# changelog

author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-23
changelog:
  - Add cmirrord policy
  - Fixes for accountsd policy
  - Fixes for boinc policy
  - Allow cups-pdf to set attributes on fonts cache directory
  - Allow radiusd to setrlimit
  - Allow nscd sys_ptrace capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-24
changelog:
  - Add support for /dev/vhost-net
  - Allow psad to read files in /usr
  - Allow systat to use nscd socket
  - Fixes for boinc policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-25
changelog:
  - Fixes for cmirrord policy
  - Dontaudit xauth to list inotifyfs filesystem.
  - Allow xserver to translate contexts.
  - Allow kdumpgui domain sys_admin capability
  - Allow vpnc to relabelfrom tun_socket
  - Allow prelink_cron_system_t to signal
  - Fixes for gitolite
  - Allow virt domain to read symbolic links in device directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-26
changelog:
  - Allow krb5kdc to write krb5kdc_principal_t file
  - Allow hald to send generic signal to dhcp client
  - Fix dev_rw_vhost interface
  - Add /var/run/abrt.socket label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-27
changelog:
  - Allow ftpd ipc_lock capability
  - Allow audisp-remote to getcap and setcap
  - Allow iscsid to read and write raw memory devices
  - Fixes for bitlbee policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-30
changelog:
  - Allow sysadm to run ncftool
  - Fixes for cobbler policy
  - Allow Network Manager to transition to ipsec_mgmt domain
  - Add label for /usr/libexec/nm-openswan-service
  - Add label for /dev


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-31
changelog:
  - Remove daemons dontaudit to search all dirs 
  - Add support for epylog
  - All all domains to read lib files
  - Allow denyhosts to send syslog messages
  - Allow mysql-safe setrlimit
  - Allow rpm to execute rpm_tmp_t
  - Allow dmesg to appen abrt_var_cache files
  - Fixed label for abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-32
changelog:
  - Allow sectool to connect to users over unix stream socket
  - Add label for /var/spool/abrt-upload
  - Add audio_home_t type for homedir/Music files
  - Allow aiccu to read network config files
  - Allow qpidd to setsched
  - Allow virt domains to manage svirt_image_t fifo files
  - Fixes for NM-openswan
  - Fixes for admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-36
changelog:
  - Allow netutils to read and write USB monitor devices
  - Fix label for /rhev
  - Add user_setrlimit boolean
  - Allow initrc to manage virt lib files
  - Add support for ebtables
  - Add label for /bin/mksh
  - Dontaudit aiccu sys_tty_config capability
  - Add httpd_setrlimit boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-37
changelog:
  - Redefine hi_reserved_port_t to include ports from 512 to 599 
  - Add label for /sbin/sushell
  - Fixes for munin plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-38
changelog:
  - Allow xdm_t to manage gnome homedir content
  - Allow s-c-firewall to read and write virtual memory sysctls
  - Fixes for logwatch policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-39
changelog:
  - Allow munin_system_plugin to read files in /usr
  - Do not audit insmod attempts to write virt daemon unnamed pipes
  - Allow corosync to read ricci lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-40
changelog:
  - Fixes for puppetmaster
  - Fix label for kadmin init script
  - Fixes for logwatch-mail policy
  - Allow arpwatch to request the kernel to load modules
  - Allow cron jobs to run with context of user that started them


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-41
changelog:
  - Allow logwatch_mail to read read the networking state information.
  - Add label for /usr/bin/dosbox
  - Allow systat sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-42
changelog:
  - Allow kdump to read information from the debugging filesystem
  - Update boinc policy
  - Fixes for logwatch-mail policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-43
changelog:
  - Allow ncftool to run brctl
  - Fixes for ricci-modclusterd policy
  - Allow uucpd to execute ssh client
  - Add label for dayplanner
  - Allow sandbox_xserver execstack


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-55
changelog:
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  - Add labeling for /root/.debug
  - Remove permissive from cmirrord domain
  - Dontaudit cmirrord_t sys_tty_config capability
  - Allow virtd to read from processes up to its clearance
  - Allow dovecot-deliver to create tmp files
  - Allow tor to send signals to itself
  - Handle /var/db/sudo
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #631564


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-56
changelog:
  - Allow smartd to read usr files
  - Allow devicekit-power transition to dhcpc
  - Add label for /etc/timezone
  - Remove transition from unconfined_t to iptables_t
  - Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
  Resolves: #634945
  - Allow nrpe to send signal and sigkill to the plugins
  - Fix up xguest to allow it to read hwdata and gconf_etc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-57
changelog:
  - Allow system_mail_t to append ~/dead.letter
  - Allow mount to communicate with gfs_controld
  Resolves: #636683
  - Dontaudit hal leaks in setfiles
  - gpm needs to use the user terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-58
changelog:
  - Fix httpd_setrlimit boolean to allow sys_resource capability
  - Fix label for ip6tables.save
  - Allow ssh_t to exec ssh_exec_t
  - Dontaudit init leaks
  Resolves: #639083


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-59
changelog:
  - Allow cdrecord setrlimiit
  Resolves: #615731
  - Define debugfs_t as mountpoint
  Resolves: #646856
  - Fix fenced_can_network_connect boolean description
  Resolves: #650136
  - Add label for /var/run/faillock
  - Add dirsrv and dirsrv-admin policy
  Resolves: #655206
  - Fixes for cobbler policy
  - Allow certmonger to manage dirsrv config
  Resolves: #658591


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-60
changelog:
  - Fixes for certmonger
  - Backport passenger policy
  - Allow run_init to read console_device
  Resolves: #657568
  - Add label for /var/lib/dkim-milter
  - Fixes for munin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-61
changelog:
  - Fixes for passenger policy
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  Resolves: #663054


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-64
changelog:
  - Add namespace policy
  - Allow udev to stream connect to init
  Resolves: #667370
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-69
changelog:
  - Make Spacewalk to work with selinux-policy
  Resolves: #673112
  - Fix /root/.ssh labeling
  Resolves: #637109	
  - Fix for the spec file


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-71
changelog:
  - Allow cmirrord to create physical disk devices in /dev
  - Allow cluster domains to use the system bus and send each other dbus messages
  - Add label for /dev/tgt


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-74
changelog:
  - Add virt_home_ type files located in ~/.libvirt directory
  - virt creates monitor sockets in the users home dir
  - Allow lvm setfscreate
  Resolves: #680388
  - Make lsusb and lsblk working on MLS
  Resolves: #680426


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-75
changelog:
  - Allow svirt to manage sock_file in ~/.libvirt directory
  - Allow sysamd to run udev in udev_t domain
  - Remove capability from svirt
  - Add lvm_exec_t label for kpartx


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-76
changelog:
  - Fixes for ssh_keygen policy
  - Allow sysadm_t to run ssh-keygen in ssh_keygen_t domain
  - Backport spice vdagent policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-79
changelog:
  - Fixes for sandbox/seunshare policy 
  Resolves:#684919
  - Allow ssh_keygen_t dac_override
  - Add matahari policy 
  - Add label for /etc/securetty 
  - Fixes for pirahna-pulse policy
  - Fixes for radius, samba, dirsrv, kerberos policies 
  - Allow console login on MLS
  - Fix file context to show several labels as SystemHigh
  - Add port definition for dogtag, matahari, movaz ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-80
changelog:
  - Add support for a new cluster service - foghorn
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - Add support for vdsm
  - Allow syslogd setrlimit, sys_nice
  Resolves: #689431
  - ipsec_mgmt_t wants to cause ipsec_t to dump core, needs to be allowed


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-81
changelog:
  - Add allow_sysadm_manage_security boolean
  - Add label for /dev/dlm.*
  - Allow auditadm_screen_t and secadm_screen_t dac_override capability
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Fixes for nslcd policy
  Resolves: #693368
  - Allow qpidd to manage pid and lib matahari files
  - Allow rgmanager to send the kill signal to all users


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-83
changelog:
  - Add label for matahari-broker.pid file
  - Allow foghor to read snmp lib files
  - Make sysadm security admin
  - Fix ssh_sysadm_login boolean
  Resolves: #694551


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-95
changelog:
  - Allow secadm to manage selinux config files
  - Allow apache to use jboss management port
  - Add fenced_can_ssh boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-97
changelog:
  - Allow postfix-pickup to write files and directories regardless of their MCS category set.
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  Resolves: #705772


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-104
changelog:
  - Allow puppet to Check access to the passwd executable
  - Add label for /var/www/html/logs directory
  - Add label for /var/lib/squeezeboxserver directory
  - Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-107
changelog:
  - Make new domains as unconfined
  - Add abrt_handle_event_t domain for ABRT event script
  - Add selinux_mysql man page
  - Fix httpd selinux man page
  - Fix interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-108
changelog:
  - Add squid man page
  - Add git man page
  - Make puppet working with passenger
  - Allow procmail to execute hostname command


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-110
changelog:
  - Add label for passwd.adjunct
  - Allow pulse to execute  /usr/sbin/fos
  - Fix labeling for passenger
  - Add selinux policy support for IP-in-SSH tunnelling
  - Allow sulogin to write /dev/pts/0 in single user mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-111
changelog:
  - Add git_cgit_read_gitosis_content boolean
  - Add support for cma port
  - Add virt_use_sanlock boolean and make sanlock working together libvirt
  - Make passenger and puppet working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-112
changelog:
  - Fix description of allow_* booleans
  - Allow sanlock to manage libvirt lib files
  - Fix bug in lsassd policy
  - Add label for /var/run/luci
  - move port 18001 from http_port_t to jboss_management_port_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-114
changelog:
  - Fix httpd_selinux man page
  - Add corenet_packet() interface
  - Add support for Clustered Samba commands


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-115
changelog:
  - Add unlabelednet policy module
  - Add chrome role for xguest
  - Fix for vdagent policy
  - Add fix to allow confined apps to execmod on chrome


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-128
changelog:
  - Add cronjob_role for sysadm
  - Change label for /var/spool/cron
  - Add interface to allow exec of mongod


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-131
changelog:
  - Fixes for rhev policy
  - Make ssh-keygen as unconfined domain
  - Add sanlock_use_nfs boolean
  - Add ssh_dontaudit_search_user_home_dir interface
  - namespace_init and MLS fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-132
changelog:
  - Fixes for nagios policy
  - Add a new interface for libra
  - Fix spec file to be testing SELinux status correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-134
changelog:
  - Backport ABRT policy
  - Backport matahari policy
  - Add interfaces for libra
  - Add jboss_dubeg port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-135
changelog:
  - Add fixes for qpidd policy, support for tmpfs_t
  Resolves:#769352
  - Add fixes for mcelog policy, for new location of pid,sock files
  - Make sendmail and postfix working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-136
changelog:
  - backport mozilla_plugin policy
  - backport sandbox policy to support nacl
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow system cronjobs to read kernel network state
  - Allow corosync to read and write to qpidd shared memory
  - More fixes for qpidd
  Resolves:#769352
  - Add policy for quota-nld


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-137
changelog:
  - Remove nfs_* booleans because nfs runs in kernel_t domain
  Resolves:#760405
  - Add httpd_manage_ipa boolean
  - Dontaudit sys_ptrace for matahari-netd
  - Allow vhostmd to getattr on virtd
  - Allow snmpd to connect to the ricci_modcluster
  - qpidd should be allowed to connect to the amqp port


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-138
changelog:
  - Add new policy for cfengine
  - Add new policy for sge gridengine jobs
  - Add support for nagios eventhandlers
  - Make system cron jobs run in the proper domain
  - Add policy to support privsep ssh process running in user domain
  - Add fixes relates to nss/FIPS
  - Add new rsync_use_* booleans
  - Allow qpidd to connect to matahari ports
  - Allow sysadm_u to read system_r in MLS
  - Remove razor labeling because we treat razor with spam policy
  - Add support for matahari-qmf-sysconfig-consoled, clean up matahari policy
  - Fixes for interfaces
  Resolves:#791294
  Resolves:#796351


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-139
changelog:
  - Allow nfsd_t to getattr on all fs
  Resolves:#738628
  - Make mailx working together with cron without unconfined module
  - Allow sssd sys_resource capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-140
changelog:
  - Add additional fixes for nagios handlers
  Resolves:#749311
  - Add 7600 and 4447 as jboss_management ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-141
changelog:
  - Add man pages for apps, services
  - Allow nagios to use user terminals
  Resolves:#782325
  - Add support for unconfined certmonger scripts
  - Add support for matahari-qmf-rpcd service
  - Allow chsh to use PAM
  - Allow rpc.statd to execute sm-notify which has bin_t label
  - Make sure files which are created by /usr/bin/R get proper label in home directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-142
changelog:
  - Fixes for man pages
  - Allow rpcd to execute sm-notify
  Resolves:#802247
  - Add support for matahari-qmf-rpcd
  - Add support matahari vios-proxy-* apps
  - Allow quota-check to create files on nonxattr filesystems
  - Add support for ~/Maildir
  - Allow unconfined dyntransition
  - Fixes for certmonger_unconfined and certmonger
  - Fixes for certmonger policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-144
changelog:
  - Fixes for cfengine policy
    * changed labeling for /var/cfengine/outputs from var_log to cfengine_var_log_t
    * re-arranged policy to use template and cfengine_domain 
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Bacport libvirt-qmf policy for Fedora
  - Remove labeling for postmaster.pid file 
  - Fix for virtual network which looses network connection
  - Add man pages for SELinux users
  - cgconfig needs to use getpw calls
  - Allow lvm and fsadm to write sysfs_t
  - Allow rpc.mounted to list user tmp files
  - Fix permissivedomains declarations
  Resolves:#806220
  - Fix spec file to instal minimum policy properly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-146
changelog:
  - Add sysadm_secadm policy module to separate in secadm_r, sysadm_r
  Resolves:#787413
  - Fixes for libvirt-qmf
  - Add label for package-cleanup 
  - Add support for zfs
  - Make cfengine domains as unconfined
  Resolves:#753184
  - Allow sshd_t to dyntransition to sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-156
changelog:
  - Allow user to login using ssh with random MLS range
  Resolves:#837815
  - Allow virtd_t to create mtab with the proper labeling
  - Add support for check_icmp nagios plugin
  - Make chkconfig working on MLS for sysadm_t
  - Allow dovecot to manage mail_home_rw_t
  - Add support for fsav
  - Allow clamscan to use amavisd-new
  - Add support for rhnsd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-157
changelog:
  - Allow procmail to manage mail home data
  - We should only block MCS node_bind on mcsuntrustedproc
  - Fixes for amavis
  Resolves:#837815


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-159
changelog:
  - Allow munin_stats to read munin logs
  - Allow updpwd to write all MLS levels
  - Make piranha_web_t as nsswitch domain
  - Allow munin mail plugins to read exim log files
  - Backport sanlock policy from Fedora
  Resolves:#831908
  - Allos dac_override, sys_nice for sasl
  - Add labeling for /var/named/chroot/usr/lib64
  - Add support for gitolite3
  - Allow confined users to send mail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-160
changelog:
  - Add named_bind_http_port boolean
  - Add port definition for 8953/tcp
  - spice-vdagent(d)'s are going to log over to syslog
  - Fix labeling for /usr/sbin/rpc.* binaries to label them as rpcd_exec_t
  - Add sensord policy
  - Allow oddjob_mkhomedir to write on nfs share
  - Add virt_bridgehelper policy
  - Allow clamd to write/delete own pid file with clamd_var_run_t label
  - Add support for wdmd tmpfs
  - Add initrc_domain attribute 
  - Add bcfg2 policy
  - Modify ssh_chroot_rw_homedirs boolean to allow manage apache system r/w content if for /var/www as home
  - Add pacemaker policy
  - Allow snmpd to connect to corosync over unix stream socket
  - Allow crontab to read NFS
  - Add new type selinux_login_config_t for /etc/selinux/TYPE/logins directory and allow sssd to manage files in this directory
  Resolves:#843814
  - Add labeling for /opt/sartest directory
  - Add initrc_domain attribute to allow domains to work as initrc_t domain
  - heartbeat should be running as rgmanager_t instead of corosync_t
  - Add glusterd policy
  - Add l2tpd policy
  - Add numad policy
  Resolves:#801493


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-162
changelog:
  - Add pkcslotd policy
  Resolves:#851483
  - Allow cyrus-imapd init script to write cyrus data
  - Fix labeling for /dev/twa


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-166
changelog:
  - More fixes for openshift and add support for opeshift labeling instead of stickshift
  - /etc/selinux/<type>/logins should be owned by the policy package
  Resolves:#855889
  - Add labeling for /var/tmp/DNS_25      
  - Allow postfix_local_t to execute files on nfs_t
  - Add fixes for kadmind
  - Add rhnsd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-167
changelog:
  - Allow postfix_locat to search stickshift lib files
  - Dontaudit sys_ptrace cap for httpd if httpd_stickshift is on
  - Allow openshift domains change process identity
  - SELinux is reporting that openshift domains are trying to write into their proc directories
  Resolves:#855889


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-168
changelog:
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - pppd wants to read /usr/share/radiusclient-ng/dictionary
  - Add ssh_chroot_manage_apache_content and ssh_chroot_full_access booleans
  - snmp wants to also manage snmp dirs for amavisd-snmp support
  - Add labeling for virsh_fenced
  - Allow nmbd_t to crate dirs with samba_var_t labeling
  - Add clamscan_can_scan_system boolean
  - Allow all domains to getattr on prelink_exec_t
  - Add postgresql_can_rsync boolean
  - Allow pulse to domain transition to iptables
  - Allow nslcd sys_nice capability
  - Allow corosync to connect to saphostctrl ports
  - Allow passwd to read generic /tmp dirs
  - Add policy for qemu-qa
  - Add new antivirus policy module for antivirus programs
  Resolves:#838260


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-169
changelog:
  - Fix spec file to silent restorecon errors on files which do not exist
  - Fix passenger backport
  Resolves:#839831


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-172
changelog:
  - Update httpd_runstickshift boolean
  - Remove transition from sysadm_t to fsadm_t
  Resolves:#852763
  - Make vmware-host as unconfined domain
  - Allow all domains to read usr_t
  - Fix labeling for all log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-173
changelog:
  - syslogd_t now support kerberos
  Resolves:#867001
  - Fix openshift labeling for binaries
  - Allow passwd to read usr_t links/files
  - Add labeling for /var/lib/sss/mc


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-174
changelog:
  - openshift user domains wants to r/w ssh tcp sockets
  - Allow mount to relabelfrom unlabeled file systems
  - Additional fix for syslog/kerberos
  Resolves:#867001


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-175
changelog:
  - Add initial openswitch policy. Domains are unconfined
  Resolves:#845417
  - Add labeling for /usr/sbin/mcollectived
  - Allow openshift domains to read /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-177
changelog:
  - Allow dnsmasq to manage virt run files
  Resolves:#843543
  - Allow setroubleshootd to read /proc/irq
  - Backport fixes for virt_use_* booleans
  - Allow qemu-ga to use ttyS0
  - Allow dhcpc to manage dhclient-eth0.pid labeled as virt_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-178
changelog:
  - Fix labeling for OpenShift binaries
  - Add samba_portmapper boolean and labeling for /var/run/samba
  Resolves:#871816
  - Backport dspam policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-180
changelog:
  - Allow openshift domains to execute tmux
  - Allow wdmd to getattr on tmpfs_t
  Resolves:#831908
  - Add labeling for /var/nmbd/unexpected
  - Allow winbind to create samba pid dir
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes for syslogd
  - Fenced communicates with libvirt
  - Fix labeling for libflashplayer.so
  - Add labeling for /var/lib/zarafa-webapp
  - Allow dspam to read localization
  - Add labeling for Z-Push
  - Allow rpc.svcgssd to search nfsd_fs_t dirs
  - Allo cgred to read all sysctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-181
changelog:
  - Allow kdumpgui to read/write to zipl.conf
  Resolves:#877108
  - Add /proc/numactl support for confined users
  - Make proc_numa_t an MLS Trusted Object
  - Make ccs_tool and cman_tool labeled as rgmanager_exec_t
  - Fix cron_admin_role interface
  - Add support for opendkim


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-182
changelog:
  - Fix labeling for /var/named/chroot/usr/lib
  Resolves:#843732
  - Allow amavis to stream connect to snmpd
  Resolves:#839250
  - Additional fixes for log files related to logrotate
  - Allow all domains to read base etc_t file type
  - Allow logrotate to list root home directory
  - Fix labeling for /var/log/z-push
  - Allow cyrus init scriptu to manage cyrus data files
  - Dontaudit leaks of locks or generic log files to systemprocesses
  - Allow ricci-modrpm to send syslog msgs
  - Allow munin to have kill capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-184
changelog:
  - Add support for tcp/10026 port as dspam_port_t
  - Allow dspam to connect/bind to dspam_port_t
  - Add uconfined_munin_plugin_exec_t for all plugins which are not covered by munin plugins policy
  - Allow domains that can read sssd_public_t files to also list the directory
  Resolves:#881413
  - Allow programs to run in fips_mode using fips_mode boolean
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow sshd to look into the mysql home directory for authorized_keys
  - Make rsync as homemanager which allows to manage CIFS/NFS	  
  -


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-185
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  -  Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Allow winbind to manage samba_var_t sock files
  - Allow git-daemon and httpd to serve the same dir
  Resolves:#883143
  - Allow dac_override for nrpe


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-196
changelog:
  - Backport openshfit fixes
  - Allow cgred to use notify 
  Resolves:#913673
  - Allow mount to transition to gluster 
  - Fix tuned policy to make it working with the lastet tuned package


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-197
changelog:
  - Fix /etc/dhcp labeling
  - Back port openshift fixes
  - Make dirsrv-admin server restarted from console working
  - Add ftpd_use_fusefs boolean
  Resolves:#913673
  - openshift_cron_t needs dac_override


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-198
changelog:
  - Allow dirsrv-admin script to exec apache modules
  - Add labeling for dirsrv-admin lock file
  - Add labeling for /var/lib/owncloud
  - Add labeling for /var/www/moodle
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-199
changelog:
  - qemu-ga needs to execute scripts in /usr/libexec/qemu-ga
  - Allow openshift_cron_t to manage openshift_var_lib_t sym links
  - Allow dovecot-auth to execute bin_t
  - Allow mysqld-safe to execute bin_t
  - Allow procmail to manage user tmp files
  - Allow sanlock to kill svirt_t
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-203
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#966106
  - Make openshift_initrc_t as initrc domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-204
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-205
changelog:
  - Remove domtrans for quantum which needs to stay in the same domain
  - Allow qemu to manage nova lib files
  - Allow hald to read svirt images
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-217
changelog:
  - Fix virtd_lxc_t to be able to communicate with hal
  - Allow NM and wireless working together
  Resolves:#1009661
  - Allow my_print_default to read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-218
changelog:
  - Add support for /var/log/qemu-ga directory
  - Regenerate man pages for domains
  Resolves:#880728
  - Allow setgid capability for ipsec_t
  - Allow ipsec to send signull to itself
  - Add tcp/9000 as http_port_t
  - Allow dirsrv_t to create tmpfs_t directories
  - Fix git_role() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-219
changelog:
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Allow tzdate to unlink etc_t lnk files
  - Allow jabberd to connect to jabber_interserver port
  - Fix description for logging_syslog_can_read_tmp boolean
  - Update ipsec rules and labels
  Resolves:#986883
  - Allow pegasus transition to mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-220
changelog:
  - Allow cobblerd to stream connect to MySQL
  - Allow cobblerd to execute ldconfig
  - Allow openstack-glance to access to amqp
  - Add labeling for /var/run/charon.*
  - Make munin "df" plugins working
  Resolves:#908095


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-221
changelog:
  - Fix /var/run/charon labeling
  - More fix for strongswant and ipsec.secretes
  - Allow sandbox domain to use inherited user terminals


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-232
changelog:
  - Add more fixes for zabbix-agent
  - Fix neutron labeling
  - Allow all domains to read sysfs_t due to glibc change
  - Allow ping to read inherited zabbix tmp files
  Resolves:#1039851
  - Allow hostname to read/write inherited rpm script files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-233
changelog:
  - Add support for OpenShift syslog plugin
  - Allow snmpd to getattr on removeable and fixed disks
  - Add shmemnetgrp and getnetgrp to access_vectors
  Resolves:#1025758


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-235
changelog:
  - Add support for nginx
  Resolves:#1045041
  - Change shutdown_t to also read wtmp
  - Added support for hypervkvpd
  - Add preupgrade policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-236
changelog:
  - Added conman policy
  - Added label for conman port
  - Added support for mip6d policy
  - Added support for isns
  - Added rtas_errd policy
  - Added support for keepalived policy
  - Add label samba_spool_t for /var/spool/samba
  - Allow httpd_t to bind preupgrade port if httpd_run_preupgrade boolean is enabled
  - Allow openshift_cron_t to append to openshift log files
  - dontaudit sudo domains listing /dev
  - Allow read/write to login records
  - Allow auditctl getattr access on blk_file
  - Allow nova-scheduler to read utmp
  - Added stapserver policy
  - Added support for freeipmi services
  - Added lsm policy
  - Added support for pcp service
  - Added chown capability to dhcpd_t domain
  - Add boolean to allow openshift domains nfs access
  - Allow abrt to read man pages and getcap
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Dontaudit smbd_t sending out random signuls
  - Backport all zabbix changes
  - Allow mcelog write access to nscd socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-237
changelog:
  - Fixes for mirrormanager
  - Fix swift interface
  - Allow lsmd_plugin_t to read localization
  - Allow keepalived read snmp libs, Allow keepalived connect to agentx port
  - Allow keepalived read localization
  - Added setuid capability to lsm service
  - Added some swift rules to rsync policy
  - Remove duplicate line entry in .fc
  - Do not send/receive packets when ftpd_use_passive_mode is disabled
  - Add mirrormanager policy to RHEL6 Fixes Bug 1042864
  - Update permissivedomains by mirrormanager
  - Add mirrormanager policy
  - Added support for openwsmand
  - Added policy for swift
  - Added support for sblim
  - label also 64bit heartbeat libs
  - Allow kill capability on varnish
  - Added haveged policy
  - Add missing kernel_rw_stream_socket_perms
  - Label tcp/udp port no. 3052 as apc, Allow apcups to bind on apc port
  - Allow logwatch stream connect to courier service
  - Fix mcelog policy
  - Back port rsyslog fixes from RHEL7 for rsyslog7
  - Fix whitespace
  - Add support for osad
  - Fix automount policy
  - Added policy for bacula
  - add radvd_read_pid_files inteface
  - Add missing syslog-conn port
  - Allow httpd_t write to kernel keyring
  - Allow httpd_sys_script_t domain to send system log messages 
  - Allow passwd_t to write to ipa trusted user files in /tmp 
  - Boolean to allow mcelog use all the user ttys 
  - Allow icecast to use any tcp ports 
  - Define oracleasm_t as a device node 
  - Allow sudomain to getattr of kernel interface
  - Add squid directory in /var/run
  - Allow automount read nfs symlinks
  - Allow asterisk to connect to the apache ports
  - allow abrt to read mcelog log file 
  - allow udev to search radvd files under the /run dir 
  - allow auditctl getattr access on blk_file 
  Resolves:#1080555
  - Allow ssh to manage nfs links


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-238
changelog:
  - Allow domain to read an append inherited tmp files
  - Dontauit leaks of var_t into ifconfig_t
  - Allow fsdaemon_t to read/write device_t char files 
  Resolves:#1035363
  - Remove sblim_filetrans_named_content in RHEL6
  - We don't have systemd in RHEL6.
  - one more fix for bacula_admin()
  - fix bacula_run_admin()
  - Remove shadow_t label from /etc/security/opasswd 
  - Fix logrotate_use_nfs boolean
  - Allow userdom to read inherited users files in /tmp 
  - Allow certmonger_t read puppet libs
  - Allow in logging_inherit_append_all_logs also ioctl and append
  - Label pacemaker_remoted as cluster_exec_t
  - Tag some conman exec files
  - Allow conman to read localization
  - Should use rw_socket_perms rather then sock_file on a unix_stream_socket
  - Added conman fixes
  - Allow apache to manage passenger sock_files
  - Allow bacula to bind on 9103 tcp port
  - Allow postfix stream connect to antivirus
  - Allow osad to read localization


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-239
changelog:
  - Fixed lsmd_plugin_t
  Resolves:#1111619
  - Added glusterd_conf_t alias glusterd_etc_t
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory 
  Resolves:#982160
  - Label zabbix-proxy files
  Resolves:#1018211
  - allow sshd to write to all process levels in order to change passwd when running at a level
  Resolves:#837616
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range 
  Resolves:#837616
  - Rename quantum port to neutron 
  Resolves:#1024927
  - Added zarafa_read_lib_files interface
  - Added dont audit list non security files in xdm_t 
  Resolves:#1030760
  - Added more fixes relates to 
  Resolves:#1060656
  - Added dontaudit rules to xdm_t 
  Resolves:#1030760
  - Allow procmail to run zarafa-degent 
  Resolves:#1060656
  - Add userdom_user_application_domain in xauth 
  Resolves:#1013832
  - Allow dmesg read raw memory 
  Resolves:#1030762
  - Allow communication between postfix and cyrus 
  Resolves:#1057307


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-240
changelog:
  - Allow nagios to stream connect to postgresqlBZ #1015708
  Resolves:#1015708
  - Allow hypervkvp read localization
  - Fix postfix_admin()
  - Add lldpad policy for MLS


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-241
changelog:
  - Remove deny_ptrace from interfaces
  - Add setpgid procces to mip6d_t
  - Added support for hv_vss_daemon
  - Allow keepalived also managed snmp lib dirs
  - Allow chroot_user_t unconfined shell domtrans
  Resolves:#1082183
  - Label swift-object-expirer as swift_exec_t
  - Allow keepalived manage snmp files, dontaudit list tmp files
  Resolves:#1053450
  - Additional fix for calling postfix interfaces in sysadm.te to make postfix_admin() working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-243
changelog:
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-244
changelog:
  - Add support for vdsm 
  Resolves:#1064270
  - Allow userdomain role to access prelink_mask_t
  - Rename module glusterfs to glusterd 
  Resolves:#1052206
  - Allow gfs_controld_t to getattr on all file systems 
  Resolves:#1110886
  - Allow apache to manage pid sock files 
  Resolves:#1042864
  - Bind TCP/UDP sockets to the nfs port
  - The /var/run/tuned directory is not a regular file 
  Resolves:#1117685
  - Allow utilize winbind for authentication to AD. 
  Resolves:#1084177
  - Dont audit access on /etc/init.d/mcollective for kdump_t
  - FIx labeling in networkmanager.fc
  - Allow passenger to connect to MySQL
  - ALlow passenger to read locales
  - Dontaudit relabelfrom/relabelto for all variablefiles for prelink_map_t
  - Change all var_lib_t types to have also variablestatefile attribute
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-245
changelog:
  - Allow setpgid for all sandbox domains.
  - Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
  - One more fix for osad.te
  - Back port osad changes from RHEL7.
  - Rename svirt_lxc_file_t to svirt_sandbox_file_t.
  - Label nginx init script as httpd_initrc_exec_t 
  Resolves:#1045041
  - Allow postfix_smtpd to stream connect to antivirus 
  Resolves:#1105889
  - Label init thttpd file as httpd_initrc_exec_t 
  Resolves:#1069843
  - Allow httpd to setattr on httpd_log files
  Resolves:#1111581
  - Add tomcat
  - Allow zabbix to read system network state
  - Allow ndc to read random and urandom device 
  Resolves:#1110397
  - Add kerberos support for radiusd.
  - Allow procmail to ioctl on zarafa-deliver executable.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-246
changelog:
  - Add boolean to allow user login programs access to /etc/shadow
  - Use old icecast_connect_any boolean name and dontaudit list /tmp with tmp_t labeling
  - Remove unused interface rtas_errd_systemctl 
  Resolves:#1121169
  - Allow prelink_mask to use user terminals and dontaudit relabel tmpfiles.
  - Dontaudit r/w inherited lockfiles/tmpfiles for prelink_mask_t.
  - Allow prelink_mask to append all log files.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-247
changelog:
  - Add all login domain auth_can_read_shadow_passwords attribute.
  - Added support for dhcrelay service
  Resolves: #1123338
  - We need to call auth_tunable_read_shadow in auth_shadow boolean.
  - Move authlogin_shadow to authlogin.if.
  - Add filetrans also for bacula log files.
  - Dontaudit kdumpgui to read openshift_initrc_exec_t
  Resolves: #1023336
  - Allow squid to manage squid_var_run_t sock_file
  Resolves: #1102346
  - Alloe bacula manage bacula_log_t dirs
  Resolves: #1122545
  - Added sys_ptrace cap. to stapserver_t
  Resolves: #811366
  - Label also /var/run/glusterd.socket file as glusterd_var_run_t
  Resolves: #1052206
  - Added support for collectd daemon
  Resolves: #1024715
  - Label conmans pid file as conman_var_run_t, Resolves: #1122106
  - Fix authlogin_shadow boolean to have it for all login_pgm domains
  - Dontaudit r/w inherited all log files for prelink_mask_t
  - Label zabbix_var_lib_t directories
  Resolves: #1053205
  - Allow all sblim domain to read localization data
  Resolves:##1122022


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-248
changelog:
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift 
  Resolves: #1034206
  - Do not send/receive packets when ftpd_use_passive_mode is disabled 
  Resolves: #1105544
  - Allow qemu-ga domtrans to hwclock 
  Resolves: #1062384
  - Allow sshd read access to files on ftp directory 
  Resolves: #1097387
  - dontaudit r/w inherited certs for prelink_mask_t.
  - Allow sblim_gatherd_t to search all mountpoints. This is caused by ps. Should not be needed in Fedora.
  - Fix labeling in dhcpc.fc.
  - Add labels also for glusterd sockets.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-249
changelog:
  - Add support for luci.
  - Add support for rhsmd and treat it with rhsmcertd_t.
  - Make zabbix_agent_t as unconfined domain for rhel6.6.
  - Allow chroot_user_t to change process identity.
  Resolves:#1082183
  - Revert "Remove shadow_t label from /etc/security/opasswd
  - Dontaudit relabel lib_t files for prelink_mask_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-250
changelog:
  - Dontaudit read/write/setattr all pipes for prelink domains on all domains
  Resolves:#1103674
  - Allow chroot_user_t to change the role.
  - Add sys_time caps for virt_qemu_ga_t
  - Add label for /usr/sbin/luci


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-261
changelog:
  - Allow sys_ptrace and dac_override caps for collectd.
  - Add labeling for /etc/rc\.d/init\.d/htcacheclean.
  - Allow /usr/sbin/sfcbd to send audit msgs.
  - Allow postdrop to connect to master process over unix stream socket.
  - Allow ssh_t to connect to all unreserved ports.
  - Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
  - Don't relabel files under /dev/shm/
  - Allow munin_disk_plugin_t getattr access on blk_file 
  - Allow xauth_t and sshd_t to search automount_tmp_t if use_nfs_home_dirs boolean.
  - Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
  - Allow antivirus domains to read all dirs/files regardless of their MCS category set.
  - Add labeling for mariadb log/pid files/dirs.
  - Allow rsyslogd to read /proc/sys/vm/overcommit_memory file.
  - Allow slapd to read /usr/share/cracklib/pw_dict.hwm.
  - Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
  - Add support for /usr/libexec/sssd/selinux_child and create sssd_selinux_manager_t domain for it.
  - Allow qpidd to read network state and sysctls dirs
  Resolves:#1171275
  - Add labeling for /var/bacula directory.
  - mcelog runs as a daemon domain 
  - Allow shutdown to r/w iherited rhev-agetnd pipes.
  - Allow sshd to seind signull itself.
  - Add the 'base_ro_file_type' and 'base_file_type' attributes to RHEL6.
  - Allow prelink_mask_t getattr on filesystems that support xattrs
  - Allow radious to connect to apache ports to do OCSP check.
  - remove transition from unconfined user to auditctl.
  - Backport RHEL7 sblim-sfcb fixes.
  - Add bacula fixes related to unconfined scripts based on ssekidde@redhat.com patch.
  - Allow zebra to communicate with sssd 
  - Add interfaces fixes.
  - Added some optional blogs from timemaster policy to chronyd.
  - Added linuxptp policy
  - Add interface to read mysql db link files
  - Added cinder policy
  - Make munin yum plugin as unconfined by default.
  - Allow bitlbee connections to the system DBUS.
  - Allow hv_vss_daemon to call ioctl(FIFREEZE) on /boot.
  - Add rsync_server boolean to don't have a transition from initrc by default.
  - Dontaudit to r/w inherited pipes from httpd because of certmonger unconfined scripts.
  - Backport all capabilities for cvs from RHEL7.
  - Allow dccproc to execute bash.
  - Fix labeling for /usr/libexec/nm-dispatcher.action.
  - Allow logrotate to manage virt_cache.
  - Allow osad to execute rhn_check.
  - Make osad_t as unconfined domain.
  - Allow osad connect to jabber client port.
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-262
changelog:
  - Allow lsmd_t getattr all exec.
  Resolves:#1141719
  - Update afs policy
  Resolves:#1136396
  - Add support for /usr/sbin/named-sdb.
  - Add support for mongos service.
  - Allow cyrus to use tcp/2005 port.
  - More service wants to auth_use_nsswitch.
  - Allow apps that need to read sysctl_vm_overcommit_t be able to read it.
  - Update passenger rules from RHEL7.
  - Allow smartd to manage generich devices if they are created with wrong label.
  - Allow sblim-sfcb to execute itself.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-263
changelog:
  - Allow userdomain to manage pcscd pid fifo files.
  - Allow prelink domain access to /dev/console 
  Resolves:#1145662
  - Allow httpd search access on tomcat6 directory
  - Allow apcupsd to get attributes of filesystems with xattrs
  - Allow qemu-ga getattr access of all filesystems
  - Allow abrt to read network state information
  - Make collectd_t as unconfined domain.
  - Make rpcbind as nsswitch domain.
  - Back port labeling for /etc/my.cnf.d dir.
  - Allow dhcpd kill capability.
  - Allow cachefilesd to create cachefilesd_var_t
  - cvs_home backport from RHEL7.
  - Add support for new fence agent fence_mpath which is executed by fence_node
  - Allow lsmd plugin to run with configured SSSD.
  - Allow bacula access to tape devices
  - Allow sblim-sfcb setuid.
  - Allow sblim domain to read sysctls.
  - Allow ntp to read localtime and allow timemaster send a signal to ntpd.
  - Add cobblerd_t fixes
  - Allow mysqld_t to use pam
  - Dontaudit xguest_t communication with avahi_t via dbus
  - Allow cobblerd_t to communicate with sssd
  - Allow pmwebd to send and receive messages from avahi over dbus
  - Allow conman_t to commmunicate with sssd
  - Allow mysqld_t to send audit messages
  - Allow load_policy rw access to inherited sssd pipes
  - Update label for /etc/mcelog/.* files
  - Allow bacula_t to connect to psql via tcp/unix socket
  - Remove type to only match directories on /boot
  - Add more labels for ownCloud
  - Dontaudit net_admin capability for munin


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-264
changelog:
  - Allow qpidd to read own init script file.
  - Allow passenger to accept connection
  - Back port hypervkvp fixes from RHEL7
  - ALlow load_policy to list inotifyfs filesystem
  - Allow cluster domain to execute ldconfig and update lvm_read_config() interface
  -  Allow sssd_t to connect to samba TCP port
  - Allow NetworkManager to run arping
  Resolves:#1209854
  - Backport RHEL7 redis policy
  - Add apache log and lib labels for roundcubemail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-265
changelog:
  - Allow redis to create /var/run/redis/redis.sock
  - Allow fence_mpathpersist to run mpathpersist which requires sys_admin capability.
  Resolves:#1206244
  - Allow rhn_check running as rpm to domtrans to shutdown domain
  - openshift_cache_t does exist


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-266
changelog:
  - Add audit_access permissions
  - Allow cupsd_t access to files in /etc dir
  - Allow hplip to dbus chat with all users.
  - Allow sblim-gathered sys_ptrace capability.
  - Allow sys_admin capability for gfs_controld
  - Add more cobbler labels to /var/lib/tftpboot/
  - Add new smbd_tmpfs_t type.
  - Add more fixes related to timemaster+ntp+ptp4l.
  - Fix cgdcbxd_admin() interface.
  - Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0.
  - Dontaudit read access on admin_home_t for load_policy.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-267
changelog:
  - Allow ctdb to create rawip socket.
  - ALlow nmbd_t to crate nmbd_var_run_t dir under smbd_var_run_t.
  - Make ctdbd as userdom_home_reader.
  - Allow ctdbd to bind  smbd port.
  Resolves:#1219317


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-268
changelog:
  - Add labeling for /var/run/ctdb and allow samba domains to connect to ctdbd.
  Resolves:#1221929
  - Allow glusterd to read/write samba config files.
  - Update mysqld rules related to mysqld log files.
  - Add fixes for hypervkvp realed to ifdown/ifup scripts.
  - Update netlink_route_socket for ptp4l.
  - Allow sosreport to dbus chat with NM.
  - Allow glusterd to connect to /var/run/dbus/system_bus_socket.
  - ALlow glusterd to have sys_ptrace capability. Needed by gluster+samba configuration.
  - Add new boolean samba_load_libgfapi to allow smbd load libgfapi from gluster. Allow smbd to read gluster config files by default.
  - Allow gluster to transition to smbd. It is needed for smbd+gluster configuration.
  - Allow glusterd to read /dev/random.
  - Label all gluster hooks in /var/lib/gluster as bin_t. Thy are not created on the fly.
  - Update nagios_run_sudo boolean to allow run chkpwd.
  - Add labeling for /usr/sbin/kpropd.
  - Add nagios_run_sudo boolean
  - Allow ctdb to create rawip socket.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-269
changelog:
  - Fix labeling for /var/tmp/kiprop_0 to kadmind_tmp_t.
  - Allow postdrop runinng as postfix_postdrop_t to access /var/spool/postfix/public/pickup socket.
  - Allow gluster hooks scripts to transition to ctdbd_t.
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket.
  - Allow gluster transition to smbd_t also using samba init script.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
   - Update rules related to glusterd_brick_t.
   - Allow glusterd to execute lvm tools in the lvm_t target domain.
   - Allow glusterd to execute xfs_growfs in the target domain.
   - Add support for /usr/sbin/xfs_growfs.
   - Allow glusterd to create samba config files if it is started by service script and running with unconfined_u.
  Resolves:#1228109
  - Fix description for ftpd_use_passive_mode boolean.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have transition to insmod.
  - Allow glusterd to use geo-replication gluster tool.
  - Remove gluster from permissive domains.
  Resolves:#1229605


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-276
changelog:
  - Allow gluster to manage own log files.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  - Label gluster python hooks also as bin_t.
  - Allow samba_t net_admin capability to make CIFS mount working.
  Resolves:#1229605
  - Allow ssh_keygen_t to manage keys located in /var/lib/gluster.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-278
changelog:
  - Allow logrotate get attributes of all unallocated tty device nodes.
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
  - Allow glusterd to connect to init.
  Resolves:#1230371
  - Allow gluster do dbus chat with domain running as initrc_t.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py
  - Make work on RHEL6
  Resolves: #541634
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.38-1
changelog:
  - Remove dependancy on X from sedispatch
  - Setroubleshoot-server no longer requires X
  Resolves: #541634


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.38-2
changelog:
  - Needs to require libreport-gtk and pygtk2-libglade
  - sealert analyze option can not be used with another option
  - Fix setroubleshootd man page


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.
  - Fix requires to include pygtk2-libglade


author: <dwalsh@redhat.com> - 3.0.45-1
changelog:
  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.47-4
changelog:
  - Make sealert working if description contains parenthesis
  - Remove -H from man page
  Resolves:#788196


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 2.1-0
changelog:
  - Resolves: bz585923
  - Resolves: bz585942
  - Resolves: bz586409
  - Resolves: bz586389
  - Resolves: bz548096
  - Resolves: bz557828
  - Resolves: bz563637
  - Resolves: bz584253
  - Resolves: bz462823
  - Resolves: bz528881
  - Resolves: bz566170
  - Resolves: bz578787
  - Resolves: bz581817
  - Resolves: bz581826
  - Resolves: bz584695
  - Resolves: bz568637
  - Resolves: bz584767
  - Resolves: bz586370


author: Adam Stokes <ajs at redhat dot com> = 2.2-0
changelog:
  - Resolves: bz581921
  - Resolves: bz584253
  - Resolves: bz562651
  - Resolves: bz566170
  - Resolves: bz586450
  - Resolves: bz588223
  - Resolves: bz559737
  - Resolves: bz586405
  - Resolves: bz598978
  - Resolves: bz584763


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
    Resolves: bz622407
  - Add sssd plugin to collect configuration and logs
    Resolves: bz624162
  - Collect /etc/anacrontab in system plugin
    Resolves: bz622527
  - Correct handling of redhat-release for el6
    Resolves: bz622528


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
    Resolves: bz624162
  - Add support for collecting entitlement certificates in rhn.py
    Resolves: bz678665


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
    Resolves: bz659467
  - Collect /etc/dhcp in dhcp.py plugin
    Resolves: bz676522
  - Collect dmsetup ls --tree output in devicemapper.py
    Resolves: bz675559
  - Collect lsblk output in filesys.py
    Resolves: bz679433


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18.el6
changelog:
  - Collect fence_virt.conf in cluster module
    Resolves: bz760995
  - Fix collection of /proc/net directory tree
    Resolves: bz730641
  - Gather output of cpufreq-info when present
    Resolves: bz760424
  - Fix brctl showstp output when bridges contain multiple interfaces
    Resolves: bz751273
  - Add /etc/modprobe.d to kernel module
    Resolves: bz749919
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz782589
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz749262
  - Collect stderr output from external commands
    Resolves: bz739080
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
    Resolves: bz784862
  - Fix installed-rpms formatting for long package names
    Resolves: bz767827
  - Add symbolic links for truncated log files
    Resolves: bz766583
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz771501
  - Use correct paths for tomcat6 in RHN module
    Resolves: bz749279
  - Obscure root password if present in anacond-ks.cfg
    Resolves: bz790402
  - Do not accept embedded forward slashes in RHN usernames
    Resolves: bz771393
  - Add new sunrpc module to collect rpcinfo for gluster systems
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19.el6
changelog:
  - Collect additional diagnostic information for realtime systems
    Resolves: bz789096
  - Improve sanitization of RHN user and case number in report name
    Resolves: bz771393
  - Fix verbose output and debug logging
    Resolves: bz782339 
  - Add basic support for CloudForms data collection
    Resolves: bz752666
  - Add support for Subscription Asset Manager diagnostics
    Resolves: bz752670


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22.el6
changelog:
  - Correct aeolus debug invocation in CloudForms module
    Resolves: bz752666
  - Update gluster module for gluster-3.3
    Resolves: bz784061
  - Add additional command output to gluster module
    Resolves: bz768641
  - Add support for collecting gluster configuration and logs
    Resolves: bz752549


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-24.el6
changelog:
  - Fix katello and aeolus command string syntax
    Resolves: bz752666
  - Remove stray hunk from gluster module patch
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29.el6
changelog:
  - Collect the swift configuration directory in gluster module
    Resolves: bz822442
  - Update IPA module and related plug-ins
    Resolves: bz812395


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-54.el6
changelog:
  - [hpasm] new plugin to collect HP ASM information
    Resolves: bz915115
  - [sos] improve handling of fatal IO errors
    Resolves: bz1085042
  - [bootloader] collect grub.conf for UEFI based systems
    Resolves: bz1076388
  - [ctdb] add plugin to collect Samba CTDB information
    Resolves: bz961041
  - [keepalived] new plugin
    Resolves: bz1107862
  - [sssd] scrub ldap_default_authtok in sssd plugin
    Resolves: bz1013366
  - [haproxy] new plugin
    Resolves: bz1107866
  - [gluster] add 'logsize' and 'all_logs' plugin options
    Resolves: bz1002619


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-55.el6
changelog:
  - [selinux] pass --input-logs when calling ausearch
    Resolves: bz1032706
  - [printing] fix cups log file size limiting
    Resolves: bz1061529
  - [auditd] fix log size limiting
    Resolves: bz1061529
  - [hardware] call hardware.py directly instead of invoking python
    Resolves: bz1041770


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-56.el6
changelog:
  - [ipa] add ipa-replica-manage output
    Resolves: bz1012410
  - [bootloader] Include /etc/yaboot.conf
    Resolves: bz1001941
  - [cluster] collect /sys/fs/gfs2/*/withdraw
    Resolves: bz997174
  - [general] do not collect /var/log/sa
    Resolves: bz1001600
  - [networking] avoid Cisco cdp paths in /proc and /sys
    Resolves: bz1004936
  - [sar] Handle compressed binary data files better
    Resolves: bz1001600
  - [sar] Add file size limits
    Resolves: bz1001600
  - [sar] Enable XML data collection
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-57.el6
changelog:
  - [tomcat] update for tomcat6 and add password filtering
    Resolves: bz1088070
  - [filesys] collect dumpe2fs -h output by default
    Resolves: bz1105629
  - [rpm] reduce number of calls to rpm
    Resolves: bz1019872
  - Verify fewer packages in rpm plug-in
    Resolves: bz1019872
  - [bootloader] elide bootloader password
    Resolves: bz1101311
  - [plugin] backport do_path_regex_sub()
    Resolves: bz1101311
  - [networking] do not attempt to read use-gss-proxy
    Resolves: bz1079954
  - [mysql] limit log collection by default
    Resolves: bz1015783
  - [mysql] add optional database dump support
    Resolves: bz1032262
  - [docs] update man pages
    Resolves: bz1022226
  - [sosreport] log exceptions during Plugin.postproc()
    Resolves: bz1020445
  - [distupgrade] elide passwords in kickstart user directives
    Resolves: bz1052344


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-60.el6
changelog:
  - [mongodb] backport new plugin from upstream
  - [activemq] backport new plugin from upstream
  - [openshift] sync plugin with upstream
  - [plugin] backport collectExtOutputs and addCopySpecs
  - Make OpenShift module collect domain information
  - Add 'gear' option to OpenShift module
  - Add OpenShift module
    Resolves: bz1039755
  - [plugin] backport addCopySpecLimit tailit parameter
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-61.el6
changelog:
  - [powerpc] backport plugin from upstream
    Resolves: bz977190
  - [devicemapper] set locking_type=0 when calling lvm2 commands
    Resolves: bz1102282
  - [nfsserver] collect 'exportfs -v'
    Resolves: bz985512
  - [openshift] improve password redaction
    Resolves: bz1039755
  - [openshift] don't collect all of /etc/openshift
    Resolves: bz1039755


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-62.el6
changelog:
  - Restrict ldap and ds plugin paths to avoid collecting secrets
    Resolves: bz994628
  - Add certutil output to ldap and ds plugins to summarize certs
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-65.el6
changelog:
  - [grub] Fix grub.conf path for grub-1.x versions
    Resolves: bz1076388
  - [ds] Fix logging exception when plugin force-enabled
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-68.el6
changelog:
  - [ds] add collection of ds admin server configuration
    Resolves: bz994628
  - [ldap] ensure /etc/openldap/ content is collected
    Resolves: bz994628
  - [plugintools] preserve permissions on directories
    Resolves: bz1069786


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-14
changelog:
  - [mysql] test for boolean values in dbuser and dbpass
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-15
changelog:
  - [global] update el6 to upstream 3.2 release 
    Resolves: bz1144525
  - [global] sync 3.2-15.el6 with RHEL-7.1
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-16
changelog:
  - [cluster] Added package luci and fix lockdumps capturing.
    Resolves: bz1171186
  - [puppet] Adding new plugin for puppet
    Resolves: bz1172880
  - [block] parted will use sector units instead of human units.
    Resolves: bz1086537
  - [foreman] Added option to prevent generic resource collection with foreman plugin. Remove the plugin katello since data collection done by foreman-debug.
    Resolves: bz1135290


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-17
changelog:
  - [policy/redhat] use /tmp as default temporary directory
  - [global] remove dependency on python-six
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-18
changelog:
  - [openshift] Collect additional config files.
    Resolves: bz1166874
  - [activemq] Honour all_logs and get config on RHEL.
    Resolves: bz1165878


author: Shane Bradley <sbradley@redhat.com> = 3.2-19
changelog:
  - [cluster] Ensure cluster sets 'make' to False when calling get_cmd_output_path().
    Resolves: bz1190723


author: Shane Bradley <sbradley@redhat.com> = 3.2-26
changelog:
  - [cluster] Scrub password from crm_report data.
    Resolves: bz1206581
  - [networking] Use the correct options for nmcli.
    Resolves: bz1206661


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Initial EPEL release based on the rawhide .spec cleaned up from the parts
    that are not useful for EPEL (because the needed dependencies are not available)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Added spice-gtk-0.6-add-generated-files.patch to be able to build without
    perl-Text-CSV
  - Initial import of spice-gtk in RHEL CVS based on the EPEL .spec
  - Related: rhbz#708417


author: Hans de Goede <hdegoede@redhat.com> - 0.8-1
changelog:
  - Rebase to 0.8 upstream release
    Resolves: rhbz#773642
  - This release add support for usbredirection
    Resolves: rhbz#758100
  - This release fixes spice-gtk crashing on machines with no soundcard
    Resolves: rhbz#772118


author: Hans de Goede <hdegoede@redhat.com> - 0.11-2
changelog:
  - Fix a crash triggered when trying to view a usbredir enabled vm from
    virt-manager
    Related: rhbz#758100


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-3
changelog:
  - Fix cursor is displayed on each guest screen when mouse is in server mode
    Resolves: rhbz#804308
  - Fix --spice-color-depth=16 does not seem to work.
    Resolves: rhbz#802898
  - Fix cannot leave full-screen when mouse is grabbed in server mode mouse
    Resolves: rhbz#804307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-6
changelog:
  - Fix blue-tinted video with old Spice server
    Resolves: rhbz#807389
  - Fix segfault during switch-host migration
    Resolves: rhbz#807410
  - Fix switch-host migration failure with SSL
    Resolves: rhbz#802574
  - Fix crash during migration while playing video
    Resolves: rhbz#808567
  - Requires gtk2 >= 2.18.9-10
    Resolves: rhbz#809033


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-7
changelog:
  - Handle grab-broken event
    Resolves: rhbz#807292
  - Fix segfault with large clipboard copy-paste
    Resolves: rhbz#809145
  - Fix cursor not hidden
    Resolves: rhbz#810588
  - Fix segfault when closing while recording
    Resolves: rhbz#810247
  - Add USB support to controller
    Resolves: rhbz#807296
  - Add WAN support to controller
    Resolves: rhbz#787449


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-3
changelog:
  - Add info message when USB dialog is empty
    Resolves: rhbz#804187
  - Properly reset usb channels after non-seamless migration
    Resolves: rhbz#861332
  - Fix read error handling for USB redirection
    Related: rhbz#842354
  - Auto-discover already plugged-in USB devices
    Resolves: rhbz#820964
  - Add support for disabling Ctrl+Alt+Del
    Resolves: rhbz#807771


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-4
changelog:
  - Fix application of Patch2, it includes the git commit log which
    contained a diff hunk which %patch happily applied, which caused
    https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
    Related: rhbz#804187


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.14-5
changelog:
  - Apply color conversion when creating image
    Resolves: rhbz#843134
  - Show correct ungrab key combination in spicy
    Resolves: rhbz#851090
  - Fix sending 00 scancodes to guests
    Resolves: rhbz#868237
  - Improve open_host() debugging message
    Resolves: rhbz#858232
  - Empty host subject from qemu should only validate hostname
    Resolves: rhbz#858228
  - Fix disabling mouse acceleration on X11
    Resolves: rhbz#867885
  - use more explicit SSL error message
    Resolves: rhbz#846666


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-6
changelog:
  - Don't ask for root/admin password when users want to redirect USB
    devices
    Resolves: rhbz#859392


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.20-1
changelog:
  - Upstream release v0.20
    Resolves: rhbz#961452
  - snappy has been renamed spicy-screenshot
  - Adaptive video streaming support
    Resolves: rhbz#978405
  - Disable auto-mount of devices when USB auto share is enabled and active
    Resolves: rhbz#812972
  - Print actual host where spice-session.c connects
    Resolves: rhbz#879651
  - Fix only one desktop effect to be disabled can be specified
    Resolves: rhbz#955277
  - Accept CA certificate directly, not as a file
    Resolves: rhbz#882329
  - Don't ignore secure channels controller messages
    Resolves: rhbz#879352
  - Don't grab mouse cursor on client --> server mouse mode switch
    Resolves: rhbz#830760
  - Fix crashes at first Shift-Ctrl-V in Microsoft Outlook
    Resolves: rhbz#906558
  - Print list of channels usable on init
    Resolves: rhbz#834513
  - Fix segfaults during spice migration with SSL when running from cli
    Resolves: rhbz#855870


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-3
changelog:
  - Add versioned Requires for glib2/gtk2 as spice-gtk is using symbols
    which were added in these versions
    Resolves: rhbz#980400
  - If software smartcard support is already initialized when creating a
    smartcard channel, don't consider this as a fatal error
    Resolves: rhbz#815639
  - Convert text line-endings if necessary
    Resolves: rhbz#752350


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-4
changelog:
  - Adjust BuildRequires to make sure new enough glib/gtk+ are used
    at build time as glib 2.26 is needed for proxy support
    Resolves: rhbz#948618


author: Alon Levy <alevy@redhat.com> 0.20-11
changelog:
  - Fix failed RELRO test on spice-client-glib.
    Resolves: rhbz#998529 (previous version failed RELRO rpmdiff test)


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-4
changelog:
  - Remove CAD rhel-only patches. Resolves: rhbz#1108628
  - Add rhel-only SPICE_NOSCALE. Resolves: rhbz#1054757
  - Check that clipboard request does not belong to remote. Resolves: rhbz#1108642


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Uri Lublin <uril@redhat.com> - 0.4.2-10
changelog:
  - spice: server: new-api (4 more patches)
       + streaming-video, agent-mouse, playback-compression.
  Related: #571286


author: Uri Lublin <uril@redhat.com> - 0.4.2-13
changelog:
  - remove Requires and BuildRequires mesa-libGLU-devel
    + open-gl is now disabled.
  - bumped release to -13 due to tag issue
  Related: #482556


author: Uri Lublin <uril@redhat.com> - 0.4.2-15
changelog:
  - Fix unsafe accesses
    + fix unsafe guest data accessing.
    + fix unsafe free() call.
    + fix unsafe cursor items handling.
    + add missing overflow check.
  Resolves: #568811


author: Uri Lublin <uril@redhat.com> - 0.7.2-2
changelog:
  - Rebase to spice upstream release 0.7.2
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.7.2-4
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client (not part of this package)
    - track number of expected reader insertions
  Resolves: #674937


author: Uri Lublin <uril@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream 0.7.3:
    + Mostly smart-card updates:
      - including all the changes in 0.7.2.4
    + Some gcc warning cleanups.
  - Fix permissions of spice-server.pc
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.0-1
changelog:
  - Rebase to upstream 0.8.0
    + Includes "Fix segfault on migration" patch
    + Some spice-client bug fixes.
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.1-1
changelog:
  - Rebase to upstream 0.8.1, including
   + Make copy/paste support configurable
   + Some server/vdagent bugs fixed
  Resolves: #710200


author: Uri Lublin <uril@redhat.com> - 0.8.2-1
changelog:
  - Rebase to upstream 0.8.2, including
   + sasl support (fdo bz 34795)
   + support guest async io
   + support guest suspend and hibernate
   + add symbol versioning to libspice-server.so
   + prevent running an old spice-server with a newer qemu
   + Bug fixes (RHBZ): 714801, 713474, 674532, 653545
   + BuildRequires spice-protocol >= 0.8.1 and cyrus-sasl-devel
  Resolves: #723676


author: Uri Lublin <uril@redhat.com> - 0.8.2-3
changelog:
  - Drop unnecessary X11 and alsa requires from spice-server.pc
    + Fix a rpmdiff warning
  Related: rhbz#723676
  - server/red_dispatcher: fix wrong resolution set for tablet
  Resolves: rhbz#726973


author: Uri Lublin <uril@redhat.com> - 0.8.2-4
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - client patches are not applied.
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#738266


author: Hans de Goede <hdegoede@redhat.com> - 0.10.1-1
changelog:
  - Rebase to upstream 0.10.1
  Resolves: rhbz#758089
  - This release adds support for usbredirection
  Resolves: rhbz#758091
  - This release fixes a bug in smartcard error handling
  Resolves: rhbz#741259


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-4
changelog:
  - add more logging for expired/invalid tickets
    Resolves: rhbz#787669
  - add more logging about use of certificates
    Resolves: rhbz#787678


author: Yonit Halperin <yhalperi@redhat.com> - 0.10.1-6
changelog:
  - Fix glitches in youtube movies
      + support video streams with frames of different sizes
    Resolves: rhbz#813826


author: Yonit Halperin <yhalperi@redhat.com> 0.10.1-9
changelog:
  - Fix memory leak during video streaming
    Resolves rhbz#821334
  - Fix segfault introduced when fixing rhbz#813826
    Related: rhbz#813826


author: Uri Lublin <uril@redhat.com> 0.11.3-1
changelog:
  - Rebase to upstream spice-server 0.11.3, which adds:
    * Support for seamless migration
    * Support for Render
    * spice-protocol is in the tarball now (a submodule in git)
    Resolves: rhbz#836123
    Resolves: rhbz#842353


author: Uri Lublin <uril@redhat.com> 0.12.0-1
changelog:
  - Rebase to upstream spice-server 0.12.0, which adds:
    * support setting client monitor configuration via device
      QXLInterface::client_monitors_config
    * support notifying guest of client capabilities
      QXLInterface::set_client_capabilities
    * new capability for A8 Surface support
    Resolves: rhbz#836123
    Resolves: rhbz#842353
    Resolves: rhbz#842310


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-6
changelog:
  - Fix setting of the guest resolution from a multi monitor client
    Resolves: rhbz#680227
  - Limit build archs to i686 and x86_64
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-7
changelog:
  - Daemonize per user session vdagent process on startup, this avoids a long
    delay after logging in
  - Fix mouse not working with the agent installed
    Resolves: rhbz#688257


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-8
changelog:
  - Fix chunk demultiplexing when chunks from messages for different ports
    get intermixed
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-1
changelog:
  - New upstream release 0.8.1
    Resolves: rhbz#722477
  - Fixes vdagent not auto restarting when vdagentd gets restarted
    Resolves: rhbz#681797
  - Fixes vdagent crash when copying large (multiple megabytes) amount of data
    from the client clipboard to the guest clipboard
    Resolves: rhbz#690164


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-3
changelog:
  - Fix resolution sync not working when connecting with a multi monitor client
    to a single monitor guest
    Resolves: rhbz#748760


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
    Resolves: rhbz#842355
  - This switches to syslog for logging, adding timestamps, etc. to the logs
    Resolves: rhbz#747894
  - This adds support for dynamically adding monitors and resolutions
    Resolves: rhbz#842298


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-5
changelog:
  - Allow having a sparse monitor config (ie monitor 1 and 3 active)
    Resolves: rhbz#894036
  - Fix session spice-vdagent crash on system spice-vdagentd restart
    Resolves: rhbz#894365
  - Don't log a warning when there are less qxl devices then monitors
    Resolves: rhbz#895004
  - Restore old monitor config when failing to set a new monitor config
    Resolves: rhbz#881020


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - Rebase to spice-vdagent-0.14.0 release
  - Drop all patches (all upstream)
    Resolves: rhbz#951596
  - Advertise Unix line-endings for clipboard data
    Resolves: rhbz#799482
  - Add support for setups with multiple Screens
    Resolves: rhbz#904082
  - Make console-kit integration runtime configurable
    Resolves: rhbz#904084


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-2
changelog:
  - Silence session agent error logging when not running in a vm
    Resolves: rhbz#999804
  - Release guest clipboard ownership on client disconnect
    Resolves: rhbz#1003977


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-5
changelog:
  - Add support for TIMESTAMP/STRING selection types, this fixes copy and paste
    issues with some applications (vncviewer for example).
    Resolves: rhbz#1117764


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-6
changelog:
  - randr: Make resolution changing more robust
    Resolves: rhbz#1206117, rhbz#1130080 and rhbz#1209550


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-8
changelog:
  - Cannot get same result enablng second monitor after it was disabled using
    Guest's "Display Preference"
    Resolves: rhbz#1086657


author: Uri Lublin <uril@redhat.com> 2.4-2
changelog:
  - add npplat.h to Makefile.am sources
  - add nsISpicec.xpt to Makefile.am EXTRA_DIST
  - add version to plugin name string
  Resolves: #672761
  - change location & name  of logfile & unix-domain-socket
  Resolves: #630601
  - look for spicec in /usr/bin if not found in /usr/libexec
  Resolves: #672497


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-13
changelog:
  - Fix SendCtrlAltDelete property name so that enabling/disabling
    Ctrl+Alt+Del from the rhev/ovirt portal actually works
    Related: rhbz#752090


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-17
changelog:
  - Add WAN options to spice-xpi plugin
    Resolves: rhbz#747313
  - Add controller messages for new USB redirection
    Resolves: rhbz#807303


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.15-4
changelog:
  - Related: rhbz#543948
  - TPROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-1
changelog:
  - Resolves: #564296 - Rebase to new upstream tarball (fixes licensing issues)
  - Resolves: #561743 - CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)
  - fixes rpmlint issues in spec file
  - fixed rpmlint issue initscript file


author: Jiri Skala <jskala@redhat.com> -7:3.1.4-1
changelog:
  - Resolves: #564296 - Rebase squid to stable upstream tarball 3.1.4
  - bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-1
changelog:
  - Resolves: #639365 - Rebase squid to version 3.1.10
  - Resolves: #666533 - small memleak in squid-3.1.4


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-2
changelog:
  - Resolves: #735448 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser
  - removed unused patch from cvs


author: Michal Luscon <mluscon@redhat.con> - 7:3.1.10-8
changelog:
  - Resolves: #844723 - NTLM pass-through authentication does not work
  - Resolves: #832484 - Squid exits when IPv6 is disabled and request contains IPv6 address


author: Michal Luscon <mluscon@redhat.com> - 7:3.1.10-10
changelog:
  - Resolves #798090 - Client timeout uses server-side "read_timeout"
  - Resolves #833086 - Private md5 hash function does not comply FIPS
  - Resolves #782732 - Squid crashes by segfault when it reboots
  - Resolves #797571 - Squid userid is not added to wbpriv group
  - Disable strict-error-checking on account of squid-fips.patch


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-22
changelog:
  - Resolves: #1066368 - memory utilization of Squid becomes very large
  - Resolves: #1011952 - cachemgr.cgi doesn't work by default
  - Resolves: #876980 - Init script: missing condrestart in Usage
  - Resolves: #1058207 - Child process of squid exited abnormally and generated core files
  - Resolves: #998809 - assert(!fd_table[fd].closing()) failed in comm_write()


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-35
changelog:
  - Resolves: #1114714: When squid returns an ACL tag utilizing an external ACL,
    sometimes the incorrect tag is used for redirection


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version
    Resolves: rhbz#554321
  - drop *.pod man page duplicates from docs
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added file dialog box
  - cleaned up code
  - renamed okButton to saveButton in ksconfig.py
  - renamed Cancel button to Exit in interface
  - added /boot to default partition list
  - added menu icon


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added scrollwindow around partition information
  - made all widgets except partition scrollwindow unexpandable so that when the main window is resized only the partition list gets bigger
  - increased release number


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added emulate three buttons and probe for mouse options
  - added preview configuration window
  - modified basic.py to use dictionaries to store combo box selections


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added po directory
  - added grub password and initialize the disk label
  - added help manual and function to display it


author: Tammy Fox <tfox@redhat.com>
changelog:
  - Added optional ftp username and password
  - Added preview menu item
  - Added bootloader --upgrade
  - Added swap --recommended
  - Added %packages -- resolvedeps and %packages --ignoredeps


author: Brent Fox <bfox@redhat.com>
changelog:
  - completed the port to gtk2
  - Fixed bug 65835
  - Fixed bug 66815
  - Fixed bug 64453 (with help from menthos@menthos.com)


author: Tammy Fox <tfox@redhat.com> 2.3.2-2
changelog:
  - Updated list of langs
  - Reimplemented keyboard list to use list from rhpl
  - Fix for iter_next change


author: Brent Fox <bfox@redhat.com> 2.3.2-16
changelog:
  - Don't write out --emulthree if No Mouse is selected
  - Fix gtk.glade.bindtextdomain so that the glade screens pull in translations


author: Brent Fox <bfox@redhat.com> 2.3.4-1
changelog:
  - Handle opening existing kickstart files
  - Handle multiple ethernet interfaces
  - Don't require rootpassword on upgrades


author: Brent Fox <bfox@redhat.com> 2.3.4-2
changelog:
  - rebuild for completeness
  - added some new system profiling code, but it's not exposed in the UI yet


author: Brent Fox <bfox@redhat.com> 2.5.11-2
changelog:
  - handle missing mouse line (bug #124341)
  - use N_ instead of _ in packages.py (bug #124144)
  - remove code for dead firewall widgets (bug #124342)


author: Chris Lumens <clumens@redhat.com> - 2.5.16-1
changelog:
  - Fix display in indic locale (#138310) and (#138601)
  - Monitor order (#127477)
  - Translation of RAID message (#127687)
  - Unencrypted root passwords (#134678)
  - Broken nfs line parsing (#134681)


author: Chris Lumens <clumens@redhat.com> - 2.5.18-1
changelog:
  - Get package group lists and their translations out of the comps.xml file
    instead of reying on a built-in (and out of date) list.
  - Added an "Install Everything" button (#134679).


author: Chris Lumens <clumens@redhat.com> - 2.5.19-1
changelog:
  - Fixed a segfault in pygtk on the partitioning screen.
  - Fixed RAID editing screen so the config values don't change if you
    repeatedly edit a RAID volume.


author: Chris Lumens <clumens@redhat.com> 2.5.24-1
changelog:
  - Remove mouse and langsupport.  These two options have been removed from
    kickstart so we shouldn't be generating invalid files.
  - Fail if we read a line we don't understand instead of being silent.
  - Deal with drivers instead of cards due to kudzu changes.


author: Chris Lumens <clumens@redhat.com> 2.6.4-1
changelog:
  - Convert package selection to using pirut (#178759).
  - Partitioning screen fixes for cciss.
  - Use consolehelper.


author: Chris Lumens <clumens@redhat.com> 2.6.10-1
changelog:
  - Fix unencrypted root password traceback (#190487).
  - Try harder to get a base repo enabled (#190508).


author: Chris Lumens <clumens@redhat.com> 2.6.14-1
changelog:
  - Use updated translations (#210728).
  - Update documentation (#210863).
  - Don't enable yum plugins.
  - Disable popup menu on the package selection screen.


author: Chris Lumens <clumens@redhat.com> 2.6.15-1
changelog:
  - Don't need to be root to run system-config-kickstart (patch from
    Panu Matilainen <Panu.Matilainen@nokia.com>, #211998).


author: Chris Lumens <clumens@redhat.com> 2.6.18-1
changelog:
  - Don't require a root password (#215190).
  - Disable package screen if yum couldn't download (#216439).


author: Chris Lumens <clumens@redhat.com> 2.7.0-1
changelog:
  - Use system-config-securitylevel to provide the firewall page.
  - Speed up startup and shutdown.
  - If package selection is disabled, don't forget whatever was in the
    original kickstart file (#217165).


author: Chris Lumens <clumens@redhat.com> 2.7.1-1
changelog:
  - Update to use new pykickstart.
  - Don't traceback if no monitor or x driver is selected.
  - Handle pykickstart exceptions by displaying an error dialog.


author: Chris Lumens <clumens@redhat.com> 2.7.2-1
changelog:
  - Add package-level selection and removal (#222592).
  - Add UI for the key command (#226718).
  - Fix iter handling on the partition screen for auto partitions (#225087).


author: Chris Lumens <clumens@redhat.com> 2.7.4-1
changelog:
  - Fix loading packages section (#232285).
  - Fix preview/save on upgrade (#232282).
  - Add UI for authconfig's --ldaploadcert option (#232664).


author: Chris Lumens <clumens@redhat.com> 2.7.5-1
changelog:
  - Default to installing instead of upgrading.
  - Set a default SELinux setting when started up.
  - Don't write out remove lines for packages not available on the
    installation architecture.


author: Chris Lumens <clumens@redhat.com> 2.7.12-1
changelog:
  - Rework network device dialog to not use four input boxes for each address.
  - Don't require a gateway or nameserver address (#215191).


author: Chris Lumens <clumens@redhat.com> 2.7.13-1
changelog:
  - Fix a traceback when importing yum (#337161).
  - Remove obsolete translation (#332501).
  - Rework bootloader UI to make it easier to add other arches.


author: Chris Lumens <clumens@redhat.com> 2.7.14-1
changelog:
  - Don't destroy the save dialog when it's closed.
  - If the key checkbutton is not active, remove the key setting (#226718).
  - Fix typo in LDAP authconfig parameter (#239817).
  - Use F1 as the help shortcut (#429959).
  - Translation updates (#429611).
  - More error handling when yum fails to init (#426447).
  - Update documentation license (#419071, kwade).


author: Chris Lumens <clumens@redhat.com> 2.7.15-1
changelog:
  - Offer the same passalgo options that authconfig now does (#173867).
  - Don't traceback if saving doesn't work (#436406).
  - When the Cancel button is pressed, quit (#436406).
  - Prompt for a disk/part when RAID is selected (#432914).
  - Fix another typo in ldaploadcacert handling.
  - If the kickstart file cannot be opened, display an error (#431950).


author: Chris Lumens <clumens@redhat.com> 2.7.17-1
changelog:
  - Support --display= (#450431).
  - No longer use rhpl for translations.
  - Sort keyboard list by descriptive name, not by console map.
  - Remove most of the xconfig and monitor command support.
  - Use s-c-date's timezone list since that's what anaconda does (#445195).


author: Chris Lumens <clumens@redhat.com> 2.7.20-1
changelog:
  - Don't make the open dialog tiny.
  - Fix a traceback caused by methods moving out of GroupSelector.py in anaconda.
  - Don't remove the byte-compiled python files from a scriptlet.


author: Chris Lumens <clumens@redhat.com> - 2.7.21-1
changelog:
  - Add "make bumpver" target from pykickstart.
  - Translate spaces in timezones to underscores when reading and writing (#475129).


author: Chris Lumens <clumens@redhat.com> - 2.7.22-1
changelog:
  - Use dataList().append when adding partitions and network devices (#492100).
  - Update translation files (#490018). (clumens)
  - Lots of translation file udpates.


author: Chris Lumens <clumens@redhat.com> - 2.8.0-1
changelog:
  - Allow specifying anything for a network device name, not just ethX (#508089).
  - Don't traceback when opening files with null bytes (#508092).
  - Make the OK button on some dialogs insensitive until changes happen (#493887).
  - Don't traceback if the filename entry is blank (#500409).
  - Lots more UI style/layout updates (#493842, #493857, rrakus).
  - Don't traceback if given an invalid language or timezone (#487390).
  - Update to glade3 (#495754, rrakus).
  - Add a progress window when saving or previewing files (#493879, rrakus).
  - Use the standard about/license dialog (rrakus, #493926).
  - Center dialogs on the parent (rrakus, #493823).


author: Chris Lumens <clumens@redhat.com> - 2.8.1-1
changelog:
  - Change the skipx blurb to make more sense (#493835).
  - Update to using python-meh for exception handling instead of rhpl.
  - Do VERSION substitution on all files.


author: Chris Lumens <clumens@redhat.com> - 2.8.3-1
changelog:
  - Add ext4, make it the default (#544079).
  - Add support for authconfig --enablefingerprint (#539371).
  - Fix an import error (#530739, nelsoninva AT gmail.com).
  - Update lots of translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.4-1
changelog:
  - Don't overwrite tsInfo with a new instance (#541052). (clumens)
  - Correct rpmlint errors found with the .spec file. (clumens)
  - Use OptionParser instead of the old getopt module (#553045). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.6-1
changelog:
  - Don't traceback when loading the Preview dialog a second time (#593259). (clumens)
  - Don't install the icon to /usr/share/system-config-kickstart too (#594361). (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> 2.8.6.3-1
changelog:
  - Clear out the partitioning store when opening a new file.
    Resolves: rhbz#610740
  - Default to SHA512 for passwords.
    Resolves: rhbz#633202


author: Tim Waugh <twaugh@redhat.com> 0.7.7-1
changelog:
  - Updated to system-config-printer-0.7.7.
  - Updated to pycups-1.9.9.
  - Desktop file.
  - Requires PyXML.


author: Tim Waugh <twaugh@redhat.com> 0.7.7-2
changelog:
  - Ship PAM and userhelper files.
  - Requires usermode.
  - Added missing options.py file.
  - Fix getClasses() in pycups.


author: Tim Waugh <twaugh@redhat.com> 0.7.31-1
changelog:
  - 0.7.31:
    - Select recommended driver automatically (bug #208606).
    - Better visibility of driver list (bug #203907).


author: Tim Waugh <twaugh@redhat.com> 0.7.32-1
changelog:
  - Updated to pycups-1.9.13 for HTTP_FORBIDDEN.
  - 0.7.32:
    - Handle HTTP errors during connection (bug #208824).
    - Updated translations (bug #208873).


author: Tim Waugh <twaugh@redhat.com> 0.7.36-1
changelog:
  - 0.7.36:
    - Match against commandset (bug #214181).
    - Parse 'ieee1284' foomatic autodetect entries (bug #214761).
    - Don't remove foomatic PPDs from the list (bug #197331).


author: Tim Waugh <twaugh@redhat.com> 0.7.38-1
changelog:
  - Updated pycups to 1.9.15.
  - 0.7.38:
    - Fixed a bug in the 'ieee1284'/'ppd-device-id' parsing code.


author: Tim Waugh <twaugh@redhat.com> 0.7.39-1
changelog:
  - 0.7.39:
    - Busy cursor while loading foomatic and PPD list (bug #215527).
    - Make PPD NickName selectable.
    - Added SMB hint label on device screen (bug #212759).


author: Tim Waugh <twaugh@redhat.com> 0.7.40-1
changelog:
  - 0.7.40:
    - Removed username:password from hint string because we add that in
      afterwards.
    - Don't set button widths in create-printer dialog (bug #217025).


author: Tim Waugh <twaugh@redhat.com> 0.7.41-1
changelog:
  - Updated pycups to 1.9.16.
  - 0.7.41:
    - Reconnect smoothly after uploading new configuration.
    - Update lpoptions when setting default printer if it conflicts with
      the new setting (bug #217395).
    - Fixed typo in show_HTTP_Error (bug #217537).
    - Don't pre-select make and model when not discoverable for chosen
      device (bug #217518).
    - Set Forward button sensitive on Device screen in new-printer
      dialog (bug #217515).
    - Keep Server Settings selected after applying changes if it was selected
      before.
    - Set Connecting dialog transient for main window.
    - Center Connecting dialog on parent.
    - Optional 'reason' argument for cupshelpers.Printer.setEnabled.
    - Describe devices that have no optional parameters.


author: Tim Waugh <twaugh@redhat.com> 0.7.42-1
changelog:
  - 0.7.42:
    - Fixed typo in command set matching code.
    - Case-insensitive matching when Device ID not known to database.


author: Tim Waugh <twaugh@redhat.com> 0.7.43-1
changelog:
  - 0.7.43:
    - Don't check against IEEE 1284 DES field at all.
    - Merged device matching code (bug #219518).
    - Catch non-fatal errors when auto-matching device.
    - Fixed driver checking bug involving pipelines (bug #220347).
    - Show PPD errors (bug #220136).


author: Tim Waugh <twaugh@redhat.com> 0.7.44-1
changelog:
  - 0.7.44:
    - Fixed traceback in error display (bug #220136).
    - Preserve case in model string when dumping debug output.


author: Tim Waugh <twaugh@redhat.com> 0.7.47-1
changelog:
  - 0.7.47:
    - Fixed minor text bugs (bug #177433).
    - Handle shell builtins in the driver check (bug #222413).


author: Tim Waugh <twaugh@redhat.com> 0.7.49-1
changelog:
  - 0.7.49:
    - Fixed a traceback in the driver check code.
    - Fixed a typo in the conflicts message.
    - Handle InputSlot/ManualFeed specially because libcups does (bug #222490).


author: Tim Waugh <twaugh@redhat.com> 0.7.50-1
changelog:
  - 0.7.50:
    - Fixed hex digits list (bug #223770).
    - Added bs translation.
    - Don't put the ellipsis in the real device URI (bug #227643).
    - Don't check for existing drivers for complex command lines (bug #225104).
    - Allow floating point job options (bug #224651).
    - Prevent shared/published confusion (bug #225081).
    - Fixed PPD page size setting.
    - Avoid os.remove exception (bug #226703).
    - Handle unknown job options (bug #225538).


author: Tim Waugh <twaugh@redhat.com> 0.7.51-1
changelog:
  - 0.7.51:
    - Prevent display glitch in job options list when clicking on a printer
      repeatedly.
    - List conflicting PPD options, and embolden the relevant tab
      labels (bug #226368).
    - Fixed typo in 'set default' handling that caused a traceback (bug #227936).
    - Handle interactive search a little better (bug #227935).


author: Tim Waugh <twaugh@redhat.com> 0.7.52-1
changelog:
  - 0.7.52:
    - Sort models using cups.modelSort before scanning for a close
      match (bug #228505).
    - Fixed matching logic (bug #228505).


author: Tim Waugh <twaugh@redhat.com> 0.7.53-1
changelog:
  - No longer requires rhpl (since 0.7.53).
  - 0.7.53:
    - Use gettext instead of rhpl.translate.
    - Better layout for PPD options.
    - Added scrollbars to main printer list (bug #229453).
    - Set maximum width of default printer label (bug #229453).
    - Handle applying changes correctly when switching to another
      printer (bug #229378).
    - Don't crash when failing to fetch the PPD (bug #229406).
    - Make the text entry boxes sensitive but not editable for remote
      printers (bug #229381).
    - Better job options screen layout (bug #222272).


author: Tim Waugh <twaugh@redhat.com> 0.7.56-1
changelog:
  - 0.7.56:
    - Parse Boolean strings correctly in job options.
    - Small command-set list/string fix (bug #230665).
    - Handle hostname look-up failures.
    - Updated filter-to-driver map.
    - Don't parse printers.conf (bug #231826).


author: Tim Waugh <twaugh@redhat.com> 0.7.57-1
changelog:
  - Added URL tag.
  - 0.7.57:
    - Prevent traceback when removing temporary file (Ubuntu #92914).
    - Added print applet.


author: Tim Waugh <twaugh@redhat.com> 0.7.59-1
changelog:
  - 0.7.59:
    - Fixed a translatable string.
    - Set a window icon (bug #233899).
    - Handle failure to start the D-Bus service.
    - Ellipsize the document and printer named (bug #233899).
    - Removed the status bar (bug #233899).
    - Added an icon pop-up menu for 'Hide' (bug #233899).


author: Tim Waugh <twaugh@redhat.com> 0.7.60-1
changelog:
  - Updated to pycups-1.9.19.
  - Avoid %makeinstall.
  - 0.7.60:
    - Handle reconnection failure.
    - New applet name.


author: Tim Waugh <twaugh@redhat.com> 0.7.62-1
changelog:
  - 0.7.62:
    - Use standard icon for admin tool desktop file.
    - Fixed env path in Python scripts.
    - Applet: stop running when the session ends.
    - Prevent a traceback in the SMB browser (bug #225351).
    - 'Manage print jobs' desktop file.


author: Tim Waugh <twaugh@redhat.com> 0.7.65-1
changelog:
  - Build requires xmlto.
  - Updated to pycups-1.9.22.
  - 0.7.65:
    - Use urllib for quoting/unquoting (Val Henson, Ubuntu #105022).
    - Added kn translation.
    - Better permissions on non-scripts.
    - Added man pages.
    - Applet: status feedback.
    - Applet: fixed relative time descriptions.
    - Applet: limit refresh frequency.


author: Tim Waugh <twaugh@redhat.com> 0.7.66-1
changelog:
  - 0.7.66:
    - Allow job-hold-until to be set (bug #239776).
    - Implement new printer notifications.


author: Tim Waugh <twaugh@redhat.com> 0.7.67-1
changelog:
  - Don't put TrayIcon or SystemSetup categories in the desktop file.
  - Updated pycups to 1.9.24.
  - 0.7.67:
    - Fixed desktop files to have capital letters at the start of each
      word in the Name field (bug #242859).
    - Fixed crash when saving unapplied changes.
    - Fixed Device ID parser to always split the CMD field at commas.
    - New PPDs class means we no longer parse the foomatic XML database.


author: Tim Waugh <twaugh@redhat.com> 0.7.69-1
changelog:
  - No longer requires PyXML (bug #233146).
  - Moved applet to main package.
  - 0.7.69:
    - Use HardwareSettings category for my-default-printer desktop
      file (bug #244935).
    - Removed unused code.
    - Filter PPDs by natural language (bug #244173).


author: Tim Waugh <twaugh@redhat.com> 0.7.70-1
changelog:
  - Requires pirut for system-install-packages.
  - 0.7.70:
    - Increased GetReady->NewPrinter timeout.
    - More binary names mapped to package named.
    - Run system-install-packages to install missing drivers (bug #246726).
    - Less debug output.
    - Desktop file fixes for KDE (bug #247299).


author: Tim Waugh <twaugh@redhat.com> 0.7.71-1
changelog:
  - 0.7.71:
    - Don't discard make/model-matched devices when there are ID-matched
      devices (Till Kamppeter).
    - Fixed fallback if no text-only driver is available (Till Kamppeter).
    - Initialise the make/model list when an ID match failed (Till Kamppeter).
    - Better error-handling in default-print application (Ubuntu #129901).
    - UI tweak in admin tool (Ubuntu #128263).
    - Handle socket: URIs (Ubuntu #127074).


author: Tim Waugh <twaugh@redhat.com> 0.7.72-1
changelog:
  - 0.7.72:
    - Fixed my-default-printer traceback.
    - Improvements to New Printer wizard (Till Kamppeter).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.1-1
changelog:
  - 0.7.74.1:
    - Updated Polish translation (bug #263001).
    - Don't select the default printer after changes to another printer have
      been made.
    - Always construct URI from input fields when changing device (bug #281551).
    - Avoid busy-cursor traceback when window is not yet displayed.


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-1
changelog:
  - Updated pycups to 1.9.27.
  - 0.7.74.2:
    - When a class is removed on the server, remove it from the UI.
    - When deleting a printer, select the default printer again.
    - Select newly-copied printer.
    - Updated translation (fi).
    - Better --help message.
    - Use strcoll to sort manufacturer names.
    - Avoid duplicate 'recommended' marks.
    - Remove duplicate device URIs.
    - Handle IPP_TAG_NOVALUE attributes (for CUPS 1.3.x).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-2
changelog:
  - Pull in SVN patch from stable branch for 'Allow printing from
    the Internet' check-box (bug #221003).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.4-1
changelog:
  - Changed PreReq to Requires.
  - Mark console.apps file as a config file.
  - Mark pam file as a config file (not replaceable).
  - No need to ship empty NEWS file.
  - Give cupsd.py executable permissions to satisfy rpmlint.
  - Provides system-config-printer-gui.
  - Mark D-Bus configuration file as a config file.
  - Fixed libs summary.
  - Better buildroot tag.
  - Better defattr.
  - Preserve timestamps on explicitly install files.
  - Make example pycups program non-executable.
  - 0.7.74.4:
    - Updated translations.
    - Several small bugs fixed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No need to run update-desktop-database because there are no MimeKey
    lines in the desktop files.
  - Consistent macro style.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Requires notification-daemon (Ubuntu #176929).
  - Requires gnome-python2 for theme support (Ubuntu #176929).
  - Requires gnome-icon-theme for printer icon (Ubuntu #176929).


author: Tim Waugh <twaugh@redhat.com> 0.7.82.1-1
changelog:
  - Requires /usr/bin/system-install-packages not pirut (bug #435622).
  - 0.7.82.1:
    - More trouble-shooting improvements.
    - applet: notify user about failed jobs (bug #168370).


author: Tim Waugh <twaugh@redhat.com> 0.9.91-1
changelog:
  - No longer requires system-install-packages (bug #444645).
  - Added pysmbc.  Build requires libsmbclient-devel.
  - Don't install consolehelper bits any more as they are no longer needed.
  - 0.9.91:
    - User interface overhaul, part 2.


author: Tim Waugh <twaugh@redhat.com> 1.0.4-1
changelog:
  - 1.0.4.
  - Applied upstream patch for pycups to fix getPrinterAttributes when
    requested_attributes is specified.


author: Tim Waugh <twaugh@redhat.com> 1.0.5-3
changelog:
  - Include other fixes from upstream including:
    - OpenPrinting API change (trac #74).
    - libnotify API change for 'closed' signal.
    - Notification for job authentication (trac #91).
    - Glade delete-event fixes (trac #88).
    - Pre-fill username in job authentication dialog (trac #87).


author: Tim Waugh <twaugh@redhat.com> 1.0.6-1
changelog:
  - Requires gnome-python2-gnome (bug #460021).
  - 1.0.6:
    - More delete-event fixes.
    - Fixed temporary file leak.
    - Fixed dialog leaks.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-1
changelog:
  - 1.0.7:
    - Efficiency improvements.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-1
changelog:
  - 1.0.8:
    - Use modelName from custom PPD to suggest name for new printer
      (trac #97).
    - Avoid display problem with installable options.
    - Better matching for Lexmark printers.
    - Catch exceptions from advanced server settings dialog (Ubuntu
        - Added some missing OpenPrinting query fields.
    - Jockey support added.
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-3
changelog:
  - Added patch for 1.0.x changes since 1.0.8:
    - Don't use a LinkButton for the 'Problems?' button (bug #465407).
    - Don't use a separator for the server settings dialog (bug
        - Don't set non-zero page size for SpinButtons.
    - Don't show an error dialog if an IPP operation's authentication
      dialog is cancelled by the user, but show an error dialog if the
      password was incorrect (bug #465407).
    - Set Server Settings... menu entry sensitive depending on whether
      we are connected to a server (Ubuntu #280736).
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-4
changelog:
  - Updated patch for 1.0.x changes:
    - Removed unneeded debugging output.
    - Don't show the applet in KDE (bug #466945).
    - Auth/error dialog improvements for SMB as for IPP (bug #465407).


author: Tim Waugh <twaugh@redhat.com> 1.0.8-6
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed SMB authentication dialog's cancel button (bug #467127).
    - Work around samba bug #5805 by sending debug output to stderr
      instead of stdout.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-1
changelog:
  - Updated to 1.0.12:
    - Don't automatically replace network printer URIs with
      HPLIP URIs (bug #473129).
    - Fixed some file descriptor and temporary file leaks.
  - Updated pycups to 1.9.44.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-2
changelog:
  - Added patch for 1.0.x changes since 1.0.12:
    - Smarter PPD cache in cupshelpers module.
    - Don't write back localized versions of globalized PPDs.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-3
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed problem that prevented authentication prompt being
      displayed.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-4
changelog:
  - Updated patch for 1.0.x changes:
    - Fix for advanced server settings dialog.
    - Fixes for troubleshooter to restore error_log fetching.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-5
changelog:
  - Added patch for pycups git changes since 1.9.44:
    - Look for test page file in new location for CUPS 1.4 (bug #476612).


author: Tim Waugh <twaugh@redhat.com> 1.0.12-6
changelog:
  - Updated patch for 1.0.x changes:
    - Look harder for locale/page size issues in the troubleshooter
      (trac #118).
    - Troubleshooter speed improvement (trac #123).
    - Localization fixes for authentication dialog (trac #122).
    - Character encoding fixes (trac #124).
    - Handle model names with more than one set of digits (Ubuntu #251244).
    - Catch unable-to-connect error when trying to print a test page
      (Ubuntu #286943).
    - Prevent crash when copying PPD options (Ubuntu #285133).
    - Use get_cursor for the printer properties treeview (Ubuntu #282634).
    - Fix IPP browser when trying to connect to host:port (bug #476396).
    - Make sure we're authenticating as the correct user in authconn.
    - Prevent traceback when adding printer driven by HPLIP
      (bug #477107).
    - Better display of available local HP fax devices.


author: Tim Waugh <twaugh@redhat.com> 1.1.3-5
changelog:
  - Updated from git:
    - Handle D-Bus failures when querying Jockey (bug #484402).
    - Set operation when fetching PPD from server (bug #484130).
    - Don't allow prompting when updating the UI for a server failure
      (bug #484130).
    - Fixed printing a test page from the applet (bug #484130).


author: Tim Waugh <twaugh@redhat.com> 1.1.3-7
changelog:
  - Updated from git:
    - Avoid tracebacks in main application (bug #484130) and job viewer.
    - Avoid unnecessary modal dialog when adding printer (bug #484960).
    - Don't use notification when authentication is required, just
      display the dialog.


author: Tim Waugh <twaugh@redhat.com> 1.1.4-1
changelog:
  - 1.1.4:
    - Skip model selection screen when adding a new printer for which we
      know the exact model.
    - Better integration for HPLIP hp and hpfax queues.
    - Work around HPLIP option parsing bug.
    - Pre-select the current device correctly.
    - Better descriptions for types of available connection.
    - Perform lowercase operations in a locale-independent manner (trac #151).


author: Tim Waugh <twaugh@redhat.com> 1.1.5-2
changelog:
  - Added patch for changes in 1.1.x since 1.1.5:
    - Strip " hpijs" from PPD names.
    - Handle there being no operation name set when authentication/retry
      is required.
    - Mark "Unauthorized" PolicyKit dialog strings for translation, and
      change that dialog to an error.
    - Work around marker-* attributes not being presented as lists
      (bug #489512).
    - D-Bus policy tweak.
    - Better PPD fallback searching.
    - Fixed model search oddity when no digits in model name.
    - Fixed locale save/restore in cupshelpers (bug #489313).
    - Use gtk.show_uri() instead of gnome.url_show() (trac #147).
    - Removed HPLIP probe screen (no longer needed).
    - Be certain of having the right cell when starting a rename
      (Ubuntu #333260).
    - Fixed strftime call (Ubuntu #334859).
    - Check dict before use when handling auth-info-required.
    - Handle timed operations being cancelled in the troubleshooter test
      print page (Ubuntu #325084).
    - Put pycups version requirement in monitor module.


author: Tim Waugh <twaugh@redhat.com> 1.1.6-1
changelog:
  - No longer requires gnome-python2-gnome.
  - Updated to 1.1.6:
    - Translatable string fix for authconn.
    - Romanian allow/deny translation fix (bug #489748).
    - Set glade's textdomain in the jobviewer (Ubuntu #341765).


author: Tim Waugh <twaugh@redhat.com> 1.1.7-1
changelog:
  - Requires dbus-python (bug #495392).
  - Updated to 1.1.7:
    - Updated translations.
    - Don't abort if the jobviewer couldn't show a notification.
    - Don't use setlocale() for locale-independent case conversion.
    - Don't assume the notification daemon can show action buttons.
    - Use case-insensitive matching for model names.
    - HPLIP compatibility fixes.
    - Fixed typo in jobviewer keyring support (Ubuntu #343156).
    - Added support for https device URIs (bug #478677).
    - Prevent traceback in monitor when connection failed (Ubuntu #343387).


author: Tim Waugh <twaugh@redhat.com> 1.1.7-4
changelog:
  - Changed requirement on notification-daemon to
    desktop-notification-daemon to allow for other implementations
    (bug #500587).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-1
changelog:
  - Updated pycups to 1.9.46.
  - Updated to 1.1.8:
    - Select a printer after adding it (trac #145).
    - Make sure the job and printer context menus cannot get out of date
      (trac #175, trac #172).
    - Fixed displayed hold time for held jobs.
    - Use grey ink-drop when there is no marker-colors value instead of
      crashing (bug #505399).
    - Scroll job list window to new job when appropriate.
    - Clean up temporary PPD files (bug #498743).
    - Fixed XML crash (Ubuntu #370469).
    - Fixed automatic printer model selection.
    - Fixed cupspk crash due to missing debugprint import (bug #496722,
      trac #161). 
    - Fixed PhysicalDevice crash (bug #496722, trac #161).
    - Adjusted border padding for New Printer window (bug #493862).
    - Set glade's textdomain in the job viewer (Ubuntu #341765).
    - Fixed URI parsing when verifying IPP URIs.
    - Set relaxed PPD conformance (trac #159).
    - Make troubleshooter work again by disabling cupspk for it.


author: Tim Waugh <twaugh@redhat.com> 1.1.8-2
changelog:
  - Make sure we find https URIs from https backend (bug #507628).
  - Avoid showing a non-fatal exception when adding an IPP printer
    (bug #507629).
  - Fixed traceback when adding/modifying printer which could lead to
    display bugs (bug #507489).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-3
changelog:
  - Use correct 'location' field for printers added remotely.
  - Parse nmblookup failures correctly in troubleshooter.
  - Prevent traceback on IPP notification after properties dialog
    cancelled.
  - Fixed handling of incorrect authentication when not using
    PolicyKit (bug #508102).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-5
changelog:
  - Use gpk-install-package-name instead of trying to use the D-Bus API.
  - Spot stopped jobs with CUPS 1.4 as well (trac #177).  This, along
    with the previous fix, addresses bug #509177.
  - Map gutenprint filenames to the package name.
  - Fixed sensitivity of class member selection arrows (bug #508653).


author: Tim Waugh <twaugh@redhat.com> 1.1.10-1
changelog:
  - 1.1.10:
    - New udev rules for adding/enabling/disabling USB printers
      automatically.
    - Now uses gnome-packagekit utility to install packages
      instead of the D-Bus API.
    - Fixed detection of stopped jobs with CUPS 1.4.
    - Fixed tracebacks when adding a new printer and when receiving
      IPP notifications.
    - Fixed 'location' field for printers added on remote CUPS servers.
    - Fixed handling of incorrect authentication.
    - Some UI and troubleshooter fixes have been made.


author: Tim Waugh <twaugh@redhat.com> 1.1.10-3
changelog:
  - Removed gnome-packagekit dependency.  The presence of
    gpk-install-package-name is detected at run-time, and the program
    acts accordingly.


author: Tim Waugh <twaugh@redhat.com> 1.1.11-1
changelog:
  - 1.1.11:
    - Several udev-configure-printer fixes.
    - Use case-insensitive PPD matching.
    - Better URI validity testing.
    - Another stale printer status icon fix.
    - Notice when jobs stop due to backend errors.
    - Warn about job history when renaming printers.
    - Small UI improvements.


author: Tim Waugh <twaugh@redhat.com> 1.1.11-4
changelog:
  - Compare MFG and MDL fields case insensitively when adding automatic
    queues, because HPLIP provides them with different case than the
    actual devices do.  Upstream HPLIP bug:
    https://bugs.launchpad.net/hplip/+bug/405804


author: Tim Waugh <twaugh@redhat.com> 1.1.11-5
changelog:
  - Applied patch from 1.1.x (3f45e96):
    - Show a 'paused' emblem for rejecting/disabled printers
      (bug #518020).
    - Set appropriate tooltip when configuring printer (bug #518007).
    - Use separate thread for verifying IPP queue (part of bug #518065).
    - Better driver preference order (bug #518045).


author: Tim Waugh <twaugh@redhat.com> 1.1.11-6
changelog:
  - Applied patch from 1.1.x (52a73b6).
    - Better printer icons representing status (bug #518020).
    - Use paused ico nwhen printer state reason is 'paused'.
    - Job status icon and state reason in jobs treeview (bug #518070).
    - Job creation times display fixes.
    - Use preferred object path for AuthenticationAgent (bug #518427).


author: Tim Waugh <twaugh@redhat.com> 1.1.12-1
changelog:
  - 1.1.12:
    - Troubleshooting fix.
    - Fixed applet traceback when printing test page.
    - Removed completed job notifications (trac #181).
    - Show printer status in printer icons (bug #518020).
    - Use paused icon when printer state reason is 'paused'.
    - Driver preference order fixes.
    - Job status icon and state reason display in jobs list
      (bug #518070).
    - Fixed overactive job creation times update timer.
    - Use preferred D-Bus object path for AuthenticationAgent
      (bug #518427).
    - Fixed disabling a printer when PolicyKit call fails.
    - Set appropriate status icon tooltip when configuration printer
      (bug #518007).
    - Use separate thread for verifying IPP queue (bug #518065).
    - Use newer tooltip API to avoid deprecation warnings.
    - Compare MFG/MDL case-insensitively in udev rule.
    - Support for cups-pk-helper's DevicesGet method.
    - Don't attempt to use PolicyKit if running as root.
    - Support for localized marker names (trac #183).
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-2
changelog:
  - Iconify jobs window into status icon.
  - Avoid showing the publish-printers dialog when not necessary.
  - Fixed traceback when cancelling change-driver dialog.
  - Fixed data button state.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-3
changelog:
  - Fixed missing import in probe_printer module.
  - Fixed race when fetching device list (bug #521110).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-4
changelog:
  - Troubleshoot: connect to the right server when choosing a network
    queue (bug #531482).
  - Strip 'zxs' and 'pcl3' from make-and-model (bug #531048).
  - Fixed visibility tracking for jobs window (bug #531438).
  - Don't display properties dialog for first test page (bug #531490).
  - Determine make/model for network printers (bug #524321).
  - Auto-select the correct driver entry for raw queues.
  - Avoid traceback in PhysicalDevice.py.
  - Let Return key activate the Find button for Find Network Printer.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-5
changelog:
  - Added upstream patch for custom state reasons (bug #531872).
  - Strip 'zjs' from make-and-model as well (bug #531869).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-8
changelog:
  - Fail gracefully if the new printer has disappeared before the user
    has responded to the test page prompt (bug #533109).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-12
changelog:
  - Prevent display of marker levels from making the properties dialog
    too big (bug #540826).
  - Place the window in the middle of the screen (bug #539876).
  - Fixed editability of PPD options for explicit IPP queues
    (bug #541588).


author: Tim Waugh <twaugh@redhat.com> 1.1.14-1
changelog:
  - 1.1.14:
    - Retry when reconnection fails (bug #541741).
    - Prevent traceback with bad marker-levels attribute (bug #541882).


author: Tim Waugh <twaugh@redhat.com> - 1.1.15-3
changelog:
  - Fixed cupsd.conf parsing when lines begin with blanks (bug #544003).
  - Don't overwrite BrowsePoll settings in basic settings dialog (bug #543986).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-1
changelog:
  - Prefer foomatic-recommended drivers (bug #550113).
  - Pre-select correct driver when adding or changing a queue (bug #550098).
  - Fixed typo (bug #550097).
  - Updated pycups to 1.9.47 (bug #549779).
  - 1.1.16:
    - Prevent traceback in found_network_printer_callback (bug #549783).
    - Use asynchronous connection class for fetching device lists
      (bug #549768).
    - Prefer Foomatic/hpijs to hpcups for the time being (bug #547346.
    - Clear device screen each time a new dialog is presented.
    - Constraints handling fix.
    - Ignore com.apple.print.recoverable state reason.


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-2
changelog:
  - Fixed crash when using keyring for auth without password (bug #553162).
  - Make sure there are enough ink level values (bug #553310).
  - Make sure the printer we added still exists before selecting it
    (bug #552311).
  - Set notification timeouts appropriately (bug #552312).
  - Avoid traceback in NewPrinterGUI.init (bug #552313).
  - Avoid traceback in on_jobviewer_exit (bug #552314).
  - Use %global instead of %define.


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-3
changelog:
  - Fixed traceback introduced in recent fix (bug #554376).
  - Fixed traceback when copying printer with certain job options
    set (bug #554329).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-4
changelog:
  - Clean up temporary files when localizing statereason (bug #556548).
  - Make sure serial device widgets are always initialized (bug #556514).
  - Handle errors more gracefully in userdefault.py (bug #556521).
  - Don't rely on cups-pk-helper being around (bug #556512).
  - Avoid traceback when checking on connecting backends (bug #556524).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-5
changelog:
  - Fixed async fallback again (bug #558551).
  - Fixed statereason localization for raw queues (bug #558552).
  - Only add current device to list when all devices found (bug #558553).
  - Better error handling when renaming a printer (bug #561401).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-6
changelog:
  - Avoid crash filling makes list when no make detected (bug #562641).
  - Avoid clearing device settings when adding printer (bug #564001).
  - Catch RuntimeError in statereason.py when cupsGetPPD2 fails (bug #567226).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-9
changelog:
  - Fixed pycups to be more cautious when removing
    the Connection object from the list (bug #571451).
  - No longer requires usermode (bug #572138).
  - Fixed jobviewer traceback when closing
    not yes shown notification (bug #572142).
  - Treat hpcups-requiring-plugin as 3rd party proprietary (bug #572143).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-10
changelog:
  - Import modules we catch exceptions from (bug #574131).
  - Fixed reconnection error handling in IPPAuthOperation class (bug #575798).
  - Initialize downloadable_drivers when OpenPrinting query fails (bug #575916).
  - Fixed race condition in asyncipp (bug #576934).
  - Fixed possible traceback in the SMB handling part of probe_printer.py (bug #579864).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-12
changelog:
  - Fixed localized state reasons (bug #587719).
  - Always use close_fds=True in subprocess.Popen calls (bug #590065).
  - cups-pk-helper support: FileGet requires a file it can write to (bug #592343).
  - Initialise auto_make to the empty string (bug #592346).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - mainWindow.glade: Cleaned up glade file a bunch.
  - mainWindow.py: modified to deal with updated glade.


author: Brent Fox <bfox@redhat.com>
changelog:
  - mainWindow.glade: Changed GUI per jrb's recommendations
  - mainWindow.py: added interfacing with libuser backend


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Attempt to minimize enumerations where possible
  - Always use defined constants for attribute names


author: Dan Walsh <dwalsh@redhat.com> 1.1-16
changelog:
  - Fix traceback bug, caused by unitialized variable
  - Fix traceback bug, caused by primary gid missing from /etc/group


author: Brent Fox <bfox@redhat.com> 1.1.1-9
changelog:
  - handle window delete-events correctly
  - call ready() after dialog is destroyed (bug #80625)
  - if a deleted user is the only user in his primary group, offer to delete the group too (bug #78620)


author: Brent Fox <bfox@redhat.com> 1.1.3-3
changelog:
  - force ascii input (bug #74058)
  - make sure that groupWindow calls self.ready() after showing dialogs
  - remove sentence hacks in asciiCheck.py (bug #82015)
  - fix typo in about box (bug #82016)
  - do not create homedir if they user doesn't want to
  - only offer to delete homedirs if they actually exist  (bug #78619)
  - if the user is the only member of their group, delete the group automatically (bug #78620)


author: Brent Fox <bfox@redhat.com> 1.1.5-1
changelog:
  - don't allow root account to be locked
  - make default values for SHADOW* on user creation so we can do password aging properly later


author: Brent Fox <bfox@redhat.com> 1.1.7-1
changelog:
  - don't allow colons in username or homedir names (bug #90481)
  - check for zero length in usernames, groupnames, gecos, and homedirs


author: Brent Fox <bfox@redhat.com> 1.1.9-1
changelog:
  - popup a confirmation dialog when deleting groups
  - popup a confirmation dialog when deleting users


author: Brent Fox <bfox@redhat.com> 1.1.11-1
changelog:
  - don't create new user with an existing uid (bug #90911)
  - use the messageDialog module in groupWindow.py
  - don't create group with an existing gid (bug #90911)


author: Brent Fox <bfox@redhat.com> 1.1.16-1
changelog:
  - clarify error dialog message (bug #101607)
  - allow underscores and dashes in usernames and groupnames (bug #99115)


author: Brent Fox <bfox@redhat.com> 1.1.17-1
changelog:
  - if shadow passwords are not enabled, do not show certain widgets (bug #104536)
  - don't modify password expiration data by accident (bug #88190)


author: Brent Fox <bfox@redhat.com> 1.2.5-1
changelog:
  - rename from redhat-config-users
  - add Obsoletes for redhat-config-users
  - make changes for Python2.3


author: Brent Fox <bfox@redhat.com> 1.2.7-1
changelog:
  - preserve existing group selection in userProperties.py (bug #111199)
  - handle munged config file (bug #108400)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.15-1
changelog:
  - add manpage (Chris Spencer, #115316)
  - add Slovenian translation to desktop file (Roman Maurer, #131835)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.18-1
changelog:
  - use F1 instead of Ctrl+H as accelerator for Help/Contents (#132163)
  - use "mkdir -p" to fix make install glitch
  - use absolute paths in *.glade to fix pygtk/pyglade subtleties


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.20-1
changelog:
  - allow UTF-8 in user's full name (#133137)
  - require new libuser version so that fix for #80624 doesn't throw exception
    (#133479)
  - admit complicity


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.23-1
changelog:
  - try to fix 32bit uids/gids (#134803)
  - fix gtk.main*() related DeprecationWarnings
  - byte-compile python files in "make install"
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.24-1
changelog:
  - use user/group names for indexing, avoid unnecessary user/group lookups
    (#135223, original patch by Miloslav Trmac)
  - remove some debugging statements
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set password and confirm password entries (in)sensitive based on whether
    account is locked or not (#131180)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.27-1
changelog:
  - some sanity testing to avoid deleting system directories when deleting a user
    (#138093)
  - eventually delete mail spool (#102637) and temporary files (#126756)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.30-1
changelog:
  - use os.lstat() to test ownership of files to be deleted
  - update the GTK+ theme icon cache on (un)install


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.40-1
changelog:
  - initialize shadow variables only if shadow passwords are used
    (#168524, #168529, patch by Josef Whiter)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.45-1
changelog:
  - revamp uid/gid number selection to honor preferences and avoid primary
    group/created group discrepancies (#198152)
  - use disttag if available


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clarify comments, add new variables in /etc/sysconfig/system-config-users
  - use new method to choose GID when creating groups as well
  - actually set new user's GID
  - remove debugging statements


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - use Category: ... System; ... in desktop file
  - clean buildroot before installing
  - fix licensing blurb in PO files
  - require/BR python >= 2.0 instead of python2
  - recode spec file to UTF-8


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - try not to barf if encountering inconsistencies between /etc/passwd,
    /etc/group, /etc/shadow and /etc/gshadow


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.60-1
changelog:
  - don't barf on inconsistent groups
  - use integers instead of strings for various user parameters (#226976, patch
    by Miloslav Trmac)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - don't delete preferences toplevel window when closing via window manager
    (#248686)
  - barf even less on inconsistent groups (#243217)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix exception syntax, catch only IndexErrors caused by group inconsistencies
    (#243217)
  - list users and/or groups found to be inconsistent (#243217)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.69-1
changelog:
  - prohibit home directories which are not absolute paths or contain path
    components which are empty, ".", ".." or too long (#303971)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.71-1
changelog:
  - add release tags to changelog entries to appease rpmlint
  - remove "ExclusiveOS: Linux"
  - use xdg-open if available
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - obsolete explicit version of redhat-config-users
  - use "%defattr(-,root,root,-)"
  - don't use %attr
  - use "%config(noreplace)"
  - use macros instead of hardcoded directories
  - don't let gtk-update-icon-cache fail scriptlets
  - remove obsolete no.po translation file (#332431)
  - use "make %{?_smp_mflags}"


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - update copyright terms, admit complicity in source files
  - display shadow information from LDAP directories (#185907, fix by Ed van
    Gasteren, modified)
  - use libuser defaults for home directories (#204707, fix by Miloslav Trmac)
  - use gtk.AboutDialog for about dialog (#202963)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.78-1
changelog:
  - fix focus target for "Account expires" label (#439717)
  - fix French translator credits so msgfmt doesn't complain


author: Nils Philippsen <nils@redhat.com> - 1.2.84-1
changelog:
  - use ValueError.message, not .msg to get cracklib error message (#479858)
  - pull in updated translations


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use consistent terms for adding users (#343571)
  - use strings as keys for user/group check messages
  - warn about user names with trailing dollar sign (#486906)


author: Nils Philippsen <nils@redhat.com> - 1.2.98-1
changelog:
  - revert bad commit which overwrote Greek translations (#590890)
  - only delete user or group if really confirmed (#539251)
  - make file deletion methods more robust (#539251)


author: Nils Philippsen <nils@redhat.com> - 1.2.100-1
changelog:
  - check if homedirs of new users can be created
  - prevent unlocking users with empty passwords
  - require docs in enterprise builds


author: Nils Philippsen <nils@redhat.com>
changelog:
  - enforce uids, gids fitting in id_t datatype, also clamp uid, gid to permitted
    value range in UI (#616067)


author: Nils Philippsen <nils@redhat.com> - 1.2.106-1
changelog:
  - fix startup if max uid/gid is allocated
  - attempt to mkdir home directory instead of using os.access()
  - cope better with deleting auto-mounted home directories
  - restore context of home directories after creating, also use umask of 0700
    (u=rwx,go=)
  - make most password problems warnings, not errors (#656356)
  - ask if non-ASCII password should be used (#646876)
  - add forced password change on next login (#656219)
  - pick up translation updates


author: Nils Philippsen <nils@redhat.com> - 1.2.106-6
changelog:
  - fix account expiration if inactive default is set (#841886)
  - apply fix to Japanese translation (by Naomi Nakakita, #801652)


author: Martin Hunt <hunt@redhat.com>
changelog:
  - Set Version to use version from autoconf.
  - Fix up some of the path names.
  - Add Requires and BuildRequires.


author: Roland McGrath <roland@redhat.com> - 0.4.1-1
changelog:
  - Many fixes and improvements since 0.2.2; relevant PRs include:
    1122, 1134, 1155, 1172, 1174, 1175, 1180, 1186, 1187, 1191, 1193, 1195,
    1197, 1205, 1206, 1209, 1213, 1244, 1257, 1258, 1260, 1265, 1268, 1270,
    1289, 1292, 1306, 1335, 1257


author: Roland McGrath <roland@redhat.com> - 0.4.2-1
changelog:
  - Many fixes and improvements: PRs 1344, 1260, 1330, 1295, 1311, 1368,
    1182, 1131, 1332, 1366, 1456, 1271, 1338, 1482, 1477, 1194.


author: Frank Ch. Eigler <fche@redhat.com> - 0.5-1
changelog:
  - Many fixes and improvements: 1425, 1536, 1505, 1380, 1329, 1828, 1271,
    1339, 1340, 1345, 1837, 1917, 1903, 1336, 1868, 1594, 1564, 1276, 1295


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-1
changelog:
  - Add crash-devel buildreq to build staplog.so crash(8) module.
  - Many robustness & functionality improvements:


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-3
changelog:
  - Add zlib-devel to buildreq; missing from crash-devel
  - Process testsuite .stp files for #!stap->#!/usr/bin/stap


author: Frank Ch. Eigler <fche@redhat.com> - 1.1-2
changelog:
  - rhbz561889 = CVE-2010-0411: __get_argv overflows
  - rhbz512202: update tcp/mib tapsets
  - rhbz560890: stap -L/-l argument order preservation
  - rhbz563114: syscall.* regression w/ sys_pipe32 disappearanced
  - rhbz559643: fix testsuite bugs in labels.exp causing dejagnu hangs
  - rhbz564445: fix sdt.h probes with prelinked libraries
  - rhbz564443: harden unprivileged mode
  - pr11286: fix stap-client --server=FOO
  - rhbz556565: CVE-2009-4273 + CVE-2010-0412: more stap-server fixes
  - pr11296: fix systemtap-testsuite sdt.h tests


author: Frank Ch. Eigler <fche@redhat.com> - 1.3-5
changelog:
  - bz607232 (patch)
  - bz646870 (bundle newer elfutils)
  - bz644350 (patch)
  - bz661424 (patch)
  - bz559599 (patch)


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-5
changelog:
  - rebased to systemtap 1.8, including scox's fixes from rhel-5.9:
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64
  - Backported fix for pr14325
  - No publican in rhel 5.
  - Add s390 to the publican blacklist.
  - rebase
  - Backported fixes for pr14230 pr14296


author: Lukas Berk <lberk@redhat.com> - 2.3-2
changelog:
  - rhbz998595: rpm -V systemtap-server complains
  - rhbz996091: systemtap.syscall/syscall.exp regressed on i686 and x86_64
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996097: systemtap.base/execve.exp fails on i686 and ppc64
  - rhbz996079: systemtap.base/warn_overflow.exp regressed on i686 and ppc64
  - rhbz915180: utrace_syscall_args.exp on s390x: "FAIL: 32_BIT_UTRACE_SYSCALL_ARGS shutdown (eof)"
  - rhbz996065: systemtap.base/bz10078.exp regressed
  - rhbz996072: systemtap.base/kmodule.exp regressed on s390x and ppc64
  - rhbz996080: systemtap.context/fib.exp regressed on s390x
  - rhbz996103: systemtap.base/bad-code.exp regressed on s390x
  - rhbz1008567: broken tapsets on s390x - print_ubacktrace() and print_ubacktrace_brief()
  - rhbz996087: systemtap.server/server_locale.exp regressed on all arches


author: Lukas Berk <lberk@redhat.com> - 2.3-3
changelog:
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996077: systemtap.base/utrace_p5.exp got unstable on i686 and x86_64
  - rhbz874205: [FJ6.2 Bug] systemtap crashes


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-1
changelog:
  - rebase to upstream 2.5 release, including fixes for:
  - rhbz1027459: staprun/stapio fails if trace1 file is in same dir
  - rhbz1074541: kernel crash on netfilter_drop.stp sample
  - rhbz1038692: systemtap missing syscall pwritev


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - /etc/initrunlvl gets linked to /tmp/init-root/var/run/initrunlvl which is
    just plain wrong..
  - /usr/bin/utmpdump was missing in the files section, although it was
    explicitly patched into PROGS.
  - added attr's to the files section.
  - various small fixes.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fixed the MD5 check in sulogin (128 hash bits encoded with base64 gives
    22 bytes, not 24...). Fix in -md5.patch


author: Chris Evans <chris@ferret.lmh.ox.ac.uk>
changelog:
  - Fix a securelevel releated security hole. Go on, try and break append
    only files + securelevel now ;-)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - document '-n' option to wall, make it root-only (#18672)
  - don't open files in sulogin unless they're really ttys (#21862)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - show users with no login pid but no logout record as gone (#42550,
    <cwolf@starclass.com>)
  - fix sulogin to *always* work without a tty (#40934)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't strip binaries
  - have wall not write to non-ttys (#65412)
  - update usage for halt/reboot (#57753)
  - allow '-t' argument to last for checking state at certain times (#56863)
  - make 'pidof /foo/bar' not match /baz/bar (#53918)


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - fix wait() handling wrt setting SIGCHLD to SIG_IGN in shutdown
  - fix segfault in spawn() function in shutdown


author: Bill Nottingham <notting@redhat.com> 2.85-22
changelog:
  - move /selinux to filesystem
  - print out warning if we're terminating because of enforcing + no policy
  - handle non-selinux kernels better (#118826)


author: Bill Nottingham <notting@redhat.com> - 2.85-37
changelog:
  - add patch for SELinux user configs (<dwalsh@redhat.com>)
  - disable readlink patch while it's being fixed


author: Bill Nottingham <notting@redhat.com> - 2.85-38
changelog:
  - pidof: use readlink instead of stat to avoid NFS hangs (#138788, <constgq@yahoo.com))
  - pidof: fix handling of scripts (#85796)
  - pidof: add -c option for only matching processes with the same root (<twoerner@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 2.86-1
changelog:
  - update to upstream 2.86
  - adjust patches
  - install initreq.h (#119039)
  - allow halt/reboot to handle being called by login correctly (#104062, <worley@theworld.com>)
  - document pam_console usage for halt (#114970)


author: Bill Nottingham <notting@redhat.com> - 2.86-9
changelog:
  - preserve 'WAITING' across re-exec (#143289, others)
  - actually apply quiet patch
  - don't write garbage to utmp on x86-64 (#176494)


author: Bill Nottingham <notting@redhat.com> - 2.86-11
changelog:
  - fix warning on SELinux policy load failure (#185603)
  - don't package /dev/initctl (#174652, #199939)
  - allow some time for failed console opens to resolve themselves (#181546)
  - add documentation of -f to last(1) (#192804)


author: Petr Lautrbach <plautrba@redhat.com> 2.87-3.dsf
changelog:
  - Add -w option to last command for wide output (#585907)
  - Changed IPv4 vs IPv6 heuristic in last command (#585880)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which 
    one has write permission but does not own (such as /tmp) (#149686)


author: Radek Brich <rbrich@redhat.com> 2:1.17-1
changelog:
  - new upstream version
  - patch for wildcards (#206841), restoring old behavior
  - patch for testsuite
  - update -xattrs patch
  - drop 13 obsolete patches


author: Radek Brich <rbrich@redhat.com> 2:1.17-5
changelog:
  - fix (non)detection of xattrs
  - move configure stuff from -xattrs patch to -xattrs-conf,
    so the original patch could be easily read
  - fix -xattrs patch to work with zero length files and show
    warnings when xattrs not available (fixes by James Antill)
  - possible corruption (#408621) - add warning to man page
    for now, may be actually fixed later, depending on upstream


author: Radek Brich <rbrich@redhat.com> 2:1.19-2
changelog:
  - fix errors in man page
    * fix definition of --occurrence (bz#416661, patch by Jonathan Wakely)
    * update meaning of -l: it has changed from --one-filesystem
      to --check-links (bz#426717)
  - update license tag, tar 1.19 is GPLv3+


author: Radek Brich <rbrich@redhat.com> 2:1.19-3
changelog:
  - do not print getfilecon/setfilecon warnings when SELinux is disabled
    or SELinux data are not available (bz#431879)
  - fix for GCC 4.3


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-1
changelog:
  - new upstream release 1.20 (lzma support, few new options
    and bugfixes)
  - heavily modified xattrs patches(as tar-1.20 now uses automake
    1.10.1)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-3
changelog:
  - Fixed wrong documentation for xattrs options (#466517)
  - fixed bug with null file terminator and change dirs
    (upstream)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.21-1
changelog:
  - New upstream release 1.21, removed applied patches
  - add support for -I option, fix testsuite failure


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-4
changelog:
  - Report record size only if the archive refers to a device
    (#487760)
  - Do not sigabrt with new gcc/glibc because of writing to
    struct members of gnutar header at once via strcpy


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-13
changelog:
  - do not fail with POSIX 2008 glibc futimens()
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-15
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#571842)
  - realloc within check_exclusion_tags() caused invalid write
    (#571523)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#571523)
  - support for "lustre.*" extended attributes (#572442)
  - allow build without SELinux support


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-4
changelog:
  - fix crash when the --listed-incremental option is used and archive includes
    root directory (#653433)
  - fix for long name corruption when --posix and --sparse options are used,
    testcase included (#656834)
  - using --remove-files caused data lost when symlinks were contained.  Testcase
    is included (#698212)
  - endless loop fix, problem occurred when the `-k' option was used and extracted
    archive contained symlink that already existed in file system (#726723).
  - improve sparse file support performance for entirely sparse files (#760665).
  - use gnulib's fnmatch rather then glibc's (in RHEL-6) (#768724)
  - the --remove-files option did not remove archived files in combination with
    append option (-r) (#782628).


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9
changelog:
  - added arpsnmp options to specify sender and recipient 
    and corrected arpwatch and arpsnmp man pages (#70386)


author: Martin Stransky <stransky@redhat.com> - 14:3.9.3-1
changelog:
  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9
changelog:
  - fix processing of Prism and AVS headers (#206686)
  - fix arp2ethers script
  - update ethercodes.dat
  - move pcap man page to devel package


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.7-1
changelog:
  - update to 3.9.7
  - with -C option, drop root privileges before opening first savefile (#244860)
  - update tcpslice to 1.2a3
  - include time patch from Debian to fix tcpslice on 64-bit architectures


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Erik Sjolund <erik.sjolund@home.se>
changelog:
  - I downloaded new sources from
    http://www.cse.ohio-state.edu/~gurari/TeX4ht/bugfixes.html.
            - I adjusted /usr/src/redhat/SOURCES/tex4ht-redhat.patch to conform to the new
    sources
  - There were some new installed files, so I included them in the files section:
    /usr/bin/dbmtexexec
    /usr/bin/dbtexexec
    /usr/bin/htcontext
    /usr/bin/htcontext.unix
    /usr/bin/httexexec
    /usr/bin/mk4ht 
    /usr/bin/mztexexec
    /usr/bin/ootexexec
    /usr/bin/teimtexexec
    /usr/bin/teitexexec
    /usr/bin/xhcontext
    /usr/bin/xhcontext.unix
    /usr/bin/xhmtexexec
    /usr/bin/xhtexexec

  - Packager: John Langford


author: Erik Sjolund <erik.sjolund@home.se>
changelog:
  - Adjusted the /usr/src/redhat/SOURCES/tex4ht-redhat.patch so that 
    texmf/tex4ht/base/unix/tex4ht.env now has the line "l~/.tex4ht.fls"


author: Erik Sjolund <erik.sjolund@home.se>
changelog:
  - New upstream release
  - I had to remove 
    /usr/bin/htcontext.unix
    /usr/bin/xhcontext.unix
    from the files section as they were no longer shipped.


author: Erik Sjolund <erik.sjolund@home.se>
changelog:
  - New upstream release
  - Thanks Neil D. Becker for the changes to the spec file
    in this release!
  - The files section totally restructured. Instead of specifying
    single files explicitly, the directories containg all the files
    are specified instead.


author: Edward Grace <graceej@ptpc3lin.op.ph.ic.ac.uk> - 1.0.2004_12_16_1626-2
changelog:
  - Added a requirement for tetex
  - On FC2 the font directory was not being correctly found, added a trivial 
    patch which corrects this. It also works with Fedora Core 3
  - Added the URL specifier to point to Erik Sjölund's page where I found the sources.


author: Michael A. Peters <mpeters@mac.com> - 1.0-0.2005_02_16_2023.1
changelog:
  - cleaned up spec file to be closer to Fedora Extras standards
  - renamed package from tex4ht to tetex-tex4ht


author: Michael A. Peters <mpeters@mac.com> - 1.0-0.2005_09_13_0129.1
changelog:
  - updated version
  - got rid of patch that makes Makefile, specify build option in build
  - use -DKPATHSEA
  - added obsoletes tex4ht due to renaming


author: Patrice Dumas <pertusus@free.fr> 1.0.2006_10_28_1705-1
changelog:
  - update
  - use debian patchset
  - remove the patch modifying paths in tex4ht.env, it is unneeded with 
    kpathsee


author: Patrice Dumas <pertusus@free.fr> 1.0.2007_07_17_0228-1
changelog:
  - update to 1.0.2007_07_17_0228
  - rename tetex-tex4ht-1.0-prev.patch to tetex-tex4ht-1.0-rebuild.patch


author: Patrice Dumas <pertusus@free.fr> 1.0.2007_09_04_0340-1
changelog:
  - update to 1.0.2007_09_04_0340
  - use all the debian patches
  - install correctly the scripts out of bindir
  - prefix ht with tex4ht- to avoid name collisions


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Remove HAVE_WAIT3 hack, tried to replace it with a requirement for an 
  autoconf with the fixed test, didn't work, put in another less-bad hack 
  instead.


author: Karsten Hopp <karsten@redhat.com> 1.7-29
changelog:
  - remove trailing dot from summary
  - replace tabs with spaces
  - replace PreReq with Requires(post)/Requires(preun)
  - include license file in %doc
  - add smp flags
  - use make install DESTDIR=


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.1.fc9
changelog:
  - use %{_initrddir} macro instead of %{_sysconfdir}/init.d (rhbz #153187)
  - fix java.library.path setting in %{name}.conf (rhbz #253605)
  - fix incorrect initscript output (rhbz #380921)
  - update initscript (rhbz #247077)
  - add logrotate support
  - fix strange-permission
  - fix %prep
  - replace /var with %{_var}
  - replace %{_localstatedir} with %{_var}
  - use %{logdir} where possible
  - call build-jar-repository with full path in scriptlets
  - remove file-based requires
  - build with icedtea and set as the default JAVA_HOME in %{name}.conf
  - fix non-standard-group
  - change ecj references to eclipse-ecj
  - change Apache Software License 2.0 to ASL 2.0 for rpmlint


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.2.fc9
changelog:
  - use %{_var} for appdir instead of /srv
  - use ${JAVACMD} for java executable in wrapper script
  - use built-in status function in initscript where possible
  - add missing require on procps for status function
  - fix java.library.path setting in %{_sysconfdir}/sysconfig/%{name}
  - add patch to document webapps in %{_sysconfdir}/%{name}/tomcat-users.xml
  - remove %{appdir}/ROOT/admin
  - move %{_bindir}/d%{name} to %{_sbindir}/d%{name}


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.6.fc9
changelog:
  - remove Requires: tomcat-native
  - put back original JPackage Group (except javadoc) and License tags
  - add Provides for jsp and servlet
  - use ant macro
  - build and install sample webapp
  - call /sbin/service to stop service on uninstall
  - remove references to $RPM_BUILD_DIR
  - use copy instead of move to fix short-circuit install build
  - remove prebuilt sample.war
  - remove Thumbs.db files
  - add Requires: java >= 0:1.6.0


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.7.fc9
changelog:
  - version jsp and servlet Provides with their spec versions
  - remove Obsoletes/Provides for servletapi6 package as it can co-exist
  - check for java-functions existence in wrapper script
  - move d%{name} to %{name} and create symlink for d%{name}
  - improve status function in initscript
  - change license to ASL 2.0 again as per Fedora guidelines


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-1
changelog:
  - 6.0.18
  - Resolves: CVE-2008-1232, CVE-2008-1947, CVE-2008-2370, CVE-2008-2938
  - fix definition of java.security.policy with d%{name} start-security
  - don't pass $CATALINA_OPTS with d%{name} stop
  - redefine tempdir and workdir for tmpwatch workaround
  - change eclipse-ecj references to ecj


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-2
changelog:
  - remove initscripts and /sbin/service requirement
  - call initscript directly without using /sbin/service
  - require /sbin/chkconfig instead of chkconfig
  - remove chkconfig requirement from packages that don't require it


author: David Knox <dknox@redhat.com> 0:6.0.24-3
changelog:
  - Removed prerun lib and post WEB-INF/lib. Moved build-jar-repos to
  - after the installs. Added Requires and BuildRequires for jakarta-
  - commons-{dbcp,pool,collections}-tomcat5 and ecj. Changed define macro to
  - global.


author: David Knox <dknox@redhat.com> 0:6.0.24-11
changelog:
  - Resolves: rhbz#584699 initscript collected problems LSB
  - compliant. Not complete yet. Return values are correct and 
  - usage function has been implemented.


author: David Knox <dknox@redhat.com> 0:6.0.24-12
changelog:
  - Resolves: rhbz#584699. A respin was required to fix post and
  - postun for el. Updated EL-spec to 2.1 from 1.0. Tomcat6 uses 
  - elspec 2.1


author: David Knox <dknox@redhat.com> 0:6.0.24-18
changelog:
  - Resolves: rhbz# 661244 missing tomcat6-juli link
  - Fixed symlinks to commons-collections and log4j in libdir
  - Removed log4j package


author: David Knox <dknox@redhat.com> 0:6.0.24-23
changelog:
  - Resolves: rhbz 678671 - useradd sets shell to nologin
  - dangling symlink for log4j. Added it as R: and R(post)


author: David Knox <dknox@redhat.com> 0:6.0.24-25
changelog:
  - Installed permissions do not allow tomcat to start
  - incrementing NVR so yum won't get confused with the zstream


author: David Knox <dknox@redhat.com> 0:6.0.24-28
changelog:
  - Resovles  rhbz#695284 - wrapper logs to different locations
  - CVE-2010-4172, CVE-2011-0013, CVE-2010-3718 commented out 
  - until needed.


author: David Knox <dknox@redhat.com> 0:6.0.24-29
changelog:
  - Resolves: rhbz#656403, rhbz#675926, rhbz#676011
  - CVE-2010-4172, CVE-2010-3718, CVE-2011-0013, CVE-2010-4476,
  - CVE-2011-0534


author: David Knox <dknox@redhat.com> 0:6.0.24-37
changelog:
  - resolves: cve-2011-3190 rhbz 738504
  - resolves: cve-2011-2204 rhbz 738504
  - resolves: cve-2011-2526 rhbz 738504
  - resolves: cve-2011-1184 rhbz 738504
  - resolves: rhbz 698624 - revisited


author: David Knox <dknox@redhat.com> 0:6.0.24-38
changelog:
  - resolves: rhbz 748813 NPE w/no data in chunked POST request
  -  Not included in 6.2. Slated for 6.3


author: David Knox <dknox@redhat.com> 0:6.0.24-41
changelog:
  - Resolves: rhbz 782400 - remove redhat-lsb dependency
  - Resolves: rhbz 726169 (783407) - Unable to compile class for JSP
  - Resolves: rhbz 783567 - tag attributes parsing throws exception


author: David Knox <dknox@redhat.com> 0:6.0.24-46
changelog:
  - Resolves: rhbz 847288 classloader deadlock compiler JSPs
  - Resolves: rhbz 785954 HTML filtering needed
  - Resolves: rhbz 798617 init gives incorrect status


author: David Knox <dknox@redhat.com> 0:6.0.24-48
changelog:
  - Resolves: rhbz 576540 - regression init script in the 
  - wrong place. Changed _initrddir definition herein to point to the 
  - right place.


author: David Knox <dknox@redhat.com> 0:6.0.24-51
changelog:
  - Related: rhbz#955977 CVE-2013-1976 Changed location of 
  - TOMCAT_LOG to /var/log where only root can write to it. Touching
  - TOMCAT_LOG is no longer necessary


author: David Knox <dknox@redhat.com> 0:6.0.24-54
changelog:
  - Resolves: rhbz 845786 webapps-docs contained empty files. 
  - Build will fail of architectures ppc s390x ppc64. Use
  - target rhel-6.5-noarch-candidate
  - Resolves: rhbz 915447 can't start with group other than tomcat
  - changes in init script
  - Resolves: rhbz 950647 Error in checkpidfile of init script
  - Resolves: rhbz 977685 Full implementation of juli and juli
  - adapters. Jars placed in new extras directory
  - Resolves: 960225 Status script does not return proper PID


author: David Knox <dknox@redhat.com> 0:6.0.24-58
changelog:
  - Resolves: CVE-2012-3439
  - Resolves: CVE-2012-4534
  - Resolves: CVE-2012-3546
  - Increment build number to exceed 6_4 build number. Demanded
  - by rpmdiff


author: David Knox <dknox@redhat.com> 0:6.0.24-60
changelog:
  - Related: rhbz 915447 can't start with group other than tomcat
  - changes in init script. Added TOMCAT_GROUP to sysconfig and
  - tomcat6.conf. Also changed default to the group that user
  - tomcat belongs.


author: David Knox <dknox@redhat.com> 0:6.0.24-80
changelog:
  - Related: CVE-2013-4590  - remove xml schema names javaee_5,
  - javaee_web_services_1_2, and javaee_web_services_1_2_client
  - from descriptor.DigesterFactory initialization. These
  - schema definitions are not relevant to 6.0.24 as the version
  - of their spec did not exist at the time.
  - Resolves: rhbz#1140855 - request parameter truncated


author: David Knox <dknox@redhat.com> 0:6.0.24-81
changelog:
  - Resolves: rhbz#1183252 Tomcat breaks in serving large files
  - greater than 1.7 mb and under high load and high threading


author: David Knox <dknox@redhat.com> 0:6.0.24-84
changelog:
  - Resolves: rhbz#1022061 Tomcat init script needs to be adjusted to kill tomcat
  - if stop is unsuccessful


author: David Knox <dknox@redhat.com> 0:6.0.24-88
changelog:
  - Related: rhbz#1022061 changed in init file. Remove test
  - in function stop for result after initial command to
  - stop.


author: John Dennis <jdennis@redhat.com> - 2.1.0-1
changelog:
  - Resolves: Bug 643544
  - bump version to 2.1.0
    Bug #588323 - Failed to enable cipher 0xc001 (svn rev 105)
    Bug #634375 - Build tomcatjss against tomcat6 (svn rev 106)
    Bug #655915 - Disable socket timeouts when socket is first created. (svn rev 107)


author: Christina Fu <cfu@redhat.com> - 2.1.0-4
changelog:
  - Bugzilla Bug #1190911 NullPointerException in tomcatjss searching
    for attribute "clientauth" (cfu)
  - Bugzilla Bug #1167471 - [RFE] Provide Tomcat support for TLS v1.1 and
    TLS v1.2 (Tomcatjss) (cfu)


author: Tim Waugh <twaugh@redhat.com> 1.5.0-6
changelog:
  - Preserve timestamps on install (bug #226503).
  - Added SMP flags (bug #226503).
  - Removed Prefix: tag (bug #226503).
  - Removed bogus mkdir call (bug #226503).
  - Ship the LICENSE file (bug #226503).
  - Fixed summary (bug #226503).


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.1-1
changelog:
  - Bump version
  - Added comment in empty __init__.py files
  - Fixed BuildRoot tag to use latest recommendation of FPG
  - Lots of whitespace changes
  - Some minor README changes
  - Added a changelog rule in Makefile
  - Fixed rpmlint error messages
  - Add init() methods to each plugin
  - Call plugin init() methods during tuned's init()
  - Add support for command line parameters
        o -c conffile|--config==conffile to specify the location of the config file
        o -d to start tuned as a daemon (instead of as normal app)
  - Readded the debug output in case tuned isn't started as as daemon
  - Fixed initialization of max transfer values for net tuning plugin
  - Added complete cleanup code in case of tuned exiting and/or
    getting a SIGTERM to restore default values
  - Made the disk tuning pluging less nosy if started as non-daemon
  - Fixed missing self. in the tuned.py config handling
  - Added a manpage
  - Fixed summary
  - Added missing GPL notic to tuned.py
  - Added explanation for Source entry in specfile
  - Added a distarchive target for the Makefile for proper tagging in git
  - Added a explanation how to create the tarball via git in the specfile
  - Fixed the defattr() lines in the specfile to conform FRG


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.2-1
changelog:
  - Added config file option to enable/disable plugins
  - Switched from ConfigParser to RawConfigParser
  - Renamed doc/README.txt to doc/DESIGN.txt
  - Added tuned.conf man page
  - Updated tuned man page
  - Updated package descriptions (#487312)
  - Added documentation for utils scripts (#487312)


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.5-1
changelog:
  - Updated documentation, thanks to Marcela Maslanova!
  - Updated diskdevstat and netdevstat to have command line arguments
  - Added the possibility to output a histogram at the end of the
    run for detailed information about the collected data


author: Phil Knirsch <pknirsch@redhat.com> - 0.2.1-1
changelog:
  - Added first set of profiles
  - Added tuned-adm tool for profile switching
  - Fixed several issues with the tuned-adm tool


author: Phil Knirsch <pknirsch@redhat.com> 0.2.2-1
changelog:
  - Updates to the ktune scripts
  - Added support for start/stop of the ktune scripts and ktune initscript


author: Phil Knirsch <pknirsch@redhat.com> 0.2.5-1
changelog:
  - Moved from prerelease to normal
  - Added missing ethtool requires
  - Fixed 532209 - init priority wrong for ktune (Jan Vcelak)
  - Fixed 530457 - [abrt] crash detected in tuned-0.2.5-0.1.fc12 (Jan Vcelak)
  - Added detection of netcard supported speeds (Jan Vcelak)
  - Fix ktune.sh script for stopping in regard to ALPM and CDROM polling (Phil Knirsch)


author: Phil Knirsch <pknirsch@redhat.com> 0.2.6-1
changelog:
  - Included Jan Vcelak's patch for pyo and pyc files
  - Updated ktune.sh script for laptop-battery-powersave profile with latest
    ALPM mechanism
  - Fixed ktune.sh script for laptop-battery-powersave profile to stop printing
    errors when files in /sys are missing


author: Thomas Woerner <twoerner@redhat.com> 0.2.7-1
changelog:
  - Updated ktune to version 0.4-1
    - Supports start and stop options in profile scripts calls
    - Fixed CMDLINE_ELEVATOR test (rhbz#496940#c9)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.7-2
changelog:
  - Fixed 542305 - [abrt] crash detected in tuned-0.2.5-2.fc12
    Some ethernet cards are not supported by 'ethtool'.


author: Jan Vcelak <jvcelak@redhat.com> 0.2.8-2
changelog:
  - Included Thomas Woerner's patch checking user rights when executing
    ktune service commands.
  - Included Jan Vcelak's patch fixing logging module initialization.


author: Phil Knirsch <pknirsch@redhat.com> 0.2.11-1
changelog:
  - Added support for display of currently active profile
  - Fix missing help command
  - Large update to documentation and manpages
  - Updated several of the profiles
  - Updated ALPM powersave code in the various powersave profiles
  - Disabled USB autosuspend in laptop-battery-powersave for now


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-3
changelog:
  - Fixes #577971 - error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key (Thomas Woerner)
  - Fixes #588739 - tuned should not apply /etc/sysctl.ktune settings (Jan Vcelak)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-4
changelog:
  - Fixes #596817 - spindown-disk profile requires hciconfig
    problematic profile was completely removed


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-5
changelog:
  - Fixes #605217 - tuned-adm unsafe profiles loading
    tuned-adm tool updated to the newest upstream version


author: Jarod Wilson <jarod@redhat.com> 0.2.11-8
changelog:
  - Don't touch transparent hugepage or cpufreq settings if not supported (#621877)
  - Add new enterprise-storage profile based on throughput-performance:
    * Disables barriers for all non-root non-/boot file systems (#624736)
    * Increases the default readahead value from 128kb to 512kb (#624828)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-1
changelog:
  - reduced FSB support on Asus EEE netbooks with Intel Atom
  - consolidate ktune script functions in tuning profiles
  - disable tuned daemon on s390/s390x architectures
  - set readahead by multiplying previous setting
  - udev rules and script for CFQ and multipath devices scheduler tuning
  - fix hal-disable-polling if no CD drives present
  - added support for architecture-specific configuration files
  - special sysctl setting for s390x arch in 'throughtput-performance' profile
  - overall profiles update
  - 'tuned-adm active' shows status of tuned and ktune services as well
  - proper configuration files setup after fresh instalation
  - tuned-utils: added license text
  - bash completion support
  - tuned-adm: profile validity check
  - Fixed 577983 - AttributeError: Nettool instance has no attribute 'interface'


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-2
changelog:
  - add missing man pages (#625850)
  - update profiles description (#619812)
  - fix typos in laptop-battery-profile script
  - disable tuned powersaving in disk-spindown, *-performance and enterprise-storage


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-15
changelog:
  - dynamically changing symlinks excluded from the RPM verification
    resolves: rhbz#1017366
  - reversed reading of sysctl configuration in SYSCTL_POST to follow
    RHEL-6 behavior
    resolves: rhbz#1036049
  - fixed typo in latency-performance profile regarding SYSCTL_POST
    resolves: rhbz#1064062
  - added support for s390 block devices (/dev/dasd)
    resolves: rhbz#1129936
  - added support for Xen VS devices (/dev/xvd)
    resolves: rhbz#1159963
  - increased vm.max_map_count in sap-netweaver profile
    resolves: rhbz#1174253


author: David Zeuthen <davidz@redhat.com> - 1.0.0-0.git20100223.1.el6
changelog:
  - Update to git snapshot for LVM2/Multipath support
  - Bump lvm2 version requirement to 2.02.61
  - Don't include compat devkit-disks symlinks
  - Don't advertise remote access support via Avahi
  - Related: rhbz#548874
  - Related: rhbz#548870


author: David Zeuthen <davidz@redhat.com> - 1.0.0-1.el6
changelog:
  - Update to release 1.0.0
  - Build without LVM2 and Multipath support for now (#548870, #548874)
  - Related: rhbz#575889


author: Tomas Bzatek <tbzatek@redhat.com> - 1.0.1-8.el6
changelog:
  - Allow extra mount options from udev rules (#673102, #681875)
  - Do not force-unmount devices marked as DM_SUSPENDED (#1121742)


author: Hans de Goede <hdegoede@redhat.com> - 0.4.3-1
changelog:
  - Update to upstream 0.4.3 release
  - Don't crash on devices in unconfigured state
  - Resolves: rhbz#808758
  - Significantly speed up reset handling
  - Resolves: rhbz#808730


author: Hans de Goede <hdegoede@redhat.com> - 0.5.1-1
changelog:
  - Update to upstream 0.5.1 release
  - Resolves: rhbz#842356
  - Remove bulk packets time out, this fixes various devices not working
  - Resolves: rhbz#834560
  - Add support to libusbredirparser for state serialization
  - Resolves: rhbz#842316
  - Drop isochronous packets when the network is too slow to keep up
  - Resolves: rhbz#855737


author: Hans de Goede <hdegoede@redhat.com> - 0.5.1-2
changelog:
  - Add upstream patch to fix usbredirparser headerlen bug when talking to
    the standalone usbredirserver
  - Resolves: rhbz#1085318
  - Add upstream patch with do-not-reset-device-blacklist
  - Extend blacklist with 2798:0001
  - Resolves: rhbz#1115917


author: Jeff Johnson <jbj@redhat.com> 1.9.3-4.20030207
changelog:
  - move _pthread_desc to vg_include.h.
  - implement pthread_mutex_timedlock().
  - implement pthread_barrier_wait().


author: Graydon Hoare <graydon@redhat.com> 1.9.3-5.20030207
changelog:
  - add handling for separate debug info (+fix).
  - handle blocking readv/writev correctly.
  - comment out 4 overly zealous pthread checks.


author: Jeff Johnson <jbj@redhat.com> 1.9.4-0.20030228
changelog:
  - update to 1.9.4 from CVS.
  - dwarf patch from Graydon Hoare.
  - sysinfo patch from Graydon Hoare, take 1.


author: Jakub Jelinek <jakub@redhat.com> 2.1.2-1
changelog:
  - update to 2.1.2
  - run make regtest as part of package build
  - use glibc-2.3 suppressions instead of glibc-2.2 suppressions


author: Jakub Jelinek <jakub@redhat.com> 2.2.0-6
changelog:
  - act as if NVALGRIND is defined when using <valgrind.h>
    in non-m32/i386 programs (#138923)
  - remove weak from VALGRIND_PRINTF*, make it static and
    add unused attribute


author: Colin Walters <walters@redhat.com> 2.4.0-1
changelog:
  - New upstream version 
  - Update valgrind-2.2.0-regtest.patch to 2.4.0; required minor
    massaging
  - Disable valgrind-2.1.2-4G.patch for now; Not going to touch this,
    and Fedora does not ship 4G kernel by default anymore
  - Remove upstreamed valgrind-2.2.0.ioctls.patch
  - Remove obsolete valgrind-2.2.0-warnings.patch; Code is no longer
    present
  - Remove upstreamed valgrind-2.2.0-valgrind_h.patch
  - Remove obsolete valgrind-2.2.0-unnest.patch and
    valgrind-2.0.0-pthread-stacksize.patch; valgrind no longer
    includes its own pthread library


author: Jakub Jelinek <jakub@redhat.com> 2.4.0-2
changelog:
  - resurrect the non-upstreamed part of valgrind_h patch
  - remove 2.1.2-4G patch, seems to be upstreamed
  - resurrect passing -fno-builtin in memcheck tests


author: Jakub Jelinek <jakub@redhat.com> 2.4.0-3
changelog:
  - build some insn tests with -mmmx, -msse or -msse2 (#161572)
  - handle glibc-2.3.90 the same way as 2.3.[0-5]


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-1
changelog:
  - upgrade to 3.0.0
    - x86_64 support
  - temporarily obsolete valgrind-callgrind, as it has not been
    ported yet


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-2
changelog:
  - lower x86_64 stage2 base from 112TB down to 450GB, so that
    valgrind works even on 2.4.x kernels.  Still way better than
    1.75GB that stock valgrind allows


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-3
changelog:
  - fix amd64 handling of cwtd instruction
  - fix amd64 handling of e.g. sarb $0x4,val(%rip)
  - speedup amd64 insn decoding


author: Jakub Jelinek <jakub@redhat.com> 3.1.0-2
changelog:
  - add support for DW_CFA_val_offset{,_sf}, DW_CFA_def_cfa_sf
    and skip over DW_CFA_val_expression quietly
  - adjust libc/ld.so filenames in glibc-2.4.supp for glibc 2.4
    release


author: Jakub Jelinek <jakub@redhat.com> 3.1.1-3
changelog:
  - handle [sg]et_robust_list syscalls on i?86/x86_64
  - handle *at syscalls on ppc
  - ensure on x86_64 both 32-bit and 64-bit glibc{,-devel} are
    installed in the buildroot (#191820)


author: Jakub Jelinek <jakub@redhat.com> 3.2.1-1
changelog:
  - update to 3.2.1 bugfix release
    - SSE3 emulation fixes, reduce memcheck false positive rate,
      4 dozens of bugfixes


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-3
changelog:
  - add suppressions for glibc >= 2.6
  - avoid valgrind internal error if io_destroy syscall is
    passed a bogus argument


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-5
changelog:
  - add ppc64-linux symlink in valgrind ppc.rpm, so that when
    rpm prefers 32-bit binaries over 64-bit ones 32-bit
    /usr/bin/valgrind can find 64-bit valgrind helper binaries
    (#249773)
  - power5+ and power6 support (#240762)


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-6
changelog:
  - handle new x86_64 nops (#256801, KDE#148447)
  - add support for private futexes (KDE#146781)
  - update License tag


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-2
changelog:
  - add STT_GNU_IFUNC support (Dodji Seketeli, #518247)
  - wrap inotify_init1 syscall (Dodji Seketeli, #527198)
  - fix mmap/mprotect handling in memcheck (KDE#210268)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-3
changelog:
  - handle many more DW_OP_* ops that GCC now uses
  - handle the more compact form of DW_AT_data_member_location
  - don't strip .debug_loc etc. from valgrind binaries


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-4
changelog:
  - handle reading of .debug_frame in addition to .eh_frame
  - ignore unknown DWARF3 expressions in evaluate_trivial_GX
  - suppress helgrind race errors in helgrind's own mythread_wrapper
  - fix compilation of x86 tests on x86_64 and ppc tests


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-7
changelog:
  - add perf_counter_open syscall support (#531271)
  - add handling of some sbb/adc insn forms on x86_64 (KDE#211410)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-10
changelog:
  - add handling of a bunch of recent syscalls and fix some
    other syscall wrappers (Dodji Seketeli)
  - handle prelink created split of .bss into .dynbss and .bss
    and similarly for .sbss and .sdynbss (#539874)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-15
changelog:
  - handle i686 nopw insns with more than one data16 prefix (#574889)
  - DWARF4 support
  - handle getcpu and splice syscalls


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-16
changelog:
  - change pub_tool_basics.h not to include config.h (#579283)
  - add valgrind-openmpi package for OpenMPI support (#565541)
  - allow NULL second argument to capget (#450976)


author: Jakub Jelinek <jakub@redhat.com> 3.6.0-1
changelog:
  - update to 3.6.0
  - add s390x support (#632354)
  - provide a replacement for str{,n}casecmp{,_l} (#626470)


author: <dodji@redhat.com> - 1:3.6.0-2
changelog:
  - fix PIE handling on ppc/ppc64 (#665289)
  - hook in pwrite64 syscall on ppc64 (#679906)
  - Add a wrapper header for libvex_guest_offsets.h to allow // installs
    on x86_64 an x*86 arches.


author: Jakub Jelinek <jakub@redhat.com> 3.6.0-4
changelog:
  - don't fail if s390x support patch hasn't been applied,
    move testing into %check (#708522)
  - POWER7 support (#694598)
  - handle REX.W form of FXSAVE (#713956, KDE#194402)
  - workaround redundant REX.W prefix for PTEST in JITed code
    (#713956, KDE#279071)
  - avoid redundant test in ppc backports (#717218, KDE#279062)


author: Jakub Jelinek <jakub@redhat.com> 3.6.0-5
changelog:
  - improve POWER7 support (#739143)
  - handle memalign requests up to 4MB alignment instead of 1MB (#757728)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-3.3
changelog:
  - Add valgrind-3.8.1-mmxext.patch (#828341)
  - Add valgrind-3.8.1-s390-STFLE.patch (#881893)
    s390 message-security assist (MSA) instruction extension not implemented.
  - Add valgrind-3.8.1-ppc-setxattr.patch (#1007400)
  - Implement SSE4 MOVNTDQA insn (valgrind-3.8.1-movntdqa.patch) (#1012932)
  - Add valgrind-3.8.1-amd64-sigstack.patch (#1024162)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-4
changelog:
  - Add valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)
  - Add valgrind-3.8.1-hwcaps-no-lzcnt.patch. (#1158802)
  - Add valgrind-3.8.1-llcache-size.patch. (#1163777)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-5
changelog:
  - Add tests filter to valgrind-3.8.1-llcache-size.patch. (#1163777)
  - Add valgrind.h update to valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-7
changelog:
  - Add valgrind-3.8.1-ethtool.patch. (#1191404)
  - Add valgrind-3.8.1-ppc64-priority.patch. (#1191414)


author: Karsten Hopp <karsten@redhat.com> 7.3.638-2
changelog:
  - fix some man page typos (#668894, #675480)
  - own usr/share/vim/vimfiles/doc/tags (#845564)
  - add path to csope database (#844843)


author: Karsten Hopp <karsten@redhat.com> 7.4.5-1
changelog:
  - patchlevel 5
  - when closing a window fails ":bwipe" may hang
  - "vaB" while 'virtualedit' is set selects the wrong area


author: Karsten Hopp <karsten@redhat.com> 7.4.009-1
changelog:
  - patchlevel 009
    mkdir("foo/bar/", "p") gives an error message
    creating a preview window on startup messes up the screen
    new regexp engine can't be interrupted
    too easy to write a file was not decrypted (yet)


author: Daniel Berrange <berrange@redhat.com> - 0.2.0-1
changelog:
  - Added wizard for creating virtual machines
  - Added embedded serial console
  - Added ability to take screenshots


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-1
changelog:
  - Updated to 0.2.1 tar.gz
  - Added rules to install/uninstall gconf schemas in preun,post,pre
    scriptlets
  - Updated URL for source to reflect new upstream download URL


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-3.fc6
changelog:
  - Added requires on pygtk2-libglade & librsvg2 (bz 205941 & 205942)
  - Re-arrange to use console-helper to launch app
  - Added 'dist' component to release number


author: Daniel Berrange <berrange@redhat.com> - 0.2.2-1.fc6
changelog:
  - Fix event handling in create VM wizard (bz 206660 & 206186)
  - Fix close button in about dialog (bz 205943)
  - Refresh .pot files
  - Turn on VNC scrollbars fulltime to avoid GTK window sizing issue
    which consistently resize too small.


author: Daniel Berrange <berrange@redhat.com> - 0.2.3-1.fc6
changelog:
  - Require xeninst >= 0.93.0 to fix block backed devices
  - Skip para/fully-virt step when going back in wizard if not HVM host (bz 207409)
  - Fix handling of modifier keys in VNC console so Alt key doesn't get stuck (bz 207949)
  - Allow sticky modifier keys by pressing same key 3 times in row (enables Ctrl-Alt-F1
    by doing Ctrl Ctrl Ctrl  Alt-F1)
  - Improved error handling during guest creation
  - Log errors with python logging, instead of to stdout
  - Remove unused buttons from main domain list window
  - Switch out of full screen & release key grab when closing console
  - Trim sparkline CPU history graph to 40 samples max
  - Constraint VCPU adjuster to only allow upto guest's max VCPU count
  - Show guest's max & current VCPU count in details page
  - Fix rounding of disk sizes to avoid a 1.9 GB disk being rounded down to 1 GB
  - Use raw block device path to CDROM not mount point for HVM guest (bz 206965)
  - Fix visibility of file size spin box (bz 206186 part 2)
  - Check for GTK failing to open X11 display (bz 205938)


author: Daniel P. Berrange <berrange@redhat.com> 0.2.3-2.fc6
changelog:
  - Fix segv in sparkline code when no data points are defined (bz  208185)
  - Clamp CPU utilization between 0 & 100% just in case (bz 208185)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.5-1.fc7
changelog:
  - Switch to use python-virtinst instead of python-xeninst due to 
    renaming of original package
  - Disable keyboard accelerators when grabbing mouse to avoid things like
    Ctrl-W closing the local window, instead of remote window bz 210364
  - Fix host memory reporting bz 211281
  - Remove duplicate application menu entry bz 211230
  - Fix duplicated mnemonics (bz 208408)
  - Use blktap backed disks if available
  - Use a drop down list to remember past URLs (bz 209479)
  - Remove unused help button from preferences dialog (bz 209251)
  - Fix exception when no VNC graphics is defined
  - Force immediate refresh of VMs after creating a new one
  - Improve error reporting if run on a kernel without Xen (bz 209122)
  - More fixes to avoid stuck modifier keys on focus-out (bz 207949)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-1.fc7
changelog:
  - Imported translations from Fedora i18n repository
  - Make (most) scrollbar policies automatic
  - Set busy cursor while creating new VMs
  - Preference for controlling keygrab policy
  - Preference for when to automatically open console (bz 211385)
  - Re-try VNC connection attempt periodically in case VNC daemon
    hasn't finished starting up
  - Added activation of URLs for about dialog (bz 210782)
  - Improved error reporting when connecting to HV (bz 211229)
  - Add command line args to open specific windows
  - Don't skip para/full virt wizard step - instead gray out full
    virt option & tell user why
  - Change 'physical' to 'logical' when refering to host CPUs
  - Include hostname in titlebar
  - Disable wizard sensitivity while creating VM


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-3.fc7
changelog:
  - Imported latest translations from Fedora i18n repository (bz 203783)
  - Use 127.0.0.1 address for connecting to VNC console instead of
    localhost to avoid some issue with messed up /etc/hosts.
  - Add selector for sparse or non-sparse file, defaulting to non-sparse.
    Add appropriate warnings and progress-bar text. (bz 218996)
  - Disable memory ballooning & CPU hotplug for HVM guests (bz 214432)
  - Updated memory-setting UI to include a hard upper limit for physical
    host RAM
  - Added documentation on the page warning that setting virtual host RAM
    too high can exhaust the memory of the machine
  - Handle errors when hostname resolution fails to avoid app exiting (bz 216975)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.0-1.fc7
changelog:
  - Added support for managing inactive domains
  - Require virt-inst >= 0.100.0 and libvirt >= 0.1.11 for ianctive
    domain management capabilities
  - Add progress bars during VM creation stage
  - Improved reliability of VNC console
  - Updated translations again
  - Added destroy option to menu bar to forceably kill a guest
  - Visually differentiate allocated memory, from actual used memory on host
  - Validate file magic when restoring a guest from a savd file
  - Performance work on domain listing
  - Allow creation of non-sparse files
  - Fix backspace key in serial console


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.1-1.fc7
changelog:
  - Added support for managing QEMU domains
  - Automatically grab mouse pointer to workaround dual-cursor crazyness


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-1.fc7
changelog:
  - Added online help to all windows
  - Bug fixes to virtual console popup, key grab & accelerator override


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-1.fc7
changelog:
  - Support for managing virtual networks
  - Ability to attach guest to virtual networks
  - Automatically set VNC keymap based on local keymap
  - Support for disk & network device addition/removal


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-2.fc7
changelog:
  - Refresh po file translations (bz 238369)
  - Fixed removal of disk/network devices
  - Fixed toolbar menu option state
  - Fixed file dialogs & default widget states


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.0-1.fc8
changelog:
  - Updated to 0.5.0 release
  - Support for managing remote hosts
  - Switch to use GTK-VNC for the guest console


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.1-1.fc8
changelog:
  - Updated to 0.5.1 release
  - Open connections in background
  - Make VNC connection retries more robust
  - Allow changing of CDROM media on the fly
  - Add PXE boot installation of HVM guests
  - Allow tunnelling VNC over SSH


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1.fc8
changelog:
  - Update to 0.5.2 release
  - No scrollbars for high res guest in low res host (rhbz 273181)
  - Unable to remove network device (rhbz 242900)
  - Fixed broken menu items (rhbz 307551)
  - Require libvirt 0.3.3 to get CDROM change capability for Xen


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-1.fc10
changelog:
  - Update to 0.6.0 release
  - Add libvirt storage management support
  - Basic support for remote guest installation
  - Merge VM console and details windows
  - Poll avahi for libvirtd advertisement
  - Hypervisor autoconnect option
  - Add sound emulation when creating new guests


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-2.fc10
changelog:
  - Add gnome-python2-gnome requirement.
  - Allow seeing connection details if disconnected.
  - Updated catalan translation.
  - Update dutch translation.
  - Update german translation. (bug 438136)
  - Fix showing domain console when connecting to hypervisor.
  - Update POTFILES to reflect reality (bug 466835)


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-3.fc10
changelog:
  - Add dbus-x11 to Requires (bug 467886)
  - Fedora translation updates (bug 467808)
  - Don't add multiple sound devices if install fails
  - Only popup volume path copy option on right click
  - Fix a variable typo


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-5.fc10
changelog:
  - Fix spec for building on F9
  - Update 'New VM' virt descriptions to be less black and white (bz 470563)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-1
changelog:
  - Update to 0.6.1 release
  - Disk and Network VM stats reporting
  - VM Migration support
  - Support adding sound devices to existing VMs
  - Allow specifying device model when adding a network device to an existing VM


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-4.fc11
changelog:
  - Update polish translation (bz 263301)
  - Fix sending ctrl-alt-del to guest
  - Fix cpu + mem stats options to remember preference.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-1.fc11
changelog:
  - Update to release 0.7.0
  - Redesigned 'New Virtual Machine' wizard
  - Option to remove storage when deleting a virtual machine.
  - File browser for libvirt storage pools and volumes
  - Physical device assignment (PCI, USB) for existing virtual machines.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-2.fc11
changelog:
  - Back compat fixes for connecting to older xen installations (bz 489885)
  - Don't show harmless NoneType error when launching new VM details window


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-3.fc11
changelog:
  - Fix incorrect max vcpu setting in New VM wizard (bz 490466)
  - Fix some OK/Cancel button ordering issues (bz 490207)
  - Use openAuth when duplicating a connection when deleting a VM
  - Updated translations (bz 493795)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5.fc12
changelog:
  - Fix 'opertaing' typo in 'New VM' dialog (#495128)
  - Allow details window to resize again (#491683)
  - Handle collecting username for vnc authentication (#499589)
  - Actually handle arch config when creating a VM (#499145)
  - Log libvirt capabilities at startup to aid debugging (#500337)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-1.fc12
changelog:
  - Update to release 0.8.0
  - New 'Clone VM' Wizard
  - Improved UI, including an overhaul of the main 'manager' view
  - System tray icon for easy VM access (start, stop, view console/details)
  - Wizard for adding serial, parallel, and video devices to existing VMs.


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-3.fc12
changelog:
  - Fix disk XML mangling via connect/eject cdrom (bz 516116)
  - Fix delete button sensitivity (bz 518536)
  - Fix populating text box from storage browser in 'New VM' (bz 517263)
  - Fix a traceback in an 'Add Hardware' error path (bz 517286)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-4.fc12
changelog:
  - Don't close libvirt connection for non-fatal errors (bz 522168)
  - Manager UI tweaks
  - Generate better errors if disk/net stats polling fails


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-5.fc12
changelog:
  - Refresh host disk space in create wizard (bz 502777)
  - Offer to fix disk permission issues (bz 517379)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-6.fc12
changelog:
  - Fix VCPU hotplug
  - Remove access to outdated docs (bz 522823, bz 524805)
  - Update VM state text in manager view (bz 526182)
  - Update translations (bz 493795)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-7.fc12
changelog:
  - More translations (bz 493795)
  - Don't allow creating a volume without a name (bz 526111)
  - Don't allow volume allocation > capacity (bz 526077)
  - Add tooltips for toolbar buttons (bz 524083)


author: Cole Robinson <crobinso@redhat.com> - 0.8.1-1.fc12
changelog:
  - Update to release 0.8.1
  - VM Migration wizard, exposing various migration options
  - Enumerate CDROM and bridge devices on remote connections
  - Support storage pool source enumeration for LVM, NFS, and SCSI


author: Cole Robinson <crobinso@redhat.com> - 0.8.2-1.fc12
changelog:
  - Update to 0.8.2 release
  - Fix first virt-manager run on a new install
  - Enable floppy media eject/connect


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-1
changelog:
  - Rebase to 0.8.4
  - 'Import' install option, to create a VM around an existing OS image
  - Support multiple boot devices and boot order
  - Watchdog device support
  - Enable setting a human readable VM description.
  - Option to manually specifying a bridge name, if bridge isn't detected


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-2.el6
changelog:
  - Fix broken icon in UI (bz 577249)
  - Only close connection on 'remote' error (bz 580613)
  - Add pool refresh button (bz 580567)
  - Managed save/restore support (bz 591625)
  - Fix first run hypervisor detection (bz 591584)
  - Don't allow shutdown or unpause while cloning (bz 577252)
  - Offer to start default storage pool (bz 584672)
  - Skip post-install restart if user destroys VM (bz 587703)
  - Don't install outdated help docs (bz 588577)
  - Warn about unsupported VCPU overcommit (bz 588655)
  - Hide unsupported sound models (bz 588695)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-3.el6
changelog:
  - Fix VNC reconnect error (bz 593326)
  - Fix remote VNC connection with zsh (bz 593328)
  - Fix VNC auto keymap detection (bz 593333)
  - Fix New VM customize option with no storage (bz 593336)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-5.el6
changelog:
  - Allow setting cpuset automatically from NUMA config (bz 604205)
  - Update translations (bz 575681)
  - Fix pool building for LVM/disk pools (bz 597519)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.el6
changelog:
  - Rebase to 0.8.6 (bz 658959)
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-2
changelog:
  - Don't launch consoles on app startup (bz 670735)
  - Fix connecting to VNC over unix socket (bz 651606)
  - Fix changing 'Overview' settings (bz 673463)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-3.el6
changelog:
  - Add ICH6 sound model (bz 680827)
  - Don't error if shutting down a transient domain (bz 681113)
  - Don't offer to create readonly file formats (673028)
  - Improve wording if offering to reuse existing storage (bz 669741)
  - Disallow changing format in 'customize' screen for new storage (bz 677255)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-1.el6
changelog:
  - Rebased to version 0.9.0
  - Use a hiding toolbar for fullscreen mode
  - Use libguestfs to show guest packagelist and more (Richard W.M. Jones)
  - Basic 'New VM' wizard support for LXC guests
  - Remote serial console access (with latest libvirt)
  - Remote URL guest installs (with latest libvirt)
  - Add Hardware: Support <filesystem> devices
  - Add Hardware: Support <smartcard> devices (Marc-André Lureau)
  - Enable direct interface selection for qemu/kvm (Gerhard Stenzel)
  - Allow viewing and changing disk serial number


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-3
changelog:
  - Fix typo that broke net stats reporting (bz 726447)
  - Add BuildRequires: GConf2 to fix package install (bz 726325)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-5
changelog:
  - Fix autodrawer on RHEL6, unbreaks opening console window (bz 727414)
  - Update icon cache after RPM install


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-6
changelog:
  - Fix 'Resize to VM' graphical option (bz 728541)
  - More explicit python binary references (bz 708181)
  - Fix launching 'create pool' dialog (bz 729226)
  - More SCSI option hiding (bz 727766)
  - Fix showing XML chars in VM name (bz 732371)
  - Fix confusion when removing device with unapplied changes (bz 728845)
  - Fix deleting guest with managed save data (bz 728155)
  - Fix error when adding default storage (bz 728497)
  - Disable unsupported RHEL6 options (bz 727766, bz 710337, bz 729590, bz
    717373)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-7
changelog:
  - Detect that RHEL6 qemu supports spice (bz 734693)
  - Properly fix crash when deleting a vm device (bz 728845)
  - Try harder to generate remote URI for localhost for p2p migration (bz
    699953)
  - Fix vm lookup race after vm creation (bz 731771)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-8
changelog:
  - Fix changing disk bus from virtio->ide (bz 769192, bz 741937)
  - Fix serial console stalls when showing lots of text (bz 747490)
  - Fix connection drop if VM gets an error while shutting down (bz
    742055)
  - Make 'browse local' chooser allow entering a new path (bz 734529)
  - Escape XML chars in vm description tooltip (bz 741158)
  - Fix keyboard shortcuts when spice isn't focused (bz 733210)
  - Hide unsupported serial types (bz 740775)
  - Warn about unapplied changes in customize dialog (bz 736270)
  - Hide unsupported storage formats (bz 735766)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-9
changelog:
  - Fix scaling for spice (bz 750225)
  - Don't allow a busted iface to break other iface details page (bz
    786694)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Martin Kletzander <mkletzan@redhat.com> - 0.9.0-19
changelog:
  - Fix changing cirrus->QXL for active VM (rhbz#985184)
  - Top level windows shouldn't be visible by default (rhbz#990507)
  - The bus, device values of USB device is decimal rather than hex (rhbz#820303)
  - Don't fail on selecting network without IP (rhbz#869474)
  - Differentiate duplicate usb devices by bus/addr (rhbz#820303)
  - Remove address when changing watchdog models (rhbz#869206)
  - Add 'pre-startup' signal and do nodedevs checking (rhbz#820303)
  - Create: s/Gb/GB/ for storage units (rhbz#873142)
  - Add support for security relabeling (rhbz#907399)
  - Always show toolbar in customize dialog (rhbz#981628)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-20
changelog:
  - virt-manager shows the right guest status when guest is pmsuspended (rhbz#1091292)
  - Make consistent virt-manager's option "--profile=File" between manual page and help page. (rhbz#1069090)
  - Virt-manager: Add Virtio SCSI disk option. (rhbz#1049781)
  - Allow changing the default new VM CPU model. (rhbz#1046583)
  - virt-manager supports native gluster fs (rhbz#1040172)
  - virt-manager doesn't cause a python trace-back when it cannot open display (rhbz#1025706)
  - AttributeError: 'NoneType' object has no attribute 'storagePoolLookupByName' (rhbz#927257)
  - virt-manager doesn't set up TCP net console mode properly (rhbz#918451)
  - virt-manager cannot open console through IPV6. (rhbz#870383)
  - Support SPICE auto-redir in virt-manager (rhbz#807277)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-21
changelog:
  - Fix error reporting (rhbz#1093980)
  - Fix parser error when install virt-manager (rhbz#1093979)
  - Fix Preferences/Feedback UI alignment (rhbz#1094083)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-22
changelog:
  - Fix alignment of Preferences/VM Details (rhbz#1094083)
  - Fix description of "Source Name" in create-pool (rhbz#1094005)
  - Handle ipv6 addresses (rhbz#870383)
  - virt-manager: escape host string (rhbz#1094600)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Daniel P. Berrange <berrange@redhat.com> - 0.0.3-5.fc12
changelog:
  - Fix auth against libvirt (rhbz #499594)
  - Fix confusion of VNC credentials (rhbz #499595)
  - Correct keyboard grab handling (rhbz #499362)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.1-4
changelog:
  - Fix initial zoom level setting (rhbz #730901)
  - Fix potential deadlock in event callback (rhbz #731132)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.1-5
changelog:
  - Fix zoom level on non-primary monitors (rhbz #730901)
  - Fix missing domain name in window title (rhbz #739007)
  - Don't crash if URI parsing fails (rhbz #734769)
  - Fix direct connection to VMs using a wildcard address (rhbz #730911)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.1-7
changelog:
  - Fix initial window title when waiting for guest (rhbz #744374)
  - Fix detection of SPICE pointer grabs to update title (rhbz #744377)
  - Fix incorrect key sequence for C-A-F9/10/11/12 (rhbz #744370)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1
changelog:
  - Update to 0.5.2 release
  - Fix connect to password protected SPICE displays over SSH (rhbz #749759)
  - Add SPICE smartcard support (rhbz #789090)
  - Honour hot key configuration from SPICE controller (rhbz #795437)
  - Refresh translations (rhbz #797015)
  - Fix crash reconnecting to SPICE after guest restart (rhbz #797082)
  - Add support for foreign menus with SPICE (rhbz #799038)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.2-3
changelog:
  - Add --full-screen=auto-conf to remote-viewer (rhbz #803297)
  - Correctly handle switch-host Spice migration (rhbz #802574)
  - Fix USB auto-share doesn't work in full-screen (rhbz #803834)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-4
changelog:
  - Fix close of VNC displays (rhbz #802673)
  - Add usbredirect properties (rhbz #807298)
  - Add properties to disable desktop effects (rhbz #808986)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-5
changelog:
  - Raise priority of spice-xpi-client alternative to 25 (rhbz #813303)
  - Add missing docs for --attach parameter (rhbz #811191)
  - Fix typos in docs for --full-screen parameter (rhbz #811131)
  - Fix usbredirect property usage (rhbz #807298)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-6
changelog:
  - Fix scaling of windows on i386 arch (rhbz #810544)
  - Support raw IPv6 addresses in URIs (rhbz #813375)
  - Set remote-viewer application name (rhbz #814043)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-7
changelog:
  - Change to Ok to Close in USB redirection (rhbz #816280)
  - Fix close of windows on guest shutdown (rhbz #816550)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-12
changelog:
  - Use real binary name in help message (rhbz #814150)
  - Correctly detect IPv6 any address (rhbz #832121)
  - Add --title option to remote-viewer (rhbz #828339)
  - Add newline at end of verbose info output (rhbz #822794)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-15
changelog:
  - Fix crash starting remote-viewer from XPI plugin (rhbz #867459)
  - Fix crash connecting with wrong spice password (rhbz #867248)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-16
changelog:
  - Don't resize to 50x50 when toggling autoresize (rhbz #856610)
  - Allow zooming beyond normal size (rhbz #856678)
  - Allow changing resolution when in fullsreen (rhbz #864929)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-18
changelog:
  - Fix resolution when switching to fullscreen (rhbz #881020)
  - Ensure correct file extension on screenshots (rhbz #875126)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-1.el6_5
changelog:
  - Rebase to v0.5.6. Resolves: #961455
  - Two monitors are in fullscreen at only one screen (rhbz#809546)
  - Can't Change Resolution in Full Screen (rhbz#846127)
  - Connection dialog should handle connection errors (rhbz#864026)
  - Allow changing guest resolution when started in fullscreen (rhbz#864929)
  - "Unable to connect to the graphic server" error on guest shutdown (rhbz#875697)
  - Cannot change resolution when automatically resize is off (rhbz#908057)
  - full-screen=auto-conf -- setting resolution in a loop (rhbz#908408)
  - Send keys menu offset in fullscreen (rhbz#913601)
  - Support connection file / MIME reigstration (rhbz#908805)
  - Reuse existing 'displays' submenu (rhbz#856682)
  - Window too small after switching off full-screen (rhbz#805146)
  - Move display on client monitors with --full-screen (rhbz#876444)
  - Make window titles configurable (rhbz#904091)
  - Make hotkeys configurable from the cmdline (rhbz#904094)
  - Guest will keep typing '~' after press F9 and F10 in same time (rhbz#820829)
  - Fail to resume guest after do S3 (rhbz#870710)
  - man: document auto-conf fullscreen option (rhbz#875559)
  - Title bar of second form becomes invisible (rhbz#876445)
  - man: document running remote-viewer without URI (rhbz#882133)
  - Fix recent connections (rhbz#882134)
  - Multi-monitors fixes (rhbz#888629)
  - Add a "Do not ask me again" checkbox when closing app (rhbz#905684)
  - Fix menu keyboard interaction (rhbz#924577)
  - man: add -- to seperate program arguments (rhbz#843103)
  - Press Enter to connect in dialog (rhbz#885106)
  - Change of resolution switches previously disabled display back on (rhbz#958966)
  - All "windows" have the same resolution in fullscreen (rhbz#886570)
  - Removed plugin


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-2
changelog:
  - Use -H instead of -h for the short --hotkeys (rhbz#980846)
  - remote-viewer.desktop: Fix missing trailing ;


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-6
changelog:
  - Unregister events and callbacks on dispose, silence a libvirtd error when
    virt-viewer shuts down (rhbz#890297)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-7
changelog:
  - Always ask for confirmation when quitting remote-viewer, even when in
    fullscreen (rhbz#905684)
  - Show an error message when trying to use a wrong SPICE password
    (rhbz#990883)
  - Make sure resolution higher than native can be set in fullscreen
    (rhbz#864929)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-8
changelog:
  - Re-add patch to propagate 'send-ctrlaltdel' setting from the controller
    to spice-gtk, this was dropped by mistake during the 6.5 rebase
    Resolves: rhbz#1007205


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.6.0-1
changelog:
  - Rebase to 0.6.0. Drop all patches except one non-upstream patch that we'll
    carry for a little while longer yet.
    Resolves: rhbz#1097038


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-2
changelog:
  - Use a USB icon instead of a generic settings icon
    Resolves: rhbz#804184
  - Remove menu item "Automatically resize"
    Resolves: rhbz#1007649
  - Client doesn't send monitor config when launched via browser plugin
    Resolves: rhbz#1038726
  - Screen is blurry for some resolutions when spice window is maximized
    Resolves: rhbz#1056041
  - Remove some couldn't load configuration messages
    Resolves: rhbz#1006737


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.6.0-4
changelog:
  - Fixed coverity errors discovered in 0.6.0-1 build
    Related:  rhbz#1097038
  - Remote-Viewer: Zoom Out Behavior Is Not Consistent
    Resolves: rhbz#1004051


author: Christophe Fergeau <cfergeau@redhat.com> 0.6.0-5
changelog:
  - Fix authentication after failed attempt with VNC
    Resolves: rhbz#1007295
  - Fix broken 'release-cursor' accel when not specified in --hotkeys
    Resolves: rhbz#1029108


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-6
changelog:
  - Remove some warnings in kiosk mode
    Resolves: rhbz#1107518
  - Register remote-viewer.desktop as a handler for application/x-virt-viewer
    Resolves: rhbz#1063238
  - New display will be zoomed out to a very small display size
    Resolves: rhbz#1104064
  - Guest can not be resized to expected window size after zoom out
    Resolves: rhbz#1105528


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-1
changelog:
  - Rebase to 2.0 release
    Resolves: rhbz#1179477, rhbz#1108523, rhbz#1085216, rhbz#1129479,
    rhbz#1085210, rhbz#1083786, rhbz#1032936, rhbz#1021841, rhbz#987549,
    rhbz#1146998


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-4
changelog:
  - Take --direct into consideration when checking if a guest is reachable
    Resolves: rhbz#1085216
  - Update geometry when enabling/disabling displays
    Resolves: rhbz#1111425
  - Monitor config at sometimes leaves additional monitors enabled
    Resolves: rhbz#1200750
  - Bring back debug log about nonexistent guest
    Resolves: rhbz#1201177
  - Don't show empty foreign menu on secondary displays
    Resolves: rhbz#1201605
  - Do not add "https://" and "/api" to oVirt URI
    Resolves: rhbz#1201599
  - Fix tiny window when opening a vnc guest
    Resolves: rhbz#1201679


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-5
changelog:
  - Clean up on connection's errors treatment
    Related: rhbz#1085216
  - Zooming out changes display resolution of spice guest
    Resolves: rhbz#1206460
  - Virtual desktops, mouse actions goes to wrong display
    Resolves: rhbz#1206216
  - virt-viewer --wait option should require a domain name
    Resolves: rhbz#1209398
  - virt-viewer set hotkeys for release-cursor doesn't work
    Resolves: rhbz#1206106


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-7
changelog:
  - Allow any zoom level for VNC connections
    Resolves: rhbz#1211216
  - Make sure that minimum zoom level is lower than NORMAL_ZOOM_LEVEL
    Related: rhbz#1206460


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-14
changelog:
  - remove file upload permission problem 
  - change name of patch vsfptd-2.0.3-user_config
  - Resolves #190193


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-16
changelog:
  - Merge review: - fix using %{_var}, %{_sbindir} and 
                    %{_sysconfigdir} macros for files and install
                  - fix BuildRoot
                  - dropped usermod, openssl & pam requirement


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-21
changelog:
  - Remove uniq_rename patch.
  - Correct create/lock race condition, original patch by <mpoole@redhat.com>
    (#240550).
  - Fix bad handling of unique files (#392231).
  - Added userlist_log option.
  - Allow usernames to begin with underscore or dot (#339911).
  - Removed user_config patch.
  - Fix nonrootconf patch (#400921).
  - Increase maximum length of allowed username (#236326).
  - Fix file listing issue with wildcard (#392181).
  - Removed use_localtime patch (#243087).


author: Martin Nagy <mnagy@redhat.com> - 2.0.6-1
changelog:
  - rebase for new upstream version
  - remove patches that were fixed in upstream: kickline, confspell, anon_umask


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3
changelog:
  - update to latest upstream release
  - cleanup the spec file
  - drop patches fixed upstream:
      vsftpd-1.0.1-missingok.patch
      vsftpd-1.2.1-nonrootconf.patch
      vsftpd-2.0.1-tcp_wrappers.patch
      vsftpd-2.0.2-signal.patch
      vsftpd-2.0.3-daemonize_fds.patch
      vsftpd-2.0.5-correct_comments.patch
      vsftpd-2.0.5-pasv_dot.patch
      vsftpd-2.0.5-write_race.patch
      vsftpd-2.0.5-fix_unique.patch
      vsftpd-2.0.5-uname_size.patch
      vsftpd-2.0.5-bind_denied.patch
      vsftpd-2.0.5-pam_end.patch
      vsftpd-2.0.5-underscore_uname.patch
      vsftpd-2.0.6-listen.patch
  - join all configuration patches into one:
      vsftpd-1.1.3-rh.patch
      vsftpd-1.2.1-conffile.patch
      vsftpd-2.0.1-dir.patch
      vsftpd-2.0.1-server_args.patch
      vsftpd-2.0.3-background.patch
      vsftpd-2.0.5-default_ipv6.patch
      vsftpd-2.0.5-add_ipv6_option.patch
      vsftpd-2.0.5-man.patch


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4
changelog:
  - update to latest upstream release
  - enable ptrace sandbox again
  - don't mark vsftpd_conf_migrate.sh as a config file


author: Jiri Skala <jskala@redhat.com> - 2.1.0-3
changelog:
  - updated to latest upstream version
  - improved daemonizing - init script gets correct return code if binding fails
  - trim white spaces from option values
  - fixed #483604 - vsftpd not honouring delay_failed_login when userlist active


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-14
changelog:
  - Resolves: #1092877 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Lisa Sagami <czs14350@nifty.ne.jp>
changelog:
  - Provides: webclient, Requires: indexhtml (capability of lynx)
  - added w3m.wmconfig
  - give them(who?) RPM_OPT_FLAGS(what?)
  - dont include duplicated man pages and CVS directory in doc


author: SATO Satoru <ssato@redhat.com>
changelog:
  - not to use upstream configure script (it looks corrupted)
  - separated w3m-ja/w3m-en (#26443)
  - apply many security bug fix patch
  - ExludeArch alpha
  - use bzip2 instead of gzip for src/patches


author: SATO Satoru <ssato@redhat.com>
changelog:
  - s/Copyright/License/
  - %files: add '/etc/profile.d/w3m.*'
  - enable IPv6 support by default (#35649)


author: SATO Satoru <ssato@redhat.com> - 0.2.1-9
changelog:
  - corrected the help files' path (#51197)
  - removed /etc/profile.d/*
  - fixed and update the wrapper
  - removed imlib-devel (BuildRequires:)


author: SATO Satoru <ssato@redhat.com> - 0.2.1-11
changelog:
  - made the relative link to HTML_HOME instead of the absolute one
  - fixed the permission of sources (to shut up rpmlint)


author: Akira TAGOH <tagoh@redhat.com> 0.2.4-2
changelog:
  - Fixed use a wrong build config for en. (Bug#58093)
  - Update build config files for 0.2.4
  - Added cert path to default config.


author: Akira TAGOH <tagoh@redhat.com> 0.3-1
changelog:
  - New upstream release.
  - w3m-0.3-config.param-{en,ja}: update.
  - w3m-0.3-fixprivsym.patch: Fixed unresolved dependencies. (Bug#60725)
    Thanks Jakub.
  - fix the missing files.


author: Akira TAGOH <tagoh@redhat.com> 0.3.1-1
changelog:
  - New upstream release.
  - w3m-0.3.1-fixprivsym.patch: disabled. it works without this patch.
  - w3m-0.3.1-fixptr_t.patch: applied to fix the build issue for alpha.
  - gc6.1alpha2.tar.bz2: use an old version to avoid the build issue for IA64.


author: Akira TAGOH <tagoh@redhat.com> 0.3.1-3
changelog:
  - use 'display' to show the image when nothing is described in mailcap.
  - w3m-0.3.1-fixanchor.patch: applied to fix an anchor issue on plain text.
  - w3m-0.3.1-multipartimg.patch: applied to fix a rendering issue on multipart.
  - w3m-0.3.1-fixwarning-03276.patch: applied to fix a warning message at buld
    time.


author: Akira TAGOH <tagoh@redhat.com> 0.3.2-1
changelog:
  - New upstream release.
  - removed some packages, because this release contains it.
    - w3m-0.3.1-fixanchor.patch
    - w3m-0.3.1-multipartimg.patch
    - w3m-0.3.1-fixwarning-03276.patch
  - w3mimgsize is obsolete.
  - gc6.1.tar.gz: update to the latest gc library.
  - w3m-0.3.2-fix64arch.patch: applied to fix the build issue for ia64 and x86_64.
  - w3m-0.3.2-lib64path.patch: applied to add lib64 path for x86_64.


author: Akira TAGOH <tagoh@redhat.com> 0.3.2.2-2
changelog:
  - add indexhtml to BuildRequires.
  - fix the wrong path to the local CGI.
  - don't use rpms internal dep generator.
  - w3m-wrapper: go through the options.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - buildreq openssl-devel instead of openssl
  - use openssl's pkg-config configuration if it exists
  - pass cflags and ldflags in to configure instead of letting them get pulled
    in from the environment


author: Akira TAGOH <tagoh@redhat.com> 0.3.2.2-5
changelog:
  - w3m-0.3.2.2-fixhttpssegv.patch: applied to fix a segfault with https. (#83263)
  - gc6.2alpha3.tar.gz: use it to be built on s390x.


author: Akira TAGOH <tagoh@redhat.com> 0.4.1-1
changelog:
  - New upstream release.
  - w3m-0.3.2.2-fixhttpssegv.patch: removed.
  - w3m-0.3.2-fix64arch.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 0.4.1-9
changelog:
  - w3m-0.4.1-guess_display_locale.patch: applied to guess the display encoding
    from the current locale. (#111217)


author: Akira TAGOH <tagoh@redhat.com> 0.4.1-10
changelog:
  - gc6.2alpha5-ppc64.patch: removed because no need to apply.
  - gc6.2.tar.gz: update to the stable version.
  - gc6.2-fix-prelink.patch: applied to fix prelink issue. (#115201: Jakub Jelinek)


author: Akira TAGOH <tagoh@redhat.com> 0.5-1
changelog:
  - New upstream release.
  - w3m-0.2.3.1-ipv6.patch: removed.
  - w3m-0.4.1-stable-m17n-20030308.patch.gz: removed, because it has been marged to the upstream.
  - w3mconfig: updated.
  - w3mbookmark: removed, use one, which the upstream disbributed.
  - w3mhelperpanel: likewise.
  - libwc-latest.tar.gz: likewise.
  - w3m-wrapper: removed.
  - w3m-0.5-guess_display_locale.patch: updated.
  - w3m-0.5-staic-libgc.patch: applied to build static library of libgc.
  - w3m-0.3.2-lib64path.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 0.5-2
changelog:
  - separated w3mimgdisplay to w3m-img package. (#120600)
  - removed indexhtml, which is no longer refered.


author: Akira TAGOH <tagoh@redhat.com> - 0.5.1-5
changelog:
  - updates to gc6.3. (#143361)
    - w3m-0.3.1-fixptr_t.patch: removed. it's no longer needed.
  - fixed the permission to get working of the helper scripts.


author: Akira TAGOH <tagoh@redhat.com> - 0.5.1-7
changelog:
  - rebuilt
  - w3m-0.5.1-gcc4.patch: applied to fix the build fails with gcc4.
    (#151136: Robert Scheck)


author: Akira TAGOH <tagoh@redhat.com> 0.5.1-12
changelog:
  - rebuilt against the latest openssl.
  - gc6.2-fix-prelink.patch: removed.
  - w3m-fix-vi-prec-num.patch: applied to get the vi-like prefix working.


author: Parag Nemade <pnemade@redhat.com> - 0.5.2-1
changelog:
  - Update to 0.5.2 and remove merged patches.
  - Build against system gc library.
  - Add BR: nkf for multipart.cgi.
  - Don't call unneeded autotool


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.5.2-11
changelog:
  - Add BR: lynx which provides "text-www-browser" virtual Provides
    to avoid BR dependency loop between gtk2-devel and w3m (shorter name wins
    the game with yum)
    Proposed by drago01 <drago01@gmail.com> rh#455734


author: Trond Eivind Glomsrød <teg@redhat.com> 25-1
changelog:
  - v25 - fixes encryption usage display, eternal loops for unknown 
    events and matches the v13 wireless extensions as shipped in
    kernel (#72582)


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#227140)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokal <rvokal@redhat.com> 0.99.7-0.pre2
changelog:
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - 0.99.7 prerelease 2


author: Radek Vokál <rvokal@redhat.com> 1.0.3-1
changelog:
  - upgrade to 1.0.3
  - Security-related bugs in the NCP dissector, zlib compression code, and Tektronix .rf5 file parser have been fixed. 
  - WPA group key decryption is now supported. 
  - A bug that could cause packets to be wrongly dissected as "Redback Lawful Intercept" has been fixed.


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Radek Vokal <rvokal@redhat.com> - 1.2.6-1
changelog:
  - upgrade to 1.2.6
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html 
  - minor spec file tweaks for better svn checkout support (#553500)
  - init.lua is present always and not only when lua support is enabled
  - fix file list, init.lua is only in -devel subpackage (#552406)
  - Autoconf macro for plugin development.


author: Radek Vokal <rvokal@redhat.com> - 1.2.8-1
changelog:
  - upgrade to 1.2.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html
  - use sitearch instead of sitelib to avoid pyo and pyc conflicts 
  - bring back -pie
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Radek Vokal <rvokal@redhat.com> - 1.2.9-1
changelog:
  - upgrade to 1.2.9
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html
  - Resolves: #604312


author: Jan Safranek <jsafrane@redhat.com> 1.2.10-1
changelog:
  - upgrade to 1.2.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
  - Resolves: #604312 (proper fix for CVE-2010-2284)


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657535 (CVE-2010-4300 CVE-2010-3445)


author: Jan Safranek <jsafrane@redhat.com> 1.2.15-1
changelog:
  - upgrade to 1.2.15
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
  - Resolves: CVE-2011-0444 CVE-2011-0538 CVE-2011-0713 CVE-2011-1139
    CVE-2011-1140 CVE-2011-1141 CVE-2011-1143


author: Jan Synáček <jsynacek@redhat.com> 1.2.15-3
changelog:
  - security patches
  - Resolves: CVE-2011-1143
              CVE-2011-1590
              CVE-2011-1957
              CVE-2011-1959
              CVE-2011-2174
              CVE-2011-2175 CVE-2011-1958
              CVE-2011-2597 CVE-2011-2698
              CVE-2011-4102
              CVE-2012-0041 CVE-2012-0066 CVE-2012-0067
              CVE-2012-0042
              CVE-2012-1595


author: Peter Hatina <phatina@redhat.com> 1.8.8-1
changelog:
  - upgrade to 1.8.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html
  - Resolves: #711024
  - Resolves: #858976
  - Resolves: #699636
  - Resolves: #750712
  - Resolves: #832021
  - Resolves: #889346
  - Resolves: #659661
  - Resolves: #715560


author: Peter Hatina <phatina@redhat.com> 1.8.8-4
changelog:
  - fix tap-iostat buffer overflow
  - fix dcom string overrun
  - fix sctp bytes graph crash
  - fix airpcap dialog crash
  - Related: #711024


author: Peter Hatina <phatina@redhat.com> 1.8.8-6
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-3557


author: Peter Hatina <phatina@redhat.com> 1.8.10-1
changelog:
  - upgrade to 1.8.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.8.10.html
  - Related: #711024


author: Peter Hatina <phatina@redhat.com> 1.8.10-5
changelog:
  - security patches
  - Resolves: CVE-2013-6336
              CVE-2013-6338
              CVE-2013-6339
              CVE-2013-6340
              CVE-2013-7112
              CVE-2013-7114


author: Peter Hatina <phatina@redhat.com> - 1.8.10-8
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6424
              CVE-2014-6425
              CVE-2014-6426
              CVE-2014-6427
              CVE-2014-6428
              CVE-2014-6429


author: Peter Hatina <phatina@redhat.com> - 1.8.10-16
changelog:
  - security patches
  - Resolves: CVE-2014-8710
              CVE-2014-8711
              CVE-2014-8712
              CVE-2014-8713
              CVE-2014-8714
              CVE-2015-0562
              CVE-2015-0564


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.2-1
changelog:
  - upgrade to 0.4.2
  - new sample conf file that will use any unrestricted AP
  - make sysconfig config entry
  - new BuildRoot for Fedora Extras
  - adding dist tag to Release


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.5-1
changelog:
  - upgrade to 0.4.5
  - updated config file wpa_supplicant is built with
    especially, the ipw2100 driver changed to just ipw
    and enabled a bunch more EAP
  - disabled dist tag


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.6-1
changelog:
  - upgrade to 0.4.6
  - adding ctrl interface changes recommended 
    by Hugo Paredes <hugo.paredes@e-know.org>


author: Dan Williams <dcbw@redhat.com> - 0.4.8-4
changelog:
  - Add additional BuildRequires #rh181914#
  - Add prereq on chkconfig #rh182905# #rh182906#
  - Own /var/run/wpa_supplicant and /etc/wpa_supplicant #rh183696#


author: Dan Williams <dcbw@redhat.com> - 0.4.8-6
changelog:
  - Add patch to make orinoco happy with WEP keys
  - Enable Prism54-specific driver
  - Disable ipw-specific driver; ipw2x00 should be using WEXT instead


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10
changelog:
  - Add fix for madwifi and WEP (wpa_supplicant/hostap bud #140) (#rh190075#)
  - Fix up madwifi-ng private ioctl()s for r1331 and later
  - Update madwifi headers to r1475


author: Dan Williams <dcbw@redhat.com> - 0.4.9-1
changelog:
  - Update to 0.4.9 for WE-21 fixes, remove upstreamed patches
  - Don't package doc/ because they aren't actually wpa_supplicant user documentation,
      and becuase it pulls in perl


author: Dan Williams <dcbw@redhat.com> - 0.5.7-7
changelog:
  - Make SIGUSR1 change debug level on-the-fly; useful in combination with
      the -f switch to log output to /var/log/wpa_supplicant.log
  - Stop stripping binaries on install so we get debuginfo packages
  - Remove service start requirement for interfaces & devices from sysconfig file,
      since wpa_supplicant's D-Bus interface is now turned on


author: Dan Williams <dcbw@redhat.com> - 0.5.7-8
changelog:
  - Change system bus activation file name to work around D-Bus bug that fails
      to launch services unless their .service file is named the same as the
      service itself


author: Dan Williams <dcbw@redhat.com> - 0.5.7-11
changelog:
  - Add BLOB support to the D-Bus interface
  - Fix D-Bus interface permissions so that only root can use the wpa_supplicant
      D-Bus interface


author: Dan Williams <dcbw@redhat.com> - 0.5.7-12
changelog:
  - Fix conversion of byte arrays to strings by ensuring the buffer is NULL
      terminated after conversion


author: Dan Williams <dcbw@redhat.com> - 0.5.7-16
changelog:
  - Add IW_ENCODE_TEMP patch for airo driver and Dynamic WEP
  - Fix error in wpa_supplicant-0.5.7-ignore-dup-ca-cert-addition.patch that
      caused the last error to not be printed
  - Fix wpa_supplicant-0.5.7-ignore-dup-ca-cert-addition.patch to ignore
      duplicate cert additions for all certs and keys
  - Change license to BSD due to linkage against OpenSSL since there is no
      OpenSSL exception in the GPLv2 license text that upstream ships


author: Dan Williams <dcbw@redhat.com> - 1:0.5.7-19
changelog:
  - Fix two leaks when signalling state and scan results (rh #408141)
  - Add logrotate config file (rh #404181)
  - Add new LSB initscript header to initscript with correct deps (rh #244029)
  - Move other runtime arguments to /etc/sysconfig/wpa_supplicant
  - Start after messagebus service (rh #385191)
  - Fix initscript 'condrestart' command (rh #217281)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.3-6
changelog:
  - Fix 802.11a frequency bug
  - Always schedule specific SSID scans to help find hidden APs
  - Properly switch between modes on mac80211 drivers
  - Give adhoc connections more time to assocate


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-1
changelog:
  - Update to 0.6.4
  - Remove 'hostap', 'madwifi', and 'prism54' drivers; use standard 'wext' instead
  - Drop upstreamed patches


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-2
changelog:
  - Handle encryption keys correctly when switching 802.11 modes (rh #459399)
  - Better scanning behavior on resume from suspend/hibernate
  - Better interaction with newer kernels and drivers


author: Dan Williams <dcbw@redhat.com> - 1:0.6.7-1
changelog:
  - Fix PEAP connections to Windows Server 2008 authenticators (rh #465022)
  - Stop supplicant on uninstall (rh #447843)
  - Suppress scan results message in logs (rh #466601)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-3
changelog:
  - Ensure the supplicant starts and ends with clean driver state
  - Handle driver disconnect spammage by forcibly clearing SSID
  - Don't switch access points unless the current association is dire (rh #493745)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-7
changelog:
  - Fix supplicant initscript return value (rh #521807)
  - Fix race when connecting to WPA-Enterprise/802.1x-enabled access points (rh #508509)
  - Don't double-scan when attempting to associate


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-1
changelog:
  - Update to 0.7.3 - for nl80211 and background scanning (rh #713280)
  - Drop upstreamed and backported patches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)
  - Don't install manpage for wpa_gui (rh #672976)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-5
changelog:
  - Add domain_match config option from upstream (rh #1186806) (rh #1178263)
  - Include peer certificate in EAP events for use by clients
  - Add dbus signal for information about server certification
  - eapol_test: Add option for writing server certificate chain to a file


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.5-4
changelog:
  - xkeyboard-config-1.5-suspend-hibernate.patch: Map I213 to XF86Suspend, and
    I255 to XF86Hibernate.


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.5-5
changelog:
  - xkeyboard-config-1.5-terminate.patch: remove Terminate_Server from default
    pc symbols, add terminate:ctrl_alt_bksp.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6-3
changelog:
  - xkeyboard-config-1.6-caps-super.patch: add caps:super option (#505187)
  - xkeyboard-config-1.6-caps-hyper.patch: add caps:hyper option (#505187)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3-1
changelog:
  - xkeyboard-config 2.3 (#713863)
  - Revert 2.3 Sinhala (lk) changes, they require newer x11proto/libX11
    updates
  - update Source0 line to ftp.x.org


author: Mike A. Harris <mharris@redhat.com> 6.5.6-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Use _smp_mflags with make, to speed up SMP builds.
  - Add "alpha sparc sparc64" to ExclusiveArch


author: Mike A. Harris <mharris@redhat.com> 6.5.6.1-1
changelog:
  - Updated xorg-x11-drv-ati to version 6.5.6.1 from X11R7 RC1
  - Fix *.la file removal.
  - Add "BuildRequires: mesa-libGL-devel >= 6.4-4 for DRI builds"


author: Mike A. Harris <mharris@redhat.com> 6.5.7.2-1
changelog:
  - Updated xorg-x11-drv-ati to version 6.5.7.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 6.5.7.3-1
changelog:
  - Updated xorg-x11-drv-ati to version 6.5.7.3 from X11R7.0
  - Added ati.xinf videoalias file for hardware autodetection.


author: Mike A. Harris <mharris@redhat.com> 6.5.7.3-2
changelog:
  - Added r128.xinf and radeon.xinf videoalias files to fix bug (#174101).
  - Added "BuildRequires: libdrm-devel >= 2.0-1" to fix bug (#178613)


author: Mike A. Harris <mharris@redhat.com> 6.5.7.3-3
changelog:
  - Updated radeon.xinf to be up to date with the xf86PciInfo.h from the Xorg
    X server 1.0.1-1 source.  This should account for all supported Radeon
    models now modulo errors/omissions.


author: Kristian Høgsberg <krh@redhat.com> 6.5.7.3-4.cvs20060322
changelog:
  - Update to CVS snapshot of 20060322.
  - Drop xorg-x11-drv-ati-6.5.7.3-radeon-metamodes-SEGV-fix.patch.


author: Mike A. Harris <mharris@redhat.com> 6.6.1-1
changelog:
  - Updated xorg-x11-drv-ati to version 6.6.1 update release for X11R7.1
  - Drop db-root-visual.patch, as it is included in 6.6.1
  - Enable DRI support for sparc/sparc64 builds.


author: Adam Jackson <ajackson@redhat.com> 6.6.1-2
changelog:
  - Filter the EDID mode list by the monitor's reported pixel clock.  Bump
    the BuildReq to a server that provides the necessary ABI field.


author: Mike A. Harris <mharris@@redhat.com> 6.6.1-4
changelog:
  - Added "BuildRequires: xorg-x11-server-sdk >= 1.1.0-12" to fix the same
    problem at build time as were added in 6.6.1-2 to fix it at runtime.


author: Mike A. Harris <mharris@redhat.com> 6.6.1-5.fc6
changelog:
  - Added r128-missing-xf86ForceHWCursor-symbol-bug168753.patch to fix (#168753)
  - Add {?dist} tag to Release field


author: Adam Jackson <ajackson@redhat.com> 6.6.1-10.fc6
changelog:
  - radeon-6.6.1-use-mtdriver.patch: Use new M_T_DRIVER mode type for mode
    synthesis.
  - Bump Requires to match.


author: Adam Jackson <ajackson@redhat.com> 6.6.2-1.fc6
changelog:
  - Update to 6.6.2 from upstream:
    - Mach64 stability and correctness fixes
    - Mach64 EXA support.
    - Misc bugfixes for radeon.


author: Adam Jackson <ajackson@redhat.com> 6.6.2-2.fc6
changelog:
  - radeon-6.6.2-dac-fix.patch: Backport 25fa71... from git.  Turn on the DAC
    before doing CRT connection probe, otherwise we might incorrectly detect
    a CRT where there isn't one. (#202240 and others)


author: Adam Jackson <ajackson@redhat.com> 6.6.2-4
changelog:
  - ati-prefer-radeon-then-r128.patch: When loading through the 'ati' wrapper,
    prefer radeon to rage128 to mach{64,32,16,8,4,2,1}. 
  - r128-fp-dpms.patch: Hook up DPMS for Rage128 DFPs. (#197436)
  - radeon-6.6.2-dac-fix.patch: Even though we turn DACs on for probing, don't
    turn them off.  Fixes black screen of death post-rhgb.  (#208610)
  - radeon-6.6.2-pmac-bios.patch: Be more suspicious of ROMs before interpreting
    their content.  (#208694)
  - radeon-6.6.2-usefbdev-patch.patch: Use the framebuffer stride from fbdev,
    instead of making up numbers.  (#208694)


author: Adam Jackson <ajax@redhat.com> 6.6.3-4
changelog:
  - radeon-6.6.3-renderaccel-buglet.patch: Fix OpenOffice font corruption
    when RenderAccel is disabled. (#244675)


author: Dave Airlie <airlied@redhat.com> 6.7.191-1
changelog:
  - xf86-video-ati 6.7.191. - Add a pre-release of radeon randr code
    This will break old zaphod mode further than the current 6.6.193
    driver, and will probably break mergedfb configs, however it will
    work with randr-1.2 properly and is the more supported codebase going
    forward.


author: Dave Airlie <airlied@redhat.com> 6.7.194-2
changelog:
  - radeon-6.7.194-disable-rc410-dri.patch - Disable DRI on
    RC410 by default as it seems to need some more work.


author: Adam Jackson <ajax@redhat.com> 6.7.195-4
changelog:
  - radeon-6.7.195-faster-ddc.patch: Speed up X startup by assuming the
    monitor doesn't need a dead chicken waved over it to get DDC.


author: Dave Airlie <airlied@redhat.com> 6.7.196-3
changelog:
  - radeon-git-upstream-fixes.patch - update for latest git master
  - radeon-6.7.196-atombios-support.patch - update for r500/r600


author: Dave Airlie <airlied@redhat.com> 6.8.0-7
changelog:
  - Major upstream fixes backported - render accel, xv etc.
  - This is done with a separate patch as upstream has split mach64/r128 already


author: Dave Airlie <airlied@redhat.com> 6.8.0-8
changelog:
  - Hopefully fix quirks not applying on radeon LVDS (#435126)
  - quirk connector table from (#428515)
  - fix rotate on r500 cards


author: Adam Jackson <ajax@redhat.com> 6.9.0-1
changelog:
  - Move to 6.9.0, now that the r128 and mach64 drivers are split out.
  - Add git fixes since 6.9.0.
  - Rebase the modesetting patch onto git master.


author: Dave Airlie <airlied@redhat.com> 6.9.0-5
changelog:
  - Add a perl script to generate the radeon.xinf from the actual PCI IDs the driver supports.
  - not build integrated yet though
  - update pciids


author: Adam Jackson <ajax@redhat.com> 6.9.0-10
changelog:
  - radeon-6.9.0-fb-size.patch: Yet more lame heuristics to preallocate a
    usable framebuffer for laptops. (#458864)


author: Soren Sandmann <sandmann@redhat.com> 6.9.0-13
changelog:
  - Remove the fb size hack since there is a fix in the server now.
  - Unfortunately, the driver prevents this fix from working by applying 
    its own heuristics. Remove those.


author: Adam Jackson <ajax@redhat.com> 6.9.0-14
changelog:
  - radeon-6.9.0-panel-size-sanity.patch: Panels smaller than 800x480 are
    highly implausible, disable them if we find them.  If you have one,
    you can force it with Option "PanelSize".


author: Kristian Høgsberg <krh@redhat.com> - 6.9.0-15
changelog:
  - Add copy-fb-contents.patch to initialize the root window contents
    with the fbdev contents for slick startup.


author: Dave Airlie <airlied@redhat.com> 6.9.0-16
changelog:
  - rebase to a later tree - still not fully up to git master
  - add some fixes to the resize stuff - not fully done


author: Dave Airlie <airlied@redhat.com> 6.9.0-23
changelog:
  - rebase to upstream master
  - radeon-6.9.0-lvds-mapping.patch - merged upstream
  - copy-fb-contents.patch merged into modesetting tree.


author: Dave Airlie <airlied@redhat.com> 6.9.0-27
changelog:
  - modeset - radeon add support for basic r100/r200 EXA
  - modeset - add Download from screen accel.
  - radeon-6.9.0-to-git.patch : fix 30" monitor


author: Dave Airlie <airlied@redhat.com> 6.9.0-32
changelog:
  - move to CS2 mechanism - using chunks to avoid multiple relocations
  - add kernel requires about 2.6.27.4-52 for new CS mechanism


author: Dave Airlie <airlied@redhat.com> 6.9.0-36
changelog:
  - radeon-6.9.0-add-hd3300.patch - add missing pciid (#466706)
  - radeon-6.9.0-quirk-agp.patch - from Ubuntu.


author: Adam Jackson <ajax@redhat.com> 6.11.0-9
changelog:
  - radeon-r600-kms-shadowfb.patch: Make R600 fall back to shadowfb whne KMS
    is enabled (as opposed to crashing).


author: Dave Airlie <airlied@redhat.com> 6.11.0-10
changelog:
  - radeon-modeset.patch: merge patches into kms patch
  - radeon-6.11.0-git.patch: fix suspend/resume on r600


author: Adam Jackson <ajax@redhat.com> 6.12.1-10
changelog:
  - radeon-6.12.1-r600-fb-size.patch: Bump fb size max on R600+ when no KMS
    so single-link dualhead stands a chance of working.


author: Adam Jackson <ajax@redhat.com> 6.12.2-13
changelog:
  - radeon-6.12.2-lvds-default-modes.patch: Add default modes to the LVDS mode
    list if we got no EDID from the kernel.


author: Kyle McMartin <kyle@redhat.com> 6.12.2-14
changelog:
  - radeon-modeset-still-more-fixes.patch: Bump the GEM interface version to
    31 so we don't activate it... (#500801)


author: Adam Jackson <ajax@redhat.com> 6.12.2-15
changelog:
  - Update to tip of 6.12 branch, 74cb2aba79049b792c22abf25ade3693b802b260
  - Drop stuff from radeon-modeset-fixes.patch to match
  - Generate radeon.xinf automatically from the CSV
  - radeon-6.12.2-hax.patch: Fix cursor setup and initial framebuffer clear
    in KMS.


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable DRI support, we've never built the 3D driver and it's been nuked
    from upstream Mesa anyway.


author: Adam Jackson <ajax@redhat.com> 6.9.3-5
changelog:
  - mach64-6.9.3-shadowfb.patch: Allow Render even when doing ShadowFB.
  - Disable EXA as well, it's completely broken.
  - mach64-6.9.3-fix-no-exa-build.patch: Fix building with neither XAA nor EXA.


author: Mike A. Harris <mharris@redhat.com> 1.1.2-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86, x86_64, ia64, ppc


author: Mike A. Harris <mharris@redhat.com> 1.2.0.1-1
changelog:
  - Updated xorg-x11-drv-mga to version 1.2.0.1 from X11R7 RC1
  - Fix *.la file removal.
  - Remove hardware specific {_bindir}/stormdwg utility.


author: Mike A. Harris <mharris@redhat.com> 1.2.1.2-1
changelog:
  - Updated xorg-x11-drv-mga to version 1.2.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.4.1-3
changelog:
  - Added with_dri conditionalization (not yet working for non-dri case).
  - Added "BuildRequires: libdrm-devel >= 2.0-1" for (#192358).
  - Added "BuildRequires: mesa-libGL-devel >= 6.4-4".
  - Bumped sdk dep to pick up proto-devel indirectly.


author: Adam Jackson <ajackson@redhat.com> 1.4.1-4
changelog:
  - mga.xinf updates.  Add G200SE cards, remove Impression and Mistral IDs
    (since they do not and never have worked), and comment each line with
    the appropriate card name.


author: Adam Jackson <ajax@redhat.com> 1.4.7-0.20080102
changelog:
  - Today's git snapshot for pciaccess goodness.
  - mga-1.4.7-death-to-cfb.patch: Remove what little cfb support there was.
  - mga-1.4.7-alloca.patch: Fix ALLOCATE_LOCAL references.


author: Adam Jackson <ajax@redhat.com> 1.4.13-6
changelog:
  - Fix rendering corruption on RANDR-enabled setups (#814381)
  - Fix display setup on G200ER (#810224)


author: Adam Jackson <ajax@redhat.com> 1.6.1-10
changelog:
  - mga-1.6.1-char-cell-modes.patch: Filter out modes whose horizontal timings
    aren't character-cell aligned on G200SE and friends (#894959)


author: Soren Sandmann <ssp@redhat.com> 0.0.20.f14b-2
changelog:
  - Patch to fix it up for the new privates ABI (I had apparently been
    testing with a too old X server).


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-3
changelog:
  - Add support for using resolutions > 1024x768 without needing an xorg.conf
  - Restore textmode font when switching back to a textmode virtual console


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-5
changelog:
  - Don't access the qxl device when our vt is not focussed, this fixes
    Xorg crashing when switching to a text vc


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-6
changelog:
  - Fix a pointer casting bug which causes the qxl driver to trigger an
    assertion in the qxl device terminating the entire virtual machine


author: Hans de Goede <hdegoede@redhat.com> 0.0.21-3
changelog:
  - Add various bugfixes from upstream git
  - Fixes VT-switching (rhbz#696711)
  - Add support for old qxl device (from rhel6 branch) (rhbz#642153)


author: Hans de Goede <hdegoede@redhat.com> - 0.0.21-5
changelog:
  - Rebase to latest upstream release
  - Enable building of the Xspice X-server and put it in its own
    xorg-x11-server-Xspice package


author: Dave Airlie <airlied@redhat.com> 0.1.1-0.13
changelog:
  - resnapshot upstream to pick up a few patches
  - add userspace patch to use new kernel hotspot interface (#974662)


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-16
changelog:
  - Fix memory leak
    Resolves: rhbz#1192154
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1151559


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1199355
  - Remove enable-resizable-surface0.patch. It's causing more troubles than
    it solves, and QEMU now has the needed ram/vram support to make it
    unnecessary
    Resolves: rhbz#1140765


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Split the old style 'base' fonts package up into 'base' and 'misc', where
    'base' now contains only the 'cursor' and 'fixed' fonts required by the
    X server, and 'misc' contains a variety of Asian, Arabic, Indic, and other
    fonts that can now be optionally installed or removed.
  - Use globs in file manifests to reduce size of specfile.
  - Add post/postun scripts for all font subpackages.
  - Disable ethiopic fonts by default.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added Obsoletes/Conflicts lines for fonts-xorg-* et al. to all subpackages,
    so that OS upgrades work properly.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-6
changelog:
  - Fixed mkfontscale invocation in Type1 font subpackage post/postun scripts
    by removing accidental -o argument that creeped in via cut and paste
    error. (#173059)


author: Mike A. Harris <mharris@redhat.com> 0.99.0-7
changelog:
  - Undo the workaround implemented in build 0.99.0-5, and make the misc fonts
    directory ":unscaled" again.
  - Invoke chkfontpath to remove the bare 'misc' font path without the :unscaled
    attribute from xfs config.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-8
changelog:
  - Due to a bug in chkfontpath which will remove both 'misc' and 'misc:unscaled'
    from the fontpath, use sed magic to do it instead, based of xfs scripts.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated all font packages to X11R7 RC4 versions.
  - Added perl hack to build section to massage all of the configure.ac files
    to use pkgconfig to autodetect the top level X fontdir.
  - Added font-alias-1.0.0-fonts-alias-fontdir-fix.patch to use pkgconfig to
    autodetect the top level X fontdir.
  - Added encodings-1.0.0-encodings-fontdir-fix.patch to use pkgconfig to
    autodetect the top level X fontdir.
  - Use new --disable-iso8859-* options instead of deleting unwanted encodings.
  - Added dependency on font-utils 1.0.0


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added missing post/postun scripts for ISO8859-1-75dpi and ISO8859-1-100dpi
    font packages. (#174416)


author: Mike A. Harris <mharris@redhat.com> 7.0-1
changelog:
  - Bumped artificial package version to 7.0, to indicate that the font tarballs
    are all from X11R7.0.
  - Enabled the ethiopic font subpackage experimentally for bug (#176678)


author: Mike A. Harris <mharris@redhat.com> 7.0-2
changelog:
  - Generate encodings.dir files in the encodings dirs with mkfontscale from the
    base fonts package post install script, to work around bug (#173875)


author: Mike A. Harris <mharris@redhat.com> 7.0-3
changelog:
  - Ensure upgrade-only section of fonts-base rpm post script only executes on
    upgrades using -gt instead of -ge.


author: Mike A. Harris <mharris@redhat.com> 7.1-1
changelog:
  - Added "BuildRequires: autoconf" temporary dependency.
  - Use Fedora Extras style BuildRoot specification.


author: Adam Jackson <ajax@redhat.com> 7.1-3
changelog:
  - Create encodings.dir containing entries for both
    /usr/share/X11/fonts/encodings and
    /usr/share/X11/fonts/encodings/large (#209102).


author: Kristian Høgsberg <krh@redhat.com> - 7.2-1
changelog:
  - Use the new catalogue font install mechanism, drop all chkfontpath dependencies.
  - Unsplit base and misc subpackages, we don't require any base fonts
    now that we have built-ins.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-5
changelog:
  - Remove bh-ttf and bh-type1 (Luxi fonts) and truetype subpackage, due to 
    licensing issues (#317641)
  - Correct license tag


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-6
changelog:
  - IBM refused to relicense ibm-type1 fonts with permission to modify,
    so they were dropped (bugzilla 317641)
  - Meltho Syrian fonts (misc-meltho) have a bad license, upstream did not
    respond to request for relicensing, so they were dropped. This also
    means that the -syriac subpackage has been removed. (bugzilla 317641)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-10
changelog:
  - Fix pkgconfig variable usage, it's fontrootdir, not fontdir. Same applies
    to the patches.
  - Move generation of encodings.dir back to post, over time they moved to
    install despite the files being ghosted (#1089118)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Revert previous commit, pkg-config gives us /usr/share/fonts/X11, not
    /usr/share/X11/fonts which breaks the build on RHEL6 (#1089118)
  - Replace pkgconfig call with hardcoded path to _x11fontdir, same in the
    patches
  - Run autoreconf for encodings to pick up the changed path


author: Adam Jackson <ajax@redhat.com> 1.10.0-2
changelog:
  - Merge from F16:

      * Wed Mar 09 2011 Adam Jackson <ajax@redhat.com> 1.10.0-2
      - Disable filesystem caps in paranoia until module loading is audited

      * Fri Feb 25 2011 Peter Hutterer <peter.hutterer@redhat.com> 1.9.99.902-1
      - xserver 1.10.0
      - server-1.9-99.901-xkb-repeat-issues.patch: drop, merged
      - xserver-1.4.99-pic-libxf86config.patch: drop, see 60801ff8
      - xserver-1.6.99-default-modes.patch: drop, see dc498b4
      - xserver-1.7.1-multilib.patch: drop, see a16e282
      - ABI bumps: xinput to 12.2, extension to 5.0, video to 10.0


author: Adam Jackson <ajax@redhat.com> 1.10.0-4
changelog:
  - xserver-1.10-pointer-barriers.patch: Backport CRTC confinement from master
    and pointer barriers from the development tree for same.
  - xserver-1.10-vbe-malloc.patch: Fix a buffer overrun in the VBE code.


author: Adam Jackson <ajax@redhat.com> 1.10.0-7
changelog:
  - xserver-1.10-glx-pixmap-crash.patch, xserver-1.10-bg-none-revert.patch:
    bugfixes from xserver-next


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.99.1-2.20110418
changelog:
  - rebase all patches
  - xserver-1.10-vbe-malloc.patch: drop, d8caa782009abf4d
  - "git rm" all unused patches


author: Soren Sandmann <ssp@redhat.com> 1.10.99.1-3.20110418
changelog:
  - xserver-1.10-fix-trapezoids.patch: this patch is necessary to prevent
    trap corruption with pixman 0.21.8.


author: Hans de Goede <hdegoede@redhat.com> 1.10.99.1-4.20110418
changelog:
  - Drop xserver-1.9.0-qxl-fallback.patch, since the latest qxl driver
    supports both revision 1 and 2 qxl devices (#642153)


author: 1.10.99.1-5.20110511
changelog:
  - Today's server from git
  - xserver-1.10-fix-trapezoids.patch: drop, c6cb70be1ed7cf7
  - xserver-1.10-glx-pixmap-crash.patch: drop, 6a433b67ca15fd1
  - xserver-1.10-bg-none-revert.patch: drop, dc0cf7596782087


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.1-1.20111109
changelog:
  - Update to today's git snapshot
  - xserver-1.6.1-nouveau.patch: drop, upstream
  - xserver-1.10.99-config-add-udev-systemd-multi-seat-support.patch: drop,
    upstream
  - 0001-dix-block-signals-when-closing-all-devices.patch: drop, upstream


author: Adam Jackson <ajax@redhat.com> 1.11.99.1-9
changelog:
  - xserver-1.8-disable-vboxvideo.patch: Drop, should be fixed now
  - Drop vesamodes and extramodes, rhpxl is no more
  - Stop building libxf86config, pyxf86config will be gone soon


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-1.20120103
changelog:
  - Git snapshot 98cde254acb9b98337ddecf64c138d38c14ec2bf
  - xserver-1.11.99-optionstr.patch: drop
  - 0001-Xext-don-t-swap-CARD8-in-SProcSELinuxQueryVersion.patch: drop


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-2.20120103
changelog:
  - xserver-1.12-Xext-fix-selinux-build-failure.patch: fix build error
    triggered by Red Hat-specific patch to libselinux


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-4.20120124
changelog:
  - xserver-1.12-dix-reset-last.scroll-when-resetting-the-valuator-45.patch:
    reset last.scroll on the device whenever the slave device switched to
    avoid jumps during scrolling (#788632).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-6.20120124
changelog:
  - Fix installation of xserver-sdk-abi-requires script, if stable_abi is set
    always install the relese one, not the git one


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.0-1
changelog:
  - xserver 1.12
  - xserver-1.12-dix-reset-last.scroll-when-resetting-the-valuator-45.patch:
    drop, 6f2838818


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.1-1
changelog:
  - server 1.12.1
  - force autoreconf to avoid libtool errors
  - update patches for new indentation style.


author: Dave Airlie <airlied@redhat.com> 1.12.1-2
changelog:
  - xserver-fix-pci-slot-claims.patch: backport slot claiming fix from master
  - xserver-1.12-modesetting-fallback.patch: add modesetting to fallback list


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.2-4
changelog:
  - send keycode/event type down the wire when SlowKeys enable, otherwise
    GNOME won't warn about it (#816764)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.99.903-2
changelog:
  - xserver-1.12-os-print-newline-after-printing-display-name.patch: drop,
    014ad46f1b353a95e2c4289443ee857cfbabb3ae


author: Adam Jackson <ajax@redhat.com> 1.12.99.903-4
changelog:
  - Install xserver-sdk-abi-requires.release based on stable_abi not gitdate,
    so drivers built against a server that Provides multiple ABI versions will
    Require the stable version.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-9
changelog:
  - Fix server crash when a XI 1.x device grab is activated on a disabled
    synaptics touchpad is disabled


author: Adam Jackson <ajax@redhat.com>
changelog:
  - Drop -sdk Prov/Obs, changed to -devel in F9
  - Drop xorg-x11-X* Obsoletes, leftover from the modular transition in FC5


