| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libsepol-utils | Distribution: openSUSE Tumbleweed |
| Version: 3.11 | Vendor: openSUSE |
| Release: 1.2 | Build date: Mon Jul 6 15:26:03 2026 |
| Group: System/Base | Build host: reproducible |
| Size: 84580 | Source RPM: libsepol-3.11-1.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/SELinuxProject/selinux/wiki/Releases | |
| Summary: SELinux binary policy manipulation tools | |
libsepol provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.
LGPL-2.1-or-later
* Mon Jul 06 2026 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.11
https://github.com/SELinuxProject/selinux/releases/tag/3.11
- User-visible changes:
- Fixed libsepol generation of constraint expressions with a list of names when
writing policy.conf from CIL.
- Fixed libsepol to generate constrain/validatetrans instead of
mlsconstrain/mlsvalidatetrans when converting a module to CIL unless the
constraint contains an expression based on level.
- Fixed libsepol selection of tunableif or booleanif and to skip empty
conditional blocks when converting a module to CIL.
- Fixed libsepol/secilc reporting of CIL source file info.
- Fixed libsepol to require at least one perm in a CIL classperm and to
correctly count the number of elements in the avtab.
- Fixed libsepol to link xperm rule permissions correctly.
- Fixed libsepol off-by-one error in cats_ebitmap_len().
- Development-relevant changes:
- Reformatted entire tree based on .clang-format and added new
check-format/format make targets to check and/or reformat code to match.
This is now a requirement for new patches.
- Many hardening fixes spanning the entire tree
- Notable bug fixes:
- libsepol: cast to unsigned char in ctype calls
- libsepol: bound type values in type_set_expand negset loop
- libsepol/cil: fix double free of borrowed type datum on error path
* Thu Feb 05 2026 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10
* libsepol: fix TARGET and LIBSO on Darwin
* libsepol: add bpf_token_perms polcap
* libsepol: Fix erroneous genfscon asterisks
* libsepol: Fix sid handling when writing out policy from binary
* libsepol: Fix an error in the policyd validation of user datums
* libsepol: Fix processing of levels for user rule in an optional block
* libsepol: Fix problem with handling type attributes in role-types rule
* libsepol: Expand role attributes when expanding instead of when linking
* libsepol: Fix expand_role_attributes_in_attributes()
* libsepol: Allow type attributes to be associated with other type attributes
* libsepol: Tighten checks on MLS range and level when validating
* libsepol: Check for an unset sensitivity in module_to_cil
* libsepol: Handled required users in module_to_cil
* libsepol: Fix potential NULL dereference in policydb_read()
* libsepol: Fix potential use of an uninitialized value in link.c
* libsepol: Fix possible use-after-free when expanding attributes
* libsepol: Support functionfs_seclabel policycap
* libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman <jasonzaman@gmail.com>
* added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]
* Thu Jul 17 2025 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.9
* Add new 'netif_wildcard' policy capability
* Allow multiple policycap statements
* Support genfs_seclabel_wildcard
* Introduce neveraudit types
* Fri Mar 07 2025 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.8.1
https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
* no source change
* Tue Feb 04 2025 Robert Frohl <rfrohl@suse.com>
- Update to version 3.8
https://github.com/SELinuxProject/selinux/releases/tag/3.8
* libsepol: Support nlmsg extended permissions
* libsepol: Add policy capability netlink_xperm
* libsepol: add support for xperms in conditional policies
* Code improvements and bug fixes
- For a more in depth list of changes see
https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach <lautrbach@redhat.com>
* removed 0xBC3905F235179CF1 (expired: 2024-10-25)
* added 0xFB4C685B5DC1C13E (expires: 2026-11-04)
* Mon Jul 01 2024 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.7
https://github.com/SELinuxProject/selinux/releases/tag/3.7
* User-visible changes:
* libsepol: improve policy lookup failure message
* libsepol: include prefix for module policy versions
* libsepol: validate type-attribute-map for old policies
* libsepol: only exempt gaps checking for kernel policies
* Bugfixes:
* libsepol/src/Makefile: fix reallocarray detection
* libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
* libsepol: ensure transitivity in compare functions
* oss-fuzz fixes:
* libsepol: check scope permissions refer to valid class
* libsepol: validate attribute-type maps
* libsepol: reject self flag in type rules in old policies
* libsepol: validate class permissions
* libsepol: validate access vector permissions
* libsepol: reject MLS support in pre-MLS policies
* libsepol: Fix buffer overflow when using sepol_av_to_string()
* libsepol: Use a dynamic buffer in sepol_av_to_string()
* Tue Dec 19 2023 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.6
https://github.com/SELinuxProject/selinux/releases/tag/3.6
* struct cond_expr_t bool renamed to boolean
The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
* Add notself support for neverallow rules
* Improve man pages
* man pages: Remove the Russian translations
* Add notself and other support to CIL
* Add support for deny rules
* Translations updated from
https://translate.fedoraproject.org/projects/selinux/
* Bug fixes
- Remove keys from keyring since they expired:
- E853C1848B0185CF42864DF363A8AD4B982C4373
Petr Lautrbach <plautrba@redhat.com>
- 63191CE94183098689CAB8DB7EF137EC935B0EAF
Jason Zaman <jasonzaman@gmail.com>
- Add key to keyring:
- B8682847764DF60DF52D992CBC3905F235179CF1
Petr Lautrbach <lautrbach@redhat.com>
* Thu Mar 23 2023 Martin Liška <mliska@suse.cz>
- Enable LTO now (boo#1138813).
* Fri Feb 24 2023 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.5
* Stricter policy validation
* do not write empty class definitions to allow simpler round-trip tests
* reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)
* Mon May 09 2022 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.4
* Add 'ioctl_skip_cloexec' policy capability
* Add sepol_av_perm_to_string
* Add policy utilities
* Support IPv4/IPv6 address embedding
* Hardened/added many validations
* Add support for file types in writing out policy.conf
* Allow optional file type in genfscon rules
/usr/bin/chkcon /usr/bin/sepol_check_access /usr/bin/sepol_compute_av /usr/bin/sepol_compute_member /usr/bin/sepol_compute_relabel /usr/bin/sepol_validate_transition /usr/share/man/man8/chkcon.8.gz /usr/share/man/man8/genpolbools.8.gz /usr/share/man/man8/genpolusers.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 02:32:54 2026