# changelog

author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-176
changelog:
  - Allow chronyc_t domain to use user_ptys
  Resolves: rhbz#1470150
  - allow ptp4l to read /proc/net/unix file
  - Allow conmand to use usb ttys.
  Resolves: rhbz#1505121
  - Label all files /var/log/opensm.* as opensm_log_t because opensm creating new log files with name opensm-subnet.lst
  Resolves: rhbz#1505845
  - Allow chronyd daemon to execute chronyc.
  Resolves: rhbz#1508486
  - Allow firewalld exec ldconfig.
  Resolves: rhbz#1375576
  - Allow mozilla_plugin_t domain to dbus chat with devicekit
  Resolves: rhbz#1460477
  - Dontaudit leaked logwatch pipes
  Resolves: rhbz#1450119
  - Label /usr/bin/VGAuthService as vmtools_exec_t to confine this daemon.
  Resolves: rhbz#1507048
  - Allow httpd_t domain to execute hugetlbfs_t files
  Resolves: rhbz#1507682
  - Allow nfsd_t domain to read configfs_t files/dirs
  Resolves: rhbz#1439442
  - Hide all allow rules with ptrace inside deny_ptrace boolean
  Resolves: rhbz#1421075
  - Allow tgtd_t domain to read generic certs
  Resolves: rhbz#1438532
  - Allow ptp4l to send msgs via dgram socket to unprivileged user domains
  Resolves: rhbz#1429853
  - Allow dirsrv_snmp_t to use inherited user ptys and read system state
  Resolves: rhbz#1428568
  - Allow glusterd_t domain to create own tmpfs dirs/files
  Resolves: rhbz#1411310
  - Allow keepalived stream connect to snmp
  Resolves: rhbz#1401556
  - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
  Resolves: rhbz#1507089


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-177
changelog:
  - Allow jabber domains to connect to postgresql ports
  Resolves: rhbz#1438489
  - Dontaudit accountsd domain creating dirs in /root
  Resolves: rhbz#1456760 
  - Dontaudit slapd_t to block suspend system
  Resolves: rhbz: #1479759 
  - Allow spamc_t to stream connect to cyrus.
  Resolves: rhbz#1382955 
  - allow imapd to read /proc/net/unix file
  Resolves: rhbz#1393030 
  - Allow passenger to connect to mysqld_port_t
  Resolves: rhbz#1433464


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-178
changelog:
  - Add dependency for policycoreutils-2.5.18 becuase of new cgroup_seclabel policy capability
  Resolves: rhbz#1510145


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-179
changelog:
  - Allow ldap_t domain to manage also slapd_tmp_t lnk files
  Resolves: rhbz#1510883
  - Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
  Resolves: rhbz:#1508360
  - Add dac_read_search and dac_override capabilities to ganesha
  Resolves: rhbz#1483451


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-181
changelog:
  - Allow tomcat_t to manage pki_tomcat pid files
  Resolves: rhbz#1478371
  - networkmanager: allow talking to openvswitch
  Resolves: rhbz#1517247
  - Allow networkmanager_t and opensm_t to manage subned endports for IPoIB VLANs
  Resolves: rhbz#1517895
  - Allow domains networkmanager_t and opensm_t to control IPoIB VLANs
  Resolves: rhbz#1517744
  - Fix typo in guest interface file
  Resolves: rhbz#1468254
  - Allow isnsd_t domain to accept tcp connections.
  Resolves: rhbz#1390208


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-182
changelog:
  - Label /dev/drm_dp_aux* as xserver_misc_device_t
  Resolves: rhbz#1520897
  - Allow sysadm_t to run puppet_exec_t binaries as puppet_t
  Resolves: rhbz#1255745


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-184
changelog:
  - Allow chronyc_t domain to manage chronyd_keys_t files.
  Resolves: rhbz#1530525
  - Make virtlog_t domain system dbus client
  Resolves: rhbz#1481109
  - Update openvswitch SELinux module
  Resolves: rhbz#1482682
  - Allow virtd_t to create also sock_files with label virt_var_run_t
  Resolves: rhbz#1484075


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-185
changelog:
  - Allow vmtools_t domain creating vmware_log_t files
  Resolves: rhbz#1507048
  - Allow openvswitch_t domain to acces infiniband devices
  Resolves: rhbz#1532705


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-186
changelog:
  - Allow virt_domains to acces infiniband pkeys.
  Resolves: rhbz#1533183
  - Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
  Resolves: rhbz#1535133
  - Allow audisp_remote_t domain write to files on all levels
  Resolves: rhbz#1534924


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-187
changelog:
  - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
  Resolves: rhbz#1535196
  - Add new interface ppp_filetrans_named_content()
  Resolves: rhbz#1530601
  - Allow keepalived_t read sysctl_net_t files
  Resolves: rhbz#1477542
  - Allow puppetmaster_t domtran to puppetagent_t
  Resolves: rhbz#1376893
  - Allow kdump_t domain to read kernel ring buffer
  Resolves: rhbz#1540004
  - Allow ipsec_t domain to exec ifconfig_exec_t binaries.
  Resolves: rhbz#1539416
  - Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
  Resolves: rhbz#1530601
  - Allow updpwd_t domain to create files in /etc with shadow_t label
  Resolves: rhbz#1412838
  - Allow iptables sysctl load list support with SELinux enforced
  Resolves: rhbz#1535572


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-188
changelog:
  - Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
  Resolves: rhbz#1540702
  - Allow keepalived_t domain getattr proc filesystem
  Resolves: rhbz#1477542
  - Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
  Resolves: rhbz#1538544
  - Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
  Resolves: rhbz:#1539416
  - Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
  Resolves: rhbz#1479350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-189
changelog:
  - Allow dirsrv_t domain to create tmp link files
  Resolves: rhbz#1536011
  - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
  Resolves: rhbz#1428568
  - Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
  - Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
  Resolves: rhbz#1539416


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-190
changelog:
  - Allow openvswitch domain to manage svirt_tmp_t sock files
  Resolves: rhbz#1540702
  - Fix broken systemd_tmpfiles_run() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192
changelog:
  - Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
  Resolves: rhbz#1546721


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-193
changelog:
  - Backport several changes for snapperdfrom Fedora Rawhide
  Resolves: rhbz#1556798
  - Allow snapperd_t to set priority for kernel processes
  Resolves: rhbz#1556798
  - Make ganesha nfs server.
  Resolves: rhbz#1511489
  - Allow vxfs filesystem to use SELinux labels
  Resolves: rhbz#1482880
  - Add map permission to selinux-policy
  Resolves: rhbz#1460322


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-194
changelog:
  - Add new boolean redis_enable_notify()
  Resolves: rhbz#1421326
  - Label  /var/log/shibboleth-www(/.*) as httpd_sys_rw_content_t
  Resolves: rhbz#1549514
  - Add new label for vmtools scripts and label it as vmtools_unconfined_t stored in /etc/vmware-tools/
  Resolves: rbhz#1463593
  - Remove labeling for /etc/vmware-tools to bin_t it should be vmtools_unconfined_exec_t
  Resolves: rbhz#1463593


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-195
changelog:
  - Rename tang policy to tangd
  - Allow virtd_t domain to relabel virt_var_lib_t files 
  Resolves: rhbz#1558121
  - Allow logrotate_t domain to stop services via systemd
  Resolves: rhbz#1527522
  - Add tang policy
  Resolves: rhbz#1509055
  - Allow mozilla_plugin_t to create mozilla.pdf file in user homedir with label mozilla_home_t
  Resolves: rhbz#1559859
  - Improve snapperd SELinux policy
  Resolves: rhbz#1365555
  - Allow snapperd_t daemon to create unlabeled dirs.
  Resolves: rhbz#1365555
  - We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence
  Resolves: rhbz#1271324
  - Allow Openvswitch adding netdev bridge ovs 2.7.2.10 FDP
  Resolves: rhbz#1503835
  - Add new Boolean tomcat_use_execmem
  Resolves: rhbz#1565226
  - Allow domain transition from logrotate_t to chronyc_t
  Resolves: rhbz#1568281
  - Allow nfsd_t domain to read/write sysctl fs files
  Resolves: rhbz#1516593
  - Allow conman to read system state
  Resolves: rhbz#1377915
  - Allow lircd_t to exec shell and add capabilities dac_read_search and dac_override
  Resolves: rhbz#1550700
  - Allow usbmuxd to access /run/udev/data/+usb:*.
  Resolves: rhbz#1521054
  - Allow abrt_t domain to manage kdump crash files 
  Resolves: rhbz#1491585
  - Allow systemd to use virtio console
  Resolves: rhbz#1558121
  - Allow transition from sysadm role into mdadm_t domain.
  Resolves: rhbz#1551568
  - Label /dev/op_panel and /dev/opal-prd as opal_device_t
  Resolves: rhbz#1537618
  - Label /run/ebtables.lock as iptables_var_run_t
  Resolves: rhbz#1511437
  - Allow udev_t domain to manage udev_rules_t char files.
  Resolves: rhbz#1545094
  - Allow nsswitch_domain to read virt_var_lib_t files, because of libvirt NSS plugin.
  Resolves: rhbz#1567753
  - Fix filesystem inteface file, we don't have nsfs_fs_t type, just nsfs_t
  Resolves: rhbz#1547700
  - Allow iptables_t domain to create dirs in etc_t with system_conf_t labels


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-196
changelog:
  - Add dbus_stream_connect_system_dbusd() interface.
  - Allow pegasus_t domain to mount tracefs_t filesystem
  Resolves:rhbz#1374570
  - Allow psad_t domain to read all domains state
  Resolves: rhbz#1558439
  - Add net_raw capability to named_t domain BZ(1545586)
  - Allow tomcat_t domain to connect to mongod_t tcp port
  Resolves:rhbz#1539748
  - Allow dovecot and postfix to connect to systemd stream sockets
  Resolves: rhbz#1368642
  - Label /usr/libexec/bluetooth/obexd as bluetoothd_exec_t to run process as bluetooth_t
  Resolves:rhbz#1351750
  - Rename tang policy to tangd
  - Add interface systemd_rfkill_domtrans()
  - Allow users staff and sysadm to run wireshark on own domain
  Resolves:rhbz#1546362
  - Allow systemd-bootchart to create own tmpfs files
  Resolves:rhbz#1510412


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-197
changelog:
  - Improve procmail_domtrans() to allow mmaping procmail_exec_t
  - Allow hypervvssd_t domain to read fixed disk devices
  Resolves: rhbz#1581225
  - Improve modutils_domtrans_insmod() interface to mmap insmod_exec_t binaries
  Resolves: rhbz#1581551
  - Improve iptables_domtrans() interface to allow mmaping iptables_exec_t binary
  Resolves: rhbz#1581551
  - Improve auth_domtrans_login_programinterface to allow also mmap login_exec_t binaries
  Resolves: rhbz#1581551
  - Improve auth_domtrans_chk_passwd() interface to allow also mmaping chkpwd_exec_t binaries.
  Resolves: rhbz#1581551
  - Allow mmap dhcpc_exec_t binaries in sysnet_domtrans_dhcpc interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-199
changelog:
  - Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db  is turned on
  Resolves: rhbz:#1579219
  - Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
  Resolves: rhbz#1574418
  - Allow chrome_sandbox_t to mmap tmp files
  Resolves: rhbz#1574392
  - Allow ulogd_t to create netlink_netfilter sockets.
  Resolves: rhbz#1575924
  - Update ulogd SELinux security policy
  - Allow rhsmcertd_t domain send signull to apache processes
  Resolves: rhbz#1576555
  - Allow freeipmi domain to read sysfs_t files
  Resolves: rhbz#1575918
  - Allow smbcontrol_t to create dirs with samba_var_t label
  Resolves: rhbz#1574521
  - Allow swnserve_t domain to stream connect to sasl domain
  Resolves: rhbz#1574537
  - Fix typo in sysnetwork.if file
  Resolves: rhbz#1581551


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-202
changelog:
  - Update ctdb domain to support gNFS setup 
  Resolves: rhbz#1576818
  - Allow authconfig_t dbus chat with policykit
  Resolves: rhbz#1551241
  - Allow lircd_t domain to read passwd_file_t
  Resolves: rhbz:#1550700
  - Allow lircd_t domain to read system state
  Resolves: rhbz#1550700
  - Allow smbcontrol_t to mmap samba_var_t files and allow winbind create sockets BZ(1559795)
  Resolves: rhbz#1574521
  - Allow tangd_t domain read certs
  Resolves: rhbz#1509055
  - Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db  is turned on
  Resolves: rhbz:#1579219
  - Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
  Resolves: rhbz#1574418
  - Allow ctdb_t domain modify ctdb_exec_t files
  Resolves: rhbz#1572584
  - Allow chrome_sandbox_t to mmap tmp files
  Resolves: rhbz#1574392
  - Allow ulogd_t to create netlink_netfilter sockets.
  Resolves: rhbz#1575924
  - Update ulogd SELinux security policy
  - Allow rhsmcertd_t domain send signull to apache processes
  Resolves: rhbz#1576555
  - Allow freeipmi domain to read sysfs_t files
  Resolves: rhbz#1575918
  - Allow smbcontrol_t to create dirs with samba_var_t label
  Resolves: rhbz#1574521
  - Allow swnserve_t domain to stream connect to sasl domain
  Resolves: rhbz#1574537
  - Allow SELinux users (except guest and xguest) to using bluetooth sockets
  Resolves: rhbz#1557299
  - Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets
  Resolves: rhbz#1557299
  - Fix broken sysadm SELinux module
  Resolves: rhbz#1557311
  - Allow user_t and staff_t domains create netlink tcpdiag sockets
  Resolves: rhbz#1557281
  - Update ssh_domtrans_keygen interface to allow mmap ssh_keygen_exec_t binary file
  Resolves: rhbz#1583089
  - Allow systemd_networkd_t to read/write tun tap devices
  Resolves: rhbz#1583830
  - Add bridge_socket, dccp_socket, ib_socket and mpls_socket to socket_class_set
  Resolves: rhbz#1583771
  - Allow audisp_t domain to mmap audisp_exec_t binary
  Resolves: rhbz#1583551
  - Fix duplicates in sysadm.te file
  Resolves: rhbz#1307183
  - Allow sysadm_u use xdm
  Resolves: rhbz#1307183
  - Fix typo in sysnetwork.if file
  Resolves: rhbz#1581551


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-203
changelog:
  - /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
  - Allow dac override capability to mandb_t domain BZ(1529399)
  Resolves: rhbz#1423361
  - Allow inetd_child process to chat via dbus with abrt
  Resolves: rhbz#1428805
  - Allow zabbix_agent_t domain to connect to redis_port_t
  Resolves: rhbz#1418860
  - Allow rhsmcertd_t domain to read xenfs_t files
  Resolves: rhbz#1405870
  - Allow zabbix_agent_t to run zabbix scripts
  Resolves: rhbz#1380697
  - Allow rabbitmq_t domain to create own tmp files/dirs
  Resolves: rhbz#1546897
  - Allow policykit_t mmap policykit_auth_exec_t files
  Resolves: rhbz#1583082
  - Allow ipmievd_t domain to read general certs
  Resolves: rhbz#1514591
  - Add sys_ptrace capability to pcp_pmie_t domain
  - Allow squid domain to exec ldconfig
  Resolves: rhbz#1532017
  - Make working gpg agent in gpg_agent_t domain
  Resolves: rhbz#1535109
  - Update gpg SELinux policy module
  - Allow kexec to read kernel module files in /usr/lib/modules.
  Resolves: rhbz#1536690
  - Allow mailman_domain to read system network state
  Resolves: rhbz#1413510
  - Allow mailman_mail_t domain to search for apache configs
  Resolves: rhbz#1413510
  - Allow openvswitch_t domain to read neutron state and read/write fixed disk devices
  Resolves: rhbz#1499208
  - Allow antivirus_domain to read all domain system state
  Resolves: rhbz#1560986
  - Allow targetd_t domain to red gconf_home_t files/dirs
  Resolves: rhbz#1546671
  - Allow freeipmi domain to map sysfs_t files
  Resolves: rhbz#1575918
  - Label /usr/libexec/bluetooth/obexd as obexd_exec_t
  Resolves: rhbz#1351750
  - Update rhcs SELinux module
  Resolves: rhbz#1589257
  - Allow iscsid_t domain mmap kernel modules
  Resolves: rhbz#1589295
  - Allow iscsid_t domain mmap own tmp files
  Resolves: rhbz#1589295
  - Update iscsid_domtrans() interface to allow mmap iscsid_exec_t binary
  Resolves: rhbz#1589295
  - Update nscd_socket_use interface to allow caller domain also mmap nscd_var_run_t files.
  Resolves: rhbz#1589271
  - Allow nscd_t domain to mmap system_db_t files
  Resolves: rhbz#1589271
  - Add interface nagios_unconfined_signull()
  - Allow lircd_t domain read sssd public files Add setgid capability to lircd_t domain
  Resolves: rhbz#1550700
  - Add missing requires
  - Allow tomcat domain sends email
  Resolves: rhbz#1585184
  - Allow memcached_t domain nnp_transition becuase of systemd security features BZ(1514867)
  Resolves: rhbz#1585714
  - Allow kdump_t domain to map /boot files
  Resolves: rhbz#1588884
  - Fix typo in netutils policy
  - Allow confined users get AFS tokens
  Resolves: rhbz#1417671
  - Allow sysadm_t domain to chat via dbus
  Resolves: rhbz#1582146
  - Associate sysctl_kernel_t type with filesystem attribute
  - Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets
  Resolves: rhbz#1557299
  - Allow user_t and staff_t domains create netlink tcpdiag sockets
  Resolves: rhbz#1557281
  - Add interface dev_map_sysfs
  - Allow xdm_t domain to execute xdm_var_lib_t files
  Resolves: rhbz#1589139
  - Allow syslogd_t domain to send signull to nagios_unconfined_plugin_t
  Resolves: rhbz#1569344
  - Label /dev/vhost-vsock char device as vhost_device_t
  - Add files_map_boot_files() interface
  Resolves: rhbz#1588884
  - Update traceroute_t domain to allow create dccp sockets
  Resolves: rhbz#1548350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-204
changelog:
  - Fix typo in logwatch interface file
  - Allow spamd_t to manage logwatch_cache_t files/dirs
  - Allow dnsmasw_t domain to create own tmp files and manage mnt files
  - Allow fail2ban_client_t to inherit rlimit information from parent process
  Resolves: rhbz#1513100
  - Allow nscd_t to read kernel sysctls
  Resolves: rhbz#1512852
  - Label /var/log/conman.d as conman_log_t
  Resolves: rhbz#1538363
  - Add dac_override capability to tor_t domain
  Resolves: rhbz#1540711
  - Allow certmonger_t to readwrite to user_tmp_t dirs
  Resolves: rhbz#1543382
  - Allow abrt_upload_watch_t domain to read general certs
  Resolves: rhbz#1545098
  - Update postfix_domtrans_master() interface to allow caller domain also mmap postfix_master_exec_t binary
  Resolves: rhbz#1583087
  - Allow postfix_domain to mmap postfix_qmgr_exec_t binaries
  Resolves: rhbz#1583088
  - Allow postfix_domain to mmap postfix_pickup_exec_t binaries
  Resolves: rhbz#1583091
  - Allow chornyd_t read phc2sys_t shared memory
  Resolves: rhbz#1578883
  - Allow virt_qemu_ga_t read utmp
  Resolves: rhbz#1571202
  - Add several allow rules for pesign policy: Resolves: rhbz#1468744 - Allow pesign domain to read /dev/random - Allow pesign domain to create netlink_kobject_uevent_t sockets - Allow pesign domain create own tmp files
  - Add setgid and setuid capabilities to mysqlfd_safe_t domain
  Resolves: rhbz#1474440
  - Add tomcat_can_network_connect_db boolean
  Resolves: rhbz#1477948
  - Update virt_use_sanlock() boolean to read sanlock state
  Resolves: rhbz#1448799
  - Add sanlock_read_state() interface
  - Allow postfix_cleanup_t domain to stream connect to all milter sockets BZ(1436026)
  Resolves: rhbz#1563423
  - Update abrt_domtrans and abrt_exec() interfaces to allow caller domain to mmap binary file
  Resolves:rhbz#1583080
  - Update nscd_domtrans and nscd_exec interfaces to allow caller domain also mmap nscd binaries
  Resolves: rhbz#1583086
  - Update snapperd_domtrans() interface to allow caller domain to mmap snapperd_exec_t file
  Resolves: rhbz#1583802
  - Allow zoneminder_t to getattr of fs_t
  Resolves: rhbz#1585328
  - Fix denials during ipa-server-install process on F27+
  Resolves: rhbz#1586029
  - Allow ipa_dnskey_t to exec ipa_dnskey_exec_t files
  Resolves: rhbz#1586033
  - Allow rhsmcertd_t domain to send signull to postgresql_t domain
  Resolves: rhbz#1588119
  - Allow policykit_t domain to dbus chat with dhcpc_t
  Resolves: rhbz#1364513
  - Adding new boolean keepalived_connect_any()
  Resolves: rhbz#1443473
  - Allow amanda to create own amanda_tmpfs_t files
  Resolves: rhbz#1452444
  - Add amanda_tmpfs_t label. BZ(1243752)
  - Allow gdomap_t domain to connect to qdomap_port_t
  Resolves: rhbz#1551944
  - Fix typos in sge
  - Fix typo in openvswitch policy
  - /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
  - Allow sshd_keygen_t to execute plymouthd
  Resolves: rhbz#1583531
  - Update seutil_domtrans_setfiles() interface to allow caller domain to do mmap on setfiles_exec_t binary
  Resolves: rhbz#1583090
  - Allow systemd_networkd_t create and relabel tun sockets
  Resolves: rhbz#1583830
  - Allow map audisp_exec_t files fordomains executing this binary
  Resolves: rhbz#1586042
  - Add new interface postgresql_signull()
  - Add fs_read_xenfs_files() interface.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-205
changelog:
  - Allow abrt_watch_log_t domain to mmap binaries with label abrt_dump_oops_exec_t 
  Resolves: rhbz#1591191
  - Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
  Resolves: rhbz#1452595
  - Allow abrt_t domain to write to rhsmcertd pid files
  Resolves: rhbz#1492059
  - Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
  Resolves: rhbz#1463470
  - Add vhostmd_t domain to read/write to svirt images
  Resolves: rhbz#1465276
  - Dontaudit action when abrt-hook-ccpp is writing to nscd sockets
  Resolves: rhbz#1460715
  - Update openvswitch policy
  Resolves: rhbz#1594729
  - Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
  Resolves: rhbz#1583084
  - Allow sssd_t and slpad_t domains to mmap generic certs
  Resolves: rhbz#1592016
  Resolves: rhbz#1592019
  - Allow oddjob_t domain to mmap binary files as oddjob_mkhomedir_exec_t files
  Resolves: rhbz#1592022
  - Update dbus_system_domain() interface to allow system_dbusd_t domain to mmap binary file from second parameter
  Resolves: rhbz#1583080
  - Allow chronyc_t domain use inherited user ttys
  Resolves: rhbz#1593267
  - Allow stapserver_t domain to mmap own tmp files
  Resolves: rhbz#1593122
  - Allow sssd_t domain to mmap files labeled as sssd_selinux_manager_exec_t
  Resolves: rhbz#1592026
  - Update policy for ypserv_t domain
  Resolves: rhbz#1592032
  - Allow abrt_dump_oops_t domain to mmap all non security files
  Resolves: rhbz#1593728
  - Allow svirt_t domain mmap svirt_image_t files
  Resolves: rhbz#1592688
  - Allow virtlogd_t domain to write inhibit systemd pipes.
  Resolves: rhbz#1593740
  - Allow sysadm_t and staff_t domains to use sudo io logging
  Resolves: rhbz#1564470
  - Allow sysadm_t domain create sctp sockets
  Resolves: rhbz#1571591
  - Update mount_domtrans() interface to allow caller domain mmap mount_exec_t
  Resolves: rhbz#1592025
  - Allow dhcpc_t to mmap all binaries with label hostname_exec_t, ifconfig_exec_t and netutils_exec_t
  Resolves: rhbz#1594661


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-206
changelog:
  - Allow tangd_t domain to create tcp sockets
  Resolves: rhbz#1595775
  - Update postfix policy to allow postfix_master_t domain to mmap all postfix* binaries
  Resolves: rhbz#1595328
  - Allow amanda_t domain to have setgid capability
  Resolves: rhbz#1452444
  - Update usermanage_domtrans_useradd() to allow caller domain to mmap useradd_exec_t files
  Resolves: rhbz#1595667


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-207
changelog:
  - Update oddjob_domtrans_mkhomedir() interface to allow caller domain also mmap oddjob_mkhomedir_exec_t files
  Resolves: rhbz#1596306
  - Update rhcs_rw_cluster_tmpfs() interface to allow caller domain to mmap cluster_tmpfs_t files
  Resolves: rhbz#1589257
  - Allow radiusd_t domain to read network sysctls
  Resolves: rhbz#1516233
  - Allow chronyc_t domain to use nscd shm
  Resolves: rhbz#1596563
  - Label /var/lib/tomcats dir as tomcat_var_lib_t
  Resolves: rhbz#1596367
  - Allow lsmd_t domain to mmap lsmd_plugin_exec_t files
  Resolves: rhbz#bea0c8174
  - Label /usr/sbin/rhn_check-[0-9]+.[0-9]+ as rpm_exec_t
  Resolves: rhbz#1596509
  - Update seutil_exec_loadpolicy() interface to allow caller domain to mmap load_policy_exec_t files
  Resolves: rhbz#1596072
  - Allow xdm_t to read systemd hwdb
  Resolves: rhbz#1596720
  - Allow dhcpc_t domain to mmap files labeled as ping_exec_t
  Resolves: rhbz#1596065


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-208
changelog:
  - Dontaudit oracleasm_t domain to request sys_admin capability
  - Allow iscsid_t domain to load kernel module
  Resolves: rhbz#1589295
  - Update rhcs contexts to reflects the latest fenced changes
  - Allow httpd_t domain to rw user_tmp_t files
  Resolves: rhbz#1608355
  - /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t
  Resolves: rhbz#1521063
  - Allow tangd_t dac_read_search
  Resolves: rhbz#1607810
  - Allow glusterd_t domain to mmap user_tmp_t files
  - Allow mongodb_t domain to mmap own var_lib_t files
  Resolves: rhbz#1607729
  - Allow iscsid_t domain to mmap sysfs_t files
  Resolves: rhbz#1602508
  - Allow tomcat_domain to search cgroup dirs
  Resolves: rhbz#1600188
  - Allow httpd_t domain to mmap own cache files
  Resolves: rhbz#1603505
  - Allow cupsd_t domain to mmap cupsd_etc_t files
  Resolves: rhbz#1599694
  - Allow kadmind_t domain to mmap krb5kdc_principal_t
  Resolves: rhbz#1601004
  - Allow virtlogd_t domain to read virt_etc_t link files
  Resolves: rhbz#1598593
  - Allow dirsrv_t domain to read crack db
  Resolves: rhbz#1599726
  - Dontaudit pegasus_t to require sys_admin capability
  Resolves: rhbz#1374570
  - Allow mysqld_t domain to exec mysqld_exec_t binary files
  - Allow abrt_t odmain to read rhsmcertd lib files
  Resolves: rhbz#1601389
  - Allow winbind_t domain to request kernel module loads
  Resolves: rhbz#1599236
  - Allow gpsd_t domain to getsession and mmap own tmpfs files
  Resolves: rhbz#1598388
  - Allow smbd_t send to nmbd_t via dgram sockets BZ(1563791)
  Resolves: rhbz#1600157
  - Allow tomcat_domain to read cgroup_t files
  Resolves: rhbz#1601151
  - Allow varnishlog_t domain to mmap varnishd_var_lib_t files
  Resolves: rhbz#1600704
  - Allow dovecot_auth_t domain to manage also dovecot_var_run_t fifo files. BZ(1320415)
  Resolves: rhbz#1600692
  - Fix ntp SELinux module
  - Allow innd_t domain to mmap news_spool_t files
  Resolves: rhbz#1600591
  - Allow haproxy daemon to reexec itself. BZ(1447800)
  Resolves: rhbz#1600578
  - Label HOME_DIR/mozilla.pdf file as mozilla_home_t instead of user_home_t
  Resolves: rhbz#1559859
  - Allow pkcs_slotd_t domain to mmap own tmpfs files
  Resolves: rhbz#1600434
  - Allow fenced_t domain to reboot
  Resolves: rhbz#1293384
  - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
  Resolves: rhbz#1557299
  - Allow lircd to use nsswitch. BZ(1401375)
  - Allow targetd_t domain mmap lvm config files
  Resolves: rhbz#1546671
  - Allow amanda_t domain to read network system state
  Resolves: rhbz#1452444
  - Allow abrt_t domain to read rhsmcertd logs
  Resolves: rhbz#1492059
  - Allow application_domain_type also mmap inherited user temp files BZ(1552765)
  Resolves: rhbz#1608421
  - Allow ipsec_t domain to read l2tpd pid files
  Resolves: rhbz#1607994
  - Allow systemd_tmpfiles_t do mmap system db files
  - Improve domain_transition_pattern to allow mmap entrypoint bin file.
  Resolves: rhbz#1460322
  - Allow nsswitch_domain to mmap passwd_file_t files BZ(1518655)
  Resolves: rhbz#1600528
  - Dontaudit syslogd to watching top llevel dirs when imfile module is enabled
  Resolves: rhbz#1601928
  - Allow ipsec_t can exec ipsec_exec_t
  Resolves: rhbz#1600684
  - Allow netutils_t domain to mmap usmmon device
  Resolves: rhbz#1600586
  - Allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t BZ(1483655)
  - Allow userdomain sudo domains to use generic ptys
  Resolves: rhbz#1564470
  - Allow traceroute to create icmp packets
  Resolves: rhbz#1548350
  - Allow systemd domain to mmap lvm config files BZ(1594584)
  - Add new interface lvm_map_config
  - refpolicy: Update for kernel sctp support Resolves: rhbz#1597111 Add additional entries to support the kernel SCTP implementation introduced in kernel 4.16


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-209
changelog:
  - Allow sblim_sfcbd_t domain to mmap own tmpfs files
  Resolves: rhbz#1609384
  - Update logging_manage_all_logs() interface to allow caller domain map all logfiles
  Resolves: rhbz#1592028


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-211
changelog:
  - Allow innd_t domain to mmap own var_lib_t files
  Resolves: rhbz#1600591
  - Update screen_role_temaplate interface
  Resolves: rhbz#1384769
  - Allow cupsd_t to create cupsd_etc_t dirs
  Resolves: rhbz#1452595
  - Allow chronyd_t domain to mmap own tmpfs files
  Resolves: rhbz#1596563
  - Allow cyrus domain to mmap own var_lib_t and var_run files
  Resolves: rhbz#1610374
  - Allow sysadm_t domain to create rawip sockets
  Resolves: rhbz#1571591
  - Allow sysadm_t domain to listen on socket
  Resolves: rhbz#1557299
  - Update sudo_role_template() to allow caller domain also setattr generic ptys
  Resolves: rhbz#1564470
  - Allow netutils_t domain to create bluetooth sockets
  Resolves: rhbz#1600586


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-212
changelog:
  - Allow kpropd domain to exec itself
  Resolves: rhbz#1600705
  - Allow ipmievd_t to mmap kernel modules BZ(1552535)
  - Allow hsqldb_t domain to mmap own temp files
  Resolves: rhbz#1612143
  - Allow hsqldb_t domain to read cgroup files
  Resolves: rhbz#1612143
  - Allow rngd_t domain to read generic certs
  Resolves: rhbz#1612456
  - Allow innd_t domain to mmap own var_lib_t files
  Resolves: rhbz#1600591
  - Update screen_role_temaplate interface
  Resolves: rhbz#1384769
  - Allow cupsd_t to create cupsd_etc_t dirs
  Resolves: rhbz#1452595
  - Allow chronyd_t domain to mmap own tmpfs files
  Resolves: rhbz#1596563
  - Allow cyrus domain to mmap own var_lib_t and var_run files
  Resolves: rhbz#1610374
  - Allow sysadm_t domain to create rawip sockets
  Resolves: rhbz#1571591
  - Allow sysadm_t domain to listen on socket
  Resolves: rhbz#1557299
  - Update sudo_role_template() to allow caller domain also setattr generic ptys
  Resolves: rhbz#1564470
  - Allow netutils_t domain to create bluetooth sockets
  Resolves: rhbz#1600586


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-215
changelog:
  - Allow systemd_dbusd_t domain read/write to nvme devices
  Resolves: rhbz#1614236
  - Allow mysqld_safe_t do execute itself
  - Allow smbd_t domain to chat via dbus with avahi daemon
  Resolves: rhbz#1600157
  - cupsd_t domain will create /etc/cupsd/ppd as cupsd_etc_rw_t
  Resolves: rhbz#1452595
  - Allow amanda_t domain to getattr on tmpfs filesystem BZ(1527645)
  Resolves: rhbz#1452444
  - Update screen_role_template to allow caller domain to have screen_exec_t as entrypoint do new domain
  Resolves: rhbz#1384769
  - Add alias httpd__script_t to _script_t to make sepolicy generate working
  Resolves: rhbz#1271324
  - Allow kprop_t domain to read network state
  Resolves: rhbz#1600705
  - Allow sysadm_t domain to accept socket
  Resolves: rhbz#1557299
  - Allow sshd_t domain to mmap user_tmp_t files
  Resolves: rhbz#1613437


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-216
changelog:
  - Allow kdumpctl_t domain to manage kdumpctl_tmp_t fifo files
  Resolves: rhbz#1615342
  - Allow kdumpctl to write to files on all levels
  Resolves: rhbz#1615342
  - Fix typo in radius policy
  Resolves: rhbz#1619197
  - Allow httpd_t domain to mmap httpd_config_t files
  Resolves: rhbz#1615894
  - Add interface dbus_acquire_svc_system_dbusd()
  - Allow sanlock_t domain to connectto to unix_stream_socket
  Resolves: rhbz#1614965
  - Update nfsd_t policy because of ganesha features
  Resolves: rhbz#1511489
  - Allow conman to getattr devpts_t
  Resolves: rhbz#1377915
  - Allow tomcat_domain to connect to smtp ports
  Resolves: rhbz#1253502
  - Allow tomcat_t domain to mmap tomcat_var_lib_t files
  Resolves: rhbz#1618519
  - Allow slapd_t domain to mmap slapd_var_run_t files
  Resolves: rhbz#1615319
  - Allow nagios_t domain to mmap nagios_log_t files
  Resolves: rhbz#1618675
  - Allow nagios to exec itself and mmap nagios spool files BZ(1559683)
  - Allow nagios to mmap nagios config files BZ(1559683)
  - Allow kpropd_t domain to mmap krb5kdc_principal_t files
  Resolves: rhbz#1619252
  - Update syslogd policy to make working elasticsearch
  - Label tcp and udp ports 9200 as wap_wsp_port
  - Allow few domains to rw inherited kdumpctl tmp pipes
  Resolves: rhbz#1615342


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-218
changelog:
  - Allow kdumpctl_t domain to getattr fixed disk device in mls
  Resolves: rhbz#1615342
  - Allow initrc_domain to mmap all binaries labeled as systemprocess_entry
  Resolves: rhbz#1615342


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219
changelog:
  - Allow virtd_t domain to create netlink_socket
  - Allow rpm_t domain to write to audit
  - Allow rpm domain to mmap rpm_var_lib_t files
  Resolves: rhbz#1619785
  - Allow nagios_script_t domain to mmap nagios_etc_t files
  Resolves: rhbz#1620013
  - Update nscd_socket_use() to allow caller domain to stream connect to nscd_t
  Resolves: rhbz#1460715
  - Allow secadm_t domain to mmap audit config and log files
  - Allow insmod_t domain to read iptables pid files
  - Allow systemd to mounton /etc
  Resolves: rhbz#1619785


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220
changelog:
  - Allow nagios_script_t domain to mmap nagios_log_t files
  Resolves: rhbz#1620013
  - Allow nagios_script_t domain to mmap nagios_spool_t files
  Resolves: rhbz#1620013
  - Update userdom_security_admin() and userdom_security_admin_template() to allow use auditctl
  Resolves: rhbz#1622197
  - Update selinux_validate_context() interface to allow caller domain to mmap security_t files
  Resolves: rhbz#1622061


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-221
changelog:
  - Allow ovs-vswitchd labeled as openvswitch_t domain communicate with qemu-kvm via UNIX stream socket
  - Allow httpd_t domain to mmap tmp files
  Resolves: rhbz#1608355
  - Update dirsrv_read_share() interface to allow caller domain to mmap dirsrv_share_t files
  - Update dirsrvadmin_script_t policy to allow read httpd_tmp_t symlinks
  - Label /dev/tpmrm[0-9]* as tpm_device_t
  - Allow semanage_t domain mmap usr_t files
  Resolves: rhbz#1622607
  - Update dev_filetrans_all_named_dev() to allow create event22-30 character files with label event_device_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223
changelog:
  - Make working SELinux sandbox with Wayland.
  Resolves: rhbz#1624308
  - Allow svirt_t domain to mmap svirt_image_t block files
  Resolves: rhbz#1624224
  - Add caps dac_read_search and dav_override to pesign_t domain
  - Allow iscsid_t domain to mmap userio chr files
  Resolves: rhbz#1623589
  - Add boolean: domain_can_mmap_files.
  Resolves: rhbz#1460322
  - Add execute_no_trans permission to mmap_exec_file_perms pattern
  - Allow sudodomain to search caller domain proc info
  - Allow xdm_t domain to mmap and read cert_t files
  - Replace optional policy blocks to make dbus interfaces effective
  Resolves: rhbz#1624414
  - Add interface dev_map_userio_dev()


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224
changelog:
  - Allow tomcat Tomcat to delete a temporary file used when compiling class files for JSPs.
  Resolves: rhbz#1625678
  - Allow chronyd_t domain to read virt_var_lib_t files
  - Allow virtual machines to use dri devices. This allows use openCL GPU calculations. BZ(1337333)
  Resolves: rhbz#1625613
  - Allow tomcat services create link file in /tmp
  Resolves: rhbz#1624289
  - Add boolean: domain_can_mmap_files.
  Resolves: rhbz#1460322


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225
changelog:
  - Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
  Resolves: rhbz#1627114
  - Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
  Resolves: rhbz#1567753


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226
changelog:
  - Allow tomcat servers to manage usr_t files
  Resolves: rhbz#1625678
  - Dontaudit tomcat serves to append to /dev/random device
  Resolves: rhbz#1625678
  - Allow sys_nice capability to mysqld_t domain
  - Allow dirsrvadmin_script_t domain to read httpd tmp files
  Resolves: rhbz#1622602
  - Allow syslogd_t domain to manage cert_t files
  Resolves: rhbz#1615995


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227
changelog:
  - Add interface apache_read_tmp_dirs()
  - Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
  Resolves: rhbz#1622602


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-228
changelog:
  - Allow tomcat_domain to read /dev/random
  Resolves: rhbz#1631666
  - Allow neutron_t domain to use pam
  Resolves: rhbz#1630318


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.3
changelog:
  - Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.4
changelog:
  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1638427


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.5
changelog:
  - Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230
changelog:
  -Allow nova_t domain to use pam
  Resolves: rhbz:#1640528
  - sysstat: grant sysstat_t the search_dir_perms set
  Resolves: rhbz#1637416
  - Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
  Resolves: rhbz#1630318
  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1564470
  - Make ganesha policy active again
  Resolves: rhbz#1511489


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232
changelog:
  - Allow gssd_t domain to read/write kernel keyrings of every domain.
  Resolves: rhbz#1487350
  - Add interface domain_rw_all_domains_keyrings()
  Resolves: rhbz#1487350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-233
changelog:
  - Allow gssd_t domain to manage kernel keyrings of every domain.
  Resolves: rhbz#1487350
  - Add new interface domain_manage_all_domains_keyrings()
  Resolves: rhbz#1487350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-234
changelog:
  - Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t
  Resolves: rhbz#1623942
  - Allow svnserve_t domain to create in /tmp svn_0 file labeled as krb5_host_rcache_t
  Resolves: rhbz#1475271
  - Allow passwd_t domain chroot
  - Add miscfiles_filetrans_named_content_letsencrypt() to optional_block
  - Allow unconfined domains to create letsencrypt directory in /var/lib labeled as cert_t
  Resolves: rhbz#1447278
  - Allow staff_t user to systemctl iptables units.
  Resolves: rhbz#1360470


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-235
changelog:
  - Allow sandbox_xserver_t domain write to user_tmp_t files
  Resolves: rhbz#1646521
  - Allow virt_qemu_ga_t domain to read network state
  Resolves: rhbz#1630347
  - Bolt added d-bus API for force-powering the thunderbolt controller, so system-dbusd needs acces to boltd pipes
  Resolves: rhbz#1589086
  - Add boltd policy
  Resolves: rhbz#1589086
  - Allow virt domains to read/write cephfs filesystems
  Resolves: rhbz#1558836
  - Allow gpg_t to create own tmpfs dirs and sockets
  Resolves: rhbz#1535109
  - Allow gpg_agent_t to send msgs to syslog/journal
  Resolves: rhbz#1535109
  - Allow virtual machine to write to fixed_disk_device_t
  Resolves: rhbz#1499208
  - Update kdump_manage_crash() interface to allow also manage dirs by caller domain
  Resolves: rhbz#1491585
  - Add kpatch policy
  Resolves: rhbz#1602435
  - Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t
  Resolves: rhbz#1623942
  - Allow svnserve_t domain to create in /tmp svn_0 file labeled as krb5_host_rcache_t
  Resolves: rhbz#1475271
  - Allow systemd to mount boltd_var_run_t dirs
  Resolves: rhbz#1589086
  - Allow systemd to mounont boltd lib dirs
  Resolves: rhbz#1589086
  - Allow sysadm_t,staff_t and unconfined_t domain to execute kpatch as kpatch_t domain
  Resolves: rhbz#1602435
  - Allow passwd_t domain chroot
  - Add miscfiles_filetrans_named_content_letsencrypt() to optional_block
  - Allow unconfined domains to create letsencrypt directory in /var/lib labeled as cert_t
  Resolves: rhbz#1447278
  - Allow staff_t user to systemctl iptables units.
  Resolves: rhbz#1360470


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-236
changelog:
  - Update policy with multiple allow rules to make working installing VM in MLS policy
  Resolves: rhbz#1558121
  - Allow virt domain to use interited virtlogd domains fifo_file
  Resolves: rhbz#1558121
  - Allow chonyc_t domain to rw userdomain pipes
  Resolves: rhbz#1618757
  - Add file contexts in ganesha.fc file to label logging ganesha files properly.
  Resolves: rhbz#1628247


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-237
changelog:
  - Allow virtd_lxc_t domains use BPF
  Resolves: rhbz#1626115
  - F29 NetworkManager implements a new code for IPv4 address conflict detection (RFC 5227) based on n-acd [1], which uses eBPF to process ARP packets from the network.
  Resolves: rhbz#1626115
  - Allow unconfined user all perms under bpf class BZ(1565738
  Resolves: rhbz#1626115
  - Allow unconfined and sysadm users to use bpftool BZ(1591440)
  Resolves: rhbz#1626115
  - Allow systemd to manage bpf dirs/files
  Resolves: rhbz#1626115
  - Create new type bpf_t and label /sys/fs/bpf with this type
  Resolves:rhbz#1626115
  - Add new interface init_prog_run_bpf()
  Resolves:rhbz#1626115
  - add definition of bpf class and systemd perms
  Resolves: rhbz#1626115


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238
changelog:
  - Update redis_enable_notify() boolean to fix sending e-mail by redis when this boolean is turned on
  Resolves: rhbz#1646765


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239
changelog:
  - Allow sbd_t domain read/write all sysctls
  Resolves: rhbz#1671132
  - Allow kpatch_t domain to communicate with policykit_t domsin over dbus
  Resolves: rhbz#1602435
  - Allow boltd_t to stream connect to sytem dbus
  Resolves: rhbz#1589086
  - Update unconfined_dbus_send() interface to allow both direction communication over dbus with unconfined process.
  Resolves: rhbz#1589086


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-240
changelog:
  - named wants to access /proc/sys/net/ipv4/ip_local_port_range to get ehphemeral range.
  Resolves: rhbz#1683754
  - Allow sbd_t domain to bypass permission checks for sending signals
  Resolves: rhbz#1671132
  - Allow sbd_t domain read/write all sysctls
  Resolves: rhbz#1671132
  - Allow kpatch_t domain to communicate with policykit_t domsin over dbus
  Resolves: rhbz#1602435
  - Allow boltd_t to stream connect to sytem dbus
  Resolves: rhbz#1589086
  - Update userdom_admin_user_template() and init_prog_run_bpf() interfaces to make working bpftool for confined admin
  Resolves: rhbz#1626115
  - Update unconfined_dbus_send() interface to allow both direction communication over dbus with unconfined process.
  Resolves: rhbz#1589086


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-241
changelog:
  - Update vmtools policy Resolves: rhbz#1656814 Allow domain transition from vmtools_t to vmtools_unconfined_t when shell_exec_t is entrypoint.
  - Allow virt_qemu_ga_t domain to read udev_var_run_t files
  Resolves: rhbz#1663092
  - Update nagios_run_sudo boolean with few allow rules related to accessing sssd
  Resolves: rhbz#1653309
  - Allow nfsd_t to read nvme block devices BZ(1562554)
  Resolves: rhbz#1655493
  - Allow tangd_t domain to bind on tcp ports labeled as tangd_port_t
  Resolves: rhbz#1650909
  - Allow all domains to send dbus msgs to vmtools_unconfined_t processes
  Resolves: rhbz#1656814
  - Label /dev/pkey as crypt_device_t
  Resolves: rhbz#1623068
  - Allow sudodomains to write to systemd_logind_sessions_t pipes.
  Resolves: rhbz#1687452
  - Allow all user domains to read realmd_var_lib_t files and dirs to check if IPA is configured on the system
  Resolves: rhbz#1667962
  - Fixes: xenconsole does not start
  Resolves: rhbz#1601525
  - Label /usr/lib64/libcuda.so.XX.XX library as textrel_shlib_t.
  Resolves: rhbz#1636197
  - Create tangd_port_t with default label tcp/7406
  Resolves: rhbz#1650909


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246
changelog:
  - Allow ngaios to use chown capability
  Resolves: rhbz#1653309
  - Dontaudit gpg_domain to create netlink_audit sockets
  Resolves: rhbz#1535109
  - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
  Resolves: rhbz#1558836
  - Update domain_can_mmap_files() boolean to allow also mmap lnk files


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247
changelog:
  - Fix typo in gpg SELinux module
  - Update gpg policy to make ti working with confined users
  Resolves: rhbz#1535109
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  Resolves: rhbz#1653309
  - Allow nrpe_t domain to be dbus cliennt
  Resolves: rhbz#1653309
  - Add interface sssd_signull()
  Resolves: rhbz#1653309
  - Update userdomains to allow confined users to create gpg keys
  Resolves: rhbz#1535109


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253
changelog:
  - Label user cron spool file with user_cron_spool_t
  Resolves: rhbz#1727341
  - Allow svnserve_t domain to read system state
  Resolves: rhbz#1727458
  - Update svnserve_t policy to make working svnserve hooks
  Resolves: rhbz#1727458
  - Update gnome_role_template() template to allow sysadm_t confined user to login to xsession
  Resolves: rhbz#1727379
  - Update gnome_role_template() to allow _gkeyringd_t domains to chat with systemd_logind over dbus
  Resolves: rhbz#1727379
  - Allow userdomain gkeyringd domain to create stream socket with userdomain
  Resolves: rhbz#1727379
  - Allow cupsd_t to create lnk_files in /tmp. BZ(1401634)
  Resolves: rhbz#1719754
  - Allow mysqld_t domain to manage cluster pid files
  Resolves: rhbz#1715805
  - Relabel  /usr/sbin/virtlockd from virt_exec_t to virtlogd_exec_t.
  Resolves: rhbz#1714896
  - Allow systemd_hostnamed_t domain to dbus chat with sosreport_t domain
  Resolves: rhbz#1705599
  - Allow rhsmcertd_t domain to send signull to all domains
  Resolves: rhbz#1701338
  - Allow cloud_init_t domain to ccreate iptables files with correct SELinux label
  Resolves: rhbz#1699249
  - Allow dnsmasq_t domain to manage NetworkManager_var_lib_t files
  - Allow certmonger to geattr of filesystems BZ(1578755)
  - Update  tomcat_can_network_connect_db boolean to allow tomcat domains also connect to redis ports Resolves: rhbz#1687497
  - Allow lograte_t domain to manage collect_rw_content files and dirs
  Resolves: rhbz#1658319
  - Add interface collectd_manage_rw_content()
  - Allow glusterd_t domain to setpgid
  Resolves: rhbz#1653857
  - Allow sysadm_sudo_t to use SELinux tooling.
  Resolves: rhbz#1727341
  - Allow sysadm_t domain to create netlink selinux sockets
  Resolves: rhbz#1727379
  - Allow systemd_resolved_t to dbusd chat with NetworkManager_t
  Resolves: rhbz#1723877
  - Allow crack_t domain read /et/passwd files
  Resolves: rhbz#1721093
  - Allow sysadm_t domain to dbus chat with rtkit daemon
  Resolves: rhbz#1720546
  - Allow x_userdomains to nnp domain transition to thumb_t domain
  Resolves: rhbz#1712603
  - Dontaudit writing to user home dirs by gnome-keyring-daemon
  Resolves: rhbz#1703959
  - Update logging_send_audit_msgs(sudodomain() to control TTY auditing for netlink socket for audit service
  Resolves: rhbz#1699391
  - Allow systemd_tmpfiles_t domain to relabel from usermodehelper_t files
  Resolves: rhbz#1699063
  - Add interface kernel_relabelfrom_usermodehelper()


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254
changelog:
  - Rebuild selinux-policy build because of broken RHEL-7.8 buildrood
  during build of selinux-policy-3.13.1-253
  Resolves: rhbz#1727341


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256
changelog:
  - Allow cupsd_t domain to manage cupsd_tmp_t temp link files
  Resolves: rhbz#1719754
  - Allow svnserve_t domain to read /dev/random
  Resolves: rhbz#1727458
  - Update sudodomains to make working confined users run sudo/su
  Resolves: rhbz#1699391


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258
changelog:
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
  - Allow ganesha_t domain to read system network state and connect to cyphesis_port_t
  Resolves: rhbz#1653857
  - Label /var/log/collectd.log as collectd_log_t
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319
  - Update sbd policy to allow manage cgroups
  Resolves: rhbz#1715136
  - Allow sudo userdomain to run rpm related commands
  - Update rpm_run() interface to avoid duplicate role transition in sudo_role_template
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261
changelog:
  - Update sudo_role_template() to allow caller domain to read syslog pid files
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
  Resolves: rhbz#1765063


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-267
changelog:
  - Allow chronyd_t domain to exec shell
  Resolves: rhbz#1775573
  - Allow pmie daemon to send signal pcmd daemon
  Resolves: rhbz#1770123
  - Allow auditd poweroff or switch to single mode
  Resolves: rhbz#1780332


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268
changelog:
  - Allow rhsmd read process state of all domains and kernel threads
  Resolves: rhbz#1837461
  - Allow ipa-adtrust-install restart sssd and dirsrv services
  Resolves: rhbz#1820298
  - Allow nagios_plugin_domain execute programs in bin directories
  Resolves: rhbz#1824625
  - selinux policy: add the right context for org.freeipa.server.trust-enable-agent
  Related: rhbz#1820298


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - drop exitpanic patch (fixed upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-4
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-6
changelog:
  - sasl2 config moved from {_libdir}/sasl2 to {_sysconfdir}/sasl2
  - added libdb5 patch for building with libdb-5
  - rebuilt with libdb-5


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-8
changelog:
  - all 'define' changed to 'global' in spec
  - perl interpreter path fixup moved from 'install' to 'prep'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-10
changelog:
  - added stub man pages for hoststat and purgestat
  - rmail man page added to alternatives
  - updated subpackages description
  - sendmail-cf/cf/README is not packaged - it is useless for end users
  - added comments about purpose of files and patches
  - removed redundant license tag from milter subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-11
changelog:
  - README.libmilter moved to milter subpackage
  - updated description of doc subpackage
  - README.redhat removed (not needed any more)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-18
changelog:
  - add QoS support, patch from Philip Prindeville <philipp@fedoraproject.org>
    upstream reserved option ID 0xe7 for testing of this new feature (#576643)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-21
changelog:
  - fix negative ctx_id in milter debug output (#577558)
  - fix incomplete description of the -i option in man page (#676824)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-1
changelog:
  - New version 8.14.5
  - Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
    patches (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-4
changelog:
  - Removed dots from description (there are no dots in systemd packaging
    guidelines)
  - Changed service type to forking and explicitly specified PID files
  - Fixed creation of sm-client.pid
  - Added Wants to sm-client.service and sendmail.service
  - Replaced each occurrence of /var/run by /run in config files
  - More details are available in rhbz#697636


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-6
changelog:
  - Fixed systemctl disable command in preun section
  - Replaced reload by restart, dropped ExecReload from sendmail.service
    Resolves: rhbz#719931
  - Switched to systemctl in NetworkManager dispatcher script
  - Added ExecStartPre=-/etc/mail/make to sm-client.service
  - Hardcoded daemon option (-bd) to sendmail.service, dropped the DAEMON var
  - QUEUE var in /etc/sysconfig/sendmail replaced by SENDMAIL_OPTS var
  - Added default preset (-q1h) to SENDMAIL_OPTS var


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-7
changelog:
  - Hardened build with full relro
  - Provided SysV initscript in sysvinit subpackage for backward compatibility


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-9
changelog:
  - Enabled alternatives --initscript in post section
  - Improved sysvinit subpackage - switched to noarch, added scriptlets
  - Workarounded sm-client stop on SysV to systemd migration


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-6
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT
    Resolves: rhbz#1596725


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 3.3.7-24
changelog:
  - Revert setools current patch

  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Use selinux_current_policy_path to read by default policy


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1.1
changelog:
  - Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug
  - Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com
  - Remove at_console lines from policykit so cockpit can use dbus interfaces.
  - Fix handling of target paths that decode screws up
  - Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.25-1
changelog:
  - Extended DBUS API, see DBUS.md
  - get_alert() DBUS API extended with more parameters
  - sedispatch uses a timeout when collecting audit events (#1322771)
  - setroubleshoot: Ensure that dbus string param isn't null
  - Translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.26-1
changelog:
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - level = debug can be set separately for sealert_log and setroubleshootd_log
  - added new directive to setroubleshootd_log - log_full_report = True|False
  - added new methods to DBUS API:
    set_filter(), get_all_alerts_ignored(), delete_alert()
  - suggest my-<command>.pp modules instead of mypol.pp
  - setroubleshoot.conf cleanup
  - bug fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.28-1
changelog:
  - Fix sealert message for capability2
  - Spelling fixes
  - sealert - provide a better error message when SELinux is disabled (#1420084)
  - Fix report problem summary string (#1343397)
  - Update setroubleshootd.8 (#1348140)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Remove unused booleans.py file
  - src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
  - Check for the existence of setroubleshoot group separately (#1478118)
  - Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
  - Fix allowed_target_types (#1460642, #1460648)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-4
changelog:
  - Catch exceptions caused by lookup_signature (#1636369, #1627908)
  - Fix translation of hex values in AVCs (#1477236)


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds
  	- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
  	  and is the full path name of $SOURCE


author: <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Execute catchall_boolean.py before allow_daemons_use_tty
  	- Fix chcon lines to match current policy


author: <dwalsh@redhat.com> - 2.1.1-1
changelog:
  - Add first plugins which will launch Red Star
  - Add Thomas Liu change to allow restorecon to execute fixit button  
    *   2009-06-19 Dan Walsh <dwalsh@redhat.com>
  	- Add setenforce.py from Thomas Liu
  	- Add sys_module.py, mmap_zero.py, kernel_modules.py, selinuxpolicy.py
  	- Allow restorecon to execute fixit command


author: <dwalsh@redhat.com> - 3.0.3-1
changelog:
  - Update translations
  - Fix catchall plugin to give better messages on capabilities and process avcs


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.47-1
changelog:
  - Update translations
  - Fix sys_resource.py to mention all types of resources
  - Fix unicode calls so catchall_booleans.py does not crash sealert


author: Dan Walsh <dwalsh@redhat.com> - 3.0.48-1
changelog:
  - Fix connect_ports and bind_ports to specify semanage command if only 1 port is available rather then to suggest user choices
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 3.0.52-1
changelog:
  - Update Translations
  - Only translate catchall_boolean descritpions if the are not unicode to start with.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.53-1
changelog:
  - Update Translations
  - Add sandbox_connect plugin to point out the use of alternate types with the sandbox -X command.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.62-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended
  - Suggest to use ausearch instead of grep


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.67-1
changelog:
  - bind_ports: Do not use when there are no allowed_target_types (#1255627)
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Update translations


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - added %attr's
  - added sanity check for RPM_BUILD_ROOT
  - setserial is now installed into /bin, where util-linux puts it and all
    startup scripts expect it.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - pulled into distribution
  - used setserial-2.12_CTI.tgz instead of setserial-2.12.tar.gz (former is
    all that sunsite has) - not sure what the difference is.


author: Tim Waugh <twaugh@redhat.com> 2.17-5
changelog:
  - Fix init script (bug #52862).
  - Avoid temporary file vulnerability in init script.
  - Update README: it's --add, not -add.


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Erik Troan <ewt@redhat.com>
changelog:
  - removed /etc/inetd.conf, /etc/rpc
  - flagged /etc/securetty as missingok
  - fixed buildroot stuff in spec file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rename /etc/csh.cshrc to /etc/csh.login (#2931).
  - (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - split csh.login into csh.login and csh.cshrc (#various)
  - fix pop service names (#6206)
  - fix ipv6 protocols entries (#6219)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS
    support (postfix >= 20001030-2)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Clean up /etc/services, separating registered numbers from unregistered
    ("squatted") numbers, and adding some.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - overhaul /etc/protocols (#18530)
  - add port 587 to /etc/services (#25001)
  - add corbaloc (#19581)
  - don't set /usr/X11R6/bin in $PATH if it's already set (#19968)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.10-1
changelog:
  - Fix bugs #24159 and #30634 again; whoever moved bashrc from bash
    to setup used an old version. :((


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.15-1
changelog:
  - reorder /etc/services to match comments again
  - protocol 118 is stp, not st
  - update URLs in /etc/protocols and /etc/services


author: Bill Nottingham <notting@redhat.com>
changelog:
  - lock only needs to be a gid
  - don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318)


author: Nalin Dahyabhai <nalin@redhat.com> 2.5.7-1
changelog:
  - add entries to services (ipp, wnn4, and so on)
  - try to remove duplicates in services (remove nameserver as alias for domain,
    and readnews as alias for netnews)


author: Bill Nottingham <notting@redhat.com> 2.5.8-1
changelog:
  - add nologin to /etc/shells (#53963)
  - fix some quoting issues (#59627)
  - fix screen status line (#60596)
  - fix path regexps (#59624)
  - move profile.d stuff to csh.cshrc (#59946)


author: Jens Petersen <petersen@redhat.com> 2.5.16-1
changelog:
  - dont special case screen in /etc/bashrc, since it overrides the user's
    screenrc title setting (#60596)


author: Jens Petersen <petersen@redhat.com> 2.5.18-1
changelog:
  - bring back the screen case in /etc/bashrc, since /etc/screenrc no
    longer sets defhstatus (#60596, #60597)


author: Bill Nottingham <notting@redhat.com> 2.5.34-1
changelog:
  - add dict (#107807)
  - add cyrus services (#118832)
  - move delete-char binding for csh (#113682)
  - do the same path munging for csh as for bash (#57708)
  - add postfix aliases (#117661)
  - fix bashrc login shell check (#104491)
  - add odmr to services (#101098)
  - add distcc to services (#91535)
  - add xterm forware/backward word bindings (#80860)


author: Bill Nottingham <notting@redhat.com> 2.5.46-1
changelog:
  - add buildrequires on bash, tcsh (#161016)
  - move core dump size setting from csh.login to csh.cshrc (#156914)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug with PROMPT_COMMAND being broken for wierd dirs (#142125)
  - Added hfsplus to know filesystems (#172820)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.48-1
changelog:
  - Switched to the new large /etc/services file which fixes #112298, #133683,
    - Fixed pathmunge problem with bashrc (#123621)
  - Removed /usr/X11R6/bin from default PATH (#173856)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.49-1
changelog:
  - Really switch to new /etc/services file
  - Added /etc/fstab and /etc/mtab to ownership of setup (#177061)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-1
changelog:
  - Fixed tcsh behaviour for non login shells (#191233)
  - Fixed umask setting for tcsh to behave identical to bash logins (#199817)
  - Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.6-1
changelog:
  - Added another set of proposed changes to /etc/csh.cshrc (#199817)
  - Added missing documentation in /etc/hosts.[allow|deny] (#157053)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.11-1
changelog:
  - Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221)
  - Fixed xterm -title problem (#387581)
  - Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore
    (#381631, #429838)
  - Corrected missing shell for news user in uidgid and passwd


author: Phil Knirsch <pknirsch@redhat.com> 2.7.4-1
changelog:
  - Include new serviceslint for speedup (#465642)
  - Cleaned up services due to newly discovered bugs in it with new serviceslint


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-2
changelog:
  - again process profile.d scripts in noninteractive shells,
    but do not display stderr/stdout messages(#457243)
  - fix wrong prompt for csh/tcsh (#443854)
  - don't show error message about missing hostname in profile
    (#301481)
  - reserve rquotad port 875 in /etc/services (#455859)
  - export PATH after processing profile.d scripts (#449286)
  - assign gid's for audio (:63) and video (:39) group(#458843),
    assign uidgid pair (52:52) for puppet (#471918)
  - fix /etc/services duplicities to pass serviceslint


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-3
changelog:
  - update protocols to latest IANA list (2008-04-18)
  - update services to latest IANA list (2008-11-17)
  - mark /etc/protocols and /etc/inputrc %config(noreplace)
  - added URL, fixed few rpmlint warnings
  - do own audio and video group (#458843), create it in default
    /etc/group


author: Ondrej Vasik <ovasik@redhat.com> 2.7.5-2
changelog:
  - do not export PATH twice(#449286 NOTABUG revert)
  - do not export INPUTRC(to respect just created ~/.inputrc)
    (#443717)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.6-1
changelog:
  - make uidgid file better parsable (synchronize tabs)
  - reserve gid 11 for group cdrom (udev,MAKEDEV)
  - reserve gid 33 for group tape (udev,MAKEDEV)
  - reserve gid 87 for group dialout (udev,MAKEDEV)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-1
changelog:
  - synchronize /etc/services with latest IANA, do not use
    tabs in that file to have consistent output
  - fix indentation in /etc/profile and /etc/bashrc
    (#481074)
  - assign uid 36 for vdsm, gid 36 for kvm
    (#346151,#481021)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-2
changelog:
  - reserve 87 gid for polkituser (just uid was reserved),
    reserve 18 gid for dialout(to prevent conflicts with
    polkituser gid)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-4
changelog:
  - drop <lua> scriptlet completely(audio/video group
    temporarily created by packages which use it for
    updates(#477769))


author: Ondrej Vasik <ovasik@redhat.com> 2.8.1-1
changelog:
  - do ship/generate /etc/{shadow,gshadow} files(#483251)
  - do ship default /etc/hosts with setup (#483244)
  - activate multi on (required for IPv6 only localhost
    recognition out-of-the-box) (#486461)
  - added postun section for cleaning of dangerous .rpmnew
    files after updates
  - make profile and bashrc more portable (ksh, #487419)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.3-1
changelog:
  - do not disable coredumps in profile/csh.cshrc scripts,
    coredumps already disabled in rawhide's RLIMIT_CORE(#495035)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.4-1
changelog:
  - add oprofile (16:16) to uidgid
  - use os.remove instead of os.execute in lua post
    - no dependency on /bin/sh (thanks Panu Matilainen)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.5-1
changelog:
  - use history-search-backward/forward for pageup/pagedown
    mapping in inputrc (#500989)
  - add HISTCONTROL="ignoreboth" to /etc/profile to not include
    duplicities and lines starting with space into the history
    (#500819)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.7-1
changelog:
  - increase threshold for uidgid reservations to 200
  - reserve uidgid pair 107:107 for qemu (libvirt,#511957)
  - reflect threshold in profile and bashrc, do inform about
    uidgid file existence there
  - remove old remnants about portmap from hosts.deny(#509919)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.8-1
changelog:
  - change permissions on /etc/shadow and /etc/gshadow to 0000 and
    use capabilities for them(#517577)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.9-1
changelog:
  - reserve uidgid pair 108:108 for ovirt from libvirt (#513261)
  - reserve uidgid pair 111:111 for saned from sane-backends
    (#520634)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.11-1
changelog:
  - don't have HISTCONTROL ignorespace by default (#520632),
    but do not override it when it is already set
  - add csync alias for port 2005 / tcp, udp


author: Ondrej Vasik <ovasik@redhat.com> 2.8.15-1
changelog:
  - reserve uidgid pair 155:155 for stap-server(#555813)
  - reserve uidgid pair 113:113 for usbmuxd(#556525)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.16-1
changelog:
  - drop X11R6 hierarchy dir from tcsh path (#576940)
  - update services to latest IANA
  - update protocols to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.17-1
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.18-1
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.22-1
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi


author: Ondrej Vasik <ovasik@redhat.com> 2.8.24-1
changelog:
  - do show messages from profile.d scripts in interactive
    login ksh shell(#616418)
  - respect umask settings even with login shell


author: Ondrej Vasik <ovasik@redhat.com> 2.8.28-1
changelog:
  - update services and protocols to latest IANA reservations
  - reserve uidgid pair 109:109 for rhevm(#652287)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.29-1
changelog:
  - run newaliases in the post to prevent sendmail messages
    about old alias database in the log(#658921)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.32-1
changelog:
  - do not override already set PROMPT_COMMAND envvar(#691425)
  - do not quit uidgidlint after first error, show all
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.33-1
changelog:
  - reflect the reserved username change of amanda
    to amandabackup (#700807)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703049)
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.38-1
changelog:
  - reserve 160:160 for swift (openstack-swift) - #732442
  - reserve 161:161 for glance (openstack-glance) - #732442
  - reserve 162:162 for nova (openstack-nova) - #732442
  - comment out 0/tcp spr-itunes /etc/services entry (#710185)
  - add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.43-1
changelog:
  - gopher home dir in uidgid should be /var/gopher - #752885
  - reserve 163:163 for keystone (openstack-keystone) - #752842
  - reserve 164:164 for quantum (openstack-quantum) - #752842
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.45-1
changelog:
  - reserve :156 groupid for stapusr - #756807
  - reserve :157 groupid for stapsys - #756807
  - reserve :158 groupid for stapdev - #756807


author: Ondrej Vasik <ovasik@redhat.com> 2.8.48-1
changelog:
  - remove /bin and /sbin from /etc/profile(#789616)
  - require usrmove
  - add sbin paths in csh.login consistently with bash(#773268)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.51-1
changelog:
  - do not throw away the stderr output of profile.d scripts
    in noninteractive bash/ksh sessions(#805507)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.66-1
changelog:
  - assign :190 gid for systemd-journal (#918120)
  - assign 191:191 uidgid pair for systemd-journal-gateway (#918120)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-10
changelog:
  - fix crudp name in /etc/protocols (#1566469)
  - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells
    (#1571104)


author: Nalin Dahyabhai <nalin@redhat.com> 1.14-1
changelog:
  - use control files to find things so that the source needn't be
    revised so often
  - determine available translations at build-time (#102082)


author: Nalin Dahyabhai <nalin@redhat.com> 1.15-1
changelog:
  - prefer system-config-keyboard to kbdconfig (#122575)
  - handle tools which require command-line arguments correctly


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.2-1
changelog:
  - clean up a compiler warning
  - add a new config file so that the system-config-authentication-tui
    shows up in the menu now that it's been moved


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.3-1
changelog:
  - update PAM configuration to use "include" directive (#170265)
  - conflict with versions of the pam package (< 0.78) which don't
    support the "include" directive


author: Nalin Dahyabhai <nalin@redhat.com> 1.18-1
changelog:
  - fix sorting of multiple options so that precedence is determined
    correctly (#178022)
  - prefer authconfig-tui to authconfig, because if we have both, then
    authconfig is just a command-line app  (#178022)
  - actually include the README


author: Nalin Dahyabhai <nalin@redhat.com> 1.19-1
changelog:
  - fix crashers in cases when we find no configuration files (or malformed or
    useless ones) under %{_sysconfdir}/setuptool.d (#211084)


author: Nalin Dahyabhai <nalin@redhat.com> 1.19.4-1
changelog:
  - drop system-config-printer-tui from the list of things we search for as
    an option for printer configuration (#377401)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: Tomas Bzatek <tbzatek@redhat.com> 1:1.37-19
changelog:
  - Reorder 59-fc-wwpn-id.rules to run after 60-persistent-storage.rules (#1785303)
  - Fix the 59-fc-wwpn-id.rules syntax (#1750417)
  - Add 59-fc-wwpn-id.rules (#1684302)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Install by hand (man/en/...).  Use %{_mandir}.
  - Use %{_tmppath}.
  - Make install-catalog fail silently if given the old syntax.
  - Add CHANGES file.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-1
changelog:
  - 0.6.3.  Incorporates oldsyntax and quiet patches.
  - Make /etc/sgml/sgml.conf noreplace.
  - Own /etc/sgml, various other directories (bug #47485, bug #54180).


author: Tim Waugh <twaugh@redhat.com> 0.6.3-6
changelog:
  - Don't create a useless empty catalog.
  - Don't try to put install things outside the build root.
  - Build requires a libxml2 that actually works.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-8
changelog:
  - Back to /usr/share/sgml.  Now install docbook-dtds.
  - Use a real install-sh, not the symlink shipped in the tarball.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-15
changelog:
  - Patch from Ville Skyttä <ville.skytta@iki.fi> (bug #111625):
    - Include /usr/share/xml in xml-common.
    - Own /usr/share/sgml and /usr/share/xml.


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-22
changelog:
  - Merge Review(226415)
  - changed: License Tag, using RPM macros instead of hardcoded
    dirs, summary ended with dot, added URL, removed CHANGES
    file as obsolete, preserved timestamps and some other cosmetic
    changes
  - no longer shipping old automake tarball, fixed issue with man8_DATA,
    BuildRequire:Automake,Autoconf again(see MergeReview discussion)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch for XOPEN oddities in glibc headers
  - check for ut_user before checking for ut_name -- this works around some
    confusion on glibc 2.1 due to the utmpx header not defining the ut_name
    compatibility stuff. I used a gross sed hack here because I couldn't make
    automake work properly on the sparc (this could be a glibc 2.0.99 problem
    though). The utuser patch works fine, but I don't apply it.
  - sleep after running autoconf


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the spec file
  - updated the patch so that new accounts created on shadowed system won't
    confuse pam_pwdb anymore ('!!' default password instead on '!')
  - fixed a bug that made useradd -G segfault
  - the check for the ut_user is now patched into configure


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Note that /usr/sbin/mkpasswd conflicts with /usr/bin/mkpasswd;
    one of these (I think /usr/sbin/mkpasswd but other opinions are valid)
    should probably be renamed.  In any case, mkpasswd.8 from this package
    needs to be installed. (problem #823)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - have userdel remove user private groups when it is safe to do so
  - allow -f to force user removal even when user appears busy in utmp


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - Serial: 1 because now we are using 19990827 (why the heck can't they have
    a normal version just like everybody else?!)
  - ported all patches to the new code base


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix usermod patch to check for shadow before doing any shadow-specific stuff
    and merge it into the pwlock patch


author: Matt Wilson <msw@redhat.com>
changelog:
  - use mandir for FHS
  - added patches in src/ and po/ to honor DESTDIR
  - use make install DESTDIR=$RPM_BUILD_ROOT


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change symlinked man pages to includers
  - require /usr/bin/newgrp (util-linux) so that /usr/bin/sg isn't left dangling


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove a fixed-size buffer that caused problems when adding a huge number
    of users to a group (>8192 bytes) (Bugs #3809, #11930)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - take LOG_CONS out of the openlog() call so that we don't litter the
    screen during text-mode upgrades


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't overwrite user dot files in useradd (#19982)
  - truncate new files when moving overwriting files with the contents of other
    files while moving directories (keeps files from looking weird later on)
  - configure using %{_prefix} as the prefix


author: Bernhard Rosenkraenzer <bero@redhat.com> 20000902-1
changelog:
  - Create an empty mailspool when creating a user so non-setuid/non-setgid
    MDAs (postfix+procmail) can deliver mail (#41811)
  - 20000902
  - adapt patches


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-4
changelog:
  - use -O0 instead of -O on ia64
  - build in source directory
  - don't leave lock files on the filesystem when useradd creates a group for
    the user (#50269)
  - fix the -o option to check for duplicate UIDs instead of login names (#52187)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-12
changelog:
  - force .mo files to be regenerated with current gettext to flush out possible
    problems
  - fixup non-portable encodings in translations
  - make sv translation header non-fuzzy so that it will be included (#71281)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-13
changelog:
  - prevent libshadow from being built more than once, to keep automake happy
  - change how md5 and md5crypt are enabled, to keep autoconf happy
  - remove unpackaged files after %install


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-6
changelog:
  - adjust mailspool patch to complain if no group named "mail" exists, even
    though that should never happen


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-14
changelog:
  - lastlog: don't pass a possibly-smaller field to localtime (#109648)
  - configure: call AC_SYS_LARGEFILE to get large file support


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-15
changelog:
  - don't convert man pages to UTF-8 for RHEL 3, conditionalized using macro
  - fixup dangling man page references


author: Dan Walsh <dwalsh@redhat.com> 4.0.3-23
changelog:
  - Add get_enforce checks
  - Clean up patch for potential upstream submission
  - Add removemalloc patch to get it to build on 3.4


author: Adrian Havill <havill@redhat.com> 2:4.0.3-31
changelog:
  - check for non-standard legacy place for ncsd HUP (/var/run/nscd.pid) and
    then the std FHS place (/var/run/nscd.pid) (#125421)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-33
changelog:
  - allow for mixed case and dots in usernames (#135401)
  - all man pages to UTF-8, not just Japanese (#133883)
  - add Polish blurb for useradd -n man page option (#82177)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-35
changelog:
  - make the limit for the group name the same as the username (determined
    by the header files, rather than a constant) (#56850)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-4
changelog:
  - use newgrp binary
  - newgrp don't ask for password if user's default GID = group ID,
    ask for password if there is some in /etc/gshadow
    and in /etc/group is 'x' (#149997)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-5
changelog:
  - fix memory leak, and CPU spinning when grp_update() and
    duplicate group entries in /etc/group (#151484)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2
changelog:
  - improve audit logging (#211659)
  - improve "-l" option. Do not reset faillog if it's used (#213450).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8
changelog:
  - groupmems: check username for valid character (#455603)
  - groupmems: don't segfault on nonexistent group (#456088)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11
changelog:
  - fix license tag (#226416)
  - get rid of tabs in spec file (#226416)
  - convert HOWTO to UTF8 (#226416)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-9
changelog:
  - fix gshadow functions from shadow utils
  - make shadow utils use gshadow functions from glibc
    Resolves: #665780


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - do not use  gshadow functions from glibc, there is a bug
    in glibc sgetsgent(#674361)
    Resolves: #674234


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-11
changelog:
  - useradd man page (-m option)
  - create home directory on fs with noacl
  - remove faillog app (pam_tally.so is no longer shipped)
    Resolves: #523265, #622320


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-5
changelog:
  - userdel option to remove Linux login <-> SELinux login mapping (#639900)
  - useradd special exit value if SELinux user mapping is invalid (#639975)
  - usermod special exit value if SELinux user mapping is invalid (#639976)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-6
changelog:
  - report error to stdout when SELinux context for home directory
    cannot be determined (#973647)
  - audit the changing home directory owner (#885797)
  - do not set the default SELinux MLS range (#852676)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-8
changelog:
  - slightly more meaningful error messages if crypt() returns NULL (#988184)
  - explicit suid permissions


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - rebase to current upstream release to bring newuidmap and newgidmap
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
  - ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: David Zeuthen <davidz@redhat.com> - 0.16-2
changelog:
  - Make Evince the default for application/pdf and application/postscript
  - Remove remaining references to gnome-ggv (application/x-gzpostscript and
    image/x-eps) as this is no longer in the distribution


author: Dan Williams <dcbw@redhat.com> - 0.16-3
changelog:
  - Update OpenOffice.org desktop file names. #155353
  - WordPerfect default now OOo Writer, since Abiword is in Extras


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-2
changelog:
  - Don't say that webcal files are handled by evolution-2.0, it can't
  - Disable vCard mapping as well, as evolution doesn't handle it
    (See http://bugzilla.gnome.org/show_bug.cgi?id=309073)


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-5
changelog:
  - Remove Totem as the default music/movie player, it will be the
    default for movies, as only it handles them, and Rhythmbox can
    handle missing plugins now


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-5
changelog:
  - Make Totem the default for the mime-types it handles (#366101)
  - And make sure Rhythmbox is the second default only for the mime-types
    it handles


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Colin Walters <walters@verbum.org> - 0.71-3
changelog:
  - Requires(pre) on glib, since update-mime-database uses it
  - Remove /dev/null redirection, we should see future errors
    And really, RPM is dumb here - this stuff needs to go to
    log files.


author: Colin Walters <walters@verbum.org> - 0.71-4
changelog:
  - Fix previous change to be Requires(post); spotted by
    Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Bastien Nocera <bnocera@redhat.com> 0.90-2
changelog:
  - Update list of defaults, adding new mime-types for Totem,
    as well as scheme handlers, and install defaults for
    Evolution and Firefox


author: Bastien Nocera <bnocera@redhat.com> 0.90-4
changelog:
  - Update defaults.list and update for newer desktop names,
    with help from Edward Sheldrake (#659457)


author: Bastien Nocera <bnocera@redhat.com> 0.91-3
changelog:
  - Make shotwell the default for camera roll handling
  - Make shotwell-viewer the default image viewer (for the
    image types it handles)
  - Prefer Rhythmbox to Totem for music files


author: Matthias Clasen <mclasen@redhat.com> - 1.0-2
changelog:
  - Own/%ghost files generated by update-mime-database from
    freedesktop.org.xml (patch by Ville Skyttä, #716451))


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Donnie Barnes <djb@redhat.com>
changelog:
  - ALRIGHT!  Woo-hoo!  Erik already did the install-info stuff!
  - added BuildRoot
  - spec file cleanups


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Peter Jones <pjones@redhat.com> - 0.3-2
changelog:
  - Require gnu-efi-3.0q for now.
  - Don't allow mmx or sse during compilation.
  - Re-organize this so all real signing happens in shim-signed instead.
  - Split out mokutil


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build -8 for arm as well.
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.  Again.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.
    Again, but without breaking aarch64 this time.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Fix a couple more things that are breaking reproducability, and thus
    breaking external review.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-6
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8.el7
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1862045
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Adam Williamson <awilliam@redhat.com> 0.12.0-1.20111110git163bf4a114
changelog:
  - bump to current git to get vala 0.14 support for rawhide, GTK+ 3 port
  - adjust dependencies for vala, gtk, gsettings
  - adjust for gsettings port


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.12.0-1.20111117gitcf087489ea
changelog:
  - Bump to current git to fix build against LibRaw
  - LibRaw now has a dynamic library and shotwell is using it


author: Jindrich Novy <jnovy@redhat.com> - 0.12.3-5
changelog:
  - add patch to fix build against libgphoto2-2.5.0, thanks to Clinton Rogers
    (http://redmine.yorba.org/issues/5553)


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.13.0-1
changelog:
  - Update to 0.13.0.
  - Remove patches applied upstream.
  - Add BR on json-glib.
  - Add runtime dependency on dconf.


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-7
changelog:
  - Use new archive from upstream at same location (which is lowercase now)
  - Remove dubious Provides: (RHBZ#563395)


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
  - Fix Obsolete: that was wrong when renaming the package.
  - The font base folder was listed twice (one was hidden in the font macro)


author: Minto Joseph <mvaliyav at redhat.com> - 2.4-4
changelog:
  - Cleaned up the spec file as per new font packaging guidelines
  - Replaced padauk-src.ttf and padaukbold-src.ttf with Padauk.ttf and Padauk-Bold.ttf [490583]
  - Renamed the package to sil-padauk-fonts


author: David Malcolm <dmalcolm@redhat.com> - 4.10.2-2
changelog:
  - enable "with_python3" in the build
  - use py3dir throughout, as provided by python3-devel
  - name the python 3 sip binary "python3-sip"
  - fix a typo in the name of the data dir: python-3sip -> python3-sip
  - split out macros.sip into a new subpackage


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.3-1
changelog:
  - Update to latest upstream 2.2.3 (#683795)
  - Add forge-parent to Requires
  - Rework spec to be more simple, update patches


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-6
changelog:
  - Add ASM dependency only to a single module, not all of them
  - Disable animal-sniffer plugin
  - Don't generate auto-requires for optional dependencies


author: Michal Srb <msrb@redhat.com> - 2.3.0-7
changelog:
  - sisu-inject-bean: add dependency on asm
  - Fix dependencies on javax.inject and javax.enterprise.inject
  - Remove bundled JARs and .class files from tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-8
changelog:
  - Remove unneeded animal-sniffer BuildRequires
  - Add forge-parent to BuildRequires to ensure it's present


author: Jens Petersen <petersen@redhat.com> 20020220-1
changelog:
  - update to latest dictionaries
  - put source in one bzip2ed tar file
  - tidy spec file
  - make unannotated
  - include SKK-JISYO.pubdic+


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-5
changelog:
  - backport correction to the default settings for hosts.byname and
    hosts.byaddr NIS maps, so that their data items start with the host's
    address rather than a name (#1090948)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for IDM's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1273587
  - fix processing of ID views
  - Resolves: #1277576, #1265465


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-1
changelog:
  - New upstream release:
    - support updating passwords for the users from the primary tree
    - populate map cache in a separate thread to avoid blocking the DS
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
changelog:
  - Fix reported coverity issues
  - Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
  - Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
  - Resolves: rhbz#1830894 Memory leak during search of idview overrides


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-2
changelog:
  - Spec file cleanup by Robert Scheck <redhat@linuxnetz.de> (#170959)
  - manual release numbering
  - remove bogus patch of non-installed file
  - only non-removable drives should be added to smartd.conf
  - smartd.conf should be owned (#171498)


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-3
changelog:
  - add libata disks with -d ata if the libata version
    is new enough otherwise do not add them (#145859, #174095)


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-5
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-3
changelog:
  - fix #241385 - smartmontools missing dependency on mailx
  - fix #241388 - unneeded smartd-conf.py[co] installed in /usr/sbin


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-4
changelog:
  - fix #241389 - smartd-conf.py pulls in a big dependency chain, so
    build a separate config package


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-5
changelog:
  - add support for 24 disks on 3ware RAID controllers (related #252055)
  - fix #245442 - add %{arm} to smartmontools's set of build archs
  - update license tag


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-6
changelog:
  - fix #271741 - smartd-conf.py should allow customization of parameters
  - fix #253753 - service starting by default, perhaps shouldn't
  - update initscript (related #247058 - initscript review)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
  - smartmontools updated to 6.5
  - adds support for NVMe devices (#1369731)
  - minor spec cleanup (#1463148)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.0-1
changelog:
  - smartmontools updated to 7.0 (#1588532)
  - fixed detection of Device Statistics log with 256 sectors (#1590190)


author: Pravin Satpute <psatpute@redhat.com> 04-2
changelog:
  - done changes in spec file as suggested in review request
  - changed variable name from xfontdir to fontdir


author: Pravin Satpute <psatpute@redhat.com> 04-3
changelog:
  - defattr now comes after files
  - s/malayalam/Malayalam in description
  - removed '-fonts' from fontdir variable value


author: Pravin Satpute <psatpute@redhat.com> 04-4
changelog:
  - added comment about sharing directory in spec file
  - fontdir will be 'smc' only instead of 'smc-fonts' earlier


author: Pravin Satpute <psatpute@redhat.com> 04.1-1
changelog:
  - new upstream release
  - fontconfig rule for size adjustment of Meera is added
  - two new fonts kalyani and anjalioldlipi
  - bugfix 448078


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 04.1-4
changelog:
  - change descriptions
  - fix bug in kalyani font's obsoleting version number
  - move _font_pkg macros next to corresponding packages


author: Naveen Kumar <nkumar@redhat.com> - 04.2.9
changelog:
  - oops! forgot to rename 66-smc-meera.conf to 65-0-smc-meera.conf in INSTALL in spec file
  - oops! forgot to remove 66-smc-meera.conf
  - resolves Bug #586288


author: Naveen Kumar <nkumar@redhat.com> - 4.4.1
changelog:
  - new release from upstream
  - changes in spec file to incorporate new build from sfd source
  - remove patch bug-523454.patch
  - reolves bug #586283
  - reolves bug #586286


author: Naveen Kumar <nkumar@redhat.com> - 4.4.2
changelog:
  - apply patch smc-fonts_616324.patch created from Pravin S' src Modification 
  - resolves bug #616324


author: Naveen Kumar <nkumar@redhat.com> - 4.4.4
changelog:
  - rectify error to directly install fonts in fontdir instead of subdir in fontdir
  - Resolves bug #653608


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Mo Morsi <mmorsi@redhat.com> - 1.9-1
changelog:
  - Update to latest upstream release
  - patch2, patch3 no longer needed
  - update to latest fedora java guidelines


author: Michal Srb <msrb@redhat.com> - 1.11-5
changelog:
  - Replace bundled base64 implementation
  - Replace bundled gdata-java-client classes with apache-commons-codec


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.0-2
changelog:
  - replaced $CXXFLAGS with %{optflags} in %build section
  - removed empty %doc entry from %files devel


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.0-3
changelog:
  - Resolves: rhbz#1507409 ObjectStore.cpp(59): Failed to enumerate object store in /var/lib/softhsm/tokens/
  - Resolves: rhbz#1540010 gnome-settings-daemon: gnome-settings-daemon killed by SIGSEGV


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.95.0-1
changelog:
  - update to 1.95.0 (Soprano 2 beta 2)
  - new BRs clucene-core-devel, raptor-devel >= 1.4.15
  - now need redland-devel >= 1.0.6
  - add patch to find CLucene (clucene-config.h is moved in the Fedora package)
  - new Requires: pkg-config for -devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 2.0.3-2
changelog:
  - build apidocs and put them into an -apidocs subpackage (can be turned off)
  - BR doxygen and qt4-doc when building apidocs


author: Rex Dieter <rdieter@fedoraproject.org> - 2.2.3-2
changelog:
  - %files: drop ownership of %_datadir/dbus-1.0/interfaces (#334681)
  - %files: track shlib sonames
  - make -apidocs noarch


author: Rex Dieter <rdieter@fedoraproject.org> - 2.4.0-1
changelog:
  - soprano-2.4.0
  - %build: explictly %{_cmake_skip_rpath}, need to poke on cmake to see why 
    %{_libdir} is getting rpath'd here


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-3
changelog:
  - Add crm_report support to cluster plug-in
    Resolves: bz839342
  - Fix rhel_version() usage in cluster and s390 plug-ins
    Resolves: bz916705
  - Strip trailing newline from command output
    Resolves: bz971420


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-4
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
    Resolves: bz996992, bz996994
  - Restrict wbinfo collection to the current domain
    Resolves: bz997101
  - Add obfuscation of luci secrets to cluster plug-in
    Resolves: bz997090
  - Add XFS plug-in
    Resolves: bz997094
  - Fix policy class handling of --tmp-dir
    Resolves: bz997083
  - Do not set batch mode if stdin is not a TTY
    Resolves: bz1002943
  - Attempt to continue when reading bad input in interactive mode
    Resolves: bz1002943


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-5
changelog:
  - Include /etc/yaboot.conf in boot plug-in
    Resolves: bz1001966
  - Fix collection of brctl output in networking plug-in
    Resolves: bz1019235
  - Verify limited set of RPM packages by default
    Resolves: bz1019863
  - Do not strip newlines from command output
    Resolves: bz1019338
  - Limit default sar data collection
    Resolves: bz1001599


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-6
changelog:
  - Remove version checks in gluster plug-in
    Resolves: bz1015606
  - Check for usable temporary directory
    Resolves: bz1019517
  - Fix --alloptions command line option
    Resolves: bz1019356
  - Fix configuration fail regression
    Resolves: bz1019516


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-7
changelog:
  - Add domainname output to NIS plug-in
    Resolves: bz1026906
  - Collect /var/log/squid in squid plug-in
    Resolves: bz1026829
  - Collect mountstats and mountinfo in filesys plug-in
    Resolves: bz1026869
  - Add PowerPC plug-in from upstream
    Resolves: bz1025236


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-9
changelog:
  - Restore --build command line option
    Resolves: bz1015599
  - Collect saved vmcore-dmesg.txt files
    Resolves: bz1026959
  - Normalize temporary directory paths
    Resolves: bz829069


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-10
changelog:
  - Add nfs client plug-in
    Resolves: bz1028072
  - Fix traceback when sar module force-enabled
    Resolves: bz1028125


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-12
changelog:
  - Fix typo in yum plug-in add_forbidden_paths
    Resolves: bz829297
  - Add krb5 plug-in and drop collection of krb5.keytab
    Resolves: bz1028150


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-15
changelog:
  - Remove debug statements from logs plugin
    Resolves: bz1030042
  - Make ethernet interface detection more robust
    Resolves: bz1030824
  - Fix specifying multiple plugin options on the command line
    Resolves: bz1031124
  - Make log and message levels match previous versions
    Resolves: bz1031126
  - Log a warning message when external commands time out
    Resolves: bz1034956
  - Remove --upload command line option
    Resolves: bz1028484
  - Update sos UI text to match upstream
    Resolves: bz1034970


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-16
changelog:
  - Add new plugin to collect OpenHPI configuration
    Resolves: bz1028121
  - Fix cluster plugin crm_report support
    Resolves: bz1030553
  - Fix file postprocessing in ldap plugin
    Resolves: bz1030602
  - Remove collection of anaconda-ks.cfg from general plugin
    Resolves: bz1034865


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-17
changelog:
  - Fix get_option use in cluster plugin
    Resolves: bz1030553
  - Fix debug logging to file when given '-v'
    Resolves: bz1031126
  - Always treat rhevm plugin's vdsmlogs option as a string
    Resolves: bz1030617
  - Run the rhsm-debug script from yum plugin
    Resolves: bz1039036


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-18
changelog:
  - Prevent file descriptor leaks when using Popen
    Resolves: bz1051009
  - Disable zip archive creation when running rhsm-debug
    Resolves: bz1039036
  - Include volume geo-replication status in gluster plugin
    Resolves: bz1036752


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-19
changelog:
  - Fix generation of volume names in gluster plugin
    Resolves: bz1036752
  - Add distupgrade plugin
    Resolves: bz1059760


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
    Resolves: bz1127631
  - [postgresql] obtain db password from the environment
    Resolves: bz1126001
  - [pcp] add Performance Co-Pilot plugin
    Resolves: bz1119833
  - [nfsserver] collect /etc/exports.d
    Resolves: bz1118921
  - [sosreport] handle --compression-type correctly
    Resolves: bz1118152
  - [anaconda] redact passwords in kickstart configurations
    Resolves: bz1112175
  - [haproxy] add new plugin
    Resolves: bz1107865
  - [keepalived] add new plugin
    Resolves: bz1105247
  - [lvm2] set locking_type=0 when calling lvm commands
    Resolves: bz1102285
  - [tuned] add new plugin
    Resolves: bz1095447
  - [cgroups] collect /etc/sysconfig/cgred
    Resolves: bz1083677
  - [plugins] ensure doc text is always displayed for plugins
    Resolves: bz1065473
  - [sosreport] fix the distribution version API call
    Resolves: bz1028111
  - [docker] add new plugin
    Resolves: bz1084990
  - [openstack_*] include broken-out openstack plugins
    Resolves: bz1140756
  - [mysql] support MariaDB
    Resolves: bz1106600
  - [openstack] do not collect /var/lib/nova
    Resolves: bz1106423
  - [grub2] collect grub.cfg on UEFI systems
    Resolves: bz1086648
  - [sosreport] handle out-of-space errors gracefully
    Resolves: bz1087977
  - [firewalld] new plugin
    Resolves: bz1100505
  - [networking] collect NetworkManager status
    Resolves: bz1100505
  - [kpatch] new plugin
    Resolves: bz1110918
  - [global] update to upstream 3.2 release
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
    Resolves: bz1116349
  - [powerpc] allow PowerPC plugin to run on ppc64le
    Resolves: bz1140427
  - [package] add Obsoletes for sos-plugins-openstack
    Resolves: bz1140756


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
    Resolves: bz1087515
  - [ovirt_hosted_engine] fix exception when force-enabled
    Resolves: bz1148551


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
    Resolves: bz1148375
  - [mysql] obtain database password from the environment
    Resolves: bz1126001


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
    Resolves: bz1110918
  - [archive] drop support for Zip archives
    Resolves: bz1118152


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
    Resolves: bz1166039
  - [docs] update man page for new options
    Resolves: bz1171658
  - [sosreport] make all utf-8 handling user errors=ignore
    Resolves: bz1164267


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
    Resolves: bz1087977
  - [sosreport] catch OSError exceptions in SoSReport.execute()
    Resolves: bz1087977
  - [anaconda] make useradd password regex tolerant of whitespace
    Resolves: bz1112175


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
    Resolves: bz1026962
  - [squid] collect files from /var/log/squid
    Resolves: bz1026962
  - [sosreport] log plugin exceptions to a file
    Resolves: bz1026962
  - [ctdb] fix collection of /etc/sysconfig/ctdb
    Resolves: bz1026962
  - [sosreport] fix silent exception handling
    Resolves: bz1026962


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-17
changelog:
  - [openstack_neutron] neutron configuration and logs files not captured
    Resolves: bz1213315
  - [ovirt] remove ovirt-engine setup answer file password leak
    Resolves: bz1162788
  - [networking] network plugin fails if NetworkManager is disabled
    Resolves: bz1206633


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-20
changelog:
  - [cluster] crm_report fails to run because dir already exists
    Resolves: bz1200526
  - [foreman] Skip collection of generic resources
    Resolves: bz1135317
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
    Resolves: bz1183265
  - [pcp] collect /etc/pcp.conf
    Resolves: bz1183297
  - [puppet] adding new plugin for puppet
    Resolves: bz1183768
  - [block] Don't use parted human readable output
    Resolves: bz1183770
  - [general] Better handling --name and --ticket-number in
    Resolves: bz1185093
  - [networking] additional ip, firewall and traffic shaping
    Resolves: bz1194554
  - [infiniband] add opensm and infiniband-diags support
    Resolves: bz1194556
  - [plugins/rabbitmq] Added cluster_status command output
    Resolves: bz1197006
  - [networking] re-add 'ip addr' with a root symlink
    Resolves: bz1209454
  - [kimchi] add new plugin
    Resolves: bz1209840
  - [iprconfig] add plugin for IBM Power RAID adapters
    Resolves: bz1221932
  - [ovirt] Collect engine tunables and domain information.
    Resolves: bz1236101
  - [activemq] Honour all_logs and get config on RHEL
    Resolves: bz1236111
  - [cluster] Add luci to packages for standalone luci servers
    Resolves: bz1236124
  - [hpasm] hpasmcli commands hang under timeout
    Resolves: bz1214209
  - [mysql] Collect log file
    Resolves: bz1210906
  - [chrony] add chrony plugin
    Resolves: bz1165418


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-21
changelog:
  - [cluster] enable crm_report password scrubbing
    Resolves: bz1164864
  - [sosreport] fix command-line report defaults
    Resolves: bz1219720
  - [virsh] add new plugin, add listing of qemu
    Resolves: bz1195086
  - [sap*,vhostmd] new plugins for SAP
    Resolves: bz1195608


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-22
changelog:
  - [general] verify --profile contains valid plugins only
    Resolves: bz1184602
  - [kernel,mpt,memory] additional kernel-related diagnostics
    Resolves: bz1194159


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-23
changelog:
  - [ceph] add calamari and ragos logs and configs
    Resolves: bz1210527
  - [iprconfig] enable plugin for ppc64* architectures
    Resolves: bz1238726


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-25
changelog:
  - [openstack] New Openstack Trove (DBaaS) plugin
    Resolves: bz1238349
  - [services] Add more diagnostics to applications
    Resolves: bz1195087
  - [openstack_neutron] Obscure passwords and secrets
    Resolves: bz1240666


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-27
changelog:
  - [plugin] pass stderr through _collect_cmd_output
  - split dependencies of bz1185990 fix from bz1185990 patch
    Resolves: bz1185990


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-29
changelog:
  - [openvswitch] capture the logs, db and OVS bridges details
    Resolves: bz1242507
  - [logs] fix reference to missing 'rsyslog_conf' variable
    Resolves: bz1249705
  - [sapnw] Add check if saphostctrl is not present, dont use Set
    Resolves: bz1195608
  - [Plugin] fix handling of symlinks in non-sysroot environments
    Resolves: bz1248672


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-36
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1260607
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290955


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-2
changelog:
  - [grub2] grub2-mkconfig loads ext4 and brctl kernel
    Resolves: bz1116670
  - [ceph] skip collecting of all keyring and bindpass files
    Resolves: bz1260607
  - [omsa] add omreport storage controller
    Resolves: bz1299603
  - [atomichost] fix collection of 'docker info' output
    Resolves: bz1302146
  - [monit] fix add_copy_spec() arguments
    Resolves: bz1356945
  - [virtwho] add new plugin for virt-who agent
    Resolves: bz1353552


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-3
changelog:
  - [nodejs][nms]: new plugins
    Resolves: bz1368393
  - [docker]: Gather more data and expand plugin options
    Resolves: bz1351647


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-3
changelog:
  - [ceph] fix list formatting
    Resolves: bz1438269
  - [virsh] Handle properly cases when virsh commands fail
    Resolves: bz1444641
  - [openstack_*] fix issue with --verify option, extend pkglist for instack
    Resolves: bz1250346
  - [policies/redhat] accept 'oci' as a valid container type
    Resolves: bz1442078
  - [pacemaker] Collect user-defined logfile
    Resolves: bz1416535


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-4
changelog:
  - [libvirt] fix per-process cgroup collection
    Resolves: bz1148381
  - [ceph] exclude temporary mount locations from collection
    Resolves: bz1449904
  - [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1393961


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-7
changelog:
  - [openstack plugins] Tripleo specific containerized services
    Resolves: bz1463635
  - [jars] Scan only /usr/{share,lib}/java by default
    Resolves: bz1482574
  - [gluster_block] Added new plugin gluster_block
    Resolves: bz1491964


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-2
changelog:
  - [vdo] revise collected files
    Resolves: bz1509079
  - further updates to OSP plugins in containerized environment
    Resolves: bz1506908
  - [opendaylight] new plugin
    Resolves: bz1483414
  - collect all keystone domains
    Resolves: bz1491042
  - haproxy, etcd and docker tracebacks
    Resolves: bz1519267
  - [origin] fix typo in oc adm diagnostics
    Resolves: bz1463509
  - [postgresql] Call SCL pg_dump with proper path
    Resolves: bz1494420


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-4
changelog:
  - [pcp] really apply sizelimit to logs collected
    Resolves: bz1353873
  - [opendaylight] collect more logs and puppet config
    Resolves: bz1483414
  - [plugins] allow add_cmd_output to collect binary output
    Resolves: bz1494420
  - [openstack_ironic] collect drivers, ports and much more
    Resolves: bz1517767
  - [openstack_cinder] check for api service running
    Resolves: bz1506908


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-5
changelog:
  - [rabbitmq] Log collection when run in containerized OSP
    Resolves: bz1525620
  - [ipa] add KRA logs and correct PKI directories
    Resolves: bz1535390
  - [opendaylight] Enable plugin by puppet-opendaylight package
    Resolves: bz1483414
  - [etcd] Do not collect private etcd keys
    Resolves: bz1539038


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-7
changelog:
  - [kernel] Disable gathering /proc/timer* statistics
    Resolves: bz1566933
  - [openstack_octavia] Add new plugin
    Resolves: bz1541100
  - [ovirt-provider-ovn] A new plugin
    Resolves: bz1547544


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-8
changelog:
  - [docker] backport three container related patches
    Resolves: bz1573907
  - [ovn] add two OpenVSwitch plugins
    Resoles: bz1560845


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-2
changelog:
  - [archive] fix add_string()/do_*_sub() regression
    Resolves: bz1474976
  - [kernel] handle case when bpftool installed but not implemented
    Resolves: bz1559756


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-3
changelog:
  - [sosreport] Add mechanism to encrypt final archive
    Resolves: bz1594327
  - [archive] fix stat typo
    Resolves: bz1597532
  - [rhui] Fix detection of CDS for RHUI3
    Resolves: bz1596494


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-4
changelog:
  - [apparmor,ceph] fix typo in add_forbidden_path
    Resolves: bz1609135
  - [policies] sanitize report label
    Resolves: bz1608384
  - [policies,process] make lsof execution optional, dont call on RHOSP
    Resolves: bz1613806


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-5
changelog:
  - [rhv-log-collector-analyzer] Add new plugin for RHV
    Resolves: bz1600158
  - [kubernetes|etcd] Support OpenShift 3.10 deployments
    Resolves: bz1616030


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-6
changelog:
  - [archive] fix leading path creation
    Resolves: bz1624043
  - [atomic] Define valid preset for RHEL Atomic
    Resolves: bz1626159
  - [utilities] wait till AsyncReader p.poll() returns None
    Resolves: bz1623070


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-12
changelog:
  - [ovirt_node] New plugin for oVirt Node
    Resolves: bz1591433
  - [podman] Add support for gathering information on podman
    Resolves: bz1646698
  - [postgresql] Do not limit dump size
    Resolves: bz1656278


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-2
changelog:
  - [sos] bump release
    Resolves: bz1656812
  - [pcp] collect pmlogger without a sizelimit
    Resolves: bz1639166
  - [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
    Resolves: bz1697854
  - [foreman,satellite] increase plugin default timeouts
    Resolves: bz1697813
  - [sosreport] update sos.conf manpages
    Resolves: bz1311129
  - [openstack_instack] add ansible.log
    Resolves: bz1702802


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-3
changelog:
  - [katello] support both locations of qpid SSL certs
    Resolves: bz1711305
  - [plugins] add vdsm plugin
    Resolves: bz1706060


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-6
changelog:
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733367
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1731007


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-3
changelog:
  - [gluster] process files only from a statedump dir
    Resolves: bz1699381
  - [kernel] Don't collect trace file by default
    Resolves: bz1757662


author: Jan Jansky <jjansky@redhat.com> = 3.8-8
changelog:
  - Added Obsolete for leapp-repository-sos-plugin to solve
    conflicts during install/upgrade/downgrade of RPM.


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-3
changelog:
  - Fix local command execution
  - Fix quoting for non-root commands
  - Backport Satellite support
  - Backport RHCOS support


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to use RHEL 8 support-tools
  - Fix execution from within a container


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-1
changelog:
  - New upstream version 1.3.1
  - Minor specfile cleanups for livna submission.
  - Give the .so a proper version instead of 0.0.0
  - Don't use rpath in soundstretch binary


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-2
changelog:
  - Add BR: automake, because upstream uses symlinks to instead of copies of some
    needed automake files.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-4
changelog:
  - Add Requires: pkgconfig to -devel subpackage
  - Replace installed autoheader generated header file with our own version
    which contains only the nescesarry soundtouch specific defines, thus avoiding
    possible conflicts with other autoheader generated headers.


author: Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.8-1mdk
changelog:
  - 1.8
  - drop Prefix tag
  - clean out redundant buildrequires
  - rm -rf $RPM_BUILD_ROOT at the beginning of %install, not %prep
  - use %makeinstall_std macro
  - cosmetics


author: Adrian Reber <adrian@lisas.de> - 2.3-2
changelog:
  - using a new url.lang to fix #195720
    (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=131352)


author: Leigh Scott <leigh123linux@googlemail.com> - 3.1.3-1
changelog:
  - updated to 3.1.3
  - change configure command so it finds boost_regex
  - fix source url's
  - add devel package
  - fix directory ownership
  - fix rpath on binary


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix rec manpage link - now that man pages are compressed, it should point to
    play.1.gz, not play.1


author: Bill Nottingham <notting@redhat.com> 12.17.4-1
changelog:
  - update to 12.17.4
  - ship soxmix (#102499)
  - fix soxplay to handle files with spaces (#91144)
  - use LFS (#79151)


author: Thomas Woerner <twoerner@redhat.com> 12.17.7-3
changelog:
  - fixed bad link for man/man1/rec.1.gz (#154089)
  - using /usr/include instead of kernel-devel includes


author: Jiri Moskovcak <jmoskovc@redhat.com> 13.0.0-2
changelog:
  - uses external libgsm instead of local copy
  - spec file update: added BuildRequires: gsm-devel
  - Resolves: #239955


author: Jiri Moskovcak <jmoskovc@redhat.com> - 14.0.0-1
changelog:
  - New version 14.0.0
  - Thanks to Chris Bagwell <chris at cnpbagwell dot com> for initial changes to spec file


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-1
changelog:
  - fix license tag
  - update to 14.1.0
  - disabled static libs (if something really needs them, re-enable them
    in a -static subpackage)


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-4.20081105cvs
changelog:
  - update to 20081105 cvs checkout (fixes many bugs, no longer creates _fmt_*.so.*)
  - move _fmt_*.so to main package so support for file formats no longer requires devel


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Jiri Kucera <jkucera@redhat.com> - 14.4.1-7
changelog:
  - Fix CVE-2017-18189
    Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/
    Resolves: #1553590


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updates for 2.01 release
  - Fixed rc file
  - RPM now buildable as non-root
  - fixed post_service errors
  - fixed provides to include perl modules
  - use file find instead of manually specifying files


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updated for 2.20 release
  - made /etc/mail/spamassassin a config directory so local.cf doesn't get wiped out
  - added a patch to remove findbin stuff


author: Chip Turner <cturner@redhat.com>
changelog:
  - better control of service level, improvement in %post script.
  - (contribs from schirmer@taytron.net)


author: Tim Powers <timp@redhat.com> 2.43-6
changelog:
  - don't use rpms internal dep generator
  - buildrequire perl-Time-HiRes instead of perl(Time:HiRes) so we can satisfy build deps in the build system


author: Warren Togami <wtogami@redhat.com> 2.62-2
changelog:
  - upgrade to 2.62
  - Prereq -> Requires, former is deprecated
  - Require current version of perl
  - Remove urban myth clean test
  - TODO: Get rid of prefix


author: Warren Togami <wtogami@redhat.com> 2.62-3
changelog:
  - Ville Skyttä's fixes from #113596 including:
  - Fix buildroot traces
  - enable openssl
  - Trailing slash to DESTDIR (bug 90202 comment 14).
  - export optflags so they're honored, affects spamc only.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.63-8
changelog:
  - #122233
  - Require perl(:MODULE_COMPAT_*).
  - Use %{_mandir} and %{_initrddir}.
  - Fix License tag and include License in docs.
  - Backslashify multiline init script description.


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040524
changelog:
  - #123432 do not start service by default
  - #122488 remove CRLF's
  - #123706 correct license
  - svn snapshot 20040524
  - svn snapshot 20040518


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040530
changelog:
  - svn snapshot 20040530
  - #124870 prevent service startup failure due to old -a option
  - #124871 more docs
  - #124872 unowned directories


author: Warren Togami <wtogami@redhat.com> - 3.0.2-9
changelog:
  - SA#4191 uri_to_domain() is broken for urls with empty port
    SA#4232 multipart message with 0 parts -> uninitialized in m//
    SA#4121 Score for user defined rules become ignored
    SA#3944 get_envelope_from not handling received header


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.2.alpha1
changelog:
  - Include default rules to prevent mass confusion and complaints.
    You should really use sa-update though.  Really.
    Edit /etc/cron.d/sa-update to automate it.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.14.svn816416
changelog:
  - 3.3.0 svn816416 snapshot, pre-alpha3
    Upstream just fixed important bug SA#6206.  Many other bugs fixed since alpha2.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.18.svn816416
changelog:
  - Enable SOUGHT ruleset in nightly sa-update http://wiki.apache.org/spamassassin/SoughtRules
    You must enable the sa-update cron job manually in /etc/cron.d/sa-update
  - Custom channels may be specified in these config files:
        /etc/mail/spamassassin/sa-update-channels.txt
        /etc/mail/spamassassin/sa-update-keys.txt


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.4.svn1071394
changelog:
  - replace @@VERSION@@ with current saversion
  - restart spampd after sa-update cronjob runs
  - update to svn1071394


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632999


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-2
changelog:
  - Removed .la files
  - Removed doc-cs packages and merged it into doc package
  - Removed packaging of static files, and tested -without static_libs option for configure script
  - Moved symlink .so files from devel package to main package
  - Commented /sbin/ldconfig for devel package.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-3
changelog:
  - added macro to prevent error from stopping build for not including *.la files
  - added epoch to the SPEC
  - conditional build seems to be working correctly the old way only??
  - unified changelogs


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64 to avoid unpackaged files error.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-4
changelog:
  - Manually specyfying make install for each src directory to be installed
  - Installing python package seprately by by-passing make install


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-6
changelog:
  - changed BR to pulseaudio-lib-devel
  - removed dotconf BR
  - gave ownership of /%{python_sitelib}/speechd-0.3-py2.5.egg-info to python package if package is built for Fedora 9 or above


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-7
changelog:
  - changed license of base package to GPLv2+ and GPL
  - changed license of all other packages to GPLv2+
  - fixed install sequence using cleaner for loop and pushd and popd commands
  - added init script for speech-dispatcher daemon
  - added COPYING to doc in base package
  - removed comment after /sbin/ldconfig
  - resolved rpmlint errors for base package [except UTF-8 encoding error for (cs) documentation file]
  - renamed long_message to spd_long_message and run_test to spd_run_test
  - reset mode of _test.py to 0755


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-8
changelog:
  - converted speech-dispatcher-cs.info to UTF-8 encoding
  - removed multiple file listings of /usr/lib/python2.5/site-packages/speechd/_test.py
    and fixed its mode
  - added init script as a SOURCE instead as a patch
  - duplicate Requires have now been removed
  - Timestamping of files has now been added
  - Install script fixed
  - init script fixed


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-10
changelog:
  - removed Requires(preun) duplicates
  - applied -p option correctly to install command
  - fixed macros in changelog to prevent them from exapnding
  - fixed the init script
  - added patch to change log directory of speech-dispatcher and start only espeak


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-12
changelog:
  - added BuildRequires: texinfo (for makeinfo)
  - changed permissions of Sourcex to 0644
  - incorporated modified init script by mtasaka
  - fixed a few more macros in changelog
  - modified location of Source1 and Patch0 to point to online locations


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-17
changelog:
  - changing permissions of speech-dispatcher to 6711 (setuid and setguid)
  - relocating configuration files in case of OLPC branch.
  - excluding init script in case of OLPC branch.


author: Tomas Hoger <thoger@redhat.com> - 1.2-0.7.beta3
changelog:
  - Security update: Add mode checks to speex_packet_to_header() to protect
    applications using speex library and not having proper checks
    (CVE-2008-1686, #441239, https://trac.xiph.org/changeset/14701)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Adam Jackson <ajax@redhat.com> 0.7.39-2
changelog:
  - Rebuild to break bogus libpng dependency
  - Fix summaries for gtk3 subpackages to not talk about gtk2


author: Hans de Goede <hdegoede@redhat.com> - 0.11-4
changelog:
  - Add missing BuildRequires: usbutils, so that we get proper USB device
    descriptions in the USB device selection menu


author: Christophe Fergeau <cfergeau@redhat.com> - 0.11-5
changelog:
  - Fix build on PPC
  - Remove ExclusiveArch. While spice-gtk will build on ARM and PPC, it
    hasn't been tested on these arch, so there may be some bugs.


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: Victor Toso <victortoso@redhat.com> - 0.26-6
changelog:
  - Implements volume-sync from guest to client
    Resolves: rhbz#1264105
  - Avoid crash in virt-manager
    Resolves: rhbz#1301863
  - Fix focus in fullscreen mode
    Resolves: rhbz#1275231
  - Add Client capability for Windows monitor_config message
    Resolves: rhbz#1248189
  - Fix error message for file transfer
    Resolves: rhbz#1265562


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-7
changelog:
  - Improve message for number of usb channels in usb device widget
    Resolves: rhbz#1299931
  - Fix usbredir leak when redirecting a webcam
    Resolves: rhbz#1270363


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-8
changelog:
  - Check runtime usbredir version
    Resolves: rhbz#1320827
  - Allow connection to password protected guests
    Resolves: rhbz#1320806
  - Fix runtime warnings related to shared folders and usb redirection
    Resolves: rhbz#1319405
  - Change runtime warning for empty monitor config to debug message
    Resolves: rhbz#1319405
  - Fix 16 bpp LZ image decompression
    Resolves: rhbz#1285469


author: Victor Toso <victortoso@redhat.com> - 0.31-3
changelog:
  - Fix client's crash when agent is killed
    Resolves: rhbz#1336321
  - Parse ipv6 address
    Resolves: rhbz#1335239
  - Improving parsing of Smartcard messages
    Resolves: rhbz#1338727
  - Fix hangs with "Connected to graphic server"
    Resolves: rhbz#1323092


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-4
changelog:
  - Fix SASL GSSAPI (kerberos authentication)
    Resolves: rhbz#1343361
  - Allow to connect to ipv6 behind proxy
    Resolves: rhbz#1331777


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-5
changelog:
  - Allow to connect to ipv6 without proxy
    Resolves: rhbz#1361478
  - Silence a critical when migrating
    Resolves: rhbz#1356162
  - Disable EPOXY / EGL usage
    Resolves: rhbz#1362460


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-1
changelog:
  - Rebase to 0.33
    Resolves: rhbz#1402474
  - Rebuilt with correct hardening flags due to bug 1387475
    Resolves: rhbz#1420778
  - Fix copy paste issues
    Resolve: rhbz#1409854


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-2
changelog:
  - Add missing patch for rebase
    Resolves: rhbz#1402474
  - Add obsoletes to the spec file to ease updates
    Resolves: rhbz#1432776
  - Fix black screen in virt-manager
    Resolves: rhbz#1433242
  - Make connection error message more clear
    Resolves: rhbz#1365736


author: Victor Toso <victortoso@redhat.com> - 0.33-3
changelog:
  - Avoid CRITICALs on copy-paste
    Resolves: rhbz#1440096
  - Avoid assertions on file-xfer while agent disconnects
    Related: rhbz#1440096


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-4
changelog:
  - Make connection error message more clear
    Resolves: rhbz#1365736
  - Improve audio debug
    Resolves: rhbz#1436249
  - Fix wrong encoding of transferred files
    Resolves: rhbz#1440206


author: Victor Toso <victortoso@redhat.com> - 0.35-5
changelog:
  - Keepalive fix
    Resolves: rhbz#1719736
  - Fix hang on migration after password expired
    Resolves: rhbz#1761776


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-7
changelog:
  - Fix build requires and requires (#884632)
  - Cleanup specfile for latest guidelines 
  - Add ASL license text


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: It is BSD, not GPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.1.20100607
changelog:
  - Rebase to 4.1 prerelease with xz wrapper
  - Provides lzma compression as an option.
  - squashfs-fix-unsquashing-v3.patch is part of the 4.1 prerelease


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.3.20100803
changelog:
  - Rebase to latest upstream
  - Prevent warning message for xattr for virtual directory
  - Fix issue with large inodes - BZ 619020


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.4.20100827
changelog:
  - Rebase to latest upstream.
  - The main reason is to pick up a fix for large xattr similar to the large inode fix. This doesn't need to get backported as 4.0 doesn't have xattr support.
  - An option was added to build without xattr support.
  - Various source cleanups have been done as well.


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.1.20101223
changelog:
  - Switch to 4.2 development snapshot to get new XZ support
  - LZMA and XZ (LZMA2) support are now different


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.2.20101231
changelog:
  - Pull latest upstream snapshot
  - Includes check for matching compression type when adding to an existing image
  - Sample cvs command now includes timezone and specifies when on the date to use for the snapshot


author: Bruno Wolff III <bruno@wolff.to> - 4.2-1
changelog:
  - 4.2 is released.
  - Bugfix for bad data causing crash.
  - Include doc files added for release.
  - Big endian patch is now upstream.
  - Buildroot tag isn't needed any more.
  - We can now specify CFLAGS on the make call.
  - Compressor options are now passed with the make call.


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.1.git0be606be
changelog:
  - Pre-release of 4.3 to get early testing
  - This update includes a bit of internal code infrastructure changes
  - There are lots of fixes to better handle bad data
  - The final release is expected sometime in December
  - Until the release only the README doc file is available


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.8.gitca6a1c90
changelog:
  - Latest pre 4.3 snapshot
  - New option to display compression options used
  - Some error message improvements


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-28
changelog:
  - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple
    issues in ESI processing


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-30
changelog:
  - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-1
changelog:
  - Resolves: #1273942 - Rebase squid to latest mature 3.5 version (3.5.10)
  - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
    CVE-2016-3948 squid: various flaws
  - Resolves: #1254016 - IPv4 fallback is not working when connecting
    to a dualstack host with non-functional IPv6
  - Resolves: #1254018 - should BuildRequire: g++
  - Resolves: #1262456 - Squid delays on FQDNs that don't contains AAAA record
  - Resolves: #1336940 - Disable squid systemd unit start/stop timeouts
  - Resolves: #1344197 - /usr/lib/firewalld/services/squid.xml conflicts between
    attempted installs of squid-7:3.3.8-31.el7.x86_64 and
    firewalld-0.4.2-1.el7.noarch
  - Resolves: #1299972 - squid file descriptor limit hardcoded to 16384 via 
    compile option in spec file


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-5
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
  - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
    sites
  - Resolves: #1717430 - Excessive memory usage when running out of descriptors
  - Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
  - Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
    in cachemgr.cgi
  - Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15.1
changelog:
  - Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  - Resolves: #1829772 - CVE-2019-12525 squid: parsing of header
    Proxy-Authentication leads to memory corruption


author: Ray Strode <rstrode@redhat.com> 0.8-3
changelog:
  - change to new modular X dependencies
  - move configure to build instead of prep
  - use make install DESTDIR=$RPM_BUILD_ROOT instead of
    makeinstall macro


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
    "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
    and tests-mx32/ioctl_evdev.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
  - Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790052):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
    (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Fix expected alignment for IPC tests (#1795261):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Mahailiang <mahailiang@openanolis.org> - 4.24-6.0.1
changelog:
  - Fix nsyscalls check error
  - Sync from https://github.com/strace/strace (version 5.10)
  - Fix failed tests clone_ptrace, ioctl_nsfs.gen:
    7b942af "tests: increase the child stack size in some tests that invoke clone"
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Deji Akingunola <dakingun@gmail.com> - 0.5.1-2
changelog:
  - Updates from reviews:
  -	Have the -devel subpackage require pkgconfig
  -	Add a versioned dependency on cmake and remove dbus-qt buildrequire


author: Deji Akingunola <dakingun@gmail.com> - 0.5.1-5
changelog:
  - Split out a strigi-libs subpackage as suggested in BZ#223586
  _ Include a strigidaemon autostart desktop file


author: Lorenzo Villani <lvillani@binaryhelix.net> - 0.5.11.1-1
changelog:
  - drop _default_patch_fuzz
  - rebase strigi-multilib patch
  - No official 0.5.11.1 tarballs were released but we need 0.5.11.1, apply a
    diff between 0.5.11 and 0.5.11.1 svn tags


author: Rex Dieter <rdieter@fedoraproject.org> - 0.6.4-1
changelog:
  - strigi-0.6.4
  - Summary: s/for KDE//
  - *.desktop: validate, remove OnlyShowIn=KDE
  - -devel: move *.cmake here


author: Rex Dieter <rdieter@fedoraproject.org> 0.7-0.1.RC1
changelog:
  - strigi-0.7-RC1
  - use %_isa where appropriate
  - %files: track lib sonames
  - strigi-daemon.desktop: +Hidden=true (ie, disable autostart by default)


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move to Applications/Internet group
  - clean up %post script
  - make stunnel.pem %ghost %config(noreplace)
  - provide a sample file for use with xinetd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.11
  - chuck the SIGHUP patch (went upstream)
  - chuck parts of the 64-bit clean patch (went upstream)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove explicit requirement on openssl (specific version isn't enough,
    we have to depend on shared library version anyway)


author: Nalin Dahyabhai <nalin@redhat.com> 3.19-1
changelog:
  - update to 3.19 to avoid problems with stunnel being multithreaded, but
    tcp wrappers not being thrad-safe


author: Nalin Dahyabhai <nalin@redhat.com> 3.20-1
changelog:
  - log using LOG_AUTHPRIV facility by default (#47289)
  - make permissions on stunnel binary 0755
  - implicitly trust certificates in %{_datadir}/ssl/trusted (#24034)


author: Miloslav Trmac <mitr@redhat.com> - 4.11-1
changelog:
  - Update to stunnel-4.11
  - Fix int/size_t mismatches in stack_info ()
  - Update Certificate-Creation for /etc/pki


author: Miloslav Trmac <mitr@redhat.com> - 4.14-1
changelog:
  - Update to stunnel-4.14
  - Override changed default pid file location, keep it in %{_localstatedir}/run


author: Miloslav Trmač <mitr@redhat.com> - 4.20-4
changelog:
  - Revert the port to NSS, wait for NSS-based stunnel 5.x instead
    Resolves: #301971
  - Mark localized man pages with %lang (patch by Ville Skyttä)
    Resolves: #322281


author: Avesh Agarwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Avesh Agarwal <avagarwa@redhat.com> - 4.33-1
changelog:
  - New upstream realease 4.33
  - Updated authpriv and sample patches to match the new release
  - Addresses bz 580117 (inted mode support issue)


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version 1.7.2p2-1
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7.2p2-2
changelog:
  - Add /etc/sudoers.d dir and use it in default config (#551470).
  - Drop *.pod man page duplicates from docs.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
changelog:
  - audit related Makefile.in and configure.in corrections
  - added --with-audit configure option
  - removed call to libtoolize


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
changelog:
  - update to new upstream version
  - merged .audit and .libaudit patch
  - added sudoers.ldap.5* to files


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
changelog:
  - update to new upstream version
  - new command available: sudoreplay
  - use native audit support
  - corrected license field value: BSD -> ISC


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
changelog:
  - anybody in the wheel group has now root access (using password) (rhbz#656873)
  - sync configuration paths with the nss_ldap package (rhbz#652687)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.1p2-1
changelog:
  - rebase to 1.8.1p2
  - removed .sudoi patch
  - fixed typo: RELPRO -> RELRO
  - added -devel subpackage for the sudo_plugin.h header file
  - use default ldap configuration files again


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-4
changelog:
  - added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
  - re-enabled SSSD support
  - removed libsss_sudo dependency


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - added upstream patch for a regression
  - don't include arch specific files in the -devel subpackage
  - ship only one sample plugin in the -devel subpackage


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-1
changelog:
  - update to 1.8.6p7
  - fixes CVE-2013-1775 and CVE-2013-1776
  - fixed several packaging issues (thanks to ville.skytta@iki.fi)
    - build with system zlib.
    - let rpmbuild strip libexecdir/*.so.
    - own the %{_docdir}/sudo-* dir.
    - fix some rpmlint warnings (spaces vs tabs, unescaped macros).
    - fix bogus %changelog dates.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-3
changelog:
  - synced sudoers, configure options & configuration files with
    expected RHEL configuration
    Resolves: rhbz#969373
    Resolves: rhbz#971009
    Resolves: rhbz#965124
    Resolves: rhbz#971013
    Resolves: rhbz#839705


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-5
changelog:
  - added standalone manpage for sudo.conf and sudo-ldap.conf
  - spec file cleanup
    Resolves: rhbz#881258


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-6
changelog:
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - sssd: filter netgroups in the sudoUser attribute
  - parse uids/gids more strictly
  - added debug messages to trace netgroup matching
    Resolves: rhbz#1026904
    Resolves: rhbz#1026890
    Resolves: rhbz#1007014
    Resolves: rhbz#1026894
    Resolves: rhbz#1000389
    Resolves: rhbz#994566


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-11
changelog:
  - Fixed incorrect login shell path construction in sesh
    (thanks fkrska@redhat.com for the patch)
    Resolves: rhbz#1065418


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-12
changelog:
  - RHEL 7.1 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - handle the "(none)" hostname correctly
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    - fix infinite loop when duplicate entries are specified on the
      sudoers nsswitch.conf line
    Resolves: rhbz#1084488
    Resolves: rhbz#1088464
    Resolves: rhbz#1088825
    Resolves: rhbz#1092499
    Resolves: rhbz#1093099
    Resolves: rhbz#1096813
    Resolves: rhbz#1147497
    Resolves: rhbz#1147557


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-14
changelog:
  - RHEL 7.2 erratum
    - backported command digest specification
    - fixed CVE-2014-9680 sudo: unsafe handling of TZ environment variable
    - fixed typos in sudoers.ldap man page
    - fixed handling of double-quoted sudoOption values in ldap, sssd sources
    - fixed numeric uid specification support in ldap source
    - fixed authentication flag logic in ldap source
    - added the systemctl command to the SERVICES alias in the default sudoers file
    Resolves: rhbz#1144446
    Resolves: rhbz#1235570
    Resolves: rhbz#1138259
    Resolves: rhbz#1183818
    Resolves: rhbz#1233607
    Resolves: rhbz#1144419
    Resolves: rhbz#1135539
    Resolves: rhbz#1215400


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
changelog:
  - RHEL 7.2 erratum
    - fixed compilation of testing binaries during make check
    - added legacy group processing patch
    - replaced buggy base64 decoder with a public domain implementation
    Resolves: rhbz#1254621
    Resolves: rhbz#1183818
    Resolves: rhbz#1247591


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-18
changelog:
  - RHEL 7.3 erratum
    - removed requiretty flag from the default sudoers policy
    - backported pam_service and pam_login_service defaults options
    - implemented netgroup_tuple defaults option for changing netgroup
      processing semantics
    - fixed user matching logic in the LDAP nss backend
    - don't allow visudo to accept an invalid sudoers file
    - fixed a bug causing that non-root users can list privileges of
      other users
    - modified digest check documentation to mention the raciness of
      the checking mechanism
    Resolves: rhbz#1196451
    Resolves: rhbz#1247230
    Resolves: rhbz#1334331
    Resolves: rhbz#1334360
    Resolves: rhbz#1261998
    Resolves: rhbz#1313364
    Resolves: rhbz#1312486
    Resolves: rhbz#1268958
    Resolves: rhbz#1335039
    Resolves: rhbz#1335042
    Resolves: rhbz#1335045
    Resolves: rhbz#1273243
    Resolves: rhbz#1299883


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-19
changelog:
  - RHEL 7.3 erratum
    - removed INPUTRC from env_keep to prevent a potential info leak
    Resolves: rhbz#1340700


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-1
changelog:
  - RHEL 7.4 erratum
    - Resolves: rhbz#1360687 - rebase to 1.8.19p2
    - Resolves: rhbz#1123526 - performance improvement
    - Resolves: rhbz#1308789 - add MAIL and NOMAIL tags
    - Resolves: rhbz#1348504 - sudo now parses sudoers with sudoers locale
    - Resolves: rhbz#1374417 - "sudo -l command" indicated that the command
      was runnable even if denied by sudoers when using LDAP or SSSD backend.
    - Resolves: rhbz#1387303 - add ignore_iolog_errors option
    - Resolves: rhbz#1389360 - wrong log file group ownership
    - Resolves: rhbz#1389735 - add iolog_group, iolog_mode, iolog_user options
    - Resolves: rhbz#1397169 - maxseq and ignore_iolog_errors options
    - Resolves: rhbz#1403051 - add support for querying netgroups directly via LDAP
    - Resolves: rhbz#1410086 - race condition while creating /var/log/sudo-io dir
    - Resolves: rhbz#1413160 - add ignore_unknown_defaults flag
    - Resolves: rhbz#1254772 - ability to export sudoers in json format
    - Resolves: rhbz#1417187 - wrong reference to config file in systax error message
    - Resolves: rhbz#1424575 - visudo was not printing severity of error/warning message


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-2
changelog:
  - RHEL 7.4 erratum
  - Fixes coverity scan issues created by our patches:
    - fixed resource leaks and a compiler warning in digest backport patch
    - removed needless code from cmnd_no_wait patch causing clang warning
    - format of the last changelog message causes problems to rhpkg push,
      so don't use that as a commit message
    Resolves: rhbz#1360687


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-3
changelog:
  - RHEL 7.4 eratum
  - Fixes semicolon typo in digest backport patch from the previous build
    Resolves: rhbz#1360687


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-4
changelog:
  - RHEL 7.4 erratum
  - fixed cmnd_no_wait patch
  - backported iolog_flush sudoers default
    Resolves: rhbz#1369856
    Resolves: rhbz#1425853


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-5
changelog:
  - RHEL 7.4 erratum
  - added doc patch about sudo lookup issue
    Resolves: rhbz#1293306
  - added test suite patch
    Resolves: rhbz#1360687
  - fixed use after free fqdn problem
    Resolves: rhbz#1360687


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-7
changelog:
  - RHEL 7.4 erratum
  - added patch to fix output truncation (in some cases) when log_output
    option is enabled
    Resolves: rhbz#1454571


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations


author: Quentin Spencer <qspencer@users.sourceforge.net> 0.91-1
changelog:
  - New upstream release, incorporating previous patches
  - chmod the build directory to ensure all headers are world readable


author: Quentin Spencer <qspencer@users.sourceforge.net> 1.2-1
changelog:
  - New release.
  - Build newly added library CXSparse (but not CSparse--see comments
    in build section).


author: Quentin Spencer <qspencer@users.sourceforge.net> 2.1.0-1
changelog:
  - New release. Increment versions of some libraries.
  - Rearrange and clean up spec file so all definitions are in one place.


author: Quentin Spencer <qspencer@users.sourceforge.net> 2.1.1-1
changelog:
  - New release, and package name change from UFsparse to SuiteSparse. Fixes
    bug #210846. Keep the ufsparse package name for now.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.0.0-1
changelog:
  - Change package name to match upstream, including provides and obsoletes.
  - New release. Numerous changes in build to reflect source reorganization.
  - Moved static libs into separate package.


author: Deji Akingunola <dakingun@gmail.com> - 3.2.0-3
changelog:
  - Rearrange the spec
  - Link in necessary libs when making shared CHOLMOD lib (BZ #475411)
  - Link with ATLAS' blas and lapack libs


author: Nils Philippsen <nils@redhat.com> - 4.0.2-10
changelog:
  - ship licenses as documentation in the base package (#1019315)
  - hardlink duplicate documentation/license files


author: Richard Jones <rjones@redhat.com> - 2.5-2
changelog:
  - New upstream release 2.5.
  - Remove BR upx (not needed by upstream).
  - Two more scripts / manpages.


author: Richard Jones <rjones@redhat.com> - 2.7-2
changelog:
  - New upstream version 2.7.
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard Jones <rjones@redhat.com> - 2.8-0.2
changelog:
  - New pre-release version of 2.8.
    + Note this is based on 2.7 + mailing list patches.
  - New BRs on mke2fs, libext2fs, glibc-static.


author: Richard Jones <rjones@redhat.com> - 2.10-1
changelog:
  - New upstream version 2.10.
  - Adds -u and -g options to febootstrap-supermin-helper which are
    required by virt-v2v.


author: Richard Jones <rjones@redhat.com> - 2.11-1
changelog:
  - New upstream version 2.11.
  - Fixes "ext2fs_mkdir .. No free space in directory" bug which affects
    libguestfs on rawhide.


author: Richard Jones <rjones@redhat.com> - 3.0-2
changelog:
  - New upstream version 3.0 (note this is incompatible with 2.x).
  - Fix upstream URLs.
  - fakeroot, fakechroot no longer required.
  - insmod.static is required at runtime (missing dependency from earlier).
  - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'.
  - BR ocaml, ocaml-findlib-devel.
  - No examples are provided with this version of febootstrap.


author: Richard Jones <rjones@redhat.com> - 3.3-4
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own.


author: Richard Jones <rjones@redhat.com> - 3.15-1
changelog:
  - New upstream version 3.15.
  - This version includes root=<device> support, needed for libguestfs
    with virtio-scsi.
  - Remove upstream patch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:3.21-2
changelog:
  - Add upstream patch to drop supplemental groups (RHBZ#902476).
  - Remove 'Group:' RPM headers which are no longer necessary.
  - Remove some commented-out requirements.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-1
changelog:
  - New upstream version 4.1.1.
  - The program has been renamed 'supermin' from 'febootstrap'.
  - Obsolete, but don't Provide because supermin is not a compatible replacement.
  - Use '_isa' to specify architecture of supermin-helper subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-2
changelog:
  - Add upstream patch to ignore ghost non-regular files.
  - This fixes builds on Fedora 20 because the filesystem package has
    been changed so /var/lock and /var/run are marked as ghost.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.3-1
changelog:
  - New upstream version 4.1.3.
  - Remove patch which is now upstream.
  - Add examples directory to documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.19-1
changelog:
  - Rebase to supermin 5.1.19.
  - Build on s390x.
  - Add upstream signature.
  - Remove upstream patches.
    resolves: rhbz#1484890, rhbz#1484973


author: Kalev Lember <kalevlember@gmail.com> - 0.5.1-1
changelog:
  - Update to 0.5.1
  - Build with libmusicbrainz4
  - Adjust the spec file for the changes in private library location
  - Remove and obsolete the -devel subpackage


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-1
changelog:
  - Bump rev to 4.0.2; now using HEAD of mozilla/security/coreconf
  - which includes the coreconf-location.patch, so got rid of patch


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-2
changelog:
  - Bump spec rev to 2 due to change of spec file name from svrcore
  - to svrcore-devel to comply with fedora packaging guidelines


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_tmppath} instead of /var/tmp
  - remove the postscript docs (pdftops from the xpdf pkg converts them just fine)


author: Karsten Hopp <karsten@redhat.de> 1.3.23-1
changelog:
  - update
  - new pylib patch
  - remove destdir patch, swig.m4 is no longer included
  - remove ldconfig patch, swig now uses *-config to find out linker options


author: Adam Tkac <atkac redhat com> 1.3.33-1
changelog:
  - 1.3.33
  - removed swig-arch.patch because upstream will never accept
    it ("swig is not low-level")


author: Adam Tkac <atkac redhat com> 1.3.38-4
changelog:
  - moved documentation to -doc subpackage and build it as noarch
  - added Example/ directory to -doc (#489077)
  - fixed build root


author: Adam Tkac <atkac redhat com> 1.3.39-1
changelog:
  - update to 1.3.39
  - swig-1.3.38-rh485540.patch was merged
  - add Example/ to -doc again (#489077), filter provides correctly


author: Adam Tkac <atkac redhat com> 2.0.0-2
changelog:
  - add LICENSE-GPL, LICENSE-UNIVERSITIES and COPYRIGHT to %doc
  - include all license files in the -doc subpkg


author: Adam Tkac <atkac redhat com> 2.0.4-3
changelog:
  - backport r12814 from trunk (#753321)
  - use scm_to_utf8_string instead of SCM_STRING_CHARS in guile bindings (#752054)
  - improve Octave compatibility (#679948)


author: Adam Tkac <atkac redhat com> 2.0.5-1
changelog:
  - update to 2.0.5
  - patches merged
    - swig204-rh753321.patch
    - swig204-rh679948.patch
    - swig204-rh770696.patch


author: Adam Tkac <atkac redhat com> 2.0.7-2
changelog:
  - fix generating of python3 wrappers (#830660)
  - don't crash when attepmting to warn about wrong descructor (#830249)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.2-29
changelog:
  - Use smp_mflags (bug #226445).
  - Better default attributes (bug #226445).
  - Make setup macro quiet (bug #226445).
  - Clean build root in %install section (bug #226445).


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.02-2
changelog:
  - Split out extlinux and tftpboot.
  - remove duplicate syslinux/com32/ left in base package after 3.83-2


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.05-2
changelog:
  - Remove old Obsoletes/Provides for syslinux-devel as such a subpkg
    was introduced with 3.83-2 (#756733).


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Preston Brown <pbrown@redhat.com>
changelog:
  - packaged for Winston
  - change va patch to indicate kernel is not patched for iostat accounting.
    re-enable if our stock kernel gets this patch.
  - upgrade to 3.2.
  - install crontab entry.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - make sure disk accounting is enabled to fix iostat -l, -p (#16268)
  - crontab entries were missing the user (root) to run as (#18212)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Summarize previous day's activity with sa2, not current day (which is only 4 hours of data when it gets run) (#24820)
  - upgrade to 3.3.4 for full 2.4 compatibility and improved iostat


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.2-1
changelog:
  - 4.0.2
  - the kernel patch for extended statistics is in, don't say it needs
    applying in the man page


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.3-2
changelog:
  - Do the daily sa2 run just before midnight, not at 4AM... you'd 
    only get 4 hours worth of data that way (#63132)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.4
changelog:
  - fix insecure tmp files in scripts (#78212)
  - require tools needed in scripts
  - use IFNAMSIZ from {_includedir}/linux/if.h for maximum interface length


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.6
changelog:
  - let user configure how long to keep logs through /etc/sysconfig/sysstat
    (#81294)
  - reset stats at system boot (#102445)


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix spew of crap to console at startup
  - Fix order of startup (#124035)
  - Fix array overrun (#117182)
  - Fix interrupt buffer sizing (caused bogus irq info)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 5.0.5
  - remove some obsolete patches
  - update statreset, overrun, lib64init patches
  - renumber patches


author: Charles Bennett <ccb@redhat.com> 5.0.5-5.fc
changelog:
  - bring in filename and append-msg patch
  - append-msg adds verbose text for when saNN data file cpu count
  -  does not match cpu count on the currently running system


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.6.1-7
changelog:
  - remove needless DOCDIR setting
  - remove needless INIT_DIR setting
  - fix the problem with --disable-man-group option


author: Ivana Hutarova Varekova <varekova@redhat.com> - 10.0.0-4
changelog:
  - close the file descriptor in a special situation in read_uoptime function
  - fix the number on open files in cifsiostat output


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.1-1
changelog:
  - resolves: #844387
    update to 10.1.1
  - keep log files for 28 days instead of 7
  - collect all aditional statistics


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-1
changelog:
  - resolves: #863791
    updated to 10.1.2
  - resolves: #850333
    migrated to the new systemd-rpm macros
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-2
changelog:
  - added new -y option to iostat command to skip first since boot report if
    displaying multiple reports


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-5
changelog:
  - resolves: #1100365
    fixed issue when sa data files weren't correctly overwritten in some cases
  - resolves: #1097294
    count with xz compressed files as well in sa2 script
  - resolves: #1097292
    fix file mode of sysstat cron file
  - resolves: #1128569
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances
  - resolves: #1110852
    added better explanation of HISTORY setting to sysstat(5) man page
  - resolves: #1102610
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-6
changelog:
  - resolves: #1146081
    fixed issue when cifsiostat and nfsiostat were reporting incorrect statistics
    on a single CPU machines


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
  - add -f flag to force fdatasync() after sa file update (#1662094)
  - don't call filesystem count functions when we are not collecting fs statistics (#1670060)
  - skip autofs when gathering filesystem statistics (#1670060)
  - fix use of incorrect preposition in sar man page (#1624410)
  - fix CPU usage reporting (#1618688)


author: Brent Fox <bfox@redhat.com>
changelog:
  - got starting and stopping of ntpd working
  - enabled detection of whether ntpd is currently running 
  - added msf to author list


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.4-6
changelog:
  - Fix some character sets for translations (#52851)
  - dateconfig.png isn't a config file, mark the config files as noreplace


author: Brent Fox <bfox@redhat.com>
changelog:
  - Replaced C code for timezone map with Python from anaconda
  - Remove timezonemapmodule from /usr/lib/dateconfig


author: Brent Fox <bfox@redhat.com>
changelog:
  - Finished port to Python2.2/GTK2
  - Handle starting ntpd more gracefully
  - Made variable naming more consistent


author: Brent Fox <bfox@redhat.com> 1.3-1
changelog:
  - Rename dateconfig to redhat-config-date
  - Check to see if we can ping ntp server before starting ntpd


author: Brent Fox <bfox@redhat.com> 1.3-4
changelog:
  - Remove some lingering references to dateconfig
  - Create symbolic link from dateconfig to redhat-config-date


author: Tammy Fox <tfox@redhat.com> 1.4-1
changelog:
  - Updated docs for gtk2 interface
  - Add note about security level and ntpd (bug #68039)
  - Move desktop file to /usr/share/applications only


author: Brent Fox <bfox@redhat.com> 1.5.2-7
changelog:
  - Retrieve the only the first NTP server if there's more than one
  - Only modify the first server entry if there's more than one


author: Brent Fox <bfox@redhat.com> 1.5.6-2
changelog:
  - handle missing ntpservers file
  - don't pass in parent, it breaks firstboot
  - handle busted ntp initscript


author: Brent Fox <bfox@redhat.com> 1.5.7-3
changelog:
  - better check on ntp status by looking at initscrip return code
  - sent ntp initscript output to /dev/null when calling os.system()


author: Brent Fox <bfox@redhat.com> 1.5.9-9
changelog:
  - Added mnemonics to widgets that didn't have them (bug #91026)
  - convert some timezone po files to utf-8 (bug #88461)


author: Nils Philippsen <nphilipp@redhat.com> 1.7.5-1
changelog:
  - actually display time zone map (#131641)
  - put NTP stuff into own tab to better accommodate firstboot (#131314)
  - add accelerators to Date & Time tab


author: Nils Philippsen <nphilipp@redhat.com> 1.7.9-1
changelog:
  - enable choosing which notebook page(s) to show (for firstboot, #133748)
  - some minor firstboot API changes, conflict with firstboot <= 1.3.26
  - some minor UI tweaks
  - remove pool.ntp.org from list of NTP server choices as system-config-date
    doesn't handle multi-IP machines really well ATM


author: Nils Philippsen <nphilipp@redhat.com> 1.7.16-2
changelog:
  - use True, False instead of gtk.TRUE, gtk.FALSE to avoid deprecation warnings
    (#153037, patch by Colin Charles)


author: Nils Philippsen <nphilipp@redhat.com> 1.7.18-1
changelog:
  - make desktop file translatable (#156792)
  - avoid DeprecationWarnings
  - use DESTDIR consistently (#156782)


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.0-1
changelog:
  - add and edit NTP servers inline in the list
  - always display clock left-to-right (#165109)
  - try to be smart about restrict lines when changing or deleting hosts
  - include *.pyo files (#165097)
  - don't remove *.pyc files in %preun because they're in the file list
  - don't include timetool symlink anymore
  - don't install firstboot module symlink, this is dealt with in the firstboot
    package for quite a while


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.2-1
changelog:
  - write comment about the ZONE parameter into /etc/sysconfig/clock (#123101)
  - handle comments when reading /etc/sysconfig/clock
  - consistently use spaces for indentation in timezoneBackend.py


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.6-1
changelog:
  - fix zooming problems with enlarged window (#172982)
  - apply workaround by Alex Larsson to avoid hanging when clicking on Asia
    region (#172977)
  - add Middle America region, make Antarctica regions overlapping


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.7-1
changelog:
  - only select region if pointer is inside region
  - replace aa-based shading to avoid aa-related deficiencies of GnomeCanvas
  - show shaded border around zoomed in region to zoom out without selecting a
    city


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.8-1
changelog:
  - reshow shaded map when reentering map widget from outside
  - clear status line when outside region area in zoomed mode


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix highlighted regions when leaving and entering the timeone map canvas
  - make timezone list a treeview
  - update timezone po source file


author: Nils Philippsen <nphilipp@redhat.com> 1.7.99.14-1
changelog:
  - put Etc/... timezones into "Non-geographic timezones" (#148025)
  - default to already set timezone on startup (#177815)


author: Nils Philippsen <nphilipp@redhat.com> 1.8.8-1
changelog:
  - enable Hebrew, Marathi and Urdu translations
  - pick up updated translations (#211074)
  - add dist tag


author: Nils Philippsen <nphilipp@redhat.com> 1.8.11-1
changelog:
  - provide more info when encountering bad timezone translations (i.e. not split
    into Region,Continent/Location) (#219773)
  - pick up updated translations (#216073)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - display to-be-selected city inside map instead of status bar (#211550)
  - remove remaining regions cruft
  - make currently selected city non-selectable


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - use Category: ... System; ... in desktop file
  - clean buildroot before installing
  - fix licensing blurb in PO files
  - require python >= 2.0 instead of python2
  - recode spec file to UTF-8
  - don't mark ntp.template as %config


author: Nils Philippsen <nphilipp@redhat.com> 1.8.92-1
changelog:
  - use correct modes when installing, to avoid fixing modes when packaging and
    to be able to strip down %files
  - don't ship unneeded regions file


author: Nils Philippsen <nphilipp@redhat.com> 1.8.96-1
changelog:
  - handle missing /etc/ntp.conf gracefully (#237777)
  - versionize obsoletes
  - pick up updated translations


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add scrollbars to timezone canvas (#230690)
  - scroll to city selected via treeview
  - don't resize window due to excessively long comments of cities


author: Nils Philippsen <nphilipp@redhat.com> 1.9.2-1
changelog:
  - fix python formatting in Japanese translation (#248667, Jens Petersen)
  - make "make archive" work with Hg repo


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use smoother zoom steps when using the mouse wheel
  - hide city label when using the mouse wheel to zoom


author: Nils Philippsen <nphilipp@redhat.com> 1.9.4-1
changelog:
  - display error message if setting time and date fails (#251818)
  - require newt-python from Fedora 8 on (#251362)


author: Nils Philippsen <nphilipp@redhat.com> 1.9.11-1
changelog:
  - don't remove notebook pages when acting as a firstboot module (#296711)
  - pick up updated translations


author: Nils Philippsen <nphilipp@redhat.com> 1.9.12-1
changelog:
  - use xdg-open if available
  - don't throw exceptions when selecting non-geographic time zones (#293241)
  - fix permissions of timeconfig tool (#241737)


author: Nils Philippsen <nphilipp@redhat.com> 1.9.13-1
changelog:
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - use full path to call gtk-update-icon-cache
  - don't let gtk-update-icon-cache fail scriptlets
  - use "make %{?_smp_mflags}"
  - remove "ExclusiveOS: Linux"
  - remove obsolete no.po translation file
  - use "%defattr(-,root,root,-)"
  - add release tags to changelog versions to appease rpmlint


author: Nils Philippsen <nphilipp@redhat.com> 1.9.16-1
changelog:
  - use warning dialog, exit gracefully if hwclock fails to allow operation in a
    XEN guest (#357311)


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.19-1
changelog:
  - only attempt to use yelp to display online help (as xdg-open does just the
    same), drop requirements on xdg-utils and yelp for now, update error message
    shown if yelp isn't found (#420101)


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.23-1
changelog:
  - handle ntpdate service (#229217, patch by Miroslav Lichvar)
  - change all runlevels instead of only 3 and 5


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.24-1
changelog:
  - pick up updated translations
  - enable all languages for online doc translation
  - various online doc fixes
  - zoom in on click into map (#437767)
  - draw label into map for currently selected city


author: Nils Philippsen <nphilipp@redhat.com> - 1.9.27-1
changelog:
  - handle missing UTC information in /etc/adjtime, disable UTC/non-UTC selection
    if hwclock doesn't work (#438124)


author: Nils Philippsen <nils@redhat.com>
changelog:
  - improve manual and NTP settings (#507619)
  - improve frames and expander (#507623)
  - display current date and time always
  - fix explanation labels on "Date and Time" page
  - fix non-zero page size deprecation warnings


author: Nils Philippsen <nils@redhat.com> - 1.9.48-1
changelog:
  - use string object methods instead of string module
  - get rid of timeconfig and compat program names
  - move backend code into scdate.core module


author: Nils Philippsen <nils@redhat.com>
changelog:
  - don't require libselinux-python directly anymore, this code was moved to
    slip.util.files (#562331)


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use better ugettext to allow anaconda to use the time zone widget even with
    encodings other than UTF-8


author: Nils Philippsen <nils@redhat.com> - 1.9.59-1
changelog:
  - require docs in enterprise builds
  - configure iburst mode instead of ntpdate upon boot (original patch by Radek
    Nováček)
  - fix configuring ntp.conf template


author: Nils Philippsen <nils@redhat.com> - 1.9.62-1
changelog:
  - improve building/cleaning message files (Martin Pitt)
  - properly tie dialogs to toplevels, set slightly better dialog titles, set
    dialogs transient for notebook due to firstboot (#528157)
  - use branded name in desktop file (#727204)
  - use Transifex and pull updated translations


author: Nils Philippsen <nils@redhat.com> - 1.9.66-1
changelog:
  - improve enabling/disabling, starting/stopping NTP daemons, take care of the
    respective "other" NTP daemon as well (#743533)
  - pull updated translations


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
  - use pkexec instead of consolehelper
  - read/write /etc/localtime as symbolic link and only fall back to using
    /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
  - don't trip over missing /etc/sysconfig/network file (#857412)
  - pull updated translations
  - install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.5-1
changelog:
  - pull updated and new translations (#878319)
  - catch (rare) errors from fork()
  - catch unavailable display (#766936)
  - pull updated time zones


author: Jan Synáček <jsynacek@redhat.com> - 1.10.6-3
changelog:
  - remove invalid source links (#1502430)
  - system-config-date can't enable ntp because /bin/systemd doesn't exist (#1381321)


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-1
changelog:
  - fixed startup and description texts
  - added missing requirement for system-config-network-tui
  - moved base python files into tui sub package
  - fixed requirements
  - made package noarch


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-2
changelog:
  - fixed disabled string in fw_gui
  - set mode after copying of ip*tables-config to 0600
  - fixed categories in desktop file


author: Thomas Woerner <twoerner@redhat.com> 1.0.2-1
changelog:
  - obsolete and provide system-config-securitylevel package
  - added compat files for anaconda, firstboot and system-config-kickstart
  - lokkit fixes for nostart option:
    - only write config for iptables and ip6tables if enabled
    - stop iptables and ip6tables if disabled
    - unlink iptables and ip6tables rule files if disabled
  - lokkit: new option --update to regenerate firewall configuration if not 
    disabled
  - check for include files only when writing firewall configuration
  - clean buildroot in install
  - made system-config-securitylevel a synonym for system-config-firewall
  - ip6tables: reject with icmp6-adm-prohibited instead of icmp6-port-unreachable
    (rhbz#250915)
  - moved config files from /etc/sysconfig into tui sub package
  - removed x bit from import files


author: Thomas Woerner <twoerner@redhat.com> 1.0.3-1
changelog:
  - added missing system-config-securitylevel compatibility files
  - string and documentation fixes
  - fixed typos reported by Alain Portal
  - more translations
  - fixed buildroot
  - cleanup and changes according to review (rhbz#253232)
  - moved doc to tui sub package


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-1
changelog:
  - more translations
  - build environment changes
  - dropped build stage, because it is not needed at all


author: Thomas Woerner <twoerner@redhat.com> 1.0.5-4
changelog:
  - fixed problem if /etc/sysconfig/system-config-securtylevel and 
    /etc/sysconfig/system-config-firewall are not readable


author: Thomas Woerner <twoerner@redhat.com> 1.0.6-1
changelog:
  - dropped --stop option from fw_gui::genArgs
  - new translations
  - sysctl support for masquerading (net.ipv4.ip_forward will be set)
  - glade file: fixed spacings, dropped not needed containers


author: Thomas Woerner <twoerner@redhat.com> 1.0.7-1
changelog:
  - new translations
  - added openvpn to services (rhbz#)
  - fixed typo in description text for ipsec
  - using port numbers instead of port names for services
  - renamed some variables to be consistent
  - make tolltip better: bigger text, helper modules
  - dropped unused code: inconsistent handling
  - make port check button inactive in add_port_cb
  - new function _addDevice: code cleanup
  - allow to set variables in ipXtablesConfig, which were not set before
  - fixed os.system calls in ipXtablesClass to return proper return values
  - fixed status funciton in ipXtablesClass
  - new _append_unique function in fw_parser to prevent duplicates
  - added warning dialog for missing or unusable /etc/sysconfig/ip*tables files
  - fixed expand of the warning label in the startup dialog


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-1
changelog:
  - use extension match for protocols (rhbz#229879)
  - use ipv6-icmp instead of icmpv6 (rhbz#291001)
  - use ':' in tui as port/proto delimiter for other ports (rhbz#292171)
  - some translation fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-2
changelog:
  - lokkit: write new config with nostart option (rhbz#353961)
  - translation fixes for de, it, nb, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.0.9-1
changelog:
  - do not report configuration failed if ipv6 is disabled (rhbz#355561)
  - print messages if lokkit failed
  - lokkit be more verbose on restarting ipXtables in verbose mode


author: Thomas Woerner <twoerner@redhat.com> 1.0.10-1
changelog:
  - fixed problem with network devices (rhbz#331671)
  - dropped obsolete translation no.po (rhbz#332331)


author: Thomas Woerner <twoerner@redhat.com> 1.0.11-1
changelog:
  - fixed crash on startup for network device aliases (rhbz#384891)
    thanks to Loran Freval for the patch
  - added port entry max length in other ports dialog (rhbz#385931)
  - added version number to about dialog (rhbz#387891)
  - improved some english texts (rhbz#383741)
    thanks to Paul W. Frields for the initial patch
  - code cleanup with start speedup
  - do not allow to add custm rules for ipv6:nat
  - also translate parser error messages


author: Thomas Woerner <twoerner@redhat.com> 1.0.12-1
changelog:
  - allow to activate checkboxes by row activation in treeviews
  - code cleanup in view_toggle_cb
  - fixed port display for IPSec
  - use system icons where possible, new wizard icons
  - added fallback for CellRendererCheck if icons are missing, size fixes
  - added tooltips for toolbar and menu entries (if needed)
  - improved more english texts (rhbz#395801)
    thanks to Paul W. Frields for the initial patch


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-0
changelog:
  - ports are ports and services are services: there is a new service tag to
    enable services; a port is not enabling a service anymore
  - new conversion tool for 1.0.X to 1.1.X configuration
  - new version option for lokkit
  - wizard
    - dropped network connection selection tab
    - using keep configuration check instead of clear configuration check
    - added default configuration selection
  - gui: new menu for skill level and load default configuration
  - use choices in optparse, removed obsolete check functions


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-1
changelog:
  - new default configurations: server, desktop
  - cleanup of wizard: dropped network connection tab
  - new option in wizard to keep configuration or load a default configuration
  - new menu entry and dialog to configure iptables and ip6tables service settings
  - some enhancements to the gtk_cellrenderercheck for better look and feel


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - use radio buttons for skill menu entries to show active level
  - fixed convert-config problem if there is no configuration to convert
    (rhbz#426477)
  - minor string changes
  - new it and pt_BR translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.2-1
changelog:
  - fw_gui: fixed row activation for masquerading
  - fw_gui: fixed _setInterfaces to use internal functions to correctly set
    toggles
  - fw_gui: show info dialog if no config exists and firewall gets enabled: new
    function enableFirewall
  - fw_gui, fw_tui: disable firewall if no config exists
  - fw_gui, fw_tui: do not print traceback if NCDeviceList.getDeviceList raises
    and exception
  - forward masqueraded connections
  - gtk_cellrenderercheck: fixed size calculations
  - fw_sysconfig: set config.filename to None for merged configuration in
    read_sysconfig_config if no configuration exists
  - new translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1
changelog:
  - new fw_compat, used in config-convert and fw_sysconfig to automatically 
    convert old system-config-securitylevel configurations
  - new wizard look
  - fixed range check for user defined ports
  - some code cleanup
  - updated translations for fi, fr and ja


author: Thomas Woerner <twoerner@redhat.com> 1.2.0-1
changelog:
  - added port forwarding
  - using INPUT chain in table filter instead of RH-Firewall-1-INPUT
  - fixed masquerading
  - rewrite of firewall generation code
  - trusted hosts now also allowed for FORWARD
  - lots of bug fixes
  - gui enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.1-1
changelog:
  - fixed traceback for clean selinux configuration (rhbz#430963)
  - fixed icmp handling for ip6tables
  - updated translations: as, de, it, ja, pl, pt_BR, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.2-1
changelog:
  - fixed icmp handling for ip6tables in FORWARD chain
  - do state established, related test early in FORWARD chain
  - fixed typo in address for port-forwarding
  - added IPv4 only message to masquerading and port-forwarding for lokkit
  - updated translations: es, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.3-1
changelog:
  - fixed traceback for empty configuration use in life installer (rhbz#430963)
  - use config-util for userhelper configuration (rhbz#428392)
  - mark dirty after applying new default configuration
  - do not overwrite attributes filename and converted in config
  - use new shared ChooserButton
  - fixed forward dialog and labels to use current dialog width
  - use tempfile.mkdtemp for better security
  - updated translations: fi, fr, it, ja, nl, pt_BR, sr and sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.4-1
changelog:
  - fixed overwrite problem if IPTABLES_SAVE_ON_RESTART is set (rhbz#431961)
  - use SELECTION_NONE for trustedView


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-1
changelog:
  - new ICMP filter to block specified ICMP types
  - fixed minor problem in lokkit (initialize old_config)
  - set starting diretory for custom rules files to /etc/sysconfig
  - more build environment changes for git
  - use gtk.CellRendererToggle instead of own CellRendererCheck
  - several parser changes for transparent error handling and output
  - some minor enhancements
  - translation updates


author: Thomas Woerner <twoerner@redhat.com> 1.2.7-1
changelog:
  - fixed crash if encoding is not UTF-8 (rhbz#439902)
  - updated translations: bn_IN, cs, de, es, fi, fr, gu, hi, it, kn, ko, ml,
                          mr, pa, pl, pt_BR, ru, sr, sr@latin, ta, te, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-1
changelog:
  - new tui interface
  - new system-config-firewall-tui
  - new client services for ipp and samba
  - lokkit: fixed disabling of firewall in force mode (rhbz#443411)
  - disabled port forwarding for IPv6
  - some minor fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - fixed format string to silence inttool
  - new remider to check if the ip*tables services are enabled
  - use proper dialog functions in the tui
  - updated translations: cs, de, es, gu, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - lokkit: fixed path for system-config-firewall-tui (rhbz#454108)
  - updated translations for: it, fr, nl, ru, sr, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - use dialogs for parser errors in tui (rhbz#457485)
  - enable to add protocol specific (IPv4, IPv6) icmp types for ICMP filtering
  - updated translations for he, ja, ko and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - only provide lang files in tui sub-package (rhbz#465572)
  - updated translations for: as, bn_IN, ca, cs, es, fr, gu, it, ja, kn, mr, nl,
                              pa, or, pl, pt_BR, sk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - fixed two typos in fw_icmp (rhbz#467334)
  - added ability to sort custom rules files (rhbz#467696)
  - fixed modified test in sysctl writer: fixes rhbz#462325
    also removed quotes around values for new keys
  - some build fixes
  - updated translations for: as, de, fi, fr, he, hi, ko, hu, it, ja, ko, ml,
                              pl, pt_BR, ru, sk, sr, sr@latin, sv, ta, te, 
                              zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new build environment using configure, autofoo and intltool
  - fixed typo in router-solicitation description (rhbz#490979)
  - new themable application icon: preferences-system-firewall (rhbz#454402)
  - make backup copies before overwriting files (rhbz#437374)
  - updated translations:


author: Thomas Woerner <twoerner@redhat.com> 1.2.15-1
changelog:
  - fixed icon reference in desktop file (rhbz#493674)
  - fixed po/POTFILES.in
  - updated translations: as, bn_IN, el, fi, gu, hi, hu, it, kn, ko, mai, ml, mr, or, pa, pt, ru, sk, sv, ta, te, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.16-1
changelog:
  - fixed build system to update desktop file from desktop.in
    fixes icon reference in desktop file (rhbz#493674)
  - updated translations: fr


author: Thomas Woerner <twoerner@redhat.com> 1.2.17-1
changelog:
  - Added Red Hat Cluster Suite to trusted services (rhbz#493668)
  - Fixed wrong patch for system-config-firewall-tui (rhbz#461046)
  - Fixed sysctl parser to also support ';' for comments
  - Fixed port range check for service names containing '-'
  - New column in serviceView for conntrack helper, removed from tooltip
  - New column in icmpView for protocol types, removed from tooltip
  - Added TFTP and TFTP client support (rhbz#494417)
  - Fixed sensitiveness of OK button in portDialog if editing an Port
    (rhbz#500380)
  - Added missing tooltips for buttons in mainNotebook tabs. (rhbz#493872)
  - updated po files


author: Thomas Woerner <twoerner@redhat.com> 1.2.18-1
changelog:
  - added support for PolicyKit
  - removed unused inconsistent flag from CellRendererToggle in serviceView (rhbz#521144)
  - made "Port/Protocol" cell resizable in "Trusted Services"-view
  - fixed hidden one line label after resize caused by fix for bgo#315462
  - fixed startup busy loops if assistive technologies is enabled (rhbz#515048)
    by moving set_model after adding the columns to a TreeView
  - fixed tui to create valid empty self.config object (rhbz#518210)
  - failing to load the icon in fw_gui.setupScreen should not be fatal
    (rhbz#508186)
  - made description column in settings dialog resizable
  - removed rhpl usage (rhbz#508991)
  - fixed not reappearing TreeViewTooltips if mouse moved in the tooltip popup
  - hide TreeViewTooltips while scrolling
  - code cleanup
  - sort ports in fw_services by protocol, id
  - updated translations: as, bn_IN, ca, da, de, es, fi, fr, gu, hi, kn, hu, it, 
                          ja, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk, sr,
  			sr@latin, ta, te, uk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.19-1
changelog:
  - enhanced build environment to support usermode and policykit switches, new
    options for configure and spec file
  - make toplevel invisible to not show half initialized window while policykit
    dialog is shown
  - system-config-firewall.desktop.in moved to config subdir
  - disable dbus usage if gui is used as root (needed for policykit v0)
  - do not report dbus error if there is no firewall configuration (empty or
    missing /etc/sysconfig/system-config-firewall)
  - resize main window to comfortably fit in a 800x600 gnome desktop
  - moved all config files into config subdir: sysconfig, dekstop, pam and console
  - new infrastructure to enable policy translations
  - print exception if polkit authorization failes to console
  - show dbus error dialog if dbus conection can not be established
  - set title to APP_NAME for dialogs if there is no title
  - center dialogs on screen if there is no parent
  - make main app invisible at first to prevent to show an empty app while
    PolicyKit password dialog is visible
  - updated translations: as, bn_IN, ca, da, de, ca, cs, es, fi, fr, gu, hi, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk,
                          sr, sr@latin, sv, ta, te, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.21-1
changelog:
  - fixed Policykit v0 compatibility for Fedora version 10 and 11: python-slip
    for PolicyKit v0 does not provide dbus
  - updated translations: bn_IN, uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.22-1
changelog:
  - using NetworkManager DBUS interface to replace NCDeviceList from
    system-config-network
  - not opening orig port for local port forwarding, only new port is open
  - added isakmp support for IPsec (rhbz#504446)
  - added amanda client support (rhbz#541679)
  - fixed requirement for setenforce: libselinux-utils instead of libselinux
  - removed unused import socket
  - added download url to Source tag in spec file
  - fixed wrong license header in src/fw_tui.py (LGPL instead of GPL)
  - update cluster-suite service: disable rgmanager and cssd
  - removed separator at the end of the Options menu (rhbz#531635)
  - removed 2049/udp from NFS4 service (rhbz#532491)


author: Thomas Woerner <twoerner@redhat.com> 1.2.24-1
changelog:
  - DBUS-mechanism: report errors to syslog and print traceback (rhbz#563354)
  - fixed minor misspellings (rhbz#566468)
  - msgmerged po files
  - added missing default values for ip*tables-config content (rhbz#566869)
  - autofoo utils update
  - fixed max length of user defined interface name in interfaceDialog
  - added missing range check to port_entry_changed_cb
  - fixed sensitiveness of protocol label in portDialog
  - fixed misuse of MARK extension in nat table, now in mangle table
  - port forwarding dialog usability fixes (rhbz#507638)
  - use new fw_functions.checkInterface function in tui and gui
  - new function to check interface names in fw_functions
  - use new checkInterface function in parser for trust, masq and forward-port
  - add wlan standard device
  - fixed build (fw_nm.py not packaged)
  - updated translations: bn_IN, cs, da, de, el, en_GB, es, fi, fr, hu, is, it,
                          ja, nb, nl, or, pl, pt, pt_BR, ru, sr, sr@latin, sv,
                          te, uk


author: Thomas Woerner <twoerner@redhat.com> 1.2.25-1
changelog:
  - fixed lokkit: do not create or alter firewall in selinux only mode
    (rhbz#583986)
  - use new icons (rhbz#583715)
  - fixed treeviewtooltips to not show the tooltip if an overlapping window has
    the focus
  - updated translations: bn_IN, de, es, gu, it, kn, ml, mr, nl, or, pa, pl, pt,
                          pt_BR, ru, sk, sr, sr@latin, te


author: Thomas Woerner <twoerner@redhat.com> 1.2.26-1
changelog:
  - added libvirt services (rhbz#565625)
  - added Bakula service (rhbz#588377)
  - fixed DBUS mechanism to report complete syslog message (rhbz#604623)
  - fixed crash because of missing /etc/services file (rhbz#604726)
  - updated translations: ar, as, bn_IN, da, de, es, fi, fr, gu, he, hi, is, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, ru, ta, te, 
                          zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.28-1
changelog:
  - added firewalld check to prevent usage of s-c-fw if firewalld is running
  - fixed gtk_label_autowrap not to change alignments
  - fixed port of libvirt-tls (rhbz#565625)
  - fixed requirement for newt-python (was newt before)
  - return -2 for ports > 65535 in fw_functions.getPortID for better port error
    reporting
  - hide dialogs before going on (rhbz#643966)
  - updated translations: ca, de, he, hi, ja, nb, pa, pt, sk, sv, ta, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Dave Lehman <dlehman@redhat.com> 1.0.1-1
changelog:
  - Fix bugs in writeDumpConfig and writeBootloaderConfig
  - Fix handling of pre-existing "ifc" and "default" directives
  - Always leave network interface checkbutton sensitive
  - Various minor fixes


author: Dave Lehman <dlehman@redhat.com> 1.0.2-1
changelog:
  - add support for "core_collector" and "path" handlers
  - give choices of "ssh" and "nfs" instead of "net"
  - validate results of edit location dialog
  - add choice of "none" to default actions
  - remove "ifc" support since it's gone from kexec-tools
  - update kdump config file header
  - fix a couple of strings that weren't getting translated


author: Dave Lehman <dlehman@redhat.com> 1.0.4-1
changelog:
  - all location types now in combo box (no text entry for type)
  - preserve comment lines from kdump.conf instead of writing config header
  - add hicolor icon from Diana Fong


author: Dave Lehman <dlehman@redhat.com> 1.0.5-1.an7
changelog:
  - fix install make target to specify modes where needed
  - remove unnecessary %preun
  - various specfile fixes to appease rpmlint


author: Dave Lehman <dlehman@redhat.com> 1.0.7-1.an7
changelog:
  - rework memory constraints for increased flexibility (#215990)
  - improve consistency WRT freezing/thawing of widgets (#215991)
  - update translations (#216596)


author: Dave Lehman <dlehman@redhat.com> 1.0.10-1.an7
changelog:
  - handle ia64 bootloader correctly
    Resolves: #220231
  - align memory requirements with documented system limits
    Resolves: #228711


author: Dave Lehman <dlehman@redhat.com> 1.0.12-1.an7
changelog:
  - prompt user for a PAE kernel for 32-bit xen with >4G memory (Jarod Wilson)
    Resolves: rhbz#284851


author: Dave Lehman <dlehman@redhat.com> 1.0.13-1.an7
changelog:
  - handle kdump service start/stop
    Resolves: rhbz#239324
  - only suggest reboot if memory reservation altered
    Related: rhbz#239324
  - preserve unknown config options
    Resolves: rhbz#253603
  - add 'halt' default action
    Related: rhbz#253603


author: Roman Rakus <rrakus@redhat.com> - 2.0.10-1
changelog:
  - always enable auto option
  - always use memory info from /proc/meminfo
  - Resolves: #859096, #859020


author: Roman Rakus <rrakus@redhat.com> - 2.0.10-3
changelog:
  - Use kdumpctl and systemctl instead of service command
  - Default action changed so accordingly change also our message
  - Configuration for nfs and ssh changed
    Resolves: #886321,#883769,#883638


author: Martin Milata <mmilata@redhat.com> - 2.0.13-1
changelog:
  - Update to 2.0.13
  - New version incorporates several bugfixes and adds support for x86 EFI
    systems


author: Martin Milata <mmilata@redhat.com> - 2.0.13-5
changelog:
  - Fix broken Reload button
  - Resolves: #1052042
  - Update default core_collector to use LZO compression
  - Resolves: #1047816


author: Martin Milata <mmilata@redhat.com> - 2.0.13-9
changelog:
  - Set PATH in backend so that zipl knows where to find dmsetup (affects only s390x)
  - Resolves: #1077113


author: Than Ngo <than@redhat.com> - 2.0.13-17
changelog:
  - Resolves: bz#1258363 - gtkWarning showing in terminal while launch kdump
  - Resolves: bz#1279298 - system-config-kdump throws traceback on keyboard interruption
  - Resolves: bz#1082420 - error display Basic Settings option "Current kdkump Memory" value
  - Resolves: bz#1077470 - target settings option "Raw device" does not list VirtIO devices
  - Resolves: bz#1384943 - add fadump memory reservation support in system-config-kdump (fadump)
  - Resolves: bz#1404780 - add support variable amount of memory as crashkernel value


author: Brent Fox <bfox@redhat.com> 0.9.2-1
changelog:
  - Wrap the destroy call in a try/except because there is no self.mainWindow in firstboot reconfig mode


author: Brent Fox <bfox@redhat.com> 1.0.3-1
changelog:
  - add a us keymap to keymaps with non-latin chars (bug #82440)
  - write out the XkbVariant line if it is present
  - handle XkbOptions to allow toggling between keymaps


author: Brent Fox <bfox@redhat.com> 1.2.1-1
changelog:
  - renamed from redhat-config-keyboard
  - add Obsoletes for redhat-config-keyboard
  - make changes for Python2.3


author: Pete Graner <pgraner@redhat.com> - 1.2.11-2
changelog:
  - Updated License tag per Fedora Licenseing Guidlines.
  - Removed  --add-category X-Red-Hat-Base to fix build errors


author: Jesse Keating <jkeating@redhat.com> - 1.2.11-4
changelog:
  - Patch to work with new firstboot (#424811)
  - Add requires for kudzu/newt (#177301)
  - Update url (#235072)
  - Remove obsolete no translation (#332301)


author: Lubomir Kundrak <lkundrak@redhat.com> 1.2.15-1
changelog:
  - New upstream release
  - Fix possibility to cancel in TUI (#216132)
  - Use system icon set (#291261)
  - Fix install places and permissions


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.15-5
changelog:
  - Include icon in anaconda keyboard selection screen (#469165)
  - Remove extension from desktop entry icon


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.15-8
changelog:
  - system-config-keyboard-1.2.15-nolayout.patch: insert a default ServerLayout
    section if none is found.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-5
changelog:
  - Apply patches from itamarjp, landgraf, mschwendt to fix:
    - Needs pyhon-dbus: https://bugzilla.redhat.com/show_bug.cgi?id=708631
    - Missing OK button: https://bugzilla.redhat.com/show_bug.cgi?id=646041


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
  - Add dependency on newt-python (#845391, Sandro Mani).
  - Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
  - use consistent names for patches, create backup files
  - use polkit/pkexec instead of consolehelper
  - add man page


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
  - version 1.4.0
  - remove ancient obsoletes and bogus requirements
  - require systemd >= 30 for localed
  - update gtk-update-icon-cache scriptlets


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added file dialog box
  - cleaned up code
  - renamed okButton to saveButton in ksconfig.py
  - renamed Cancel button to Exit in interface
  - added /boot to default partition list
  - added menu icon


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added scrollwindow around partition information
  - made all widgets except partition scrollwindow unexpandable so that when the main window is resized only the partition list gets bigger
  - increased release number


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added emulate three buttons and probe for mouse options
  - added preview configuration window
  - modified basic.py to use dictionaries to store combo box selections


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added po directory
  - added grub password and initialize the disk label
  - added help manual and function to display it


author: Tammy Fox <tfox@redhat.com>
changelog:
  - Added optional ftp username and password
  - Added preview menu item
  - Added bootloader --upgrade
  - Added swap --recommended
  - Added %packages -- resolvedeps and %packages --ignoredeps


author: Brent Fox <bfox@redhat.com>
changelog:
  - completed the port to gtk2
  - Fixed bug 65835
  - Fixed bug 66815
  - Fixed bug 64453 (with help from menthos@menthos.com)


author: Tammy Fox <tfox@redhat.com> 2.3.2-2
changelog:
  - Updated list of langs
  - Reimplemented keyboard list to use list from rhpl
  - Fix for iter_next change


author: Brent Fox <bfox@redhat.com> 2.3.2-16
changelog:
  - Don't write out --emulthree if No Mouse is selected
  - Fix gtk.glade.bindtextdomain so that the glade screens pull in translations


author: Brent Fox <bfox@redhat.com> 2.3.4-1
changelog:
  - Handle opening existing kickstart files
  - Handle multiple ethernet interfaces
  - Don't require rootpassword on upgrades


author: Brent Fox <bfox@redhat.com> 2.3.4-2
changelog:
  - rebuild for completeness
  - added some new system profiling code, but it's not exposed in the UI yet


author: Brent Fox <bfox@redhat.com> 2.5.11-2
changelog:
  - handle missing mouse line (bug #124341)
  - use N_ instead of _ in packages.py (bug #124144)
  - remove code for dead firewall widgets (bug #124342)


author: Chris Lumens <clumens@redhat.com> - 2.5.16-1
changelog:
  - Fix display in indic locale (#138310) and (#138601)
  - Monitor order (#127477)
  - Translation of RAID message (#127687)
  - Unencrypted root passwords (#134678)
  - Broken nfs line parsing (#134681)


author: Chris Lumens <clumens@redhat.com> - 2.5.18-1
changelog:
  - Get package group lists and their translations out of the comps.xml file
    instead of reying on a built-in (and out of date) list.
  - Added an "Install Everything" button (#134679).


author: Chris Lumens <clumens@redhat.com> - 2.5.19-1
changelog:
  - Fixed a segfault in pygtk on the partitioning screen.
  - Fixed RAID editing screen so the config values don't change if you
    repeatedly edit a RAID volume.


author: Chris Lumens <clumens@redhat.com> 2.5.24-1
changelog:
  - Remove mouse and langsupport.  These two options have been removed from
    kickstart so we shouldn't be generating invalid files.
  - Fail if we read a line we don't understand instead of being silent.
  - Deal with drivers instead of cards due to kudzu changes.


author: Chris Lumens <clumens@redhat.com> 2.6.4-1
changelog:
  - Convert package selection to using pirut (#178759).
  - Partitioning screen fixes for cciss.
  - Use consolehelper.


author: Chris Lumens <clumens@redhat.com> 2.6.10-1
changelog:
  - Fix unencrypted root password traceback (#190487).
  - Try harder to get a base repo enabled (#190508).


author: Chris Lumens <clumens@redhat.com> 2.6.14-1
changelog:
  - Use updated translations (#210728).
  - Update documentation (#210863).
  - Don't enable yum plugins.
  - Disable popup menu on the package selection screen.


author: Chris Lumens <clumens@redhat.com> 2.6.15-1
changelog:
  - Don't need to be root to run system-config-kickstart (patch from
    Panu Matilainen <Panu.Matilainen@nokia.com>, #211998).


author: Chris Lumens <clumens@redhat.com> 2.6.18-1
changelog:
  - Don't require a root password (#215190).
  - Disable package screen if yum couldn't download (#216439).


author: Chris Lumens <clumens@redhat.com> 2.7.0-1
changelog:
  - Use system-config-securitylevel to provide the firewall page.
  - Speed up startup and shutdown.
  - If package selection is disabled, don't forget whatever was in the
    original kickstart file (#217165).


author: Chris Lumens <clumens@redhat.com> 2.7.1-1
changelog:
  - Update to use new pykickstart.
  - Don't traceback if no monitor or x driver is selected.
  - Handle pykickstart exceptions by displaying an error dialog.


author: Chris Lumens <clumens@redhat.com> 2.7.2-1
changelog:
  - Add package-level selection and removal (#222592).
  - Add UI for the key command (#226718).
  - Fix iter handling on the partition screen for auto partitions (#225087).


author: Chris Lumens <clumens@redhat.com> 2.7.4-1
changelog:
  - Fix loading packages section (#232285).
  - Fix preview/save on upgrade (#232282).
  - Add UI for authconfig's --ldaploadcert option (#232664).


author: Chris Lumens <clumens@redhat.com> 2.7.5-1
changelog:
  - Default to installing instead of upgrading.
  - Set a default SELinux setting when started up.
  - Don't write out remove lines for packages not available on the
    installation architecture.


author: Chris Lumens <clumens@redhat.com> 2.7.12-1
changelog:
  - Rework network device dialog to not use four input boxes for each address.
  - Don't require a gateway or nameserver address (#215191).


author: Chris Lumens <clumens@redhat.com> 2.7.13-1
changelog:
  - Fix a traceback when importing yum (#337161).
  - Remove obsolete translation (#332501).
  - Rework bootloader UI to make it easier to add other arches.


author: Chris Lumens <clumens@redhat.com> 2.7.14-1
changelog:
  - Don't destroy the save dialog when it's closed.
  - If the key checkbutton is not active, remove the key setting (#226718).
  - Fix typo in LDAP authconfig parameter (#239817).
  - Use F1 as the help shortcut (#429959).
  - Translation updates (#429611).
  - More error handling when yum fails to init (#426447).
  - Update documentation license (#419071, kwade).


author: Chris Lumens <clumens@redhat.com> 2.7.15-1
changelog:
  - Offer the same passalgo options that authconfig now does (#173867).
  - Don't traceback if saving doesn't work (#436406).
  - When the Cancel button is pressed, quit (#436406).
  - Prompt for a disk/part when RAID is selected (#432914).
  - Fix another typo in ldaploadcacert handling.
  - If the kickstart file cannot be opened, display an error (#431950).


author: Chris Lumens <clumens@redhat.com> 2.7.17-1
changelog:
  - Support --display= (#450431).
  - No longer use rhpl for translations.
  - Sort keyboard list by descriptive name, not by console map.
  - Remove most of the xconfig and monitor command support.
  - Use s-c-date's timezone list since that's what anaconda does (#445195).


author: Chris Lumens <clumens@redhat.com> 2.7.20-1
changelog:
  - Don't make the open dialog tiny.
  - Fix a traceback caused by methods moving out of GroupSelector.py in anaconda.
  - Don't remove the byte-compiled python files from a scriptlet.


author: Chris Lumens <clumens@redhat.com> - 2.7.21-1
changelog:
  - Add "make bumpver" target from pykickstart.
  - Translate spaces in timezones to underscores when reading and writing (#475129).


author: Chris Lumens <clumens@redhat.com> - 2.7.22-1
changelog:
  - Use dataList().append when adding partitions and network devices (#492100).
  - Update translation files (#490018). (clumens)
  - Lots of translation file udpates.


author: Chris Lumens <clumens@redhat.com> - 2.8.0-1
changelog:
  - Allow specifying anything for a network device name, not just ethX (#508089).
  - Don't traceback when opening files with null bytes (#508092).
  - Make the OK button on some dialogs insensitive until changes happen (#493887).
  - Don't traceback if the filename entry is blank (#500409).
  - Lots more UI style/layout updates (#493842, #493857, rrakus).
  - Don't traceback if given an invalid language or timezone (#487390).
  - Update to glade3 (#495754, rrakus).
  - Add a progress window when saving or previewing files (#493879, rrakus).
  - Use the standard about/license dialog (rrakus, #493926).
  - Center dialogs on the parent (rrakus, #493823).


author: Chris Lumens <clumens@redhat.com> - 2.8.1-1
changelog:
  - Change the skipx blurb to make more sense (#493835).
  - Update to using python-meh for exception handling instead of rhpl.
  - Do VERSION substitution on all files.


author: Chris Lumens <clumens@redhat.com> - 2.8.3-1
changelog:
  - Add ext4, make it the default (#544079).
  - Add support for authconfig --enablefingerprint (#539371).
  - Fix an import error (#530739, nelsoninva AT gmail.com).
  - Update lots of translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.4-1
changelog:
  - Don't overwrite tsInfo with a new instance (#541052). (clumens)
  - Correct rpmlint errors found with the .spec file. (clumens)
  - Use OptionParser instead of the old getopt module (#553045). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.6-1
changelog:
  - Don't traceback when loading the Preview dialog a second time (#593259). (clumens)
  - Don't install the icon to /usr/share/system-config-kickstart too (#594361). (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.7-1
changelog:
  - pykickstart raises KickstartError instead of IOError now. (clumens)
  - Clear the partition store whenever a file is loaded (#610740). (clumens)
  - Remove the key entry as well, since that command no longer exists. (clumens)
  - Remove the deprecated interactive mode. (clumens)
  - anaconda has changed all around, so fix the GroupSelector import. (clumens)
  - Fix --help argument handling (#621379). (clumens)
  - Update translation files (#617075). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.8-1
changelog:
  - Fix an importing bug caused by the previous patch. (clumens)
  - Don't traceback when starting up outside of X (#676338). (clumens)
  - Convert spec to UTF-8. (notting)


author: Chris Lumens <clumens@redhat.com> - 2.8.9-1
changelog:
  - Put /usr/share/system-config-kickstart at the front of the path (#820748). (clumens)
  - Fix "make local" to not pack up .git/ as well. (clumens)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Fix translation files so "msgfmt -c " passes and they'll upload to transifex. (clumens)
  - Add transifex configuration file. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.10-1
changelog:
  - Update glade file to fix translation building. (clumens)
  - Fix various problems when packaging up translations. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.0-1
changelog:
  - Fix another problem updating the .po file.
  - Remove support for python-meh.  It requires gtk3.
  - Add the old anaconda GroupSelector.py to system-config-kickstart (#859928).
  - It helps to import the exceptions I want to catch (#893282).
  - Do @VERSION@ substitution on the main program, too (#866563).


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
  - Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
  - Remove the documentation (#915737). (clumens)
  - Display hidden groups in the package selection UI (#915029). (clumens)
  - Default to SHA512, same as anaconda (#915013). (clumens)
  - Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
  - Transifex has moved, so update the config. (clumens)
  - Remove the Japanese-specific man page. (clumens)
  - Update the system-config-kickstart man page to something useful (#948447). (clumens)
  - Fix a typo. (clumens)


author: Naveen Kumar <nkumar@redhat.com>- 1.3.4-2
changelog:
  - apply patch scl-1.3.4-devel.patch
  - contains some enhanc. reg. force. change of lang. when dep. are not installed 
  - Resolves Bug #568688


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-2
changelog:
  - resolves bug #624008
  - apply patch s-c-l-624008.patch
  - adds Low-German (nds_DE) to s-c-l
  - comment a redundant line in language_backend.py


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-5
changelog:
  - apply patch s-c-l-634556.patch
  - resolves bug #634556
  - modifications in s-c-l to install even conditional & default packages


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-19
changelog:
  - Resolves:rh#886446 - system-config-language tracebacks in TUI mode
  - Resolves:rh#892560 - system-config-language only provides english in Fedora 18
  - Resolves:rh#889956 - include language Kashmiri Arabic


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Tim Waugh <twaugh@redhat.com> 0.7.7-1
changelog:
  - Updated to system-config-printer-0.7.7.
  - Updated to pycups-1.9.9.
  - Desktop file.
  - Requires PyXML.


author: Tim Waugh <twaugh@redhat.com> 0.7.7-2
changelog:
  - Ship PAM and userhelper files.
  - Requires usermode.
  - Added missing options.py file.
  - Fix getClasses() in pycups.


author: Tim Waugh <twaugh@redhat.com> 0.7.31-1
changelog:
  - 0.7.31:
    - Select recommended driver automatically (bug #208606).
    - Better visibility of driver list (bug #203907).


author: Tim Waugh <twaugh@redhat.com> 0.7.32-1
changelog:
  - Updated to pycups-1.9.13 for HTTP_FORBIDDEN.
  - 0.7.32:
    - Handle HTTP errors during connection (bug #208824).
    - Updated translations (bug #208873).


author: Tim Waugh <twaugh@redhat.com> 0.7.36-1
changelog:
  - 0.7.36:
    - Match against commandset (bug #214181).
    - Parse 'ieee1284' foomatic autodetect entries (bug #214761).
    - Don't remove foomatic PPDs from the list (bug #197331).


author: Tim Waugh <twaugh@redhat.com> 0.7.38-1
changelog:
  - Updated pycups to 1.9.15.
  - 0.7.38:
    - Fixed a bug in the 'ieee1284'/'ppd-device-id' parsing code.


author: Tim Waugh <twaugh@redhat.com> 0.7.39-1
changelog:
  - 0.7.39:
    - Busy cursor while loading foomatic and PPD list (bug #215527).
    - Make PPD NickName selectable.
    - Added SMB hint label on device screen (bug #212759).


author: Tim Waugh <twaugh@redhat.com> 0.7.40-1
changelog:
  - 0.7.40:
    - Removed username:password from hint string because we add that in
      afterwards.
    - Don't set button widths in create-printer dialog (bug #217025).


author: Tim Waugh <twaugh@redhat.com> 0.7.41-1
changelog:
  - Updated pycups to 1.9.16.
  - 0.7.41:
    - Reconnect smoothly after uploading new configuration.
    - Update lpoptions when setting default printer if it conflicts with
      the new setting (bug #217395).
    - Fixed typo in show_HTTP_Error (bug #217537).
    - Don't pre-select make and model when not discoverable for chosen
      device (bug #217518).
    - Set Forward button sensitive on Device screen in new-printer
      dialog (bug #217515).
    - Keep Server Settings selected after applying changes if it was selected
      before.
    - Set Connecting dialog transient for main window.
    - Center Connecting dialog on parent.
    - Optional 'reason' argument for cupshelpers.Printer.setEnabled.
    - Describe devices that have no optional parameters.


author: Tim Waugh <twaugh@redhat.com> 0.7.42-1
changelog:
  - 0.7.42:
    - Fixed typo in command set matching code.
    - Case-insensitive matching when Device ID not known to database.


author: Tim Waugh <twaugh@redhat.com> 0.7.43-1
changelog:
  - 0.7.43:
    - Don't check against IEEE 1284 DES field at all.
    - Merged device matching code (bug #219518).
    - Catch non-fatal errors when auto-matching device.
    - Fixed driver checking bug involving pipelines (bug #220347).
    - Show PPD errors (bug #220136).


author: Tim Waugh <twaugh@redhat.com> 0.7.44-1
changelog:
  - 0.7.44:
    - Fixed traceback in error display (bug #220136).
    - Preserve case in model string when dumping debug output.


author: Tim Waugh <twaugh@redhat.com> 0.7.47-1
changelog:
  - 0.7.47:
    - Fixed minor text bugs (bug #177433).
    - Handle shell builtins in the driver check (bug #222413).


author: Tim Waugh <twaugh@redhat.com> 0.7.49-1
changelog:
  - 0.7.49:
    - Fixed a traceback in the driver check code.
    - Fixed a typo in the conflicts message.
    - Handle InputSlot/ManualFeed specially because libcups does (bug #222490).


author: Tim Waugh <twaugh@redhat.com> 0.7.50-1
changelog:
  - 0.7.50:
    - Fixed hex digits list (bug #223770).
    - Added bs translation.
    - Don't put the ellipsis in the real device URI (bug #227643).
    - Don't check for existing drivers for complex command lines (bug #225104).
    - Allow floating point job options (bug #224651).
    - Prevent shared/published confusion (bug #225081).
    - Fixed PPD page size setting.
    - Avoid os.remove exception (bug #226703).
    - Handle unknown job options (bug #225538).


author: Tim Waugh <twaugh@redhat.com> 0.7.51-1
changelog:
  - 0.7.51:
    - Prevent display glitch in job options list when clicking on a printer
      repeatedly.
    - List conflicting PPD options, and embolden the relevant tab
      labels (bug #226368).
    - Fixed typo in 'set default' handling that caused a traceback (bug #227936).
    - Handle interactive search a little better (bug #227935).


author: Tim Waugh <twaugh@redhat.com> 0.7.52-1
changelog:
  - 0.7.52:
    - Sort models using cups.modelSort before scanning for a close
      match (bug #228505).
    - Fixed matching logic (bug #228505).


author: Tim Waugh <twaugh@redhat.com> 0.7.53-1
changelog:
  - No longer requires rhpl (since 0.7.53).
  - 0.7.53:
    - Use gettext instead of rhpl.translate.
    - Better layout for PPD options.
    - Added scrollbars to main printer list (bug #229453).
    - Set maximum width of default printer label (bug #229453).
    - Handle applying changes correctly when switching to another
      printer (bug #229378).
    - Don't crash when failing to fetch the PPD (bug #229406).
    - Make the text entry boxes sensitive but not editable for remote
      printers (bug #229381).
    - Better job options screen layout (bug #222272).


author: Tim Waugh <twaugh@redhat.com> 0.7.56-1
changelog:
  - 0.7.56:
    - Parse Boolean strings correctly in job options.
    - Small command-set list/string fix (bug #230665).
    - Handle hostname look-up failures.
    - Updated filter-to-driver map.
    - Don't parse printers.conf (bug #231826).


author: Tim Waugh <twaugh@redhat.com> 0.7.57-1
changelog:
  - Added URL tag.
  - 0.7.57:
    - Prevent traceback when removing temporary file (Ubuntu #92914).
    - Added print applet.


author: Tim Waugh <twaugh@redhat.com> 0.7.59-1
changelog:
  - 0.7.59:
    - Fixed a translatable string.
    - Set a window icon (bug #233899).
    - Handle failure to start the D-Bus service.
    - Ellipsize the document and printer named (bug #233899).
    - Removed the status bar (bug #233899).
    - Added an icon pop-up menu for 'Hide' (bug #233899).


author: Tim Waugh <twaugh@redhat.com> 0.7.60-1
changelog:
  - Updated to pycups-1.9.19.
  - Avoid %makeinstall.
  - 0.7.60:
    - Handle reconnection failure.
    - New applet name.


author: Tim Waugh <twaugh@redhat.com> 0.7.62-1
changelog:
  - 0.7.62:
    - Use standard icon for admin tool desktop file.
    - Fixed env path in Python scripts.
    - Applet: stop running when the session ends.
    - Prevent a traceback in the SMB browser (bug #225351).
    - 'Manage print jobs' desktop file.


author: Tim Waugh <twaugh@redhat.com> 0.7.65-1
changelog:
  - Build requires xmlto.
  - Updated to pycups-1.9.22.
  - 0.7.65:
    - Use urllib for quoting/unquoting (Val Henson, Ubuntu #105022).
    - Added kn translation.
    - Better permissions on non-scripts.
    - Added man pages.
    - Applet: status feedback.
    - Applet: fixed relative time descriptions.
    - Applet: limit refresh frequency.


author: Tim Waugh <twaugh@redhat.com> 0.7.66-1
changelog:
  - 0.7.66:
    - Allow job-hold-until to be set (bug #239776).
    - Implement new printer notifications.


author: Tim Waugh <twaugh@redhat.com> 0.7.67-1
changelog:
  - Don't put TrayIcon or SystemSetup categories in the desktop file.
  - Updated pycups to 1.9.24.
  - 0.7.67:
    - Fixed desktop files to have capital letters at the start of each
      word in the Name field (bug #242859).
    - Fixed crash when saving unapplied changes.
    - Fixed Device ID parser to always split the CMD field at commas.
    - New PPDs class means we no longer parse the foomatic XML database.


author: Tim Waugh <twaugh@redhat.com> 0.7.69-1
changelog:
  - No longer requires PyXML (bug #233146).
  - Moved applet to main package.
  - 0.7.69:
    - Use HardwareSettings category for my-default-printer desktop
      file (bug #244935).
    - Removed unused code.
    - Filter PPDs by natural language (bug #244173).


author: Tim Waugh <twaugh@redhat.com> 0.7.70-1
changelog:
  - Requires pirut for system-install-packages.
  - 0.7.70:
    - Increased GetReady->NewPrinter timeout.
    - More binary names mapped to package named.
    - Run system-install-packages to install missing drivers (bug #246726).
    - Less debug output.
    - Desktop file fixes for KDE (bug #247299).


author: Tim Waugh <twaugh@redhat.com> 0.7.71-1
changelog:
  - 0.7.71:
    - Don't discard make/model-matched devices when there are ID-matched
      devices (Till Kamppeter).
    - Fixed fallback if no text-only driver is available (Till Kamppeter).
    - Initialise the make/model list when an ID match failed (Till Kamppeter).
    - Better error-handling in default-print application (Ubuntu #129901).
    - UI tweak in admin tool (Ubuntu #128263).
    - Handle socket: URIs (Ubuntu #127074).


author: Tim Waugh <twaugh@redhat.com> 0.7.72-1
changelog:
  - 0.7.72:
    - Fixed my-default-printer traceback.
    - Improvements to New Printer wizard (Till Kamppeter).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.1-1
changelog:
  - 0.7.74.1:
    - Updated Polish translation (bug #263001).
    - Don't select the default printer after changes to another printer have
      been made.
    - Always construct URI from input fields when changing device (bug #281551).
    - Avoid busy-cursor traceback when window is not yet displayed.


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-1
changelog:
  - Updated pycups to 1.9.27.
  - 0.7.74.2:
    - When a class is removed on the server, remove it from the UI.
    - When deleting a printer, select the default printer again.
    - Select newly-copied printer.
    - Updated translation (fi).
    - Better --help message.
    - Use strcoll to sort manufacturer names.
    - Avoid duplicate 'recommended' marks.
    - Remove duplicate device URIs.
    - Handle IPP_TAG_NOVALUE attributes (for CUPS 1.3.x).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-2
changelog:
  - Pull in SVN patch from stable branch for 'Allow printing from
    the Internet' check-box (bug #221003).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.4-1
changelog:
  - Changed PreReq to Requires.
  - Mark console.apps file as a config file.
  - Mark pam file as a config file (not replaceable).
  - No need to ship empty NEWS file.
  - Give cupsd.py executable permissions to satisfy rpmlint.
  - Provides system-config-printer-gui.
  - Mark D-Bus configuration file as a config file.
  - Fixed libs summary.
  - Better buildroot tag.
  - Better defattr.
  - Preserve timestamps on explicitly install files.
  - Make example pycups program non-executable.
  - 0.7.74.4:
    - Updated translations.
    - Several small bugs fixed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No need to run update-desktop-database because there are no MimeKey
    lines in the desktop files.
  - Consistent macro style.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Requires notification-daemon (Ubuntu #176929).
  - Requires gnome-python2 for theme support (Ubuntu #176929).
  - Requires gnome-icon-theme for printer icon (Ubuntu #176929).


author: Tim Waugh <twaugh@redhat.com> 0.7.82.1-1
changelog:
  - Requires /usr/bin/system-install-packages not pirut (bug #435622).
  - 0.7.82.1:
    - More trouble-shooting improvements.
    - applet: notify user about failed jobs (bug #168370).


author: Tim Waugh <twaugh@redhat.com> 0.9.91-1
changelog:
  - No longer requires system-install-packages (bug #444645).
  - Added pysmbc.  Build requires libsmbclient-devel.
  - Don't install consolehelper bits any more as they are no longer needed.
  - 0.9.91:
    - User interface overhaul, part 2.


author: Tim Waugh <twaugh@redhat.com> 1.0.4-1
changelog:
  - 1.0.4.
  - Applied upstream patch for pycups to fix getPrinterAttributes when
    requested_attributes is specified.


author: Tim Waugh <twaugh@redhat.com> 1.0.5-3
changelog:
  - Include other fixes from upstream including:
    - OpenPrinting API change (trac #74).
    - libnotify API change for 'closed' signal.
    - Notification for job authentication (trac #91).
    - Glade delete-event fixes (trac #88).
    - Pre-fill username in job authentication dialog (trac #87).


author: Tim Waugh <twaugh@redhat.com> 1.0.6-1
changelog:
  - Requires gnome-python2-gnome (bug #460021).
  - 1.0.6:
    - More delete-event fixes.
    - Fixed temporary file leak.
    - Fixed dialog leaks.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-1
changelog:
  - 1.0.7:
    - Efficiency improvements.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-1
changelog:
  - 1.0.8:
    - Use modelName from custom PPD to suggest name for new printer
      (trac #97).
    - Avoid display problem with installable options.
    - Better matching for Lexmark printers.
    - Catch exceptions from advanced server settings dialog (Ubuntu
        - Added some missing OpenPrinting query fields.
    - Jockey support added.
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-3
changelog:
  - Added patch for 1.0.x changes since 1.0.8:
    - Don't use a LinkButton for the 'Problems?' button (bug #465407).
    - Don't use a separator for the server settings dialog (bug
        - Don't set non-zero page size for SpinButtons.
    - Don't show an error dialog if an IPP operation's authentication
      dialog is cancelled by the user, but show an error dialog if the
      password was incorrect (bug #465407).
    - Set Server Settings... menu entry sensitive depending on whether
      we are connected to a server (Ubuntu #280736).
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-4
changelog:
  - Updated patch for 1.0.x changes:
    - Removed unneeded debugging output.
    - Don't show the applet in KDE (bug #466945).
    - Auth/error dialog improvements for SMB as for IPP (bug #465407).


author: Tim Waugh <twaugh@redhat.com> 1.0.8-6
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed SMB authentication dialog's cancel button (bug #467127).
    - Work around samba bug #5805 by sending debug output to stderr
      instead of stdout.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-1
changelog:
  - Updated to 1.0.12:
    - Don't automatically replace network printer URIs with
      HPLIP URIs (bug #473129).
    - Fixed some file descriptor and temporary file leaks.
  - Updated pycups to 1.9.44.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-2
changelog:
  - Added patch for 1.0.x changes since 1.0.12:
    - Smarter PPD cache in cupshelpers module.
    - Don't write back localized versions of globalized PPDs.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-3
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed problem that prevented authentication prompt being
      displayed.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-4
changelog:
  - Updated patch for 1.0.x changes:
    - Fix for advanced server settings dialog.
    - Fixes for troubleshooter to restore error_log fetching.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-5
changelog:
  - Added patch for pycups git changes since 1.9.44:
    - Look for test page file in new location for CUPS 1.4 (bug #476612).


author: Tim Waugh <twaugh@redhat.com> 1.0.12-6
changelog:
  - Updated patch for 1.0.x changes:
    - Look harder for locale/page size issues in the troubleshooter
      (trac #118).
    - Troubleshooter speed improvement (trac #123).
    - Localization fixes for authentication dialog (trac #122).
    - Character encoding fixes (trac #124).
    - Handle model names with more than one set of digits (Ubuntu #251244).
    - Catch unable-to-connect error when trying to print a test page
      (Ubuntu #286943).
    - Prevent crash when copying PPD options (Ubuntu #285133).
    - Use get_cursor for the printer properties treeview (Ubuntu #282634).
    - Fix IPP browser when trying to connect to host:port (bug #476396).
    - Make sure we're authenticating as the correct user in authconn.
    - Prevent traceback when adding printer driven by HPLIP
      (bug #477107).
    - Better display of available local HP fax devices.


author: Tim Waugh <twaugh@redhat.com> 1.1.3-5
changelog:
  - Updated from git:
    - Handle D-Bus failures when querying Jockey (bug #484402).
    - Set operation when fetching PPD from server (bug #484130).
    - Don't allow prompting when updating the UI for a server failure
      (bug #484130).
    - Fixed printing a test page from the applet (bug #484130).


author: Tim Waugh <twaugh@redhat.com> 1.1.3-7
changelog:
  - Updated from git:
    - Avoid tracebacks in main application (bug #484130) and job viewer.
    - Avoid unnecessary modal dialog when adding printer (bug #484960).
    - Don't use notification when authentication is required, just
      display the dialog.


author: Tim Waugh <twaugh@redhat.com> 1.1.4-1
changelog:
  - 1.1.4:
    - Skip model selection screen when adding a new printer for which we
      know the exact model.
    - Better integration for HPLIP hp and hpfax queues.
    - Work around HPLIP option parsing bug.
    - Pre-select the current device correctly.
    - Better descriptions for types of available connection.
    - Perform lowercase operations in a locale-independent manner (trac #151).


author: Tim Waugh <twaugh@redhat.com> 1.1.5-2
changelog:
  - Added patch for changes in 1.1.x since 1.1.5:
    - Strip " hpijs" from PPD names.
    - Handle there being no operation name set when authentication/retry
      is required.
    - Mark "Unauthorized" PolicyKit dialog strings for translation, and
      change that dialog to an error.
    - Work around marker-* attributes not being presented as lists
      (bug #489512).
    - D-Bus policy tweak.
    - Better PPD fallback searching.
    - Fixed model search oddity when no digits in model name.
    - Fixed locale save/restore in cupshelpers (bug #489313).
    - Use gtk.show_uri() instead of gnome.url_show() (trac #147).
    - Removed HPLIP probe screen (no longer needed).
    - Be certain of having the right cell when starting a rename
      (Ubuntu #333260).
    - Fixed strftime call (Ubuntu #334859).
    - Check dict before use when handling auth-info-required.
    - Handle timed operations being cancelled in the troubleshooter test
      print page (Ubuntu #325084).
    - Put pycups version requirement in monitor module.


author: Tim Waugh <twaugh@redhat.com> 1.1.6-1
changelog:
  - No longer requires gnome-python2-gnome.
  - Updated to 1.1.6:
    - Translatable string fix for authconn.
    - Romanian allow/deny translation fix (bug #489748).
    - Set glade's textdomain in the jobviewer (Ubuntu #341765).


author: Tim Waugh <twaugh@redhat.com> 1.1.7-1
changelog:
  - Requires dbus-python (bug #495392).
  - Updated to 1.1.7:
    - Updated translations.
    - Don't abort if the jobviewer couldn't show a notification.
    - Don't use setlocale() for locale-independent case conversion.
    - Don't assume the notification daemon can show action buttons.
    - Use case-insensitive matching for model names.
    - HPLIP compatibility fixes.
    - Fixed typo in jobviewer keyring support (Ubuntu #343156).
    - Added support for https device URIs (bug #478677).
    - Prevent traceback in monitor when connection failed (Ubuntu #343387).


author: Tim Waugh <twaugh@redhat.com> 1.1.7-4
changelog:
  - Changed requirement on notification-daemon to
    desktop-notification-daemon to allow for other implementations
    (bug #500587).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-1
changelog:
  - Updated pycups to 1.9.46.
  - Updated to 1.1.8:
    - Select a printer after adding it (trac #145).
    - Make sure the job and printer context menus cannot get out of date
      (trac #175, trac #172).
    - Fixed displayed hold time for held jobs.
    - Use grey ink-drop when there is no marker-colors value instead of
      crashing (bug #505399).
    - Scroll job list window to new job when appropriate.
    - Clean up temporary PPD files (bug #498743).
    - Fixed XML crash (Ubuntu #370469).
    - Fixed automatic printer model selection.
    - Fixed cupspk crash due to missing debugprint import (bug #496722,
      trac #161). 
    - Fixed PhysicalDevice crash (bug #496722, trac #161).
    - Adjusted border padding for New Printer window (bug #493862).
    - Set glade's textdomain in the job viewer (Ubuntu #341765).
    - Fixed URI parsing when verifying IPP URIs.
    - Set relaxed PPD conformance (trac #159).
    - Make troubleshooter work again by disabling cupspk for it.


author: Tim Waugh <twaugh@redhat.com> 1.1.8-2
changelog:
  - Make sure we find https URIs from https backend (bug #507628).
  - Avoid showing a non-fatal exception when adding an IPP printer
    (bug #507629).
  - Fixed traceback when adding/modifying printer which could lead to
    display bugs (bug #507489).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-3
changelog:
  - Use correct 'location' field for printers added remotely.
  - Parse nmblookup failures correctly in troubleshooter.
  - Prevent traceback on IPP notification after properties dialog
    cancelled.
  - Fixed handling of incorrect authentication when not using
    PolicyKit (bug #508102).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-5
changelog:
  - Use gpk-install-package-name instead of trying to use the D-Bus API.
  - Spot stopped jobs with CUPS 1.4 as well (trac #177).  This, along
    with the previous fix, addresses bug #509177.
  - Map gutenprint filenames to the package name.
  - Fixed sensitivity of class member selection arrows (bug #508653).


author: Tim Waugh <twaugh@redhat.com> 1.1.10-1
changelog:
  - 1.1.10:
    - New udev rules for adding/enabling/disabling USB printers
      automatically.
    - Now uses gnome-packagekit utility to install packages
      instead of the D-Bus API.
    - Fixed detection of stopped jobs with CUPS 1.4.
    - Fixed tracebacks when adding a new printer and when receiving
      IPP notifications.
    - Fixed 'location' field for printers added on remote CUPS servers.
    - Fixed handling of incorrect authentication.
    - Some UI and troubleshooter fixes have been made.


author: Tim Waugh <twaugh@redhat.com> 1.1.10-3
changelog:
  - Removed gnome-packagekit dependency.  The presence of
    gpk-install-package-name is detected at run-time, and the program
    acts accordingly.


author: Tim Waugh <twaugh@redhat.com> 1.1.11-1
changelog:
  - 1.1.11:
    - Several udev-configure-printer fixes.
    - Use case-insensitive PPD matching.
    - Better URI validity testing.
    - Another stale printer status icon fix.
    - Notice when jobs stop due to backend errors.
    - Warn about job history when renaming printers.
    - Small UI improvements.


author: Tim Waugh <twaugh@redhat.com> 1.1.11-4
changelog:
  - Compare MFG and MDL fields case insensitively when adding automatic
    queues, because HPLIP provides them with different case than the
    actual devices do.  Upstream HPLIP bug:
    https://bugs.launchpad.net/hplip/+bug/405804


author: Tim Waugh <twaugh@redhat.com> 1.1.11-5
changelog:
  - Applied patch from 1.1.x (3f45e96):
    - Show a 'paused' emblem for rejecting/disabled printers
      (bug #518020).
    - Set appropriate tooltip when configuring printer (bug #518007).
    - Use separate thread for verifying IPP queue (part of bug #518065).
    - Better driver preference order (bug #518045).


author: Tim Waugh <twaugh@redhat.com> 1.1.11-6
changelog:
  - Applied patch from 1.1.x (52a73b6).
    - Better printer icons representing status (bug #518020).
    - Use paused ico nwhen printer state reason is 'paused'.
    - Job status icon and state reason in jobs treeview (bug #518070).
    - Job creation times display fixes.
    - Use preferred object path for AuthenticationAgent (bug #518427).


author: Tim Waugh <twaugh@redhat.com> 1.1.12-1
changelog:
  - 1.1.12:
    - Troubleshooting fix.
    - Fixed applet traceback when printing test page.
    - Removed completed job notifications (trac #181).
    - Show printer status in printer icons (bug #518020).
    - Use paused icon when printer state reason is 'paused'.
    - Driver preference order fixes.
    - Job status icon and state reason display in jobs list
      (bug #518070).
    - Fixed overactive job creation times update timer.
    - Use preferred D-Bus object path for AuthenticationAgent
      (bug #518427).
    - Fixed disabling a printer when PolicyKit call fails.
    - Set appropriate status icon tooltip when configuration printer
      (bug #518007).
    - Use separate thread for verifying IPP queue (bug #518065).
    - Use newer tooltip API to avoid deprecation warnings.
    - Compare MFG/MDL case-insensitively in udev rule.
    - Support for cups-pk-helper's DevicesGet method.
    - Don't attempt to use PolicyKit if running as root.
    - Support for localized marker names (trac #183).
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-2
changelog:
  - Iconify jobs window into status icon.
  - Avoid showing the publish-printers dialog when not necessary.
  - Fixed traceback when cancelling change-driver dialog.
  - Fixed data button state.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-3
changelog:
  - Fixed missing import in probe_printer module.
  - Fixed race when fetching device list (bug #521110).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-4
changelog:
  - Troubleshoot: connect to the right server when choosing a network
    queue (bug #531482).
  - Strip 'zxs' and 'pcl3' from make-and-model (bug #531048).
  - Fixed visibility tracking for jobs window (bug #531438).
  - Don't display properties dialog for first test page (bug #531490).
  - Determine make/model for network printers (bug #524321).
  - Auto-select the correct driver entry for raw queues.
  - Avoid traceback in PhysicalDevice.py.
  - Let Return key activate the Find button for Find Network Printer.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-5
changelog:
  - Added upstream patch for custom state reasons (bug #531872).
  - Strip 'zjs' from make-and-model as well (bug #531869).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-8
changelog:
  - Fail gracefully if the new printer has disappeared before the user
    has responded to the test page prompt (bug #533109).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-12
changelog:
  - Prevent display of marker levels from making the properties dialog
    too big (bug #540826).
  - Place the window in the middle of the screen (bug #539876).
  - Fixed editability of PPD options for explicit IPP queues
    (bug #541588).


author: Tim Waugh <twaugh@redhat.com> 1.1.14-1
changelog:
  - 1.1.14:
    - Retry when reconnection fails (bug #541741).
    - Prevent traceback with bad marker-levels attribute (bug #541882).


author: Tim Waugh <twaugh@redhat.com> - 1.1.15-3
changelog:
  - Fixed cupsd.conf parsing when lines begin with blanks (bug #544003).
  - Don't overwrite BrowsePoll settings in basic settings dialog (bug #543986).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-1
changelog:
  - Updated pycups to 1.9.47.
  - 1.1.16:
    - Ignore com.apple.print.recoverable state reason.
    - Prevent traceback in found_network_printer_callback (bug #547765).
    - Use asynchronous connection class for fetching device lists
      (bug #549749).
    - Prefer Foomatic/hpijs to hpcups for the time being.
    - Clear device screen each time a new dialog is presented.
    - Constraints handling fix.


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-2
changelog:
  - Prefer foomatic-recommended drivers (bug #550108).
  - Pre-select correct driver when adding or changing a queue (bug #550075).
  - Fixed typo (bug #550096).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-3
changelog:
  - Fixed pycups IPPRequest attribute handling bug.
  - Make sure there are enough ink level values (bug #541882).
  - Make sure the printer we added still exists before selecting it
    (bug #551436).
  - Set notification timeouts appropriately (bug #550829).
  - Avoid traceback in NewPrinterGUI.init (bug #550442).
  - Avoid traceback in on_jobviewer_exit (bug #550437).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-9
changelog:
  - Clean up temporary files when localizing statereason (bug #552768).
  - Make sure serial device widgets are always initialized (bug #556488).
  - Handle errors more gracefully in userdefault.py (bug #556345).
  - Don't rely on cups-pk-helper being around (bug #556170).
  - Avoid traceback when checking on connecting backends (bug #555552).


author: Tim Waugh <twaugh@redhat.com> - 1.1.90-3
changelog:
  - Set model for LPD queue ComboEntry (bug #558484).
  - Only add current device to list when all devices found (bug #558524).
  - Fixed statereason localization for raw queues (bug #558156).
  - Fixed async fallback again (bug #557854).


author: Tim Waugh <twaugh@redhat.com> - 1.1.92-4
changelog:
  - Removed Device ID hacks for Kyocera and HP.  This avoids a false
    positive for the incorrect-Device-ID warning.


author: Jiri Popelka <jpopelka@redhat.com> 1.1.93-6
changelog:
  - Fixed pycups to be more cautious when removing
    the Connection object from the list (bug #567386).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-1
changelog:
  - Updated to pycups-1.9.49.
  - 1.2.0:
    - Another error handling fix in check-device-ids.py.
    - Added StartupNotify=true to 'manage print jobs' desktop file.


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-5
changelog:
  - Fixed pycups build with new distutils.
  - Fixed reconnection error handling in IPPAuthOperation class (bug #575198).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-8
changelog:
  - Fixed traceback in asyncipp (bug #576932).
  - check-device-ids: search harder for missing Device IDs.
  - Make inklevel widget easier to read (bug #576930).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-10
changelog:
  - Better inklevel 25/50/75 markers.
  - Fixed window transience for 'Change Device URI'.
  - More async traceback fixes (Ubuntu #547075).


author: Tim Waugh <twaugh@redhat.com> - 1.2.1-1
changelog:
  - Updated to 1.2.1:
    - Fixed missing translations (bug #580442).
    - Offer to adjust firewall when necessary.
    - Avoid tracebacks when adjusting server settings.
    - Handle IPP failure fetching printer attributes for completed jobs
      (Ubuntu #562679).
    - monitor: don't crash if job-state attribute is missing
      (Ubuntu #562441).
    - troubleshoot: handle IPPError in PrintTestPage module (bug #579957).
    - Lots of check-device-ids fixes.


author: Tim Waugh <twaugh@redhat.com> - 1.2.1-2
changelog:
  - Specify requested attributes in getJobs if possible (bug #584806).
  - Added optional requested_attributes argument to Connection.getJobs
    (bug #584806).


author: Tim Waugh <twaugh@redhat.com> - 1.2.2-1
changelog:
  - Updated to 1.2.2:
    - Check we are connected to the local server for server firewall
      changes and package installation.
    - Avoid Yes/No buttons (trac #204).
    - Set gettext domain for new printer dialog (Ubuntu #557199).
    - Make sure the printer we are changing the PPD for still exists
      and close New Printer window if not (bug #581668).
    - Specify requested_attributes in getJobs if possible (bug #584806).
    - Resolve DNS-SD hostnames for physical device comparision
      (trac #179).
    - jobviewer: PrinterURIIndex fix when no initial printer names and
      when looking up by name.
    - Don't fetch Device ID from network printer if we already know it.
    - Applet module no longer needs to import statereason.
    - Removed doubled-up 'translatable' attribute in UI file
      (Ubuntu #571662).
    - Fixed indentation in PK1Connection.getDevices.
    - No need to introspect CupsPkHelper every time, just once.
    - troubleshoot: turn off debugging before fetching error log.
    - Fixed localized state reasons (bug #587718).
    - Match Kyocera as manufacturer when only model name reported
      (Ubuntu #564633).
    - Fixed TreeIter handling in update_job_creation_times (bug #588409).
    - Make Verify buttons auto-sized (Ubuntu #575048).
    - Fixed a troubleshooter string and some SMB auth dialog strings
      that were not being translated (Ubuntu #557199).
    - Show unmatched IEEE 1284 Device IDs in less confusing format.
    - check-device-ids: run SNMP query for lpd URIs too.
    - Handle HTTPError from AdvancedServerSettingsDialog, and treat any
      HTTP errors as failures (bug #587744).
    - asyncconn/asyncipp: some fixes for connection/reconnection
      failures.
    - ppdsloader: watch out for errors when connecting.
    - Initialise GUI.printers in constructor (bug #589793).
    - Always use close_fds=True in subprocess.Popen calls (bug #587830).
    - Translation updates.


author: Tim Waugh <twaugh@redhat.com> - 1.2.3-1
changelog:
  - Updated to 1.2.3:
    - Use toolbar instead of menubar in JobsViewer (trac #205).
    - Fixed HTTPError status code handling when changing server
      settings.
    - Fixed traceback with driver auto-selection (bug #590193).
    - Only local filenames can be selected for troubleshoot.txt
      (bug #590529).
    - Fixed cups-pk-helper FileGet usage (bug #587744).
    - Escape printer names in error dialog markup (Ubuntu #567324).
    - Avoid traceback changing PPD for queue with bad PPD.
    - Attempt to translate backend device-info strings (Ubuntu #557199).
    - Don't buffer debugging output.
    - Avoid leaking Connection objects when cancelling jobs.
    - Threading fixes (trac #206).
    - Canon naming fixes from vendor.
    - Make deep copy of list of job ids to cancel (bug #598249).
    - Bluetooth auto-config support.
    - Restored keybindings/tooltips lost in switch to action groups
      (trac #208).
    - Spinner icon has to have more than one frame (bug #603034).
    - Add job to active_jobs only if we're interested in it
      (bug #604492).
    - Make sure automatically-created queues will work; delete queue if
      missing executables.
    - Don't add queues for Graphtec devices (bug #547171).
    - Avoid KeyError in AdvancedServerSettings.py (bug #606798).
    - Handle empty notify-subscribed-event subscription attributes
      (bug #606909).


author: Jiri Popelka <jpopelka@redhat.com> 1.2.4-1
changelog:
  - Updated to 1.2.4:
    - Error checking in on_job_cancel_prompt_response (bug #608283).
    - Fixed UDEV_RULES conditional; also, avoid unnecessary tests.
    - Fill in username before calling set_auth_info (bug #609515).
    - Make the 'Add' button actually do something.
    - Initialise downloadable_drivers dict earlier (bug #608815).
    - Strip ' BR-Script3' from the names of Brother PPDs.
    - Sanitize loading of non-existing icon (bug #612415).
    - udev helper: use CUPS defaults when connecting.
    - Blacklist certain printer state reasons (bug #520815).
    - Exclude dnssd backend from udev search.
    - Avoid double-destroy in ppdsloader.
    - Catch KeyError in jobviewer when printer uri not known (bug #615727).
    - Changed shebang in executables (bug #618357).
    - Make udev-configure-printer work for Bluetooth (Bastien Nocera).
    - Merged Till Kamppeter's patches.
      - Access OpenPrinting via the web query API with redirect support.
      - Prioritize DNS-SD-based URIs against IP-based URIs.
      - Added missing "import gobject" to probe_printer.py.
      - On discovered network printers do not only cache make and model but also the device ID.
      - Fix recognition of remote CUPS queues when setting up an IPP queue.
      - Added delay to the auto-start of the applet.
      - Do not error out on missing firewall D-Bus service.
      - Make multi-threaded driver package search via Jockey work.
      - Prioritize HP's hpcups driver against HPIJS.
      - Silence error messages of missing PrinterDriversInstaller D-Bus service.
      - Improvements for setting up Bluetooth printers.
      - udev-configure-printer: Match usblp, libusb, HPLIP, and USB device file URIs.
      - Fill the queue list when clicking "Probe" in LPD printer setup screen.
      - Remove the ":9100" from discovered "socket://..." URIs.
      - Integration of the dnssd CUPS backend and assosiation of DNS-SD names and IPs.
      - When setting up a printer search for local drivers before searching the internet.


author: Tim Waugh <twaugh@redhat.com> - 1.2.5-1
changelog:
  - 1.2.5:
    - CMD-field matching for PPDs (bug #630058).
    - Avoid crash in jobviewer (bug #640904).
    - Don't try to modify firewall for SNMP broadcast responses
      as it doesn't work (trac #214).
    - Correctly parse snmp backend output when fetching
      Device ID (bug #639394).
    - XmlHelper: Don't indent output when saving to file (bug #639586).
    - GroupsPaneModel: Avoid crash when removing queue (bug #639586).
    - Use "Do It Later" instead of "Cancel" for adjust firewall
      dialog (trac #213).
    - Delete Bluetooth printer's queue when unpaired.
    - Show examples of IPP URIs (bug #575795).
    - Use actual Device ID strings in 'no match' debug
      message (bug #630350).
    - Prevent disallowed characters in text entry fields when adding
      new printer (bug #621199).
    - Fixed race condition while renaming printer (bug #625502).
    - Request required job attributes rather than assuming they will
      be present in response (bug #635719).
    - Discard disallowed characters when renaming (bug #612315).
    - Mark more translatable strings (bug #634436).


author: Tim Waugh <twaugh@redhat.com> - 1.2.95-1
changelog:
  - 1.2.95.
  - Removed pycups and pysmbc tarballs as they are now packaged
    separately as python-cups and python-smbc.


author: Jiri Popelka <jpopelka@redhat.com> 1.2.96-1
changelog:
  - 1.2.96:
    - Remove reference to current printer on exit (bug #556548).
    - Handle cups.Connection() failure in PrinterURIIndexr (bug #648014).
    - Block unwanted characters when editing queue name (bug #658550).
    - Initialise D-Bus threading in timedops module (bug #662047).
    - many other fixes


author: Jiri Popelka <jpopelka@redhat.com> 1.2.96-3
changelog:
  - Fixed driver selection when there are duplicate PPDs available. (#667571)
  - Grabbing focus for editing breaks it (bug #650995).


author: Jiri Popelka <jpopelka@redhat.com> 1.2.97-1
changelog:
  - 1.2.97:
    - Handle failure to connect in PrinterURIIndex (bug #668568).
    - Fixed bugs in gtk_label_autowrap.py (bug #637829).
    - Avoid Foomatic/pxlmono until output size issue is fixed (bug #661814).
    - Avoid traceback when notification daemon has persistence (bug #671375).
    - Don't crash when DISPLAY is unset (bug #676339, #676343).
    - Improvements for DNS-SD support from Till Kamppeter
    - troubleshoot: handle wrong server name but right IP address.
    - Update printer properties after NewPrinter dialog has changed PPD/device.
    - Don't rely on CUPS_PRINTER_COMMANDS alone.
    - Use set_autowrap() from slip.gtk module when possible.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-1
changelog:
  - 1.3.0:
    - Prevent look-up failures in dnssdresolve (Ubuntu #716357).
    - Install libsane-hpaio when appropriate (bug #585362).
    - Avoid double-checking networked HPLIP-able devices.
    - Use #!/usr/bin/python throughout, even for non-executables.
    - Don't display tooltips in the jobviewer as they do not work at
      all.
    - Translation updates.


