[gentoo-commits] proj/hardened-refpolicy:master commit in: /

[Jason Zaman]

commit:     5954c31f0b864c0f09d9917bdb2652da04b043c4
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Sat Feb  4 18:30:54 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Feb  5 06:26:54 2017 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5954c31f

Update Changelog and VERSION for release.

 Changelog | 137 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 VERSION   |   2 +-
 2 files changed, 138 insertions(+), 1 deletion(-)

diff --git a/Changelog b/Changelog
index d00f2cf..ba14a4a 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,140 @@
+* Sat Feb 04 2017 Chris PeBenito <pebenito@××××.org> - 2.20170204
+Chris PeBenito (55):
+      Module version bumps for patches from Guido Trentalancia.
+      Update contrib.
+      Remove unneeded system_u seusers mapping.
+      Update contrib.
+      Merge pull request #45 from cgzones/travis2
+      Merge pull request #46 from cgzones/update_readme
+      Merge pull request #47 from cgzones/spelling
+      Module version bump for xserver patch from Guido Trentalancia
+      Update contrib.
+      Merge pull request #50 from cgzones/macros
+      Merge pull request #48 from cgzones/makefile
+      xserver: Rearrange lines
+      Module version bump for xserver changes from Guido Trentalancia.
+      Merge branch 'dhcp_avahi' of https://github.com/cgzones/refpolicy
+      Module version bumps for patches from cgzones.
+      Update contrib.
+      Merge branch 'syslogd' of git://github.com/cgzones/refpolicy
+      Module version bump for journald fixes from cgzones.
+      Merge pull request #57 from cgzones/trailing_whitespaces
+      modutils: Move lines.
+      Module version bumps for openoffice patches from Guido Trentalancia.
+      Module version bump for kernel sysctl patch from Luis Ressel
+      Update contrib.
+      Module version bump for netutils patch from Luis Ressel.
+      Module version bump for xserver patch from Guido Trentalancia.
+      Module version bumps for patches from Guido Trentalancia.
+      rtkit: enable dbus chat with xdm
+      xserver: Move interface definition.
+      Module version bump for patches from Guido Trentalancia.
+      Module version bump for xscreensaver patch from Guido Trentalancia.
+      Merge branch 'run_transition' of git://github.com/cgzones/refpolicy
+      Module version bumps for /run fc changes from cgzones.
+      Module version bump for patches from Guido Trentalancia.
+      Merge branch '2016-12-27_systemd' of
+         git://github.com/fishilico/selinux-refpolicy-patched
+      Module version bump for systemd patch from Nicolas Iooss.
+      Merge branch 'usr-fc' of
+         git://github.com/fishilico/selinux-refpolicy-patched
+      Module version bump for fc updates from Nicolas Iooss.
+      Module version bump for patches from Guido Trentalancia.
+      xserver: Update from Russell Coker for boinc.
+      Module version bump for patches from Guido Trentalancia.
+      Merge pull request #62 from cgzones/fix_permission_segenxml
+      Merge pull request #94 from cgzones/travis
+      Merge branch 'corenetork_module' of git://github.com/cgzones/refpolicy
+      Merge branch 'mount_module' of git://github.com/cgzones/refpolicy
+      Merge branch 'terminal_module' of git://github.com/cgzones/refpolicy
+      Merge branch 'files_search_src' of git://github.com/cgzones/refpolicy
+      Merge branch 'unconfined_module' of git://github.com/cgzones/refpolicy
+      Merge branch 'auditd_fixes' of git://github.com/cgzones/refpolicy
+      Module version bumps for patches from cgzones.
+      Module version bump for cpu_online genfscon from Laurent Bigonville.
+      Update contrib.
+      Fix contrib.
+      Module version bump for cups patch from Guido Trentalancia.
+      Module version bump for xkb fix from Jason Zaman.
+      Bump module versions for release.
+
+Guido Trentalancia (19):
+      xserver: remove unneeded user content permissions
+      xserver: remove unneeded user content permissions
+      Apache OpenOffice module (base policy part)
+      xserver: enable dbus messaging with devicekit power
+      authlogin: indentation/whitespace fix
+      wm: update the window manager (wm) module and enable its role template
+         (v7)
+      userdomain: separate optional conditionals for gnome and wm role templates
+      udev: manage tmpfs files and directories
+      udev: always enable kernel module loading
+      base: enable the xscreensaver role
+      bootloader: stricter permissions and more tailored file contexts
+      modutils: update to run in confined mode
+      base: use new genhomedircon template for username
+      kernel: missing permissions for confined execution
+      xserver: introduce new fc and interface to manage X session logs
+      kernel: add missing plymouth interface
+      xserver: restrict executable memory permissions
+      init: support sysvinit
+      udev: execute HPLIP applications in their own domain
+
+Guido Trentalancia via refpolicy (4):
+      Let users read/manage symlinks on fs that do not support xattr
+      Let unprivileged users list mounted filesystems
+      Let the user list noxattr fs directories
+      sysadm: add the shutdown role
+
+Jason Zaman (1):
+      xserver: allow X roles to read xkb libs to set keymaps
+
+Laurent Bigonville (1):
+      Use genfscon to label /sys/devices/system/cpu/online as cpu_online_t
+
+Luis Ressel (3):
+      system/modutils: Add kernel_search_key(kmod_t)
+      kernel.if: Allow listing /proc/sys/net/unix
+      netutils: Label iptstate as netutils_t
+
+Nicolas Iooss (4):
+      systemd: add systemd-backlight policy
+      systemd: add systemd-binfmt policy
+      Allow searching /proc/sys/fs when using /proc/sys/fs/binfmt_misc
+      Add file contexts in /usr for /bin, /usr/sbin and /usr/lib
+
+Russell Coker (1):
+      single binary modutils
+
+Stephen Smalley (2):
+      refpolicy: Define extended_socket_class policy capability and socket
+         classes
+      refpolicy: drop unused socket security classes
+
+cgzones (21):
+      update .travis.yml
+      update README
+      fix spelling
+      update Makefile
+      update policy/support macros
+      review
+      keep 2 empty lines in front of a new section
+      using intermediate target instead of splitting up conf files generation
+      define filecontext for /run/agetty.reload
+      allow dhcp_t to domtrans into avahi
+      fix syslogd audits
+      remove trailing whitespaces
+      transition file contexts to /run
+      fix permission of installed segenxml.py by install-headers
+      auditd / auditctl: fix audits
+      add files_search_src()
+      update unconfined module * grant capability2:wake_alarm * remove
+         deprecated interfaces
+      update terminal module
+      update corenetwork module
+      use travis cache
+      update mount module
+
 * Sun Oct 23 2016 Chris PeBenito <pebenito@××××.org> - 2.20161023
 Chris PeBenito (94):
       Module version bump for systemd-user-sessions fc entry from Dominick Grift

diff --git a/VERSION b/VERSION
index f011019..395af8d 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.20161023
+2.20170204