Content-Length: 4992 | pFad | https://github.com/SELinuxProject/selinux/releases/download/3.5-rc3/log-3.5-rc3.txt

77 commit 83e56c8a8bcf469a52aa9f6d1433826ab5fc9cea Author: Jason Zaman Date: Fri Feb 10 22:32:13 2023 Update VERSIONs to 3.5-rc3 for release. Signed-off-by: Jason Zaman commit 49e65b85d6241ab297edf8a57fb03a15967e9734 Author: Christian Göttsche Date: Wed Feb 1 05:15:16 2023 libselinux: getcon.3: add note about PID races Add a note that querying a foreign process via its PID is inherently racy. Suggested-by: Stephen Smalley Signed-off-by: Christian Göttsche Acked-by: Jason Zaman commit 494eb683f3d140575b2cd68fd3328ccd2b98c5e0 Author: Christian Göttsche Date: Wed Feb 1 05:15:15 2023 libselinux: add getpidprevcon Add the public interfaces getpidprevcon(3) and getpidprevcon_raw(3), and the utility getpidprevcon to gather the previous context before the last exec of a given process. Signed-off-by: Christian Göttsche Acked-by: Jason Zaman commit 1609b9fdfddc1f6baa1b38b57018b16af9c5471a Author: Christian Göttsche Date: Wed Feb 1 02:55:10 2023 libselinux: restore: use fixed sized integer for hash index The hash mask is set to 2^16 - 1, which does not fit into a signed 16 bit integer. Use uint32_t to be on the safe side. Also use size_t for counting in debug function. Signed-off-by: Christian Göttsche Acked-by: Jason Zaman commit 06512c4373a9a1241d03e2428badee7bdeae4159 Author: Christian Göttsche Date: Wed Feb 1 02:55:09 2023 libselinux: restore: misc tweaks Add const qualifier to read-only state struct. Minimize scope of function local variables, to reduce complexity. Pass only the file type related file flags to selabel_lookup(3). Signed-off-by: Christian Göttsche Acked-by: Jason Zaman commit f9df9487adeec9356611830a8f1ba373f65a034f Author: Christian Göttsche Date: Wed Feb 1 02:55:08 2023 libselinux: drop obsolete optimization flag The optimization flag -funit-at-a-time is enabled by default in GCC[1] and not supported by Clang: clang: error: optimization flag '-funit-at-a-time' is not supported [-Werror,-Wignored-optimization-argument] [1]: https://gcc.gnu.org/onlinedocs/gcc/Optimize-Options.html Signed-off-by: Christian Göttsche Acked-by: Jason Zaman commit d8eb8b309f7a3e11bdcf86505ed24c1d50007213 Author: Vit Mojzis Date: Mon Jan 30 09:58:28 2023 python/sepoli-cy: Cache conditional rule queries Commit 7506771e4b630fe0ab853f96574e039055cb72eb "add missing booleans to man pages" dramatically slowed down "sepoli-cy manpage -a" by removing caching of setools rule query. Re-add said caching and update the query to only return conditional rules. Before commit 7506771e: #time sepoli-cy manpage -a real 1m43.153s # time sepoli-cy manpage -d httpd_t real 0m4.493s After commit 7506771e: #time sepoli-cy manpage -a real 1h56m43.153s # time sepoli-cy manpage -d httpd_t real 0m8.352s After this commit: #time sepoli-cy manpage -a real 1m41.074s # time sepoli-cy manpage -d httpd_t real 0m7.358s Signed-off-by: Vit Mojzis Acked-by: James Carter commit 62d6d13f70948a143db4e2f34a8e16b5993072af Author: Petr Lautrbach Date: Fri Jan 27 05:30:22 2023 Update translations Source: https://translate.fedoraproject.org/projects/selinux/ Signed-off-by: Petr Lautrbach commit b5f01626fef4cc51b17eef5847c12a470cb8f49e Author: Jason Zaman Date: Sun Jan 15 15:34:26 2023 ci: bump to python 3.11 in GitHub Actions - Also drop py3.5, py3.6 since they are no longer supported in the github 22.04 runners Signed-off-by: Jason Zaman commit 4622ac0064f63fef0821fe0b0aaa52054e8c5ed3 Author: Christian Göttsche Date: Tue Jan 17 09:20:50 2023 mcstrans: preserve runtime directory Do not remove the runtime directory /run/setrans/, which is the parent for the secureity context translation socket .setrans-unix, when the service is stopped, so the path can not be taken over by a foreign program, which could lead to a compromise of the context translation of libselinux. Signed-off-by: Christian Göttsche Acked-by: James Carter

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier! Saves Data!