1664609 1664189 1664177 1664175 1664104 1662017 1660302 1643842 1640840 1639990 1639436 1637606 1633845 1633843 1633842 1504286]
- [drm] drm/i915: Store DIMM rank information as a number (Lyude Paul) [1707312 1688524 1685552 1685427 1665631 1665088 1664615 1664609 1664189 1664177 1664175 1664104 1662017 1660302 1643842 1640840 1639990 1639436 1637606 1633845 1633843 163384� x��������������I������� X ^ ��y `�������n
�� �$ q ���������������� �� �� �� � ectly
- Add support for pam_mount to mount user's encrypted home When a user logs in and logs out using ssh
- Add support for .Xauthority-n
- Label umount.crypt as lvm_exec_t
- Allow syslogd to search psad lib files
- Allow ssh_t to use /dev/ptmx
- Make sure /run/pluto dir is created with correct labeling
- Allow syslog to run shell and bin_t commands
- Allow ip to relabel tun_sockets
- Allow mount to create directories in files under /run
- Allow processes to use inherited fifo files - Add policy for lsmd
- Add support for /var/log/mariadb dir and allow mysqld_safe to list this directory
- Update condor_master rules to allow read system state info and allow logging
- Add labeling for /etc/condor and allow condor domain to write it (bug)
- Allow condor domains to manage own logs
- Allow glusterd to read domains state
- Fix initial hypervkvp policy
- Add policy for hypervkvpd
- Fix redis.if summary - Allow boinc to connect to @/tmp/.X11-unix/X0
- Allow beam.smp to connect to tcp/5984
- Allow named to manage own log files
- Add label for /usr/libexec/dcc/start-dccifd and domtrans to dccifd_t
- Add virt_transition_userdomain boolean decl
- Allow httpd_t to sendto unix_dgram sockets on its children
- Allow nova domains to execute ifconfig
- bluetooth wants to create fifo_files in /tmp
- exim needs to be able to manage mailman data
- Allow sysstat to getattr on all file systems
- Looks like bluetoothd has moved
- Allow collectd to send ping packets
- Allow svirt_lxc domains to getpgid
- Remove virt-sandbox-service labeling as virsh_exec_t, since it no longer does virsh_t stuff
- Allow frpintd_t to read /dev/urandom
- Allow asterisk_t to create sock_file in /var/run
- Allow usbmuxd to use netlink_kobject
- sosreport needs to getattr on lots of devices, and needs access to netlink_kobject_uevent_socket
- More cleanup of svirt_lxc policy
- virtd_lxc_t now talks to dbus
- Dontaudit leaked ptmx_t
- Allow processes to use inherited fifo files
- Allow openvpn_t to connect to squid ports
- Allow prelink_cron_system_t to ask systemd to reloaddd miscfiles_dontaudit_access_check_cert()
- Allow ssh_t to use /dev/ptmx
- Make sure /run/pluto dir is created with correct labeling
- Allow syslog to run shell and bin_t commands
- Allow ip to relabel tun_sockets
- Allow mount to create directories in files under /run
- Allow processes to use inherited fifo files
- Allow user roles to connect to the journal socket - selinux_set_enforce_mode needs to be used with type
- Add append to the dontaudit for unix_stream_socket of xdm_t leak
- Allow xdm_t to create symlinks in log direcotries
- Allow login programs to read afs config
- Label 10933 as a pop port, for dovecot
- New policy to allow selinux_server.py to run as semanage_t as a dbus service
- Add fixes to make netlabelctl working on MLS
- AVCs required for running sepolicy gui as staff_t
- Dontaudit attempts to read symlinks, sepolicy gui is likely to cause this type of AVC
- New dbus server to be used with new gui
- After modifying some files in /etc/mail, I saw this needed on the next boot
- Loading a vm from /usr/tmp with virt-manager
- Clean up oracleasm policy for Fedora
- Add oracleasm policy written by rlopez@redhat.com
- Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
- Add label for /var/crash
- Allow fenced to domtrans to sanclok_t
- Allow nagios to manage nagios spool files
- Make tfptd as home_manager
- Allow kdump to read kcore on MLS system
- Allow mysqld-safe sys_nice/sys_resource caps
- Allow apache to search automount tmp dirs if http_use_nfs is enabled
- Allow crond to transition to named_t, for use with unbound
- Allow crond to look at named_conf_t, for unbound
- Allow mozilla_plugin_t to transition its home content
- Allow dovecot_domain to read all system and network state
- Allow httpd_user_script_t to call getpw
- Allow semanage to read pid files
- Dontaudit leaked file descriptors from user domain into thumb
- Make PAM authentication working if it is enabled in ejabberd
- Add fixes for rabbit � x�����n 9������� X ` ��y ����������������5 �$ } ���������������� �5 �5 �5 � upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service relocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MyS� x��������������(������� X n to��yd ma� ������ � �5 to r�$ z ���������������� �5 �5 �5 � imelib 2018.01 - cleanup for EL-8 - test build for https://bugs.php.net/77430 - Update to 7.3.1 - http://www.php.net/releases/7_3_1.php - update to 7.3.1RC1
- oci8 version is now 2.2.0 - update to 7.3.0 GA
- update FPM configuration from upstream - update to 7.3.0RC6 - update to 7.3.0RC5 - test build for https://github.com/php/php-src/pull/3652 - update to 7.3.0RC4 - update to 7.3.0RC3 - update to 7.3.0RC2
- use oracle client library version 18.3 - update to 7.3.0RC1
- with oniguruma 6.9.0 - add upstream patch for openssl failing test - add upstream patch for F29 - update to 7.3.0beta3 - update to 7.3.0beta2
- bump API numbers - update to 7.3.0alpha4 - update to 7.3.0alpha3 - update to 7.3.0alpha2 new sources - update to 7.3.0alpha2
- bump php(zend-abi) and php(api) to 20180606
- revert 5dd1ef90caec3021e6ce55c8554e695edf641eaf - update to 7.3.0alpha1
- switch from pcre to pcre2 - update to 7.2.7RC1 - Update to 7.2.6 - http://www.php.net/releases/7_2_6.php - rebuild against EL 7.5 - update to 7.2.6RC1 - Update to 7.2.5 - http://www.php.net/releases/7_2_5.php - update to 7.2.5RC1 - add upstream patch for oniguruma 6.8.1, FTBFS #1562583 - Update to 7.2.4 - http://www.php.net/releases/7_2_4.php
- FPM: update default pool configuration for process.dumpable - add file trigger to restart the php-fpm service
when new pool or new extension installed (F27+) - update to 7.2.4RC1 - devel: drop dependency on devtoolset - Update to 7.2.3 - http://www.php.net/releases/7_2_3.php
- FPM: revert pid file removal
- improve devel dependencies - rebuild for new tag and drop patch merged upstream
- drop ldconfig scriptlets on F28 - update to 7.2.3RC1
- adapt systzdata, fixheader and ldap_r patches
- apply upstream patch for date ext - Update to 7.2.2 - http://www.php.net/releases/7_2_2.php - update to 7.2.2RC1
- define SOURCE_DATE_EPOCH for reproducible build - Update to 7.2.1 - http://www.php.net/releases/7_2_1.php - add upstream patch for https://bugs.php.net/75579 - update to 7.2.1RC1 - update to 7.2.0 GA - update to 7.2.0RC6 - update to 7.2.0RC5 - enable argon2 password hash - update to 7.2.0RC4
- oci8 version is now 2.1.8 - dont obsolete php72-php-pecl-libsodium - update to 7.2.0RC3 - RC3 test build
- F27: php now requires php-fpm and start it with httpd / nginx - update builder from RHEL 7.3 to RHEL 7.4 - update to 7.2.0RC2 - add patch for EL-6, fix undefined symbol: sqlite3_errstr - update to 7.2.0RC1 - test build from git snapshot
- refresh configuration files, sync with upstream, drop .so suffix - test build from git snapshot - test build from git snapshot
- adapt tzdata patch for timelib 2017.05beta7
- disable httpd MPM check - update to 7.2.0beta3 - add patch for EL-6, fix undefined symbol: sqlite3_errstr
- revert use of sqlite3_close_v2 on EL-6 - update to 7.2.0beta2
- oci8 version is now 2.1.7 - update to 7.2.0beta1
- oci8 version is now 2.1.6
- bump apiver and zendver to 20170718 - test build
- add sodium extension in new sub-package - update to 7.2.0alpha3 - update to 7.2.0alpha2
- oci8 version is now 2.1.5
- use oracle instant client version 12.2 - update to 7.2.0alpha1 - new snapshot
- use system oniguruma (F26) - new snapshot - test build for release process test, 7.2.0alpha0
- dba: add --with-lmdb build option - new snapshot - new snapshot, May the 4th be with you
- enable PHP execution of .phar files, see #1117140 - refresh - update to 7.2.0-dev
- drop mcrypt subpackage (removed upstream) - Update to 7.1.4 - http://www.php.net/releases/7_1_4.php - Update to 7.1.4RC1 - Update to 7.1.3 - http://www.php.net/releases/7_1_3.php - fix interbase build on F26 - Update to 7.1.3RC1 - Update to 7.1.2 - http://www.php.net/releases/7_1_2.php - Update to 7.1.2RC1 (new sources) - Update to 7.1.2RC1 - EL-7: add patch for https://bugs.php.net/73956
- switch back to gcc 6.2 - EL-7: rebuild using gcc 4.8 instead of 6.2
because of https://bugzilla.redhat.com/1414348 - Update to 7.1.1 - http://www.php.net/releases/7_1_1.php - Update to 7.1.1RC1 - test optimized build using GCC 6.2 - Update to 7.1.0 - http://www.php� x�������������`������� X o ol�yauth�� �K �# ack �$ s ���������������� �# �# 6 /etc/ /etc/sysconfig/ /usr/bin/ /usr/lib/systemd/system/ -O2 -g cpio gzip 9 x86_64-debian-linux ASCII text ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=4ac0c3998298b2c9f3a4fcbf2c9109ead96ced4e, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3c0a9f7263b24b1aa3a9445349227fd962213822, for GNU/Linux 3.2.0, stripped utf-8 4e2c3996dbb57b2370c4d5f9ac6032e79ebe744a285a570297ccd4b7a0c03dc3 b79968b85a068ba41887c28cfe7e4796305b51268f6a0d0774463bdffa2c1767 ? ���P ���Sb����j��X>��2 �� 6!�:�{��0��`�?�wE�Ee�{� engineering@grafana.com
�?�wE�E&� �&���Gxn����:��{_.��Zs +�Q����ɿ>��Ҝ�>���&���Yt�_�8:˜O L9Up}U �"OS�kLtǥ��7�����0�X�vu�Ώ�r#����zY z�|< l�z��� �弹��)��6�5�a.�3Q�8zB�I�vE"D������?����X�<y
�=@ѫ<�?{u��u�U�<��
��*��؋o)�5x���X�����]��> H/�{���U��e�+���dr�YnYn��Q�B��0�y�� �L�@k�}P��H 34�tS��,?��%7?:n��b�,>cwD=��PI�4 �Q��;;��IX���ަ�!�`)炰+p��)F�.B�ogtE�Q � �1� I� 5~H�5+C95d3618abc90f5b0a5066596277a257314c45222 ef7974bd8b4c8ae5c24ba0a1accb0ee249f338bcd49c736cc51542ba3badf810 h�i �1p/ h�e- 3.3.2-2 Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1 David Malcolm <dmalcolm@redhat.com> - 3.3.1-4 Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3 Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-2 Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1 David Malcolm <dmalcolm@redhat.com> - 3.3.0-10 David Malcolm <dmalcolm@redhat.com> - 3.3.0-9 Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8 Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-7 Karsten Hopp <karsten@redhat.com> 3.3.0-6 David Malcolm <dmalcolm@redhat.com> - 3.3.0-5 David Malcolm <dmalcolm@redhat.com> - 3.3.0-4 David Malcolm <dmalcolm@redhat.com> - 3.3.0-3 David Malcolm <dmalcolm@redhat.com> - 3.3.0-2 David Malcolm <dmalcolm@redhat.com> - 3.3.0-1 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.6.rc3 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.5.rc2 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.4.rc1 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2 Karsten Hopp <karsten@redhat.com> 3.3.0-0.2.b1 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.3-11 David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1 David Malcolm <dmalcolm@redhat.com> - 3.2.3-9 Bohuslav Kabrda <bkabrda@redhat.com> - 3.2.3-8 David Malcolm <dmalcolm@redhat.com> - 3.2.3-7 David Malcolm <dmalcolm@redhat.com> - 3.2.3-6 David Malcolm <dmalcolm@redhat.com> - 3.2.3-5 David Malcolm <dmalcolm@redhat.com> - 3.2.3-4 David Malcolm <dmalcolm@redhat.com> - 3.2.3-3 David Malcolm <dmalcolm@redhat.com> - 3.2.3-2 David Malcolm <dmalcolm@redhat.com> - 3.2.3-1 Thomas Spura <tomspur@fedoraproject.org> - 3.2.2-13 Thomas Spura <tomspur@fedoraproject.org> - 3.2.2-12 Ville Skyttä <ville.skytta@iki.fi> - 3.2.2-11 Karsten Hopp <karsten@redhat.com> 3.2.2-10 Rex Dieter <rdieter@fedoraproject.org> - 3.2.2-9 David Malcolm <dmalcolm@redhat.com> - 3.2.2-8 David Malcolm <dmalcolm@redhat.com> - 3.2.2-7 David Malcolm <dmalcolm@redhat.com> - 3.2.2-6 David Malcolm <dmalcolm@redhat.com> - 3.2.2-5 David Malcolm <dmalcolm@redhat.com> - 3.2.2-4 David Malcolm <dmalcolm@redhat.com> - 3.2.2-3 David Malcolm <dmalcolm@redhat.com> - 3.2.2-2 David Malcolm <dmalcolm@redhat.com> - 3.2.2-1 David Malcolm <dmalcolm@redhat.com> - 3.2.1-7 David Malcolm <dmalcolm@redhat.com> - 3.2.1-6 David Malcolm <dmalcolm@redhat.com> - 3.2.1-5 David Malcolm <dmalcolm@redhat.com> - 3.2.1-4 David Malcolm <dmalcolm@redhat.com> - 3.2.1-3 Dennis Gilmore <dennis@ausil.us> - 3.2.1-2 David Malcolm <dmalcolm@redhat.com> - 3.2.1-1 David Malcolm <dmalcolm@redhat.com> - 3.2-5 David Malcolm <dmalcolm@redhat.com> - 3.2-4 David Malcolm <dmalcolm@redhat.com> - 3.2-3 David Malcolm <dmalcolm@redhat.com> - 3.2-2 David Malcolm <dmalcolm@redhat.com> - 3.2-1 David Malcolm <dmalcolm@redh� x��������������������� X p lem�yRHEL� � @ n RH�$ ���������������� @ @ @ � sts.fedoraproject.org> - 1.3.1-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-2 Adam Jackson <ajax@redhat.com> 1.3.1-1 Adam Jackson <ajax@redhat.com> 1.3.0-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3 Adam Jackson <ajax@redhat.com> 1.3.0-2 Adam Jackson <ajax@redhat.com> 1.3.0-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.99.4-3 Adam Jackson <ajax@redhat.com> 1.2.99.4-2 Adam Jackson <ajax@redhat.com> 1.2.99.4-1 Adam Jackson <ajax@redhat.com> 1.2.3-3 Adam Jackson <ajax@redhat.com> 1.2.3-2 Adam Jackson <ajax@redhat.com> 1.2.3-1 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.2.2-3 parag <paragn@fedoraproject.org> 1.2.2-2 Adam Jackson <ajax@redhat.com> 1.2.2-1 Adam Jackson <ajax@redhat.com> - 1.2.0-5 Matthias Clasen <mclasen@redhat.com> 1.2.0-4 Adam Jackson <ajax@redhat.com> 1.2.0-3 Adam Jackson <ajax@redhat.com> 1.2.0-2 Adam Jackson <ajax@redhat.com> 1.2.0-1 Adam Jackson <ajax@redhat.com> 1.1.1-2.1 Jesse Keating <jkeating@redhat.com> 1.1.1-3.1 Mike A. Harris <mharris@redhat.com> 1.1.1-3 Mike A. Harris <mharris@redhat.com> 1.1.1-2 Adam Jackson <ajackson@redhat.com> 1.1.1-1 Jesse Keating <jkeating@redhat.com> - 1.1.0.2-2.2 Jesse Keating <jkeating@redhat.com> - 1.1.0.2-2.1 Mike A. Harris <mharris@redhat.com> 1.1.0.2-2 Mike A. Harris <mharris@redhat.com> 1.1.0.2-1 Mike A. Harris <mharris@redhat.com> 1.1.0.1-1 Jesse Keating <jkeating@redhat.com> Mike A. Harris <mharris@redhat.com> 0.99.2-1 Mike A. Harris <mharris@redhat.com> 0.99.1-1 Mike A. Harris <mharris@redhat.com> 0.99.0-3 Mike A. Harris <mharris@redhat.com> 0.99.0-2 Mike A. Harris <mharris@redhat.com> 0.99.0-1 - libXrandr 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Drop useless %defattr - Use ldconfig scriptlet macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - libXrandr 1.5.1
- fixes CVE-2016-7947, CVE-2016-7948 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - libXrandr 1.5.0 - fixup requires/br - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - libXrandr 1.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - libXrandr 1.4.1 - Require libX11 1.6RC2 for _XEatDataWords - Update to git snapshot to fix CVEs listed below:
- CVE-2013-1986 - autoreconf for aarch64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - libXrandr 1.4.0 upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - libXrandr 1.3.1 - randr-git.patch: Update to git - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Un-require xorg-x11-filesystem
- Remove useless %dir - libXrandr 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - libXrandr-1.2.99.4-gop.patch: Fix encoding of GetOutputPrimary. - libXrandr 1.2.99.4 - Fix Requires in -devel subpackage - Fix BuildRequires. - libXrandr 1.2.3 - Autorebuild for GCC 4.3 - Merge-Review #226083
- Removed BR:pkgconfig
- Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
- Removed zero-length README file - libXrandr 1.2.2 - Rebuild for build id - Don't install INSTALL - BuildRequire on the randrproto virtual instead of a magic x-x-p-d version.
- Fix -devel package to require sufficiently new randrproto. - libXrandr-1.2.0-appease-cee-plus-plus.patch: don't use C++ keywords as
function argument names. - libXran� x�������������P�������� X q to��y on ��������`� � s fo�$ & ���������������� � z& � � ec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix memory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service rel� x�������������������� X r og��y5.61��������@� �5 5.1�$ ���������������� �5 �5 �5 � p.ini - enable SASL support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for net-snmp soname bump - build json and zip shared, in -common (Remi Collet, #215966)
- obsolete php-json and php-pecl-zip
- build readline extension into /usr/bin/php* (#210585)
- change module subpackages to require php-common not php (#177821) - provide php-zend-abi (#212804)
- add /etc/rpm/macros.php exporting interface versions
- synch with upstream recommended php.ini - update to 5.2.0 (#213837)
- php-xml provides php-domxml (#215656)
- fix php-pdo-abi provide (#214281) - rebuild for curl soname bump
- add build fix for curl 7.16 API - from upstream: add safety checks against integer overflow in _ecalloc - update to 5.1.6 (security fixes)
- bump default memory_limit to 16M (#196802) - rebuild - Provide php-posix (#194583)
- only provide php-pcntl from -cli subpackage
- add missing defattr's (thanks to Matthias Saou) - move Obsoletes for php-openssl to -common (#194501)
- Provide: php-cgi from -cli subpackage - split out php-cli, php-common subpackages (#177821)
- add php-pdo-abi version export (#193202) - rebuilt for new libnetsnmp - provide mod_php (#187891)
- provide php-cli (#192196)
- use correct LDAP fix (#181518)
- define _GNU_SOURCE in php_config.h and leave it defined
- drop (circular) dependency on php-pear - update to 5.1.4 - update to 5.1.3 - provide php-api (#183227)
- add provides for all builtin modules (Tim Jackson, #173804)
- own %{_libdir}/php/pear for PEAR packages (per #176733)
- add obsoletes to allow upgrade from FE4 PDO packages (#181863) - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - rebuild for new libc-client soname - only build xmlreader and xmlwriter shared (#177810) - update to 5.1.2 - rebuild again - rebuild for new net-snmp - enable short_open_tag in default php.ini again (#175381) - rebuilt - require net-snmp for php-snmp (#174800) - add /usr/share/pear back to hard-coded include_path (#174885) - rebuild for httpd 2.2 - update to 5.1.1
- remove pear subpackage
- enable pdo extensions (php-pdo subpackage)
- remove non-standard conditional module builds
- enable xmlreader extension - rebuilt against new openssl - pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528) - rebuild for new libnetsnmp - update to 5.0.5
- add fix for upstream #34435
- devel: require autoconf, automake (#159283)
- pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
- fix imagettftext et al (upstream, #161001) - ldap: restore ldap_start_tls() function - disable RPATHs in shared extensions (#156974) - build simplexml_import_dom even with shared dom (#156434)
- prevent truncation of copied files to ~2Mb (#155916)
- install /usr/bin/php from CLI build alongside CGI
- enable sysvmsg extension (#142988) - prevent build of builtin dba as well as shared extension - split out dba and bcmath extensions into subpackages
- BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
- pear: update to DB-1.7.6
- enable FastCGI support in /usr/bin/php-cgi (#149596) - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
built with the CGI SAPI (thanks to Edward Rudd, #137704)
- add php(1) man page for CLI
- fix more test cases to use -n when invoking php - rebuild for new libpq soname - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
- snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
- mysqli: add fix� x�������������@������� X s m��yfix
�{�������������� t_li�$ | ���������������� �� �� �� � Allow ftp services to manage xferlog_t
- Fix vmtools policy to allow user roles to access vmtools_helper_t
- Allow block_suspend cap2 for ipa-otpd
- Allow certmonger to search home content
- Allow pkcsslotd to read users state
- Allow exim to use pam stack to check passwords - Add lvm_read_metadata()
- Allow auditadm to search /var/log/audit dir
- Add lvm_read_metadata() interface
- Allow confined users to run vmtools helpers
- Fix userdom_common_user_template()
- Generic systemd unit scripts do write check on /
- Allow init_t to create init_tmp_t in /tmp.This is for temporary content created by generic unit files
- Add additional fixes needed for init_t and setup script running in generic unit files
- Allow general users to create packet_sockets
- added connlcli port
- Add init_manage_transient_unit() interface
- Allow init_t (generic unit files) to manage rpc state date as we had it for initrc_t
- Fix userdomain.te to require passwd class
- devicekit_power sends out a signal to all processes on the message bus when power is going down
- Dontaudit rendom domains listing /proc and hittping system_map_t
- Dontauit leaks of var_t into ifconfig_t
- Allow domains that transition to ssh_t to manipulate its keyring
- Define oracleasm_t as a device node
- Change to handle /root as a symbolic link for os-tree
- Allow sysadm_t to create packet_socket, also move some rules to attributes
- Add label for openvswitch port
- Remove general transition for files/dirs created in /etc/mail which got etc_aliases_t label.
- Allow postfix_local to read .forward in pcp lib files
- Allow pegasus_openlmi_storage_t to read lvm metadata
- Add additional fixes for pegasus_openlmi_storage_t
- Allow bumblebee to manage debugfs
- Make bumblebee as unconfined domain
- Allow snmp to read etc_aliases_t
- Allow lscpu running in pegasus_openlmi_storage_t to read /dev/mem
- Allow pegasus_openlmi_storage_t to read /proc/1/environ
- Dontaudit read gconf files for cupsd_config_t
- make vmtools as unconfined domain
- Add vmtools_helper_t for helper scripts. Allow vmtools shutdonw a host and run ifconfig.
- Allow collectd_t to use a mysql database
- Allow ipa-otpd to perform DNS name resolution
- Added new policy for keepalived
- Allow openlmi-service provider to manage transitient units and allow stream connect to sssd
- Add additional fixes new pscs-lite+polkit support
- Add labeling for /run/krb5kdc
- Change w3c_validator_tmp_t to httpd_w3c_validator_tmp_t in F20
- Allow pcscd to read users proc info
- Dontaudit smbd_t sending out random signuls
- Add boolean to allow openshift domains to use nfs
- Allow w3c_validator to create content in /tmp
- zabbix_agent uses nsswitch
- Allow procmail and dovecot to work together to deliver mail
- Allow spamd to execute files in homedir if boolean turned on
- Allow openvswitch to listen on port 6634
- Add net_admin capability in collectd policy
- Fixed snapperd policy
- Fixed bugsfor pcp policy
- Allow dbus_system_domains to be started by init
- Fixed some interfaces
- Add kerberos_keytab_domain attribute
- Fix snapperd_conf_t def - Dontaudit rendom domains listing /proc and hittping system_map_t
- devicekit_power sends out a signal to all processes on the message bus when power is going down
- Modify xdm_write_home to allow create also links as xdm_home_t if the boolean is on true
- systemd_tmpfiles_t needs to _setcheckreqprot
- Add unconfined_server to be run by init_t when it executes files labeled bin_t, or usr_t, allow all domains to communicate with it
- Fixed snapperd policy
- Fixed broken interfaces
- Should use rw_socket_perms rather then sock_file on a unix_stream_socket
- Fixed bugsfor pcp policy
- pcscd seems to be using policy kit and looking at domains proc data that transition to it
- Allow dbus_system_domains to be started by init
- Fixed some interfaces
- Addopt corenet rules for unbound-anchor to rpm_script_t
- Allow runuser to send send audit messages.
- Allow postfix-local to search .forward in munin lib dirs
- Allow udisks to connect to D-Bus
- Allow spamd to connect to spam� x������* X������� X [ ��y ���������� �� �$ / ���������������� �� 6�
���������������xsgbVQE@4/#
���������������ythcWRFA50$ �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
z
u
i
d
X
S
G
B
6
1
%
� � � � � � � � � � � � � � � { v j e Y T H C 7 2 & ! � � � � � � � � � � � � � � � | w k f Z U I D 8 3 ' " �
�
�
�
�
�
�
�
�
�
�
�
�
�
}
x
l
g
[
V
J
E
9
4
(
#
� � � � � � � � � � � � � � ~ y m h \ W K F : 5 ) $ ��������������zni]XLG;6*%���������������{oj^YMH<7+& ���������������|pk_ZNI=8,'
���������������}ql`[O q��K �P � q��K �P � q��K �P � q��K �P � q��K �P � q��K �P � q��K �P � ��\ D� � �Н@ �0 � �dR� <4 � ե7� D! � ���� �% � ��Aa X� � q�$! L� �
Qm X � �Н5@ �0 � ��f � l � �Ӧ�# � ��X Ⱦ � � T �: � �ꒃ$ dC
� �Н�@ % � ��f�� � � 6��! � � ���\ X� � qڞ" DV � ��`| � � X�Y �� � �Н�@ �% � ��fWG \" � f �r& �� � ��� �- � ���<f : � q�# � � s��e �W � ޛj� �> � �Н A @ � ��f�5 \ � -��& H � �b��d , � %���d 4� � 4��%X � � �НFA �( � ��f, � � G �� D � �� l � ���Td � � ���# dV � !� � E� d l� � q��� �1 � �#� � � ��.% = � �9�+� � � ���� $z � E�� �1 � q�& �� � �� w � :��V �� � ���� �^ � r�:c �F � �Н� x, � CR�� Lw� � m���$ 8� � ��p Pv � ���W l1 � �Н <* � �9�l� �4 � W4�% �+ � qڿ h � ����V �I � �Н� @! � ��lA h � 5���% � � ���� % � �8�I
t� � �Н� lB � %�A�] X � ʚ�M� � � ���� P � qڻ L: � ����M �� � �Нg ( � v�"Z T � ���p x� � ���h �) � ���H �( � ���^M �� � �Q��e � � (F�; , � ���O �# � q�S |� � ��� M � � �Н� pT � ��DS` ` � �dR�� D� � ��� �$ � q�W� �< ~ �W $ } �Нn � | 2GB$e � { �dR�� `Q z ���� t2 z �Н& 4n t ��� <w s �dR�� LD r q�*6 dc n �dRS� � j ���< |X j q�f6 k f ���/B �Q e �dR � �L b 0�zY �� ] �dR
� Z ���� s Z 0�z_� �� U ���Q8 �C U ���B �e S �dR�� �� R ���� �> R e:��= @� O �,l= �v K �dRb� X~ J ���� �8 J �/�
xb D }�l� �� C �dR+� �0 B �Н�= h# ? 0�z{& h� = ��ٹW �" ; ��� S : q�YE \y 6 ޅ`{ P� 3 ���� L) 2 qښF � . 0�z[L = - D��; Č + �dRG 0� * ե76L x % �5A� �� # �dR� h! " �Н�? � ե7$L H ���� �
�dR� h� ���i �� ե7x$ �$ �9��{ p|� R��] H� �dRn ���� dI �Н�? � ե7g$ �
�+Ɖ @�
�E�_ �� �Н�? �( ե7W$ � ���A* d2 .q��� �i
$b X� �dRd [ � x�������������0�������� X u d ��yLS. 0� h������j n_t �$ z ���������������� j i [sha1]=8eadc34a26e5878a09c6d2004ef3ae81ff1a8326, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=478f1ee36672f41e551a1b748470925b6100002b, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f22da3a1efb760efe1d2f721070fc9dca34b200d, stripped ASCII text 2 I ` P R R R R R R R R R R R R R R R R R R R R R
R R R R R $P R R R R R R R R R R R R R R R R R R
R R R R $P R R R R R R R R R R
R R R R R R R R R R R R $P R R R R R R R R R R R R R R R R R R
R R R R $P R
R R R R R R R R R R R R R R R R R R R R R R $ https://bugs.rockylinux.org utf-8 33faa05ab38bf8dd4d1e134e47d6dd9182291a67bae26b970b47501b37c25473 ? ��� ��|��� ���QG ���3 !pQ�p�)�Tξ7��]�mtZ`i��
�]�mtZ`�� �&��(,�'�B��'+b3`�6� ��R~��W�U�{�'2�{7
$� PvW5=B�U_�&y%:�=�'��G7�3��B����~��N*�5�|t:�V�(Z�b���*� j�z80zYe��b{G�4�x�� � �~ݟf�O�(t-�K��i��"� K_q#Uv��b
GZ� �<]�e���R�6 ���)�$5f��3o���az�%�Ѓ�Y�X>2�[� Y
z���:B�+ �1��ګw�D���ill=���l3���KT���X��L����9��*��N7� �����]��!�דU��9�x����Ih�<4�� �� �l��
Jnhx?d�q�Z꽃�Jzo� ����q*a8��QGm ��r��F�л��0�j��+!�l�%�*#}ӂ�d�Yd��#nJ �uA�~I���� m���#���X{�.�� ��8ך�P,�Fi�d|��%h75��!+8� М.�l�/��S�L˂ �>x��P�fo+ۃc�^v3-�f1ad67aa2ade86d38c8da2070f03185878a46aa7 7558f76717a63a6ae7c5ebe7c1028ebcc29afc596628c1fa43893228400fdbca i��� �� i���F_0) to 8 bytes (swbz#21955)
- powerpc: Add values from Linux 4.8 to <elf.h>
- S390: Add new s390 platform z14.
- Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
swbz#21920, swbz#21854)
- NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
- i386: Do not set internal_function
- assert: Suppress pedantic warning caused by statement expression (swbz#21242)
- powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
- sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
- Remove __qaddr_t, __long_double_t
- Fix uc_* namespace (swbz#21457)
- nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
- aarch64: Optimized memcpy for Qualcomm Falkor processor
- manual: Document getcontext uc_stack value on Linux (swbz#759)
- i386: Add <startup.h> (swbz#21913)
- Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
- Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
- x86-64: Add FMA multiarch functions to libm
- i386: Support static PIE in start.S
- Compile tst-prelink.c without PIE (swbz#21815)
- x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
- x86: Remove __memset_zero_constant_len_parameter (swbz#21790) - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
- Remove nosegneg 32-bit Xen PV support libraries (#1482027)
- Adjust spec file to RPM changes - Update to released glibc 2.26.
- Auto-sync with upstream master,
commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
- getaddrinfo: Release resolver context on error in gethosts (swbz#21885) /bin/sh � x������m H�������� X P ��y ��������Hc �� �$ ~ ���������������� �� �� �� � - Additional avcs for docker when running tests
- allow anaconda to dbus chat with systemd-localed
- clean up rhcs.te
- remove dup rules from haproxy.te
- Add fixes for haproxy based on bperkins@redhat.com
- Allow cmirrord to make dmsetup working
- Allow NM to execute arping
- Allow users to send messages through talk
- update rtas_errd policy
- Add support for /var/spool/rhsm/debug
- Make virt_sandbox_use_audit as True by default
- Allow svirt_sandbox_domains to ptrace themselves
- Allow snmpd to getattr on removeable and fixed disks
- Allow docker containers to manage /var/lib/docker content - Label sddm as xdm_exec_t to make KDE working again
- Allow postgresql to read network state
- Allow java running as pki_tomcat to read network sysctls
- Fix cgroup.te to allow cgred to read cgconfig_etc_t
- Allow beam.smp to use ephemeral ports
- Allow winbind to use the nis to authenticate passwords - Allow collectd to talk to libvirt
- Allow chrome_sandbox to use leaked unix_stream_sockets
- Dontaudit leaks of sockets into chrome_sandbox_t
- If you create a cups directory in /var/cache then it should be labeled cups_rw_etc_t
- Run vmtools as unconfined domains
- Allow snort to manage its log files
- Allow systemd_cronjob_t to be entered via bin_t
- Allow procman to list doveconf_etc_t
- allow keyring daemon to create content in tmpfs directories
- Add proper labelling for icedtea-web
- vpnc is creating content in networkmanager var run directory
- unconfined_service should be allowed to transition to rpm_script_t
- Allow couchdb to listen on port 6984
- Dontaudit attempts by unpriv user domain to write to /run/mount directory, caused by running mount command
- Allow systemd-logind to setup user tmpfs directories
- Add additional fixes for systemd_networkd_t
- Allow systemd-logind to manage user_tmpfs_t
- Allow systemd-logind to mount /run/user/1000 to get gdm working - Add additional fixes for systemd_networkd_t
- Allow systemd-logind to manage user_tmpfs_t
- Allow systemd-logind to mount /run/user/1000 to get gdm working
- Dontaudit attempts to setsched on the kernel_t threads
- Allow munin mail plugins to read network systcl
- Fix git_system_enable_homedirs boolean
- Make cimtest script 03_defineVS.py of ComputerSystem group working
- Make abrt-java-connector working
- Allow net_admin cap for fence_virtd running as fenced_t
- Allow vmtools_helper_t to execute bin_t
- Add support for /usr/share/joomla - sshd to read network sysctls
- Allow vmtools_helper_t to execute bin_t
- Add support for /usr/share/joomla
- /var/lib/containers should be labeled as openshift content for now
- Allow docker domains to talk to the login programs, to allow a process to login into the container - Add install_t for anaconda - Allow init_t to stream connect to ipsec
- Add /usr/lib/systemd/systemd-networkd policy
- Add sysnet_manage_config_dirs()
- Add support for /var/run/systemd/network and labeled it as net_conf_t
- Allow unpriv SELinux users to dbus chat with firewalld
- Add lvm_write_metadata()
- Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type
- Add support for /dev/vmcp and /dev/sclp
- Add docker_connect_any boolean
- Fix zabbix policy
- Allow zabbix to send system log msgs
- Allow pegasus_openlmi_storage_t to write lvm metadata
- Updated pcp_bind_all_unreserved_ports
- Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo - Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
- Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used� x������������� �������� X w w ��y to ������������������ solv�$ @ ���������������� �� �� �� � initrc_tmp_t files
- dontaudit ifconfig_t looking at fifo_files that are leaked to it
- Add lableing for Quest Authentication System - Fix filetrans interface definitions
- Dontaudit xdm_t to getattr on BOINC lib files
- Add systemd_reload_all_services() interface
- Dontaudit write access on /var/lib/net-snmp/mib_indexes
- Only stop mcsuntrustedproc from relableing files
- Allow accountsd to dbus chat with gdm
- Allow realmd to getattr on all fs
- Allow logrotate to reload all services
- Add systemd unit file for radiusd
- Allow winbind to create samba pid dir
- Add labeling for /var/nmbd/unexpected
- Allow chrome and mozilla plugin to connect to msnp ports - Fix storage_rw_inherited_fixed_disk_dev() to cover also blk_file
- Dontaudit setfiles reading /dev/random
- On initial boot gnomeclock is going to need to be set buy gdm
- Fix tftp_read_content() interface
- Random apps looking at kernel file systems
- Testing virt with lxc requiers additional access for virsh_t
- New allow rules requied for latest libvirt, libvirt talks directly to journald,lxc setup tool needs compromize_kernel,and we need ipc_lock in the container
- Allow MPD to read /dev/radnom
- Allow sandbox_web_type to read logind files which needs to read pulseaudio
- Allow mozilla plugins to read /dev/hpet
- Add labeling for /var/lib/zarafa-webap
- Allow BOINC client to use an HTTP proxy for all connections
- Allow rhsmertd to domain transition to dmidecod
- Allow setroubleshootd to send D-Bus msg to ABRT - Define usbtty_device_t as a term_tty
- Allow svnserve to accept a connection
- Allow xend manage default virt_image_t type
- Allow prelink_cron_system_t to overide user componant when executing cp
- Add labeling for z-push
- Gnomeclock sets the realtime clock
- Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
- Allow lxc domains to use /dev/random and /dev/urandom - Add port defintion for tcp/9000
- Fix labeling for /usr/share/cluster/checkquorum to label also checkquorum.wdmd
- Add rules and labeling for $HOME/cache/\.gstreamer-.* directory
- Add support for CIM provider openlmi-networking which uses NetworkManager dbus API
- Allow shorewall_t to create netlink_socket
- Allow krb5admind to block suspend
- Fix labels on /var/run/dlm_controld /var/log/dlm_controld
- Allow krb5kdc to block suspend
- gnomessytemmm_t needs to read /etc/passwd
- Allow cgred to read all sysctls - Allow all domains to read /proc/sys/vm/overcommit_memory
- Make proc_numa_t an MLS Trusted Object
- Add /proc/numactl support for confined users
- Allow ssh_t to connect to any port > 1023
- Add openvswitch domain
- Pulseaudio tries to create directories in gnome_home_t directories
- New ypbind pkg wants to search /var/run which is caused by sd_notify
- Allow NM to read certs on NFS/CIFS using use_nfs_*, use_samba_* booleans
- Allow sanlock to read /dev/random
- Treat php-fpm with httpd_t
- Allow domains that can read named_conf_t to be able to list the directories
- Allow winbind to create sock files in /var/run/samba - Add smsd policy
- Add support for OpenShift sbin labelin
- Add boolean to allow virt to use rawip
- Allow mozilla_plugin to read all file systems with noxattrs support
- Allow kerberos to write on anon_inodefs fs
- Additional access required by fenced
- Add filename transitions for passwd.lock/group.lock
- UPdate man pages
- Create coolkey directory in /var/cache with the correct label - Fix label on /etc/group.lock
- Allow gnomeclock to create lnk_file in /etc
- label /root/.pki as a home_cert_t
- Add interface to make sure rpcbind.sock is created with the correct label
- Add definition for new directory /var/lib/os-probe and bootloader wants to read udev rules
- opendkim should be a part of milter
- Allow libvirt to set the kernel sched algorythm
- Allow mongod to read sysfs_t
- Add authconfig policy
- Remove calls to miscfiles_read_localization all domains get this
- Allow virsh_t to read /root/.pki/ content
- Add label for log directory under /var/www/stickshift - Allow getty to setattr on usb ttys
- Allow sshd� x���������������������� X x fo��yw li� ��������� od_p�$ { ���������������� �� �� �� � d port
- Fix syntax error in snapper.te
- Dontaudit osad to search gconf home files
- Allow rhsmcertd to manage /etc/sysconf/rhn director
- Fix pcp labeling to accept /usr/bin for all daemon binaries
- Fix mcelog_read_log() interface
- Allow iscsid to manage iscsi lib files
- Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
- Allow ABRT to read puppet certs
- Allow virtd_lxc_t to specify the label of a socket
- New version of docker requires more access - Addopt corenet rules for unbound-anchor to rpm_script_t
- Allow runuser to send send audit messages.
- Allow postfix-local to search .forward in munin lib dirs
- Allow udisks to connect to D-Bus
- Allow spamd to connect to spamd port
- Fix syntax error in snapper.te
- Dontaudit osad to search gconf home files
- Allow rhsmcertd to manage /etc/sysconf/rhn director
- Fix pcp labeling to accept /usr/bin for all daemon binaries
- Fix mcelog_read_log() interface
- Allow iscsid to manage iscsi lib files
- Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
- Make tuned_t as unconfined domain for RHEL7.0
- Allow ABRT to read puppet certs
- Add sys_time capability for virt-ga
- Allow gemu-ga to domtrans to hwclock_t
- Allow additional access for virt_qemu_ga_t processes to read system clock and send audit messages
- Fix some AVCs in pcp policy
- Add to bacula capability setgid and setuid and allow to bind to bacula ports
- Changed label from rhnsd_rw_conf_t to rhnsd_conf_t
- Add access rhnsd and osad to /etc/sysconfig/rhn
- drbdadm executes drbdmeta
- Fixes needed for docker
- Allow epmd to manage /var/log/rabbitmq/startup_err file
- Allow beam.smp connect to amqp port
- Modify xdm_write_home to allow create also links as xdm_home_t if the boolean is on true
- Allow init_t to manage pluto.ctl because of init_t instead of initrc_t
- Allow systemd_tmpfiles_t to manage all non security files on the system
- Added labels for bacula ports
- Fix label on /dev/vfio/vfio
- Add kernel_mounton_messages() interface
- init wants to manage lock files for iscsi - Fix /dev/vfio/vfio labeling - Add kernel_mounton_messages() interface
- init wants to manage lock files for iscsi
- Add support for dey_sapi port
- Fixes needed for docker
- Allow epmd to manage /var/log/rabbitmq/startup_err file
- Allow beam.smp connect to amqp port
- drbdadm executes drbdmeta
- Added osad policy
- Allow postfix to deliver to procmail
- Allow vmtools to execute /usr/bin/lsb_release
- Allow geoclue to read /etc/passwd
- Allow docker to write system net ctrls
- Add support for rhnsd unit file
- Add dbus_chat_session_bus() interface
- Add dbus_stream_connect_session_bus() interface
- Fix pcp.te
- Fix logrotate_use_nfs boolean
- Add lot of pcp fixes found in RHEL7
- fix labeling for pmie for pcp pkg
- Change thumb_t to be allowed to chat/connect with session bus type
- Add logrotate_use_nfs boolean
- Allow setroubleshootd to read rpc sysctl - Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring
- Allow geoclue to create temporary files/dirs in /tmp
- Add httpd_dontaudit_search_dirs boolean
- Add support for winbind.service
- ALlow also fail2ban-client to read apache logs
- Allow vmtools to getattr on all fs - Add net_admin also for systemd_passwd_agent_t
- Allow Associate usermodehelper_t to sysfs filesystem
- Allow gdm to create /var/gdm with correct labeling
- Allow domains to append rkhunterl lib files. #1057982
- Allow systemd_tmpfiles_t net_admin to communicate with journald
- update libs_filetrans_named_content() to have support for /usr/lib/debug directory
- Adding a new service script to enable setcheckreqprot
- Add interface to getattr on an isid_type for any type of file
- Allow initrc_t domtrans to authconfig if unconfined is enabled
- Add labeling for snapper.log
- Allow tumbler to execute dbusd-daemon in thumb_t
- Add dbus_exec_dbusd()
- Add snapperd_data_t type
- Add additional fixes for snapperd
- FIx bad calling in samba.te
- Allow smbd to create tmpfs
- Allow � x������������� s������� X y ss��y- Alh �������������5 minf�$ { ���������������� �5 �5 �5 � .net/releases/7_1_0.php
- use bundled pcre library 8.38 on EL-7
- disable pcre.jit everywhere as it raise AVC #1398474
- sync provided configuration with upstream production defaults - Update to 7.1.0RC6 - Update to 7.1.0RC5 - Update to 7.1.0RC4
- update tzdata patch to v14, improve check for valid tz file
- oci8 version is now 2.1.3 - rebuild - Update to 7.1.0RC3 - Update to 7.1.0RC2
- API version is now 20160303 - Update to 7.1.0RC1
- oci8 version is now 2.1.2 - Update to 7.1.0beta2 - Update to 7.1.0beta1 - Update to 7.1.0alpha3 - own tests/doc directories for pecl packages (f24) - Update to 7.1.0alpha2 (rebuild) - Update to 7.1.0alpha2 - Update to 7.1.0alpha1 - Update to 7.0.7 - http://www.php.net/releases/7_0_7.php - Update to 7.0.7RC1
- oci8 version is now 2.1.1 - Update to 7.0.6 - http://www.php.net/releases/7_0_6.php
- rebuild for new sources - Update to 7.0.6
http://www.php.net/releases/7_0_6.php - Update to 7.0.6RC1 - Fixed bug #71914 (Reference is lost in "switch") - Update to 7.0.5
http://www.php.net/releases/7_0_5.php - Update to 7.0.5RC1 - adapt for F24: define %pecl_xmldir and own it - Update to 7.0.4
http://www.php.net/releases/7_0_4.php
- pcre: disables JIT compilation of patterns with system pcre < 8.38 - Update to 7.0.4RC1 - Update to 7.0.3
http://www.php.net/releases/7_0_3.php - test build - FPM: test build for https://bugs.php.net/62172 - Update to 7.0.3RC1 - Update to 7.0.2
http://www.php.net/releases/7_0_2.php - Update to 7.0.2RC1
- opcache: build with --disable-huge-code-pages on EL-6 - Update to 7.0.1
http://www.php.net/releases/7_0_1.php
- curl: add CURL_SSLVERSION_TLSv1_x constant (EL)
- fpm: switch to UDS on Fedora >= 21 - Update to 7.0.1RC1
- drop --disable-huge-code-pages build option on EL-6,
but keep it disabled in default configuration - build with --disable-huge-code-pages on EL-6 - Update to 7.0.0
http://www.php.net/releases/7_0_0.php - set opcache.huge_code_pages=0 on EL-6
see https://bugs.php.net/70973 and https://bugs.php.net/70977 - Update to 7.0.0RC8
- set opcache.huge_code_pages=1 on x86_64 - Update to 7.0.0RC7 (retagged) - Update to 7.0.0RC7 - Update to 7.0.0RC6 - php-config: reports all built sapis - rebuild as retagged - Update to 7.0.0RC5
- update php-fpm.d/www.conf comments
- API and Zend API are now set to 20151012 - Update to 7.0.0RC4
- php-fpm: set http authorization headers - F23 rebuild with rh_layout - Update to 7.0.0RC3
- disable zip extension (provided in php-pecl-zip) - Update to 7.0.0RC2
- enable oci8 and pdo_oci extensions
- sync php.ini with upstream php.ini-production - Update to 7.0.0RC1 - Update to 7.0.0beta3 - Update to 7.0.0beta2
- switch from libvpx to libwebp (only for bundled libgd, not used) - Update to 7.0.0beta1
- use upstream tarball instead of git snapshot - Update to 7.0.0alpha2
- use new layout (/etc/opt, /var/opt) - new snapshot - new snapshot
- the phar link is now correctly created - Update to 7.0.0alpha1 - new snapshot - new snapshot
- t1lib support have been removed - new snapshot - new snapshot - new snapshot - add experimental file based opcode cache (disabled by default) - new snapshot - new snapshot
- adapt system tzdata patch for upstream change for new zic - new snapshot - new snapshot - new snapshot - rename 10-php70-php.conf to 15-php70-php.conf to
ensure load order (after 10-rh-php56-php.conf) - rebuild - fix mod_php configuration
- disable static json
- sync php.ini with upstream php.ini-production - update for php 7.0.0
- ereg, mssql, mysql and sybase_ct extensions are removed
- add pdo-dblib subpackage (instead of php-mssql)
- disable oci8 extension, not yet adapted for 7.0
- add php-zip subpackage
- add php-json subpackage - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.ph� x�������������xb������� X z om �y9.0.��������H�
� taki�$ ����������������
� � � � SND_SOC_INTEL_BXT_DA7219_MAX98357A_COMMON=m,
- CONFIG_SF_PDMA=m, CONFIG_SYSTEM76_ACPI=m, CONFIG_IOMMU_DMA=y,
- CONFIG_IO_WQ=y, CONFIG_CRYPTO_SKCIPHER=y, CONFIG_CRYPTO_SKCIPHER2=y,
- CONFIG_CRYPTO_CURVE25519=m, CONFIG_CRYPTO_CURVE25519_X86=m,
- CONFIG_CRYPTO_BLAKE2B=m, CONFIG_CRYPTO_BLAKE2S=m,
- CONFIG_CRYPTO_BLAKE2S_X86=m, CONFIG_CRYPTO_ARCH_HAVE_LIB_BLAKE2S=m,
- CONFIG_CRYPTO_LIB_BLAKE2S_GENERIC=m, CONFIG_CRYPTO_LIB_BLAKE2S=m,
- CONFIG_CRYPTO_ARCH_HAVE_LIB_CHACHA=m, CONFIG_CRYPTO_LIB_CHACHA_GENERIC=m,
- CONFIG_CRYPTO_LIB_CHACHA=m, CONFIG_CRYPTO_ARCH_HAVE_LIB_CURVE25519=m,
- CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=m, CONFIG_CRYPTO_LIB_CURVE25519=m,
- CONFIG_CRYPTO_LIB_POLY1305_RSIZE=4, CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305=m,
- CONFIG_CRYPTO_LIB_POLY1305_GENERIC=m, CONFIG_CRYPTO_LIB_POLY1305=m,
- CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m, CONFIG_CRYPTO_DEV_AMLOGIC_GXL=m,
- CONFIG_MEMREGION=y, CONFIG_SYMBOLIC_ERRNAME=y,
- CONFIG_HAVE_ARCH_KASAN_VMALLOC=y,
- CONFIG_HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALLS=y and
- CONFIG_DYNAMIC_FTRACE_WITH_DIRECT_CALLS=y - Updated with the 5.4.15 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.15] - Updated with the 5.4.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14]
- CONFIG_DVB_CORE=m, CONFIG_VIDEO_EM28XX=m, CONFIG_VIDEO_EM28XX_V4L2=m,
- CONFIG_VIDEO_EM28XX_ALSA=m, CONFIG_VIDEO_EM28XX_DVB=m and
- CONFIG_VIDEO_EM28XX_RC=m [https://elrepo.org/bugs/view.php?id=982] - Updated with the 5.4.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.13] - Updated with the 5.4.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12] - Updated with the 5.4.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.11] - Updated with the 5.4.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.10] - Updated with the 5.4.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.9]
- CONFIG_9P_FSCACHE=y, CONFIG_9P_FS=m and CONFIG_9P_FS_POSIX_ACL=y
- [https://elrepo.org/bugs/view.php?id=981]
- Not released due to a patch being missing from the upstream
- stable tree. [https://lkml.org/lkml/2020/1/9/363] - Updated with the 5.4.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.8] - Updated with the 5.4.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7] - Updated with the 5.4.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6] - Updated with the 5.4.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.5] - Updated with the 5.4.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.4] - Updated with the 5.4.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3] - Updated with the 5.4.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2] - Updated with the 5.4.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1]
- CONFIG_AF_RXRPC=m, CONFIG_AF_RXRPC_IPV6=y,
- CONFIG_AF_RXRPC_DEBUG=y, CONFIG_RXKAD=y, CONFIG_AFS_FS=m,
- CONFIG_AFS_DEBUG=y, CONFIG_AFS_FSCACHE=y
- and CONFIG_AFS_DEBUG_CURSOR=y
- [https://elrepo.org/bugs/view.php?id=969]
- CONFIG_DM_CLONE=m
- [https://elrepo.org/bugs/view.php?id=970]
- CONFIG_HMM_MIRROR=y, CONFIG_DRM_AMDGPU_SI=y,
- CONFIG_DRM_AMDGPU_CIK=y and CONFIG_DRM_AMDGPU_USERPTR=y
- [https://elrepo.org/bugs/view.php?id=971] - Updated with the 5.4 source tarball.
- CONFIG_CC_HAS_ASM_INLINE=y, CONFIG_ARCH_CPUIDLE_HALTPOLL=y,
- CONFIG_HALTPOLL_CPUIDLE=y, CONFIG_HAVE_ASM_MODVERSIONS=y,
- CONFIG_ASM_MODVERSIONS=y, CONFIG_NET_TC_SKB_EXT=y,
- CONFIG_CAN_J1939=m, CONFIG_CAN_KVASER_PCIEFD=m,
- CONFIG_CAN_M_CAN_PLATFORM=m, CONFIG_CAN_M_CAN_TCAN4X5X=m,
- CONFIG_CAN_F81601=m, CONFIG_PCI_HYPERV_INTERFACE=m,
- CONFIG_MLX5_SW_STEERING=y, CONFIG_NET_VENDOR_PENSANDO=y,
- CONFIG_IONIC=m, CONFIG_ADIN_PHY=m,
- CONFIG_ATH9K_PCI_NO_EEPROM=m, CONFIG_SERIAL_8250_DWLIB=y,
- CONFIG_SENS� x��������������Q������� X { p ]�yst b��
�������� ld f�$ ���������������� � � � � <mitr@redhat.com> - 0.1-11 Fedora Release Engineering <releng@fedoraproject.org> - 0.1-10 Fedora Release Engineering <releng@fedoraproject.org> - 0.1-9 Fedora Release Engineering <releng@fedoraproject.org> - 0.1-8 Fedora Release Engineering <releng@fedoraproject.org> - 0.1-7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-3 Miloslav Trmač <mitr@redhat.com> - 0.1-2 Miloslav Trmač <mitr@redhat.com> - 0.1-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update URL: and Source0: to point to Pagure instead of fedorahosted.org
Resolves: #1502386 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Add a comment above License about SRPM-only licenses
- Reword Summary: to avoid a rpmlint warning
- Move INSTALL= to the %install section - Initial package
0.1-12.el8 0.1-12.el8 0.1-12.el8
localauthority localauthority.conf.d 10-vendor.d 20-org.d 30-site.d 50-local.d 90-mandatory.d 49-polkit-pkla-compat.rules pkla-admin-identities pkla-check-authorization .build-id bd 1f786386800fab385c92f748a61df6bcf75474 e8 151accb5e183aba389ac6026624c2ba584a4f2 polkit-pkla-compat AUTHORS COPYING NEWS README pkla-admin-identities.8.gz pkla-check-authorization.8.gz pklocalauthority.8.gz polkit-1 localauthority 10-vendor.d 20-org.d 30-site.d 50-local.d 90-mandatory.d /etc/polkit-1/ /etc/polkit-1/localauthority/ /etc/polkit-1/rules.d/ /usr/bin/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/bd/ /usr/lib/.build-id/e8/ /usr/share/doc/ /usr/share/doc/polkit-pkla-compat/ /usr/share/man/man8/ /var/lib/ /var/lib/polkit-1/ /var/lib/polkit-1/localauthority/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e8151accb5e183aba389ac6026624c2ba584a4f2, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=bd1f786386800fab385c92f748a61df6bcf75474, stripped UTF-8 Unicode text troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)
� x�������������hA������� X | ol��yconf�������c������� pabi�$ ~ ���������������� � � � for system-config-samba
- Allow hal to read /var/run/video.rom - Allow dhcpc to restart ypbind
- Fixup labeling in /var/run - Add certmaster policy - Fix confined users
- Allow xguest to read/write xguest_dbusd_t - Allow openoffice execstack/execmem privs - Allow mozilla to run with unconfined_execmem_t - Dontaudit domains trying to write to .xsession-errors - Allow nsplugin to look at autofs_t directory - Allow kerneloops to create tmp files - More alias for fastcgi - Remove mod_fcgid-selinux package - Fix dovecot access - Policy cleanup - Remove Multiple spec
- Add include
- Fix makefile to not call per_role_expansion - Fix labeling of libGL - Update to upstream - Update to upstream policy - Fixes for confined xwindows and xdm_t - Allow confined users and xdm to exec wm
- Allow nsplugin to talk to fifo files on nfs - Allow NetworkManager to transition to avahi and iptables
- Allow domains to search other domains keys, coverup kernel bug - Fix labeling for oracle - Allow nsplugin to comminicate with xdm_tmp_t sock_file - Change all user tmpfs_t files to be labeled user_tmpfs_t
- Allow radiusd to create sock_files - Upgrade to upstream - Allow confined users to login with dbus - Fix transition to nsplugin - Add file context for /dev/mspblk.* - Fix transition to nsplugin
' - Fix labeling on new pm*log
- Allow ssh to bind to all nodes - Merge upstream changes
- Add Xavier Toth patches - Add qemu_cache_t for /var/cache/libvirt - Remove gamin policy - Add tinyxs-max file system support - Update to upstream
- New handling of init scripts - Allow pcsd to dbus
- Add memcache policy - Allow audit dispatcher to kill his children - Update to upstream
- Fix crontab use by unconfined user - Allow ifconfig_t to read dhcpc_state_t - Update to upstream - Update to upstream - Allow system-config-selinux to work with policykit - Fix novel labeling - Consolodate pyzor,spamassassin, razor into one security domain
- Fix xdm requiring additional perms. - Fixes for logrotate, alsa - Eliminate vbetool duplicate entry - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
- Change dhclient to be able to red networkmanager_var_run - Update to latest refpolicy
- Fix libsemanage initial install bug - Add inotify support to nscd - Allow unconfined_t to setfcap - Allow amanda to read tape
- Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
- Add support for netware file systems - Allow ypbind apps to net_bind_service - Allow all system domains and application domains to append to any log file - Allow gdm to read rpm database
- Allow nsplugin to read mplayer config files - Allow vpnc to run ifconfig - Allow confined users to use postgres
- Allow system_mail_t to exec other mail clients
- Label mogrel_rails as an apache server - Apply unconfined_execmem_exec_t to haskell programs - Fix prelude file context - allow hplip to talk dbus
- Fix context on ~/.local dir - Prevent applications from reading x_device - Add /var/lib/selinux context - Update to upstream - Add livecd policy - Dontaudit search of admin_home for init_system_domain
- Rewrite of xace interfaces
- Lots of new fs_list_inotify
- Allow livecd to transition to setfiles_mac - Begin XAce integration - Merge Upstream - Allow amanada to create data files - Fix initial install, semanage setup - Allow system_r for httpd_unconfined_script_t - Remove dmesg boolean
- Allow user domains to read/write game data - Change unconfined_t to transition to unconfined_mono_t when running mono
- Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work - Remove old booleans from targeted-booleans.conf file - Add boolean to mmap_zero
- allow tor setgid
- Allow gnomeclock to set clock - Don't run crontab from unconfined_t - Change etc files to config files to allow users to read them - Lots of fixes for confined domains on NFS_t homedir - dontaudit mrtg reading /proc
- Allow iscsi to signal itself
- Allow gnomeclock sys_ptrace - Allow dhcpd to read kernel network state - Label /var/run/gdm correctly
- Fix unconfined_u user creation -� x��������������0������� X } ��y �* �E������Q �$ A ���������������� Q R
ate - Update to upstream 1.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - update to 1.0.2 and added python3 subpackage - update to 0.8.3 and project home page - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 0.8.2 of pip - update to 0.8 of pip - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild - update to 0.7.2 of pip - update to 0.7.1 of pip - fix dependency issue - fix spec file - upgrade to 0.6.1 of pip - Initial package 9.0.3-23.el8.rocky.0 pip-3.6 pip3.6 completions pip3 python3-pip README.rst python3-pip LICENSE.txt /usr/bin/ /usr/share/bash-completion/ /usr/share/bash-completion/completions/ /usr/share/doc/ /usr/share/doc/python3-pip/ /usr/share/licenses/ /usr/share/licenses/python3-pip/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection cpio xz 2 noarch-redhat-linux-gnu a /usr/bin/python3.6 script, ASCII text executable directory ASCII text R utf-8 dbb8772227f5277b4e714656a591625e7d60cc88794fe56b5dcf4acd5cbab78e ? ���@ <�3 !pQ�p�)�Tξ7��]�mtZ`d�8
�]�mtZ`�_�
���E��b[�,���m�z��:hi�V�o��&X`��f߅�<#�e�� ��=m�lܡ�4z�`�u �b[�%����� W!�mU̱�����cZ��(�ʭ$�Bm-� Y
*L8��*vUJ�V�$W_U��� 6��U����?� ���E�`b>w[�8(�1ރ}W���O��.���]s7��O�w\e��P�X��0 7�l.�0�g�.��rC�I�/9���-�/?0��0Z�v;������n2.� �����%��w˜h��zo��/}�%~��?yG2 �Ӓ�4��V���$<�`�w �CJ��b�����yu�ص!3��V�~2CD܆L��7�tu'H�$��Fi^]��(< YR��B-�>r4O���E�P�����˷������V
g�p�{���O��><�݄�.�O�H��Ѻ��?������k�s��� "3cDP��T�qT-O�ڮ�v?�|�_ti�d��ڵ���Y0��>�ٜ .�E}m���(I�@�'����`��rxb�3 !pQ�p�)�Tξ7��]�mtZ`d�8
�]�mtZ`]'�Pfz��[.ƽ�- �C���W�<*kk^x���\�5F���B ���ts����Y:п0 ;U�i,��K���� ͭ���iBQ�+��{ǥ
(ͷD�^e���g�+�D�V���?/\Ih2?�Vx� �tN�0ز;� �ё�U쿖pq&�Zh�� v��m� u5�!�J��)Q�� U��{
��BW�RW�UV���� �t@q��:���օ�`�B�-��z��o1��=:��,1e���'>�1��y�!R�i6餦^X����,BtGu���V�G!�1-�qF(.O
m>ѓ�B�}�c�{?�
�W�x�Đg2a.�2�e5��3�:d�ue�i�ܚƒœ��܃֣[k��"��M��3-��{�!o
(sN?�!��)�h���d{L86g7�^��m6 ��~E�q�v�/x��Dh���#��گCړ
rQɎ����>�J�n����_pDt��E��=�_�O
�� ��X������X��Tlk�55644828642ebefd96bc2198cc5ca2c36a8aa804 285dde58efce8ad11cc4cf7289b81a90c3ae255b07f4399f30ee49ca05e5f15d ee�� H ee��1 Milan Broz <mbroz@redhat.com> - 2.02.51-3 Alasdair Kergon <agk@redhat.com> - 2.02.51-2 Alasdair Kergon <agk@redhat.com> - 2.02.50-2 Alasdair Kergon <agk@redhat.com> - 2.02.50-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.02.49-2 Alasdair Kergon <agk@redhat.com> - 2.02.49-1 Fabio M. Di Nitto <fdinitto@redhat.com> 2.02.48-2 Alasdair Kergon <agk@redhat.com> - 2.02.48-1 Fabio M. Di Nitto <fdinitto@redhat.com> - 2.02.47-2 Alasdair Kergon <agk@redhat.com> - 2.02.47-1 Milan Broz <mbroz@redhat.com> - 2.02.45-4 Jussi Lehtola <jussi.lehtola@iki.fi> 2.02.45-3 Fabio M. Di Nitto <fdinitto@redhat.com> - 2.02.45-2 Alasdair Kergon <agk@redhat.com> - 2.02.45-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.02.44-2 Alasdair Kergon <agk@redhat.com> - 2.02.44-1 Alasdair Kergon <agk@redhat.com> - 2.02.43-1 Alasdair Kergon <agk@redhat.com> - 2.02.39-6 Fabio M. Di Nitto <fdinitto@redhat.cm> - 2.02.39-5 Fabio M. Di Nitto <fdinitto@redhat.cm> - 2.02.39-5 Ville Skyttä <ville.skytta at iki.fi> - 2.02.39-5 Tom "spot" Callaway <tcallawa@redhat.com> - 2.02.39-4 Alasdair Kergon <agk@redhat.com> - 2.02.39-3 Alasdair Kergon <agk@redhat.com> - 2.02.38-2 Alasdair Kergon <agk@redhat.com> - 2.02.38-1 Jeremy Katz <katzj@� x�������������X ������� X ~ ��y ��������Xs������ � �$ ���������������� � e dnssec_trigger_tmp_t files in /var/tmp/ BZ(1240840)
- Allow ctdb_t sending signull to smbd_t, for checking if smbd process exists. BZ(1224879)
- Fix cron_system_cronjob_use_shares boolean to call fs interfaces which contain only entrypoint permission.
- Add cron_system_cronjob_use_shares boolean to allow system cronjob to be executed from shares - NFS, CIFS, FUSE. It requires "entrypoint" permissios on nfs_t, cifs_t and fusefs_t SELinux types.
- nrpe needs kill capability to make gluster moniterd nodes working.
- Revert "Dontaudit ctbd_t sending signull to smbd_t."
- Fix interface corenet_tcp_connect_postgresql_port_port(prosody_t)
- Allow prosody connect to postgresql port.
- Fix logging_syslogd_run_nagios_plugins calling in logging.te
- Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
- Add support for oddjob based helper in FreeIPA. BZ(1238165)
- Add new interfaces
- Add fs_fusefs_entry_type() interface. - Allow ctdb_t sending signull to smbd_t, for checking if smbd process exists. BZ(1224879)
- Fix cron_system_cronjob_use_shares boolean to call fs interfaces which contain only entrypoint permission.
- Add cron_system_cronjob_use_shares boolean to allow system cronjob to be executed from shares - NFS, CIFS, FUSE. It requires "entrypoint" permissios on nfs_t, cifs_t and fusefs_t SELinux types.
- Merge remote-tracking branch 'refs/remotes/origin/rawhide-contrib' into rawhide-contrib
- nrpe needs kill capability to make gluster moniterd nodes working.
- Fix interface corenet_tcp_connect_postgresql_port_port(prosody_t)
- Allow prosody connect to postgresql port.
- Add new interfaces
- Add fs_fusefs_entry_type() interface. - Cleanup permissive domains. - Rename xodbc-connect port to xodbc_connect
- Dontaudit apache to manage snmpd_var_lib_t files/dirs. BZ(1189214)
- Add interface snmp_dontaudit_manage_snmp_var_lib_files().
- Allow ovsdb-server to connect on xodbc-connect and ovsdb tcp ports. BZ(1179809)
- Dontaudit mozilla_plugin_t cap. sys_ptrace. BZ(1202043)
- Allow iscsid write to fifo file kdumpctl_tmp_t. Appears when kdump generates the initramfs during the kernel boot. BZ(1181476)
- Dontaudit chrome to read passwd file. BZ(1204307)
- Allow firewalld exec ldconfig. BZ(1232748)
- Allow dnssec_trigger_t read networkmanager conf files. BZ(1231798)
- Allow in networkmanager_read_conf() also read NetworkManager_etc_rw_t files. BZ(1231798)
- Allow NetworkManager write to sysfs. BZ(1234086)
- Fix bogus line in logrotate.fc.
- Add dontaudit interface for kdumpctl_tmp_t
- Rename xodbc-connect port to xodbc_connect
- Label tcp port 6632 as xodbc-connect port. BZ (1179809)
- Label tcp port 6640 as ovsdb port. BZ (1179809) - Allow NetworkManager write to sysfs. BZ(1234086)
- Fix bogus line in logrotate.fc.
- Add dontaudit interface for kdumpctl_tmp_t
- Use userdom_rw_user_tmp_files() instead of userdom_rw_user_tmpfs_files() in gluster.te
- Add postgresql support for systemd unit files.
- Fix missing bracket
- Pull request by ssekidde. https://github.com/fedora-selinux/selinux-policy/pull/18
- Fixed obsoleted userdom_delete_user_tmpfs_files() inteface - Allow glusterd to interact with gluster tools running in a user domain
- rpm_transition_script() is called from rpm_run. Update cloud-init rules.
- Call rpm_transition_script() from rpm_run() interface.
- Allow radvd has setuid and it requires dac_override. BZ(1224403)
- Add glusterd_manage_lib_files() interface.
- Allow samba_t net_admin capability to make CIFS mount working.
- S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
- Reflect logrotate change which moves /var/lib/logrotate.status to /var/lib/logrotate/logrotate.status. BZ(1228531)
- ntop reads /var/lib/ntop/macPrefix.db and it needs dac_override. It has setuid/setgid. BZ(1058822)
- Allow cloud-init to run rpm scriptlets to install packages. BZ(1227484)
- Allow nagios to generate charts.
- Allow glusterd to send generic signals to systemd_passwd_agent processes.
- Allow glusterd to run init scripts.
- Allow gluste� x��������������������� X 30f�y- Reh�������0+������� ring�$ _ ���������������� � � � N /T ? *< d � � � � � > � � � � � � � � � � � � � 8 � V � s � � � � � H , B
X �
\ � � � @ � � y ( � 8 � 4 9 t 4 : ` 4 > $- @ $3 B $9 G $� H $� I $� X $� Y %0 Z %` [ %| \ %� ] %� ^ &� b &� d ( e ( f (! l (# t (8 u (d v (� w )4 x )` y )� � )� � )� � )� � *8 *L *P 6 ,� ,� 6
.� .� � /8 /< /H g /L h /P C libgcc 8.5.0 23.el8_10 GCC version 8 shared support library This package contains GCC shared support library which is needed
e.g. for exception handling support. g��4ord1-prod-x86build004.svc.aws.rockylinux.org �Koji Rocky GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD infrastructure@rockylinux.org System Environment/Libraries http://gcc.gnu.org linux x86_64 if posix.access ("/sbin/ldconfig", "x") then
local pid = posix.fork ()
if pid == 0 then
posix.exec ("/sbin/ldconfig")
elseif pid ~= -1 then
posix.wait (pid)
end
end if posix.access ("/sbin/ldconfig", "x") then
local pid = posix.fork ()
if pid == 0 then
posix.exec ("/sbin/ldconfig")
elseif pid ~= -1 then
posix.wait (pid)
end
end �X * FR gH � �K ׁ�A�A�A큤�������� g���g��ag��
g��
g��
g��
`���`���`���`���`���7fb83a06bcb8015a21c65fc8d10d9c325226f1d4de5ba2be01aa789c01d2ac6a 231f7edcc7352d7734a96eef0b8030f77982678c516876fcb81e25b32d68564c 32434afcc8666ba060e111d715bfdb6c2d5dd8a35fa4d3ab8ad67d8f850d2f2b 9d6b43ce4d8de0c878bf16b54d8e7a10d9bd42b75178153e3af6a815bdc90f74 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 a853c2ffec17057872340eee242ae4d96cbf2b520ae27d903e1b2fef1a5f9d1c libgcc_s-8-20210514.so.1 ../../../../lib64/libgcc_s-8-20210514.so.1 � � � � �root root root root root root root root root root root root root root root root root root root root root root gcc-8.5.0-23.el8_10.src.rpm ��������������������������������������������libgcc libgcc(x86-64) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgcc_s.so.1(GCC_3.3)(64bit) libgcc_s.so.1(GCC_3.3.1)(64bit) libgcc_s.so.1(GCC_3.4)(64bit) libgcc_s.so.1(GCC_3.4.2)(64bit) libgcc_s.so.1(GCC_3.4.4)(64bit) libgcc_s.so.1(GCC_4.0.0)(64bit) libgcc_s.so.1(GCC_4.2.0)(64bit) libgcc_s.so.1(GCC_4.3.0)(64bit) libgcc_s.so.1(GCC_4.7.0)(64bit) libgcc_s.so.1(GCC_4.8.0)(64bit) libgcc_s.so.1(GCC_7.0.0)(64bit)
rpmlib(BuiltinLuaScripts) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 4.2.2-1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 g���f! @e S�d���d,@c�.�c:�c5��b��@b� @b_��bF�@bDF@a�@a�a�a�A@a��a�@a�@@`�@`�!@`�f@`��@`���`pA�`pA�_s!�_�^���]�|@]-�@\� �\��\��@\��\�s@\�s@\U@[�1�[ā@[�;@[�F�[��[l,�[^��[\Z�[[ @[GB�[�Z�Z�@Marek Polacek <polacek@redhat.com> 8.5.0-23 Marek Polacek <polacek@redhat.com> 8.5.0-22 Marek Polacek <polacek@redhat.com> 8.5.0-21 Marek Polacek <polacek@redhat.com> 8.5.0-20 Marek Polacek <polacek@redhat.com> 8.5.0-19 Marek Polacek <polacek@redhat.com> 8.5.0-18 Marek Polacek <polacek@redhat.com> 8.5.0-17 Marek Polacek <polacek@redhat.com> 8.5.0-16 Marek Polacek <polacek@redhat.com> 8.5.0-1� x�������������H�������� X � RT�yColl���������
�������a llet�$ ���������������� �a �a �a � CURL_SSLVERSION_TLSv1_x constant (EL)
- fpm: switch to UDS on Fedora >= 21 - Update to 7.0.1RC1
- drop --disable-huge-code-pages build option on EL-6,
but keep it disabled in default configuration - build with --disable-huge-code-pages on EL-6 - Update to 7.0.0
http://www.php.net/releases/7_0_0.php - set opcache.huge_code_pages=0 on EL-6
see https://bugs.php.net/70973 and https://bugs.php.net/70977 - Update to 7.0.0RC8
- set opcache.huge_code_pages=1 on x86_64 - Update to 7.0.0RC7 (retagged) - Update to 7.0.0RC7 - Update to 7.0.0RC6 - php-config: reports all built sapis - rebuild as retagged - Update to 7.0.0RC5
- update php-fpm.d/www.conf comments
- API and Zend API are now set to 20151012 - Update to 7.0.0RC4
- php-fpm: set http authorization headers - F23 rebuild with rh_layout - Update to 7.0.0RC3
- disable zip extension (provided in php-pecl-zip) - Update to 7.0.0RC2
- enable oci8 and pdo_oci extensions
- sync php.ini with upstream php.ini-production - Update to 7.0.0RC1 - Update to 7.0.0beta3 - Update to 7.0.0beta2
- switch from libvpx to libwebp (only for bundled libgd, not used) - Update to 7.0.0beta1
- use upstream tarball instead of git snapshot - Update to 7.0.0alpha2
- use new layout (/etc/opt, /var/opt) - new snapshot - new snapshot
- the phar link is now correctly created - Update to 7.0.0alpha1 - new snapshot - new snapshot
- t1lib support have been removed - new snapshot - new snapshot - new snapshot - add experimental file based opcode cache (disabled by default) - new snapshot - new snapshot
- adapt system tzdata patch for upstream change for new zic - new snapshot - new snapshot - new snapshot - rename 10-php70-php.conf to 15-php70-php.conf to
ensure load order (after 10-rh-php56-php.conf) - rebuild - fix mod_php configuration
- disable static json
- sync php.ini with upstream php.ini-production - update for php 7.0.0
- ereg, mssql, mysql and sybase_ct extensions are removed
- add pdo-dblib subpackage (instead of php-mssql)
- disable oci8 extension, not yet adapted for 7.0
- add php-zip subpackage
- add php-json subpackage - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.php.net/releases/5_6_4.php
- add sybase_ct extension (in mssql sub-package)
- xmlrpc requires xml - Update to 5.6.4
http://www.php.net/releases/5_6_4.php - update to 5.6.4RC1 - add embedded sub package
- filter all libraries to avoid provides - FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools - Update to PHP 5.6.3
http://php.net/releases/5_6_3.php - update to 5.6.3RC1
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
- disable opcache.fast_shutdown in default config
- add php56-cgi command in base system - Update to PHP 5.6.2
http://php.net/releases/5_6_2.php - Update to PHP 5.6.1
http://php.net/releases/5_6_1.php
- use default system cipher list by Fedora policy
http://fedoraproject.org/wiki/Changes/CryptoPolicy
- add system php library to default include_path - enable libvpx on EL 6 (with libvpx 1.3.0)
- add php56-phpdbg command in base system - PHP 5.6.0 is GA
- add lsphp56 command in base system - initial spec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix m� x�������������������� X � es��ynfigH� h�������� ce r�$ N ���������������� �� �� �� � n define chrome_sandbox_t, mozilla_plugin_t and sandbox_web_type to that domain.
- Add labeling for cmpiLMI_LogicalFile-cimprovagt
- Also make pegasus_openlmi_logicalfile_t as unconfined to have unconfined_domain attribute for filename trans rules
- Update policy rules for pegasus_openlmi_logicalfile_t
- Add initial types for logicalfile/unconfined OpenLMI providers
- mailmanctl needs to read own log
- Allow logwatch manage own lock files
- Allow nrpe to read meminfo
- Allow httpd to read certs located in pki-ca
- Add pki_read_tomcat_cert() interface
- Add support for nagios openshift plugins
- Add port definition for redis port
- fix selinuxuser_use_ssh_chroot boolean - Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow selinuxuse_dri boolean.
- Allow bootloader to manage generic log files
- Allow ftp to bind to port 989
- Fix label of new gear directory
- Add support for new directory /var/lib/openshift/gears/
- Add openshift_manage_lib_dirs()
- allow virtd domains to manage setrans_var_run_t
- Allow useradd to manage all openshift content
- Add support so that mozilla_plugin_t can use dri devices
- Allow chronyd to change the scheduler
- Allow apmd to shut downthe system
- Devicekit_disk_t needs to manage /etc/fstab - Make DSPAM to act as a LDA working
- Allow ntop to create netlink socket
- Allow policykit to send a signal to policykit-auth
- Allow stapserver to dbus chat with avahi/systemd-logind
- Fix labeling on haproxy unit file
- Clean up haproxy policy
- A new policy for haproxy and placed it to rhcs.te
- Add support for ldirectord and treat it with cluster_t
- Make sure anaconda log dir is created with var_log_t - Allow lvm_t to create default targets for filesystem handling
- Fix labeling for razor-lightdm binaries
- Allow insmod_t to read any file labeled var_lib_t
- Add policy for pesign
- Activate policy for cmpiLMI_Account-cimprovagt
- Allow isnsd syscall=listen
- /usr/libexec/pegasus/cimprovagt needs setsched caused by sched_setscheduler
- Allow ctdbd to use udp/4379
- gatherd wants sys_nice and setsched
- Add support for texlive2012
- Allow NM to read file_t (usb stick with no labels used to transfer keys for example)
- Allow cobbler to execute apache with domain transition - condor_collector uses tcp/9000
- Label /usr/sbin/virtlockd as virtd_exec_t for now
- Allow cobbler to execute ldconfig
- Allow NM to execute ssh
- Allow mdadm to read /dev/crash
- Allow antivirus domains to connect to snmp port
- Make amavisd-snmp working correctly
- Allow nfsd_t to mounton nfsd_fs_t
- Add initial snapper policy
- We still need to have consolekit policy
- Dontaudit firefox attempting to connect to the xserver_port_t if run within sandbox_web_t
- Dontaudit sandbox apps attempting to open user_devpts_t
- Allow dirsrv to read network state
- Fix pki_read_tomcat_lib_files
- Add labeling for /usr/libexec/nm-ssh-service
- Add label cert_t for /var/lib/ipa/pki-ca/publish
- Lets label /sys/fs/cgroup as cgroup_t for now, to keep labels consistant
- Allow nfsd_t to mounton nfsd_fs_t
- Dontaudit sandbox apps attempting to open user_devpts_t
- Allow passwd_t to change role to system_r from unconfined_r - Don't audit access checks by sandbox xserver on xdb var_lib
- Allow ntop to read usbmon devices
- Add labeling for new polcykit authorizor
- Dontaudit access checks from fail2ban_client
- Don't audit access checks by sandbox xserver on xdb var_lib
- Allow apps that connect to xdm stream to conenct to xdm_dbusd_t stream
- Fix labeling for all /usr/bim/razor-lightdm-* binaries
- Add filename trans for /dev/md126p1 - Make vdagent able to request loading kernel module
- Add support for cloud-init make it as unconfined domain
- Allow snmpd to run smartctl in fsadm_t domain
- remove duplicate openshift_search_lib() interface
- Allow mysqld to search openshift lib files
- Allow openshift cgroup to interact with passedin file descriptors
- Allow colord to list directories inthe users homedir
- aide executes prelink to check files
- Make sure cups� x�������������8������� X � ic�yfor 8| �������� ead �$ � ���������������� � � � � 801=m,
- CONFIG_REGULATOR_RTMV20=m, CONFIG_REGULATOR_SLG51000=m, CONFIG_REGULATOR_TPS51632=m,
- CONFIG_REGULATOR_TPS62360=m, CONFIG_REGULATOR_TPS65023=m, CONFIG_REGULATOR_TPS6507X=m,
- CONFIG_REGULATOR_TPS65132=m, CONFIG_REGULATOR_TPS6524X=m, CONFIG_VIDEOBUF2_DMA_SG=m,
- CONFIG_DRM_AMD_DC_DCN3_0=y, CONFIG_DRM_AMD_DC_HDCP=y, CONFIG_DRM_AMD_DC_SI=y,
- CONFIG_BACKLIGHT_KTD253=m, CONFIG_SND_SOC_INTEL_CATPT=m,
- CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC=y,
- CONFIG_SND_SOC_INTEL_SKL_HDA_DSP_GENERIC_MACH=m,
- CONFIG_SND_SOC_CS4234=m, CONFIG_SND_SOC_HDAC_HDA=m, CONFIG_SND_SOC_TAS2764=m,
- CONFIG_HID_ACCUTOUCH=m, CONFIG_HID_ACRUX=m, CONFIG_HID_ACRUX_FF=y, CONFIG_HID_ASUS=m,
- CONFIG_HID_BIGBEN_FF=m, CONFIG_HID_CP2112=m, CONFIG_HID_CREATIVE_SB0540=m,
- CONFIG_DRAGONRISE_FF=y, CONFIG_HID_EMS_FF=m, CONFIG_HID_GLORIOUS=m, CONFIG_HOLTEK_FF=y,
- CONFIG_HID_VIVALDI=m, CONFIG_HID_VIEWSONIC=m, CONFIG_LOGITECH_FF=y,
- CONFIG_LOGIRUMBLEPAD2_FF=y, CONFIG_LOGIG940_FF=y, CONFIG_LOGIWHEELS_FF=y,
- CONFIG_HID_MAYFLASH=m, CONFIG_PANTHERLORD_FF=y, CONFIG_HID_RETRODE=m,
- CONFIG_HID_SONY=m, CONFIG_SONY_FF=y, CONFIG_HID_STEAM=m, CONFIG_HID_STEELSERIES=m,
- CONFIG_HID_GREENASIA=m, CONFIG_GREENASIA_FF=y, CONFIG_HID_SMARTJOYPLUS=m,
- CONFIG_SMARTJOYPLUS_FF=y, CONFIG_HID_THRUSTMASTER=m, CONFIG_THRUSTMASTER_FF=y,
- CONFIG_HID_UDRAW_PS3=m, CONFIG_HID_U2FZERO=m, CONFIG_HID_WIIMOTE=m, CONFIG_HID_ZEROPLUS=m,
- CONFIG_ZEROPLUS_FF=y, CONFIG_HID_MCP2221=m, CONFIG_USB_PHY=y, CONFIG_TYPEC_TCPM=m,
- CONFIG_TYPEC_TCPCI=m, CONFIG_TYPEC_RT1711H=m, CONFIG_TYPEC_TCPCI_MAXIM=m,
- CONFIG_TYPEC_FUSB302=m, CONFIG_UCSI_CCG=m, CONFIG_TYPEC_HD3SS3220=m,
- CONFIG_TYPEC_TPS6598X=m, CONFIG_TYPEC_STUSB160X=m, CONFIG_TYPEC_MUX_PI3USB30532=m,
- CONFIG_TYPEC_MUX_INTEL_PMC=m, CONFIG_TYPEC_DP_ALTMODE=m, CONFIG_TYPEC_NVIDIA_ALTMODE=m,
- CONFIG_USB_ROLE_SWITCH=m, CONFIG_LEDS_CLASS_FLASH=m, CONFIG_LEDS_CLASS_MULTICOLOR=m,
- CONFIG_LEDS_APU=m, CONFIG_LEDS_AS3645A=m, CONFIG_LEDS_LM3532=m, CONFIG_LEDS_LM3642=m,
- CONFIG_LEDS_LM3601X=m, CONFIG_LEDS_PCA9532=m, CONFIG_LEDS_PCA9532_GPIO=y, CONFIG_LEDS_GPIO=m,
- CONFIG_LEDS_LP3952=m, CONFIG_LEDS_LP50XX=m, CONFIG_LEDS_PCA955X=m, CONFIG_LEDS_PCA955X_GPIO=y,
- CONFIG_LEDS_PCA963X=m, CONFIG_LEDS_DAC124S085=m, CONFIG_LEDS_PWM=m, CONFIG_LEDS_REGULATOR=m,
- CONFIG_LEDS_BD2802=m, CONFIG_LEDS_TCA6507=m, CONFIG_LEDS_TLC591XX=m, CONFIG_LEDS_LM355x=m,
- CONFIG_LEDS_MLXREG=m, CONFIG_LEDS_USER=m, CONFIG_LEDS_NIC78BX=m, CONFIG_LEDS_SGM3140=m,
- CONFIG_LEDS_TRIGGER_ACTIVITY=m, CONFIG_LEDS_TRIGGER_NETDEV=m, CONFIG_LEDS_TRIGGER_PATTERN=m,
- CONFIG_RTC_DRV_RV3032=m, CONFIG_RTC_DRV_FTRTC010=m, CONFIG_RTC_DRV_HID_SENSOR_TIME=m,
- CONFIG_VIRTIO_DMA_SHARED_BUFFER=m, CONFIG_QCOM_QMI_HELPERS=m, CONFIG_EXTCON=y,
- CONFIG_IIO_BUFFER_CB=m, CONFIG_IIO_BUFFER_DMA=m, CONFIG_IIO_BUFFER_DMAENGINE=m,
- CONFIG_IIO_BUFFER_HW_CONSUMER=m, CONFIG_IIO_CONFIGFS=m, CONFIG_IIO_SW_DEVICE=m,
- CONFIG_IIO_SW_TRIGGER=m, CONFIG_IIO_TRIGGERED_EVENT=m, CONFIG_ACPI_ALS=m, CONFIG_ADJD_S311=m,
- CONFIG_ADUX1020=m, CONFIG_AL3320A=m, CONFIG_APDS9300=m, CONFIG_APDS9960=m, CONFIG_AS73211=m,
- CONFIG_BH1750=m, CONFIG_BH1780=m, CONFIG_CM32181=m, CONFIG_CM3232=m, CONFIG_CM3323=m,
- CONFIG_CM36651=m, CONFIG_GP2AP002=m, CONFIG_GP2AP020A00F=m, CONFIG_SENSORS_ISL29018=m,
- CONFIG_SENSORS_ISL29028=m, CONFIG_ISL29125=m, CONFIG_JSA1212=m, CONFIG_RPR0521=m,
- CONFIG_LTR501=m, CONFIG_LV0104CS=m, CONFIG_MAX44000=m, CONFIG_MAX44009=m, CONFIG_NOA1305=m,
- CONFIG_OPT3001=m, CONFIG_PA12203001=m, CONFIG_SI1133=m, CONFIG_SI1145=m, CONFIG_STK3310=m,
- CONFIG_ST_UVIS25=m, CONFIG_ST_UVIS25_I2C=m, CONFIG_ST_UVIS25_SPI=m, CONFIG_TCS3414=m,
- CONFIG_TCS3472=m, CONFIG_SENSORS_TSL2563=m, CONFIG_TSL2583=m, CONFIG_TSL2772=m,
- CONFIG_TSL4531=m, CONFIG_US5182D=m, CONFIG_VCNL4000=m, CONFIG_VCNL4035=m, CONFIG_VEML6030=m,
- CONFIG_VEML6070=m, CONFIG_VL6180=m, CONFIG_ZOPT2201=m, CONFIG_USB_LGM_PHY=m,
- CONFIG_BCM_KONA_USB2_PHY=m, CONFIG_PHY_PXA_28NM_HSIC=m, CONFIG_PHY_PXA_28NM_USB2=m,
- CONFIG_PHY_CPCAP_USB=m, CONFIG_PHY_INTEL_LGM_EMMC=m, CONFIG_XFS_SUPPORT_V4=y,
- CONFIG_FUSE_DAX=y, CONFIG_CRYPTO_SM2=m, CO� x��������������������� X � cir�yquir�����(������ evel�$ ���������������� � H �� ? �� d � � � � � � A � � � � � � � � � � � � : � F � [ � a h � �
� 4 �
� � ) ~ � � | & & / & ( m 8 t e 9 e : �� e G �� H �8 I �| X �� Y �� \ �� ] � ^ �\
b �- d �} e �� f �� l �� t �� u �� v �( w � x �D y �� x � �h � �l � �� � �� � �� �� �� �� 6
�. �W � �� �� �� g �� h �� C cups-libs 2.2.6 67.el8_10 CUPS printing system - libraries CUPS printing system provides a portable printing layer for
UNIX® operating systems. It has been developed by Apple Inc.
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.
The cups-libs package provides libraries used by applications to use CUPS
natively, without needing the lp/lpr commands. i���ord1-prod-x86build009.svc.aws.rockylinux.org w\Rocky Linux 8 Rocky LGPLv2 and zlib infrastructure@rockylinux.org Unspecified http://www.cups.org/ linux x86_64 " % & ' & � � �� q ��A�A�A�A���A�������A큤 i���i���i���i���i���i���i���i���i���i���i���i���i���i���i���i���Y��� db30819144640ed30c2f56f9a81329595ec81ca59ec19ca8199a75cc8db4aa90 622a711de8edf0bb6c11ed773132c48aa2214791fb61c3c56994ccc48d67cc8c 3a353e7bd2792d391fd73bd8d0f572e9ba728a10f414ea30210aef370662b2da c18f7288aae7f2e34c1bb3aa6252acb71ef26b18d7bd6ec971b2431d654d68fb d29c8bafa4c0ef4eb1cb0e6419e90e2bbe8b4a616c04a267e220ad16aa4f3761 6e0e0ffbde118aae709f7ef65590de9071e8b2cd322f84fd645c6b64f3cc452c ../../../../usr/lib64/libcups.so.2 ../../../../usr/lib64/libcupscgi.so.1 ../../../../usr/lib64/libcupsmime.so.1 ../../../../usr/lib64/libcupsimage.so.2 ../../../../usr/lib64/libcupsppdc.so.1 �root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root cups-2.2.6-67.el8_10.src.rpm ��������������������������������������������������������������������cups-libs cups-libs(x86-64) libcups.so.2()(64bit) libcupscgi.so.1()(64bit) libcupsimage.so.2()(64bit) libcupsmime.so.1()(64bit) libcupsppdc.so.1()(64bit) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ libaudit.so.1()(64bit) libavahi-client.so.3()(64bit) libavahi-common.so.3()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcom_err.so.2()(64bit) libcrypt.so.1()(64bit) libcups.so.2()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgnutls.so.30()(64bit) libgnutls.so.30(GNUTLS_3_4)(64bit) libgssapi_krb5.so.2()(64bit) libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit) libk5crypto.so.3()(64bit) libkrb5.so.3()(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.2.5)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) libselinux.so.1()(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.8)(64bit) libstdc++.so.6(CXXABI_1.� x�������������(�������� X � swY�y2635��������@� �� C++ �$ j ���������������� �� �� �� � at.com> 3.7.17-2 Dan Walsh <dwalsh@redhat.com> 3.7.17-1 Dan Walsh <dwalsh@redhat.com> 3.7.16-2 Dan Walsh <dwalsh@redhat.com> 3.7.16-1 Dan Walsh <dwalsh@redhat.com> 3.7.15-4 Dan Walsh <dwalsh@redhat.com> 3.7.15-3 Dan Walsh <dwalsh@redhat.com> 3.7.15-2 Dan Walsh <dwalsh@redhat.com> 3.7.15-1 Dan Walsh <dwalsh@redhat.com> 3.7.14-5 Dan Walsh <dwalsh@redhat.com> 3.7.14-4 Dan Walsh <dwalsh@redhat.com> 3.7.14-3 Dan Walsh <dwalsh@redhat.com> 3.7.14-2 Dan Walsh <dwalsh@redhat.com> 3.7.14-1 Dan Walsh <dwalsh@redhat.com> 3.7.13-4 Dan Walsh <dwalsh@redhat.com> 3.7.13-3 Dan Walsh <dwalsh@redhat.com> 3.7.13-2 Dan Walsh <dwalsh@redhat.com> 3.7.13-1 Dan Walsh <dwalsh@redhat.com> 3.7.12-1 Dan Walsh <dwalsh@redhat.com> 3.7.11-1 Dan Walsh <dwalsh@redhat.com> 3.7.10-5 Dan Walsh <dwalsh@redhat.com> 3.7.10-4 Dan Walsh <dwalsh@redhat.com> 3.7.10-3 Dan Walsh <dwalsh@redhat.com> 3.7.10-2 Dan Walsh <dwalsh@redhat.com> 3.7.10-1 Dan Walsh <dwalsh@redhat.com> 3.7.9-4 Dan Walsh <dwalsh@redhat.com> 3.7.9-3 Dan Walsh <dwalsh@redhat.com> 3.7.9-2 Dan Walsh <dwalsh@redhat.com> 3.7.9-1 Dan Walsh <dwalsh@redhat.com> 3.7.8-11 Dan Walsh <dwalsh@redhat.com> 3.7.8-9 Dan Walsh <dwalsh@redhat.com> 3.7.8-8 Dan Walsh <dwalsh@redhat.com> 3.7.8-7 Dan Walsh <dwalsh@redhat.com> 3.7.8-6 Dan Walsh <dwalsh@redhat.com> 3.7.8-5 Dan Walsh <dwalsh@redhat.com> 3.7.8-4 Dan Walsh <dwalsh@redhat.com> 3.7.8-3 Dan Walsh <dwalsh@redhat.com> 3.7.8-2 Dan Walsh <dwalsh@redhat.com> 3.7.8-1 Dan Walsh <dwalsh@redhat.com> 3.7.7-3 Dan Walsh <dwalsh@redhat.com> 3.7.7-2 Dan Walsh <dwalsh@redhat.com> 3.7.7-1 Dan Walsh <dwalsh@redhat.com> 3.7.6-1 Dan Walsh <dwalsh@redhat.com> 3.7.5-8 Dan Walsh <dwalsh@redhat.com> 3.7.5-7 Dan Walsh <dwalsh@redhat.com> 3.7.5-6 Dan Walsh <dwalsh@redhat.com> 3.7.5-5 Dan Walsh <dwalsh@redhat.com> 3.7.5-4 Dan Walsh <dwalsh@redhat.com> 3.7.5-3 Dan Walsh <dwalsh@redhat.com> 3.7.5-2 Dan Walsh <dwalsh@redhat.com> 3.7.5-1 Dan Walsh <dwalsh@redhat.com> 3.7.4-4 Dan Walsh <dwalsh@redhat.com> 3.7.4-3 Dan Walsh <dwalsh@redhat.com> 3.7.4-2 Dan Walsh <dwalsh@redhat.com> 3.7.4-1 Dan Walsh <dwalsh@redhat.com> 3.7.3-1 Dan Walsh <dwalsh@redhat.com> 3.7.1-1 Dan Walsh <dwalsh@redhat.com> 3.6.33-2 Dan Walsh <dwalsh@redhat.com> 3.6.33-1 Dan Walsh <dwalsh@redhat.com> 3.6.32-17 Dan Walsh <dwalsh@redhat.com> 3.6.32-16 Dan Walsh <dwalsh@redhat.com> 3.6.32-15 Dan Walsh <dwalsh@redhat.com> 3.6.32-13 Dan Walsh <dwalsh@redhat.com> 3.6.32-12 Dan Walsh <dwalsh@redhat.com> 3.6.32-11 Dan Walsh <dwalsh@redhat.com> 3.6.32-10 Dan Walsh <dwalsh@redhat.com> 3.6.32-9 Dan Walsh <dwalsh@redhat.com> 3.6.32-8 Dan Walsh <dwalsh@redhat.com> 3.6.32-7 Dan Walsh <dwalsh@redhat.com> 3.6.32-6 Dan Walsh <dwalsh@redhat.com> 3.6.32-5 Dan Walsh <dwalsh@redhat.com> 3.6.32-4 Dan Walsh <dwalsh@redhat.com> 3.6.32-3 Dan Walsh <dwalsh@redhat.com> 3.6.32-2 Dan Walsh <dwalsh@redhat.com> 3.6.32-1 Dan Walsh <dwalsh@redhat.com> 3.6.31-5 Dan Walsh <dwalsh@redhat.com> 3.6.31-4 Dan Walsh <dwalsh@redhat.com> 3.6.31-3 Dan Walsh <dwalsh@redhat.com> 3.6.31-2 Dan Walsh <dwalsh@redhat.com> 3.6.30-6 Dan Walsh <dwalsh@redhat.com> 3.6.30-5 Dan Walsh <dwalsh@redhat.com> 3.6.30-4 Dan Walsh <dwalsh@redhat.com> 3.6.30-3 Dan Walsh <dwalsh@redhat.com> 3.6.30-2 Dan Walsh <dwalsh@redhat.com> 3.6.30-1 Dan Walsh <dwalsh@redhat.com> 3.6.29-2 Dan Walsh <dwalsh@redhat.com> 3.6.29-1 Dan Walsh <dwalsh@redhat.com> 3.6.28-9 Dan Walsh <dwalsh@redhat.com> 3.6.28-8 Dan Walsh <dwalsh@redhat.com> 3.6.28-7 Dan Walsh <dwalsh@redhat.com> 3.6.28-6 Dan Walsh <dwalsh@redhat.com> 3.6.28-5 Dan Walsh <dwalsh@redhat.com> 3.6.28-4 Dan Walsh <dwalsh@redhat.com> 3.6.28-3 Dan Walsh <dwalsh@redhat.com> 3.6.28-2 Dan Walsh <dwalsh@redhat.com> 3.6.28-1 Dan Walsh <dwalsh@redhat.com> 3.6.27-1 Dan Walsh <dwalsh@redhat.com> 3.6.26-11 Dan Walsh <dwalsh@redhat.com> 3.6.26-10 Dan Walsh <dwalsh@redhat.com> 3.6.26-9 Bill Nottingham <notting@redhat.com> 3.6.26-8 Dan Walsh <dwalsh@redhat.com> 3.6.26-7 Dan Walsh <dwalsh@redhat.com> 3.6.26-6 Dan Walsh <dwalsh@redhat.com> 3.6.26-5 Dan Walsh <dwalsh@redhat.com> 3.6.26-4 Dan Walsh <dwalsh@redhat.com> 3.6.26-3 Dan Walsh <d� x���������������������� X � lle�yremi�� x� "G .0~b�$ 2 ���������������� "G � <& � ient policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507 - Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472 - Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913 - Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916 - Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825 - Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117 - Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117 - Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Reso� x��������������������� X � t �yigurP� � � re/p�$ ���������������� � � � � ernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.102] - Updated with the 5.15.101 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.101] - Updated with the 5.15.100 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.100] - Updated with the 5.15.99 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.99] - Updated with the 5.15.98 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.98] - Updated with the 5.15.97 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.97] - Updated with the 5.15.96 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.96] - Updated with the 5.15.95 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.95] - Updated with the 5.15.94 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.94] - Updated with the 5.15.93 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.93] - Updated with the 5.15.92 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.92] - Updated with the 5.15.91 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.91] - Updated with the 5.15.90 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.90] - Updated with the 5.15.89 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.89] - Updated with the 5.15.88 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.88] - Updated with the 5.15.87 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.87] - Updated with the 5.15.86 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86] - Updated with the 5.15.85 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.85] - Updated with the 5.15.84 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.84] - Updated with the 5.15.83 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.83] - Updated with the 5.15.82 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.82] - Updated with the 5.15.81 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.81] - Updated with the 5.15.80 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.80] - Updated with the 5.15.79 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.79] - Updated with the 5.15.78 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.78] - Updated with the 5.15.77 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.77] - Updated with the 5.15.76 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.76] - Updated with the 5.15.75 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.75] - Updated with the 5.15.74 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.74] - Updated with the 5.15.73 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.73] - Updated with the 5.15.72 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.72] - Updated with the 5.15.71 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.71] - Updated with the 5.15.70 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.70] - Updated with the 5.15.69 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.69] - Updated with the 5.15.68 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.68] - Updated with the 5.15.67 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.67] - Updated with the 5.15.66 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.66] - Updated with the 5.15.65 source tarball.
- [https://� x���������������������� X � ea �yFixe�� � � d po�$ ���������������� �
� � � ND_SOC_AK4613=m, CONFIG_SND_SOC_AK4642=m,
- CONFIG_SND_SOC_AK5386=m, CONFIG_SND_SOC_AK5558=m, CONFIG_SND_SOC_ALC5623=m,
- CONFIG_SND_SOC_BD28623=m, CONFIG_SND_SOC_BT_SCO=m, CONFIG_SND_SOC_CS35L32=m,
- CONFIG_SND_SOC_CS35L33=m, CONFIG_SND_SOC_CS35L34=m, CONFIG_SND_SOC_CS35L35=m,
- CONFIG_SND_SOC_CS35L36=m, CONFIG_SND_SOC_CS42L42=m, CONFIG_SND_SOC_CS42L51=m,
- CONFIG_SND_SOC_CS42L51_I2C=m, CONFIG_SND_SOC_CS42L52=m,
- CONFIG_SND_SOC_CS42L56=m, CONFIG_SND_SOC_CS42L73=m, CONFIG_SND_SOC_CS4265=m,
- CONFIG_SND_SOC_CS4270=m, CONFIG_SND_SOC_CS4271=m, CONFIG_SND_SOC_CS4271_I2C=m,
- CONFIG_SND_SOC_CS4271_SPI=m, CONFIG_SND_SOC_CS42XX8=m,
- CONFIG_SND_SOC_CS42XX8_I2C=m, CONFIG_SND_SOC_CS43130=m, CONFIG_SND_SOC_CS4341=m,
- CONFIG_SND_SOC_CS4349=m, CONFIG_SND_SOC_CS53L30=m, CONFIG_SND_SOC_ES7134=m,
- CONFIG_SND_SOC_ES7241=m, CONFIG_SND_SOC_ES8328=m, CONFIG_SND_SOC_ES8328_I2C=m,
- CONFIG_SND_SOC_ES8328_SPI=m, CONFIG_SND_SOC_GTM601=m,
- CONFIG_SND_SOC_INNO_RK3036=m, CONFIG_SND_SOC_MAX98088=m,
- CONFIG_SND_SOC_MAX98504=m, CONFIG_SND_SOC_MAX9867=m, CONFIG_SND_SOC_MAX9860=m,
- CONFIG_SND_SOC_MSM8916_WCD_DIGITAL=m, CONFIG_SND_SOC_PCM1681=m,
- CONFIG_SND_SOC_PCM1789=m, CONFIG_SND_SOC_PCM1789_I2C=m, CONFIG_SND_SOC_PCM179X=m,
- CONFIG_SND_SOC_PCM179X_I2C=m, CONFIG_SND_SOC_PCM179X_SPI=m,
- CONFIG_SND_SOC_PCM186X=m, CONFIG_SND_SOC_PCM186X_I2C=m,
- CONFIG_SND_SOC_PCM186X_SPI=m, CONFIG_SND_SOC_PCM3060=m,
- CONFIG_SND_SOC_PCM3060_I2C=m, CONFIG_SND_SOC_PCM3060_SPI=m,
- CONFIG_SND_SOC_PCM3168A=m, CONFIG_SND_SOC_PCM3168A_I2C=m,
- CONFIG_SND_SOC_PCM3168A_SPI=m, CONFIG_SND_SOC_PCM512x=m,
- CONFIG_SND_SOC_PCM512x_I2C=m, CONFIG_SND_SOC_PCM512x_SPI=m,
- CONFIG_SND_SOC_RK3328=m, CONFIG_SND_SOC_RT5616=m, CONFIG_SND_SOC_RT5631=m,
- CONFIG_SND_SOC_SGTL5000=m, CONFIG_SND_SOC_SIGMADSP=m,
- CONFIG_SND_SOC_SIGMADSP_I2C=m, CONFIG_SND_SOC_SIGMADSP_REGMAP=m,
- CONFIG_SND_SOC_SIMPLE_AMPLIFIER=m, CONFIG_SND_SOC_SIRF_AUDIO_CODEC=m,
- CONFIG_SND_SOC_SPDIF=m, CONFIG_SND_SOC_SSM2305=m, CONFIG_SND_SOC_SSM2602=m,
- CONFIG_SND_SOC_SSM2602_SPI=m, CONFIG_SND_SOC_SSM2602_I2C=m,
- CONFIG_SND_SOC_STA32X=m, CONFIG_SND_SOC_STA350=m, CONFIG_SND_SOC_STI_SAS=m,
- CONFIG_SND_SOC_TAS2552=m, CONFIG_SND_SOC_TAS2562=m, CONFIG_SND_SOC_TAS2770=m,
- CONFIG_SND_SOC_TAS5086=m, CONFIG_SND_SOC_TAS571X=m, CONFIG_SND_SOC_TAS5720=m,
- CONFIG_SND_SOC_TAS6424=m, CONFIG_SND_SOC_TDA7419=m, CONFIG_SND_SOC_TFA9879=m,
- CONFIG_SND_SOC_TLV320AIC23=m, CONFIG_SND_SOC_TLV320AIC23_I2C=m,
- CONFIG_SND_SOC_TLV320AIC23_SPI=m, CONFIG_SND_SOC_TLV320AIC31XX=m,
- CONFIG_SND_SOC_TLV320AIC32X4=m, CONFIG_SND_SOC_TLV320AIC32X4_I2C=m,
- CONFIG_SND_SOC_TLV320AIC32X4_SPI=m, CONFIG_SND_SOC_TLV320AIC3X=m,
- CONFIG_SND_SOC_TSCS42XX=m, CONFIG_SND_SOC_TSCS454=m, CONFIG_SND_SOC_UDA1334=m,
- CONFIG_SND_SOC_WM8510=m, CONFIG_SND_SOC_WM8523=m, CONFIG_SND_SOC_WM8524=m,
- CONFIG_SND_SOC_WM8580=m, CONFIG_SND_SOC_WM8711=m, CONFIG_SND_SOC_WM8728=m,
- CONFIG_SND_SOC_WM8731=m, CONFIG_SND_SOC_WM8737=m, CONFIG_SND_SOC_WM8741=m,
- CONFIG_SND_SOC_WM8750=m, CONFIG_SND_SOC_WM8753=m, CONFIG_SND_SOC_WM8770=m,
- CONFIG_SND_SOC_WM8776=m, CONFIG_SND_SOC_WM8782=m, CONFIG_SND_SOC_WM8804=m,
- CONFIG_SND_SOC_WM8804_I2C=m, CONFIG_SND_SOC_WM8804_SPI=m,
- CONFIG_SND_SOC_WM8903=m, CONFIG_SND_SOC_WM8904=m, CONFIG_SND_SOC_WM8960=m,
- CONFIG_SND_SOC_WM8962=m, CONFIG_SND_SOC_WM8974=m, CONFIG_SND_SOC_WM8978=m,
- CONFIG_SND_SOC_WM8985=m, CONFIG_SND_SOC_ZX_AUD96P22=m, CONFIG_SND_SOC_MAX9759=m,
- CONFIG_SND_SOC_MT6351=m, CONFIG_SND_SOC_MT6358=m, CONFIG_SND_SOC_MT6660=m,
- CONFIG_SND_SOC_NAU8540=m, CONFIG_SND_SOC_NAU8810=m, CONFIG_SND_SOC_NAU8822=m,
- CONFIG_SND_SOC_TPA6130A2=m, CONFIG_SND_SIMPLE_CARD_UTILS=m and
- CONFIG_SND_SIMPLE_CARD=m - Updated with the 5.6.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.4] - Updated with the 5.6.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.3] - Updated with the 5.6.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2] - Updated with the 5.6.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/Change� x�������������{������� X � NF~�ySDN_�; ������� TRAC�$ 0 ���������������� ! � ly on request - 1822135 - _ppdOpen() leaks 'string' variable - fix more memory leaks found by coverity in 1775668 - fix covscan issues raised by 1775668 - 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
- 1774463 - CVE-2019-8696 - 1700663 - Stop advertising the HTTP methods that are supported - 1650233 - cups uses md5 for hashing credentials sent through tls connection - 1677577 - Remove 'View X log' buttons from web ui - 1659998 - cups fails to build if clang is installed - 1659486 - cupsd crash on startup in ippCopyAttribute - related to 1659111 - fix for previous releases - 1659111 - Logs needs to have '-rw------' [regression] - 1622431 - Jobs with multiple files don't complete when backend fails
- CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8] - 1602469 - fixed covscan issues
- 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
- 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
- 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
- 1630805 - Make cups systemd unit files more upstream-like - 1613173 - Remove weak SSL/TLS ciphers from CUPS - 1612933 - cups doesn't restart after cupsctl command - correct license - 1607295 - CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 cups: various flaws [rhel-8.0] - 1590122 - cups-driverd doesn't recognize static gzipped ppds - missing $ in sed - substitute default values for invalid job attributes (upstream #5186 and #5229) - Use dbus fix instead of general attr delete (upstream) - Fix for CVE-2017-18248 - remake of 1499261 - mention library names explicitly to warn about soname change - 1548120 - cups: Partial injection of Fedora build flags - pkgconfig is now shipped in pkgconf-pkg-config package - 1499261 - Move log files into journal - gcc and gcc-c++ is not in buildroot by default now - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for switch to libxcrypt - 1437345 - Remove cups-resolv_reload.patch - rebase to 2.2.6 - rebase to 2.2.5 - removing ghostscript-cups dependency - cups-filters ships it - 1498091 - Cannot browse CUPS servers in GNOME Control Panel Printers - 1484916 - Can not get destinations from CUPS server - 1494558 - CUPS may fail to start if NIS groups are used - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - rebase to 2.2.4 - update python dependencies accordingly Fedora Guideline for Python (python-cups -> python3-cups) - copying cups-resolv_reload.patch from RHEL - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd - disable patch for #1437065 for now until issue with stat is solved - 1437065 - CUPS does not recognize changes to /etc/resolv.conf until CUPS restart - rebase to 2.2.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - rebase to 2.2.2 - bug 1405669 - adding group wheel to SystemGroup - Unable to print from Windows (7) on a Cups-Server(2.2.1-1) with german umlauts in the filename (bug #1386751) - #873123 - (cups-usb-quirks) usb printer doesn't print (usblp0: USB Bidirectional printer dev) - rebase to 2.2.1 - fixing looping in partial failing service (bug #1366775) - 2.2.0 - fixing release number - rebase to cups-2.2rc1 - bug 1358589 - added information about syslog means systemd journal by default - Rebase to 2.2b2, editing patches and spec (no need for /etc/cups/interfaces) - substitution BuildRequires: pkgconfig(libsystemd-*) for BuildRequires: pkgconfig(libsystemd) - 2.1.4, 1346668 - Change symlink for smb backend to /usr/libexec/samba/cups_backend_smb - 2.1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 2.1.2 - interface scripts support is back (until 2.2) - 2.1.1 - interface � x��������������j������� X � dr^�yvice����������������� s re�$ I ���������������� � � � � <dwalsh@redhat.com> 2.5.6-1 Dan Walsh <dwalsh@redhat.com> 2.5.5-2 Dan Walsh <dwalsh@redhat.com> 2.5.5-1 Dan Walsh <dwalsh@redhat.com> 2.5.4-2 Dan Walsh <dwalsh@redhat.com> 2.5.4-1 Dan Walsh <dwalsh@redhat.com> 2.5.3-3 Dan Walsh <dwalsh@redhat.com> 2.5.3-2 Dan Walsh <dwalsh@redhat.com> 2.5.3-1 Dan Walsh <dwalsh@redhat.com> 2.5.2-6 Dan Walsh <dwalsh@redhat.com> 2.5.2-5 Dan Walsh <dwalsh@redhat.com> 2.5.2-4 Dan Walsh <dwalsh@redhat.com> 2.5.2-3 Dan Walsh <dwalsh@redhat.com> 2.5.2-2 Dan Walsh <dwalsh@redhat.com> 2.5.2-1 Dan Walsh <dwalsh@redhat.com> 2.5.1-5 Dan Walsh <dwalsh@redhat.com> 2.5.1-4 Dan Walsh <dwalsh@redhat.com> 2.5.1-2 Dan Walsh <dwalsh@redhat.com> 2.5.1-1 Dan Walsh <dwalsh@redhat.com> 2.4.6-20 Dan Walsh <dwalsh@redhat.com> 2.4.6-19 Dan Walsh <dwalsh@redhat.com> 2.4.6-18 Dan Walsh <dwalsh@redhat.com> 2.4.6-17 Dan Walsh <dwalsh@redhat.com> 2.4.6-16 Dan Walsh <dwalsh@redhat.com> 2.4.6-15 Dan Walsh <dwalsh@redhat.com> 2.4.6-14 Dan Walsh <dwalsh@redhat.com> 2.4.6-13 Dan Walsh <dwalsh@redhat.com> 2.4.6-12 Dan Walsh <dwalsh@redhat.com> 2.4.6-11 Dan Walsh <dwalsh@redhat.com> 2.4.6-10 Dan Walsh <dwalsh@redhat.com> 2.4.6-9 Dan Walsh <dwalsh@redhat.com> 2.4.6-8 Dan Walsh <dwalsh@redhat.com> 2.4.6-7 Dan Walsh <dwalsh@redhat.com> 2.4.6-6 Dan Walsh <dwalsh@redhat.com> 2.4.6-5 Dan Walsh <dwalsh@redhat.com> 2.4.6-4 Dan Walsh <dwalsh@redhat.com> 2.4.6-3 Dan Walsh <dwalsh@redhat.com> 2.4.6-1 Dan Walsh <dwalsh@redhat.com> 2.4.5-4 Dan Walsh <dwalsh@redhat.com> 2.4.5-3 Dan Walsh <dwalsh@redhat.com> 2.4.5-2 Dan Walsh <dwalsh@redhat.com> 2.4.5-1 Dan Walsh <dwalsh@redhat.com> 2.4.4-2 Dan Walsh <dwalsh@redhat.com> 2.4.4-2 Dan Walsh <dwalsh@redhat.com> 2.4.4-1 Dan Walsh <dwalsh@redhat.com> 2.4.3-13 Dan Walsh <dwalsh@redhat.com> 2.4.3-12 Dan Walsh <dwalsh@redhat.com> 2.4.3-11 Dan Walsh <dwalsh@redhat.com> 2.4.3-10 Dan Walsh <dwalsh@redhat.com> 2.4.3-9 Dan Walsh <dwalsh@redhat.com> 2.4.3-8 Dan Walsh <dwalsh@redhat.com> 2.4.3-7 Dan Walsh <dwalsh@redhat.com> 2.4.3-6 Dan Walsh <dwalsh@redhat.com> 2.4.3-5 Dan Walsh <dwalsh@redhat.com> 2.4.3-4 Dan Walsh <dwalsh@redhat.com> 2.4.3-3 Dan Walsh <dwalsh@redhat.com> 2.4.3-2 Dan Walsh <dwalsh@redhat.com> 2.4.3-1 Dan Walsh <dwalsh@redhat.com> 2.4.2-8 Dan Walsh <dwalsh@redhat.com> 2.4.2-7 James Antill <james.antill@redhat.com> 2.4.2-6 Dan Walsh <dwalsh@redhat.com> 2.4.2-5 Dan Walsh <dwalsh@redhat.com> 2.4.2-4 Dan Walsh <dwalsh@redhat.com> 2.4.2-3 Dan Walsh <dwalsh@redhat.com> 2.4.2-2 Dan Walsh <dwalsh@redhat.com> 2.4.2-1 Dan Walsh <dwalsh@redhat.com> 2.4.1-5 Dan Walsh <dwalsh@redhat.com> 2.4.1-4 Dan Walsh <dwalsh@redhat.com> 2.4.1-3 Dan Walsh <dwalsh@redhat.com> 2.4.1-2 Dan Walsh <dwalsh@redhat.com> 2.4-4 Dan Walsh <dwalsh@redhat.com> 2.4-3 Dan Walsh <dwalsh@redhat.com> 2.4-2 Dan Walsh <dwalsh@redhat.com> 2.4-1 Dan Walsh <dwalsh@redhat.com> 2.3.19-4 Dan Walsh <dwalsh@redhat.com> 2.3.19-3 Dan Walsh <dwalsh@redhat.com> 2.3.19-2 Dan Walsh <dwalsh@redhat.com> 2.3.19-1 James Antill <jantill@redhat.com> 2.3.18-10 James Antill <jantill@redhat.com> 2.3.18-9 Dan Walsh <dwalsh@redhat.com> 2.3.18-8 Dan Walsh <dwalsh@redhat.com> 2.3.18-7 Dan Walsh <dwalsh@redhat.com> 2.3.18-6 Dan Walsh <dwalsh@redhat.com> 2.3.18-5 Dan Walsh <dwalsh@redhat.com> 2.3.18-4 Dan Walsh <dwalsh@redhat.com> 2.3.18-3 Dan Walsh <dwalsh@redhat.com> 2.3.18-2 Dan Walsh <dwalsh@redhat.com> 2.3.18-1 Dan Walsh <dwalsh@redhat.com> 2.3.17-2 Dan Walsh <dwalsh@redhat.com> 2.3.17-1 Dan Walsh <dwalsh@redhat.com> 2.3.16-9 Dan Walsh <dwalsh@redhat.com> 2.3.16-8 Dan Walsh <dwalsh@redhat.com> 2.3.16-7 Dan Walsh <dwalsh@redhat.com> 2.3.16-6 Dan Walsh <dwalsh@redhat.com> 2.3.16-5 Dan Walsh <dwalsh@redhat.com> 2.3.16-4 Dan Walsh <dwalsh@redhat.com> 2.3.16-2 Dan Walsh <dwalsh@redhat.com> 2.3.16-1 Dan Walsh <dwalsh@redhat.com> 2.3.15-2 Dan Walsh <dwalsh@redhat.com> 2.3.15-1 Dan Walsh <dwalsh@redhat.com> 2.3.14-8 Dan Walsh <dwalsh@redhat.com> 2.3.14-7 Dan Walsh <dwalsh@redhat.com> 2.3.14-6 Dan Walsh <dwalsh@redhat.com> 2.3.14-4 Dan Walsh <dwalsh@redhat.com> 2.3.14-3 Dan Walsh <dwalsh@redhat.com> 2.3.14-2 Dan Walsh <dwalsh@redhat.com> 2.� x��������������Y������� X � f5�yupst��������h� �� stri�$ 6 ���������������� �� �� �� � �@FiD�FA��F@f@F; @F �@F @Eّ@E�K@E��E�3@Eu_@El$�El$�Ej�@E[@E[@EG:�E#�@D�,@D��@D�b�D�b�D�(@DtJ�Dla�D_2�DX�@D;@C�@C�C�Q@Cˊ�Cǖ@C�
@C��C�f@C�q�C� @C��@C�7@C��@Cs6@CoA�CgX�C(�B�i�B{\@Bwg�Bl�B] �B] �B] �B[�@BZf�BQ,@BM7�BJ��BB��B�B �@A�@A��A��A�_�A�_�A�_�AJ�AJ�AJ�A@E�A
@Ag@Remi Collet <remi@remirepo.net> - 7.4.33-10 Remi Collet <remi@remirepo.net> - 7.4.33-9 Remi Collet <remi@remirepo.net> - 7.4.33-8 Remi Collet <remi@remirepo.net> - 7.4.33-7 Remi Collet <remi@remirepo.net> - 7.4.33-6 Remi Collet <remi@remirepo.net> - 7.4.33-5 Remi Collet <remi@remirepo.net> - 7.4.33-4 Remi Collet <remi@remirepo.net> - 7.4.33-2 Remi Collet <remi@remirepo.net> - 7.4.33-1 Remi Collet <remi@remirepo.net> - 7.4.32-2 Remi Collet <remi@remirepo.net> - 7.4.32-1 Remi Collet <remi@remirepo.net> - 7.4.30-1 Remi Collet <remi@remirepo.net> - 7.4.29-1 Remi Collet <remi@remirepo.net> - 7.4.28-2 Remi Collet <remi@remirepo.net> - 7.4.28-1 Remi Collet <remi@remirepo.net> - 7.4.27-1 Remi Collet <remi@remirepo.net> - 7.4.27~RC1-2 Remi Collet <remi@remirepo.net> - 7.4.27~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.26-1 Remi Collet <remi@remirepo.net> - 7.4.26~RC1-2 Remi Collet <remi@remirepo.net> - 7.4.26~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.25-2 Remi Collet <remi@remirepo.net> - 7.4.25-1 Remi Collet <remi@remirepo.net> - 7.4.25~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.24-1 Remi Collet <remi@remirepo.net> - 7.4.24~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.23-1 Remi Collet <remi@remirepo.net> - 7.4.23~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.22-1 Remi Collet <remi@remirepo.net> - 7.4.22~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.21-1 Remi Collet <remi@remirepo.net> - 7.4.21~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.20-1 Remi Collet <remi@remirepo.net> - 7.4.20~RC1-2 Remi Collet <remi@remirepo.net> - 7.4.20~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.19-1 Remi Collet <remi@remirepo.net> - 7.4.18-1 Remi Collet <remi@remirepo.net> - 7.4.18~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.17~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.16-1 Remi Collet <remi@remirepo.net> - 7.4.16~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.15-1 Remi Collet <remi@remirepo.net> - 7.4.15~RC2-2 Remi Collet <remi@remirepo.net> - 7.4.15~RC2-1 Remi Collet <remi@remirepo.net> - 7.4.14-1 Remi Collet <remi@remirepo.net> - 7.4.14~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.13-2 Remi Collet <remi@remirepo.net> - 7.4.13-1 Remi Collet <remi@remirepo.net> - 7.4.13~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.12-1 Remi Collet <remi@remirepo.net> - 7.4.12~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.11-1 Remi Collet <remi@remirepo.net> - 7.4.11~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.10-1 Remi Collet <remi@remirepo.net> - 7.4.10~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.9-1 Remi Collet <remi@remirepo.net> - 7.4.9~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.8-2 Remi Collet <remi@remirepo.net> - 7.4.8-1 Remi Collet <remi@remirepo.net> - 7.4.8~RC1-2 Remi Collet <remi@remirepo.net> - 7.4.8~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.7-1 Remi Collet <remi@remirepo.net> - 7.4.7~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.6-2 Remi Collet <remi@remirepo.net> - 7.4.6-1 Remi Collet <remi@remirepo.net> - 7.4.6~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.5-1 Remi Collet <remi@remirepo.net> - 7.4.5~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.4-1 Remi Collet <remi@remirepo.net> - 7.4.4~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.3-1 Remi Collet <remi@remirepo.net> - 7.4.3~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.2-2 Remi Collet <remi@remirepo.net> - 7.4.2-1 Remi Collet <remi@remirepo.net> - 7.4.2~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.1-1 Remi Collet <remi@remirepo.net> - 7.4.1~RC1-1 Remi Collet <remi@remirepo.net> - 7.4.0-1 Remi Collet <remi@remirepo.net> - 7.4.0~rc6-34 Remi Collet <remi@remirepo.net> - 7.4.0~rc5-33 Remi Collet <remi@remirepo.net> - 7.4.0~rc4-32 Remi Collet <remi@remirepo.net> - 7.4.0~rc4-31 Remi Collet <remi@remirepo.net> - 7.4.0~rc4-30 Remi Collet <remi@remirepo.net> - 7.4.0~rc4-29 Remi Collet <remi@remirepo.net> - 7.4.0~rc� x�������������pI������� X � at��ymp_s~ Hc used�$ ���������������� � - Stop newrole -l from working on non securetty
Resolves: #200110
- Fixes to run prelink in MLS machine
Resolves: #221233
- Allow spamassassin to read var_lib_t dir
Resolves: #219234 - fix mplayer to work under strict policy
- Allow iptables to use nscd
Resolves: #220794 - Add gconf policy and make it work with strict - Many fixes for strict policy and by extension mls. - Fix to allow ftp to bind to ports > 1024
Resolves: #219349 - Allow semanage to exec it self. Label genhomedircon as semanage_exec_t
Resolves: #219421
- Allow sysadm_lpr_t to manage other print spool jobs
Resolves: #220080 - allow automount to setgid
Resolves: #219999 - Allow cron to polyinstatiate
- Fix creation of boot flags
Resolves: #207433 - Fixes for irqbalance
Resolves: #219606 - Fix vixie-cron to work on mls
Resolves: #207433 Resolves: #218978 - Allow initrc to create files in /var directories
Resolves: #219227 - More fixes for MLS
Resolves: #181566 - More Fixes polyinstatiation
Resolves: #216184 - More Fixes polyinstatiation
- Fix handling of keyrings
Resolves: #216184 - Fix polyinstatiation
- Fix pcscd handling of terminal
Resolves: #218149
Resolves: #218350 - More fixes for quota
Resolves: #212957 - ncsd needs to use avahi sockets
Resolves: #217640
Resolves: #218014 - Allow login programs to polyinstatiate homedirs
Resolves: #216184
- Allow quotacheck to create database files
Resolves: #212957 - Dontaudit appending hal_var_lib files
Resolves: #217452
Resolves: #217571
Resolves: #217611
Resolves: #217640
Resolves: #217725 - Fix context for helix players file_context #216942 - Fix load_policy to be able to mls_write_down so it can talk to the terminal - Fixes for hwclock, clamav, ftp - Move to upstream version which accepted my patches - Fixes for nvidia driver - Allow semanage to signal mcstrans - Update to upstream - Allow modstorage to edit /etc/fstab file - Fix for qemu, /dev/ - Fix path to realplayer.bin - Allow xen to connect to xen port - Allow cups to search samba_etc_t directory
- Allow xend_t to list auto_mountpoints - Allow xen to search automount - Fix spec of jre files - Fix unconfined access to shadow file - Allow xend to create files in xen_image_t directories - Fixes for /var/lib/hal - Remove ability for sysadm_t to look at audit.log - Fix rpc_port_types
- Add aide policy for mls - Merge with upstream - Lots of fixes for ricci - Allow xen to read/write fixed devices with a boolean
- Allow apache to search /var/log - Fix policygentool specfile problem.
- Allow apache to send signals to it's logging helpers.
- Resolves: rhbz#212731 - Add perms for swat - Add perms for swat - Allow daemons to dump core files to / - Fixes for ricci - Allow mount.nfs to work - Allow ricci-modstorage to look at lvm_etc_t - Fixes for ricci using saslauthd - Allow mountpoint on home_dir_t and home_t - Update xen to read nfs files - Allow noxattrfs to associate with other noxattrfs - Allow hal to use power_device_t - Allow procemail to look at autofs_t
- Allow xen_image_t to work as a fixed device - Refupdate from upstream - Add lots of fixes for mls cups - Lots of fixes for ricci - Fix number of cats - Update to upstream - More iSCSI changes for #209854 - Test ISCSI fixes for #209854 - allow semodule to rmdir selinux_config_t dir - Fix boot_runtime_t problem on ppc. Should not be creating these files. - Fix context mounts on reboot
- Fix ccs creation of directory in /var/log - Update for tallylog - Allow xend to rewrite dhcp conf files
- Allow mgetty sys_admin capability - Make xentapctrl work - Don't transition unconfined_t to bootloader_t
- Fix label in /dev/xen/blktap - Patch for labeled networking - Fix crond handling for mls - Update to upstream - Remove bluetooth-helper transition
- Add selinux_validate for semanage
- Require new version of libsemanage - Fix prelink - Fix rhgb - Fix setrans handling on MLS and useradd - Support for fuse
- fix vigr - Fix dovecot, amanda
- Fix mls - Allow java execheap for itanium - Update with upstream - mls fixes - Update from upstream - More fixes for mls
- Revert change on automount � x��������������8������� X � .1=�y Luk���������������� edha�$ ���������������� �� �� �� � a3 - update to 7.3.0alpha2 new sources - update to 7.3.0alpha2
- bump php(zend-abi) and php(api) to 20180606
- revert 5dd1ef90caec3021e6ce55c8554e695edf641eaf - update to 7.3.0alpha1
- switch from pcre to pcre2 - update to 7.2.7RC1 - Update to 7.2.6 - http://www.php.net/releases/7_2_6.php - rebuild against EL 7.5 - update to 7.2.6RC1 - Update to 7.2.5 - http://www.php.net/releases/7_2_5.php - update to 7.2.5RC1 - add upstream patch for oniguruma 6.8.1, FTBFS #1562583 - Update to 7.2.4 - http://www.php.net/releases/7_2_4.php
- FPM: update default pool configuration for process.dumpable - add file trigger to restart the php-fpm service
when new pool or new extension installed (F27+) - update to 7.2.4RC1 - devel: drop dependency on devtoolset - Update to 7.2.3 - http://www.php.net/releases/7_2_3.php
- FPM: revert pid file removal
- improve devel dependencies - rebuild for new tag and drop patch merged upstream
- drop ldconfig scriptlets on F28 - update to 7.2.3RC1
- adapt systzdata, fixheader and ldap_r patches
- apply upstream patch for date ext - Update to 7.2.2 - http://www.php.net/releases/7_2_2.php - update to 7.2.2RC1
- define SOURCE_DATE_EPOCH for reproducible build - Update to 7.2.1 - http://www.php.net/releases/7_2_1.php - add upstream patch for https://bugs.php.net/75579 - update to 7.2.1RC1 - update to 7.2.0 GA - update to 7.2.0RC6 - update to 7.2.0RC5 - enable argon2 password hash - update to 7.2.0RC4
- oci8 version is now 2.1.8 - dont obsolete php72-php-pecl-libsodium - update to 7.2.0RC3 - RC3 test build
- F27: php now requires php-fpm and start it with httpd / nginx - update builder from RHEL 7.3 to RHEL 7.4 - update to 7.2.0RC2 - add patch for EL-6, fix undefined symbol: sqlite3_errstr - update to 7.2.0RC1 - test build from git snapshot
- refresh configuration files, sync with upstream, drop .so suffix - test build from git snapshot - test build from git snapshot
- adapt tzdata patch for timelib 2017.05beta7
- disable httpd MPM check - update to 7.2.0beta3 - add patch for EL-6, fix undefined symbol: sqlite3_errstr
- revert use of sqlite3_close_v2 on EL-6 - update to 7.2.0beta2
- oci8 version is now 2.1.7 - update to 7.2.0beta1
- oci8 version is now 2.1.6
- bump apiver and zendver to 20170718 - test build
- add sodium extension in new sub-package - update to 7.2.0alpha3 - update to 7.2.0alpha2
- oci8 version is now 2.1.5
- use oracle instant client version 12.2 - update to 7.2.0alpha1 - new snapshot
- use system oniguruma (F26) - new snapshot - test build for release process test, 7.2.0alpha0
- dba: add --with-lmdb build option - new snapshot - new snapshot, May the 4th be with you
- enable PHP execution of .phar files, see #1117140 - refresh - update to 7.2.0-dev
- drop mcrypt subpackage (removed upstream) - Update to 7.1.4 - http://www.php.net/releases/7_1_4.php - Update to 7.1.4RC1 - Update to 7.1.3 - http://www.php.net/releases/7_1_3.php - fix interbase build on F26 - Update to 7.1.3RC1 - Update to 7.1.2 - http://www.php.net/releases/7_1_2.php - Update to 7.1.2RC1 (new sources) - Update to 7.1.2RC1 - EL-7: add patch for https://bugs.php.net/73956
- switch back to gcc 6.2 - EL-7: rebuild using gcc 4.8 instead of 6.2
because of https://bugzilla.redhat.com/1414348 - Update to 7.1.1 - http://www.php.net/releases/7_1_1.php - Update to 7.1.1RC1 - test optimized build using GCC 6.2 - Update to 7.1.0 - http://www.php.net/releases/7_1_0.php
- use bundled pcre library 8.38 on EL-7
- disable pcre.jit everywhere as it raise AVC #1398474
- sync provided configuration with upstream production defaults - Update to 7.1.0RC6 - Update to 7.1.0RC5 - Update to 7.1.0RC4
- update tzdata patch to v14, improve check for valid tz file
- oci8 version is now 2.1.3 - rebuild - Update to 7.1.0RC3 - Update to 7.1.0RC2
- API version is now 20160303 - Update to 7.1.0RC1
- oci8 version is now 2.1.2 - Update to 7.1.0beta2 - Update to 7.1.0beta1 - Update to 7.1.0alpha3 - own tests/doc directories for pecl packages (f24) - Update to 7.1.0alpha2 (rebuild) - Update to 7.1.0alpha2 - Update to 7.1.0alpha1 - Update � x�������������`(������� X � ra��yndre�t @@�������� br> �$ O ���������������� �� �� �� � Add support for pcs which is a corosync and pacemaker configuration tool - Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t
- Add labeling for /usr/libexec/kde4/polkit-kde-authentication-agent-1
- Allow all domains that can domtrans to shutdown, to start the power services script to shutdown
- consolekit needs to be able to shut down system
- Move around interfaces
- Remove nfsd_rw_t and nfsd_ro_t, they don't do anything
- Add additional fixes for rabbitmq_beam to allow getattr on mountpoints
- Allow gconf-defaults-m to read /etc/passwd
- Fix pki_rw_tomcat_cert() interface to support lnk_files - Add support for gluster ports
- Make sure that all keys located in /etc/ssh/ are labeled correctly
- Make sure apcuspd lock files get created with the correct label
- Use getcap in gluster.te
- Fix gluster policy
- add additional fixes to allow beam.smp to interact with couchdb files
- Additional fix for #974149
- Allow gluster to user gluster ports
- Allow glusterd to transition to rpcd_t and add additional fixes for #980683
- Allow tgtd working when accessing to the passthrough device
- Fix labeling for mdadm unit files - Add mdadm fixes - Fix definition of sandbox.disabled to sandbox.pp.disabled - Allow mdamd to execute systemctl
- Allow mdadm to read /dev/kvm
- Allow ipsec_mgmt_t to read l2tpd pid content - Allow nsd_t to read /dev/urand
- Allow mdadm_t to read framebuffer
- Allow rabbitmq_beam_t to read process info on rabbitmq_epmd_t
- Allow mozilla_plugin_config_t to create tmp files
- Cleanup openvswitch policy
- Allow mozilla plugin to getattr on all executables
- Allow l2tpd_t to create fifo_files in /var/run
- Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory
- Allow mdadm to connecto its own unix_stream_socket
- FIXME: nagios changed locations to /log/nagios which is wrong. But we need to have this workaround for now.
- Allow apache to access smokeping pid files
- Allow rabbitmq_beam_t to getattr on all filesystems
- Add systemd support for iodined
- Allow nup_upsdrvctl_t to execute its entrypoint
- Allow fail2ban_client to write to fail2ban_var_run_t, Also allow it to use nsswitch
- add labeling for ~/.cache/libvirt-sandbox
- Add interface to allow domains transitioned to by confined users to send sigchld to screen program
- Allow sysadm_t to check the system status of files labeled etc_t, /etc/fstab
- Allow systemd_localed to start /usr/lib/systemd/system/systemd-vconsole-setup.service
- Allow an domain that has an entrypoint from a type to be allowed to execute the entrypoint without a transition, I can see no case where this is a bad thing, and elminiates a whole class of AVCs.
- Allow staff to getsched all domains, required to run htop
- Add port definition for redis port
- fix selinuxuser_use_ssh_chroot boolean - Add prosody policy written by Michael Scherer
- Allow nagios plugins to read /sys info
- ntpd needs to manage own log files
- Add support for HOME_DIR/.IBMERS
- Allow iptables commands to read firewalld config
- Allow consolekit_t to read utmp
- Fix filename transitions on .razor directory
- Add additional fixes to make DSPAM with LDA working
- Allow snort to read /etc/passwd
- Allow fail2ban to communicate with firewalld over dbus
- Dontaudit openshift_cgreoup_file_t read/write leaked dev
- Allow nfsd to use mountd port
- Call th proper interface
- Allow openvswitch to read sys and execute plymouth
- Allow tmpwatch to read /var/spool/cups/tmp
- Add support for /usr/libexec/telepathy-rakia
- Add systemd support for zoneminder
- Allow mysql to create files/directories under /var/log/mysql
- Allow zoneminder apache scripts to rw zoneminder tmpfs
- Allow httpd to manage zoneminder lib files
- Add zoneminder_run_sudo boolean to allow to start zoneminder
- Allow zoneminder to send mails
- gssproxy_t sock_file can be under /var/lib
- Allow web domains to connect to whois port.
- Allow sandbox_web_type to connect to the same ports as mozilla_plugin_t.
- We really need to add an interface to corenet to define what a web_client_domain is and
- the� x��������������������� X � <m��yl@re�t 8������eG Miro�$ u ���������������� eG dG fG � 26)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service relocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failu� x�������������P������� X � _a��ymoun���������!�������� RHEL�$ Z ���������������� �� �� G � tic.log
- Allow system_dbusd_t to stream connect to bluetooth, and use its socket
- Allow amavisd to execute fsav
- Allow tuned to use sys_admin and sys_nice capabilities
- Add php-fpm policy from Bryan
- Add labeling for aeolus-configserver-thinwrapper
- Allow thin domains to execute shell
- Fix gnome_role_gkeyringd() interface description
- Lot of interface fixes
- Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
- Allow OpenMPI job to use kerberos
- Make deltacloudd_t as nsswitch_domain
- Allow xend_t to run lsscsi
- Allow qemu-dm running as xend_t to create tun_socket
- Add labeling for /opt/brother/Printers(.*/)?inf
- Allow jockey-backend to read pyconfig-64.h labeled as usr_t
- Fix clamscan_can_scan_system boolean
- Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11 - initrc is calling exportfs which is not confined so it attempts to read nfsd_files
- Fixes for passenger running within openshift.
- Add labeling for all tomcat6 dirs
- Add support for tomcat6
- Allow cobblerd to read /etc/passwd
- Allow jockey to read sysfs and and execute binaries with bin_t
- Allow thum to use user terminals
- Allow cgclear to read cgconfig config files
- Fix bcf2g.fc
- Remove sysnet_dns_name_resolve() from policies where auth_use_nsswitch() is used for other domains
- Allow dbomatic to execute ruby
- abrt_watch_log should be abrt_domain
- Allow mozilla_plugin to connect to gatekeeper port - add ptrace_child access to process
- remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
- Allow boinc domains to manage boinc_lib_t lnk_files
- Add support for boinc-client.service unit file
- Add support for boinc.log
- Allow mozilla_plugin execmod on mozilla home files if allow_ex
- Allow dovecot_deliver_t to read dovecot_var_run_t
- Allow ldconfig and insmod to manage kdumpctl tmp files
- Move thin policy out from cloudform.pp and add a new thin poli
- pacemaker needs to communicate with corosync streams
- abrt is now started on demand by dbus
- Allow certmonger to talk directly to Dogtag servers
- Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
- Allow mozila_plugin to execute gstreamer home files
- Allow useradd to delete all file types stored in the users hom
- rhsmcertd reads the rpm database
- Add support for lightdm - Add tomcat policy
- Remove pyzor/razor policy
- rhsmcertd reads the rpm database
- Dontaudit thumb to setattr on xdm_tmp dir
- Allow wicd to execute ldconfig in the networkmanager_t domain
- Add /var/run/cherokee\.pid labeling
- Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
- Allow postfix-master to r/w pipes other postfix domains
- Allow snort to create netlink_socket
- Add kdumpctl policy
- Allow firstboot to create tmp_t files/directories
- /usr/bin/paster should not be labeled as piranha_exec_t
- remove initrc_domain from tomcat
- Allow ddclient to read /etc/passwd
- Allow useradd to delete all file types stored in the users homedir
- Allow ldconfig and insmod to manage kdumpctl tmp files
- Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
- Transition xauth files within firstboot_tmp_t
- Fix labeling of /run/media to match /media
- Label all lxdm.log as xserver_log_t
- Add port definition for mxi port
- Allow local_login_t to execute tmux - apcupsd needs to read /etc/passwd
- Sanlock allso sends sigkill
- Allow glance_registry to connect to the mysqld port
- Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
- Allow firefox plugins/flash to connect to port 1234
- Allow mozilla plugins to delete user_tmp_t files
- Add transition name rule for printers.conf.O
- Allow virt_lxc_t to read urand
- Allow systemd_loigind to list gstreamer_home_dirs
- Fix labeling for /usr/bin
- Fixes for cloudform services
* support FIPS
- Allow polipo to work as web caching
- Allow chfn to execute tmux - Add support for ecryptfs
* ecryptfs does not support xattr
* we need labeling for HOMEDIR
- Add policy for (u)mount.ecryptfs*
- Fix labeling of kerbero� x��������������������� X � m>��y.8-8������ dG edha�$ t ���������������� dG cG eG � php.net/releases/5_6_2.php - Update to PHP 5.6.1
http://php.net/releases/5_6_1.php
- use default system cipher list by Fedora policy
http://fedoraproject.org/wiki/Changes/CryptoPolicy
- add system php library to default include_path - enable libvpx on EL 6 (with libvpx 1.3.0)
- add php56-phpdbg command in base system - PHP 5.6.0 is GA
- add lsphp56 command in base system - initial spec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix memory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#8285� x�������������@������ X � ���y����������`� �����$ ���������������� � (Georg Richter, upstream #32282) - build shared objects as PIC (#154195) - fix PEAR installation and bundle PEAR DB-1.7.5 package - update to 5.0.4 (#153068)
- add .phps AddType to php.conf (#152973)
- better gcc4 fix for libxmlrpc - BuildRequire mysql-devel >= 4.1
- don't mark php.ini as noreplace to make upgrades work (#152171)
- fix subpackage descriptions (#152628)
- fix memset(,,0) in Zend (thanks to Dave Jones)
- fix various compiler warnings in Zend - package mysqli extension in php-mysql
- really enable pcntl (#142903)
- don't build with --enable-safe-mode (#148969)
- use "Instant Client" libraries for oci8 module (Kai Bolay, #149873) - fix build with GCC 4 - install the ext/gd headers (#145891)
- enable pcntl extension in /usr/bin/php (#142903)
- add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
- add BuildRequire for recent pcre-devel (#147448) - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
- enable xsl extension (#142174)
- package both the xsl and dom extensions in php-xml
- enable soap extension, shared (php-soap package) (#142901)
- add patches from upstream 5.0 branch:
* Zend_strtod.c compile fixes
* correct php_sprintf return value usage - update for db4-4.3 (Robert Scheck, #140167)
- build against mysql-devel
- run tests in %check - truncate changelog at 4.3.1-1
- merge from 4.3.x package:
- enable mime_magic extension and Require: file (#130276) - fix dom/sqlite enable/without confusion - fix phpize installation for lib64 platforms
- add fix for segfault in variable parsing introduced in 5.0.2 - update to 5.0.2 (#127980)
- build against mysqlclient10-devel
- use new RTLD_DEEPBIND to load extension modules
- drop explicit requirement for elfutils-devel
- use AddHandler in default conf.d/php.conf (#135664)
- "fix" round() fudging for recent gcc on x86
- disable sqlite pending audit of warnings and subpackage split - don't build dom extension into 2.0 SAPI - ExclusiveArch: x86 ppc x86_64 for the moment - fix default extension_dir and conf.d/php.conf - update to 5.0.1
- only build shared modules once
- put dom extension in php-dom subpackage again
- move extension modules into %{_libdir}/php/modules
- don't use --with-regex=system, it's ignored for the apache* SAPIs - Merge in some spec file changes from Jeff Stern (jastern@uci.edu) - bump to 5.0.0
- add patch to prevent clobbering struct re_registers from regex.h
- remove domxml references, replaced with dom now built-in
- fix php.ini to refer to php5 not php4 5.6.40-39.el8.remi 5.6.40-39.el8.remi 5.6.40-39.el8.remi 30-xmlrpc.ini xmlrpc.so /etc/opt/remi/php56/php.d/ /opt/remi/php56/root/usr/lib64/php/modules/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3864b3acb53f940a0f7d0ab52d1fa1c5c175d411, stripped https://forum.remirepo.net/ utf-8 e5884efdd91ab32b753d65228b4ce6d03dcdd8a81777f9b46105880f000a7944 ? ���p Dt�W}���Hǿe��_@��3 !k8��# ��+���UP�Y_sZd�)U
UP�Y_sZ��tp��B�$8�d_M��G^���柲 ��b<��{ȇ2�����(�W��L�=1����H���Z����U���W�� t��W�\��Ug�NYoׁ�� Bfd��.qk�_C"�fQs���OSs �k �%S�}��a� Fơ Ƶ����7�8MG��6�!�C�m���{v����� u�Ā��[�Cbb�䓬��BN$y�m��/��fP �g�l�{�%F�VXٹv�` o��#_(4����4�:��B���^ػ�d����}�� �;7N���1�D��}Fl�p���ѻ PW��?�F �@-Sad#͢��7�B�;Q� 쿽I��tg�f����
���:��\�4�� ~h
���f��B 2'��(:C>��w�4\;��^Q!:�\�ţ$��X���4�[�NF������݁�wNC"➒�9��C1��ҹ���LW�s�T0��� ���R��_5[ ��nM�=Ŷ�)Y�؞��i��ej����%���a)ﲋӘ�e5c36bd21faf22288cd4aff840a2dbfd225e3d051 9da582fd664a12f067aa4408bfa62eb3b6feaef600fa0216ba9b5db4b1fae395 es~1 ]P es~1� x��������������������� X � o �y its��������Hc � llow�$
���������������� � � � � 60490) - Apply upstream patch to fix trycompile output (bug #1260490) - pull in some upstream fixes (FindPkgConfig,boost-1.59) - Provides: bundled(kwsys) - Update to 3.3.1 - Update to 3.3.0 - Update to 3.3.0-rc3
- Fix cmake.attr to handle 32-bit libraries - Update to 3.3.0-rc2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 3.3.0-rc1 - Update to 3.2.3 - Update to 3.2.2 - Add an AppData file for the software center - cmake.prov: handle exceptions - cmake.prov: use /usr/bin/python (instead of /bin/python) - RFE: CMake automatic RPM provides (#1202899) - Update to 3.2.1 - Update to 3.2.0-rc2
- Drop C++11 ABI workaround, fixed in gcc
- Drop strict_aliasing patch fixed upstream long ago
- Drop FindLua52, FindLua should work now for 5.1-5.3 - Update to 3.2.0-rc1
- Drop ninja patch fixed upstream
- Upstream now ships icons, add icon-cache scriptlets - Update to 3.1.3 - Update to 3.1.2 - Update to 3.1.1
- Drop ruby patch applied upstream - Fix ruby 2.2.0 teeny (0) detection - Update to 3.1.0 final - Update to 3.1.0-rc2 - Update to 3.1.0-rc1 - fix FindJNI for ppc64le (#1141782) - Update to 3.0.2 - Update wxWidgets patches - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Update to 3.0.1 - optimize mimeinfo scriptlet - Update to 3.0.0 final - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Update to 3.0.0-rc6 - Update to 3.0.0-rc5
- Drop icon patch applied upstream - Update to 3.0.0-rc4 - Fix doc duplication - Rebase patches to prevent .orig files in Modules
- Add install check for .orig files - Update to 3.0.0-rc3
- Add patch to fix FindwxWidgets when cross-compiling for Windows (bug #1081207) - Add additional FindPythonLibs patch from upstream (bug #1072964) - Update to upstreams version of FindPythonLibs patch - Use symlinks for bash completions - Update to 3.0.0-rc1
- Update qtdeps patch to upstreamed version
- Install bash completions - Add upstream patch to find Boost MPI library (bug #756141) - Update to 2.8.12.2 - Fix FindFreetype for 2.5.1+ - Update to 2.8.12.1 - Remove UseQt4 automatic dependency adding - Autoload cmake-mode in emacs (bug #1017779) - Update to 2.8.12 final - Update to 2.8.12-rc4
- Drop upstreamed FindHD5 patch - Add patch to fix FindHDF5 - Update to 2.8.12-rc3 - Update to 2.8.12-rc2 - Add patch to fix FindPythonLibs issues (bug #876118)
- Split docs into separate -doc sub-package - Update to 2.8.12-rc1
- Drop ImageMagick patch - not needed - Use version-less docdir - Icon name in desktop file should be sans .png extension. - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
problems that GCC warns about. - Update to 2.8.11.2 release - Update to 2.8.11.1 release - Update to 2.8.11 release - add FindLua52.cmake - Update to 2.8.11-rc4 - Update to 2.8.11-rc3 - Drop -O3 from default release build type flags in cmake rpm macro (bug 875954) - Update to 2.8.11-rc2
- Rebase ImageMagick patch - respin cmake-2.8.11-rc1-IM_pkgconfig_hints.patch
- drop/omit backup files when applying patches - Patch FindImageMagick.cmake for newer ImageMagick versions - use %{_rpmconfigdir}/macros.d on f19+ - Update to 2.8.11-rc1
- Drop upstream ccmake and usrmove patches - Add patch from upstream to fix UsrMove handling (bug #917407)
- Drop %config from rpm macros
- Define FCFLAGS in cmake macro - Add patch to use ninja-build (bug #886184) - Update FindPostgreSQL patch to use PostgreSQL_LIBRARY (bug #903757) - Rebuilt for new libarchive - 2.8.10.2 - Update to 2.8.10.1 - Update to 2.8.10 final - Add patch to fix DEL key in ccmake (bug 869769) - Update to 2.8.10 RC 3
- Rebase FindRuby and FindPostgreSQL patches - Update to 2.8.9 final - Update to 2.8.9 RC 3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Update to 2.8.9 RC 2 - Update to 2.8.9 RC 1
- Drop pkgconfig patch - Add patch to fix FindPostgreSQL (bug 828467) - Add patch to fix FindRuby (bug 822796) - Incorrect license tag in spec file (#820334) - Comply with Emacs packaging guidlines (bug #818658) - Update to 2.8.8 final - adjust pkgconfig� x��������������������� X u ��y @�
�I�������� �$ r ���������������� �� �� �� � elf
- Call neutron interfaces instead of quantum
- Allow init to change targed role to make uncofined services (xrdp which now has own systemd unit file) working. We want them to have in unconfined_t
- Make sure directories in /run get created with the correct label
- Make sure /root/.pki gets created with the right label
- try to remove labeling for motion from zoneminder_exec_t to bin_t
- Allow inetd_t to execute shell scripts
- Allow cloud-init to read all domainstate
- Fix to use quantum port
- Add interface netowrkmanager_initrc_domtrans
- Fix boinc_execmem
- Allow t-mission-control to read gabble cache home
- Add labeling for ~/.cache/telepathy/avatars/gabble
- Allow memcache to read sysfs data
- Cleanup antivirus policy and add additional fixes
- Add boolean boinc_enable_execstack
- Add support for couchdb in rabbitmq policy
- Add interface couchdb_search_pid_dirs
- Allow firewalld to read NM state
- Allow systemd running as git_systemd to bind git port
- Fix mozilla_plugin_rw_tmpfs_files() - Split out rlogin ports from inetd
- Treat files labeld as usr_t like bin_t when it comes to transitions
- Allow staff_t to read login config
- Allow ipsec_t to read .google authenticator data
- Allow systemd running as git_systemd to bind git port
- Fix mozilla_plugin_rw_tmpfs_files()
- Call the correct interface - corenet_udp_bind_ktalkd_port()
- Allow all domains that can read gnome_config to read kde config
- Allow sandbox domain to read/write mozilla_plugin_tmpfs_t so pulseaudio will work
- Allow mdadm to getattr any file system
- Allow a confined domain to executes mozilla_exec_t via dbus
- Allow cupsd_lpd_t to bind to the printer port
- Dontaudit attempts to bind to ports < 1024 when nis is turned on
- Allow apache domain to connect to gssproxy socket
- Allow rlogind to bind to the rlogin_port
- Allow telnetd to bind to the telnetd_port
- Allow ktalkd to bind to the ktalkd_port
- Allow cvs to bind to the cvs_port - Cleanup related to init_domain()+inetd_domain fixes
- Use just init_domain instead of init_daemon_domain in inetd_core_service_domain
- svirt domains neeed to create kobject_uevint_sockets
- Lots of new access required for sosreport
- Allow tgtd_t to connect to isns ports
- Allow init_t to transition to all inetd domains:
- openct needs to be able to create netlink_object_uevent_sockets
- Dontaudit leaks into ldconfig_t
- Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls
- Move kernel_stream_connect into all Xwindow using users
- Dontaudit inherited lock files in ifconfig o dhcpc_t - Also sock_file trans rule is needed in lsm
- Fix labeling for fetchmail pid files/dirs
- Add additional fixes for abrt-upload-watch
- Fix polipo.te
- Fix transition rules in asterisk policy
- Add fowner capability to networkmanager policy
- Allow polipo to connect to tor ports
- Cleanup lsmd.if
- Cleanup openhpid policy
- Fix kdump_read_crash() interface
- Make more domains as init domain
- Fix cupsd.te
- Fix requires in rpm_rw_script_inherited_pipes
- Fix interfaces in lsm.if
- Allow munin service plugins to manage own tmpfs files/dirs
- Allow virtd_t also relabel unix stream sockets for virt_image_type
- Make ktalk as init domain
- Fix to define ktalkd_unit_file_t correctly
- Fix ktalk.fc
- Add systemd support for talk-server
- Allow glusterd to create sock_file in /run
- Allow xdm_t to delete gkeyringd_tmp_t files on logout
- Add fixes for hypervkvp policy
- Add logwatch_can_sendmail boolean
- Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
- Allow xdm_t to delete gkeyringd_tmp_t files on logout - Add selinux-policy-sandbox pkg 0
- Allow rhsmcertd to read init state
- Allow fsetid for pkcsslotd
- Fix labeling for /usr/lib/systemd/system/pkcsslotd.service
- Allow fetchmail to create own pid with correct labeling
- Fix rhcs_domain_template()
- Allow roles which can run mock to read mock lib files to view results
- Allow rpcbind to use nsswitch
- Fix lsm.if summary
- Fix collectd_t can read /etc/passwd file
- Label systemd unit files under dracut corr� x���������������������� X � ����yB �@���������������( A�_��$ 8 ���������������� ( ' ) � ept Host: fields set to the ServerName value (bug #497301).
- Specify that we want poppler's pdftops (not ghostscript) for the
pdftops wrapper when calling configure. - Applied patch to fix CVE-2009-0163 (bug #490596).
- Applied patch to fix CVE-2009-0164 (bug #490597). - Don't verify MD5 sum, file size, or mtime for several config files:
cupsd.conf, client.conf, classes.conf, printers.conf, snmp.conf,
subscriptions.conf, lpoptions (bug #486287). - If cups-polld gets EAI_AGAIN when looking up a hostname,
re-initialise the resolver (bug #490943). - Bumped cupsddk n-v-r for obsoletes/provides, as cupsddk was rebuilt. - Applied patch to fix ppd-natural-language attribute in PPD list
(STR #3124). - Handle https:// device URIs (bug #478677, STR #3122). - Updated to svn8404. - Added 'Should-Start: portreserve' to the initscript (part of bug #487250). - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Prevent cups-deviced missing devices (STR #3108).
- Actually drop the perl implementation of the dnssd backend and use
the avahi-aware one. - Beginnings of avahi support. The dnssd backend should now work, but
the scheduler will not yet advertise DNS-SD services.
- No longer require avahi-tools as the dnssd backend does not use the
command line tools any longer.
- Load MIME type rules correctly (bug #426089, STR #3059). - Fixed quotas (STR #3077, STR #3078). - Fixed default BrowseLocalProtocols (bug #481505). - 1.4b2.
- No longer need CVE-2008-5183 patch. - Start cupsd at priority 25: after avahi-daemon but before haldaemon
(bug #468709). - Applied patch to fix RSS subscription limiting (bug #473901,
CVE-2008-5183).
- Attempt to unbreak the fix for STR #2831 (bug #474742). - Own more directories (bug #473581). - 1.4b1.
- No longer need ext, includeifexists, foomatic-recommended,
getnameddest, str2101, str2536 patches.
- Require poppler-utils at runtime and for build. No longer need
pdftops.conf.
- Obsolete cupsddk. - Fixed LSPP labels (bug #468442). - Fixed textonly filter to send FF correctly. - 1.3.9, including fixes for CVE-2008-3639 (STR #2918, bug #464710),
CVE-2008-3640 (STR #2919, bug #464713) and CVE-2008-3641 (STR #2911,
bug #464716).
- No longer need str2892 or res_init patches. - Backported patch for FatalErrors configuration directive
(bug #314941, STR #2536). - Use php-cgi for executing PHP scripts (bug #460898). - The dnssd backend uses avahi-browse so require it (bug #458565).
- New php sub-package (bug #428235).
- cups-polld: reinit the resolver if we haven't yet resolved the
hostname (bug #354071). - Better password prompting behaviour (bug #215133, STR #2101). - Mark template files config(noreplace) for site-local modifications
(bug #441719). - Applied patch to fix STR #2892 (bug #453610). - 1.3.8. - Removed autoconf requirement by applying autoconf-generated changes
to patches that caused them. Affected patches: cups-lspp. - CVE-2008-1373 patch is no longer needed (applied upstream).
- Mark HTML files and templates config(noreplace) for site-local
modifications (bug #441719).
- The cups-devel package requires zlib-devel (bug #455192). - Fixed bug #447200 again. - Use portreserve. - Rebuilt for new gnutls. - Don't overwrite the upstream snmp.conf file. - Fixed bug #447200 again. - Backported cupsGetNamedDest from 1.4 (bug #428086). - Applied patch to fix STR #2750 (IPP authentication). - Better fix for cupsdTimeoutJob LSPP configuration suggested by
Matt Anderson (bug #447200). - Fix last fix (bug #447200). - If cupsdTimeoutJob is called when the originating connection is still
known, pass that to the function so that copy_banner can get at it if
necessary (bug #447200). - Applied patch to fix CVE-2008-1722 (integer overflow in image filter,
bug #441692, STR #2790). - Main package requires exactly-matching libs package. - 1.3.7. No longer need str2715, str2727, or CVE-2008-0047 patches. - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
- Applied patch to prevent heap-based buffer overflow in CUPS helper
� x������������� �������� X � sm�yd_vaX�����p�������� smce�$ ���������������� � �
� � hangeLog-5.8.6] - Updated with the 5.8.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.5] - Updated with the 5.8.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4] - Updated with the 5.8.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3] - Updated with the 5.8.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2] - Updated with the 5.8.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.1]
- CONFIG_USB4_NET=m and CONFIG_USB4=m
- [https://elrepo.org/bugs/view.php?id=1029] - Updated with the 5.8 source tarball.
- CONFIG_CC_VERSION_TEXT="gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5)",
- CONFIG_DEFAULT_INIT="", CONFIG_TASKS_RCU_GENERIC=y,
- CONFIG_TASKS_RUDE_RCU=y, CONFIG_HIBERNATION_SNAPSHOT_DEV=y,
- CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER=y,
- CONFIG_BLK_DEV_ZONED=y, CONFIG_XFRM_AH=m, CONFIG_XFRM_ESP=m,
- CONFIG_NET_ACT_GATE=m, CONFIG_MLX5_CLS_ACT=y, CONFIG_BCM54140_PHY=m,
- CONFIG_AT803X_PHY=m, CONFIG_MT7615_COMMON=m, CONFIG_MT7663U=m,
- CONFIG_MT7915E=m, CONFIG_RTW88_8822B=m, CONFIG_RTW88_8822C=m,
- CONFIG_RTW88_8723D=m, CONFIG_RTW88_8822BE=m, CONFIG_RTW88_8822CE=m,
- CONFIG_RTW88_8723DE=m, CONFIG_PINCTRL_JASPERLAKE=m,
- CONFIG_SENSORS_AXI_FAN_CONTROL=m, CONFIG_SENSORS_AMD_ENERGY=m,
- CONFIG_SENSORS_MAX16601=m, CONFIG_MFD_INTEL_PMC_BXT=m,
- CONFIG_MEDIA_SUPPORT_FILTER=y, CONFIG_MEDIA_CONTROLLER=y,
- CONFIG_DRM_I915_FENCE_TIMEOUT=10000,
- CONFIG_SND_USB_AUDIO_USE_MEDIA_CONTROLLER=y,
- CONFIG_SND_SOC_AMD_RENOIR=m, CONFIG_SND_SOC_AMD_RENOIR_MACH=m,
- CONFIG_SND_SOC_FSL_EASRC=m, CONFIG_SND_SOC_MAX98390=m,
- CONFIG_SND_SOC_ZL38060=m, CONFIG_INFINIBAND_RTRS=m,
- CONFIG_INFINIBAND_RTRS_CLIENT=m, CONFIG_INFINIBAND_RTRS_SERVER=m,
- CONFIG_VIRTIO_MEM=m, CONFIG_HUAWEI_WMI=m,
- CONFIG_INTEL_WMI_SBL_FW_UPDATE=m, CONFIG_INTEL_SCU_IPC=y,
- CONFIG_NILFS2_FS=m, CONFIG_F2FS_FS=m, CONFIG_F2FS_STAT_FS=y,
- CONFIG_F2FS_FS_XATTR=y, CONFIG_F2FS_FS_POSIX_ACL=y,
- CONFIG_F2FS_FS_SECURITY=y, CONFIG_F2FS_FS_COMPRESSION=y,
- CONFIG_F2FS_FS_LZO=y, CONFIG_F2FS_FS_LZ4=y, CONFIG_F2FS_FS_ZSTD=y,
- CONFIG_F2FS_FS_LZORLE=y, CONFIG_ZONEFS_FS=m, CONFIG_LINEAR_RANGES=y,
- CONFIG_ARCH_USE_SYM_ANNOTATIONS=y, CONFIG_LZ4_COMPRESS=y,
- CONFIG_ZSTD_COMPRESS=y, CONFIG_ZSTD_DECOMPRESS=y,
- CONFIG_DMA_COHERENT_POOL=y, CONFIG_DYNAMIC_DEBUG_CORE=y,
- CONFIG_ARCH_HAS_EARLY_DEBUG=y, CONFIG_ARCH_HAS_DEBUG_WX=y,
- CONFIG_ARCH_HAS_DEBUG_VM_PGTABLE=y,
- CONFIG_CC_HAS_WORKING_NOSANITIZE_ADDRESS=y, CONFIG_SYNTH_EVENTS=y and
- CONFIG_HAVE_ARCH_KCSAN=y - Updated with the 5.7.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.12] - Updated with the 5.7.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11] - Updated with the 5.7.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.10] - Updated with the 5.7.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.9]
- CONFIG_USBIP_CORE=m, CONFIG_USBIP_VHCI_HCD=m,
- CONFIG_USBIP_VHCI_HC_PORTS=8, CONFIG_USBIP_VHCI_NR_HCS=1 and
- CONFIG_USBIP_HOST=m
- [https://elrepo.org/bugs/view.php?id=1020] - Updated with the 5.7.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8] - Updated with the 5.7.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7]
- Added a triggerin scriptlet to rebuild the initramfs image
- when the system microcode package is updated.
- [https://elrepo.org/bugs/view.php?id=1013] - Updated with the 5.7.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.6] - Updated with the 5.7.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.5] - Updated with the 5.7.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.4] - Updated with the 5.7.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3] - Updated with the 5.7.2 source tarball.
- [https://www.kernel.org/pub/linux/k� x���������������������� X � m>�y.5-6�������p�������� edha�$ ���������������� � � � � www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.65] - Updated with the 5.15.64 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.64] - Updated with the 5.15.63 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.63] - Updated with the 5.15.62 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.62] - Updated with the 5.15.61 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.61] - Updated with the 5.15.60 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.60] - Updated with the 5.15.59 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.59] - Updated with the 5.15.58 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.58] - Updated with the 5.15.57 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.57] - Updated with the 5.15.56 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.56] - Updated with the 5.15.55 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.55] - Updated with the 5.15.54 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.54] - Updated with the 5.15.53 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.53] - Updated with the 5.15.52 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.52] - Updated with the 5.15.51 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.51] - Updated with the 5.15.50 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.50] - Updated with the 5.15.49 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.49] - Updated with the 5.15.48 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.48] - Updated with the 5.15.47 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.47] - Updated with the 5.15.46 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.46] - Updated with the 5.15.45 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.45] - Updated with the 5.15.44 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.44] - Updated with the 5.15.43 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.43] - Updated with the 5.15.42 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.42] - Updated with the 5.15.41 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.41] - Updated with the 5.15.40 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.40] - Updated with the 5.15.39 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.39] - Updated with the 5.15.38 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.38] - Updated with the 5.15.37 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.37] - Updated with the 5.15.36 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.36] - Updated with the 5.15.35 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.35] - Updated with the 5.15.34 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.34] - Updated with the 5.15.33 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.33] - Updated with the 5.15.32 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.32] - Updated with the 5.15.31 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.31] - Updated with the 5.15.30 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.30] - Updated with the 5.15.29 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.29] - Updated with the 5.15.28 source tarball.
- [https://� x������������� �������� X � re��yd fo���������� unus�$ ���������������� a �� ? �� � 8��1 � эh^ �L �� � x�������������xr������� X � ve>�ylicaМ������h� �� lo p�$
���������������� �� �� �� � to 7.0.7 - http://www.php.net/releases/7_0_7.php - Update to 7.0.7RC1
- oci8 version is now 2.1.1 - Update to 7.0.6 - http://www.php.net/releases/7_0_6.php
- rebuild for new sources - Update to 7.0.6
http://www.php.net/releases/7_0_6.php - Update to 7.0.6RC1 - Fixed bug #71914 (Reference is lost in "switch") - Update to 7.0.5
http://www.php.net/releases/7_0_5.php - Update to 7.0.5RC1 - adapt for F24: define %pecl_xmldir and own it - Update to 7.0.4
http://www.php.net/releases/7_0_4.php
- pcre: disables JIT compilation of patterns with system pcre < 8.38 - Update to 7.0.4RC1 - Update to 7.0.3
http://www.php.net/releases/7_0_3.php - test build - FPM: test build for https://bugs.php.net/62172 - Update to 7.0.3RC1 - Update to 7.0.2
http://www.php.net/releases/7_0_2.php - Update to 7.0.2RC1
- opcache: build with --disable-huge-code-pages on EL-6 - Update to 7.0.1
http://www.php.net/releases/7_0_1.php
- curl: add CURL_SSLVERSION_TLSv1_x constant (EL)
- fpm: switch to UDS on Fedora >= 21 - Update to 7.0.1RC1
- drop --disable-huge-code-pages build option on EL-6,
but keep it disabled in default configuration - build with --disable-huge-code-pages on EL-6 - Update to 7.0.0
http://www.php.net/releases/7_0_0.php - set opcache.huge_code_pages=0 on EL-6
see https://bugs.php.net/70973 and https://bugs.php.net/70977 - Update to 7.0.0RC8
- set opcache.huge_code_pages=1 on x86_64 - Update to 7.0.0RC7 (retagged) - Update to 7.0.0RC7 - Update to 7.0.0RC6 - php-config: reports all built sapis - rebuild as retagged - Update to 7.0.0RC5
- update php-fpm.d/www.conf comments
- API and Zend API are now set to 20151012 - Update to 7.0.0RC4
- php-fpm: set http authorization headers - F23 rebuild with rh_layout - Update to 7.0.0RC3
- disable zip extension (provided in php-pecl-zip) - Update to 7.0.0RC2
- enable oci8 and pdo_oci extensions
- sync php.ini with upstream php.ini-production - Update to 7.0.0RC1 - Update to 7.0.0beta3 - Update to 7.0.0beta2
- switch from libvpx to libwebp (only for bundled libgd, not used) - Update to 7.0.0beta1
- use upstream tarball instead of git snapshot - Update to 7.0.0alpha2
- use new layout (/etc/opt, /var/opt) - new snapshot - new snapshot
- the phar link is now correctly created - Update to 7.0.0alpha1 - new snapshot - new snapshot
- t1lib support have been removed - new snapshot - new snapshot - new snapshot - add experimental file based opcode cache (disabled by default) - new snapshot - new snapshot
- adapt system tzdata patch for upstream change for new zic - new snapshot - new snapshot - new snapshot - rename 10-php70-php.conf to 15-php70-php.conf to
ensure load order (after 10-rh-php56-php.conf) - rebuild - fix mod_php configuration
- disable static json
- sync php.ini with upstream php.ini-production - update for php 7.0.0
- ereg, mssql, mysql and sybase_ct extensions are removed
- add pdo-dblib subpackage (instead of php-mssql)
- disable oci8 extension, not yet adapted for 7.0
- add php-zip subpackage
- add php-json subpackage - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.php.net/releases/5_6_4.php
- add sybase_ct extension (in mssql sub-package)
- xmlrpc requires xml - Update to 5.6.4
http://www.php.net/releases/5_6_4.php - update to 5.6.4RC1 - add embedded sub package
- filter all libraries to avoid provides - FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools - Update to PHP 5.6.3
http://php.net/releases/5_6_3.php - update to 5.6.3RC1
- new version of systzdata patch, fix case sens� x��������������a������� X � in�y AllP� ������ csid�$ � ���������������� X � support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for net-snmp soname bump - build json and zip shared, in -common (Remi Collet, #215966)
- obsolete php-json and php-pecl-zip
- build readline extension into /usr/bin/php* (#210585)
- change module subpackages to require php-common not php (#177821) - provide php-zend-abi (#212804)
- add /etc/rpm/macros.php exporting interface versions
- synch with upstream recommended php.ini - update to 5.2.0 (#213837)
- php-xml provides php-domxml (#215656)
- fix php-pdo-abi provide (#214281) - rebuild for curl soname bump
- add build fix for curl 7.16 API - from upstream: add safety checks against integer overflow in _ecalloc - update to 5.1.6 (security fixes)
- bump default memory_limit to 16M (#196802) - rebuild - Provide php-posix (#194583)
- only provide php-pcntl from -cli subpackage
- add missing defattr's (thanks to Matthias Saou) - move Obsoletes for php-openssl to -common (#194501)
- Provide: php-cgi from -cli subpackage - split out php-cli, php-common subpackages (#177821)
- add php-pdo-abi version export (#193202) - rebuilt for new libnetsnmp - provide mod_php (#187891)
- provide php-cli (#192196)
- use correct LDAP fix (#181518)
- define _GNU_SOURCE in php_config.h and leave it defined
- drop (circular) dependency on php-pear - update to 5.1.4 - update to 5.1.3 - provide php-api (#183227)
- add provides for all builtin modules (Tim Jackson, #173804)
- own %{_libdir}/php/pear for PEAR packages (per #176733)
- add obsoletes to allow upgrade from FE4 PDO packages (#181863) - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - rebuild for new libc-client soname - only build xmlreader and xmlwriter shared (#177810) - update to 5.1.2 - rebuild again - rebuild for new net-snmp - enable short_open_tag in default php.ini again (#175381) - rebuilt - require net-snmp for php-snmp (#174800) - add /usr/share/pear back to hard-coded include_path (#174885) - rebuild for httpd 2.2 - update to 5.1.1
- remove pear subpackage
- enable pdo extensions (php-pdo subpackage)
- remove non-standard conditional module builds
- enable xmlreader extension - rebuilt against new openssl - pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528) - rebuild for new libnetsnmp - update to 5.0.5
- add fix for upstream #34435
- devel: require autoconf, automake (#159283)
- pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
- fix imagettftext et al (upstream, #161001) - ldap: restore ldap_start_tls() function - disable RPATHs in shared extensions (#156974) - build simplexml_import_dom even with shared dom (#156434)
- prevent truncation of copied files to ~2Mb (#155916)
- install /usr/bin/php from CLI build alongside CGI
- enable sysvmsg extension (#142988) - prevent build of builtin dba as well as shared extension - split out dba and bcmath extensions into subpackages
- BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
- pear: update to DB-1.7.6
- enable FastCGI support in /usr/bin/php-cgi (#149596) - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
built with the CGI SAPI (thanks to Edward Rudd, #137704)
- add php(1) man page for CLI
- fix more test cases to use -n when invoking php - rebuild for new libpq soname - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
- snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
- mysqli: add fix for crash on x86_64� x�������������hQ������� X � - S�yfix 0��������\�������a op (�$ ���������������� �a �a �a � ses/7_0_31.php - Update to 7.0.30 - http://www.php.net/releases/7_0_30.php - Update to 7.0.29 - http://www.php.net/releases/7_0_29.php
- FPM: update default pool configuration for process.dumpable - add file trigger to restart the php-fpm service
when new pool or new extension installed (F27+) - Update to 7.0.28 - http://www.php.net/releases/7_0_28.php
- FPM: revert pid file removal
- improve devel dependencies - Update to 7.0.27 - http://www.php.net/releases/7_0_27.php - Update to 7.0.27RC1 - Update to 7.0.26 - http://www.php.net/releases/7_0_26.php - Update to 7.0.26RC1 - Update to 7.0.25 - http://www.php.net/releases/7_0_25.php - Update to 7.0.25RC1
- oci8 version is now 2.1.8 - Update to 7.0.24 - http://www.php.net/releases/7_0_24.php - F27: php now requires php-fpm and start it with httpd / nginx - update builder from RHEL 7.3 to RHEL 7.4 - Update to 7.0.24RC1 - add patch for EL-6, fix undefined symbol: sqlite3_errstr - Update to 7.0.23 - http://www.php.net/releases/7_0_23.php - disable httpd MPM check - Update to 7.0.23RC1
- oci8 version is now 2.1.7 - add patch for EL-6, fix undefined symbol: sqlite3_errstr - Update to 7.0.22 - http://www.php.net/releases/7_0_22.php - Update to 7.0.22RC1
- oci8 version is now 2.1.6 - Update to 7.0.21 - http://www.php.net/releases/7_0_21.php - Update to 7.0.21RC1
- oci8 version is now 2.1.5
- use oracle instant client version 12.2 - Update to 7.0.20 - http://www.php.net/releases/7_0_20.php
- add upstream security patches for oniguruma - Update to 7.0.20RC1 - Update to 7.0.19 - http://www.php.net/releases/7_0_19.php - new sources from new tag - Update to 7.0.19RC1
- oci8 version is now 2.1.4 - Update to 7.0.18 - http://www.php.net/releases/7_0_18.php - Update to 7.0.18RC1 - Update to 7.0.17 - http://www.php.net/releases/7_0_17.php - add patch for firebird configuration
- add patch for OpenSSL 1.1 on F26 - Update to 7.0.17RC1 - Update to 7.0.16 - http://www.php.net/releases/7_0_16.php - Update to 7.0.16RC1 (new sources) - Update to 7.0.16RC1 - Update to 7.0.15 - http://www.php.net/releases/7_0_15.php - Update to 7.0.15RC1 - Update to 7.0.14 - http://www.php.net/releases/7_0_14.php
- disable pcre.jit everywhere as it raise AVC #1398474 - Update to 7.0.14RC1 - Update to 7.0.13 - http://www.php.net/releases/7_0_13.php - Update to 7.0.13RC1
- oci8 version is now 2.1.3
- update tzdata patch to v14, improve check for valid tz file - Update to 7.0.12 - http://www.php.net/releases/7_0_12.php
- rebuild with new sources - Update to 7.0.12 - http://www.php.net/releases/7_0_12.php - Update to 7.0.12RC1 - Update to 7.0.11 - http://www.php.net/releases/7_0_11.php - Update to 7.0.11RC1 - Update to 7.0.10 - http://www.php.net/releases/7_0_10.php - rebuild with new sources - Update to 7.0.10RC1
- relax 2 date tests (failing on EL with system tzdata) - Update to 7.0.9 - http://www.php.net/releases/7_0_9.php
- wddx: add upstream patch for https://bugs.php.net/72564 - Update to 7.0.9RC1 - own tests/doc directories for pecl packages (f24) - Update to 7.0.8 - http://www.php.net/releases/7_0_8.php - Update to 7.0.8RC1
- opcache version is now php version - Update to 7.0.7 - http://www.php.net/releases/7_0_7.php - Update to 7.0.7RC1
- oci8 version is now 2.1.1 - Update to 7.0.6 - http://www.php.net/releases/7_0_6.php
- rebuild for new sources - Update to 7.0.6
http://www.php.net/releases/7_0_6.php - Update to 7.0.6RC1 - Fixed bug #71914 (Reference is lost in "switch") - Update to 7.0.5
http://www.php.net/releases/7_0_5.php - Update to 7.0.5RC1 - adapt for F24: define %pecl_xmldir and own it - Update to 7.0.4
http://www.php.net/releases/7_0_4.php
- pcre: disables JIT compilation of patterns with system pcre < 8.38 - Update to 7.0.4RC1 - Update to 7.0.3
http://www.php.net/releases/7_0_3.php - test build - FPM: test build for https://bugs.php.net/62172 - Update to 7.0.3RC1 - Update to 7.0.2
http://www.php.net/releases/7_0_2.php - Update to 7.0.2RC1
- opcache: build with --disable-huge-code-pages on EL-6 - Update to 7.0.1
http://www.php.net/releases/7_0_1.php
- curl: add � x��������������@������� X � ngv�yport����������������� g di�$ ���������������� � K& � � Allow abrt_t domain to write to usr_t files
- Allow cockpit to create motd file in /var/run/cockpit
- Label /usr/sbin/pcsd as cluster_exec_t
- Allow pesign_t domain to getattr all fs
- Allow tomcat servers to manage usr_t files
- Dontaudit tomcat serves to append to /dev/random device
- Allow dirsrvadmin_script_t domain to read httpd tmp files
- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
- Revert "Allow firewalld_t domain to read random device"
- Allow postfix domains to mmap system db files
- Allow geoclue_t domain to execute own tmp files
- Allow virt_qemu_ga_t domain to read network state BZ(1592145)
- Update ibacm_read_pid_files interface to allow also reading link files
- Allow zebra_t domain to create packet_sockets
- Allow opafm_t domain to list sysfs
- Label /usr/libexec/cyrus-imapd/cyrus-master as cyris_exec_t
- Add boolean: domain_can_mmap_files.
- Allow sshd_t domain to read cockpit pid files
- Allow syslogd_t domain to manage cert_t files
- Allow getattr as part of files_mounton_kernel_symbol_table.
- Fix typo "aduit" -> "audit"
- Revert "Add new interface dev_map_userio()"
- Add new interface dev_map_userio()
- Allow systemd to read ibacm pid files
Resolves: rhbz#1615318
Resolves: rhbz#1619001
Resolves: rhbz#1627646 - Merge remote-tracking branch 'fedora-contrib/f28' into rhel8.0-contrib
- Tomcat should not be unconfined domain
- Update ibacm_read_pid_files interface to allow also reading link files
- Allow zebra_t domain to create packet_sockets
- Allow opafm_t domain to list sysfs
- Label /usr/libexec/cyrus-imapd/cyrus-master as cyris_exec_t
- Allow tomcat Tomcat to delete a temporary file used when compiling class files for JSPs.
- Allow chronyd_t domain to read virt_var_lib_t files
- Allow tomcat services create link file in /tmp
- Label /etc/shorewall6 as shorewall_etc_t
- Allow winbind_t domain kill in user namespaces
- Allow firewalld_t domain to read random device
- Allow abrt_t domain to do execmem
- Allow geoclue_t domain to execute own var_lib_t files
- Allow openfortivpn_t domain to read system network state
- Allow dnsmasq_t domain to read networkmanager lib files
- sssd: Allow to limit capabilities using libcap
- sssd: Remove unnecessary capability
- sssd: Do not audit usage of lib nss_systemd.so
- Fix bug in nsd.fc, /var/run/nsd.ctl is socket file not file
- Add correct namespace_init_exec_t context to /etc/security/namespace.d/*
- Update nscd_socket_use to allow caller domain to mmap nscd_var_run_t files
- Allow exim_t domain to mmap bin files
- Allow mysqld_t domain to executed with nnp transition
- Allow svirt_t domain to mmap svirt_image_t block files
- Add caps dac_read_search and dav_override to pesign_t domain
- Allow iscsid_t domain to mmap userio chr files
- Merge remote-tracking branch 'fedora-base/f28' into rhel8.0-base
- Revert "Add new interface dev_map_userio()"
- Add new interface dev_map_userio()
- Allow systemd to read ibacm pid files
- Allow systemd to create symlinks in for /var/lib
- Add comment to show that template call also allows changing shells
- Document userdom_change_password_template() behaviour
- Merge remote-tracking branch 'fedora-base/f28' into rhel8.0-base
- update files_mounton_kernel_symbol_table() interface to allow caller domain also mounton system_map_t file
- Fix typo in logging SELinux module
- Allow usertype to mmap user_tmp_type files
- In domain_transition_pattern there is no permission allowing caller domain to execu_no_trans on entrypoint, this patch fixing this issue
- Revert "Add execute_no_trans permission to mmap_exec_file_perms pattern"
- Add boolean: domain_can_mmap_files.
- Allow ipsec_t domian to mmap own tmp files
- Add .gitignore file
- Add execute_no_trans permission to mmap_exec_file_perms pattern
- Allow sudodomain to search caller domain proc info
- Allow audisp_remote_t domain to read auditd_etc_t
- netlabel: Remove unnecessary sssd nsswitch related macros
- Allow to use sss module in auth_use_nsswitch
- Limit communication with init_t over dbus
- Add actual modul� x�������������X0������� X � m>��y0.0-���������G�������� <mgr�$ L ���������������� �� �� �� � ked file descriptor writes from firewalld
- Allow xserver to read /dev/urandom
- Add additional fixes for ipsec-mgmt
- Make SSHing into an Openshift Enterprise Node working - Add transition rules to unconfined domains and to sysadm_t to create /etc/adjtime
- with the proper label.
- Update files_filetrans_named_content() interface to get right labeling for pam.d conf files
- Allow systemd-timedated to create adjtime
- Add clock_create_adjtime()
- Additional fix ifconfing for #966106
- Allow kernel_t to create boot.log with correct labeling
- Remove unconfined_mplayer for which we don't have rules
- Rename interfaces
- Add userdom_manage_user_home_files/dirs interfaces
- Fix files_dontaudit_read_all_non_security_files
- Fix ipsec_manage_key_file()
- Fix ipsec_filetrans_key_file()
- Label /usr/bin/razor-lightdm-greeter as xdm_exec_t instead of spamc_exec_t
- Fix labeling for ipse.secrets
- Add interfaces for ipsec and labeling for ipsec.info and ipsec_setup.pid
- Add files_dontaudit_read_all_non_security_files() interface
- /var/log/syslog-ng should be labeled var_log_t
- Make ifconfig_var_run_t a mountpoint
- Add transition from ifconfig to dnsmasq
- Allow ifconfig to execute bin_t/shell_exec_t
- We want to have hwdb.bin labeled as etc_t
- update logging_filetrans_named_content() interface
- Allow systemd_timedate_t to manage /etc/adjtime
- Allow NM to send signals to l2tpd
- Update antivirus_can_scan_system boolean
- Allow devicekit_disk_t to sys_config_tty
- Run abrt-harvest programs as abrt_t, and allow abrt_t to list all filesystem directories
- Make printing from vmware working
- Allow php-cgi from php54 collection to access /var/lib/net-snmp/mib_indexes
- Add virt_qemu_ga_data_t for qemu-ga
- Make chrome and mozilla able to connect to same ports, add jboss_management_port_t to both
- Fix typo in virt.te
- Add virt_qemu_ga_unconfined_t for hook scripts
- Make sure NetworkManager files get created with the correct label
- Add mozilla_plugin_use_gps boolean
- Fix cyrus to have support for net-snmp
- Additional fixes for dnsmasq and quantum for #966106
- Add plymouthd_create_log()
- remove httpd_use_oddjob for which we don't have rules
- Add missing rules for httpd_can_network_connect_cobbler
- Add missing cluster_use_execmem boolean
- Call userdom_manage_all_user_home_type_files/dirs
- Additional fix for ftp_home_dir
- Fix ftp_home_dir boolean
- Allow squit to recv/send client squid packet
- Fix nut.te to have nut_domain attribute
- Add support for ejabberd; TODO: revisit jabberd and rabbit policy
- Fix amanda policy
- Add more fixes for domains which use libusb
- Make domains which use libusb working correctly
- Allow l2tpd to create ipsec key files with correct labeling and manage them
- Fix cobbler_manage_lib_files/cobbler_read_lib_files to cover also lnk files
- Allow rabbitmq-beam to bind generic node
- Allow l2tpd to read ipse-mgmt pid files
- more fixes for l2tpd, NM and pppd from #967072 - Dontaudit to getattr on dirs for dovecot-deliver
- Allow raiudusd server connect to postgresql socket
- Add kerberos support for radiusd
- Allow saslauthd to connect to ldap port
- Allow postfix to manage postfix_private_t files
- Add chronyd support for #965457
- Fix labeling for HOME_DIR/\.icedtea
- CHange squid and snmpd to be allowed also write own logs
- Fix labeling for /usr/libexec/qemu-ga
- Allow virtd_t to use virt_lock_t
- Allow also sealert to read the policy from the kernel
- qemu-ga needs to execute scripts in /usr/libexec/qemu-ga and to use /tmp content
- Dontaudit listing of users homedir by sendmail Seems like a leak
- Allow passenger to transition to puppet master
- Allow apache to connect to mythtv
- Add definition for mythtv ports - Add additional fixes for #948073 bug
- Allow sge_execd_t to also connect to sge ports
- Allow openshift_cron_t to manage openshift_var_lib_t sym links
- Allow openshift_cron_t to manage openshift_var_lib_t sym links
- Allow sge_execd to bind sge ports. Allow kill capability and reads cgroup files
- Remove pulseaudio filetrans pulseaudio_manage_home_dirs� x�������������� ������� X � ro.�ydisah������xB������ buil�$ � ���������������� � t.com> - 2.28-22 Florian Weimer <fweimer@redhat.com> - 2.28-21 Florian Weimer <fweimer@redhat.com> - 2.28-20 Mike FABIAN <mfabian@redhat.com> - 2.28-19 Florian Weimer <fweimer@redhat.com> - 2.28-18 Florian Weimer <fweimer@redhat.com> - 2.28-17 Florian Weimer <fweimer@redhat.com> - 2.28-16 Florian Weimer <fweimer@redhat.com> - 2.28-15 Florian Weimer <fweimer@redhat.com> - 2.28-14 Carlos O'Donell <carlos@redhat.com> - 2.28-13 Florian Weimer <fweimer@redhat.com> - 2.28-12 Florian Weimer <fweimer@redhat.com> - 2.28-11 Florian Weimer <fweimer@redhat.com> - 2.28-10 Florian Weimer <fweimer@redhat.com> - 2.28-9 Florian Weimer <fweimer@redhat.com> - 2.28-8 Florian Weimer <fweimer@redhat.com> - 2.28-7 Florian Weimer <fweimer@redhat.com> - 2.28-6 Carlos O'Donell <carlos@redhat.com> - 2.28-5 Florian Weimer <fweimer@redhat.com> - 2.28-4 Florian Weimer <fweimer@redhat.com> - 2.28-3 Florian Weimer <fweimer@redhat.com> - 2.28-2 Florian Weimer <fweimer@redhat.com> - 2.27.9000-43 Florian Weimer <fweimer@redhat.com> - 2.27.9000-42 Florian Weimer <fweimer@redhat.com> - 2.27.9000-41 Carlos O'Donell <carlos@redhat.com> - 2.27.9000-40 Florian Weimer <fweimer@redhat.com> - 2.27.9000-39 Florian Weimer <fweimer@redhat.com> - 2.27.9000-38 Florian Weimer <fweimer@redhat.com> - 2.27.9000-37 Florian Weimer <fweimer@redhat.com> - 2.27.9000-36 Florian Weimer <fweimer@redhat.com> - 2.27.9000-35 Florian Weimer <fweimer@redhat.com> - 2.27.9000-34 Florian Weimer <fweimer@redhat.com> - 2.27.9000-33 Florian Weimer <fweimer@redhat.com> - 2.27.9000-32 Florian Weimer <fweimer@redhat.com> - 2.27.9000-31 Florian Weimer <fweimer@redhat.com> - 2.27.9000-30 Florian Weimer <fweimer@redhat.com> - 2.27.9000-29 Florian Weimer <fweimer@redhat.com> - 2.27.9000-28 Florian Weimer <fweimer@redhat.com> - 2.27.9000-27 Florian Weimer <fweimer@redhat.com> - 2.27.9000-26 Florian Weimer <fweimer@redhat.com> - 2.27.9000-25 Florian Weimer <fweimer@redhat.com> - 2.27.9000-24 Florian Weimer <fweimer@redhat.com> - 2.27.9000-23 Florian Weimer <fweimer@redhat.com> - 2.27.9000-22 Florian Weimer <fweimer@redhat.com> - 2.27.9000-21 Florian Weimer <fweimer@redhat.com> - 2.27.9000-20 Florian Weimer <fweimer@redhat.com> - 2.27.9000-19 Florian Weimer <fweimer@redhat.com> - 2.27.9000-18 Florian Weimer <fweimer@redhat.com> - 2.27.9000-17 Florian Weimer <fweimer@redhat.com> - 2.27.9000-16 Florian Weimer <fweimer@redhat.com> - 2.27.9000-15 Florian Weimer <fweimer@redhat.com> - 2.27.9000-14 Florian Weimer <fweimer@redhat.com> - 2.27.9000-13 Florian Weimer <fweimer@redhat.com> - 2.27.9000-12 Florian Weimer <fweimer@redhat.com> - 2.27.9000-11 Florian Weimer <fweimer@redhat.com> - 2.27.9000-10 Florian Weimer <fweimer@redhat.com> - 2.27.9000-9 Florian Weimer <fweimer@redhat.com> - 2.27.9000-8 Florian Weimer <fweimer@redhat.com> - 2.27.9000-7 Florian Weimer <fweimer@redhat.com> - 2.27.9000-6 Florian Weimer <fweimer@redhat.com> - 2.27-5 Richard W.M. Jones <rjones@redhat.com> - 2.27-4 Florian Weimer <fweimer@redhat.com> - 2.27-3 Florian Weimer <fweimer@redhat.com> - 2.27-2.1 Fedora Release Engineering <releng@fedoraproject.org> Carlos O'Donell <carlos@redhat.com> - 2.27-1 Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52 Florian Weimer <fweimer@redhat.com> - 2.26.9000-51 Florian Weimer <fweimer@redhat.com> - 2.26.9000-50 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.26.9000-49 Florian Weimer <fweimer@redhat.com> - 2.26.9000-48 Florian Weimer <fweimer@redhat.com> - 2.26.9000-47 Björn Esser <besser82@fedoraproject.org> - 2.26.9000-46 Florian Weimer <fweimer@redhat.com> - 2.26.9000-45 Florian Weimer <fweimer@redhat.com> - 2.26.9000-44 Florian Weimer <fweimer@redhat.com> - 2.26.9000-43 Florian Weimer <fweimer@redhat.com> - 2.26.9000-42 Florian Weimer <fweimer@redhat.com> - 2.26.9000-41 Florian Weimer <fweimer@redhat.com> - 2.26.9000-40 Florian Weimer <fweimer@redhat.com> - 2.26.9000-39 Florian Weimer <fweimer@redhat.com> - 2.26.9000-38 Florian Weimer <fweimer@redhat.com> - 2.26.9000-37 Florian Weimer <fweimer@redhat.com> - 2.26.9000-36 Florian Weimer <fweimer@redhat.com> -� x�������������H������� X � w�y � ������� � �$ ���������������� � ugh@redhat.com> 1:1.5.0-8 Tim Waugh <twaugh@redhat.com> 1:1.5.0-7 Tim Waugh <twaugh@redhat.com> 1:1.5.0-6 Tim Waugh <twaugh@redhat.com> 1:1.5.0-5 Tim Waugh <twaugh@redhat.com> 1:1.5.0-4 Tim Waugh <twaugh@redhat.com> 1:1.5.0-3 Tim Waugh <twaugh@redhat.com> 1:1.5.0-2 Jiri Popelka <jpopelka@redhat.com> 1:1.5.0-1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.16.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.15.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.14.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.13.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.12.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.11.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.10.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.9.rc1 Tim Waugh <twaugh@redhat.com> 1:1.5-0.8.rc1 Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.7.rc1 Richard Hughes <rhughes@redhat.com> 1:1.5-0.6.b2 Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.5.b2 Richard Hughes <rhughes@redhat.com> 1:1.5-0.4.b2 Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.3.b2 Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.2.b2 Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.1.b1 Tim Waugh <twaugh@redhat.com> 1:1.4.6-17 Richard Hughes <rhughes@redhat.com> 1:1.4.6-16 Jiri Popelka <jpopelka@redhat.com> 1:1.4.6-15 Tim Waugh <twaugh@redhat.com> 1:1.4.6-14 Richard Hughes <rhughes@redhat.com> 1:1.4.6-13 Tim Waugh <twaugh@redhat.com> 1:1.4.6-12 Tim Waugh <twaugh@redhat.com> 1:1.4.6-11 Jiri Popelka <jpopelka@redhat.com> 1:1.4.6-10 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.4.6-9 Jiri Popelka <jpopelka@redhat.com> 1:1.4.6-8 Tim Waugh <twaugh@redhat.com> 1:1.4.6-7 Tim Waugh <twaugh@redhat.com> 1:1.4.6-6 Tim Waugh <twaugh@redhat.com> 1:1.4.6-5 Tim Waugh <twaugh@redhat.com> 1:1.4.6-4 Tim Waugh <twaugh@redhat.com> 1:1.4.6-3 Tim Waugh <twaugh@redhat.com> 1:1.4.6-2 Jiri Popelka <jpopelka@redhat.com> 1:1.4.6-1 Tim Waugh <twaugh@redhat.com> 1:1.4.5-10 Tim Waugh <twaugh@redhat.com> 1:1.4.5-9 Tim Waugh <twaugh@redhat.com> 1:1.4.5-8 Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-7 Tim Waugh <twaugh@redhat.com> 1:1.4.5-6 Tim Waugh <twaugh@redhat.com> 1:1.4.5-5 Tim Waugh <twaugh@redhat.com> Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-4 Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-3 Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-2 Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-1 Tim Waugh <twaugh@redhat.com> 1:1.4.4-12 jkeating - 1:1.4.4-11 Tim Waugh <twaugh@redhat.com> 1:1.4.4-10 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.4.4-9 Tim Waugh <twaugh@redhat.com> 1:1.4.4-8 Tim Waugh <twaugh@redhat.com> Jiri Popelka <jpopelka@redhat.com> 1:1.4.4-7 Jiri Popelka <jpopelka@redhat.com> 1:1.4.4-6 Tim Waugh <twaugh@redhat.com> 1:1.4.4-5 Tim Waugh <twaugh@redhat.com> 1:1.4.4-4 Tim Waugh <twaugh@redhat.com> 1:1.4.4-3 Tim Waugh <twaugh@redhat.com> 1:1.4.4-2 Tim Waugh <twaugh@redhat.com> 1:1.4.4-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.4.3-11 Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-10 Tim Waugh <twaugh@redhat.com> 1:1.4.3-9 Tim Waugh <twaugh@redhat.com> 1:1.4.3-8 Tim Waugh <twaugh@redhat.com> 1:1.4.3-7 Tim Waugh <twaugh@redhat.com> 1:1.4.3-6 Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-5 Tim Waugh <twaugh@redhat.com> 1:1.4.3-4 Tim Waugh <twaugh@redhat.com> 1:1.4.3-3 Tim Waugh <twaugh@redhat.com> 1:1.4.3-2 Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-1 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-36 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-35 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-34 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-33 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-32 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-31 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-30 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-29 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-28 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-27 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-26 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-24 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-23 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-22 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-21 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-20 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-19 Tim Waugh <twa� x���������������������� X l 8�y ����������������� �$ > ���������������� �� �� � � INTR (#1516394)
- Add memfd_create function
- resolv: Fix p_secstodate overflow handling (swbz#22463)
- resolv: Obsolete p_secstodate
- Avoid use of strlen in getlogin_r (swbz#22447)
- lv_LV locale: fix collation (swbz#15537)
- S390: Add cfi information for start routines in order to stop unwinding
- aarch64: Optimized memset for falkor - Auto-sync with upstream branch master,
commit f6e965ee94b37289f64ecd3253021541f7c214c3:
- powerpc: AT_HWCAP2 bit PPC_FEATURE2_HTM_NO_SUSPEND
- aarch64: Add HWCAP_DCPOP bit
- ttyname, ttyname_r: Don't bail prematurely (swbz#22145)
- signal: Optimize sigrelse implementation
- inet: Check length of ifname in if_nametoindex (swbz#22442)
- malloc: Account for all heaps in an arena in malloc_info (swbz#22439)
- malloc: Add missing arena lock in malloc_info (swbz#22408)
- malloc: Use __builtin_tgmath in tgmath.h with GCC 8 (swbz#21660)
- locale: Replaced unicode sequences in the ASCII printable range
- resolv: More precise checks in res_hnok, res_dnok (swbz#22409, swbz#22412)
- resolv: ns_name_pton should report trailing \ as error (swbz#22413)
- locale: mfe_MU, miq_NI, an_ES, kab_DZ, om_ET: Escape / in d_fmt (swbz#22403) - Auto-sync with upstream branch master,
commit 6b86036452b9ac47b4ee7789a50f2f37df7ecc4f:
- CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping
- powerpc: Use latest string function optimization for internal function calls
- math: No _Float128 support for ppc64le -mlong-double-64 (swbz#22402)
- tpi_PG locale: Fix wrong d_fmt
- aarch64: Disable lazy symbol binding of TLSDESC
- tpi_PG locale: fix syntax error (swbz#22382)
- i586: Use conditional branches in strcpy.S (swbz#22353)
- ffsl, ffsll: Declare under __USE_MISC, not just __USE_GNU
- csb_PL locale: Fix abmon/mon for March (swbz#19485)
- locale: Various yesstr/nostr/yesexpr/noexpr fixes (swbz#15260, swbz#15261)
- localedef: Add --no-warnings/--warnings option
- powerpc: Replace lxvd2x/stxvd2x with lvx/stvx in P7's memcpy/memmove
- locale: Use ASCII as much as possible in LC_MESSAGES
- Add new locale yuw_PG (swbz#20952)
- malloc: Add single-threaded path to malloc/realloc/calloc/memalloc
- i386: Replace assembly versions of e_powf with generic e_powf.c
- i386: Replace assembly versions of e_log2f with generic e_log2f.c
- x86-64: Add powf with FMA
- x86-64: Add logf with FMA
- i386: Replace assembly versions of e_logf with generic e_logf.c
- i386: Replace assembly versions of e_exp2f with generic e_exp2f.c
- x86-64: Add exp2f with FMA
- i386: Replace assembly versions of e_expf with generic e_expf.c - Auto-sync with upstream branch master,
commit 797ba44ba27521261f94cc521f1c2ca74f650147:
- math: Add bits/floatn.h defines for more _FloatN / _FloatNx types
- posix: Fix improper assert in Linux posix_spawn (swbz#22273)
- x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)
- CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
- malloc: Add single-threaded path to _int_free
- locale: Add new locale kab_DZ (swbz#18812)
- locale: Add new locale shn_MM (swbz#13605) - Use make -O to serialize make output
- Auto-sync with upstream branch master,
commit 63b4baa44e8d22501c433c4093aa3310f91b6aa2:
- sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
- Install correct bits/long-double.h for MIPS64 (swbz#22322)
- malloc: Fix deadlock in _int_free consistency check
- x86-64: Don't set GLRO(dl_platform) to NULL (swbz#22299)
- math: Add _Float128 function aliases
- locale: Add new locale mjw_IN (swbz#13994)
- aarch64: Rewrite elf_machine_load_address using _DYNAMIC symbol
- powerpc: fix check-before-set in SET_RESTORE_ROUND
- locale: Use U+202F as thousands separators in pl_PL locale (swbz#16777)
- math: Use __f128 to define FLT128_* constants in include/float.h for old GCC
- malloc: Improve malloc initialization sequence (swbz#22159)
- malloc: Use relaxed atomics for malloc have_fastchunks
- locale: New locale ca_ES@valencia (swbz#2522)
- math: Let signbit use the builtin in C++ mode with gcc < 6.x (swbz#22296)
- locale: Place monetary symbol in el_GR, el_C� x�������������8������ X � b@U�yat.ch�������T �a ubb �$ ���������������� �a �a �a � emory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated scanner/parser
- use system pcre only when recent enough - improves php.conf, no need to be relocated - clarify Licenses
- missing provides xmlreader and xmlwriter
- change php embedded library soname version to 5.4 - fix mysql_sock macro definition - fix standard build (non scl) - fix installed headers - use libldap_r for ldap extension - add missing scl_prefix in some provides/requires - make php-enchant optionnal, not available on RHEL-5
- make php-recode optionnal, not available on RHEL-5
- disable t1lib on RHEL-5 - enable tidy on RHEL-6 only
- re-enable unit tests - minor macro fixes for RHEL-5 build
- update autotools workaround for RHEL-5
- use readline when libedit not available (RHEL-5) - update to 5.4.8
- define both session.save_handler and session.save_path
- fix possible segfault in libxml (#828526)
- use SKIP_ONLINE_TEST during make test
- php-devel requires pcre-devel and php-cli (instead of php)
- provides php-phar
- update systzdata patch to v10, timezone are case insensitive - php-fpm: create apache user if needed
- php-cli: provides cli command in standard root (scl) - add configtest option to init script
- test configuration before service reload
- fix php-fpm service relocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (� x��������������������� X � ryY�ye,lo0R������x������a ing �$ ���������������� �a �a �
- build against mysqlclient10-devel
- use new RTLD_DEEPBIND to load extension modules
- drop explicit requirement for elfutils-devel
- use AddHandler in default conf.d/php.conf (#135664)
- "fix" round() fudging for recent gcc on x86
- disable sqlite pending audit of warnings and subpackage split - don't build dom extension into 2.0 SAPI - ExclusiveArch: x86 ppc x86_64 for the moment - fix default extension_dir and conf.d/php.conf - update to 5.0.1
- only build shared modules once
- put dom extension in php-dom subpackage again
- move extension modules into %{_libdir}/php/modules
- don't use --with-regex=system, it's ignored for the apache* SAPIs - Merge in some spec file changes from Jeff Stern (jastern@uci.edu) - bump to 5.0.0
- add patch to prevent clobbering struct re_registers from regex.h
- remove domxml references, replaced with dom now built-in
- fix php.ini to refer to php5 not php4 7.0.33-40.el8.remi 7.0.33-40.el8.remi 7.0.33-40.el8.remi 20-intl.ini intl.so /etc/opt/remi/php70/php.d/ /opt/remi/php70/root/usr/lib64/php/modules/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=78e5a7ed8bc3a89052db13569420b661939bcf85, stripped https://forum.remirepo.net/ utf-8 f682a83490f5dfd8e1342fbb61bfd815b1e6959042e7246603671cb433910397 ? ���p �9�����7zM�lOމ3 !k8��# ��+���UP�Y_sZd� \
UP�Y_sZF%�_�dD�d�)<�e�k2��'y�h��? �� ��g���{����*2���V��� �8W��:��&��/�Mc���s�n
yLA�sAU��Cچ�Z5�����M��)L��C�DM�s�*l�yQ�PU��!�T,�|bIܬ�\�4$߲j3��dN-�� �\�:( � �%bF��/=��@�,l �l����&���S �*��]ylnH��FBCFtN�� SR���'\�N�Ֆ/|�U�.C7C1ַ��� �&��:���Ee P� GP�a
��Ť�IQ�3���a�x�� �[�m ����X�����, �s
��O@��n���_����\��F�rӛOF��6L잮�l����g7-f <f������ү ��� �c� a��j 2�Ӄ�.C����*�|t�v� |7.��lA��
�GG��ۭ 3g4th�%R�7��Z^�c�� ��X �U���6f� ��à(���
34d36ef3ccb4b0dc066276b45601d4cbaeb393c5 eeecaea9cf64d4387f661f228e5a4071cd5c58981fea28f5b05d51e0427e4611 es~A �� es~Amas mas mas mas mas mas mas mas mas mas mas mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdf mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr mdr men men men men men men men men men men men men men men men men men men men men men men men mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mg mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mga mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mh mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mi mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic mic min min min min min min min min min min min min min min min min min min min min min min min mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mis mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mk mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh mkh ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml ml mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mn mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mnc mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mni mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno mno moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh moh mos mos mos mos mos mos mos mos mo� x��������������������� X W ��y 8I������pz�������� �$ w ���������������� �� �� �� � he kill capability
- DRM master and input event devices are used by the TakeDevice API
- add dev_rw_inherited_dri() and dev_rw_inherited_input_dev()
- Added support for default conman port
- Add interfaces for ipmi devices
- Make sure wine domains create .wine with the correct label
- Allow manage dirs in kernel_manage_debugfs interface.
- Allow systemctl running in ipsec_mgmt_t to access /usr/lib/systemd/system/ipsec.service
- Label /usr/lib/systemd/system/ipsec.service as ipsec_mgmt_unit_file_t
- Fix userdom_confined_admin_template()
- Add back exec_content boolean for secadm, logadm, auditadm
- Fix files_filetrans_system_db_named_files() interface
- Allow sulogin to getattr on /proc/kcore
- Add filename transition also for servicelog.db-journal
- Add files_dontaudit_access_check_root()
- Add lvm_dontaudit_access_check_lock() interface
- Allow mount to manage mount_var_run_t files/dirs - Add back fixes for gnome_role_template()
- Label /usr/sbin/htcacheclean as httpd_exec_t
- Add missing alias for pegasus_openlmi_service_exec_t
- Added support for rdisc unit file
- Added new policy for ninfod
- Added new policy for openwsman
- Add antivirus_db_t labeling for /var/lib/clamav-unofficial-sigs
- Allow runuser running as logrotate connections to system DBUS
- Add connectto perm for NM unix stream socket
- Allow watchdog to be executed from cron
- Allow cloud_init to transition to rpm_script_t
- Allow lsmd_plugin_t send system log messages
- Label /var/log/up2date as rpm_log_t and allow sosreport to manage rpm log/pid/cache files which is a part of ABRT policy for sosreport running as abrt_t
- Added new capabilities for mip6d policy
- Label bcache devices as fixed_disk_device_t
- Allow systemctl running in ipsec_mgmt_t to access /usr/lib/systemd/system/ipsec.service
- label /usr/lib/systemd/system/ipsec.service as ipsec_mgmt_unit_file_t - Add lsmd_plugin_t for lsm plugins
- Allow dovecot-deliver to search mountpoints
- Add labeling for /etc/mdadm.conf
- Allow opelmi admin providers to dbus chat with init_t
- Allow sblim domain to read /dev/urandom and /dev/random
- Add back exec_content boolean for secadm, logadm, auditadm
- Allow sulogin to getattr on /proc/kcore - Add filename transition also for servicelog.db-journal
- Add files_dontaudit_access_check_root()
- Add lvm_dontaudit_access_check_lock() interface
- Allow mount to manage mount_var_run_t files/dirs
- Allow updapwd_t to ignore mls levels for writign shadow_t at a lower level
- Make sure boot.log is created with the correct label
- call logging_relabel_all_log_dirs() in systemd.te
- Allow systemd_tmpfiles to relabel log directories
- Allow staff_t to run frequency command
- Allow staff_t to read xserver_log file
- This reverts commit c0f9f125291f189271cbbca033f87131dab1e22f.
- Label hsperfdata_root as tmp_t
- Add plymouthd_create_log()
- Dontaudit leaks from openshift domains into mail domains, needs back port to RHEL6
- Allow sssd to request the kernel loads modules
- Allow gpg_agent to use ssh-add
- Allow gpg_agent to use ssh-add
- Dontaudit access check on /root for myslqd_safe_t
- Add glusterd_brick_t files type
- Allow ctdb to getattr on al filesystems
- Allow abrt to stream connect to syslog
- Allow dnsmasq to list dnsmasq.d directory
- Watchdog opens the raw socket
- Allow watchdog to read network state info
- Dontaudit access check on lvm lock dir
- Allow sosreport to send signull to setroubleshootd
- Add setroubleshoot_signull() interface
- Fix ldap_read_certs() interface
- Allow sosreport all signal perms
- Allow sosreport to run systemctl
- Allow sosreport to dbus chat with rpm
- Allow zabbix_agentd to read all domain state
- Allow sblim_sfcbd_t to read from /dev/random and /dev/urandom
- Allow smoltclient to execute ldconfig
- Allow sosreport to request the kernel to load a module
- Clean up rtas.if
- Clean up docker.if
- drop /var/lib/glpi/files labeling in cron.fc
- Added new policy for rasdaemon
- Add apache labeling for glpi
- Allow pegasus to transition to dmidecode
- Make sure boot.log is created with the correct label
-� x���������������������� X � co
�yt in�� ������� � /htm�$ ���������������� � � � � ddysun <i@teddysun.com> - 5.15.42-1 Teddysun <i@teddysun.com> - 5.15.41-1 Teddysun <i@teddysun.com> - 5.15.40-1 Teddysun <i@teddysun.com> - 5.15.39-1 Teddysun <i@teddysun.com> - 5.15.38-1 Teddysun <i@teddysun.com> - 5.15.37-1 Teddysun <i@teddysun.com> - 5.15.36-1 Teddysun <i@teddysun.com> - 5.15.35-1 Teddysun <i@teddysun.com> - 5.15.34-1 Teddysun <i@teddysun.com> - 5.15.33-1 Teddysun <i@teddysun.com> - 5.15.32-1 Teddysun <i@teddysun.com> - 5.15.31-1 Teddysun <i@teddysun.com> - 5.15.30-1 Teddysun <i@teddysun.com> - 5.15.29-1 Teddysun <i@teddysun.com> - 5.15.28-1 Teddysun <i@teddysun.com> - 5.15.27-1 Teddysun <i@teddysun.com> - 5.15.26-1 Teddysun <i@teddysun.com> - 5.15.25-1 Teddysun <i@teddysun.com> - 5.15.24-1 Teddysun <i@teddysun.com> - 5.15.23-1 Teddysun <i@teddysun.com> - 5.15.22-1 Teddysun <i@teddysun.com> - 5.15.21-1 Teddysun <i@teddysun.com> - 5.15.20-1 Teddysun <i@teddysun.com> - 5.15.19-1 Teddysun <i@teddysun.com> - 5.15.18-1 Teddysun <i@teddysun.com> - 5.15.17-1 Teddysun <i@teddysun.com> - 5.15.16-1 Teddysun <i@teddysun.com> - 5.15.15-1 Teddysun <i@teddysun.com> - 5.15.14-1 Alan Bartlett <ajb@elrepo.org> - 5.15.13-1 Alan Bartlett <ajb@elrepo.org> - 5.15.12-1 Alan Bartlett <ajb@elrepo.org> - 5.15.11-1 Alan Bartlett <ajb@elrepo.org> - 5.15.10-1 Alan Bartlett <ajb@elrepo.org> - 5.15.9-1 Alan Bartlett <ajb@elrepo.org> - 5.15.8-1 Alan Bartlett <ajb@elrepo.org> - 5.15.7-1 Alan Bartlett <ajb@elrepo.org> - 5.15.6-1 Alan Bartlett <ajb@elrepo.org> - 5.15.5-1 Alan Bartlett <ajb@elrepo.org> - 5.15.4-1 Alan Bartlett <ajb@elrepo.org> - 5.15.3-1 Alan Bartlett <ajb@elrepo.org> - 5.15.2-1 Alan Bartlett <ajb@elrepo.org> - 5.15.1-1 Alan Bartlett <ajb@elrepo.org> - 5.15.0-1 Alan Bartlett <ajb@elrepo.org> - 5.14.15-1 Alan Bartlett <ajb@elrepo.org> - 5.14.14-1 Alan Bartlett <ajb@elrepo.org> - 5.14.13-1 Alan Bartlett <ajb@elrepo.org> - 5.14.12-1 Alan Bartlett <ajb@elrepo.org> - 5.14.11-1 Alan Bartlett <ajb@elrepo.org> - 5.14.10-1 Alan Bartlett <ajb@elrepo.org> - 5.14.9-1 Alan Bartlett <ajb@elrepo.org> - 5.14.8-1 Alan Bartlett <ajb@elrepo.org> - 5.14.7-1 Alan Bartlett <ajb@elrepo.org> - 5.14.6-1 Alan Bartlett <ajb@elrepo.org> - 5.14.5-1 Alan Bartlett <ajb@elrepo.org> - 5.14.4-1 Alan Bartlett <ajb@elrepo.org> - 5.14.3-1 Alan Bartlett <ajb@elrepo.org> - 5.14.2-1 Alan Bartlett <ajb@elrepo.org> - 5.14.1-1 Alan Bartlett <ajb@elrepo.org> - 5.14.0-1 Alan Bartlett <ajb@elrepo.org> - 5.13.13-1 Alan Bartlett <ajb@elrepo.org> - 5.13.12-1 Alan Bartlett <ajb@elrepo.org> - 5.13.11-1 Alan Bartlett <ajb@elrepo.org> - 5.13.10-1 Alan Bartlett <ajb@elrepo.org> - 5.13.9-1 Alan Bartlett <ajb@elrepo.org> - 5.13.8-1 Alan Bartlett <ajb@elrepo.org> - 5.13.7-1 Alan Bartlett <ajb@elrepo.org> - 5.13.6-1 Alan Bartlett <ajb@elrepo.org> - 5.13.5-1 S.Tindall <s10dal@elrepo.org> - 5.13.4-1 S.Tindall <s10dal@elrepo.org> - 5.13.3-1 Alan Bartlett <ajb@elrepo.org> - 5.13.2-1 Alan Bartlett <ajb@elrepo.org> - 5.13.1-1 Alan Bartlett <ajb@elrepo.org> - 5.13.0-1 Alan Bartlett <ajb@elrepo.org> - 5.12.13-1 Alan Bartlett <ajb@elrepo.org> - 5.12.12-1 Alan Bartlett <ajb@elrepo.org> - 5.12.11-1 Alan Bartlett <ajb@elrepo.org> - 5.12.10-1 Alan Bartlett <ajb@elrepo.org> - 5.12.9-1 Alan Bartlett <ajb@elrepo.org> - 5.12.8-1 Alan Bartlett <ajb@elrepo.org> - 5.12.7-1 Alan Bartlett <ajb@elrepo.org> - 5.12.6-1 Alan Bartlett <ajb@elrepo.org> - 5.12.5-1 Alan Bartlett <ajb@elrepo.org> - 5.12.4-1 Alan Bartlett <ajb@elrepo.org> - 5.12.3-1 Alan Bartlett <ajb@elrepo.org> - 5.12.2-1 Alan Bartlett <ajb@elrepo.org> - 5.12.1-1 Alan Bartlett <ajb@elrepo.org> - 5.12.0-1 Alan Bartlett <ajb@elrepo.org> - 5.11.16-1 Alan Bartlett <ajb@elrepo.org> - 5.11.15-1 Alan Bartlett <ajb@elrepo.org> - 5.11.14-1 Alan Bartlett <ajb@elrepo.org> - 5.11.13-1 Alan Bartlett <ajb@elrepo.org> - 5.11.12-1 Alan Bartlett <ajb@elrepo.org> - 5.11.11-1 Alan Bartlett <ajb@elrepo.org> - 5.11.10-1 Alan Bartlett <ajb@elrepo.org> - 5.11.9-1 Alan Bartlett <ajb@elrepo.org> - 5.11.8-1 Alan Bartlett <ajb@elrepo.org> - 5.11.7-1 Alan Bartlett <ajb@elrepo.org> - 5.11.6-1 Alan Bartlett <ajb@elrepo.org> - 5.11.5-1 Alan Ba� x��������������������� X � a1�ylogiH�������@�������! t to�$ u ���������������� �! �! : for db4-4.3 (Robert Scheck, #140167)
- build against mysql-devel
- run tests in %check - truncate changelog at 4.3.1-1
- merge from 4.3.x package:
- enable mime_magic extension and Require: file (#130276) - fix dom/sqlite enable/without confusion - fix phpize installation for lib64 platforms
- add fix for segfault in variable parsing introduced in 5.0.2 - update to 5.0.2 (#127980)
- build against mysqlclient10-devel
- use new RTLD_DEEPBIND to load extension modules
- drop explicit requirement for elfutils-devel
- use AddHandler in default conf.d/php.conf (#135664)
- "fix" round() fudging for recent gcc on x86
- disable sqlite pending audit of warnings and subpackage split - don't build dom extension into 2.0 SAPI - ExclusiveArch: x86 ppc x86_64 for the moment - fix default extension_dir and conf.d/php.conf - update to 5.0.1
- only build shared modules once
- put dom extension in php-dom subpackage again
- move extension modules into %{_libdir}/php/modules
- don't use --with-regex=system, it's ignored for the apache* SAPIs - Merge in some spec file changes from Jeff Stern (jastern@uci.edu) - bump to 5.0.0
- add patch to prevent clobbering struct re_registers from regex.h
- remove domxml references, replaced with dom now built-in
- fix php.ini to refer to php5 not php4 php82-php-pecl-oci8 8.2.13-1.el8.remi 8.2.13-1.el8.remi 8.2.13-1.el8.remi 3.3.0 3.3.0
3.3.0 20-oci8.ini 30-pdo_oci.ini oci8.so pdo_oci.so /etc/opt/remi/php82/php.d/ /opt/remi/php82/root/usr/lib64/php/modules/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=43bfefcec9ee069571c2e3bdf17effb04f9b525f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=572ab893dde201d211c77d732119411cbafa25ec, stripped https://forum.remirepo.net/ utf-8 e5860a9319a40fd085a3ed115eb51710605e84a266cb7221dd5f5c9d5adb210e ? ��� ;x}�Hh��W���$�3 !k8��# ��+���UP�Y_sZe\�*
UP�Y_sZf���;>�ޒ�dd����$>����Ecaz��_"��6[ �1�ܛ�{-�Ǽ� �� km� O�w�r}����7Ԃ��:㕼 ���и�OE�y��D�?����E5�4�k�$��^N��M �� ���l'�w��ũ?�??{3����y�U浪O�d����:һfe����Z�
�1������2��� �u���
��鶵h���NS��i<KB~�:J =:��}|� y��HH�<��?�lgPC-W�mԊْҸ�'�4�F�U�Py�/�f�%�@�:� q?ٳ@
q_�e�:P���������"��Wv��2T��g��2P��͂㖱�����;
��aǷXzU�8s v
X� ��
暠�ސ8L��(��$�ٸ[��R����Y�c�ܤ���БF�e�}2>EI?�0&H8� �� 0��H�F
W�vm���z{e�B��g���1�48l�k�� Y�@���K�5���;SX!9��uo����'�W���2Ab1881a842a7c2f764362ab2ba88bfd26be50d450 9c18a8f01cb94057e136db83a9beef77d088b8a0640209b9e63adf7a009365de h�- �� h�-orwardport downstream-only udev rules from RHEL-7 (#1523227)
- set RemoveIPC=no by default (#1523233) - also drop qrencode-devel from BuildRequires as it is no longer needed (#1566158) - disable support for qrencode (#1566158)
- bump default journal rate limit to 10000 messages per 30s (#1563729)
- fix unit reloads (#1560549)
- don't create /var/log/journal during package installation (#1523188) - Rebuild with cryptsetup-2 - Revert the patches for GRUB BootLoaderSpec support
- Add patch for /etc/machine-id creation (#1552843) - Fix transfiletrigger script (#1551793) - Update to latest version
- This fixes a hard-to-trigger potential vulnerability (CVE-2018-6954)
- New transfiletriggers are installed for udev hwdb and rules, the journal
catalog, sysctl.d, binfmt.d, sysusers.d, tmpfiles.d. - Add patch to install kernel images for GRUB BootLoaderSpec support - Create /etc/systemd in %post libs if necessary (#1548607) - Use : no� x���������������������� X � io��yr pr������������������ fil�$ G ���������������� �� �� �� � different from var_lock_t
- Allow systemd to list all file system directories
- Add some basic stub interfaces which will be used in PRODUCT policies - Fix log transition rule for cluster domains
- Start to group all cluster log together
- Dont use filename transition for POkemon Advanced Adventure until a new checkpolicy update
- cups uses usbtty_device_t devices
- These fixes were all required to build a MLS virtual Machine with single level desktops
- Allow domains to transiton using httpd_exec_t
- Allow svirt domains to manage kernel key rings
- Allow setroubleshoot to execute ldconfig
- Allow firewalld to read generate gnome data
- Allow bluetooth to read machine-info
- Allow boinc domain to send signal to itself
- Fix gnome_filetrans_home_content() interface
- Allow mozilla_plugins to list apache modules, for use with gxine
- Fix labels for POkemon in the users homedir
- Allow xguest to read mdstat
- Dontaudit virt_domains getattr on /dev/*
- These fixes were all required to build a MLS virtual Machine with single level desktops
- Need to back port this to RHEL6 for openshift
- Add tcp/8891 as milter port
- Allow nsswitch domains to read sssd_var_lib_t files
- Allow ping to read network state.
- Fix typo
- Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them - Adopt swift changes from lhh@redhat.com
- Add rhcs_manage_cluster_pid_files() interface
- Allow screen domains to configure tty and setup sock_file in ~/.screen directory
- ALlow setroubleshoot to read default_context_t, needed to backport to F18
- Label /etc/owncloud as being an apache writable directory
- Allow sshd to stream connect to an lxc domain - Allow postgresql to manage rgmanager pid files
- Allow postgresql to read ccs data
- Allow systemd_domain to send dbus messages to policykit
- Add labels for /etc/hostname and /etc/machine-info and allow systemd-hostnamed to create them
- All systemd domains that create content are reading the file_context file and setfscreate
- Systemd domains need to search through init_var_run_t
- Allow sshd to communicate with libvirt to set containers labels
- Add interface to manage pid files
- Allow NetworkManger_t to read /etc/hostname
- Dontaudit leaked locked files into openshift_domains
- Add fixes for oo-cgroup-read - it nows creates tmp files
- Allow gluster to manage all directories as well as files
- Dontaudit chrome_sandbox_nacl_t using user terminals
- Allow sysstat to manage its own log files
- Allow virtual machines to setrlimit and send itself signals.
- Add labeling for /var/run/hplip - Fix POSTIN scriptlet - Merge rgmanger, corosync,pacemaker,aisexec policies to cluster_t in rhcs.pp - Fix authconfig.py labeling
- Make any domains that write homedir content do it correctly
- Allow glusterd to read/write anyhwere on the file system by default
- Be a little more liberal with the rsync log files
- Fix iscsi_admin interface
- Allow iscsid_t to read /dev/urand
- Fix up iscsi domain for use with unit files
- Add filename transition support for spamassassin policy
- Allow web plugins to use badly formated libraries
- Allow nmbd_t to create samba_var_t directories
- Add filename transition support for spamassassin policy
- Add filename transition support for tvtime
- Fix alsa_home_filetrans_alsa_home() interface
- Move all userdom_filetrans_home_content() calling out of booleans
- Allow logrotote to getattr on all file sytems
- Remove duplicate userdom_filetrans_home_content() calling
- Allow kadmind to read /etc/passwd
- Dontaudit append .xsession-errors file on ecryptfs for policykit-auth
- Allow antivirus domain to manage antivirus db links
- Allow logrotate to read /sys
- Allow mandb to setattr on man dirs
- Remove mozilla_plugin_enable_homedirs boolean
- Fix ftp_home_dir boolean
- homedir mozilla filetrans has been moved to userdom_home_manager
- homedir telepathy filetrans has been moved to userdom_home_manager
- Remove gnome_home_dir_filetrans() from gnome_role_gkeyringd()
- Might want to eventually write a daemon on fusefsd.
- Add policy fixes for sshd [ne� x���������������������� X � :�y ��������� �� � �$ 1 ���������������� �� �� �� � .com> 5.2.8-2 Remi Collet <Fedora@FamilleCollet.com> 5.2.8-1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1.1 Remi Collet <Fedora@FamilleCollet.com> 5.2.7-1 Joe Orton <jorton@redhat.com> 5.2.6-7 Joe Orton <jorton@redhat.com> 5.2.6-6 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-5 Remi Collet <Fedora@FamilleCollet.com> 5.2.6-4 Joe Orton <jorton@redhat.com> 5.2.6-3 Joe Orton <jorton@redhat.com> 5.2.5-7 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.2.5-6 Joe Orton <jorton@redhat.com> 5.2.5-5 Joe Orton <jorton@redhat.com> 5.2.5-4 Release Engineering <rel-eng at fedoraproject dot org> - 5.2.5-3 Joe Orton <jorton@redhat.com> 5.2.5-2 Joe Orton <jorton@redhat.com> 5.2.4-3 Joe Orton <jorton@redhat.com> 5.2.4-2 Joe Orton <jorton@redhat.com> 5.2.3-9 Joe Orton <jorton@redhat.com> 5.2.3-8 Hans de Goede <j.w.r.degoede@hhs.nl> 5.2.3-7 Joe Orton <jorton@redhat.com> 5.2.3-6 Joe Orton <jorton@redhat.com> 5.2.3-5 Joe Orton <jorton@redhat.com> 5.2.3-4 Joe Orton <jorton@redhat.com> 5.2.3-3 Joe Orton <jorton@redhat.com> 5.2.3-2 Joe Orton <jorton@redhat.com> 5.2.2-4 Joe Orton <jorton@redhat.com> 5.2.2-3 Joe Orton <jorton@redhat.com> 5.2.2-2 Joe Orton <jorton@redhat.com> 5.2.1-5 Joe Orton <jorton@redhat.com> 5.2.1-4 Joe Orton <jorton@redhat.com> 5.2.1-3 Joe Orton <jorton@redhat.com> 5.2.1-2 Joe Orton <jorton@redhat.com> 5.2.0-10 Joe Orton <jorton@redhat.com> 5.2.0-9 Joe Orton <jorton@redhat.com> 5.2.0-8 Joe Orton <jorton@redhat.com> 5.2.0-7 Joe Orton <jorton@redhat.com> 5.2.0-6 Joe Orton <jorton@redhat.com> 5.2.0-5 Joe Orton <jorton@redhat.com> 5.2.0-4 Joe Orton <jorton@redhat.com> 5.2.0-3 Joseph Orton <jorton@redhat.com> 5.1.6-4 Joe Orton <jorton@redhat.com> 5.1.6-3 Joe Orton <jorton@redhat.com> 5.1.6-2 Jesse Keating <jkeating@redhat.com> - 5.1.4-8.1 Joe Orton <jorton@redhat.com> 5.1.4-8 Joe Orton <jorton@redhat.com> 5.1.4-7 Joe Orton <jorton@redhat.com> 5.1.4-6 Radek Vokal <rvokal@redhat.com> 5.1.4-5.1 Joe Orton <jorton@redhat.com> 5.1.4-5 Joe Orton <jorton@redhat.com> 5.1.4-3 Joe Orton <jorton@redhat.com> 5.1.3-3 Joe Orton <jorton@redhat.com> 5.1.2-5 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.3 Jesse Keating <jkeating@redhat.com> - 5.1.2-4.1 Joe Orton <jorton@redhat.com> 5.1.2-4 Joe Orton <jorton@redhat.com> 5.1.2-3 Joe Orton <jorton@redhat.com> 5.1.2-2 Joe Orton <jorton@redhat.com> 5.1.1-8 Joe Orton <jorton@redhat.com> 5.1.1-7 Joe Orton <jorton@redhat.com> 5.1.1-6 Jesse Keating <jkeating@redhat.com> Joe Orton <jorton@redhat.com> 5.1.1-5 Joe Orton <jorton@redhat.com> 5.1.1-4 Joe Orton <jorton@redhat.com> 5.1.1-3 Joe Orton <jorton@redhat.com> 5.1.1-2 Tomas Mraz <tmraz@redhat.com> 5.0.5-6 Joe Orton <jorton@redhat.com> 5.0.5-5 Joe Orton <jorton@redhat.com> 5.0.5-4 Joe Orton <jorton@redhat.com> 5.0.5-3 Joe Orton <jorton@redhat.com> 5.0.4-11 Joe Orton <jorton@redhat.com> 5.0.4-10 Joe Orton <jorton@redhat.com> 5.0.4-9 Joe Orton <jorton@redhat.com> 5.0.4-8 Joe Orton <jorton@redhat.com> 5.0.4-7 Joe Orton <jorton@redhat.com> 5.0.4-6 Joe Orton <jorton@redhat.com> 5.0.4-5 Joe Orton <jorton@redhat.com> 5.0.4-4 Joe Orton <jorton@redhat.com> 5.0.4-3 Joe Orton <jorton@redhat.com> 5.0.4-2 Joe Orton <jorton@redhat.com> 5.0.4-1 Joe Orton <jorton@redhat.com> 5.0.3-5 Joe Orton <jorton@redhat.com> 5.0.3-4 Joe Orton <jorton@redhat.com> 5.0.3-3 Joe Orton <jorton@redhat.com> 5.0.3-2 Joe Orton <jorton@redhat.com> 5.0.3-1 Joe Orton <jorton@redhat.com> 5.0.2-8 Joe Orton <jorton@redhat.com> 5.0.2-7 Joe Orton <jorton@redhat.com> 5.0.2-6 Joe Orton <jorton@redhat.com> 5.0.2-5 Joe Orton <jorton@redhat.com> 5.0.2-4 Joe Orton <jorton@redhat.com> 5.0.1-4 Joe Orton <jorton@redhat.com> 5.0.1-3 Joe Orton <jorton@redhat.com> 5.0.1-2 Joe Orton <jorton@redhat.com> 5.0.1-1 Tom Callaway <tcallawa@redhat.com> Tom Callaway <tcallawa@redhat.com> - use ICU 73.2
- use oracle client library version 21.12 on x86_64, 19.19 on aarch64
- add fixes for libxml 2.11 and 2.12 from 8.1 - use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM - Fix Security issue with external entity loading in XML without� x�������������pz������� X � pd��yfrom�� ��������$ r te�$ 4 ���������������� $ # % � st" resolving to 127.0.0.1 on IPv6-addressed systems
(bug #737230). - Work around PPDs cache handling issue (bug #742989). - More fixes for systemd socket activation:
- relax permissions check for domain socket in libcups.
- initialise addrlen before calling getsockname(). - Updated colord patch with fixes to DeleteDevice.
- Resolves https://bugzilla.redhat.com/show_bug.cgi?id=741697 - Fixed string manipulation in the dbus notifier (STR #3947, bug #741833). - Fixed systemd socket activation support (bug #738709, bug #738710). - Prevent libcups crash in cups-get-classes patch (bug #736698). - Use PathExistsGlob instead of DirectoryNotEmpty in cups.path
(bug #734435). - Tighten explicit libs sub-package requirement so that it includes
the correct architecture as well (bug #731421 comment #8). - Avoid GIF reader loop (CVE-2011-2896, STR #3914, bug #727800). - Enable systemd units by default (bug #731421). - Updated avahi support to register sub-types. - Ported avahi support from 1.4. - 1.5.0 - Don't delete job data files when restarted (STR #3880). - Ship an rpm macro for where to put driver executables. - Undo last change which had no effect. We already remove the .SILENT
target from the Makefile as part of the build. - Make build log verbose enough to include compiler flags used. - Removed udev rules file as it is no longer necessary. - Add support for systemd socket activation (patch from Lennart
Poettering). - Don't use portreserve any more. Better approach is to use systemd
socket activation (not yet done). - Ship systemd service unit instead of SysV initscript (bug #690766). - Tag localization files correctly (bug #716421). - 1.5rc1 - Updated colord patch with fixes from Tim Waugh. - enable LSPP support again - Updated colord patch against 1.5 upstream and fixes from Tim Waugh. - fix lspp.patch to not include "config.h" in cups/cups.h (#709384) - 1.5b2 - 1.5b1
- removed cups-texttops-rotate-page.patch (#572338 is CANTFIX)
- removed cups-page-label.patch (#520141 seems to be CANTFIX) - Package parallel port printer device nodes (bug #678804). - Updated colord patch from upstream review. - Polished patches according to results from static analysis of code (bug #690130). - Fixed some typos in colord patch.
- LSPP: only warn when unable to get printer context. - Updated colord patch. - Fixed build failure due to php_zend_api macro type. - Fixed dbus notifier support for job-state-changed. - Remove testing cups-usb-buffer-size.patch (bug #661814). - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Use Till's patch to fix USB-Parallel adapter cable problem (bug #624564). - Some fixes for the AvahiClient callback (bug #672143). - Don't use --enable-pie configure option as it has been removed and
is now assumed. See STR #3691. - ICC colord support. - Properly separated serverbin-compat and lspp patches.
- Updated ICC patch (still not yet applied). - Build requires automake for avahi support. - Use a smaller buffer when writing to USB devices (bug #661814).
- Handle EAI_NONAME when resolving hostnames (bug #617208). - 1.4.6. - Some Avahi support fixes from Till Kamppeter. - Native Avahi support for announcing printers on the network. - Don't crash when job queued for browsed printer that times out
(bug #660604). - Call avc_init() only once to not leak file descriptors (bug #654075). - The cups-config man page has been moved to the devel sub-package.
- The php sub-package now explicitly requires the libs package with
the same version and release (bug #646814). - Fixed character encoding in CREDITS.txt.
- Mark D-Bus configuration file as config file.
- Don't mark MIME types and convs files as config files. Overrides
can be placed as new *.types/*.convs files in /etc/cups.
- Don't mark banners as config files. Better is to provide new
banners.
- Don't mark templates and www files as config files. A better way to
provide local overrides is to use a different ServerRoot setting.
Note that a recent security fix required changed to template files.
- � x��������������i������� X � t�y
K �q������ �$ ���������������� � t.com> - 1:2.2.6-61 Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60 Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-59 Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-58 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-57 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-54 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-53 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-51 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-51 Richard Lescak <rlescak@redhat.com> - 1:2.2.6-50 Richard Lescak <rlescak@redhat.com> - 1:2.2.6-49 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-48 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-47 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-45 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-44 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-43 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-42 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-42 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-38 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-37 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-34 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-34 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-34 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-33 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-32 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-31 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-29 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-28 Tomas Korbar <tkorbar@redhat.com> - 1:2.2.6-27 Tomas Korbar <tkorbar@redhat.com> - 1:2.2.6-26 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-25 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-24 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-23 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-20 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-19 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-18 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-17 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-16 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-15 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-14 Pavel Zhukov <pzhukov@redhat.com> - 1:2.2.6-13 Pavel Zhukov <pzhukov@redhat.com> - 1:2.2.6-12 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-11 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-10 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-9 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-8 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-7 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-6 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.6-5 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:2.2.6-4 Björn Esser <besser82@fedoraproject.org> - 1:2.2.6-3 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.5-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.4-7 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.4-6 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.4-5 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.4-4 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-3 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.4-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-6 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-5 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-4 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-3 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.2-2 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.2-1 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-4 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-2 Zdenek � x�������������`Y������� X � o 7�yton ���������k ��
- U�$ 4 ���������������� �� �� �� � et <remi@remirepo.net> - 7.2.0-0.29.RC4 Remi Collet <remi@remirepo.net> - 7.2.0-0.28.RC4 Remi Collet <remi@remirepo.net> - 7.2.0-0.27.RC3 Remi Collet <remi@remirepo.net> - 7.2.0-0.26.RC3 Remi Collet <remi@remirepo.net> - 7.2.0-0.25.RC3 Remi Collet <remi@remirepo.net> - 7.2.0-0.24.RC2 Remi Collet <remi@remirepo.net> - 7.2.0-0.23.RC2 Remi Collet <remi@fedoraproject.org> - 7.2.0-0.22.RC1 Remi Collet <remi@remirepo.net> - 7.2.0-0.21.RC1 Remi Collet <remi@remirepo.net> - 7.2.0-0.19.20170827.c22cda5 Remi Collet <remi@remirepo.net> - 7.2.0-0.18.20170828.cc57774 Remi Collet <remi@remirepo.net> - 7.2.0-0.17.20170822.3fff74a Remi Collet <remi@remirepo.net> - 7.2.0-0.16.beta3 Remi Collet <remi@remirepo.net> - 7.2.0-0.15.beta2 Remi Collet <remi@remirepo.net> - 7.2.0-0.14.beta2 Remi Collet <remi@remirepo.net> - 7.2.0-0.13.beta1 Remi Collet <remi@remirepo.net> - 7.2.0-0.12.20170611.249f75e Remi Collet <remi@remirepo.net> - 7.2.0-0.11.alpha3 Remi Collet <remi@remirepo.net> - 7.2.0-0.9.alpha2 Remi Collet <remi@remirepo.net> - 7.2.0-0.8.alpha1 Remi Collet <remi@remirepo.net> - 7.2.0-0.7.20170602.a86c87d Remi Collet <remi@remirepo.net> - 7.2.0-0.6.20170529.37a16a3 Remi Collet <remi@remirepo.net> - 7.2.0-0.5.alpha0 Remi Collet <remi@remirepo.net> - 7.2.0-0.4.20170516.0722a01 Remi Collet <remi@remirepo.net> - 7.2.0-0.3.20170504.5af997e Remi Collet <remi@remirepo.net> - 7.2.0-0.2.20170424.eb68c0d Remi Collet <remi@remirepo.net> - 7.2.0-0.1.20170412.efeab78 Remi Collet <remi@fedoraproject.org> - 7.1.4-1 Remi Collet <remi@fedoraproject.org> - 7.1.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> - 7.1.3-1 Remi Collet <remi@fedoraproject.org> - 7.1.3-0.2.RC1 Remi Collet <remi@fedoraproject.org> - 7.1.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> - 7.1.2-1 Remi Collet <remi@fedoraproject.org> - 7.1.2-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.1.2-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.1.1-3 Remi Collet <remi@fedoraproject.org> 7.1.1-2 Remi Collet <remi@fedoraproject.org> 7.1.1-1 Remi Collet <remi@fedoraproject.org> 7.1.1-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.1.0-2 Remi Collet <remi@fedoraproject.org> 7.1.0-1 Remi Collet <remi@fedoraproject.org> 7.1.0-0.13.RC6 Remi Collet <remi@fedoraproject.org> 7.1.0-0.12.RC5 Remi Collet <remi@fedoraproject.org> 7.1.0-0.11.RC4 Remi Collet <remi@fedoraproject.org> 7.1.0-0.10.RC3 Remi Collet <remi@fedoraproject.org> 7.1.0-0.9.RC3 Remi Collet <remi@fedoraproject.org> 7.1.0-0.8.RC2 Remi Collet <remi@fedoraproject.org> 7.1.0-0.8.RC1 Remi Collet <remi@fedoraproject.org> 7.1.0-0.7.beta2 Remi Collet <remi@fedoraproject.org> 7.1.0-0.6.beta1 Remi Collet <remi@fedoraproject.org> 7.1.0-0.5.alpha3 Remi Collet <remi@fedoraproject.org> 7.1.0-0.4.alpha2 Remi Collet <remi@fedoraproject.org> 7.1.0-0.3.alpha2 Remi Collet <remi@fedoraproject.org> 7.1.0-0.2.alpha2 Remi Collet <remi@fedoraproject.org> 7.1.0-0.1.alpha1 Remi Collet <remi@fedoraproject.org> 7.0.7-1 Remi Collet <remi@fedoraproject.org> 7.0.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.6-3 Remi Collet <remi@fedoraproject.org> 7.0.6-2 Remi Collet <remi@fedoraproject.org> 7.0.6-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.5-2 Remi Collet <remi@fedoraproject.org> 7.0.5-1 Remi Collet <remi@fedoraproject.org> 7.0.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.4-2 Remi Collet <remi@fedoraproject.org> 7.0.4-1 Remi Collet <remi@fedoraproject.org> 7.0.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.3.20160129gitdd3d10c Remi Collet <remi@fedoraproject.org> 7.0.3-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.2-1 Remi Collet <remi@fedoraproject.org> 7.0.2-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.1-1 Remi Collet <remi@fedoraproject.org> 7.0.1-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-2 Remi Collet <remi@fedoraproject.org> 7.0.0-1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.26.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.25.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.24.RC7 Remi Collet <remi@fedor� x��������������H������� X � ri�yatch�Q�������W������6 ansi�$ & ���������������� 6 5 7 � to fsdaemon_t BZ(1564143)
- Allow abrt_t domain to map dos files BZ(1564193)
- Add dac_override capability to automount_t domain
- Allow keepalived_t domain to connect to system dbus bus
- Allow nfsd_t to read nvme block devices BZ(1562554)
- Allow lircd_t domain to execute bin_t files BZ(1562835)
- Allow l2tpd_t domain to read sssd public files BZ(1563355)
- Allow logrotate_t domain to do dac_override BZ(1539327)
- Remove labeling for /etc/vmware-tools to bin_t it should be vmtools_unconfined_exec_t
- Add capability sys_resource to systemd_sysctl_t domain
- Label all /dev/rbd* devices as fixed_disk_device_t
- Allow xdm_t domain to mmap xserver_log_t files BZ(1564469)
- Allow local_login_t domain to rread udev db
- Allow systemd_gpt_generator_t to read /dev/random device
- add definition of bpf class and systemd perms - Allow accountsd_t domain to dac override BZ(1561304)
- Allow cockpit_ws_t domain to read system state BZ(1561053)
- Allow postfix_map_t domain to use inherited user ptys BZ(1561295)
- Allow abrt_dump_oops_t domain dac override BZ(1561467)
- Allow l2tpd_t domain to run stream connect for sssd_t BZ(1561755)
- Allow crontab domains to do dac override
- Allow snapperd_t domain to unmount fs_t filesystems
- Allow pcp processes to read fixed_disk devices BZ(1560816)
- Allow unconfined and confined users to use dccp sockets
- Allow systemd to manage bpf dirs/files
- Allow traceroute_t to create dccp_sockets Fedora Atomic host using for temp files /sysroot/tmp patch, we should label same as /tmp adding file context equivalence BZ(1559531) - Allow smbcontrol_t to mmap samba_var_t files and allow winbind create sockets BZ(1559795)
- Allow nagios to exec itself and mmap nagios spool files BZ(1559683)
- Allow nagios to mmap nagios config files BZ(1559683)
- Fixing Ganesha module
- Fix typo in NetworkManager module
- Fix bug in gssproxy SELinux module
- Allow abrt_t domain to mmap container_file_t files BZ(1525573)
- Allow networkmanager to be run ssh client BZ(1558441)
- Allow pcp domains to do dc override BZ(1557913)
- Dontaudit pcp_pmie_t to reaquest lost kernel module
- Allow pcp_pmcd_t to manage unpriv userdomains semaphores BZ(1554955)
- Allow httpd_t to read httpd_log_t dirs BZ(1554912)
- Allow fail2ban_t to read system network state BZ(1557752)
- Allow dac override capability to mandb_t domain BZ(1529399)
- Allow collectd_t domain to mmap collectd_var_lib_t files BZ(1556681)
- Dontaudit bug in kernel 4.16 when domains requesting loading kernel modules BZ(1555369)
- Add Domain transition from gssproxy_t to httpd_t domains BZ(1548439)
- Allow httpd_t to mmap user_home_type files if boolean httpd_read_user_content is enabled BZ(1555359)
- Allow snapperd to relabel snapperd_data_t
- Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets
- Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled
- Allow insmod_t to load modules BZ(1544189)
- Allow systemd_rfkill_t domain sys_admin capability BZ(1557595)
- Allow systemd_networkd_t to read/write tun tap devices
- Add shell_exec_t file as domain entry for init_t
- Label also /run/systemd/resolved/ as systemd_resolved_var_run_t BZ(1556862)
- Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module BZ(1557347)
- Improve userdom_mmap_user_home_content_files
- Allow systemd_logind_t domain to setattributes on fixed disk devices BZ(1555414)
- Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module
- Allow semanage_t domain mmap usr_t files
- Add new boolean: ssh_use_tcpd() - Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets
- Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled
- Allow semanage_t domain mmap usr_t files
- Add new boolean: ssh_use_tcpd() - Update screen_role_template() to allow also creating sockets in HOMEDIR/screen/
- Allow newrole_t dacoverride capability
- Allow traceroute_t domain to mmap packet sockets
- Allow netutils_t domain to mmap usmmon device
- Allow netutils_t domain to use mmap on pack� x�������������P8������� X � ry}�yrati���������������� ance�$ y ���������������� � � � � ot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root puppet-agent-6.28.0-1.el8.src.rpm ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� x��������������'������� X � irO�ynet>�� p2�������a let �$ ���������������� �a �a �a � i@fedoraproject.org> 5.6.2-1 Remi Collet <remi@fedoraproject.org> 5.6.1-1 Remi Collet <remi@fedoraproject.org> 5.6.0-1.1 Remi Collet <remi@fedoraproject.org> 5.6.0-1 Remi Collet <rcollet@redhat.com> - 5.6.0-0.1.RC4 Remi Collet <rcollet@redhat.com> - 5.5.6-10 Remi Collet <rcollet@redhat.com> - 5.5.6-9 Remi Collet <rcollet@redhat.com> - 5.5.6-8 Remi Collet <rcollet@redhat.com> - 5.5.6-7 Remi Collet <rcollet@redhat.com> - 5.5.6-6 Remi Collet <rcollet@redhat.com> - 5.5.6-5 Remi Collet <rcollet@redhat.com> - 5.5.6-4 Remi Collet <rcollet@redhat.com> 5.5.6-2 Remi Collet <rcollet@redhat.com> 5.5.6-0 Remi Collet <rcollet@redhat.com> 5.5.5-1 Remi Collet <rcollet@redhat.com> 5.5.4-1 Remi Collet <rcollet@redhat.com> 5.5.3-1 Remi Collet <rcollet@redhat.com> 5.5.1-1 Remi Collet <rcollet@redhat.com> 5.4.16-6 Remi Collet <rcollet@redhat.com> 5.4.16-5 Remi Collet <rcollet@redhat.com> 5.4.16-4 Remi Collet <rcollet@redhat.com> - 5.4.16-3 Remi Collet <rcollet@redhat.com> 5.4.16-2 Remi Collet <rcollet@redhat.com> 5.4.16-1 Remi Collet <rcollet@redhat.com> 5.4.14-3 Remi Collet <rcollet@redhat.com> 5.4.14-2 Remi Collet <rcollet@redhat.com> 5.4.14-1 Remi Collet <rcollet@redhat.com> 5.4.13-1 Remi Collet <rcollet@redhat.com> 5.4.11-1 Remi Collet <rcollet@redhat.com> 5.4.10-1 Remi Collet <rcollet@redhat.com> 5.4.9-1 Remi Collet <rcollet@redhat.com> 5.4.8-7 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-5 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-3 Joe Orton <jorton@redhat.com> - 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-3 Remi Collet <rcollet@redhat.com> 5.4.8-2.1 Remi Collet <rcollet@redhat.com> 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-1.2 Remi Collet <rcollet@redhat.com> 5.4.8-1 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <rcollet@redhat.com> 5.4.7-2 Remi Collet <rcollet@redhat.com> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.7-10 Remi Collet <remi@fedoraproject.org> 5.4.7-9 Remi Collet <rcollet@redhat.com> 5.4.7-8 Remi Collet <rcollet@redhat.com> 5.4.7-7 Remi Collet <rcollet@redhat.com> 5.4.7-6 Remi Collet <rcollet@redhat.com> 5.4.7-5 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <remi@fedoraproject.org> 5.4.7-2 Remi Collet <remi@fedoraproject.org> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.6-2 Remi Collet <remi@fedoraproject.org> 5.4.6-1 Remi Collet <remi@fedoraproject.org> 5.4.5-1 Remi Collet <remi@fedoraproject.org> 5.4.4-4 Remi Collet <remi@fedoraproject.org> 5.4.4-3 Remi Collet <remi@fedoraproject.org> 5.4.4-2 Remi Collet <remi@fedoraproject.org> 5.4.4-1 Remi Collet <remi@fedoraproject.org> 5.4.3-1 Remi Collet <remi@fedoraproject.org> 5.4.2-1 Remi Collet <remi@fedoraproject.org> 5.4.1-1 Joe Orton <jorton@redhat.com> - 5.4.0-6 Remi Collet <remi@fedoraproject.org> 5.4.0-5 Joe Orton <jorton@redhat.com> - 5.4.0-4 Joe Orton <jorton@redhat.com> - 5.4.0-3 Joe Orton <jorton@redhat.com> - 5.4.0-2 Remi Collet <remi@fedoraproject.org> 5.4.0-1 Remi Collet <remi@fedoraproject.org> 5.4.0-0.4.RC8 Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7 Remi Collet <remi@fedoraproject.org> 5.4.0-0.2.RC6 Remi Collet <remi@fedoraproject.org> 5.4.0-0.1.RC6 Remi Collet <remi@fedoraproject.org> 5.3.8-4.4 Remi Collet <remi@fedoraproject.org> 5.3.8-4.3 Adam Jackson <ajax@redhat.com> - 5.3.8-4.2 Marcela Mašláňová <mmaslano@redhat.com> - 5.3.8-3.2 Peter Schiffer <pschiffe@redhat.com> - 5.3.8-3.1 Remi Collet <remi@fedoraproject.org> 5.3.8-3 Remi Collet <remi@fedoraproject.org> 5.3.8-2 Remi Collet <remi@fedoraproject.org> 5.3.8-1 Remi Collet <remi@fedoraproject.org> 5.3.7-1 Joe Orton <jorton@redhat.com> - 5.3.6-4 Remi Collet <Fedora@famillecollet.com> 5.3.6-3 Remi Collet <Fedora@famillecollet.com> 5.3.6-2 Remi Collet <Fedora@famillecollet.com> 5.3.6-1 Joe Orton <jorton@redhat.com> - 5.3.5-6 Caolán McNamara <caolanm@redhat.com> 5.3.5-5 Remi Collet <Fedora@famillecollet.com> 5� x�������������@������� X � a3F�y5ba0 S # �L - Au�$
���������������� �L �L �L � lude session.d directory in package manifest - Update to 1.1.1 - Don't require libxml-python needlessly (#245300) - Require pkgconfig in -devel, not in -x11 (#244385) - Move the dbus-launch man page to the x11 subpackage - Start SELinux thread after setuid call (#221168) - Require pkgconfig in the -devel package - Update to 1.0.2
- Drop obsolete patches
- Fix directory ownership issues (#233753) - CVE-2006-6107: D-Bus denial of service - Include docs, and make them show up in devhelp - Update to 1.0.1
- Apply patch from Thiago Macieira <thiago@kde.org> to
fix failed assertion in threading implementation
- Drop some crazy looking build time speed optimization - add patch to fix dbus_threads_init_default - update to D-Bus 1.0.0 "Blue Bird"
- build with verbose mode on but tests and asserts off - dont let dbus-launch session sitter crash in the
non-autolaunch code path (bug 214649) - Add /var/lib/dbus directory to %files - Update to D-Bus 1.0 RC 3 (0.95)
- don't build with tests on - Update to D-Bus 1.0 RC 2 (0.94) - rebuilt for unwind info generation, broken in gcc-4.1.1-21 - Add a Requires for libxml2-python (#201877) - Updated from upstream D-Bus 1.0 RC 1 (0.93) - Only audit on the system bus - Update to 0.92
- remove old patches - add patch to fix timeout removal assertion - add patch to fix taking a connection ref when it is locked - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
in the dbus-1.pc file after compile - Move arch include file from lib to libdir - add patch that pregenerates the xml introspect file so d-bus doesn't
have to be running suring the build. - s/--libdir=\/lib/--libdir=%{_lib}/ in configure stage
- add / before %{_lib} - Remove some remnants of the GLIB bindings from configure.in - Update to upstream 0.90
- Split out bindings - rebuild - Update to upstream 0.62
- Remove mono for s390s - Rebuild - add buildrequires libICE-devel, libSM-devel, libcap-devel
- change buildrequires form libX11 to libX11-devel - Bump and rebuild. Add a BR and R for libX11 - Backport patch from dbus-connection.c
- Allows interfaces to be NULL in the message header as per the spec
- Fixes a problem with pendings calls blocking on a data starved socket - New audit patch - ABI hasn't changed so add patch that makes dbus-sharp think
it is still 0.60 (mono uses hard version names so any change
means apps need to recompile) - Make sure chkconfig rests the priorities so we can start earlier - Upgrade to upstream version 0.61
- remove python callchain patch
- update avc patch - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - Add patch to fix the python callchain
- Symlink dbus-send to /usr/bin because some applications
look for it there - Fix up patch to init script so it refrences /bin not /usr/bin - move base libraries and binaries to /bin and /lib so they can be started
before /usr is mounted on network mounted /usr systems
- have D-Bus start early - mono now built on s390x - Don't exclude non-mono arches - Add dbus-sharp sub-package - rebuilt - upgrade to 0.60 - upgrade to 0.50 - upgrade to 0.36.2 which fixes an exploit where
users can attach to another user's session bus (CAN-2005-0201) - Upgrade to dbus-0.36.1
- Install all files to lib64/ on 64bit machines - Upgrade to dbus-0.36
- Split modules that go into %{_lib}/python2.4/site-packages/dbus
and those that go into %{python_sitelib}/dbus (they differ on 64bit)
- Renable Qt bindings since packages in core can use them - Upgrade to dbus-0.35.2
- removed dbus-0.34-kill-babysitter.patch
- removed dbus-0.34-python-threadsync.patch
- removed dbus-0.23-selinux-avc-audit.patch
- added dbus-0.35.2-selinux-avc-audit.patch
- take out restarts on upgrade - Upgrade to dbus-0.34
- added dbus-0.34-kill-babysitter.patch
- added dbus-0.34-python-threadsync.patch
- remove dbus-0.32-print_child_pid.patch
- remove dbus-0.32-deadlock-fix.patch
- remove dbus-0.33-types.patch - Add new libaudit patch from Steve Grub and enable in configure
(Bug #159218) - remove stat� x��������������������� X � uH�ysess`� (��������L orre�$ ���������������� �L �L �L � ks. - rebuild in fc2, cups now updated - update to upstream 0.20 - hmm, dbus doesn't support uids in the config file. fix. - put uid instead of username in the config file, to keep things working with name change - make subpackages require the specific release, not just version, of base package - change system user "messagebus" -> "dbus" to be under 8 chars - see if removing qt subpackage for now will get us through the build system,
qt bindings not useful yet anyway - 0.13 fixes a little security oops - break the tiny dbus-launch that depends on X into separate package
so a CUPS server doesn't need X installed - rebuilt - 0.11.91 cvs snap properly merges system.d - build a cvs snap with a few more fixes - fix a crash that was breaking cups - 0.11 - use rc.d/init.d not init.d, bug #90192
- include the new man pages - 0.9
- export QTDIR explicitly
- re-enable qt, the problem was most likely D-BUS configure - update from CVS with a fix to set uid after gid - new cvs snap that actually forks to background and changes
user it's running as and so forth
- create our system user in pre - fix for "make check" test that required a home directory - disable qt for now because beehive hates me
- pull a slightly newer cvs snap that creates socket directory
- cat the make check log after make check fails - initial build /bin/sh /bin/sh /bin/sh /bin/sh
! " 5 6 7 8 9 : ; 1:1.12.8-26.el8 1:1.12.8-26.el8
dbus dbus-cleanup-sockets dbus-daemon dbus-run-session dbus-test-tool .build-id 03 b16c1283d036085f8e73da8b23020fb13210a4 43 9e5c9cef6a9e5c089d9a1c425c9b2f42eeecd4 76 bb4d0ea3097ea14f877392c739c28f6c4b5c12 a0 b6a02cd6f672d6a5a2fc7bcff3e7901db05fcd e4 f3a1395752122633cfc6c760e84d1d28056884 dbus.service dbus.socket messagebus.service dbus.service dbus.socket dbus.service dbus.socket dbus.socket dbus.conf dbus-1 dbus-daemon-launch-helper dbus-daemon AUTHORS ChangeLog HACKING NEWS README dbus-daemon COPYING dbus-cleanup-sockets.1.gz dbus-daemon.1.gz dbus-run-session.1.gz dbus-test-tool.1.gz dbus /run/ /usr/bin/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/03/ /usr/lib/.build-id/43/ /usr/lib/.build-id/76/ /usr/lib/.build-id/a0/ /usr/lib/.build-id/e4/ /usr/lib/systemd/system/ /usr/lib/systemd/system/multi-user.target.wants/ /usr/lib/systemd/system/sockets.target.wants/ /usr/lib/systemd/user/ /usr/lib/systemd/user/sockets.target.wants/ /usr/lib/tmpfiles.d/ /usr/libexec/ /usr/libexec/dbus-1/ /usr/share/doc/ /usr/share/doc/dbus-daemon/ /usr/share/licenses/ /usr/share/licenses/dbus-daemon/ /usr/share/man/man1/ /var/lib/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu
directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=76bb4d0ea3097ea14f877392c739c28f6c4b5c12, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x� x������������� �������� X � wh��yhey x3 x� X rent�$ ���������������� X X X � 12-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.11-1 Remi Collet <remi@fedoraproject.org> 5.6.11-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.10-1 Remi Collet <remi@fedoraproject.org> 5.6.10-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.9-1 Remi Collet <remi@fedoraproject.org> 5.6.9-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.8-2 Remi Collet <remi@fedoraproject.org> 5.6.8-1 Remi Collet <remi@fedoraproject.org> 5.6.8-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.8-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.7-1 Remi Collet <remi@fedoraproject.org> 5.6.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.6-1 Remi Collet <remi@fedoraproject.org> 5.6.5-1 Remi Collet <rcollet@redhat.com> 5.6.5-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.4-2 Remi Collet <remi@fedoraproject.org> 5.6.4-1 Remi Collet <remi@fedoraproject.org> 5.6.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.3-3 Remi Collet <remi@fedoraproject.org> 5.6.3-2 Remi Collet <remi@fedoraproject.org> 5.6.3-1 Remi Collet <remi@fedoraproject.org> 5.6.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.2-1 Remi Collet <remi@fedoraproject.org> 5.6.1-1 Remi Collet <remi@fedoraproject.org> 5.6.0-1.1 Remi Collet <remi@fedoraproject.org> 5.6.0-1 Remi Collet <rcollet@redhat.com> - 5.6.0-0.1.RC4 Remi Collet <rcollet@redhat.com> - 5.5.6-10 Remi Collet <rcollet@redhat.com> - 5.5.6-9 Remi Collet <rcollet@redhat.com> - 5.5.6-8 Remi Collet <rcollet@redhat.com> - 5.5.6-7 Remi Collet <rcollet@redhat.com> - 5.5.6-6 Remi Collet <rcollet@redhat.com> - 5.5.6-5 Remi Collet <rcollet@redhat.com> - 5.5.6-4 Remi Collet <rcollet@redhat.com> 5.5.6-2 Remi Collet <rcollet@redhat.com> 5.5.6-0 Remi Collet <rcollet@redhat.com> 5.5.5-1 Remi Collet <rcollet@redhat.com> 5.5.4-1 Remi Collet <rcollet@redhat.com> 5.5.3-1 Remi Collet <rcollet@redhat.com> 5.5.1-1 Remi Collet <rcollet@redhat.com> 5.4.16-6 Remi Collet <rcollet@redhat.com> 5.4.16-5 Remi Collet <rcollet@redhat.com> 5.4.16-4 Remi Collet <rcollet@redhat.com> - 5.4.16-3 Remi Collet <rcollet@redhat.com> 5.4.16-2 Remi Collet <rcollet@redhat.com> 5.4.16-1 Remi Collet <rcollet@redhat.com> 5.4.14-3 Remi Collet <rcollet@redhat.com> 5.4.14-2 Remi Collet <rcollet@redhat.com> 5.4.14-1 Remi Collet <rcollet@redhat.com> 5.4.13-1 Remi Collet <rcollet@redhat.com> 5.4.11-1 Remi Collet <rcollet@redhat.com> 5.4.10-1 Remi Collet <rcollet@redhat.com> 5.4.9-1 Remi Collet <rcollet@redhat.com> 5.4.8-7 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-5 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-3 Joe Orton <jorton@redhat.com> - 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-3 Remi Collet <rcollet@redhat.com> 5.4.8-2.1 Remi Collet <rcollet@redhat.com> 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-1.2 Remi Collet <rcollet@redhat.com> 5.4.8-1 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <rcollet@redhat.com> 5.4.7-2 Remi Collet <rcollet@redhat.com> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.7-10 Remi Collet <remi@fedoraproject.org> 5.4.7-9 Remi Collet <rcollet@redhat.com> 5.4.7-8 Remi Collet <rcollet@redhat.com> 5.4.7-7 Remi Collet <rcollet@redhat.com> 5.4.7-6 Remi Collet <rcollet@redhat.com> 5.4.7-5 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <remi@fedoraproject.org> 5.4.7-2 Remi Collet <remi@fedoraproject.org> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.6-2 Remi Collet <remi@fedoraproject.org> 5.4.6-1 Remi Collet <remi@fedoraproject.org> 5.4.5-1 Remi Collet <remi@fedoraproject.org> 5.4.4-4 Remi Collet <remi@fedoraproject.org> 5.4.4-3 Remi Collet <remi@fedoraproject.org> 5.4.4-2 Remi Collet <remi@fedoraproject.org> 5.4.4-1 Remi Collet <remi@fedoraproject.org> 5.4.3-1 Remi Collet <remi@fedoraproject.org> 5.4.2-1 Remi Collet <remi@fedoraproject.org> 5.4.1-1 Joe Orton <jorton@redhat.com> - 5.4.0-6 Remi Collet <remi@fed� x�������������������� X � - ��yh64:� �I������X
- t�$ ���������������� X X � C �� ? �� d � � � � & � c � � � � � � � � � = � I � U � k � � � � � �
� � &
( 0 : D l t � � ( � 8 V 9
X V : D� V G �l H �t I �| X �� Y �� \ �� ] �� ^ �� b �/ d � e �� f �� l �� t �� u �� v �� � �L � �P � �l � �r � �� �� �� �� 6
� �; � �| �� �� g �� h �� C php56-php-xmlrpc 5.6.40 39.el8.remi A module for PHP applications which use the XML-RPC protocol The php56-php-xmlrpc package contains a dynamic shared object that will add
support for the XML-RPC protocol to PHP. d�'�builder.remirepo.net [�Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine PHP and BSD Remi Collet Development/Languages http://www.php.net/ linux x86_64 5 [`���� d�&�d�&�79ad9466318efa372b33cff791d0c57f6b0fabe78fcbe71e0c33337a65a88ed1 35045673acc5d0a4493b66b1f15e6ca991a4eebc88199cb911c096e885184181 root root root root php56-php-5.6.40-39.el8.remi.src.rpm ��������config(php56-php-xmlrpc) php56-php-xmlrpc php56-php-xmlrpc(x86-64) @ @ @ @ @ @ @ @ @ @ @
@ config(php56-php-xmlrpc) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libdl.so.2()(64bit) liblzma.so.5()(64bit) libm.so.6()(64bit) libxml2.so.2()(64bit) libz.so.1()(64bit) php56-php-xml(x86-64) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 5.6.40-39.el8.remi 5.6.40-39.el8.remi 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d�E@d��@d�q@c�w�c���c2�b�=�a�K�ap�a7T@a'�@`ٹ�`���`�N@`�@_�@_s!�_)M�^��@^���^p��^M#@^K�^)��]��@]��@]fl�]@1@]G@\�"�\�8�\�N�\���\��@\~d�\}@\E�@\5�@\��[�^�[���[~��[P}@Z�m�Z��@Z�`@Z���ZL�Y�|�Y��Y�@Y^&@Y^&@X��X��X���X��@Xo��XIK@X6�@X#�X=�X �W�@Wڍ@W�i�W��W�.@W��@W~D@Wu �Wj}�WYZ@WF�@W4p@W!�@W�@V�@V�@V�@V�'@VŲ@V��V�T@V��@V��Vii@VV�@VD@V2
@V �@V �U��@U�6@U�L@U���U�V�U��@Uyx@Ug@UU�UB@U?v@U/�@U'�@U�U
�@T�9�T��@T���T�C@T��T�p@T�5�Tw@Tu��Th��Td�@TV �T?�@T.��T k@S��S��Sr @S,)�S?�S��R�@R��@R��@R�R�R�R�R_�@R:�@R��Q��@Q�Y@Q�Y@Q��Q��Q��@Q��@Q��Qy�Qf��Q@j@P��@PѬ@P��P� @P� @P�*�P��@P��@P�)�P�)�P���P���P���P���P���P�5@P{��Px@Pl(�Pj�@Pi��Pi��Pe�@P`K@PY��PY��PY��PXb@PW�PS @P2&�P.2@P H@O�@O�@O� �O��@O�\@O�s@O��@O��@Ov�OtN�OpZ@OpZ@OP�@O?��O- �O �O�@O �@N��N��N��@N��@N� @NoE�NS�@NL��N 7@M���M��M���MT�Mt�Mk�@MfH@MR��M' @M�@M�@Mg�L�8�LΫ�Lʷ@L���LH2�K��@K��@K�C�K�@K
@K��K�@J��@JlE@J_@J_@J\s@JY�@J> �I�'@I��@I��I��@I��@I}��I|T@Iy�@IC��I>]�I:i@I9�I*�@I9@H˫@H�(�H{?�Hv@G��G�Z@Gt�@GV��GV��GV@F��Fڥ�F�@F�S@F�S@F�]�F��Fw�@FiD�FA��F@f@F; @F �@F @Eّ@E�K@E��E�3@Eu_@El$�El$�Ej�@E[@E[@EG:�E#�@D�,@D��@D�b�D�b�D�(@DtJ�Dla�D_2�DX�@D;@C�@C�C�Q@Cˊ�Cǖ@C�
@C��C�f@C�q�C� @C��@C�7@C��@Cs6@CoA�CgX�C(�B�i�B{\@Bwg�Bl�B] �B] �B] �B[�@BZf�BQ,@BM7�BJ��BB��B�B �@A�@A��A��A�_�A�_�A�_�AJ�AJ�AJ�A@E�A
@Ag@Remi Collet <remi@remirepo.net> - 5.6.40-39 Remi Collet <remi@remirepo.net> - 5.6.40-38 Remi Collet <remi@remirepo.net> - 5.6.40-37 Remi Collet <remi@remirepo.net> - 5.6.40-36 Remi Collet <remi@remirepo.net> - 5.6.40-35 Remi Collet <remi@remirepo.net> - 5.6.40-34 Remi Collet <remi@remirepo.net> - 5.6.40-33 Remi Collet <remi@remirepo.net> - � x�������������������� X � 25y�y Walh������(e � m> 3�$ ���������������� � � � � dirs
- Allow mongodb_t domain to read system network state BZ(1599230)
- Allow zoneminder_t to getattr of fs_t
- Allow tgtd_t domain to create dirs in /var/run labeled as tgtd_var_run_t BZ(1492377)
- Allow iscsid_t domain to mmap sysfs_t files
- Allow httpd_t domain to mmap own cache files
- Add sys_resource capability to nslcd_t domain
- Fixed typo in logging_audisp_domain interface
- Add interface files_mmap_all_files()
- Add interface iptables_read_var_run()
- Allow systemd to mounton init_var_run_t files
- Update policy rules for auditd_t based on changes in audit version 3
- Allow systemd_tmpfiles_t do mmap system db files
- Don't setup unlabeled_t as an entry_type
- Allow unconfined_service_t to transition to container_runtime_t
- Improve domain_transition_pattern to allow mmap entrypoint bin file. - Allow cupsd_t domain to mmap cupsd_etc_t files
- Allow kadmind_t domain to mmap krb5kdc_principal_t
- Allow virtlogd_t domain to read virt_etc_t link files
- Allow dirsrv_t domain to read crack db
- Dontaudit pegasus_t to require sys_admin capability
- Allow mysqld_t domain to exec mysqld_exec_t binary files
- Allow abrt_t odmain to read rhsmcertd lib files
- Allow winbind_t domain to request kernel module loads
- Allow tomcat_domain to read cgroup_t files
- Allow varnishlog_t domain to mmap varnishd_var_lib_t files
- Allow innd_t domain to mmap news_spool_t files
- Label HOME_DIR/mozilla.pdf file as mozilla_home_t instead of user_home_t
- Allow fenced_t domain to reboot
- Allow amanda_t domain to read network system state
- Allow abrt_t domain to read rhsmcertd logs
- Fix typo in radius policy
- Update zoneminder policy to reflect latest features in zoneminder BZ(1592555)
- Label /usr/bin/esmtp-wrapper as sendmail_exec_t
- Update raid_access_check_mdadm() interface to dontaudit caller domain to mmap mdadm_exec_t binary files
- Dontaudit thumb to read mmap_min_addr
- Allow chronyd_t to send to system_cronjob_t via unix dgram socket BZ(1494904)
- Allow mpd_t domain to mmap mpd_tmpfs_t files BZ(1585443)
- Allow collectd_t domain to use ecryptfs files BZ(1592640)
- Dontaudit mmap home type files for abrt_t domain
- Allow fprintd_t domain creating own tmp files BZ(1590686)
- Allow collectd_t domain to bind on bacula_port_t BZ(1590830)
- Allow fail2ban_t domain to getpgid BZ(1591421)
- Allow nagios_script_t domain to mmap nagios_log_t files BZ(1593808)
- Allow pcp_pmcd_t domain to use sys_ptrace usernamespace cap
- Allow sssd_selinux_manager_t to read/write to systemd sockets BZ(1595458)
- Allow radiusd_t domain to mmap radius_etc_rw_t files
- Allow git_script_t domain to read and mmap gitosis_var_lib_t files BZ(1591729)
- Add dac_read_search capability to thumb_t domain
- Add dac_override capability to cups_pdf_t domain BZ(1594271)
- Add net_admin capability to connntrackd_t domain BZ(1594221)
- Allow gssproxy_t domain to domtrans into gssd_t domain BZ(1575234)
- Fix interface init_dbus_chat in oddjob SELinux policy BZ(1590476)
- Allow motion_t to mmap video devices BZ(1590446)
- Add dac_override capability to mpd_t domain BZ(1585358)
- Allow fsdaemon_t domain to write to mta home files BZ(1588212)
- Allow virtlogd_t domain to chat via dbus with systemd_logind BZ(1589337)
- Allow sssd_t domain to write to general cert files BZ(1589339)
- Allow l2tpd_t domain to sends signull to ipsec domains BZ(1589483)
- Allow cockpit_session_t to read kernel network state BZ(1596941)
- Allow devicekit_power_t start with nnp systemd security feature with proper SELinux Domain transition BZ(1593817)
- Allows systemd to get attribues of core kernel interface BZ(1596928)
- Dontaudit syslogd to watching top llevel dirs when imfile module is enabled
- Revert "Allow unconfined and sysadm users to use bpftool BZ(1591440)"
- Allow userdomain sudo domains to use generic ptys
- Allow systemd labeled as init_t to get sysvipc info BZ(1600877)
- Label /sbin/xtables-legacy-multi and /sbin/xtables-nft-multi as iptables_exec_t BZ(1600690)
- Remove duplicated userdom_delete_user_home_content_files
- Add systemd_dbus_chat_resolve� x�������������x������� X � fw��yr@re��������(������� .22 �$ m ���������������� �� G �� � port used by unbound
- Fix file name transition for alsa and confined users - Turn on mock_t and thumb_t for unconfined domains - Policy update should not modify local contexts - Remove ada policy - Remove tzdata policy
- Add labeling for udev
- Add cloudform policy
- Fixes for bootloader policy - Add policies for nova openstack - Add fixes for nova-stack policy - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
- Allow init process to setrlimit on itself
- Take away transition rules for users executing ssh-keygen
- Allow setroubleshoot_fixit_t to read /dev/urand
- Allow sshd to relbale tunnel sockets
- Allow fail2ban domtrans to shorewall in the same way as with iptables
- Add support for lnk files in the /var/lib/sssd directory
- Allow system mail to connect to courier-authdaemon over an unix stream socket - Add passwd_file_t for /etc/ptmptmp - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
- Make corosync to be able to relabelto cluster lib fies
- Allow samba domains to search /var/run/nmbd
- Allow dirsrv to use pam
- Allow thumb to call getuid
- chrome less likely to get mmap_zero bug so removing dontaudit
- gimp help-browser has built in javascript
- Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
- Re-write glance policy - Move dontaudit sys_ptrace line from permissive.te to domain.te
- Remove policy for hal, it no longer exists - Don't check md5 size or mtime on certain config files - Remove allow_ptrace and replace it with deny_ptrace, which will remove all
ptrace from the system
- Remove 2000 dontaudit rules between confined domains on transition
and replace with single
dontaudit domain domain:process { noatsecure siginh rlimitinh } ; - Fixes for bootloader policy
- $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
- Allow nsplugin to read /usr/share/config
- Allow sa-update to update rules
- Add use_fusefs_home_dirs for chroot ssh option
- Fixes for grub2
- Update systemd_exec_systemctl() interface
- Allow gpg to read the mail spool
- More fixes for sa-update running out of cron job
- Allow ipsec_mgmt_t to read hardware state information
- Allow pptp_t to connect to unreserved_port_t
- Dontaudit getattr on initctl in /dev from chfn
- Dontaudit getattr on kernel_core from chfn
- Add systemd_list_unit_dirs to systemd_exec_systemctl call
- Fixes for collectd policy
- CHange sysadm_t to create content as user_tmp_t under /tmp - Shrink size of policy through use of attributes for userdomain and apache - Allow virsh to read xenstored pid file
- Backport corenetwork fixes from upstream
- Do not audit attempts by thumb to search config_home_t dirs (~/.config)
- label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
- allow thumb to read generic data home files (mime.type) - Allow nmbd to manage sock file in /var/run/nmbd
- ricci_modservice send syslog msgs
- Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
- Allow systemd_logind_t to manage /run/USER/dconf/user - Fix missing patch from F16 - Allow logrotate setuid and setgid since logrotate is supposed to do it
- Fixes for thumb policy by grift
- Add new nfsd ports
- Added fix to allow confined apps to execmod on chrome
- Add labeling for additional vdsm directories
- Allow Exim and Dovecot SASL
- Add label for /var/run/nmbd
- Add fixes to make virsh and xen working together
- Colord executes ls
- /var/spool/cron is now labeled as user_cron_spool_t - Stop complaining about leaked file descriptors during install - Remove java and mono module and merge into execmem - Fixes for thumb policy and passwd_file_t - Fixes caused by the labeling of /etc/passwd
- Add thumb.patch to transition unconfined_t to thumb_t for Rawhide - Add support for Clustered Samba commands
- Allow ricci_modrpm_t to send log msgs
- move permissive virt_qmf_t from virt.te to permissivedomains.te
- Allow ssh_t to use kernel keyrings
- Add policy for libvirt-qmf and more fixes for linux containers
- I� x������������������� X � Maw�yelta��������`� � _dom�$ ���������������� � � � � es.conf to the git repo
- Add few interfaces to optional block
- Allow sysadm_t and staff_t domain to manage systemd unit files
- Add interface dev_map_userio_dev()
Resolves: rhbz#1623411
Resolves: rhbz#1624648
Resolves: rhbz#1596618
Resolves: rhbz#1574878
Resolves: rhbz#1577324
Resolves: rhbz#1625202
Resolves: rhbz#1581715
Resolves: rhbz#1625127 - Allow ovs-vswitchd labeled as openvswitch_t domain communicate with qemu-kvm via UNIX stream socket
Resolves: rhbz#1621142
- Add interface devicekit_mounton_var_lib()
- Allow httpd_t domain to mmap tmp files
- Allow tcsd_t domain to have dac_override capability
- Allow cupsd_t to rename cupsd_etc_t files
- Allow iptables_t domain to create rawip sockets
- Allow amanda_t domain to mmap own tmpfs files
- Allow fcoemon_t domain to write to sysfs_t dirs
- Allow dovecot_auth_t domain to have dac_override capability
- Allow geoclue_t domain to mmap own tmp files
- Allow chronyc_t domain to read network state
- Allow apcupsd_t domain to execute itself
- Allow modemmanager_t domain to stream connect to sssd
- Allow chonyc_t domain to rw userdomain pipes
- Update dirsrv_read_share() interface to allow caller domain to mmap dirsrv_share_t files
- Update dirsrvadmin_script_t policy to allow read httpd_tmp_t symlinks
- Allow nagios_script_t domain to mmap nagios_spool_t files
- Allow geoclue_t domain to mmap geoclue_var_lib_t files
- Allow geoclue_t domain to map generic certs
- Update munin_manage_var_lib_files to allow manage also dirs
- Allow nsd_t domain to create new socket file in /var/run/nsd.ctl
- Fix typo in virt SELinux policy module
- Allow virtd_t domain to create netlink_socket
- Allow rpm_t domain to write to audit
- Allow nagios_script_t domain to mmap nagios_etc_t files
- Update nscd_socket_use() to allow caller domain to stream connect to nscd_t
- Allow kdumpctl_t domain to getattr fixed disk device in mls
- Fix typo in stapserver policy
- Dontaudit abrt_t domain to write to usr_t dirs
- Revert "Allow rpcbind to bind on all unreserved udp ports"
- Allow rpcbind to bind on all unreserved udp ports
- Allow virtlogd to execute itself
- Allow stapserver several actions: - execute own tmp files - mmap stapserver_var_lib_t files - create stapserver_tmpfs_t files
- Allow ypxfr_t domain to stream connect to rpcbind and allos search sssd libs
- Allos systemd to socket activate ibacm service
- Allow dirsrv_t domain to mmap user_t files
- Allow dhcpc_t domain to read /dev/random
- Allow systemd to mounton device_var_lib_t dirs
- Allow systemd to mounton kernel system table
- Label also chr_file /dev/mtd.* devices as fixed_disk_device_t
- Allow syslogd_t domain to create netlink generic sockets
- Label /dev/tpmrm[0-9]* as tpm_device_t
- Update dev_filetrans_all_named_dev() to allow create event22-30 character files with label event_device_t
- Update userdom_security_admin() and userdom_security_admin_template() to allow use auditctl
- Allow insmod_t domain to read iptables pid files
- Allow systemd to mounton /etc
- Allow initrc_domain to mmap all binaries labeled as systemprocess_entry
- Allow xserver_t domain to start using systemd socket activation
- Tweak SELinux policy for systemd to allow DynamicUsers systemd feature
- Associate several proc labels to fs_t
- Update init_named_socket_activation() interface to allow systemd also create link files in /var/run - Dontaudit abrt_t domain to write to usr_t dirs
- Revert "Allow rpcbind to bind on all unreserved udp ports"
- Allow rpcbind to bind on all unreserved udp ports
- Allow virtlogd to execute itself
- Allow stapserver several actions: - execute own tmp files - mmap stapserver_var_lib_t files - create stapserver_tmpfs_t files
- Allow ypxfr_t domain to stream connect to rpcbind and allos search sssd libs
- Allos systemd to socket activate ibacm service
- Allow dirsrv_t domain to mmap user_t files
- Allow kdumpctl_t domain to manage kdumpctl_tmp_t fifo files
- Allow kdumpctl to write to files on all levels
- Allow httpd_t domain to mmap httpd_config_t files
- Allow sanlock_t domain to connectto to unix_st� x�������������X�������� X � t��y FSs�I�������������& #489�$ 6 ���������������� & % ' � appropriate.
- Fix lpd obsoletes tag. - Removed use of prereq and buildprereq.
- Fixed use of '%' in changelog.
- Versioned explicit obsoletes/provides.
- Use tabs throughout. - Fixed patch for STR #3425 again by adding in back-ported change from
svn revision 8929 (bug #549899). No longer need
delete-active-printer patch. - Fixed ipp authentication for servers requiring authentication for
IPP-Get-Printer-Attributes (bug #548873, STR #3458). - Ensure proper thread-safety in gnutls's use of libgcrypt
(bug #544619). - Fixed patch for STR #3425 by adding in back-ported change from svn
revision 8936 (bug #548904). - Fixed invalid read in cupsAddDest (bug #537460). - Use upstream patch to fix scheduler crash when an active printer was
deleted (rev 8914). - The scheduler did not use the Get-Job-Attributes policy for a
printer (STR #3431).
- The scheduler added two job-name attributes to each job object
(STR #3428).
- The scheduler did not clean out completed jobs when
PreserveJobHistory was turned off (STR #3425).
- The web interface did not show completed jobs (STR #3436).
- Authenticated printing did not always work when printing directly to
a remote server (STR #3435).
- Use upstream patch to stop the network backends incorrectly clearing
the media-empty-warning state (rev 8896).
- Use upstream patch to fix interrupt handling in the side-channel
APIs (rev 8896).
- Use upstream patch to handle negative SNMP string lengths (rev 8896).
- Use upstream fix for SNMP detection (bug #542857, STR #3413).
- Use the text filter for text/css files (bug #545026, STR #3442).
- Show conflicting option values in web UI (bug #544326, STR #3440).
- Use upstream fix for adjustment of conflicting options
(bug #533426, STR #3439).
- No longer requires paps. The texttopaps filter MIME conversion file
is now provided by the paps package (bug #545036).
- Moved %{_datadir}/cups/ppdc/*.h to the main package (bug #545348). - The web interface prevented conflicting options from being adjusted
(bug #533426, STR #3439). - Fixes for SNMP scanning with Lexmark printers (bug #542857, STR #3413). - Undo last change as it was incorrect. - Fixed small typos introduced in fix for bug #536741. - Do not translate russian links showing completed jobs
(bug #539354, STR #3422). - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200). - Fixed display of current driver (bug #537182, STR #3418).
- Fixed out-of-memory handling when loading jobs (bug #538054,
STR #3407). - Fixed typo in admin web template (bug #537884, STR #3403).
- Reset SIGPIPE handler for child processes (bug #537886, STR #3399). - Upstream fix for GNU TLS error handling bug (bug #537883, STR #3381). - Fixed lspp-patch to avoid memory leak (bug #536741). - Added explicit version dependency on cups-libs to cups-lpd
(bug #502205). - 1.4.2. No longer need str3380, str3332, str3356, str3396 patches.
- Removed postscript.ppd.gz (bug #533371).
- Renumbered patches and sources. - Removed stale patch from STR #2831 which was causing problems with
number-up (bug #532516). - Fix incorrectly applied patch from #STR3285 (bug #531108).
- Set the PRINTER_IS_SHARED variable for admin.cgi (bug #529634, #STR3390).
- Pass through serial parameters correctly in web interface (bug #529635, #STR3391).
- Fixed German translation (bug #531144, #STR3396). - Fix cups-lpd to create unique temporary data files (bug #529838). - Fixed German translation (bug #529575, STR #3380). - Don't ship pstoraster -- it is now provided by the ghostscript-cups
package. - Fixed naming of 'Generic PostScript Printer' entry. - Use upstream patch for STR #3356 (bug #526405). - Fixed orientation of page labels when printing text in landscape
mode (bug #520141, STR #3334). - Don't use cached PPD for raw queue (bug #526405, STR #3356). - Fixed cups.init to be LSB compliant (bug #521641) - Changed cups.init to be LSB compliant (bug #521641), i.e.
return code "2" (instead of "3") if invalid arguments
return code "4" if restarting service under nonprivileged user
return� x�������������@�������� X � deF�y(#16������� �@ ldfl�$ 1 ���������������� �@ �@ � G � ? � d � � � � � < � � � � � � � � � � � � � � � � � 7 � = D � �
� �
p � P t � 8 ( 4 8 < 9 � : � G � H � I ( X 8 Y H \ d ] � ^ � b j d � e � f � l � t � u v \ w � x � y
� 4 � 8 � > � � � � 6 � � 6
= � � � � g � h � C libatomic_ops 7.6.2 3.el8 Atomic memory update operations Provides implementations for atomic memory update operations on a
number of architectures. This allows direct use of these in reasonably
portable code. Unlike earlier similar packages, this one explicitly
considers memory barrier semantics, and allows the construction of code
that involves minimum overhead across a variety of architectures. `s��ord1-prod-x86build002.svc.aws.rockylinux.org *nKoji Rocky GPLv2 and MIT infrastructure@rockylinux.org Unspecified https://github.com/ivmai/libatomic_ops/ linux x86_64 , 0 -p /� � e} � F�
�A�A�A�������A큤����A큤�� `s��`s��`s��`s��`s��`s��`s��`s��`s��`s��Z?e�Z?e�Z?e�`s��`s��Z?e� 5d432851f911038aa31ad2b7880e4238b7bcad87dab3e54e6b7935e9ce4e58e6 66110659111362745eb4e44949a07795f5a1d289b54b5b5e9cec2660aeb17f62 ba9a2cd538bdf5e689355decfa2455de835b7a6c7c8f0705a56a1ac475f12920 ee2d4911d1f87c706e3787cb229dfc7d7bac0c28f1fa92fd300f2e640444764b b637b7bb63cd84507014c87a5045cfce66a9ae85fbc3e9dc16661ebdbe683248 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 f0e630c0ca489767033da5a0c869fb4231db522c5ff479ce55a853a923a00f69 ../../../../usr/lib64/libatomic_ops.so.1.1.1 ../../../../usr/lib64/libatomic_ops_gpl.so.1.1.2 libatomic_ops.so.1.1.1 libatomic_ops_gpl.so.1.1.2 � �root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root libatomic_ops-7.6.2-3.el8.src.rpm ����������������������������������������������������������������libatomic_ops libatomic_ops(x86-64) libatomic_ops.so.1()(64bit) libatomic_ops_gpl.so.1()(64bit) @ @ @ @
@ libatomic_ops.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 Zz�@Zu�@ZF.@Y�@Yx�@Y.�@X��@Wc�@V� �V� �V�=@U��@U�a@S�@S���Sr @Sr @R�@Ji�@JhP�J�I�2�H5`@G�s@F\�ETi�E��D�}�Fedora Release Engineering <releng@fedoraproject.org> - 7.6.2-3 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 7.6.2-2 Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1 Fedora Release Engineering <releng@fedoraproject.org> - 7.4.6-3 Fedora Release Engineering <releng@fedoraproject.org> - 7.4.6-2 Rex Dieter <rdieter@fedoraproject.org> - 7.4.6-1 Fedora Release Engineering <releng@fedoraproject.org> - 7.4.4-2 Rex Dieter <rdieter@fedoraproject.org> - 7.4.4-1 Rex Dieter <rdieter@fedoraproject.org> 7.4.2-9 Rex Dieter <rdieter@fedoraproject.org> - 7.4.2-8 Fedora Release Engineering <releng@fedoraproject.org> - 7.4.2-7 Peter Robinson <pbrobinson@fedoraproject.org> 7.4.2-6 Fedora Release Engineering <re� x���������������������� X � be8�y- Up�l 0m �� Upd�$ 3 ���������������� �� �� �� � aproject.org> 7.0.0-0.23.RC7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.22.RC6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.21.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.20.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.19.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.18.RC4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.17.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.16.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.15.RC2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.14.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.13.beta3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.12.beta2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.11.beta1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.10.alpha2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150617git3697f02 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150611git8cfe282 Remi Collet <remi@fedoraproject.org> 7.0.0-0.8.alpha1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150602git8a089e7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150525git6f46fa3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150525git404360f Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150518gitcee8857 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150515gitc9f27ee Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150507gitdd0b602 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150428git94f0b94 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150427git1a4d3e4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150418git1f0a624 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150416gitc77d97f Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150403gitadcf0c6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.4.20150331git463ca30 Remi Collet <remi@fedoraproject.org> 7.0.0-0.3.20150325git2fe6acd Remi Collet <remi@fedoraproject.org> 7.0.0-0.2.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.1.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 5.6.7-1 Remi Collet <remi@fedoraproject.org> 5.6.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.6-1 Remi Collet <remi@fedoraproject.org> 5.6.5-1 Remi Collet <rcollet@redhat.com> 5.6.5-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.4-2 Remi Collet <remi@fedoraproject.org> 5.6.4-1 Remi Collet <remi@fedoraproject.org> 5.6.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.3-3 Remi Collet <remi@fedoraproject.org> 5.6.3-2 Remi Collet <remi@fedoraproject.org> 5.6.3-1 Remi Collet <remi@fedoraproject.org> 5.6.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.2-1 Remi Collet <remi@fedoraproject.org> 5.6.1-1 Remi Collet <remi@fedoraproject.org> 5.6.0-1.1 Remi Collet <remi@fedoraproject.org> 5.6.0-1 Remi Collet <rcollet@redhat.com> - 5.6.0-0.1.RC4 Remi Collet <rcollet@redhat.com> - 5.5.6-10 Remi Collet <rcollet@redhat.com> - 5.5.6-9 Remi Collet <rcollet@redhat.com> - 5.5.6-8 Remi Collet <rcollet@redhat.com> - 5.5.6-7 Remi Collet <rcollet@redhat.com> - 5.5.6-6 Remi Collet <rcollet@redhat.com> - 5.5.6-5 Remi Collet <rcollet@redhat.com> - 5.5.6-4 Remi Collet <rcollet@redhat.com> 5.5.6-2 Remi Collet <rcollet@redhat.com> 5.5.6-0 Remi Collet <rcollet@redhat.com> 5.5.5-1 Remi Collet <rcollet@redhat.com> 5.5.4-1 Remi Collet <rcollet@redhat.com> 5.5.3-1 Remi Collet <rcollet@redhat.com> 5.5.1-1 Remi Collet <rcollet@redhat.com> 5.4.16-6 Remi Collet <rcollet@redhat.com> 5.4.16-5 Remi Collet <rcollet@redhat.com> 5.4.16-4 Remi Collet <rcollet@redhat.com> - 5.4.16-3 Remi Collet <rcollet@redhat.com> 5.4.16-2 Remi Collet <rcollet@redhat.com> 5.4.16-1 Remi Collet <rcollet@redhat.com> 5.4.14-3 Remi Collet <rcollet@redhat.com> 5.4.14-2 Remi Collet <rcollet@redhat.com> 5.4.14-1 Remi Collet <rcollet@redhat.com> 5.4.13-1 Remi Collet <rcollet@redhat.com> 5.4.11-1 Remi Collet <rcollet@redhat.com> 5.4.10-1 Remi Collet <rcollet@redhat.com> 5.4.9-1 Remi Collet <rcollet@redhat.com> 5.4.8-7 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-5 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8� x�������������0r������� X � AlX�ynsplh��������~�������a la_p�$ ���������������� �a �a �a � out php-cli, php-common subpackages (#177821)
- add php-pdo-abi version export (#193202) - rebuilt for new libnetsnmp - provide mod_php (#187891)
- provide php-cli (#192196)
- use correct LDAP fix (#181518)
- define _GNU_SOURCE in php_config.h and leave it defined
- drop (circular) dependency on php-pear - update to 5.1.4 - update to 5.1.3 - provide php-api (#183227)
- add provides for all builtin modules (Tim Jackson, #173804)
- own %{_libdir}/php/pear for PEAR packages (per #176733)
- add obsoletes to allow upgrade from FE4 PDO packages (#181863) - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - rebuild for new libc-client soname - only build xmlreader and xmlwriter shared (#177810) - update to 5.1.2 - rebuild again - rebuild for new net-snmp - enable short_open_tag in default php.ini again (#175381) - rebuilt - require net-snmp for php-snmp (#174800) - add /usr/share/pear back to hard-coded include_path (#174885) - rebuild for httpd 2.2 - update to 5.1.1
- remove pear subpackage
- enable pdo extensions (php-pdo subpackage)
- remove non-standard conditional module builds
- enable xmlreader extension - rebuilt against new openssl - pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528) - rebuild for new libnetsnmp - update to 5.0.5
- add fix for upstream #34435
- devel: require autoconf, automake (#159283)
- pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
- fix imagettftext et al (upstream, #161001) - ldap: restore ldap_start_tls() function - disable RPATHs in shared extensions (#156974) - build simplexml_import_dom even with shared dom (#156434)
- prevent truncation of copied files to ~2Mb (#155916)
- install /usr/bin/php from CLI build alongside CGI
- enable sysvmsg extension (#142988) - prevent build of builtin dba as well as shared extension - split out dba and bcmath extensions into subpackages
- BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
- pear: update to DB-1.7.6
- enable FastCGI support in /usr/bin/php-cgi (#149596) - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
built with the CGI SAPI (thanks to Edward Rudd, #137704)
- add php(1) man page for CLI
- fix more test cases to use -n when invoking php - rebuild for new libpq soname - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
- snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
- mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282) - build shared objects as PIC (#154195) - fix PEAR installation and bundle PEAR DB-1.7.5 package - update to 5.0.4 (#153068)
- add .phps AddType to php.conf (#152973)
- better gcc4 fix for libxmlrpc - BuildRequire mysql-devel >= 4.1
- don't mark php.ini as noreplace to make upgrades work (#152171)
- fix subpackage descriptions (#152628)
- fix memset(,,0) in Zend (thanks to Dave Jones)
- fix various compiler warnings in Zend - package mysqli extension in php-mysql
- really enable pcntl (#142903)
- don't build with --enable-safe-mode (#148969)
- use "Instant Client" libraries for oci8 module (Kai Bolay, #149873) - fix build with GCC 4 - install the ext/gd headers (#145891)
- enable pcntl extension in /usr/bin/php (#142903)
- add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
- add BuildRequire for recent pcre-devel (#147448) - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
- enable xsl extension (#142174)
- package both the xsl and dom extensions in php-xml
- enable soap extension, shared (php-soap package) (#142901)
- add patches from upstream 5.0 branch:
* Zend_strtod.c compile fixes
* correct php_sprintf return value usage - update for db4-4.3 (Robert Scheck, #140167)
- build against mysql-devel
- run tests in %check - truncate changelog at 4.3.1-1
- merge from 4.3.x package:
- enable mime_magic extension and Require: file (#130276) - fix dom/sqlite enable/without confusion - fix phpize installation for lib64 platforms
- add fix for segfault in variable parsing introduced in 5.0.2 - update to 5.0.2 (#127980)� x��������������a������� X � Pr��ye se��������� � for�$ ���������������� � � � d-errors with correct labeling. BZ(#1291085)
- Revert "Allow arping running as netutils_t sys_module capability for removing tap devices."
- Allow arping running as netutils_t sys_module capability for removing tap devices.
- Add userdom_connectto_stream() interface.
- Allow systemd-logind to read /run/utmp. BZ(#1278662) - Allow firewalld to create firewalld_var_run_t directory. BZ(1291243)
- Add interface firewalld_read_pid_files()
- Allow iptables to read firewalld pid files. BZ(1291243)
- Allow the user cronjobs to run in their userdomain
- Label ssdm binaries storedin /etc/sddm/ as bin_t. BZ(1288111)
- Merge pull request #81 from rhatdan/rawhide-base
- New access needed by systemd domains - Allow whack executed by sysadm SELinux user to access /var/run/pluto/pluto.ctl. It fixes "ipsec auto --status" executed by sysadm_t.
- Add ipsec_read_pid() interface - Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)
- Adding support for dbus communication between systemd-networkd and systemd-hostnamed. BZ(1279182)
- Update init policy to have userdom_noatsecure_login_userdomain() and userdom_sigchld_login_userdomain() called for init_t.
- init_t domain should be running without unconfined_domain attribute.
- Add a new SELinux policy for /usr/lib/systemd/systemd-rfkill.
- Update userdom_transition_login_userdomain() to have "sigchld" and "noatsecure" permissions.
- systemd needs to access /dev/rfkill on early boot.
- Allow dspam to read /etc/passwd - Set default value as true in boolean mozilla_plugin_can_network_connect. BZ(1286177) - Allow apcupsd sending mails about battery state. BZ(1274018)
- Allow pcp_pmcd_t domain transition to lvm_t. BZ(1277779)
- Merge pull request #68 from rhatdan/rawhide-contrib
- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048). #1248785
- Allow systemd-networkd to bind dhcpd ports if DHCP=yes in *.network conf file. BZ(#1280092)
- systemd-tmpfiles performs operations on System V IPC objects which requires sys_admin capability. BZ(#1279269) - Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)
- Allow abrt-hook-ccpp to change SELinux user identity for created objects.
- Allow abrt-hook-ccpp to get attributes of all processes because of core_pattern.
- Allow setuid/setgid capabilities for abrt-hook-ccpp.
- Add default labeling for /etc/Pegasus/cimserver_current.conf. It is a correct patch instead of the current /etc/Pegasus/pegasus_current.conf.
- Allow fenced node dbus msg when using foghorn witch configured foghorn, snmpd, and snmptrapd.
- cockpit has grown content in /var/run directory
- Add support for /dev/mptctl device used to check RAID status.
- Allow systemd-hostnamed to communicate with dhcp via dbus.
- systemd-logind remove all IPC objects owned by a user on a logout. This covers also SysV memory. This change allows to destroy unpriviledged user SysV shared memory segments.
- Add userdom_destroy_unpriv_user_shared_mem() interface.
- Label /var/run/systemd/shutdown directory as systemd_logind_var_run_t to allow systemd-logind to access it if shutdown is invoked.
- Access needed by systemd-machine to manage docker containers
- Allow systemd-logind to read /run/utmp when shutdown is invoked. - Merge pull request #48 from lkundrak/contrib-openfortivpn
- unbound wants to use ephemeral ports as a default configuration. Allow to use also udp sockets. - The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.
- Since /dev/log is a symlink, we need to allow relabelto also symlink. This comm� x������������� Q������� X � pe��ycies�������� n�������� able�$ g ���������������� �� �� �� � _t:fifo_file.
* These fifo_file is passed from postfix_master_t to postfix_local_t to dovecot_deliver_t
- Allow readahead to manage readahead pid dirs
- Allow readahead to read all mcs levels
- Allow mozilla_plugin_t to use nfs or samba homedirs - Allow nagios plugin to read /proc/meminfo
- Fix for mozilla_plugin
- Allow samba_net_t to create /etc/keytab
- pppd_t setting up vpns needs to run unix_chkpwd, setsched its process and write wtmp_t
- nslcd can read user credentials
- Allow nsplugin to delete mozilla_plugin_tmpfs_t
- abrt tries to create dir in rpm_var_lib_t
- virt relabels fifo_files
- sshd needs to manage content in fusefs homedir
- mock manages link files in cache dir - nslcd needs setsched and to read /usr/tmp
- Invalid call in likewise policy ends up creating a bogus role
- Cannon puts content into /var/lib/bjlib that cups needs to be able to write
- Allow screen to create screen_home_t in /root
- dirsrv sends syslog messages
- pinentry reads stuff in .kde directory
- Add labels for .kde directory in homedir
- Treat irpinit, iprupdate, iprdump services with raid policy - NetworkManager wants to read consolekit_var_run_t
- Allow readahead to create /dev/.systemd/readahead
- Remove permissive domains
- Allow newrole to run namespace_init - Add sepgsql_contexts file - Update to upstream - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
- Add puppetmaster_use_db boolean
- Fixes for zarafa policy
- Fixes for gnomeclock poliy
- Fix systemd-tmpfiles to use auth_use_nsswitch - gnomeclock executes a shell
- Update for screen policy to handle pipe in homedir
- Fixes for polyinstatiated homedir
- Fixes for namespace policy and other fixes related to polyinstantiation
- Add namespace policy
- Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
- Fixes for init, psad policy which relate with confined users
- Do not audit bootloader attempts to read devicekit pid files
- Allow nagios service plugins to read /proc - Add firewalld policy
- Allow vmware_host to read samba config
- Kernel wants to read /proc Fix duplicate grub def in cobbler
- Chrony sends mail, executes shell, uses fifo_file and reads /proc
- devicekitdisk getattr all file systems
- sambd daemon writes wtmp file
- libvirt transitions to dmidecode - Add initial policy for system-setup-keyboard which is now daemon
- Label /var/lock/subsys/shorewall as shorewall_lock_t
- Allow users to communicate with the gpg_agent_t
- Dontaudit mozilla_plugin_t using the inherited terminal
- Allow sambagui to read files in /usr
- webalizer manages squid log files
- Allow unconfined domains to bind ports to raw_ip_sockets
- Allow abrt to manage rpm logs when running yum
- Need labels for /var/run/bittlebee
- Label .ssh under amanda
- Remove unused genrequires for virt_domain_template
- Allow virt_domain to use fd inherited from virtd_t
- Allow iptables to read shorewall config - Gnome apps list config_home_t
- mpd creates lnk files in homedir
- apache leaks write to mail apps on tmp files
- /var/stockmaniac/templates_cache contains log files
- Abrt list the connects of mount_tmp_t dirs
- passwd agent reads files under /dev and reads utmp file
- squid apache script connects to the squid port
- fix name of plymouth log file
- teamviewer is a wine app
- allow dmesg to read system state
- Stop labeling files under /var/lib/mock so restorecon will not go into this
- nsplugin needs to read network state for google talk - Allow xdm and syslog to use /var/log/boot.log
- Allow users to communicate with mozilla_plugin and kill it
- Add labeling for ipv6 and dhcp - New labels for ghc http content
- nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
- pm-suspend now creates log file for append access so we remove devicekit_wri
- Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
- Fixes for greylist_milter policy - Update to upstream
- Fixes for systemd policy
- Fixes for passenger policy
- Allow staff users to run mysqld in the staff_t domain, akonadi needs � x��������������@������� X � 18b�y
- A�������� � mma�$ M ���������������� � � � � -9947
- Allow sysadm execute tcpdump in sysadm_t domain using sudo
Resolves: RHEL-15398
- Add support for syslogd unconfined scripts
Resolves: RHEL-10087
- Label /dev/wmi/dell-smbios as acpi_device_t
Resolves: RHEL-18027
- Make named_zone_t and named_var_run_t a part of the mountpoint attribute
Resolves: RHEL-1954
- Dontaudit rhsmcertd write memory device
Resolves: RHEL-17721 - Allow sudodomain read var auth files
Resolves: RHEL-16567
- Update cifs interfaces to include fs_search_auto_mountpoints()
Resolves: RHEL-14072
- Allow systemd-localed create Xserver config dirs
Resolves: RHEL-16715
- Label /var/run/auditd.state as auditd_var_run_t
Resolves: RHEL-14376
- Allow auditd read all domains process state
Resolves: RHEL-14471
- Allow sudo userdomain to run rpm related commands
Resolves: RHEL-1679
- Remove insights_client_watch_lib_dirs() interface
Resolves: RHEL-16185 - Additional permissions for ip-vrf
Resolves: RHEL-9981
- Allow ip an explicit domain transition to other domains
Resolves: RHEL-9981
- Allow winbind_rpcd_t processes access when samba_export_all_* is on
Resolves: RHEL-5845
- Allow system_mail_t manage exim spool files and dirs
Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t
Resolves: RHEL-1678
- Set default file context of HOME_DIR/tmp/.* to <<none>>
Resolves: RHEL-1099
- Improve default file context(None) of /var/lib/authselect/backups
Resolves: RHEL-3539 - Set default file context of /var/lib/authselect/backups to <<none>>
Resolves: RHEL-3539
- Add file context specification for /usr/libexec/realmd
Resolves: RHEL-2147
- Add numad the ipc_owner capability
Resolves: RHEL-2415 - Allow ssh_agent_type manage generic cache home files
Resolves: rhbz#2177704
- Add chromium_sandbox_t setcap capability
Resolves: rhbz#2221573 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 3
Resolves: rhbz#2229726 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 1/2
Resolves: rhbz#2229726
- Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
Resolves: rhbz#2177704
- Allow cloud_init create dhclient var files and init_t manage net_conf_t 2/2
Resolves: rhbz#2229726
- Make insights_client_t an unconfined domain
Resolves: rhbz#2225527
- Allow insights-client create all rpm logs with a correct label
Resolves: rhbz#2229559
- Allow insights-client manage generic logs
Resolves: rhbz#2229559 - Allow user_u and staff_u get attributes of non-security dirs
Resolves: rhbz#2216151
- Allow unconfined user filetrans chrome_sandbox_home_t 1/2
Resolves: rhbz#2221573
- Allow unconfined user filetrans chrome_sandbox_home_t 2/2
Resolves: rhbz#2221573
- Allow insights-client execmem
Resolves: rhbz#2225233
- Allow svnserve execute postdrop with a transition
Resolves: rhbz#2004843
- Do not make postfix_postdrop_t type an MTA executable file
Resolves: rhbz#2004843
- Allow samba-dcerpc service manage samba tmp files
Resolves: rhbz#2210771
- Update samba-dcerpc policy for printing
Resolves: rhbz#2210771 - Add the files_getattr_non_auth_dirs() interface
Resolves: rhbz#2076937
- Update policy for the sblim-sfcb service
Resolves: rhbz#2076937
- Dontaudit sfcbd sys_ptrace cap_userns
Resolves: rhbz#2076937
- Label /usr/sbin/sos with sosreport_exec_t
Resolves: rhbz#2167731
- Allow sa-update manage spamc home files
Resolves: rhbz#2222200
- Allow sa-update connect to systemlog services
Resolves: rhbz#2222200
- Label /usr/lib/systemd/system/mimedefang.service with antivirus_unit_file_t
Resolves: rhbz#2222200 - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
Resolves: rhbz#2213606
- Allow httpd tcp connect to redis port conditionally
Resolves: rhbz#2213965
- Exclude container-selinux manpage from selinux-policy-doc
Resolves: rhbz#2218362 - Update cyrus_stream_connect() to use sockets in /run
Resolves: rhbz#2165752
- Allow insights-client map generic log files
Resolves: rhbz#2214572
- Allow insights-client work with pipe and socket tmp files
Resolves: rhbz#2207819
- Allow insights-client getsession process permission
Resolves: rhbz#2207819
- Allow keepa� x�������������0������� X � e ��y/sha�������z�������� def�$ z ���������������� �� �� �� � rhsmcertd-worker send signull to rpm process
- Allow net_admin capability and send system log msgs
- Allow lldpad send dgram to NM
- Add networkmanager_dgram_send()
- rkhunter_var_lib_t is correct type
- Allow openlmi-storage to read removable devices
- Allow system cron jobs to manage rkhunter lib files
- Add rkhunter_manage_lib_files()
- Fix ftpd_use_fusefs boolean to allow manage also symlinks
- Allow smbcontrob block_suspend cap2
- Allow slpd to read network and system state info
- Allow NM domtrans to iscsid_t if iscsiadm is executed
- Allow slapd to send a signal itself
- Allow sslget running as pki_ra_t to contact port 8443, the secure port of the CA.
- Fix plymouthd_create_log() interface
- Add rkhunter policy with files type definition for /var/lib/rkhunter until it is fixed in rkhunter package
- Allow postfix and cyrus-imapd to work out of box
- Remove logwatch_can_sendmail which is no longer used
- Allow fcoemon to talk with unpriv user domain using unix_stream_socket
- snapperd is D-Bus service
- Allow OpenLMI PowerManagement to call 'systemctl --force reboot' - Add haproxy_connect_any boolean
- Allow haproxy also to use http cache port by default
- Fix /usr/lib/firefox/plugin-container decl
- Allow haproxy to work as simple HTTP proxy. HAProxy For TCP And HTTP Based Applications
- Label also /usr/libexec/WebKitPluginProcess as mozilla_plugin_exec_t
- Fix type in docker.te
- Fix bs_filetrans_named_content() to have support for /usr/lib/debug directory
- Adding a new service script to enable setcheckreqprot
- Add interface to getattr on an isid_type for any type of file
- Allow initrc_t domtrans to authconfig if unconfined is enabled
type in docker.te
- Add mozilla_plugin_exec_t labeling for /usr/lib/firefox/plugin-container - init calling needs to be optional in domain.te
- Allow docker and mount on devpts chr_file
- Allow docker to transition to unconfined_t if boolean set
- Label also /usr/libexec/WebKitPluginProcess as mozilla_plugin_exec_t
- Fix type in docker.te
- Add mozilla_plugin_exec_t labeling for /usr/lib/firefox/plugin-container
- Allow docker to use the network and build images
- Allow docker to read selinux files for labeling, and mount on devpts chr_file
- Allow domains that transition to svirt_sandbox to send it signals
- Allow docker to transition to unconfined_t if boolean set - New access needed to allow docker + lxc +SELinux to work together
- Allow apache to write to the owncloud data directory in /var/www/html...
- Cleanup sandbox X AVC's
- Allow consolekit to create log dir
- Add support for icinga CGI scripts
- Add support for icinga
- Allow kdumpctl_t to create kdump lock file
- Allow kdump to create lnk lock file
- Allow ABRT write core_pattern
- Allwo ABRT to read core_pattern
- Add policy for Geoclue. Geoclue is a D-Bus service that provides location information
- Allow nscd_t block_suspen capability
- Allow unconfined domain types to manage own transient unit file
- Allow systemd domains to handle transient init unit files
- No longer need the rpm_script_roles line since rpm_transition_script now does this for us
- Add/fix interfaces for usermodehelper_t
- Add interfaces to handle transient
- Fixes for new usermodehelper and proc_securit_t types, added to increase security on /proc and /sys file systems - Add cron unconfined role support for uncofined SELinux user
- Call kernel_rw_usermodehelper_state() in init.te
- Call corenet_udp_bind_all_ports() in milter.te
- Allow fence_virtd to connect to zented port
- Fix header for mirrormanager_admin()
- Allow dkim-milter to bind udp ports
- Allow milter domains to send signull itself
- Allow block_suspend for yum running as mock_t
- Allow beam.smp to manage couchdb files
- Add couchdb_manage_files()
- Add labeling for /var/log/php_errors.log
- Allow bumblebee to stream connect to xserver
- Allow bumblebee to send a signal to xserver
- gnome-thumbnail to stream connect to bumblebee
- Fix calling usermodehelper to use _state in interface name
- Allow xkbcomp running as bumblebee_t to execute bin_t
- Allow logrot� x�������������� ������� X � j��yShip���������4������T e sr�$ D ���������������� T S � G 6D ? 10 d � � � � # � W � ` � d � � � � � � � � � � � � . � K � Q X x �
� � �
� � @ h � � � C ( v 8 � S 9 � S : X S G -< H -\ I -| X -� Y -� \ -� ] -� ^ . b .� d /� e /� f /� l /� t 0 u 00 v 0P w 0� x 0� y 0� � 0� � 0� � 0� � 1, 1@ 1D 6 3z 3� 6
5� 5� � 6, 60 68 g 6< h 6@ C python3-pip 9.0.3 23.el8.rocky.0 A tool for installing and managing Python3 packages pip is a package management system used to install and manage software packages
written in Python. Many packages can be found in the Python Package Index
(PyPI). pip is a recursive acronym that can stand for either "Pip Installs
Packages" or "Pip Installs Python". d�
�ord1-prod-a64build001.svc.aws.rockylinux.org 6Koji Rocky MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD) infrastructure@rockylinux.org Development/Libraries http://www.pip-installer.org linux noarch � B����A큤A큤A큤 d�
hd�
gd�
hd�
hd�
�Z�2d�
�Z�2 bb7fb74ea18a21a50b49710ffffb5fa3500eaa8c945a8d2b0c491fe45cac20e0 93194ac7d6c38a807d3949649fe2e4b91f8432ba7271c2ea6b820c2c4a47d6bd 1789d1f195336a3b58a369b26fd7a034f4c00952ab0a78e43fc3fd5a983cf0bc fc89805a1f8ebf63b0fa389bead64bb23136f386b397e66ef4ec980f1e72e34f ./pip3.6 �root root root root root root root root root root root root root root root root python-pip-9.0.3-23.el8.rocky.0.src.rpm ��������������������������������python3-pip @
/usr/bin/python3.6 platform-python-pip python36 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 9.0.3-23.el8.rocky.0 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d��@d�.@a]��a\>@`�
@_�I@_=@^_�@^ [�\� @\��\�[��@[�[�@[�k@[ͻ�[h8@[h8@[0�@Z��@Z�_@Z}�@Z%8�Z�Y�W@Yy�Y$$@X��X�Z�X��X��@X���Xj@�XJ��XJ��X.�@X.�@W��W��W�@W;�V�@V�=@V C�V �@U��@U���U���Up=�T���T���T|X@Tk4�S���S��@SZN@SX��SX��SB�@R[�Q�B@Q�5�Q��Q��@Qzl@Q �Pt�Pmz@O�E@On@N��@N�@MQ0@ME@L{�@LH2�L4l@K��K=�K+n�K* @J��@Release Engineering <releng@rockylinux.org> - 9.0.3-23.rocky.0 Petr Viktorin <pviktori@redhat.com> - 9.0.3-23 Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-22 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-21 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-19 Tomas Orsava <torsava@redhat.com> - 9.0.3-18 Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-17 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16 Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-15 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-14 Miro Hrončok <mhroncok@redhat.com> - 9.0.3-13 Tomas Orsava <torsava@redhat.com> - 9.0.3-12 Victor Stinner <vstinner@redhat.com> - 9.0.3-11 Tomas Orsava <torsava@redhat.com> - 9.0.3-10 Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6 Tomas Orsava <torsava@redhat.com> - 9.0.3-5 Petr Viktorin <pviktori@redhat.com> - 9.0.3-4 Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-3 Petr Viktorin <pviktori@redhat.com> - 9.0.3-2 Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-1 Lumír Balhar <lbalhar@redhat.com> - 9.0.1-16 Fedora Release Engineering <releng@fedoraproject.org> - 9.0.1-15 Charalampos Stratakis <cstratak@redhat.com> - 9.0.1� x������������� ������� X � G_��yHSCRp� X+������� _TOU�$ d ���������������� � �� � � setfiles - Lots of fixes for systemd
- systemd now executes readahead and tmpwatch type scripts
- Needs to manage random seed - Allow smbd to use sys_admin
- Remove duplicate file context for tcfmgr
- Update to upstream - Fix fusefs handling
- Do not allow sandbox to manage nsplugin_rw_t
- Allow mozilla_plugin_t to connecto its parent
- Allow init_t to connect to plymouthd running as kernel_t
- Add mediawiki policy
- dontaudit sandbox sending signals to itself. This can happen when they are running at different mcs.
- Disable transition from dbus_session_domain to telepathy for F14
- Allow boinc_project to use shm
- Allow certmonger to search through directories that contain certs
- Allow fail2ban the DAC Override so it can read log files owned by non root users - Start adding support for use_fusefs_home_dirs
- Add /var/lib/syslog directory file context
- Add /etc/localtime as locale file context - Turn off default transition to mozilla_plugin and telepathy domains from unconfined user
- Turn off iptables from unconfined user
- Allow sudo to send signals to any domains the user could have transitioned to.
- Passwd in single user mode needs to talk to console_device_t
- Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
- locate tried to read a symbolic link, will dontaudit
- New labels for telepathy-sunshine content in homedir
- Google is storing other binaries under /opt/google/talkplugin
- bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
- Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
- modemmanger and bluetooth send dbus messages to devicekit_power
- Samba needs to getquota on filesystems labeld samba_share_t - Dontaudit attempts by xdm_t to write to bin_t for kdm
- Allow initrc_t to manage system_conf_t - Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.
- Allow mozilla_plugin_t to create tcp/udp/netlink_route sockets
- Allow confined users to read xdm_etc_t files
- Allow xdm_t to transition to xauth_t for lxdm program - Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home
- Allow clamd to send signals to itself
- Allow mozilla_plugin_t to read user home content. And unlink pulseaudio shm.
- Allow haze to connect to yahoo chat and messenger port tcp:5050.
Bz #637339
- Allow guest to run ps command on its processes by allowing it to read /proc
- Allow firewallgui to sys_rawio which seems to be required to setup masqerading
- Allow all domains to search through default_t directories, in order to find differnet labels. For example people serring up /foo/bar to be share via samba.
- Add label for /var/log/slim.log - Pull in cleanups from dgrift
- Allow mozilla_plugin_t to execute mozilla_home_t
- Allow rpc.quota to do quotamod - Cleanup policy via dgrift
- Allow dovecot_deliver to append to inherited log files
- Lots of fixes for consolehelper - Fix up Xguest policy - Add vnstat policy
- allow libvirt to send audit messages
- Allow chrome-sandbox to search nfs_t - Update to upstream - Add the ability to send audit messages to confined admin policies
- Remove permissive domain from cmirrord and dontaudit sys_tty_config
- Split out unconfined_domain() calls from other unconfined_ calls so we can d
- virt needs to be able to read processes to clearance for MLS - Allow all domains that can use cgroups to search tmpfs_t directory
- Allow init to send audit messages - Update to upstream - Allow mdadm_t to create files and sock files in /dev/md/ - Add policy for ajaxterm - Handle /var/db/sudo
- Allow pulseaudio to read alsa config
- Allow init to send initrc_t dbus messages Allow iptables to read shorewall tmp files
Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
intd
label vlc as an execmem_exec_t
Lots of fixes for mozilla_plugin to run google vidio chat
Allow telepath_msn to execute ldconfig and its own tmp files
Fix � x�������������x����� X � Fea�y Rel��������Е �d l-en�$ 5 ���������������� �d �d �d � 7@M���M��M���MT�Mt�Mk�@MfH@MR��M' @M�@M�@Mg�L�8�LΫ�Lʷ@L���LH2�K��@K��@K�C�K�@K
@K��K�@J��@JlE@J_@J_@J\s@JY�@J> �I�'@I��@I��I��@I��@I}��I|T@Iy�@IC��I>]�I:i@I9�I*�@I9@H˫@H�(�H{?�Hv@G��G�Z@Gt�@GV��GV��GV@F��Fڥ�F�@F�S@F�S@F�]�F��Fw�@FiD�FA��F@f@F; @F �@F @Eّ@E�K@E��E�3@Eu_@El$�El$�Ej�@E[@E[@EG:�E#�@D�,@D��@D�b�D�b�D�(@DtJ�Dla�D_2�DX�@D;@C�@C�C�Q@Cˊ�Cǖ@C�
@C��C�f@C�q�C� @C��@C�7@C��@Cs6@CoA�CgX�C(�B�i�B{\@Bwg�Bl�B] �B] �B] �B[�@BZf�BQ,@BM7�BJ��BB��B�B �@A�@A��A��A�_�A�_�A�_�AJ�AJ�AJ�A@E�A
@Ag@Remi Collet <remi@remirepo.net> - 5.6.40-39 Remi Collet <remi@remirepo.net> - 5.6.40-38 Remi Collet <remi@remirepo.net> - 5.6.40-37 Remi Collet <remi@remirepo.net> - 5.6.40-36 Remi Collet <remi@remirepo.net> - 5.6.40-35 Remi Collet <remi@remirepo.net> - 5.6.40-34 Remi Collet <remi@remirepo.net> - 5.6.40-33 Remi Collet <remi@remirepo.net> - 5.6.40-32 Remi Collet <remi@remirepo.net> - 5.6.40-31 Remi Collet <remi@remirepo.net> - 5.6.40-30 Remi Collet <remi@remirepo.net> - 5.6.40-29 Remi Collet <remi@remirepo.net> - 5.6.40-28 Remi Collet <remi@remirepo.net> - 5.6.40-27 Remi Collet <remi@remirepo.net> - 5.6.40-26 Remi Collet <remi@remirepo.net> - 5.6.40-25 Remi Collet <remi@remirepo.net> - 5.6.40-24 Remi Collet <remi@remirepo.net> - 5.6.40-23 Remi Collet <remi@remirepo.net> - 5.6.40-22 Remi Collet <remi@remirepo.net> - 5.6.40-21 Remi Collet <remi@remirepo.net> - 5.6.40-20 Remi Collet <remi@remirepo.net> - 5.6.40-19 Remi Collet <remi@remirepo.net> - 5.6.40-18.fc32 Remi Collet <remi@remirepo.net> - 5.6.40-18 Remi Collet <remi@remirepo.net> - 5.6.40-17 Remi Collet <remi@remirepo.net> - 5.6.40-15 Remi Collet <remi@remirepo.net> - 5.6.40-14 Remi Collet <remi@remirepo.net> - 5.6.40-13 Remi Collet <remi@remirepo.net> - 5.6.40-12 Remi Collet <remi@remirepo.net> - 5.6.40-11 Remi Collet <remi@remirepo.net> - 5.6.40-9 Remi Collet <remi@remirepo.net> - 5.6.40-8 Remi Collet <remi@remirepo.net> - 5.6.40-7 Remi Collet <remi@remirepo.net> - 5.6.40-6 Remi Collet <remi@remirepo.net> - 5.6.40-5 Remi Collet <remi@remirepo.net> - 5.6.40-4 Remi Collet <remi@remirepo.net> - 5.6.40-3 Remi Collet <remi@remirepo.net> - 5.6.40-2 Remi Collet <remi@remirepo.net> - 5.6.40-1 Remi Collet <remi@remirepo.net> - 5.6.39-1 Remi Collet <remi@remirepo.net> - 5.6.38-2 Remi Collet <remi@remirepo.net> - 5.6.38-1 Remi Collet <remi@remirepo.net> - 5.6.37-2 Remi Collet <remi@remirepo.net> - 5.6.37-1 Remi Collet <remi@remirepo.net> - 5.6.36-1 Remi Collet <remi@remirepo.net> - 5.6.35-1 Remi Collet <remi@remirepo.net> - 5.6.34-2 Remi Collet <remi@remirepo.net> - 5.6.34-1 Remi Collet <remi@fedoraproject.org> 5.6.33-1 Remi Collet <remi@fedoraproject.org> 5.6.32-1 Remi Collet <remi@fedoraproject.org> - 5.6.31-4 Remi Collet <remi@fedoraproject.org> - 5.6.31-3 Remi Collet <remi@fedoraproject.org> 5.6.31-2 Remi Collet <remi@fedoraproject.org> 5.6.31-1 Remi Collet <remi@remirepo.net> - 5.6.30-5 Remi Collet <remi@remirepo.net> - 5.6.30-4 Remi Collet <remi@fedoraproject.org> 5.6.30-3 Remi Collet <remi@fedoraproject.org> 5.6.30-1 Remi Collet <remi@fedoraproject.org> 5.6.30-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.29-1 Remi Collet <remi@fedoraproject.org> 5.6.29-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.28-1 Remi Collet <remi@fedoraproject.org> 5.6.28-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.27-1 Remi Collet <remi@fedoraproject.org> 5.6.27-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.26-1 Remi Collet <remi@fedoraproject.org> 5.6.26-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.25-1 Remi Collet <remi@fedoraproject.org> 5.6.25-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.24-1 Remi Collet <remi@fedoraproject.org> 5.6.24-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.23-1.1 Remi Collet <remi@fedoraproject.org> 5.6.23-1 Remi Collet <remi@fedoraproject.org> 5.6.23-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.22-1 Remi Collet <remi@fedoraproject.org> 5.6.22-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.21-1 Remi Collet <remi@fedoraproject.org> 5.6.21-0.1.RC1 Remi Collet <remi@fedoraproject.o� x������������������� X � or>�ydj@rP�������Xs������$! 2 Fl�$ 4 ���������������� $! #! � O �T ? � d � � � � � � 2 � � � � � � � � � : � X � u � � � � � � l � � ( ` ( � (
( � ( � (
� (
� ( T ( 8 ( � � x _ ( � 8 � " 9 \ " : M� " = �: > �B ? �J @ �R G �\ ( H �� ( I �� ( X �� Y �� \ �� ( ] �� ( ^ �� b �� d �H e �M f �P l �R t �l ( u � ( v �� w �� ( x �8 ( y �� > � �� � �� � �� � � �0 �4 6 �j �z 6
�� �� � � � ( �H g �L h �P C dbus-daemon 1.12.8 26.el8 D-BUS message bus D-BUS is a system for sending messages between applications. It is
used both for the system-wide message bus service, and as a
per-user-login-session messaging facility. d�xGord1-prod-x86build001.svc.aws.rockylinux.org ��Koji Rocky (GPLv2+ or AFL) and GPLv2+ infrastructure@rockylinux.org System Environment/Libraries http://www.freedesktop.org/Software/dbus/ linux x86_64 # Add the "dbus" user and group
/usr/sbin/groupadd -r -g 81 dbus 2>/dev/null || :
/usr/sbin/useradd -c 'System message bus' -u 81 -g 81 \
-s /sbin/nologin -r -d '/' dbus 2> /dev/null || :
if [ $1 -eq 1 ] ; then
# Initial installation
systemctl --no-reload preset dbus.service dbus.socket &>/dev/null || :
fi
if [ $1 -eq 1 ] ; then
# Initial installation
systemctl --no-reload preset \--global dbus.service dbus.socket &>/dev/null || :
fi
if [ $1 -eq 0 ] ; then
# Package removal, not upgrade
systemctl --no-reload disable --now dbus.service dbus.socket &>/dev/null || :
fi
if [ $1 -eq 0 ] ; then
# Package removal, not upgrade
systemctl --global disable dbus.service dbus.socket &>/dev/null || :
fi A� �� ?� b` $ ( " 8 | f h � m �� W � 5@ �v : q� � 4y � � A�����A�A�A�A�A�A�������������������A��A큤��������A큤��������A� d�xDd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�xEd�x9d�x9d�xDd�xCd�xCd�x9d�x9d�xCd�x9d�xDd�xEd�xEY�jY�jY�jZ��Y�jd�xEY�jd�xBd�xCd�xBd�xBd�xC 62e6db8bb741ca6bde6b9fcf0bc1a9d851ecc6266df3e8336680725004c6329c a280cba52e0da22ad39e853f8ccc466322f8701e60c427e55d6524770c069d4f c39503a8f194bc913b3508061f1ac538c282ea4558e52b9309a82ecb8cb66377 75b2bb845a93a25672ae7b534ed4a206bd7919e2aceff158097a2050e8ed5c9c 7d9d706cc9966c2b6dfebcd64ef460010522194f5b3cb92bc119566b5c8c7864 e05359bbdc083b8db2b49542b26429166b5e13367a63668a4e8ff8a1b496f7ae 19d7b51e1e6da255346ac6acbf95627baf14c324e84ee841d90fab98bcc0e994 2b7ac7357065180d1c2f3f00c11d17dadd31cdc3d7e59c623eb733beb3e50cef d1b15f34a0590f6535dbff91727dd6bbf10752e8abb2cab73fa66a6184f9df1a 5d8755f56392692738f75570f35b8c3a09da96bd3d80a4612a337d1d47c06817 22ad2317b7040e0aca41b5c9a04141aaf20143e15072eb19394248eb5f5e5a19 7cd87f02e9154646e2b172666fc7a11d999f26fe450e69a519f9bbaedaf19842 e2584de5acbe9ef4a792e39d9141c3a2b60fb592bf4d7c27cedd7bf8d201f4c2 8033b254b0d3013a1b37623e239c9045ed40ba67e32822000d0ebc9f4e85752b 02757b6a8cba77f6273f07848aa1a81cdd02d0aaa0f86d3c73f2ecf548853176 0e46f54efb12d04ab5c33713bacd0e140c9a35b57ae29e03c853203266e8f3a1 a3399363ca00f8b32f5a95b40144f916403c4d1e8d2� x�������������h����� X � ��y ������X����i � �$ y ���������������� i h j � tun, not main
- remove alternatives in %preun - don't source /etc/sysconfig/network in cups.init, we don't use any
values from it - Fix bugs #60220 and #60352 - rebuild against correct version of openssl (0.9.6b) - Add all man pages to alternatives (#59943)
- Update to real 1.1.14 - Update to almost-1.1.14 - Move cups-config to cups-devel subpackage
- Make alternatives usage a %define to simplify builds for earlier
releases
- Explicitly provide things we're supplying through alternatives
to shut up kdeutils dependencies - shut the alternatives stuff up for good - Fix alternatives stuff
- Don't display error messages in %post - alternatives stuff - 1.1.13
- Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
- Rename init scripts so we can safely "killall cupsd" from there - Initial (conflicting, since alternatives isn't there yet) packaging for
Red Hat Linux - 1.1.12 - Compress PPD files
- Fix build with gcc 3.1
- Fix init script - Fix URL
- Generate printcap
- s/Copyright/License/g - update to 1.1.10-1 for ExtraBinge 7.2 - update to 1.1.8
- changed cupsd.conf to generate /etc/printcap - update to 1.1.7, bugfixes - fixed package dependency with lpr and LPRng - remove man/cat - don't start cupsd service in level 0, fixed - update to 1.1.4
- fix CUPS_DOCROOT (Bug #18717) - update to 1.1.2 (Bugfix release) - fix, cupsd read config file under /etc/cups (Bug #15432)
- add missing cups filters - rebuilt against libpng-1.0.8 - fix permission, add missing ldconfig in %post and %postun (Bug #14963) - 1.1.1 (this has some major bugfixes)
- Fix a typo in initscript (it's $?, not ?$)
- Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
- Create the spool dir - fix unclean code for building against gcc-2.96
- add missing restart function in startup script - fixed initscript so that conrestart doesn't return 1 if the test fails - rebuilt - using service to fire them up
- fix Prereq section - added defattr to the devel package - add cups config files - update to 1.1 release
- move back to /etc/rc.d/init.d
- fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
- split cups - rebuilt - fixed broken PreReq to now require /etc/init.d - PreReq initscripts >= 5.20 - started changelog
- fixed init.d script location
- changed script in init.d quite a bit and made more like the rest of our
startup scripts
� � � � � 1:2.2.6-67.el8_10 1:2.2.6-67.el8_10 .build-id 0e aac006fa1ac0a7f73280114d20b80de41dc8c7 3b f08cbaa7954c41a5d01fda669491341d793a75 47 8f1ee36672f41e551a1b748470925b6100002b adc34a26e5878a09c6d2004ef3ae81ff1a8326 f2 2da3a1efb760efe1d2f721070fc9dca34b200d libcups.so.2 libcupscgi.so.1 libcupsimage.so.2 libcupsmime.so.1 libcupsppdc.so.1 cups-libs LICENSE.txt /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/0e/ /usr/lib/.build-id/3b/ /usr/lib/.build-id/47/ /usr/lib/.build-id/8e/ /usr/lib/.build-id/f2/ /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/cups-libs/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0eaac006fa1ac0a7f73280114d20b80de41dc8c7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bf08cbaa7954c41a5d01fda669491341d793a75, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID� x������������������� X � ��y p�������������K �$ s ���������������� �K �K �K � er bus" changes - Fix a PolkitAgentSession race condition
Resolves: #1063193 - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
Resolves: #1033774
- Always use mozjs-17.0 even if js-devel is installed - Update to polkit-0.112
- Resolves: #1009538, CVE-2013-4288 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Fix a race on PolkitSubject type registration (#866718) - Update to polkit-0.111
Resolves: #917888
- Use SpiderMonkey from mozjs17 instead of js
- Ship the signature in the srpm
- Try to preserve timestamps in (make install) - Shut up rpmlint about Summary:
- Build with V=1
- Use %{_unitdir} instead of hard-coding the path
- Use the new systemd macros, primarily to run (systemctl daemon-reload)
Resolves: #857382 - Make the JavaScript engine mandatory. The polkit-js-engine package has been
removed, main polkit package Provides:polkit-js-engine for compatibility.
- Add Requires: polkit-pkla-compat
Resolves: #908808 - Don't ship pk-example-frobnicate in the "live" configuration
Resolves: #878112 - Own %{_docdir}/polkit-js-engine-*
Resolves: #907668 - Update to upstream release 0.110 - Build with pie and stuff - Update to upstream release 0.109
- Drop upstreamed patches - Attempt to open the correct libmozjs185 library, otherwise polkit
authz rules will not work unless js-devel is installed (fdo #57146) - Include gmodule-2.0 to avoid build error - Update to upstream release 0.108
- Drop upstreamed patches
- This release dynamically loads the JavaScript interpreter and can
cope with it not being available. In this case, polkit authorization
rules are not processed and the defaults for an action - as defined
in its .policy file - are used for authorization decisions.
- Add new meta-package, polkit-js-engine, that pulls in the required
JavaScript bits to make polkit authorization rules work. The default
install - not the minimal install - should include this package - Don't crash if initializing the server object fails - Authenticate as root if e.g. the wheel group is empty (#834494) - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Update to upstream release 0.107 - Add forgotten Requires(pre): shadow-utils - Update to upstream release 0.106
- Authorizations are no longer controlled by .pkla files - from now
on, use the new .rules files described in the polkit(8) man page - Update to upstream release 0.105
- Nuke patches that are now upstream
- Change 'PolicyKit' to 'polkit' in summary and descriptions - Don't leak file descriptors (bgo #671486) - Make the -docs subpackage noarch - Set error if we cannot obtain a PolkitUnixSession for a given PID (#787222) - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Nuke the ConsoleKit run-time requirement - Update to upstream release 0.104
- Force usage of systemd (instead of ConsoleKit) for session tracking - Update to upstream release 0.103
- Drop upstreamed patch
- Drop Fedora-specific policy, it is now upstream (fdo #41008) - Rebuilt for glibc bug#747377 - Add patch to neuter the annoying systemd behavior where stdout/stderr
is sent to the system logs - Update to 0.102 release - Allow setting the pretty hostname without a password for wheel,
change matches systemd in git - Update the action id of the datetime mechanism - CVE-2011-1485 (#697951) - Also allow org.kde.kcontrol.kcmclock.save without password for wheel - Fix typo in pkla file (thanks notting) - Nuke desktop_admin_r and desktop_user_r groups - just use the
wheel group instead (#688363)
- Update the set of configuration directives that gives users
in the wheel group extra privileges - New upstream version - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Own /usr/libexec/polkit-1 - Enable introspection - Fix #629515 in a way that doesn't require autoreconf - Include polkitagentenumtypes.h (#629515) - Update to upstream release 0.98
- Co-own /usr/share/gtk-doc (#604410) - Rebuid to work around bodhi limitations - Fix a ConsoleKit interaction bug - � x�������������X����� X � HDz�yP_GE������p���� IG_S�$ ���������������� � augh <twaugh@redhat.com> 1:1.2.4-3 Tim Waugh <twaugh@redhat.com> 1:1.2.4-2 Tim Waugh <twaugh@redhat.com> 1:1.2.3-5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.3-4 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.3-3 Tim Waugh <twaugh@redhat.com> 1:1.2.3-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.2-17 Tim Waugh <twaugh@redhat.com> 1:1.2.2-16 Tim Waugh <twaugh@redhat.com> 1:1.2.2-15 Tim Waugh <twaugh@redhat.com> 1:1.2.2-14 Jesse Keating <jkeating@redhat.com> - 1:1.2.2-13 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.2-12 Tim Waugh <twaugh@redhat.com> 1:1.2.2-11 Tim Waugh <twaugh@redhat.com> 1:1.2.2-10 Tim Waugh <twaugh@redhat.com> 1:1.2.2-9 Tim Waugh <twaugh@redhat.com> 1:1.2.2-8 Tim Waugh <twaugh@redhat.com> 1:1.2.2-7 Tim Waugh <twaugh@redhat.com> 1:1.2.2-6 Tim Waugh <twaugh@redhat.com> 1:1.2.2-5 Tim Waugh <twaugh@redhat.com> 1:1.2.2-4 Tim Waugh <twaugh@redhat.com> 1:1.2.2-3 Tim Waugh <twaugh@redhat.com> 1:1.2.2-2 Tim Waugh <twaugh@redhat.com> 1:1.2.1-21 John (J5) Palmieri <johnp@redhat.com> - 1:1.2.1-20 Tim Waugh <twaugh@redhat.com> 1:1.2.1-19 Jesse Keating <jkeating@redhat.com> - 1:1.2.1-18.1 Tim Waugh <twaugh@redhat.com> 1:1.2.1-18 Tim Waugh <twaugh@redhat.com> 1:1.2.1-17 Tim Waugh <twaugh@redhat.com> 1:1.2.1-16 Tim Waugh <twaugh@redhat.com> 1:1.2.1-15 Tim Waugh <twaugh@redhat.com> 1:1.2.1-14 Tim Waugh <twaugh@redhat.com> 1:1.2.1-13 Tomas Mraz <tmraz@redhat.com> - 1:1.2.1-12 Tim Waugh <twaugh@redhat.com> 1:1.2.1-11 Tim Waugh <twaugh@redhat.com> 1:1.2.1-10 Tim Waugh <twaugh@redhat.com> 1:1.2.1-9 Tim Waugh <twaugh@redhat.com> 1:1.2.1-8 Tim Waugh <twaugh@redhat.com> 1:1.2.1-7 Tim Waugh <twaugh@redhat.com> 1:1.2.1-6 Tim Waugh <twaugh@redhat.com> 1:1.2.1-5 Tim Waugh <twaugh@redhat.com> 1:1.2.1-4 Tim Waugh <twaugh@redhat.com> 1:1.2.1-3 Tim Waugh <twaugh@redhat.com> 1:1.2.1-2 Tim Waugh <twaugh@redhat.com> 1:1.2.0-7 Tim Waugh <twaugh@redhat.com> 1:1.2.0-6 Tim Waugh <twaugh@redhat.com> 1:1.2.0-5 Tim Waugh <twaugh@redhat.com> 1:1.2.0-4 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.0-3 Tim Waugh <twaugh@redhat.com> 1:1.2.0-2 Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.4 Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2 Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.4.rc2.2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2-0.4.rc2.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.9 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.7 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.6 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.4 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.3 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.2 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.0 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.5 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.4 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.3 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.2 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.0 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b1.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b1.0 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5238.2 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5238.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5137.1 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5137.0 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5083.0 Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.23-30 Tim Waugh <twaugh@redhat.com> 1:1.1.23-29 Tim Waugh <twaugh@redhat.com> 1:1.1.23-28 Tim Waugh <twaugh@redhat.co� x����������������� X � .3g�ym Ja�������������� om> �$ ^ ���������������� � � � � 5 Jonathan Wakely <jwakely@redhat.com> 8.5.0-14 Marek Polacek <polacek@redhat.com> 8.5.0-13 Marek Polacek <polacek@redhat.com> 8.5.0-12 Marek Polacek <polacek@redhat.com> 8.5.0-11 Marek Polacek <polacek@redhat.com> 8.5.0-10 Marek Polacek <polacek@redhat.com> 8.5.0-9 Marek Polacek <polacek@redhat.com> 8.5.0-8 Marek Polacek <polacek@redhat.com> 8.5.0-7 Marek Polacek <polacek@redhat.com> 8.5.0-6 Marek Polacek <polacek@redhat.com> 8.5.0-5 Marek Polacek <polacek@redhat.com> 8.5.0-4 Marek Polacek <polacek@redhat.com> 8.5.0-3 Marek Polacek <polacek@redhat.com> 8.5.0-2 Marek Polacek <polacek@redhat.com> 8.5.0-1 Marek Polacek <polacek@redhat.com> 8.4.1-2.1 Marek Polacek <polacek@redhat.com> 8.4.1-2 Marek Polacek <polacek@redhat.com> 8.4.1-1.2 Marek Polacek <polacek@redhat.com> 8.4.1-1.1 Marek Polacek <polacek@redhat.com> 8.4.1-1 Marek Polacek <polacek@redhat.com> 8.3.1-5.2 Marek Polacek <polacek@redhat.com> 8.3.1-5.1 Marek Polacek <polacek@redhat.com> 8.3.1-5 Marek Polacek <polacek@redhat.com> 8.3.1-4.5 Marek Polacek <polacek@redhat.com> 8.3.1-4.4 Marek Polacek <polacek@redhat.com> 8.3.1-4.3 Marek Polacek <polacek@redhat.com> 8.3.1-4.2 Marek Polacek <polacek@redhat.com> 8.3.1-4.1 Marek Polacek <polacek@redhat.com> 8.3.1-4 Marek Polacek <polacek@redhat.com> 8.3.1-3 Marek Polacek <polacek@redhat.com> 8.2.1-3.5 Jeff Law <law@redhat.com> 8.2.1-3.4 Marek Polacek <polacek@redhat.com> 8.2.1-3.3 Marek Polacek <polacek@redhat.com> 8.2.1-3.2 Marek Polacek <polacek@redhat.com> 8.2.1-3.1 Marek Polacek <polacek@redhat.com> 8.2.1-3 Marek Polacek <polacek@redhat.com> 8.2.1-1.3 Marek Polacek <polacek@redhat.com> 8.2.1-1.2 Marek Polacek <polacek@redhat.com> 8.2.1-1.1 Marek Polacek <polacek@redhat.com> 8.2.1-1 Marek Polacek <polacek@redhat.com> 8.1.1-5 Marek Polacek <polacek@redhat.com> 8.1.1-1.1 Marek Polacek <polacek@redhat.com> 8.1.1-1 Marek Polacek <polacek@redhat.com> 8.0.1-0.23 - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753)
- fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
- adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392,
PR libstdc++/105502)
- initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
- reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614) - Fix nop generation in annobin plugin. (#2067150) - Add a plugin-annobin subpackage. (#2067150) - fix typo in the cprop_hardreg patch (#2028609) - apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609) - aarch64: Add -mtune=neoverse-512tvb (#1845932) - backport PCH tweaks (#2030878) - avoid cycling on certain subreg reloads (PR rtl-optimization/96796, #2028798) - when linking against libgcc_s, link libgcc.a too (#2022588) - add -Wbidi-chars patch (#2008392) - fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951) - update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295) - remove support for demangling GCC 2.x era mangling schemes (#1668394) - update from GCC 8.4 release (#1946758) - back out the PR97236 patch - fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632) - update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597) - backport aarch� x�������������ؚ���� X Z �y �* 7������� �$ ���������������� � � � � rtlett <ajb@elrepo.org> - 5.11.4-1 Alan Bartlett <ajb@elrepo.org> - 5.11.3-1 Alan Bartlett <ajb@elrepo.org> - 5.11.2-1 Alan Bartlett <ajb@elrepo.org> - 5.11.1-1 Alan Bartlett <ajb@elrepo.org> - 5.11.0-1 Alan Bartlett <ajb@elrepo.org> - 5.10.16-1 Alan Bartlett <ajb@elrepo.org> - 5.10.15-1 Alan Bartlett <ajb@elrepo.org> - 5.10.14-1 Alan Bartlett <ajb@elrepo.org> - 5.10.13-1 Alan Bartlett <ajb@elrepo.org> - 5.10.12-1 Alan Bartlett <ajb@elrepo.org> - 5.10.11-1 Alan Bartlett <ajb@elrepo.org> - 5.10.10-1 Alan Bartlett <ajb@elrepo.org> - 5.10.9-1 Alan Bartlett <ajb@elrepo.org> - 5.10.8-1 Alan Bartlett <ajb@elrepo.org> - 5.10.7-1 Alan Bartlett <ajb@elrepo.org> - 5.10.6-1 Alan Bartlett <ajb@elrepo.org> - 5.10.5-1 Alan Bartlett <ajb@elrepo.org> - 5.10.4-1 Alan Bartlett <ajb@elrepo.org> - 5.10.3-1 Alan Bartlett <ajb@elrepo.org> - 5.10.2-1 Alan Bartlett <ajb@elrepo.org> - 5.10.1-1 Alan Bartlett <ajb@elrepo.org> - 5.10.0-1 Alan Bartlett <ajb@elrepo.org> - 5.9.14-1 Alan Bartlett <ajb@elrepo.org> - 5.9.13-1 Alan Bartlett <ajb@elrepo.org> - 5.9.12-1 Alan Bartlett <ajb@elrepo.org> - 5.9.11-1 Alan Bartlett <ajb@elrepo.org> - 5.9.10-1 Alan Bartlett <ajb@elrepo.org> - 5.9.9-1 Alan Bartlett <ajb@elrepo.org> - 5.9.8-1 Alan Bartlett <ajb@elrepo.org> - 5.9.7-1 Alan Bartlett <ajb@elrepo.org> - 5.9.6-1 Alan Bartlett <ajb@elrepo.org> - 5.9.5-1 Alan Bartlett <ajb@elrepo.org> - 5.9.4-1 Alan Bartlett <ajb@elrepo.org> - 5.9.3-1 Alan Bartlett <ajb@elrepo.org> - 5.9.2-1 Alan Bartlett <ajb@elrepo.org> - 5.9.1-1 Alan Bartlett <ajb@elrepo.org> - 5.9.0-1 Alan Bartlett <ajb@elrepo.org> - 5.8.14-1 Alan Bartlett <ajb@elrepo.org> - 5.8.13-1 Alan Bartlett <ajb@elrepo.org> - 5.8.12-1 Alan Bartlett <ajb@elrepo.org> - 5.8.11-1 Alan Bartlett <ajb@elrepo.org> - 5.8.10-1 Alan Bartlett <ajb@elrepo.org> - 5.8.9-1 Alan Bartlett <ajb@elrepo.org> - 5.8.8-1 Alan Bartlett <ajb@elrepo.org> - 5.8.7-1 Alan Bartlett <ajb@elrepo.org> - 5.8.6-1 Alan Bartlett <ajb@elrepo.org> - 5.8.5-1 Alan Bartlett <ajb@elrepo.org> - 5.8.4-1 Alan Bartlett <ajb@elrepo.org> - 5.8.3-1 Alan Bartlett <ajb@elrepo.org> - 5.8.2-1 Alan Bartlett <ajb@elrepo.org> - 5.8.1-1 Alan Bartlett <ajb@elrepo.org> - 5.8.0-1 Alan Bartlett <ajb@elrepo.org> - 5.7.12-1 Alan Bartlett <ajb@elrepo.org> - 5.7.11-1 Alan Bartlett <ajb@elrepo.org> - 5.7.10-1 Alan Bartlett <ajb@elrepo.org> - 5.7.9-1 Alan Bartlett <ajb@elrepo.org> - 5.7.8-1 Alan Bartlett <ajb@elrepo.org> - 5.7.7-1 Alan Bartlett <ajb@elrepo.org> - 5.7.6-1 Alan Bartlett <ajb@elrepo.org> - 5.7.5-1 Alan Bartlett <ajb@elrepo.org> - 5.7.4-1 Alan Bartlett <ajb@elrepo.org> - 5.7.3-1 Alan Bartlett <ajb@elrepo.org> - 5.7.2-1 Alan Bartlett <ajb@elrepo.org> - 5.7.1-1 Alan Bartlett <ajb@elrepo.org> - 5.7.0-1 Alan Bartlett <ajb@elrepo.org> - 5.6.15-1 Alan Bartlett <ajb@elrepo.org> - 5.6.14-1 Alan Bartlett <ajb@elrepo.org> - 5.6.13-1 Alan Bartlett <ajb@elrepo.org> - 5.6.12-1 Alan Bartlett <ajb@elrepo.org> - 5.6.11-1 Alan Bartlett <ajb@elrepo.org> - 5.6.10-1 Alan Bartlett <ajb@elrepo.org> - 5.6.9-1 Alan Bartlett <ajb@elrepo.org> - 5.6.8-1 Alan Bartlett <ajb@elrepo.org> - 5.6.7-1 Alan Bartlett <ajb@elrepo.org> - 5.6.6-1 Alan Bartlett <ajb@elrepo.org> - 5.6.5-1 Alan Bartlett <ajb@elrepo.org> - 5.6.4-1 Alan Bartlett <ajb@elrepo.org> - 5.6.3-1 Alan Bartlett <ajb@elrepo.org> - 5.6.2-1 Alan Bartlett <ajb@elrepo.org> - 5.6.1-1 Alan Bartlett <ajb@elrepo.org> - 5.6.0-1 Alan Bartlett <ajb@elrepo.org> - 5.5.13-1 Alan Bartlett <ajb@elrepo.org> - 5.5.12-1 Alan Bartlett <ajb@elrepo.org> - 5.5.11-1 Alan Bartlett <ajb@elrepo.org> - 5.5.10-1 Alan Bartlett <ajb@elrepo.org> - 5.5.9-1 Alan Bartlett <ajb@elrepo.org> - 5.5.8-1 Alan Bartlett <ajb@elrepo.org> - 5.5.7-1 Alan Bartlett <ajb@elrepo.org> - 5.5.6-1 Alan Bartlett <ajb@elrepo.org> - 5.5.5-1 Alan Bartlett <ajb@elrepo.org> - 5.5.4-1 Alan Bartlett <ajb@elrepo.org> - 5.5.3-1 Alan Bartlett <ajb@elrepo.org> - 5.5.2-1 Alan Bartlett <ajb@elrepo.org> - 5.5.1-1 Alan Bartlett <ajb@elrepo.org> - 5.5.0-1 Alan Bartlett <ajb@elrepo.org> - 5.4.15-1 Alan Bartlett <ajb@elrepo.org> - 5.4.14-1 Alan Bartlett <ajb@elrepo.org> - 5.4.13-1 Alan� x������������������� X �
-;�y sys���������������� s() �$ 1 ���������������� � �
rt libraries (#1482027)
- Adjust spec file to RPM changes - Update to released glibc 2.26.
- Auto-sync with upstream master,
commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
- getaddrinfo: Release resolver context on error in gethosts (swbz#21885) <lua> 2.28-251.el8_10.31 2.28-251.el8_10.31 2.28-251.el8_10.31 .build-id 0f 41b7e2f285942891cb96cd1ff41db63b90e29b locale-archive locale-archive.tmpl build-locale-archive /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/0f/ /usr/lib/locale/ /usr/sbin/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), static-pie linked, for GNU/Linux 3.2.0, BuildID[sha1]=0f41b7e2f285942891cb96cd1ff41db63b90e29b, stripped R -- If at the end of the transaction we are still installed
-- (have a template of non-zero size), then we rebuild the
-- locale cache (locale-archive) from the pre-populated
-- locale cache (locale-archive.tmpl) i.e. template.
if posix.stat("/usr/lib/locale/locale-archive.tmpl", "size") > 0 then
pid = posix.fork()
if pid == 0 then
posix.exec("/usr/sbin/build-locale-archive", "--install-langs", "%{_install_langs}")
elseif pid > 0 then
posix.wait(pid)
end
end <lua> https://bugs.rockylinux.org utf-8 72237a60aea82b5a955df9e248b01344724812880340d03868d7a5799f4d5146 ? ���� ����M����ql�5�,[�3 !pQ�p�)�Tξ7��]�mtZ`i��x
�]�mtZ`�h� cx��3��m��Ѣ #ڨ�g��sf� eȚ��y ��i��U�$!��e.ٟ�-N��I�V:!<���5@������w�دj��)Q�2��cޝèNi��Y��~���D��n�_{��ܹ �f ���Y�R��ʩ��թ1�eY'� �����C~�2q��R�ǒ"�� )vq))|�c�n]���}:١��0�/�z>j��U@�(lG���|��>�fZ��d5B�J�C��Im�`�-(��){I:'r8Z��&�� �l����~�8��V��`�_B�q���>��̱S��q(�F ,�K�JBU���^��� �7&��ŝ�)n���<{��"�kxaɲ��h�oU�����4�#>�2�rs�ϳ�W��I62>W����T����ȱ9`�Ǵ� iT;uJ�sA���Ѓ
�BD ����!]��Nה[��s��)�d=3�K�ї��yG�V{�0�|��UH�ŷ��n�ڎOM�C���z�:G�S�?��TP3d648ae18f8837cb240886c77e508f1db9a4a670 007bc88297fa7af419f09706c376555b3a76cdba1aadad1266890a8f69165238 i�N-
�� i�N' � x�������������8z���� X � 7.��y- ht@� �) �� ease�$ v ���������������� �� �� �� � Fix typo in openshift.te
- remove dup bumblebee_systemctl()
- Allow watchdog to read /etc/passwd
- Allow condor domains to read/write condor_master udp_socket
- Allow openshift_cron_t to append to openshift log files, label /var/log/openshift
- Add back file_pid_filetrans for /var/run/dlm_controld
- Allow smbd_t to use inherited tmpfs content
- Allow mcelog to use the /dev/cpu device
- sosreport runs rpcinfo
- sosreport runs subscription-manager
- Allow setpgid for sosreport
- Allow browser plugins to connect to bumblebee
- New policy for bumblebee and freqset
- Add new policy for mip6d daemon
- Add new policy for opensm daemon - Add back /dev/shm labeling - Fix gnome_role_template() interface - Add policy-rawhide-contrib-apache-content.patch to re-write apache_content_template() by dwalsh - Fix config.tgz to include lxc_contexts and systemd_contexts - Update to upstream - Fix passenger_stream_connect interface
- setroubleshoot_fixit wants to read network state
- Allow procmail_t to connect to dovecot stream sockets
- Allow cimprovagt service providers to read network states
- Add labeling for /var/run/mariadb
- pwauth uses lastlog() to update system's lastlog
- Allow account provider to read login records
- Add support for texlive2013
- More fixes for user config files to make crond_t running in userdomain
- Add back disable/reload/enable permissions for system class
- Fix manage_service_perms macro
- Allow passwd_t to connect to gnome keyring to change password
- Update mls config files to have cronjobs in the user domains
- Remove access checks that systemd does not actually do - Add support for yubikey in homedir
- Add support for upd/3052 port
- Allow apcupsd to use PowerChute Network Shutdown
- Allow lsmd to execute various lsmplugins
- Add labeling also for /etc/watchdog\.d where are watchdog scripts located too
- Update gluster_export_all_rw boolean to allow relabel all base file types
- Allow x86_energy_perf tool to modify the MSR
- Fix /var/lib/dspam/data labeling - Add files_relabel_base_file_types() interface
- Allow netlabel-config to read passwd
- update gluster_export_all_rw boolean to allow relabel all base file types caused by lsetxattr()
- Allow x86_energy_perf tool to modify the MSR
- Fix /var/lib/dspam/data labeling
- Allow pegasus to domtrans to mount_t
- Add labeling for unconfined scripts in /usr/libexec/watchdog/scripts
- Add support for unconfined watchdog scripts
- Allow watchdog to manage own log files - Add label only for redhat.repo instead of /etc/yum.repos.d. But probably we will need to switch for the directory.
- Label /etc/yum.repos.d as system_conf_t
- Use sysnet_filetrans_named_content in udev.te instead of generic transition for net_conf_t
- Allow dac_override for sysadm_screen_t
- Allow init_t to read ipsec_conf_t as we had it for initrc_t. Needed by ipsec unit file.
- Allow netlabel-config to read meminfo
- Add interface to allow docker to mounton file_t
- Add new interface to exec unlabeled files
- Allow lvm to use docker semaphores
- Setup transitons for .xsessions-errors.old
- Change labels of files in /var/lib/*/.ssh to transition properly
- Allow staff_t and user_t to look at logs using journalctl
- pluto wants to manage own log file
- Allow pluto running as ipsec_t to create pluto.log
- Fix alias decl in corenetwork.te.in
- Add support for fuse.glusterfs
- Allow dmidecode to read/write /run/lock/subsys/rhsmcertd
- Allow rhsmcertd to manage redhat.repo which is now labeled as system.conf. Allow rhsmcertd to manage all log files.
- Additional access for docker
- Added more rules to sblim policy
- Fix kdumpgui_run_bootloader boolean
- Allow dspam to connect to lmtp port
- Included sfcbd service into sblim policy
- rhsmcertd wants to manaage /etc/pki/consumer dir
- Add kdumpgui_run_bootloader boolean
- Add support for /var/cache/watchdog
- Remove virt_domain attribute for virt_qemu_ga_unconfined_t
- Fixes for handling libvirt containes
- Dontaudit attempts by mysql_safe to write content into /
- Dontaudit attempts by system_mail to modify network confi� x��������������i���� X � O_G�yCHAC�������� * �@ IG_C�$ 0 ���������������� �@ �@ �@ � l-eng@lists.fedoraproject.org> - 7.4.2-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.4.2-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.4.2-3 Rex Dieter <rdieter@fedoraproject.org> 7.4.2-2 Rex Dieter <rdieter@fedoraproject.org> 7.4.2-1 Rex Dieter <rdieter@fedoraproject.org> 7.4.0-1 Rex Dieter <rdieter@fedoraproject.org> - 1.2-8.gc Rex Dieter <rdieter@fedoraproject.org> - 1.2-7 Dan Horak <dan[t]danny.cz> - 1.2-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2-5 Jon Stanley <jonstanley@gmail.com> - 1.2-4 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.2-3 Pierre Ossman <drzeus@drzeus.cx> 1.2-2 Pierre Ossman <drzeus@drzeus.cx> 1.2-1 Pierre Ossman <drzeus@drzeus.cx> 1.1-2 Pierre Ossman <drzeus@drzeus.cx> 1.1-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - libatomic_ops-7.6.2 (#1528830) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - libatomic_ops-7.4.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - libatomic_ops-7.4.4 (#1346524) - make check fails on test_stack for ppc64le arch (#1096574), drop reference to 0032.patch - pull in upstream (7.4 branch) fixes
- Add support for 64-bit MIPS (#1317509)
- use %license - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Don't fail check on aarch64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - link libatomic_ops_gpl against libatomic_ops for missing symbol(s) - libatomic_opts-7.4.2
- new upstream/source URLs
- %check: skip ppc64le too
- License: MIT and GPLv2
- update/longer %description
- updated GPLv2 license text (with correct address) - separate libatomic_ops lives again! - use gc tarball, tag gc release - devel: Provides: %name-static ...
- consolidate %doc's
- %files: track libs - added fix for s390 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Fix license tag - Autorebuild for GCC 4.3 - Added fix for PPC AO_load_acquire. - Update to 1.2. - Fix naming of package.
- General cleanup of spec file. - Initial package for Fedora Extras.
� � 7.6.2-3.el8 7.6.2-3.el8 .build-id bc c869ccc2e7848f62c40700d748bac599e07085 ca bcd7177dcaee8e7b933cf11bddeda2d9da5e9a libatomic_ops.so.1 libatomic_ops.so.1.1.1 libatomic_ops_gpl.so.1 libatomic_ops_gpl.so.1.1.2 libatomic_ops AUTHORS ChangeLog README.md libatomic_ops COPYING LICENSING.txt /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/bc/ /usr/lib/.build-id/ca/ /usr/lib64/ /usr/share/doc/ /usr/share/doc/libatomic_ops/ /usr/share/licenses/ /usr/share/licenses/libatomic_ops/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bcc869ccc2e7848f62c40700d748bac599e07085, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cabcd7177dcaee8e7b933cf11bddeda2d9da5e9a, stripped ASCII text P R R R R P R R R R utf-8 6ec493bb90b36495f41e11� x�������������(Y���� X � ar��ye.tm���������" � ive �$ s ���������������� � � � � l-linux-2.11f-ipcs-84243-86285.patch to get all
ipcs fixes - fix last login date display on AMD64 (#88574) - include sfdisk on ppc - add patch from msw to change mkcramfs blocksize with a command line option - Fix segfault on s390x due to wrong usage of BLKGETSIZE. - Really apply the ipcs patch. Doh. - rebuilt - ipcs-84243.patch to fix #84243 - Update moremisc patch to fix swprintf()'s minimum field (bug #83361). - Fix mcookie segfault on many 64-bit architectures (bug #83345). - Fix underlined multibyte characters (bug #83376). - rebuild to have again a s390 rpm
- disable some more apps for mainframe - util-linux-2.11y-umask-82552.patch - rebuilt - Fix #81069, #75421 - Update to 2.11y
- Fix #80953
- Update patch0, patch107, patch117, patch120 for 2.11y
- Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
- Remove patch122, patch200 - Remove some crack/unnecessary patches while submitting stuff upstream.
- Build with -D_FILE_OFFSET_BITS=64 - Update to 2.11w, resolve patch conflicts - Extended util-linux-2.11b-s390x patch to work again. - Add patch122 for hwclock on x86_64 - Fixed pam config files - Port to hammer - Patch120 (hwclock) to fix #72140
- Include isosize util - Patch120 (skipraid2) to fix #70353, because the original patch was
totally useless. - Patch119 (fdisk-add-primary) from #67898 - Really add the gptsize patch, instead of what I think the patch says.
(+1) - Add the sp[n].size part of the patch from #69603 - adjust mainframe patches - only require usermode if we're shipping kbdrate here - Port the large swap patch to new util-linux... the off_t changes
now in main aren't sufficient - Remove swapondetect (patch301) until it avoids possible false positives. - Update to 2.11r, wheeee
- Remove unused patches - Make a note here that this package was the source of the single change
contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the
rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
- Package has no runtime deps on slang, so remove the BuildRequires:
slang-devel. - automated rebuild - Fix teg's swapondetect patch to not print out the usage message when
'swapon -a -e' is run. (#66690) (edit existing patch)
- Apply hjl's utmp handling patch (#66950) (patch116)
- Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
- Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
- Fix possible cal overflow with widechars (#67090) (patch117) - support large swap partitions
- add '-d' option to autodetect available swap partitions - automated rebuild - Remove kbdrate (again). - adjust mainframe patches to apply to current rpm
- do not include fdisk until it is fixed to work on mainframe - Don't strip binaries - rpm does it for us. - Apply patch115 from ejb@ql.org for bug #61868 - Finish fixing #60675 (ipcrm man page), updated the patch.
- Fix #61203 (patch114 - dumboctal.patch). - Update ctty3 patch to ignore SIGHUP while dropping controlling terminal - Update ctty3 patch to drop controlling terminal before forking. Fix various bugs:
- Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
- Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
- remove README.cfdisk
- Include partx
- Fix 54741 and related bugs for good(hah!) with patch113 (ctty3) - Put kbdrate in, add usermode dep. - Fix #60363 (tweak raw.8 man page, make rawdevices.8 symlink). - remove kbdrate (fixes kbd conflict) - Add util-linux-2.11n-ownerumount.patch (#56593)
- Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
- Fix #53452 nits.
- Fix #56953 (remove tunelp on s390)
- Fix #56459, and in addition switch to using sed instead of perl.
- Fix #58471
- Fix #57300
- Fix #37436
- Fix #32132 - Update to 2.11n
- Merge mount/losetup back in. - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things. - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741. - add nologin man-page for s390� x��������������H���� X � 68y�y
- A`�����Q��� to c�$ ���������������� � > 1:1.3.7-5 Tim Waugh <twaugh@redhat.com> 1:1.3.7-4 Tim Waugh <twaugh@redhat.com> 1:1.3.7-3 Tim Waugh <twaugh@redhat.com> 1:1.3.7-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.7-1 Tim Waugh <twaugh@redhat.com> 1:1.3.6-9 Tim Waugh <twaugh@redhat.com> 1:1.3.6-8 Tim Waugh <twaugh@redhat.com> 1:1.3.6-7 Tim Waugh <twaugh@redhat.com> 1:1.3.6-6 Tim Waugh <twaugh@redhat.com> 1:1.3.6-5 Tim Waugh <twaugh@redhat.com> 1:1.3.6-4 Tim Waugh <twaugh@redhat.com> 1:1.3.6-3 Tim Waugh <twaugh@redhat.com> 1:1.3.6-2 Tim Waugh <twaugh@redhat.com> 1:1.3.6-1 Tim Waugh <twaugh@redhat.com> 1:1.3.5-6 Tim Waugh <twaugh@redhat.com> 1:1.3.5-5 Tim Waugh <twaugh@redhat.com> 1:1.3.5-4 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.5-3 Tim Waugh <twaugh@redhat.com> 1:1.3.5-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.5-1 Tim Waugh <twaugh@redhat.com> 1:1.3.4-5 Warren Togami <wtogami@redhat.com> 1:1.3.4-3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.4-2 Tim Waugh <twaugh@redhat.com> 1:1.3.4-1 Tim Waugh <twaugh@redhat.com> 1:1.3.3-3 Tim Waugh <twaugh@redhat.com> 1:1.3.3-2 Tim Waugh <twaugh@redhat.com> 1:1.3.3-1 Tim Waugh <twaugh@redhat.com> 1:1.3.2-3 Tim Waugh <twaugh@redhat.com> 1:1.3.2-2 Tim Waugh <twaugh@redhat.com> 1:1.3.2-1 Tim Waugh <twaugh@redhat.com> 1:1.3.1-3 Tim Waugh <twaugh@redhat.com> 1:1.3.1-2 Tim Waugh <twaugh@redhat.com> 1:1.3.1-1 Tim Waugh <twaugh@redhat.com> 1:1.3.0-2 Tim Waugh <twaugh@redhat.com> 1:1.3.0-1 Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.2 Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.1 Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.5 Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.4 Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.3 Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.2 Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.1 Tim Waugh <twaugh@redhat.com> 1:1.2.12-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.11-5 Tim Waugh <twaugh@redhat.com> 1:1.2.11-4 Tim Waugh <twaugh@redhat.com> 1:1.2.11-3 Tim Waugh <twaugh@redhat.com> 1:1.2.11-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.11-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.10-10 Tim Waugh <twaugh@redhat.com> 1:1.2.10-9 Tim Waugh <twaugh@redhat.com> 1:1.2.10-8 Tim Waugh <twaugh@redhat.com> 1:1.2.10-7 Tim Waugh <twaugh@redhat.com> 1:1.2.10-6 Tim Waugh <twaugh@redhat.com> 1:1.2.10-5 Tim Waugh <twaugh@redhat.com> 1:1.2.10-4 Tim Waugh <twaugh@redhat.com> 1:1.2.10-3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.10-2 Tim Waugh <twaugh@redhat.com> 1:1.2.10-1 Tim Waugh <twaugh@redhat.com> 1:1.2.9-2 Tim Waugh <twaugh@redhat.com> 1:1.2.9-1 Tim Waugh <twaugh@redhat.com> 1:1.2.8-5 Tim Waugh <twaugh@redhat.com> 1:1.2.8-4 Tim Waugh <twaugh@redhat.com> 1:1.2.8-3 Tim Waugh <twaugh@redhat.com> 1:1.2.8-2 Tim Waugh <twaugh@redhat.com> 1:1.2.8-1 Tim Waugh <twaugh@redhat.com> 1:1.2.7-8 Tim Waugh <twaugh@redhat.com> 1:1.2.7-7 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.7-6 Tim Waugh <twaugh@redhat.com> 1:1.2.7-5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.7-4 Tim Waugh <twaugh@redhat.com> 1:1.2.7-3 Tim Waugh <twaugh@redhat.com> 1:1.2.7-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.6-5 Tim Waugh <twaugh@redhat.com> 1:1.2.6-4 Tim Waugh <twaugh@redhat.com> 1:1.2.6-3 Tim Waugh <twaugh@redhat.com> 1:1.2.5-7 Tim Waugh <twaugh@redhat.com> 1:1.2.5-6 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.5-5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.5-4 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.5-3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.2.4-9 Tim Waugh <twaugh@redhat.com> 1:1.2.4-8 Tim Waugh <twaugh@redhat.com> 1:1.2.4-7 Tim Waugh <twaugh@redhat.com> 1:1.2.4-6 Tim Waugh <twaugh@redhat.com> 1:1.2.4-5 Jesse Keating <jkeating@redhat.com> - 1:1.2.4-4 Tim W� x�������������8���� X � u��yuant�����`{������ G ace �$ ���������������� G G G � make sure it is labeled correctly
- sytemd writes content to /run/initramfs and executes it on shutdown
- kdump_t needs to read /etc/mtab, should be back ported to F16
- udev needs to load kernel modules in early system boot - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
- Add additional systemd interfaces which are needed fro *_admin interfaces
- Fix bind_admin() interface - Allow firewalld to read urand
- Alias java, execmem_mono to bin_t to allow third parties
- Add label for kmod
- /etc/redhat-lsb contains binaries
- Add boolean to allow gitosis to send mail
- Add filename transition also for "event20"
- Allow systemd_tmpfiles_t to delete all file types
- Allow collectd to ipc_lock - make consoletype_exec optional, so we can remove consoletype policy
- remove unconfined_permisive.patch
- Allow openvpn_t to inherit user home content and tmp content
- Fix dnssec-trigger labeling
- Turn on obex policy for staff_t
- Pem files should not be secret
- Add lots of rules to fix AVC's when playing with containers
- Fix policy for dnssec
- Label ask-passwd directories correctly for systemd - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
- fuse file system is now being mounted in /run/user
- systemd_logind is sending signals to processes that are dbus messaging with it
- Add support for winshadow port and allow iscsid to connect to this port
- httpd should be allowed to bind to the http_port_t udp socket
- zarafa_var_lib_t can be a lnk_file
- A couple of new .xsession-errors files
- Seems like user space and login programs need to read logind_sessions_files
- Devicekit disk seems to be being launched by systemd
- Cleanup handling of setfiles so most of rules in te file
- Correct port number for dnssec
- logcheck has the home dir set to its cache - Add policy for grindengine MPI jobs - Add new sysadm_secadm.pp module
* contains secadm definition for sysadm_t
- Move user_mail_domain access out of the interface into the te file
- Allow httpd_t to create httpd_var_lib_t directories as well as files
- Allow snmpd to connect to the ricci_modcluster stream
- Allow firewalld to read /etc/passwd
- Add auth_use_nsswitch for colord
- Allow smartd to read network state
- smartdnotify needs to read /etc/group - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
- lxdm startup scripts should be labeled bin_t, so confined users will work
- mcstransd now creates a pid, needs back port to F16
- qpidd should be allowed to connect to the amqp port
- Label devices 010-029 as usb devices
- ypserv packager says ypserv does not use tmp_t so removing selinux policy types
- Remove all ptrace commands that I believe are caused by the kernel/ps avcs
- Add initial Obex policy
- Add logging_syslogd_use_tty boolean
- Add polipo_connect_all_unreserved bolean
- Allow zabbix to connect to ftp port
- Allow systemd-logind to be able to switch VTs
- Allow apache to communicate with memcached through a sock_file - Fix file_context.subs_dist for now to work with pre usrmove - More /usr move fixes - Add zabbix_can_network boolean
- Add httpd_can_connect_zabbix boolean
- Prepare file context labeling for usrmove functions
- Allow system cronjobs to read kernel network state
- Add support for selinux_avcstat munin plugin
- Treat hearbeat with corosync policy
- Allow corosync to read and write to qpidd shared mem
- mozilla_plugin is trying to run pulseaudio
- Fixes for new sshd patch for running priv sep domains as the users context
- Turn off dontaudit rules when turning on allow_ypbind
- udev now reads /etc/modules.d directory - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
- Cups exchanges dbus messages with init
- udisk2 needs to send syslog messages
- certwatch needs to read /etc/passwd - Add labeling for udisks2
- Allow fsadmin to communicate with the systemd process - Treat Bip with bitlbee policy
* Bip is an IRC proxy
- Add port definition for interwise port
- Add support for ipa_memcached socket
- systemd_jou� x��������������'���� X � va��yn_t �������>����� ger �$ M ���������������� �� �� �� � d_t creates content in /etc/cups with the correct label
- Lest dontaudit apache read all domains, so passenger will not cause this avc
- Allow gssd to connect to gssproxy
- systemd-tmpfiles needs to be able to raise the level to fix labeling on /run/setrans in MLS
- Allow systemd-tmpfiles to relabel also lock files
- Allow useradd to add homdir in /var/lib/openshift
- Allow setfiles and semanage to write output to /run/files - Add labeling for /dev/tgt
- Dontaudit leak fd from firewalld for modprobe
- Allow runuser running as rpm_script_t to create netlink_audit socket
- Allow mdadm to read BIOS non-volatile RAM - accountservice watches when accounts come and go in wtmp
- /usr/java/jre1.7.0_21/bin/java needs to create netlink socket
- Add httpd_use_sasl boolean
- Allow net_admin for tuned_t
- iscsid needs sys_module to auto-load kernel modules
- Allow blueman to read bluetooth conf
- Add nova_manage_lib_files() interface
- Fix mplayer_filetrans_home_content()
- Add mplayer_filetrans_home_content()
- mozilla_plugin_config_roles need to be able to access mozilla_plugin_config_t
- Revert "Allow thumb_t to append inherited xdm stream socket"
- Add iscsi_filetrans_named_content() interface
- Allow to create .mplayer with the correct labeling for unconfined
- Allow iscsiadmin to create lock file with the correct labeling - Allow wine to manage wine home content
- Make amanda working with socket actiovation
- Add labeling for /usr/sbin/iscsiadm
- Add support for /var/run/gssproxy.sock
- dnsmasq_t needs to read sysctl_net_t - Fix courier_domain_template() interface
- Allow blueman to write ip_forward
- Allow mongodb to connect to mongodb port
- Allow mongodb to connect to mongodb port
- Allow java to bind jobss_debug port
- Fixes for *_admin interfaces
- Allow iscsid auto-load kernel modules needed for proper iSCSI functionality
- Need to assign attribute for courier_domain to all courier_domains
- Fail2ban reads /etc/passwd
- postfix_virtual will create new files in postfix_spool_t
- abrt triggers sys_ptrace by running pidof
- Label ~/abc as mozilla_home_t, since java apps as plugin want to create it
- Add passenger fixes needed by foreman
- Remove dup interfaces
- Add additional interfaces for quantum
- Add new interfaces for dnsmasq
- Allow passenger to read localization and send signull to itself
- Allow dnsmasq to stream connect to quantum
- Add quantum_stream_connect()
- Make sure that mcollective starts the service with the correct labeling
- Add labels for ~/.manpath
- Dontaudit attempts by svirt_t to getpw* calls
- sandbox domains are trying to look at parent process data
- Allow courior auth to create its pid file in /var/spool/courier subdir
- Add fixes for beam to have it working with couchdb
- Add labeling for /run/nm-xl2tpd.con
- Allow apache to stream connect to thin
- Add systemd support for amand
- Make public types usable for fs mount points
- Call correct mandb interface in domain.te
- Allow iptables to r/w quantum inherited pipes and send sigchld
- Allow ifconfig domtrans to iptables and execute ldconfig
- Add labels for ~/.manpath
- Allow systemd to read iscsi lib files
- seunshare is trying to look at parent process data - Fix openshift_search_lib
- Add support for abrt-uefioops-oops
- Allow colord to getattr any file system
- Allow chrome processes to look at each other
- Allow sys_ptrace for abrt_t
- Add new policy for gssproxy
- Dontaudit leaked file descriptor writes from firewalld
- openshift_net_type is interface not template
- Dontaudit pppd to search gnome config
- Update openshift_search_lib() interface
- Add fs_list_pstorefs()
- Fix label on libbcm_host.so since it is built incorrectly on raspberry pi, needs back port to F18
- Better labels for raspberry pi devices
- Allow init to create devpts_t directory
- Temporarily label rasbery pi devices as memory_device_t, needs back port to f18
- Allow sysadm_t to build kernels
- Make sure mount creates /var/run/blkid with the correct label, needs back port to F18
- Allow userdomains to stream connect to gssproxy
- Dontaudit lea� x������������������ X i c�y @� 0#���� �$ ���������������� � � x ldID[sha1]=f4b0b92c6a59e58f87b0009761fc2442bd1eecfe, with debug_info, not stripped directory
r��GCTH�ԇ� utf-8 f1080e2c2b0bf4f43473b86107fb0ccf95c001af89cca455f191cacc593f1c9c ? ���� 9�#J΄�,�Ռ��N��281ea51700679314322d3f2b7e8240e8460d45e3 efa772dd9d6f6839aeab4bc3f965ab9c92b342c88adb92defc61811d5b49f7cc h� ?� h�TIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu � x������������������ X � h@��yat.c����������������� sh <�$ A ���������������� �� �� �� � ilename transition for /etc/tuned/active_profile
- Allow condor_master to send mails
- Allow condor_master to read submit.cf
- Allow condor_master to create /tmp files/dirs
- Allow condor_mater to send sigkill to other condor domains
- Allow condor_procd sigkill capability
- tuned-adm wants to talk with tuned daemon
- Allow kadmind and krb5kdc to also list sssd_public_t
- Allow accountsd to dbus chat with init
- Fix git_read_generic_system_content_files() interface
- pppd wants sys_nice by nmcli because of "syscall=sched_setscheduler"
- Fix mozilla_plugin_can_network_connect to allow to connect to all ports
- Label all munin plugins which are not covered by munin plugins policy as unconfined_munin_plugin_exec_t
- dspam wants to search /var/spool for opendkim data
- Revert "Add support for tcp/10026 port as dspam_port_t"
- Turning on labeled networking requires additional access for netlabel_peer_t; these allow rules need to be back ported to RHEL6
- Allow all application domains to use fifo_files passed in from userdomains, also allow them to write to tmp_files inherited from userdomain
- Allow systemd_tmpfiles_t to setattr on mandb_cache_t - consolekit.pp was not removed from the postinstall script - Add back consolekit policy
- Silence bootloader trying to use inherited tty
- Silence xdm_dbusd_t trying to execute telepathy apps
- Fix shutdown avcs when machine has unconfined.pp disabled
- The host and a virtual machine can share the same printer on a usb device
- Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
- Allow abrt_watch_log_t to execute bin_t
- Allow chrome sandbox to write content in ~/.config/chromium
- Dontaudit setattr on fontconfig dir for thumb_t
- Allow lircd to request the kernel to load module
- Make rsync as userdom_home_manager
- Allow rsync to search automount filesystem
- Add fixes for pacemaker - Add support for 4567/tcp port
- Random fixes from Tuomo Soini
- xdm wants to get init status
- Allow programs to run in fips_mode
- Add interface to allow the reading of all blk device nodes
- Allow init to relabel rpcbind sock_file
- Fix labeling for lastlog and faillog related to logrotate
- ALlow aeolus_configserver to use TRAM port
- Add fixes for aeolus_configserver
- Allow snmpd to connect to snmp port
- Allow spamd_update to create spamd_var_lib_t directories
- Allow domains that can read sssd_public_t files to also list the directory
- Remove miscfiles_read_localization, this is defined for all domains - Allow syslogd to request the kernel to load a module
- Allow syslogd_t to read the network state information
- Allow xdm_dbusd_t connect to the system DBUS
- Add support for 7389/tcp port
- Allow domains to read/write all inherited sockets
- Allow staff_t to read kmsg
- Add awstats_purge_apache_log boolean
- Allow ksysguardproces to read /.config/Trolltech.conf
- Allow passenger to create and append puppet log files
- Add puppet_append_log and puppet_create_log interfaces
- Add puppet_manage_log() interface
- Allow tomcat domain to search tomcat_var_lib_t
- Allow pki_tomcat_t to connect to pki_ca ports
- Allow pegasus_t to have net_admin capability
- Allow pegasus_t to write /sys/class/net/<interface>/flags
- Allow mailserver_delivery to manage mail_home_rw_t lnk_files
- Allow fetchmail to create log files
- Allow gnomeclock to manage home config in .kde
- Allow bittlebee to read kernel sysctls
- Allow logrotate to list /root - Fix userhelper_console_role_template()
- Allow enabling Network Access Point service using blueman
- Make vmware_host_t as unconfined domain
- Allow authenticate users in webaccess via squid, using mysql as backend
- Allow gathers to get various metrics on mounted file systems
- Allow firewalld to read /etc/hosts
- Fix cron_admin_role() to make sysadm cronjobs running in the sysadm_t instead of cronjob_t
- Allow kdumpgui to read/write to zipl.conf
- Commands needed to get mock to build from staff_t in enforcing mode
- Allow mdadm_t to manage cgroup files
- Allow all daemons and systemprocesses to use inherited � x������������������� X � ����y������������� �5 �����$ v ���������������� �5 �5 �5 � t.com> 5.4.16-4 Remi Collet <rcollet@redhat.com> - 5.4.16-3 Remi Collet <rcollet@redhat.com> 5.4.16-2 Remi Collet <rcollet@redhat.com> 5.4.16-1 Remi Collet <rcollet@redhat.com> 5.4.14-3 Remi Collet <rcollet@redhat.com> 5.4.14-2 Remi Collet <rcollet@redhat.com> 5.4.14-1 Remi Collet <rcollet@redhat.com> 5.4.13-1 Remi Collet <rcollet@redhat.com> 5.4.11-1 Remi Collet <rcollet@redhat.com> 5.4.10-1 Remi Collet <rcollet@redhat.com> 5.4.9-1 Remi Collet <rcollet@redhat.com> 5.4.8-7 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-5 Remi Collet <rcollet@redhat.com> 5.4.8-6 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-4 Remi Collet <rcollet@redhat.com> 5.4.8-3 Joe Orton <jorton@redhat.com> - 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-3 Remi Collet <rcollet@redhat.com> 5.4.8-2.1 Remi Collet <rcollet@redhat.com> 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-1.2 Remi Collet <rcollet@redhat.com> 5.4.8-1 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <rcollet@redhat.com> 5.4.7-2 Remi Collet <rcollet@redhat.com> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.7-10 Remi Collet <remi@fedoraproject.org> 5.4.7-9 Remi Collet <rcollet@redhat.com> 5.4.7-8 Remi Collet <rcollet@redhat.com> 5.4.7-7 Remi Collet <rcollet@redhat.com> 5.4.7-6 Remi Collet <rcollet@redhat.com> 5.4.7-5 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <remi@fedoraproject.org> 5.4.7-2 Remi Collet <remi@fedoraproject.org> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.6-2 Remi Collet <remi@fedoraproject.org> 5.4.6-1 Remi Collet <remi@fedoraproject.org> 5.4.5-1 Remi Collet <remi@fedoraproject.org> 5.4.4-4 Remi Collet <remi@fedoraproject.org> 5.4.4-3 Remi Collet <remi@fedoraproject.org> 5.4.4-2 Remi Collet <remi@fedoraproject.org> 5.4.4-1 Remi Collet <remi@fedoraproject.org> 5.4.3-1 Remi Collet <remi@fedoraproject.org> 5.4.2-1 Remi Collet <remi@fedoraproject.org> 5.4.1-1 Joe Orton <jorton@redhat.com> - 5.4.0-6 Remi Collet <remi@fedoraproject.org> 5.4.0-5 Joe Orton <jorton@redhat.com> - 5.4.0-4 Joe Orton <jorton@redhat.com> - 5.4.0-3 Joe Orton <jorton@redhat.com> - 5.4.0-2 Remi Collet <remi@fedoraproject.org> 5.4.0-1 Remi Collet <remi@fedoraproject.org> 5.4.0-0.4.RC8 Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7 Remi Collet <remi@fedoraproject.org> 5.4.0-0.2.RC6 Remi Collet <remi@fedoraproject.org> 5.4.0-0.1.RC6 Remi Collet <remi@fedoraproject.org> 5.3.8-4.4 Remi Collet <remi@fedoraproject.org> 5.3.8-4.3 Adam Jackson <ajax@redhat.com> - 5.3.8-4.2 Marcela Mašláňová <mmaslano@redhat.com> - 5.3.8-3.2 Peter Schiffer <pschiffe@redhat.com> - 5.3.8-3.1 Remi Collet <remi@fedoraproject.org> 5.3.8-3 Remi Collet <remi@fedoraproject.org> 5.3.8-2 Remi Collet <remi@fedoraproject.org> 5.3.8-1 Remi Collet <remi@fedoraproject.org> 5.3.7-1 Joe Orton <jorton@redhat.com> - 5.3.6-4 Remi Collet <Fedora@famillecollet.com> 5.3.6-3 Remi Collet <Fedora@famillecollet.com> 5.3.6-2 Remi Collet <Fedora@famillecollet.com> 5.3.6-1 Joe Orton <jorton@redhat.com> - 5.3.5-6 Caolán McNamara <caolanm@redhat.com> 5.3.5-5 Remi Collet <Fedora@famillecollet.com> 5.3.5-4 Remi Collet <Fedora@famillecollet.com> 5.3.5-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.5-2 Remi Collet <Fedora@famillecollet.com> 5.3.5-1 Remi Collet <rpms@famillecollet.com> 5.3.4-2 Remi Collet <rpms@famillecollet.com> 5.3.4-1.1 Remi Collet <Fedora@famillecollet.com> 5.3.4-1 Remi Collet <Fedora@famillecollet.com> 5.3.3-5 Joe Orton <jorton@redhat.com> - 5.3.3-4 Joe Orton <jorton@redhat.com> - 5.3.3-3 Remi Collet <Fedora@famillecollet.com> 5.3.3-2 Remi Collet <Fedora@famillecollet.com> 5.3.3-1 Remi Collet <Fedora@famillecollet.com> 5.3.2-3 Caolán McNamara <caolanm@redhat.com> 5.3.2-2 Remi Collet <Fedora@famillecollet.com> 5.3.2-1 Joe Orton <jorton@redhat.com> - 5.3.1-3 Joe Orton <jorton@redhat.com> - 5.3.1-2 Remi Collet <Fedora@famillecollet.com> 5.3.1-1 Tom "spot" Callaway <tcallawa@redhat.com> - 5.3.0-7 Tomas Mraz <tmraz@redh� x�������������p����� X � siB�yn ph��������S �L ble �$ ���������������� �L �L �L � np@redhat.com> - 0.95-2 John (J5) Palmieri <johnp@redhat.com> - 0.95-1 John (J5) Palmieri <johnp@redhat.com> - 0.94-1 Jesse Keating <jkeating@redhat.com> - 0.93-3 Matthias Clasen <mclasen@redhat.com> - 0.93-2 John (J5) Palmieri <johnp@redhat.com> - 0.93-1 Dan Walsh <dwalsh@redhat.com> - 0.92-2 John (J5) Palmieri <johnp@redhat.com> - 0.92-1 John (J5) Palmieri <johnp@redhat.com> - 0.90-8 John (J5) Palmieri <johnp@redhat.com> - 0.90-7 John (J5) Palmieri <johnp@redhat.com> - 0.90-6 John (J5) Palmieri <johnp@redhat.com> - 0.90-5 John (J5) Palmieri <johnp@redhat.com> - 0.90-4 John (J5) Palmieri <johnp@redhat.com> - 0.90-3 John (J5) Palmieri <johnp@redhat.com> - 0.90-2 John (J5) Palmieri <johnp@redhat.com> - 0.90-1 Jesse Keating <jkeating@redhat.com> - 0.62-1.1 John (J5) Palmieri <johnp@redhat.com> - 0.62-1 Matthias Clasen <mclasen@redhat.com> 0.61-6 Karsten Hopp <karsten@redhat.de> 0.61-5.2 John (J5) Palmieri <johnp@redhat.com> - 0.61-5.1 John (J5) Palmieri <johnp@redhat.com> - 0.61-5 John (J5) Palmieri <johnp@redhat.com> 0.61-4 John (J5) Palmieri <johnp@redhat.com> 0.61-3 John (J5) Palmieri <johnp@redhat.com> 0.61-2 John (J5) Palmieri <johnp@redhat.com> 0.61-1 Jesse Keating <jkeating@redhat.com> - 0.60-7.2 Jesse Keating <jkeating@redhat.com> - 0.60-7.1 John (J5) Palmieri <johnp@redhat.com> 0.60-7 John (J5) Palmieri <johnp@redhat.com> 0.60-6 John (J5) Palmieri <johnp@redhat.com> 0.60-5 Alexander Larsson <alexl@redhat.com> 0.60-4 Alexander Larsson <alexl@redhat.com> 0.60-3 Alexander Larsson <alexl@redhat.com> - 0.60-2 Jesse Keating <jkeating@redhat.com> - 0.60-1.1 John (J5) Palmieri <johnp@redhat.com> - 0.60-1 John (J5) Palmieri <johnp@redhat.com> - 0.50-1 John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1 John (J5) Palmieri <johnp@redhat.com> - 0.36.1-1 John (J5) Palmieri <johnp@redhat.com> - 0.36-1 John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1 John (J5) Palmieri <johnp@redhat.com> - 0.34-1 John (J5) Palmieri <johnp@redhat.com> - 0.33-4 Bill Nottingham <notting@redhat.com> - 0.33-3 John (J5) Palmieri <johnp@redhat.com> - 0.33-2 John (J5) Palmieri <johnp@redhat.com> - 0.33-1 John (J5) Palmieri <johnp@redhat.com> - 0.32-6 John (J5) Palmieri <johnp@redhat.com> - 0.32-5 John (J5) Palmieri <johnp@redhat.com> - 0.32-4 David Zeuthen <davidz@redhat.com> - 0.32-3 John (J5) Palmieri <johnp@redhat.com> - 0.32-2 John (J5) Palmieri <johnp@redhat.com> - 0.32-1 John (J5) Palmieri <johnp@redhat.com> - 0.31-4 John (J5) Palmieri <johnp@redhat.com> - 0.31-3 John (J5) Palmieri <johnp@redhat.com> - 0.31-2 John (J5) Palmieri <johnp@redhat.com> - 0.31-1 John (J5) Palmieri <johnp@redhat.com> - 0.23-4 John (J5) Palmieri <johnp@redhat.com> - 0.23-3 John (J5) Palmieri <johnp@redhat.com> - 0.23-2 John (J5) Palmieri <johnp@redhat.com> - 0.23-1 Jeremy Katz <katzj@redhat.com> - 0.22-12 John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> Tim Waugh <twaugh@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> Colin Walters <walters@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> Elliot Lee <sopwith@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> Elliot Lee <sopwith@redhat.com> Bill Nottingham <notting@redhat.com> 0.20-4 Elliot Lee <sopwith@redhat.com> Tim Waugh <twaugh@redhat.com> Havoc Pennington <hp@redhat.com> 0.20-2 Bill Nottingham <notting@redhat.com> 0.20-1 � x������������������� X � F��yserv��������������� efin�$ J ���������������� �� �� �� � c
- Allow procmail to manger user tmp files/dirs/lnk_files
- Add virt_stream_connect_svirt() interface
- Allow dovecot-auth to execute bin_t
- Allow iscsid to request that kernel load a kernel module
- Add labeling support for /var/lib/mod_security
- Allow iw running as tuned_t to create netlink socket
- Dontaudit sys_tty_config for thumb_t
- Add labeling for nm-l2tp-service
- Allow httpd running as certwatch_t to open tcp socket
- Allow useradd to manager smsd lib files
- Allow useradd_t to add homedirs in /var/lib
- Fix typo in userdomain.te
- Cleanup userdom_read_home_certs
- Implement userdom_home_reader_certs_type to allow read certs also on encrypt /home with ecryptfs_t
- Allow staff to stream connect to svirt_t to make gnome-boxes working - Allow lvm to create its own unit files
- Label /var/lib/sepolgen as selinux_config_t
- Add filetrans rules for tw devices
- Add transition from cupsd_config_t to cupsd_t - Add filetrans rules for tw devices
- Cleanup bad transition lines - Fix lockdev_manage_files()
- Allow setroubleshootd to read var_lib_t to make email_alert working
- Add lockdev_manage_files()
- Call proper interface in virt.te
- Allow gkeyring_domain to create /var/run/UID/config/dbus file
- system dbus seems to be blocking suspend
- Dontaudit attemps to sys_ptrace, which I believe gpsd does not need
- When you enter a container from root, you generate avcs with a leaked file descriptor
- Allow mpd getattr on file system directories
- Make sure realmd creates content with the correct label
- Allow systemd-tty-ask to write kmsg
- Allow mgetty to use lockdev library for device locking
- Fix selinuxuser_user_share_music boolean name to selinuxuser_share_music
- When you enter a container from root, you generate avcs with a leaked file descriptor
- Make sure init.fc files are labeled correctly at creation
- File name trans vconsole.conf
- Fix labeling for nagios plugins
- label shared libraries in /opt/google/chrome as testrel_shlib_t - Allow certmonger to dbus communicate with realmd
- Make realmd working - Fix mozilla specification of homedir content
- Allow certmonger to read network state
- Allow tmpwatch to read tmp in /var/spool/{cups,lpd}
- Label all nagios plugin as unconfined by default
- Add httpd_serve_cobbler_files()
- Allow mdadm to read /dev/sr0 and create tmp files
- Allow certwatch to send mails
- Fix labeling for nagios plugins
- label shared libraries in /opt/google/chrome as testrel_shlib_t - Allow realmd to run ipa, really needs to be an unconfined_domain
- Allow sandbox domains to use inherted terminals
- Allow pscd to use devices labeled svirt_image_t in order to use cat cards.
- Add label for new alsa pid
- Alsa now uses a pid file and needs to setsched
- Fix oracleasmfs_t definition
- Add support for sshd_unit_file_t
- Add oracleasmfs_t
- Allow unlabeled_t files to be stored on unlabeled_t filesystems - Fix description of deny_ptrace boolean
- Remove allow for execmod lib_t for now
- Allow quantum to connect to keystone port
- Allow nova-console to talk with mysql over unix stream socket
- Allow dirsrv to stream connect to uuidd
- thumb_t needs to be able to create ~/.cache if it does not exist
- virtd needs to be able to sys_ptrace when starting and stoping containers - Allow alsa_t signal_perms, we probaly should search for any app that can execute something without transition and give it signal_perms...
- Add dontaudit for mozilla_plugin_t looking at the xdm_t sockets
- Fix deny_ptrace boolean, certain ptrace leaked into the system
- Allow winbind to manage kerberos_rcache_host
- Allow spamd to create spamd_var_lib_t directories
- Remove transition to mozilla_tmp_t by mozilla_t, to allow it to manage the users tmp dirs
- Add mising nslcd_dontaudit_write_sock_file() interface
- one more fix
- Fix pki_read_tomcat_lib_files() interface
- Allow certmonger to read pki-tomcat lib files
- Allow certwatch to execute bin_t
- Allow snmp to manage /var/lib/net-snmp files
- Call snmp_manage_var_lib_files(fogorn_t) instead of snmp_manage_var_dirs
- Fix vmware_role() int� x�������������P����� X � ta2�y det0 �������������� ment�$
����������������
� 3 decoding (#1924919) - x86-64: Fix FMA4 math routine selection after bug 1817513 (#1918115) - CVE-2019-25013:Fix buffer overrun in EUC-KR conversion module (#1912544) - Update glibc-hwcaps fix from upstream (#1817513) - Support running libc.so.6 as a main program in more cases (#1882466) - Add glibc-hwcaps support (#1817513)
- Implement DT_AUDIT support (#1871385) - Update Intel CET support (#1855790) - Fix calling lazily-bound SVE-using functions on AArch64 (#1893662) - CVE-2016-10228, CVE-2020-27618: Fix infinite loops in iconv (#1704868, - Avoid comments after %endif in the RPM spec file (#1894340) - x86: Further memcpy optimizations for AMD Zen (#1880670) - Allow __getauxval in testsuite check (#1856398) - Use -moutline-atomics for aarch64 (#1856398) - resolv: Handle DNS transaction ID collisions (#1868106) - x86: Update auto-tuning of memcpy non-temporal threshold (#1880670) - Fix fgetsgent_r data corruption bug (#1871397) - Improve IBM zSeries (s390x) Performance (#1871395) - Fix avx2 strncmp offset compare condition check (#1871394)
- Add strncmp and strcmp testcases for page boundary - Improve IBM POWER9 architecture performance (#1871387) - Enable glibc for POWER10 (#1845098) - Improve performance of library strstr() function (#1821531) - Do not clobber errno in nss_compat (#1836867) - Support building rpm under newer versions of Coverity Scan (#1835999) - Enhance memory protection key support on ppc64le (#1642150) - Reduce IFUNC resolver usage in libpthread and librt (#1748197) - Math library optimizations for IBM Z (#1780204)
- Additional patch for s_nearbyint.c - elf: Assign TLS modid later during dlopen (#1774115) - x86-64: Automatically install nss_db.i686 for 32-bit environments (#1807824) - ppc64le: Enable protection key support (#1642150) - ppc64le: floating-point status and exception optimizations (#1783303) - Update to Linux 5.6 syscall-names.list. (#1810224) - CVE-2020-1751: Fix an array overflow in backtrace on PowerPC. (#1813399) - CVE:2020-1752: Fix a use after free in glob when expanding ~user. (#1813398) - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
sincosl, and tanl function. (#1811796) - Improve elf/ and nptl/ testsuites (#1810223) - Fix resource leak in getaddrinfo (#1810146) - Protect locale archive against corruption (#1784525) - Properly handle signed vs. unsigned values in mallopt (#1784520) - Update and harmonize locale names with CLDR (#1757354) - Fix filter and auxiliary filter implementation (#1812756) - Handle .dynstr located in separate segment (#1774114) - Disable vtable validation for pre-2.1 interposed handles (#1775819) - Define __CORRECT_ISO_CPP_STRING_H_PROTO for Clang. (#1784519) - Math library optimizations for IBM Z (#1780204) - Filter "ignore" autofs mount entries in getmntent (#1743445) - Fix /etc/resolv.conf reloading defects (#1810142) - ld.so: Reset GL (dl_initfirst) pointer on dlopen failure (#1410154) - Roll back dynamic linker state on dlopen failure (#1410154) - s390x: Fix z15 strstr for patterns crossing pages (#1777241) - Rebuild with new rpm (#1654901) - Avoid invalid __has_include in <sys/stat.h> (#1775294) - x86-64: Ignore LD_PREFER_MAP_32BIT_EXEC in SUID binaries (#1774021) - Fix alignment of TLS variables for tls variant TLS_TCB_AT_TP (#1764214) - Refuse to dlopen PIE objects (#1764223) - Fix C.UTF-8 locale source ellipsis expressions (#1361965) - Fix hangs during malloc tracing (#1764235) - Support moving versioned symbols between sonames (#1764231) - Avoid creating stale utmp entries for repeated pututxline (#1749439) - Backport more precise tokenizer for installed headers test (#1769304) - math: Enable some math builtins for clang in LLVM Toolset (#1764242) - Support Fortran vectorized math functions with GCC Toolset 9 (#1764238) - aarch64: Support STO_AARCH64_VARIANT_PCS, DT_AARCH64_VARIANT_PCS (#1726638) - Add more test-in-container support (#1747502) - Fix calling getpwent after endpwent (#1747502) - nptl: Avoid fork handler lock for async-signal-safe fork (#1746928) - Call _dl_open_check after� x�������������ȳ���� X � and�yferr��������p�������� 0.2�$ O ���������������� � � "G � 111
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2151111
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2151111
- Allow insights-client dbus chat with various services
Resolves: rhbz#2152867
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2152867
- Allow redis get user names
Resolves: rhbz#2112228
- Add winbind-rpcd to samba_enable_home_dirs boolean
Resolves: rhbz#2143696 - Allow ipsec_t only read tpm devices
Resolves: rhbz#2147380
- Allow ipsec_t read/write tpm devices
Resolves: rhbz#2147380
- Label udf tools with fsadm_exec_t
Resolves: rhbz#1972230
- Allow the spamd_update_t domain get generic filesystem attributes
Resolves: rhbz#2144501
- Allow cdcc mmap dcc-client-map files
Resolves: rhbz#2144505
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2143878
- Allow insights client read raw memory devices
Resolves: rhbz#2143878
- Allow winbind-rpcd get attributes of device and pty filesystems
Resolves: rhbz#2107106
- Allow postfix/smtpd read kerberos key table
Resolves: rhbz#1983308 - Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2141311
- Allow iptables list cgroup directories
Resolves: rhbz#2134820
- Allow systemd-hostnamed dbus chat with init scripts
Resolves: rhbz#2111632
- Allow systemd to read symlinks in /var/lib
Resolves: rhbz#2118784
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2141311
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2141311
- Allow insights-client manage generic locks
Resolves: rhbz#2141311
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2141311
- Allow winbind-rpcd use the terminal multiplexor
Resolves: rhbz#2107106
- Allow mrtg send mails
Resolves: rhbz#2103675
- Allow sssd dbus chat with system cronjobs
Resolves: rhbz#2132922
- Allow postfix/smtp and postfix/virtual read kerberos key table
Resolves: rhbz#1983308 - Add the systemd_connectto_socket_proxyd_unix_sockets() interface
Resolves: rhbz#208441
- Add the dev_map_vhost() interface
Resolves: rhbz#2122920
- Allow init remount all file_type filesystems
Resolves: rhbz#2122239
- added policy for systemd-socket-proxyd
Resolves: rhbz#2088441
- Allow virt_domain map vhost devices
Resolves: rhbz#2122920
- Allow virt domains to access xserver devices
Resolves: rhbz#2122920
- Allow rotatelogs read httpd_log_t symlinks
Resolves: rhbz#2030633
- Allow vlock search the contents of the /dev/pts directory
Resolves: rhbz#2122838
- Allow system cronjobs dbus chat with setroubleshoot
Resolves: rhbz#2125008
- Allow ptp4l_t name_bind ptp_event_port_t
Resolves: rhbz#2130168
- Allow pcp_domain execute its private memfd: objects
Resolves: rhbz#2090711
- Allow samba-dcerpcd use NSCD services over a unix stream socket
Resolves: rhbz#2121709
- Allow insights-client manage samba var dirs
Resolves: rhbz#2132230 - Add the files_map_read_etc_files() interface
Resolves: rhbz#2132230
- Allow insights-client manage samba var dirs
Resolves: rhbz#2132230
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2132230
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2132230
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2132230
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2132230
- Add file context entries for insights-client and rhc
Resolves: rhbz#2132230
- Allow snmpd_t domain to trace processes in user namespace
Resolves: rhbz#2121084
- Allow sbd the sys_ptrace capability
Resolves: rhbz#2124552
- Allow pulseaudio create gnome content (~/.config)
Resolves: rhbz#2124387 - Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-cl� x�������������@����� X � 5��y-5 J� p�������� hat.�$ u ���������������� � � � � bin, it depends on /usr stuff
- add rescuept - point more at the correct path to vi (for "v"), Bug #10882 - FHS packaging changes. - modify PAM setup to use system-auth - eek, where did login go? (specfile tweaks) - 2.10k
- fix compilation with current glibc - 2.10h - rebuild for sparc baud rates > 38400. - use snprintf - not sprintf - when doing
sprintf ("%s\n", _("Some string")) to avoid overflows and
segfaults. - raw control file was /dev/raw, now /dev/rawctl.
- raw access files were /dev/raw*, now /dev/raw/raw*. - -v argument to mkswap wasn't working - Recognize 0xfd on Sun disklabels as RAID - more lives in /bin, and was linked against /usr/lib/libnurses. Bad. - update to 2.10f
- fix issues in the new realpath code, avoid leaking memory - rebuild to fix dependencies
- add NFSv3 patches - don't require csh - update to 2.10e
- add rename - strip newlines in logger input. - rebuild with correct ncurses libs. - updated to util-linux 2.10c
- deprecated IMAP login mail notification patch17
- deprecated raw patch22
- depricated readprofile patch24 - add patch for readprofile - tunelp should come from util-linux - kbdrate cannot use /dev/port on sparc. - fix kbdrate on sparc. - ship hwclock on alpha. - don't ship symlinks to rdev if we don't ship rdev. - add rawIO support from sct - don't display "new mail" message when the only piece of mail is from IMAP - kbdrate is now a console program - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
- update to 2.9w:
- Updated mount.8 (Yann Droneaud)
- Improved makefiles
- Fixed flaw in fdisk - tsort is now in textutils. - turn off setuid bit on login. Again. :( - hostid script for sparc (#3803). - added locale message catalogs to %file
- added patch for non-root build
- vigr.8 and /usr/lib/getopt man-page was missing from file list
- /etc/fdprm really is a config file - update to 2.9v:
- cfdisk no longer believes the kernel's HDGETGEO
(and may be able to partition a 2 TB disk) - update to 2.9u:
- Czech more.help and messages (Jiri Pavlovsky)
- Japanese messages (Daisuke Yamashita)
- fdisk fix (Klaus G. Wagner)
- mount fix (Hirokazu Takahashi)
- agetty: enable hardware flow control (Thorsten Kranzkowski)
- minor cfdisk improvements
- fdisk no longer accepts a default device
- Makefile fix - update to 2.9t:
- national language support for hwclock
- Japanese messages (both by Daisuke Yamashita)
- German messages and some misc i18n fixes (Elrond)
- Czech messages (Jiri Pavlovsky)
- wall fixed for /dev/pts/xx ttys
- make last and wall use getutent() (Sascha Schumann)
[Maybe this is bad: last reading all of wtmp may be too slow.
Revert in case people complain.]
- documented UUID= and LABEL= in fstab.5
- added some partition types
- swapon: warn only if verbose - update to 2.9s. - fix mkswap sets incorrect bits on sparc64 (#3140). - on sparc64 random ioctls on clock interface cause kernel messages. - improved raid patch (H.J. Lu). - added patch for smartraid controllers - fix logging problems caused by setproctitle and PAM interaction
(#2045) - include docs and examples for sfdisk (#1164) - rtc is not working properly on alpha, we can't use hwclock yet. - add patch to make mkswap more 64 bit friendly... Patch from
eranian@hpl.hp.com (ahem!) - include sfdisk (#1164)
- fix write (#1784)
- use positive logic in spec file (ifarch rather than ifnarch).
- (re)-use 1st matching utmp slot if search by mypid not found.
- update to 2.9o
- lastb wants bad logins in wtmp clone /var/run/btmp (#884) - if hwclock is to be compiled on sparc,
it must actually work. Also, it should obsolete
clock, otherwise it clashes.
- limit the swap size in mkswap for 2.2.1+ kernels
by the actual maximum size kernel can handle.
- fix kbdrate on sparc, patch by J. S. Connell
<ankh@canuck.gen.nz> - added pam_console back into pam.d/login - updated to 2.9i
- added hwclock for sparcs and alpha - added vigr to file list - auto rebuild in the new build environment (release 12) - remove most of the ifnarch arm stuff - added pam_console.so to /etc/pam.d/lo� x�������������X����� X \ �y ���������������5 �$ u ���������������� �5 �5 �5 � 1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.3.20160129gitdd3d10c Remi Collet <remi@fedoraproject.org> 7.0.3-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.2-1 Remi Collet <remi@fedoraproject.org> 7.0.2-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.1-1 Remi Collet <remi@fedoraproject.org> 7.0.1-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-2 Remi Collet <remi@fedoraproject.org> 7.0.0-1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.26.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.25.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.24.RC7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.23.RC7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.22.RC6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.21.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.20.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.19.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.18.RC4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.17.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.16.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.15.RC2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.14.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.13.beta3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.12.beta2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.11.beta1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.10.alpha2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150617git3697f02 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150611git8cfe282 Remi Collet <remi@fedoraproject.org> 7.0.0-0.8.alpha1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150602git8a089e7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150525git6f46fa3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150525git404360f Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150518gitcee8857 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150515gitc9f27ee Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150507gitdd0b602 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150428git94f0b94 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150427git1a4d3e4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150418git1f0a624 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150416gitc77d97f Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150403gitadcf0c6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.4.20150331git463ca30 Remi Collet <remi@fedoraproject.org> 7.0.0-0.3.20150325git2fe6acd Remi Collet <remi@fedoraproject.org> 7.0.0-0.2.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.1.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 5.6.7-1 Remi Collet <remi@fedoraproject.org> 5.6.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.6-1 Remi Collet <remi@fedoraproject.org> 5.6.5-1 Remi Collet <rcollet@redhat.com> 5.6.5-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.4-2 Remi Collet <remi@fedoraproject.org> 5.6.4-1 Remi Collet <remi@fedoraproject.org> 5.6.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.3-3 Remi Collet <remi@fedoraproject.org> 5.6.3-2 Remi Collet <remi@fedoraproject.org> 5.6.3-1 Remi Collet <remi@fedoraproject.org> 5.6.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.2-1 Remi Collet <remi@fedoraproject.org> 5.6.1-1 Remi Collet <remi@fedoraproject.org> 5.6.0-1.1 Remi Collet <remi@fedoraproject.org> 5.6.0-1 Remi Collet <rcollet@redhat.com> - 5.6.0-0.1.RC4 Remi Collet <rcollet@redhat.com> - 5.5.6-10 Remi Collet <rcollet@redhat.com> - 5.5.6-9 Remi Collet <rcollet@redhat.com> - 5.5.6-8 Remi Collet <rcollet@redhat.com> - 5.5.6-7 Remi Collet <rcollet@redhat.com> - 5.5.6-6 Remi Collet <rcollet@redhat.com> - 5.5.6-5 Remi Collet <rcollet@redhat.com> - 5.5.6-4 Remi Collet <rcollet@redhat.com> 5.5.6-2 Remi Collet <rcollet@redhat.com> 5.5.6-0 Remi Collet <rcollet@redhat.com> 5.5.5-1 Remi Collet <rcollet@redhat.com> 5.5.4-1 Remi Collet <rcollet@redhat.com> 5.5.3-1 Remi Collet <rcollet@redhat.com> 5.5.1-1 Remi Collet <rcollet@redhat.com> 5.4.16-6 Remi Collet <rcollet@redhat.com> 5.4.16-5 Remi Collet <rcollet@redha� x�������������0����� X � 19��y- Al�� (����� init�$ b ���������������� � � � � with NetworkManager
- Fix cobbler labels
- Dontaudit iceauth_t leaks
- fix /var/lib/lxdm file context
- Allow aiccu to use tun tap devices
- Dontaudit shutdown using xserver.log - Fixes for sandbox_x_net_t to match access for sandbox_web_t ++
- Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
- Add dontaudit interface for bluetooth dbus
- Add chronyd_read_keys, append_keys for initrc_t
- Add log support for ksmtuned
Resolves: #586663 - Allow boinc to send mail - Allow initrc_t to remove dhcpc_state_t
- Fix label on sa-update.cron
- Allow dhcpc to restart chrony initrc
- Don't allow sandbox to send signals to its parent processes
- Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
Resolves: #589136 - Fix location of oddjob_mkhomedir
Resolves: #587385
- fix labeling on /root/.shosts and ~/.shosts
- Allow ipsec_mgmt_t to manage net_conf_t
Resolves: #586760 - Dontaudit sandbox trying to connect to netlink sockets
Resolves: #587609
- Add policy for piranha - Fixups for xguest policy
- Fixes for running sandbox firefox - Allow ksmtuned to use terminals
Resolves: #586663
- Allow lircd to write to generic usb devices - Allow sandbox_xserver to connectto unconfined stream
Resolves: #585171 - Allow initrc_t to read slapd_db_t
Resolves: #585476
- Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
Resolves: #585963 - Allow rlogind_t to search /root for .rhosts
Resolves: #582760
- Fix path for cached_var_t
- Fix prelink paths /var/lib/prelink
- Allow confined users to direct_dri
- Allow mls lvm/cryptosetup to work - Allow virtd_t to manage firewall/iptables config
Resolves: #573585 - Fix label on /root/.rhosts
Resolves: #582760
- Add labels for Picasa
- Allow openvpn to read home certs
- Allow plymouthd_t to use tty_device_t
- Run ncftool as iptables_t
- Allow mount to unmount unlabeled_t
- Dontaudit hal leaks - Allow livecd to transition to mount - Update to upstream
- Allow abrt to delete sosreport
Resolves: #579998
- Allow snmp to setuid and gid
Resolves: #582155
- Allow smartd to use generic scsi devices
Resolves: #582145 - Allow ipsec_t to create /etc/resolv.conf with the correct label
- Fix reserved port destination
- Allow autofs to transition to showmount
- Stop crashing tuned - Add telepathysofiasip policy - Update to upstream
- Fix label for /opt/google/chrome/chrome-sandbox
- Allow modemmanager to dbus with policykit - Fix allow_httpd_mod_auth_pam to use auth_use_pam(httpd_t)
- Allow accountsd to read shadow file
- Allow apache to send audit messages when using pam
- Allow asterisk to bind and connect to sip tcp ports
- Fixes for dovecot 2.0
- Allow initrc_t to setattr on milter directories
- Add procmail_home_t for .procmailrc file - Fixes for labels during install from livecd - Fix /cgroup file context
- Fix broken afs use of unlabled_t
- Allow getty to use the console for s390 - Fix cgroup handling adding policy for /cgroup
- Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set - Merge patches from dgrift - Update upstream
- Allow abrt to write to the /proc under any process - Fix ~/.fontconfig label
- Add /root/.cert label
- Allow reading of the fixed_file_disk_t:lnk_file if you can read file
- Allow qemu_exec_t as an entrypoint to svirt_t - Update to upstream
- Allow tmpreaper to delete sandbox sock files
- Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
- Fixes for gitosis
- No transition on livecd to passwd or chfn
- Fixes for denyhosts - Add label for /var/lib/upower
- Allow logrotate to run sssd
- dontaudit readahead on tmpfs blk files
- Allow tmpreaper to setattr on sandbox files
- Allow confined users to execute dos files
- Allow sysadm_t to kill processes running within its clearance
- Add accountsd policy
- Fixes for corosync policy
- Fixes from crontab policy
- Allow svirt to manage svirt_image_t chr files
- Fixes for qdisk policy
- Fixes for sssd policy
- Fixes for newrole policy - make libvirt work on an MLS platform - Add qpidd policy - Update � x��������������q���� X � MPt�yOR_D��������H� � IG_Z�$ x ���������������� � � � � ot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root ro� x������������� a���� X � pt��ydora��������ȍ `G RC1
�$ p ���������������� `G _G aG � 8.0.16RC1 - Update to 8.0.15 - http://www.php.net/releases/8_0_15.php - update to 8.0.15RC1 - Update to 8.0.14 - http://www.php.net/releases/8_0_14.php - ensure we use libgd >= 2.3 - update to 8.0.14RC1
- use oracle client library version 21.4 - Update to 8.0.13 - http://www.php.net/releases/8_0_13.php - update to 8.0.13RC1 - dba: enable qdbm backend - add patch for OpenSSL 3.0 on F36 and EL9 - Update to 8.0.12 - http://www.php.net/releases/8_0_12.php - build using system libxcrypt (Fedora) - update to 8.0.12RC1
- use libicu version 69 - Update to 8.0.11 - http://www.php.net/releases/8_0_11.php - update to 8.0.11RC1
- use oracle client library version 21.3 - Update to 8.0.10 - http://www.php.net/releases/8_0_10.php - phar: switch to sha256 signature by default, backported from 8.1
- phar: implement openssl_256 and openssl_512 for signatures, backported from 8.1
- snmp: add sha256 / sha512 security protocol, backported from 8.1 - update to 8.0.10RC1
- adapt systzdata patch for timelib 2020.03 (v20) - add upstream patch for https://bugs.php.net/81325 segfault in simplexml - Update to 8.0.9 - http://www.php.net/releases/8_0_9.php - update to 8.0.9RC1 - Update to 8.0.8 - http://www.php.net/releases/8_0_8.php - update to 8.0.8RC1
- ignore unsupported "threads" option on password_hash - Update to 8.0.7 - http://www.php.net/releases/8_0_7.php - update to 8.0.7RC1 - get rid of inet_ntoa, inet_aton, inet_addr and gethostbyaddr calls - Update to 8.0.6 - http://www.php.net/releases/8_0_6.php - Update to 8.0.5 - http://www.php.net/releases/8_0_5.php - update to 8.0.5RC1 - update to 8.0.4RC1
- use oracle client library version 21.1 - Update to 8.0.3 - http://www.php.net/releases/8_0_3.php - update to 8.0.3RC1 - Update to 8.0.2 - http://www.php.net/releases/8_0_2.php - add upstream patch for https://bugs.php.net/80682
fix opcache doesn't honour pcre.jit option - update to 8.0.2RC1
- oci8 version is now 3.0.1 - Update to 8.0.1 - http://www.php.net/releases/8_0_1.php - test build for new upstream patch (from 8.1) - update to 8.0.1RC1 - fix service dependency name
- add dependency on make for devel - update to 8.0.0 GA - update to 8.0.0RC5
- use oracle client library version 19.9 - update to 8.0.0RC4 - update to 8.0.0RC3 - update to 8.0.0RC2 - update to 8.0.0rc1
- bump ABI/API versions - use %bcond_without for dtrace, libgd, firebird, lsws, libpcre, imap
tidy, freetds, sqlite3, enchant so can be disabled during rebuild
- use %bcond_with for libgd, libpcre, oci8, and zip
so can be enabled during rebuild - update to 8.0.0beta4 - update to 8.0.0beta3
- adapt systzdata patch (v19) - build with upstream fix for zend_call_method - update to 8.0.0beta2 - use oracle client library version 19.8 - update to 8.0.0beta1
- bump ABI/API versions - update to 8.0.0alpha3
- oci8 version is now 3.0.0 - rebuild using ICU 65 - rebuild 1 upstream patch - update to 8.0.0alpha2
- display build system and provider in phpinfo - add upstream patch to use hash in gen_stub.php - use system nikic/php-parser if available to generate
C headers from PHP stub
- switch from "runselftest" option to bcond_without tests - update to 8.0.0alpha1 - new snapshot - new snapshot
- rebuild using oniguruma5php - new snapshot
- drop patch to fix PHP_UNAME - new snapshot
- drop xmlrpc extension - new snapshot
- json is now build statically - new snapshot
- build phpdbg only once - new snapshot - use php-config from embed SAPI to reduce used libs - new snapshot - new snapshot - new snapshot - new snapshot
- enchant: use libenchant-2 instead of libenchant - new snapshot
- test build for https://github.com/php/php-src/pull/5480 - new snapshot
- fix tag=disable-static - new snapshot
- revert changes to use non PIC object files - new snapshot - new snapshot - new snapshot
- refresh php.ini from upstream
- rename 15-php80-php.conf to 20-php70-php.conf to ensure load order - update to 8.0.0-dev - update to 7.4.5RC1 - Update to 7.4.4 - http://www.php.net/releases/7_4_4.php
- use oracle client library version 19.6 (18.5 on EL-6) - update to 7.4.4RC1 - Update � x��������������P���� X � ss��yile_p������Hc f to s�$ v ���������������� f + g � ilt. - Build requires gnutls-devel.
- Fixed default policy name.
- Fixed 'set-allowed-users' in web UI. - 1.2b2.
- Use new CUPS_SERVERBIN location (/usr/lib/cups even on 64-bit hosts). - Fixed some permissions. - Ship /etc/cups/ssl directory. - 1.2b1. No longer need devid patch. - Fixed 'device-id' attribute in GET_DEVICES requests (STR #1467). - New svn snapshot.
- No longer need browse or raw patches. - Fixed raw printing.
- Removed (unapplied) session printing patch.
- Fixed browse info. - New svn snapshot. - New svn snapshot.
- No longer need enabledisable patch.
- Fixed double-free in scheduler/policy.c (STR #1428). - New svn snapshot. - Use -fPIE not -fpie in PIE patch.
- Fix link patch.
- Patch in PIE instead of using --enable-pie, since that doesn't work. - 1.2 svn snapshot.
- No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
- Removed autodetect-tag patch. - Include 'Autodetected' tag for better integration with autodetection tools. - Apply dest-cache-v2 patch (bug #175847). - Apply patch to fix CVE-2005-3625, CVE-2005-3626, CVE-2005-3627
(bug #176868). - Link pdftops with -z relro. - rebuilt - rebuild for new dbus - rebuilt with new openssl - Build with -fstack-protector-all. - link libcupsimage.so against libcups - Apply patch to fix STR #1301 (bug #169979). - Apply patch to fix STR #1290. - Apply upstream patch for STR #1249. - Use upstream patch for STR #1284. - use include instead of pam_stack in pam config - Raise IPP_MAX_VALUES to 100 (bug #164232). STR #1284.
- Made FindDest better behaved in some instances (bug #164232). STR #1283. - Fixed CAN-2005-2097 (bug #164510). - Make DeletePrinterFromClass faster (bug #160620). - Don't require exact dbus version, just minimum. - Fixed up dbus patch so that it compiles. - Fix up dbus patch - Fixed up dbus patch to work with dbus 0.31 - rebuild for openssl-0.9.7e - UTF-8-ify spec file (bug #149293). - Fixed build with GCC 4. - Back to old DBUS API since new DBUS isn't built yet. - Use upstream patch for STR #1068.
- Apply patch to fix remainder of CAN-2004-0888 (bug #135378). - Applied patch to prevent occasional cupsd crash on reload (bug #146850). - New DBUS API. - Applied patch to prevent file descriptor confusion (STR #1068). - Build does not require XFree86-devel (bug #146397). - Corrected directory modes so that they reflect what cupsd sets them to. - Build against new dbus. - Use tmpwatch to remove unused files in the spool temporary directory
(bug #110026). - Use gzip's -n flag for the PPDs. - Mark the initscript noreplace (bug #145629). - Applied patch to fix CAN-2005-0064. - Fixed patch from STR #1023. - 1.1.23. - 1.1.23rc1.
- No longer need ioctl, ref-before-use, str1023 or str1024 patches. - Use upstream patches for bug #143086. - Fixed STR #1023 (part of bug #143086).
- Fixed STR #1024 (rest of bug #143086). - Not all files in the doc directory are pure documentation (bug #67337). - Fixed ioctl parameter size in usb backend. Spotted by David A. Marlin. - Convert de and fr .tmpl files into UTF-8 (bug #136177). - Fix ref-before-use bug in debug output (bug #141585). - Copied "ext" patch over from xpdf RPM package. - Fixed cups-lpd file mode (bug #137325).
- Convert all man pages to UTF-8 (bug #107118). Patch from Miloslav Trmac. - New lpd subpackage, from patch by Matthew Galgoci (bug #137325). - 1.1.22.
- No longer need ippfail, overread or str970 patches. - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
- Use upstream patch for STR #953.
- 1.1.22rc2. - Prevent filters generating incorrect PS in locales where "," is the
decimal separator (bug #136102). Patch from STR #970. - Fixed another typo in last patch! - Fixed typo in last patch. - Another attempt at fixing bug #135502. - Fail better when receiving corrupt IPP responses (bug #135502). - 1.1.22rc1. - Set LogFilePerm 0600 in default config file. - Apply patch to fix CAN-2004-0923 (bug � x�������������@���� X � i�y Xz�������P���?& �$ / ���������������� ?& >& @& � t domain transition to rpm_script_t
Resolves: rhbz#1872245
- Allow unbound connectto unix_stream_socket
Resolves: rhbz#1905441
- Label /usr/sbin/virtproxyd as virtd_exec_t
Resolves: rhbz#1854332
- Allow postfix_domain to sendto unix dgram sockets.
Resolves: rhbz#1920521 - Allow rhsmcertd_t dbus chat with anaconda install_t
Resolves: rhbz#2004990 - Introduce xdm_manage_bootloader booelan
Resolves: rhbz#1994096
- Rename samba_exec() to samba_exec_net()
Resolves: rhbz#1855215
- Allow sssd to set samba setting
Resolves: rhbz#1855215
- Allow dirsrv read slapd tmpfs files
Resolves: rhbz#1843238
- Allow rhsmcertd to create cache file in /var/cache/cloud-what
Resolves: rhbz#1994718 - Label /usr/bin/Xwayland with xserver_exec_t
Resolves: rhbz#1984584
- Label /usr/libexec/gdm-runtime-config with xdm_exec_t
Resolves: rhbz#1984584
- Allow D-bus communication between avahi and sosreport
Resolves: rhbz#1916397
- Allow lldpad send to kdumpctl over a unix dgram socket
Resolves: rhbz#1979121
- Revert "Allow lldpad send to kdump over a unix dgram socket"
Resolves: rhbz#1979121
- Allow chronyc respond to a user chronyd instance
Resolves: rhbz#1993104
- Allow ptp4l respond to pmc
Resolves: rhbz#1993104
- Allow lldpad send to unconfined_t over a unix dgram socket
Resolves: rhbz#1993270 - Revert "update libs_filetrans_named_content() to have support for /usr/lib/debug directory"
Resolves: rhbz#1887739
- Allow sysadm to read/write scsi files and manage shadow
Resolves: rhbz#1956302
- Allow rhsmcertd execute gpg
Resolves: rhbz#1887572
- Allow lldpad send to kdump over a unix dgram socket
Resolves: rhbz#1979121
- Remove glusterd SELinux module from distribution policy
Resolves: rhbz#1816718 - Allow login_userdomain read and map /var/lib/systemd files
Resolves: rhbz#1965251
- Allow sysadm acces to kernel module resources
Resolves: rhbz#1965251
- Allow sysadm to read/write scsi files and manage shadow
Resolves: rhbz#1965251
- Allow sysadm access to files_unconfined and bind rpc ports
Resolves: rhbz#1965251
- Allow sysadm read and view kernel keyrings
Resolves: rhbz#1965251
- Allow bootloader to read tuned etc files
Resolves: rhbz#1965251
- Update the policy for systemd-journal-upload
Resolves: rhbz#1913414
- Allow journal mmap and read var lib files
Resolves: rhbz#1965251
- Allow tuned to read rhsmcertd config files
Resolves: rhbz#1965251
- Allow bootloader to read tuned etc files
Resolves: rhbz#1965251
- Confine rhsm service and rhsm-facts service as rhsmcertd_t
Resolves: rhbz#1846081
- Allow virtlogd_t read process state of user domains
Resolves: rhbz#1797899
- Allow cockpit_ws_t get attributes of fs_t filesystems
Resolves: rhbz#1979182 - Add the unconfined_dgram_send() interface
Resolves: rhbz#1978562
- Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern()
Resolves: rhbz#1936522
- Add checkpoint_restore cap2 capability
Resolves: rhbz#1973325
- Allow fcoemon talk with unconfined user over unix domain datagram socket
Resolves: rhbz#1978562
- Allow hostapd bind UDP sockets to the dhcpd port
Resolves: rhbz#1977676
- Allow NetworkManager read and write z90crypt device
Resolves: rhbz#1938203
- Allow abrt_domain read and write z90crypt device
Resolves: rhbz#1938203
- Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t
Resolves: rhbz#1937111
- Allow mdadm read iscsi pid files
Resolves: rhbz#1924716 - Allow dyntransition from sshd_t to unconfined_t
Resolves: rhbz#1947841 - Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template
Resolves: rhbz#1947841
- Allow transition from xdm domain to unconfined_t domain.
Resolves: rhbz#1947841
- Allow nftables read NetworkManager unnamed pipes
Resolves: rhbz#1967857
- Create a policy for systemd-journal-upload
Resolves: rhbz#1913414
- Add dev_getattr_infiniband_dev() interface.
Resolves: rhbz#1972522
- Allow tcpdump and nmap get attributes of infiniband_device_t
Resolves: rhbz#1972522
- Allow fcoemon create sysfs files
Resolves: rhbz#1978562
- Allow nftables read NetworkManager unnamed pipes
Resolves: rhbz#1967857
- Allow radius map its library fil� x��������������/���� X � Kc�yle l���������@������� rs f�$ N ���������������� � � � � lived to manage its tmp files
Resolves: rhbz#2179335 - Update pkcsslotd policy for sandboxing 2/2
Resolves: rhbz#2208162
- Update pkcsslotd policy for sandboxing 1/2
Resolves: rhbz#2208162
- Allow abrt_t read kernel persistent storage files
Resolves: rhbz#2207914
- Add allow rules for lttng-sessiond domain
Resolves: rhbz#2203509
- Allow rpcd_lsad setcap and use generic ptys
Resolves: rhbz#2107106
- Allow samba-dcerpcd connect to systemd_machined over a unix socket
Resolves: rhbz#2107106
- Dontaudit targetd search httpd config dirs
Resolves: rhbz#2203720 - Allow unconfined service inherit signal state from init
Resolves: rhbz#2177254
- Allow systemd-pstore delete kernel persistent storage files
Resolves: rhbz#2181558
- Add fs_delete_pstore_files() interface
Resolves: rhbz#2181558
- Allow certmonger manage cluster library files
Resolves: rhbz#2177836
- Allow samba-rpcd work with passwords
Resolves: rhbz#2107106
- Allow snmpd read raw disk data
Resolves: rhbz#2160000
- Allow cluster_t dbus chat with various services
Resolves: rhbz#2196524 - Add unconfined_server_read_semaphores() interface
Resolves: rhbz#2183351
- Allow systemd-pstore read kernel persistent storage files
Resolves: rhbz#2181558
- Add fs_read_pstore_files() interface
Resolves: rhbz#2181558
- Allow insights-client work with teamdctl
Resolves: rhbz#2185158
- Allow insights-client read unconfined service semaphores
Resolves: rhbz#2183351
- Allow insights-client get quotas of all filesystems
Resolves: rhbz#2183351 - Allow login_pgm setcap permission
Resolves: rhbz#2172541
- Label /run/fsck with fsadm_var_run_t
Resolves: rhbz#2184348
- Add boolean qemu-ga to run unconfined script
Resolves: rhbz#2028762
- Allow dovecot-deliver write to the main process runtime fifo files
Resolves: rhbz#2170495
- Allow certmonger dbus chat with the cron system domain
Resolves: rhbz#2173289
- Allow insights-client read all sysctls
Resolves: rhbz#2177607 - Fix opencryptoki file names in /dev/shm
Resolves: rhbz#2028637
- Allow system_cronjob_t transition to rpm_script_t
Resolves: rhbz#2154242
- Revert "Allow system_cronjob_t domtrans to rpm_script_t"
Resolves: rhbz#2154242
- Allow httpd work with tokens in /dev/shm
Resolves: rhbz#2028637
- Allow keepalived to set resource limits
Resolves: rhbz#2168638
- Allow insights-client manage fsadm pid files - Allow sysadm_t run initrc_t script and sysadm_r role access
Resolves: rhbz#2039662
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2166802
- Add journalctl the sys_resource capability
Resolves: rhbz#2136189 - Fix syntax problem in redis.te
Resolves: rhbz#2112228
- Allow unconfined user filetransition for sudo log files
Resolves: rhbz#2164047
- Allow winbind-rpcd make a TCP connection to the ldap port
Resolves: rhbz#2152642
- Allow winbind-rpcd manage samba_share_t files and dirs
Resolves: rhbz#2152642
- Allow insights-client work with su and lpstat
Resolves: rhbz#2134125
- Allow insights-client read nvme devices
Resolves: rhbz#2143878
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2143878
- Allow redis-sentinel execute a notification script
Resolves: rhbz#2112228 - Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2141311
- Allow sysadm_t read/write ipmi devices
Resolves: rhbz#2148561
- Allow sudodomain use sudo.log as a logfile
Resolves: rhbz#2143762
- Add insights additional capabilities
Resolves: rhbz#2158779
- Allow insights client work with gluster and pcp
Resolves: rhbz#2141311
- Allow prosody manage its runtime socket files
Resolves: rhbz#2157902
- Allow system mail service read inherited certmonger runtime files
Resolves: rhbz#2143337
- Add lpr_roles to system_r roles
Resolves: rhbz#2151111 - Allow systemd-socket-proxyd get attributes of cgroup filesystems
Resolves: rhbz#2088441
- Allow systemd-socket-proxyd get filesystems attributes
Resolves: rhbz#2088441
- Allow sysadm read ipmi devices
Resolves: rhbz#2148561
- Allow system mail service read inherited certmonger runtime files
Resolves: rhbz#2143337
- Add lpr_roles to system_r roles
Resolves: rhbz#2151� x������������� ���� X � ��o�y�G�+�������� �������@ }��g�$ ���������������� @ @ Ɲ��i�"��yƘ���uq{�Z{��� ���Ā�0 ���2|euWT[h`��k�$
�͚{�-����7 ��N�m��7?�^�!��T<�j��Q��@c���?��5�Zw�3�V� mAF��k �L�qR�^���ݪ�/��p �11134b8be901c9fe9268f769feb61ea2d20c7a9a f40617adda9004c12050f293c54b705a0f49f6bb46cf4d1dc2875b026c5cfa01 d�� �� d��c) [1687459]
- [lib] test_rhashtable: Make test_insert_dup() allocate its hash table dynamically (Jiri Benc) [1717066]
- [lib] test_rhashtable: remove semaphore usage (Jiri Benc) [1717066]
- [lib] rhashtable: detect when object movement between tables might have invalidated a lookup (Jiri Benc) [1717066]
- [lib] rhashtable: remove duplicated include from rhashtable.c (Jiri Benc) [1717066]
- [lib] rhashtable: clean up dereference of ->future_tbl (Jiri Benc) [1717066]
- [lib] rhashtable: use cmpxchg() to protect ->future_tbl (Jiri Benc) [1717066]
- [lib] rhashtable: simplify nested_table_alloc() and rht_bucket_nested_insert() (Jiri Benc) [1717066]
- [lib] rhashtable: simplify INIT_RHT_NULLS_HEAD() (Jiri Benc) [1717066]
- [lib] rhashtable: remove nulls_base and related code (Jiri Benc) [1717066]
- [lib] rhashtable: split rhashtable.h (Jiri Benc) [1717066]
- [lib] rhashtable: silence RCU warning in rhashtable_test (Jiri Benc) [1717066]
- [net] devlink: publish params only after driver init is done (Ivan Vecera) [1715929]
- [net] iptunnel: NULL pointer deref for ip_md_tunnel_xmit (Hangbin Liu) [1712792]
- [net] ip_gre: Refactor collect metatdata mode tunnel xmit to ip_md_tunnel_xmit (Hangbin Liu) [1712792]
- [net] ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit (Hangbin Liu) [1712792]
- [net] ip_tunnel: Add tnl_update_pmtu in ip_md_tunnel_xmit (Hangbin Liu) [1712792]
- [net] ip_tunnel: Add ip tunnel dst_cache in ip_md_tunnel_xmit (Hangbin Liu) [1712792]
- [net] vlan: Mark expected switch fall-through (Hangbin Liu) [1664359]
- [net] vlan: disable SIOCSHWTSTAMP in container (Hangbin Liu) [1664359]
- [netdrv] macvlan: Mark expected switch fall-through (Hangbin Liu) [1664359]
- [netdrv] macvlan: disable SIOCSHWTSTAMP in container (Hangbin Liu) [1664359]
- [netdrv] macvlan: pass get_ts_info and SIOC[SG]HWTSTAMP ioctl to real device (Hangbin Liu) [1664359]
- [net] ethtool: add compat for flash update (Petr Oros) [1708339]
- [net] devlink: add flash update command (Petr Oros) [1708339]
- [net] devlink: Fix list access without lock while reading region (Petr Oros) [1708339]
- [net] devlink: Return right error code in case of errors for region read (Petr Oros) [1708339]
- [net] devlink: use direct return of genlmsg_reply (Petr Oros) [1708339]
- [net] devlink: Rename devlink health attributes (Petr Oros) [1709874]
- [net] devlink: Modify reply of DEVLINK_CMD_HEALTH_REPORTER_GET (Petr Oros) [1709874]
- [net] devlink: Update reporter state to error even if recover aborted (Petr Oros) [1709874]
- [documentation] devlink: Add Documentation/networking/devlink-health.txt (Petr Oros) [1709874]
- [net] devlink: Add health dump {get, clear} commands (Petr Oros) [1709874]
- [net] devlink: Add health diagnose command (Petr Oros) [1709874]
- [net] devlink: Add health recover command (Petr Oros) [1709874]
- [net] devlink: Add health set command (Petr Oros) [1709874]
- [net] devlink: Add health get command (Petr Oros) [1709874]
- [net] devlink: Add health report functionality (Petr Oros) [1709874]
- [net] devlink: Add health reporter create/destroy functionality (Petr Oros) [1709874]
- [net] devlink: Add devlink formatted message (fmsg) API (Petr Oros) [1709874]
- [net] devlink: add hardware errors tracing facility (Petr Oros) [1709874]
- [net] cnb: devlink: report cell size of shared buffers (Petr Oros) [1708348]
- [net] devlink: skip info_get op call if it is not defined in dumpit (Petr Oros) [1708342]
- [include] devlink: add a generic board.manufacture version name (Petr Oros) [1708342]
- [net] devlink: don't allocate attrs on the stack (Petr Oros) [1708342]
- [net] devlink: fix condition for compat device info (Petr Oros) [1708342]
- [net] ethtool: add compat for devlink info (Petr Oros) [1708342]
- [include] devlink: add generic info vers� x�������������x���� X � un��yined���������#���S licy�$ C ���������������� S T R � -14 Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-13 Tomas Orsava <torsava@redhat.com> - 9.0.1-12 Fedora Release Engineering <releng@fedoraproject.org> - 9.0.1-11 Tomas Orsava <torsava@redhat.com> - 9.0.1-10 Tomas Orsava <torsava@redhat.com> - 9.0.1-9 Tomas Orsava <torsava@redhat.com> - 9.0.1-8 Tomas Orsava <torsava@redhat.com> - 9.0.1-7 Tomas Orsava <torsava@redhat.com> - 9.0.1-6 Fedora Release Engineering <releng@fedoraproject.org> - 9.0.1-5 Tomas Orsava <torsava@redhat.com> - 9.0.1-4 Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-3 Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-2 Orion Poplawski <orion@cora.nwra.com> - 9.0.1-1 Orion Poplawski <orion@cora.nwra.com> - 8.1.2-5 Tomas Orsava <torsava@redhat.com> - 8.1.2-4 Tomas Orsava <torsava@redhat.com> - 8.1.2-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 8.1.2-2 Tomas Orsava <torsava@redhat.com> - 8.1.2-1 Slavek Kabrda <bkabrda@redhat.com> - 8.0.2-1 Fedora Release Engineering <releng@fedoraproject.org> - 7.1.0-4 Robert Kuska <rkuska@redhat.com> - 7.1.0-3 Robert Kuska <rkuska@redhat.com> - 7.1.0-2 Slavek Kabrda <bkabrda@redhat.com> - 7.1.0-1 Ville Skyttä <ville.skytta@iki.fi> - 7.0.3-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.0.3-2 Matej Stuchlik <mstuchli@redhat.com> - 7.0.3-1 Matej Stuchlik <mstuchli@redhat.com> - 6.0.8-1 Slavek Kabrda <bkabrda@redhat.com> - 1.5.6-5 Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-4 Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.6-2 Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-1 Matej Stuchlik <mstuchli@redhat.com> - 1.5.4-4 Matej Stuchlik <mstuchli@redhat.com> - 1.5.4-3 Matej Stuchlik <mstuchli@redhat.com> - 1.5.4-2 Matej Stuchlik <mstuchli@redhat.com> - 1.5.4-1 Tim Flink <tflink@fedoraproject.org> - 1.4.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-5 Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-4 Tim Flink <tflink@fedoraproject.org> - 1.3.1-3 Kevin Kofler <Kevin@tigcc.ticalc.org> - 1.3.1-2 Jon Ciesla <limburgher@gmail.com> - 1.3.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.1-3 Tim Flink <tflink@fedoraproject.org> - 1.2.1-2 Tim Flink <tflink@fedoraproject.org> - 1.2.1-1 Tim Flink <tflink@fedoraproject.org> - 1.1.0-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-2 Tim Flink <tflink@fedoraproject.org> - 1.0.2-1 Tim Flink <tflink@fedoraproject.org> - 0.8.3-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.2-2 Luke Macken <lmacken@redhat.com> - 0.8.2-1 Peter Halliday <phalliday@excelsiorsystems.net> - 0.8-1 David Malcolm <dmalcolm@redhat.com> - 0.7.2-5 Peter Halliday <phalliday@excelsiorsystems.net> - 0.7.2-1 Peter Halliday <phalliday@excelsiorsystems.net> - 0.7.1-1 Peter Halliday <phalliday@excelsiorsystems.net> - 0.6.1.4 Peter Halliday <phalliday@excelsiorsystems.net> - 0.6.1-2 Peter Halliday <phalliday@excelsiorsystems.net> - 0.6.1-1 Peter Halliday <phalliday@excelsiorsystems.net> - 0.4-1 - Add rocky to id list - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2218241 - Remove bundled windows executables
- Resolves: rhbz#2006788 - Support of yanked releases
Resolves: rhbz#2000135 - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
Resolves: rhbz#1962856 - Fix bash completion files and simplify spec
Resolves: rhbz#1904478 - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
Resolves: rhbz#1868016 - Remove unused CA bundle from the bundled requests library
Resolves: rhbz#1775200 - Add four new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1702473
Resolves: rhbz#1643829 - Create python-pip-wheel package with the wheel
Resolves: r� x������������������ X � me��yweim������P'������� 6.90�$ v ���������������� � � � � gin - .perms patch to login to make it retain root in parent process
for pam_close_session to work correctly - strip fdisk in buildroot correctly (#718) - have fdisk compiled on sparc and arm - added beos partition type to fdisk - incorporate fdisk on all arches - restore PAM functionality at end of login (Bug #201) - patch top build on the arm without PAM and related utilities, for now.
- build hwclock only on intel - upgraded to version 2.9 - build for Raw Hide (slang-1.2.2)
- patch kbdrate wackiness so it builds with egcs - patched more to use termcap - added warning about alpha/bsd label starting cylinder - use sigsetjmp/siglongjmp in more rather then sig'less versions - explicit attrs for setuid/setgid programs - sln is now included in glibc - add cbm1581 floppy definitions (problem #787) - remove /etc/nologin at end of shutdown/halt. - add mount/losetup. - update to 2.8 with 2.8b clean up. hostid now defunct? - "more" now works properly on sparc - Fix "fdisk -l" fault on mounted cdrom. (prob #513) - translations modified for de, fr, tr - manhattan rebuild - more didn't suspend properly on glibc
- use proper tc*() calls rather then ioctl's - fixed a security problem in chfn and chsh accepting too
long gecos fields - removed "." from default path - added (again) the vipw patch - minor cleanups for glibc 2.1 - added vfat32 filesystem type to list recognized by fdisk - don't build clock on the alpha
- don't install chkdupexe - Update to new pam standard.
- BuildRoot. - added rootok and setproctitle patches
- updated pam config files for chfn and chsh - updated MCONFIG to automatically determine the architecture
- added glibc header hacks to fdisk code
- rdev is only available on the intel - update to util-linux 2.7, fixed login problems - Merged Red Hat changes into main util-linux source, updated package to
development util-linux (nearly 2.7). - LOG_AUTH --> LOG_AUTHPRIV in login and shutdown - Moved to new pam and from pam.conf to pam.d - pam.patch differentiated between different kinds of bad logins.
In particular, "user does not exist" and "bad password" were treated
differently. This was a minor security hole. /sbin/ldconfig /sbin/ldconfig � � � � � � � � 2.32.1-48.el8_10 2.32.1-48.el8_10 .build-id b3 0b6ce4c55c0ed09f8d1ee2c6f895174a9ea659 libfdisk.so.1 libfdisk.so.1.1.0 libfdisk COPYING COPYING.LGPLv2.1 /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/b3/ /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/libfdisk/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b30b6ce4c55c0ed09f8d1ee2c6f895174a9ea659, stripped ASCII text " P P P P P P P P P P P P P P R R R R R R
R R
R R R R R R R R R R R R https://bugs.rockylinux.org utf-8 2c7c5313147e2b02767dfec8984c92236eabe8857c87a39e15af31cf4ae7e149 ? ��� ��JK� I���$��rω3 !pQ�p�)�Tξ7��]�mtZ`i��
�]�mtZ` ��P���
0����H=�=t� =��x�oϊB3H<�8|7H�b���M �j��o[�
�q ]3����̤�
H3m|k��X���bZ&T�(3��ѪmV�����c�)�a�T�c�\�������*K ��}���T�r�UK]�G��zY�e��g�U&�J cM�I����> ��ԋ�[�ۭ ת��!�,/˓�]���:E���i�(_�%���ċ��p�
� �u;��|�ֶ��s��d���`�l����Ǵ ' �p�)v� iΕ��wd��pB`Q���9���w����{U����QwF���l� i]��c� �+�cKw熎|�Wa%@T��w:��zp��l��s���t��7XU
sT��樿���>ׂ���x��1��ql⟱E�?�9V����2?�~��o��݉t��r��D���K���mZv�V�� x�����p������������ X ] ��y М�������
����K �$ v ���������������� �K �K � I L ? F� d � � � � � 0 � L � P � � � � � � � � � � � � � � � � � 4 J
` � �
< h � � � � � ! ( O 8 X o 9 o : � o > @� @ @� G @� H @� I A$ X A0 Y A@ \ A\ ] A� ^ By b B� d D> e DC f DF l DH t D` u D� v D� w E� x F y F8 � F� � F� � F� � F� G G 6 IF IV 6
K� K� � K� K� L g L h L C polkit-libs 0.115 15.el8 Libraries for polkit Libraries files for polkit. c�%5ord1-prod-x86build004.svc.aws.rockylinux.org PKoji Rocky LGPLv2+ infrastructure@rockylinux.org Development/Libraries http://www.freedesktop.org/wiki/Software/polkit linux x86_64 2 0 J� �� �A�A�A����������� c�%5c�%5c�%5c�%5c�%5c�%#c�%+c�%4c�%4c�%3c�%4 028c21253eb16265b81e4395d01d45b7ceb14fd2cbff4c10446746707fc88f06 3eddcc54416933b81fc77971b0544aeb3c09e6488bf85ca4d70aed1bb28a87fb 874d6e1619793f7e09a9d87a1b3c7174ccc8a5e74a8144c671bde5da88b7ca7b 8e7b20646c86ab4ab23b2ce079400cb36af5573f804aa2cd1e6f94d10afa577b ../../../../usr/lib64/libpolkit-gobject-1.so.0.0.0 ../../../../usr/lib64/libpolkit-agent-1.so.0.0.0 libpolkit-agent-1.so.0.0.0 libpolkit-gobject-1.so.0.0.0 root root root root root root root root root root root root root root root root root root root root root root polkit-0.115-15.el8.src.rpm ��������������������������������������������libpolkit-agent-1.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) polkit-libs polkit-libs(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ /sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libexpat.so.1()(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgmodule-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_213)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 cjD�b ��a��`��]��]�)�]w�@]:�]:�\E�@\ @[ug@[m~@[i��[D��Z�l�Z}�@Y�@Yy�X�h@X�X�X�X�D�X��@X���X���V�=@U���U�V�U���U�'�U�@U���T��T^�S�@S�R@S���S�[�R��@R�
�R9��Q�B@Q��Q�x�Q��@Q��@Q�@Q�P�[�P�PѬ@P��@P���P���Puc@PXb@P��O�j�O�OЗ�O���OX�@O8�@O/��On@O�O�N��N��@N�j@N:��M� @M���M�y@M��@M���M���Mo��MbS�MR��MB��L�,@L��L��Lrb�Lk�@Lk�@Le3�L_�L_�KPX�J�J@J�J@Jݦ@J�0@J�0@J��J�;�J� @J���J���JlE@Jd\@Jd\@J.N�J,�@J,�@J +@I��Jan Rybar <jrybar@redhat.com> - 0.115-15 Jan Rybar <jrybar@redhat.com> - 0.115-14 Jan Rybar <jrybar@redhat.com> - 0.115-13 Jan Rybar <jrybar@redhat.com> - 0.115-12 Jan Rybar <jrybar@redhat.com> - 0.115-11 Jan Rybar <jrybar@redhat.com> - 0.115-10 Jan Rybar <jrybar@redhat.com> - 0.115-9 Jan Rybar <jrybar@redhat.com> - 0.115-8 Jan Rybar <jrybar@redhat.com> - 0.115-7 Jan Rybar <jrybar@redhat.com> - 0.115-6 Jan Rybar <jrybar@redhat.com> - 0.115-5 Jan Rybar <jrybar@redhat.com> - 0.115-4 Jan Rybar <jrybar@redhat.com> - 0.115-3 Jan Rybar <jrybar@redhat.com> - 0.115-2 Milo� x������������������� X � er��ys
- �������� ����� e fo�$ c ���������������� � � � � map cert_t
- Add few rules to make tlp_t domain working in enforcing mode
- Allow cloud_init_t to dbus chat with systemd_timedated_t
- Allow logrotate_t to write to kmsg
- Add capability kill to rhsmcertd_t
- Allow winbind to manage smbd_tmp_t files
- Allow groupadd_t domain to dbus chat with systemd.BZ(1488404)
- Add interface miscfiles_map_generic_certs() - Allow abrt_dump_oops_t to read sssd_public_t files
- Allow cockpit_ws_t to mmap usr_t files
- Allow systemd to read/write dri devices. - Add couple rules related to map permissions
- Allow ddclient use nsswitch BZ(1456241)
- Allow thumb_t domain getattr fixed_disk device. BZ(1379137)
- Add interface dbus_manage_session_tmp_dirs()
- Dontaudit useradd_t sys_ptrace BZ(1480121)
- Allow ipsec_t can exec ipsec_exec_t
- Allow systemd_logind_t to mamange session_dbusd_tmp_t dirs - Allow cupsd_t to execute ld_so_cache
- Add cgroup_seclabel policycap.
- Allow xdm_t to read systemd hwdb
- Add new interface systemd_hwdb_mmap_config()
- Allow auditd_t domain to mmap conf files labeled as auditd_etc_t BZ(1485050) - Allow couple map rules - Make confined users working
- Allow ipmievd_t domain to load kernel modules
- Allow logrotate to reload transient systemd unit - Allow postgrey to execute bin_t files and add postgrey into nsswitch_domain
- Allow nscd_t domain to search network sysctls
- Allow iscsid_t domain to read mount pid files
- Allow ksmtuned_t domain manage sysfs_t files/dirs
- Allow keepalived_t domain domtrans into iptables_t
- Allow rshd_t domain reads net sysctls
- Allow systemd to create syslog netlink audit socket
- Allow ifconfig_t domain unmount fs_t
- Label /dev/gpiochip* devices as gpio_device_t - Allow dirsrv_t domain use mmap on files labeled as dirsrv_var_run_t BZ(1483170)
- Allow just map permission insead of using mmap_file_pattern because mmap_files_pattern allows also executing objects.
- Label /var/run/agetty.reload as getty_var_run_t
- Add missing filecontext for sln binary
- Allow systemd to read/write to event_device_t BZ(1471401) - Allow sssd_t domain to map sssd_var_lib_t files
- allow map permission where needed
- contrib: allow map permission where needed
- Allow syslogd_t to map syslogd_var_run_t files
- allow map permission where needed - Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
- Label /usr/libexec/sudo/sesh as shell_exec_t - refpolicy: Infiniband pkeys and endport - Allow osad make executable an anonymous mapping or private file mapping that is writable BZ(1425524)
- After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
- refpolicy: Define and allow map permission
- init: Add NoNewPerms support for systemd.
- Add nnp_nosuid_transition policycap and related class/perm definitions. - Update for SELinux userspace release 20170804 / 2.7
- Omit precompiled regular expressions from file_contexts.bin files - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Allow llpdad send dgram to libvirt
- Allow abrt_t domain dac_read_search capability
- Allow init_t domain mounton dirs labeled as init_var_lib_t BZ(1471476)
- Allow xdm_t domain read unique machine-id generated during system installation. BZ(1467036)
- Dontaudit xdm_t to setattr lib_t dirs. BZ(#1458518) - Dontaudit xdm_t to setattr lib_t dirs. BZ(#1458518) - Add new boolean gluster_use_execmem - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
- Allow iptables to read container runtime files - Allow boinc_t nsswitch
- Dontaudit firewalld to write to lib_t dirs
- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
- Allow thumb_t domain to allow create dgram sockets
- Disable mysqld_safe_t secure mode environment cleansing
- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
- Allow dirsrv domain setrlimit
- Dontaudit staff_t user read admin_home_t file� x�������������X����� X � mk�ydir ��������0K X - Ad�$ ���������������� X X � update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failures - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of systzdata patch - fix build with autoconf 2.6x - update to 5.3.1
- remove openssl patch (merged upstream)
- add provides for php-pecl-json
- add prod/devel php.ini in doc - use libedit instead of readline to resolve licensing issues - rebuilt with new openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - rediff systzdata patch - update to v6 of systzdata patch; various fixes - update to v5 of systzdata patch; parses zone.tab and extracts
timezone->{country-code,long/lat,comment} mapping table - update to 5.3.0
- remove ncurses, dbase, mhash extensions
- add enchant, sqlite3, intl, phar, fileinfo extensions
- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
- sync with upstream "production" php.ini - update to 5.2.10
- add interbase sub-package - update to 5.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - add recode support, -recode subpackage (#106755)
- add -zts subpackage with ZTS-enabled build of httpd SAPI
- adjust php.conf to use -zts SAPI build for worker MPM - fix patch fuzz, renumber patches - drop obsolete configure args
- drop -odbc patch (#483690) - split out sysvshm, sysvsem, sysvmsg, posix into php-process - move wddx to php-xml, build curl shared in -common
- remove BR for expat-devel, bogus configure option - rebuild for new MySQL - libtool 2 workaround for phpize (#476004)
- add missing php_embed.h (#457777) - update to 5.2.8 - libtool 2 workaround - update to 5.2.7
- enable pdo_dblib driver in php-mssql - tweak Summary, thanks to Richard Hughes - move gd_README to php-gd
- update to r4 of systzdata patch; introduces a default timezone
name of "System/Localtime", which uses /etc/localtime (#469532) - enable XPM support in php-gd
- Fix BR for php-gd - enable T1lib support in php-gd - update to 5.2.6
- sync default php.ini with upstream
- drop extension_dir from default php.ini, rely on hard-coded
default, to make php-common multilib-safe (#455091)
- update to r3 of systzdata patch - split pspell extension out into php-spell (#443857) - Autorebuild for GCC 4.3 - ext/date: use system timezone database - rebuild for libc-client bump - Rebuild for openssl bump - update to 5.2.5 - correct pcre BR version (#333021)
- restore metaphone fix (#205714)
- add READMEs to php-cli - update to 5.2.4 - rebuild for fixed APR - add ldconfig post/postun for -embedded (Hans de Goede) - add php-embedded sub-package - fix build with new glibc
- fix License - define php_extdir in macros.php - obsolete php-dbase - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
- enable dbase extension and package in -common - update to 5.2.3 (thanks to Jeff Sheltren) - fix php-pdo *_arg_force_ref global symbol abuse (#216125) - rebuild against uw-imap-devel - update to 5.2.2
- synch changes from upstream recommended php.ini - enable SASL � x���������������� X � ol��y<rco�������������: .8-6�$ * ���������������� : 9 � � userdom_map_user_home_files()
- Sytemd introduced new feature when journald(syslogd_t) is trying to read symlinks to unit files in /run/systemd/units. This commit label /run/systemd/units/* as systemd_unit_file_t and allow syslogd_t to read this content. BZ(1527202)
- Allow xdm_t dbus chat with modemmanager_t BZ(1526722)
- All domains accessing home_cert_t objects should also mmap it. BZ(1519810) - Allow thumb_t domain to dosfs_t BZ(1517720)
- Allow gssd_t to read realmd_var_lib_t files BZ(1521125)
- Allow domain transition from logrotate_t to chronyc_t BZ(1436013)
- Allow git_script_t to mmap git_sys_content_t BZ(1517541)
- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t BZ(1464803)
- Label /run/openvpn-server/ as openvpn_var_run_t BZ(1478642)
- Allow colord_t to mmap xdm pid files BZ(1518382)
- Allow arpwatch to mmap usbmon device BZ(152456)
- Allow mandb_t to read public sssd files BZ(1514093)
- Allow ypbind_t stream connect to rpcbind_t domain BZ(1508659)
- Allow qpid to map files.
- Allow plymouthd_t to mmap firamebuf device BZ(1517405)
- Dontaudit pcp_pmlogger_t to sys_ptrace capability BZ(1416611)
- Update mta_manage_spool() interface to allow caller domain also mmap mta_spool_t files BZ(1517449)
- Allow antivirus_t domain to mmap antivirus_db_t files BZ(1516816)
- Allow cups_pdf_t domain to read cupd_etc_t dirs BZ(1516282)
- Allow openvpn_t domain to relabel networkmanager tun device BZ(1436048)
- Allow mysqld_t to mmap mysqld_tmp_t files BZ(1516899)
- Update samba_manage_var_files() interface by adding map permission. BZ(1517125)
- Allow pcp_pmlogger_t domain to execute itself. BZ(1517395)
- Dontaudit sys_ptrace capability for mdadm_t BZ(1515849)
- Allow pulseaudio_t domain to mmap pulseaudio_home_t files BZ(1515956)
- Allow bugzilla_script_t domain to create netlink route sockets and udp sockets BZ(1427019)
- Add interface fs_map_dos_files()
- Update interface userdom_manage_user_home_content_files() to allow caller domain to mmap user_home_t files. BZ(1519729)
- Add interface xserver_map_xdm_pid() BZ(1518382)
- Add new interface dev_map_usbmon_dev() BZ(1524256)
- Update miscfiles_read_fonts() interface to allow also mmap fonts_cache_t for caller domains BZ(1521137)
- Allow ipsec_t to mmap cert_t and home_cert_t files BZ(1519810)
- Fix typo in filesystem.if
- Add interface dev_map_framebuffer()
- Allow chkpwd command to mmap /etc/shadow BZ(1513704)
- Fix systemd-resolved to run properly with SELinux in enforcing state BZ(1517529)
- Allow thumb_t domain to mmap fusefs_t files BZ(1517517)
- Allow userdom_home_reader_type attribute to mmap cifs_t files BZ(1517125)
- Add interface fs_map_cifs_files()
- Merge pull request #207 from rhatdan/labels
- Merge pull request #208 from rhatdan/logdir
- Allow domains that manage logfiles to man logdirs - Make ganesha nfs server - Add interface raid_relabel_mdadm_var_run_content()
- Fix iscsi SELinux module
- Allow spamc_t domain to read home mail content BZ(1414366)
- Allow sendmail_t to list postfix config dirs BZ(1514868)
- Allow dovecot_t domain to mmap mail content in homedirs BZ(1513153)
- Allow iscsid_t domain to requesting loading kernel modules BZ(1448877)
- Allow svirt_t domain to mmap svirt_tmpfs_t files BZ(1515304)
- Allow cupsd_t domain to localization BZ(1514350)
- Allow antivirus_t nnp domain transition because of systemd security features. BZ(1514451)
- Allow tlp_t domain transition to systemd_rfkill_t domain BZ(1416301)
- Allow abrt_t domain to mmap fusefs_t files BZ(1515169)
- Allow memcached_t domain nnp_transition becuase of systemd security features BZ(1514867)
- Allow httpd_t domain to mmap all httpd content type BZ(1514866)
- Allow mandb_t to read /etc/passwd BZ(1514903)
- Allow mandb_t domain to mmap files with label mandb_cache_t BZ(1514093)
- Allow abrt_t domain to mmap files with label syslogd_var_run_t BZ(1514975)
- Allow nnp transition for systemd-networkd daemon to run in proper SELinux domain BZ(1507263)
- Allow systemd to read/write to mount_var_run_t files BZ(1515373)
- Allow systemd to relabel mdad� x������������������ X O ��y �8�������C G �$
���������������� G G G � nald needs to getattr on all processes
- mdadmin fixes
* uses getpw
- amavisd calls getpwnam()
- denyhosts calls getpwall() - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
- bluetooth says they do not use /tmp and want to remove the type
- Allow init to transition to colord
- Mongod needs to read /proc/sys/vm/zone_reclaim_mode
- Allow postfix_smtpd_t to connect to spamd
- Add boolean to allow ftp to connect to all ports > 1023
- Allow sendmain to write to inherited dovecot tmp files
- setroubleshoot needs to be able to execute rpm to see what version of packages - Merge systemd patch
- systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
- Allow deltacloudd dac_override, setuid, setgid caps
- Allow aisexec to execute shell
- Add use_nfs_home_dirs boolean for ssh-keygen - Fixes to make rawhide boot in enforcing mode with latest systemd changes - Add labeling for /var/run/systemd/journal/syslog
- libvirt sends signals to ifconfig
- Allow domains that read logind session files to list them - Fixed destined form libvirt-sandbox
- Allow apps that list sysfs to also read sympolicy links in this filesystem
- Add ubac_constrained rules for chrome_sandbox
- Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
- Allow postgresql to be executed by the caller
- Standardize interfaces of daemons
- Add new labeling for mm-handler
- Allow all matahari domains to read network state and etc_runtime_t files - New fix for seunshare, requires seunshare_domains to be able to mounton /
- Allow systemctl running as logrotate_t to connect to private systemd socket
- Allow tmpwatch to read meminfo
- Allow rpc.svcgssd to read supported_krb5_enctype
- Allow zarafa domains to read /dev/random and /dev/urandom
- Allow snmpd to read dev_snmp6
- Allow procmail to talk with cyrus
- Add fixes for check_disk and check_nagios plugins - default trans rules for Rawhide policy
- Make sure sound_devices controlC* are labeled correctly on creation
- sssd now needs sys_admin
- Allow snmp to read all proc_type
- Allow to setup users homedir with quota.group - Add httpd_can_connect_ldap() interface
- apcupsd_t needs to use seriel ports connected to usb devices
- Kde puts procmail mail directory under ~/.local/share
- nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
- Add labeling for /sbin/iscsiuio - Add label for /var/lib/iscan/interpreter
- Dont audit writes to leaked file descriptors or redirected output for nacl
- NetworkManager needs to write to /sys/class/net/ib*/mode - Allow abrt to request the kernel to load a module
- Make sure mozilla content is labeled correctly
- Allow tgtd to read system state
- More fixes for boinc
* allow to resolve dns name
* re-write boinc policy to use boinc_domain attribute
- Allow munin services plugins to use NSCD services - Allow mozilla_plugin_t to manage mozilla_home_t
- Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
- Add label for tumblerd - Fixes for xguest package - Fixes related to /bin, /sbin
- Allow abrt to getattr on blk files
- Add type for rhev-agent log file
- Fix labeling for /dev/dmfm
- Dontaudit wicd leaking
- Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
- Label /etc/locale.conf correctly
- Allow user_mail_t to read /dev/random
- Allow postfix-smtpd to read MIMEDefang
- Add label for /var/log/suphp.log
- Allow swat_t to connect and read/write nmbd_t sock_file
- Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
- Allow systemd-tmpfiles to change user identity in object contexts
- More fixes for rhev_agentd_t consolehelper policy - Use fs_use_xattr for squashf
- Fix procs_type interface
- Dovecot has a new fifo_file /var/run/dovecot/stats-mail
- Dovecot has a new fifo_file /var/run/stats-mail
- Colord does not need to connect to network
- Allow system_cronjob to dbus chat with NetworkManager
- Puppet manages content, want to make sure it labels everything correctly � x������������������� X � m ��yce"
��������ȍ �� ins �$ e ���������������� �� �� �� �
- Allow neutron connections to system dbus.
- Allow mongodb to manage own log files.
- Allow opensm_t to read/write /dev/infiniband/umad1.
- Added policy for mon_statd and mon_procd services. BZ (1077821)
- kernel_read_system_state needs to be called with type. Moved it to antivirus.if.
- Allow dnssec_trigger_t to execute unbound-control in own domain.
- Allow all RHCS services to read system state.
- Added monitor device
- Add interfaces for /dev/infiniband
- Add infiniband_device_t for /dev/infiniband instead of fixed_disk_device_t type.
- Add files_dontaudit_search_security_files()
- Add selinuxuser_udp_server boolean
- ALlow syslogd_t to create /var/log/cron with correct labeling
- Add support for /etc/.updated and /var/.updated
- Allow iptables read fail2ban logs. BZ (1147709)
- ALlow ldconfig to read proc//net/sockstat. - Allow nova domains to getattr on all filesystems.
- ALlow zebra for user/group look-ups.
- Allow lsmd to search own plguins.
- Allow sssd to read selinux config to add SELinux user mapping.
- Allow swift to connect to all ephemeral ports by default.
- Allow NetworkManager to create Bluetooth SDP sockets
- Allow keepalived manage snmp var lib sock files. BZ(1102228)
- Added policy for blrtty. BZ(1083162)
- Allow rhsmcertd manage rpm db. BZ(#1134173)
- Allow rhsmcertd send signull to setroubleshoot. BZ (#1134173)
- Label /usr/libexec/rhsmd as rhsmcertd_exec_t
- Fix broken interfaces
- Added sendmail_domtrans_unconfined interface
- Added support for cpuplug. BZ (#1077831)
- Fix bug in drbd policy, BZ (#1134883)
- Make keystone_cgi_script_t domain. BZ (#1138424)
- fix dev_getattr_generic_usb_dev interface
- Label 4101 tcp port as brlp port
- Allow libreswan to connect to VPN via NM-libreswan.
- Add userdom_manage_user_tmpfs_files interface - Allow all domains to read fonts
- Allow rabbitmq_t read rabbitmq_var_lib_t lnk files. BZ (#1147028)
- Allow pki-tomcat to change SELinux object identity.
- Allow radious to connect to apache ports to do OCSP check
- Allow git cgi scripts to create content in /tmp
- Allow cockpit-session to do GSSAPI logins. - Make sure /run/systemd/generator and system is labeled correctly on creation.
- Additional access required by usbmuxd
- Allow sensord read in /proc BZ(#1143799) - Allow du running in logwatch_t read hwdata.
- Allow sys_admin capability for antivirus domians.
- Use nagios_var_lib_t instead of nagios_lib_t in nagios.fc.
- Add support for pnp4nagios.
- Add missing labeling for /var/lib/cockpit.
- Label resolv.conf as docker_share_t under docker so we can read within a container
- Remove labeling for rabbitmqctl
- setfscreate in pki.te is not capability class.
- Allow virt domains to use virtd tap FDs until we get proper handling in libvirtd.
- Allow wine domains to create cache dirs.
- Allow newaliases to systemd inhibit pipes.
- Add fixes for pki-tomcat scriptlet handling.
- Allow user domains to manage all gnome home content
- Allow locate to look at files/directories without labels, and chr_file and blk_file on non dev file systems
- Allow usbmuxd chown capabilitiesllow locate to look at files/directories without labels, and chr_file and blk_file on non dev file systems - Label /usr/lib/erlang/erts.*/bin files as bin_t
- Added changes related to rabbitmq daemon.
- Fix labeling in couchdb policy
- Allow rabbitmq bind on epmd port
- Clean up rabbitmq policy
- fix domtrans_rabbitmq interface
- Added rabbitmq_beam_t and rabbitmq_epmd_t alias
- Allow couchdb to getattr
- Allow couchdb write to couchdb_conf files
- Allow couchdb to create dgram_sockets
- Added support for ejabberd - Back port workaround for #1134389 from F20. It needs to be removed from rawhide once we ship F21.
- Since docker will now label volumes we can tighten the security of docker - Re-arange openshift_net_read_t rules.
- Kernel is reporting random block_suspends, we should dontaudit these until the kernel is fixed in Rawhide
- Allow jockey_t to use tmpfs files
- Allow pppd to create sock_files in /var/run
- Allow geoclue to stream connect to smart card service
- A� x�������������8����� X � re��ye.rb��������pi������ b so�$ � ���������������� � � Allow transition from initrc_t to getty_t - Allow passwd to communicate with user sockets to change gnome-keyring - Fix initial install - Allow radvd to use fifo_file
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home
dirs if the boolean is set - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
- Allow syslog to manage innd logs.
- Allow procmail to ioctl spamd_exec_t - Allow initrc_t to dbus chat with consolekit. - Additional access for nsplugin
- Allow xdm setcap/getcap until pulseaudio is fixed - Allow mount to mkdir on tmpfs
- Allow ifconfig to search debugfs - Fix file context for MATLAB
- Fixes for xace - Allow stunnel to transition to inetd children domains
- Make unconfined_dbusd_t an unconfined domain - Fixes for qemu/virtd - Fix bug in mozilla policy to allow xguest transition
- This will fix the
libsemanage.dbase_llist_query: could not find record value
libsemanage.dbase_llist_query: could not query record value (No such file or
directory)
bug in xguest - Allow nsplugin to run acroread - Add cups_pdf policy
- Add openoffice policy to run in xguest - prewika needs to contact mysql
- Allow syslog to read system_map files - Change init_t to an unconfined_domain - Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes - fixes for init policy (#436988)
- fix build - Additional changes for MLS policy - Fix initrc_context generation for MLS - Fixes for libvirt - Allow bitlebee to read locale_t - More xselinux rules - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t - Prepare policy for beta release
- Change some of the system domains back to unconfined
- Turn on some of the booleans - Allow nsplugin_config execstack/execmem
- Allow nsplugin_t to read alsa config
- Change apache to use user content - Add cyphesis policy - Fix Makefile.devel to build mls modules
- Fix qemu to be more specific on labeling - Update to upstream fixes - Allow staff to mounton user_home_t - Add xace support - Add fusectl file system - Fixes from yum-cron
- Update to latest upstream - Fix userdom_list_user_files - Merge with upstream - Allow udev to send audit messages - Add additional login users interfaces
- userdom_admin_login_user_template(staff) - More fixes for polkit - Eliminate transition from unconfined_t to qemu by default
- Fixes for gpg - Update to upstream - Fixes for staff_t - Add policy for kerneloops
- Add policy for gnomeclock - Fixes for libvirt - Fixes for nsplugin - More fixes for qemu - Additional ports for vnc and allow qemu and libvirt to search all directories - Update to upstream
- Add libvirt policy
- add qemu policy - Allow fail2ban to create a socket in /var/run - Allow allow_httpd_mod_auth_pam to work - Add audisp policy and prelude - Allow all user roles to executae samba net command - Allow usertypes to read/write noxattr file systems - Fix nsplugin to allow flashplugin to work in enforcing mode - Allow pam_selinux_permit to kill all processes - Allow ptrace or user processes by users of same type
- Add boolean for transition to nsplugin - Allow nsplugin sys_nice, getsched, setsched - Allow login programs to talk dbus to oddjob - Add procmail_log support
- Lots of fixes for munin - Allow setroubleshoot to read policy config and send audit messages - Allow users to execute all files in homedir, if boolean set
- Allow mount to read samba config - Fixes for xguest to run java plugin - dontaudit pam_t and dbusd writing to user_home_t - Update gpg to allow reading of inotify - Change user and staff roles to work correctly with varied perms - Fix munin log,
- Eliminate duplicate mozilla file context
- fix wpa_supplicant spec - Fix role transition from unconfined_r to system_r when running rpm
- Allow unconfined_domains to communicate with user dbus instances - Fixes for xguest - Let all unco� x��������������y���� X � Ren�y how������pX������@ nd a�$ ���������������� @ @ @ � dr 1.2.0 - Update to 1.1.2 - rebuild - Added "Requires: xorg-x11-proto-devel" to devel pkg for xrandr.pc - Added "BuildRequires: pkgconfig" for (#193428)
- Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
- Remove package ownership of mandir/libdir/etc. - Update to 1.1.1 - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - Bumped and rebuilt - Updated libXrandr to version 1.1.0.2 from X11R7 RC4 - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
- Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
that /usr/lib/X11 and /usr/include/X11 pre-exist.
- Removed 'x' suffix from manpage directories to match RC3 upstream. - rebuilt - Updated libXrandr to version 0.99.2 from X11R7 RC2
- Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
- Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes' - Updated libXrandr to version 0.99.1 from X11R7 RC1
- Updated file manifest to find manpages in "man3x" - Renamed package to remove xorg-x11 from the name due to unanimous decision
between developers.
- Use Fedora Extras style BuildRoot tag.
- Disable static library creation by default.
- Add missing defattr to devel subpackage
- Add missing documentation files to doc macro - Renamed package to prepend "xorg-x11" to the name for consistency with
the rest of the X11R7 packages.
- Added "Requires: %{name} = %{version}-%{release}" dependency to devel
subpackage to ensure the devel package matches the installed shared libs.
- Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
allow applications to use implementation agnostic dependencies.
- Added post/postun scripts which call ldconfig.
- Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
and Conflicts with XFree86-devel and xorg-x11-devel to devel package. - Initial build. � 1.5.2-1.el8 1.5.2-1.el8 .build-id f9 58be1dbf8aa67f70d48ea19a2ec72f736bbcdb libXrandr.so.2 libXrandr.so.2.2.0 libXrandr AUTHORS COPYING /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/f9/ /usr/lib64/ /usr/share/doc/ /usr/share/doc/libXrandr/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f958be1dbf8aa67f70d48ea19a2ec72f736bbcdb, stripped ASCII text UTF-8 Unicode text P R R R R R R R R utf-8 3ea75920c68723093469461235ab51d48bc1b83517e26ac6b0c132959a781b6b ? ���@ p��3 !pQ�p�)�Tξ7��]�mtZ``s�
�]�mtZ`8� �WZ.�M��'o$:�0�I�|e��n� so/ο\n�y,7r�0��W����U, ��xzΓ��� �E�Kz:~��Z�\@��,�O#������ 4: h�*�,�57� 4g�����"�2�%q��'��$��uVN�$�tN1.�!@nV�aBy:�5�>�sljf��ڮ���ƭ0���Љ����<Ǟ��e���,v���B��y�|� ��8d�f���נ��︡@U��ԏ��� II�k#
l֯Cgv�D�*�[�)�q�Z_1�5&�E��������S��r�$��nۤn긜=��5vQ0���$��@�h�5v�s��۠��?y�*O����;F�ƹ����s�q�K�,X�B]�+��J���7�Y��
0B�n�PxɃ�;���?y�/�"���*�>�E�U �����ɋF(��� ݫ M�S�z�ẪLh[d���53������z`&�`���D�����[e2[�f��B�fg���3�>,`���b ����3 !pQ�p�)�Tξ7��]�mtZ``s�
�]�mtZ` ��R�bR�:n֠�&R ��)j�6�ۿN��uL7/F� �O��oj���JH�*��^R&�VPyCshc��e�%�B#2�P��
�F��=d.���> �ԭ���z 7T��7�"g�=�V��J�K�����,5,�����4�U�u����҇n���Haө�3�j�� �7#J`D[���|7 o�A���]M��O բe<�k�UЁ���'1�i��a��N^�R�ow+2D�i"]�E2���k�M !e���${��"
7ޔ����n,�!���
,i����i���ˀ��:��,�Dz�+�"�J��[�DT�>PVV���Y��
� ڈ�/Iɥ�c��C� ��ML�OM��^i��\;��@�)�]c� x�������������(i���� X � ll0�yntiv�s 8��������! all �$ t ���������������� �! �! �! � m upstream: add safety checks against integer overflow in _ecalloc - update to 5.1.6 (security fixes)
- bump default memory_limit to 16M (#196802) - rebuild - Provide php-posix (#194583)
- only provide php-pcntl from -cli subpackage
- add missing defattr's (thanks to Matthias Saou) - move Obsoletes for php-openssl to -common (#194501)
- Provide: php-cgi from -cli subpackage - split out php-cli, php-common subpackages (#177821)
- add php-pdo-abi version export (#193202) - rebuilt for new libnetsnmp - provide mod_php (#187891)
- provide php-cli (#192196)
- use correct LDAP fix (#181518)
- define _GNU_SOURCE in php_config.h and leave it defined
- drop (circular) dependency on php-pear - update to 5.1.4 - update to 5.1.3 - provide php-api (#183227)
- add provides for all builtin modules (Tim Jackson, #173804)
- own %{_libdir}/php/pear for PEAR packages (per #176733)
- add obsoletes to allow upgrade from FE4 PDO packages (#181863) - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - rebuild for new libc-client soname - only build xmlreader and xmlwriter shared (#177810) - update to 5.1.2 - rebuild again - rebuild for new net-snmp - enable short_open_tag in default php.ini again (#175381) - rebuilt - require net-snmp for php-snmp (#174800) - add /usr/share/pear back to hard-coded include_path (#174885) - rebuild for httpd 2.2 - update to 5.1.1
- remove pear subpackage
- enable pdo extensions (php-pdo subpackage)
- remove non-standard conditional module builds
- enable xmlreader extension - rebuilt against new openssl - pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528) - rebuild for new libnetsnmp - update to 5.0.5
- add fix for upstream #34435
- devel: require autoconf, automake (#159283)
- pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
- fix imagettftext et al (upstream, #161001) - ldap: restore ldap_start_tls() function - disable RPATHs in shared extensions (#156974) - build simplexml_import_dom even with shared dom (#156434)
- prevent truncation of copied files to ~2Mb (#155916)
- install /usr/bin/php from CLI build alongside CGI
- enable sysvmsg extension (#142988) - prevent build of builtin dba as well as shared extension - split out dba and bcmath extensions into subpackages
- BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
- pear: update to DB-1.7.6
- enable FastCGI support in /usr/bin/php-cgi (#149596) - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
built with the CGI SAPI (thanks to Edward Rudd, #137704)
- add php(1) man page for CLI
- fix more test cases to use -n when invoking php - rebuild for new libpq soname - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
- snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
- mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282) - build shared objects as PIC (#154195) - fix PEAR installation and bundle PEAR DB-1.7.5 package - update to 5.0.4 (#153068)
- add .phps AddType to php.conf (#152973)
- better gcc4 fix for libxmlrpc - BuildRequire mysql-devel >= 4.1
- don't mark php.ini as noreplace to make upgrades work (#152171)
- fix subpackage descriptions (#152628)
- fix memset(,,0) in Zend (thanks to Dave Jones)
- fix various compiler warnings in Zend - package mysqli extension in php-mysql
- really enable pcntl (#142903)
- don't build with --enable-safe-mode (#148969)
- use "Instant Client" libraries for oci8 module (Kai Bolay, #149873) - fix build with GCC 4 - install the ext/gd headers (#145891)
- enable pcntl extension in /usr/bin/php (#142903)
- add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
- add BuildRequire for recent pcre-devel (#147448) - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
- enable xsl extension (#142174)
- package both the xsl and dom extensions in php-xml
- enable soap extension, shared (php-soap package) (#142901)
- add patches from upstream 5.0 branch:
* Zend_strtod.c compile fixes
* correct php_sprintf return value usage - update� x��������������X���� X � |�y ��������@����3 �$ # ���������������� 3 2 4 � )
- Add new interface dbus_read_pid_sock_files()
- Allow mpd_t domain read config_home files if mpd_enable_homedirs boolean will be enabled
- Allow fsdaemon_t do send emails BZ(1582701)
- Allow firewalld_t domain to request kernel module BZ(1573501)
- Allow chronyd_t domain to send send msg via dgram socket BZ(1584757)
- Add sys_admin capability to fprint_t SELinux domain
- Allow cyrus_t domain to create own files under /var/run BZ(1582885)
- Allow cachefiles_kernel_t domain to have capability dac_override
- Update policy for ypserv_t domain
- Allow zebra_t domain to bind on tcp/udp ports labeled as qpasa_agent_port_t
- Allow cyrus to have dac_override capability
- Dontaudit action when abrt-hook-ccpp is writing to nscd sockets
- Fix homedir polyinstantion under mls
- Fixed typo in init.if file
- Allow systemd to remove generic tmpt files BZ(1583144)
- Update init_named_socket_activation() interface to also allow systemd create objects in /var/run with proper label during socket activation
- Allow systemd-networkd and systemd-resolved services read system-dbusd socket BZ(1579075)
- Fix typo in authlogin SELinux security module
- Allod nsswitch_domain attribute to be system dbusd client BZ(1584632)
- Allow audisp_t domain to mmap audisp_exec_t binary
- Update ssh_domtrans_keygen interface to allow mmap ssh_keygen_exec_t binary file
- Label tcp/udp ports 2612 as qpasa_agetn_port_t - Add dac_override to exim policy BZ(1574303)
- Fix typo in conntrackd.fc file
- Allow sssd_t to kill sssd_selinux_manager_t
- Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db is turned on
- Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
- Allow policykit_auth_t to read udev db files BZ(1574419)
- Allow varnishd_t do be dbus client BZ(1582251)
- Allow cyrus_t domain to mmap own pid files BZ(1582183)
- Allow user_mail_t domain to mmap etc_aliases_t files
- Allow gkeyringd domains to run ssh agents
- Allow gpg_pinentry_t domain read ssh state
- Allow gpg_agent_t to send msgs to syslog/journal
- Add dac_override capability to dovecot_t domain
- Allow nscd_t domain to mmap system_db_t files
- Allow tangd_t domain to create tcp sockets and add new interface tangd_read_db_files
- Allow mailman_mail_t domain to search for apache configs
- Allow mailman_cgi_t domain to ioctl an httpd with a unix domain stream sockets.
- Improve procmail_domtrans() to allow mmaping procmail_exec_t
- Allow ptrace arbitrary processes
- Allow jabberd_router_t domain read kerberos keytabs BZ(1573945)
- Allow certmonger to geattr of filesystems BZ(1578755)
- Allow hypervvssd_t domain to read fixed disk devices
- Allow several domains to manage ecryptfs_t filesystem
- Allow userdom_use_user_ttys for loadkeys_t domain
- Add dac_override capability to cachefiles_kernel_t domain
- Allow blueman to execute ldconfig BZ(1577581)
- Allow gpg_pinentry_t domain to read state of gpg_t processes
- Add dac_override capability to cgconfig_t domain BZ(1574649)
- Add dac_override to glusterd_t domain BZ(1578501)
- Allow fsdaemon_t to create own fsdaemon_var_lib_t dirs BZ(1569724)
- Allow plymouth_t domain to read/write systemd sockets BZ(1578882)
- Allow use of U2F Yubikey as authentication for a sudo command BZ(1578915)
- Append map permission to apache_read_modules() interface
- Allow certwatch_t domain to getattr of extended attributes fs_t filesystem
- Add new interface: dirsrv_noatsecure()
- Add dac_override capability to remote_login_t domain
- Allow chrome_sandbox_t to mmap tmp files
- Update ulogd SELinux security policy
- Allow sysadm_u use xdm
- Allow xdm_t domain to listen ofor unix dgram sockets BZ(1581495)
- Add interface ssh_read_state()
- Fix typo in sysnetwork.if file
- Update dev_map_xserver_misc interface to allo mmaping char devices instead of files
- Allow noatsecure permission for all domain transitions from systemd.
- Allow systemd to read tangd db files
- Fix typo in ssh.if file
- Allow xdm_t domain to mmap xserver_misc_device_t files
- Allow xdm_t domain to execute systemd-coredum� x�������������H���� X � 3��y-2 D `���Hd���� hat.�$ c ���������������� � � � � labels on hugepages
Allow mdadm to read files on /dev
Remove permissive domains and change back to unconfined
Allow freshclam to execute shell and bin_t
Allow devicekit_power to transition to dhcpc
Add boolean to allow icecast to connect to any port - Merge upstream fix of mmap_zero
- Allow mount to write files in debugfs_t
- Allow corosync to communicate with clvmd via tmpfs
- Allow certmaster to read usr_t files
- Allow dbus system services to search cgroup_t
- Define rlogind_t as a login pgm - Allow mdadm_t to read/write hugetlbfs - Dominic Grift Cleanup
- Miroslav Grepl policy for jabberd
- Various fixes for mount/livecd and prelink - Merge with upstream - More access needed for devicekit
- Add dbadm policy - Merge with upstream - Allow seunshare to fowner - Allow cron to look at user_cron_spool links
- Lots of fixes for mozilla_plugin_t
- Add sysv file system
- Turn unconfined domains to permissive to find additional avcs - Update policy for mozilla_plugin_t - Allow clamscan to read proc_t
- Allow mount_t to write to debufs_t dir
- Dontaudit mount_t trying to write to security_t dir - Allow clamscan_t execmem if clamd_use_jit set
- Add policy for firefox plugin-container - Fix /root/.forward definition - label dead.letter as mail_home_t - Allow login programs to search /cgroups - Fix cert handling - Fix devicekit_power bug
- Allow policykit_auth_t more access. - Fix nis calls to allow bind to ports 512-1024
- Fix smartmon - Allow pcscd to read sysfs
- systemd fixes
- Fix wine_mmap_zero_ignore boolean - Apply Miroslav munin patch
- Turn back on allow_execmem and allow_execmod booleans - Merge in fixes from dgrift repository - Update boinc policy
- Fix sysstat policy to allow sys_admin
- Change failsafe_context to unconfined_r:unconfined_t:s0 - New paths for upstart - New permissions for syslog
- New labels for /lib/upstart - Add mojomojo policy - Allow systemd to setsockcon on sockets to immitate other services - Remove debugfs label - Update to latest policy - Fix eclipse labeling from IBMSupportAssasstant packageing - Make boot with systemd in enforcing mode - Update to upstream - Add boolean to turn off port forwarding in sshd. - Add support for ebtables
- Fixes for rhcs and corosync policy -Update to upstream -Update to upstream -Update to upstream - Add Zarafa policy - Cleanup of aiccu policy
- initial mock policy - Lots of random fixes - Update to upstream - Update to upstream
- Allow prelink script to signal itself
- Cobbler fixes - Add xdm_var_run_t to xserver_stream_connect_xdm
- Add cmorrord and mpd policy from Miroslav Grepl - Fix sshd creation of krb cc files for users to be user_tmp_t - Fixes for accountsdialog
- Fixes for boinc - Fix label on /var/lib/dokwiki
- Change permissive domains to enforcing
- Fix libvirt policy to allow it to run on mls - Update to upstream - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
- Fix /var/run/abrtd.lock label - Allow login programs to read krb5_home_t
Resolves: 594833
- Add obsoletes for cachefilesfd-selinux package
Resolves: #575084 - Allow mount to r/w abrt fifo file
- Allow svirt_t to getattr on hugetlbfs
- Allow abrt to create a directory under /var/spool - Add labels for /sys
- Allow sshd to getattr on shutdown
- Fixes for munin
- Allow sssd to use the kernel key ring
- Allow tor to send syslog messages
- Allow iptabels to read usr files
- allow policykit to read all domains state - Fix path for /var/spool/abrt
- Allow nfs_t as an entrypoint for http_sys_script_t
- Add policy for piranha
- Lots of fixes for sosreport - Allow xm_t to read network state and get and set capabilities
- Allow policykit to getattr all processes
- Allow denyhosts to connect to tcp port 9911
- Allow pyranha to use raw ip sockets and ptrace itself
- Allow unconfined_execmem_t and gconfsd mechanism to dbus
- Allow staff to kill ping process
- Add additional MLS rules - Allow gdm to edit ~/.gconf dir
Resolves: #590677
- Allow dovecot to create directories in /var/lib/dovecot
Partially resolves 590224
- Allow avahi to dbus chat� x��������������7���� X � oc��yning XX���h 0.10�$ x ���������������� h g i � de a version for LPRng (bug #92145). - Obsolete LPRng now. - 1.1.19. No longer need optparse patch. - Ship configuration file for D-BUS. - Rebuild for dbus-0.11 API changes.
- Fix ownership in file manifest (bug #90840). - Fix option parsing in lpq (bug #90823). - 1.1.19rc5. - 1.1.19rc4. Ported initscript, idefense, ppdsdat, dbus patches.
- No longer need error, sigchld patches.
- Ship cupstestppd. - Mark banners as config files (bug #89069). - adjust dbus patch - dbus_bus_get() sends the hello for you,
and there were a couple of memleaks
- buildprereq dbus 0.9
- rebuild for new dbus
- hope it works, I'm ssh'd in with no way to test. ;-) - Get on D-BUS. - Fix translation in the init script (bug #87551). - Turn off optimization on ia64 until bug #87383 is fixed. - 1.1.18.
- No longer need uninit patch.
- Some parts of the iDefense and pdftops patches seem to have been
picked up, but not others. - Don't set SIGCHLD to SIG_IGN when using wait4 (via pclose) (bug #84101). - Fix cups-lpd (bug #83452). - Build ppds.dat on first install. - Add support for rebuilding ppds.dat without running the scheduler
proper (for bug #82500). - rebuilt - Warn against editing queues managed by redhat-config-printer
(bug #82267). - Fix up error reporting in lpd backend. - Add epoch to internal requirements.
- Make 'condrestart' return success exit code when daemon isn't running. - Use pkg-config information to find SSL libraries. - Security fixes.
- Make 'service cups reload' update the configuration first (bug #79953). - Fix cupsd startup hang (bug #79346). - Fix parallel backend behaviour when cancelling jobs. - 1.1.17.
- No longer need libdir patch.
- Fix logrotate script (bug #76791). - Build requires XFree86-devel (bug #78362). - 1.1.16.
- Updated system-auth patch.
- Add ncp backend script. - Set alternatives priority to 40. - Buildrequire pam-devel.
- Patch default PAM config file to remove directory names from module paths,
allowing the configuration files to work equally well on multilib systems.
- Patch default PAM config file to use system-auth, require the file at build-
time because that's what data/Makefile checks for. - Use logrotate for log rotation (bug #76791).
- No longer need cups.desktop, since redhat-config-printer handles it. - Revert to libdir for CUPS_SERVERBIN. - Use %configure for multilib correctness.
- Use libexec instead of lib for CUPS_SERVERBIN.
- Ship translated man pages.
- Remove unshipped files.
- Fix file list permissions (bug #59021, bug #74738).
- Fix messy initscript output (bug #65857).
- Add 'reload' to initscript (bug #76114). - Add generic postscript PPD file (#73061) - Fix prefix in pstoraster (bug #69573). - Disable cups-lpd by default (bug #71712).
- No need for fread patch now that glibc is fixed. - Really add cups-lpd xinetd file (bug #63919).
- Ship pstoraster (bug #69573).
- Prevent fread from trying to read from beyond EOF (fixes a segfault
with new glibc). - rebuilt with gcc-3.2 (we hope) - Add cups-lpd xinetd file (#63919) - add a "exit 0" to postun script - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
because some applications expect to find the cups docs in
/usr/share/cups/doc - automated rebuild - 1.1.15-1
- Fix up smb printing trigger (samba-client, not samba-clients)
- Start cupsd earlier, apparently it needs to be running before samba
starts up for smb printing to work. - automated rebuild - Rebuild in current environment
- [-16 never existed because of build system breakage] - Fix bug #63387 - Fix dangling symlink created by samba-clients trigger - Add desktop file and icon for CUPS configuration - Support SMB printing (#62407)
- Add HTML redirections to doc files to work around users mistaking
/usr/share/doc/cups-1.1.14 for the web frontend (#62405) - fix subsys in initscript (#59206)
- don't strip binaries - Make initscript use killproc instead of killall - use alternatives --initscript support - use the right path for the lpc man page, duh - lpc man page is alternative too
- run ldconfig in -libs %post/%pos� x�������������'���� X � t �ys BZ�@�������
���� main�$ ���������������� � � � � NFIG_CRYPTO_USER_API_ENABLE_OBSOLETE=y and
- CONFIG_KGDB_HONOUR_BLOCKLIST=y - Updated with the 5.9.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.14] - Updated with the 5.9.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.13] - Updated with the 5.9.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.12] - Updated with the 5.9.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.11] - Updated with the 5.9.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.10] - Updated with the 5.9.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.9] - Updated with the 5.9.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.8] - Updated with the 5.9.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7] - Updated with the 5.9.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.6] - Updated with the 5.9.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.5] - Updated with the 5.9.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.4] - Updated with the 5.9.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.3] - Updated with the 5.9.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.2] - Updated with the 5.9.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.1] - Updated with the 5.9 source tarball.
- CONFIG_HAVE_KERNEL_ZSTD=y, CONFIG_HAVE_POSIX_CPU_TIMERS_TASK_WORK=y,
- CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, CONFIG_RD_ZSTD=y,
- CONFIG_KVM_XFER_TO_GUEST_WORK=y, CONFIG_GENERIC_ENTRY=y,
- CONFIG_MDIO_DEVRES=y, CONFIG_MT7663_USB_SDIO_COMMON=m,
- CONFIG_WLAN_VENDOR_MICROCHIP=y, CONFIG_RTW88_8821C=m,
- CONFIG_RTW88_8821CE=m, CONFIG_HW_RANDOM_BA431=m,
- CONFIG_PINCTRL_EMMITSBURG=m, CONFIG_SENSORS_CORSAIR_CPRO=m,
- CONFIG_THERMAL_NETLINK=y, CONFIG_IR_TOY=m, CONFIG_SND_HDA_GENERIC_LEDS=y,
- CONFIG_SND_SOC_MAX98373_I2C=m, CONFIG_XILINX_ZYNQMP_DPDMA=m,
- CONFIG_MLX5_VDPA=y, CONFIG_MLX5_VDPA_NET=m,
- CONFIG_XEN_UNPOPULATED_ALLOC=y, CONFIG_STAGING=y,
- CONFIG_RTL8192U=m, CONFIG_RTLLIB=m, CONFIG_RTLLIB_CRYPTO_CCMP=m,
- CONFIG_RTLLIB_CRYPTO_TKIP=m, CONFIG_RTLLIB_CRYPTO_WEP=m,
- CONFIG_RTL8192E=m, CONFIG_R8712U=m, CONFIG_R8188EU=m,
- CONFIG_88EU_AP_MODE=y, CONFIG_RTS5208=m, CONFIG_FIREWIRE_SERIAL=m,
- CONFIG_FWTTY_MAX_TOTAL_PORTS=64, CONFIG_FWTTY_MAX_CARD_PORTS=32,
- CONFIG_PI433=m, CONFIG_QLGE=m, CONFIG_DECOMPRESS_ZSTD=y,
- CONFIG_DMA_OPS=y, CONFIG_PLDMFW=y, CONFIG_DEBUG_FS_ALLOW_ALL=y and
- CONFIG_TRACE_IRQFLAGS_NMI_SUPPORT=y - Updated with the 5.8.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.14] - Updated with the 5.8.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.13] - Updated with the 5.8.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.12] - Updated with the 5.8.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.11] - Updated with the 5.8.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10] - Updated with the 5.8.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.9]
- CONFIG_MLX4_CORE_GEN2=y [https://elrepo.org/bugs/view.php?id=1037] - Updated with the 5.8.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.8] - Updated with the 5.8.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7]
- CONFIG_IEEE802154_AT86RF230=m, CONFIG_IEEE802154_MRF24J40=m,
- CONFIG_IEEE802154_CC2520=m, CONFIG_IEEE802154_ATUSB=m,
- CONFIG_IEEE802154_ADF7242=m, CONFIG_IEEE802154_CA8210=m,
- CONFIG_IEEE802154_MCR20A=m and CONFIG_IEEE802154_HWSIM=m
- [http://lists.elrepo.org/pipermail/elrepo/2020-September/005375.html] - Updated with the 5.8.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/C� x������������������ X � C_��y65=m����������������� S427�$ d ���������������� �� �� �� � llow docker to read all of /proc
- ALlow passeneger to read/write apache stream socket.
- Dontaudit read init state for svirt_t.
- Label /usr/sbin/unbound-control as named_exec_t (#1130510)
- Add support for /var/lbi/cockpit directory.
- Add support for ~/. speech-dispatcher.
- Allow nmbd to read /proc/sys/kernel/core_pattern.
- aLlow wine domains to create wine_home symlinks.
- Allow policykit_auth_t access check and read usr config files.
- Dontaudit access check on home_root_t for policykit-auth.
- hv_vss_daemon wants to list /boot
- update gpg_agent_env_file booelan to allow manage user tmp files for gpg-agent
- Fix label for /usr/bin/courier/bin/sendmail
- Allow munin services plugins to execute fail2ban-client in fail2ban_client_t domain.
- Allow unconfined_r to access unconfined_service_t.
- Add label for ~/.local/share/fonts
- Add init_dontaudit_read_state() interface.
- Add systemd_networkd_var_run_t labeling for /var/run/systemd/netif and allow systemd-networkd to manage it.
- Allow udev_t mounton udev_var_run_t dirs #(1128618)
- Add files_dontaudit_access_check_home_dir() inteface. - Allow unconfined_service_t to dbus chat with all dbus domains
- Assign rabbitmq port. BZ#1135523
- Add new interface to allow creation of file with lib_t type
- Allow init to read all config files
- We want to remove openshift_t domains ability to look at /proc/net
- I guess lockdown is a file not a directory
- Label /var/bacula/ as bacula_store_t
- Allow rhsmcertd to seng signull to sosreport.
- Allow sending of snmp trap messages by radiusd.
- remove redundant rule fron nova.te.
- Add auth_use_nsswitch() for ctdbd.
- call nova_vncproxy_t instead of vncproxy.
- Allow nova-vncproxy to use varnishd port.
- Fix rhnsd_manage_config() to allow manage also symlinks.
- Allow bacula to create dirs/files in /tmp
- Allow nova-api to use nsswitch.
- Clean up nut policy. Allow nut domains to create temp files. Add nut_domain_template() template interface.
- Allow usbmuxd connect to itself by stream socket. (#1135945)
- I see no reason why unconfined_t should transition to crontab_t, this looks like old cruft
- Allow nswrapper_32_64.nppdf.so to be created with the proper label
- Assign rabbitmq port. BZ#1135523
- Dontaudit leaks of file descriptors from domains that transition to thumb_t
- Fixes for usbmuxd, addition of /var/lib/lockdown, and allow it to use urand, dontaudit sys_resource
- Allow unconfined_service_t to dbus chat with all dbus domains
- Allow avahi_t communicate with pcp_pmproxy_t over dbus.(better way)
- Allow avahi_t communicate with pcp_pmproxy_t over dbus. - Allow aide to read random number generator
- Allow pppd to connect to http port. (#1128947)
- sssd needs to be able write krb5.conf.
- Labeli initial-setup as install_exec_t.
- Allow domains to are allowed to mounton proc to mount on files as well as dirs - Label ~/tmp and ~/.tmp directories in user tmp dirs as user_tmp_t
- Add a port definition for shellinaboxd
- Fix labeling for HOME_DIR/tmp and HOME_DIR/.tmp directories
- Allow thumb_t to read/write video devices
- fail2ban 0.9 reads the journal by default.
- Allow sandbox net domains to bind to rawip socket - Allow haproxy to read /dev/random and /dev/urandom.
- Allow mdadm to seng signull kernel_t which is proces type of mdadm on early boot.
- geoclue needs to connect to http and http_cache ports
- Allow passenger to use unix_stream_sockets leaked into it, from httpd
- Add SELinux policy for highly-available key value store for shared configuration.
- drbd executes modinfo.
- Add glance_api_can_network boolean since glance-api uses huge range port.
- Fix glance_api_can_network() definition.
- Allow smoltclient to connect on http_cache port. (#982199)
- Allow userdomains to stream connect to pcscd for smart cards
- Allow programs to use pam to search through user_tmp_t dires (/tmp/.X11-unix)
- Added MLS fixes to support labeled socket activation which is going to be done by systemd
- Add kernel_signull() interface.
- sulogin_t executes plymouth commands
- lvm needs to be able to accept � x������������������ X � in��yp sa��������� ����� low �$ K ���������������� �� �� �� � which is a part of pulseaudio_manage_home_files
- Add networkmanager_stream_connect()
- Make gnome-abrt wokring with staff_t
- Fix openshift_manage_lib_files() interface
- mdadm runs ps command which seems to getattr on random log files
- Allow mozilla_plugin_t to create pulseaudit_home_t directories
- Allow qemu-ga to shutdown virtual hosts
- Add labelling for cupsd-browsed
- Add web browser plugins to connect to aol ports
- Allow nm-dhcp-helper to stream connect to NM
- Add port definition for sge ports - Make sure users and unconfined domains create .hushlogin with the correct label
- Allow pegaus to chat with realmd over DBus
- Allow cobblerd to read network state
- Allow boicn-client to stat on /dev/input/mice
- Allow certwatch to read net_config_t when it executes apache
- Allow readahead to create /run/systemd and then create its own directory with the correct label - Transition directories and files when in a user_tmp_t directory
- Change certwatch to domtrans to apache instead of just execute
- Allow virsh_t to read xen lib files
- update policy rules for pegasus_openlmi_account_t
- Add support for svnserve_tmp_t
- Activate account openlmi policy
- pegasus_openlmi_domain_template needs also require pegasus_t
- One more fix for policykit.te
- Call fs_list_cgroups_dirs() in policykit.te
- Allow nagios service plugin to read mysql config files
- Add labeling for /var/svn
- Fix chrome.te
- Fix pegasus_openlmi_domain_template() interfaces
- Fix dev_rw_vfio_dev definiton, allow virtd_t to read tmpfs_t symlinks
- Fix location of google-chrome data
- Add support for chome_sandbox to store content in the homedir
- Allow policykit to watch for changes in cgroups file system
- Add boolean to allow mozilla_plugin_t to use spice
- Allow collectd to bind to udp port
- Allow collected_t to read all of /proc
- Should use netlink socket_perms
- Should use netlink socket_perms
- Allow glance domains to connect to apache ports
- Allow apcupsd_t to manage its log files
- Allow chrome objects to rw_inherited unix_stream_socket from callers
- Allow staff_t to execute virtd_exec_t for running vms
- nfsd_t needs to bind mountd port to make nfs-mountd.service working
- Allow unbound net_admin capability because of setsockopt syscall
- Fix fs_list_cgroup_dirs()
- Label /usr/lib/nagios/plugins/utils.pm as bin_t
- Remove uplicate definition of fs_read_cgroup_files()
- Remove duplicate definition of fs_read_cgroup_files()
- Add files_mountpoint_filetrans interface to be used by quotadb_t and snapperd
- Additional interfaces needed to list and read cgroups config
- Add port definition for collectd port
- Add labels for /dev/ptp*
- Allow staff_t to execute virtd_exec_t for running vms - Allow samba-net to also read realmd tmp files
- Allow NUT to use serial ports
- realmd can be started by systemctl now - Remove userdom_home_manager for xdm_t and move all rules to xserver.te directly
- Add new xdm_write_home boolean to allow xdm_t to create files in HOME dirs with xdm_home_t
- Allow postfix-showq to read/write unix.showq in /var/spool/postfix/pid
- Allow virsh to read xen lock file
- Allow qemu-ga to create files in /run with proper labeling
- Allow glusterd to connect to own socket in /tmp
- Allow glance-api to connect to http port to make glance image-create working
- Allow keystonte_t to execute rpm - Fix realmd cache interfaces - Allow tcpd to execute leafnode
- Allow samba-net to read realmd cache files
- Dontaudit sys_tty_config for alsactl
- Fix allow rules for postfix_var_run
- Allow cobblerd to read /etc/passwd
- Allow pegasus to read exports
- Allow systemd-timedate to read xdm state
- Allow mout to stream connect to rpcbind
- Add labeling just for /usr/share/pki/ca-trust-source instead of /usr/share/pki - Allow thumbnails to share memory with apps which run thumbnails
- Allow postfix-postqueue block_suspend
- Add lib interfaces for smsd
- Add support for nginx
- Allow s2s running as jabberd_t to connect to jabber_interserver_port_t
- Allow pki apache domain to create own tmp files and execute httpd_suexe� x�������������p����� X � 7.�yC7 (��������`��������X o 7.�$ t ���������������� �X �X �X � 2.0.1-3.el8 2.0.1-3.el8
! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! " " # # # " " $ $ $ $ $ $ $ $ $ $ $ " % % % % % % % % % % % % % % % % % % % % % % % % % & ' ' ' ' ' ' ' ( ( ( ( ) ) ) ) ( ( ( ( ( * * + + + ( , - . / / / / / / / . 0 . . 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 2 . 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 5 6linuxadmin.yml piglet-log.yml piglet.sh piglet.ini piglet etc linuxadmin.yml piglet-log.yml lib piglet piglet-1.0.0-py3.6.egg-info PKG-INFO SOURCES.txt dependency_links.txt top_level.txt __init__.py __pycache__ __init__.cpython-36.pyc akaapi.cpython-36.pyc bottle.cpython-36.pyc config.cpython-36.pyc error.cpython-36.pyc lwdbadminapi.cpython-36.pyc utils.cpython-36.pyc akaapi.py bottle.py config.py error.py g2 __init__.py __pycache__ __init__.cpython-36.pyc actions.cpython-36.pyc mysql.cpython-36.pyc pgsql.cpython-36.pyc actions.py mysql.py pgsql.py lwdbadminapi.py routes __init__.py __pycache__ __init__.cpython-36.pyc jeggy.cpython-36.pyc jeggy.py shared __init__.py __pycache__ __init__.cpython-36.pyc actions.cpython-36.pyc mysql.cpython-36.pyc pgsql.cpython-36.pyc actions.py mysql.py pgsql.py utils.py virtualenv .gitignore bin python python3 python3.6 run-with-local-python wheel wheel-3.6 wheel-3.6-script.pyw wheel-script.pyw wheel3 wheel3-script.pyw wheel3.6 wheel3.6-script.pyw lib python3.6 site-packages _distutils_hack __init__.py override.py _virtualenv.pth _virtualenv.py distutils-precedence.pth pkg_resources __init__.py _vendor __init__.py appdirs.py packaging __about__.py __init__.py _manylinux.py _musllinux.py _structures.py markers.py requirements.py specifiers.py tags.py utils.py version.py pyparsing.py extern __init__.py tests data my-test-package-source setup.py setuptools setuptools-59.6.0.dist-info INSTALLER LICENSE METADATA RECORD WHEEL entry_points.txt top_level.txt setuptools-59.6.0.virtualenv __init__.py _deprecation_warning.py _distutils __init__.py _msvccompiler.py archive_util.py bcppcompiler.py ccompiler.py cmd.py command __init__.py bdist.py bdist_dumb.py bdist_msi.py bdist_rpm.py bdist_wininst.py build.py build_clib.py build_ext.py build_py.py build_scripts.py check.py clean.py config.py install.py install_data.py install_egg_info.py install_headers.py install_lib.py install_scripts.py py37compat.py register.py sdist.py upload.py config.py core.py cygwinccompiler.py debug.py dep_util.py dir_util.py dist.py errors.py extension.py fancy_getopt.py file_util.py filelist.py log.py msvc9compiler.py msvccompiler.py py35compat.py py38compat.py� x������������������� X � 10��yAllo0�������j�������X boo�$ v ���������������� �X F �X � 0.2.22-2 Andre Luis Lopes <andre.llopes@locaweb.com.br> - 0.2.22-1 Andre Luis Lopes <andre.llopes@locaweb.com.br> - 0.2.21-1 Andre Luis Lopes <andre.llopes@locaweb.com.br> - 0.2.20-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.19-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.18-1 Jose Arthur Benetasso Villanova <jose.arthur@locaweb.com.br> - 0.2.15-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.14-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.4-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.2-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.2.1-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.9-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.7-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.6-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.5-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.4-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.3-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.2-1 Andre Ferraz <andre.ferraz@locaweb.com.br> - 0.1.0-1 - Add route getquota - Release to same version of aka-python3 - Create files for vpscronos - rockylinux8
- Migrated to Azure DevOps starting with new release 2.0.1-x - Fix jeggy.py file - Add / Fix routes to vpshost rockylinux8 - Lets Encrypt feature - fix rota - Lets Encrypt feature - Fix to getCrontab - Add routes to pgsql - Add routes GERALETS and RENOVALETS - for manage and renew letsencrypt certificates locally - Add check for lwdbadmin - Add routes to lwdbadmin-python3
- Fix linuxadmin.yml - update gitlab token - update uwsgi piglet.ini - Add MIGRAWEB route - for migrate web sites between servers using existing UID - Set addr to localhost in yml file - Add SSH routes - Disabled build-id for RPM - Disabled auto requirements scan for rpm build - Refactor build system, eliminating S.O libraries and dependencies.
- Switched to build using requirements.txt and pip.
- Project now installs at "/opt/lc"
- Added group "lwprovisioning", which will hold both aka and piglet users. - Improvements to SSL routes
- changed name of actions to match already existing on g2
- added getforcehttps route - New routes: ENFORCEWEBSSL and NONENFORCEWEBSSL - Restart UWSGI after install/update.
- Removed trailing "/" from "create alias" api route call
- Removed PATCH methods (not avaiable at this bottle version) - Better handling of CRIARWEB multiple meanings. - We now handle exceptions at subdirectory creation. - Fixed subdomain removal. - Refactor routes to call aka api. - New feature: Manage subdomains (additional sites) - Fixed logger at piglet binary - Added debug logging to password.
- Updated bottle.py version from 0.12.7 to 0.12.19. - Changed required packages - Changed package name from piglet to piglet-python3. - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
by assuming the date is correct and changing the weekday.
Mon Sep 29 2020 --> Mon Sep 28 2020 or Tue Sep 29 2020 or Mon Oct 05 2020 or ....
Tue Oct 01 2020 --> Tue Sep 29 2020 or Thu Oct 01 2020 or Tue Oct 06 2020 or ....
Tue Oct 02 2020 --> Tue Sep 29 2020 or Fri Oct 02 2020 or Tue Oct 06 2020 or ....
Tue Oct 19 2020 --> Tue Oct 13 2020 or Mon Oct 19 2020 or Tue Oct 20 2020 or ....
Tue Dec 17 2020 --> Tue Dec 15 2020 or Thu Dec 17 2020 or Tue Dec 22 2020 or .... Tue Dec 17 2020 --> Tue Dec 15 2020 or Thu Dec 17 2020 or Tue Dec 22 2020 or ....
- Small changes to shebangs and stuff related to Python 3. Tue Oct 19 2020 --> Tue Oct 13 2020 or Mon Oct 19 2020 or Tue Oct 20 2020 or ....
- Fix setSSlCertificate Tue Oct 02 2020 --> Tue Sep 29 2020 or Fri Oct 02 2020 or Tue Oct 06 2020 or ....
- Fix /cron/mail route Tue Oct 01 2020 --> Tue Sep 29 2020 or Thu Oct 01 2020 or Tue Oct 06 2020 or ....
- Changes needed to make piglet+aka work together under CentOS * + Python3
- Add changes needed to make REMOVER_CRON call to linuxadmin_web.pl
actually work Mon Sep 29 2020 --> Mon Sep 28 2020 or Tue Sep 29 2020 or Mon Oct 05 2020 or ....
- Add changes needed to have Nginx working as reverse proxy for Apache - Remove mod_proxy_uwsgi from Requires� x�������������`����� X � in��yy de���������>��� ee c�$ ���������������� �
added trousers-0.3.1-gcc44.patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - rebuild with new openssl - Bump release to avoid wrong tag in rawhide - Work around SELinux namespace pollution (#464037)
- Use SO_REUSEADDR
- Use TPM emulator if it's available and no hardware is - Use the uid/gid pair assigned to trousers from BZ#457593 - Incorporated changes from the RHEL package which were done by Steve Grubb - Fix cast issue preventing successful build on ppc64 and x86_64 - Fix for BZ #434267 and #440733. Patch authored by Debora Velarde - Autorebuild for GCC 4.3 - Updated static rpm's comment line (too long) - Updated specfile for RHBZ#323441 comment #28 - Updated specfile for RHBZ#323441 comment #22 - Updated to include the include dirs in the devel package;
added the no-install-hooks patch - Updated specfile for RHBZ#323441 comment #13 - Updated specfile for comments in RHBZ#323441 - Updated build section to use smp_mflags
- Removed .la file from installed dest and files section - Initial add of changelog tag for trousers CVS /sbin/ldconfig /sbin/ldconfig trousers � 0.3.15-1.el8 0.3.15-1.el8 0.3.13-4 .build-id e6 deec22a2f6e7ed7aa196ef69d2cb240fe84ea4 libtspi.so.1 libtspi.so.1.2.0 trousers-lib LICENSE /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/e6/ /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/trousers-lib/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6deec22a2f6e7ed7aa196ef69d2cb240fe84ea4, stripped ASCII text P R
R R R R R R R R R R utf-8 8e3ca1f8acc4a93ff08ec9d51978c1977a369d1fac334eb733162e1e5deec5df ? ���� �(�3 !pQ�p�)�Tξ7��]�mtZ``��^
�]�mtZ`qN�`ӿ�@�\A9�W�$��۱$6��S�� ���b]-Ж�;k2�����v��i��%<X��v�ȍ�1�o�LK�
�
�8��I �nŇ��5z ���� Gw�.L�W2BoS�L�)�*Νo lD�r"5���&�� ��jM5'̬� ������M[��~R�%Ed��Tp ϒ[
<���,���'q��/DZ�e#�uH���+� .=��-5<q7 ���m� �jKU���b� ��
�� �sL��]��k�`CH$m�ԟ������g̊.�I��U�Xr� qF���F�oS�#?�z)�u,�v5�� �p��\��08���^�2�U�6A%� �o� ��'���9���
�:W�D-�:B�Q��� b�삺�|x{r�S� /��R�qVDH���^M�[ .m�h��}��7��C�8v����� IF���k��}���bM{HL�x���/C����x ������A��v8�}/G8��� ,�S�J���o�| ��FG� ���;��]�3 !pQ�p�)�Tξ7��]�mtZ``��^
�]�mtZ`Z��Q��:�T���/��
��X�i�Ǟq!=|6���,e�V��� ��,�} Wn�/2Fd��J�V��j�B�{�/���ᆟ�z��8�'���� �& T+j���@�p�?W��P �k���I�K&E����� uh%�@~�5a�c�~Be}K�1VtgA�E���M����&e�n;�'?�
��xkT�����4 ��*�aiH*K;�4l�8�[�g3Zk��V�F
ƺW+}�n�\�uaU>9��N��Y��*�`s�J���
���у��z��g /�y �bZp�Ad��C1`D�e�rGkl����O��I�g�]4��5�F]��Տ�{�I��*������6�JR
Ȁ�cL��å⪙n+�ؖePOm�I���Ĺ*P�D�@*TIS6 � D�m��� ��^ �n�еKw�l) @�u�M���Q���W�:Hd�D�qO
(h��M�7�s��ٴ�%8�a^�4}uߐbE���q�D�O��H���68d1d79b7db31b8ad08c330bcd7fe13e318f7fbc f91f4bd07bd65540d42412bee55aafccf09037accaec524ab7e28c069ab241c5 dT� q0 dT� is provided without --mirrorlog. (2.02.28)
- Correct --mirrorlog argument name in man pages (not --log).
- Clear MIRROR_NOTSYNCED LV flag when converting from mirror to linear.
- Modify lvremove to prompt for removal if LV active on other cluster nodes.
- Add '-f' to vgremove to force removal of VG even if LVs exist. - vgscan and pvscan now trigger clvmd -R, which should now work.
- Fix clvmd logging so you can get lvm-level debugging out of it.
- Allow clvmd debug to be turned on in a running daemon using c� x������������������� X � n �ylf
-HH������ ��������# n ru�$ r ���������������� �# �# � F � ? 5 d � � � � � . � D � H � X � \ � i � t � � � � � � � � � � �
$ 8 }
� � � � �
$
8
� (
� >
� ?
� G
� H
� I
� J
� X
� Y \ ] ( ^ ~ b � d � e � f � l � t � u � v �
� �
� �
� �
� �
� H L \ �
+ T � � � � K � g � h � C grafana-agent 0.39.2 1 no description given no description given e�zw5493a6e95afb �.&Grafana Labs Apache 2.0 <@5493a6e95afb> default https://github.com/grafana/agent linux x86_64 #!/bin/sh
set -e
# shellcheck disable=SC1091
[ -f /etc/sysconfig/grafana-agent ] && . /etc/sysconfig/grafana-agent
[ -z "$AGENT_USER" ] && AGENT_USER="grafana-agent"
[ -z "$AGENT_GROUP" ] && AGENT_GROUP="grafana-agent"
add_to_logging_groups() {
# Add grafana agent user to groups used for reading logs.
if getent group adm > /dev/null 2>&1 ; then
usermod -a -G adm "$AGENT_USER"
fi
if getent group systemd-journal > /dev/null 2>&1 ; then
usermod -a -G systemd-journal "$AGENT_USER"
fi
}
# Initial installation: $1 == 1
# Upgrade: $1 == 2, and configured to restart on upgrade
if [ "$1" -eq 1 ] ; then
if ! getent group "$AGENT_GROUP" > /dev/null 2>&1 ; then
groupadd -r "$AGENT_GROUP"
fi
if ! getent passwd "$AGENT_USER" > /dev/null 2>&1 ; then
useradd -r -m -g "$AGENT_GROUP" -d /var/lib/grafana-agent -s /sbin/nologin -c "grafana-agent user" "$AGENT_USER"
fi
add_to_logging_groups
chown $AGENT_USER:$AGENT_GROUP /var/lib/grafana-agent
chmod 770 /var/lib/grafana-agent
chmod 640 /etc/grafana-agent.yaml
chown root:$AGENT_GROUP /etc/grafana-agent.yaml
elif [ "$1" -ge 2 ] ; then
add_to_logging_groups
if [ "$RESTART_ON_UPGRADE" = "true" ]; then
systemctl daemon-reload
systemctl restart grafana-agent
fi
fi #!/bin/sh
set -e
# shellcheck disable=SC1091
[ -f /etc/sysconfig/grafana-agent ] && . /etc/sysconfig/grafana-agent
# final uninstallation $1=0
# If other copies of this RPM are installed, then $1>0
if [ "$1" -eq 0 ] ; then
if [ -x /bin/systemctl ] ; then
/bin/systemctl stop grafana-agent.service > /dev/null 2>&1 || :
elif [ -x /etc/init.d/grafana-agent ] ; then
/etc/init.d/grafana-agent stop
elif [ -x /etc/rc.d/init.d/grafana-agent ] ; then
/etc/rc.d/init.d/grafana-agent stop
fi
fi
exit 0 � � �?� %�� �����큤 e�x�e�x�e�y�e�y4e�x�73506518045506a1108997095ba5203b3a4395b84cae9886ce28efddb316f214 ad67a0d26ad9307fb3b0a7d60ffafdce76aa07962f0aae5a7d6a843be80e08e2 587f845cf54440cc8f0edbd6857fa05af5517bd19a2bf7a5c83ce9c637b78c5e 5cb739beb3d5597f07db503f4eba6c1386f225852daa98503b413f5aee707fcd 0654aa67e8d146dc6766e9cffe64afef8e67d453bd8125122a080f61d1777346 root root root root root root root root root root grafana-agent-0.39.2-1.src.rpm ��������������������grafana-agent grafana-agent(x86-64)
/bin/sh /bin/sh rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) 3.0.4-1 4.6.0-1 4.0-1 4.16.1.2 /bin/sh /bin/sh / 0.39.2-1 0.39.2-1 grafana-agent.yaml grafana-agent grafana-agent grafana-agentctl grafana-agent.service � x�������������P����� X � �@�y��2}��������.���"! K�
�$ 2 ���������������� "! #! �L � King <dking@redhat.com> - 1:1.12.8-11 David King <dking@redhat.com> - 1:1.12.8-10 David King <dking@redhat.com> - 1:1.12.8-9 David King <dking@redhat.com> - 1:1.12.8-8 Martin Pitt <mpitt@redhat.com> - 1:1.12.8-7 Martin Pitt <mpitt@redhat.com> Troy Dawson <tdawson@redhat.com> Colin Walters <walters@verbum.org> - 1:1.12.8-5 Colin Walters <walters@verbum.org> - 1:1.12.8-4 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.12.8-3 David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2 David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1 David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1 David King <amigadave@amigadave.com> - 1:1.12.8-1 Adam Jackson <ajax@redhat.com> - 1:1.12.0-3 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.12.0-2 David King <amigadave@amigadave.com> - 1:1.12.0-1 David King <amigadave@amigadave.com> - 1:1.11.22-1 David King <amigadave@amigadave.com> - 1:1.11.20-1 David King <amigadave@amigadave.com> - 1:1.11.18-1 Björn Esser <besser82@fedoraproject.org> - 1:1.11.16-4 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.11.16-3 Florian Weimer <fweimer@redhat.com> - 1:1.11.16-2 David King <amigadave@amigadave.com> - 1:1.11.16-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.11.14-2 David King <amigadave@amigadave.com> - 1:1.11.14-1 David King <amigadave@amigadave.com> - 1:1.11.12-1 David King <amigadave@amigadave.com> - 1:1.11.10-2 David King <amigadave@amigadave.com> - 1:1.11.10-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.11.8-2 David King <amigadave@amigadave.com> - 1:1.11.8-1 David King <amigadave@amigadave.com> - 1:1.11.6-1 David King <amigadave@amigadave.com> - 1:1.11.4-1 David King <amigadave@amigadave.com> - 1:1.11.2-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.11.0-2 David King <amigadave@amigadave.com> - 1:1.11.0-1 David King <amigadave@amigadave.com> - 1:1.10.6-1 David King <amigadave@amigadave.com> - 1:1.10.4-1 David King <amigadave@amigadave.com> - 1:1.10.2-1 David King <amigadave@amigadave.com> - 1:1.10.0-4 David King <amigadave@amigadave.com> - 1:1.10.0-3 Kay Sievers <kay@redhat.com> - 1:1.10.0-2 David King <amigadave@amigadave.com> - 1:1.10.0-1 David King <amigadave@amigadave.com> - 1:1.9.20-3 Adam Jackson <ajax@redhat.com> 1:1.9.20-2 David King <amigadave@amigadave.com> - 1:1.9.20-1 David King <amigadave@amigadave.com> - 1:1.9.18-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.9.16-2 David King <amigadave@amigadave.com> - 1:1.9.16-1 David King <amigadave@amigadave.com> - 1:1.9.14-1 Than Ngo <than@redhat.com> - 1:1.8.16-2 David King <amigadave@amigadave.com> - 1:1.8.16-1 David King <amigadave@amigadave.com> - 1:1.8.14-1 David King <amigadave@amigadave.com> - 1:1.8.12-3 David King <amigadave@amigadave.com> - 1:1.8.12-2 David King <amigadave@amigadave.com> - 1:1.8.12-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.6-3 Tom Callaway <spot@fedoraproject.org> - 1:1.8.6-2 Colin Walters <walters@verbum.org> - 1:1.8.6-1 Colin Walters <walters@verbum.org> - 1:1.8.4-2 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.6.18-4 Ville Skyttä <ville.skytta@iki.fi> - 1:1.6.18-3 Colin Walters <walters@verbum.org> - 1:1.6.18-2 Colin Walters <walters@verbum.org> - 1:1.6.18-1 Colin Walters <walters@verbum.org> - 1:1.6.12-4 Colin Walters <walters@verbum.org> - 1:1.6.12-3 Colin Walters <walters@verbum.org> - 1:1.6.12-2 Colin Walters <walters@verbum.org> - 1:1.6.12-1 Matthias Clasen <mclasen@redhat.com> - 1:1.6.8-5 Colin Walters <walters@redhat.com> - 1:1.6.8-4 Rex Dieter <rdieter@fedoraproject.org> - 1:1.6.8-3 Bill Nottingham <notting@redhat.com> - 1:1.6.8-2 Colin Walters <walters@verbum.org> - 1:1.6.8-1 Colin Walters <walters@verbum.org> - 1:1.6.6-1 Colin Walters <walters@verbum.org> - 1:1.6.0-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.6.0-2 Colin Walters <walters@verbum.org> - 1:1.6.0-1 Lennart Poettering <lpoetter@redhat.com> - 1:1.4.20-2 Colin Walters <walters@verbum.org> Fedora Release Engineering <rel-eng@lists.fedoraproject.o� x�������������Ȣ���� X � uQ�yscrix ������a n /
�$ ���������������� �a �a �a � Orton <jorton@redhat.com> 5.1.1-3 Joe Orton <jorton@redhat.com> 5.1.1-2 Tomas Mraz <tmraz@redhat.com> 5.0.5-6 Joe Orton <jorton@redhat.com> 5.0.5-5 Joe Orton <jorton@redhat.com> 5.0.5-4 Joe Orton <jorton@redhat.com> 5.0.5-3 Joe Orton <jorton@redhat.com> 5.0.4-11 Joe Orton <jorton@redhat.com> 5.0.4-10 Joe Orton <jorton@redhat.com> 5.0.4-9 Joe Orton <jorton@redhat.com> 5.0.4-8 Joe Orton <jorton@redhat.com> 5.0.4-7 Joe Orton <jorton@redhat.com> 5.0.4-6 Joe Orton <jorton@redhat.com> 5.0.4-5 Joe Orton <jorton@redhat.com> 5.0.4-4 Joe Orton <jorton@redhat.com> 5.0.4-3 Joe Orton <jorton@redhat.com> 5.0.4-2 Joe Orton <jorton@redhat.com> 5.0.4-1 Joe Orton <jorton@redhat.com> 5.0.3-5 Joe Orton <jorton@redhat.com> 5.0.3-4 Joe Orton <jorton@redhat.com> 5.0.3-3 Joe Orton <jorton@redhat.com> 5.0.3-2 Joe Orton <jorton@redhat.com> 5.0.3-1 Joe Orton <jorton@redhat.com> 5.0.2-8 Joe Orton <jorton@redhat.com> 5.0.2-7 Joe Orton <jorton@redhat.com> 5.0.2-6 Joe Orton <jorton@redhat.com> 5.0.2-5 Joe Orton <jorton@redhat.com> 5.0.2-4 Joe Orton <jorton@redhat.com> 5.0.1-4 Joe Orton <jorton@redhat.com> 5.0.1-3 Joe Orton <jorton@redhat.com> 5.0.1-2 Joe Orton <jorton@redhat.com> 5.0.1-1 Tom Callaway <tcallawa@redhat.com> Tom Callaway <tcallawa@redhat.com> - Fix Security issue with external entity loading in XML without enabling it
GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc - fix possible buffer overflow in date
- define %php70___phpize and %php70___phpconfig - Fix Missing error check and insufficient random bytes in HTTP Digest
authentication for SOAP
GHSA-76gg-c692-v2mw CVE-2023-3247
- use oracle client library version 21.10 - fix #81744: Password_verify() always return true with some hash
CVE-2023-0567
- fix #81746: 1-byte array overrun in common path resolve code
CVE-2023-0568
- fix DOS vulnerability when parsing multipart request body
CVE-2023-0662 - pdo: fix #81740: PDO::quote() may return unquoted string
CVE-2022-31631
- use oracle client library version 21.8 - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
- core: fix #81727 Don't mangle HTTP variable names that clash with ones
that have a specific semantic meaning. CVE-2022-31629
- use oracle client library version 21.7 - use oracle client library version 21.6
- mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
- pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625 - Fix #79971 special character is breaking the path in xml function
CVE-2021-21707 - fix PHP-FPM oob R/W in root process leading to priv escalation
CVE-2021-21703
- use libicu version 69
- use oracle client library version 21.3 - fix intl build on F35 - Fix #81211 Symlinks are followed when creating PHAR archive - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
CVE-2021-21705
- Fix #76488 Memory leak when fetching a BLOB field
- Fix #76448 Stack buffer overflow in firebird_info_cb
- Fix #76449 SIGSEGV in firebird_handle_doer
- Fix #76450 SIGSEGV in firebird_stmt_execute
- Fix #76452 Crash while parsing blob data in firebird_fetch_blob
CVE-2021-21704 - fix snmp extension build with net-snmp without DES - Fix #80710 imap_mail_compose() header injection
- use oracle client library version 21.1 - Fix #80672 Null Dereference in SoapClient
CVE-2021-21702
- better fix for #77423 - Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfo
CVE-2020-7071 - Core:
Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent
CVE-2020-7070 - Core:
Fix #79877 getimagesize function silently truncates after a null byte
- Phar:
Fix #79797 use of freed hash key in the phar_parse_zipfile function
CVE-2020-7068 - Core:
Fix #78875 Long filenames cause OOM and temp files are not cleaned
CVE-2019-11048
Fix #78876 Long variables in multipart/form-data cause OOM and temp
files are not cleaned - standard:
Fix #79330 shell_exec silently truncates after a null by� x�������������@����� X � n ��yawsk���������� � om> �$ b ���������������� � � � � to mmap kernel modules
- Allow systemd to read sysfs sym links. BZ(1499327)
- Allow systemd to mmap systemd_networkd_exec_t files BZ(1499863)
- Make systemd_networkd_var_run as mountpoint BZ(1499862)
- Allow noatsecure for java-based unconfined services. BZ(1358476)
- Allow systemd_modules_load_t domain to mmap kernel modules. BZ(1490015) - Allow cloud-init to create content in /var/run/cloud-init
- Dontaudit VM to read gnome-boxes process data BZ(1415975)
- Allow winbind_t domain mmap samba_var_t files
- Allow cupsd_t to execute ld_so_cache_t BZ(1478602)
- Update dev_rw_xserver_misc() interface to allo source domains to mmap xserver devices BZ(1334035)
- Add dac_override capability to groupadd_t domain BZ(1497091)
- Allow unconfined_service_t to start containers - Drop policyhelp utility BZ(1498429) - Allow cupsd_t to execute ld_so_cache_t BZ(1478602)
- Allow firewalld_t domain to change object identity because of relabeling after using firewall-cmd BZ(1469806)
- Allow postfix_cleanup_t domain to stream connect to all milter sockets BZ(1436026)
- Allow nsswitch_domain to read virt_var_lib_t files, because of libvirt NSS plugin. BZ(1487531)
- Add unix_stream_socket recvfrom perm for init_t domain BZ(1496318)
- Allow systemd to maange sysfs BZ(1471361) - Switch default value of SELinux boolean httpd_graceful_shutdown to off. - Allow virtlogd_t domain to write inhibit systemd pipes.
- Add dac_override capability to openvpn_t domain
- Add dac_override capability to xdm_t domain
- Allow dac_override to groupadd_t domain BZ(1497081)
- Allow cloud-init to create /var/run/cloud-init dir with net_conf_t SELinux label.BZ(1489166) - Allow tlp_t domain stream connect to sssd_t domain
- Add missing dac_override capability
- Add systemd_tmpfiles_t dac_override capability - Remove all unnecessary dac_override capability in SELinux modules - Allow init noatsecure httpd_t
- Allow mysqld_t domain to mmap mysqld db files. BZ(1483331)
- Allow unconfined_t domain to create new users with proper SELinux lables
- Allow init noatsecure httpd_t
- Label tcp port 3269 as ldap_port_t - Add new boolean tomcat_read_rpm_db()
- Allow tomcat to connect on mysqld tcp ports
- Add new interface apache_delete_tmp()
- Add interface fprintd_exec()
- Add interface fprintd_mounton_var_lib()
- Allow mozilla plugin to mmap video devices BZ(1492580)
- Add ctdbd_t domain sys_source capability and allow setrlimit
- Allow systemd-logind to use ypbind
- Allow systemd to remove apache tmp files
- Allow ldconfig domain to mmap ldconfig cache files
- Allow systemd to exec fprintd BZ(1491808)
- Allow systemd to mounton fprintd lib dir - Allow svirt_t read userdomain state - Allow mozilla_plugins_t domain mmap mozilla_plugin_tmpfs_t files
- Allow automount domain to manage mount pid files
- Allow stunnel_t domain setsched
- Add keepalived domain setpgid capability
- Merge pull request #24 from teg/rawhide
- Merge pull request #28 from lslebodn/revert_1e8403055
- Allow sysctl_irq_t assciate with proc_t
- Enable cgourp sec labeling
- Allow sshd_t domain to send signull to xdm_t processes - Allow passwd_t domain mmap /etc/shadow and /etc/passwd
- Allow pulseaudio_t domain to map user tmp files
- Allow mozilla plugin to mmap mozilla tmpfs files - Add new bunch of map rules
- Merge pull request #25 from NetworkManager/nm-ovs
- Make working webadm_t userdomain
- Allow redis domain to execute shell scripts.
- Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
- Add couple capabilities to keepalived domain and allow get attributes of all domains
- Allow dmidecode read rhsmcertd lock files
- Add new interface rhsmcertd_rw_lock_files()
- Add new bunch of map rules
- Merge pull request #199 from mscherer/add_conntrackd
- Add support labeling for vmci and vsock device
- Add userdom_dontaudit_manage_admin_files() interface - Allow domains reading raw memory also use mmap. - Add rules fixing installing ipa-server-install with SELinux in Enforcing. BZ(1488404)
- Fix denials during ipa-server-install process on F27+
- Allow httpd_t to m� x������������������� X � .o^�y- 3.`� �j������� i <o�$ ���������������� � � � R R R R R R R R R R R R R R
R R R R R R R utf-8 a691a61b7f99a0878bf71d3bd9f8367da6b02d84c485285e61071f540e977b7b ? ���@ ���3 !pQ�p�)�Tξ7��]�mtZ``t�
�]�mtZ`X}�P��
�v<� �{��� 4�<%ʦQ�D(�<��U�;��0�> . ��fg��1�Ƨ^���2����|@>
�@<��\�*F��x��ԩ=C�5 �5��k�5q/�Vω�c՟4�]� 㫙F�k��<�bD��� SA���s�*�'�&��ǥ��KZ�4q"�j�l 5�Bk�J�zuv*yun)� k���
�>��8��� K��2}��R%vl-���>r[0��(X7K�
*8�O����ڣ;�%���� }�ƀ n��\�鲤�0���,t��8KIN�3��5��\��_%�T��;Emk��}ԏi# X�W ���W'����>��R` u�!�)���
6���ћ�gyR
}}���-�14,*�w��+��}�)�24%�R�M2Es � R���G�Fe�$� �T�<�gd����%���h �h�<Y��'���g;�E�Y�� a ��������t��_���f,7yEN�L��]%ű2����@P��y �\�ʴ'���� ��% $ʼn3 !pQ�p�)�Tξ7��]�mtZ``t�
�]�mtZ` ��.ֶvmX�5x��ub9��ʬ̲-�����)��$�X�D&8Dzw�O�� M ?q��c*�m��rF�ji��>s��N�C��Ծ��^����4�.O�C.�Y$;�Jb��
���4&�A�f����B"��+ =�":���7x/��u�0�]���J�( r��E���{X����_�خC��*Pt/�� ��߹ ��b�Y�/��Щ)��#f7 �* |��f{e� Q ^C��\ �B'�l_'�P� �A<�d �Uٯ$Ҝ ���6܁h��x��̾����ȸ\X}OJ���~|%���v�.�Q�*8oBQ�@�>�z�><!� ���`�� ��{D$g,1i��V�(�2�h�^Pf �{�06
u����XnX�*o���H��� �r��bj��©Q3�4��QT:�J�� b�aM�anpkO`3���l�� HmP�H��S�d~|�h �{Wo � �%�k�R~(�� ��I�
%{,i�l )��mr`� _U�R�C54bc88cc05ddf9f633fdcca06fb83154e5d86989 397bb19b64edd5116e51133bd36b49865b563433799152319d4ac2ea3367b3d8 dT� �� dT�� � h& 3e07c5b1c87b251a1de0915181f13432e34315 � � � .& 3e3472d0b643a0355e96aafbd186b8252150e4lp. � o& 384f956f67ad386f88dce2d4887776bad3e79c � h& 3e3abbc7eeb17654031e35d6b93cdae71de5fder. � �& 38bc06c052ea7867e3dfbba547e88e21e0a6fa h � y& 3d908d9c8d31fdc27230b964f6fb2b4f70a8e3-2. � � i& 3e8f8b62f05cdb98e8401e208c741b613efca2 � � � t& 3805b01df1c860f0db498f99989fc798502258ndl � � -& 3d41d906af6678fbd85bb41c1a2e0f61b471eepyt � .& 3cbed24a0604b3b2f340f1e6d7b1bcfd1ef017 y e& 3f87dfc9e9f832337876571a3182119a23c9f6 3 � n c& 3f7302b5450083f03a502a3b343ee389f0e325c4a � 3f � o 3& 3ee43aab6d4776d728abbe2d4739a047f96cd2472 g j p > � 8 7 3e97d - f& 3db5eb3e84fc85a3c20af6c977ea24bf8f9900 ( e � � � � � 6 3d � 3com4 p 7& 3c33e590b800a8f7b04a28d69b099338639f8eb34 1 � y 3c 4 1& 3b9c97ae0951bada392ac436b06b9d026c1e57da2 � & 3b0b88d716542cfd9fdbe201dd0f31a1d0fcf90 ( b " � � � � u 7 3b8ac � & 3ade34bc359b59bce88f369e88915af73b6b02� � & 3a395bd8176dc698d1685c03a40d5d5cece169b0e - f& 3a1ed3ab99dfee46ced995c540862126ef9a635bd@ ` 4 � � � � w � � 9 3af26 � u 4 3CXEM556.cis6 � t 8
3CCFEM556.cis ^& 39ba7ff5188ac9deaa6159a3b737144ba2244a Q & 398e99a70ed1f9f57519aee2b0c898030fc373c82 4 8& 39616a9631aeaedf8f9807978cd4f7ecf131d375d( p < � � 4 � � r 1 39c9e L a& 38d753df3ec667930355f9b34528caeb1d2c369b5 � a& 38d590bb1cc7dbec37ed7655d25ffd2ccef89e905 & 38b6a1a7444e346b5c19d16e5c0f3022229986 � 38C1600.binc3 � 5 38C0800.bin62 � d& 389ebc2da0372105a247b0e7223dfbc6a37a28 3 & 3890546394e8ea755096f1e999d30bb621d37f � K 0& 3879d829a93ca3484a7861e6e484abcd2ecdb0679 � & 3877080a493f7640450c977e94183f7222e720V v 8& 3866281238aef847a5d45716d4ea8561cebb9ca61 E 6& 3858abab54679b3eabff7432f5efc62b6efd4c 0 7 m p 9 � � � 2 7 38da0 p � 9& 37ee8055cac99d3af6dfb21ca15f323c65d5c8792 7 b& 37e9a54630aa7eef8ffc16e35caae9dca1c44f863 8 & 37c658d82ce21762d20ff9221e42d9247ba0ef673 5 & 37c1b8913d49a180ffbffd8818d365115350e5aba� x�������������0q���� X � nt}�yr_Sy������������4 loca�$ $ ���������������� 4 3 5 � p binary
- Add bridge_socket, dccp_socket, ib_socket and mpls_socket to socket_class_set
- Improve modutils_domtrans_insmod() interface to mmap insmod_exec_t binaries
- Improve iptables_domtrans() interface to allow mmaping iptables_exec_t binary
- Improve auth_domtrans_login_programinterface to allow also mmap login_exec_t binaries
- Improve auth_domtrans_chk_passwd() interface to allow also mmaping chkpwd_exec_t binaries.
- Allow mmap dhcpc_exec_t binaries in sysnet_domtrans_dhcpc interface
- Improve running xorg with proper SELinux domain even if systemd security feature NoNewPrivileges is used
- Associate sysctl_vm_overcommit_t with fs_t
- Allow systemd creating bluetooth sockets
- Allow ssh client to read network sysctl BZ(1574170)
- Allow systemd_resolved_t and systemd_networkd_t to read dbus pid files
- Allow sysadm user to sys_ptrace cap_userns
- Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label.
- Allow ssh client to read network state BZ(1574174)
- Allow ssh basic client to read/write to tun tap devices BZ(1574184)
- Allow ssh basic client to create tun sockets BZ(1574186)
- Disable secure mode environment cleansing for dirsrv_t - Disable secure mode environment cleansing for dirsrv_t
- - Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label. - Add dac_override capability to remote_login_t domain
- Allow chrome_sandbox_t to mmap tmp files
- Update ulogd SELinux security policy
- Allow rhsmcertd_t domain send signull to apache processes
- Allow systemd socket activation for modemmanager
- Allow geoclue to dbus chat with systemd
- Fix file contexts on conntrackd policy
- Temporary fix for varnish and apache adding capability for DAC_OVERRIDE
- Allow lsmd_plugin_t domain to getattr lsm_t unix stream sockets
- Add label for /usr/sbin/pacemaker-remoted to have cluster_exec_t
- Allow nscd_t domain to be system dbusd client
- Allow abrt_t domain to read sysctl
- Add dac_read_search capability for tangd
- Allow systemd socket activation for rshd domain
- Add label for /usr/libexec/cyrus-imapd/master as cyrus_exec_t to have proper SELinux domain transition from init_t to cyrus_t
- Allow kdump_t domain to map /boot files
- Allow conntrackd_t domain to send msgs to syslog
- Label /usr/sbin/nhrpd and /usr/sbin/pimd binaries as zebra_exec_t
- Allow swnserve_t domain to stream connect to sasl domain
- Allow smbcontrol_t to create dirs with samba_var_t label
- Remove execstack,execmem and execheap from domains setroubleshootd_t, locate_t and podsleuth_t to increase security. BZ(1579760)
- Allow tangd to read public sssd files BZ(1509054)
- Allow geoclue start with nnp systemd security feature with proper SELinux Domain transition BZ(1575212)
- Allow ctdb_t domain modify ctdb_exec_t files
- Allow firewalld_t domain to create netlink_netfilter sockets
- Allow radiusd_t domain to read network sysctls
- Allow pegasus_t domain to mount tracefs_t filesystem
- Allow psad_t domain to read all domains state
- Allow tomcat_t domain to connect to mongod_t tcp port
- Allow dovecot and postfix to connect to systemd stream sockets
- Make nmbd_t domain dbus system client BZ(1569856)
- Merge pull request #55 from SISheogorath/fix/tlp-policy
- Merge pull request #54 from tmzullinger/rawhide
- Allow also listing system_dbusd_var_run_t dirs in dbusd_read_pid_files macro BZ(1566168)
- Allow gssproxy_t domain to read gssd_t state BZ(1572945)
- Allow create systemd to mount pid files
- Add files_map_boot_files() interface
- Remove execstack,execmem and execheap from domain fsadm_t to increase security. BZ(1579760)
- Fix typo xserver SELinux module
- Allow systemd to mmap files with var_log_t label
- Allow x_userdomains read/write to xserver session
- Allow users staff and sysadm to run wireshark on own domain
- Fix typos s/xserver/xdm/ for allow creating xserver misc devices
- Allow systemd-bootchart to create own tmpfs files
- Merge pull request� x��������������`���� X � �y x h����� Y �$ � ���������������� � � � � 01=m, CONFIG_TOUCHSCREEN_MCS5000=m,
- CONFIG_TOUCHSCREEN_MMS114=m, CONFIG_TOUCHSCREEN_MELFAS_MIP4=m,
- CONFIG_TOUCHSCREEN_MTOUCH=m, CONFIG_TOUCHSCREEN_INEXIO=m,
- CONFIG_TOUCHSCREEN_MK712=m, CONFIG_TOUCHSCREEN_PENMOUNT=m,
- CONFIG_TOUCHSCREEN_EDT_FT5X06=m, CONFIG_TOUCHSCREEN_TOUCHRIGHT=m,
- CONFIG_TOUCHSCREEN_TOUCHWIN=m, CONFIG_TOUCHSCREEN_PIXCIR=m,
- CONFIG_TOUCHSCREEN_WDT87XX_I2C=m, CONFIG_TOUCHSCREEN_WM97XX=m,
- CONFIG_TOUCHSCREEN_WM9705=y, CONFIG_TOUCHSCREEN_WM9712=y,
- CONFIG_TOUCHSCREEN_WM9713=y, CONFIG_TOUCHSCREEN_USB_COMPOSITE=m,
- CONFIG_TOUCHSCREEN_USB_EGALAX=y, CONFIG_TOUCHSCREEN_USB_PANJIT=y,
- CONFIG_TOUCHSCREEN_USB_3M=y, CONFIG_TOUCHSCREEN_USB_ITM=y,
- CONFIG_TOUCHSCREEN_USB_ETURBO=y, CONFIG_TOUCHSCREEN_USB_GUNZE=y,
- CONFIG_TOUCHSCREEN_USB_DMC_TSC10=y, CONFIG_TOUCHSCREEN_USB_IRTOUCH=y,
- CONFIG_TOUCHSCREEN_USB_IDEALTEK=y, CONFIG_TOUCHSCREEN_USB_GENERAL_TOUCH=y,
- CONFIG_TOUCHSCREEN_USB_GOTOP=y, CONFIG_TOUCHSCREEN_USB_JASTEC=y,
- CONFIG_TOUCHSCREEN_USB_ELO=y, CONFIG_TOUCHSCREEN_USB_E2I=y,
- CONFIG_TOUCHSCREEN_USB_ZYTRONIC=y, CONFIG_TOUCHSCREEN_USB_ETT_TC45USB=y,
- CONFIG_TOUCHSCREEN_USB_NEXIO=y, CONFIG_TOUCHSCREEN_USB_EASYTOUCH=y,
- CONFIG_TOUCHSCREEN_TOUCHIT213=m, CONFIG_TOUCHSCREEN_TSC_SERIO=m,
- CONFIG_TOUCHSCREEN_TSC200X_CORE=m, CONFIG_TOUCHSCREEN_TSC2004=m,
- CONFIG_TOUCHSCREEN_TSC2005=m, CONFIG_TOUCHSCREEN_TSC2007=m,
- CONFIG_TOUCHSCREEN_RM_TS=m, CONFIG_TOUCHSCREEN_SILEAD=m,
- CONFIG_TOUCHSCREEN_SIS_I2C=m, CONFIG_TOUCHSCREEN_ST1232=m,
- CONFIG_TOUCHSCREEN_STMFTS=m, CONFIG_TOUCHSCREEN_SUR40=m,
- CONFIG_TOUCHSCREEN_SURFACE3_SPI=m, CONFIG_TOUCHSCREEN_SX8654=m,
- CONFIG_TOUCHSCREEN_TPS6507X=m, CONFIG_TOUCHSCREEN_ZET6223=m,
- CONFIG_TOUCHSCREEN_ZFORCE=m, CONFIG_TOUCHSCREEN_ROHM_BU21023=m,
- CONFIG_TOUCHSCREEN_IQS5XX=m, CONFIG_TOUCHSCREEN_ZINITIX=m,
- CONFIG_RMI4_F3A=y, CONFIG_SERIO_PCIPS2=m, CONFIG_SERIO_PS2MULT=m,
- CONFIG_SERIO_GPIO_PS2=m, CONFIG_USERIO=m, CONFIG_GAMEPORT=m,
- CONFIG_GAMEPORT_NS558=m, CONFIG_GAMEPORT_L4=m, CONFIG_GAMEPORT_EMU10K1=m,
- CONFIG_GAMEPORT_FM801=m, CONFIG_HW_RANDOM_XIPHERA=m, CONFIG_PINCTRL_INTEL=y,
- CONFIG_GPIO_CDEV=y, CONFIG_GPIO_CDEV_V1=y, CONFIG_GPIO_MAX730X=m,
- CONFIG_GPIO_DWAPB=m, CONFIG_GPIO_EXAR=m, CONFIG_GPIO_GENERIC_PLATFORM=m,
- CONFIG_GPIO_MB86S7X=m, CONFIG_GPIO_VX855=m, CONFIG_GPIO_XILINX=m,
- CONFIG_GPIO_AMD_FCH=m, CONFIG_GPIO_F7188X=m, CONFIG_GPIO_IT87=m,
- CONFIG_GPIO_SCH=m, CONFIG_GPIO_SCH311X=m, CONFIG_GPIO_WINBOND=m,
- CONFIG_GPIO_WS16C48=m, CONFIG_GPIO_ADP5588=m, CONFIG_GPIO_MAX7300=m,
- CONFIG_GPIO_MAX732X=m, CONFIG_GPIO_PCA953X=m, CONFIG_GPIO_PCA9570=m,
- CONFIG_GPIO_PCF857X=m, CONFIG_GPIO_TPIC2810=m, CONFIG_GPIO_AMD8111=m,
- CONFIG_GPIO_BT8XX=m, CONFIG_GPIO_ML_IOH=m, CONFIG_GPIO_PCI_IDIO_16=m,
- CONFIG_GPIO_PCIE_IDIO_24=m, CONFIG_GPIO_RDC321X=m, CONFIG_GPIO_MAX3191X=m,
- CONFIG_GPIO_MAX7301=m, CONFIG_GPIO_MC33880=m, CONFIG_GPIO_PISOSR=m,
- CONFIG_GPIO_XRA1403=m, CONFIG_GPIO_AGGREGATOR=m, CONFIG_SENSORS_HIH6130=m,
- CONFIG_SENSORS_IIO_HWMON=m, CONFIG_SENSORS_POWR1220=m, CONFIG_SENSORS_MR75203=m,
- CONFIG_SENSORS_ADM1266=m, CONFIG_SENSORS_MP2975=m, CONFIG_MFD_RDC321X=m,
- CONFIG_REGULATOR_FIXED_VOLTAGE=m, CONFIG_REGULATOR_VIRTUAL_CONSUMER=m,
- CONFIG_REGULATOR_USERSPACE_CONSUMER=m, CONFIG_REGULATOR_88PG86X=m,
- CONFIG_REGULATOR_ACT8865=m, CONFIG_REGULATOR_AD5398=m, CONFIG_REGULATOR_DA9210=m,
- CONFIG_REGULATOR_DA9211=m, CONFIG_REGULATOR_FAN53555=m, CONFIG_REGULATOR_GPIO=m,
- CONFIG_REGULATOR_ISL9305=m, CONFIG_REGULATOR_ISL6271A=m, CONFIG_REGULATOR_LP3971=m,
- CONFIG_REGULATOR_LP3972=m, CONFIG_REGULATOR_LP872X=m, CONFIG_REGULATOR_LP8755=m,
- CONFIG_REGULATOR_LTC3589=m, CONFIG_REGULATOR_LTC3676=m, CONFIG_REGULATOR_MAX1586=m,
- CONFIG_REGULATOR_MAX8649=m, CONFIG_REGULATOR_MAX8660=m, CONFIG_REGULATOR_MAX8952=m,
- CONFIG_REGULATOR_MAX77826=m, CONFIG_REGULATOR_MP8859=m, CONFIG_REGULATOR_MT6311=m,
- CONFIG_REGULATOR_PCA9450=m, CONFIG_REGULATOR_PFUZE100=m, CONFIG_REGULATOR_PV88060=m,
- CONFIG_REGULATOR_PV88080=m, CONFIG_REGULATOR_PV88090=m, CONFIG_REGULATOR_PWM=m,
- CONFIG_REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY=m, CONFIG_REGULATOR_RT4� x������������� P���� X � PH�y6.0 Ȕ � comm�$ ���������������� � � � � 13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13] - Updated with the 5.13.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12] - Updated with the 5.13.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11] - Updated with the 5.13.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10] - Updated with the 5.13.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.9] - Updated with the 5.13.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.8] - Updated with the 5.13.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.7] - Updated with the 5.13.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.6]
- CONFIG_I2C_HID_ACPI=m [https://elrepo.org/bugs/view.php?id=1123] - Updated with the 5.13.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.5] - Updated with the 5.13.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4] - Updated with the 5.13.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3] - Updated with the 5.13.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.2] - Updated with the 5.13.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.1] - Updated with the 5.13 source tarball.
- CONFIG_AS_IS_GNU=y, CONFIG_AS_VERSION=23000, CONFIG_CGROUP_MISC=y,
- CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y,
- CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y,
- CONFIG_HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET=y,
- CONFIG_MODULE_COMPRESS_NONE=y, CONFIG_MODPROBE_PATH="/sbin/modprobe",
- CONFIG_MHP_MEMMAP_ON_MEMORY=y, CONFIG_NF_LOG_SYSLOG=m,
- CONFIG_NETFILTER_XTABLES_COMPAT=y, CONFIG_PCPU_DEV_REFCNT=y,
- CONFIG_CAN_ETAS_ES58X=m, CONFIG_BT_HCIBTSDIO=m,
- CONFIG_BT_MRVL_SDIO=m, CONFIG_BT_MTKSDIO=m, CONFIG_BT_VIRTIO=m,
- CONFIG_NET_SELFTESTS=y, CONFIG_NET_VENDOR_MICROSOFT=y,
- CONFIG_MICROSOFT_MANA=m, CONFIG_MLX5_TC_SAMPLE=y,
- CONFIG_MARVELL_88X2222_PHY=m, CONFIG_NXP_C45_TJA11XX_PHY=m,
- CONFIG_TOUCHSCREEN_HYCON_HY46XX=m, CONFIG_TOUCHSCREEN_ILITEK=m,
- CONFIG_TOUCHSCREEN_MSG2638=m, CONFIG_I2C_CP2615=m,
- CONFIG_SENSORS_NZXT_KRAKEN2=m, CONFIG_SENSORS_BPA_RS600=m,
- CONFIG_SENSORS_FSP_3Y=m, CONFIG_SENSORS_IR36021=m,
- CONFIG_SENSORS_MAX15301=m, CONFIG_SENSORS_STPDDC60=m,
- CONFIG_INTEL_SOC_DTS_THERMAL=m, CONFIG_INTEL_PCH_THERMAL=m,
- CONFIG_INTEL_TCC_COOLING=m, CONFIG_DRM_I915_REQUEST_TIMEOUT=20000,
- CONFIG_DRM_XEN=y, CONFIG_DRM_XEN_FRONTEND=m, CONFIG_DRM_GUD=m,
- CONFIG_VIDEOMODE_HELPERS=y, CONFIG_SND_CTL_LED=m,
- CONFIG_SND_SOC_RT1015P=m, CONFIG_SND_SOC_TLV320AIC3X_I2C=m,
- CONFIG_SND_SOC_TLV320AIC3X_SPI=m, CONFIG_SND_VIRTIO=m,
- CONFIG_HID_FT260=m, CONFIG_RTC_DRV_GOLDFISH=m,
- CONFIG_ARCH_HAS_RESTRICTED_VIRTIO_MEMORY_ACCESS=y,
- CONFIG_VP_VDPA=m, CONFIG_GIGABYTE_WMI=m, CONFIG_ADV_SWBUTTON=m,
- CONFIG_NETFS_SUPPORT=m, CONFIG_NFS_V4_2_SSC_HELPER=y,
- CONFIG_CRYPTO_ECDSA=m, CONFIG_LZ4_COMPRESS=m,
- CONFIG_LZ4HC_COMPRESS=m, CONFIG_ZSTD_COMPRESS=m,
- CONFIG_ASN1_ENCODER=y and CONFIG_ARCH_USE_MEMTEST=y - Updated with the 5.12.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13] - Updated with the 5.12.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.12] - Updated with the 5.12.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11] - Updated with the 5.12.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10] - Updated with the 5.12.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.9] - Updated with the 5.12.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.8] - Updated with the 5.12.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.7] - Updated with the 5.12.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog� x��������������?���� X � re:�yalso��������������� w se�$ 0 ���������������� � � � � d glibc with -O2 (following the upstream default).
- Auto-sync with upstream master,
commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
- malloc: Abort on heap corruption, without a backtrace (swbz#21754)
- getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
- getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
- Place $(elf-objpfx)sofini.os last (swbz#22051)
- Various locale fixes (swbz#15332, swbz#22044) - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
- Auto-sync with upstream master,
commit 5f9409b787c5758fc277f8d1baf7478b752b775d:
- Various locale fixes (swbz#22022, swbz#22038, swbz#21951, swbz#13805,
swbz#21971, swbz#21959)
- MIPS/o32: Fix internal_syscall5/6/7 (swbz#21956)
- AArch64: Fix procfs.h not to expose stdint.h types
- iconv_open: Fix heap corruption on gconv_init failure (swbz#22026)
- iconv: Mangle __btowc_fct even without __init_fct (swbz#22025)
- Fix bits/math-finite.h _MSUF_ expansion namespace (swbz#22028)
- Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930) - Auto-sync with upstream master,
commit 2dba5ce7b8115d6a2789bf279892263621088e74. - Auto-sync with upstream master,
commit 3d7b66f66cb223e899a7ebc0f4c20f13e711c9e0:
- string/stratcliff.c: Replace int with size_t (swbz#21982)
- Fix tgmath.h handling of complex integers (swbz#21684) - Use an architecture-independent system call list (#1484729)
- Drop glibc-fedora-include-bits-ldbl.patch (#1482105) - Auto-sync with upstream master,
commit 80f91666fed71fa3dd5eb5618739147cc731bc89. - Auto-sync with upstream master,
commit a8410a5fc9305c316633a5a3033f3927b759be35:
- Obsolete matherr, _LIB_VERSION, libieee.a. - Auto-sync with upstream master,
commit 4504783c0f65b7074204c6126c6255ed89d6594e. - Auto-sync with upstream master,
commit b5889d25e9bf944a89fdd7bcabf3b6c6f6bb6f7c:
- assert: Support types without operator== (int) (#1483005) - Auto-sync with upstream master,
commit 2585d7b839559e665d5723734862fbe62264b25d:
- Do not use generic selection in C++ mode
- Do not use __builtin_types_compatible_p in C++ mode (#1481205)
- x86-64: Check FMA_Usable in ifunc-mathvec-avx2.h (swbz#21966)
- Various locale fixes (swbz#21750, swbz#21960, swbz#21959, swbz#19852)
- Fix sigval namespace (swbz#21944)
- x86-64: Optimize e_expf with FMA (swbz#21912)
- Adjust glibc-rh827510.patch. - Remove 'Buildroot' tag, 'Group' tag, and '%clean' section, and don't
remove the buildroot in '%install', all per Fedora Packaging Guidelines
(#1476839) - Auto-sync with upstream master,
commit 403143e1df85dadd374f304bd891be0cd7573e3b:
- x86-64: Align L(SP_RANGE)/L(SP_INF_0) to 8 bytes (swbz#21955)
- powerpc: Add values from Linux 4.8 to <elf.h>
- S390: Add new s390 platform z14.
- Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
swbz#21920, swbz#21854)
- NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
- i386: Do not set internal_function
- assert: Suppress pedantic warning caused by statement expression (swbz#21242)
- powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
- sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
- Remove __qaddr_t, __long_double_t
- Fix uc_* namespace (swbz#21457)
- nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
- aarch64: Optimized memcpy for Qualcomm Falkor processor
- manual: Document getcontext uc_stack value on Linux (swbz#759)
- i386: Add <startup.h> (swbz#21913)
- Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
- Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
- x86-64: Add FMA multiarch functions to libm
- i386: Support static PIE in start.S
- Compile tst-prelink.c without PIE (swbz#21815)
- x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
- x86: Remove __memset_zero_constant_len_parameter (swbz#21790) - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
- Remove nosegneg 32-bit Xen PV suppo� x�������������/���� X � og��y5.24���������>���9 5.1�$ ) ���������������� 9 8 : � s() interface to allow list dirs with label virt_var_lib_t BZ(1507110)
- Allow postfix_master_t and postfix_local_t to connect to system dbus. BZ(1530275)
- Allow system_munin_plugin_t domain to read sssd public files and allow stream connect to ssd daemon BZ(1528471)
- Allow rkt_t domain to bind on rkt_port_t tcp BZ(1534636)
- Allow jetty_t domain to mmap own temp files BZ(1534628)
- Allow sslh_t domain to read sssd public files and stream connect to sssd. BZ(1534624)
- Consistently label usr_t for kernel/initrd in /usr
- kernel/files.fc: Label /usr/lib/sysimage as usr_t
- Allow iptables sysctl load list support with SELinux enforced
- Label HOME_DIR/.config/systemd/user/* user unit files as systemd_unit_file_t BZ(1531864) - Merge pull request #45 from jlebon/pr/rot-sd-dbus-rawhide
- Allow virt_domains to acces infiniband pkeys.
- Allow systemd to relabelfrom tmpfs_t link files in /var/run/systemd/units/ BZ(1535180)
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
- Allow audisp_remote_t domain write to files on all levels - Allow aide to mmap usr_t files BZ(1534182)
- Allow ypserv_t domain to connect to tcp ports BZ(1534245)
- Allow vmtools_t domain creating vmware_log_t files
- Allow openvswitch_t domain to acces infiniband devices
- Allow dirsrv_t domain to create tmp link files
- Allow pcp_pmie_t domain to exec itself. BZ(153326)
- Update openvswitch SELinux module
- Allow virtd_t to create also sock_files with label virt_var_run_t
- Allow chronyc_t domain to manage chronyd_keys_t files.
- Allow logwatch to exec journal binaries BZ(1403463)
- Allow sysadm_t and staff_t roles to manage user systemd services BZ(1531864)
- Update logging_read_all_logs to allow mmap all logfiles BZ(1403463)
- Add Label systemd_unit_file_t for /var/run/systemd/units/ - Removed big SELinux policy patches against tresys refpolicy and use tarballs from fedora-selinux github organisation - Use python3 package in BuildRequires to ensure python version 3 will be used for compiling SELinux policy - auth_use_nsswitch() interface cannot be used for attributes fixing munin policy
- Allow git_script_t to mmap git_user_content_t files BZ(1530937)
- Allow certmonger domain to create temp files BZ(1530795)
- Improve interface mock_read_lib_files() to include also symlinks. BZ(1530563)
- Allow fsdaemon_t to read nvme devices BZ(1530018)
- Dontaudit fsdaemon_t to write to admin homedir. BZ(153030)
- Update munin plugin policy BZ(1528471)
- Allow sendmail_t domain to be system dbusd client BZ(1478735)
- Allow amanda_t domain to getattr on tmpfs filesystem BZ(1527645)
- Allow named file transition to create rpmrebuilddb dir with proper SELinux context BZ(1461313)
- Dontaudit httpd_passwd_t domain to read state of systemd BZ(1522672)
- Allow thumb_t to mmap non security files BZ(1517393)
- Allow smbd_t to mmap files with label samba_share_t BZ(1530453)
- Fix broken sysnet_filetrans_named_content() interface
- Allow init_t to create tcp sockets for unconfined services BZ(1366968)
- Allow xdm_t to getattr on xserver_t process files BZ(1506116)
- Allow domains which can create resolv.conf file also create it in systemd_resolved_var_run_t dir BZ(1530297)
- Allow X userdomains to send dgram msgs to xserver_t BZ(1515967)
- Add interface files_map_non_security_files() - Make working SELinux sandbox with Wayland. BZ(1474082)
- Allow postgrey_t domain to mmap postgrey_spool_t files BZ(1529169)
- Allow dspam_t to mmap dspam_rw_content_t files BZ(1528723)
- Allow collectd to connect to lmtp_port_t BZ(1304029)
- Allow httpd_t to mmap httpd_squirrelmail_t files BZ(1528776)
- Allow thumb_t to mmap removable_t files. BZ(1522724)
- Allow sssd_t and login_pgm attribute to mmap auth_cache_t files BZ(1530118)
- Add interface fs_mmap_removable_files() - Allow crond_t to read pcp lib files BZ(1525420)
- Allow mozilla plugin domain to mmap user_home_t files BZ(1452783)
- Allow certwatch_t to mmap generic certs. BZ(1527173)
- Allow dspam_t to manage dspam_rw_conent_t objects. BZ(1290876)
- Add interface � x�������������( ���� X ��y `����������� �$ x ���������������� �� �� �� � llow mozilla plugin to chat with policykit, needed for spice
- Allow gssprozy to change user and gid, as well as read user keyrings
- Allow sandbox apps to attempt to set and get capabilties
- Label upgrades directory under /var/www as httpd_sys_rw_content_t, add other filetrans rules to label content correctly
- allow modemmanger to read /dev/urand
- Allow polipo to connect to http_cache_ports
- Allow cron jobs to manage apache var lib content
- Allow yppassword to manage the passwd_file_t
- Allow showall_t to send itself signals
- Allow cobbler to restart dhcpc, dnsmasq and bind services
- Allow rsync_t to manage all non auth files
- Allow certmonger to manage home cert files
- Allow user_mail_domains to write certain files to the /root and ~/ directories
- Allow apcuspd_t to status and start the power unit file
- Allow cgroupdrulesengd to create content in cgoups directories
- Add new access for mythtv
- Allow irc_t to execute shell and bin-t files:
- Allow smbd_t to signull cluster
- Allow sssd to read systemd_login_var_run_t
- Allow gluster daemon to create fifo files in glusterd_brick_t and sock_file in glusterd_var_lib_t
- Add label for /var/spool/cron.aquota.user
- Allow sandbox_x domains to use work with the mozilla plugin semaphore
- Added new policy for speech-dispatcher
- Added dontaudit rule for insmod_exec_t in rasdaemon policy
- Updated rasdaemon policy
- Allow virt_domains to read cert files
- Allow system_mail_t to transition to postfix_postdrop_t
- Clean up mirrormanager policy
- Allow subscription-manager running as sosreport_t to manage rhsmcertd
- Remove ability to do mount/sys_admin by default in virt_sandbox domains
- New rules required to run docker images within libivrt
- Fixed bumblebee_admin() and mip6d_admin()
- Add log support for sensord
- Add label for ~/.cvsignore
- Change mirrormanager to be run by cron
- Add mirrormanager policy
- Additional fixes for docker.te
- Allow cobblerd to read/write undionly.kpxe located in /var/lib/tftpboot
- Add tftp_write_rw_content/tftp_read_rw_content interfaces
- Allow amanda to do backups over UDP - Allow freeipmi_ipmidetectd_t to use freeipmi port
- Update freeipmi_domain_template()
- Allow journalctl running as ABRT to read /run/log/journal
- Allow NM to read dispatcher.d directory
- Update freeipmi policy
- Type transitions with a filename not allowed inside conditionals
- Allow tor to bind to hplip port
- Make new type to texlive files in homedir
- Allow zabbix_agent to transition to dmidecode
- Add rules for docker
- Allow sosreport to send signull to unconfined_t
- Add virt_noatsecure and virt_rlimitinh interfaces
- Fix labeling in thumb.fc to add support for /usr/lib64/tumbler-1/tumblerddd support for freeipmi port
- Add sysadm_u_default_contexts
- Add logging_read_syslog_pid()
- Fix userdom_manage_home_texlive() interface
- Make new type to texlive files in homedir
- Add filename transitions for /run and /lock links
- Allow virtd to inherit rlimit information - DRM master and input event devices are used by the TakeDevice API
- Clean up bumblebee policy
- Update pegasus_openlmi_storage_t policy
- opensm policy clean up
- openwsman policy clean up
- ninfod policy clean up
- Allow conman to connect to freeipmi services and clean up conman policy
- Allow conmand just bind on 7890 port
- Add freeipmi_stream_connect() interface
- Allow logwatch read madm.conf to support RAID setup
- Add raid_read_conf_files() interface
- Allow up2date running as rpm_t create up2date log file with rpm_log_t labeling
- add rpm_named_filetrans_log_files() interface
- Added policy for conmand
- Allow dkim-milter to create files/dirs in /tmp
- update freeipmi policy
- Add policy for freeipmi services
- Added rdisc_admin and rdisc_systemctl interfaces
- Fix aliases in pegasus.te
- Allow chrome sandbox to read generic cache files in homedir
- Dontaudit mandb searching all mountpoints
- Make sure wine domains create .wine with the correct label
- Add proper aliases for pegasus_openlmi_services_exec_t and pegasus_openlmi_services_t
- Allow windbind t� x������������� ���� X � �y �������(2 � @ �$ ���������������� � � � � www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.28] - Updated with the 5.15.27 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.27] - Updated with the 5.15.26 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.26] - Updated with the 5.15.25 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.25] - Updated with the 5.15.24 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.24] - Updated with the 5.15.23 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.23] - Updated with the 5.15.22 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.22] - Updated with the 5.15.21 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.21] - Updated with the 5.15.20 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.20] - Updated with the 5.15.19 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.19] - Updated with the 5.15.18 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.18] - Updated with the 5.15.17 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.17] - Updated with the 5.15.16 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.16] - Updated with the 5.15.15 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.15] - Updated with the 5.15.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.14] - Updated with the 5.15.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13] - Updated with the 5.15.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.12] - Updated with the 5.15.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11] - Updated with the 5.15.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.10] - Updated with the 5.15.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.9]
- Not released. - Updated with the 5.15.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.8] - Updated with the 5.15.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.7] - Updated with the 5.15.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.6]
- CONFIG_SMB_SERVER=m and CONFIG_SMB_SERVER_CHECK_CAP_NET_ADMIN=y
- [https://elrepo.org/bugs/view.php?id=1168] - Updated with the 5.15.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5] - Updated with the 5.15.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4] - Updated with the 5.15.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3] - Updated with the 5.15.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2] - Updated with the 5.15.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1] - Updated with the 5.15 source tarball.
- CONFIG_WERROR=y, CONFIG_ARCH_NR_GPIO=1024, CONFIG_XEN_PV_DOM0=y,
- CONFIG_PERF_EVENTS_AMD_UNCORE=m, CONFIG_ARCH_HAS_PARANOID_L1D_FLUSH=y,
- CONFIG_BLK_DEV_BSG_COMMON=y, CONFIG_BLOCK_HOLDER_DEPRECATED=y,
- CONFIG_PAGE_IDLE_FLAG=y, CONFIG_AF_UNIX_OOB=y, CONFIG_SYSFB=y,
- CONFIG_SYSFB_SIMPLEFB=y, CONFIG_SCSI_COMMON=y,
- CONFIG_NET_VENDOR_LITEX=y, CONFIG_MAXLINEAR_GPHY=m,
- CONFIG_I2C_VIRTIO=m, CONFIG_PTP_1588_CLOCK_OPTIONAL=y,
- CONFIG_GPIO_VIRTIO=m, CONFIG_SENSORS_AQUACOMPUTER_D5NEXT=m,
- CONFIG_SENSORS_SBRMI=m, CONFIG_REGULATOR_RTQ2134=m,
- CONFIG_REGULATOR_RTQ6752=m, CONFIG_SND_HDA_CODEC_CS8409=m,
- CONFIG_SND_SOC_AMD_ACP5x=m, CONFIG_SND_SOC_ICS43432=m,
- CONFIG_INTEL_IDXD_BUS=m, CONFIG_AMD_PTDMA=m, CONFIG_VFIO_PCI_CORE=m,
- CONFIG_VDPA_USER=m, CONFIG_VHOST_RING=m, CONFIG_MERAKI_MX100=m,
- CONFIG_INTEL_WMI=y, CONFIG_F2FS_IOSTAT=y, CONFIG_NETFS_STATS=y,
- CONFIG_SMBFS_COMMON=m, CON� x�������������x����� X � tel�yrefe0������(�����@ Upl�$ ���������������� @ @ � G ,T ? '@ d � � � � � < � ` � d � � � � � � � � � � � � � � � � � � 0
@ ` (
l � � � � P
�
�
( � 8 � = 9 � = : < = G "� H "� I "� X "� Y # \ #$ ] #D ^ #� b $ d %o e %t f %w l %y t %� u %� v %� w &� x &� y &� � &� � &� � &� � '< 'P 'T 6 )� )� 6
+� +� � ,< ,@ ,H g ,L h ,P C libXrandr 1.5.2 1.el8 X.Org X11 libXrandr runtime library X.Org X11 libXrandr runtime library `s�ord1-prod-x86build001.svc.aws.rockylinux.org ��Koji Rocky MIT infrastructure@rockylinux.org System Environment/Libraries http://www.x.org linux x86_64 ( � U =A�A�����A큤�� `s�`s�`s�`s�`s�`s�\�c;\�c; 995874f4bd1641e4e5aa36a65a141a230e38099ebf8a6557cfe0d5cb5b9b000c a5a3a16b574630bd227d59030a0cdc4a1a1eaa9e072b6d488220baf4bfffe0ae 73777e5be1cef2827d843e4b186803f050c66db472cf8076d88e2b5f71696e67 ../../../../usr/lib64/libXrandr.so.2.2.0 libXrandr.so.2.2.0 root root root root root root root root root root root root root root root root libXrandr-1.5.2-1.el8.src.rpm ��������������������������������libXrandr libXrandr(x86-64) libXrandr.so.2()(64bit) @ @ @ @ @ @ @
@ libX11 libX11.so.6()(64bit) libXext.so.6()(64bit) libXrender.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 1.6.0 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 ^��@\T4�[H�@[>@[6 @Zz�@Y�@Yx�@X��@W��@V�=@U�a@UX��S�@S�@S���Q��Q��@Q�J�Q�V@Q8�@Q �P1@P��O �MO�L��@J�U�Ji�@JhP�J_@I�2�I��@IH�Is�I"@H��G��G��@F���F��F)��F @E�n�E�4@Ea��D��@D�b�D� �DP�@C�@C�C��@C��@C���C�q�Ct��C\�C;�@C �C �@Benjamin Tissoires <benjamin.tissoires@redhat.com> - 1.5.2-1 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-9 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-8 Adam Jackson <ajax@redhat.com> - 1.5.1-7 Adam Jackson <ajax@redhat.com> - 1.5.1-6 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-5 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-4 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-3 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-2 Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.5.1-1 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.0-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-2 Dave Airlie <airlied@redhat.com> 1.5.0-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-2 Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.2-1.el8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.1-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.1-2 Peter Hutterer <peter.hutterer@redhat.com> 1.4.1-1 Peter Hutterer <peter.hutterer@redhat.com> - 1.4.0-5.20130524gitc90f74497 Peter Hutterer <peter.hutterer@redhat.com> 1.4.0-4.20130524gitc90f74497 Peter Hutterer <peter.hutterer@redhat.com> - 1.4.0-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.0-2 Dave Airlie <airlied@redhat.com> 1.4.0-1 Fedora Release Engineering <rel-eng@li� x������������������� X � oo��yot r������������R oot �$ B ���������������� R S Q � hbz#1718031 - Move bash completion files from platform-python- to python3- subpackage
- resolves: rhbz#1664749 - Use the system level root certificate instead of the one bundled in certifi
- Resolves: rhbz#1655255 - Do not show the "new version of pip" warning outside of venv
- Resolves: rhbz#1656171 - Prevent removing of the system packages installed under /usr/lib
when pip install -U is executed. Patch by Michal Cyprian.
Resolves: rhbz#1626408. - Bump the NVR so it's higher than previous builds of python3-pip that have
mistakenly gotten into the python27 module build when we were dealing with an
MBS filtering problem. See BZ#1650568.
- Resolves: rhbz#1638836 - python3-pip requires python36 and obsoletes previous version
where python3- and platform-python- were in one package
- Resolves: rhbz#1638836 - Split part of the python3-pip package into platform-python-pip
- python3-pip will only contain binaries in /usr/bin
- Resolves: rhbz#1638836 - Remove the python2 subpackage
- Remove unversioned executables (only *-3.6 should be provided) - Correct license information - Don't build the python2 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1594335 - Update to 9.0.3 - Include built HTML documentation (in the new -doc subpackage) and man page - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Reintroduce the ipaddress module in the python3 subpackage. - Add virtual provides for the bundled libraries. (rhbz#1096912) - Switch macros to bcond's and make Python 2 optional to facilitate building
the Python 2 and Python 3 modules - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Modernized package descriptions
Resolves: rhbz#1452568 - Fix typo in the sudo pip warning - Patch 1 update: No sudo pip warning in venv or virtualenv - Patch 1 update: Customize the warning with the proper version of the pip
command - Added patch 1: Emit a warning when running with root privileges - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Provide symlinks to executables to comply with Fedora guidelines for Python
Resolves: rhbz#1406922 - Rebuild for Python 3.6 with wheel - Rebuild for Python 3.6 without wheel - Update to 9.0.1 - Enable EPEL Python 3 builds
- Use new python macros
- Cleanup spec - Updated the test sources - Moved python-pip into the python2-pip subpackage
- Added the python_provide macro - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Update to 8.1.2
- Moved to a new PyPI URL format
- Updated the prefix-stripping patch because of upstream changes in pip/wheel.py - Update to 8.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for Python3.5 rebuild
- With wheel set to 1 - Rebuilt for Python3.5 rebuild - Update to 7.1.0 - Install bash completion
- Ship LICENSE.txt as %license where available - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 7.0.3 - Update to 6.0.8 - Only enable tests on Fedora. - Add tests
- Add patch skipping tests requiring Internet access - Added patch for local dos with predictable temp dictionary names
(http://seclists.org/oss-sec/2014/q4/655) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Update to 1.5.6 - Rebuild as wheel for Python 3.4 - Disable build_wheel - Rebuild as wheel for Python 3.4 - Updated to 1.5.4 - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
- Updated version to 1.4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Fix for CVE 2013-2099 - undo python2 executable rename to python-pip. fixes #958377
- fix summary to match upstream - Fix main package Summary, it's for Python 2, not 3 (#877401) - Update to 1.3.1, fix for CVE-2013-1888. - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Fixing files for python3-pip - Update to upstream 1.2.1
- Change binary from pip-python to python-pip (RHBZ#855495)
- Add alias from python-pip to pip-python, to be removed at a later d� x�������������h����� X � .n��y- 7. � �� <rem�$ f ���������������� �� �� � nconfined domain.
- Added support for linuxptp policy. BZ(1149693)
- make zoneminder as dbus client by default.
- Allow bluetooth read/write uhid devices. BZ (1161169)
- Add fixes for hypervkvp daemon
- Allow guest to connect to libvirt using unix_stream_socket.
- Allow all bus client domains to dbus chat with unconfined_service_t.
- Allow inetd service without own policy to run in inetd_child_t which is unconfined domain.
- Make opensm as nsswitch domain to make it working with sssd.
- Allow brctl to read meminfo.
- Allow winbind-helper to execute ntlm_auth in the caller domain.
- Make plymouthd as nsswitch domain to make it working with sssd.
- Make drbd as nsswitch domain to make it working with sssd.
- Make conman as nsswitch domain to make ipmitool.exp runing as conman_t working.
- Add support for /var/lib/sntp directory. - Add support for /dev/nvme controllerdevice nodes created by nvme driver.
- Add 15672 as amqp_port_t
- Allow wine domains to read user homedir content
- Add fixes to allow docker to create more content in tmpfs ,and donaudit reading /proc
- Allow winbind to read usermodehelper
- Allow telepathy domains to execute shells and bin_t
- Allow gpgdomains to create netlink_kobject_uevent_sockets
- Allow abrt to read software raid state. BZ (1157770)
- Fix rhcs_signull_haproxy() interface.
- Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
- Allow snapperd to dbus chat with system cron jobs.
- Allow nslcd to read /dev/urandom.
- Allow dovecot to create user's home directory when they log into IMAP.
- Label also logrotate.status.tmp as logrotate_var_lib_t. BZ(1158835)
- Allow wine domains to read user homedir content
- Add fixes to allow docker to create more content in tmpfs ,and donaudit reading /proc - Allow keystone_cgi_script_t to bind on commplex_main_port. BZ (#1138424)
- Allow freeipmi_bmc_watchdog rw_sem_perms to freeipmi_ipmiseld
- Allow rabbitmq to read nfs state data. BZ(1122412)
- Allow named to read /var/tmp/DNS_25 labeled as krb5_host_rcache_t.
- Add rolekit policy
- ALlow rolekit domtrans to sssd_t.
- Add kerberos_tmp_filetrans_kadmin() interface.
- rolekit should be noaudit.
- Add rolekit_manage_keys().
- Need to label rpmnew file correctly
- Allow modemmanger to connectto itself - Allow couchdb read sysctl_fs_t files. BZ(1154327)
- Allow osad to connect to jabber client port. BZ (1154242)
- Allow mon_statd to send syslog msgs. BZ (1077821
- Allow apcupsd to get attributes of filesystems with xattrs - Allow systemd-networkd to be running as dhcp client.
- Label /usr/bin/cockpit-bridge as shell_exec_t.
- Add label for /var/run/systemd/resolve/resolv.conf.
- ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t.
- Allow systemd-networkd to be running as dhcp client.
- Label /usr/bin/cockpit-bridge as shell_exec_t.
- Add label for /var/run/systemd/resolve/resolv.conf.
- ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t. - Dontaudit aicuu to search home config dir. BZ (#1104076)
- couchdb is using erlang so it needs execmem privs
- ALlow sanlock to send a signal to virtd_t.
- Allow mondogdb to 'accept' accesses on the tcp_socket port.
- Make sosreport as unconfined domain.
- Allow nova-console to connect to mem_cache port.
- Allow mandb to getattr on file systems
- Allow read antivirus domain all kernel sysctls.
- Allow lmsd_plugin to read passwd file. BZ(1093733)
- Label /usr/share/corosync/corosync as cluster_exec_t.
- ALlow sensord to getattr on sysfs.
- automount policy is non-base module so it needs to be called in optional block.
- Add auth_use_nsswitch for portreserve to make it working with sssd.
- Fix samba_export_all_ro/samba_export_all_rw booleans to dontaudit search/read security files.
- Allow openvpn to execute systemd-passwd-agent in systemd_passwd_agent_t to make openvpn working with systemd.
- Allow openvpn to access /sys/fs/cgroup dir.
- Allow nova-scheduler to read certs
- Add support for /var/lib/swiftdirectory.� x������������������� X � <rH�yng@l��������8�����@ rg> �$ ���������������� �@ �@ L 15825437dac966fd44c2c3d2af8fb5b66b1ca575c3 ? ���@ �؉3 !pQ�p�)�Tξ7��]�mtZ``s�h
�]�mtZ` H �^�rd�= �p1L �fkX���w�8�/|��lG�8W��$��>BT���B(�.*��Z({%�S�ey��~�B/%��v?1�;R]��Y��KS�Y�c��,<��*La��0�����S�*�$��x�@{�R� �)� �]$��9��a�<˾�!T�@����.Lv�(w:�F��9������ ��$#Ҩ�:� �T�gmb�� X�2U%��x2�/!AP�`q�[B"1�)D�� E�(b�i���Ua� ���.�Ȇ������ز p� �ji�%�YY2���)u�@(�(o�E?��eh��5�ϔ|�?�+|��B�24��` ����-]vf�Cy���7��D���},�٫�W�hk��u��}�l|� �_�����ܿ� �uP�w�Z�+�{�y�+�3>��0��?S��[]Ҡ�
9�ː5M�K�v�R <�O�)�8ӡ /H����a�1�.�?Q�mTslV:" ��%�gG�U7�ߜ�������;�u��PlM��%R�C'A�醉3 !pQ�p�)�Tξ7��]�mtZ``s�h
�]�mtZ`d� ��`3E3f\�����L!�b��n��6ց�$R p�"I"ǂ��v� 1Y�:�J��sùT�bQҔk�:H˺�w6Yx�V ��� �`l���>d��J$2�X)-��+>���,�
l�%kp̚�n6���D���-��Bv�yj�#�
��n4\u����G'St<R��B�����m|�K�]�lj�o�ѵ�'H�#7�p4�l;����͞��y�w'�^��� ���5�I�n�6 �ۊ�d�V
���l"��1 eP�9���}��h�)�� ^��`~~ŋD�~���*F���o]?�����Lg�ᙍ��x�d��$C$��8�Mݢ8�h@Mt��Ȫ��Ž�ĭ��
����_f>q��2�EZp��S�X�P�讅�R� ������]/E\N ^J�k��1#�������𠉉[�� �8�/z��{Y%*�i"� �KO�[����$x������fH�z��� ��ᅌV!m�<M逃K4C]�J�D�j�9c746bc939ab00b93c269461b8750a398169b238 14ad98cd0da5b407945d496b83546b46108369011c33992eaae00f850e7a552c d�� 4� d�� setup (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move the hardware {un}setup functions to the bottom (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: x86: nVMX: Allow nested_enable_evmcs to be NULL (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move nested hardware/vcpu {un}setup to helper functions (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move VMX instruction wrappers to a dedicated header file (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move eVMCS code to dedicated files (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Add vmx.h to hold VMX definitions (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move vmcs12 code to dedicated files (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move VMCS definitions to dedicated file (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Expose various module param vars via capabilities.h (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move capabilities structs and helpers to dedicated file (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Pass vmx_capability struct to setup_vmcs_config() (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Properly handle dynamic VM Entry/Exit controls (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move caching of MSR_IA32_XSS to hardware_setup() (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Drop the "vmx" prefix from vmx_evmcs.h (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: rename vmx_shadow_fields.h to vmcs_shadow_fields.h (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Move VMX specific files to a "vmx" subdirectory (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: x86: Add requisite includes to hyperv.h (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: x86: Add requisite includes to kvm_cache_regs.h (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: VMX: Alphabetize the includes in vmx.c (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Allocate and configure VM{READ, WRITE} bitmaps iff enable_shadow_vmcs (Vitaly Kuznetsov) [1692804]
- [tools] kvm: introduce manual dirty log reprotect (Vitaly Kuznetsov) [1692804]
- [virt] kvm: rename last argument to kvm_get_dirty_log_protect (Vitaly Kuznetsov) [1692804]
- [virt] kvm: make KVM_CAP_ENABLE_CAP_VM architecture agnostic (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S PR: Set hflag to indicate that POWER9 supports 1T segments (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S HV: Change to use DEFINE_SHOW_ATTRIBUTE macro (Vitaly Kuznetsov) [1692804]
- [arm64] arm64: Don't trap host pointer auth use to EL2 (Vitaly Kuznetsov) [1692804]
- [kvm] arm64/kvm: hide ptrauth from guests (Vitaly Kuznetsov) [1692804]
- [arm64] arm64: add pointer authentication register bits (Vitaly Kuznetsov) [1692804]
- [arm64] arm64: add comments about EC exception levels (Vitaly Kuznetsov) [1692804]� x������������������ X � ��y ��������Pk������X �$ ���������������� X X X � t free allocated statement
- Fix #76488 Memory leak when fetching a BLOB field
- Fix #76448 Stack buffer overflow in firebird_info_cb
- Fix #76449 SIGSEGV in firebird_handle_doer
- Fix #76450 SIGSEGV in firebird_stmt_execute
- Fix #76452 Crash while parsing blob data in firebird_fetch_blob
CVE-2021-21704 - fix snmp extension build with net-snmp without DES - Fix #80710 imap_mail_compose() header injection
- use oracle client library version 21.1 - Fix #80672 Null Dereference in SoapClient
CVE-2021-21702
- better fix for #77423 - Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfo
CVE-2020-7071 - Core:
Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent
CVE-2020-7070 - Core:
Fix #79877 getimagesize function silently truncates after a null byte
- Phar:
Fix #79797 use of freed hash key in the phar_parse_zipfile function
CVE-2020-7068 - Core:
Fix #78875 Long filenames cause OOM and temp files are not cleaned
CVE-2019-11048
Fix #78876 Long variables in multipart/form-data cause OOM and temp
files are not cleaned - standard:
Fix #79330 shell_exec silently truncates after a null byte
Fix #79465 OOB Read in urldecode
CVE-2020-7067 - standard:
Fix #79329 get_headers() silently truncates after a null byte
CVE-2020-7066
- exif:
Fix #79282 Use-of-uninitialized-value in exif
CVE-2020-7064
- use oracle client library version 19.6 (18.5 on EL-6) - add fix for GCC 10 - phar:
Fix #79082 Files added to tar with Phar::buildFromIterator have all-access permissions
CVE-2020-7063
- session:
Fix #79221 Null Pointer Dereference in PHP Session Upload Progress
CVE-2020-7062 - mbstring:
Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar
CVE-2020-7060
- standard:
Fix #79099 OOB read in php_strip_tags_ex
CVE-2020-7059 - bcmath:
Fix #78878 Buffer underflow in bc_shift_addsub
CVE-2019-11046
- core:
Fix #78862 link() silently truncates after a null byte on Windows
CVE-2019-11044
Fix #78863 DirectoryIterator class silently truncates after a null byte
CVE-2019-11045
- exif
Fix #78793 Use-after-free in exif parsing under memory sanitizer
CVE-2019-11050
Fix #78910 Heap-buffer-overflow READ in exif
CVE-2019-11047
- use oracle client library version 19.5 (18.5 on EL-6) - FPM:
Fix CVE-2019-11043 env_path_info underflow in fpm_main.c - mbstring:
Fix CVE-2019-13224 don't allow different encodings for onig_new_deluxe
- pcre:
Fix #75457 heap use-after-free in pcrelib - exif:
Fix #78256 heap-buffer-overflow on exif_process_user_comment
CVE-2019-11042
Fix #78222 heap-buffer-overflow on exif_scan_thumbnail
CVE-2019-11041
- phar:
Fix #77919 Potential UAF in Phar RSHUTDOWN - use oracle client library version 19.3 - iconv:
Fix #78069 Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
CVE-2019-11039
- exif:
Fix #77988 Heap-buffer-overflow on php_jpg_get16
CVE-2019-11040
- sqlite3:
Fix #77967 Bypassing open_basedir restrictions via file uris - exif:
Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG
CVE-2019-11036 - exif:
Fix #77753 Heap-buffer-overflow in php_ifd_get32s
CVE-2019-11034
Fix #77831 Heap-buffer-overflow in exif_iif_add_value
CVE-2019-11035
- sqlite3:
Added sqlite3.defensive INI directive - Fix #76846 Segfault in shutdown function after memory limit error - phar:
Fix #77396 Null Pointer Dereference in phar_create_or_parse_filename
Fix #77586 - phar_tar_writeheaders_int() buffer overflow
- spl:
Fix #77431 openFile() silently truncates after a null byte
- security fix synced with https://github.com/Microsoft/php-src/ - Fix #77630 rename() across the device may allow unwanted access
during processing
CVE-2019-9637 - exif:
Fix #77509 Uninitialized read in exif_process_IFD_in_TIFF
CVE-2019-9641
Fix #77540 Invalid Read on exif_process_SOFn
CVE-2019-9640
Fix #77563 Uninitialized read in exif_process_IFD_in_MAKERNOTE
CVE-2019-9638
Fix #77659 Uninitialized read in exif_process_IFD_in_MAKERNOTE
CVE-2019-9639 - cleanup for E� x����������������� X }�y 8| ����� �$ ���������������� � dhat.com> Tim Powers <timp@redhat.com> Tim Powers <timp@redhat.com> - RHEL-147205 - endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support
- fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
- Delete the domain socket file after stopping the cups.socket service
- Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
- Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
- RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
- RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - 2217178 - Delays printing to lpd when reserved ports are exhausted
- 2217283 - The command "cancel -x <job>" does not remove job files
- 2217955 - Enlarge backlog queue for listen() in cupsd
- CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
- CVE-2023-32324 cups: heap buffer overflow may lead to DoS - RHEL-316 - Enable fmf tests in centos stream - 2130391 - Kerberized IPP Printing Fails - 1910415 - corrected manpage patch, one lpoptions usage wasn't changed - 1910415 - manpage update to acknowledge order dependency of -h option - 2084257 - ErrorPolicy documentation is incorrect - CVE-2022-26691 cups: authorization bypass when using "local" authorization - 2074684 - lp to a remote server takes a long time
- 2074736 - CUPS is too chatty about "Removing document files." in debug mode - 2071417 - 30-second delays printing to Windows 2016 server via HTTPS - 2015182 - RFE: Implement IdleExitTimeout configuration during build - 2032965 - [RFE] RHEL8 - CUPS Web UI supports adding IPP Everywhere - 2013865 - RFE: Implement TimeoutStartSec configuration during build - 2015182 - RFE: Implement IdleExitTimeout configuration during build - 2006987 - Unauthenticated users can't move print jobs in Web UI
- 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
- 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
- 1982891 - Printing of banner before PCL file only prints banner
- 2006591 - Trying to restart and hold a job doesn't work
- 1811716 - lpr to non-existent printer reports incorrect error - 1955964 - PreserveJobHistory doesn't work with seconds
- 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8] - 1941437 - cupsd doesn't log job ids when logging into journal
- 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
- 1938384 - CUPS doesn't start if sssd starts after cupsd - 1775590 - rastertoepson filter crashes with paper size A6 - forgot to enable optimization - 1833516 - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
- 1689207 - Add failover backend
- 1833516 - DirtyCleanInterval ignored if there are open client connections - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c - 1809002 - scriptlet issue, /usr/bin/rm: cannot remove '/var/cache/cups/*.data' - 1784884 - cups.service doesn't execute automatical� x�������������H����� X .1��ypip ������������� �$ ���������������� � llow glusterd_t exec glusterd_var_lib_t files. BZ(1198406)
- Add gluster_exec_lib interface.
- Allow l2tpd to manage NetworkManager pid files
- Allow firewalld_t relabelfrom firewalld_rw_etc_t. BZ(1195327)
- Allow cyrus bind tcp berknet port. BZ(1198347)
- Add nsswitch domain for more serviecs.
- Allow abrt_dump_oops_t read /etc/passwd file. BZ(1197190)
- Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
- Make munin yum plugin as unconfined by default.
- Allow bitlbee connections to the system DBUS.
- Allow system apache scripts to send log messages.
- Allow denyhosts execute iptables. BZ(1197371)
- Allow brltty rw event device. BZ(1190349)
- Allow cupsd config to execute ldconfig. BZ(1196608)
- xdm_t now needs to manage user ttys
- Allow ping_t read urand. BZ(1181831)
- Add support for tcp/2005 port.
- Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
- In F23 we are running xserver as the user, need this to allow confined users to us X - Fix source filepath for moving html files. - Xserver needs to be transitioned to from confined users
- Added logging_syslogd_pid_filetrans
- xdm_t now talks to hostnamed
- Label new strongswan binary swanctl and new unit file strongswan-swanctl.service. BZ(1193102)
- Additional fix for labeleling /dev/log correctly.
- cups chats with network manager
- Allow parent domains to read/write fifo files in mozilla plugin
- Allow spc_t to transition to svirt domains
- Cleanup spc_t
- docker needs more control over spc_t
- pcp domains are executed out of cron - Allow audisp to connect to system DBUS for service.
- Label /dev/log correctly.
- Add interface init_read_var_lib_files().
- Allow abrt_dump_oops_t read /var/lib/systemd/, Allow abrt_dump_oops_t cap. chown,fsetid,fowner, BZ(1187017) - Label /usr/libexec/postgresql-ctl as postgresql_exec_t. BZ(1191004)
- Remove automatcically running filetrans_named_content form sysnet_manage_config
- Allow syslogd/journal to read netlink audit socket
- Allow brltty ioctl on usb_device_t. BZ(1190349)
- Make sure NetworkManager configures resolv.conf correctly - Allow cockpit_session_t to create tmp files
- apmd needs sys_resource when shutting down the machine
- Fix path label to resolv.conf under NetworkManager - Allow search all pid dirs when managing net_conf_t files. - Fix labels, improve sysnet_manage_config interface.
- Label /var/run/NetworkManager/resolv.conf.tmp as net_conf_t.
- Dontaudit network connections related to thumb_t. BZ(1187981)
- Remove sysnet_filetrans_named_content from fail2ban - Fix labels on new location of resolv.conf
- syslog is not writing to the audit socket
- seunshare is doing getattr on unix_stream_sockets leaked into it
- Allow sshd_t to manage gssd keyring
- Allow apps that create net_conf_t content to create .resolv.conf.NetworkManager
- Posgresql listens on port 9898 when running PCP (pgpool Control Port)
- Allow svirt sandbox domains to read /proc/mtrr
- Allow polipo_deamon connect to all ephemeral ports. BZ(1187723)
- Allow dovecot domains to use sys_resouce
- Allow sshd_t to manage gssd keyring
- gpg_pinentry_t needs more access in f22 - Allow docker to attach to the sandbox and user domains tun devices
- Allow pingd to read /dev/urandom. BZ(1181831)
- Allow virtd to list all mountpoints
- Allow sblim-sfcb to search images
- pkcsslotd_lock_t should be an alias for pkcs_slotd_lock_t.
- Call correct macro in virt_read_content().
- Dontaudit couchdb search in gconf_home_t. BZ(1177717)
- Allow docker_t to changes it rlimit
- Allow neutron to read rpm DB.
- Allow radius to connect/bind radsec ports
- Allow pm-suspend running as virt_qemu_ga to read /var/log/pm-suspend.log.
- Add devicekit_read_log_files().
- Allow virt_qemu_ga to dbus chat with rpm.
- Allow netutils chown capability to make tcpdump working with -w.
- Label /ostree/deploy/rhel-atomic-host/deploy directory as system_conf_t.
- journald now reads the netlink audit socket
- Add auditing support for ipsec. - Bump release - remove duplicate filename transit� x������������������� X 'tR�yow d* �����a ated�$ ���������������� �a �a �a � te
Fix #79465 OOB Read in urldecode
CVE-2020-7067 - standard:
Fix #79329 get_headers() silently truncates after a null byte
CVE-2020-7066
- exif:
Fix #79282 Use-of-uninitialized-value in exif
CVE-2020-7064
- use oracle client library version 19.6 (18.5 on EL-6) - dom:
Fix #77569 Write Access Violation in DomImplementation
- phar:
Fix #79082 Files added to tar with Phar::buildFromIterator have all-access permissions
CVE-2020-7063
- session:
Fix #79221 Null Pointer Dereference in PHP Session Upload Progress
CVE-2020-7062 - mbstring:
Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar
CVE-2020-7060
- standard:
Fix #79099 OOB read in php_strip_tags_ex
CVE-2020-7059 - bcmath:
Fix #78878 Buffer underflow in bc_shift_addsub
CVE-2019-11046
- core:
Fix #78862 link() silently truncates after a null byte on Windows
CVE-2019-11044
Fix #78863 DirectoryIterator class silently truncates after a null byte
CVE-2019-11045
- exif
Fix #78793 Use-after-free in exif parsing under memory sanitizer
CVE-2019-11050
Fix #78910 Heap-buffer-overflow READ in exif
CVE-2019-11047
- use oracle client library version 19.5 (18.5 on EL-6) - FPM:
Fix CVE-2019-11043 env_path_info underflow in fpm_main.c - mbstring:
Fix CVE-2019-13224 don't allow different encodings for onig_new_deluxe
- pcre:
Fix #75457 heap use-after-free in pcrelib - exif:
Fix #78256 heap-buffer-overflow on exif_process_user_comment
CVE-2019-11042
Fix #78222 heap-buffer-overflow on exif_scan_thumbnail
CVE-2019-11041
- phar:
Fix #77919 Potential UAF in Phar RSHUTDOWN - use oracle client library version 19.3
- disable opcache.huge_code_pages in default configuration - iconv:
Fix #78069 Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
CVE-2019-11039
- exif:
Fix #77988 Heap-buffer-overflow on php_jpg_get16
CVE-2019-11040
- sqlite3:
Fix #77967 Bypassing open_basedir restrictions via file uris - exif:
Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG
CVE-2019-11036 - exif:
Fix #77753 Heap-buffer-overflow in php_ifd_get32s
CVE-2019-11034
Fix #77831 Heap-buffer-overflow in exif_iif_add_value
CVE-2019-11035
- sqlite3:
Added sqlite3.defensive INI directive - Fix #76846 Segfault in shutdown function after memory limit error - Fix #77630 rename() across the device may allow unwanted access
during processing
CVE-2019-9637 - exif:
Fix #77509 Uninitialized read in exif_process_IFD_in_TIFF
CVE-2019-9641
Fix #77540 Invalid Read on exif_process_SOFn
CVE-2019-9640
Fix #77563 Uninitialized read in exif_process_IFD_in_MAKERNOTE
CVE-2019-9638
Fix #77659 Uninitialized read in exif_process_IFD_in_MAKERNOTE
CVE-2019-9639
- phar:
Fix #77396 Null Pointer Dereference in phar_create_or_parse_filename
Fix #77586 - phar_tar_writeheaders_int() buffer overflow
- spl:
Fix #77431 openFile() silently truncates after a null byte - cleanup for EL-8 - core:
Fix #77369 memcpy with negative length via crafted DNS response
CVE-2019-9022
- mbstring:
Fix #77370 buffer overflow on mb regex functions - fetch_token
CVE-2019-9023
Fix #77371 heap buffer overflow in mb regex functions compile_string_node
CVE-2019-9023
Fix #77381 heap buffer overflow in multibyte match_at
CVE-2019-9023
Fix #77382 heap buffer overflow in expand_case_fold_string
CVE-2019-9023
Fix #77385 buffer overflow in fetch_token
CVE-2019-9023
Fix #77394 buffer overflow in multibyte case folding - unicode
CVE-2019-9023
Fix #77418 heap overflow in utf32be_mbc_to_code
CVE-2019-9023
- phar:
Fix #77247 heap buffer overflow in phar_detect_phar_fname_ext
CVE-2019-9021
- xmlrpc:
Fix #77242 heap out of bounds read in xmlrpc_decode
CVE-2019-9020
Fix #77380 global out of bounds read in xmlrpc base64 code
CVE-2019-9024 - Update to 7.0.33 - http://www.php.net/releases/7_0_33.php
- use oracle client library version 18.3 - Update to 7.0.32 - http://www.php.net/releases/7_0_32.php - F29: backport ICU 62.1 support from 7.1 - Update to 7.0.31 - http://www.php.net/relea� x�������������8y���� X /v��yphp?��������h� � ith �$ ���������������� � � � � 333588)
- Label tcp/udp port 2024 as xinuexpansion4_port_t
- Label tcp port 7002 as afs_pt_port_t Label tcp/udp port 2023 as xinuexpansion3_port_t - Allow stunnel create log files. BZ(1333033)
- Label dev/shm/squid-cf__metadata.shm as squid_tmpfs_t. BZ(1331574)
- Allow stunnel sys_nice capability. Stunnel sched_* syscalls in some cases. BZ(1332287)
- Label /usr/bin/ganesha.nfsd as glusterd_exec_t to run ganesha as glusterd_t. Allow glusterd_t stream connect to rpbind_t. Allow cluster_t to create symlink /var/lib/nfs labeled as var_lib_nfs_t. Add interface rpc_filetrans_var_lib_nfs_content() Add new boolean: rpcd_use_fusefs to allow rpcd daemon use fusefs.
- Allow systemd-user-sessions daemon to mamange systemd_logind_var_run_t pid files. BZ(1331980)
- Modify kernel_steam_connect() interface by adding getattr permission. BZ(1331927)
- Label /usr/sbin/xrdp* files as bin_t BZ(1258453)
- Allow rpm-ostree domain transition to install_t domain from init_t. rhbz#1330318 - Allow snapperd sys_admin capability Allow snapperd to set scheduler. BZ(1323732)
- Label named-pkcs11 binary as named_exec_t. BZ(1331316)
- Revert "Add new permissions stop/start to class system. rhbz#1324453"
- Fix typo in module compilation message - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
- Allow openvswitch daemons to run under openvswitch Linux user instead of root. This change needs allow set capabilities: chwon, setgid, setuid, setpcap. BZ(1330895)
- Allow KDM to get status about power services. This change allow kdm to be able do shutdown BZ(1330970)
- Add mls support for some db classes - Remove ftpd_home_dir() boolean from distro policy. Reason is that we cannot make this working due to m4 macro language limits.
- Create new apache content template for files stored in user homedir. This change is needed to make working booleans: - httpd_enable_homedirs - httpd_read_user_content Resolves: rhbz#1330448
- Label /usr/lib/snapper/systemd-helper as snapperd_exec_t. rhbz#1323732
- Make virt_use_pcscd boolean off by default.
- Create boolean to allow virtual machine use smartcards. rhbz#1029297
- Allow snapperd to relabel btrfs snapshot subvolume to snapperd_data_t. rhbz#1323754
- Allow mongod log to syslog.
- Allow nsd daemon to create log file in /var/log as nsd_log_t
- unlabeled_t can not be an entrypoint.
- Modify interface den_read_nvme() to allow also read nvme_device_t block files. rhbz#1327909
- Add new permissions stop/start to class system. rhbz#1324453 - Allow modemmanager to talk to logind
- Dontaudit tor daemon needs net_admin capability. rhbz#1311788
- Allow GDM write to event devices. This rule is needed for GDM, because other display managers runs the X server as root, GDM instead runs the X server as the unprivileged user, within the user session. rhbz#1232042
- Xorg now writes content in users homedir. - rename several contrib modules according to their filenames
- Add interface gnome_filetrans_cert_home_content()
- By default container domains should not be allowed to create devices
- Allow unconfined_t to create ~/.local/share/networkmanagement/certificates/ as home_cert_t instead of data_home_t.
- Allow systemd_resolved_t to read /etc/passwd file. Allow systemd_resolved_t to write to kmsg_device_t when 'systemd.log_target=kmsg' option is used
- Allow systemd gpt generator to read removable devices. BZ(1323458)
- Allow systemd_gpt_generator_t sys_rawio capability. This access is needed to allow systemd gpt generator various device commands BZ(1323454) - Label /usr/libexec/rpm-ostreed as rpm_exec_t. BZ(1309075)
- /bin/mailx is labeled sendmail_exec_t, and enters the sendmail_t domain on execution. If /usr/sbin/sendmail does not have its own domain to transition to, and is not one of several products whose behavior is allowed by the sendmail_t policy, execution will fail. In this case we need to label /bin/mailx as bin_t. BZ(1323224)
- Label all run tgtd files, not just socket files.
- Allow prosody to stream connect to sasl. This will allow using c� x��������������h���� X I6�yporaHj������" �� - re�$ 5 ���������������� �� �� �� � 4-28 Remi Collet <remi@remirepo.net> - 7.4.0~rc3-27 Remi Collet <remi@remirepo.net> - 7.4.0~rc3-26 Remi Collet <remi@remirepo.net> - 7.4.0~rc3-25 Remi Collet <remi@remirepo.net> - 7.4.0~rc3-24 Remi Collet <remi@remirepo.net> - 7.4.0~rc3-23 Remi Collet <remi@remirepo.net> - 7.4.0~rc2-22 Remi Collet <remi@remirepo.net> - 7.4.0~rc2-21 Remi Collet <remi@remirepo.net> - 7.4.0~rc2-19 Remi Collet <remi@remirepo.net> - 7.4.0~rc1-18 Remi Collet <remi@remirepo.net> - 7.4.0~beta4-17 Remi Collet <remi@remirepo.net> - 7.4.0~beta2-16 Remi Collet <remi@remirepo.net> - 7.4.0~beta1-15 Remi Collet <remi@remirepo.net> - 7.4.0~beta1-14 Remi Collet <remi@remirepo.net> - 7.4.0~alpha3-13 Remi Collet <remi@remirepo.net> - 7.4.0~alpha3-12 Remi Collet <remi@remirepo.net> - 7.4.0~alpha2-11 Remi Collet <remi@remirepo.net> - 7.4.0~alpha1-10 Remi Collet <remi@remirepo.net> - 7.4.0~alpha1-9 Remi Collet <remi@remirepo.net> - 7.4.0~alpha1-8 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190612-7 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190605-6 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190529-5 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190528-4 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190522-3 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190521-2 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190521-1 Remi Collet <remi@remirepo.net> - 7.4.0~DEV.20190520-1 Remi Collet <remi@remirepo.net> - 7.3.6~RC1-2 Remi Collet <remi@remirepo.net> - 7.3.6~RC1-1 Remi Collet <remi@remirepo.net> - 7.3.5-2 Remi Collet <remi@remirepo.net> - 7.3.5-1 Remi Collet <remi@remirepo.net> - 7.3.5~RC1-1 Remi Collet <remi@remirepo.net> - 7.3.4-3 Remi Collet <remi@remirepo.net> - 7.3.4-2 Remi Collet <remi@remirepo.net> - 7.3.4-1 Remi Collet <remi@remirepo.net> - 7.3.4~RC1-2 Remi Collet <remi@remirepo.net> - 7.3.4~RC1-1 Remi Collet <remi@remirepo.net> - 7.3.3-1 Remi Collet <remi@remirepo.net> - 7.3.3~RC1-2 Remi Collet <remi@remirepo.net> - 7.3.3~RC1-1 Remi Collet <remi@remirepo.net> - 7.3.2-3 Remi Collet <remi@remirepo.net> - 7.3.2-2 Remi Collet <remi@remirepo.net> - 7.3.2-1 Remi Collet <remi@remirepo.net> - 7.3.2~RC1-1 Remi Collet <remi@remirepo.net> 7.3.1-3 Remi Collet <remi@remirepo.net> - 7.3.1-2 Remi Collet <remi@remirepo.net> - 7.3.1-1 Remi Collet <remi@remirepo.net> - 7.3.1~RC1-1 Remi Collet <remi@remirepo.net> - 7.3.0-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc6-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc5-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc4-2 Remi Collet <remi@remirepo.net> - 7.3.0~rc4-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc3-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc2-1 Remi Collet <remi@remirepo.net> - 7.3.0~rc1-1 Remi Collet <remi@remirepo.net> - 7.3.0~beta3-3 Remi Collet <remi@remirepo.net> - 7.3.0~beta3-2 Remi Collet <remi@remirepo.net> - 7.3.0~beta3-1 Remi Collet <remi@remirepo.net> - 7.3.0~beta2-1 Remi Collet <remi@remirepo.net> - 7.3.0~alpha4-1 Remi Collet <remi@remirepo.net> - 7.3.0~alpha3-1 Remi Collet <remi@remirepo.net> - 7.3.0~alpha2-2 Remi Collet <remi@remirepo.net> - 7.3.0~alpha2-1 Remi Collet <remi@remirepo.net> - 7.3.0~alpha1-1 Remi Collet <remi@remirepo.net> - 7.2.7~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.6-1 Remi Collet <remi@remirepo.net> - 7.2.6~RC1-2 Remi Collet <remi@remirepo.net> - 7.2.6~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.5-1 Remi Collet <remi@remirepo.net> - 7.2.5~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.4-2 Remi Collet <remi@remirepo.net> - 7.2.4-1 Remi Collet <remi@remirepo.net> - 7.2.4~RC1-2 Remi Collet <remi@remirepo.net> - 7.2.4~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.3-2 Remi Collet <remi@remirepo.net> - 7.2.3-1 Remi Collet <remi@remirepo.net> - 7.2.3~RC1-3 Remi Collet <remi@remirepo.net> - 7.2.3~RC1-2 Remi Collet <remi@remirepo.net> - 7.2.2-1 Remi Collet <remi@remirepo.net> - 7.2.2~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.1-1 Remi Collet <remi@remirepo.net> - 7.2.1~RC1-2 Remi Collet <remi@remirepo.net> - 7.2.1~RC1-1 Remi Collet <remi@remirepo.net> - 7.2.0-1 Remi Collet <remi@remirepo.net> - 7.2.0-0.31.RC6 Remi Collet <remi@remirepo.net> - 7.2.0-0.30.RC5 Remi Coll� x�������������(X���� X �y ���������
� \ �$ ����������������
� � � � ernel/v5.x/ChangeLog-5.7.2] - Updated with the 5.7.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.1] - Updated with the 5.7 source tarball.
- CONFIG_LD_VERSION=230000000, CONFIG_HARDIRQS_SW_RESEND=y,
- CONFIG_HAVE_ARCH_USERFAULTFD_WP=y,
- CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y, CONFIG_AS_AVX512=y,
- CONFIG_AS_SHA1_NI=y, CONFIG_AS_SHA256_NI=y,
- CONFIG_NUMA_KEEP_MEMINFO=y, CONFIG_PAGE_REPORTING=y,
- CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZO=y,
- CONFIG_ZSWAP_COMPRESSOR_DEFAULT="lzo",
- CONFIG_ZSWAP_ZPOOL_DEFAULT_ZBUD=y,
- CONFIG_ZSWAP_ZPOOL_DEFAULT="zbud", CONFIG_SATA_HOST=y,
- CONFIG_PATA_TIMINGS=y, CONFIG_ATA_FORCE=y, CONFIG_BAREUDP=m,
- CONFIG_MLX5_TC_CT=y, CONFIG_DWMAC_INTEL=m,
- CONFIG_MDIO_XPCS=m, CONFIG_SERIAL_SPRD=m,
- CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000,
- CONFIG_TINYDRM_ILI9486=m, CONFIG_SND_BCM63XX_I2S_WHISTLER=m,
- CONFIG_SND_SOC_TLV320ADCX140=m, CONFIG_APPLE_MFI_FASTCHARGE=m,
- CONFIG_MMC_HSQ=m, CONFIG_VIRTIO_VDPA=m, CONFIG_VDPA=m,
- CONFIG_IFCVF=m, CONFIG_VHOST_IOTLB=m, CONFIG_VHOST_DPN=y,
- CONFIG_VHOST_MENU=y, CONFIG_VHOST_VDPA=m,
- CONFIG_SURFACE_3_POWER_OPREGION=m, CONFIG_AL3010=m,
- CONFIG_EXFAT_FS=m, CONFIG_EXFAT_DEFAULT_IOCHARSET="utf8",
- CONFIG_CHELSIO_TLS_DEVICE=y and
- CONFIG_MAGIC_SYSRQ_SERIAL_SEQUENCE="" - Updated with the 5.6.15 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.15] - Updated with the 5.6.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.14] - Updated with the 5.6.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.13] - Updated with the 5.6.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.12] - Updated with the 5.6.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.11] - Updated with the 5.6.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.10] - Updated with the 5.6.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.9]
- CONFIG_BLK_DEV_NBD=m [https://elrepo.org/bugs/view.php?id=1007] - Updated with the 5.6.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8] - Updated with the 5.6.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7] - Updated with the 5.6.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.6] - Updated with the 5.6.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5]
- CONFIG_REGULATOR=y, CONFIG_SND_DMAENGINE_PCM=m,
- CONFIG_SND_SOC_AC97_BUS=y, CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM=y,
- CONFIG_SND_SOC_AMD_ACP=m, CONFIG_SND_SOC_AMD_CZ_DA7219MX98357_MACH=m,
- CONFIG_SND_SOC_AMD_CZ_RT5645_MACH=m, CONFIG_SND_SOC_AMD_ACP3x=m,
- CONFIG_SND_ATMEL_SOC=m, CONFIG_SND_DESIGNWARE_I2S=m,
- CONFIG_SND_DESIGNWARE_PCM=y, CONFIG_SND_SOC_FSL_ASRC=m,
- CONFIG_SND_SOC_FSL_SAI=m, CONFIG_SND_SOC_FSL_MQS=m,
- CONFIG_SND_SOC_FSL_AUDMIX=m, CONFIG_SND_SOC_FSL_SSI=m,
- CONFIG_SND_SOC_FSL_SPDIF=m, CONFIG_SND_SOC_FSL_ESAI=m,
- CONFIG_SND_SOC_FSL_MICFIL=m, CONFIG_SND_SOC_IMX_AUDMUX=m,
- CONFIG_SND_I2S_HI6210_I2S=m, CONFIG_SND_SOC_IMG=y,
- CONFIG_SND_SOC_IMG_I2S_IN=m, CONFIG_SND_SOC_IMG_I2S_OUT=m,
- CONFIG_SND_SOC_IMG_PARALLEL_OUT=m, CONFIG_SND_SOC_IMG_SPDIF_IN=m,
- CONFIG_SND_SOC_IMG_SPDIF_OUT=m, CONFIG_SND_SOC_IMG_PISTACHIO_INTERNAL_DAC=m,
- CONFIG_SND_SST_IPC_PCI=m, CONFIG_SND_SST_ATOM_HIFI2_PLATFORM_PCI=m,
- CONFIG_SND_SOC_MTK_BTCVSD=m, CONFIG_SND_SOC_XILINX_I2S=m,
- CONFIG_SND_SOC_XILINX_AUDIO_FORMATTER=m, CONFIG_SND_SOC_XILINX_SPDIF=m,
- CONFIG_SND_SOC_XTFPGA_I2S=m, CONFIG_ZX_TDM=m, CONFIG_SND_SOC_AC97_CODEC=m,
- CONFIG_SND_SOC_ADAU_UTILS=m, CONFIG_SND_SOC_ADAU1701=m,
- CONFIG_SND_SOC_ADAU17X1=m, CONFIG_SND_SOC_ADAU1761=m,
- CONFIG_SND_SOC_ADAU1761_I2C=m, CONFIG_SND_SOC_ADAU1761_SPI=m,
- CONFIG_SND_SOC_ADAU7002=m, CONFIG_SND_SOC_ADAU7118=m,
- CONFIG_SND_SOC_ADAU7118_HW=m, CONFIG_SND_SOC_ADAU7118_I2C=m,
- CONFIG_SND_SOC_AK4104=m, CONFIG_SND_SOC_AK4118=m, CONFIG_SND_SOC_AK4458=m,
- CONFIG_SND_SOC_AK4554=m, CONFIG_S� x��������������G���� X cr��yd by�`������� ����� ntum�$ ���������������� �� �� �� � llow tools to check the processes state of bind/named
- Allow myslqd to use the tram port for Galera/MariaDB - Allow init_t to setattr/relabelfrom dhcp state files
- Allow dmesg to read hwdata and memory dev
- Allow strongswan to create ipsec.secrets with correct labeling in /etc/strongswan
- Dontaudit antivirus domains read access on all security files by default
- Add missing alias for old amavis_etc_t type
- Additional fixes for instack overcloud
- Allow block_suspend cap for haproxy
- Allow OpenStack to read mysqld_db links and connect to MySQL
- Remove dup filename rules in gnome.te
- Allow sys_chroot cap for httpd_t and setattr on httpd_log_t
- Add labeling for /lib/systemd/system/thttpd.service
- Allow iscsid to handle own unit files
- Add iscsi_systemctl()
- Allow mongod also create sock_file with correct labeling in /run
- Allow aiccu stream connect to pcscd
- Allow rabbitmq_beam to connect to httpd port
- Allow httpd to send signull to apache script domains and don't audit leaks
- Fix labeling in drbd.fc
- Allow sssd to connect to the smbd port for handing logins using active directory, needs back port for rhel7
- Allow all freeipmi domains to read/write ipmi devices
- Allow rabbitmq_epmd to manage rabbit_var_log_t files
- Allow sblim_sfcbd to use also pegasus-https port
- Allow chronyd to read /sys/class/hwmon/hwmon1/device/temp2_input
- Add httpd_run_preupgrade boolean
- Add interfaces to access preupgrade_data_t
- Add preupgrade policy
- Add labeling for puppet helper scripts Rename puppet_t to puppetagent_t and used it only for puppet agent which can be started by init. Also make it as unconfined_noaudit because there is no reason to confine it but we wantto avoid init_t. - Change hsperfdata_root to have as user_tmp_t
- Allow rsyslog low-level network access
- Fix use_nfs_home_dirs/use_samba_home_dirs for xdm_t to allow append .xsession-errors by lightdm
- Allow conman to resolve DNS and use user ptys
- update pegasus_openlmi_admin_t policy
- nslcd wants chown capability
- Dontaudit exec insmod in boinc policy - Add labels for /var/named/chroot_sdb/dev devices
- Add support for strongimcv
- Add additional fixes for yubikeys based on william@firstyear.id.au
- Allow init_t run /sbin/augenrules
- Remove dup decl for dev_unmount_sysfs_fs
- Allow unpriv SELinux user to use sandbox
- Fix ntp_filetrans_named_content for sntp-kod file
- Add httpd_dbus_sssd boolean
- Dontaudit exec insmod in boinc policy
- Add dbus_filetrans_named_content_system()
- We want to label only /usr/bin/start-puppet-master to avoid puppet agent running in puppet_t
- varnishd wants chown capability
- update ntp_filetrans_named_content() interface
- Add additional fixes for neutron_t. #1083335
- Dontaudit sandbox_t getattr on proc_kcore_t
- Allow pki_tomcat_t to read ipa lib files - Merge user_tmp_t and user_tmpfs_t together to have only user_tmp_t - Turn on gear_port_t
- Add gear policy and remove permissive domains.
- Add labels for ostree
- Add SELinux awareness for NM
- Label /usr/sbin/pwhistory_helper as updpwd_exec_t - update storage_filetrans_all_named_dev for sg* devices
- Allow auditctl_t to getattr on all removeable devices
- Allow nsswitch_domains to stream connect to nmbd
- Allow rasdaemon to rw /dev/cpu//msr
- fix /var/log/pki file spec
- make bacula_t as auth_nsswitch domain
- Allow certmonger to manage ipa lib files
- Add support for /var/lib/ipa - Manage_service_perms should include enable and disable, need backport to RHEL7
- Allow also unpriv user to run vmtools
- Allow secadm to read /dev/urandom and meminfo
- Add userdom_tmp_role for secadm_t
- Allow postgresql to read network state
- Add a new file context for /var/named/chroot/run directory
- Add booleans to allow docker processes to use nfs and samba
- Dontaudit net_amdin for /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51-2.4.5.1.el7.x86_64/jre-abrt/bin/java running as pki_tomcat_t
- Allow puppet stream connect to mysql
- Fixed some rules related to puppet policy
- Allow vmware-user-sui to use user ttys
- Allow talk 2 users logged via console too
� x��������������6���� X T ��y @� (F���7 �$ ' ���������������� 7 6 8 � et_sockets
- Allow traceroute to create icmp packets
- Allos sysadm_t domain to create tipc sockets
- Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets - Allow rpcd_t domain dac override
- Allow rpm domain to mmap rpm_var_lib_t files
- Allow arpwatch domain to create bluetooth sockets
- Allow secadm_t domain to mmap audit config and log files
- Update init_abstract_socket_activation() to allow also creating tcp sockets
- getty_t should be ranged in MLS. Then also local_login_t runs as ranged domain.
- Add SELinux support for systemd-importd
- Create new type bpf_t and label /sys/fs/bpf with this type - allow bluetooth_t domain to create alg_socket bz(1554410)
- allow tor_t domain to execute bin_t files bz(1496274)
- allow iscsid_t domain to mmap kernel modules bz(1553759)
- update minidlna selinux policy bz(1554087)
- allow motion_t domain to read sysfs_t files bz(1554142)
- allow snapperd_t domain to getattr on all files,dirs,sockets,pipes bz(1551738)
- allow l2tp_t domain to read ipsec config files bz(1545348)
- allow colord_t to mmap home user files bz(1551033)
- dontaudit httpd_t creating kobject uevent sockets bz(1552536)
- allow ipmievd_t to mmap kernel modules bz(1552535)
- allow boinc_t domain to read cgroup files bz(1468381)
- backport allow rules from refpolicy upstream repo
- allow gpg_t domain to bind on all unereserved udp ports
- allow systemd to create systemd_rfkill_var_lib_t dirs bz(1502164)
- allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t bz(1483655)
- allow xdm_t domain to sys_ptrace bz(1554150)
- allow application_domain_type also mmap inherited user temp files bz(1552765)
- update ipsec_read_config() interface
- fix broken sysadm selinux module
- allow ipsec_t to search for bind cache bz(1542746)
- allow staff_t to send sigkill to mount_t domain bz(1544272)
- label /run/systemd/resolve/stub-resolv.conf as net_conf_t bz(1471545)
- label ip6tables.init as iptables_exec_t bz(1551463)
- allow hostname_t to use usb ttys bz(1542903)
- add fsetid capability to updpwd_t domain bz(1543375)
- allow systemd machined send signal to all domains bz(1372644)
- dontaudit create netlink selinux sockets for unpriv selinux users bz(1547876)
- allow sysadm_t to create netlink generic sockets bz(1547874)
- allow passwd_t domain chroot
- dontaudit confined unpriviliged users setuid capability - Allow l2tpd_t domain to create pppox sockets
- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
- Add interface abrt_map_cache()
- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
- Dontaudit kernel bug when several services requesting load kernel module
- Allow traceroute and unconfined domains creating sctp sockets
- Add interface corenet_sctp_bind_generic_node()
- Allow ping_t domain to create icmp sockets
- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
- Dontaudit kernel bug when several services requesting load kernel module - Allow vdagent_t domain search cgroup dirs BZ(1541564)
- Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
- Allow bluetooth domain creating bluetooth sockets BZ(1551577)
- pki_log_t should be log_file
- Allow gpgdomain to unix_stream socket connectto
- Make working gpg agent in gpg_agent_t domain
- Dontaudit thumb_t to rw lvm pipes BZ(154997)
- Allow start cups_lpd via systemd socket activation BZ(1532015)
- Improve screen_role_template Resolves: rhbz#1534111
- Dontaudit modemmanager to setpgid. BZ(1520482)
- Dontaudit kernel bug when systemd requesting load kernel module BZ(1547227)
- Allow systemd-networkd to create netlink generic sockets BZ(1551578)
- refpolicy: Define getrlimit permission for class process
- refpolicy: Define smc_socket security class
- Allow transition from sysadm role into mdadm_t domain.
- ssh_t trying to communicate with gpg agent not sshd_t
- All� x��������������&���� X ��y ��������D����� �$ i ���������������� �� �� �� � EOLUS project
- Virt_admin should be allowed to manage images and processes
- Allow plymountd to send signals to init
- Change labeling of fping6 - Add filename transitions - Fixes for zarafa policy
- Add support for AEOLUS project
- Change labeling of fping6
- Allow plymountd to send signals to init
- Allow initrc_t domain to manage abrt pid files
- Virt_admin should be allowed to manage images and processes - xdm_t needs getsession for switch user
- Every app that used to exec init is now execing systemdctl
- Allow squid to manage krb5_host_rcache_t files
- Allow foghorn to connect to agentx port - Fixes for colord policy - Add Dan's patch to remove 64 bit variants
- Allow colord to use unix_dgram_socket
- Allow apps that search pids to read /var/run if it is a lnk_file
- iscsid_t creates its own directory
- Allow init to list var_lock_t dir
- apm needs to verify user accounts auth_use_nsswitch
- Add labeling for systemd unit files
- Allow gnomeclok to enable ntpd service using systemctl - systemd_systemctl_t domain was added
- Add label for matahari-broker.pid file
- We want to remove untrustedmcsprocess from ability to read /proc/pid
- Fixes for matahari policy
- Allow system_tmpfiles_t to delete user_home_t files in the /tmp dir
- Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on - Fix typo - Add /var/run/lock /var/lock definition to file_contexts.subs
- nslcd_t is looking for kerberos cc files
- SSH_USE_STRONG_RNG is 1 which requires /dev/random
- Fix auth_rw_faillog definition
- Allow sysadm_t to set attributes on fixed disks
- allow user domains to execute lsof and look at application sockets
- prelink_cron job calls telinit -u if init is rewritten
- Fixes to run qemu_t from staff_t - Fix label for /var/run/udev to udev_var_run_t
- Mock needs to be able to read network state - Add file_contexts.subs to handle /run and /run/lock
- Add other fixes relating to /run changes from F15 policy - Allow $1_sudo_t and $1_su_t open access to user terminals
- Allow initrc_t to use generic terminals
- Make Makefile/Rules.modular run sepolgen-ifgen during build to check if files for bugs
-systemd is going to be useing /run and /run/lock for early bootup files.
- Fix some comments in rlogin.if
- Add policy for KDE backlighthelper
- sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
- sssd wants to read .k5login file in users homedir
- setroubleshoot reads executables to see if they have TEXTREL
- Add /var/spool/audit support for new version of audit
- Remove kerberos_connect_524() interface calling
- Combine kerberos_master_port_t and kerberos_port_t
- systemd has setup /dev/kmsg as stderr for apps it executes
- Need these access so that init can impersonate sockets on unix_dgram_socket - Remove some unconfined domains
- Remove permissive domains
- Add policy-term.patch from Dan - Fix multiple specification for boot.log
- devicekit leaks file descriptors to setfiles_t
- Change all all_nodes to generic_node and all_if to generic_if
- Should not use deprecated interface
- Switch from using all_nodes to generic_node and from all_if to generic_if
- Add support for xfce4-notifyd
- Fix file context to show several labels as SystemHigh
- seunshare needs to be able to mounton nfs/cifs/fusefs homedirs
- Add etc_runtime_t label for /etc/securetty
- Fixes to allow xdm_t to start gkeyringd_USERTYPE_t directly
- login.krb needs to be able to write user_tmp_t
- dirsrv needs to bind to port 7390 for dogtag
- Fix a bug in gpg policy
- gpg sends audit messages
- Allow qpid to manage matahari files - Initial policy for matahari
- Add dev_read_watchdog
- Allow clamd to connect clamd port
- Add support for kcmdatetimehelper
- Allow shutdown to setrlimit and sys_nice
- Allow systemd_passwd to talk to /dev/log before udev or syslog is running
- Purge chr_file and blk files on /tmp
- Fixes for pads
- Fixes for piranha-pulse
- gpg_t needs to be able to encyprt anything owned by the user - mozilla_plugin_tmp_t needs to be treated as user tmp files
- More dontaudits of writes from readah� x����������������� X
�y B x�������� �$ 3 ���������������� � � � � .8.8-1 Rex Dieter <rdieter@fedoraproject.org> 2.8.8-0.4.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.8-0.3.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.8-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.8-0.1.rc1 Orion Poplawski <orion@cora.nwra.com> - 2.8.7-6 Orion Poplawski <orion@cora.nwra.com> - 2.8.7-5 Tomas Bzatek <tbzatek@redhat.com> - 2.8.7-4 Jaroslav Reznik <jreznik@redhat.com> - 2.8.7-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.7-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.7-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.7-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.7-0.1.rc1 Daniel Drake <dsd@laptop.org> - 2.8.6-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.6-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.6-0.5.rc4 Orion Poplawski <orion@cora.nwra.com> - 2.8.6-0.4.rc3 Ville Skyttä <ville.skytta@iki.fi> - 2.8.6-0.3.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.6-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.6-0.1.rc1 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-3 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-0.3.rc3 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.5-0.1.rc1 Orion Poplawski <orion@cora.nwra.com> - 2.8.4-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.4-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.4-0.1.rc1 Orion Poplawski <orion@cora.nwra.com> - 2.8.3-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.3-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.3-0.3.rc4 Orion Poplawski <orion@cora.nwra.com> - 2.8.3-0.2.rc3 Orion Poplawski <orion@cora.nwra.com> - 2.8.3-0.1.rc1 Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.8.2-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.2-1 Orion Poplawski <orion@cora.nwra.com> - 2.8.2-0.3.rc4 Orion Poplawski <orion@cora.nwra.com> - 2.8.2-0.2.rc3 Orion Poplawski <orion@cora.nwra.com> - 2.8.2-0.1.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-5 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-4 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-3 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-1 Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.8.1-0.3.rc5 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-0.2.rc5 Orion Poplawski <orion@cora.nwra.com> - 2.8.1-0.1.rc3 Rex Dieter <rdieter@fedorproject.org> - 2.8.0-2 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-1 Rex Dieter <rdieter@fedoraproject.org> - 2.8.0-0.8.rc7 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.7.rc7 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.7.rc6 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.6.rc5 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.5.rc4 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.4.rc3 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.3.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.2.rc2 Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.1.rc1 Rex Dieter <rdieter@fedoraproject.org> - 2.6.4-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.4-3 Orion Poplawski <orion@cora.nwra.com> - 2.6.4-2 Orion Poplawski <orion@cora.nwra.com> - 2.6.4-1 Rex Dieter <rdieter@fedoraproject.org> - 2.6.3-3 Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.6.3-2 Orion Poplawski <orion@cora.nwra.com> - 2.6.3-1 Orion Poplawski <orion@cora.nwra.com> - 2.6.3-0.4.rc13 Orion Poplawski <orion@cora.nwra.com> - 2.6.3-0.3.rc8 Rex Dieter <rdieter@fedoraproject.org> - 2.6.3-0.2.rc5 Orion Poplawski <orion@cora.nwra.com> - 2.6.3-0.rc5.1 Rex Dieter <rdieter@fedoraproject.org> - 2.6.2-3 Orion Poplawski <orion@cora.nwra.com> - 2.6.2-2 Orion Poplawski <orion@cora.nwra.com> - 2.6.2-1 Orion Poplawski <orion@cora.nwra.com> - 2.6.2-0.rc3.1 Orion Poplawski <orion@cora.nwra.com> - 2.6.1-3 Rex Dieter <rdieter@fedoraproject.org> - 2.6.1-2 Orion Poplawski <orion@cora.nwra.com> - 2.6.1-1 Orion Poplawski <orion@cora.nwra.com> - 2.6.1-0.rc8.1 Orion Poplawski <orion@cora.nwra.com> - 2.6.0-1 Orion Poplawski <orion@cora.nwra.com> - 2.6.0-0.rc10.1 Orion Poplawski <orion@cora.nwra.co� x������������������ X ugM�yp.ne0t �����a nger�$ ���������������� �a a �a � �AJ�A@E�A
@Ag@Remi Collet <remi@remirepo.net> - 7.0.33-40 Remi Collet <remi@remirepo.net> - 7.0.33-39 Remi Collet <remi@remirepo.net> - 7.0.33-38 Remi Collet <remi@remirepo.net> - 7.0.33-37 Remi Collet <remi@remirepo.net> - 7.0.33-36 Remi Collet <remi@remirepo.net> - 7.0.33-35 Remi Collet <remi@remirepo.net> - 7.0.33-33 Remi Collet <remi@remirepo.net> - 7.0.33-32 Remi Collet <remi@remirepo.net> - 7.0.33-31 Remi Collet <remi@remirepo.net> - 7.0.33-30 Remi Collet <remi@remirepo.net> - 7.0.33-29 Remi Collet <remi@remirepo.net> - 7.0.33-28 Remi Collet <remi@remirepo.net> - 7.0.33-27 Remi Collet <remi@remirepo.net> - 7.0.33-26 Remi Collet <remi@remirepo.net> - 7.0.33-25 Remi Collet <remi@remirepo.net> - 7.0.33-24 Remi Collet <remi@remirepo.net> - 7.0.33-23 Remi Collet <remi@remirepo.net> - 7.0.33-22 Remi Collet <remi@remirepo.net> - 7.0.33-21 Remi Collet <remi@remirepo.net> - 7.0.33-20 Remi Collet <remi@remirepo.net> - 7.0.33-19 Remi Collet <remi@remirepo.net> - 7.0.33-18 Remi Collet <remi@remirepo.net> - 7.0.33-17 Remi Collet <remi@remirepo.net> - 7.0.33-15 Remi Collet <remi@remirepo.net> - 7.0.33-14 Remi Collet <remi@remirepo.net> - 7.0.33-13 Remi Collet <remi@remirepo.net> - 7.0.33-12 Remi Collet <remi@remirepo.net> - 7.0.33-11 Remi Collet <remi@remirepo.net> - 7.0.33-9 Remi Collet <remi@remirepo.net> - 7.0.33-8 Remi Collet <remi@remirepo.net> - 7.0.33-7 Remi Collet <remi@remirepo.net> - 7.0.33-6 Remi Collet <remi@remirepo.net> - 7.0.33-5 Remi Collet <remi@remirepo.net> - 7.0.33-4 Remi Collet <remi@remirepo.net> - 7.0.33-3 Remi Collet <remi@remirepo.net> - 7.0.33-2 Remi Collet <remi@remirepo.net> - 7.0.33-1 Remi Collet <remi@remirepo.net> - 7.0.32-1 Remi Collet <remi@remirepo.net> - 7.0.31-2 Remi Collet <remi@remirepo.net> - 7.0.31-1 Remi Collet <remi@remirepo.net> - 7.0.30-1 Remi Collet <remi@remirepo.net> - 7.0.29-1 Remi Collet <remi@remirepo.net> - 7.0.28-2 Remi Collet <remi@remirepo.net> - 7.0.28-1 Remi Collet <remi@remirepo.net> - 7.0.27-1 Remi Collet <remi@remirepo.net> - 7.0.27~RC1-1 Remi Collet <remi@remirepo.net> - 7.0.26-1 Remi Collet <remi@remirepo.net> - 7.0.26~RC1-1 Remi Collet <remi@remirepo.net> - 7.0.25-1 Remi Collet <remi@remirepo.net> - 7.0.25~RC1-1 Remi Collet <remi@remirepo.net> - 7.0.24-1 Remi Collet <remi@remirepo.net> - 7.0.24~RC1-3 Remi Collet <remi@remirepo.net> - 7.0.24~RC1-2 Remi Collet <remi@fedoraproject.org> - 7.0.24~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.23-2 Remi Collet <remi@fedoraproject.org> - 7.0.23-1 Remi Collet <remi@fedoraproject.org> - 7.0.23~RC1-2 Remi Collet <remi@fedoraproject.org> - 7.0.23~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.22-2 Remi Collet <remi@fedoraproject.org> - 7.0.22-1 Remi Collet <remi@fedoraproject.org> - 7.0.22~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.21-1 Remi Collet <remi@fedoraproject.org> - 7.0.21~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.20-1 Remi Collet <remi@fedoraproject.org> - 7.0.20~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.19-1 Remi Collet <remi@fedoraproject.org> - 7.0.19~RC1-2 Remi Collet <remi@fedoraproject.org> - 7.0.19~RC1-1 Remi Collet <remi@fedoraproject.org> - 7.0.18-1 Remi Collet <remi@fedoraproject.org> - 7.0.18-0.1.RC1 Remi Collet <remi@fedoraproject.org> - 7.0.17-1 Remi Collet <remi@fedoraproject.org> - 7.0.17-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.17-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.16-1 Remi Collet <remi@fedoraproject.org> - 7.0.16-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.16-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.15-1 Remi Collet <remi@fedoraproject.org> 7.0.15-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.14-1 Remi Collet <remi@fedoraproject.org> 7.0.14-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.13-1 Remi Collet <remi@fedoraproject.org> 7.0.13-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.12-2 Remi Collet <remi@fedoraproject.org> 7.0.12-1 Remi Collet <remi@fedoraproject.org> 7.0.12-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.11-1 Remi Collet <remi@fedoraproject.org> 7.0.11-0.1.RC1 Remi Collet <remi@fedoraproje� x�������������������� X s
�ylow � ��������� remo�$ ���������������� � � � � FIG_CRYPTO_LIB_SM4=m and
- CONFIG_MODULE_SIG_KEY_TYPE_RSA=y - Updated with the 5.14.15 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15] - Updated with the 5.14.14 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14] - Updated with the 5.14.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13] - Updated with the 5.14.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12] - Updated with the 5.14.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11] - Updated with the 5.14.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10] - Updated with the 5.14.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9] - Updated with the 5.14.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8] - Updated with the 5.14.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7] - Updated with the 5.14.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6] - Updated with the 5.14.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5] - Updated with the 5.14.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4] - Updated with the 5.14.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3] - Updated with the 5.14.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2] - Updated with the 5.14.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1] - Updated with the 5.14 source tarball.
- CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y, CONFIG_SCHED_CORE=y,
- CONFIG_ACPI_VIOT=y, CONFIG_ACPI_PRMT=y,
- CONFIG_HAVE_KVM_PM_NOTIFIER=y, CONFIG_ARCH_WANTS_NO_INSTR=y,
- CONFIG_MODULE_SIG_FORMAT=y, CONFIG_MODULE_SIG=y,
- CONFIG_MODULE_SIG_ALL=y, CONFIG_MODULE_SIG_SHA512=y,
- CONFIG_MODULE_SIG_HASH="sha512", CONFIG_SECRETMEM=y,
- CONFIG_NETFILTER_NETLINK_HOOK=m, CONFIG_MLX5_BRIDGE=y,
- CONFIG_MEDIATEK_GE_PHY=m, CONFIG_MOTORCOMM_PHY=m,
- CONFIG_FWNODE_MDIO=y, CONFIG_ACPI_MDIO=y,
- CONFIG_INPUT_JOYSTICK=y, CONFIG_JOYSTICK_ANALOG=m,
- CONFIG_JOYSTICK_A3D=m, CONFIG_JOYSTICK_ADC=m,
- CONFIG_JOYSTICK_ADI=m, CONFIG_JOYSTICK_COBRA=m,
- CONFIG_JOYSTICK_GF2K=m, CONFIG_JOYSTICK_GRIP=m,
- CONFIG_JOYSTICK_GRIP_MP=m, CONFIG_JOYSTICK_GUILLEMOT=m,
- CONFIG_JOYSTICK_INTERACT=m, CONFIG_JOYSTICK_SIDEWINDER=m,
- CONFIG_JOYSTICK_TMDC=m, CONFIG_JOYSTICK_IFORCE=m,
- CONFIG_JOYSTICK_IFORCE_USB=m, CONFIG_JOYSTICK_IFORCE_232=m,
- CONFIG_JOYSTICK_WARRIOR=m, CONFIG_JOYSTICK_MAGELLAN=m,
- CONFIG_JOYSTICK_SPACEORB=m, CONFIG_JOYSTICK_SPACEBALL=m,
- CONFIG_JOYSTICK_STINGER=m, CONFIG_JOYSTICK_TWIDJOY=m,
- CONFIG_JOYSTICK_ZHENHUA=m, CONFIG_JOYSTICK_DB9=m,
- CONFIG_JOYSTICK_GAMECON=m, CONFIG_JOYSTICK_TURBOGRAFX=m,
- CONFIG_JOYSTICK_AS5011=m, CONFIG_JOYSTICK_JOYDUMP=m,
- CONFIG_JOYSTICK_XPAD=m, CONFIG_JOYSTICK_XPAD_FF=y,
- CONFIG_JOYSTICK_XPAD_LEDS=y, CONFIG_JOYSTICK_WALKERA0701=m,
- CONFIG_JOYSTICK_PSXPAD_SPI=m, CONFIG_JOYSTICK_PSXPAD_SPI_FF=y,
- CONFIG_JOYSTICK_PXRC=m, CONFIG_JOYSTICK_QWIIC=m,
- CONFIG_JOYSTICK_FSIA6B=m, CONFIG_SENSORS_DPS920AB=m,
- CONFIG_SENSORS_MP2888=m, CONFIG_SENSORS_PIM4328=m,
- CONFIG_SENSORS_SHT4x=m, CONFIG_REGULATOR_MAX8893=m,
- CONFIG_REGULATOR_RT6160=m, CONFIG_REGULATOR_RT6245=m,
- CONFIG_V4L2_ASYNC=m, CONFIG_HSA_AMD_SVM=y,
- CONFIG_SND_SOC_INTEL_SOF_CS42L42_MACH=m,
- CONFIG_SND_SOC_SSM2518=m, CONFIG_SND_SOC_TFA989X=m,
- CONFIG_LEDS_LT3593=m, CONFIG_INFINIBAND_IRDMA=m,
- CONFIG_DELL_WMI_PRIVACY=y, CONFIG_WIRELESS_HOTKEY=m,
- CONFIG_THINKPAD_LMI=m, CONFIG_X86_PLATFORM_DRIVERS_INTEL=y,
- CONFIG_FW_ATTR_CLASS=m, CONFIG_VIRTIO_IOMMU=m,
- CONFIG_TSL2591=m, CONFIG_PHY_CAN_TRANSCEIVER=m,
- CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y,
- CONFIG_IMA_DEFAULT_HASH_SHA512=y, CONFIG_IMA_DEFAULT_HASH="sha512",
- CONFIG_CRYPTO_FIPS=y, CONFIG_CRYPTO_SHA512=y and
- CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" - Updated with the 5.13.� x�������������p������ X
lv��yrhbz������H����� etat�$ f ���������������� �� �� �� � this
- Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
- auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
- Dontaudit (xdm_t) gok attempting to list contents of /var/account
- Telepathy domains need to read urand
- Need interface to getattr all file classes in a mock library for setroubleshoot - Update selinux policy to handle new /usr/share/sandbox/start script - Update to upstream
- Fix version of policy in spec file - Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs
- remove per sandbox domains devpts types
- Allow dkim-milter sending signal to itself - Allow domains that transition to ping or traceroute, kill them
- Allow user_t to conditionally transition to ping_t and traceroute_t
- Add fixes to systemd- tools, including new labeling for systemd-fsck, systemd-cryptsetup - Turn on systemd policy
- mozilla_plugin needs to read certs in the homedir.
- Dontaudit leaked file descriptors from devicekit
- Fix ircssi to use auth_use_nsswitch
- Change to use interface without param in corenet to disable unlabelednet packets
- Allow init to relabel sockets and fifo files in /dev
- certmonger needs dac* capabilities to manage cert files not owned by root
- dovecot needs fsetid to change group membership on mail
- plymouthd removes /var/log/boot.log
- systemd is creating symlinks in /dev
- Change label on /etc/httpd/alias to be all cert_t - Fixes for clamscan and boinc policy
- Add boinc_project_t setpgid
- Allow alsa to create tmp files in /tmp - Push fixes to allow disabling of unlabeled_t packet access
- Enable unlabelednet policy - Fixes for lvm to work with systemd - Fix the label for wicd log
- plymouthd creates force-display-on-active-vt file
- Allow avahi to request the kernel to load a module
- Dontaudit hal leaks
- Fix gnome_manage_data interface
- Add new interface corenet_packet to define a type as being an packet_type.
- Removed general access to packet_type from icecast and squid.
- Allow mpd to read alsa config
- Fix the label for wicd log
- Add systemd policy - Fix gnome_manage_data interface
- Dontaudit sys_ptrace capability for iscsid
- Fixes for nagios plugin policy - Fix cron to run ranged when started by init
- Fix devicekit to use log files
- Dontaudit use of devicekit_var_run_t for fstools
- Allow init to setattr on logfile directories
- Allow hald to manage files in /var/run/pm-utils/ dir which is now labeled as devicekit_var_run_t - Fix up handling of dnsmasq_t creating /var/run/libvirt/network
- Turn on sshd_forward_ports boolean by default
- Allow sysadmin to dbus chat with rpm
- Add interface for rw_tpm_dev
- Allow cron to execute bin
- fsadm needs to write sysfs
- Dontaudit consoletype reading /var/run/pm-utils
- Lots of new privs fro mozilla_plugin_t running java app, make mozilla_plugin
- certmonger needs to manage dirsrv data
- /var/run/pm-utils should be labeled as devicekit_var_run_t - fixes to allow /var/run and /var/lock as tmpfs
- Allow chrome sandbox to connect to web ports
- Allow dovecot to listem on lmtp and sieve ports
- Allov ddclient to search sysctl_net_t
- Transition back to original domain if you execute the shell - Remove duplicate declaration - Update to upstream
- Cleanup for sandbox
- Add attribute to be able to select sandbox types - Allow ddclient to fix file mode bits of ddclient conf file
- init leaks file descriptors to daemons
- Add labels for /etc/lirc/ and
- Allow amavis_t to exec shell
- Add label for gssd_tmp_t for /var/tmp/nfs_0 - Put back in lircd_etc_t so policy will install - Turn on allow_postfix_local_write_mail_spool
- Allow initrc_t to transition to shutdown_t
- Allow logwatch and cron to mls_read_to_clearance for MLS boxes
- Allow wm to send signull to all applications and receive them from users
- lircd patch from field
- Login programs have to read /etc/samba
- New programs under /lib/systemd
- Abrt needs to read config files - Update to upstream
- Dontaudit leaked sockets from userdomains to user domains
- Fixes for mcelog to handle scripts
- Apply patch from Ruben Kerkh� x�������������������� X .4=�y Ala����������������# po.o�$ 3 ���������������� # " $ � � x�������������P������ X onU�yax@r��������������� 2 Pe�$ f ���������������� �� �� �� � hat.com> 3.11.1-38 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-37 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-36 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-35 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-34 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-33 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-32 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-31 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-30 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-29 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-28 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-27 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-26 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-25 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-24 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-23 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-22 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-21 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-20 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-19 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-18 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-17 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-16 Dan Walsh <dwalsh@redhat.com> 3.11.1-15 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-14 Dan Walsh <dwalsh@redhat.com> 3.11.1-13 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-12 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-11 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-10 Dan Walsh <dwalsh@redhat.com> 3.11.1-9 Dan Walsh <dwalsh@redhat.com> 3.11.1-8 Dan Walsh <dwalsh@redhat.com> 3.11.1-7 Dan Walsh <dwalsh@redhat.com> 3.11.1-6 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-5 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-4 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-3 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-1 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-0 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-15 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-14 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-13 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.11.0-11 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-10 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-9 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-2 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-124 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-104 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-101 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93 Miroslav Grepl <mgrepl@redhat.com> 3.1� x�������������Ȳ����� X oo��yot r��������P'������ -age�$ ����������������
b � devel package - Fix for spamd to use ldap - Update to upstream - Update to upstream
- Fix rhgb, and other Xorg startups - Update to upstream - Separate out role of secadm for mls - Add inotifyfs handling - Update to upstream
- Put back in changes for pup/zen - Many changes for MLS
- Turn on strict policy - Update to upstream - Update to upstream
- Fixes for booting and logging in on MLS machine - Update to upstream
- Turn off execheap execstack for unconfined users
- Add mono/wine policy to allow execheap and execstack for them
- Add execheap for Xdm policy - Update to upstream
- Fixes to fetchmail, - Update to upstream - Fix for procmail/spamassasin
- Update to upstream
- Add rules to allow rpcd to work with unlabeled_networks. - Update to upstream
- Fix ftp Man page - Update to upstream - fix pup transitions (#177262)
- fix xen disks (#177599) - Update to upstream - More Fixes for hal and readahead - Fixes for hal and readahead - Update to upstream
- Apply - Add wine and fix hal problems - Handle new location of hal scripts - Allow su to read /etc/mtab - Update to upstream - Fix "libsemanage.parse_module_headers: Data did not represent a module." problem - Allow load_policy to read /etc/mtab - Fix dovecot to allow dovecot_auth to look at /tmp - Allow restorecon to read unlabeled_t directories in order to fix labeling. - Add Logwatch policy - Fix /dev/ub[a-z] file context - Fix library specification
- Give kudzu execmem privs - Fix hostname in targeted policy - Fix passwd command on mls - Lots of fixes to make mls policy work - Add dri libs to textrel_shlib_t
- Add system_r role for java
- Add unconfined_exec_t for vncserver
- Allow slapd to use kerberos - Add man pages - Add enableaudit.pp - Fix mls policy - Update mls file from old version - Add sids back in
- Rebuild with update checkpolicy - Fixes to allow automount to use portmap
- Fixes to start kernel in s0-s15:c0.c255 - Add java unconfined/execmem policy - Add file context for /var/cvs
- Dontaudit webalizer search of homedir - Update from upstream - Clean up spec
- range_transition crond to SystemHigh - Fixes for hal
- Update to upstream - Turn back on execmem since we need it for java, firefox, ooffice
- Allow gpm to stream socket to itself - fix requirements to be on the actual packages so that policy can get
created properly at install time - Allow unconfined_t to execmod texrel_shlib_t - Update to upstream
- Turn off allow_execmem and allow_execmod booleans
- Add tcpd and automount policies - Add two new httpd booleans, turned off by default
* httpd_can_network_relay
* httpd_can_network_connect_db - Add ghost for policy.20 - Update to upstream
- Turn off boolean allow_execstack - Change setrans-mls to use new libsetrans
- Add default_context rule for xdm - Change Requires to PreReg for requiring of policycoreutils on install - New upstream release Add xdm policy Update from upstream Update from upstream Update from upstream - Also trigger to rebuild policy for versions up to 2.0.7. - No longer installing policy.20 file, anaconda handles the building of the app. - Fixes for dovecot and saslauthd - Cleanup pegasus and named
- Fix spec file
- Fix up passwd changing applications -Update to latest from upstream - Add rules for pegasus and avahi - Start building MLS Policy - Update to upstream - Turn on bash - Initial version /bin/sh /bin/sh /bin/sh /bin/sh 3.14.3-139.el8_10.2 3.14.3-139.el8_10.2 selinux config selinux macros.selinux-policy selinux-policy.conf selinux-policy COPYING selinux packages /etc/ /etc/selinux/ /etc/sysconfig/ /usr/lib/rpm/macros.d/ /usr/lib/tmpfiles.d/ /usr/share/licenses/ /usr/share/licenses/selinux-policy/ /usr/share/ /usr/share/selinux/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-an� x�������������@������ X 6 ��yl - ���������������� - U�$ ���������������� � - Add support for /sys/fs/kdbus and allow login_pgm domain to access it.
- Allow sysadm to administrate ldap environment and allow to bind ldap port to allow to setup an LDAP server (389ds).
- Label /usr/sbin/chpasswd as passwd_exec_t.
- Allow audisp_remote_t to read/write user domain pty.
- Allow audisp_remote_t to start power unit files domain to allow halt system. - Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.
- Prepare selinux-policy package for SELinux store migration
- gnome_dontaudit_search_config() needs to be a part of optinal_policy in pegasus.te
- Allow glusterd to manage nfsd and rpcd services.
- Allow smbd_t and nmbd_t to manage winbind_var_run_t files/socktes/dirs.
- Add samba_manage_winbind_pid() interface
- Allow networkmanager to communicate via dbus with systemd_hostanmed.
- Allow stream connect logrotate to prosody.
- Add prosody_stream_connect() interface.
- httpd should be able to send signal/signull to httpd_suexec_t, instead of httpd_suexec_exec_t.
- Allow prosody to create own tmp files/dirs.
- Allow keepalived request kernel load module
- kadmind should not read generic files in /usr
- Allow kadmind_t access to /etc/krb5.keytab
- Add more fixes to kerberos.te
- Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0
- Add lsmd_t to nsswitch_domain.
- Allow pegasus_openlmi_storage_t create mdadm.conf.anacbak file in /etc.
- Add fixes to pegasus_openlmi_domain
- Allow Glance Scrubber to connect to commplex_main port
- Allow RabbitMQ to connect to amqp port
- Allow isnsd read access on the file /proc/net/unix
- Allow qpidd access to /proc/<pid>/net/psched
- Allow openshift_initrc_t to communicate with firewalld over dbus.
- Allow ctdbd_t send signull to samba_unconfined_net_t.
- Add samba_signull_unconfined_net()
- Add samba_signull_winbind()
- Revert "Add interfaces winbind_signull(), samba_unconfined_net_signull()."
- Fix ctdb policy
- Label /var/db/ as system_db_t. - inn daemon should create innd_log_t objects in var_log_t instead of innd_var_run_t
- Fix rule definitions for httpd_can_sendmail boolean. We need to distinguish between base and contrib. - Add samba_unconfined_script_exec_t to samba_admin header.
- Add jabberd_lock_t label to jabberd_admin header.
- Add rpm_var_run_t label to rpm_admin header.
- Make all interfaces related to openshift_cache_t as deprecated.
- Remove non exits nfsd_ro_t label.
- Label /usr/afs/ as afs_files_t Allow afs_bosserver_t create afs_config_t and afs_dbdir_t dirs under afs_files_t Allow afs_bosserver_t read kerberos config
- Fix *_admin intefaces where body is not consistent with header.
- Allow networkmanager read rfcomm port.
- Fix nova_domain_template interface, Fix typo bugs in nova policy
- Create nova sublabels.
- Merge all nova_* labels under one nova_t.
- Add cobbler_var_lib_t to "/var/lib/tftpboot/boot(/.*)?"
- Allow dnssec_trigger_t relabelfrom dnssec_trigger_var_run_t files.
- Fix label openstack-nova-metadata-api binary file
- Allow nova_t to bind on geneve tcp port, and all udp ports
- Label swift-container-reconciler binary as swift_t.
- Allow glusterd to execute showmount in the showmount domain.
- Allow NetworkManager_t send signull to dnssec_trigger_t.
- Add support for openstack-nova-* packages.
- Allow audisp-remote searching devpts.
- Label 6080 tcp port as geneve - Update mta_filetrans_named_content() interface to cover more db files.
- Revert "Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling."
- Allow pcp domains to connect to own process using unix_stream_socket.
- Typo in abrt.te
- Allow abrt-upload-watch service to dbus chat with ABRT daemon and fsetid capability to allow run reporter-upload correctly.
- Add nagios_domtrans_unconfined_plugins() interface.
- Add nagios_domtrans_unconfined_plugins() interface.
- Add new boolean - httpd_run_ipa to allow httpd process to run IPA helper and dbus chat with oddjob.
- Add support for oddjob based helper in FreeIPA. BZ(1238165)
- Allow dnssec_trigger_t creat� x�������������������� X am|�ya.3 h�������`����� amel�$ ���������������� � m Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.19-13 Tim Waugh <twaugh@redhat.com> 1:1.1.19-12 Tim Waugh <twaugh@redhat.com> 1:1.1.19-11 Tim Waugh <twaugh@redhat.com> 1:1.1.19-10 Tim Waugh <twaugh@redhat.com> 1:1.1.19-9 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.19-8 Tim Waugh <twaugh@redhat.com> 1:1.1.19-7 Tim Waugh <twaugh@redhat.com> 1:1.1.19-6 Tim Waugh <twaugh@redhat.com> 1:1.1.19-5 Elliot Lee <sopwith@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.19-3 Tim Waugh <twaugh@redhat.com> 1:1.1.19-2 Tim Waugh <twaugh@redhat.com> 1:1.1.19-1 Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc5.4 Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc5.3 Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc5.2 Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc5.1 Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1 Tim Waugh <twaugh@redhat.com> Havoc Pennington <hp@redhat.com> 1:1.1.18-4 Tim Waugh <twaugh@redhat.com> 1.1.18-3 Tim Waugh <twaugh@redhat.com> 1.1.18-2 Tim Waugh <twaugh@redhat.com> 1.1.18-1.1 Tim Waugh <twaugh@redhat.com> 1.1.18-1 Tim Waugh <twaugh@redhat.com> 1.1.17-13 Tim Waugh <twaugh@redhat.com> 1.1.17-12 Tim Waugh <twaugh@redhat.com> 1.1.17-11 Tim Waugh <twaugh@redhat.com> 1.1.17-10 Tim Powers <timp@redhat.com> 1.1.17-9 Tim Waugh <twaugh@redhat.com> 1.1.17-8 Tim Waugh <twaugh@redhat.com> 1.1.17-7 Tim Waugh <twaugh@redhat.com> 1.1.17-6 Nalin Dahyabhai <nalin@redhat.com> 1.1.17-5 Tim Waugh <twaugh@redhat.com> 1.1.17-4 Tim Waugh <twaugh@redhat.com> 1.1.17-3 Tim Waugh <twaugh@redhat.com> 1.1.17-2 Tim Waugh <twaugh@redhat.com> 1.1.17-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1.1.15-15 Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14 Tim Waugh <twaugh@redhat.com> 1.1.15-13 Tim Waugh <twaugh@redhat.com> 1.1.15-12 Tim Waugh <twaugh@redhat.com> 1.1.15-11 Bernhard Rosenkraenzer <bero@redhat.de> 1.1.15-10 Tim Waugh <twaugh@redhat.com> 1.1.15-9 Tim Waugh <twaugh@redhat.com> 1.1.15-8 Tim Waugh <twaugh@redhat.com> 1.1.15-7 Elliot Lee <sopwith@redhat.com> 1.1.15-6 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-5 Florian La Roche <Florian.LaRoche@redhat.de> 1.1.15-4 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3 Tim Powers <timp@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1 Tim Powers <timp@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-17 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-15 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-14 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-13 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12 Bill Nottingham <notting@redhat.com> 1.1.14-11 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-10 Bill Nottingham <notting@redhat.com> 1.1.14-9 Bill Nottingham <notting@redhat.com> 1.1.14-8 Bill Nottingham <notting@redhat.com> 1.1.14-7 Bill Nottingham <notting@redhat.com> 1.1.14-6 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-4 Tim Powers <timp@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-2 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-1 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5 Tim Powers <timp@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-3 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-2 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.12-1 Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 1.1.10-3 Bernhard Rosenkraenzer <bero@redhat.com> 1.1.10-2 Than Ngo <than@redhat.com> 1.1.10-1 Michael Stefaniuc <mstefani@redhat.com> Than Ngo <than@redhat.com> Than Ngo <than@redhat.com> Than Ngo <than@redhat.com> Than Ngo <than@redhat.com> Than Ngo <than@redhat.com> Than Ngo <than@redhat.de> Than Ngo <than@redhat.de> Tim Powers <timp@redhat.com> Than Ngo <than@redhat.de> Bernhard Rosenkraenzer <bero@redhat.com> Than Ngo <than@redhat.de> Tim Powers <timp@redhat.com> Prospector <prospector@redhat.com> Than Ngo <than@redhat.de> Tim Powers <timp@redhat.com> Than Ngo <than@redhat.de> Than Ngo <than@redhat.de> Than Ngo <than@redhat.de> Tim Powers <timp@re� x�������������0������ X d_�yd-se������p������ dove�$ ���������������� � � � � CONFIG_SND_SOC_SOF_COMETLAKE_LP_SUPPORT=y, CONFIG_SND_SOC_SOF_TIGERLAKE_SUPPORT=y,
- CONFIG_SND_SOC_SOF_TIGERLAKE=m, CONFIG_SND_SOC_SOF_ELKHARTLAKE_SUPPORT=y,
- CONFIG_SND_SOC_SOF_ELKHARTLAKE=m, CONFIG_SND_SOC_SOF_JASPERLAKE_SUPPORT=y,
- CONFIG_SND_SOC_SOF_JASPERLAKE=m, CONFIG_SND_SOC_SOF_ALDERLAKE_SUPPORT=y,
- CONFIG_SND_SOC_SOF_ALDERLAKE=m, CONFIG_SND_SOC_SOF_HDA_COMMON=m,
- CONFIG_SND_SOC_SOF_HDA_LINK=y, CONFIG_SND_SOC_SOF_HDA_AUDIO_CODEC=y,
- CONFIG_SND_SOC_SOF_HDA_LINK_BASELINE=m, CONFIG_SND_SOC_SOF_HDA=m,
- CONFIG_SND_SOC_SOF_INTEL_SOUNDWIRE_LINK=y,
- CONFIG_SND_SOC_SOF_INTEL_SOUNDWIRE_LINK_BASELINE=m,
- CONFIG_SND_SOC_SOF_INTEL_SOUNDWIRE=m, CONFIG_SND_SOC_SOF_XTENSA=m,
- CONFIG_SND_SOC_MAX98373_SDW=m, CONFIG_SND_SOC_RT1011=m,
- CONFIG_SND_SOC_RT1015=m, CONFIG_SND_SOC_RT1308_SDW=m,
- CONFIG_SND_SOC_RT5682=m, CONFIG_SND_SOC_RT5682_I2C=m,
- CONFIG_SND_SOC_RT5682_SDW=m, CONFIG_SND_SOC_RT700=m,
- CONFIG_SND_SOC_RT700_SDW=m, CONFIG_SND_SOC_RT711=m,
- CONFIG_SND_SOC_RT711_SDW=m, CONFIG_SND_SOC_RT715=m,
- CONFIG_SND_SOC_RT715_SDW=m, CONFIG_SND_SOC_WSA881X=m,
- CONFIG_SOUNDWIRE=m, CONFIG_SOUNDWIRE_CADENCE=m,
- CONFIG_SOUNDWIRE_INTEL=m and
- CONFIG_SOUNDWIRE_GENERIC_ALLOCATION=m
- [https://elrepo.org/bugs/view.php?id=1087] - Updated with the 5.11.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11] - Updated with the 5.11.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.10] - Updated with the 5.11.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.9] - Updated with the 5.11.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8] - Updated with the 5.11.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7] - Updated with the 5.11.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.6] - Updated with the 5.11.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.5] - Updated with the 5.11.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.4] - Updated with the 5.11.3 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3] - Updated with the 5.11.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.2] - Updated with the 5.11.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.1] - Updated with the 5.11 source tarball.
- CONFIG_XEN_PVHVM_GUEST=y, CONFIG_HAVE_CONTEXT_TRACKING_OFFSTACK=y,
- CONFIG_HAVE_MOVE_PUD=y, CONFIG_NFT_REJECT_NETDEV=m,
- CONFIG_CAN_M_CAN_PCI=m, CONFIG_BT_LEDS=y, CONFIG_AUXILIARY_BUS=y,
- CONFIG_MHI_BUS_PCI_GENERIC=m, CONFIG_ZRAM_DEF_COMP_LZORLE=y,
- CONFIG_ZRAM_DEF_COMP="lzo-rle", CONFIG_MHI_NET=m,
- CONFIG_USB_RTL8153_ECM=m, CONFIG_PINCTRL_ALDERLAKE=m,
- CONFIG_PINCTRL_ELKHARTLAKE=m, CONFIG_PINCTRL_LAKEFIELD=m,
- CONFIG_SENSORS_CORSAIR_PSU=m, CONFIG_SENSORS_LTC2992=m,
- CONFIG_SENSORS_MAX127=m, CONFIG_SENSORS_PM6764TR=m,
- CONFIG_SENSORS_Q54SJ108A2=m, CONFIG_SENSORS_SBTSI=m,
- CONFIG_SENSORS_XGENE=m, CONFIG_PROC_THERMAL_MMIO_RAPL=m,
- CONFIG_SND_SOC_ADI=m, CONFIG_SND_SOC_ADI_AXI_I2S=m,
- CONFIG_SND_SOC_ADI_AXI_SPDIF=m, CONFIG_SND_SOC_FSL_XCVR=m,
- CONFIG_SND_SOC_ADAU1372=m, CONFIG_SND_SOC_ADAU1372_I2C=m,
- CONFIG_SND_SOC_ADAU1372_SPI=m, CONFIG_SND_SOC_PCM5102A=m,
- CONFIG_SND_SOC_SIMPLE_MUX=m, CONFIG_SND_SOC_NAU8315=m,
- CONFIG_SND_SOC_LPASS_WSA_MACRO=m, CONFIG_SND_SOC_LPASS_VA_MACRO=m,
- CONFIG_AMD_SFH_HID=m, CONFIG_LEDS_RT8515=m,
- CONFIG_LEDS_TRIGGER_PANIC=y, CONFIG_EDAC_IGEN6=m,
- CONFIG_AMD_PMC=m, CONFIG_DELL_WMI_SYSMAN=m,
- CONFIG_INTEL_PMT_CLASS=m, CONFIG_INTEL_PMT_TELEMETRY=m,
- CONFIG_INTEL_PMT_CRASHLOG=m, CONFIG_PWM_DWC=m,
- CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240,
- CONFIG_CIFS_SWN_UPCALL=y,
- CONFIG_CRYPTO_DEV_QAT_4XXX=m and
- CONFIG_HAVE_DYNAMIC_FTRACE_WITH_ARGS=y - Updated with the 5.10.16 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.16] - Updated with the 5.10.15 source tarball.
- [https://www.kernel.org/pub/linux/ker� x��������������p����� X ad{�yd fr��������0K 2 fro�$ " ���������������� 2 � 3 � ath in tlp context file BZ(1586329)
- Update brltty SELinux module
- Allow rabbitmq_t domain to create own tmp files/dirs
- Allow policykit_t mmap policykit_auth_exec_t files
- Allow ipmievd_t domain to read general certs
- Add sys_ptrace capability to pcp_pmie_t domain
- Allow squid domain to exec ldconfig
- Update gpg SELinux policy module
- Allow mailman_domain to read system network state
- Allow openvswitch_t domain to read neutron state and read/write fixed disk devices
- Allow antivirus_domain to read all domain system state
- Allow targetd_t domain to red gconf_home_t files/dirs
- Label /usr/libexec/bluetooth/obexd as obexd_exec_t
- Allow init_t domain to create netlink rdma sockets for ibacm policy
- Update corecmd_exec_shell() interface to allow caller domain to mmap shell_exec_t files
- Allow lvm_t domain to write files to all mls levels
- Add to su_role_template allow rule for creating netlink_selinux sockets
- Allow sysadm_t domain to mmap hwdb db
- Allow udev_t domain to mmap kernel modules
- Allow sysadm_screen_t to have capability dac_override and chown
- Allow sysadm_t domain to mmap journal
- Merge branch 'rawhide' of github.com:fedora-selinux/selinux-policy into rawhide
- Label /etc/systemd/system.control/ dir as systemd_unit_file_t
- Merge pull request #215 from bachradsusi/merge-conf-from-fedora
- Allow sysadm_t and staff_t domains to use sudo io logging
- Allow sysadm_t domain create sctp sockets
- Add snapperd_contexts to the policy
- Use system_u:system_r:unconfined_t:s0 in userhelper_context
- Remove unneeded system_u seusers mapping.
- Fedora targeted default user is unconfined_u, root is unconfined_u as well
- Update config to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.
- Change failsafe_context to unconfined_r:unconfined_t:s0
- Update lxc_contexts from Fedora config.tgz
- Add lxc_contexts config file
- Allow traceroute_t domain to exec bin_t binaries
- Allow systemd_passwd_agent_t domain to list sysfs Allow systemd_passwd_agent_t domain to dac_override
- Add new interface dev_map_sysfs()
- Allow sshd_keygen_t to execute plymouthd
- Allow systemd_networkd_t create and relabel tun sockets
- Add new interface postgresql_signull()
- Merge pull request #214 from wrabcak/fb-dhcpc
- Allow dhcpc_t creating own socket files inside /var/run/ Allow dhcpc_t creating netlink_kobject_uevent_socket, netlink_generic_socket, rawip_socket BZ(1585971)
- Allow confined users get AFS tokens
- Allow sysadm_t domain to chat via dbus
- Associate sysctl_kernel_t type with filesystem attribute - Fix typos in zabbix.te file
- Add missing requires
- Allow tomcat domain sends email
- Fix typo in sge policy
- Allow certmonger to sends emails
- Allow tomcat_t do mmap tomcat_tmp_t files
- Improve sge_rw_tcp_sockets interface
- Adding new interface: sge_rw_tcp_sockets()
- Update sge_execd_t domain with few rules
- Add new zabbix_run_sudo boolean
- Allow virtual machines to manage cephfs filesystems.
- Allow rhsmcertd_t domain to read sssd public files and stream connect to sssd
- Add dac_override capability to sendmail_t domain
- Fix typo in netutils.te file
- Update traceroute_t domain to allow create dccp sockets
- Update ssh_keysign policy
- Allow sshd_t domain to read/write sge tcp sockets - Update ctdb domain to support gNFS setup
- Allow authconfig_t dbus chat with policykit
- Allow lircd_t domain to read system state
- Revert "Allow fsdaemon_t do send emails BZ(1582701)"
- Typo in uuidd policy
- Allow tangd_t domain read certs
- Allow vpnc_t domain to read configfs_t files/dirs BZ(1583107)
- Allow vpnc_t domain to read generic certs BZ(1583100)
- Label /var/lib/phpMyAdmin directory as httpd_sys_rw_content_t BZ(1584811)
- Allow NetworkManager_ssh_t domain to be system dbud client
- Allow virt_qemu_ga_t read utmp
- Add capability dac_override to system_mail_t domain
- Update uuidd policy to reflect last changes from base branch
- Add cap dac_override to procmail_t domain
- Allow sendmail to mmap etc_aliases_t files BZ(1578569� x������A�������_����� X s {�y ������i���� �$
���������������� � m> 1:1.1.23-27 Jesse Keating <jkeating@redhat.com> John (J5) Palmieri <johnp@redhat.com> - 1:1.1.23-26 Tomas Mraz <tmraz@redhat.com> 1:1.1.23-25 Tim Waugh <twaugh@redhat.com> 1:1.1.23-24 Florian La Roche <laroche@redhat.com> 1:1.1.23-23 Tim Waugh <twaugh@redhat.com> 1:1.1.23-22 Tim Waugh <twaugh@redhat.com> 1:1.1.23-21 Tim Waugh <twaugh@redhat.com> 1:1.1.23-20 Tim Waugh <twaugh@redhat.com> 1:1.1.23-19 Tomas Mraz <tmraz@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.23-18 Tim Waugh <twaugh@redhat.com> 1:1.1.23-17 Tim Waugh <twaugh@redhat.com> 1:1.1.23-16 Tim Waugh <twaugh@redhat.com> 1:1.1.23-15 Tim Waugh <twaugh@redhat.com> 1:1.1.23-14 John (J5) Palmieri <johnp@redhat.com> John (J5) Palmieri <johnp@redhat.com> 1:1.1.23-13 Tomas Mraz <tmraz@redhat.com> 1:1.1.23-12 Tim Waugh <twaugh@redhat.com> 1:1.1.23-11 Tim Waugh <twaugh@redhat.com> 1:1.1.23-10 Tim Waugh <twaugh@redhat.com> 1:1.1.23-9 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.23-8 Tim Waugh <twaugh@redhat.com> 1:1.1.23-7 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.23-6 Tim Waugh <twaugh@redhat.com> 1:1.1.23-5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.23-4 Tim Waugh <twaugh@redhat.com> 1:1.1.23-3 Tim Waugh <twaugh@redhat.com> 1:1.1.23-2 Tim Waugh <twaugh@redhat.com> 1:1.1.23-1 Tim Waugh <twaugh@redhat.com> 1:1.1.23-0.rc1.1 Tim Waugh <twaugh@redhat.com> 1:1.1.22-6 Tim Waugh <twaugh@redhat.com> 1:1.1.22-5 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.22-4 Tim Waugh <twaugh@redhat.com> 1:1.1.22-3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.22-2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.22-1 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.5 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.4 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.3 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.2 Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.1 Tim Waugh <twaugh@redhat.com> 1:1.1.21-7 Tim Waugh <twaugh@redhat.com> 1:1.1.21-6 Tim Waugh <twaugh@redhat.com> 1:1.1.21-5 Warren Togami <wtogami@redhat.com> 1:1.1.21-4 Tim Waugh <twaugh@redhat.com> 1:1.1.21-3 Tim Waugh <twaugh@redhat.com> 1:1.1.21-2 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.2 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.9 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.8 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.7 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.6 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.5 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.4 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.3 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.2 Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc1.1 Elliot Lee <sopwith@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.21-0.rc1.2 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.21-0.rc1.1 Tim Waugh <twaugh@redhat.com> 1:1.1.20-15 Tim Waugh <twaugh@redhat.com> 1:1.1.20-14 Tim Waugh <twaugh@redhat.com> 1:1.1.20-13 Tim Waugh <twaugh@redhat.com> 1:1.1.20-12 Tim Waugh <twaugh@redhat.com> 1:1.1.20-11 Tim Waugh <twaugh@redhat.com> 1:1.1.20-10 Tim Waugh <twaugh@redhat.com> 1:1.1.20-9 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.20-8 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.20-7 Tim Waugh <twaugh@redhat.com> 1:1.1.20-6 Tim Waugh <twaugh@redhat.com> Elliot Lee <sopwith@redhat.com> Elliot Lee <sopwith@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.20-4 Tim Waugh <twaugh@redhat.com> 1:1.1.20-3 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.1.20-2 Tim Waugh <twaugh@redhat.com> 1:1.1.20-1 Thomas Woerner <twoerner@redhat.com> 1:1.1.19-16 Thomas Woerner <twoerner@redhat.com> 1:1.1.19-15 Tim Waugh <twaugh@redhat.com> 1:1.1.19-14 Ti� x��������������O����� X ��y ���������b����* 8 �$ : ���������������� * ) + � ).
- Better paper-out detection patch (bug #241589). * Revert paper-out detection for the moment. - Applied fix for rotated PDFs (bug #236753, STR #2348). - Initscript fixes (bug #237955). - Until bug #236736 is fixed, work around the kernel usblp driver's
quirks so that we can detect paper-out conditions. - Fixed 'cancel' man page (bug #234088).
- Added empty subscriptions.conf file to make sure it gets the right
SELinux file context. - Send D-BUS QueueChanged signal on printer state changes. - Relay printer-state-message values in the IPP backend (STR #2109). - Don't clear printer-state-reasons after job completion (STR #2323). - Small improvement for AF_UNIX auth patch. - LSPP: Updated patch for line-wrapped labels (bug #228107). - 1.2.10. - Added %{_datadir}/ppd for LSB (bug #232893). - 1.2.9. - Better UNIX domain sockets authentication patch after feedback from
Uli (bug #230613). - Implemented SCM_CREDENTIALS authentication for UNIX domain sockets
(bug #230613). - Updated LSPP patch (bug #229673). - Applied fix for STR #2264 (bug #230116). - 1.2.8. - Removed logrotate config file and maxlogsize patch (bug #227369). Now
CUPS is in charge of rotating its own logs, and defaults to doing so once
they get to 1Mb in size. - Don't even reload CUPS when rotating logs (bug #215024). - Requires tmpwatch for the cron.daily script (bug #218901). - Fixed If-Modified-Since: handling in libcups (bug #217556, STR #2133).
- Fixed extra EOF in pstops output (bug #216154, STR #2111).
- Use upstream patch for STR #2121. - Better LSPP fix for bug #216855. - Use translated string for password prompt (STR #2121). - Another LSPP fix (bug #216669).
- Fixed LSPP SELinux check (bug #216855).
- Increased PPD timeout in copy_model() (bug #216065). - Run the serial backend as root (bug #212577). - 1.2.7. - Fixed LogFilePerm. - Don't use getpass() (bug #215133). - Reload, don't restart, when logrotating (bug #215023). - Fixed pdftops.conf (bug #214611). - 1.2.6. - One more D-Bus signal fix (bug #212763). - Restore missed JobQueuedRemote D-Bus signal in ipp backend (part of
bug #212763). - LSPP patch fix (bug #213498). - Send QueueChanged D-Bus signal on all job state changes. - Added filter and PPD for text-only printer (bug #213030). - Fixed support for /dev/ttyUSB devices (bug #212577, STR #2061).
- Fixed parallel backend (bug #213021, STR #2056). - Ship a real lpoptions file to make sure it is world-readable (bug #203510). - 1.2.5. - Feature-complete LSPP patch from Matt Anderson (bug #210542). - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
to change it to when using directed broadcasts from another subnet
(bug #204373). - LSPP patch didn't get updated properly in 1:1.2.4-6. Use the right
patch this time (bug #208676). LSPP re-enabled. - LSPP patch disabled, since it still causes cupsd to crash. - Updated LSPP patch from Matt Anderson (bug #208676). - Updated LSPP patch from Matt Anderson (bug #208676). - rebuilt for unwind info generation, broken in gcc-4.1.1-21 - Add '--help' option to lpr command (bug #206380, STR #1989). - 1.2.4 (bug #206763). No longer need str1968 patch. - Fixed STR #1968 properly (bug #205619). - No longer need language patch. - Applied upstream patch to fix STR #1968 (bug #205619). - %ghost %config(noreplace) /etc/cups/lpoptions (bug #59022). - Don't overwrite snmp.c.
- No longer need str1893 patch. - 1.2.3. No longer need str1880 or str1881 patches. - Removed dest-cache patch. - Fixed another LSPP patch problem (bug #203784).
- Updated fix for STR #1881 from upstream. - Fixed another LSPP patch problem noted by Erwin Rol. - Fixed LSPP patch passing NULL to strcmp (bug #203784). - Updated LSPP patch (bug #203376). - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
(#203001) - Own notifier directory (bug #203085). - Apply patch to fix STR #1880 (bug #200205). - Use upstream patch to fix STR #1881. - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
- Applied patch to fix STR #1893 (bug #201800). - Try different fix for� x�������������?����� X -lA�yd ac���������
����� 1230�$
���������������� �� �� �� � ) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failures - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of systzdata patch - fix build with autoconf 2.6x - update to 5.3.1
- remove openssl patch (merged upstream)
- add provides for php-pecl-json
- add prod/devel php.ini in doc - use libedit instead of readline to resolve licensing issues - rebuilt with new openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - rediff systzdata patch - update to v6 of systzdata patch; various fixes - update to v5 of systzdata patch; parses zone.tab and extracts
timezone->{country-code,long/lat,comment} mapping table - update to 5.3.0
- remove ncurses, dbase, mhash extensions
- add enchant, sqlite3, intl, phar, fileinfo extensions
- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
- sync with upstream "production" php.ini - update to 5.2.10
- add interbase sub-package - update to 5.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - add recode support, -recode subpackage (#106755)
- add -zts subpackage with ZTS-enabled build of httpd SAPI
- adjust php.conf to use -zts SAPI build for worker MPM - fix patch fuzz, renumber patches - drop obsolete configure args
- drop -odbc patch (#483690) - split out sysvshm, sysvsem, sysvmsg, posix into php-process - move wddx to php-xml, build curl shared in -common
- remove BR for expat-devel, bogus configure option - rebuild for new MySQL - libtool 2 workaround for phpize (#476004)
- add missing php_embed.h (#457777) - update to 5.2.8 - libtool 2 workaround - update to 5.2.7
- enable pdo_dblib driver in php-mssql - tweak Summary, thanks to Richard Hughes - move gd_README to php-gd
- update to r4 of systzdata patch; introduces a default timezone
name of "System/Localtime", which uses /etc/localtime (#469532) - enable XPM support in php-gd
- Fix BR for php-gd - enable T1lib support in php-gd - update to 5.2.6
- sync default php.ini with upstream
- drop extension_dir from default php.ini, rely on hard-coded
default, to make php-common multilib-safe (#455091)
- update to r3 of systzdata patch - split pspell extension out into php-spell (#443857) - Autorebuild for GCC 4.3 - ext/date: use system timezone database - rebuild for libc-client bump - Rebuild for openssl bump - update to 5.2.5 - correct pcre BR version (#333021)
- restore metaphone fix (#205714)
- add READMEs to php-cli - update to 5.2.4 - rebuild for fixed APR - add ldconfig post/postun for -embedded (Hans de Goede) - add php-embedded sub-package - fix build with new glibc
- fix License - define php_extdir in macros.php - obsolete php-dbase - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
- enable dbase extension and package in -common - update to 5.2.3 (thanks to Jeff Sheltren) - fix php-pdo *_arg_force_ref global symbol abuse (#216125) - rebuild against uw-imap-devel - update to 5.2.2
- synch changes from upstream recommended php.ini - enable SASL support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for n� x��������������.����� X psA�yedor�>����������L dora�$ ���������������� �L "! �L � rg> - 1:1.4.10-4 Lennart Poettering <lpoetter@redhat.com> - 1:1.4.10-3 David Zeuthen <davidz@redhat.com> - 1:1.4.10-2 Colin Walters <walters@verbum.org> - 1:1.4.10-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.4.0-3 Matthias Clasen <mclasen@redhat.com> - 1:1.4.0-2 Lennart Poettering <lpoetter@redhat.com> - 1:1.4.0-1 Lennart Poettering <lpoetter@redhat.com> - 1:1.3.2-0.1.885483.el8 Lennart Poettering <lpoetter@redhat.com> - 1:1.3.2-0.0.885483 Lennart Poettering <lpoetter@redhat.com> - 1:1.3.1-1 Colin Walters <walters@verbum.org> - 1:1.2.24-1 Colin Walters <walters@verbum.org> - 1:1.2.22-2 Colin Walters <walters@verbum.org> - 1:1.2.22-1 Colin Walters <walters@verbum.org> - 1:1.2.20-1 Colin Walters <walters@verbum.org> - 1:1.2.18-1 Colin Walters <walters@verbum.org> - 1:1.2.16-11 Matthias Clasen <mclasen@redhat.com> - 1:1.2.16-10 Ray Strode <rstrode@redhat.com> - 1:1.2.16-9 Matthias Clasen <mclasen@redhat.com> - 1:1.2.16-8 Matthias Clasen <mclasen@redhat.com> - 1:1.2.16-7 Matthias Clasen <mclasen@redhat.com> - 1:1.2.16-6 Tomas Mraz <tmraz@redhat.com> - 1:1.2.16-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.2.16-4 Colin Walters <walters@redhat.co> - 1:1.2.16-3 Colin Walters <walters@redhat.com> - 1:1.2.16-2 Colin Walters <walters@redhat.com> - 1:1.2.16-1 Matthias Clasen <mclasen@redhat.com> - 1:1.2.14-2 Colin Walters <walters@verbum.org> - 1:1.2.14-1 Colin Walters <walters@verbum.org> - 1:1.2.12-1 Matthias Clasen <mclasen@redhat.com> - 1:1.2.4.4permissive-4 Matthias Clasen <mclasen@redhat.com> - 1:1.2.4.4permissive-2 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.2.4.4permissive-2 Colin Walters <walters@redhat.com> - 1:1.2.4.4.permissive-1 Colin Walters <walters@redhat.com> - 1:1.2.4.2.permissive-1 Colin Walters <walters@redhat.com> - 1:1.2.4-2 Colin Walters <walters@redhat.com> - 1.2.8-4 Colin Walters <walters@redhat.com> - 1.2.8-3 Colin Walters <walters@redhat.com> - 1.2.8-2 Colin Walters <walters@redhat.com> - 1.2.8-1 Colin Walters <walters@redhat.com> - 1.2.6-1 Matthias Clasen <mclasen@redhat.com> - 1.2.4-2 Colin Walters <walters@redhat.com> - 1.2.4-1 David Zeuthen <davidz@redhat.com> - 1.2.3-2.el8 Colin Walters <walters@redhat.com> - 1.2.3-1 Matthias Clasen <mclasen@redhat.com> - 1.2.1-7 Matthias Clasen <mclasen@redhat.com> - 1.2.1-6 Casey Dahlin <cdahlin@redhat.com> - 1.2.1-5 Casey Dahlin <cdahlin@redhat.com> - 1.2.1-4 Ray Strode <rstrode@redhat.com> - 1.2.1-3 Ray Strode <rstrode@redhat.com> - 1.2.1-2 John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1 David Zeuthen <davidz@redhat.com> - 1.1.20-1.el8 Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.1.4-6 Adam Tkac <atkac redhat com> - 1.1.4-5 Matthias Clasen <mclasen@redhat.com> - 1.1.4-4 Ray Strode <rstrode@redhat.com> - 1.1.4-3 Matthias Clasen <mclasen@redhat.com> - 1.1.4-2 John (J5) Palmieri <johnp@redhat.com> - 1.1.4-1 John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1 John (J5) Palmieri <johnp@redhat.com> - 1.1.2-9 Bill Nottingham <notting@redhat.com> - 1.1.2-8 Matthias Clasen <mclasen@redhat.com> - 1.1.2-7 Bill Nottingham <notting@redhat.com> - 1.1.2-6.el8 Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el8 David Zeuthen <davidz@redhat.com> - 1.1.2-4.el8 Adel Gadllah <adel.gadllah@gmail.com> - 1.1.2-3 David Zeuthen <davidz@redhat.com> - 1.1.2-2.el8 Matthias Clasen <mclasen@redhat.com> - 1.1.2-1 Matthias Clasen <mclasen@redhat.com> - 1.1.1-3 Ray Strode <rstrode@redhat.com> - 1.1.1-2 Ray Strode <rstrode@redhat.com> - 1.1.1-1 Matthias Clasen <mclasen@redhat.com> - 1.0.2-6 Matthias Clasen <mclasen@redhat.com> - 1.0.2-5 Matthias Clasen <mclasen@redhat.com> - 1.0.2-4 David Zeuthen <davidz@redhat.com> - 1.0.2-3 Matthias Clasen <mclasen@redhat.com> - 1.0.2-2 Matthias Clasen <mclasen@redhat.com> - 1.0.2-1 David Zeuthen <davidz@redhat.com> - 1.0.1-3.el8 Matthias Clasen <mclasen@redhat.com> - 1.0.1-2 Ray Strode <rstrode@redhat.com> - 1.0.1-1 John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2 John (J5) Palmieri <johnp@redhat.com> - 1.0.0-1 Ray Strode <rstrode@redhat.com> - 0.95-3 John (J5) Palmieri <joh� x�����0 ������� ����� X f ��y �`�������;������ �$ j ���������������� �� �� �� � if it uses TLS
- Allow colord to read ini files which are labeled as bin_t
- Allow dirsrvadmin sys_resource and setrlimit to use ulimit
- Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.
- Also lists /var and /var/spool directories
- Add openl2tpd to l2tpd policy
- qpidd is reading the sysfs file - Change usbmuxd_t to dontaudit attempts to read chr_file
- Add mysld_safe_exec_t for libra domains to be able to start private mysql domains
- Allow pppd to search /var/lock dir
- Add rhsmcertd policy - Update to upstream - More fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git - Fix spec file to not report Verify errors - Add dspam policy
- Add lldpad policy
- dovecot auth wants to search statfs #713555
- Allow systemd passwd apps to read init fifo_file
- Allow prelink to use inherited terminals
- Run cherokee in the httpd_t domain
- Allow mcs constraints on node connections
- Implement pyicqt policy
- Fixes for zarafa policy
- Allow cobblerd to send syslog messages - Add policy.26 to the payload
- Remove olpc stuff
- Remove policygentool - Fixes for zabbix
- init script needs to be able to manage sanlock_var_run_...
- Allow sandlock and wdmd to create /var/run directories...
- mixclip.so has been compiled correctly
- Fix passenger policy module name - Add mailscanner policy from dgrift
- Allow chrome to optionally be transitioned to
- Zabbix needs these rules when starting the zabbix_server_mysql
- Implement a type for freedesktop openicc standard (~/.local/share/icc)
- Allow system_dbusd_t to read inherited icc_data_home_t files.
- Allow colord_t to read icc_data_home_t content. #706975
- Label stuff under /usr/lib/debug as if it was labeled under / - Fixes for sanlock policy
- Fixes for colord policy
- Other fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Add rhev policy module to modules-targeted.conf - Lot of fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Allow logrotate to execute systemctl
- Allow nsplugin_t to getattr on gpmctl
- Fix dev_getattr_all_chr_files() interface
- Allow shorewall to use inherited terms
- Allow userhelper to getattr all chr_file devices
- sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
- Fix labeling for ABRT Retrace Server - Dontaudit sys_module for ifconfig
- Make telepathy and gkeyringd daemon working with confined users
- colord wants to read files in users homedir
- Remote login should be creating user_tmp_t not its own tmp files - Fix label for /usr/share/munin/plugins/munin_* plugins
- Add support for zarafa-indexer
- Fix boolean description
- Allow colord to getattr on /proc/scsi/scsi
- Add label for /lib/upstart/init
- Colord needs to list /mnt - Forard port changes from F15 for telepathy
- NetworkManager should be allowed to use /dev/rfkill
- Fix dontaudit messages to say Domain to not audit
- Allow telepathy domains to read/write gnome_cache files
- Allow telepathy domains to call getpw
- Fixes for colord and vnstatd policy - Allow init_t getcap and setcap
- Allow namespace_init_t to use nsswitch
- aisexec will execute corosync
- colord tries to read files off noxattr file systems
- Allow init_t getcap and setcap - Add support for ABRT retrace server
- Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
- Allow telepath_msn_t to read /proc/PARENT/cmdline
- ftpd needs kill capability
- Allow telepath_msn_t to connect to sip port
- keyring daemon does not work on nfs homedirs
- Allow $1_sudo_t to read default SELinux context
- Add label for tgtd sock file in /var/run/
- Add apache_exec_rotatelogs interface
- allow all zaraha domains to signal themselves, server writes to /tmp
- Allow syslog to read the process state
- Add label for /usr/lib/chromium-browser/chrome
- Remove the telepathy transition from unconfined_t
- Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
- Allow initrc_t domain to manage abrt pid files
- Add support for A� x�������������x
����� X ec4�yg> 78���������� remi�$ ���������������� � editors (#1614979) - Include Esperanto (eo) in glibc-all-langpacks (#1644303) - stdlib/tst-setcontext9 test suite failure on ppc64le (#1623536) - Add missing ENDBR32 in start.S (#1631730) - Fix bug in generic strstr with large needles (#1631722) - stdlib/tst-setcontext9 test suite failure (#1623536) - gethostid: Missing NULL check for gethostbyname_r (#1631293) - Provide compatibility support for linking against libpthread_nonshared.a
(#1614439) - Add python3-devel build dependency (#1625592) - Drop glibc-ldflags.patch and valgrind bug workaround (#1623456) - regex: Fix memory overread when pattern contains NUL byte (#1622678) - nptl: Fix waiters-after-spinning case in pthread_cond_broadcast (#1622675) - nss_files aliases database file stream leak (#1615790) - Fix static analysis warning in nscd user name allocation (#1615784) - error, error_at_line: Add missing va_end calls (#1615781) - Remove abort() warning in manual (#1577365) - Fix regression in readdir64@GLIBC_2.1 compat symbol (#1614253) - Log /proc/sysinfo if available (on s390x) - Honor %{valgrind_arches} - Update to glibc 2.28 release tarball:
- Translation updates
- x86/CET: Fix property note parser (swbz#23467)
- x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458) - Auto-sync with upstream branch master,
commit af86087f02a5522d8801a11d8381e04f95e33162:
- x86/CET: Don't parse beyond the note end
- Fix Linux fcntl OFD locks tests on unsupported kernels
- x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
- x86: Correct index_cpu_LZCNT (swbz#23456)
- Fix string/tst-xbzero-opt if build with gcc head - Build with --enable-cet on x86_64, i686
- Auto-sync with upstream branch master,
commit cfba5dbb10cc3abde632b46c60c10b2843917035:
- Keep expected behaviour for [a-z] and [A-z] (#1607286)
- Additional ucontext tests
- Intel CET enhancements
- ISO C11 threads support
- Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
- New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
- os_RU: Add alternative month names (swbz#23140)
- powerpc64: Always restore TOC on longjmp (swbz#21895)
- dsb_DE locale: Fix syntax error and add tests (swbz#23208)
- Improve performance of the generic strstr implementation
- regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
- Fix out of bounds access in findidxwc (swbz#23442) - Fix file list for glibc RPM packaging (#1601011). - Add POWER9 multilib (downstream only) - Auto-sync with upstream branch master,
commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
- Install <bits/statx.h> header
- Put the correct Unicode version number 11.0.0 into the generated files - Work around valgrind issue on i686 (#1600034) - Auto-sync with upstream branch master,
commit fd70af45528d59a00eb3190ef6706cb299488fcd:
- Add the statx function
- regexec: Fix off-by-one bug in weight comparison (#1582229)
- nss_files: Fix re-reading of long lines (swbz#18991)
- aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
- aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
- conform/conformtest.pl: Escape literal braces in regular expressions
- x86: Use AVX_Fast_Unaligned_Load from Zen onwards. - Remove ppc64 multilibs - Auto-sync with upstream branch master,
commit 3a885c1f51b18852869a91cf59a1b39da1595c7a. - Enable build flags inheritance for nonshared flags - Add annobin annotations to assembler code (#1548438) - Enable -D_FORTIFY_SOURCE=2 for nonshared code - Auto-sync with upstream branch master,
commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
- New locale: dsb_DE (Lower Sorbian) - Drop glibc-deprecate_libcrypt.patch. Variant applied upstream. (#1566464)
- Drop glibc-linux-timespec-header-compat.patch. Upstreamed.
- Auto-sync with upstream branch master,
commit e69d994a63afc2d367f286a2a7df28cbf710f0fe. - Drop glibc-rh1315108.patch. extend_alloca was removed upstream. (#1315108)
- Auto-sync with upstream branch master,
commit c49e18222e4c40f21586dabced8a49732d946917. - Compatibility fix for <sys/stat.h> and <linux/time.h> - Auto-sync with upstream branch master,
commit f496b28e61d034� x������������������� X eta�yin/n0c ������ perv�$ ���������������� � � � A , ? t d � � � � � X � $ � ( � 0 � 4 � 8 � N � b � h p � �
l
0 � � V x � l �
U (
� 8
� 9
� : F G H t I � X � Y � \ ( ] | ^ � b � d � e � f � l � t u h v � z � $ � ( � . � p � �
� � � g $ h ( C php-5.4-lc-pdo 5.4.45 3.el8 A database access abstraction module for PHP applications The php-pdo package contains a dynamic shared object that will add
a database access abstraction layer to PHP. This module provides
a common interface for accessing MySQL, PostgreSQL or other
databases. _ng�builder 1�PHP Development/Languages http://www.php.net/ linux x86_64 / ; A = 7 �� `� � �x HP 9 : < 3 7����������������A�A�A�A�A�A� _ngt_ngt_ngt_ngt_ngt_ngN_ngN_ngN_ngN_ngO_ng�_ng�_ng�_ng�_ng�_ng�_ng�_ng�_ng�_ng�_ng�454104f3a4abaa1dd80d2e797a316cad1f7ba8d09d343d6115ed09946d247f75 dbec7998e5062c1a972e289f2ee6bbbea581e77f155af1a8089d3ed193dda00a 84d6f73b7ca497290b6c4cc2d44ff32df8b2afa3573b5e7fbd07667082597fcf 63294b8fc95e9c58c9b3d274404964c36fe5732144903eec3a5c0f190d46d591 2b7bbd57423bd98c23756f4209240230ac834466c3eaeaf048a7a59f6523c42c f295209eac4448423c8146f379e66a1f9c7aa3c6c694a8380f674c7f66af850a e1ddebfe6b09a29f38b367646c67b6b199cad19e4680bfef9124c6e2b2c17910 0aa92fbf0cc5ae997ad7db91da2162642443a7c1b64f9584b72ed329d8d7ce85 dac2421b906be68fffbf1233802c0e78e44fdfcdcab8957f045d71c2cbdb7374 09b1f3461a575080d4611984536813a80971be3eff5038d720f1f2e96d7601aa ../../../../opt/lc/php/5.4/lib64/php/modules/pdo_dblib.so ../../../../opt/lc/php/5.4/lib64/php/modules/pdo_sqlite.so ../../../../opt/lc/php/5.4/lib64/php/modules/pdo_firebird.so ../../../../opt/lc/php/5.4/lib64/php/modules/pdo.so ../../../../opt/lc/php/5.4/lib64/php/modules/sqlite3.so root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root php-5.4-lc-5.4.45-3.el8.src.rpm ������������������������������������������������������������������������������������config(php-5.4-lc-pdo) php-5.4-lc-pdo php-5.4-lc-pdo(x86-64) php-5.4-lc-pdo_sqlite php-5.4-lc-pdo_sqlite(x86-64) php-5.4-lc-sqlite3 php-5.4-lc-sqlite3(x86-64) @ @ @ @ @ @ @ @ @ @
@ config(php-5.4-lc-pdo) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libfbclient.so.2()(64bit) librt.so.1()(64bit) libsqlite3.so.0()(64bit) libsybdb.so.5()(64bit) php-5.4-lc-common(x86-64) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 5.4.45-3.el8 5.4.45-3.el8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.2 _m�_d�@ZF.@Z �@Z��YS�@Y5G�X�@Vf@U�@U�U��U�@UȒ@U�3@U[%�U0��U h�TR(@Thiago Linhares <thiago.linhares@locaweb.com.br> - 5.4.45-3.lc Thiago Linhares <thiago.linhares@locaweb.com.br> - 5.4.45-1.lc Andre Luis Lopes <andre.llopes@locaweb.com.br> - 5.4.46-9.lc Andre Ferraz <andre.ferraz@locaweb.com.� x�������������h������ X td~�ynet/�z������h����� chai�$ x ���������������� � � � � ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� x�������������������� X et5�yedor��������O��� 3-9 �$ ���������������� � 2f579bf794c71b80e9c7d0b1b5. - Auto-sync with upstream branch master,
commit f2857da7cdb65bfad75ee30981f5b2fde5bbb1dc. - Auto-sync with upstream branch master,
commit 14beef7575099f6373f9a45b4656f1e3675f7372:
- iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270) - Inherit the -msse2 build flag as well (#1592212) - Modernise nsswitch.conf defaults (#1581809)
- Adjust build flags inheritence from redhat-rpm-config
- Auto-sync with upstream branch master,
commit 104502102c6fa322515ba0bb3c95c05c3185da7a. - Auto-sync with upstream branch master,
commit c1dc1e1b34873db79dfbfa8f2f0a2abbe28c0514. - Auto-sync with upstream branch master,
commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
- CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
- Drop glibc-rh1452750-allocate_once.patch,
glibc-rh1452750-libidn2.patch. Applied upstream. - Auto-sync with upstream branch master,
commit 8f145c77123a565b816f918969e0e35ee5b89153. - Do not run telinit u on upgrades (#1579225)
- Auto-sync with upstream branch master,
commit 632a6cbe44cdd41dba7242887992cdca7b42922a. - Avoid exporting some Sun RPC symbols with default versions (#1577210)
- Inherit the -mstackrealign flag if it is set
- Inherit compiler flags in the original order
- Auto-sync with upstream branch master,
commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
- CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786) - Use /usr/bin/python3 for benchmarks scripts (#1577223) - Auto-sync with upstream branch master,
commit 0085be1415a38b40a5a1a12e49368498f1687380. - Auto-sync with upstream branch master,
commit 583a27d525ae189bdfaa6784021b92a9a1dae12e. - Auto-sync with upstream branch master,
commit d39c0a459ef32a41daac4840859bf304d931adab:
- CVE-2017-18269: memory corruption in i386 memmove (#1580934) - Auto-sync with upstream branch master,
commit fbce6f7260c3847f14dfa38f60c9111978fb33a5. - Auto-sync with upstream branch master,
commit 700593fdd7aef1e36cfa8bad969faab76a6facda. - Auto-sync with upstream branch master,
commit 7108f1f944792ac68332967015d5e6418c5ccc88. - Auto-sync with upstream branch master,
commit da6d4404ecfd7eacba8c096b0761a5758a59da4b. - Enable annobin annotations (#1548438) - Auto-sync with upstream branch master,
commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
- Remove spurios reference to libpthread_nonshared.a - Switch back to upstream master branch
- Drop glibc-rh1013801.patch, applied upstream.
- Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
- Auto-sync with upstream branch master,
commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa. - Inherit as many flags as possible from redhat-rpm-config (#1550914) - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
- riscv64: Disable valgrind smoke test on this architecture. - Spec file cleanups:
- Remove %defattr(-,root,root)
- Use shell to run ldconfig %transfiletrigger
- Move %transfiletrigger* to the glibc-common subpackage
- Trim changelog
- Include ChangeLog.old in the source RPM - Linux: use reserved name __key in pkey_get (#1542643)
- Auto-sync with upstream branch release/2.27/master,
commit 56170e064e2b21ce204f0817733e92f1730541ea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to released glibc 2.27.
- Auto-sync with upstream branch master,
commit 23158b08a0908f381459f273a984c6fd328363cb. - Disable -fstack-clash-protection on riscv64:
not supported even by GCC 7.3.1 on this architecture. - Explicitly run ldconfig in the buildroot
- Do not run ldconfig from scriptlets
- Put triggers into the glibc-common package, do not pass arguments to ldconfig - Auto-sync with upstream branch master,
commit cdd14619a713ab41e26ba700add4880604324dbb:
- libnsl: Turn remaining symbols into compat symbols (swbz#22701)
- be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
Add alternative month names (swbz#10871)
- x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
- aarch64: Revert the change of the __reserved member of mcontext_t -� x������������������� X d ��y �������� �������� �$ ���������������� � � � � erge pull request #194 from hogarthj/certbot_policy
- get the correct cert_t context on certbot certificates bz#1289778
- Label /dev/ss0 as gpfs_device_t - Allow abrt_t to send mails. - Add radius_use_jit boolean
- Allow nfsd_t domain to create sysctls_rpc_t files
- add the policy required for nextcloud
- Allow can_load_kernmodule to load kernel modules. BZ(1426741)
- Create kernel_create_rpc_sysctls() interface - Remove ganesha from gluster module and create own module for ganesha
- FIx label for /usr/lib/libGLdispatch.so.0.0.0 - Dontaudit xdm_t wake_alarm capability2
- Allow systemd_initctl_t to create and connect unix_dgram sockets
- Allow ifconfig_t to mount/unmount nsfs_t filesystem
- Add interfaces allowing mount/unmount nsfs_t filesystem
- Label /usr/lib/libGLdispatch.so.0.0.0 as textrel_shlib_t BZ(1419944) - Allow syslog client to connect to kernel socket. BZ(1419946) - Allow shiftfs to use xattr SELinux labels
- Fix ssh_server_template by add sshd_t to require section. - Merge pull request #187 from rhatdan/container-selinux
- Allow rhsmcertd domain signull kernel.
- Allow container-selinux to handle all policy for container processes
- Fix label for nagios plugins in nagios file conxtext file
- su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
- Add SELinux support for systemd-initctl daemon
- Add SELinux support for systemd-bootchart
- su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
- Add module_load permission to can_load_kernmodule
- Add module_load permission to class system
- Add the validate_trans access vector to the security class
- Restore connecto permssions for init_t - Allow kdumpgui domain to read nvme device
- Add amanda_tmpfs_t label. BZ(1243752)
- Fix typo in sssd interface file
- Allow sssd_t domain setpgid BZ(1411437)
- Allow ifconfig_t domain read nsfs_t
- Allow ping_t domain to load kernel modules.
- Allow systemd to send user information back to pid1. BZ(1412750)
- rawhide-base: Fix wrong type/attribute flavors in require blocks - Allow libvirt daemon to create /var/chace/libvirt dir.
- Allow systemd using ProtectKernelTunables securit feature. BZ(1392161)
- F26 Wide change: Coredumps enabled by default. Allowing inherits process limits to enable coredumps.BZ(1341829) - After the latest changes in nfsd. We should allow nfsd_t to read raw fixed disk. For more info see: BZ(1403017)
- Tighten security on containe types
- Make working cracklib_password_check for MariaDB service
- Label 20514 tcp/udp ports as syslogd_port_t Label 10514 tcp/udp portas as syslog_tls_port_t BZ(1410505) -Allow thumb domain sendto via dgram sockets. BZ(1398813)
- Add condor_procd_t domain sys_ptrace cap_userns BZ(1411077)
- Allow cobbler domain to create netlink_audit sockets BZ(1384600)
- Allow networkmanager to manage networkmanager_var_lib_t lnk files BZ(1408626)
- Add dhcpd_t domain fowner capability BZ(1409963)
- Allow thumb to create netlink_kobject_uevent sockets. BZ(1410942)
- Fix broken interfaces
- Allow setfiles_t domain rw inherited kdumpctl tmp pipes BZ(1356456)
- Allow user_t run systemctl --user BZ(1401625) - Add tlp_var_lib_t label for /var/lib/tlp directory BZ(1409977)
- Allow tlp_t domain to read proc_net_t BZ(1403487)
- Merge pull request #179 from rhatdan/virt1
- Allow tlp_t domain to read/write cpu microcode BZ(1403103)
- Allow virt domain to use interited virtlogd domains fifo_file
- Fixes for containers
- Allow glusterd_t to bind on glusterd_port_t udp ports.
- Update ctdbd_t policy to reflect all changes.
- Allow ctdbd_t domain transition to rpcd_t - Allow pptp_t to read /dev/random BZ(1404248)
- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
- Allow systemd to stop glusterd_t domains.
- Merge branch 'rawhide-base' of github.com:fedora-selinux/selinux-policy into rawhide-base
- Label /usr/sbin/sln as ldconfig_exec_t BZ(1378323)
- Revert "Allow an domain that has an entrypoi� x�������������к����� X S9�ylien��������H�������� bet�$ 2 ���������������� �� �� �� � -4 Remi Collet <rcollet@redhat.com> 5.4.8-3 Joe Orton <jorton@redhat.com> - 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-3 Remi Collet <rcollet@redhat.com> 5.4.8-2.1 Remi Collet <rcollet@redhat.com> 5.4.8-2 Remi Collet <rcollet@redhat.com> 5.4.8-1.2 Remi Collet <rcollet@redhat.com> 5.4.8-1 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <rcollet@redhat.com> 5.4.7-2 Remi Collet <rcollet@redhat.com> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.7-10 Remi Collet <remi@fedoraproject.org> 5.4.7-9 Remi Collet <rcollet@redhat.com> 5.4.7-8 Remi Collet <rcollet@redhat.com> 5.4.7-7 Remi Collet <rcollet@redhat.com> 5.4.7-6 Remi Collet <rcollet@redhat.com> 5.4.7-5 Remi Collet <rcollet@redhat.com> 5.4.7-4 Remi Collet <rcollet@redhat.com> 5.4.7-3 Remi Collet <remi@fedoraproject.org> 5.4.7-2 Remi Collet <remi@fedoraproject.org> 5.4.7-1 Remi Collet <remi@fedoraproject.org> 5.4.6-2 Remi Collet <remi@fedoraproject.org> 5.4.6-1 Remi Collet <remi@fedoraproject.org> 5.4.5-1 Remi Collet <remi@fedoraproject.org> 5.4.4-4 Remi Collet <remi@fedoraproject.org> 5.4.4-3 Remi Collet <remi@fedoraproject.org> 5.4.4-2 Remi Collet <remi@fedoraproject.org> 5.4.4-1 Remi Collet <remi@fedoraproject.org> 5.4.3-1 Remi Collet <remi@fedoraproject.org> 5.4.2-1 Remi Collet <remi@fedoraproject.org> 5.4.1-1 Joe Orton <jorton@redhat.com> - 5.4.0-6 Remi Collet <remi@fedoraproject.org> 5.4.0-5 Joe Orton <jorton@redhat.com> - 5.4.0-4 Joe Orton <jorton@redhat.com> - 5.4.0-3 Joe Orton <jorton@redhat.com> - 5.4.0-2 Remi Collet <remi@fedoraproject.org> 5.4.0-1 Remi Collet <remi@fedoraproject.org> 5.4.0-0.4.RC8 Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7 Remi Collet <remi@fedoraproject.org> 5.4.0-0.2.RC6 Remi Collet <remi@fedoraproject.org> 5.4.0-0.1.RC6 Remi Collet <remi@fedoraproject.org> 5.3.8-4.4 Remi Collet <remi@fedoraproject.org> 5.3.8-4.3 Adam Jackson <ajax@redhat.com> - 5.3.8-4.2 Marcela Mašláňová <mmaslano@redhat.com> - 5.3.8-3.2 Peter Schiffer <pschiffe@redhat.com> - 5.3.8-3.1 Remi Collet <remi@fedoraproject.org> 5.3.8-3 Remi Collet <remi@fedoraproject.org> 5.3.8-2 Remi Collet <remi@fedoraproject.org> 5.3.8-1 Remi Collet <remi@fedoraproject.org> 5.3.7-1 Joe Orton <jorton@redhat.com> - 5.3.6-4 Remi Collet <Fedora@famillecollet.com> 5.3.6-3 Remi Collet <Fedora@famillecollet.com> 5.3.6-2 Remi Collet <Fedora@famillecollet.com> 5.3.6-1 Joe Orton <jorton@redhat.com> - 5.3.5-6 Caolán McNamara <caolanm@redhat.com> 5.3.5-5 Remi Collet <Fedora@famillecollet.com> 5.3.5-4 Remi Collet <Fedora@famillecollet.com> 5.3.5-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.5-2 Remi Collet <Fedora@famillecollet.com> 5.3.5-1 Remi Collet <rpms@famillecollet.com> 5.3.4-2 Remi Collet <rpms@famillecollet.com> 5.3.4-1.1 Remi Collet <Fedora@famillecollet.com> 5.3.4-1 Remi Collet <Fedora@famillecollet.com> 5.3.3-5 Joe Orton <jorton@redhat.com> - 5.3.3-4 Joe Orton <jorton@redhat.com> - 5.3.3-3 Remi Collet <Fedora@famillecollet.com> 5.3.3-2 Remi Collet <Fedora@famillecollet.com> 5.3.3-1 Remi Collet <Fedora@famillecollet.com> 5.3.2-3 Caolán McNamara <caolanm@redhat.com> 5.3.2-2 Remi Collet <Fedora@famillecollet.com> 5.3.2-1 Joe Orton <jorton@redhat.com> - 5.3.1-3 Joe Orton <jorton@redhat.com> - 5.3.1-2 Remi Collet <Fedora@famillecollet.com> 5.3.1-1 Tom "spot" Callaway <tcallawa@redhat.com> - 5.3.0-7 Tomas Mraz <tmraz@redhat.com> - 5.3.0-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.3.0-5 Joe Orton <jorton@redhat.com> 5.3.0-4 Joe Orton <jorton@redhat.com> 5.3.0-3 Joe Orton <jorton@redhat.com> 5.3.0-2 Remi Collet <Fedora@famillecollet.com> 5.3.0-1 Remi Collet <Fedora@famillecollet.com> 5.2.10-1 Remi Collet <Fedora@FamilleCollet.com> - 5.2.9-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.2.8-10 Joe Orton <jorton@redhat.com> 5.2.8-9 Joe Orton <jorton@redhat.com> 5.2.8-8 Joe Orton <jorton@redhat.com> 5.2.8-7 Joe Orton <jorton@redhat.com> 5.2.8-5 Joe Orton <jorton@redhat.com> 5.2.8-4 Joe Orton <jorton@redhat.com> 5.2.8-3 Remi Collet <Fedora@FamilleCollet� x�������������H������ X .1W�ypsho�G�������(�������a - Up�$ ���������������� �a �a �a � h; various fixes - update to v5 of systzdata patch; parses zone.tab and extracts
timezone->{country-code,long/lat,comment} mapping table - update to 5.3.0
- remove ncurses, dbase, mhash extensions
- add enchant, sqlite3, intl, phar, fileinfo extensions
- raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
- sync with upstream "production" php.ini - update to 5.2.10
- add interbase sub-package - update to 5.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - add recode support, -recode subpackage (#106755)
- add -zts subpackage with ZTS-enabled build of httpd SAPI
- adjust php.conf to use -zts SAPI build for worker MPM - fix patch fuzz, renumber patches - drop obsolete configure args
- drop -odbc patch (#483690) - split out sysvshm, sysvsem, sysvmsg, posix into php-process - move wddx to php-xml, build curl shared in -common
- remove BR for expat-devel, bogus configure option - rebuild for new MySQL - libtool 2 workaround for phpize (#476004)
- add missing php_embed.h (#457777) - update to 5.2.8 - libtool 2 workaround - update to 5.2.7
- enable pdo_dblib driver in php-mssql - tweak Summary, thanks to Richard Hughes - move gd_README to php-gd
- update to r4 of systzdata patch; introduces a default timezone
name of "System/Localtime", which uses /etc/localtime (#469532) - enable XPM support in php-gd
- Fix BR for php-gd - enable T1lib support in php-gd - update to 5.2.6
- sync default php.ini with upstream
- drop extension_dir from default php.ini, rely on hard-coded
default, to make php-common multilib-safe (#455091)
- update to r3 of systzdata patch - split pspell extension out into php-spell (#443857) - Autorebuild for GCC 4.3 - ext/date: use system timezone database - rebuild for libc-client bump - Rebuild for openssl bump - update to 5.2.5 - correct pcre BR version (#333021)
- restore metaphone fix (#205714)
- add READMEs to php-cli - update to 5.2.4 - rebuild for fixed APR - add ldconfig post/postun for -embedded (Hans de Goede) - add php-embedded sub-package - fix build with new glibc
- fix License - define php_extdir in macros.php - obsolete php-dbase - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
- enable dbase extension and package in -common - update to 5.2.3 (thanks to Jeff Sheltren) - fix php-pdo *_arg_force_ref global symbol abuse (#216125) - rebuild against uw-imap-devel - update to 5.2.2
- synch changes from upstream recommended php.ini - enable SASL support in LDAP extension (#205772) - drop mime_magic extension (deprecated by php-pecl-Fileinfo) - fix regression in str_{i,}replace (from upstream) - update to 5.2.1
- add Requires(pre) for httpd
- trim %changelog to versions >= 5.0.0 - bump default memory_limit to 32M (#220821)
- mark config files noreplace again (#174251)
- drop trailing dots from Summary fields
- use standard BuildRoot
- drop libtool15 patch (#226294) - add php(api), php(zend-abi) provides (#221302)
- package /usr/share/php and append to default include_path (#225434) - fix filter.h installation path
- fix php-zend-abi version (Remi Collet, #212804) - rebuild again - rebuild for net-snmp soname bump - build json and zip shared, in -common (Remi Collet, #215966)
- obsolete php-json and php-pecl-zip
- build readline extension into /usr/bin/php* (#210585)
- change module subpackages to require php-common not php (#177821) - provide php-zend-abi (#212804)
- add /etc/rpm/macros.php exporting interface versions
- synch with upstream recommended php.ini - update to 5.2.0 (#213837)
- php-xml provides php-domxml (#215656)
- fix php-pdo-abi provide (#214281) - rebuild for curl soname bump
- add build fix for curl 7.16 API - from upstream: add safety checks against integer overflow in _ecalloc - update to 5.1.6 (security fixes)
- bump default memory_limit to 16M (#196802) - rebuild - Provide php-posix (#194583)
- only provide php-pcntl from -cli subpackage
- add missing defattr's (thanks to Matthias Saou) - move Obsoletes for php-openssl to -common (#194501)
- Provide: php-cgi from -cli subpackage - split � x�������������������� X ! d \�yead x�������������� -ca
�$ ���������������� � � � G !P ? $ d � � � � � \ � � � @ � D � I � O � W � u � � � � � � � , h
� �
0 � > � x �
� (
� 8
� 9 :
� G X H � I H X h Y t \ � ] ^ � b d W e \ f _ l a t | u � v l w � x y � � � � � � � � 4 8 6 n ~ 6
� � � ! !$ !D g !H h !L C polkit-pkla-compat 0.1 12.el8 Rules for polkit to add compatibility with pklocalauthority A polkit JavaScript rule and associated helpers that mostly provide
compatibility with the .pkla file format supported in polkit <= 0.105 for users
of later polkit releases. `s�ord1-prod-x86build001.svc.aws.rockylinux.org n8Koji Rocky LGPLv2+ infrastructure@rockylinux.org Unspecified https://pagure.io/polkit-pkla-compat linux x86_64 � b� �x , ) t c+ + \ _ � A�A�A�A�A�A�A큤���A�A�A�A큤������������A�A�A�A�A�A�A� `s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�`s�Q��\Qx=�Q�s�Q� �`s�`s�`s�`s�`s�`s�`s�`s�`s�`s� 43fb533d3b2c548fd43b4f14b9d1f1a76a33db16d6e88299e1aab21859ec7f7d 552bef3b9195e6aa6f796078f01855e655b4b6b2f60626d0a5d58f245a137f03 5ff2579c4245d679d0741d31dac194ab670059e329809bb83acb843cc34220da 3a818310eb97a5cf47ec5f8633c16761e88250a5dfaf0ef0b489155c90d402e9 d2e2aa973e29c75e1b492e67ea7b7da9de2d501d49a934657971fd74f9a0b0a8 b0fa4d9720535a8bc3d8ca14c8082055355fe851fbef9f4b95b9ed47c4c7c191 bf2745712fe09ec1ae320895e8b4f2b5097188da3d047de72508fd05b185f7da e5dfde02774bc04911f6b5ab3a2b63762596f509aa49dd77ad25a602c56c8337 842f71baee928316d90f2e0d519939c5dbf0f2a38942c10d8ce304a40009c0b9 ce88ac2fef0c79c050a252f267e5940f88ff8a70787716cc1b5fd66eae75ed01 ../../../../usr/bin/pkla-check-authorization ../../../../usr/bin/pkla-admin-identities root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root polkitd root root root root root root root root root root root root root root root root root root root root root root polkitd root root root root root root polkit-pkla-compat-0.1-12.el8.src.rpm ������������������������������������������������������������������������������������������������������������������������config(polkit-pkla-compat) polkit-pkla-compat polkit-pkla-compat(x86-64) @ @ @ @ @ @ @ @ @ @
@ config(polkit-pkla-compat) libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpolkit-gobject-1.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) polkit rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 0.1-12.el8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 Z}�@Y�6�Y�@Yy�X���V�=@U���S�@S���Q�B@Q���Q��Fedora Release Engineering <releng@fedoraproject.org> - 0.1-12 Miloslav Trmač� x�������������8������ X " V�y( �1 `7�������a
� �$ ���������������� �a �a �a � #846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failures - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of systzdata patch - fix build with autoconf 2.6x - update to 5.3.1
- remove openssl patch (merged upstream)
- add provides for php-pecl-json
- add prod/devel php.ini in doc - use libedit instead of readline to resolve licensing issues - rebuilt with new openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - rediff systzdata patch - update to v6 of systzdata patc� x��������������x����� X # v��yon 1��������������� 3
- �$ � ���������������� � on of gconf - Fix moilscanner update problem - Begin adding policy to separate setsebool from semanage
- Fix xserver.if definition to not break sepolgen.if - Add new devices - Add brctl policy - Fix root login to include system_r - Allow prelink to read kernel sysctls - Default to user_u:system_r:unconfined_t - fix squid
- Fix rpm running as uid - Fix syslog declaration - Allow avahi to access inotify
- Remove a lot of bogus security_t:filesystem avcs - Remove ifdef strict policy from upstream - Remove ifdef strict to allow user_u to login - Fix for amands
- Allow semanage to read pp files
- Allow rhgb to read xdm_xserver_tmp - Allow kerberos servers to use ldap for backing store - allow alsactl to read kernel state - More fixes for alsactl
- Transition from hal and modutils
- Fixes for suspend resume.
- insmod domtrans to alsactl
- insmod writes to hal log - Allow unconfined_t to transition to NetworkManager_t
- Fix netlabel policy - Update to latest from upstream - Update to latest from upstream - Update to latest from upstream - Allow pcscd_t to send itself signals - Fixes for unix_update
- Fix logwatch to be able to search all dirs - Upstream bumped the version - Allow consolekit to syslog
- Allow ntfs to work with hal - Allow iptables to read etc_runtime_t - MLS Fixes - Fix path of /etc/lvm/cache directory
- Fixes for alsactl and pppd_t
- Fixes for consolekit - Allow insmod_t to mount kvmfs_t filesystems - Rwho policy
- Fixes for consolekit - fixes for fusefs - Fix samba_net to allow it to view samba_var_t - Update to upstream - Fix Sonypic backlight
- Allow snmp to look at squid_conf_t - Fixes for pyzor, cyrus, consoletype on everything installs - Fix hald_acl_t to be able to getattr/setattr on usb devices
- Dontaudit write to unconfined_pipes for load_policy - Allow bluetooth to read inotifyfs - Fixes for samba domain controller.
- Allow ConsoleKit to look at ttys - Fix interface call - Allow syslog-ng to read /var
- Allow locate to getattr on all filesystems
- nscd needs setcap - Update to upstream - Allow samba to run groupadd - Update to upstream - Allow mdadm to access generic scsi devices - Fix labeling on udev.tbl dirs - Fixes for logwatch - Add fusermount and mount_ntfs policy - Update to upstream
- Allow saslauthd to use kerberos keytabs - Fixes for samba_var_t - Allow networkmanager to setpgid
- Fixes for hal_acl_t - Remove disable_trans booleans
- hald_acl_t needs to talk to nscd - Fix prelink to be able to manage usr dirs. - Allow insmod to launch init scripts - Remove setsebool policy - Fix handling of unlabled_t packets - More of my patches from upstream - Update to latest from upstream
- Add fail2ban policy - Update to remove security_t:filesystem getattr problems - Policy for consolekit - Update to latest from upstream - Revert Nemiver change
- Set sudo as a corecmd so prelink will work, remove sudoedit mapping, since this will not work, it does not transition.
- Allow samba to execute useradd - Upgrade to the latest from upstream - Add sepolgen support
- Add bugzilla policy - Fix file context for nemiver - Remove include sym link - Allow mozilla, evolution and thunderbird to read dev_random.
Resolves: #227002
- Allow spamd to connect to smtp port
Resolves: #227184
- Fixes to make ypxfr work
Resolves: #227237 - Fix ssh_agent to be marked as an executable
- Allow Hal to rw sound device - Fix spamassisin so crond can update spam files
- Fixes to allow kpasswd to work
- Fixes for bluetooth - Remove some targeted diffs in file context file - Fix squid cachemgr labeling - Add ability to generate webadm_t policy
- Lots of new interfaces for httpd
- Allow sshd to login as unconfined_t - Continue fixing, additional user domains - Begin adding user confinement to targeted policy - Fixes for prelink, ktalkd, netlabel - Allow prelink when run from rpm to create tmp files
Resolves: #221865
- Remove file_context for exportfs
Resolves: #221181
- Allow spamassassin to create ~/.spamassissin
Resolves: #203290
- Allow ssh access to the krb tickets
- Allow sshd to change passwd
� x�������������(h����� X $ - ��yove ��������X@������ ic s�$ ���������������� � rd to execute /usr/sbin/xfs_dbin glusterd_t domain.
- Calling cron_system_entry() in pcp_domain_template needs to be a part of optional_policy block.
- Allow samba-net to access /var/lib/ctdbd dirs/files.
- Allow glusterd to send a signal to smbd.
- Make ctdbd as home manager to access also FUSE.
- Allow glusterd to use geo-replication gluster tool.
- Allow glusterd to execute ssh-keygen.
- Allow glusterd to interact with cluster services.
- Add rhcs_dbus_chat_cluster()
- systemd-logind accesses /dev/shm. BZ(1230443)
- Label gluster python hooks also as bin_t.
- Allow sshd to execute gnome-keyring if there is configured pam_gnome_keyring.so.
- Allow gnome-keyring executed by passwd to access /run/user/UID/keyring to change a password. - We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489) - Add ipsec_rw_inherited_pipes() interface.
- Allow ibus-x11 running as xdm_t to connect uder session buses. We already allow to connect to userdomains over unix_stream_socket.
- Label /usr/libexec/Xorg.wrap as xserver_exec_t.
- Allow systemd-networkd to bind dhcpc ports if DHCP=yes in *.network conf file.
- Add fixes for selinux userspace moving the policy store to /var/lib/selinux.
- Remove optional else block for dhcp ping (needed by CIL)
- Label all gluster hooks in /var/lib/gluster as bin_t. They are not created on the fly.
- Access required to run with unconfine.pp disabled
- Fix selinux_search_fs() interface.
- Update selinux_search_fs(domain) rule to have ability to search /etc/selinuc/ to check if /etc/selinux/config exists.
- Add seutil_search_config() interface.
- Make ssh-keygen as nsswitch domain to access SSSD.
- Label ctdb events scripts as bin_t.
- Add support for /usr/sbin/lvmpolld.
- Allow gvfsd-fuse running as xdm_t to use /run/user/42/gvfs as mountpoint.
- Add support for ~/.local/share/networkmanagement/certificates and update filename transitions rules.
- Allow login_pgm domains to access kernel keyring for nsswitch domains.
- Allow hypervkvp to read /dev/urandom and read addition states/config files.
- Add cgdcbxd policy.
- Allow hypervkvp to execute arping in own domain and make it as nsswitch domain.
- Add labeling for pacemaker.log.
- Allow ntlm_auth running in winbind_helper_t to access /dev/urandom.
- Allow lsmd plugin to connect to tcp/5989 by default.
- Allow lsmd plugin to connect to tcp/5988 by default.
- Allow setuid/setgid for selinux_child.
- Allow radiusd to connect to radsec ports.
- ALlow bind to read/write inherited ipsec pipes.
- Allow fowner capability for sssd because of selinux_child handling.
- Allow pki-tomcat relabel pki_tomcat_etc_rw_t.
- Allow cluster domain to dbus chat with systemd-logind.
- Allow tmpreaper_t to manage ntp log content
- Allow openvswitch_t to communicate with sssd.
- Allow isnsd_t to communicate with sssd.
- Allow rwho_t to communicate with sssd.
- Allow pkcs_slotd_t to communicate with sssd.
- Add httpd_var_lib_t label for roundcubemail
- Allow puppetagent_t to transfer firewalld messages over dbus.
- Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
- Update rules related to glusterd_brick_t.
- Allow glusterd to execute lvm tools in the lvm_t target domain.
- Allow glusterd to execute xfs_growfs in the target domain.
- Allow sysctl to have running under hypervkvp_t domain.
- Allow smartdnotify to use user terminals.
- Allow pcp domains to create root.socket in /var/lip/pcp directroy.
- Allow NM to execute dnssec-trigger-script in dnssec_trigger_t domain.
- Allow rpcbind to create rpcbind.xdr as a temporary file.
- Allow dnssec-trigger connections to the system DBUS. It uses libnm-glib Python bindings.
- Allow hostapd net_admin capability. hostapd needs to able to set an interface flag.
- rsync server can be setup to send mail
- Make "ostree admin upgrade -r" command which suppose to upgrade the system and reboot working again.
- Remove ctdbd_manage_var_files() int� x��������������W����� X % em �ycketP� ������� � SELi�$ ���������������� �
� � � ORS_AS370=m, CONFIG_SENSORS_INSPUR_IPSPS=m,
- CONFIG_VIDEO_V4L2_I2C=y, CONFIG_MEDIA_HIDE_ANCILLARY_SUBDRV=y,
- CONFIG_DRM_MIPI_DBI=m, CONFIG_DRM_GEM_CMA_HELPER=y,
- CONFIG_DRM_KMS_CMA_HELPER=y, CONFIG_DRM_AMD_DC_DCN2_1=y,
- CONFIG_TINYDRM_HX8357D=m, CONFIG_TINYDRM_ILI9225=m,
- CONFIG_TINYDRM_ILI9341=m, CONFIG_TINYDRM_MI0283QT=m,
- CONFIG_TINYDRM_REPAPER=m, CONFIG_TINYDRM_ST7586=m,
- CONFIG_TINYDRM_ST7735R=m, CONFIG_SND_INTEL_NHLT=m,
- CONFIG_SND_SOC_INTEL_DA7219_MAX98357A_GENERIC=m,
- CONFIG_MMC_SDHCI_IO_ACCESSORS=y, CONFIG_VIRTIO_FS=m,
- CONFIG_CRYPTO_ESSIV=m, CONFIG_CRYPTO_LIB_SHA256=y,
- CONFIG_CRYPTO_LIB_AES=y, CONFIG_CRYPTO_LIB_DES=m
- and CONFIG_CRYPTO_DEV_SAFEXCEL=m - Updated with the 5.3.13 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.13] - Updated with the 5.3.12 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.12]
- CONFIG_BTRFS_FS=m and CONFIG_BTRFS_FS_POSIX_ACL=y
- [https://elrepo.org/bugs/view.php?id=967] - Updated with the 5.3.11 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11]
- CONFIG_X86_INTEL_TSX_MODE_OFF=y - Updated with the 5.3.10 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10] - Updated with the 5.3.9 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9] - Updated with the 5.3.8 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8] - Updated with the 5.3.7 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7] - Updated with the 5.3.6 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.6] - Updated with the 5.3.5 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5] - Updated with the 5.3.4 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4]
- Note: There was no linux-5.3.3 release due to an upstream
- developer "mishap". Details can be seen via the following link:
- https://lore.kernel.org/lkml/20191001070738.GC2893807@kroah.com/
- CONFIG_XEN_BLKDEV_BACKEND=m, CONFIG_XEN_NETDEV_BACKEND=m,
- CONFIG_XEN_FBDEV_FRONTEND=m, CONFIG_XEN_BALLOON_MEMORY_HOTPLUG=y
- and CONFIG_XEN_BALLOON_MEMORY_HOTPLUG_LIMIT=512
- [https://elrepo.org/bugs/view.php?id=953] - Updated with the 5.3.2 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.2]
- CONFIG_NVME_MULTIPATH=y [https://elrepo.org/bugs/view.php?id=945] - Updated with the 5.3.1 source tarball.
- [https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.1] - Updated with the 5.3 source tarball.
- CONFIG_CC_CAN_LINK=y, CONFIG_X86_HV_CALLBACK_VECTOR=y,
- CONFIG_CPU_SUP_ZHAOXIN=y, CONFIG_HAVE_KVM_NO_POLL=y,
- CONFIG_HAVE_FAST_GUP=y, CONFIG_ARCH_HAS_PTE_DEVMAP=y,
- CONFIG_NFT_FLOW_OFFLOAD=m, CONFIG_NF_TABLES_BRIDGE=m,
- CONFIG_NFT_BRIDGE_META=m, CONFIG_NF_CONNTRACK_BRIDGE=m,
- CONFIG_NET_ACT_MPLS=m, CONFIG_NET_ACT_CTINFO=m,
- CONFIG_NET_ACT_CT=m, CONFIG_BT_HCIBTUSB_MTK=y,
- CONFIG_FW_LOADER_PAGED_BUF=y, CONFIG_NET_VENDOR_GOOGLE=y,
- CONFIG_GVE=m, CONFIG_XILINX_AXI_EMAC=m,
- CONFIG_MDIO_I2C=m, CONFIG_PHYLINK=m, CONFIG_SFP=m,
- CONFIG_NXP_TJA11XX_PHY=m, CONFIG_MISDN_HDLC=m,
- CONFIG_SERIAL_MCTRL_GPIO=y, CONFIG_POWER_SUPPLY_HWMON=y,
- CONFIG_SENSORS_IRPS5401=m, CONFIG_SENSORS_PXE1610=m,
- CONFIG_PROC_THERMAL_MMIO_RAPL=y, CONFIG_WATCHDOG_OPEN_TIMEOUT=0,
- CONFIG_DRM_VRAM_HELPER=m, CONFIG_DRM_AMD_DC_DCN2_0=y,
- CONFIG_DRM_AMD_DC_DSC_SUPPORT=y, CONFIG_DRM_I915_FORCE_PROBE="",
- CONFIG_DRM_I915_USERFAULT_AUTOSUSPEND=250,
- CONFIG_DRM_I915_SPIN_REQUEST=5, CONFIG_SND_SOC_INTEL_CML_H=m,
- CONFIG_SND_SOC_INTEL_CML_LP=m,
- CONFIG_SND_SOC_INTEL_BYT_CHT_CX2072X_MACH=m,
- CONFIG_SND_SOC_CX2072X=m, CONFIG_LEDS_TI_LMU_COMMON=m,
- CONFIG_RDMA_SIW=m, CONFIG_RTC_DRV_BD70528=m, CONFIG_DW_EDMA=m,
- CONFIG_DW_EDMA_PCIE=m, CONFIG_VIRTIO_PMEM=m, CONFIG_HYPERV_TIMER=y,
- CONFIG_XIAOMI_WMI=m, CONFIG_ACPI_CMPC=m, CONFIG_SAMSUNG_Q10=m,
- CONFIG_INTEL_RAPL_CORE=m, CONFIG_PROC_PID_ARCH_STATUS=y,
- CONFIG_KEYS_REQUEST_CACHE=y, CONFIG_CRYPTO_XXHASH=m,
- CONFIG� x�������������G����� X & ��s�y�hk���������N���� ��ܿ�$ ���������������� � 3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libz.so.1()(64bit) libz.so.1(ZLIB_1.2.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i���i<�i8@h��@h�@g�@f��fqv�fl0�ff�e�}@e��@eD�e R�d��d�r@d*��c���b��b�@b�@b�k�b~H@bP#�a�@a��a�*@a���a�y�`�f@`���^��^˳@^Ǿ�^��@^���^�@^���^F��^F��^;��]��]�(�]R�@\�F@\�Q�\�@\�@\I�\�@[��@[i��[h8@[W�[U�@[!@[
@�Z�l�Z��@Z���Z���Z���Z�H@Z���Z�
�Z��@Zz�@ZtR�Zc/@ZX�@Y�Z@Y��Y�d�Y��@Y�*@Y�@Y���Yx�@YV=@YT�Y�@X��@X�X��@Xۡ�X��@X��@Xv @X%��X l�W�W��Wڍ@W��@W��W��Wq@Wq@WaC@V��@V��V^�@V]��V7P@U�@Ŭ�UȒ@UȒ@UȒ@U�n�U��@U��@U�a@Uv�@UD�@U�T��T��T�}�Tg@@T\�@T[b�T[b�TG�@TBV@T?�@T>a�T>a�T.��T.��T+�T�@T_�T_�S�v�S�S�G�S�@Sہ@Sϣ�Sϣ�S��@S���S��Sl�@SO�@SK�S>��S=M@S;��S(5@S �@Sc@S�S��R��R�R�=�R�=�R��@R�T�R���R�0@R��@R{��Rw�@RrF@RnQ�Ri �Ri �Re@REs@R��R@R �R �@Q��Q�Q� �Q� �Q��Q��Qޞ@Q�L�Q�L�Q�o@Q�z�Q��QɆ@Q�4�Q��Q��Q�K�Q��@Q��Q��Q�x�Q~`�Qq1�QeT@Q]k@QT0�QHS@QG�Q@j@Q5�@Q5�@Q-�@Q #@Q�@P�9@P��@P�@PѬ@P���P��P��@P��@P���P�Y�P� @P���P��@P�o�P�5@P[@P6@P(�@P"T�P"T�P1@P�@P�@O��O�h�O�E@O�\@O�[@O�[@OtN�OtN�Or�@Oc+@O`�@OL��OF*@O<�O;�@O/��O�@Ob�Ob�O �N��@N�@N�@N�k@N��N���N���N�j@N�/�N��N�F�N��@N��@N���N� @N{#@Np�@N_s�NNP@NNP@NK�@N?�N;�@N.�@N&�@N +�N��N��N��N��N �N �N �M���M� @M��@M��@M��@M�@�M�MӴ�M�c@M���Mx�@Mt�Mg��Mg��MS�@MQ0@MG��M>�@M5��M0:�M-��M,F@M*�M' @M �M�@M�@M
�M �L�!�L��@L��L�@L�@L�,@L��L�*@L�X@L��@Lrb�Lnn@Le3�LX�L<U@L;�L(��L#H�L ��L_�L_�L�L�@L�@K�@K��K�F�K�Q@K�Q@K�\�K�\�K�9@K�9@K��K���K��@K���K��K��@K��@Ky7@Kj��KY�@KPX�KO@KM��K3W�K2@K0��K/c@K,�@K �K �@K ?�K��K�@K
y@K
y@K��K3@K�@K>�K>�J��@J�U�J�U�J�@J��Jݦ@J�T�J��J��@Ĵ�J��@J�H@J�
�J�j�J��@J���J�0@J�@J��J�u@J�#�J�#�J��@J��@J���J�]@J� �Jz�Jp9�Ji�@Ji�@J]�J[!�JW-@JKO�JKO�J@�J:,@J8�J8�J
Y@J �J�@I�L�I�o@IԨ�I�y�I���I�V@I��I���I�2�I��@I�I�I�@I�H�I~�@IG�@IC��I>]�I2�@Is�I ��H��@H�C�HǶ�H��H�|@H�)�H�@�H���H���H���H|�@Hj @Hj @H`�HW�@HW�@HW�@HE2@H?�@H>��H=I@H$<�G��G�u@G�#�G�#�G�@G�]@GƢ@G�@G�@G�
�G�@G�-@G��@G�O�G� �G�}�G��@G��G��@G|�@Gg�@G]*@GUA@GO�@GL�G9��G1��G)��G ��G m@F��F��@F�@F�@F�F�F�l@F�_�F�G�F�$@F�$@F��@F���F���F�R@F� �F�i@F�#@F��@F���F��@F�Q@F�@Fo�@Fn��FA��FA��F0�@F/B�F|@F�@FA�F�@F �@F �@E��E��E���E�L@E�E��E��E��EѨ@E�x@EyS�Ex@Ej�@Ee�@Ed;�Eb�@E\R�EY��EX^@ETi�EQ�EO#�EO#�EK/@EI�EH�@EG:�EE�@E@�@E<��E4�E$�E#�@E#�@E#�@E"P�E ��Eg�E�@E�E�@EO�E �D�}�D�}�D�,@D�D�D�D�@D�D�D�Z@D��D�q@D� �D��DГ�D�@D�@DĶ@D���D�p@D� �D��@D��@D��@D�L�D�X@D���D���D�K�D�K�D��@D���D���D���D���D���D�(@D~�D~�Du�@Dq��Dq��Do�Dm�@Dla�Dk@Di��D_2�D[>@D[>@DR�DO`�DN@DN@DL��DH�@DF&@D;�@D6T@D6T@D6T@D6T@D5�D2_�D/��D.k@D-�D*v�D)%@D'�D'�D#�@D#�@D#�@D"��D��D�@D^�Dj@Dj@D�D�@D
u�D��C���C���C�@C�h@C��C��@Cá�C���C���C�q�C��Cp�@CW��CP�@CK�@CE�CC�@C=(�C=(�C;�@C>�B�i�BK�@B06�B.�@B,B@B$Y@B �B�B L�BX@B ��A�o@A�o@A�)@A��A��@A��A�@A�@A�K�A�(@Aڅ@Aƾ�A��@A�x�A�>@A�>@A�U@A��A�@A��A�_�A�v�A~<@AvS@Anj@Anj@Anj@Am�Aju�Ab��Ab��Aa;@AZ��AT @AR��A@E�A+-�A#D�A P@A P@A �@A �@A �@Ar�A �@A
8@@��@@�7@@�Y�@��@��@�d@@��@��@��@@��@@�o�@��@@���@���@�5@@��@�L@@�c@@��@@r��@mU�@Dw@@,�@@#��@"0@@��?��?�-@?ĕ�?�D@?���?��?��@?|@?_@?;y�?:(@?'�@?�>��>��>�@>��@>��@>܍�>�@>�S@>�$@>��>�/�>��@>�F�>��>���>�\�>�9@>��@>��@>J7@>?�@>:e@>1*�>.��>.��>.��> d@>�@>��=��@=�=�=�y@=�y@=�>�=ϛ�=˧@=��@=��@=o^@=`�=`�=[��=U @=Nh�==E@=!��=@=@<��<��<�c�<���<�)@<��<��@<��@<���<�a�<~�<|�@<{x�<t�@<s��<i�<g�@<_�@<Z�@<W�@<V��<R�@<I_�;�@;��@;��@;�@;@:8�@9��@9�y�9��@9��9��@9�
@9���9��@9�u�9�u�9|/�9u�@9r�@9q��9pR@9l]�9dt�9X�@9WE�Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-67 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-66 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-65 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-63 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-62 Zdenek Dohnal <zdohnal@redha� x��������������6����� X ' av��ypabi�������� cG Upda�$ s ���������������� cG bG dG � ebuild for new sources - Update to 7.0.6
http://www.php.net/releases/7_0_6.php - Update to 7.0.6RC1 - Fixed bug #71914 (Reference is lost in "switch") - Update to 7.0.5
http://www.php.net/releases/7_0_5.php - Update to 7.0.5RC1 - adapt for F24: define %pecl_xmldir and own it - Update to 7.0.4
http://www.php.net/releases/7_0_4.php
- pcre: disables JIT compilation of patterns with system pcre < 8.38 - Update to 7.0.4RC1 - Update to 7.0.3
http://www.php.net/releases/7_0_3.php - test build - FPM: test build for https://bugs.php.net/62172 - Update to 7.0.3RC1 - Update to 7.0.2
http://www.php.net/releases/7_0_2.php - Update to 7.0.2RC1
- opcache: build with --disable-huge-code-pages on EL-6 - Update to 7.0.1
http://www.php.net/releases/7_0_1.php
- curl: add CURL_SSLVERSION_TLSv1_x constant (EL)
- fpm: switch to UDS on Fedora >= 21 - Update to 7.0.1RC1
- drop --disable-huge-code-pages build option on EL-6,
but keep it disabled in default configuration - build with --disable-huge-code-pages on EL-6 - Update to 7.0.0
http://www.php.net/releases/7_0_0.php - set opcache.huge_code_pages=0 on EL-6
see https://bugs.php.net/70973 and https://bugs.php.net/70977 - Update to 7.0.0RC8
- set opcache.huge_code_pages=1 on x86_64 - Update to 7.0.0RC7 (retagged) - Update to 7.0.0RC7 - Update to 7.0.0RC6 - php-config: reports all built sapis - rebuild as retagged - Update to 7.0.0RC5
- update php-fpm.d/www.conf comments
- API and Zend API are now set to 20151012 - Update to 7.0.0RC4
- php-fpm: set http authorization headers - F23 rebuild with rh_layout - Update to 7.0.0RC3
- disable zip extension (provided in php-pecl-zip) - Update to 7.0.0RC2
- enable oci8 and pdo_oci extensions
- sync php.ini with upstream php.ini-production - Update to 7.0.0RC1 - Update to 7.0.0beta3 - Update to 7.0.0beta2
- switch from libvpx to libwebp (only for bundled libgd, not used) - Update to 7.0.0beta1
- use upstream tarball instead of git snapshot - Update to 7.0.0alpha2
- use new layout (/etc/opt, /var/opt) - new snapshot - new snapshot
- the phar link is now correctly created - Update to 7.0.0alpha1 - new snapshot - new snapshot
- t1lib support have been removed - new snapshot - new snapshot - new snapshot - add experimental file based opcode cache (disabled by default) - new snapshot - new snapshot
- adapt system tzdata patch for upstream change for new zic - new snapshot - new snapshot - new snapshot - rename 10-php70-php.conf to 15-php70-php.conf to
ensure load order (after 10-rh-php56-php.conf) - rebuild - fix mod_php configuration
- disable static json
- sync php.ini with upstream php.ini-production - update for php 7.0.0
- ereg, mssql, mysql and sybase_ct extensions are removed
- add pdo-dblib subpackage (instead of php-mssql)
- disable oci8 extension, not yet adapted for 7.0
- add php-zip subpackage
- add php-json subpackage - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.php.net/releases/5_6_4.php
- add sybase_ct extension (in mssql sub-package)
- xmlrpc requires xml - Update to 5.6.4
http://www.php.net/releases/5_6_4.php - update to 5.6.4RC1 - add embedded sub package
- filter all libraries to avoid provides - FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools - Update to PHP 5.6.3
http://php.net/releases/5_6_3.php - update to 5.6.3RC1
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
- disable opcache.fast_shutdown in default config
- add php56-cgi command in base system - Update to PHP 5.6.2
http://� x�������������&����� X ( re��ylace�����(����G m> 8�$
���������������� G G G � bin_t
- Add httpd_use_fusefs boolean
- Add fixes for heartbeat
- Allow sshd_t to signal processes that it transitions to
- Add condor policy
- Allow svirt to create monitors in ~/.libvirt
- Allow dovecot to domtrans sendmail to handle sieve scripts
- Lot of fixes for cfengine - /var/run/postmaster.* labeling is no longer needed
- Alllow drbdadmin to read /dev/urandom
- l2tpd_t seems to use ptmx
- group+ and passwd+ should be labeled as /etc/passwd
- Zarafa-indexer is a socket - Ensure lastlog is labeled correctly
- Allow accountsd to read /proc data about gdm
- Add fixes for tuned
- Add bcfg2 fixes which were discovered during RHEL6 testing
- More fixes for gnome-keyring socket being moved
- Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
- Fix description for files_dontaudit_read_security_files() interface - Add new policy and man page for bcfg2
- cgconfig needs to use getpw calls
- Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
- gnome-keyring wants to create a directory in cache_home_t
- sanlock calls getpw - Add numad policy and numad man page
- Add fixes for interface bugs discovered by SEWatch
- Add /tmp support for squid
- Add fix for #799102
* change default labeling for /var/run/slapd.* sockets
- Make thumb_t as userdom_home_reader
- label /var/lib/sss/mc same as pubconf, so getpw domains can read it
- Allow smbspool running as cups_t to stream connect to nmbd
- accounts needs to be able to execute passwd on behalf of users
- Allow systemd_tmpfiles_t to delete boot flags
- Allow dnssec_trigger to connect to apache ports
- Allow gnome keyring to create sock_files in ~/.cache
- google_authenticator is using .google_authenticator
- sandbox running from within firefox is exposing more leaks
- Dontaudit thumb to read/write /dev/card0
- Dontaudit getattr on init_exec_t for gnomeclock_t
- Allow certmonger to do a transition to certmonger_unconfined_t
- Allow dhcpc setsched which is caused by nmcli
- Add rpm_exec_t for /usr/sbin/bcfg2
- system cronjobs are sending dbus messages to systemd_logind
- Thumnailers read /dev/urand - Allow auditctl getcap
- Allow vdagent to use libsystemd-login
- Allow abrt-dump-oops to search /etc/abrt
- Got these avc's while trying to print a boarding pass from firefox
- Devicekit is now putting the media directory under /run/media
- Allow thumbnailers to create content in ~/.thumbails directory
- Add support for proL2TPd by Dominick Grift
- Allow all domains to call getcap
- wdmd seems to get a random chown capability check that it does not need
- Allow vhostmd to read kernel sysctls - Allow chronyd to read unix
- Allow hpfax to read /etc/passwd
- Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
- Allow rpcd to read quota_db_t
- Update to man pages to match latest policy
- Fix bug in jockey interface for sepolgen-ifgen
- Add initial svirt_prot_exec_t policy - More fixes for systemd from Dan Walsh - Add a new type for /etc/firewalld and allow firewalld to write to this directory
- Add definition for ~/Maildir, and allow mail deliver domains to write there
- Allow polipo to run from a cron job
- Allow rtkit to schedule wine processes
- Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
- Allow users domains to send signals to consolehelper domains - More fixes for boinc policy
- Allow polipo domain to create its own cache dir and pid file
- Add systemctl support to httpd domain
- Add systemctl support to polipo, allow NetworkManager to manage the service
- Add policy for jockey-backend
- Add support for motion daemon which is now covered by zoneminder policy
- Allow colord to read/write motion tmpfs
- Allow vnstat to search through var_lib_t directories
- Stop transitioning to quota_t, from init an sysadm_t - Add svirt_lxc_file_t as a customizable type - Add additional fixes for icmp nagios plugin
- Allow cron jobs to open fifo_files from cron, since service script opens /dev/s� x������������������� X ) o ?�y dbu�������k #! Mak�$ 3 ���������������� #! $! "! � 1b311206dff25e4f6554f 41d75468bf3cb033e4298e3fc088e8879851b49f5d1d0905c2bbf7ac9341eb61 74ce06071d9d6fcb657233b5d6a26ab68719f34e6c383be060632d588e0369bf bd91eaa4ed759305edc045c5381e39094e3c35086fdfde8ebcdf6602e426688f ../../../../usr/bin/dbus-daemon ../../../../usr/bin/dbus-run-session ../../../../usr/bin/dbus-cleanup-sockets ../../../../usr/bin/dbus-test-tool ../../../../usr/libexec/dbus-1/dbus-daemon-launch-helper dbus.service ../dbus.service ../dbus.socket ../dbus.socket @ � root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root dbus root root root root root root root root root root root root root dbus-1.12.8-26.el8.src.rpm ���������������������������������������������������������������������������������������������������������������������������������������������������������������dbus-daemon dbus-daemon(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ /bin/sh /bin/sh /bin/sh /bin/sh /usr/sbin/useradd dbus-common dbus-libs(x86-64) dbus-tools libaudit.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.9)(64bit) libcap-ng.so.0()(64bit) libdbus-1.so.3()(64bit) libdbus-1.so.3(LIBDBUS_1_3)(64bit) libdbus-1.so.3(LIBDBUS_PRIVATE_1.12.8)(64bit) libexpat.so.1()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libselinux(x86-64) libselinux.so.1()(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 1:1.12.8-26.el8 1:1.12.8-26.el8 1:1.12.8-26.el8 2.0.86 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d�C@dFo@cO�c6@b�L@b�b�@a��@a�@`���`�8@`���`Y�@_��@^�)@^��]B�@]$��[�^�[�u�[n�[`O@[`O@[GB�Z� @Z� @Z� @Z�@Z�
�Zz�@Y�@Y��Y�{�Y˒�Y��Y���Y|x�Y{'@Yx�@YT�X�@X� @X��X��@X=m�W��@W� @V�J�V��V`.�V^�@VP\�V7P@V,�@U�U�A�Uݪ@U�@U��@U��U� @U�a@UT�@U8�U�Tء@T�|�T���T~�@Tu��S�G�S��S��@S��@S���R�a@R�1@R��Q�Q��Q��Q��@Qo�@Q�@Pz�@Pl(�Pe�@Pe�@PQ�P�@O��O��O�@O �NRD�N98@M�{@MQ0@MB��L��LQm@L7@L!�@K���K�[�K��@Kie@Kh�KXA�KLd@K+n�Ĵ�Ĵ�Ję�J��@Ji�@JhP�Jf�@J\s@JF �I��I��@I��I��@I��@IcG�IJ;@IBR@IA �I?�@I>]�I>]�I9�I&��H�H�}@H��@H� @H���H4@H>��H(1@H(1@G�@G�P�G�@G�!�G�O�G��@G��@G�C@G��G<4�G �@G�F�w�F�w�F�@FҼ�F�u�F�/�F�.�F���F���F{��Fu"@F �@F @F
X�Fd@E��@Ei��Ea��EY��EX^@EW �EO#�EK/@E0�@E ��E�E D@D��@D�D�@D�p@D� �D� �D��@D��@D��@D�{�D��@D�W@D�n@Dk@Dhm@DN@DC�@C��@C��@C��@C�@C�C��@C��C��C�@C�P@C�P@C�q�C��C '�C��C a@C �Bۙ�B�;�B��B��Bt�Bl�B[�@B[�@BZf�BU �BK�@BK�@BAZ@B8 �B-��B,B@A�o@A� �A��A��A�_�A�v�Am�Aju�AQi@AQi@AI�@AI�@AI�@AI�@A#D�A ��A ��A[�A!@A,�A
8@A
8@@��@@��@��@��@��@�d@@��@��@@�@@��@��@@Dw@@<�@@,�@@,�@@*@?��?��@?��@?��@?��@?x �?v�@?.J�>��@>�$@>��>��>Á@>Á@>��@>�@>�@>�-�>�-�>�-�David King <amigadave@amigadave.com> - 1.12.8-26 Ray Strode <rstrode@redhat.com> - 1.12.8-25 David King <dking@redhat.com> - 1:1.12.8-24 Ray Strode <rstrode@redhat.com> - 1:1.12.8-23 Ray Strode <rstrode@redhat.com> - 1:1.12.8-22 David King <dking@redhat.com> - 1:1.12.8-20 Ray Strode <rstrode@redhat.com> - 1:1.12.8-19 Ray Strode <rstrode@redhat.com> - 1.12.8-18 David King <dking@redhat.com> - 1:1.12.8-17 David King <dking@redhat.com> - 1:1.12.8-16 David King <dking@redhat.com> - 1:1.12.8-15 David King <dking@redhat.com> - 1:1.12.8-14 David King <dking@redhat.com> - 1:1.12.8-13 David King <dking@redhat.com> - 1:1.12.8-12 David� x������������������� X * urv�y cro0����P
���� ion �$ ���������������� � - 1:1.7-0.21.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.20.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.19.rc1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.18.rc1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.17.rc1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.16.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.15.b1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.14.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.13.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.12.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.11.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.10.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.9.b1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.8.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.7.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.6.b1 Tim Waugh <twaugh@redhat.com> 1:1.7-0.5.b1 Tim Waugh <twaugh@redhat.com> - 1:1.7-0.4.b1 Jiri Popelka <jpopelka@redhat.com> Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.3.b1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.2.b1 Jiri Popelka <jpopelka@redhat.com> - 1:1.7-0.1.b1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.6.2-4 Tim Waugh <twaugh@redhat.com> 1:1.6.2-3 Jiri Popelka <jpopelka@redhat.com> - 1:1.6.2-2 Jiri Popelka <jpopelka@redhat.com> - 1:1.6.2-1 Jiri Popelka <jpopelka@redhat.com> - 1:1.6.1-26 Tim Waugh <twaugh@redhat.com> 1:1.6.1-25 Tim Waugh <twaugh@redhat.com> 1:1.6.1-24 Jiri Popelka <jpopelka@redhat.com> - 1:1.6.1-23 Tim Waugh <twaugh@redhat.com> 1:1.6.1-22 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.6.1-21 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-20 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-19 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-18 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-17 Tim Waugh <twaugh@redhat.com> 1:1.6.1-16 Tim Waugh <twaugh@redhat.com> 1:1.6.1-15 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-14 Tim Waugh <twaugh@redhat.com> 1:1.6.1-13 Tim Waugh <twaugh@redhat.com> 1:1.6.1-12 Tim Waugh <twaugh@redhat.com> 1:1.6.1-11 Tim Waugh <twaugh@redhat.com> 1:1.6.1-10 Tim Waugh <twaugh@redhat.com> 1:1.6.1-9 Tim Waugh <twaugh@redhat.com> 1:1.6.1-8 Tim Waugh <twaugh@redhat.com> 1:1.6.1-7 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-6 Tim Waugh <twaugh@redhat.com> 1:1.6.1-5 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-4 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-3 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-2 Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-1 Jiri Popelka <jpopelka@redhat.com> 1:1.5.4-1 Tim Waugh <twaugh@redhat.com> 1:1.5.3-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.5.3-4 Jiri Popelka <jpopelka@redhat.com> 1:1.5.3-3 Jiri Popelka <jpopelka@redhat.com> 1:1.5.3-2 Jiri Popelka <jpopelka@redhat.com> 1:1.5.3-1 Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-13 Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-12 Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-11 Tim Waugh <twaugh@redhat.com> 1:1.5.2-10 Mamoru Tasaka <mtasaka@fedoraproject.org> - 1:1.5.2-9 Tim Waugh <twaugh@redhat.com> 1:1.5.2-8 Tim Waugh <twaugh@redhat.com> 1:1.5.2-7 Tim Waugh <twaugh@redhat.com> 1:1.5.2-6 Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-5 Tim Waugh <twaugh@redhat.com> 1:1.5.2-4 Tim Waugh <twaugh@redhat.com> 1:1.5.2-3 Tim Waugh <twaugh@redhat.com> 1:1.5.2-2 Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-1 Remi Collet <remi@fedoraproject.org> 1:1.5.0-28 Tim Waugh <twaugh@redhat.com> 1:1.5.0-27 Tim Waugh <twaugh@redhat.com> 1:1.5.0-26 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.5.0-25 Tim Waugh <twaugh@redhat.com> 1:1.5.0-24 Tim Waugh <twaugh@redhat.com> 1:1.5.0-23 Tim Waugh <twaugh@redhat.com> 1:1.5.0-22 Tim Waugh <twaugh@redhat.com> 1:1.5.0-21 Tim Waugh <twaugh@redhat.com> 1:1.5.0-20 Tim Waugh <twaugh@redhat.com> 1:1.5.0-19 Tim Waugh <twaugh@redhat.com> 1:1.5.0-18 Tim Waugh <twaugh@redhat.com> 1:1.5.0-17 Tim Waugh <twaugh@redhat.com> 1:1.5.0-16 Tim Waugh <twaugh@redhat.com> 1:1.5.0-15 Tim Waugh <twaugh@redhat.com> 1:1.5.0-14 Tim Waugh <twaugh@redhat.com> 1:1.5.0-13 Tim Waugh <twaugh@redhat.com> 1:1.5.0-12 Richard Hughes <rhughes@redhat.com> 1:1.5.0-11 Tim Waugh <twaugh@redhat.com> 1:1.5.0-10 Tim Waugh <twaugh@redhat.com> 1:1.5.0-9 Tim Waugh <twa� x�������������p������ X + ecx�yg> 7������8����� remi�$
���������������� � ugh@redhat.com> - 1:1.4.2-18 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-17 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-15 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-14 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-13 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-12 Tim Waugh <twaugh@redhat.com> 1:1.4.2-10 Tim Waugh <twaugh@redhat.com> 1:1.4.2-9 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-8 Tim Waugh <twaugh@redhat.com> 1:1.4.2-7 Tim Waugh <twaugh@redhat.com> 1:1.4.2-6 Tim Waugh <twaugh@redhat.com> 1:1.4.2-5 Tim Waugh <twaugh@redhat.com> 1:1.4.2-4 Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-3 Tim Waugh <twaugh@redhat.com> 1:1.4.2-2 Tim Waugh <twaugh@redhat.com> 1:1.4.2-1 Tim Waugh <twaugh@redhat.com> 1:1.4.1-14 Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-13 Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-12 Tim Waugh <twaugh@redhat.com> 1:1.4.1-11 Tim Waugh <twaugh@redhat.com> 1:1.4.1-10 Tim Waugh <twaugh@redhat.com> 1:1.4.1-9 Tim Waugh <twaugh@redhat.com> 1:1.4.1-8 Tim Waugh <twaugh@redhat.com> 1:1.4.1-7 Tim Waugh <twaugh@redhat.com> 1:1.4.1-6 Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-5 Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-4 Tomas Mraz <tmraz@redhat.com> 1:1.4.1-3 Tim Waugh <twaugh@redhat.com> 1:1.4.1-2 Tim Waugh <twaugh@redhat.com> 1:1.4.1-1 Tim Waugh <twaugh@redhat.com> 1:1.4.0-2 Tim Waugh <twaugh@redhat.com> 1:1.4.0-1 Warren Togami <wtogami@redhat.com> 1:1.4-0.rc1.21 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.20 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.19 Tomas Mraz <tmraz@redhat.com> - 1:1.4-0.rc1.17.1 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.17 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.16 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.15 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.14 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.13 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.4-0.rc1.11.1 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.11 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.10 Remi Collet <Fedora@FamilleCollet.com> 1:1.4-0.rc1.9 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.8 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.7 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.6 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.5 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.4 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.3 Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.1 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.18 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.17 Ville Skyttä <ville.skytta at iki.fi> - 1:1.4-0.b2.16 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.15 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.14 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.13 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.12 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.11 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.10 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.9 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.8 Tim Waugh <twaugh@redhat.com> Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.4-0.b2.7.1 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.7 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.6 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.4 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.3 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.2 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.6 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.5 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.4 Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.3 Tim Waugh <twaugh@redhat.com> 1:1.3.9-3 Tim Waugh <twaugh@redhat.com> 1:1.3.9-2 Tim Waugh <twaugh@redhat.com> 1:1.3.9-1 Tim Waugh <twaugh@redhat.com> 1:1.3.8-6 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.8-5 Tim Waugh <twaugh@redhat.com> 1:1.3.8-4 Tim Waugh <twaugh@redhat.com> 1:1.3.8-3 Tim Waugh <twaugh@redhat.com> 1:1.3.8-2 Tim Waugh <twaugh@redhat.com> 1:1.3.8-1 Tim Waugh <twaugh@redhat.com> Tim Waugh <twaugh@redhat.com> 1:1.3.7-13 Tim Waugh <twaugh@redhat.com> 1:1.3.7-12 Tim Waugh <twaugh@redhat.com> 1:1.3.7-11 Tim Waugh <twaugh@redhat.com> 1:1.3.7-10 Tim Waugh <twaugh@redhat.com> 1:1.3.7-9 Tim Waugh <twaugh@redhat.com> 1:1.3.7-8 Tim Waugh <twaugh@redhat.com> 1:1.3.7-7 Tim Waugh <twaugh@redhat.com> 1:1.3.7-6 Tim Waugh <twaugh@redhat.com� x�������������������� X , te��yptio�/������8�������G hout�$ ���������������� G G G � temd_logind_t to ignore mcs constraints on sigkill
- Fix files_filetrans_system_conf_named_files() interface
- Add labels for /usr/share/wordpress/wp-includes/*.php
- Allow cobbler to get SELinux mode and booleans - Add unconfined_execmem_exec_t as an alias to bin_t
- Allow fenced to read snmp var lib files, also allow it to read usr_t
- ontaudit access checks on all executables from mozilla_plugin
- Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
- Allow systemd_tmpfiles_t to getattr all pipes and sockets
- Allow glance-registry to send system log messages
- semanage needs to manage mock lib files/dirs - Add policy for abrt-watch-log
- Add definitions for jboss_messaging ports
- Allow systemd_tmpfiles to manage printer devices
- Allow oddjob to use nsswitch
- Fix labeling of log files for postgresql
- Allow mozilla_plugin_t to execmem and execstack by default
- Allow firewalld to execute shell
- Fix /etc/wicd content files to get created with the correct label
- Allow mcelog to exec shell
- Add ~/.orc as a gstreamer_home_t
- /var/spool/postfix/lib64 should be labeled lib_t
- mpreaper should be able to list all file system labeled directories
- Add support for apache to use openstack
- Add labeling for /etc/zipl.conf and zipl binary
- Turn on allow_execstack and turn off telepathy transition for final release - More access required for virt_qmf_t
- Additional assess required for systemd-logind to support multi-seat
- Allow mozilla_plugin to setrlimit
- Revert changes to fuse file system to stop deadlock - Allow condor domains to connect to ephemeral ports
- More fixes for condor policy
- Allow keystone to stream connect to mysqld
- Allow mozilla_plugin_t to read generic USB device to support GPS devices
- Allow thum to file name transition gstreamer home content
- Allow thum to read all non security files
- Allow glance_api_t to connect to ephemeral ports
- Allow nagios plugins to read /dev/urandom
- Allow syslogd to search postfix spool to support postfix chroot env
- Fix labeling for /var/spool/postfix/dev
- Allow wdmd chown
- Label .esd_auth as pulseaudio_home_t
- Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now - Add support for clamd+systemd
- Allow fresclam to execute systemctl to handle clamd
- Change labeling for /usr/sbin/rpc.ypasswd.env
- Allow yppaswd_t to execute yppaswd_exec_t
- Allow yppaswd_t to read /etc/passwd
- Gnomekeyring socket has been moved to /run/user/USER/
- Allow samba-net to connect to ldap port
- Allow signal for vhostmd
- allow mozilla_plugin_t to read user_home_t socket
- New access required for secure Linux Containers
- zfs now supports xattrs
- Allow quantum to execute sudo and list sysfs
- Allow init to dbus chat with the firewalld
- Allow zebra to read /etc/passwd - Allow svirt_t to create content in the users homedir under ~/.libvirt
- Fix label on /var/lib/heartbeat
- Allow systemd_logind_t to send kill signals to all processes started by a user
- Fuse now supports Xattr Support - upowered needs to setsched on the kernel
- Allow mpd_t to manage log files
- Allow xdm_t to create /var/run/systemd/multi-session-x
- Add rules for missedfont.log to be used by thumb.fc
- Additional access required for virt_qmf_t
- Allow dhclient to dbus chat with the firewalld
- Add label for lvmetad
- Allow systemd_logind_t to remove userdomain sock_files
- Allow cups to execute usr_t files
- Fix labeling on nvidia shared libraries
- wdmd_t needs access to sssd and /etc/passwd
- Add boolean to allow ftp servers to run in passive mode
- Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
- Fix using httpd_use_fusefs
- Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox - Rename rdate port to time port, and allow gnomeclock to connect to it
- We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
- /etc/auto.* should be labeled � x�������������P������ X - ,�y Pr������ �����! �$ p ���������������� �! �! �! � ystem pcre < 8.38 - Update to 7.0.4RC1 - Update to 7.0.3
http://www.php.net/releases/7_0_3.php - test build - FPM: test build for https://bugs.php.net/62172 - Update to 7.0.3RC1 - Update to 7.0.2
http://www.php.net/releases/7_0_2.php - Update to 7.0.2RC1
- opcache: build with --disable-huge-code-pages on EL-6 - Update to 7.0.1
http://www.php.net/releases/7_0_1.php
- curl: add CURL_SSLVERSION_TLSv1_x constant (EL)
- fpm: switch to UDS on Fedora >= 21 - Update to 7.0.1RC1
- drop --disable-huge-code-pages build option on EL-6,
but keep it disabled in default configuration - build with --disable-huge-code-pages on EL-6 - Update to 7.0.0
http://www.php.net/releases/7_0_0.php - set opcache.huge_code_pages=0 on EL-6
see https://bugs.php.net/70973 and https://bugs.php.net/70977 - Update to 7.0.0RC8
- set opcache.huge_code_pages=1 on x86_64 - Update to 7.0.0RC7 (retagged) - Update to 7.0.0RC7 - Update to 7.0.0RC6 - php-config: reports all built sapis - rebuild as retagged - Update to 7.0.0RC5
- update php-fpm.d/www.conf comments
- API and Zend API are now set to 20151012 - Update to 7.0.0RC4
- php-fpm: set http authorization headers - F23 rebuild with rh_layout - Update to 7.0.0RC3
- disable zip extension (provided in php-pecl-zip) - Update to 7.0.0RC2
- enable oci8 and pdo_oci extensions
- sync php.ini with upstream php.ini-production - Update to 7.0.0RC1 - Update to 7.0.0beta3 - Update to 7.0.0beta2
- switch from libvpx to libwebp (only for bundled libgd, not used) - Update to 7.0.0beta1
- use upstream tarball instead of git snapshot - Update to 7.0.0alpha2
- use new layout (/etc/opt, /var/opt) - new snapshot - new snapshot
- the phar link is now correctly created - Update to 7.0.0alpha1 - new snapshot - new snapshot
- t1lib support have been removed - new snapshot - new snapshot - new snapshot - add experimental file based opcode cache (disabled by default) - new snapshot - new snapshot
- adapt system tzdata patch for upstream change for new zic - new snapshot - new snapshot - new snapshot - rename 10-php70-php.conf to 15-php70-php.conf to
ensure load order (after 10-rh-php56-php.conf) - rebuild - fix mod_php configuration
- disable static json
- sync php.ini with upstream php.ini-production - update for php 7.0.0
- ereg, mssql, mysql and sybase_ct extensions are removed
- add pdo-dblib subpackage (instead of php-mssql)
- disable oci8 extension, not yet adapted for 7.0
- add php-zip subpackage
- add php-json subpackage - Update to 5.6.7
http://www.php.net/releases/5_6_7.php - update to 5.6.7RC1 - Update to 5.6.6
http://www.php.net/releases/5_6_6.php - Update to 5.6.5
http://www.php.net/releases/5_6_5.php - fix php-fpm.service.d location - update to 5.6.5RC1
- add base system path in default include path
- FPM: enable ACL for Unix Domain Socket - Update to 5.6.4
http://www.php.net/releases/5_6_4.php
- add sybase_ct extension (in mssql sub-package)
- xmlrpc requires xml - Update to 5.6.4
http://www.php.net/releases/5_6_4.php - update to 5.6.4RC1 - add embedded sub package
- filter all libraries to avoid provides - FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools - Update to PHP 5.6.3
http://php.net/releases/5_6_3.php - update to 5.6.3RC1
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
- disable opcache.fast_shutdown in default config
- add php56-cgi command in base system - Update to PHP 5.6.2
http://php.net/releases/5_6_2.php - Update to PHP 5.6.1
http://php.net/releases/5_6_1.php
- use default system cipher list by Fedora policy
http://fedoraproject.org/wiki/Changes/CryptoPolicy
- add system php library to default include_path - enable libvpx on EL 6 (with libvpx 1.3.0)
- add php56-phpdbg command in base system - PHP 5.6.0 is GA
- add lsphp56 command in base system - initial s� x�������������������� X . - ��yphp-�I�������������G PI t�$ ���������������� G �� G � host cache files, allow rpc.svcgssd to manage host cache
- Allow dovecot to manage Maildir content, fix transitions to Maildir
- Allow postfix_local to transition to dovecot_deliver
- Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
- Cleanup interface definitions
- Allow apmd to change with the logind daemon
- Changes required for sanlock in rhel6
- Label /run/user/apache as httpd_tmp_t
- Allow thumb to use lib_t as execmod if boolean turned on
- Allow squid to create the squid directory in /var with the correct labe
- Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
- Allow virtd to exec xend_exec_t without transition
- Allow virtd_lxc_t to unmount all file systems - PolicyKit path has changed
- Allow httpd connect to dirsrv socket
- Allow tuned to write generic kernel sysctls
- Dontaudit logwatch to gettr on /dev/dm-2
- Allow policykit-auth to manage kerberos files
- Make condor_startd and rgmanager as initrc domain
- Allow virsh to read /etc/passwd
- Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
- xdm now needs to execute xsession_exec_t
- Need labels for /var/lib/gdm
- Fix files_filetrans_named_content() interface
- Add new attribute - initrc_domain
- Allow systemd_logind_t to signal, signull, sigkill all processes
- Add filetrans rules for etc_runtime files - Rename boolean names to remove allow_ - Mass merge with upstream
* new policy topology to include contrib policy modules
* we have now two base policy patches - Fix description of authlogin_nsswitch_use_ldap
- Fix transition rule for rhsmcertd_t needed for RHEL7
- Allow useradd to list nfs state data
- Allow openvpn to manage its log file and directory
- We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
- Allow thumb to use nvidia devices
- Allow local_login to create user_tmp_t files for kerberos
- Pulseaudio needs to read systemd_login /var/run content
- virt should only transition named system_conf_t config files
- Allow munin to execute its plugins
- Allow nagios system plugin to read /etc/passwd
- Allow plugin to connect to soundd port
- Fix httpd_passwd to be able to ask passwords
- Radius servers can use ldap for backing store
- Seems to need to mount on /var/lib for xguest polyinstatiation to work.
- Allow systemd_logind to list the contents of gnome keyring
- VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
- Add policy for isns-utils - Add policy for subversion daemon
- Allow boinc to read passwd
- Allow pads to read kernel network state
- Fix man2html interface for sepolgen-ifgen
- Remove extra /usr/lib/systemd/system/smb
- Remove all /lib/systemd and replace with /usr/lib/systemd
- Add policy for man2html
- Fix the label of kerberos_home_t to krb5_home_t
- Allow mozilla plugins to use Citrix
- Allow tuned to read /proc/sys/kernel/nmi_watchdog
- Allow tune /sys options via systemd's tmpfiles.d "w" type - Dontaudit lpr_t to read/write leaked mozilla tmp files
- Add file name transition for .grl-podcasts directory
- Allow corosync to read user tmp files
- Allow fenced to create snmp lib dirs/files
- More fixes for sge policy
- Allow mozilla_plugin_t to execute any application
- Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
- Allow mongod to read system state information
- Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
- Allow polipo to manage polipo_cache dirs
- Add jabbar_client port to mozilla_plugin_t
- Cleanup procmail policy
- system bus will pass around open file descriptors on files that do not have labels on them
- Allow l2tpd_t to read system state
- Allow tuned to run ls /dev
- Allow sudo domains to read usr_t files
- Add label to machine-id
- Fix corecmd_read_bin_symlinks cut and paste error - Fix pulseaudio port definition
- Add labeling for condor_starter
- Allow chfn_t to creat user_tmp_files
- Allow chfn_t to execute bin_t
- Allow prelink� x�������������@������ X / es��yenam���������Z������ gd
-�$ ���������������� � � it update logging_relabel_devlog_dev() interface to allow it.
- systemd-user has pam_selinux support and needs to able to compute user security context if init_t is not unconfined domain. - Allow fail2ban-client to execute ldconfig. #1268715
- Add interface virt_sandbox_domain()
- Use mmap_file_perms instead of exec_file_perms in setroubleshoot policy to shave off the execute_no_trans permission. Based on a github communication with Dominick Grift.
-all userdom_dontaudit_user_getattr_tmp_sockets instead() of usedom_dontaudit_user_getattr_tmp_sockets().
- Rename usedom_dontaudit_user_getattr_tmp_sockets() to userdom_dontaudit_user_getattr_tmp_sockets().
- Remove auth_login_pgm_domain(init_t) which has been added by accident.
- init_t needs to able to change SELinux identity because it is used as login_pgm domain because of systemd-user and PAM. It allows security_compute_user() returns a list of possible context and then a correct default label is returned by "selinux.get_default_context(sel_user,fromcon)" defined in the policy user config files.
- Add interface auth_use_nsswitch() to systemd_domain_template.
- Revert "auth_use_nsswitch can be used with attribute systemd_domain."
- auth_use_nsswitch can be used with attribute systemd_domain.
- ipsec: fix stringSwan charon-nm
- docker is communicating with systemd-machined
- Add missing systemd_dbus_chat_machined, needed by docker - Build including docker selinux interfaces. - Allow winbindd to send signull to kernel. BZ(#1269193)
- Merge branch 'rawhide-contrib-chrony' into rawhide-contrib
- Fixes for chrony version 2.2 BZ(#1259636)
* Allow chrony chown capability
* Allow sendto dgram_sockets to itself and to unconfined_t domains.
- Merge branch 'rawhide-contrib-chrony' into rawhide-contrib
- Add boolean allowing mysqld to connect to http port. #1262125
- Merge pull request #52 from 1dot75cm/rawhide-base
- Allow systemd_hostnamed to read xenfs_t files. BZ(#1233877)
- Fix attribute in corenetwork.if.in - Allow abrt_t to read sysctl_net_t files. BZ(#1194280)
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Add abrt_stub interface.
- Add support for new mock location - /usr/libexec/mock/mock. BZ(#1270972)
- Allow usbmuxd to access /run/udev/data/+usb:*. BZ(#1269633)
- Allow qemu-bridge-helper to read /dev/random and /dev/urandom. BZ(#1267217)
- Allow sssd_t to manage samba var files/dirs to SSSD's GPO support which is enabled against an Active Directory domain. BZ(#1225200).
- Add samba_manage_var_dirs() interface.
- Allow pcp_pmlogger to exec bin_t BZ(#1258698)
- Allow spamd to read system network state. BZ(1260234)
- Allow fcoemon to create netlink scsitransport sockets BZ(#1260882)
- Allow networkmanager to create networkmanager_var_lib_t files. BZ(1270201)
- Allow systemd-networkd to read XEN state for Xen hypervisor. BZ(#1269916)
- Add fs_read_xenfs_files() interface.
- Allow systemd_machined_t to send dbus msgs to all users and read/write /dev/ptmx to make 'machinectl shell' working correctly.
- Allow systemd running as init_t to override the default context for key creation. BZ(#1267850) - Allow pcp_pmlogger to read system state. BZ(1258699)
- Allow cupsd to connect on socket. BZ(1258089)
- Allow named to bind on ephemeral ports. BZ(#1259766)
- Allow iscsid create netlink iscsid sockets.
- We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
- Allow NetworkManager_t and policykit_t read access to systemd-machined pid files. #1255305
- Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs.
- Allow search dirs in sysfs types in kernel_read_security_state.
- Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs. - Update modules_filetrans_named_content() to make sure we don't get modules_dep labeling by filename transitions.
- Remove /usr/lib/modules/[^/]+/modules\..+ labeling
- Add modutils_read_module_deps_files() which is called from files_rea� x�������������������� X 0 .1��y2 Da���������j������� rman�$ ' ���������������� � � � � ocation
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failures - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of s� x�������������0������ X 1 t ��yllet0������������ -4 R�$ ���������������� � ed for RHSCL daemons.
- Allow sys_ptrace cap for sblim-gatherd caused by ps.
- Add support for /usr/libexec/mongodb-scl-helper RHSCL helper script.
- Add support for mongod/mongos systemd unit files.
- Allow dnssec-trigger to send sigchld to networkmanager
- add interface networkmanager_sigchld
- Add dnssec-trigger unit file Label dnssec-trigger script in libexec
- Remove duplicate specification for /etc/localtime.
- Add default labeling for /etc/localtime symlink. - Define ipa_var_run_t type
- Allow certmonger to manage renewal.lock. BZ(1213256)
- Add ipa_manage_pid_files interface.
- Add rules for netlink_socket in iotop.
- Allow iotop netlink socket.
- cloudinit and rhsmcertd need to communicate with dbus
- Allow apcupsd to use USBttys. BZ(1210960)
- Allow sge_execd_t to mamange tmp sge lnk files.BZ(1211574)
- Remove dac_override capability for setroubleshoot. We now have it running as setroubleshoot user.
- Allow syslogd_t to manage devlog_t lnk files. BZ(1210968) - Add more restriction on entrypoint for unconfined domains. - Allow abrtd to list home config. BZ(1199658)
- Dontaudit dnssec_trigger_t to read /tmp. BZ(1210250)
- Allow abrt_dump_oops_t to IPC_LOCK. BZ(1205481)
- Allow mock_t to use ptmx. BZ(1181333)
- Allow dnssec_trigger_t to stream connect to networkmanager.
- Allow dnssec_trigger_t to create resolv files labeled as net_conf_t
- Fix labeling for keystone CGI scripts. - Label /usr/libexec/mongodb-scl-helper as mongod_initrc_exec_t. BZ(1202013)
- Add mongodb port to httpd_can_network_connect_db interface. BZ(1209180)
- Allow mongod to work with configured SSSD.
- Add collectd net_raw capability. BZ(1194169)
- Merge postfix spool types(maildrop,flush) to one postfix_spool_t
- Allow dhcpd kill capability.
- Make rwhod as nsswitch domain.
- Add support for new fence agent fence_mpath which is executed by fence_node.
- Fix cloudform policy.(m4 is case sensitive)
- Allow networkmanager and cloud_init_t to dbus chat
- Allow lsmd plugin to run with configured SSSD.
- Allow bacula access to tape devices.
- Allow sblim domain to read sysctls..
- Allow timemaster send a signal to ntpd.
- Allow mysqld_t to use pam.It is needed by MariDB if auth_apm.so auth plugin is used.
- two 'l' is enough.
- Add labeling for systemd-time*.service unit files and allow systemd-timedated to access these unit files.
- Allow polkit to dbus chat with xserver. (1207478)
- Add lvm_stream_connect() interface.
- Set label of /sys/kernel/debug - Allow kmscon to read system state. BZ (1206871)
- Label ~/.abrt/ as abrt_etc_t. BZ(1199658)
- Allow xdm_t to read colord_var_lib_t files. BZ(1201985) - Allow mysqld_t to use pam. BZ(1196104)
- Added label mysqld_etc_t for /etc/my.cnf.d/ dir. BZ(1203989)
- Allow fetchmail to read mail_spool_t. BZ(1200552)
- Dontaudit blueman_t write to all mountpoints. BZ(1198272)
- Allow all domains some process flags.
- Merge branch 'rawhide-base' of github.com:selinux-policy/selinux-policy into rawhide-base
- Turn on overlayfs labeling for testin, we need this backported to F22 and Rawhide. Eventually will need this in RHEL - build without docker - docker watches for content in the /etc directory
- Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
- Fix abrt_filetrans_named_content() to create /var/tmp/abrt with the correct abrt_var_cache_t labeling.
- Allow docker to communicate with openvswitch
- Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
- Allow docker to relablefrom/to sockets and docker_log_t
- Allow journald to set loginuid. BZ(1190498)
- Add cap. sys_admin for passwd_t. BZ(1185191)
- Allow abrt-hook-ccpp running as kernel_t to allow create /var/tmp/abrt with correct labeling. - Allow spamc read spamd_etc_t files. BZ(1199339).
- Allow collectd to write to smnpd_var_lib_t dirs. BZ(1199278)
- Allow abrt_watch_log_t read passwd file. BZ(1197396)
- Allow abrt_watch_log_t to nsswitch_domain. BZ(1199659)
- Allow cups to read colord_var_lib_t files. BZ(1199765) - Turn on rolekit in F23 - A� x�������������������� X 2 67L�y- ad��������������a upg�$ o ���������������� a �a � C � ? �H d � � � � $ � X � � � � � � � � � 1 � 5 � A � ^ � r � x � � �
� �
$ . 8 ` h � Y ( � 8 � � 9 � � : P% � G � H � I � X � Y � \ �\ ] �d ^ �x b ο d � e � f � l � t �4 u �< v �D � �� � �� � � � � � �D �X �\ �l 6
Ӣ �� � � � � g � h � C php70-php-intl 7.0.33 40.el8.remi Internationalization extension for PHP applications The php70-php-intl package contains a dynamic shared object that will add
support for using the ICU library to PHP. d�Tbuilder.remirepo.net �1Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine PHP Remi Collet System Environment/Libraries http://www.php.net/ linux x86_64 1 � ���� d��d��387055e5461becbf6796c56d4c329be45879ff93591a0d77c438bebe90e80698 a2727b43e15aeb26f56cbe3a78b2b3bdd0cd880c3a1a46e52b26202d6bb28889 root root root root php70-php-7.0.33-40.el8.remi.src.rpm ��������config(php70-php-intl) php70-php-intl php70-php-intl(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ config(php70-php-intl) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libicudata.so.69()(64bit) libicui18n.so.69()(64bit) libicuio.so.69()(64bit) libicuuc.so.69()(64bit) libm.so.6()(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.8)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) php70-php-common(x86-64) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 7.0.33-40.el8.remi 7.0.33-40.el8.remi 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d�E@d��@d�q@c�w�c���c2�b�=�a�K�ap�a7T@a'�@`ٹ�`���`�N@`�@_�@_s!�_)M�^���^���^p��^K�^)��]��@]��@]fl�]@1@]G@\�"�\�8�\�N�\���\~d�\}@\A��\5�@\��[��@[~��[M�@Z� @Z���Z�`@Z�H@ZKt@Z&�@Z@Z�@Y�+@Yܶ@Y�A@Y��Y�o@Y��@Y��@Y�W@Y�3�Y��@Y���Y���Ym�@Y[�@YJ_�Y6�@Y$$@Y�@Y�@X�:@X��@X�P@X��@X@X�f@X��@X� @X��X~@Xn5@XG��X5��X!�@XI@W�w@W�w@W�_@W�;�W�@W��W��W��W�g�W|�Wu �Wj}�WX�WE��W4p@W!�@W ��W �@W�@V���V�J�V��V��VŲ@V��V�T@V�T@V�v�V��V�VqR@Vh�V`.�V]��V\:@VU��VD@VC-�V0��V$�@V C�V �@V �U���U�Y�U�U�d@U���U���U��U���U�a@Uyx@Uv�@Um��UhT�Uc�UY�@UW1@U?v@U?v@U>$�U2G@U/�@U ��U�@U�@U�@U�@U
�@T�9�T��@T���T�C@T��T�p@T�5�Tw@Tu��Th��Td�@TV �T?�@T.��T k@S��S��Sr @S,)�S?�S��R�@R��@R��@R�R�R�R�R_�@R:�@R��Q��@Q�Y@Q�Y@Q��Q��Q��@Q��@Q��Qy�Qf��Q@j@P��@PѬ@P��P� @P� @P�*�P��@P��@P�)�P�)�P���P���P���P���P���P�5@P{��Px@Pl(�Pj�@Pi��Pi��Pe�@P`K@PY��PY��PY��PXb@PW�PS @P2&�P.2@P H@O�@O�@O� �O��@O�\@O�s@O��@O��@Ov�OtN�OpZ@OpZ@OP�@O?��O- �O �O�@O �@N��N��N��@N��@N� @NoE�NS�@NL��N 7@M���M��M���MT�Mt�Mk�@MfH@MR��M' @M�@M�@Mg�L�8�LΫ�Lʷ@L���LH2�K��@K��@K�C�K�@K
@K��K�@J��@JlE@J_@J_@J\s@JY�@J> �I�'@I��@I��I��@I��@I}��I|T@Iy�@IC��I>]�I:i@I9�I*�@I9@H˫@H�(�H{?�Hv@G��G�Z@Gt�@GV��GV��GV@F��Fڥ�F�@F�S@F�S@F�]�F��Fw�@FiD�FA��F@f@F; @F �@F @Eّ@E�K@E��E�3@Eu_@El$�El$�Ej�@E[@E[@EG:�E#�@D�,@D��@D�b�D�b�D�(@DtJ�Dla�D_2�DX�@D;@C�@C�C�Q@Cˊ�Cǖ@C�
@C��C�f@C�q�C� @C��@C�7@C��@Cs6@CoA�CgX�C(�B�i�B{\@Bwg�Bl�B] �B] �B] �B[�@BZf�BQ,@BM7�BJ��BB��B�B �@A�@A��A��A�_�A�_�A�_�AJ�AJ� x������������� p����� X 3 8-��yArju����� ������G hat.�$ ���������������� G G G � tdin
- Add certmonger_unconfined_exec_t
- Make sure tap22 device is created with the correct label
- Allow staff users to read systemd unit files
- Merge in previously built policy
- Arpwatch needs to be able to start netlink sockets in order to start
- Allow cgred_t to sys_ptrace to look at other DAC Processes - Back port some of the access that was allowed in nsplugin_t
- Add definitiona for couchdb ports
- Allow nagios to use inherited users ttys
- Add git support for mock
- Allow inetd to use rdate port
- Add own type for rdate port
- Allow samba to act as a portmapper
- Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
- New fixes needed for samba4
- Allow apps that use lib_t to read lib_t symlinks - Add policy for nove-cert
- Add labeling for nova-openstack systemd unit files
- Add policy for keystoke - Fix man pages fro domains
- Add man pages for SELinux users and roles
- Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
- Add policy for matahari-rpcd
- nfsd executes mount command on restart
- Matahari domains execute renice and setsched
- Dontaudit leaked tty in mozilla_plugin_config
- mailman is changing to a per instance naming
- Add 7600 and 4447 as jboss_management ports
- Add fixes for nagios event handlers
- Label httpd.event as httpd_exec_t, it is an apache daemon - Add labeling for /var/spool/postfix/dev/log
- NM reads sysctl.conf
- Iscsi log file context specification fix
- Allow mozilla plugins to send dbus messages to user domains that transition to it
- Allow mysql to read the passwd file
- Allow mozilla_plugin_t to create mozilla home dirs in user homedir
- Allow deltacloud to read kernel sysctl
- Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
- Allow postgresql_t to connectto itself
- Add login_userdomain attribute for users which can log in using terminal - Allow sysadm_u to reach system_r by default #784011
- Allow nagios plugins to use inherited user terminals
- Razor labeling is not used no longer
- Add systemd support for matahari
- Add port_types to man page, move booleans to the top, fix some english
- Add support for matahari-sysconfig-console
- Clean up matahari.fc
- Fix matahari_admin() interfac
- Add labels for/etc/ssh/ssh_host_*.pub keys - Allow ksysguardproces to send system log msgs
- Allow boinc setpgid and signull
- Allow xdm_t to sys_ptrace to run pidof command
- Allow smtpd_t to manage spool files/directories and symbolic links
- Add labeling for jetty
- Needed changes to get unbound/dnssec to work with openswan - Add user_fonts_t alias xfs_tmp_t
- Since depmod now runs as insmod_t we need to write to kernel_object_t
- Allow firewalld to dbus chat with networkmanager
- Allow qpidd to connect to matahari ports
- policykit needs to read /proc for uses not owned by it
- Allow systemctl apps to connecto the init stream - Turn on deny_ptrace boolean - Remove pam_selinux.8 man page. There was a conflict. - Add proxy class and read access for gssd_proxy
- Separate out the sharing public content booleans
- Allow certmonger to execute a script and send signals to apache and dirsrv to reload the certificate
- Add label transition for gstream-0.10 and 12
- Add booleans to allow rsync to share nfs and cifs file sytems
- chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
- Fix filename transitions for cups files
- Allow denyhosts to read "unix"
- Add file name transition for locale.conf.new
- Allow boinc projects to gconf config files
- sssd needs to be able to increase the socket limit under certain loads
- sge_execd needs to read /etc/passwd
- Allow denyhost to check network state
- NetworkManager needs to read sessions data
- Allow denyhost to check network state
- Allow xen to search virt images directories
- Add label for /dev/megaraid_sas_ioctl_node
- Add autogenerated man pages - Allow boinc project to getattr on fs
- Allow init to execute initrc_state_t
- rhev-agent package was rename to ovirt-guest-agent
- If initrc_t creates /etc/local.conf then we need to � x��������������_����� X 4 =m��yCONF ������������� SSOR�$ ���������������� � ly) via pipe negotiated over dbus.
- Add snapper_read_inherited_pipe() interface.
- Add missing ";" in kerberos.te
- Add support for /var/lib/kdcproxy and label it as krb5kdc_var_lib_t. It needs to be accessible by useradd_t.
- Add support for /etc/sanlock which is writable by sanlock daemon.
- Allow mdadm to access /dev/random and add support to create own files/dirs as mdadm_tmpfs_t.
- Add labels for /dev/memory_bandwith and /dev/vhci. Thanks ssekidde
- Add interface to read/write watchdog device.
- Add transition rule for iptables_var_lib_t
- Allow useradd add homedir located in /var/lib/kdcproxy in ipa-server RPM scriplet.
- Revert "Allow grubby to manage and create /run/blkid with correct labeling"
- Allow grubby to manage and create /run/blkid with correct labeling
- Add fstools_filetrans_named_content_fsadm() and call it for named_filetrans_domain domains. We need to be sure that /run/blkid is created with correct labeling.
- arping running as netutils_t needs to access /etc/ld.so.cache in MLS.
- Allow sysadm to execute systemd-sysctl in the sysadm_t domain. It is needed for ifup command in MLS mode.
- Add systemd_exec_sysctl() and systemd_domtrans_sysctl() interfaces.
- Allow udev, lvm and fsadm to access systemd-cat in /var/tmp/dracut if 'dracut -fv' is executed in MLS.
- Allow admin SELinu users to communicate with kernel_t. It is needed to access /run/systemd/journal/stdout if 'dracut -vf' is executed. We allow it for other SELinux users.
- depmod runs as insmod_t and it needs to manage user tmp files which was allowed for depmod_t. It is needed by dracut command for SELinux restrictive policy (confined users, MLS). - firewalld needs to relabel own config files. BZ(#1250537)
- Allow rhsmcertd to send signull to unconfined_service
- Allow lsm_plugin_t to rw raw_fixed_disk.
- Allow lsm_plugin_t to read sysfs, read hwdata, rw to scsi_generic_device
- Allow openhpid to use libsnmp_bc plugin (allow read snmp lib files). - Add header for sslh.if file
- Fix sslh_admin() interface
- Clean up sslh.if
- Fix typo in pdns.if
- Allow qpid to create lnk_files in qpid_var_lib_t.
- Allow httpd_suexec_t to read and write Apache stream sockets
- Merge pull request #21 from hogarthj/rawhide-contrib
- Allow virt_qemu_ga_t domtrans to passwd_t.
- use read and manage files_patterns and the description for the admin interface
- Merge pull request #17 from rubenk/pdns-policy
- Allow redis to read kernel parameters.
- Label /etc/rt dir as httpd_sys_rw_content_t BZ(#1185500)
- Allow hostapd to manage sock file in /va/run/hostapd Add fsetid cap. for hostapd Add net_raw cap. for hostpad BZ(#1237343)
- Allow bumblebee to seng kill signal to xserver
- glusterd call pcs utility which calls find for cib.* files and runs pstree under glusterd. Dontaudit access to security files and update gluster boolean to reflect these changes.
- Allow drbd to get attributes from filesystems.
- Allow drbd to read configuration options used when loading modules.
- fix the description for the write config files, add systemd administration support and fix a missing gen_require in the admin interface
- Added Booleans: pcp_read_generic_logs.
- Allow pcp_pmcd daemon to read postfix config files. Allow pcp_pmcd daemon to search postfix spool dirs.
- Allow glusterd to communicate with cluster domains over stream socket.
- fix copy paste error with writing the admin interface
- fix up the regex in sslh.fc, add sslh_admin() interface
- adding selinux policy files for sslh
- Remove diplicate sftpd_write_ssh_home boolean rule.
- Revert "Allow smbd_t and nmbd_t to manage winbind_var_run_t files/socktes/dirs."
- gnome_dontaudit_search_config() needs to be a part of optinal_policy in pegasus.te
- Allow glusterd to manage nfsd and rpcd services.
- Add kdbus.pp policy to allow access /sys/fs/kdbus. It needs to go with own module because this is workaround for now to avoid SELinux in enforcing mode.
- kdbusfs should not be accessible for now by default for shipped policies. It should be moved to kdbus.pp
- kdbusfs should not be accessible for now.
� x�������������O����� X 5 c �ygura��������������X to 5�$ � ���������������� X X X � .php
- add sybase_ct extension (in mssql sub-package)
- xmlrpc requires xml - Update to 5.6.4
http://www.php.net/releases/5_6_4.php - update to 5.6.4RC1 - add embedded sub package
- filter all libraries to avoid provides - FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools - Update to PHP 5.6.3
http://php.net/releases/5_6_3.php - update to 5.6.3RC1
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
- disable opcache.fast_shutdown in default config
- add php56-cgi command in base system - Update to PHP 5.6.2
http://php.net/releases/5_6_2.php - Update to PHP 5.6.1
http://php.net/releases/5_6_1.php
- use default system cipher list by Fedora policy
http://fedoraproject.org/wiki/Changes/CryptoPolicy
- add system php library to default include_path - enable libvpx on EL 6 (with libvpx 1.3.0)
- add php56-phpdbg command in base system - PHP 5.6.0 is GA
- add lsphp56 command in base system - initial spec for PHP 5.6 as Software Collection
- adapted from php 5.6 spec file from remi repository
- adapted from php 5.5 spec file from rhscl 1.1 - fileinfo: fix out-of-bounds memory access CVE-2014-2270
- fileinfo: fix extensive backtracking CVE-2013-7345 - gd: fix NULL deref in imagecrop CVE-2013-7327
- gd: drop vpx support, fix huge memory consumption #1075201 - fix patch name
- fix memory leak introduce in patch for CVE-2014-1943
- fix heap-based buffer over-read in DateInterval CVE-2013-6712 - fix infinite recursion in fileinfo CVE-2014-1943 - fix heap overflow vulnerability in imagecrop CVE-2013-7226 - allow multiple paths in ini_scan_dir #1058161 - add security fix for CVE-2013-6420 - rebuild with test enabled
- add dependency on php-pecl-jsonc - update to PHP 5.5.6
- buildstrap build - update to PHP 5.5.5
- mod_php only for httpd24 - update to PHP 5.5.4
- improve security, use specific soap.wsdl_cache_dir
use /var/lib/php/wsdlcache for mod_php and php-fpm
- sync short_tag comments in php.ini with upstream
- relocate RPM macro - update to PHP 5.5.3
- improve system libzip patch
- fix typo and add missing entries in php.ini - update to PHP 5.5.1 for php55 SCL - rebuild for new httpd-mmn value - remove ZTS conditional stuf for ligibility
- add mod_php for apache 2.4 (from httpd24 collection) - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews managed by php scripts - update to 5.4.10
- remove patches merged upstream
- drop "Configure Command" from phpinfo output
- prevent php_config.h changes across (otherwise identical)
rebuilds - update to 5.4.9 - fix php.conf - filter private shared in _httpd_modir
- improve system libzip patch to use pkg-config
- use _httpd_contentdir macro and fix php.gif path
- switch back to upstream generated s� x��������������>����� X 6 ��y ����`&����� �$ s ���������������� �� �� �� � tattr_all_dirs()
- Allow init_t to manage etc_aliases_t and read xserver_var_lib_t and chrony keys
- Fix up patch to allow systemd to manage home content
- Allow domains to send/recv unlabeled traffic if unlabelednet.pp is enabled
- Allow getty to exec hostname to get info
- Add systemd_home_t for ~/.local/share/systemd directory - Fix lxc labeling in config.tgz - Fix labeling for /usr/libexec/kde4/kcmdatetimehelper
- Allow tuned to search all file system directories
- Allow alsa_t to sys_nice, to get top performance for sound management
- Add support for MySQL/PostgreSQL for amavis
- Allow openvpn_t to manage openvpn_var_log_t files.
- Allow dirsrv_t to create tmpfs_t directories
- Allow dirsrv to create dirs in /dev/shm with dirsrv_tmpfs label
- Dontaudit leaked unix_stream_sockets into gnome keyring
- Allow telepathy domains to inhibit pipes on telepathy domains
- Allow cloud-init to domtrans to rpm
- Allow abrt daemon to manage abrt-watch tmp files
- Allow abrt-upload-watcher to search /var/spool directory
- Allow nsswitch domains to manage own process key
- Fix labeling for mgetty.* logs
- Allow systemd to dbus chat with upower
- Allow ipsec to send signull to itself
- Allow setgid cap for ipsec_t
- Match upstream labeling - Do not build sanbox pkg on MLS - wine_tmp is no longer needed
- Allow setroubleshoot to look at /proc
- Allow telepathy domains to dbus with systemd logind
- Fix handling of fifo files of rpm
- Allow mozilla_plugin to transition to itself
- Allow certwatch to write to cert_t directories
- New abrt application
- Allow NetworkManager to set the kernel scheduler
- Make wine_domain shared by all wine domains
- Allow mdadm_t to read images labeled svirt_image_t
- Allow amanda to read /dev/urand
- ALlow my_print_default to read /dev/urand
- Allow mdadm to write to kdumpctl fifo files
- Allow nslcd to send signull to itself
- Allow yppasswd to read /dev/urandom
- Fix zarafa_setrlimit
- Add support for /var/lib/php/wsdlcache
- Add zarafa_setrlimit boolean
- Allow fetchmail to send mails
- Add additional alias for user_tmp_t because wine_tmp_t is no longer used
- More handling of ther kernel keyring required by kerberos
- New privs needed for init_t when running without transition to initrc_t over bin_t, and without unconfined domain installed - Dontaudit attempts by sosreport to read shadow_t
- Allow browser sandbox plugins to connect to cups to print
- Add new label mpd_home_t
- Label /srv/www/logs as httpd_log_t
- Add support for /var/lib/php/wsdlcache
- Add zarafa_setrlimit boolean
- Allow fetchmail to send mails
- Add labels for apache logs under miq package
- Allow irc_t to use tcp sockets
- fix labels in puppet.if
- Allow tcsd to read utmp file
- Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys
- Define svirt_socket_t as a domain_type
- Take away transition from init_t to initrc_t when executing bin_t, allow init_t to run chk_passwd_t
- Fix label on pam_krb5 helper apps - Allow ldconfig to write to kdumpctl fifo files
- allow neutron to connect to amqp ports
- Allow kdump_manage_crash to list the kdump_crash_t directory
- Allow glance-api to connect to amqp port
- Allow virt_qemu_ga_t to read meminfo
- Add antivirus_home_t type for antivirus date in HOMEDIRS
- Allow mpd setcap which is needed by pulseaudio
- Allow smbcontrol to create content in /var/lib/samba
- Allow mozilla_exec_t to be used as a entrypoint to mozilla_domtrans_spec
- Add additional labeling for qemu-ga/fsfreeze-hook.d scripts
- amanda_exec_t needs to be executable file
- Allow block_suspend cap for samba-net
- Allow apps that read ipsec_mgmt_var_run_t to search ipsec_var_run_t
- Allow init_t to run crash utility
- Treat usr_t just like bin_t for transitions and executions
- Add port definition of pka_ca to port 829 for openshift
- Allow selinux_store to use symlinks - Allow block_suspend cap for samba-net
- Allow t-mission-control to manage gabble cache files
- Allow nslcd to read /sys/devices/system/cpu
- Allow selinux_store to use symlinks - Allow xdm_t to transition to its� x������������� .����� X 7 ��y ���������H������ �$ [ ���������������� �� �� �� � nge confined users can optionally manage virt content
- Handle new directories under ~/.cache
- Add block suspend to appropriate domains
- More rules required for containers
- Allow login programs to read /run/ data created by systemd_logind
- Allow staff users to run svirt_t processes - Update to upstream - More fixes for systemd to make rawhide booting from Dan Walsh - Add systemd fixes to make rawhide booting - Add systemd_logind_inhibit_var_run_t attribute
- Remove corenet_all_recvfrom_unlabeled() for non-contrib policies because we moved it to domain.if for all domain_type
- Add interface for mysqld to dontaudit signull to all processes
- Label new /var/run/journal directory correctly
- Allow users to inhibit suspend via systemd
- Add new type for the /var/run/inhibit directory
- Add interface to send signull to systemd_login so avahi can send them
- Allow systemd_passwd to send syslog messages
- Remove corenet_all_recvfrom_unlabeled() calling fro policy files
- Allow editparams.cgi running as httpd_bugzilla_script_t to read /etc/group
- Allow smbd to read cluster config
- Add additional labeling for passenger
- Allow dbus to inhibit suspend via systemd
- Allow avahi to send signull to systemd_login - Add interface to dontaudit getattr access on sysctls
- Allow sshd to execute /bin/login
- Looks like xdm is recreating the xdm directory in ~/.cache/ on login
- Allow syslog to use the leaked kernel_t unix_dgram_socket from system-jounald
- Fix semanage to work with unconfined domain disabled on F18
- Dontaudit attempts by mozilla plugins to getattr on all kernel sysctls
- Virt seems to be using lock files
- Dovecot seems to be searching directories of every mountpoint
- Allow jockey to read random/urandom, execute shell and install third-party drivers
- Add aditional params to allow cachedfiles to manage its content
- gpg agent needs to read /dev/random
- The kernel hands an svirt domains /SYSxxxxx which is a tmpfs that httpd wants to read and write
- Add a bunch of dontaudit rules to quiet svirt_lxc domains
- Additional perms needed to run svirt_lxc domains
- Allow cgclear to read cgconfig
- Allow sys_ptrace capability for snmp
- Allow freshclam to read /proc
- Allow procmail to manage /home/user/Maildir content
- Allow NM to execute wpa_cli
- Allow amavis to read clamd system state
- Regenerate man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Add realmd and stapserver policies
- Allow useradd to manage stap-server lib files
- Tighten up capabilities for confined users
- Label /etc/security/opasswd as shadow_t
- Add label for /dev/ecryptfs
- Allow condor_startd_t to start sshd with the ranged
- Allow lpstat.cups to read fips_enabled file
- Allow pyzor running as spamc_t to create /root/.pyzor directory
- Add labelinf for amavisd-snmp init script
- Add support for amavisd-snmp
- Allow fprintd sigkill self
- Allow xend (w/o libvirt) to start virtual machines
- Allow aiccu to read /etc/passwd
- Allow condor_startd to Make specified domain MCS trusted for setting any category set for the processes it executes
- Add condor_startd_ranged_domtrans_to() interface
- Add ssd_conf_t for /etc/sssd
- accountsd needs to fchown some files/directories
- Add ICACLient and zibrauserdata as mozilla_filetrans_home_content
- SELinux reports afs_t needs dac_override to read /etc/mtab, even though everything works, adding dontaudit
- Allow xend_t to read the /etc/passwd file - Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
- Add init_access_check() interface
- Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
- Allow tcpdump to create a netlink_socket
- Label newusers like useradd
- Change xdm log files to be labeled xdm_log_t
- Allow sshd_t with privsep to work in MLS
- Allow freshclam to update databases thru HTTP proxy
- Allow s-m-config to access check on systemd
- Allow abrt to read public files by default
- Fix amavis_create_pid_files() interface
- Add labeling and filename transition for dboma� x�����PP������8 ����� X g ��y ���������:������ �$ h ���������������� �� �� �� � ead
- Dontaudit readahead_t file_type:dir write, to cover up kernel bug
- systemd_tmpfiles needs to relabel faillog directory as well as the file
- Allow hostname and consoletype to r/w inherited initrc_tmp_t files handline hostname >> /tmp/myhost - Add policykit fixes from Tim Waugh
- dontaudit sandbox domains sandbox_file_t:dir mounton
- Add new dontaudit rules for sysadm_dbusd_t
- Change label for /var/run/faillock
* other fixes which relate with this change - Update to upstream
- Fixes for telepathy
- Add port defition for ssdp port
- add policy for /bin/systemd-notify from Dan
- Mount command requires users read mount_var_run_t
- colord needs to read konject_uevent_socket
- User domains connect to the gkeyring socket
- Add colord policy and allow user_t and staff_t to dbus chat with it
- Add lvm_exec_t label for kpartx
- Dontaudit reading the mail_spool_t link from sandbox -X
- systemd is creating sockets in avahi_var_run and system_dbusd_var_run - gpg_t needs to talk to gnome-keyring
- nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
- enforce MCS labeling on nodes
- Allow arpwatch to read meminfo
- Allow gnomeclock to send itself signals
- init relabels /dev/.udev files on boot
- gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_exec_t
- nautilus checks access on /media directory before mounting usb sticks, dontaudit access_check on mnt_t
- dnsmasq can run as a dbus service, needs acquire service
- mysql_admin should be allowed to connect to mysql service
- virt creates monitor sockets in the users home dir - Allow usbhid-ups to read hardware state information
- systemd-tmpfiles has moved
- Allo cgroup to sys_tty_config
- For some reason prelink is attempting to read gconf settings
- Add allow_daemons_use_tcp_wrapper boolean
- Add label for ~/.cache/wocky to make telepathy work in enforcing mode
- Add label for char devices /dev/dasd*
- Fix for apache_role
- Allow amavis to talk to nslcd
- allow all sandbox to read selinux poilcy config files
- Allow cluster domains to use the system bus and send each other dbus messages - Update to upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Update to ref policy
- cgred needs chown capability
- Add /dev/crash crash_dev_t
- systemd-readahead wants to use fanotify which means readahead_t needs sys_admin capability - New labeling for postfmulti #675654
- dontaudit xdm_t listing noxattr file systems
- dovecot-auth needs to be able to connect to mysqld via the network as well as locally
- shutdown is passed stdout to a xdm_log_t file
- smartd creates a fixed disk device
- dovecot_etc_t contains a lnk_file that domains need to read
- mount needs to be able to read etc_runtim_t:lnk_file since in rawhide this is a link created at boot - syslog_t needs syslog capability
- dirsrv needs to be able to create /var/lib/snmp
- Fix labeling for dirsrv
- Fix for dirsrv policy missing manage_dirs_pattern
- corosync needs to delete clvm_tmpfs_t files
- qdiskd needs to list hugetlbfs
- Move setsched to sandbox_x_domain, so firefox can run without network access
- Allow hddtemp to read removable devices
- Adding syslog and read_policy permissions to policy
* syslog
Allow unconfined, sysadm_t, secadm_t, logadm_t
* read_policy
allow unconfined, sysadm_t, secadm_t, staff_t on Targeted
allow sysadm_t (optionally), secadm_t on MLS
- mdadm application will write into /sys/.../uevent whenever arrays are
assembled or disassembled. - Add tcsd policy - ricci_modclusterd_t needs to bind to rpc ports 500-1023
- Allow dbus to use setrlimit to increase resoueces
- Mozilla_plugin is leaking to sandbox
- Allow confined users to connect to lircd over unix domain stream socket which allow to use remote control
- Allow awstats to read squid logs
- seunshare needs to manage tmp_t
- apcupsd cgi scripts have a new directory - Fix xserver_dontaudit_read_xdm_pid
- Change oracle_port_t to oracledb_port_t to prevent conflict with satellite
- Allow dovecot_deliver_t to read/write postfix_master� x�������������� ����� X 9 ��y Pr�������)������ �$ e ���������������� �� �� � � of
- Allow syslog to search spool dirs - Allow nagios plugins to read usr files
- Allow mysqld-safe to send system log messages
- Fixes fpr ddclient policy
- Fix sasl_admin interface
- Allow apache to search zarafa config
- Allow munin plugins to search /var/lib directory
- Allow gpsd to read sysfs_t
- Fix labels on /etc/mcelog/triggers to bin_t - Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t
- Allow saslauthd_t to create krb5_host_rcache_t files in /tmp
- Fix xserver interface
- Fix definition of /var/run/lxdm - Turn on mediawiki policy
- kdump leaks kdump_etc_t to ifconfig, add dontaudit
- uux needs to transition to uucpd_t
- More init fixes relabels man,faillog
- Remove maxima defs in libraries.fc
- insmod needs to be able to create tmpfs_t files
- ping needs setcap - Allow groupd transition to fenced domain when executes fence_node
- Fixes for rchs policy
- Allow mpd to be able to read samba/nfs files - Fix up corecommands.fc to match upstream
- Make sure /lib/systemd/* is labeled init_exec_t
- mount wants to setattr on all mountpoints
- dovecot auth wants to read dovecot etc files
- nscd daemon looks at the exe file of the comunicating daemon
- openvpn wants to read utmp file
- postfix apps now set sys_nice and lower limits
- remote_login (telnetd/login) wants to use telnetd_devpts_t and user_devpts_t to work correctly
- Also resolves nsswitch
- Fix labels on /etc/hosts.*
- Cleanup to make upsteam patch work
- allow abrt to read etc_runtime_t - Add conflicts for dirsrv package - Update to upstream
- Add vlock policy - Fix sandbox to work on nfs homedirs
- Allow cdrecord to setrlimit
- Allow mozilla_plugin to read xauth
- Change label on systemd-logger to syslogd_exec_t
- Install dirsrv policy from dirsrv package - Add virt_home_t, allow init to setattr on xserver_tmp_t and relabel it
- Udev needs to stream connect to init and kernel
- Add xdm_exec_bootloader boolean, which allows xdm to execute /sbin/grub and read files in /boot directory - Allow NetworkManager to read openvpn_etc_t
- Dontaudit hplip to write of /usr dirs
- Allow system_mail_t to create /root/dead.letter as mail_home_t
- Add vdagent policy for spice agent daemon - Dontaudit sandbox sending sigkill to all user domains
- Add policy for rssh_chroot_helper
- Add missing flask definitions
- Allow udev to relabelto removable_t
- Fix label on /var/log/wicd.log
- Transition to initrc_t from init when executing bin_t
- Add audit_access permissions to file
- Make removable_t a device_node
- Fix label on /lib/systemd/* - Fixes for systemd to manage /var/run
- Dontaudit leaks by firstboot - Allow chome to create netlink_route_socket
- Add additional MATHLAB file context
- Define nsplugin as an application_domain
- Dontaudit sending signals from sandboxed domains to other domains
- systemd requires init to build /tmp /var/auth and /var/lock dirs
- mount wants to read devicekit_power /proc/ entries
- mpd wants to connect to soundd port
- Openoffice causes a setattr on a lib_t file for normal users, add dontaudit
- Treat lib_t and textrel_shlib_t directories the same
- Allow mount read access on virtual images - Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
- Allow devicekit_power to domtrans to mount
- Allow dhcp to bind to udp ports > 1024 to do named stuff
- Allow ssh_t to exec ssh_exec_t
- Remove telepathy_butterfly_rw_tmp_files(), dev_read_printk() interfaces which are nolonger used
- Fix clamav_append_log() intefaces
- Fix 'psad_rw_fifo_file' interface - Allow cobblerd to list cobler appache content - Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps - Update to upstream -Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
- dovecot-auth_t needs ipc_lock
- gpm needs to use the user terminal
- Allow system_mail_t to append ~/dead.letter
- Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
- Add pid file to vnstatd
- Allow mount to communicate with gfs_controld
- Dontaudit hal leaks in� x�������������h������ X : ��y @o����x������ �$ k ���������������� �� �� �� � pad
- Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
- systemd_logind_t sets the attributes on usb devices
- Allow hddtemp_t to read etc_t files
- Add permissivedomains module
- Move all permissive domains calls to permissivedomain.te
- Allow pegasis to send kill signals to other UIDs - Allow insmod_t to use fds leaked from devicekit
- dontaudit getattr between insmod_t and init_t unix_stream_sockets
- Change sysctl unit file interfaces to use systemctl
- Add support for chronyd unit file
- Allow mozilla_plugin to read gnome_usr_config
- Add policy for new gpsd
- Allow cups to create kerberos rhost cache files
- Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten - Add policy for sa-update being run out of cron jobs
- Add create perms to postgresql_manage_db
- ntpd using a gps has to be able to read/write generic tty_device_t
- If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
- fix spec file
- Remove qemu_domtrans_unconfined() interface
- Make passenger working together with puppet
- Add init_dontaudit_rw_stream_socket interface
- Fixes for wordpress - Turn on allow_domain_fd_use boolean on F16
- Allow syslog to manage all log files
- Add use_fusefs_home_dirs boolean for chrome
- Make vdagent working with confined users
- Add abrt_handle_event_t domain for ABRT event scripts
- Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
- Allow httpd_git_script_t to read passwd data
- Allow openvpn to set its process priority when the nice parameter is used - livecd fixes
- spec file fixes - fetchmail can use kerberos
- ksmtuned reads in shell programs
- gnome_systemctl_t reads the process state of ntp
- dnsmasq_t asks the kernel to load multiple kernel modules
- Add rules for domains executing systemctl
- Bogus text within fc file - Add cfengine policy - Add abrt_domain attribute
- Allow corosync to manage cluster lib files
- Allow corosync to connect to the system DBUS - Add sblim, uuidd policies
- Allow kernel_t dyntrasition to init_t - init_t need setexec
- More fixes of rules which cause an explosion in rules by Dan Walsh - Allow rcsmcertd to perform DNS name resolution
- Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
- Allow tmux to run as screen
- New policy for collectd
- Allow gkeyring_t to interact with all user apps
- Add rules to allow firstboot to run on machines with the unconfined.pp module removed - Allow systemd_logind to send dbus messages with users
- allow accountsd to read wtmp file
- Allow dhcpd to get and set capabilities - Fix oracledb_port definition
- Allow mount to mounton the selinux file system
- Allow users to list /var directories - systemd fixes - Add initial policy for abrt_dump_oops_t
- xtables-multi wants to getattr of the proc fs
- Smoltclient is connecting to abrt
- Dontaudit leaked file descriptors to postdrop
- Allow abrt_dump_oops to look at kernel sysctls
- Abrt_dump_oops_t reads kernel ring buffer
- Allow mysqld to request the kernel to load modules
- systemd-login needs fowner
- Allow postfix_cleanup_t to searh maildrop - Initial systemd_logind policy
- Add policy for systemd_logger and additional proivs for systemd_logind
- More fixes for systemd policies - Allow setsched for virsh
- Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
- iptables: the various /sbin/ip6?tables.* are now symlinks for
/sbin/xtables-multi - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
- Allow colord to interact with the users through the tmpfs file system
- Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
- Add label for /var/log/mcelog
- Allow asterisk to read /dev/random � x�������������������� X ; .�y ������&�������! �$ r ���������������� �! �! �! � location
- fix php-fpm config relocation
- drop embdded subpackage for scl - missing requires on scl-runtime
- relocate /var/lib/session
- fix php-devel requires
- rename, but don't relocate macros.php - initial spec rewrite for scl build - fix typo in systemd macro - php-fpm: enable PrivateTmp
- php-fpm: new systemd macros (#850268)
- php-fpm: add upstream patch for startup issue (#846858) - systemd integration, https://bugs.php.net/63085
- no odbc call during timeout, https://bugs.php.net/63171
- check sqlite3_column_table_name, https://bugs.php.net/63149 - most failed tests explained (i386, x86_64) - fix for http://bugs.php.net/63126 (#783967) - patch to ensure we use latest libdb (not libdb4) - really fix rhel tests (use libzip and libdb) - fix test to enable zip extension on RHEL-7 - remove session.save_path from php.ini
move it to apache and php-fpm configuration files - update to 5.4.7
http://www.php.net/releases/5_4_7.php
- php-fpm: don't daemonize - enable php-fpm on secondary arch (#849490) - update to 5.4.6
- update to v9 of systzdata patch
- backport fix for new libxml - update to 5.4.5 - also provide php(language)%{_isa}
- define %{php_version} - drop BR for libevent (#835671)
- provide php(language) to allow version check - add missing provides (core, ereg, filter, standard) - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
- use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
- use /run/php-fpm instead of /var/run/php-fpm - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) - update to 5.4.2 (CVE-2012-1823) - update to 5.4.1 - rebuild for new icu
- switch (conditionally) to libdb-devel - fix Loadmodule with MPM event (use ZTS if not MPM worker)
- split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 - rebuild for missing automatic provides (#807889) - really use _httpd_mmn - rebuild against httpd 2.4
- use _httpd_mmn, _httpd_apxs macros - update to PHP 5.4.0 finale - update to PHP 5.4.0RC8 - update to PHP 5.4.0RC7
- provides env file for php-fpm (#784770)
- add patch to use system libzip (thanks to spot)
- don't provide INSTALL file - all binaries in /usr/bin with zts prefix - update to PHP 5.4.0RC6
https://fedoraproject.org/wiki/Features/Php54 - fix systemd unit - switch to systemd - Rebuild for new libpng - rebuild with new gmp without compat lib - rebuild with new gmp - revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior - add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd) - update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8 - update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- merge php-zts into php (#698084) - rebuild for net-snmp SONAME bump - enable mhash extension (emulated by hash extension) - rebuild for new MySQL client library - update to 5.3.6
http://www.php.net/ChangeLog-5.php#5.3.6
- fix php-pdo arch specific requires - disable zip extension per "No Bundled Libraries" policy (#551513) - rebuild for icu 4.6 - fix systemd-units requires - add tmpfiles.d configuration for php-fpm
- add Arch specific requires/provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - update to 5.3.5
http://www.php.net/ChangeLog-5.php#5.3.5
- clean duplicate configure options - rebuild against MySQL 5.5.8
- remove all RPM_SOURCE_DIR - security patch from upstream for #660517 - update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812) - ghost /var/run/php-fpm (see #656660)
- add filter_setup to not provides extensions as .so - use mysql_config in libdir directly to avoid biarch build failures - rebuild for new net-snmp - add php-fpm sub-package - PHP 5.3.3 released - garbage collector upstream patches (#580236) - rebuild for icu 4.4 - PHP 5.3.2 Released!
- remove mime_magic option (now provided by fileinfo, by emu)
- add patch for http://bugs.php.net/50578
- remove patch for libedit (upstream)
- add runselftest option to allow build without test suite - update to v7 of � x�������������H������ X < ��y ������������K �$ q ���������������� �K �K . J���� ��
7������E"��B����$�� ��� ����S�q����Q�Nj\O��9�I�j��>�'�rU 9.��G��:�P v� X�zzW�����3_`��0�o���\%��͗��ȯl���6|�a�G��Ţዀ�ۧ(p��I,F-�M I�"��6904a35946aafd8284103faf034719aa0bda1a3c 3bc639cca723998e4ec662c97356f66b6dad08c824fd246bfc4068df9e237734 ee� � ee��vm] KVM: PPC: Book3S HV: Allow passthrough of an emulated device to an L3 guest (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S: Introduce new hcall H_COPY_TOFROM_GUEST to access quadrants 1 & 2 (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S HV: Allow passthrough of an emulated device to an L2 guest (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Update kvmppc_st and kvmppc_ld to use quadrants (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Add load_from_eaddr and store_to_eaddr to the kvmppc_ops struct (Vitaly Kuznetsov) [1692804]
- [powerpc] KVM: PPC: Book3S HV: Implement functions to access quadrants 1 & 2 (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S HV: Add function kvmhv_vcpu_is_radix() (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: PPC: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv machines (Vitaly Kuznetsov) [1692804]
- [tools] kvm: selftests: ucall: improve ucall placement in memory, fix unsigned comparison (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: x86: Dynamically allocate guest_fpu (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: x86: Use task structs fpu field for user (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move the checks for Guest Non-Register States to a separate helper function (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move the checks for Host Control Registers and MSRs to a separate helper function (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move the checks for VM-Entry Control Fields to a separate helper function (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move the checks for VM-Exit Control Fields to a separate helper function (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Remove param indirection from nested_vmx_check_msr_switch() (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Move the checks for VM-Execution Control Fields to a separate helper function (Vitaly Kuznetsov) [1692804]
- [kvm] KVM: nVMX: Prepend "nested_vmx_" to check_vmentry_{pre, post}reqs() (Vitaly Kuznetsov) [1692804]
- [kvm] KVM/VMX: Check ept_pointer before flushing ept tlb (Vitaly Kuznetsov) [1692804]
- [kvm] KVM nVMX: MSRs should not be stored if VM-entry fails during or after loading guest state (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: x86: Don't modify MSR_PLATFORM_INFO on vCPU reset (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: vmx: add cpu into VMX preemption timer bug list (Vitaly Kuznetsov) [1692804]
- [kvm] x86/hyper-v: Stop caring about EOI for direct stimers (Vitaly Kuznetsov) [1692804]
- [kvm] x86/kvm/hyper-v: avoid open-coding stimer_mark_pending() in kvm_hv_notify_acked_sint() (Vitaly Kuznetsov) [1692804]
- [kvm] x86/kvm/hyper-v: direct mode for synthetic timers (Vitaly Kuznetsov) [1692804]
- [x86] x86/kvm/hyper-v: use stimer config definition from hyperv-tlfs.h (Vitaly Kuznetsov) [1692804]
- [tools] KVM: selftests: Add hyperv_cpuid test (Vitaly Kuznetsov) [1692804]
- [tools] KVM: selftests: implement an unchecked version of vcpu_ioctl() (Vitaly Kuznetsov) [1692804]
- [kvm] x86/kvm/hyper-v: Introduce KVM_GET_SUPPORTED_HV_CPUID (Vitaly Kuznetsov) [1692804]
- [kvm] x86/hyper-v: Do some housekeeping in hyperv-tlfs.h (Vitaly Kuznetsov) [1692804]
- [x86] x86/hyper-v: Mark TLFS structures packed (Vitaly Kuznetsov) [1692804]
- [kvm] x86/kvm/hyper-v: Introduce nested_get_evmcs_version() helper (Vitaly Kuznetsov) [1692804]
- [kvm] x86: kvm: hyperv: don't retry message delivery for periodic timers (Vitaly Kuznetsov) [1692804]
- [kvm] x86: kvm: hyperv: simplify SynIC message delivery (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: x86: remove unnecessary recalculate_apic_map (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: svm: remove unused struct definition (Vitaly Kuznetsov) [1692804]
- [kvm] kvm: vmx: Skip all SYSCALL MSRs in setup_msrs() when !EFER.SCE (Vitaly Kuznetsov) [1692804� x�������������������� X = h�y ��������������� �$ ] ���������������� � � � � 64 LSE atomics (#1821994) - consider negative edges in cycle detection (#1817991, PR gcov-profile/91601)
- fix Fortran debug info for arrays with descriptors (#1655624,
PR fortran/92775)
- fix wrong code emitted for movv1qi on s390x (#1784758, PR target/92950) - update from Fedora gcc-8.3.1-5 (#1747157)
- use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847) - fix shift count operand printing (#1730380)
- fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
- fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
- fix ICE with template placeholder for TTP (PR c++/86098, #1730454) - backport workaround for broken C/C++ wrappers to LAPACK (#1711346) - additional fix for the libgomp testsuite (#1707568) - backport the -fuse-ld=lld option (#1670535)
- TLS model fix (#1678555, PR c++/85400)
- two small autoFDO fixes (#1686082)
- libgomp update (#1707568)
- member template redeclaration fix (#1652704, PR c++/86747)
- turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
ppc and ppc64 for 64-bit multilib (#1708309)
- avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
expansion (#1666977) - tweak gcc8-rh1668903-1.patch and gcc8-rh1668903-2.patch patches - update from Fedora 8.3.1-4 (#1680182)
- drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch - update from Fedora 8.3.1-3 (#1680182)
- remove load and test FP splitter (#1673116)
- fix *movsi_from_df (#1677652)
- add missing headers
- add support for live patching (#1668903)
- retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch - remove python2 dependecy (#1595385) - Backport PPC string inlines from trunk which allow for valgrind's
memcheck to work properly (#1652929)
- Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016) - avoid IFUNC resolver access to uninitialized data (#1559350, PR libgcc/60790) - fix typos in manual (#1612514) - enable hardening of binaries (#1624114)
- disable libgccjit on RHEL - update from Fedora 8.2.1-3 - change the default -march on s390x to z13 with tuning for z14 (#1571124)
- use --disable-multilib on s390x - rebuild - rebuild - enable annobin annotations (#1574936)
- update from Fedora 8.2.1-1 - update from Fedora 8.1.1-5 - fix BuildRequires of python-sphinx - update from Fedora 8.1.1-1 - new package <lua> <lua> libgcj libgcj-devel libgcj-src libgnat libmudflap libmudflap-devel libmudflap-static
� � � � � � � � � � � � � 8.5.0-23.el8_10 8.5.0-23.el8_10 8.5.0-23.el8_10 8.5.0-23.el8_10 8.5.0-23.el8_10 8.5.0-23.el8_10 libgcc_s-8-20210514.so.1 libgcc_s.so.1 .build-id 4b 04a53dddaf0c429966728bc1b0b9211e679169 libgcc COPYING COPYING.LIB COPYING.RUNTIME COPYING3 COPYING3.LIB /lib64/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/4b/ /usr/share/licenses/ /usr/share/licenses/libgcc/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b04a53dddaf0c429966728bc1b0b9211e679169, stripped directory ASCII text P P P P P P P P P P P P P P
P
P P P P P
P
P P P utf-8 913ee78b914541c73d2dcbaefc633c6bdaadb6240e80b0f6012fe96b3113cbc8 ? ���� 1 �3 !pQ�p�)�Tξ7��]�mtZ`g��}
�]�mtZ`���0�1���B�6���L.$��h���:���?!�o*L�f]V���z��so͂K3On�1��W)� x�������������8������ X > ��y ((������P8�������� �$ b ���������������� �� �� �� � to make ipa-server-install working.
- Label zabbix_var_lib_t directories
- Label conmans pid file as conman_var_run_t
- Label also /var/run/glusterd.socket file as gluster_var_run_t
- Fix policy for pkcsslotd from opencryptoki
- Update cockpik policy from cockpit usptream.
- Allow certmonger to exec ldconfig to make ipa-server-install working.
- Added support for Naemon policy
- Allow keepalived manage snmp files
- Add setpgid process to mip6d
- remove duplicate rule
- Allow postfix_smtpd to stream connect to antivirus
- Dontaudit list /tmp for icecast
- Allow zabbix domains to access /proc//net/dev. - Allow zabbix domains to access /proc//net/dev.
- Dontaudit list /tmp for icecast (#894387)
- Allow postfix_smtpd to stream connect to antivirus (#1105889)
- Add setpgid process to mip6d
- Allow keepalived manage snmp files(#1053450)
- Added support for Naemon policy (#1120789).
- Allow certmonger to exec ldconfig to make ipa-server-install working. (#1122110)
- Update cockpik policy from cockpit usptream. - Revert labeling back to /var/run/systemd/initctl/fifo
- geoclue dbus chats with modemmanger
- Bluejeans wants to connect to port 5000
- geoclue dbus chats with modemmange - Allow sysadm to dbus chat with systemd
- Add logging_dontaudit_search_audit_logs()
- Add new files_read_all_mountpoint_symlinks()
- Fix labeling path from /var/run/systemd/initctl/fifo to /var/run/initctl/fifo.
- Allow ndc to read random and urandom device (#1110397)
- Allow zabbix to read system network state
- Allow fprintd to execute usr_t/bin_t
- Allow mailserver_domain domains to append dead.letter labeled as mail_home_t
- Add glance_use_execmem boolean to have glance configured to use Ceph/rbd
- Dontaudit search audit logs for fail2ban
- Allow mailserver_domain domains to create mail home content with right labeling
- Dontaudit svirt_sandbox_domain doing access checks on /proc
- Fix files_pid_filetrans() calling in nut.te to reflect allow rules.
- Use nut_domain attribute for files_pid_filetrans() for nut domains.
- Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs
- Fix nut domains only have type transition on dirs in /run/nut directory.
- Allow net_admin/net_raw capabilities for haproxy_t. haproxy uses setsockopt()
- Clean up osad policy. Remove additional interfaces/rules - Allow systemd domains to check lvm status
- Allow getty to execute plymouth.#1112870
- Allow sshd to send signal to chkpwd_t
- initrctl fifo file has been renamed
- Set proper labeling on /var/run/sddm
- Fix labeling for cloud-init logs
- Allow kexec to read kallsyms
- Add rhcs_stream_connect_haproxy interface, Allow neutron stream connect to rhcs
- Add fsetid caps for mandb. #1116165
- Allow all nut domains to read /dev/(u)?random.
- Allow deltacloudd_t to read network state BZ #1116940
- Add support for KVM virtual machines to use NUMA pre-placement
- Allow utilize winbind for authentication to AD
- Allow chrome sandbox to use udp_sockets leaked in by its parent
- Allow gfs_controld_t to getattr on all file systems
- Allow logrotate to manage virt_cache
- varnishd needs to have fsetid capability
- Allow dovecot domains to send signal perms to themselves
- Allow apache to manage pid sock files
- Allow nut_upsmon_t to create sock_file in /run dir
- Add capability sys_ptrace to stapserver
- Mysql can execute scripts when run in a cluster to see if someone is listening on a socket, basically runs lsof
- Added support for vdsm - If I can create a socket I need to be able to set the attributes
- Add tcp/8775 port as neutron port
- Add additional ports for swift ports
- Added changes to fedora from bug bz#1082183
- Add support for tcp/6200 port
- Allow collectd getattr access to configfs_t dir Fixes Bug 1115040
- Update neutron_manage_lib_files() interface
- Allow glustered to connect to ephemeral ports
- Allow apache to search ipa lib files by default
- Allow neutron to domtrans to haproxy
- Add rhcs_domtrans_haproxy()
- Add support for openstack-glance-* unit files
- Add initial support for /usr/bin/glance-sc� x�������������������� X ? ��y P�������������# �$ 3 ���������������� # " $ � cups-get-classes patch (bug #870612). - Add quirk rule for Xerox Phaser 3124 (#867392)
- backport more quirk rules (STR #4191) - The cups-libs subpackage contains code distributed under the zlib
license (md5.c). - quirk handler for port reset done by new USB backend (bug #847923, STR #4155) - fixed usage of parametrized systemd macros (#847405) - Requires: cups-filters - 1.6.1
- simplified systemd.patch due to removed CUPS Browsing protocol (STR #3922)
- removed:
textonly filter - moved to cups-filters
pstopdf filter - cups-filters also has pstopdf (different)
PHP module - moved to cups-filters (STR #3932)
serial.patch - moved to cups-filters
getpass.patch - r10140 removed the getpass() use
snmp-quirks.patch - fixed upstream (r10493)
avahi patches - merged upstream (STR #3066)
icc.patch - merged upstream (STR #3808)
- TODO:
- do we need cups-build.patch ?
- added filesystem sub-package (#624695)
- use macroized systemd scriptlets - 1.5.4 - Don't enable IP-based systemd socket activation by default (bug #842365). - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Require systemd instead of udev. - Buildrequire libusb1 (STR #3477) - 1.5.3 - Add triggers for samba4-client. (#817110)
- No need to define BuildRoot and clean it in clean and install section anymore.
- %defattr no longer needed in %files sections. - Install /usr/lib/tmpfiles.d/cups-lp.conf to support /dev/lp* devices (#812641)
- Move /etc/tmpfiles.d/cups.conf to /usr/lib/tmpfiles.d/ (#812641) - The IPP backend did not always setup username/password authentication
for printers (bug #810007, STR #3985)
- Detect authentication errors for all requests.
(bug #810007, upstream commit revision10277) - Removed private-shared-object-provides filter lines as they are not
necessary (see bug #807767 comment #3). - Rebuild against fixed rpm (bug #807767) - Avoid systemd PrivateTmp bug by explicitly requiring the fixed
version of systemd (bug #807672). - Removed debugging messages from systemd-socket patch. - Pulled in bugfixes from Avahi patches on fedorapeople.org. - If the translated message is empty return the original message
(bug #797570, STR #4033). - cups-polld: restart polling on error (bug #769292, STR #4031). - Removed hard requirement on colord as it is optional. - Synthesize notify-printer-uri for job-completed events where the job
never started processing (bug #784786, STR #4014).
- Removed banners from LSPP patch on Dan Walsh's advice. - 1.5.2
- Updated FSF address in pstopdf and textonly filters - build against php 5.4.0, patch for STR #3999
- add filter to fix private-shared-object-provides
- add %check for php extension - Use PrivateTmp=true in the service file (bug #782495). - Replace newline characters with spaces in reported Device IDs
(bug #782129, STR #4005).
- Don't accept Device URIs of '\0' from SNMP devices
(bug #770646, STR #4004). - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Fixed textonly filter to work with single copies (bug #738412). - Detangle cups-serverbin-compat.patch from cups-lspp.patch.
- Bind to datagram socket as well in systemd cups.socket unit file, to
prevent that port being stolen by another service (bug #760070). - Fixed trigger (bug #748841). - Set correct systemd service default on upgrade, once updates are
applied (bug #748841). - Set the correct PostScript command filter for e.g. foomatic queues
(STR #3973). - Set correct systemd service default on upgrade (bug #748841). - Make sure to guard against retrying the Avahi connection whilst
already doing so (Ubuntu #877967). - Use libsystemd-daemon instead of bundling sd-daemon.c. - Use upstream fix for driverd issue (bug #742989).
- Array handling fixes for DNSSDPrinters.
- Array handling fixes for Avahi poll implementation.
- Increase client blocking timeout from 30s to 70s (bug #744715).
- Set BindIPv6Only=ipv6-only in systemd socket unit file as better fix
for bug #737230. - Fixed Timeouts array comparison function (Ubuntu #860691). - Handle "localho� x�������������(������ X @ +�y 0��������� �$ ���������������� � �@Y��@Y��@Y��@Y�3�Y�3�Y�3�Y�@Florian Weimer <fweimer@redhat.com> - 2.28-251.31 Florian Weimer <fweimer@redhat.com> - 2.28-251.30 Florian Weimer <fweimer@redhat.com> - 2.28-251.29 Florian Weimer <fweimer@redhat.com> - 2.28-251.28 Arjun Shankar <arjun@redhat.com> - 2.28-251.27 DJ Delorie <dj@redhat.com> - 2.28-251.26 Florian Weimer <fweimer@redhat.com> - 2.28-251.25 Patsy Griffin <patsy@redhat.com> - 2.28-251.24 Arjun Shankar <arjun@redhat.com> - 2.28-251.23 Florian Weimer <fweimer@redhat.com> - 2.28-251.22 Patsy Griffin <patsy@redhat.com> - 2.28-251.21 Patsy Griffin <patsy@redhat.com> - 2.28-251.20 Patsy Griffin <patsy@redhat.com> - 2.28-251.19 Patsy Griffin <patsy@redhat.com> - 2.28-251.18 Patsy Griffin <patsy@redhat.com> - 2.28-251.17 Arjun Shankar <arjun@redhat.com> - 2.28-251.16 Arjun Shankar <arjun@redhat.com> - 2.28-251.15 Patsy Griffin <patsy@redhat.com> - 2.28-251.14 Carlos O'Donell <carlos@redhat.com> - 2.28-251.13 Carlos O'Donell <carlos@redhat.com> - 2.28-251.12 DJ Delorie <dj@redhat.com> - 2.28-251.11 Patsy Griffin <patsy@redhat.com> - 2.28-251.10 Florian Weimer <fweimer@redhat.com> - 2.28-251.9 Patsy Griffin <patsy@redhat.com> - 2.28-251.8 Florian Weimer <fweimer@redhat.com> - 2.28-251.7 Patsy Griffin <patsy@redhat.com> - 2.28-251.6 Patsy Griffin <patsy@redhat.com> - 2.28-251.5 Patsy Griffin <patsy@redhat.com> - 2.28-251.4 Patsy Griffin <patsy@redhat.com> - 2.28-251.3 Florian Weimer <fweimer@redhat.com> - 2.28-251.2 Florian Weimer <fweimer@redhat.com> - 2.28-251.1 Florian Weimer <fweimer@redhat.com> - 2.28-251 Arjun Shankar <arjun@redhat.com> - 2.28-250 Florian Weimer <fweimer@redhat.com> - 2.28-249 Florian Weimer <fweimer@redhat.com> - 2.28-248 Carlos O'Donell <carlos@redhat.com> - 2.28-247 DJ Delorie <dj@redhat.com> - 2.28-246 Florian Weimer <fweimer@redhat.com> - 2.28-245 Florian Weimer <fweimer@redhat.com> - 2.28-244 Florian Weimer <fweimer@redhat.com> - 2.28-243 Florian Weimer <fweimer@redhat.com> - 2.28-242 Florian Weimer <fweimer@redhat.com> - 2.28-241 Arjun Shankar <arjun@redhat.com> - 2.28-240 Florian Weimer <fweimer@redhat.com> - 2.28-239 DJ Delorie <dj@redhat.com> - 2.28-238 Arjun Shankar <arjun@redhat.com> - 2.28-237 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-236.7 Carlos O'Donell <carlos@redhat.com> - 2.28-236.6 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-236.5 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-236.4 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-236.3 Florian Weimer <fweimer@redhat.com> - 2.28-236.2 Florian Weimer <fweimer@redhat.com> - 2.28-236.1 Carlos O'Donell <carlos@redhat.com> - 2.28-236 DJ Delorie <dj@redhat.com> - 2.28-235 Florian Weimer <fweimer@redhat.com> - 2.28-234 DJ Delorie <dj@redhat.com> - 2.28-233 Florian Weimer <fweimer@redhat.com> - 2.28-232 Carlos O'Donell <carlos@redhat.com> - 2.28-231 DJ Delorie <dj@redhat.com> - 2.28-230 DJ Delorie <dj@redhat.com> - 2.28-229 Florian Weimer <fweimer@redhat.com> - 2.28-228 Patsy Griffin <patsy@redhat.com> - 2.28-227 Florian Weimer <fweimer@redhat.com> - 2.28-226 Florian Weimer <fweimer@redhat.com> - 2.28-225 Arjun Shankar <arjun@redhat.com> - 2.28-224 Arjun Shankar <arjun@redhat.com> - 2.28-223 Florian Weimer <fweimer@redhat.com> - 2.28-222 Florian Weimer <fweimer@redhat.com> - 2.28-221 Florian Weimer <fweimer@redhat.com> - 2.28-220 Arjun Shankar <arjun@redhat.com> - 2.28-219 DJ Delorie <dj@redhat.com> - 2.28-218 Arjun Shankar <arjun@redhat.com> - 2.28-217 Arjun Shankar <arjun@redhat.com> - 2.28-216 DJ Delorie <dj@redhat.com> - 2.28-215 Florian Weimer <fweimer@redhat.com> - 2.28-214 Florian Weimer <fweimer@redhat.com> - 2.28-213 Florian Weimer <fweimer@redhat.com> - 2.28-212 Florian Weimer <fweimer@redhat.com> - 2.28-211 Arjun Shankar <arjun@redhat.com> - 2.28-210 Carlos O'Donell <carlos@redhat.com> - 2.28-209 Patsy Griffin <patsy@redhat.com> - 2.28-208 Florian Weimer <fweimer@redhat.com> - 2.28-207 Arjun Shankar <arjun@redhat.com> - 2.28-206 DJ Delorie <dj@redhat.com) - 2.28-205 Florian Weimer <fweimer@redhat.com> - 2.28-204 Patsy Griffin <patsy@redhat.com> - 2.28-203 Siddhesh Poyarek� x����������p������ X � i�y ����x������ �$ \ ���������������� � � � �ḃpI����*�x�{'�m�/u�Br���D�p������^�H{�`�� qD8���Y@\�
h�t�X�^��^ ��>i���Gc��kR�� ��t��- d�S0F\�L]��h:�M9�Ʈ�M*9�Fw֥�g�K�`v<��W�zˢ�7�������Q�cb�# � d(̊J;
�J�p��R����0�� ZD̰��j��?#]����A8 ���W
�-L�)�L90p`�I���/R��߽��HWV�N ^�Q�?�Y�^ʺ�d���1R������6,��\9j⽨"�!(:A�uk���t��%Ps��~P'�Z?�i�QB����%Ҏ��D�C��o4ޠ�:~���� �`����5&.�_��E���{��j��4���*p�7��Ee[��wp�i����c�+>�&"����Ha,57��� _ 4p��
����8�%�3 !pQ�p�)�Tξ7��]�mtZ`g��}
�]�mtZ`�B�mS�zV�M����
�'@8��L�"�6�D!��G� �^�"DA��K��1���� `�W4�9q�iJ��ȟ? oZ�ެ]�h]`/otR���T�+� "��Ln�d�����r+���p�`�s8>!�2h`o#u i���A�.%���EfI_&Q(�y1(˺F� �� ?�/<��aR5�5Qϋ ��u�D~�� �,sL�Vp���!��~�����5Av%G &�O_���{�|(�JF��J���=#��NݙxM���L ñ�!��[�&Ao�0�PH�q�8~]C�a��G��B�{4T���Ys�T�]�����P�V.���u[��FI�M�XSh�����.� ���b��g�'=P7�fveoE��5�⤇��NmGM$pr���z/��B�x��)� ����Xv��;5lT���y ������W�)6E���� c �t�ü�_@|AxI����k�����i�)�C퇂k�V,5-�����)
�8��}6Ԍł�t�����@5431bfee5218476e7d05a30e7f402887930711c6 d6160b045ff012f35a2138f1ff4aed88ca030e48fb7c8ab2097fb920bcd01d41 h�l � h�a [powerpc] powerpc/powernv: Reference iommu_table while it is linked to a group (Sam Bobroff) [1524679]
- [powerpc] powerpc/iommu_api: Move IOMMU groups setup to a single place (Sam Bobroff) [1524679]
- [powerpc] powerpc/powernv/pseries: Rework device adding to IOMMU groups (Sam Bobroff) [1524679]
- [powerpc] powerpc/pseries: Remove IOMMU API support for non-LPAR systems (Sam Bobroff) [1524679]
- [powerpc] powerpc/pseries/npu: Enable platform support (Sam Bobroff) [1524679]
- [powerpc] powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (Sam Bobroff) [1524679]
- [powerpc] powerpc/powernv/npu: Move OPAL calls away from context manipulation (Sam Bobroff) [1524679]
- [powerpc] powerpc/powernv: Move npu struct from pnv_phb to pci_controller (Sam Bobroff) [1524679]
- [powerpc] powerpc/vfio/iommu/kvm: Do not pin device memory (Sam Bobroff) [1524679]
- [vfio] powerpc/mm/iommu/vfio_spapr_tce: Change mm_iommu_get to reference a region (Sam Bobroff) [1524679]
- [powerpc] powerpc/ioda/npu: Call skiboot's hot reset hook when disabling NPU2 (Sam Bobroff) [1524679]
- [powerpc] powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (Sam Bobroff) [1524679]
- [powerpc] powerpc/powernv/ioda1: Remove dead code for a single device PE (Sam Bobroff) [1524679]
- [rpmspec] redhat: add TC selftests to kernel-selftests-internal (Ivan Vecera) [1691376]
- [rpmspec] redhat: add net selftests to kernel-selftests-internal (Ivan Vecera) [1691376]
- [rpmspec] redhat: add pktgen samples to kernel-selftests-internal (Ivan Vecera) [1691376]
- [rpmspec] redhat: rename bpf_samples to kernel-selftests-internal (Ivan Vecera) [1691376]
- [rpmspec] redhat: remove bpf_samples dependency on glibc-static and build it by default (Ivan Vecera) [1691376]
- [tools] selftests: bpf: modify urandom_read and link it non-statically (Ivan Vecera) [1691376] - [netdrv] ibmvnic: Fix netdev feature clobbering during a reset (Steve Best) [1699018]
- [netdrv] ibmvnic: Enable GRO (Steve Best) [1699018]
- [x86] x86/perf/amd: Remove need to check "running" bit in NMI handler (David Arcari) [1640238]
- [x86] x86/perf/amd: Resolve NMI latency issues for active PMCs (David Arcari) [1640238]
- [x86] x86/perf/amd: Resolve race condition when disabling PMC (David Arcari) [1640238]
- [netdrv] qed: Fix qed_mcp_halt|resume() (Manish Chopra) [1697310] - [x86] x86/kexec: Fix a kexec_file_load() failure (Bhupesh Sharma) [1666078]
- [arm64] arm64: kexec_file: include linux/vmalloc.h (Bhupesh Sharma) [1666078]
- [arm64] arm64: kexec_file: handle empty command-line (Bhupesh Sharma) [1666078]
- [arm64] arm64: kexec_file: return successfully even if kaslr-seed doesn't exist (Bhupesh Sharma) [1666078]
- [arm64] arm64: kexec_file: Refactor setup_dtb() to consolidate error checking (Bhupesh Sharma) [1666078]
- [arm64] arm64: kexec_file: add kaslr support (Bhupesh Sharma) [1666078]
- � x�������������x����� X B ��y ��������������+ �$ ; ���������������� + * f � STR #1795/STR #1881 (bug #201167). - Apply patch from STR #1881 for remote IPP printing (bug #201167). - Updated LSPP patch from Matt Anderson.
- Ship pstopdf filter for LSPP. - Use replacement snmp.c from STR #1737 (bug #193093).
- Re-enable LSPP; doesn't harm browsing after all. - Disable LSPP for now, since it seems to break browsing somehow. - Fixed package requirements (bug #199903). - Apply Matt Anderson's LSPP patch.
- Renumbered patches. - 1.2.2. - Sync with svn5754. Fixes bug #198987, bug #195532, bug #130118. - Require a new version of D-Bus and rebuild - Sync with svn5737. Fixes bug #192015. - rebuild - Ship with an empty classes.conf file. - Sync with svn5706.
- No longer need localhost, str1740, str1758, str1736, str1776 patches. - Bumped paps requirement.
- Don't use texttopaps for application/* MIME types (bug #197214). - Require paps and use it for printing text (bug #197214). - Don't export in SSLLIBS to cups-config. - Fixed cupsd network default printer crash (STR #1776). - rebuilt with new gnutls - Remove certs directory in %post, not %postun. - Remove old-style certs directory after upgrade (bug #194581). - Prevent 'too many open files' error (STR #1736, bug #194368). - Fix 'Allow from @IF(...)' (STR #1758, bug #187703). - ServerBin compatibility patch (bug #194005). - Applied upstream patch to fix STR #1740 (bug #192809). - Fixed group ownerships again (bug #192880). - Fixed 'service cups reload' not to give an error message. - Fix 'localhost' fallback in httpAddrGetList() (bug #192628, STR #1723). - 1.2.1.
- Another STR #1705 fix (bug #192034).
- Fixed devel package multilib conflict (bug #192664). - Sync to svn5568. No longer need rpath patch.
- Added a 'conflicts:' for kdelibs to prevent bug #192548. - Sync to svn5555. No longer need str1670 or str1705 patches. - Sync to svn5545.
- Ship a driver directory. - Disable back-channel data in the usb backend (STR #1705, bug #192034).
- Fix for 'browsing stops on reload', STR #1670 (bug #191217). - Sync to svn5538.
- Added 'restartlog' to initscript, for clearing out error_log. Useful
for problem diagnosis.
- Initscript no longer needs to check for printconf-backend. - Added image library build requirements.
- The devel package requires gnutls-devel (bug #191908). - 1.2.0. - Sync to svn5493. - Sync to svn5491. - Sync to svn5470.
- No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
- Switch to upstream PIE implementation (every single binary is PIE).
- Extend relro to all binaries.
- Better rpath patch. - No longer need backend, rcp, or ppdsdat patches.
- Use configure switch for LogFilePerm default instead of patch. - Own /var/run/cups (bug #189561).
- Sync from svn5460 to svn5462. - Patch pdftops to understand 'includeifexists', and use that in the
pdftops.conf file (bug #189809). - 1.2rc3.
- Ship an snmp.conf. - Updated to svn 5446. - Ignore .rpmnew and .rpmsave banner files. - Ship a /etc/cups/pdftops.conf file (bug #188583). - Build requires libacl-devel. - 1.2rc2. - Sync scheduler/* with svn 5383. - No longer need openssl-devel.
- Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
- Only warn about ACLs once (STR #1532).
- Fix imagetops filter (STR #1533).
- Sync pstops.c with svn 5382. - Build requires openldap-devel.
- Sync pstops.c with svn 5372. - Tweak to allow 'usb:/dev/usb/lp0'-style URIs again. - Backported svn 5365:5366 change for mutex-protected stringpool (STR #1530). - Fixed _cupsStrFree() (STR #1529). - Fixed interaction with CUPS 1.1 servers (STR #1528). - Fix group list of non-root backends (STR #1521, bug #186954). - Fix lpq -h (STR#1515, bug #186686). - Ship a printers.conf file, and a client.conf file. That way, they get
their SELinux file contexts set correctly. - 1.2rc1. - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
a comment saying why they shouldn't be used. - Fix KDE compatibility symbols _ipp_add_attr/_ipp_free_attr. - Update to svn snapshot. - Update to svn snapshot. No longer need users or policy patches. - Rebu� x��������������g����� X C �y x�������8���� � �$
���������������� � � � � �b��b��@b���b�k�b�@b��b�<�b|��by@bq@bj��b_��bX �bP#�bA�@b<]@b7@b3"�b,�@b(��b ��bs@b8�b�@b��b �b �a�r@a�}�a�@a�@a��a��a��a�M�a�@a�{�a�*@a��a��@a�c�a�z�a�4�a��@a�W@a�n@a~�@ay?@aqV@aj��af�@ab�a`2�aTU@aQ�@aK�aE�aC1�aA�@a=�a8��a2@a+v�a'�@a �@a�a
@a�@a
�@a;@aF�`� �`� @`� @`��`�@`�h@`�"@`̊�`��`���`�r�`�,�`�8@`��@`���`�f@`��@`�+�`��@`�Y�`��`y|@`v�@`r�`m��`dd@`\{@`[)�`W5@`T�@`KW�`H��`D�@`@�`:4@`6?�`)�`'�@`#�` �@`�`��`�@`
a@`@`&�_��_���_��@_�@_��@_�@_�S�_�@_�_�j�_��@_���_�R�_�^@_��@_���_��@_��@_���_��_���_�.@_��_}��_u�_p~�_k8�_cO�_\�@_X�_T�@_R,@_H�_FN�_A�_=@_2�@_&��_$�_!d�_*@_A@_�@^�z�^�^�@^�W@^��^� �^ۅ@^Ӝ@^�V@^��^�2�^��^���^�`�^�`�^�l@^��@^�1�^��@^��^���^��^��@^���^{G�^{G�^wS@^r
@^j$@^_�@^Y �^Ri@^M#@^F��^B�@^9\�^4�^-@^-@^)��^!��^ �@^
@^�^�^~@^ 8@]� @]��]��@]�}@]�]�@]��@]�p�]�*�]ʞ�]��]µ�]�)�]�W�]�n�]�z@]���]�?�]��]y@]w�@]rJ@]rJ@]g�@]bx@]M`@]Ik�]F�]A��]=�@]<<�]4S�],j�]G@Teddysun <i@teddysun.com> - 5.15.123-1 Teddysun <i@teddysun.com> - 5.15.122-1 Teddysun <i@teddysun.com> - 5.15.121-1 Teddysun <i@teddysun.com> - 5.15.120-1 Teddysun <i@teddysun.com> - 5.15.119-1 Teddysun <i@teddysun.com> - 5.15.118-1 Teddysun <i@teddysun.com> - 5.15.117-1 Teddysun <i@teddysun.com> - 5.15.116-1 Teddysun <i@teddysun.com> - 5.15.115-1 Teddysun <i@teddysun.com> - 5.15.114-1 Teddysun <i@teddysun.com> - 5.15.113-1 Teddysun <i@teddysun.com> - 5.15.112-1 Teddysun <i@teddysun.com> - 5.15.111-1 Teddysun <i@teddysun.com> - 5.15.110-1 Teddysun <i@teddysun.com> - 5.15.109-1 Teddysun <i@teddysun.com> - 5.15.108-1 Teddysun <i@teddysun.com> - 5.15.107-1 Teddysun <i@teddysun.com> - 5.15.106-1 Teddysun <i@teddysun.com> - 5.15.105-1 Teddysun <i@teddysun.com> - 5.15.104-1 Teddysun <i@teddysun.com> - 5.15.103-1 Teddysun <i@teddysun.com> - 5.15.102-1 Teddysun <i@teddysun.com> - 5.15.101-1 Teddysun <i@teddysun.com> - 5.15.100-1 Teddysun <i@teddysun.com> - 5.15.99-1 Teddysun <i@teddysun.com> - 5.15.98-1 Teddysun <i@teddysun.com> - 5.15.97-1 Teddysun <i@teddysun.com> - 5.15.96-1 Teddysun <i@teddysun.com> - 5.15.95-1 Teddysun <i@teddysun.com> - 5.15.94-1 Teddysun <i@teddysun.com> - 5.15.93-1 Teddysun <i@teddysun.com> - 5.15.92-1 Teddysun <i@teddysun.com> - 5.15.91-1 Teddysun <i@teddysun.com> - 5.15.90-1 Teddysun <i@teddysun.com> - 5.15.89-1 Teddysun <i@teddysun.com> - 5.15.88-1 Teddysun <i@teddysun.com> - 5.15.87-1 Teddysun <i@teddysun.com> - 5.15.86-1 Teddysun <i@teddysun.com> - 5.15.85-1 Teddysun <i@teddysun.com> - 5.15.84-1 Teddysun <i@teddysun.com> - 5.15.83-1 Teddysun <i@teddysun.com> - 5.15.82-1 Teddysun <i@teddysun.com> - 5.15.81-1 Teddysun <i@teddysun.com> - 5.15.80-1 Teddysun <i@teddysun.com> - 5.15.79-1 Teddysun <i@teddysun.com> - 5.15.78-1 Teddysun <i@teddysun.com> - 5.15.77-1 Teddysun <i@teddysun.com> - 5.15.76-1 Teddysun <i@teddysun.com> - 5.15.75-1 Teddysun <i@teddysun.com> - 5.15.74-1 Teddysun <i@teddysun.com> - 5.15.73-1 Teddysun <i@teddysun.com> - 5.15.72-1 Teddysun <i@teddysun.com> - 5.15.71-1 Teddysun <i@teddysun.com> - 5.15.70-1 Teddysun <i@teddysun.com> - 5.15.69-1 Teddysun <i@teddysun.com> - 5.15.68-1 Teddysun <i@teddysun.com> - 5.15.67-1 Teddysun <i@teddysun.com> - 5.15.66-1 Teddysun <i@teddysun.com> - 5.15.65-1 Teddysun <i@teddysun.com> - 5.15.64-1 Teddysun <i@teddysun.com> - 5.15.63-1 Teddysun <i@teddysun.com> - 5.15.62-1 Teddysun <i@teddysun.com> - 5.15.61-1 Teddysun <i@teddysun.com> - 5.15.60-1 Teddysun <i@teddysun.com> - 5.15.59-1 Teddysun <i@teddysun.com> - 5.15.58-1 Teddysun <i@teddysun.com> - 5.15.57-1 Teddysun <i@teddysun.com> - 5.15.56-1 Teddysun <i@teddysun.com> - 5.15.55-1 Teddysun <i@teddysun.com> - 5.15.54-1 Teddysun <i@teddysun.com> - 5.15.53-1 Teddysun <i@teddysun.com> - 5.15.52-1 Teddysun <i@teddysun.com> - 5.15.51-1 Teddysun <i@teddysun.com> - 5.15.50-1 Teddysun <i@teddysun.com> - 5.15.49-1 Teddysun <i@teddysun.com> - 5.15.48-1 Teddysun <i@teddysun.com> - 5.15.47-1 Teddysun <i@teddysun.com> - 5.15.46-1 Teddysun <i@teddysun.com> - 5.15.45-1 Teddysun <i@teddysun.com> - 5.15.44-1 Teddysun <i@teddysun.com> - 5.15.43-1 Te� x��������������V����� X D ��y ��������8j����) �$ 9 ���������������� ) ( * � program (bug #436153, CVE-2008-0047, STR #2729). - Ship a few doc files (bug #438598). - Don't ship broken symlink %{_datadir}/cups/doc (bug #438598). - Own %{_datadir}/cups/www (bug #437742). - Apply upstream fix for Adobe JPEG files (bug #166460, STR #2727). - LSB header for initscript (bug #246897).
- Move HTML-related files to main application directory so that the CUPS
web interface still works even with --excludedocs (bug #375631). - Set MaxLogSize to 0 to prevent log rotation. Upstream default is 1Mb, but
we want logrotate to be in charge. - Fix encoding of job-sheets option (bug #433753, STR #2715). - 1.3.6. - Include fixes from svn up to revision 7304. No longer need str2703 patch.
Build with --with-dbusdir.
- Try out logrotate again (bug #432730). - Fixed admin.cgi handling of DefaultAuthType (bug #432478, STR #2703). - Fix compilation of SO_PEERCRED support.
- Include fixes from svn up to revision 7287. No longer need str2650 or
str2664 patches. - Updated initscript for LSB exit codes and actions (bug #246897). - Build requires autoconf. - Main package requires libs sub-package of the same release. - Apply patch to fix busy looping in the backends (bug #426653, STR #2664). - Apply patch to prevent overlong PPD lines from causing failures except
in strict mode (bug #405061). Needed for compatibility with older
versions of foomatic (e.g. Red Hat Enterprise Linux 3/4).
- Applied upstream patch to fix cupsctl --remote-any (bug #421411, STR #2650). - Efficiency fix for pstoraster (bug #416871). - 1.3.5. - Rebuilt with higher release number. - rebuild - CVE-2007-4045 patch is not necessarily because cupsd_client_t objects are
not moved in array operations, only pointers to them. - Updated to improved dnssd backend from Till Kamppeter. - Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
are linked with gnutls.
- LSPP cupsdSetString/ClearString fixes (bug #378451). - Applied patch to fix CVE-2007-4045 (bug #250161).
- Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
CVE-2007-5393 (bug #345101). - 1.3.4 (bug #361681). - Use ppdev instead of libieee1284 for parallel port Device ID
retrieval (bug #311671). This avoids SELinux audit messages. - Use libieee1284 for parallel port Device ID retrieval (bug #311671). - 1.3.3. - Don't strip foomatic recommended strings from make/model names. - Write printcap when remote printers have timed out (bug #290831). - Include Till Kamppeter's dnssd backend.
- 1.3.2.
- No longer need str2512 patches. - Write printcap when a remote queue is deleted (bug #290831). - Avoid writing printcap unnecessarily (bug #290831). - 1.3.1. - More specific license tag. - 1.3.0. - Make cancel man page work properly with alternatives system (bug #249768).
- Don't call aclocal even when we modify m4 files -- CUPS does not use
automake (bug #250251). - Better buildroot tag.
- Moved LSPP access check in add_job() to before allocation of the job
structure (bug #231522).
- 1.3rc2. No longer need avahi patch. - Use kernel support for USB paper-out detection, when available
(bug #249213). - Better error checking in the LSPP patch (bug #231522). - Change initscript start level to 98, to start after avahi but before
haldaemon.
- The devel sub-package requires krb5-devel. - Build requires avahi-compat-libdns_sd-devel. Applied patch to fix
build against avahi (bug #245824).
- Build requires krb5-devel. - 1.3b1. No longer need relro, directed-broadcast, af_unix-auth, or
str2109 patches. - 1.2.12. No longer need adminutil or str2408 patches. - Another small improvement for the textonly filter (bug #244979). - Support for page-ranges and accounting in the textonly filter (bug #244979). - Better paper-out detection patch still (bug #246222). - Applied patch to fix group handling in PPDs (bug #186231, STR #2408). - Fixed _cupsAdminSetServerSettings() sharing/shared handling (bug #238057). - Fixed permissions on classes.conf in the file manifest (bug #245748). - 1.2.11. - Make the initscript use start priority 56 (bug #213828� x�������������pF����� X E ��y �������X����% �$ 5 ���������������� % $ & � Provide versioned LPRng symbol for rpmlint. - /usr/sbin/cupsd should be mode 0755 (bug #546004). - Changed subsystem lock file name in initscript
so the service is correctly stopped on reboot or halt (bug #659391). - BuildRequires python-cups instead of pycups. - Added /etc/tmpfiles.d/cups.conf to enable /var/run/cups directory on tmpfs (#656566). - 1.4.5.
- No longer need CVE-2010-2941, str3608 - Applied patch to fix cupsd memory corruption vulnerability
(CVE-2010-2941, bug #652161).
- Don't crash when MIME database could not be loaded (bug #610088). - Rebuilt for gcc bug 634757 - Perform locking for gnutls and avoid libgcrypt's broken
locking (bug #607159).
- Build with --enable-threads again (bug #607159).
- Force the use of gnutls despite thread-safety concerns (bug #607159). - Fixed serverbin-compat patch to avoid misleading "filter not
available" messages (bug #633779). - Fixed SNMP quirks parsing. - Use better upstream fix for STR #3608 (bug #606909). - Specify udevadm trigger action in initscript (bug #623959). - Merged F-12 change:
- Use numeric addresses for interfaces unless HostNameLookups are
turned on (bug #583054). - Added restartlog to initscript usage output (bug #612996). - Moved LICENSE.txt to libs sub-package. - Avoid empty notify-subscribed-event attributes (bug #606909,
STR #3608). - Use gnutls again but disable threading (bug #607159). - Rebuilt to keep correct package n-v-r ordering between releases. - Re-enabled SSL support by using OpenSSL instead of gnutls. - 1.4.4. Fixes several security vulnerabilities (bug #605399):
CVE-2010-0540, CVE-2010-0542, CVE-2010-1748. No longer need str3503,
str3399, str3505, str3541, str3425p2 or CVE-2010-0302 patches. - Removed unapplied gnutls-gcrypt-threads patch. Fixed typos in
descriptions for lpd and php sub-packages. - Use upstream method of handling SNMP quirks in PPDs (STR #3551,
bug #581825). - Added back still useful str3425.patch.
Second part of STR #3425 is still not fixed in 1.4.3 - Adjust texttops output to be in natural orientation (STR #3563).
This fixes page-label orientation when texttops is used in the
filter chain (bug #572338). - Fixed Ricoh Device ID OID (STR #3552). - Add an SNMP query for Ricoh's device ID OID (STR #3552). - Mark DNS-SD Device IDs that have been guessed at with "FZY:1;". - Fixed str3541.patch - Add an SNMP query for HP's device ID OID (STR #3552). - Handle SNMP supply level quirks (bug #581825). - Another BrowsePoll fix: handle EAI_NODATA as well (bug #567353). - 1.4.3.
- No longer need CVE-2009-3553, str3381, str3390, str3391,
str3403, str3407, str3413, str3418, str3422, str3425,
str3428, str3431, str3435, str3436, str3439, str3440,
str3442, str3448, str3458, str3460, cups-sidechannel-intrs,
negative-snmp-string-length, cups-media-empty-warning patches. - Fixed lpstat to adhere to -o option (bug #577901, STR #3541). - Fixed (for the third time) patch for STR #3425 to correctly
remove job info files in /var/spool/cups (bug #571830). - Applied patch for CVE-2010-0302 (incomplete fix for CVE-2009-3553,
bug #557775).
- Added comments for all sources and patches. - Don't own filesystem locale directories (bug #569403).
- Don't apply gcrypt threading patch (bug #553834).
- Don't treat SIGPIPE as an error (bug #569770). - Fixed cupsGetNamedDest() so it falls back to the real default
printer when a default from configuration file does not exist (bug #565569, STR #3503). - Update classes.conf when a class member printer is deleted
(bug #565878, STR #3505). - Re-initialize the resolver if getnameinfo() returns EAI_AGAIN
(bug #567353). - Improve cups-gnutls-gcrypt-threads.patch (#564841, STR #3461). - Rebuild for postscriptdriver tags. - Make sure we have some filters for converting to raster format. - Reset status after successful ipp job (bug #548219, STR #3460). - Install udev rules in correct place (bug #530378).
- Don't mark initscript as config file. - Use %{_initddir}, %{_sysconfdir} and SMP make flags.
- Use mode 0755 for binaries and libraries where� x��������������5����� X F �y ��������������X �$ s ���������������� �X �X � � spawn.py sysconfig.py text_file.py unixccompiler.py util.py version.py versionpredicate.py _imp.py _vendor __init__.py more_itertools __init__.py more.py recipes.py ordered_set.py packaging __about__.py __init__.py _manylinux.py _musllinux.py _structures.py markers.py requirements.py specifiers.py tags.py utils.py version.py pyparsing.py archive_util.py build_meta.py cli-32.exe cli-64.exe cli-arm64.exe cli.exe command __init__.py alias.py bdist_egg.py bdist_rpm.py build_clib.py build_ext.py build_py.py develop.py dist_info.py easy_install.py egg_info.py install.py install_egg_info.py install_lib.py install_scripts.py launcher manifest.xml py36compat.py register.py rotate.py saveopts.py sdist.py setopt.py test.py upload.py upload_docs.py config.py dep_util.py depends.py dist.py errors.py extension.py extern __init__.py glob.py gui-32.exe gui-64.exe gui-arm64.exe gui.exe installer.py launch.py monkey.py msvc.py namespaces.py package_index.py py34compat.py sandbox.py script (dev).tmpl script.tmpl unicode_utils.py version.py wheel.py windows_support.py wheel wheel-0.37.1.dist-info INSTALLER LICENSE.txt METADATA RECORD WHEEL entry_points.txt top_level.txt wheel-0.37.1.virtualenv __init__.py __main__.py bdist_wheel.py cli __init__.py convert.py pack.py unpack.py macosx_libfile.py metadata.py pkginfo.py util.py vendored __init__.py packaging __init__.py _typing.py tags.py wheelfile.py lib64 python3.6 site-packages PyYAML-6.0.dist-info INSTALLER LICENSE METADATA RECORD REQUESTED WHEEL top_level.txt _yaml __init__.py simplejson simplejson-3.17.6.dist-info INSTALLER LICENSE.txt METADATA RECORD REQUESTED WHEEL top_level.txt __init__.py _speedups.cpython-36m-x86_64-linux-gnu.so compat.py decoder.py encoder.py errors.py ordered_dict.py raw_json.py scanner.py tests __init__.py _cibw_runner.py test_bigint_as_string.py test_bitsize_int_as_string.py test_check_circular.py test_decimal.py test_decode.py test_default.py test_dump.py test_encode_basestring_ascii.py test_encode_for_html.py test_errors.py test_fail.py test_float.py test_for_json.py test_indent.py test_item_sort_key.py test_iterable.py test_namedtuple.py test_pass1.py test_pass2.py test_pass3.py test_raw_json.py test_recursion.py test_scanstring.py test_separators.py test_speedups.py test_str_subclass.py test_subclass.py test_tool.py test_tuple.py test_unicode.py tool.py yaml __init__.py _yaml.cpython-36m-x86_64-linux-gnu.so composer.py constructor.py cyaml.py dumper.py emitter.py error.py events.py loader.py nodes.py parser.py reader.py representer.py resolver.py scanner.py serializer.py tokens.py pyvenv.cfg piglet piglet /etc/locaweb/ /etc/profile.d/ /etc/uwsgi.d/ /opt/lc/piglet/bin/ /opt/lc/piglet/ /opt/lc/piglet/etc/ /opt/lc/piglet/ /opt/lc/piglet/lib/ /opt/lc/piglet/lib/piglet-1.0.0-py3.6.egg-info/ /opt/lc/piglet/lib/piglet/ /opt/lc/piglet/lib/piglet/__pycache__/ /opt/lc/piglet/lib/piglet/g2/ /opt/lc/piglet/lib/piglet/g2/__pycache__/ /opt/lc/piglet/lib/piglet/routes/ /opt/lc/piglet/lib/piglet/routes/__pycache__/ /opt/lc/piglet/lib/piglet/shared/ /opt/lc/piglet/lib/piglet/shared/__pycache__/ /opt/lc/piglet/virtualenv/ /opt/lc/piglet/virtualenv/bin/ /opt/lc/piglet/virtualenv/lib/ /opt/lc/piglet/virtualenv/lib/python3.6/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/_distutils_hack/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/_vendor/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/_vendor/packaging/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/extern/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/tests/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/tests/data/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/pkg_resources/tests/data/my-test-package-source/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/setuptools-59.6.0.dist-info/ /opt/lc/piglet/virtualenv/lib/python3.6/site-packages/setuptools/ /� x�������������`%����� X G '�y �������3����2@ �$ " ���������������� 2@ 3@ �w���g3j̹�jlY;����&Ac>g�/g#u*�*�b��ٕ��}I��Y�xts�Ҁc*� �<�A��� �N��8�8��D�/8]!
�$�-6M8��0 �ݙS{�T�`��{{� �Q���������R@Y���v�1�oZ����L�l|�Y45250e17579a44e05ff23564af0cd46f5ae9b96b 0f80bd4ea927a7e9d4045bd74703dac45150368033687a7ef80050cedb817942 d�� lx d��drv] net/mlx5e: For TC offloads, always add new flow instead of appending the actions (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: Add a no-append flow insertion mode (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: E-Switch, Add chains and priorities (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: E-Switch, Have explicit API to delete fwd rules (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: Split FDB fast path prio to multiple namespaces (Alaa Hleihel) [1691234]
- [include] net/mlx5: Add cap bits for multi fdb encap (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Split TC add rule path for nic vs e-switch (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Change return type of tc add flow functions (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: Use flow counter IDs and not the wrapping cache object (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: E-Switch, Get counters for offloaded flows from callers (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Add support for extended atomic operations (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Allow scatter to CQE without global signaled WRs (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Verify that driver supports user flags (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Support scatter to CQE for DC transport type (Alaa Hleihel) [1691234]
- [include] net/mlx5: Expose DC scatter to CQE capability bit (Alaa Hleihel) [1691234]
- [infiniband] RDMA/mlx5: Add support for flow tag to raw create flow (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Verify DEVX object type (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Add new counter for aRFS rule insertion failures (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Add extack messages for TC offload failures (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: E-Switch, Add extack messages to devlink callbacks (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Allow reporting of checksum unnecessary (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Enable reporting checksum unnecessary also for L3 packets (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Add ethtool control of ring params to VF representors (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Enable multi-queue and RSS for VF representors (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Expose ethtool rss key size / indirection table functions (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Expose function for building RSS params (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Provide explicit directive if to create inner indirect tirs (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5: E-Switch, Provide flow dest when creating vport rx rule (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Extract creation of rep's default flow rule (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Enable stateless offloads for VF representor netdevs (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Change VF representors' RQ type (Alaa Hleihel) [1691234]
- [netdrv] net/mlx5e: Ethtool steering, Support masks for l3/l4 filters (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Enable DEVX on IB (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Enable DEVX white list commands (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Manage device uid for DEVX white list commands (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Expose RAW QP device handles to user space (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set valid umem bit on DEVX (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set uid as part of TD commands (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set uid as part of XRCD commands (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set uid as part of CQ creation (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set uid upon PD allocation (Alaa Hleihel) [1691234]
- [infiniband] IB/mlx5: Set uid as part of RQT commands (Ala� x������������������� X H ��y ���� 5�����K �$ t ���������������� �K �K �K � git20090913.2 David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1 David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913 David Zeuthen <davidz@redhat.com> - 0.94-4 David Zeuthen <davidz@redhat.com> - 0.94-3 David Zeuthen <davidz@redhat.com> - 0.94-2 David Zeuthen <davidz@redhat.com> - 0.94-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.93-3 David Zeuthen <davidz@redhat.com> - 0.93-2 David Zeuthen <davidz@redhat.com> - 0.93-1 David Zeuthen <davidz@redhat.com> - 0.92-3 David Zeuthen <davidz@redhat.com> - 0.92-2 David Zeuthen <davidz@redhat.com> - 0.92-1 David Zeuthen <davidz@redhat.com> - 0.92-0.git20090527 David Zeuthen <davidz@redhat.com> - 0.91-1 - pkttyagent gets stopped if killed in the background
- Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853 - Fix of jasuthority memleak
- Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889 - Backport changing dependency to mozjs60
- Resolves: rhbz#1729416 - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814 - Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778 - Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378 - Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282 - Resource leak found by static analyzer
- Resolves: rhbz#1602661 - Error message about getting authority is too elaborate (forward of #1342855)
- Bus disconnection report moved to debug mode (forward of #1249627) - Update to 0.115 (CVE-2018-1116) - Update to 0.114 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add the its files from upstream. - Fix a memory leak in PolkitPermission.
Patch by Rui Matos <tiagomatos@gmail.com>
Resolves: #1433915 - Revert back to the state in 0.113-7, undoing the untested changes. - Move to an upstream snapshot, rebase patches - restore Provides: polkit-desktop-policy polkit-js-engine - Use %license, license needs to be in -libs as it's the only guaranteed installed package
- Move to mozjs38
- Other upstream fixes
- Spec cleanups - Fix memory leaks when calling authentication agents
Resolves: #1380166 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Bump the Obsoletes: to < 0.113-3 to account for the non-split 0.113-2.fc21
Resolves: #1243004 - Obsoletes: polkit < 0.112-8 (handle multilib upgrade path) - Add a fully versioned dependency from polkit to polkit-libs
Resolves: #1241759
- Require polkit-libs, not polkit, in polkit-devel - Update to polkit-0.113 (CVE-2015-3218, CVE-2015-3255, CVE-2015-3256,
CVE-2015-4625)
Resolves: #910262, #1175061, #1177930, #1194391, #1228739, #1233810 - Add BuildRequires: systemd so that %{_unitdir} is defined, to fix the build. - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - polkit doesn't release reference counters of GVariant data (#1180886)
- fix ldconfig scriptlets (move to -libs subpkg) - Split separate -libs package, so that NetworkManager can just depend on
that, without dragging in the daemon (as well as libmozjs17). This
allows the creation of more minimal systems that want programs like NM,
but do not need the configurability of the daemon; it would be ok if only
root is authorized. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for gobject-introspection 1.41.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - backport upstream D-Bus "us� x�������������@����� X I �y �������������� �$ w ���������������� � � � � ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� x�������������������� X J N�y ��������H������a �$ ���������������� �a �a �a � ct.org> 7.0.10-1 Remi Collet <remi@fedoraproject.org> 7.0.10-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.10-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.9-1 Remi Collet <remi@fedoraproject.org> 7.0.9-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.8-1.1 Remi Collet <remi@fedoraproject.org> 7.0.8-1 Remi Collet <remi@fedoraproject.org> 7.0.8-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.7-1 Remi Collet <remi@fedoraproject.org> 7.0.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.6-3 Remi Collet <remi@fedoraproject.org> 7.0.6-2 Remi Collet <remi@fedoraproject.org> 7.0.6-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.5-2 Remi Collet <remi@fedoraproject.org> 7.0.5-1 Remi Collet <remi@fedoraproject.org> 7.0.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.4-2 Remi Collet <remi@fedoraproject.org> 7.0.4-1 Remi Collet <remi@fedoraproject.org> 7.0.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.3.20160129gitdd3d10c Remi Collet <remi@fedoraproject.org> 7.0.3-0.2.RC1 Remi Collet <remi@fedoraproject.org> 7.0.3-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.2-1 Remi Collet <remi@fedoraproject.org> 7.0.2-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.1-1 Remi Collet <remi@fedoraproject.org> 7.0.1-0.1.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-2 Remi Collet <remi@fedoraproject.org> 7.0.0-1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.26.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.25.RC8 Remi Collet <remi@fedoraproject.org> 7.0.0-0.24.RC7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.23.RC7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.22.RC6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.21.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.20.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.19.RC5 Remi Collet <remi@fedoraproject.org> 7.0.0-0.18.RC4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.17.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.16.RC3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.15.RC2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.14.RC1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.13.beta3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.12.beta2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.11.beta1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.10.alpha2 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150617git3697f02 Remi Collet <remi@fedoraproject.org> 7.0.0-0.9.20150611git8cfe282 Remi Collet <remi@fedoraproject.org> 7.0.0-0.8.alpha1 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150602git8a089e7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.7.20150525git6f46fa3 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150525git404360f Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150518gitcee8857 Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150515gitc9f27ee Remi Collet <remi@fedoraproject.org> 7.0.0-0.6.20150507gitdd0b602 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150428git94f0b94 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150427git1a4d3e4 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150418git1f0a624 Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150416gitc77d97f Remi Collet <remi@fedoraproject.org> 7.0.0-0.5.20150403gitadcf0c6 Remi Collet <remi@fedoraproject.org> 7.0.0-0.4.20150331git463ca30 Remi Collet <remi@fedoraproject.org> 7.0.0-0.3.20150325git2fe6acd Remi Collet <remi@fedoraproject.org> 7.0.0-0.2.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 7.0.0-0.1.20150325git23336d7 Remi Collet <remi@fedoraproject.org> 5.6.7-1 Remi Collet <remi@fedoraproject.org> 5.6.7-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.6-1 Remi Collet <remi@fedoraproject.org> 5.6.5-1 Remi Collet <rcollet@redhat.com> 5.6.5-0.2.RC1 Remi Collet <remi@fedoraproject.org> 5.6.5-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.4-2 Remi Collet <remi@fedoraproject.org> 5.6.4-1 Remi Collet <remi@fedoraproject.org> 5.6.4-0.1.RC1 Remi Collet <remi@fedoraproject.org> 5.6.3-3 Remi Collet <remi@fedoraproject.org> 5.6.3-2 Remi Collet <remi@fedoraproject.org> 5.6.3-1 Remi Collet <remi@fedoraproject.org> 5.6.3-0.1.RC1 Remi Collet <rem��������x���������������� � � � � �������� ����� � ������������������������������� �� � ��ַ�,& ����@ ����������������� @ Providename @ x��������������� �����@ ������������8���������������������� �� � �ܱ # ����������������������������������� Group ename