bugfix update in Fedora 27 for checkpolicy, libselinux, & 4 more

Status: stable 2 years ago

Several fixes backported from upstream:

  • sepolicy: do not fail when file_contexts.local does not exist
  • sepolicy: fix misspelling of _ra_content_t suffix
  • sepolicy: support non-MLS policy in manpage
  • sepolicy: support non-MCS policy in manpage
  • sepolicy: remove stray space in section "SEE ALSO"
  • Fixed bad reference in roleattribute
  • checkpolicy,libselinux,libsepol,policycoreutils: Update my email address
  • libsepol: reset pointer after free
  • libsepol: cil: Add ability to redeclare types[attributes]
  • libsepol/cil: Keep attributes used by generated attributes in neverallow rules
  • libsepol: use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  • libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use extra_args
  • libsepol/cil: fix -Wwrite-strings warning
  • libsepol/cil: drop wrong unused attribute
  • restorecond: check write() and daemon() results
  • libsepol: fix memory leak in sepol_bool_query()
  • sepolicy: do not fail when file_contexts.local or .subs do not exist
  • gui: port to Python 3 by migrating to PyGI
  • sepolicy: ignore comments and empty lines in file_contexts.subs_dist
  • sepolicy: support non-MLS policy in gui
  • gui: remove the status bar
  • gui: fix parsing of "semodule -lfull" in tab Modules
  • gui: delete overridden definition of usersPage.delete()
  • gui: remove mappingsPage
  • libsemanage: Keep copy of file_contexts.homedirs in policy store
  • libsemanage: Add support for listing fcontext.homedirs file
  • python/semanage: Enable listing file_contexts.homedirs
  • libselinux: Add support for pcre2 to pkgconfig definition
  • libsepol: free ibendport device names
  • libsemanage: free genhomedircon fallback user
  • python/semanage: drop *_ini functions
  • python/semanage: Don't use global setup variable
  • python/semanage: Enforce noreload only if it's requested by -N option
  • python/semanage: Fix export of ibendport entries
  • python/semanage: Update Infiniband code to work on python3
  • python/sepolicy: Fix sepolicy manpage.
  • python/semanage: make seobject.py backward compatible

testcases: https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage

How to install

sudo dnf upgrade --advisory=FEDORA-2017-290cd03a8c

Comments 12

This update has been submitted for testing by plautrba.

This update has been pushed to testing.

works for me

karma: +1

Works great! LGTM! =)

karma: +1


karma: +1

No regressions noticed.

karma: +1

works for me

karma: +1

Works for me. No regressions noted compared to previous version.

karma: +1

This update has been submitted for batched by bodhi.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
Test Gating
Submitted by
Update Type
Update Severity
stable threshold: 7
unstable threshold: -3
Autopush (karma)
Autopush (time)
submitted 2 years ago
in testing 2 years ago
in stable 2 years ago

Related Bugs 4

00 #1476798 please install "setrans" directory to "/run" instead of "/var/run"
00 #1484905 cil_strpool.c: cil_strpool_tab variable is not properly destroyed
00 #1487521 libselinux.pc references libpcre in Requires.private instead of pcre2-8
00 #1522942 spec file should own python module directories

Automated Test Results

Test Cases

0+1 Test Case policycoreutils semanage
0+1 Test Case policycoreutils semodule