bugfix update in Fedora 27 for checkpolicy, libselinux, & 4 more

Status: stable 2 years ago

Several fixes backported from upstream:

  • sepolicy: do not fail when file_contexts.local does not exist
  • sepolicy: fix misspelling of _ra_content_t suffix
  • sepolicy: support non-MLS policy in manpage
  • sepolicy: support non-MCS policy in manpage
  • sepolicy: remove stray space in section "SEE ALSO"
  • Fixed bad reference in roleattribute
  • checkpolicy,libselinux,libsepol,policycoreutils: Update my email address
  • libsepol: reset pointer after free
  • libsepol: cil: Add ability to redeclare types[attributes]
  • libsepol/cil: Keep attributes used by generated attributes in neverallow rules
  • libsepol: use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  • libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
  • libsepol/cil: fix -Wwrite-strings warning
  • libsepol/cil: drop wrong unused attribute
  • restorecond: check write() and daemon() results
  • libsepol: fix memory leak in sepol_bool_query()
  • sepolicy: do not fail when file_contexts.local or .subs do not exist
  • gui: port to Python 3 by migrating to PyGI
  • sepolicy: ignore comments and empty lines in file_contexts.subs_dist
  • sepolicy: support non-MLS policy in gui
  • gui: remove the status bar
  • gui: fix parsing of "semodule -lfull" in tab Modules
  • gui: delete overridden definition of usersPage.delete()
  • gui: remove mappingsPage
  • libsemanage: Keep copy of file_contexts.homedirs in policy store
  • libsemanage: Add support for listing fcontext.homedirs file
  • python/semanage: Enable listing file_contexts.homedirs
  • libselinux: Add support for pcre2 to pkgconfig definition
  • libsepol: free ibendport device names
  • libsemanage: free genhomedircon fallback user
  • python/semanage: drop *_ini functions
  • python/semanage: Don't use global setup variable
  • python/semanage: Enforce noreload only if it's requested by -N option
  • python/semanage: Fix export of ibendport entries
  • python/semanage: Update Infiniband code to work on python3
  • python/sepolicy: Fix sepolicy manpage.
  • python/semanage: make seobject.py backward compatible

testcases: https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage

How to install

sudo dnf upgrade --advisory=FEDORA-2017-290cd03a8c

Comments 12

This update has been submitted for testing by plautrba.

This update has been pushed to testing.

works for me

karma: +1

Works great! LGTM! =)

karma: +1


karma: +1

No regressions noticed.

karma: +1

works for me

karma: +1

Works for me. No regressions noted compared to previous version.

karma: +1

This update has been submitted for batched by bodhi.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Content Type
Test Gating
Submitted by
Update Type
Update Severity
stable threshold: 7
unstable threshold: -3
submitted 2 years ago
in testing 2 years ago
in stable 2 years ago

Related Bugs 4

00 #1476798 please install "setrans" directory to "/run" instead of "/var/run"
00 #1484905 cil_strpool.c: cil_strpool_tab variable is not properly destroyed
00 #1487521 libselinux.pc references libpcre in Requires.private instead of pcre2-8
00 #1522942 spec file should own python module directories

Automated Test Results

Test Cases

0+1 Test Case policycoreutils semanage
0+1 Test Case policycoreutils semodule