# changelog

author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7
changelog:
  - add ptrace_child access to process
  - remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
  - Allow boinc domains to manage boinc_lib_t lnk_files
  - Add support for boinc-client.service unit file
  - Add support for boinc.log
  - Allow mozilla_plugin execmod on mozilla home files if allow_ex
  - Allow dovecot_deliver_t to read dovecot_var_run_t
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Move thin policy out from cloudform.pp and add a new thin poli
  - pacemaker needs to communicate with corosync streams
  - abrt is now started on demand by dbus
  - Allow certmonger to talk directly to Dogtag servers
  - Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
  - Allow mozila_plugin to execute gstreamer home files
  - Allow useradd to delete all file types stored in the users hom
  - rhsmcertd reads the rpm database
  - Add support for lightdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6
changelog:
  - Add tomcat policy
  - Remove pyzor/razor policy
  - rhsmcertd reads the rpm database
  - Dontaudit  thumb to setattr on xdm_tmp dir
  - Allow wicd to execute ldconfig in the networkmanager_t domain
  - Add /var/run/cherokee\.pid labeling
  - Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
  - Allow postfix-master to r/w pipes other postfix domains
  - Allow snort to create netlink_socket
  - Add kdumpctl policy
  - Allow firstboot to create tmp_t files/directories
  - /usr/bin/paster should not be labeled as piranha_exec_t
  - remove initrc_domain from tomcat
  - Allow ddclient to read /etc/passwd
  - Allow useradd to delete all file types stored in the users homedir
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
  - Transition xauth files within firstboot_tmp_t
  - Fix labeling of /run/media to match /media
  - Label all lxdm.log as xserver_log_t
  - Add port definition for mxi port
  - Allow local_login_t to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5
changelog:
  - apcupsd needs to read /etc/passwd
  - Sanlock allso sends sigkill
  - Allow glance_registry to connect to the mysqld port
  - Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
  - Allow firefox plugins/flash to connect to port 1234
  - Allow mozilla plugins to delete user_tmp_t files
  - Add transition name rule for printers.conf.O
  - Allow virt_lxc_t to read urand
  - Allow systemd_loigind to list gstreamer_home_dirs
  - Fix labeling for /usr/bin
  - Fixes for cloudform services
    * support FIPS
  - Allow polipo to work as web caching
  - Allow chfn to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4
changelog:
  - Add support for ecryptfs
    * ecryptfs does not support xattr
    * we need labeling for HOMEDIR
  - Add policy for (u)mount.ecryptfs*
  - Fix labeling of kerbero host cache files, allow rpc.svcgssd to manage host cache
  - Allow dovecot to manage Maildir content, fix transitions to Maildir
  - Allow postfix_local to transition to dovecot_deliver
  - Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
  - Cleanup interface definitions
  - Allow apmd to change with the logind daemon
  - Changes required for sanlock in rhel6
  - Label /run/user/apache as httpd_tmp_t
  - Allow thumb to use lib_t as execmod if boolean turned on
  - Allow squid to create the squid directory in /var with the correct labe
  - Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
  - Allow virtd to exec xend_exec_t without transition
  - Allow virtd_lxc_t to unmount all file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3
changelog:
  - PolicyKit path has changed
  - Allow httpd connect to dirsrv socket
  - Allow tuned to write generic kernel sysctls
  - Dontaudit logwatch to gettr on /dev/dm-2
  - Allow policykit-auth to manage kerberos files
  - Make condor_startd and rgmanager as initrc domain
  - Allow virsh to read /etc/passwd
  - Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
  - xdm now needs to execute xsession_exec_t
  - Need labels for /var/lib/gdm
  - Fix files_filetrans_named_content() interface
  - Add new attribute - initrc_domain
  - Allow systemd_logind_t to signal, signull, sigkill all processes
  - Add filetrans rules for etc_runtime files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1
changelog:
  - Mass merge with upstream
    * new policy topology to include contrib policy modules
    * we have now two base policy patches


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128
changelog:
  - Fix description of authlogin_nsswitch_use_ldap
  - Fix transition rule for rhsmcertd_t needed for RHEL7
  - Allow useradd to list nfs state data
  - Allow openvpn to manage its log file and directory
  - We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
  - Allow thumb to use nvidia devices
  -  Allow local_login to create user_tmp_t files for kerberos
  - Pulseaudio needs to read systemd_login /var/run content
  - virt should only transition named system_conf_t config files
  - Allow  munin to execute its plugins
  - Allow nagios system plugin to read /etc/passwd
  - Allow plugin to connect to soundd port
  - Fix httpd_passwd to be able to ask passwords
  - Radius servers can use ldap for backing store
  - Seems to need to mount on /var/lib for xguest polyinstatiation to work.
  - Allow systemd_logind to list the contents of gnome keyring
  - VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
  - Add policy for isns-utils


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127
changelog:
  - Add policy for subversion daemon
  - Allow boinc to read passwd
  - Allow pads to read kernel network state
  - Fix man2html interface for sepolgen-ifgen
  - Remove extra /usr/lib/systemd/system/smb
  - Remove all /lib/systemd and replace with /usr/lib/systemd
  - Add policy for man2html
  - Fix the label of kerberos_home_t to krb5_home_t
  - Allow mozilla plugins to use Citrix
  - Allow tuned to read /proc/sys/kernel/nmi_watchdog
  - Allow tune /sys options via systemd's tmpfiles.d "w" type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126
changelog:
  - Dontaudit lpr_t to read/write leaked mozilla tmp files
  - Add file name transition for .grl-podcasts directory
  - Allow corosync to read user tmp files
  - Allow fenced to create snmp lib dirs/files
  - More fixes for sge policy
  - Allow mozilla_plugin_t to execute any application
  - Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
  - Allow mongod to read system state information
  -  Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
  - Allow polipo to manage polipo_cache dirs
  - Add jabbar_client port to mozilla_plugin_t
  - Cleanup procmail policy
  - system bus will pass around open file descriptors on files that do not have labels on them
  - Allow l2tpd_t to read system state
  - Allow tuned to run ls /dev
  - Allow sudo domains to read usr_t files
  - Add label to machine-id 
  - Fix corecmd_read_bin_symlinks cut and paste error


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125
changelog:
  - Fix pulseaudio port definition
  - Add labeling for condor_starter
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Allow prelink_cron_system_t to getpw calls
  - Allow sudo domains to manage kerberos rcache files
  - Allow user_mail_domains to work with courie
  - Port definitions necessary for running jboss apps within openshift
  -  Add support for openstack-nova-metadata-api
  - Add support for nova-console*
  - Add support for openstack-nova-xvpvncproxy
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd
  - Fix auth_role() interface
  - Allow numad to read sysfs
  - Allow matahari-rpcd to execute shell
  - Add label for ~/.spicec
  - xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
  - Devicekit_disk wants to read the logind sessions file when writing a cd
  - Add fixes for condor to make condor jobs working correctly
  - Change label of /var/log/rpmpkgs to cron_log_t
  - Access requires to allow systemd-tmpfiles --create to work.
  - Fix obex to be a user application started by the session bus.
  - Add additional filename trans rules for kerberos
  - Fix /var/run/heartbeat labeling
  - Allow apps that are managing rcache to file trans correctly
  - Allow openvpn to authenticate against ldap server
  - Containers need to listen to network starting and stopping events


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123
changelog:
  - Fix zarafa labeling
  - Allow guest_t to fix labeling
  - corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - add lxc_contexts
  - Allow accountsd to read /proc
  - Allow restorecond to getattr on all file sytems
  - tmpwatch now calls getpw
  - Allow apache daemon to transition to pwauth domain
  - Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
  - The obex socket seems to be a stream socket
  - dd label for /var/run/nologin


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122
changelog:
  - Allow jetty running as httpd_t to read hugetlbfs files
  - Allow sys_nice and setsched for rhsmcertd
  - Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
  - Allow setfiles to append to xdm_tmp_t
  - Add labeling for /export as a usr_t directory
  - Add labels for .grl files created by gstreamer


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121
changelog:
  - Add labeling for /usr/share/jetty/bin/jetty.sh
  - Add jetty policy which contains file type definitios
  - Allow jockey to use its own fifo_file and make this the default for all domains
  - Allow mozilla_plugins to use spice (vnc_port/couchdb)
  - asterisk wants to read the network state
  - Blueman now uses /var/lib/blueman- Add label for nodejs_debug
  - Allow mozilla_plugin_t to create ~/.pki directory and content


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120
changelog:
  - Add clamscan_can_scan_system boolean
  - Allow mysqld to read kernel network state
  - Allow sshd to read/write condor lib files
  - Allow sshd to read/write condor-startd tcp socket
  - Fix description on httpd_graceful_shutdown
  - Allow glance_registry to communicate with mysql
  - dbus_system_domain is using systemd to lauch applications
  - add interfaces to allow domains to send kill signals to user mail agents
  - Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
  - Lots of new access required for secure containers
  - Corosync needs sys_admin capability
  - ALlow colord to create shm
  - .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
  - Add boolean to control whether or not mozilla plugins can create random content in the users homedir
  -  Add new interface to allow domains to list msyql_db directories, needed for libra
  - shutdown has to be allowed to delete etc_runtime_t
  - Fail2ban needs to read /etc/passwd
  -  Allow ldconfig to create /var/cache/ldconfig
  - Allow tgtd to read hardware state information
  - Allow collectd to create packet socket
  - Allow chronyd to send signal to itself
  - Allow collectd to read /dev/random
  - Allow collectd to send signal to itself
  - firewalld needs to execute restorecon
  - Allow restorecon and other login domains to execute restorecon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119
changelog:
  - Allow logrotate to getattr on systemd unit files
  - Add support for tor systemd unit file
  - Allow apmd to create /var/run/pm-utils with the correct label
  - Allow l2tpd to send sigkill to pppd
  - Allow pppd to stream connect to l2tpd
  - Add label for scripts in /etc/gdm/
  - Allow systemd_logind_t to ignore mcs constraints on sigkill
  - Fix files_filetrans_system_conf_named_files() interface
  - Add labels for /usr/share/wordpress/wp-includes/*.php
  - Allow cobbler to get SELinux mode and booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118
changelog:
  - Add unconfined_execmem_exec_t as an alias to bin_t
  - Allow fenced to read snmp var lib files, also allow it to read usr_t
  - ontaudit access checks on all executables from mozilla_plugin
  - Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
  - Allow systemd_tmpfiles_t to getattr all pipes and sockets
  - Allow glance-registry to send system log messages
  - semanage needs to manage mock lib files/dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117
changelog:
  - Add policy for abrt-watch-log
  - Add definitions for jboss_messaging ports
  - Allow systemd_tmpfiles to manage printer devices
  - Allow oddjob to use nsswitch
  - Fix labeling of log files for postgresql
  - Allow mozilla_plugin_t to execmem and execstack by default
  - Allow firewalld to execute shell
  - Fix /etc/wicd content files to get created with the correct label
  - Allow mcelog to exec shell
  - Add ~/.orc as a gstreamer_home_t
  - /var/spool/postfix/lib64 should be labeled lib_t
  - mpreaper should be able to list all file system labeled directories
  - Add support for apache to use openstack
  - Add labeling for /etc/zipl.conf and zipl binary
  - Turn on allow_execstack and turn off telepathy transition for final release


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116
changelog:
  - More access required for virt_qmf_t
  - Additional assess required for systemd-logind to support multi-seat
  - Allow mozilla_plugin to setrlimit
  - Revert changes to fuse file system to stop deadlock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115
changelog:
  - Allow condor domains to connect to ephemeral ports
  - More fixes for condor policy
  - Allow keystone to stream connect to mysqld
  - Allow mozilla_plugin_t to read generic USB device to support GPS devices
  - Allow thum to file name transition gstreamer home content
  - Allow thum to read all non security files
  - Allow glance_api_t to connect to ephemeral ports
  - Allow nagios plugins to read /dev/urandom
  - Allow syslogd to search postfix spool to support postfix chroot env
  - Fix labeling for /var/spool/postfix/dev
  - Allow wdmd chown
  - Label .esd_auth as pulseaudio_home_t
  - Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114
changelog:
  - Add support for clamd+systemd
  - Allow fresclam to execute systemctl to handle clamd
  - Change labeling for /usr/sbin/rpc.ypasswd.env
  	- Allow yppaswd_t to execute yppaswd_exec_t
  	- Allow yppaswd_t to read /etc/passwd
  - Gnomekeyring socket has been moved to /run/user/USER/
  - Allow samba-net to connect to ldap port
  - Allow signal for vhostmd
  - allow mozilla_plugin_t to read user_home_t socket
  - New access required for secure Linux Containers
  - zfs now supports xattrs
  - Allow quantum to execute sudo and list sysfs
  - Allow init to dbus chat with the firewalld
  - Allow zebra to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113
changelog:
  - Allow svirt_t to create content in the users homedir under ~/.libvirt
  - Fix label on /var/lib/heartbeat
  - Allow systemd_logind_t to send kill signals to all processes started by a user
  - Fuse now supports Xattr Support


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112
changelog:
  - upowered needs to setsched on the kernel
  - Allow mpd_t to manage log files
  - Allow xdm_t to create /var/run/systemd/multi-session-x
  - Add rules for missedfont.log to be used by thumb.fc
  - Additional access required for virt_qmf_t
  - Allow dhclient to dbus chat with the firewalld
  - Add label for lvmetad
  - Allow systemd_logind_t to remove userdomain sock_files
  - Allow cups to execute usr_t files
  - Fix labeling on nvidia shared libraries
  - wdmd_t needs access to sssd and /etc/passwd
  - Add boolean to allow ftp servers to run in passive mode
  - Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
  - Fix using httpd_use_fusefs
  - Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111
changelog:
  - Rename rdate port to time port, and allow gnomeclock to connect to it
  - We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
  - /etc/auto.* should be labeled bin_t
  - Add httpd_use_fusefs boolean
  - Add fixes for heartbeat
  - Allow sshd_t to signal processes that it transitions to
  - Add condor policy
  - Allow svirt to create monitors in ~/.libvirt
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Lot of fixes for cfengine


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110
changelog:
  - /var/run/postmaster.* labeling is no longer needed
  - Alllow drbdadmin to read /dev/urandom
  - l2tpd_t seems to use ptmx
  - group+ and passwd+ should be labeled as /etc/passwd
  - Zarafa-indexer is a socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109
changelog:
  - Ensure lastlog is labeled correctly
  - Allow accountsd to read /proc data about gdm
  - Add fixes for tuned
  - Add bcfg2 fixes which were discovered during RHEL6 testing
  - More fixes for gnome-keyring socket being moved
  - Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
  - Fix description for files_dontaudit_read_security_files() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108
changelog:
  - Add new policy and man page for bcfg2
  - cgconfig needs to use getpw calls
  - Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
  - gnome-keyring wants to create a directory in cache_home_t
  - sanlock calls getpw


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107
changelog:
  - Add numad policy and numad man page
  - Add fixes for interface bugs discovered by SEWatch
  - Add /tmp support for squid
  - Add fix for #799102
       * change default labeling for /var/run/slapd.* sockets
  - Make thumb_t as userdom_home_reader
  - label /var/lib/sss/mc same as pubconf, so getpw domains can read it
  - Allow smbspool running as cups_t to stream connect to nmbd
  - accounts needs to be able to execute passwd on behalf of users
  - Allow systemd_tmpfiles_t to delete boot flags
  - Allow dnssec_trigger to connect to apache ports
  - Allow gnome keyring to create sock_files in ~/.cache
  - google_authenticator is using .google_authenticator
  - sandbox running from within firefox is exposing more leaks
  - Dontaudit thumb to read/write /dev/card0
  - Dontaudit getattr on init_exec_t for gnomeclock_t
  - Allow certmonger to do a transition to certmonger_unconfined_t
  - Allow dhcpc setsched which is caused by nmcli
  - Add rpm_exec_t for /usr/sbin/bcfg2
  - system cronjobs are sending dbus messages to systemd_logind
  - Thumnailers read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106
changelog:
  - Allow auditctl getcap
  - Allow vdagent to use libsystemd-login
  - Allow abrt-dump-oops to search /etc/abrt
  - Got these avc's while trying to print a boarding pass from firefox
  - Devicekit is now putting the media directory under /run/media
  - Allow thumbnailers to create content in ~/.thumbails directory
  - Add support for proL2TPd by Dominick Grift
  - Allow all domains to call getcap
  - wdmd seems to get a random chown capability check that it does not need
  - Allow vhostmd to read kernel sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105
changelog:
  - Allow chronyd to read unix
  - Allow hpfax to read /etc/passwd
  - Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
  - Allow rpcd to read quota_db_t
  - Update to man pages to match latest policy
  - Fix bug in jockey interface for sepolgen-ifgen
  - Add initial svirt_prot_exec_t policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103
changelog:
  - Add a new type for /etc/firewalld and allow firewalld to write to this directory
  - Add definition for ~/Maildir, and allow mail deliver domains to write there
  - Allow polipo to run from a cron job
  - Allow rtkit to schedule wine processes
  - Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
  - Allow users domains to send signals to consolehelper domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102
changelog:
  - More fixes for boinc policy
  - Allow polipo domain to create its own cache dir and pid file
  - Add systemctl support to httpd domain
  - Add systemctl support to polipo, allow NetworkManager to manage the service
  - Add policy for jockey-backend
  - Add support for motion daemon which is now covered by zoneminder policy
  - Allow colord to read/write motion tmpfs
  - Allow vnstat to search through var_lib_t directories
  - Stop transitioning to quota_t, from init an sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100
changelog:
  - Add additional fixes for icmp nagios plugin
  - Allow cron jobs to open fifo_files from cron, since service script opens /dev/stdin
  - Add certmonger_unconfined_exec_t
  - Make sure tap22 device is created with the correct label
  - Allow staff users to read systemd unit files
  - Merge in previously built policy
  - Arpwatch needs to be able to start netlink sockets in order to start
  - Allow cgred_t to sys_ptrace to look at other DAC Processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99
changelog:
  - Back port some of the access that was allowed in nsplugin_t
  - Add definitiona for couchdb ports
  - Allow nagios to use inherited users ttys
  - Add git support for mock
  - Allow inetd to use rdate port
  - Add own type for rdate port
  - Allow samba to act as a portmapper
  - Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
  - New fixes needed for samba4
  - Allow apps that use lib_t to read lib_t symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98
changelog:
  - Add policy for nove-cert
  - Add labeling for nova-openstack  systemd unit files
  - Add policy for keystoke


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97
changelog:
  - Fix man pages fro domains
  - Add man pages for SELinux users and roles
  - Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
  - Add policy for matahari-rpcd
  - nfsd executes mount command on restart
  - Matahari domains execute renice and setsched
  - Dontaudit leaked tty in mozilla_plugin_config
  - mailman is changing to a per instance naming
  - Add 7600 and 4447 as jboss_management ports
  - Add fixes for nagios event handlers
  - Label httpd.event as httpd_exec_t, it is an apache daemon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96
changelog:
  - Add labeling for /var/spool/postfix/dev/log
  - NM reads sysctl.conf
  - Iscsi log file context specification fix
  -  Allow mozilla plugins to send dbus messages to user domains that transition to it
  - Allow mysql to read the passwd file
  - Allow mozilla_plugin_t to create mozilla home dirs in user homedir
  - Allow deltacloud to read kernel sysctl
  - Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
  - Allow postgresql_t to connectto itself
  - Add login_userdomain attribute for users which can log in using terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95
changelog:
  - Allow sysadm_u to reach system_r by default #784011
  - Allow nagios plugins to use inherited user terminals
  - Razor labeling is not used no longer
  - Add systemd support for matahari
  - Add port_types to man page, move booleans to the top, fix some english
  - Add support for matahari-sysconfig-console
  - Clean up matahari.fc
  - Fix matahari_admin() interfac
  - Add labels for/etc/ssh/ssh_host_*.pub keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94
changelog:
  - Allow ksysguardproces to send system log msgs
  - Allow  boinc setpgid and signull
  - Allow xdm_t to sys_ptrace to run pidof command
  - Allow smtpd_t to manage spool files/directories and symbolic links
  - Add labeling for jetty
  - Needed changes to get unbound/dnssec to work with openswan


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93
changelog:
  - Add user_fonts_t alias xfs_tmp_t
  - Since depmod now runs as insmod_t we need to write to kernel_object_t
  - Allow firewalld to dbus chat with networkmanager
  - Allow qpidd to connect to matahari ports
  - policykit needs to read /proc for uses not owned by it
  - Allow systemctl apps to connecto the init stream


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90
changelog:
  - Add proxy class and read access for gssd_proxy
  - Separate out the sharing public content booleans
  - Allow certmonger to execute a script and send signals to  apache and dirsrv to reload the certificate
  -  Add label transition for gstream-0.10 and 12
  - Add booleans to allow rsync to share nfs and cifs file sytems
  - chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
  - Fix filename transitions for cups files
  - Allow denyhosts to read "unix"
  - Add file name transition for locale.conf.new
  - Allow boinc projects to gconf config files
  - sssd needs to be able to increase the socket limit under certain loads
  - sge_execd needs to read /etc/passwd
  - Allow denyhost to check network state
  - NetworkManager needs to read sessions data
  - Allow denyhost to check network state
  - Allow xen to search virt images directories
  - Add label for /dev/megaraid_sas_ioctl_node
  - Add autogenerated man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-89
changelog:
  - Allow boinc project to getattr on fs
  - Allow init to execute initrc_state_t
  - rhev-agent package was rename to ovirt-guest-agent
  - If initrc_t creates /etc/local.conf then we need to make sure it is labeled correctly
  - sytemd writes content to /run/initramfs and executes it on shutdown
  - kdump_t needs to read /etc/mtab, should be back ported to F16
  - udev needs to load kernel modules in early system boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-88
changelog:
  - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
  - Add additional systemd interfaces which are needed fro *_admin interfaces
  - Fix bind_admin() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87
changelog:
  - Allow firewalld to read urand
  - Alias java, execmem_mono to bin_t to allow third parties
  - Add label for kmod
  - /etc/redhat-lsb contains binaries
  - Add boolean to allow gitosis to send mail
  - Add filename transition also for "event20"
  - Allow systemd_tmpfiles_t to delete all file types
  - Allow collectd to ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86
changelog:
  - make consoletype_exec optional, so we can remove consoletype policy
  - remove unconfined_permisive.patch
  - Allow openvpn_t to inherit user home content and tmp content
  - Fix dnssec-trigger labeling
  - Turn on obex policy for staff_t
  - Pem files should not be secret
  - Add lots of rules to fix AVC's when playing with containers
  - Fix policy for dnssec
  - Label ask-passwd directories correctly for systemd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-85
changelog:
  - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
  - fuse file system is now being mounted in /run/user
  - systemd_logind is sending signals to processes that are dbus messaging with it
  - Add support for winshadow port and allow iscsid to connect to this port
  - httpd should be allowed to bind to the http_port_t udp socket
  - zarafa_var_lib_t can be a lnk_file
  - A couple of new .xsession-errors files
  - Seems like user space and login programs need to read logind_sessions_files
  - Devicekit disk seems to be being launched by systemd
  - Cleanup handling of setfiles so most of rules in te file
  - Correct port number for dnssec
  - logcheck has the home dir set to its cache


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-83
changelog:
  - Add new sysadm_secadm.pp module
  	* contains secadm definition for sysadm_t
  - Move user_mail_domain access out of the interface into the te file
  - Allow httpd_t to create httpd_var_lib_t directories as well as files
  - Allow snmpd to connect to the ricci_modcluster stream
  - Allow firewalld to read /etc/passwd
  - Add auth_use_nsswitch for colord
  - Allow smartd to read network state
  - smartdnotify needs to read /etc/group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82
changelog:
  - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
  - lxdm startup scripts should be labeled bin_t, so confined users will work
  - mcstransd now creates a pid, needs back port to F16
  - qpidd should be allowed to connect to the amqp port
  - Label devices 010-029 as usb devices
  - ypserv packager says ypserv does not use tmp_t so removing selinux policy types
  - Remove all ptrace commands that I believe are caused by the kernel/ps avcs
  - Add initial Obex policy
  - Add logging_syslogd_use_tty boolean
  - Add polipo_connect_all_unreserved bolean
  - Allow zabbix to connect to ftp port
  - Allow systemd-logind to be able to switch VTs
  - Allow apache to communicate with memcached through a sock_file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80
changelog:
  - Add zabbix_can_network boolean
  - Add httpd_can_connect_zabbix boolean
  - Prepare file context labeling for usrmove functions
  - Allow system cronjobs to read kernel network state
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow corosync to read and write to qpidd shared mem
  -  mozilla_plugin is trying to run pulseaudio 
  - Fixes for new sshd patch for running priv sep domains as the users context
  - Turn off dontaudit rules when turning on allow_ypbind
  - udev now reads /etc/modules.d directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79
changelog:
  - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
  - Cups exchanges dbus messages with init
  - udisk2 needs to send syslog messages
  - certwatch needs to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77
changelog:
  - Treat Bip with bitlbee policy
        * Bip is an IRC proxy
  - Add port definition for interwise port
  - Add support for ipa_memcached socket
  - systemd_jounald needs to getattr on all processes
  - mdadmin fixes
       * uses getpw
  - amavisd calls getpwnam()
  - denyhosts calls getpwall()


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76
changelog:
  - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
  - bluetooth says they do not use /tmp and want to remove the type
  - Allow init to transition to colord
  - Mongod needs to read /proc/sys/vm/zone_reclaim_mode
  - Allow postfix_smtpd_t to connect to spamd
  - Add boolean to allow ftp to connect to all ports > 1023
  - Allow sendmain to write to inherited dovecot tmp files
  - setroubleshoot needs to be able to execute rpm to see what version of packages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-75
changelog:
  - Merge systemd patch
  - systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
  - Allow deltacloudd dac_override, setuid, setgid  caps
  - Allow aisexec to execute shell
  - Add use_nfs_home_dirs boolean for ssh-keygen


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-74
changelog:
  - Add labeling for /var/run/systemd/journal/syslog
  - libvirt sends signals to ifconfig
  - Allow domains that read logind session files to list them


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73
changelog:
  - Fixed destined form libvirt-sandbox
  - Allow apps that list sysfs to also read sympolicy links in this filesystem
  - Add ubac_constrained rules for chrome_sandbox
  - Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
  - Allow postgresql to be executed by the caller
  - Standardize interfaces of daemons 
  - Add new labeling for mm-handler
  - Allow all matahari domains to read network state and etc_runtime_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
changelog:
  - New fix for seunshare, requires seunshare_domains to be able to mounton /
  - Allow systemctl running as logrotate_t to connect to private systemd socket
  - Allow tmpwatch to read meminfo
  - Allow rpc.svcgssd to read supported_krb5_enctype
  - Allow zarafa domains to read /dev/random and /dev/urandom
  - Allow snmpd to read dev_snmp6
  - Allow procmail to talk with cyrus
  - Add fixes for check_disk and check_nagios plugins


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71
changelog:
  - default trans rules for Rawhide policy
  -  Make sure sound_devices controlC* are labeled correctly on creation
  - sssd now needs sys_admin
  - Allow snmp to read all proc_type
  - Allow to setup users homedir with quota.group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-70
changelog:
  - Add httpd_can_connect_ldap() interface
  - apcupsd_t needs to use seriel ports connected to usb devices
  - Kde puts procmail mail directory under ~/.local/share
  - nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
  - Add labeling for /sbin/iscsiuio


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-69
changelog:
  - Add label for /var/lib/iscan/interpreter
  - Dont audit writes to leaked file descriptors or redirected output for nacl
  - NetworkManager needs to write to /sys/class/net/ib*/mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-68
changelog:
  - Allow abrt  to request the kernel to load a module
  - Make sure mozilla content is labeled correctly
  - Allow tgtd to read system state
  - More fixes for boinc
    * allow to resolve dns name
    * re-write boinc policy to use boinc_domain attribute
  - Allow munin services plugins to use NSCD services


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-67
changelog:
  - Allow mozilla_plugin_t to manage mozilla_home_t
  - Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
  - Add label for tumblerd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-65
changelog:
  - Fixes related to  /bin, /sbin
  - Allow abrt to getattr on blk files
  - Add type for rhev-agent log file
  - Fix labeling for /dev/dmfm
  - Dontaudit wicd leaking
  - Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
  - Label /etc/locale.conf correctly
  - Allow user_mail_t to read /dev/random
  - Allow postfix-smtpd to read MIMEDefang
  - Add label for /var/log/suphp.log
  - Allow swat_t to connect and read/write nmbd_t sock_file
  - Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
  - Allow systemd-tmpfiles to change user identity in object contexts
  - More fixes for rhev_agentd_t consolehelper policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-64
changelog:
  - Use fs_use_xattr for squashf
  -  Fix procs_type interface
  - Dovecot has a new fifo_file /var/run/dovecot/stats-mail
  - Dovecot has a new fifo_file /var/run/stats-mail
  - Colord does not need to connect to network
  - Allow system_cronjob to dbus chat with NetworkManager
  - Puppet manages content, want to make sure it labels everything correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-63
changelog:
  - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
  - Allow all postfix domains to use the fifo_file
  - Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
  - Allow apmd_t to read grub.cfg
  - Let firewallgui read the selinux config
  - Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
  - Fix devicekit_manage_pid_files() interface
  - Allow squid to check the network state
  - Dontaudit colord getattr on file systems
  - Allow ping domains to read zabbix_tmp_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-59
changelog:
  - Allow mcelog_t to create dir and file in /var/run and label it correctly
  - Allow dbus to manage fusefs
  - Mount needs to read process state when mounting gluster file systems
  - Allow collectd-web to read collectd lib files
  - Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
  - Allow colord to get the attributes of tmpfs filesystem
  - Add sanlock_use_nfs and sanlock_use_samba booleans
  - Add bin_t label for /usr/lib/virtualbox/VBoxManage


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-58
changelog:
  - Add ssh_dontaudit_search_home_dir
  - Changes to allow namespace_init_t to work
  - Add interface to allow exec of mongod, add port definition for mongod port, 27017
  - Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
  - Allow spamd and clamd to steam connect to each other
  - Add policy label for passwd.OLD
  - More fixes for postfix and postfix maildro
  - Add ftp support for mozilla plugins
  - Useradd now needs to manage policy since it calls libsemanage
  - Fix devicekit_manage_log_files() interface
  - Allow colord to execute ifconfig
  - Allow accountsd to read /sys
  - Allow mysqld-safe to execute shell
  - Allow openct to stream connect to pcscd
  - Add label for /var/run/nm-dns-dnsmasq\.conf
  - Allow networkmanager to chat with virtd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55
changelog:
  - Add more MCS fixes to make sandbox working
  - Make faillog MLS trusted to make sudo_$1_t working
  - Allow sandbox_web_client_t to read passwd_file_t
  - Add .mailrc file context
  - Remove execheap from openoffice domain
  - Allow chrome_sandbox_nacl_t to read cpu_info
  - Allow virtd to relabel generic usb which is need if USB device
  - Fixes for virt.if interfaces to consider chr_file as image file type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-53
changelog:
  - Make nvidia* to be labeled correctly
  - Fix abrt_manage_cache() interface
  - Make filetrans rules optional so base policy will build
  - Dontaudit chkpwd_t access to inherited TTYS
  - Make sure postfix content gets created with the correct label
  - Allow gnomeclock to read cgroup
  - Fixes for cloudform policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-51
changelog:
  -  Begin removing qemu_t domain, we really no longer need this domain.  
  - systemd_passwd needs dac_overide to communicate with users TTY's
  - Allow svirt_lxc domains to send kill signals within their container


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-50
changelog:
  - Allow policykit to talk to the systemd via dbus
  - Move chrome_sandbox_nacl_t to permissive domains
  - Additional rules for chrome_sandbox_nacl


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-49
changelog:
  - Change bootstrap name to nacl
  - Chrome still needs execmem
  - Missing role for chrome_sandbox_bootstrap
  - Add boolean to remove execmem and execstack from virtual machines
  - Dontaudit xdm_t doing an access_check on etc_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-48
changelog:
  - Allow named to connect to dirsrv by default
  - add ldapmap1_0 as a krb5_host_rcache_t file
  - Google chrome developers asked me to add bootstrap policy for nacl stuff
  - Allow rhev_agentd_t to getattr on mountpoints
  - Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-47
changelog:
  - Fixes for cloudform policies which need to connect to random ports
  - Make sure if an admin creates modules content it creates them with the correct label
  - Add port 8953 as a dns port used by unbound
  - Fix file name transition for alsa and confined users


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-41
changelog:
  - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
  - Allow init process to setrlimit on itself
  - Take away transition rules for users executing ssh-keygen
  - Allow setroubleshoot_fixit_t to read /dev/urand
  - Allow sshd to relbale tunnel sockets
  - Allow fail2ban domtrans to shorewall in the same way as with iptables
  - Add support for lnk files in the /var/lib/sssd directory
  - Allow system mail to connect to courier-authdaemon over an unix stream socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-40
changelog:
  - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
  - Make corosync to be able to relabelto cluster lib fies
  - Allow samba domains to search /var/run/nmbd
  - Allow dirsrv to use pam
  - Allow thumb to call getuid
  - chrome less likely to get mmap_zero bug so removing dontaudit
  - gimp help-browser has built in javascript
  - Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
  - Re-write glance policy


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.3
changelog:
  - Move dontaudit sys_ptrace line from permissive.te to domain.te
  - Remove policy for hal, it no longer exists


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.1
changelog:
  - Remove allow_ptrace and replace it with deny_ptrace, which will remove all 
  ptrace from the system
  - Remove 2000 dontaudit rules between confined domains on transition
  and replace with single
  dontaudit domain domain:process { noatsecure siginh rlimitinh } ;


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-39
changelog:
  - Fixes for bootloader policy
  - $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
  - Allow nsplugin to read /usr/share/config
  - Allow sa-update to update rules
  - Add use_fusefs_home_dirs for chroot ssh option
  - Fixes for grub2
  - Update systemd_exec_systemctl() interface
  - Allow gpg to read the mail spool
  - More fixes for sa-update running out of cron job
  - Allow ipsec_mgmt_t to read hardware state information
  - Allow pptp_t to connect to unreserved_port_t
  - Dontaudit getattr on initctl in /dev from chfn
  - Dontaudit getattr on kernel_core from chfn
  - Add systemd_list_unit_dirs to systemd_exec_systemctl call
  - Fixes for collectd policy
  - CHange sysadm_t to create content as user_tmp_t under /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-38
changelog:
  - Allow virsh to read xenstored pid file
  - Backport corenetwork fixes from upstream
  - Do not audit attempts by thumb to search config_home_t dirs (~/.config)
  - label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
  - allow thumb to read generic data home files (mime.type)


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-37
changelog:
  - Allow nmbd to manage sock file in /var/run/nmbd
  - ricci_modservice send syslog msgs
  - Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
  - Allow systemd_logind_t to manage /run/USER/dconf/user


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-36
changelog:
  - Allow logrotate setuid and setgid since logrotate is supposed to do it
  - Fixes for thumb policy by grift
  - Add new nfsd ports
  - Added fix to allow confined apps to execmod on chrome
  - Add labeling for additional vdsm directories
  - Allow Exim and Dovecot SASL
  - Add label for /var/run/nmbd
  - Add fixes to make virsh and xen working together
  - Colord executes ls
  - /var/spool/cron  is now labeled as user_cron_spool_t


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-34.4
changelog:
  - Fixes caused by the labeling of /etc/passwd
  - Add thumb.patch to transition unconfined_t to thumb_t for Rawhide


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3
changelog:
  - Add support for Clustered Samba commands
  - Allow ricci_modrpm_t to send log msgs
  - move permissive virt_qmf_t from virt.te to permissivedomains.te
  - Allow ssh_t to use kernel keyrings
  - Add policy for libvirt-qmf and more fixes for linux containers
  - Initial Polipo
  - Sanlock needs to run ranged in order to kill svirt processes
  - Allow smbcontrol to stream connect to ctdbd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34
changelog:
  - Make mta_role() active
  - Allow asterisk to connect to jabber client port
  - Allow procmail to read utmp
  - Add NIS support for systemd_logind_t
  - Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
  - Fix systemd_manage_unit_dirs() interface
  - Allow ssh_t to manage directories passed into it
  - init needs to be able to create and delete unit file directories
  - Fix typo in apache_exec_sys_script
  - Add ability for logrotate to transition to awstat domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-33
changelog:
  - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
  - Add SELinux support for ssh pre-auth net process in F17
  - Add logging_syslogd_can_sendmail boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-29
changelog:
  - Allow sanlock to manage virt lib files
  - Add virt_use_sanlock booelan
  - ksmtuned is trying to resolve uids
  - Make sure .gvfs is labeled user_home_t in the users home directory
  - Sanlock sends kill signals and needs the kill capability
  - Allow mockbuild to work on nfs homedirs
  - Fix kerberos_manage_host_rcache() interface
  - Allow exim to read system state


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-28
changelog:
  - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
  - We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-27
changelog:
  -  Allow collectd to read hardware state information
  - Add loop_control_device_t
  - Allow mdadm to request kernel to load module
  - Allow domains that start other domains via systemctl to search unit dir
  - systemd_tmpfiles, needs to list any file systems mounted on /tmp
  - No one can explain why radius is listing the contents of /tmp, so we will dontaudit
  - If I can manage etc_runtime files, I should be able to read the links
  - Dontaudit hostname writing to mock library chr_files
  - Have gdm_t setup labeling correctly in users home dir
  - Label content unde /var/run/user/NAME/dconf as config_home_t
  - Allow sa-update to execute shell
  - Make ssh-keygen working with fips_enabled
  - Make mock work for staff_t user
  - Tighten security on mock_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-26
changelog:
  - removing unconfined_notrans_t no longer necessary
  - Clean up handling of secure_mode_insmod and secure_mode_policyload
  - Remove unconfined_mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-25
changelog:
  - Add exim_exec_t label for /usr/sbin/exim_tidydb
  - Call init_dontaudit_rw_stream_socket() interface in mta policy
  - sssd need to search /var/cache/krb5rcache directory
  - Allow corosync to relabel own tmp files
  - Allow zarafa domains to send system log messages
  - Allow ssh to do tunneling
  - Allow initrc scripts to sendto init_t unix_stream_socket
  - Changes to make sure dmsmasq and virt directories are labeled correctly
  - Changes needed to allow sysadm_t to manage systemd unit files
  - init is passing file descriptors to dbus and on to system daemons
  - Allow sulogin additional access Reported by dgrift and Jeremy Miller
  - Steve Grubb believes that wireshark does not need this access
  - Fix /var/run/initramfs to stop restorecon from looking at
  - pki needs another port
  - Add more labels for cluster scripts
  - Allow apps that manage cgroup_files to manage cgroup link files
  - Fix label on nfs-utils scripts directories
  - Allow gatherd to read /dev/rand and /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-24
changelog:
  - pki needs another port
  - Add more labels for cluster scripts
  - Fix label on nfs-utils scripts directories
  - Fixes for cluster
  - Allow gatherd to read /dev/rand and /dev/urand
  - abrt leaks fifo files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-23
changelog:
  - Add glance policy
  - Allow mdadm setsched
  - /var/run/initramfs should not be relabeled with a restorecon run
  - memcache can be setup to override sys_resource
  - Allow httpd_t to read tetex data
  - Allow systemd_tmpfiles to delete kernel modules left in /tmp directory.


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-22
changelog:
  - Allow Postfix to deliver to Dovecot LMTP socket
  - Ignore bogus sys_module for lldpad
  - Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
  - systemd_logind_t sets the attributes on usb devices
  - Allow hddtemp_t to read etc_t files
  - Add permissivedomains module
  - Move all permissive domains calls to permissivedomain.te
  - Allow pegasis to send kill signals to other UIDs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-21
changelog:
  - Allow insmod_t to use fds leaked from devicekit
  - dontaudit getattr between insmod_t and init_t unix_stream_sockets
  - Change sysctl unit file interfaces to use systemctl
  - Add support for chronyd unit file
  - Allow mozilla_plugin to read gnome_usr_config
  - Add policy for new gpsd
  - Allow cups to create kerberos rhost cache files
  - Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-20
changelog:
  - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-19
changelog:
  - Add policy for sa-update being run out of cron jobs
  - Add create perms to postgresql_manage_db
  - ntpd using a gps has to be able to read/write generic tty_device_t
  - If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
  - fix spec file
  - Remove qemu_domtrans_unconfined() interface
  - Make passenger working together with puppet
  - Add init_dontaudit_rw_stream_socket interface
  - Fixes for wordpress


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-18
changelog:
  - Turn on allow_domain_fd_use boolean on F16
  - Allow syslog to manage all log files
  - Add use_fusefs_home_dirs boolean for chrome
  - Make vdagent working with confined users
  - Add abrt_handle_event_t domain for ABRT event scripts
  - Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
  - Allow httpd_git_script_t to read passwd data
  - Allow openvpn to set its process priority when the nice parameter is used


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-16
changelog:
  - fetchmail can use kerberos
  - ksmtuned reads in shell programs
  - gnome_systemctl_t reads the process state of ntp
  - dnsmasq_t asks the kernel to load multiple kernel modules
  - Add rules for domains executing systemctl
  - Bogus text within fc file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-13
changelog:
  - Add abrt_domain attribute
  - Allow corosync to manage cluster lib files
  - Allow corosync to connect to the system DBUS


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-10
changelog:
  - Allow rcsmcertd to perform DNS name resolution
  - Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
  - Allow tmux to run as screen
  - New policy for collectd
  - Allow gkeyring_t to interact with all user apps
  - Add rules to allow firstboot to run on machines with the unconfined.pp module removed


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-9
changelog:
  - Allow systemd_logind to send dbus messages with users
  - allow accountsd to read wtmp file
  - Allow dhcpd to get and set capabilities


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8
changelog:
  - Fix oracledb_port definition
  - Allow mount to mounton the selinux file system
  - Allow users to list /var directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-6
changelog:
  - Add initial policy for abrt_dump_oops_t
  - xtables-multi wants to getattr of the proc fs
  - Smoltclient is connecting to abrt
  - Dontaudit leaked file descriptors to postdrop
  - Allow abrt_dump_oops to look at kernel sysctls
  - Abrt_dump_oops_t reads kernel ring buffer
  - Allow mysqld to request the kernel to load modules
  - systemd-login needs fowner
  - Allow postfix_cleanup_t to searh maildrop


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-5
changelog:
  - Initial systemd_logind policy
  - Add policy for systemd_logger and additional proivs for systemd_logind
  - More fixes for systemd policies


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-4
changelog:
  - Allow setsched for virsh
  - Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
  - iptables: the various /sbin/ip6?tables.* are now symlinks for
  /sbin/xtables-multi


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-3
changelog:
  - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
  - Allow colord to interact with the users through the tmpfs file system
  - Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
  - Add label for /var/log/mcelog
  - Allow asterisk to read /dev/random if it uses TLS
  - Allow colord to read ini files which are labeled as bin_t
  - Allow dirsrvadmin sys_resource and setrlimit to use ulimit
  - Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.  
  - Also lists /var and /var/spool directories
  - Add openl2tpd to l2tpd policy
  - qpidd is reading the sysfs file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-2
changelog:
  - Change usbmuxd_t to dontaudit attempts to read chr_file
  - Add mysld_safe_exec_t for libra domains to be able to start private mysql domains
  - Allow pppd to search /var/lock dir
  - Add rhsmcertd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-29
changelog:
  - Add dspam policy
  - Add lldpad policy
  - dovecot auth wants to search statfs #713555
  - Allow systemd passwd apps to read init fifo_file
  - Allow prelink to use inherited terminals
  - Run cherokee in the httpd_t domain
  - Allow mcs constraints on node connections
  - Implement pyicqt policy
  - Fixes for zarafa policy
  - Allow cobblerd to send syslog messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-27
changelog:
  - Fixes for zabbix
  - init script needs to be able to manage sanlock_var_run_...
  - Allow sandlock and wdmd to create /var/run directories... 
  - mixclip.so has been compiled correctly
  - Fix passenger policy module name


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-26
changelog:
  - Add mailscanner policy from dgrift
  - Allow chrome to optionally be transitioned to
  - Zabbix needs these rules when starting the zabbix_server_mysql
  - Implement a type for freedesktop openicc standard (~/.local/share/icc)
  - Allow system_dbusd_t to read inherited icc_data_home_t files.
  - Allow colord_t to read icc_data_home_t content. #706975
  - Label stuff under /usr/lib/debug as if it was labeled under /


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-25
changelog:
  - Fixes for sanlock policy
  - Fixes for colord policy
  - Other fixes
  	* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-22
changelog:
  - Allow logrotate to execute systemctl
  - Allow nsplugin_t to getattr on gpmctl
  - Fix dev_getattr_all_chr_files() interface
  - Allow shorewall to use inherited terms
  - Allow userhelper to getattr all chr_file devices
  - sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
  - Fix labeling for ABRT Retrace Server


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-21
changelog:
  - Dontaudit sys_module for ifconfig
  - Make telepathy and gkeyringd daemon working with confined users
  - colord wants to read files in users homedir
  - Remote login should be creating user_tmp_t not its own tmp files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-20
changelog:
  - Fix label for /usr/share/munin/plugins/munin_* plugins
  - Add support for zarafa-indexer
  - Fix boolean description
  - Allow colord to getattr on /proc/scsi/scsi
  - Add label for /lib/upstart/init
  - Colord needs to list /mnt


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-19
changelog:
  - Forard port changes from F15 for telepathy
  - NetworkManager should be allowed to use /dev/rfkill
  - Fix dontaudit messages to say Domain to not audit
  - Allow telepathy domains to read/write gnome_cache files
  - Allow telepathy domains to call getpw
  - Fixes for colord and vnstatd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-18
changelog:
  - Allow init_t getcap and setcap
  - Allow namespace_init_t to use nsswitch
  - aisexec will execute corosync
  - colord tries to read files off noxattr file systems
  - Allow init_t getcap and setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-17
changelog:
  - Add support for ABRT retrace server
  - Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
  - Allow telepath_msn_t to read /proc/PARENT/cmdline
  - ftpd needs kill capability
  - Allow telepath_msn_t to connect to sip port
  - keyring daemon does not work on nfs homedirs
  - Allow $1_sudo_t to read default SELinux context
  - Add label for tgtd sock file in /var/run/
  - Add apache_exec_rotatelogs interface
  - allow all zaraha domains to signal themselves, server writes to /tmp
  - Allow syslog to read the process state
  - Add label for /usr/lib/chromium-browser/chrome
  - Remove the telepathy transition from unconfined_t
  - Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
  - Allow initrc_t domain to manage abrt pid files
  - Add support for AEOLUS project
  - Virt_admin should be allowed to manage images and processes
  - Allow plymountd to send signals to init
  - Change labeling of fping6


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-16
changelog:
  - Fixes for zarafa policy
  - Add support for AEOLUS project
  - Change labeling of fping6
  - Allow plymountd to send signals to init
  - Allow initrc_t domain to manage abrt pid files
  - Virt_admin should be allowed to manage images and processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-15
changelog:
  - xdm_t needs getsession for switch user 
  - Every app that used to exec init is now execing systemdctl 
  - Allow squid to manage krb5_host_rcache_t files 
  - Allow foghorn to connect to agentx port - Fixes for colord policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-14
changelog:
  - Add Dan's patch to remove 64 bit variants
  - Allow colord to use unix_dgram_socket 
  - Allow apps that search pids to read /var/run if it is a lnk_file 
  - iscsid_t creates its own directory 
  - Allow init to list var_lock_t dir 
  - apm needs to verify user accounts auth_use_nsswitch
  - Add labeling for systemd unit files
  - Allow gnomeclok to enable ntpd service using systemctl - systemd_systemctl_t domain was added
  - Add label for matahari-broker.pid file
  - We want to remove untrustedmcsprocess from ability to read /proc/pid
  - Fixes for matahari policy
  - Allow system_tmpfiles_t to delete user_home_t files in the /tmp dir
  - Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-12
changelog:
  - Add /var/run/lock /var/lock definition to file_contexts.subs
  - nslcd_t is looking for kerberos cc files
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Allow sysadm_t to set attributes on fixed disks
  - allow user domains to execute lsof and look at application sockets
  - prelink_cron job calls telinit -u if init is rewritten
  - Fixes to run qemu_t from staff_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-10
changelog:
  - Add file_contexts.subs to handle /run and /run/lock
  - Add other fixes relating to /run changes from F15 policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-7
changelog:
  - Allow $1_sudo_t and $1_su_t open access to user terminals
  - Allow initrc_t to use generic terminals
  - Make Makefile/Rules.modular run sepolgen-ifgen during build to check if files for bugs
  -systemd is going to be useing /run and /run/lock for early bootup files.
  - Fix some comments in rlogin.if
  - Add policy for KDE backlighthelper
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - setroubleshoot reads executables to see if they have TEXTREL
  - Add /var/spool/audit support for new version of audit
  - Remove kerberos_connect_524() interface calling
  - Combine kerberos_master_port_t and kerberos_port_t
  - systemd has setup /dev/kmsg as stderr for apps it executes
  - Need these access so that init can impersonate sockets on unix_dgram_socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-5
changelog:
  - Fix multiple specification for boot.log
  - devicekit leaks file descriptors to setfiles_t
  - Change all all_nodes to generic_node and all_if to generic_if
  - Should not use deprecated interface
  - Switch from using all_nodes to generic_node and from all_if to generic_if
  - Add support for xfce4-notifyd
  - Fix file context to show several labels as SystemHigh
  - seunshare needs to be able to mounton nfs/cifs/fusefs homedirs
  - Add etc_runtime_t label for /etc/securetty
  - Fixes to allow xdm_t to start gkeyringd_USERTYPE_t directly
  - login.krb needs to be able to write user_tmp_t
  - dirsrv needs to bind to port 7390 for dogtag
  - Fix a bug in gpg policy
  - gpg sends audit messages
  - Allow qpid to manage matahari files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-4
changelog:
  - Initial policy for matahari
  - Add dev_read_watchdog
  - Allow clamd to connect clamd port
  - Add support for kcmdatetimehelper
  - Allow shutdown to setrlimit and sys_nice
  - Allow systemd_passwd to talk to /dev/log before udev or syslog is running
  - Purge chr_file and blk files on /tmp
  - Fixes for pads
  - Fixes for piranha-pulse
  - gpg_t needs to be able to encyprt anything owned by the user


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-3
changelog:
  - mozilla_plugin_tmp_t needs to be treated as user tmp files
  - More dontaudits of writes from readahead
  - Dontaudit readahead_t file_type:dir write, to cover up kernel bug
  - systemd_tmpfiles needs to relabel faillog directory as well as the file
  - Allow hostname and consoletype to r/w inherited initrc_tmp_t files handline hostname >> /tmp/myhost


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-2
changelog:
  - Add policykit fixes from Tim Waugh
  - dontaudit sandbox domains sandbox_file_t:dir mounton
  - Add new dontaudit rules for sysadm_dbusd_t
  - Change label for /var/run/faillock
  	* other fixes which relate with this change


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.16-1
changelog:
  - Update to upstream
  - Fixes for telepathy
  - Add port defition for ssdp port
  - add policy for /bin/systemd-notify from Dan
  - Mount command requires users read mount_var_run_t
  - colord needs to read konject_uevent_socket
  - User domains connect to the gkeyring socket
  - Add colord policy and allow user_t and staff_t to dbus chat with it
  - Add lvm_exec_t label for kpartx
  - Dontaudit reading the mail_spool_t link from sandbox -X
  - systemd is creating sockets in avahi_var_run and system_dbusd_var_run


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-5
changelog:
  - gpg_t needs to talk to gnome-keyring
  - nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
  - enforce MCS labeling on nodes
  - Allow arpwatch to read meminfo
  - Allow gnomeclock to send itself signals
  - init relabels /dev/.udev files on boot
  - gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_exec_t
  - nautilus checks access on /media directory before mounting usb sticks, dontaudit access_check on mnt_t
  - dnsmasq can run as a dbus service, needs acquire service
  - mysql_admin should  be allowed to connect to mysql service
  - virt creates monitor sockets in the users home dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.15-2
changelog:
  - Allow usbhid-ups to read hardware state information
  - systemd-tmpfiles has moved
  - Allo cgroup to sys_tty_config
  - For some reason prelink is attempting to read gconf settings
  - Add allow_daemons_use_tcp_wrapper boolean
  - Add label for ~/.cache/wocky to make telepathy work in enforcing mode
  - Add label for char devices /dev/dasd*
  - Fix for apache_role
  - Allow amavis to talk to nslcd
  - allow all sandbox to read selinux poilcy config files
  - Allow cluster domains to use the system bus and send each other dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.14-1
changelog:
  - Update to ref policy
  - cgred needs chown capability
  - Add /dev/crash crash_dev_t
  - systemd-readahead wants to use fanotify which means readahead_t needs sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-10
changelog:
  - New labeling for postfmulti #675654
  - dontaudit xdm_t listing noxattr file systems
  - dovecot-auth needs to be able to connect to mysqld via the network as well as locally
  - shutdown is passed stdout to a xdm_log_t file
  - smartd creates a fixed disk device
  - dovecot_etc_t contains a lnk_file that domains need to read
  - mount needs to be able to read etc_runtim_t:lnk_file since in rawhide this is a link created at boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-9
changelog:
  - syslog_t needs syslog capability
  - dirsrv needs to be able to create /var/lib/snmp
  - Fix labeling for dirsrv
  - Fix for dirsrv policy missing manage_dirs_pattern
  - corosync needs to delete clvm_tmpfs_t files
  - qdiskd needs to list hugetlbfs
  - Move setsched to sandbox_x_domain, so firefox can run without network access
  - Allow hddtemp to read removable devices
  - Adding syslog and read_policy permissions to policy
  	* syslog
  		Allow unconfined, sysadm_t, secadm_t, logadm_t
  	* read_policy
  		allow unconfined, sysadm_t, secadm_t, staff_t on Targeted
  		allow sysadm_t (optionally), secadm_t on MLS
  - mdadm application will write into /sys/.../uevent whenever arrays are
  assembled or disassembled.


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-7
changelog:
  - ricci_modclusterd_t needs to bind to rpc ports 500-1023
  - Allow dbus to use setrlimit to increase resoueces
  - Mozilla_plugin is leaking to sandbox
  - Allow confined users  to connect to lircd over unix domain stream socket which allow to use remote control
  - Allow awstats to read squid logs
  - seunshare needs to manage tmp_t
  - apcupsd cgi scripts have a new directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-6
changelog:
  - Fix xserver_dontaudit_read_xdm_pid
  - Change oracle_port_t to oracledb_port_t to prevent conflict with satellite
  - Allow dovecot_deliver_t to read/write postfix_master_t:fifo_file. 
  	* These fifo_file is passed from postfix_master_t to postfix_local_t to dovecot_deliver_t
  - Allow readahead to manage readahead pid dirs
  - Allow readahead to read all mcs levels
  - Allow mozilla_plugin_t to use nfs or samba homedirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-5
changelog:
  - Allow nagios plugin to read /proc/meminfo
  - Fix for mozilla_plugin
  - Allow samba_net_t to create /etc/keytab
  - pppd_t setting up vpns needs to run unix_chkpwd, setsched its process and write wtmp_t
  - nslcd can read user credentials
  - Allow nsplugin to delete mozilla_plugin_tmpfs_t
  - abrt tries to create dir in rpm_var_lib_t
  - virt relabels fifo_files
  - sshd needs to manage content in fusefs homedir
  - mock manages link files in cache dir


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-4
changelog:
  - nslcd needs setsched and to read /usr/tmp
  - Invalid call in likewise policy ends up creating a bogus role
  - Cannon puts content into /var/lib/bjlib that cups needs to be able to write
  - Allow screen to create screen_home_t in /root
  - dirsrv sends syslog messages
  - pinentry reads stuff in .kde directory
  - Add labels for .kde directory in homedir
  - Treat irpinit, iprupdate, iprdump services with raid policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.13-3
changelog:
  - NetworkManager wants to read consolekit_var_run_t
  - Allow readahead to create /dev/.systemd/readahead
  - Remove permissive domains
  - Allow newrole to run namespace_init


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-8
changelog:
  - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
  - Add puppetmaster_use_db boolean
  - Fixes for zarafa policy
  - Fixes for gnomeclock poliy
  - Fix systemd-tmpfiles to use auth_use_nsswitch


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-7
changelog:
  - gnomeclock executes a shell
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir
  - Fixes for namespace policy and other fixes related to polyinstantiation
  - Add namespace policy
  - Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
  - Fixes for init, psad policy which relate with confined users
  - Do not audit bootloader attempts to read devicekit pid files
  - Allow nagios service plugins to read /proc


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-6
changelog:
  - Add firewalld policy
  - Allow vmware_host to read samba config
  - Kernel wants to read /proc Fix duplicate grub def in cobbler
  - Chrony sends mail, executes shell, uses fifo_file and reads /proc
  - devicekitdisk getattr all file systems
  - sambd daemon writes wtmp file
  - libvirt transitions to dmidecode


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-5
changelog:
  - Add initial policy for system-setup-keyboard which is now daemon
  - Label /var/lock/subsys/shorewall as shorewall_lock_t
  - Allow users to communicate with the gpg_agent_t
  - Dontaudit mozilla_plugin_t using the inherited terminal
  - Allow sambagui to read files in /usr
  - webalizer manages squid log files
  - Allow unconfined domains to bind ports to raw_ip_sockets
  - Allow abrt to manage rpm logs when running yum
  - Need labels for /var/run/bittlebee
  - Label .ssh under amanda
  - Remove unused genrequires for virt_domain_template
  - Allow virt_domain to use fd inherited from virtd_t
  - Allow iptables to read shorewall config


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-4
changelog:
  - Gnome apps list config_home_t
  - mpd creates lnk files in homedir
  - apache leaks write to mail apps on tmp files
  - /var/stockmaniac/templates_cache contains log files
  - Abrt list the connects of mount_tmp_t dirs
  - passwd agent reads files under /dev and reads utmp file
  - squid apache script connects to the squid port
  - fix name of plymouth log file
  - teamviewer is a wine app
  - allow dmesg to read system state
  - Stop labeling files under /var/lib/mock so restorecon will not go into this 
  - nsplugin needs to read network state for google talk


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-3
changelog:
  - Allow xdm and syslog to use /var/log/boot.log
  - Allow users to communicate with mozilla_plugin and kill it
  - Add labeling for ipv6 and dhcp


author: Dan Walsh <dwalsh@redhat.com> 3.9.12-2
changelog:
  - New labels for ghc http content
  - nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
  - pm-suspend now creates log file for append access so we remove devicekit_wri
  - Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
  - Fixes for greylist_milter policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.12-1
changelog:
  - Update to upstream
  - Fixes for systemd policy
  - Fixes for passenger policy
  - Allow staff users to run mysqld in the staff_t domain, akonadi needs this
  - Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
  - auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
  - Dontaudit (xdm_t) gok attempting to list contents of /var/account
  - Telepathy domains need to read urand
  - Need interface to getattr all file classes in a mock library for setroubleshoot


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-13
changelog:
  - Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs
  - remove per sandbox domains devpts types
  - Allow dkim-milter sending signal to itself


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-12
changelog:
  - Allow domains that transition to ping or traceroute, kill them
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  - Add fixes to systemd- tools, including new labeling for systemd-fsck, systemd-cryptsetup


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-11
changelog:
  - Turn on systemd policy
  - mozilla_plugin needs to read certs in the homedir.
  - Dontaudit leaked file descriptors from devicekit
  - Fix ircssi to use auth_use_nsswitch
  - Change to use interface without param in corenet to disable unlabelednet packets
  - Allow init to relabel sockets and fifo files in /dev
  - certmonger needs dac* capabilities to manage cert files not owned by root
  - dovecot needs fsetid to change group membership on mail
  - plymouthd removes /var/log/boot.log
  - systemd is creating symlinks in /dev
  - Change label on /etc/httpd/alias to be all cert_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-10
changelog:
  - Fixes for clamscan and boinc policy
  - Add boinc_project_t setpgid
  - Allow alsa to create tmp files in /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-7
changelog:
  - Fix the label for wicd log
  - plymouthd creates force-display-on-active-vt file
  - Allow avahi to request the kernel to load a module
  - Dontaudit hal leaks
  - Fix gnome_manage_data interface
  - Add new interface corenet_packet to define a type as being an packet_type.
  - Removed general access to packet_type from icecast and squid.
  - Allow mpd to read alsa config
  - Fix the label for wicd log
  - Add systemd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-6
changelog:
  - Fix gnome_manage_data interface
  - Dontaudit sys_ptrace capability for iscsid
  - Fixes for nagios plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-5
changelog:
  - Fix cron to run ranged when started by init
  - Fix devicekit to use log files
  - Dontaudit use of devicekit_var_run_t for fstools
  - Allow init to setattr on logfile directories
  - Allow hald to manage files in /var/run/pm-utils/ dir which is now labeled as devicekit_var_run_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.10-4
changelog:
  - Fix up handling of dnsmasq_t creating /var/run/libvirt/network
  - Turn on sshd_forward_ports boolean by default
  - Allow sysadmin to dbus chat with rpm
  - Add interface for rw_tpm_dev
  - Allow cron to execute bin
  - fsadm needs to write sysfs
  - Dontaudit consoletype reading /var/run/pm-utils
  - Lots of new privs fro mozilla_plugin_t running java app, make mozilla_plugin
  - certmonger needs to manage dirsrv data
  - /var/run/pm-utils should be labeled as devicekit_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.10-3
changelog:
  - fixes to allow /var/run and /var/lock as tmpfs
  - Allow chrome sandbox to connect to web ports
  - Allow dovecot to listem on lmtp and sieve ports
  - Allov ddclient to search sysctl_net_t
  - Transition back to original domain if you execute the shell


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-4
changelog:
  - Allow ddclient to fix file mode bits of ddclient conf file
  - init leaks file descriptors to daemons
  - Add labels for /etc/lirc/ and
  - Allow amavis_t to exec shell
  - Add label for gssd_tmp_t for /var/tmp/nfs_0


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-2
changelog:
  - Turn on allow_postfix_local_write_mail_spool
  - Allow initrc_t to transition to shutdown_t
  - Allow logwatch and cron to mls_read_to_clearance for MLS boxes
  - Allow wm to send signull to all applications and receive them from users
  - lircd patch from field
  - Login programs have to read /etc/samba
  - New programs under /lib/systemd
  - Abrt needs to read config files


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.9-1
changelog:
  - Update to upstream
  - Dontaudit leaked sockets from userdomains to user domains
  - Fixes for mcelog to handle scripts
  - Apply patch from Ruben Kerkhof
  - Allow syslog to search spool dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-7
changelog:
  - Allow nagios plugins to read usr files
  - Allow mysqld-safe to send system log messages
  - Fixes fpr ddclient policy
  - Fix sasl_admin interface
  - Allow apache to search zarafa config
  - Allow munin plugins to search /var/lib directory
  - Allow gpsd to read sysfs_t
  - Fix labels on /etc/mcelog/triggers to bin_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-6
changelog:
  - Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t
  - Allow saslauthd_t to create krb5_host_rcache_t files in /tmp
  - Fix xserver interface
  - Fix definition of /var/run/lxdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-5
changelog:
  - Turn on mediawiki policy
  - kdump leaks kdump_etc_t to ifconfig, add dontaudit
  - uux needs to transition to uucpd_t
  - More init fixes relabels man,faillog
  - Remove maxima defs in libraries.fc
  - insmod needs to be able to create tmpfs_t files
  - ping needs setcap


author: Miroslav Grepl <mgrepl@redhat.com> 3.9.8-4
changelog:
  - Allow groupd transition to fenced domain when executes fence_node
  - Fixes for rchs policy
  - Allow mpd to be able to read samba/nfs files


author: Dan Walsh <dwalsh@redhat.com> 3.9.8-3
changelog:
  - Fix up corecommands.fc to match upstream
  - Make sure /lib/systemd/* is labeled init_exec_t
  - mount wants to setattr on all mountpoints
  - dovecot auth wants to read dovecot etc files
  - nscd daemon looks at the exe file of the comunicating daemon
  - openvpn wants to read utmp file
  - postfix apps now set sys_nice and lower limits
  - remote_login (telnetd/login) wants to use telnetd_devpts_t and user_devpts_t to work correctly
  - Also resolves nsswitch
  - Fix labels on /etc/hosts.*
  - Cleanup to make upsteam patch work
  - allow abrt to read etc_runtime_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-10
changelog:
  - Fix sandbox to work on nfs homedirs
  - Allow cdrecord to setrlimit
  - Allow mozilla_plugin to read xauth
  - Change label on systemd-logger to syslogd_exec_t
  - Install dirsrv policy from dirsrv package


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-9
changelog:
  - Add virt_home_t, allow init to setattr on xserver_tmp_t and relabel it
  - Udev needs to stream connect to init and kernel
  - Add xdm_exec_bootloader boolean, which allows xdm to execute /sbin/grub and read files in /boot directory


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-8
changelog:
  - Allow NetworkManager to read openvpn_etc_t
  - Dontaudit hplip to write of /usr dirs
  - Allow system_mail_t to create /root/dead.letter as mail_home_t
  - Add vdagent policy for spice agent daemon


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-7
changelog:
  - Dontaudit sandbox sending sigkill to all user domains
  - Add policy for rssh_chroot_helper
  - Add missing flask definitions
  - Allow udev to relabelto removable_t
  - Fix label on /var/log/wicd.log
  - Transition to initrc_t from init when executing bin_t
  - Add audit_access permissions to file
  - Make removable_t a device_node 
  - Fix label on /lib/systemd/*


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-5
changelog:
  - Allow chome to create netlink_route_socket
  - Add additional MATHLAB file context
  - Define nsplugin as an application_domain
  - Dontaudit sending signals from sandboxed domains to other domains
  - systemd requires init to build /tmp /var/auth and /var/lock dirs
  - mount wants to read devicekit_power /proc/ entries
  - mpd wants to connect to soundd port
  - Openoffice causes a setattr on a lib_t file for normal users, add dontaudit
  - Treat lib_t and textrel_shlib_t directories the same
  - Allow mount read access on virtual images


author: Dan Walsh <dwalsh@redhat.com> 3.9.7-4
changelog:
  - Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
  - Allow devicekit_power to domtrans to mount
  - Allow dhcp to bind to udp ports > 1024 to do named stuff
  - Allow ssh_t to exec ssh_exec_t
  - Remove telepathy_butterfly_rw_tmp_files(), dev_read_printk() interfaces which are nolonger used
  - Fix clamav_append_log() intefaces
  - Fix 'psad_rw_fifo_file' interface


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-3
changelog:
  -Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
  - dovecot-auth_t needs ipc_lock
  - gpm needs to use the user terminal
  - Allow system_mail_t to append ~/dead.letter
  - Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
  - Add pid file to vnstatd
  - Allow mount to communicate with gfs_controld
  - Dontaudit hal leaks in setfiles


author: Dan Walsh <dwalsh@redhat.com> 3.9.6-2
changelog:
  - Lots of fixes for systemd
  - systemd now executes readahead and tmpwatch type scripts
  - Needs to manage random seed


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-11
changelog:
  - Fix fusefs handling
  - Do not allow sandbox to manage nsplugin_rw_t
  - Allow mozilla_plugin_t to connecto its parent
  - Allow init_t to connect to plymouthd running as kernel_t
  - Add mediawiki policy
  - dontaudit sandbox sending signals to itself.  This can happen when they are running at different mcs.
  - Disable transition from dbus_session_domain to telepathy for F14
  - Allow boinc_project to use shm
  - Allow certmonger to search through directories that contain certs
  - Allow fail2ban the DAC Override so it can read log files owned by non root users


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-10
changelog:
  - Start adding support for use_fusefs_home_dirs
  - Add /var/lib/syslog directory file context
  - Add /etc/localtime as locale file context


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-9
changelog:
  - Turn off default transition to mozilla_plugin and telepathy domains from unconfined user 
  - Turn off iptables from unconfined user 
  - Allow sudo to send signals to any domains the user could have transitioned to.
  - Passwd in single user mode needs to talk to console_device_t
  - Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
  - locate tried to read a symbolic link, will dontaudit
  - New labels for telepathy-sunshine content in homedir
  - Google is storing other binaries under /opt/google/talkplugin
  - bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
  - Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
  - modemmanger and bluetooth send dbus messages to devicekit_power
  - Samba needs to getquota on filesystems labeld samba_share_t


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-7
changelog:
  - Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.
  - Allow mozilla_plugin_t to create tcp/udp/netlink_route sockets
  - Allow confined users to read xdm_etc_t files
  - Allow xdm_t to transition to xauth_t for lxdm program


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-6
changelog:
  - Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home
  - Allow clamd to send signals to itself
  - Allow mozilla_plugin_t to read user home content.  And unlink pulseaudio shm.
  - Allow haze to connect to yahoo chat and messenger port tcp:5050.
  Bz #637339
  - Allow guest to run ps command on its processes by allowing it to read /proc
  - Allow firewallgui to sys_rawio which seems to be required to setup masqerading
  - Allow all domains to search through default_t directories, in order to find differnet labels.  For example people serring up /foo/bar to be share via samba.
  - Add label for /var/log/slim.log


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-5
changelog:
  - Pull in cleanups from dgrift
  - Allow mozilla_plugin_t to execute mozilla_home_t
  - Allow rpc.quota to do quotamod


author: Dan Walsh <dwalsh@redhat.com> 3.9.5-4
changelog:
  - Cleanup policy via dgrift
  - Allow dovecot_deliver to append to inherited log files
  - Lots of fixes for consolehelper


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-3
changelog:
  - Add the ability to send audit messages to confined admin policies
  - Remove permissive domain from cmirrord and dontaudit sys_tty_config
  - Split out unconfined_domain() calls from other unconfined_ calls so we can d
  - virt needs to be able to read processes to clearance for MLS


author: Dan Walsh <dwalsh@redhat.com> 3.9.4-2
changelog:
  - Allow all domains that can use cgroups to search tmpfs_t directory
  - Allow init to send audit messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-2
changelog:
  - Handle /var/db/sudo
  - Allow pulseaudio to read alsa config
  - Allow init to send initrc_t dbus messages


author: Dan Walsh <dwalsh@redhat.com> 3.9.3-1
changelog:
  Allow iptables to read shorewall tmp files
  Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
  intd
  label vlc as an execmem_exec_t 
  Lots of fixes for mozilla_plugin to run google vidio chat
  Allow telepath_msn to execute ldconfig and its own tmp files
  Fix labels on hugepages
  Allow mdadm to read files on /dev
  Remove permissive domains and change back to unconfined
  Allow freshclam to execute shell and bin_t
  Allow devicekit_power to transition to dhcpc
  Add boolean to allow icecast to connect to any port


author: Dan Walsh <dwalsh@redhat.com> 3.9.2-1
changelog:
  - Merge upstream fix of mmap_zero
  - Allow mount to write files in debugfs_t
  - Allow corosync to communicate with clvmd via tmpfs
  - Allow certmaster to read usr_t files
  - Allow dbus system services to search cgroup_t
  - Define rlogind_t as a login pgm


author: Dan Walsh <dwalsh@redhat.com> 3.9.1-2
changelog:
  - Dominic Grift Cleanup
  - Miroslav Grepl policy for jabberd
  - Various fixes for mount/livecd and prelink


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-20
changelog:
  - Allow cron to look at user_cron_spool links
  - Lots of fixes for mozilla_plugin_t
  - Add sysv file system
  - Turn unconfined domains to permissive to find additional avcs


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-18
changelog:
  - Allow clamscan to read proc_t
  - Allow mount_t to write to debufs_t dir
  - Dontaudit mount_t trying to write to security_t dir


author: Dan Walsh <dwalsh@redhat.com> 3.8.8-7
changelog:
  - Update boinc policy
  - Fix sysstat policy to allow sys_admin
  - Change failsafe_context to unconfined_r:unconfined_t:s0


author: Dan Walsh <dwalsh@redhat.com> 3.8.1-2
changelog:
  - Fix label on /var/lib/dokwiki
  - Change permissive domains to enforcing
  - Fix libvirt policy to allow it to run on mls


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.2.0-2
changelog:
  - Add documentation.py files to both subpackages (this contains a brief license
    assertion among other things).


author: Luke Macken <lmacken@redhat.com> - 3.0.1-2
changelog:
  - Only run the test suite on Fedora 11, which has Py2.6 and the multiprocessing
    module.  We can disable this once the compat module is packaged for F10 and
    below.


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1763-2
changelog:
  - 1576470 - Suggest correct packages to get embedded interpreters working
  - add libappstream-glib for appstream-util
  - 1576483 - Vim needs Python2 to build


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1666-2
changelog:
  - suggests ruby-libs, python2-libs, python3-libs, perl-libs and lua-libs for vim and gvim(bug #1562057)


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1523-2
changelog:
  - gcc is no longer in buildroot by default
  - 1546116 - make vim-filesystem noarch package
  - remove %{_libdir}/vim, because it is unused


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1428-4
changelog:
  - throw vim.1.gz out from vim-minimal and other manpages from vim-common
  - appdata should be in metainfo folder now


author: Karsten Hopp <karsten@redhat.com> 8.0.1102-1
changelog:
  - vim-update.sh - add test for succesful build and fixing grepping of update's list
  - patchlevel 1102


author: Karsten Hopp <karsten@redhat.com> 8.0.1092-1
changelog:
  - editing vim-update.sh for building package
  - patchlevel 1092
  - 1487175 - VIm conflicts in man pages


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.685-3
changelog:
  - update python dependencies accordingly Fedora Guidelines for Python (python-devel -> python2-devel)


author: Karsten Hopp <karsten@redhat.com> 8.0.347-1
changelog:
  - patchlevel 347
  - 1405234 - Gvim fails to properly render after Openbox desktop switch
  - 1426296 - vim: FTBFS with python3-3.6.0-18.fc26


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.134-2
changelog:
  - f24->f25 vim: copy paste no longer works (bug #1401410) - deleting mouse setting block from defaults.vim


author: Karsten Hopp <karsten@redhat.com> 8.0.134-1
changelog:
  - patchlevel 134
  - f24->f25 vim: copy paste no longer works (bug #1401410) - revert previous changes, set mouse=v in defaults.vim


author: Karsten Hopp <karsten@redhat.com> - 7.4.1830-3
changelog:
  - mv vim.sh and vim.csh to source files
  - sh profile.d improvements: don't leak $ID, don't fail on nounset
    (rhbz#1339106 Ville Skyttä)


author: Karsten Hopp <karsten@redhat.com> - 7.4.1797-3
changelog:
  - use uncompressed help files. vimtutor and vi will access those when
    vim-common is installed.  (rhbz#1262182)
    No hard requirement vim-minimal -> vim-common added, to allow minimal
    installations


author: Karsten Hopp <karsten@redhat.com> - 7.4.1718-2
changelog:
  - add vimfiles_root macro (rhbz#844975)
  - add %_libdir/vim  directory for plugins (rhbz#1193230)
  - vi, rvi, rview, ex, view don't read vimrc anymore. They use virc instead
    (rhbz#1045815)
  - fix dates in changelogs when spec.vim is used and locale != 'C'


author: Karsten Hopp <karsten@redhat.com> 7.4.909-1
changelog:
  - patchlevel 909
  - Fedora vim now uses tarballs created from upstream git instead
    of just upstream patches. Now runtime files will have fixes, too.


author: Karsten Hopp <karsten@redhat.com> 7.4.009-1
changelog:
  - patchlevel 009
    mkdir("foo/bar/", "p") gives an error message
    creating a preview window on startup messes up the screen
    new regexp engine can't be interrupted
    too easy to write a file was not decrypted (yet)


author: Karsten Hopp <karsten@redhat.com> 7.4.5-1
changelog:
  - patchlevel 5
  - when closing a window fails ":bwipe" may hang
  - "vaB" while 'virtualedit' is set selects the wrong area


author: Karsten Hopp <karsten@redhat.com> 7.3.638-2
changelog:
  - fix some man page typos (#668894, #675480)
  - own usr/share/vim/vimfiles/doc/tags (#845564)
  - add path to csope database (#844843)


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Colin Walters <walters@redhat.com> - 1.47.1-2
changelog:
  - Backport revert of upstream patch around setuid apps
    Resolves: #1285991
  - Forcibly reautoconf to bypass timestamp issues


author: Kalev Lember <kalevlember@gmail.com> - 1.32.1-2
changelog:
  - Move libffi to pkgconfig Requires.private, in order to
    reduce the impact when libffi soname bump lands in rawhide.


author: Colin Walters <walters@verbum.org> - 0.10.5-1
changelog:
  - New upstream release, fixes cairo.gir
    Necessary to avoid gnome-shell having a cairo-devel dependency.
  - Also add cairo-gobject-devel dependency, since we really want
    the cairo typelib to link to GObject, since anyone using
    introspection has it anyways.


author: Colin Walters <walters@verbum.org> - 0.9.3-6
changelog:
  - Strip out test libraries; they're gone in upstream git, and
    create a dependency on cairo (which requires libX11, which makes
    server operating system builders freak out).


author: Colin Walters <walters@verbum.org> - 0.6.9-3
changelog:
  - Move python library back into /usr/lib/gobject-introspection.  I put
    it there upstream for a reason, namely that apps need to avoid
    polluting the global Python site-packages with bits of their internals.
    It's not a public API.
    
    Possibly resolves bug #569885


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-2
changelog:
  - Rebase to 0.3.110 which adds support for aarch64 and other arches (Jeff Moyer)
  - Move to /usr
  - Resolves: bz#969680


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-12
changelog:
  - Correct manpages regarding removable_context
  - build: follow standard semantics for DESTDIR and PREFIX


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libselinux
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libselinux


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> 2.5-12
changelog:
  - Fix -Wsign-compare warnings
  - Drop unused stdio_ext.h header file
  - Kill logging check for selinux_enabled()
  - Drop usage of _D_ALLOC_NAMLEN
  - Add openrc_contexts functions
  - Fix redefinition of XATTR_NAME_SELINUX
  - Correct error path to always try text
  - Clean up process_file()
  - Handle NULL pcre study data
  - Fix in tree compilation of utils that depend on libsepol


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-9
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix location of selinuxfs mount point
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t input


author: Petr Lautrbach <plautrba@redhat.com> 2.4-4
changelog:
  - Flush the class/perm string mapping cache on policy reload (#1264051)
  - Fix restorecon when path has no context


author: Petr Lautrbach <plautrba@redhat.com> 2.3-10
changelog:
  - is_selinux_enabled: Add /etc/selinux/config test (#1219045)
  - matchpathcon/selabel_file: Fix man pages (#1219718)


author: Petr Lautrbach <plautrba@redhat.com> 2.3-8
changelog:
  - selinux.py - use os.walk() instead of os.path.walk() (#1195004)
  - is_selinux_enabled(): drop no-policy-loaded test (#1195074)
  - fix -Wformat errors and remove deprecated mudflap option


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
changelog:
  - Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
  - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Get rid of security_context_t and fix const declarations.
  	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-4
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-3
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use %{_prefix}/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Hans de Goede <hdegoede@redhat.com> - 5.2.2-3
changelog:
  - Drop compat-lua-libs package, as there now is a separate compat-lua
    package (including a -devel)


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: EL Errata <el-errata_ww@oracle.com> - 3.8-2.0.1.el8
changelog:
  - Added sos-oraclelinux-vendor-vendorurl.patch
  - Fix os detect string for Oracle Linux [Orabug: 28674897]
  - Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
  - [ovn_central] call podman exec without a timeout
    Resolves: bz1767359


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-2
changelog:
  - [plugins] improve heuristic for applying --since
    Resolves: bz1789049
  - [Predicate] Override __bool__ to allow py3 evaluation
    Resolves: bz1789018
  - [ceph] Add 'ceph insights' command output
    Resolves: bz1783034
  - [dnf] Collect dnf module list
    Resolves: bz1781819
  - [kernel,networking] collect bpftool net list for each
    Resolves: bz1768956
  - [libreswan] New plugin for "libreswan" IPsec
    Resolves: bz1741330
  - [kernel] collect "bpftool net list"
    Resolves: bz1721779
  - [grub2] call grub2-config with --no-grubenv-update
    Resolves: bz1709682


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-6
changelog:
  - [ovirt_hosted_engine] Add gluster deployment and cleanup log
    Resolves: bz1744086
  - [vdsm]: Fix executing shell commands
    Resolves: bz1744110
  - [ovn_*] Add support to containerized setups
    Resolves: bz1744553
  - [ipa] collect ipa-healthcheck logs, kdcproxy configs, httpd cert
    Resolves: bz1688764


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-3
changelog:
  - [openstack] Extract Placement plugin from Nova
    Resolves: bz1717882
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733352
  - [peripety] collect proper config file
    Resolves: bz1665981
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1733469
  - [nvme] collect config file everytime
    Resolves: bz1665929


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-2
changelog:
  - [sar] collect whole sar log dir
    Resolves: bz1714243
  - [archive] convert absolute symlink targets to relative
    Resolves: bz1702806
  - [archive] Handle checking container sysroot in _make_leading_paths
    Resolves: bz1728214
  - [frr] FRR plugin
    Resolves: bz1709906
  - [policies] redhat policy to use hostname instead of rhn id
    Resolves: bz1718087
  - Updates to vdsm plugin
    Resolves: bz1700780


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-1
changelog:
  - Rebase on upstream 3.7
    Resolves: bz1684400
  - [buildah] parse container list properly even for scratch ones
    Resolves: bz1687954
  - [PATCH] [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
    Resolves: bz1695583
  - [plugins] add vdsm plugin
    Resolves: bz1700780
  - [openstack_instack] add ansible.log
    Resolves: bz1702806
  - [pcp] collect pmlogger without a sizelimit
    Resolves: bz1719884
  - [foreman,satellite] increase plugin default timeouts
    Resolves: bz1719885
  - [sosreport] [sosreport] initialize disabled plugins properly
    Resolves: bz1719886
  - [katello] support both locations of qpid SSL certs
    Resolves: bz1719887


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-9
changelog:
  - [block] proper parsing of luks partition on self device
    Resolves: bz1638855
  - [networking] Collect NUMA Node of each NIC
    Resolves: bz1645085
  - [composer] add missing commas in list in add_copy_spec
    Resolves: bz1644062
  - [opendaylight] Update directory for openDaylight logs
    Resolves: bz1642377


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-8
changelog:
  - [plugins] fix exception when collecting empty strings
    Resolves: bz1632607
  - [crypto] collect more configs and commands
    Resolves: bz1638492
  - [networking] Replace "brctl: by "bridge" commands
    Resolves: bz1644021
  - [firewalld] collect nftables ruleset
    Resolves: bz1644022
  - [composer] New plugin for lorax-composer
    Resolves: bz1644062
  - [Plugin] clean up Plugin.get_option()
    Resolves: bz1655984
  - [ovirt_node] New plugin for oVirt Node
    Resolves: bz1658937
  - [podman] Add support for gathering information on podman
    Resolves: bz1658938
  - [postgresql] Do not limit dump size
    Resolves: bz1658939


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-7
changelog:
  - [plugin,archive] fix remaining add_link issues
    Resolves: bz1627543
  - [kernel] dont collect some tracing instance files
    Resolves: bz1638637
  - [openstack_*] relax enabling of OSP RedHat plugins
    Resolves: bz1638638
  - [powerpc] Add support to collect DLPAR and LPM related logs
    Resolves: bz1637127


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-6
changelog:
  - [archive] fix leading path creation
    Resolves: bz1627543
  - [atomic] Define valid preset for RHEL Atomic
    Resolves: bz1627546
  - [utilities] wait till AsyncReader p.poll() returns None
    Resolves: bz1627544


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-5
changelog:
  - [rhv-log-collector-analyzer] Add new plugin for RHV
    Resolves: bz1620049
  - [kubernetes|etcd] Support OpenShift 3.10 deployments
    Resolves: bz1620048
  - [krb5|gssproxy] add new plugin, collect more krb5 files
    Resolves: bz1607630
  - [block] collect luksDump for all encrypted devices
    Resolves: bz1599739
  - [archive] Dont copystat /sys and /proc paths
    Resolves: bz1619234


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-4
changelog:
  - [apparmor,ceph] fix typo in add_forbidden_path
    Resolves: bz1614955
  - [policies] sanitize report label
    Resolves: bz1614956
  - [policies,process] make lsof execution optional, dont call on RHOSP
    Resolves: bz1614957
  - [sosreport] Add mechanism to encrypt final archive
    Resolves: bz1614952
  - [archive] fix stat typo
    Resolves: bz1614953
  - [rhui] Fix detection of CDS for RHUI3
    Resolves: bz1614954
  - [archive] fix add_string()/do_*_sub() regression
    Resolves: bz1599701


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-2
changelog:
  - [sosreport] ensure private temporary directory is removed
  - [global] sync rawhide package with upstream
  - [ceph] collect /var/lib/ceph and /var/run/ceph
  - [sosreport] prepare report in a private subdirectory (CVE-2015-7529)
  - [docker] collect journald logs for docker unit
  - [sosreport] fix command-line report defaults
  - [openstack_neutron] obfuscate server_auth in restproxy.ini
  - [memory] collect swapon --show output in bytes
  - [sosreport] fix command-line report defaults (proper patch ordering)
  - [sapnw] call self methods properly
  - [openvswitch] capture the logs, db and OVS bridges details
  - [logs] fix reference to missing 'rsyslog_conf' variable
  - [sapnw] Add check if saphostctrl is not present, dont use Set
  - [Plugin] fix handling of symlinks in non-sysroot environments
  - [openstack] Ensure openstack passwords and secrets are obfuscated
  - [plugin] pass stderr through _collect_cmd_output
  - [kubernetes,plugin] Support running sos inside a container
  - [openstack] New Openstack Trove (DBaaS) plugin
  - [services] Add more diagnostics to applications
  - [openstack_neutron] Obscure passwords and secrets
  - [ceph] add calamari and ragos logs and configs
  - [iprconfig] enable plugin for ppc64* architectures
  - [general] verify --profile contains valid plugins only
  - [kernel,mpt,memory] additional kernel-related diagnostics
  - [cluster] enable crm_report password scrubbing
  - [sosreport] fix command-line report defaults
  - [virsh] add new plugin, add listing of qemu
  - [sap*,vhostmd] new plugins for SAP
  - [cluster] crm_report fails to run because dir already exists
  - [foreman] Skip collection of generic resources
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
  - [pcp] collect /etc/pcp.conf
  - [puppet] adding new plugin for puppet
  - [block] Don't use parted human readable output
  - [general] Better handling --name and --ticket-number in
  - [networking] additional ip, firewall and traffic shaping
  - [infiniband] add opensm and infiniband-diags support
  - [plugins/rabbitmq] Added cluster_status command output
  - [networking] re-add 'ip addr' with a root symlink
  - [kimchi] add new plugin
  - [iprconfig] add plugin for IBM Power RAID adapters
  - [ovirt] Collect engine tunables and domain information.
  - [activemq] Honour all_logs and get config on RHEL
  - [cluster] Add luci to packages for standalone luci servers
  - [hpasm] hpasmcli commands hang under timeout
  - [mysql] Collect log file
  - [chrony] add chrony plugin
  - [openstack_sahara] redact secrets from sahara configuration
  - [openstack_sahara] add new openstack_sahara plugin
  - [openstack_neutron] neutron configuration and logs files not captured
  - [ovirt] remove ovirt-engine setup answer file password leak
  - [networking] network plugin fails if NetworkManager is disabled
  - [cluster] crm_report fails to run because dir already exists
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD
  - [mysql] test for boolean values in dbuser and dbpass
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace
  - [mysql] fix handling of mysql.dbpass option
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives
  - [sosreport] fix archive permissions regression
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release
  - [foreman] add new plugin


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-0.1.a
changelog:
  - Make source URL handling compliant with packaging guidelines
  - Update to new upstream pre-release sos-3.2-alpha1


author: Bryn M. Reeves <bmr@redhat.com> = 3.1-1
changelog:
  - Update to new upstream release sos-3.1
  - Add collection of grub configuration for UEFI systems
  - Raise a TypeError if add_copy_specs() is called with a string
  - Add tests for Plugin.add_copy_spec()/add_copy_specs()
  - Update Plugin tests to treat copy_paths as a set
  - Use a set for Plugin.copy_paths
  - Remove references to 'sub' parameter from plugin tests
  - Remove 'sub' parameter from Plugin.add_copy_spec*()
  - Drop RedHatPlugin from procenv
  - Update plugin_tests.py to match new method names
  - Remove obsolete checksum reference from utilities_tests.py
  - Refactor Plugin.collect() pathway
  - Fix x86 arch detection in processor plugin
  - Pythonify Plugin._path_in_pathlist()
  - Clean up package checks in processor plugin
  - Replace self.policy().pkg_by_name() us in Logs plugin
  - Convert infiniband to package list
  - Dead code removal: PluginException
  - Dead code removal: sos.plugins.common_prefix()
  - Add vim tags to all python source files
  - Dead code removal: utilities.checksum()
  - Dead code removal: DirTree
  - Dead code removal: sos_relative_path()
  - Remove --profile support
  - Fix plugin_test exception on six.PY2
  - Call rhsm-debug with the --sos switch
  - Do not collect isos in cobbler plugin
  - Match plugins against policies
  - Update policy_tests.py for validate_plugin change
  - Rename validatePlugin to validate_plugin
  - Fix broken binary detection in satellite plugin
  - Clean up get_cmd_path/make_cmd_path/make_cmd_dirs mess
  - Add tuned plugin
  - Update systemd support
  - Fix remaining use of obsolete 'get_cmd_dir()' in plugins
  - Add PowerNV specific debug data
  - powerpc: Move VPD related tool under common code
  - Remove the rhevm plugin.
  - Replace package check with file check in anacron
  - Scrub ldap_default_authtok password in sssd plugin
  - Eliminate hard-coded /var/log/sa paths in sar plugin
  - Remove useless check_enabled() from sar plugin
  - Improve error message when cluster.crm_from is invalid
  - Fix command output substitution exception
  - Add distupgrade plugin
  - Fix gluster volume name extraction
  - Ensure unused fds are closed when calling subprocesses via Popen
  - Pass --no-archive to rhsm-debug script
  - postgresql: allow use TCP socket
  - postgresql: added license and copyright
  - postgresql: add logs about errors / warnings
  - postgresql: minor fixes
  - Include geo-replication status in gluster plugin
  - Make get_cmd_output_now() behaviour match 2.2
  - Add rhsm-debug collection to yum plugin
  - Always treat rhevm vdsmlogs option as string
  - Fix verbose file logging
  - Fix get_option() use in cluster plugin
  - Fix cluster postproc regression
  - Ensure superclass postproc method is called in ldap plugin
  - Remove obsolete diagnostics code from ldap plugin
  - Fix cluster module crm_report support


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Prevent file descriptor leaks when using Popen
  - Disable zip archive creation when running rhsm-debug
  - Include volume geo-replication status in gluster plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix get_option use in cluster plugin
  - Fix debug logging to file when given '-v'
  - Always treat rhevm plugin's vdsmlogs option as a string
  - Run the rhsm-debug script from yum plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Add new plugin to collect OpenHPI configuration
  - Fix cluster plugin crm_report support
  - Fix file postprocessing in ldap plugin
  - Remove collection of anaconda-ks.cfg from general plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Remove debug statements from logs plugin
  - Make ethernet interface detection more robust
  - Fix specifying multiple plugin options on the command line
  - Make log and message levels match previous versions
  - Log a warning message when external commands time out
  - Remove --upload command line option
  - Update sos UI text to match upstream


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Restore --build command line option
  - Collect saved vmcore-dmesg.txt files
  - Normalize temporary directory paths


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Add domainname output to NIS plug-in
  - Collect /var/log/squid in squid plug-in
  - Collect mountstats and mountinfo in filesys plug-in
  - Add PowerPC plug-in from upstream


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Remove version checks in gluster plug-in
  - Check for usable temporary directory
  - Fix --alloptions command line option
  - Fix configuration fail regression


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Include /etc/yaboot.conf in boot plug-in
  - Fix collection of brctl output in networking plug-in
  - Verify limited set of RPM packages by default
  - Do not strip newlines from command output
  - Limit default sar data collection


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
  - Restrict wbinfo collection to the current domain
  - Add obfuscation of luci secrets to cluster plug-in
  - Add XFS plug-in
  - Fix policy class handling of --tmp-dir
  - Do not set batch mode if stdin is not a TTY
  - Attempt to continue when reading bad input in interactive mode


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Add crm_report support to cluster plug-in
  - Fix rhel_version() usage in cluster and s390 plug-ins
  - Strip trailing newline from command output


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com>
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Adam Stokes <ajs at redhat dot com>
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com>
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: David King <amigadave@amigadave.com> - 2.51.3-1
changelog:
  - Update to 2.51.3
  - Update URL
  - Use pkgconfig for BuildRequires
  - Preserve timestamps during install


author: Matthew Barnes <mbarnes@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Bump glib2 requirement to >= 2.15.3.
  - Clean up some redundant dependencies.
  - Remove patch for RH bug #327871 (fixed in glibc).


author: David Malcolm <dmalcolm@redhat.com> - 2.2.5-1
changelog:
  - 2.2.5
  - Removed gnome-bug-306877-soup-connection-ntlm.c.patch (#160071) as this is 
    now in upstream tarball


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-1
changelog:
  - update from 2.2.1 to 2.2.2
  - add explicit devel requirements on glib2-devel, pkgconfig, gtk-doc, gnutls-devel and libxml2-devel


author: Jeremy Katz <katzj@redhat.com> 1.99.17-1
changelog:
  - rename package to libsoup
  - update to 1.99.17
  - don't obsolete soup for now, it's parallel installable


author: Jeremy Katz <katzj@redhat.com> 0.7.9-3
changelog:
  - better lib64 patch
  - fix building of libwsdl-build to use libtool so that it gets built 
    with -fPIC as needed


author: Jeremy Katz <katzj@redhat.com> 0.7.4-3
changelog:
  - fix to not try to include non-existent doc files and remove all 
    unwanted files from the build
  - include api docs 
  - don't build the apache module


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-9
changelog:
  - Resolves: rhbz#CVE-2015-6496, rhbz#1253757
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.0.1-1
changelog:
  - Updated to 1.0.1
  - Added daemon using systemd and configuration file
  - Removed legacy spec requirements
  - Patch for: parse.c:240:34: error: 'NULL' undeclared


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.3-1
changelog:
  - Update to libqb-1.0.3, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.3


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-14
changelog:
  - Evolution of the previous (rhbz#1478089)
  - Make -devel package dependency on the main package arch-qualified


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-6
changelog:
  - Better approach so as to mitigate changed treatment of orphaned sections
    in ld.bfd/binutils-2.29, resulting in logging facility silently out of order
    (rhbz#1478089)
  - Related to that, build commands now shown in full to ease the sanity checking
  - Adapt spec file per the upstream version (conditionalizing build through
    --enable-syslog-tests no longer relevant since v1.0.2)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-4
changelog:
  - Mitigate changed treatment of orphaned sections in ld.bfd/binutils-2.29,
    resulting in logging facility silently out of order (rhbz#1478089)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-1
changelog:
  - Update to libqb-1.0.2, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.2


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.1-1
changelog:
  - Update to libqb-1.0.1, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.1
  - Move qb-blackbox manual page from libqb-devel to libqb
    (where the utility itself resides)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0-1
changelog:
  - Update to libqb-1.0, for list of changes see, in order:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc1
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc2
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc3
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc4
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0
  - Adapt spec file per the upstream version (drop defattr statements,
    autogen.sh call with %build, conditionalize build process)
  - Add gcc as an explicit BuildRequires (required per the new guidelines)
  - Do not depend on the rpmbuild-imposed man page archiving method


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 0.17.2-1
changelog:
  - Update to libqb-0.17.2 + fix check_ipc tests, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v0.17.2


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
  Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
  Fix: trie: allow modifying the trie map during the notify callback
  Fix: fix invalid option when run 'ipcclient -h'
  Fix: epoll: don't miss poll events under high load
  Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
  Fix: ringbuffer: fix size in qb_rb_create_from_file()
  Fix: ringbuffer: fix qb_rb_open_2() debug format string
  Fix: trie: fixes regression caused by ref count refactoring
  Fix: ipcc: Properly timeout during recv when timeout value is provided


author: David Vossel <dvossel@redhat.com> - 0.17.0-1
changelog:
  Fix: build: Allow 'make rpm' to work with lightweight tags for release candidates
  Fix: spec: reference correct url in spec file
  Doc: update broken doxygen link to something that exists
  Bump version to 0.17.0
  Low: ipc_socket: further optimize max msg size calculations for fbsd portability tests
  Low: ipc_socket: Allow socket max msg size to be calculated more accurately
  Fix: fixes travis compile time error
  Low: tests: Fixes compile time issue with make check
  High: ipcs: Prevent ipc server use after free.
  Low: ipc: Remove ipc connection reference given to dispatch functions
  High: ipc: Fixes memory leak in server connection accept when client partially connects
  IPC: Increase the listen backlog of IPC server
  Low: ipcs: Clarifications to the ipcs server callback documentation.
  Fix rb.test to avoid overwriting memory during reading.
  Low: example: Update client/server example to use server enforced buffer size
  Low: Client side buffer retrieval regression test
  Feature: New api function to retrieve client buffer size
  Low: check_ipc.c: Verify server enforced buffer sizes work
  Feature: Enforce buffer size limits on the server side
  Low: regession tests for regex log filters
  Feature: Filter logs using regex patter on function, format, or filename
  ipc_setup: Set SO_PASSCRED on listener socket
  Fix: log: Filtering by function and file must match exactly, no substring matches
  Low: blackbox: Abort blackbox logging on ringbuffer overwrite reclaim error
  High: ipcs: Api function allowing server to retrieve client connection's ipc buffer size
  Low: ringbuffer: Abort during chunk reclaim if OVERWRITE flag is set and reclaim fails.
  High: blackbox: unique blackbox ringbuffer files per pid
  Low: ipc_socket: Fixes fd leak in socket ipc client disconnection
  Use sizeof to get the correct size of the sockaddr_un sun_path member in a portable way. Fixes corosync on Mac OS X.
  Detect the max signal value that can be used using NSIG macro
  Avoid double-decrement of level->todo


author: David Vossel <dvossel@redhat.com> - 0.16.0-1
changelog:
  Bump version to 0.16.0 ... do not use version 0.15.0
  Update release gpg sign key
  Bump the version to 0.15.0
  Merge pull request #83 from davidvossel/master
  Low: ipc_socket: Output send event failure as debug instead of error
  Low: ipcserver.c: Fix example server's glib mainloop implementation
  High: ipc_socket.c: Detect EOF connection on connection STREAM socket
  Merge pull request #81 from davidvossel/dgram_max_msg
  Low: tests: Add dgram max size detection test
  Low: ipc_socket.c: Handle the unlikely event of an EAGAIN or EINTR during dgram max size detection
  Merge pull request #82 from davidvossel/master
  Fixes detect disconnect on send for tcp example
  Fixes sem leak
  Fixes less-than-zero comparision of unsigned int
  fixes double close
  Fixes double close
  Fixes double fd close
  Fixes fd leak
  Prevent use after free in benchmark util
  Fixes use ater free in shm disconnect
  Fixes use after free during ipcs client disconnect
  Remove dead code
  Low: check_ipc.c: Verify dgram max size during tests
  High: ipcc: Add abilty to verify dgram kernel buffer size meets max msg value
  Fixes travis build error
  Merge pull request #80 from davidvossel/master
  Low: check_ipc.c: fix debug message to only display once.
  High: ringbuffer: Make max_size of ringbuffer accurate so shm ipc max msg size value is honored
  Low: ipcs: For shm ipc, always retry outstanding notifications when next event is sent
  Low: tests: Added test to verify sending ipc msg equal to max size succeeds
  Merge pull request #79 from davidvossel/master
  Merge pull request #78 from davidvossel/master
  Fix: ipcs: Fixes compile time issue reported by travis
  Merge pull request #77 from davidvossel/stress_tests_fixes
  Low: loop_pool_kqueue: remove potentially noisy dbug statement
  Low: tests: rework bulk event msg ipc test
  Account for fbsd ENOBUFS during stress test
  Low: tests: Adds ipc event stress test to testsuite
  Low: ipc_socket: In fbsd send() returns ENOBUFS when dgram queue is full, this should be treated similar to EAGAIN
  High: kqueue: Properly enable kqueue filter in poll loop
  Low: ipcs: Attempt to resend outstanding event notifications during event send
  Merge pull request #75 from davidvossel/ref_count_cleanup
  Low: qbipcs.h: update ipcs connection iterator documentation
  Merge pull request #74 from davidvossel/ref_count_cleanup
  Fix: ipcs: Disconnect shm ipc connection when poll socket returns error on msg receive
  Fix: ipcs: Properly disconnect client connection on POLLNVAL or any other error causing connection removal from mainloop.
  Simplify internal ipcs ref counting, add comments and document api behavior
  Simplifies connection ref counting without changing behavior
  Low remove ref-count error in example ipcserver.
  Merge pull request #73 from davidvossel/ref_count_cleanup
  Merge pull request #72 from davidvossel/master
  Low: tests: Verify reading valid blackbox file works
  Fix: refcount leak
  Fix: ringbuffer: Add file header version field and detect reading corrupted blackbox files using hash value
  Fix: tests: On some platforms -ECONNRESET is returned rather than -ENOTCONN after server failure
  Fix: tests: Make blackbox_segfault.sh not depend on bash
  Hopefully this is the last travis link fix
  Fix travis icon (travis is case sensitive)
  Fix the github links
  Merge pull request #70 from yuusuke/fix_logging
  fix a problem when the character string beyond the number of the maximum characters is passed
  Merge pull request #68 from r1mikey/upstream
  Add a IPC service context pointer and accessors from both the connection and service level.
  Enable distcheck on the travis tests
  Add atomic_int.h to noinst_HEADERS
  Use the new atomic ops in the ringbuffer
  Add internal support for the new __atomic gcc builtins
  Rename the configure macros from atomic to sync
  ringbuffer: use atomic ops on ringbuffer chunk magic
  Remove some test code mistakenly committed to the example program.
  IPC: make each connection ref the owning service
  Indicate when/why qb_rb_force_close() fails to remove share memory files
  Typo fixed in configure
  Fix "make srpm"
  Remove doxygen from travis deps to try and get the job working.
  Fix make distcheck
  Merge pull request #60 from t-matsuo/fix-makefile-of-tests
  add file_change_bytes into check_PROGRAMS and fix a typo
  Deal better with corrupt blackbox files.
  Merge pull request #58 from inouekazu/fix_connection_state_checking
  IPC: fix the connection state checking
  LOG: copy the function/filename for dynamic callsites
  Deal with /dev/shm issue on Travis builders
  Properly discover SO_NOSIGPIPE and MSG_SIGNAL
  IPC: fix call to QB_SUN_LEN
  list: don't splice empty lists onto the head.
  rpl_sem: make destroy more compliant
  test: fix unused-but-set-variable warning
  test: fix missing-format-attribute warning
  RB: make the "sem" abstraction into a notifier
  IPC: clean up the connection state checking
  Use dgram sockets for message oriented communications
  IPC: don't interpret EMSGSIZE and ENOMSG as a disconnect
  POLL: prevent a spin if the fd is not removed from the mainloop
  add TAGS and ~ files to .gitignore
  docs: install qb-blackbox.8 if doxygen is not available.
  IPC: seperate ipc_us.c into 2 files
  IPC: move utility functions to unix.c
  IPC: make sure we return a consistent error when the message is too big.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.34-0.1.20130819-2534
  — first 2.34 release candidate, 2 years worth of fixes and glyph additions
    (for example Turkish Lira ₺)


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.28-5
  — prepare for F11 mass rebuild, new rpm and new fontpackages
  — drop compatibility provides as announced at F11 alpha time


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.28-2
  — Update URL
  — update for new naming guidelines
  – warning: provides for the old names will be dropped before F11 beta


author: <nicolas.mailhot at laposte.net>
changelog:
  - 2.28-1
  ❄ Update to latest release
  ❅ Drop upstreamed fontconfig patch
  ❆ Remove DejaVu from most summaries


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.26-6
  ⧎ Package split reorganisation, following font family lines
  ⵞ Create compat packages to ease switchover at F11 time (to be discontinued
    for F12)
  ⬳ compress status file


author: <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.21-0.3.20071025svn2022
   ✓ Makefile patch dropped (merged upstream)
   ✓ add -f to fc-cache calls
   ✓ completely align LGC and FULL fontconfig rules
   ✓ remove / from directory macros


author: <nicolas.mailhot at laposte.net>
changelog:
  ☢ 2.21-0.2.20071017svn2019
  ⚠ Still very experimental version:
    ✓ update makefile patch
    ✓ split lgc hinting file like in the other packages
    ✓ move lgc to prio 58 as should have been done when liberation was added


author: <nicolas.mailhot at laposte.net>
changelog:
  ☢ 2.21-0.1.20071014svn2016
  ⚠ Very experimental version to test major changes:
    ✓ new fontforge version
    ✓ use of a real makefile at last
    ✓ replacing standalone lgc package with subpackage generated with the rest


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.18-1
  ✓ 2.18 final
  ✓ Major new release adding Tifinagh (ⵞⵥⴼⴻ), N'ko (ߝߧߜ) and Georgian (ლფჱႫႿ)
    (Georgian created by Besarion Paata Gugushvili ბესარიონ პაატა გუგუშვილი)


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.17-2
  ✓ perl-Font-TTF has been fixed upstream, use perl(Font::TTF) BR
  ✓ remove comment about /etc/fonts/conf.d ownership, as it's now owned
     by filesystem


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.17-1
  ✓ rebase scriptlets from guidelines
  ✓ fontforge broke compat: BR the current version, ask for a version bump
    before 2.18 is released
  ✓ simplify font directory naming
  ✓ clean up fc5 obsoletes
  ✓ remove technical mes files from doc


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.17-0.3.rc1
  ✓ fontconfig setup has stabilized and can be marked noreplace now
  ☺ 2.17-0.2.rc1
  ✓ mimick Vera unhint conf split
  ☺ 2.17-0.1.rc1
  ✓ 2.17 rc1
  ✓ make room for liberations font conf file


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  ☺ 2.14-2
  ✓ Adds Dejavu Sans Oblique small fixes (by Ben Laenen to address Debian
    bug #408311, collected by Davide Viti)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.7-7
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-32
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags


author: Jiri Skala <jskala@redhat.com> - 2.4.5-18
changelog:
  - fixes #682381 - hardcodes eth0
  - fixes #708260 - SELinux is preventing access on the file LCK..ttyUSB3


author: Jiri Skala <jskala@redhat.com> - 2.4.5-12
changelog:
  - fixes #637513 - Missing: README.eap-tls
  - updated to latest eaptls upstream
  - fixes #637886 - EAP-TLS not working with enabled PPP Multilink Framing option


author: Jiri Skala <jskala@redhat.com> - 2.4.5-10
changelog:
  - fixes #613717 - Missing line in example script ip-up.local.add
  - removed /usr/kerberos/include from eaptls patch


author: Jiri Skala <jskala@redhat.com> - 2.4.4-14
changelog:
  - fixed #519042 - ppp package is missing URL in spec
  - fixed #524575 - ppp: no_strip patch modifies backup files created by previous patches


author: Martin Nagy <mnagy@redhat.com> 2.4.4-6
changelog:
  - call closelog earlier (#222295)
  - fix ChapMS2 (#217076)
  - moving header files to new -devel package (#203542)


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch
  - enabled CBCP (#199278)


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-2
changelog:
  - dropped all executable bits in scripts directory to prevent rpm requiring
    programs used in there


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-1
changelog:
  - new version 2.4.3
    - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip,
      radiusplugin
    - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck


author: David Woodhouse <dwmw2@redhat.com> 2.4.2-6.2
changelog:
  - Link pppoatm plugin against libresolv.
  - Revert to linux-atm headers without the workaround for #127098


author: Thomas Woerner <twoerner@redhat.com> 2.4.2-5
changelog:
  - example scripts are using change_resolv_conf to modify /etc/resolv.conf
    (#132482)
  - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound
    filter processing
  - not using internal libpcap structures anymore, fixes inbound/outbound
    filter processing (#128053)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Thu Jun 06 2002 Phil Knirsch <pknirsch@redhat.com>
  	- Fixed varargs problem for s390/s390x.


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.1-2
changelog:
  - add buildprereq on pam-devel (#49559)
  - add patch to respond to CBCP LCP requests (#15738)
  - enable cbcp support at build-time
  - change the Copyright: tag to a License: tag


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - New version 2.3.9 required for kernel 2.3.13 and will be required
    for new initscripts.  auth patch removed; 2.3.9 does the same thing
    more readably than the previous patch.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not
    required any more.
  - added buildroot
  - fixed the PAM support, which was really, completely broken and against any
    standards (session support is still not here... :-( )
  - we build against running kernel and pray that it will work
  - added a samples patch; updated glibc patch


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a patch to use our own route.h, rather then glibc's (which has
    alignment problems on Alpha's) -- I only applied this patch on the Alpha,
    though it should be safe everywhere


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.12-3
changelog:
  - call PAM only for non-root user or non-system crontabs (#956157)
  - bypass the PAM check in crontab for root (#1169175)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-4
changelog:
  - some jobs are not executed because not all environment variables are set 995590
  - cronie's systemd script use "KillMode=process" 919290


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-2
changelog:
  - scriptlets are not created correctly if systemd is not in BR 986698
  - remove sub-package sysvinit, which is not needed anymore
  - update license, anacron is under GPLv2+


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.10-5
changelog:
  - add support for RANDOM_DELAY - delaying job startups
  - pass some environment variables to processes (LANG, etc.) (#969761)
  - do not use putenv() with string literals (#971516)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.8-4
changelog:
  - drop the without systemd build condition
  - add the chkconfig readding trigger to the sysvinit subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.7-2
changelog:
  - use only systemd units with systemd
  - add trigger for restart on glibc, libselinux or pam upgrades (#699189)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.1-1
changelog:
  - update to 1.4.1
  - create and own /var/spool/anacron/cron.{daily,weekly,monthly} to
   remove false warning about non existent files
  - Resolves: 517398


author: Tomas Mraz <tmraz@redhat.com> - 1.1-3
changelog:
  - fix setting keycreate context
  - unify logging a bit
  - cleanup some warnings and fix a typo in TZ code
  - 450993 improve and fix inotify support


author: Robin Norwood <rnorwood@redhat.com> - 1.34-1
changelog:
  - Upgrade to latest upstream version: 1.34
  - Fix license tag
  - Fix BuildRequires for ExtUtils::MakeMaker and Test::Pod


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Karel Klic <kklic@redhat.com> - 1.8.3-5
changelog:
  - Removed fake Provides: libgdbm.so.2 and corresponding symlinks
  - Moved autoconf, libtoolize from %build to %prep section
  - Remove static builds from the devel package (#556050)


author: Karel Klic <kklic@redhat.com> - 1.8.3-1
changelog:
  - Newer upstream release
  - Removed gdbm-1.8.0-64offset.patch, because it was merged by the upstream
  - `jbj' patch extended and renamed to `zeroheaders'
  - Added shortread patch from Debian


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.0-18.1
changelog:
  - run make with libdir overridden so that it has the value passed to configure
    instead of $(prefix)/lib


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Gris Ge <fge@redhat.com> - 1.5.0-0
changelog:
  - New upstream release 1.5.0:
      * New sub-package libstoragemgmt-nfs-plugin, libstoragemgmt-arcconf-plugin,
        and libstoragemgmt-local-plugin.
      * C API manpages for libstoragemgmt-devel package.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary packages renamed to python2-libstoragemgmt and python2-libstoragemgmt-clibs
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - %python_provide added for all four python subpackages


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem(this rpm use pywbem instead).
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> 1.2.3-1
changelog:
  - New upstream release 1.2.3:
      * Bug fixes:
          * lsmcli bash completion: Fix syntax error.
          * lsmcli bash completion: Fix volume-delete.
          * lsmcli bash completion: Add missing completions.
          * Fix: selinux dac_override
          * Manpage: Update hpsa and megaraid plugin manpages.
          * HP Smart Array Plugin: Fix pool querying on P410i.
          * MegaRAID Plugin: Fix bug when no volume configured.


author: Gris Ge <fge@redhat.com> - 1.2.1-1
changelog:
  - New upstream release 1.2.1.
  - Changed upstream URL and source URL to github.
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
          New plugin in 1.2.0 release.
      * libstoragemgmt-hpsa-plugin
          New plugin in 1.2.0 release.
  - Add bash-completion script for lsmcli.
  - New rpmbuild switch: 
      * '--without test'
          Use to skip 'make check' test to save debug time.
      * '--without megaraid'
          Don't compile megaraid plugin.
      * '--without hpsa'
          Don't compile hpsa plugin.
  - Remove PyYAML BuildRequires.
  - Add NEWS(changelog) to document folder.
  - Replace the hardcoded udev path with <percent>{_udevrulesdir}.
  - Fix rpmlint error 'dir-or-file-in-var-run'.
  - Mark /run/lsm and /run/lsm/ipc as <percent>ghost folder.
  - Fix rpmlint warnning 'W: non-standard-uid /run/lsm libstoragemgmt'.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.
  - Fix the incorrect use of <percent>bcond_with and <percent>bcond_without.
  - Removed autogen.sh which is not required for release version any more.


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Specify udev files to /usr/lib dir instead of /lib
  - Move command line python files to python package


author: Tony Asleson <tasleson@redhat.com> 0.0.21-1
changelog:
  - New upstream release
  - Put plug-ins in separate sub packages
  - Don't include IBM plug-in on RHEL > 6, missing paramiko


author: Tony Asleson <tasleson@redhat.com> - 0.0.20-1
changelog:
  - New upstream release
  - Separate package for python libraries
  - Make timestamps match on version.py in library
  - Add python-paramiko requirement for IBM plug-in


author: Tony Asleson <tasleson@redhat.com> 0.0.9-1
changelog:
  - Initial checkin of lio plug-in
  - System filtering via URI (smispy)
  - Error code mapping (ontap)
  - Fixed build so same build tarball is used for all binaries


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Natalya Naumova <natalya.naumova@oracle.com> - 15-11.0.2
changelog:
  - updated with shimaa64.efi, shimia32.efi and shimx64.efi taken from OL7.6 shim-signed rpm
  - updated BOOT*.CSV files to contain Oracle Linux [Orabug: 28073193]
  - new secure boot signing key
  - changed shim-unsigned dependencies to 15-3.0.1 version


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: Björn Esser <besser82@fedoraproject.org> - 4.0.0-0.201.20171109git15447aa
changelog:
  - Use archful Obsoletes for libcrypt
  - Add versioned Requires on glibc packages not shipping libcrypt
  - Add comments about the packaging logic for replacing former libcrypt


author: Tim Waugh <twaugh@redhat.com> 5.1-1
changelog:
  - Applied changes from Chen Lei (bug #592922):
    * Sun Aug 15 2010 Chen Lei <supercyper1@gmail.com> 5.1-1
    - 5.1.
    - Update spec to match latest guidelines w.r.t buildroot tag


author: Tim Waugh <twaugh@redhat.com> 3.1-34
changelog:
  - Moved 'make clean' to prep section and added comment about there
    being no upstream (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-32
changelog:
  - Adjust license tag (bug #225706).
  - Fix missing prototype (bug #225706).
  - Install copy as symbolic links (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-28
changelog:
  - Fixed build root (bug #225706).
  - Build with SMP flags (bug #225706).
  - Use dist in release tag (bug #225706).
  - Fixed macros in changelog (bug #225706).
  - Preserve timestamps when using install (bug #225706).


author: Miloslav Trmac <mitr@redhat.com> - 3.1-21
changelog:
  - Don't just delete the original file when destination and current directory
    are on different filesystems (#65548, #123069, patch by James Antill)
  - Fix return type of StripDelimiter in dos2unix-3.1-safeconv.patch (#136148)


author: Mike A. Harris <mharris@redhat.com> 3.1-20
changelog:
  - Added dos2unix-3.1-manpage-update-57507.patch to fix manpage (#57507)
  - Added dos2unix-3.1-preserve-file-modes.patch to properly preserve file
    permissions (#91331,55183,112710,132145)


author: Elliot Lee <sopwith@redhat.com> 3.1-15
changelog:
  - Remove build dependency on perl, since perl BuildRequires: dos2unix,
    and there's no good reason not to just use sed here.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix bug #57700 (segfault)
  - Add the mac2unix symlink recommended in README
  - Fix compiler warnings


author: Peter Soos <sp@osb.hu>
changelog:
  - Added Hungarian "Summary:" and "%description" 
  - Corrected the file and directory attributes to rebuild the package 
    under RedHat Linux 6.0


author: Ales Matej <amatej@redhat.com> - 4.2.17-6
changelog:
  - Sort packages in transaction output by nevra (RhBug:1773436)
  - Add support of commandline packages by repoquery (RhBug:1784148)
  - [doc] Document that the include option was removed (RhBug:1786072)
  - New API function for setting loggers (RhBug:1788212)


author: Ales Matej <amatej@redhat.com> - 4.2.17-4
changelog:
  - Fix alias processing with '\' escaping (RhBug:1680482)
  - [doc] Explain the backslash notation also near the example (RhBug:1680482)
  - Better descriptions for infinite aliases recursion (RhBug:1680488)
  - Improve help for 'dnf module' command (RhBug:1758447)
  - Unify downgrade exit codes with upgrade (RhBug:1759847)
  - Honor priority with check-update (RhBug:1769466)
  - Add shell restriction with local packages (RhBug:1773483)
  - Restore functionality of remove --oldinstallonly (RhBug:1774670)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.17-3
changelog:
  - Do a substitution of variables in repo_id (RhBug:1748841)
  - Respect order of config files in aliases.d (RhBug:1680489)
  - [doc] Remove note about user-agent whitelist (RhBug:1777255)
  - Fix detection of the latest module (RhBug:1781769)


author: Ales Matej <amatej@redhat.com> - 4.2.17-2
changelog:
  - Update to 4.2.17
  - Enable versionlock for check-update command (RhBug:1750620)
  - Add error message when no active modules matched (RhBug:1696204)
  - Log mirror failures as warning when repo load fails (RhBug:1713627)
  - dnf-automatic: Change all systemd timers to a fixed time of day (RhBug:1754609)
  - DNF can use config from the remote location (RhBug:1721091)
  - [doc] update reference to plugin documentation (RhBug:1706386)
  - [yum compatibility] Report all packages in repoinfo
  - [doc] Add definition of active/inactive module stream
  - repoquery: Add a switch to disable modular excludes
  - Report more informative messages when no match for argument (RhBug:1709563)
  - [doc] Add description of excludes in dnf
  - Report more descriptive message when removed package is excluded
  - Add module repoquery command
  - Fix assumptions about ARMv8 and the way the rpm features work (RhBug:1691430)
  - Add Requires information into module info commands
  - Enhance inheritance of transaction reasons (RhBug:1672618,1769788)


author: Ales Matej <amatej@redhat.com> - 4.2.16-1
changelog:
  - Update to 4.2.16
  - Fix downloading local packages into destdir (RhBug:1727137)
  - Report skipped packages with identical nevra only once (RhBug:1643109)
  - Restore functionality of dnf remove --duplicates (RhBug:1674296)
  - Improve API documentation
  - Document NEVRA parsing in the man page
  - Do not wrap output when no terminal (RhBug:1577889)
  - Allow to ship alternative dnf.conf (RhBug:1752249)
  - Don't check if repo is expired if it doesn't have loaded metadata (RhBug:1745170)
  - Remove duplicate entries from "dnf search" output (RhBug:1742926)
  - Set default value of repo name attribute to repo id (RhBug:1669711)
  - Allow searching in disabled modules using "dnf module provides" (RhBug:1629667)
  - Group install takes obsoletes into account (RhBug:1761137)
  - Improve handling of vars
  - Do not load metadata for repolist commands (RhBug:1697472,1713055,1728894)
  - Fix messages for starting and failing scriptlets (RhBug:1724779)
  - Don't show older install-only pkgs updates in updateinfo (RhBug:1649383,1728004)
  - Add --ids option to the group command (RhBug:1706382)
  - Add --with_cve and --with_bz options to the updateinfo command (RhBug:1750528)


author: Ales Matej <amatej@redhat.com> - 4.2.11-1
changelog:
  - Update to 4.2.11
  - Improve modularity documentation (RhBug:1730162,1730162,1730807,1734081)
  - Fix detection whether system is running on battery (used by metadata caching timer) (RhBug:1498680)
  - New repoquery queryformat: %{reason}
  - Print rpm errors during test transaction (RhBug:1730348) 
  - Fix incorrectly marked profile and stream after failed rpm transaction check (RhBug:1719679)
  - Show transaction errors inside dnf shell (RhBug:1743644)
  - dnf-automatic now respects versionlock excludes (RhBug:1746562)
  - [doc] Add user_agent and countme options
  - [history] Don't store failed transactions as succeeded
  - [history] Do not require root for informative commands
  - [dnssec] Fix UnicodeWarning when using new rpm (RhBug:1699650)
  - Apply excludes before modular excludes (RhBug:1709453)
  - Improve help for command line arguments (RhBug:1659328)
  - Add new modular API method ModuleBase.get_modules
  - Mark features used by ansible, anaconda and subscription-manager as an API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-3
changelog:
  - Update localizations from zanata (RhBug:1689982)
  - Accept multiple specs in repoquery options (RhBug:1667898,1656801)
  - Prevent switching modules in all cases (RhBug:1706215)
  - Change synchronization of rpm transaction to swdb (RhBug:1737328)
  - Print rpm error messages during transaction (RhBug:1677199)
  - Report missing default profile as an error (RhBug:1669527,1724564)
  - Describe a behavior when plugin is removed (RhBug:1700741)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-1
changelog:
  - Update to 4.2.7
  - Fix package reinstalls during yum module remove (RhBug:1700529)
  - Fail when "-c" option is given nonexistent file (RhBug:1512457)
  - Reuse empty lock file instead of stopping dnf (RhBug:1581824)
  - Propagate comps 'default' value correctly (RhBug:1674562)
  - Better search of provides in /(s)bin/ (RhBug:1657993)
  - Add detection for armv7hcnl (RhBug:1691430)
  - Fix group install/upgrade when group is not available (RhBug:1707624)
  - Report not matching plugins when using --enableplugin/--disableplugin
    (RhBug:1673289) (RhBug:1467304)
  - Add support of modular FailSafe (RhBug:1623128)
  - Replace logrotate with build-in log rotation for dnf.log and dnf.rpm.log
    (RhBug:1702690)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.6-1
changelog:
  - Update to 4.2.6
  - Use improved config parser that preserves order of data
  - Follow RPM security policy for package verification
  - Update modules regardless of installed profiles
  - [conf] Use environment variables prefixed with DNF_VAR_
  - Allow adjustment of repo from --repofrompath (RhBug:1689591)
  - Allow globs in setopt in repoid part
  - Add command abbreviations (RhBug:1634232)
  - Installroot now requires absolute path
  - librepo: Turn on debug logging only if debuglevel is greater than 2 (RhBug:1355764,1580022)
  - Document cachedir option (RhBug:1691365)
  - Enhance documentation - API examples
  - Enhance documentation of --whatdepends option (RhBug:1687070)
  - Update documentation: implemented plugins; options; deprecated commands (RhBug:1670835,1673278)
  - [doc] Add info of relation update_cache with fill_sack (RhBug:1658694)
  - Rename man page from dnf.automatic to dnf-automatic to match command name
  - Fix alias list command (RhBug:1666325)
  - Fix behavior  of ``--bz`` option when specifying more values
  - Add protection of yum package (RhBug:1639363)
  - Fix ``list --showduplicates`` (RhBug:1655605)
  - Retain order of headers in search results (RhBug:1613860)
  - Solve traceback with the "dnf install @module" (RhBug:1688823)
  - Fix multilib obsoletes (RhBug:1672947)
  - Do not remove group package if other packages depend on it
  - Remove duplicates from "dnf list" and "dnf info" outputs
  - Fix the installation of completion_helper.py
  - Fix formatting of message about free space required
  - Fix installation failiure when duplicit RPMs are specified (RhBug:1687286)
  - Fix issues with terminal hangs when attempting bash completion (RhBug:1702854)
  - Allow plugins to terminate dnf (RhBug:1701807)
  - [provides] Enhanced detecting of file provides (RhBug:1702621)
  - [provides] Sort the output packages alphabetically


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-2
changelog:
  - Backport patches for: RHEL should use --best option by default for dnf / libdnf (RhBug:1670776)
  - Add --nobest dnf option to revert the new default behavior from commandline


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-1
changelog:
  - Print information about skipped packages after the transaction
  - Sort reported skipped packages, force ignore_weak
  - Allow to enable modules that break default modules (RhBug:1648839)


author: Daniel Mach <dmach@redhat.com> - 4.0.9.1-1
changelog:
  - Updated difference YUM vs. DNF for yum-updateonboot
  - Added new command ``dnf alias [options] [list|add|delete] [<name>...]`` to allow the user to
    define and manage a list of aliases
  - Enhanced documentation
  - Unifying return codes for remove operations
  - [transaction] Make transaction content available for commands
  - Add hotfix packages to install pool (RhBug:1654738)
  - Report group operation in transaction table
  - [sack] Change algorithm to calculate rpmdb_version
  - Add basic integration with digest (RhBug:1614351)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9-1
changelog:
  - Added dnf.repo.Repo.get_http_headers
  - Added dnf.repo.Repo.set_http_headers
  - Added dnf.repo.Repo.add_metadata_type_to_download
  - Added dnf.repo.Repo.get_metadata_path
  - Added dnf.repo.Repo.get_metadata_content
  - Added --changelogs option for check-update command
  - [module] Add information about active modules
  - Hide messages created only for logging
  - Enhanced --setopt option
  - [module] Fix dnf remove @<module>
  - [transaction] Make transaction content available for plugins


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.4-1
changelog:
  - Update to 4.0.4
  - Add dnssec extension
  - Set termforce to AUTO to automatically detect if stdout is terminal
  - Repoquery command accepts --changelogs option (RhBug:1483458)
  - Calculate sack version from all installed packages (RhBug:1624291)
  - [module] Allow to enable module dependencies (RhBug:1622566)


author: Jaroslav Mracek <jmracek@redhat.com> - 3.6.1-1
changelog:
  - [module] Improved module commands list, info
  - [module] Reports error from module solver
  - Fix: Error detected when calling 'RepoCB.fastestMirror' (RhBug:1628056)
  - Preserve packages from other installed mod profiles (RhBug:1629841)
  - [spec] Postpone conflict with yum to Fedora 30+ (RhBug:1600444)
  - [cli] Install command recommends alternative packages (RhBug:1625586)
  - [cli] Fix case insensitive hint (1628514)
  - Fix installed profiles for module info (RhBug:1629689)
  - Fix module provides not having consistent output (RhBug:1623866)
  - Enhance label for transaction table (RhBug:1609919)
  - Implement C_, the gettext function with a context (RhBug:1305340)
  - Actually disambiguate some messages using C_ (RhBug:1305340)
  - Restore 'strict' choice for group installs (#1461539)
  - [repoquery] More strict queryformat parsing (RhBug:1631458)
  - Redirect repo progress to std error (RhBug:1626011)
  - Unify behavior of remove and module remove (RhBug:1629848)
  - Change behavior of disabled module for module install (RhBug:1629711)
  - Allow enablement on disabled plugin (RhBug:1614539)
  - Resolves: rhbz#1622585 - [modularity] dnf should not be proposing distro-sync
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Bug 1564369 - don't show duplicate errors in dnf output
  - Resolves: rhbz#1597257 - dnf should accept localinstall command, at least as an alias
  - Resolves: rhbz#1613860 - dnf search behaviour is slightly confusing
  - Resolves: rhbz#1625586 - Advise user about alternatives to the non-existing "python" package
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - Resolves: rhbz#1612752 - platform-python should be used in completion_helper
  - Resolves: rhbz#1618421 - dnf module install fails to find non-modular dependencies
  - Bug 1629655 - not helpful/complete error message when specifying wrong stream or profile
  - Bug 1629709 - disabled modules should be identified in the module listing
  - Bug 1630761 - [usability] unable to determine if a stream with [d] is enabled or not
  - Bug 1625270 - there is ???% [=== when baseurl is wrong
  - Resolves: rhbz#1624056 - quoted baseurl is error out


author: Jaroslav Mracek <jmracek@redhat.com> - 3.5.0-1
changelog:
  - New implementation of modularity
  - dnf makecache should not fail in red color if no enabled repos (RhBug:1622090)
  - [modularity] dnf module profile command doesn't work (RhBug:1622580)
  - [modularity] incorrect output in dnf module list (RhBug:1623398)
  - [modularity] dnf could be smarter when installing what's already installed (RhBug:1622599)
  - [modularity] dnf module install circular error on missing dependency (RhBug:1620233)
  - not descriptive output in dnf verbose (RhBug:1612718)
  - RFE: provide way to query all packages from module (RhBug:1569068)


author: Daniel Mach <dmach@redhat.com> - 3.4.0-1
changelog:
  - [history] Fix 'attempt to write a readonly database' error in addConsoleOutputLine().
  - [spec] Improve YUM v3 compat layer.
  - [doc] document missing link from yum-rhn-plugin to dnf-plugin-spacewalk (RhBug:1580356)
  - [doc] document difference between yum and dnf when listing packages (RhBug:1615834)
  - [doc] document missing download functionality after transaction table is displayed (RhBug:1585140)
  - [systemd] dnf-makecache.timer: move the ordering after network to .service
  - [translations] Update translations from zanata.
  - [cli] Fix 'already installed' message output.
  - [module] change 'module_nsvp' to 'module_spec'
  - [module] show module profiles without ', ...'
  - [module] unify usability of RepoModuleDict.get_info*(); fix traceback
  - [security] fix update count (RhBug:1585138)
  - [cli] enable reposync to use --destdir (RhBug:1582152)
  - [repo] Replace dnf.repo.Repo with libdnf implementation.
  - [dnf] Limit DeprecationWarning to dnf.* modules only.


author: Daniel Mach <dmach@redhat.com> - 3.3.0-1
changelog:
  - [misc] Fallback to os.getuid() if /proc/self/loginuid can't be read (RhBug:1597005)
  - [translations] Update translations from zanata.
  - [doc] Update module documentation.
  - [module] Fix `module provides` output.
  - [module] Add `module reset` command.
  - [module] Fix module disable command
  - [repo] Improve error message on broken repo (RhBug:1595796)
  - [doc] Enhance a command documentation (RhBug:1361617)
  - [module] Automatically save module persistor in do_transaction().
  - [drpm] Fixed setting deltarpm_percentage=0 to switch drpm off
  - [repo] Split base.download_packages into two functions
  - [output] Use libdnf wrapper for smartcols
  - [conf] Do not traceback on empty option (RhBug:1613577)


author: Daniel Mach <dmach@redhat.com> - 3.2.0-1
changelog:
  - [sack] Use module_platform_id option.
  - [module] Switch module persistor to libdnf implementation.
  - [module] Auto-enable module streams based on installed RPMs.
  - [transaction] Fix: show packages from the current transaction.
  - [conf] Convert any VectorString type to list.
  - [module] Replace 'enabled' config option with 'state'.
  - [install_specs] Do not exclude groups' packages
  - [module] Use module sack filtering from libdnf
  - [module] Many UX fixes.


author: Daniel Mach <dmach@redhat.com> - 3.1.0-1
changelog:
  - [module] Move 'hotfixes' conf option to libdnf and rename it to 'module_hotfixes'.
  - [goal] Exclude @System repo packages from distro_sync.
  - [conf] Setup configuration values using C++ bindings.
  - [module] Drop module lock command.
  - [crypto] Use handle from repo in dnf.crypto.retrieve().
  - [module] Assume a 'default' profile exists for all modules (RhBug:1568165)
  - [base] Introduce easy installation of package, group and module specs.


author: Daniel Mach <dmach@redhat.com> - 3.0.4-1
changelog:
  - [transaction] Fix 'TransactionItem not found for key' error.
  - [module] Allow removing module profile without specifying a stream.
  - [module] Fix 'BaseCli' object has no attribute '_yumdb' error.
  - [callback] Fix TransactionDisplay.PKG_ERASE redirect to a non-existing constant.
  - [spec] Change yum compat package version to 4.0.version.
  - [cache] Clean transaction temp files after successfull transaction
  - [log] Log messages from libdnf logger
  - [transaction] Add states to report rpm transaction progress
  - [transaction] Cache TransactionItem during handling of RPM callback (RhBug:1599597)
  - [systemd] dnf-makecache.timer: move to multi-user to fix loop


author: Jaroslav Mracek <jmracek@redhat.com> - 3.0.1-1
changelog:
  - Update to 3.0.1-1
  - Support of MODULES - new DNF command `module`
  - Add attribute dnf.conf.Conf.proxy_auth_method
  - New repoquery option `--depends` and `--whatdepends`
  - Enhanced support of variables
  - Enhanced documentation
  - Resolves: rhbz#1565599
  - Resolves: rhbz#1508839
  - Resolves: rhbz#1506486
  - Resolves: rhbz#1506475
  - Resolves: rhbz#1505577
  - Resolves: rhbz#1505574
  - Resolves: rhbz#1505573
  - Resolves: rhbz#1480481
  - Resolves: rhbz#1496732
  - Resolves: rhbz#1497272
  - Resolves: rhbz#1488100
  - Resolves: rhbz#1488086
  - Resolves: rhbz#1488112
  - Resolves: rhbz#1488105
  - Resolves: rhbz#1488089
  - Resolves: rhbz#1488092
  - Resolves: rhbz#1486839
  - Resolves: rhbz#1486839
  - Resolves: rhbz#1486827
  - Resolves: rhbz#1486816
  - Resolves: rhbz#1565647
  - Resolves: rhbz#1583834
  - Resolves: rhbz#1576921
  - Resolves: rhbz#1270295
  - Resolves: rhbz#1361698
  - Resolves: rhbz#1369847
  - Resolves: rhbz#1368651
  - Resolves: rhbz#1563841
  - Resolves: rhbz#1387622
  - Resolves: rhbz#1575998
  - Resolves: rhbz#1577854
  - Resolves: rhbz#1387622
  - Resolves: rhbz#1542416
  - Resolves: rhbz#1542416
  - Resolves: rhbz#1496153
  - Resolves: rhbz#1568366
  - Resolves: rhbz#1539803
  - Resolves: rhbz#1552576
  - Resolves: rhbz#1545075
  - Resolves: rhbz#1544359
  - Resolves: rhbz#1547672
  - Resolves: rhbz#1537957
  - Resolves: rhbz#1542920
  - Resolves: rhbz#1507129
  - Resolves: rhbz#1512956
  - Resolves: rhbz#1512663
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1519325
  - Resolves: rhbz#1492036
  - Resolves: rhbz#1391911
  - Resolves: rhbz#1391911
  - Resolves: rhbz#1479330
  - Resolves: rhbz#1505185
  - Resolves: rhbz#1305232


author: Igor Gnatenko <ignatenko@redhat.com> - 2.7.5-1
changelog:
  - Improve performance for excludes and includes handling (RHBZ #1500361)
  - Fixed problem of handling checksums for local repositories (RHBZ #1502106)
  - Fix traceback when using dnf.Base.close() (RHBZ #1503575)


author: Jaroslav Mracek <jmracek@redhat.com> - 2.7.4-1
changelog:
  - Update to 2.7.4-1
  - Enhanced performance for excludes and includes handling
  - Solved memory leaks at time of closing of dnf.Base()
  - Resolves: rhbz#1480979 - I thought it abnormal that dnf crashed.
  - Resolves: rhbz#1461423 - Memory leak in python-dnf
  - Resolves: rhbz#1499564 - dnf list installed crashes
  - Resolves: rhbz#1499534 - dnf-2 is much slower than dnf-1 when handling groups
  - Resolves: rhbz#1499623 - Mishandling stderr vs stdout (dnf search, dnf repoquery)


author: Igor Gnatenko <ignatenko@redhat.com> - 2.7.3-1
changelog:
  - Fix URL detection (RHBZ #1472847)
  - Do not remove downloaded files with --destdir option (RHBZ #1498426)
  - Fix handling of conditional packages in comps (RHBZ #1427144)


author: Jaroslav Mracek <jmracek@redhat.com> - 2.7.2-1
changelog:
  - Update to 2.7.2-1
  - Added new option ``--comment=<comment>`` that adds a comment to transaction in history
  - :meth:`dnf.Base.pre_configure_plugin` configure plugins by running their pre_configure() method
  - Added pre_configure() methotd for plugins and commands to configure dnf before repos are loaded
  - Resolves: rhbz#1421478 - dnf repository-packages: error: unrecognized arguments: -x rust-rpm-macros
  - Resolves: rhbz#1491560 - 'dnf check' reports spurious "has missing requires of" errors
  - Resolves: rhbz#1465292 - DNF remove protected duplicate package
  - Resolves: rhbz#1279001 - [RFE] Missing dnf --downloaddir option
  - Resolves: rhbz#1212341 - [RFE] Allow plugins to override the core configuration
  - Resolves: rhbz#1299482 - mock --init fails with message "Failed calculating RPMDB checksum"
  - Resolves: rhbz#1488398 - dnf upstream tests failures on f26
  - Resolves: rhbz#1192811 - dnf whatprovides should show which provides matched a pattern
  - Resolves: rhbz#1288845 - "dnf provides" wildcard matching is unreliable (not all packages with matches listed)
  - Resolves: rhbz#1473933 - [abrt] dnf-automatic: resolved(): rpm_conf.py:58:resolved:AttributeError: 'Rpmconf' object has no attribute '_interactive'
  - Resolves: rhbz#1237349 - dnf autoremove not removing what dnf list extras shows
  - Resolves: rhbz#1470050 - the 'priority=' option in /etc/yum.repos.d/*.repo is not respected
  - Resolves: rhbz#1347927 - dnf --cacheonly downloads packages
  - Resolves: rhbz#1478115 - [abrt] dnf: _hcmd_undo(): __init__.py:888:_hcmd_undo:IndexError: list index out of range
  - Resolves: rhbz#1461171 -  RFE: support --advisory= with install
  - Resolves: rhbz#1448874 - "dnf needs-restarting" vanished from bash completion
  - Resolves: rhbz#1495116 - Dnf version fails with traceback in container


author: Jaroslav Mracek <jmracek@redhat.com> 2.6.3-1
changelog:
  - Fix problem with dnf.Package().remote_location() (RhBug:1476215) (Jaroslav
    Mracek)
  - Change behavior of -C according to documentation (RhBug:1473964) (Jaroslav
    Mracek)
  - It should prevent to ask attribute of None (RhBug:1359482) (Jaroslav Mracek)
  - Solve a problems with --arch options (RhBug:1476834) (Jaroslav Mracek)
  - Use security plugin code for dnf-automatic (Jaroslav Mracek)
  - Fix unicode error for python2 (Jaroslav Mracek)
  - Inform about packages installed for group (Jaroslav Mracek)
  - Provide info if pkg is removed due to dependency (RhBug:1244755) (Jaroslav
    Mracek)
  - Unify format of %{_mandir} paths in dnf.spec (Jaroslav Mracek)
  - Remove test_yumlayer.py as unneeded test (Jaroslav Mracek)
  - Provide yum4 package for rhel7 build (Jaroslav Mracek)
  - Make yum compatible layer very minimal (RhBug:1476748) (Jaroslav Mracek)
  - Remove metadata_expire from yum compatible layer (Jaroslav Mracek)
  - Remove keepcache from yum compatibility layer (Jaroslav Mracek)
  - Remove options from yum conf (Jaroslav Mracek)
  - Remove unused functionality from  yum compatible layer (Jaroslav Mracek)
  - Add deplist command for dnf (Jaroslav Mracek)
  - Fix problems with --downloaddir options (RhBug:1476464) (Jaroslav Mracek)
  - Move description of --forcearch into proper place (Jaroslav Mracek)
  - Provide description of --downloaddir option (Jaroslav Mracek)
  - Fix if in spec file (Jaroslav Mracek)
  - Add description of "test" tsflags (Jaroslav Mracek)
  - Enable import gpg_keys with tsflag test (RhBug:1464192) (Jaroslav Mracek)
  - Keep old reason when undoing erase (RhBug:1463107) (Eduard Čuba)
  - spec: eliminate other weak dependencies for el<=7 (Igor Gnatenko)
  - spec: do not strongly require inhibit plugin (Igor Gnatenko)
  - Inform that packages are only downloaded (RhBug:1426196) (Jaroslav Mracek)
  - Move releasever check after the etc/dnf/vars substitutions. (Alexander
    Kanavin)
  - Provide substitution for Repodict.add_new_repo() (RhBug:1457507) (Jaroslav
    Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.6.2-1
changelog:
  - Remove autodeglob optimization (Jaroslav Rohel)
  - Integrate --destdir with --destdir from download plugin (Ondřej Sojka)
  - Add CLI option --destdir (RhBug:1279001) (Ondřej Sojka)
  - Add myself to the AUTHORS file (Nathaniel McCallum)
  - Add the --forcearch CLI flag (Nathaniel McCallum)
  - Add 'ignorearch' option (Nathaniel McCallum)
  - Provide an API for setting 'arch' and 'basearch' (Nathaniel McCallum)
  - Add nevra forms for repoquery command (Jaroslav Rohel)
  - Fix UnicodeDecodeError during checkSig() on non UTF-8 locale (RhBug:1397848)
    (Jaroslav Rohel)
  - Add dnf option --noautoremove (RhBug:1361424) (Jaroslav Mracek)
  - Add group argument for mark command (Jaroslav Mracek)
  - Report problems for each pkg during gpgcheck (RhBug:1387925) (Jaroslav
    Mracek)
  - fix minor spelling mistakes (René Genz)
  - Print warning when wrong delimiter in cache (RhBug:1332099) (Vítek Hoch)
  - Fix the loading of config for dnf-automatic command_email (RhBug:1470116)
    (Jaroslav Rohel)
  - Enable download progress bar if redirected output (RhBug:1161950) (Jaroslav
    Mracek)
  - Support short abbrevations of commands (RhBug:1320254) (Vítek Hoch)
  - Remove unused variables kwargs (Jaroslav Mracek)
  - Not reinstall packages if install from repository-pkgs used (Jaroslav Mracek)
  - bump dnf version to 2.6.0 (Igor Gnatenko)
  - spec: use python2- prefix for hawkey (Igor Gnatenko)
  - spec: use sphinx-build binary rather than package name (Igor Gnatenko)
  - spec: python-bugzilla is not needed for building (Igor Gnatenko)
  - spec: fix instructions about generating tarball (Igor Gnatenko)
  - po: Update translations (Igor Gnatenko)
  - Add an example of installation without weak-deps  (RhBug:1424723) (Jaroslav
    Mracek)
  - Add detection if mirrorlist is used for metalink (Jaroslav Mracek)
  - Rename variable (Jaroslav Mracek)
  - Add --groupmember option to repoquery (RhBug:1462486) (Jaroslav Mracek)
  - Check checksum for local repositories (RhBug:1314405) (Jaroslav Mracek)
  - Spelling fixes (Ville Skyttä)
  - repoquery --obsoletes prints obsoletes (RhBug:1457368) (Matěj Cepl)
  - Provide pkg name hint for icase (RhBug:1339280) (RhBug:1138978) (Jaroslav
    Mracek)
  - Return only latest pkgs for "dnf list upgrades" (RhBug:1423472) (Jaroslav
    Mracek)
  - cleanup code not executed in case of exception (Marek Blaha)
  - Allow to modify message for user confirmation (Jaroslav Mracek)
  - Add autocheck_running_kernel config option (Štěpán Smetana)
  - Inform about skipped packages for group install (RhBug:1427365) (Jaroslav
    Mracek)
  - Remove group remove unneeded pkgs (RhBug:1398871) (RhBug:1432312) (Jaroslav
    Mracek)
  - po: update translations (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> 2.5.1-1
changelog:
  - bump version to 2.5.1 + update release notes (Jaroslav Mracek)
  - Fix: dnf update --refresh fails for repo_gpgcheck=1 (RhBug:1456419) (Daniel
    Mach)
  - Don't try to cut datetime message (Jaroslav Rohel)
  - Use localized datetime format (RhBug:1445021) (Jaroslav Rohel)
  - Work with locale date (Jaroslav Rohel)
  - Use ISO 8601 time format in logfile (Jaroslav Rohel)
  - Add unitest to prevent callbacks breakage (Jaroslav Mracek)
  - Provide compatibility for tools that do not use total_drpms (Jaroslav Mracek)
  - Requires strict usage of repoquery --recursive (Jaroslav Mracek)
  - Fix output for --resolve with --installed for repoquery (Jaroslav Mracek)
  - Remove unnecessary inheritance of yum conf options (Martin Hatina)
  - Remove alwaysprompt option support (RhBug:1400714) (Jaroslav Rohel)
  - Allow to install groups with multilib_policy=all (RhBug:1250702) (Jaroslav
    Mracek)
  - Redesign Base.install() to provide alternatives (Jaroslav Mracek)
  - Report excludes includes into logger.debug (RhBug:1381988) (Jaroslav Mracek)
  - Provide new API to parse string to NEVRA () (Jaroslav Mracek)
  - Add more repoquery querytags (Jaroslav Rohel)
  - Not hide tracebacks (Jaroslav Mracek)
  - Solve error handling for get attr in yumdb (RhBug:1397848) (Jaroslav Mracek)
  - Provide a better error if throttle to low (RhBug:1321407) (Jaroslav Mracek)
  - Change timeout to 30s (RhBug:1291867) (Jaroslav Mracek)
  - Add pre_transaction hook for plugins (Jaroslav Rohel)
  - Not download metadata if "dnf history [info|list|userinstalled]" (Jaroslav
    Mracek)
  - Not download metadata if "dnf repo-pkgs <repo> list --installed" (Jaroslav
    Mracek)
  - Not download metadata if "dnf list --installed" (RhBug:1372895) (Jaroslav
    Mracek)
  - Format pkg str for repoquery --tree due to -qf (RhBug:1444751) (Jaroslav
    Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.5.0-1
changelog:
  - Update release notes (Jaroslav Mracek)
  - Change documentation for history --userinstalled (RhBug:1370062) (Jaroslav
    Mracek)
  - Change example to install plugin using versionlock (Jaroslav Mracek)
  - Remove unused method Goal.best_run_diff() (Jaroslav Mracek)
  - Change recommendations if some problems appear (RhBug:1293067) (Jaroslav
    Mracek)
  - Report problems for goals with optional=True (Jaroslav Mracek)
  - Format resolve problem messages in method in dnf.util (Jaroslav Mracek)
  - Enhance reports about broken dep (RhBug:1398040)(RhBug:1393814) (Jaroslav
    Mracek)
  - search: do not generate error if not match anything (RhBug:1342157) (Jaroslav
    Rohel)
  - Check if any plugin is removed in transaction (RhBug:1379906) (Jaroslav
    Mracek)
  - Show progress for DRPM (RhBug:1198975) (Jaroslav Mracek)
  - Fix disabledplugin option (Iavael)
  - [history]: fixed info command merged output (Eduard Čuba)


author: Jaroslav Mracek <jmracek@redhat.com> 2.4.1-1
changelog:
  - bump version to 2.4.1 + update release notes (Jaroslav Mracek)
  - goal: do not mark weak dependencies as userinstalled (Igor Gnatenko)
  - fix typo in supplements (RhBug:1446756) (Igor Gnatenko)
  - Describe present behavior of installonly_limit conf option (Jaroslav Mracek)
  - Reset all transaction for groups if Base.reset() (RhBug:1446432) (Jaroslav
    Mracek)
  - Explain how add negative num for --latest-limit (RhBug:1446641) (Jaroslav
    Mracek)
  - trivial: don't duplicate option names (Igor Gnatenko)
  - Add support for --userinstalled for repoquery command (RhBug:1278124)
    (Jaroslav Rohel)
  - Fix header of search result sections (RhBug:1301868) (Jaroslav Rohel)
  - Filter out src for get_best_selector (Jaroslav Mracek)
  - Add minor changes in formating of documentation (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.4.0-1
changelog:
  - po: Update translations (Igor Gnatenko)
  - po: Update translations (Igor Gnatenko)
  - introduce '--enableplugin' option (Martin Hatina)
  - Improve detection of file patterns (Jaroslav Mracek)
  - Add method _get_nevra_solution() for subject (Jaroslav Mracek)
  - Do not add "*" into query filter in _nevra_to_filters() (Jaroslav Mracek)
  - Remove usage of nevra_possibilities_real() (Jaroslav Mracek)
  - Increase performance for downgrade_to() (Jaroslav Mracek)
  - Add additional keys for get_best_query() (Jaroslav Mracek)
  - Increase performance for get_best_selector() (Jaroslav Mracek)
  - Increase performance for get_best_query() (Jaroslav Mracek)
  - Fix "Package" text translation (RhBug:1302935) (Jaroslav Rohel)
  - Create a warning if releasever is None (Jaroslav Mracek)
  - Adds cost, excludepkgs, and includepkgs to Doc (RhBug:1248684) (Jaroslav
    Mracek)
  - Change auto-detection of releasever in empty installroot (Jaroslav Mracek)
  - Do not load system repo for makecache command (RhBug:1441636) (Jaroslav
    Mracek)
  - Do not raise assertion if group inst and rmv pkgs (RhBug:1438438) (Jaroslav
    Mracek)
  - yum layer using python3 (Martin Hatina)
  - Filter url protocols for baseurl in Package.remote_location (Jaroslav Mracek)
  - Add armv5tl to arm basearch (Neal Gompa)
  - Setup additional parameters for handler for remote packages (Jaroslav Mracek)
  - Use same method for user/password setting of every librepo.handle (Jaroslav
    Mracek)
  - Fix PEP8 violations and remove unused import (Jaroslav Mracek)
  - Handle unknown file size in download progress (Jaroslav Mracek)
  - Allow to delete cashed files from command line by clean command (Jaroslav
    Mracek)
  - Save command line packages into chachedir (RhBug:1256313) (Jaroslav Mracek)
  - Add progress bar for download of commandline pkgs (RhBug:1161950) (Jaroslav
    Mracek)
  - Fix minor typo Closes: #781 Approved by: ignatenkobrain (Yuri Chornoivan)
  - Mark unremoved packages as failed (RhBug:1421244) (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.3.0-1
changelog:
  - update release notes (Jaroslav Mracek)
  - po: Update translations (Igor Gnatenko)
  - Add require of subcommand for repo-pkgs command (Jaroslav Rohel)
  - shell: Fix commands initialization (Jaroslav Rohel)
  - po: Update translations (Igor Gnatenko)
  - Add support for --location for repoquery command (RhBug:1290137) (Jaroslav
    Mracek)
  - Add support of --recursive with --resolve in repoquery (Jaroslav Mracek)
  - Add --recursive option for repoquery (Jaroslav Mracek)
  - Add --whatconflicts for repoquery (Jaroslav Mracek)
  - Add support for multiple options for repoquery (Jaroslav Mracek)
  - Add multiple format option for repoquery (Jaroslav Mracek)
  - Fix problem with "dnf repoquery --querytags" (Jaroslav Mracek)
  - Add support of 3 options into updateinfo command (Jaroslav Mracek)
  - Add inheritance of reason for obsoleting packages (Jaroslav Mracek)
  - Mark installonlypkgs correctly as user installed (RhBug:1349314) (Jaroslav
    Mracek)
  - Solve a problem with None names in callbacks (Jaroslav Mracek)
  - Solve a problem for callbacks (Jaroslav Mracek)
  - Revert "remove: CLI: --randomwait" (RhBug:1247122) (Ondřej Sojka)
  - po: update translations (Igor Gnatenko)
  - po: update translations (Igor Gnatenko)
  - Set strings for translations (RhBug:1298717) (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.2.0-1
changelog:
  - bump version to 2.2.0 + update release notes (Jaroslav Mracek)
  - Add documentation of new API callback actions (RhBug:1411432) (Jaroslav
    Mracek)
  - Fix python2 doesn't have e.__traceback__ attribute (Jaroslav Mracek)
  - Do not report erasing package as None. (Jaroslav Mracek)
  - Display scriplet for transaction (RhBug:1411423) (RhBug:1406130) (Jaroslav
    Mracek)
  - Add support for rpmcallbacks (Jaroslav Mracek)
  - AUTHORS: updated (Jaroslav Rohel)
  - Not show expiration check if no repo enabled (RhBug:1369212) (Jaroslav
    Mracek)
  - Fix changelog in dnf spec file (Jaroslav Mracek)
  - po: update translations (Igor Gnatenko)
  - Add myself (mhatina) to AUTHORS (Martin Hatina)
  - po: Update translations (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> 2.1.1-1
changelog:
  - bump version to 2.1.1 + update release notes (Jaroslav Mracek)
  - Sync the translation with locale (Jaroslav Rohel)
  - Disable exceptions in logging (Jaroslav Rohel)
  - Fix severity info in "updateinfo info" (Jaroslav Mracek)
  - Add help for shell commands (Jaroslav Rohel)
  - shell: no crash if missing args (Jaroslav Rohel)
  - proper check of releasever, when using installroot (RhBug:1417542) (Martin
    Hatina)
  - Inform about "Cache was expired" with "dnf clean" (RhBug:1401446) (Jaroslav
    Mracek)
  - crypto: port to the official gpgme bindings (Igor Gnatenko)
  - Fix doc example for `fill_sack` method (Lubomír Sedlář)
  - po: update translations (Igor Gnatenko)
  - Not try to install src package (RhBug:1416699) (Jaroslav Mracek)
  - Add usage for add_new_repo() with repofrompath option (Jaroslav Mracek)
  - Add new API add_new_repo() in RepoDict() (RhBug:1427132) (Jaroslav Mracek)
  - docs: adds documentation for dnf-automatic's Command and CommandEmail
    emitters. (rhn)
  - docs: fixes typo in section description in automatic (rhn)
  - Adds new emitters for dnf-automatic. (rhn)
  - po: update translations (Igor Gnatenko)
  - Ensure that callback will not kill dnf transaction (Jaroslav Mracek)
  - Ensure that name will be not requested on None (RhBug:1397047) (Jaroslav
    Mracek)
  - Python 3.6 invalid escape sequence deprecation fix (Ville Skyttä)
  - display severity information in updateinfo (#741) (Michael Mraka)
  - po: update translations (Igor Gnatenko)
  - Add --nodocs option for dnf (RhBug:1379628) (Jaroslav Mracek)
  - Replace passive plugin noroot (Jaroslav Mracek)
  - Fix incorrect formating of string for logger.info (Jaroslav Mracek)
  - Not print help if empty line in script for shell command (Jaroslav Mracek)
  - Run fill_sack after all repos have changed status (Jaroslav Mracek)
  - Remove Hawkey object from repo if rerun of dnf.fill_sack (Jaroslav Mracek)
  - util/on_metered_connection: be more polite to failures (Igor Gnatenko)
  - cosmetic: i18n: rewording of 'Login user' (RhBug:1424939) (Jan Silhan)
  - Fix problem with --whatprovides in repoquery (RhBug:1396992) (Jaroslav
    Mracek)
  - Add -a and --all option for repoquery (RhBug:1412970) (Jaroslav Mracek)
  - Change camel-case of output of grouplist (Jaroslav Mracek)
  - Minor correction in release notes (Jaroslav Mracek)
  - Minor correction in release notes (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.1.0-1
changelog:
  - bump version to 2.1.0 + update release notes (Jaroslav Mracek)
  - Fix problem with --recent option in repoquery (Jaroslav Mracek)
  - Fix problem with duplicated --obsoletes (RhBug:1421835) (Jaroslav Mracek)
  - Python 3.6 invalid escape sequence deprecation fixes (Ville Skyttä)
  - Add --repoid as alias for --repo (Jaroslav Mracek)
  - introduce dnf.base.Base.update_cache() (Martin Hatina)
  - Try to install uninstalled packages if group installed (Jaroslav Mracek)
  - Enable search of provides in /usr/(s)bin (RgBug:1421618) (Jaroslav Mracek)
  - style: ignore E261 (Igor Gnatenko)
  - makecache: do not run on metered connections (RhBug:1415711) (Igor Gnatenko)
  - change '--disableplugins' to '--disableplugin' (Martin Hatina)
  - cosmetic: removed unused import (Jan Silhan)
  - show hint how to display why package was skipped (RhBug:1417627) (Jan Silhan)
  - spec: add information how to obtain archive (Igor Gnatenko)
  - fix messages (UX) (Jaroslav Rohel)
  - zanata update (Jan Silhan)


author: Jaroslav Mracek <jmracek@redhat.com> 2.0.1-1
changelog:
  - bump version to 2.0.1 + update release notes (Jaroslav Mracek)
  - introduce cli 'obsoletes' option (Martin Hatina)
  - swap tids if they are in wrong order (RhBug:1409361) (Michael Mraka)
  - Disable shell command recursion (Jaroslav Rohel)
  - Honor additional arguments for DNF shell repo list command (Jaroslav Rohel)
  - don't traceback when bug title is not set (Michael Mraka)
  - introducing list-security, info-security etc. commands (Michael Mraka)
  - Add lsedlar to contributors list (Lubomír Sedlář)
  - Return just name from Package.source_name (Lubomír Sedlář)
  - introduce dnf.conf.config.MainConf.exclude() (Martin Hatina)
  - systemd: Disable daemons on ostree-managed systems (Colin Walters)
  - introduced dnf.base.Base.autoremove() (RhBug:1414512) (Martin Hatina)
  - po: update translations (Igor Gnatenko)
  - build: use relative directory for translations (Igor Gnatenko)
  - Temporary eliminate a problem with install remove loop (Jaroslav Mracek)
  - Handle info message when DRPM wastes data (RhBug:1238808) (Daniel
    Aleksandersen)
  - Fix output for better translation (RhBug:1386085) (Abhijeet Kasurde)
  - yum layer refactored (Martin Hatina)
  - return values changed to match yum's (Martin Hatina)
  - Reword sentence after removing package (RhBug:1286553) (Abhijeet Kasurde)
  - Minor documentation revisions (Mark Szymanski)
  - Minor code fix (Abhijeet Kasurde)
  - automatic: email emitter date header (David Greenhouse)
  - Solve problem when no repo and only rpms with upgrade command (Jaroslav
    Mracek)
  - bash_completion: use system-python if it's available (Igor Gnatenko)
  - spec: use system-python for dnf-yum as well (Igor Gnatenko)
  - comps/groups: fix tests (Michal Luscon)
  - comps: adjust group_upgrade to new CompsTransPkg style (Michal Luscon)
  - groups: refactored installation (RhBug:1337731, RhBug:1336879) (Michal
    Luscon)
  - Increase requirement for hawkey (Jaroslav Mracek)
  - Change reporting problems for downgradePkgs() (Jaroslav Mracek)
  - Use selector for base.package_upgrade() (Jaroslav Mracek)
  - Add usage of selectors for base.package_install() (Jaroslav Mracek)
  - Use selector for base.package_downgrade() (Jaroslav Mracek)
  - Redirect base.downgrade() to base.downgrade_to() (Jaroslav Mracek)
  - Enable wildcard for downgrade command (RhBug:1173349) (Jaroslav Mracek)
  - Refactor downgrade cmd behavior (RhBug:1329617)(RhBug:1283255) (Jaroslav
    Mracek)
  - Redirect logger.info into stderr for repolist (RhBug:1369411) (Jaroslav
    Mracek)
  - Redirect logger.info into stderr for repoquery (RhBug:1243393) (Jaroslav
    Mracek)
  - Add possibility for commands to redirect logger (Jaroslav Mracek)
  - Put information about metadata expiration into stdout (Jaroslav Mracek)
  - Change warning about added repo into info (RhBug:1243393) (Jaroslav Mracek)
  - Move grouplist output from logger into stdout (Jaroslav Mracek)
  - let repo exclude work the same way as global exclude (Michael Mraka)
  - Fix wrong assumptions about metalinks (RhBug:1411349) (Jaroslav Mracek)
  - handle --disablerepo/--enablerepo properly with strict (RhBug:1345976)
    (Štěpán Smetana)
  - Add fix to notify user about no repos (RhBug:1369212) (Abhijeet Kasurde)
  - Add information about "hidden" option in dnf doc (RhBug:1349247) (Abhijeet
    Kasurde)
  - Fix for 'history package-list' (Amit Upadhye)
  - Enable multiple args for repoquery -f (RhBug:1403930) (Jaroslav Mracek)
  - Set default repo.name as repo._section (Jaroslav Mracek)
  - Create from self.forms value forms in cmd.run() (Jaroslav Mracek)
  - Add description of swap command into documentation (Jaroslav Mracek)
  - Add swap command (RhBug:1403465) (RhBug:1110780) (Jaroslav Mracek)
  - Solve a problem with shell when empty line or EOF (Jaroslav Mracek)
  - shell: add history of commands (RhBug:1405333) (Michal Luscon)
  - Add info if no files with repoquery -l (RhBug:1254879) (Jaroslav Mracek)
  - po: update translations (Igor Gnatenko)
  - po: migrate to zanata python client and trivial fixes in build (Igor
    Gnatenko)
  - po: include all possible languages from zanata (Igor Gnatenko)
  - po: include comments for translations (Igor Gnatenko)
  - shell: catch exceptions from depsolving (Michal Luscon)
  - shell: update documentation (Michal Luscon)
  - shell: add transaction reset cmd (Michal Luscon)
  - shell: add transaction resolve cmd (Michal Luscon)
  - shell: provide rewritable demands for cmds (Michal Luscon)
  - shell: catch tracebacks from shlex (Michal Luscon)
  - shell: handle ctrl+D more gracefully (Michal Luscon)
  - groups: set demands in configure instead of run (Michal Luscon)
  - shell: implement config cmd (Michal Luscon)
  - shell: add help (Michal Luscon)
  - shell: make alias repo list -> repolist (Michal Luscon)
  - shell: catch exceptions from do_transaction (Michal Luscon)
  - shell: resolve transaction in ts run (Michal Luscon)
  - shell: add default value for internal methods argument (Michal Luscon)
  - shell: create run alias for ts run (Michal Luscon)
  - shell: add ts list cmd (Michal Luscon)
  - shell: refill sack after every successful repo cmd (Michal Luscon)
  - shell: allow running multiple transaction in one session (Michal Luscon)
  - shell: add ts command (Michal Luscon)
  - shell: catch cmd parsing and run exceptions (Michal Luscon)
  - shell: allow to run scripts (Michal Luscon)
  - shell: add repo cmd (Michal Luscon)
  - shell: add resolving + transaction run support (Michal Luscon)
  - shell: implement quit method (Michal Luscon)
  - shell: add custom cmds stubs (Michal Luscon)
  - shell: implement basic logic (Michal Luscon)
  - shell: register new cmd (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 2.0.0-1
changelog:
  - tests: catch ModuleNotFoundError as well (Igor Gnatenko)
  - Switch out automatic service for automatic-download and automatic-install
    (Pat Riehecky)
  - Make upgrade-to alias for upgrade (RhBug:1327999) (Jaroslav Mracek)
  - skip appending an empty option (RhBug: 1400081) (Michael Mraka)
  - Add description of nevra foems for commands and autoremove args (Jaroslav
    Mracek)
  - Add support of arguments nevra forms for autoremove command (Jaroslav Mracek)
  - Add nevra forms for remove command (Jaroslav Mracek)
  - Add nevra forms for install command (Jaroslav Mracek)
  - add bin/yum into .gitignore (Michal Luscon)
  - clean: acquire all locks before cleaning (RhBug:1293782) (Michal Luscon)
  - Change hawkey version requirement (Jaroslav Mracek)
  - Add information for translators (RhBug:1386078) (Jaroslav Mracek)
  - Change info to warning for clean repoquery output (RhBug:1358245) (Jaroslav
    Mracek)
  - Add description of pkg flag for Query (RhBug:1243393) (Jaroslav Mracek)
  - Add minor changes in documentation (Jaroslav Mracek)
  - Do not always overwrite the name with the repo ID (Neal Gompa)


author: Michal Luscon <mluscon@redhat.com> 1.1.9-2
changelog:
  - Revert "group: treat mandatory pkgs as mandatory if strict=true" (RhBug:1337731)
  - enforce-api: reflect changes from #992475 in completion_helper (RhBug:1338504)
  - enforce-api: add compatibility methods for renamed counterparts (RhBug:1338564)


author: Igor Gnatenko <ignatenko@redhat.com> 1.1.9-1
changelog:
  - doc: release notes 1.1.9 (Igor Gnatenko)
  - spec: correctly set up requirements for python subpkg (Igor Gnatenko)
  - spec: follow new packaging guidelines & make compatible with el7 (Igor
    Gnatenko)
  - zanata update (Jan Silhan)
  - enforce-api: add missing bits of Base class (Michal Luscon)
  - help: unify help msg strings (Michal Luscon)
  - enforce-api: decorate Base class (Michal Luscon)
  - util: add decorator informing users of nonapi functions (Michal Luscon)
  - Added description for 'autoremove' in dnf help (RhBug:1324086) (Abhijeet
    Kasurde)
  - i18n: fixup for 0db13feed (Michal Luscon)
  - i18n: use fallback mode if terminal does not support UTF-8 (RhBug:1332012)
    (Michal Luscon)
  - Revert "spec: follow new packaging guidelines & make compatible with el7"
    (Michal Luscon)
  - move autoglob feature directly to filterm() and filter() (Michael Mraka)
  - group: treat mandatory pkgs as mandatory if strict=true (RhBug:1292892)
    (Michal Luscon)
  - locks: fix lock paths in tmpfsd config since cachedir has been changed
    (Michal Luscon)
  - remove formating from translation strings (Michal Luscon)
  - base: set diskspace check filter before applying the filters (RhBug:1328674)
    (Michal Luscon)
  - order repos by priority and cost (Michael Mraka)
  - spec: follow new packaging guidelines & make compatible with el7 (Igor
    Gnatenko)
  - bash-completion: first try to set fallback to BASH_COMPLETION_COMPATDIR (Igor
    Gnatenko)
  - updated copyrights for files changed this year (Michael Mraka)
  - cli: fix warning from re.split() about non-empty pattern (RhBug:1286556)
    (Igor Gnatenko)
  - update authors file (Michal Luscon)
  - Define __hash__ method for YumHistoryPackage (RhBug:1245121) (Max Prokhorov)


author: Michal Luscon <mluscon@redhat.com> 1.1.8-1
changelog:
  - refactor: repo: add md_expired property (Michal Domonkos)
  - test: fix cachedir usage in LocalRepoTest (Michal Domonkos)
  - clean: operate on all cached repos (RhBug:1278225) (Michal Domonkos)
  - refactor: repo: globally define valid repoid chars (Michal Domonkos)
  - RepoPersistor: only write to disk when requested (Michal Domonkos)
  - clean: remove dead subcommands (Michal Domonkos)
  - doc: --best in case of problem (RhBug:1309408) (Jan Silhan)
  - Added fix for correct error message for group info (RhBug:1209649) (Abhijeet
    Kasurde)
  - repo: don't get current timeout for librepo (RhBug:1272977) (Igor Gnatenko)
  - doc: fix default timeout value (Michal Luscon)
  - cli: inform only about nonzero md cache check interval (Michal Luscon)
  - base: report errors in batch at the end of md downloading (Michal Luscon)
  - repo: produce more sane error if md download fails (Michal Luscon)
  - zanata update (RhBug:1322226) (Jan Silhan)
  - doc: Fixed syntax of `assumeyes` and `defaultyes` ref lables in
    `conf_ref.rst` (Matt Sturgeon)
  - Fix output headers for dnf history command (Michael Dunphy)
  - doc: change example of 'dnf-command(repoquery)' (Jaroslav Mracek)
  - makacache.service: shorten journal logs (RhBug:1315349) (Michal Luscon)
  - config: improve UX of error msg (Michal Luscon)
  - Added user friendly message for out of range value (RhBug:1214562) (Abhijeet
    Kasurde)
  - doc: prefer repoquery to list (Jan Silhan)
  - history: fix empty history cmd (RhBug:1313215) (Michal Luscon)
  - Very minor tweak to the docs for `--assumeyes` and `--assumeno` (Matt
    Sturgeon)


author: Michal Luscon <mluscon@redhat.com> 1.1.7-1
changelog:
  - Add `/etc/distro.repos.d` as a path owned by the dnf package (Neal Gompa
    (ニール・ゴンパ))
  - Change order of search and add new default repodirs (RhBug:1286477) (Neal
    Gompa (ニール・ゴンパ))
  - group: don't mark available packages as installed (RhBug:1305356) (Jan
    Silhan)
  - history: adjust demands for particular subcommands (RhBug:1258503) (Michal
    Luscon)
  - Added extension command for group list (RhBug:1283432) (Abhijeet Kasurde)
  - perf: dnf repository-packages <repo> upgrade (RhBug:1306304) (Jan Silhan)
  - sack: Pass base.conf.substitutions["arch"] to sack in build_sack() function.
    (Daniel Mach)
  - build: make python2/3 binaries at build time (Michal Domonkos)
  - fix dnf history traceback (RhBug:1303149) (Jan Silhan)
  - cli: truncate expiration msg (RhBug:1302217) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.6-1
changelog:
  - history: don't fail if there is no history (RhBug:1291895) (Michal Luscon)
  - Allow dnf to use a socks5 proxy, since curl support it (RhBug:1256587)
    (Michael Scherer)
  - output: do not log rpm info twice (RhBug:1287221) (Michal Luscon)
  - dnf owns /var/lib/dnf dir (RhBug:1294241) (Jan Silhan)
  - Fix handling of repo that never expire (RhBug:1289166) (Jaroslav Mracek)
  - Filter out .src packages when multilib_proto=all (Jeff Smith)
  - Enable string for translation (RhBug:1294355) (Parag Nemade)
  - Let logging format messages on demand (Ville Skyttä)
  - clean: include metadata of local repos (RhBug:1226322) (Michal Domonkos)
  - completion: Install to where bash-completion.pc says (Ville Skyttä)
  - spec: bash completion is not a %config file (Ville Skyttä)
  - Change assertion handling for rpmsack.py (RhBug:1275878) (Jaroslav Mracek)
  - cli: fix storing arguments in history (RhBug:1239274) (Ting-Wei Lan)


author: Michal Luscon <mluscon@redhat.com> 1.1.5-1
changelog:
  - base: save group persistor only after successful transaction (RhBug:1229046)
    (Michal Luscon)
  - base: do not clean tempfiles after remove transaction (RhBug:1282250) (Michal
    Luscon)
  - base: clean packages that do not belong to any trans (Michal Luscon)
  - upgrade: allow group upgrade via @ syntax (RhBug:1265391) (Michal Luscon)
  - spec: Mark license files as %license where available (Ville Skyttä)
  - Remove unused imports (Ville Skyttä)
  - Spelling fixes (Ville Skyttä)
  - Fix typos in documentation (Rob Cutmore)
  - parser: add support for braces in substitution (RhBug:1283017) (Dave
    Johansen)
  - completion_helper: Don't omit "packages" from clean completions (Ville
    Skyttä)
  - bash-completion: Avoid unnecessary python invocation per _dnf_helper (Ville
    Skyttä)
  - repo: Download drpms early (RhBug:1260421) (Ville Skyttä)
  - clean: Don't hardcode list of args in two places (Ville Skyttä)
  - cli: don't crash if y/n and sys.stdin is None (RhBug:1278382) (Adam
    Williamson)
  - sp err "environement" -> "environment" (Michael Goodwin)
  - Remove -OO from #!/usr/bin/python (RhBug:1230820) (Jaroslav Mracek)
  - cli: warn if plugins are disabled (RhBug:1280240) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.4-1
changelog:
  - AUTHORS: updated (Jan Silhan)
  - query: add compatibility methods (Michal Luscon)
  - query: add recent, extras and autoremove methods to Query (Michal Luscon)
  - query: add duplicated and latest-limit queries into api (Michal Luscon)
  - format the email message with its as_string method (Olivier Andrieu)
  - added dnf.i18n.ucd* functions as deprecated API (Jan Silhan)
  - i18n: unicode resulting translations (RhBug:1278031) (Jan Silhan)
  - po: get rid of new lines in translation (Jan Silhan)
  - output: add skip count to summary (RhBug:1264032) (Michal Domonkos)
  - groups: fix environment upgrade (Michal Luscon)
  - Fix plural strings extraction (RhBug:1209056) (Baurzhan Muftakhidinov)
  - po: fixed malformed beginning / ending (Jan Silhan)
  - zanata update (Jan Silhan)
  - cli: prevent tracebacks after C^ (RhBug:1274946) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.3-1
changelog:
  - Update command_ref.rst (Jaroslav Mracek)
  - Change in automatic.conf email settings to prevent email error with default
    sender name (Jaroslav Mracek)
  - Replace assert_called() with assert_called_with() for Py35 support (Neal
    Gompa (ニール・ゴンパ))
  - doc: improve documentation (Jaroslav Mracek)
  - doc: update the instructions related to nightly builds (Radek Holy)
  - Revert "Add the continuous integration script" (Radek Holy)
  - Revert "cosmetic: ci: fix the Copr name in the README" (Radek Holy)
  - Fix typo in Command.canonical's doctring (Timo Wilken)
  - base: group_install is able to exclude mandatory packages
    (Related:RhBug:1199868) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.1.2-1
changelog:
  - doc: release notes 1.1.2 (Michal Luscon)
  - sanitize non Unicode command attributes (RhBug:1262082) (Jan Silhan)
  - don't redirect confirmation to stderr RhBug(1258364) (Vladan Kudlac)
  - clean: add rpmdb to usage (Vladan Kudlac)
  - completion_helper: don't get IndexError (RhBug:1250038) (Vladan Kudlac)
  - add --downloadonly switch (RhBug:1048433) (Adam Salih)
  - Add globbing support to base.by_provides() (RhBug:11259650) (Valentina
    Mukhamedzhanova)
  - spec: packaging python(3)-dnf according to new Fedora guidelines
    (RhBug:1260198) (Jaroslav Mracek)
  - Bug in Source0: URL in dnf.spec fixed (RhBug:126255) (Jaroslav Mracek)
  - To dnf.spec added provides dnf-command(command name) for 21 dnf commands
    (RhBug:1259657) (jmracek)
  - Expire repo cache on failed package download (Valentina Mukhamedzhanova)
  - cosmetic: ci: fix the Copr name in the README (Radek Holy)
  - Add the continuous integration script (Radek Holy)
  - Set proper charset on email in dnf-automatic (RhBug:1254982) (Valentina
    Mukhamedzhanova)
  - doc: improve configuration description (RhBug:1261766) (Michal Luscon)
  - remove: show from which repo a package is (Vladan Kudlac)
  - list: show from which repo a package is (RhBug:1234491) (Vladan Kudlac)
  - Spelling/grammar fixes (Ville Skyttä)
  - install: fix crash when terminal window is small (RhBug:1256531) (Vladan
    Kudlac)
  - install: mark unification of the progress bar (Vladan Kudlac)
  - fix translations in python3 (RhBug:1254687) (Michal Luscon)
  - group: CompsQuery now returns group ids (RhBug:1261656) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.1-2
changelog:
  - fix access to demands (RhBug:1259194) (Jan Silhan)
  - make clean_requiremets_on_remove=True (RhBug:1260280) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.1.1-1
changelog:
  - Fixed typo (RhBug:1249319) (Adam Salih)
  - fixed downgrade with wildcard (RhBug:1234763) (Adam Salih)
  - reorganize logic of get_best_selector(s) and query (RhBug:1242946) (Adam
    Salih)
  - completion_helper: don't crash if exception occurred (RhBug:1225225) (Igor
    Gnatenko)
  - base: expire cache if repo is not available (Michal Luscon)
  - Don't suggest --allowerasing if it is enabled (Christian Stadelmann)
  - translation works in python3 (RhBug:1254687) (Jan Silhan)
  - logrotate less often (RhBug:1247766) (Jan Silhan)
  - implement dnf mark command (RhBug:1125925) (Michal Luscon)
  - groups: use comps data to migrate persistor (Michal Luscon)
  - groups: preserve api compatibility (Michal Luscon)
  - groups: use persistor data for removing env/group (Michal Luscon)
  - persistor: add migration and bump version (Michal Luscon)
  - persistor: store name and ui_name of group (Michal Luscon)
  - show real metadata timestamp on the server in verbose mode (Jan Silhan)
  - lock: make rpmdb lock blocking (RhBug:1210289) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.0-2
changelog:
  - update: installonly pkgs are not shown in both install and skipped section
    (RhBug:1252415) (Jan Silhan)
  - output: sort skipped packages (Jan Silhan)
  - output: skipped conflicts are set (RhBug:1252032) (Jan Silhan)
  - keep the dwongrading package installed if transaction fails (RhBug:1249379)
    (Jan Silhan)
  - don't store empty attributes (RhBug:1246928) (Michael Mraka)
  - doc: correct dnf.conf man section (RhBug:1245349) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.0-1
changelog:
  - print skipped pkg with broken deps too (Related:RhBug:1210445) (Jan Silhan)
  - history: set commands output as default (RhBug:1218401) (Michal Luscon)
  - Update es.po. save:guardar -> save:ahorrar (Máximo Castañeda)
  - cosmetic: option arg in Base.*install is replaced with strict (Jan Silhan)
  - group: don't fail on first non-existing group (Jan Silhan)
  - install: skips local pkgs of lower version when strict=0
    (Related:RhBug:1227952) (Jan Silhan)
  - install: skip broken/conflicting packages in groups when strict=0 (Jan
    Silhan)
  - install: skip broken/conflicting packages when strict=0 (Jan Silhan)
  - implemented `strict` config option working in install cmd (RhBug:1197456)
    (Jan Silhan)
  - fixed 'dnf --quiet repolist' lack of output (RhBug:1236310) (Nick Coghlan)
  - Add support for MIPS architecture (Michal Toman)
  - package: respect baseurl attribute in localPkg() (RhBug:1219638) (Michal
    Luscon)
  - Download error message is not written on the same line as progress bar
    anymore (RhBug: 1224248) (Adam Salih)
  - dnf downgrade does not try to downgrade not installed packages (RhBug:
    1243501) (max9631)
  - pkgs not installed due to rpm error are reported (RhBug:1207981) (Adam Salih)
  - dnf install checks availability of all given packages (RhBug:1208918) (Adam
    Salih)
  - implemented install_weak_deps config option (RhBug:1221635) (Jan Silhan)
  - ignore SIGPIPE (RhBug:1236306) (Michael Mraka)
  - always add LoggingTransactionDisplay to the list of transaction displays
    (RhBug:1234639) (Radek Holy)
  - Add missing FILES section (RhBug: 1225237) (Adam Salih)
  - doc: Add yum vs dnf hook information (RhBug:1244486) (Parag Nemade)
  - doc: clarify the expected type of the do_transactions's display parameter
    (Radek Holy)
  - apichange: add dnf.cli.demand.DemandSheet.transaction_display (Radek Holy)
  - apichange: add dnf.callback.TransactionProgress (Radek Holy)
  - move the error output from TransactionDisplay into a separate class (Radek
    Holy)
  - rename TransactionDisplay.errorlog to TransactionDisplay.error (Radek Holy)
  - report package verification as a regular RPM transaction event (Radek Holy)
  - rename TransactionDisplay.event to TransactionDisplay.progress (Radek Holy)
  - apichange: deprecate dnf.callback.LoggingTransactionDisplay (Radek Holy)
  - use both CliTransactionDisplay and demands.transaction_display (Radek Holy)
  - apichange: accept multiple displays in do_transaction (Radek Holy)
  - support multiple displays in RPMTransaction (Radek Holy)


author: Michal Luscon <mluscon@redhat.com> 1.0.2-3
changelog:
  - Fix regression in group list command introduced by 02c3cc3 (Adam Salih)
  - AUTHORS: updated (Jan Silhan)
  - stop saying "experimental" (Matthew Miller)


author: Michal Luscon <mluscon@redhat.com> 1.0.2-1
changelog:
  - give --allowerasing hint when error occurs during resolution (RhBug:1148630)
    (Jan Silhan)
  - show --best hint with skipped packages every time (RhBug:1176351) (Jan Silhan)
  - notify about skipped packages when upgrade (RhBug:1210445) (Jan Silhan)
  - dnf-automatic: Document apply_updates=no behavior wrt keepcache (Ville
    Skyttä)
  - persistor: share functionality of JSONDB (Jan Silhan)
  - keepcache=0 persists packages till next successful transaction
    (RhBug:1220074) (Jan Silhan)
  - do not use releasever in cache path (related to RhBug:1173107) (Michael
    Mraka)
  - doc: add dnf list use case (Michal Luscon)
  - repo: allow ntlm proxy auth (RhBug:1219199) (Michal Luscon)
  - add a script which updates release notes (Radek Holy)
  - doc: reverse the order of release notes (Radek Holy)
  - completion_helper: fix tb if list XXX is not known arg (RhBug:1220040) (Igor
    Gnatenko)
  - configurable maximum number of parallel downloads (RhBug:1230975) (Igor
    Gnatenko)
  - add info to bash_completion (1nsan3)
  - dnf upgrade does not try to upgrade uninstalled packages (RhBug: 1234763)
    (Adam Salih)
  - dnf group list now checks every package and prints out only invalid ones
    (Adam Salih)
  - install: return zero exit code if group is already installed (RhBug:1232815)
    (Michal Luscon)
  - doc: add -b which does the same as --best (Igor Gnatenko)
  - support category groups (Michael Mraka)
  - cli test update for repofrompath (Michael Mraka)
  - documentation for --repofrompath (Michael Mraka)
  - implemented --repofrompath option (RhBug:1113384) (Michael Mraka)
  - doc: document filter provides and obsoletes (Michal Luscon)
  - doc: extend --quiet explanation (RhBug:1133979) (Jan Silhan)
  - fixed dnf-automatic email emitter unicode error (RhBug:1238958) (Jan Silhan)
  - doc: be specific what 'available' means in list/info (Jan Silhan)
  - cosmetic: fixed typo (RhBug:1238252) (Jan Silhan)
  - groups: clean dependencies (Michal Luscon)
  - groups: fix removing of env that contains previously removed group (Michal
    Luscon)
  - groups: fix removing of empty group (Michal Luscon)
  - AUTHORS: updated (Jan Silhan)
  - bash-completion: ignore sqlite3 user configuration (Peter Simonyi)
  - Fix package name for rawhide .repo files (Frank Dana)
  - Add 'transaction_display' to DemandSheet (Will Woods)
  - translation: update (Jan Silhan)
  - translation: use zanata instead of transifex (Jan Silhan)
  - Updated Polish translation (Piotr Drąg)
  - updated georgian translation (George Machitidze)
  - group: fixed installing of already installed environment (Jan Silhan)
  - conf: change minrate threshold to librepo default (RhBug:1212320) (Michal
    Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.0.1-2
changelog:
  - conf: change minrate threshold to librepo default (RhBug:1212320)
  - group: fixed installation of already installed environments


author: Michal Luscon <mluscon@redhat.com> 1.0.1-1
changelog:
  - doc: document variables in repo conf (Michal Luscon)
  - groups: temporary fix for group remove (RhBug:1214968) (Michal Luscon)
  - group: print summary of marked groups / environments together at the end (Jan
    Silhan)
  - group: fixed marking as installed (RhBug:1222694) (Jan Silhan)
  - doc: Spelling fixes (Ville Skyttä)
  - dnf-automatic: Fix systemd service description (thanks Ville Skyttä) (Jan
    Silhan)
  - doc: assumeyes added to Base.conf and config option (Jan Silhan)
  - optionparser: deleted --obsoletes option that conflicted with repoquery
    plugin (Jan Silhan)
  - dnf-automatic: Document emit_via default (Ville Skyttä)
  - man: yum2dnf don;t show content (RhBug:1225246) (Thanks Adam Salih) (Jan
    Silhan)
  - doc: allowed chars of repo ID (Jan Silhan)
  - doc: minimal repo config file (Jan Silhan)
  - doc: configuration files replacement policy (Jan Silhan)
  - fixed typo in man page (RhBug:1225168) (Michael Mraka)
  - Update authors (Michal Luscon)
  - dnf-automatic: add random_sleep option (RhBug:1213985) (Vladan Kudlac)
  - don't print bug report statement when rpmdb is corrupted
    (Related:RhBug:1225277) (Jan Silhan)
  - comps: fix unicode issue (RhBug:1223932) (Thanks Parag) (Parag Nemade)
  - logging: setup librepo log in verbose mode (Michal Luscon)
  - doc: document the versioning scheme (Radek Holy)
  - groups: end up empty group removal before solving (Michal Luscon)
  - groups: end up empty installation before solving (RhBug:1223614) (Michal
    Luscon)
  - doc: add support for transactions/packages/ranges in "dnf history list"
    (Radek Holy)
  - doc: add support for transaction ranges in "dnf history info" (Radek Holy)
  - support ssl client certificates (RhBug:1203661) (Michael Mraka)
  - doc: document the "mirrorlist" configuration option (Radek Holy)
  - doc: document the "metalink" configuration option (Radek Holy)
  - doc: document the "baseurl" configuration option (Radek Holy)
  - doc: document the "enabled" configuration option (Radek Holy)
  - doc: document the "name" configuration option (Radek Holy)
  - Revert "spec: added sqlite requirement" (Jan Silhan)
  - spec: added sqlite requirement (Jan Silhan)
  - cosmetic: fixed typo in comment (Jan Silhan)
  - man: added reference to bug reporting guide (Jan Silhan)
  - test: ignore user terminal width (Jan Silhan)
  - cosmetic: base: import dnf.util.first (Jan Silhan)
  - base.upgrade: inform user when pkg not installed and skipped (RhBug:1187741)
    (Jan Silhan)
  - disable buildtime c/c++ dependency (Michael Mraka)
  - doc: document the new virtual provides (Radek Holy)
  - AUTHORS: updated (Jan Silhan)
  - AUTHORS: distuinguish authors and contributors (Jan Silhan)
  - Create ka.po (George Machitidze)
  - Parser: fix path handling (Haikel Guemar)
  - doc: metadata_timer_sync checked every hour (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.0.0-1
changelog:
  - doc: release notes dnf-1.0.0 (Michal Luscon)
  - completion: don't do aliases (RhBug:1215289) (Jan Silhan)
  - use Sack.load_repo() instead of Sack.load_yum_repo() (Jan Silhan)
  - Repo.name has default value of repo ID (RhBug:1215560) (Jan Silhan)
  - cosmetic: get rid of user visible yum references (Jan Silhan)
  - moved install_or_skip to dnf.comps (Jan Silhan)
  - group: see already installed group during installation (RhBug:1199648) (Jan
    Silhan)
  - group: install_or_skip returns num of packages to install (Jan Silhan)
  - group: made global function install_or_skip (Jan Silhan)
  - AUTHORS: updated (Radek Holy)
  - describe --refresh option in --help output (Pádraig Brady)
  - better no such command message (RhBug:1208773) (Jan Silhan)
  - doc: package-cleanup example doesn't print 'No match for argument:...'
    garbage (Jan Silhan)
  - mention yum check replacement (Michael Mraka)
  - added ref to dnf list (Michael Mraka)
  - added package-cleanup to dnf translation table (Michael Mraka)
  - python3: Repo comparison (RhBug:1208018) (Jan Silhan)
  - python3: YumHistoryRpmdbProblem comparison (RhBug:1207861) (Jan Silhan)
  - python3: YumHistoryTransaction comparison (Jan Silhan)
  - tests: use packages in test_transaction (Radek Holy)
  - cosmetic: fix some Pylint errors (Radek Holy)
  - updated documentation wrt installonlypkgs and auto removal (Michael Mraka)
  - mark installonly packages always as userinstalled (RhBug:1201445) (Michael
    Mraka)
  - mark username/password as api (Michael Mraka)
  - document username/password repo attributes (Michael Mraka)
  - support HTTP basic auth (RhBug:1210275) (Michael Mraka)
  - cli: better metadata timestamp info (Michal Luscon)
  - repo: add metadata mirror failure callback (Michal Luscon)
  - dnf-yum: cosmetic: lower case after comma (Jan Silhan)
  - dnf-yum: print how to install migrate plugin (Jan Silhan)
  - doc: show the real package for each tool in dnf-plugins-extras (Tim
    Lauridsen)
  - doc: improve the documentation of repo costs (Radek Holy)
  - doc: fix debuginfo-install package name (Michal Luscon)
  - doc: release notes 0.6.5 (Michal Luscon)
  - bash-completion: allow only one subcmd for help (Igor Gnatenko)
  - bash-completion: add history completion (Igor Gnatenko)
  - bash-completion: add completion for help (Igor Gnatenko)
  - bash-completion: check where pointing bin/dnf (Igor Gnatenko)
  - bash-completion: implement completion for clean cmd (Igor Gnatenko)
  - bash_completion: implement downgrade command (Igor Gnatenko)
  - bash-completion: refactor to python helper (Igor Gnatenko)
  - command downgrade does downgrade_to (RhBug:1191275) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - clean: 'dnf clean all' should also clean presto and updateinfo solvx files
    (Parag Nemade)
  - dnf-yum: modified warning message (RhBug:1207965) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 0.6.5-1
changelog:
  - subject: expand every glob name only once (RhBug:1203151) (Michal Luscon)
  - group mark: skips already installed groups (Jan Silhan)
  - Merge pull request #246 from mluscon/yum2dnf (mluscon)
  - Add yum2dnf man page (Michal Luscon)
  - doc: extend cli_vs_yum (Michal Luscon)
  - dnf-yum package does not conflict with yum 3.4.3-505+ (Jan Silhan)
  - fixed double set of demand from 0e4276f (Jan Silhan)
  - group: remove cmd don't load available_repos, see 04da412 (Jan Silhan)
  - spec: /var/lib/dnf owned by dnf-conf (Jan Silhan)
  - spec: apply the weak dependencies only on F21+ (Radek Holy)
  - dnf-automatic: fixed python_sitelib (RhBug:1199450) (Jan Silhan)
  - Add release instructions (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - spec: recommends bash-completion (RhBug:1190671) (Jan Silhan)
  - completion: work with just python(3)-dnf (Jan Silhan)
  - spec: move necessary files inside python(3) subpackages (RhBug:1191579) (Jan Silhan)
  - bash-completion: use python method to get commands (RhBug:1187579) (Igor Gnatenko)
  - api: exposed pluginconfpath main config (RhBug:1195325) (Jan Silhan)
  - updated AUTHORS (Jan Silhan)
  - add reinstall to bash_completion (Alberto Ruiz)
  - added new packages to @System for duplicated query test (Michael Mraka)
  - test for duplicated, installonly and latest_limit pkgs (Michael Mraka)
  - tests for autoremove, extras and recent pkgs (Michael Mraka)
  - moved push_userinstalled from base to goal (Michael Mraka)
  - filter or skip 'n' latest packages (Michael Mraka)
  - moved recent to query (Michael Mraka)
  - moved autoremove to query (Michael Mraka)
  - moved extras list to query (Michael Mraka)
  - create query for installonly packages (Michael Mraka)
  - create query for duplicated packages (Michael Mraka)
  - cosmetic: base: fixed pylint warnings (Jan Silhan)
  - do transaction cleanup after plugin hook (RhBug:1185977) (Michal Luscon)
  - base: extend download lock (RhBug:1157233) (Michal Luscon)
  - lock: output meaningful error for malformed lock file (Michal Luscon)
  - util: fix race condition in ensure_dir() (Michal Luscon)
  - lock: switch metadata lock to blocking mode (Michal Luscon)
  - install nonmandatory group packages as optional (Related:RhBug:1167881) (Michal Luscon)
  - remove command deletes whole dependency tree (RhBug:1154202) (Jan Silhan)
  - cmd list takes <package-name-specs> as parameter, revert of 526e674 (Jan Silhan)
  - spec: own /var/lib/dnf directory (RhBug:1198999) (Jan Silhan)
  - transifex update (Jan Silhan)
  - doc: fixed systemd execution of dnf-automatic (Jan Silhan)
  - doc: how to run dnf-automatic (RhBug:1195240) (Jan Silhan)
  - cosmetic: added forgotten :api mark from 05b03fc (Jan Silhan)
  - api: exposed Repo.skip_if_unavailable config (RhBug:1189083) (Jan Silhan)
  - updated documentation for 'dnf list autoremove' (Michael Mraka)
  - reuse list_autoremove() in autoremove command (Michael Mraka)
  - function for autoremove package list (Michael Mraka)
  - implemented dnf list autoremove (Michael Mraka)
  - exclude not documented history subcommands (RhBug:1193914,1193915) (Jan Silhan)
  - better file pattern recognition (RhBug:1195385) (Jan Silhan)
  - spec: fix Obsoletes of the new DNF (Radek Holy)
  - remove boot only constraint and add missing download lock (Michal Luscon)
  - util: remove unused user_run_dir() function (Michal Luscon)
  - lock: change the destination folder of locks to allow suided programs work properly (RhBug:1195661) (Michal Luscon)
  - install dnf-3 only when python3 is enabled (thanks glensc) (Jan Silhan)
  - fixed unicode Download error (RhBug:1190458) (Jan Silhan)
  - log: print metadata age along with timestamp (Petr Spacek)
  - cli: fix double expansion of cachedir (RhBug:1194685) (Michal Luscon)
  - removed unused dnf-makecache.cron (Jan Silhan)
  - renamed erase command to remove (RhBug:1160806) (Jan Silhan)
  - spec: made python3-dnf package installed by default in f23 (Jan Silhan)
  - AUTHORS: changed email address (Jan Silhan)
  - doc: improve the documentation of the "install" command (Radek Holy)
  - "dnf install non-existent" should fail (Radek Holy)
  - tests: add some tests of Base.install (Radek Holy)
  - tests: add some tests of Base.package_install (Radek Holy)
  - Revert "doesn't upgrade packages by installing local packages" (RhBug:1160950) (Radek Holy)
  - lint: fix all Pylint errors in test_install (Radek Holy)
  - tests: add some tests to test_install (Radek Holy)
  - tests: improve some tests in test_install (Radek Holy)
  - cosmetic: reorder tests in test_install (Radek Holy)
  - cosmetic: rename some tests in test_install and add some docstrings (Radek Holy)
  - AUTHORS: updated (Jan Silhan)
  - Add support for armv6hl (Peter Hjalmarsson)
  - doc: subject.__init__(): what is pkg_spec (Jan Silhan)
  - doc: mentioning raising IOError from Base.fill_sack() (Jan Silhan)
  - option_parser: fixed splitting multiple values (RhBug:1186710) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - Standardize words describing boolean data type (Christopher Meng)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.4-1
changelog:
  - Adapt to librepo-1.7.13, metalink and mirrorlist are not loaded anymore when the repo is local. (Radek Holy)
  - not raises value error when no metadata exist (Jan Silhan)
  - Remove lock files during boot (RhBug:1154476) (Michal Luscon)
  - doc: groups are ordered not categories (Jan Silhan)
  - doc: added Package attributes to API (Jan Silhan)
  - README: link to bug reporting guide (Jan Silhan)
  - README: the official documentation is on readthedoc (Jan Silhan)
  - i18n: unicode encoding does not throw error (RhBug:1155877) (Jan Silhan)
  - conf: added minrate repo option (Related:RhBug:1175466) (Jan Silhan)
  - conf: added timeout repo option (RhBug:1175466) (Jan Silhan)
  - doc: api_queries: add 'file' filter description (RhBug:1186461) (Igor Gnatenko)
  - doc: documenting enablegroups (Jan Silhan)
  - log: printing metadata timestamp (RhBug:1170156) (Jan Silhan)
  - base: setup default cachedir value (RhBug:1184943) (Michal Luscon)
  - orders groups/environments by display_order tag (RhBug:1177002) (Jan Silhan)
  - no need to call create_cmdline_repo (Jan Silhan)
  - base: package-spec matches all packages which the name glob pattern fits (RhBug:1169165) (Michal Luscon)
  - doc: move dnf.conf to appropriate man page section (RhBug:1167982) (Michal Luscon)
  - tests: add test for blocking process lock (Michal Luscon)
  - lock: fix several race conditions in process lock mechanism (Michal Luscon)
  - base: use blocking process lock during download phase (RhBug:1157233) (Michal Luscon)
  - Update the Source0 generation commands in dnf.spec.in file (Parag Nemade)
  - Enhancement to dnf.spec.in file which follows current fedora packaging guidelines (Parag Nemade)
  - doc: add some examples and documentation of the core use case (RhBug:1138096) (Radek Holy)
  - bash-completion: enable downgrading packages for local files (RhBug:1181189) (Igor Gnatenko)
  - group: prints plain package name when package not in any repo (RhBug:1181397) (Jan Silhan)
  - spec: own __pycache__ for python 3 (Igor Gnatenko)
  - changed hawkey.log dir to /var/log (RhBug:1175434) (Jan Silhan)
  - bash-completion: handle sqlite errors (Igor Gnatenko)
  - use LANG=C when invoking 'dnf help' and 'sed' with regular expressions (Jakub Dorňák)
  - spec: own __pycache__ directory for py3 (Igor Gnatenko)
  - doc: mentioning Install command accepts path to local rpm package (Jan Silhan)
  - groups: in erase and install cmd non-existent group does not abort transaction (Jan Silhan)
  - doc: running tests in README (Jan Silhan)
  - api: transaction: added install_set and remove_set (RhBug:1162887) (Jan Silhan)
  - cosmetic: fixed some typos in documentation (Jan Silhan)
  - groups: environments described after @ sign works (RhBug:1156084) (Jan Silhan)
  - own /etc/dnf/protected.d (RhBug:1175098) (Jan Silhan)
  - i18n: computing width of char right (RhBug:1174136) (Jan Silhan)
  - cosmetic: renamed _splitArg -> _split_arg (Jan Silhan)
  - conf: removed include name conflict (RhBug:1055910) (Jan Silhan)
  - output: removed unpredictable decision based on probability introduced in ab4d2c5 (Jan Silhan)
  - output: history list is not limited to 20 records (RhBug:1155918) (Jan Silhan)
  - doc: referenced forgotten bug fix to release notes (Jan Silhan)
  - cosmetic: doc: removed duplicated word (Jan Silhan)
  - doc: described unavailable package corner case with skip_if_unavailable option (RhBug:1119030) (Jan Silhan)
  - log: replaced size with maxsize directive (RhBug:1177394) (Jan Silhan)
  - spec: fixed %ghost log file names (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.3-1
changelog:
  - transifex update (Jan Silhan)
  - bash-completion: don't query if we trying to use local file (RhBug:1153543) (Igor Gnatenko)
  - bash-completion: fix local completion (RhBug:1151231) (Igor Gnatenko)
  - bash-completion: use sqlite cache from dnf-plugins-core (Igor Gnatenko)
  - base: output a whole list of installed packages with glob pattern (RhBug:1163063) (Michal Luscon)
  - cli: _process_demands() does not respect --caheonly (RhBug:1151854) (Michal Luscon)
  - new authors added (Jan Silhan)
  - install: allow installation of provides with glob (Related:RhBug:1148353) (Michal Luscon)
  - tests: removed mock patch for _, P_ (Jan Silhan)
  - fixed error summary traceback (RhBug:1151740) (Jan Silhan)
  - doc: swap command alternative mentioned (RhBug:1110780) (Jan Silhan)
  - base: package_reinstall works only with the same package versions (Jan Silhan)
  - base: package_install allows install different arch of installed package (Jan Silhan)
  - base: package_downgrade prints message on failure (Jan Silhan)
  - base: package_upgrade does not reinstall or downgrade (RhBug:1149972) (Jan Silhan)
  - groups: searches also within localized names (RhBug:1150474) (Jan Silhan)
  - Run tests with C locales. (Daniel Mach)
  - Adds new motd emitter for dnf-automatic (RhBug:995537) (Kushal Das)
  - Fix wrong cache directory path used to clean up binary cache (Satoshi Matsumoto)
  - fix: traceback in history info <name> (RhBug: 1149952) (Tim Lauridsen)
  - logging: added logrotate script for hawkey.log (RhBug:1149350) (Jan Silhan)
  - output: renamed displayPkgsInGroups (Jan Silhan)
  - logging: renamed log files (RhBug:1074715)" (Jan Silhan)
  - comps: Environment differentiates optional and mandatory groups (Jan Silhan)
  - group info handles environments (RhBug:1147523) (Jan Silhan)
  - deltarpm enabled by default (RhBug:1148208) (Jan Silhan)
  - doc: deplist command (Jan Silhan)
  - doc: minor fixes + repo references changed (Jan Silhan)
  - spec: requires rpm-plugin-systemd-inhibit (RhBug:1109927) (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.2-1
changelog:
  - transifex update (Jan Silhan)
  - refactor: move MakeCacheCommand out into its own file. (Ales Kozumplik)
  - api: add dnf.cli.CliError. (Ales Kozumplik)
  - Update user_faq.rst (Stef Krie)
  - Make --refresh play nice with lazy commands. (Ales Kozumplik)
  - bash-completion: more faster completing install/remove (Igor Gnatenko)
  - bash-completion: complete 'clean|groups|repolist' using help (Igor Gnatenko)
  - Allow some commands to use stale metadata. (RhBug:909856) (Ales Kozumplik)
  - does not install new pkgs when updating from local pkgs (RhBug:1134893) (Jan Silhan)
  - doesn't upgrade packages by installing local packages (Related:RhBug:1138700) (Jan Silhan)
  - refactor: repo: separate concepts of 'expiry' and 'sync strategy'. (Ales Kozumplik)
  - fix: dnf.cli.util.* leaks file handles. (Ales Kozumplik)
  - remove: YumRPMTransError. (Ales Kozumplik)
  - rename: Base's runTransaction -> _run_transaction(). (Ales Kozumplik)
  - drop unused parameter of Base.verify_transaction(). (Ales Kozumplik)
  - bash-completion: new completion from scratch (RhBug:1070902) (Igor Gnatenko)
  - py3: add queue.Queue to pycomp. (Ales Kozumplik)
  - locking: store lockfiles with the resource they are locking. (RhBug:1124316) (Ales Kozumplik)
  - groups: marks reason 'group' for packages that have no record yet (RhBug:1136584) (Jan Silhan)
  - goal: renamed undefined name variable (Jan Silhan)
  - refactor: split out and clean up the erase command. (Ales Kozumplik)
  - py3: fix traceback in fmtColumns() on a non-subscriptable 'columns'. (Ales Kozumplik)
  - groups: allow erasing depending packages on remove (RhBug:1135861) (Ales Kozumplik)
  - history: fixed wrong set operation (RhBug:1136223) (Jan Silhan)
  - base: does not reinstall pkgs from local rpms with install command (RhBug:1122617) (Jan Silhan)
  - refactor: crypto: drop the integer keyid representation altogether. (Ales Kozumplik)
  - crypto: fix importing rpmfusion keys. (RhBug:1133830) (Ales Kozumplik)
  - refactor: crypto: Key is a class, not an "info" dict. (Ales Kozumplik)
  - repos: fix total downloaded size reporting for cached packages. (RhBug:1121184) (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.1-1
changelog:
  - packaging: add dnf-yum. (Ales Kozumplik)
  - cli: added plugins missing hint (RhBug:1132335) (Jan Silhan)
  - using ts.addReinstall for package reinstallation (RhBug:1071854) (Jan Silhan)
  - Add history redo command. (Radek Holy)
  - Add a TransactionConverter class. (Radek Holy)
  - bash-completion: complete `help` with commands (Igor Gnatenko)
  - bash-completion: generate commands dynamically (Igor Gnatenko)
  - base: group_install accepts glob exclude names (RhBug:1131969) (Jan Silhan)
  - README: changed references to new repo location (Jan Silhan)
  - transifex update (Jan Silhan)
  - syntax: fixed indentation (Jan Silhan)
  - removed lt.po which was accidentally added in c2e9b39 (Jan Silhan)
  - lint: fix convention violations in the new source files (Radek Holy)
  - Fix setting of the resolving demand for repo-pkgs command. (Radek Holy)
  - Add repository-packages remove-or-distro-sync command. (RhBug:908764) (Radek Holy)
  - fix: traceback that GroupPersistor._original might not exist. (RhBug:1130878) (Ales Kozumplik)
  - pycomp: drop to_ord(). (Ales Kozumplik)
  - refactor: crypto.keyids_from_pubring() using _extract_signing_subkey(). (Ales Kozumplik)
  - fix: another 32-bit hex() problem in crypto. (Ales Kozumplik)
  - remove: pgpmsg.py. (Ales Kozumplik)
  - replace the whole of pgpmsg.py with gpgme and a dummy context. (Ales Kozumplik)
  - cosmetic: sort methods of Repo according to the coding standard. (Ales Kozumplik)
  - Fix dnf.crypto.keyinfo2keyid(). (Ales Kozumplik)
  - util: get rid of an inconvenient 'default_handle' constant. (Ales Kozumplik)
  - simplify misc.import_key_to_pubring()'s signature. (Ales Kozumplik)
  - cleanup: header of dnf.yum.pgpmsg. (Ales Kozumplik)
  - crypto: add crypto.retrieve() and drop Base._retrievePublicKey() (Ales Kozumplik)
  - cosmetic: order of functions in dnf.crypto. (Ales Kozumplik)
  - unicode: fixed locale.format error (RhBug:1130432) (Jan Silhan)
  - remove: misc.valid_detached_sig(). (Ales Kozumplik)
  - tests: some tests for dnf.crypto. (Ales Kozumplik)
  - crypto: use pubring_dir() context manager systematically. (Ales Kozumplik)
  - Drop unused argument from getgpgkeyinfo(). (Ales Kozumplik)
  - remove: Base._log_key_import(). (Ales Kozumplik)
  - doc: cosmetic: conf_ref: maintain alphabetical order of the options. (Ales Kozumplik)
  - crypto: document crypto options for repo. (Ales Kozumplik)
  - crypto: fixup procgpgkey() to work with Py3 bytes. (Ales Kozumplik)
  - dnf.util.urlopen(): do not create unicode streams for Py3 and bytes for Py2 by default. (Ales Kozumplik)
  - lint: delinting of the repo_gpgcheck patchset. (Ales Kozumplik)
  - Add CLI parts to let the user confirm key imports. (RhBug:1118236) (Ales Kozumplik)
  - gpg: make key decoding work under Py3. (Ales Kozumplik)
  - crypto: add dnf.crypto and fix things up so untrusted repo keys can be imported. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - syntax: fixed indentation (Jan Silhan)
  - packaging: pygpgme is a requirement. (Ales Kozumplik)
  - remove: support for gpgcakey gets dropped for now. (Ales Kozumplik)
  - repo: smarter _DetailedLibrepoError construction. (Ales Kozumplik)
  - repo: nicer error message on librepo's perform() failure. (Ales Kozumplik)
  - get_best_selector returns empty selector instead of None (Jan Silhan)
  - packaging: add automatic's systemd unit files. (RhBug:1109915) (Ales Kozumplik)
  - automatic: handle 'security' update_cmd. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.6.0-1
changelog:
  - lint: fix convention violations in the new source files (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] security" command. (RhBug:850912) (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] bugfix" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] enhancement" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] [<package-name>...]" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] [<advisory>...]" command. (Radek Holy)
  - Add "updateinfo [<output>] all" command. (Radek Holy)
  - Add "updateinfo [<output>] updates" command. (Radek Holy)
  - Add "updateinfo [<output>] installed" command. (Radek Holy)
  - Add "-v updateinfo info" command. (Radek Holy)
  - Add "updateinfo info" command. (Radek Holy)
  - Add "updateinfo list" command. (Radek Holy)
  - Add "updateinfo available" command. (Radek Holy)
  - Add "updateinfo summary" command. (Radek Holy)
  - Add basic updateinfo command. (Radek Holy)
  - test: add updateinfo to the testing repository (Radek Holy)
  - test: support adding directory repos to Base stubs (Radek Holy)
  - test: really don't break other tests with the DRPM fixture (Radek Holy)
  - Load UpdateInfo.xml during the sack preparation. (Radek Holy)
  - Add Repo.updateinfo_fn. (Radek Holy)
  - lint: add Selector calls to false positives, it's a hawkey type. (Ales Kozumplik)
  - removed recursive calling of ucd in DownloadError (Jan Silhan)
  - does not throw error when selector is empty (RhBug:1127206) (Jan Silhan)
  - remove etc/version-groups.conf, not used. (Ales Kozumplik)
  - lint: dnf.conf.parser (Ales Kozumplik)
  - rename: dnf.conf.parser.varReplace()->substitute() (Ales Kozumplik)
  - pycomp: add urlparse/urllib.parser. (Ales Kozumplik)
  - move: dnf.yum.parser -> dnf.conf.parser. (Ales Kozumplik)
  - packaging: add dnf-automatic subpackage. (Ales Kozumplik)
  - doc: properly list the authors. (Ales Kozumplik)
  - automatic: add documentation, including dnf.automatic(8) man page. (Ales Kozumplik)
  - dnf-automatic: tool supplying the yum-cron functionality. (Ales Kozumplik)
  - doc: cosmetic: fixed indent in proxy directive (Jan Silhan)
  - include directive support added (RhBug:1055910) (Jan Silhan)
  - refactor: move MultiCallList to util. (Ales Kozumplik)
  - cli: do not output that extra starting newline in list_transaction(). (Ales Kozumplik)
  - refactor: extract CLI cachedir magic to cli.cachedir_fit. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - move: test_output to tests/cli. (Ales Kozumplik)
  - refactor: move Term into its own module. (Ales Kozumplik)
  - refactoring: cleanup and linting in dnf.exceptions. (Ales Kozumplik)
  - lint: test_cli.py (Ales Kozumplik)
  - lint: rudimentary cleanups in tests.support. (Ales Kozumplik)
  - refactor: loggers are module-level variables. (Ales Kozumplik)
  - groups: promote unknown-reason installed packages to 'group' on group install. (RhBug:1116666) (Ales Kozumplik)
  - c82267f refactoring droppped plugins.run_transaction(). (Ales Kozumplik)
  - cli: sort packages in the transaction summary. (Ales Kozumplik)
  - refactor: cli: massively simplify how errors are propagated from do_transaction(). (Ales Kozumplik)
  - groups: rearrange things in CLI so user has to confirm the group changes. (Ales Kozumplik)
  - groups: committing the persistor data should only happen at one place. (Ales Kozumplik)
  - groups: visualizing the groups transactions. (Ales Kozumplik)
  - Add dnf.util.get_in() to navigate nested dicts with sequences of keys. (Ales Kozumplik)
  - group persistor: generate diffs between old and new DBs. (Ales Kozumplik)
  - Better quoting in dnf_pylint. (Ales Kozumplik)
  - lint: logging.py. (Ales Kozumplik)
  - Do not print tracebacks to the tty on '-d 10' (RhBug:1118272) (Ales Kozumplik)
  - search: do not double-report no matches. (Ales Kozumplik)
  - refactor: move UpgradeToCommand to its own module. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.5-1
changelog:
  - packaging: also add pyliblzma to BuildRequires. (Ales Kozumplik)
  - essential cleanup in dnf.yum.misc, removing a couple of functions too. (Ales Kozumplik)
  - remove: Base.findDeps and friends. (Ales Kozumplik)
  - Make pyliblzma a requriement. (RhBug:1123688) (Ales Kozumplik)
  - whole user name can contain non-ascii chars (RhBug:1121280) (Jan Silhan)
  - Straighten up the exceptions when getting a packages header. (RhBug:1122900) (Ales Kozumplik)
  - tests: refactor: rename test_resource_path() -> resource_path() and use it more. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - remove: conf.commands. (Ales Kozumplik)
  - proxy username and password, for both CLI and API. (RhBug:1120583) (Ales Kozumplik)
  - conf: only 'main' is a reserved section name. (Ales Kozumplik)
  - refactoring: cleanup a couple of lint warnings in base.py. (Ales Kozumplik)
  - refactoring: move repo reading implementation out of dnf.Base. (Ales Kozumplik)
  - refactor: repo_setopts is a CLI thing and doesn't belong to Base. (Ales Kozumplik)
  - refactor: move cleanup methods to dnf.cli.commands.clean. (Ales Kozumplik)
  - depsolving: doesn't install both architectures of pkg by filename (RhBug:1100946) (Jan Silhan)
  - refactor: put CleanCommand in its own module. (Ales Kozumplik)
  - cli: avoid 'Error: None' output on malformed CLI commands. (Ales Kozumplik)
  - remove the special SIGQUIT handler. (Ales Kozumplik)
  - api: In Repo(), cachedir is a required argument. (Ales Kozumplik)
  - api: better describe how Repos should be created, example. (RhBug:1117789) (Ales Kozumplik)
  - Base._conf lasts the lifetime of Base and can be passed via constructor. (Ales Kozumplik)
  - doc: faq: having Yum and DNF installed at the same time. (Ales Kozumplik)
  - remove: protected_packages config option, it has been ignored. (Ales Kozumplik)
  - fix: misleading error message when no repo is enabled. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.4-1
changelog:
  - pkg name from rpm transaction callback is in Unicode (RhBug:1118796) (Jan Silhan)
  - packaging: python3-dnf depends on dnf. (RhBug:1119032) (Ales Kozumplik)
  - Ship /usr/bin/dnf-3 to run DNF under Py3. (RhBug:1117678) (Ales Kozumplik)
  - packaging: own /etc/dnf/plugins. (RhBug:1118178) (Ales Kozumplik)
  - fix: pluginconfpath is a list. (Ales Kozumplik)
  - cosmetic: use classmethod as a decorator in config.py. (Ales Kozumplik)
  - cleanup: imports in dnf.cli.output (Ales Kozumplik)
  - lint: straightforward lint fixes in dnf.cli.output. (Ales Kozumplik)
  - Repo.__setattr__ has to use the parsed value. (Ales Kozumplik)
  - Repo priorities. (RhBug:1048973) (Ales Kozumplik)
  - repo: simplify how things are propagated to repo.hawkey_repo. (Ales Kozumplik)
  - refactor: concentrate Repo.hawkey_repo construction in Repo.__init__(). (Ales Kozumplik)
  - bash-completion: Update command and option lists, sort in same order as --help (Ville Skyttä)
  - bash-completion: Use grep -E instead of deprecated egrep (Ville Skyttä)
  - output: fixed identation of info command output (Jan Silhan)
  - i18n: calculates right width of asian utf-8 strings (RhBug:1116544) (Jan Silhan)
  - transifex update + renamed po files to Fedora conventions (Jan Silhan)
  - remove: CLI: --randomwait (Ales Kozumplik)
  - cli: fix: --installroot has to be used with --releasever (RhBug:1117293) (Ales Kozumplik)
  - Base.reset(goal=True) also resets the group persistor (RhBug:1116839) (Ales Kozumplik)
  - tests: fix failing DistroSync.test_distro_sync(). (Ales Kozumplik)
  - logging: RPM transaction markers are too loud. (Ales Kozumplik)
  - logging: silence drpm a bit. (Ales Kozumplik)
  - logging: put timing functionality into one place. (Ales Kozumplik)
  - repolist: fix traceback with disabled repos. (RhBug:1116845) (Ales Kozumplik)
  - refactor: cleanups in repolist. (Ales Kozumplik)
  - lint: remove some unused imports. (Ales Kozumplik)
  - cli: break out the repolsit command into a separate module. (Ales Kozumplik)
  - does not crash with non-ascii user name (RhBug:1108908) (Jan Silhan)
  - doc: document 'pluginpath' configuration option. (RhBug:1117102) (Ales Kozumplik)
  - Spelling fixes (Ville Skyttä)
  - cli: Fix software name in --version help (Ville Skyttä)
  - doc: ip_resolve documented at two places. remove one. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.3-1
changelog:
  - packaging: bump hawkey dep to 0.4.17. (Ales Kozumplik)
  - api: remove Base.select_group(). (Ales Kozumplik)
  - tests: cleanup our base test case classes a bit. (Ales Kozumplik)
  - Add DNF itself among the protected packages. (Ales Kozumplik)
  - api: plugins: add the resolved() hook. (Ales Kozumplik)
  - api: expose Transaction introspecting in the API. (RhBug:1067156) (Ales Kozumplik)
  - api: add basic documentation for dnf.package.Package. (Ales Kozumplik)
  - tests: cosmetic: conf.protected_packages is ignored, drop it in FakeConf. (Ales Kozumplik)
  - cli: simplify exception handling more. (Ales Kozumplik)
  - Fixed a minor typo in user_faq - 'intall' should be 'install' (Martin Preisler)
  - fixed encoding of parsed config line (RhBug:1110800) (Jan Silhan)
  - syntax: replaced tab with spaces (Jan Silhan)
  - doc: acknowledge the existence of plugins on the man page (RhBug:1112669) (Ales Kozumplik)
  - improve the 'got root?' message of why a transaction couldn't start. (RhBug:1111569) (Ales Kozumplik)
  - traceback in Base.do_transaction. to_utf8() is gone since 06fb280. (Ales Kozumplik)
  - fix traceback from broken string formatting in _retrievePublicKey(). (RhBug:1111997) (Ales Kozumplik)
  - doc: replace Yum with DNF in command_ref.rst (Viktor Ashirov)
  - Fix a missing s in the title (mscherer)
  - api: add dnf.rpm.detect_releasever() (Ales Kozumplik)
  - Detect distroverpkg from 'system-release(release)' (RhBug:1047049) (Ales Kozumplik)
  - bulid: add dnf/conf to cmake. (Ales Kozumplik)
  - lint: clean up most lint messages in dnf.yum.config (Ales Kozumplik)
  - remove: couple of dead-code methods in dnf.yum.config. (Ales Kozumplik)
  - api: document client's responsibility to preset the substitutions. (RhBug:1104757) (Ales Kozumplik)
  - move: rpmUtils -> rpm. (Ales Kozumplik)
  - refactor: move yumvar out into its proper module dnf.conf.substitutions. (Ales Kozumplik)
  - refactor: turn dnf.conf into a package. (Ales Kozumplik)
  - doc: api_base.rst pointing to nonexistent method. (Ales Kozumplik)
  - remove: some logging from Transaction.populate_rpm_ts(). (Ales Kozumplik)
  - Update cli_vs_yum.rst (James Pearson)
  - api: doc: queries relation specifiers, with an example. (RhBug:1105009) (Ales Kozumplik)
  - doc: phrasing in ip_resolve documentation. (Ales Kozumplik)
  - cli: refactored transferring cmdline options to conf (Jan Silhan)
  - cli: added -4/-6 option for using ipv4/ipv6 connection (RhBug:1093420) (Jan Silhan)
  - cosmetic: empty set inicialization (Jan Silhan)
  - repo: improve the RepoError message to include URL. (Ales Kozumplik)
  - remove: dnf.yum.config.writeRawRepoFile(). (Ales Kozumplik)
  - remove: bunch of (now) blank config options. (Ales Kozumplik)
  - removed unique function (Jan Silhan)
  - tests: mock.assert_has_calls() enforces its iterable arguments in py3.4. (Ales Kozumplik)
  - logging: improve how repolist logs the total number of packages. (Ales Kozumplik)
  - logging: Base.close() should not log to the terminal. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.2-1
changelog:
  - doc: packaging: add license block to each .rst. (Ales Kozumplik)
  - cosmetic: replaced yum with dnf in comment (Jan Silhan)
  - takes non-ascii cmd line input (RhBug:1092777) (Jan Silhan)
  - replaced 'unicode' conversion functions with 'ucd' (RhBug:1095861) (Jan Silhan)
  - using write_to_file py2/py3 compatibility write function (Jan Silhan)
  - encoding: all encode methods are using utf-8 coding instead of default ascii (Jan Silhan)
  - fixed rpmbuild warning of missing file (Jan Silhan)
  - transifex update (Jan Silhan)
  - fixed typos in comments (Jan Silhan)
  - Drop --debugrepodata and susetags generation with it. (Ales Kozumplik)
  - doc: document --debugsolver. (Ales Kozumplik)
  - fix: 'dnf repo-pkgs' failures (RhBug:1092006) (Radek Holy)
  - lint: make dnf_pylint take '-s' that suppresses line/column numbers. (Ales Kozumplik)
  - doc: cli_vs_yum: we do not promote installs to the obsoleting package. (RhBug:1096506) (Ales Kozumplik)
  - dealing with installonlies, we always need RPMPROB_FILTER_OLDPACKAGE (RhBug:1095580) (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - arch: recognize noarch as noarch's basearch. (RhBug:1094594) (Ales Kozumplik)
  - pylint: clean up dnf.repo. (Ales Kozumplik)
  - sslverify: documentation and bumped librepo require. (Ales Kozumplik)
  - repos: support sslverify setting. (RhBug:1076045) (Ales Kozumplik)
  - search: exact matches should propagate higher. (RhBug:1093888) (Ales Kozumplik)
  - refactor: concentrate specific search functionality in commands.search. (Ales Kozumplik)
  - refactor: SearchCommand in its own file. (Ales Kozumplik)
  - pylint: fix around one hundred pylint issues in dnf.base. (Ales Kozumplik)
  - pylint: add simple pylint script (Ales Kozumplik)
  - autoerase: write out the debugdata used to calculate redundant packages. (Ales Kozumplik)
  - cosmetic: fix pylint comment in test_group.py. (Ales Kozumplik)
  - refactor: err_mini_usage() is public. (Ales Kozumplik)
  - refactor: fix several pylint errors in dnf.cli.commands.group. (Ales Kozumplik)
  - fix: 'dnf remove' is deprecated so autoremove should be autoerase. (Ales Kozumplik)
  - doc: command_ref: remove the deprecated aliases from the initial list. (Ales Kozumplik)
  - Add autoremove command. (RhBug:963345) (Ales Kozumplik)
  - refactor: Base.push_userinstalled() is public. (Ales Kozumplik)
  - Remove sudo from dnf-completion.bash RhBug:1073457 (Elad Alfassa)
  - exclude switch takes <package-spec> as a parameter (Jan Silhan)
  - using nevra glob query during list command (RhBug:1083679) (Jan Silhan)
  - removed rpm.RPMPROB_FILTER_REPLACEOLDFILES filter flag (Jan Silhan)
  - test: changed tests according to new distro-sync behavior (Jan Silhan)
  - packaging: cosmetic: copyright years in bin/dnf. (Ales Kozumplik)
  - bin/dnf: run the python interpreter with -OO. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.1-1
changelog:
  - drpm: output stats (RhBug:1065882) (Ales Kozumplik)
  - refactor: architectures. (Ales Kozumplik)
  - cli: be lot less verbose about dep processing. (Ales Kozumplik)
  - groups: do not error out if group install/remove produces no RPM transaction. (Ales Kozumplik)
  - fix: do not traceback on comps remove operations if proper pkg reasons can not be found. (Ales Kozumplik)
  - fix: tracebacks in 'group remove ...' (Ales Kozumplik)
  - groups: move all the logic of persistor saving from main.py to Base. (Ales Kozumplik)
  - groups: auto-saving the groups persistor. (RhBug:1089864) (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - remove: profiling code from cli.main. (Ales Kozumplik)
  - remove: removal of dead code (Miroslav Suchý)
  - doc: changes to rhbug.py to work on readthedocs.org. (Ales Kozumplik)
  - doc: build the documentation without any dependencies (on DNF or anything else). (Ales Kozumplik)
  - doc: make clear where one should expect bin/dnf (Miroslav Suchý)
  - abrt: disable abrt for 'dnf makecache timer' run from systemd.service. (RhBug:1081753) (Ales Kozumplik)
  - remove: stray itertools import from group.py. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.0-1
changelog:
  - doc: fix formatting in api_cli.rst. (Ales Kozumplik)
  - doc: document operation of 'group upgrade'. (Ales Kozumplik)
  - comps: ensure only packages of 'group' reason get deleted on 'group erase'. (Ales Kozumplik)
  - comps: store 'group' reason when installing a group-membering package. (Ales Kozumplik)
  - Override Goal.get_reason(). (Ales Kozumplik)
  - Add dnf.goal.Goal deriving from hawkey.Goal. (Ales Kozumplik)
  - fix: encoding of yumdb directory names in py3. (Ales Kozumplik)
  - tests: clean up the functions that load seeded comps a bit. (Ales Kozumplik)
  - remove: cli._*aybeYouMeant(). (Ales Kozumplik)
  - simplify groups/envs API methods in Base a lot. (Ales Kozumplik)
  - tests: add test for Base._translate_comps_pkg_types() (Ales Kozumplik)
  - refactor: move the group listing etc. methods() away from Base into GroupCommand. (Ales Kozumplik)
  - api: add group.upgrade opration to Base and CLI (RhBug:1029022) (Ales Kozumplik)
  - remove: OriginalGroupPersistor. (Ales Kozumplik)
  - groups: store format version of the groups db. (Ales Kozumplik)
  - groups: saving the persistent data. (Ales Kozumplik)
  - refactor: extract out the transactioning part of _main(). (Ales Kozumplik)
  - groups: Integrate the redone components with Base. (Ales Kozumplik)
  - Add comps Solver. (Ales Kozumplik)
  - groups: redo the GroupPersistor class. (Ales Kozumplik)
  - doc: faq: why we don't check for root. (RhBug:1088166) (Ales Kozumplik)
  - cosmetic: reordered import statements (Jan Silhan)
  - added --refresh option (RhBug:1064226) (Jan Silhan)
  - added forgotten import (Jan Silhan)
  - fixed import errors after yum/i18n.py removal (Jan Silhan)
  - removed to_utf8 from yum/i18n.py (Jan Silhan)
  - removed to_str from yum/i18n.py (Jan Silhan)
  - removed utf8_text_fill from yum/i18n.py (Jan Silhan)
  - removed utf8_width from yum/i18n.py (Jan Silhan)
  - removed utf8_width_fill from yum/i18n.py (Jan Silhan)
  - removed to_unicode from yum/i18n.py (Jan Silhan)
  - make all strings unicode_literals implicitly (Jan Silhan)
  - moved _, P_ to dnf/i18n.py (Jan Silhan)
  - removed utf8_valid from yum/i18n.py (Jan Silhan)
  - removed str_eq from yum/i18n.py (Jan Silhan)
  - removed exception2msg from yum/i18n.py (Jan Silhan)
  - removed dummy_wrapper from yum/i18n.py (Jan Silhan)
  - cosmetics: leave around the good things from 660c3e5 (documentation, UT). (Ales Kozumplik)
  - Revert "fix: provides are not recognized for erase command. (RhBug:1087063)" (Ales Kozumplik)
  - fix: provides are not recognized for erase command. (RhBug:1087063) (Ales Kozumplik)
  - test: fix UsageTest test, so it work without dnf is installed on the system PEP8 cleanup (Tim Lauridsen)
  - cleanup: getSummary() and getUsage() can be dropped entirely now. (Ales Kozumplik)
  - test: use Command.usage & Command.summary API in unittest (Tim Lauridsen)
  - show plugin commands in separate block api: add new public Command.usage & Command.summary API cleanup: make Commands (Tim Lauridsen)
  - tests: move libcomps test to a separate test file. (Ales Kozumplik)
  - refactor: put DistoSyncCommand into its own file (Tim Lauridsen)
  - refactor: commands.group: _split_extcmd is a static method. (Ales Kozumplik)
  - GroupsCommand: make the way comps are searched more robust. (RhBug:1051869) (Ales Kozumplik)
  - tests: move GroupCommand tests to a more proper place. (Ales Kozumplik)
  - fix leak: Base.__del__ causes GC-uncollectable circles. (Ales Kozumplik)
  - gruops: 'list' and similar commands should run without root. (RhBug:1080331) (Ales Kozumplik)
  - refactor: conf is given to Output on instantiation. (Ales Kozumplik)
  - remove: Command.done_command_once and Command.hidden. (Ales Kozumplik)
  - [doc] improve documentation of '--best' (RhBug:1084553) (Ales Kozumplik)
  - api: Command.base and Command.cli are API attributes. (Ales Kozumplik)
  - demands: similarly to 78661a4, commands should set the exit success_exit_status directly. (Ales Kozumplik)
  - demands: commands requiring resolving dymamically need to set the demand now. (Ales Kozumplik)
  - doc: typo in group doc. (RhBug:1084139) (Ales Kozumplik)
  - api: Base.resolve() takes allow_erasing. (RhBug:1073859) (Ales Kozumplik)
  - refactor: OptionParser._checkAbsInstallRoot is static. (Ales Kozumplik)
  - option_parser: remove base dependency. (Ales Kozumplik)
  - move: dnf.cli.cli.OptionParser -> dnf.cli.option_parser.OptionParser. (Ales Kozumplik)
  - doc: 'clean packages' incorrectly mentions we do not delete cached packages. (RhBug:1083767) (Ales Kozumplik)
  - fix: TypeError in dnf history info <id> (RHBug: #1082230) (Tim Lauridsen)
  - Start new version: 0.5.0. (Ales Kozumplik)
  - remove: instance attrs of Base, namely cacheonly. (Ales Kozumplik)
  - tests: remove: support.MockCli. (Ales Kozumplik)
  - tests: fix locale independence. (Radek Holy)
  - cleanups in cli.OptionParser. (Ales Kozumplik)
  - fix: PendingDeprecationWarning from RPM in gpgKeyCheck(). (Ales Kozumplik)
  - api: add Cli.demands.root_user (RhBug:1062889) (Ales Kozumplik)
  - api: add Cli.demands and Command.config() to the API (RhBug:1062884) (Ales Kozumplik)
  - Integrate DemandSheet into CLI. (Ales Kozumplik)
  - Command.configure() takes the command arguments like run(). (Ales Kozumplik)
  - Add dnf.cli.demand.DemandSheet. (Ales Kozumplik)
  - remove: dead code for deplist, version and check-rpmdb commands. (Ales Kozumplik)
  - sync with transifex (Jan Silhan)
  - removed _enc method that did nothing without specspo (Jan Silhan)
  - fixed local reinstall error (Jan Silhan)
  - Fix Term.MODE setting under Python 3 in case of incapable tty stdout. (Radek Holy)
  - tests: move Term tests to better file. (Radek Holy)
  - refactor: move ReinstallCommand in its own module. (Ales Kozumplik)
  - rename: yumbase (case insensitive) -> base. (Ales Kozumplik)
  - fixed py3 error thrown by search command (Jan Silhan)
  - fixed wrong named variable (Jan Silhan)
  - fixed local downgrade error (Jan Silhan)
  - doc: fix Package references that are ambiguous now. (Ales Kozumplik)
  - fix: resource leak in yum.misc.checksum() under py3. (Ales Kozumplik)
  - fix: leak: couple of files objects left open. (Ales Kozumplik)
  - fix PendingDepreaction warning from rpm in _getsysver(). (Ales Kozumplik)
  - repo: Repo.cachedir is not a list. (Ales Kozumplik)
  - api: add Base.package_install et al. and Base.add_remote_rpm(). (RhBug:1079519) (Ales Kozumplik)
  - tests: fix tests broken under foreign locale after 32818b2. (Ales Kozumplik)
  - refactor: move install, downgrade and upgrade commands into separate modules. (Ales Kozumplik)
  - tests: refactor: make Term tests more isolated. (Radek Holy)
  - tests: fix terminfo capability independence. (Radek Holy)
  - api: explain that Base is a context manager with a close(). (Ales Kozumplik)
  - cosmetic: move stuff around in comps. (Ales Kozumplik)
  - api: groups: add comps.Package, add group.package_iter(). (RhBug:1079932) (Ales Kozumplik)
  - fixed installation of conflicted packages (RhBug:1061780) (Jan Silhan)
  - removed never executed code based on _ts_saved_file variable (Jan Silhan)
  - added logrotate script and ownership of log files to dnf (RhBug:1064211) (Jan Silhan)
  - fixed: highlight characters broken under py3 (RhBug:1076884) (Jan Silhan)
  - remove: base.deselectGroup(). it is not used. (Ales Kozumplik)
  - tests: fix broken InstallMultilib.test_install_src_fails(). (Ales Kozumplik)
  - groups: support manipulation with environments (RhBug:1063666) (Ales Kozumplik)
  - add dnf.util.partition(). (Ales Kozumplik)
  - refactor: RepoPersistor: use the global logger instead of an instance variable. (Ales Kozumplik)
  - groups: besides installed groups also store persistently the environments. (Ales Kozumplik)
  - rename: persistor.Groups -> ClonableDict. (Ales Kozumplik)
  - doc: cli_vs_yum: typography in bandwidth limiting section. (Ales Kozumplik)
  - doc: cli_vs_yum: we do not partially allow operations that install .srpm. (RhBug:1080489) (Ales Kozumplik)
  - refactor: imports order in cli/commands/__init__.py. (Ales Kozumplik)
  - refactor: groups: make all commands use _patterns2groups(). (Ales Kozumplik)
  - kernel: remove kernel-source from const.INSTALLONLYPKGS. (Ales Kozumplik)
  - build: 0.4.19-1 (Ales Kozumplik)
  - New version: 0.4.19 (Ales Kozumplik)
  - downloads: bump number of downloaded files on a skip. (RhBug:1079621) (Ales Kozumplik)
  - packaging: add dnf.cli.commands to the installation. (Ales Kozumplik)
  - refactor: put GroupCommand into its separate module. (Ales Kozumplik)
  - rename: make cli.commands a subpackage. (Ales Kozumplik)
  - AUTHORS: added Albert. (Ales Kozumplik)
  - test: fixed CacheTest.test_noroot() when running as root (Albert Uchytil)
  - AUTHORS: added Tim. (Ales Kozumplik)
  - fixes TypeError: '_DownloadErrors' object is not iterable (RhBug:1078832) (Tim Lauridsen)
  - fixed not including .mo files (Jan Silhan)
  - comps: _by_pattern() no longer does the comma splitting. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.19-1
changelog:
  - downloads: bump number of downloaded files on a skip. (RhBug:1079621) (Ales Kozumplik)
  - packaging: add dnf.cli.commands to the installation. (Ales Kozumplik)
  - refactor: put GroupCommand into its separate module. (Ales Kozumplik)
  - rename: make cli.commands a subpackage. (Ales Kozumplik)
  - AUTHORS: added Albert. (Ales Kozumplik)
  - test: fixed CacheTest.test_noroot() when running as root (Albert Uchytil)
  - AUTHORS: added Tim. (Ales Kozumplik)
  - fixes TypeError: '_DownloadErrors' object is not iterable (RhBug:1078832) (Tim Lauridsen)
  - fixed not including .mo files (Jan Silhan)
  - comps: _by_pattern() no longer does the comma splitting. (Ales Kozumplik)
  - including .mo files correctly (Jan Silhan)
  - tests: fix locale independence. (Radek Holy)
  - remove: unused trashy methods in dnf.yum.misc. (Ales Kozumplik)
  - persistor: do not save Groups if it didn't change (RhBug:1077173) (Ales Kozumplik)
  - tests: simplify the traceback logging. (Ales Kozumplik)
  - main: log IO errors etc. thrown even during Base.__exit__. (Ales Kozumplik)
  - logging: do not log IOError tracebacks in verbose mode. (Ales Kozumplik)
  - refactor: move out main._main()'s inner error handlers. (Ales Kozumplik)
  - added gettext as a build dependency  for translation files (Jan Silhan)
  - translation: updated .pot file and fetched fresh .po files from transifex (Jan Silhan)
  - removed redundant word from persistor translation (Jan Silhan)
  - translation: show relative path in generated pot file (Jan Silhan)
  - refactor: replaced type comparisons with isinstance (Jan Silhan)
  - translation: added mo files generation and including them in rpm package (Jan Silhan)
  - removed unused imports in base.py (Jan Silhan)
  - doc: typo in Base.group_install(). (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.18-1
changelog:
  - api: drop items deprecated since 0.4.9 or earlier. (Ales Kozumplik)
  - api: deprecate Base.select_group() (Ales Kozumplik)
  - doc: document the group marking operations. (Ales Kozumplik)
  - api: add Base.group_install() with exclude capability. (Ales Kozumplik)
  - groups: recognize 'mark install' instead of 'mark-install'. (Ales Kozumplik)
  - Allow installing optional packages from a group. (RhBug:1067136) (Ales Kozumplik)
  - groups: add installing groups the object marking style. (Ales Kozumplik)
  - groups: add Base.group_remove(). (Ales Kozumplik)
  - groups: add support for marking/unmarking groups. (Ales Kozumplik)
  - groups: add dnf.persistor.GroupPersistor(), to store the installed groups. (Ales Kozumplik)
  - logging: log plugin import tracebacks on the subdebug level. (Ales Kozumplik)
  - rename: dnf.persistor.Persistor -> RepoPersistor. (Ales Kozumplik)
  - doc: update README and FAQ with the unabbreviated name. (Ales Kozumplik)
  - groups: fix grouplist crashes with new libcomps. (Ales Kozumplik)
  - Do not terminate for unreadable repository config. (RhBug:1071212) (Ales Kozumplik)
  - cli: get rid of ridiculous slashes and the file:// scheme on config read fails. (Ales Kozumplik)
  - repo: log more than nothing about a remote repo MD download. (Ales Kozumplik)
  - drpm: fallback to .rpm download on drpm rebuild error. (RhBug:1071501) (Ales Kozumplik)
  - remove: Base.download_packages()' inner function mediasort(). (Ales Kozumplik)
  - tests: tidy up the imports, in particular import mock from support. (Ales Kozumplik)
  - changed documentation of distro-sync command (Jan Silhan)
  - added distro-sync explicit packages support (RhBug:963710) (Jan Silhan)
  - renamed testcase to distro_sync_all (Jan Silhan)
  - Minor spelling (Arjun Temurnikar)
  - i18n: translate repo sync error message. (Ales Kozumplik)
  - add support for ppc64le (Dennis Gilmore)
  - there is no arch called arm64 it is aarch64 (Dennis Gilmore)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.17-1
changelog:
  - doc: in the faq, warn users who might install rawhide packages on stable. (RhBug:1071677) (Ales Kozumplik)
  - cli: better format the download errors report. (Ales Kozumplik)
  - drpm: properly report applydeltarpm errors. (RhBug:1071501) (Ales Kozumplik)
  - fixed Japanese translatated message (RhBug:1071455) (Jan Silhan)
  - generated and synchronized translations with transifex (Jan Silhan)
  - added transifex support to cmake (gettext-export, gettext-update) (Jan Silhan)
  - api: expose RepoDict.get_matching() and RepoDict.all() (RhBug:1071323) (Ales Kozumplik)
  - api: add Repo.set_progress_bar() to the API. (Ales Kozumplik)
  - tests: test_cli_progress uses StringIO to check the output. (Ales Kozumplik)
  - downloads: fix counting past 100% on mirror failures (RhBug:1070598) (Ales Kozumplik)
  - repo: log callback calls to librepo. (Ales Kozumplik)
  - Add repository-packages remove-or-reinstall command. (Radek Holy)
  - Support negative filtering by new repository name in Base.reinstall. (Radek Holy)
  - Support removal N/A packages in Base.reinstall. (Radek Holy)
  - Add repository-packages remove command. (Radek Holy)
  - refactor: Reduce amount of code in repository-packages subcommands. (Radek Holy)
  - Support filtering by repository name in Base.remove. (Radek Holy)
  - remove: BaseCli.erasePkgs (Radek Holy)
  - Add repository-packages reinstall command. (Radek Holy)
  - exceptions: improve empty key handling in DownloadError.__str__(). (Ales Kozumplik)
  - downloads: fix fatal error message return value from download_payloads() (RhBug:1071518) (Ales Kozumplik)
  - fixes problem with TypeError in Base.read_comps() in python3 (RhBug:1070710) (Tim Lauridsen)
  - fix read_comps: not throwing exceptions when repo has no repodata (RhBug:1059704) (Jan Silhan)
  - not decompressing groups when --cacheonly option is set (RhBug:1058224) (Jan Silhan)
  - added forgotten import (Jan Silhan)
  - Add repository-packages move-to command. (Radek Holy)
  - Add repository-packages reinstall-old command. (Radek Holy)
  - Support filtering by repository name in Base.reinstall. (Radek Holy)
  - tests: test effects instead of mock calls. (Radek Holy)
  - Wrap some recently added long lines. (Radek Holy)
  - remove: BaseCli.reinstallPkgs (Radek Holy)
  - repos: repos can never expire. (RhBug:1069538) (Ales Kozumplik)
  - build: rebuild with 9d95442 (updated summaries_cache). (Ales Kozumplik)
  - doc: update summaries_cache. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.16-1
changelog:
  - fix: ensure MDPayload always has a valid progress attribute. (RhBug:1069996) (Ales Kozumplik)
  - refactor: Move repo-pkgs upgrade-to to a standalone class instead of reusing the UpgradeToCommand. (Radek Holy)
  - remove: BaseCli.updatePkgs (Radek Holy)
  - refactor: Remove the reference to updatePkgs from UpgradeSubCommand. (Radek Holy)
  - refactor: Remove the reference to updatePkgs from UpgradeCommand. (Radek Holy)
  - refactor: Move repo-pkgs upgrade to a standalone class instead of reusing the UpgradeCommand. (Radek Holy)
  - remove: BaseCli.installPkgs (Radek Holy)
  - refactor: Remove the reference to installPkgs from InstallSubCommand. (Radek Holy)
  - refactor: Remove the reference to installPkgs from InstallCommand. (Radek Holy)
  - refactor: Move repo-pkgs install to a standalone class instead of reusing the InstallCommand. (Radek Holy)
  - Revert "Support filtering by repository name in install_groupie." (Radek Holy)
  - Revert "Support filtering by repository name in Base.select_group." (Radek Holy)
  - Drop group filtering by repository name from installPkgs. (Radek Holy)
  - Drop "repo-pkgs install @Group" support. (Radek Holy)
  - refactor: Move CheckUpdateCommand.check_updates to BaseCli. (Radek Holy)
  - refactor: Move repo-pkgs check-update to a standalone class instead of reusing the CheckUpdateCommand. (Radek Holy)
  - refactor: Move repo-pkgs list to a standalone class instead of reusing the ListCommand. (Radek Holy)
  - tests: Add tests of repo-pkgs info against the documentation. (Radek Holy)
  - Fix "repo-pkgs info installed" behavior with respect to the documentation. (Radek Holy)
  - refactor: Move MockBase methods to BaseStubMixin. (Radek Holy)
  - refactor: Move repo-pkgs info to a standalone class instead of reusing the InfoCommand. (Radek Holy)
  - refactor: Move InfoCommand._print_packages to BaseCli.output_packages. (Radek Holy)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
changelog:
  - Update to 9.11.4-P1
  - Adds root key sentinel support
  - Large IXFR zone transfers are rejected to prevent journal corruption
  - Fixes CVE-2018-5740


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2
changelog:
  - Install generated manual pages
  - Remove system-config-bind from manual
  - Disable GeoIP support (#1609856)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
changelog:
  - Use new config file named-chroot.files for chroot setup (#1429656)
  - Fix chroot devices file verification (#1592873)
  - Prevent errors on bind-chroot uninstall when running (#1600583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
changelog:
  - Require openssl-devel and libcap-devel from bind-export-devel
  - Conflict with bind99-devel
  - Change spec globals to rpmbuild --with feature


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
changelog:
  - Use versioned provides
  - Fix starting of unit tests
  - Forward export libs path to isc-config
  - Rename export devel subpackage to bind-export-devel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
changelog:
  - Enable unit tests with kyua tool (#1532694)
  - Provide internal tool to prepare softhsm token storage
  - Proper fix for python3-bind subpackage directory ownership (#1522944)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
changelog:
  - Build against mariadb-connector-c-devel (#1493615)
  - Include DNSKEY 20326 also in trusted-key.key (#1505476)
  - Fix dynamic symbols conflict with ldap (#1205168)
  - Use hmac-sha256 for new RNDC keys (#1508003)
  - Include protocols and services in chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
changelog:
  - Update to 9.11.2
  - Add recursing and secroots file into default and sample config
  - Fix nsupdate GSSAPI auth against AD server (#1484451)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
changelog:
  - RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
  - Fix some rpm warnings


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
changelog:
  - Remove NM dispatcher script, since it is not needed any more (#1277257)
  - Replaced After=network-online.target with After=network.target in all unit files


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
changelog:
  - Commented out bindkeys-file statement in default configuration (#1223365#c3)
  - Removed unrecognized configure option --enable-developer
  - Added configure option --enable-full-report to get report on enabled features


author: Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
changelog:
  - Remove unrecognized build options for %configure
  - Own %{_includedir}/bind9 directory in -lite-devel
  - Fixed building without (optional) PKCS#11 support


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
changelog:
  - enable tuning for large systems - increases hardcoded internal limits
  - enable GeoIP access control feature


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
changelog:
  - update to 9.10.2 stable
  - remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
changelog:
  - update to 9.10.2rc1
  - fix nsupdate server auto-detection (#1184151)
  - drop merged patch bind99-rh985918.patch


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
changelog:
  - Fixed systemctl path in logrotate configuration (#1148360)
  - drop engine_pkcs11 dependency, since we use native PKCS#11 implementation


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
changelog:
  - Added native PKCS#11 functionality (#1097752)
  - bind-sdb now requires bind due to configuration and other utilities
  - bind-pkcs11 now requires bind due to configuration and other utilities


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
changelog:
  - Update to 9.9.6
  - drop merged patches and rebase some of existing patches
  - Add architecture specific dependencies.
  - Fix assert in dig when using +sigchase (#985918)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
changelog:
  - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
  - Fix race condition when freeing fetch object (ISC-Bugs #35385)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#997030)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
  - Added session-keyfile statement into default named.conf since we use /run/named


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


