Name: | checkpolicy |
---|---|
Version: | 2.1.12 |
Release: | 6.el7 |
Architecture: | x86_64 |
Group: | Development/System |
Size: | 1063631 |
License: | GPLv2 |
RPM: | checkpolicy-2.1.12-6.el7.x86_64.rpm |
Source RPM: | checkpolicy-2.1.12-6.el7.src.rpm |
Build Date: | Sun May 04 2014 |
Build Host: | ca-buildj3.us.oracle.com |
Vendor: | Oracle America |
Summary: | SELinux policy compiler |
Description: | Security-enhanced Linux is a feature of the Linux® kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security. This package contains checkpolicy, the SELinux policy compiler. Only required for building policies. |
- Mass rebuild 2014-01-24
- Mass rebuild 2013-12-27
- Fix a segmentation fault if the --handle-unknown option was set without arguments. - Thanks to Alexandre Rebert and his team at Carnegie Mellon University for detecting this crash.
- ":" should be allowed for file trans names
- Space should be allowed for file trans names
- Update to upstream * Fix errors found by coverity * implement default type policy syntax * Free allocated memory when clean up / exit.
- Update to latest patches from eparis/Upstream - checkpolicy: libsepol: implement default type policy syntax - - We currently have a mechanism in which the default user, role, and range - can be picked up from the source or the target object. This implements - the same thing for types. The kernel will override this with type - transition rules and similar. This is just the default if nothing - specific is given.
- Rebuild with fixed libsepol
- Update to upstream * fd leak reading policy * check return code on ebitmap_set_bit
- Rebuild to grab latest libsepol