# changelog

author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Peter Schiffer <pschiffe@redhat.com> 4.6.1-1
changelog:
  - resolves: #861849
    updated to 4.6.1
  - cleaned .spec file
  - resolves: #759964
    fixed sigsegv
  - resolves: #812225
    fixed sigsegv
  - fixed requires/buildrequires
  - added tex(pdftex.map) and libjpeg-turbo-devel buildrequires


author: Peter Schiffer <pschiffe@redhat.com> 4.4.4-2
changelog:
  - resolves: #769369
    added dependency on texlive-texmf-xetex package for latex subpackage
    run texhash after installing latex subpackage
  - resolves: #769357
    added upstream tikz-444.patch solving issue with tikz terminal
  - resolves: #769355
    added build dependency on texlive-texmf-latex because of subfigure.sty file
  - rebuilt for gcc 4.7


author: Ivana Varekova <varekova@redhat.com> - 4.2.4-5
changelog:
  - fix #489069 (update of the package from nonsplit version
    causes the absence of gnuplot binary -
    fixed using posttrans instead of post)


author: Phil Knirsch <pknirsch@redhat.com> 4.0.0-9
changelog:
  - Fixed 64bit problem with x11 display (#167508)
  - Added missing file ownage of /usr/share/gnuplot (#169333)


author: Phil Knirsch <pknirsch@redhat.com> 4.0.0-8
changelog:
  - Fixed missing Requires: emacs for the gnuplot-emacs package
  - Added a gnuplot-init.el file for startup (#151122)


author: Bill Nottingham <notting@redhat.com> 3.7.3-1
changelog:
  - update to 3.7.3
  - don't bother patching it to do jpegs with gd instead of gifs,
    as we haven't been building it with gd support anyway


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-59
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid
  - Allow sandbox to mount on symboliclinked homedirs


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  - Back port lots of fixes from Rawhide
          * Cleanup python problems
  	* setfiles: estimate percent progress
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* semanage: good error message is sepolgen python module missing
  	* restorecond: remove /etc/mtab from default list
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage 
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list 
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff 
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,  
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as 
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands. 
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it 
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update 
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox 
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless 
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session. 
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with 
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise 
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title 
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing 
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additiona capability  checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and  MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox 
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs 
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
   	  and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add 	rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk> 
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.	
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface 
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files 
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy. 
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Karel Zak <kzak@redhat.com> 2.22.2-3
changelog:
  - fix #882305 - agetty: unstable /dev/tty* permissions
  - fix #885314 - hexdump segfault
  - fix #896447 - No newlines in piped "cal" command
  - fix libblkid cache usage (upstream patch)
  - fix #905008 - uuidd: /usr/sbin/uuidd has incorrect file permissions


author: Karel Zak <kzak@redhat.com> 2.22-1
changelog:
  - upgrade to the release 2.22
  - enable eject(1) from util-linux, obsolete original eject package
  - fix #853164 - setuid program should have full RELRO
  - fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV


author: Karel Zak <kzak@redhat.com> 2.22-0.1
changelog:
  - upgrade to the release 2.22-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes
  - add sulogin, utmpdump, lslocks, wdctl


author: Karel Zak <kzak@redhat.com> 2.21.2-1
changelog:
  - upgrade to bugfix release 2.21.2
  - fix #814699 - namei(1) incorrectly resolves relative symlinks
  - fix #820707 - Impossible to unmount nfsv4/krb5 mounts after network disconnect
  - fix #816877 - libmount does not close device fd before mount(2)
  - fix #822705 - unable to login after installing


author: Karel Zak <kzak@redhat.com> 2.21-0.1
changelog:
  - upgrade to the release 2.21-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.21/v2.21-ReleaseNotes
  - add {fsck,mkfs}.minix
  - add new command chcpu(8)
  - add new command prlimit(1)
  - enable raw(8) command
  - move 60-raw.rules from /etc from /usr/lib/udev/rules.d
  - move blkid cache from etc to /run/blkid


author: Karel Zak <kzak@redhat.com> 2.20-0.2
changelog:
  - upgrade to the release 2.20-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.20-0.1
changelog:
  - upgrade to the release 2.20-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19.1-2
changelog:
  - fix #716483 - /var/tmp --(BIND-mounted)--> /tmp disrupts/hangs bootup
  - fix #709681 - failure to mount if a mount point ends with a slash in /etc/fstab
  - fix #709319 - 'mount -a' mounts already mounted directories
  - fix kernel version parsing


author: Karel Zak <kzak@redhat.com> 2.19.1-1
changelog:
  - upgrade to the release 2.19.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19.1-0.1
changelog:
  - upgrade to the release 2.19.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19-1
changelog:
  - upgrade to the release 2.19
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes
  - remove /sbin/mount.tmpfs -- integrated to mount(8)


author: Karel Zak <kzak@redhat.com> 2.19-0.4
changelog:
  - upgrade to the release 2.19-rc3
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc3-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19-0.3
changelog:
  - upgrade to the release 2.19-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc2-ChangeLog
  - fix #671893 - SELinux is preventing /bin/chown from 'setattr' accesses
    on the file mounts.


author: Karel Zak <kzak@redhat.com> 2.19-0.1
changelog:
  - upgrade to the release 2.19-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.18-2
changelog:
  - fix #615719 - tmpfs mount fails with 'user' option.
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work
  - fix #618957 - ISO images listed in fstab are mounted twice at boot


author: Karel Zak <kzak@redhat.com> 2.18-1
changelog:
  - upgrade to the final 2.18
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.18-0.2
changelog:
  - upgrade to 2.18-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-0.1
changelog:
  - upgrade to the release 2.18-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - fix #581252 - remounting tmpfs fails because of hidden rootcontext=
  - fix #580296 - "rtcwake" does miss the "off" option
  - fix #575734 - use microsecond resolution for blkid cache entries
  - upgrade to the bugfix release 2.17.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - minor fixed in spec file


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to the final 2.17.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-2
changelog:
  - remove Provides: lib{uuid,blkid}-static (thanks to Michael Schwendt)
  - remove useless URL to sf.net


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - upgrade to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog
  - fix #545147 - util-linux-ng : Violation of the Packaging Guidelines
    (remove uuid and blkid static libs)


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (ifarch rather than ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Gerard Ryan <galileo@fedoraproject.org> - 7.6.6-1
changelog:
  - Update to upstream 7.6.6.
  - Remove patch and add pom macros instead.
  - add new PaceManager extension as a subpackage.
  - Switch parent in POM to older parent from 7.5.5.


author: Gerard Ryan <galileo@fedoraproject.org> - 7.5.5-3
changelog:
  - Put jar files into a sub-directory of javadir
  - Add -f flag to add_maven_depmap macro calls
  - correctly name POM files
  - Add release requirement to versioned dependencies
  - Remove unnecessary group field from subpackages


author: Akira TAGOH <tagoh@redhat.com> - 20110915-1
changelog:
  - New upstream release. (#738594)
  - Update License tag to make this dual license with SIL OFL since 20101013.


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.4-1
changelog:
  - Rebased to version 0.10.2.4
  - Fix 'Cannot parse sensitivity level in s0' error (bz #902103)
  - Fix updating NIC that has boot order set (bz #906446)
  - Fix virsh list for vmware ESX (bz #910702)
  - Fix libxl disk backend default (bz #912488)


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.3-1
changelog:
  - Rebased to version 0.10.2.3
  - Fix libxl driver to build against xen 4.2 (bz #870689)
  - Fix possible crash when destroying guests (bz #877110)
  - Fix loading sysctl file (bz #887017)
  - Fix svirt memory leak (bz #890039)
  - Fix attaching PCI netdev to VM (bz #893131)
  - Fix libvirtd segfault on shutdown (bz #903194)
  - Raise mem limit to stop qemu processes from getting OOM killed (bz #903432)
  - CVE-2013-0170 libvirt: use-after-free in virNetMessageFree() (bz #893450, bz


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.2-2
changelog:
  - Fix conflict with NM launched dnsmasq (bz #886663)
  - Fix selinux denials when launching non-kvm qemu guests (bz #885837)


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.2-1
changelog:
  - Rebased to version 0.10.2.2
  - CVE-2012-3411: avoid open DNS proxy with dnsmasq (bz #874702, bz #882309)
  - Don't ignore address for USB disks (bz #861309)
  - Fix error with blkdeviotune (bz #872582)
  - Fix cloning LVM volume (bz #869607)
  - Fix VDSM error when libvirt doesn't format CPU topology (bz #876475)
  - Use systemd macros in spec file (bz #850186)


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.1-1
changelog:
  - Rebased to version 0.10.2.1
  - Fix lvm volume creation when alloc=0 (bz #866481)
  - Clarify virsh send-keys man page example (bz #860004)
  - Fix occasional deadlock via virDomainDestroy (bz #859009)
  - Fix LXC deadlock from ctrl-c (bz #848119)
  - Fix occasional selinux denials with macvtap (bz #798605)
  - Fix multilib conflict with systemtap files (bz #831425)
  - Don't trigger keytab warning in system logs (bz #745203)
  - Fix qemu domxml-2-native NIC model out (bz #636832)
  - Fix error message if not enough space for lvm vol (bz #609104)


author: Richard W.M. Jones <rjones@redhat.com> - 0.10.2-3
changelog:
  - Re-add Use-qemu-system-i386-as-binary-instead-of-qemu.patch
    NB: This patch is Fedora-specific and not upstream.
  - Add upstream patches: don't duplicate environment variables (RHBZ#859596).


author: Daniel Veillard <veillard@redhat.com> - 0.10.2-1
changelog:
  - Upstream release 0.10.2
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - parallels: add support of containers to the driver
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Cole Robinson <crobinso@redhat.com> - 0.10.1-3
changelog:
  - Fix libvirtd segfault with old netcf-libs (bz 853381)
  - Drop unneeded dnsmasq --filterwin2k
  - Fix unwanted connection closing, needed for boxes


author: Daniel Veillard <veillard@redhat.com> - 0.10.0-1
changelog:
  - upstream release of 0.10.0
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - driver for parallels hypervisor
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.13-1
changelog:
  - S390: support for s390(x)
  - snapshot: implement new APIs for esx and vbox
  - snapshot: new query APIs and many improvements
  - virsh: Allow users to reedit rejected XML
  - nwfilter: add DHCP snooping
  - Enable driver modules in libvirt RPM
  - Default to enable driver modules for libvirtd
  - storage backend: Add RBD (RADOS Block Device) support
  - sVirt support for LXC domains inprovement
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.12-1
changelog:
  - qemu: allow snapshotting of sheepdog and rbd disks
  - blockjob: add new APIs
  - a lot of bug fixes, improvements and portability work


author: Cole Robinson <crobinso@redhat.com> - 0.9.11.3-1
changelog:
  - Rebased to version 0.9.11.3
  - Abide URI username when connecting to hypervisor (bz 811397)
  - Fix managed USB mode (bz 814866)
  - Fix crash connecting to ESX host (bz 811891)


author: Daniel Veillard <veillard@redhat.com> - 0.9.9-1
changelog:
  - Add API virDomain{S,G}etInterfaceParameters
  - Add API virDomain{G, S}etNumaParameters
  - Add support for ppc64 qemu
  - Support Xen domctl v8
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.8-1
changelog:
  - Add support for QEMU 1.0
  - Add preliminary PPC cpu driver
  - Add new API virDomain{Set, Get}BlockIoTune
  - block_resize: Define the new API
  - Add a public API to invoke suspend/resume on the host
  - various improvements for LXC containers
  - Define keepalive protocol and add virConnectIsAlive API
  - Add support for STP and VLAN filtering
  - many improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.6-2
changelog:
  - Make PCI multifunction support more manual - Bug 742836
  - F15 build still uses cgconfig - Bug 738725


author: Daniel Veillard <veillard@redhat.com> - 0.9.5-1
changelog:
  - many snapshot improvements (Eric Blake)
  - latency: Define new public API and structure (Osier Yang)
  - USB2 and various USB improvements (Marc-André Lureau)
  - storage: Add fs pool formatting (Osier Yang)
  - Add public API for getting migration speed (Jim Fehlig)
  - Add basic driver for Microsoft Hyper-V (Matthias Bolte)
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.4-1
changelog:
  - network bandwidth QoS control
  - Add new API virDomainBlockPull*
  - save: new API to manipulate save file images
  - CPU bandwidth limits support
  - allow to send NMI and key event to guests
  - new API virDomainUndefineFlags
  - Implement code to attach to external QEMU instances
  - bios: Add support for SGA
  - various missing python binding
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.3-1
changelog:
  - new API virDomainGetVcpupinInfo
  - Add TXT record support for virtual DNS service
  - Support reboots with the QEMU driver
  - New API virDomainGetControlInfo API
  - New API virNodeGetMemoryStats
  - New API virNodeGetCPUTime
  - New API for send-key
  - New API virDomainPinVcpuFlags
  - support multifunction PCI device
  - lxc: various improvements
  - many improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.2-2
changelog:
  - add rule to require netcf-0.1.8 during build so that new transactional
    network change APIs are included.
  - document that CVE-2011-2178 has been fixed (by virtue of rebase
    to 0.9.2 - see https://bugzilla.redhat.com/show_bug.cgi?id=709777)


author: Daniel Veillard <veillard@redhat.com> - 0.9.2-1
changelog:
  - Framework for lock manager plugins
  - API for network config change transactions
  - flags for setting memory parameters
  - virDomainGetState public API
  - qemu: allow blkstat/blkinfo calls during migration
  - Introduce migration v3 API
  - Defining the Screenshot public API
  - public API for NMI injection
  - Various improvements and bug fixes


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.1-3
changelog:
  - Add upstream patches:
      0001-json-Avoid-passing-large-positive-64-bit-integers-to.patch
      0001-qemudDomainMemoryPeek-change-ownership-selinux-label.patch
      0002-remote-remove-bogus-virDomainFree.patch
    so that users can try out virt-dmesg.
  - Change /var/cache mode to 0711.


author: Daniel Veillard <veillard@redhat.com> - 0.9.1-1
changelog:
  - support various persistent domain updates
  - improvements on memory APIs
  - Add virDomainEventRebootNew
  - various improvements to libxl driver
  - Spice: support audio, images and stream compression
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.0-1
changelog:
  - Support cputune cpu usage tuning
  - Add public APIs for storage volume upload/download
  - Add public API for setting migration speed on the fly
  - Add libxenlight driver
  - qemu: support migration to fd
  - libvirt: add virDomain{Get,Set}BlkioParameters
  - setmem: introduce a new libvirt API (virDomainSetMemoryFlags)
  - Expose event loop implementation as a public API
  - Dump the debug buffer to libvirtd.log on fatal signal
  - Audit support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.8-1
changelog:
  - expose new API for sysinfo extraction
  - cgroup blkio weight support
  - smartcard device support
  - qemu: Support per-device boot ordering
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.7-1
changelog:
  - Preliminary support for VirtualBox 4.0
  - IPv6 support
  - Add VMware Workstation and Player driver driver
  - Add network disk support
  - Various improvements and bug fixes
  - from 0.8.6:
  - Add support for iSCSI target auto-discovery
  - QED: Basic support for QED images
  - remote console support
  - support for SPICE graphics
  - sysinfo and VMBIOS support
  - virsh qemu-monitor-command
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.5-1
changelog:
  - Enable JSON and netdev features in QEMU >= 0.13
  - framework for auditing integration
  - framework DTrace/SystemTap integration
  - Setting the number of vcpu at boot
  - Enable support for nested SVM
  - Virtio plan9fs filesystem QEMU
  - Memory parameter controls
  - various improvements and bug fixes


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.2-2
changelog:
  - CVE-2010-2237 ignoring defined main disk format when looking up disk backing stores
  - CVE-2010-2238 ignoring defined disk backing store format when recursing into disk
    image backing stores
  - CVE-2010-2239 not setting user defined backing store format when creating new image
  - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for
    obtaining privileged resources on the host


author: Daniel Veillard <veillard@redhat.com> - 0.8.2-1
changelog:
  - Upstream release 0.8.2
  - phyp: adding support for IVM
  - libvirt: introduce domainCreateWithFlags API
  - add 802.1Qbh and 802.1Qbg switches handling
  - Support for VirtualBox version 3.2
  - Init script for handling guests on shutdown/boot
  - qemu: live migration with non-shared storage for kvm


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-1
changelog:
  - Upstream release 0.8.1
  - Starts dnsmasq from libvirtd with --dhcp-hostsfile
  - Add virDomainGetBlockInfo API to query disk sizing
  - a lot of bug fixes and cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - Upstream release 0.8.0
  - Snapshotting support (QEmu/VBox/ESX)
  - Network filtering API
  - XenAPI driver
  - new APIs for domain events
  - Libvirt managed save API
  - timer subselection for domain clock
  - synchronous hooks
  - API to update guest CPU to host CPU
  - virDomainUpdateDeviceFlags new API
  - migrate max downtime API
  - volume wiping API
  - and many bug fixes


author: Cole Robinson <crobinso@redhat.com> - 0.7.7-2.fc14
changelog:
  - Fix USB devices by product with security enabled (bz 574136)
  - Set kernel/initrd in security driver, fixes some URL installs (bz 566425)


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support
  - async job handling
  - virtio channel
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - assorted bug fixes and lots of cleanups


author: Adam Jackson <ajax@redhat.com> 0.7.6-2
changelog:
  - libvirt-0.7.6-add-needed.patch: Fix FTBFS from --no-add-needed
  - Add BuildRequires: xmlrpc-c-client for libxmlrpc_client.so


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Fabian Affolter <mail@fabian-affolter.ch> - 4.1.11-1.a
changelog:
  - Removed shebang and permission fixing
  - Added new doc files
  - Added scripts to files section
  - Updated to new upstream version


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-5
changelog:
  - Patch to allow wildcards in include: statements
  - Patch to ensure stube-zone's are lost when using dnssec-triggerd
  - Add directories /etc/unbound/keys.d,conf.d,local.d with
    example entries
  - Added /etc/unbound/root.anchor, maintained by unbound-anchor
    which is installed as monthly cron and PreExec in systemd config
    (root.key is unused, but left installed in case people depend on it)
  - Native systemd (simple) and /etc/sysconfig/unbound support
  - Run unbound-checkconf in PreExec
  - Moved trust anchor related files to unbound-libs, as they can
    be used without the daemon.
  - sub packages now depends on base package of same arch
  - Build munin package as noarch
  - unbound-anchor moved to unbound-libs package. It is needed
    to update the root.anchor key file.


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-1
changelog:
  - Updated to 1.4.18 (FIPS related fixes mostly)
  - Removed patches that were merged in upstream
  - Added comment to root.key


author: Paul Wouters <pwouters@redhat.com> - 1.4.17-5
changelog:
  - Fix for unbound crasher (upstream bug #452)
  - Support libunbound functions in man pages and place in -devel


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-3
changelog:
  - Since the daemon links to the libs staticly, add Requires:
    (this is rhbz#745288)
  - Package up streamtcp as unbound-streamtcp (for monitoring)


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-2
changelog:
  - Don't ghost the directory (rhbz#788805)
  - Patch for unbound to support unbound-control forward_zone
    (needed for openswan in XAUTH mode)


author: Paul Wouters <paul@cypherpunks.ca> - 1.4.14-1
changelog:
  - Upgraded to 1.4.14 for CVE-2011-4528 / VU#209659
  - SSL-wrapped query support for dnssec-trigger
  - EDNS handling changes
  - Removed integrated EDNS patches
  - Disabled use-caps-for-id, GoDaddy domains now break on it
  - Enabled new harden-below-nxdomain


author: Paul Wouters <paul@xelerance.com> - 1.4.13-1
changelog:
  - Upgraded to 1.4.13
  - Removed merged in pythonmod patch
  - Added EDNS1480 patch to fix unbound on broken EDNS/UDP networks
  - Fix python to go into sitearch instead of sitelib


author: Paul Wouters <paul@xelerance.com> - 1.4.12-2
changelog:
  - Fix for python module load in the server (Tom Hendrikx)
  - No longer enable --enable-debug as it causes degraded  performance
    under load.


author: Paul Wouters <paul@xelerance.com> - 1.4.11-1
changelog:
  - Updated to 1.4.11
  - removed integrated CVE patch
  - updated stock unbound.conf for new options introduced


author: Paul Wouters <paul@xelerance.com> - 1.4.8-1
changelog:
  - Updated to 1.4.8
  - Enable root key for DNSSEC
  - Fix unbound-munin to use proper file (could cause excessive logging)
  - Build unbound-python per default
  - Disable gost as Fedora/EPEL does not allow ECC and has mangled openssl


author: Paul Wouters <paul@xelerance.com> - 1.4.5-3
changelog:
  - Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
    (see comments in inbound.conf)


author: Paul Wouters <paul@xelerance.com> - 1.4.2-1
changelog:
  - Updated to 1.4.2 
  - Updated unbound.conf with new options
  - Enabled pre-fetching DNSKEY records (DNSSEC speedup)
  - Enabled re-fetching popular records before they expire
  - Enabled logging of DNSSEC validation errors


author: Paul Wouters <paul@xelerance.com> - 1.4.1-2
changelog:
  - Removed dependancy for dnssec-conf
  - Added ISC DLV key (formerly in dnssec-conf)
  - Fixup old DLV locations in unbound.conf file via %post
  - Fix parent child disagreement handling and no-ipv6 present [svn r1953]


author: Paul Wouters <paul@xelerance.com> - 1.3.0-1
changelog:
  - Updated to 1.3.0
  - Added unbound-python sub package. disabled for now
  - Patch from svn to fix DLV lookups
  - Patches from svn to detect wrong truncated response from BIND 9.6.1 with
    minimal-responses)
  - Added Default-Start and Default-Stop to unbound.init
  - Re-enabled --enable-sha2
  - Re-enabled glob.patch


author: Paul Wouters <paul@xelerance.com - 1.2.0-1
changelog:
  - Updated to 1.2.0
  - Added dependancy on minimum SSL for CVE-2008-5077
  - Added dependancy on bc for unbound-munin
  - Added minimum requirement of libevent 1.4.5. Crashes with older versions
    (note: libevent is stale in EL-4 and not in EL-5, needs fixing there)
  - Removed dependancy on selinux-policy (will get used when available)
  - Enable options as per draft-wijngaards-dnsext-resolver-side-mitigation-00.txt
  - Enable unwanted-reply-threshold to mitigate against a Kaminsky attack
  - Enable val-clean-additional to drop addition unsigned data from signed
    response.
  - Removed patches (got merged into upstream)


author: Paul Wouters <paul@xelerance.com> - 1.1.1-7
changelog:
  - Modified scandir patch to silently fail when wildcard matches nothing
  - Patch to allow unbound-checkconf to find empty wildcard matches


author: Paul Wouters <paul@xelerance.com> - 1.1.1-6
changelog:
  - Added scandir patch for trusted-keys-file: option, which
    is used to load multiple dnssec keys in bind file format


author: Paul Wouters <paul@xelerance.com> - 1.1.0-3
changelog:
  - Remove the chroot, obsoleted by SElinux
  - Add additional munin plugin links supported by unbound plugin
  - Move configuration directory from /var/lib/unbound to /etc/unbound
  - Modified unbound.init and unbound.conf to account for chroot changes
  - Updated unbound.conf with new available options
  - Enabled dns-0x20 protection per default


author: Adam Tkac <atkac redhat com> - 1.1.0-2
changelog:
  - unbound-1.1.0-log_open.patch
    - make sure log is opened before chroot call
    - tracked as http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=219
  - removed /dev/log and /var/run/unbound and /etc/resolv.conf from
    chroot, not needed
  - don't mount files in chroot, it causes problems during updates
  - fixed typo in default config file


author: Paul Wouters <paul@xelerance.com> - 1.1.0-1
changelog:
  - Updated to version 1.1.0
  - Updated unbound.conf's statistics options and remote-control
    to work properly for munin
  - Added unbound-munin package
  - Generate unbound remote-control  key/certs on first startup
  - Required ldns is now 1.4.0


author: Paul Wouters <paul@xelerance.com> - 1.0.2-5
changelog:
  - Only call ldconfig in -libs package
  - Move configure into build section
  - devel subpackage should only depend on libs subpackage


author: Paul Wouters <paul@xelerance.com> - 1.0.2-4
changelog:
  - Fix CFLAGS getting lost in build
  - Don't enable interface-automatic:yes because that
    causes unbound to listen on 0.0.0.0 instead of 127.0.0.1


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Naveen Kumar <nkumar@redhat.com> - 4.4.4
changelog:
  - rectify error to directly install fonts in fontdir instead of subdir in fontdir
  - Resolves bug #653608


author: Naveen Kumar <nkumar@redhat.com> - 4.4.2
changelog:
  - apply patch smc-fonts_616324.patch created from Pravin S' src Modification 
  - resolves bug #616324


author: Naveen Kumar <nkumar@redhat.com> - 4.4.1
changelog:
  - new release from upstream
  - changes in spec file to incorporate new build from sfd source
  - remove patch bug-523454.patch
  - reolves bug #586283
  - reolves bug #586286


author: Naveen Kumar <nkumar@redhat.com> - 04.2.9
changelog:
  - oops! forgot to rename 66-smc-meera.conf to 65-0-smc-meera.conf in INSTALL in spec file
  - oops! forgot to remove 66-smc-meera.conf
  - resolves Bug #586288


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 04.1-4
changelog:
  - change descriptions
  - fix bug in kalyani font's obsoleting version number
  - move _font_pkg macros next to corresponding packages


author: Pravin Satpute <psatpute@redhat.com> 04.1-1
changelog:
  - new upstream release
  - fontconfig rule for size adjustment of Meera is added
  - two new fonts kalyani and anjalioldlipi
  - bugfix 448078


author: Pravin Satpute <psatpute@redhat.com> 04-4
changelog:
  - added comment about sharing directory in spec file
  - fontdir will be 'smc' only instead of 'smc-fonts' earlier


author: Pravin Satpute <psatpute@redhat.com> 04-3
changelog:
  - defattr now comes after files
  - s/malayalam/Malayalam in description
  - removed '-fonts' from fontdir variable value


author: Pravin Satpute <psatpute@redhat.com> 04-2
changelog:
  - done changes in spec file as suggested in review request
  - changed variable name from xfontdir to fontdir


author: Juan Hernandez <juan.hernandez@redhat.com> - 3.2.0.10-4
changelog:
  - Update to upstream 3.2.0.10
  - Removed patches to fix #905359 and #907931 as the fixes for those bugs
    are already included in the new upstream version


author: Juan Hernandez <juan.hernandez@redhat.com> - 3.2.0.5-1
changelog:
  - Update to upstream 3.2.0.5
  - The storagedomain option appears in all VM actions (#856164)
  - Disallow specifying app internal options


author: Michael Pasternak <mpastern@redhat.com> - 2.0
changelog:
  - New application core
  - Added support for commands history stack
  - Added support for context aware auto-competition
  - Dynamic ovirt-engine-sdk meatdata discovering
  - Removed restriction for specific version of ovirt-engine-sdk
    from 1.5 and further ovirt-engine-cli can work with any
    version of sdk (unless sdk introduced cli incompatible change)
  - same naming convention in ovirt-engine-cli and ovirt-engine-sdk
  - reformatted output to support reduced and expended modes in
    list in show commands by --show-all argument 
  - object fields formatting
  - added support for linux shell commands redirection
  - shell output redirection support
  - added SSL arguments to connect command
  - added ovirt-engine-api version discovering mechanism


author: Michael Pasternak <mpastern@redhat.com> - 1.2-1
changelog:
  - unable to add host #782734
    https://bugzilla.redhat.com/show_bug.cgi?id=782734
  - unable to add new cluster #782707
    https://bugzilla.redhat.com/show_bug.cgi?id=782707


author: Michael Pasternak <mpastern@redhat.com> - 1.1-1
changelog:
  - unable to create data-center: problem with --version param #781834
    https://bugzilla.redhat.com/show_bug.cgi?id=781834
  - authentication show as succeeded with bad password (text only) #781820
    https://bugzilla.redhat.com/show_bug.cgi?id=781820


author: Christoph Wickert <cwickert@fedoraproject.org> - 4.6.0-3
changelog:
  - Fix directory ownership problems
  - Require xfce4-doc and redhat-menus
  - Tweak and clean up Xfce menu


author: Christoph Wickert <fedora@christoph-wickert.de> - 4.4.2-5
changelog:
  - Use Fedora icon for desktop menu plugin (#445986)
  - Respect xdg user directory paths (#457740)
  - Fix menu icons
  - Fix CRITICAL register message on startup
  - Fix for x86_64
  - Simplify g_list_free code


author: Nils Philippsen <nils@redhat.com> - 1.2.112-1
changelog:
  - use pwquality if available for password strength checks (#754951)
  - require python-pwquality from F-17 on
  - print exception and have non-zero exit code if gtk can't be imported
  - clean up source (PEP8, etc.)


author: Nils Philippsen <nils@redhat.com> - 1.2.108-1
changelog:
  - pull updated translations
  - use /etc/login.defs for minimum uids/gids (#717122)
  - adapt messages for configurable minimum uids/gids


author: Nils Philippsen <nils@redhat.com> - 1.2.107-1
changelog:
  - remove obsolete selinux module (#646876)
  - search for substrings (#674047)
  - add entry icon for clearing user/group filter


author: Nils Philippsen <nils@redhat.com> - 1.2.106-1
changelog:
  - fix startup if max uid/gid is allocated
  - attempt to mkdir home directory instead of using os.access()
  - cope better with deleting auto-mounted home directories
  - restore context of home directories after creating, also use umask of 0700
    (u=rwx,go=)
  - make most password problems warnings, not errors (#656356)
  - ask if non-ASCII password should be used (#646876)
  - add forced password change on next login (#656219)
  - pick up translation updates


author: Nils Philippsen <nils@redhat.com>
changelog:
  - enforce uids, gids fitting in id_t datatype, also clamp uid, gid to permitted
    value range in UI (#616067)


author: Nils Philippsen <nils@redhat.com> - 1.2.100-1
changelog:
  - check if homedirs of new users can be created
  - prevent unlocking users with empty passwords
  - require docs in enterprise builds


author: Nils Philippsen <nils@redhat.com> - 1.2.98-1
changelog:
  - revert bad commit which overwrote Greek translations (#590890)
  - only delete user or group if really confirmed (#539251)
  - make file deletion methods more robust (#539251)


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use consistent terms for adding users (#343571)
  - use strings as keys for user/group check messages
  - warn about user names with trailing dollar sign (#486906)


author: Nils Philippsen <nils@redhat.com> - 1.2.84-1
changelog:
  - use ValueError.message, not .msg to get cracklib error message (#479858)
  - pull in updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.78-1
changelog:
  - fix focus target for "Account expires" label (#439717)
  - fix French translator credits so msgfmt doesn't complain


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - update copyright terms, admit complicity in source files
  - display shadow information from LDAP directories (#185907, fix by Ed van
    Gasteren, modified)
  - use libuser defaults for home directories (#204707, fix by Miloslav Trmac)
  - use gtk.AboutDialog for about dialog (#202963)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.71-1
changelog:
  - add release tags to changelog entries to appease rpmlint
  - remove "ExclusiveOS: Linux"
  - use xdg-open if available
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - obsolete explicit version of redhat-config-users
  - use "%defattr(-,root,root,-)"
  - don't use %attr
  - use "%config(noreplace)"
  - use macros instead of hardcoded directories
  - don't let gtk-update-icon-cache fail scriptlets
  - remove obsolete no.po translation file (#332431)
  - use "make %{?_smp_mflags}"


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.69-1
changelog:
  - prohibit home directories which are not absolute paths or contain path
    components which are empty, ".", ".." or too long (#303971)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix exception syntax, catch only IndexErrors caused by group inconsistencies
    (#243217)
  - list users and/or groups found to be inconsistent (#243217)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - don't delete preferences toplevel window when closing via window manager
    (#248686)
  - barf even less on inconsistent groups (#243217)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.60-1
changelog:
  - don't barf on inconsistent groups
  - use integers instead of strings for various user parameters (#226976, patch
    by Miloslav Trmac)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - try not to barf if encountering inconsistencies between /etc/passwd,
    /etc/group, /etc/shadow and /etc/gshadow


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - use Category: ... System; ... in desktop file
  - clean buildroot before installing
  - fix licensing blurb in PO files
  - require/BR python >= 2.0 instead of python2
  - recode spec file to UTF-8


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clarify comments, add new variables in /etc/sysconfig/system-config-users
  - use new method to choose GID when creating groups as well
  - actually set new user's GID
  - remove debugging statements


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.45-1
changelog:
  - revamp uid/gid number selection to honor preferences and avoid primary
    group/created group discrepancies (#198152)
  - use disttag if available


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.40-1
changelog:
  - initialize shadow variables only if shadow passwords are used
    (#168524, #168529, patch by Josef Whiter)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.30-1
changelog:
  - use os.lstat() to test ownership of files to be deleted
  - update the GTK+ theme icon cache on (un)install


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.27-1
changelog:
  - some sanity testing to avoid deleting system directories when deleting a user
    (#138093)
  - eventually delete mail spool (#102637) and temporary files (#126756)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set password and confirm password entries (in)sensitive based on whether
    account is locked or not (#131180)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.24-1
changelog:
  - use user/group names for indexing, avoid unnecessary user/group lookups
    (#135223, original patch by Miloslav Trmac)
  - remove some debugging statements
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.23-1
changelog:
  - try to fix 32bit uids/gids (#134803)
  - fix gtk.main*() related DeprecationWarnings
  - byte-compile python files in "make install"
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.20-1
changelog:
  - allow UTF-8 in user's full name (#133137)
  - require new libuser version so that fix for #80624 doesn't throw exception
    (#133479)
  - admit complicity


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.18-1
changelog:
  - use F1 instead of Ctrl+H as accelerator for Help/Contents (#132163)
  - use "mkdir -p" to fix make install glitch
  - use absolute paths in *.glade to fix pygtk/pyglade subtleties


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.15-1
changelog:
  - add manpage (Chris Spencer, #115316)
  - add Slovenian translation to desktop file (Roman Maurer, #131835)


author: Brent Fox <bfox@redhat.com> 1.2.7-1
changelog:
  - preserve existing group selection in userProperties.py (bug #111199)
  - handle munged config file (bug #108400)


author: Brent Fox <bfox@redhat.com> 1.2.5-1
changelog:
  - rename from redhat-config-users
  - add Obsoletes for redhat-config-users
  - make changes for Python2.3


author: Brent Fox <bfox@redhat.com> 1.1.17-1
changelog:
  - if shadow passwords are not enabled, do not show certain widgets (bug #104536)
  - don't modify password expiration data by accident (bug #88190)


author: Brent Fox <bfox@redhat.com> 1.1.16-1
changelog:
  - clarify error dialog message (bug #101607)
  - allow underscores and dashes in usernames and groupnames (bug #99115)


author: Brent Fox <bfox@redhat.com> 1.1.11-1
changelog:
  - don't create new user with an existing uid (bug #90911)
  - use the messageDialog module in groupWindow.py
  - don't create group with an existing gid (bug #90911)


author: Brent Fox <bfox@redhat.com> 1.1.9-1
changelog:
  - popup a confirmation dialog when deleting groups
  - popup a confirmation dialog when deleting users


author: Brent Fox <bfox@redhat.com> 1.1.7-1
changelog:
  - don't allow colons in username or homedir names (bug #90481)
  - check for zero length in usernames, groupnames, gecos, and homedirs


author: Brent Fox <bfox@redhat.com> 1.1.5-1
changelog:
  - don't allow root account to be locked
  - make default values for SHADOW* on user creation so we can do password aging properly later


author: Brent Fox <bfox@redhat.com> 1.1.3-3
changelog:
  - force ascii input (bug #74058)
  - make sure that groupWindow calls self.ready() after showing dialogs
  - remove sentence hacks in asciiCheck.py (bug #82015)
  - fix typo in about box (bug #82016)
  - do not create homedir if they user doesn't want to
  - only offer to delete homedirs if they actually exist  (bug #78619)
  - if the user is the only member of their group, delete the group automatically (bug #78620)


author: Brent Fox <bfox@redhat.com> 1.1.1-9
changelog:
  - handle window delete-events correctly
  - call ready() after dialog is destroyed (bug #80625)
  - if a deleted user is the only user in his primary group, offer to delete the group too (bug #78620)


author: Dan Walsh <dwalsh@redhat.com> 1.1-16
changelog:
  - Fix traceback bug, caused by unitialized variable
  - Fix traceback bug, caused by primary gid missing from /etc/group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Attempt to minimize enumerations where possible
  - Always use defined constants for attribute names


author: Brent Fox <bfox@redhat.com>
changelog:
  - mainWindow.glade: Changed GUI per jrb's recommendations
  - mainWindow.py: added interfacing with libuser backend


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - mainWindow.glade: Cleaned up glade file a bunch.
  - mainWindow.py: modified to deal with updated glade.


author: Remi Collet <remi@fedoraproject.org> - 2.13.2-1
changelog:
  - Update to 2.13.2
  - raise dependencies, PHP_Reflect 1.6.1
  - provides phpci
  - patch for https://github.com/llaville/php-compat-info/issues/69


author: Remi Collet <remi@fedoraproject.org> - 2.13.0-1
changelog:
  - Update to 2.13.0
  - raise dependencies, PHP_Reflect 1.6.0
  - skip HashTest (mhash not available) on EL-6


author: Remi Collet <remi@fedoraproject.org> - 2.12.1-1
changelog:
  - update to Version 2.12.1
  - fix path to documentation in description
  - drop dependency on eZ components
  - raise PHPUnit dependency to 3.6.0


author: Remi Collet <remi@fedoraproject.org> - 2.11.0-1
changelog:
  - update to Version 2.11.0
  - html documentation is now provided by upstream
  - raise dependencies, PHP_Reflect 1.5.0, Console_CommandLine 1.2.0


author: Remi Collet <remi@fedoraproject.org> - 2.6.0-1
changelog:
  - Version 2.6.0 (stable) - API 2.6.0 (stable)
  - raise dependencies: PHPUnit 3.6.0, PHP_Reflect 1.4.2


author: Remi Collet <remi@fedoraproject.org> - 2.1.0-3
changelog:
  - remove all files with licensing issue
    don't use it during test, don't install it
    can keep it in sources are this files are still under free license


author: Jef Spaleta <jspaleta AT fedoraproject DOT org> 0.99.4-2
changelog:
  - Move python-basemap-examples subpackage to python-basemap srpm 
  - Make it possible to install python-basemap-data without python-basemap


author: Jens Petersen <petersen@redhat.com> - 3.6.0.v20100814043401-7
changelog:
  - keep fedora package noarch, but only build for eclipse archs for rhel
  - clean away deprecated buildroot and defattr lines


author: Sean Flanigan <sflaniga@redhat.com> - 3.5.0.v20090423085802-1
changelog:
  - Updated from upstream; added Estonian.
  - Fixed names/descriptions for languages with two word names such as "Portuguese (Brazilian)".
  - Added Babel metadata files (artifact.jar and content.jar) to make P2 happier (presently disabled)
  - Made the base package owner of dropins/babel and subdirectories


author: Sean Flanigan <sflaniga@redhat.com> - 3.5.0.v20090417091040-1
changelog:
  - Updated to use Babel's zipped langpacks instead of fetch-babel.sh
  - Changed versioning scheme to match changes in upstream versioning
  - Updated to latest upstream langpacks for Eclipse 3.5 / Galileo


author: Sean Flanigan <sflaniga@redhat.com> - 0.2.0-0.4.20080807snap
changelog:
  - Applied Jens Petersen's suggested patch to remove eclipse_version macro and 
    unnecessary buildroot checks


author: Sean Flanigan <sflaniga@redhat.com> - 0.2.0-0.3.20080807snap
changelog:
  - Added eclipse_version macro
  - Changed the Obsoletes version to be slightly higher than the last release of 
    eclipse-sdk-nls


author: Sean Flanigan <sflaniga@redhat.com> - 0.2.0-0.2.20080807snap
changelog:
  - Fixed version in changelog
  - Updated snapshot of Babel translation plugins
  - Changed code for Hebrew to he (not iw); changed fetch-babel.sh to compensate
  - Renamed eclipse_base macro to eclipse_data


author: Robert Scheck <robert@fedoraproject.org> 7.0.4-1
changelog:
  - Upgrade to 7.0.4
  - Added patch for rebuilding with PHP 5.4 (thanks to Remi Collet)
  - Work around crashs by reducing open file descriptors (#760888)


author: Robert Scheck <robert@fedoraproject.org> 6.30.10-2
changelog:
  - Backported a patch from trunk to avoid the crash of zarafa-server
    when creating new user with db or unix plugin (#564282, #567262)
  - Backported another patch from trunk to avoid the crash of httpd
    caused by PHP mapi.so during the logon in the webaccess (#564129)


author: Robert Scheck <robert@fedoraproject.org> 6.30.10-1
changelog:
  - Upgrade to 6.30.10 (#498194)
  - Initial spec file for Fedora and Red Hat Enterprise Linux (thanks
    to Jeroen van Meeuwen, John van der Kamp and Steve Hardy)


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-7
changelog:
  - Bump and rebuild for Ruby update.
  - Add upstream patch to fix bindings for Ruby 1.9.
  - Add non-upstream patch to pass --vendor flag to extconf.rb


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Rebased gnulib to work around RHBZ#756981.
  - Remove patches which are now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-2
changelog:
  - New upstream version 1.3.1.
  - Remove patch, now upstream.
  - Don't need hack for making an unversioned Python module.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.0-3
changelog:
  - New upstream version 1.3.0.
  - This version adds Ruby bindings, so there is a new subpackage 'ruby-hivex'.
  - Add upstream patch to fix Ruby tests.
  - Remove epoch macro in ruby-hivex dependency.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.7-3
changelog:
  - New upstream version 1.2.7.
  - Removed patch which is now upstream.
  - Add upstream patches to fix ocaml install rule.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.6-2
changelog:
  - New upstream version 1.2.6.
  - Removed patch which is now upstream.
  - Add upstream patch to fix ocaml tests.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New upstream version 1.2.5.
  - This version fixes a number of important memory issues found by
    valgrind and upgrading to this version is recommended for all users.
  - Remove patch now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-6
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: Christof Damian <christof@damian.net> - 2.0.7-1
changelog:
  - upstream 2.0.7
  - use tmpfiles.d to create pid directory
  - move default log file location to /var/log/sphinx
  - use systemd macros BZ 850323


author: Christof Damian <christof@damian.net> - 0.9.9-3
changelog:
  - change default listen address to localhost ( bug 566792 )
  - add ghost for files in /var/run/ ( bug 656694 )


author: Allisson Azevedo <allisson@gmail.com> 0.9.9-1
changelog:
  - Update to 0.9.9 (#556997).
  - Added sphinx-0.9.9-fix_static.patch to fix FTBS.
  - Run sphinx searchd as non-root user (#541464).


author: Allisson Azevedo <allisson@gmail.com> 0.9.8.1-3
changelog:
  - Fixed macros consistency.
  - Modified make install to keep timestamps.
  - Added libsphinxclient package.


author: Daniel Drake <dsd@laptop.rog> - 1.0.15-3
changelog:
  - Create bitfrost-sugar subpackage with components that interact with Sugar
  - Reduces dependencies for servers that just need core bitfrost


author: John Dennis <jdennis@redhat.com> - 2.2.0-3
changelog:
  - specify homedir (/var/lib/radiusd) for radiusd user in useradd,
    do not permit useradd to default the homedir.


author: John Dennis <jdennis@redhat.com> - 2.2.0-1
changelog:
  - resolves: bug#876564 - fails to start without freeradius-mysql
  - use upstream version of freeradius-exclude-config-file.patch


author: John Dennis <jdennis@redhat.com> - 2.2.0-0
changelog:
  - fix CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  - Add new patch to avoid reading .rpmnew, .rpmsave and other invalid
    files when loading config files
  - Upgrade to new 2.2.0 upstream release
  - Upstream changelog for 2.1.12:
    Feature improvements
    * 100% configuration file compatible with 2.1.x.
      The only fix needed is to disallow "hashsize=0" for rlm_passwd
    * Update Aruba, Alcatel Lucent, APC, BT, PaloAlto, Pureware,
      Redback, and Mikrotik dictionaries
    * Switch to using SHA1 for certificate digests instead of MD5.
      See raddb/certs/*.cnf
    * Added copyright statements to the dictionaries, so that we know
      when people are using them.
    * Better documentation for radrelay and detail file writer.
      See raddb/modules/radrelay and raddb/radrelay.conf
    * Added TLS-Cert-Subject-Alt-Name-Email from patch by Luke Howard
    * Added -F <file> to radwho
    * Added query timeouts to MySQL driver.  Patch from Brian De Wolf.
    * Add /etc/default/freeradius to debian package.
      Patch from Matthew Newton
    * Finalize DHCP and DHCP relay code.  It should now work everywhere.
      See raddb/sites-available/dhcp, src_ipaddr and src_interface.
    * DHCP capabilitiies are now compiled in by default.
      It runs as a DHCP server ONLY when manually enabled.
    * Added one letter expansions: %G - request minute and %I request
      ID.
    * Added script to convert ISC DHCP lease files to SQL pools.
      See scripts/isc2ippool.pl
    * Added rlm_cache to cache arbitrary attributes.
    * Added max_use to rlm_ldap to force connection to be re-established
      after a given number of queries.
    * Added configtest option to Debian init scripts, and automatic
      config test on restart.
    * Added cache config item to rlm_krb5. When set to "no" ticket
      caching is disabled which may increase performance.

    Bug fixes
    * Fix CVE-2012-3547.  All users of 2.1.10, 2.1.11, 2.1.12,
      and 802.1X should upgrade immediately.
    * Fix typo in detail file writer, to skip writing if the packet
      was read from this detail file.
    * Free cached replies when closing resumed SSL sessions.
    * Fix a number of issues found by Coverity.
    * Fix memory leak and race condition in the EAP-TLS session cache.
      Thanks to Phil Mayers for tracking down OpenSSL APIs.
    * Restrict ATTRIBUTE names to character sets that make sense.
    * Fix EAP-TLS session Id length so that OpenSSL doesn't get
      excited.
    * Fix SQL IPPool logic for non-timer attributes.  Closes bug #181
    * Change some informational messages to DEBUG rather than error.
    * Portability fixes for FreeBSD.  Closes bug #177
    * A much better fix for the _lt__PROGRAM__LTX_preloaded_symbols
      nonsense.
    * Safely handle extremely long lines in conf file variable expansion
    * Fix for Debian bug #606450
    * Mutex lock around rlm_perl Clone routines. Patch from Eike Dehling
    * The passwd module no longer permits "hashsize = 0".  Setting that
      is pointless for a host of reasons.  It will also break the server.
    * Fix proxied inner-tunnel packets sometimes having zero authentication
      vector.  Found by Brian Julin.
    * Added $(EXEEXT) to Makefiles for portability.  Closes bug #188.
    * Fix minor build issue which would cause rlm_eap to be built twice.
    * When using "status_check=request" for a home server, the username
      and password must be specified, or the server will not start.
    * EAP-SIM now calculates keys from the SIM identity, not from the
      EAP-Identity.  Changing the EAP type via NAK may result in
      identities changing.  Bug reported by Microsoft EAP team.
    * Use home server src_ipaddr when sending Status-Server packets
    * Decrypt encrypted ERX attributes in CoA packets.
    * Fix registration of internal xlat's so %{mschap:...} doesn't
      disappear after a HUP.
    * Can now reference tagged attributes in expansions.
      e.g. %{Tunnel-Type:1} and %{Tunnel-Type:1[0]} now work.
    * Correct calculation of Message-Authenticator for CoA and Disconnect
      replies.  Patch from Jouni Malinen
    * Install rad_counter, for managing rlm_counter files.
    * Add unique index constraint to all SQL flavours so that alternate
      queries work correctly.
    * The TTLS diameter decoder is now more lenient.  It ignores
      unknown attributes, instead of rejecting the TTLS session.
    * Use "globfree" in detail file reader.  Prevents very slow leak.
      Closes bug #207.
    * Operator =~ shouldn't copy the attribute, like :=.  It should
      instead behave more like ==.
    * Build main Debian package without SQL dependencies
    * Use max_queue_size in threading code
    * Update permissions in raddb/sql/postgresql/admin.sql
    * Added OpenSSL_add_all_algorithms() to fix issues where OpenSSL
      wouldn't use methods it knew about.
    * Add more sanity checks in dynamic_clients code so the server won't
      crash if it attempts to load a badly formated client definition.


author: John Dennis <jdennis@redhat.com> - 2.1.12-6
changelog:
  Fixing bugs in RHEL6 rebase, applying fixes here as well
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#781877 (from RHEL5) rlm_dbm_parse man page misspelled
  - resolves: bug#760193 (from RHEL5) radtest PPPhint option is not parsed properly


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#781744
    systemd service file incorrectly listed pid file as
    /var/run/radiusd/radiusd which it should have been
    /var/run/radiusd/radiusd.pid


author: John Dennis <jdennis@redhat.com> - 2.1.12-2
changelog:
  - rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf
    remove config(noreplace) because it must match files section and
    permissions differ between versions.
  - fixup macro usage for /var/run & /var/lib


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.11-1
changelog:
  - Upgrade to latest upstream release: 2.1.11
  - Remove the following two patches as upstream has incorporated them:
      freeradius-radtest-ipv6.patch
      freeradius-lt-dladvise.patch
  - Upstream changelog for 2.1.11:
    Feature improvements
    * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
      All vendors need to read it and follow its directions.
    * Microsoft SoH support for PEAP from Phil Mayers.
      See doc/SoH.txt
    * Certificate "bootstrap" script now checks for certificate expiry.
      See comments in raddb/eap.conf, and then "make_cert_command".
    * Support for dynamic expansion of EAP-GTC challenges.
      Patch from Alexander Clouter.
    * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
      section.
    * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
    * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
    * Experimental redis support from Gabriel Blanchard.
      See raddb/modules/redis and raddb/modules/rediswho
    * Add "key" to rlm_fastusers.  Closes bug #126.
    * Added scripts/radtee from original software at
      http://horde.net/~jwm/software/misc/comparison-tee
    * Updated radmin "man" page for new commands.
    * radsniff now prints the hex decoding of the packet (-x -x -x)
    * mschap module now reloads its configuration on HUP
    * Added experimental "replicate" module.  See raddb/modules/replicate
    * Policy "foo" can now refer to module "foo".  This lets you
      over-ride the behavior of a module.
    * Policy "foo.authorize" can now over-ride the behavior of module
      "foo", "authorize" method.
    * Produce errors in more situations when the configuration files
      have invalid syntax.

    Bug fixes
    * Ignore pre/post-proxy sections if proxying is disabled
    * Add configure checks for pcap_fopen*.
    * Fix call to otp_write in rlm_otp
    * Fix issue with Access-Challenge checking from 2.1.10, when the
      debug flag was set after server startup.  Closes #116 and #117.
    * Fix typo in zombie period start time.
    * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
    * Allow radtest to use spaces in shared secret.
      Patch from Cedric Carree.
    * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
      Patch from James Ballantine.
    * Remove MN-FA key generation.  The NAS does this, not AAA.
      Patch from Ben Weichman.
    * Include dictionary.mikrotik by default.  Closes bug #121.
    * Add group membership query to MS-SQL examples.  Closes bug #120.
    * Don't cast NAS-Port to integer in Postgresql queries.
      Closes bug #112.
    * Fixes for libtool and autoconf from Sam Hartman.
    * radsniff should read the dictionaries in more situations.
    * Use fnmatch to check for detail file reader==writer.
      Closes bug #128.
    * Check for short writes (i.e. disk full) in rlm_detail.
      Closes bug #130.  Patches and testing from John Morrissey.
    * Fix typo in src/lib/token.c.  Closes bug #124
    * Allow workstation trust accounts to use MS-CHAP.
      Closes bug #123.
    * Assigning foo=`/bin/echo hello` now produces a syntax error
      if it is done outside of an "update" section.
    * Fix "too many open file descriptors" problem when using
      "verify client" in eap.conf.
    * Many fixes to dialup_admin for PHP5, by Stefan Winter.
    * Allow preprocess module to have "hints = " and "huntgroups =",
      which allows them to be empty or non-existent.
    * Renamed "php3" files to "php" in dialup_admin/
    * Produce error when sub-TLVs are used in a dictionary.  They are
      supported only in the "master" branch, and not in 2.1.x.
    * Minor fix in dictionary.redback.  Closes bug #138.
    * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
    * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
      Closes bug #118.
    * DHCP fixes to send unicast packets in more situations.
    * Fix to udpfromto, to enable it to work on IPv6 networks.
    * Fixes to the Oracle accounting_onoff_query.
    * When using both IPv4 and IPv6 home servers, ensure that we use the
      correct local socket for proxying.  Closes bug #143.
    * Suppress messages when thread pool is nearly full, all threads
      are busy, and we can't create new threads.
    * IPv6 is now enabled for udpfromto.  Closes bug #141
    * Make sqlippool query buffer the same size as sql module.
      Closes bug #139.
    * Make Coa / Disconnect proxying work again.
    * Configure scripts for rlm_caching from Nathaniel McCallum
    * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
    * Updated password routines to use time-insensitive comparisons.
      This prevents timing attacks (though none are known).
    * Allow sqlite module to do normal SELECT queries.
    * rlm_wimax now has a configure script
    * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
      files.  See share/dictionary for explanations.
    * Check for duplicate module definitions in the modules{} section,
      and refuse to start if duplicates are found.
    * Check for duplicate virtual servers, and refuse to start if
      duplicates are found.
    * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
    * Check pre-conditions before running radmin "inject file".
    * Don't over-ride "no match" with "match" for regexes.
      Closes bug #152.
    * Make retry and error message configurable in mschap.
      See raddb/modules/mschap
    * Allow EAP-MSCHAPv2 to send error message to client.  This change
      allows some clients to prompt the user for a new password.
      See raddb/eap.conf, mschapv2 section, "send_error".
    * Load the default virtual server before any others.
      This matches what users expect, and reduces confusion.
    * Fix configure checks for udpfromto.  Fixes Debian bug #606866
    * Definitive fix for bug #35, where the server could crash under
      certain loads.  Changes src/lib/packet.c to use RB trees.
    * Updated "configure" checks to allow IPv6 udpfromto on Linux.
    * SQL module now returns NOOP if the accounting start/interim/stop
      queries don't do anything.
    * Allow %{outer.control: ... } in string expansions
    * home_server coa config now matches raddb/proxy.conf
    * Never send a reply to a DHCP Release.


author: John Dennis <jdennis@redhat.com> - 2.1.10-7
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - bug 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - resolves: bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-3
changelog:
  - resolves: bug #522111 non-conformant initscript
    also change permission of /var/run/radiusd from 0700 to 0755
    so that "service radiusd status" can be run as non-root


author: John Dennis <jdennis@redhat.com> - 2.1.7-1
changelog:
  - enable building of the rlm_wimax module
  - pcap wire analysis support is enabled and available in utils subpackage
  - Resolves bug #523053 radtest manpage in wrong package
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * Full support for CoA and Disconnect packets as per RFC 3576
        and RFC 5176.  Both receiving and proxying CoA is supported.
      * Added "src_ipaddr" configuration to "home_server".  See
        proxy.conf for details.
      * radsniff now accepts -I, to read from a filename instead of
        a device.
      * radsniff also prints matching requests and any responses to those
        requests when '-r' is used.
      * Added example of attr_filter for Access-Challenge packets
      * Added support for udpfromto in DHCP code
      * radmin can now selectively mark modules alive/dead.
        See "set module state".
      * Added customizable messages on login success/fail.
        See msg_goodpass && msg_badpass in log{} section of radiusd.conf
      * Document "chase_referrals" and "rebind" in raddb/modules/ldap
      * Preliminary implementation of DHCP relay.
      * Made thread pool section optional.  If it doesn't exist,
        the server will run single-threaded.
      * Added sample radrelay.conf for people upgrading from 1.x
      * Made proxying more stable by failing over, rather than
        rejecting the first request.  See "response_window" in proxy.conf
      * Allow home_server_pools to exist without realms.
      * Add dictionary.iea (closes bug #7)
      * Added support for RFC 5580
      * Added experimental sql_freetds module from Gabriel Blanchard.
      * Updated dictionary.foundry
      * Added sample configuration for MySQL cluster in raddb/sql/ndb
        See the README file for explanations.
    Bug fixes
      * Fixed corner case where proxied packets could have extra
        character in User-Password attribute.  Fix from Niko Tyni.
      * Extended size of "attribute" field in SQL to 64.
      * Fixes to ruby module to be more careful about when it builds.
      * Updated Perl module "configure" script to check for broken
        Perl installations.
      * Fix "status_check = none".  It would still send packets
        in some cases.
      * Set recursive flag on the proxy mutex, which enables safer
        cleanup on some platforms.
      * Copy the EAP username verbatim, rather than escaping it.
      * Update handling so that robust-proxy-accounting works when
        all home servers are down for extended periods of time.
      * Look for DHCP option 53 anywhere in the packet, not just
        at the start.
      * Fix processing of proxy fail handler with virtual servers.
      * DHCP code now prints out correct src/dst IP addresses
        when sending packets.
      * Removed requirement for DHCP to have clients
      * Fixed handling of DHCP packets with message-type buried in the packet
      * Fixed corner case with negation in unlang.
      * Minor fixes to default MySQL & PostgreSQL schemas
      * Suppress MSCHAP complaints in debugging mode.
      * Fix SQL module for multiple instance, and possible crash on HUP
      * Fix permissions for radius.log for sites that change user/group,
        but which don't create the file before starting radiusd.
      * Fix double counting of packets when proxying
      * Make %l work
      * Fix pthread keys in rlm_perl
      * Log reasons for EAP failure (closes bug #8)
      * Load home servers and pools that aren't referenced from a realm.
      * Handle return codes from virtual attributes in "unlang"
        (e.g. LDAP-Group).  This makes "!(expr)" work for them.
      * Enable VMPS to see contents of virtual server again
      * Fix WiMAX module to be consistent with examples.  (closes bug #10)
      * Fixed crash with policies dependent on NAS-Port comparisons
      * Allowed vendor IDs to be be higher than 32767.
      * Fix crash on startup with certain regexes in "hints" file.
      * Fix crash in attr_filter module when packets don't exist
      * Allow detail file reader to be faster when "load_factor = 100"
      * Add work-around for build failures with errors related to
        lt__PROGRAM__LTX_preloaded_symbols.  libltdl / libtool are horrible.
      * Made ldap module "rebind" option aware of older, incompatible
        versions of OpenLDAP.
      * Check value of Fall-Through in attr_filter module.


author: John Dennis <jdennis@redhat.com> - 2.1.6-1
changelog:
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * radclient exits with 0 on successful (accept / ack), and 1
        otherwise (no response / reject)
      * Added support for %{sql:UPDATE ..}, and insert/delete
        Patch from Arran Cudbard-Bell
      * Added sample "do not respond" policy.  See raddb/policy.conf
        and raddb/sites-available/do_not_respond
      * Cleanups to Suse spec file from Norbert Wegener
      * New VSAs for Juniper from Bjorn Mork
      * Include more RFC dictionaries in the default install
      * More documentation for the WiMAX module
      * Added "chase_referrals" and "rebind" configuration to rlm_ldap.
        This helps with Active Directory.  See raddb/modules/ldap
      * Don't load pre/post-proxy if proxying is disabled.
      * Added %{md5:...}, which returns MD5 hash in hex.
      * Added configurable "retry_interval" and "poll_interval"
        for "detail" listeners.
      * Added "delete_mppe_keys" configuration option to rlm_wimax.
        Apparently some WiMAX clients misbehave when they see those keys.
      * Added experimental rlm_ruby from
        http://github.com/Antti/freeradius-server/tree/master
      * Add Tunnel attributes to ldap.attrmap
      * Enable virtual servers to be reloaded on HUP.  For now, only
        the "authorize", "authenticate", etc. processing sections are
        reloaded.  Clients and "listen" sections are NOT reloaded.
      * Updated "radwatch" script to be more robust.  See scripts/radwatch
      * Added certificate compatibility notes in raddb/certs/README,
        for compatibility with different operating systems. (i.e. Windows)
      * Permit multiple "-e" in radmin.
      * Add support for originating CoA-Request and Disconnect-Request.
        See raddb/sites-available/originate-coa.
      * Added "lifetime" and "max_queries" to raddb/sql.conf.
        This helps address the problem of hung SQL sockets.
      * Allow packets to be injected via radmin.  See "inject help"
        in radmin.
      * Answer VMPS reconfirmation request.  Patch from Hermann Lauer.
      * Sample logrotate script in scripts/logrotate.freeradius
      * Add configurable poll interval for "detail" listeners
      * New "raddebug" command.  This prints debugging information from
        a running server.  See "man raddebug.
      * Add "require_message_authenticator" configuration to home_server
        configuration.  This makes the server add Message-Authenticator
        to all outgoing Access-Request packets.
      * Added smsotp module, as contributed by Siemens.
      * Enabled the administration socket in the default install.
        See raddb/sites-available/control-socket, and "man radmin"
      * Handle duplicate clients, such as with replicated or
        load-balanced SQL servers and "readclients = yes"
    Bug fixes
      * Minor changes to allow building without VQP.
      * Minor fixes from John Center
      * Fixed raddebug example
      * Don't crash when deleting attributes via unlang
      * Be friendlier to very fast clients
      * Updated the "detail" listener so that it only polls once,
        and not many times in a row, leaking memory each time...
      * Update comparison for Packet-Src-IP-Address (etc.) so that
        the operators other than '==' work.
      * Did autoconf magic to work around weird libtool bug
      * Make rlm_perl keep tags for tagged attributes in more situations
      * Update UID checking for radmin
      * Added "include_length" field for TTLS.  It's needed for RFC
        compliance, but not (apparently) for interoperability.
      * Clean up control sockets when they are closed, so that we don't
        leak memory.
      * Define SUN_LEN for systems that don't have it.
      * Correct some boundary conditions in the conditional checker ("if")
        in "unlang".  Bug noted by Arran Cudbard-Bell.
      * Work around minor building issues in gmake.  This should only
        have affected developers.
      * Change how we manage unprivileged user/group, so that we do not
        create control sockets owned by root.
      * Fixed more minor issues found by Coverity.
      * Allow raddb/certs/bootstrap to run when there is no "make"
        command installed.
      * In radiusd.conf, run_dir depends on the name of the program,
        and isn't hard-coded to "..../radiusd"
      * Check for EOF in more places in the "detail" file reader.
      * Added Freeswitch dictionary.
      * Chop ethernet frames in VMPS, rather than droppping packets.
      * Fix EAP-TLS bug.  Patch from Arnaud Ebalard
      * Don't lose string for regex-compares in the "users" file.
      * Expose more functions in rlm_sql to rlm_sqlippool, which
        helps on systems where RTLD_GLOBAL is off.
      * Fix typos in MySQL schemas for ippools.
      * Remove macro that was causing build issues on some platforms.
      * Fixed issues with dead home servers.  Bug noted by Chris Moules.
      * Fixed "access after free" with some dynamic clients.

  - fix packaging bug, some directories missing execute permission
    /etc/raddb/dictionary now readable by all.


author: John Dennis <jdennis@redhat.com> - 2.1.3-1
changelog:
  - upgrade to latest upstream release, upstream summary follows:
    The focus of this release is stability.
    Feature Improvements:
      * Allow running with "user=radiusd" and binding to secure sockets.
      * Start sending Status-Server "are you alive" messages earlier, which
        helps with proxying multiple realms to a home server.
      * Removed thread pool code from rlm_perl.  It's not necessary.
      * Added example Perl configuration to raddb/modules/perl
      * Force OpenSSL to support certificates with SHA256. This seems to be
        necessary for WiMAX certs.
    Bug fixes:
      * Fix Debian patch to allow it to build.
      * Fix potential NULL dereference in debugging mode on certain
        platforms for TTLS and PEAP inner tunnels.
      * Fix uninitialized memory in handling of vendor definitions
      * Fix parsing of quoted (but non-string) attributes in the "users" file.
      * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
      * use SUN_LEN in control socket, to avoid truncation on some platforms.
      * Correct internal handling of "debug condition" to prevent it from
        being over-written.
      * Check return code of regcomp in "unlang", so that invalid regular
        expressions are caught rather than mishandled.
      * Make rlm_sql use <ltdl.h>.  Addresses bug #610.
      * Document list "type = status" better.  Closes bug #580.
      * Set "default days" for certificates, because OpenSSL won't do it.
        This closes bug #615.
      * Reference correct list in example raddb/modules/ldap. Closes #596.
      * Increase default schema size for Acct-Session-Id to 64. Closes #540.
      * Fix use of temporary files in dialup-admin.  Closes #605 and
        addresses CVE-2008-4474.
      * Addressed a number of minor issues found by Coverity.
      * Added DHCP option 150 to the dictionary.  Closes #618.


author: John Dennis <jdennis@redhat.com> - 2.1.1-8
changelog:
  - add --with-system-libtool to configure as a workaround for
  undefined reference to lt__PROGRAM__LTX_preloaded_symbols


author: John Dennis <jdennis@redhat.com> - 2.1.1-3
changelog:
  - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
  - remove diaupadmin packages, it's not well supported and there are problems with it.


author: John Dennis <jdennis@redhat.com> - 2.1.1-1
changelog:
  - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
    permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolves: bug #453761: FreeRADIUS %post should not include chown -R
    specify file attributes for /etc/raddb/ldap.attrmap
    fix consistent use of tabs/spaces (rpmlint warning)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - upgrade to latest upstream, see Changelog for details,
    upstream now has more complete fix for bug #447545, local patch removed


author: John Dennis <jdennis@redhat.com> - 2.0.4-1
changelog:
  - upgrade to latest upstream, see Changelog for details
  - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel


author: John Dennis <jdennis@redhat.com> - 2.0.3-2
changelog:
  - remove support for radrelay, it's different now
  - turn off default inclusion of SQL config files in radiusd.conf since SQL
    is an optional RPM install
  - remove mssql config files


author: John Dennis <jdennis@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to current upstream 2.0.3 release
  - Many thanks to Enrico Scholz for his spec file suggestions incorporated here
  - Resolve: bug #438665: Contains files owned by buildsystem
  - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
    to further partition external dependencies.
  - Clean up some unnecessary requires dependencies
  - Add versioned requires between subpackages


author: <jdennis@redhat.com> - 1.1.7-3.3.ipa
changelog:
  - add support in rlm_ldap for reading clients from ldap
  - fix TLS parameter controling if a cert which fails to validate
    will be accepted (i.e. self-signed),
    rlm_ldap config parameter=tls_require_cert
    ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
    ldap_set_option() when it should have been ldap_int_tls_config()


author: Thomas Woerner <twoerner@redhat.com> 1.1.7-1
changelog:
  - new versin 1.1.7
  - install snmp MIB files
  - dropped LDAP_DEPRECATED flag, it is upstream
  - marked config files for sub packages as config (rhbz#240400)
  - moved db files to /var/lib/raddb (rhbz#199082)


author: Thomas Woerner <twoerner@redhat.com> 1.1.6-2
changelog:
  - radiusd expects /etc/raddb to not be world readable or writable
    /etc/raddb now belongs to radiusd, post script sets permissions


author: Thomas Woerner <twoerner@redhat.com> 1.1.5-1
changelog:
  - new version 1.1.5
    - no /etc/raddb/otppasswd.sample anymore
    - build is pie by default, dropped pie patch
  - fixed build requirement for perl (perl-devel)


author: Karsten Hopp <karsten@redhat.com> 1.1.3-3
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/preun requirements
  - use rpm macros


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Richard W.M. Jones <rjones@redhat.com> - 2.01.1-5
changelog:
  - Replace %define with %global.
  - Use upstream RPM 4.8 OCaml dependency generator.
  - Suppress bogus requires as well as provides.


author: Richard W.M. Jones <rjones@redhat.com> - 2.0.4-1
changelog:
  - New upstream version 2.0.4 (rhbz #454789).
  - Fix non-UTF-8 characters in TODO.
  - *.cmx file moved to -devel subpackage as per packaging guidelines.


author: Richard W.M. Jones <rjones@redhat.com> - 1.10-6
changelog:
  - ExcludeArch ppc64
  - Clarify license is LGPLv2
  - Add LGPL, COPYING, calendarFAQ-2.6.txt and doc/ subdirectory to docs.
  - BR +ocaml-ocamldoc


author: Michel Salim <salimma@fedoraproject.org> - 0.29-2
changelog:
  - Remove unneeded %{python_sitelib} declaration
  - Make file listing more specific
  - Remove build directory before running coverage test


author: Peter Hutterer <peter.hutterer@redhat.com> 0.5-2
changelog:
  - Fix gnome-control-center crash for Bamboo Pen & Touch
  - Generic styli needs to have erasers, default to two tools.


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-5
changelog:
  - Mark data subpackage as noarch and make it a requirement for libwacom
  - Use generated udev rule file to list only known devices from libwacom
    database


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - filter private shared objects
  - %{python_sitelib}/dbus/mainloop/qt.so should be in %python_sitearch (#957260)
  - .spec cleanup
  - -assistant subpkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.7-5
changelog:
  - fix implicit linking when checking for QtHelp and QtAssistant
  - remove Python 3 code from Python 2.6 directory, fixes FTBFS (#564633)


author: Rex Dieter <rdieter@fedoraproject.org> 2.0.4-1
changelog:
  - lyx-2.0.4
  - Omitted backslash in code for floatingfootnote, after export to latex, and re-import (#811719)


author: José Matos <jamatos@fedoraproject.org> - 2.0.0-0.17.rc1
changelog:
  - Add thesaurus and hunspell paths to lyxrc.dist thus fixing
    http://www.lyx.org/trac/ticket/7253
  - Simplified the content of lyxrc.dist leaving only the relevant
    options and updating the format to the current one


author: José Matos <jamatos@fedoraproject.org> - 2.0.0-0.16.rc1
changelog:
  - Update for rc1 and add a dependency to ensure that math instant
    preview works by default
  - Removed patch applied upstream for gcc 4.6 fixes
  - Renamed patch for xdg_open to be in sync with current version (rc1)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.6.0-0.5.beta4
changelog:
  - Requires: dvipdfm (f9+, #448647)
  - add (optional) minimal qt4 dep
  - make Req: tex-simplecv fedora only
  - drop file deps (texhash)


author: José Matos <jamatos[AT]fc.up.pt> - 1.6.0-0.1.beta4
changelog:
  - lyx-1.6.0beta4
  - --enable-build-type=release disables extra debug information (no
      warnings, debug, assertions, concept-checks and stdlib-debug).


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.4.1-7
changelog:
  - use serverpipe "~/.lyx/lyxpipe" instead, that was the old default
    and what pybibliographer expects.


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.4.1-6
changelog:
  - set defaults for (see /usr/share/lyx/lyxrc.defaults.custom)
    screen_font_roman "Serif"
    screen_font_sans "Sans"
    screen_font_typewriter "Monospace"
    screen_zoom 100
    serverpipe "~/.lyx/pipe"
    (bug #192253)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.7-1
changelog:
  - Update to 0.1.7.
  - Bump min version of tp-glib needed.
  - Add BR on python-twisted, dbus-python, and pygobject2 for tests.
  - Drop buildroot & clean section. No longer needed.


author: gil cattaneo <puntogil@libero.it> 4.1.7-4
changelog:
  - fix license field
  - added ASL license txt file
  - renamed the "hibernate-core" package as "hibernate"


author: Volker Fröhlich <volker27@gmx.at> - 1.9.1-11
changelog:
  - Correct and extend conditionals for ppc andd ppc64, considering libspatialite
    Related to BZ #846301


author: Volker Fröhlich <volker27@gmx.at> - 1.9.0-4
changelog:
  - Correct provides-filtering as of https://fedoraproject.org/wiki/Packaging:AutoProvidesAndRequiresFiltering#Usage
  - Support webp
  - Remove bogus libjpeg-turbo conditional
  - Update Ruby ABI version to 1.9.1
  - Install Ruby bindings to vendorarchdir on F17 and later
  - Conditionals for Ruby specific elements for versions prior F17 and for EPEL
  - Correct quotes for CFLAGS and Ruby
  - Disable ogdi, until BZ#816282 is resolved


author: Volker Fröhlich <volker27@gmx.at> - 1.9.0-1
changelog:
  - Completely re-work the original spec-file
    The major changes are:
  - Add a libs sub-package
  - Move Python scripts to python sub-package
  - Install the documentation in a better way and with less slack
  - jar's filename is versionless
  - Update the version in the Maven pom automatically
  - Add a plugins directory
  - Add javadoc package and make the man sub-package noarch
  - Support many additional formats
  - Drop static sub-package as no other package uses it as BR
  - Delete included libs before building
  - Drop all patches, switch to a patch for the manpages, patch for JAVA path
  - Harmonize the use of buildroot and RPM_BUILD_ROOT
  - Introduce testversion macro


author: Volker Fröhlich <volker27@gmx.at> - 1.7.3-14
changelog:
  - Require Ruby abi
  - Add patch for Ruby 1.9 include dir, back-ported from GDAL 1.9
  - Change version string for gdal-config from <version>-fedora to
    <version>
  - Revert installation path for Ruby modules, as it proofed wrong
  - Use libjpeg-turbo


author: Volker Fröhlich <volker27@gmx.at> - 1.7.3-12
changelog:
  - Remove FC10 specific patch0
  - Versioned MODULE_COMPAT_ Requires for Perl (BZ 768265)
  - Add isa macro to base package Requires
  - Remove conditional for xerces_c in EL6, as EL6 has xerces_c
    even for ppc64 via EPEL
  - Remove EL4 conditionals
  - Replace the python_lib macro definition and install Python bindings
    to sitearch directory, where they belong
  - Use correct dap library names for linking
  - Correct Ruby installation path in the Makefile instead of moving it later
  - Use libdir variable in ppc64 Python path
  - Delete obsolete chmod for Python libraries
  - Move correction for Doxygen footer to prep section
  - Delete bundled libraries before building
  - Build without bsb and remove it from the tarball
  - Use mavenpomdir macro and be a bit more precise on manpages in
    the files section
  - Remove elements for grass support --> Will be replaced by plug-in
  - Remove unnecessary defattr
  - Correct version number in POM
  - Allow for libpng 1.5


author: Volker Fröhlich <volker27@gmx.at> - 1.7.3-9
changelog:
  - Patched spaces problem for Mapinfo files (mif)
    (http://trac.osgeo.org/gdal/ticket/3694)
  - Replaced all define macros with global
  - Corrected ruby_sitelib to ruby_sitearch
  - Use python_lib and ruby_sitearch instead of generating lists
  - Added man-pages for binaries
  - Replaced mkdir and install macros
  - Removed Python files from main package files section, that
    effectively already belonged to the Python sub-package


author: Volker Fröhlich <volker27@gmx.at> - 1.7.3-8
changelog:
  - Solved image path problem with Latex
  - Removed with-tiff and updated with-sqlite to with-sqlite3
  - Add more refman documents
  - Adapted refman loop to actual directories
  - Harmonized buildroot macro use


author: Volker Fröhlich <volker27@gmx.at> 1.7.3-5
changelog:
  - Dropped unnecessary encoding conversion for Russian refman
  - Install Russian refman
  - Don't try to install refman for sdts and dgn, as they fail to compile
  - Added -p to post and postun
  - Remove private-shared-object-provides for Python and Perl
  - Remove installdox scripts
  - gcc 4.6 doesn't accept -Xcompiler


author: Viji Nair <viji [AT] fedoraproject DOT org> - 1.7.3-2
changelog:
  - Install all the generated pdf documentation.
  - Build documentation as a separate package.
  - Spec cleanup


author: Viji Nair <viji [AT] fedoraproject DOT org> - 1.7.3-1
changelog:
  - Update to latest upstream version
  - Added jnis
  - Patches updated with proper version info
  - Added suggestions from Ralph Apel <r.apel@r-apel.de>
          + Versionless symlink for gdal.jar
          + Maven2 pom
          + JPP-style depmap
          + Use -f XX.files for ruby and python


author: Mathieu Baudier <mbaudier@argeo.org> - 1.7.2-5_0
changelog:
  - Rebuild for EL GIS, based on work contributed by Nikolaos Hatzopoulos and Peter Hopfgartner
  - Use vanilla sources


author: Orion Poplawski <orion@cora.nwra.com> - 1.7.2-3
changelog:
  - Add patch to change AISConnect() to Connect() for libdap 3.10
  - build without grass for libdap soname bump


author: Balint Cristian <cristian.balint@gmail.com> - 1.7.1-1
changelog:
  - new stable branch
  - re-enable java ColorTable
  - gdal custom fedora version banner
  - rebuild without grass
  - gdal manual are gone (upstream fault)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.6.2-3
changelog:
  - Explicitly BR hdf-static in accordance with the Packaging
    Guidelines (hdf-devel is still static-only).


author: Dan Horak <dan[at]danny.cz> - 1.6.1-1
changelog:
  - add patch for incompatibilities caused by libdap 3.9.x (thanks goes to arekm from PLD)
  - update to 1.6.1
  - don't install some refman.pdf, because they don't build
  - don't fail on man pages with suffix other than .gz
  - fix filelist for python subpackage


author: Lubomir Rintel <lkundrak@v3.sk> - 1.6.0-7
changelog:
  - Depend specifically on GCJ for Java (Alex Lancaster)
  - Disable grass (Alex Lancaster)
  - Create %_bindir before copying files there


author: Balint Cristian <rezso@rdsor.ro> - 1.5.1-10
changelog:
  - fix for multilib packaging bz#341231
  - huge spec cleanup
  - enable russian and brazil docs
  - enable and triage more docs


author: Balint Cristian <rezso@rdsor.ro> - 1.5.1-1
changelog:
  - new bugfix release from upstream
  - drop large parts from gcc43 patch, some are upstream now
  - fix building with perl-5.10 swig binding issue


author: Balint Cristian <rezso@rdsor.ro> - 1.5.0-1
changelog:
  - update to new 1.5.0 upstream stable
  - dropped build patch since HFA/ILI/DGN mandatories are now present
  - dropped swig patch, its upstream now
  - enable HFA it holds Intergraph (TM) explicit public license
  - enable DGN it holds Avenza Systems (TM) explicit public license
  - enable ILI headers since now contain proper public license message
  - keep and polish up rest of doubted license
  - further fixed hdf not supporting netcdf for for bz#189337
  - kill the annoying -Lexternal/lib for -lgeotiff
  - fix configure to not export LDFLAGS anyomre, upstream
    should really switch to real GNU automagic stuff
  - pymod samples and rfc docs now gone
  - hardcode external libtool to be used, LIBTOOL env not propagating anymore
  - use DESTDIR instead


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.4.2-6
changelog:
  - Bootstrap 1st: disabling grass support
  - Workaround for hdf not supporting netcdf (bug 189337 c8)
  - Disabling documents creation for now.


author: Balint Cristian <cbalint@redhat.com> 1.4.2-1
changelog:
  - new upstream one
  - catch some more docs
  - fix ogr python module runtime
  - include testcases and run tests
  - enable geotiff external library we have new libgeotiff now
  - EPSG geodetic database is licensed OK since v6.13 so re-enable
  - enable it against grass by default, implement optional switches


author: Balint Cristian <cbalint@redhat.com> 1.4.1-1
changelog:
  - new upstream release.
  - disable temporary grass-devel requirement untill find a
    resonable solution for gdal-grass egg-chicken dep problem.


author: Balint Cristian <cbalint@redhat.com> 1.4.0-9
changelog:
  - repack tarball for fedora, explain changes in PROVENANCE-fedora,
    license should be clean now according to PROVENANCE-* files
  - require ogdi since is available now
  - drop nogeotiff patch, in -fedora tarball geotiff is removed
  - man page triage over subpackages
  - exclude python byte compiled objects
  - fix some source C file exec bits


author: Balint Cristian <cbalint@redhat.com> 1.4.0-1
changelog:
  - first pack for fedora extras
  - disable geotiff (untill license sorted out)
  - enable all options aviable from extras
  - pack perl and python modules
  - kill r-path from libs
  - pack all docs posible


author: Jerry James <loganjerry@gmail.com> - 1.5.3-6
changelog:
  - Build with _GNU_SOURCE defined to get long options, too
  - Remove test timeouts so tests don't die spuriously on ARM (bz 893158)


author: Jerry James <loganjerry@gmail.com> - 1.5.3-2
changelog:
  - Fix 4ti2 subpackage dependencies on 4ti2-libs
  - Convert 4ti2's NEWS to utf-8
  - Add missing doc files to the main package
  - BR TOPCOM to get points2triangs and point2placingtriang


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 6.14-1
changelog:
  - Update to Globus Toolkit 5.2.2
  - Drop patch globus-gridftp-server-pw195.patch (was backport)
  - Drop patch globus-gridftp-server-format.patch (fixed upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 6.10-1
changelog:
  - Update to Globus Toolkit 5.2.1
  - Drop patches globus-gridftp-server-deps.patch,
    globus-gridftp-server-funcgrp.patch, globus-gridftp-server-pathmax.patch
    and globus-gridftp-server-compat.patch (fixed upstream)
  - Drop globus-gridftp-server man page from packaging since it is now included
    in upstream sources
  - Add additional contributed man pages


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 6.5-3
changelog:
  - The last update broke backward compatibility and should have bumped
    the soname - so bump it now
  - Add patch from upstream to reduce the chance of backward incompatible
    changes in the future


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 6.5-1
changelog:
  - Update to Globus Toolkit 5.2.0
  - Drop patches globus-gridftp-server-etc.patch,
    globus-gridftp-server-pathmax.patch and globus-gridftp-server-usr.patch
    (fixed upstream)


author: Orion Poplawski <orion@cora.nwra.com> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - Drop all stsci sources and patches, dropped from upstream
  - Drop gcc and py27 patches fixed upstream
  - Add %check section to run tests


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines. 
  - Changed buildrequires fftw version 3  from fftw2


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Jon Ciesla <limburgher@gmail.com> - 0.6.0-5
changelog:
  - Removed more macros.
  - Enabled parallel build, then re-disabled, unreliable.
  - Fixed server file ownership.


author: Jon Ciesla <limburgher@gmail.com> - 0.6.0-4
changelog:
  - Drop nexuiz name completely.
  - Added jpeg BRs, neatened BRs.
  - De-macroized many commands.
  - Dropped dektop vendor tag.
  - Preserved timestamps.


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-3
changelog:
  - Added "%global pear_metadir" and usage in %install
  - Changed RPM_BUILD_ROOT to %{buildroot}
  - Changed name of patch from "php-symfony2-Filesystem.tests.bootstrap.patch" to
    "%{name}-tests-bootstrap.patch"


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-2
changelog:
  - Added php-posix require
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)


author: Radek Novacek <rnovacek@redhat.com> 0.0.19-1
changelog:
  - Version 0.0.19
  - Add LogicalFile provider
  - Require konkretcmpi >= 0.9.0-2
  - Install openlmi-doc-class2* scripts


author: Radek Novacek <rnovacek@redhat.com> 0.0.18-2
changelog:
  - Add upstream patch with improvements of OpenLMIMacros.cmake
  - Add requirement for cim-server also to pre, preun and post


author: Radek Novacek <rnovacek@redhat.com> - 0.0.10-1
changelog:
  - Package rename to openlmi-providers (instead of cura-providers)
  - helper scripts moved from usr/share to proper location
  - Version 0.0.10


author: Hans de Goede <hdegoede@redhat.com> - 0.4.2-3
changelog:
  - Drop buildroot and defattr boilerplate (no longer needed with recent rpm)
  - Use system FlightCrew and XercesExtensions
  - Drop support for building for F-15, having a buildin xerces-c with a shared
    system XercesExtensions is asking for trouble


author: Petr Šplíchal <psplicha@redhat.com> 0.9-0
changelog:
  - New function unlisted() for conversion from human readable list
  - Clean up the cache before testing caching
  - Fix test plan initialization by type name
  - Rename test case components container to CaseComponents
  - Implemented TestPlan.children property [BZ#863226]
  - Allow to select cases when creating a new run [BZ#863480]
  - Invalid category should raise Nitrate exception [BZ#862523]
  - Implement PlanType using XMLRPC instead of hard coded values [BZ#841299]
  - Cleanup of log, cache and color funtions
  - Use unicode for logging where necessary [BZ#865033]
  - Use unicode for logging in _setter() [BZ#865033]
  - Sane unicode representation for user with no name [BZ#821629]
  - Support for system-wide config in /etc/nitrate.conf [BZ#844363]
  - Remove *.pyc files as well when cleaning
  - Move global variables out of the functions
  - Move utils tests into a separate class
  - Document how to get a short Nitrate summary [BZ#883798]
  - Push files to the production web only when in the master branch
  - New TestCase reference link field [BZ#843382]
  - Forgotten 'notes' in the list of test case attributes
  - Don't forget to include errata id when creating a new test run
  - Fix test run errata update, improve the self test
  - Added errata field in class TestRun
  - Suggest https in the minimal config example
  - Test case automation flags cleanup
  - Empty script or arguments to be handled same as None
  - Smarter implementation of the listed() function


author: Petr Šplíchal <psplicha@redhat.com> - 0.8-0
changelog:
  - New method clear() for cleaning containers
  - Component and Components class implementation
  - Improved object initialization and id check


author: Dan Walsh <dwalsh@redhat.com> - 3.3.7-24
changelog:
  - Revert setools current patch

  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Use selinux_current_policy_path to read by default policy


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Mark McKinstry <mmckinst@nexcess.net> 9.8d-3
changelog:
  - symlink lxvile and uxvile to xvile manpage
  - add emtpy vendor tag to desktop-file-install to make EPEL happy
  - add some conditionals so it will build on EPEL 4


author: Mark McKinstry <mmckinst@nexcess.net> 9.8d-2
changelog:
  - include xvile.desktop
  - include verison for vile-common requirements
  - replace icon with xpm version


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: - Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>
changelog:
  - 0.20090324-4
  - Adding _smp_mflags for libdwarf build
  - Move CFLAGS override from configure to make


author: - Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>
changelog:
  - 0.20090324-2
  - Drop the C implementation of dwarfdump. (dwarfdump1)
  - Since the doc package is small, we combined the contents into the devel package.
  - Fix the version string.
  - Drop the static library.
  - Add release number to "Requires".
  - Fix licensing (v2 instead of v2+)
  - Change linking for libdwarf.so and libdwarf.so.0


author: Robin Lee <cheeselee@fedoraproject.org> - 0.4.1-2
changelog:
  - Include an upstreamed qmake configuration patch
  - Fix myspell path
  - Install the manual to path specified upstream


author: Robin Lee <cheeselee@fedoraproject.org> - 0.4.1-1
changelog:
  - Update to 0.4.1
  - Obsolete texworks-0.4.0-64bit.patch, since default qmake configuration works
    with PPC64 now
  - BR: dbus-devel removed


author: Robin Lee <robinlee.sysu@gmail.com> - 0.2.3-3
changelog:
  - Move to menu category 'Office'
  - License tag revised to 'GPLv2+'
  - Initial import to Fedora repositories


author: Robin Lee <robinlee.sysu@gmail.com> - 0.2.3-2
changelog:
  - Fix some strange characters in README
  - Patch TeXworks.pro to use qmake mechanism to install files and fix DSO linking
    problem


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-2
changelog:
  - Ensure tmpfile directories created in %files section.
  - Resolve tmpfile create/teardown race conditions.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-1
changelog:
  - Update to latest PCP sources.
  - Resolve tmpfile security flaws: CVE-2012-5530
  - Introduces new "pcp" user account for all daemons to use.


author: Nathan Scott <nathans@redhat.com> - 3.6.9-1
changelog:
  - Update to latest PCP sources.
  - Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
  - Fix sar2pcp uninitialised perl variable warning (BZ 859117)
  - Fix pcp.py and pmcollectl with older python versions (BZ 852234)


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.6-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Introduces new python-pcp and pcp-testsuite sub-packages.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.5-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Fix security flaws: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 (BZ 848629)


author: Mark Goodwin - 3.6.0-1
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -march=armv7-a -mfpu=vfpv3-d16  -mfloat-abi=hard}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -march=armv7-a -mfpu=vfpv3-d16  -mfloat-abi=hard}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -march=armv7-a -mfpu=vfpv3-d16  -mfloat-abi=hard -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    ./configure --build=armv7hl-redhat-linux-gnu --host=armv7hl-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro for correct libdir logic
  - update to latest PCP sources


author: Martin Hicks <mort@sgi.com> - 3.0.1-2
changelog:
  - Remove IB dependencies.  The Infiniband PMDA is being moved to
    a stand-alone package.
  - Move cluster PMDA to a stand-alone package.


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.20110715-3
changelog:
  - Update license tag.
  - Add BR on Python to ensure the Python plugin gets byte-compiled.
  - Add runtime dependency on Python.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.72-1
changelog:
  - Update to 2.72.
  - Patch for mtn plugin has been applied upstream.
  - Encoding of ikiwiki.vim has been changed to utf-8 upstream.
  - Use new W3M_CGI_BIN option in %install.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.70-1
changelog:
  - Update to 2.70.
  - Install and enable the external rst plugin.
  - Stop filtering perl(RPC::XML*) requires.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.50-1
changelog:
  - Update to 2.50.
  - Move ikiwiki-w3m.cgi into a subpackage.
  - Add ikiwiki's own documentation.
  - Remove duplicate requirement perl(File::MimeInfo).
  - Minor cleanups.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24.10-3
changelog:
  - Renamed the source package to mingw-gtk2 (RHBZ #800392)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24.9-1
changelog:
  - Update to 2.24.9
  - Dropped the .la files
  - Dropped the .dll.a files for all modules
  - Fix gmodule linker failure when using the latest pango


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.21.7-1
changelog:
  - Update to 2.21.7
  - Dropped upstreamed WIMP theme patch
  - Moved all gdk-pixbuf bits to a seperate package as upstream has separated it
  - Added BR: mingw32-gdk-pixbuf


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.20.1-2
changelog:
  - Re-enable the WIMP theme now that upstream has provided a fix for it (RHBZ #608911, GNOME BZ #598299)
  - Rebuild against libpng 1.4.3


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.18.3-1
changelog:
  - Update to 2.18.3
  - Drop upstreamed patch (GNOME BZ #597535)
  - Re-enable GDI+ support as it's fixed upstream (GNOME BZ #552678)
  - This release contains a workaround for a rendering bug which got
    introduced during the CSW merge (GNOME BZ #598299)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.11-3
changelog:
  - Use relative paths instead of absolute paths in the gdk-pixbuf.loaders file
  - Added the gtk.immodules file (BZ #522957)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.7-1
changelog:
  - Update to 2.17.7
  - Automatically generate debuginfo subpackage
  - Add --with-libjasper to the ./configure command


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.1-1
changelog:
  - Update to 2.17.1
  - Use %global instead of %define
  - The -static subpackage was missing a Group: declaration
  - Drop upstreamed patch
  - Add BR: mingw32-libtiff
  - Updated the gdk-pixbuf.loaders file for libtiff support


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.15.5-1
changelog:
  - Update to 2.15.5
  - Disable gdiplus support for now because of GNOME BZ#552678
  - Use the ./configure flag --without-libtiff until mingw32-libtiff is packaged
  - Fixed the %defattr line
  - Dropped the .def files as they aren't used anymore after compilation
  - Added -static subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2.15.0-1
changelog:
  - Rebase to Fedora native version 2.15.0.
  - Disable static libraries.
  - Use _smp_mflags.
  - Use find_lang macro.


author: Richard W.M. Jones <rjones@redhat.com> - 2.14.4-1
changelog:
  - New upstream version 2.14.4.
  - Require cairo >= 1.8.0 because of important fixes.
  - Remove a couple of patches which are now upstream.


author: Orion Poplawski <orion@cora.nwra.com> - 0.4.4.1-1
changelog:
  - Update to 0.4.4.1
  - Drop zlib and xpdf patches applied upstream
  - Drop destdir patch, use INSTALL_ROOT
  - Drop fix-includes patch
  - Drop .png suffix from icon in .desktop file


author: Orion Poplawski <orion@cora.nwra.com> - 0.4.3-4
changelog:
  - Add patch from upstream to fix several security issues in xpdf code:
    CVE-2009-1188/CVE-2009-3603, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, 
    CVE-2009-3609


author: Richard W.M. Jones <rjones@redhat.com> - 4.2.7-1
changelog:
  - New upstream version 4.2.7.
  - Fixed source URL.
  - Removed the patch as it is now upstream.
  - Fixed the doc line.


author: Richard W.M. Jones <rjones@redhat.com> - 4.0.1-1
changelog:
  - New upstream release 4.0.1.
  - Patch a build problem in the test suite.
  - ml file should be packaged in the -devel subpackage, not in main.


changelog: - Fixed Bug 567870
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.11.753-2.a9e0e57797c6f4321d5776e1f29bf1e75b11e6a1


changelog: - Newer git version that fix more problems with pulseaudio.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-7.931f5875cdc4ce0ac61a5110f11e962426e53d99


changelog: - Newer git version with more Pulseaudio fixes. Have fun.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-6.0ceaa01c3de75c946ff2e7591e7f69b28ec00409


changelog: - Fixed small spec verion info.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-5.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed broken upgrade paths.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-4.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Updatet to an newer git version because of some pulseaudio fixes.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-3.3793919892e6d61e5fec3abeaaeebc3f2332be13


author: Hans de Goede <hdegoede@redhat.com> - 1.9.563-1.d6e439244ae00a1750f0dc8b249f47efb4967a23git
changelog:
  - Update to 1.9.563 + some fixes from git
  - This fixes:
    - Not having any sound in chromium-bsu 
    - Various openal using programs hanging on exit


changelog: - Fixed version info
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-9.487f0dde7593144ceabd817306500465caf7602agit


changelog: - Fixed bug 517973
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-8.487f0dde7593144ceabd817306500465caf7602agit


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1:3.5.5-3
changelog:
  - Specify the Epoch for Requires/Obsoletes. Not having it in the previous
    commit was breaking the upgrade path.
  - Add missing doc/license files in all packages. This is especially important
    for the two 'compat' packages. Without it, they were empty and as such
    would not be generated, which broke the upgrade path.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1:3.5.5-2
changelog:
  - Split each game and its help into its own subpackage.
    https://bugzilla.redhat.com/show_bug.cgi?id=846274


author: Hans de Goede <hdegoede@redhat.com> - 2.29.4-3
changelog:
  - Change python_sitelib macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Ray Strode <rstrode@redhat.com> - 1:2.22.1.1-4
changelog:
  - Use gtk-missing-image instead of image-missing since a lot of
    icon themes don't have missing-image and gtk-missing-image is
    guaranteed to be available (bug 440686)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 1:2.21.3-2
changelog:
  - Fix rpm --verify complaining about the highscore files once a highscore has
    been added (bz 418991)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 1:2.19.4-3
changelog:
  - Don't build a private copy of gnuchess, instead require gnuchess (bz 215110)
  - Rename / rebrand Gnometris to GnomeFallingBlocks, so that it stays clear of
    the Tetris trademark, and include it (bz 238651)
  - Don't own dirs under /usr/share/icons/hicolor, instead add
    Requires: hicolor-icon-theme
  - Cleanup handling of with_card and with_tali defines using --enable-omitgames


author: Ray Strode <rstrode@redhat.com> - 1:2.15.1-2
changelog:
  - Apply spec file patch from 
    Hooman Mesgary <hooman@farsiweb.info> to conditionallly
    compile out some of the games (bug 192001)


author: Havoc Pennington <hp@redhat.com> 1:2.2.1-1
changelog:
  - 2.2.1
  - remove "applyschemas" patch fixed upstream
  - remove "stonescrash" patch also fixed upstream


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.0.0
  - remove noreplace from the .soundlist files
  - add missing schemas
  - get rid of gnometris again
  - use desktop-file-install


author: Havoc Pennington <hp@redhat.com>
changelog:
  - GNOME 2 version
  - spec file cleanups
  - no devel package
  - don't run auto*, just use the "rm from buildroot" approach to lose xbill


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - run ldconfig in post and postun (#16589)
  - don't put the post and postun scripts in the middle of the files list --
    that tends to break things (oops)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - 1.2.0
  - remove gnometris, xbill from subdirs since we don't install
    them and they cause problems with new C compiler
  - update autoconf stuff
  - remove gturing, add gnotski to the file list


author: Jindrich Novy <jnovy@redhat.com> 2008-4
changelog:
  - require netpbm-progs
  - review fixes (#225980):
    - include documentation
    - set executable bit for makeseg and makemap scripts
    - white-space spec correction
    - move docs and example directory to %doc
    - nuke duplicated stuff


author: Jindrich Novy <jnovy@redhat.com> 2008
changelog:
  - update to latex2html-2008
  - license changed to GPL
  - update japanese support to l2h-2K8-jp20081220
  - update cfgcache.pm
  - fix BR


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
changelog:
  - fix BuildRequires to be rebuilt with mock (#191762)
  - fix spec file scripts.
  - update source files (use tar.gz with the date 20041025 and 2.1b1.6 Japanese patch)


author: Jindrich Novy <jnovy@redhat.com> 2002.2.1-4
changelog:
  - remove '\n' causing that pstoimg generates gray images
    (#161186, #127010), solution from Julius Smith


author: Jindrich Novy <jnovy@redhat.com> 2002.2.1-1
changelog:
  - create backups for patches
  - update Source1
  - BuildArchitectures -> BuildArch
  - remove direct RPM_BUILD_ROOT links from l2hconf.pm
  - fix bad interpreter name path in pstoimg, texexpand
  - define --with-texpath explicitely
  - remove Dos.pm, Mac.pm, OS2.pm, Win32.pm
  - don't require the font directory to be ended with PATH/fonts


author: Christoph Wickert <cwickert@fedoraproject.org> - 0.2.2-6
changelog:
  - Remove obsolete libsexy checks
  - Add patch to avoid flickering
  - Add patch to support image URI locations
  - Make xfce4-notifyd-config show up in xfce4-settings-manager


author: Christoph Wickert <cwickert@fedoraproject.org> - 0.2.1-3
changelog:
  - Fix crash in handle_error. Thanks to Ricky Zhou (#706677)
  - Remove obsolete BuildRequires libglade2-devel


author: Christoph Wickert <cwickert@fedoraproject.org> - 0.1.0-2
changelog:
  - Patch to rename dbus-service file to avoid conflict with notification-daemon
  - Add Debian's patch support the reason arg in libnotify 0.4.5


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.10-3
changelog:
  - Update harmonics data to 20081228
  - Update xtide-get_harmonics-data.sh following harmonics tarball 
    format change


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.2.date20061203
changelog:
  - 2.9 dev 20061203
  - Update desktop files
  - Use scripts in source tarball
  - Drop harmonics data description


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.2.date20061122
changelog:
  - Ensure the hardcorded directories in some scripts can be 
    appropriately changed.
  - Fix some typo in README.fedora


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.14.dev20061027
changelog:
  - xtide-2.9dev20061029, tcd-utils-1.3.11(2005-08-11),
    update patches.
  - Remove -DCOMPAT114 as required by newer tcd-utils
  - Bump somajor of tcd-utils for API change.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.8.dev20061015
changelog:
  - Split WVS data.
  - desktop-file-utils 0.11 change: X-Fedora, Application is no longer
    accepted (will be fixed in rawhide).


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.7.dev20061015
changelog:
  - Drop harmonics data for now.
  - Define WVS_DIR, then rewrite tideEditor-wrapper.sh and wrap xtide
  - Add fedora-specific document
  - Include WVS data


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.4.dev20061015
changelog:
  - Introduce common files package.
  - CFLAGS treatment change.
  - Treak configuration files and their locations.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.3.dev20061015
changelog:
  - Various changes about compilation optflags.
  - Change libtcd soname numbering
  - Sprit xttpd, include scripts
  - tideEditor wrapper script included and desktop files added.
  - use "/sbin/ldconfig -n"
  - Lots of help from Michael Schwendt and Patrice Dumas, thanks!!


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.9-0.1.dev20061015
changelog:
  - Resubmit to Fedora Extras (bug #211626)
  - Split libtcd to another package, require tcd-utils to
    rebuild tcd data.


author: David M. Kaplan <dmk@erizo.ucdavis.edu> 0:2.8-1
changelog:
  - Updated to version 2.8
  - Cleaned up spec file because much of the tricks to get it to work
    are no longer necessary.


author: David M. Kaplan <dmk@erizo.ucdavis.edu> 0:2.6.4-0.fdr.3
changelog:
  - Fixed problem with debuginfo rpm and lex.xml.c.
  - Changed attributes to 644/755 to agree with Fedora specification.


author: Jesse Keating <jkeating@redhat.com> - 0.2.6.3-1
changelog:
  - Update to 0.2.6.3
  - Remove libisofs stuff as it's packaged seperately now.
  - Add a manpage for cdrskin


author: Jesse Keating <jkeating@redhat.com> - 0.2-3.20060823svn
changelog:
  - don't install dupe headers in -devel packages
  - libisofs requires libburn devel for directory ownership


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-1
changelog:
  - Updated to upstream version 2.1.2
  - Updated description
  - PHP minimum version 5.3.3 instead of 5.3.2
  - Require other components ">= 2.1.0" instead of "= %{version}"
  - Added php-json and php-session requires
  - Removed php-ctype require
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)
  - Changed RPM_BUILD_ROOT to %{buildroot}
  - Added %global pear_metadir


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.15-2
changelog:
  - Added php-pear(%{pear_channel}/BrowserKit) require
  - Added php-pear(%{pear_channel}/ClassLoader) require
  - Added php-pear(%{pear_channel}/Config) require
  - Added php-pear(%{pear_channel}/Console) require
  - Added php-pear(%{pear_channel}/DependencyInjection) require
  - Added php-pear(%{pear_channel}/Finder) require


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.14-2
changelog:
  - Removed BuildRoot
  - Changed php require to php-common
  - Added the following requires based on phpci results:
    php-ctype, php-date, php-pcre, php-spl, php-tokenizer
  - Removed %defattr from %files section
  - Removed ownership for directories already owned by required packages


author: Adam Jackson <ajax@redhat.com> 2.4.41-1
changelog:
  - libdrm 2.4.41 plus git.  Done as a git snapshot instead of the released
    2.4.41 since the release tarball is missing man/ entirely. 
  - Pre-F16 changelog trim


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 9.14-1
  - version ugprade
  - drop screen patch (upstream)
  - disable libAfterImage as it is deprecated


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 9.10-2
  - switch back to shift scroll (#667980)
  - open new tab on Ctrl+t
  - build with libev-source on f15+ (#672396)


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 9.09-3
  - re-add frills build option for standard versions
  - bind scrolling actions to crtl+up/down/pgup/pgdown as shift will break the
    tabbing support


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 9.09-2
  - Rework to provide four versions:
  - standard (rxvt-unicode)
  - multi-language support (rxvt-unicode-ml)
  - 256color version (rxvt-unicode-256color)
  - 256color multi-language (rxvt-unicode-256color-ml)


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 9.09-1
  - version upgrade (fixes #581373)
  - allow scrolling with mod+up/down (#510944)
  - fixup desktop file (#617519)
  - spec file cleanups


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 8.4-2
  - fix #368921 (Rxvt.backgroundPixmap needs libAfterImage support BR now)
  - add patch for utempter support


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Joe Orton <jorton@redhat.com> - 1.7.3-2
changelog:
  - add upstream test suite fixes for APR hash change (r1293602, r1293811)
  - use ruby vendorlib directory (#798203)
  - convert svnserve to systemd (#754074)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7.0-2
changelog:
  - Fix apr Conflicts syntax in -libs.
  - Fix obsolete chown syntax in subversion.conf.
  - Fix use of spaces vs tabs in specfile.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.5-3
changelog:
  - Apply svn2cl upstream patch to fix newline issues with libxml2 2.7.4+,
    see http://bugs.debian.org/546990 for details.


author: Joe Orton <jorton@redhat.com> 1.5.6-3
changelog:
  - update to 1.5.6
  - autoload psvn (#238491, Tom Tromey)
  - regenerate swig bindings (#480503)
  - fix build with libtool 2.2 (#469524)


author: Joe Orton <jorton@redhat.com> 1.4.4-4
changelog:
  - trim dependencies from .la files
  - detabify spec file
  - test suite disabled to ease stress on builders


author: Joe Orton <jorton@redhat.com> 1.4.4-3
changelog:
  - fix build with new glibc open()-as-macro
  - build all swig code in %build, not %install
  - BuildRequire perl(Test::More), perl(ExtUtils::MakeMaker)


author: Joe Orton <jorton@redhat.com> 1.4.4-2
changelog:
  - update to 1.4.4
  - add Provides: svn (#245087)
  - fix without-java build (Lennert Buytenhek, #245467)


author: Joe Orton <jorton@redhat.com> 1.4.3-3
changelog:
  - update to 1.4.3 (#228691)
  - remove trailing dot from Summary
  - use current preferred standard BuildRoot
  - add post/postun ldconfig scriptlets for -ruby and -javahl


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Wes Hardaker <wjhns174@hardakers.net> - 1.9-4
changelog:
  - per request, change the default resolv.conf to /etc/dnssec-tools so it's possible to override the internal default, which internally falls back to /etc/resolv.conf


author: Wes Hardaker <wjhns174@hardakers.net> - 1.4.1-1
changelog:
  - Update to upstream 1.4.1 which fixes the random port issue being
    broadcast about every resolver known to man including this one; note
    that DNSSEC itself will actually protect against the attack but
    libval is vulnerable to non-DNSSEC-protected zones without this fix.


author: Wes Hardaker <wjhns174@hardakers.net> - 1.3.1-1
changelog:
  - Update to 1.3.1 to fix:
  - A security bug in parent surrounding trust anchor checking in the
    libval library.
  - Small fixes with donuts
  - Small fixes with the ZoneFile::Fast parser


author: Wes Hardaker <wjhns174@hardakers.net> - 1.2-4
changelog:
  - patch to fix a donuts rule for newer perl-Net::DNS update
  - patch for maketestzone to work around a bug in Net::DNS::RR::DS


author: Wes Hardaker <wjhns174@hardakers.net> - 1.2-2
changelog:
  - fixed missing destdir in validator/Makefile.in
  - add optimize flags to perl build
  - syntatic ordering cleanup of the find argument


author: Wes Hardaker <wjhns174@hardakers.net> - 1.1.1-4
changelog:
  - Fix changelog so it doesn't have a macro in the documentation
  - Added a dnsval.conf starting file.
  - Remove include subdir wildcard expansion since the entire directory
    is owned.


author: Wes Hardaker <wjhns174@hardakers.net> - 1.1.1-2
changelog:
  - Pointed Source0 at the sourceforge server instead of a local file
  - Set License to BSD-like
  - Took ownership of includedir/validator


author: Wes Hardaker <wjhns174@hardakers.net> - 1.1-2
changelog:
  - cleaned up spec file further for future submission to Fedora Extras
  - made -libs-devel depend on exact version of -libs
  - remove installed .la files
  - added patch to use proper DESTDIR passing in the top Makefile


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
  - 3.2.1 (2013-05-11)
  - ==================
  -
  - Features added
  - --------------
  -
  - * The methods ``apply_templates()`` and ``process_children()`` of XSLT
  -   extension elements have gained two new boolean options ``elements_only``
  -   and ``remove_blank_text`` that discard either all strings or
  -   whitespace-only strings from the result list.
  -
  - Bugs fixed
  - ----------
  -
  - * When moving Elements to another tree, the namespace cleanup mechanism
  -   no longer drops namespace prefixes from attributes for which it finds
  -   a default namespace declaration, to prevent them from appearing as
  -   unnamespaced attributes after serialisation.
  -
  - * Returning non-type objects from a custom class lookup method could lead
  -   to a crash.
  -
  - * Instantiating and using subtypes of Comments and ProcessingInstructions
  -   crashed.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
  - 3.2.0 (2013-04-28)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#690319: Leading whitespace could change the behaviour of the string
  -   parsing functions in ``lxml.html``.
  -
  - * LP#599318: The string parsing functions in ``lxml.html`` are more robust
  -   in the face of uncommon HTML content like framesets or missing body tags.
  -   Patch by Stefan Seelmann.
  -
  - * LP#712941: I/O errors while trying to access files with paths that
  -   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
  -   of properly reporting the ``IOError``.
  -
  - * LP#673205: Parsing from in-memory strings disabled network access in the
  -   default parser and made subsequent attempts to parse from a URL fail.
  -
  - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
  -   of overwriting the current value.
  -
  - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  -   allowed by the user provided whitelist.  Patch by Christine Koppelt.
  -
  - 3.1.2 (2013-04-12)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1136509: Passing attributes through the namespace-unaware API of
  -   the sax bridge (i.e. the ``handler.startElement()`` method) failed
  -   with a ``TypeError``.  Patch by Mike Bayer.
  -
  - * LP#1123074: Fix serialisation error in XSLT output when converting
  -   the result tree to a Unicode string.
  -
  - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
  -   by properly exported API function ``xmlBufUse()``.
  -
  - 3.1.1 (2013-03-29)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
  -   an AttributeError in Py3.
  -
  - * Illegal memory access during cleanup in incremental xmlfile writer.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``lxml.etree._BaseParser`` was removed
  -   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
  - 3.1.0 (2013-02-10)
  - ==================
  -
  - Features added
  - --------------
  -
  - * GH#89: lxml.html.clean allows overriding the set of attributes that it
  -   considers 'safe'.  Patch by Francis Devereux.
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
  -   a copy of the attributes as a plain Python dict.
  -
  - * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
  -   always used the first namespace mapping that was provided for each
  -   path expression instead of using the one that was actually passed
  -   in for the current run.
  -
  - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  -   without threading support.  Patch by Ulrich Seidl.
  -
  - Other changes
  - -------------
  -
  -
  - 3.1beta1 (2012-12-21)
  - =====================
  -
  - Features added
  - --------------
  -
  - * New build-time option ``--with-unicode-strings`` for Python 2 that
  -   makes the API always return Unicode strings for names and text
  -   instead of byte strings for plain ASCII content.
  -
  - * New incremental XML file writing API ``etree.xmlfile()``.
  -
  - * E factory in lxml.objectify is callable to simplify the creation of
  -   tags with non-identifier names without having to resort to getattr().
  -
  - Bugs fixed
  - ----------
  -
  - * When starting from a non-namespaced element in lxml.objectify, searching
  -   for a child without explicitly specifying a namespace incorrectly found
  -   namespaced elements with the requested local name, instead of restricting
  -   the search to non-namespaced children.
  -
  - * GH#85: Deprecation warnings were fixed for Python 3.x.
  -
  - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
  -
  - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``_ObjectifyElementMakerCaller`` was
  -   removed from the module API of lxml.objectify.
  -
  - * LP#1075622: lxml.builder is faster for adding text to elements with
  -   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
  - 3.0.1 (2012-10-14)
  - Bugs fixed
  -
  -  * LP#1065924: Element proxies could disappear during garbage collection
  -    in PyPy without proper cleanup.
  -  * GH#71: Failure to work with libxml2 2.6.x.
  -  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
  - 3.0 (2012-10-08)
  - ================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * End-of-file handling was incorrect in iterparse() when reading from
  -   a low-level C file stream and failed in libxml2 2.9.0 due to its
  -   improved consistency checks.
  -
  - Other changes
  - -------------
  -
  - * The build no longer uses Cython by default unless the generated C files
  -   are missing.  To use Cython, pass the option "--with-cython".  To ignore
  -   the fatal build error when Cython is required but not available (e.g. to
  -   run special setup.py commands that do not actually run a build), pass
  -   "--without-cython".
  -
  -
  - 3.0beta1 (2012-09-26)
  - =====================
  -
  - Features added
  - --------------
  -
  - * Python level access to (optional) libxml2 memory debugging features
  -   to simplify debugging of memory leaks etc.
  -
  - Bugs fixed
  - ----------
  -
  - * Fix a memory leak in XPath by switching to Cython 0.17.1.
  -
  - * Some tests were adapted to work with PyPy.
  -
  - Other changes
  - -------------
  -
  - * The code was adapted to work with the upcoming libxml2 2.9.0 release.
  -
  -
  - 3.0alpha2 (2012-08-23)
  - ======================
  -
  - Features added
  - --------------
  -
  - * The .iter() method of elements now accepts tag arguments like "{*}name"
  -   to search for elements with a given local name in any namespace.  With
  -   this addition, all combinations of wildcards now work as expected:
  -   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
  -   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
  -   applies to the .getiterator(), .itersiblings(), .iterancestors(),
  -   .iterdescendants(), .iterchildren() and .itertext() methods,  the
  -   strip_attributes(), strip_elements() and strip_tags() functions as well
  -   as the iterparse() function.
  -
  - * C14N allows specifying the inclusive prefixes to be promoted to
  -   top-level during exclusive serialisation.
  -
  - Bugs fixed
  - ----------
  -
  - * Passing long Unicode strings into the feed() parser interface failed to
  -   read the entire string.
  -
  - Other changes
  - -------------
  -
  -
  - 3.0alpha1 (2012-07-31)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Initial support for building in PyPy (through cpyext).
  -
  - * DTD objects gained an API that allows read access to their
  -   declarations.
  -
  - * xpathgrep.py gained support for parsing line-by-line (e.g.
  -   from grep output) and for surrounding the output with a new root
  -   tag.
  -
  - * E-factory in lxml.builder accepts subtypes of known data
  -   types (such as string subtypes) when building elements around them.
  -
  - * Tree iteration and iterparse() with a selective tag
  -   argument supports passing a set of tags.  Tree nodes will be
  -   returned by the iterators if they match any of the tags.
  -
  - Bugs fixed
  - ----------
  -
  - * The .find*() methods in lxml.objectify no longer use XPath
  -   internally, which makes them faster in many cases (especially when
  -   short circuiting after a single or couple of elements) and fixes
  -   some behavioural differences compared to lxml.etree.  Note that
  -   this means that they no longer support arbitrary XPath expressions
  -   but only the subset that the ElementPath language supports.
  -   The previous implementation was also redundant with the normal
  -   XPath support, which can be used as a replacement.
  -
  - * el.find('*') could accidentally return a comment or processing
  -   instruction that happened to be in the wrong spot.  (Same for the
  -   other .find*() methods.)
  -
  - * The error logging is less intrusive and avoids a global setup where
  -   possible.
  -
  - * Fixed undefined names in html5lib parser.
  -
  - * xpathgrep.py did not work in Python 3.
  -
  - * Element.attrib.update() did not accept an attrib of
  -   another Element as parameter.
  -
  - * For subtypes of ElementBase that make the .text or .tail
  -   properties immutable (as in objectify, for example), inserting text
  -   when creating Elements through the E-Factory feature of the class
  -   constructor would fail with an exception, stating that the text
  -   cannot be modified.
  -
  - Other changes
  - --------------
  -
  - * The code base was overhauled to properly use 'const' where the API
  -   of libxml2 and libxslt requests it.  This also has an impact on the
  -   public C-API of lxml itself, as defined in etreepublic.pxd, as
  -   well as the provided declarations in the lxml/includes/ directory.
  -   Code that uses these declarations may have to be adapted.  On the
  -   plus side, this fixes several C compiler warnings, also for user
  -   code, thus making it easier to spot real problems again.
  -
  - * The functionality of "lxml.cssselect" was moved into a separate PyPI
  -   package called "cssselect".  To continue using it, you must install
  -   that package separately.  The "lxml.cssselect" module is still
  -   available and provides the same interface, provided the "cssselect"
  -   package can be imported at runtime.
  -
  - * Element attributes passed in as an attrib dict or as keyword
  -   arguments are now sorted by (namespaced) name before being created
  -   to make their order predictable for serialisation and iteration.
  -   Note that adding or deleting attributes afterwards does not take
  -   that order into account, i.e. setting a new attribute appends it
  -   after the existing ones.
  -
  - * Several classes that are for internal use only were removed
  -   from the lxml.etree module dict:
  -   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  -   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  -   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  -   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  -   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  -   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  -   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  -   _ParserSchemaValidationContext, _XPathContext,
  -   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
  -
  - * Several internal classes can no longer be inherited from:
  -   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  -   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  -   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  -   _XPathContext, _XSLTResolverContext, _XSLTContext,
  -   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
  - Bugs fixed
  -
  -  * Crash when merging text nodes in element.remove().
  -  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.4-1
changelog:
  - Bugs fixed
  -
  -  * Crash when building an nsmap (Element property) with empty namespace
  -    URIs.
  -  * Crash due to race condition when errors (or user messages) occur during
  -    threaded XSLT processing (or compilation).
  -  * XSLT stylesheet compilation could ignore compilation errors.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.3-1
changelog:
  - 2.3.3 (2012-01-04)
  - Features added
  -
  -  * lxml.html.tostring() gained new serialisation options with_tail and
  -    doctype.
  -
  - Bugs fixed
  -
  -  * Fixed a crash when using iterparse() for HTML parsing and requesting
  -    start events.
  -  * Fixed parsing of more selectors in cssselect. Whitespace before pseudo-
  -    elements and pseudo-classes is significant as it is a descendant
  -    combinator. "E :pseudo" should parse the same as "E *:pseudo", not
  -    "E:pseudo". Patch by Simon Sapin.
  -  * lxml.html.diff no longer raises an exception when hitting 'img' tags
  -    without 'src' attribute.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.2-1
changelog:
  - 2.3.2 (2011-11-11)
  - Features added
  -
  -   * lxml.objectify.deannotate() has a new boolean option
  -     cleanup_namespaces to remove the objectify namespace declarations
  -     (and generally clean up the namespace declarations) after removing
  -     the type annotations.
  -   * lxml.objectify gained its own SubElement() function as a copy of
  -     etree.SubElement to avoid an otherwise redundant import of
  -     lxml.etree on the user side.
  -
  - Bugs fixed
  -
  -    * Fixed the "descendant" bug in cssselect a second time (after a first
  -      fix in lxml 2.3.1). The previous change resulted in a serious
  -      performance regression for the XPath based evaluation of the
  -      translated expression. Note that this breaks the usage of some
  -      of the generated XPath expressions as XSLT location paths that
  -      previously worked in 2.3.1.
  -    * Fixed parsing of some selectors in cssselect. Whitespace after
  -      combinators ">", "+" and "~" is now correctly ignored. Previously
  -      it was parsed as a descendant combinator. For example, "div> .foo"
  -      was parsed the same as "div>* .foo" instead of "div>.foo". Patch by
  -      Simon Sapin.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.1-1
changelog:
  - Features added
  - --------------
  -
  - * New option kill_tags in lxml.html.clean to remove specific
  -   tags and their content (i.e. their whole subtree).
  -
  - * pi.get() and pi.attrib on processing instructions to parse
  -   pseudo-attributes from the text content of processing instructions.
  -
  - * lxml.get_include() returns a list of include paths that can be
  -   used to compile external C code against lxml.etree.  This is
  -   specifically required for statically linked lxml builds when code
  -   needs to compile against the exact same header file versions as lxml
  -   itself.
  -
  - * Resolver.resolve_file() takes an additional option
  -   close_file that configures if the file(-like) object will be
  -   closed after reading or not.  By default, the file will be closed,
  -   as the user is not expected to keep a reference to it.
  -
  - Bugs fixed
  - ----------
  -
  - * HTML cleaning didn't remove 'data:' links.
  -
  - * The html5lib parser integration now uses the 'official'
  -   implementation in html5lib itself, which makes it work with newer
  -   releases of the library.
  -
  - * In lxml.sax, endElementNS() could incorrectly reject a plain
  -   tag name when the corresponding start event inferred the same plain
  -   tag name to be in the default namespace.
  -
  - * When an open file-like object is passed into parse() or
  -   iterparse(), the parser will no longer close it after use.  This
  -   reverts a change in lxml 2.3 where all files would be closed.  It is
  -   the users responsibility to properly close the file(-like) object,
  -   also in error cases.
  -
  - * Assertion error in lxml.html.cleaner when discarding top-level elements.
  -
  - * In lxml.cssselect, use the xpath 'A//B' (short for
  -   'A/descendant-or-self::node()/B') instead of 'A/descendant::B' for the
  -   css descendant selector ('A B'). This makes a few edge cases to be
  -   consistent with the selector behavior in WebKit and Firefox, and makes
  -   more css expressions valid location paths (for use in xsl:template
  -   match).
  -
  - * In lxml.html, non-selected <option> tags no longer show up in the
  -   collected form values.
  -
  - * Adding/removing <option> values to/from a multiple select form
  -   field properly selects them and unselects them.
  -
  - Other changes
  - --------------
  -
  - * Static builds can specify the download directory with the
  -   --download-dir option.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3-1
changelog:
  - 2.3 (2011-02-06)
  - ================
  -
  - Features added
  - --------------
  -
  - * When looking for children, ``lxml.objectify`` takes '{}tag' as
  -   meaning an empty namespace, as opposed to the parent namespace.
  -
  - Bugs fixed
  - ----------
  -
  - * When finished reading from a file-like object, the parser
  -   immediately calls its ``.close()`` method.
  -
  - * When finished parsing, ``iterparse()`` immediately closes the input
  -   file.
  -
  - * Work-around for libxml2 bug that can leave the HTML parser in a
  -   non-functional state after parsing a severly broken document (fixed
  -   in libxml2 2.7.8).
  -
  - * ``marque`` tag in HTML cleanup code is correctly named ``marquee``.
  -
  - Other changes
  - --------------
  -
  - * Some public functions in the Cython-level C-API have more explicit
  -   return types.
  -
  - 2.3beta1 (2010-09-06)
  - =====================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * Crash in newer libxml2 versions when moving elements between
  -   documents that had attributes on replaced XInclude nodes.
  -
  - * ``XMLID()`` function was missing the optional ``parser`` and
  -   ``base_url`` parameters.
  -
  - * Searching for wildcard tags in ``iterparse()`` was broken in Py3.
  -
  - * ``lxml.html.open_in_browser()`` didn't work in Python 3 due to the
  -   use of os.tempnam.  It now takes an optional 'encoding' parameter.
  -
  - Other changes
  - --------------
  -
  - 2.3alpha2 (2010-07-24)
  - ======================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * Crash in XSLT when generating text-only result documents with a
  -   stylesheet created in a different thread.
  -
  - Other changes
  - --------------
  -
  - * ``repr()`` of Element objects shows the hex ID with leading 0x
  -   (following ElementTree 1.3).
  -
  - 2.3alpha1 (2010-06-19)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Keyword argument ``namespaces`` in ``lxml.cssselect.CSSSelector()``
  -   to pass a prefix-to-namespace mapping for the selector.
  -
  - * New function ``lxml.etree.register_namespace(prefix, uri)`` that
  -   globally registers a namespace prefix for a namespace that newly
  -   created Elements in that namespace will use automatically.  Follows
  -   ElementTree 1.3.
  -
  - * Support 'unicode' string name as encoding parameter in
  -   ``tostring()``, following ElementTree 1.3.
  -
  - * Support 'c14n' serialisation method in ``ElementTree.write()`` and
  -   ``tostring()``, following ElementTree 1.3.
  -
  - * The ElementPath expression syntax (``el.find*()``) was extended to
  -   match the upcoming ElementTree 1.3 that will ship in the standard
  -   library of Python 3.2/2.7.  This includes extended support for
  -   predicates as well as namespace prefixes (as known from XPath).
  -
  - * During regular XPath evaluation, various ESXLT functions are
  -   available within their namespace when using libxslt 1.1.26 or later.
  -
  - * Support passing a readily configured logger instance into
  -   ``PyErrorLog``, instead of a logger name.
  -
  - * On serialisation, the new ``doctype`` parameter can be used to
  -   override the DOCTYPE (internal subset) of the document.
  -
  - * New parameter ``output_parent`` to ``XSLTExtension.apply_templates()``
  -   to append the resulting content directly to an output element.
  -
  - * ``XSLTExtension.process_children()`` to process the content of the
  -   XSLT extension element itself.
  -
  - * ISO-Schematron support based on the de-facto Schematron reference
  -   'skeleton implementation'.
  -
  - * XSLT objects now take XPath object as ``__call__`` stylesheet
  -   parameters.
  -
  - * Enable path caching in ElementPath (``el.find*()``) to avoid parsing
  -   overhead.
  -
  - * Setting the value of a namespaced attribute always uses a prefixed
  -   namespace instead of the default namespace even if both declare the
  -   same namespace URI.  This avoids serialisation problems when an
  -   attribute from a default namespace is set on an element from a
  -   different namespace.
  -
  - * XSLT extension elements: support for XSLT context nodes other than
  -   elements: document root, comments, processing instructions.
  -
  - * Support for strings (in addition to Elements) in node-sets returned
  -   by extension functions.
  -
  - * Forms that lack an ``action`` attribute default to the base URL of
  -   the document on submit.
  -
  - * XPath attribute result strings have an ``attrname`` property.
  -
  - * Namespace URIs get validated against RFC 3986 at the API level
  -   (required by the XML namespace specification).
  -
  - * Target parsers show their target object in the ``.target`` property
  -   (compatible with ElementTree).
  -
  - Bugs fixed
  - ----------
  -
  - * API is hardened against invalid proxy instances to prevent crashes
  -   due to incorrectly instantiated Element instances.
  -
  - * Prevent crash when instantiating ``CommentBase`` and friends.
  -
  - * Export ElementTree compatible XML parser class as
  -   ``XMLTreeBuilder``, as it is called in ET 1.2.
  -
  - * ObjectifiedDataElements in lxml.objectify were not hashable.  They
  -   now use the hash value of the underlying Python value (string,
  -   number, etc.) to which they compare equal.
  -
  - * Parsing broken fragments in lxml.html could fail if the fragment
  -   contained an orphaned closing '</div>' tag.
  -
  - * Using XSLT extension elements around the root of the output document
  -   crashed.
  -
  - * ``lxml.cssselect`` did not distinguish between ``x[attr="val"]`` and
  -   ``x [attr="val"]`` (with a space).  The latter now matches the
  -   attribute independent of the element.
  -
  - * Rewriting multiple links inside of HTML text content could end up
  -   replacing unrelated content as replacements could impact the
  -   reported position of subsequent matches.  Modifications are now
  -   simplified by letting the ``iterlinks()`` generator in ``lxml.html``
  -   return links in reversed order if they appear inside the same text
  -   node.  Thus, replacements and link-internal modifications no longer
  -   change the position of links reported afterwards.
  -
  - * The ``.value`` attribute of ``textarea`` elements in lxml.html did
  -   not represent the complete raw value (including child tags etc.). It
  -   now serialises the complete content on read and replaces the
  -   complete content by a string on write.
  -
  - * Target parser didn't call ``.close()`` on the target object if
  -   parsing failed.  Now it is guaranteed that ``.close()`` will be
  -   called after parsing, regardless of the outcome.
  -
  - Other changes
  - -------------
  -
  - * Official support for Python 3.1.2 and later.
  -
  - * Static MS Windows builds can now download their dependencies
  -   themselves.
  -
  - * ``Element.attrib`` no longer uses a cyclic reference back to its
  -   Element object.  It therefore no longer requires the garbage
  -   collector to clean up.
  -
  - * Static builds include libiconv, in addition to libxml2 and libxslt.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.8-1
changelog:
  - 2.2.8 (2010-09-02)
  - Bugs fixed
  -
  -     * Crash in newer libxml2 versions when moving elements between
  -       documents that had attributes on replaced XInclude nodes.
  -     * Import fix for urljoin in Python 3.1+.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.7-3
changelog:
  - Don't byte-compile files during install because setup.py doesn't
    properly byte compile for Python version 3.2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.7-1
changelog:
  - 2.2.7 (2010-07-24)
  - Bugs fixed
  -
  -     * Crash in XSLT when generating text-only result documents with a stylesheet created in a different thread.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.6-1
changelog:
  - 2.2.6 (2010-03-02)
  -
  - Bugs fixed
  -
  -    * Fixed several Python 3 regressions by building with Cython 0.11.3.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.5-1
changelog:
  - 2.2.5 (2010-02-28)
  -
  - Features added
  -
  -    * Support for running XSLT extension elements on the input root node
  -      (e.g. in a template matching on "/").
  -
  - Bugs fixed
  -
  -    * Crash in XPath evaluation when reading smart strings from a document
  -      other than the original context document.
  -    * Support recent versions of html5lib by not requiring its XHTMLParser
  -      in htmlparser.py anymore.
  -    * Manually instantiating the custom element classes in lxml.objectify
  -      could crash.
  -    * Invalid XML text characters were not rejected by the API when they
  -      appeared in unicode strings directly after non-ASCII characters.
  -    * lxml.html.open_http_urllib() did not work in Python 3.
  -    * The functions strip_tags() and strip_elements() in lxml.etree did
  -      not remove all occurrences of a tag in all cases.
  -    * Crash in XSLT extension elements when the XSLT context node is not
  -      an element.


author: Thomas Spura <tomspur@fedoraproject.org> - 2.2.4-2
changelog:
  - update to current python3 guidelines
  - be more explicit in %files
  - use %global and not %define
  - create docs subpackage
  - add stripping 3-byte Byte Order Marker from src/lxml/tests/test_errors.py
    to get 2to3 to work (dmalcolm)
  - fixes FTBFS (#564674)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.3-1
changelog:
  - 2.2.3 (2009-10-30)
  - Bugs fixed
  -
  -    * The resolve_entities option did not work in the incremental feed
  -      parser.
  -    * Looking up and deleting attributes without a namespace could hit a
  -      namespaced attribute of the same name instead.
  -    * Late errors during calls to SubElement() (e.g. attribute related
  -      ones) could leave a partially initialised element in the tree.
  -    * Modifying trees that contain parsed entity references could result
  -      in an infinite loop.
  -    * ObjectifiedElement.__setattr__ created an empty-string child element
  -      when the attribute value was rejected as a non-unicode/non-ascii
  -      string
  -    * Syntax errors in lxml.cssselect could result in misleading error
  -      messages.
  -    * Invalid syntax in CSS expressions could lead to an infinite loop in
  -      the parser of lxml.cssselect.
  -    * CSS special character escapes were not properly handled in
  -      lxml.cssselect.
  -    * CSS Unicode escapes were not properly decoded in lxml.cssselect.
  -    * Select options in HTML forms that had no explicit value attribute
  -      were not handled correctly. The HTML standard dictates that their
  -      value is defined by their text content. This is now supported by
  -      lxml.html.
  -    * XPath raised a TypeError when finding CDATA sections. This is now
  -      fully supported.
  -    * Calling help(lxml.objectify) didn't work at the prompt.
  -    * The ElementMaker in lxml.objectify no longer defines the default
  -      namespaces when annotation is disabled.
  -    * Feed parser failed to honour the 'recover' option on parse errors.
  -    * Diverting the error logging to Python's logging system was broken.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.2-1
changelog:
  - 2.2.2 (2009-06-21)
  - Features added
  -
  -    * New helper functions strip_attributes(), strip_elements(),
  -      strip_tags() in lxml.etree to remove attributes/subtrees/tags
  -      from a subtree.
  -
  - Bugs fixed
  -
  -    * Namespace cleanup on subtree insertions could result in missing
  -      namespace declarations (and potentially crashes) if the element
  -      defining a namespace was deleted and the namespace was not used
  -      by the top element of the inserted subtree but only in deeper
  -      subtrees.
  -    * Raising an exception from a parser target callback didn't always
  -      terminate the parser.
  -    * Only {true, false, 1, 0} are accepted as the lexical representation
  -      for BoolElement ({True, False, T, F, t, f} not any more), restoring
  -      lxml <= 2.0 behaviour.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.1-1
changelog:
  - 2.2.1 (2009-06-02)
  - Features added
  -
  -    * Injecting default attributes into a document during XML Schema
  -      validation (also at parse time).
  -    * Pass huge_tree parser option to disable parser security restrictions
  -      imposed by libxml2 2.7.
  -
  - Bugs fixed
  -
  -    * The script for statically building libxml2 and libxslt didn't work
  -      in Py3.
  -    * XMLSchema() also passes invalid schema documents on to libxml2 for
  -      parsing (which could lead to a crash before release 2.6.24).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-1
changelog:
  - 2.2 (2009-03-21)
  - Features added
  -
  -    * Support for standalone flag in XML declaration through
  -      tree.docinfo.standalone and by passing standalone=True/False on
  -      serialisation.
  -
  - Bugs fixed
  -
  -    * Crash when parsing an XML Schema with external imports from a
  -      filename.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.8.beta4
changelog:
  - 2.2beta4 (2009-02-27)
  - Features added
  -
  -    * Support strings and instantiable Element classes as child arguments
  -      to the constructor of custom Element classes.
  -    * GZip compression support for serialisation to files and file-like
  -      objects.
  -
  - Bugs fixed
  -
  -    * Deep-copying an ElementTree copied neither its sibling PIs and
  -      comments nor its internal/external DTD subsets.
  -    * Soupparser failed on broken attributes without values.
  -    * Crash in XSLT when overwriting an already defined attribute using
  -      xsl:attribute.
  -    * Crash bug in exception handling code under Python 3. This was due to
  -      a problem in Cython, not lxml itself.
  -    * lxml.html.FormElement._name() failed for non top-level forms.
  -    * TAG special attribute in constructor of custom Element classes was
  -      evaluated incorrectly.
  -
  - Other changes
  -
  -    * Official support for Python 3.0.1.
  -    * Element.findtext() now returns an empty string instead of None for
  -      Elements without text content.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.6.beta3
changelog:
  - 2.2beta3 (2009-02-17)
  - Features added
  -
  -    * XSLT.strparam() class method to wrap quoted string parameters that
  -     require escaping.
  -
  - Bugs fixed
  -
  -    * Memory leak in XPath evaluators.
  -    * Crash when parsing indented XML in one thread and merging it with
  -      other documents parsed in another thread.
  -    * Setting the base attribute in lxml.objectify from a unicode string
  -      failed.
  -    * Fixes following changes in Python 3.0.1.
  -    * Minor fixes for Python 3.
  -
  - Other changes
  -
  -    * The global error log (which is copied into the exception log) is now
  -      local to a thread, which fixes some race conditions.
  -    * More robust error handling on serialisation.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.5.beta2
changelog:
  - 2.2beta2 (2009-01-25)
  - Bugs fixed
  -
  -    * Potential memory leak on exception handling. This was due to a
  -      problem in Cython, not lxml itself.
  -    * iter_links (and related link-rewriting functions) in lxml.html would
  -      interpret CSS like url("link") incorrectly (treating the quotation
  -      marks as part of the link).
  -    * Failing import on systems that have an io module.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.4.beta1
changelog:
  - 2.2beta1 (2008-12-12)
  - Features added
  -
  -    * Allow lxml.html.diff.htmldiff to accept Element objects,
  -      not just HTML strings.
  -
  - Bugs fixed
  -
  -    * Crash when using an XPath evaluator in multiple threads.
  -    * Fixed missing whitespace before Link:... in lxml.html.diff.
  -
  - Other changes
  -
  -    * Export lxml.html.parse.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.1.alpha1
changelog:
  - 2.2alpha1 (2008-11-23)
  - Features added
  -
  -    * Support for XSLT result tree fragments in XPath/XSLT extension
  -      functions.
  -    * QName objects have new properties namespace and localname.
  -    * New options for exclusive C14N and C14N without comments.
  -    * Instantiating a custom Element classes creates a new Element.
  -
  - Bugs fixed
  -
  -    * XSLT didn't inherit the parse options of the input document.
  -    * 0-bytes could slip through the API when used inside of Unicode
  -      strings.
  -    * With lxml.html.clean.autolink, links with balanced parenthesis, that
  -      end in a parenthesis, will be linked in their entirety (typical with
  -      Wikipedia links).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.1.3-1
changelog:
  - 2.1.3 (2008-11-17)
  - Bugs fixed
  -
  -    * Ref-count leaks when lxml enters a try-except statement while an
  -      outside exception lives in sys.exc_*(). This was due to a problem
  -      in Cython, not lxml itself.
  -    * Parser Unicode decoding errors could get swallowed by other
  -      exceptions.
  -    * Name/import errors in some Python modules.
  -    * Internal DTD subsets that did not specify a system or public ID
  -      were not serialised and did not appear in the docinfo property
  -      of ElementTrees.
  -    * Fix a pre-Py3k warning when parsing from a gzip file in Py2.6.
  -    * Test suite fixes for libxml2 2.7.
  -    * Resolver.resolve_string() did not work for non-ASCII byte strings.
  -    * Resolver.resolve_file() was broken.
  -    * Overriding the parser encoding didn't work for many encodings.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.1.2-1
changelog:
  - 2.1.2 (2008-09-05)
  - Features added
  -
  -    * lxml.etree now tries to find the absolute path name of files when
  -      parsing from a file-like object. This helps custom resolvers when
  -      resolving relative URLs, as lixbml2 can prepend them with the path of
  -      the source document.
  -
  - Bugs fixed
  -
  -    * Memory problem when passing documents between threads.
  -    * Target parser did not honour the recover option and raised an exception
  -      instead of calling .close() on the target.


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 1.14.2-1
changelog:
  - New upstream release
  - Disable the check since it trips on a missing suggested package
  - Change license tag to GPLv3 to reflect an upstream license change


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 1.10-1
changelog:
  - Updated to new upstream version - contains consistent licensing information
  - Reverted License tag from GPLv2 to GPLv2+ to reflect the new information


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.76-1
changelog:
  - upstream release 2.76
  - https://trac.transmissionbt.com/wiki/Changes#version-2.76
  - use rpm ld_flags for qt build. resolves rhbz#868502
  - use upstream transmission-qt.desktop file. resolves rhbz#799673
  - remove -T parameter from the systemd file. resolves rhz#823220


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.50-3
changelog:
  - apply upstream bug fix patch from https://trac.transmissionbt.com/changeset/13300?format=diff&new=13300
  - fixes https://trac.transmissionbt.com/ticket/4894


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.32-1
changelog:
  - Upstream 2.32 release
  - https://trac.transmissionbt.com/wiki/Changes#version-2.32
  - Drop defattr throughout the spec since recent RPM makes it redundant


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.31-1
changelog:
  - Upstream 2.31 release
  - https://trac.transmissionbt.com/wiki/Changes#version-2.31
  - Fix source url


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.30-0.b1
changelog:
  - Upstream 2.30 Beta 1 release
  - Enable configure options explicitly
  - Drop source and patch for icons since it is now upstream
  - https://trac.transmissionbt.com/wiki/Changes#version-2.30b1
    * Major changes include the following:
    * µTP, UDP tracker, Multiscrape support
    * Download scarcest pieces first 
    * The "lazy bitfield" feature has been superseded by the "Fast Extension" BEP6 
    * GTK: Register as a magnet link handler in the .desktop file 
    * Web: Peer and Network preferences


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.21-1
changelog:
  - Update to latest upstream release
  - Drop no longer needed libnotify patch
  - https://trac.transmissionbt.com/wiki/Changes


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.13-1
changelog:
  - updated to latest upstream release: https://trac.transmissionbt.com/wiki/Changes
  - fixes #654793
  - update libnotify patch


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.00-1
changelog:
  - https://trac.transmissionbt.com/wiki/Changes?version=57
  - Drop the clean section as it is redundant now


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.92-1
changelog:
  - Some bug fixes
  - http://trac.transmissionbt.com/query?groupdesc=1&group=component&milestone=1.92&order=severity


author: Rex Dieter <rdieter@fedoraproject.org> - 1.91-2
changelog:
  - -common: move icon scriptlets here (where the icons are), update/optimize 
  - -qt : add mime scriptlet


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.90-1
changelog:
  - http://trac.transmissionbt.com/browser/trunk/NEWS#L1
  - Fix initscript to use the config file properly


author: Ankur Sinha <ankursinha@fedoraproject.org> - 1.83-1
changelog:
  - New Release
  - Fix 1.80 announce error that caused uploads and downloads to periodically freeze
  - Fix 1.80 announce timeout error that caused "no response from tracker" message
  - Fix 1.80 "file not found" error message that stopped some torrents
  - Fix 1.82 crash when adding new torrents via their ftp URL
  - Fix 1.80 crash when receiving invalid request messages from peers
  - Fix 1.82 error when updating the blocklist
  - http://trac.transmissionbt.com/wiki/Changes#version-1.83


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-1
changelog:
  - Many major new features including magnet link support, trackerless torrents
  - http://trac.transmissionbt.com/wiki/Changes#version-1.80


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.6.b5
changelog:
  - Add a initscript for transmission daemon. Fixes rhbz#556228
  - Description changes, add group for sub-packages and fix make


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.4.b4
changelog:
  - Build the qt interface as a sub package
  - Build daemon as a separate sub package
  - Translations are for only the gtk sub package
  - Fix obsoletes and add conflicts


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.1.b3
changelog:
  - 1.80 Beta 3
  - Enable sounds via libcanberra
  - http://trac.transmissionbt.com/wiki/Changes#version-1.80b3


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Update compiler options patch to match new upstream release
  - Drop patch for not using bundled libevent. Upstream now has been fixed to use the system copy whenever possible
  - Don't use vendor tag for desktop file. It is not recommended anymore
  - Follow https://fedoraproject.org/wiki/Packaging/Guidelines#All_patches_should_have_an_upstream_bug_link_or_comment


author: Denis Leroy <denis@poolshark.org> - 0.82-1
changelog:
  - Update to upstream 0.82, many bug fixes
  - Added patch to support default user download directory (Bastien Nocera)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-22.20130102svn127
changelog:
  - Add secure-username patch to properly ignore "password check failed for user"
    (rhbz#894272)
  - Fix dovecot timestamp misparsing (related: rhbz#886193)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-16.20120619svn110
changelog:
  - Add applystddate patch - support rsyslog timestamps
  - Add http patch - count .hdr files as archives
  - Add pluto patch - update openswan parsing
  - Add xvc patch - support xen virtual console logins


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-11.20120425svn100
changelog:
  - Add dovecot-proxy patch (rhbz#812883)
  - Add secure-update patch (rhbz#809314)
  - Add mail-headers patch (rhbz#811185)
  - Add systemd-logind patch (rhbz#812880)
  - Add sshd-undef patch (rhbz#783528)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-7.20110328svn50
changelog:
  - Renamed sendmail patch to match other patches' naming convention
  - Added -secure-grammar patch (rhbz#716224)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.4.0-5.20110328svn50
changelog:
  - Added -sshd patch to match more pam_systemd messages (rhbz#699558)
  - Updated logwatch.spec to create empty files in /etc/logwatch/conf


author: Frank Crawford <frank@crawford.emu.id.au> - 7.4.0-3.20110328svn50
changelog:
  - Updated -secure patch for pam_systemd messages (rhbz#699558)
  - Updated -dovecot patch for extended starting message from upstream


author: Karel Klíč <kklic@redhat.com> - 7.3.6-69.20110228svn46
changelog:
  - Added -manpage patch fixing a typo in logwatch(8) (rhbz#664883)
  - Removed `rm -rf /builddir/build/BUILDROOT/logwatch-7.4.0-23.20130102svn127.fc18.noarch` from %install section


author: Karel Klic <kklic@redhat.com> - 7.3.6-66.20110228svn46
changelog:
  - Updated to the latest svn revision
  - Fixes CVE-2011-1018: Privilege escalation due improper sanitization
    of special characters in log file names (rhbz#680237)


author: Karel Klic <kklic@redhat.com> - 7.3.6-64.20110203svn25
changelog:
  - Updated to the latest svn revision, removed dhcpd patch merged by
    upstream
  - Added LICENSE file, which became available in this revision


author: Karel Klic <kklic@redhat.com> - 7.3.6-59.20100113svn22
changelog:
  - Updated to the latest SVN upstream revision
  - Removed patches merged by upstream
  - Removed logwatch-7.3.6-usage.patch, because --usage works in the new
    version
  - Removed logwatch-7.3.6-cron_conf.patch, because logwatch already
    handles the same problem, only differently
  - Removed logwatch-7.3.6-sendmail.patch: if the log level becomes
    problem again, it should be fixed differently
  - Removed Fedora-specific /etc/logwatch/conf/{logwatch,ignore}.conf,
    upstream version is used instead
  - Renamed logwatch-7.3.1-vsftpd.patch to logwatch-vsftpd.patch,
    logwatch-7.3.6-oldfiles.patch to logwatch-oldfiles.patch, and
    logwatch-7.3.6-postfix.patch to logwatch-postfix.patch, because
    versioning no longer makes sense in Logwatch (the patches does not
    necessarily apply to the last officially released version);
    all patches updated to apply on the latest sources
  - Added logwatch-automount.patch by Frank Crawford (rhbz#666582)
  - Added logwatch-dhcpd.patch by Frank Crawford (rhbz#666393)
  - Added logwatch-dovecot.patch by Frank Crawford (rhbz#666376)
  - Added logwatch-smartd.patch by Frank Crawford (rhbz#666382)
  - Added logwatch-xntpd.patch by Frank Crawford (rhbz#666498)
  - Added logwatch-dovecot2.patch


author: Karel Klic <kklic@redhat.com> 7.3.6-55
changelog:
  - Removed BuildRoot tag and %clean section
  - Deleted trailing whitespaces in the spec file
  - Updated patch upstream status
  - Added fetchmail service (rhbz#528838)


author: Karel Klic <kklic@redhat.com> 7.3.6-51
changelog:
  - Re-enabled zz-fortune with a patch that prevents sending reports
    containing zz-fortune only (rhbz#573450)
  - Removed obsolete chmod and touch calls from the spec file
  - Added manpages for configuration files (rhbz#525644)
  - Ignore broken trust chain messages in named service (rhbz#581186)


author: Karel Klic <kklic@redhat.com> 7.3.6-50
changelog:
  - Added patch from #555750: Not all methods to deny login via sshd are reported
  - Added patch from #555735: DHCPDv6 messages are not recognised
  - Removed logwatch-7.3.6-dhcpd.patch, obsoleted by #555735
  - Added lines from #550873 to the logwatch-7.3.6-named6.patch
  - Added named7 patch from #555980
  - Added dovecot3 patch from #555745
  - Added sendmail2 patch from #555753


author: Karel Klic <kklic@redhat.com> 7.3.6-49
changelog:
  - Add 802.1q subinterface support to iptables report; iptables.patch (#507743)
  - Fixed error in the RE that matches "lost connection" lines in postfix script; lost-connection.patch (#525903)
  - Added patches parsing several unmatched entries (from F-10);
    audit4.patch modified to make ppid optional;
    openvpn4.patch modified to make "semi-" optional;
    pam_unix4.patch modified (user name matched by \S+)


author: Ivana Varekova <varekova@redhat.com> 7.3.6-21
changelog:
  - Resolves: #440534
    Some unmatched OpenVPN log lines
  - add parsing of new logw to audit and cron service


author: Ivana Varekova <varekova@redhat.com> 7.3.6-16
changelog:
  - Resolves: #427734
    fix amavis script
  - Resolves: #427761
    remove *.orig scripts
  - Resolves: #230974
    add no-oldfiles-log option
  - remove usage option description
  - Resolves: #427596
    fix mailto setting


author: Ivana Varekova <varekova@redhat.com> 7.3.2-9
changelog:
  - Resolves: 228258
    logwatch warns about dhcdbd subscripton enabled
  - add xntpd, up2date and automount services


author: Ivana Varekova <varekova@redhat.com> 7.3.2-8
changelog:
  - incorporate the next part of package review comments
  - Resolves: 227976
    logwatch warns about auditspd starting


author: Ivana Varekova <varekova@redhat.com> 7.3.2-7
changelog:
  - incorporate package review feedback
  - Resolves: 227814
    logwatch warns about ntpd deletes interfaces on shutdown


author: Ivana Varekova <varekova@redhat.com> 7.3.1-4
changelog:
  - fix #209405 - another sendmail service problem
  - fix #212812 - add service script patch
      patch created by Russell Coker


author: Ivana Varekova <varekova@redhat.com> 7.3.1-2
changelog:
  - fix #204078 - missing /etc/logwatch/scripts/services
  - add yum service patch
  - fix #209554 - automount service problem


author: Marcela Maslanova <mmaslano@redhat.com> 7.3-4
changelog:
  - add audit patch for SElinux (#200116)
  - add patch for sshd (#200105)
  - add patch from bugzilla, made by Allen Kistler (#200147)


author: Ivana Varekova <varekova@redhat.com> 7.3-2
changelog:
  - added tests to file creation and access, clean up
  resulting files when logwatch fails (upstream change)
  (#190498)


author: Ivana Varekova <varekova@redhat.com> 7.2.1-1
changelog:
  - update to 7.2.1
  - update nosegfault, pam_unix, http patches
  - added sshd, smart, named, audit, secure and mountd services
    patches


author: Ivana Varekova <varekova@redhat.com> 7.1-3
changelog:
  - add secure service patch
  - add iptables patch created by Allen Kistler (bug 174954)
  - add audit service patch


author: Ivana Varekova <varekova@redhat.com> 7.0-2
changelog:
  - fix zz-disk_space problem (bug 172230)
    used michal@harddata.com patch
  - fix a few inconsistencies with new directory structure
  - changed previous zz-disk_space
  - add secure sript patch allow case insensitivity for GID, UID)


author: Ivana Varekova <varekova@redhat.com> 6.1.2-7
changelog:
  - add audit script patch recognized other unmatched logs
  - add cron script patch
  - change sshd script patch


author: Ivana Varekova <varekova@redhat.com> 6.1.2-5
changelog:
  - change secure script patch
  - add sshd script patch (sshd part should not display 0.0.0.0
     in "Failed to bind" column)
  - add one unmatch line to named script


author: Ivana Varekova <varekova@redhat.com> 6.1.2-4
changelog:
  - fixed secure script (part of bug 141116, added a few
    unknown logs)
  - bug 168469 - fixed up2date script


author: Ivana Varekova <varekova@redhat.com> 6.1.2-2
changelog:
  - fix bug 161973 - The logwatch yum service doesn't properly
  show removed entries
  - used patch created by Dean Earley (patch5)


author: Elliot Lee <sopwith@redhat.com> 4.3.2-3
changelog:
  - Fix a reported bug about MsgsSent/BytesTransferred stats not
    counting locally-originated traffic.


author: Elliot Lee <sopwith@redhat.com> 2.6-5
changelog:
  - logwatch-2.6-applydate-65655.patch to fix xferlog date parsing
  - logwatch-2.6-xinetd_match-65856.patch to match more xinetd lines properly
  - logwatch-2.6-confparse-65937.patch to properly parse lines with multiple
    = chars in them


author: Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> - 1.8.1-1
changelog:
  - Updated to upstream 1.8.1
  - Removed Group
  - Commented make distcheck as it fails on texlive for F18, F19
  - Use libgeda42.lang


author: Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 1.6.2-2
changelog:
  - Bug 604288 -  /usr/bin/gschem was killed by signal 11 (SIGSEGV)
  - Bug 670769 -Please update to gEDA/gaf 1.6.2


author: Hercinger Viktor <hercinger.viktor@gmail.com> - 0.58-3
changelog:
  - Fixed TOCTOU race condition when copying, removing or creating directory trees
    Resolves: #928846, CVE-2012-5630, CVE-2012-5644


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


