# changelog

author: Ted Ross <tross@redhat.com> - 0.14-16
changelog:
  - Related: rhbz#703563
  - Related: rhbz#771961
  - Related: rhbz#785919
  - Related: rhbz#788901
  - Related: rhbz#799269
  - Related: rhbz#802807


author: Mike Cressman <mcressman@redhat.com> - 0.14-19
changelog:
  - BZs: 609685, 683711, 693444, 707682, 729311, 801465, 808090,
         809357, 811481, 817283, 826989, 831365, 835628


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917717-4
changelog:
  - Changed defines to globals and moved them to the top.
  - Removed unnecessary python Requires/BuildRequires.


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917557-4
changelog:
  - Changed defines to globals and moved to top.
  - Fixed typo in description.
  - Removed unnecessary python Requires/BuildRequires.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - substitution in tutorial and examples so that dependencies are correct and
    they can be successfully rebuilt.
  - switched to completely using QTDIR.  trying to coexist with links into
    /usr/{include,lib} and still compile with qt 1.x is very hard for
    configure scripts to cope with.


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - current CVS snapshot
  - fix compilation with gcc 2.95.x
  - use install -c rather than just install to make BSD install happy


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - -GL requires libGL.so.1 instead of Mesa (might as well be glxMesa
    or some commercial OpenGL)
  - -GL BuildPrereqs /usr/X11R6/include/GL/gl.h instead of Mesa-devel
    (might as well be glxMesa or some commercial OpenGL)


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - beta1
  - get rid of qt-ImageIO, the functionality is now in the main Qt library
  - remove qt-Network, the functionality is now in the main Qt library
  - add changes-2.1.0 to %doc


author: Harald Hoyer <harald@redhat.de>
changelog:
  - made patch smaller and binary compatible when recompiled with 6.2
  - modified connect and moc to cope with the new g++ class layout


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move man pages to a more reasonable place (this fixes Bug #14126)
  - exclude ia64 for now (compiler problems!!!)


author: Than Ngo <than@redhat.com>
changelog:
  - update release 2.2.0
  - changed copyright to GPL
  - added missing static libraries
  - made symbolic link for designer to load the help files correct
  - made designer and designer-kde2 as sub packages
  - added missing templates for designer
  - remove jakub patch, since the release 2.2.0 already 
    contains this patch.
  - fixed qt again to compile with gcc-2.96
  - use make -j for building


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move Qt designer to a different source RPM to get rid of a
    circular dependency (kdelibs2->qt, qt->kdelibs2)
  - Enable MNG support
  - Don't compile (just include) examples and tutorials
  - move the static libraries to a separate package (qt-static).
    They're HUGE, and most people won't ever need them.
  - clean up spec file
  - fix up dependencies (-devel requires base, -static requires devel,
    Xt requires base)
  - add BuildRequires line


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix -devel
  - update to the new version of 2.2.1 on trolltech.com; the initial tarball
    contained broken docs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add missing msg2qm, msgmerge, qconfig tools (Bug #18997), introduced
    by broken Makefiles in base
  - fix up %install so it works both with old-style and new-style fileutils
    (fileutils <= 4.0z don't know about -L)


author: Than Ngo <than@redhat.com>
changelog:
  - call ldconfig for updating (Bug #19687)
  - added patch from Trolltech, thanks to Rainer <rms@trolltech.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't segfault when running Qt/Embedded applications as root
  - Improve the Qt/Embedded sparc patch so we don't need the specfile hacks
    anymore
  - Fix a bug in QPrintDialog (causing KDE Bug #18608)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.3.0-5
changelog:
  - Make sure uic and designer use the libqui from the source tree, not
    a previously installed one.
    Linking uic-x11 against libqui-embedded is definitely not a feature. ;)
  - The qclipboard fix is needed for qt-x11 only, don't apply it if we're
    building qt-embedded


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta1.2
changelog:
  - Fix up QSQL Postgres classes for Postgres 7.1.x
  - Fix various bugs:
    - QtMultilineEdit and QtTableView should actually compile
    - Link libqsqlpsql with libpq
    - Don't link the base library with libmysqlclient, linking the MySQL
      module with it is sufficient
  - Add missing const qualifier
  - move the SQL drivers to separate packages to avoid dependencies
  - build and install designer plugins - converting glade files to Qt is fun. ;)
  - handle RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add another ugly workaround for build system problems, this should finally
    get rid of the dangling symlinks


author: Tim Powers <timp@redhat.com> 3.0.0-0.beta3.4
changelog:
  - explicitly include qm2ts, qmake, qtconfig in the devel package file list to avoid dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta4.1
changelog:
  - beta4
  - build the Motif style directly into Qt rather than as a plugin - Qt should
    always have at least one style...
  - replace the designer3 symlink with a shell script that sets QTDIR correctly
    before launching designer
  - Add desktop file for designer


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-1
changelog:
  - 3.0.0 final
  - fix some minor specfile bugs
  - Modularize some more (image format plugins)
  - Build codecs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-3
changelog:
  - Add symlink /usr/lib/qt-3.0.0 -> /usr/lib/qt3 and set QTDIR to the
    symlink, allowing to update to 3.0.1 without breaking rpath'ed binaries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-4
changelog:
  - Give designer, uic, moc, etc. their real names - the qt2 versions
    have been renamed in qt2-2.3.2-1.
    Conflict with qt2 < 2.3.2-1.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-0.cvs20011210.1
changelog:
  - Update to current (needed by KDE 3.x)
  - Rebuild with current libstdc++
  - Temporarily disable building on alpha
  - Fix build with PostgreSQL 7.2


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-2
changelog:
  - Fix up settings search path
  - Add default qtrc allowing to use KDE 3.x Qt plugins
  - Make sure QLibrary uses RTLD_GLOBAL when dlopen()ing libraries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.2-0.cvs20020114.1
changelog:
  - Build styles directly into the main library for now, there's too much broken
    code out there depending on this ATM.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-0.cvs20020314.1
changelog:
  - Update to 3.0.3-pre, required for KDE3
  - force -fPIC usage
  - Remove conflict with qt2 < 2.3.2-1, the new qt2 2.3.1 is fixed and qt 2.3.2
    is broken
  - Ship the qmake config files (so qmake works for building any 3rd party stuff,
    e.g. aethera)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-8
changelog:
  - Get rid of non-threaded version, dlopen()'ing threaded code
    (like plugins) from non-threaded code is dangerous
  - Add some fixes from qt-copy, fixing the ksplash crash some people
    have noticed on a first login
  - Add translation fixes from CVS
  - Patch example .pro files to build outside the Qt source tree (#63023)
  - Fix various bugs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-10
changelog:
  - Tweaks to allow parallel installations of Qt 3.x (gcc 2.96) and Qt 3.x
    (gcc 3.1)
  - Fix up debug spewage at Qt designer startup


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.4-6
changelog:
  - Re-enable Xft2 now that fontconfig is fixed
  - Require a version of fontconfig that works
  - Use -fPIC rather than -fpic on alpha


author: Jakub Jelinek <jakub@redhat.com> 3.0.4-8
changelog:
  - compile libXinerama.a with -fpic in Qt until XFree86 is fixed
  - make %xft2 work even if old Xft headers aren't installed


author: Than Ngo <than@redhat.com> 3.0.4-10
changelog:
  - add missing Buildprequires desktop-file-utils
  - add patches for GB18030 (llch@redhat.com) bug #68430


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-11
changelog:
  - Move qtconfig from qt-devel to qt, it's generally useful
  - Use -fno-use-cxa-atexit
  - Some tweaks to allow building Qt/Embedded with the same spec file
  - Apply the GB18030 patch even if xft2 isn't set


author: Than Ngo <than@redhat.com> 3.0.5-13
changelog:
  - Added fix to use VT100 graphic characters (bug #71364)
  - Added fontdatabase fix from llch@redhat.com (bug #68353)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-14
changelog:
  - Don't link to libstdc++, it isn't used
  - Work around s390 compiler bug (fpic/fPIC coexistance)
  - Do away with the "Feature Bluecurve already defined" warning message
  - Remove qmake cache files from the package


author: Than Ngo <than@redhat.com> 3.0.5-17
changelog:
  - Fixed rpath issue (bug #69692, #69575)
  - Removed dlopen patch
  - Added monospace alias patch from Leon Ho (bug #72811)
  - Added man pages


author: Than Ngo <than@redhat.com> 3.0.5-19
changelog:
  - examples misconfigured (bug #76083)
  - don't include pkg-config (bug #74621)
  - fix build problem with new XFree86


author: Than Ngo <than@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0
  - adjust some patch files for 3.1.0
  - clean up specfile
  - remove some Xft2 patch files, which are now in 3.1.0
  - add qwidget_x11.cpp.diff from Trolltech
  - install qt in %{_libdir}/qt-3.1 (bug #77706)
  - don't use rpath
  - enable large file support
  - use system Xinerama
  - remove unneeded cups patch file
  - fix to build against new XFree86


author: Than Ngo <than@redhat.com> 3.1.1-3
changelog:
  - add monospace patch file from Leon Ho (bug #79949)
  - add small patch file from Sysoltsev Slawa (bug #79731)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Change qmlined.h to not include an attic header that is also not shipped
    with Red Hat Linux. This also fixes building unixODBC, that includes this
    header (apparently also without needing it).


author: Than Ngo <than@redhat.com> 1:3.2.2-0.2
changelog:
  - add font alias patch file, thanks to Leon Ho
  - clean up monospace.patch from Leon Ho
  - remove some unneeded patch files


author: Than Ngo <than@redhat.com> 1:3.2.3-0.2
changelog:
  - Added missing prl files, (report from trolltech)
  - Fixed description
  - include requires XFree86-devel on qt-devel


author: Than Ngo <than@redhat.com> 3.3.0-0.3
changelog:
  - enable IPv6 support
  - use dlopen, instead of linking with OpenGL libraries directly
  - don't install backup files


author: Than Ngo <than@redhat.com> 3.3.1-0.6
changelog:
  - add 0034-qclipboard_recursion_fix.patch from CVS, #118368
  - add better qt-x11-free-3.3.1-fontdatabase.patch


author: Than Ngo <than@redhat.com> 3.3.1-1
changelog:
  - add cvs backport
  - fix lib64 issue, #121052
  - fix CJK font display, bug #121017, #120542, thanks to Leon Ho
  - compress tutorial/examples


author: Than Ngo <than@redhat.com> 1:3.3.2-5
changelog:
  - add missing qembed tool #124052, #124052
  - get rid of unused trigger
  - add qt.conf in ld.so.conf.d -> don't change ld.so.conf #124080


author: Than Ngo <than@redhat.com> 1:3.3.2-8
changelog:
  - add fontconfig fix for qfontdatabase, #123868
  - fix some buildrequires problem, #125289
  - fix dangling symlink, #125351
  - get rid of backup files


author: Than Ngo <than@redhat.com> 1:3.3.3-9
changelog:
  - remove unused patch
  - set XIMInputStyle=On The Spot
  - require xorg-x11-devel instead XFree86-devel


author: Than Ngo <than@redhat.com> 1:3.3.4-1
changelog:
  - update to 3.3.4
  - adapt many patches to qt-3.3.4
  - drop qt-x11-free-3.3.0-freetype, qt-x11-free-3.3.3-qmake, qt-x11-free-3.3.1-lib64
    qt-x11-free-3.3.3-qimage, which are included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.4-2
changelog:
  - remove useless doc files #143949
  - fix build problem if installman is disable #146311
  - add missing html/examples/tutorial symlinks


author: Than Ngo <than@redhat.com> 1:3.3.4-5
changelog:
  - fix application crash when input methode not available (bug #140658)
  - remove .moc/.obj
  - add qt-copy patch to fix KDE #80072


author: Than Ngo <than@redhat.com> 1:3.3.4-15
changelog:
  - add better fix for #156977, thanks to trolltech
  - apply patch to fix keyReleaseEvent problem #156572


author: Than Ngo <than@redhat.com> 1:3.3.5-5
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051012
  - disable some debug messages
  - apply patch to fix build problem with the new immodule patch


author: Than Ngo <than@redhat.com> 1:3.3.5-6
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051018.diff
  - remove unneeded qt-x11-immodule-unified-qt3.3.5-20051012-build.patch


author: Than Ngo <than@redhat.com> 1:3.3.6-1
changelog:
  - update to 3.3.6
  - adapt qt-x11-immodule-unified-qt3.3.5-20060318 to qt-3.3.6
  - remove set of fixes for the immodule patch, included in qt-x11-immodule-unified-qt3.3.5-20060318
  - remove 0051-qtoolbar_77047.patch, qt-x11-free-3.3.4-assistant_de.patch,
    qt-x11-free-3.3.5-warning.patch, included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.6-7
changelog:
  - fix utf8 issue in changelog
  - fix #195410, don't strip binaries/libraries
  - fix #156572, keyReleaseEvent issue


author: Than Ngo <than@redhat.com> 1:3.3.6-11
changelog:
  - apply upstream patches, fix arabic fonts issue, and
    problems with missing minimum size when richtext
    labels are used


author: Than Ngo <than@redhat.com> 1:3.3.7-1.fc6
changelog:
  - update to 3.3.7
  - fix #209097, ml_IN font rendering
  - fix #209970, pa font rendering
  - fix #209098, or_IN font rendering
  - fix #209972, as_IN font rendering
  - fix #209975, bn_IN font rendering
  - fix #211259, te_IN font rendering
  - fix #211436, as_IN font rendering
    thanks Sachin Tawniya, LingNing Zhang for the fixes
  - move html files to devel
  - add sqlite plugin
  - fix #189012, qt settings should be readable for other


author: Than Ngo <than@redhat.com> - 1:3.3.7-2.fc7
changelog:
  - Resolves: bz#214371, bn_IN font rendering
  - Resolves: bz#217657, ml_IN issue with cursor position
  - Resolves: bz#217638, regression bug in qt
  - Resolves: bz#209974, Vowel position set properly
  - Resolves: bz#214570, Rendering is not fine for 'RA' 09B0


author: Than Ngo <than@redhat.com> - 1:3.3.8-3.fc7
changelog:
  - apply patches to fix
     Qt UTF-8 overlong sequence decoding vulnerability
     QPopupMenu aware of Xinerama
     a regression in QProgress::writeToStdin()


author: Than Ngo <than@redhat.com> - 1:3.3.8-4.fc7
changelog:
  - adjust qt-3.3.8-fontrendering-as_IN-209972.patch and
    qt-3.3.8-fontrendering-#214570.patch for qt-3.3.8


author: Than Ngo <than@redhat.com> - 1:3.3.8-7
changelog:
  - CVE-2007-3388 qt3 format string flaw
  - backport to fix #bz243722, bz#244148, Applications using qt-mysql crash if database is
    removed before QApplication is destroyed
  - cleanup desktop files


author: Than Ngo <than@redhat.com> - 3.3.8-9
changelog:
  - rh#309091, qt should provide %{qtdir}/plugins/styles
  - rh#276521, qt-copy patches 0079, 0080, 0082 and 0084


author: Than Ngo <than@redhat.com> 3.3.8b-2
changelog:
  - License: GPLv2 or GPLv3
  - merged in 3.3.8b -> drop following patches:
      * qt-3.3.6-fontrendering-punjabi-209970.patch
      * qt-3.3.6-fontrendering-or_IN-209098.patch
      * qt-3.3.6-fontrendering-gu-228451.patch
      * qt-font-default-subst.diff
      * 0076-fix-qprocess.diff
      * 0082-fix-qdatetime-fromstring.diff
      * qt-x11-free-3.3.8-bz#243722-mysql.patch
      * qt3-CVE-2007-3388.patch
      * utf8-bug-qt3-CVE-2007-0242.diff
      * qt-3.3.6-bz#292941-CVE-2007-4137.patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.3.8b-8
changelog:
  - prepare for rename to qt3 on Fedora >= 9 (not enabled yet)
  - add Provides and Obsoletes everywhere
  - update summaries and descriptions
  - remove dots at end of Summary tags
  - fix non-UTF-8 characters


author: Jay Fenlason <fenlason@redhat.com> 0.96-1
changelog:
  - added a patch (libwrap) to allow the generated Makefiles for zebra/
    and lib/ to work on AMD64 systems.  For some reason make there does
    not like a dependency on -lcap
  - added a patch (warnings) to shut up warnings about an undefined
    structure type in some function prototypes and quiet down all the
    warnings about assert(ptr) on x86_64.
  - Modified the upstream quagga-0.96/readhat/quagga.spec to work as an
    official Red Hat package (remove user and group creation and changes
    to services)
  - Trimmed changelog.  See the upstream .spec file for previous
    changelog entries.


author: Jay Fenlason <fenlason@redhat.com> 0.96.1-3
changelog:
  - Merge from quagga-3E-branch, with a fix for #102673 and a couple
    more compiler warnings quashed.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Remove the directory part of paths for PAM modules in quagga.pam, allowing
    libpam to search its default directory (needed if a 64-bit libpam needs to
    look in /lib64/security instead of /lib/security).


author: Jay Fenlason <fenlason@redhat.com> 0.96.2-5
changelog:
  - merge sysconfig patch from 3E branch.  This patch is from Kaj J. Niemi
    (kajtzu@basen.net), and puts Quagga configuration options in
    /etc/sysconfig/quagga, and defaults Quagga to listening on 127.0.0.1 only.
    This closes #104376
  - Use /sbin/nologin for the shell of the quagga user.  This closes #103320
  - Update the quagga-0.96.1-warnings.patch patch to kill a couple more
    warnings.


author: Jay Fenlason <fenlason@redhat.com> 0.96.3-1
changelog:
  - Patch a remote DoS attack (#107140)
  - New upstream version
  - Removed the .libcap patch, which was applied upstream
  - Renamed the vty group from quaggavty to quaggavt because quaggavty is
    too long for NIS.
  - Patch the spec file to fix #106857: /etc/quagga/zebra.conf is created with
    the wrong owner.
  - Removed the "med" part of the 0.96.1-warnings patch for . . .
  - Add a new warnings patch with a fix for #106315.  This also updates
    the "med" part of the previous warnings patch.


author: Jay Fenlason <fenlason@redhat.com> 0.96.5-0
changelog:
  - New upstream version
  - Change includedir
  - Change the pre scriptlet to fail if the useradd command fails.
  - Remove obsolete patches from this .spec file and renumber the two
    remaining ones.


author: Tim Waugh <twaugh@redhat.com> 0.97.3-3
changelog:
  - Rebuilt for new readline.
  - Don't explicitly require readline.  The correct dependency is automatically
    picked up by linking against it.


author: Jay Fenlason <fenlason@redhat.com> 0.98.0-2
changelog:
  - New upstream version.  This fixes bz#143796
  - --with-rtadv needs to be --enable-rtadv according to configure.
    (but it was enabled by default, so this is a cosmetic change only)
    Change /etc/logrotate.d/* to /etc/logrotate.d/quagga in this spec file.
  - Modify this spec file to move the .so files to the base package
    and close bz#140894
  - Modify this spec file to separate out _includedir/quagga/ospfd
    from .../*.h and _includedir/quagga/ospfapi from .../*.h
    Rpmbuild probably shouldn't allow dir tag of a plain file.


author: Jay Fenlason <fenlason@redhat.com> 0.98.2-2
changelog:
  - New upstream version, inclues my -gcc4 patch, and a patch from
    Vladimir Ivanov <wawa@yandex-team.ru>


author: Jay Fenlason <fenlason@redhat.com> 0.98.5-3
changelog:
  - add the -pie patch, to make -fPIE compiling actually work on all platforms.
  - Include -pam patch to close
    bz#170256 ? pam_stack is deprecated
  - Change ucd-snmp to net-snmp to close
    bz#164333 ? quagga 0.98.4-2 requires now obsolete package ucd-snmp-devel
  - also fix duplicate line mentioned in bz#164333


author: Jay Fenlason <fenlason@redhat.com> 0:0.98.6-2
changelog:
  - Upgrade to new upstream version, closing security problems:
    bz#191081 CVE-2006-2223 Quagga RIPd information disclosure
    bz#191085 CVE-2006-2224 Quagga RIPd route injection


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.99.6-1
changelog:
  - upgrade to new upstream 0.99.6
  - Resolves: #233909: quagga: unowned directory
  - removed redundant patches (#226352)


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.99.8-1
changelog:
  - upgrade to new upstream version 0.99.8
  - resolves: #249423: scripts in /etc/rc.d/init.d/* are marked as config files in specfile
  - resolves: #247040: Initscript Review
  - resolves: #249538: Inconsistencies in init scripts
  - resolves: #220531: quagga: non-failsafe install-info usage, info files removed from index on update


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.99.9-2
changelog:
  - resolves: #376821: ospfd init script looks for ospf6 configuration and lock file
  - resolves: #376841: Usage string in ospf6d init script incorrect


author: Martin Nagy <mnagy@redhat.com> - 0.99.9-6
changelog:
  - fix vtysh.conf owner and group (#416121)
  - fix bpgd IPv6 advertisements, patch from upstream (#429448)


author: Jiri Skala <jskala@redhat.com> - 0.99.11-3
changelog:
  - fix #498832 - bgpd crashes on as paths containing more 6 digit as numbers
  - corrected release number


author: Jiri Skala <jskala@redhat.com> - 0.99.12-1
changelog:
  - update to latest upstream version
  - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Adam Tkac <atkac redhat com> - 0.99.15-8
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-10
changelog:
  - add watchquagga initscript (#862826, #1208617)
  - remove pidfile when service is stopped (#842308)
  - use QCONFDIR correctly in initscripts (#839620)
  - include watchquagga and ospfclient manpages (#674862)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-11
changelog:
  - fix for CVE-2013-2236 (#1391918)
  - fix for CVE-2016-1245 (#1391914)
  - fix for CVE-2016-2342 (#1391916)
  - fix for CVE-2016-4049 (#1391919)


author: Michal Ruprich <mruprich@redhat.com> - 0.99.15-14
changelog:
  - Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
  	- Condensed the _sysconfdir entries in to one line


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-22
changelog:
  - Remove fixed limit on number of autofs mount points (bug #1024097)
  - Print negative quota values properly (bug #1009397)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Create a single package(source) for glibc21 and glibc22 (automatic
  Requires can handle this just fine).
  - use %{_mandir} and friends
  - add more flesh to %doc
  - streamline %config file %attrs
  - streamline init.d file a bit:
     * add a default chkconfig: (default to disable for security etc. reasons; 
       also, the default config isn't generic enough..)
     * add reload/condrestart
     * minor tweaks
     * missing: localization support (initscripts-5.60)
  - use %initdir macro


author: Tim Powers <timp@redhat.com>
changelog:
  - use %configure and %makeinstall, just glob the manpages, cleans
    things up
  - fixed initscript so that it can be internationalized in the future


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch supplied by Pekka Savola in #30508
  - made changes to initscript as per Pekka's suggestions


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add select/kill signals patch from Nathan Lutchansky <lutchann@litech.org>.
  - add address syntax checked fix from Marko Myllynen <myllynen@lut.fi>.
  - add patch to check the pid file before fork.
  - add support for OPTIONS sourced from /etc/sysconfig/radvd, provide a nice
  default one.
  - add/delete radvd user, change the pidfile to /var/run/radvd/radvd.pid.
  - fix initscript NETWORKING_IPV6 check.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add patch to chroot (doesn't work well yet, as /proc is used directly)
  - clean up droproot patch, drop the rights earlier; require user-writable
  pidfile directory
  - set up the pidfile directory at compile time.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - update to 0.62pl1.  Bye bye patches!
  - Require: initscripts (should really be with a version providing IPv6)
  - clean up the init script, make condrestart work properly
  - Use a static /etc/rc.d/init.d; init.d/radvd required it anyway.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - License unfortunately is BSD *with* advertising clause, so to be pedantic,
    change License: to 'BSD-style'.


author: Bernhard Rosenkraenzer <bero@redhat.com> 0.7.1-1
changelog:
  - 0.7.1 (bugfix release, #61023), fixes:
    - Check that forwarding is enabled when starting radvd
      (helps avoid odd problems) 
    - Check configuration file permissions (note: in setuid operation, must not
      be writable by the user.group) 
    - Cleanups and enhancements for radvdump
    - Ensure NULL-termination with strncpy even with overlong strings
      (non-criticals, but better safe than sorry) 
    - Update config.{guess,sub} to cope with some newer architectures 
    - Minor fixes and cleanups


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - remove '-g %{RADVD_GID}' when creating the user, which may be problematic
    if the user didn't exist before.


author: Jiri Skala <jskala@redhat.com> - 1.5-1
changelog:
  - Resolves: #555348 - radvd eats 100% CPU after interface comes back
  - Resolves: #555352 - radvd[11524]: sendmsg: Bad file descriptor
  - updated to latest upstream version - fixes bug #555348


author: Jiri Skala <jskala@redhat.com> - 1.5-5
changelog:
  - Resolves: #594399 - wrong users and groups creation in spec file
  - Resolves: #594329 - RPMdiff run failed


author: Fernando Lopez-Lezcano <nando@ccrma.stanford.edu>
changelog:
  - built for planet ccrma
  - one file conflicts with rdfdump in the nasm-rdoff package, so rename
    the binary to rdf-rdfdump for now. Maybe we should make this a
    "Conflict:" with nasm-rdoff and leave the file as is...


author: Anthony Green <green@redhat.com> 1.4.8-5
changelog:
  - Add raptor-1.4.8-config.patch from Michael Schwendt.
  - Remove some Requires from the devel package.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.4.16-1
changelog:
  - Update to 1.4.16 (for Soprano 2, also lots of bugfixes).
  - Specify LGPL version in License tag.
  - Update URLs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.18-5.1
changelog:
  - Fixed XML entity expansion that could lead to information disclosure (CVE-2012-0037)
    Resolves: rhbz#804496


author: Prarit Bhargava <prarit@redhat.com> 1.0.0
changelog:
  - initial import of aer-inject
  - 0.1 from http://www.kernel.org/pub/linux/utils/pci/aer-inject/
  - http://git.kernel.org/?p=utils/pci/aer-inject/aer-inject.git;a=summary
  - initial import of mce-inject
  - 22b6fd9d6c53de44e612f31b78b964c3a10a24a1 from
    http://git.kernel.org/?p=utils/cpu/mce/mce-inject.git;a=summary


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.12-2
  - fixed x86_64 rpath issue with an ugly hack
  - removed OPTIMIZE from make invocation
  - added smp flags
  - added make check
  - updated license


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.9.15-1
changelog:
  - Update to 0.9.15 (for redland 1.0.7, also lots of bugfixes)
  - Update minimum raptor version
  - BR perl(XML::DOM) (needed by the testsuite)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 5.7-36
changelog:
  - fixes based on review
  - Add dependency on diffutils.
  - Apply build tweaks patch from Debian (incl installing rcsfreeze).
  - BuildRequire autoconf instead of automake.
  - Actually configure instead of shipping a pregenerated conf.h (#226356).
  - Ship docs as PDF rather than troff source.
  - Run test suite during build.
  - Include COPYING.
  - Resolves: #543948


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Make a 1.2 release, update to it. In the future, please commit changes
  to CVS and make a new release, instead of adding patches to the rpm
  package.


author: Warren Togami <wtogami@redhat.com> 1.3.0-3
changelog:
  - upgrade to 1.3.0
  - improve summary
  - BuildPrereq -> BuildRequires, the former is deprecated
  - Remove doc files that no longer exist
  - Add missing XFree86-devel
  - There was no -1 or -2.  Nothing to see here.  Move along.


author: David Zeuthen <davidz@redhat.com> 1.4.0-1
changelog:
  - New upstream version; drop some patches that is now upstream
  - Require xorg-x11-devel instead of XFree86-devel for building


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.0-2
changelog:
  - Use the %configure macro (rdesktop now has a real configure file).
  - Patch rdesktop-optflags.patch no longer needed.
  - Add several missing doc files.


author: Adam Jackson <ajax@redhat.com> 1.6.0-10
changelog:
  - Don't Require: libao-devel at runtime (#820008)
  - rdesktop-1.6.0-ts2008-licence.patch: Fix licence handling against some
    versions of Terminal Services. (#831095)
  - rdesktop-1.6.0-cursor.patch: Fix cursor rendering for Windows Server 2008
    (#782494)
  - rdesktop-1.6.0-smart-card-lp64.patch: Fix smartcard support on 64-bit
    hosts (#772020, #680917)
  - rdesktop-1.6.0-scard-crash.patch: Fix a crash in smartcard support (#680926)


author: Soren Sandmann <ssp@redhat.com> 1.7.1-1
changelog:
  - Rebase to 1.7.1 (#852890, #902912, #914279)
  - Add patches from 
      http://sourceforge.net/p/rdesktop/patches/214/
    to rework redirect PDU handling (#701246)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added my 4.3BSD port of the v1 protocol rdist code and provide a oldrdist
    binary (#55761 and several others).
  - Fixed a small manpage problem (#55489)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Finished LFS support for rdist on 32bit archs (#79580).
  - Lots of code cleanup.
  - Switched from mktemp to mkstemp usage.


author: Phil Knirsch <pknirsch@redhat.com> 6.1.5-31
changelog:
  - Fixed wrong SvR4 system detection on Linux (#110426).
  - Fixed unitialized use of struct (#111189).
  - Make rsh work correctly with password authentification and ssh (#111778).


author: Doug Ledford <dledford@redhat.com> - 1.0-2
changelog:
  - Attempt to use --subsystem-match=infiniband in the rdma init script use
    of udevtrigger so we don't trigger the whole system
  - Add a requirement to stop opensm to the init script


author: Doug Ledford <dledford@redhat.com> - 1.0-6
changelog:
  - Tweak init script for LSB compliance
  - Tweak ifup-ib script to work properly with bonded slaves that need their
    MTU set
  - Tweak ifup-ib script to properly change connected mode either on or off
    instead of only setting it on but not turning it off if the setting changes


author: Doug Ledford <dledford@redhat.com> - 1.0-7
changelog:
  - Require a version of udev that's known to contain udevadm and support
    usage of udevadm trigger and udevadm settle
  - Update rdma.init to use the proper udev commands
  - Resolves: bz586594


author: Doug Ledford <dledford@redhat.com> - 1.0-8
changelog:
  - Update udev rules syntax to eliminate warnings emitted via syslog (bz603264)
  - Add new init script for starting/stopping nfs over rdma support
  - Require that the nfs-rdma service be down before stopping the rdma
    service (bz613437)
  - Change ifup-ib to properly account for the fact that the [ test program
    does not process tests in order and fail immediately on first failing
    test, resulting in error messages due to unquoted environment variables
    that don't need quoting in the second test due to the fact that the
    first test guarantees they exist.  Or that's how things should be, but
    they aren't, so rewrite tests to accommodate this fact. (bz612284)
  - Use ip instead of ifconfig as ifconfig knows it doesn't handle infinband
    hardware addresses properly (even though we don't care, we aren't using
    it for that) and prints out copious warning messages (bz613086)
  - Related: bz612284, bz613086


author: Doug Ledford <dledford@redhat.com> - 1.0-9
changelog:
  - Minor tweak to rdma init script to do the udevadm trigger command in two
    seperate calls since we can no longer match on the same item twice and
    have the command succeed for both match types.
  - Resolves: bz612234


author: Doug Ledford <dledford@redhat.com> - 1.0-10
changelog:
  - Fix ifup-ib script to be compatible with change to core function
    expand_config
  - Fix renaming of ib? devices to the name given in the ifcfg-* file
  - Fix the fact that once you down the rdma stack and reload it, the
    HWADDR line in ifcfg-* files no longer matches the address of the
    ports.  We now match only on the part of the HWADDR that doesn't
    change.
  - Fix rdma init script to know about cxgb4 adapters
  - Fix rdma init script to find all InfiniBand interfaces whether they
    use an ib? name or a custom name
  - Fix rdma init script to down all InfiniBand interfaces on rdma shutdown
    regardless of interface name
  - Fix rdma init script to find all ifcfg-* files that apply to ipoib
    interfaces without requiring that they be named ib?
  - Fix rdma init script to know to unload ib_qib module on stop
  - Add an ifdown-ib file that fixes the HWADDR not matching on the second
    or later times you down the rdma subsystem
  - Related: bz725016
  - Resolves: bz678947, bz721101


author: Doug Ledford <dledford@redhat.com> - 1.0-13
changelog:
  - Default to not loading the RDS stack by default as it has some known
    issues at the moment.
  - Resolves: bz747378


author: Doug Ledford <dledford@redhat.com> - 1.0-14
changelog:
  - Clear the umask before loading kernel modules otherwise the kernel
    modules inherit our umask and don't create the /dev/infiniband
    files with the proper permissions.
  - Resolves: bz748087


author: Doug Ledford <dledford@redhat.com> - 1.0-15
changelog:
  - No longer provide a rules file to create infinband devices, the kernel
    now creates them in the proper place all by itself
  - Change the LSB headers in the init script, they were wrong
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-16
changelog:
  - If we are being installed on a machine that has ib_ipoib module loaded,
    then this is likely because it is a machine being installed over IPoIB,
    so enable our init script
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-17
changelog:
  - Don't do lsmod in the %post script looking for ib_ipoib, anaconda
    loads it unconditionally.  Instead, anaconda has been modified to
    enable our init script if it installed over an IPoIB interface, so
    simply remove that portion of our %post script.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-20
changelog:
  - Name the cards slightly differently (upstream request)
  - Check for the ibacm program before trying to down the stack
  - Resolves: bz808600


author: Doug Ledford <dledford@redhat.com> - 3.3-1
changelog:
  - Fix an issue in the rdma script that caused rds_rdma to load
    when it shouldn't
  - Resolves: bz815622


author: Doug Ledford <dledford@redhat.com> - 3.3-3
changelog:
  - The fix to bug 808600 was noisy and resulted in bug 815999,
    silence the script
  - Resolves: bz815999


author: Doug Ledford <dledford@redhat.com> - 3.3-4
changelog:
  - Fix an issue in the ifup-ib script
  - Fix a problem with the setting of infiniband dev perms
  - Resolves: bz834428


author: Doug Ledford <dledford@redhat.com> - 3.10-1
changelog:
  - Bump version to match final kernel submission
  - Add support for P_Key interfaces to ifup-ib and ifdown-ib


author: Doug Ledford <dledford@redhat.com> - 3.10-2
changelog:
  - Somehow during editing I accidentally deleted a single character from
    the post scriptlet.  rpmdiff caught it, now I'm fixing it.
  - Resolves: bz990288


author: Doug Ledford <dledford@redhat.com> - 6.6_3.15-1
changelog:
  - Change numbering scheme to be clearer: first number is redhat
    release this package is for (aka rhel6.6), second number is the
    upstream kernel that our kernel code comes from, aka 3.15.
  - Minor fix to init script to support cxgb4 and ocrdma and mlx5
    drivers properly
  - Add a dracut module to make sure all the needed InfiniBand
    kernel modules and support files make it on to the initrd
  - Resolves: 1064308


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-2
changelog:
  - Fix ipoib MTU issue
  - Fix shutdown ordering of NFSoRDMA code
  - Absorb mlx4/cxgb3/cxgb4 setup/module init code into our package
  - Resolves: bz1186498, bz1163527


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-4
changelog:
  - Fix modprobe file so command line opts passed to modprobe mlx4_core will
    work again
  - Resolves: bz1215857


author: Doug Ledford <dledford@redhat.com> - 2.0.4-2
changelog:
  - Add a modprobe conf file to automatically load rds_tcp and rds_rdma when
    we load the base rds module
  - Resolves: bz643113


author: Doug Ledford <dledford@redhat.com> - 2.0.6-1
changelog:
  - Update to latest upstream version
  - Initial Fedora import
  - Multiple fixes for package review
  - Related: bz739138


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new readahead.c from Ziga Mahkovec <ziga.mahkovec@klika.si>
    - optimizes read access for more throughput
  - regenerate file lists (#128444)
  - fix lack of newlines (#146744)
  - fix lists so that they are architecture-neutral
  - move check for > 384MB into the init scripts, not the %post


author: Dave Jones <davej@redhat.com>
changelog:
  - Integrated changes from Ville Skytta (#164872)
    - Fix inverted logic in readahead_early also.
    - readahead_early looks useful in more runlevels than just 5.
    - Sync versioned gcc, firefox and openoffice.org dirs with FC4 updates.


author: Karel Zak <kzak@redhat.com> 1:1.3-4
changelog:
  - fix #207631 - clean up package build system and use tarball instead
                  separated source files


author: Karel Zak <kzak@redhat.com> 1:1.4.2-1
changelog:
  - upgrade to 1.4.2 (includes bug fixes only)
     - auparse requires as a record separator (#253226)
     - fix e-mail setting in Makevars  (#308271)
     - remove debug message (#237302)
     - improve init scripts  (#247044, #243685)
     - add pl.po


author: Karel Zak <kzak@redhat.com> 1:1.4.2-3
changelog:
  - update default lists
  - fix #327041 - readahead --sort generates file with "(null)"
  - fix #326891 - readahead-collector doesn't collect binaries


author: Harald Hoyer <harald@redhat.com> 1.4.5-3
changelog:
  - marked /etc/sysconfig/readahead as a config file
  - removed noreplace from /etc/readahead.conf
  - fixed /etc/readahead.conf for /sbin/readahead


author: Harald Hoyer <harald@redhat.com> 1.5.1-1
changelog:
  - readahead-1.5.1
  - add syslog() to collector
  - translation update
  - let upstart set console owner for collector


author: Harald Hoyer <harald@redhat.com> 1.5.3-1
changelog:
  - fix readhead for new libaudit (bug #523400)
  - don't leak file descriptors (bug #525893)
  - also collect openat() calls
  - ignore files > 10MB


author: Harald Hoyer <harald@redhat.com> 1.5.5-1
changelog:
  - version 1.5.5
  - exit readahead-collector correctly, if audit is not enabled
  - make delay of services configurable
  - make minimum memory requirement configurable
  - log to /dev/kmsg in upstart scripts
  - upstart scripts updated for upstart 0.6 (#546077, #575114)
  - Resolves: rhbz#575119, rhbz#561486


author: Harald Hoyer <harald@redhat.com> 1.5.6-1
changelog:
  - version 1.5.6
  - various bugfixes by Raphael Geissert 
    (#527498, #527505, #527508, #527509, #528781, #528785)
  - Related: rhbz#543948


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Petr Hracek <phracek@redhat.com> - 1.17.2-2
changelog:
  - Update description
  - Remove other distros from SPEC
  - Changed license
  - Change Source0 to Sourceforge
  - Resolves: #981637


author: Havoc Pennington <hp@redhat.com>
changelog:
  - add firstboot images to makefile/specfile
  - add /usr/share/pixmaps stuff
  - add splash screen images
  - add COPYING


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.3-1
changelog:
  - Add attributions to the background graphics metadata
  - Add a 4:3 asspect ratio version of the default background graphic


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.7-1
changelog:
  - Add background xml file for the new backgrounds
  - Add po directory for translating the background xml


author: David Zeuthen <davidz@redhat.com> - 4.9.13-1
changelog:
  - Make firstboot/splash-small.png completely transparent
  - Fix up date for last commit
  - Resolves: #216501


author: David Zeuthen <davidz@redhat.com> - 4.9.14-1
changelog:
  - Don't include LILO splash. Resolves: #216748
  - New syslinux-splash from Diana Fong. Resolves: #217493


author: Ray Strode <rstrode@redhat.com> 60.0.3-1
changelog:
  Resolves: #565886
  - Put backgrounds here since they're "trade dress"
  - Rename firstboot theme from leonidas to RHEL (with compat link)


author: Ray Strode <rstrode@redhat.com> 60.0.4-1
changelog:
  Resolves: #565886
  - One more update to the KDE artwork
  - Revert firstboot theme rename until later since compat link
    is causing problems.


author: Ray Strode <rstrode@redhat.com> 60.0.7-1
changelog:
  - Rename firstboot theme to RHEL
    Resolves: #566173
  - Add new plymouth artwork
    Related: #558608
  - Update backgrounds
  - Update anaconda
  - Drop gnome-splash
  - Drop empty screensaver dir
    Resolves: #576912
  - Drop grub splash at request of artists


author: Ray Strode <rstrode@redhat.com> 60.0.8-1
changelog:
  - Add large logo for compiz easter egg
    Resolves: #582411
  - Drop Bluecurve
    Related: #559765
  - Install logo icons in System theme
    Related: #566370


author: Leon Ho <llch@redhat.com> 1.3-9
changelog:
  - Sync what we have changed on the branches
    Wed Nov 24 2004 Harald Hoyer <harald@redhat.com>
    - added post section to recreate the softlink in emul mode (bug 140739)
    Mon Nov 15 2004 Phil Knirsch <pknirsch@redhat.com>
    Tiny correction of bug in new triggers


author: Leon Ho <llch@redhat.com> 3.0-6.EL
changelog:
  - Made the /etc/lsb-release useful (RH#154605)
  - Added redhat_lsb_trigger to fix RH#160585 (Jakub Jelinek)
  - Fixed AMD64 base libraries requirement parsing (RH#154605)


author: Leon Ho <llch@redhat.com> 3.0-7.EL
changelog:
  - Fixed multilib problem on lsb_release not to read /etc/lsb-release and solely
    depends on /etc/lsb-release.d/ (Advised by LSB committee)
  - Removed /etc/lsb-release (Advised by LSB committee)


author: Lawrence Lim <llim@redhat.com> - 3.0-10
changelog:
  - Rewrite most part of the mkredhat-lsb to obtain information directly via specdb 
    rather than sniffing through sgml
  - remove redundent script and bump up tarball version


author: Lawrence Lim <llim@redhat.com> - 3.1-10.1
changelog:
  - generate spec file on RHEL5-Alpha system
  - fix vsw4 test suite setup by creating symlink for X11 SecurityPolicy and XFontPath


author: Lawrence Lim <llim@redhat.com> - 3.1-10.2
changelog:
  - for some strange reason, ld-lsb-x86-64.so need to be ld-lsb-x86-64.so.3 (LSB3.0) rather than ld-lsb-x86-64.so.3.1 (LSB3.1)


author: Lawrence Lim <llim@redhat.com> - 3.1-12.3.EL
changelog:
  - Resolves: #217566 - rewrite /lib/lsb/init-functions file needs to define the commands as true shell functions rather than aliases.
  - Resolves: #233530 - LSB pidofproc misspelled as pidofprof.
  - Resolves: #240916 - "log_warning_message" replaced with "log_warning_msg" per the LSB 3.1 spec


author: Lawrence Lim <llim@redhat.com> - 3.1-15.f8
changelog:
  - Resolved: #239842 - /lib/lsb/init-functions shall use aliases but not functions
  - forward port the patch from 3.1-12.3.EL which fix #217566, #233530, #240916


author: Lawrence Lim <llim@redhat.com> - 3.1-16
changelog:
  - update spec file in accordance to feedback provided through merge review - merge-review.patch - #226363


author: Hao Liu <hliu@redhat.com> - 3.1-22
changelog:
  - Remove 2 requires which provided by redhat-lsb
  - Add comments explaining why hard-coded path is kept
  - Resolve some hard-coded path problems
  - Add comments explaining why importing '-static' option while compiling redhat_lsb_trigger
  - Replace /usr/lib/lsb with /usr/lib/lsb
  - Replace /lib/* with /lib/*so*
  - Replace /lib/lsb with /lib/lsb*


author: Hao Liu <hliu@redhat.com> 3.2-1
changelog:
  - Port forward to LSB 3.2
  - Remove symlink for mailx if user is upgrading from the redhat-lsb of older version 
  - Since F10 put mailx under /usr/bin, change the corresponding requires


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Hao Liu <hliu@redhat.com> - 3.1-22
changelog:
  - Remove 2 requires which provided by redhat-lsb
  - Add comments explaining why hard-coded path is kept
  - Resolve some hard-coded path problems
  - Add comments explaining why importing '-static' option while compiling redhat_lsb_trigger
  - Replace /usr/lib64/lsb with /usr/lib/lsb
  - Replace /lib64/* with /lib64/*so*
  - Replace /lib/lsb with /lib/lsb*


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 0.23 with new translations, KDE MIME fixes, openoffice Exec= fixes
  - don't munge en_US text, broke docs. Back to just "Web Browser"


author: Ray Strode <rstrode@redhat.com> 1.8-1
changelog:
  - release 1.8, remove AC_PROG_LIBTOOL from configure.in
  - release 1.7, remove gnome-control-center.desktop


author: <dcbw@redhat.com> - 3.7-2
changelog:
  - Gratuitous version bump from upstream
  - #rh74651# no mimetype entries for microsoft offic
  - #rh136731# wordperfect files (.wpd) should be associated with openoffice


author: Dan Williams <dcbw@redhat.com> 3.7-5
changelog:
  - #rh137520# Add "application/x-ole-storage" to Calc, Impress, and Writer
  	desktop files, so Evolution can associate these with OOo


author: Than Ngo <than@redhat.com> 3.7.1-7
changelog:
  - add mssing kwrite/kate/kedit, kcontrol center, System setting
    in menu #147121, #12218, #1221811, #143937
  - get rid of capplets from preferences.menu, #149233
  - fix icon entry in desktop file #143336


author: Ray Strode <rstrode@redhat.com> 3.8.0-1
changelog:
  - don't include kde legacy stuff anymore, since
    kde uses it's own applications menu file now and it 
    breaks gnome (bug 153125)


author: David Malcolm <dmalcolm@redhat.com> - 5.0.4-1
changelog:
  - Split the evolution desktop file into four separate ones: one per component.
    Force people to update evolution, to avoid it using a stale symlink. 
    (#170799).


author: Matthew Barnes <mbarnes@redhat.com> - 8.9.10-3
changelog:
  - Add X-GNOME-Bugzilla-Version to Evolution desktop files (#243101).
  - Bump evolution-data-server version in desktop files to 1.12.


author: Jens Petersen <petersen@redhat.com> 7.3.92-4
changelog:
  - fix %configure targeting for autoconf-2.5x (#58468)
  - include ~/.rpmmacros in macrofiles file path again


author: Jens Petersen <petersen@redhat.com> - 8.0.22-2
changelog:
  - add config.guess and config.sub (2003-02-22) with s390 patch on config.sub
  - make %configure use them


author: Jens Petersen <petersen@redhat.com> - 8.0.25-1
changelog:
  - update config.{guess,sub} to 2003-06-17
  - define VENDOR to be redhat only when /etc/redhat-release present
    [suggested by jbj]
  - put VENDOR in vendor field in our config.guess file for
    ia64, ppc, ppc64, s390, s390x, x86_64 and elf32-i386 Linux
  - drop the --host, --build, --target and --program-prefix configure options
    from %configure, since this causes far too many problems


author: Jens Petersen <petersen@redhat.com> - 8.0.26-1
changelog:
  - preserve the vendor field when VENDOR not set
  - put VENDOR in the final i386-libc line, not the tentative one


author: Elliot Lee <sopwith@redhat.com> 8.0.33-1
changelog:
  - Change -D to -Wp,-D to make java happy
  - Add -D_FORTIFY_SOURCE=2 to global cflags (as per Jakub & Arjan's request)


author: Jon Masters <jcm@redhat.com> 8.0.45-14
changelog:
  - Rebased all previous patches (since java fix introduced offset).
  - Added Fedora per-release macros to platforms section of macros.
    Further debate may see these move elsewhere in the ordering.


author: Jon Masters <jcm@redhat.com> 8.0.45-15
changelog:
  - Add modalias tags to kernel module packages (kmods) for tracking.
  - Further information is available at http://www.kerneldrivers.org/.


author: Jeremy Katz <katzj@redhat.com> - 8.1.0-1
changelog:
  - add modalias tags to kmod packages and other kmod changes (jcm)
  - recompress jars to avoid multilib conflicts (bkonrath)


author: Jeremy Katz <katzj@redhat.com> - 9.0.0-1
changelog:
  - use stock find-lang.sh (#213041)
  - arm fixes (Lennert Buytenhek, #243523)
  - allow jar repacking to be disabled (#219731)
  - fix running dist.sh --fc (#223651)
  - hardlink identical .pyc and .pyo files to save space (Ville Skyttä)
  - fix TMPDIR usage (Matthew Miller, #235614)


author: Jesse Keating <jkeating@redhat.com> - 9.0.1-1
changelog:
  - Remove dist defines, fedora-release does that now
  - Enable post-build buildroot checking by default


author: Jon Masters <jcm@redhat.com> - 9.0.2-1
changelog:
  - Remove smp dependencies
  - Update config.guess|sub files
  - Don't call find-requires.ksyms for kmod packages (kernel kABI scripts).


author: Jon Masters <jcm@redhat.com> - 9.0.3-1
changelog:
  - Ensure Java Jar files have readable files within.
  - Remove overwritten config.guess|sub files (testing).
  - Fix Fortran flags for building using _fmoddir.
  - Pull in objdump fix to upstream find-requires.


author: Dennis Gilmore <dennis@ausil.us> - 9.0.3-5
changelog:
  - apply fedora 11 default buildflags
  - set 32 bit intel build arch to i586 on compatiable hardware
  - set 32 bit sparc build arch to sparcv9 on compatiable hardware


author: Adam Jackson <ajax@redhat.com> 9.0.3-14
changelog:
  - redhat-rpm-config-9.0.3-jars-with-spaces.patch: Handle repacking jars
    whose filenames contain spaces. (#461854)


author: Adam Jackson <ajax@redhat.com> 9.0.3-15
changelog:
  - redhat-rpm-config-9.0.4-brpssa-speedup.patch: When looking for static
    archives, only run file(1) on files named *.a. (#517101)


author: Paul Howarth <paul@city-fan.org> 9.0.3-17
changelog:
  - redhat-rpm-config-9.0.3-filtering-macros.patch: Rediff so we don't ship a .orig file
  - add (empty) %build section
  - fix unescaped macros in changelog


author: Jon Masters <jcm@redhat.com> - 9.0.3-24
changelog:
  - Update the kmodtool and the percent kernel_module_package macro in
    accordance with the upstream packaging standard.
  - Resolves: #618518.


author: Jon Masters <jcm@redhat.com> - 9.0.3-25
changelog:
  - Update the kmodtool and correct kmod removal to delete package-specific files
  - Resolves: #622618.


author: Florian Festi <ffesti@redhat.com> - 9.0.3-40
changelog:
  - Fix verrel in kmodtool when used with variants
  - Resolves: #795577
  - Add %_smp_ncpus_max macro to allow adjusting the number of processors used
  - Resolves: #669638
  - Fix brp-java-repack-jars for jar files that contain non-standard permissions
  - Resolves: #822073


author: Florian Festi <ffesti@redhat.com> - 9.0.3-43
changelog:
  - Adjust location of kabi-whitelists
  - Resolves: #842761
  - Be stricter with she bang lines in find-requires
  - Resolves: #1179521


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-45
changelog:
  - Fix latest_kernel macro (#976462)
  - Permit using different python version for brp-python-bytecompile (#1252628)


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-46
changelog:
  - Remove aarch64 part from regex for the latest kernel. aarch64 is not
    supported in rhel-6 (#976462)


author: Dave Beckett <dave.beckett@bristol.ac.uk>
changelog:
  - require raptor 1.1.0
  - require libxml 2.4.0 or newer
  - added pkgconfig redland.pc
  - split redland/devel package shared libs correctly


author: Dave Beckett <dave.beckett@bristol.ac.uk>
changelog:
  - require raptor 1.2.0
  - update for removal of python distutils
  - require python 2.2.0+
  - require perl 5.8.0+
  - build and require mysql
  - do not build and require threestore


author: Dave Beckett <dave.beckett@bristol.ac.uk>
changelog:
  - Update Source:
  - Do not require python-devel at build time
  - Add sqlite-devel build requirement.
  - Use configure and makeinstall


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 1.0.4-2
  - fixed x86_64 rpath issue with an ugly hack
  - removed OPTIMIZE from make invocation
  - added smp flags
  - added make check
  - updated license


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.0.5-1
changelog:
  - update to 1.0.5 (1.0.6 needs newer raptor and rasqal than available)
  - update minimum raptor version


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.0.5-2
changelog:
  - add missing Requires: pkgconfig to the -devel package
  - get rid of pkgconfig dependency bloat (#248106)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.0.6-1
changelog:
  - update to 1.0.6 (for Soprano 2, also some bugfixes)
  - update minimum raptor and rasqal versions
  - drop sed hacks for dependency bloat (#248106), fixed upstream


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-2mdk
changelog:
  - merged with Henri Gomez <hgomez@slib.fr> specs:
  - changed name to regexp
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added Jikes support
  - changed jar name to regexp.jar
  - corrected doc


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.2-4mdk
changelog:
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - used new source packaging policy


author: Henri Gomez <hgomez@slib.fr> 1.2-9jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible
    with distro using bash 1.1x
  - use official tarball


author: Vivek Lakshmanan <vivekl at redhat.com> 0:1.4-3jpp.1.fc7
changelog:
  - Resync with JPP
  - Use the upstream tar ball as JPP does since they clean it off jars anyway
  - Use JPackage exception compliant naming scheme
  - Remove section definition
  - Install unversioned symlink
  - Add missing ghost for unversioned link
  - Add requires on java


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use resource-agents macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.7-2
changelog:
  - Drop support for drbd and smb (PM-drop-support-for-drbd-and-smb-resource-agents.patch)
  - Explicitly list python as BuildRequires


author: Marek Grac <mgrac@redhat.com> - 3.0.7-4
changelog:
  - Checksum error occurs on HA-LVM
  - status on clusterfs "gfs" returned 1 (generic error)
  - Resolves rhbz#563555 rhbz#558664


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - new upstream release
    Resolves: rhbz#569959
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * refresh patches with official SHA1 git commits from RHEL6
      upstream branch:
      - drop_support_for_drbd_and_smb.patch
    * Addresses the follwing issues:
      from 3.0.12 release:
    Resolves: rhbz#582754, rhbz#582753, rhbz#585217, rhbz#583789
    * Rebase:
    Resolves: rhbz#582353
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590997
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#584800
  - New pacemaker agents upstream release
    * Patched build process to correctly generate ldirectord man page
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-2
changelog:
  - Drop Requires on xfsprogs since package moved to another channel
    Resolves: rhbz#593433
  - Fix HALVM: lvm agent incorrectly reports vg is in volume_list
    (halvm_lvm_agent_incorrectly_reports_vg_in_volume_list.patch)
    Resolves: rhvz#593108


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-4
changelog:
  - Add missing man pages
    (Add Source2: ocf-tester.8 and Source3: sfex_init.8)
    Resolves: rhbz#594332


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix incorrect default for VM.sh agent
    (resolve_incorrect_default_for_vm_agent.patch)
    Resolves: rhbz#599643


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-9
changelog:
  - More SAPDatabase updates to fix SAP workloads
  - Allow rgmanager SAP resource agent to manage SAP Webdispatcher & TREX
  - Resolves: rhbz#726500 rhbz#746996


author: Chris Feist <cfeist@redhat.com> - 3.9.2-10
changelog:
  - Fix to prevent /dev/shm being filled up by ocf_log debug messages
  - NFS client resource are now recovered properly when they are missing in
    /var/lib/nfs/etab
  - Resolves: rhbz#797922 rhbz#749713


author: Chris Feist <cfeist@redhat.com> - 3.9.2-11
changelog:
  - In LVM HA agent, remove missing PVs before attempting to remove the tag
  - Rgmanager now properly detects when clvmd is not running when using HA LVM
  - vm.sh now supports a 'tunnelled' option
  - Resource agent script now have common directory set properly
  - Fixed apache resource agent configuration with IPv6
  - fs-lib.sh now will now properly work with all return codes of mount
  - netfs now allows you to have the same NFS export mounted in different locations
  - The timeout in rhev-check has been increased to 90 seconds
  - Resolves: rhbz#772773 rhbz#729481 rhbz#712174 rhbz#784357 rhbz#742859 rhbz#728086 rhbz#799998 rhbz#727546


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12
changelog:
  - Fix for LVM HA agent for service relocation after leg failure (we now
    properly remove tag).
  - Resolves: rhbz#772773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-25
changelog:
  - fast filesystem mounts
  - properly handle NFS v4 mounts
  - fix uppercase ipv6 addresses
  - named transfer source options
  - fix restart postgres
  - fix honor self fence option
  - fix mount log level
  - fix wrong selinux context for nfs directory

    Resolves: rhbz#919231
    Resolves: rhbz#851188
    Resolves: rhbz#895075
    Resolves: rhbz#711586
    Resolves: rhbz#871659
    Resolves: rhbz#908457
    Resolves: rhbz#948730
    Resolves: rhbz#959520


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-41
changelog:
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#993329
    Resolves: rhbz#1023340
    Resolves: rhbz#1028421
    Resolves: rhbz#1022793


author: David Vossel <dvossel@redhat.com> - 3.9.2-42
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051115


author: David Vossel <dvossel@redhat.com> - 3.9.2-44
changelog:
  - New 'httpd' option for rgmanager apache.sh agent that allows
    custom httpd binary path to be set.
  - Fixes issue with pending sm-notify processes preventing
    nfs-server instances from stopping.
  - Fixes issue reported by coverity. 
  - Fixes syntax error in some log error messages in the LVM agent
  - Optimize fs-lib based agent's monitor operation
  - Allow monitoring of kvm based virtual machines using the
    VirtualDomain agent without requiring libvirtd.
  - Allows named to run as user other than root.

    Resolves: rhbz#952132
    Resolves: rhbz#974239
    Resolves: rhbz#999537
    Resolves: rhbz#1022277
    Resolves: rhbz#1023099
    Resolves: rhbz#1054327
    Resolves: rhbz#1067023


author: David Vossel <dvossel@redhat.com> - 3.9.2-46
changelog:
  - Updates the ocf:heartbeat:tomcat agent so it can be used
    in rhel6 with Pacemaker.

    Resolves: rhbz#1022792


author: David Vossel <dvossel@redhat.com> - 3.9.2-47
changelog:
  - Allow vm.sh to monitor kvm domains without requiring libvirtd
  - Adds 'no_kill' option to vm.sh to prevent force killing vm
    during stop operation after timeout expires.

    Resolves: rhbz#853698
    Resolves: rhbz#1079039


author: David Vossel <dvossel@redhat.com> - 3.9.2-48
changelog:
  - Configurable startup_wait timeout for rgmanager's 
    postgres-8.sh resource-agent
  - Allow non rhel builds to included unsupported agents.
  - Add bind-mount.sh rgmanager resource-agent.
  - Add 'statdport' option to nfsserver resource.

    Resolves: rhbz#1035380
    Resolves: rhbz#1069621
    Resolves: rhbz#1094789
    Resolves: rhbz#918315


author: David Vossel <dvossel@redhat.com> - 3.9.5-1
changelog:
  - Package cleanup. This change is a no-op. The heartbeat
    agents were updated to the 3.9.5 upstream release in this
    package months ago. The release number is now being
    incremented to reflect this.

    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: David Vossel <dvossel@redhat.com> - 3.9.5-14
changelog:
  - For lv_by_vg, only strip tag on stop if we are owner.
  - NFS custom port config options
  - Fixes typo preventing passing "noload" or "data=..." mount options
  - Fixes undefined variable warning in fs-lib
  - Fixes mysql not stopped if data fs unavailable
  - Fixes postgres agent not detected correct user group
  - Handle nfs path ending in '/' correctly

    Resolves: rhbz#1161727
    Resolves: rhbz#1096376
    Resolves: rhbz#1096990
    Resolves: rhbz#1134960
    Resolves: rhbz#1150702
    Resolves: rhbz#1159018
    Resolves: rhbz#1173128


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes unreliable detection of nic device in IPaddr2
  - Fix fs-lib.sh regression in is_alive write test failure detection
  - Fix properly handle mysql when alternate user is specified.

    Resolves: rhbz#1181187
    Resolves: rhbz#1183735
    Resolves: rhbz#1183148


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Fixes rgmanager lvm agent's ability to exclusively activate
    volume groups on nodes with aliases

    Resolves: rhbz#1085109


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-26
changelog:
  - Match exact Oracle SID to avoid waiting for 90 seconds and killing other databases if their names include the name of the database you're trying to stop
  - Use DAD to check for address collision instead of ping for IPv6 in rgmanager
  - MySQL wait up to "startup_wait" seconds for mysqld to create PID
  - Handle failure state during stop in orainstance.sh
  - Add Oracle resource agents for Pacemaker

    Resolves: rhbz#1200639
    Resolves: rhbz#1191247
    Resolves: rhbz#1207285
    Resolves: rhbz#1234777
    Resolves: rhbz#1070479


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-27
changelog:
  - SAP HANA add Multiple Components One System (MCOS) support
  - sap_redhat_cluster_connector add support for "-" in hostnames

    Resolves: rhbz#1200903
    Resolves: rhbz#1269897


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-28
changelog:
  - Use IPv6 DAD for collision detection in IPaddr2
  - Add RAID segment type support for HA LVM
  - Fix Tomcat SELinux failed in enforcing mode
  - Add migrate_options parameter to VirtualDomain
  - Remove not-working tmpfs "support" from fs.sh
  - Fix tmpfile leak in mysql resource agent

    Resolves: rhbz#1276698
    Resolves: rhbz#1266173
    Resolves: rhbz#1280319
    Resolves: rhbz#1286650
    Resolves: rhbz#1024505
    Resolves: rhbz#1292054


author: Jan Pokorny <jpokorny@redhat.com> - 3.9.5-31
changelog:
  - Fix up for wrongly generated RNG schema for cluster configuration
    wrt. "action" tag

    Related: rhbz#1272587


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-32
changelog:
  - Add portblock resource agent for Pacemaker
  - Add Oracle Data Guard resource agent for rgmanager

    Resolves: rhbz#1302545
    Resolves: rhbz#1086838


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New upstream release
  - spec file cleanup:
    * use global instead of define
    * use new Source0 url
    * use rgmanager macro more aggressively


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - New upstream release
    Resolves: rhbz#569956, rhbz#569953
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-2
changelog:
  - Fix 2+ simultaneous relocation crash
    (fix_2_or_more_simultaneous_relocation_crash.patch)
    Resolves: rhbz#577856
  - Fix meory leaks during relocation
    (fix_memory_leaks_during_relocation.patch)
    (fix_memory_leak_during_reconfig.patch)
    Resolves: rhbz#578249


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues from 3.0.12 release:
    Resolves: rhbz#588890, rhbz#588925, rhbz#589131, rhbz#588010
    * Rebase:
    Resolves: rhbz#582350
  - Stop build on ppc and ppc64.
    Resolves: rhbz#591000


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Pass timeouts to resource agents
    (pass_timeouts_to_resource_agents.patch)
    Resolves: rhbz#606480


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - Fix rgmanager init script to be more LSB compliant
    (rgmanager_init_lsb_compliant.patch)
    Resolves: rhbz#612110


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Make clulog filter correctly based on cluster.conf
    (make_clulog_filter_correctly.patch)
    Resolves: rhbz#609866


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Add failover domain documentation and other improvements
    (man_page_improvements.patch)
    Resolves: rhbz#557563


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-11
changelog:
  - rgmanager: Present flags in clustat output
    (present_flags_in_clustat_output.patch)
    Resolves: rhbz#634298
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#621562
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#621694
  - rgmanager: Add non-critical flag to resources
    (add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (allow_restart,disable_recovery_policy.patch)
    rgmanager: Ensure state is preserved across config changes
    (ensure_state_is_preserved_across_config_changes.patch)
    rgmanager: Fix handling of independent subtrees
    (fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (fix_corner_case_in_critical_non_critical_handling.patch)
    rgmanager: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    Resolves: rhbz#634277
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#639103
  - rgmanager: DBus notifications for service state changes
    (dbus_notifications_for_service_state_changes.patch)
    rgmanager: Clean up dbus notifications
    (clean_up_dbus_notifications.patch)
    rgmanager: Retry dbus if we get disconnected
    (retry_dbus_if_we_get_disconnected.patch)
    rgmanager: minor dbus cleanups
    (minor_dbus_cleanups.patch)
    rgmanager: Match fenced's option to disable DBus
    (match_fenced_s_option_to_disable_dbus.patch)
    rgmanager: allow dbus notification code to be disabled
    (allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#657756
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#661881
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#672841


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    * rgmanager: fix compiler warning in clulog.c
    * rgmanager: Add resource-defaults section
    * rgmanager: Fix clustat help & version operations
    * rgmanager: Make clustat -f not query CCS/objdb
    * rgmanager: Pause during exit if we stopped services
    * rgmanager: Fix reference count handling
  - spec file update:
    * update spec file copyright date
    * drop all patches
    * update and clean configure and build section.
    * resync with fedora spec file
    Resolves: rhbz#707118
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Requires/Obsoletes on resource-agents to avoid file conflicts
    Resolves: rhbz#693517


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-2
changelog:
  - Improve rgmanager's exclusive prioritization handling
    Resolves: rhbz#690191
  - Fix bad passing of SFL_FAILURE up
    Resolves: rhbz#716231
  - Fix segfault on config reload
    Resolves: rhbz#692895
  - Make handling of failed services consistent
    Resolves: rhbz#673167


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-3
changelog:
  - rgmanager: Fix race in shutdown vs. notification
    Resolves: rhbz#697446
  - rgmanager: Add 'disabled' configuration option
    Resolves: rhbz#723925


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-4
changelog:
  - rgmanager: Fix segfault caused by unref race
    Resolves: rhbz#697446
  - rgmanager: Fix uninitialized variable
    Resolves: rhbz#734730


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-5
changelog:
  - rgmanager: Clean up DBus concurrency
    rgmanager: Block signals when dealing with dbus
    Resolves: rhbz#741607


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-6
changelog:
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#635152
  - rgmanager: Fix clusvcadm message when run with -F
    Resolves: rhbz#727326
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743218
  - rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#744824
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#745226


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-13
changelog:
  - rgmanager: Fix a crash when dbus notifications are
    Resolves: rhbz#825375
  - rgmanager: Fix for deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-15
changelog:
  - rgmanager: Randomize node list when relocating with no
    Resolves: rhbz#831648
  - rgmanager: Fix return code when a service would deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-18
changelog:
  - rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#983296


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-20
changelog:
  - rgmanager: clusvcadm: If service doesn't exist, try
    Resolves: rhbz#952729
  - rgmanager: Don't crash if a resource agent does not
    Resolves: rhbz#1018079
  - rgmanager: Fix rg_test exit status on failures
    Resolves: rhbz#1033162
  - rgmanager: resrules: make expand_time buffer-less
    Resolves: rhbz#1036652
  - rgmanager: Fix error logging when building the resource
    Resolves: rhbz#1053739


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-22
changelog:
  - rgmanager: Fix potential NULL ptr deref in clustat
    Resolves: rhbz#1079207
  - rgmanager: Log a warning when the non-critical flag is
    Resolves: rhbz#1128877
  - rgmanager: Don't restart locally if failover domain
    Resolves: rhbz#1151199


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-25
changelog:
  - rgmanager: Fix bash syntax error in clunfslock
    rgmanager: clunfslock: copy state info if it exists
    Resolves: rhbz#1278943


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-29
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#1084053
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1342825


author: Tom Lane <tgl@redhat.com>
changelog:
  - Update to version 3.0.
  - Increment Buildrequires to >= PostgreSQL 7.4
  - Rebuild for Fedora Core 2.


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update pg_filedump to version 4.0, to support PostgreSQL 8.0.
  - Keep pg_crc.c on hand as a plain source file instead of a patch.
    Easier to compare to main PG sources that way.


author: Tom Lane <tgl@redhat.com> 8.1-1
changelog:
  - Update pg_filedump to version 8.1, to support PostgreSQL 8.1.
  - Change version numbering so that major version matches corresponding
    PostgreSQL version.


author: Tom Lane <tgl@redhat.com> 8.4.0-3
changelog:
  - Add -fno-strict-aliasing to CFLAGS per rpmdiff complaint, and -fwrapv
    too just to be on the safe side.
  Resolves: #596204


author: 2002 Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.5R2-6jpp
changelog:
  - backward compatibility js.jar symlink
  - used original swing exemples archive
  - fixed javadoc empty package-list file
  - no dependencies for manual and javadoc packages


author: David Walluck <david@jpackage.org> 0:1.6-0.r1.1jpp
changelog:
  - 1_6R1
  - add demo subpackage containing example code
  - add jpp release info to implementation version
  - add script to launch js shell
  - build E4X implementation (Requires: xmlbeans)
  - remove `Class-Path' from manifest


author: Deepak Bhole <dbhole@redhat.com> 0:1.6-0.1.r5.1jpp.1
changelog:
  - Upgrade to 1.6r5
  - Change release per Fedora guidelines
  - Disable dependency on xmlbeans (optional component, not in Fedora yet)
  - Disable building of debugger tool, as it needs confidential code from Sun
  - Remove post/postuns for javadoc and add the two dirs as %doc


author: Matt Wringe <mwringe@redhat.com> 0:1.6-0.1.r5.1jpp.2
changelog:
  - Remove script from build as the debugging tool is disabled due to it 
    containing proprietary code from Sun.


author: Lillian Angel <langel@redhat.com> - 0:1.7-0.3.r2pre.1.1
changelog:
  - Updated rhino-build.patch
  - License for treetable has been fixed. Re-included this code, and removed patch.
  - Resolves: rhbz#457336


author: Severin Gehwolf <sgehwolf@redhat.com> - 0:1.7R4-2
changelog:
  - Preserve nicer backward compatibility by using same jar file
    names and symlink names as 1.7-0.7.r2 did.


author: Matthias Saou <matthias@rpmforge.net> 0.5.3-3
changelog:
  - Fix category from Development/Libraries to Applications/Multimedia.
  - Use bz2 instead of gz as ftp.gnome.org has both, 300k saved in the src.rpm.
  - Fix SCHEMES vs. SCHEMAS in the post scriplet.
  - Added gstreamer-plugins-devel, libvorbis-devel, scrollkeeper and gettext deps.
  - Removed unnecessary date expansion define.
  - Updated description, including mp3 reference removal.
  - Added libid3tag and flac optional support for convenient rebuild.
  - Removed obsolete omf.make and xmldocs.make (included ones are the same now).


author: Colin Walters <walters@redhat.com> - 0.7.1-1
changelog:
  - New major version - I know we are past major version slush, but
    this should have been done two weeks ago along with the GNOME 2.6
    upload.  As upstream author as well, I believe this version is
    good enough for FC2.
  - Remove --disable-mp3
  - Remove id3, flac variables
  - Remove GStreamer major version patch
  - Fix typo in description


author: Colin Walters <walters@redhat.com> - 0.8.4-1
changelog:
  - New upstream version
  - Remove backported patches
  - Gratuitiously bump various BuildRequires versions


author: Colin Walters <walters@redhat.com> - 0.8.8-3
changelog:
  - Add Bluecurve-ized icons from Jeff Schroeder (157716)
  - Add rhythmbox-0.8.8-cell-renderer.patch to remove use of custom
    cell renderer for playback icon (no longer necessary) and
    changes the rating renderer to work with non-b&w icons


author: Colin Walters <walters@redhat.com>
changelog:
  - Add configure flags --with-bonobo --with-dbus
  - BR nautilus-cd-burner-devel
  - New upstream CVS snapshot for testing
  - Drop IDL file and ui .xml
  - Add dbus service file
  - Drop upstreamed rhythmbox-bluecurve.tar.gz
  - Drop upstreamed rhythmbox-0.8.8-cell-renderer.patch


author: Ray Strode <rstrode@redhat.com> - 0.9.3.1-3
changelog:
  - fix icon on notification bubbles (bug 183720)
  - patch from CVS to escape bubble markup, found by 
    Bill Nottingham


author: Alexander Larsson <alexl@redhat.com> - 0.9.7-7.fc7
changelog:
  - Specfile cleanups from Todd Zullinger
  - Buildrequire gnome-media-devel for gnome-media-profiles.pc
  - Remove explicit libgpod dep
  - install missing artwork image (Gnome BZ #387413)


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.7-8.fc7
changelog:
  - Add patch to make the multimedia keys work with the new control-center
    way of doing things (#197540)


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.7-11.fc7
changelog:
  - Require automake in the BuildRequires as well, as we need to generate
    plugins/mmkeys/Makefile.in


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.8-1.fc7
changelog:
  - Update to 0.9.8, drop unneeded requirements and patches
  - Change iradio default stations location
  - Add new rhythmbox-core library


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.0-1.fc7
changelog:
  - Update to the stable branch 0.10.0, fixes a large number of crashers
  - Add patch for xdg-user-dirs support


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.0-5.fc7
changelog:
  - Set the first time flag on startup, otherwise the iRadio's initial
    playlist is never loaded (Gnoem BZ #431167)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.2-10
changelog:
  - Add patch to avoid Rhythmbox escaping the primary text in notifications
    as per the spec (#242260)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.2-12
changelog:
  - Update patch for #242260, tooltips weren't working
  - Add patch to fix problems importing files with spaces in them (#291571)
  - Add patch to remove iPod tracks when removed, rather than put them
    in the trash (#330101)
  - Add upstream patch to support new playlist parser in Totem, and add
    better Podcast support, as well as iTunes podcast support


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.3-6
changelog:
  - Remove stupid return that caused Podcasts never to be updated
    (see http://bugzilla.gnome.org/show_bug.cgi?id=500325)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.4-10
changelog:
  - Add a patch to fix activating audio players with a directory instead
    of a device path (GNOME bug #519737)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.4-13
changelog:
  - Big update of the UPNP plugin, with MediaRenderer support
  - Add patch to make the pane window bigger by default (#437066)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.5-3
changelog:
  - Patch from upstream to fix URL encoding, as soup_encode_uri()
    doesn't encode in place anymore, should fix track submission
    with last.fm


author: Adam Jackson <ajax@redhat.com> 0.11.6-2
changelog:
  - rhythmbox-0.11.5-xfade-buffering.patch: Backport from svn to fix playback
    start when the crossfader is active.


author: - Bastien Nocera <bnocera@redhat.com> 0.11.6-r5956
changelog:
  - Update to latest trunk version, with GIO support and very many
    bug fixes
  - Remove obsoleted patches, autotools and xulrunner-devel BRs


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-15.r6005
changelog:
  - Update to rev 6005
  - Fixes typo in the LIRC config
  - Force GConf library location to be a URI on startup


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-21.r6096
changelog:
  - Add more Python deps for the UPNP plugin (#474372)
  - Require gstreamer-python-devel, as it's been split from gstreamer-python


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-24.r6096
changelog:
  - Use the pulsesink's volume instead of our own one
  - Fix crasher when musicbrainz3 doesn't get a match for an audio CD (#481441)


author: - Bastien Nocera <bnocera@redhat.com> - 0.12.0-2
changelog:
  - Add patch to use decodebin2 instead of decodebin and fix
    playback problems with chained ogg streams (#446283)


author: Bastien Nocera <bnocera@redhat.com> 0.12.4-2
changelog:
  - Remove obsolete configure flags
  - Add libgudev BR
  - Add media-player-info requires (note, not built yet)


author: Richard Hughes <rhughes@redhat.com> - 0.12.5-2
changelog:
  - Apply a patch from upstream to inhibit gnome-session, rather than
    gnome-power-manager. This fixes a warning on rawhide.


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Jay Fenlason <fenlason@redhat.com> - 2-9
changelog:
  - Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
    Resolves: bz#733452


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#751374
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Than Ngo <than@redhat.de>
changelog:
  - /etc/rc.d/init.d -> /etc/init.d
  - add condrestart directive
  - fix post/preun/postun scripts
  - prereq initscripts >= 5.20


author: Than Ngo <than@redhat.com>
changelog:
  - fixed so that pppoe script does not kill adsl connection when
    the runlevel is changed. 
  - remove excludearch ia64


author: Than Ngo <than@redhat.com>
changelog:
  - Copyright -> License
  - fix activate ethernet device problem
  - get rid of pppoe initscript, use ifup/ifdown
    to activate/shutdown xDSL connection
  - convert old pppoe config format into new format
  - remove adsl-setup, Users have to use netconf to setup xDSL connection
  - excludearch s390


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-5
changelog:
  - fix segfault on failed url retrieval (#557118)
  - fix verification error code depending on verbosity level (#557101)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-6
changelog:
  - Permit em64t architecture in query/erasure too (#547341)
  - Avoid accessing unrelated mount points in disk space checking (#495623)
  - Fix disk space reporting with erasures present in transaction (#561160)
  - Teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - Fix python match iterator regression wrt boolean representation
  - Support parallel python versions in python dependency extractor (#532118)
  - Python byte-compilation fixes + improvements (#538101)
  - Preserve empty lines in spec prep section (#573339)
  - Fix nosrc package generation regression
  - Avoid owning localized man directories through find_lang (#569536)
  - Lose useless symlink to berkeley_db_svc


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-17
changelog:
  - Allow self conflicts (#651951)
  - Add support for xz compression in rpm2cpio.sh (#674348)
  - Don't error out on already imported GPG keys (#680889)
  - Fix file conflict handling for uncolored files (#705115)
  - Fix file attribute handling with %defattr(-) (#705993)
  - Don't error out when trying to add the same signature again (#707449)
  - Fix signature checking (#721363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-20
changelog:
  - -D is for --define, not --predefine (#785236)
  - Add runtime detection for /usr move (#761000)
  - Fix brace matching on multiline constructs in perl.req (#752119)
  - Make pretrans scriptlet failure fail the package installation (#736960)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-22
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-25
changelog:
  - Fix Lua script current directory behavior (#746190)
  - Copy rpmpkgs "log" into place instead of moving (#746637)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-33
changelog:
  - Fix build-time double-free on file capability processing (#904818)
  - Fix include-directive getting processed on false branch (#920190)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163059)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-40
changelog:
  - Add check if source files aren't too big for payload (#833427)
  - Fix producing bogus dependencies by perl.req (#1024517, #1026750)
  - Fix color skipping of multiple files with the same content (#1170124)
  - Disable curl globbing for remote retrievals (#1076277)
  - Make rpm-build depend on redhat-rpm-config provide (#1122100)
  - Handle directory replaced with a symlink to one in verify (#1158377)
  - Restore default SIGPIPE handling for build scriptlets (#993868)
  - State --setperms and --setugids are mutually exclusive (#1119572)
  - Fix byteorder for 64 bit tags on big endian machines (#1040318)
  - File mode from %defattr is applied to directories with warning (#997774)
  - If an error occurs during printing log message then print the error
    on stderr (#1139444)
  - Error out on more than one --pipe option (#966093)
  - Extend PKG_CONFIG_PATH instead of override (#921969)
  - Add RPMCALLBACK_SCRIPT_START and RPMCALLBACK_SCRIPT_STOP. These events are
    not emitted by default (#606239)
  - Enable rpm to work with shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-41
changelog:
  - Add missing braces around the block of code (#606239)
  - Add missing patch for shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-43
changelog:
  - Fix for patch for color skipping (#1170124)
  - Add power64 macro (#1178083)
  - Plug segfault on NULL pointer dereference in debugedit (#903009)
  - Account for temporary disk-space requirements on update (#872314)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-57
changelog:
  - Very slow "rpm -q --specfile a.spec" if specfile has thousands of patches (#1383422)
  - Fix refcounting for Python hdr objects (#1438811)
  - Add sources to lua to prevent %autosetup failing in some cases (#1438815)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.0-1
changelog:
  - Remove 0.fdr. prefixes and epoch 0's from all spec templates.
  - Add try-restart action to init script template.
  - Remove deprecated fedora-diffrpm and fedora-unrpm.
  - Install check-* to %{_prefix}/lib/rpm instead of %{_libdir}/rpm (bug 2351).
  - Check both %{_prefix}/lib and %{_prefix}/lib64 in the xemacs trigger.
  - Update rpminfo to 2004-07-07-01 and include it in the tarball.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.1-1
changelog:
  - Make buildrpmtree and wipebuildtree less dependent on a specific
    configuration (#147014, Ignacio Vazquez-Abrams).


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0-1
changelog:
  - Make fedora-diffarchive work better with archives containing dirs without
    read/execute permissions.
  - Sync "Epoch: 0" drops with Fedora Extras CVS.
  - Include Nils Philippsen's spectool.
  - Own (%ghost'd) more dirs from the site-lisp dir hierarchies.
  - Drop trigger support pre-FC2 Emacs and XEmacs packages.
  - Drop rpm-spec-mode.el patch, no longer needed for FC2 Emacs and later.
  - Update URLs.
  - Drop developer GPG keys from the package, add Fedora Extras key.
  - Drop fedora-pkgannfmt, it's no longer relevant.
  - Remove pre-FC2 compatibility stuff from Perl spec template.
  - Don't try to remove gcc-java and related packages by default in rmdevelrpms.
  - Remove "full featured" spec template, convert newrpmspec to use -minimal.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.1-1
changelog:
  - Drop more pre-FC2 compat stuff from Perl spec template.
  - Treat gcc-gfortran as a devel package in rmdevelrpms.
  - Drop fedora.us GPG key.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2-1
changelog:
  - check-buildroot: grep for buildroot as a fixed string, not a regexp.
  - Update FSF's address in copyright notices.
  - check-rpaths-worker: allow multiple $ORIGIN paths in an RPATH and allow
    RPATHs which are relative to $ORIGIN (#169298, Enrico Scholz).
  - check-rpaths-worker: give out an hint about usage and the detected issues
    at the first detected error (Enrico Scholz).
  - Remove some redundancy from the Perl spec template.
  - Teach fedora-newrpmspec to detect and use different specfile variants.
  - Use fedora-newrpmspec in fedora-init.el.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3-1
changelog:
  - check-rpaths-worker: detect when RPATH references the parent directory
    of an absolute path (#169298, Enrico Scholz).
  - Add regression test for check-rpaths* (#169298, Enrico Scholz).
  - Honor user's indent-tabs-mode setting in fedora-init.el (#170902).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add manual pages for rmdevelrpms, diffarchive and extract.
  - Trim pre-2005 changelog entries.
  - Autotoolize source tree.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora-kmodhelper.
  - Drop fedora-installdevkeys and GPG keys, modify rpmchecksig to use
    the system rpmdb.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora- prefix everywhere, add backcompat symlinks for execubtables.
  - Move %{_sysconfdir}/fedora to %{_sysconfdir}/rpmdevtools and
    %{_datadir}/fedora to %{_datadir}/rpmdevtools.
  - Move spec templates to %{_sysconfdir}/rpmdevtools, mark as config.
  - Bump version to 5.0.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Move option arguments to "find" before non-option ones in Perl spec template.
  - Drop python-abi dependency from Python spec template (#189947).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Treat *-sdk as devel packages in rmdevelrpms (#199909).
  - Don't assume compface is a devel package in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.0-1
changelog:
  - Re-rename almost everything to rpmdev-*, with backwards compat symlinks.
  - Don't encourage %ghost'ing *.pyo in Python spec template, add some comments.
  - Drop PHP PEAR spec template, it's not ready yet.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.1-1
changelog:
  - Re-add PHP PEAR spec template, more improvements to it (#198706,
    Christopher Stone, Remi Collet).


author: Ville Skyttä <ville.skytta@iki.fi> - 5.2-1
changelog:
  - Skip *.jar.so.debug in check-buildroot (#208903).
  - Treat yasm and *-static as devel packages in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Arch-qualify output of matched packages in rmdevelrpms and allow
    arch-qualified packages in the config file.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - BR perl(ExtUtils::MakeMaker) by default in perl spec template.
  - Drop deprecated backwards compatibility with fedora-rpmdevtools.
  - Update URL.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Include rpmsodiff and dependencies (rpmargs, rpmelfsym, rpmfile, rpmpeek,
    rpmsoname) from ALT Linux's qa-robot package.
  - Include rpmls (#213778).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add 2-argument form for comparing EVR strings to rpmdev-vercmp
    (available only if rpmUtils.miscutils is available).


author: Ville Skyttä <ville.skytta@iki.fi> - 6.0-1
changelog:
  - Remove check-{buildroot,rpaths*}, now included in rpm-build >= 4.4.2.1.
  - Drop explicit dependency on patch, pulled in by recent rpm-build.
  - Add cmake and scons to default devel package list in rpmdev-rmdevelrpms.
  - Add LSB comment block to init script template.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Fix Epoch handling in the 2-arg form of rpmdev-vercmp with yum < 3.1.2.
  - The long form of the list option in rmdevelrpms is --list-only, not --list.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add fonts spec template from the Fedora Fonts SIG (#407781).
  - Add option to use macro style instead of shell style variables to newspec.
  - Prefer ~/.config/rpmdevtools/rmdevelrpms.conf over ~/.rmdevelrpmsrc in
    rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove libgcj-devel and zlib-devel from rmdevelrpms' internal exclusion
    list, they're not essential on non-devel systems any more.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove duplicate "reload" from case block in init script template.
  - Fix exit status of "reload" in case service is not running in init
    script template (#442993).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add -r/--rightmost option to rpmdev-bumpspec (ticket #1, Thorsten Leemhuis).
  - Add %packager from rpm config to the set of defaults for rpmdev-bumpspec's
    user string.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add vamp-plugin-sdk to internal list of non-devel packages in rmdevelrpms
    (#472641, Michael Schwendt).


author: Ville Skyttä <ville.skytta@iki.fi> - 7.0-1
changelog:
  - 7.0.
  - Drop fonts spec template, adapt to new ones from Fedora fonts SIG (#477055).
  - Add man page for rpmdev-newspec.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Use %global instead of %define in spec templates.
  - Handle %global in addition to %define in rpmdev-bumpspec.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-newinit for easier access to the init script template, move the
    template to %{_sysconfdir}/rpmdevtools, improve reload action example.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Improve newspec/newinit when only "-o foo" argument is given (#498588,
    thanks to Edwin ten Brink).
  - Try to get packager mail address for *Emacs rpm-spec-mode from ~/.fedora.cert
    if rpm-spec-user-mail-address is not set.
  - Add xz support to rpmdev-extract.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-packager - script for getting rpm packager info.
  - Use rpmdev-packager in rpmdev-bumpspec and rpmdev-init.el.
  - Fix rpmdev-extract MIME type comparisons with file(1) output containing
    parameters.


author: Ville Skyttä <ville.skytta@iki.fi> - 7.4-1
changelog:
  - Update to 7.4, fixes #215927 and #466353.
  - Patch spectool to make -s and -p to work as documented (Todd Zullinger).


author: Ville Skyttä <ville.skytta@iki.fi> - 0.83-1
changelog:
  - 0.83, fixes #237204, #428096, #430206, #433783, #434694, #444441.
  - Fedora licensing patch applied upstream.
  - Move pre-2007 changelog entries to CHANGES.package.old.
  - Sync Fedora license list with Revision 0.88.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.84-2
changelog:
  - 0.84, fixes #355861, #456304.
  - Sync Fedora license list with Wiki revision "16:08, 18 July 2008".
  - Rediff patches.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.85-1
changelog:
  - 0.85, fixes #355861, #450011, #455371, #456843, #461421, #461423, #461434.
  - Mute some explicit-lib-dependency false positives (#458290).
  - Sync Fedora license list with Wiki revision 1.19.
  - Dist regex patch applied/superseded upstream.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Sync Fedora license list with Wiki revision 1.34.
  - Filter out filename-too-long-for-joliet and symlink-should-be-* warnings in
    default config.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.87-1
changelog:
  - 0.87; fixes #480664, #483196, #483199, #486748, #488146, #488930, #489118.
  - Sync Fedora license list with Wiki revision 1.38.
  - Configs patch included upstream.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.89-1
changelog:
  - Update to 0.89; fixes #461610, #496735, #496737 (partially), #498107,
    - Sync Fedora license list with Wiki revision 1.44.
  - Parse list of standard users and groups from the setup package's uidgid file.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.91-1
changelog:
  - Update to 0.91; fixes #513811, #515185, #516492, #519694, and #521630.
  - Add dependencies on gzip, bzip2, and xz.
  - Sync Fedora license list with Wiki revision 1.49.
  - Move pre-2008 %changelog entries to CHANGES.package.old.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.92-1
changelog:
  - Update to 0.92; fixes #528535, and #531102 (partially).
  - Python byte compile patch applied/superseded upstream.
  - Add <lua> to list of valid scriptlet shells.
  - Sync Fedora license list with Wiki revision 1.53.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.93-1
changelog:
  - Update to 0.93; fixes #531102 and #555284.
  - Enable checks requiring network access in default config.
  - Disallow kernel module packages in default config.
  - Remove old X11R6 dirs from paths treated as system ones in default config.
  - Sync Fedora license list with Wiki revision 1.64.
  - Omit python-enchant and python-magic dependencies when built on EL.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.94-1
changelog:
  - Update to 0.94; rpm >= 4.8.0 spec file check fix included upstream.
  - Sync Fedora license list with Wiki revision 1.65 (#559156).


author: Matthias Saou <http://freshrpms.net/> 1.0.45-4
changelog:
  - Added epoch to the perl dependency to work with rpm > 4.2.
  - Fixed the % escaping in the perl dep.


author: Matthias Saou <http://freshrpms.net/> 1.0.46-1
changelog:
  - Update to 1.0.46.
  - Use system libpng and zlib instead of bundled ones.
  - Added php-rrdtool sub-package for the php4 module.


author: Matthias Saou <http://freshrpms.net/> 1.0.49-4
changelog:
  - Fix for the php module patch (Joe Pruett, Dag Wieers), #156716.
  - Update source URL to new location since 1.2 is now the default stable.
  - Don't (yet) update to 1.0.50, as it introduces some changes in the perl
    modules install.


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-1
changelog:
  - Update to release 1.2.13
  - Merge spec changes from dag, atrpms and mdk builds
  - Additional hacktastic contortions for lib64 & rpath messiness
  - Add missing post/postun ldconfig
  - Fix a bunch of rpmlint errors
  - Disable static libs, per FE guidelines
  - Split off docs


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-2
changelog:
  - Remove explicit perl dep, version grabbing using rpm during
    rpmbuild not guaranteed to work (fails on ppc in plague),
    and auto-gen perl deps are sufficient


author: Jarod Wilson <jwilson@redhat.com> 1.2.15-3
changelog:
  - One more addition to initrrdtool patch, to fully revert
    and correct upstream changeset 839
  - Fix for no python in minimal fc4 buildroots


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.3.beta3
changelog:
  - Update to rrdtool 1.3 beta3
  - Return properly from errors in RRDp.pm (Resolves: #427040)
  - Requires: dejavu-lgc-fonts (Resolves: #426935)


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.15.rc1
changelog:
  - Update to rrdtool 1.3 rc1
  - Fix versioning in changelog entries, had an extra 0 in there...
  - Drop cairo and python patches, they're in 1.3 rc1
  - Add Requires: gettext and libxml2-devel for new translations


author: Jarod Wilson <jwilson@redhat.com> 1.3.2-1
changelog:
  - Update to rrdtool 1.3.2
    * fixes a data corruption bug when rrd wraps around
    * make imginfo behave the same as docs say it does
    * fixes for numerous memory leaks


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rexec needs pam_set_item() (#60).
  - clarify protocol in rexecd.8.
  - add rexec client from contrib.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - expunge all mentions of kerberos authentication or DES encryption using
    kerberos from the man pages


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix PAM config files to always honor nologin and securetty, to use rhosts,
    and to fall back to password auth only for rlogin and rexec (#17183)
  - add references to pam_env to the PAM configs as well (#16170)
  - disable rlogin and rsh by default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - securetty is screwy because rsh doesn't allocate one and rlogin does auth
    before it has a tty, so change the hard-coded TTYs used from "tty" for all
    to "rsh" or "rlogin" or "rexec"


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed really missing BuildPrereq: libtermcap-devel (#49577)
  - Fixed security problem with rexec.pam (#49181)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-11
changelog:
  - remove directory names from PAM configuration files, allowing them to be used
    for all arches on multilib systems


author: Karel Zak <kzak@redhat.com> 0.17-25
changelog:
  - rexecd uses PAM session now (#68590)
  - fixed errno usage in rcp (#67361)
  - fixed rexec fails with "Invalid Argument" (#118630)


author: Karel Zak <kzak@redhat.com> 0.17-35
changelog:
  - added support for IPv6 (patch by Jan Pazdziora)
  - fix #198632 - add keyinit instructions to the rsh, rlogin and rexec PAM scripts
    (patch by David Howells)
  - fix #191390 - improve linefeed patch


author: Adam Tkac <atkac redhat com> 0.17-40
changelog:
  - improved -D option to rlogind - when name won't be resolved rlogind uses IP address
  - added smp_mflags to make


author: Adam Tkac <atkac redhat com> 0.17-43
changelog:
  - removed -D option from rshd and rlogind (we have -a option when
    we need force reverse DNS lookup)
  - patches netkit-rsh-0.17-nodns.patch and netkit-rsh-0.17-nohostcheck.patch
    are substituted by netkit-rsh-0.17-dns.patch


author: Adam Tkac <atkac redhat com> 0.17-50
changelog:
  - fixed typos in arg_max and audit patches (#445606)
  - use pam_rhosts, not pam_rhosts_auth (#445606)


author: Adam Tkac <atkac redhat com> 0.17-51
changelog:
  - updated ipv6 patch due rpm 4.6 (#465053)
  - make in.rshd working on kernels without audit support (#448904)


author: Adam Tkac <atkac redhat com> - 0.17-60
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Michal Ruprich <mruprich@redhat.com> - 0.17-64.1
changelog:
  - Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-6
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments (#684933)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-7
changelog:
  - Use portreserve to protect rsync/tcp port (#786076)
  - Truncate a copied sparse file at the end of transaction
    (-S, --sparse option) (#737539)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-9
changelog:
  - Revert portreserve, as portrelease functionality needs to be
    implemented first in the rsync binary (#786076)


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1109155
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-4
changelog:
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202455
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224335
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1184722
  - add a patch to remove a limit on number of sources in imfile
    resolves: rhbz#1122802
  - add an explicit, versioned requirement on librelp to work
    around an incorrect soname
    resolves: rhbz#1191680
  - make logrotate tolerate missing log files
    resolves: rhbz#1252909
  - replace bundled docs with updated upstream documentation
    remove reference to queue.spoolDirectory
    drop empty NEWS file
    resolves: rhbz#1238451
    resolves: rhbz#1243293


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: kwizart < kwizart at gmail.com > - 1.2-4
changelog:
  - Disable dist tag
  - Preserve timestamp
  - Add license from Ralink
  - Improved summary and description


author: Lennart Poettering <lpoetter@redhat.com> - 0.5-1
changelog:
  - New release
  - By default don't demote unknown threads
  - Make messages less cute
  - Resolves: #530582


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
  			  ruby-list#33047: regex bug
  			  PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
  		   variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: David Lutterkort <dlutter@redhat.com> - 0.9.1-1
changelog:
  - New version; include LICENSE.txt and GPL.txt
  - avoid '..' in gem_dir to work around a bug in gem installer
  - add ruby-rdoc to requirements


author: David Lutterkort <dlutter@redhat.com> - 1.2.0-1
changelog:
  - Updated for new setup.rb
  - Simplified by removing conditionals that were needed for EL-4;
    there's just no way we can support that with newer rubygems


author: Vít Ondruch <vondruch@redhat.com> - 1.3.7-4
changelog:
  - Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
    - Related: rhbz#1002839.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug #17065 where rusersd wrongly terminated each string with a '\0'.
  - Fixed bug #53244. Now stats for the different protocols are stored separately.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed the wrong uptime problem introduced by fixing bug #53244.
  - Fixed segfault problem on alpha (and other archs) (bug #53309).


author: Phil Knirsch <pknirsch@redhat.com> 0.17-20
changelog:
  - Fixed the sort ordering for rup -l host1 host2 host3 (#67551)
  - Don't use configure anymore, doesn't work in build environment correctly.


author: Steve Dickson <steved@redaht.com> 0.17-51
changelog:
  - Removed portmap dependency and re-worked when the user
    privilege are drop; allowing port registration with
    rpcbind. (#247985)


author: Honza Horak <hhorak@redhat.com> - 0.17-60
changelog:
  - fixed .include patch which had not been aplicable
  - fixed rusersd and rstatd initscripts
    Resolves: #697862
  - fixed rpmlint errors and warnings
    Resolves: #634922


author: Phil Knirsch <pknirsch@redhat.com> 0.17-23
changelog:
  - Fixed long standig bug with only 42 entries per host showing up (#27643)
  - Fixed some warnings of missing prototypes.


author: Mark McLoughlin <markmc@redhat.com> - 0.16-3
changelog:
  - Remove period at the end of the summary
  - Specify full URL for source
  - BuildRequires: python 
  - Use _sysconfdir everywhere
  - Set the directory mode


author: Mark McLoughlin <markmc@redhat.com> - 0.16-4
changelog:
  - Split the package into sabayon and sabayon-admin
  - BuildRequires: gettext instead of gettext-devel


author: Mark McLoughlin <markmc@redhat.com> - 2.11.90-1
changelog:
  - Update to 2.11.90
  - Don't ghost .pyo files, package them
  - We're no longer a noarch package
  - BuildRequire python-devel, pygtk2-devel, gtk2-devel and xorg-x11-devel
    for the xlib module
  - Add sessionwindow.py, sessionwidget.py, changeswindow.py and
    xlib.so to files
  - Remove sabayon-monitor and monitorwindow.py
  - Icon is now installed in the icon theme; update the
    icon cache in post and postun
  - Require pygtk 2.7.1 in FC5 for MessageDialog fix (gnome #311226)


author: Alexander Larsson <alexl@redhat.com> - 2.12.3-1
changelog:
  - update to 2.12.3
  - Fix Xnest dependency with modular X
  - Fix Xsession script being moved in FC5
  - Remove sabayon.schema from doc, as it wasn't in this release


author: <markmc@localhost.localdomain> - 2.12.3-4
changelog:
  - Remove FC4 stuff
  - Add BuildRequires for autoconf and perl-XML-Parser
  - Remove python-abi Requires


author: Alexander Larsson <alexl@redhat.com> - 2.12.3-5
changelog:
  - Rename sabayon-admin user to sabayon (< 8 chars)
  - Use registered uid/gid for user
  - Rename sabayon-admin package to sabayon, sabayon becomes sabayon-apply
  - Add workaround for Xnest crash in rawhide


author: Alexander Larsson <alexl@redhat.com> - 2.12.4-1
changelog:
  - Update to 2.14.4
  - Ghost .pyo files
  - Use a more modern pam file
  - Remove macros from changelog
  - Add usermode dependency
  - Made sabayon symlink relative
  - Add dist tag


author: Alexander Larsson <alexl@redhat.com> - 2.18.1-1
changelog:
  - Update to 2.18.1
  - Move gamin-python and python-ldap requires to sabayon-apply subpackage
  - Own datadir subdirs (#233912)


author: Matthias Clasen <mclasen@redhat.com> - 2.20.1-3
changelog:
  - Be more robust when directories are missing (#329471)
  - Work better with SELinux (#329501)
  - Move debuglog.py to the -apply package (#330001)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.25.0-2
changelog:
  - Fix some gconf crashes (gnome #576445)
  - Temporarily switched back to Xnest to get working keyboard (gnome #576447)


author: Warren Togami <wtogami@redhat.com> - 2.29.5-0.1.rc2
changelog:
  - Update to 2.95.5-rc2
  - glade removed, replaced by GNOME Builder 
  - /etc/desktop-profile moved to /etc/sabayon/profiles
    Manual Migration:
    mv /etc/desktop-profiles/*.xml /etc/sabayon
    mv /etc/desktop-profiles/*.zip /etc/sabayon/profiles


author: Warren Togami <wtogami@redhat.com> - 2.29.91-1
changelog:
  - 2.29.91 with important bug fixes
    Saves and Restores File Permissions
    Details pane is now less confusing
    Common Editor Crasher Fixed


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - Fix profile saving if file/folder names contain an apostrophe (#654567)
  - Fix sabayon crash when getting details of a profile (#674012)


author: Andrew Bartlett <abartlet@samba.org> - 0:4.0.0-0.4.alpha5.fc10
changelog:
  - Remove talloc and tdb dependency (per https://bugzilla.redhat.com/show_bug.cgi?id=453083)
  - Fix deps on chkconfig and service to main pkg (not -common) 
    (per https://bugzilla.redhat.com/show_bug.cgi?id=453083)


author: Andrew Bartlett <abartlet@samba.org> - 0:4.0.0-0.5.alpha5.fc10
changelog:
  - Fix licence tag (the binaries are built into a GPLv3 whole, so the BSD licence need not be mentioned)


author: Matthew Barnes <mbarnes@redhat.com> - 4.0.0-0.7.alpha6.GIT.3508a66
changelog:
  - Disable the winbind subpackage because it conflicts with samba-winbind
    and isn't needed to support OpenChange.


author: Simo Sorce <ssorce@redhat.com> - 4.0.0-7alpha7
changelog:
  - Compile and have separate packages for additional samba libraries
    Package in their own packages: talloc, tdb, tevent, ldb


author: Simo Sorce <ssorce@redhat.com> - 4.0.0-9alpha7
changelog:
  - Make talloc,tdb,tevent,ldb easy to exclude using defines
  - Fix package for non-mock "dirty" systems by deleting additional
    files we are not interested in atm


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-27.rc1
changelog:
  - Fix permission for init scripts.
  - Define a common KRB5CCNAME for smbd and winbind.
  - Set piddir back to /var/run in RHEL6.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-30.rc2
changelog:
  - Fix multilib package installation.
  - resolves: #862047
  - Filter out libsmbclient and libwbclient provides.
  - resolves: #861892
  - Rebase to version 4.0.0rc2.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-41.rc4
changelog:
  - Fix library dependencies found by rpmdiff.
  - Update winbind offline logon patch.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-54.rc4
changelog:
  - Fix summary and description of dc subpackages.
  - resolves: #896142
  - Remove conflicting libsmbclient.7 manpage.
  - resolves: #896240


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-56.rc4
changelog:
  - Fix libwbclient.so.0 symlink.
  - resolves: #882338
  - Fix correct linking of libreplace with cmdline-credentials.
  - resolves: #911264


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-57.rc4
changelog:
  - resolves: #984809 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073356 - Fix CVE-2012-6150.
  - resolves: #1073356 - Fix CVE-2013-4496.
  - resolves: #1073356 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105502 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108843 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105572 - CVE-2014-0178: Uninitialized memory exposure.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290709 - CVE-2015-7540
  - related: #1290709 - CVE-2015-5299
  - related: #1290709 - CVE-2015-5296
  - related: #1290709 - CVE-2015-5252
  - related: #1290709 - CVE-2015-5330


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Pravin Satpute <psatpute@redhat.com> - 1.2.0-1
changelog:
  - update to samyak-fonts-1.2.0 from upstream cvs
  - major bug fixes for devanagari and malayalam
  - licence update to 'GNU Gplv3 or later with font exceptions'
  - update spec file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - workarounds for weird bug (all so-files had names with "s="
    - except for sparc which has just "=" and IA64 which works)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't include xscanimage desktop entry - it's a gimp
    plugin. Doh. (part of #17076)
  - add tetex-latex as a build requirement


author: Tim Waugh <twaugh@redhat.com> 1.0.5-0.20010530
changelog:
  - sane-backends (sane-frontends is in a separate package now).
  - 2001-05-30 CVS snapshot.
  - include.patch no longer needed.
  - sg3timeout.patch no longer needed.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-6
changelog:
  - Re-apply the original 1.0.7-4 fix (oops):
    - Make sure to load SCSI modules if not already loaded (bug #59979).


author: Tim Waugh <twaugh@redhat.com> 1.0.8-0.20020522.1
changelog:
  - Update to CVS.  Release expected before the end of the month.
  - No longer need defaultincl or argv patches.


author: Tim Waugh <twaugh@redhat.com> 1.0.11-1
changelog:
  - Shipped libtool is broken; use installed script instead.
  - Remove files not shipped.
  - Fix some /usr/lib references.
  - 1.0.11.
  - Drop sane-sparc, errorchk, hp101, security patches.
  - Update rpath, docdir patches.
  - Use %find_lang.


author: Tim Waugh <twaugh@redhat.com> 1.0.13-6
changelog:
  - Ship libusb.usermap (from sane-backends-1.0.14) and a pam_console-aware
    libusbscanner script.
  - Fix epson.conf for Epson Perfection 2400 (bug #122328).


author: Tim Waugh <twaugh@redhat.com> 1.0.15-4
changelog:
  - Attempt to be more useful in libusbscanner by waiting a maximum of 30
    seconds.
  - Add a chcon call to libusbscanner (bug #140059).  Based on contribution
    from W. Michael Petullo.


author: Tim Waugh <twaugh@redhat.com> 1.0.15-7
changelog:
  - Updated libusbscanner script from Tomas Mraz, to use pam_console_apply.
  - Requires pam >= 0.78-2 for targetted pam_console_apply.


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.17-4
changelog:
  - split off generated documentation into separate subpackage to avoid conflicts
    on multilib systems


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.17-5
changelog:
  - buildrequire automake, autoconf, libtool (#178596)
  - don't require /sbin/ldconfig, /bin/mktemp, /bin/grep, /bin/cat, /bin/rm


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-10
changelog:
  - add pkg-config support, re-write sane-config to use pkg-config to avoid
    multilib problems with conflicting sane-config scripts


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-13
changelog:
  - split package into sane-backends, -devel, -libs, -programs to work around
    multilib issues (#135172)


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-1
changelog:
  - version 1.0.18
  - unify spec file between OS releases
  - update rpath patch
  - remove obsolete newmodels patch
  - use *.desc created udev rules


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-2
changelog:
  - remove unneeded programs subpackage
  - clean up docs vs. libs pkg split, mark documentation as %doc


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-9
changelog:
  - don't tweak device names in device configuration files anymore (obsolete)
  - let udev rules cope with SUBSYSTEM=="usb" (#244444)
  - tweak-udev-rules patch is udev-098 patch now


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-0.1.cvs20080206
changelog:
  - cvs snapshot 20080206
  - handle access control through hal/PolicyKit instead of udev (#405211)
  - drop obsolete badcode, logical_vs_binary, epson-cx5000, multilib, usb_reset,
    udev-symlink, udev-098 patches
  - update pkgconfig patch


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-4
changelog:
  - guard against out-of-bounds string access in fujitsu backend (#429338, patch
    by Caolan McNamara)


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-7
changelog:
  - remove ancient sane-devel obsoletes/provides
  - remove libs/doc/gphoto2 conditionals
  - fix build root
  - add arch-specific provides/requires (#436657)


author: Nils Philippsen <nils@redhat.com> - 1.0.19-13
changelog:
  - drop acinclude patch to not unnecessarily rebuild autoconf/libtool files
    which made libtool break builds on Rawhide
  - use "make DESTDIR=... install" instead of "%makeinstall"


author: Nils Philippsen <nils@redhat.com> - 1.0.19-15
changelog:
  - let sane-backends-devel require libjpeg-devel, libtiff-devel
  - update rpath patch (no longer touch sane-config.in as that is replaced
    anyway)
  - fix pkgconfig patch, bzip2 it


author: Nils Philippsen <nils@redhat.com> - 1.0.20-1
changelog:
  - version 1.0.20
  - rebase/remove patches
  - use %_isa for arch-specific requirements
  - place HAL fdi files in the correct place (#457645)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - update udev rules for Fujitsu fi-6110 device (#987890)
  - fix bogus changelog dates
  - fix source URLs


author: Tim Waugh <twaugh@redhat.com> 1.0.5-0.20010605
changelog:
  - CVS snapshot 2001-06-05.
  - Don't install xscanimage plug-in symlinks.  The old sane package never
    used to do this, and it looks confusing in gimp if you also have
    xsane-gimp (which is better) installed.  xscanimage works stand-alone
    anyhow.


author: Nils Philippsen <nphilipp@redhat.com> 1.0.14-3
changelog:
  - merge review (#226389):
    - add version info to obsoletes/provides
    - no config files in /usr
    - use %configure macro
  - add dist tag


author: Nils Philippsen <nils@redhat.com> 1.0.14-6
changelog:
  - don't require libieee2384-devel, libjpeg-devel but require fixed
    sane-backends-devel for building


author: Nils Philippsen <nils@redhat.com> - 1.0.14-9.2
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Martin Milata <mmilata@redhat.com> 0.3-1
changelog:
  - New upstream version
    - Bug fixes
    - Build fixes for older systems
  - Do not require libunwind on rhel


author: Martin Milata <mmilata@redhat.com> 0.4-1
changelog:
  - New upstream version
    - Added features needed by ABRT
    - Support for uReport2
    - Major C and Python API changes
  - Patch for python-2.6 compatibility


author: Richard Marko<rmarko@redhat.com> 0.8-1
changelog:
  - New upstream version
    - Added support for json de/serialization of reports and stacktraces.
    - Library version number increased, as the interface changed since the last release


author: Jakub Filak <jfilak@redhat.com> 0.9-1
changelog:
  - New upstream version
    - Enrich koops uReport data with koops text and kernel version.
    - Improve koops modules handling.


author: Jakub Filak <jfilak@redhat.com> 0.10-1
changelog:
  - New upstream version
    - Fix a segmentation fault in sr_rpm_package_uniq()
    - Respect kernel flavor when parsing package name
    - Parse backtrace without Thread header
    - Fix koops json output if there are no modules
    - Add support for multiple koops stacks


author: Jakub Filak <jfilak@redhat.com> 0.11-1
changelog:
  - New upstream version
    - Make all python objects hashable
    - Improve memory management in rpm module
    - Extend the list of normalized functions
    - Add command for debugging duphashes to satyr utility


author: Martin Milata <mmilata@redhat.com> 0.12-1
changelog:
  - New upstream version
    - JVM frames normalization
    - Add C++ symbol demangling
    - Unsigned overflow bugfixes
    - Fix malformed uReports for Java


author: Martin Milata <mmilata@redhat.com> 0.14-1
changelog:
  - New upstream version
    - Ported to elfutils-0.158 unwinder API
    - Frame fingerprinting disabled
    - Bugfixes


author: Jakub Filak <jfilak@redhat.com> 0.15-1
changelog:
  - New upstream version
    - uReport enhancements (DESKTOP_SESSION, auth_data, missing values)
    - Enhance the backtrace quality algorithm to tackle MiniDebuginfo
    - Support unusual Python and Java exceptions
    - Deal with infinite recursion in backtraces
    - Bugfixes


author: Martin Milata <mmilata@redhat.com> 0.16-1
changelog:
  - New upstream version
    - Add support for unwinding from core dump hook
    - Add support for Ruby uReports
    - Bugfixes


author: Ville Skyttä <ville.skytta at iki.fi> 6.5.2-1jpp
changelog:
  - First JPackage release.
  - Provides jaxp_parser2 though there's no DOM implementation in this AElfred.


author: Ville Skyttä <ville.skytta at iki.fi> 6.5.2-4jpp
changelog:
  - First public JPackage release.
  - Compile with build.xml by yours truly.
  - AElfred no more provides jaxp_parser_impl; it's SAX only, no DOM.
  - Fix shell script.


author: Ville Skyttä <ville.skytta at iki.fi> 6.5.2-5jpp
changelog:
  - Fix shell script (again).
  - Rebuild with -Dbuild.compiler=modern (saxon-fop won't build with jikes).


author: Ville Skyttä <ville.skytta at iki.fi> - 6.5.2-6jpp
changelog:
  - Rebuild for JPackage 1.5.
  - Split shell script to -scripts subpackage.
  - Use non-versioned jar in jaxp_transform_impl alternative, and don't remove
    it on upgrade.
  - Spec file cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:6.5.2-7jpp
changelog:
  - Non-versioned javadoc symlinking.
  - Include Main-Class attribute in saxon.jar.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:6.5.3-2jpp
changelog:
  - Apply two patches for known limitations from
    http://saxon.sourceforge.net/saxon6.5.3/limitations.html
  - Make the command line script use xml-commons-resolver if it's available.
  - Include man page for command line script.
  - Add patch to fix command line option handling and document missing options.
  - New style versionless javadoc dir symlinking.
  - Crosslink with local J2SE javadocs.
  - Add missing jdom-javadoc build dependency.


author: <kwenning@redhat.com> - 1.2.1-30
changelog:
  - init-patch updated
  - Rebuild against RHEL-6.9
    Resolves: rhbz#1375244

  -* Mon Apr 4 2016 <kwenning@redhat.com> - 1.2.1-9
  - use SBD_OPTS when calling sbd
    Resolves: rhbz#1313246


author: <kwenning@redhat.com> - 1.2.1-31
changelog:
  - init-patch updated
  - added CONFDIR & INITDIR for distro indep init
  - added stripped down manpage
    Resolves: rhbz#1375244


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-1
changelog:
  - Update to sblim-cmpi-fsvol-1.5.1
    Resolves: #694506
  - Add Linux_Ext4FileSystem class support
    Resolves: #663833


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-2
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921482


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-1
changelog:
  - Update to sblim-gather-2.2.3
    Resolves: #633991
  - Move init script to the correct place
    Resolves: #626769
  - Fix return codes from init script
    Resolves: #627919
  - Register Linux_MetricRegisteredProfile class under the root/interop namespace
    Resolves: #713174
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #712043


author: mrueckert@suse.de
changelog:
  - update to 0.4.2
    ind_helper.c, ind_helper.h:
    Bugs: 1203849 (side effect) made a lot of function arguments
    const in order to remove the cmpi-base warnings.
    added sblim-indication_helper-0.4.2_warnings.patch
    fixes a small warning regarding pointer size


author: <ratliff@austin.ibm.com> - 1.3.0-1
changelog:
  - updated buildrequires to require libcurl-devel rather than curl-devel
  - removed requires to allow rpm to automatically generate the requires
  - removed echo to stdout
  - removed paranoia check around cleaning BuildRoot per Fedora MUST requirements
  - changed group to supress rpmlint complaint
  - added chkconfig to enable sfcb by default when it is installed
  - added patch0 to enable 1.3.0 to build on Fedora 9


author: <ratliff@austin.ibm.com> - 1.3.2-1
changelog:
  - updated upstream version and added CFLAGS to configure to work 
  - around http://sources.redhat.com/bugzilla/show_bug.cgi?id=6545


author: <ratliff@austin.ibm.com> - 1.3.2-2
changelog:
  - updated spec file based on comments from Srini Ramanatha as below:
  - updated the Release line to add dist to be consistent with sblim-sfcc
  - updated the source URL


author: <ratliff@austin.ibm.com> - 1.3.4-3
changelog:
  - re-ordered the top so that the name comes first
  - added the la files to the package list
  - removed the smp flags from make because that causes a build break
  - updated spec file to remove schema and require the cim-schema package
  - change provides statement to cim-server as suggested by Matt Domsch
  - updated to upstream version 1.3.4 which was released Jun 15 2009


author: <ratliff@austin.ibm.com> - 1.3.4-4
changelog:
  - added build requires for flex, bison, cim-schema suggested by Sean Swehla
  - added sfcbrepos directive to post section


author: <srinivas_ramanatha@dell.com> - 1.3.4-5
changelog:
  - added the devel package to fit in all the development files 
  - Made changes to the initscript not to start the service by default


author: <praveen_paladugu@dell.com>- 1.3.4-9
changelog:
  - LocalInterfaceInvokeMethodFix: CHARS and string were handled the same.
  -  They are differentiated in this patch.
  - destroyThreadKey: Local sfcb connect was creating thread specific data
  -  associating a key to it. This won't get deleted resulting in crash
  -  of opwsman, sfcc and sfcb. This patch deletes that data.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: Viktor Mihajlovski <mihajlov@de.ibm.com> - 1.5.1-1
changelog:
  - Upgrade to version 1.5.1 (SSL V3 enforced, default CACERT).
  - Created Fedora/RH specific spec file.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)
    Resolves: #868905
  - Remove tog-pegasus requires
    Resolves: #745264


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-3
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239117


author: Shawn Wells <shawn@redhat.com> 0.1-6
changelog:
  - Corrected RPM versioning, we're on 0.1 release 6 (not version 1 release 6)
  - Updated RPM includes feedback received from DoD Consensus meetings


author: Shawn Wells <shawn@redhat.com> 0.1-7
changelog:
  - Corrected XCCDF content errors
  - OpenSCAP now supports CPE dictionaries, important to
    utilize --cpe-dict when scanning machines with OpenSCAP,
    e.g.:
    $ oscap xccdf eval --profile stig-server \
     --cpe-dict ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml


author: Shawn Wells <shawn@redhat.com> 0.1-8
changelog:
  - Significant copy editing to XCCDF rules per community
    feedback on the DISA RHEL/6 STIG Initial Draft


author: Shawn Wells <shawn@redhat.com> 0.1-14
changelog:
  - Formal RPM release
  - Inclusion of rht-ccp profile
  - OVAL unit testing patches
  - Bash remediation patches
  - Bugfixes


author: Shawn Wells <shawn@redhat.com> 0.1-15.rc3
changelog:
  - [bugfix] Updated rsyslog_remote_loghost to scan /etc/rsyslog.conf and /etc/rsyslog.d/*
  - Numberous XCCDF->OVAL naming schema updates
  - All rules now have CCE


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc5
changelog:
  - Point the spec's source to proper remote tarball location
  - Modify the main Makefile to use remote tarball when building RHEL/6's SRPM


author: Shawn Wells <shawn@redhat.com> 0.1-16.rc1
changelog:
  - [bugfix] RHEL6 no_empty_passwords remediation script overwrote
    system-auth symlink. Added --follow-symlink to sed command.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-1
changelog:
  - Upgrade to upstream 0.1.21 version
  - Drop C2S profile patch since it has been adopted upstream
  - Include datastream forms of benchmarks for Red Hat Enterprise Linux 6
    and Red Hat Enterprise Linux 7
  - Include the kickstart file for United States Government Configuration
    Baseline (USGCB) profile for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-2
changelog:
  - Re-implement nodev, noexec, and nosuid removable media OVAL checks
    (RH BZ#1185426)
  - Don't include the 'test' profile into the SCAP content (RH BZ#1199946)
  - Document USGCB profile kickstart availability for Red Hat Enterprise Linux 6
    in the scap-security-guide manual page (RH BZ#1133963)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-3
changelog:
  - Rebuild scap-security-guide RPM against openscap >= 1.0.9 in order the
    upstream SCAP Security Guide logo to be rendered properly in the generated
    HTML guide


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-4
changelog:
  - Update R / BR to lightweight openscap-scanner >= 1.0.10-2 package
    (RH BZ#1243396)
  - Update URL to point to official SCAP Security Guide GitHub repository


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-1
changelog:
  - Rebase to upstream 0.1.27 version (RH BZ#1267509, RH BZ#1284045,
    RH BZ#1270329, RH BZ#1250895, RH BZ#1270710, RH BZ#1223865)
  - Perform the spec changes necessary for the rebase:
    * Update path to remediation functions library, list of provided
    kickstart files, path to scap-security-guide(8) manual page, path
    to LICENSE file
    * Drop:
    - scap-security-guide-0.1.21-dev-shm-removable.patch
    - scap-security-guide-0.1.21-dont-include-the-test-profile.patch
    patches since they have been merged upstream
    * Replace:
    - scap-security-guide-0.1.21-document-kickstart-in-manual-page.patch
    with its updated:
    - scap-security-guide-0.1.27-document-kickstarts-in-manual-page.patch
    version to also document inclusion of new kickstart files for Red Hat
    Enterprise Linux 6 that are available in upstream's 0.1.27 release
    * Introduce the new scap-security-guide-doc subpackage (to contain the
    HTML formatted documents containing security guides that have been
    generated from XCCDF benchmarks present in the scap-security-guide package)
    * Include the datastream versions of Firefox and Java Runtime Environment
    (JRE) benchmarks


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-2
changelog:
  - Modify the upstream provided kickstart files for Red Hat Enterprise Linux 6
    to use internal scap-security-guide RPM package rather than upstream git
    repository copies (RH BZ#1251929)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-1
changelog:
  - Rebase to upstream 0.1.28 version
  - Start using consistent IDs for OVAL definitions (RH BZ#1250808)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-2
changelog:
  - Update URL to PCI DSS standard (latest version is v3.1 from April 2015)
  - Enhance title of CNSS No.1253 profile for Red Hat Enterprise Linux 6
    (RH BZ#1284045#c8)
  - Drop 'install_hids' rule from PCI DSS profile for both Red Hat Enterprise
    Linux 6 and 7 (since we don't have an OVAL check for this requirement)


author: Martin Preisler <mpreisle@redhat.com> 0.8.2-1
changelog:
  - Updated to new version
  - Added a workaround to the cmake invocation because of faulty openscap .pc file


author: Martin Preisler <mpreisle@redhat.com> 0.8.6-1
changelog:
  - Upgrade to upstream 0.8.6 version:
    https://fedorahosted.org/scap-workbench/query?milestone=0.8.6&status=closed
  - Require polkit


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines. 
  - Changed buildrequires fftw version 3  from fftw2


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Tomas Tomecek <ttomecek@redhat.com> - 0.7.2-6
changelog:
  - Resolves: rhbz#697530
  - ExcludeArch s390 -- tests fail there
  - ExcludeArch ppc -- package won't build there
  - ExcludeArch s390x -- package won't build there


author: Jindrich Novy <jnovy@redhat.com> 0.1-6
changelog:
  - %stack_name: initial part of stack prefix and name of
    meta package providing scriptlets
  - %stack_prefix: stack namespacing part to be prepended to
    original non-stack package name, can be used for Provides
    namespacing as well
  - %stack_runtime: run-time package name providing scriptlets
  - %stack_require: macro to define dependency to other stacks


author: Jindrich Novy <jnovy@redhat.com> 0.1-9
changelog:
  - introduce stack enablement tracking
  - introduce "stack_enabled" helper utility to let a stack
    application figure out which stacks are actually enabled
  - disallow running stacks recursively


author: Jindrich Novy <jnovy@redhat.com> 0.1-11
changelog:
  - avoid redefinition of %_root* macros by multiple
    occurence of %stack_package
  - make the Stack root path configurable


author: Jindrich Novy <jnovy@redhat.com> 0.1-14
changelog:
  - define %_defaultdocdir to properly relocate docs into
    a stack
  - document a way how to pass command to stack via stdin


author: Jindrich Novy <jnovy@redhat.com> 20120209-1
changelog:
  - fix minor bugs (#788194)
    - clear temp files
    - handle commands from stdin properly
    - run command even if ran as "scl enable SCL command" from already
      enabled SCL


author: Jindrich Novy <jnovy@redhat.com> 20120423-1
changelog:
  - update to the latest upstream scl-utils-20120423 (#713147)
   - filesystem ownership by meta package
   - add man page
   - fix memory leak when parsing commands from stdin
   - use more descriptive error message if /etc/prefixes is missing
   - do not prepend scl_* prefix to package names
   - unify package naming to <SCL>-package-version
   - add scl --list functionality to list available SCLs


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - Allow overriding values in macro scl_package (#957185)
  - Delete redundant argument from check_asprintf (#957183)
  - Enable all collections given as arguments, not just the first one (#949995)
  - Prevent collections to be enabled multiple times (#955669)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-9
changelog:
  - add scl_source script for intercollection dependencies (#874417)
  - updated macros in macros.scl-filesystem (#1029515, #1029516)
  - add delimiter between collections and command (#1029517)


author: Jan Zeleny <jzeleny@redhat.com> - 20120827-11
changelog:
  - reverted the last patch, as it breaks some collections. The revert
    is necessary for RHSCL compose, we are looking for other solutions.


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1071834)
  - added capability of dynamically registering and deregistering collections (#1099394)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20120927-25
changelog:
  - Creating filelist in build subdirectory instead of build directory.
  - Removing filelist before build.


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> 0.96-4
changelog:
  - Place libs in {_prefix}/lib/ and not in {libdir}; fixes x86_64 problems
  - Adjust minor bits to be in sync with python-spec-template


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 1.2.0-1
changelog:
  - Update to 1.2.0 to fix problems with Python 2.6 (#475903)
    (currently causing broken deps with other packages)


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - got a patch from rzm@icm.edu.pl to fix bug #10353
  - which caused screen to crash when copying to a file buffer


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Stuck an entry into the default screenrc file that forces
  - '^?' (backspace) to send '^H'.
  - Its an ugly fix for a termcap inheritance problem,
  - but it works, if anyone REALLY needs '^?' they can change it,
  - and I think we anger less people with this than the way it 
  - currently behaves. (Read: vi and emacs work now)
  - POST NOTE (Aug 15): emacs is NOT happy with ^H, BUT screen thinks
  - that this is what backspace is supposed to do, so we don't change it.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Patched the documentation to change the 'C-a C-\' to 'C-a \',
  - which is what is the real behaviour. this fixes bug #16103


author: Crutcher Dunnavant <crutcher@redhat.com> 3.9.9-3
changelog:
  - fixed screenrc path sed command; #50046
  - added ncurses-devel build dep; #49692
  - fix typo in specfile that broke screenrc, #49535


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 3.9.11
  - patch0/patch4 is not necessary anymore
  - do not compress man-pages/info-files in spec file
  - use configure to set telnet/screenrc instead of sed
  - add a hack to correctly install the new screenencodings
  - try to build up a better global /etc/screenrc instead of
    /etc/skel/.screenrc


author: Lon Hohberger <lhh@redhat.com> 3.9.15-6
changelog:
  - Disable system-wide read/write dir in /tmp; use user's ~/.screen
  directory for screen sessions. (#98320)


author: Lon Hohberger <lhh@redhat.com> 3.9.15-8
changelog:
  - Change screen's behavior to do the following: Attempt to use
  ~/.screen as the screen directory.  Failing that (ie, on files
  systems without Unix sockets support), try using /tmp/screen-<USER>.
  This prevents a user from creating /tmp/screens (which inherits
  the sticky bit from /tmp, preventing other users from using screen),
  as well as *tries* to be more secure.


author: Lon Hohberger <lhh@redhat.com> 4.0.1-1
changelog:
  - Import of 4.0.1 from upstream.
  - Removed screen-homedir hack introduced in 3.9.15-8.  (I
  was unable to reproduce the behavior described in #98320,
  and thus, the patch isn't necessary.)
  - Fix for buffer overflow from Timo Strainen (patch 7).
  - Fix for #111084 - we now require texinfo to build.
  - Comment out lines in screenrc causing screen to complain
  at startup.


author: Petr Rockai <prockai@redhat.com> - 4.0.2-6
changelog:
  - fix BR 136234 by carrying out the suggested change in /etc/screenrc
  - drop screen-4.0.2-logname.patch (merged into screen-4.0.2-screenrc.patch)
  - grant wish 130674 by adding a (commented out) caption statement to default
    screenrc


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Daniel Kopecek <dkopecek@redhat.com> 2.2-2
changelog:
  - added support for scrubing only allocated file extents (option -E)
  - added patch to fix scrub-freespace
    Resolves: rhbz#907173
    Resolves: rhbz#903890


author: Terje Rosten <terje.rosten@ntnu.no> - 0.9.5-1
changelog:
  - 0.9.5
  - remove patch now upstream
  - add patch to fix mising destdir in usr/Makefile
  - mktape and dump_tape has moved to tgtimg
  - add more docs


author: Hans de Goede <hdegoede@redhat.com> - 0.9.11-1.20091205snap
changelog:
  - Rebase to 0.9.11 + some fixes from git (git id
    97832d8dcd00202a493290b5d134b581ce20885c)
  - Rewrite initscript, make it follow:
    http://fedoraproject.org/wiki/Packaging/SysVInitScript
    And merge in RHEL-5 initscript improvements:
    - Parse /etc/tgt/targets.conf, which allows easy configuration of targets
    - Better initiator status checking in stop
    - Add force-stop, to stop even when initiators are still connected
    - Make reload reload configuration from /etc/tgt/targets.conf without
      stopping tgtd (but only for unused targets)
    - Add force-reload (reloads configs for all targets including busy ones)


author: Mike Christie <mchristie@redhat.com> - 1.0.4-0
changelog:
  - 587072 Fix tgt-admin logic error with shared accounts in targets.conf 
  - Rebase to 1.0.4 to sync fixes.


author: Mike Christie <mchristie@redhat.com> - 1.0.13-0
changelog:
  - Rebase to upstream 1.0.13.
  - Add upstream iser target. This requires setting the driver/lld
  type to iser. See targets.conf for example or the README.iscsi for
  a tgtadm example.
  - 616402 read-only support


author: Mike Christie <mchristie@redhat.com> - 1.0.13-1
changelog:
  - Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
  in 6.0 this patch was broken and linked against rdma libs, so
  the got brought in by yum. The new patch was not broken and did not
  force linking but yum/iser users are not expecting the depencies
  to be broken.


author: Andy Grover <agrover@redhat.com> - 1.0.24-4
changelog:
  - Add patches
    * 0001-iser-Fix-bidirectional-chap.patch
    * 0002-bs_aio-use-64bit-to-read-eventfd-counter.patch
    * 0003-iser-added-huge-pages-support.patch
    * 0004-iser-added-parameter-for-pool-size.patch
    * 0005-iser-limit-number-of-CQ-entries-requested.patch
    * 0006-iser-add-CQ-vector-param.patch
    * 0007-Rework-param_set_val-and-friends.patch
    * 0008-return-Reject-in-iscsi-login-text-failure.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-9
changelog:
  - Redo patches to use 'git format-patch' naming
  - Add more backported patches:
    * 0014-iser-Don-t-wait-until-iser_ib_init-to-init-list_head.patch
    * 0015-iser-cleaning-iser-ib-objects-on-lld-exit.patch
    * 0016-iser-Don-t-release-IB-resources-if-were-not-allocate.patch
    * 0017-Fix-possible-segfault-on-logicalunit-update.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-14
changelog:
  - Add patches for write and verify support, rhbz #1094084
    * 0021-DPO-Add-emulation-of-DPO-bit-for-READ-WRITE-VERIFY10.patch
    * 0022-Add-support-for-WRITEVERIFY10-12-16.patch
    * 0023-sbc-Add-residual-handling-for-WRITE6-10-12-16-and-WR.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-17
changelog:
  - Add patches to fix #1186090, #852532, #1136405.
    * 0026-iscsi-fix-leak-of-task-for-delayed-management-reques.patch
    * 0027-Set-ExpCmdSn-and-MaxCmdSn-in-ISCSI_OP_R2T.patch


author: Terje Rosten <terje.rosten@ntnu.no> - 1.00-2
changelog:
  - fix license, buildroot and group
  - remove hardcoded packager tag
  - use %configure macro
  - dist tag
  - make install on single line
  - fix files section
  - remove strange use of macros (name, version and release)
  - untabify


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.3.20100108git669c991.el6
changelog:
  - Build only on x86_64
  - Resolves: bz#554866
    (seabios should not be shipped on i686/ppc64/s390x, only x86_64)


author: Glauber Costa <glommer@redhat.com> - seabios-0.5.1-0.4.20100108git669c991.el6
changelog:
  - Go back to using 0xf0000000 for PCI memory start
  - Resolves: bz#571553
    (Backport 0.5.1-stable seabios.git fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.5.20100108git669c991.el6
changelog:
  - seabios-Fix-PkgLength-calculation-for-the-SSDT.patch [bz#571553]
  - Resolves: bz#571553
    (Backport 0.5.1-stable seabios.git fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.6.20100108git669c991.el6
changelog:
  - seabios-Set-CONFIG_S3_RESUME_VGA_INIT-to-1.patch [bz#567910]
  - Resolves: bz#567910
    (Make seabios configuration parameter CONFIG_S3_RESUME_VGA_INIT default to 1)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.8.20100108git669c991.el6
changelog:
  - seabios-smbios-avoid-counting-io-hole-as-ram.patch [bz#561290]
  - Resolves: bz#561290
    (`dmidecode' shows wrong memory which is assigned to VM.)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.9.20100108git669c991.el6
changelog:
  - seabios-Support-for-booting-from-virtio-disks.patch [bz#578752]
  - Resolves: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.10.20100108git669c991.el6
changelog:
  - seabios-Revert-Support-for-booting-from-virtio-disks.patch [bz#578752 bz#596881]
  - Resolves: bz#596881
    (Unable to install RHEL virtual machines)
  - Related: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.11.20100108git669c991.el6
changelog:
  - seabios-Support-for-booting-from-virtio-disks-reapply.patch [bz#578752]
  - seabios-zero-memory-before-use.patch [bz#578752 bz#596881]
  - Resolves: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)
  - Related: bz#596881
    (Unable to install RHEL virtual machines)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.12.20100108git669c991.el6
changelog:
  - seabios-do-not-advertise-hpet-to-a-guest-OS.patch [bz#602177]
  - Resolves: bz#602177
    (Failed to install rhel3.9-64 guest)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.13.20100108git669c991.el6
changelog:
  - seabios-smbios-allow-vendor-manufacturer-version-product-nam.patch [bz#593317]
  - seabios-smbios-set-bios-vendor-version-fields-to-Seabios-0.5.patch [bz#593317]
  - seabios-smbios-set-system-manufacturer-product-name-to-Red-H.patch [bz#593317]
  - seabios-smbios-set-Type-3-chassis-manufacturer-information-t.patch [bz#593317]
  - Resolves: bz#593317
    (seabios: SMBIOS data is different from that shown in RHEL5, even with -M rhel5.4.0)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.14.20100108git669c991.el6
changelog:
  - seabios-fix-resume-from-S3-with-QXL-device.patch [bz#603677]
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.15.20100108git669c991.el6
changelog:
  - seabios-remove-acpi-dsdt.hex-file-from-source-tree.patch [bz#603677]
  - Add BuildRequires: iasl
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-1.el6
changelog:
  - seabios-Update-version-to-0.5.1.patch [bz#606411]
  - Resolves: bz#606411
    (Update version info to match upstream 0.5.1)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-2.el6
changelog:
  - seabios-Support-USB-keyboard-auto-repeat.patch [bz#561324]
  - seabios-Support-USB-interrupt-schedules-on-OHCI-and-UHCI.patch [bz#561324]
  - Resolves: bz#561324
    (USB keyboard misbehaves with BIOS driver)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-3.el6
changelog:
  - seabios-add-write-support-to-virtio-blk.patch [bz#607500]
  - Resolves: bz#607500
    (An unexpected error occurs during winxp installation with virtio disk.)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1-1.el6
changelog:
  - Update to upstream seabios-0.6.1
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-1.el6
changelog:
  - Update to upstream seabios-0.6.1.2 (from git tag rel-0.6.1.2)
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)
  - Resolves: bz#668707
    (Guest moved used index from 0 to 580" occur when guest load to grub during reboot)


author: Luiz Capitulino <lcapitulino@redhat.com> - seabios-0.6.1.2-2.el6
changelog:
  - seabios-Create-separate-IPL-entry-for-each-CD-DVD-qemu-in-se.patch [bz#643688]
  - seabios-Provide-full-EDD-3.0-info-for-virtio-disk.patch [bz#643688]
  - seabios-Add-romfile_name-function.patch [bz#643688]
  - seabios-Add-strchr-function.patch [bz#643688]
  - seabios-Read-bootorder-file-into-memory.patch [bz#643688]
  - seabios-Add-romfile_loadfile-helper-function.patch [bz#643688]
  - seabios-Breakup-boot_setup-bootorder-code-into-its-own-funct.patch [bz#643688]
  - seabios-Support-qemu-based-romfile-wrappers-called-out-of-or.patch [bz#643688]
  - seabios-Track-the-source-of-each-optionrom-deployed.patch [bz#643688]
  - seabios-Populate-drive_g-desc-prior-to-calling-add_bcv_inter.patch [bz#643688]
  - seabios-Simplify-boot-ordering-by-building-an-inclusive-boot.patch [bz#643688]
  - seabios-Add-stubs-to-permit-devices-to-specify-their-boot-pr.patch [bz#643688]
  - seabios-Rename-add_ordered_drive-to-add_drive-and-use-in-map.patch [bz#643688]
  - seabios-Call-setup_translation-from-map_hd_drive.patch [bz#643688]
  - seabios-Simplify-keyboard-reading-code-in-the-interactive-bo.patch [bz#643688]
  - seabios-Don-t-access-drive_g-desc-from-boot_cdrom.patch [bz#643688]
  - seabios-Remove-Drives-global-struct-in-favor-of-independent-.patch [bz#643688]
  - seabios-Move-IPL.checkfloppysig-to-a-global-CheckFloppySig-i.patch [bz#643688]
  - seabios-Move-IPL.bev-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Move-IPL.fw_bootorder-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Minor-reorganization-of-some-of-the-boot_xxx-code-in.patch [bz#643688]
  - seabios-Remove-drive-desc-field.patch [bz#643688]
  - seabios-Use-bootprio_find_named_rom-for-ramdisk-and-cbfs-pay.patch [bz#643688]
  - seabios-Add-functions-for-boot-device-path-parsing.patch [bz#643688]
  - seabios-Extend-usb_pipe-to-track-the-controller-and-ports-of.patch [bz#643688]
  - seabios-Add-support-for-finding-the-boot-priority-of-USB-dri.patch [bz#643688]
  - seabios-re-nitialize-global-variables-on-reboot.patch [bz#643688]
  - seabios-Initialize-FloppyCount-and-CDCount-on-reboot.patch [bz#643688]
  - seabios-acpi-add-_RMV-control-method-for-PCI-devices.patch [bz#671544]
  - Resolves: bz#643688
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#671544
    (seabios: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-3.el6
changelog:
  - seabios-support-T13-EDD3.0-spec.patch [bz#673751]
  - seabios-lets-pretend-that-RTC-can-be-used-to-wakeup-from-S4.patch [bz#663240]
  - Resolves: bz#663240
    ([WHQL] pwrtest failed in the job "CHAOS-Concurrent Hardware And OS test")
  - Resolves: bz#673751
    (Provide EDD3.0 info in accordance with T13 spec.)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-4.el6
changelog:
  - seabios-increase-smp_mtrr-array-size-v2.patch [bz#727328]
  - Resolves: bz#727328
    ([RHEL6.1] - Windows2008 32-bit guest installation fails.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-5.el6
changelog:
  - seabios-do-not-advertise-S4-S3-in-DSDT.patch [bz#736522]
  - Resolves: bz#736522
    (Patch bios to remove S3/S4 for mitigate power management issues)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-6.el6
changelog:
  - seabios-usb-move-hid-initialization.patch [bz#733028]
  - Resolves: bz#733028
    (Failed to reboot guest due to "key event queue full")


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-7.el6
changelog:
  - seabios-add-40-48-bit-RAM-range-to-seabios.patch [bz#630975]
  - Resolves: bz#630975
    (KVM guest limited to 40bit of physical address space)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-8.el6
changelog:
  - seabios-Add-Local-APIC-NMI-Structure-to-ACPI-MADT-wa.patch [bz#750191]
  - seabios-fix-mptable-nmi-entry-was-Re-Qemu-devel-PATC.patch [bz#750191]
  - Resolves: bz#750191
    (Wrong LINT1/NMI ACPI and mptable descriptors)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-9.el6
changelog:
  - seabios-mask-interrupts-on-S3-resume.patch [bz#771946]
  - Resolves: bz#771946
    (mask interrupts on S3 resume)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-10.el6
changelog:
  - seabios-Remove-HPET-from-DSDT.patch [bz#786142]
  - Resolves: bz#786142
    (Windows guest shows HPET device, but qemu has none.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-12.el6
changelog:
  - seabios-usb-fix-boot-paths.patch [bz#782028]
  - seabios-usb-uhci-reorganize-wait_qh-into-wait_pipe.patch [bz#782028]
  - seabios-usb-uhci-Be-sure-to-wrap-pipe-iobase-in-GET_FLATPTR.patch [bz#782028]
  - seabios-usb-uhci-fix-race-against-host-controller.patch [bz#782028]
  - seabios-usb-ehci-Fix-races-with-controller-on-updates-to-QH.patch [bz#782028]
  - seabios-usb-msc-support-commands-without-payload.patch [bz#782028]
  - seabios-usb-msc-add-usb_msc_send.patch [bz#782028]
  - seabios-usb-msc-move-READ-CAPACITY-to-usb_msc_init-fix-off-b.patch [bz#782028]
  - seabios-usb-msc-pass-drive-to-setup_drive_.patch [bz#782028]
  - seabios-usb-msc-support-WRITE-commands.patch [bz#782028]
  - seabios-Extract-space-trimming-code-from-ATA-and-use-in-USB-.patch [bz#782028]
  - seabios-usb-msc-rename-INQUIRY-types.patch [bz#782028]
  - seabios-cdrom-use-TEST-UNIT-READY-to-detect-ready-medium.patch [bz#782028]
  - seabios-usb-msc-go-through-TEST-UNIT-READY-for-hard-disks.patch [bz#782028]
  - seabios-usb-msc-move-common-scsi-code-to-blockcmd.c.patch [bz#782028]
  - seabios-usb-msc-move-cdb-dispatch-to-block.c.patch [bz#782028]
  - seabios-scsi-get-physical-chs-geometry-from-mode-page-0x04.patch [bz#782028]
  - seabios-always-specify-virtio-blk-rather-than-virtio.patch [bz#782028]
  - seabios-virtio-pci-include-pci.h-and-pci_regs.h.patch [bz#782028]
  - seabios-virtio-pci-introduce-vp_init_simple.patch [bz#782028]
  - seabios-virtio-pci-allocate-vq-in-vp_find_vq.patch [bz#782028]
  - seabios-add-virtio-scsi-driver.patch [bz#782028]
  - Resolves: bz#782028
    ([RFE] virtio-scsi boot support in SeaBIOS)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-13.el6
changelog:
  - seabios-enable-S3-S4.patch [bz#761586]
  - Resolves: bz#761586
    (Patch bios to restore S3/S4)
  - Resolves: bz#804603
    (specfile: Put seabios version into banner)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-14.el6
changelog:
  - seabios-Halt-if-number-of-started-cpus-are-more-then-expecte.patch [bz#802033 bz#805168]
  - seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#802033
    (kvm guest hangs on reboot after cpu-hotplug)
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)
  - Resolves: bz#805168
    (seabios should not spin on cpu if started cpu count != cmos value at 0x5f)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-15.el6
changelog:
  - seabios-scsi-do-not-send-MODE-SENSE-except-to-QEMU-disks.patch [bz#801293]
  - seabios-Use-OUT-mode-for-all-zero-byte-scsi-transfers.patch [bz#801293]
  - seabios-virtio-scsi-Fix-virtio-scsi-after-cdb_is_read-change.patch [bz#801293]
  - seabios-ata-send-TEST-UNIT-READY-correctly.patch [bz#801293]
  - Resolves: bz#801293
    (fix boot from host or redirected USB pen drives)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-16.el6
changelog:
  - Restore seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-17.el6
changelog:
  - seabios-Replace-level-gpe-event-with-edge-gpe-event-for-hot-.patch [bz#808033]
  - Resolves: bz#808033
    (kvm guest doesn't see all hotplugged vcpus when 'virsh setvcpus 64 --live ' or hot-plugged devices when they added fast enough)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-18.el6
changelog:
  - seabios-Revert-enable-S3-S4.patch [bz#809797]
  - add S3/S4 seabios binary [bz#809797]
  - Resolves: bz#809797
    (Create a seabios binary that supports s3/s4)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-19.el6
changelog:
  - seabios-increase-f-segment-memory-pool.patch [bz#810471]
  - Resolves: bz#810471
    (boot fails while starting guest with sockets>62 and cores=1 and threads=1 option  and 10 virtio disks)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-19.el6_3
changelog:
  - seabios-report-real-I-O-APIC-ID-0-on-MADT-and-MP-table.patch [bz#851245]
  - seabios-allow-CPUs-to-have-non-contiguous-Local-APIC-IDs.patch [bz#851245]
  - Resolves: bz#851245
    (SeaBIOS: support non-contiguous APIC IDs)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-20.el6
changelog:
  - seabios-Add-romfile-code-to-assist-with-extract-integer-conf.patch [bz#831273]
  - seabios-Automatically-reboot-after-60-second-delay-on-failed.patch [bz#831273]
  - Resolves: bz#831273
    (RFE: reboot VM if no bootable device found)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-21.el6
changelog:
  - seabios-Revert-do-not-advertise-S4-S3-in-DSDT.patch [bz#827500]
  - seabios-acpi-generate-and-parse-mixed-asl-aml-listing.patch [bz#827500]
  - seabios-acpi-extract-aml-from-.lst.patch [bz#827500]
  - seabios-Fix-aml_name_string-to-recognize-block-name-modifier.patch [bz#827500]
  - seabios-Add-ACPI_EXTRACT_PKG_START-macro-parsing.patch [bz#827500]
  - seabios-acpi-add-ssdt-for-pci-hotplug.patch [bz#827500]
  - seabios-Get-system-state-configuration-from-QEMU-and-patch-D.patch [bz#827500]
  - Resolves: bz#827500
    (Config s3/s4 per VM - in seabios)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-24.el6
changelog:
  - revert-seabios-to-single-binary [bz#839674]
  - Resolves: bz#839674
    (Revert back to a single seabios binary once s3/s4 configuration is in)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-25.el6
changelog:
  - Fix data in the spec file
  - Related: bz#839674
    (Revert back to a single seabios binary once s3/s4 configuration is in)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-26.el6
changelog:
  - seabios-pci-use-u64-for-pci-address-space-math.patch [bz#771616]
  - Resolves: bz#771616
    (Too big value of QXL-VGA ram_size and vram_size cause VM paused (internal-error))


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-27.el6
changelog:
  - seabios-Use-coreboot-smbios-table-if-found.patch [bz#876250]
  - seabios-maininit-print-machine-UUID-under-seabios-version-me.patch [bz#876250]
  - seabios-display_uuid-fix-incomplete-check-after-the-loop.patch [bz#876250]
  - seabios-Minor-Separate-UUID-display-from-F12-boot-prompt.patch [bz#876250]
  - seabios-acpi-do-not-let-guest-OSes-enable-disable-the-SCI.patch [bz#846912]
  - seabios-boot-Support-halt-in-the-boot-order-to-prevent-defau.patch [bz#888633]
  - Resolves: bz#846912
    ([virtio-win][scsi] Disabling/enabling scsi driver stuck after S3/S4)
  - Resolves: bz#876250
    (Display 'SMBIOS GUID' at the BIOS post screen.)
  - Resolves: bz#888633
    (don't boot from un-selected devices)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-28.el6
changelog:
  - seabios-Add-pvpanic-device-driver.patch [bz#963312]
  - Resolves: bz#963312
    ([Hitachi 6.5 FEAT] (SeaBIOS) "virsh dump" support for automatic capturing and automatic actions after capturing.)


author: Jeff E. Nelson <jen@redhat.com> - 0.6.1.2-29.el6
changelog:
  - seabios-boot-Fix-boot-order-for-SCSI-target-lun-9.patch [bz#1129930]
  - Resolves: bz#1129930
    (fail to assign correct order for the boot device in seabios as we specified the bootindex in qemu-kvm cli(under the same virtio-scsi-pci))


author: Jeff E. Nelson <jen@redhat.com> - 0.6.1.2-30.el6
changelog:
  - seabios-boot.c-delay-exiting-boot-if-menu-key-is-ESC.patch [bz#1131530]
  - seabios-boot-allow-pressing-ESC-to-enter-the-menu.patch [bz#1131530]
  - Resolves: bz#1131530
    (Provide a platform agnostic approach to invoking the BIOS, boot menu, or other BIOS functions)


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.1
changelog:
  - Fedorification.
  - Added path to Source0.
  - Added URL.
  - buildroot -> RPM_BUILD_ROOT.
  - BuildReq libgnomeui-devel, eel2-devel, gpgme03-devel.
  - BuildReq gettext.
  - post Req GConf2.
  - post/postun Req scrollkeeper.
  - .la/.a removal.
  - cosmetic changes.


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.2
changelog:
  - Fixed file permission on source tarball.
  - Fixed Group.
  - Removed aesthetic comments.
  - Brought more in line with current spec template.


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.3
changelog:
  - Grabbed new copy os source from upstream.
  - Fixed path on Source0, to allow direct download.
  - BuildReq desktop-file-utils.


author: Seth Vidal <skvidal at linux.duke.edu> - 0.8-2
changelog:
  - added configure patch for it to build
  - disable gedit plugins until seahorse gets fixed to work with gedit 2.13+


author: Matt Domsch <mdomsch at fedoraproject.org> 2.21.3-1
changelog:
  - upgrade to 2.21.3
  - enable avahi integration
  - rpmlint cleanups: remove rpath, unneeded .so, tag config files


author: Seth Vidal <skvidal at fedoraproject.org> 2.21.4-2
changelog:
  - drop in seahorse-agent.sh to xinit - closes bug 427466 but will mean
    that seahorse agent will start if it is installed - even on kde or xfce
    desktops :(


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/seahorse-plugins/2.26/seahorse-plugins-2.26.1.news


author: Matthias Clasen <mclasen@redhat.com> 2.28.1-2
changelog:
  - Don't call problematic functions in an atexit handler,
    since this can lead to segfaults at session end (#524415)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 4.0.7
  - use "--without-included-regex"
  - do not gzip info pages in spec file, "TODO" is not present anymore


author: Jakub Jelinek <jakub@redhat.com> 4.0.8-3
changelog:
  - if not -n, print current buffer after N command on the last line
    unless POSIXLY_CORRECT (#112952)
  - adjust XFAIL_TESTS for the improved glibc regex implementation
    (#112642)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-2
changelog:
  - #185374:
    - Follow symlinks before rename (avoid symlink overwrite)
    - Add -c flag for copy instead of rename (avoid ownership change)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-4
changelog:
  - remove superfluous multibyte processing in str_append for UTF-8
    encoding (thanks Paolo Bonzini, #177246)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-8
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.2.1-8
changelog:
  - fix `--copy' option behaviour to unlink sedXXX temp files,
    clean-up the copy-option patch and merge it with the
    `-i/--in-place' docs/manpage patch (#709956)


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-23
changelog:
  - Add cmirrord policy
  - Fixes for accountsd policy
  - Fixes for boinc policy
  - Allow cups-pdf to set attributes on fonts cache directory
  - Allow radiusd to setrlimit
  - Allow nscd sys_ptrace capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-24
changelog:
  - Add support for /dev/vhost-net
  - Allow psad to read files in /usr
  - Allow systat to use nscd socket
  - Fixes for boinc policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-25
changelog:
  - Fixes for cmirrord policy
  - Dontaudit xauth to list inotifyfs filesystem.
  - Allow xserver to translate contexts.
  - Allow kdumpgui domain sys_admin capability
  - Allow vpnc to relabelfrom tun_socket
  - Allow prelink_cron_system_t to signal
  - Fixes for gitolite
  - Allow virt domain to read symbolic links in device directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-26
changelog:
  - Allow krb5kdc to write krb5kdc_principal_t file
  - Allow hald to send generic signal to dhcp client
  - Fix dev_rw_vhost interface
  - Add /var/run/abrt.socket label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-27
changelog:
  - Allow ftpd ipc_lock capability
  - Allow audisp-remote to getcap and setcap
  - Allow iscsid to read and write raw memory devices
  - Fixes for bitlbee policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-30
changelog:
  - Allow sysadm to run ncftool
  - Fixes for cobbler policy
  - Allow Network Manager to transition to ipsec_mgmt domain
  - Add label for /usr/libexec/nm-openswan-service
  - Add label for /dev


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-31
changelog:
  - Remove daemons dontaudit to search all dirs 
  - Add support for epylog
  - All all domains to read lib files
  - Allow denyhosts to send syslog messages
  - Allow mysql-safe setrlimit
  - Allow rpm to execute rpm_tmp_t
  - Allow dmesg to appen abrt_var_cache files
  - Fixed label for abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-32
changelog:
  - Allow sectool to connect to users over unix stream socket
  - Add label for /var/spool/abrt-upload
  - Add audio_home_t type for homedir/Music files
  - Allow aiccu to read network config files
  - Allow qpidd to setsched
  - Allow virt domains to manage svirt_image_t fifo files
  - Fixes for NM-openswan
  - Fixes for admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-36
changelog:
  - Allow netutils to read and write USB monitor devices
  - Fix label for /rhev
  - Add user_setrlimit boolean
  - Allow initrc to manage virt lib files
  - Add support for ebtables
  - Add label for /bin/mksh
  - Dontaudit aiccu sys_tty_config capability
  - Add httpd_setrlimit boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-37
changelog:
  - Redefine hi_reserved_port_t to include ports from 512 to 599 
  - Add label for /sbin/sushell
  - Fixes for munin plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-38
changelog:
  - Allow xdm_t to manage gnome homedir content
  - Allow s-c-firewall to read and write virtual memory sysctls
  - Fixes for logwatch policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-39
changelog:
  - Allow munin_system_plugin to read files in /usr
  - Do not audit insmod attempts to write virt daemon unnamed pipes
  - Allow corosync to read ricci lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-40
changelog:
  - Fixes for puppetmaster
  - Fix label for kadmin init script
  - Fixes for logwatch-mail policy
  - Allow arpwatch to request the kernel to load modules
  - Allow cron jobs to run with context of user that started them


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-41
changelog:
  - Allow logwatch_mail to read read the networking state information.
  - Add label for /usr/bin/dosbox
  - Allow systat sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-42
changelog:
  - Allow kdump to read information from the debugging filesystem
  - Update boinc policy
  - Fixes for logwatch-mail policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-43
changelog:
  - Allow ncftool to run brctl
  - Fixes for ricci-modclusterd policy
  - Allow uucpd to execute ssh client
  - Add label for dayplanner
  - Allow sandbox_xserver execstack


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-55
changelog:
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  - Add labeling for /root/.debug
  - Remove permissive from cmirrord domain
  - Dontaudit cmirrord_t sys_tty_config capability
  - Allow virtd to read from processes up to its clearance
  - Allow dovecot-deliver to create tmp files
  - Allow tor to send signals to itself
  - Handle /var/db/sudo
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #631564


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-56
changelog:
  - Allow smartd to read usr files
  - Allow devicekit-power transition to dhcpc
  - Add label for /etc/timezone
  - Remove transition from unconfined_t to iptables_t
  - Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
  Resolves: #634945
  - Allow nrpe to send signal and sigkill to the plugins
  - Fix up xguest to allow it to read hwdata and gconf_etc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-57
changelog:
  - Allow system_mail_t to append ~/dead.letter
  - Allow mount to communicate with gfs_controld
  Resolves: #636683
  - Dontaudit hal leaks in setfiles
  - gpm needs to use the user terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-58
changelog:
  - Fix httpd_setrlimit boolean to allow sys_resource capability
  - Fix label for ip6tables.save
  - Allow ssh_t to exec ssh_exec_t
  - Dontaudit init leaks
  Resolves: #639083


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-59
changelog:
  - Allow cdrecord setrlimiit
  Resolves: #615731
  - Define debugfs_t as mountpoint
  Resolves: #646856
  - Fix fenced_can_network_connect boolean description
  Resolves: #650136
  - Add label for /var/run/faillock
  - Add dirsrv and dirsrv-admin policy
  Resolves: #655206
  - Fixes for cobbler policy
  - Allow certmonger to manage dirsrv config
  Resolves: #658591


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-60
changelog:
  - Fixes for certmonger
  - Backport passenger policy
  - Allow run_init to read console_device
  Resolves: #657568
  - Add label for /var/lib/dkim-milter
  - Fixes for munin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-61
changelog:
  - Fixes for passenger policy
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  Resolves: #663054


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-64
changelog:
  - Add namespace policy
  - Allow udev to stream connect to init
  Resolves: #667370
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-69
changelog:
  - Make Spacewalk to work with selinux-policy
  Resolves: #673112
  - Fix /root/.ssh labeling
  Resolves: #637109	
  - Fix for the spec file


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-71
changelog:
  - Allow cmirrord to create physical disk devices in /dev
  - Allow cluster domains to use the system bus and send each other dbus messages
  - Add label for /dev/tgt


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-74
changelog:
  - Add virt_home_ type files located in ~/.libvirt directory
  - virt creates monitor sockets in the users home dir
  - Allow lvm setfscreate
  Resolves: #680388
  - Make lsusb and lsblk working on MLS
  Resolves: #680426


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-75
changelog:
  - Allow svirt to manage sock_file in ~/.libvirt directory
  - Allow sysamd to run udev in udev_t domain
  - Remove capability from svirt
  - Add lvm_exec_t label for kpartx


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-76
changelog:
  - Fixes for ssh_keygen policy
  - Allow sysadm_t to run ssh-keygen in ssh_keygen_t domain
  - Backport spice vdagent policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-79
changelog:
  - Fixes for sandbox/seunshare policy 
  Resolves:#684919
  - Allow ssh_keygen_t dac_override
  - Add matahari policy 
  - Add label for /etc/securetty 
  - Fixes for pirahna-pulse policy
  - Fixes for radius, samba, dirsrv, kerberos policies 
  - Allow console login on MLS
  - Fix file context to show several labels as SystemHigh
  - Add port definition for dogtag, matahari, movaz ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-80
changelog:
  - Add support for a new cluster service - foghorn
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - Add support for vdsm
  - Allow syslogd setrlimit, sys_nice
  Resolves: #689431
  - ipsec_mgmt_t wants to cause ipsec_t to dump core, needs to be allowed


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-81
changelog:
  - Add allow_sysadm_manage_security boolean
  - Add label for /dev/dlm.*
  - Allow auditadm_screen_t and secadm_screen_t dac_override capability
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Fixes for nslcd policy
  Resolves: #693368
  - Allow qpidd to manage pid and lib matahari files
  - Allow rgmanager to send the kill signal to all users


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-83
changelog:
  - Add label for matahari-broker.pid file
  - Allow foghor to read snmp lib files
  - Make sysadm security admin
  - Fix ssh_sysadm_login boolean
  Resolves: #694551


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-95
changelog:
  - Allow secadm to manage selinux config files
  - Allow apache to use jboss management port
  - Add fenced_can_ssh boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-97
changelog:
  - Allow postfix-pickup to write files and directories regardless of their MCS category set.
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  Resolves: #705772


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-104
changelog:
  - Allow puppet to Check access to the passwd executable
  - Add label for /var/www/html/logs directory
  - Add label for /var/lib/squeezeboxserver directory
  - Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-107
changelog:
  - Make new domains as unconfined
  - Add abrt_handle_event_t domain for ABRT event script
  - Add selinux_mysql man page
  - Fix httpd selinux man page
  - Fix interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-108
changelog:
  - Add squid man page
  - Add git man page
  - Make puppet working with passenger
  - Allow procmail to execute hostname command


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-110
changelog:
  - Add label for passwd.adjunct
  - Allow pulse to execute  /usr/sbin/fos
  - Fix labeling for passenger
  - Add selinux policy support for IP-in-SSH tunnelling
  - Allow sulogin to write /dev/pts/0 in single user mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-111
changelog:
  - Add git_cgit_read_gitosis_content boolean
  - Add support for cma port
  - Add virt_use_sanlock boolean and make sanlock working together libvirt
  - Make passenger and puppet working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-112
changelog:
  - Fix description of allow_* booleans
  - Allow sanlock to manage libvirt lib files
  - Fix bug in lsassd policy
  - Add label for /var/run/luci
  - move port 18001 from http_port_t to jboss_management_port_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-114
changelog:
  - Fix httpd_selinux man page
  - Add corenet_packet() interface
  - Add support for Clustered Samba commands


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-115
changelog:
  - Add unlabelednet policy module
  - Add chrome role for xguest
  - Fix for vdagent policy
  - Add fix to allow confined apps to execmod on chrome


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-128
changelog:
  - Add cronjob_role for sysadm
  - Change label for /var/spool/cron
  - Add interface to allow exec of mongod


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-131
changelog:
  - Fixes for rhev policy
  - Make ssh-keygen as unconfined domain
  - Add sanlock_use_nfs boolean
  - Add ssh_dontaudit_search_user_home_dir interface
  - namespace_init and MLS fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-132
changelog:
  - Fixes for nagios policy
  - Add a new interface for libra
  - Fix spec file to be testing SELinux status correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-134
changelog:
  - Backport ABRT policy
  - Backport matahari policy
  - Add interfaces for libra
  - Add jboss_dubeg port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-135
changelog:
  - Add fixes for qpidd policy, support for tmpfs_t
  Resolves:#769352
  - Add fixes for mcelog policy, for new location of pid,sock files
  - Make sendmail and postfix working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-136
changelog:
  - backport mozilla_plugin policy
  - backport sandbox policy to support nacl
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow system cronjobs to read kernel network state
  - Allow corosync to read and write to qpidd shared memory
  - More fixes for qpidd
  Resolves:#769352
  - Add policy for quota-nld


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-137
changelog:
  - Remove nfs_* booleans because nfs runs in kernel_t domain
  Resolves:#760405
  - Add httpd_manage_ipa boolean
  - Dontaudit sys_ptrace for matahari-netd
  - Allow vhostmd to getattr on virtd
  - Allow snmpd to connect to the ricci_modcluster
  - qpidd should be allowed to connect to the amqp port


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-138
changelog:
  - Add new policy for cfengine
  - Add new policy for sge gridengine jobs
  - Add support for nagios eventhandlers
  - Make system cron jobs run in the proper domain
  - Add policy to support privsep ssh process running in user domain
  - Add fixes relates to nss/FIPS
  - Add new rsync_use_* booleans
  - Allow qpidd to connect to matahari ports
  - Allow sysadm_u to read system_r in MLS
  - Remove razor labeling because we treat razor with spam policy
  - Add support for matahari-qmf-sysconfig-consoled, clean up matahari policy
  - Fixes for interfaces
  Resolves:#791294
  Resolves:#796351


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-139
changelog:
  - Allow nfsd_t to getattr on all fs
  Resolves:#738628
  - Make mailx working together with cron without unconfined module
  - Allow sssd sys_resource capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-140
changelog:
  - Add additional fixes for nagios handlers
  Resolves:#749311
  - Add 7600 and 4447 as jboss_management ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-141
changelog:
  - Add man pages for apps, services
  - Allow nagios to use user terminals
  Resolves:#782325
  - Add support for unconfined certmonger scripts
  - Add support for matahari-qmf-rpcd service
  - Allow chsh to use PAM
  - Allow rpc.statd to execute sm-notify which has bin_t label
  - Make sure files which are created by /usr/bin/R get proper label in home directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-142
changelog:
  - Fixes for man pages
  - Allow rpcd to execute sm-notify
  Resolves:#802247
  - Add support for matahari-qmf-rpcd
  - Add support matahari vios-proxy-* apps
  - Allow quota-check to create files on nonxattr filesystems
  - Add support for ~/Maildir
  - Allow unconfined dyntransition
  - Fixes for certmonger_unconfined and certmonger
  - Fixes for certmonger policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-144
changelog:
  - Fixes for cfengine policy
    * changed labeling for /var/cfengine/outputs from var_log to cfengine_var_log_t
    * re-arranged policy to use template and cfengine_domain 
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Bacport libvirt-qmf policy for Fedora
  - Remove labeling for postmaster.pid file 
  - Fix for virtual network which looses network connection
  - Add man pages for SELinux users
  - cgconfig needs to use getpw calls
  - Allow lvm and fsadm to write sysfs_t
  - Allow rpc.mounted to list user tmp files
  - Fix permissivedomains declarations
  Resolves:#806220
  - Fix spec file to instal minimum policy properly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-146
changelog:
  - Add sysadm_secadm policy module to separate in secadm_r, sysadm_r
  Resolves:#787413
  - Fixes for libvirt-qmf
  - Add label for package-cleanup 
  - Add support for zfs
  - Make cfengine domains as unconfined
  Resolves:#753184
  - Allow sshd_t to dyntransition to sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-156
changelog:
  - Allow user to login using ssh with random MLS range
  Resolves:#837815
  - Allow virtd_t to create mtab with the proper labeling
  - Add support for check_icmp nagios plugin
  - Make chkconfig working on MLS for sysadm_t
  - Allow dovecot to manage mail_home_rw_t
  - Add support for fsav
  - Allow clamscan to use amavisd-new
  - Add support for rhnsd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-157
changelog:
  - Allow procmail to manage mail home data
  - We should only block MCS node_bind on mcsuntrustedproc
  - Fixes for amavis
  Resolves:#837815


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-159
changelog:
  - Allow munin_stats to read munin logs
  - Allow updpwd to write all MLS levels
  - Make piranha_web_t as nsswitch domain
  - Allow munin mail plugins to read exim log files
  - Backport sanlock policy from Fedora
  Resolves:#831908
  - Allos dac_override, sys_nice for sasl
  - Add labeling for /var/named/chroot/usr/lib64
  - Add support for gitolite3
  - Allow confined users to send mail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-160
changelog:
  - Add named_bind_http_port boolean
  - Add port definition for 8953/tcp
  - spice-vdagent(d)'s are going to log over to syslog
  - Fix labeling for /usr/sbin/rpc.* binaries to label them as rpcd_exec_t
  - Add sensord policy
  - Allow oddjob_mkhomedir to write on nfs share
  - Add virt_bridgehelper policy
  - Allow clamd to write/delete own pid file with clamd_var_run_t label
  - Add support for wdmd tmpfs
  - Add initrc_domain attribute 
  - Add bcfg2 policy
  - Modify ssh_chroot_rw_homedirs boolean to allow manage apache system r/w content if for /var/www as home
  - Add pacemaker policy
  - Allow snmpd to connect to corosync over unix stream socket
  - Allow crontab to read NFS
  - Add new type selinux_login_config_t for /etc/selinux/TYPE/logins directory and allow sssd to manage files in this directory
  Resolves:#843814
  - Add labeling for /opt/sartest directory
  - Add initrc_domain attribute to allow domains to work as initrc_t domain
  - heartbeat should be running as rgmanager_t instead of corosync_t
  - Add glusterd policy
  - Add l2tpd policy
  - Add numad policy
  Resolves:#801493


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-162
changelog:
  - Add pkcslotd policy
  Resolves:#851483
  - Allow cyrus-imapd init script to write cyrus data
  - Fix labeling for /dev/twa


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-166
changelog:
  - More fixes for openshift and add support for opeshift labeling instead of stickshift
  - /etc/selinux/<type>/logins should be owned by the policy package
  Resolves:#855889
  - Add labeling for /var/tmp/DNS_25      
  - Allow postfix_local_t to execute files on nfs_t
  - Add fixes for kadmind
  - Add rhnsd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-167
changelog:
  - Allow postfix_locat to search stickshift lib files
  - Dontaudit sys_ptrace cap for httpd if httpd_stickshift is on
  - Allow openshift domains change process identity
  - SELinux is reporting that openshift domains are trying to write into their proc directories
  Resolves:#855889


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-168
changelog:
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - pppd wants to read /usr/share/radiusclient-ng/dictionary
  - Add ssh_chroot_manage_apache_content and ssh_chroot_full_access booleans
  - snmp wants to also manage snmp dirs for amavisd-snmp support
  - Add labeling for virsh_fenced
  - Allow nmbd_t to crate dirs with samba_var_t labeling
  - Add clamscan_can_scan_system boolean
  - Allow all domains to getattr on prelink_exec_t
  - Add postgresql_can_rsync boolean
  - Allow pulse to domain transition to iptables
  - Allow nslcd sys_nice capability
  - Allow corosync to connect to saphostctrl ports
  - Allow passwd to read generic /tmp dirs
  - Add policy for qemu-qa
  - Add new antivirus policy module for antivirus programs
  Resolves:#838260


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-169
changelog:
  - Fix spec file to silent restorecon errors on files which do not exist
  - Fix passenger backport
  Resolves:#839831


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-172
changelog:
  - Update httpd_runstickshift boolean
  - Remove transition from sysadm_t to fsadm_t
  Resolves:#852763
  - Make vmware-host as unconfined domain
  - Allow all domains to read usr_t
  - Fix labeling for all log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-173
changelog:
  - syslogd_t now support kerberos
  Resolves:#867001
  - Fix openshift labeling for binaries
  - Allow passwd to read usr_t links/files
  - Add labeling for /var/lib/sss/mc


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-174
changelog:
  - openshift user domains wants to r/w ssh tcp sockets
  - Allow mount to relabelfrom unlabeled file systems
  - Additional fix for syslog/kerberos
  Resolves:#867001


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-175
changelog:
  - Add initial openswitch policy. Domains are unconfined
  Resolves:#845417
  - Add labeling for /usr/sbin/mcollectived
  - Allow openshift domains to read /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-177
changelog:
  - Allow dnsmasq to manage virt run files
  Resolves:#843543
  - Allow setroubleshootd to read /proc/irq
  - Backport fixes for virt_use_* booleans
  - Allow qemu-ga to use ttyS0
  - Allow dhcpc to manage dhclient-eth0.pid labeled as virt_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-178
changelog:
  - Fix labeling for OpenShift binaries
  - Add samba_portmapper boolean and labeling for /var/run/samba
  Resolves:#871816
  - Backport dspam policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-180
changelog:
  - Allow openshift domains to execute tmux
  - Allow wdmd to getattr on tmpfs_t
  Resolves:#831908
  - Add labeling for /var/nmbd/unexpected
  - Allow winbind to create samba pid dir
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes for syslogd
  - Fenced communicates with libvirt
  - Fix labeling for libflashplayer.so
  - Add labeling for /var/lib/zarafa-webapp
  - Allow dspam to read localization
  - Add labeling for Z-Push
  - Allow rpc.svcgssd to search nfsd_fs_t dirs
  - Allo cgred to read all sysctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-181
changelog:
  - Allow kdumpgui to read/write to zipl.conf
  Resolves:#877108
  - Add /proc/numactl support for confined users
  - Make proc_numa_t an MLS Trusted Object
  - Make ccs_tool and cman_tool labeled as rgmanager_exec_t
  - Fix cron_admin_role interface
  - Add support for opendkim


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-182
changelog:
  - Fix labeling for /var/named/chroot/usr/lib
  Resolves:#843732
  - Allow amavis to stream connect to snmpd
  Resolves:#839250
  - Additional fixes for log files related to logrotate
  - Allow all domains to read base etc_t file type
  - Allow logrotate to list root home directory
  - Fix labeling for /var/log/z-push
  - Allow cyrus init scriptu to manage cyrus data files
  - Dontaudit leaks of locks or generic log files to systemprocesses
  - Allow ricci-modrpm to send syslog msgs
  - Allow munin to have kill capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-184
changelog:
  - Add support for tcp/10026 port as dspam_port_t
  - Allow dspam to connect/bind to dspam_port_t
  - Add uconfined_munin_plugin_exec_t for all plugins which are not covered by munin plugins policy
  - Allow domains that can read sssd_public_t files to also list the directory
  Resolves:#881413
  - Allow programs to run in fips_mode using fips_mode boolean
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow sshd to look into the mysql home directory for authorized_keys
  - Make rsync as homemanager which allows to manage CIFS/NFS	  
  -


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-185
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  -  Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Allow winbind to manage samba_var_t sock files
  - Allow git-daemon and httpd to serve the same dir
  Resolves:#883143
  - Allow dac_override for nrpe


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-196
changelog:
  - Backport openshfit fixes
  - Allow cgred to use notify 
  Resolves:#913673
  - Allow mount to transition to gluster 
  - Fix tuned policy to make it working with the lastet tuned package


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-197
changelog:
  - Fix /etc/dhcp labeling
  - Back port openshift fixes
  - Make dirsrv-admin server restarted from console working
  - Add ftpd_use_fusefs boolean
  Resolves:#913673
  - openshift_cron_t needs dac_override


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-198
changelog:
  - Allow dirsrv-admin script to exec apache modules
  - Add labeling for dirsrv-admin lock file
  - Add labeling for /var/lib/owncloud
  - Add labeling for /var/www/moodle
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-199
changelog:
  - qemu-ga needs to execute scripts in /usr/libexec/qemu-ga
  - Allow openshift_cron_t to manage openshift_var_lib_t sym links
  - Allow dovecot-auth to execute bin_t
  - Allow mysqld-safe to execute bin_t
  - Allow procmail to manage user tmp files
  - Allow sanlock to kill svirt_t
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-203
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#966106
  - Make openshift_initrc_t as initrc domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-204
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-205
changelog:
  - Remove domtrans for quantum which needs to stay in the same domain
  - Allow qemu to manage nova lib files
  - Allow hald to read svirt images
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-217
changelog:
  - Fix virtd_lxc_t to be able to communicate with hal
  - Allow NM and wireless working together
  Resolves:#1009661
  - Allow my_print_default to read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-218
changelog:
  - Add support for /var/log/qemu-ga directory
  - Regenerate man pages for domains
  Resolves:#880728
  - Allow setgid capability for ipsec_t
  - Allow ipsec to send signull to itself
  - Add tcp/9000 as http_port_t
  - Allow dirsrv_t to create tmpfs_t directories
  - Fix git_role() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-219
changelog:
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Allow tzdate to unlink etc_t lnk files
  - Allow jabberd to connect to jabber_interserver port
  - Fix description for logging_syslog_can_read_tmp boolean
  - Update ipsec rules and labels
  Resolves:#986883
  - Allow pegasus transition to mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-220
changelog:
  - Allow cobblerd to stream connect to MySQL
  - Allow cobblerd to execute ldconfig
  - Allow openstack-glance to access to amqp
  - Add labeling for /var/run/charon.*
  - Make munin "df" plugins working
  Resolves:#908095


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-221
changelog:
  - Fix /var/run/charon labeling
  - More fix for strongswant and ipsec.secretes
  - Allow sandbox domain to use inherited user terminals


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-232
changelog:
  - Add more fixes for zabbix-agent
  - Fix neutron labeling
  - Allow all domains to read sysfs_t due to glibc change
  - Allow ping to read inherited zabbix tmp files
  Resolves:#1039851
  - Allow hostname to read/write inherited rpm script files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-233
changelog:
  - Add support for OpenShift syslog plugin
  - Allow snmpd to getattr on removeable and fixed disks
  - Add shmemnetgrp and getnetgrp to access_vectors
  Resolves:#1025758


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-235
changelog:
  - Add support for nginx
  Resolves:#1045041
  - Change shutdown_t to also read wtmp
  - Added support for hypervkvpd
  - Add preupgrade policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-236
changelog:
  - Added conman policy
  - Added label for conman port
  - Added support for mip6d policy
  - Added support for isns
  - Added rtas_errd policy
  - Added support for keepalived policy
  - Add label samba_spool_t for /var/spool/samba
  - Allow httpd_t to bind preupgrade port if httpd_run_preupgrade boolean is enabled
  - Allow openshift_cron_t to append to openshift log files
  - dontaudit sudo domains listing /dev
  - Allow read/write to login records
  - Allow auditctl getattr access on blk_file
  - Allow nova-scheduler to read utmp
  - Added stapserver policy
  - Added support for freeipmi services
  - Added lsm policy
  - Added support for pcp service
  - Added chown capability to dhcpd_t domain
  - Add boolean to allow openshift domains nfs access
  - Allow abrt to read man pages and getcap
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Dontaudit smbd_t sending out random signuls
  - Backport all zabbix changes
  - Allow mcelog write access to nscd socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-237
changelog:
  - Fixes for mirrormanager
  - Fix swift interface
  - Allow lsmd_plugin_t to read localization
  - Allow keepalived read snmp libs, Allow keepalived connect to agentx port
  - Allow keepalived read localization
  - Added setuid capability to lsm service
  - Added some swift rules to rsync policy
  - Remove duplicate line entry in .fc
  - Do not send/receive packets when ftpd_use_passive_mode is disabled
  - Add mirrormanager policy to RHEL6 Fixes Bug 1042864
  - Update permissivedomains by mirrormanager
  - Add mirrormanager policy
  - Added support for openwsmand
  - Added policy for swift
  - Added support for sblim
  - label also 64bit heartbeat libs
  - Allow kill capability on varnish
  - Added haveged policy
  - Add missing kernel_rw_stream_socket_perms
  - Label tcp/udp port no. 3052 as apc, Allow apcups to bind on apc port
  - Allow logwatch stream connect to courier service
  - Fix mcelog policy
  - Back port rsyslog fixes from RHEL7 for rsyslog7
  - Fix whitespace
  - Add support for osad
  - Fix automount policy
  - Added policy for bacula
  - add radvd_read_pid_files inteface
  - Add missing syslog-conn port
  - Allow httpd_t write to kernel keyring
  - Allow httpd_sys_script_t domain to send system log messages 
  - Allow passwd_t to write to ipa trusted user files in /tmp 
  - Boolean to allow mcelog use all the user ttys 
  - Allow icecast to use any tcp ports 
  - Define oracleasm_t as a device node 
  - Allow sudomain to getattr of kernel interface
  - Add squid directory in /var/run
  - Allow automount read nfs symlinks
  - Allow asterisk to connect to the apache ports
  - allow abrt to read mcelog log file 
  - allow udev to search radvd files under the /run dir 
  - allow auditctl getattr access on blk_file 
  Resolves:#1080555
  - Allow ssh to manage nfs links


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-238
changelog:
  - Allow domain to read an append inherited tmp files
  - Dontauit leaks of var_t into ifconfig_t
  - Allow fsdaemon_t to read/write device_t char files 
  Resolves:#1035363
  - Remove sblim_filetrans_named_content in RHEL6
  - We don't have systemd in RHEL6.
  - one more fix for bacula_admin()
  - fix bacula_run_admin()
  - Remove shadow_t label from /etc/security/opasswd 
  - Fix logrotate_use_nfs boolean
  - Allow userdom to read inherited users files in /tmp 
  - Allow certmonger_t read puppet libs
  - Allow in logging_inherit_append_all_logs also ioctl and append
  - Label pacemaker_remoted as cluster_exec_t
  - Tag some conman exec files
  - Allow conman to read localization
  - Should use rw_socket_perms rather then sock_file on a unix_stream_socket
  - Added conman fixes
  - Allow apache to manage passenger sock_files
  - Allow bacula to bind on 9103 tcp port
  - Allow postfix stream connect to antivirus
  - Allow osad to read localization


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-239
changelog:
  - Fixed lsmd_plugin_t
  Resolves:#1111619
  - Added glusterd_conf_t alias glusterd_etc_t
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory 
  Resolves:#982160
  - Label zabbix-proxy files
  Resolves:#1018211
  - allow sshd to write to all process levels in order to change passwd when running at a level
  Resolves:#837616
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range 
  Resolves:#837616
  - Rename quantum port to neutron 
  Resolves:#1024927
  - Added zarafa_read_lib_files interface
  - Added dont audit list non security files in xdm_t 
  Resolves:#1030760
  - Added more fixes relates to 
  Resolves:#1060656
  - Added dontaudit rules to xdm_t 
  Resolves:#1030760
  - Allow procmail to run zarafa-degent 
  Resolves:#1060656
  - Add userdom_user_application_domain in xauth 
  Resolves:#1013832
  - Allow dmesg read raw memory 
  Resolves:#1030762
  - Allow communication between postfix and cyrus 
  Resolves:#1057307


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-240
changelog:
  - Allow nagios to stream connect to postgresqlBZ #1015708
  Resolves:#1015708
  - Allow hypervkvp read localization
  - Fix postfix_admin()
  - Add lldpad policy for MLS


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-241
changelog:
  - Remove deny_ptrace from interfaces
  - Add setpgid procces to mip6d_t
  - Added support for hv_vss_daemon
  - Allow keepalived also managed snmp lib dirs
  - Allow chroot_user_t unconfined shell domtrans
  Resolves:#1082183
  - Label swift-object-expirer as swift_exec_t
  - Allow keepalived manage snmp files, dontaudit list tmp files
  Resolves:#1053450
  - Additional fix for calling postfix interfaces in sysadm.te to make postfix_admin() working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-243
changelog:
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-244
changelog:
  - Add support for vdsm 
  Resolves:#1064270
  - Allow userdomain role to access prelink_mask_t
  - Rename module glusterfs to glusterd 
  Resolves:#1052206
  - Allow gfs_controld_t to getattr on all file systems 
  Resolves:#1110886
  - Allow apache to manage pid sock files 
  Resolves:#1042864
  - Bind TCP/UDP sockets to the nfs port
  - The /var/run/tuned directory is not a regular file 
  Resolves:#1117685
  - Allow utilize winbind for authentication to AD. 
  Resolves:#1084177
  - Dont audit access on /etc/init.d/mcollective for kdump_t
  - FIx labeling in networkmanager.fc
  - Allow passenger to connect to MySQL
  - ALlow passenger to read locales
  - Dontaudit relabelfrom/relabelto for all variablefiles for prelink_map_t
  - Change all var_lib_t types to have also variablestatefile attribute
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-245
changelog:
  - Allow setpgid for all sandbox domains.
  - Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
  - One more fix for osad.te
  - Back port osad changes from RHEL7.
  - Rename svirt_lxc_file_t to svirt_sandbox_file_t.
  - Label nginx init script as httpd_initrc_exec_t 
  Resolves:#1045041
  - Allow postfix_smtpd to stream connect to antivirus 
  Resolves:#1105889
  - Label init thttpd file as httpd_initrc_exec_t 
  Resolves:#1069843
  - Allow httpd to setattr on httpd_log files
  Resolves:#1111581
  - Add tomcat
  - Allow zabbix to read system network state
  - Allow ndc to read random and urandom device 
  Resolves:#1110397
  - Add kerberos support for radiusd.
  - Allow procmail to ioctl on zarafa-deliver executable.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-246
changelog:
  - Add boolean to allow user login programs access to /etc/shadow
  - Use old icecast_connect_any boolean name and dontaudit list /tmp with tmp_t labeling
  - Remove unused interface rtas_errd_systemctl 
  Resolves:#1121169
  - Allow prelink_mask to use user terminals and dontaudit relabel tmpfiles.
  - Dontaudit r/w inherited lockfiles/tmpfiles for prelink_mask_t.
  - Allow prelink_mask to append all log files.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-247
changelog:
  - Add all login domain auth_can_read_shadow_passwords attribute.
  - Added support for dhcrelay service
  Resolves: #1123338
  - We need to call auth_tunable_read_shadow in auth_shadow boolean.
  - Move authlogin_shadow to authlogin.if.
  - Add filetrans also for bacula log files.
  - Dontaudit kdumpgui to read openshift_initrc_exec_t
  Resolves: #1023336
  - Allow squid to manage squid_var_run_t sock_file
  Resolves: #1102346
  - Alloe bacula manage bacula_log_t dirs
  Resolves: #1122545
  - Added sys_ptrace cap. to stapserver_t
  Resolves: #811366
  - Label also /var/run/glusterd.socket file as glusterd_var_run_t
  Resolves: #1052206
  - Added support for collectd daemon
  Resolves: #1024715
  - Label conmans pid file as conman_var_run_t, Resolves: #1122106
  - Fix authlogin_shadow boolean to have it for all login_pgm domains
  - Dontaudit r/w inherited all log files for prelink_mask_t
  - Label zabbix_var_lib_t directories
  Resolves: #1053205
  - Allow all sblim domain to read localization data
  Resolves:##1122022


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-248
changelog:
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift 
  Resolves: #1034206
  - Do not send/receive packets when ftpd_use_passive_mode is disabled 
  Resolves: #1105544
  - Allow qemu-ga domtrans to hwclock 
  Resolves: #1062384
  - Allow sshd read access to files on ftp directory 
  Resolves: #1097387
  - dontaudit r/w inherited certs for prelink_mask_t.
  - Allow sblim_gatherd_t to search all mountpoints. This is caused by ps. Should not be needed in Fedora.
  - Fix labeling in dhcpc.fc.
  - Add labels also for glusterd sockets.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-249
changelog:
  - Add support for luci.
  - Add support for rhsmd and treat it with rhsmcertd_t.
  - Make zabbix_agent_t as unconfined domain for rhel6.6.
  - Allow chroot_user_t to change process identity.
  Resolves:#1082183
  - Revert "Remove shadow_t label from /etc/security/opasswd
  - Dontaudit relabel lib_t files for prelink_mask_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-250
changelog:
  - Dontaudit read/write/setattr all pipes for prelink domains on all domains
  Resolves:#1103674
  - Allow chroot_user_t to change the role.
  - Add sys_time caps for virt_qemu_ga_t
  - Add label for /usr/sbin/luci


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-261
changelog:
  - Allow sys_ptrace and dac_override caps for collectd.
  - Add labeling for /etc/rc\.d/init\.d/htcacheclean.
  - Allow /usr/sbin/sfcbd to send audit msgs.
  - Allow postdrop to connect to master process over unix stream socket.
  - Allow ssh_t to connect to all unreserved ports.
  - Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
  - Don't relabel files under /dev/shm/
  - Allow munin_disk_plugin_t getattr access on blk_file 
  - Allow xauth_t and sshd_t to search automount_tmp_t if use_nfs_home_dirs boolean.
  - Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
  - Allow antivirus domains to read all dirs/files regardless of their MCS category set.
  - Add labeling for mariadb log/pid files/dirs.
  - Allow rsyslogd to read /proc/sys/vm/overcommit_memory file.
  - Allow slapd to read /usr/share/cracklib/pw_dict.hwm.
  - Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
  - Add support for /usr/libexec/sssd/selinux_child and create sssd_selinux_manager_t domain for it.
  - Allow qpidd to read network state and sysctls dirs
  Resolves:#1171275
  - Add labeling for /var/bacula directory.
  - mcelog runs as a daemon domain 
  - Allow shutdown to r/w iherited rhev-agetnd pipes.
  - Allow sshd to seind signull itself.
  - Add the 'base_ro_file_type' and 'base_file_type' attributes to RHEL6.
  - Allow prelink_mask_t getattr on filesystems that support xattrs
  - Allow radious to connect to apache ports to do OCSP check.
  - remove transition from unconfined user to auditctl.
  - Backport RHEL7 sblim-sfcb fixes.
  - Add bacula fixes related to unconfined scripts based on ssekidde@redhat.com patch.
  - Allow zebra to communicate with sssd 
  - Add interfaces fixes.
  - Added some optional blogs from timemaster policy to chronyd.
  - Added linuxptp policy
  - Add interface to read mysql db link files
  - Added cinder policy
  - Make munin yum plugin as unconfined by default.
  - Allow bitlbee connections to the system DBUS.
  - Allow hv_vss_daemon to call ioctl(FIFREEZE) on /boot.
  - Add rsync_server boolean to don't have a transition from initrc by default.
  - Dontaudit to r/w inherited pipes from httpd because of certmonger unconfined scripts.
  - Backport all capabilities for cvs from RHEL7.
  - Allow dccproc to execute bash.
  - Fix labeling for /usr/libexec/nm-dispatcher.action.
  - Allow logrotate to manage virt_cache.
  - Allow osad to execute rhn_check.
  - Make osad_t as unconfined domain.
  - Allow osad connect to jabber client port.
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-262
changelog:
  - Allow lsmd_t getattr all exec.
  Resolves:#1141719
  - Update afs policy
  Resolves:#1136396
  - Add support for /usr/sbin/named-sdb.
  - Add support for mongos service.
  - Allow cyrus to use tcp/2005 port.
  - More service wants to auth_use_nsswitch.
  - Allow apps that need to read sysctl_vm_overcommit_t be able to read it.
  - Update passenger rules from RHEL7.
  - Allow smartd to manage generich devices if they are created with wrong label.
  - Allow sblim-sfcb to execute itself.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-263
changelog:
  - Allow userdomain to manage pcscd pid fifo files.
  - Allow prelink domain access to /dev/console 
  Resolves:#1145662
  - Allow httpd search access on tomcat6 directory
  - Allow apcupsd to get attributes of filesystems with xattrs
  - Allow qemu-ga getattr access of all filesystems
  - Allow abrt to read network state information
  - Make collectd_t as unconfined domain.
  - Make rpcbind as nsswitch domain.
  - Back port labeling for /etc/my.cnf.d dir.
  - Allow dhcpd kill capability.
  - Allow cachefilesd to create cachefilesd_var_t
  - cvs_home backport from RHEL7.
  - Add support for new fence agent fence_mpath which is executed by fence_node
  - Allow lsmd plugin to run with configured SSSD.
  - Allow bacula access to tape devices
  - Allow sblim-sfcb setuid.
  - Allow sblim domain to read sysctls.
  - Allow ntp to read localtime and allow timemaster send a signal to ntpd.
  - Add cobblerd_t fixes
  - Allow mysqld_t to use pam
  - Dontaudit xguest_t communication with avahi_t via dbus
  - Allow cobblerd_t to communicate with sssd
  - Allow pmwebd to send and receive messages from avahi over dbus
  - Allow conman_t to commmunicate with sssd
  - Allow mysqld_t to send audit messages
  - Allow load_policy rw access to inherited sssd pipes
  - Update label for /etc/mcelog/.* files
  - Allow bacula_t to connect to psql via tcp/unix socket
  - Remove type to only match directories on /boot
  - Add more labels for ownCloud
  - Dontaudit net_admin capability for munin


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-264
changelog:
  - Allow qpidd to read own init script file.
  - Allow passenger to accept connection
  - Back port hypervkvp fixes from RHEL7
  - ALlow load_policy to list inotifyfs filesystem
  - Allow cluster domain to execute ldconfig and update lvm_read_config() interface
  -  Allow sssd_t to connect to samba TCP port
  - Allow NetworkManager to run arping
  Resolves:#1209854
  - Backport RHEL7 redis policy
  - Add apache log and lib labels for roundcubemail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-265
changelog:
  - Allow redis to create /var/run/redis/redis.sock
  - Allow fence_mpathpersist to run mpathpersist which requires sys_admin capability.
  Resolves:#1206244
  - Allow rhn_check running as rpm to domtrans to shutdown domain
  - openshift_cache_t does exist


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-266
changelog:
  - Add audit_access permissions
  - Allow cupsd_t access to files in /etc dir
  - Allow hplip to dbus chat with all users.
  - Allow sblim-gathered sys_ptrace capability.
  - Allow sys_admin capability for gfs_controld
  - Add more cobbler labels to /var/lib/tftpboot/
  - Add new smbd_tmpfs_t type.
  - Add more fixes related to timemaster+ntp+ptp4l.
  - Fix cgdcbxd_admin() interface.
  - Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0.
  - Dontaudit read access on admin_home_t for load_policy.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-267
changelog:
  - Allow ctdb to create rawip socket.
  - ALlow nmbd_t to crate nmbd_var_run_t dir under smbd_var_run_t.
  - Make ctdbd as userdom_home_reader.
  - Allow ctdbd to bind  smbd port.
  Resolves:#1219317


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-268
changelog:
  - Add labeling for /var/run/ctdb and allow samba domains to connect to ctdbd.
  Resolves:#1221929
  - Allow glusterd to read/write samba config files.
  - Update mysqld rules related to mysqld log files.
  - Add fixes for hypervkvp realed to ifdown/ifup scripts.
  - Update netlink_route_socket for ptp4l.
  - Allow sosreport to dbus chat with NM.
  - Allow glusterd to connect to /var/run/dbus/system_bus_socket.
  - ALlow glusterd to have sys_ptrace capability. Needed by gluster+samba configuration.
  - Add new boolean samba_load_libgfapi to allow smbd load libgfapi from gluster. Allow smbd to read gluster config files by default.
  - Allow gluster to transition to smbd. It is needed for smbd+gluster configuration.
  - Allow glusterd to read /dev/random.
  - Label all gluster hooks in /var/lib/gluster as bin_t. Thy are not created on the fly.
  - Update nagios_run_sudo boolean to allow run chkpwd.
  - Add labeling for /usr/sbin/kpropd.
  - Add nagios_run_sudo boolean
  - Allow ctdb to create rawip socket.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-269
changelog:
  - Fix labeling for /var/tmp/kiprop_0 to kadmind_tmp_t.
  - Allow postdrop runinng as postfix_postdrop_t to access /var/spool/postfix/public/pickup socket.
  - Allow gluster hooks scripts to transition to ctdbd_t.
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket.
  - Allow gluster transition to smbd_t also using samba init script.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
   - Update rules related to glusterd_brick_t.
   - Allow glusterd to execute lvm tools in the lvm_t target domain.
   - Allow glusterd to execute xfs_growfs in the target domain.
   - Add support for /usr/sbin/xfs_growfs.
   - Allow glusterd to create samba config files if it is started by service script and running with unconfined_u.
  Resolves:#1228109
  - Fix description for ftpd_use_passive_mode boolean.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have transition to insmod.
  - Allow glusterd to use geo-replication gluster tool.
  - Remove gluster from permissive domains.
  Resolves:#1229605


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-276
changelog:
  - Allow gluster to manage own log files.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  - Label gluster python hooks also as bin_t.
  - Allow samba_t net_admin capability to make CIFS mount working.
  Resolves:#1229605
  - Allow ssh_keygen_t to manage keys located in /var/lib/gluster.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-278
changelog:
  - Allow logrotate get attributes of all unallocated tty device nodes.
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
  - Allow glusterd to connect to init.
  Resolves:#1230371
  - Allow gluster do dbus chat with domain running as initrc_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279
changelog:
  - Backport gluster fixes from RHEL7
   - execute showmount in own domain
   - execute nsfd in own domain
   - allow gluster to connect to all ports
  - Add support for /usr/sbin/ctdbd_wrapper.
  - nrpe needs kill capability to make gluster moniterd nodes working.
  Resolves:#1235405


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-280
changelog:
  - Allow Chromium to use setcap inside its SUID sandbox.
  - Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
  Resolves:#1251584


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-282
changelog:
  - Add missing fs_setattr_nfs_dirs() and samba_setattr_samba_share_dirs() interfaces.
  - Allow g-k-daemon running as passwd_t to manage Gnome config files to allow a use change his/here password via SSH conncetions. 
  Resolves:#1131531
  - Allow chronyd to set attributes on chronyd keys.
  - Add default labeling for /etc/Pegasus/cimserver_current.conf. It is a correct patch instead of the current /etc/Pegasus/pegasus_current.conf. 
  Resolves;#1278771
  - Add default labeling for /var/run/qemu-ga.pid and /var/run/qga.state. 
  - Dontaudit sys_module capability for asterisk. Backported from RHEL7. 
  Resolves:#1277199
  - Allow nfsd to execute mount in nfsd_t domain. It wants also manage mount PID files. 
  Resolves:#1275221
  - Add tmpreaper_use_nfs and tmpreaper_use_samba booleans. 
  Resolves:#1271996
  - Add labeling for /usr/libexec/mock/mock as we have it for /usr/sbin/mock. 
  Resolves:#1271211
  - Allow jabberd to read /etc/pki/tls/cert.pem. 
  Resolves:#1261145
  - Turn the nagios_run_sudo boolean on by default. Previously a part of these rules was turn on by default and wit this boolean we turned them of. 
  Resolves:#1240793
  - In RHEL-6, we have a transition from unconfined_t to xauth_t. It causes xauth commands wants to reas/write inherited stream. 
  Resolves:#988117
  - Add unconfined_rw_stream() interface.
  - Add support for /dev/mptctl device used to check RAID status.
  - Update qpidd policy to set kerberos authentication. 
  Resolves:#1224666
  - Allow logwatch to read bacula store log files. 
  - Add cobler_var_lib_t labeling for /var/lib/tftpboot/boot/grub. It allows cobblerd to manage it by default. 
  Resolves:#1213539
  - Allow cobbler to execute reposync in the cobberld_t domain. It wants to manage rpm cache files. And add dontaudit rules for rpm db files. 
  Resolves:#1207260
  - Allow dnssec_t mounton access 
  Resolves:#1246460
  - Allow fenced node dbus msg when using foghorn witch configured foghorn, snmpd, and snmptrapd. 
  Resolves:#1242082
  - Allow all MTA user agent (postfix_postdrop_t for this fix) to read/write inherited fail2ban temporary files. 
  Resolves:#1241968


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-284
changelog:
  - Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
  Resolves:#1287182


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-285
changelog:
  -Allow munin apache scripts to manage munin logs and talk with httpd over unix stream socket. 
  Resolves:#1286052
  -Allow httpd to send generic signal to httpd suexec if htpasswd is invoked. Resolves:#1286007
  -Dontaudit httpd running as piranha_web_t accesses to snmp mib indexes. 
  Resolves:#1285674
  -Allow ipsec running as ipsec_t to create pluto.log with correct labeling.
  Resolves:#1267212
  -Allow whack executed by sysadm SELinux user to access /var/run/pluto/pluto.ctl. It fixes "ipsec auto --status" executed by sysadm_t. 
  Resolves:#1257591
  -Dontaudit attemps to write generic tmp_t dirs if gnome-keyring-daemon runs under passwd_t domain. 
  Resovles:#1131531


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-286
changelog:
  - arping running as netutils_t sys_module capability for removing tap devices. Dontaudit this access.
  - Allow hv_vss_daemon to write access on all mount point directories to make VSS live backup if working if there is home partition.
  - Add support for squid to be able to create temoporary files. 
  Resolves:#1291164
  - Allow usbhid-ups to access /proc/bus/usb to have it working on ppc64 machines. 
  Resolves:#1290693
  - Add support for /var/run/chronyd.sock. 
  Resolves:#1290310
  - Update apache_content_template() inteface to allow "shutdown" permissions for apache scripts on unix_stream_socket. 
  Resolves:#1286052
  - Fix label for /var/lib/graphite-web 
  Resolves:#1221934
  - Dontaudit rpm write access for prelink_mask_t Resolves:#1216907
  - Allow apcupsd_t to communicate with sssd Add default label for /var/lock/subsys/apcupsd and /var/lock/LCK.
  Resolves:#1286030
  - Allow shorewall_t to create netlink_socket 
  Resolves:#1290705


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-287
changelog:
  - Allow sssd-ifp to dbus chat with all users. 
  Resolves:#1296693
  - Allow keepalived to connect to 3306/tcp port - mysqld_port_t.
  Resolves:#1296854
  - Add support for stunnel custom log files, allow transition and label /log/stunnel* log files. 
  Resolves:#1296238
  - Provide conman_unconfined_script_exec_t/conman_unconfined_script_t SELinux types used for conman scripts.
  - Resolves:#1290565
  - Allow ctdbd trasition to smbcontrol_t when "ctdb disablescript 50.samba" is executed.
  - Resolves:#1293787
  - Label ctdbd event scripts as ctdbd_exec_t instead of bin_t. 
  Resolves:#1293787
  - Allow watchdog to read localization files. It wants to access localtime. 
  Resolves:#1267974
  - Backport rules allowing sssd_t to be able to request the kernel to load a module.
  Resolves:#1246634


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-288
changelog:
  - Allow netutils_t domain to chown capability.
  Resolves:#1298514
  - Allow all jabber domain to access SSL certs.
  Resolves:#1261145
  - Allow shorewall request kernel load module
  Resolves:#1290705
  - Allow passwd to create temporary files to support ssh logins if gnome-keyring-daemon is called by passwd and runs in passwd_t.
  Resolves:#1131531
  - Allow stunnel to write log outputs on users pty.
  Resolves:#1296238
  - Allow polkit-1/actions to get attributes for all filesytems.
  Resolves:#1301561
  - Allow p11-child to connect to apache ports. Allow p11-child  to manage authentication cache.


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
  Related: #1326621


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-293
changelog:
  - Add setgid capability to winbind domain.
  - Allow getcap for winbind domain.
  Resolves: rhbz#1336394
  - Allow rebuild mdadm arraiy with SELinux enabled in enforcing mode.
  Resolves: rhbz#1343754
  - Allow kpropd_t domain to use nsswitch.
  Resolves: rhbz#1337895
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1331585


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-294
changelog:
  -  Added boolean: authlogin_yubikey
  Resolves:rhbz#1362033
   - Add new type: alsa_lock_t, Allow alsa_t domain creating files in /var/lock labeled as alsa_lock_t.
   Resolves:rhbz#1340150
   - Allow bacula send signull itself.
   Resolves: rhbz#1313382
   - label /var/lib/pcsd/ as cluster_var_lib_t.
   Resolves:rhbz#1326718
   - Allow httpd also write to anon_inodefs files
   Resolves: rhbz#1377644
   - Allow lsmd to read localization. Allow lsmd plugins to exec ldconfig
   Resolves: rhbz#1336590
   - Allow auditctl_t domain read localization.
   Resolves:rhbz#1316444
   - Allow cobblerd_t to delete dirs labeled as tftpdir_rw_t. Resolves: rhbz#1318166
   - Allow httpd_t domain to list inotify filesystem
   Resolves:rhbz#1299552
   - Allow dovecot_t send signull to dovecot_deliver_t
   Resolves:rhbz#1320037
   - Fix couple AVC to start roundup properly
   Resolves: rhbz#1286994
   - Allow netlabel_peer_t type to flow over netif_t and node_t, and only be hindered by MLS, need back port to RHEL6
   Resolves:rhbz#1299306
   - Add sys_ptrace capability to pegasus domain
   Resolves:rhbz#980439
   - Allow sshd to set mcs process categories.
   Resolves: rhbz#1322409
   - Add setgid capability to winbind domain. Allow getcap for winbind domain.
   Resolves: rhbz#1336394
   - Allow rebuild mdadm arraiy with SELinux enabled in enforcing mode.
   Resolves: rhbz#1343754
   - Allow kpropd_t domain to use nsswitch.
   Resolves: rhbz#1337895


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-296
changelog:
  - Allow hypervvssd_t to read all dirs.
  Resolves: rhbz#1335733
  - Dontaudit abrt_t writing to cert_t files.
  Resolves: rhbz#1334606
  - Allow isns_t domain to connect on port 51954 labeled as isns_port_t.
  Resolves: rhbz#1365501
  - Fixed vsftpd can access nfs even if allow_ftpd_use_nfs is off under specific conditions
  Resolves: rhbz#1310077
  - Allow asterisk domain to connect on port 5222 labeled as jabber_client_port_t
  Resolves:rhbz#1334756
  - Label /etc/puppetlabs as puppet_etc_t.
  Resolves:rhbz#1386181
  - Allow mount to read nvme devices
  Resolves: rhbz#1389982
  - Allow roundup to use nsswitch.
  Resolves: rhbz#1286994
  - Backport domain transition from pegasus_t to rpm_t
  - Allow pegasus to read all sysctls
  - Allow pegasus to read raw memory.
  Resolves:rhbz#980439


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-297
changelog:
  - Remove setgid and setuid capabilities from userdom_login_user_template
  Resolves: rhbz#1378463
  - Allow logrotate to read chronyd keys
  Resolves: rhbz#1390657
  - Allow fail2ban to domtrans to shorewall.
  Resolves: rhbz#1390810


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-298
changelog:
  - Allow isnsd_t to accept tcp connections
  Resolves:rhbz#1365501
  - Add label for alsa_var_lib_t dirs and files.
  Resolves: rhbz#1340150


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-300
changelog:
  - Allow sblim_reposd_t domain to read cert_f files
  Resolves:rhbz#1392382
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
  Resolves: rhbz#1392406


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-301
changelog:
  - Allow hald_t to read nvme devices.
  Resolves: rhbz#1389982
  - Allow ftpdctl_t domain to manage own sockets
  Resolves: rhbz#1392525


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-302
changelog:
  - Label /var/lock/kdump as kdump_lock_t.
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-303
changelog:
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565
  - Allow guest-set-user-passwd to set users password
  Resolves: rhbz#1369699


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-304
changelog:
  - Allow _java_t domain to read systemd state.
  Resolves:rhbz#1393938
  - Allow kdumpgui to read/write to nvme filesystem.
  Resolves:rhbz#1323293


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-305
changelog:
  - Fix typo bug sepgsql_contexts file
  Resolves: rhbz#1397703
  - Allow sssd_t domain to manage samba files and dirs.
  Resolves: rhbz#1395403
  - Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
  Resolves: rhbz#1397117
  - Allow consolekit_t domain to manage consolekit_log_t dirs
  Resolves: rhbz#1397802


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-306
changelog:
  - Allow hostname_t domain to manage cluster_tmp_t files
  Resolves: rhbz#1400234
  - Allow ipsec_mgmt_t domain use nsswitch
  Resolves:rhbz#1401611
  - Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
  Resolves:rhbz#1397117


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-308
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1461064


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


