# changelog

author: Tim Waugh <twaugh@redhat.com> 0.7.74.1-1
changelog:
  - 0.7.74.1:
    - Updated Polish translation (bug #263001).
    - Don't select the default printer after changes to another printer have
      been made.
    - Always construct URI from input fields when changing device (bug #281551).
    - Avoid busy-cursor traceback when window is not yet displayed.


author: Tim Waugh <twaugh@redhat.com> 0.7.72-1
changelog:
  - 0.7.72:
    - Fixed my-default-printer traceback.
    - Improvements to New Printer wizard (Till Kamppeter).


author: Tim Waugh <twaugh@redhat.com> 0.7.71-1
changelog:
  - 0.7.71:
    - Don't discard make/model-matched devices when there are ID-matched
      devices (Till Kamppeter).
    - Fixed fallback if no text-only driver is available (Till Kamppeter).
    - Initialise the make/model list when an ID match failed (Till Kamppeter).
    - Better error-handling in default-print application (Ubuntu #129901).
    - UI tweak in admin tool (Ubuntu #128263).
    - Handle socket: URIs (Ubuntu #127074).


author: Tim Waugh <twaugh@redhat.com> 0.7.70-1
changelog:
  - Requires pirut for system-install-packages.
  - 0.7.70:
    - Increased GetReady->NewPrinter timeout.
    - More binary names mapped to package named.
    - Run system-install-packages to install missing drivers (bug #246726).
    - Less debug output.
    - Desktop file fixes for KDE (bug #247299).


author: Tim Waugh <twaugh@redhat.com> 0.7.69-1
changelog:
  - No longer requires PyXML (bug #233146).
  - Moved applet to main package.
  - 0.7.69:
    - Use HardwareSettings category for my-default-printer desktop
      file (bug #244935).
    - Removed unused code.
    - Filter PPDs by natural language (bug #244173).


author: Tim Waugh <twaugh@redhat.com> 0.7.67-1
changelog:
  - Don't put TrayIcon or SystemSetup categories in the desktop file.
  - Updated pycups to 1.9.24.
  - 0.7.67:
    - Fixed desktop files to have capital letters at the start of each
      word in the Name field (bug #242859).
    - Fixed crash when saving unapplied changes.
    - Fixed Device ID parser to always split the CMD field at commas.
    - New PPDs class means we no longer parse the foomatic XML database.


author: Tim Waugh <twaugh@redhat.com> 0.7.66-1
changelog:
  - 0.7.66:
    - Allow job-hold-until to be set (bug #239776).
    - Implement new printer notifications.


author: Tim Waugh <twaugh@redhat.com> 0.7.65-1
changelog:
  - Build requires xmlto.
  - Updated to pycups-1.9.22.
  - 0.7.65:
    - Use urllib for quoting/unquoting (Val Henson, Ubuntu #105022).
    - Added kn translation.
    - Better permissions on non-scripts.
    - Added man pages.
    - Applet: status feedback.
    - Applet: fixed relative time descriptions.
    - Applet: limit refresh frequency.


author: Tim Waugh <twaugh@redhat.com> 0.7.62-1
changelog:
  - 0.7.62:
    - Use standard icon for admin tool desktop file.
    - Fixed env path in Python scripts.
    - Applet: stop running when the session ends.
    - Prevent a traceback in the SMB browser (bug #225351).
    - 'Manage print jobs' desktop file.


author: Tim Waugh <twaugh@redhat.com> 0.7.60-1
changelog:
  - Updated to pycups-1.9.19.
  - Avoid %makeinstall.
  - 0.7.60:
    - Handle reconnection failure.
    - New applet name.


author: Tim Waugh <twaugh@redhat.com> 0.7.59-1
changelog:
  - 0.7.59:
    - Fixed a translatable string.
    - Set a window icon (bug #233899).
    - Handle failure to start the D-Bus service.
    - Ellipsize the document and printer named (bug #233899).
    - Removed the status bar (bug #233899).
    - Added an icon pop-up menu for 'Hide' (bug #233899).


author: Tim Waugh <twaugh@redhat.com> 0.7.57-1
changelog:
  - Added URL tag.
  - 0.7.57:
    - Prevent traceback when removing temporary file (Ubuntu #92914).
    - Added print applet.


author: Tim Waugh <twaugh@redhat.com> 0.7.56-1
changelog:
  - 0.7.56:
    - Parse Boolean strings correctly in job options.
    - Small command-set list/string fix (bug #230665).
    - Handle hostname look-up failures.
    - Updated filter-to-driver map.
    - Don't parse printers.conf (bug #231826).


author: Tim Waugh <twaugh@redhat.com> 0.7.53-1
changelog:
  - No longer requires rhpl (since 0.7.53).
  - 0.7.53:
    - Use gettext instead of rhpl.translate.
    - Better layout for PPD options.
    - Added scrollbars to main printer list (bug #229453).
    - Set maximum width of default printer label (bug #229453).
    - Handle applying changes correctly when switching to another
      printer (bug #229378).
    - Don't crash when failing to fetch the PPD (bug #229406).
    - Make the text entry boxes sensitive but not editable for remote
      printers (bug #229381).
    - Better job options screen layout (bug #222272).


author: Tim Waugh <twaugh@redhat.com> 0.7.52-1
changelog:
  - 0.7.52:
    - Sort models using cups.modelSort before scanning for a close
      match (bug #228505).
    - Fixed matching logic (bug #228505).


author: Tim Waugh <twaugh@redhat.com> 0.7.51-1
changelog:
  - 0.7.51:
    - Prevent display glitch in job options list when clicking on a printer
      repeatedly.
    - List conflicting PPD options, and embolden the relevant tab
      labels (bug #226368).
    - Fixed typo in 'set default' handling that caused a traceback (bug #227936).
    - Handle interactive search a little better (bug #227935).


author: Tim Waugh <twaugh@redhat.com> 0.7.50-1
changelog:
  - 0.7.50:
    - Fixed hex digits list (bug #223770).
    - Added bs translation.
    - Don't put the ellipsis in the real device URI (bug #227643).
    - Don't check for existing drivers for complex command lines (bug #225104).
    - Allow floating point job options (bug #224651).
    - Prevent shared/published confusion (bug #225081).
    - Fixed PPD page size setting.
    - Avoid os.remove exception (bug #226703).
    - Handle unknown job options (bug #225538).


author: Tim Waugh <twaugh@redhat.com> 0.7.49-1
changelog:
  - 0.7.49:
    - Fixed a traceback in the driver check code.
    - Fixed a typo in the conflicts message.
    - Handle InputSlot/ManualFeed specially because libcups does (bug #222490).


author: Tim Waugh <twaugh@redhat.com> 0.7.47-1
changelog:
  - 0.7.47:
    - Fixed minor text bugs (bug #177433).
    - Handle shell builtins in the driver check (bug #222413).


author: Tim Waugh <twaugh@redhat.com> 0.7.44-1
changelog:
  - 0.7.44:
    - Fixed traceback in error display (bug #220136).
    - Preserve case in model string when dumping debug output.


author: Tim Waugh <twaugh@redhat.com> 0.7.43-1
changelog:
  - 0.7.43:
    - Don't check against IEEE 1284 DES field at all.
    - Merged device matching code (bug #219518).
    - Catch non-fatal errors when auto-matching device.
    - Fixed driver checking bug involving pipelines (bug #220347).
    - Show PPD errors (bug #220136).


author: Tim Waugh <twaugh@redhat.com> 0.7.42-1
changelog:
  - 0.7.42:
    - Fixed typo in command set matching code.
    - Case-insensitive matching when Device ID not known to database.


author: Tim Waugh <twaugh@redhat.com> 0.7.41-1
changelog:
  - Updated pycups to 1.9.16.
  - 0.7.41:
    - Reconnect smoothly after uploading new configuration.
    - Update lpoptions when setting default printer if it conflicts with
      the new setting (bug #217395).
    - Fixed typo in show_HTTP_Error (bug #217537).
    - Don't pre-select make and model when not discoverable for chosen
      device (bug #217518).
    - Set Forward button sensitive on Device screen in new-printer
      dialog (bug #217515).
    - Keep Server Settings selected after applying changes if it was selected
      before.
    - Set Connecting dialog transient for main window.
    - Center Connecting dialog on parent.
    - Optional 'reason' argument for cupshelpers.Printer.setEnabled.
    - Describe devices that have no optional parameters.


author: Tim Waugh <twaugh@redhat.com> 0.7.40-1
changelog:
  - 0.7.40:
    - Removed username:password from hint string because we add that in
      afterwards.
    - Don't set button widths in create-printer dialog (bug #217025).


author: Tim Waugh <twaugh@redhat.com> 0.7.39-1
changelog:
  - 0.7.39:
    - Busy cursor while loading foomatic and PPD list (bug #215527).
    - Make PPD NickName selectable.
    - Added SMB hint label on device screen (bug #212759).


author: Tim Waugh <twaugh@redhat.com> 0.7.38-1
changelog:
  - Updated pycups to 1.9.15.
  - 0.7.38:
    - Fixed a bug in the 'ieee1284'/'ppd-device-id' parsing code.


author: Tim Waugh <twaugh@redhat.com> 0.7.36-1
changelog:
  - 0.7.36:
    - Match against commandset (bug #214181).
    - Parse 'ieee1284' foomatic autodetect entries (bug #214761).
    - Don't remove foomatic PPDs from the list (bug #197331).


author: Tim Waugh <twaugh@redhat.com> 0.7.32-1
changelog:
  - Updated to pycups-1.9.13 for HTTP_FORBIDDEN.
  - 0.7.32:
    - Handle HTTP errors during connection (bug #208824).
    - Updated translations (bug #208873).


author: Tim Waugh <twaugh@redhat.com> 0.7.31-1
changelog:
  - 0.7.31:
    - Select recommended driver automatically (bug #208606).
    - Better visibility of driver list (bug #203907).


author: Tim Waugh <twaugh@redhat.com> 0.7.7-2
changelog:
  - Ship PAM and userhelper files.
  - Requires usermode.
  - Added missing options.py file.
  - Fix getClasses() in pycups.


author: Tim Waugh <twaugh@redhat.com> 0.7.7-1
changelog:
  - Updated to system-config-printer-0.7.7.
  - Updated to pycups-1.9.9.
  - Desktop file.
  - Requires PyXML.


author: Nils Philippsen <nils@redhat.com> - 1.0.1-1
changelog:
  - separate documentation from system-config-nfs
  - remove stuff not related to documentation
  - add source URL


author: Brian Pepple <bpepple@fedoraproject.org> - 1.12.11-1
changelog:
  - Update to 1.12.11.
  - Drop non-weak symbol patch. Fixed upstream.
  - Drop buildroot and clean section. No longer necessary.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.12.9-1
changelog:
  - Update to 1.12.9
  - Disable building API documentation because it won't build on PPC/PPC64 (at least in a reasonable amount of time).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.12.6-2
changelog:
  - Re-run libtoolize and auto* to fix rpath issues.
  - Add --disable-rpath to the configure line.
  - The devel packages need to BR pkgconfig.


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.0-2
changelog:
  - replaced $CXXFLAGS with %{optflags} in %build section
  - removed empty %doc entry from %files devel


author: Xavier Lamien <lxtnow@gmail.com> - 0.2.0-3
changelog:
  - Removed 'gnome-python2' as redundant require.
  - Fixed default doc directory and added VERSION file in it.


author: Xavier Lamien <lxtnow@gmail.com> - 0.2.0-2
changelog:
  - Removed category "Application" from .desktop file.
  - Removed 'python' and 'glade-python' from Requires tag.
  - Added python-related requirements.


author: Pádraig Brady <P@draigBrady.com> - 1.0.30-4
changelog:
  - Allow config files to include (all files from) directories
  - Support conf.d/ on upgrade even with modified targets.conf


author: Andy Grover <agrover@redhat.com> - 1.0.30-3
changelog:
  - Add /etc/tgt/conf.d directory, and move samples from targets.conf
    into conf.d/samples.conf. See #643302, thanks ssato@redhat.com.


author: Andy Grover <agrover@redhat.com> - 1.0.22-1
changelog:
  - New upstream release
  - Remove patch scsi-target-utils-hack-check-for-eventfd.patch,
      upstream now checks for eventfd support
  - Refresh scsi-target-utils-dynamic-link-iser.patch
  - Refresh scsi-target-utils-remove-xsltproc-check.patch


author: Andy Grover <agrover@redhat.com> - 1.0.21-2
changelog:
  - Include targets.conf.5 manpage in pkg
  - Add libxslt as buildrequire for xsltproc (manpage generation)


author: Andy Grover <agrover@redhat.com> - 1.0.21-1
changelog:
  - New upstream version
    - Refresh dynamic-link-iser.patch
    - Remove upstreamed fix-segfault-on-exit.patch


author: Andy Grover <agrover@redhat.com> - 1.0.20-1
changelog:
  - New upstream version
    * New file location on Github
    * Update dynamic-link-iser.patch
  - ISCSI=1 make param no longer needed, removed


author: Andy Grover <agrover@redhat.com> - 1.0.13-1
changelog:
  - Update to new upstream release
    - Drop merged snprintf-fix and fix-isns-of patches
    - Update dynamic-link-iser patch for new iser module
    - Small fixes to redhatify-docs


author: Ruben Kerkhof <ruben@rubenkerkhof.com> - 1.0.1-1
changelog:
  - Update to new upstream release
  - Upstream moved to Sourceforge
  - Fix %preun snippet (#532176)
  - Start after network service but before iscsid. Prevents failed mounts from localhost at boot.
  - Replace paths with macros in spec
  - Add one more doc


author: Hans de Goede <hdegoede@redhat.com> - 0.9.11-1.20091205snap
changelog:
  - Rebase to 0.9.11 + some fixes from git (git id
    97832d8dcd00202a493290b5d134b581ce20885c)
  - Rewrite initscript, make it follow:
    http://fedoraproject.org/wiki/Packaging/SysVInitScript
    And merge in RHEL-5 initscript improvements:
    - Parse /etc/tgt/targets.conf, which allows easy configuration of targets
    - Better initiator status checking in stop
    - Add force-stop, to stop even when initiators are still connected
    - Make reload reload configuration from /etc/tgt/targets.conf without
      stopping tgtd (but only for unused targets)
    - Add force-reload (reloads configs for all targets including busy ones)


author: Terje Rosten <terje.rosten@ntnu.no> - 0.9.5-1
changelog:
  - 0.9.5
  - remove patch now upstream
  - add patch to fix mising destdir in usr/Makefile
  - mktape and dump_tape has moved to tgtimg
  - add more docs


author: Jeffrey C. Ollie <jcollie@lt16585.campus.dmacc.edu> - 0.0.3-0.2.pre4
changelog:
  - Changed Source0 to Source
  - Changed setup0 to setup
  - Added COPYING to doc in main package.
  - Removed html API docs from main package.


author: Matthias Clasen <mclasen@redhat.com> 2.28.1-2
changelog:
  - Don't call problematic functions in an atexit handler,
    since this can lead to segfaults at session end (#524415)


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/seahorse-plugins/2.26/seahorse-plugins-2.26.1.news


author: Peter Lemenkov <lemenkov@gmail.com> - 1.4.1-1
changelog:
  - Ver. 1.4.1
  - Removed obsolete b2b apps: auth_b2b, call_timer, sst_b2b, sw_prepaid_sip
  - Disabled gateway module


author: Peter Lemenkov <lemenkov@gmail.com> 1.3.1-2
changelog:
  - Fixed segfault in gateway module
  - Properly install email template for voicemail module
  - Don't start py_sems by default (causes issues with python2.7)


author: Peter Lemenkov <lemenkov@gmail.com> 1.3.0-1
changelog:
  - Ver. 1.3.0
  - Dropped half of all patches
  - Dropped binrpcctrl plugin
  - Merged into core sipctrl plugin


author: Peter Lemenkov <lemenkov@gmail.com> 1.2.1-4
changelog:
  - Fixed escaping variables strategy for  new CMake (and only for new CMake)
  - Disable mysql++ in early_announce and conference modules


author: Peter Lemenkov <lemenkov@gmail.com> 1.2.1-3
changelog:
  - Fixed config-file generation for EPEL (old CMake)
  - Fixed MOD_NAME parameter passing
  - Fixed few typos


author: Peter Lemenkov <lemenkov@gmail.com> 1.2.0-1
changelog:
  - Ver. 1.2.0
  - Switched to CMake (and fixed many packaging and linking issues)
  - All old patches were either applied upstream or dropped (no longer required)
  - Finally removed unixsockctrl interface
  - New sub-packages: conference, dsm, early_announce
  - Module py_sems was re-enabled


author: Peter Lemenkov <lemenkov@gmail.com> 1.1.0-4
changelog:
  - Internally shipped xmlrpc++ now uses system optflags
  - Added more docs
  - Moved audiofiles from libdir to datadir
  - Removed empty conf_auth.conf
  - Splitted out g722 module
  - Splitted out xmlrpc2di module


author: Peter Lemenkov <lemenkov@gmail.com> 1.1.0-2
changelog:
  - Module dsm is back
  - Disabled OpenSER-specific features (OpenSER is able to manage SEMS
    via SIP-headers).


author: Adam Williamson <awilliam@redhat.com> 2.32.0-2
changelog:
  - add drawable.patch to fix a build/crasher issue (upstream #631887)
  - add profiles.patch to handle rename of gnome-media-profiles (upstream


author: Richard Hughes <rhughes@redhat.com> - 2.28.0-3
changelog:
  - Apply a patch from upstream to inhibit gnome-session, rather than
    gnome-power-manager. This fixes a warning on rawhide when using sound-juicer.


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/sound-juicer/2.26/sound-juicer-2.26.1.news


author: - Bastien Nocera <bnocera@redhat.com> - 2.25.2-1
changelog:
  - Update to 2.25.2
  - Use libmusicbrainz3 in addition to the old one, replace ncb dep with brasero
  - Remove a lot of GNOME BRs


author: - Bastien Nocera <bnocera@redhat.com> - 2.16.4-1
changelog:
  - Update to 2.16.4 to get xdg-users-dir support, fix #236658, and
    follow the device selection in the control-center


author: Matthias Clasen <mclasen@redhat.com> - 2.16.2-3
changelog:
  - Minor fixes from package review:
   * Remove unnecessary Requires
   * Add URL
   * Correct Source, BuildRoot
   * Fix directory ownership


author: John (J5) Palmieri <johnp@redhat.com> 2.9.91-2
changelog:
  - Reenabled BuildRequires for hal-devel >= 0.5.0
  - Added (Build)Requires for nautilus-cd-burner(-devel) >= 2.9.6


author: Colin Walters <walters@redhat.com> 0.5.14-1
changelog:
  - New upstream
  - This release fixes corruption on re-read, upstream 153085
  - Remove upstreamed sound-juicer-0.5.13-prefs-crash.patch


author: Colin Walters <walters@redhat.com> 0.5.12-1
changelog:
  - New upstream version 0.5.12
  - Delete upstreamed patch sound-juicer-0.5.9-pref-help.patch
  - Delete upstreamed patch sound-juicer-0.5.10-gstreamer.patch
  - Delete call to autoconf


author: Brent Fox <bfox@redhat.com> 0.5.2-2
changelog:
  - spec file cleanups
  - add exclude arch for ia64, x86_64, ppc64, and s390x
  - add file macros
  - remove Requires for gstreamer-cdparanoia and gstreamer-vorbis


author: Akira TAGOH <tagoh@redhat.com> - 0.3.1-1
changelog:
  - New upstream release.
    - remove the unnecessary patches:
      - scim-hangul-0.2.2-help.patch
      - scim-hangul-0.2.2-ascii-mode.patch
      - scim-hangul-0.2.2-swap-keybinding.patch
      - scim-hangul-update-caret.patch


author: Akira TAGOH <tagoh@redhat.com> - 0.2.2-6
changelog:
  - scim-hangul-0.2.2-swap-keybinding.patch: swap the keybindings to move
    the cursor on the candidate window according to the candidate window's
    orientation.


author: Akira TAGOH <tagoh@redhat.com> - 0.2.2-3
changelog:
  - scim-hangul-0.2.2-ascii-mode.patch: applied to support the ASCII input mode
    in scim-hangul. (#185506)


author: Jens Petersen <petersen@redhat.com> - 0.2.1-3
changelog:
  - build conditionally with libstdc++so7 preview library (#166041)
    - add with_libstdc_preview switch and tweak libtool to link against newer lib
  - update filelist since moduledir is now api-versioned


author: Akira TAGOH <tagoh@redhat.com> - 0.2.0-5
changelog:
  - fixed the description of this package. (Ryo Dairiki)
  - scim-hangul-0.2.0-ignore-invisible-char.patch: applied to not commit any
    Hangul characters with the keys unrelated to Yetgeul. (#166138)


author: Hans de Goede <hdegoede@redhat.com> - 0.4.2-3
changelog:
  - Drop buildroot and defattr boilerplate (no longer needed with recent rpm)
  - Use system FlightCrew and XercesExtensions
  - Drop support for building for F-15, having a buildin xerces-c with a shared
    system XercesExtensions is asking for trouble


author: Ondrej Vasik <ovasik@redhat.com> 2.8.51-1
changelog:
  - do not throw away the stderr output of profile.d scripts
    in noninteractive bash/ksh sessions(#805507)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.48-1
changelog:
  - remove /bin and /sbin from /etc/profile(#789616)
  - require usrmove
  - add sbin paths in csh.login consistently with bash(#773268)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.45-1
changelog:
  - reserve :156 groupid for stapusr - #756807
  - reserve :157 groupid for stapsys - #756807
  - reserve :158 groupid for stapdev - #756807


author: Ondrej Vasik <ovasik@redhat.com> 2.8.43-1
changelog:
  - gopher home dir in uidgid should be /var/gopher - #752885
  - reserve 163:163 for keystone (openstack-keystone) - #752842
  - reserve 164:164 for quantum (openstack-quantum) - #752842
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.38-1
changelog:
  - reserve 160:160 for swift (openstack-swift) - #732442
  - reserve 161:161 for glance (openstack-glance) - #732442
  - reserve 162:162 for nova (openstack-nova) - #732442
  - comment out 0/tcp spr-itunes /etc/services entry (#710185)
  - add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.33-1
changelog:
  - reflect the reserved username change of amanda
    to amandabackup (#700807)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703049)
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.32-1
changelog:
  - do not override already set PROMPT_COMMAND envvar(#691425)
  - do not quit uidgidlint after first error, show all
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.29-1
changelog:
  - run newaliases in the post to prevent sendmail messages
    about old alias database in the log(#658921)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.28-1
changelog:
  - update services and protocols to latest IANA reservations
  - reserve uidgid pair 109:109 for rhevm(#652287)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.24-1
changelog:
  - do show messages from profile.d scripts in interactive
    login ksh shell(#616418)
  - respect umask settings even with login shell


author: Ondrej Vasik <ovasik@redhat.com> 2.8.22-1
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi


author: Ondrej Vasik <ovasik@redhat.com> 2.8.18-1
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.17-1
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.16-1
changelog:
  - drop X11R6 hierarchy dir from tcsh path (#576940)
  - update services to latest IANA
  - update protocols to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.15-1
changelog:
  - reserve uidgid pair 155:155 for stap-server(#555813)
  - reserve uidgid pair 113:113 for usbmuxd(#556525)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.11-1
changelog:
  - don't have HISTCONTROL ignorespace by default (#520632),
    but do not override it when it is already set
  - add csync alias for port 2005 / tcp, udp


author: Ondrej Vasik <ovasik@redhat.com> 2.8.9-1
changelog:
  - reserve uidgid pair 108:108 for ovirt from libvirt (#513261)
  - reserve uidgid pair 111:111 for saned from sane-backends
    (#520634)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.8-1
changelog:
  - change permissions on /etc/shadow and /etc/gshadow to 0000 and
    use capabilities for them(#517577)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.7-1
changelog:
  - increase threshold for uidgid reservations to 200
  - reserve uidgid pair 107:107 for qemu (libvirt,#511957)
  - reflect threshold in profile and bashrc, do inform about
    uidgid file existence there
  - remove old remnants about portmap from hosts.deny(#509919)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.5-1
changelog:
  - use history-search-backward/forward for pageup/pagedown
    mapping in inputrc (#500989)
  - add HISTCONTROL="ignoreboth" to /etc/profile to not include
    duplicities and lines starting with space into the history
    (#500819)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.4-1
changelog:
  - add oprofile (16:16) to uidgid
  - use os.remove instead of os.execute in lua post
    - no dependency on /bin/sh (thanks Panu Matilainen)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.3-1
changelog:
  - do not disable coredumps in profile/csh.cshrc scripts,
    coredumps already disabled in rawhide's RLIMIT_CORE(#495035)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.1-1
changelog:
  - do ship/generate /etc/{shadow,gshadow} files(#483251)
  - do ship default /etc/hosts with setup (#483244)
  - activate multi on (required for IPv6 only localhost
    recognition out-of-the-box) (#486461)
  - added postun section for cleaning of dangerous .rpmnew
    files after updates
  - make profile and bashrc more portable (ksh, #487419)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-4
changelog:
  - drop <lua> scriptlet completely(audio/video group
    temporarily created by packages which use it for
    updates(#477769))


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-2
changelog:
  - reserve 87 gid for polkituser (just uid was reserved),
    reserve 18 gid for dialout(to prevent conflicts with
    polkituser gid)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-1
changelog:
  - synchronize /etc/services with latest IANA, do not use
    tabs in that file to have consistent output
  - fix indentation in /etc/profile and /etc/bashrc
    (#481074)
  - assign uid 36 for vdsm, gid 36 for kvm
    (#346151,#481021)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.6-1
changelog:
  - make uidgid file better parsable (synchronize tabs)
  - reserve gid 11 for group cdrom (udev,MAKEDEV)
  - reserve gid 33 for group tape (udev,MAKEDEV)
  - reserve gid 87 for group dialout (udev,MAKEDEV)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.5-2
changelog:
  - do not export PATH twice(#449286 NOTABUG revert)
  - do not export INPUTRC(to respect just created ~/.inputrc)
    (#443717)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-3
changelog:
  - update protocols to latest IANA list (2008-04-18)
  - update services to latest IANA list (2008-11-17)
  - mark /etc/protocols and /etc/inputrc %config(noreplace)
  - added URL, fixed few rpmlint warnings
  - do own audio and video group (#458843), create it in default
    /etc/group


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-2
changelog:
  - again process profile.d scripts in noninteractive shells,
    but do not display stderr/stdout messages(#457243)
  - fix wrong prompt for csh/tcsh (#443854)
  - don't show error message about missing hostname in profile
    (#301481)
  - reserve rquotad port 875 in /etc/services (#455859)
  - export PATH after processing profile.d scripts (#449286)
  - assign gid's for audio (:63) and video (:39) group(#458843),
    assign uidgid pair (52:52) for puppet (#471918)
  - fix /etc/services duplicities to pass serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.7.4-1
changelog:
  - Include new serviceslint for speedup (#465642)
  - Cleaned up services due to newly discovered bugs in it with new serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.6.11-1
changelog:
  - Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221)
  - Fixed xterm -title problem (#387581)
  - Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore
    (#381631, #429838)
  - Corrected missing shell for news user in uidgid and passwd


author: Phil Knirsch <pknirsch@redhat.com> 2.6.6-1
changelog:
  - Added another set of proposed changes to /etc/csh.cshrc (#199817)
  - Added missing documentation in /etc/hosts.[allow|deny] (#157053)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-1
changelog:
  - Fixed tcsh behaviour for non login shells (#191233)
  - Fixed umask setting for tcsh to behave identical to bash logins (#199817)
  - Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.49-1
changelog:
  - Really switch to new /etc/services file
  - Added /etc/fstab and /etc/mtab to ownership of setup (#177061)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.48-1
changelog:
  - Switched to the new large /etc/services file which fixes #112298, #133683,
    - Fixed pathmunge problem with bashrc (#123621)
  - Removed /usr/X11R6/bin from default PATH (#173856)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug with PROMPT_COMMAND being broken for wierd dirs (#142125)
  - Added hfsplus to know filesystems (#172820)


author: Bill Nottingham <notting@redhat.com> 2.5.46-1
changelog:
  - add buildrequires on bash, tcsh (#161016)
  - move core dump size setting from csh.login to csh.cshrc (#156914)


author: Bill Nottingham <notting@redhat.com> 2.5.34-1
changelog:
  - add dict (#107807)
  - add cyrus services (#118832)
  - move delete-char binding for csh (#113682)
  - do the same path munging for csh as for bash (#57708)
  - add postfix aliases (#117661)
  - fix bashrc login shell check (#104491)
  - add odmr to services (#101098)
  - add distcc to services (#91535)
  - add xterm forware/backward word bindings (#80860)


author: Jens Petersen <petersen@redhat.com> 2.5.18-1
changelog:
  - bring back the screen case in /etc/bashrc, since /etc/screenrc no
    longer sets defhstatus (#60596, #60597)


author: Jens Petersen <petersen@redhat.com> 2.5.16-1
changelog:
  - dont special case screen in /etc/bashrc, since it overrides the user's
    screenrc title setting (#60596)


author: Bill Nottingham <notting@redhat.com> 2.5.8-1
changelog:
  - add nologin to /etc/shells (#53963)
  - fix some quoting issues (#59627)
  - fix screen status line (#60596)
  - fix path regexps (#59624)
  - move profile.d stuff to csh.cshrc (#59946)


author: Nalin Dahyabhai <nalin@redhat.com> 2.5.7-1
changelog:
  - add entries to services (ipp, wnn4, and so on)
  - try to remove duplicates in services (remove nameserver as alias for domain,
    and readnews as alias for netnews)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - lock only needs to be a gid
  - don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318)


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.15-1
changelog:
  - reorder /etc/services to match comments again
  - protocol 118 is stp, not st
  - update URLs in /etc/protocols and /etc/services


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.10-1
changelog:
  - Fix bugs #24159 and #30634 again; whoever moved bashrc from bash
    to setup used an old version. :((


author: Bill Nottingham <notting@redhat.com>
changelog:
  - overhaul /etc/protocols (#18530)
  - add port 587 to /etc/services (#25001)
  - add corbaloc (#19581)
  - don't set /usr/X11R6/bin in $PATH if it's already set (#19968)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Clean up /etc/services, separating registered numbers from unregistered
    ("squatted") numbers, and adding some.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS
    support (postfix >= 20001030-2)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - split csh.login into csh.login and csh.cshrc (#various)
  - fix pop service names (#6206)
  - fix ipv6 protocols entries (#6219)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rename /etc/csh.cshrc to /etc/csh.login (#2931).
  - (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave)


author: Erik Troan <ewt@redhat.com>
changelog:
  - removed /etc/inetd.conf, /etc/rpc
  - flagged /etc/securetty as missingok
  - fixed buildroot stuff in spec file


author: Ralph Bean <rbean@redhat.com> - 1.0.3-2
changelog:
  - Updated the license field to LGPLv2+
  - Removed BuildRequires util-linux.  Superfluous!
  - Ownership taken for %{_datadir}/%{name}
  - Copying with '-p' to preserve 
  - Made examples non-exectuable.
  - Added %check section.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 1.1-59
changelog:
  - Add some more fixes from the bugfix branch.
  - Fixes Fedora bug #476808 (getPathList on newer rpms not working
    properly making the content pane apearing empty).
  - Fixes unerased accumulated old repomd metadata bug.


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 1.0-54
changelog:
  - omit (broken) BR: qt-devel (Rex Dieter).
  - fix comment typo (Ville Skyttä).
  - Configure ksmarttray with dependency tracking disabled (Ville Skyttä).


author: Ville Skyttä <ville.skytta at iki.fi>
changelog:
  - Flag -xen and -PAE kernels as multi-version.
  - Update desktop entry categories and icon installation paths.
  - Avoid lib64 RPATHs in ksmarttray, fix menu icon.


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 0.42-37
changelog:
  - Add ksmarttray.desktop from ensc.
  - Add missing dependency from ksmarttray on smart-gui.
  - Ignore new autofs5 solaris-like NIS lookup syntax.


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 0.41-29
changelog:
  - Fix typos in distro.py, there were % missing.
  - /usr/bin/smart-root should had been %{_bindir}/smart-root ...
  - Make dependent on fedora-package-config-smart.


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 0.41-27
changelog:
  - Sync with specfile from Ville Skyttä <ville.skytta at iki.fi>
  - Add empty-description patch (upstream issue 64).
  - Update multi-version to include more kernel-* variants.
  - Add distro.d support.
  - Make owner of %{_sysconfdir}/smart and %{_localstatedir}/lib/smart{,/packages,/channels}.


author: Axel Thimm <Axel.Thimm@ATrpms.net>
changelog:
  - Merge smart and smart-gui src.rpm back together again.
    (all dependencies resolved for all supported platforms)


author: Axel Thimm <Axel.Thimm@ATrpms.net>
changelog:
  - Initial specfile from Guilherme Manika <guilherme@zorked.net>.
  - Some reordering and cleanups.
  - Remove binary rpmmodule.so lib.
  - Split the gui into a separate package, so the non-gui packages have
    lower requirements.


author: Lennart Poettering <lpoetter@redhat.com> - 195-14
changelog:
  - Migrate old s-s-k X11 keyboard configuration file
  - https://bugzilla.redhat.com/show_bug.cgi?id=889699


author: Michal Schmidt <mschmidt@redhat.com> - 195-11
changelog:
  - Disable hardening on s390(x) because PIE is broken there and produces
    text relocations with __thread (#868839).


author: Michal Schmidt <mschmidt@redhat.com> - 195-10
changelog:
  - Selected fixes from v196.
  - https://bugzilla.redhat.com/show_bug.cgi?id=869779
  - https://bugzilla.redhat.com/show_bug.cgi?id=870622
  - https://bugzilla.redhat.com/show_bug.cgi?id=870577
  - https://bugzilla.redhat.com/show_bug.cgi?id=858799
  - https://bugzilla.redhat.com/show_bug.cgi?id=875653
  - https://bugzilla.redhat.com/show_bug.cgi?id=872193
  - BR cryptsetup-devel instead of the legacy cryptsetup-luks-devel provide
  - verbose make


author: Lennart Poettering <lpoetter@redhat.com> - 195-8
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=873459
  - https://bugzilla.redhat.com/show_bug.cgi?id=878093


author: Michal Schmidt <mschmidt@redhat.com> - 195-7
changelog:
  - Revert udev killing cgroup patch for F18 Beta.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873576


author: Michal Schmidt <mschmidt@redhat.com> - 195-6
changelog:
  - Fix cyclical dep between systemd and systemd-libs.
  - Avoid broken build of test-journal-syslog.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873387
  - https://bugzilla.redhat.com/show_bug.cgi?id=872638


author: Michal Schmidt <mschmidt@redhat.com> - 195-4
changelog:
  - add dmraid-activation.service to the default preset
  - add yum protected.d fragment
  - https://bugzilla.redhat.com/show_bug.cgi?id=869619
  - https://bugzilla.redhat.com/show_bug.cgi?id=869717


author: Lennart Poettering <lpoetter@redhat.com> - 195-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=831665
  - https://bugzilla.redhat.com/show_bug.cgi?id=847720
  - https://bugzilla.redhat.com/show_bug.cgi?id=858693
  - https://bugzilla.redhat.com/show_bug.cgi?id=863481
  - https://bugzilla.redhat.com/show_bug.cgi?id=864629
  - https://bugzilla.redhat.com/show_bug.cgi?id=864672
  - https://bugzilla.redhat.com/show_bug.cgi?id=864674
  - https://bugzilla.redhat.com/show_bug.cgi?id=865128
  - https://bugzilla.redhat.com/show_bug.cgi?id=866346
  - https://bugzilla.redhat.com/show_bug.cgi?id=867407
  - https://bugzilla.redhat.com/show_bug.cgi?id=868603


author: Lennart Poettering <lpoetter@redhat.com> - 194-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=859614
  - https://bugzilla.redhat.com/show_bug.cgi?id=859655


author: Lennart Poettering <lpoetter@redhat.com> - 190-1
changelog:
  - New upstream release
  - Take possession of /etc/localtime, and remove /etc/sysconfig/clock
  - https://bugzilla.redhat.com/show_bug.cgi?id=858780
  - https://bugzilla.redhat.com/show_bug.cgi?id=858787
  - https://bugzilla.redhat.com/show_bug.cgi?id=858771
  - https://bugzilla.redhat.com/show_bug.cgi?id=858754
  - https://bugzilla.redhat.com/show_bug.cgi?id=858746
  - https://bugzilla.redhat.com/show_bug.cgi?id=858266
  - https://bugzilla.redhat.com/show_bug.cgi?id=858224
  - https://bugzilla.redhat.com/show_bug.cgi?id=857670
  - https://bugzilla.redhat.com/show_bug.cgi?id=856975
  - https://bugzilla.redhat.com/show_bug.cgi?id=855863
  - https://bugzilla.redhat.com/show_bug.cgi?id=851970
  - https://bugzilla.redhat.com/show_bug.cgi?id=851275
  - https://bugzilla.redhat.com/show_bug.cgi?id=851131
  - https://bugzilla.redhat.com/show_bug.cgi?id=847472
  - https://bugzilla.redhat.com/show_bug.cgi?id=847207
  - https://bugzilla.redhat.com/show_bug.cgi?id=846483
  - https://bugzilla.redhat.com/show_bug.cgi?id=846085
  - https://bugzilla.redhat.com/show_bug.cgi?id=845973
  - https://bugzilla.redhat.com/show_bug.cgi?id=845194
  - https://bugzilla.redhat.com/show_bug.cgi?id=845028
  - https://bugzilla.redhat.com/show_bug.cgi?id=844630
  - https://bugzilla.redhat.com/show_bug.cgi?id=839736
  - https://bugzilla.redhat.com/show_bug.cgi?id=835848
  - https://bugzilla.redhat.com/show_bug.cgi?id=831740
  - https://bugzilla.redhat.com/show_bug.cgi?id=823485
  - https://bugzilla.redhat.com/show_bug.cgi?id=821813
  - https://bugzilla.redhat.com/show_bug.cgi?id=807886
  - https://bugzilla.redhat.com/show_bug.cgi?id=802198
  - https://bugzilla.redhat.com/show_bug.cgi?id=767795
  - https://bugzilla.redhat.com/show_bug.cgi?id=767561
  - https://bugzilla.redhat.com/show_bug.cgi?id=752774
  - https://bugzilla.redhat.com/show_bug.cgi?id=732874
  - https://bugzilla.redhat.com/show_bug.cgi?id=858735


author: Lennart Poettering <lpoetter@redhat.com> - 189-3
changelog:
  - Update preset policy
  - Rename preset policy file from 99-default.preset to 90-default.preset so that people can order their own stuff after the Fedora default policy if they wish


author: Ray Strode <rstrode@redhat.com> 188-4
changelog:
  - more scriptlet fixes
    (move dm migration logic to %posttrans so the service
     files it's looking for are available at the time
     the logic is run)


author: Lennart Poettering <lpoetter@redhat.com> - 188-3
changelog:
  - Remount file systems MS_PRIVATE before switching roots
  - https://bugzilla.redhat.com/show_bug.cgi?id=847418


author: Lennart Poettering <lpoetter@redhat.com> - 188-1
changelog:
  - New upstream release
  - Enable gdm and avahi by default via the preset file
  - Convert /etc/sysconfig/desktop to display-manager.service symlink
  - Enable hardened build


author: Michal Schmidt <mschmidt@redhat.com> - 185-4.gita2368a3
changelog:
  - Update to current git snapshot
    - Add systemd-readahead-analyze
    - Drop upstream patch
  - Split systemd-libs
  - Drop duplicate doc files
  - Fixed License headers of subpackages


author: Kay Sievers - 185-1
changelog:
  - New upstream release
    - udev selinux labeling fixes
    - new man pages
    - systemctl help <unit name>


author: Michal Schmidt <mschmidt@redhat.com> - 44-4
changelog:
  - Add triggers from Bill Nottingham to correct the damage done by
    the obsoleted systemd-units's preun scriptlet (#807457).


author: Dennis Gilmore <dennis@ausil.us> - 44-3
changelog:
  - apply patch from upstream so we can build systemd on arm and ppc
  - and likely the rest of the secondary arches


author: Dennis Gilmore <dennis@ausil.us> - 43-2
changelog:
  - don't conflict with fedora-release systemd never actually provided
  - /etc/os-release so there is no actual conflict


author: Lennart Poettering <lpoetter@redhat.com> - 42-1
changelog:
  - New upstream release
  - Save a bit of entropy during system installation (#789407)
  - Don't own /etc/os-release anymore, leave that to fedora-release


author: Michal Schmidt <mschmidt@redhat.com> - 38-5
changelog:
  - Build against libgee06. Reenable gtk tools.
  - Delete unused patches.
  - Add easy building of git snapshots.
  - Remove legacy spec file elements.
  - Don't mention implicit BuildRequires.
  - Configure with --disable-static.
  - Merge -units into the main package.
  - Move section 3 manpages to -devel.
  - Fix unowned directory.
  - Run ldconfig in scriptlets.
  - Split systemd-analyze to a subpackage.


author: Michal Schmidt <mschmidt@redhat.com> - 37-2
changelog:
  - A couple of fixes from upstream:
  - Fix a regression in bash-completion reported in Bodhi.
  - Fix a crash in isolating.
  - Resolves: #717325


author: Lennart Poettering <lpoetter@redhat.com> - 35-1
changelog:
  - New upstream release
  - Update post scripts
  - Resolves: #726683, #713384, #698198, #722803, #727315, #729997, #733706, #734611


author: Michal Schmidt <mschmidt@redhat.com> - 28-4
changelog:
  - Apply patches from current upstream.
  - Fixes memory size detection on 32-bit with >4GB RAM (BZ712341)


author: Michal Schmidt <mschmidt@redhat.com> - 28-3
changelog:
  - Apply patches from current upstream
  - https://bugzilla.redhat.com/show_bug.cgi?id=709909
  - https://bugzilla.redhat.com/show_bug.cgi?id=710839
  - https://bugzilla.redhat.com/show_bug.cgi?id=711015


author: Lennart Poettering <lpoetter@redhat.com> - 26-2
changelog:
  - Bugfix release
  - https://bugzilla.redhat.com/show_bug.cgi?id=707507
  - https://bugzilla.redhat.com/show_bug.cgi?id=707483
  - https://bugzilla.redhat.com/show_bug.cgi?id=705427
  - https://bugzilla.redhat.com/show_bug.cgi?id=707577


author: Lennart Poettering <lpoetter@redhat.com> - 26-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=699394
  - https://bugzilla.redhat.com/show_bug.cgi?id=698198
  - https://bugzilla.redhat.com/show_bug.cgi?id=698674
  - https://bugzilla.redhat.com/show_bug.cgi?id=699114
  - https://bugzilla.redhat.com/show_bug.cgi?id=699128


author: Lennart Poettering <lpoetter@redhat.com> - 25-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694788
  - https://bugzilla.redhat.com/show_bug.cgi?id=694321
  - https://bugzilla.redhat.com/show_bug.cgi?id=690253
  - https://bugzilla.redhat.com/show_bug.cgi?id=688661
  - https://bugzilla.redhat.com/show_bug.cgi?id=682662
  - https://bugzilla.redhat.com/show_bug.cgi?id=678555
  - https://bugzilla.redhat.com/show_bug.cgi?id=628004


author: Lennart Poettering <lpoetter@redhat.com> - 24-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694079
  - https://bugzilla.redhat.com/show_bug.cgi?id=693289
  - https://bugzilla.redhat.com/show_bug.cgi?id=693274
  - https://bugzilla.redhat.com/show_bug.cgi?id=693161


author: Lennart Poettering <lpoetter@redhat.com> - 14-1
changelog:
  - Upstream update
  - Enable hwclock-load by default
  - Obsolete readahead
  - Enable /var/run and /var/lock on tmpfs


author: Lennart Poettering <lpoetter@redhat.com> - 10-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=630401
  - https://bugzilla.redhat.com/show_bug.cgi?id=630225
  - https://bugzilla.redhat.com/show_bug.cgi?id=626966
  - https://bugzilla.redhat.com/show_bug.cgi?id=623456


author: Lennart Poettering <lpoetter@redhat.com> - 8-3
changelog:
  - Reexecute after installation, take ownership of /var/run/user
  - https://bugzilla.redhat.com/show_bug.cgi?id=627457
  - https://bugzilla.redhat.com/show_bug.cgi?id=627634


author: Lennart Poettering <lpoetter@redhat.com> - 0-0.7.20100629git4176e5
changelog:
  - New snapshot
  - Split off -units package where other packages can depend on without pulling in the whole of systemd


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-7
changelog:
  - Fix left button press event in windowed mode (rh556608, sdl894)
  - Remove unrecognized --disable-debug and --enable-dlopen configure options
    (rh581056)


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-6
changelog:
  - Make repacked source tar ball relative
  - Remove useless src/joystick/darwin/10.3.9-FIX/IOHIDLib.h because of APSL-2.0
    license
  - Apply SDL-1.2.14-xio_error-rh603984.patch (rh603984, sdl1009)
  - Escape spec file comments
  - Convert CREDITS to UTF-8


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-4
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip because of
    licensing problems
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new version 1.2.14
  - dropped patches for upstream fixes: libdir, dynamic-esd, x11dyn64,
    dynamic-pulse, pa-rewrite, rh484362 and rh487720


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-6
changelog:
  - dropped pulseaudio hack (rhbz#448270)
  - pulseaudio is now used by default
  - simplified spec file for new architecture support (rhbz#433618)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - new version 1.2.13
    - fixes i810 video overlay problem (rhbz#310841)
    - fixes c++ style comments in header files (rhbz#426475)
  - review fixes: spec file cleanup, dropped static libs (rhbz#226402)
  - fixed pulseaudio hack scripts from Warren for multilib systems (rhbz#426579)
  - fixed pulseaudio detection in configure to enable dynamic use of pulseaudio
    libraries


author: Warren Togami <wtogami@redhat.com> 1.2.12-5
changelog:
  - correct stupid mistake that broke SDL-devel
    RPM should error out if a SourceX is defined twice...


author: Warren Togami <wtogami@redhat.com> 1.2.12-4
changelog:
  - Build with --enable-pulseaudio-shared for testing purposes (#343911)
    It is known to not work in some cases, so not enabled by default.
  - Move pulseaudio enabler hack from SDL_mixer (#426275)
  - Make pulseaudio enabler hack conditional.  It will only attempt to use it if
    alsa-plugins-pulseaudio is installed.


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - new version 1.2.12
    fixes TEXTRELs (rhbz#179407)
  - added arm support (rhbz#245411)
    Thanks to Lennert Buytenhek for the patch
  - added alpha support (rhbz#246463)
    Thanks to Oliver Falk for the patch
  - disabled yasm for SDL (rhbz#234823)
    Thanks to Nikolay Ulyanitsky for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - new version 1.2.11
  - fixed man page SDL_ListModes (rhbz#208212)
  - fixed spurious esound, audiofile dependencies (rhbz#217389)
    Thanks to Ville Skyttä for the patch
  - dropped requirements for imake and libXt-devel (rhbz#226402)
  - made nasm arch %{ix86} only (rhbz#226402)
  - dropped O3 from options (rhbz#226402)
  - dropped tagname environment variable (rhbz#226402)


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-6
changelog:
  - dropped libXt build requires, because libSDL does not need libXt at all - 
    this was an autofoo bug (fixed already)
  - fixed multilib devel conflicts (#192749)
  - added buidrequires for imake: AC_PATH_X needs imake currently


author: Christopher Stone <chris.stone@gmail.com> 1.2.10-4
changelog:
  - added missing (build) requires for libXt libXrender libXrandr
  - remove %makeinstall macro (bad practice)
  - use %{buildroot} macro consistantly


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - new version 1.2.10
  - dropped the following patches because they are not needed anymore:
    ppc_modes, gcc4, yuv_mmx_gcc4 and no_exec_stack
  - new pagesize patch (drop PAGE_SIZE, use sysconf(_SC_PAGESIZE) instead)


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-2
changelog:
  - removed rpath
  - using O3 instead of O2, now (SDL_RLEaccel.c compile error)
  - added BuildRequires for nasm


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-5
changelog:
  - dlopen() aRts and esd rather than linking directly to them.
  - make sure aRts and esd are actually used if they're running.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-2
changelog:
  - Rebuild with new aRts, require arts-devel rather than kdelibs-sound-devel
  - Temporarily exclude alpha (compiler bugs)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - output same libraries for sdl-config whether --libs or --static-libs 
    selected.  Fixes compilation of most SDL programs.
  - properly packaged new HTML documentation


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch from Hans de Goede <hans@highrise.nl> for fullscreen toggling.
  - using  --enable-video-x11-dgamouse since it smoothes the mouse some.


author: Sam Lantinga <slouken@devolution.com>
changelog:
  - Re-integrated spec file into SDL distribution
  - 'name' and 'version' come from configure 
  - Some of the documentation is devel specific
  - Removed SMP support from %build - it doesn't work with libtool anyway


author: Liang Suilong <liangsuilong@gmail.com> - 2.0.4-0.1
changelog:
  - Upstream to the latest git snapshot
  - Add BR: python-devel
  - Upgrade to the latest SLM Data
  - Drop the patch: sunpinyin-fixes-unistd-compile.patch


author: <mycae(a!t)yahoo.com> 6.7-9.cvs20090501
changelog:
  - Modify to ASL 2.0, upstream has relicenced - fix bug #524784
  - Use CVS co, as upstream does not provide release


author: <mycae(a!t)yahoo.com> 6.7-6
changelog:
  - Fixed jar dir
  - Changed primary jar to name-version.jar, & linked.
  - Added clean tarball generator


author: <mycae(a!t)yahoo.com> 6.7-5
changelog:
  - Added LICENSE_nanoxml
  - Updated licence spec line to include ASL 1.1 & zlib
  - removed Clock.java due to incompatible license


author: <mycae(a!t)yahoo.com> 6.7-4
changelog:
  - Updated BuildRequires to inlcude laf-plugin
  - Silence several rpmlint errors
  	- ASL 2.0 vs Apache Source Licence 2.0
  	- Fix arch
  	- Fix EOL on docs.


author: Jens Petersen <petersen@redhat.com> - 0.2.0-2
changelog:
  - add scim-sinhala-remove-timeout-206253.patch to remember previous key event
    for longer than a second (#206253)
  - add scim-sinhala-help-text-206114.patch to add some keymap help (#206114)


author: Jens Petersen <petersen@redhat.com> - 0.2.0-1
changelog:
  - update to scim-sinhala-trans 0.2.0 from new upstream cvs
  - no longer uses surrounding text (#200403)
  - update url and spec file
  - add scim-sinhala-trans-autogen-automake.patch to build with current automake


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 1.2.0-1
changelog:
  - Update to 1.2.0 to fix problems with Python 2.6 (#475903)
    (currently causing broken deps with other packages)


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> 0.96-4
changelog:
  - Place libs in {_prefix}/lib/ and not in {libdir}; fixes x86_64 problems
  - Adjust minor bits to be in sync with python-spec-template


author: Hiemanshu Sharma <hiemanshu [AT] fedoraproject DOT org> - 1.0-5
changelog:
  - Rename X-Security-Lab to X-SecurityLab for better fdo compliance.  Whitespces  are usually just left out.
  i Add subcategories X-Anonymity, X-CodeAnalysis, X-Forensics,  X-IntrusionDetection, X-Password-Tools, X-Reconnaissance and  X-Wireless
  - Use TryExec to determine installed apps, see http://standards.freedesktop.org/desktop-entry-spec/latest/ar01s05.html
  - Menu tweaks
  - Enhance Makefile
  - Added AUTHORS
  - Added ChangeLog (for upstream changes, not packaging).
  - Added desktop-file-validate
  - Fixed requires


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Rich Mattes <richmattes@gmail.com> - 3.2.2-4
changelog:
  - Fixed DSO link errors for F13
  - Added necessary requires for -devel package
  - Corrected Sourceforge download link


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Leigh Scott <leigh123linux@googlemail.com> - 3.1.3-1
changelog:
  - updated to 3.1.3
  - change configure command so it finds boost_regex
  - fix source url's
  - add devel package
  - fix directory ownership
  - fix rpath on binary


author: Adrian Reber <adrian@lisas.de> - 2.3-2
changelog:
  - using a new url.lang to fix #195720
    (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=131352)


author: Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.8-1mdk
changelog:
  - 1.8
  - drop Prefix tag
  - clean out redundant buildrequires
  - rm -rf $RPM_BUILD_ROOT at the beginning of %install, not %prep
  - use %makeinstall_std macro
  - cosmetics


author: Deji Akingunola <dakingun@gmail.com> - 0.8-2
changelog:
  - Explicitly require ruby
  - Also require versions of ruby-libglade2 which have been fixed of bug 428781


author: Bill Nottingham <notting@redhat.com> - 2.86-11
changelog:
  - fix warning on SELinux policy load failure (#185603)
  - don't package /dev/initctl (#174652, #199939)
  - allow some time for failed console opens to resolve themselves (#181546)
  - add documentation of -f to last(1) (#192804)


author: Bill Nottingham <notting@redhat.com> - 2.86-9
changelog:
  - preserve 'WAITING' across re-exec (#143289, others)
  - actually apply quiet patch
  - don't write garbage to utmp on x86-64 (#176494)


author: Bill Nottingham <notting@redhat.com> - 2.86-1
changelog:
  - update to upstream 2.86
  - adjust patches
  - install initreq.h (#119039)
  - allow halt/reboot to handle being called by login correctly (#104062, <worley@theworld.com>)
  - document pam_console usage for halt (#114970)


author: Bill Nottingham <notting@redhat.com> - 2.85-38
changelog:
  - pidof: use readlink instead of stat to avoid NFS hangs (#138788, <constgq@yahoo.com))
  - pidof: fix handling of scripts (#85796)
  - pidof: add -c option for only matching processes with the same root (<twoerner@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 2.85-37
changelog:
  - add patch for SELinux user configs (<dwalsh@redhat.com>)
  - disable readlink patch while it's being fixed


author: Bill Nottingham <notting@redhat.com> 2.85-22
changelog:
  - move /selinux to filesystem
  - print out warning if we're terminating because of enforcing + no policy
  - handle non-selinux kernels better (#118826)


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - fix wait() handling wrt setting SIGCHLD to SIG_IGN in shutdown
  - fix segfault in spawn() function in shutdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't strip binaries
  - have wall not write to non-ttys (#65412)
  - update usage for halt/reboot (#57753)
  - allow '-t' argument to last for checking state at certain times (#56863)
  - make 'pidof /foo/bar' not match /baz/bar (#53918)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - show users with no login pid but no logout record as gone (#42550,
    <cwolf@starclass.com>)
  - fix sulogin to *always* work without a tty (#40934)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - document '-n' option to wall, make it root-only (#18672)
  - don't open files in sulogin unless they're really ttys (#21862)


author: Chris Evans <chris@ferret.lmh.ox.ac.uk>
changelog:
  - Fix a securelevel releated security hole. Go on, try and break append
    only files + securelevel now ;-)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fixed the MD5 check in sulogin (128 hash bits encoded with base64 gives
    22 bytes, not 24...). Fix in -md5.patch


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - /etc/initrunlvl gets linked to /tmp/init-root/var/run/initrunlvl which is
    just plain wrong..
  - /usr/bin/utmpdump was missing in the files section, although it was
    explicitly patched into PROGS.
  - added attr's to the files section.
  - various small fixes.


author: Roozbeh Porunader <roozbeh@farsiweb.info> 1.02-2
changelog:
  - Added comment to Source0 about where to get the file
  - Added Provides and Obsoletes for upsteam RPM name


author: Matthias Saou <http://freshrpms.net/> 1.6.3-1
changelog:
  - Update to 1.6.3.
  - Include init script and sysconfig file to make it easy to manage a single
    instance.


author: Fabian Affolter <fabian@bernewireless.net> - 34-1
changelog:
  - Added part to fix permissions and removing shebangs
  - This package is not longer noarch
  - Updated to new upstream version 34


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.1-1
changelog:
  - Update to sblim-sfcc-2.2.1
  - Fix Source field
  - Move documentation files from -devel to main package


author: Peter Robinson <pbrobinson@fedoraproject.org> - 70-1
changelog:
  - New 70 release

   * Wed Sep 29 2010 Peter Robinson <pbrobinson@fedoraproject.org> - 68-1
   - New 68 release

   * Sat Sep 11 2010 Peter Robinson <pbrobinson@fedoraproject.org> - 67-1
   - New 67 release


author: Simon Schampijer <simon@schampijer.de> - 65-1
changelog:
  - Support new activity.info exec parameter
  - 'share or invite' hint not when resuming shared instance #402


author: Simon Schampijer <simon@schampijer.de> - 62-1
changelog:
  - Use cjson instead of simple-json (nirbheek)
  - Updated translations: he, en_US, sv
  - New download url


author: Caolán McNamara <caolanm@redhat.com>
changelog:
  - use ttx and rebuild the font by merging the original .ttfs with the
    custom replacement uni7E6B glyphs


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 3.1.5-1
changelog:
  - Update to Singular 3.1.5, based on sagemath trac ticket #13237
  - Remove already applied patches from sagemath Singular spkg
  - Rediff Fedora rpm build patches
  - Rediff factory and libfac patches for Macaulay2


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 3.1.3-6
changelog:
  - Update license field to match valid values.
  - Provide newer libfac-devel matching Singular version (#819264).
  - Provide newer factory-devel matching Singular version (#819264).
  - Remove platform specific factoryconf.h file as only platform specific
    contents it has is "#define INT64 long long int" what is not really correct,
    neither completely wrong...


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 3.1.3-2
changelog:
  - Install singular factory headers in singular devel directory.
  - Tag singular-doc files as documentation.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.0-5
changelog:
  - Fix path to dhcpd config file, Linux_DHCPGlobal registration (patch by Roman Rakus)
  - Add registration for various CIMOMs
  - Fix build requires and requires


author: Jef Spaleta <jspaleta@gmail.com> 2.6-5
changelog:
  - remove mpi and bsp subpackages. On more thought, 
  -   it makes more sense to have the parallel computing items
  -   in the main package.
  - Added inline impipython.sh reference script
  -   Replaces upstreams impipython reference file
  -   This will have the correct path statements generated at
  -   package buildtime. Still included as a doc item


author: Jef Spaleta <jspaleta@gmail.com> 2.6-4
changelog:
  - move impipython to docs section of mpi subpackage 
  -   this is a script which must be editted by hand per system.
  - Added Doc/BSP_Tutorial.pdf to docs subpackage
  - Fixed description text line wrapping.


author: Jef Spaleta <jspaleta@gmail.com> 2.6-3
changelog:
  - Add tk and qt subpackages
  - Add bsp and mpi subpackages
  - Requires clean-ups for all subpackages
  - Patch to correctly locate netcdf.a and netcdf.h


author: Christof Damian <christof@damian.net> - 2.71-1.b3.fc18
changelog:
  - upstream 2.71b3
  - Bug 644631 - Bad default logfile path
  - Bug 656320 - siege segfaults in glibc's getopt_long() -> __strncmp_sse2()


author: Warren Togami <wtogami@redhat.com> - 2.30-9
changelog:
  - Mail::SPF::Query is long obsolete, replaced by SPF::Query
    removing this artificial dep because SPF is nearly useless


author: Jeremy Katz <katzj@redhat.com> - 16-1
changelog:
  - update to Terminal-16
  - use %find_lang which works with new bundlebuilder changes
  - remove bogus pseudo.po translation


author: Joshua Rosen <bjrosen@polybus.com>
changelog:
  - 1.1.22-1
  - Added finer grained control over the memory tests. Added support for >8G in Bit reverse address tests.


author: Joshua Rosen <bjrosen@polybus.com>
changelog:
  - 1.1.21-1
  - Improved random number test, added memory refresh test, increased MAX_CORES from 16 to 32, Changed BuildRoot


author: Joshua Rosen <bjrosen@polybus.com>
changelog:
  - 1.1.17-6
  - Changed sbinder to binder, added CFLAGS="$RPM_OPT_FLAGS" to make statement, removed -lform from Makefile


author: gil cattaneo <puntogil@libero.it> 1.2-2
changelog:
  - removed non-free file
  - fixed spelling errors in description
  - added missing dependencies
  - added javadoc sub package


author: Rui Matos <rmatos@redhat.com> - 3.4.0-2
changelog:
  - Use rpm macros to define the version number
  - Do verbose builds
  - Fix %files entries to comply with ownership rules


author: Clément David <c.david86@gmail.com> - 5.4.0-0.6.20120403snap
changelog:
  - Rebuilt for hdf5 1.8.9
  - Backport matio 1.5.0 support
  - Use pkcon to provide help package on demand


author: <c.david86@gmail.com> 5.3.3-3
changelog:
  - Remove dependency on atlas (need only lapack ABI)
  - Use noarch package on doc and tests
  - Remove ldconfig on post/postun
  - add a default font for doc generation
  - scilab does not depends on scilab-doc anymore


author: Paul Howarth <paul@city-fan.org> 0.3.2-2
changelog:
  - Drop the wrapper, which hasn't been needed since 0.3.1 was released
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 0.3.2-1
changelog:
  - Update to 0.3.2 (upstream fix for popen unsanitized input vulnerability:
    CVE-2010-1132, #572117, #572119, http://savannah.nongnu.org/bugs/?29136)
  - Drop popen patch, now upstream
  - Rework syntax, rcvd and bits patches to apply against new codebase


author: Paul Howarth <paul@city-fan.org> 0.3.1-24
changelog:
  - Require systemd-units for ownership of /etc/tmpfiles.d directory
  - Add Default-Stop LSB keyword in initscript


author: Paul Howarth <paul@city-fan.org> 0.3.1-23
changelog:
  - Make sure /var/run/spamass-milter and /var/run/spamass-milter/postfix exist
    at boot time for systems with /var/run on tmpfs (#656692)


author: Paul Howarth <paul@city-fan.org> 0.3.1-19
changelog:
  - Fix patch for CVE-2010-1132 to not create a zombie process per email when
    the -x or -b options are used (#583523)


author: Paul Howarth <paul@city-fan.org> 0.3.1-18
changelog:
  - Add patch to get rid of compiler warnings
  - Reorder and re-base patches to optimize chances of upstream accepting them
  - Improve Received-header patch (#496763) incorporating additional fix from
    upstream update (http://savannah.nongnu.org/bugs/?17178)


author: Paul Howarth <paul@city-fan.org> 0.3.1-17
changelog:
  - Update initscript to support running the milter as root, which is needed
    for the -x (expand aliases) option; note that the milter does not run as
    root by default
  - Add patch for popen unsanitized input vulnerability
    (CVE-2010-1132, #572117, #572119, http://savannah.nongnu.org/bugs/?29136)
  - Rebase authuser patch
  - Update patch adding auth info to dummy Received-header so that it doesn't
    generate spurious warnings about missing macros (#532266), and update and
    merge the macro documentation patch into this patch
  - Document patch usage in spec file


author: Paul Howarth <paul@city-fan.org> 0.3.1-14
changelog:
  - Fix Received-header generation (#496763)
  - Add authentication info to dummy Received-header (#496769)
  - Add option to skip checks for authenticated senders (#437506, #496767)
    (thanks to Habeeb J. Dihu for the reports and patches)


author: Paul Howarth <paul@city-fan.org> 0.3.1-13
changelog:
  - Call initscripts directly instead of via /sbin/service and fine-tune scriptlet
    dependencies
  - Change sa-milt user's home directory from
    %{_localstatedir}/run/spamass-milter to %{_localstatedir}/lib/spamass-milter
    so as to retain directory contents across a reboot (#489995), and fix the home
    directory of any existing sa-milt account on upgrades


author: Paul Howarth <paul@city-fan.org> 0.3.1-12
changelog:
  - Subpackage for postfix is now noarch for Fedora 10 onwards
  - Fix scriptlet deps to ensure that sa-milt user exists before we attempt to
    add it to the postfix group


author: Paul Howarth <paul@city-fan.org> 0.3.1-9
changelog:
  - Require /usr/sbin/sendmail (for -b/-B/-x options) rather than sendmail pkg
  - Make summary and description less Sendmail-specific
  - Add patch to support group-writable socket for MTA communication, needed
    to be able to use a Unix-domain socket with Postfix (#452248)
  - Add subpackage with group-writable directory for Postfix support
  - Tweak initscript to change default options when Postfix socket directory is
    present
  - Document additional ENVRCPT macros to provide


author: Paul Howarth <paul@city-fan.org> 0.3.1-8
changelog:
  - Fix initscript failure to start with SELinux in enforcing mode (#447247)
    (needs selinux-policy >= 3.3.1-55 on F9)


author: Paul Howarth <paul@city-fan.org> 0.3.1-5
changelog:
  - Split initscript and config out from being here documents in the spec and
    have them as separate source files instead
  - Unexpand tabs
  - Clarify license as GPL v2 or later (GPLv2+)
  - Use the standard scriptlet for user/group creation in %pre


author: Paul Howarth <paul@city-fan.org> 0.3.1-4
changelog:
  - Use make/DESTDIR instead of deprecated %makeinstall macro
  - Expand tabs and clean up changelog entries


author: Paul Howarth <paul@city-fan.org> 0.3.1-3
changelog:
  - Use upstream default settings (#191602)
    This change re-enables by default Subject/Content-Type header modification
    (which may have a performance impact for large messages) and disables by
    default the rejection of emails with a spam score of 15 or more. To re-enable
    these options, uncomment the line:
    EXTRA_FLAGS="-m -r 15"
    in %{_sysconfdir}/sysconfig/spamass-milter


author: Paul Howarth <paul@city-fan.org> 0.3.0-3
changelog:
  - Use Extras standard buildroot
  - Unpack tarball quietly
  - Create account sa-milt and run the milter using that instead of root
  - Fix socket name in README
  - Initscript not %config


author: Huang Peng <phuang@redhat.com> - 0.5.91-25
changelog:
  - Fix build error with GCC 4.3.
  - Drop the scim-pinyin-helper because upstream does not accept it and we will stop maintaining it.


author: Huang Peng <phuang@redhat.com> - 0.5.91-19
changelog:
  - Drop line `Patch1: scim-pinyin-shuangpin.patch' in spec file.
  - Remove ChangeLog from rpm package.


author: Shawn Huang <phuang@redhat.com> - 0.5.91-14
changelog:
  - Translate refined online help to Chinese (#200702).
  - Update some msgids in po/zh_CN.po to fix Some tooltips were not 
    translated (#216831).


author: Qian Shen <qshen@redhat.com> - 0.5.91-11.2
changelog:
  - remove " g_object_set ( renderer_num, "alignment", 0.5, NULL) " in add_column() to fit gtk2.10 in fc6


author: Qian Shen <qshen@redhat.com> - 0.5.91-9
changelog:
  - run aclocal/autoconf/automake before configure
  - to create new confiugre/Makefiles based on the 
  - modified configure.ac


author: Jens Petersen <petersen@redhat.com> - 0.5.0-2
changelog:
  - add source url
  - add scim-pinyin-0.5.0-setup-ambiguity-cast.patch from cvs to fixing build
    on 64bit archs (Ryo Dairiki)
  - configure with --disable-static so only .la files need to be removed


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.019-6
changelog:
  - Remove BuildRoot, %clean and %defattr.
  - Add my Mandriva patch to create .bin files otherwise sympow will
    just crash on actual usage.
  - Remove sympow-launcher and create it dynamically in spec.
  - The new sympow launcher also checks for the SYMPOW_DATA environment
    variable and copies data there if empty. This is required because
    data files may be changed or new ones created by users.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.3.3-2
changelog:
  - Update to 1.3.3 version by request bz#800254
  - Step to cmake build system.
  - Drop libpng and make patches.
  - Rebase to new version Fedora patch.


author: Petr Sabata <psabata@redhat.com> - 1.3.2-5
changelog:
  - General spec cleanup
  - Moved slim-dynwm to a separate source file
  - Patches renamed
  - Buildroot removed


author: Lorenzo Villani <lvillani@binaryhelix.net> - 1.3.2-1
changelog:
  - New upstream version 1.3.2
  - Drop slim-1.3.1-usexwd.patch (folded into 02-slim-1.3.2-fedora.patch)
  - Drop slim-1.3.1-curdir.patch (folded into 02-slim-1.3.2-fedora.patch)
  - Drop slim-1.3.1-strtol.patch (merged upstream)
  - Drop slim-1.3.1-remove.patch (merged upstream)
  - Drop slim-1.3.1-gcc44.patch (merged upstream)
  - Drop slim-1.3.1-CVE-2009-1756.patch (merged upstream)
  - Drop slim-1.3.1-fix-insecure-mcookie-generation.patch (merged upstream)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 1.3.1-9
changelog:
  - Fix CVE-2009-1756 (bugzilla: 544024)
  - Fix MIT insecure cookie generation (patch from Debian)
  - Fix build with GCC 4.4


author: Anders F Bjorklund <afb@users.sourceforge.net> 1.2.6-3
changelog:
  - use slim background instead of default
  - added more build dependencies / -devel
  - add "README.Fedora"
  - patch issue display


author: Anders F Bjorklund <afb@users.sourceforge.net> 1.2.6-2
changelog:
  - fixed source URL
  - added libXft-devel
  - removed xrdb dependency (left from wdm)
  - added xwd dependency (for screenshots)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - ALRIGHT!  Woo-hoo!  Erik already did the install-info stuff!
  - added BuildRoot
  - spec file cleanups


author: Eduardo Echeverria <echevemaster@gmail.com> - 1.0.4a-2
changelog:
  - Changes to match the correct architecture in the section Requires of
    devel package
  - Remove versioned libraries to the base package
  - Remove the c files to section doc of the devel package
  - Add README.SHA to section doc of the devel package


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
  - don't trip over missing /etc/sysconfig/network file (#857412)
  - pull updated translations
  - install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
  - use pkexec instead of consolehelper
  - read/write /etc/localtime as symbolic link and only fall back to using
    /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.9.66-1
changelog:
  - improve enabling/disabling, starting/stopping NTP daemons, take care of the
    respective "other" NTP daemon as well (#743533)
  - pull updated translations


author: Nils Philippsen <nils@redhat.com> - 1.9.62-1
changelog:
  - improve building/cleaning message files (Martin Pitt)
  - properly tie dialogs to toplevels, set slightly better dialog titles, set
    dialogs transient for notebook due to firstboot (#528157)
  - use branded name in desktop file (#727204)
  - use Transifex and pull updated translations


author: Nils Philippsen <nils@redhat.com> - 1.9.59-1
changelog:
  - require docs in enterprise builds
  - configure iburst mode instead of ntpdate upon boot (original patch by Radek
    Nováček)
  - fix configuring ntp.conf template


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use better ugettext to allow anaconda to use the time zone widget even with
    encodings other than UTF-8


author: Nils Philippsen <nils@redhat.com>
changelog:
  - don't require libselinux-python directly anymore, this code was moved to
    slip.util.files (#562331)


author: Nils Philippsen <nils@redhat.com> - 1.9.48-1
changelog:
  - use string object methods instead of string module
  - get rid of timeconfig and compat program names
  - move backend code into scdate.core module


author: Nils Philippsen <nils@redhat.com>
changelog:
  - improve manual and NTP settings (#507619)
  - improve frames and expander (#507623)
  - display current date and time always
  - fix explanation labels on "Date and Time" page
  - fix non-zero page size deprecation warnings


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.27-1
changelog:
  - handle missing UTC information in /etc/adjtime, disable UTC/non-UTC selection
    if hwclock doesn't work (#438124)


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.24-1
changelog:
  - pick up updated translations
  - enable all languages for online doc translation
  - various online doc fixes
  - zoom in on click into map (#437767)
  - draw label into map for currently selected city


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.23-1
changelog:
  - handle ntpdate service (#229217, patch by Miroslav Lichvar)
  - change all runlevels instead of only 3 and 5


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.19-1
changelog:
  - only attempt to use yelp to display online help (as xdg-open does just the
    same), drop requirements on xdg-utils and yelp for now, update error message
    shown if yelp isn't found (#420101)


author: Nils Philippsen <nphilipp@redhat.com> 1.9.16-1
changelog:
  - use warning dialog, exit gracefully if hwclock fails to allow operation in a
    XEN guest (#357311)


author: Nils Philippsen <nphilipp@redhat.com> 1.9.13-1
changelog:
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - use full path to call gtk-update-icon-cache
  - don't let gtk-update-icon-cache fail scriptlets
  - use "make %{?_smp_mflags}"
  - remove "ExclusiveOS: Linux"
  - remove obsolete no.po translation file
  - use "%defattr(-,root,root,-)"
  - add release tags to changelog versions to appease rpmlint


author: Nils Philippsen <nphilipp@redhat.com> 1.9.12-1
changelog:
  - use xdg-open if available
  - don't throw exceptions when selecting non-geographic time zones (#293241)
  - fix permissions of timeconfig tool (#241737)


author: Nils Philippsen <nphilipp@redhat.com> 1.9.11-1
changelog:
  - don't remove notebook pages when acting as a firstboot module (#296711)
  - pick up updated translations


author: Nils Philippsen <nphilipp@redhat.com> 1.9.4-1
changelog:
  - display error message if setting time and date fails (#251818)
  - require newt-python from Fedora 8 on (#251362)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use smoother zoom steps when using the mouse wheel
  - hide city label when using the mouse wheel to zoom


author: Nils Philippsen <nphilipp@redhat.com> 1.9.2-1
changelog:
  - fix python formatting in Japanese translation (#248667, Jens Petersen)
  - make "make archive" work with Hg repo


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add scrollbars to timezone canvas (#230690)
  - scroll to city selected via treeview
  - don't resize window due to excessively long comments of cities


author: Nils Philippsen <nphilipp@redhat.com> 1.8.96-1
changelog:
  - handle missing /etc/ntp.conf gracefully (#237777)
  - versionize obsoletes
  - pick up updated translations


author: Nils Philippsen <nphilipp@redhat.com> 1.8.92-1
changelog:
  - use correct modes when installing, to avoid fixing modes when packaging and
    to be able to strip down %files
  - don't ship unneeded regions file


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - use Category: ... System; ... in desktop file
  - clean buildroot before installing
  - fix licensing blurb in PO files
  - require python >= 2.0 instead of python2
  - recode spec file to UTF-8
  - don't mark ntp.template as %config


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - display to-be-selected city inside map instead of status bar (#211550)
  - remove remaining regions cruft
  - make currently selected city non-selectable


author: Nils Philippsen <nphilipp@redhat.com> 1.8.11-1
changelog:
  - provide more info when encountering bad timezone translations (i.e. not split
    into Region,Continent/Location) (#219773)
  - pick up updated translations (#216073)


author: Nils Philippsen <nphilipp@redhat.com> 1.8.8-1
changelog:
  - enable Hebrew, Marathi and Urdu translations
  - pick up updated translations (#211074)
  - add dist tag


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.14-1
changelog:
  - put Etc/... timezones into "Non-geographic timezones" (#148025)
  - default to already set timezone on startup (#177815)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix highlighted regions when leaving and entering the timeone map canvas
  - make timezone list a treeview
  - update timezone po source file


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.8-1
changelog:
  - reshow shaded map when reentering map widget from outside
  - clear status line when outside region area in zoomed mode


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.7-1
changelog:
  - only select region if pointer is inside region
  - replace aa-based shading to avoid aa-related deficiencies of GnomeCanvas
  - show shaded border around zoomed in region to zoom out without selecting a
    city


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.6-1
changelog:
  - fix zooming problems with enlarged window (#172982)
  - apply workaround by Alex Larsson to avoid hanging when clicking on Asia
    region (#172977)
  - add Middle America region, make Antarctica regions overlapping


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.2-1
changelog:
  - write comment about the ZONE parameter into /etc/sysconfig/clock (#123101)
  - handle comments when reading /etc/sysconfig/clock
  - consistently use spaces for indentation in timezoneBackend.py


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.0-1
changelog:
  - add and edit NTP servers inline in the list
  - always display clock left-to-right (#165109)
  - try to be smart about restrict lines when changing or deleting hosts
  - include *.pyo files (#165097)
  - don't remove *.pyc files in %preun because they're in the file list
  - don't include timetool symlink anymore
  - don't install firstboot module symlink, this is dealt with in the firstboot
    package for quite a while


author: Nils Philippsen <nphilipp@redhat.com> 1.7.18-1
changelog:
  - make desktop file translatable (#156792)
  - avoid DeprecationWarnings
  - use DESTDIR consistently (#156782)


author: Nils Philippsen <nphilipp@redhat.com> 1.7.16-2
changelog:
  - use True, False instead of gtk.TRUE, gtk.FALSE to avoid deprecation warnings
    (#153037, patch by Colin Charles)


author: Nils Philippsen <nphilipp@redhat.com> 1.7.9-1
changelog:
  - enable choosing which notebook page(s) to show (for firstboot, #133748)
  - some minor firstboot API changes, conflict with firstboot <= 1.3.26
  - some minor UI tweaks
  - remove pool.ntp.org from list of NTP server choices as system-config-date
    doesn't handle multi-IP machines really well ATM


author: Nils Philippsen <nphilipp@redhat.com> 1.7.5-1
changelog:
  - actually display time zone map (#131641)
  - put NTP stuff into own tab to better accommodate firstboot (#131314)
  - add accelerators to Date & Time tab


author: Brent Fox <bfox@redhat.com> 1.5.9-9
changelog:
  - Added mnemonics to widgets that didn't have them (bug #91026)
  - convert some timezone po files to utf-8 (bug #88461)


author: Brent Fox <bfox@redhat.com> 1.5.7-3
changelog:
  - better check on ntp status by looking at initscrip return code
  - sent ntp initscript output to /dev/null when calling os.system()


author: Brent Fox <bfox@redhat.com> 1.5.6-2
changelog:
  - handle missing ntpservers file
  - don't pass in parent, it breaks firstboot
  - handle busted ntp initscript


author: Brent Fox <bfox@redhat.com> 1.5.2-7
changelog:
  - Retrieve the only the first NTP server if there's more than one
  - Only modify the first server entry if there's more than one


author: Tammy Fox <tfox@redhat.com> 1.4-1
changelog:
  - Updated docs for gtk2 interface
  - Add note about security level and ntpd (bug #68039)
  - Move desktop file to /usr/share/applications only


author: Brent Fox <bfox@redhat.com> 1.3-4
changelog:
  - Remove some lingering references to dateconfig
  - Create symbolic link from dateconfig to redhat-config-date


author: Brent Fox <bfox@redhat.com> 1.3-1
changelog:
  - Rename dateconfig to redhat-config-date
  - Check to see if we can ping ntp server before starting ntpd


author: Brent Fox <bfox@redhat.com>
changelog:
  - Finished port to Python2.2/GTK2
  - Handle starting ntpd more gracefully
  - Made variable naming more consistent


author: Brent Fox <bfox@redhat.com>
changelog:
  - Replaced C code for timezone map with Python from anaconda
  - Remove timezonemapmodule from /usr/lib/dateconfig


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.4-6
changelog:
  - Fix some character sets for translations (#52851)
  - dateconfig.png isn't a config file, mark the config files as noreplace


author: Brent Fox <bfox@redhat.com>
changelog:
  - got starting and stopping of ntpd working
  - enabled detection of whether ntpd is currently running 
  - added msf to author list


author: Doug Ledford <dledford@redhat.com> - 2.0.0-3
changelog:
  - Split the library and devel files out to libsysfs and leave the utils
    in sysfsutils.  This is for multilib arch requirements.


author: Christian Krause <chkr@fedoraproject.org> - 1.5.0-1
changelog:
  - new upstream release
  - use shipped SVG icon instead of manually extracted PNG files
  - add shipped XPM icon for openbox compatibility
  - update Icon Cache scriptlets


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0-2
changelog:
  - When starting lure from the cmdline (as the lure fedora package .desktop
    file does) prefer the VGA version over the EGA version


author: Lucian Langa <cooly@gnome.eu.org> - 0.13.0-1
changelog:
  - new upstream release
  - update patch0
  - drop installing uneeded theme files
  - drop vendor from desktop file; fix icon entry


author: Matthias Saou <http://freshrpms.net/> 0.10.0-1
changelog:
  - Update to 0.10.0, since Hans is away for a few days ;-)
  - Install icons the same way as the theme, and preserve timestamps.
  - Use a downloads.sf.net source URL.
  - Remove two no longer needed patches (gcc41 and new-flac).


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.1-3
changelog:
  - Take patches from svn for new flac support and rebuild for new flac
  - Fix (remove) execstack usage


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.1-1
changelog:
  - New upstream release 0.9.1
  - Prepare for inclusion into FE
  - Remove mp3 support (the same files are also available in ogg format)
  - Remove mpeg2 video support (problem, but only for one game I will
    request upstream to add theora support)


author: Matthias Saou <http://freshrpms.net/> 0.9.0-1
changelog:
  - Update to 0.9.0.
  - Spec file cleanup.
  - Add datadir patch from upstream in order to include themes.


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - upgrade to 0.7.0 cvs (20041219), prep. for 0.7.0
  - added more BuildRequires
  - if without-alsa is defined actually disable alsa via configure


author: Bruno Wolff III <bruno@wolff.to> - 43.3d-1
changelog:
  - Lots of minor bugfixes, but incompatible with 43.3.
  - 43.3d release announcement: http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6594


author: Bruno Wolff III <bruno@wolff.to> - 43.2a-1
changelog:
  - Update to upstream 43.2a
  - Release anouncement for 43.2a http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6340
  - Release anouncement for 43.2 http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6330
  - Release anouncement for 43.1c http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6184
  - Release anouncement for 43.1b http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6129
  - Release anouncement for 43 http://www.scorched3d.co.uk/phpBB3/viewtopic.php?t=6128
  - Use included png image instead of converting icon


author: Hans de Goede <j.w.r.degoede@hhs.nl> 40.1d-3
changelog:
  - Fix build with new ODE, scorched3d tries to force a double build of (its own
    included version of) ODE, however we use the system version which is compiled
    with single precision. With the new ODE the header files throw an #error
    because this causes both dSINGLE and dDOUBLE to be defined. This is fixed by
    patching scorched3d's configure to not add -DdDOUBLE to the CFLAGS


author: Hans de Goede <j.w.r.degoede@hhs.nl> 40.1c-1
changelog:
  - New upstream release 40.1c
  - Drop 64 bit patch (integrated upstream)
  - Don't install our data files in /usr/share/games, but in /usr/share
  - Some minor specfile cleanups


author: Hans de Goede <j.w.r.degoede@hhs.nl> 40-1
changelog:
  - New upstream release 40
  - Drop many upstreamed patches
  - Use system ode library instead of included one


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 39.1-5
changelog:
  - Patch included apoc mod version 3.1 to the 3.1 version as distributed by
    the ApocHQ servers for a smooth (no download required) experience joining
    apoc-mod using games on the internet. Also not entirely unimportant this
    fixes bz 182166, making the apoc mod actually usuable for local games.


author: <j.w.r.degoede@hhs.nl> - 39.1-2
changelog:
  - upgrade to CVS snapshot of 20050929, as Debian does, but not to
    the newer apoc version as this causes problems playing online (patch 0)
  - fix gcc41 compilation (patch 3)
  - fix 64 bit compilation (bz 158646) (patch 4)
  - fix compile with openal-0.9 (patch 5)
  - use htmlview for helpfile viewing instead of hardcoded mozilla,
    run this in background so the game doesn't freeze (patch 6)
  - fix all the security issues reported on the fulldisclosure mailinglist:
    http://seclists.org/lists/fulldisclosure/2005/Nov/0079.html
    (bz 161694) (patch 7, 8, 9, 10)
  - fix 2 additonal security issues found while fixing the above (patch 11, 12)
  - this release also fixes bz 161694


author: Ville Skyttä <ville.skytta at iki.fi> - 39.1-1
changelog:
  - 39.1.
  - Avoid aclocal >= 1.8 warnings.
  - Install icon into icons/hicolor.
  - Clean up build dependencies.


author: Jochen Schmitt <Jochen herr-schmitt de> 4.3.2-35
changelog:
  - Add capability to use a TLS connection
  - Move /etc/sysconfig/suck/site to /etc/news/suck.d/default
  - Fix missing ssl support in rpost


author: Jochen Schmitt <Jochen@herr-schmitt.de>
changelog:
  - Use perl filter as default
  - Added '#include <XSUB.h>' to perl depended source files
  - Documentation of Fedora specific behaviour of this package
  - Fix some bugs in getnews/put.news.sm
  - Use ExtUtils:Embed in configure.in


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-66
changelog:
  - Allow munin disk plugins to get attributes of all directories
  - Allow munin disk plugins to get attributes of all directorie
  - Allow logwatch to get attributes of all directories
  - Fix networkmanager_manage_lib() interface
  - Fix gnome_manage_config() to allow to manage sock_file
  - Fix virtual_domain_context
  - Add support for dynamic DNS for DHCPv6


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-65
changelog:
  - Allow svirt to use netlink_route_socket which was a part of auth_use_nsswitch
  - Add additional labeling for /var/www/openshift/broker
  - Fix rhev policy
  - Allow openshift_initrc domain to dbus chat with systemd_logind
  - Allow httpd to getattr passenger log file if run_stickshift
  - Allow consolehelper-gtk to connect to xserver
  - Add labeling for the tmp-inst directory defined in pam_namespace.conf
  - Add lvm_metadata_t labeling for /etc/multipath


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-63
changelog:
  - Add label for efivarfs
  - Allow certmonger to send signal to itself
  - Allow plugin-config to read own process status
  - Add more fixes for pacemaker
  - apache/drupal can run clamscan on uploaded content
  - Allow chrome_sandbox_nacl_t to read pid 1 content


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-62
changelog:
  - Fix MCS Constraints to control ingres and egres controls on the network.
  - Change name of svirt_nokvm_t to svirt_tcg_t
  - Allow tuned to request the kernel to load kernel modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-61
changelog:
  - Label /var/lib/pgsql/.ssh as ssh_home_t
  - Add labeling for /usr/bin/pg_ctl
  - Allow systemd-logind to manage keyring user tmp dirs
  - Add support for 7389/tcp port
  - gems seems to be placed in lots of places
  - Since xdm is running a full session, it seems to be trying to execute lots of executables via dbus
  - Add back tcp/8123 port as http_cache port
  - Add ovirt-guest-agent\.pid labeling
  - Allow xend to run scsi_id
  - Allow rhsmcertd-worker to read "physical_package_id"
  - Allow pki_tomcat to connect to ldap port
  - Allow lpr to read /usr/share/fonts
  - Allow open file from CD/DVD drive on domU
  - Allow munin services plugins to talk to SSSD
  - Allow all samba domains to create samba directory in var_t directories
  - Take away svirt_t ability to use nsswitch
  - Dontaudit attempts by openshift to read apache logs
  - Allow apache to create as well as append _ra_content_t
  - Dontaudit sendmail_t reading a leaked file descriptor
  - Add interface to have admin transition /etc/prelink.cache to the proper label
  - Add sntp support to ntp policy
  - Allow firewalld to dbus chat with devicekit_power
  - Allow tuned to call lsblk
  - Allow tor to read /proc/sys/kernel/random/uuid
  - Add tor_can_network_relay boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-60
changelog:
  - Add openshift_initrc_signal() interface
  - Fix typos
  - dspam port is treat as spamd_port_t
  - Allow setroubleshoot to getattr on all executables
  - Allow tuned to execute profiles scripts in /etc/tuned
  - Allow apache to create directories to store its log files
  - Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Looks like apache is sending sinal to openshift_initrc_t now,needs back port to RHEL6
  - Allow Postfix to be configured to listen on TCP port 10026 for email from DSPAM
  - Add filename transition for /etc/tuned/active_profile
  - Allow condor_master to send mails
  - Allow condor_master to read submit.cf
  - Allow condor_master to create /tmp files/dirs
  - Allow condor_mater to send sigkill to other condor domains
  - Allow condor_procd sigkill capability
  - tuned-adm wants to talk with tuned daemon
  - Allow kadmind and krb5kdc to also list sssd_public_t
  - Allow accountsd to dbus chat with init
  - Fix git_read_generic_system_content_files() interface
  - pppd wants sys_nice by nmcli because of "syscall=sched_setscheduler"
  - Fix mozilla_plugin_can_network_connect to allow to connect to all ports
  - Label all munin plugins which are not covered by munin plugins policy  as unconfined_munin_plugin_exec_t
  - dspam wants to search /var/spool for opendkim data
  - Revert "Add support for tcp/10026 port as dspam_port_t"
  - Turning on labeled networking requires additional access for netlabel_peer_t; these allow rules need to be back ported to RHEL6
  - Allow all application domains to use fifo_files passed in from userdomains, also allow them to write to tmp_files inherited from userdomain
  - Allow systemd_tmpfiles_t to setattr on mandb_cache_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-58
changelog:
  - Add back consolekit policy
  - Silence bootloader trying to use inherited tty
  - Silence xdm_dbusd_t trying to execute telepathy apps
  - Fix shutdown avcs when machine has unconfined.pp disabled
  - The host and a virtual machine can share the same printer on a usb device
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow abrt_watch_log_t to execute bin_t
  - Allow chrome sandbox to write content in ~/.config/chromium
  - Dontaudit setattr on fontconfig dir for thumb_t
  - Allow lircd to request the kernel to load module
  - Make rsync as userdom_home_manager
  - Allow rsync to search automount filesystem
  - Add fixes for pacemaker


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-57
changelog:
  - Add support for 4567/tcp port
  - Random fixes from Tuomo Soini
  - xdm wants to get init status
  - Allow programs to run in fips_mode
  - Add interface to allow the reading of all blk device nodes
  - Allow init to relabel rpcbind sock_file
  - Fix labeling for lastlog and faillog related to logrotate
  - ALlow aeolus_configserver to use TRAM port
  - Add fixes for aeolus_configserver
  - Allow snmpd to connect to snmp port
  - Allow spamd_update to create spamd_var_lib_t directories
  - Allow domains that can read sssd_public_t files to also list the directory
  - Remove miscfiles_read_localization, this is defined for all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-56
changelog:
  - Allow syslogd to request the kernel to load a module
  - Allow syslogd_t to read the network state information
  - Allow xdm_dbusd_t connect to the system DBUS
  - Add support for 7389/tcp port
  - Allow domains to read/write all inherited sockets
  - Allow staff_t to read kmsg
  - Add awstats_purge_apache_log boolean
  - Allow ksysguardproces to read /.config/Trolltech.conf
  - Allow passenger to create and append puppet log files
  - Add puppet_append_log and puppet_create_log interfaces
  - Add puppet_manage_log() interface
  - Allow tomcat domain to search tomcat_var_lib_t
  - Allow pki_tomcat_t to connect to pki_ca ports
  - Allow pegasus_t to have net_admin capability
  - Allow pegasus_t to write /sys/class/net/<interface>/flags
  - Allow mailserver_delivery to manage mail_home_rw_t lnk_files
  - Allow fetchmail to create log files
  - Allow gnomeclock to manage home config in .kde
  - Allow bittlebee to read kernel sysctls
  - Allow logrotate to list /root


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-55
changelog:
  - Fix userhelper_console_role_template()
  - Allow enabling Network Access Point service using blueman
  - Make vmware_host_t as unconfined domain
  - Allow authenticate users in webaccess via squid, using mysql as backend
  - Allow gathers to get various metrics on mounted file systems
  - Allow firewalld to read /etc/hosts
  - Fix cron_admin_role() to make sysadm cronjobs running in the sysadm_t instead of cronjob_t
  - Allow kdumpgui to read/write to zipl.conf
  - Commands needed to get mock to build from staff_t in enforcing mode
  - Allow mdadm_t to manage cgroup files
  - Allow all daemons and systemprocesses to use inherited initrc_tmp_t files
  - dontaudit ifconfig_t looking at fifo_files that are leaked to it
  - Add lableing for Quest Authentication System


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-54
changelog:
  - Fix filetrans interface definitions
  - Dontaudit xdm_t to getattr on BOINC lib files
  - Add systemd_reload_all_services() interface
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes 
  - Only stop mcsuntrustedproc from relableing files
  - Allow accountsd to dbus chat with gdm
  - Allow realmd to getattr on all fs
  - Allow logrotate to reload all services
  - Add systemd unit file for radiusd
  - Allow winbind to create samba pid dir
  - Add labeling for /var/nmbd/unexpected
  - Allow chrome and mozilla plugin to connect to msnp ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-53
changelog:
  - Fix storage_rw_inherited_fixed_disk_dev() to cover also blk_file
  - Dontaudit setfiles reading /dev/random
  - On initial boot gnomeclock is going to need to be set buy gdm
  - Fix tftp_read_content() interface
  - Random apps looking at kernel file systems
  - Testing virt with lxc requiers additional access for virsh_t
  - New allow rules requied for latest libvirt, libvirt talks directly to journald,lxc setup tool needs compromize_kernel,and we need ipc_lock in the container
  - Allow MPD to read /dev/radnom
  - Allow sandbox_web_type to read logind files which needs to read pulseaudio
  - Allow mozilla plugins to read /dev/hpet
  - Add labeling for /var/lib/zarafa-webap
  - Allow BOINC client to use an HTTP proxy for all connections
  - Allow rhsmertd to domain transition to dmidecod
  -  Allow setroubleshootd to send D-Bus msg to ABRT


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-52
changelog:
  - Define usbtty_device_t as a term_tty
  - Allow svnserve to accept a connection
  - Allow xend manage default virt_image_t type
  - Allow prelink_cron_system_t to overide user componant when executing cp
  - Add labeling for z-push
  - Gnomeclock sets the realtime clock
  - Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
  - Allow lxc domains to use /dev/random and /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-51
changelog:
  - Add port defintion for tcp/9000
  - Fix labeling for /usr/share/cluster/checkquorum to label also checkquorum.wdmd
  - Add rules and labeling for $HOME/cache/\.gstreamer-.* directory
  - Add support for CIM provider openlmi-networking which uses NetworkManager dbus API
  - Allow shorewall_t to create netlink_socket
  - Allow krb5admind to block suspend
  - Fix labels on /var/run/dlm_controld /var/log/dlm_controld
  - Allow krb5kdc to block suspend
  - gnomessytemmm_t needs to read /etc/passwd
  - Allow cgred to read all sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-50
changelog:
  - Allow all domains to read /proc/sys/vm/overcommit_memory
  - Make proc_numa_t an MLS Trusted Object
  - Add /proc/numactl support for confined users
  - Allow ssh_t to connect to any port > 1023
  - Add openvswitch domain
  - Pulseaudio tries to create directories in gnome_home_t directories
  - New ypbind pkg wants to search /var/run which is caused by sd_notify
  - Allow NM to read certs on NFS/CIFS using use_nfs_*, use_samba_* booleans
  - Allow sanlock to read /dev/random
  - Treat php-fpm with httpd_t
  - Allow domains that can read named_conf_t to be able to list the directories
  - Allow winbind to create sock files in /var/run/samba


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-49
changelog:
  - Add smsd policy
  - Add support for OpenShift sbin labelin
  - Add boolean to allow virt to use rawip
  - Allow mozilla_plugin to read all file systems with noxattrs support
  - Allow kerberos to write on anon_inodefs fs
  - Additional access required by fenced
  - Add filename transitions for passwd.lock/group.lock
  - UPdate man pages
  - Create coolkey directory in /var/cache with the correct label


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-48
changelog:
  - Fix label on /etc/group.lock
  - Allow gnomeclock to create lnk_file in /etc
  - label /root/.pki as a home_cert_t
  - Add interface to make sure rpcbind.sock is created with the correct label
  - Add definition for new directory /var/lib/os-probe and bootloader wants to read udev rules
  - opendkim should be a part of milter
  - Allow libvirt to set the kernel sched algorythm
  - Allow mongod to read sysfs_t
  - Add authconfig policy
  - Remove calls to miscfiles_read_localization all domains get this
  - Allow virsh_t to read /root/.pki/ content
  - Add label for log directory under /var/www/stickshift


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-47
changelog:
  - Allow getty to setattr on usb ttys
  - Allow sshd to search all directories for sshd_home_t content
  - Allow staff domains to send dbus messages to kdumpgui
  - Fix labels on /etc/.pwd.lock and friends to be passwd_file_t
  - Dontaudit setfiles reading urand
  - Add files_dontaudit_list_tmp() for domains to which we added sys_nice/setsched
  - Allow staff_gkeyringd_t to read /home/$USER/.local/share/keyrings dir
  - Allow systemd-timedated to read /dev/urandom
  - Allow entropyd_t to read proc_t (meminfo)
  - Add unconfined munin plugin
  - Fix networkmanager_read_conf() interface
  - Allow blueman to list /tmp which is needed by sys_nic/setsched
  - Fix label of /etc/mail/aliasesdb-stamp
  - numad is searching cgroups
  - realmd is communicating with networkmanager using dbus
  - Lots of fixes to try to get kdump to work


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-46
changelog:
  - Allow loging programs to dbus chat with realmd
  - Make apache_content_template calling as optional
  - realmd is using policy kit


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-45
changelog:
  - Add new selinuxuser_use_ssh_chroot boolean
  - dbus needs to be able to read/write inherited fixed disk device_t passed through it
  - Cleanup netutils process allow rule
  - Dontaudit leaked fifo files from openshift to ping
  - sanlock needs to read mnt_t lnk files
  - Fail2ban needs to setsched and sys_nice


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-44
changelog:
  - Change default label of all files in /var/run/rpcbind
  - Allow sandbox domains (java) to read hugetlbfs_t
  - Allow awstats cgi content to create tmp files and read apache log files
  - Allow setuid/setgid for cupsd-config
  - Allow setsched/sys_nice pro cupsd-config
  -  Fix /etc/localtime sym link to be labeled locale_t
  - Allow sshd to search postgresql db t since this is a homedir
  - Allow xwindows users to chat with realmd
  - Allow unconfined domains to configure all files and null_device_t service


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-42
changelog:
  - pki is leaking which we dontaudit until a pki code fix
  - Allow setcap for arping
  - Update man pages
  - Add labeling for /usr/sbin/mcollectived
  - pki fixes
  - Allow smokeping to execute fping in the netutils_t domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-41
changelog:
  - Allow mount to relabelfrom unlabeled file systems
  - systemd_logind wants to send and receive messages from devicekit disk over dbus to make connected mouse working
  - Add label to get bin files under libreoffice labeled correctly
  - Fix interface to allow executing of base_ro_file_type
  - Add fixes for realmd
  - Update pki policy
  - Add tftp_homedir boolean
  - Allow blueman sched_setscheduler
  - openshift user domains wants to r/w ssh tcp sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-40
changelog:
  - Additional requirements for disable unconfined module when booting
  - Fix label of systemd script files
  - semanage can use -F /dev/stdin to get input
  - syslog now uses kerberos keytabs
  - Allow xserver to compromise_kernel access
  -  Allow nfsd to write to mount_var_run_t when running the mount command
  - Add filename transition rule for bin_t directories
  - Allow files to read usr_t lnk_files
  - dhcpc wants chown
  - Add support for new openshift labeling
  - Clean up for tunable+optional statements
  - Add labeling for /usr/sbin/mkhomedir_helper
  - Allow antivirus domain to managa amavis spool files
  - Allow rpcbind_t to read passwd 
  - Allow pyzor running as spamc to manage amavis spool


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-39
changelog:
  - Add interfaces to read kernel_t proc info
  - Missed this version of exec_all
  - Allow anyone who can load a kernel module to compromise kernel
  - Add oddjob_dbus_chat to openshift apache policy
  - Allow chrome_sandbox_nacl_t to send signals to itself
  - Add unit file support to usbmuxd_t
  - Allow all openshift domains to read sysfs info
  - Allow openshift domains to getattr on all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-37
changelog:
  - Allow xdm to search all file systems
  - Add interface to allow the config of all files
  - Add rngd policy
  - Remove kgpg as a gpg_exec_t type
  - Allow plymouthd to block suspend
  - Allow systemd_dbus to config any file
  - Allow system_dbus_t to configure all services
  - Allow freshclam_t to read usr_files
  - varnishd requires execmem to load modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-36
changelog:
  - Allow semanage to verify types
  - Allow sudo domain to execute user home files
  - Allow session_bus_type to transition to user_tmpfs_t
  - Add dontaudit caused by yum updates
  - Implement pki policy but not activated


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-35
changelog:
  - tuned wants to getattr on all filesystems
  - tuned needs also setsched. The build is needed for test day


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-34
changelog:
  - Add policy for qemu-qa
  - Allow razor to write own config files
  -  Add an initial antivirus policy to collect all antivirus program
  - Allow qdisk to read usr_t
  - Add additional caps for vmware_host
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Dontaudit leaked files into mozilla_plugin_config_t
  - Allow wdmd to getattr on tmpfs
  - Allow realmd to use /dev/random
  - allow containers to send audit messages
  - Allow root mount any file via loop device with enforcing mls policy
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Make userdom_dontaudit_write_all_ not allow open
  - Allow init scripts to read all unit files
  - Add support for saphostctrl ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-33
changelog:
  - Add kernel_read_system_state to sandbox_client_t
  - Add some of the missing access to kdumpgui
  - Allow systemd_dbusd_t to status the init system
  - Allow vmnet-natd to request the kernel to load a module
  - Allow gsf-office-thum to append .cache/gdm/session.log
  - realmd wants to read .config/dconf/user
  - Firewalld wants sys_nice/setsched
  - Allow tmpreaper to delete mandb cache files
  - Firewalld wants sys_nice/setsched
  - Allow firewalld to perform  a DNS name resolution
  - Allown winbind to read /usr/share/samba/codepages/lowcase.dat
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - Fix authlogin_yubike boolean
  - Extend smbd_selinux man page to include samba booleans
  - Allow dhcpc to execute consoletype
  - Allow ping to use inherited tmp files created in init scripts
  - On full relabel with unconfined domain disabled, initrc was running some chcon's
  - Allow people who delete man pages to delete mandb cache files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-31
changelog:
  - Add new mandb policy
  - ALlow systemd-tmpfiles_t to relabel mandb_cache_t
  - Allow logrotate to start all unit files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-30
changelog:
  - Add fixes for ctbd
  - Allow nmbd to stream connect to ctbd
  - Make cglear_t as nsswitch_domain
  - Fix bogus in interfaces
  - Allow openshift to read/write postfix public pipe
  - Add postfix_manage_spool_maildrop_files() interface
  - stickshift paths have been renamed to openshift
  - gnome-settings-daemon wants to write to /run/systemd/inhibit/ pipes
  - Update man pages, adding ENTRYPOINTS


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-29
changelog:
  -  Add mei_device_t
  - Make sure gpg content in homedir created with correct label
  - Allow dmesg to write to abrt cache files
  - automount wants to search  virtual memory sysctls
  - Add support for hplip logs stored in /var/log/hp/tmp
  - Add labeling for /etc/owncloud/config.php
  - Allow setroubleshoot to send analysys to syslogd-journal
  - Allow virsh_t to interact with new fenced daemon
  - Allow gpg to write to /etc/mail/spamassassiin directories
  - Make dovecot_deliver_t a mail server delivery type
  - Add label for /var/tmp/DNS25


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-27
changelog:
  - Remove init_systemd and init_upstart boolean, Move init_daemon_domain and init_system_domain to use attributes
  - Add attribute to all base os types.  Allow all domains to read all ro base OS types


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-24
changelog:
  - dbus needs to start getty unit files
  - Add interface to allow system_dbusd_t to start the poweroff service
  - xdm wants to exec telepathy apps
  - Allow users to send messages to systemdlogind
  - Additional rules needed for systemd and other boot apps
  - systemd wants to list /home and /boot
  - Allow gkeyringd to write dbus/conf file
  - realmd needs to read /dev/urand
  - Allow readahead to delete /.readahead if labeled root_t, might get created before policy is loaded


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-23
changelog:
  - Fixes to safe more rules
  - Re-write tomcat_domain_template()
  - Fix passenger labeling
  - Allow all domains to read man pages
  - Add ephemeral_port_t to the 'generic' port interfaces
  - Fix the names of postgresql booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-22
changelog:
  - Stop using attributes form netlabel_peer and syslog, auth_use_nsswitch setsup netlabel_peer
  - Move netlable_peer check out of booleans
  - Remove call to recvfrom_netlabel for kerberos call
  - Remove use of attributes when calling syslog call 
  - Move -miscfiles_read_localization to domain.te to save hundreds of allow rules
  - Allow all domains to read locale files.  This eliminates around 1500 allow rules- Cleanup nis_use_ypbind_uncond interface
  - Allow rndc to block suspend
  - tuned needs to modify the schedule of the kernel
  - Allow svirt_t domains to read alsa configuration files
  - ighten security on irc domains and make sure they label content in homedir correctly
  - Add filetrans_home_content for irc files
  - Dontaudit all getattr access for devices and filesystems for sandbox domains
  - Allow stapserver to search cgroups directories
  - Allow all postfix domains to talk to spamd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-21
changelog:
  - Add interfaces to ignore setattr until kernel fixes this to be checked after the DAC check
  - Change pam_t to pam_timestamp_t
  - Add dovecot_domain attribute and allow this attribute block_suspend capability2
  - Add sanlock_use_fusefs boolean
  - numad wants send/recieve msg
  - Allow rhnsd to send syslog msgs
  - Make piranha-pulse as initrc domain
  - Update openshift instances to dontaudit setattr until the kernel is fixed.


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-20
changelog:
  -  Fix auth_login_pgm_domain() interface to allow domains also managed user tmp dirs because of #856880 related to pam_systemd
  - Remove pam_selinux.8 which conflicts with man page owned by the pam package
  - Allow glance-api to talk to mysql
  - ABRT wants to read Xorg.0.log if if it detects problem with Xorg
  - Fix gstreamer filename trans. interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-18
changelog:
  - Allow postalias to read postfix config files
  - Allow man2html to read man pages
  - Allow rhev-agentd to search all mountpoints
  - Allow rhsmcertd to read /dev/random
  - Add tgtd_stream_connect() interface
  - Add cyrus_write_data() interface
  - Dontaudit attempts by sandboxX clients connectiing to the xserver_port_t
  - Add port definition for tcp/81 as http_port_t
  - Fix /dev/twa labeling
  - Allow systemd to read modules config


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-17
changelog:
  - Merge openshift policy
  - Allow xauth to read /dev/urandom
  - systemd needs to relabel content in /run/systemd directories
  - Files unconfined should be able to perform all services on all files
  - Puppet tmp file can be leaked to all domains
  - Dontaudit rhsmcertd-worker to search /root/.local
  - Allow chown capability for zarafa domains
  -  Allow system cronjobs to runcon into openshift domains
  - Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-16
changelog:
  - nmbd wants to create /var/nmbd
  -  Stop transitioning out of anaconda and firstboot, just causes AVC messages
  - Allow clamscan to read /etc files
  - Allow bcfg2 to bind cyphesis port
  - heartbeat should be run as rgmanager_t instead of corosync_t
  - Add labeling for /etc/openldap/certs
  - Add labeling for /opt/sartest directory
  - Make crontab_t as userdom home reader
  - Allow tmpreaper to list admin_home dir
  - Add defition for imap_0 replay cache file
  - Add support for gitolite3
  - Allow virsh_t to send syslog messages
  - allow domains that can read samba content to be able to list the directories also
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd
  - Separate out sandbox from sandboxX policy so we can disable it by default
  - Run dmeventd as lvm_t
  - Mounting on any directory requires setattr and write permissions
  - Fix use_nfs_home_dirs() boolean
  - New labels for pam_krb5
  - Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-15
changelog:
  - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs
  - Allow domains that can read etc_t to read etc_runtime_t 
  - Allow all domains to use inherited tmpfiles


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-14
changelog:
  - Allow realmd to read resolv.conf
  - Add pegasus_cache_t type
  - Label /usr/sbin/fence_virtd as virsh_exec_t
  - Add policy for pkcsslotd
  - Add support for cpglockd
  - Allow polkit-agent-helper to read system-auth-ac
  - telepathy-idle wants to read gschemas.compiled
  - Allow plymouthd to getattr on fs_t
  - Add slpd policy
  - Allow ksysguardproces to read/write config_usr_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-12
changelog:
  - Add file name transitions for ttyACM0
  - spice-vdagent(d)'s are going to log over to syslog
  - Add sensord policy
  - Add more fixes for passenger policy related to puppet
  - Allow wdmd to create wdmd_tmpfs_t
  - Fix labeling for /var/run/cachefilesd\.pid
  - Add thumb_tmpfs_t files type


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-11
changelog:
  - Allow svirt domains to manage the network since this is containerized
  - Allow svirt_lxc_net_t to send audit messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-10
changelog:
  - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working
  - Allow dlm_controld to execute dlm_stonith labeled as bin_t
  - Allow GFS2 working on F17
  - Abrt needs to execute dmesg
  - Allow jockey to list the contents of modeprobe.d
  - Add policy for lightsquid as squid_cron_t
  - Mailscanner is creating files and directories in /tmp
  - dmesg is now reading /dev/kmsg
  - Allow xserver to communicate with secure_firmware
  - Allow fsadm tools (fsck) to read /run/mount contnet
  - Allow sysadm types to read /dev/kmsg
  -


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-9
changelog:
  - Allow postfix, sssd, rpcd to block_suspend
  - udev seems to need secure_firmware capability
  - Allow virtd to send dbus messages to firewalld so it can configure the firewall


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-8
changelog:
  - Fix labeling of content in /run created by virsh_t
  - Allow condor domains to read kernel sysctls
  - Allow condor_master to connect to amqp
  - Allow thumb drives to create shared memory and semaphores
  - Allow abrt to read mozilla_plugin config files
  - Add labels for lightsquid
  - Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow
  - dovecot_auth_t uses ldap for user auth
  - Allow domains that can read dhcp_etc_t to read lnk_files
  - Add more then one watchdog device
  - Allow useradd_t to manage etc_t files so it can rename it and edit them
  - Fix invalid class dir should be fifo_file
  - Move /run/blkid to fsadm and make sure labeling is correct


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-7
changelog:
  - Fix bogus regex found by eparis
  - Fix manage run interface since lvm needs more access
  - syslogd is searching cgroups directory
  - Fixes to allow virt-sandbox-service to manage lxc var run content


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-6
changelog:
  - Fix Boolean settings
  - Add new libjavascriptcoregtk as textrel_shlib_t
  - Allow xdm_t to create xdm_home_t directories
  - Additional access required for systemd
  - Dontaudit mozilla_plugin attempts to ipc_lock
  - Allow tmpreaper to delete unlabeled files
  - Eliminate screen_tmp_t and allow it to manage user_tmp_t
  - Dontaudit mozilla_plugin_config_t to append to leaked file descriptors
  - Allow web plugins to connect to the asterisk ports
  - Condor will recreate the lock directory if it does not exist
  - Oddjob mkhomedir needs to connectto user processes
  - Make oddjob_mkhomedir_t a userdom home manager


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-5
changelog:
  - Put placeholder back in place for proper numbering of capabilities
  - Systemd also configures init scripts


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-4
changelog:
  - Fix ecryptfs interfaces
  - Bootloader seems to be trolling around /dev/shm and /dev
  - init wants to create /etc/systemd/system-update.target.wants
  - Fix systemd_filetrans call to move it out of tunable
  - Fix up policy to work with systemd userspace manager
  - Add secure_firmware capability and remove bogus epolwakeup
  - Call seutil_*_login_config interfaces where should be needed
  - Allow rhsmcertd to send signal to itself
  - Allow thin domains to send signal to itself
  - Allow Chrome_ChildIO to read dosfs_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2
changelog:
  - Add new type selinux_login_config_t for /etc/selinux/<type>/logins/
  - Additional fixes for seutil_manage_module_store()
  - dbus_system_domain() should be used with optional_policy
  - Fix svirt to be allowed to use fusefs file system
  - Allow login programs to read /run/ data created by systemd_login
  - sssd wants to write /etc/selinux/<policy>/logins/ for SELinux PAM module
  - Fix svirt to be allowed to use fusefs file system
  - Allow piranha domain to use nsswitch
  - Sanlock needs to send Kill Signals to non root processes
  - Pulseaudio wants to execute /run/user/PID/.orc


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-1
changelog:
  - Fix saslauthd when it tries to read /etc/shadow
  - Label gnome-boxes as a virt homedir
  - Need to allow svirt_t ability to getattr on nfs_t file systems
  - Update sanlock policy to solve all AVC's
  - Change confined users can optionally manage virt content
  - Handle new directories under ~/.cache
  - Add block suspend to appropriate domains
  - More rules required for containers
  - Allow login programs to read /run/ data created by systemd_logind
  - Allow staff users to run svirt_t processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-13
changelog:
  - Add systemd_logind_inhibit_var_run_t attribute
  - Remove corenet_all_recvfrom_unlabeled() for non-contrib policies because we moved it to domain.if for all domain_type
  - Add interface for mysqld to dontaudit signull to all processes
  - Label new /var/run/journal directory correctly
  - Allow users to inhibit suspend via systemd
  - Add new type for the /var/run/inhibit directory
  - Add interface to send signull to systemd_login so avahi can send them
  - Allow systemd_passwd to send syslog messages
  - Remove corenet_all_recvfrom_unlabeled() calling fro policy files
  - Allow       editparams.cgi running as httpd_bugzilla_script_t to read /etc/group
  - Allow smbd to read cluster config
  - Add additional labeling for passenger
  - Allow dbus to inhibit suspend via systemd
  - Allow avahi to send signull to systemd_login


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12
changelog:
  - Add interface to dontaudit getattr access on sysctls
  - Allow sshd to execute /bin/login
  - Looks like xdm is recreating the xdm directory in ~/.cache/ on login
  - Allow syslog to use the leaked kernel_t unix_dgram_socket from system-jounald
  -  Fix semanage to work with unconfined domain disabled on F18
  - Dontaudit attempts by mozilla plugins to getattr on all kernel sysctls
  - Virt seems to be using lock files
  - Dovecot seems to be searching directories of every mountpoint
  - Allow jockey to read random/urandom, execute shell and install third-party drivers
  - Add aditional params to allow cachedfiles to manage its content
  - gpg agent needs to read /dev/random
  - The kernel hands an svirt domains /SYSxxxxx which is a tmpfs that httpd wants to read and write
  - Add a bunch of dontaudit rules to quiet svirt_lxc domains
  - Additional perms needed to run svirt_lxc domains
  - Allow cgclear to read cgconfig
  - Allow sys_ptrace capability for snmp
  - Allow freshclam to read /proc
  - Allow procmail to manage /home/user/Maildir content
  - Allow NM to execute wpa_cli
  - Allow amavis to read clamd system state
  - Regenerate man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-10
changelog:
  - Add realmd and stapserver policies
  - Allow useradd to manage stap-server lib files
  - Tighten up capabilities for confined users
  - Label /etc/security/opasswd as shadow_t
  - Add label for /dev/ecryptfs
  - Allow condor_startd_t to start sshd with the ranged
  - Allow lpstat.cups to read fips_enabled file
  - Allow pyzor running as spamc_t to create /root/.pyzor directory
  - Add labelinf for amavisd-snmp init script
  - Add support for amavisd-snmp
  - Allow fprintd sigkill self
  - Allow xend (w/o libvirt) to start virtual machines
  - Allow aiccu to read /etc/passwd
  - Allow condor_startd to Make specified domain MCS trusted for setting any category set for the processes it executes
  - Add condor_startd_ranged_domtrans_to() interface
  - Add ssd_conf_t for /etc/sssd
  - accountsd needs to fchown some files/directories
  - Add ICACLient and zibrauserdata as mozilla_filetrans_home_content
  - SELinux reports afs_t needs dac_override to read /etc/mtab, even though everything works, adding dontaudit
  - Allow xend_t to read the /etc/passwd file


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-9
changelog:
  - Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
  - Add init_access_check() interface
  - Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
  - Allow tcpdump to create a netlink_socket
  - Label newusers like useradd
  - Change xdm log files to be labeled xdm_log_t
  - Allow sshd_t with privsep to work in MLS
  - Allow freshclam to update databases thru HTTP proxy
  - Allow s-m-config to access check on systemd
  - Allow abrt to read public files by default
  - Fix amavis_create_pid_files() interface
  - Add labeling and filename transition for dbomatic.log
  - Allow system_dbusd_t to stream connect to bluetooth, and use its socket
  - Allow amavisd to execute fsav
  - Allow tuned to use sys_admin and sys_nice capabilities
  - Add php-fpm policy from Bryan
  - Add labeling for aeolus-configserver-thinwrapper
  - Allow thin domains to execute shell
  - Fix gnome_role_gkeyringd() interface description
  - Lot of interface fixes
  - Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
  - Allow OpenMPI job to use kerberos
  - Make deltacloudd_t as nsswitch_domain
  - Allow xend_t to run lsscsi
  - Allow qemu-dm running as xend_t to create tun_socket
  - Add labeling for /opt/brother/Printers(.*/)?inf
  - Allow jockey-backend to read pyconfig-64.h labeled as usr_t
  - Fix clamscan_can_scan_system boolean
  - Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8
changelog:
  - initrc is calling exportfs which is not confined so it attempts to read nfsd_files
  - Fixes for passenger running within openshift.
  - Add labeling for all tomcat6 dirs
  - Add support for tomcat6
  - Allow cobblerd to read /etc/passwd
  - Allow jockey to read sysfs and and execute binaries with bin_t
  - Allow thum to use user terminals
  - Allow cgclear to read cgconfig config files
  - Fix bcf2g.fc
  - Remove sysnet_dns_name_resolve() from policies where auth_use_nsswitch() is used for other domains
  - Allow dbomatic to execute ruby
  - abrt_watch_log should be abrt_domain
  - Allow mozilla_plugin to connect to gatekeeper port


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7
changelog:
  - add ptrace_child access to process
  - remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
  - Allow boinc domains to manage boinc_lib_t lnk_files
  - Add support for boinc-client.service unit file
  - Add support for boinc.log
  - Allow mozilla_plugin execmod on mozilla home files if allow_ex
  - Allow dovecot_deliver_t to read dovecot_var_run_t
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Move thin policy out from cloudform.pp and add a new thin poli
  - pacemaker needs to communicate with corosync streams
  - abrt is now started on demand by dbus
  - Allow certmonger to talk directly to Dogtag servers
  - Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
  - Allow mozila_plugin to execute gstreamer home files
  - Allow useradd to delete all file types stored in the users hom
  - rhsmcertd reads the rpm database
  - Add support for lightdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6
changelog:
  - Add tomcat policy
  - Remove pyzor/razor policy
  - rhsmcertd reads the rpm database
  - Dontaudit  thumb to setattr on xdm_tmp dir
  - Allow wicd to execute ldconfig in the networkmanager_t domain
  - Add /var/run/cherokee\.pid labeling
  - Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
  - Allow postfix-master to r/w pipes other postfix domains
  - Allow snort to create netlink_socket
  - Add kdumpctl policy
  - Allow firstboot to create tmp_t files/directories
  - /usr/bin/paster should not be labeled as piranha_exec_t
  - remove initrc_domain from tomcat
  - Allow ddclient to read /etc/passwd
  - Allow useradd to delete all file types stored in the users homedir
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
  - Transition xauth files within firstboot_tmp_t
  - Fix labeling of /run/media to match /media
  - Label all lxdm.log as xserver_log_t
  - Add port definition for mxi port
  - Allow local_login_t to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5
changelog:
  - apcupsd needs to read /etc/passwd
  - Sanlock allso sends sigkill
  - Allow glance_registry to connect to the mysqld port
  - Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
  - Allow firefox plugins/flash to connect to port 1234
  - Allow mozilla plugins to delete user_tmp_t files
  - Add transition name rule for printers.conf.O
  - Allow virt_lxc_t to read urand
  - Allow systemd_loigind to list gstreamer_home_dirs
  - Fix labeling for /usr/bin
  - Fixes for cloudform services
    * support FIPS
  - Allow polipo to work as web caching
  - Allow chfn to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4
changelog:
  - Add support for ecryptfs
    * ecryptfs does not support xattr
    * we need labeling for HOMEDIR
  - Add policy for (u)mount.ecryptfs*
  - Fix labeling of kerbero host cache files, allow rpc.svcgssd to manage host cache
  - Allow dovecot to manage Maildir content, fix transitions to Maildir
  - Allow postfix_local to transition to dovecot_deliver
  - Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
  - Cleanup interface definitions
  - Allow apmd to change with the logind daemon
  - Changes required for sanlock in rhel6
  - Label /run/user/apache as httpd_tmp_t
  - Allow thumb to use lib_t as execmod if boolean turned on
  - Allow squid to create the squid directory in /var with the correct labe
  - Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
  - Allow virtd to exec xend_exec_t without transition
  - Allow virtd_lxc_t to unmount all file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3
changelog:
  - PolicyKit path has changed
  - Allow httpd connect to dirsrv socket
  - Allow tuned to write generic kernel sysctls
  - Dontaudit logwatch to gettr on /dev/dm-2
  - Allow policykit-auth to manage kerberos files
  - Make condor_startd and rgmanager as initrc domain
  - Allow virsh to read /etc/passwd
  - Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
  - xdm now needs to execute xsession_exec_t
  - Need labels for /var/lib/gdm
  - Fix files_filetrans_named_content() interface
  - Add new attribute - initrc_domain
  - Allow systemd_logind_t to signal, signull, sigkill all processes
  - Add filetrans rules for etc_runtime files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1
changelog:
  - Mass merge with upstream
    * new policy topology to include contrib policy modules
    * we have now two base policy patches


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128
changelog:
  - Fix description of authlogin_nsswitch_use_ldap
  - Fix transition rule for rhsmcertd_t needed for RHEL7
  - Allow useradd to list nfs state data
  - Allow openvpn to manage its log file and directory
  - We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
  - Allow thumb to use nvidia devices
  -  Allow local_login to create user_tmp_t files for kerberos
  - Pulseaudio needs to read systemd_login /var/run content
  - virt should only transition named system_conf_t config files
  - Allow  munin to execute its plugins
  - Allow nagios system plugin to read /etc/passwd
  - Allow plugin to connect to soundd port
  - Fix httpd_passwd to be able to ask passwords
  - Radius servers can use ldap for backing store
  - Seems to need to mount on /var/lib for xguest polyinstatiation to work.
  - Allow systemd_logind to list the contents of gnome keyring
  - VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
  - Add policy for isns-utils


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127
changelog:
  - Add policy for subversion daemon
  - Allow boinc to read passwd
  - Allow pads to read kernel network state
  - Fix man2html interface for sepolgen-ifgen
  - Remove extra /usr/lib/systemd/system/smb
  - Remove all /lib/systemd and replace with /usr/lib/systemd
  - Add policy for man2html
  - Fix the label of kerberos_home_t to krb5_home_t
  - Allow mozilla plugins to use Citrix
  - Allow tuned to read /proc/sys/kernel/nmi_watchdog
  - Allow tune /sys options via systemd's tmpfiles.d "w" type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126
changelog:
  - Dontaudit lpr_t to read/write leaked mozilla tmp files
  - Add file name transition for .grl-podcasts directory
  - Allow corosync to read user tmp files
  - Allow fenced to create snmp lib dirs/files
  - More fixes for sge policy
  - Allow mozilla_plugin_t to execute any application
  - Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
  - Allow mongod to read system state information
  -  Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
  - Allow polipo to manage polipo_cache dirs
  - Add jabbar_client port to mozilla_plugin_t
  - Cleanup procmail policy
  - system bus will pass around open file descriptors on files that do not have labels on them
  - Allow l2tpd_t to read system state
  - Allow tuned to run ls /dev
  - Allow sudo domains to read usr_t files
  - Add label to machine-id 
  - Fix corecmd_read_bin_symlinks cut and paste error


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125
changelog:
  - Fix pulseaudio port definition
  - Add labeling for condor_starter
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Allow prelink_cron_system_t to getpw calls
  - Allow sudo domains to manage kerberos rcache files
  - Allow user_mail_domains to work with courie
  - Port definitions necessary for running jboss apps within openshift
  -  Add support for openstack-nova-metadata-api
  - Add support for nova-console*
  - Add support for openstack-nova-xvpvncproxy
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd
  - Fix auth_role() interface
  - Allow numad to read sysfs
  - Allow matahari-rpcd to execute shell
  - Add label for ~/.spicec
  - xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
  - Devicekit_disk wants to read the logind sessions file when writing a cd
  - Add fixes for condor to make condor jobs working correctly
  - Change label of /var/log/rpmpkgs to cron_log_t
  - Access requires to allow systemd-tmpfiles --create to work.
  - Fix obex to be a user application started by the session bus.
  - Add additional filename trans rules for kerberos
  - Fix /var/run/heartbeat labeling
  - Allow apps that are managing rcache to file trans correctly
  - Allow openvpn to authenticate against ldap server
  - Containers need to listen to network starting and stopping events


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123
changelog:
  - Fix zarafa labeling
  - Allow guest_t to fix labeling
  - corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - add lxc_contexts
  - Allow accountsd to read /proc
  - Allow restorecond to getattr on all file sytems
  - tmpwatch now calls getpw
  - Allow apache daemon to transition to pwauth domain
  - Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
  - The obex socket seems to be a stream socket
  - dd label for /var/run/nologin


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122
changelog:
  - Allow jetty running as httpd_t to read hugetlbfs files
  - Allow sys_nice and setsched for rhsmcertd
  - Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
  - Allow setfiles to append to xdm_tmp_t
  - Add labeling for /export as a usr_t directory
  - Add labels for .grl files created by gstreamer


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121
changelog:
  - Add labeling for /usr/share/jetty/bin/jetty.sh
  - Add jetty policy which contains file type definitios
  - Allow jockey to use its own fifo_file and make this the default for all domains
  - Allow mozilla_plugins to use spice (vnc_port/couchdb)
  - asterisk wants to read the network state
  - Blueman now uses /var/lib/blueman- Add label for nodejs_debug
  - Allow mozilla_plugin_t to create ~/.pki directory and content


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120
changelog:
  - Add clamscan_can_scan_system boolean
  - Allow mysqld to read kernel network state
  - Allow sshd to read/write condor lib files
  - Allow sshd to read/write condor-startd tcp socket
  - Fix description on httpd_graceful_shutdown
  - Allow glance_registry to communicate with mysql
  - dbus_system_domain is using systemd to lauch applications
  - add interfaces to allow domains to send kill signals to user mail agents
  - Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
  - Lots of new access required for secure containers
  - Corosync needs sys_admin capability
  - ALlow colord to create shm
  - .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
  - Add boolean to control whether or not mozilla plugins can create random content in the users homedir
  -  Add new interface to allow domains to list msyql_db directories, needed for libra
  - shutdown has to be allowed to delete etc_runtime_t
  - Fail2ban needs to read /etc/passwd
  -  Allow ldconfig to create /var/cache/ldconfig
  - Allow tgtd to read hardware state information
  - Allow collectd to create packet socket
  - Allow chronyd to send signal to itself
  - Allow collectd to read /dev/random
  - Allow collectd to send signal to itself
  - firewalld needs to execute restorecon
  - Allow restorecon and other login domains to execute restorecon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119
changelog:
  - Allow logrotate to getattr on systemd unit files
  - Add support for tor systemd unit file
  - Allow apmd to create /var/run/pm-utils with the correct label
  - Allow l2tpd to send sigkill to pppd
  - Allow pppd to stream connect to l2tpd
  - Add label for scripts in /etc/gdm/
  - Allow systemd_logind_t to ignore mcs constraints on sigkill
  - Fix files_filetrans_system_conf_named_files() interface
  - Add labels for /usr/share/wordpress/wp-includes/*.php
  - Allow cobbler to get SELinux mode and booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118
changelog:
  - Add unconfined_execmem_exec_t as an alias to bin_t
  - Allow fenced to read snmp var lib files, also allow it to read usr_t
  - ontaudit access checks on all executables from mozilla_plugin
  - Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
  - Allow systemd_tmpfiles_t to getattr all pipes and sockets
  - Allow glance-registry to send system log messages
  - semanage needs to manage mock lib files/dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117
changelog:
  - Add policy for abrt-watch-log
  - Add definitions for jboss_messaging ports
  - Allow systemd_tmpfiles to manage printer devices
  - Allow oddjob to use nsswitch
  - Fix labeling of log files for postgresql
  - Allow mozilla_plugin_t to execmem and execstack by default
  - Allow firewalld to execute shell
  - Fix /etc/wicd content files to get created with the correct label
  - Allow mcelog to exec shell
  - Add ~/.orc as a gstreamer_home_t
  - /var/spool/postfix/lib64 should be labeled lib_t
  - mpreaper should be able to list all file system labeled directories
  - Add support for apache to use openstack
  - Add labeling for /etc/zipl.conf and zipl binary
  - Turn on allow_execstack and turn off telepathy transition for final release


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116
changelog:
  - More access required for virt_qmf_t
  - Additional assess required for systemd-logind to support multi-seat
  - Allow mozilla_plugin to setrlimit
  - Revert changes to fuse file system to stop deadlock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115
changelog:
  - Allow condor domains to connect to ephemeral ports
  - More fixes for condor policy
  - Allow keystone to stream connect to mysqld
  - Allow mozilla_plugin_t to read generic USB device to support GPS devices
  - Allow thum to file name transition gstreamer home content
  - Allow thum to read all non security files
  - Allow glance_api_t to connect to ephemeral ports
  - Allow nagios plugins to read /dev/urandom
  - Allow syslogd to search postfix spool to support postfix chroot env
  - Fix labeling for /var/spool/postfix/dev
  - Allow wdmd chown
  - Label .esd_auth as pulseaudio_home_t
  - Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114
changelog:
  - Add support for clamd+systemd
  - Allow fresclam to execute systemctl to handle clamd
  - Change labeling for /usr/sbin/rpc.ypasswd.env
  	- Allow yppaswd_t to execute yppaswd_exec_t
  	- Allow yppaswd_t to read /etc/passwd
  - Gnomekeyring socket has been moved to /run/user/USER/
  - Allow samba-net to connect to ldap port
  - Allow signal for vhostmd
  - allow mozilla_plugin_t to read user_home_t socket
  - New access required for secure Linux Containers
  - zfs now supports xattrs
  - Allow quantum to execute sudo and list sysfs
  - Allow init to dbus chat with the firewalld
  - Allow zebra to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113
changelog:
  - Allow svirt_t to create content in the users homedir under ~/.libvirt
  - Fix label on /var/lib/heartbeat
  - Allow systemd_logind_t to send kill signals to all processes started by a user
  - Fuse now supports Xattr Support


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112
changelog:
  - upowered needs to setsched on the kernel
  - Allow mpd_t to manage log files
  - Allow xdm_t to create /var/run/systemd/multi-session-x
  - Add rules for missedfont.log to be used by thumb.fc
  - Additional access required for virt_qmf_t
  - Allow dhclient to dbus chat with the firewalld
  - Add label for lvmetad
  - Allow systemd_logind_t to remove userdomain sock_files
  - Allow cups to execute usr_t files
  - Fix labeling on nvidia shared libraries
  - wdmd_t needs access to sssd and /etc/passwd
  - Add boolean to allow ftp servers to run in passive mode
  - Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
  - Fix using httpd_use_fusefs
  - Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111
changelog:
  - Rename rdate port to time port, and allow gnomeclock to connect to it
  - We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
  - /etc/auto.* should be labeled bin_t
  - Add httpd_use_fusefs boolean
  - Add fixes for heartbeat
  - Allow sshd_t to signal processes that it transitions to
  - Add condor policy
  - Allow svirt to create monitors in ~/.libvirt
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Lot of fixes for cfengine


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110
changelog:
  - /var/run/postmaster.* labeling is no longer needed
  - Alllow drbdadmin to read /dev/urandom
  - l2tpd_t seems to use ptmx
  - group+ and passwd+ should be labeled as /etc/passwd
  - Zarafa-indexer is a socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109
changelog:
  - Ensure lastlog is labeled correctly
  - Allow accountsd to read /proc data about gdm
  - Add fixes for tuned
  - Add bcfg2 fixes which were discovered during RHEL6 testing
  - More fixes for gnome-keyring socket being moved
  - Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
  - Fix description for files_dontaudit_read_security_files() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108
changelog:
  - Add new policy and man page for bcfg2
  - cgconfig needs to use getpw calls
  - Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
  - gnome-keyring wants to create a directory in cache_home_t
  - sanlock calls getpw


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107
changelog:
  - Add numad policy and numad man page
  - Add fixes for interface bugs discovered by SEWatch
  - Add /tmp support for squid
  - Add fix for #799102
       * change default labeling for /var/run/slapd.* sockets
  - Make thumb_t as userdom_home_reader
  - label /var/lib/sss/mc same as pubconf, so getpw domains can read it
  - Allow smbspool running as cups_t to stream connect to nmbd
  - accounts needs to be able to execute passwd on behalf of users
  - Allow systemd_tmpfiles_t to delete boot flags
  - Allow dnssec_trigger to connect to apache ports
  - Allow gnome keyring to create sock_files in ~/.cache
  - google_authenticator is using .google_authenticator
  - sandbox running from within firefox is exposing more leaks
  - Dontaudit thumb to read/write /dev/card0
  - Dontaudit getattr on init_exec_t for gnomeclock_t
  - Allow certmonger to do a transition to certmonger_unconfined_t
  - Allow dhcpc setsched which is caused by nmcli
  - Add rpm_exec_t for /usr/sbin/bcfg2
  - system cronjobs are sending dbus messages to systemd_logind
  - Thumnailers read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106
changelog:
  - Allow auditctl getcap
  - Allow vdagent to use libsystemd-login
  - Allow abrt-dump-oops to search /etc/abrt
  - Got these avc's while trying to print a boarding pass from firefox
  - Devicekit is now putting the media directory under /run/media
  - Allow thumbnailers to create content in ~/.thumbails directory
  - Add support for proL2TPd by Dominick Grift
  - Allow all domains to call getcap
  - wdmd seems to get a random chown capability check that it does not need
  - Allow vhostmd to read kernel sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105
changelog:
  - Allow chronyd to read unix
  - Allow hpfax to read /etc/passwd
  - Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
  - Allow rpcd to read quota_db_t
  - Update to man pages to match latest policy
  - Fix bug in jockey interface for sepolgen-ifgen
  - Add initial svirt_prot_exec_t policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103
changelog:
  - Add a new type for /etc/firewalld and allow firewalld to write to this directory
  - Add definition for ~/Maildir, and allow mail deliver domains to write there
  - Allow polipo to run from a cron job
  - Allow rtkit to schedule wine processes
  - Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
  - Allow users domains to send signals to consolehelper domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102
changelog:
  - More fixes for boinc policy
  - Allow polipo domain to create its own cache dir and pid file
  - Add systemctl support to httpd domain
  - Add systemctl support to polipo, allow NetworkManager to manage the service
  - Add policy for jockey-backend
  - Add support for motion daemon which is now covered by zoneminder policy
  - Allow colord to read/write motion tmpfs
  - Allow vnstat to search through var_lib_t directories
  - Stop transitioning to quota_t, from init an sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100
changelog:
  - Add additional fixes for icmp nagios plugin
  - Allow cron jobs to open fifo_files from cron, since service script opens /dev/stdin
  - Add certmonger_unconfined_exec_t
  - Make sure tap22 device is created with the correct label
  - Allow staff users to read systemd unit files
  - Merge in previously built policy
  - Arpwatch needs to be able to start netlink sockets in order to start
  - Allow cgred_t to sys_ptrace to look at other DAC Processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99
changelog:
  - Back port some of the access that was allowed in nsplugin_t
  - Add definitiona for couchdb ports
  - Allow nagios to use inherited users ttys
  - Add git support for mock
  - Allow inetd to use rdate port
  - Add own type for rdate port
  - Allow samba to act as a portmapper
  - Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
  - New fixes needed for samba4
  - Allow apps that use lib_t to read lib_t symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98
changelog:
  - Add policy for nove-cert
  - Add labeling for nova-openstack  systemd unit files
  - Add policy for keystoke


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97
changelog:
  - Fix man pages fro domains
  - Add man pages for SELinux users and roles
  - Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
  - Add policy for matahari-rpcd
  - nfsd executes mount command on restart
  - Matahari domains execute renice and setsched
  - Dontaudit leaked tty in mozilla_plugin_config
  - mailman is changing to a per instance naming
  - Add 7600 and 4447 as jboss_management ports
  - Add fixes for nagios event handlers
  - Label httpd.event as httpd_exec_t, it is an apache daemon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96
changelog:
  - Add labeling for /var/spool/postfix/dev/log
  - NM reads sysctl.conf
  - Iscsi log file context specification fix
  -  Allow mozilla plugins to send dbus messages to user domains that transition to it
  - Allow mysql to read the passwd file
  - Allow mozilla_plugin_t to create mozilla home dirs in user homedir
  - Allow deltacloud to read kernel sysctl
  - Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
  - Allow postgresql_t to connectto itself
  - Add login_userdomain attribute for users which can log in using terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95
changelog:
  - Allow sysadm_u to reach system_r by default #784011
  - Allow nagios plugins to use inherited user terminals
  - Razor labeling is not used no longer
  - Add systemd support for matahari
  - Add port_types to man page, move booleans to the top, fix some english
  - Add support for matahari-sysconfig-console
  - Clean up matahari.fc
  - Fix matahari_admin() interfac
  - Add labels for/etc/ssh/ssh_host_*.pub keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94
changelog:
  - Allow ksysguardproces to send system log msgs
  - Allow  boinc setpgid and signull
  - Allow xdm_t to sys_ptrace to run pidof command
  - Allow smtpd_t to manage spool files/directories and symbolic links
  - Add labeling for jetty
  - Needed changes to get unbound/dnssec to work with openswan


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93
changelog:
  - Add user_fonts_t alias xfs_tmp_t
  - Since depmod now runs as insmod_t we need to write to kernel_object_t
  - Allow firewalld to dbus chat with networkmanager
  - Allow qpidd to connect to matahari ports
  - policykit needs to read /proc for uses not owned by it
  - Allow systemctl apps to connecto the init stream


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90
changelog:
  - Add proxy class and read access for gssd_proxy
  - Separate out the sharing public content booleans
  - Allow certmonger to execute a script and send signals to  apache and dirsrv to reload the certificate
  -  Add label transition for gstream-0.10 and 12
  - Add booleans to allow rsync to share nfs and cifs file sytems
  - chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
  - Fix filename transitions for cups files
  - Allow denyhosts to read "unix"
  - Add file name transition for locale.conf.new
  - Allow boinc projects to gconf config files
  - sssd needs to be able to increase the socket limit under certain loads
  - sge_execd needs to read /etc/passwd
  - Allow denyhost to check network state
  - NetworkManager needs to read sessions data
  - Allow denyhost to check network state
  - Allow xen to search virt images directories
  - Add label for /dev/megaraid_sas_ioctl_node
  - Add autogenerated man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-89
changelog:
  - Allow boinc project to getattr on fs
  - Allow init to execute initrc_state_t
  - rhev-agent package was rename to ovirt-guest-agent
  - If initrc_t creates /etc/local.conf then we need to make sure it is labeled correctly
  - sytemd writes content to /run/initramfs and executes it on shutdown
  - kdump_t needs to read /etc/mtab, should be back ported to F16
  - udev needs to load kernel modules in early system boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-88
changelog:
  - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
  - Add additional systemd interfaces which are needed fro *_admin interfaces
  - Fix bind_admin() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87
changelog:
  - Allow firewalld to read urand
  - Alias java, execmem_mono to bin_t to allow third parties
  - Add label for kmod
  - /etc/redhat-lsb contains binaries
  - Add boolean to allow gitosis to send mail
  - Add filename transition also for "event20"
  - Allow systemd_tmpfiles_t to delete all file types
  - Allow collectd to ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86
changelog:
  - make consoletype_exec optional, so we can remove consoletype policy
  - remove unconfined_permisive.patch
  - Allow openvpn_t to inherit user home content and tmp content
  - Fix dnssec-trigger labeling
  - Turn on obex policy for staff_t
  - Pem files should not be secret
  - Add lots of rules to fix AVC's when playing with containers
  - Fix policy for dnssec
  - Label ask-passwd directories correctly for systemd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-85
changelog:
  - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
  - fuse file system is now being mounted in /run/user
  - systemd_logind is sending signals to processes that are dbus messaging with it
  - Add support for winshadow port and allow iscsid to connect to this port
  - httpd should be allowed to bind to the http_port_t udp socket
  - zarafa_var_lib_t can be a lnk_file
  - A couple of new .xsession-errors files
  - Seems like user space and login programs need to read logind_sessions_files
  - Devicekit disk seems to be being launched by systemd
  - Cleanup handling of setfiles so most of rules in te file
  - Correct port number for dnssec
  - logcheck has the home dir set to its cache


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-83
changelog:
  - Add new sysadm_secadm.pp module
  	* contains secadm definition for sysadm_t
  - Move user_mail_domain access out of the interface into the te file
  - Allow httpd_t to create httpd_var_lib_t directories as well as files
  - Allow snmpd to connect to the ricci_modcluster stream
  - Allow firewalld to read /etc/passwd
  - Add auth_use_nsswitch for colord
  - Allow smartd to read network state
  - smartdnotify needs to read /etc/group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82
changelog:
  - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
  - lxdm startup scripts should be labeled bin_t, so confined users will work
  - mcstransd now creates a pid, needs back port to F16
  - qpidd should be allowed to connect to the amqp port
  - Label devices 010-029 as usb devices
  - ypserv packager says ypserv does not use tmp_t so removing selinux policy types
  - Remove all ptrace commands that I believe are caused by the kernel/ps avcs
  - Add initial Obex policy
  - Add logging_syslogd_use_tty boolean
  - Add polipo_connect_all_unreserved bolean
  - Allow zabbix to connect to ftp port
  - Allow systemd-logind to be able to switch VTs
  - Allow apache to communicate with memcached through a sock_file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80
changelog:
  - Add zabbix_can_network boolean
  - Add httpd_can_connect_zabbix boolean
  - Prepare file context labeling for usrmove functions
  - Allow system cronjobs to read kernel network state
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow corosync to read and write to qpidd shared mem
  -  mozilla_plugin is trying to run pulseaudio 
  - Fixes for new sshd patch for running priv sep domains as the users context
  - Turn off dontaudit rules when turning on allow_ypbind
  - udev now reads /etc/modules.d directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79
changelog:
  - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
  - Cups exchanges dbus messages with init
  - udisk2 needs to send syslog messages
  - certwatch needs to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77
changelog:
  - Treat Bip with bitlbee policy
        * Bip is an IRC proxy
  - Add port definition for interwise port
  - Add support for ipa_memcached socket
  - systemd_jounald needs to getattr on all processes
  - mdadmin fixes
       * uses getpw
  - amavisd calls getpwnam()
  - denyhosts calls getpwall()


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76
changelog:
  - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
  - bluetooth says they do not use /tmp and want to remove the type
  - Allow init to transition to colord
  - Mongod needs to read /proc/sys/vm/zone_reclaim_mode
  - Allow postfix_smtpd_t to connect to spamd
  - Add boolean to allow ftp to connect to all ports > 1023
  - Allow sendmain to write to inherited dovecot tmp files
  - setroubleshoot needs to be able to execute rpm to see what version of packages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-75
changelog:
  - Merge systemd patch
  - systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
  - Allow deltacloudd dac_override, setuid, setgid  caps
  - Allow aisexec to execute shell
  - Add use_nfs_home_dirs boolean for ssh-keygen


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-74
changelog:
  - Add labeling for /var/run/systemd/journal/syslog
  - libvirt sends signals to ifconfig
  - Allow domains that read logind session files to list them


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73
changelog:
  - Fixed destined form libvirt-sandbox
  - Allow apps that list sysfs to also read sympolicy links in this filesystem
  - Add ubac_constrained rules for chrome_sandbox
  - Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
  - Allow postgresql to be executed by the caller
  - Standardize interfaces of daemons 
  - Add new labeling for mm-handler
  - Allow all matahari domains to read network state and etc_runtime_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
changelog:
  - New fix for seunshare, requires seunshare_domains to be able to mounton /
  - Allow systemctl running as logrotate_t to connect to private systemd socket
  - Allow tmpwatch to read meminfo
  - Allow rpc.svcgssd to read supported_krb5_enctype
  - Allow zarafa domains to read /dev/random and /dev/urandom
  - Allow snmpd to read dev_snmp6
  - Allow procmail to talk with cyrus
  - Add fixes for check_disk and check_nagios plugins


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71
changelog:
  - default trans rules for Rawhide policy
  -  Make sure sound_devices controlC* are labeled correctly on creation
  - sssd now needs sys_admin
  - Allow snmp to read all proc_type
  - Allow to setup users homedir with quota.group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-70
changelog:
  - Add httpd_can_connect_ldap() interface
  - apcupsd_t needs to use seriel ports connected to usb devices
  - Kde puts procmail mail directory under ~/.local/share
  - nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
  - Add labeling for /sbin/iscsiuio


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-69
changelog:
  - Add label for /var/lib/iscan/interpreter
  - Dont audit writes to leaked file descriptors or redirected output for nacl
  - NetworkManager needs to write to /sys/class/net/ib*/mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-68
changelog:
  - Allow abrt  to request the kernel to load a module
  - Make sure mozilla content is labeled correctly
  - Allow tgtd to read system state
  - More fixes for boinc
    * allow to resolve dns name
    * re-write boinc policy to use boinc_domain attribute
  - Allow munin services plugins to use NSCD services


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-67
changelog:
  - Allow mozilla_plugin_t to manage mozilla_home_t
  - Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
  - Add label for tumblerd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-65
changelog:
  - Fixes related to  /bin, /sbin
  - Allow abrt to getattr on blk files
  - Add type for rhev-agent log file
  - Fix labeling for /dev/dmfm
  - Dontaudit wicd leaking
  - Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
  - Label /etc/locale.conf correctly
  - Allow user_mail_t to read /dev/random
  - Allow postfix-smtpd to read MIMEDefang
  - Add label for /var/log/suphp.log
  - Allow swat_t to connect and read/write nmbd_t sock_file
  - Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
  - Allow systemd-tmpfiles to change user identity in object contexts
  - More fixes for rhev_agentd_t consolehelper policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-64
changelog:
  - Use fs_use_xattr for squashf
  -  Fix procs_type interface
  - Dovecot has a new fifo_file /var/run/dovecot/stats-mail
  - Dovecot has a new fifo_file /var/run/stats-mail
  - Colord does not need to connect to network
  - Allow system_cronjob to dbus chat with NetworkManager
  - Puppet manages content, want to make sure it labels everything correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-63
changelog:
  - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
  - Allow all postfix domains to use the fifo_file
  - Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
  - Allow apmd_t to read grub.cfg
  - Let firewallgui read the selinux config
  - Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
  - Fix devicekit_manage_pid_files() interface
  - Allow squid to check the network state
  - Dontaudit colord getattr on file systems
  - Allow ping domains to read zabbix_tmp_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-59
changelog:
  - Allow mcelog_t to create dir and file in /var/run and label it correctly
  - Allow dbus to manage fusefs
  - Mount needs to read process state when mounting gluster file systems
  - Allow collectd-web to read collectd lib files
  - Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
  - Allow colord to get the attributes of tmpfs filesystem
  - Add sanlock_use_nfs and sanlock_use_samba booleans
  - Add bin_t label for /usr/lib/virtualbox/VBoxManage


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-58
changelog:
  - Add ssh_dontaudit_search_home_dir
  - Changes to allow namespace_init_t to work
  - Add interface to allow exec of mongod, add port definition for mongod port, 27017
  - Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
  - Allow spamd and clamd to steam connect to each other
  - Add policy label for passwd.OLD
  - More fixes for postfix and postfix maildro
  - Add ftp support for mozilla plugins
  - Useradd now needs to manage policy since it calls libsemanage
  - Fix devicekit_manage_log_files() interface
  - Allow colord to execute ifconfig
  - Allow accountsd to read /sys
  - Allow mysqld-safe to execute shell
  - Allow openct to stream connect to pcscd
  - Add label for /var/run/nm-dns-dnsmasq\.conf
  - Allow networkmanager to chat with virtd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55
changelog:
  - Add more MCS fixes to make sandbox working
  - Make faillog MLS trusted to make sudo_$1_t working
  - Allow sandbox_web_client_t to read passwd_file_t
  - Add .mailrc file context
  - Remove execheap from openoffice domain
  - Allow chrome_sandbox_nacl_t to read cpu_info
  - Allow virtd to relabel generic usb which is need if USB device
  - Fixes for virt.if interfaces to consider chr_file as image file type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-53
changelog:
  - Make nvidia* to be labeled correctly
  - Fix abrt_manage_cache() interface
  - Make filetrans rules optional so base policy will build
  - Dontaudit chkpwd_t access to inherited TTYS
  - Make sure postfix content gets created with the correct label
  - Allow gnomeclock to read cgroup
  - Fixes for cloudform policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-51
changelog:
  -  Begin removing qemu_t domain, we really no longer need this domain.  
  - systemd_passwd needs dac_overide to communicate with users TTY's
  - Allow svirt_lxc domains to send kill signals within their container


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-50
changelog:
  - Allow policykit to talk to the systemd via dbus
  - Move chrome_sandbox_nacl_t to permissive domains
  - Additional rules for chrome_sandbox_nacl


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-49
changelog:
  - Change bootstrap name to nacl
  - Chrome still needs execmem
  - Missing role for chrome_sandbox_bootstrap
  - Add boolean to remove execmem and execstack from virtual machines
  - Dontaudit xdm_t doing an access_check on etc_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-48
changelog:
  - Allow named to connect to dirsrv by default
  - add ldapmap1_0 as a krb5_host_rcache_t file
  - Google chrome developers asked me to add bootstrap policy for nacl stuff
  - Allow rhev_agentd_t to getattr on mountpoints
  - Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-47
changelog:
  - Fixes for cloudform policies which need to connect to random ports
  - Make sure if an admin creates modules content it creates them with the correct label
  - Add port 8953 as a dns port used by unbound
  - Fix file name transition for alsa and confined users


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-41
changelog:
  - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
  - Allow init process to setrlimit on itself
  - Take away transition rules for users executing ssh-keygen
  - Allow setroubleshoot_fixit_t to read /dev/urand
  - Allow sshd to relbale tunnel sockets
  - Allow fail2ban domtrans to shorewall in the same way as with iptables
  - Add support for lnk files in the /var/lib/sssd directory
  - Allow system mail to connect to courier-authdaemon over an unix stream socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-40
changelog:
  - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
  - Make corosync to be able to relabelto cluster lib fies
  - Allow samba domains to search /var/run/nmbd
  - Allow dirsrv to use pam
  - Allow thumb to call getuid
  - chrome less likely to get mmap_zero bug so removing dontaudit
  - gimp help-browser has built in javascript
  - Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
  - Re-write glance policy


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.3
changelog:
  - Move dontaudit sys_ptrace line from permissive.te to domain.te
  - Remove policy for hal, it no longer exists


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.1
changelog:
  - Remove allow_ptrace and replace it with deny_ptrace, which will remove all 
  ptrace from the system
  - Remove 2000 dontaudit rules between confined domains on transition
  and replace with single
  dontaudit domain domain:process { noatsecure siginh rlimitinh } ;


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-39
changelog:
  - Fixes for bootloader policy
  - $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
  - Allow nsplugin to read /usr/share/config
  - Allow sa-update to update rules
  - Add use_fusefs_home_dirs for chroot ssh option
  - Fixes for grub2
  - Update systemd_exec_systemctl() interface
  - Allow gpg to read the mail spool
  - More fixes for sa-update running out of cron job
  - Allow ipsec_mgmt_t to read hardware state information
  - Allow pptp_t to connect to unreserved_port_t
  - Dontaudit getattr on initctl in /dev from chfn
  - Dontaudit getattr on kernel_core from chfn
  - Add systemd_list_unit_dirs to systemd_exec_systemctl call
  - Fixes for collectd policy
  - CHange sysadm_t to create content as user_tmp_t under /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-38
changelog:
  - Allow virsh to read xenstored pid file
  - Backport corenetwork fixes from upstream
  - Do not audit attempts by thumb to search config_home_t dirs (~/.config)
  - label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
  - allow thumb to read generic data home files (mime.type)


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-37
changelog:
  - Allow nmbd to manage sock file in /var/run/nmbd
  - ricci_modservice send syslog msgs
  - Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
  - Allow systemd_logind_t to manage /run/USER/dconf/user


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-36
changelog:
  - Allow logrotate setuid and setgid since logrotate is supposed to do it
  - Fixes for thumb policy by grift
  - Add new nfsd ports
  - Added fix to allow confined apps to execmod on chrome
  - Add labeling for additional vdsm directories
  - Allow Exim and Dovecot SASL
  - Add label for /var/run/nmbd
  - Add fixes to make virsh and xen working together
  - Colord executes ls
  - /var/spool/cron  is now labeled as user_cron_spool_t


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-34.4
changelog:
  - Fixes caused by the labeling of /etc/passwd
  - Add thumb.patch to transition unconfined_t to thumb_t for Rawhide


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3
changelog:
  - Add support for Clustered Samba commands
  - Allow ricci_modrpm_t to send log msgs
  - move permissive virt_qmf_t from virt.te to permissivedomains.te
  - Allow ssh_t to use kernel keyrings
  - Add policy for libvirt-qmf and more fixes for linux containers
  - Initial Polipo
  - Sanlock needs to run ranged in order to kill svirt processes
  - Allow smbcontrol to stream connect to ctdbd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34
changelog:
  - Make mta_role() active
  - Allow asterisk to connect to jabber client port
  - Allow procmail to read utmp
  - Add NIS support for systemd_logind_t
  - Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
  - Fix systemd_manage_unit_dirs() interface
  - Allow ssh_t to manage directories passed into it
  - init needs to be able to create and delete unit file directories
  - Fix typo in apache_exec_sys_script
  - Add ability for logrotate to transition to awstat domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-33
changelog:
  - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
  - Add SELinux support for ssh pre-auth net process in F17
  - Add logging_syslogd_can_sendmail boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-29
changelog:
  - Allow sanlock to manage virt lib files
  - Add virt_use_sanlock booelan
  - ksmtuned is trying to resolve uids
  - Make sure .gvfs is labeled user_home_t in the users home directory
  - Sanlock sends kill signals and needs the kill capability
  - Allow mockbuild to work on nfs homedirs
  - Fix kerberos_manage_host_rcache() interface
  - Allow exim to read system state


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-28
changelog:
  - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
  - We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-27
changelog:
  -  Allow collectd to read hardware state information
  - Add loop_control_device_t
  - Allow mdadm to request kernel to load module
  - Allow domains that start other domains via systemctl to search unit dir
  - systemd_tmpfiles, needs to list any file systems mounted on /tmp
  - No one can explain why radius is listing the contents of /tmp, so we will dontaudit
  - If I can manage etc_runtime files, I should be able to read the links
  - Dontaudit hostname writing to mock library chr_files
  - Have gdm_t setup labeling correctly in users home dir
  - Label content unde /var/run/user/NAME/dconf as config_home_t
  - Allow sa-update to execute shell
  - Make ssh-keygen working with fips_enabled
  - Make mock work for staff_t user
  - Tighten security on mock_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-26
changelog:
  - removing unconfined_notrans_t no longer necessary
  - Clean up handling of secure_mode_insmod and secure_mode_policyload
  - Remove unconfined_mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-25
changelog:
  - Add exim_exec_t label for /usr/sbin/exim_tidydb
  - Call init_dontaudit_rw_stream_socket() interface in mta policy
  - sssd need to search /var/cache/krb5rcache directory
  - Allow corosync to relabel own tmp files
  - Allow zarafa domains to send system log messages
  - Allow ssh to do tunneling
  - Allow initrc scripts to sendto init_t unix_stream_socket
  - Changes to make sure dmsmasq and virt directories are labeled correctly
  - Changes needed to allow sysadm_t to manage systemd unit files
  - init is passing file descriptors to dbus and on to system daemons
  - Allow sulogin additional access Reported by dgrift and Jeremy Miller
  - Steve Grubb believes that wireshark does not need this access
  - Fix /var/run/initramfs to stop restorecon from looking at
  - pki needs another port
  - Add more labels for cluster scripts
  - Allow apps that manage cgroup_files to manage cgroup link files
  - Fix label on nfs-utils scripts directories
  - Allow gatherd to read /dev/rand and /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-24
changelog:
  - pki needs another port
  - Add more labels for cluster scripts
  - Fix label on nfs-utils scripts directories
  - Fixes for cluster
  - Allow gatherd to read /dev/rand and /dev/urand
  - abrt leaks fifo files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-23
changelog:
  - Add glance policy
  - Allow mdadm setsched
  - /var/run/initramfs should not be relabeled with a restorecon run
  - memcache can be setup to override sys_resource
  - Allow httpd_t to read tetex data
  - Allow systemd_tmpfiles to delete kernel modules left in /tmp directory.


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-22
changelog:
  - Allow Postfix to deliver to Dovecot LMTP socket
  - Ignore bogus sys_module for lldpad
  - Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
  - systemd_logind_t sets the attributes on usb devices
  - Allow hddtemp_t to read etc_t files
  - Add permissivedomains module
  - Move all permissive domains calls to permissivedomain.te
  - Allow pegasis to send kill signals to other UIDs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-21
changelog:
  - Allow insmod_t to use fds leaked from devicekit
  - dontaudit getattr between insmod_t and init_t unix_stream_sockets
  - Change sysctl unit file interfaces to use systemctl
  - Add support for chronyd unit file
  - Allow mozilla_plugin to read gnome_usr_config
  - Add policy for new gpsd
  - Allow cups to create kerberos rhost cache files
  - Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-20
changelog:
  - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-19
changelog:
  - Add policy for sa-update being run out of cron jobs
  - Add create perms to postgresql_manage_db
  - ntpd using a gps has to be able to read/write generic tty_device_t
  - If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
  - fix spec file
  - Remove qemu_domtrans_unconfined() interface
  - Make passenger working together with puppet
  - Add init_dontaudit_rw_stream_socket interface
  - Fixes for wordpress


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-18
changelog:
  - Turn on allow_domain_fd_use boolean on F16
  - Allow syslog to manage all log files
  - Add use_fusefs_home_dirs boolean for chrome
  - Make vdagent working with confined users
  - Add abrt_handle_event_t domain for ABRT event scripts
  - Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
  - Allow httpd_git_script_t to read passwd data
  - Allow openvpn to set its process priority when the nice parameter is used


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-16
changelog:
  - fetchmail can use kerberos
  - ksmtuned reads in shell programs
  - gnome_systemctl_t reads the process state of ntp
  - dnsmasq_t asks the kernel to load multiple kernel modules
  - Add rules for domains executing systemctl
  - Bogus text within fc file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-13
changelog:
  - Add abrt_domain attribute
  - Allow corosync to manage cluster lib files
  - Allow corosync to connect to the system DBUS


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-10
changelog:
  - Allow rcsmcertd to perform DNS name resolution
  - Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
  - Allow tmux to run as screen
  - New policy for collectd
  - Allow gkeyring_t to interact with all user apps
  - Add rules to allow firstboot to run on machines with the unconfined.pp module removed


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-9
changelog:
  - Allow systemd_logind to send dbus messages with users
  - allow accountsd to read wtmp file
  - Allow dhcpd to get and set capabilities


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8
changelog:
  - Fix oracledb_port definition
  - Allow mount to mounton the selinux file system
  - Allow users to list /var directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-6
changelog:
  - Add initial policy for abrt_dump_oops_t
  - xtables-multi wants to getattr of the proc fs
  - Smoltclient is connecting to abrt
  - Dontaudit leaked file descriptors to postdrop
  - Allow abrt_dump_oops to look at kernel sysctls
  - Abrt_dump_oops_t reads kernel ring buffer
  - Allow mysqld to request the kernel to load modules
  - systemd-login needs fowner
  - Allow postfix_cleanup_t to searh maildrop


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-5
changelog:
  - Initial systemd_logind policy
  - Add policy for systemd_logger and additional proivs for systemd_logind
  - More fixes for systemd policies


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-4
changelog:
  - Allow setsched for virsh
  - Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
  - iptables: the various /sbin/ip6?tables.* are now symlinks for
  /sbin/xtables-multi


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-3
changelog:
  - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
  - Allow colord to interact with the users through the tmpfs file system
  - Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
  - Add label for /var/log/mcelog
  - Allow asterisk to read /dev/random if it uses TLS
  - Allow colord to read ini files which are labeled as bin_t
  - Allow dirsrvadmin sys_resource and setrlimit to use ulimit
  - Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.  
  - Also lists /var and /var/spool directories
  - Add openl2tpd to l2tpd policy
  - qpidd is reading the sysfs file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-2
changelog:
  - Change usbmuxd_t to dontaudit attempts to read chr_file
  - Add mysld_safe_exec_t for libra domains to be able to start private mysql domains
  - Allow pppd to search /var/lock dir
  - Add rhsmcertd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-29
changelog:
  - Add dspam policy
  - Add lldpad policy
  - dovecot auth wants to search statfs #713555
  - Allow systemd passwd apps to read init fifo_file
  - Allow prelink to use inherited terminals
  - Run cherokee in the httpd_t domain
  - Allow mcs constraints on node connections
  - Implement pyicqt policy
  - Fixes for zarafa policy
  - Allow cobblerd to send syslog messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-27
changelog:
  - Fixes for zabbix
  - init script needs to be able to manage sanlock_var_run_...
  - Allow sandlock and wdmd to create /var/run directories... 
  - mixclip.so has been compiled correctly
  - Fix passenger policy module name


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-26
changelog:
  - Add mailscanner policy from dgrift
  - Allow chrome to optionally be transitioned to
  - Zabbix needs these rules when starting the zabbix_server_mysql
  - Implement a type for freedesktop openicc standard (~/.local/share/icc)
  - Allow system_dbusd_t to read inherited icc_data_home_t files.
  - Allow colord_t to read icc_data_home_t content. #706975
  - Label stuff under /usr/lib/debug as if it was labeled under /


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-25
changelog:
  - Fixes for sanlock policy
  - Fixes for colord policy
  - Other fixes
  	* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-22
changelog:
  - Allow logrotate to execute systemctl
  - Allow nsplugin_t to getattr on gpmctl
  - Fix dev_getattr_all_chr_files() interface
  - Allow shorewall to use inherited terms
  - Allow userhelper to getattr all chr_file devices
  - sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
  - Fix labeling for ABRT Retrace Server


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-21
changelog:
  - Dontaudit sys_module for ifconfig
  - Make telepathy and gkeyringd daemon working with confined users
  - colord wants to read files in users homedir
  - Remote login should be creating user_tmp_t not its own tmp files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-20
changelog:
  - Fix label for /usr/share/munin/plugins/munin_* plugins
  - Add support for zarafa-indexer
  - Fix boolean description
  - Allow colord to getattr on /proc/scsi/scsi
  - Add label for /lib/upstart/init
  - Colord needs to list /mnt


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-19
changelog:
  - Forard port changes from F15 for telepathy
  - NetworkManager should be allowed to use /dev/rfkill
  - Fix dontaudit messages to say Domain to not audit
  - Allow telepathy domains to read/write gnome_cache files
  - Allow telepathy domains to call getpw
  - Fixes for colord and vnstatd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-18
changelog:
  - Allow init_t getcap and setcap
  - Allow namespace_init_t to use nsswitch
  - aisexec will execute corosync
  - colord tries to read files off noxattr file systems
  - Allow init_t getcap and setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-17
changelog:
  - Add support for ABRT retrace server
  - Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
  - Allow telepath_msn_t to read /proc/PARENT/cmdline
  - ftpd needs kill capability
  - Allow telepath_msn_t to connect to sip port
  - keyring daemon does not work on nfs homedirs
  - Allow $1_sudo_t to read default SELinux context
  - Add label for tgtd sock file in /var/run/
  - Add apache_exec_rotatelogs interface
  - allow all zaraha domains to signal themselves, server writes to /tmp
  - Allow syslog to read the process state
  - Add label for /usr/lib/chromium-browser/chrome
  - Remove the telepathy transition from unconfined_t
  - Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
  - Allow initrc_t domain to manage abrt pid files
  - Add support for AEOLUS project
  - Virt_admin should be allowed to manage images and processes
  - Allow plymountd to send signals to init
  - Change labeling of fping6


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-16
changelog:
  - Fixes for zarafa policy
  - Add support for AEOLUS project
  - Change labeling of fping6
  - Allow plymountd to send signals to init
  - Allow initrc_t domain to manage abrt pid files
  - Virt_admin should be allowed to manage images and processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-15
changelog:
  - xdm_t needs getsession for switch user 
  - Every app that used to exec init is now execing systemdctl 
  - Allow squid to manage krb5_host_rcache_t files 
  - Allow foghorn to connect to agentx port - Fixes for colord policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-14
changelog:
  - Add Dan's patch to remove 64 bit variants
  - Allow colord to use unix_dgram_socket 
  - Allow apps that search pids to read /var/run if it is a lnk_file 
  - iscsid_t creates its own directory 
  - Allow init to list var_lock_t dir 
  - apm needs to verify user accounts auth_use_nsswitch
  - Add labeling for systemd unit files
  - Allow gnomeclok to enable ntpd service using systemctl - systemd_systemctl_t domain was added
  - Add label for matahari-broker.pid file
  - We want to remove untrustedmcsprocess from ability to read /proc/pid
  - Fixes for matahari policy
  - Allow system_tmpfiles_t to delete user_home_t files in the /tmp dir
  - Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-12
changelog:
  - Add /var/run/lock /var/lock definition to file_contexts.subs
  - nslcd_t is looking for kerberos cc files
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Allow sysadm_t to set attributes on fixed disks
  - allow user domains to execute lsof and look at application sockets
  - prelink_cron job calls telinit -u if init is rewritten
  - Fixes to run qemu_t from staff_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-10
changelog:
  - Add file_contexts.subs to handle /run and /run/lock
  - Add other fixes relating to /run changes from F15 policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-7
changelog:
  - Allow $1_sudo_t and $1_su_t open access to user terminals
  - Allow initrc_t to use generic terminals
  - Make Makefile/Rules.modular run sepolgen-ifgen during build to check if files for bugs
  -systemd is going to be useing /run and /run/lock for early bootup files.
  - Fix some comments in rlogin.if
  - Add policy for KDE backlighthelper
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - setroubleshoot reads executables to see if they have TEXTREL
  - Add /var/spool/audit support for new version of audit
  - Remove kerberos_connect_524() interface calling
  - Combine kerberos_master_port_t and kerberos_port_t
  - systemd has setup /dev/kmsg as stderr for apps it executes
  - Need these access so that init can impersonate sockets on unix_dgram_socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-5
changelog:
  - Fix multiple specification for boot.log
  - devicekit leaks file descriptors to setfiles_t
  - Change all all_nodes to generic_node and all_if to generic_if
  - Should not use deprecated interface
  - Switch from using all_nodes to generic_node and from all_if to generic_if
  - Add support for xfce4-notifyd
  - Fix file context to show several labels as SystemHigh
  - seunshare needs to be able to mounton nfs/cifs/fusefs homedirs
  - Add etc_runtime_t label for /etc/securetty
  - Fixes to allow xdm_t to start gkeyringd_USERTYPE_t directly
  - login.krb needs to be able to write user_tmp_t
  - dirsrv needs to bind to port 7390 for dogtag
  - Fix a bug in gpg policy
  - gpg sends audit messages
  - Allow qpid to manage matahari files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-4
changelog:
  - Initial policy for matahari
  - Add dev_read_watchdog
  - Allow clamd to connect clamd port
  - Add support for kcmdatetimehelper
  - Allow shutdown to setrlimit and sys_nice
  - Allow systemd_passwd to talk to /dev/log before udev or syslog is running
  - Purge chr_file and blk files on /tmp
  - Fixes for pads
  - Fixes for piranha-pulse
  - gpg_t needs to be able to encyprt anything owned by the user


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-3
changelog:
  - mozilla_plugin_tmp_t needs to be treated as user tmp files
  - More dontaudits of writes from readahead
  - Dontaudit readahead_t file_type:dir write, to cover up kernel bug
  - systemd_tmpfiles needs to relabel faillog directory as well as the file
  - Allow hostname and consoletype to r/w inherited initrc_tmp_t files handline hostname >> /tmp/myhost


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-2
changelog:
  - Add policykit fixes from Tim Waugh
  - dontaudit sandbox domains sandbox_file_t:dir mounton
  - Add new dontaudit rules for sysadm_dbusd_t
  - Change label for /var/run/faillock
  	* other fixes which relate with this change


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-1
changelog:
  - Update to upstream
  - Fixes for telepathy
  - Add port defition for ssdp port
  - add policy for /bin/systemd-notify from Dan
  - Mount command requires users read mount_var_run_t
  - colord needs to read konject_uevent_socket
  - User domains connect to the gkeyring socket
  - Add colord policy and allow user_t and staff_t to dbus chat with it
  - Add lvm_exec_t label for kpartx
  - Dontaudit reading the mail_spool_t link from sandbox -X
  - systemd is creating sockets in avahi_var_run and system_dbusd_var_run


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-5
changelog:
  - gpg_t needs to talk to gnome-keyring
  - nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
  - enforce MCS labeling on nodes
  - Allow arpwatch to read meminfo
  - Allow gnomeclock to send itself signals
  - init relabels /dev/.udev files on boot
  - gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_exec_t
  - nautilus checks access on /media directory before mounting usb sticks, dontaudit access_check on mnt_t
  - dnsmasq can run as a dbus service, needs acquire service
  - mysql_admin should  be allowed to connect to mysql service
  - virt creates monitor sockets in the users home dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-2
changelog:
  - Allow usbhid-ups to read hardware state information
  - systemd-tmpfiles has moved
  - Allo cgroup to sys_tty_config
  - For some reason prelink is attempting to read gconf settings
  - Add allow_daemons_use_tcp_wrapper boolean
  - Add label for ~/.cache/wocky to make telepathy work in enforcing mode
  - Add label for char devices /dev/dasd*
  - Fix for apache_role
  - Allow amavis to talk to nslcd
  - allow all sandbox to read selinux poilcy config files
  - Allow cluster domains to use the system bus and send each other dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.14-1
changelog:
  - Update to ref policy
  - cgred needs chown capability
  - Add /dev/crash crash_dev_t
  - systemd-readahead wants to use fanotify which means readahead_t needs sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-10
changelog:
  - New labeling for postfmulti #675654
  - dontaudit xdm_t listing noxattr file systems
  - dovecot-auth needs to be able to connect to mysqld via the network as well as locally
  - shutdown is passed stdout to a xdm_log_t file
  - smartd creates a fixed disk device
  - dovecot_etc_t contains a lnk_file that domains need to read
  - mount needs to be able to read etc_runtim_t:lnk_file since in rawhide this is a link created at boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-9
changelog:
  - syslog_t needs syslog capability
  - dirsrv needs to be able to create /var/lib/snmp
  - Fix labeling for dirsrv
  - Fix for dirsrv policy missing manage_dirs_pattern
  - corosync needs to delete clvm_tmpfs_t files
  - qdiskd needs to list hugetlbfs
  - Move setsched to sandbox_x_domain, so firefox can run without network access
  - Allow hddtemp to read removable devices
  - Adding syslog and read_policy permissions to policy
  	* syslog
  		Allow unconfined, sysadm_t, secadm_t, logadm_t
  	* read_policy
  		allow unconfined, sysadm_t, secadm_t, staff_t on Targeted
  		allow sysadm_t (optionally), secadm_t on MLS
  - mdadm application will write into /sys/.../uevent whenever arrays are
  assembled or disassembled.


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-7
changelog:
  - ricci_modclusterd_t needs to bind to rpc ports 500-1023
  - Allow dbus to use setrlimit to increase resoueces
  - Mozilla_plugin is leaking to sandbox
  - Allow confined users  to connect to lircd over unix domain stream socket which allow to use remote control
  - Allow awstats to read squid logs
  - seunshare needs to manage tmp_t
  - apcupsd cgi scripts have a new directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-6
changelog:
  - Fix xserver_dontaudit_read_xdm_pid
  - Change oracle_port_t to oracledb_port_t to prevent conflict with satellite
  - Allow dovecot_deliver_t to read/write postfix_master_t:fifo_file. 
  	* These fifo_file is passed from postfix_master_t to postfix_local_t to dovecot_deliver_t
  - Allow readahead to manage readahead pid dirs
  - Allow readahead to read all mcs levels
  - Allow mozilla_plugin_t to use nfs or samba homedirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-5
changelog:
  - Allow nagios plugin to read /proc/meminfo
  - Fix for mozilla_plugin
  - Allow samba_net_t to create /etc/keytab
  - pppd_t setting up vpns needs to run unix_chkpwd, setsched its process and write wtmp_t
  - nslcd can read user credentials
  - Allow nsplugin to delete mozilla_plugin_tmpfs_t
  - abrt tries to create dir in rpm_var_lib_t
  - virt relabels fifo_files
  - sshd needs to manage content in fusefs homedir
  - mock manages link files in cache dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-4
changelog:
  - nslcd needs setsched and to read /usr/tmp
  - Invalid call in likewise policy ends up creating a bogus role
  - Cannon puts content into /var/lib/bjlib that cups needs to be able to write
  - Allow screen to create screen_home_t in /root
  - dirsrv sends syslog messages
  - pinentry reads stuff in .kde directory
  - Add labels for .kde directory in homedir
  - Treat irpinit, iprupdate, iprdump services with raid policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-3
changelog:
  - NetworkManager wants to read consolekit_var_run_t
  - Allow readahead to create /dev/.systemd/readahead
  - Remove permissive domains
  - Allow newrole to run namespace_init


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-8
changelog:
  - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
  - Add puppetmaster_use_db boolean
  - Fixes for zarafa policy
  - Fixes for gnomeclock poliy
  - Fix systemd-tmpfiles to use auth_use_nsswitch


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-7
changelog:
  - gnomeclock executes a shell
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir
  - Fixes for namespace policy and other fixes related to polyinstantiation
  - Add namespace policy
  - Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
  - Fixes for init, psad policy which relate with confined users
  - Do not audit bootloader attempts to read devicekit pid files
  - Allow nagios service plugins to read /proc


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-6
changelog:
  - Add firewalld policy
  - Allow vmware_host to read samba config
  - Kernel wants to read /proc Fix duplicate grub def in cobbler
  - Chrony sends mail, executes shell, uses fifo_file and reads /proc
  - devicekitdisk getattr all file systems
  - sambd daemon writes wtmp file
  - libvirt transitions to dmidecode


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-5
changelog:
  - Add initial policy for system-setup-keyboard which is now daemon
  - Label /var/lock/subsys/shorewall as shorewall_lock_t
  - Allow users to communicate with the gpg_agent_t
  - Dontaudit mozilla_plugin_t using the inherited terminal
  - Allow sambagui to read files in /usr
  - webalizer manages squid log files
  - Allow unconfined domains to bind ports to raw_ip_sockets
  - Allow abrt to manage rpm logs when running yum
  - Need labels for /var/run/bittlebee
  - Label .ssh under amanda
  - Remove unused genrequires for virt_domain_template
  - Allow virt_domain to use fd inherited from virtd_t
  - Allow iptables to read shorewall config


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-4
changelog:
  - Gnome apps list config_home_t
  - mpd creates lnk files in homedir
  - apache leaks write to mail apps on tmp files
  - /var/stockmaniac/templates_cache contains log files
  - Abrt list the connects of mount_tmp_t dirs
  - passwd agent reads files under /dev and reads utmp file
  - squid apache script connects to the squid port
  - fix name of plymouth log file
  - teamviewer is a wine app
  - allow dmesg to read system state
  - Stop labeling files under /var/lib/mock so restorecon will not go into this 
  - nsplugin needs to read network state for google talk


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-3
changelog:
  - Allow xdm and syslog to use /var/log/boot.log
  - Allow users to communicate with mozilla_plugin and kill it
  - Add labeling for ipv6 and dhcp


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-2
changelog:
  - New labels for ghc http content
  - nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
  - pm-suspend now creates log file for append access so we remove devicekit_wri
  - Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
  - Fixes for greylist_milter policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-1
changelog:
  - Update to upstream
  - Fixes for systemd policy
  - Fixes for passenger policy
  - Allow staff users to run mysqld in the staff_t domain, akonadi needs this
  - Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
  - auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
  - Dontaudit (xdm_t) gok attempting to list contents of /var/account
  - Telepathy domains need to read urand
  - Need interface to getattr all file classes in a mock library for setroubleshoot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-13
changelog:
  - Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs
  - remove per sandbox domains devpts types
  - Allow dkim-milter sending signal to itself


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-12
changelog:
  - Allow domains that transition to ping or traceroute, kill them
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  - Add fixes to systemd- tools, including new labeling for systemd-fsck, systemd-cryptsetup


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-11
changelog:
  - Turn on systemd policy
  - mozilla_plugin needs to read certs in the homedir.
  - Dontaudit leaked file descriptors from devicekit
  - Fix ircssi to use auth_use_nsswitch
  - Change to use interface without param in corenet to disable unlabelednet packets
  - Allow init to relabel sockets and fifo files in /dev
  - certmonger needs dac* capabilities to manage cert files not owned by root
  - dovecot needs fsetid to change group membership on mail
  - plymouthd removes /var/log/boot.log
  - systemd is creating symlinks in /dev
  - Change label on /etc/httpd/alias to be all cert_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-10
changelog:
  - Fixes for clamscan and boinc policy
  - Add boinc_project_t setpgid
  - Allow alsa to create tmp files in /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-7
changelog:
  - Fix the label for wicd log
  - plymouthd creates force-display-on-active-vt file
  - Allow avahi to request the kernel to load a module
  - Dontaudit hal leaks
  - Fix gnome_manage_data interface
  - Add new interface corenet_packet to define a type as being an packet_type.
  - Removed general access to packet_type from icecast and squid.
  - Allow mpd to read alsa config
  - Fix the label for wicd log
  - Add systemd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-6
changelog:
  - Fix gnome_manage_data interface
  - Dontaudit sys_ptrace capability for iscsid
  - Fixes for nagios plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-5
changelog:
  - Fix cron to run ranged when started by init
  - Fix devicekit to use log files
  - Dontaudit use of devicekit_var_run_t for fstools
  - Allow init to setattr on logfile directories
  - Allow hald to manage files in /var/run/pm-utils/ dir which is now labeled as devicekit_var_run_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-4
changelog:
  - Fix up handling of dnsmasq_t creating /var/run/libvirt/network
  - Turn on sshd_forward_ports boolean by default
  - Allow sysadmin to dbus chat with rpm
  - Add interface for rw_tpm_dev
  - Allow cron to execute bin
  - fsadm needs to write sysfs
  - Dontaudit consoletype reading /var/run/pm-utils
  - Lots of new privs fro mozilla_plugin_t running java app, make mozilla_plugin
  - certmonger needs to manage dirsrv data
  - /var/run/pm-utils should be labeled as devicekit_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-3
changelog:
  - fixes to allow /var/run and /var/lock as tmpfs
  - Allow chrome sandbox to connect to web ports
  - Allow dovecot to listem on lmtp and sieve ports
  - Allov ddclient to search sysctl_net_t
  - Transition back to original domain if you execute the shell


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-4
changelog:
  - Allow ddclient to fix file mode bits of ddclient conf file
  - init leaks file descriptors to daemons
  - Add labels for /etc/lirc/ and
  - Allow amavis_t to exec shell
  - Add label for gssd_tmp_t for /var/tmp/nfs_0


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-2
changelog:
  - Turn on allow_postfix_local_write_mail_spool
  - Allow initrc_t to transition to shutdown_t
  - Allow logwatch and cron to mls_read_to_clearance for MLS boxes
  - Allow wm to send signull to all applications and receive them from users
  - lircd patch from field
  - Login programs have to read /etc/samba
  - New programs under /lib/systemd
  - Abrt needs to read config files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-1
changelog:
  - Update to upstream
  - Dontaudit leaked sockets from userdomains to user domains
  - Fixes for mcelog to handle scripts
  - Apply patch from Ruben Kerkhof
  - Allow syslog to search spool dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-7
changelog:
  - Allow nagios plugins to read usr files
  - Allow mysqld-safe to send system log messages
  - Fixes fpr ddclient policy
  - Fix sasl_admin interface
  - Allow apache to search zarafa config
  - Allow munin plugins to search /var/lib directory
  - Allow gpsd to read sysfs_t
  - Fix labels on /etc/mcelog/triggers to bin_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-6
changelog:
  - Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t
  - Allow saslauthd_t to create krb5_host_rcache_t files in /tmp
  - Fix xserver interface
  - Fix definition of /var/run/lxdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-5
changelog:
  - Turn on mediawiki policy
  - kdump leaks kdump_etc_t to ifconfig, add dontaudit
  - uux needs to transition to uucpd_t
  - More init fixes relabels man,faillog
  - Remove maxima defs in libraries.fc
  - insmod needs to be able to create tmpfs_t files
  - ping needs setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-4
changelog:
  - Allow groupd transition to fenced domain when executes fence_node
  - Fixes for rchs policy
  - Allow mpd to be able to read samba/nfs files


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-3
changelog:
  - Fix up corecommands.fc to match upstream
  - Make sure /lib/systemd/* is labeled init_exec_t
  - mount wants to setattr on all mountpoints
  - dovecot auth wants to read dovecot etc files
  - nscd daemon looks at the exe file of the comunicating daemon
  - openvpn wants to read utmp file
  - postfix apps now set sys_nice and lower limits
  - remote_login (telnetd/login) wants to use telnetd_devpts_t and user_devpts_t to work correctly
  - Also resolves nsswitch
  - Fix labels on /etc/hosts.*
  - Cleanup to make upsteam patch work
  - allow abrt to read etc_runtime_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-10
changelog:
  - Fix sandbox to work on nfs homedirs
  - Allow cdrecord to setrlimit
  - Allow mozilla_plugin to read xauth
  - Change label on systemd-logger to syslogd_exec_t
  - Install dirsrv policy from dirsrv package


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-9
changelog:
  - Add virt_home_t, allow init to setattr on xserver_tmp_t and relabel it
  - Udev needs to stream connect to init and kernel
  - Add xdm_exec_bootloader boolean, which allows xdm to execute /sbin/grub and read files in /boot directory


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-8
changelog:
  - Allow NetworkManager to read openvpn_etc_t
  - Dontaudit hplip to write of /usr dirs
  - Allow system_mail_t to create /root/dead.letter as mail_home_t
  - Add vdagent policy for spice agent daemon


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-7
changelog:
  - Dontaudit sandbox sending sigkill to all user domains
  - Add policy for rssh_chroot_helper
  - Add missing flask definitions
  - Allow udev to relabelto removable_t
  - Fix label on /var/log/wicd.log
  - Transition to initrc_t from init when executing bin_t
  - Add audit_access permissions to file
  - Make removable_t a device_node 
  - Fix label on /lib/systemd/*


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-5
changelog:
  - Allow chome to create netlink_route_socket
  - Add additional MATHLAB file context
  - Define nsplugin as an application_domain
  - Dontaudit sending signals from sandboxed domains to other domains
  - systemd requires init to build /tmp /var/auth and /var/lock dirs
  - mount wants to read devicekit_power /proc/ entries
  - mpd wants to connect to soundd port
  - Openoffice causes a setattr on a lib_t file for normal users, add dontaudit
  - Treat lib_t and textrel_shlib_t directories the same
  - Allow mount read access on virtual images


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-4
changelog:
  - Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
  - Allow devicekit_power to domtrans to mount
  - Allow dhcp to bind to udp ports > 1024 to do named stuff
  - Allow ssh_t to exec ssh_exec_t
  - Remove telepathy_butterfly_rw_tmp_files(), dev_read_printk() interfaces which are nolonger used
  - Fix clamav_append_log() intefaces
  - Fix 'psad_rw_fifo_file' interface


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-3
changelog:
  -Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
  - dovecot-auth_t needs ipc_lock
  - gpm needs to use the user terminal
  - Allow system_mail_t to append ~/dead.letter
  - Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
  - Add pid file to vnstatd
  - Allow mount to communicate with gfs_controld
  - Dontaudit hal leaks in setfiles


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-2
changelog:
  - Lots of fixes for systemd
  - systemd now executes readahead and tmpwatch type scripts
  - Needs to manage random seed


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-11
changelog:
  - Fix fusefs handling
  - Do not allow sandbox to manage nsplugin_rw_t
  - Allow mozilla_plugin_t to connecto its parent
  - Allow init_t to connect to plymouthd running as kernel_t
  - Add mediawiki policy
  - dontaudit sandbox sending signals to itself.  This can happen when they are running at different mcs.
  - Disable transition from dbus_session_domain to telepathy for F14
  - Allow boinc_project to use shm
  - Allow certmonger to search through directories that contain certs
  - Allow fail2ban the DAC Override so it can read log files owned by non root users


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-10
changelog:
  - Start adding support for use_fusefs_home_dirs
  - Add /var/lib/syslog directory file context
  - Add /etc/localtime as locale file context


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-9
changelog:
  - Turn off default transition to mozilla_plugin and telepathy domains from unconfined user 
  - Turn off iptables from unconfined user 
  - Allow sudo to send signals to any domains the user could have transitioned to.
  - Passwd in single user mode needs to talk to console_device_t
  - Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
  - locate tried to read a symbolic link, will dontaudit
  - New labels for telepathy-sunshine content in homedir
  - Google is storing other binaries under /opt/google/talkplugin
  - bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
  - Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
  - modemmanger and bluetooth send dbus messages to devicekit_power
  - Samba needs to getquota on filesystems labeld samba_share_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-7
changelog:
  - Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.
  - Allow mozilla_plugin_t to create tcp/udp/netlink_route sockets
  - Allow confined users to read xdm_etc_t files
  - Allow xdm_t to transition to xauth_t for lxdm program


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-6
changelog:
  - Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home
  - Allow clamd to send signals to itself
  - Allow mozilla_plugin_t to read user home content.  And unlink pulseaudio shm.
  - Allow haze to connect to yahoo chat and messenger port tcp:5050.
  Bz #637339
  - Allow guest to run ps command on its processes by allowing it to read /proc
  - Allow firewallgui to sys_rawio which seems to be required to setup masqerading
  - Allow all domains to search through default_t directories, in order to find differnet labels.  For example people serring up /foo/bar to be share via samba.
  - Add label for /var/log/slim.log


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-5
changelog:
  - Pull in cleanups from dgrift
  - Allow mozilla_plugin_t to execute mozilla_home_t
  - Allow rpc.quota to do quotamod


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-4
changelog:
  - Cleanup policy via dgrift
  - Allow dovecot_deliver to append to inherited log files
  - Lots of fixes for consolehelper


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-3
changelog:
  - Add the ability to send audit messages to confined admin policies
  - Remove permissive domain from cmirrord and dontaudit sys_tty_config
  - Split out unconfined_domain() calls from other unconfined_ calls so we can d
  - virt needs to be able to read processes to clearance for MLS


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-2
changelog:
  - Allow all domains that can use cgroups to search tmpfs_t directory
  - Allow init to send audit messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-2
changelog:
  - Handle /var/db/sudo
  - Allow pulseaudio to read alsa config
  - Allow init to send initrc_t dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-1
changelog:
  Allow iptables to read shorewall tmp files
  Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
  intd
  label vlc as an execmem_exec_t 
  Lots of fixes for mozilla_plugin to run google vidio chat
  Allow telepath_msn to execute ldconfig and its own tmp files
  Fix labels on hugepages
  Allow mdadm to read files on /dev
  Remove permissive domains and change back to unconfined
  Allow freshclam to execute shell and bin_t
  Allow devicekit_power to transition to dhcpc
  Add boolean to allow icecast to connect to any port


author: Dan Walsh <dwalsh@redhat.com> 3.9.2-1
changelog:
  - Merge upstream fix of mmap_zero
  - Allow mount to write files in debugfs_t
  - Allow corosync to communicate with clvmd via tmpfs
  - Allow certmaster to read usr_t files
  - Allow dbus system services to search cgroup_t
  - Define rlogind_t as a login pgm


author: Dan Walsh <dwalsh@redhat.com> 3.9.1-2
changelog:
  - Dominic Grift Cleanup
  - Miroslav Grepl policy for jabberd
  - Various fixes for mount/livecd and prelink


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-20
changelog:
  - Allow cron to look at user_cron_spool links
  - Lots of fixes for mozilla_plugin_t
  - Add sysv file system
  - Turn unconfined domains to permissive to find additional avcs


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-18
changelog:
  - Allow clamscan to read proc_t
  - Allow mount_t to write to debufs_t dir
  - Dontaudit mount_t trying to write to security_t dir


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-7
changelog:
  - Update boinc policy
  - Fix sysstat policy to allow sys_admin
  - Change failsafe_context to unconfined_r:unconfined_t:s0


author: Dan Walsh <dwalsh@redhat.com> 3.8.1-2
changelog:
  - Fix label on /var/lib/dokwiki
  - Change permissive domains to enforcing
  - Fix libvirt policy to allow it to run on mls


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Rex Dieter <rdieter@fedoraproject.org> - 0.11-0.1.alpha
changelog:
  - speedcrunch-0.11-alpha
  - update cmake-related macros
  - optimize scriptlets
  - %summary: drop 'for KDE', should be quite usable on any DE
  - use upstream-provided .desktop file
  - %check: make test


author: Kalev Lember <kalev@smartlink.ee> - 0.3.2-4
changelog:
  - Explicitly require generatorrunner for %{_libdir}/generatorrunner/ directory
    ownership (#609738)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Adam Tkac <atkac redhat com> 2.0.7-2
changelog:
  - fix generating of python3 wrappers (#830660)
  - don't crash when attepmting to warn about wrong descructor (#830249)


author: Adam Tkac <atkac redhat com> 2.0.5-1
changelog:
  - update to 2.0.5
  - patches merged
    - swig204-rh753321.patch
    - swig204-rh679948.patch
    - swig204-rh770696.patch


author: Adam Tkac <atkac redhat com> 2.0.4-3
changelog:
  - backport r12814 from trunk (#753321)
  - use scm_to_utf8_string instead of SCM_STRING_CHARS in guile bindings (#752054)
  - improve Octave compatibility (#679948)


author: Adam Tkac <atkac redhat com> 2.0.0-2
changelog:
  - add LICENSE-GPL, LICENSE-UNIVERSITIES and COPYRIGHT to %doc
  - include all license files in the -doc subpkg


author: Adam Tkac <atkac redhat com> 1.3.39-1
changelog:
  - update to 1.3.39
  - swig-1.3.38-rh485540.patch was merged
  - add Example/ to -doc again (#489077), filter provides correctly


author: Adam Tkac <atkac redhat com> 1.3.38-4
changelog:
  - moved documentation to -doc subpackage and build it as noarch
  - added Example/ directory to -doc (#489077)
  - fixed build root


author: Adam Tkac <atkac redhat com> 1.3.33-1
changelog:
  - 1.3.33
  - removed swig-arch.patch because upstream will never accept
    it ("swig is not low-level")


author: Karsten Hopp <karsten@redhat.de> 1.3.23-1
changelog:
  - update
  - new pylib patch
  - remove destdir patch, swig.m4 is no longer included
  - remove ldconfig patch, swig now uses *-config to find out linker options


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_tmppath} instead of /var/tmp
  - remove the postscript docs (pdftops from the xpdf pkg converts them just fine)


author: Andrew Beekhof <andrew@beekhof.net> - 1.6.5-0.1.git833ca18
changelog:
  - Incorporate review feedback
    + Add calls to ldconfig
    + Fix package group
    + Resolve rpmlint warnings
    + Added LICENSE, NOTICE and AUTHORS to the doc list
    + Document how the tarball was generated
    + Update version number to be a .5 pre-release snapshot


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Tim Waugh <twaugh@redhat.com> 1.2-29
changelog:
  - Use smp_mflags (bug #226445).
  - Better default attributes (bug #226445).
  - Make setup macro quiet (bug #226445).
  - Clean build root in %install section (bug #226445).


author: Miroslav Lichvar <mlichvar@redhat.com> 0.9.8.1pl1-7.20070716cvs
changelog:
  - convert changes.txt to utf8, rename logrotate file, remove
    setgid from slrnpull, fix source URL (#226422)


author: Jindrich Novy <jnovy@redhat.com> 0.9.8.1-5
changelog:
  - apply official bugfix patches (#164363)
    - fixes slrnpull problem with group containing no headers
    - fixes last character removal editor problem


author: Jindrich Novy <jnovy@redhat.com> 0.9.8.1-3
changelog:
  - package contrib subdir because of slrn-conv script (#73451)
  - slrnpull.conf is now %config(noreplace), original config
    won't be overwritten (#56001)
  - include slrnpull man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7.4-6
changelog:
  - configure with --with-ssl-includes=%{_includedir} and
    --with-ssl-library=%{_libdir}, for multilib systems


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 0.9.6.4
  - enable SSL
  - plug some possible buffer overflows (#12750)
  - install sample macros in /usr/lib/slrn


author: Manoj Kasichainula <manojk+rpm@io.com>
changelog:
  [0.9.5.3-2]
  - Fixed a couple of stupid things I did.
  - Took out -fno-strength-reduce. AFAIK, gcc on RH5.1 doesn't have this bug. I
    use egcs which shouldn't have this bug. And if you have this bug, *and* are
    recompiling on your own machin, you should have -fno-strength-reduce in your
    RPM_OPT_FLAGS anyway.


author: Manoj Kasichainula <manojk+rpm@io.com>
changelog:
  - docs are now forced to 644 to prevent including /bin/sh as a requirement
  - added macros in the doc directory
  - should now be buildable by non-root


author: Manoj Kasichainula <manojk+rpm@io.com> (0.9.4.3-2)
changelog:
  - Fixes from JED
  - default mode for slrnpull posts set to 0640, so slrnpull can read it as
    non-root
  - lots of pre-setup for slrnpull
    - directories set up
    - automatic daily expiration
    - moved slrnpull directory to /var/spool/slrnpull, to match (most) docs
    - more 
  - minor spec file changes


author: Jef Spaleta <jspaleta@gmail.com> - 0.14-5
changelog:
  - Specfile clean up for desktop file installation and to conform 
    licensing to current FE packaging policy


author: Paul Howarth <paul@city-fan.org> - 0.14-3
changelog:
  - Fix BR's so that %check works
  - Remove deps that can be autogenerated
  - Package is noarch
  - Tidy %files
  - Include README and license text as %doc
  - Run "make test" is C locale for better coverage


author: Grant McLean <grant@mclean.net.nz> - 0.10-1
changelog:
  - New upstream version
  - Removed perl-Class-Accessor dependency
  - Bumped up Perl version dependency
  - Tweaked Gavin's configs for vendor/packager


author: Panu Matilainen <pmatilai@redhat.com> - 0.57.2-15
changelog:
  - fix build with gcc 4.3 (explicit includes for cstring and friends)
  - fix bunch of const-correctness issues causing gcc complaints


author: Panu Matilainen <pmatilai@redhat.com> - 0.57.2-11
changelog:
  - add an ugly kludge to make it work with new apt-rpm progress api
  - update buildreq apt version for the above


author: Panu Matilainen <pmatilai@laiskiainen.org> 0.57.2-1
changelog:
  - remove explicit yelp dependency, add support for browsing help with 
    firefox (#163036)
  - configure with --disable-dependency-tracking


author: Panu Matilainen <pmatilai@welho.com> 0.48.1-0.fdr.2
changelog:
  - fix QA issues in #1377
    * fix incorrect source url
    * drop docbook-utils buildreq, add xmlto and perl-XML-parser
    * use _lib macro in pam file generation


author: Panu Matilainen <pmatilai@welho.com> 0.45-1
changelog:
  - buildroot -> RPM_BUILD_ROOT
  - use upstream desktop
  - evict version detection
  - explicit mode in desktop-file-install


author: Peter Vrabec <pvrabec@redhat.com> - 0.9.4-8
changelog:
  - filter (deleted) files in netserv
  - create empty log file after installation
  - fix expected permissions on shadow/gshadow


author: Peter Vrabec <pvrabec@redhat.com> - 0.7.2-1
changelog:
  - new upstream release
  - Support overriding level configuration in ~/.sectoolrc
  - Add saving level configuration in GUI:


author: Maros Barabas <mbarabas@redhat.com> - 0.6.0-3
changelog:
  - code review: cleaning code in OuputFormatter
                 adding comments
                 migrating public formatter  methods to private


author: Maros Barabas <mbarabas@redhat.com> - 0.6.0-2
changelog:
  - repaired sensitivity of popup buttons 
  - code review: migrating public methods to private
                 more comments


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Patrick C. F. Ernzer <smstools.spec@pcfe.net> 3.1.5-3
changelog:
  - after deliberation, decided on having system user (mysql user also has shell, so this should be OK)


author: Patrick C. F. Ernzer <smstools.spec@pcfe.net> 3.1.5-2
changelog:
  - corrected typo in my name in previous changelog entry
  - log files now go to /var/log/smsd (copied that bit from the uucp RPM)
  - creating smstools user if it does not exist
  - will run as user smstools now, did not manage to make it work as system user without login though


author: Marek Mahut <mmahut@fedoraproject.org> - 3.1.3-5
changelog:
  - Upstream release
  - RHBZ#437620 root privileges are mandatory for sending/receiving an sms
  - RHBZ#443790 smstools logrotate does not work properly
  - RHBZ#461862 smssend creates rw------- files


author: Chris Lumens <clumens@redhat.com> - 2.8.10-1
changelog:
  - Update glade file to fix translation building. (clumens)
  - Fix various problems when packaging up translations. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.9-1
changelog:
  - Put /usr/share/system-config-kickstart at the front of the path (#820748). (clumens)
  - Fix "make local" to not pack up .git/ as well. (clumens)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Fix translation files so "msgfmt -c " passes and they'll upload to transifex. (clumens)
  - Add transifex configuration file. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.8-1
changelog:
  - Fix an importing bug caused by the previous patch. (clumens)
  - Don't traceback when starting up outside of X (#676338). (clumens)
  - Convert spec to UTF-8. (notting)


author: Chris Lumens <clumens@redhat.com> - 2.8.7-1
changelog:
  - pykickstart raises KickstartError instead of IOError now. (clumens)
  - Clear the partition store whenever a file is loaded (#610740). (clumens)
  - Remove the key entry as well, since that command no longer exists. (clumens)
  - Remove the deprecated interactive mode. (clumens)
  - anaconda has changed all around, so fix the GroupSelector import. (clumens)
  - Fix --help argument handling (#621379). (clumens)
  - Update translation files (#617075). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.6-1
changelog:
  - Don't traceback when loading the Preview dialog a second time (#593259). (clumens)
  - Don't install the icon to /usr/share/system-config-kickstart too (#594361). (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.4-1
changelog:
  - Don't overwrite tsInfo with a new instance (#541052). (clumens)
  - Correct rpmlint errors found with the .spec file. (clumens)
  - Use OptionParser instead of the old getopt module (#553045). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.3-1
changelog:
  - Add ext4, make it the default (#544079).
  - Add support for authconfig --enablefingerprint (#539371).
  - Fix an import error (#530739, nelsoninva AT gmail.com).
  - Update lots of translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.1-1
changelog:
  - Change the skipx blurb to make more sense (#493835).
  - Update to using python-meh for exception handling instead of rhpl.
  - Do VERSION substitution on all files.


author: Chris Lumens <clumens@redhat.com> - 2.8.0-1
changelog:
  - Allow specifying anything for a network device name, not just ethX (#508089).
  - Don't traceback when opening files with null bytes (#508092).
  - Make the OK button on some dialogs insensitive until changes happen (#493887).
  - Don't traceback if the filename entry is blank (#500409).
  - Lots more UI style/layout updates (#493842, #493857, rrakus).
  - Don't traceback if given an invalid language or timezone (#487390).
  - Update to glade3 (#495754, rrakus).
  - Add a progress window when saving or previewing files (#493879, rrakus).
  - Use the standard about/license dialog (rrakus, #493926).
  - Center dialogs on the parent (rrakus, #493823).


author: Chris Lumens <clumens@redhat.com> - 2.7.22-1
changelog:
  - Use dataList().append when adding partitions and network devices (#492100).
  - Update translation files (#490018). (clumens)
  - Lots of translation file udpates.


author: Chris Lumens <clumens@redhat.com> - 2.7.21-1
changelog:
  - Add "make bumpver" target from pykickstart.
  - Translate spaces in timezones to underscores when reading and writing (#475129).


author: Chris Lumens <clumens@redhat.com> 2.7.20-1
changelog:
  - Don't make the open dialog tiny.
  - Fix a traceback caused by methods moving out of GroupSelector.py in anaconda.
  - Don't remove the byte-compiled python files from a scriptlet.


author: Chris Lumens <clumens@redhat.com> 2.7.17-1
changelog:
  - Support --display= (#450431).
  - No longer use rhpl for translations.
  - Sort keyboard list by descriptive name, not by console map.
  - Remove most of the xconfig and monitor command support.
  - Use s-c-date's timezone list since that's what anaconda does (#445195).


author: Chris Lumens <clumens@redhat.com> 2.7.15-1
changelog:
  - Offer the same passalgo options that authconfig now does (#173867).
  - Don't traceback if saving doesn't work (#436406).
  - When the Cancel button is pressed, quit (#436406).
  - Prompt for a disk/part when RAID is selected (#432914).
  - Fix another typo in ldaploadcacert handling.
  - If the kickstart file cannot be opened, display an error (#431950).


author: Chris Lumens <clumens@redhat.com> 2.7.14-1
changelog:
  - Don't destroy the save dialog when it's closed.
  - If the key checkbutton is not active, remove the key setting (#226718).
  - Fix typo in LDAP authconfig parameter (#239817).
  - Use F1 as the help shortcut (#429959).
  - Translation updates (#429611).
  - More error handling when yum fails to init (#426447).
  - Update documentation license (#419071, kwade).


author: Chris Lumens <clumens@redhat.com> 2.7.13-1
changelog:
  - Fix a traceback when importing yum (#337161).
  - Remove obsolete translation (#332501).
  - Rework bootloader UI to make it easier to add other arches.


author: Chris Lumens <clumens@redhat.com> 2.7.12-1
changelog:
  - Rework network device dialog to not use four input boxes for each address.
  - Don't require a gateway or nameserver address (#215191).


author: Chris Lumens <clumens@redhat.com> 2.7.5-1
changelog:
  - Default to installing instead of upgrading.
  - Set a default SELinux setting when started up.
  - Don't write out remove lines for packages not available on the
    installation architecture.


author: Chris Lumens <clumens@redhat.com> 2.7.4-1
changelog:
  - Fix loading packages section (#232285).
  - Fix preview/save on upgrade (#232282).
  - Add UI for authconfig's --ldaploadcert option (#232664).


author: Chris Lumens <clumens@redhat.com> 2.7.2-1
changelog:
  - Add package-level selection and removal (#222592).
  - Add UI for the key command (#226718).
  - Fix iter handling on the partition screen for auto partitions (#225087).


author: Chris Lumens <clumens@redhat.com> 2.7.1-1
changelog:
  - Update to use new pykickstart.
  - Don't traceback if no monitor or x driver is selected.
  - Handle pykickstart exceptions by displaying an error dialog.


author: Chris Lumens <clumens@redhat.com> 2.7.0-1
changelog:
  - Use system-config-securitylevel to provide the firewall page.
  - Speed up startup and shutdown.
  - If package selection is disabled, don't forget whatever was in the
    original kickstart file (#217165).


author: Chris Lumens <clumens@redhat.com> 2.6.18-1
changelog:
  - Don't require a root password (#215190).
  - Disable package screen if yum couldn't download (#216439).


author: Chris Lumens <clumens@redhat.com> 2.6.15-1
changelog:
  - Don't need to be root to run system-config-kickstart (patch from
    Panu Matilainen <Panu.Matilainen@nokia.com>, #211998).


author: Chris Lumens <clumens@redhat.com> 2.6.14-1
changelog:
  - Use updated translations (#210728).
  - Update documentation (#210863).
  - Don't enable yum plugins.
  - Disable popup menu on the package selection screen.


author: Chris Lumens <clumens@redhat.com> 2.6.10-1
changelog:
  - Fix unencrypted root password traceback (#190487).
  - Try harder to get a base repo enabled (#190508).


author: Chris Lumens <clumens@redhat.com> 2.6.4-1
changelog:
  - Convert package selection to using pirut (#178759).
  - Partitioning screen fixes for cciss.
  - Use consolehelper.


author: Chris Lumens <clumens@redhat.com> 2.5.24-1
changelog:
  - Remove mouse and langsupport.  These two options have been removed from
    kickstart so we shouldn't be generating invalid files.
  - Fail if we read a line we don't understand instead of being silent.
  - Deal with drivers instead of cards due to kudzu changes.


author: Chris Lumens <clumens@redhat.com> - 2.5.19-1
changelog:
  - Fixed a segfault in pygtk on the partitioning screen.
  - Fixed RAID editing screen so the config values don't change if you
    repeatedly edit a RAID volume.


author: Chris Lumens <clumens@redhat.com> - 2.5.18-1
changelog:
  - Get package group lists and their translations out of the comps.xml file
    instead of reying on a built-in (and out of date) list.
  - Added an "Install Everything" button (#134679).


author: Chris Lumens <clumens@redhat.com> - 2.5.16-1
changelog:
  - Fix display in indic locale (#138310) and (#138601)
  - Monitor order (#127477)
  - Translation of RAID message (#127687)
  - Unencrypted root passwords (#134678)
  - Broken nfs line parsing (#134681)


author: Brent Fox <bfox@redhat.com> 2.5.11-2
changelog:
  - handle missing mouse line (bug #124341)
  - use N_ instead of _ in packages.py (bug #124144)
  - remove code for dead firewall widgets (bug #124342)


author: Brent Fox <bfox@redhat.com> 2.3.4-2
changelog:
  - rebuild for completeness
  - added some new system profiling code, but it's not exposed in the UI yet


author: Brent Fox <bfox@redhat.com> 2.3.4-1
changelog:
  - Handle opening existing kickstart files
  - Handle multiple ethernet interfaces
  - Don't require rootpassword on upgrades


author: Brent Fox <bfox@redhat.com> 2.3.2-16
changelog:
  - Don't write out --emulthree if No Mouse is selected
  - Fix gtk.glade.bindtextdomain so that the glade screens pull in translations


author: Tammy Fox <tfox@redhat.com> 2.3.2-2
changelog:
  - Updated list of langs
  - Reimplemented keyboard list to use list from rhpl
  - Fix for iter_next change


author: Brent Fox <bfox@redhat.com>
changelog:
  - completed the port to gtk2
  - Fixed bug 65835
  - Fixed bug 66815
  - Fixed bug 64453 (with help from menthos@menthos.com)


author: Tammy Fox <tfox@redhat.com>
changelog:
  - Added optional ftp username and password
  - Added preview menu item
  - Added bootloader --upgrade
  - Added swap --recommended
  - Added %packages -- resolvedeps and %packages --ignoredeps


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added po directory
  - added grub password and initialize the disk label
  - added help manual and function to display it


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added emulate three buttons and probe for mouse options
  - added preview configuration window
  - modified basic.py to use dictionaries to store combo box selections


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added scrollwindow around partition information
  - made all widgets except partition scrollwindow unexpandable so that when the main window is resized only the partition list gets bigger
  - increased release number


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added file dialog box
  - cleaned up code
  - renamed okButton to saveButton in ksconfig.py
  - renamed Cancel button to Exit in interface
  - added /boot to default partition list
  - added menu icon


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Fabian Affolter <fabian@bernewireless.net> - 5-3.20090717
changelog:
  - Changed release because it's still a git checkout
  - Modified donwload script
  - Translation support will follow, I hope
  - Changed URL to new upstream location


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0.1-9
changelog:
  - Rebuild for new libmikmod
  - Rebuild with gcc 4.3
  - Stop shipping pre-generated doxygen docs, now that doxygen is fixed to no
    longer cause multilib conflicts


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0.1-7
changelog:
  - Remove support for patented sound formats (not used by any package in the
    Fedora-verse), submit to Fedora
  - Only include html version of doxygen docs (not latex source)
  - Update license tag for new licensing guidelines compliance
  - Use prebuild doxygen docs to avoid multilib conflicts


author: Dams <anvil[AT]livna.org> - 1.0.1-3
changelog:
  - Disabled static
  - devel packages Requires:SDL-devel because SDL_sound.h requires SDL.h
  - a bit of cleanup


author: Stefan Schulze Frielinghaus <stefan@seekline.net> - 2.5.2-1
changelog:
  - New upstream release
  - SPEC file cleanup
  - Init script cleanup
  - Removed some examples because of licensing issues. Upstream has clarified
    and changed most of the license tags to GPLv2. Additionally, upstream
    will include the examples in the next release.
  - Removed a provide statement since a period was in the name and no other
    package required that special name.


author: Chris Petersen <rpm@forevermore.net> 2.3.3-3
changelog:
  - Clean up spec
  - Add ghost file entries for the default logfile and pid
  - Add logrotate script
  - Add more bleedingsnort examples
  - Add pid to sec.sysconfig and completely rewrite to handle multiple instances
  - Fix download URL
  - Fix echo log command in 001_init.sec
  - Rewrite sysV init script to handle multiple instances (based loosely on vsftpd)


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-5
changelog:
  - apply patch s-c-l-634556.patch
  - resolves bug #634556
  - modifications in s-c-l to install even conditional & default packages


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-2
changelog:
  - resolves bug #624008
  - apply patch s-c-l-624008.patch
  - adds Low-German (nds_DE) to s-c-l
  - comment a redundant line in language_backend.py


author: Naveen Kumar <nkumar@redhat.com>- 1.3.4-2
changelog:
  - apply patch scl-1.3.4-devel.patch
  - contains some enhanc. reg. force. change of lang. when dep. are not installed 
  - Resolves Bug #568688


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> 3.0.0-19
changelog:
  - Fixed a compilation error with g++ 4.6 on default constructor definition
  - Split the big patch into smaller pieces


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Miroslav Suchý <msuchy@redhat.com> 1.3.1-1
changelog:
  - add GPLv2 license (msuchy@redhat.com)
  - cleanup spec (msuchy@redhat.com)
  - remove .htaccess file (msuchy@redhat.com)
  - point to url where we store tar.gz (msuchy@redhat.com)
  - Bumping package versions for 1.3. (jpazdziora@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.1.2-1
changelog:
  - Adding the correct checkstyle for inactive systems
  - Added the dupe compare css and javascript magic
  - 572714 - fixing css issues with docs


author: Michael Mraka <michael.mraka@redhat.com> 0.9.4-1
changelog:
  - resigning spacewalk cert
  - 516048 - syncing java stack with perl stack on channel naming convention


author: Justin Sherrill <jsherril@redhat.com> 0.9.2-1
changelog:
  - updating branding package for tomcat6 (jsherril@redhat.com)
  - let's start Spacewalk 0.9 (michael.mraka@redhat.com)


author: Jan Pazdziora 0.8.1-1
changelog:
  - Update copyright years to end with 2010.
  - Dead code removal.
  - bumping Version to 0.8.0 (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 0.7.1-1
changelog:
  - Add symlink capability to config management (joshua.roys@gtri.gatech.edu)
  - add the Chat graphic as an advertisement to the layouts
  - allow users to chat with spacewalk members on IRC via the web


author: John Matthews <jmatthew@redhat.com> 0.6.6-1
changelog:
  - 506489 - remove the link associated with the org name present in the UI
    header (bbuckingham@redhat.com)
  - 505101 - update css so that links are underlined when hovering
    (bbuckingham@redhat.com)
  - fix to shwo the correct error message css (paji@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 0.6.3-1
changelog:
  - 444221 - More fixes related to snippet pages in general (paji@redhat.com)
  - 484962 - Cleanup System Overview alerts. (dgoodwin@redhat.com)
  - 480011 - Added organization to the top header near the username (jason.dobies@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.6.1-1
changelog:
  - 494475,460136 - remove faq & feedback code which used customer service emails.
    (jesusr@redhat.com)
  - 443132 - Converted action lists to new list tag. (jsherril@redhat.com)


author: Mattia Verga <mattia.verga@tiscali.it> - 3.6-1
changelog:
  - Update to 3.6 version
  - Modify sources to remove iridflar.exe
  - Remove patches merged upstream
  - Make sure fpc >= 2.4.4 to avoid execstack errors
  - Add scriptlets for icon cache
  - Make sure lazarus >= 0.9.30.4 to work with F17 and higher


author: Mattia Verga <mattia.verga@tiscali.it> - 3.4-4
changelog:
  - Added wiki documentation as subpackage
  - Fix old FSF address in license file
  - Remove binary software quicksat.exe and IRIDFLAR.EXE
  - Excluded ppc architecture, since lazarus < 0.9.30


author: Sergio Pascual <sergiopr@fedoraproject.org> - 3.0.1.6-4.20100724svn
changelog:
  - Using d-f-validate instead od d-f-install (Fixes bz #662472)
  - Changed RPM_BUILD_ROOT macro to lower case form


author: Lubomir Rintel (Fedora Astronomy) <lkundrak@v3.sk> - 3.0.1.6-1.20090408svn
changelog:
  - Update to post latest beta
  - Drop the unzip patch
  - Upstream did the datadir and xdg-open chage as well, drop patches


author: Zach Carter <z.carter@f5.com> - 1.4.25-1
changelog:
  - New upstream version (removes need for gcc47-patch)
  - Add BR to enable unit tests, lvm snapshot, btrfs snapshot support (BZ 811856)
  - Add schroot-test-sbuild-util-path.patch


author: Zach Carter <z.carter@f5.com> - 1.4.23-1
changelog:
  - rebuild for boost 1.47.0
  - fix incorrect %dir tag for binary in %files section
  - update to new upstream 1.4.23 version


author: Zach Carter <z.carter@f5.com> - 1.4.19-1
changelog:
  - rebuild for new boost
  - fix boost 1.46 build issue: leaf() function renamed to filename()
  - update to 1.4.19


author: Zach Carter <z.carter@f5.com> - 1.4.2-1
changelog:
  - update to 1.4.2
  - require libuuid-devel
  - add /sbin directories to path in /etc/schroot/default/config BZ588200


author: Zach Carter <z.carter@f5.com> - 1.2.3-1
changelog:
  - new upstream version
  - compile with --enable-static --disable-shared
  - improve dchroot description
  - define directory ownership
  - add + to GPLv3 license definition


author: Zach Carter <z.carter@f5.com> - 1.2.1-2
changelog:
  - move libsbuild subpackage into main package
  - remove duplicate doc entries
  - disable rpath
  - defattr for dchroot files


author: Zach Carter <z.carter@f5.com> - 1.2.0-1
changelog:
  - move dchroot.1.gz to correct subpackage
  - removed superfluous Requires: statements
  - moved i18n files into libsbuild subpackage
  - removed tmpfs patch


author: Miroslav Suchý 1.6.3-1
changelog:
  - fix a rookie mistake (mzazrivec@redhat.com)
  - IPv6: reprovisioning with static network interface (mzazrivec@redhat.com)
  - fix TB during re-provisioning with static nic (mzazrivec@redhat.com)
  - IPv6: routines to determine IPv6 address/netmask (mzazrivec@redhat.com)
  - IPv6: don't include ::1 as a valid nameserver addr (mzazrivec@redhat.com)


author: Jan Pazdziora 0.2.13-1
changelog:
  - 645795 - changing spaceawlk-koan to use subproccess only if it is available
    and to fall back to popen2 if its not, this enables RHEL 4 support again
    (jsherril@redhat.com)


author: Justin Sherrill <jsherril@redhat.com> 0.2.8-1
changelog:
  - 637273 - fixing error with reprovisiong (unexpected keyword argument
    cache_only) (jsherril@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 0.2.3-1
changelog:
  - import virtualization module in kickstart_guest section (mzazrivec@redhat.com)
  - 532429 - refresh virt. state after successful guest kickstart (mzazrivec@redhat.com)
  - 530553 - wait for virt. domain installation to finish and restart (mzazrivec@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 0.2.2-1
changelog:
  - grep | awk is rarely needed
  - 517876 - fixing spacewalk-koan so it doesnt require up2date on Fedora 11


author: John Matthews <jmatthew@redhat.com> 0.1.17-1
changelog:
  - 510299 - static ks fix. (paji@redhat.com)
  - 510299 - Big commit to get static networking to work (paji@redhat.com)


author: John Matthews <jmatthew@redhat.com> 0.1.16-1
changelog:
  - 508956 - fixing file preservation to actually use updated initrd.img
    (mmccune@gibson.pdx.redhat.com)


author: John Matthews <jmatthew@redhat.com> 0.1.15-1
changelog:
  - fixing spacewalk-koan spec file to build for 2.1 properly
    (jsherril@redhat.com)
  - 497571 - switching to python 1.5 requires since we have to support 2.1
    (mmccune@gmail.com)
  - 497571 - switch from True/False to 0/1 to support rhel 2.1 and
    (mmccune@gmail.com)
  - 503996 - Added some information on the error message to the status returned
    to the server. (jason.dobies@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 0.1.13-1
changelog:
  - 497871 - fixing issue where guest provisioning would show as succesful even
    when it had failed (jsherril@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 0.1.12-1
changelog:
  - 494976 - adding cobbler system record name usage to reprovisioning (jsherril@redhat.com)
  - update copyright and licenses (jesusr@redhat.com)


author: Mike McCune <mmccune@gmail.com> 0.1.5-1
changelog:
  - 461162 - get the virtualization provisioning tracking system to work with a :virt system record.
  - 461162 - Quick fix to get spacewalk koan going with a ks....


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Xavier Bachelot <xavier@bachelot.org> 2.0.5-2
changelog:
  - Fix conditional BuildRequires on libthai-devel.
  - Fix description.
  - Fix Requires in the devel subpackage.
  - Be more specific on filenames in the %files' sections.


author: Bruno Wolff III <bruno@wolff.to> 0.18.1-1
changelog:
  - Initial package for f18 rawhide
  - Switch back to rawhide repos until branch
  - Include Russian localization ks files


author: Bruno Wolff III <bruno@wolff.to> 0.15.0-1
changelog:
  - Now that F14 is gold, we want a separate rawhide package.
  - Includes most stuff from F14, minus some last minute space cutting changes.


author: Bruno Wolff III <bruno@wolff.to> 0.14.0-1
changelog:
  - New release for F14
  - Add some documentation about how rebuild package from git repo
  - Change custom kickstarts to use ../ to refer to included kickstarts


author: Jeroen van Meeuwen <kanarip a fedoraunity.org> 0.11.0-1
changelog:
  - Point fedora-live-base.ks repos to f-10
  - Remove sysprof from fedora-livedvd-developer.ks
  - Latest and final rebuild for Fedora 10


author: Simon Schampijer <simon@schampijer.de> - 112-1
changelog:
  - Able to download Data URIs #1029 (Lucian Branescu)
  - Don't choke on Lang=C #979
  - Object chooser remains shown after activity has been closed #1192
  - Refine image and link right click palette #815 
  - Toolbar redesign


author: Simon Schampijer <simon@schampijer.de> - 104-1
changelog:
  - Create a HTTP Cookie to authenticate with the Schoolserver (Martin Langhoff)
  - Deprecation fix: Use bundle_id instead od service_name
  - Set intl.accept_languages based on the locale (Daniel Drake)
  - New Translations


author: Zing <zing@fastmail.fm> - 1.5.12-2
changelog:
  - Bring back link with ncursesw, set -DUTF_8 for xmlUTF8Strlen #546431
    mistakenly dropped when charset patch went upstream


author: Zing <zing@fastmail.fm> - 1.5.12-1
changelog:
  - Bug fixes + openssl added as a requirement
  - Corrected two crashes when using mark unread and open URL on
    non-existent items.
  - Use OpenSSL for MD5 calculations and remove all old MD5 code.
  - Fix 64bit digest calc. Readstatus wasn't remembered on 64bit versions.


author: Zing <zing@fastmail.fm> - 1.5.8-1
changelog:
  - update to 1.5.8
  - remove manpath and softlink patch (upstream)
  - update charset patch (utf-8 enabled in configure)
  - snowsync program removed


author: Zing <shishz@hotpop.com> - 1.5.7-3
changelog:
  - cleanups related to runtime charset detection
  -   get rid of configure --charset=UTF-8 hardcoding
  -   link with ncursesw, set -DUTF_8 for xmlUTF8Strlen


author: Zing <shishz@hotpop.com> - 1.5.3-0.fdr.4
changelog:
  - More cleanups from QA (M.Schwendt)
  -	do the buildroot better (grrr hopefully)
  -	locales & paths should now be working


author: Zing <shishz@hotpop.com> - 1.5.3-0.fdr.3
changelog:
  - More cleanups from QA (M.Schwendt)
  -	fix man path directory ownerships
  -	don't let installer strip-install
  -	fix file permissions in src.rpm to 0644
  -	use find_lang macro


author: Zing <shishz@hotpop.com> - 1.5.3-0.fdr.2
changelog:
  - disable auto version check
  - build executables as PIEs
  - QA from Michael Schwendt:
  -	Buildrequires: gettext
  -	install man pages to /usr/share/man
  -	unneeded version check for ncurses-devel
  -	add SMP make flag
  -	add RPM_OPT_FLAGS


author: Christoph Wickert <cwickert@fedoraproject.org> - 3.0.0-4
changelog:
  - Update to 3.0.0 final
  - Add patch to fix DSO linking (#565108)
  - Add some more %doc files
  - Use new layout of the folder view (don't display message numbers in colums)
  - Disable update check by default


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5.0-4.2029svn
changelog:
  - patch libsylph/socket.* to not redefine SOCK_NONBLOCK from
    /usr/include/bits/socket.h
  - rediff some patches for Fedora fuzz=0 pedantry


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5.0-2.2029svn
changelog:
  - update to post-2.5.0 revision 2029
  - upstream's IMAP LIST modifications move away from RFC 2683 (test this!)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5.0-0.10.rc2
changelog:
  - work around build problem with gtk2 >= 2.13.1 which drastically
    changed the number of header-includes for the deprecated header files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5.0-0.6.rc
changelog:
  - Add CTE procmime.c patch from svn.
  - Fix codeconv.c to support "utf8" locales and not just "UTF-8"
    (fixes #450063).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.8-1
changelog:
  - Patch spell-checking support. Retrieve list of dictionaries from
    Enchant instead of Aspell, because GtkSpell no longer uses Aspell.
  - BR enchant-devel
  - Update to 2.4.8 (accumulated bug-fixes).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.7-3
changelog:
  - rebuilt for new openldap/openssl per request on fedora-devel-list
  - in desktop file use absolute path to icon file


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.2-1
changelog:
  - Update to 2.4.2 (new stable branch).
  - Prune %changelog entries which date back as far as Jul 4 2000
    and Sylpheed 0.3.2.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.3.1-3
changelog:
  - Patch PGP/MIME signed message compose, so it doesn't strip off
    whitespace of the "-- " body signature delimiter. It's upstream
    preference that it still does that for ISO 2022 JP to be compatible
    with a few broken MUAs that have problems with QP encoding.
  - Remove .desktop categories "Application" and "X-Fedora".


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.3.1-2
changelog:
  - Patch APOP vulnerability (CVE-2007-1558) as in 2.4.0.
  - Patch default directory for SSL/TLS certificates.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2.6-4
changelog:
  - Enable OpenLDAP support as requested by several users.
  - Drop minimal version from GPGME build requirement
    (it's superfluous in our environments).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2.6-2
changelog:
  - Adapt upstream's patch to prevent a crash when switching folders
    (sylpheed-2.2.6-summaryview-crash.patch).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.0-0.2.beta3
changelog:
  - temporarily add BR libpng-devel to work around a broken cairo-devel
    package, which is pulled in and breaks the pkg-config dependency
    chain (#161688)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.3-1
changelog:
  - Update to 1.0.3.
  - Enable support for GPGME 1.0 and compface.
  - Apply common spec cleanup. Make desktop file UTF-8.


author: Akira TAGOH <tagoh@redhat.com> - 1.0.0-0.1.beta3
changelog:
  - New upstream release.
  - sylpheed-default-browser.patch: updated to apply cleanly.
  - sylpheed.1: added a simple man page. (#129387)


author: Akira TAGOH <tagoh@redhat.com> 0.9.10-2
changelog:
  - sylpheed-default-browser.patch: applied to change the default browser to
    gnome-open. (#119007, Michael Schwendt)


author: Akira TAGOH <tagoh@redhat.com> 0.9.8a-3
changelog:
  - don't strip the binary. Thanks to Michael Schwendt
  - use upstream's icon for the desktop file.
  - install the desktop file using desktop-install-file


author: Akira TAGOH <tagoh@redhat.com> 0.9.8a-2
changelog:
  - add _with_gpgme to build enabled gpgme support.
    NOTE: it's disabled as default. just define _with_gpgme to enable it.


author: Aurelien Bompard <abompard@fedoraproject.org> - 0.79-1
changelog:
  - version 0.79
  - add patch to fix DSO linking
  	(http://fedoraproject.org/wiki/UnderstandingDSOLinkChange)


author: Aurelien Bompard <abompard@fedoraproject.org> 0.0.1.10393-1
changelog:
  - version 10393
  - add patch to detect libunitsync.so properly
  - drop workaround for rhbz#478589
  - require spring
  - add patch to fix gettext detection on x86_64


author: Steve Traylen <steve.traylen@cern.ch> - 3.0.1-0.1.beta2
changelog:
  - Update to 3.0.2beta2
  - Add new CHANGELOG and README files.
  - Add python3 support.
  - Remove python-rm-bang-python.patch, no longer a file to patch even.


author: Jerry James <loganjerry@gmail.com> - 0.1-8.20120109svn
changelog:
  - Update to recent subversion snapshot
  - Add GCC 4.7 patch
  - Disable tests until valgrind doesn't cause failures in libdl


author: David A. Wheeler <dwheeler at, dwheeler.com> 0.1-2
changelog:
  - Fixed comments by Marcela Maslanova, mmaslano (at) redhat*DOT*com 2009-02-26
  - Moved definitions of subpackages to "top" of spec before prep.
  - moved "check" before "files".
  - Use macro for release version 0.1-11-18-2008 for future updates.
  - No doc for -devel package; it's already in the base.
  - CPPFLAGS now includes optflags.


author: Peter Lemenkov <lemenkov@gmail.com> 2.2.1-0
changelog:
  - Version 2.2.1
  - Using externally shipping tolua++ nstead of internal one.
  - No more using of MAD and FLAC


author: Orion Poplawski <orion@cora.nwra.com> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - Drop all stsci sources and patches, dropped from upstream
  - Drop gcc and py27 patches fixed upstream
  - Add %check section to run tests


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines. 
  - Changed buildrequires fftw version 3  from fftw2


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Matthias Saou <http://freshrpms.net/> 3.18-7
changelog:
  - Use bcond for the applet, it makes the spec easier to understand.
  - Use %global for ruby_sitelib, as it fails with bcond otherwise...
  - BuildRequire ruby(panelapplet2) for gnome-applet-sshmenu in order to fail
    building if it's not available, instead of creating a broken package.


author: Matthias Saou <http://freshrpms.net/> 3.18-1
changelog:
  - Update to 3.18.
  - Rebased both patches for the Makefile changes.
  - Fix scriplets by adding "|| :" for touch.
  - Include new bash_completion.d as-is since all packages seem to do it.


author: Matthias Saou <http://freshrpms.net/> 3.15-3
changelog:
  - Split out the GNOME applet as gnome-applet-sshmenu while keeping the basic
    menu application as sshmenu, and have all the shared ruby files be there.


author: Matthias Saou <http://freshrpms.net/> 3.15-2
changelog:
  - Follow ruby guidelines : Put ruby files in ruby_sitelib.
  - Add required hardcoded ruby abi version requirement.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Warren Togami <wtogami@redhat.com> - 1.2.8-4
changelog:
  - SDL_AUDIODRIVER=esd temporary hack until SDL supports pulseaudio directly
    avoids applications from locking up. (#358341)


author: Brian Pepple <bpepple@fedoraproject.org> - 1.2.8-1
changelog:
  - Update to 1.2.8.
  - Drop requires on SDL, since the devel soname will pull it in.
  - Drop volume patch.  fixed upstream.
  - Drop reopen patch.  fixed upstream.
  - Drop bad-code patch.  fixed upstream.
  - Bump min version of SDL needed.
  - Bump min version of mikmod needed.


author: Brian Pepple <bpepple@fedoraproject.org> - 1.2.7-1
changelog:
  - Update to 1.2.7.
  - Update bad-code & timidity patches.
  - Simplify description & summary for devel package.
  - Use disable-static configure flag.
  - Drop 64bit patch, fixed upstream.
  - Drop libmikmod.patch, fixed upstream.
  - Add patch to allow control volume w/playmus. Bug #203210.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.6-1
changelog:
  - 1.2.6, use system libmikmod.
  - Drop obsolete patches, *.la and over-eager cleanup from %clean.
  - Build with dependency tracking disabled.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.2.5-10.1
changelog:
  - Make -devel package require exact release of main package (this
    is particularly important for API changes such as in 1.2.5-9).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.5-9
changelog:
  - Bring back Ogg support (BuildRequire libvorbis-devel).
  - Add SDL-devel dependency to -devel.
  - Improve description.


author: Thomas Woerner <twoerner@redhat.com> 1.2.5-1
changelog:
  - new version 1.2.5
  - cleaned up spec file
  - installing playmus and playwave by hand (not installed automatically anymore)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.1-1
changelog:
  - Require arts-devel rather than the obsolete kdelibs-sound-devel
  - Update to 1.2.1
  - Fix build with current auto* tools


author: Petr Šabata <contyk@redhat.com> - 0.2.1-2
changelog:
  - Do not install terminfo entries since those are already included in the
    ncurses package (#797828)


author: Nils Philippsen <nils@redhat.com> - 1.0.2-1
changelog:
  - separate documentation from system-config-users
  - remove stuff not related to documentation
  - add source URL


author: Matthias Saou <matthias@saou.eu> 1.3.7-1
changelog:
  - Update to 1.3.7.
  - Drop patch disabling XInitThreads, see upstream #610.
  - Update %description and %doc.
  - Replace cmake patch with our own install lines : Less rebasing.


author: Matthias Saou <matthias@saou.eu> 1.3.6-2
changelog:
  - Update Obsoletes for the latest version + fix (release + 1 because of dist).
  - Add missing cmake BuildRequires.
  - Update cmake patch to also install man pages.


author: quiffman GMail 1.3.6-1
changelog:
  - Update to reflect the synergy/synergy+ merge to synergy-foss.org (#678427).
  - Build 1.3.5 and newer use CMake.
  - Patch CMakeLists.txt to install the binaries.


author: Jiri Popelka <jpopelka@redhat.com> - 2.0.1-0.9.20120419svn
changelog:
  - Latest upstream snapshot: all patches and changes merged upstream !
  - Build splix with JBIG1 support and install DRV files instead of PPD files.
  - Add Device ID for Samsung ML-2010 (#807308).


author: Jiri Popelka <jpopelka@redhat.com> - 2.0.1-0.6.20111121svn
changelog:
  - Install splix PPDs into separate directory.
  - Added patch for compiling/installing DRVs instead of PPDs.
    However we still ship only selected PPDs instead of DRVs as some printers
    require JBIG1 support.


author: Mo Morsi <mmorsi@redhat.com> - 1.9-1
changelog:
  - Update to latest upstream release
  - patch2, patch3 no longer needed
  - update to latest fedora java guidelines


author: Matthias Haase <matthias_haase@bennewitz.com> - 2.0.8-2
changelog:
  - Many specfile enhancements and corrections
  - default-config-desktop-file.patch
  - Initial build for Fedora


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2-5
changelog:
  - Patch to honor $RPM_OPT_FLAGS during build.
  - Disable autotools dependency tracking during build for cleaner build logs
    and possible slight build speedup.


author: Ville Skyttä <ville.skytta@iki.fi> 1.3-1jpp
changelog:
  - Update to 1.3.
  - Use sed instead of bash 2 extension when symlinking jars during build.
  - Add Distribution tag, fix URL, tweak Summary and description.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 1.3.10-2
changelog:
  - Following the BZ#660072, added sfcb.service file for compliance with systemd
  - Since sfcb's PAM authentication requires, the user to be in group sfcb, 
  -    added the root user to "sfcb" group in %pre section.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.9-1
changelog:
  - Update to sblim-sfcb-1.3.9
  - Compile with --enable-uds, i. e. enable unix domain socket local
    connect functionality
  - Create sfcb system group (used by basic authentication with PAM)
    in pre install scriptlet
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
  - Add missing soname files


author: <srinivas_ramanatha@dell.com> - 1.3.4-5
changelog:
  - added the devel package to fit in all the development files 
  - Made changes to the initscript not to start the service by default


author: <ratliff@austin.ibm.com> - 1.3.4-4
changelog:
  - added build requires for flex, bison, cim-schema suggested by Sean Swehla
  - added sfcbrepos directive to post section


author: <ratliff@austin.ibm.com> - 1.3.4-3
changelog:
  - re-ordered the top so that the name comes first
  - added the la files to the package list
  - removed the smp flags from make because that causes a build break
  - updated spec file to remove schema and require the cim-schema package
  - change provides statement to cim-server as suggested by Matt Domsch
  - updated to upstream version 1.3.4 which was released Jun 15 2009


author: <ratliff@austin.ibm.com> - 1.3.2-2
changelog:
  - updated spec file based on comments from Srini Ramanatha as below:
  - updated the Release line to add dist to be consistent with sblim-sfcc
  - updated the source URL


author: <ratliff@austin.ibm.com> - 1.3.2-1
changelog:
  - updated upstream version and added CFLAGS to configure to work 
  - around http://sources.redhat.com/bugzilla/show_bug.cgi?id=6545


author: <ratliff@austin.ibm.com> - 1.3.0-1
changelog:
  - updated buildrequires to require libcurl-devel rather than curl-devel
  - removed requires to allow rpm to automatically generate the requires
  - removed echo to stdout
  - removed paranoia check around cleaning BuildRoot per Fedora MUST requirements
  - changed group to supress rpmlint complaint
  - added chkconfig to enable sfcb by default when it is installed
  - added patch0 to enable 1.3.0 to build on Fedora 9


author: David Nalley <david@gnsa.us> - 1.0.8-2
changelog:
  - fixed space typo in description
  - more explicitly defined stuff in bindir
  - changed group tag from Apps/Internet to Apps/System
  - added buildreq of popt-devel and ncurses-devel
  - added req of ncurses


author: Michael Mraka <michael.mraka@redhat.com> 1.6.6-1
changelog:
  - removed dead function getCertValidityRange()
  - removed dead function getCertValidityDates()
  - removed dead function getExistingOverridesConfig()


author: Miroslav Suchý 1.4.1-1
changelog:
  - Bumping package versions for 1.4 (tlestach@redhat.com)
  - updating Copyright years for year 2011 (tlestach@redhat.com)


author: Jan Pazdziora 0.9.2-1
changelog:
  - Use tempfile.TemporaryFile and os.path.abspath, to avoid the need for
    spacewalk.common.fileutils in client_config_update.py.


author: jesus m. rodriguez <jesusr@redhat.com> 0.6.3-1
changelog:
  - adding optional way to specify profile name. (satoru.satoh@gmail.com)
  - 497110 - Don't assume jabberd is installed in rhn-ssl-tool (dgoodwin@redhat.com)


author: Todd Warner <taw@redhat.com>
changelog:
  - added rhn-ssl-tool and associated modules
  - using a Makefile which builds a tarball now.
  - added man page
  - added __init__.py*
  - GPLed this code. No reason to do otherwise.


author: Jaroslav Reznik <jreznik@redhat.com> - 4.0.9-1
changelog:
  - New gnome style manual (bz#326091)
  - Fixes hang when signing zone (bz#219788)
  - Fixes Bind package changes (bz#457369)
  - Fixes icon reference (bz#457713)
  - Dependencies changes gnome-python2-gnome (bz#460015)
  - Repackage with new translations
  - Other changes


author: Radek Brich <rbrich@redhat.com> - 4.0.8-1
changelog:
  - fix delegation-only zone creation (bz#323291)
  - allow subdomain delegation (i.e. make Domain Name field editable)
    (bz#253310)
  - fix traceback on loading Named ACLs (bz#289561)
  - set proper permissions on zone files moved to slaves/
    (bz#444285, bz#444286)
  - add listen-on-v6 to default named.conf (bz#234153)
  - fix typo in a error dialog (bz#443731)


author: Radek Brich <rbrich@redhat.com> - 4.0.5-1
changelog:
  - Correct warning about format of SRV RR (bz#423761)
  - Clean up spec file, links, permissions, add COPYING (bz#226452)


author: Ondrej Dvoracek <odvorace@redhat.com> - 4.0.2-6
changelog:
  - Corrected rndc key labels
  - Resolves #219795
  - Corrected DNSSEC key record column
  - Resolves #219798


author: Ondrej Dvoracek <odvorace@redhat.com> - 4.0.2-5
changelog:
  - Added SSHFP Resource record
  - Resolves #205689
  - Corrected some typos in strings
  - Resolves #232054


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-42
changelog:
  - Handle named.conf 'include' statements within clauses 
    e.g. 'view x { include "y"; }'
  - Tooltip text not gettext-ized (part of fix for bug 195001)


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-40
changelog:
  - fix bug 184065: prompts to place slave / DDNS updateable zone
                    files in slaves/ 
  - ship updated translations


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-33
changelog:
  - fix bug 175420: traceback when named.conf included a nonexistent file
  - fix bug 176142: ship updated Serbian translation


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-32
changelog:
  - fix bug 174284: Lookup.py failed when hostname matches IP
                    address regexps and has no DNS record


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-31
changelog:
  - fix deletion of record with following records for same name
  - fix zone serial increment on save
  - ship updated translations


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-30
changelog:
  - fix IPv6 address labelling
  - fix reverse IP zone origin selection menus for A & AAAA records
    when there are forwarder reverse IP zones
  - remove CVS directories mistakenly included in previous versions


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-22
changelog:
  - fix bug 165292: missing 'key' keyword in ACL named keys
  - workaround ISC bug 15195: named cannot handle multiple keys in rndc.key


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-21
changelog:
  - fix bug 164245: generate desktop file from translations in .po files
  - fix bug 164613, 164611: translated string typos
  - further fix for bug 158438: sentence splitting


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-20
changelog:
  - fix bug 164129: DNS.py 'declartation' -> 'declaration'
  - fix bug 163937: NamedConfOptions 'Name of ke.' -> 'Name of key.'
  - fix bug 158438: avoid sentence splitting in translatable messages


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-18
changelog:
  - fix bug 163304: handle empty contents in Zone.out
  - fix bug 161988: create links to .mo files for bindconf
  - fix bug 161987: don't use substring of translated string in DNSsec TrustedKeys
  - fix bug 159534: add descriptions to deprecated record types
  - fix bug 158441: shorten NamedConfOptions description strings


author: Jason Vas Dias <jvdias@redhat.com> - 4.0.0-16
changelog:
  - fix out-of-zone data reporting
  - out-of-zone string comparison should be case-insensitive
  - fix bug 156913: wrong file permissions for config files


author: Lorenzo Villani <lvillani@binaryhelix.net> - 0.8.0-1
changelog:
  - 0.8.0
  - Introduces the 'slot_size' option which defines the size of a slot
    containing an icon
  - Changed the way the 'geometry' option works: now it's expressed in
    slot_size multiples instead of pixels.
    See the ChangeLog for more information.


author: Miroslav Suchý <msuchy@redhat.com> 0.4-1
changelog:
  - 800899 - consistently use macros
  - 800899 - include license file
  - Spacewalk is released under GPLv2, lets stick to it


author: Miroslav Suchý 0.3-1
changelog:
  - add man page
  - Description lines must not exceed 80 characters
  - Summary must begin with capital letter


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.97.2-1
changelog:
  - 1.97.2
  - The method to build python3 binding is now written in the spec file,
    however for now not activate it


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-2
changelog:
  - Bump spec rev to 2 due to change of spec file name from svrcore
  - to svrcore-devel to comply with fedora packaging guidelines


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-1
changelog:
  - Bump rev to 4.0.2; now using HEAD of mozilla/security/coreconf
  - which includes the coreconf-location.patch, so got rid of patch


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Naveen Kumar <nkumar@redhat.com> - 4.4.4
changelog:
  - rectify error to directly install fonts in fontdir instead of subdir in fontdir
  - Resolves bug #653608


author: Naveen Kumar <nkumar@redhat.com> - 4.4.2
changelog:
  - apply patch smc-fonts_616324.patch created from Pravin S' src Modification 
  - resolves bug #616324


author: Naveen Kumar <nkumar@redhat.com> - 4.4.1
changelog:
  - new release from upstream
  - changes in spec file to incorporate new build from sfd source
  - remove patch bug-523454.patch
  - reolves bug #586283
  - reolves bug #586286


author: Naveen Kumar <nkumar@redhat.com> - 04.2.9
changelog:
  - oops! forgot to rename 66-smc-meera.conf to 65-0-smc-meera.conf in INSTALL in spec file
  - oops! forgot to remove 66-smc-meera.conf
  - resolves Bug #586288


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 04.1-4
changelog:
  - change descriptions
  - fix bug in kalyani font's obsoleting version number
  - move _font_pkg macros next to corresponding packages


author: Pravin Satpute <psatpute@redhat.com> 04.1-1
changelog:
  - new upstream release
  - fontconfig rule for size adjustment of Meera is added
  - two new fonts kalyani and anjalioldlipi
  - bugfix 448078


author: Pravin Satpute <psatpute@redhat.com> 04-4
changelog:
  - added comment about sharing directory in spec file
  - fontdir will be 'smc' only instead of 'smc-fonts' earlier


author: Pravin Satpute <psatpute@redhat.com> 04-3
changelog:
  - defattr now comes after files
  - s/malayalam/Malayalam in description
  - removed '-fonts' from fontdir variable value


author: Pravin Satpute <psatpute@redhat.com> 04-2
changelog:
  - done changes in spec file as suggested in review request
  - changed variable name from xfontdir to fontdir


author: gil cattaneo <puntogil@libero.it> 0:3.1.1-8
changelog:
  - Enable new modules:  
  - spring-context-support, spring-oxm, spring-web,
  - spring-jms, spring-orm, spring-webmvc,
  - spring-webmvc-portlet, spring-struts


author: Juan Hernandez <juan.hernandez@redhat.com> 0:3.1.1-3
changelog:
  - Own the /usr/share/java/springframework directory (rhbz#814934)
  - Remove patch used to deal with missing tomcat POM files


author: Simon Schampijer <simon@schampijer.de> - 73-1
changelog:
  - New toolbars
  - Support for Epub files
  - Support for notes associated with bookmarks
  - Show a information bar in fullscreen mode, with pagecount and battery information


author: Jens Petersen <petersen@redhat.com> 20020220-1
changelog:
  - update to latest dictionaries
  - put source in one bzip2ed tar file
  - tidy spec file
  - make unannotated
  - include SKK-JISYO.pubdic+


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-5
changelog:
  - Apply patches from itamarjp, landgraf, mschwendt to fix:
    - Needs pyhon-dbus: https://bugzilla.redhat.com/show_bug.cgi?id=708631
    - Missing OK button: https://bugzilla.redhat.com/show_bug.cgi?id=646041


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.15-8
changelog:
  - system-config-keyboard-1.2.15-nolayout.patch: insert a default ServerLayout
    section if none is found.


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.15-5
changelog:
  - Include icon in anaconda keyboard selection screen (#469165)
  - Remove extension from desktop entry icon


author: Lubomir Kundrak <lkundrak@redhat.com> 1.2.15-1
changelog:
  - New upstream release
  - Fix possibility to cancel in TUI (#216132)
  - Use system icon set (#291261)
  - Fix install places and permissions


author: Jesse Keating <jkeating@redhat.com> - 1.2.11-4
changelog:
  - Patch to work with new firstboot (#424811)
  - Add requires for kudzu/newt (#177301)
  - Update url (#235072)
  - Remove obsolete no translation (#332301)


author: Pete Graner <pgraner@redhat.com> - 1.2.11-2
changelog:
  - Updated License tag per Fedora Licenseing Guidlines.
  - Removed  --add-category X-Red-Hat-Base to fix build errors


author: Brent Fox <bfox@redhat.com> 1.2.1-1
changelog:
  - renamed from redhat-config-keyboard
  - add Obsoletes for redhat-config-keyboard
  - make changes for Python2.3


author: Brent Fox <bfox@redhat.com> 1.0.3-1
changelog:
  - add a us keymap to keymaps with non-latin chars (bug #82440)
  - write out the XkbVariant line if it is present
  - handle XkbOptions to allow toggling between keymaps


author: Brent Fox <bfox@redhat.com> 0.9.2-1
changelog:
  - Wrap the destroy call in a try/except because there is no self.mainWindow in firstboot reconfig mode


author: Thomas Janssen <thomasj@fedoraproject.org> 0.5.5-1
changelog:
  - Update to new upstream release
  - Corrects a lot of bugs and problems. See the CHANGELOG for details.


author: Thomas Janssen <thomasj@fedoraproject.org> 0.5.4-1
changelog:
  - Update to new upstream version
  - Corrects a lot of bugs and problems. See the changelog for details.


author: Thomas Janssen <thomasj@fedoraproject.org> 0.5.3-1
changelog:
  - Updated to new upstream version
  - Readded a -DCMAKE workaround (please keep it for now)
  - Useing chmod -x to prevent spurious-executable-perm. Bug filed.


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.2-2
changelog:
  - (HTML) docs patch, use %find_lang --with-kde
  - own %{_kde4_appsdir}/skrooge*/ dirs
  - %check: omit extraneous desktop-file-validate's


author: Thomas Janssen <thomasj@fedoraproject.org> 0.5.2-1
changelog:
  - Changed to final 0.5.2 version
  - Bugfixes, including a nasty bug where one thinks the data is gone
  - added HTML documentation
  - added localizations


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.1-0.4.beta
changelog:
  - misc cosmetics
  - mime scriptlets
  - move icons to hicolor
  - -libs: drop dup'd docs, add min kdelibs4 dep


author: Jan Pazdziora 1.7.36-1
changelog:
  - Update .po and .pot files for spacewalk-backend.
  - Download translations from Transifex for spacewalk-backend.
  - Remove unstructured debugging outputs. (slukasik@redhat.com)


author: Simon Lukasik <slukasik@redhat.com> 1.7.33-1
changelog:
  - OpenSCAP integration -- Backend API interface. (slukasik@redhat.com)
  - convert empty string to NULL for postgresql (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.7.31-1
changelog:
  - merged solve_dependencies_arch() and solve_dependencies()
  - merged listChannelsSource() and listChannels()


author: Michael Mraka <michael.mraka@redhat.com> 1.7.19-1
changelog:
  - empty epoch have to be None
  - compute payload_size including its header
  - idn_ascii_to_pune() expects string not list
  - made mod_wsgi configuration consistent with mod_python


author: Michael Mraka <michael.mraka@redhat.com> 1.7.17-1
changelog:
  - fixed KeyError during deb package push
  - fixed ERROR: unhandled exception occurred: ('epoch').
  - fixed InvalidPackageErrorduring push of deb package
  - converted rhnpush to use A_Package interface


author: Michael Mraka <michael.mraka@redhat.com> 1.7.14-1
changelog:
  - fixed macros in changelog
  - check common/* for pylint errors
  - fixed pylint errors and warnings in common/*.py


author: Michael Mraka <michael.mraka@redhat.com> 1.7.13-1
changelog:
  - simplified checksum_exists condition
  - merged duplicated h.execute() call
  - version and release should be strings, epoch should be None or string
  - modified RPM/MPM/DEB package for payload_checksum
  - generic code to compute checksum of package
  - spacewalk-repo-sync updated to use new package object
  - created DEB_Package
  - moved InvalidPackageError to rhn_pkg
  - created RPM_Package
  - create proper package object
  - compute checksum while saving payload
  - rewritten package_push handler to use package object
  - created virtual class for RPM/MPM/DEB packages


author: Jan Pazdziora 1.7.4-1
changelog:
  - Revert "695282 - censor password from registration.reserve_user if it appears
    in TB"
  - 749890 - setting up seclist in reserve_user, new_system, and
    new_system_user_pass.


author: Jan Pazdziora 1.7.1-1
changelog:
  - Check for channel family entitlement counts.
  - Also show what the certificate slot is called in the WebUI.
  - Better explanation of slot changes.


author: Michael Mraka <michael.mraka@redhat.com> 1.6.61-1
changelog:
  - 676369 - create pkgdir with appropriate user and group
  - 676369 - put downloaded packages into stage


author: Michael Mraka <michael.mraka@redhat.com> 1.6.58-1
changelog:
  - use global LOCK
  - use systemExit instead of calling sys.stderr.write directly
  - move repository setup to a separate method
  - word-wrap to <80 chars and fix string concatenation
  - CACHE_DIR is a constant so we declare it at the top of the file
  - fixed indentation and whitespace
  - move third-party module import yum lower


author: Jan Pazdziora 1.6.56-1
changelog:
  - remove use of deprecated `apply` function (iartarisi@suse.cz)
  - move comment to its proper place (iartarisi@suse.cz)
  - fix indentation, whitespace and string concatenation (iartarisi@suse.cz)
  - get the repo_type as an argument instead of reading it from the instance attr
    (iartarisi@suse.cz)
  - move option parsing from reposync.py to the spacewalk-repo-sync script
    (iartarisi@suse.cz)
  - use the print_msg function instead of print to also log the message
    (iartarisi@suse.cz)
  - use new-style classes (iartarisi@suse.cz)
  - remove unused `traceback` import and arrange std lib modules one per line
    (iartarisi@suse.cz)
  - moved standard library imports to the top of the file (iartarisi@suse.cz)
  - remove useless check for importing module (iartarisi@suse.cz)
  - simplified systemExit function with what we use (iartarisi@suse.cz)
  - Catch any psycopg2 errors and reraise them as sql_base.SQLError, in functions
    and procedures.


author: Michael Mraka <michael.mraka@redhat.com> 1.6.54-1
changelog:
  - removed dead (commented out) code
  - removed deprecated apply() function
  - 760892 - set selinux=None if selinux is disabled


author: Michael Mraka <michael.mraka@redhat.com> 1.6.53-1
changelog:
  - 676369 - set pkgdir directly not via private API
  - 621166 - let's enable yum_src tuning (via config file)


author: Miroslav Suchý 1.6.52-1
changelog:
  - IPv6: order network interaces
  - IPv6: implement macro rhn.system.net_interface.ip6_netmask for config files
    templates
  - IPv6: implement macro rhn.system.net_interface.ip6_address for config files
    templates


author: Jan Pazdziora 1.6.50-1
changelog:
  - We cannot rely on the order of returned records when ORDER BY clause is not
    used.
  - IPv6: store NetIfaceInformation into __hardware (msuchy@redhat.com)
  - print better representation to help debugging (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.6.49-1
changelog:
  - 676369 - sync packages directly to /var/satellite
  - 676369 - move package to the final location
  - 676369 - create tempfile under /var/satellite
  - uploadPackage* function have been deprecated long time before Satellite 4.0
  - read payload directly from inputstream


author: Jan Pazdziora 1.6.48-1
changelog:
  - _query_get_slot_types not used, removing.
  - IPv6: add new macro rhn.system.ip6_address for templates of configuration
    files (msuchy@redhat.com)
  - cleaned up duplicated code (michael.mraka@redhat.com)


author: Miroslav Suchý 1.6.47-1
changelog:
  - IPv6: filter out params, which are not used in query
  - IPv6: do not pass to oracle more params than is necessary
  - IPv6: if there is no data, do not try to access it
  - IPv6: do not call constructor in reload
  - IPv6: change backend to store IPv6 interfaces into DB
  - IPv6: __load_from_db: load devices using its method save()


author: Miroslav Suchý 1.6.43-1
changelog:
  - Ubuntu send request for translations, send 404 back and do not raise
    traceback (msuchy@redhat.com)
  - Take Debian's alternative package names into account (slukasik@redhat.com)


author: Jan Pazdziora 1.6.36-1
changelog:
  - 600527 - during kickstart, check if at least one activation key allows config
    files to be deployed upon registration.
  - typo fix (mzazrivec@redhat.com)


author: Jan Pazdziora 1.6.32-1
changelog:
  - add an 'xmlrpc.errata.patch_names' capability (iartarisi@suse.cz)
  - 600555 - removing the Management word from the error message because it is
    not Management entitlements we might be having problems with.
  - consistent spacing (mzazrivec@redhat.com)


author: Jan Pazdziora 1.6.28-1
changelog:
  - 433325 - do not allow to register system with profile name less then 3
    characters (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.6.27-1
changelog:
  - 622490 - even if parent channel isn't in dump there might be some child
    channels
  - 743259 - send IPv6 addresses only if server support it
  - encode string to utf-8 before writing to output


author: Miroslav Suchý 1.6.26-1
changelog:
  - 742905 - if thread will throw traceback do not forget to release lock, so
    other threads can continue
  - 229836 - allow empty prefix for user


author: Jan Pazdziora 1.6.25-1
changelog:
  - removed dead exception (michael.mraka@redhat.com)
  - removed dead queries (michael.mraka@redhat.com)
  - made syncCert() more readable (michael.mraka@redhat.com)


author: Jan Pazdziora 1.6.23-1
changelog:
  - 621531 - update the path in the man page, plus some polishing.
  - 621531 - update backend rhnConfig to use the new /usr/share/rhn/config-
    defaults location.
  - 621531 - move /etc/rhn/default to /usr/share/rhn/config-defaults (backend).


author: Aron Parsons <parsonsa@bit-sys.com> 1.6.21-1
changelog:
  - fix broken --list-channels option (parsonsa@bit-sys.com)
  - Fix nvl2/case conversion (Joshua.Roys@gtri.gatech.edu)


author: Miroslav Suchý 1.6.11-1
changelog:
  - 723856 - remove unused variable
  - if we use 1024 as base, we should use kiB, MiB, GiB
  - 731692 - correct output of number beyond decimal point in sat-sync


author: Miroslav Suchý 1.6.6-1
changelog:
  - True and False constants are defined since python 2.4
  - do not mask original error by raise in execption


author: Simon Lukasik <slukasik@redhat.com> 1.6.4-1
changelog:
  - In any case, do not attempt to remove /var/satellite (slukasik@redhat.com)
  - extract method: unlink_package_file (slukasik@redhat.com)
  - 701232 - remove unnecessary directories (slukasik@redhat.com)
  - remove unused imports (slukasik@redhat.com)


author: Jan Pazdziora 1.6.1-1
changelog:
  - We only support version 5 and newer of RHEL, removing conditions for old
    versions.
  - We only support version 14 and newer of Fedora, removing conditions for old
    versions.


author: Jan Pazdziora 1.5.44-1
changelog:
  - Merging Transifex changes for spacewalk-backend.
  - New translations from Transifex for spacewalk-backend.
  - Download translations from Transifex for spacewalk-backend.


author: Miroslav Suchý 1.5.36-1
changelog:
  - in sat-sync ETA cut off miliseconds (msuchy@redhat.com)
  - make sat-sync ETA more precise (msuchy@redhat.com)


author: Jan Pazdziora 1.5.35-1
changelog:
  - 676937 - allow to export all channels (msuchy@redhat.com)
  - export from hosted does not know soft dependecies (msuchy@redhat.com)


author: Jan Pazdziora 1.5.33-1
changelog:
  - Fixing it's -> its typo.
  - merge child_ids into the list, don't make it a list item
    (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.5.26-1
changelog:
  - package path should contain epoch
  - 694735 - incremental exports: honor rhn_date / sync_date for ks files


author: Miroslav Suchý 1.5.23-1
changelog:
  - do not remove /var/satellite/redhat directory, satellite-sync expect it
  - add missing function to pg Cursor
  - 217531 - fix package count
  - Refactoring of make_evr made MakeEvrError unused, removing.
  - Removal of create_channel_families and create_channels made InvalidEntryError
    unused, removing.
  - 702684 - made MPM_Header compatible with RPM_Header


author: Michael Calmer <mc@suse.de> 1.5.22-1
changelog:
  - inherit from DependencyItem like other dep classes (mc@suse.de)
  - test if checksum_type exists before accessing it (mc@suse.de)
  - use fix_encoding method (mc@suse.de)
  - fix encoding of package summary and description (mc@suse.de)


author: Miroslav Suchý 1.5.20-1
changelog:
  - 695651 - mod_wsgi change header, flip it back to what we expect
    (msuchy@redhat.com)
  - sgmlop parser could not return data in utf-8 (msuchy@redhat.com)
  - 695651 - mimic req.connection.local_addr from mod_python (msuchy@redhat.com)


author: Jan Pazdziora 1.5.19-1
changelog:
  - rhn-satellite-exporter with start-date and end-date (jbrazdil@redhat.com)
  - fix utf-8 in emails (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.5.17-1
changelog:
  - only one package per NVREA can be in channel, unlink the old one first
  - link package also when the checksum has changed


author: Miroslav Suchý 1.5.16-1
changelog:
  - 683200 - send emails as utf-8
  - 683200 - convert hostname in subject from pune to unicode
  - localize satsync messages
  - provide estimation about remaining time for downloading rpm
  - do not test if rhnParent can handle session caching


author: Jan Pazdziora 1.5.13-1
changelog:
  - Method reload_packages not used in our code, removing.
  - Removal of ReleaseChannelMapImport makes processReleaseChannelMap unused,
    removing.


author: Jan Pazdziora 1.5.11-1
changelog:
  - workaround yum.update_md.UpdateNotice, which in rhel5 does not have
    __setitem__ (msuchy@redhat.com)
  - pass pattern to the query (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.5.10-1
changelog:
  - 620486 - errata xml caching doesn't work for cloned channels
  - fd's for already seen packages should be also closed
  - 694735 - export ks files based on ks tree's last_modified
  - removing curr_cfps since it is never used
  - remove duplicate code


author: Jan Pazdziora 1.5.9-1
changelog:
  - use RPMTAG numbers instead of names. (mc@suse.de)
  - more weak deps stuff (mc@suse.de)
  - implement weak dependencies (mc@suse.de)


author: Jan Pazdziora 1.5.8-1
changelog:
  - 604175 - add option --include-custom-channels to satellite-sync which will
    sync all existing custom channels as well (unless -c is used).


author: Jan Pazdziora 1.5.7-1
changelog:
  - Need to try cElementTree from xml.etree for RHEL 6.0 and SLES 11.
  - made insert work both in postgresql and oracle (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.5.3-1
changelog:
  - fixed sysdate (PG)
  - fixed non-numeric revision (PG)
  - unified_diff.next() throws StopIteration when there's no difference


author: Michael Mraka <michael.mraka@redhat.com> 1.5.1-1
changelog:
  - fixed test_timestamp_3
  - fixed packaging after spacewalk/common removal
  - put spacewalk/common/* and common/* together
  - fixed some more imports from spacewalk.common
  - removed implicit import of rhnLog from spacewalk.common
  - removed implicit import of rhnConfig from spacewalk.common
  - removed duplicated import
  - removed implicit import of rhnException from spacewalk.common
  - removed implicit import of rhnTB from spacewalk.common
  - removed implicit import of rhnException from spacewalk.common
  - removed implicit import of RPC_Base from spacewalk.common
  - removed implicit import of UserDictCase from spacewalk.common
  - remove duplicate PREFIX for locale installation


author: Michael Mraka <michael.mraka@redhat.com> 1.4.34-1
changelog:
  - having table twice in a select is generally not a good idea
  - replaced (+) with ANSI left join (PG)
  - merged _query_get_file_* which differ only in a single condition


author: Miroslav Suchý 1.4.30-1
changelog:
  - Revert "idn_unicode_to_pune() have to return string" (msuchy@redhat.com)
  - update copyright years (msuchy@redhat.com)
  - download spacewalk.spacewalk-backend from Transifex (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.4.28-1
changelog:
  - 663326 - return doesn't correctly trigger releaseLOCK()
  - 663326 - prevent spacewalk-remove-channel to run when spacewalk-repo-sync is
    runnig


author: Jan Pazdziora 1.4.23-1
changelog:
  - 688626 - export md5 attribute also for objects without a checksum
    (mzazrivec@redhat.com)
  - use xmlrpclib directly (msuchy@redhat.com)


author: Jan Pazdziora 1.4.22-1
changelog:
  - fixing stray comma breaking package profile sync (jsherril@redhat.com)
  - set envelope From to traceback email (msuchy@redhat.com)
  - remove every reference to "up2date --register" - even in comments
    (msuchy@redhat.com)
  - remove text "or up2date --register on Red Hat Enterprise Linux 3 or later"
    (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.4.20-1
changelog:
  - no more need for special insert when diff is empty
  - removed unused _query_get_output_row
  - set the blob directly in insert
  - support for direct blob insert for oracle
  - replaced 'connect by prior' with recursive function in python
  - 670793 - don't fail on non-ascii config files
  - fixed virtual KVM machines in the webui


author: Miroslav Suchý <msuchy@redhat.com> 1.4.19-1
changelog:
  - move server.mo from /usr/share/rhn/ to /usr/share/locale and rename it to
    spacewalk-backend-server
  - posgtresql can't lock only one column
  - replaced (+) with ansi left join - made ompare files work on postgresql
  - 683546 - optparse isn't friendly to translations in unicode
  - The file attribute has been renamed to filename


author: Michael Mraka <michael.mraka@redhat.com> 1.4.17-1
changelog:
  - removed blacklists from sync
  - rhnBlacklistObsoletes is no more used
  - data from blacklist.xml are unused for quite long time
  - 679109 - localpath must be defined in except block


author: Michael Mraka <michael.mraka@redhat.com> 1.4.15-1
changelog:
  - merged/moved make_evr() implemetation into a single code
  - removed duplicated fetchTraceback()
  - The sanitizePath is not used after _populateFromFile removal, removing.


author: Jan Pazdziora 1.4.14-1
changelog:
  - Prevent all nulls in a chunk (which are treated as strings) from affecting
    the subsequent chunks.
  - Only try to show e.code when the exception is cx_Oracle._Error.


author: Jan Pazdziora 1.4.13-1
changelog:
  - removed unused updateChannelFamilyInfo() (michael.mraka@redhat.com)
  - removed dead function check_with_seclist() (michael.mraka@redhat.com)
  - _populateFromFile() is dead after populateFromFile() removal
    (michael.mraka@redhat.com)
  - populateFromFile is dead after createPackageFromFile() removal
    (michael.mraka@redhat.com)
  - removed test for already removed createPackageFromFil()
    (michael.mraka@redhat.com)
  - removed dead function createPackageFromFile() (michael.mraka@redhat.com)
  - removed test for already removed create_channel_families()
    (michael.mraka@redhat.com)
  - removed dead function create_channel_families() (michael.mraka@redhat.com)
  - removed test for already removed create_channels() (michael.mraka@redhat.com)
  - removed dead function create_channels() (michael.mraka@redhat.com)
  - removed dead function dbiDate2timestamp() (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.4.11-1
changelog:
  - RPMTransaction is dead after RPMReadOnlyTransaction removal
  - SharedStateTransaction is dead after RPMReadOnlyTransaction removal
  - RPMReadOnlyTransaction() is dead after get_package_header() change
  - use size instead of archivesize


author: Simon Lukasik <slukasik@redhat.com> 1.4.6-1
changelog:
  - Introducing an interface common for rpm, deb and mpm packages
    (slukasik@redhat.com)
  - 675912 - fixed typo (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.4.3-1
changelog:
  - 674510 - fixed procedure call (PG)
  - 674528 - don't read signatures when there is no rpm (--no-rpms)
  - With previous removals, getChannelAttribute is not used anymore, removing.
  - The listChannelErrata is dead code by now (after the ISO dumper removal).
  - The listChannelPackages is dead code by now (after the ISO dumper removal).
  - The getKickstartTree is dead code by now (after the ISO dumper removal).
  - With _lookup_last_modified gone, _lookup_last_modified_packages and
    _lookup_last_modified_ks_trees are dead code, removing.


author: Michael Mraka <michael.mraka@redhat.com> 1.4.1-1
changelog:
  - shortened and narrowed package sync logic
  - moved checksum logic into ContentPackage
  - yum repo metadata says epoch="0" even if it's NULL
  - reformated sql query
  - spacewalk-repo-sync should not download package which is already on disk
  - fixed duplicated code
  - Bumping package versions for 1.4


author: Michael Mraka <michael.mraka@redhat.com> 1.3.51-1
changelog:
  - 671464 - get right keyid for new Fedora keys
  - 671464 - get right keyid for new RHEL6 rpms
  - 671464 - although RHEL6 signature is SHA256 gpg it's marked as pgp in rpm
  - 671462 - fixed path in debug output


author: Michael Mraka <michael.mraka@redhat.com> 1.3.50-1
changelog:
  - fixed error message
  - 672277 - made --use-rhn-date and --use-sync-date mutually exclusive
  - Report errors even when not -v was specified.


author: Michael Mraka <michael.mraka@redhat.com> 1.3.49-1
changelog:
  - fixed AttributeError: ContentSource instance has no attribute 'proxy'
  - make osa ping work properly again


author: Jan Pazdziora 1.3.48-1
changelog:
  - do not print TB if we get unknown type (msuchy@redhat.com)
  - Make rhn-schema-version work on PostgreSQL.


author: Tomas Lestach <tlestach@redhat.com> 1.3.45-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for spacewalk-backend (tlestach@redhat.com)


author: Jan Pazdziora 1.3.43-1
changelog:
  - Split to just two parts.
  - 670458 - check password policy only if we are really going to reserve user
    (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.3.40-1
changelog:
  - 650165 - _ChannelDumper should also understand use_rhn_date
  - converted comments to docstrings
  - do not check throttle within each request
  - fixed whitespace


author: Jan Pazdziora 1.3.39-1
changelog:
  - Use spacewalk-sql in satwho and satpasswd, thus making it work on PostgreSQL.
  - code cleanup: there is no proxy < 4.1 in real word (msuchy@redhat.com)
  - I wish python had a simple ternary operator (michael.mraka@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.38-1
changelog:
  - 666939 - Insert current_timestamp instead of sysdate
  - 666574 - autonomous_transaction not supported by PostgreSQL


author: Jan Pazdziora 1.3.37-1
changelog:
  - With fix_url gone, exception InvalidUrlError gets unused, removing.
  - 655207 - exit after unsuccessful rpm header read (mzazrivec@redhat.com)
  - send with config file, its modified time (msuchy@redhat.com)
  - 655207 - print the exception details into stdout (mzazrivec@redhat.com)
  - hide cleartext password from traceback (michael.mraka@redhat.com)
  - added overall usage summary and flex guest entitlement details to rhn-
    entitlement-report (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.3.36-1
changelog:
  - fixed a lot of pylint woarnings and errors
  - removed dead rhnDatabaseCache
  - Allow clients to retrieve debian packages


author: Jan Pazdziora 1.3.34-1
changelog:
  - Need to stringify the epoch.
  - fix error from 3fcd9f7cf736e8e85994e45d8cd96943ab5a2832 (msuchy@redhat.com)
  - move function f_date from rhn_config_management.py to fileutils.py
    (msuchy@redhat.com)


author: Jan Pazdziora 1.3.32-1
changelog:
  - Need to alias column with AS for PostgreSQL.
  - use difflib instead of external "diff -u" (msuchy@redhat.com)
  - move function ostr_to_sym from config_common/file_utils to spacewalk-backend-
    libs (msuchy@redhat.com)
  - 634963 - print diffs for "rhncfg-manager diff-revisions" if we differ in
    selinux context, ownership or attributes (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.26-1
changelog:
  - 624092 - update package if pushing using --force and package with same NVREA
    already exist
  - no need to lookup dictionary, when we have this information in local variable
  - make Table class more debugable


author: Michael Mraka <michael.mraka@redhat.com> 1.3.25-1
changelog:
  - removed dead code
  - fixed number of pylint reported errors
  - fixed Module sat doesn't support our API
  - remove block of code from for-loop


author: Michael Mraka <michael.mraka@redhat.com> 1.3.24-1
changelog:
  - fixed number of errors reported by pylint
  - 652852 - delete related RepoData when updating a package


author: Michael Mraka <michael.mraka@redhat.com> 1.3.23-1
changelog:
  - removed read code
  - fixed imports
  - 655207 - log corrupted package header read
  - 653814 - set X-RHN-Satellite-XML-Dump-Version header
  - update-packages: update package file list functionality


author: Michael Mraka <michael.mraka@redhat.com> 1.3.22-1
changelog:
  - 659348 - import checksum-type correctly
  - 659348 - <rhn-package-file> attribute is checksum-type not checksum_type


author: Michael Mraka <michael.mraka@redhat.com> 1.3.21-1
changelog:
  - Fault, ResponseError and ProtocolError import has been removed from rpclib
  - File import has been removed from rpclib
  - fixed column aliases (PG)


