# changelog

author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.9-0.9.rc3
changelog:
  - Explicitly BR hdf-static in accordance with the Packaging
    Guidelines (hdf-devel is still static-only).


author: - Orion Poplawski <orion@cora.nwra.com> - 0.9-0.7.rc3
changelog:
  - Update to 0.9rc3
  - Drop gcc43, ppc64, friend patches fixed upstream
  - Add source for makecvstarball
  - Rebase antlr patch, add automake source version
  - Add conditionals for EPEL builds
  - Add %check section


author: - Orion Poplawski <orion@cora.nwra.com> - 0.9-0.2.rc2.20090224
changelog:
  - Update to 0.9rc2 cvs 20090224
  - Fix release tag
  - Drop ImageMagick patch fixed upstream
  - Add patch to compile with gcc 4.4.0 - needs new friend statement
  - Don't build included copy of antlr, use system version


author: - Orion Poplawski <orion@cora.nwra.com> - 0.9-0.pre6.1
changelog:
  - Rebuild for gcc 4.3, and add patch for gcc 4.3 support
  - Add patch to build against plplot 5.9.0
  - Add cvs patch to update to latest cvs


author: - Orion Poplawski <orion@cora.nwra.com> - 0.8.11-1
changelog:
  - Upstream 0.8.11
  - Remove hdf patch fixed upstream
  - Remove X11R6 lib path - not needed with modular X


author: pingou <pingou@pingoured.fr> 1.26.0-1
changelog:
  - Update to version 1.26.0
  - Fix url to a more stable form
  - Fix R to R-core
  - Fix description (a bit long)
  - Remove R post/postun


author: pingou <pingou@pingoured.fr> 1.22.0-1
changelog:
  - Update to Bioconductor 2.4 and R-2.9.0
  - Uses global instead of define
  - Change the license from LGPLv2+ to Artistic 2.0


author: Pingou <pingoufc4@yahoo.fr> 1.14.0-4
changelog:
  - Change in the files post and postun to correct the noarch structure
  - Change int the post and postun to fit with the packaging guidelines
  - Change in the files section to mark the folder


author: Jens Petersen <petersen@redhat.com> - 0.10-15
changelog:
  - add upstream patches for ICCCM WM_TAKE_FOCUS protocol and
    tracking currently processing event to fix focus for Java apps:
    see http://code.google.com/p/xmonad/issues/detail?id=177 (#874855)
  - update to cabal-rpm packaging


author: Jens Petersen <petersen@redhat.com> - 0.10-10
changelog:
  - fix user binary ldd check on i686/i386 using "uname -i" not "arch",
    and then recompile directly instead of just touching xmonad.hs first


author: Jens Petersen <petersen@redhat.com> - 0.10-7
changelog:
  - xmonad-start: if user binary has missing shared lib dependencies
    touch xmonad.hs so it gets recompiled (#806624 reported by Erik Streb)


author: Jens Petersen <petersen@redhat.com> - 0.10-5
changelog:
  - use gnome-terminal to display initial manpage from xmonad-gnome
  - change the xmonad-gnome session name to xmonad-gnome


author: Jens Petersen <petersen@redhat.com> - 0.10-4
changelog:
  - new "basic" meta-subpackage for pulling in xterm and dmenu for the default
    basic upstream config, also used by the base package


author: Jens Petersen <petersen@redhat.com> - 0.10-3
changelog:
  - xmonad-gnome sessions now use gnomeConfig in xmonad.hs
  - add note about gnome-panel menu activation in README.fedora


author: Jens Petersen <petersen@redhat.com> - 0.10-1
changelog:
  - update to 0.10 and cabal2spec-0.24.1
  - depends on utf8-string
  - re-enable haddock
  - replace gnomeConfig in xmonad-start with xmonad.hs in new config subpackage
  - drop the dynamic linking patch: dyn libs need to be default first (#744274)
  - require dmenu


author: Jens Petersen <petersen@redhat.com> - 0.9.2-10
changelog:
  - add _isa to the ghc-xmonad-contrib-devel requires to avoid missing libX11.so
    when custom linking (reported by Evan Dale Aromin, #723558)


author: Jens Petersen <petersen@redhat.com> - 0.9.2-9
changelog:
  - ignore user configured packages when recompiling user xmonad.hs
    to avoid linking errors (#713035)
  - don't display README.fedora initially on startup anymore
  - drop the ghc-xmonad requires from xmonad-core
  - update to cabal2spec-0.23.2


author: Jens Petersen <petersen@redhat.com> - 0.9.2-8
changelog:
  - add a core subpackage and let the base package can pull in ghc-xmonad*-devel
  - add a gnome subpackage for the gnome session
  - more README.fedora improvements
  - xmonad-start: quote the xterm commands and support ~/.xmonad/session
  - fix doc files conflicts by having xmonad-core require ghc-xmonad


author: Jens Petersen <petersen@redhat.com> - 0.9.2-7
changelog:
  - xmonad-start no longer execs xmonad not to confuse gnome-session
  - xmonad-start now tries to setup a new xmonad.hs for GNOME desktop
    if running a xmonad-gnome session with xmonad-contrib installed
  - improvements to README.fedora


author: Jens Petersen <petersen@redhat.com> - 0.9.2-6
changelog:
  - drop explicit requires on ghc-xmonad-devel for lighter installs
  - update readme to mention gsettings for gnome3
  - enable ppc64 build
  - buildrequires desktop-file-utils
  - add an xsession file for a gnome-session too
  - add a gnome-session-3 .session file


author: Jens Petersen <petersen@redhat.com> - 0.9.2-5
changelog:
  - use desktop-file-install to install xmonad.desktop correctly
  - update the desktop files for desktop-file-validate


author: Jens Petersen <petersen@redhat.com> - 0.9.1-6
changelog:
  - add application desktop file for gnome-session to find xmonad
    so setting /desktop/gnome/session/required_components/windowmanager now works
  - add xmonad-dynamic-link.patch to dynamically link customized xmonad
  - move display of manpage for new users from xmonad.hs to xmonad-start
    and only display it when no ~/.xmonad/
  - drop skel file and dont create ~/.xmonad by default


author: Jens Petersen <petersen@redhat.com> - 0.9.1-1
changelog:
  - update to 0.9.1
  - update to ghc-rpm-macros-0.5.1 and cabal2spec-0.21.1:
  - drop doc and prof bcond
  - use common_summary and common_description
  - use ghc_name, ghc_binlib_package and ghc_pkg_deps
  - build shared library
  - drop X11_minver for now: it breaks macros
  - drop redundant buildroot and its install cleaning


author: Jens Petersen <petersen@redhat.com> - 0.9-1
changelog:
  - update to 0.9 (requires ghc-X11 >= 1.4.6.1)
  - drop superfluous X11_version from ghc-X11 requires
  - rename X11_version to X11_minver
  - remove extra xmonad.hs under datadir


author: Yaakov M. Nemoy <ynemoy@fedoraproject.org> - 0.8.1-12
changelog:
  - applies changes from jens' patch
  - renames xmonad.desktop entry
  - adds .orig of the xmonad default config
  - modifies manpage patch to use 'better' filenames
  - renames manpage patch


author: Jens Petersen <petersen@redhat.com> - 0.8.1-9
changelog:
  - update to latest macros.ghc without ghc_version (cabal2spec-0.15)
  - require xorg-x11-apps for xmessage


author: Till Maas <opensource@till.name> - 0.8.1-8
changelog:
  - remove tabs in spec
  - rename start-xmonad to xmonad-start for consistency with xmonad-session
  - add directory creation and exec of xmonad to start-xmonad
  - install xmonad.hs that only displays manpage in /etc/skel/.xmonad/xmonad.hs
  - add xterm dependency


author: Till Maas <opensource@till.name> - 0.8.1-6
changelog:
  - add desktop file
  - install man page
  - include sample config file (xmonad.hs)
  - include other documentation files


author: Yaakov M. Nemoy <ynemoy@fedoraproject.org> - 0.8.1-4
changelog:
  - fixed license to BSD
  - fixed version of X11 to be a tad more flexible
  - fixes permissions of /usr/bin/xmonad


author: Till Maas <opensource@till.name> - 0.1-8
changelog:
  - python site_arch macro is not needed now, remove it
  - remove buildroot tag
  - Add comment/bz reference for patch
  - removal of buildroot in %install
  - remove %clean section
  - remove defattr(-,root,root,-)
  - Add PKG-INFO to %doc
  - BuildRequires should be python2-devel and not just python-devel


author: Till Maas <opensource@till.name> - 0.1-2
changelog:
  - Remove CFLAGS, whiche are used automagically
  - Change the %description to a full sentence
  - Adjust the license tag, it's actually LGPLv3+


author: Pádraig Brady <P@draigBrady.com> - 0.3.9-2
changelog:
  - Remove version dependency on python-testtools (assume always >= 0.9.12)
  - BuildRequire python2-devel rather than python-devel
  - Adjust License:


author: Trevor McKay <tmckay@redhat.com> - 0.1.5522-4
changelog:
  - Add dependency on python-saslwrapper
  - Add a patch to include missing upgrade scripts from BZ846345
  - Add a patch to handle ssl exceptions (BZ842286)
  842286


author: Trevor McKay <tmckay@redhat.com> - 0.1.5522-3
changelog:
  - Fix the spec in regards to the long term reporting feature
  - The cumin-report script was not being installed in /usr/bin
  - A dependency on pymongo was missing


author: Trevor McKay <tmckay@redhat.com> - 0.1.5522-2
changelog:
  - Change form of bug numbers in the last changelog so they show
  - up in the build system web UI
  438142
  635207
  699487
  703859
  705358
  733516
  737979
  739658
  748735
  750196
  751779
  752732
  756384
  760567
  765713
  765846
  765894
  767232
  768298
  769753
  771642
  772105
  782359
  782485
  782839
  782902
  783139
  785551
  785863
  787138
  789351
  796798
  799129
  799382
  799404
  800065
  800611
  800624
  801047
  801287
  801291
  802698
  802704
  805029
  807838 
  807912
  807970
  809006
  809369
  812407
  814386
  815316
  820681
  823506
  830243
  830245
  830854
  831203
  831235
  831244
  837037
  837047
  839576
  840112
  840121
  840123
  840133
  846010
  846345
  846349
  847940
  848344
  850759
  851205
  853454


author: Trevor McKay <tmckay@redhat.com> - 0.1.5522-1
changelog:
  - Add dependency on python-ldap
  - Add creation of /etc/cumin/cumin.conf.d for future use
  - Add use of systemd macros for F18+
  - Many, many bug fixes since 5137:


author: Trevor McKay <tmckay@redhat.com> - 0.1.5220-1
changelog:
  - Tweak dependencies again, python-qpid-qmf requires python-qpid now
  - Remove dependencies on pycairo and liberation-sans-fonts (new
  - sources in trunk remove flash and the need for pycairo)
  - Move root-only programs to /usr/sbin
  - Remove test programs on installation
  - cumin-database.patch no longer necessary


author: Trevor McKay <tmckay@redhat.com> - 0.1.5137-4
changelog:
  - Reintroduce dependency on python-wallaby
  - Remove dependency on qpid-qmf
  - Add dependency on python-qpid and python-qpid-qmf
  - (note, this had been pulled in indirectly by python-wallaby)


author: Trevor McKay <tmckay@redhat.com> - 0.1.5137-2
changelog:
  - Fix mixed spaces and tabs on line 22
  - Add empty build section
  - Add cumin_doc/* to doc section
  - Remove default enable for cumin service


author: Trevor McKay <tmckay@redhat.com> - 0.1.5092-1
changelog:
  - Update to revision 5092
  - Sources drawn from branch 'lucidity'
  - Minor changes to files that are part of aviary feature.  
  -  This is primarily to include license 
  -  statements for outside contributions.


author: Trevor McKay <tmckay@redhat.com> - 0.1.5068-1
changelog:
  - Update to revision 5068
  - Sources drawn from branch 'lucidity'
  - Change el6 dependency on dejavu-lgc-sans-fonts to 
  - liberation-sans-fonts, avoids optional channel
  - various tweaks to Aviary ssl code from testing
  - BZ744793


author: Trevor McKay <tmckay@redhat.com> - 0.1.5054-1
changelog:
  - Update to revision 5054
  - Sources drawn from branch 'lucidity'
  - Add rpm dependency on python-wallaby
  - Fix import of wallaby modules in wallabyoperations.py
  - Allow Cumin to disable Aviary and continue if Aviary imports fail
  - (this is particularly related to python-suds, not yet a dependency)
  - BZ744023


author: Trevor McKay <tmckay@redhat.com> - 0.1.5047-1
changelog:
  - Update to revision 5047
  - Sources drawn from branch 'lucidity'
  - Modify description to include Tecnology Preview notice for CuminAviary
  - Include AVIARY-README in /usr/share/doc/cumin-*
  - BZ733447 (Tech Preview, modifications)
  - BZ733677 (Tech Preview, modifications)
  - BZ725451


author: Trevor McKay <tmckay@redhat.com> - 0.1.5037-1
changelog:
  - Update to revision 5037
  - Sources drawn from branch 'lucidity'
  - update aviary-common.xsd (no BZ)
  - BZ742786


author: Trevor McKay <tmckay@redhat.com> - 0.1.5033-1
changelog:
  - Update to revision 5033
  - Sources drawn from branch 'lucidity'
  - BZ741783
  - BZ741729
  - BZ739658 (partial)
  - BZ739217
  - BZ733677 (Tech Preview)
  - BZ733447 (Tech Preview, partial))
  - BZ733367
  - BZ733365
  - BZ733364
  - BZ731423
  - BZ731065
  - BZ725473
  - BZ725038
  - BZ723848
  - BZ639383


author: Chad Roberts <croberts@redhat.com> - 0.1.4916-1
changelog:
  - Update to revision 4916
  - Sources drawn from branch 'clarity'
  - BZ728960, additional fix for cumin-data


author: Trevor McKay <tmckay@redhat.com> - 0.1.4878-1
changelog:
  - Update to revision 4878
  - Sources drawn from branch 'clarity'
  - Back out automatic quoting functionality for BZ703196
  - BZ723613


author: Trevor McKay <tmckay@redhat.com> - 0.1.4865-1
changelog:
  - Update to revision 4865
  - Sources drawn from branch 'clarity'
  - Back out changes for BZ699890 (deferred)


author: Trevor McKay <tmckay@redhat.com> - 0.1.4863-1
changelog:
  - Update to revision 4863
  - Sources drawn from branch 'clarity'
  - BZ703621
  - BZ715956
  - BZ715973
  - BZ703630
  - BZ699732
  - BZ707576
  - BZ717953


author: Trevor McKay <tmckay@redhat.com> - 0.1.4840-1
changelog:
  - Update to revision 4840
  - Sources drawn from branch 'clarity'
  - BZ699265 
  - BZ697093
  - BZ698106
  - BZ694827
  - BZ697016
  - BZ703196
  - BZ674598 
  - BZ699409
  - BZ703630
  - BZ703285
  - BZ696697
  - BZ697075
  - BZ673273
  - BZ692238
  - BZ699732
  - BZ700540
  - BZ703279
  - BZ703860
  - BZ659247
  - BZ704653
  - BZ682447
  - BZ703283
  - BZ709477
  - BZ697016
  - BZ707584
  - BZ710283
  - BZ637963
  - BZ699413
  - BZ702440
  - BZ712968
  - BZ712974
  - BZ699890


author: Trevor McKay <tmckay@redhat.com> - 0.1.4794-1
changelog:
  - Update to revision 4794
  - Sources drawn from branch 'stability'
  - BZ708495, new cumin.conf file to distribute grid classes correctly


author: Trevor McKay <tmckay@redhat.com> - 0.1.4695-1
changelog:
  - Update to revision 4695
  - Add conditional dependencies on el5 and el6 for
  -   python-psycopg2
  -   dejavu-lgc font packages
  - Sources drawn from trunk
  - BZ692169 modification
  - Various cosmetic changes based on group UI review


author: Trevor McKay <tmckay@redhat.com> - 0.1.4669-1
changelog:
  - Update to revision 4669
  - Sources drawn from trunk
  - BZ690283
  - BZ690740
  - BZ681124
  - Various cosmetic changes based on group UI review


author: Trevor McKay <tmckay@redhat.com> - 0.1.4654-1
changelog:
  - Update to revision 4654
  - Sources drawn from trunk
  - BZ635197
  - BZ679672
  - BZ678029
  - Various cosmetic changes based on group UI review
  - (many changes to the dashboard components)


author: Trevor McKay <tmckay@redhat.com> - 0.1.4610-1
changelog:
  - Update to revision 4610
  - Sources drawn from trunk
  - BZ647500
  - Various cosmetic changes based on group UI review
  - (check svn logs 4601-4610 for detail)


author: Trevor McKay <tmckay@redhat.com> - 0.1.4589-1
changelog:
  - Update to revision 4589
  - Sources drawn from trunk
  - BZ680890
  - BZ673189 (modifications)
  - BZ673194


author: Trevor McKay <tmckay@redhat.com> - 0.1.4573-1
changelog:
  - Update to revision 4573
  - Sources drawn from trunk
  - BZ680265 (modifications)
  - BZ672583 (modifications)


author: Trevor McKay <tmckay@redhat.com> - 0.1.4554-1
changelog:
  - Update to revision 4554
  - Sources drawn from trunk
  - Replace emulation of defaultdict() for Python 2.4
  - BZ634975


author: Trevor McKay <tmckay@redhat.com> - 0.1.4552-1
changelog:
  - Update to revision 4552
  - BZ678621
  - Changes to code for BZ677398 
  -   Get rid of exception on RHEL 5 in 0.1.4546-1
  -   Include comments with defaults for rollover params in cumin.conf
  - Tweak to BZ672583 
  -   Do not redirect stderr from init.d during --init-only checks on start


author: Trevor McKay <tmckay@redhat.com> - 0.1.4546-1
changelog:
  - Update to revision 4546
  - Sources drawn from trunk
  - BZ677398 BZ647500 BZ673189
  - Additional changes for BZ672583


author: Trevor McKay <tmckay@redhat.com> - 0.1.4532-1
changelog:
  - Update to revision 4532
  - Sources drawn from trunk
  - Adjustment to make install for version file creation from rpm
  - BZ630544


author: Trevor McKay <tmckay@redhat.com> - 0.1.4531-1
changelog:
  - Update to revision 4531
  - Sources drawn from trunk
  - Change to spec file to create cumin version on make install
  - BZ630544, BZ672484, BZ673178, BZ673180


author: Trevor McKay <tmckay@redhat.com> - 0.1.4519-2
changelog:
  - Include new files in /bin (cumin-command-test, cumin-data-test, cumin-web-test)
  - Change to spec file.
  - These files were added in revision 4460.


author: Trevor McKay <tmckay@redhat.com> - 0.1.4519-1
changelog:
  - Update to revision 4519.
  - Sources drawn from cumin/trunk
  - Changes for 2.0
  - BZ644302, BZ676902, BZ642405, BZ673183, BZ673187


author: Trevor McKay <tmckay@redhat.com> - 0.1.4490-1
changelog:
  - Update to revision 4490.
  - Sources drawn from cumin/branches/1.3.2
  - After test, second round of changes for BZ672604


author: Justin Ross <jross@redhat.com> - 0.1.4369-1
changelog:
  - Update to revision 4369
  - Require python-psycopg2 >= 2.0.14
  - Upgrade the config file if necessary
  - Add symlink to system log location
  - Add chkconfig and service handling
  - Get precise about the python-qmf dependency version
  - Fix symlink error in post scriptlet


author: Justin Ross <jross@redhat.com> - 0.1.2968-1
changelog:
  - Update to revision 2968
  - Alter the user and group add logic to be compatible with scriptlets
    run under bash -e


author: Justin Ross <jross@redhat.com> - 0.1.1984-1
changelog:
  - Use new make targets
  - Change the version number to include the upstream svn revision
  - Use system instance setup tools


author: Nuno Santos <nsantos@redhat.com> - 0.1-2
changelog:
  - Fix data url in /etc/cumin.conf; work around query divide-by-zero issues
  - Add dependency on postgresql-server


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-7
changelog:
  - Fix left button press event in windowed mode (rh556608, sdl894)
  - Remove unrecognized --disable-debug and --enable-dlopen configure options
    (rh581056)


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-6
changelog:
  - Make repacked source tar ball relative
  - Remove useless src/joystick/darwin/10.3.9-FIX/IOHIDLib.h because of APSL-2.0
    license
  - Apply SDL-1.2.14-xio_error-rh603984.patch (rh603984, sdl1009)
  - Escape spec file comments
  - Convert CREDITS to UTF-8


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-4
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip because of
    licensing problems
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new version 1.2.14
  - dropped patches for upstream fixes: libdir, dynamic-esd, x11dyn64,
    dynamic-pulse, pa-rewrite, rh484362 and rh487720


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-6
changelog:
  - dropped pulseaudio hack (rhbz#448270)
  - pulseaudio is now used by default
  - simplified spec file for new architecture support (rhbz#433618)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - new version 1.2.13
    - fixes i810 video overlay problem (rhbz#310841)
    - fixes c++ style comments in header files (rhbz#426475)
  - review fixes: spec file cleanup, dropped static libs (rhbz#226402)
  - fixed pulseaudio hack scripts from Warren for multilib systems (rhbz#426579)
  - fixed pulseaudio detection in configure to enable dynamic use of pulseaudio
    libraries


author: Warren Togami <wtogami@redhat.com> 1.2.12-5
changelog:
  - correct stupid mistake that broke SDL-devel
    RPM should error out if a SourceX is defined twice...


author: Warren Togami <wtogami@redhat.com> 1.2.12-4
changelog:
  - Build with --enable-pulseaudio-shared for testing purposes (#343911)
    It is known to not work in some cases, so not enabled by default.
  - Move pulseaudio enabler hack from SDL_mixer (#426275)
  - Make pulseaudio enabler hack conditional.  It will only attempt to use it if
    alsa-plugins-pulseaudio is installed.


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - new version 1.2.12
    fixes TEXTRELs (rhbz#179407)
  - added arm support (rhbz#245411)
    Thanks to Lennert Buytenhek for the patch
  - added alpha support (rhbz#246463)
    Thanks to Oliver Falk for the patch
  - disabled yasm for SDL (rhbz#234823)
    Thanks to Nikolay Ulyanitsky for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - new version 1.2.11
  - fixed man page SDL_ListModes (rhbz#208212)
  - fixed spurious esound, audiofile dependencies (rhbz#217389)
    Thanks to Ville Skyttä for the patch
  - dropped requirements for imake and libXt-devel (rhbz#226402)
  - made nasm arch %{ix86} only (rhbz#226402)
  - dropped O3 from options (rhbz#226402)
  - dropped tagname environment variable (rhbz#226402)


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-6
changelog:
  - dropped libXt build requires, because libSDL does not need libXt at all - 
    this was an autofoo bug (fixed already)
  - fixed multilib devel conflicts (#192749)
  - added buidrequires for imake: AC_PATH_X needs imake currently


author: Christopher Stone <chris.stone@gmail.com> 1.2.10-4
changelog:
  - added missing (build) requires for libXt libXrender libXrandr
  - remove %makeinstall macro (bad practice)
  - use %{buildroot} macro consistantly


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - new version 1.2.10
  - dropped the following patches because they are not needed anymore:
    ppc_modes, gcc4, yuv_mmx_gcc4 and no_exec_stack
  - new pagesize patch (drop PAGE_SIZE, use sysconf(_SC_PAGESIZE) instead)


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-2
changelog:
  - removed rpath
  - using O3 instead of O2, now (SDL_RLEaccel.c compile error)
  - added BuildRequires for nasm


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-5
changelog:
  - dlopen() aRts and esd rather than linking directly to them.
  - make sure aRts and esd are actually used if they're running.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-2
changelog:
  - Rebuild with new aRts, require arts-devel rather than kdelibs-sound-devel
  - Temporarily exclude alpha (compiler bugs)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - output same libraries for sdl-config whether --libs or --static-libs 
    selected.  Fixes compilation of most SDL programs.
  - properly packaged new HTML documentation


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch from Hans de Goede <hans@highrise.nl> for fullscreen toggling.
  - using  --enable-video-x11-dgamouse since it smoothes the mouse some.


author: Sam Lantinga <slouken@devolution.com>
changelog:
  - Re-integrated spec file into SDL distribution
  - 'name' and 'version' come from configure 
  - Some of the documentation is devel specific
  - Removed SMP support from %build - it doesn't work with libtool anyway


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.86-2
changelog:
  - rename kexi-driver-pgsql -> kexi-driver-postgresql
  - kexi-driver-sybase subpkg
  - kexi-map-form-widget, map-shape, reports-map-elemement subpkgs (with marble deps)


author: Jerry James <loganjerry@gmail.com> - 2.6.0-1
changelog:
  - New upstream release
  - Drop libtool typo fix; fixed upstream
  - Fix libtool workaround for -Wl,--as-needed


author: Jerry James <loganjerry@gmail.com> - 2.5.2-1
changelog:
  - New upstream release
  - Link with -lrt to get the clock_* functions
  - Convince libtool to use -Wl,--as-needed appropriately


author: Jerry James <loganjerry@gmail.com> - 2.5.1-1
changelog:
  - New upstream release
  - License change to LPGLv3+
  - Support for s390 / s390x has been dropped
  - Minor spec file cleanups


author: Mark Chappell <tremble@fedoraproject.org> - 1.3.1-2
changelog:
  - Ensure consistent use of macros
  - Avoid multilib conflict due to modified timestamp on AUTHORS doc
  - Replace perl find and replace with sed


author: Trond Hasle Amundsen <t.h.amundsen@usit.uio.no> - 3.7.3-3
changelog:
  - Provide example config file as documentation rather than installing
    it under /etc/nagios
  - Remove win32 binary in prep section


author: Xavier Bachelot <xavier@bachelot.org> - 3.7.2-2
changelog:
  - Add a commented configuration file.
  - Add some Requires to have all features out of the box.
  - Add Requires on nagios-plugins for %{_libdir}/nagios/plugins directory.
  - Remove some useless command macros.
  - Fix Obsoletes/Provides.


author: Trond Hasle Amundsen <t.h.amundsen@usit.uio.no> - 3.6.4-2
changelog:
  - Don't compress the man page, rpmbuild takes care of that. Thanks to
    Jose Pedro Oliveira for a patch that fixes this.


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-9
changelog:
  - prevent an artificial timeout event due to stale speed-check data (#906031)
  - show proper host name on failed resolve (#957173)


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-5
changelog:
  - do not print misleading NSS error codes
  - update the links to cipher-suites supported by NSS
  - prevent NSS from crashing on client auth hook failure
  - clear session cache if a client cert from file is used
  - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-3
changelog:
  - use the upstream facility to disable problematic tests
  - do not crash if MD5 fingerprint is not provided by libssh2


author: Kamil Dudka <kdudka@redhat.com> 7.25.0-2
changelog:
  - use NSS_InitContext() to initialize NSS if available (#738456)
  - provide human-readable names for NSS errors (upstream commit a60edcc6)


author: Paul Howarth <paul@city-fan.org> 7.25.0-1
changelog:
  - new upstream release (#806264)
  - fix character encoding of docs with a patch rather than just iconv
  - update debug and multilib patches
  - don't use macros for commands
  - reduce size of %prep output for readability


author: Kamil Dudka <kdudka@redhat.com> 7.21.7-3
changelog:
  - fix SIGSEGV of curl -O -J given more than one URL (#723075)
  - introduce the --delegation option of curl (#730444)
  - initialize NSS with no database if the selected database is broken (#728562)


author: Kamil Dudka <kdudka@redhat.com> 7.21.4-1
changelog:
  - new upstream release
  - avoid memory leak on SSL connection failure (upstream commit a40f58d)
  - work around valgrind bug (#678518)


author: Paul Howarth <paul@city-fan.org> 7.21.3-1
changelog:
  - update to 7.21.3:
    - added --noconfigure switch to testcurl.pl
    - added --xattr option
    - added CURLOPT_RESOLVE and --resolve
    - added CURLAUTH_ONLY
    - added version-check.pl to the examples dir
    - check for libcurl features for some command line options
    - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support
    - http_chunks: remove debug output
    - URL-parsing: consider ? a divider
    - SSH: avoid using the libssh2_ prefix
    - SSH: use libssh2_session_handshake() to work on win64
    - ftp: prevent server from hanging on closed data connection when stopping
      a transfer before the end of the full transfer (ranges)
    - LDAP: detect non-binary attributes properly
    - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT
    - gnutls->handshake: improved timeout handling
    - security: pass the right parameter to init
    - krb5: use GSS_ERROR to check for error
    - TFTP: resend the correct data
    - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected
    - GnuTLS: now detects socket errors on Windows
    - symbols-in-versions: updated en masse
    - added a couple of examples that were missing from the tarball
    - Curl_send/recv_plain: return errno on failure
    - Curl_wait_for_resolv (for c-ares): correct timeout
    - ossl_connect_common: detect connection re-use
    - configure: prevent link errors with --librtmp
    - openldap: use remote port in URL passed to ldap_init_fd()
    - url: provide dead_connection flag in Curl_handler::disconnect
    - lots of compiler warning fixes
    - ssh: fix a download resume point calculation
    - fix getinfo CURLINFO_LOCAL* for reused connections
    - multi: the returned running handles counter could turn negative
    - multi: only ever consider pipelining for connections doing HTTP(S)
  - drop upstream patches now in tarball
  - update bz650255 and disable-test1112 patches to apply against new codebase
  - add workaround for false-positive glibc-detected buffer overflow in tftpd
    test server with FORTIFY_SOURCE (similar to #515361)


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-5
changelog:
  - do not send QUIT to a dead FTP control connection (#650255)
  - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-4
changelog:
  - prevent FTP client from hanging on unrecognized ABOR response (#649347)
  - return more appropriate error code in case FTP server session idle
    timeout has exceeded (#650255)


author: Paul Howarth <paul@city-fan.org> 7.21.1-3
changelog:
  - fix up patches so there's no need to run autotools in the rpm build
  - drop buildreq automake
  - drop dependency on automake for devel package from F-14, where
    %{_datadir}/aclocal is included in the filesystem package
  - drop dependency on pkgconfig for devel package from F-11, where
    pkgconfig dependencies are auto-generated


author: Kamil Dudka <kdudka@redhat.com> 7.21.1-2
changelog:
  - re-enable test575 on s390(x), already fixed (upstream commit d63bdba)
  - modify system headers to work around gcc bug (#617757)
  - curl -T now ignores file size of special files (#622520)
  - fix kerberos proxy authentication for https (#625676)
  - work around glibc/valgrind problem on x86_64 (#626470)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-1
changelog:
  - new upstream release, drop applied patches
  - update of %description
  - disable valgrind for certain test-cases (libssh2 problem)


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-5
changelog:
  - CRL support now works again (#581926)
  - make it possible to start a testing OpenSSH server when building with SELinux
    in the enforcing mode (#521087)


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-4
changelog:
  - upstream patch preventing failure of test536 with threaded DNS resolver
  - upstream patch preventing SSL handshake timeout underflow


author: Paul Howarth <paul@city-fan.org> 7.20.1-3
changelog:
  - replace Rawhide s390-sleep patch with a more targeted patch adding a
    delay after tests 513 and 514 rather than after all tests


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-3
changelog:
  - throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972)
  - valgrind temporarily disabled (#574889)
  - kerberos installation prefix has been changed


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-1
changelog:
  - new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP
  - dropped patches applied upstream
  - dropped curl-7.16.0-privlibs.patch no longer useful
  - a new patch forcing -lrt when linking the curl tool and test-cases


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-11
changelog:
  - upstream patch adding a new option -J/--remote-header-name
  - dropped temporary workaround for #545779


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-3
changelog:
  - fix crash on doubly closed NSPR descriptor, patch contributed
    by Kevin Baughman (#534176)
  - new version of patch for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-1
changelog:
  - new upstream release, dropped applied patches
  - workaround for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-4
changelog:
  - use pkg-config to find nss and libssh2 if possible
  - better patch (not only) for SCP/SFTP polling
  - improve error message for not matching common name (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-3
changelog:
  - avoid tight loop during a sftp upload
  - http://permalink.gmane.org/gmane.comp.web.curl.library/24744


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-1
changelog:
  - new upstream release, dropped applied patches
  - changed NSS code to not ignore the value of ssl.verifyhost and produce more
    verbose error messages (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.5-8
changelog:
  - do not pre-login to all PKCS11 slots, it causes problems with HW tokens
  - try to select client certificate automatically when not specified, thanks
    to Claes Jakobsson


author: Kamil Dudka <kdudka@redhat.com> 7.19.4-6
changelog:
  - upstream patch fixing memory leak in lib/nss.c (#453612)
  - remove redundant dependency of libcurl-devel on libssh2-devel


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-2
changelog:
  - drop .easy-leak patch, causes problems in pycurl (#488791)
  - fix libcurl-devel dependencies (#488895)


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-1
changelog:
  - update to 7.19.4 (fixes CVE-2009-0037)
  - fix leak in curl_easy* functions, thanks to Kamil Dudka
  - drop nss-fix patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-2
changelog:
  - spec cleanup, thanks to Paul Howarth (#225671)
    - drop BR: libtool
    - convert CHANGES and README to UTF-8
    - _GNU_SOURCE in CFLAGS is no more needed
    - remove bogus rpath


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-1
changelog:
  - update to curl 7.18.1 (fixes #397911)
  - add ABI docs for libcurl
  - remove --static-libs from curl-config
  - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
    substitution (#432667)


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-3
changelog:
  - drop useless ldap library detection since curl doesn't
    dlopen()s it but links to it -> BR: openldap-devel
  - enable LDAPS support (#225671), thanks to Paul Howarth
  - BR: krb5-devel to reenable GSSAPI support
  - simplify build process
  - update description


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-1
changelog:
  - update to curl 7.17.1
  - include patch to enable SSL usage in NSS when a socket is opened
    nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> 7.16.4-5
changelog:
  - add support for the NSS PKCS#11 pem reader so the command-line is the
    same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com)
  - switch to NSS again


author: Jindrich Novy <jnovy@redhat.com> 7.16.3-1
changelog:
  - update to 7.16.3
  - drop .print patch, applied upstream
  - next series of merge review fixes by Paul Howarth
  - remove aclocal stuff, no more needed
  - simplify makefile arguments
  - don't reference standard library paths in libcurl.pc
  - include docs/CONTRIBUTE


author: Jindrich Novy <jnovy@redhat.com> 7.16.2-4
changelog:
  - another series of review fixes (#225671),
    thanks to Paul Howarth
  - check version of ldap library automatically
  - don't use %makeinstall and preserve timestamps
  - drop useless patches


author: Jindrich Novy <jnovy@redhat.com> - 7.16.0-2
changelog:
  - fix BuildRoot
  - add Requires: pkgconfig for curl-devel
  - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Jerry James <loganjerry@gmail.com> - 3.4.1-1
changelog:
  - New upstream version
  - Drop upstreamed ctype and read-decl patches
  - Drop unnecessary spec file elements (BuildRoot, etc.)
  - Add the zscan patch to eliminate compiler errors and warnings


author: David A. Wheeler - 0-0.20070911.1
changelog:
  - Initial packaging.
  - Did not name it "fuzz" because of conflict with other program named fuzz
  - Handled reviewer comments https://bugzilla.redhat.com/show_bug.cgi?id=452559
  - Named package as tex-zfuzz (per Fedora naming guidelines)
  - Came to agreement on version/revision convention
  - Depend on virtual packages tex(tex) and tex(latex) instead of specific pkgs
  - Shortened comments and description
  - Renamed patch file names to clarify what upstream version they apply to
  - Fixed .spec so it can build even when it's already installed
  - Summary and description don't repeat package name
  - Patch error.c to eliminate compiler warning for undefined isupper/islower
  - Simplified CFLAGS argument
  - Patched so would compile on 64-bit


author: Dan Walsh <dwalsh@redhat.com> - 3.0.48-1
changelog:
  - Fix connect_ports and bind_ports to specify semanage command if only 1 port is available rather then to suggest user choices
  - Update translations


author: <dwalsh@redhat.com> - 3.0.47-1
changelog:
  - Update translations
  - Fix sys_resource.py to mention all types of resources
  - Fix unicode calls so catchall_booleans.py does not crash sealert


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.3-1
changelog:
  - Update translations
  - Fix catchall plugin to give better messages on capabilities and process avcs


author: <dwalsh@redhat.com> - 2.1.1-1
changelog:
  - Add first plugins which will launch Red Star
  - Add Thomas Liu change to allow restorecon to execute fixit button  
    *   2009-06-19 Dan Walsh <dwalsh@redhat.com>
  	- Add setenforce.py from Thomas Liu
  	- Add sys_module.py, mmap_zero.py, kernel_modules.py, selinuxpolicy.py
  	- Allow restorecon to execute fixit command


author: <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Execute catchall_boolean.py before allow_daemons_use_tty
  	- Fix chcon lines to match current policy


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds
  	- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
  	  and is the full path name of $SOURCE


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: Christoph Wickert <cwickert@fedoraproject.org> - 1.0.0-7
changelog:
  - Fix scrolling in VNC (#830210)
  - Handle GDK_SCROLL_SMOOTH in VNC and RDP
  - Bring back the --icon/-i autostart option (#834883)
  - Fix fullscreen with multiple monitors (#864262)
  - Resize window to fit remote resolution (#953678)
  - Enable TLS-support in VNC plugin
  - Close SSH tunnels on disconnect (https://github.com/FreeRDP/Remmina/issues/77)
  - Patch out copy of libvncserver shipped in source tarball
  - Update icon cache also for plugins
  - Drop the remmina-plugins-common package
  - Drop Provides/Obsoletes for grdc
  - Spec file clean-up


author: Christoph Wickert <cwickert@fedoraproject.org> - 1.0.0-1
changelog:
  - Update to 1.0.0
  - Plugins are now part of this package (again)
  - Fix two linker errors
  - Add VCS key


author: Damien Durand <splinux@fedoraproject.org> 0.7.3-1
changelog:
  - Upstream release
  - Add rdesktop, xorg-x11-server-Xephyr in Requires
  - Add grdc in Provides/Obsoletes
  - Add --enable-vnc=dl in %configure
  - Remove unneeded README.LibVNCServer
  - Fix "icons/hicolor" path


author: Adam Miller <admiller@redhat.com> 1.5.3-1
changelog:
  - Commands and mcollective calls for each FrontendHttpServer API.
    (rmillner@redhat.com)
  - Bug 912292: Return namespace update output on reply (ironcladlou@gmail.com)
  - Switch from VirtualHosts to mod_rewrite based routing to support high
    density. (rmillner@redhat.com)
  - Bug 842991 - Do not replace /etc/cron.minutely/openshift-facts when
    installing new rpm. (jhonce@redhat.com)
  - Fix mcollective plugin rubygem dependency (john@ibiblio.org)
  - Fixes for ruby193 (john@ibiblio.org)
  - Audit oo_* return value in agent (pmorie@gmail.com)
  - Return output from oo_status in agent (pmorie@gmail.com)
  - Return connector execution output on the MCol reply (ironcladlou@gmail.com)
  - Refactor agent and proxy, move all v1 code to v1 model
    (ironcladlou@gmail.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.4.3-1
changelog:
  - Merge pull request #1255 from sosiouxme/newfacts
    (dmcphers+openshiftbot@redhat.com)
  - <facter,resource_limits> active_capacity/max_active_apps/etc switched to
    gear-based accounting (lmeyer@redhat.com)
  - Merge pull request #1238 from sosiouxme/newfacts
    (dmcphers+openshiftbot@redhat.com)
  - <facter,resource_limits> reckon by gears (as opposed to git repos), add gear
    status facts (lmeyer@redhat.com)
  - <facter> some code cleanup - no functional change (lmeyer@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.4.2-1
changelog:
  - Reduce logging noise in MCollective agent (ironcladlou@gmail.com)
  - Switch calling convention to match US3143 (rmillner@redhat.com)


author: Dan McPherson <dmcphers@redhat.com> 1.3.3-1
changelog:
  - SSL support for custom domains. (mpatel@redhat.com)
  - Replace expose/show/conceal-port hooks with Endpoints (ironcladlou@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.3.2-1
changelog:
  - - oo-setup-broker fixes:  - Open dns ports for access to DNS server from
    outside the VM   - Turn on SELinux booleans only if they are off (Speeds up
    re-install)   - Added console SELinux booleans - oo-setup-node fixes:  -
    Setup mcollective to use broker IPs - Updates abstract cartridges to set
    proper order for php-5.4 and postgres-9.1 cartridges - Updated broker to add
    fedora 17 cartridges - Fixed facts cron job (kraman@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.2.5-1
changelog:
  - Merge pull request #1052 from rmillner/BZ877321 (openshift+bot@redhat.com)
  - Add username to filter list. (rmillner@redhat.com)
  - Hide the password in mcollective logs. (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.3-1
changelog:
  - Security - Fix the full path to restorecon it was causing errors in the logs
    (tkramer@redhat.com)
  - more mco 2.2 changes (dmcphers@redhat.com)
  - repacking for mco 2.2 (dmcphers@redhat.com)
  - Refactor tidy into the node library (ironcladlou@gmail.com)
  - Merge pull request #1002 from tdawson/tdawson/fed-update/msg-node-
    mcollective-1.1.4 (openshift+bot@redhat.com)
  - Move add/remove alias to the node API. (rmillner@redhat.com)
  - Removed spec clutter for building on rhel5 (tdawson@redhat.com)
  - mco value passing cleanup (dmcphers@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.2-1
changelog:
  - add any validator for mco 2.2 (dmcphers@redhat.com)
  - Various mcollective changes getting ready for 2.2 (dmcphers@redhat.com)
  - Move force-stop into the the node library (ironcladlou@gmail.com)
  - add backtraces to error conditions in agent (dmcphers@redhat.com)
  - Changing same uid move to rsync (dmcphers@redhat.com)
  - use /bin/env for cron (dmcphers@redhat.com)
  - add oo-ruby (dmcphers@redhat.com)
  - Add method to get the active gears (dmcphers@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.1.3-1
changelog:
  - BZ 876942:Disable threading until we can explore proper concurrency
    management (rmillner@redhat.com)
  - Only use scl if it's available (ironcladlou@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.1.2-1
changelog:
  - add config to gemspec (dmcphers@redhat.com)
  - getting specs up to 1.9 sclized (dmcphers@redhat.com)


author: Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> - 0.6.1-1
changelog:
  - Updated common summary and description.
  - Added BR ghc-dlist-devel.
  - Spec file template generated by cabal2spec-0.25.5.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Fix getPropertyAt() returns Null instead of empty array (patch by Jan Safranek)
  - Add cimprovagt wrapper for possibility of confining providers in SELinux,
    update README.RedHat.Security accordingly, add provider specific wrapper
    example


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-3
changelog:
  - Fix tracing of CMPI messages with CMPI_DEV_DEBUG severity
    Resolves: #883395
  - Add %check section and run unit tests
  - Enable -test subpackage
  - Scriptlets replaced with new systemd macros


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Set PEGASUS_ENABLE_INTEROP_PROVIDER=true (fixes registration of CMPI providers)
  - Move .so links back to main package (they are necessary to be present for a user
    to use or execute the functionality in the base package properly)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
  - Call ldconfig in %post/%postun of -libs subpackage
  - Move .so links to -devel subpackage
  - Fix local-or-remote-auth patch to work with IPv6
  - Distribute modified access.conf file to conform README.RedHat.Security


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.1-10
changelog:
  - Fix permissions for executables
  - Fix CMPI enumGetNext function to change CMPI Data state from default CMPI_nullValue
    to CMPI_goodValue when it finds and returns next instance correctly
  - Enable processing of ExecQuery operations


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.1-1
changelog:
  - Update to upstream version 2.11.1
  - Add explicit file attributes where RPM requires it
  - Disable privilege separation feature


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.10.0-1
changelog:
  - Update to upstream version 2.10.0
  - Move creating of the 'pegasus' user and group to the 'libs' %pre
  - Use %global instead of %define and some minor spec file cleaning


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.9.2-1
changelog:
  - Update to upstream version 2.9.2
  - Mark files in /var/lib/Pegasus as noverify in spec file
  - Fix initscript permissions
  - Add patch/source descriptions to the spec file
  - Cleanup the spec file, use upstream Makefile


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.2-1
changelog:
  - Update to upstream version 2.7.2
    (remove patches added in 2.7.1-1 - they're upstream now)
  - Enable out-of-process providers
    Resolves: #455109


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.1-1
changelog:
  - Update to upstream version 2.7.1
  - Fix setElementAt() doesn't copy value of CMPI_char parameter
    Resolves: #454589
  - Fix CMPI MI factories that return errors are unsupported
    Resolves: #454590
  - Fix HTTP 401 responses lack Content-Length headers
    Resolves: #454591


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.0-1
changelog:
  - Update to upstream version 2.7.0
  - Unhide some cmpi classes, package cmpi C++ headers
  - Fix multiarch conflicts
    Resolves: #343311
  - Add libcmpiCppImpl.so (symlink to libcmpiCppImpl.so.1)
    Resolves: #366871


author: Nalin Dahyabhai <nalin@redhat.com> - 2:2.5.2-3
changelog:
  - change requires: tog-pegasus to prereq: tog-pegasus so that the pegasus
    user and group will exist when we go to lay down files for tog-pegasus-devel
    (#218305)
  - prereq the current version of openssl so that the right versions of
    libssl and libcrypto will be available in %post (possible for #208949)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.4.1-10
changelog:
  - More upstream 2.5.2_APPROVED bug fixes:
    o 4629: Pegasus freezes when it is unable to send out completely, the results of a request
    o 5073: Class Names on Reference, ReferenceNames, Assoc, AssocNames returned lower case
    o 5090: cimserver crash on a request after attempting to unload idle CMPI providers
    o 5180: OperationAggregate deleted in _enqueueResponse while member mutex held


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-8
changelog:
  - Fix bug 192754: remove multilib conflicts
  - More upstream 2.5.2_APPROVED bug fixes:
    o 5119: memory leak in CMPI implementation
    o 5115: fix SetConfig_EnvVar comments


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-6
changelog:
  - Apply upstream patches for latest 2.5.2_APPROVED bugs:
    o 5046: cimprovider timeout needs to be increased
    o 5047: cimmof timeout needs to be increased
    o 5048: Invalid Pointer in CIMOperationRequestEncoder code
    o 5049: Unnecessary dependency on experimental headers
    o 5051: Improved handling of OOP indication provide module failures
    o 5053: reserveCapacity method may cause size overflow
    o 5059: XMLWriter does not escape '>' in strings
    o 5072: Potential race condition with OOP response chunks
    o 5083: CIMRequestMessage buildResponse() should be const
  - Fix bug 193121: restore world read access to libraries


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-4
changelog:
  - fix bug 190432: %exclude /usr/lib/debug from RPM
  - fix upstream OpenPegasus '2.5.2_APPROVED' bugs, applying upstream patches:
    o 4955 : Bogus Description property for OperatingSystem provider
    o 4956 : reserveCapacity method may cause size overflow on invalid input
    o 4968 : CMPI provider up-calls cause failure with out-of-process
    o 4978 : snmpDeliverTrap_netsnmp::_createSession function is not thread safe
    o 4983 : Memory leak in OOP indication generation
    o 4984 : Forked process hangs in system call
    o 4986 : Adding automated test for snmpIndication Handler
    (  http://cvs.opengroup.org/bugzilla/show_bug.cgi?id=? )
  - apply upstream update to 'pegasus-2.5.1-warnings.patch'


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2
changelog:
  - Apply patches for the two '2.5.2_APPROVED' upstream bugzillas
    4934(4943) and 4945 :
    (http://cvs.opengroup.org/bugzilla/buglist.cgi?bug_id=4943%2C4945)
  - Fix the PATH_MAX and MAXHOSTNAMELEN issues (again)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-6
changelog:
  - restore SSLv23_method SSL support now that bug 173399 is fixed
  - rebuild for new gcc, glibc, glibc-kernheaders
  - PAMBasicAuthenticatorUnix.cpp includes no longer include syslog.h: add
  - /usr/bin/install now decides to fail if chown fails - set $INSTALL_USER, $INSTALL_GROUP


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-3
changelog:
  - Rebuild for new openssl dependencies
  - Enable CMPI support for sblim-cmpi-base with ENABLE_CQL=true


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-2
changelog:
  - Add /usr/lib/cmpi alternate providerLibDir for sblim-cmpi-base Fedora Extras pkg
  - Fix bug 171124: use numeric ids for pegasus user/group
  - guidelines: do not remove pegasus user/group in %postun.


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-1
changelog:
  - Implemented new 'make install' target.
  - Re-wrote tog-pegasus.spec file from scratch.
  - Ported BZ 167986 authentication code and BZ 167164 + BZ 167165 fixes from RHEL-4


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1:3.5.5-3
changelog:
  - Specify the Epoch for Requires/Obsoletes. Not having it in the previous
    commit was breaking the upgrade path.
  - Add missing doc/license files in all packages. This is especially important
    for the two 'compat' packages. Without it, they were empty and as such
    would not be generated, which broke the upgrade path.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1:3.5.5-2
changelog:
  - Split each game and its help into its own subpackage.
    https://bugzilla.redhat.com/show_bug.cgi?id=846274


author: Hans de Goede <hdegoede@redhat.com> - 2.29.4-3
changelog:
  - Change python_sitelib macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Ray Strode <rstrode@redhat.com> - 1:2.22.1.1-4
changelog:
  - Use gtk-missing-image instead of image-missing since a lot of
    icon themes don't have missing-image and gtk-missing-image is
    guaranteed to be available (bug 440686)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 1:2.21.3-2
changelog:
  - Fix rpm --verify complaining about the highscore files once a highscore has
    been added (bz 418991)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 1:2.19.4-3
changelog:
  - Don't build a private copy of gnuchess, instead require gnuchess (bz 215110)
  - Rename / rebrand Gnometris to GnomeFallingBlocks, so that it stays clear of
    the Tetris trademark, and include it (bz 238651)
  - Don't own dirs under /usr/share/icons/hicolor, instead add
    Requires: hicolor-icon-theme
  - Cleanup handling of with_card and with_tali defines using --enable-omitgames


author: Ray Strode <rstrode@redhat.com> - 1:2.15.1-2
changelog:
  - Apply spec file patch from 
    Hooman Mesgary <hooman@farsiweb.info> to conditionallly
    compile out some of the games (bug 192001)


author: Havoc Pennington <hp@redhat.com> 1:2.2.1-1
changelog:
  - 2.2.1
  - remove "applyschemas" patch fixed upstream
  - remove "stonescrash" patch also fixed upstream


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.0.0
  - remove noreplace from the .soundlist files
  - add missing schemas
  - get rid of gnometris again
  - use desktop-file-install


author: Havoc Pennington <hp@redhat.com>
changelog:
  - GNOME 2 version
  - spec file cleanups
  - no devel package
  - don't run auto*, just use the "rm from buildroot" approach to lose xbill


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - run ldconfig in post and postun (#16589)
  - don't put the post and postun scripts in the middle of the files list --
    that tends to break things (oops)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - 1.2.0
  - remove gnometris, xbill from subdirs since we don't install
    them and they cause problems with new C compiler
  - update autoconf stuff
  - remove gturing, add gnotski to the file list


author: Alexey Kurov <nucleo@fedoraproject.org> - 1.0.3-11
changelog:
  - drop Requires: psi
  - own %{_libdir}/psi and %{_libdir}/psi/plugins
  - backport psi-plus-psimedia fixes


author: Nils Philippsen <nils@redhat.com> - 0.101.9-1
changelog:
  - version 0.101.9:
    - catch "file not found" exceptions while enabling/disabling units
    - catch gtk import errors (missing display, etc., #884944)


author: Nils Philippsen <nils@redhat.com> - 0.101.4-1
changelog:
  - version 0.101.4:
    - use systemd manager interface to reload xinetd (#732231)
    - pull updated translations


author: Nils Philippsen <nils@redhat.com> - 0.101.3-1
changelog:
  - version 0.101.3:
    - decode UTF-8 encoded unit names instead of vice versa (#717262)
    - pull updated translations


author: Nils Philippsen <nils@redhat.com> - 0.101.1-1
changelog:
  - version 0.101.1:
    - improve coping with systemd reloads
    - improve checking service types (systemd vs. legacy), don't try to call
      old-style methods on systemd units (#702086)
    - hide systemd units that aren't loaded (#702163)
    - improve dealing with xinetd package being removed


author: Nils Philippsen <nils@redhat.com> - 0.99.43-1
changelog:
  - use improved @polkit.enable_proxy decorator to gracefully catch some
    authorization failures (#543599)


author: Nils Philippsen <nils@redhat.com> - 0.99.26-1
changelog:
  - make XinetdService._set_enabled() work for the first time
  - fix GUI upon disabled services (#470722)


author: Nils Philippsen <nils@redhat.com> - 0.99.25-1
changelog:
  - let gettext return the correct encoding (#468351)
  - backout use of slip.dbus.proxy.unknown_method_default as this breaks things
    drastically


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.24-1
changelog:
  - use slip.dbus.polkit.AreAuthorizationsObtainable() to determine whether to
    use the dbus backend or not (#461688)
  - pull in updated translations


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set whole hpaned (in)sensitive, not individual child widgets
  - display busy cursor until all services are listed


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.23-1
changelog:
  - make double-thaws of notications fail
  - ensure correct order replay of frozen notifications when thawing (#460598)
  - ensure list is sensitive when dealing with herders that are ready already
    (e.g. in the case of already running backend)
  - avoid premature herder ready signals
  - XinetdServiceHerder: delay added/deleted services signals only after startup


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - honor X-Fedora-Pidfile directive in LSB header
  - implement default priorities for AsyncCmdQueue objects
  - service gtk events in GUIServicesList.on_services_changed () to avoid hanging
    GUI on startup


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - let GUI wait until herders are ready, then select first service in list
  - remove debugging output
  - when the selected service is deleted, find a suitable alternative to select
  - change PolicyKit actions to org.fedoraproject.config.services.info,
    org.fedoraproject.config.services.manage
  - when listing services, don't sleep until backend herder is ready
  - handle SVC_HERDER_READY signal with empty service name


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.14-1
changelog:
  - indent runlevel checkboxes in "Customize Runlevels" dialog
  - set rules hint for services treeview
  - tweak services detail widgets


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.12-1
changelog:
  - make manpage syntactically and semantically correct (#221200, patch by Eric
    Raymond) and update it


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.11-1
changelog:
  - make service description labels wrap automatically, avoid gratuitous resizing
    of service list (#440197)


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.9-1
changelog:
  - fix traceback when setting GUI elements (in)sensitive (#437289)
  - fix generating localized XML files
  - update online docs po/pot files only on real changes


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.7-1
changelog:
  - update online documentation
  - reload xinetd on changing xinetd services
  - honor xinetd status when displaying xinetd services


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.4-1
changelog:
  - use gettext directly instead of rhpl
  - add popup menu for enabling SysV services in specific runlevels
  - display help
  - enable custom runlevels via customization dialog


author: Nils Philippsen <nphilipp@redhat.com> - 0.99.0-1
changelog:
  - make start/stop/restart/enable/disable buttons/menu entries work
  - SysVService: SVC_ENABLED_YES <-> RL 2, 3, 4, 5; everything else is
    SVC_ENABLED_CUSTOM


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - implement XinetdServiceInfo.parse()
  - add and implement SVC_STATUS_REFRESHING
  - clear description text buffers if not description exists
  - implement GUIXinetdServicesDetailsPainter.paint_details()
  - implement async loading in XinetdService
  - implement GUISysVServiceEntryPainter.paint()
  - handle deleted services in GUIServicesList.on_service_status_changed()
  - make menu items and toolbar buttons (in)sensitive based on selected service


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add classes dealing with information about services, e.g. contained in
    chkconfig/LSB style comments in init scripts
  - distinguish real SysV services from fake ones (e.g. halt)
  - set enabled/disabled icons for SysV services
  - add textual description about if a service is enabled/disabled/customized
  - display description, short description


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use lower default priority for asynchronous IO handling
  - remove more obsolete files
  - symlink gui.py instead of obsolete serviceconf.py to system-config-services
  - write status and explanation labels
  - make some labels selectable
  - use default geometry of 800x400
  - use stock warning icon for dead services


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - move handling of service changes from GUIServicesTreeStore into
    GUIServicesList
  - use stock icons for enabled/status columns
  - use event loop instead of threads for asynchronously running external commands


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - move getstatusoutput() into util.py
  - watch runlevels 0 and 6 as well
  - notify subscribers on service changes
  - ignore non-chkconfig-capable "services" in /etc/init.d, /etc/rc?.d
  - add infrastructure for asynchronous loading/saving of services


author: Nils Philippsen <nphilipp@redhat.com> - 0.9.16-1
changelog:
  - add release tag to remaining changelog versions to appease rpmlint
  - don't let gtk-update-icon-cache fail scriptlets
  - re-add plain hicolor-icon-theme requirement to avoid unowned directories
  - remove obsolete no.po translation file (#332411)


author: Nils Philippsen <nphilipp@redhat.com> - 0.9.15-1
changelog:
  - Merge review (#226470):
    - remove hicolor-icon-theme, gtk2 requirements, call gtk-update-icon-cache
      with full path


author: Nils Philippsen <nphilipp@redhat.com> - 0.9.13-1
changelog:
  - Merge review (#226470):
    - make obsoletes versioned
    - escape RPM macro in changelog
    - change license tag to GPLv2+
    - recoded documentation to UTF-8
    - install files with correct permissions
    - add release to changelog versions to appease rpmlint
    - use %config(noreplace)
    - use "make %{?_smp_mflags}"
    - use "%defattr(-,root,root,-)"
    - use xdg-open if available
  - pick up updated translations


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - fix licensing blurb in PO files
  - recode spec file to UTF-8


author: Harald Hoyer <harald@redhat.com> - 0.9.4-1
changelog:
  - fixed service start/stop (#218429)
  - translation update (#216558)
  - Resolves: rhbz#216558, rhbz#218429


author: Nils Philippsen <nphilipp@redhat.com> - 0.9.1-1
changelog:
  - don't disable Start/Stop/Restart upon reverting changes (#202722)
  - add dist tag
  - install po files (again)
  - require gettext for building
  - fix tagging for make archive
  - fix circular make dependency
  - remove duplicate message definitions


author: Florian Festi <ffesti@redhat.com>
changelog:
  - rewrote large parts of servicemethods (OO design, better handling of old/new
    settings, read headers of init scripts completely)
  - first implementation of widgets to control services (intended for tools
    configuring single services like nfs, samba, bind, ...), still missing: i18n,
    dependencies on other services (like portmap)


author: Nils Philippsen <nphilipp@redhat.com> - 0.8.26-1
changelog:
  - revamp getting output from external commands (#162884)
  - package %{_bindir}/serviceconf symlink (#165099)


author: Nils Philippsen <nphilipp@redhat.com> 0.8.22-1
changelog:
  - fix deprecation warnings (#153052) with patch by Colin Charles
  - update the GTK+ theme icon cache on (un)install (Christopher Aillon)


author: Nils Philippsen <nphilipp@redhat.com> 0.8.21-1
changelog:
  - connect toggled signals of service/runlevel checkboxes to enable saving again
    (#151982)
  - consolidate on_optRL*_toggled
  - connect delete_event of mainWindow to ask whether things should be saved
    before quitting
  - tab -> space indentation to avoid ambiguity
  - change some typos


author: Nils Philippsen <nphilipp@redhat.com> 0.8.20-1
changelog:
  - don't read from /dev/null when restarting xinetd/services to prevent hangs
  - build toolbar in glade to avoid DeprecationWarnings (#134978)
  - dynamic, translated column titles for runlevel columns


author: Brent Fox <bfox@redhat.com> 0.8.7-1
changelog:
  - remove dependency on gnome-python2 and gnome-python2-canvas
  - try to load glade file in the cwd, if not, pull from /usr/share/
  - apply patch from bug #117277


author: Daniel J Walsh <dwalsh@redhat.com> 0.8.3-6
changelog:
  - Fix DISPLAY error handling
  - Stretch Screen size
  - Update status box after Start/Stop/Restart
  - Fix Icon error


author: Dan Walsh <dwalsh@redhat.com> 0.8.1-5
changelog:
  - Updated to use intltool and new build environment.
  - Added with pam changes for timestamp
  - New internationalization stuff


author: Bill Nottingham <notting@redhat.com>
changelog:
  - translation typos (#51774, #51776)
  - add system-config-services link
  - if we're using find_lang, don't specify the .mo files explicitly


author: Tim Powers <timp@redhat.com>
changelog:
  - gnomified
  - work around parsing languified chkconfig output so that we can get accurate information displayed


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added help doc
  - moved man page into man directory
  - added Makefile for man page
  - added man page to spec file


author: Andy Grover <agrover@redhat.com> - 2.1.fb30-1
changelog:
  - New upstream version
  - Update description and summary
  - Remove patch0, upstream doesn't include usb gadget any more


author: Andy Grover <agrover@redhat.com> - 2.1.fb26-1
changelog:
  - New upstream release
  - Remove kernel dependency
  - Remove python-ethtool and python-ipaddr dependencies


author: Andy Grover <agrover@redhat.com> - 2.1.fb14-1
changelog:
  - Update Source URL to proper tarball
  - Add patch retry-target-creation.patch
  - New upstream release


author: Andy Grover <agrover@redhat.com> - 2.1.fb1-1
changelog:
  - Change upstream URL
  - New upstream release
  - Remove upstreamed patches:
    * python-rtslib-git-version.patch
    * python-rtslib-use-ethtool.patch
    * python-rtslib-update-specpath.patch


author: Andy Grover <agrover@redhat.com> - 1.99-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Darryl L. Pierce <dpierce@redhat.com> - 0.1.3-2
changelog:
  - Changed the license from LPGv2 to MIT and LGPLv2.
  - Removed the unused ruby_sitelib macro. 
  - Moved Rakefile, setup.rb and wirble.gemspec to -doc.
  - Marked _irbrc as %doc


author: Nathan Scott <nathans@redhat.com> - 3.8.0-1
changelog:
  - Update to latest PCP sources.
  - Validate metric names passed into pmiAddMetric (BZ 958019)
  - Install log directories with correct ownership (BZ 960858)


author: Nathan Scott <nathans@redhat.com> - 3.6.10-2
changelog:
  - Ensure tmpfile directories created in %files section.
  - Resolve tmpfile create/teardown race conditions.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-1
changelog:
  - Update to latest PCP sources.
  - Resolve tmpfile security flaws: CVE-2012-5530
  - Introduces new "pcp" user account for all daemons to use.


author: Nathan Scott <nathans@redhat.com> - 3.6.9-1
changelog:
  - Update to latest PCP sources.
  - Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
  - Fix sar2pcp uninitialised perl variable warning (BZ 859117)
  - Fix pcp.py and pmcollectl with older python versions (BZ 852234)


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.6-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Introduces new python-pcp and pcp-testsuite sub-packages.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.5-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Fix security flaws: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 (BZ 848629)


author: Mark Goodwin - 3.6.0-1
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4  -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro for correct libdir logic
  - update to latest PCP sources


author: Martin Hicks <mort@sgi.com> - 3.0.1-2
changelog:
  - Remove IB dependencies.  The Infiniband PMDA is being moved to
    a stand-alone package.
  - Move cluster PMDA to a stand-alone package.


author: Orion Poplawski <orion@cora.nwra.com> - 6.0.5-1
changelog:
  - Update to PTP 6.0.5, photran 8.0.5
  - Remove rdt.remotetools feature beause we are unable to build
    remotejars
  - Hande tycho versions automatically


author: Orion Poplawski <orion@cora.nwra.com> - 6.0.3-1
changelog:
  - Update to PTP 6.0.3, photran 8.0.3
  - Use maven/tycho for building, major rework of spec
  - Add patch remove ant-trax dependency, fix maven jdk tools.jar dep
  - Drop overrides patch
  - Move pldt and rdt-sync into the main package
  - Add fortran meta sub-package to bring in Fortran support
  - Drop cdt-compilers, rdt-sdk, and rdt-xlc-sdk sub-packages


author: Orion Poplawski <orion@cora.nwra.com> - 5.0.4-1
changelog:
  - Update to PTP 5.0.4, photran 7.0.4
  - Add pldt-fortran and rm-contrib sub-packages
  - Update makesource.sh/spec/finddeps.sh to use git archive
  - Unpack cdtdb-4.0.3-eclipse.jar from tar archive
  - Remove orbitDeps usage, not needed
  - Remove license feature hack, not needed
  - Drop defattr, BuildRoot, clean
  - Actually build master package


author: Orion Poplawski <orion@cora.nwra.com> - 5.0.1-1
changelog:
  - Update to PTP 5.0.1, photran 7.0.1
  - Bump CDT and PDE requirement
  - Work around issue with pdebuild shared license feature
  - Add BR on ws-jaxme, add jaxmeapi and xml-commons-apis to orbitDeps
  - Add patch to remove unneeded dependencies
  - Add BR on eclipse-jgit
  - Add sdk and photran components to ptp-master
  - Add rdt-sync, rdt-sync-fortran, and sdk sub-packages
  - Fixup some requires
  - Improve the finddeps.sh utility script


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.6.0-1
changelog:
  - update to upstream release 0.6.0
  - History.md is now not included in the npm tarball
  - tests are now not included in the npm tarball, so download separately


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Update to version 0.13
    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension
  	
    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.


author: John Dennis <jdennis@redhat.com> - 0.12-2
changelog:
  - add patch python-nss-0.12-rsapssparams.patch to fix build problem
    which appears only with nss 3.13 and later.


author: John Dennis <jdennis@redhat.com> - 0.12-1
changelog:
  * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #689059
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()


author: John Dennis <jdennis@redhat.com> - 0.9-7
changelog:
  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py


author: John Dennis <jdennis@redhat.com> - 0.9-6
changelog:
  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object


author: John Dennis <jdennis@redhat.com> - 0.9-5
changelog:
  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage


author: John Dennis <jdennis@redhat.com> - 0.9-3
changelog:
  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.


author: John Dennis <jdennis@redhat.com> - 0.9-2
changelog:
  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.


author: John Dennis <jdennis@redhat.com> - 0.9-1
changelog:
  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - The following methods, properties  and functions were added:
    SecItem.type SecItem.len, SecItem.data
    PK11SymKey.key_data, PK11SymKey.key_length, PK11SymKey.slot
    create_context_by_sym_key
    param_from_iv
    generate_new_param
    get_iv_length
    get_block_size
    get_pad_mechanism
  - SecItem's now support indexing and slicing on their data
  - Clean up parsing and parameter validation of variable arg functions


author: John Dennis <jdennis@redhat.com> - 0.7-1
changelog:
  - add support for symmetric encryption/decryption
    more support for digests (hashes)

    The following classes were added:
    PK11SymKey PK11Context

    The following methods and functions were added:
    get_best_wrap_mechanism          get_best_key_length
    key_gen                          derive
    get_key_length                   digest_key
    clone_context                    digest_begin
    digest_op                        cipher_op
    finalize                         digest_final
    read_hex                         hash_buf
    sec_oid_tag_str                  sec_oid_tag_name
    sec_oid_tag_from_name            key_mechanism_type_name
    key_mechanism_type_from_name     pk11_attribute_type_name
    pk11_attribute_type_from_name    get_best_slot
    get_internal_key_slot            create_context_by_sym_key
    import_sym_key                   create_digest_context
    param_from_iv                    param_from_algid
    generate_new_param               algtag_to_mechanism
    mechanism_to_algtag

    The following files were added:
    cipher_test.py digest_test.py


author: John Dennis <jdennis@redhat.com> - 0.5-1
changelog:
  - restore ssl.nss_init and ssl.nss_shutdown but make them deprecated
    add __version__ string to nss module


author: John Dennis <jdennis@redhat.com> - 0.4-1
changelog:
  - add binding for NSS_NoDB_Init(), bug #509002
    move nss_init and nss_shutdown from ssl module to nss module


author: John Dennis <jdennis@redhat.com> - 0.3-1
changelog:
  - installed source code in Mozilla CVS repository
    update URL tag to point to CVS repositoy
    (not yet a valid URL, still have to coordinate with Mozilla)
    minor tweak to src directory layout


author: John Dennis <jdennis@redhat.com> - 0.2-1
changelog:
  - Convert licensing to MPL tri-license
  - apply patch from bug #472805, (Miloslav Trmač)
    Don't allow closing a socket twice, that causes crashes.
    New function nss.io.Socket.new_socket_pair()
    New function nss.io.Socket.poll()
    New function nss.io.Socket.import_tcp_socket()
    New method nss.nss.Certificate.get_subject_common_name()
    New function nss.nss.generate_random()
    Fix return value creation in SSLSocket.get_security_status
    New function nss.ssl.SSLSocket.import_tcp_socket()


author: John Dennis <jdennis@redhat.com> - 0.1-1
changelog:
  - clean up ssl_example.py, fix arg list in get_cert_nicknames,
     make certdir cmd line arg consistent with other NSS tools
  - update httplib.py to support client auth, add httplib_example.py which illustrates it's use
  - fix some documentation
  - fix some type usage which were unsafe on 64-bit


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3.4-2
changelog:
  - Avoid divide by zero in FR2MS with damaged input files
    (#912312, upstream #255).
  - Build with -D_FILE_OFFSET_BITS=64 since the AC_SYS_LARGEFILE result
    in config.h is included too late in several files (upstream #256).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3.3-2
changelog:
  - Keep all MimeType definitions in the single .desktop file, even if the
    corresponding plug-ins may be missing. This is supposed to fix the
    assignment of Default Applications (GNOME bz #690119).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3.2-1
changelog:
  - Update to 3.3.2 (a few bug-fixes and translation updates).
  - Merge content detection fix for URLs that contain parameters.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3-0.1.alpha1
changelog:
  - Generic plugin API/ABI bumped to 40, also the minimum.
  - Adjust files section for dropped files.
  - Upgrade to 3.3-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.2-0.1.alpha1
changelog:
  - Explicitly link with gmodule-2.0.pc libs for missing libs.
  - Generic plugin API/ABI bumped to 37, also the minimum.
  - libmowgli not used anymore.
  - Upgrade to 3.2-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.1-0.1.alpha1
changelog:
  - Generic plugin API/ABI bumped to 32, with 31 being the minimum.
  - libmcs not used anymore.
  - Upgrade to 3.1-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.0.2-3
changelog:
  - Add audacious(plugin-api)%{?_isa} Provides which plugin packages
    may use for an arch-specific dependency (albeit not before builds of
    this base package become available for the target dist).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.0.2-2
changelog:
  - Use %_isa in more dependencies.
  - Drop unneeded BuildRoot stuff.
  - Drop %defattr lines.
  - Drop explicit pkgconfig dependency.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.0-0.1.alpha1
changelog:
  - Build with GTK+ 3.
  - Generic plugin API/ABI minimum version bumped to 30.
  - Upgrade to 3.0-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5-0.3.beta1
changelog:
  - Sync desktop file modifications with the 2.4.4 packages and the
    current state in 2.5-beta1.
  - Remove audio/midi MIME type from desktop file, because it is only
    supported with the optional audacious-plugins-amidi package.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.5-0.1.alpha1
changelog:
  - Upgrade to 2.5-alpha1.
  - Generic plugin API/ABI bumped to 18.
  - Plugin API define has changed from __AUDACIOUS_PLUGIN_API__ to
    _AUD_PLUGIN_VERSION
  - .desktop files got renamed!
  - executables got renamed!
  - BR doxygen and include HTML documentation in -devel package


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.3-3
changelog:
  - Provide versioned capability audacious(plugin-api) as something much more
    specific for plugin packages to require.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.2-1
changelog:
  - Update to 2.4.2 (maintenance release in stable branch).
  - Generic plugin API/ABI bumped to 17.
  - Remove NEWS file not updated since 2.1.0.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.0-3
changelog:
  - Replace file-ext-in-url patch with upstream's probe.c commit.
  - Enable gnomeshortcuts plugin by default, if not disabled in
    user's preferences (#632388).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.0-2
changelog:
  - Strip off parameters of HTTP/HTTPS URLs to fix file name extension
    detection (#632367, Hans de Goede).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4.0-1
changelog:
  - Update to 2.4.0 final.
  - Update spec file comments, summary, description, also because
    the skinned user-interface no longer is the default.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4-0.5.alpha3
changelog:
  - Generic plugin API/ABI bumped to 15.
  - .desktop files got renamed!
  - BR libguess-devel (split off after alpha2)
  - Update to alpha3.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.4-0.4.alpha2
changelog:
  - Include license file also in the -libs subpackage
    for Fedora Licensing Guidelines change (2010-07-07).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-13
changelog:
  - Enhance the coverart patch to not display an empty filename for
    streams when title isn't known yet and filename isn't either.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-11
changelog:
  - Explicitly link with libm because of:
    http://fedoraproject.org/wiki/Features/ChangeInImplicitDSOLinking


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-9
changelog:
  - Let set_tuple_cb() work on a copied tuple
    (the metadata updates flood is too racy IMO).
  - Fix tuple_copy().


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-8
changelog:
  - Change build_stamp from "UNSUPPORTED VERSION" to "Fedora package".
  - Always add category AudioVideo to .desktop file for safety reasons.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-7
changelog:
  - Patch filename_find_decoder to probe a file if multiple decoders
    compete with eachother to handle files with the same extension.
    This also merges the 2nd chunk of the disabled-iplugins patch.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-6
changelog:
  - In audacious.pc link with -laudcore instead of -laudclient (AUD-125).
    This removes a superfluous libaudclient dependency from all plugins and
    adds a libaudcore dependency. So far, plugins that use libaudcore
    had undefined symbols instead.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-3
changelog:
  - Patch Audacious so that filename_find_decoder only considers
    enabled input plugins (disabled modplug plugin effectively disabled
    also the xmp plugin).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-2
changelog:
  - Drop Musepack and SID MIME types from desktop files. As of Audacious 2.2,
    Musepack is only supported by the separate "ffaudio" plugin. The SID
    plugin in a separate subpackage provides its own desktop file.
  - Drop unsupported MIME types from desktop files.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.2-0.1.alpha1
changelog:
  - Upgrade to 2.2-alpha1 (primarly for alsa-gapless output plugin).
  - /usr/bin/audacious and /usr/bin/audtool compatibility links are now
    provided officially by upstream.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1-5
changelog:
  - /usr/bin/audacious and /usr/bin/audtool compatibility links are
    provided officially by upstream within 2.2-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1-3
changelog:
  - Default to PulseAudio output plugin: Fix pluginenum.c indentation
    to make output plugin default/priority init work. Actually, when I
    noticed this bug, I went a step further and copied a rewrite from
    upstream devel scm.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.1-0.1
changelog:
  - Initial package for Audacious 2.0.1
    based on a major spec overhaul of the older Fedora packages.


author: TI_Eugene <ti.eugene@gmail.com> 2.0.1-2
changelog:
  - License upgraded to GPLv3+
  - INSTALL_PREFIX removed from %cmake flags
  - "cross-platform" removed from %description


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.75-1
changelog:
  - Upstream update.
  - Reflect upstream maintainer having changed.
  - BR: perl(Template), BR: perl(Test::Pod).


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.8.0-2
changelog:
  - Update scriplets for gsettings schema and icon cache. Fixes rhbz#743580
  - Drop obsolete dependency on Gconf and dbus-c++-devel
  - Update build requires to gtkmm30-devel instead of gtkmm24-devel
  - Fix source url


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.7.5-1
changelog:
  - New upstream release
  - http://mail.gnome.org/archives/gnote-list/2011-July/msg00001.html
  - Drop all patches since they are now upstream


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.7.4-1
changelog:
  - New upstream bug fix release
  - http://mail.gnome.org/archives/gnote-list/2011-April/msg00011.html
  - Drop couple of no longer needed patches


author: Bastien Nocera <bnocera@redhat.com> 0.7.3-5
changelog:
  - Disable panel applet
  - Rebuild against newer GTK+
  - Add patch from Petr Machata <pmachata@redhat.com> to fix the build


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.7.3-1
changelog:
  - New upstream bug fix release with translation updates
  - http://mail.gnome.org/archives/gnote-list/2010-November/msg00002.html
  - Drop backported patch


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.7.2-1
changelog:
  - Ability to search for phrases, prompt while renaming notes, bug fixes
  - Add a patch from upstream master to replace deprecated macros 
  - Drop upstreamed patch to fix dso linking
  - http://mail.gnome.org/archives/gnote-list/2010-March/msg00010.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.7.0-1
changelog:
  - Add a Note of the Day addin, addins can be disabled now
  - http://mail.gnome.org/archives/gnote-list/2009-December/msg00013.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.6.3-2
changelog:
  - Several patches from upstream for additional translations
  - Gnote now confirm to XDG specification


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.6.1-1
changelog:
  - D-Bus support enabled, many new features and bug fixes
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00016.html
  - 0.6.0 skipped due to applet breakage fixed in this release
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00020.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.5.1-1
changelog:
  - Fixes a regression and some bugs
  - http://mail.gnome.org/archives/gnote-list/2009-June/msg00002.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.5.0-1
changelog:
  - Adds the ability to import Tomboy notes on first run 
  - http://mail.gnome.org/archives/gnote-list/2009-June/msg00000.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.4.0-1
changelog:
  - Many minor bug fixes from new upstream release
    http://www.figuiere.net/hub/blog/?2009/05/27/670-gnote-040


author: Jesse Keating <jkeating@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2 to fix many upstream bugs
    http://www.figuiere.net/hub/blog/?2009/04/15/660-gnote-012


author: <infrastation@yandex.ru> - 0.19.4-1
changelog:
  - Rebase to v0.19.4
  - Deprecate /etc/httpd/conf.d/RackTables.conf
  - Include /usr/share/doc/RackTables-0.19.4/README.Fedora
  - Stop using makeinstall macro


author: <colin.coe@gmail.com> - 0.17.4-7
changelog:
  - Simplify setup
  - Step making docdir/name
  - Simplify copy
  - Make contrib/quickinstall.sh quit unless it's run by root


author: <colin.coe@gmail.com> - 0.17.4-6
changelog:
  - Own /etc/RackTables/
  - Fix duplicate files
  - Set ownership/mode of /etc/RackTables/secret.php correctly
  - Fix contrib/quickinstall.sh to write a valid /etc/RackTables/secret.php


author: <colin.coe@gmail.com> - 0.17.4-4
changelog:
  - Removed redundant 'RackTables' from the summary and description
  - Changed license as suggested
  - Put secret.php into /etc/RackTables and created symlink back to {_datadir}/{name}/inc
  - Removed 'mkdir -p $RPM_BUILD_ROOT{_docdir}'
  - Stopped listing inc/secret.php twice


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.7.1-1
changelog:
  - new version
  - fixed summary spelling
  - fixed egg-info condition
  - fixed source URL for new version


author: Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> 0.6.1-3
changelog:
  - doc files converted to UTF-8
  - removed HISTORY.html README.html because they are also in xlrd/doc/


author: Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.1-2
changelog:
  - namewithoutprefix removed, too complicated and not required
  - added directory xlrd
  - permissions for python scripts set to 644
  - files converted from DOS line-feeds to UNIX format
  - "#!/usr/bin/env python" added to beginning runxlrd script
  - removed doc and examples from site-packages/xlrd directory


author: Tom Hughes <tom@compton.nu> - 0.2.6-1
changelog:
  - Update to 0.2.6 release
  - Add tests, which are now separate
  - BuildRequire coffee-script and sax for tests


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.0.6-4
changelog:
  - Correct download link (#840244)
  - Do not mix rpmbuild macros and environment variables (#840244)
  - Consistently use %{name} (#840244)
  - Remove executable bit from some sources (#840244)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.0.6-3
changelog:
  - Rename from Singular-surf to surf-geometry (#840244)
  - Use enviroment-modules to avoid conflicts with surf package (#840244)


author: Gary Kotton <gkotton@redhat.com> - 2012.2.1-2
changelog:
  - Ensure libvirt_vif_driver is set with node installation (bug 885932)
  - Cleanup of symbolic link plugin.ini (bug 901959)


author: Robert Kukura <rkukura@redhat.com> - 2012.2.1-1
changelog:
  - Update to folsom stable 2012.2.1
  - Turn off PrivateTmp for dhcp_agent and l3_agent (bug 872689)
  - Add upstream patch: Fix rpc control_exchange regression.
  - Remove workaround for missing l3_agent.ini


author: Robert Kukura <rkukura@redhat.com> - 2012.2-0.8.rc1
changelog:
  - Setup script fixes from garyk
  - Fix openvswitch service config file path
  - Make log file names consistent with service names


author: Robert Kukura <rkukura@redhat.com> - 2012.2-0.7.rc1
changelog:
  - Fix various issues in setup scripts
  - Configure quantum-dhcp-agent to store files under /var/lib/quantum
  - Make config files with passwords world-unreadable
  - Replace bug workarounds with upstream patches


author: Robert Kukura <rkukura@redhat.com> - 2012.2-0.6.rc1
changelog:
  - Require python-quantumclient >= 2.0.22
  - Add bug references for work-arounds
  - Use /usr/share/quantum/rootwrap instead of /usr/share/quantum/filters


author: Robert Kukura <rkukura@redhat.com> - 2012.2-0.5.rc1
changelog:
  - Update to folsom rc1
  - Fix command lines in agent systemd units
  - Fix setup scripts
  - Fix configuration of agents to use quantum-rootwrap
  - Set "debug = False" and "auth_strategy = noauth" in quantum.conf
  - Symlink /etc/quantum/plugin.ini to plugin's config file
  - Add "--config-file /etc/quantum/plugin.ini" to ExecStart in quantum-server.service


author: Robert Kukura <rkukura@redhat.com> - 2012.2-0.2.f2
changelog:
  - Include quantum module no longer provided by python-quantumclient
  - Update description text
  - Disable setuptools_git dependency


author: Robert Kukura <rkukura@redhat.com> - 2012.1-0.6.rc1
changelog:
  - Update to official essex rc1 milestone
  - Add quantum-server-setup and quantum-node-setup scripts
  - Use hand-coded agent executables rather than easy-install scripts
  - Make plugin config files mode 640 and group quantum to protect passwords


author: Robert Kukura <rkukura@redhat.com> - 2012.1-0.5.e4
changelog:
  - Update to essex possible RC1 tarball
  - Remove patches incorporated upstream
  - Don't package test code
  - Remove dependencies only needed by test code


author: Robert Kukura <rkukura@redhat.com> - 2012.1-0.4.e4
changelog:
  - Upstream patch: add root_helper to quantum agents
  - Add sudoers file enabling quantum-rootwrap for quantum user
  - Configure plugin agents to use quantum-rootwrap
  - Run plugin agents as quantum user


author: Robert Kukura <rkukura@redhat.com> - 2012.1-0.3.e4
changelog:
  - Add upstream patch: remove pep8 and strict lxml version from setup.py
  - Remove old fix for pep8 dependency
  - Add upstream patch: Bug #949261 Removing nova drivers for Linux Bridge Plugin
  - Add openvswitch dependency


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2.13.16-8
changelog:
  - Rename package unison2.13 -> unison213 to match Fedora naming rules
  - Automatically calculate ver_priority using the shell; easier maintenance


author: Nils Philippsen <nils@redhat.com> - 0.7.1-1
changelog:
  - 0.7.1 Upstream release
  - no need to fix examples/dynamic_dict/dynamic_dict.py anymore
  - use sqla_nose.py to fix %check


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.5-0.1.rc4
changelog:
  - Update to 0.5.0rc4 which works with the new pysqlite
  - And update test cases to work with the new pysqlite


author: Toshio Kuratomi <a.badger@gmail.com> - 0.4.0-0.3.beta4
changelog:
  - setuptools seems to be broken WRT having an active and inactive version
    of an egg.  Have to make both versions inactive and manually setup a copy
    that can be started via import. (Necessary for the sqlalchemy0.3 compat
    package.)


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.3.1-2
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - BuildRequire: python-devel as a header is missing otherwise.


author: Ralph Bean <rbean@redhat.com> - 2.0.1-1
changelog:
  - Latest upstream.
  - Added python3 subpackage.
  - Added %check section but left it commented out (not working under mock).


author: Robin Lee <cheeselee@fedoraproject.org> - 1.5.2-1
changelog:
  - 1.5.2
  - Don't use sed command in Source0 URI
  - Remove the doctest text files.
  - Clean up obsolete lines


author: Pravin Satpute <psatpute@redhat.com> - 0.120-1
changelog:
  - Upstream new release.
  - Added new families Hadasim CLM, Keter YG, Simple CLM, Stam Ashkenaz CLM, Stam Sefarad CLM


author: Pravin Satpute <psatpute@redhat.com> - 0.105-1
changelog:
  - Upstream new release.
  - Miriam Mono family is now OpenType and has diacritics support developed by Yoram Gnat.


author: Pádraig Brady <P@draigBrady.com> - 0.3.1-7
changelog:
  - Fix %check quoting in the previous comment which when
    left with a single percent sign, pulled in "unset DISPLAY\n"
    into the changelog


author: Pádraig Brady <P@draigBrady.com> - 0.3.1-6
changelog:
  - cherrypick 25bf29f4d3b7 from upstream (rhbz#746771)
  - exclude the %check from ppc where the tests segfault


author: Gerard Ryan <galileo@fedoraproject.org> - 1.1.0-3
changelog:
  - Add cglib and aopalliance as embedded dependencies.
  - Use newer pom macro to add netty dependency.
  - Add cglib and aopalliance as dependencies in org.eclipse.m2e.maven.runtime.
  - Symlink catalog and descriptor jars from maven-archetype.
  - Remove symlink to plexus-container-default.jar, fix sisu-guice.jar link.


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.15-1
changelog:
  - update to upstream
  - remove /usr/share/nagios/html/pnp4nagios/install.php
  - added /etc/httpd/conf.d/pnp4nagios.conf
  - removed -sample suffix from rest of sample files


author: Xavier Bachelot <xavier@bachelot.org> 0.4.14-1
changelog:
  - Update to 0.4.14 (RHBZ#518069).
  - Fix typo in README.fedora (RHBZ#490664).
  - Move npcdmod.o to a better place.
  - BR: rrdtool-perl


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 7.4-1
changelog:
  - Update to Globus Toolkit 5.2.2
  - Drop patch globus-ftp-client-v2def.patch (obsolete - gridftp v2 now default)


author: Emmanouil Paisios <paisios@lrz.de> - 7.2-3
changelog:
  - Added patch from VDT for enabling gridftp v2 via the environment variable
    GLOBUS_FTP_CLIENT_GRIDFTP2.
    See https://ggus.eu/tech/ticket_show.php?ticket=81230 for details.


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 7.2-1
changelog:
  - Update to Globus Toolkit 5.2.0
  - Drop patches globus-ftp-client-doxygen.patch, globus-ftp-client-format.patch
    and globus-ftp-client-type-punned-pointer.patch (fixed upstrem)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-14
changelog:
  - Resync with final version of upstream patches for launching mdmon
    via systemctl. Require dracut 024-025 or later to match.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-12
changelog:
  - Launch mdmon via systemctl to avoid it ending up in the wrong cgroup
    and getting killed in the boot process when switching from the
    initrd to the real root.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Move code to leave udev cgroup into mdmon and excute it after we
    work, to make sure it actually does the right thing.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Reintroduce fix for removing dangling symlink of
    mdmonitor-takeover.service which got lost in the fix introduced in
    3.2.6-8


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - mdmonitor-takeover.service is obsolete with the --offroot support,
    and it is harmful as of 3.2.6
  - Resolves bz834245


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Fix issue with udev scripts where if an raid volume with one of
    the disks failing, the failed disk is still present in the volume
    and container. The raid volume stays is in normal state (should be
    degraded) and the rebuild cannot start.
  - Resolves bz886123


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-5
changelog:
  - mdadm-sysvinit is obsolete given that we no longer support booting
    using sysvinit scripts
  - Resolves bz884993


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Disallow creating a second IMSM RAID array size 0 (bz880972)
  - Disallow creating IMSM RAIDs that spans multiple controllers (bz880974)
  - Resolves bz880972, bz880974


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2
changelog:
  - Modify mdadm to set the cgroup of mdmon to systemd if it's available
  - Related bz873576 (and others)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-13
changelog:
  - Relax installation requirements for abrt script to only depend on
    libreport-filesystem rather than the full abrt package


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-7
changelog:
  - Remove bogus rogue patch applied in 3.2.5-5 with justification and
    without following the structure of the mdadm package.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4
changelog:
  - Move /etc/tmpfiles.d/mdadm.conf to /lib/tmpfiles.d/ to comply with
    Fedora tmpfile rules
  - Resolves bz840187


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Fix problem where reshape of RAID volume is broken after trying to
    stop all MD devices.
  - Enhance raid-check to allow the adming to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz830177, bz820124


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-2
changelog:
  - Fix uninstall script to remove dangling symlink to
    mdmonitor-takeover.service, if the mdadm package is uninstalled from
    the system.
  - Resolves bz828354


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-3
changelog:
  - Fix mdadm-3.2.4 introduced bug where --add fails in common cases
  - Resolves bz821717 (f17) bz821718 (f16) bz821719 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-2
changelog:
  - Fix mdadm.conf to use 'd' for /var/run/mdadm creation, to avoid the
    map file getting deleted during boot.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-9
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - Correctly fix failure when trying to add internal bitmap to 1.0 arrays
  - Resolves: bz817023 (f17) bz817024 (f17) bz817026 (f17) bz817028 (f17)
  - Resolves: bz817029 (f17) bz817032 (f17) bz817038 (f17) bz808774 (f17)
  - Resolves: bz817039 (f17) bz817042 (f17)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-8
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz817522 (f17) bz817535 (f16) bz817537 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-7
changelog:
  - Fix issue when re-adding drive to a raid1 array with bitmap
  - Resolves: bz807743 (f17) bz769323 (f16) bz791159 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-6
changelog:
  - Fix double free on buggy old kernel sysfs read
  - Fix segfault if trying to write superblock to non existing device
  - Resolves: bz795707 (f17) bz795747 (f16) bz795748 (f15)
  - Resolves: bz795461 (f17) bz795749 (f16) bz795750 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz789898 (f16) bz791189 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Add support for --offroot to mdadm/mdmon
  - Resolves: bz785739 (rawhide) bz785737 (f16) bz771405 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Fix case where we have to retry in case a remove fails due to an array
    being busy
  - Resolves: bz773337 (rawhide) bz773340 (f16) bz773341 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-1
changelog:
  - Update to upstream 3.2.3
  - Resolves: bz770110 (rawhide) bz771413 (f16) bz759014 (rawhide)
  - Resolves: bz759015 (f16) bz759035 (rawhide) bz759036 (f16)
  - Resolves: bz771608 (f15) bz759016 (f15) bz759039 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-15
changelog:
  - Backport upstream fix for memory leak that can prevent migration to
    RAID5 from completing.
  - Backport upstream fix preventing mounting a device while it is in
    process of reshaping
  - Resolves: bz755005 bz755009


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-14
changelog:
  - Backport upstream fixes to prevent growing v0.90 metadata raid out
    of supported size.
  - Add missing 'disable' argument to systemctl in preun script
  - Resolves: bz735306 (Fedora 15) bz748731 (Fedora 16) bz748732 (rawhide),
    Resolves: bz751716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-12
changelog:
  - Backport upstream version of fix for IMSM RAID assembly problem,
    which resolves issues when booting off sysvinit based system.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-10
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)
  - Fix race between udev and mdadm when assembling md device using
    mdadm -I, where udev would spawn an additional mdadm command to
    perform the assembly in parallel.


author: Doug Ledford <dledford@redhat.com> - 3.2.2-8
changelog:
  - Rework the 65-md-incremental.rules file to add the following support:
    Nested md raid arrays should now work
    MD on top of LUKS or other lvm based devices should now work
    We should no longer grab multipath paths before multipath can


author: Milan Broz <mbroz@redhat.com> - 3.2.2-3
changelog:
  - Use unit files with systemd. (johannbg)
  - Add sub-package sysvinit for SysV init script.
  - Resolves: bz713573


author: Doug Ledford <dledford@redhat.com> - 3.1.5-1
changelog:
  - Update to latest upstream stable release
  - Update mdadm.rules file to honor noiswmd and nodmraid command line options
  - Ghost the directory in /var/run, create /var/run/mdadm in mdmonitor init
    script
  - Don't report mismatch counts on either raid1 or raid10
  - Check both active and idle arrays during raid check runs
  - Move the raid-check script from cron.weekly to /usr/sbin, add a crontab
    file to /etc/cron.d and mark it config(noreplace).  This way users can
    select their own raid-check frequency and have it honored through
    upgrades.
  - Allow the raid-check script to set the process and io priority of the
    thread performing the check in order to preserve responsiveness of the
    machine during the check.
  - Resolves: 633229, 656620. 679843, 671076, 659933


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100804.1
changelog:
  - Update to latest upstream release (resolves an issue with stale lock
    files on the md device map file)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.2
changelog:
  - Remove the glibc-static buildreq and don't build the static mdadm since
    we don't install it anyway
  - Remove the udev file since adding it was supposed to be a rawhide only change


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, fixes bz602457)
  - Add in 64-md-raid.rules to compensate for it no longer being in udev
    (bz581905)
  - Remove mdadm.static as its no longer used in initrd creation


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-2
changelog:
  - Add a little more paranoia checking to the RebuildMap code to avoid ever
    having the same infinite loop as in bz569019 again even if we change file
    locations to somewhere where we can't create a mapfile


author: Doug Ledford <dledford@redhat.com> - 3.1.2-1
changelog:
  - Grab latest upstream release instead of git repo snapshot (bz552344, bz572561)
  - The lack of /dev/md is causing problems, so add code to mapfile.c to cause
    us to create /dev/md if it doesn't exist (bz569019)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.6
changelog:
  - Newer version of imsm patch that leaves warning, but only when there
    actually are too many devices on the command line (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.5
changelog:
  - The uuid patch cause a different problem during assembly, so use a gross
    hack to work around the uuid issue that won't break assembly until fixed
    properly upstream (bz567132)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.4
changelog:
  - Fix problem with booting multiple imsm containers when they aren't listed
    "just so" in the mdadm.conf file (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.3
changelog:
  - Don't run the raid-check script if the kernel doesn't support
    md devices (bz557053)
  - Don't report any mismatch_cnt issues on raid1 devices as there are
    legitimate reasons why the count may not be 0 and we are getting enough
    false positives that it renders the check useless (bz554217, bz547128)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.1
changelog:
  - Update to head of upstream git repo, which contains a significant number
    of bug fixes we need (bz543746)


author: Doug Ledford <dledford@redhat.com> - 3.0.3-1
changelog:
  - New upstream release 3.0.3 (bz523320, bz527281)
  - Update a couple internal patches
  - Drop a patch in that was in Neil's tree for 3.0.3 that we had pulled for
    immediate use to resolve a bug
  - Drop the endian patch because it no longer applied cleanly and all attempts
    to reproduce the original problem as reported in bz510605 failed, even up
    to and including downloading the specific package that was reported as
    failing in that bug and trying to reproduce with it on both ppc and ppc64
    hardware and with both ppc and ppc64 versions on the 64bit hardware.
    Without a reproducer, it is impossible to determine if a rehashed patch
    to apply to this code would actually solve the problem, so remove the patch
    entirely since the original problem, as reported, was an easy to detect DOA
    issue where installing to a raid array was bound to fail on reboot and so
    we should be able to quickly and definitively tell if the problem resurfaces.
  - Update the mdmonitor init script for LSB compliance (bz527957)
  - Link from mdadm.static man page to mdadm man page (bz529314)
  - Fix a problem in the raid-check script (bz523000)
  - Fix the intel superblock handler so we can test on non-scsi block devices


author: Hans de Goede <hdegoede@redhat.com> - 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - Add a patch fixing mdadm --detail -export segfaults (bz526761, bz523862)
  - Add a patch making mdmon store its state under /dev/.mdadm for initrd
    mdmon, rootfs mdmon handover
  - Restart mdmon from initscript (when running) for rootfs mdmon handover


author: Doug Ledford <dledford@redhat.com> - 3.0-3
changelog:
  - Update to current head of upstream git repo for various imsm related fixes
    (fixes bz523262)
  - Fix display of metadata version in output of Detail mode
  - Add UUID output to --detail --export (bz523314)


author: Doug Ledford <dledford@redhat.com> - 3.0-2
changelog:
  - Improved raid-check script as well as the ability to configure what devices
    get checked
  - Endian patch for uuid generation


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Remove stale patches already accepted by upstream
  - Fix the raid-check script to only try and check a device if it is
    checkable
  - Update to official mdadm-3.0 version
  - Resolves: bz505587, bz505552


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.7
changelog:
  - Move the mdadm.map file from /dev/md/ to /dev/ so the installer doesn't
    need to precreate the /dev/md/ directory in order for incremental
    assembly to work


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.6
changelog:
  - Only check raid devices automatically, do not attempt to repair them
    during the weekly data scrubbing


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.5
changelog:
  - Fix a few issues with the new code to determine when a device gets to
    keep its name and when it doesn't


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.3
changelog:
  - Slightly tweak the udev rules to make sure we don't start arrays
    while running in rc.sysinit...leave array starting to it instead
  - Modify mdadm to put its mapfile in /dev/md instead of /var/run/mdadm
    since at startup /var/run/mdadm is read-only by default and this
    breaks incremental assembly
  - Change how mdadm decides to assemble incremental devices using their 
    preferred name or a random name to avoid possible conflicts when plugging
    a foreign array into a host


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.1
changelog:
  - Update to latest devel release
  - Remove the no longer necessary udev patch
  - Remove the no longer necessary warn patch
  - Remove the no longer necessary alias patch
  - Update the mdadm.rules file to only pay attention to device adds, not
    changes and to enable incremental assembly
  - Add a cron job to run a weekly repair of the array to correct bad sectors
  - Resolves: bz474436, bz490972


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.2
changelog:
  - Readd our old mdadm rules file that does incremental assembly
  - Remove the new mdadm rules file from upstream as we already have this in
    our udev package (and the one in the udev package already has a bug fixed)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.1
changelog:
  - Update to latest upstream devel release
  - Use the udev rules file included with mdadm instead of our own
  - Drop all the no longer relevant patches
  - Fix a build error in mdopen.c
  - Fix the udev rules path in Makefile
  - Fix a compile issue with the __le32_to_cpu() macro usage (bad juju to
    to operations on the target of the macro as it could get executed
    multiple times, and gcc now throws an error on that)
  - Add some casts to some print statements to keep gcc from complaining


author: Doug Ledford <dledford@redhat.com> - 2.6.7.1-1
changelog:
  - Updated to latest upstream stable release (#466803)
  - Change udev rule to not assemble degraded arrays (#453314)
  - Fix metadata matching in config file (#466078)
  - Fix assembly of raid10 devices (#444237)
  - Fix incremental assembly of partitioned raid devices (#447818)


author: Doug Ledford <dledford@redhat.com> - 2.6.7-1
changelog:
  - Update to latest upstream version (should resolve #444237)
  - Drop incremental patch as it's now part of upstream
  - Clean up all the open() calls in the code (#437145)
  - Fix the build process to actually generate mdassemble (#446988)
  - Update the udev rules to get additional info about arrays being assembled
    from the /etc/mdadm.conf file (--scan option) (#447818)
  - Update the udev rules to run degraded arrays (--run option) (#452459)


author: Bill Nottingham <notting@redhat.com> - 2.6.4-4
changelog:
  - make /dev/md if necessary in incremental mode (#429604)
  - open RAID devices with O_EXCL to avoid racing against other --incremental processes (#433932)


author: Doug Ledford <dledford@redhat.com> - 2.6.2-4
changelog:
  - Oops, if we call -C -e1, minor_version is no longer properly set, fix that
    up
  - Related: bz230207


author: Doug Ledford <dledford@redhat.com> - 2.6.2-3
changelog:
  - Oops, had to update the file leak patch, missed one thing
  - Minor tweak to return codes in init script and add LSB header
  - Resolves: bz244582, bz246980


author: Doug Ledford <dledford@redhat.com> - 2.6.2-2
changelog:
  - Fix a file leak issue when mdadm is in monitor mode
  - Update mdadm init script so that status will always run and so
    return codes are standards compliant
  - Fix assembly of version 1 superblock devices
  - Make the attempt to create an already running device have a clearer
    error message
  - Allow the creation of a degraded raid4 array like we allow for raid5
  - Make mdadm actually pay attention to raid4 devices when in monitor mode
  - Make the mdmonitor script use daemon() correctly
  - Fix a bug where manage mode would not add disks correctly under certain
    conditions
  - Resolves: bz244582, bz242688, bz230207, bz169516, bz171862, bz171938
  - Resolves: bz174642, bz224272, bz186524


author: Doug Ledford <dledford@redhat.com> - 2.6.2-1
changelog:
  - Update to latest upstream
  - Remove requirement for /usr/sbin/sendmail - it's optional and not on by
    default, and sendmail isn't *required* for mdadm itself to work, and isn't
    even required for the monitoring capability to work, just if you want to
    have the monitoring capability do the automatic email thing instead of
    run your own program (and if you use the program option of the monitor
    capability, your program could email you in a different manner entirely)


author: Doug Ledford <dledford@redhat.com> - 2.6-1
changelog:
  - Update to latest upstream version
  - Remove the mdmpd daemon entirely.  Now that multipath tools from the lvm/dm
    packages handles multipath devices well, this is no longer needed.
  - Various cleanups in the spec file


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Warren Togami <wtogami@redhat.com> 2.2-1
changelog:
  - 2.2 upgrade (#167897)
  - disable diet because we don't ship it anymore
    and we don't actually use mdassemble now


author: Doug Ledford <dledford@redhat.com> 1.11.0-4.fc4
changelog:
  - Make the mdmonitor init script use the pid-file option, major cleanup
    of the script now possible (#134459)


author: Doug Ledford <dledford@redhat.com> 1.11.0-2.fc4
changelog:
  - Change the default auto= mode so it need not be on the command line to
    work with udev, however it is still supported on the command line (#132706)
  - Add a man page (from Luca Berra) for mdassemble


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 1.5.0-4
changelog:
  - Update mdmonitor script to start daemon more cleanly
  - Repackage mdmpd tarball to include gcc-3.4 changes and to make
    mdmpd properly daemonize at startup instead of forking and leaving
    the child attached to the terminal.


author: Doug Ledford <dledford@redhat.com> 1.5.0-2
changelog:
  - Add a default MAILADDR line to the mdadm.conf file installed by default
    (Bugzilla #92447)
  - Make it build with gcc-3.4


author: <gleblanc@localhost.localdomain>
changelog:
  - beautification
  - made mdadm.conf non-replaceable config
  - renamed Copyright to License in the header
  - added missing license file
  - used macros for file paths


author: Dave Jones <davej@redhat.com> - 3.9.1-0.rc1.201
changelog:
  - Linux 3.9.1-rc1
    merged: wireless-regulatory-fix-channel-disabling-race-condition.patch
    merged: iwlwifi-fix-freeing-uninitialized-pointer.patch


author: Dave Jones <davej@redhat.com> - 3.9.0-200
changelog:
  - Rebase to Linux 3.9
    merged: silence-empty-ipi-mask-warning.patch
    merged: quiet-apm.patch
    merged: Input-increase-struct-ps2dev-cmdbuf-to-8-bytes.patch
    merged: Input-add-support-for-Cypress-PS2-Trackpads.patch
    merged: Input-cypress_ps2-fix-trackpadi-found-in-Dell-XPS12.patch
    merged: alps-v2.patch
    merged: userns-avoid-recursion-in-put_user_ns.patch
    merged: amd64_edac_fix_rank_count.patch
    merged: team-net-next-update-20130307.patch
    merged: uvcvideo-suspend-fix.patch
    merged: cfg80211-mac80211-disconnect-on-suspend.patch
    merged: mac80211_fixes_for_ieee80211_do_stop_while_suspend_v3.8.patch
    merged: mac80211-Dont-restart-sta-timer-if-not-running.patch
    merged: 0001-bluetooth-Add-support-for-atheros-04ca-3004-device-t.patch
    TODO: secure-boot
    TODO: ARM configs.


author: Josh Boyer <jwboyer@redhat.com> - 3.8.8-203
changelog:
  - CVE-2013-3228 irda: missing msg_namelen update in irda_recvmsg_dgram (rhbz 956069 956071)
  - CVE-2013-3230 l2tp: info leak in l2tp_ip6_recvmsg (rhbz 956088 956089)
  - CVE-2013-3231 llc: Fix missing msg_namelen update in llc_ui_recvmsg (rhbz 956094 956104)
  - CVE-2013-3232 netrom: information leak via msg_name in nr_recvmsg (rhbz 956110 956113)
  - CVE-2013-3233 NFC: llcp: info leaks via msg_name in llcp_sock_recvmsg (rhbz 956125 956129)
  - CVE-2013-3234 rose: info leak via msg_name in rose_recvmsg (rhbz 956135 956139)
  - CVE-2013-3076 crypto: algif suppress sending src addr info in recvmsg (rhbz 956162 956168)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-3223 ax25: information leak via msg_name in ax25_recvmsg (rhbz 955662 955666)
  - CVE-2013-3225 Bluetooth: RFCOMM missing msg_namelen update in rfcomm_sock_recvmsg (rhbz 955649 955658)
  - CVE-2013-1979 net: incorrect SCM_CREDENTIALS passing (rhbz 955629 955647)
  - CVE-2013-3224 Bluetooth: possible info leak in bt_sock_recvmsg (rhbz 955599 955607)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix uninitialized variable free in iwlwifi (rhbz 951241)
  - Fix race in regulatory code (rhbz 919176)


author: Josh Boyer <jwboyer@redhat.com> - 3.8.6-203
changelog:
  - Temporarily work around pci device assignment issues (rhbz 908888)
  - CVE-2013-1929 tg3: len overflow in VPD firmware parsing (rhbz 949932 949946)
  - Backport intel brightness quirk for emachines (rhbz 871932)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Enable CONFIG_FB_MATROX_G on powerpc
  - Add support for Atheros 04ca:3004 bluetooth devices (again) (rhbz 844750)
  - Enable CONFIG_SCSI_DMX3191D (rhbz 919874)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add quirk for Realtek card reader to avoid 10 sec boot delay (rhbz 806587)
  - Add quirk for MSI keyboard backlight to avoid 10 sec boot delay (rhbz 907221)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - enable CONFIG_DRM_VMWGFX_FBCON (rhbz 927022)
  - disable whci-hcd since it doesnt seem to have users (rhbz 919289)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-1796 kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME
    (rhbz 917012 923966)
  - CVE-2013-1797 kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME
    (rhbz 917013 923967)
  - CVE-2013-1798 kvm: out-of-bounds access in ioapic indirect register reads
    (rhbz 917017 923968)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix ieee80211_do_stop (rhbz 892599)
  - Add patches to fix cfg80211 issues with suspend (rhbz 856863)
  - Add patch to fix Cypress trackpad on XPS 12 machines (rhbz 912166)
  - CVE-2013-0913 drm/i915: head writing overflow (rhbz 920471 920529)
  - CVE-2013-0914 sa_restorer information leak (rhbz 920499 920510)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix usb_submit_urb error in uvcvideo (rhbz 879462)
  - Add patch to allow "8250." prefix to keep working (rhbz 911771)
  - Add patch to fix w1_search oops (rhbz 857954)
  - Add patch to fix broken tty handling (rhbz 904182)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - Revert "write backlight harder" until better solution is found (rhbz 917353)
  - Update team driver from net-next from Jiri Pirko


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Have kernel provide kernel-highbank for upgrade to unified
  - Update mvebu configs
  - Drop unused ARM patches


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix DMI regression (rhbz 916444)
  - Fix logitech-dj HID bug from Benjamin Tissoires (rhbz 840391)
  - CVE-2013-1792 keys: race condition in install_user_keyrings (rhbz 916646 919021)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - Remove Ricoh multifunction DMAR patch as it's no longer needed (rhbz 880051)
  - Fix destroy_conntrack GPF (rhbz 859346)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix regression in secure-boot acpi_rsdp patch (rhbz 906225)
  - crypto: info leaks in report API (rhbz 918512 918521)


author: Dave Jones <davej@redhat.com>
changelog:
  - Linux 3.8.1
    Dropped (merged in 3.8.1)
    - drm-i915-lvds-reclock-fix.patch
    - usb-cypress-supertop.patch
    - perf-hists-Fix-period-symbol_conf.field_sep-display.patch
    - ipv6-dst-from-ptr-race.patch
    - sock_diag-Fix-out-of-bounds-access-to-sock_diag_handlers.patch
    - tmpfs-fix-use-after-free-of-mempolicy-object.patch


author: Dave Jones <davej@redhat.com>
changelog:
  - 3.8.0
    Dropped (merged in 3.8)
    - arm-l2x0-only-set-set_debug-on-pl310-r3p0-and-earlier.patch
    - power-x86-destdir.patch
    - modsign-post-KS-jwb.patch
    - efivarfs-3.7.patch
    - handle-efi-roms.patch
    - drm-i915-Fix-up-mismerge-of-3490ea5d-in-3.7.y.patch
    - USB-report-submission-of-active-URBs.patch
    - exec-use-eloop-for-max-recursion-depth.patch
    - 8139cp-revert-set-ring-address-before-enabling-receiver.patch
    - 8139cp-set-ring-address-after-enabling-C-mode.patch
    - 8139cp-re-enable-interrupts-after-tx-timeout.patch
    - brcmsmac-updates-rhbz892428.patch
    - silence-brcmsmac-warning.patch
    - net-fix-infinite-loop-in-__skb_recv_datagram.patch
    - Bluetooth-Add-support-for-Foxconn-Hon-Hai-0489-e056.patch
    - 0001-bluetooth-Add-support-for-atheros-04ca-3004-device-t.patch
    Needs checking:
    - arm-tegra-nvec-kconfig.patch
    - arm-tegra-sdhci-module-fix.patch


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-1767 tmpfs: fix use-after-free of mempolicy obj (rhbz 915592,915716)
  - Fix vmalloc_fault oops during lazy MMU (rhbz 914737)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix perf report field separator issue (rhbz 906055)
  - Fix oops from acpi_rsdp setup in secure-boot patchset (rhbz 906225)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add support for Atheros 04ca:3004 bluetooth devices (rhbz 844750)
  - Backport support for newer ALPS touchpads (rhbz 812111)


author: Adam Jackson <ajax@redhat.com>
changelog:
  - i915: Hush asserts during TV detection, just useless noise
  - i915: Fix LVDS downclock to not cripple performance (#901951)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix corruption on newer M6116 SATA bridges (rhbz 909591)
  - CVE-2013-0228 xen: xen_iret() invalid %ds local DoS (rhbz 910848 906309)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch from Kees Cook to restrict MSR writting in secure boot mode
  - Add patch to honor MokSBState (rhbz 907406)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Linux v3.7.6
  - Update secure-boot patchset
  - Fix rtlwifi scheduling while atomic from Larry Finger (rhbz 903881)


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Merge 3.7 ARM kernel including unified kernel
  - Drop separate IMX and highbank kernels
  - Disable ARM PL310 errata that crash highbank


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix regression in 8139cp driver, debugged by William J. Eaton (rhbz 851278)
  - Fix ACPI video after _DOD errors (rhbz 869383)
  - Fix ata command timeout oops in mvsas (rhbz 869629)
  - Enable CONFIG_UIO_PDRV on ppc64 (rhbz 878180)
  - CVE-2012-4530: stack disclosure binfmt_script load_script (rhbz 868285 880147)


author: Josh Boyer <jwboyer@redhat.com> - 3.6.7-5
changelog:
  - CVE-2012-4461: kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (rhbz 878518 862900)
  - Add VC_MUTE ioctl (rhbz 859485)
  - Add support for BCM20702A0 (rhbz 874791)


author: Josh Boyer <jwboyer@redhat.com> - 3.6.6-9
changelog:
  - Fix oops causing typo in keyspan driver (rhbz 870562)
  - Don't WARN_ON empty queues in iwlwifi (rhbz 873001)


author: Josh Boyer <jwboyer@redhat.com> - 3.6.6-3
changelog:
  - Backport efivarfs from efi/next for moktools
  - Fix build break without CONFIG_EFI set (reported by Peter W. Bowey)
  - Linux v3.6.6


author: Josh Boyer <jwboyer@redhat.com> - 3.6.5-2
changelog:
  - Update modsign to what is currently in 3.7-rc2
  - Update secure boot support for UEFI cert importing.


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix CIFS oops from Jeff Layton (rhbz 867344)
  - CVE-2012-0957: uts: stack memory leak in UNAME26 (rhbz 862877 864824)
  - Fix rt2x00 usb reset resume (rhbz 856863)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Patch to have mac80211 connect with HT20 if HT40 is not allowed (rhbz 866013)
  - Enable VFIO (rhbz 867152)
  - Apply patch from Stanislaw Gruszka to fix mac80211 issue (rhbz 862168)
  - Apply patch to fix iwlwifi crash (rhbz 770484)


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update ARM configs for 3.6 final
  - Add highbank SATA driver for stability
  - Build in OMAP MMC and DMA drivers to fix borkage for now


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 2.1.5-1
changelog:
  - update to upstream release 2.1.5
  - add copy of LICENSE from upstream version control repository
  - remove symlink to /usr/bin/r.js


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.4-1
changelog:
  -
  - dnspython 1.9.4 has been released and is available at
  - http://www.dnspython.org/kits/1.9.4/
  -
  - There is no new functionality in this release; just a few bug fixes
  - in RRSIG and SIG code.
  -
  - I will be eliminating legacy code for earlier versions of DNSSEC in a
  - future release of dnspython.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.3-1
changelog:
  -
  - New since 1.9.2:
  -
  -     A boolean parameter, 'raise_on_no_answer', has been added to
  - the query() methods.  In no-error, no-data situations, this
  - parameter determines whether NoAnswer should be raised or not.
  - If True, NoAnswer is raised.  If False, then an Answer()
  - object with a None rrset will be returned.
  -
  - Resolver Answer() objects now have a canonical_name field.
  -
  - Rdata now have a __hash__ method.
  -
  - Bugs fixed since 1.9.2:
  -
  -        Dnspython was erroneously doing case-insensitive comparisons
  - of the names in NSEC and RRSIG RRs.
  -
  - We now use "is" and not "==" when testing what section an RR
  - is in.
  -
  - The resolver now disallows metaqueries.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.2-1
changelog:
  - It's brown paper bag time :) The fix for the import problems was
  - actually bad, but didn't show up in testing because the test suite's
  - conditional importing code hid the problem.
  -
  - Any, 1.9.2 is out.
  -
  - Sorry for the churn!


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.1-1
changelog:
  - New since 1.9.0:
  -
  -        Nothing.
  -
  - Bugs fixed since 1.9.0
  -
  -        The dns.dnssec module didn't work with DSA due to namespace
  -        contamination from a "from"-style import.
  -
  - New since 1.8.0:
  -
  -        dnspython now uses poll() instead of select() when available.
  -
  -        Basic DNSSEC validation can be done using dns.dnsec.validate()
  -        and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
  -        later installed.  Complete secure resolution is not yet
  -        available.
  -
  -        Added key_id() to the DNSSEC module, which computes the DNSSEC
  -        key id of a DNSKEY rdata.
  -
  -        Added make_ds() to the DNSSEC module, which returns the DS RR
  -        for a given DNSKEY rdata.
  -
  -        dnspython now raises an exception if HMAC-SHA284 or
  -        HMAC-SHA512 are used with a Python older than 2.5.2.  (Older
  -        Pythons do not compute the correct value.)
  -
  -        Symbolic constants are now available for TSIG algorithm names.
  -
  - Bugs fixed since 1.8.0
  -
  -        dns.resolver.zone_for_name() didn't handle a query response
  -        with a CNAME or DNAME correctly in some cases.
  -
  -        When specifying rdata types and classes as text, Unicode
  -        strings may now be used.
  -
  -        Hashlib compatibility issues have been fixed.
  -
  -        dns.message now imports dns.edns.
  -
  -        The TSIG algorithm value was passed incorrectly to use_tsig()
  -        in some cases.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1
changelog:
  - New since 1.7.1:
  -
  -  Support for hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and
  -  hmac-sha512 has been contributed by Kevin Chen.
  -
  -  The tokenizer's tokens are now Token objects instead of (type,
  -  value) tuples.
  -
  - Bugs fixed since 1.7.1:
  -
  -  Escapes in masterfiles now work correctly.  Previously they were
  -  only working correctly when the text involved was part of a domain
  -  name.
  -
  -  When constructing a DDNS update, if the present() method was used
  -  with a single rdata, a zero TTL was not added.
  -
  -  The entropy pool needed locking to be thread safe.
  -
  -  The entropy pool's reading of /dev/random could cause dnspython to
  -  block.
  -
  -  The entropy pool did buffered reads, potentially consuming more
  -  randomness than we needed.
  -
  -  The entropy pool did not seed with high quality randomness on
  -  Windows.
  -
  -  SRV records were compared incorrectly.
  -
  -  In the e164 query function, the resolver parameter was not used.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-1
changelog:
  - New since 1.7.0:
  -
  -        Nothing
  -
  - Bugs fixed since 1.7.0:
  -
  -        The 1.7.0 kitting process inadventently omitted the code for the
  -        DLV RR.
  -
  -        Negative DDNS prerequisites are now handled correctly.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.0-1
changelog:
  - New since 1.6.0:
  -
  -        Rdatas now have a to_digestable() method, which returns the
  -        DNSSEC canonical form of the rdata, suitable for use in
  -        signature computations.
  -
  -        The NSEC3, NSEC3PARAM, DLV, and HIP RR types are now supported.
  -
  -        An entropy module has been added and is used to randomize query ids.
  -
  -        EDNS0 options are now supported.
  -
  -        UDP IXFR is now supported.
  -
  -        The wire format parser now has a 'one_rr_per_rrset' mode, which
  -        suppresses the usual coalescing of all RRs of a given type into a
  -        single RRset.
  -
  -        Various helpful DNSSEC-related constants are now defined.
  -
  -        The resolver's query() method now has an optional 'source' parameter,
  -        allowing the source IP address to be specified.
  -
  - Bugs fixed since 1.6.0:
  -
  -        On Windows, the resolver set the domain incorrectly.
  -
  -        DS RR parsing only allowed one Base64 chunk.
  -
  -        TSIG validation didn't always use absolute names.
  -
  -        NSEC.to_text() only printed the last window.
  -
  -        We did not canonicalize IPv6 addresses before comparing them; we
  -        would thus treat equivalent but different textual forms, e.g.
  -        "1:00::1" and "1::1" as being non-equivalent.
  -
  -        If the peer set a TSIG error, we didn't raise an exception.
  -
  -        Some EDNS bugs in the message code have been fixed (see the ChangeLog
  -        for details).


author: Orion Poplawski <orion@cora.nwra.com> - 1.16.5-1
changelog:
  - Security update to 1.16.5, fixes:
      CVE-2011-1578 CVE-2011-1579 CVE-2011-1580 CVE-2011-1765 (Bug 696362)
      CVE-2011-0047 (Bug 674457)


author: Stephen Smoogen <ssmoogen@ponyo.int.smoogespace.com> - 1.16.1-2
changelog:
  - Security update to 1.16.1 http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html


author: Stephen Smoogen <smooge@xanadu.int.smoogespace.com> - 1.16.0-1
changelog:
  - Made a proper doc section versus a mv
  - Made it so we don't over-write an played with mediawiki.conf file


author: Stephen Smoogen <smooge@xanadu.int.smoogespace.com> - 1.16.0-1
changelog:
  - Take mainstream mediawiki-1.15 spec file and update
  - Changed Readme.RPM to https://bugzilla.redhat.com/show_bug.cgi?id=475841
    (thankyou Milan Kerslager)
  - Remove commoncode patch due to https://fedorahosted.org/fesco/ticket/225


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-1
changelog:
  - Updated to upstream version 2.1.2
  - Updated URL and description
  - PHP minimum version 5.3.3 instead of 5.3.2
  - Added php-date and php-reflection requires
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.0.14-2
changelog:
  - Removed BuildRoot
  - Changed php require to php-common
  - Added the following requires based on phpci results:
    php-ctype, php-json, php-pcre, php-spl
  - Removed %defattr from %files section


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-6
changelog:
  - fix #271741 - smartd-conf.py should allow customization of parameters
  - fix #253753 - service starting by default, perhaps shouldn't
  - update initscript (related #247058 - initscript review)


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-5
changelog:
  - add support for 24 disks on 3ware RAID controllers (related #252055)
  - fix #245442 - add %{arm} to smartmontools's set of build archs
  - update license tag


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-4
changelog:
  - fix #241389 - smartd-conf.py pulls in a big dependency chain, so
    build a separate config package


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-3
changelog:
  - fix #241385 - smartmontools missing dependency on mailx
  - fix #241388 - unneeded smartd-conf.py[co] installed in /usr/sbin


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-5
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-3
changelog:
  - add libata disks with -d ata if the libata version
    is new enough otherwise do not add them (#145859, #174095)


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-2
changelog:
  - Spec file cleanup by Robert Scheck <redhat@linuxnetz.de> (#170959)
  - manual release numbering
  - remove bogus patch of non-installed file
  - only non-removable drives should be added to smartd.conf
  - smartd.conf should be owned (#171498)


author: Chris Lalancette <clalance@redhat.com> - 0.4.0-0.3.rc1
changelog:
  - Add patches to fix up deltacloud-core initscript
  - Clean up the specfile (sort subpackages in alphabetical order)
  - Disable deltacloud-core-condor subpackage for now (since it doesn't work)
  - Make sure the log directory is owned by nobody:nobody


author: Michal Fojtik <mfojtik@redhat.com> - 0.3.0-2
changelog:
  - Fixed documentation generation
  - Replaced moving with copying
  - Removed support folder from doc subpackage


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.76-1
changelog:
  - upstream release 2.76
  - https://trac.transmissionbt.com/wiki/Changes#version-2.76
  - use rpm ld_flags for qt build. resolves rhbz#868502
  - use upstream transmission-qt.desktop file. resolves rhbz#799673
  - remove -T parameter from the systemd file. resolves rhz#823220


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.50-3
changelog:
  - apply upstream bug fix patch from https://trac.transmissionbt.com/changeset/13300?format=diff&new=13300
  - fixes https://trac.transmissionbt.com/ticket/4894


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.32-1
changelog:
  - Upstream 2.32 release
  - https://trac.transmissionbt.com/wiki/Changes#version-2.32
  - Drop defattr throughout the spec since recent RPM makes it redundant


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.31-1
changelog:
  - Upstream 2.31 release
  - https://trac.transmissionbt.com/wiki/Changes#version-2.31
  - Fix source url


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.30-0.b1
changelog:
  - Upstream 2.30 Beta 1 release
  - Enable configure options explicitly
  - Drop source and patch for icons since it is now upstream
  - https://trac.transmissionbt.com/wiki/Changes#version-2.30b1
    * Major changes include the following:
    * µTP, UDP tracker, Multiscrape support
    * Download scarcest pieces first 
    * The "lazy bitfield" feature has been superseded by the "Fast Extension" BEP6 
    * GTK: Register as a magnet link handler in the .desktop file 
    * Web: Peer and Network preferences


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.21-1
changelog:
  - Update to latest upstream release
  - Drop no longer needed libnotify patch
  - https://trac.transmissionbt.com/wiki/Changes


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.13-1
changelog:
  - updated to latest upstream release: https://trac.transmissionbt.com/wiki/Changes
  - fixes #654793
  - update libnotify patch


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.00-1
changelog:
  - https://trac.transmissionbt.com/wiki/Changes?version=57
  - Drop the clean section as it is redundant now


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.92-1
changelog:
  - Some bug fixes
  - http://trac.transmissionbt.com/query?groupdesc=1&group=component&milestone=1.92&order=severity


author: Rex Dieter <rdieter@fedoraproject.org> - 1.91-2
changelog:
  - -common: move icon scriptlets here (where the icons are), update/optimize 
  - -qt : add mime scriptlet


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.90-1
changelog:
  - http://trac.transmissionbt.com/browser/trunk/NEWS#L1
  - Fix initscript to use the config file properly


author: Ankur Sinha <ankursinha@fedoraproject.org> - 1.83-1
changelog:
  - New Release
  - Fix 1.80 announce error that caused uploads and downloads to periodically freeze
  - Fix 1.80 announce timeout error that caused "no response from tracker" message
  - Fix 1.80 "file not found" error message that stopped some torrents
  - Fix 1.82 crash when adding new torrents via their ftp URL
  - Fix 1.80 crash when receiving invalid request messages from peers
  - Fix 1.82 error when updating the blocklist
  - http://trac.transmissionbt.com/wiki/Changes#version-1.83


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-1
changelog:
  - Many major new features including magnet link support, trackerless torrents
  - http://trac.transmissionbt.com/wiki/Changes#version-1.80


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.6.b5
changelog:
  - Add a initscript for transmission daemon. Fixes rhbz#556228
  - Description changes, add group for sub-packages and fix make


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.4.b4
changelog:
  - Build the qt interface as a sub package
  - Build daemon as a separate sub package
  - Translations are for only the gtk sub package
  - Fix obsoletes and add conflicts


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.80-0.1.b3
changelog:
  - 1.80 Beta 3
  - Enable sounds via libcanberra
  - http://trac.transmissionbt.com/wiki/Changes#version-1.80b3


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Update compiler options patch to match new upstream release
  - Drop patch for not using bundled libevent. Upstream now has been fixed to use the system copy whenever possible
  - Don't use vendor tag for desktop file. It is not recommended anymore
  - Follow https://fedoraproject.org/wiki/Packaging/Guidelines#All_patches_should_have_an_upstream_bug_link_or_comment


author: Denis Leroy <denis@poolshark.org> - 0.82-1
changelog:
  - Update to upstream 0.82, many bug fixes
  - Added patch to support default user download directory (Bastien Nocera)


author: Akira TAGOH <tagoh@redhat.com> - 2.9.91-1
changelog:
  - New upstream release.
    - docs are generated with the fixed docbook (#826145)
    - handle whitespace in family name correctly (#468565, #591634)
    - Updated ne.orth. (#586763)


author: Akira TAGOH <tagoh@redhat.com> - 2.9.0-1
changelog:
  - New upstream release (#803559)
    - Update ks.orth (#790471)
    - Add brx.orth (#790460)
    - Update ur.orth (#757985)
    - No Apple Roman cmap support anymore. should works. (#681808)
    - Update ne.orth (#586763)
    - Add a workaround for ZapfDingbats. (#562952, #497648, #468565)
  - clean up the spec file.
  - Add BR: fontpackages-devel.
  - Add R: fontpackages-filesystem.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.92-1
changelog:
  - Update to 2.4.92.
  - Mark /etc/fonts/conf.d/* as config(noreplace).
  - Remove most of our conf file, all upstreamed except for
    75-blacklist-fedora.conf that I'm happily dropping.  Who has
    Hershey fonts these days...
  - ln upstream'ed 25-unhint-nonlatin.conf from conf.avail in conf.d
  - Add 25-no-bitmap-fedora.conf which is the tiny remaining bit
    of conf that didn't end up upstream.  Can get rid of it in the
    future, but not just yet.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.91-1
changelog:
  - Update to 2.4.91.
  - Add /usr/local/share/fonts to default config. (#147004)
  - Don't rebuild docs, to fix multilib conflicts. (#313011)
  - Remove docbook and elinks BuildRequires and stuff as we don't
    rebuild docs.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Rename/order our configuration stuff to match the new scheme.
    Breaks expected :-(


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.3.97-1
changelog:
  - update to 2.3.97
  - Drop upstreamed patches
  - Regenerate defaultconfig patch
  - Don't touch stamp as it was not ever needed


author: Ray Strode <rstrode@redhat.com> - 2.3.93-4
changelog:
  - apply patch from Tim Mayberry to correct aliasing and disable
    hinting for the two Chinese font names AR PL ShanHeiSun Uni 
    and AR PL Zenkai Uni


author: Carl Worth <cworth@redhat.com> - 2.3.92.cvs20051129-2
changelog:
  - Add two new Chinese font names to the default fonts.conf file:
      AR PL ShanHeiSun Uni
      AR PL Zenkai Uni


author: Bill Nottingham <notting@redhat.com> - 2.3.93-3
changelog:
  - modular X moved fonts from /usr/X11R6/lib/X11/fonts to
    /usr/share/X11/fonts, adjust %configure accordingly and 
    conflict with older font packages


author: Matthias Clasen <mclasen@redhat.com> - 2.3.91.cvs20051031-1
changelog:
  - Update to a newer cvs snapshot
  - Add a patch which should help to understand broken cache problems


author: Matthias Clasen <mclasen@redhat.com> - 2.3.91.cvs20051017-2
changelog:
  - Add new Chinese fonts
  - Fix the 40-blacklist-fonts.conf file to use the documented
    fonts.conf syntax, and exclude the Hershey fonts by family
    name.


author: Kristian Høgsberg <krh@redhat.com> - 2.3.2-1
changelog:
  - Update to fontconfig-2.3.2.  Drop

  	fontconfig-2.1-slighthint.patch,
  	fontconfig-2.2.3-timestamp.patch,
  	fontconfig-2.2.3-names.patch,
  	fontconfig-2.2.3-ta-pa-orth.patch, and
  	fontconfig-2.2.3-timestamp.patch,

    as they are now merged upstream.

  - Fold fontconfig-2.2.3-add-sazanami.patch into
    fontconfig-2.3.2-defaultconfig.patch and split rules to disable CJK
    hinting out into /etc/fonts/conf.d/50-no-hint-fonts.conf.

  - Drop fontconfig-0.0.1.020826.1330-blacklist.patch and use the new
    rejectfont directive to reject those fonts in 40-blacklist-fonts.conf.

  - Add fontconfig-2.3.2-only-parse-conf-files.patch to avoid parsing
    .rpmsave files.

  - Renable s390 documentation now that #97079 has been fixed and add
    BuildRequires: for docbook-utils and docbook-utils-pdf.

  - Drop code to iconv and custom install man pages, upstream does the
    right thing now.

  - Add workaround from hell to make elinks cooperate so we can build
    txt documentation.


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-6
changelog:
  - Sleep a second before the exit of fc-cache to fix problems with fast 
    serial installs of fonts (#140335)
  - Turn off hinting for Lohit Hindi/Bengali/Punjabi (#139816)


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-3
changelog:
  - Backport code from head branch of fontconfig CVS to parse names 
    for postscript fonts (fixes #127500, J. J. Ramsey)
  - Own /usr/share/fonts (#110956, David K. Levine)
  - Add KacstQura to serif/sans-serif/monospace aliases (#101182)


author: Owen Taylor <otaylor@redhat.com> 2.2.1-10
changelog:
  - Require recent freetype (#109592, Peter Oliver)
  - Remove fonts.conf timestamp to fix multiarch conflict (#118182)
  - Disable hinting for Mukti Narrow (#120915, Sayamindu Dasgupta)


author: Owen Taylor <otaylor@redhat.com> 2.2.1-8.0
changelog:
  - Add Albany/Cumberland/Thorndale as fallbacks for Microsoft core fonts and 
    as non-preferred alternatives for Sans/Serif/Monospace
  - Fix FreeType includes for recent FreeType


author: Owen Taylor <otaylor@redhat.com> 2.2.1-6.0
changelog:
  - Should have been passing --with-add-fonts, not --with-add-dirs to 
    configure ... caused wrong version of Luxi to be used. (#100862)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Back out patch that wrote fonts.conf entries that crash RH-8.0 
    gnome-terminal, go with patch from fontconfig CVS instead.
    (#84863)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Move fontconfig man page to main package, since it contains non-devel 
    information (#76189)
  - Look in the OTF subdirectory of /usr/X11R6/lib/fonts as well
    so we find Syriac fonts (#82627)


author: Matt Wilson <msw@redhat.com> 2.1-5
changelog:
  - modified fontconfig-0.0.1.020626.1517-fontdir.patch to hard code
    /usr/X11R6/lib/X11/fonts instead of using $(X_FONT_DIR).  This is
    because on lib64 machines, fonts are not in /usr/X11R6/lib64/....


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Try to fix bug where empty cache entries would be found in 
    ~/.fonts.cache-1 during scanning (#81335)


author: Mike A. Harris <mharris@redhat.com> 2.1-1
changelog:
  - Updated to version 2.1
  - Updated slighthint patch to fontconfig-2.1-slighthint.patch
  - Updated freetype version required to 2.1.2-7


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to fcpackage rc3
  - Fix bug in comparisons for xx_XX language tags
  - Compensate for a minor config file change in rc3


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add an explicit PreReq for freetype
  - Move fonts we don't ship to the end of the fonts.conf aliases so
    installing them doesn't change the look.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Memory leak fix when parsing config files
  - Set rh_prefer_bitmaps for .ja fonts to key off of in Xft
  - Fix some groff warnings for fontconfig.man (#72138)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Try once more to get the right default Sans-serif font :-(
  - Switch the Sans/Monospace aliases for Korean to Gulim, not Dotum


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to rc2
  - Turn off hinting for all CJK fonts
  - Fix typo in %post
  - Remove the custom language tag stuff in favor of Keith's standard 
    solution.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add FC_HINT_STYLE to FcBaseObjectTypes
  - Switch Chinese fonts to always using Sung-ti / Ming-ti, and never Kai-ti
  - Add ZYSong18030 to aliases (#68428)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - New upstream version, with fix for problems with
    ghostscript-fonts (Fonts don't work for Qt+CJK,
    etc.)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a hack where we set the "language" fontconfig property based on the locale, then 
    we conditionalize base on that in the fonts.conf file.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - make fonts.conf %config, not %config(noreplace)
  - Another try at the CJK aliases
  - Add some CJK fonts to the config
  - Prefer Luxi Mono to Nimbus Mono


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.10.2.2614-1
changelog:
  - New version
    Resolves: rhbz#861633, rhbz#861970, rhbz#856016
  - Fixed desktop file
    Resolves: rhbz#544256
  - Merged nonXOplugins to main package
  - Replaced defines by globals
  - Added own version of inisqueak
  - Fixed squeak startup script (by squeak-init-fix patch)
  - Removed squeak.sh and mysqueak
  - Removed sources symlinks
  - Dropped alsa-scratchy-sound patch (upstreamed)
  - Dropped imgdir, rpath patches (not needed)
  - Defuzzification of patches
  - Added xmessage requirement (xorg-x11-apps)
  - Fixed bogus dates in changelog


author: Gavin Romig-Koch <gavin@redhat.com> - 3.10.5-1
changelog:
  - upgrade to new upstream
    - work around dprintf problem
    - UUID lib now in libuuid-devel (moved from e2fsprogs-devel)


author: Gavin Romig-Koch <gavin@redhat.com> - 3.10.4-3
changelog:
  - SqueakFFIPrims only works on ix86 and ppc
     - add a missing dir macro
     - correct the requires on -nonXOplugins
     - correct handling of no nonXOplugins


author: Gavin Romig-Koch <gavin@redhat.com> - 3.10.4-3
changelog:
  - add missing build dependancy for UUIDPlugin
     - add missing defattr macro
     - corrections needed by rpmlint


author: Gavin Romig-Koch <gavin@redhat.com> - 3.10.3-2
changelog:
  - Fix rpmlint problems
      - mode of squeak-vm-tarball-from-svn.sh
      - squeak.desktop: Icon, MimeType, Encoding
      - move the _libdir .source links into this, non-noarch, rpm
      - remove x mode of a number of .c and .h source files from upstream
      - use explicit --mode when installing files
      - replace tabs with spaces
      - shbang for mysqueak


author: Gavin Romig-Koch <gavin@redhat.com> - 3.10.3-1
changelog:
  - incorporated slightly modified Desktop related changes from 
      Gerard Milmeister <gemi@bluewin.ch> 
    - update .spec to Fedora Guidelines
    - add mysqueak
    - olpc macro to distinguish olpc builds 
    - distinguish between squeak image icons, and squeak source icons


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.10-3olpc5; SVN r. 1899
    - re-enable new (IPv6) socket primitives (bf)
    - RomePlugin pango fixes (yo)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.10-3olpc3; SVN r.1889
    - prefer 24 and 16 bpp over 32 to fix alpha issue in compositing desktops (bf)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.10-3olpc1; SVN r. 1878
    - updated DBus plugin (incompatible w/ previous versions)
    - add plugins: GStreamer, ImmX11, Aio
    - fixed international keyboard input
    - merged with trunk


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-12olpc5; SVN r. 1811
    - remove Mpeg3Plugin
    - fix KedamaPlugin2 (exports where not listed) 
    - fix show-source key
    - fix SEGFAULT in OggPlugin
    - add RomePlugin w/ Pango support
    - fix drag-n-drop


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-12olpc3: SVN r. 1787
    - fixed errors about state checking in drag and drop (tak)
    - make cursor keys work with utf32 char code (yo)
    - add SetSwitch, GetSwitch, and SetDevice mixer functions (yo)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-12olpc1: SVN r. 1776
    - merged with trunk (bf)
    - signed oop fixes (dave)
    - unicode key events (ian)
    - fix dbus plugin (bf)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-11olpc5: SVN r. 1761
    - set _NET_WM_PID to our process id (danw)
    - generate WindowEventClose on delete window message (ian)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-11olpc4: SVN r. 1747
    - added LocalePlugin (ian)
    - FileCopyPlugin is external now
    - follow symlinks in npsqueakregister (bf)
    - explicitely link against libXt (bf)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-11olpc3: SVN r. 1740
    - fix spec file clean, add _smp_mflags as requested by fedora (bf)
    - XdndFinished is sent properly in drag-in with multiple types (tak)
    - Show cursor forced when drag-out (tak)
    - Fixed a bug about type index for clipboard (tak)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-11olpc1: SVN r. 1728
    - IPv6 support (ian)
    - updated DBus plugin (impara, bf)
    - better drag-and-drop support, extended clipboard support (tak)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-10olpc7: SVN r.1723
    - move build env to Fedora 7
    - require libdbus-1.so.3
    - configure without OpenGL (rather than hiding GL libs)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-10olpc6: SVN r.1687
    - add ClipboardExtendedPlugin (tak)
    - add DBusPlugin (impara, bf)
    - support keypad keys (bf)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-10olpc1: SVN r.1591
    - work around ALSA SIGIO issue (bf)
    - added dgd's camera support (V4L plugin)


author: Bert Freudenberg <bert@freudenbergs.de>
changelog:
  - 3.9-9olpc1: SVN r.1563
    - fix ALSA prim failed
    - add warpblt optimization
    - add Kedama2 plugin
    - exclude unneeded plugins


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Dan Vrátil <dvratil@redhat.com> - 0.3.0-2
changelog:
  - Fixed license
  - Marked ChangeLog as documentation
  - Removed CMake version and "rm -rf $BUILD_ROOT"


author: Dan Mashal <dan.mashal@fedoraproject.org> - 1.5.1-1
changelog:
  - Update to latest upstream release
  - Update configure flags
  - Redo BRs to old style
  - Add V=1 to make flags


author: Leigh Scott <leigh123linux@googlemail.com> - 1.5.0-1
changelog:
  - update to 1.5.0 release
  - remove duplicate .so from files
  - change build requires style
  - move .gir to devel package


author: Peter Lemenkov <lemenkov@gmail.com> - 0.1.2-2
changelog:
  - Fixed mixed macro usage in spec (mostly cosmetic change)
  - Dropped remaining stuff required by EL5


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1
changelog:
  - Update to latest upstream release
  - Additional fixes for gcc-4.6 -Werror compile failures for ARM architecture.


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Jens Petersen <petersen@redhat.com> - 2.8.3-1
changelog:
  - refresh description
  - patch flags and turn on terminfo
  - disable threaded on tier 2 archs
  - rip out old conditional running of tests


author: Jens Petersen <petersen@redhat.com> - 2.7.98.3-1
changelog:
  - update to 2.7.98.3 beta release:
    see http://wiki.darcs.net/changes%20since%202.5
  - new dependency on vector library


author: Jens Petersen <petersen@redhat.com> - 2.5.2-8
changelog:
  - update to cabal2spec-0.25.2
  - drop Cabal-1.8 workaround for manpage permission issue
  - patch .cabal for regex-compat-0.95.1 in haskell-platform-2011.4


author: Jens Petersen <petersen@redhat.com> - 2.5.2-4
changelog:
  - BR ghc-Cabal-devel instead of ghc-prof and use ghc_arches (cabal2spec-0.23.2)
  - BR haskell98 for Setup


author: Jens Petersen <petersen@redhat.com> - 2.5-3
changelog:
  - add darcs-2.5-ShellHarness-ghc70.patch for abstract directory Permissions
  - add darcs-2.5-ghc7-deps.patch to bump dep versions
  - add darcs-2.5-ghc7.patch for ghc-7.0.1 (thanks Ganesh Sittampalam)
  - disabled tests for now with bcond
  - drop -o obsoletes


author: Jens Petersen <petersen@redhat.com> - 2.4.4-3
changelog:
  - rebuild for newer regex-compat from haskell-platform-2010.2.0.0
  - update to cabal2spec-0.22.1:
    - bcond for hscolour
    - add doc obsoletes version


author: Jens Petersen <petersen@redhat.com> - 2.4-1
changelog:
  - new major upstream version 2.4
  - darcs is now officially a cabal binlib package
  - package with ghc-rpm-macros
  - no longer BR autoconf, sendmail, ncurses-devel, zlib-devel
  - add haskell deps: hashed-storage, haskeline, html, parsec, regex-compat, zlib
  - server (subpackage) is gone
  - add darcs-2.4-issue458.sh-attr.patch to workaround selinux output
  - run check tests again
  - replace AUTHORS with NEWS
  - zsh completion filename changed


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 2.0.2-1
changelog:
  - split out the manual to a -doc rpm
  - update to 2.0.2
  - switch to make test
  - remove skipping of tests - it doesn't appear to apply anymore


author: Jens Petersen <petersen@redhat.com> - 2.0.0-1.fc10
changelog:
  - update to 2.0.0
  - no longer require darcs-ghc-6_8-compat.patch and darcs-error_xml-missing.patch
  - move utf-8 conversion to prep
  - disable check for now
  - manual is now doc and shell completion config lives in tools
  - install bash completion


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.0.9-10
changelog:
  - add darcs and libxslt to darcs-server dependencies (#427489)
  - add patch to fix missing install errors.xml (#427490)


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.0.9-9
changelog:
  - add BuildRequires autoconf and use of autoconf in %build to utilize
    the ghc 6.8 compatibility patches


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.0.9-7
changelog:
  - added alpha to ExcludeArch (#396501)
  - cleanup rpmlint warnings
    - convert ISO-8859 text files to UTF-8
    - added %doc files to -server subpackage
    - fixed quoting of %macros in changelog comments


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.0.9-3
changelog:
  - clean rpmlint warnings/errors 
    - move PreReq to Requires(post)
    - move make check to 'check' section
    - mark config files as such


author: Jens Petersen <petersen@redhat.com> - 1.0.7-1
changelog:
  - update to 1.0.7
  - fix typo of propagate in description (#189651)
  - disable "make check" for now since it blows up in buildsystem


author: Jens Petersen <petersen@redhat.com> - 1.0.3-2
changelog:
  - fix buildrequires
    - add sendmail, curl-devel, ncurses-devel, zlib-devel, and
      tetex-latex, tetex-dvips, latex2html for doc generation


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.13-1
changelog:
  - Update to latest upstream release
  - Update the manual page for new and renamed options
  - Regenerate the licensecheck text file and patches


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.12-2
changelog:
  - Enable build with system nvtt as it is now approved in Fedora (#823096)
  - Correct release date in manual page
  - Minor consistency correction in manual page formatting
  - Regenerate the licensecheck text file to match pristine tarball


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.12-1
changelog:
  - Update to latest upstream release
  - Remove no longer required gamin patch
  - Rediff rpath patch
  - Remove libxml2 patch already applied upstream
  - Update 0ad manpage for newer options and release information
  - Add versioned requires to data files
  - Add 0ad licensecheck text file to simplify checking changes


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.11-4
changelog:
  - Add %with_debug maintainer mode build
  - Disable fcollada debug build if %with_debug is false
  - Add patch to not crash and display helful messages in editor (#872801)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.11-3
changelog:
  - Clarify source tree licenses information in spec (#818401)
  - Preserve time stamp of installed files (#818401)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.11-2
changelog:
  - Correct manpage group and symlink 0ad manual to pyrogenesis manual (#818401)
  - Correct some typos and wrong information in 0ad.6


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 0.0.11-1
changelog:
  - Update to latest upstream release
  - Switch to new versioning pattern
  - Remove rpath patch already applied upstream
  - Remove without-nvtt patch already applied upstream
  - Remove boost patch already applied upstream
  - Remake rpath patch to avoid package build special conditions


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - r11863-6
changelog:
  - Repackage tarball to not redistribute patented s3tc implementation (#818401)
  - Add patch to rebuild with newer libxml2.
  - Add upstream trac patch for build with newer boost.
  - Rename patches to remove %version and use %name in source files.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - r11863-5
changelog:
  - Clearly state nvtt is not mean't to be used (unless user build from sources).
  - Update to use patch in wildfire trac instead of my patch to remove rpath.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - r11863-4
changelog:
  - Make package build in Fedora 16 (rpmfusion #2342).
  - Add conditionals to build with or without system nvtt or disable nvtt.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - r11863-2
changelog:
  - Disable dependency on nvidia-texture-tools (#823096).
  - Disable %check as it requires nvtt.
  - Add manual page.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - r11863-1
changelog:
  - Correct package license.
  - Update to latest upstream release.
  - Remove license_dbghelp.txt as dbghelp.dll is not in sources neither installed.


author: Fabian Affolter <mail@fabian-affolter.ch> - 4.1.11-1.a
changelog:
  - Removed shebang and permission fixing
  - Added new doc files
  - Added scripts to files section
  - Updated to new upstream version


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090303-2
changelog:
  - Update to HEAD version in upstream git repository
  - Fix bug 500762 - The iBus input speed becomes much slower after "Fuzzy PinYin" enabled
  - Fix bug 501218 - make the pinyin setup window come to the front
  - Fix bug 500763 - User DB is unavailable in ibus for liveCD


author: Adam Huffman <bloch@verdurin.com> - 0.1.8-2
changelog:
  - merge Rasmus' latest changes (0.1.8 update)
  - include bam.h and libbam.a for Bio-SamTools compilation
  - move bam.h and libbam.a to single directory
  - put bgzf.h, khash.h and faidx.h in the same place
  - add -fPIC to CFLAGS to make Bio-SamTools happy
  - add virtual Provide as per guidelines


author: Alan Cox <alan@redhat.com>
changelog:
  - Made finger agree with our other apps about how utmp is managed
  - Removed dead users from the lists as a result
  - Fixed random idle time bug


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Approved
  - * Sun Mar 11 2001 Pekka Savola <pekkas@netcore.fi>
  - - Add IPv6 support from USAGI, update to 0.17 final (no changes)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - exact match w/o -m and add missing pts patch (#2118).
  - recompile with correct PATH_MAILDIR (#4218).


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-2
changelog:
  - Inital Fedora Extras version
  - Capitalized first letter of Summary in devel section to quiet rpmlint
  - Added LGPL to License as 2 files are under LGPL, the rest BSD


author: Than Ngo <than@redhat.com> 4.0.6-1
changelog:
  - update to 4.0.6
  - add requires on glib2-devel, bug #124200
  - remove unneeded patch file, which is included in new upstream


author: Adrien Devresse <adevress at cern.ch> - 1.14.0
changelog:
  - correct several memory leaks
  - correct thread safety issues
  - implement session re-use system for fts 3.0


author: Adrien Devresse <adevress at cern.ch> - 1.13.0-0
changelog:
  - crash fix related to get_details
   - wildcard support in INFOSYS
   - minor bug fix
   - synchronisation with EMI 2 update


author: Zsolt Molnar <zsolt.molnar@cern.ch> - 1.12.2-2
changelog:
  - remove forgotten print statements - visible in glue2 mode only
   - some more fixes for memory leaks
   - fix leak when more than one endpt returned if endpoint is specified
   - some more sanity checks and valgrind warning fixes
   - sanity checks , variable initializations
   - fix memory leak in FTS only


author: Darryl L. Pierce <dpierce@redhat.com> - 0.2-2.1
changelog:
  - Remove BR for ruby-devel.
  - Removed redundant package name from summary.
  - Removed debugging artifacts from specfile.
  - Moved unversioned library to the -devel package.
  - Added dependency on main package to -devel. 
  - Fixed directory ownerships.


author: Juan Orti Alcaine <j.orti.alcaine@gmail.com> - 1.4-0.1.rc2
changelog:
  - Bump version to 1.4rc2
  - Use _udevrulesdir macro and add patch to modify udev rules dir in Makefile
  - Patch to avoid udev service restart is no longer necessary
  - Change dependency to libusbx
  - Change group of heimdall-frontend


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 4.9.0-3.20120810git
  - sync 4.9-branch patches
  - %check: do autotests
  - Requires: +soprano-backend-virtuoso +virtuoso-opensource


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 4.8.90-2
  - move libkdeinit_* to base pkg (no need for multilib) 
  - .spec cleanup
  - add shared-desktop-ontologies, soprano runtime deps


author: Nicholas van Oudtshoorn <vanoudt@gmail.com> - 1.0.2-2
changelog:
  - Removed dependency on silgraphite-devel
  - Stopped building comparerenderer - the only thing that depended on silgraphite


author: Remi Collet <remi@fedoraproject.org> - 1.3.0-1
changelog:
  - update to 1.3.0 (alpha)
    http://dev.mysql.com/doc/relnotes/mysql-utilities/en/wb-utils-news-1-3-0.html
  - move from launchpad to mysql.com
  - new command mysqlfrm
  - mysqluc is now usable
  - man pages provided in upstream tarball


author: Remi Collet <remi@fedoraproject.org> - 1.2.1-2
changelog:
  - generate minimal man pages using help2man
    http://bugs.mysql.com/68610 - Missing man pages
  - drop mysqlauditadmin and mysqlauditgrep on EPEL-6
    http://bugs.mysql.com/68614 - Issue with python 2.6


author: Remi Collet <remi@fedoraproject.org> - 1.0.5-2
changelog:
  - fix BR to python2-devel
  - incorrect-fsf-address and non-executable-script referenced as
    Oracle BUG#13956819
  - remove mut man page (command not installed)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.223-2
changelog:
  - add provides, which should fix gcstar. They must be provided by this
   package.
  - use new filtering of requires. Filter of provides not needed anymore.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.103-1
changelog:
  - Update to 1.103.
  - Converted the Gtk2::Helper man page to utf8 (#177802).
  - Provides list: filtered out perl(main) (#177802).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.061-0.fdr.2
changelog:
  - Removed irrelevant or duplicated documentation files.
  - Description simplified (as suggested by Ville Skyttä).


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.9.1-6
changelog:
  - Do not impose -O4 and -w in build options
  - Change package group to Development/Libraries
  - Corrected license to LGPLv2
  - setup macro no longer needs the name and version arguments
  - Rename patches to include name and version


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.9.1-3
changelog:
  - Remove the clean section since it is not needed in F-13 and later
  - Correct installation of docs into defaultdocdir instead of docdir


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.3-3
changelog:
  - Don't automatically strip debugging symbols from binaries created using qmake
    as we've got RPM wrapper strips to automatically split off debugging symbols
    to a separate debuginfo subpackage
  - Make sure linking against the static QtUiTools library works out-of-the-box


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.3-2
changelog:
  - Added static libraries for QtCLucene, QtDesigner, QtHelp and QtUiTools
  - Added various Requires tags to the -static subpackages as automatic
    dependency resolving doesn't work on static libraries
  - Make sure the function qt_sendSpontaneousEvent is exported in the
    QtGui libraries as the ActiveQt component depends on it


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.1-3
changelog:
  - lrelease-qt4 tries to run qmake not qmake-qt4 (#820767)
    commit copied over from the native qt package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.1-2
changelog:
  - Make linking against the static version of Qt work without any manual fiddling
  - Remove -mms-bitfields from the win64 qmake.conf as it's unneeded with gcc 4.7


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.1-1
changelog:
  - Update to 4.8.1
  - Removed a patch which fixed a compile failure in kdelibs as
    upstream has resolved the issue properly in commit 71e88dd
  - Dropped upstreamed pkgconfig patches
  - Workaround compile failure of the activeqt pieces (which are now enabled by
    default as of Qt 4.8.1). Thanks to the openSuSE mingw project for the patch


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.0-7
changelog:
  - Provide an arch-specific mingw32-qt-qmake package which contains
    tools like qmake and moc which are required for compiling binaries
    against Qt with the correct environment automatically set
  - Bundle QtUiTools (required by kdelibs)
  - Fix a compilation issue with kdelibs
  - Make sure that Qt is built with IPC/shared memory support (required by kdelibs)
  - Added -static subpackages
  - Workaround a qmake issue which causes building against the debug binaries to fail:
    https://bugreports.qt.nokia.com/browse/QTBUG-14467
  - Make sure the various tools belonging to the Qt library are built
    and added them to the new tools subpackage. Thanks to Dominik Schmidt
    of the openSuSE mingw project
  - Make QSSL work (patch from Dominik Schmidt)
  - Added pkg-config files (patches from Hib Eris)
  - Enable javascript-jit
  - Add QMAKE_STREAM_EDITOR to the mkspecs files
  - Also install the Qt tools (qmake, moc, ...) to %{_prefix}/$target/bin
    so that CMake can find Qt more easily


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.0-6
changelog:
  - Renamed the source package to mingw-qt (RHBZ #800447)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.0-4
changelog:
  - Replaced the pkg-config environment hacks with a proper fix
    in the qmake.conf mkspecs file
  - Rebuild against libpng 1.5


author: Kalev Lember <kalevlember@gmail.com> - 4.7.3-1
changelog:
  - Update to 4.7.3
  - Dropped upstreamed / unneeded patches
  - Enable the float.h using code again, needs new mingw32-runtime and
    mingw32-gcc builds


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.1-3
changelog:
  - Use the configure argument '-dbus-linked' instead of '-dbus' as the
    latter generates a non-working QtDBus library


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.1-1
changelog:
  - Update to 4.7.1
  - Use the name 'win32-g++-cross' instead of 'win32-g++-fedora-cross' as
    mkspecs platform name as was decided on the mailing list. The previous
    rename was invalid


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.0-2
changelog:
  - Use a more proper build method than the old hacky one
  - Link against the mingw32 packages mingw32-zlib, mingw32-iconv, 
    mingw32-libjpeg, mingw32-libpng, mingw32-libtiff and mingw32-sqlite
    instead of using the bundled libraries
  - Use the name 'win32-g++-fedora-cross' instead of 'win32-fedora-cross' as
    mkspecs platform name. People compiling Qt applications using the
    Fedora MinGW toolchain have to use this new name when invoking qmake
  - Added the QtDeclarative library
  - Bundle the translations
  - Dropped the old obsoletes: mingw32-qt-win
  - Dropped some duplicate declarations from the qmake.conf file
  - Use the correct strip command in the qmake.conf file


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.1-4
changelog:
  - Update to Qt 4.5.1.
  - Location of *.dll files moved again.
  - No longer necessary to remove libdir/qt4/bin.
  - Installs more *.dll files in /usr/lib [sic].


author: Kalev Lember <kalev@smartlink.ee> - 4.5.0-4
changelog:
  - Enable QtOpenGL, QtScript, QtScriptTools, and QtXmlPatterns.
  - Sort files section for readability.


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 4.5.0-3
changelog:
  - moved cross compiler qmake setup files into separate package
    to keep this package noarch
  - update BR, Provides, Obsoletes with reviewer suggestions


author: Orion Poplawski <orion@cora.nwra.com> 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Dropped soversion patch applied upstream
  - Don't need to move library on 64bit anymore


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - updated to 1.3.5
  - dropped upstreamed patches
  - fixed install in libdir
  - fixed missing SO version


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.3-1
changelog:
  - updated to 1.3.3
  - removed calls to exit(3)
  - added a simple build system (Makefile)
  - dropped libtool dependency
  - 1.3.3 added a new symbol, so made it versioned
  - added examples to -devel docs


author: Mario Blättermann <mariobl@fedoraproject.org> 0.0.3-2
changelog:
  - Changed the libs requirement for the base package
  - The ldconfig commands point now to the libs instead of the main package
  - Disable rpath


author: <mzatko@redhat.com> - 1.2-3
changelog:
  - Renamed specfile, corrected summary/description
  - Moved tests to doc, not excluding gem_cache
  - Runs tests


author: Dan Horák <dan[at]danny.cz> 2.5.0.26074.0-2
changelog:
  - sync the s390(x) utilities list with other arches
  - add libatomic_ops-devel as BR: on non-x86 arches


author: Philippe Makowski <makowski at fedoraproject.org> 2.1.3.18185.0-4
changelog:
  - build it against system edit lib
  - set correct setuid for Classic lock manager
  - set correct permission for /var/run/firebird


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.3.18185.0-2
changelog:
  - rename /usr/bin/gstat to /usr/bin/gstat-fb  to avoid conflict with ganglia-gmond (rh #515510)
  - remove stupid rm -rf in postun


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-11
changelog:
  - change xinetd script (rh #506528)
  - add missing library (and header files) for build php4-interbase module (rh #506728)
  - update README.fedora
  - automatically created user now have /bin/nologin as shell to make things a little more secure


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-7
changelog:
  - patch to change lock files location and avoid %{fbroot} owned by firebird user (rh #500219)
  - add README.fedora
  - add symlinks in /usr/bin
  - change xinetd reload (rh #500219)


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-6
changelog:
  - add filesystem-subpackage
  - remove common subpackage and use the main instead
  - add logrotate config


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-4
changelog:
  - major cleaning install process to take care of the two architectures (Classic and Superserver) the right way


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.2.18118.0-1
changelog:
  - backport doc patch
  - update to 2.1.2.18118
  - cleanup macros
  - specifie libdir
  - change firebird user login


author: Philippe Makowski <makowski at firebird-fr.eu.org> 2.1.1.17190.0-4
changelog:
  - Create a doc package
  - major cleaning to avoid rpmlint errors
  - revert to 2.1.1 (last stable build published)


author: Jonathan MERCIER <bioinfornatics at gmail.com> 2.1.2.18116.0-3
changelog:
  - Perform %configure with option --with-system-icu
  - Add libicu-devel in BuildRequires
  - Use iconv for convert files to UTF-8


author: Jonathan MERCIER <bioinfornatics at gmail.com> 2.1.2.18116.0-2
changelog:
  - Update to 2.1.2
  - Use %global instead of %define
  - Change ${SOURCE1} to %{SOURCE1}
  - Change Group Database to Applications/Databases
  - Change License IPL to Interbase
  - Perform %configure section's with some module
  - Cconvert cyrillic character to UTF-8


author: Dan Mashal <vicodan@fedoraproject.org> 1.2-14
changelog:
  * Thu Jun 14 2012 Dan Mashal <vicodan@fedoraproject.org> 1.2-13
  -Update to latest source code (svn rev 207)


author: Dan Mashal <vicodan@fedoraproject.org> 1.2-4
changelog:
  -Updated spec file, removed .o files in source tarball and source RPM
  -Updated release versions in change log


author: Dan Mashal <vicodan@fedoraproject.org> 1.2-2
changelog:
  -Received .patch from spot to patch Makefile to respect DESTDIR
  -Received sponsorship from rdieter for submission review to Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.1-3
changelog:
  - ExcludeArch ppc64
  - Remove Requires curl, which is not necessary.
  - Use  to handle docs in the devel package.


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-92
changelog:
  - Eliminate dontaudit rules so setroubleshoot and audit2allow can tell user what to do if apache attempts to use the terminal
  - Add transition from cupsd_config_t to cupsd_t
  - Fix chrome_role_notrans() to allow also append to stream socket
  - Allow gkeyring_domain to create /var/run/UID/config/dbus file
  - system dbus seems to be blocking suspend
  - Label aliases db files with correct label
  - Allow setroubleshootd to read var_lib_t to make email_alert working
  - Dontaudit attemps to sys_ptrace, which I believe gpsd does not need
  - Allow mpd getattr on file system directories
  - Add rsync_etc_filetrans_config()
  - Label /var/lib/sepolgen as selinux_config_t so that setroubleshoot can read it
  - Add filetrans rules for tw devices
  - Allow systemd-tty-ask to write kmsg
  - label shared libraries in /opt/google/chrome as testrel_shlib_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-91
changelog:
  - Allow domains to use kerberos to read file_context file
  - Allow mozilla_plugin to connect to port 8081
  - Tighten security on virtual machines
  - block_suspend is caps2
  - Allow realmd to run ipa, really needs to be an unconfined_domain
  - Allow sandbox domains to use inherted terminals
  - Allow pscd to use devices labeled svirt_image_t in order to use cat cards.
  - Add label for new alsa pid
  - Alsa now uses a pid file and needs to setsched
  - Allow nova domains to connect to mysql port
  - Allow quantum to connect to keystone port
  - Allow nova-console to talk with mysql over unix stream socket
  - Allow dirsrv to stream connect to uuidd
  - Fix transition for cobbler lib files
  - Label all nagios plugin as unconfined by default
  - Add httpd_serve_cobbler_files()
  - Allow mdadm to read /dev/sr0 and create tmp files
  - Allow certwatch to send mails
  - Allow livecd to transition to rpm_script_t
  - Add cache dir support for cobbler
  - label shared libraries in /opt/google/chrome as testrel_shlib_t
  - Fix labeling for nagios plugins
  - Disable support for .xsession-errors-:[digit] file name transition for now until policycoreutils fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-90
changelog:
  - Allow git_system_t to read network state
  - Allow pegasas to execute mount command
  - Allow nagios check disk plugins to execute bin_t
  - Remove transition to mozilla_tmp_t by mozilla_t, to allow it to manage the users tmp dirs
  - Allow quantum to transition to openvswitch_t
  - Allow quantum to use databas
  - allow quantum to stream connect to openvswitch
  - Allow alsa_t signal_perms, we probaly should search for any app that can execute something without transition and give it signal_perms...
  - Add dontaudit for mozilla_plugin_t looking at the xdm_t sockets
  - Allow winbind to manage kerberos_rcache_host
  - Allow spamd to create spamd_var_lib_t directories
  - Dontaudit attempts by httpd_t attempting to read rpm database.  Customer triggered this by executing createrepo, needs back port to rhel6
  - Add mising nslcd_dontaudit_write_sock_file() interface
  - Fix pki_read_tomcat_lib_files() interface
  - Allow certmonger to read pki-tomcat lib files
  - Allow certwatch to execute bin_t
  - Allow snmp to manage /var/lib/net-snmp files
  - Fix for openvswitch_stream_connect()
  - Add rgmanager_search_lib() interface
  - Fix pki_read_tomcat_lib_files() interface
  - Fix cobbler_manage_lib_files() interface
  - Add xserver_dontaudit_xdm_rw_stream_sockets() interface
  - Allow daemon to send dgrams to initrc_t
  - Update textrel_shlib_t names
  - Allow kdm to start the power service to initiate a reboot or poweroff


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-89
changelog:
  - Add port definition for osapi_compute port
  - User accounts need to dbus chat with accountsd daemon
  - fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk
  - Allow NetworkManager to transition to ipsec_t, for running strongswan
  - Lots of access required by lvm_t to created encrypted usb device
  - Allow users to dbus chat with systemd_localed
  - Fix handling of .xsession-errors in xserver.if, so kde will work
  - Make sure we label content under /var/run/lock as <<none>>
  - Allow daemon and systemprocesses to search init_var_run_t directory
  - Add boolean to allow xdm to write xauth data to the home directory
  - Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them
  - Allow httpd_t to connect to osapi_compute port using httpd_use_openstack bolean
  - Fix apache_read_sys_content_rw_dirs() interface
  - Fix sys_nice for cups_domain
  - Allow postfix_postdrop to acces postfix_public socket
  - Allow sched_setscheduler for cupsd_t
  - Looks like certmaster sends mail
  - Allow logrotate to read /var/log/z-push dir
  - Allow fsdaemon to send signull to all domains
  - yum-cron runs rpm from within it.
  - Allow tuned to transition to dmidecode
  - Allow firewalld to do net_admin
  - Call mailman_domain
  - FIx ircssi_home_t type to irssi_home_t
  - Correct file transition rul for qpidd_tmp
  - Fix qpidd policy
  - Add mailman_domain attribute
  - Allow openvswitch to execute shell
  - Allow qpidd to use kerberos
  - Allow mailman to use fusefs, needs back port to RHEL6
  - Allow apache and its scripts to use anon_inodefs
  - Realmd needs to connect to samba ports, needs back port to F18 also
  - Allow adcli running as realmd_t to connect to ldap port
  - Allow NetworkManager to transition to ipsec_t, for running strongswan
  - Make openshift_initrc_t an lxc_domain
  - Fix labeling for drupal an wp-content in subdirs of /var/www/html
  - Allow abrt to read utmp_t file
  - Fix openshift policy to transition lnk_file, sock-file an fifo_file when created in a tmpfs_t, needs back port to RHEL6
  - Allow gssd to manage user_tmp_t files
  - Fix handling of irclogs in users homedir
  - firewalld needs to be able to write to network sysctls
  - fix labeling for (oo|rhc)-restorer-wrapper.sh
  - Allow thumb_t to execute user home content
  - cups uses usbtty_device_t devices
  - These fixes were all required to build a MLS virtual Machine with single level desktops
  - Allow domains to transiton using httpd_exec_t
  - Allow svirt domains to manage kernel key rings
  - Allow setroubleshoot to execute ldconfig
  - Allow firewalld to read generate gnome data


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-88
changelog:
  - Allow abrt to manage mock build environments to catch build problems.
  - Allow virt_domains to setsched for running gdb on itself
  - Allow pulseaudio running as mozilla_plugin_t to read /run/systemd/users/1000
  - Allow cups_t to read inhered tmpfs_t from the kernel
  - Allow openshift_cron_t to look at quota
  - Allow cgred to send signal perms to itself, needs back port to RHEL6
  - Allow certwatch to execut /usr/bin/httpd
  - Allow yppasswdd to use NIS
  - Tuned wants sys_rawio capability
  - Allow thumb_t to execute user home content
  - Allow s-c-kdump to connect to syslogd
  - Allow condor domains block_suspend and dac_override caps
  - Allow condor_master to read passd
  - Allow condor_master to read system state
  - Allow mount to write keys for the unconfined domain
  - Add unconfined_write_keys() interface
  - Add labeling for /usr/share/pki
  - Add additional ports as mongod_port_t for  27018, 27019, 28017, 28018 and 28019 ports
  - Allow commands that are going to read mount pid files to search mount_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-87
changelog:
  - Allow commands that are going to read mount pid files to search mount_var_run_t
  - Make localectl set-x11-keymap working at all
  - Allow localectl to read /etc/X11/xorg.conf.d directory
  - Allow mount to transition to systemd_passwd_agent
  - Add tcp/9150 as tor_socks_port
  - Allow systemd to list all file system directories
  - Allow sytemd_tmpfiles to create wtmp file
  - Allow automount to block suspend
  - /var/spool/snmptt is a directory which snmdp needs to write to, needs back port to RHEL6
  - Add support for /run/lock/opencryptoki
  - Allow pkcsslotd chown capability
  - Allow pkcsslotd to read passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-86
changelog:
  - cups uses usbtty_device_t devices
  - These fixes were all required to build a MLS virtual Machine with single level desktops
  - Allow domains to transiton using httpd_exec_t
  - Allow svirt domains to manage kernel key rings
  - Allow setroubleshoot to execute ldconfig
  - Allow firewalld to read generate gnome data
  - Add fixes which were all required to build a MLS virtual Machine with single level desktops
  - Need to back port this to RHEL6 for openshift
  - Make systemd_localed_t as unconfined for F18


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-85
changelog:
  - Allow bluetooth to read machine-info
  - Allow obex to request a kernel module
  - Allow mozilla_plugins to list apache modules, for use with gxine
  - Fix labels for POkemon in the users homedir
  - Allow xguest to read mdstat
  - Dontaudit virt_domains getattr on /dev/*
  - Allow boinc domain to send signal to itself
  - Add tcp/8891 as milter port
  - Allow nsswitch domains to read sssd_var_lib_t files
  - Allow ping to read network state.
  - Fix typo
  - Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them
  - Add labeling for pstorefs_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-84
changelog:
  - Make systemd_hostnamed_t as unconfined domain in F18
  - Call rhcs_manage_cluster_pid_files() instead of rgmanger_manage_pid_files() interface
  - Allow sshd to stream connect to an lxc domain
  - Allow nsswitch_domains to read /etc/hostname
  - xdm_t will try to list any directory mounted, we should just dontaudit them
  - Fix systemd_filetrans_named_content() interface
  - Allow postgresql to manage rgmanager pid files
  - Allow postgresql to read ccs data
  - Allow systemd_domain to send dbus messages to policykit
  - Add labels for /etc/hostname and /etc/machine-info and allow systemd-hostnamed to create them
  - All systemd domains that create content are reading the file_context file and setfscreate
  - Systemd domains need to search through init_var_run_t
  - Allow sshd to communicate with libvirt to set containers labels
  - Add labeling for /var/run/hplip
  - Allow iscsid to read /dev/urandom
  - Allow sshd to log a user directly into a container
  - Allow screen domains to configure tty and setup sock_file in ~/.screen directory, dontaudit attempts to read /etc/shadow still need to dont audit dac_override
  - ALlow setroubleshoot to read default_context_t, needed to backport to F18
  - Label /etc/owncloud as being an apache writable directory
  - Add interface to manage pid files
  - Allow NetworkManger_t to read /etc/hostname
  - Allow virtual machines to setrlimit and send itself signals.
  - Dontaudit chrome_sandbox_nacl_t using user terminals
  - Allow gluster to manage all directories as well as files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-83
changelog:
  - Fix iptables labels
  - Allow munin CGI scripts to append munin log file
  - Allow munin plugin domains to read passwd
  - Allow collectd CGI script to create /tmp content
  - Add mising gluster boolean
  - Allow collectd to create netlink_tcpdiag_socket
  - Allow proceman to check the state of the network


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-82
changelog:
  - Allow logrotate to read /sys
  - Allow mandb to setattr on man dirs
  - label /usr/bin/yum-builddep as rpm_exec_t
  - Remove init_daemon_run_dir from CUPS policy
  - Backport cups+hplip merge from rawhide
  - Allow munin CGI scritp to search munin logs
  - Allow quantum to connect to amqp port
  - Allow jabberd to connect to jabber_interserver_port_t
  - Fix authconfig.py labeling
  - Fix fcoemon policy
  - Allow kdumpgui to manage bootloader_config
  - Allow httpd_collectd_script to read /etc/passwd
  - Allow milter domains to read /dev/random
  - Allow nmbd_t to create samba_var_t directories
  - Allow logrotote to getattr on all file sytems
  - fcoemon wants also net_raw cap. We have net_admin cap.
  - Allow gpg-agent to access fips_enabled file
  - Allow collectd to read utmp
  - Backport munin policy from rawhide
  - Allow kadmind to read /etc/passwd
  - Dontaudit append .xsession-errors file on ecryptfs for  policykit-auth
  - Allow chrome_nacl to execute /dev/zero
  - Label /usr/lib64/security/pam_krb5/pam_krb5_cchelperas bin_t
  - Add fs_dontaudit_append_fusefs_files() interface
  - Allow systemd domains to talk to kernel_t using unix_dgram_socket
  - Add miscfiles_setattr_man_pages()
  - Add manage interface to be used bu kdumpgui
  - Localectl needs to be able to send dbus signals to users
  - Hostname needs to send syslog messages
  - Add stream support for mpd, accessible from users


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-81
changelog:
  - Fix systemd_dbus_chat_timedated interface
  - Allow userdomains to dbus chat with systemd-hostnamed
  - /usr/share/munin/plugins/plugin.sh should be labeled as bin_t
  - Fix dbus_system_domain() interface
  - Fix thumb_role() interface
  - Allow cgred to list inotifyfs filesystem
  - New access required for virt-sandbox
  - Allow gluster to get attrs on all fs
  - Allow dnsmasq to create content in /var/run/NetworkManager


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-80
changelog:
  - Update virt_qemu_ga_t policy
  - Allow authconfig running from realmd to restart oddjob service
  - Add systemd support for oddjob
  - Add initial policy for realmd_consolehelper_t which if for authconfig executed by realmd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-79
changelog:
  - Fix condor policy
  - Add labeling for gnashpluginrc
  - Allow chrome_nacl to execute /dev/zero
  - Allow condor domains to read /proc
  - mozilla_plugin_t will getattr on /core if firefox crashes
  - Allow block_suspend cap2 for glusterd
  - Allow nmbd to read /dev/random
  - Fix glusterd labeling
  - dmraid creates /var/lock/dmraid
  - Allow systemd_localed to creatre unix_dgram_sockets
  - Allow systemd_localed to write kernel messages.
  - Also cleanup systemd definition a little.
  - Backport fixes for systemd-hostname policy to F18


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-78
changelog:
  - Label any block devices or char devices under /dev/infiniband as fixed_disk_device_t
  - Fix userdom_restricted_xwindows_user_template() interface
  - User accounts need to dbus chat with accountsd daemon
  - Gnome requires all users to be able to read /proc/1/
  - Add support for /var/lib/systemd/linger
  - Allow systemd-timestamp to set SELinux context
  - Fix systemd.fc
  - Switch gnomeclock_dbus_chat to systemd_dbus_chat_timedated since we have switched the name of gnomeclock
  - Allow sytstemd-timedated to get status of init_t
  - Add new systemd policies for hostnamed and rename gnomeclock_t to systemd_timedate_
  - Allow tuned to created kobject_uevent socket
  - Allow guest user to run fusermount
  - Allow openshift to read /proc and locale
  - Allow realmd to dbus chat with rpm
  - virsh now does a setexeccon call
  - Additional rules required by openshift domains
  - Allow svirt_lxc_domains to use inherited terminals, needed to make virt-sandbox-service execute work
  - Allow spamd_update_t to search spamc_home_t
  - Avcs discovered by mounting an isci device under /mnt
  - Avcs discovered by mounting an isci device under /mnt
  - Allow lspci running as logrotate to read pci.ids
  - Additional fix for networkmanager_read_pid_files()
  - Fix networkmanager_read_pid_files() interface
  - Allow all svirt domains to connect to svirt_socket_t
  - Allow virsh to set SELinux context for a process.
  - Allow tuned to create netlink_kobject_uevent_socket
  - Add new tuned_tmp_t type


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-77
changelog:
  - Add basic rules for pegasus_openlmi_domain
  - Add pegasus_openlmi_domain_template() interface for openlmi-*
  - Allow pppd to send signull
  - Allow tuned to execute ldconfig
  - Fix use_ecryptfs_home_dirs boolean for chrome_sandbox_t
  - Add additional fixes for ecrypts
  - Allow keystone getsched and setsched
  - ALlow nova-cert to connect to postgresql
  - Allow keystone to connect to postgresql
  - Allow glance domain to stream connect to databases
  - Allow all cups domains to getattr on filesystems
  - Fix pacemaker_use_execmem boolean
  - Allow gpg to read fips_enabled
  - FIXME: Add realmd_tmp_t until we get /var/cache/realmd
  - Add support for /var/cache/realmd
  - Add labeling for fenced_sanlock and allow sanclok transition to fenced_t
  - Allow glance domain to send a signal itself
  - Allow xend_t to request that the kernel load a kernel module
  - Add additional interface for ecryptfs


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-75
changelog:
  - Fix smartmontools
  - Fix userdom_restricted_xwindows_user_template() interface
  - Allow Xusers to ioctl lxdm.log to make lxdm working
  - Add xserver_xdm_ioctl_log() interface
  - Add MLS fixes to make MLS boot/log-in working
  - Add mls_socket_write_all_levels() also for syslogd
  - fsck.xfs needs to read passwd
  - Allow postgresql to create pg_log dir
  - Allow sshd to read rsync_data_t to make rsync <backuphost> working
  - Allow useradd to create homedirs in /run.  ircd-ratbox does this and we should just allow it
  - Allow xdm_t to execute gstreamer home content
  - Fix sssd_dontaudit_stream_connect() interface
  - Allow LDA's job to deliver mail to the mailbox
  - dontaudit block_suspend for mozilla_plugin_t
  - Dontaudit attempts by thumb_t to read or list /proc info
  - Allow l2tpd_t to all signal perms
  - Allow uuidgen to read /dev/random
  - Allow fsdaemon to use user pty
  - Add containment of openshift cron jobs
  - Allow system cron jobs to create tmp directories
  - Make userhelp_conf_t a config file
  - Allow mozilla-plugin-config to read power_supply info
  - More fixes for rsync to make rsync <backuphost> wokring
  - Allow fsdaemon to read svirt images[C
  - Allow logwatch to domtrans to mdadm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-74
changelog:
  - Dontaudit r/w cache_home_t for thumb_t
  - Allow rsync to getattr any file in rsync_data_t
  - Allow l2tpd_t to read network manager content in /run directory
  - Allow named to block_suspend capability
  - Allow gnomesystemmm_t caps because of ioprio_set
  - Allow NM rawip socket
  - Add interface to thumb_t dbus_chat to allow it to read remote process state
  - ALlow logrotate to domtrans to mdadm_t
  - kde gnomeclock wants to write content to /tmp
  - kde gnomeclock wants to write content to /tmp
  - /usr/libexec/kde4/kcmdatetimehelper attempts to create /root/.kde
  - Allow blueman_t to rwx zero_device_t, for some kind of jre
  - Allow mozilla_plugin_t to rwx zero_device_t, for some kind of jre
  - Ftp full access should be allowed to create directories as well as files
  - Add boolean to allow rsync_full_acces, so that an rsync server can write all
  - over the local machine
  - logrotate needs to rotate logs in openshift directories
  - comment files_relabel_non_security_files for now, it does not work with boolean
  - boinc_cliean wants also execmem as boinc projecs have
  - Allow sa-update to search admin home for /root/.spamassassin
  - Allow sa-update to search admin home for /root/.spamassassin
  - Allow antivirus domain to read net sysctl
  - Dontaudit attempts from thumb_t to connect to ssd
  - Dontaudit attempts by readahead to read sock_files
  - Dontaudit attempts by readahead to read sock_files
  - Allow application_domains to send sigchld to login programs
  - Change ssh_use_pts to use macro and only inherited sshd_devpts_t
  - Allow confined users to read systemd_logind seat information


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-73
changelog:
  - Allow gnome keyring to create keyrings dir in ~/.local/share
  - Dontaudit thumb drives trying to bind to udp sockets if nis_enabled is turned on
  - Allow colord_t to read cupsd_t state
  - Add interface to colord_t dbus_chat to allow it to read remote process state


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-72
changelog:
  - Dontaudit net_admin capability for sendmail
  - Logwatch does access check on mdadm binary
  - Add raid_access_check_mdadm() iterface
  - Allow gpg_t to manage all gnome files
  - Add ~/.quakelive as mozilla_home_t content
  - Dontaudit mdadm_t running ps command which is causing sys_ptrace avcs
  - Allow virtd_t to create stream socket perms for svirt_socket_t, so that it can use guestmount.
  - Need to allow virtd_t to write to /proc in order to open namespace sockets for write.
  - Add a couple of dontaudit rules to silence the noice
  - Allow zarafa_deliver_t to bind to lmtp port, also consolodate signal_perms and setrlimit and kill to use zarafa_domain attribute
  - Add mate-thumbnail-font as thumnailer
  - Add pcscd_read_pid_files() interface
  - Lots of probing avc's caused by execugting gpg from staff_t
  - Looks like qpidd_t needs to read /dev/random
  - firewalld seems to be creating mmap files which it needs to execute in /run /tmp and /dev/shm.  Would like to clean this up but for now we will allow
  - Added systemd support for ksmtuned
  - Added booleans
   	ksmtuned_use_nfs
   	ksmtuned_use_cifs
  - Add definition for 2003 as an lmtp port
  - Add filename transition for opasswd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-71
changelog:
  - Allow udev to communicate with the logind daemon
  - Add labeling for texlive bash scripts
  - Add xserver_filetrans_fonts_cache_home_content() interface
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - Add support for /var/lock/man-db.lock
  - Add support for /var/tmp/abrt(/.*)?
  - Add additional labeling for munin cgi scripts
  - Allow httpd_t to read munin conf files
  - Allow certwatch to read meminfo
  - Fix nscd_dontaudit_write_sock_file() interface
  - Fix gnome_filetrans_home_content() to include also "fontconfig" dir as cache_home_t
  - Allow mozilla_plugin_t to create HOMEDIR/.fontconfig with the proper labeling
  - Allow numad access discovered by Dominic
  - Allow gnomeclock to talk to puppet over dbus
  - Add support for HOME_DIR/.maildir


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-70
changelog:
  - Add label for dns lib files
  - Allow svirt_t images to compromise_kernel when using pci-passthrough
  - Blueman uses ctypes which ends up triggering execmem priv.
  - Dontaudit attempts by thumb_t to use nscd
  - fsdaemon reads all images, if relabeled to svirt_image_t, it should be able to read it
  - Allow abrt to read proc_net_t
  - Allw NM to transition to l2tpd
  - Dontaudit chrome-nacl to append gnome config files
  - Add gnome_dontaudit_append_config_files()
  - Allow svirt_tcg_t to create netlink_route_socket
  - Label /var/lib/unbound as named_cache_t to allow named to write to this directory
  - Allow postfix domains to list /tmp
  - Allow dnsmasq to list tftpdir_rw_t content
  - Allow lxc domains to read fusefs, since libvirt is mounding a fuse file system at /proc/meminfo
  - Allow tmpreaper to delete tmpfs files in tmp
  - Dontaudit access check on tmp_t files/directories
  - dontaudit access checks on file systems types by firewalld
  - Allow mail_munin_plugins domain to run postconf
  - Allow spamd_update to manage gnupg directory
  - Add missing postfix_run_postqueue() interface
  - Add ntp_exec() interface
  - Fix setroubleshoot_fixit_t policy
  - Allow setroubleshoot_fixit to execute rpm
  - zoneminder needs to connect to httpd ports where remote cameras are listening
  - Allow firewalld to execute content created in /run directory
  - Allow svirt_t to read generic certs
  - Add label for Xvnc
  - Add interface to dontaudit access checks on tmp_t
  - Fix interface for dontaudit access check to include directory
  - interface to dontaudit access checks on file systems types
  - Add interface for postgesql_filetrans_name_content to make sure log directories get created with the correct label.
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Additional fix for chroot_user_t backported from RHEL6
  - Allow chroot_user_t to getattr on filesystems
  - Dontaudit vi attempting to relabel to self files
  - Sudo domain is attempting to get the additributes of proc_kcore_t
  - Unbound uses port 8953
  - 
  - Creating tmp-inst directory in a tmp_t directory should not transition
  - Allow init_t to write to watchdog device
  - Add file system definition for other vx file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-69
changelog:
  - Add systemd_status_all_unit_files() interface
  - Add support for nshadow
  - Allow sysadm_t to administrate the postfix domains
  - Add interface to setattr on isid directories for use by tmpreaper
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Add systemd_status_all_unit_files() interface
  - Add support for nshadow
  - Allow sysadm_t to administrate the postfix domains
  - Add interface to setattr on isid directories for use by tmpreaper
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Allow sshd_t sys_admin for use with afs logins
  - Add labeling for /var/named/chroot/etc/localtim


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-68
changelog:
  - Allow setroubleshoot_fixit to execute rpm
  - zoneminder needs to connect to httpd ports where remote cameras are listening
  - Allow firewalld to execute content created in /run directory
  - Allow svirt_t to read generic certs
  - Dontaudit leaked ps content to mozilla plugin
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - init scripts are creating systemd_unit_file_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-67
changelog:
  - systemd_logind_t is looking at all files under /run/user/apache
  - Allow systemd to manage all user tmp files
  - Add labeling for /var/named/chroot/etc/localtime
  - Allow netlabel_peer_t type to flow over netif_t and node_t, and only be hindered by MLS, need back port to RHEL6
  - Keystone is now using a differnt port
  - Allow xdm_t to use usbmuxd daemon to control sound
  - Allow passwd daemon to execute gnome_exec_keyringd
  - Fix chrome_sandbox policy
  - Add labeling for /var/run/checkquorum-timer
  - More fixes for the dspam domain, needs back port to RHEL6
  - More fixes for the dspam domain, needs back port to RHEL6
  - sssd needs to connect to kerberos password port if a user changes his password
  - Lots of fixes from RHEL testing of dspam web
  - Allow chrome and mozilla_plugin to create msgq and semaphores
  - Fixes for dspam cgi scripts
  - Fixes for dspam cgi scripts
  - Allow confine users to ptrace screen
  - Backport virt_qemu_ga_t changes from RHEL
  - Fix labeling for dspam.cgi needed for RHEL6
  - We need to back port this policy to RHEL6, for lxc domains
  - Dontaudit attempts to set sys_resource of logrotate
  - Allow corosync to read/write wdmd's tmpfs files
  - I see a ptrace of mozilla_plugin_t by staff_t, will allow without deny_ptrace being set
  - Allow cron jobs to read bind config for unbound
  - libvirt needs to inhibit systemd
  - kdumpctl needs to delete boot_t files
  - Fix duplicate gnome_config_filetrans
  - virtd_lxc_t is using /dev/fuse
  - Passenger needs to create a directory in /var/log, needs a backport to RHEL6 for openshift
  - apcupsd can be setup to listen to snmp trafic
  - Allow transition from kdumpgui to kdumpctl
  - Add fixes for munin CGI scripts
  - Allow deltacloud to connect to openstack at the keystone port
  - Allow domains that transition to svirt domains to be able to signal them
  - Fix file context of gstreamer in .cache directory
  - libvirt is communicating with logind
  - NetworkManager writes to the systemd inhibit pipe


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-66
changelog:
  - Allow munin disk plugins to get attributes of all directories
  - Allow munin disk plugins to get attributes of all directorie
  - Allow logwatch to get attributes of all directories
  - Fix networkmanager_manage_lib() interface
  - Fix gnome_manage_config() to allow to manage sock_file
  - Fix virtual_domain_context
  - Add support for dynamic DNS for DHCPv6


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-65
changelog:
  - Allow svirt to use netlink_route_socket which was a part of auth_use_nsswitch
  - Add additional labeling for /var/www/openshift/broker
  - Fix rhev policy
  - Allow openshift_initrc domain to dbus chat with systemd_logind
  - Allow httpd to getattr passenger log file if run_stickshift
  - Allow consolehelper-gtk to connect to xserver
  - Add labeling for the tmp-inst directory defined in pam_namespace.conf
  - Add lvm_metadata_t labeling for /etc/multipath


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-63
changelog:
  - Add label for efivarfs
  - Allow certmonger to send signal to itself
  - Allow plugin-config to read own process status
  - Add more fixes for pacemaker
  - apache/drupal can run clamscan on uploaded content
  - Allow chrome_sandbox_nacl_t to read pid 1 content


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-62
changelog:
  - Fix MCS Constraints to control ingres and egres controls on the network.
  - Change name of svirt_nokvm_t to svirt_tcg_t
  - Allow tuned to request the kernel to load kernel modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-61
changelog:
  - Label /var/lib/pgsql/.ssh as ssh_home_t
  - Add labeling for /usr/bin/pg_ctl
  - Allow systemd-logind to manage keyring user tmp dirs
  - Add support for 7389/tcp port
  - gems seems to be placed in lots of places
  - Since xdm is running a full session, it seems to be trying to execute lots of executables via dbus
  - Add back tcp/8123 port as http_cache port
  - Add ovirt-guest-agent\.pid labeling
  - Allow xend to run scsi_id
  - Allow rhsmcertd-worker to read "physical_package_id"
  - Allow pki_tomcat to connect to ldap port
  - Allow lpr to read /usr/share/fonts
  - Allow open file from CD/DVD drive on domU
  - Allow munin services plugins to talk to SSSD
  - Allow all samba domains to create samba directory in var_t directories
  - Take away svirt_t ability to use nsswitch
  - Dontaudit attempts by openshift to read apache logs
  - Allow apache to create as well as append _ra_content_t
  - Dontaudit sendmail_t reading a leaked file descriptor
  - Add interface to have admin transition /etc/prelink.cache to the proper label
  - Add sntp support to ntp policy
  - Allow firewalld to dbus chat with devicekit_power
  - Allow tuned to call lsblk
  - Allow tor to read /proc/sys/kernel/random/uuid
  - Add tor_can_network_relay boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-60
changelog:
  - Add openshift_initrc_signal() interface
  - Fix typos
  - dspam port is treat as spamd_port_t
  - Allow setroubleshoot to getattr on all executables
  - Allow tuned to execute profiles scripts in /etc/tuned
  - Allow apache to create directories to store its log files
  - Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Looks like apache is sending sinal to openshift_initrc_t now,needs back port to RHEL6
  - Allow Postfix to be configured to listen on TCP port 10026 for email from DSPAM
  - Add filename transition for /etc/tuned/active_profile
  - Allow condor_master to send mails
  - Allow condor_master to read submit.cf
  - Allow condor_master to create /tmp files/dirs
  - Allow condor_mater to send sigkill to other condor domains
  - Allow condor_procd sigkill capability
  - tuned-adm wants to talk with tuned daemon
  - Allow kadmind and krb5kdc to also list sssd_public_t
  - Allow accountsd to dbus chat with init
  - Fix git_read_generic_system_content_files() interface
  - pppd wants sys_nice by nmcli because of "syscall=sched_setscheduler"
  - Fix mozilla_plugin_can_network_connect to allow to connect to all ports
  - Label all munin plugins which are not covered by munin plugins policy  as unconfined_munin_plugin_exec_t
  - dspam wants to search /var/spool for opendkim data
  - Revert "Add support for tcp/10026 port as dspam_port_t"
  - Turning on labeled networking requires additional access for netlabel_peer_t; these allow rules need to be back ported to RHEL6
  - Allow all application domains to use fifo_files passed in from userdomains, also allow them to write to tmp_files inherited from userdomain
  - Allow systemd_tmpfiles_t to setattr on mandb_cache_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-58
changelog:
  - Add back consolekit policy
  - Silence bootloader trying to use inherited tty
  - Silence xdm_dbusd_t trying to execute telepathy apps
  - Fix shutdown avcs when machine has unconfined.pp disabled
  - The host and a virtual machine can share the same printer on a usb device
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow abrt_watch_log_t to execute bin_t
  - Allow chrome sandbox to write content in ~/.config/chromium
  - Dontaudit setattr on fontconfig dir for thumb_t
  - Allow lircd to request the kernel to load module
  - Make rsync as userdom_home_manager
  - Allow rsync to search automount filesystem
  - Add fixes for pacemaker


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-57
changelog:
  - Add support for 4567/tcp port
  - Random fixes from Tuomo Soini
  - xdm wants to get init status
  - Allow programs to run in fips_mode
  - Add interface to allow the reading of all blk device nodes
  - Allow init to relabel rpcbind sock_file
  - Fix labeling for lastlog and faillog related to logrotate
  - ALlow aeolus_configserver to use TRAM port
  - Add fixes for aeolus_configserver
  - Allow snmpd to connect to snmp port
  - Allow spamd_update to create spamd_var_lib_t directories
  - Allow domains that can read sssd_public_t files to also list the directory
  - Remove miscfiles_read_localization, this is defined for all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-56
changelog:
  - Allow syslogd to request the kernel to load a module
  - Allow syslogd_t to read the network state information
  - Allow xdm_dbusd_t connect to the system DBUS
  - Add support for 7389/tcp port
  - Allow domains to read/write all inherited sockets
  - Allow staff_t to read kmsg
  - Add awstats_purge_apache_log boolean
  - Allow ksysguardproces to read /.config/Trolltech.conf
  - Allow passenger to create and append puppet log files
  - Add puppet_append_log and puppet_create_log interfaces
  - Add puppet_manage_log() interface
  - Allow tomcat domain to search tomcat_var_lib_t
  - Allow pki_tomcat_t to connect to pki_ca ports
  - Allow pegasus_t to have net_admin capability
  - Allow pegasus_t to write /sys/class/net/<interface>/flags
  - Allow mailserver_delivery to manage mail_home_rw_t lnk_files
  - Allow fetchmail to create log files
  - Allow gnomeclock to manage home config in .kde
  - Allow bittlebee to read kernel sysctls
  - Allow logrotate to list /root


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-55
changelog:
  - Fix userhelper_console_role_template()
  - Allow enabling Network Access Point service using blueman
  - Make vmware_host_t as unconfined domain
  - Allow authenticate users in webaccess via squid, using mysql as backend
  - Allow gathers to get various metrics on mounted file systems
  - Allow firewalld to read /etc/hosts
  - Fix cron_admin_role() to make sysadm cronjobs running in the sysadm_t instead of cronjob_t
  - Allow kdumpgui to read/write to zipl.conf
  - Commands needed to get mock to build from staff_t in enforcing mode
  - Allow mdadm_t to manage cgroup files
  - Allow all daemons and systemprocesses to use inherited initrc_tmp_t files
  - dontaudit ifconfig_t looking at fifo_files that are leaked to it
  - Add lableing for Quest Authentication System


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-54
changelog:
  - Fix filetrans interface definitions
  - Dontaudit xdm_t to getattr on BOINC lib files
  - Add systemd_reload_all_services() interface
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes 
  - Only stop mcsuntrustedproc from relableing files
  - Allow accountsd to dbus chat with gdm
  - Allow realmd to getattr on all fs
  - Allow logrotate to reload all services
  - Add systemd unit file for radiusd
  - Allow winbind to create samba pid dir
  - Add labeling for /var/nmbd/unexpected
  - Allow chrome and mozilla plugin to connect to msnp ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-53
changelog:
  - Fix storage_rw_inherited_fixed_disk_dev() to cover also blk_file
  - Dontaudit setfiles reading /dev/random
  - On initial boot gnomeclock is going to need to be set buy gdm
  - Fix tftp_read_content() interface
  - Random apps looking at kernel file systems
  - Testing virt with lxc requiers additional access for virsh_t
  - New allow rules requied for latest libvirt, libvirt talks directly to journald,lxc setup tool needs compromize_kernel,and we need ipc_lock in the container
  - Allow MPD to read /dev/radnom
  - Allow sandbox_web_type to read logind files which needs to read pulseaudio
  - Allow mozilla plugins to read /dev/hpet
  - Add labeling for /var/lib/zarafa-webap
  - Allow BOINC client to use an HTTP proxy for all connections
  - Allow rhsmertd to domain transition to dmidecod
  -  Allow setroubleshootd to send D-Bus msg to ABRT


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-52
changelog:
  - Define usbtty_device_t as a term_tty
  - Allow svnserve to accept a connection
  - Allow xend manage default virt_image_t type
  - Allow prelink_cron_system_t to overide user componant when executing cp
  - Add labeling for z-push
  - Gnomeclock sets the realtime clock
  - Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
  - Allow lxc domains to use /dev/random and /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-51
changelog:
  - Add port defintion for tcp/9000
  - Fix labeling for /usr/share/cluster/checkquorum to label also checkquorum.wdmd
  - Add rules and labeling for $HOME/cache/\.gstreamer-.* directory
  - Add support for CIM provider openlmi-networking which uses NetworkManager dbus API
  - Allow shorewall_t to create netlink_socket
  - Allow krb5admind to block suspend
  - Fix labels on /var/run/dlm_controld /var/log/dlm_controld
  - Allow krb5kdc to block suspend
  - gnomessytemmm_t needs to read /etc/passwd
  - Allow cgred to read all sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-50
changelog:
  - Allow all domains to read /proc/sys/vm/overcommit_memory
  - Make proc_numa_t an MLS Trusted Object
  - Add /proc/numactl support for confined users
  - Allow ssh_t to connect to any port > 1023
  - Add openvswitch domain
  - Pulseaudio tries to create directories in gnome_home_t directories
  - New ypbind pkg wants to search /var/run which is caused by sd_notify
  - Allow NM to read certs on NFS/CIFS using use_nfs_*, use_samba_* booleans
  - Allow sanlock to read /dev/random
  - Treat php-fpm with httpd_t
  - Allow domains that can read named_conf_t to be able to list the directories
  - Allow winbind to create sock files in /var/run/samba


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-49
changelog:
  - Add smsd policy
  - Add support for OpenShift sbin labelin
  - Add boolean to allow virt to use rawip
  - Allow mozilla_plugin to read all file systems with noxattrs support
  - Allow kerberos to write on anon_inodefs fs
  - Additional access required by fenced
  - Add filename transitions for passwd.lock/group.lock
  - UPdate man pages
  - Create coolkey directory in /var/cache with the correct label


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-48
changelog:
  - Fix label on /etc/group.lock
  - Allow gnomeclock to create lnk_file in /etc
  - label /root/.pki as a home_cert_t
  - Add interface to make sure rpcbind.sock is created with the correct label
  - Add definition for new directory /var/lib/os-probe and bootloader wants to read udev rules
  - opendkim should be a part of milter
  - Allow libvirt to set the kernel sched algorythm
  - Allow mongod to read sysfs_t
  - Add authconfig policy
  - Remove calls to miscfiles_read_localization all domains get this
  - Allow virsh_t to read /root/.pki/ content
  - Add label for log directory under /var/www/stickshift


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-47
changelog:
  - Allow getty to setattr on usb ttys
  - Allow sshd to search all directories for sshd_home_t content
  - Allow staff domains to send dbus messages to kdumpgui
  - Fix labels on /etc/.pwd.lock and friends to be passwd_file_t
  - Dontaudit setfiles reading urand
  - Add files_dontaudit_list_tmp() for domains to which we added sys_nice/setsched
  - Allow staff_gkeyringd_t to read /home/$USER/.local/share/keyrings dir
  - Allow systemd-timedated to read /dev/urandom
  - Allow entropyd_t to read proc_t (meminfo)
  - Add unconfined munin plugin
  - Fix networkmanager_read_conf() interface
  - Allow blueman to list /tmp which is needed by sys_nic/setsched
  - Fix label of /etc/mail/aliasesdb-stamp
  - numad is searching cgroups
  - realmd is communicating with networkmanager using dbus
  - Lots of fixes to try to get kdump to work


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-46
changelog:
  - Allow loging programs to dbus chat with realmd
  - Make apache_content_template calling as optional
  - realmd is using policy kit


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-45
changelog:
  - Add new selinuxuser_use_ssh_chroot boolean
  - dbus needs to be able to read/write inherited fixed disk device_t passed through it
  - Cleanup netutils process allow rule
  - Dontaudit leaked fifo files from openshift to ping
  - sanlock needs to read mnt_t lnk files
  - Fail2ban needs to setsched and sys_nice


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-44
changelog:
  - Change default label of all files in /var/run/rpcbind
  - Allow sandbox domains (java) to read hugetlbfs_t
  - Allow awstats cgi content to create tmp files and read apache log files
  - Allow setuid/setgid for cupsd-config
  - Allow setsched/sys_nice pro cupsd-config
  -  Fix /etc/localtime sym link to be labeled locale_t
  - Allow sshd to search postgresql db t since this is a homedir
  - Allow xwindows users to chat with realmd
  - Allow unconfined domains to configure all files and null_device_t service


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-42
changelog:
  - pki is leaking which we dontaudit until a pki code fix
  - Allow setcap for arping
  - Update man pages
  - Add labeling for /usr/sbin/mcollectived
  - pki fixes
  - Allow smokeping to execute fping in the netutils_t domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-41
changelog:
  - Allow mount to relabelfrom unlabeled file systems
  - systemd_logind wants to send and receive messages from devicekit disk over dbus to make connected mouse working
  - Add label to get bin files under libreoffice labeled correctly
  - Fix interface to allow executing of base_ro_file_type
  - Add fixes for realmd
  - Update pki policy
  - Add tftp_homedir boolean
  - Allow blueman sched_setscheduler
  - openshift user domains wants to r/w ssh tcp sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-40
changelog:
  - Additional requirements for disable unconfined module when booting
  - Fix label of systemd script files
  - semanage can use -F /dev/stdin to get input
  - syslog now uses kerberos keytabs
  - Allow xserver to compromise_kernel access
  -  Allow nfsd to write to mount_var_run_t when running the mount command
  - Add filename transition rule for bin_t directories
  - Allow files to read usr_t lnk_files
  - dhcpc wants chown
  - Add support for new openshift labeling
  - Clean up for tunable+optional statements
  - Add labeling for /usr/sbin/mkhomedir_helper
  - Allow antivirus domain to managa amavis spool files
  - Allow rpcbind_t to read passwd 
  - Allow pyzor running as spamc to manage amavis spool


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-39
changelog:
  - Add interfaces to read kernel_t proc info
  - Missed this version of exec_all
  - Allow anyone who can load a kernel module to compromise kernel
  - Add oddjob_dbus_chat to openshift apache policy
  - Allow chrome_sandbox_nacl_t to send signals to itself
  - Add unit file support to usbmuxd_t
  - Allow all openshift domains to read sysfs info
  - Allow openshift domains to getattr on all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-37
changelog:
  - Allow xdm to search all file systems
  - Add interface to allow the config of all files
  - Add rngd policy
  - Remove kgpg as a gpg_exec_t type
  - Allow plymouthd to block suspend
  - Allow systemd_dbus to config any file
  - Allow system_dbus_t to configure all services
  - Allow freshclam_t to read usr_files
  - varnishd requires execmem to load modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-36
changelog:
  - Allow semanage to verify types
  - Allow sudo domain to execute user home files
  - Allow session_bus_type to transition to user_tmpfs_t
  - Add dontaudit caused by yum updates
  - Implement pki policy but not activated


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-35
changelog:
  - tuned wants to getattr on all filesystems
  - tuned needs also setsched. The build is needed for test day


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-34
changelog:
  - Add policy for qemu-qa
  - Allow razor to write own config files
  -  Add an initial antivirus policy to collect all antivirus program
  - Allow qdisk to read usr_t
  - Add additional caps for vmware_host
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Dontaudit leaked files into mozilla_plugin_config_t
  - Allow wdmd to getattr on tmpfs
  - Allow realmd to use /dev/random
  - allow containers to send audit messages
  - Allow root mount any file via loop device with enforcing mls policy
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Make userdom_dontaudit_write_all_ not allow open
  - Allow init scripts to read all unit files
  - Add support for saphostctrl ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-33
changelog:
  - Add kernel_read_system_state to sandbox_client_t
  - Add some of the missing access to kdumpgui
  - Allow systemd_dbusd_t to status the init system
  - Allow vmnet-natd to request the kernel to load a module
  - Allow gsf-office-thum to append .cache/gdm/session.log
  - realmd wants to read .config/dconf/user
  - Firewalld wants sys_nice/setsched
  - Allow tmpreaper to delete mandb cache files
  - Firewalld wants sys_nice/setsched
  - Allow firewalld to perform  a DNS name resolution
  - Allown winbind to read /usr/share/samba/codepages/lowcase.dat
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - Fix authlogin_yubike boolean
  - Extend smbd_selinux man page to include samba booleans
  - Allow dhcpc to execute consoletype
  - Allow ping to use inherited tmp files created in init scripts
  - On full relabel with unconfined domain disabled, initrc was running some chcon's
  - Allow people who delete man pages to delete mandb cache files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-31
changelog:
  - Add new mandb policy
  - ALlow systemd-tmpfiles_t to relabel mandb_cache_t
  - Allow logrotate to start all unit files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-30
changelog:
  - Add fixes for ctbd
  - Allow nmbd to stream connect to ctbd
  - Make cglear_t as nsswitch_domain
  - Fix bogus in interfaces
  - Allow openshift to read/write postfix public pipe
  - Add postfix_manage_spool_maildrop_files() interface
  - stickshift paths have been renamed to openshift
  - gnome-settings-daemon wants to write to /run/systemd/inhibit/ pipes
  - Update man pages, adding ENTRYPOINTS


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-29
changelog:
  -  Add mei_device_t
  - Make sure gpg content in homedir created with correct label
  - Allow dmesg to write to abrt cache files
  - automount wants to search  virtual memory sysctls
  - Add support for hplip logs stored in /var/log/hp/tmp
  - Add labeling for /etc/owncloud/config.php
  - Allow setroubleshoot to send analysys to syslogd-journal
  - Allow virsh_t to interact with new fenced daemon
  - Allow gpg to write to /etc/mail/spamassassiin directories
  - Make dovecot_deliver_t a mail server delivery type
  - Add label for /var/tmp/DNS25


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-27
changelog:
  - Remove init_systemd and init_upstart boolean, Move init_daemon_domain and init_system_domain to use attributes
  - Add attribute to all base os types.  Allow all domains to read all ro base OS types


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-24
changelog:
  - dbus needs to start getty unit files
  - Add interface to allow system_dbusd_t to start the poweroff service
  - xdm wants to exec telepathy apps
  - Allow users to send messages to systemdlogind
  - Additional rules needed for systemd and other boot apps
  - systemd wants to list /home and /boot
  - Allow gkeyringd to write dbus/conf file
  - realmd needs to read /dev/urand
  - Allow readahead to delete /.readahead if labeled root_t, might get created before policy is loaded


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-23
changelog:
  - Fixes to safe more rules
  - Re-write tomcat_domain_template()
  - Fix passenger labeling
  - Allow all domains to read man pages
  - Add ephemeral_port_t to the 'generic' port interfaces
  - Fix the names of postgresql booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-22
changelog:
  - Stop using attributes form netlabel_peer and syslog, auth_use_nsswitch setsup netlabel_peer
  - Move netlable_peer check out of booleans
  - Remove call to recvfrom_netlabel for kerberos call
  - Remove use of attributes when calling syslog call 
  - Move -miscfiles_read_localization to domain.te to save hundreds of allow rules
  - Allow all domains to read locale files.  This eliminates around 1500 allow rules- Cleanup nis_use_ypbind_uncond interface
  - Allow rndc to block suspend
  - tuned needs to modify the schedule of the kernel
  - Allow svirt_t domains to read alsa configuration files
  - ighten security on irc domains and make sure they label content in homedir correctly
  - Add filetrans_home_content for irc files
  - Dontaudit all getattr access for devices and filesystems for sandbox domains
  - Allow stapserver to search cgroups directories
  - Allow all postfix domains to talk to spamd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-21
changelog:
  - Add interfaces to ignore setattr until kernel fixes this to be checked after the DAC check
  - Change pam_t to pam_timestamp_t
  - Add dovecot_domain attribute and allow this attribute block_suspend capability2
  - Add sanlock_use_fusefs boolean
  - numad wants send/recieve msg
  - Allow rhnsd to send syslog msgs
  - Make piranha-pulse as initrc domain
  - Update openshift instances to dontaudit setattr until the kernel is fixed.


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-20
changelog:
  -  Fix auth_login_pgm_domain() interface to allow domains also managed user tmp dirs because of #856880 related to pam_systemd
  - Remove pam_selinux.8 which conflicts with man page owned by the pam package
  - Allow glance-api to talk to mysql
  - ABRT wants to read Xorg.0.log if if it detects problem with Xorg
  - Fix gstreamer filename trans. interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-18
changelog:
  - Allow postalias to read postfix config files
  - Allow man2html to read man pages
  - Allow rhev-agentd to search all mountpoints
  - Allow rhsmcertd to read /dev/random
  - Add tgtd_stream_connect() interface
  - Add cyrus_write_data() interface
  - Dontaudit attempts by sandboxX clients connectiing to the xserver_port_t
  - Add port definition for tcp/81 as http_port_t
  - Fix /dev/twa labeling
  - Allow systemd to read modules config


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-17
changelog:
  - Merge openshift policy
  - Allow xauth to read /dev/urandom
  - systemd needs to relabel content in /run/systemd directories
  - Files unconfined should be able to perform all services on all files
  - Puppet tmp file can be leaked to all domains
  - Dontaudit rhsmcertd-worker to search /root/.local
  - Allow chown capability for zarafa domains
  -  Allow system cronjobs to runcon into openshift domains
  - Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-16
changelog:
  - nmbd wants to create /var/nmbd
  -  Stop transitioning out of anaconda and firstboot, just causes AVC messages
  - Allow clamscan to read /etc files
  - Allow bcfg2 to bind cyphesis port
  - heartbeat should be run as rgmanager_t instead of corosync_t
  - Add labeling for /etc/openldap/certs
  - Add labeling for /opt/sartest directory
  - Make crontab_t as userdom home reader
  - Allow tmpreaper to list admin_home dir
  - Add defition for imap_0 replay cache file
  - Add support for gitolite3
  - Allow virsh_t to send syslog messages
  - allow domains that can read samba content to be able to list the directories also
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd
  - Separate out sandbox from sandboxX policy so we can disable it by default
  - Run dmeventd as lvm_t
  - Mounting on any directory requires setattr and write permissions
  - Fix use_nfs_home_dirs() boolean
  - New labels for pam_krb5
  - Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-15
changelog:
  - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs
  - Allow domains that can read etc_t to read etc_runtime_t 
  - Allow all domains to use inherited tmpfiles


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-14
changelog:
  - Allow realmd to read resolv.conf
  - Add pegasus_cache_t type
  - Label /usr/sbin/fence_virtd as virsh_exec_t
  - Add policy for pkcsslotd
  - Add support for cpglockd
  - Allow polkit-agent-helper to read system-auth-ac
  - telepathy-idle wants to read gschemas.compiled
  - Allow plymouthd to getattr on fs_t
  - Add slpd policy
  - Allow ksysguardproces to read/write config_usr_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-12
changelog:
  - Add file name transitions for ttyACM0
  - spice-vdagent(d)'s are going to log over to syslog
  - Add sensord policy
  - Add more fixes for passenger policy related to puppet
  - Allow wdmd to create wdmd_tmpfs_t
  - Fix labeling for /var/run/cachefilesd\.pid
  - Add thumb_tmpfs_t files type


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-11
changelog:
  - Allow svirt domains to manage the network since this is containerized
  - Allow svirt_lxc_net_t to send audit messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-10
changelog:
  - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working
  - Allow dlm_controld to execute dlm_stonith labeled as bin_t
  - Allow GFS2 working on F17
  - Abrt needs to execute dmesg
  - Allow jockey to list the contents of modeprobe.d
  - Add policy for lightsquid as squid_cron_t
  - Mailscanner is creating files and directories in /tmp
  - dmesg is now reading /dev/kmsg
  - Allow xserver to communicate with secure_firmware
  - Allow fsadm tools (fsck) to read /run/mount contnet
  - Allow sysadm types to read /dev/kmsg
  -


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-9
changelog:
  - Allow postfix, sssd, rpcd to block_suspend
  - udev seems to need secure_firmware capability
  - Allow virtd to send dbus messages to firewalld so it can configure the firewall


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-8
changelog:
  - Fix labeling of content in /run created by virsh_t
  - Allow condor domains to read kernel sysctls
  - Allow condor_master to connect to amqp
  - Allow thumb drives to create shared memory and semaphores
  - Allow abrt to read mozilla_plugin config files
  - Add labels for lightsquid
  - Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow
  - dovecot_auth_t uses ldap for user auth
  - Allow domains that can read dhcp_etc_t to read lnk_files
  - Add more then one watchdog device
  - Allow useradd_t to manage etc_t files so it can rename it and edit them
  - Fix invalid class dir should be fifo_file
  - Move /run/blkid to fsadm and make sure labeling is correct


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-7
changelog:
  - Fix bogus regex found by eparis
  - Fix manage run interface since lvm needs more access
  - syslogd is searching cgroups directory
  - Fixes to allow virt-sandbox-service to manage lxc var run content


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-6
changelog:
  - Fix Boolean settings
  - Add new libjavascriptcoregtk as textrel_shlib_t
  - Allow xdm_t to create xdm_home_t directories
  - Additional access required for systemd
  - Dontaudit mozilla_plugin attempts to ipc_lock
  - Allow tmpreaper to delete unlabeled files
  - Eliminate screen_tmp_t and allow it to manage user_tmp_t
  - Dontaudit mozilla_plugin_config_t to append to leaked file descriptors
  - Allow web plugins to connect to the asterisk ports
  - Condor will recreate the lock directory if it does not exist
  - Oddjob mkhomedir needs to connectto user processes
  - Make oddjob_mkhomedir_t a userdom home manager


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-5
changelog:
  - Put placeholder back in place for proper numbering of capabilities
  - Systemd also configures init scripts


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-4
changelog:
  - Fix ecryptfs interfaces
  - Bootloader seems to be trolling around /dev/shm and /dev
  - init wants to create /etc/systemd/system-update.target.wants
  - Fix systemd_filetrans call to move it out of tunable
  - Fix up policy to work with systemd userspace manager
  - Add secure_firmware capability and remove bogus epolwakeup
  - Call seutil_*_login_config interfaces where should be needed
  - Allow rhsmcertd to send signal to itself
  - Allow thin domains to send signal to itself
  - Allow Chrome_ChildIO to read dosfs_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2
changelog:
  - Add new type selinux_login_config_t for /etc/selinux/<type>/logins/
  - Additional fixes for seutil_manage_module_store()
  - dbus_system_domain() should be used with optional_policy
  - Fix svirt to be allowed to use fusefs file system
  - Allow login programs to read /run/ data created by systemd_login
  - sssd wants to write /etc/selinux/<policy>/logins/ for SELinux PAM module
  - Fix svirt to be allowed to use fusefs file system
  - Allow piranha domain to use nsswitch
  - Sanlock needs to send Kill Signals to non root processes
  - Pulseaudio wants to execute /run/user/PID/.orc


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-1
changelog:
  - Fix saslauthd when it tries to read /etc/shadow
  - Label gnome-boxes as a virt homedir
  - Need to allow svirt_t ability to getattr on nfs_t file systems
  - Update sanlock policy to solve all AVC's
  - Change confined users can optionally manage virt content
  - Handle new directories under ~/.cache
  - Add block suspend to appropriate domains
  - More rules required for containers
  - Allow login programs to read /run/ data created by systemd_logind
  - Allow staff users to run svirt_t processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-13
changelog:
  - Add systemd_logind_inhibit_var_run_t attribute
  - Remove corenet_all_recvfrom_unlabeled() for non-contrib policies because we moved it to domain.if for all domain_type
  - Add interface for mysqld to dontaudit signull to all processes
  - Label new /var/run/journal directory correctly
  - Allow users to inhibit suspend via systemd
  - Add new type for the /var/run/inhibit directory
  - Add interface to send signull to systemd_login so avahi can send them
  - Allow systemd_passwd to send syslog messages
  - Remove corenet_all_recvfrom_unlabeled() calling fro policy files
  - Allow       editparams.cgi running as httpd_bugzilla_script_t to read /etc/group
  - Allow smbd to read cluster config
  - Add additional labeling for passenger
  - Allow dbus to inhibit suspend via systemd
  - Allow avahi to send signull to systemd_login


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12
changelog:
  - Add interface to dontaudit getattr access on sysctls
  - Allow sshd to execute /bin/login
  - Looks like xdm is recreating the xdm directory in ~/.cache/ on login
  - Allow syslog to use the leaked kernel_t unix_dgram_socket from system-jounald
  -  Fix semanage to work with unconfined domain disabled on F18
  - Dontaudit attempts by mozilla plugins to getattr on all kernel sysctls
  - Virt seems to be using lock files
  - Dovecot seems to be searching directories of every mountpoint
  - Allow jockey to read random/urandom, execute shell and install third-party drivers
  - Add aditional params to allow cachedfiles to manage its content
  - gpg agent needs to read /dev/random
  - The kernel hands an svirt domains /SYSxxxxx which is a tmpfs that httpd wants to read and write
  - Add a bunch of dontaudit rules to quiet svirt_lxc domains
  - Additional perms needed to run svirt_lxc domains
  - Allow cgclear to read cgconfig
  - Allow sys_ptrace capability for snmp
  - Allow freshclam to read /proc
  - Allow procmail to manage /home/user/Maildir content
  - Allow NM to execute wpa_cli
  - Allow amavis to read clamd system state
  - Regenerate man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-10
changelog:
  - Add realmd and stapserver policies
  - Allow useradd to manage stap-server lib files
  - Tighten up capabilities for confined users
  - Label /etc/security/opasswd as shadow_t
  - Add label for /dev/ecryptfs
  - Allow condor_startd_t to start sshd with the ranged
  - Allow lpstat.cups to read fips_enabled file
  - Allow pyzor running as spamc_t to create /root/.pyzor directory
  - Add labelinf for amavisd-snmp init script
  - Add support for amavisd-snmp
  - Allow fprintd sigkill self
  - Allow xend (w/o libvirt) to start virtual machines
  - Allow aiccu to read /etc/passwd
  - Allow condor_startd to Make specified domain MCS trusted for setting any category set for the processes it executes
  - Add condor_startd_ranged_domtrans_to() interface
  - Add ssd_conf_t for /etc/sssd
  - accountsd needs to fchown some files/directories
  - Add ICACLient and zibrauserdata as mozilla_filetrans_home_content
  - SELinux reports afs_t needs dac_override to read /etc/mtab, even though everything works, adding dontaudit
  - Allow xend_t to read the /etc/passwd file


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-9
changelog:
  - Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
  - Add init_access_check() interface
  - Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
  - Allow tcpdump to create a netlink_socket
  - Label newusers like useradd
  - Change xdm log files to be labeled xdm_log_t
  - Allow sshd_t with privsep to work in MLS
  - Allow freshclam to update databases thru HTTP proxy
  - Allow s-m-config to access check on systemd
  - Allow abrt to read public files by default
  - Fix amavis_create_pid_files() interface
  - Add labeling and filename transition for dbomatic.log
  - Allow system_dbusd_t to stream connect to bluetooth, and use its socket
  - Allow amavisd to execute fsav
  - Allow tuned to use sys_admin and sys_nice capabilities
  - Add php-fpm policy from Bryan
  - Add labeling for aeolus-configserver-thinwrapper
  - Allow thin domains to execute shell
  - Fix gnome_role_gkeyringd() interface description
  - Lot of interface fixes
  - Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
  - Allow OpenMPI job to use kerberos
  - Make deltacloudd_t as nsswitch_domain
  - Allow xend_t to run lsscsi
  - Allow qemu-dm running as xend_t to create tun_socket
  - Add labeling for /opt/brother/Printers(.*/)?inf
  - Allow jockey-backend to read pyconfig-64.h labeled as usr_t
  - Fix clamscan_can_scan_system boolean
  - Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8
changelog:
  - initrc is calling exportfs which is not confined so it attempts to read nfsd_files
  - Fixes for passenger running within openshift.
  - Add labeling for all tomcat6 dirs
  - Add support for tomcat6
  - Allow cobblerd to read /etc/passwd
  - Allow jockey to read sysfs and and execute binaries with bin_t
  - Allow thum to use user terminals
  - Allow cgclear to read cgconfig config files
  - Fix bcf2g.fc
  - Remove sysnet_dns_name_resolve() from policies where auth_use_nsswitch() is used for other domains
  - Allow dbomatic to execute ruby
  - abrt_watch_log should be abrt_domain
  - Allow mozilla_plugin to connect to gatekeeper port


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7
changelog:
  - add ptrace_child access to process
  - remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
  - Allow boinc domains to manage boinc_lib_t lnk_files
  - Add support for boinc-client.service unit file
  - Add support for boinc.log
  - Allow mozilla_plugin execmod on mozilla home files if allow_ex
  - Allow dovecot_deliver_t to read dovecot_var_run_t
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Move thin policy out from cloudform.pp and add a new thin poli
  - pacemaker needs to communicate with corosync streams
  - abrt is now started on demand by dbus
  - Allow certmonger to talk directly to Dogtag servers
  - Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
  - Allow mozila_plugin to execute gstreamer home files
  - Allow useradd to delete all file types stored in the users hom
  - rhsmcertd reads the rpm database
  - Add support for lightdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6
changelog:
  - Add tomcat policy
  - Remove pyzor/razor policy
  - rhsmcertd reads the rpm database
  - Dontaudit  thumb to setattr on xdm_tmp dir
  - Allow wicd to execute ldconfig in the networkmanager_t domain
  - Add /var/run/cherokee\.pid labeling
  - Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
  - Allow postfix-master to r/w pipes other postfix domains
  - Allow snort to create netlink_socket
  - Add kdumpctl policy
  - Allow firstboot to create tmp_t files/directories
  - /usr/bin/paster should not be labeled as piranha_exec_t
  - remove initrc_domain from tomcat
  - Allow ddclient to read /etc/passwd
  - Allow useradd to delete all file types stored in the users homedir
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
  - Transition xauth files within firstboot_tmp_t
  - Fix labeling of /run/media to match /media
  - Label all lxdm.log as xserver_log_t
  - Add port definition for mxi port
  - Allow local_login_t to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5
changelog:
  - apcupsd needs to read /etc/passwd
  - Sanlock allso sends sigkill
  - Allow glance_registry to connect to the mysqld port
  - Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
  - Allow firefox plugins/flash to connect to port 1234
  - Allow mozilla plugins to delete user_tmp_t files
  - Add transition name rule for printers.conf.O
  - Allow virt_lxc_t to read urand
  - Allow systemd_loigind to list gstreamer_home_dirs
  - Fix labeling for /usr/bin
  - Fixes for cloudform services
    * support FIPS
  - Allow polipo to work as web caching
  - Allow chfn to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4
changelog:
  - Add support for ecryptfs
    * ecryptfs does not support xattr
    * we need labeling for HOMEDIR
  - Add policy for (u)mount.ecryptfs*
  - Fix labeling of kerbero host cache files, allow rpc.svcgssd to manage host cache
  - Allow dovecot to manage Maildir content, fix transitions to Maildir
  - Allow postfix_local to transition to dovecot_deliver
  - Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
  - Cleanup interface definitions
  - Allow apmd to change with the logind daemon
  - Changes required for sanlock in rhel6
  - Label /run/user/apache as httpd_tmp_t
  - Allow thumb to use lib_t as execmod if boolean turned on
  - Allow squid to create the squid directory in /var with the correct labe
  - Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
  - Allow virtd to exec xend_exec_t without transition
  - Allow virtd_lxc_t to unmount all file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3
changelog:
  - PolicyKit path has changed
  - Allow httpd connect to dirsrv socket
  - Allow tuned to write generic kernel sysctls
  - Dontaudit logwatch to gettr on /dev/dm-2
  - Allow policykit-auth to manage kerberos files
  - Make condor_startd and rgmanager as initrc domain
  - Allow virsh to read /etc/passwd
  - Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
  - xdm now needs to execute xsession_exec_t
  - Need labels for /var/lib/gdm
  - Fix files_filetrans_named_content() interface
  - Add new attribute - initrc_domain
  - Allow systemd_logind_t to signal, signull, sigkill all processes
  - Add filetrans rules for etc_runtime files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1
changelog:
  - Mass merge with upstream
    * new policy topology to include contrib policy modules
    * we have now two base policy patches


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128
changelog:
  - Fix description of authlogin_nsswitch_use_ldap
  - Fix transition rule for rhsmcertd_t needed for RHEL7
  - Allow useradd to list nfs state data
  - Allow openvpn to manage its log file and directory
  - We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
  - Allow thumb to use nvidia devices
  -  Allow local_login to create user_tmp_t files for kerberos
  - Pulseaudio needs to read systemd_login /var/run content
  - virt should only transition named system_conf_t config files
  - Allow  munin to execute its plugins
  - Allow nagios system plugin to read /etc/passwd
  - Allow plugin to connect to soundd port
  - Fix httpd_passwd to be able to ask passwords
  - Radius servers can use ldap for backing store
  - Seems to need to mount on /var/lib for xguest polyinstatiation to work.
  - Allow systemd_logind to list the contents of gnome keyring
  - VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
  - Add policy for isns-utils


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127
changelog:
  - Add policy for subversion daemon
  - Allow boinc to read passwd
  - Allow pads to read kernel network state
  - Fix man2html interface for sepolgen-ifgen
  - Remove extra /usr/lib/systemd/system/smb
  - Remove all /lib/systemd and replace with /usr/lib/systemd
  - Add policy for man2html
  - Fix the label of kerberos_home_t to krb5_home_t
  - Allow mozilla plugins to use Citrix
  - Allow tuned to read /proc/sys/kernel/nmi_watchdog
  - Allow tune /sys options via systemd's tmpfiles.d "w" type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126
changelog:
  - Dontaudit lpr_t to read/write leaked mozilla tmp files
  - Add file name transition for .grl-podcasts directory
  - Allow corosync to read user tmp files
  - Allow fenced to create snmp lib dirs/files
  - More fixes for sge policy
  - Allow mozilla_plugin_t to execute any application
  - Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
  - Allow mongod to read system state information
  -  Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
  - Allow polipo to manage polipo_cache dirs
  - Add jabbar_client port to mozilla_plugin_t
  - Cleanup procmail policy
  - system bus will pass around open file descriptors on files that do not have labels on them
  - Allow l2tpd_t to read system state
  - Allow tuned to run ls /dev
  - Allow sudo domains to read usr_t files
  - Add label to machine-id 
  - Fix corecmd_read_bin_symlinks cut and paste error


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125
changelog:
  - Fix pulseaudio port definition
  - Add labeling for condor_starter
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Allow prelink_cron_system_t to getpw calls
  - Allow sudo domains to manage kerberos rcache files
  - Allow user_mail_domains to work with courie
  - Port definitions necessary for running jboss apps within openshift
  -  Add support for openstack-nova-metadata-api
  - Add support for nova-console*
  - Add support for openstack-nova-xvpvncproxy
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd
  - Fix auth_role() interface
  - Allow numad to read sysfs
  - Allow matahari-rpcd to execute shell
  - Add label for ~/.spicec
  - xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
  - Devicekit_disk wants to read the logind sessions file when writing a cd
  - Add fixes for condor to make condor jobs working correctly
  - Change label of /var/log/rpmpkgs to cron_log_t
  - Access requires to allow systemd-tmpfiles --create to work.
  - Fix obex to be a user application started by the session bus.
  - Add additional filename trans rules for kerberos
  - Fix /var/run/heartbeat labeling
  - Allow apps that are managing rcache to file trans correctly
  - Allow openvpn to authenticate against ldap server
  - Containers need to listen to network starting and stopping events


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123
changelog:
  - Fix zarafa labeling
  - Allow guest_t to fix labeling
  - corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - add lxc_contexts
  - Allow accountsd to read /proc
  - Allow restorecond to getattr on all file sytems
  - tmpwatch now calls getpw
  - Allow apache daemon to transition to pwauth domain
  - Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
  - The obex socket seems to be a stream socket
  - dd label for /var/run/nologin


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122
changelog:
  - Allow jetty running as httpd_t to read hugetlbfs files
  - Allow sys_nice and setsched for rhsmcertd
  - Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
  - Allow setfiles to append to xdm_tmp_t
  - Add labeling for /export as a usr_t directory
  - Add labels for .grl files created by gstreamer


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121
changelog:
  - Add labeling for /usr/share/jetty/bin/jetty.sh
  - Add jetty policy which contains file type definitios
  - Allow jockey to use its own fifo_file and make this the default for all domains
  - Allow mozilla_plugins to use spice (vnc_port/couchdb)
  - asterisk wants to read the network state
  - Blueman now uses /var/lib/blueman- Add label for nodejs_debug
  - Allow mozilla_plugin_t to create ~/.pki directory and content


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120
changelog:
  - Add clamscan_can_scan_system boolean
  - Allow mysqld to read kernel network state
  - Allow sshd to read/write condor lib files
  - Allow sshd to read/write condor-startd tcp socket
  - Fix description on httpd_graceful_shutdown
  - Allow glance_registry to communicate with mysql
  - dbus_system_domain is using systemd to lauch applications
  - add interfaces to allow domains to send kill signals to user mail agents
  - Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
  - Lots of new access required for secure containers
  - Corosync needs sys_admin capability
  - ALlow colord to create shm
  - .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
  - Add boolean to control whether or not mozilla plugins can create random content in the users homedir
  -  Add new interface to allow domains to list msyql_db directories, needed for libra
  - shutdown has to be allowed to delete etc_runtime_t
  - Fail2ban needs to read /etc/passwd
  -  Allow ldconfig to create /var/cache/ldconfig
  - Allow tgtd to read hardware state information
  - Allow collectd to create packet socket
  - Allow chronyd to send signal to itself
  - Allow collectd to read /dev/random
  - Allow collectd to send signal to itself
  - firewalld needs to execute restorecon
  - Allow restorecon and other login domains to execute restorecon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119
changelog:
  - Allow logrotate to getattr on systemd unit files
  - Add support for tor systemd unit file
  - Allow apmd to create /var/run/pm-utils with the correct label
  - Allow l2tpd to send sigkill to pppd
  - Allow pppd to stream connect to l2tpd
  - Add label for scripts in /etc/gdm/
  - Allow systemd_logind_t to ignore mcs constraints on sigkill
  - Fix files_filetrans_system_conf_named_files() interface
  - Add labels for /usr/share/wordpress/wp-includes/*.php
  - Allow cobbler to get SELinux mode and booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118
changelog:
  - Add unconfined_execmem_exec_t as an alias to bin_t
  - Allow fenced to read snmp var lib files, also allow it to read usr_t
  - ontaudit access checks on all executables from mozilla_plugin
  - Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
  - Allow systemd_tmpfiles_t to getattr all pipes and sockets
  - Allow glance-registry to send system log messages
  - semanage needs to manage mock lib files/dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117
changelog:
  - Add policy for abrt-watch-log
  - Add definitions for jboss_messaging ports
  - Allow systemd_tmpfiles to manage printer devices
  - Allow oddjob to use nsswitch
  - Fix labeling of log files for postgresql
  - Allow mozilla_plugin_t to execmem and execstack by default
  - Allow firewalld to execute shell
  - Fix /etc/wicd content files to get created with the correct label
  - Allow mcelog to exec shell
  - Add ~/.orc as a gstreamer_home_t
  - /var/spool/postfix/lib64 should be labeled lib_t
  - mpreaper should be able to list all file system labeled directories
  - Add support for apache to use openstack
  - Add labeling for /etc/zipl.conf and zipl binary
  - Turn on allow_execstack and turn off telepathy transition for final release


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116
changelog:
  - More access required for virt_qmf_t
  - Additional assess required for systemd-logind to support multi-seat
  - Allow mozilla_plugin to setrlimit
  - Revert changes to fuse file system to stop deadlock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115
changelog:
  - Allow condor domains to connect to ephemeral ports
  - More fixes for condor policy
  - Allow keystone to stream connect to mysqld
  - Allow mozilla_plugin_t to read generic USB device to support GPS devices
  - Allow thum to file name transition gstreamer home content
  - Allow thum to read all non security files
  - Allow glance_api_t to connect to ephemeral ports
  - Allow nagios plugins to read /dev/urandom
  - Allow syslogd to search postfix spool to support postfix chroot env
  - Fix labeling for /var/spool/postfix/dev
  - Allow wdmd chown
  - Label .esd_auth as pulseaudio_home_t
  - Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114
changelog:
  - Add support for clamd+systemd
  - Allow fresclam to execute systemctl to handle clamd
  - Change labeling for /usr/sbin/rpc.ypasswd.env
  	- Allow yppaswd_t to execute yppaswd_exec_t
  	- Allow yppaswd_t to read /etc/passwd
  - Gnomekeyring socket has been moved to /run/user/USER/
  - Allow samba-net to connect to ldap port
  - Allow signal for vhostmd
  - allow mozilla_plugin_t to read user_home_t socket
  - New access required for secure Linux Containers
  - zfs now supports xattrs
  - Allow quantum to execute sudo and list sysfs
  - Allow init to dbus chat with the firewalld
  - Allow zebra to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113
changelog:
  - Allow svirt_t to create content in the users homedir under ~/.libvirt
  - Fix label on /var/lib/heartbeat
  - Allow systemd_logind_t to send kill signals to all processes started by a user
  - Fuse now supports Xattr Support


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112
changelog:
  - upowered needs to setsched on the kernel
  - Allow mpd_t to manage log files
  - Allow xdm_t to create /var/run/systemd/multi-session-x
  - Add rules for missedfont.log to be used by thumb.fc
  - Additional access required for virt_qmf_t
  - Allow dhclient to dbus chat with the firewalld
  - Add label for lvmetad
  - Allow systemd_logind_t to remove userdomain sock_files
  - Allow cups to execute usr_t files
  - Fix labeling on nvidia shared libraries
  - wdmd_t needs access to sssd and /etc/passwd
  - Add boolean to allow ftp servers to run in passive mode
  - Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
  - Fix using httpd_use_fusefs
  - Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111
changelog:
  - Rename rdate port to time port, and allow gnomeclock to connect to it
  - We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
  - /etc/auto.* should be labeled bin_t
  - Add httpd_use_fusefs boolean
  - Add fixes for heartbeat
  - Allow sshd_t to signal processes that it transitions to
  - Add condor policy
  - Allow svirt to create monitors in ~/.libvirt
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Lot of fixes for cfengine


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110
changelog:
  - /var/run/postmaster.* labeling is no longer needed
  - Alllow drbdadmin to read /dev/urandom
  - l2tpd_t seems to use ptmx
  - group+ and passwd+ should be labeled as /etc/passwd
  - Zarafa-indexer is a socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109
changelog:
  - Ensure lastlog is labeled correctly
  - Allow accountsd to read /proc data about gdm
  - Add fixes for tuned
  - Add bcfg2 fixes which were discovered during RHEL6 testing
  - More fixes for gnome-keyring socket being moved
  - Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
  - Fix description for files_dontaudit_read_security_files() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108
changelog:
  - Add new policy and man page for bcfg2
  - cgconfig needs to use getpw calls
  - Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
  - gnome-keyring wants to create a directory in cache_home_t
  - sanlock calls getpw


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107
changelog:
  - Add numad policy and numad man page
  - Add fixes for interface bugs discovered by SEWatch
  - Add /tmp support for squid
  - Add fix for #799102
       * change default labeling for /var/run/slapd.* sockets
  - Make thumb_t as userdom_home_reader
  - label /var/lib/sss/mc same as pubconf, so getpw domains can read it
  - Allow smbspool running as cups_t to stream connect to nmbd
  - accounts needs to be able to execute passwd on behalf of users
  - Allow systemd_tmpfiles_t to delete boot flags
  - Allow dnssec_trigger to connect to apache ports
  - Allow gnome keyring to create sock_files in ~/.cache
  - google_authenticator is using .google_authenticator
  - sandbox running from within firefox is exposing more leaks
  - Dontaudit thumb to read/write /dev/card0
  - Dontaudit getattr on init_exec_t for gnomeclock_t
  - Allow certmonger to do a transition to certmonger_unconfined_t
  - Allow dhcpc setsched which is caused by nmcli
  - Add rpm_exec_t for /usr/sbin/bcfg2
  - system cronjobs are sending dbus messages to systemd_logind
  - Thumnailers read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106
changelog:
  - Allow auditctl getcap
  - Allow vdagent to use libsystemd-login
  - Allow abrt-dump-oops to search /etc/abrt
  - Got these avc's while trying to print a boarding pass from firefox
  - Devicekit is now putting the media directory under /run/media
  - Allow thumbnailers to create content in ~/.thumbails directory
  - Add support for proL2TPd by Dominick Grift
  - Allow all domains to call getcap
  - wdmd seems to get a random chown capability check that it does not need
  - Allow vhostmd to read kernel sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105
changelog:
  - Allow chronyd to read unix
  - Allow hpfax to read /etc/passwd
  - Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
  - Allow rpcd to read quota_db_t
  - Update to man pages to match latest policy
  - Fix bug in jockey interface for sepolgen-ifgen
  - Add initial svirt_prot_exec_t policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103
changelog:
  - Add a new type for /etc/firewalld and allow firewalld to write to this directory
  - Add definition for ~/Maildir, and allow mail deliver domains to write there
  - Allow polipo to run from a cron job
  - Allow rtkit to schedule wine processes
  - Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
  - Allow users domains to send signals to consolehelper domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102
changelog:
  - More fixes for boinc policy
  - Allow polipo domain to create its own cache dir and pid file
  - Add systemctl support to httpd domain
  - Add systemctl support to polipo, allow NetworkManager to manage the service
  - Add policy for jockey-backend
  - Add support for motion daemon which is now covered by zoneminder policy
  - Allow colord to read/write motion tmpfs
  - Allow vnstat to search through var_lib_t directories
  - Stop transitioning to quota_t, from init an sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100
changelog:
  - Add additional fixes for icmp nagios plugin
  - Allow cron jobs to open fifo_files from cron, since service script opens /dev/stdin
  - Add certmonger_unconfined_exec_t
  - Make sure tap22 device is created with the correct label
  - Allow staff users to read systemd unit files
  - Merge in previously built policy
  - Arpwatch needs to be able to start netlink sockets in order to start
  - Allow cgred_t to sys_ptrace to look at other DAC Processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99
changelog:
  - Back port some of the access that was allowed in nsplugin_t
  - Add definitiona for couchdb ports
  - Allow nagios to use inherited users ttys
  - Add git support for mock
  - Allow inetd to use rdate port
  - Add own type for rdate port
  - Allow samba to act as a portmapper
  - Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
  - New fixes needed for samba4
  - Allow apps that use lib_t to read lib_t symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98
changelog:
  - Add policy for nove-cert
  - Add labeling for nova-openstack  systemd unit files
  - Add policy for keystoke


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97
changelog:
  - Fix man pages fro domains
  - Add man pages for SELinux users and roles
  - Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
  - Add policy for matahari-rpcd
  - nfsd executes mount command on restart
  - Matahari domains execute renice and setsched
  - Dontaudit leaked tty in mozilla_plugin_config
  - mailman is changing to a per instance naming
  - Add 7600 and 4447 as jboss_management ports
  - Add fixes for nagios event handlers
  - Label httpd.event as httpd_exec_t, it is an apache daemon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96
changelog:
  - Add labeling for /var/spool/postfix/dev/log
  - NM reads sysctl.conf
  - Iscsi log file context specification fix
  -  Allow mozilla plugins to send dbus messages to user domains that transition to it
  - Allow mysql to read the passwd file
  - Allow mozilla_plugin_t to create mozilla home dirs in user homedir
  - Allow deltacloud to read kernel sysctl
  - Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
  - Allow postgresql_t to connectto itself
  - Add login_userdomain attribute for users which can log in using terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95
changelog:
  - Allow sysadm_u to reach system_r by default #784011
  - Allow nagios plugins to use inherited user terminals
  - Razor labeling is not used no longer
  - Add systemd support for matahari
  - Add port_types to man page, move booleans to the top, fix some english
  - Add support for matahari-sysconfig-console
  - Clean up matahari.fc
  - Fix matahari_admin() interfac
  - Add labels for/etc/ssh/ssh_host_*.pub keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94
changelog:
  - Allow ksysguardproces to send system log msgs
  - Allow  boinc setpgid and signull
  - Allow xdm_t to sys_ptrace to run pidof command
  - Allow smtpd_t to manage spool files/directories and symbolic links
  - Add labeling for jetty
  - Needed changes to get unbound/dnssec to work with openswan


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93
changelog:
  - Add user_fonts_t alias xfs_tmp_t
  - Since depmod now runs as insmod_t we need to write to kernel_object_t
  - Allow firewalld to dbus chat with networkmanager
  - Allow qpidd to connect to matahari ports
  - policykit needs to read /proc for uses not owned by it
  - Allow systemctl apps to connecto the init stream


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90
changelog:
  - Add proxy class and read access for gssd_proxy
  - Separate out the sharing public content booleans
  - Allow certmonger to execute a script and send signals to  apache and dirsrv to reload the certificate
  -  Add label transition for gstream-0.10 and 12
  - Add booleans to allow rsync to share nfs and cifs file sytems
  - chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
  - Fix filename transitions for cups files
  - Allow denyhosts to read "unix"
  - Add file name transition for locale.conf.new
  - Allow boinc projects to gconf config files
  - sssd needs to be able to increase the socket limit under certain loads
  - sge_execd needs to read /etc/passwd
  - Allow denyhost to check network state
  - NetworkManager needs to read sessions data
  - Allow denyhost to check network state
  - Allow xen to search virt images directories
  - Add label for /dev/megaraid_sas_ioctl_node
  - Add autogenerated man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-89
changelog:
  - Allow boinc project to getattr on fs
  - Allow init to execute initrc_state_t
  - rhev-agent package was rename to ovirt-guest-agent
  - If initrc_t creates /etc/local.conf then we need to make sure it is labeled correctly
  - sytemd writes content to /run/initramfs and executes it on shutdown
  - kdump_t needs to read /etc/mtab, should be back ported to F16
  - udev needs to load kernel modules in early system boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-88
changelog:
  - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
  - Add additional systemd interfaces which are needed fro *_admin interfaces
  - Fix bind_admin() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87
changelog:
  - Allow firewalld to read urand
  - Alias java, execmem_mono to bin_t to allow third parties
  - Add label for kmod
  - /etc/redhat-lsb contains binaries
  - Add boolean to allow gitosis to send mail
  - Add filename transition also for "event20"
  - Allow systemd_tmpfiles_t to delete all file types
  - Allow collectd to ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86
changelog:
  - make consoletype_exec optional, so we can remove consoletype policy
  - remove unconfined_permisive.patch
  - Allow openvpn_t to inherit user home content and tmp content
  - Fix dnssec-trigger labeling
  - Turn on obex policy for staff_t
  - Pem files should not be secret
  - Add lots of rules to fix AVC's when playing with containers
  - Fix policy for dnssec
  - Label ask-passwd directories correctly for systemd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-85
changelog:
  - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
  - fuse file system is now being mounted in /run/user
  - systemd_logind is sending signals to processes that are dbus messaging with it
  - Add support for winshadow port and allow iscsid to connect to this port
  - httpd should be allowed to bind to the http_port_t udp socket
  - zarafa_var_lib_t can be a lnk_file
  - A couple of new .xsession-errors files
  - Seems like user space and login programs need to read logind_sessions_files
  - Devicekit disk seems to be being launched by systemd
  - Cleanup handling of setfiles so most of rules in te file
  - Correct port number for dnssec
  - logcheck has the home dir set to its cache


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-83
changelog:
  - Add new sysadm_secadm.pp module
  	* contains secadm definition for sysadm_t
  - Move user_mail_domain access out of the interface into the te file
  - Allow httpd_t to create httpd_var_lib_t directories as well as files
  - Allow snmpd to connect to the ricci_modcluster stream
  - Allow firewalld to read /etc/passwd
  - Add auth_use_nsswitch for colord
  - Allow smartd to read network state
  - smartdnotify needs to read /etc/group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82
changelog:
  - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
  - lxdm startup scripts should be labeled bin_t, so confined users will work
  - mcstransd now creates a pid, needs back port to F16
  - qpidd should be allowed to connect to the amqp port
  - Label devices 010-029 as usb devices
  - ypserv packager says ypserv does not use tmp_t so removing selinux policy types
  - Remove all ptrace commands that I believe are caused by the kernel/ps avcs
  - Add initial Obex policy
  - Add logging_syslogd_use_tty boolean
  - Add polipo_connect_all_unreserved bolean
  - Allow zabbix to connect to ftp port
  - Allow systemd-logind to be able to switch VTs
  - Allow apache to communicate with memcached through a sock_file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80
changelog:
  - Add zabbix_can_network boolean
  - Add httpd_can_connect_zabbix boolean
  - Prepare file context labeling for usrmove functions
  - Allow system cronjobs to read kernel network state
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow corosync to read and write to qpidd shared mem
  -  mozilla_plugin is trying to run pulseaudio 
  - Fixes for new sshd patch for running priv sep domains as the users context
  - Turn off dontaudit rules when turning on allow_ypbind
  - udev now reads /etc/modules.d directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79
changelog:
  - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
  - Cups exchanges dbus messages with init
  - udisk2 needs to send syslog messages
  - certwatch needs to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77
changelog:
  - Treat Bip with bitlbee policy
        * Bip is an IRC proxy
  - Add port definition for interwise port
  - Add support for ipa_memcached socket
  - systemd_jounald needs to getattr on all processes
  - mdadmin fixes
       * uses getpw
  - amavisd calls getpwnam()
  - denyhosts calls getpwall()


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76
changelog:
  - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
  - bluetooth says they do not use /tmp and want to remove the type
  - Allow init to transition to colord
  - Mongod needs to read /proc/sys/vm/zone_reclaim_mode
  - Allow postfix_smtpd_t to connect to spamd
  - Add boolean to allow ftp to connect to all ports > 1023
  - Allow sendmain to write to inherited dovecot tmp files
  - setroubleshoot needs to be able to execute rpm to see what version of packages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-75
changelog:
  - Merge systemd patch
  - systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
  - Allow deltacloudd dac_override, setuid, setgid  caps
  - Allow aisexec to execute shell
  - Add use_nfs_home_dirs boolean for ssh-keygen


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-74
changelog:
  - Add labeling for /var/run/systemd/journal/syslog
  - libvirt sends signals to ifconfig
  - Allow domains that read logind session files to list them


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73
changelog:
  - Fixed destined form libvirt-sandbox
  - Allow apps that list sysfs to also read sympolicy links in this filesystem
  - Add ubac_constrained rules for chrome_sandbox
  - Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
  - Allow postgresql to be executed by the caller
  - Standardize interfaces of daemons 
  - Add new labeling for mm-handler
  - Allow all matahari domains to read network state and etc_runtime_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
changelog:
  - New fix for seunshare, requires seunshare_domains to be able to mounton /
  - Allow systemctl running as logrotate_t to connect to private systemd socket
  - Allow tmpwatch to read meminfo
  - Allow rpc.svcgssd to read supported_krb5_enctype
  - Allow zarafa domains to read /dev/random and /dev/urandom
  - Allow snmpd to read dev_snmp6
  - Allow procmail to talk with cyrus
  - Add fixes for check_disk and check_nagios plugins


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71
changelog:
  - default trans rules for Rawhide policy
  -  Make sure sound_devices controlC* are labeled correctly on creation
  - sssd now needs sys_admin
  - Allow snmp to read all proc_type
  - Allow to setup users homedir with quota.group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-70
changelog:
  - Add httpd_can_connect_ldap() interface
  - apcupsd_t needs to use seriel ports connected to usb devices
  - Kde puts procmail mail directory under ~/.local/share
  - nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
  - Add labeling for /sbin/iscsiuio


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-69
changelog:
  - Add label for /var/lib/iscan/interpreter
  - Dont audit writes to leaked file descriptors or redirected output for nacl
  - NetworkManager needs to write to /sys/class/net/ib*/mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-68
changelog:
  - Allow abrt  to request the kernel to load a module
  - Make sure mozilla content is labeled correctly
  - Allow tgtd to read system state
  - More fixes for boinc
    * allow to resolve dns name
    * re-write boinc policy to use boinc_domain attribute
  - Allow munin services plugins to use NSCD services


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-67
changelog:
  - Allow mozilla_plugin_t to manage mozilla_home_t
  - Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
  - Add label for tumblerd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-65
changelog:
  - Fixes related to  /bin, /sbin
  - Allow abrt to getattr on blk files
  - Add type for rhev-agent log file
  - Fix labeling for /dev/dmfm
  - Dontaudit wicd leaking
  - Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
  - Label /etc/locale.conf correctly
  - Allow user_mail_t to read /dev/random
  - Allow postfix-smtpd to read MIMEDefang
  - Add label for /var/log/suphp.log
  - Allow swat_t to connect and read/write nmbd_t sock_file
  - Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
  - Allow systemd-tmpfiles to change user identity in object contexts
  - More fixes for rhev_agentd_t consolehelper policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-64
changelog:
  - Use fs_use_xattr for squashf
  -  Fix procs_type interface
  - Dovecot has a new fifo_file /var/run/dovecot/stats-mail
  - Dovecot has a new fifo_file /var/run/stats-mail
  - Colord does not need to connect to network
  - Allow system_cronjob to dbus chat with NetworkManager
  - Puppet manages content, want to make sure it labels everything correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-63
changelog:
  - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
  - Allow all postfix domains to use the fifo_file
  - Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
  - Allow apmd_t to read grub.cfg
  - Let firewallgui read the selinux config
  - Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
  - Fix devicekit_manage_pid_files() interface
  - Allow squid to check the network state
  - Dontaudit colord getattr on file systems
  - Allow ping domains to read zabbix_tmp_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-59
changelog:
  - Allow mcelog_t to create dir and file in /var/run and label it correctly
  - Allow dbus to manage fusefs
  - Mount needs to read process state when mounting gluster file systems
  - Allow collectd-web to read collectd lib files
  - Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
  - Allow colord to get the attributes of tmpfs filesystem
  - Add sanlock_use_nfs and sanlock_use_samba booleans
  - Add bin_t label for /usr/lib/virtualbox/VBoxManage


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-58
changelog:
  - Add ssh_dontaudit_search_home_dir
  - Changes to allow namespace_init_t to work
  - Add interface to allow exec of mongod, add port definition for mongod port, 27017
  - Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
  - Allow spamd and clamd to steam connect to each other
  - Add policy label for passwd.OLD
  - More fixes for postfix and postfix maildro
  - Add ftp support for mozilla plugins
  - Useradd now needs to manage policy since it calls libsemanage
  - Fix devicekit_manage_log_files() interface
  - Allow colord to execute ifconfig
  - Allow accountsd to read /sys
  - Allow mysqld-safe to execute shell
  - Allow openct to stream connect to pcscd
  - Add label for /var/run/nm-dns-dnsmasq\.conf
  - Allow networkmanager to chat with virtd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55
changelog:
  - Add more MCS fixes to make sandbox working
  - Make faillog MLS trusted to make sudo_$1_t working
  - Allow sandbox_web_client_t to read passwd_file_t
  - Add .mailrc file context
  - Remove execheap from openoffice domain
  - Allow chrome_sandbox_nacl_t to read cpu_info
  - Allow virtd to relabel generic usb which is need if USB device
  - Fixes for virt.if interfaces to consider chr_file as image file type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-53
changelog:
  - Make nvidia* to be labeled correctly
  - Fix abrt_manage_cache() interface
  - Make filetrans rules optional so base policy will build
  - Dontaudit chkpwd_t access to inherited TTYS
  - Make sure postfix content gets created with the correct label
  - Allow gnomeclock to read cgroup
  - Fixes for cloudform policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-51
changelog:
  -  Begin removing qemu_t domain, we really no longer need this domain.  
  - systemd_passwd needs dac_overide to communicate with users TTY's
  - Allow svirt_lxc domains to send kill signals within their container


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-50
changelog:
  - Allow policykit to talk to the systemd via dbus
  - Move chrome_sandbox_nacl_t to permissive domains
  - Additional rules for chrome_sandbox_nacl


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-49
changelog:
  - Change bootstrap name to nacl
  - Chrome still needs execmem
  - Missing role for chrome_sandbox_bootstrap
  - Add boolean to remove execmem and execstack from virtual machines
  - Dontaudit xdm_t doing an access_check on etc_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-48
changelog:
  - Allow named to connect to dirsrv by default
  - add ldapmap1_0 as a krb5_host_rcache_t file
  - Google chrome developers asked me to add bootstrap policy for nacl stuff
  - Allow rhev_agentd_t to getattr on mountpoints
  - Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-47
changelog:
  - Fixes for cloudform policies which need to connect to random ports
  - Make sure if an admin creates modules content it creates them with the correct label
  - Add port 8953 as a dns port used by unbound
  - Fix file name transition for alsa and confined users


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-41
changelog:
  - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
  - Allow init process to setrlimit on itself
  - Take away transition rules for users executing ssh-keygen
  - Allow setroubleshoot_fixit_t to read /dev/urand
  - Allow sshd to relbale tunnel sockets
  - Allow fail2ban domtrans to shorewall in the same way as with iptables
  - Add support for lnk files in the /var/lib/sssd directory
  - Allow system mail to connect to courier-authdaemon over an unix stream socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-40
changelog:
  - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
  - Make corosync to be able to relabelto cluster lib fies
  - Allow samba domains to search /var/run/nmbd
  - Allow dirsrv to use pam
  - Allow thumb to call getuid
  - chrome less likely to get mmap_zero bug so removing dontaudit
  - gimp help-browser has built in javascript
  - Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
  - Re-write glance policy


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.3
changelog:
  - Move dontaudit sys_ptrace line from permissive.te to domain.te
  - Remove policy for hal, it no longer exists


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.1
changelog:
  - Remove allow_ptrace and replace it with deny_ptrace, which will remove all 
  ptrace from the system
  - Remove 2000 dontaudit rules between confined domains on transition
  and replace with single
  dontaudit domain domain:process { noatsecure siginh rlimitinh } ;


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-39
changelog:
  - Fixes for bootloader policy
  - $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
  - Allow nsplugin to read /usr/share/config
  - Allow sa-update to update rules
  - Add use_fusefs_home_dirs for chroot ssh option
  - Fixes for grub2
  - Update systemd_exec_systemctl() interface
  - Allow gpg to read the mail spool
  - More fixes for sa-update running out of cron job
  - Allow ipsec_mgmt_t to read hardware state information
  - Allow pptp_t to connect to unreserved_port_t
  - Dontaudit getattr on initctl in /dev from chfn
  - Dontaudit getattr on kernel_core from chfn
  - Add systemd_list_unit_dirs to systemd_exec_systemctl call
  - Fixes for collectd policy
  - CHange sysadm_t to create content as user_tmp_t under /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-38
changelog:
  - Allow virsh to read xenstored pid file
  - Backport corenetwork fixes from upstream
  - Do not audit attempts by thumb to search config_home_t dirs (~/.config)
  - label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
  - allow thumb to read generic data home files (mime.type)


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-37
changelog:
  - Allow nmbd to manage sock file in /var/run/nmbd
  - ricci_modservice send syslog msgs
  - Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
  - Allow systemd_logind_t to manage /run/USER/dconf/user


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-36
changelog:
  - Allow logrotate setuid and setgid since logrotate is supposed to do it
  - Fixes for thumb policy by grift
  - Add new nfsd ports
  - Added fix to allow confined apps to execmod on chrome
  - Add labeling for additional vdsm directories
  - Allow Exim and Dovecot SASL
  - Add label for /var/run/nmbd
  - Add fixes to make virsh and xen working together
  - Colord executes ls
  - /var/spool/cron  is now labeled as user_cron_spool_t


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-34.4
changelog:
  - Fixes caused by the labeling of /etc/passwd
  - Add thumb.patch to transition unconfined_t to thumb_t for Rawhide


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3
changelog:
  - Add support for Clustered Samba commands
  - Allow ricci_modrpm_t to send log msgs
  - move permissive virt_qmf_t from virt.te to permissivedomains.te
  - Allow ssh_t to use kernel keyrings
  - Add policy for libvirt-qmf and more fixes for linux containers
  - Initial Polipo
  - Sanlock needs to run ranged in order to kill svirt processes
  - Allow smbcontrol to stream connect to ctdbd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34
changelog:
  - Make mta_role() active
  - Allow asterisk to connect to jabber client port
  - Allow procmail to read utmp
  - Add NIS support for systemd_logind_t
  - Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
  - Fix systemd_manage_unit_dirs() interface
  - Allow ssh_t to manage directories passed into it
  - init needs to be able to create and delete unit file directories
  - Fix typo in apache_exec_sys_script
  - Add ability for logrotate to transition to awstat domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-33
changelog:
  - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
  - Add SELinux support for ssh pre-auth net process in F17
  - Add logging_syslogd_can_sendmail boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-29
changelog:
  - Allow sanlock to manage virt lib files
  - Add virt_use_sanlock booelan
  - ksmtuned is trying to resolve uids
  - Make sure .gvfs is labeled user_home_t in the users home directory
  - Sanlock sends kill signals and needs the kill capability
  - Allow mockbuild to work on nfs homedirs
  - Fix kerberos_manage_host_rcache() interface
  - Allow exim to read system state


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-28
changelog:
  - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
  - We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-27
changelog:
  -  Allow collectd to read hardware state information
  - Add loop_control_device_t
  - Allow mdadm to request kernel to load module
  - Allow domains that start other domains via systemctl to search unit dir
  - systemd_tmpfiles, needs to list any file systems mounted on /tmp
  - No one can explain why radius is listing the contents of /tmp, so we will dontaudit
  - If I can manage etc_runtime files, I should be able to read the links
  - Dontaudit hostname writing to mock library chr_files
  - Have gdm_t setup labeling correctly in users home dir
  - Label content unde /var/run/user/NAME/dconf as config_home_t
  - Allow sa-update to execute shell
  - Make ssh-keygen working with fips_enabled
  - Make mock work for staff_t user
  - Tighten security on mock_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-26
changelog:
  - removing unconfined_notrans_t no longer necessary
  - Clean up handling of secure_mode_insmod and secure_mode_policyload
  - Remove unconfined_mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-25
changelog:
  - Add exim_exec_t label for /usr/sbin/exim_tidydb
  - Call init_dontaudit_rw_stream_socket() interface in mta policy
  - sssd need to search /var/cache/krb5rcache directory
  - Allow corosync to relabel own tmp files
  - Allow zarafa domains to send system log messages
  - Allow ssh to do tunneling
  - Allow initrc scripts to sendto init_t unix_stream_socket
  - Changes to make sure dmsmasq and virt directories are labeled correctly
  - Changes needed to allow sysadm_t to manage systemd unit files
  - init is passing file descriptors to dbus and on to system daemons
  - Allow sulogin additional access Reported by dgrift and Jeremy Miller
  - Steve Grubb believes that wireshark does not need this access
  - Fix /var/run/initramfs to stop restorecon from looking at
  - pki needs another port
  - Add more labels for cluster scripts
  - Allow apps that manage cgroup_files to manage cgroup link files
  - Fix label on nfs-utils scripts directories
  - Allow gatherd to read /dev/rand and /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-24
changelog:
  - pki needs another port
  - Add more labels for cluster scripts
  - Fix label on nfs-utils scripts directories
  - Fixes for cluster
  - Allow gatherd to read /dev/rand and /dev/urand
  - abrt leaks fifo files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-23
changelog:
  - Add glance policy
  - Allow mdadm setsched
  - /var/run/initramfs should not be relabeled with a restorecon run
  - memcache can be setup to override sys_resource
  - Allow httpd_t to read tetex data
  - Allow systemd_tmpfiles to delete kernel modules left in /tmp directory.


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-22
changelog:
  - Allow Postfix to deliver to Dovecot LMTP socket
  - Ignore bogus sys_module for lldpad
  - Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
  - systemd_logind_t sets the attributes on usb devices
  - Allow hddtemp_t to read etc_t files
  - Add permissivedomains module
  - Move all permissive domains calls to permissivedomain.te
  - Allow pegasis to send kill signals to other UIDs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-21
changelog:
  - Allow insmod_t to use fds leaked from devicekit
  - dontaudit getattr between insmod_t and init_t unix_stream_sockets
  - Change sysctl unit file interfaces to use systemctl
  - Add support for chronyd unit file
  - Allow mozilla_plugin to read gnome_usr_config
  - Add policy for new gpsd
  - Allow cups to create kerberos rhost cache files
  - Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-20
changelog:
  - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-19
changelog:
  - Add policy for sa-update being run out of cron jobs
  - Add create perms to postgresql_manage_db
  - ntpd using a gps has to be able to read/write generic tty_device_t
  - If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
  - fix spec file
  - Remove qemu_domtrans_unconfined() interface
  - Make passenger working together with puppet
  - Add init_dontaudit_rw_stream_socket interface
  - Fixes for wordpress


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-18
changelog:
  - Turn on allow_domain_fd_use boolean on F16
  - Allow syslog to manage all log files
  - Add use_fusefs_home_dirs boolean for chrome
  - Make vdagent working with confined users
  - Add abrt_handle_event_t domain for ABRT event scripts
  - Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
  - Allow httpd_git_script_t to read passwd data
  - Allow openvpn to set its process priority when the nice parameter is used


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-16
changelog:
  - fetchmail can use kerberos
  - ksmtuned reads in shell programs
  - gnome_systemctl_t reads the process state of ntp
  - dnsmasq_t asks the kernel to load multiple kernel modules
  - Add rules for domains executing systemctl
  - Bogus text within fc file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-13
changelog:
  - Add abrt_domain attribute
  - Allow corosync to manage cluster lib files
  - Allow corosync to connect to the system DBUS


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-10
changelog:
  - Allow rcsmcertd to perform DNS name resolution
  - Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
  - Allow tmux to run as screen
  - New policy for collectd
  - Allow gkeyring_t to interact with all user apps
  - Add rules to allow firstboot to run on machines with the unconfined.pp module removed


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-9
changelog:
  - Allow systemd_logind to send dbus messages with users
  - allow accountsd to read wtmp file
  - Allow dhcpd to get and set capabilities


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8
changelog:
  - Fix oracledb_port definition
  - Allow mount to mounton the selinux file system
  - Allow users to list /var directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-6
changelog:
  - Add initial policy for abrt_dump_oops_t
  - xtables-multi wants to getattr of the proc fs
  - Smoltclient is connecting to abrt
  - Dontaudit leaked file descriptors to postdrop
  - Allow abrt_dump_oops to look at kernel sysctls
  - Abrt_dump_oops_t reads kernel ring buffer
  - Allow mysqld to request the kernel to load modules
  - systemd-login needs fowner
  - Allow postfix_cleanup_t to searh maildrop


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-5
changelog:
  - Initial systemd_logind policy
  - Add policy for systemd_logger and additional proivs for systemd_logind
  - More fixes for systemd policies


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-4
changelog:
  - Allow setsched for virsh
  - Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
  - iptables: the various /sbin/ip6?tables.* are now symlinks for
  /sbin/xtables-multi


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-3
changelog:
  - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
  - Allow colord to interact with the users through the tmpfs file system
  - Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
  - Add label for /var/log/mcelog
  - Allow asterisk to read /dev/random if it uses TLS
  - Allow colord to read ini files which are labeled as bin_t
  - Allow dirsrvadmin sys_resource and setrlimit to use ulimit
  - Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.  
  - Also lists /var and /var/spool directories
  - Add openl2tpd to l2tpd policy
  - qpidd is reading the sysfs file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-2
changelog:
  - Change usbmuxd_t to dontaudit attempts to read chr_file
  - Add mysld_safe_exec_t for libra domains to be able to start private mysql domains
  - Allow pppd to search /var/lock dir
  - Add rhsmcertd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-29
changelog:
  - Add dspam policy
  - Add lldpad policy
  - dovecot auth wants to search statfs #713555
  - Allow systemd passwd apps to read init fifo_file
  - Allow prelink to use inherited terminals
  - Run cherokee in the httpd_t domain
  - Allow mcs constraints on node connections
  - Implement pyicqt policy
  - Fixes for zarafa policy
  - Allow cobblerd to send syslog messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-27
changelog:
  - Fixes for zabbix
  - init script needs to be able to manage sanlock_var_run_...
  - Allow sandlock and wdmd to create /var/run directories... 
  - mixclip.so has been compiled correctly
  - Fix passenger policy module name


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-26
changelog:
  - Add mailscanner policy from dgrift
  - Allow chrome to optionally be transitioned to
  - Zabbix needs these rules when starting the zabbix_server_mysql
  - Implement a type for freedesktop openicc standard (~/.local/share/icc)
  - Allow system_dbusd_t to read inherited icc_data_home_t files.
  - Allow colord_t to read icc_data_home_t content. #706975
  - Label stuff under /usr/lib/debug as if it was labeled under /


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-25
changelog:
  - Fixes for sanlock policy
  - Fixes for colord policy
  - Other fixes
  	* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-22
changelog:
  - Allow logrotate to execute systemctl
  - Allow nsplugin_t to getattr on gpmctl
  - Fix dev_getattr_all_chr_files() interface
  - Allow shorewall to use inherited terms
  - Allow userhelper to getattr all chr_file devices
  - sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
  - Fix labeling for ABRT Retrace Server


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-21
changelog:
  - Dontaudit sys_module for ifconfig
  - Make telepathy and gkeyringd daemon working with confined users
  - colord wants to read files in users homedir
  - Remote login should be creating user_tmp_t not its own tmp files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-20
changelog:
  - Fix label for /usr/share/munin/plugins/munin_* plugins
  - Add support for zarafa-indexer
  - Fix boolean description
  - Allow colord to getattr on /proc/scsi/scsi
  - Add label for /lib/upstart/init
  - Colord needs to list /mnt


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-19
changelog:
  - Forard port changes from F15 for telepathy
  - NetworkManager should be allowed to use /dev/rfkill
  - Fix dontaudit messages to say Domain to not audit
  - Allow telepathy domains to read/write gnome_cache files
  - Allow telepathy domains to call getpw
  - Fixes for colord and vnstatd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-18
changelog:
  - Allow init_t getcap and setcap
  - Allow namespace_init_t to use nsswitch
  - aisexec will execute corosync
  - colord tries to read files off noxattr file systems
  - Allow init_t getcap and setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-17
changelog:
  - Add support for ABRT retrace server
  - Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
  - Allow telepath_msn_t to read /proc/PARENT/cmdline
  - ftpd needs kill capability
  - Allow telepath_msn_t to connect to sip port
  - keyring daemon does not work on nfs homedirs
  - Allow $1_sudo_t to read default SELinux context
  - Add label for tgtd sock file in /var/run/
  - Add apache_exec_rotatelogs interface
  - allow all zaraha domains to signal themselves, server writes to /tmp
  - Allow syslog to read the process state
  - Add label for /usr/lib/chromium-browser/chrome
  - Remove the telepathy transition from unconfined_t
  - Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
  - Allow initrc_t domain to manage abrt pid files
  - Add support for AEOLUS project
  - Virt_admin should be allowed to manage images and processes
  - Allow plymountd to send signals to init
  - Change labeling of fping6


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-16
changelog:
  - Fixes for zarafa policy
  - Add support for AEOLUS project
  - Change labeling of fping6
  - Allow plymountd to send signals to init
  - Allow initrc_t domain to manage abrt pid files
  - Virt_admin should be allowed to manage images and processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-15
changelog:
  - xdm_t needs getsession for switch user 
  - Every app that used to exec init is now execing systemdctl 
  - Allow squid to manage krb5_host_rcache_t files 
  - Allow foghorn to connect to agentx port - Fixes for colord policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-14
changelog:
  - Add Dan's patch to remove 64 bit variants
  - Allow colord to use unix_dgram_socket 
  - Allow apps that search pids to read /var/run if it is a lnk_file 
  - iscsid_t creates its own directory 
  - Allow init to list var_lock_t dir 
  - apm needs to verify user accounts auth_use_nsswitch
  - Add labeling for systemd unit files
  - Allow gnomeclok to enable ntpd service using systemctl - systemd_systemctl_t domain was added
  - Add label for matahari-broker.pid file
  - We want to remove untrustedmcsprocess from ability to read /proc/pid
  - Fixes for matahari policy
  - Allow system_tmpfiles_t to delete user_home_t files in the /tmp dir
  - Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-12
changelog:
  - Add /var/run/lock /var/lock definition to file_contexts.subs
  - nslcd_t is looking for kerberos cc files
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Allow sysadm_t to set attributes on fixed disks
  - allow user domains to execute lsof and look at application sockets
  - prelink_cron job calls telinit -u if init is rewritten
  - Fixes to run qemu_t from staff_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-10
changelog:
  - Add file_contexts.subs to handle /run and /run/lock
  - Add other fixes relating to /run changes from F15 policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-7
changelog:
  - Allow $1_sudo_t and $1_su_t open access to user terminals
  - Allow initrc_t to use generic terminals
  - Make Makefile/Rules.modular run sepolgen-ifgen during build to check if files for bugs
  -systemd is going to be useing /run and /run/lock for early bootup files.
  - Fix some comments in rlogin.if
  - Add policy for KDE backlighthelper
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - setroubleshoot reads executables to see if they have TEXTREL
  - Add /var/spool/audit support for new version of audit
  - Remove kerberos_connect_524() interface calling
  - Combine kerberos_master_port_t and kerberos_port_t
  - systemd has setup /dev/kmsg as stderr for apps it executes
  - Need these access so that init can impersonate sockets on unix_dgram_socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-5
changelog:
  - Fix multiple specification for boot.log
  - devicekit leaks file descriptors to setfiles_t
  - Change all all_nodes to generic_node and all_if to generic_if
  - Should not use deprecated interface
  - Switch from using all_nodes to generic_node and from all_if to generic_if
  - Add support for xfce4-notifyd
  - Fix file context to show several labels as SystemHigh
  - seunshare needs to be able to mounton nfs/cifs/fusefs homedirs
  - Add etc_runtime_t label for /etc/securetty
  - Fixes to allow xdm_t to start gkeyringd_USERTYPE_t directly
  - login.krb needs to be able to write user_tmp_t
  - dirsrv needs to bind to port 7390 for dogtag
  - Fix a bug in gpg policy
  - gpg sends audit messages
  - Allow qpid to manage matahari files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-4
changelog:
  - Initial policy for matahari
  - Add dev_read_watchdog
  - Allow clamd to connect clamd port
  - Add support for kcmdatetimehelper
  - Allow shutdown to setrlimit and sys_nice
  - Allow systemd_passwd to talk to /dev/log before udev or syslog is running
  - Purge chr_file and blk files on /tmp
  - Fixes for pads
  - Fixes for piranha-pulse
  - gpg_t needs to be able to encyprt anything owned by the user


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-3
changelog:
  - mozilla_plugin_tmp_t needs to be treated as user tmp files
  - More dontaudits of writes from readahead
  - Dontaudit readahead_t file_type:dir write, to cover up kernel bug
  - systemd_tmpfiles needs to relabel faillog directory as well as the file
  - Allow hostname and consoletype to r/w inherited initrc_tmp_t files handline hostname >> /tmp/myhost


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-2
changelog:
  - Add policykit fixes from Tim Waugh
  - dontaudit sandbox domains sandbox_file_t:dir mounton
  - Add new dontaudit rules for sysadm_dbusd_t
  - Change label for /var/run/faillock
  	* other fixes which relate with this change


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-1
changelog:
  - Update to upstream
  - Fixes for telepathy
  - Add port defition for ssdp port
  - add policy for /bin/systemd-notify from Dan
  - Mount command requires users read mount_var_run_t
  - colord needs to read konject_uevent_socket
  - User domains connect to the gkeyring socket
  - Add colord policy and allow user_t and staff_t to dbus chat with it
  - Add lvm_exec_t label for kpartx
  - Dontaudit reading the mail_spool_t link from sandbox -X
  - systemd is creating sockets in avahi_var_run and system_dbusd_var_run


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-5
changelog:
  - gpg_t needs to talk to gnome-keyring
  - nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
  - enforce MCS labeling on nodes
  - Allow arpwatch to read meminfo
  - Allow gnomeclock to send itself signals
  - init relabels /dev/.udev files on boot
  - gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_exec_t
  - nautilus checks access on /media directory before mounting usb sticks, dontaudit access_check on mnt_t
  - dnsmasq can run as a dbus service, needs acquire service
  - mysql_admin should  be allowed to connect to mysql service
  - virt creates monitor sockets in the users home dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-2
changelog:
  - Allow usbhid-ups to read hardware state information
  - systemd-tmpfiles has moved
  - Allo cgroup to sys_tty_config
  - For some reason prelink is attempting to read gconf settings
  - Add allow_daemons_use_tcp_wrapper boolean
  - Add label for ~/.cache/wocky to make telepathy work in enforcing mode
  - Add label for char devices /dev/dasd*
  - Fix for apache_role
  - Allow amavis to talk to nslcd
  - allow all sandbox to read selinux poilcy config files
  - Allow cluster domains to use the system bus and send each other dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.14-1
changelog:
  - Update to ref policy
  - cgred needs chown capability
  - Add /dev/crash crash_dev_t
  - systemd-readahead wants to use fanotify which means readahead_t needs sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-10
changelog:
  - New labeling for postfmulti #675654
  - dontaudit xdm_t listing noxattr file systems
  - dovecot-auth needs to be able to connect to mysqld via the network as well as locally
  - shutdown is passed stdout to a xdm_log_t file
  - smartd creates a fixed disk device
  - dovecot_etc_t contains a lnk_file that domains need to read
  - mount needs to be able to read etc_runtim_t:lnk_file since in rawhide this is a link created at boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-9
changelog:
  - syslog_t needs syslog capability
  - dirsrv needs to be able to create /var/lib/snmp
  - Fix labeling for dirsrv
  - Fix for dirsrv policy missing manage_dirs_pattern
  - corosync needs to delete clvm_tmpfs_t files
  - qdiskd needs to list hugetlbfs
  - Move setsched to sandbox_x_domain, so firefox can run without network access
  - Allow hddtemp to read removable devices
  - Adding syslog and read_policy permissions to policy
  	* syslog
  		Allow unconfined, sysadm_t, secadm_t, logadm_t
  	* read_policy
  		allow unconfined, sysadm_t, secadm_t, staff_t on Targeted
  		allow sysadm_t (optionally), secadm_t on MLS
  - mdadm application will write into /sys/.../uevent whenever arrays are
  assembled or disassembled.


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-7
changelog:
  - ricci_modclusterd_t needs to bind to rpc ports 500-1023
  - Allow dbus to use setrlimit to increase resoueces
  - Mozilla_plugin is leaking to sandbox
  - Allow confined users  to connect to lircd over unix domain stream socket which allow to use remote control
  - Allow awstats to read squid logs
  - seunshare needs to manage tmp_t
  - apcupsd cgi scripts have a new directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-6
changelog:
  - Fix xserver_dontaudit_read_xdm_pid
  - Change oracle_port_t to oracledb_port_t to prevent conflict with satellite
  - Allow dovecot_deliver_t to read/write postfix_master_t:fifo_file. 
  	* These fifo_file is passed from postfix_master_t to postfix_local_t to dovecot_deliver_t
  - Allow readahead to manage readahead pid dirs
  - Allow readahead to read all mcs levels
  - Allow mozilla_plugin_t to use nfs or samba homedirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-5
changelog:
  - Allow nagios plugin to read /proc/meminfo
  - Fix for mozilla_plugin
  - Allow samba_net_t to create /etc/keytab
  - pppd_t setting up vpns needs to run unix_chkpwd, setsched its process and write wtmp_t
  - nslcd can read user credentials
  - Allow nsplugin to delete mozilla_plugin_tmpfs_t
  - abrt tries to create dir in rpm_var_lib_t
  - virt relabels fifo_files
  - sshd needs to manage content in fusefs homedir
  - mock manages link files in cache dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-4
changelog:
  - nslcd needs setsched and to read /usr/tmp
  - Invalid call in likewise policy ends up creating a bogus role
  - Cannon puts content into /var/lib/bjlib that cups needs to be able to write
  - Allow screen to create screen_home_t in /root
  - dirsrv sends syslog messages
  - pinentry reads stuff in .kde directory
  - Add labels for .kde directory in homedir
  - Treat irpinit, iprupdate, iprdump services with raid policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-3
changelog:
  - NetworkManager wants to read consolekit_var_run_t
  - Allow readahead to create /dev/.systemd/readahead
  - Remove permissive domains
  - Allow newrole to run namespace_init


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-8
changelog:
  - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
  - Add puppetmaster_use_db boolean
  - Fixes for zarafa policy
  - Fixes for gnomeclock poliy
  - Fix systemd-tmpfiles to use auth_use_nsswitch


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-7
changelog:
  - gnomeclock executes a shell
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir
  - Fixes for namespace policy and other fixes related to polyinstantiation
  - Add namespace policy
  - Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
  - Fixes for init, psad policy which relate with confined users
  - Do not audit bootloader attempts to read devicekit pid files
  - Allow nagios service plugins to read /proc


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-6
changelog:
  - Add firewalld policy
  - Allow vmware_host to read samba config
  - Kernel wants to read /proc Fix duplicate grub def in cobbler
  - Chrony sends mail, executes shell, uses fifo_file and reads /proc
  - devicekitdisk getattr all file systems
  - sambd daemon writes wtmp file
  - libvirt transitions to dmidecode


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-5
changelog:
  - Add initial policy for system-setup-keyboard which is now daemon
  - Label /var/lock/subsys/shorewall as shorewall_lock_t
  - Allow users to communicate with the gpg_agent_t
  - Dontaudit mozilla_plugin_t using the inherited terminal
  - Allow sambagui to read files in /usr
  - webalizer manages squid log files
  - Allow unconfined domains to bind ports to raw_ip_sockets
  - Allow abrt to manage rpm logs when running yum
  - Need labels for /var/run/bittlebee
  - Label .ssh under amanda
  - Remove unused genrequires for virt_domain_template
  - Allow virt_domain to use fd inherited from virtd_t
  - Allow iptables to read shorewall config


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-4
changelog:
  - Gnome apps list config_home_t
  - mpd creates lnk files in homedir
  - apache leaks write to mail apps on tmp files
  - /var/stockmaniac/templates_cache contains log files
  - Abrt list the connects of mount_tmp_t dirs
  - passwd agent reads files under /dev and reads utmp file
  - squid apache script connects to the squid port
  - fix name of plymouth log file
  - teamviewer is a wine app
  - allow dmesg to read system state
  - Stop labeling files under /var/lib/mock so restorecon will not go into this 
  - nsplugin needs to read network state for google talk


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-3
changelog:
  - Allow xdm and syslog to use /var/log/boot.log
  - Allow users to communicate with mozilla_plugin and kill it
  - Add labeling for ipv6 and dhcp


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-2
changelog:
  - New labels for ghc http content
  - nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
  - pm-suspend now creates log file for append access so we remove devicekit_wri
  - Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
  - Fixes for greylist_milter policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-1
changelog:
  - Update to upstream
  - Fixes for systemd policy
  - Fixes for passenger policy
  - Allow staff users to run mysqld in the staff_t domain, akonadi needs this
  - Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
  - auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
  - Dontaudit (xdm_t) gok attempting to list contents of /var/account
  - Telepathy domains need to read urand
  - Need interface to getattr all file classes in a mock library for setroubleshoot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-13
changelog:
  - Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs
  - remove per sandbox domains devpts types
  - Allow dkim-milter sending signal to itself


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-12
changelog:
  - Allow domains that transition to ping or traceroute, kill them
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  - Add fixes to systemd- tools, including new labeling for systemd-fsck, systemd-cryptsetup


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-11
changelog:
  - Turn on systemd policy
  - mozilla_plugin needs to read certs in the homedir.
  - Dontaudit leaked file descriptors from devicekit
  - Fix ircssi to use auth_use_nsswitch
  - Change to use interface without param in corenet to disable unlabelednet packets
  - Allow init to relabel sockets and fifo files in /dev
  - certmonger needs dac* capabilities to manage cert files not owned by root
  - dovecot needs fsetid to change group membership on mail
  - plymouthd removes /var/log/boot.log
  - systemd is creating symlinks in /dev
  - Change label on /etc/httpd/alias to be all cert_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-10
changelog:
  - Fixes for clamscan and boinc policy
  - Add boinc_project_t setpgid
  - Allow alsa to create tmp files in /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-7
changelog:
  - Fix the label for wicd log
  - plymouthd creates force-display-on-active-vt file
  - Allow avahi to request the kernel to load a module
  - Dontaudit hal leaks
  - Fix gnome_manage_data interface
  - Add new interface corenet_packet to define a type as being an packet_type.
  - Removed general access to packet_type from icecast and squid.
  - Allow mpd to read alsa config
  - Fix the label for wicd log
  - Add systemd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-6
changelog:
  - Fix gnome_manage_data interface
  - Dontaudit sys_ptrace capability for iscsid
  - Fixes for nagios plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-5
changelog:
  - Fix cron to run ranged when started by init
  - Fix devicekit to use log files
  - Dontaudit use of devicekit_var_run_t for fstools
  - Allow init to setattr on logfile directories
  - Allow hald to manage files in /var/run/pm-utils/ dir which is now labeled as devicekit_var_run_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-4
changelog:
  - Fix up handling of dnsmasq_t creating /var/run/libvirt/network
  - Turn on sshd_forward_ports boolean by default
  - Allow sysadmin to dbus chat with rpm
  - Add interface for rw_tpm_dev
  - Allow cron to execute bin
  - fsadm needs to write sysfs
  - Dontaudit consoletype reading /var/run/pm-utils
  - Lots of new privs fro mozilla_plugin_t running java app, make mozilla_plugin
  - certmonger needs to manage dirsrv data
  - /var/run/pm-utils should be labeled as devicekit_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-3
changelog:
  - fixes to allow /var/run and /var/lock as tmpfs
  - Allow chrome sandbox to connect to web ports
  - Allow dovecot to listem on lmtp and sieve ports
  - Allov ddclient to search sysctl_net_t
  - Transition back to original domain if you execute the shell


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-4
changelog:
  - Allow ddclient to fix file mode bits of ddclient conf file
  - init leaks file descriptors to daemons
  - Add labels for /etc/lirc/ and
  - Allow amavis_t to exec shell
  - Add label for gssd_tmp_t for /var/tmp/nfs_0


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-2
changelog:
  - Turn on allow_postfix_local_write_mail_spool
  - Allow initrc_t to transition to shutdown_t
  - Allow logwatch and cron to mls_read_to_clearance for MLS boxes
  - Allow wm to send signull to all applications and receive them from users
  - lircd patch from field
  - Login programs have to read /etc/samba
  - New programs under /lib/systemd
  - Abrt needs to read config files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-1
changelog:
  - Update to upstream
  - Dontaudit leaked sockets from userdomains to user domains
  - Fixes for mcelog to handle scripts
  - Apply patch from Ruben Kerkhof
  - Allow syslog to search spool dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-7
changelog:
  - Allow nagios plugins to read usr files
  - Allow mysqld-safe to send system log messages
  - Fixes fpr ddclient policy
  - Fix sasl_admin interface
  - Allow apache to search zarafa config
  - Allow munin plugins to search /var/lib directory
  - Allow gpsd to read sysfs_t
  - Fix labels on /etc/mcelog/triggers to bin_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-6
changelog:
  - Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t
  - Allow saslauthd_t to create krb5_host_rcache_t files in /tmp
  - Fix xserver interface
  - Fix definition of /var/run/lxdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-5
changelog:
  - Turn on mediawiki policy
  - kdump leaks kdump_etc_t to ifconfig, add dontaudit
  - uux needs to transition to uucpd_t
  - More init fixes relabels man,faillog
  - Remove maxima defs in libraries.fc
  - insmod needs to be able to create tmpfs_t files
  - ping needs setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-4
changelog:
  - Allow groupd transition to fenced domain when executes fence_node
  - Fixes for rchs policy
  - Allow mpd to be able to read samba/nfs files


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-3
changelog:
  - Fix up corecommands.fc to match upstream
  - Make sure /lib/systemd/* is labeled init_exec_t
  - mount wants to setattr on all mountpoints
  - dovecot auth wants to read dovecot etc files
  - nscd daemon looks at the exe file of the comunicating daemon
  - openvpn wants to read utmp file
  - postfix apps now set sys_nice and lower limits
  - remote_login (telnetd/login) wants to use telnetd_devpts_t and user_devpts_t to work correctly
  - Also resolves nsswitch
  - Fix labels on /etc/hosts.*
  - Cleanup to make upsteam patch work
  - allow abrt to read etc_runtime_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-10
changelog:
  - Fix sandbox to work on nfs homedirs
  - Allow cdrecord to setrlimit
  - Allow mozilla_plugin to read xauth
  - Change label on systemd-logger to syslogd_exec_t
  - Install dirsrv policy from dirsrv package


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-9
changelog:
  - Add virt_home_t, allow init to setattr on xserver_tmp_t and relabel it
  - Udev needs to stream connect to init and kernel
  - Add xdm_exec_bootloader boolean, which allows xdm to execute /sbin/grub and read files in /boot directory


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-8
changelog:
  - Allow NetworkManager to read openvpn_etc_t
  - Dontaudit hplip to write of /usr dirs
  - Allow system_mail_t to create /root/dead.letter as mail_home_t
  - Add vdagent policy for spice agent daemon


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-7
changelog:
  - Dontaudit sandbox sending sigkill to all user domains
  - Add policy for rssh_chroot_helper
  - Add missing flask definitions
  - Allow udev to relabelto removable_t
  - Fix label on /var/log/wicd.log
  - Transition to initrc_t from init when executing bin_t
  - Add audit_access permissions to file
  - Make removable_t a device_node 
  - Fix label on /lib/systemd/*


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-5
changelog:
  - Allow chome to create netlink_route_socket
  - Add additional MATHLAB file context
  - Define nsplugin as an application_domain
  - Dontaudit sending signals from sandboxed domains to other domains
  - systemd requires init to build /tmp /var/auth and /var/lock dirs
  - mount wants to read devicekit_power /proc/ entries
  - mpd wants to connect to soundd port
  - Openoffice causes a setattr on a lib_t file for normal users, add dontaudit
  - Treat lib_t and textrel_shlib_t directories the same
  - Allow mount read access on virtual images


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-4
changelog:
  - Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
  - Allow devicekit_power to domtrans to mount
  - Allow dhcp to bind to udp ports > 1024 to do named stuff
  - Allow ssh_t to exec ssh_exec_t
  - Remove telepathy_butterfly_rw_tmp_files(), dev_read_printk() interfaces which are nolonger used
  - Fix clamav_append_log() intefaces
  - Fix 'psad_rw_fifo_file' interface


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-3
changelog:
  -Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
  - dovecot-auth_t needs ipc_lock
  - gpm needs to use the user terminal
  - Allow system_mail_t to append ~/dead.letter
  - Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
  - Add pid file to vnstatd
  - Allow mount to communicate with gfs_controld
  - Dontaudit hal leaks in setfiles


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-2
changelog:
  - Lots of fixes for systemd
  - systemd now executes readahead and tmpwatch type scripts
  - Needs to manage random seed


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-11
changelog:
  - Fix fusefs handling
  - Do not allow sandbox to manage nsplugin_rw_t
  - Allow mozilla_plugin_t to connecto its parent
  - Allow init_t to connect to plymouthd running as kernel_t
  - Add mediawiki policy
  - dontaudit sandbox sending signals to itself.  This can happen when they are running at different mcs.
  - Disable transition from dbus_session_domain to telepathy for F14
  - Allow boinc_project to use shm
  - Allow certmonger to search through directories that contain certs
  - Allow fail2ban the DAC Override so it can read log files owned by non root users


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-10
changelog:
  - Start adding support for use_fusefs_home_dirs
  - Add /var/lib/syslog directory file context
  - Add /etc/localtime as locale file context


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-9
changelog:
  - Turn off default transition to mozilla_plugin and telepathy domains from unconfined user 
  - Turn off iptables from unconfined user 
  - Allow sudo to send signals to any domains the user could have transitioned to.
  - Passwd in single user mode needs to talk to console_device_t
  - Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
  - locate tried to read a symbolic link, will dontaudit
  - New labels for telepathy-sunshine content in homedir
  - Google is storing other binaries under /opt/google/talkplugin
  - bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
  - Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
  - modemmanger and bluetooth send dbus messages to devicekit_power
  - Samba needs to getquota on filesystems labeld samba_share_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-7
changelog:
  - Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.
  - Allow mozilla_plugin_t to create tcp/udp/netlink_route sockets
  - Allow confined users to read xdm_etc_t files
  - Allow xdm_t to transition to xauth_t for lxdm program


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-6
changelog:
  - Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home
  - Allow clamd to send signals to itself
  - Allow mozilla_plugin_t to read user home content.  And unlink pulseaudio shm.
  - Allow haze to connect to yahoo chat and messenger port tcp:5050.
  Bz #637339
  - Allow guest to run ps command on its processes by allowing it to read /proc
  - Allow firewallgui to sys_rawio which seems to be required to setup masqerading
  - Allow all domains to search through default_t directories, in order to find differnet labels.  For example people serring up /foo/bar to be share via samba.
  - Add label for /var/log/slim.log


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-5
changelog:
  - Pull in cleanups from dgrift
  - Allow mozilla_plugin_t to execute mozilla_home_t
  - Allow rpc.quota to do quotamod


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-4
changelog:
  - Cleanup policy via dgrift
  - Allow dovecot_deliver to append to inherited log files
  - Lots of fixes for consolehelper


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-3
changelog:
  - Add the ability to send audit messages to confined admin policies
  - Remove permissive domain from cmirrord and dontaudit sys_tty_config
  - Split out unconfined_domain() calls from other unconfined_ calls so we can d
  - virt needs to be able to read processes to clearance for MLS


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-2
changelog:
  - Allow all domains that can use cgroups to search tmpfs_t directory
  - Allow init to send audit messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-2
changelog:
  - Handle /var/db/sudo
  - Allow pulseaudio to read alsa config
  - Allow init to send initrc_t dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-1
changelog:
  Allow iptables to read shorewall tmp files
  Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
  intd
  label vlc as an execmem_exec_t 
  Lots of fixes for mozilla_plugin to run google vidio chat
  Allow telepath_msn to execute ldconfig and its own tmp files
  Fix labels on hugepages
  Allow mdadm to read files on /dev
  Remove permissive domains and change back to unconfined
  Allow freshclam to execute shell and bin_t
  Allow devicekit_power to transition to dhcpc
  Add boolean to allow icecast to connect to any port


author: Dan Walsh <dwalsh@redhat.com> 3.9.2-1
changelog:
  - Merge upstream fix of mmap_zero
  - Allow mount to write files in debugfs_t
  - Allow corosync to communicate with clvmd via tmpfs
  - Allow certmaster to read usr_t files
  - Allow dbus system services to search cgroup_t
  - Define rlogind_t as a login pgm


author: Dan Walsh <dwalsh@redhat.com> 3.9.1-2
changelog:
  - Dominic Grift Cleanup
  - Miroslav Grepl policy for jabberd
  - Various fixes for mount/livecd and prelink


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-20
changelog:
  - Allow cron to look at user_cron_spool links
  - Lots of fixes for mozilla_plugin_t
  - Add sysv file system
  - Turn unconfined domains to permissive to find additional avcs


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-18
changelog:
  - Allow clamscan to read proc_t
  - Allow mount_t to write to debufs_t dir
  - Dontaudit mount_t trying to write to security_t dir


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-7
changelog:
  - Update boinc policy
  - Fix sysstat policy to allow sys_admin
  - Change failsafe_context to unconfined_r:unconfined_t:s0


author: Dan Walsh <dwalsh@redhat.com> 3.8.1-2
changelog:
  - Fix label on /var/lib/dokwiki
  - Change permissive domains to enforcing
  - Fix libvirt policy to allow it to run on mls


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Remi Collet <remi@fedoraproject.org> - 1.2.0-2
changelog:
  - Version 1.2.0 (stable) - API 1.2.0 (stable)
  - fix for https://pear.php.net/bugs/18682
    columnWrap() in Default Renderer eats up lines with only a EOL
  - fix for https://pear.php.net/bugs/19683
    Unit tests are broken
  - clean requires
  - keep doc in /usr/share/doc/pear


author: Christof Damian <christof@damian.net> - 1.1.3-2
changelog:
  - changed pear channel requirement
  - fixed license
  - move examples to toplevel doc dir
  - added check section
  - own Console directory


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - core: fix VLAN parent handling when identified by UUID
  - core: quiet warning about invalid interface index (rh #920145)
  - core: request 'static-routes' from DHCP servers (rh #922558)
  - core: fix crash when dbus-daemon is restarted (rh #918273)
  - core: copy leasefiles from /var/lib/dhclient to fix netboot (rh #916233)
  - core: memory leak and potential crash fixes
  - ifcfg-rh: ensure missing STP property is interpreted as off (rh #922702)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.8-beta2
  - core: ignore bridges managed by other tools (rh #905035)
  - core: fix libnl assert (rh #894653)
  - wifi: always use Proactive Key Caching with WPA Enterprise (rh #834444)
  - core: don't crash when Internet connection sharing fails to start (rh #883142)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.7.0-8.git20121004
changelog:
  - Apply patch from master to update hostname (rh #875085)
  - spec: create /etc/NetworkManager/dnsmasq.d (rh #873621)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.0-3.git20121004
changelog:
  - Forward-port some forgotten fixes from F17
  - Fix networked-filesystem systemd dependencies (rh #787314)
  - Don't restart NM on upgrade, don't stop NM on uninstall (rh #811200)


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - core: fix race between parallel DHCP client invocations
  - core: suppress a useless warning (rh #840580)
  - ifcfg-rh: fix segfault with malformed values (rh #841391)
  - ifcfg-rh: ignore IP config on bond slave configurations (rh #838907)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - Update to 0.9.5.95 (0.9.6-rc1) snapshot
  - core: add autoconnect, driver-versioni and firmware-version properties to NMDevice
  - core: various IPv6 improvements
  - core: reduce number of changes made to DNS information during connection setup
  - core: add Vala language bindings
  - vpn: support IPv6 over VPNs
  - wifi: add on-demand WiFi scan support


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-1
changelog:
  - applet: move to network-manager-applet RPM
  - editor: move to nm-connection-editor RPM
  - libnm-gtk: move to libnm-gtk RPM


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-0.7
changelog:
  - Update to 0.9.3.997 (0.9.4-rc1)
  - core: fix possible WiFi hang when connecting to Ad-Hoc networks
  - core: enhanced IPv6 compatibility
  - core: proxy DNSSEC data when using the 'dnsmasq' caching nameserver plugin
  - core: allow VPNs to specify multiple domain names given by the server
  - core: fix an issue creating new InfiniBand connections
  - core/applet/editor: disable WiFi Ad-Hoc WPA connections until kernel bugs are fixed


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.6
changelog:
  - core: fix issue with carrier changes not being recognized (rh #800690)
  - editor: warn user if CA certificate is left blank


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.5
changelog:
  - core: fix a crash with ipw2200 devices and adhoc networks
  - core: fix IPv6 addressing on newer kernels
  - core: fix issue with VPN plugin passwords (rh #802540)
  - cli: enhancements for Bonding, VLAN, and OLPC mesh devices
  - ifcfg-rh: fix quoting WPA passphrases that include quotes (rh #798102)
  - libnm-glib: fix some issues with duplicate devices shown in menus


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.4
changelog:
  - Update to 0.9.3.995 (0.9.4-beta1)
  - core: add support for bonding and VLAN interfaces
  - core: add support for Internet connectivity detection
  - core: add support for IPv6 Privacy Extensions
  - core: fix interaction with firewalld restarts


author: Dan Williams <dcbw@redhat.com> - 0.9.3-0.1
changelog:
  - Update to 0.9.4 snapshot
  - wimax: enable optional support for Intel WiMAX devices
  - core: use nl80211 for WiFi device control
  - core: add basic support for Infiniband IP interfaces
  - core: add basic support for bonded interfaces
  - core: in-process IP configuration no longer blocks connected state


author: Dan Williams <dcbw@redhat.com> - 0.9.2-1
changelog:
  - core: fix possible crash when talking to ModemManager
  - core: improve handling of rfkill on some machines (eeepc 1005HA and others)
  - ifcfg-rh: don't use spaces in ifcfg file names (rh #742273)
  - core: accept IPv6 Router Advertisements when forwarding is on
  - core: bump dnsmasq cache size to 400 entries
  - core: ensure IPv6 static routes are flushed when device is deactivated
  - ifcfg-rh: fix changing WPA connections to WEP
  - core: fix setting hostname from DHCP (rh #719100)
  - libnm-glib: fix various GObject introspection issues (rh #747302)
  - core: don't change routing or DNS if no devices are managed
  - core: ensure IPv6 RA-provided routes are honored


author: Adam Williamson <awilliam@redhat.com> - 1:0.9.1.90-5.git20110927
changelog:
  - Rebuilt for glibc (rh #747377)
  - core: fix setting hostname from DHCP options (rh #719100)
  - skip a release to keep up with F16


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.1.90-2.git20110927
changelog:
  - core: ifcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)
  - core: change iscsiadm path to /sbin/iscsiadm in ifcfg-rh plugin (rh #740753)
  - core: fix refcounting when deleting a default wired connection (lp:797868)


author: Dan Williams <dcbw@redhat.com> - 0.9.1.90-1
changelog:
  - Update to 0.9.1.90 (0.9.2-beta1)
  - core: fix IPv6 link-local DNS servers in the dnsmasq DNS plugin
  - cli: add ability to delete connections
  - keyfile: fix an issue with duplicated keyfile connections
  - core: ensure the 'novj' option is passed through to pppd
  - core: store timestamps for VPN connections too (rh #725353)


author: Dan Williams <dcbw@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9 release
  - core: fix issue where scan results could be ignored
  - core: ensure agent secrets are preserved when updating connections
  - core: don't autoconnect disabled modems
  - core: fix race when checking modem enabled/disabled status after disabling
  - core: ensure newly installed VPN plugins can actually talk to NM
  - core: add support for 802.1X certificate subject matching
  - libnm-glib: various introspection fixes
  - applet/editor: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-6.git20110721
changelog:
  - core: updated Russian translation (rh #652904)
  - core: fix possible crash if secrets are missing
  - core: append interface name for IPv6 link-local DNS server addresses (rh #720001)
  - core: fix setting hostname from DHCP options (rh #719100)
  - libnm-util: GObject introspection annotation fixes
  - libnm-util: ensure IP address/route prefixes are valid
  - ifcfg-rh: read anonymous identity for 802.1x PEAP connections (rh #708436)
  - applet: show notifications on CDMA home/roaming changes
  - applet: fix various issues saving VPN secrets
  - editor: allow exporting VPN secrets
  - editor: default to IPv6 "automatic" addressing mode


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-5.git20110702
changelog:
  - core: ensure users are authorized for shared wifi connections (CVE-2011-2176) (rh #715492)
  - core: retry failed connections after 5 minute timeout
  - core: immediately request new 802.1x 'always ask' passwords if they fail
  - core: add MAC blacklisting capability for WiFi and Wired connections
  - core: retry failed connections when new users log in (rh #706204)
  - applet: updated translations
  - core: drop compat interface now that KDE bits are updated to NM 0.9 API


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-4.git20110620
changelog:
  - core: don't cache "(none)" hostname at startup (rh #706094)
  - core: fix handling of VPN connections with only system-owned secrets
  - core: fix optional waiting for networking at startup behavior (rh #710502)
  - ifcfg-rh: fix possible crashes in error cases
  - ifcfg-rh: fix various IPv4 and IPv6 handling issues
  - applet: add notifications of GSM mobile broadband registration status
  - editor: move secrets when making connections available to all users or private
  - applet: don't show irrelevant options when asking for passwords


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-3.git20110613
changelog:
  - keyfile: better handling of missing certificates/private keys
  - core: fix issues handling "always-ask" wired and WiFi 802.1x connections (rh #703785)
  - core: fix automatic handling of hidden WiFi networks (rh #707406)
  - editor: fix possible crash after reading network connections (rh #706906)
  - editor: make Enter/Return key close WiFi password dialogs (rh #708666)


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-1.git20110531
changelog:
  - editor: fix resizing of UI elements (rh #707269)
  - core: retry wired connections when cable is replugged
  - core: fix a few warnings and remove some left-over debugging code


author: Dan Williams <dcbw@redhat.com> - 0.8.999-3.git20110526
changelog:
  - compat: fix activation/deactivation of VPN connections (rh #699786)
  - core: fix autodetection of previously-used hidden wifi networks
  - core: silence error if ConsoleKit database does not yet exist (rh #695617)
  - core: fix Ad-Hoc frequency handling (rh #699203)
  - core: fixes for migrated OpenConnect VPN plugin connections
  - core: various fixes for VPN connection secrets handling
  - core: send only short hostname to DHCP servers (rh #694758)
  - core: better handling of PKCS#8 private keys
  - core: fix dispatcher script interface name handling
  - editor: fix potential crash when connection is invalid (rh #704848)
  - editor: allow _ as a valid character for GSM APNs


author: Dan Williams <dcbw@redhat.com> - 0.8.999-2.git20110509
changelog:
  - core: fix possible crash when connections are deleted
  - core: fix exported symbols in libnm-util and libnm-glib
  - core/applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.999-1
changelog:
  - core: ensure DER format certificates are correctly recognized (rh #699591)
  - core: fix WINS server handling in client helper libraries
  - core: enhance dispatcher script environment to include IPv6 and VPN details
  - applet: migrate openswan connections to 0.9
  - editor: improve usability of editing IP addresses (rh #698199)


author: Dan Williams <dcbw@redhat.com> - 0.8.998-4.git20110427
changelog:
  - core: enable optimized background roaming for WPA Enterprise configs
  - core: better handling of WiFi and WiMAX rfkill (rh #599002)
  - applet: fix crash detecting Bluetooth DUN devices a second time
  - ifcfg-rh: fix managed/unmanaged changes when removing connections (rh #698202)


author: Dan Williams <dcbw@redhat.com> - 0.8.998-3.git20110419
changelog:
  - core: systemd and startup enhancements for NFS mounts
  - core: more efficient startup process
  - core: fix handling of multiple logins when one is inactive
  - core: fix handling of S390/Hercules CTC network interfaces (rh #641986)
  - core: support Easytether interfaces for Android phones
  - core: fix handling of WWAN enable/disable states
  - ifcfg-rh: harmonize handling if IPADDR/PREFIX/NETMASK with initscripts (rh #658907)
  - applet: fix connection to WPA Enterprise networks (rh #694765)


author: Dan Williams <dcbw@redhat.com> - 0.8.998-1
changelog:
  - Update to 0.8.998 (0.9.0-rc1)
  - core: fix near-infinite requests for passwords (rh #692783)
  - core: fix handling of wired 802.1x connections
  - core: ignore Nokia PC-Suite ethernet devices we can't use yet
  - applet: migrate 0.8 OpenVPN passwords to 0.9 formats


author: Dan Williams <dcbw@redhat.com> - 0.8.997-8.git20110331
changelog:
  - core: resurrect default VPN username
  - core: don't stomp on crypto library users by de-initing the crypto library


author: Dan Williams <dcbw@redhat.com> - 0.8.997-7.git20110330
changelog:
  - core: fix creation of default wired connections
  - core: fix requesting new secrets when old ones fail (ex changing WEP keys)
  - editor: ensure all pages are sensitive after retrieving secrets
  - editor: fix crash when scrolling through connection lists (rh #693446)
  - applet: fix crash after using the wifi or wired secrets dialogs (rh #693446)


author: Dan Williams <dcbw@redhat.com> - 0.8.997-5.git20110328
changelog:
  - core: fix connection deactivation on the compat interface
  - core: give default wired connections a more friendly name
  - core: fix base type of newly created wired connections
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.997-4.git20110325
changelog:
  - core: fix possible libnm-glib crash when activating connections
  - applet: fix various naming and dialog title issues


author: Dan Williams <dcbw@redhat.com> - 0.8.997-1
changelog:
  - Update to 0.8.997 (0.9-beta3)
  - ifcfg-rh: fix reading and writing of Dynamic WEP connections using LEAP as the eap method
  - wifi: fix signal strength for scanned access points with some drivers
  - applet: translation updates


author: Dan Williams <dcbw@redhat.com> - 0.8.995-1.git20110308
changelog:
  - Update to NetworkManager 0.9-beta1
  - core: consolidate user and system settings services into NM itself
  - core: add WiMAX support
  - applet: support Fast User Switching


author: Dan Williams <dcbw@redhat.com> - 0.8.1-9
changelog:
  - core: fix suspend/resume regression (rh #638640)
  - core: fix issue causing some nmcli requests to be ignored


author: Dan Williams <dcbw@redhat.com> - 0.8.1-6
changelog:
  - core: add dispatcher events on DHCPv4 and DHCPv6 lease changes
  - core: enforce access permissions when enabling/disabling WiFi and WWAN (rh #626337)
  - core: listen for UPower suspend/resume signals
  - applet: fix disabled Enable Networking and Enable Wireless menu items (rh #627365)
  - applet: updated translations
  - applet: obscure Mobile Broadband PIN in secondary unlock dialog


author: Dan Williams <dcbw@redhat.com> - 0.8.1-2
changelog:
  - core: quiet annoying warnings (rh #612991)
  - core: fix retrieval of various IP options in libnm-glib (rh #611141)
  - core: ship NetworkManager.conf instead of deprecated nm-system-settings.conf (rh #606160)
  - core: add short hostname to /etc/hosts too (rh #621910)
  - core: recheck autoactivation when new system connections appear
  - core: enable DHCPv6-only configurations (rh #612445)
  - core: don't fail connection immediately if DHCP lease expires (rh #616084) (rh #590874)
  - core: fix editing of PPPoE system connections
  - core: work around twitchy frequency reporting of various wifi drivers
  - core: don't tear down user connections on console changes (rh #614556)
  - cli: wait a bit for NM's permissions check to complete (rh #614866)
  - ifcfg-rh: ignore BRIDGE and VLAN configs and treat as unmanaged (rh #619863)
  - man: add manpage for nm-online
  - applet: fix crash saving ignore-missing-CA-cert preference (rh #619775)
  - applet: hide PIN/PUK by default in the mobile PIN/PUK dialog (rh #615085)
  - applet: ensure Enter closes the PIN/PUK dialog (rh #611831)
  - applet: fix another crash in ignore-CA-certificate handling (rh #557495)
  - editor: fix handling of Wired/s390 connections (rh #618620)
  - editor: fix crash when canceling editing in IP address pages (rh #610891)
  - editor: fix handling of s390-specific options
  - editor: really fix crash when changing system connections (rh #603566)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-1
changelog:
  - core: read nm-system-settings.conf before NetworkManager.conf (rh #606160)
  - core: fix editing system DSL connections when using keyfile plugin
  - core: work around inconsistent proprietary driver associated AP reporting
  - core: ensure empty VPN secrets are not used (rh #587784)
  - core: don't request WiFi scans when connection is locked to a specific BSSID
  - cli: show IPv6 settings and configuration
  - applet: updated translations
  - editor: fix a PolicyKit-related crash editing connections (rh #603566)
  - applet: fix saving the ignore-missing-CA-cert preference (rh #610084)
  - editor: fix listing connections on PPC64 (rh #608663)
  - editor: ensure editor windows are destroyed when closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.4
changelog:
  - Update to 0.8.1 release candidate
  - core: fix WWAN hardware enable state tracking (rh #591622)
  - core: fix Red Hat initscript return value on double-start (rh #584321)
  - core: add multicast route entry for IPv4 link-local connections
  - core: fix connection sharing in cases where a dnsmasq config file exists
  - core: fix handling of Ad-Hoc wifi connections to indicate correct network
  - core: ensure VPN interface name is passed to dispatcher when VPN goes down
  - ifcfg-rh: fix handling of ASCII WEP keys
  - ifcfg-rh: fix double-quoting of some SSIDs (rh #606518)
  - applet: ensure deleted connections are actually forgotten (rh #618973)
  - applet: don't crash if the AP's BSSID isn't availabe (rh #603236)
  - editor: don't crash on PolicyKit events after windows are closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.3
changelog:
  - core: fix nm-online crash (rh #593677)
  - core: fix failed suspend disables network (rh #589108)
  - core: print out missing firmware errors (rh #594578)
  - applet: fix device descriptions for some mobile broadband devices
  - keyfile: bluetooth fixes
  - applet: updated translations (rh #589230)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.2.git20100519
changelog:
  - core: use GIO in local mode only (rh #588745)
  - core: updated translations (rh #589230)
  - core: be more lenient in IPv6 RDNSS server expiry (rh #590202)
  - core: fix headers to be C++ compatible (rh #592783)
  - applet: updated translations (rh #589230)
  - applet: lock connections with well-known SSIDs to their specific AP


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.1.git20100510
changelog:
  - core: fix handling of IPv6 RA flags when router goes away (rh #588560)
  - bluetooth: fix crash configuring DUN connections from the wizard (rh #590666)


author: Dan Williams <dcbw@redhat.com> - 0.8-13.git20100509
changelog:
  - core: restore initial accept_ra value for IPv6 ignored connections (rh #588619)
  - bluetooth: fix bad timeout on PAN connections (rh #586961)
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8-12.git20100504
changelog:
  - core: treat missing IPv6 configuration as ignored (rh #588814)
  - core: don't flush IPv6 link-local routes (rh #587836)
  - cli: update output formatting


author: Dan Williams <dcbw@redhat.com> - 0.8-11.git20100503
changelog:
  - core: allow IP configuration as long as one method completes (rh #567978)
  - core: don't prematurely remove IPv6 RDNSS nameservers (rh #588192)
  - core: ensure router advertisements are only used when needed (rh #588613)
  - editor: add IPv6 gateway editing capability


author: Dan Williams <dcbw@redhat.com> - 0.8-10.git20100502
changelog:
  - core: IPv6 autoconf, DHCP, link-local, and manual mode fixes
  - editor: fix saving IPv6 address in user connections


author: Dan Williams <dcbw@redhat.com> - 0.8-8.git20100426
changelog:
  - core: fix issues with IPv6 router advertisement mishandling (rh #530670)
  - core: many fixes for IPv6 RA and DHCP handling (rh #538499)
  - core: ignore WWAN ethernet devices until usable (rh #585214)
  - ifcfg-rh: fix handling of WEP passphrases (rh #581718)
  - applet: fix crashes (rh #582938) (rh #582428)
  - applet: fix crash with multiple concurrent authorization requests (rh #585405)
  - editor: allow disabling IPv4 on a per-connection basis
  - editor: add support for IPv6 DHCP-only configurations


author: Dan Williams <dcbw@redhat.com> - 0.8-7.git20100422
changelog:
  - core: fix crash during install (rh #581794)
  - wifi: fix crash when supplicant segfaults after resume (rh #538717)
  - ifcfg-rh: fix MTU handling for wired connections (rh #569319)
  - applet: fix display of disabled mobile broadband devices


author: Dan Williams <dcbw@redhat.com> - 0.8-5.git20100408
changelog:
  - core: more flexible logging
  - core: fix crash with OLPC mesh devices after suspend
  - applet: updated translations
  - applet: show mobile broadband signal strength and technology in the icon
  - applet: fix continuous password requests for 802.1x connections (rh #576925)
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8-3.git20100323
changelog:
  - core: don't exit early on non-fatal state file errors
  - core: fix Bluetooth connection issues (rh #572340)
  - applet: fix some translations (rh #576056)
  - applet: better feedback when wrong PIN/PUK is entered
  - applet: many updated translations
  - applet: PIN2 unlock not required for normal modem functionality
  - applet: fix wireless secrets dialog display


author: Dan Williams <dcbw@redhat.com> - 0.8-2.git20100317
changelog:
  - man: many manpage updates
  - core: determine classful prefix if non is given via DHCP
  - core: ensure /etc/hosts is always up-to-date and correct (rh #569914)
  - core: support GSM network and roaming preferences
  - applet: startup speed enhancements
  - applet: better support for OTP/token-based WiFi connections (rh #526383)
  - applet: show GSM and CDMA registration status and signal strength when available
  - applet: fix zombie GSM and CDMA devices in the menu
  - applet: remove 4-character GSM PIN/PUK code limit
  - applet: fix insensitive WiFi Create... button (rh #541163)
  - applet: allow unlocking of mobile devices immediately when plugged in


author: Dan Williams <dcbw@redhat.com> - 0.8-1.git20100219
changelog:
  - core: update to final 0.8 release
  - core: fix Bluetooth DUN connections when secrets are needed
  - ifcfg-rh: add helper for initscripts to determine ifcfg connection UUIDs
  - applet: fix Bluetooth connection secrets requests
  - applet: fix rare conflict with other gnome-bluetooth plugins


