<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="107">
<package pkgid="0741aa3322007a3d62209060ba890ca834ea7fe62a0498599fac3b7d25214fe2bfe366d374d59ef69293477d4b2df0c16adf161cbf498aa8b135a90aa1be7216" name="checkpolicy" arch="i586">
  <version epoch="0" ver="3.10" rel="82.7"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
  show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * checkpolicy: support CIDR notation for nodecon statements
  * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
  * checkpolicy: handle unprintable token
  * checkpolicy: avoid assigning garbage values
  * checkpolicy: free temporary bounds type
  * checkpolicy: perform contiguous check in host byte order
  * checkpolicy: include &lt;ctype.h&gt; for isprint(3)
  * oss-fuzz fixes:
  * checkpolicy: add libfuzz based fuzzer
  * checkpolicy: free complete role_allow_rule on error
  * checkpolicy: free identifiers on invalid typebounds
  * checkpolicy: return YYerror on invalid character
  * checkpolicy: clone level only once</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add support for wildcard netifcon names
  * Abort on mismatched declarations
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  - Fix problem with bounds statements in optional blocks
  - Provide a better error message for implicit role and user bounds
  - Allow type attributes to be associated with other type attributes
  - checkpolicy/tests: Modify tests to check handling of initial sids
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="0574223e265eedf65b159f4d8df150a6e268f3c4f01d34fd2b4c1227f7c012e124af580520d3e9c9f7de82250c414eba421c0135a476ff4daafabef2ba3b91f4" name="checkpolicy" arch="src">
  <version epoch="0" ver="3.10" rel="82.7"/>
  <changelog author="jsegitz@suse.com" date="1511524800">- Update to version 2.6. Notable changes:
  * Add types associated to a role in the current scope when parsing
  * Extend checkpolicy pathname matching
  * Set flex as default lexer
  * Fix checkmodule output message
  * Fail if module name different than output base filename
  * Add support for portcon dccp protocol</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 2.7.
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1528718400">- checkpolicy-build.patch was added in the former change to fix build
  failures</changelog>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732).
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Dropped checkpolicy-build.patch, not necessary anymore
- Removed BuildRequires for byacc. It builds without and this blocks
  building on SLE 15</changelog>
  <changelog author="jsegitz@suse.com" date="1541592000">- Source URL was invalid (bsc#1115052)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541937600">- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
  (RPM_LD_FLAGS is always empty).</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add option to sort contexts when creating a binary policy
  * Update manpage
  * check the result value of hashtable_search
  * destroy the class datum if it fails to initialize
  * remove extraneous policy build noise</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1579089600">- Add extern_te_assert_t.patch to mark te_assert_t as extern.
  Prevents build failures on gcc10 (bsc#1160259)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
  show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * checkpolicy: support CIDR notation for nodecon statements
  * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
  * checkpolicy: handle unprintable token
  * checkpolicy: avoid assigning garbage values
  * checkpolicy: free temporary bounds type
  * checkpolicy: perform contiguous check in host byte order
  * checkpolicy: include &lt;ctype.h&gt; for isprint(3)
  * oss-fuzz fixes:
  * checkpolicy: add libfuzz based fuzzer
  * checkpolicy: free complete role_allow_rule on error
  * checkpolicy: free identifiers on invalid typebounds
  * checkpolicy: return YYerror on invalid character
  * checkpolicy: clone level only once</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add support for wildcard netifcon names
  * Abort on mismatched declarations
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  - Fix problem with bounds statements in optional blocks
  - Provide a better error message for implicit role and user bounds
  - Allow type attributes to be associated with other type attributes
  - checkpolicy/tests: Modify tests to check handling of initial sids
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="73baaf13369de36401ee7689d5976b34b14364ecbc6b468353a9be3af79520fc83ea84b7acfaa3e825a1c0b3c6eb384f71b52723f69c8c585b32d96e22f13c51" name="checkpolicy" arch="x86_64">
  <version epoch="0" ver="3.10" rel="82.7"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
  show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * checkpolicy: support CIDR notation for nodecon statements
  * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
  * checkpolicy: handle unprintable token
  * checkpolicy: avoid assigning garbage values
  * checkpolicy: free temporary bounds type
  * checkpolicy: perform contiguous check in host byte order
  * checkpolicy: include &lt;ctype.h&gt; for isprint(3)
  * oss-fuzz fixes:
  * checkpolicy: add libfuzz based fuzzer
  * checkpolicy: free complete role_allow_rule on error
  * checkpolicy: free identifiers on invalid typebounds
  * checkpolicy: return YYerror on invalid character
  * checkpolicy: clone level only once</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add support for wildcard netifcon names
  * Abort on mismatched declarations
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  - Fix problem with bounds statements in optional blocks
  - Provide a better error message for implicit role and user bounds
  - Allow type attributes to be associated with other type attributes
  - checkpolicy/tests: Modify tests to check handling of initial sids
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="8f9853a91fe150f4769f059191bae2ca9391203b4e3fdf7f36660b46711121bc2afddbefe6103b565325e6ee1b73efe00f50a60ec5c8ac3ebd4ee138262e9059" name="cil" arch="i586">
  <version epoch="0" ver="3.10" rel="17.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Improved documentation: fenced code blocks, syntax highlighting,
    custom color theme and more</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * CIL: Lists are allowed in constraint expressions
  * CIL: Improved situation with duplicate macro and block declarations
  * Added the new `secilc2tree` program to write out CIL AST.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Allow optional file type in genfscon rules
  * Do not copy blockabstracts when inheriting a block
  * Mark as abstract all sub-blocks of an abstract block
  * Do not resolve names to declarations in abstract blocks
  * Ensure that the class in a classcommon is a kernel class
  * Limit the neverallow violations reported
  * Limit the amount of reporting for context rule conflicts</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Restore error on context rule conflicts
  * Documentation fixes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * cil: Allow IP address and mask values to be directly written
  * cil: Allow paths in filecon rules to be passed as arguments
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Improved man pages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1753272000">- Update to version 3.9
  * Expand class-permissions in deny rules
  * Fix copying of declarations
  * Reject wildcard only network interface names</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * secilc: use correct long option name for -X
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="45313bf44e35f408590126ce1dbfdd68aa6af5eca2e8363a8a00aeeb15001d28c294298f771575453e3ac493576e8ebc1170644872baffb3c7c0cd6dea870c56" name="cil" arch="src">
  <version epoch="0" ver="3.10" rel="17.4"/>
  <changelog author="jsegitz@novell.com" date="1413979200">- Initial import based on the git repository on 2014-10-22</changelog>
  <changelog author="jsegitz@suse.com" date="1542801600">- Update to version 2.8. To many changes to list, sorry</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Better error handling</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1583409600">- Update to version 3.0
  * Report disabling an optional block only at high verbose levels
  * Fix mlsconstrain segfault
  * Do not dereference perm_value_to_cil when it has not been allocated
  * Add flag to enable policy optimization
  * Allow validatetrans rules to be resolved
- removed pandoc build requirement to allow building on older
  products</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594728000">- Update to version 3.1
  * add basic test for policy optimization
  * Fix policy optimization test</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Improved documentation: fenced code blocks, syntax highlighting,
    custom color theme and more</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * CIL: Lists are allowed in constraint expressions
  * CIL: Improved situation with duplicate macro and block declarations
  * Added the new `secilc2tree` program to write out CIL AST.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Allow optional file type in genfscon rules
  * Do not copy blockabstracts when inheriting a block
  * Mark as abstract all sub-blocks of an abstract block
  * Do not resolve names to declarations in abstract blocks
  * Ensure that the class in a classcommon is a kernel class
  * Limit the neverallow violations reported
  * Limit the amount of reporting for context rule conflicts</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Restore error on context rule conflicts
  * Documentation fixes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * cil: Allow IP address and mask values to be directly written
  * cil: Allow paths in filecon rules to be passed as arguments
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Improved man pages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1753272000">- Update to version 3.9
  * Expand class-permissions in deny rules
  * Fix copying of declarations
  * Reject wildcard only network interface names</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * secilc: use correct long option name for -X
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="5bf9a25344165741e6a4a35c5975e7c49543ed8bea6d10fb94f9b4749ca58b92907bde4e1ebd602f43470840798ed335165e7325ca04f6a4ce66f2111c8360b2" name="cil" arch="x86_64">
  <version epoch="0" ver="3.10" rel="17.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Improved documentation: fenced code blocks, syntax highlighting,
    custom color theme and more</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * CIL: Lists are allowed in constraint expressions
  * CIL: Improved situation with duplicate macro and block declarations
  * Added the new `secilc2tree` program to write out CIL AST.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Allow optional file type in genfscon rules
  * Do not copy blockabstracts when inheriting a block
  * Mark as abstract all sub-blocks of an abstract block
  * Do not resolve names to declarations in abstract blocks
  * Ensure that the class in a classcommon is a kernel class
  * Limit the neverallow violations reported
  * Limit the amount of reporting for context rule conflicts</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Restore error on context rule conflicts
  * Documentation fixes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * cil: Allow IP address and mask values to be directly written
  * cil: Allow paths in filecon rules to be passed as arguments
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Improved man pages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1753272000">- Update to version 3.9
  * Expand class-permissions in deny rules
  * Fix copying of declarations
  * Reject wildcard only network interface names</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * secilc: use correct long option name for -X
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="bd11baf966f2238e5a20fef3f7fcb02aa8a39b201d2678e6df4f495d50448fbcd9d3d79218de7f1ff3d2a5af5f42cf0b5ac32cb4ebfa2f8e9e69e9713c704857" name="libcap-ng" arch="src">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="crrodriguez@opensuse.org" date="1314792000">-  Update to version 0.6.6
- Add CAP_SYSLOG and CAP_WAKE_ALARM (needed for newish kernels)</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build workaround: make sure no attempt is made to build
  python stuff even if it's installed on the host system</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329048000">- Move libraries back to %{_libdir}, /usr merge project</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1363176000">- version 0.7.3
- Make file opens use the cloexec flag (Cristian Rodríguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should</changelog>
  <changelog author="meissner@suse.com" date="1363262400">- use source url</changelog>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
  the huge ifdefing.
  + more readable
  - version must be edited in two places when bumping</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1403179200">- Remove unused BuildRequires on libattr-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.7.7
  * Make sure all types used in _lnode are defined in proc-llist.h
  * Fix python binding test for old kernels
  * Fix leaked FD in library init
- Changes from version 0.7.6
  * Fix python3 support
- Changes from version 0.7.5
  * Make python3 supported
  * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
  * Update table for 3.16 kernel</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Detect and output a couple errors in filecap
  * Use pthread_atfork to optionally reset the pid and related info
    on fork
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="a97b854698040ba20b9c45cbc19c95f99e369f789aaa2298e2d33bfb5551d0328d4e8c4efacc4959b6e1df6f2893702cb4642b145f7b6b7b4ade7891a774de46" name="libcap-ng-devel" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="34f848144e9ebd259aa25289e0333965f15752c80a8b819a58c310648794aac438bad56ba015e031f0a54b239014c7360dfb3d872badbcb6f6964f5cb7a5fd89" name="libcap-ng-devel" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="9b819f8a8769a8340c8ded7dc1a799872dcbafeadac6ab940ffd75f5dcbfbb989edf8fbe6fcf192d7a62703e57061ab862423d7e2f4a4906a9330db1e2974049" name="libcap-ng-python" arch="src">
  <version epoch="0" ver="0.8.5" rel="59.38"/>
  <changelog author="pascal.bleser@opensuse.org" date="1288785600">- update to 0.6.5:
  * works around a problem in the Linux 2.6.36 kernel headers
  * fixes a segfault when using filecap on a specific file</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- fix requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314792000">-  Update to version 0.6.6
- Add CAP_SYSLOG and CAP_WAKE_ALARM (needed for newish kernels)</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build workaround: make sure no attempt is made to build
  python stuff even if it's installed on the host system</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329048000">- Move libraries back to %{_libdir}, /usr merge project</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1363176000">- version 0.7.3
- Make file opens use the cloexec flag (Cristian Rodríguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should</changelog>
  <changelog author="meissner@suse.com" date="1363262400">- use source url</changelog>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
  the huge ifdefing.
  + more readable
  - version must be edited in two places when bumping</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.7.7
  * Make sure all types used in _lnode are defined in proc-llist.h
  * Fix python binding test for old kernels
  * Fix leaked FD in library init
- Changes from version 0.7.6
  * Fix python3 support
- Changes from version 0.7.5
  * Make python3 supported
  * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
  * Update table for 3.16 kernel</changelog>
  <changelog author="tchvatal@suse.com" date="1449489600">- Fix build by passing --without-python3 argument. For now we are
  fine with py2 bindings only</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Fix byte compiling python3 bindings
  * Rework spec file to show new python2/3 separation
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Switch to singlespec approach to allow building of python3
  bindings</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
</package>
<package pkgid="ef4c9d56a34b5d1eac2e35b49559145b1695189e27e3b0b0fddf0389702f6afb86ded8b9cd2e8939a132b4a1908174c15cf0a6a88bd22595d730f804fedc1965" name="libcap-ng-utils" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="7c4e29d14e14b35d211b0fa9f89316f7c5e67c947cab5d74b0348f1bebcdc10cff562763f4056cfb767798107a2fb1516b3bc98a1e3ac7f5d9dd107c2340d10a" name="libcap-ng-utils" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="045f3f79074a5509c33eb235d6995697e8de0f46e3cf04aed1d2b367a486817d806f53fdced5ba327a9d3d6541283c2a5e9c5afec0022e0c955f6ea5f93254ea" name="libcap-ng0" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="6928775f4289b98ddb29b38216f06d2e064e49f42c438823fbeaa17d953f9ba38f152c4a6565e8eafb3c86ce21e64944f7b03671aa16742c1f9b494006b122af" name="libcap-ng0" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="fc1ece0c5eb2883c2d4facf49b273862a839c69a230cd7b2e888c389f903b19462f39b6b4b9524eadc542bed353ce21814403cbf9fa715f2ba57fc4d1a84f236" name="libcap-ng0-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="05d7eb5dea509448450d191781ef124def4cc8f6ad8b7c7dd912eb5bd4cc1747ef8bfbd96d467fe37dddeb85d883a356aca3bd28c204ea114a566ff25f04a898" name="libdrop_ambient-devel" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="3453801ba4048e8758216ad952abe5de9b964ece553682b61165f78074c18d3fde28ad4986f510f7792e2ccfd4a6ba17156804c8ce1fc9f56b609217871cfcd2" name="libdrop_ambient-devel" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="6c1a9ffa59ad71b4e8f2d4a15c02b3525ec4215b5b7f592eae9ad0c88c172bf945f80c4df35d8e35344654432aadcf13597f51caef6bffe2efb80da247b8ae25" name="libdrop_ambient0" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="ace975d117da77d4b4b856f6d63f760182dc2ea25160474e134549fad45162c53dd724a52540d723625246bad57b8ffbeca78f4a3ac43c6e301b25ebee4ab127" name="libdrop_ambient0" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.32"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="0772ad0f1f0a53c7adff82904a5c7d4530998969218f2070810e2d55386ac9da282a1339b76d9639e5578c9f1916ab2af33722d827f2b8bb173a2b8d3c89ce99" name="libeconf" arch="src">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="499263986f0077213cbd3bf37cde1ff68b1525b145343282ff96c472565c1815e5c7dede27456b6e30dbc305387516809b8bb379a199885d220122bf29095449" name="libeconf-devel" arch="i586">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="86c24d03617775a7b91178790c766902f1994a6a7a0fd44a7ec3f7fd4534d209e539a71104e7930e1e2944dd25ea6480a6c0a1a4473620a027d90f9bf86b4d85" name="libeconf-devel" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="923121be1ec5b869c8f3498027fe49ce6db8cca25a0b9511f9518356372d97981b1942cb4915b70f6bf44e016c35a311a28e07c1a24ad251bcda97c949ba1f10" name="libeconf-devel-static" arch="i586">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="591627489011b8626e94b1425637b77965575cf0908a7f5202756be5edfa8990f3394de0b8cefe4fcc25a256696c225906592be232e425e22800a88f8c475421" name="libeconf-devel-static" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="fe11ec3742f4c640a2627a9e55640b2aac0cfdce51e8ef1570a9c4bbaec01e8c4bdcf7ed000a2d32a37d93670c84458e5799af53c82fd024797c091bc13b4775" name="libeconf-utils" arch="i586">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="14efe4f5a47a53e5c4949b9ead8e27a374a6aa66885f76f98b4aa243e2b22b66f835e468c54ed14d076be8fdd2bd5b79ede4105c27ddc140ff2c8305f565076c" name="libeconf-utils" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="c9484dd9e3d89232ed627cbad3027386581c0ab0dae7a68b0303c430920a2789ca3ff48f1312a91b81b4ff22e4f53180260a7c45475697a382b8212e2cd38868" name="libeconf0" arch="i586">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="99d59b0d40bb38fec21b37193c33842a392aabd9e834e755a53718f19e2f1bf97fe3565f049091f18053df9db201f21bcc02fd236c7568bd84328b2aa0307df4" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="3e6a52c0606c4df72b501c645eb2e0cd87081514e77e770367e8f56ac97142b0e3c2e102782ae7512f48daf0d3937bffc51590ff213a46414901f752c7856a1e" name="libeconf0-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.7"/>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="c08049e4fa48890ea1e64dd418d1fb4c0a196ae66d9eed8ea9f33c45511b35a9913a2edb7dadbc03618da00ee4ba5cfd05315f4e6d9e90affb03557ee757b27d" name="libsepol" arch="src">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add two new Xen initial SIDs
  * Check that initial sid indexes are within the valid range
  * Create policydb_sort_ocontexts()
  * Eliminate initial sid string definitions in module_to_cil.c
  * Rename kernel_to_common.c stack functions
  * add missing ibendport port validity check
  * destroy the copied va_list
  * do not call malloc with 0 byte
  * do not leak memory if list_prepend fails
  * do not use uninitialized value for low_value
  * fix endianity in ibpkey range checks
  * ibpkeys.c: fix printf format string specifiers for subnet_prefix
  * mark permissive types when loading a binary policy</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1561032000">- Disable LTO due to symbol versioning (boo#1138813).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1580385600">- Add fnocommon.patch to prevent build failures on gcc10 and
  remove_cil_mem_error_handler.patch to prevent build failures due to
  leftovers from the removal of cil_mem_error_handler (bsc#1160874)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1583236800">- Update to version 3.0
  * cil: Allow validatetrans rules to be resolved
  * cil: Report disabling an optional block only at high verbose levels
  * cil: do not dereference perm_value_to_cil when it has not been allocated
  * cil: fix mlsconstrain segfault
  * Further improve binary policy optimization
  * Make an unknown permission an error in CIL
  * Remove cil_mem_error_handler() function pointer
  * Use LIBSEPOL_3.0 and fix sepol_policydb_optimize symbol mapping
  * Add a function to optimize kernel policy
  * Add ebitmap_for_each_set_bit macro
  Dropped fnocommon.patch as it's included upstream</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1587988800">- Enable -fcommon in order to fix boo#1160874.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594728000">- Update to version 3.1
  * Add support for new polcap genfs_seclabel_symlinks
  * Initialize the multiple_decls field of the cil db
  * Return error when identifier declared as both type and attribute
  * Write CIL default MLS rules on separate lines
  * Sort portcon rules consistently
  * Remove leftovers of cil_mem_error_handler
  * Drop remove_cil_mem_error_handler.patch, is included</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603972800">- install to /usr (boo#1029961)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * more space-efficient form of storing filename transitions in the binary
    policy and reduced the size of the binary policy
  * dropped old and deprecated symbols and functions. Version was bumped to
    libsepol.so.2</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1625486400">- Fix use-after-free in __cil_verify_classperms (CVE-2021-36085, 1187965).
  Added CVE-2021-36085.patch
- Fix use-after-free in cil_reset_classpermission (CVE-2021-36086, 1187964).
  Added CVE-2021-36086.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1626868800">- Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928.
  Added CVE-2021-36087.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="7aafc9c687952743a51414456bcbf9242edff633c7890a09ec4ee1c2615d29956e79f56fde592847ea24a1a405256d875013a033da4b293cbfac336673780da0" name="libsepol-devel" arch="i586">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="dbe165b0cfbd2b4f4d4bc8e0cb05d99d5658f675258c1a37a0253d6f65b3a0b59d128da23faa6e2d453322a83667899a08ba35ff098f50971fb548fb42e370c2" name="libsepol-devel" arch="x86_64">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="65adb02cd8398299e9640acaefe0ed8e07ed07a176ce41dbfe2e3a1f5b7dce1b7a9f12bb1e2f8a86621c549653670e960a7a2c07ff9899b6e100d3768e4ee70b" name="libsepol-devel-static" arch="i586">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="a7bc96ebb78ad0d10b88e1e2648efceb4f7622f576f548029389c3ed0749dca98dfd6761f3393dddd114e49a245c234886274fad447c5cc8c49800121129960b" name="libsepol-devel-static" arch="x86_64">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="357ee35fadac7c14613f9a02c63fcb30dd035143b3cdb0ccf38e65c7e8d1fb5c74e19eb057e6c926ebe68dbf8527d879b0d424dae66327b7231340b225abae11" name="libsepol-utils" arch="i586">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="3e413835f520fc56617ce08f8e5828914e30270cdb7464004a0868d04ef7aa8ec4b9f7146b5caa4d18c9ad638d656abbbcbecb8877f30d50769c859c29c351ed" name="libsepol-utils" arch="x86_64">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="39c3eaefd9fea5a908b326cdcdbf1b0b4ca00bdfa0e483c9f6d00185248f76ee644ad90f9dce03eff9f23fbd68d33b33adcfadf6af9d47c792b143ffd1c82ab2" name="libsepol2" arch="i586">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="45a66c203bee2f93527f5e7f8839fae73d4d8c05b82bcebd5a0b71410502dbad6aaa1818535a13cc55239c839dbae50da5af3ec5cb37d554cda52b635c6b22cb" name="libsepol2" arch="x86_64">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="057254e2399a6ab5970c6a9abe4f26d16e66abcbb491921413edcd9284a8ef431e3270b4d908ac8f3a81594eeb51ec03faadfeb90b71550eeb8ce207116486da" name="libsepol2-32bit" arch="x86_64">
  <version epoch="0" ver="3.10" rel="119.6"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * Add new 'netif_wildcard' policy capability
  * Allow multiple policycap statements
  * Support genfs_seclabel_wildcard
  * Introduce neveraudit types</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="57439cfa58835c3196b063965ccc64f640c02239079ce95c7244e377158c8884423bb43aed00509fbb49259a08b253b572d9ab42893e500175b6e0f6be994254" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="10.24.4"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722600000">- bsc#1228770: Fix not copying of skel files
  Update shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="4e64e644023ab91507aa9a1fc06f34319e1c84217e44e8c118cc31b448455255604d7601b6a6618607751449ec64fbf3646ab80d5f430fb959d5b3e1e56f5f8b" name="mcstrans" arch="i586">
  <version epoch="0" ver="3.10" rel="80.7"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Port to PCRE2
- Dropped patches
  * add_includes.patch: Upstream
  * mcstrans-writepid.patch: Upstream</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * preserve runtime directory
- Refreshed harden_mcstrans.service.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * mcstrans: free constraint in error branch
  * mcstrans: ensure transitivity in compare functions
  * mcstrans: check memory allocations</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional changes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742558400">- remove unneeded pcre build dependency, builds with pcre2 already</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9. No user visible changes</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change, small test case change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="18e37311f1b4dc1d978c8f58943b3280ccf372de2ad2b56167675ce929e4ff37da83ad35e3293bfbc8276873b4ec48b075920c34694ef0aaf9e2b246e6eecb3e" name="mcstrans" arch="src">
  <version epoch="0" ver="3.10" rel="80.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543924800">- One grammar fix, and use %make_install.</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Fix check in raw_color()
  * remove unused getpeercon_raw() call</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Avoid use of ®/™ signs in specfiles as per guidelines.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1583236800">- Update to version 3.0
  * Add reference to setools.conf man page in the daemon one</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594728000">- Update to version 3.1
  * fix memory leak in new_context_str</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * No user-visible changes, only version bump.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mcstrans.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * No user-visible changes</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1637841600">- Finish UsrMerge (bsc#1191075)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Port to PCRE2
- Dropped patches
  * add_includes.patch: Upstream
  * mcstrans-writepid.patch: Upstream</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * preserve runtime directory
- Refreshed harden_mcstrans.service.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * mcstrans: free constraint in error branch
  * mcstrans: ensure transitivity in compare functions
  * mcstrans: check memory allocations</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional changes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742558400">- remove unneeded pcre build dependency, builds with pcre2 already</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9. No user visible changes</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change, small test case change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="99ce293d145d65f0834f7932b63b60d6d16ebb70a72436ab090388f060d91bd3af42ab954f2aa8ba6f0309d7d04c7b90efddc7ccf430638bd8975a4d32febd69" name="mcstrans" arch="x86_64">
  <version epoch="0" ver="3.10" rel="80.7"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Port to PCRE2
- Dropped patches
  * add_includes.patch: Upstream
  * mcstrans-writepid.patch: Upstream</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * preserve runtime directory
- Refreshed harden_mcstrans.service.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * mcstrans: free constraint in error branch
  * mcstrans: ensure transitivity in compare functions
  * mcstrans: check memory allocations</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional changes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742558400">- remove unneeded pcre build dependency, builds with pcre2 already</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9. No user visible changes</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change, small test case change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="ab3c3ff1ae81c41b8b0af08f3b4b313f2d3cb52e535873ff020925fb379fd0ef7e65105c07c3750299b2899eca90583173bd2324be450e70a0dd570a3c9e7da1" name="policycoreutils" arch="i586">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="838f0e88530a9d0d39c416fc34c7e55bb609f4ef53fea1813ed3e7c65534b687e4f4bf489f6134dd1daf9252b1e498af6971d2e25f899ba07f4a855921c9ee98" name="policycoreutils" arch="src">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="cc83f7658e193b1a17090c86f037dde23985697b9623e258cf999ff366f23ccbd61fea9154f23cf52ca0b719557b141b664d327ba753d2e19bcc969cefe3765f" name="policycoreutils" arch="x86_64">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="7d9d83ac636bf13491c5744582ad98fcfb4c518f69251ccdaee797f818cdc5faa431c3372151f2984a807b5af85650b441fe408ec90b6e1d2a4b29287533f407" name="policycoreutils-dbus" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="1d1436f3a06178cafeae82394da9d788a8e4b8fe107cc09577ffb8ac107f0380c8fd9e8278b3e5862a774dbd03eb3cd56e48c529a5e434de1da22b6d183ecbfc" name="policycoreutils-devel" arch="i586">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="fdc0769314fb4a4ae8b551811749a49c943e5a15728141900ca4db1f0254b9362eb4fe48d4d6dbe108e05a62a51c399b3149bf1c97f5b264c604d2b0042265fd" name="policycoreutils-devel" arch="x86_64">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="b15a90c51d0c93611a717bfaf0862ea7f74e2626d92efa6c4304426bad3ad596237356d9869d5ed6fe640cf3aec70ece71017a7730c48f46d47f8ad841b5c554" name="policycoreutils-gui" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="6cd8da20c86156c87e4c86b920b009a4439ca3b57cbb9a618a9c3701017c063374e050669899ed6c581e5e27ad958b15cd519456e94f13f2b557ca4512bc3ebe" name="policycoreutils-lang" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="48b624ab035e20a08786c667ec25dc26a39450ad44453e19cc07eefa42eaee89185cb56ea8ce8cf02048445f2ed284691893f3afebb2467a381caf40b68c249a" name="policycoreutils-newrole" arch="i586">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="d76c1d8475c3354b17b1eb6112d4ef351a32c6d45d4d8150442b0418476a94e01f43623c3f170264af45642b64f574591d26e76f3ea6c1eb57a971dfee5d1593" name="policycoreutils-newrole" arch="x86_64">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="c2fecdfa8eb0506654c9e09c9b88bb6aa4db3bfc1e183332d74b3f6222099c6751859d7171ab276a6279a3b0123128e30c17bb0aaa3f6a365b11840e8db745a9" name="policycoreutils-python-utils" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="3f0de1c20a7e3f879bf08d49757834cccf1002f85c5cbec8492586612fbc3dc9cf98ffe9cf1dffefef5b85dd3fef390a4d0b728d4d44a5e9e2533fc913f70081" name="python-libeconf" arch="src">
  <version epoch="0" ver="0.8.3" rel="3.6"/>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1699876800">- Do not requires the library for the documentation</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210).</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Handle groups correctly which do not have any key entry.
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * fixed memory leaks (#219)</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error
    ECONF_ERROR</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="a81c9d683205f96c6618df812ee7c6fe94c410c3b5d81a0435799bd78cb3f3f9be2afcffd7534161f09ea30934b2a843b77bd2d706c998aa7274fd3824db5368" name="python-libeconf-doc" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="3.6"/>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1699876800">- Do not requires the library for the documentation</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210).</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Handle groups correctly which do not have any key entry.
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * fixed memory leaks (#219)</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error
    ECONF_ERROR</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="509f604eaf5c0e2dc7e35557ff51c4dfe35c5c99726355212084ab8e06e336a7eba24516b6759bbe5719376889b26b245948f8f0f4ae6ac40dcf2435bd435be8" name="python3-capng" arch="i586">
  <version epoch="0" ver="0.8.5" rel="59.38"/>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Fix byte compiling python3 bindings
  * Rework spec file to show new python2/3 separation
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Switch to singlespec approach to allow building of python3
  bindings</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
</package>
<package pkgid="45fb53033fbc82029df92513d6798ec639eaa8d7fa696ab3a56a1f446e656943a1e1e69b1fe4b080d254c72d45b67ea75972f28cf28a08d4a1417f0fc4aaca48" name="python3-capng" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="59.38"/>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Fix byte compiling python3 bindings
  * Rework spec file to show new python2/3 separation
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Switch to singlespec approach to allow building of python3
  bindings</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
</package>
<package pkgid="29e6489ef59f4e44238a89e4c467c4908bc7b290e76cf51a38dcea39533c13da2a43b5e2a4d03539cf69c449b23b011e3b1b2569ae073f67388ba3e8247eab33" name="python311-libeconf" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="3.6"/>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1699876800">- Do not requires the library for the documentation</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210).</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Handle groups correctly which do not have any key entry.
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * fixed memory leaks (#219)</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error
    ECONF_ERROR</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="c11b19f9476f207f909c7e785fea24f50dcc977ad4ca7d29301ca574a3a08d99de19ca1e95140e9a0d39f24a89726ca78f5abb78c4f769d4ba277e012e3a73a8" name="python311-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="c72d7de8bb15076c891b4e3f2b1b354e2f8afc21419180869aea825106bbf3e987f6b70a3267d17ee63b57762cbd6bdabaec18a06a61f4c8f6411faf331e5435" name="python311-setools" arch="i586">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="58460edbfc80cb48e0b9cb5036be1570a6e0d40394fd83d615c3218c2c5941d054e1fa7d7130b06c896a74701c5d8694e8b9ffb7ed1ef7338b38c00ffd589ec0" name="python311-setools" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="6f6202945fffea111ae739494bb94b4ca9e4d917e2164ca3d7e16d349b20c2bc2dbfe5657b5fc7086811eced382c532e97b3929a101bb8930b9789999d743842" name="python313-libeconf" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="3.6"/>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1699876800">- Do not requires the library for the documentation</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210).</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Handle groups correctly which do not have any key entry.
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * fixed memory leaks (#219)</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error
    ECONF_ERROR</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="7c5321feb3e194e5088fd76636b8d06468ba1ec67ee628c7136e2e28081ecc8ab2705d9045ee8663673a3f8edb4f3775735734aab740463144a3bf3faa9c9693" name="python313-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="042a5deb815550cb2ca564fd460942b0f20589e5700c45521d8523a8155eac3bab054dc334d0e96cfb10829d5c8a0d92759261d53a22641747022df060a430cf" name="python313-setools" arch="i586">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="faa6a31fa5d2e106b696cbe121a0b824f55878d5ddef784959d51489887c38792645f971f36bdfffc9cd2fca3b6a2d4960692460a8fd0c2c6aa25765f6cfa74f" name="python313-setools" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="029db2e603a539e3eb39ad531428bd769637f8c8c6425ff62b993f023ca875cac195536f01ad97b9e55a01d7f8ec4b7054f1a4f8ebb59ef7cc7036958c17d353" name="python314-libeconf" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="3.6"/>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1699876800">- Do not requires the library for the documentation</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210).</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Handle groups correctly which do not have any key entry.
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * fixed memory leaks (#219)</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
  <changelog author="schubi@suse.com" date="1753963200">- Update to version 0.7.10:
  * cmake: Fix .pc file with absolute CMAKE_INSTALL_&lt;dir&gt; (#237)
  * Add build options for the CMake build (#230)
  * check NULL for default string (bnc#1247107)</changelog>
  <changelog author="schubi@suse.com" date="1760961600">- Update to version 0.8.0:
  * new call: econf_setExtValue (#239)</changelog>
  <changelog author="schubi@suse.com" date="1764072000">- Update to version 0.8.1:
  * Set default parameter in econf_get&lt;type&gt;ValueDef to "const"</changelog>
  <changelog author="schubi@suse.com" date="1765195200">- Update to version 0.8.2:
  * Cleanup man pages
  * Using ECONF_ARGUMENT_IS_NULL_VALUE instead of general error
    ECONF_ERROR</changelog>
  <changelog author="schubi@suse.com" date="1765800000">- Update to version 0.8.3:
  * improved Documentation  (#246)</changelog>
</package>
<package pkgid="89a8ea6197b5e083b351dbcc21a0118031a629533300aa6bbdd6a8674d3208d56deac780afe326bca2ff993ec7099074230302f0f658f9ee95e583ed7a5a8dd8" name="python314-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.10" rel="5.4"/>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
</package>
<package pkgid="4a699961c0d2e0d787774bc715b92519e59dd83281f8fac76d4d35ca05f5bd62660603a2743711b4a2d69945636bf2f05dd7ff6b8206c93955c8ea175c47eb00" name="python314-setools" arch="i586">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="05caebda921546db5f20aee0fd658f36c35c7f17664c992f8871ae827a3292026a1814737d46e1ff7d9af3ee0bf4edc1e928d74e22e8cb42ef467a645b987883" name="python314-setools" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="9b341247808f6995fdfda5a394e53a7f512b8dbb7ede0fd39c01950c6386d5ae4aa4421f34489c2684c2353a9efdb5f617697e215a306fd08e8e7cf11f7ad182" name="restorecond" arch="i586">
  <version epoch="0" ver="3.10" rel="50.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * no changes from 3.6, only version changed to 3.7</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1729771200">- Fix issue where inotify events are not being handled properly
  * added: 1231512-Set-GLib-IO-channels-to-binary-mode.patch
- Fix issue where restorecond -u is not terminating with SIGTERM (bsc#1231512)
  * added: 1231512-Set-GLib-IO-channels-to-nonblocking.patch</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231512-Set-GLib-IO-channels-to-binary-mode.patch: included upstream
- Drop 1231512-Set-GLib-IO-channels-to-nonblocking.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="e652c15c01b3ce70545e2aa547faa3b0dee5f28ad7433fcea6b454001485a1ef3b332412b5d602726d0969fedbeeacf26aa87f26fcb7ea216eb5647b96823cea" name="restorecond" arch="src">
  <version epoch="0" ver="3.10" rel="50.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1579089600">- Added r_opts_global.patch to fix build problems with gcc due to
  multiple definitions for global symbols (bsc#1160290)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1583236800">- Update to version 3.0
  * Do not link against libpcre
  * Fix redundant console log output error
  * Use /run instead of /var/run
  Dropped r_opts_global.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588852800">- %{_libexecdir} now expands to /usr/libexec, so do not use it
  where /usr/lib was intended</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.de&gt;" date="1589284800">- Use %{_unitdir} for the location of the .service file</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594728000">- Update to version 3.1
  * `restorecond_user.service` - new systemd user service which runs
    `restorecond -u`</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1594814400">- Use proper macros for SYSTEMDSYSTEMUNITDIR and SYSTEMDUSERUNITDIR</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to version 3.2
  * Fix a double-close of a file descriptor</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Update to version 3.3
  * No user visible changes</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636977600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_restorecond.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638446400">- Claim ownership for %{_sysconfdir}/selinux</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * no changes from 3.6, only version changed to 3.7</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1729771200">- Fix issue where inotify events are not being handled properly
  * added: 1231512-Set-GLib-IO-channels-to-binary-mode.patch
- Fix issue where restorecond -u is not terminating with SIGTERM (bsc#1231512)
  * added: 1231512-Set-GLib-IO-channels-to-nonblocking.patch</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231512-Set-GLib-IO-channels-to-binary-mode.patch: included upstream
- Drop 1231512-Set-GLib-IO-channels-to-nonblocking.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="f3154e2902075e0b43a45ba217886873fc11ff9ecb1957fb25bef8c3b834e0e5dbf5a74706a8bf7b30de950db5e19017592fde34484696e40ac61edae2752663" name="restorecond" arch="x86_64">
  <version epoch="0" ver="3.10" rel="50.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Hu &lt;cathy.hu@suse.com&gt;" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * no changes from 3.6, only version changed to 3.7</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1729771200">- Fix issue where inotify events are not being handled properly
  * added: 1231512-Set-GLib-IO-channels-to-binary-mode.patch
- Fix issue where restorecond -u is not terminating with SIGTERM (bsc#1231512)
  * added: 1231512-Set-GLib-IO-channels-to-nonblocking.patch</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231512-Set-GLib-IO-channels-to-binary-mode.patch: included upstream
- Drop 1231512-Set-GLib-IO-channels-to-nonblocking.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * no functional change
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="e8da95e031a6ada4b197f78b149986aa378c3f050017fb937ecdf7276dfefc81dd906d856dd9276fb998db9aab4d7d46bacafffca5865376af0f3c7d90f2d617" name="selinux-autorelabel" arch="noarch">
  <version epoch="0" ver="3.1" rel="2.11"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1603368000">- Initial version based on policycoreutils from Fedora 33</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1605009600">- Set PATH in selinux-autorelabel, some systemd versions strip too
  much</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1614168000">- Adjust path in service file depending on the distro version
  (bsc#1182563)</changelog>
</package>
<package pkgid="50051c6f02bb91b296e3c952aa32616c69540b870f39be507e63eb37d6fa84db65055ded3e056c6ff3e0c95d1e4f0cdc64df4d17b18d7d92abb934bedf675ed7" name="selinux-autorelabel" arch="src">
  <version epoch="0" ver="3.1" rel="2.11"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1603368000">- Initial version based on policycoreutils from Fedora 33</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1605009600">- Set PATH in selinux-autorelabel, some systemd versions strip too
  much</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1614168000">- Adjust path in service file depending on the distro version
  (bsc#1182563)</changelog>
</package>
<package pkgid="913c0011b554e43f86b38a59ff04565db1b2d8d3d04cae77933d9b43eb04ba511674f1fce5d571bc6bc8835135f89d4a91e48340fd01091e0aa76a9941572af5" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="f67fee7864614b016f85ae6e7d84d2817d7d848bfc6b8a309b63b1ee31424a950fc1b7808dad87965323e445d423688e466eedb8e7e20aabb1ee6611c3658efc" name="selinux-policy" arch="src">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="d105f88639fe9a4ee63f42b7f830626f10fdd1d1c536ab6f4bd3b7dab74662d713870bb2d5ad37b0d9004a179413a196f05701cbe500df375b763712b3d26bca" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="1f4dd2e089b373326fe6405fb3bf09df43f6d2eec2ef684458844f8566412076b9803c8c524f83af60a48d2ca5657737f56f5efb5664ef57b1a30a9338d964e2" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="3554aa66905f24c318346fb900dfa0e7a21d6d156e0b5bb609539d21082fef48b662d8cb513af172a6750265c12a46f6e2e8e409418f216d26c624d5b0144da1" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="d5db32325d68ec916e1f2743889ac1cd5931af974d141a5b5e418fd165f4dfe4a65a8ed02a3079241682bb4d91c52cdec3c42c2e960a19b1347b7eb1f4fda9a5" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="94d080d67d3f703e843d8f4af72a5fd616c9dd3bfc3b2710b921e5e92d2283da3be042ab7a25bac3beac4f0b114670689ca9f494a0485cc329db4c7807ab20e9" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20260508" rel="2.10"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1766145600">- macros.selinux-policy: Introduce %selinux_requires_min macro
  that requires all relevant dependencies except for *-python</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1766145601">- Update to version 20251219:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1767700800">- Update to version 20260106:
  * linuxptp: add support for dropping root privileges
  * fail2ban: Tweak selinux regex for /run/fail2ban.
  * Allow virtqemud setattr dri devices
  * Allow irqbalance create and use netlink generic socket
  * Allow thumb_t connect to XDM over a unix domain stream socket
  * Allow systemd-homework to remove ~/.identity-blob
  * Revert "Allow kl2tpd create and use netlink_generic_socket"
  * Support cockpit privileged access for the staff user
  * Update su_domain_type policy for kerberized su
  * Allow sshd-session inherit limits from its parent process
  * Allow systemd-machined read virtd process state
  * Allow kl2tpd create and use netlink_generic_socket
  * Update policy for redfish-finder
  * Label the greetd login manager framework as a display manager
  * Allow sshd-auth get attributes of sshd vsock socket
  * Confine redfish_finder - host api discovery service
  * Allow iptables read firewalld process state
  * Allow tuned_t use its private tmpfs files
  * The commit addresses the following AVC denials:
  * Allow passwd read and write a sshd-session unnamed pipes
  * Allow sshd-auth capabilities
  * Allow sshd-auth read network sysctls
  * Label /run/insights-client.ppid with insights_client_run_t
  * fix: unbreak thumbnailing for Thunar/tumblerd
  * Add files_mounton_generic_tmp_dirs() interface
  * Add the rpm_signal() interface
  * Allow session_bus_type get the attributes of the pidfs filesystem
  * Allow pcscd get the attributes of the pidfs filesystem
  * Allow sssd get the attributes of the pidfs filesystem
  * Allow KDE Plasma Login Manager to function as a display manager
  * Allow mdadm search filesystem_type directories
  * Update policy for dhcpc_hook_t
  * Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  * Allow staff role read/write cockpit-session unix stream sockets
  * Allow stap server read virtual memory sysctls
- Syncing with upstream rawhide selinux-policy up to:
  * 415e98f61041ebd8158063d62e750cd391841e00
- Update embedded container-selinux version to commit:
  * 3f7c37e93e172f531de233f40a58a1b8ec6ff17d (v2.245.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1767960000">- Update to version 20260108:
  * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1768910400">- Update to version 20260120:
  * Allow bluetoothd to access alsa config (bsc#1255866)
  * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1769428800">- Update to version 20260126:
  * Allow thumb_t stream connect to systemd-machined
  * Allow thumb_t stream connect to systemd-homed
  * Allow aide get attributes of tmpfs and devtmpfs filesystems
  * Allow sshd noatsecure on sshd-session execution
  * Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  * Allow kernel_t to read/write all domains' pipes
  * Allow domain read sysfs files
  * allow abrt_dump_oops to write to init sockets
  * Add insights_client service interfaces
  * Allow plasma login manager stop login services
  * Allow NM nvme dispatcher script start systemd services
  * Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  * Allow sshd-session read, write, and map ica tmpfs files
  * Allow aide get attributes of a filesystem with extended attributes
  * Set correct label for glycin fontconfig (bsc#1253682)
  * Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  * Logwatch zz-runtime uses uptime (bsc#1255862)
  * Add auth_login_pgm_signull interface (bsc#1255862)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow l2tpd_t access to netlink and sysfs
  * Label miscellaneous /dev/papr-* devices
  * Allow qemu-ga to skip authentication
  * Revert "Allow systemd-coredump signull containers"
  * Allow systemd-coredump signull containers
- Syncing with upstream rawhide selinux-policy up to:
  * b8928889681b041f10e511fd17accbcb2f82d5e0</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1770120000">- Update to version 20260203:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771329600">- Fix hash in _servicedata
  - was: a1c0fcdf4397f03534deaa8a4596b9da7f2bb674
  - should be: ecd7927a3d5f06cff0b645b4146d355fede80922</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1771502400">- Update to version 20260219:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * Update rules for snapper sdbootutil plugin (bsc#1257624)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)
  * Fix gitlab-ci throwing false warnings
  * Add diffutils explicitly to .gitlab-ci
  * Fix gitlab CI</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1771934400">- Split out post install relabel logic into postInstallRelabel marco
  to be reused for the minimum policy (bsc#1258722)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1772452800">- Update to version 20260302:
  * Allow systemd-coredump the kill capability in the user namespace
  * Allow NetworkManager list bpf directories
  * Allow virtnodedevd the dac_read_search capability
  * Allow pkcsslotd read files in /proc and /sys
  * Allow pkcsslotd map its private tmpfs files
  * Allow dovecoth-auth to connect to systemd-logind over a unix socket
  * Allow tlshd write generic certificate dirs
  * Allow mdadm to use CAP_BPF during RAID monitoring
  * Allow rhsmcertd read anaconda run files
  * Allow rpc.mountd setuid and setgid capabilities
  * Use kernel_dgram_send() for systemd_notify_t
  * Allow lttng-sessiond to use sd_notify
  * Label /etc/aliases.cdb with etc_aliases_t
  * Add aliases.lmdb to mta_filetrans_named_content()
  * Update gpg_role() interface with unix_stream_socket permissions
  * Allow systemd-hostnamed to create its Varlink socket
  * Allow thumbnailer mount on fonts cache directories
  * Support confined users usage of bubblewrap
  * Allow vdagent get attributes of the pidfs filesystem
  * Allow sshd-session inherit limits from its parent sshd process
  * Revert "Allow sshd-session inherit limits from its parent process"
  * Allow sshd-session read network sysctls
  * Add the fs_write_tmpfs_files() interface
  * Update gpg policy for interactions with rhc-playbook-verifier
  * Allow rhc_playbook_verifier_t stream connect to itself
  * Update policy for rhc-worker-playbook
  * Allow sudodomain connect to gkeyringd over a unix stream socket
  * Allow tlshd communication to unconfined_t over a tcp socket
  * Allow tlshd write generic certificates
  * Allow thumbnailer connect to abrt over a unix stream socket
- Syncing with upstream rawhide selinux-policy up to:
  * 1f374c68142f647ade9fd043592ce4766803ce46
- Update embedded container-selinux version to commit:
  * 521cf8c56e8df7cd6809571ed9e796b495ceaa71 (v2.246.0)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Have the selinux-policy package own %{_sharedstatedir}/selinux
  until the move to /etc</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1772539201">- Update to version 20260303:
  * Enable init_server_no_new_privs during build (bsc#1253047)
  * Add init_server_no_new_privs where no domtrans pattern was used (bsc#1253047)
  * Allow nnp_transition in domtrans pattern (bsc#1253047)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1773144000">- Update to version 20260310:
  * Allow wtmpdbd to read pidfs (bsc#1259444)
  * Allow systemd-mountfsd the perfmon capability
  * Allow lttng tracing in default configuration
  * Allow rtkit-daemon write systemd inhibit pipes
  * Apply the systemd system generator template to the kdump-dep generator
  * Apply the systemd system generator template to the anaconda generator
  * Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  * TLP uses ps aux to check for different services (bsc#1257527)
  * Introduce separate types for generic systemd generators.
  * Confine system generator nm-initrd-generator.sh (bsc#1257754)
  * Allow rtkit-daemon dbus chat with systemd-logind
  * ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  * Dontaudit tlshd write generic certificate dirs
- Syncing with upstream rawhide selinux-policy up to:
  * 8507a66c816a382439d4933cfff14c8ee8a83d1e</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1773230400">- Update to version 20260311:
  * Allow redis_t to create netlink_rdma_socket
  * Allow systemd create symlinks in /run/varlink/registry
  * Support hooks in /run/systemd/resolve.hook
  * Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  * Allow mdadm use modprobe (bsc#1257793)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1775822400">- Update to version 20260410:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow cloud init to domtrans into ssh keygen (bsc#1249964)
  * Allow accountsd dbus chat with systemd-homed
  * Allow accountsd read accountsd_share_t files
  * Fix file context specification for /usr/share/accountsservice
  * Allow xdm_exec_t be an entrypoint of login_userdomain
  * Allow sshd-session send a generic signal to sshd-auth
  * Allow virtnetworkd get attributes of filesystems with extended attributes
  * Allow Polkit to get attributes of user terminals
  * Allow nfsidmap connect to xdm over a unix stream socket
  * Label /usr/share/accountsservice with accountsd_share_t
  * Allow systemd-resolved write to systemd-networkd socket
  * Dontaudit setroubleshootd read root's home files like .rpmmacros
  * Support sandboxing features for sysadm_t
  * Allow unconfined_t mounton on itself (bsc#1261035)
  * update support for polkit agent helper (bsc#1251931)
  * Add auth_nnp_domtrans_chkpwd()
  * Allow staff_sudo_t read PID1's process state
  * Allow staff_sudo_t read logind sessions files
  * Allow nfs-server system generator the dac_read_search capability
  * Allow snmpd create and use netlink tcpdiag socket
  * Allow systemd-coredump signull containers
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  * Dontaudit logrotate perfmon and sys_admin capabilities
  * Allow samba-bgqd sendto over a unix dgram socket
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Move interfaces from other modules to optional block
  * Allow fedoratp_exec_t be an entrypoint of unconfined_t
  * Allow rasdaemon_t to list pstore (bsc#1259742)
  * Allow virtqemud_t send kill signal to svirt_tcg_t
  * Allow virtqemud_t get priority of a svirt_t process
  * Allow sysadm user connect to lvm over a unix stream socket
  * Allow staff user delete thump_tmp_t files
  * Allow staff user connect to systemd-logind over a unix stream socket
  * Allow staff user mount /proc
  * Allow virtqemud map vhost net device
  * Dontaudit ps to read proc (bsc#1257527)
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Allow dovecot_deliver_t map its private tmp files
  * Allow rpcbind get attributes of the pidfs filesystem
  * Fix names in mysql.if
  * Allow create kerberos files in mysql db home
  * Allow systemd-resolved connect to systemd-networkd over a unix stream socket
  * Introduce local_login_allow_accountutils_fallback_mode boolean (bsc#1259119)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)
- Syncing with upstream rawhide selinux-policy up to:
  * d3068ffe2a211a7e959bb1d0ad9dd434c2d7da5b
- Update embedded container-selinux version to commit:
  * f336064bb5a086cab121c02acf285a68fa4b8352 (v2.247.0)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1776254400">- Update to version 20260414:
  * Allow snapper_sdbootutil_plugin_t linux_immutable (bsc#1261945)
  * allow unconfined services to read VM state (bsc#1251789)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1776772800">- Change store root-path for selinux modules from /var/lib/selinux
  to /etc (fixes bsc#1221342 PED-12492)
  * Service file and script is installed to eventually delete
    /var/lib/selinux once no snapshot is using it
  * Fix copy custom modules to /etc and can be checked by the provided script
    `/usr/libexec/selinux/cleanoldsepoldir.sh --check-custom-selinux-modules`
  * Add filters for duplicate entries to rpmlintrc for now
  * Drop dir-or-file-outside-snapshot rpmlint filter</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1777291200">- start cleanoldsepoldir.service after successfull health-checker.service
  fixes occational fail on transactional systems when boot failed
  (boo#1261698)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1778241600">- Update to version 20260508:
  * Add boolean ntp_refclock_access (bsc#1262711)
  * Add /var/log/ntp in ntp named filetrans interface (bsc#1262711)
  * Allow thump_t setattr on thumb_tmp_t lnk_files
  * Allow accounts-daemon read accountsd_share_t symlinks (bsc#1262502)
  * Label /usr/bin/sudo-rs and /usr/bin/su-rs
  * Allow pwupdd to read cracklib (bsc#1259138)
  * Allow pwupdd to log to audit log (bsc#1259138)
  * Move accountutils_pwaccessd_varlink_socket_connect from auth_use_pam (bsc#1259138)
  * Allow gpsd the setcap process capability
  * Add note about the process to merge template
  * Add mgetty_allow_sendfax boolean (bsc#1258666)
  * Do not backslash-escape underscores in file context specifications
  * Label /var/log/mgetty.* getty_log_t (bsc#1258666)
  * Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  * Allow sshd-auth/sshd-session get attributes of their sshd parent
  * Allow systemd-tmpfiles to adjust resource limits
  * Allow logwatch to getattr nsfs files
  * Allow xdm dbus chat with rhsmcertd
  * Allow dhcpc_hook_t unix_dgram_socket and module_request
  * Allow accountsd list accountsd_share_t dirs</changelog>
</package>
<package pkgid="3001fa96c23f01105fe982843691f1765e0c332eec97aeb3950abe97d06f7c7c9ca36be8151138335aa7943d572d7a81482134496a2c64f7763b1e13754e7f17" name="selinux-sandbox" arch="i586">
  <version epoch="0" ver="3.10" rel="2.9"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Initial package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Improved tmpdir handling
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * sandbox: Add support for Wayland
  Bugfixes:
  * sandbox: do not run window manager if it's not a session
  * sandbox: do not fail without xmodmap
  * sandbox: do not override warning CFLAGS</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * sandbox/seunshare: Replace system() with execv() to prevent shell injection
- This package is not noarch, dropping the BuildArch definition
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="5479eec937eb7ac481306cafbbdb7683e8a0ff0325ac51548680cebae5b6ff2eb459e5c4b17efe6a1f959ce6e043717bf945410c64ea26649d53464599a74636" name="selinux-sandbox" arch="src">
  <version epoch="0" ver="3.10" rel="2.9"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Initial package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Improved tmpdir handling
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * sandbox: Add support for Wayland
  Bugfixes:
  * sandbox: do not run window manager if it's not a session
  * sandbox: do not fail without xmodmap
  * sandbox: do not override warning CFLAGS</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * sandbox/seunshare: Replace system() with execv() to prevent shell injection
- This package is not noarch, dropping the BuildArch definition
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="1b5cd2827ec6d9095f588abfee40545cb74dcf5ba3b7ea2a2545b1ba33aa24cb6ce5abd86bd6870665e9d1d99321dd827f362670473953fbcaff2aff94686de2" name="selinux-sandbox" arch="x86_64">
  <version epoch="0" ver="3.10" rel="2.9"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Initial package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Improved tmpdir handling
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * sandbox: Add support for Wayland
  Bugfixes:
  * sandbox: do not run window manager if it's not a session
  * sandbox: do not fail without xmodmap
  * sandbox: do not override warning CFLAGS</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * sandbox/seunshare: Replace system() with execv() to prevent shell injection
- This package is not noarch, dropping the BuildArch definition
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="e4f8214fc7e6563584146ff0e955ce6c9be7c704d397b2d2374c0d549d049ce2f68f290a6bd25106e368512c9dc05ec7b78780534e43169de1cdf1ffe8a587cf" name="selinux-sandbox-lang" arch="noarch">
  <version epoch="0" ver="3.10" rel="2.9"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1652097600">- Initial package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1677240000">- Update to version 3.5
  * Improved tmpdir handling
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * sandbox: Add support for Wayland
  Bugfixes:
  * sandbox: do not run window manager if it's not a session
  * sandbox: do not fail without xmodmap
  * sandbox: do not override warning CFLAGS</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * no source change</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * sandbox/seunshare: Replace system() with execv() to prevent shell injection
- This package is not noarch, dropping the BuildArch definition
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
</package>
<package pkgid="ee167e28a296b23a07201c55e94e26fa4585af50dac51c0f797ecce7c86021ecda110bd58f070194da2f7a3277db452125ccc1ba3ba9375483f7ab693fa85865" name="setools" arch="src">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to the version 4.4.0:
  * Added support for old Boolean name substitution in seinfo and sesearch.
  * Added sechecker tool which is a configuration file driven analysis tool.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1623153600">- Fix dependency of python3-setools: require python3, not python
  (which is python2) (bsc#1200649).</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1645531200">- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1662120000">- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="ed46821ca78e001598ea02c77d774d04b4220011b73247a5bd293c27e63f9cedaf8de68a5c332676f3276db0c1519311fe356b2908484eb65565b15e4345c6bd" name="setools-console" arch="i586">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="009a2d04d9096dfa62fe0b0c5b42017a1d8f9d5bf3f7b108aca1936bb5b98ea50963396df00ab1257f347445bca8be6248b5d8ca6ade3b833d51da27f29b228c" name="setools-console" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="b106711669adc76f585f31654c456015f7310cb79c33349012298363c491d2cc01be8f11dfb028775feb78b6836ee580277c0e57fda9ee25e625284b02a73c7c" name="setools-gui" arch="i586">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="a6302ac17d104ecc026d953bb69ed1f2ce9472e120d3d1782914afc67d347ddfe0f3de0b69fda7c1d404cb93648f2413bc56e40cbc72f3462bbb39411e01fdd7" name="setools-gui" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="124.4"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="69c8bee4d387a520b90b20d5659508e1cf1f0f2909792de7ce732c120fc9ae0520d7aebc637837854a4b8beb04ff8c3924222abe481ce96d26973d27436c3034" name="setools-test" arch="src">
  <version epoch="0" ver="4.6.0" rel="122.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to the version 4.4.0:
  * Added support for old Boolean name substitution in seinfo and sesearch.
  * Added sechecker tool which is a configuration file driven analysis tool.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1623153600">- Fix dependency of python3-setools: require python3, not python
  (which is python2) (bsc#1200649).</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1645531200">- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1662120000">- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="757fe101d802694280ab8df87f882277895437c4b4c00beed97abb9f2cf45fbaa2b52ffbb44adeb50b9f261292e2604af513d149ed587224155cb61c03dbb0a5" name="setools-test" arch="src">
  <version epoch="0" ver="4.6.0" rel="124.28"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1615291200">- Update to the version 4.4.0:
  * Added support for old Boolean name substitution in seinfo and sesearch.
  * Added sechecker tool which is a configuration file driven analysis tool.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1623153600">- Fix dependency of python3-setools: require python3, not python
  (which is python2) (bsc#1200649).</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1645531200">- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1662120000">- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1751284800">- Drop legacy %python_build and %python_install macros and
  switch to pyproject macros instead as requested by packaging team</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757419200">- Update to version 4.6.0:
  - User Visible Changes
  * Add seinfo option to see roles allowed for a specified type.
  * Add sechecker module for asserting kernel modules are read-only.
  * Add support for the nlmsg extended permission.
  - Under The Hood Changes
  * Significant code quality and unit testing improvements.
  * Drop methods marked for deprecation.
  - Packaging Changes
  * Refactor packaging to use pyproject.toml.
- Add %check section and run tests (Factory only)
- Fix %fdupes call to clean up duplicates for all Python versions
- Add minimum required dependency versions</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1757592000">- Move tests to a test multibuild flavor</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758542400">- Simplify test multibuild flavor to fix broken build in Factory due to
  debuginfo generation</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1758801600">- Fix test multibuild flavor
  - Change the test flavor so that it does not produce any RPMs, avoiding
    duplicate binaries across the setools and setools-test packages
  - Disable debuginfo generation for the test flavor, so that it does not break
    due to the missing files.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1775044800">- Adjust %suse_version to new scheme (jsc#PED-15790)</changelog>
</package>
<package pkgid="f4e563b2851811da02099b00bbd2a434df4d7c833c1ade66ac34150b8d4c4e1f595fc589f24056203630fefd5f3a9ccc4f7a603f4a7c5480f3342f4b15fe32a7" name="setroubleshoot" arch="i586">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="1e3f7fa47551fb59cd2f6812f2130693840335b71520feade143520c8edd3a3d97fa73845a601ae9d9f611b3e883baa81f3d0358e2456d841b7d0838f68c05d5" name="setroubleshoot" arch="src">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1621425600">- new version 3.3.26
  * Fix plugin exception reporting
  * Update translations
- add patches
  setroubleshoot-Stop-SetroubleshootFixit-after-10-seconds-of-inactiv.patch
  setroubleshoot-Do-not-use-Python-slip-package.patch
  setroubleshoot-Gracefully-handle-unavailable-libreport.patch
- server needs to require python3-systemd
- fix audisp plugin dir</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1623153600">- Package changes:
  * Number the patches, RPM shipped with SLE/Leap doesn't support
    auto-numbering.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Delete setroubleshoot-rpmlintrc. For the devel project it's not
  necessary and for official products we don't allow to reduce the
  badness of the warnings listed in there</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629460800">- Ensure /run is used, not /var/run
- Add CONFIG parameter to %sysusers_generate_pre
- Don't fdupes unnecessarily</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1636632000">- Drop build requirement for gtk2-devel</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1652011200">- Switch runtime requirement of server package from ancient
  PyGObject 2 to the current version. Build requirement was already
  current.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1666267200">- Update to version 3.3.30 (bnc#1204344)
  Summary of changes from 3.3.26 to 3.3.30:
  * sedispatch: check read_size
  * SafeConfigParser is deprecated and will be dropped
  * Fix typos in --help, man pages and developer's guide
  * Improve DSP module reporting
  * Look for modules in /usr/share/selinux/packages
  * Always use rpm source package for reporting
  * Improve after_first email filter behavior
  * Set right ownership on /var/lib/setroubleshoot
  * Install systemd-sysusers config
  * Remove Requires(pre) useradd &amp; groupadd
  * Introduce email.use_sendmail option
  * Update translations
  * Miscellaneous python and build system changes
  * Fix couple of typos
  * Drop Python2 support
  * Use inspect.signature() instead of instead.getargspec()
  Spec file modification to reflect openSUSE dependencies and paths.
  Removed old patches
  * setroubleshoot-Stop-SetroubleshootFixit-after-10-seconds-of-inactiv.patch
  * setroubleshoot-Do-not-use-Python-slip-package.patch
  * setroubleshoot-Gracefully-handle-unavailable-libreport.patch</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1669809600">- Fix dbus conf file location to /usr/share/dbus-1</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1670500800">- Small adjustments in a spec file for dirs and files
- Add documentation to be build in setroubleshoot-doc</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="d269898ac0d800400020deea70ded835fc6faa3d3eab47b56381c177c6ca87061565391666203b053c3e500cd72bb32993dd45ff84c0cd2c30bdeaf3c4afee6e" name="setroubleshoot" arch="x86_64">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="157f1b1e73df7333910545cd7fdd1128c13437761e2b43368b6b12450e53dee0218371c62b315a816f40aed1b7b35afa7255aeac710089e04a85aaa1a6eb03db" name="setroubleshoot-doc" arch="noarch">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="145782c696561ab6d8ce6a204b8785627e015ba10759b63df075035042c45e6f778a266f080ebdedc30f4c6bd24e264d463db8205862c7bc44c119e45b9be73f" name="setroubleshoot-plugins" arch="noarch">
  <version epoch="0" ver="3.3.15" rel="18.8"/>
  <changelog author="prusnak@suse.cz" date="1244635200">- initial version 2.0.16
  * based on Fedora package</changelog>
  <changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.1.40</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 3.3.9</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1615809600">-  Update to 3.3.12
  Summary of the changes from 3.3.10 to 3.3.12
  * Use get_package_nvr* functions instead of get_rpm_nvr*
  * Add plugin which analyzes execmem denials
  * Update qemu_blk_image and qemu_file_image
  * Update "xen_image" plugin
  * update "file" plugin
  * Handle no "allowed_target_types" properly
  * bind_ports: Do not use when there are no allowed_target_types
  * Fix summary and "if" text for AVCs with unknown target path</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1621339200">- Don't call dbus-send in %post as that would auto launch the server</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.3.14:
  * Update translations
  * Add 'fur' into shipped locales
  * Update translations</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update project url.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1732363200">- add 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch: fixes
  build with python 3.13+</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741348800">- Fix license tag, it's GPL-3.0-or-later.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1743768000">- Update to 3.3.15
  * restorecon.py: exclude more paths
  * Improve disable_ipv6 plugin then_text
  * Update generated configuration files
  * Update translations
- patch 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch removed since
  it is not needeed anymore</changelog>
</package>
<package pkgid="c9948e414f0201428a6d1086fc4f8c428dd49d48acb6572ea55b99824df8a9ca01a301010bc8becd4a8efa093a2ad5320d09042d6fd2f4b38b9d83419fa170cf" name="setroubleshoot-plugins" arch="src">
  <version epoch="0" ver="3.3.15" rel="18.8"/>
  <changelog author="prusnak@suse.cz" date="1244635200">- initial version 2.0.16
  * based on Fedora package</changelog>
  <changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.1.40</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 3.3.9</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1615809600">-  Update to 3.3.12
  Summary of the changes from 3.3.10 to 3.3.12
  * Use get_package_nvr* functions instead of get_rpm_nvr*
  * Add plugin which analyzes execmem denials
  * Update qemu_blk_image and qemu_file_image
  * Update "xen_image" plugin
  * update "file" plugin
  * Handle no "allowed_target_types" properly
  * bind_ports: Do not use when there are no allowed_target_types
  * Fix summary and "if" text for AVCs with unknown target path</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1621339200">- Don't call dbus-send in %post as that would auto launch the server</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.3.14:
  * Update translations
  * Add 'fur' into shipped locales
  * Update translations</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update project url.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1732363200">- add 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch: fixes
  build with python 3.13+</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741348800">- Fix license tag, it's GPL-3.0-or-later.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1743768000">- Update to 3.3.15
  * restorecon.py: exclude more paths
  * Improve disable_ipv6 plugin then_text
  * Update generated configuration files
  * Update translations
- patch 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch removed since
  it is not needeed anymore</changelog>
</package>
<package pkgid="866d1283462c561ac84845b5ce1aae9a11d07a212f28993f2fa0e505c9a6fc46a4a35dfb5a385e94ea9924ab608373322ec6f40fc61d80e54b507af52c087cd4" name="setroubleshoot-plugins-lang" arch="noarch">
  <version epoch="0" ver="3.3.15" rel="18.8"/>
  <changelog author="prusnak@suse.cz" date="1244635200">- initial version 2.0.16
  * based on Fedora package</changelog>
  <changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.1.40</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 3.3.9</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1615809600">-  Update to 3.3.12
  Summary of the changes from 3.3.10 to 3.3.12
  * Use get_package_nvr* functions instead of get_rpm_nvr*
  * Add plugin which analyzes execmem denials
  * Update qemu_blk_image and qemu_file_image
  * Update "xen_image" plugin
  * update "file" plugin
  * Handle no "allowed_target_types" properly
  * bind_ports: Do not use when there are no allowed_target_types
  * Fix summary and "if" text for AVCs with unknown target path</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1621339200">- Don't call dbus-send in %post as that would auto launch the server</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.3.14:
  * Update translations
  * Add 'fur' into shipped locales
  * Update translations</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update project url.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1732363200">- add 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch: fixes
  build with python 3.13+</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741348800">- Fix license tag, it's GPL-3.0-or-later.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1743768000">- Update to 3.3.15
  * restorecon.py: exclude more paths
  * Improve disable_ipv6 plugin then_text
  * Update generated configuration files
  * Update translations
- patch 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch removed since
  it is not needeed anymore</changelog>
</package>
<package pkgid="bc392beba724124d81d14ced64d9cdf9080657c6f787a2f1f78ae0f1944bb00549484ffc37ec46744df2f75411b647bde2a2dfa6eeba99820925e9bec37a376a" name="setroubleshoot-server" arch="i586">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="d342eb6d73087edeb21e4c740fc86e6e0fdda127c84c28f0efde01b0833e46b21fc75d6fa1ea31b61318758f1cbe0c21457824072aa097035788df92aa36956c" name="setroubleshoot-server" arch="x86_64">
  <version epoch="0" ver="3.3.36" rel="36.2"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1746100800">- Add pkgconfig(gobject-introspection-1.0) BuildRequires: inspect
  the python code and detect typelib() dependencies.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763121600">- The dbus calls in post/postun got removed long ago, remove the
  Requires, too.</changelog>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.com&gt;" date="1768824000">- Add patch sealert_add_dependency_error_handling.patch to address
  setroubleshoot-server gui dependency to setroubleshoot (bsc#1237302)
- Update to version 3.3.36
  * audit_data: include syslog when needed
  * Rename appdata to metainfo
  * Replace python-six with python 3 only code</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772193600">- Migrate from libxml2 to xml.etree.ElementTree (boo#1259023)
  add setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch</changelog>
</package>
<package pkgid="5b9f872149a4ee9b01343eccd019143815aa66520c2652740bb5b3a5471b8cd1047246a4ffb2e8ccb3c02cbf657d3da1e849b29657d9dc819eff69ec6fa738f8" name="shadow" arch="i586">
  <version epoch="0" ver="4.8.1" rel="10.24.4"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722600000">- bsc#1228770: Fix not copying of skel files
  Update shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="0f27b0d7447c1ccf02fe0e1611d57c156bd873ac3634913d783743c0f32f8db4b45146bb653899dd86714a588ada42af7616b07e90164e85c8f7f0f5aba1dfcc" name="shadow" arch="src">
  <version epoch="0" ver="4.8.1" rel="10.24.4"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722600000">- bsc#1228770: Fix not copying of skel files
  Update shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="a8aa50d71ec8d604bfb26dedf35f1932958fd3844e00121a315ee49039ec93c774ac5b1234997644330ac298f120c9367097be69169cad32b95ee14333686f14" name="shadow" arch="x86_64">
  <version epoch="0" ver="4.8.1" rel="10.24.4"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722600000">- bsc#1228770: Fix not copying of skel files
  Update shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="d5d03342851b0b2f38fbb739aede6fd55af6a5e1cd658bee01915177ebfb72cee8a0b919f78ca27c7ddc01e38b5c979db016d3bcae5124c430229c89a3339e7b" name="udica" arch="noarch">
  <version epoch="0" ver="0.2.8" rel="12.9"/>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1659355200">- Initial packaging of version 0.2.6-5</changelog>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1683201600">- update to version 0.2.7
  * Make sure each section of the inspect exists before accessing
  * Improve label collection for mounts and devices
  * Add support for containerd via nerdctl inspect
  * Avoid duplicate rules for accessing mounts and devices</changelog>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1705924800">- update to version 0.2.8
  * Add ---devices option
  * Fix generating policy for Crio mounts
  * Improve code readability based on lint and black findings</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1751630400">- Use pyproject macros from python-rpm-macros to build and install.
- Make use of fdupes.</changelog>
</package>
<package pkgid="c29d249fb68f79fdffcdd45f539d3371fc0812657c68c96fad6f5250acd6f760d5a136ec8a1d19f3703bca2bb20d1c70fe612e6221a3a6cf1b96634c08e95f0a" name="udica" arch="src">
  <version epoch="0" ver="0.2.8" rel="12.9"/>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1659355200">- Initial packaging of version 0.2.6-5</changelog>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1683201600">- update to version 0.2.7
  * Make sure each section of the inspect exists before accessing
  * Improve label collection for mounts and devices
  * Add support for containerd via nerdctl inspect
  * Avoid duplicate rules for accessing mounts and devices</changelog>
  <changelog author="Gayane Osipyan &lt;Gayane.Osipyan@suse.com&gt;" date="1705924800">- update to version 0.2.8
  * Add ---devices option
  * Fix generating policy for Crio mounts
  * Improve code readability based on lint and black findings</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1751630400">- Use pyproject macros from python-rpm-macros to build and install.
- Make use of fdupes.</changelog>
</package>
</otherdata>