libsepol2-32bit-3.6-1.2 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

libsepol provides an API for the manipulation of SELinux binary
policies. It is used by checkpolicy (the policy compiler) and similar
tools, as well as by programs like load_policy that need to perform
specific transformations on binary policies such as customizing
policy boolean settings.

(Security-enhanced Linux is a feature of the kernel and some
utilities that implement mandatory access control policies, such as
Type Enforcement, Role-based Access Control and Multi-Level
Security.)

Provides

• libsepol2-32bit
• libsepol.so.2
• libsepol.so.2(LIBSEPOL_1.0)
• libsepol.so.2(LIBSEPOL_1.1)
• libsepol.so.2(LIBSEPOL_3.0)
• libsepol.so.2(LIBSEPOL_3.4)
• libsepol.so.2(LIBSEPOL_3.6)
• libsepol2-32bit(x86-32)

Requires

• /bin/sh
• libc.so.6
• libc.so.6(GLIBC_2.0)
• libc.so.6(GLIBC_2.1.3)
• libc.so.6(GLIBC_2.26)
• libc.so.6(GLIBC_2.3)
• libc.so.6(GLIBC_2.3.4)
• libc.so.6(GLIBC_2.33)
• libc.so.6(GLIBC_2.38)
• libc.so.6(GLIBC_2.4)
• libc.so.6(GLIBC_2.7)
• libc.so.6(GLIBC_2.8)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

LGPL-2.1-or-later

Changelog

* Tue Dec 19 2023 Cathy Hu <cathy.hu@suse.com>
  - Update to version 3.6
    https://github.com/SELinuxProject/selinux/releases/tag/3.6
    * struct cond_expr_t bool renamed to boolean
      The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
    * Add notself support for neverallow rules
    * Improve man pages
    * man pages: Remove the Russian translations
    * Add notself and other support to CIL
    * Add support for deny rules
    * Translations updated from
      https://translate.fedoraproject.org/projects/selinux/
    * Bug fixes
  - Remove keys from keyring since they expired:
    - E853C1848B0185CF42864DF363A8AD4B982C4373
      Petr Lautrbach <plautrba@redhat.com>
    - 63191CE94183098689CAB8DB7EF137EC935B0EAF
      Jason Zaman <jasonzaman@gmail.com>
  - Add key to keyring:
    - B8682847764DF60DF52D992CBC3905F235179CF1
      Petr Lautrbach <lautrbach@redhat.com>
* Thu Mar 23 2023 Martin Liška <mliska@suse.cz>
  - Enable LTO now (boo#1138813).
* Fri Feb 24 2023 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.5
    * Stricter policy validation
    * do not write empty class definitions to allow simpler round-trip tests
    * reject attributes in type av rules for kernel policies
  - Added additional developer key (Jason Zaman)
* Mon May 09 2022 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.4
    * Add 'ioctl_skip_cloexec' policy capability
    * Add sepol_av_perm_to_string
    * Add policy utilities
    * Support IPv4/IPv6 address embedding
    * Hardened/added many validations
    * Add support for file types in writing out policy.conf
    * Allow optional file type in genfscon rules
* Thu Nov 11 2021 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.3
    * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
      are all included
    * Lot of smaller fixes identified by fuzzing
* Wed Jul 21 2021 Johannes Segitz <jsegitz@suse.com>
  - Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928.
    Added CVE-2021-36087.patch
* Mon Jul 05 2021 Johannes Segitz <jsegitz@suse.com>
  - Fix use-after-free in __cil_verify_classperms (CVE-2021-36085, 1187965).
    Added CVE-2021-36085.patch
  - Fix use-after-free in cil_reset_classpermission (CVE-2021-36086, 1187964).
    Added CVE-2021-36086.patch
* Tue Mar 09 2021 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.2
    * more space-efficient form of storing filename transitions in the binary
      policy and reduced the size of the binary policy
    * dropped old and deprecated symbols and functions. Version was bumped to
      libsepol.so.2
* Thu Oct 29 2020 Ludwig Nussel <lnussel@suse.de>
  - install to /usr (boo#1029961)
* Tue Jul 14 2020 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.1
    * Add support for new polcap genfs_seclabel_symlinks
    * Initialize the multiple_decls field of the cil db
    * Return error when identifier declared as both type and attribute
    * Write CIL default MLS rules on separate lines
    * Sort portcon rules consistently
    * Remove leftovers of cil_mem_error_handler
    * Drop remove_cil_mem_error_handler.patch, is included

Files

/usr/lib/libsepol.so.2

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 30 23:52:28 2024