<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="13">
<package pkgid="0ae76ccfe1e2b6e667f0af6ce862477077392a5f11720f63e7b368acdb2f745e83b12f94eff41a8c04fae3284728dd3cd86b8b17f471758f922116b883c2d310" name="policycoreutils" arch="i586">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="197972d87e6e3e8a4e438b05d1bb2ff14774e09fdcfa05ac030c61d9fcb73bdd40a0da2588edeffb11f5b672d857cdadd346c8690f79f2cbd743dbc0dc8e28fa" name="policycoreutils" arch="src">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="f9003303f73326c0155d6d27fb54c230cf9bb1891240ccd3109e2d1a0b4f5301d8234ac8eb2d3f4572be1861da9f710fcd7d9d28363b41b4f2d17a8e5a75a672" name="policycoreutils" arch="x86_64">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="b9f068c04799e0190b2d415b67460e09e99fb5cedc398dbc41faff54c0f3cc006f67c8b20823d4a2f692b14124d24554a30b67abc2b3be6d80fd4dd402eb9931" name="policycoreutils-dbus" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="e671e9bda94ad697b520e28ecce6fc2836eca568da6d01038754a9a990a8623e69876bc6f8be47f991bc8c21e52097e88d2004e09092317d2d8b4b91a44b8afb" name="policycoreutils-devel" arch="i586">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="e7034b783790f1b3fbb0b9aac2349afbdf395589272444ae988efb1b0766ce7ebb7546610d1abebea21cca299f4aba30a31aa9aa62766a3672077477341ac676" name="policycoreutils-devel" arch="x86_64">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="c6b88da979c484b9e011dbe27a4cc72c1949493228a1c8e476dac61584fe5b99cf1136bb7d213b2eb244694977a44847f17da5cc225e94aabfba6c885098167b" name="policycoreutils-gui" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="25bc94e1653dcf48fdcc70781b04402eb06393490ba1f5364a75232c42de46ae80098a71615aa6925067e7092d7a343432f732136e9d2723fc3ac795ce3bfe0b" name="policycoreutils-lang" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="0ad5dadad0335996a9b6a06fe0f09f5666d27c21e0fea28034b58d93a2c7576a0ba48d5e76cbd08ecd38b38776fbb333b5951a5f1d065b86276ce4c15080e6f8" name="policycoreutils-newrole" arch="i586">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="01e94ebf7ec5195d41c33adfc59f0ff154e46c5b060b9b9ce5e1fe0a5e095d5660621178940d4844787fd0c8ccc4f8577c0e9f2ca05af372293131b6f4ea44e6" name="policycoreutils-newrole" arch="x86_64">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="9a647e46d3046345584c30ebe0d99ff547e71356127dfa0278e693fca1e08ef13b5ad25ceb330ea95c5da7b37d49b436e2e33b1ddfee213d618372ef01440884" name="policycoreutils-python-utils" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="e1050e64b655d1a1b0630e365583dafb2519da4b7d7d7aaf53f0f99868517fe8d1c04fd81cf51895cfcf0eeae7641dbe2d99bae68f599fe70ce0e154f6ee7c10" name="python313-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
<package pkgid="fffd1f9f961ed14582a297cded20ea22e03de3aaddc453b3deaa6e83fd903fa33019dd619f29c76c9d30613a19e38aabf6597c81d693da38b2dfe56cdd8d71d7" name="python314-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.11" rel="7.9"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1744372800">- Move gui.py file to gui sub-package to prevent policycoreutil python
  packages from having excessive requirements</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532800">- Properly exclude gui.py file (bsc#1242096)
- Added Recommends for policycoreutils-devel to the gui package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1746532801">- Change Recommends for policycoreutils-devel to the gui package to
  Requires. This causees some system bloat for people that only
  want to use the config GUI, but prevents errors when building
  policy packages</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1747310400">- Improve policycoreutils-devel package dependencies (bsc#1236193).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1748260800">- Remove misleading comment from spec file about reuqires for
  policycoreutils-devel</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1749643200">- Moved /etc/sestatus.conf to /usr/etc.
- This patch is upstream:
  https://github.com/SELinuxProject/selinux/pull/415</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1752753600">- Update to version 3.9
  * setfiles: Add -U option to modify user and role portions
  * semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config
  * Updated usr_etc.patch</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1753876800">- Move /var/lib/sepolgen/perm_map to /usr/share/sepolgen and create
  a symlink instead (boo#1233024)</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1770292800">- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC
  * semanage: Reset active value when deleting boolean customizations
  * python/sepolicy: Add support for DNF5
  * Man page improvments
- keyring: Add key of Jason Zaman &lt;jasonzaman@gmail.com&gt;
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1771243200">- Fix build with latest python-pip bsc#1258173
- Add patch sepolicy-build-isolation.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772452800">- python-utils package: Don't own /var/lib/selinux (PED-14773)
- devel package: Create /var/lib/sepolgen with systemd-tmpfiles
  (PED-14773)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1772539200">- Drop use of update-desktop-files (jsc#PED-15235). We will not
  upstream the translations, they seem to be very low quality</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1780920000">- Reintroduce sandbox package (bsc#1266226) and a couple quality of life
  improvements:
    add policycoreutils-sandbox-fix-cleanup.patch
    add sandbox-sandbox-fix-saving-file-changes.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1783339200">- Update to version 3.11
  https://github.com/SELinuxProject/selinux/releases/tag/3.11
  - User-visible changes:
  - Several security improvements in dbus and gui
  - Dropped Python 2 support from audit2why
  - Added `setfiles -A` option to disable SELINUX_RESTORECON_ADD_ASSOC
  - restorecon only logs error on read-only filesystem instead of failing (allows
    relabeling with read-only BTRFS subvolumes)
  - Introduced a new SELINUX_RESTORECON_SKIP_MULTILINK flag to
    selinux_restorecon(3); if set, then selinux_restorecon(3) will refuse to
    relabel files with multiple hard links to prevent mislabeling them. Updated
    restorecond(8) to always pass this flag when relabeling files to prevent
    mislabeling hard links to files owned by others, e.g. when relabeling user
    home directories or /tmp.
  - Fixed semanage audit fd creation to avoid hitting RLIMIT_NOFILE on large
    semanage import operations (#291).
  - Improved semanage-fcontext(8) manpage
  - Fixed dispol and dismod to show all options in the -h text.
  - Development-relevant changes:
  - Reformatted entire tree based on .clang-format and added new
    check-format/format make targets to check and/or reformat code to match.
    This is now a requirement for new patches.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
  - Disabled build isolation for sepolicy python module.
  - Fixed build errors with glibc 2.43.
  - Updated pywrap build targets for modern python builds using the Python3 build
    module.
- Packaging changes:
  - Drop sepolicy-build-isolation.patch
    was accepted upstream
  - Drop sandbox-sandbox-fix-saving-file-changes.patch
    was accepted upstream
  - Add python-build as new BuildRequires
  - Rewrite policycoreutils-sandbox-fix-cleanup.patch
    Code was rewritten upstream, dropped the part in seunshare.c
  - Rewrite usr_etc.patch
    Did not apply anymore due to code changes</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1783425600">- Move the sandbox subpackage to the separate selinux-sandbox package (bsc#1270534)
  drop policycoreutils-sandbox-fix-cleanup.patch</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1784289600">- Drop /tmp cleanup to avoid TOCTOU issues (bsc#1271645)
  - can be dropped once "policycoreutils/scripts/fixfiles: drop /tmp cleanup" is
    in the upstream release
  - Add patch: 1271645-drop-tmp-cleanup.patch</changelog>
</package>
</otherdata>