| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: cil | Distribution: openSUSE Tumbleweed |
| Version: 3.11 | Vendor: openSUSE |
| Release: 1.1 | Build date: Tue Jul 7 17:30:46 2026 |
| Group: Development/Languages/Other | Build host: reproducible |
| Size: 84173 | Source RPM: cil-3.11-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/SELinuxProject/selinux | |
| Summary: SELinux Common Intermediate Language compiler | |
The SELinux Common Intermediate Language (CIL) is designed to be a language that sits between one or more high level policy languages (such as the current module language) and the low-level kernel policy representation. This is a compiler for CIL.
BSD-2-Clause
* Tue Jul 07 2026 Cathy Hu <cathy.hu@suse.com>
- Fix secilcheck double-free (bsc#1270622)
- Add patch: 1270622-Fix-double-free-in-secilcheck.patch
- was merged upstream, can be dropped once the new release is out
* Mon Jul 06 2026 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.11
https://github.com/SELinuxProject/selinux/releases/tag/3.11
- User-visible changes:
- Added `secilcheck` program to check CIL neverallows against binary policies
- Multiple documentation improvements.
- Development-relevant changes:
- Reformatted entire tree based on .clang-format and added new
check-format/format make targets to check and/or reformat code to match.
This is now a requirement for new patches.
- Notable Bugfixes:
- secilc: Use fstat instead of stat to avoid TOCTOU issues
- Packaging changes:
- Add secilcheck
* Thu Feb 05 2026 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10
* secilc: use correct long option name for -X
- keyring: Add key of Jason Zaman <jasonzaman@gmail.com>
* added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]
* Wed Jul 23 2025 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.9
* Expand class-permissions in deny rules
* Fix copying of declarations
* Reject wildcard only network interface names
* Fri Mar 07 2025 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.8.1
https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
* no source change
* Tue Feb 04 2025 Robert Frohl <rfrohl@suse.com>
- Update to version 3.8
https://github.com/SELinuxProject/selinux/releases/tag/3.8
* Code improvements and bug fixes
- For a more in depth list of changes see
https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach <lautrbach@redhat.com>
* removed 0xBC3905F235179CF1 (expired: 2024-10-25)
* added 0xFB4C685B5DC1C13E (expires: 2026-11-04)
* Mon Jul 01 2024 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.7
https://github.com/SELinuxProject/selinux/releases/tag/3.7
* Improved man pages
* Tue Dec 19 2023 Cathy Hu <cathy.hu@suse.com>
- Update to version 3.6
https://github.com/SELinuxProject/selinux/releases/tag/3.6
* cil: Allow IP address and mask values to be directly written
* cil: Allow paths in filecon rules to be passed as arguments
* Add notself support for neverallow rules
* Improve man pages
* man pages: Remove the Russian translations
* Add notself and other support to CIL
* Add support for deny rules
* Translations updated from
https://translate.fedoraproject.org/projects/selinux/
* Bug fixes
- Remove keys from keyring since they expired:
- E853C1848B0185CF42864DF363A8AD4B982C4373
Petr Lautrbach <plautrba@redhat.com>
- 63191CE94183098689CAB8DB7EF137EC935B0EAF
Jason Zaman <jasonzaman@gmail.com>
- Add key to keyring:
- B8682847764DF60DF52D992CBC3905F235179CF1
Petr Lautrbach <lautrbach@redhat.com>
* Fri Feb 24 2023 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.5
* Restore error on context rule conflicts
* Documentation fixes
- Added additional developer key (Jason Zaman)
* Mon May 09 2022 Johannes Segitz <jsegitz@suse.com>
- Update to version 3.4
* Allow optional file type in genfscon rules
* Do not copy blockabstracts when inheriting a block
* Mark as abstract all sub-blocks of an abstract block
* Do not resolve names to declarations in abstract blocks
* Ensure that the class in a classcommon is a kernel class
* Limit the neverallow violations reported
* Limit the amount of reporting for context rule conflicts
/usr/bin/secil2conf /usr/bin/secil2tree /usr/bin/secilc /usr/bin/secilcheck /usr/share/man/man8/secil2conf.8.gz /usr/share/man/man8/secil2tree.8.gz /usr/share/man/man8/secilc.8.gz /usr/share/man/man8/secilcheck.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Aug 3 00:14:01 2026