| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: checkpolicy | Distribution: SUSE Linux Enterprise 15 |
| Version: 3.5 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: 150600.1.3 | Build date: Thu May 9 15:34:59 2024 |
| Group: Productivity/Security | Build host: mourvedre |
| Size: 2046945 | Source RPM: checkpolicy-3.5-150600.1.3.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: https://github.com/SELinuxProject/selinux | |
| Summary: SELinux policy compiler | |
checkpolicy is the SELinux policy compiler. It uses libsepol to generate the binary policy. (Security-enhanced Linux is a feature of the kernel and some utilities that implement mandatory access control policies, such as Type Enforcement, Role-based Access Control and Multi-Level Security.)
GPL-2.0-or-later
* Fri Feb 24 2023 jsegitz@suse.com
- Update to version 3.5
* error out if required permission would exceed limit
* Improve error message for type bounds
- Added additional developer key (Jason Zaman)
* Mon May 09 2022 jsegitz@suse.com
- Update to version 3.4
* warn on bogus IP address or netmask in nodecon statement
* allow wildcard permissions in constraints
* mention class name on invalid permission
* Thu Nov 11 2021 jsegitz@suse.com
- Update to version 3.3
* When reading a binary policy by checkpolicy, do not automatically change the version
to the max policy version supported by libsepol or, if specified, the value given
using the "-c" flag.
* Updated documentation
* Prints the reason why opening a source policy file failed
* Tue Mar 09 2021 jsegitz@suse.com
- Update to version 3.2
* Fix a memleak and an integer overflow
* Tue Jul 14 2020 jsegitz@suse.com
- Update to version 3.1
* checkpolicy treats invalid characters as an error - might break rare use
cases (intentionally)
* Drop extern_te_assert_t.patch, is upstream
* Tue Mar 03 2020 jsegitz@suse.de
- Update to version 3.0
* add flag to enable policy optimization
* allow to write policy to stdout
* remove a redundant if-condition
* Wed Jan 15 2020 jsegitz@suse.de
- Add extern_te_assert_t.patch to mark te_assert_t as extern.
Prevents build failures on gcc10 (bsc#1160259)
* Wed Mar 20 2019 jsegitz@suse.com
- Update to version 2.9
* Add option to sort contexts when creating a binary policy
* Update manpage
* check the result value of hashtable_search
* destroy the class datum if it fails to initialize
* remove extraneous policy build noise
* Sun Nov 11 2018 jengelh@inai.de
- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
(RPM_LD_FLAGS is always empty).
* Wed Nov 07 2018 jsegitz@suse.com
- Source URL was invalid (bsc#1115052)
* Wed Oct 17 2018 jsegitz@suse.com
- Update to version 2.8 (bsc#1111732).
For changes please see
https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Dropped checkpolicy-build.patch, not necessary anymore
- Removed BuildRequires for byacc. It builds without and this blocks
building on SLE 15
* Mon Jun 11 2018 jsegitz@suse.com
- checkpolicy-build.patch was added in the former change to fix build
failures
* Wed May 16 2018 mcepl@suse.com
- Rebase to 2.7.
For changes please see
https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt
* Fri Nov 24 2017 jsegitz@suse.com
- Update to version 2.6. Notable changes:
* Add types associated to a role in the current scope when parsing
* Extend checkpolicy pathname matching
* Set flex as default lexer
* Fix checkmodule output message
* Fail if module name different than output base filename
* Add support for portcon dccp protocol
* Thu Jun 29 2017 mpluskal@suse.com
- Use plain flex
* Thu Jul 21 2016 jengelh@inai.de
- Trim/update description
* Thu Jul 14 2016 jsegitz@novell.com
- Without bug number no submit to SLE 12 SP2 is possible, so to make
sle-changelog-checker happy: bsc#988977
* Fri Jul 08 2016 i@marguerite.su
- update version 2.5
* Add neverallow support for ioctl extended permissions
* fix double free on name-based type transitions
* switch operations to extended perms
* policy_define.c: fix compiler warnings
* Remove uses of -Wno-return-type
* Fix -Wreturn-type issues
* dispol: display operations as ranges
* dispol: Extend to display operations
* Add support for ioctl command whitelisting
* Add option to write CIL policy
* Add device tree ocontext nodes to Xen policy
* Widen Xen IOMEM context entries
* Expand allowed character set in paths
* Fix precedence between number and filesystem tokens
* dispol/dismod fgets function warnings fix
- changes in 2.4
* Fix bugs found by hardened gcc flags
* Add missing semicolon in cond_else parser rule
* Clear errno before call to strtol(3)
* Global C++11 compatibility
* Allow libsepol C++ static library on device
/usr/bin/checkmodule /usr/bin/checkpolicy /usr/bin/sedismod /usr/bin/sedispol /usr/share/man/man8/checkmodule.8.gz /usr/share/man/man8/checkpolicy.8.gz /usr/share/man/ru/man8/checkmodule.8.gz /usr/share/man/ru/man8/checkpolicy.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Mar 9 16:30:14 2026