- 4:5.16.3-290 Petr Pisar 5.00-1 Daniel Novotny 4.26-9 Daniel Novotny 4.26-8 Daniel Novotny 4.26-7 Ignacio Vazquez-Abrams - 4.26-6 Daniel Novotny - 4.26-5 Ignacio Vazquez-Abrams - 4.26-4 Daniel Novotny 4.26-3 Daniel Novotny 4.26-2 Daniel Novotny 4.26-1 Tomas Smetana - 4.25-1 Tomas Smetana - 4.24-4 Tomas Smetana - 4.24-3 Tomas Smetana - 4.24-2 Tomas Smetana - 4.24-1 Tomas Smetana - 4.23-5 Tomas Smetana - 4.23-4 Tomas Smetana - 4.23-3 Tomas Smetana - 4.23-2 Tomas Smetana - 4.23-1 Tomas Smetana - 4.21-5 Tomas Smetana - 4.21-4 Martin Bacovsky - 4.21-3 Martin Bacovsky - 4.21-2 Martin Bacovsky - 4.21-1 Martin Bacovsky - 4.20-1 Martin Bacovsky - 4.19-4 Martin Bacovsky - 4.19-3 Martin Bacovsky - 4.19-2 Martin Bacovsky - 4.19-1 Martin Bacovsky - 4.17-8 Martin Bacovsky - 4.17-7 Martin Bacovsky - 4.17-6 Jesse Keating - 4.17-5.1 Radek Vokal 4.17-5 Radek Vokal 4.17-4 Radek Vokal 4.17-3 Radek Vokal 4.17-2 Radek Vokal 4.17-1 Jesse Keating - 4.16-6.2 Jesse Keating - 4.16-6.1 Radek Vokal 4.16-6 Radek Vokal 4.16-5 Jesse Keating Radek Vokal - 4.16-4 Radek Vokal - 4.16-3 Radek Vokal - 4.16-2 Radek Vokal - 4.16-1 Radek Vokal - 4.15-4 Radek Vokal - 4.15-3 Radek Vokal - 4.15-2 Radek Vokal - 4.15-1 Radek Vokal - 4.14-4 Radek Vokal - 4.14-3 Radek Vokal - 4.14-2 Radek Vokal - 4.14-1 Radek Vokal - 4.13-5 Radek Vokal - 4.13-4 Radek Vokal - 4.13-3 Radek Vokal - 4.13-2 Radek Vokal - 4.13-1 Radek Vokal - 4.12-3 Radek Vokal - 4.12-2 Radek Vokal - 4.12-1 Miloslav Trmac - 4.10-4 Radek Vokal 4.10-3 Tim Waugh 4.10-2 Radek Vokal Elliot Lee Jakub Jelinek Karsten Hopp 4.07-3 Elliot Lee Elliot Lee Jeff Johnson 4.07-1 Jeff Johnson 4.06-1 Tim Waugh 4.02-4 Jeff Johnson 4.05-1 Jeff Johnson 4.02-3 Elliot Lee Florian La Roche Jeff Johnson 4.02-1 Jeff Johnson 3.39-9 Matt Wilson 3.39-8 Jeff Johnson 3.39-7 Jeff Johnson 3.39-6 Tim Powers 3.39-5 Nalin Dahyabhai 3.39-4 Nalin Dahyabhai 3.39-3 Nalin Dahyabhai 3.39-2 Jeff Johnson 3.39-1 Tim Powers Tim Powers Trond Eivind Glomsrød 3.37-6 Trond Eivind Glomsrød 3.37-5 Trond Eivind Glomsrød 3.37-4 Trond Eivind Glomsrød 3.37-2 Trond Eivind Glomsrød 3.37-1 Florian La Roche g @ g G g H h I hP X h\ Y hh \ h ] h ^ i( b i d jI e jN f jQ l jS t jl u j v j w l x l8 y lh l l l n n
p q q q( g q, h q0 C file-libs 5.11 37.el7 Libraries for applications using libmagic
Libraries for applications using libmagic. _twx86-01.bsys.centos.org .CentOS BSD CentOS BuildSystem Applications/File http://www.darwinsys.com/file/ linux x86_64 r
"HA큤A _tv_tv_tvGOC#M}_tv_tv_tv_tv_tv_tv a1c7092f275ac94545911b377ec976fc28d21b41583abbd8fb8c7e0bb403966e 3c0ad13c36f891a9b4f951e59eb2fc108065a46f849697cc6fd3cdb41cc23a3d 5c23ee75cd0d863d40dcf379e30ffce65f749fdcc6032f53255abea63d6314b0 349e6ede510b857bcd09a97ca08cf39562bb471f0f54300b011b1a10a3c3a998 55e9ca4fc4d374acd5a1d5383ea55c7eb9ab82ae29c550f5fad22bd92256f3cf d183874546743759bb451774686107e1ed53a26a69cac9e29b24b82557f28f30 6c90f37664d6485632c0459596113b4035ff2a5b1cf430dfc4bc73a69c6a202c libmagic.so.1.0.0 ../magic misc/magic root root root root root root root root root root root root root root root root root root root root root root root root file-5.11-37.el7.src.rpm file-libs file-libs(x86-64) libmagic.so.1()(64bit) @ @ @ @ @ @ @ @ @ @
@
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libz.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rtld(GNU_HASH) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.11.3 ]҇]Ik[Y4Wq@V@U|@UM@U@U@U@Uv@UmUPU7@SS1oS0 @SSRb@RURR@RTRkR|@Q@Q=@Q@PP@P*=PPO OKp@O@O (@OO@O@O@N@N]N:MM@MMML@Mz@MlMS@MQ0@M5M*L@LzKLs@Lc@LF@LD>@L5L)@L%@KŮ@KsKKK@KqN@Ka|@K]KTM@K4@KK K JJ@J@JJJ@JzJi@JhPJf@JW-@J7@J7@J J@J *@IA@IcIo@IyI@IIU@IImIk0IFFI7@I7@I1.H,HO@HN@Hz@HI&HFHE2@HE2@Gt@G G G@G@G}GW@FFF\E@EEّ@EEDC@DD@D@DA@DtJDH@D@D^C@CC@Cǖ@CqCBCp@Cf@CTCA @C.@C.@BBBTBBSB$BZfB,B@B(MB@A@A3AA1AAk@A
@@@n@`&@Dw@@,@@
u@??}??M>@>^>@>]>R @>L@>5 @>.>!X> >@==@< - 5.11-37 Kamil Dudka - 5.11-36 Kamil Dudka 5.11-35 Kamil Dudka 5.11-34 Kamil Dudka 5.11-33 Jan Kaluza 5.11-32 Jan Kaluza - 5.11-31 Jan Kaluza - 5.11-30 Jan Kaluza x X A
$ a $ a
a a oot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root r x X {A E P wa $ g wa va xa libra domains to be able to start private mysql domains
- Allow pppd to search /var/lock dir
- Add rhsmcertd policy - Update to upstream - More fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git - Fix spec file to not report Verify errors - Add dspam policy
- Add lldpad policy
- dovecot auth wants to search statfs #713555
- Allow systemd passwd apps to read init fifo_file
- Allow prelink to use inherited terminals
- Run cherokee in the httpd_t domain
- Allow mcs constraints on node connections
- Implement pyicqt policy
- Fixes for zarafa policy
- Allow cobblerd to send syslog messages - Add policy.26 to the payload
- Remove olpc stuff
- Remove policygentool - Fixes for zabbix
- init script needs to be able to manage sanlock_var_run_...
- Allow sandlock and wdmd to create /var/run directories...
- mixclip.so has been compiled correctly
- Fix passenger policy module name - Add mailscanner policy from dgrift
- Allow chrome to optionally be transitioned to
- Zabbix needs these rules when starting the zabbix_server_mysql
- Implement a type for freedesktop openicc standard (~/.local/share/icc)
- Allow system_dbusd_t to read inherited icc_data_home_t files.
- Allow colord_t to read icc_data_home_t content. #706975
- Label stuff under /usr/lib/debug as if it was labeled under / - Fixes for sanlock policy
- Fixes for colord policy
- Other fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Add rhev policy module to modules-targeted.conf - Lot of fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Allow logrotate to execute systemctl
- Allow nsplugin_t to getattr on gpmctl
- Fix dev_getattr_all_chr_files() interface
- Allow shorewall to use inherited terms
- Allow userhelper to getattr all chr_file devices
- sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
- Fix labeling for ABRT Retrace Server - Dontaudit sys_module for ifconfig
- Make telepathy and gkeyringd daemon working with confined users
- colord wants to read files in users homedir
- Remote login should be creating user_tmp_t not its own tmp files - Fix label for /usr/share/munin/plugins/munin_* plugins
- Add support for zarafa-indexer
- Fix boolean description
- Allow colord to getattr on /proc/scsi/scsi
- Add label for /lib/upstart/init
- Colord needs to list /mnt - Forard port changes from F15 for telepathy
- NetworkManager should be allowed to use /dev/rfkill
- Fix dontaudit messages to say Domain to not audit
- Allow telepathy domains to read/write gnome_cache files
- Allow telepathy domains to call getpw
- Fixes for colord and vnstatd policy - Allow init_t getcap and setcap
- Allow namespace_init_t to use nsswitch
- aisexec will execute corosync
- colord tries to read files off noxattr file systems
- Allow init_t getcap and setcap - Add support for ABRT retrace server
- Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
- Allow telepath_msn_t to read /proc/PARENT/cmdline
- ftpd needs kill capability
- Allow telepath_msn_t to connect to sip port
- keyring daemon does not work on nfs homedirs
- Allow $1_sudo_t to read default SELinux context
- Add label for tgtd sock file in /var/run/
- Add apache_exec_rotatelogs interface
- allow all zaraha domains to signal themselves, server writes to /tmp
- Allow syslog to read the process state
- Add label for /usr/lib/chromium-browser/chrome
- Remove the telepathy transition from unconfined_t
- Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
- Allow initrc_t domain to manage abrt pid files
- Add support for AEOLUS project
- Virt_admin should be allowed to manage images and processes
- Allow plymountd to send signals to init
- Change labeling of fping6 - Add filename transitions - Fixes for zarafa policy
- Add support for AEOLUS project
- Change labeling of fping6
- Allow plymountd to send signals to init
- Allow initrc_t domain to manage abrt pid files
- Virt_admin should be allowed to manage images and processes - xdm_t needs getsession for sw x X zA h i va $ f va ua wa ge sysctl unit file interfaces to use systemctl
- Add support for chronyd unit file
- Allow mozilla_plugin to read gnome_usr_config
- Add policy for new gpsd
- Allow cups to create kerberos rhost cache files
- Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten - Add policy for sa-update being run out of cron jobs
- Add create perms to postgresql_manage_db
- ntpd using a gps has to be able to read/write generic tty_device_t
- If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
- fix spec file
- Remove qemu_domtrans_unconfined() interface
- Make passenger working together with puppet
- Add init_dontaudit_rw_stream_socket interface
- Fixes for wordpress - Turn on allow_domain_fd_use boolean on F16
- Allow syslog to manage all log files
- Add use_fusefs_home_dirs boolean for chrome
- Make vdagent working with confined users
- Add abrt_handle_event_t domain for ABRT event scripts
- Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
- Allow httpd_git_script_t to read passwd data
- Allow openvpn to set its process priority when the nice parameter is used - livecd fixes
- spec file fixes - fetchmail can use kerberos
- ksmtuned reads in shell programs
- gnome_systemctl_t reads the process state of ntp
- dnsmasq_t asks the kernel to load multiple kernel modules
- Add rules for domains executing systemctl
- Bogus text within fc file - Add cfengine policy - Add abrt_domain attribute
- Allow corosync to manage cluster lib files
- Allow corosync to connect to the system DBUS - Add sblim, uuidd policies
- Allow kernel_t dyntrasition to init_t - init_t need setexec
- More fixes of rules which cause an explosion in rules by Dan Walsh - Allow rcsmcertd to perform DNS name resolution
- Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
- Allow tmux to run as screen
- New policy for collectd
- Allow gkeyring_t to interact with all user apps
- Add rules to allow firstboot to run on machines with the unconfined.pp module removed - Allow systemd_logind to send dbus messages with users
- allow accountsd to read wtmp file
- Allow dhcpd to get and set capabilities - Fix oracledb_port definition
- Allow mount to mounton the selinux file system
- Allow users to list /var directories - systemd fixes - Add initial policy for abrt_dump_oops_t
- xtables-multi wants to getattr of the proc fs
- Smoltclient is connecting to abrt
- Dontaudit leaked file descriptors to postdrop
- Allow abrt_dump_oops to look at kernel sysctls
- Abrt_dump_oops_t reads kernel ring buffer
- Allow mysqld to request the kernel to load modules
- systemd-login needs fowner
- Allow postfix_cleanup_t to searh maildrop - Initial systemd_logind policy
- Add policy for systemd_logger and additional proivs for systemd_logind
- More fixes for systemd policies - Allow setsched for virsh
- Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
- iptables: the various /sbin/ip6?tables.* are now symlinks for
/sbin/xtables-multi - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
- Allow colord to interact with the users through the tmpfs file system
- Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
- Add label for /var/log/mcelog
- Allow asterisk to read /dev/random if it uses TLS
- Allow colord to read ini files which are labeled as bin_t
- Allow dirsrvadmin sys_resource and setrlimit to use ulimit
- Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.
- Also lists /var and /var/spool directories
- Add openl2tpd to l2tpd policy
- qpidd is reading the sysfs file - Change usbmuxd_t to dontaudit attempts to read chr_file
- Add mysld_safe_exec_t for x X A N a $ a a a system avcs - Remove ifdef strict policy from upstream - Remove ifdef strict to allow user_u to login - Fix for amands
- Allow semanage to read pp files
- Allow rhgb to read xdm_xserver_tmp - Allow kerberos servers to use ldap for backing store - allow alsactl to read kernel state - More fixes for alsactl
- Transition from hal and modutils
- Fixes for suspend resume.
- insmod domtrans to alsactl
- insmod writes to hal log - Allow unconfined_t to transition to NetworkManager_t
- Fix netlabel policy - Update to latest from upstream - Update to latest from upstream - Update to latest from upstream - Allow pcscd_t to send itself signals - Fixes for unix_update
- Fix logwatch to be able to search all dirs - Upstream bumped the version - Allow consolekit to syslog
- Allow ntfs to work with hal - Allow iptables to read etc_runtime_t - MLS Fixes - Fix path of /etc/lvm/cache directory
- Fixes for alsactl and pppd_t
- Fixes for consolekit - Allow insmod_t to mount kvmfs_t filesystems - Rwho policy
- Fixes for consolekit - fixes for fusefs - Fix samba_net to allow it to view samba_var_t - Update to upstream - Fix Sonypic backlight
- Allow snmp to look at squid_conf_t - Fixes for pyzor, cyrus, consoletype on everything installs - Fix hald_acl_t to be able to getattr/setattr on usb devices
- Dontaudit write to unconfined_pipes for load_policy - Allow bluetooth to read inotifyfs - Fixes for samba domain controller.
- Allow ConsoleKit to look at ttys - Fix interface call - Allow syslog-ng to read /var
- Allow locate to getattr on all filesystems
- nscd needs setcap - Update to upstream - Allow samba to run groupadd - Update to upstream - Allow mdadm to access generic scsi devices - Fix labeling on udev.tbl dirs - Fixes for logwatch - Add fusermount and mount_ntfs policy - Update to upstream
- Allow saslauthd to use kerberos keytabs - Fixes for samba_var_t - Allow networkmanager to setpgid
- Fixes for hal_acl_t - Remove disable_trans booleans
- hald_acl_t needs to talk to nscd - Fix prelink to be able to manage usr dirs. - Allow insmod to launch init scripts - Remove setsebool policy - Fix handling of unlabled_t packets - More of my patches from upstream - Update to latest from upstream
- Add fail2ban policy - Update to remove security_t:filesystem getattr problems - Policy for consolekit - Update to latest from upstream - Revert Nemiver change
- Set sudo as a corecmd so prelink will work, remove sudoedit mapping, since this will not work, it does not transition.
- Allow samba to execute useradd - Upgrade to the latest from upstream - Add sepolgen support
- Add bugzilla policy - Fix file context for nemiver - Remove include sym link - Allow mozilla, evolution and thunderbird to read dev_random.
Resolves: #227002
- Allow spamd to connect to smtp port
Resolves: #227184
- Fixes to make ypxfr work
Resolves: #227237 - Fix ssh_agent to be marked as an executable
- Allow Hal to rw sound device - Fix spamassisin so crond can update spam files
- Fixes to allow kpasswd to work
- Fixes for bluetooth - Remove some targeted diffs in file context file - Fix squid cachemgr labeling - Add ability to generate webadm_t policy
- Lots of new interfaces for httpd
- Allow sshd to login as unconfined_t - Continue fixing, additional user domains - Begin adding user confinement to targeted policy - Fixes for prelink, ktalkd, netlabel - Allow prelink when run from rpm to create tmp files
Resolves: #221865
- Remove file_context for exportfs
Resolves: #221181
- Allow spamassassin to create ~/.spamassissin
Resolves: #203290
- Allow ssh access to the krb tickets
- Allow sshd to change passwd
- Stop newrole -l from working on non securetty
Resolves: #200110
- Fixes to run prelink in MLS machine
Resolves: #221233
- Allow spamassassin to read var_lib_t dir
Resolves: #219234 - fix mplayer to work under strict policy
- Allow iptables to use nscd
Resolves: #220794 - Add gconf policy and make it work with strict - Many fixes for strict policy and by extension mls. - Fix to allow ftp to bind to ports > 1024
Resolves: #219349 - Allow se x`| X ,A (a $ 8 (a 'a )a 1607729
- Allow iscsid_t domain to mmap sysfs_t files
Resolves: rhbz#1602508
- Allow tomcat_domain to search cgroup dirs
Resolves: rhbz#1600188
- Allow httpd_t domain to mmap own cache files
Resolves: rhbz#1603505
- Allow cupsd_t domain to mmap cupsd_etc_t files
Resolves: rhbz#1599694
- Allow kadmind_t domain to mmap krb5kdc_principal_t
Resolves: rhbz#1601004
- Allow virtlogd_t domain to read virt_etc_t link files
Resolves: rhbz#1598593
- Allow dirsrv_t domain to read crack db
Resolves: rhbz#1599726
- Dontaudit pegasus_t to require sys_admin capability
Resolves: rhbz#1374570
- Allow mysqld_t domain to exec mysqld_exec_t binary files
- Allow abrt_t odmain to read rhsmcertd lib files
Resolves: rhbz#1601389
- Allow winbind_t domain to request kernel module loads
Resolves: rhbz#1599236
- Allow gpsd_t domain to getsession and mmap own tmpfs files
Resolves: rhbz#1598388
- Allow smbd_t send to nmbd_t via dgram sockets BZ(1563791)
Resolves: rhbz#1600157
- Allow tomcat_domain to read cgroup_t files
Resolves: rhbz#1601151
- Allow varnishlog_t domain to mmap varnishd_var_lib_t files
Resolves: rhbz#1600704
- Allow dovecot_auth_t domain to manage also dovecot_var_run_t fifo files. BZ(1320415)
Resolves: rhbz#1600692
- Fix ntp SELinux module
- Allow innd_t domain to mmap news_spool_t files
Resolves: rhbz#1600591
- Allow haproxy daemon to reexec itself. BZ(1447800)
Resolves: rhbz#1600578
- Label HOME_DIR/mozilla.pdf file as mozilla_home_t instead of user_home_t
Resolves: rhbz#1559859
- Allow pkcs_slotd_t domain to mmap own tmpfs files
Resolves: rhbz#1600434
- Allow fenced_t domain to reboot
Resolves: rhbz#1293384
- Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
Resolves: rhbz#1557299
- Allow lircd to use nsswitch. BZ(1401375)
- Allow targetd_t domain mmap lvm config files
Resolves: rhbz#1546671
- Allow amanda_t domain to read network system state
Resolves: rhbz#1452444
- Allow abrt_t domain to read rhsmcertd logs
Resolves: rhbz#1492059
- Allow application_domain_type also mmap inherited user temp files BZ(1552765)
Resolves: rhbz#1608421
- Allow ipsec_t domain to read l2tpd pid files
Resolves: rhbz#1607994
- Allow systemd_tmpfiles_t do mmap system db files
- Improve domain_transition_pattern to allow mmap entrypoint bin file.
Resolves: rhbz#1460322
- Allow nsswitch_domain to mmap passwd_file_t files BZ(1518655)
Resolves: rhbz#1600528
- Dontaudit syslogd to watching top llevel dirs when imfile module is enabled
Resolves: rhbz#1601928
- Allow ipsec_t can exec ipsec_exec_t
Resolves: rhbz#1600684
- Allow netutils_t domain to mmap usmmon device
Resolves: rhbz#1600586
- Allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t BZ(1483655)
- Allow userdomain sudo domains to use generic ptys
Resolves: rhbz#1564470
- Allow traceroute to create icmp packets
Resolves: rhbz#1548350
- Allow systemd domain to mmap lvm config files BZ(1594584)
- Add new interface lvm_map_config
- refpolicy: Update for kernel sctp support Resolves: rhbz#1597111 Add additional entries to support the kernel SCTP implementation introduced in kernel 4.16 - Update oddjob_domtrans_mkhomedir() interface to allow caller domain also mmap oddjob_mkhomedir_exec_t files
Resolves: rhbz#1596306
- Update rhcs_rw_cluster_tmpfs() interface to allow caller domain to mmap cluster_tmpfs_t files
Resolves: rhbz#1589257
- Allow radiusd_t domain to read network sysctls
Resolves: rhbz#1516233
- Allow chronyc_t domain to use nscd shm
Resolves: rhbz#1596563
- Label /var/lib/tomcats dir as tomcat_var_lib_t
Resolves: rhbz#1596367
- Allow lsmd_t domain to mmap lsmd_plugin_exec_t files
Resolves: rhbz#bea0c8174
- Label /usr/sbin/rhn_check-[0-9]+.[0-9]+ as rpm_exec_t
Resolves: rhbz#1596509
- Update seutil_exec_loadpolicy() interface to allow caller domain to mmap load_policy_exec_t files
Resolves: rhbz#1596072
- Allow xdm_t to read systemd hwdb
Resolves: rhbz#1596720
- Allow dhcpc_t domain to mmap files labeled as ping_exec_t
Resolves: rhbz#1596065 - Allow tangd_t domain to create tcp sockets
Resolves: rhbz#1595775
- Update postfix poli x(l X "A e $ " e e e and aac files fixed (#165323) - mime for 3ds files removed, conflicts with text files (#165165) - fixed mime types recognition (#163866) - sync with upstream, patch clean-up - fixed reiserfs check (#162378) - check Cyrus files before Apple Quicktime movies (#154342) - check for shared libs before fs dump files (#149868) - gcc4 rebuilt - new version, fixing few bugs, patch clean-up
- consistent output for bzip files (#147440) - core64 patch fixing output on core files (#145354)
- minor change in magic patch - fixed crashes in threaded environment (#143871) - upgrade to file-4.12
- removed Tim's patch, tuned magic patch - Convert libmagic.3 to UTF-8 - set of patches from debian.org
- new magic types (#128763)
- zlib added to BuildReq (#125294) - Fixed occasional segfault (bug #131892). - zlib patch deleted, note patch deleted, rh patch updated, debian patch updated
- upgrade to file-4.10 - rebuilt - fix ELF note handling (#109495) - add docs (#115966) - rebuilt - rebuilt - upgrade to 4.07.
- deal gracefully with unreadable files (#113207).
- detect PO files (from Debian). - upgrade to file-4.06. - Minimal fix for busy loop problem (bug #109495). - upgrade to 4.05. - use zlib rather than exec'ing gzip.
-* Thu Aug 28 2003 Dan Walsh
-- Add Selinux support. - rebuilt - add ldconfig to post/postun - upgrade to file-4.02. - check size read from elf header (#85297). - add FHS compatibility symlink from /usr/share/misc/magic -> ../magic
(#84509) - the "real" fix to the vorbis/ogg magic details (#82810). - avoid vorbis/ogg magic details (#82810). - rebuilt - PT_NOTE, take 3 - don't barf in ELF headers with align = 0 - don't get lost when looking at PT_NOTE sections - update to 3.39. - automated rebuild - automated rebuild - Don't use an old magic.mime
- Add mng detection (#64229) - Rebuild - Fix missing include of (#58209) - Add CFLAGS to handle large files (#53576) - 3.37
- s/Copyright/License/
- build with --enable-fsect-man5, drop patch
- disable two old patches - revert a patch to Magdir/elf, which breaks many libtool scripts
in several rpm packages - iterate to 3.35 - Bump release + rebuild. - update to 3.33. - Bill made the patch but didn't apply it. :) - 'ASCII text', not 'ASCII test' (#16168) - fix off-by-1 error when creating filename for use with -i.
- include a copy of GNOME /etc/mime-types in %{_datadir}/magic.mime (#14741). - install magic as man5/magic.5 with other formats (#11172). - automatic rebuild - FHS packaging. - 3.30 - add ia64 patch from rth - handle compressed manpages
- update to 3.28 - identify ELF stripped files correctly (#4665).
- use SPARC (not sparc) consistently throughout (#4665).
- add entries for MS Office files (#4665). - diddle magic so that *.tfm files are identified correctly. - update to 3.27. - experimental support for realmedia files added - auto rebuild in the new build environment (release 5) - strip binary. - add SPARC V9 magic. - update to 3.26. - update to 3.25.
- detect gimp XCF versions. - translations modified for de, fr, tr - updated to 3.24
- buildrooted - built against glibc - Fixed problems caused by 64 bit time_t. - Improved recognition of Linux kernel images. /sbin/ldconfig /sbin/ldconfig
5.11-37.el7 5.11-37.el7 libmagic.so.1 libmagic.so.1.0.0 file-libs-5.11 COPYING ChangeLog README file magic magic magic.5.gz magic magic.mgc /usr/lib64/ /usr/share/doc/ /usr/share/doc/file-libs-5.11/ /usr/share/ /usr/share/file/ /usr/share/ /usr/share/man/man5/ /usr/share/misc/ -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic cpio xz 2 x86_64-redhat-linux-gnu ELF 64-bit LSB shared object, x86-64, version 1 (SYSV x[ X MA - Ia $ Y Ia Ha Ja s chat with vmtools
- Fix couchdb_manage_files() to allow manage couchdb conf files
- Add support for /var/run/redis.sock
- dontaudit gpg trying to use audit
- Allow consolekit to create log directories and files
- Fix vmtools policy to allow user roles to access vmtools_helper_t
- Allow block_suspend cap2 for ipa-otpd
- Allow pkcsslotd to read users state
- Add ioctl to init_dontaudit_rw_stream_socket
- Add systemd_hostnamed_manage_config() interface
- Remove transition for temp dirs created by init_t
- gdm-simple-slave uses use setsockopt
- sddm-greater is a xdm type program - Add lvm_read_metadata()
- Allow auditadm to search /var/log/audit dir
- Add lvm_read_metadata() interface
- Allow confined users to run vmtools helpers
- Fix userdom_common_user_template()
- Generic systemd unit scripts do write check on /
- Allow init_t to create init_tmp_t in /tmp.This is for temporary content created by generic unit files
- Add additional fixes needed for init_t and setup script running in generic unit files
- Allow general users to create packet_sockets
- added connlcli port
- Add init_manage_transient_unit() interface
- Allow init_t (generic unit files) to manage rpc state date as we had it for initrc_t
- Fix userdomain.te to require passwd class
- devicekit_power sends out a signal to all processes on the message bus when power is going down
- Dontaudit rendom domains listing /proc and hittping system_map_t
- Dontauit leaks of var_t into ifconfig_t
- Allow domains that transition to ssh_t to manipulate its keyring
- Define oracleasm_t as a device node
- Change to handle /root as a symbolic link for os-tree
- Allow sysadm_t to create packet_socket, also move some rules to attributes
- Add label for openvswitch port
- Remove general transition for files/dirs created in /etc/mail which got etc_aliases_t label.
- Allow postfix_local to read .forward in pcp lib files
- Allow pegasus_openlmi_storage_t to read lvm metadata
- Add additional fixes for pegasus_openlmi_storage_t
- Allow bumblebee to manage debugfs
- Make bumblebee as unconfined domain
- Allow snmp to read etc_aliases_t
- Allow lscpu running in pegasus_openlmi_storage_t to read /dev/mem
- Allow pegasus_openlmi_storage_t to read /proc/1/environ
- Dontaudit read gconf files for cupsd_config_t
- make vmtools as unconfined domain
- Add vmtools_helper_t for helper scripts. Allow vmtools shutdonw a host and run ifconfig.
- Allow collectd_t to use a mysql database
- Allow ipa-otpd to perform DNS name resolution
- Added new policy for keepalived
- Allow openlmi-service provider to manage transitient units and allow stream connect to sssd
- Add additional fixes new pscs-lite+polkit support
- Add labeling for /run/krb5kdc
- Change w3c_validator_tmp_t to httpd_w3c_validator_tmp_t in F20
- Allow pcscd to read users proc info
- Dontaudit smbd_t sending out random signuls
- Add boolean to allow openshift domains to use nfs
- Allow w3c_validator to create content in /tmp
- zabbix_agent uses nsswitch
- Allow procmail and dovecot to work together to deliver mail
- Allow spamd to execute files in homedir if boolean turned on
- Allow openvswitch to listen on port 6634
- Add net_admin capability in collectd policy
- Fixed snapperd policy
- Fixed bugsfor pcp policy
- Allow dbus_system_domains to be started by init
- Fixed some interfaces
- Add kerberos_keytab_domain attribute
- Fix snapperd_conf_t def - Addopt corenet rules for unbound-anchor to rpm_script_t
- Allow runuser to send send audit messages.
- Allow postfix-local to search .forward in munin lib dirs
- Allow udisks to connect to D-Bus
- Allow spamd to connect to spamd port
- Fix syntax error in snapper.te
- Dontaudit osad to search gconf home files
- Allow rhsmcertd to manage /etc/sysconf/rhn director
- Fix pcp labeling to accept /usr/bin for all daemon binaries
- Fix mcelog_read_log() interface
- Allow iscsid to manage iscsi lib files
- Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
- Make tuned_t as unconfined domain for RHEL7.0
- Allow ABRT to read puppe xK X XA O
$ a m ] S {a % эh^
/ ib ib x: X HA XX& $ j & & & Avoid buffer overruns svcauth_gss_validate() (bz 1102765) - Mass rebuild 2014-01-24 - Mass rebuild 2013-12-27 - Update to latest upstream release: 0.2.4 (bz 1040593) - Update to latest upstream release: 0.2.4 (bz 1038736) - Update to latest RC release: libtirpc-0-2-4-rc3 (bz 1034434) - Update to latest RC release: libtirpc-0-2-4-rc2 (bz 959469) - Update to latest RC release: libtirpc-0-2-4-rc1 (bz 948378) - Removed libgssglue dependency (patch from master) - Updated to latest upstream release: 0.2.3 - Updated to latest upstream RC release: 0.2.3-rc4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Updated to latest upstream RC release: libtirpc-0.2.3-rc3 - Fixed the install path in doc/Makefile.am - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Fixed segfault in SVCAUTH_WRAP call (bz 722594) - Updated to latest upstream version: 0.2.3-rc1 - Updated to latest upstream version: 0.2.2 - replace Requires(devel) with a simple Requires as the new rpm
aborts otherwise with "Bad Requireflags: qualifiers: Requires(devel)" - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Moved the libraries from /usr/lib to /lib - Relicense these SISSL files to 3 clause BSD
- Fixed last remaining BSD license issues - Add back SISSL license attribution - Rebuild to fix broken man dep s/man/man-db/ - Updated to latest RC release: libtirpc-0-2-2-rc2 [bz 519430] - Updated to latest RC release: libtirpc-0-2-2-rc1 - Updated to latest upstream version: 0.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Updated to latest upstream tag: 0-2-1-rc3
Fixed the --disable-gss options
Fixed a number of warnings
Change how architectures are define in xdr_float.c - Updated to latest upstream tag: 0-2-1-rc2
rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
clnt_dg: Fix infinite loop when datagram call times ou
Updated .gitignore file
Replace the hard coded path name with the top_srcdir macrc
Added 'doc' to the SUBDIRS list so make install work correctly. - Updated to latest upstream version: 0.2.0 - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems - Updated to libtirpc-0.1.12-rc1 - Updated to the latest release: 0.1.11 - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
- libtirpc: be sure to free cl_netid and cl_tp
- libtirpc: must free saved wire verifier when destroying context - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Converted all uids and uids to type uid_t and gid_t (sf 2446314) - backwards compatibility: fix order of fields in TI-RPC's
svc_req (bz 481388)
- Removed a number warnings. - Header file fixes for C++ - Updated to latest upstream version: 0.1.10 - Fixed some incorrect function declarations (bz468815) - Fix bad assumption taddr2uaddr processing that
caused a segfault (bz468014) - Fix for taddr2addr conversion bug of local addresses
- Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
src/clnt_raw.c
- Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
that was not being used... - Always make IPv6 sockets V6ONLY
- Fix incorrect sizeof() in __rpc_getbroadifs - fix license tag - Update to latest upstream version 0.1.9 - Added super-H(sh3,4) architecture support (bz 446559) - Update to latest upstream version 0.1.8 - Install man pages in the 3t section - Autorebuild for GCC 4.3 - Added patch that creates a libtirpc.pc used by the
pkg-config command. - Protect from buffer overflow in the GSS code. (bz 362121) - Fixed typo in /etc/netconfig file (bz 414471) - Added a check for the ARM arch (bz 351071) - Switch the libgssapi dependency to libgssglue - Made tcp6/udp6 network ids no longer visible in the netconfig
file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121) - Rebuild for selinux ppc32 issue. - Fixed mutex lock problem in clnt_raw_create()
- Ignore the return value of snprintf() and use strlen() instead
to bump the pointer in clnt_sperror()
- A couple ntohs() x* X ~A za $ j za ya {a p_t
- nslcd can read user credentials
- Allow nsplugin to delete mozilla_plugin_tmpfs_t
- abrt tries to create dir in rpm_var_lib_t
- virt relabels fifo_files
- sshd needs to manage content in fusefs homedir
- mock manages link files in cache dir - nslcd needs setsched and to read /usr/tmp
- Invalid call in likewise policy ends up creating a bogus role
- Cannon puts content into /var/lib/bjlib that cups needs to be able to write
- Allow screen to create screen_home_t in /root
- dirsrv sends syslog messages
- pinentry reads stuff in .kde directory
- Add labels for .kde directory in homedir
- Treat irpinit, iprupdate, iprdump services with raid policy - NetworkManager wants to read consolekit_var_run_t
- Allow readahead to create /dev/.systemd/readahead
- Remove permissive domains
- Allow newrole to run namespace_init - Add sepgsql_contexts file - Update to upstream - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
- Add puppetmaster_use_db boolean
- Fixes for zarafa policy
- Fixes for gnomeclock poliy
- Fix systemd-tmpfiles to use auth_use_nsswitch - gnomeclock executes a shell
- Update for screen policy to handle pipe in homedir
- Fixes for polyinstatiated homedir
- Fixes for namespace policy and other fixes related to polyinstantiation
- Add namespace policy
- Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
- Fixes for init, psad policy which relate with confined users
- Do not audit bootloader attempts to read devicekit pid files
- Allow nagios service plugins to read /proc - Add firewalld policy
- Allow vmware_host to read samba config
- Kernel wants to read /proc Fix duplicate grub def in cobbler
- Chrony sends mail, executes shell, uses fifo_file and reads /proc
- devicekitdisk getattr all file systems
- sambd daemon writes wtmp file
- libvirt transitions to dmidecode - Add initial policy for system-setup-keyboard which is now daemon
- Label /var/lock/subsys/shorewall as shorewall_lock_t
- Allow users to communicate with the gpg_agent_t
- Dontaudit mozilla_plugin_t using the inherited terminal
- Allow sambagui to read files in /usr
- webalizer manages squid log files
- Allow unconfined domains to bind ports to raw_ip_sockets
- Allow abrt to manage rpm logs when running yum
- Need labels for /var/run/bittlebee
- Label .ssh under amanda
- Remove unused genrequires for virt_domain_template
- Allow virt_domain to use fd inherited from virtd_t
- Allow iptables to read shorewall config - Gnome apps list config_home_t
- mpd creates lnk files in homedir
- apache leaks write to mail apps on tmp files
- /var/stockmaniac/templates_cache contains log files
- Abrt list the connects of mount_tmp_t dirs
- passwd agent reads files under /dev and reads utmp file
- squid apache script connects to the squid port
- fix name of plymouth log file
- teamviewer is a wine app
- allow dmesg to read system state
- Stop labeling files under /var/lib/mock so restorecon will not go into this
- nsplugin needs to read network state for google talk - Allow xdm and syslog to use /var/log/boot.log
- Allow users to communicate with mozilla_plugin and kill it
- Add labeling for ipv6 and dhcp - New labels for ghc http content
- nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
- pm-suspend now creates log file for append access so we remove devicekit_wri
- Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
- Fixes for greylist_milter policy - Update to upstream
- Fixes for systemd policy
- Fixes for passenger policy
- Allow staff users to run mysqld in the staff_t domain, akonadi needs this
- Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
- auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
- Dontaudit (xdm_t) gok attempting to list contents of /var/account
- Telepathy domains need to read urand
- Need interface to getattr all file classes in a mock library for setroubleshoot - Update selinux policy to handle new /usr/share/sandbox/start script - Update to upstream
- Fix version x X CA -h $ ; h 8 , ? d ! % 1 = h l
Z
\ d n x 8 P ( 8 9 : G H I X Y 0 \ X ] ` ^ v b d e f l
g $ h ( C cpanel-perl-536-cpanel-cleanup 0.4 1.cp108~el7 CPAN module Cpanel build perl module 'Cpanel::Cleanup' bbh-centos-7.dev.cpanel.net "/perl cpanel/perl https://metacpan.org linux x86_64 !Q$$ O9b94cae35191bad59b548cdb46915e922d0336f6efd71bdc00347e180804c0e91e 4785103f49f4f5083182828b51f1a2d8c00f3aadafe72179bc63fb6356953b56 root root root root cpanel-perl-536-cpanel-cleanup-0.4-1.cp108~el7.src.rpm cpanel-perl(Cpanel::Cleanup) cpanel-perl-cpanel-cleanup cpanel-perl-536-cpanel-cleanup cpanel-perl-536-cpanel-cleanup(x86-64)
cpanel-perl-536 rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(CompressedFileNames) rpmlib(PayloadIsXz) rpmlib(TildeInVersions) 4.6.0-1 4.0-1 3.0.4-1 5.2-1 4.10.0-1 4.11.1 b@`-@Q+R@Busy Camels - 0.4-1.cp108 Busy Camels - 0.4-1.cp1198 Todd Rinaldo - 0.4-1.cp1136 - Bump to 1.cp108 for re-build - Bump to 1.cp1198 for debian re-build - Update from upstream: Cpanel-Cleanup 0.4 0.4 0.4 0.4-1.cp108~el7 0.4-1.cp108~el7 Cleanup.pm Cleanup.so /usr/local/cpanel/3rdparty/perl/536/cpanel-lib/x86_64-linux/Cpanel/ /usr/local/cpanel/3rdparty/perl/536/cpanel-lib/x86_64-linux/auto/Cpanel/Cleanup/ -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic cpio xz 2 x86_64-redhat-linux-gnu ? [!+ IvKe4c34b15831f82fd18734e625e9db0eef9eafa65 c7 $< c7icient boundary
check. CVE-2014-3487
- fileinfo: fix cdf_read_property_info
(incomplete fix for CVE-2012-1571). CVE-2014-3587 - allow multiple paths in ini_scan_dir #1058162 - add security fix for CVE-2013-6420 - disable mod_php for httpd24 - relocate RPM macro #1008483
- remove ZTS conditional stuf for ligibility
- add mod_php for httpd24 collection - fix enchant package summary and description
- add security fix for CVE-2013-4248 - improve mod_php, pgsql and ldap description
- add missing man pages (phar, php-cgi)
- add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
- use %__isa_bits instead of %__isa in ABI suffix #985350 - add security fix for CVE-2013-4113
- add missing ASL 1.0 license - run tests during build - rebase to 5.4.16
- fix hang in FindTishriMolad(), #965144
- patch for upstream Bug #64915 error_log ignored when daemonize=0
- patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
- patch for upstream bug #64960 Segfault in gc_zval_possible_root - remove wrappers in /usr/bin (#966407) - rebuild for libjpeg (instead of libjpeg_turbo)
- fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221) - update to 5.4.14
- clean old deprecated options - update to 5.4.13
- security fixes for CVE-2013-1635 and CVE-2013-1643
- make php-mysql package optional (and disabled)
- make ZTS build optional (and disabled)
- always try to load mod_php (apache warning is usefull)
- Hardened build (links with -z now option)
- Remove %config from /etc/rpm/macros.php - update to 5.4.11
- fix php.conf to allow MultiViews m x X A @
$ sorting of malayalam letter 'na' (#10414)
- Add kok_IN locale
- Use common collation data in as_IN locale
- Avoid alloca in setenv for long strings
- Use shared mapping to reserve memory when creating locale archive (#10855)
- Fix fstat on Linux/sparc64 (#11155) - Update from master
- Fix error checking in iconv (#558053)
- Don't map U00DF to U1E9E in toupper table
- _nl_load_locale() incorrectly handles mmap() failures (BZ#11200)
- Fix various issues in regex matcher (BZ#11183, BZ#11184, BZ#11185,
BZ#11186, BZ#11187, BZ#11188, BZ#11189, BZ#11190, BZ#11191,
BZ#11192, BZ#11193) - Update from master
- Fix ____longjmp_chk for s390/s390x
- Remove duplicate definitions of O_DSYNC and O_RSYNC for Linux/sparc
- Ignore negative dynamic entry types (#546890)
- Fix pthread_cond_*wait with requeue-PI on i386 (#548989)
- Fix _XOPEN_SOURCE_EXTENDED handling
- Revert "Optimize 32bit memset/memcpy with SSE2/SSSE3." - Update from master.
- Define IPTOS_CLASS_* macros according to RFC 2474 (BZ#11027)
- Always use IPv4 sockets for IPv4 addresses (BZ#11141)
- regcomp.c: do not ignore memory allocation failure (BZ#11127)
- Fix malloc_info without prior allocations (BZ#11126)
- Optimize 32bit memset/memcpy with SSE2/SSSE3
- Relax feature tests in headers - Update from master.
- More POSIX conformance fixes. - Fix build failure. - Update from master.
- POSIX conformance fixes (BZ#11125). - Update from master.
- Additional setcontext(), etc. conformance tests (BZ#11115).
- Handle AT_FDCWD in futimens (BZ#10992).
- Update poll.h header for POSIX 2008 (BZ#11093).
- Avoid ELF lookup race. - Update from master.
- Add Requeue-PI support for x86 arch.
- Redefine O_SYNC and O_DSYNC to match 2.6.33+ kernels.
- Fix a few error cases in *name4_r lookup handling (BZ#11000).
- Fix kernel version check in recent ptsname change (BZ#11046).
- Add more warnings to exec functions (BZ#11056).
- Add recvmmsg interface.
- Define SCHED_IDLE and SCHED_RESET_ON_FORK for Linux. - Update from master.
- Fix infloop in __pthread_disable_asynccancel on x86_64 (#537690).
- Prevent unintended file desriptor leak in grantpt (#530558).
- Fix startup to security-relevant statically linked binaries (#528631).
- Re-install CFI in x86/x86_64 clone (#491542). - Update from master.
- Define week, first_weekday, and first_workday for en_DK locale (#525126).
- Use struct timespec for timestamps in struct stat also if
__USE_XOPEN2K8 (#539870).
- Fix week information for nl_NL locale (#499748).
- Update ntp_gettime for Linux (#479558).
- Fix getwc* and putwc* on non-wide streams (BZ#10958).
- Avoid warnings in CPU_* macros when using const bitsets (BZ#10918).
- Handle LC_GLOBAL_LOCALE in duplocale (BZ#10969).
- Fix _NC_LOCALE_NAME definition (BZ#10968).
- Add missing Linux MADV_* definitions (BZ#10972).
- Add support for new Linux error ERFKILL (BZ#10939).
- Enable multi-arch support on ppc and ppc64. - Update from master. - Fix readahead on powerpc32.
- Fix R_PPC64_{JMP_IREL,IRELATIVE} handling.
- Fix preadv, pwritev and fallocate for -D_FILE_OFFSET_BITS=64 (#533063). - Update to 2.11 release.
- Disable multi-arch support on PowerPC again since binutils is too old.
- Fix crash in tzdata-update due to use of multi-arch symbol (#532128). - Update from master.
- Fix races in setXid implementation (BZ#3270).
- Implement IFUNC for PPC and enable multi-arch support.
- Implement mkstemps/mkstemps64 and mkostemps/mkostemps64 (BZ#10349).
- Fix IA-64 and S390 sigevent definitions (BZ#10446).
- Fix memory leak in NIS grp database handling (BZ#10713).
- Print timestamp in nscd debug messages (BZ#10742).
- Fix mixing IPv4 and IPv6 name server in resolv.conf.
- Fix range checks in coshl.
- Implement SSE4.2 optimized strchr and strrchr.
- Handle IFUNC symbols in dlsym (#529965).
- Misc fixes (BZ#10312, BZ#10315, BZ#10319, BZ#10391, BZ#10425,
BZ#10540, BZ#10553, BZ#10564, BZ#10609, BZ#10692, BZ#10780,
BZ#10717, BZ#10784, BZ#10789, BZ#10847
- No l x` X A 0
$ 3 ains nptl substring or is >= 2.5.69
or set_tid_address syscall is available instead of checking
AT_SYSINFO dynamic tag - update from CVS - update from CVS
- fix for prelinking of libraries with no dependencies - update from CVS
- enable NPTL on ppc and ppc64 - rebuild - update from CVS - update from CVS
- make -jN build fixes - update from CVS
- avoid using trampolines in iconvconfig for now - update from CVS - update from CVS
- more ppc TLS fixes - update from CVS
- nscd fixes
- fix Bahrain spelling (#56298)
- fix Ukrainian collation (#83973)
- accept trailing spaces in /etc/ld.so.conf (#86032)
- perror fix (#85994)
- fix localedef (#88978)
- fix getifaddrs (#89026)
- fix strxfrm (#88409)
- fix ppc TLS
- fix getaddrinfo (#89448)
- don't print warning about errno, h_errno or _res if
LD_ASSUME_KERNEL=2.4.1 or earlier - update from CVS
- fix prelink on ppc32
- add TLS support on ppc32 and ppc64
- make sure on -m64 arches all helper binaries are built with this
option - update from CVS
- fix strxfrm (#88409)
- use -m64 -mno-minimal-toc on ppc64
- conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
- link glibc_post_upgrade against newly built libc.a - update from CVS
- fix NPTL pthread_detach and already terminated, but not yet
joined thread (#88219)
- fix bug-regex4 testcase (#88118)
- reenable prelink support broken in 2.3.2-13
- fix register_printf_function (#88052)
- fix double free with fopen using ccs= (#88056)
- fix potential access below $esp in {set,swap}context (#88093)
- fix buffer underrun in gencat -H (#88099)
- avoid using unitialized variable in tst-tgmath (#88101)
- fix gammal (#88104)
- fix iconv -c
- fix xdr_string (PR libc/4999)
- fix /usr/lib/nptl/librt.so symlink
- avoid running NPTL cleanups twice in some cases
- unblock __pthread_signal_cancel in linuxthreads, so that
linuxthreads threaded programs work correctly if spawned
from NPTL threaded programs
- fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
- remove /lib/i686 directory before running ldconfig in glibc post
during i686 -> i386 glibc "upgrades" (#88456) - update from CVS
- add pthread_atfork to libpthread.a - update from CVS
- make sure linuxthreads pthread_mutex_lock etc. is not a cancellation
point - update from CVS
- if kernel >= 2.4.1 doesn't support NPTL, fall back to
/lib/i686 libs on i686, not stright to /lib - update from CVS
- timers fixes - update from CVS
- fix NPTL pthread_cond_timedwait
- fix sysconf (_SC_MONOTONIC_CLOCK)
- use /%{_lib}/tls instead of /lib/tls on x86-64
- add /%{_lib}/tls/librt*so* and /%{_lib}/i686/librt*so*
- display content of .out files for all make check failures - update from CVS
- kernel POSIX timers support - update from CVS
- export __fork from glibc again
- fix glibc-compat build in NPTL
- fix c_stubs
- fix some more atomic.h problems
- don't check abi in glibc-compat libs - update from CVS
- build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
- condrestart sshd in glibc_post_upgrade so that the user can
log in remotely and handle the rest (#86339)
- fix a typo in glibc_post_upgrade on sparc - update from CVS
- change i686/athlon libc.so.6 base to 0x00e80000 - update from CVS
- hopefully last fix for condvar problems - fix bits/syscall.h creation on x86-64 - update from CVS - update from CVS - update from CVS
- fix glibc-debug description (#85111)
- make librt.so a symlink again, not linker script - update from CVS
- remove the workarounds for broken software accessing GLIBC_PRIVATE
symbols - update from CVS - fix TLS IE/LE model handling in dlopened libraries
on TCB_AT_TP arches - update from CVS - update from CVS - update from CVS
- only warn about errno, h_errno or _res for binaries, never
libraries
- rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences - update from CVS - update from CVS - update from CVS - update from CVS - update from CVS
- remove nisplus and nis from the default nsswitch.conf (#67401, #9952) - update from CVS x X lA ha $ x ha ga ia sure they label content in homedir correctly
- Add filetrans_home_content for irc files
- Dontaudit all getattr access for devices and filesystems for sandbox domains
- Allow stapserver to search cgroups directories
- Allow all postfix domains to talk to spamd - Add interfaces to ignore setattr until kernel fixes this to be checked after the DAC check
- Change pam_t to pam_timestamp_t
- Add dovecot_domain attribute and allow this attribute block_suspend capability2
- Add sanlock_use_fusefs boolean
- numad wants send/recieve msg
- Allow rhnsd to send syslog msgs
- Make piranha-pulse as initrc domain
- Update openshift instances to dontaudit setattr until the kernel is fixed. - Fix auth_login_pgm_domain() interface to allow domains also managed user tmp dirs because of #856880 related to pam_systemd
- Remove pam_selinux.8 which conflicts with man page owned by the pam package
- Allow glance-api to talk to mysql
- ABRT wants to read Xorg.0.log if if it detects problem with Xorg
- Fix gstreamer filename trans. interface - Man page fixes by Dan Walsh - Allow postalias to read postfix config files
- Allow man2html to read man pages
- Allow rhev-agentd to search all mountpoints
- Allow rhsmcertd to read /dev/random
- Add tgtd_stream_connect() interface
- Add cyrus_write_data() interface
- Dontaudit attempts by sandboxX clients connectiing to the xserver_port_t
- Add port definition for tcp/81 as http_port_t
- Fix /dev/twa labeling
- Allow systemd to read modules config - Merge openshift policy
- Allow xauth to read /dev/urandom
- systemd needs to relabel content in /run/systemd directories
- Files unconfined should be able to perform all services on all files
- Puppet tmp file can be leaked to all domains
- Dontaudit rhsmcertd-worker to search /root/.local
- Allow chown capability for zarafa domains
- Allow system cronjobs to runcon into openshift domains
- Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories - nmbd wants to create /var/nmbd
- Stop transitioning out of anaconda and firstboot, just causes AVC messages
- Allow clamscan to read /etc files
- Allow bcfg2 to bind cyphesis port
- heartbeat should be run as rgmanager_t instead of corosync_t
- Add labeling for /etc/openldap/certs
- Add labeling for /opt/sartest directory
- Make crontab_t as userdom home reader
- Allow tmpreaper to list admin_home dir
- Add defition for imap_0 replay cache file
- Add support for gitolite3
- Allow virsh_t to send syslog messages
- allow domains that can read samba content to be able to list the directories also
- Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd
- Separate out sandbox from sandboxX policy so we can disable it by default
- Run dmeventd as lvm_t
- Mounting on any directory requires setattr and write permissions
- Fix use_nfs_home_dirs() boolean
- New labels for pam_krb5
- Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0
- Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs
- Allow domains that can read etc_t to read etc_runtime_t
- Allow all domains to use inherited tmpfiles - Allow realmd to read resolv.conf
- Add pegasus_cache_t type
- Label /usr/sbin/fence_virtd as virsh_exec_t
- Add policy for pkcsslotd
- Add support for cpglockd
- Allow polkit-agent-helper to read system-auth-ac
- telepathy-idle wants to read gschemas.compiled
- Allow plymouthd to getattr on fs_t
- Add slpd policy
- Allow ksysguardproces to read/write config_usr_t - Fix labeling substitution so rpm will label /lib/systemd content correctly - Add file name transitions for ttyACM0
- spice-vdagent(d)'s are going to log over to syslog
- Add sensord policy
- Add more fixes for passenger policy related to puppet
- Allow wdmd to create wdmd_tmpfs_t
- Fix labeling for /var/run/cachefilesd\.pid
- Add thumb_tmpfs_t files type - Allow svirt domains to manage the network since this is containerized
- xP X ;A ` % U $ U U U
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ af af af am am am ar ar ar ar as as ast ast ast az az az az be be bg bg bg bg bg bn bn bn bn br br br br br bs bs bs bs byn byn byn ca ca ca ca ca ca crh crh crh crh cs cs cs cs cs cs cy cy cy da da da da da da de de de de de de dz el el el el el el en eo eo eo eo eo es es es es es es et et et et et eu eu eu eu fa fa fa fa fi fi fi fi fi fi fo fr fr fr fr fr fr ga ga ga ga ga gez gez gez gl gl gl gl gl gu gu gu haw he he he he hi hi hi hr hr hr hr hu hu hu hu hu hu hy ia ia id id id id id id is is is is is it it it it it it ja ja ja ja ja ja ka kk km kn kn kn ko ko ko ko ko ko kok kok ku lt lt lt lt lt lt lv lv lv lv lv lv mi mi mi mk mk mk ml ml ml mn mn mn mn mr mr mr ms ms ms mt mt mt nb nb nb nb nb ne nl nl nl nl nl nl nn nn nn nn nn nso nso nso nso oc oc oc oc oc oc or or or pa pa pa pl pl pl pl pl pl ps ps ps pt pt pt pt pt pt pt pt pt pt ro ro ro ro ro ro ru ru ru ru ru rw rw rw rw si sk sk sk sk sk sk sl sl sl sl sl sl so sq sr sr sr sr sr sr sr@latin sr@latin sr@latin sr@latin sr@latin sr@latin sv sv sv sv sv sv sw ta ta ta te te th th th th th th ti ti ti tig tig tig tk tl tr tr tr tr tr tr tt tt tt ug uk uk uk uk uk uk ve ve ve ve vi vi vi vi vi vi wa wa wa wa wal wo xh xh xh zh zh zh zh zh zh zh zh zh zh zh zh zh zh zh zh zu zu zu 3.46-2.el7
x X A h : $ : # 9 EHAz0WJAhwEEwECAAYFAlOnjksACgkQDj2OcPh1SrYd
tQ/+LOsCj8V0oOzbiTHREBrjr3S7u/58HRD/8zec61rc4FoCp3Fa+3kmhFDIajLj
VeRtsSSaOr0u6cue30QsGeHE2cbGPNWIqXV3V80I57O3yXRL2DU4GmDLNIF2/ejy
wCSvbHgONEXC4UVPtamHWGqh4sh2ijyJqUx3I0/6afBFn4BVfcsAjNrRe/GwD80/
ETkfSui4flyZ330sjqM/N2Hp/YwsOTXKXfAThcjb+qZ2BRVnmpldeK593+dFvFG1
FUK3kC8VFqS49fxgxR/Zo7jNEbrltzjzdRb6BBY86tqwbcnrja8MJHA2MpGtGckV
9/K/LE2jVJN+qeyLN/EoM86Sd+WIQtVY3oxAYwiVGng83t+CI6NPazVMLIQlciwI
lAY+DAGNz+mUTeKwCv7F8sOX91v6PHaB0csvk1I2Is3qwv8zlgnhKdl2R6PzQbsU
Ix1+rvsJ99no75GJeVY/D9YzBJ4a0i0Uu7QF/k8F690qDvSTwx71unxX+0PmJqNu
2sCVQNgLFt7Qtj9+l1pzulzWlZBSDhIBs5mT0jscwjRykDgfngiWDOymfdMG8eSZ
GAK10j+F883uyWlEEFOdA/DBOV3d3Jcm935of4dT1GUmKeoAKixHMkiNT3RvGHlm
fEjMq0vdf6inZva0PTzJSkhooMWYBuROHRMZs9PjrdXRHBeIRgQSEQIABgUCU6iz
+gAKCRAcAAgvMZOT9D2+AJ9aAZIbjN/m2Jjaojkxg9L5aBWBPQCeJIMpW1iiDELi
byKoVnd08EbgxJqIXgQSEQgABgUCU6iz4wAKCRBWtwXK6VQruLL/AQCbgU3t/mfh
bMQjuvE2DsE3qXiEVMEbXnxlCiodiMF4UgEAgPIAQcV+Jo+D+p0nHrVl2ClAhhpz
W/zuJqtJ24C20ZqJAhwEEAECAAYFAlOocMMACgkQyapz7WGq1jsRNg/+NH09e7g1
CuPVa/1cBRoiprBvWXmy734MpkzW4kyVMZjBCQXBCrJFvZgvhQhYrR8jXmj+ZJEr
kfX3UHimyhWbBnu+XqIWzWwEtg7bggQN3eFyNcIV/KI9rK7IBQO92AptpTusIdgA
DQTFlJO06pF4kE89ZjBALQFbKDY1EJX3hyQEYixOzO4936xbwxoiJKR2J71ZGele
xXauhz2kpOd2jg/oMhhAOzldFaWAUBQJZPwl4vZrqVjNcMUNeINGd7++kkfBLfxL
xHJ8ynnXWHalsHVzdDRaFqp1Bna8RwrHnDd4Hwd/4Qv7iVZqmLLqEJpIgS1IDMx/
BwkrCOD0gluwmxlm3PbbeUKeR/cj6CICFt9TgUJrYm9Vh7n0y8uHKY6PE5J4NX9l
D75eoPk2SuYTNgAR4iuI5MYQIKWL7aeKh09piPgrIrja8eDQ5AsklBaDYxOYZrot
Xx+sgGXGSLK3eyvZ+hJ8hBX38mydYpswzhvr/vAyKz8TQ6bwnRVlvkMYE+LjevOD
Wm9+EfkvBRChJcgDoycoHIFVaQ47Hgu2eGyCRNoMZ3l6O1O4AN5+RXrAJAi06zFs
RUnBLqxjSMmYqPYUowAxG0ukougc2HVCl1kMD9NxvK5zOfleUA8wWb5O9Z5tllnD
qu7RtIVXAXIJgn2HRDVk+wP8xuY2qJlfo1yJAhwEEAECAAYFAlOpb/EACgkQKPqA
GkO91jd+Dg/+NF4QwqLvxgl2TiORDt5HjWHSGMBlaYFBEwrBAgNvwZEH80mAsua6
FnfZMSGiFmpVfMUqkjOJVdmA8yERxYFsyGopv/9OmOT2UxV4IZl5YYAJRsPHLjzV
MIUKiGPI1yvrhYW91hKRFGIxwqE7XHwWToufwHe5WB6AdeGyoIHtQcw0eTKSJHz2
zbpyWKBx0wAK55YqMEQ2rx9qcOjZy3vjxlotwfGnBeR4VT6Oap1DvAkNZ4XcN0Ok
AKZbFBEMbJed9fnciwDV+Y/svPb05l+zSgmqJ6axhwSvu7rct+dksfmb0BnF03kh
SzNVlu0S/85mhEPgx1/BZxIp34RDbcqWymHsgPyhxwBBlFryfVvJrtyAMWs4T8mn
RkqKrNQHMfPOTBioxi2HOyG2eSK8BlQsJS5yccnYaBnSegWaIxkU+2l/yJkYMhl5
sXdlmqcTtwv+R+acDkEPe9BQstn0+xOWL6hqpA0EM710LJCkQnB4c/JNgW5CL08k
CevBVole5jYJL5rXmUL0U+ZWGZMakFrrrkhuQMEjxecyuOHs4jrnsVVGz/e0hqWv
0NnRY9m5UyKEZIA1si8tFIrtrTSgZ5/sGH9/pksQ2HObrKe4LY6zVSyJLXwX1htQ
/j0st83YkDZ5mEY0r+Hh/1XOzhWgQ0ONR/MOIKNyjVTHldCrb4WPM4mJAZwEEAEC
AAYFAlOo8v0ACgkQrgrV97KweO9sfgv+NKYxgCiWrRjYW80hJE74OEJrjBGQDOJ5
MPVvPSH7StOfSMpckLoNWedJJ7RuInOzuUY0lAUH6/ql+Krf4ysHlSGjuu+dDy0d
HN3gu994YrjT6hVzEG1OV+sJcTuvgn2qTVYu1ksIV/SZ48l0PRMwPXcu3FSzKvti
G1gHFNx1cyzjxwmdT42afKCpR8RvwmWPfbDmEz500iFXsw78EEBXEWo81bXncWdZ
Eic8QeVyTWKFldIrZLkL7+RQY3hViu0G5C7gSP39ZU4ZTegqMaEhHzuKtCiNO5Y2
+hkYZgRNnUOSrmWO+wkLUNRtG2Strx5Sy9p94fn/decfuRsEJo4L1aMCFGEDfRSD
bc3pBG3tr9qvNBAegTTMQlZJcxa52Z7EI56rQGYEPw8kvt/uOqMYybUIxwVATgIt
fRy9Jsyz+0DwZfEINkuEFA/S2KCwWys5aZfPDCsqwh0gS/olvT06v97loF8XED0P
0irX4/6BHFHDlM8aNnN11p02p5lrTpLGuQQNBEtohLgQEAClnTC/GlBWVno4QVr1
IFDl5yVEg6NeMqqRgaS8jH6NSaoJh86B8+LE4ZhLlDYrAc3PhcQ4g4DWTIKUCgAC
A4QZTGPwLGdsGTXQhWj8kE42N2opg9nZg114gispcSZqLiLmErkB9kejKqxXlqrE
aQZ5VSO79yjJEljotryIv5EG7GJG5Q9bKYaO0hIBHp9KI3x/+RGXL/L0uYw7wlw6
l6J6otQU8roq7OEjgXScWQcmlk8M04ceX4aYBn5KpnGYiumQbKZ3fqFMrFbieWc3
qSpzWAzB2fUv+78P4L+OExtNOyyqIxl7I/24WacwHeWzU1Xw7G9vFxMEbQzuDgCV
99RAqlSs2EgGgLdHtRthDcJNlfVCn9MHNt9ECAaF1YFANAR3f8uX0bhBoKz0j7hb
ryuQCvt7sjKUfJ8SL2hhCRcUgR5oCGIQ2YkGlwulqz/I0mgtrKrM+xD6VE2DeiYW
e0+1miWQyLqitE2LGuBdXrib/TVg2OYEVOqynnA6raPRyZORs5ap2eWYY+DYSXW5
95slzphZLWcWbphGk38HdBu0CdqvUJv4geWvSFpM5iFCn5cU36TVuuqz5K59rz+v
Po3m2yb5bkaMcq8evbgVNrTa7cfiUio2U0GTNlkqHMCHERaInPBz9/a6kbm92mWs
z9gJT5dOi1g9vlkRdB7aYP+tcwADBQ//R/UM4kh+cyuHWj/dEqoOryTu2W/YYQS/
RUSeHy3Lh0xvwOizYzU5zgq/1AsHcNdxLj8vglbm8XRCBIDOrWvmgFPXNoxyoNLo
5SUetZSLxoM23kQ9C4QZ0/b+JMN4Crivx4JisdELt6CV3JFmuZY19xk3r8b0r4lK
OFZ9JZZIFEipv5TFxA0KnqLq29VLEJ8srVHg/iQD9ngKja/LAh9V8+Ed3mchY2XX
KX07evTgYI1OPPCy/92FQYMUhWyCGB6Fm4vQFvuEO7K9nZKEAu6Znm3uZT9InaE6
TeSU77ZsgkHSCq5SRaf/iDWHZOn1dVasjXHoZQHFFiTALi1ZqPNZ5ULmFwNUB x@ X -A )a $ 9 )a (a *a cy to allow postfix_master_t domain to mmap all postfix* binaries
Resolves: rhbz#1595328
- Allow amanda_t domain to have setgid capability
Resolves: rhbz#1452444
- Update usermanage_domtrans_useradd() to allow caller domain to mmap useradd_exec_t files
Resolves: rhbz#1595667 - Allow abrt_watch_log_t domain to mmap binaries with label abrt_dump_oops_exec_t
Resolves: rhbz#1591191
- Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
Resolves: rhbz#1452595
- Allow abrt_t domain to write to rhsmcertd pid files
Resolves: rhbz#1492059
- Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
Resolves: rhbz#1463470
- Add vhostmd_t domain to read/write to svirt images
Resolves: rhbz#1465276
- Dontaudit action when abrt-hook-ccpp is writing to nscd sockets
Resolves: rhbz#1460715
- Update openvswitch policy
Resolves: rhbz#1594729
- Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
Resolves: rhbz#1583084
- Allow sssd_t and slpad_t domains to mmap generic certs
Resolves: rhbz#1592016
Resolves: rhbz#1592019
- Allow oddjob_t domain to mmap binary files as oddjob_mkhomedir_exec_t files
Resolves: rhbz#1592022
- Update dbus_system_domain() interface to allow system_dbusd_t domain to mmap binary file from second parameter
Resolves: rhbz#1583080
- Allow chronyc_t domain use inherited user ttys
Resolves: rhbz#1593267
- Allow stapserver_t domain to mmap own tmp files
Resolves: rhbz#1593122
- Allow sssd_t domain to mmap files labeled as sssd_selinux_manager_exec_t
Resolves: rhbz#1592026
- Update policy for ypserv_t domain
Resolves: rhbz#1592032
- Allow abrt_dump_oops_t domain to mmap all non security files
Resolves: rhbz#1593728
- Allow svirt_t domain mmap svirt_image_t files
Resolves: rhbz#1592688
- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1593740
- Allow sysadm_t and staff_t domains to use sudo io logging
Resolves: rhbz#1564470
- Allow sysadm_t domain create sctp sockets
Resolves: rhbz#1571591
- Update mount_domtrans() interface to allow caller domain mmap mount_exec_t
Resolves: rhbz#1592025
- Allow dhcpc_t to mmap all binaries with label hostname_exec_t, ifconfig_exec_t and netutils_exec_t
Resolves: rhbz#1594661 - Fix typo in logwatch interface file
- Allow spamd_t to manage logwatch_cache_t files/dirs
- Allow dnsmasw_t domain to create own tmp files and manage mnt files
- Allow fail2ban_client_t to inherit rlimit information from parent process
Resolves: rhbz#1513100
- Allow nscd_t to read kernel sysctls
Resolves: rhbz#1512852
- Label /var/log/conman.d as conman_log_t
Resolves: rhbz#1538363
- Add dac_override capability to tor_t domain
Resolves: rhbz#1540711
- Allow certmonger_t to readwrite to user_tmp_t dirs
Resolves: rhbz#1543382
- Allow abrt_upload_watch_t domain to read general certs
Resolves: rhbz#1545098
- Update postfix_domtrans_master() interface to allow caller domain also mmap postfix_master_exec_t binary
Resolves: rhbz#1583087
- Allow postfix_domain to mmap postfix_qmgr_exec_t binaries
Resolves: rhbz#1583088
- Allow postfix_domain to mmap postfix_pickup_exec_t binaries
Resolves: rhbz#1583091
- Allow chornyd_t read phc2sys_t shared memory
Resolves: rhbz#1578883
- Allow virt_qemu_ga_t read utmp
Resolves: rhbz#1571202
- Add several allow rules for pesign policy: Resolves: rhbz#1468744 - Allow pesign domain to read /dev/random - Allow pesign domain to create netlink_kobject_uevent_t sockets - Allow pesign domain create own tmp files
- Add setgid and setuid capabilities to mysqlfd_safe_t domain
Resolves: rhbz#1474440
- Add tomcat_can_network_connect_db boolean
Resolves: rhbz#1477948
- Update virt_use_sanlock() boolean to read sanlock state
Resolves: rhbz#1448799
- Add sanlock_read_state() interface
- Allow postfix_cleanup_t domain to stream connect to all milter sockets BZ(1436026)
Resolves: rhbz#1563423
- Update abrt_domtrans and abrt_exec() interfaces to allow caller domain to mmap binary file
Resolves:rhbz#1583080
- Update nscd_domt x X bA p^a $ N ^a ]a _a el desktops
- Allow domains to transiton using httpd_exec_t
- Allow svirt domains to manage kernel key rings
- Allow setroubleshoot to execute ldconfig
- Allow firewalld to read generate gnome data
- Allow bluetooth to read machine-info
- Allow boinc domain to send signal to itself
- Fix gnome_filetrans_home_content() interface
- Allow mozilla_plugins to list apache modules, for use with gxine
- Fix labels for POkemon in the users homedir
- Allow xguest to read mdstat
- Dontaudit virt_domains getattr on /dev/*
- These fixes were all required to build a MLS virtual Machine with single level desktops
- Need to back port this to RHEL6 for openshift
- Add tcp/8891 as milter port
- Allow nsswitch domains to read sssd_var_lib_t files
- Allow ping to read network state.
- Fix typo
- Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them - Adopt swift changes from lhh@redhat.com
- Add rhcs_manage_cluster_pid_files() interface
- Allow screen domains to configure tty and setup sock_file in ~/.screen directory
- ALlow setroubleshoot to read default_context_t, needed to backport to F18
- Label /etc/owncloud as being an apache writable directory
- Allow sshd to stream connect to an lxc domain - Allow postgresql to manage rgmanager pid files
- Allow postgresql to read ccs data
- Allow systemd_domain to send dbus messages to policykit
- Add labels for /etc/hostname and /etc/machine-info and allow systemd-hostnamed to create them
- All systemd domains that create content are reading the file_context file and setfscreate
- Systemd domains need to search through init_var_run_t
- Allow sshd to communicate with libvirt to set containers labels
- Add interface to manage pid files
- Allow NetworkManger_t to read /etc/hostname
- Dontaudit leaked locked files into openshift_domains
- Add fixes for oo-cgroup-read - it nows creates tmp files
- Allow gluster to manage all directories as well as files
- Dontaudit chrome_sandbox_nacl_t using user terminals
- Allow sysstat to manage its own log files
- Allow virtual machines to setrlimit and send itself signals.
- Add labeling for /var/run/hplip - Fix POSTIN scriptlet - Merge rgmanger, corosync,pacemaker,aisexec policies to cluster_t in rhcs.pp - Fix authconfig.py labeling
- Make any domains that write homedir content do it correctly
- Allow glusterd to read/write anyhwere on the file system by default
- Be a little more liberal with the rsync log files
- Fix iscsi_admin interface
- Allow iscsid_t to read /dev/urand
- Fix up iscsi domain for use with unit files
- Add filename transition support for spamassassin policy
- Allow web plugins to use badly formated libraries
- Allow nmbd_t to create samba_var_t directories
- Add filename transition support for spamassassin policy
- Add filename transition support for tvtime
- Fix alsa_home_filetrans_alsa_home() interface
- Move all userdom_filetrans_home_content() calling out of booleans
- Allow logrotote to getattr on all file sytems
- Remove duplicate userdom_filetrans_home_content() calling
- Allow kadmind to read /etc/passwd
- Dontaudit append .xsession-errors file on ecryptfs for policykit-auth
- Allow antivirus domain to manage antivirus db links
- Allow logrotate to read /sys
- Allow mandb to setattr on man dirs
- Remove mozilla_plugin_enable_homedirs boolean
- Fix ftp_home_dir boolean
- homedir mozilla filetrans has been moved to userdom_home_manager
- homedir telepathy filetrans has been moved to userdom_home_manager
- Remove gnome_home_dir_filetrans() from gnome_role_gkeyringd()
- Might want to eventually write a daemon on fusefsd.
- Add policy fixes for sshd [net] child from plautrba@redhat.com
- Tor uses a new port
- Remove bin_t for authconfig.py
- Fix so only one call to userdom_home_file_trans
- Allow home_manager_types to create content with the correctl label
- Fix all domains that write data into the homedir to do it with the correct label
- Change the postgresql to use proper boolean names, which is causing httpd_t to
- not get access to postgresql_var_run_t
- Hostname needs to send syslog x0 X A h $ i BuildPreReqs (#36378) - update from CVS - update from CVS
- fix sparc64, ia64
- fix some locale syntax errors (#35982) - update from CVS - update from CVS - support even 2.4.0 kernels on ia64, sparc64 and s390x
- include UTF-8 locales
- make gconv-modules %config(noreplace) - back out sunrpc changes - update from CVS
- fix ia64 build
- fix pthread_getattr_np - update from CVS
- run atexit() registered functions at dlclose time if they are in shared
libraries (#28625)
- add pthread_getattr_np API to make JVM folks happy - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
- fix ldd behaviour on unresolved symbols
- remove nonsensical ldconfig warning, update osversion for the most
recent library with the same soname in the same directory instead (#31703)
- apply selected patches from CVS
- s390x spec file changes from Florian La Roche - fix gencat (#30894)
- fix ldconfig changes from yesterday, fix LD_ASSUME_KERNEL handling - update from CVS
- make pthread_attr_setstacksize consistent before and after pthread manager
is started (#28194)
- pass back struct sigcontext from pthread signal wrapper (on ia32 only so
far, #28493)
- on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
make ld.so pick the right one - glib-common doesn't require glibc, until we can figure out how to get out of dependency hell. - make glibc require particular version of glibc-common
and glibc-common prerequire glibc. - glibc 2.2.2 release
- fix regex REG_ICASE bug seen in ksymoops - fix regexec leaking memory (#26864) - update from CVS
- fix ia64 build with gnupro
- make regex 64bit clean
- fix tgmath make check failures on alpha - update again for ia64 DF_1_INITFIRST - update from CVS
- fix getaddrinfo (#25437)
- support DF_1_INITFIRST (#25029) - build all auxiliary arches with --enablekernel 2.4.0, those wanting
to run 2.2 kernels can downgrade to the base architecture glibc. - remove %lang() flags from %{_prefix}/lib/locale files temporarily - update to 2.2.1 final
- fix a pthread_kill_other_threads_np breakage (#23966)
- make static binaries using dlopen work on ia64 again
- fix a typo in glibc-common group - devel requires glibc = %{version}
- noreplace /etc/nscd.conf - some more security fixes:
- don't look up LD_PRELOAD libs in cache for SUID apps
(because that bypasses SUID bit checking on the library)
- place output files for profiling SUID apps into /var/profile,
use O_NOFOLLOW for them
- add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
- hardlink identical locale files together
- add %lang() tags to locale stuff
- remove ko_KR.utf8 for now, it is provided by locale-utf8 package - add glibc-common subpackage
- fix alphaev6 memcpy (#22494)
- fix sys/cdefs.h (#22908)
- don't define stdin/stdout/stderr as macros for -traditional (#22913)
- work around a bug in IBM JDK (#22932, #23012)
- fix pmap_unset when network is down (#23176)
- move nscd in rc.d before netfs on shutdown
- fix $RESOLV_HOST_CONF in SUID apps (#23562) - fix ftw and nftw - fix fcvt (#22184)
- ldd /lib/ld-linux.so.2 is not crashing any longer again (#22197)
- fix gencat - fix alpha htonl and alphaev6 stpcpy - update to CVS to:
- fix getnameinfo (#21934)
- don't stomp on memory in rpath handling (#21544)
- fix setlocale (#21507)
- fix libNoVersion.so.1 loading code (#21579)
- use auxarches define in spec file for auxiliary
architectures (#21219)
- remove /usr/share directory from filelist (#21218) - update to CVS to fix getaddrinfo - update to CVS to fix freopen
- remove all alpha workarounds, not needed anymore - fix dladdr bug on alpha/sparc32/sparc64
- fix Makefiles so that they run static tests properly - update to CVS to fix ldconfig - update to glibc 2.2 release - update to CVS to:
- export __sysconf@@GLIBC_2.2 (#20417) - merge to 2.1.97 - update to CVS, including:
- fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
- fix hesiod (#19375)
- set LC_MESSAGES in zic/zdump for proper error message output (#19495)
- fix LFS x X A x $ d objects (BZ#12453)
- Fix initialization of optimization values for AIO (BZ#12083)
- Fix handling of conversion problem in CP932 module (BZ#12601)
- Fix potential problem with out-of-scope buffer (BZ#12626)
- Handle recursive calls in backtrace better (BZ#12432)
- Fix handling of incomplete character storage in state
- Fix file descriptor position after fclose (BZ#12724)
- Reinstall NIS RPC headers - Update from master
- Fix resizing table for unique symbols when adding symbol for copy
relocation (BZ#12511)
- Fix sched_setscheduler call in spawn implementation (BZ#12052)
- Report write error in addmnt even for cached streams (BZ#12625)
- Translate kernel error into what pthread_create should return
(BZ#386)
- More configurability for secondary group lookup (BZ#11257)
- Several locale data updates (BZ#11258, BZ#11487, BZ#11532,
BZ#11578, BZ#11653, BZ#11668, BZ#11945, BZ#11947, BZ#12158,
BZ#12200, BZ#12178, BZ#12178, BZ#12346, BZ#12449, BZ#12545,
BZ#12551, BZ#12611, BZ#12660, BZ#12681, BZ#12541, BZ#12711,
BZ#12738)
- Fix Linux getcwd for long paths (BZ#12713)
- static tls memory leak on TLS_DTV_AT_TP archs
- Actually undefine ARG_MAX from
- Backport BIND code to query name as TLD (BZ#12734)
- Allow $ORIGIN to reference trusted directoreis in SUID binaries
(BZ #12393)
- Add missing {__BEGIN,__END}_DECLS to sys/sysmacros.h
- Report if no record is found by initgroups in nss_files
- Never leave $ORIGIN unexpanded
- Revert "Ignore origin of privileged program"
- Reexport RPC interface - Update from master
- Don't use removed rpc headers
- Install rpc/netdb.h again - Update from master
- ldconfig: don't crash on empty path in config file (#699784)
- getaddrinfo(AF_INET6) does not return scope_id info provided by
NSS modules (BZ#12714)
- Fix pathconf(_PC_BUF_SIZE) (BZ#12723)
- Fix getnameinfo flags parameter type (BZ#12717)
- Add finer grained control for initgroups lookups to NSS
- Use all possible bytes from fopen mode string (BZ#12685, #698025)
- Define initgroups callback for nss_files
- elf.h: Define R_ARM_IRELATIVE reloc type
- Fix static linking with checking x86/x86-64 memcpy (BZ#12653)
- Fix POWER4/POWER7 optimized strncmp to not read past differing bytes
- Fix FPU context handling in getcontext on x86-64 (BZ#12420)
- Skip extra zeroes when searching auxv on s390
- Obsolete RPC implementation in libc
- Fix memory leak in TLS of loaded objects (BZ#12650)
- Don't leave empty element in rpath when skipping an element
- Make ppc sync_file_range cancelable
- Maintain stack alignment in ____longjmp_chk on x86_64 - Update from master
- Fix typo in cache information table for x86-{32,64}
- Define CLOCK_BOOTTIME, O_PATH, AT_EMPTY_PATH
- Work around old buggy program which cannot cope with memcpy
semantics (BZ#12518)
- Fix visibility of declarations of wcpcpy and wcpncpy (BZ#12631)
- Add clock_adjtime, name_to_handle_at, open_by_handle_at, syncfs
syscalls
- Really implement fallocate{,64} and sync_file_range as
cancellation points
- Enable systemtap support (#690281) - Update from master
- Fix infinite loop (#690323) - Update from master
- Handle page boundaries in x86 SSE4.2 strncmp (BZ#12597)
- Implement x86 cpuid handling of leaf4 for cache information (BZ#12587)
- Check size of pattern in wide character representation in fnmatch
(BZ #12583)
- Remove __restrict quals from wmemcmp prototype
- Fix copy relocations handling of unique objects (BZ#12510)
- ldd: never run file directly
- Ignore rpath elements containing non-isolated use of $ORIGIN when
privileged
- Don't leave empty element in rpath when skipping the first element
- Revert "Don't crash when dependencies are missing" (#688990) - Update from master
- Fix loading first object along a path when tracing
- Enable SSE2 memset for AMD'supcoming Orochi processor
- Don't read past end of buffer in fmemopen
- Revert broken changes (#682307) - Update from master
- Fix memory leak i x t X $A > a $ 0 a a !a @redhat.com> 2.4.2-3 Dan Walsh 2.4.2-2 Dan Walsh 2.4.2-1 Dan Walsh 2.4.1-5 Dan Walsh 2.4.1-4 Dan Walsh 2.4.1-3 Dan Walsh 2.4.1-2 Dan Walsh 2.4-4 Dan Walsh 2.4-3 Dan Walsh 2.4-2 Dan Walsh 2.4-1 Dan Walsh 2.3.19-4 Dan Walsh 2.3.19-3 Dan Walsh 2.3.19-2 Dan Walsh 2.3.19-1 James Antill 2.3.18-10 James Antill 2.3.18-9 Dan Walsh 2.3.18-8 Dan Walsh 2.3.18-7 Dan Walsh 2.3.18-6 Dan Walsh 2.3.18-5 Dan Walsh