policycoreutils-newrole-2.0.83-30.1.el6_8>t  DH`pX04O FT[Fkؐpfmo\aod8~:3-EUUd+)5uHB}Gh<`~BK|in#CN!ClU,hiF"*"D-j\,藌XϢ݂p:k֎9G[,EZV[-sAPU=K IM+1̔f18A"zq_m{!uC CSFeA@i6ZB)^M=UNU{4T"pKi\ iD> Z'/vrmpƠ(>sb3oUQzɤ.Т!pωD=BXxX}Ȓvnhڝ*!rt0/5auus]hHp~Vx0got#rsw}Snhٵ3U8dd$B6u^׼A-$*p+ ^I~ӅE쥅 [7739f843fce5a49e9683a1e6c34943e14e54e9caʐX04O F5Qv -B X<&hˠxBX s 2@%m Hpvyf*֝ϰ;)-0^79kS]ظ9kFDw{=4ND{ zcY"ȧ"TK4YcTUNТ$KH!F~!q   lHK8[V3 d+%Uq>HOH$hɵS/yZTU.U$}sl2$=߼I$'͊>ߓ&-B-!y\p/Az8?d! , Q *HNX` d h p  <D|(89:GHIXY\]^ b(defltuvwxy Cpolicycoreutils-newrole2.0.8330.1.el6_8The newrole application for RBAC/MLSRBAC/MLS policy machines require newrole as a way of changing the role or level of a logged in user.X/c1bm.rdu2.centos.orgpCentOSGPLv2+CentOS BuildSystem System Environment/Basehttp://www.selinuxproject.orglinuxx86_64j'큤X/X/9ff8f3e11068d685489cf806322f4df208da102f2219ad1876a3bc2e2ccc16a093d2f1d5ad280ecb13c3bd03252c8f9866400d8348999372193b9ce5f6504375rootrootrootrootpolicycoreutils-2.0.83-30.1.el6_8.src.rpmpolicycoreutils-newrolepolicycoreutils-newrole(x86-64)@@@@@@@@@@@@   @ libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcap.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam_misc.so.0()(64bit)libpam_misc.so.0(LIBPAM_MISC_1.0)(64bit)libselinux.so.1()(64bit)policycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.0.83-30.1.el6_83.0.4-14.6.0-14.0-15.2-14.8.0X @VVVvVS@V.UhTUY@UG_@TTPT@SSFSS@S@SESS"@R[RL R9R8D@R8D@R(r@R(r@R@Q*@P@PP7@P*P{Pj@OOyOX@O1@O))@O"N0N0N|tNs:@NoEN\N2N-ZN%qM@Mb@LrbLe3Le3Lc@LZLZLZLZLYV@LT@LPLPLN@LMxLF@LELk@Lk@Lk@L0L @L@L@LGLGK^KuKuKuKKKFK @K޺KtK#@KKKKŮ@K\K"@K9@KK@K@K[KrK,K@KK@K@KK{@KzKs@Kl@Kie@KbKa|@Ka|@K`*KXAKUKO@KG@KG@KD{@K+nK*@K(K K?KK@K KK>J@JJ@J@Jݦ@JTJ`@JJս@J1@JęJęJH@J@Jv@J$J$J0@J0@J0@JG@JG@JJ^@JJu@J#J#JJ@J:J@J@JJJ@J@J Jyt@Jp9JlE@JS8JD@J'@J#JJJIIIIzI@IܑIIyI@IaI@II@IU@IIIIx_Iw@IuImIl@IcGIFFI?@I:i@I7@I5#@I3I1.IsI"@I-I9@I IP@IP@II@Ig@HrH~@Hf@Hf@HYH@He@HHH|@H@HoH)HH@H@HH@H@H@Ht@HsVHsVHkmHkmHj@HhH`H_@HVUHQHQHO@H-w@H-w@H(1@H(1@H!H!H@H@G@G@G߮G@GGGD@GOG[@G@G}G}G,@G,@G,@GGG@G@GZ@GeGeGxGxGkGjY@GiGiGbp@G^{G]*@GR@GAzGAzGAzGAzG=@G=@G<4G2@G/G/G+@G)G(n@G@G@GJGGV@GV@GV@G@G@G'@G2G2G2FF@FIFFFFFwF&@F@F1FFޚ@FFF@F@FҼFF@FvFvFɂ@FuF@F@F;@FF@FF@F@F@F{Fzh@Fo@Fo@Fm9@Fm9@FcFcF` @FNFLCF; @F7+F5@F/BF/BF-@F-@F(@F&@F&@F&@F&@F#e@F#e@F @FpF@FF*F*FAF F @F@F@E{@E@E@E@E@EE@E݅E݅EEEEK@EVEɿ@E@EJ@EJ@EJ@EE@E@Ex@EEEE=E@EEI@E%E@EEySEx@EvEp@Emv@Emv@Emv@El$El$EfEd;EaEaE]@E\RE\RE[@E[@E[@E[@EYEYES@EO#E*9E&E@E E~E~E~E@E D@E D@EEEOE[@E D@D@D D D@D@D@D@DDD@DГDГDB@DȪDD@D{D{DA@DX@D@D4D@DD@DDW@DDDD|3DvDtJDtJDtJDoDhm@Dhm@Dhm@DaD_2D]@DYDGwDC@D?D5D5D3@D*vD)%@DDDDD@DDDDj@Dj@D $@D/C@CC@CtC@CCCCEC@CC @Ch@Ch@Ch@Ch@C@C@C@C-C-C-CCCCǖ@CáCáC @C @CCC,C8@CC@C@C@CC @CqCqC @CCC}@C+C@CC@CBC@C|pC{@Cx|@CtCqCqCp@Cp@CoAC^@C^@CWCTCTCP@COCNL@CLCJWCECECC@C:C:C1K@C/C)b@C&@C%mCC@C@C@C C C @C&BTBBw@BۙB@B@BB]@B@B@BBB@BBr!B^[@B] BZfBZfBU BS@B9q@B6@B06B.@B-B$Y@B#BBBp@Bp@BB@B*@B@B@B@B @B LB LB @BBX@BBAA)@A)@AA@A@A@A@A@An@A3A3A3AҜ@AƾAA@AAx@Ax@Ak@A]FA]FAT @ARAPA@EA3A+-A+-A+-A+-A+-A)@A(A AA,AA@@ @@@@@7@@7@@@@@@@@@p@@@@@@@@@@5@@5@@@@@@n@n@z@@@@@b@@z@u>@mU@l@@h@h@h@h@d@@b@`&@X=@X=@X=@X=@X=@X=@X=@X=@U@U@U@O@@M@M@Hk@=@=@=@;<@4@@,@@@@@@@R??@??D@?@?@?z?q@?a@?a@?2?@?2?@?2?@?/@><@Petr Lautrbach - 2.0.83-30.1Petr Lautrbach 2.0.83-29Petr Lautrbach 2.0.83-28Petr Lautrbach 2.0.83-27Petr Lautrbach 2.0.83-26Petr Lautrbach 2.0.83-25Petr Lautrbach 2.0.83-24Petr Lautrbach 2.0.83-23Petr Lautrbach 2.0.83-22Petr Lautrbach 2.0.83-21Petr Lautrbach 2.0.83-20Miroslav Grepl - 2.0.83-19.48Miroslav Grepl - 2.0.83-19.47Miroslav Grepl - 2.0.83-19.46Miroslav Grepl - 2.0.83-19.45Miroslav Grepl - 2.0.83-19.44Miroslav Grepl - 2.0.83-19.43Miroslav Grepl - 2.0.83-19.42Miroslav Grepl - 2.0.83-19.41Miroslav Grepl - 2.0.83-19.40Miroslav Grepl - 2.0.83-19.39Miroslav Grepl - 2.0.83-19.38Miroslav Grepl - 2.0.83-19.37Miroslav Grepl - 2.0.83-19.36Miroslav Grepl - 2.0.83-19.35Miroslav Grepl - 2.0.83-19.34Miroslav Grepl - 2.0.83-19.33Miroslav Grepl - 2.0.83-19.32Miroslav Grepl - 2.0.83-19.31Miroslav Grepl - 2.0.83-19.30Miroslav Grepl - 2.0.83-19.29Miroslav Grepl - 2.0.83-19.28Miroslav Grepl - 2.0.83-19.27Miroslav Grepl - 2.0.83-19.26Miroslav Grepl - 2.0.83-19.25Miroslav Grepl - 2.0.83-19.24Miroslav Grepl - 2.0.83-19.23Dan Walsh - 2.0.83-19.22Dan Walsh - 2.0.83-19.21Dan Walsh - 2.0.83-19.20Dan Walsh - 2.0.83-19.19Miroslav Grepl 2.0.83-19.18Miroslav Grepl 2.0.83-19.17Dan Walsh 2.0.83-19.16Miroslav Grepl 2.0.83-19.15Dan Walsh 2.0.83-19.14Dan Walsh 2.0.83-19.13Dan Walsh 2.0.83-19.12Dan Walsh 2.0.83-19.11Dan Walsh 2.0.83-19.10Dan Walsh 2.0.83-19.9Dan Walsh 2.0.83-19.1Dan Walsh 2.0.83-19Dan Walsh 2.0.83-18Dan Walsh 2.0.83-17Dan Walsh 2.0.83-16Dan Walsh 2.0.83-15Dan Walsh 2.0.83-14Dan Walsh 2.0.83-13Dan Walsh 2.0.83-12Dan Walsh 2.0.83-11David Malcolm - 2.0.83-10Dan Walsh 2.0.83-9Dan Walsh 2.0.83-8Dan Walsh 2.0.83-7Dan Walsh 2.0.83-6David Malcolm - 2.0.83-5Dan Walsh 2.0.83-4Dan Walsh 2.0.83-3Dan Walsh 2.0.83-1Dan Walsh 2.0.82-31Dan Walsh 2.0.82-30Dan Walsh 2.0.82-29Dan Walsh 2.0.82-28Dan Walsh 2.0.82-27Dan Walsh 2.0.82-26Dan Walsh 2.0.82-25Dan Walsh 2.0.82-24Dan Walsh 2.0.82-23Dan Walsh 2.0.82-22Dan Walsh 2.0.82-21Dan Walsh 2.0.82-20Dan Walsh 2.0.82-18Dan Walsh 2.0.82-17Dan Walsh 2.0.82-15Dan Walsh 2.0.82-14Dan Walsh 2.0.82-13Dan Walsh 2.0.82-11Dan Walsh 2.0.82-10Dan Walsh 2.0.82-8Dan Walsh 2.0.82-7Dan Walsh 2.0.82-6Dan Walsh 2.0.82-5Dan Walsh 2.0.82-4Dan Walsh 2.0.82-3Dan Walsh 2.0.82-2Dan Walsh 2.0.82-1Dan Walsh 2.0.81-4Dan Walsh 2.0.81-3Dan Walsh 2.0.81-2Dan Walsh 2.0.81-1Dan Walsh 2.0.80-2Dan Walsh 2.0.80-1Dan Walsh 2.0.79-5Dan Walsh 2.0.79-4Dan Walsh 2.0.79-3Dan Walsh 2.0.79-2Dan Walsh 2.0.79-1Dan Walsh 2.0.78-21Dan Walsh 2.0.78-20Dan Walsh 2.0.78-19Dan Walsh 2.0.78-17Dan Walsh 2.0.78-16Dan Walsh 2.0.78-15Dan Walsh 2.0.78-14Dan Walsh 2.0.78-13Dan Walsh 2.0.78-12Dan Walsh 2.0.78-11Dan Walsh 2.0.78-10Dan Walsh 2.0.78-9Dan Walsh 2.0.78-8Dan Walsh 2.0.78-7Dan Walsh 2.0.78-6Dan Walsh 2.0.78-5Dan Walsh 2.0.78-4Dan Walsh 2.0.78-3Dan Walsh 2.0.78-2Dan Walsh 2.0.78-1Dan Walsh 2.0.77-1Dan Walsh 2.0.76-1Dan Walsh 2.0.75-3Dan Walsh 2.0.75-2Dan Walsh 2.0.75-1Dan Walsh 2.0.74-15Dan Walsh 2.0.74-14Dan Walsh 2.0.74-13Dan Walsh 2.0.74-12Dan Walsh 2.0.74-11Dan Walsh 2.0.74-10Dan Walsh 2.0.74-9Dan Walsh 2.0.74-8Dan Walsh 2.0.74-7Dan Walsh 2.0.74-6Dan Walsh 2.0.74-5Dan Walsh 2.0.74-4Dan Walsh 2.0.74-3Dan Walsh 2.0.74-2Dan Walsh 2.0.74-1Dan Walsh 2.0.73-5Dan Walsh 2.0.73-4Dan Walsh 2.0.73-3Dan Walsh 2.0.73-2Dan Walsh 2.0.73-1Dan Walsh 2.0.71-15Bill Nottingham 2.0.71-15Dan Walsh 2.0.71-14Tomas Mraz - 2.0.71-13Dan Walsh 2.0.71-12Dan Walsh 2.0.71-11Dan Walsh 2.0.71-10Ville Skyttä - 2.0.71-9Dan Walsh 2.0.71-7Dan Walsh 2.0.71-6Dan Walsh 2.0.71-5Dan Walsh 2.0.71-4Dan Walsh 2.0.71-3Dan Walsh 2.0.71-2Dan Walsh 2.0.71-1Dan Walsh 2.0.70-2Dan Walsh 2.0.70-1Dan Walsh 2.0.68-1Fedora Release Engineering - 2.0.64-3Tom "spot" Callaway 2.0.64-2Dan Walsh 2.0.64-1Dan Walsh 2.0.63-5Dan Walsh 2.0.63-4Dan Walsh 2.0.63-3Dan Walsh 2.0.63-2Dan Walsh 2.0.63-1Dan Walsh 2.0.62-14Dan Walsh 2.0.62-13Dan Walsh 2.0.62-12Dan Walsh 2.0.62-10Dan Walsh 2.0.62-9Dan Walsh 2.0.62-8Dan Walsh 2.0.62-7Dan Walsh 2.0.62-6Dan Walsh 2.0.62-5Dan Walsh 2.0.62-4Fedora Release Engineering - 2.0.62-3Dan Walsh 2.0.62-2Dan Walsh 2.0.62-1Dan Walsh 2.0.61-10Dan Walsh 2.0.61-9Dan Walsh 2.0.61-8Dan Walsh 2.0.61-7Dan Walsh 2.0.61-6Dan Walsh 2.0.61-4Dan Walsh 2.0.61-3Dan Walsh 2.0.61-2Dan Walsh 2.0.61-1Dan Walsh 2.0.60-7Dan Walsh 2.0.60-6Dan Walsh 2.0.60-5Dan Walsh 2.0.60-4Ignacio Vazquez-Abrams - 2.0.60-3Dan Walsh 2.0.60-2Dan Walsh 2.0.60-1Ignacio Vazquez-Abrams - 2.0.59-2Dan Walsh 2.0.59-1Dan Walsh 2.0.58-1Dan Walsh 2.0.57-12Jesse Keating - 2.0.57-11Dan Walsh 2.0.57-10Dan Walsh 2.0.57-9Dan Walsh 2.0.57-8Dan Walsh 2.0.57-7Dan Walsh 2.0.57-6Dan Walsh 2.0.57-5Dan Walsh 2.0.57-4Dan Walsh 2.0.57-3Dan Walsh 2.0.57-2Dan Walsh 2.0.57-1Dan Walsh 2.0.56-1Dan Walsh 2.0.55-8Dan Walsh 2.0.55-7Dan Walsh 2.0.55-5Dan Walsh 2.0.55-4Dan Walsh 2.0.55-2Dan Walsh 2.0.55-1Dan Walsh 2.0.54-7Dan Walsh 2.0.54-6Dan Walsh 2.0.54-5Dan Walsh 2.0.54-2Dan Walsh 2.0.54-1Dan Walsh 2.0.53-3Dan Walsh 2.0.53-2Dan Walsh 2.0.53-1Dan Walsh 2.0.52-6Dan Walsh 2.0.52-5Dan Walsh 2.0.52-4Dan Walsh 2.0.52-3Dan Walsh 2.0.52-2Dan Walsh 2.0.52-1Dan Walsh 2.0.50-2Dan Walsh 2.0.50-1Dan Walsh 2.0.49-10Dan Walsh 2.0.49-8Dan Walsh 2.0.49-7Dan Walsh 2.0.49-6Dan Walsh 2.0.49-5Dan Walsh 2.0.49-4Dan Walsh 2.0.49-3Dan Walsh 2.0.49-2Dan Walsh 2.0.49-1Dan Walsh 2.0.47-3Dan Walsh 2.0.47-2Dan Walsh 2.0.47-1Matthias Clasen - 2.0.46-5Matthias Clasen - 2.0.46-4Dan Walsh 2.0.46-3Dan Walsh 2.0.46-2Dan Walsh 2.0.46-1Dan Walsh 2.0.44-1Dan Walsh 2.0.43-2Dan Walsh 2.0.43-1Dan Walsh 2.0.42-3Dan Walsh 2.0.42-2Dan Walsh 2.0.42-1Dan Walsh 2.0.41-1Dan Walsh 2.0.39-1Dan Walsh 2.0.38-1Dan Walsh 2.0.37-1Dan Walsh 2.0.36-2Dan Walsh 2.0.36-1Dan Walsh 2.0.35-5Dan Walsh 2.0.35-4Dan Walsh 2.0.35-3Dan Walsh 2.0.35-2Dan Walsh 2.0.35-1Dan Walsh 2.0.34-8Dan Walsh 2.0.34-7Dan Walsh 2.0.34-5Dan Walsh 2.0.34-4Dan Walsh 2.0.34-3Dan Walsh 2.0.34-2Dan Walsh 2.0.34-1Dan Walsh 2.0.33-4Dan Walsh 2.0.33-3Dan Walsh 2.0.33-2Dan Walsh 2.0.33-1Dan Walsh 2.0.32-2Dan Walsh 2.0.32-1Dan Walsh 2.0.31-20Dan Walsh 2.0.31-19Dan Walsh 2.0.31-18Dan Walsh 2.0.31-17Dan Walsh 2.0.31-16Dan Walsh 2.0.31-15Dan Walsh 2.0.31-14Dan Walsh 2.0.31-13Dan Walsh 2.0.31-12Dan Walsh 2.0.31-11Dan Walsh 2.0.31-10Dan Walsh 2.0.31-9Dan Walsh 2.0.31-8Dan Walsh 2.0.31-7Dan Walsh 2.0.31-6Dan Walsh 2.0.31-5Dan Walsh 2.0.31-4Dan Walsh 2.0.31-3Dan Walsh 2.0.31-1Dan Walsh 2.0.29-2Dan Walsh 2.0.29-1Dan Walsh 2.0.28-1Dan Walsh 2.0.27-7Dan Walsh 2.0.27-6Dan Walsh 2.0.27-5Dan Walsh 2.0.27-4Dan Walsh 2.0.27-3Dan Walsh 2.0.27-1Dan Walsh 2.0.26-3Dan Walsh 2.0.26-2Dan Walsh 2.0.26-1Dan Walsh 2.0.25-15Dan Walsh 2.0.25-14Dan Walsh 2.0.25-13Dan Walsh 2.0.25-12Dan Walsh 2.0.25-11Dan Walsh 2.0.25-10Dan Walsh 2.0.25-9Dan Walsh 2.0.25-8Dan Walsh 2.0.25-7Dan Walsh 2.0.25-6Dan Walsh 2.0.25-5Dan Walsh 2.0.25-4Dan Walsh 2.0.25-3Dan Walsh 2.0.25-2Dan Walsh 2.0.25-1Dan Walsh 2.0.23-2Dan Walsh 2.0.23-1Dan Walsh 2.0.22-13Dan Walsh 2.0.22-11Dan Walsh 2.0.22-10Jeremy Katz - 2.0.22-9Dan Walsh 2.0.22-8Dan Walsh 2.0.22-7Dan Walsh 2.0.22-6Dan Walsh 2.0.22-5Dan Walsh 2.0.22-4Dan Walsh 2.0.22-3Dan Walsh 2.0.22-2Dan Walsh 2.0.22-1Dan Walsh 2.0.21-2Dan Walsh 2.0.21-1Dan Walsh 2.0.20-1Dan Walsh 2.0.19-5Dan Walsh 2.0.19-4Dan Walsh 2.0.19-3Dan Walsh 2.0.19-2Dan Walsh 2.0.19-1Dan Walsh 2.0.16-2Dan Walsh 2.0.16-1Dan Walsh 2.0.15-1Dan Walsh 2.0.14-2Dan Walsh 2.0.14-1Dan Walsh 2.0.13-1Dan Walsh 2.0.10-2Dan Walsh 2.0.10-1Dan Walsh 2.0.9-10Dan Walsh 2.0.9-9Dan Walsh 2.0.9-8Dan Walsh 2.0.9-7Dan Walsh 2.0.9-6Dan Walsh 2.0.9-5Dan Walsh 2.0.9-4Dan Walsh 2.0.9-3Dan Walsh 2.0.9-2Dan Walsh 2.0.9-1Dan Walsh 2.0.8-1Dan Walsh 2.0.7-11Dan Walsh 2.0.7-10Dan Walsh 2.0.7-9Dan Walsh 2.0.7-8Dan Walsh 2.0.7-7Dan Walsh 2.0.7-6Dan Walsh 2.0.7-5Dan Walsh 2.0.7-4Dan Walsh 2.0.7-3Dan Walsh 2.0.7-2Dan Walsh 2.0.7-1Dan Walsh 2.0.6-3Dan Walsh 2.0.6-2Dan Walsh 2.0.6-1Dan Walsh 2.0.3-2Dan Walsh 2.0.3-1Dan Walsh 2.0.2-3Dan Walsh 2.0.2-2Dan Walsh 2.0.2-1Dan Walsh 2.0.1-2Dan Walsh 2.0.1-1Dan Walsh 2.0.0-1Dan Walsh 1.34.1-4Dan Walsh 1.34.1-3Dan Walsh 1.34.1-2Dan Walsh 1.34.1-1Dan Walsh 1.33.15-1Dan Walsh 1.33.14-1Dan Walsh 1.33.12-3Dan Walsh 1.33.12-2Dan Walsh 1.33.12-1Dan Walsh 1.33.11-1Dan Walsh 1.33.10-1Dan Walsh 1.33.8-2Dan Walsh 1.33.8-1Dan Walsh 1.33.7-1Dan Walsh 1.33.6-9Dan Walsh 1.33.6-8Dan Walsh 1.33.6-7Dan Walsh 1.33.6-6Dan Walsh 1.33.6-5Jeremy Katz - 1.33.6-4Dan Walsh 1.33.6-3Dan Walsh 1.33.6-2Dan Walsh 1.33.6-1Dan Walsh 1.33.5-4Dan Walsh 1.33.5-3Dan Walsh 1.33.5-2Dan Walsh 1.33.5-1Dan Walsh 1.33.4-2Dan Walsh 1.33.4-1Dan Walsh 1.33.2-2Dan Walsh 1.33.2-1Dan Walsh 1.33.1-9Dan Walsh 1.33.1-8Dan Walsh 1.33.1-7Dan Walsh 1.33.1-6Dan Walsh 1.33.1-5Dan Walsh 1.33.1-4Dan Walsh 1.33.1-3Dan Walsh 1.33.1-2Dan Walsh 1.33.1-1Dan Walsh 1.32-3Dan Walsh 1.32-2Dan Walsh 1.32-1Dan Walsh 1.30.30-2Dan Walsh 1.30.30-1Dan Walsh 1.30.29-6Dan Walsh 1.30.29-5Dan Walsh 1.30.29-4Dan Walsh 1.30.29-3Dan Walsh 1.30.29-2Dan Walsh 1.30.29-1Dan Walsh 1.30.28-9Dan Walsh 1.30.28-8Dan Walsh 1.30.28-7Dan Walsh 1.30.28-6Dan Walsh 1.30.28-5Dan Walsh 1.30.28-4Dan Walsh 1.30.28-3Dan Walsh 1.30.28-2Dan Walsh 1.30.28-1Dan Walsh 1.30.27-5Dan Walsh 1.30.27-4Dan Walsh 1.30.27-3Dan Walsh 1.30.27-2Dan Walsh 1.30.27-1Dan Walsh 1.30.26-1Dan Walsh 1.30.25-1Dan Walsh 1.30.22-3Dan Walsh 1.30.22-2Dan Walsh 1.30.22-1Dan Walsh 1.30.17-7Dan Walsh 1.30.17-6Dan Walsh 1.30.17-5Dan Walsh 1.30.17-4Dan Walsh 1.30.17-3Dan Walsh 1.30.17-2Dan Walsh 1.30.17-1Dan Walsh 1.30.14-5Dan Walsh 1.30.14-4Dan Walsh 1.30.14-3Dan Walsh 1.30.14-2Dan Walsh 1.30.14-1James Antill 1.30.12-5Dan Walsh 1.30.12-4Dan Walsh 1.30.12-3Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4James Antill 1.30.10-3James Antill 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.9-4James Antill 1.30.9-3James Antill 1.30.9-2Dan Walsh 1.30.9-1Dan Walsh 1.30.8-2Dan Walsh 1.30.8-1Dan Walsh 1.30.6-5Dan Walsh 1.30.6-4Dan Walsh 1.30.6-3Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Karsten Hopp 1.30.4-4Karsten Hopp 1.30.4-3Dan Walsh 1.30.4-2Dan Walsh 1.30.4-1Dan Walsh 1.30.1-4Dan Walsh 1.30.1-3Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-5Dan Walsh 1.30-4Dan Walsh 1.30-3Dan Walsh 1.30-2Dan Walsh 1.30-1Dan Walsh 1.29.27-1Dan Walsh 1.29.26-6Dan Walsh 1.29.26-5Dan Walsh 1.29.26-4Dan Walsh 1.29.26-3Dan Walsh 1.29.26-2Dan Walsh 1.29.26-1Dan Walsh 1.29.23-1Jesse Keating - 1.29.20-2.1Dan Walsh 1.29.20-2Dan Walsh 1.29.20-1Jesse Keating - 1.29.18-2.1Dan Walsh 1.29.18-2Dan Walsh 1.29.18-1Dan Walsh 1.29.17-1Dan Walsh 1.29.15-1Dan Walsh 1.29.12-1Dan Walsh 1.29.11-3Dan Walsh 1.29.11-2Dan Walsh 1.29.11-1Dan Walsh 1.29.9-2Dan Walsh 1.29.9-1Dan Walsh 1.29.8-4Dan Walsh 1.29.8-3Dan Walsh 1.29.8-2Dan Walsh 1.29.8-1Dan Walsh 1.29.7-4Dan Walsh 1.29.7-3Dan Walsh 1.29.7-2Dan Walsh 1.29.7-1Dan Walsh 1.29.5-3Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-1Dan Walsh 1.29.2-10Dan Walsh 1.29.2-9Dan Walsh 1.29.2-8Dan Walsh 1.29.2-7Dan Walsh 1.29.2-6Dan Walsh 1.29.2-5Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-1Dan Walsh 1.29.1-2Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.37-1Dan Walsh 1.27.36-2Dan Walsh 1.27.36-1Dan Walsh 1.27.35-1Dan Walsh 1.27.33-1Dan Walsh 1.27.31-1Dan Walsh 1.27.30-1Dan Walsh 1.27.29-1Dan Walsh 1.27.28-3Dan Walsh 1.27.28-2Dan Walsh 1.27.27-5Dan Walsh 1.27.27-3Dan Walsh 1.27.27-1Dan Walsh 1.27.26-4Dan Walsh 1.27.26-1Dan Walsh 1.27.23-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-2Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.14-1Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.11-1Dan Walsh 1.27.7-2Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.5-3Dan Walsh 1.27.5-1Dan Walsh 1.27.3-2Dan Walsh 1.27.3-1Dan Walsh 1.27.2-2Dan Walsh 1.27.2-1Dan Walsh 1.27.1-1Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.26-1Dan Walsh 1.25.9-2Dan Walsh 1.25.9-1Dan Walsh 1.25.7-3Dan Walsh 1.25.7-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-3Dan Walsh 1.25.5-2Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-1Dan Walsh 1.25.2-1Dan Walsh 1.25.1-1Dan Walsh 1.24-1Dan Walsh 1.23.11-4Dan Walsh 1.23.11-3Dan Walsh 1.23.11-2Dan Walsh 1.23.11-1Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.9-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-3Dan Walsh 1.23.4-1Dan Walsh 1.23.3-2Dan Walsh 1.23.3-1Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-2Dan Walsh 1.21.22-2Dan Walsh 1.21.22-1Dan Walsh 1.21.21-1Dan Walsh 1.21.20-3Dan Walsh 1.21.20-2Dan Walsh 1.21.20-1Dan Walsh 1.21.19-4Dan Walsh 1.21.19-2Dan Walsh 1.21.19-1Dan Walsh 1.21.18-2Dan Walsh 1.21.18-1Dan Walsh 1.21.17-2Dan Walsh 1.21.17-1Dan Walsh 1.21.15-9Dan Walsh 1.21.15-8Dan Walsh 1.21.15-5Dan Walsh 1.21.15-1Dan Walsh 1.21.14-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-2Dan Walsh 1.21.12-1Dan Walsh 1.21.10-2Dan Walsh 1.21.10-1Dan Walsh 1.21.9-1Dan Walsh 1.21.7-3Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.3-2Dan Walsh 1.21.3-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-1Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.3-1Dan Walsh 1.19.2-4Dan Walsh 1.19.2-1Dan Walsh 1.19.1-1Dan Walsh 1.18.1-3Dan Walsh 1.18.1-1Steve Grubb 1.17.7-3Dan Walsh 1.17.7-2Dan Walsh 1.17.7-1Dan Walsh 1.17.6-2Dan Walsh 1.17.6-1Dan Walsh 1.17.5-6Dan Walsh 1.17.5-5Dan Walsh 1.17.5-4Dan Walsh 1.17.5-3Dan Walsh 1.17.5-2Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-4Dan Walsh 1.17.3-3Dan Walsh 1.17.3-2Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-4Dan Walsh 1.15.2-3Dan Walsh 1.15.2-2Dan Walsh 1.15.2-1Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-2Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Dan Walsh 1.13.3-2Dan Walsh 1.13.3-1Dan Walsh 1.13.2-2Dan Walsh 1.13.2-1Elliot Lee Dan Walsh 1.13.1-2Dan Walsh 1.13.1-1Dan Walsh 1.13-3Dan Walsh 1.13-2Dan Walsh 1.13-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-4Colin Walters 1.10-3Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9.2-1Dan Walsh 1.9.1-1Dan Walsh 1.9-19Dan Walsh 1.9-18Dan Walsh 1.9-17Dan Walsh 1.9-16Dan Walsh 1.9-15Dan Walsh 1.9-14Dan Walsh 1.9-12Dan Walsh 1.9-11Dan Walsh 1.9-10Dan Walsh 1.9-9Dan Walsh 1.9-8Dan Walsh 1.9-7Dan Walsh 1.9-6Dan Walsh 1.9-5Dan Walsh 1.9-4Dan Walsh 1.9-3Dan Walsh 1.9-2Dan Walsh 1.9-1Dan Walsh 1.6-8Dan Walsh 1.6-7Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Dan Walsh 1.6-1Dan Walsh 1.4-9Elliot Lee Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-1Dan Walsh 1.1-4Dan Walsh 1.1-3Dan Walsh 1.1-2Dan Walsh 1.0-1- sandbox: create a new session for sandboxed processes Resolves: CVE-2016-7545- Update translations Resolves: rhbz#819794- Fix sepolgen test cases Resolves: rhbz#1306550- sandbox: Improve comments in sysconfig file Resolves: rhbz#1159336 - secon, newrole: fix inconsistence between --help and man page Resolves: rhbz#1278811, rhbz#1278913- restorecond: treat root as a regular user Resolves: rhbz#1281877 - semanage: don't skip reserver_port_t Resolves: rhbz#1225806 - semanage: check if a store exists Resolves: rhbz#1208801 - fixfiles: check the SELinux status Resolves: rhbz#1240788- semanage: Use OrderedDict for list of fcontexts Resolves: rhbz#1206767- fix a regression in 'fixfiles check' introduced in 2.0.83-21 Related: rhbz#1113083- Move python scripts in /usr/share/system-config-selinux to policycoreutils-python Resolves: rhbz#995778- revert: chcat: Change the isSensitivity() detection Related: rhbz#965397- fixfiles verify: do not relabel /tmp and /var/tmp dirs Resolves: rhbz#1113083 - Fix semanage -S -o Resolves: rhbz#1122850- chcat: Change the isSensitivity() detection Resolves: rhbz#965397 - Move sepolgen utility from policycoreutils-gui to policycoreutils-python Resolves: rhbz#995778 - audit2allow: use date time format compatible with ausearch Resolves: rhbz#1111999- Fix semanageRecords() to define load variable Resolves:#1148062- Fix setfiles man page Resolves:#1086456 - Fix semanage fcontext error message when non-existing context given Resolves:#1122023- Make semanage -i working on empty file - Fix setfiles man page - Fix setfiles -r option to be working correctly Resolves:#1086456- Additional fixes related to new noreload option Resolves:#1119726- Make semanage -i working correctly Resolves:#1119726- Fix semanage man page to contain also noreload option Resolves:#1032828 - Fix sandbox man page - Make setfiles more informative if bad option is given- Fail properly on invalid options for restorecon/setfiles when using -R or -r - Check if all files exist for setfiles and restorecon - Remove handling of cgroups from sandbox. Resolves:#1091139 - Make -q and -d options mutually exclusive- Allow use sandbox to follow homedirs symlinks Resolves:#913175 - Make sure file equivalance target and source do not end with a / - Allow make only valid domains as permissive domains - Fix polgen.py to allow "_" in a policy file. - Implement --noreload option to semanage - Add missing long options in sandbox man page- Fix fixfiles to return zero value when no error is encountered Resolves:#1043969- Call glob func with GLOB_BRACE flag to cover braced expressions- Fix handling fixfiles with exclude_dirs- Add workaround to make allow_polyinstantiation=1 directive working for xguest with semanage-booleans Resolves:#1008790- Update semanage boolean valid options- Fix setsebool to give better error message on bad boolean names Resolves:#998974- One more fix for fixfiles script- Fix semanage Resolves:#860506 - Make semanage man page and help consistent - Fix setsebool to give better error message on bad boolean names - Add support for exclude dirs in fixfiles - Fix semanage boolean to require a value- Fix setsebool man page Resolves:#984484- Make setsebool less verbose on errors Resolves:#984484 - Make <> spec working for semanage fcontext - Make audit2allow witn o option to append output instead of write- Fix restorecond init script - Make setools.seinfo working only on SELinux enabled systems in seobjet.py Resolves:#893065- Fix polgen.glade to contain "gtk-go-forward" label Resolves:#885527- Allow to define sock file in /etc directory Resolves:#816460 - Make output of audit2allow when AVC can be allowed by boolean more readable- Fix restorecond usage - Add missing te_stream_rules and if_stream_rules templates Resolves:#816460 - Print a message if no default labels are assigned Resolves:#851479- Fix semanage to verify that types are appropriate for commands. Resolves:#834160- Make restorecon to return proper exit codes on failure Resolves:#824779 - Fix generated role_types for *.te Resolves:#843727- Fix semanage man page Resolves:#784595 - Fix yacc.py for FIPS mode to use sha256 instead of md5- Remove selinux_file_context_subs_dist_path() in seobject.py Resolves:#806736- Make sure installing po files use -p - Fix unchecked return codes Resolves: #684015 - Fix semanage is sending the wrong kind of audit events - Fix Polyinstantiated namespace mount leaking to excluded users Related: #786664 - Fix selinux-policy update shows error parsing file obj_perm_s... Related: #786191- Fix man pages to match new semanage behaviour Related: #785678- Remove selinux_file_context_subs_dist_path() - Change md5 to sha256 in sepolgen Related: #785678- Change semanage to produce proper audit records for Common Criteria - Fix the handling of namespaces in seunshare/sandbox. - Currently mounting of directories within sandbox is propogating to the - parent namesspace. - restorecond -u needs to watch terminal for exit if run outside of dbus. - Fix unchecked return codes Related: #785678- Other fix for semanage man page Resolves: #677541 - Don't report error on load_policy when system is disabled.- Fix semanage man page- Restorecon should not be exiting with a 1 when it is successful in relabeling a file Resolves: #740699 Resolves: #739587- Needs require gnome-python2-gtkhtml2 to make system-config-selinux working - Not use open_init_pty by default- restorecon should not alter MCS/MLS labels only types unless you specify -F Resolves: #736153- Fix spec file to require rsync for sandbox Resolves: #734467 - Fix spec file to require gtkhtml2 for lockdown booleans program Resolves: #702860 - Fix bugs found by Coverity Resolves: #717640 Resolves: #728833- Back port option handling in semanage to handle semodule module -D correctly - Back port manpage from Fedora Resolves: #666861- Remove sandbox calling -k, only should be used by seunshare, should not be called all the time. Resolves: #679690 Resolves: #679689 Resolves: #677541 Resolves: #679798- Fix policycoreutils-sandbox description - Change sepolgen-ifgen to search all available policy files - Fix portspage in system-config-selinux to not crash - fix to sandbox - Fix seunshare to use more secure handling of /tmp - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root - Change to allow sandbox to run on nfs homedirs, add start python script - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_* - Move seunshare to sandbox package - Fix sandbox to show correct types in usage statement Resolves: #679690 Resolves: #679689 Resolves: #677541 Resolves: #679798 - Fixes for sepologen - Usage statement needs -n name - Names with _ are being prevented - dbus apps should get _chat interface - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name - Add sandbox to sepolgen - Polgengui raises the wrong type of exception. #471078 - Cleanup chcat man page - Update translations - restorecond fixes - Have restorecond watch more directories in homedir - Fix restorecond watching utmp file for people logging in our out - Exit in restorecond if it can not find a UID in the passwd database - Stop fixfiles from complaining about missing dirs - Semanage fixes - Fix up node handling in semanage command - Fix proper handling of getopt errors - Do not allow modules names to contain spaces - Change semanage to not allow it to semanage module -D Resolves: #677542 - Change setsebool to suggest run as root on failure - Don't report error on load_policy when system is disabled. - Fix unchecked return value of getpwuid()- selinux-polgengui should not blow up on disabled SELinux system Resolves: #695288 CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare Resolves: #679690 check return value of getpwuid() Fix semanage module -D' traceback Resolves: #666861 sandbox -- AttributeError: 'module' object has no attribute 'chcon' Resolves: #690502 system-config-selinux could not open interface info Resolves: #696809 Mv sandbox.conf.5.gz to sandbox.5.gz and put in base package Resolves: #690744 sestatus usage message not complete (missing -b option) Resolves: #705027 correct package name in the -sandbox subpackage description Resolves: #679798 dracut attempts to load_policy with SELinux=disabled Resolves: #659076 Resolves: #658532 8 options are not described in semanage man page Resolves: #677541 Mention "semanage module" in semanage man page Resolves: #677542 Update translations Allow polcycoreutils-gui and tools to run on disabled SELinux systems Resolves: #695288 Resolves: #689153- Fix sandbox -H and -T regression - again Resolves: #626404- Fix sandbox -H and -T regression Resolves: #626404 - Fix fcontext translation handling in system-config-selinux- Fix sandbox error handling- Apply patch to restorecond from Chris Adams, which will cause restorecond - to watch first user that logs in.- Add COPYING file to doc dir Resolves: #623948- Update po and translations Resolves: #610473- More fixes for polgen tools- Remove requirement to run selinux-polgen as root- Update po and translations - Fix gui policy generation tools Resolves: #610473- Update po and translations- rebuild against python 2.7- Update selinux-polgengui to sepolgen policy generation- Fix invalid free in seunshare and fix man page- Update translations- Fix sandbox man page- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Add translations for menus - Fixup man page from Russell Coker- Change python scripts to use -s flag - Update po- Update to upstream * Add sandbox support from Dan Walsh with modifications from Steve Lawrence.- Fix sepolgen code generation Resolve: #603001- Add cgroup support for sandbox- Allow creation of /var/cache/DOMAIN from sepolgen- Fix sandbox init script - Add dbus-launch to sandbox -X Resolve: #599599- Move genhomedircon.8 to same package as genhomedircon - Fix sandbox to pass unit test Resolves: #595796- Fix listing of booleans from audit2allow- Fix audit2allow to output if the current policy has avc - Update translations - Fix icon- Man page fixes - sandbox fixes - Move seunshare to base package- Fix seunshare translations - Fix seunshare to work on all arches - Fix icon for system-config-selinux Resolves: #595276- Fix can_exec definition in sepolgen- Add man page for seunshare and genhomedircon Resolves: #594303 - Fix node management via semanage- Fixes from upstream for sandbox command Resolves: #580938- Fix sandbox error handling on copyfile - Fix desktop files- Fix policy tool to have correct name in menus - Fix seunshare to handle /tmp being in ~/home - Fix saving of altered files - Update translations- Allow audit2allow to specify alternative policy file for analysis- Update po - Fix sepolgen --no_attrs Resolves: #588280- Make semanage boolean work on disabled machines and during livecd xguest - Fix homedir and tmpdir handling in sandbox Resolves: #587263- Make semanage boolean work on disabled machines- Make sepolgen-ifgen be quiet- Make sepolgen report on more interfaces - Fix system-config-selinux display of modules- Fix crash when args are empty Resolves: #582542 - Fix semange to exit on bad options - Fix semanage dontaudit man page section Resolves: #582533- Remove debug line from semanage - Update po- Fix sandbox comment on HOMEDIRS - Fix sandbox to throw error on bad executable- Fix spacing in templates- Fix semanage return codes- Fix sepolgen to confirm to the "Reference Policy Style Guide"- Update to upstream * Add avc's since boot from Dan Walsh. * Fix unit tests from Dan Walsh.- Update to upstream - sepolgen * Add since-last-boot option to audit2allow from Dan Walsh. * Fix sepolgen output to match what Chris expects for upstream refpolicy from Dan Walsh.- Allow restorecon on > 2 Gig files- Fix semanage handling of boolean options - Update translations- Update to upstream * Add dontaudit flag to audit2allow from Dan Walsh.- Use --rbind in sandbox init scripts- Update to upstream * Module enable/disable support from Dan Walsh.- Rewrite of sandbox script, add unit test for sandbox - Update translations- Fix patch for dontaudit rules from audit2allow for upstream acceptance- Fixes for fixfiles- Fix sandbox to complain if mount-shared has not been run - Fix to use /etc/sysconfig/sandbox- Update to upstream * Fix double-free in newrole - Fix python language handling- Fix display of command in sandbox- Catch OSError in semanage- Fix seobject and fixfiles- Change seobject to use translations properly- Cleanup spec file Resolves: 555835- Add use_resolve to sepolgen- Add session capability to sandbox - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession- Fix executable template for fifo files- Fix patch xod xmodmap - Exit 0 from script- Run with the same xdmodmap in sandbox as outside - Patch from Josh Cogliati- Fix sepolgen to not generate user sh section on non user policy- Add -e to semanage man page - Add -D qualifier to audit2allow to generate dontaudit rules- Speed up audit2allow processing of audit2why comments- Fixes to sandbox man page- Add setools-libs-python to requires for gui- If restorecond running as a user has no files to watch then it should exit. (NFS Homedirs)- Move sandbox man page to base package- Fix audit2allow to report constraints, dontaudits, types, booleans- Fix restorecon -i to ignore enoent- Update to upstream * Remove non-working OUTFILE from fixfiles from Dan Walsh. * Additional exception handling in chcat from Dan Walsh. * fix sepolgen to read a "type 1403" msg as a policy load by Stephen Smalley * Add support for Xen ocontexts from Paul Nuzzi.- Update to upstream * Fixed bug preventing semanage node -a from working from Chad Sellers * Fixed bug preventing semanage fcontext -l from working from Chad Sellers - Change semanage to use unicode- Update to upstream * Remove setrans management from semanage, as it does not work from Dan Walsh. * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Raise exception if user tries to add file context with an embedded space- Fix sandbox to setsid so it can run under mozilla without crashing the session- Update to upstream * Factor out restoring logic from setfiles.c into restore.c- Fix typo in seobject.py- Allow semanage -i and semanage -o to generate customization files. - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration- Fix restorecond man page- Add generation of the users context file to polgengui- Remove tabs from system-config-selinux glade file- Remove translations screen from system-config-selinux- Move fixfiles man pages into the correct package - Add genhomedircon to fixfiles restore- Add check to sandbox to verify save changes - Chris Pardy - Fix memory leak in restorecond - Steve Grubb- Fixes Templates- Fixes for polgengui to handle tcp ports correctly - Fix semanage node -a- Fixes for semanage -equiv, readded modules, --enable, --disable- Close sandbox when eclipse exits- Security fixes for seunshare - Fix Sandbox to handle non file input to command.- Security fixes for seunshare- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make setfiles label if selinux is disabled and a seclabel aware kernel is running from Caleb Case. * Clarify forkpty() error message in run_init from Manoj Srivastava.- Fix sandbox to handle relative paths- Add symbolic link to load_policy- Fix restorecond script to use force-reload- Fix init script to show status in usage message- Update to upstream * Add semanage dontaudit to turn off dontaudits from Dan Walsh. * Fix semanage to set correct mode for setrans file from Dan Walsh. * Fix malformed dictionary in portRecord from Dan Walsh. * Restore symlink handling support to restorecon based on a patch by Martin Orr. This fixes the restorecon /dev/stdin performed by Debian udev scripts that was broken by policycoreutils 2.0.70.- Add DAC_OVERRIED to seunshare- Fix typo- Add enable/disable patch- rebuilt with new audit- Tighten up controls on seunshare.c- Add sandboxX- Fix realpath usage to only happen on argv input from user- Don't try to remove restorecond after last erase (done already in %preun). - Ensure scriptlets exit with status 0. - Fix %post and %pr- Fix glob handling of /..- Redesign restorecond to use setfiles/restore functionality- Fix sepolgen again- Add --boot flag to audit2allow to get all AVC messages since last boot- Fix semanage command- exclude unconfined.if from sepolgen- Fix chcat to report error on non existing file - Update to upstream * Modify setfiles/restorecon checking of exclude paths. Only check user-supplied exclude paths (not automatically generated ones based on lack of seclabel support), don't require them to be directories, and ignore permission denied errors on them (it is ok to exclude a path to which the caller lacks permission).- Don't warn if the user did not specify the exclude if root can not stat file system- Update to upstream * Modify restorecon to only call realpath() on user-supplied pathnames from Stephen Smalley. * Fix typo in fixfiles that prevented it from relabeling btrfs filesystems from Dan Walsh.- Fix location of man pages - Update to upstream * Modify setfiles to exclude mounts without seclabel option in /proc/mounts on kernels >= 2.6.30 from Thomas Liu. * Re-enable disable_dontaudit rules upon semodule -B from Christopher Pardy and Dan Walsh. * setfiles converted to fts from Thomas Liu.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- fix multiple directory ownership of mandirs- Update to upstream * Keep setfiles from spamming console from Dan Walsh. * Fix chcat's category expansion for users from Dan Walsh. - Update po files - Fix sepolgen- Add sepolgen executable- Fix Sandbox option handling - Fix fixfiles handling of btrfs- Fix sandbox to be able to execute files in homedir- Change polgen.py to be able to generate policy- Update to upstream * Fix transaction checking from Dan Walsh. * Make fixfiles -R (for rpm) recursive. * Make semanage permissive clean up after itself from Dan Walsh. * add /root/.ssh/* to restorecond.conf- Fix audit2allow -a to retun /var/log/messages- Run restorecond as a user service- Add semanage module support- Do not print \n, if count < 1000;- Handle case where subs file does not exist- Update po files - Add --equiv command for semanage- Cleanup creation of permissive domains - Update po files- Update po files- Fix semanage transations- Update polgengui templates to match current upstream policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add /root/.ssh to restorecond.conf - fixfiles -R package should recursively fix files- Update to upstream * Add btrfs to fixfiles from Dan Walsh. * Remove restorecond error for matching globs with multiple hard links and fix some error messages from Dan Walsh. * Make removing a non-existant module a warning rather than an error from Dan Walsh. * Man page fixes from Dan Walsh.- Fix script created by polgengui to not refer to selinux-policy-devel- Change initc scripts to use proper labeling on gui- Add obsoletes to cause policycoreuils to update both python and non python version- Dont report errors on glob match and multiple links- Move sepolgen-ifgen to post python- Fix Translations- Add Domains Page to system-config-selinux - Add ability to create dbus confined applications to polgen- Split python into a separate package- Update to upstream * chcat: cut categories at arbitrary point (25) from Dan Walsh * semodule: use new interfaces in libsemanage for compressed files from Dan Walsh * audit2allow: string changes for usage- Don't error out when removing a non existing module- fix audit2allow man page- Fix Japanese translations- Change md5 to hashlib.md5 in sepolgen- Rebuild for Python 2.6- Fix error checking in restorecond, for inotify_add_watch- Update to upstream * semanage: use semanage_mls_enabled() from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * fcontext add checked local records twice, fix from Dan Walsh.- Update to upstream * Allow local file context entries to override policy entries in semanage from Dan Walsh. * Newrole error message corrections from Dan Walsh. * Add exception to audit2why call in audit2allow from Dan Walsh.- add compression- Move the usermode-gtk requires to the -gui subpackage.- Fix traceback in audit2why- Make GUI use translations- Fix typo in man page- Handle selinux disabled correctly - Handle manipulation of fcontext file correctly- Add usermode-gtk requires- Allow addition of local modifications of fcontext policy.- Fix system-config-selinux booleanspage throwing and exception - Update po files- Fix text in newrole - Fix revertbutton on booleans page in system-config-selinux- Change semodule calls for libsemanage- Update to upstream * Update po files from Dan Walsh.- Fix semanage help display - Update to upstream * fixfiles will now remove all files in /tmp and will check for unlabeled_t in /tmp and /var/tmp from Dan Walsh. * add glob support to restorecond from Dan Walsh. * allow semanage to handle multi-line commands in a single transaction from Dan Walsh.- Only call gen_requires once in sepolgen- Change Requires line to gnome-python2-gnome - Fix spelling mistakes - Require libselinux-utils- Add node support to semanage- Fix fixfiles to correct unlabeled_t files and remove .? files- Add glob support to restorecond so it can check every file in the homedir- Update to upstream * Merged semanage node support from Christian Kuester.- Add require libsemanage-python- Add missing html_util.py file- Fixes for multiple transactions- Allow multiple transactions in one semanage command- Update to upstream * Add support for boolean files and group support for seusers from Dan Walsh. * Ensure that setfiles -p output is newline terminated from Russell Coker.- Allow semanage user to add group lists % groupname- Fix help- Update to upstream * Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.- Fix boolean handling - Upgrade to latest sepolgen - Update po patch- Additial cleanup of boolean handling for semanage- Handle ranges of ports in gui- Fix indent problems in seobject- Add lockdown wizard - Allow semanage booleans to take an input file an process lots of booleans at once.- Default prefix to "user"- Remove semodule use within semanage - Fix launching of polgengui from toolbar- Update to upstream * Fix audit2allow generation of role-type rules from Karl MacMillan.- Fix spelling of enforcement- Fix sepolgen/audit2allow handling of roles- Fix sepolgen-ifgen processing- Add deleteall to semanage permissive, cleanup error handling- Complete removal of rhpl requirement- Add semanage permissive *- Fix fixfiles to cleanup /tmp and /var/tmp- Fix listing of types in gui- Update to upstream * Remove security_check_context calls for prefix validation from semanage. * Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.- Remove /usr/share/locale/sr@Latn/LC_MESSAGES/policycoreutils.mo- Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore - So that mislabeled files will get removed on full relabel- Make restorecond not start by default - Fix polgengui to allow defining of confined roles. - Add patches from Lubomir Rintel * Add necessary runtime dependencies on setools-console for -gui * separate stderr when run seinfo commands - Update to upstream * Update semanage man page for booleans from Dan Walsh. * Add further error checking to seobject.py for setting booleans.- Uninvasive (ie no string or widget changes) HIG approximations in selinux-polgenui- Move s-c-selinux to the right menu- Fix boolean descriptions - Fix semanage man page- Don't use prefix in gui- Update to upstream * Update audit2allow to report dontaudit cases from Dan Walsh. * Fix semanage port to use --proto from Caleb Case.- Update to upstream * Fix for segfault when conf file parse error occurs.- Don't show tabs on polgengui- Update to upstream * Merged fix fixfiles option processing from Vaclav Ovsik. - Added existing users, staff and user_t users to polgengui- Add messages for audit2allow DONTAUDIT- Add ability to transition to roles via polgengui- Update to upstream * Make semodule_expand use sepol_set_expand_consume_base to reduce peak memory usage.- Update to upstream * Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh. * Merged a second fixfiles -C fix from Marshall Miller.- Don't initialize audit2allow for audit2why call. Use default - Update to upstream * Merged fixfiles -C fix from Marshall Miller.- Update to upstream * Merged audit2allow cleanups and boolean descriptions from Dan Walsh. * Merged setfiles -0 support by Benny Amorsen via Dan Walsh. * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.- Update to upstream * Merged replacement for audit2why from Dan Walsh.- Cleanup fixfiles -f message in man page- Update to upstream * Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh. * Merged sepolgen fixes from Dan Walsh.- handle files with spaces on upgrades- Add support in fixfiles for ext4 ext4dev and gfs2- Allow files with spaces to be used by setfiles- Add descriptions of booleans to audit2allow- Update to upstream * Merged support for non-interactive newrole command invocation from Tim Reed.- Change to use selinux bindings to audit2why- Fix fixfiles to handle no args- Fix roles output when creating a module- Handle files with spaces in fixfiles- Catch SELINUX_ERR with audit2allow and generate policy- Make sepolgen set error exit code when partial failure - audit2why now checks booleans for avc diagnosis- Update to upstream * Update Makefile to not build restorecond if /usr/include/sys/inotify.h is not present- Fix sepolgen to be able to parse Fedora 9 policy Handle ifelse statements Handle refpolicywarn inside of define Add init.if and inetd.if into parse Add parse_file to syntax error message- Add scroll bar to fcontext gui page- Add Russion Man pages- Upgrade from NSA * Drop verbose output on fixfiles -C from Dan Walsh. * Fix argument handling in fixfiles from Dan Walsh. * Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh. - Fix handling of final screen in polgengui- Fix handling of disable selinux button in gui- Upgrade from NSA * load_policy initial load option from Chad Sellers.- Don't show error on missing policy.xml- GUI Enhancements - Fix cgi generation - Use more patterns- Remove codec hacking, which seems to be fixed in python- Fix typo - Change to upstream minimal privledge interfaces- Fix fixfiles argument parsing- Fix File Labeling add- Fix semanage to handle state where policy.xml is not installed- Remove -v from restorecon in fixfiles- Fix filter and search capabilities, add wait cursor- Translate booleans via policy.xml - Allow booleans to be set via semanage- Require use of selinux-policy-devel- Validate semanage fcontext input - Fix template names for log files in gui- Fix template to generate correct content- Fix consolekit link to selinux-polgengui- Fix the generation templates- Fix enable/disable audit messages- Add booleans page- Lots of updates to gui- Remove no.po - Update to upstream * Fix semodule option handling from Dan Walsh. * Add deleteall support for ports and fcontexts in semanage from Dan Walsh.- Fix semodule parameter checking- Update to upstream * Add genhomedircon script to invoke semodule -Bn from Dan Walsh. - Add deleteall for ports and fcontext- Update to upstream * Update semodule man page for -D from Dan Walsh. * Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.- Add genhomedircon script to rebuild file_context for shadow-utils- Update translations- Additional checkboxes for application policy- Allow policy writer to select user types to transition to there users- Fix bug in building policy with polgengui - Creating ports correctly- Update to upstream * Improve semodule reporting of system errors from Stephen Smalley.- Show local changes with semanage- Fixed spelling mistakes in booleans defs - Update po- Update to upstream * Fix setfiles selabel option flag setting for 64-bit from Stephen Smalley.- Fix wording in policy generation tool- Fix calls to _admin interfaces- Upgrade version of sepolgen from NSA * Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan. * Suppress generation of rules for non-denials from Karl MacMillan (take 3).- Remove bogus import libxml2- Lots of fixes for polgengui- Change Requires /bin/rpm to rpm- Bump libsemanage version for disable dontaudit - New gui features for creating admin users- Fix generated code for admin policy- Lots of fixes for role templates- Add more role_templates- Update genpolgui to add creation of user domains- Fix location of sepolgen-ifgen- Add selinux-polgengui to desktop- Cleanup spec- Update semodule man page * Fix genhomedircon searching for USER from Todd Miller * Install run_init with mode 0755 from Dan Walsh. * Fix chcat from Dan Walsh. * Fix fixfiles pattern expansion and error reporting from Dan Walsh. * Optimize genhomedircon to compile regexes once from Dan Walsh. * Fix semanage gettext call from Dan Walsh.- Update semodule man page- Update to match NSA * Disable dontaudits via semodule -D- Speed up genhomedircon by an order of magnitude by compiling regex - Allow semanage fcontext -a -t <> /path to work- Fixfiles update required to match new regex- Update booleans translations- rebuild for toolchain bug- Add requires libselinux-python- Fix fixfiles to report incorrect rpm - Patch provided by Tony Nelson- Clean up spec file- Require newer libselinux version- Fix checking for conflicting directory specification in genhomedircon- Fix spelling mistakes in GUI- Fix else path in chcat- Update to match NSA * Rebase setfiles to use new labeling interface.- Add filter to all system-config-selinux lists- Update to match NSA * Fixed setsebool (falling through to error path on success).- Update to match NSA * Merged genhomedircon fixes from Dan Walsh. * Merged setfiles -c usage fix from Dan Walsh. * Merged restorecon fix from Yuichi Nakamura. * Dropped -lsepol where no longer needed.- Fix translations code, Add more filters to gui- Fix setfiles -c to make it work- Fix french translation to not crash system-config-selinux- Fix genhomedircon to work in stage2 builds of anaconda- Update to match NSA- Fixes for polgentool templates file- Updated version of policycoreutils * Merged support for modifying the prefix via semanage from Dan Walsh. - Fixed genhomedircon to find homedirs correctly.- Updated version of policycoreutils * Merged po file updates from Dan Walsh. - Fix semanage to be able to modify prefix in user record- Fix title on system-config-selinux- Updated version of policycoreutils * Build fix for setsebool.- Updated version of policycoreutils * Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley. * Merged genhomedircon patch to use the __default__ setting from Dan Walsh. * Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.- Fixes for polgengui- Updated version of policycoreutils * Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.- Fix genhomedircon to handle non user_u for the default user- More cleanups for gui- Fix size and use_tmp problem on gui- Fix restorecon crash- Change polgengui to a druid- Fully path script.py- Add -l flag to restorecon to not traverse file systems- Fixes for policygengui- Add polgengui- Updated version of sepolgen * Merged seobject setransRecords patch to return the first alias from Xavier Toth.- Updated version of sepolgen * Merged updates to sepolgen-ifgen from Karl MacMillan. * Merged updates to sepolgen parser and tools from Karl MacMillan. This includes improved debugging support, handling of interface calls with list parameters, support for role transition rules, updated range transition rule support, and looser matching.- Don't generate invalid context with genhomedircon- Add filter to booleans page- Fix polgen.py to not generate udp rules on tcp input- system-config-selinux should be able to run on a disabled system, - at least enough to get it enabled.- Many fixes to polgengui- Updated version of sepolgen * Merged patch to discard self from types when generating requires from Karl MacMillan.- Change location of audit2allow and sepol-ifgen to sbin - Updated version of sepolgen * Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.- Add polgen gui - Many fixes to system-config-selinux- service restorecond status needs to set exit value correctly- Fix gui- Update to upstream * Merged restorecond init script LSB compliance patch from Steve Grubb. -sepolgen * Merged better matching for refpolicy style from Karl MacMillan * Merged support for extracting interface paramaters from interface calls from Karl MacMillan * Merged support for parsing USER_AVC audit messages from Karl MacMillan.- Update to upstream -sepolgen * Merged support for enabling parser debugging from Karl MacMillan. - Add sgrupp cleanup of restorcon init script- Add Bill Nottinham patch to run restorcond condrestart in postun- Update to upstream - policycoreutils * Merged newrole O_NONBLOCK fix from Linda Knippers. * Merged sepolgen and audit2allow patches to leave generated files in the current directory from Karl MacMillan. * Merged restorecond memory leak fix from Steve Grubb. -sepolgen * Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan. * Merged patch to make run-tests.py use unittest.main from Karl MacMillan. * Merged patch to update PLY from Karl MacMillan. * Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.- Do not fail on sepolgen-ifgen- Update to upstream * Merged translations update from Dan Walsh. * Merged chcat fixes from Dan Walsh. * Merged man page fixes from Dan Walsh. * Merged seobject prefix validity checking from Dan Walsh. * Merged Makefile and refparser.py patch from Dan Walsh. Fixes PYTHONLIBDIR definition and error handling on interface files.- Updated newrole NONBlOCK patch- Remove Requires: %{name}-plugins- Update to upstream * Merged seobject exception handler fix from Caleb Case. * Merged setfiles memory leak patch from Todd Miller.- Cleanup man pages syntax - Add sepolgen- Update to upstream * Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.- Update to upstream * Merged new audit2allow from Karl MacMillan. This audit2allow depends on the new sepolgen python module. Note that you must run the sepolgen-ifgen tool to generate the data needed by audit2allow to generate refpolicy. * Fixed newrole non-pam build. - Fix Changelog and spelling error in man page- Fix audit2allow on missing translations- More chcat fixes- Change chcat to exec semodule so file context is maintained- Fix system-config-selinux ports view - Update to upstream * Fixed newrole non-pam build. * Updated version for stable branch.- Update to upstream * Merged unicode-to-string fix for seobject audit from Dan Walsh. * Merged man page updates to make "apropos selinux" work from Dan Walsh.* Merged newrole man page patch from Michael Thompson. * Merged patch to fix python unicode problem from Dan Walsh.- Fix handling of audit messages for useradd change Resolves: #222159- Update man pages by adding SELinux to header to fix apropos database Resolves: #217881- Want to update to match api - Update to upstream * Merged newrole securetty check from Dan Walsh. * Merged semodule patch to generalize list support from Karl MacMillan. Resolves: #200110- Update to upstream * Merged fixfiles and seobject fixes from Dan Walsh. * Merged semodule support for list of modules after -i from Karl MacMillan.- Update to upstream * Merged patch to correctly handle a failure during semanage handle creation from Karl MacMillan. * Merged patch to fix seobject role modification from Dan Walsh.- Stop newrole -l from working on non secure ttys Resolves: #200110- Update to upstream * Merged patches from Dan Walsh to: - omit the optional name from audit2allow - use the installed python version in the Makefiles - re-open the tty with O_RDWR in newrole- Update to upstream * Patch from Dan Walsh to correctly suppress warnings in load_policy.- Fix fixfiles script to use tty command correctly. If this command fails, it should set the LOGFILE to /dev/null Resolves: #220879- Remove hard coding of python2.4 from Makefiles- add exists switch to semanage to tell it not to check for existance of Linux user Resolves: #219421- Fix audit2allow generating reference policy - Fix semanage to manage user roles properly Resolves: #220071- Update po files - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines Resolves: #216920- rebuild for python 2.5- Update po files Resolves: #216920- Update po files Resolves: #216920- Update to upstream * Patch from Dan Walsh to add an pam_acct_msg call to run_init * Patch from Dan Walsh to fix error code returns in newrole * Patch from Dan Walsh to remove verbose flag from semanage man page * Patch from Dan Walsh to make audit2allow use refpolicy Makefile in /usr/share/selinux/- Fixing the Makefile line again to build with LSPP support Resolves: #208838- Don't report errors on restorecond when file system does not support XATTRS Resolves: #217694- Fix -q qualifier on load_policy Resolves: #214827- Merge to upstream - Fix makefile line Resolves: #208838- Additional po changes - Added all booleans definitions- Upstream accepted my patches * Merged setsebool patch from Karl MacMillan. This fixes a bug reported by Yuichi Nakamura with always setting booleans persistently on an unmanaged system.- Fixes for the gui- Upstream accepted my patches- Add Amy Grifis Patch to preserve newrole exit status- Fix display of gui- Add patch by Jose Plans to make run_init use pam_acct_mgmt- More fixes to gui- Fix audit2allow to generate referene policy- Add group sort for portsPage.py - Add enable/disableaudit to modules page- Add glade file- Fix Module handling in system-config-selinux- Update to upstream * Merged newrole patch set from Michael Thompson. - Add policycoreutils-gui- No longer requires rhpl- Fix genhomedircon man page- Add newrole audit patch from sgrubb - Update to upstream * Merged audit2allow -l fix from Yuichi Nakamura. * Merged restorecon -i and -o - support from Karl MacMillan. * Merged semanage/seobject fix from Dan Walsh. * Merged fixfiles -R and verify changes from Dan Walsh.- Separate out newrole into its own package- Update to upstream * Merged newrole auditing of failures due to user actions from Michael Thompson.- Pass -i qualifier to restorecon for fixfiles -R - Update translations- Remove recursion from fixfiles -R calls - Fix semanage to verify prefix- More translations - Compile with -pie- Add translations - Fix audit2allow -l- Rebuild- Update to upstream - Change -o to take "-" for stdout- Add -h support for genhomedircon- Fix fixfiles handling of -o- Make restorecon return the number of changes files if you use the -n flag- Change setfiles and restorecon to use stderr except for -o flag - Also -o flag will now output files- Put back Erich's change- Remove recursive switch when using rpm- Fix fixfiles to handle multiple rpm and make -o work- Apply patch- Security fixes to run python in a more locked down manner - More Translations - Update to upstream * Merged fix for restorecon // handling from Erich Schubert. * Merged translations update and fixfiles fix from Dan Walsh.- Change scripts to use /usr/sbin/python- Add -i qualified to restorecon to tell it to ignore files that do not exist - Fixfiles also modified for this change- Ignore sigpipe- Fix init script and add translations- Update to upstream * Merged fix for restorecon symlink handling from Erich Schubert.- Update to upstream * Merged semanage local file contexts patch from Chris PeBenito. - Fix fixfiles log creation - More translations- Update to upstream * Merged patch from Dan Walsh with: * audit2allow: process MAC_POLICY_LOAD events * newrole: run shell with - prefix to start a login shell * po: po file updates * restorecond: bail if SELinux not enabled * fixfiles: omit -q * genhomedircon: fix exit code if non-root * semodule_deps: install man page * Merged secon Makefile fix from Joshua Brindle. * Merged netfilter contexts support patch from Chris PeBenito.- Fix audit2allow to handle reload of policy- Stop restorecond init script when selinux is not enabled- Update to upstream * Merged restorecond size_t fix from Joshua Brindle. * Merged secon keycreate patch from Michael LeMay. * Merged restorecond fixes from Dan Walsh. Merged updated po files from Dan Walsh. * Merged python gettext patch from Stephen Bennett. * Merged semodule_deps from Karl MacMillan.- Change newrole to exec a login shell to prevent suspend.- Report error when selinux not enabled in restorecond- Fix handling of restorecond- Fix creation of restorecond pidfile- Update translations - Update to new GCC- Add verbose flag to restorecond and update translations- Update to upstream * Lindent. * Merged patch from Dan Walsh with: * -p option (progress) for setfiles and restorecon. * disable context translation for setfiles and restorecon. * on/off values for setsebool. * Merged setfiles and semodule_link fixes from Joshua Brindle.- Add progress indicator on fixfiles/setfiles/restorecon- Don't use translations with matchpathcon- Prompt for selinux-policy-devel package in audit2allow- Allow setsebool to use on/off - Update translations- Update to upstream * Merged fix for setsebool error path from Serge Hallyn. * Merged patch from Dan Walsh with: * Updated po files. * Fixes for genhomedircon and seobject. * Audit message for mass relabel by setfiles.- Update audit mass relabel to only compile in when audit is installed.- Update to required versions - Update translation- Fix shell selection- Add BuildRequires for gettext* Updated fixfiles script for new setfiles location in /sbin.- Update to upstream * Merged more translations from Dan Walsh. * Merged patch to relocate setfiles to /sbin for early relabel when /usr might not be mounted from Dan Walsh. * Merged semanage/seobject patch to preserve fcontext ordering in list. * Merged secon patch from James Antill.- Fix seobject.py to not sort the file_context file. - move setfiles to /sbin- secon man page and getopt fixes. - Enable mass relabel audit, even though it doesn't work.- secon fixes for --self-exec etc. - secon change from level => sensitivity, add clearance. - Add mass relabel AUDIT patch, but disable it until kernel problem solved.- Update to upstream * Merged patch with updates to audit2allow, secon, genhomedircon, and semanage from Dan Walsh.- Fix exception in genhomedircon- Add rhpl dependancy- Add secon man page and prompt options.- Update to upstream * Fixed audit2allow and po Makefiles for DESTDIR= builds. * Merged .po file patch from Dan Walsh. * Merged bug fix for genhomedircon.- Fix exception on bad file_context- Update to upstream * Merged fix warnings patch from Karl MacMillan. * Merged patch from Dan Walsh. This includes audit2allow changes for analysis plugins, internationalization support for several additional programs and added po files, some fixes for semanage, and several cleanups. It also adds a new secon utility.- Fix genhomedircon to catch duplicate homedir problem- Add secon program - Add translations- Fix check for "msg"- Ship avc.py- Add /etc/samba/secrets.tdb to restorecond.conf - Update from upstream * Merged semanage prefix support from Russell Coker. * Added a test to setfiles to check that the spec file is a regular file.- added some missing buildrequires - added Requires: initscripts for /sbin/service- use absolute path /sbin/service- Fix audit2allow to not require ausearch. - Fix man page - Add libflashplayer to restorecond.conf- Update from upstream * Merged audit2allow fixes for refpolicy from Dan Walsh. * Merged fixfiles patch from Dan Walsh. * Merged restorecond daemon from Dan Walsh. * Merged semanage non-MLS fixes from Chris PeBenito. * Merged semanage and semodule man page examples from Thomas Bleher.- Clean up reference policy generation in audit2allow- Add IN_MOVED_TO to catch renames- make restorecond only ignore non directories with lnk > 1- Make audit2allow translate dontaudit as well as allow rules - Update from upstream * Merged semanage labeling prefix patch from Ivan Gyurdiev.- Fix audit2allow to retrieve dontaudit rules- Open file descriptor to make sure file does not change from underneath.- Fixes for restorecond attack via symlinks - Fixes for fixfiles- Restorecon has to handle suspend/resume- Update to upstream- Add restorecond- Remove prereq- Fix audit2allow to generate all rules- Minor fixes to chcat and semanage- Add missing setsebool man page- Change audit2allow to use devel instead of refpolicy- Update from upstream * Merged semanage bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged semanage usage patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev.- Update from upstream * Merged newrole -V/--version support from Glauber de Oliveira Costa. * Merged genhomedircon prefix patch from Dan Walsh. * Merged optionals in base patch from Joshua Brindle.- bump again for double-long bug on ppc(64)- Fix auditing to semanage - Change genhomedircon to use new prefix interface in libselinux- Update from upstream * Merged seuser/user_extra support patch to semodule_package from Joshua Brindle. * Merged getopt type fix for semodule_link/expand and sestatus from Chris PeBenito. - Fix genhomedircon output- rebuilt for new gcc4.1 snapshot and glibc changes- Add auditing to semanage- Update from upstream * Merged clone record on set_con patch from Ivan Gyurdiev.- Update from upstream * Merged genhomedircon fix from Dan Walsh. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev. * Merged genhomedircon patch from Dan Walsh.- Update from upstream * Merged newrole audit patch from Steve Grubb. * Merged seuser -> seuser local rename patch from Ivan Gyurdiev. * Merged semanage and semodule access check patches from Joshua Brindle.- Add a default of /export/home- Cleanup of the patch- Correct handling of symbolic links in restorecon- Added translation support to semanage - Update from upstream * Modified newrole and run_init to use the loginuid when supported to obtain the Linux user identity to re-authenticate, and to fall back to real uid. Dropped the use of the SELinux user identity, as Linux users are now mapped to SELinux users via seusers and the SELinux user identity space is separate. * Merged semanage bug fixes from Ivan Gyurdiev. * Merged semanage fixes from Russell Coker. * Merged chcat.8 and genhomedircon patches from Dan Walsh.- Fix genhomedircon to work on MLS policy- Update to match NSA * Merged chcat, semanage, and setsebool patches from Dan Walsh.- Fixes for "add"-"modify" error messages - Fixes for chcat- Add management of translation file to semaange and seobject- Fix chcat -l -L to work while not root- Update to match NSA * Merged semanage fixes from Ivan Gyurdiev. * Merged semanage fixes from Russell Coker. * Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.- Update chcat to manage user categories also- Add check for root for semanage, genhomedircon- Add ivans patch- Update to match NSA * Merged newrole cleanup patch from Steve Grubb. * Merged setfiles/restorecon performance patch from Russell Coker. * Merged genhomedircon and semanage patches from Dan Walsh. * Merged remove add_local/set_local patch from Ivan Gyurdiev.- Fixes for mls policy- Update semanage and split out seobject - Fix labeleing of home_root- Update to match NSA * Added filename to semodule error reporting.- Update to match NSA * Merged genhomedircon and semanage patch from Dan Walsh. * Changed semodule error reporting to include argv[0].- Update to match NSA * Merged semanage getpwnam bug fix from Serge Hallyn (IBM). * Merged patch series from Ivan Gyurdiev. This includes patches to: - cleanup setsebool - update setsebool to apply active booleans through libsemanage - update semodule to use the new semanage_set_rebuild() interface - fix various bugs in semanage * Merged patch from Dan Walsh (Red Hat). This includes fixes for restorecon, chcat, fixfiles, genhomedircon, and semanage.- Fix restorecon to not say it is changing user section when -vv is specified- Fixes for semanage, patch from Ivan and added a test script- Fix getpwnam call- Anaconda fixes- Turn off try catch block to debug anaconda failure- More fixes for chcat- Add try catch for files that may not exists- Remove commands from genhomedircon for installer- Fix genhomedircon to work in installer - Update to match NSA * Merged patch for chcat script from Dan Walsh.- More fixes to chcat- rebuilt- Update to match NSA * Merged fix for audit2allow long option list from Dan Walsh. * Merged -r option for restorecon (alias for -R) from Dan Walsh. * Merged chcat script and man page from Dan Walsh.- Update to match NSA - Add gfs support- Update to match NSA - Add chcat to policycoreutils, adding +/- syntax `- Require new version of libsemanage- Update to match NSA * Changed genhomedircon to warn on use of ROLE in homedir_template if using managed policy, as libsemanage does not yet support it.- Update to match NSA * Merged genhomedircon bug fix from Dan Walsh. * Revised semodule* man pages to refer to checkmodule and to include example sections.- Update to match NSA * Merged audit2allow --tefile and --fcfile support from Dan Walsh. * Merged genhomedircon fix from Dan Walsh. * Merged semodule* man pages from Dan Walsh, and edited them. * Changed setfiles to set the MATCHPATHCON_VALIDATE flag to retain validation/canonicalization of contexts during init.- Update to match NSA * Changed genhomedircon to always use user_r for the role in the managed case since user_get_defrole is broken. - Add te file capabilities to audit2allow - Add man pages for semodule- Update to match NSA * Merged sestatus, audit2allow, and semanage patch from Dan Walsh. * Fixed semodule -v option.- Update to match NSA * Merged audit2allow python script from Dan Walsh. (old script moved to audit2allow.perl, will be removed later). * Merged genhomedircon fixes from Dan Walsh. * Merged semodule quieting patch from Dan Walsh (inverts default, use -v to restore original behavior).- Audit2allow * Add more error checking * Add gen policy package * Add gen requires- Update to match NSA * Merged genhomedircon rewrite from Dan Walsh. - Rewrite audit2allow to python- Fix genhomedircon to work with non libsemanage systems- Patch genhomedircon to use libsemanage.py stuff- Update to match NSA * Merged setsebool cleanup patch from Ivan Gyurdiev.- Fix genhomedircon to use seusers file, temporary fix until swigified semanage* Added -B (--build) option to semodule to force a rebuild. * Reverted setsebool patch to call semanage_set_reload_bools(). * Changed setsebool to disable policy reload and to call security_set_boolean_list to update the runtime booleans. * Changed setfiles -c to use new flag to set_matchpathcon_flags() to disable context translation by matchpathcon_init().- Update to match NSA * Changed setfiles for the context canonicalization support. * Changed setsebool to call semanage_is_managed() interface and fall back to security_set_boolean_list() if policy is not managed. * Merged setsebool memory leak fix from Ivan Gyurdiev. * Merged setsebool patch to call semanage_set_reload_bools() interface from Ivan Gyurdiev.- Update to match NSA * Merged setsebool patch from Ivan Gyurdiev. This moves setsebool from libselinux/utils to policycoreutils, and rewrites it to use libsemanage for permanent boolean changes.- Rebuild to use latest libselinux, libsemanage, and libsepol- Update to match NSA * Merged semodule support for reload, noreload, and store options from Joshua Brindle. * Merged semodule_package rewrite from Joshua Brindle.- Update to match NSA * Cleaned up usage and error messages and releasing of memory by semodule_* utilities. * Corrected error reporting by semodule. * Updated semodule_expand for change to sepol interface. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to match NSA * Updated semodule_package for sepol interface changes.- Update to match NSA * Updated semodule_expand/link for sepol interface changes.- Update to match NSA * Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.- Update to match NSA * Updated semodule_expand to use get interfaces for hidden sepol_module_package type. * Merged newrole and run_init pam config patches from Dan Walsh (Red Hat). * Merged fixfiles patch from Dan Walsh (Red Hat). * Updated semodule for removal of semanage_strerror.- Fix run_init.pamd and spec file- Update to match NSA * Updated semodule_link and semodule_expand to use shared libsepol. Fixed audit2why to call policydb_init prior to policydb_read (still uses the static libsepol).- Update to match NSA * Updated for changes to libsepol. Changed semodule and semodule_package to use the shared libsepol. Disabled build of semodule_link and semodule_expand for now. Updated audit2why for relocated policydb internal headers, still needs to be converted to a shared lib interface.- Update newrole pam file to remove pam-stack - Update run_init pam file to remove pam-stack- Update to match NSA * Fixed warnings in load_policy. * Rewrote load_policy to use the new selinux_mkload_policy() interface provided by libselinux.- Rebuild with newer libararies- Update to match NSA * Merged patch to update semodule to the new libsemanage API and improve the user interface from Karl MacMillan (Tresys). * Modified semodule for the create/connect API split.- More fixes to stop find from following nfs paths- Update to match NSA * Merged run_init open_init_pty bug fix from Manoj Srivastava (unblock SIGCHLD). Bug reported by Erich Schubert.- Update to match NSA * Merged error shadowing bug fix for restorecon from Dan Walsh. * Merged setfiles usage/man page update for -r option from Dan Walsh. * Merged fixfiles -C patch to ignore :s0 addition on update to a MCS/MLS policy from Dan Walsh.- Add chcat script for use with chcon.- Fix restorecon to exit with error code* Updated version for release.- Add prereq for mount command- Update to match NSA * Changed setfiles -c to translate the context to raw format prior to calling libsepol.- Use new version of libsemange and require it for install- Ignore s0 in file context- Update to match NSA * Merged patch for fixfiles -C from Dan Walsh.- Update to match NSA * Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM). Bugs found by Coverity.- Fix fixfiles to call sort -u followed by sort -d.- Change fixfiles to ignore /home directory on updates- Update to match NSA * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys).- Update to match NSA * Changed semodule* to link with libsemanage.- Update to match NSA * Merged restorecon patch from Ivan Gyurdiev.- Update to match NSA * Merged load_policy, newrole, and genhomedircon patches from Red Hat.- Update to match NSA * Merged loadable module support from Tresys Technology.- Update to match NSA * Updated version for release.- Fix Ivan's patch for user role changes- Add Ivan's patch for user role changes in genhomedircon- Fix warning message on reload of booleans- Update to match NSA * Merged fixfiles and newrole patch from Dan Walsh. * Merged audit2why man page from Dan Walsh.- Add call to pam_acct_mgmt in newrole.- Update to match NSA * Extended audit2why to incorporate booleans and local user settings when analyzing audit messages.- Update to match NSA * Updated audit2why for sepol_ prefixes on Flask types to avoid namespace collision with libselinux, and to include now.- Fix fixfiles to accept -f - Update to match NSA * Added audit2why utility.- Change -f flag in fixfiles to remove stuff from /tmp - Change -F flag to pass -F flag to restorecon/fixfiles. (IE Force relabel).- Update to match NSA * Fixed signed/unsigned pointer bug in load_policy. * Reverted context validation patch for genhomedircon.- Update to match NSA * Reverted load_policy is_selinux_enabled patch from Dan Walsh. Otherwise, an initial policy load cannot be performed using load_policy, e.g. for anaconda.- remove is_selinux_enabled check from load_policy (Bad idea)- Update to version from NSA * Merged load_policy is_selinux_enabled patch from Dan Walsh. * Merged restorecon verbose output patch from Dan Walsh. * Merged setfiles altroot patch from Chris PeBenito.- Don't run load_policy on a non SELinux kernel.- Update to version from NSA * Merged context validation patch for genhomedircon from Eric Paris. - Fix verbose output of restorecon- Update to version from NSA * Changed setfiles -c to call set_matchpathcon_flags(3) to turn off processing of .homedirs and .local.- Update to released version from NSA * Merged rewrite of genhomedircon by Eric Paris. * Changed fixfiles to relabel jfs since it now supports security xattrs (as of 2.6.11). Removed reiserfs until 2.6.12 is released with fixed support for reiserfs and selinux.- Update to released version from NSA - Patch genhomedircon to handle passwd in different places.- Fix genhomedircon to not put bad userad error in file_contexts.homedir- Cleanup error reporting* Merged load_policy and genhomedircon patch from Dan Walsh.- Fix genhomedircon to add extr "\n"- Fix genhomedircon to handle blank users- Update to latest from NSA - Add call to libsepol- Fix genhomedircon to handle root - Fix fixfiles to better handle file system types- Fix genhomedircon to handle spaces in SELINUXPOLICYTYPE- Update to latest from NSA * Merged several fixes from Ulrich Drepper.- Apply Uli patch * The Makefiles should use the -Wall option even if compiled in beehive * Add -W, too * use -Werror when used outside of beehive. This could also be used unconditionally * setfiles/setfiles.c: fix resulting warning * restorecon/restorecon.c: Likewise * run_init/open_init_pty.c: argc hasn't been checked, the program would crash if called without parameters. ignore the return value of nice properly. * run_init: don't link with -ldl lutil * load_policy: that's the bad bug. pointer to unsigned int is passed, size_t is written to. fails on 64-bit archs * sestatus: signed vs unsigned problem * newrole: don't link with -ldl- Update to latest from NSA * Changed load_policy to fall back to the original policy upon an error from sepol_genusers().- Only restorecon on ext[23], reiser and xfs- Update to latest from NSA * Merged new genhomedircon script from Dan Walsh. * Changed load_policy to call sepol_genusers().- Remove Red Hat rhpl usage - Add back in original syntax - Update man page to match new syntax- Fix genhomedircon regular expression - Fix exclude in restorecon- Trap failure on write - Rewrite genhomedircon to generate file_context.homedirs - several passes- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Merged restorecon patch from Dan Walsh.- Update from NSA * Merged further change to fixfiles -C from Dan Walsh. * Merged updated fixfiles script from Dan Walsh. - Fix error handling of restorecon- Fix sestatus for longer booleans- More cleanup of fixfiles sed patch * Merged further patches for restorecon/setfiles -e and fixfiles -C.- More cleanup of fixfiles sed patch- More cleanup of fixfiles sed patch - Upgrade to latest from NSA * Merged patch for open_init_pty from Manoj Srivastava.- More cleanup of sed patch - Upgrade to latest from NSA * Merged updated fixfiles script from Dan Walsh. * Merged updated man page for fixfiles from Dan Walsh and re-added unzipped. * Reverted fixfiles patch for file_contexts.local; obsoleted by setfiles rewrite. * Merged error handling patch for restorecon from Dan Walsh. * Merged semi raw mode for open_init_pty helper from Manoj Srivastava. * Rewrote setfiles to use matchpathcon and the new interfaces exported by libselinux (>= 1.21.5).- Fix fixfiles patch - Upgrade to latest from NSA * Prevent overflow of spec array in setfiles. - Add diff comparason between file_contexts to fixfiles - Allow restorecon to give an warning on file not found instead of exiting- Upgrade to latest from NSA * Merged newrole -l support from Darrel Goeddel (TCS). - Fix genhomedircon STARTING_UID- Upgrade to latest from NSA * Merged fixfiles patch for file_contexts.local from Dan Walsh.- Temp file needs to be created in /etc/selinux/POLICYTYPE/contexts/files/ directory.- Upgrade to latest from NSA * Fixed restorecon to not treat errors from is_context_customizable() as a customizable context. * Merged setfiles/restorecon patch to not reset user field unless -F option is specified from Dan Walsh. * Merged open_init_pty helper for run_init from Manoj Srivastava. * Merged audit2allow and genhomedircon man pages from Manoj Srivastava.- Don't change user componant if it is all that changed unless forced. - Change fixfiles to concatinate file_context.local for setfiles- Update to latest from NSA- Fix restorecon segfault- Update to latest from NSA * Merged fixfiles rewrite from Dan Walsh. * Merged restorecon patch from Dan Walsh.- Update to latest from NSA * Merged fixfiles and restorecon patches from Dan Walsh. * Don't display change if only user part changed.- Fix fixfiles handling of rpm - Fix restorecon to not warn on symlinks unless -v -v - Fix output of verbose to show old context as well as new context- Update to latest from NSA * Changed restorecon to ignore ENOENT errors from matchpathcon. * Merged nonls patch from Chris PeBenito.- Update to latest from NSA * Removed fixfiles.cron. * Merged run_init.8 patch from Dan Walsh.- Fix run_init.8 to refer to correct location of initrc_context- Upgrade to latest from NSA- Add code to sestatus to output the current policy from config file- Patch audit2allow to return self and no brackets if only one rule- Update to latest from NSA - Eliminate fixfiles.cron- Only run fixfiles.cron once a week, and eliminate null message- Update with NSA * Added -l option to setfiles to log changes via syslog. * Merged -e option to setfiles to exclude directories. * Merged -R option to restorecon for recursive descent.- Add -e (exclude directory) switch to setfiles - Add syslog to setfiles- Add -R (recursive) switch to restorecon.- Change to only display to terminal if tty is specified- Only display to stdout if logfile not specified- Add Steve Grubb patch to cleanup log files.- Add optargs - Update to match NSA- Add fix to get cdrom info from /proc/media in fixfiles.- Add Steve Grub patches for * Fix fixfiles.cron MAILTO * Several problems in sestatus- Add -q (quiet) qualifier to load_policy to not report warnings- Add requires for libsepol >= 1.1.1- Update to latest from upstream- Update to latest from upstream - Includes Colin patch for verifying file_contexts- Update to latest from upstream- Update to latest from upstream- Add Man page for load_policy- new version from NSA uses libsepol- Fix genhomedircon join command- Latest from NSA- Change fixfiles to not change when running a check- Fix restorecon getopt call to stop hang on IBM Arches- Only mail files less than 100 lines from fixfiles.cron - Add Russell's fix for genhomedircon- Latest from NSA- Add ro warnings- Latest from NSA - Fix fixfiles.cron to delete outfile- Fix fixfiles.cron to not run on non SELinux boxes - Fix several problems in fixfiles and fixfiles.cron- Update from NSA - Add cron capability to fixfiles- Update from NSA- Fix fixfiles to handle no rpm file on relabel- Update latest from NSA - Add -o option to setfiles to save output of any files with incorrect context.- Add rpm support to fixfiles - Update restorecon to add file input support- Update with NSA Latest- rebuilt- Fix run_init to use policy formats- Update from NSA- Change location of file_context file- Change to use /etc/sysconfig/selinux to determine location of policy files- Update to latest from NSA - Change fixfiles to prompt before deleteing /tmp files- have restorecon ingnore <> - Hand matchpathcon the file status- Update to match NSA- Move location of log file to /var/tmp- Better grep command for bind- Eliminate bind and context mounts- update to match NSA- Log fixfiles to the /tmp directory- Add patch to fall back to authenticating via uid if the current user's SELinux user identity is the default identity - Add BuildRequires pam-devel- Add man page, thanks to Richard Halley- Upgrade to latest from NSA- Update with latest from gentoo and NSA- Check return codes in sestatus.c- Fix sestatus to not double free - Fix sestatus.conf to be unix format- Warn on setfiles failure to relabel.- Updated version of sestatus- Fix fixfiles to checklabel properly- add sestatus- Change free call to freecon - Cleanup- Remove setfiles-assoc patch - Fix restorecon to not crash on missing dir- Eliminate trailing / in restorecon- Add Verbosity check- Change restorecon to not follow symlinks. It is too difficult and confusing - to figure out the file context for the file pointed to by a symlink.- Fix restorecon- Read restorecon patch- Change genhomedircon to take POLICYSOURCEDIR from command line- Add checkselinux - move fixfiles and restorecon to /sbin- Restore patch of genhomedircon- Add setfiles-assoc patch to try to freeup memory use- Add fixlabels- Update to latest from NSA- Increase the size of buffer accepted by setfiles to BUFSIZ.- genhomedircon should complete even if it can't read /etc/default/useradd- fix restorecon to relabel unlabled files.- Add genhomedircon from tresys - Fixed patch for restorecon- exit out when selinux is not enabled- Fix minor bugs in restorecon- Add restorecon c program- Update to latest tarball from NSA- Add sort patch- rebuilt- remove mods to run_init since init scripts don't require it anymore- fix genhomedircon not to return and error- add setfiles quiet patch- add checkcon to verify context match file_context- fix command parsing restorecon- Add restorecon- Update to latest NSA 1.4- Change run_init.console to run as run_init_t- Remove dietcc since load_policy is not in mkinitrd - Change to use CONSOLEHELPER flag- Don't authenticate run_init when used with consolehelper- Add run_init consolehelper link- Add russell spead up patch to deal with file path stems- Build load_policy with diet gcc in order to save space on initrd- Update with NSA latest- remove i18n - Temp remove gtk support- Remove wnck requirement- Add gtk support to run_init- Add internationalization- Initial version2.0.83-30.1.el6_82.0.83-30.1.el6_8newrolenewrole.1.gz/usr/bin//usr/share/man/man1/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectorysetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, strippedtroff or preprocessor input text (gzip compressed data, from Unix, max compression) RRRRRRRRRR R R R?7zXZ !PH6q-] b2u 4ڦ70MrKҙu'p*ݡ8ZYQ=RƾS9?mcX < >›tP0GWw$u߾Y=SutMeyK`/,d Y)k-V U y -˦/d;O1,ׄM]ѱ`۱aKGEU"YB"Mc,v(k=yG䴋jWr]Cʱӛ|)iDXttL*cQ<$\ūwZ١3mgҏdLF2եA>8q2>jb#ٹ،@NjA> ΪSyf%-~:pZ,1_qr'nCȤp`ދLV+ aSLAJE&4cFWE\⻳SY>S&fΣ/Miz򴴊.Il+ _O•4 h%,2rU\@1%;LɎlY ۨfiVC0TƊnEp{Mܓ!w~-s#\9S"dy|,Df@g.hVfS'We9P(ȫ8߂S xx|eU豎=3Ygڇr;7yO 繀/P:3P{G9'.wAŤGrUb,]jԤX=$}~ȘS;ym( t$fc _ 7N<2fu 8#fcũe]ʦuٖT.?*8W&$dksdt0Z?¾B>Q'ˮ1@T%`wd;5ǿ/U9ڢ` po^z y}z]/i\o^u]6&7jMM"1R4 ЙQƒ;Vdã.K4$tj3gP+83zxI;UM]/:OTX6 `(!摭WT-kB8J3$8z\N~yǬ&oR*;1(&ޱ]G$X;b陏a;Gz$K> xb!U*Zj nǴUmwKnr3Ƙ8H^-6L(qdQ'G,jpVU]^{rl3Kަ!8, oUL67;rDI={ֺ ">vfGCL7L6) QR@yfݕd#e7B7nۯMWe؏דzZ-wۯSZrq@Y$ iQSRT2GSµ0#ƻivbO+ ,΋Ef v6MLJ+-pj+G`LwdTk.r3ODO;cp#ZPY+PBh Cb gl_OSح ^ÝUvlZ48w 2yd]UHw ΀qgJy`U;우..d@Y`&{+㋅@|4'̟`499al\O풼a(z*/J ,q#2u!`;{ GK;#5XhӔA(,Z ;"V_5jPiVN[i~ V#^g4olaU@ 9_{E6$OR,z풃\6I]w ?՟.bWA=g/=((/q67;\Z4q)kY#5hzriä7weB$s vixL\ȹe""?dP;7Z(f8Q̡9? &^f( Eu.UQh،8Izw. .$'X(CxKz+Io6paf L)߇Cn.1YJvhhw^Da:7Vyݟ<88"z dFo =ʁߌ>pn#\a٣?CjNGKRHbCL^)GYh04'mgT[ݮsNH `(x8'y!s=VmP>Go7^qL>]pJ1$ ^C =\k"mHe6@LJ麏^.{6<"z#Fe͐W:|"rZt-GĠ>_>{0[po%;3xӮB\?狫My vB$aEI>w5j`Zr.,'V6ܴ0_v n& Δ{:;,o||_$50za6AS:qQKRg2Z~9&GPƇQy.6.XɎ[!FFcєjFAZ| |o{;1~{d ZDġĬ: ~R)j$(ߒ!Cp;98J#~cKlmM\'}?se<ǔj&c9 I3%*)ڻ7unzp6{Zp =R Ed0Yy'Q[(:)\#"Ya cjB`<×EhfokV3j1$X;*I3@yFS58ۢ{w5'?t.g#)XJpr䔡@ěX8ɸu_C, C@(lr_a&Qjf|3~ z@5a`>jLF5Aӗp1v0f&!{;:ߴ?}ڃ%Џ5_љ!;UdrD#1c7¤g,c/9!B%̆/ӭQ .B: ֩RCtx5VŷomK+y  =` U%6k/P8rC,$\?']gM>/.\Xk15/Rp]Td.\uEdӃG$4͜9*ܭ6<Sj]4u&}TiBG̬g,*X#a`Ie6 xqէʵ˳5;ߍ-aT V1,\.`@Y`\9-6ZY$Y\DԆ֮Y#i^ie{"PG-}թf?uOKZRQܕ@) lQzz"I|%Q1|v|N;J$IHFҎD~*(XVÕb<1rBT~WYQֽ#Y;fݢT_fvfe(5?%wğ(C^(٢ed ̢ O/۟M<[pm3-o%p}Bu8 ܱR^tQ Q ]5ą!it|cgTA76^Cڛkʕ'8I2ƵKE?uhop~2t s<}"ML6V/tr{I#+FǸ8hѧTιB||b{ x-&Cgkj |{?qV"-{g38'>{XhV>aĤ:I4VaDt^UM2Ihsȏ?+T5c; F ߟű3z4 W2j+gF΋¢ѣ7 AS p 6@Ya'Ur굝8~_câx >(V #&NP>s5a$c^7 vy8*I}*q؆CNa' 2[br{ ǥAd!x yGA*+vUC4 pTikVC3v5nʑDO  ы'hʍq^'P>y H??% x8.³? q W"=lx2p@X2p:F;Y:ItB FcknrWȄD=7X&)'UZޗ/u=_b!{"*/ƴݮ{ϖ ߟͯ 5sT3XEb2Xgud7y+?Tj -Rj#V;`EPgqud]fZK=BK%FElu2h\*_@%ޗS_Ie}QC9k@7w~SzdU}se ۨ5ª䏆.JĞ-wyXtq6-ܨ3u¬h]Y]H˼N`'OH^UM˓inLϧm杫vJ*OfJ9*C[9qBρ-e~u>1,LF>S$Qi*M.RSfŷfў*1wRjN "Ujbc!)f;qOeG0`Su5Xt;B &-*ݚ p;BC @[w]x[2מI1c QZy&#|Hy?bMvÕ~b0S5s~..!DhqI׊%Mw@Qï3NK=rt\ʗ0ՙ iC;NBf6e,%t+E EM_H ´,k߰`;3N\GJ{b/+;>[ &㔻 Q/H5n cSo2rEj~,/.\ȜS(H\#nĭ[qndr'}3; O4*EP{H*L1gwGHƼj1(.XЀCҧZ^i> =3p3$u^#K*mE<MxZBi * PgULRN\pԈ!bR/sNƥ% !?m_?_!W;ųpbN jG0EUj]/ܜ<D &R6|dwo{eTǢR]DԲ-3\OU#h"Bj^0x_jeq[WZb.4\ΊukKvJ@>Fr#{dU Ϥ@2Q {|>^Ѥ ihlf~T Cπa4Ӓ[ʏ|k*UXf<~)QeżLաLmf@&FZufw2 Y[-׻dJÁ^hY E͸TwhmDf~ mԛNDŨTy>1oHܟ]䴉Nf$[(~z1%fG*#n|ȑW8D]&Z9rd%5oMԑE2sG&DPjMG"LJ0:YB˰W~-AZŏd5o9{! @cQኖ ]&%nl o%NUF$-PMTA $?UtjѧDLA1 Ÿ@ÕO] KeP˘=w aU݋7-# bĦy0 }72M3q vJ^"}:߈e,`hG8:ɭaq2݉J㨤P.ui7ڐ! <؏cnwt7+}Ue8O*}j9 XAXn`.(i@ȼbLdPYqNn8`cB=)b#&?V~Z`cmm)$f<7`A?' K @ΏJif%Ɔ6hiJN?6OLm3yF֕_a- gq| 쨩H. (3eو˩;:W[9ZK rC$ sАIm|y:^'BMw6.͐HٙctflbH&l<̫@%OJcs/ LX޵U&OSΥzߢ|tKusĺݟ1?+I3'SxcF '5<blavj}.睅NEj؇5Ln |R-: kg&%}zGāEhǣ}O43+G oXo_Tu6 #r-Yh)cKF`Q/7gꗳJϩ`8;xv+mO-%DLؼȱ\DpH N 5=nW.I4i~c{ǭ`>NKEd8Z_#q^U^Ɂd_қ; #q,N+.*s",%A />yliټ\^st"yWj@z-Ƨ$|]vaol< dJ`N/Rt P(Ҳˍ0Y$٘Lڶ]*پMޒ)>Ahi瘇H+W_#^A\d ɳB;D>zm2\Q?j"yZ4&j]ٛC\%x*i[$ c5Q/ޮyH4٫qkޡBNa׊HG_%m5k}$d;CQ@ڙ1&+`0E% @(U}}$d ?z%*^>BM 6/I P . RՋKf:[`$JcN@=%)tDϷċuՌkqx:mUHqf,Ȏ5lZPiQ% Hyf㱩N:>(\5OpS~]ӛ~4oqvY%c \R΁ ?UISUW3.jA'/o!rr86i-xS9Y$*T6h97 I<+9J9QDoR`vX&+9VҐsi8 l>Ì \wK <ڀY]Qި|V*=Exd{Id? v7b$ZdI]i4O]lq:#`l;+Z"q"kvN 1qՒsgM,tӇ.79h#s{pZ̸/Qw,䝛Y/lI̤!̆ƌ 1Ň- J؂Uy*Js#nب /{)86d630,"@F0y7.[]1TtUJzJk9LO.ݍPla+O mxZ2-}{ = G A[ge7u{7Estu[ʶ YZ